"""프로젝트 관리(아사나식) 모듈 라우터. - 경로: /project - 권한: · 모듈 진입: 로그인한 회사 직원 전원(도메인 게이트는 OAuth 단에서 처리). · 프로젝트 생성/삭제·사용자 배정: ERP 관리자(is_admin) 전용. · 서브프로젝트/업무/단계 관리: 해당 프로젝트 멤버(또는 owner) 또는 관리자. - 데이터: ProjectStore (project_db / PostgreSQL) 전용. PROJECT_DB_URL 미설정 시 store 가 None 이며, 각 페이지는 "설정 필요" 안내. - 메일: 업무가 직원에게 '배정'되거나 '완료'되면 관리자에게 알림(BackgroundTasks). 뷰: 메인은 달력(FullCalendar)/타임라인(vis-timeline) 토글. 추가로 보드(칸반)·리스트. """ from __future__ import annotations import logging from typing import Any from fastapi import APIRouter, BackgroundTasks, Body, Depends, HTTPException, Request from fastapi.responses import HTMLResponse, JSONResponse, RedirectResponse from app.timezone import today_kst from . import store logger = logging.getLogger("project.router") router = APIRouter(prefix="/project", tags=["project"]) # ──────────────────────────────────────────────────────────── # 공용 헬퍼 # ──────────────────────────────────────────────────────────── def _store(request: Request) -> Any: return getattr(request.app.state, "project_store", None) def _require_user(request: Request) -> dict[str, Any]: from app.main import get_current_user_record # noqa: WPS433 user = get_current_user_record(request) if user is None: raise HTTPException(status_code=401, detail="로그인이 필요합니다.") return user def _require_admin(request: Request) -> dict[str, Any]: from app.store import is_admin # noqa: WPS433 user = _require_user(request) if not is_admin(user): raise HTTPException(status_code=403, detail="관리자만 할 수 있는 작업입니다.") return user def _can_manage(request: Request, st: Any, user: dict[str, Any], project_id: int) -> bool: """프로젝트 단위 관리 권한: 관리자이거나 멤버/owner.""" from app.store import is_admin # noqa: WPS433 if is_admin(user): return True return bool(st.is_member(project_id=project_id, user_email=user["email"])) def _require_manage(request: Request, st: Any, user: dict[str, Any], project_id: int) -> None: if not _can_manage(request, st, user, project_id): raise HTTPException(status_code=403, detail="이 프로젝트에 대한 권한이 없습니다.") def _admin_emails(request: Request) -> list[str]: """알림 수신 관리자 이메일 목록. PROJECT_NOTIFY_EMAIL(쉼표구분)이 있으면 우선, 없으면 user_store 의 admin 전원. """ import os override = (os.getenv("PROJECT_NOTIFY_EMAIL", "") or "").strip() if override: return [e.strip() for e in override.split(",") if e.strip()] from app.main import user_store # noqa: WPS433 from app.store import is_admin # noqa: WPS433 return [u["email"] for u in user_store.list_all() if is_admin(u)] def _notify( bg: BackgroundTasks, request: Request, *, subject: str, body: str ) -> None: """관리자에게 백그라운드 메일 발송 예약. 수신자 없거나 SMTP 미설정 시 조용히 skip.""" from app.mail import send_email # noqa: WPS433 recipients = _admin_emails(request) if not recipients: return bg.add_task(send_email, to=recipients, subject=subject, body=body) def _render_config_needed(request: Request, user: dict[str, Any]) -> HTMLResponse: from app.main import build_erp_nav, render_template # noqa: WPS433 from app.store import is_admin # noqa: WPS433 return render_template( request, "denied.html", { "reason": "프로젝트 관리 모듈이 아직 설정되지 않았습니다. " "PROJECT_DB_URL 환경변수를 설정하고 " "scripts/sql/project_db_init.sql 로 project_db 를 초기화한 뒤 " "컨테이너를 재기동하세요.", "user": user, "is_admin": is_admin(user), "nav_items": build_erp_nav(user, active="project"), }, status_code=503, ) def _build_tree(projects: list[dict[str, Any]]) -> list[dict[str, Any]]: """평면 프로젝트 목록 → parent_id 기준 트리(children 키).""" by_id: dict[int, dict[str, Any]] = {} roots: list[dict[str, Any]] = [] for p in projects: p = {**p, "children": []} by_id[p["id"]] = p for p in by_id.values(): parent_id = p.get("parent_id") if parent_id and parent_id in by_id: by_id[parent_id]["children"].append(p) else: roots.append(p) return roots # ──────────────────────────────────────────────────────────── # 페이지 # ──────────────────────────────────────────────────────────── @router.get("/health") async def health(request: Request) -> JSONResponse: st = _store(request) if st is None: return JSONResponse({"status": "not_configured"}, status_code=503) try: st.list_projects(include_archived=False) return JSONResponse({"status": "ok"}) except Exception as exc: # noqa: BLE001 return JSONResponse({"status": "error", "detail": str(exc)}, status_code=500) @router.get("/", response_class=HTMLResponse) async