server-core/app/api/routers/rbac_ecosystem.py

# -*- coding: utf-8 -*-
"""横切能力端点：通知/信用/合同/结算/争议/评价/投资撮合/路演参与。
"""
from __future__ import annotations

import asyncio
import json

from fastapi import APIRouter, Depends, HTTPException, Request
from pydantic import BaseModel

from ..dependencies import get_db
from ..schemas.ecosystem import RatingRequest, SignRequest, DisputeRequest
from ...rbac import require_permission, require_roles, write_audit
from ...infrastructure.repositories import Database

router = APIRouter(tags=["ecosystem"])

_ANY = ("opc_member", "carrier", "operator")


# ── 通知中心（实时通知体系）──────────────────────────────────────────────
@router.get("/notifications", summary="我的通知（分页/分类/已读筛选）")
async def list_notifications(
    db: Database = Depends(get_db),
    user: dict = Depends(require_roles(*_ANY)),
    category: str = "",
    read: str = "",
    page: int = 1,
    page_size: int = 50,
):
    read_flag = None if read == "" else (read == "1" or read.lower() == "true")
    res = await db.notifications.list_for(
        user["id"], limit=max(1, min(page_size, 100)),
        category=category, read=read_flag, page=page)
    return {"items": res["items"], "total": res["total"],
            "unread": await db.notifications.unread(user["id"]),
            "unread_by_category": await db.notifications.unread_by_category(user["id"])}


@router.post("/notifications/read-all", summary="全部已读")
async def read_all_notifications(
    db: Database = Depends(get_db),
    user: dict = Depends(require_roles(*_ANY)),
):
    return {"marked": await db.notifications.mark_read(user["id"])}


@router.post("/notifications/read/{notification_id}", summary="单条已读")
async def read_one_notification(
    notification_id: str,
    db: Database = Depends(get_db),
    user: dict = Depends(require_roles(*_ANY)),
):
    ok = await db.notifications.mark_read_one(user["id"], notification_id)
    return {"ok": ok}


@router.get("/notifications/unread-count", summary="未读计数（角标轮询/首屏）")
async def unread_count(
    db: Database = Depends(get_db),
    user: dict = Depends(require_roles(*_ANY)),
):
    return {"total": await db.notifications.unread(user["id"]),
            "by_category": await db.notifications.unread_by_category(user["id"])}


@router.get("/announcements", summary="平台公告（广播历史）")
async def list_announcements(
    db: Database = Depends(get_db),
    user: dict = Depends(require_roles(*_ANY)),
    limit: int = 20,
):
    return {"items": await db.announcements.list_recent(limit=max(1, min(limit, 50)))}


# ── 通知实时通道：SSE（MQTT 不可用时前端回退；token 鉴权，按 user 过滤）────
@router.get("/notify/events")
async def notify_events(request: Request, db: Database = Depends(get_db)):
    from fastapi.responses import StreamingResponse

    from ...jwt import decode_access_token
    from ...park.event_bus import bus

    token = request.query_params.get("token", "")
    auth = request.headers.get("Authorization", "")
    if auth.startswith("Bearer "):
        token = auth[7:]
    claims = decode_access_token(token) if token else None
    if not claims:
        from fastapi import HTTPException as _HTTPException

        raise _HTTPException(status_code=401, detail="unauthorized")
    uid = claims.get("sub") or claims.get("user_id") or ""

    async def gen():
        q = bus.subscribe()
        try:
            while True:
                if await request.is_disconnected():
                    break
                try:
                    data = await asyncio.wait_for(q.get(), 15)
                except Exception:  # noqa: BLE001 — 超时发 keepalive
                    yield ": keepalive\n\n"
                    continue
                try:
                    payload = json.loads(data)
                except Exception:  # noqa: BLE001
                    yield f"data: {data}\n\n"
                    continue
                # 只推当前用户相关（user_id == 本人 或 * 广播）
                if payload.get("user_id") in (uid, "*"):
                    yield f"data: {json.dumps(payload, ensure_ascii=False)}\n\n"
        finally:
            bus.unsubscribe(q)

    return StreamingResponse(gen(), media_type="text/event-stream")


# ── 信用/评价 ──────────────────────────────────────────────────────────────
@router.get("/me/credit", summary="我的信用")
async def my_credit(
    db: Database = Depends(get_db),
    user: dict = Depends(require_roles(*_ANY)),
):
    profile = await db.opc_profiles.get(user["id"])
    return {"credit_score": (profile or {}).get("credit_score", 80),
            "avg_rating": await db.ratings.avg_for(user["id"]),
            "rating_count": len(await db.ratings.list_for(user["id"])) if hasattr(db.ratings, "list_for") else 0}