def index(request: Request) -> HTMLResponse: from app.main import build_erp_nav, render_template # noqa: WPS433 from app.store import is_admin # noqa: WPS433 user = _require_user(request) st = _store(request) if st is None: return _render_config_needed(request, user) admin = is_admin(user) projects = st.list_projects( include_archived=False, member_email=None if admin else user["email"], ) tree = _build_tree(projects) my_tasks = st.list_tasks(assignee_email=user["email"], limit=500) return render_template( request, "project/index.html", { "user": user, "is_admin": admin, "nav_items": build_erp_nav(user, active="project"), "page_title": "프로젝트 관리", "page_subtitle": "달력·타임라인·보드로 프로젝트를 관리하세요.", "tree": tree, "my_tasks": my_tasks, "today": today_kst().isoformat(), }, ) @router.get("/p/{project_id}", response_class=HTMLResponse) async def project_page(request: Request, project_id: int) -> HTMLResponse: from app.main import build_erp_nav, render_template # noqa: WPS433 from app.store import is_admin # noqa: WPS433 user = _require_user(request) st = _store(request) if st is None: return _render_config_needed(request, user) project = st.get_project(project_id=project_id) if project is None: raise HTTPException(status_code=404, detail="프로젝트를 찾을 수 없습니다.") admin = is_admin(user) all_projects = st.list_projects( include_archived=False, member_email=None if admin else user["email"], ) tree = _build_tree(all_projects) stages = st.list_stages(project_id=project_id) tasks = st.list_tasks(project_id=project_id, include_subprojects=True, limit=2000) members = st.list_members(project_id=project_id) can_manage = _can_manage(request, st, user, project_id) subprojects = [p for p in all_projects if p.get("parent_id") == project_id] return render_template( request, "project/project.html", { "user": user, "is_admin": admin, "can_manage": can_manage, "nav_items": build_erp_nav(user, active="project"), "page_title": project["name"], "page_subtitle": project.get("description") or "프로젝트 보드", "project": project, "tree": tree, "stages": stages, "tasks": tasks, "members": members, "subprojects": subprojects, "priority_labels": store.PRIORITY_LABELS, "color_palette": list(store.COLOR_PALETTE), "today": today_kst().isoformat(), }, ) # ──────────────────────────────────────────────────────────── # JSON API — 프로젝트 # ──────────────────────────────────────────────────────────── def _db_or_503(request: Request) -> Any: st = _store(request) if st is None: raise HTTPException(status_code=503, detail="프로젝트 모듈이 설정되지 않았습니다.") return st @router.get("/api/projects") async def api_list_projects(request: Request) -> JSONResponse: from app.store import is_admin # noqa: WPS433 user = _require_user(request) st = _db_or_503(request) admin = is_admin(user) projects = st.list_projects( include_archived=False, member_email=None if admin else user["email"], ) return JSONResponse({"projects": projects, "tree": _build_tree(projects)}) @router.post("/api/projects") async def api_create_project( request: Request, payload: dict[str, Any] = Body(...) ) -> JSONResponse: """최상위 프로젝트 생성 — 관리자 전용.""" user = _require_admin(request) st = _db_or_503(request) try: project = st.create_project( name=payload.get("name", ""), parent_id=None, description=payload.get("description", ""), color=payload.get("color", ""), owner_email=payload.get("owner_email", "") or user["email"], start_date=payload.get("start_date"), due_date=payload.get("due_date"), created_by=user["email"], ) except ValueError as exc: raise HTTPException(status_code=400, detail=str(exc)) return JSONResponse({"project": project}, status_code=201) @router.post("/api/projects/{project_id}/subprojects") async def api_create_subproject( request: Request, project_id: int, payload: dict[str, Any] = Body(...) ) -> JSONResponse: """서브프로젝트 생성 — 멤버(또는 관리자).""" user = _require_user(request) st = _db_or_503(request) _require_manage(request, st, user, project_id) try: project = st.create_project( name=payload.get("name", ""), parent_id=project_id, description=payload.get("description", ""), color=payload.get("color", ""), owner_email=payload.get("owner_email", "") or user["email"], start_date=payload.get("start_date"), due_date=payload.get("due_date"), created_by=user["email"], ) except ValueError as exc: raise HTTPException(status_code=400, detail=str(exc)) except KeyError as exc: raise HTTPException(status_code=404, detail=str(exc)) return JSONResponse({"project": project}, status_code=201) @router.put("/api/projects/{project_id}") async def api_update_project( request: Request, project_id: int, payload: dict[str, Any] = Body(...) ) -> JSONResponse: user = _require_user(request) st = _db_or_503(request) _require_manage(request, st, user, project_id) try: project = st.update_project(project_id=project_id, fields=payload) except ValueError as exc: raise HTTPException(status_code=400, detail=str(exc)) except KeyError: raise HTTPException(status_code=404, detail="프로젝트를 찾을 수 없습니다.") return JSONResponse({"project": project}) @router.delete("/api/projects/{project_id}") async def api_delete_project(request: Request, project_id: int) -> JSONResponse: """프로젝트 삭제 — 서브프로젝트는 멤버도, 최상위는 관리자만. 아사나 요구사항: 배정된 사용자는 '서브프로젝트' 추가/삭제 가능. 최상위 프로젝트 삭제는 관리자 전용. """ from app.store import is_admin # noqa: WPS433 user = _require_user(request) st = _db_or_503(request) project = st.get_project(project_id=project_id) if project is None: raise HTTPException(status_code=404, detail="프로젝트를 찾을 수 없습니다.") is_sub = project.get("parent_id") is not None if is_sub: _require_manage(request, st, user, project_id) elif not is_admin(user): raise HTTPException(status_code=403, detail="최상위 프로젝트 삭제는 관리자만 가능합니다.") st.delete_project(project_id=project_id) return JSONResponse({"ok": True}) # ──────────────────────────────────────────────────────────── # JSON API — 멤버 (관리자가 사용자 배정) # ──────────────────────────────────────────────────────────── @router.get("/api/projects/{project_id}/members") async def api_list_members(request: Request, project_id: int) -> JSONResponse: _require_user(request) st = _db_or_503(request) return JSONResponse({"members": st.list_members(project_id=project_id)}) @router.post("/api/projects/{project_id}/members") async def api_add_member( request: Request, project_id: int, payload: dict[str, Any] = Body(...) ) -> JSONResponse: """사용자를 프로젝트에 배정 — 관리자 전용.""" _require_admin(request) st = _db_or_503(request) try: member = st.add_member( project_id=project_id, user_email=payload.get("user_email", ""), user_name=payload.get("user_name", ""), role=payload.get("role", "member"), ) except ValueError as exc: raise HTTPException(status_code=400, detail=str(exc)) return JSONResponse({"member": member}, status_code=201) @router.delete("/api/projects/{project_id}/members/{user_email}") async def api_remove_member( request: Request, project_id: int, user_email: str ) -> JSONResponse: _require_admin(request) st = _db_or_503(request) st.remove_member(project_id=project_id, user_email=user_email) return JSONResponse({"ok": True}) # ──────────────────────────────────────────────────────────── # JSON API — 단계 (stages) # ──────────────────────────────────────────────────────────── @router.get("/api/projects/{project_id}/stages") async def api_list_stages(request: Request, project_id: int) -> JSONResponse: _require_user(request) st = _db_or_503(request) return JSONResponse({"stages": st.list_stages(project_id=project_id)}) @router.post("/api/projects/{project_id}/stages") async def api_add_stage( request: Request, project_id: int, payload: dict[str, Any] = Body(...) ) -> JSONResponse: user = _require_user(request) st = _db_or_503(request) _require_manage(request, st, user, project_id) try: stage = st.add_stage( project_id=project_id, name=payload.get("name", ""), is_done_stage=bool(payload.get("is_done_stage", False)), ) except ValueError as exc: raise HTTPException(status_code=400, detail=str(exc)) return JSONResponse({"stage": stage}, status_code=201) @router.delete("/api/projects/{project_id}/stages/{stage_id}") async def api_delete_stage( request: Request, project_id: int, stage_id: int ) -> JSONResponse: user = _require_user(request) st = _db_or_503(request) _require_manage(request, st, user, project_id) try: st.delete_stage(stage_id=stage_id) except KeyError: raise HTTPException(status_code=404, detail="단계를 찾을 수 없습니다.") return