@router.post("/tasks/{task_id}/rate", summary="任务互评")
async def rate_task(
    task_id: str,
    req: RatingRequest,
    request: Request,
    db: Database = Depends(get_db),
    actor: dict = Depends(require_roles("opc_member")),
):
    if not req.to_id:
        raise HTTPException(status_code=400, detail="缺少被评对象")
    rating = await db.ratings.create(task_id, actor["id"], req.to_id, req.score, req.comment,
                                     ip=request.client.host if request.client else "")
    # 信用事件：被评方按评分加分/减分（好评 +5/+10/+15，差评 -10/-20，按任务去重）
    from ...services.credit_engine import on_credit_event
    score = int(req.score)
    event_code = "task.review.positive" if score >= 3 else "task.review.negative"
    await on_credit_event(
        db, user_id=req.to_id, event_code=event_code,
        payload={"score": score}, ref_type="task", ref_id=task_id,
        reason=f"任务互评 {score} 星",
    )
    await write_audit(db, action="task.rate", resource="task", resource_id=task_id,
                detail=f"{req.score}星", user=actor, request=request)
    return rating


# ── 合同 ──────────────────────────────────────────────────────────────────
@router.get("/tasks/{task_id}/contract", summary="查看合同")
async def get_contract(
    task_id: str,
    db: Database = Depends(get_db),
    _u: dict = Depends(require_roles("opc_member")),
):
    contract = await db.contracts.get_for_task(task_id)
    if contract is None:
        raise HTTPException(status_code=404, detail="Contract not found")
    return contract


@router.post("/tasks/{task_id}/sign", summary="签订电子合同")
async def sign_contract(
    task_id: str,
    req: SignRequest,
    request: Request,
    db: Database = Depends(get_db),
    actor: dict = Depends(require_roles("opc_member")),
):
    from ...services.settlement_service import SettlementService

    contract = await SettlementService(db).sign_contract(task_id, actor, req.opc_id)
    await write_audit(db, action="contract.sign", resource="contract", resource_id=contract["id"],
                user=actor, request=request)
    return contract


# ── 结算托管 ──────────────────────────────────────────────────────────────
@router.post("/enterprise/tasks/{task_id}/release", summary="验收通过并结算")
async def release_escrow(
    task_id: str,
    request: Request,
    db: Database = Depends(get_db),
    actor: dict = Depends(require_roles("opc_member")),
):
    from ...services.settlement_service import SettlementService

    released = await SettlementService(db).release_escrow(task_id)
    await write_audit(db, action="escrow.release", resource="escrow", resource_id=released["id"],
                detail=f"amount={released['amount']}", user=actor, request=request)
    return released


@router.get("/operator/settlements", summary="运营结算台账")
async def operator_settlements(
    status: str | None = None,
    db: Database = Depends(get_db),
    _u: dict = Depends(require_permission("action:settlement.manage")),
):
    return {"items": await db.escrows.list(status=status)}


# ── 争议 ──────────────────────────────────────────────────────────────────
@router.post("/tasks/{task_id}/dispute", summary="发起争议")
async def create_dispute(
    task_id: str,
    req: DisputeRequest,
    request: Request,
    db: Database = Depends(get_db),
    actor: dict = Depends(require_roles("opc_member")),
):
    from ...services.settlement_service import SettlementService

    dispute = await SettlementService(db).create_dispute(task_id, actor, req.reason)
    await write_audit(db, action="dispute.open", resource="dispute", resource_id=dispute["id"],
                user=actor, request=request)
    return dispute


@router.post("/operator/disputes/{dispute_id}/resolve", summary="争议调解/解决")
async def resolve_dispute(
    dispute_id: str,
    request: Request,
    db: Database = Depends(get_db),
    actor: dict = Depends(require_roles("operator")),
):
    from ...services.settlement_service import SettlementService

    dispute = await SettlementService(db).resolve_dispute(dispute_id)
    await write_audit(db, action="dispute.resolve", resource="dispute", resource_id=dispute_id,
                user=actor, request=request)
    return dispute


# ── 投资撮合（按偏好排序项目）───────────────────────────────────────────────
@router.get("/investor/matches", summary="投资撮合（按偏好推荐）")
async def investor_matches(
    db: Database = Depends(get_db),
    user: dict = Depends(require_roles("opc_member")),
):
    from ...services.settlement_service import SettlementService

    return await SettlementService(db).investor_matches(user["id"])


# ── 路演参与（进入直播/出席）────────────────────────────────────────────────
@router.post("/roadshows/{roadshow_id}/join", summary="进入路演直播")
async def join_roadshow(
    roadshow_id: str,
    request: Request,
    db: Database = Depends(get_db),
    actor: dict = Depends(require_roles("opc_member", "operator", "carrier")),
):
    rs = await db.roadshows.get(roadshow_id)
    if rs is None:
        raise HTTPException(status_code=404, detail="Roadshow not found")
    # 标记出席（若已报名则更新为 attended；否则记录出席）
    await db.roadshow_regs.create(roadshow_id, actor["id"], role="attendee")
    await write_audit(db, action="roadshow.join", resource="roadshow", resource_id=roadshow_id,
                user=actor, request=request)
    return {"joined": True, "live_url": rs.get("live_url") or "http://live.example/roadshow"}