JSONResponse({"ok": True}) # ──────────────────────────────────────────────────────────── # JSON API — 업무 (tasks) # ──────────────────────────────────────────────────────────── @router.get("/api/projects/{project_id}/tasks") async def api_list_tasks(request: Request, project_id: int) -> JSONResponse: _require_user(request) st = _db_or_503(request) tasks = st.list_tasks(project_id=project_id, include_subprojects=True, limit=2000) return JSONResponse({"tasks": tasks}) @router.get("/api/my-tasks") async def api_my_tasks(request: Request) -> JSONResponse: user = _require_user(request) st = _db_or_503(request) return JSONResponse({"tasks": st.list_tasks(assignee_email=user["email"], limit=1000)}) @router.post("/api/projects/{project_id}/tasks") async def api_create_task( request: Request, project_id: int, bg: BackgroundTasks, payload: dict[str, Any] = Body(...), ) -> JSONResponse: user = _require_user(request) st = _db_or_503(request) _require_manage(request, st, user, project_id) project = st.get_project(project_id=project_id) if project is None: raise HTTPException(status_code=404, detail="프로젝트를 찾을 수 없습니다.") try: task = st.create_task( project_id=project_id, title=payload.get("title", ""), stage_id=payload.get("stage_id"), description=payload.get("description", ""), assignee_email=payload.get("assignee_email", ""), assignee_name=payload.get("assignee_name", ""), priority=payload.get("priority", "normal"), start_date=payload.get("start_date"), due_date=payload.get("due_date"), created_by=user["email"], ) except ValueError as exc: raise HTTPException(status_code=400, detail=str(exc)) # 생성과 동시에 담당자 지정 시 관리자 알림 if task.get("assignee_email"): _notify( bg, request, subject=store.build_subject_assigned( project_name=project["name"], task_title=task["title"], assignee=task["assignee_email"], ), body=( f"프로젝트: {project['name']}\n" f"업무: {task['title']}\n" f"담당자: {task.get('assignee_name') or task['assignee_email']} " f"({task['assignee_email']})\n" f"마감일: {task.get('due_date') or '-'}\n" f"등록자: {user['email']}\n" ), ) return JSONResponse({"task": task}, status_code=201) @router.put("/api/tasks/{task_id}") async def api_update_task( request: Request, task_id: int, bg: BackgroundTasks, payload: dict[str, Any] = Body(...), ) -> JSONResponse: user = _require_user(request) st = _db_or_503(request) existing = st.get_task(task_id=task_id) if existing is None: raise HTTPException(status_code=404, detail="업무를 찾을 수 없습니다.") _require_manage(request, st, user, existing["project_id"]) try: task = st.update_task(task_id=task_id, fields=payload, actor=user["email"]) except ValueError as exc: raise HTTPException(status_code=400, detail=str(exc)) except KeyError: raise HTTPException(status_code=404, detail="업무를 찾을 수 없습니다.") project_name = task.get("project_name") or "" if task.get("_newly_assigned"): _notify( bg, request, subject=store.build_subject_assigned( project_name=project_name, task_title=task["title"], assignee=task["_newly_assigned"], ), body=( f"프로젝트: {project_name}\n" f"업무: {task['title']}\n" f"담당자: {task.get('assignee_name') or task['_newly_assigned']} " f"({task['_newly_assigned']})\n" f"마감일: {task.get('due_date') or '-'}\n" f"변경자: {user['email']}\n" ), ) if task.get("_newly_completed"): _notify( bg, request, subject=store.build_subject_completed( project_name=project_name, task_title=task["title"] ), body=( f"프로젝트: {project_name}\n" f"완료된 업무: {task['title']}\n" f"담당자: {task.get('assignee_name') or task.get('assignee_email') or '-'}\n" f"완료 처리: {user['email']}\n" ), ) return JSONResponse({"task": task}) @router.delete("/api/tasks/{task_id}") async def api_delete_task(request: Request, task_id: int) -> JSONResponse: user = _require_user(request) st = _db_or_503(request) existing = st.get_task(task_id=task_id) if existing is None: raise HTTPException(status_code=404, detail="업무를 찾을 수 없습니다.") _require_manage(request, st, user, existing["project_id"]) st.delete_task(task_id=task_id) return JSONResponse({"ok": True}) @router.get("/api/projects/{project_id}/activity") async def api_activity(request: Request, project_id: int) -> JSONResponse: _require_user(request) st = _db_or_503(request) return JSONResponse({"activity": st.list_activity(project_id=project_id, limit=100)})