## Critical Issues (CRIT-001~003) - All Fixed
- JWT secret key validation with pydantic field_validator
- Login audit logging for success/failure attempts
- Frontend API path prefix removal
## High Priority Issues (HIGH-001~008) - All Fixed
- Project soft delete using is_active flag
- Redis session token bytes handling
- Rate limiting with slowapi (5 req/min for login)
- Attachment API permission checks
- Kanban view with drag-and-drop
- Workload heatmap UI (WorkloadPage, WorkloadHeatmap)
- TaskDetailModal integrating Comments/Attachments
- UserSelect component for task assignment
## Medium Priority Issues (MED-001~012) - All Fixed
- MED-001~005: DB commits, N+1 queries, datetime, error format, blocker flag
- MED-006: Project health dashboard (HealthService, ProjectHealthPage)
- MED-007: Capacity update API (PUT /api/users/{id}/capacity)
- MED-008: Schedule triggers (cron parsing, deadline reminders)
- MED-009: Watermark feature (image/PDF watermarking)
- MED-010~012: useEffect deps, DOM operations, PDF export
## New Files
- backend/app/api/health/ - Project health API
- backend/app/services/health_service.py
- backend/app/services/trigger_scheduler.py
- backend/app/services/watermark_service.py
- backend/app/core/rate_limiter.py
- frontend/src/pages/ProjectHealthPage.tsx
- frontend/src/components/ProjectHealthCard.tsx
- frontend/src/components/KanbanBoard.tsx
- frontend/src/components/WorkloadHeatmap.tsx
## Tests
- 113 new tests passing (health: 32, users: 14, triggers: 35, watermark: 32)
## OpenSpec Archives
- add-project-health-dashboard
- add-capacity-update-api
- add-schedule-triggers
- add-watermark-feature
- add-rate-limiting
- enhance-frontend-ux
- add-resource-management-ui
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
324 lines
12 KiB
Python
324 lines
12 KiB
Python
import json
|
|
import uuid
|
|
import re
|
|
import asyncio
|
|
import logging
|
|
import threading
|
|
from datetime import datetime, timezone
|
|
from typing import List, Optional, Dict, Set
|
|
from sqlalchemy.orm import Session
|
|
from sqlalchemy import event
|
|
|
|
from app.models import User, Notification, Task, Comment, Mention
|
|
from app.core.redis_pubsub import publish_notification as redis_publish, get_channel_name
|
|
from app.core.redis import get_redis_sync
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
# Thread-safe lock for module-level state
|
|
_lock = threading.Lock()
|
|
# Module-level queue for notifications pending publish after commit
|
|
_pending_publish: Dict[int, List[dict]] = {}
|
|
# Track which sessions have handlers registered
|
|
_registered_sessions: Set[int] = set()
|
|
|
|
|
|
def _sync_publish(user_id: str, data: dict):
|
|
"""Sync fallback to publish notification via Redis when no event loop available."""
|
|
try:
|
|
redis_client = get_redis_sync()
|
|
channel = get_channel_name(user_id)
|
|
message = json.dumps(data, default=str)
|
|
redis_client.publish(channel, message)
|
|
logger.debug(f"Sync published notification to channel {channel}")
|
|
except Exception as e:
|
|
logger.error(f"Failed to sync publish notification to Redis: {e}")
|
|
|
|
|
|
def _cleanup_session(session_id: int, remove_registration: bool = True):
|
|
"""Clean up session state after commit/rollback. Thread-safe.
|
|
|
|
Args:
|
|
session_id: The session ID to clean up
|
|
remove_registration: If True, also remove from _registered_sessions.
|
|
Set to False for soft_rollback to avoid handler stacking.
|
|
"""
|
|
with _lock:
|
|
if remove_registration:
|
|
_registered_sessions.discard(session_id)
|
|
return _pending_publish.pop(session_id, [])
|
|
|
|
|
|
def _register_session_handlers(db: Session, session_id: int):
|
|
"""Register after_commit, after_rollback, and after_soft_rollback handlers for a session."""
|
|
with _lock:
|
|
if session_id in _registered_sessions:
|
|
return
|
|
_registered_sessions.add(session_id)
|
|
|
|
@event.listens_for(db, "after_commit", once=True)
|
|
def _after_commit(session):
|
|
notifications = _cleanup_session(session_id)
|
|
if notifications:
|
|
try:
|
|
loop = asyncio.get_running_loop()
|
|
for n in notifications:
|
|
loop.create_task(_async_publish(n["user_id"], n["data"]))
|
|
except RuntimeError:
|
|
# No running event loop - use sync fallback
|
|
logger.info(f"No event loop, using sync publish for {len(notifications)} notification(s)")
|
|
for n in notifications:
|
|
_sync_publish(n["user_id"], n["data"])
|
|
|
|
@event.listens_for(db, "after_rollback", once=True)
|
|
def _after_rollback(session):
|
|
cleared = _cleanup_session(session_id)
|
|
if cleared:
|
|
logger.debug(f"Cleared {len(cleared)} pending notification(s) after rollback")
|
|
|
|
@event.listens_for(db, "after_soft_rollback", once=True)
|
|
def _after_soft_rollback(session, previous_transaction):
|
|
# Only clear pending notifications, keep handler registration to avoid stacking
|
|
cleared = _cleanup_session(session_id, remove_registration=False)
|
|
if cleared:
|
|
logger.debug(f"Cleared {len(cleared)} pending notification(s) after soft rollback")
|
|
|
|
|
|
async def _async_publish(user_id: str, data: dict):
|
|
"""Async helper to publish notification to Redis."""
|
|
try:
|
|
await redis_publish(user_id, data)
|
|
except Exception as e:
|
|
logger.error(f"Failed to publish notification to Redis: {e}")
|
|
|
|
|
|
class NotificationService:
|
|
"""Service for creating and managing notifications."""
|
|
|
|
MAX_MENTIONS_PER_COMMENT = 10
|
|
|
|
@staticmethod
|
|
def notification_to_dict(notification: Notification) -> dict:
|
|
"""Convert a Notification to a dict for publishing."""
|
|
created_at = notification.created_at
|
|
if created_at is None:
|
|
created_at = datetime.now(timezone.utc).replace(tzinfo=None)
|
|
return {
|
|
"id": notification.id,
|
|
"type": notification.type,
|
|
"reference_type": notification.reference_type,
|
|
"reference_id": notification.reference_id,
|
|
"title": notification.title,
|
|
"message": notification.message,
|
|
"is_read": notification.is_read,
|
|
"created_at": created_at.isoformat() if created_at else None,
|
|
}
|
|
|
|
@staticmethod
|
|
async def publish_notifications(notifications: List[Notification]) -> None:
|
|
"""Publish notifications to Redis for real-time WebSocket delivery."""
|
|
for notification in notifications:
|
|
if notification and notification.user_id:
|
|
data = NotificationService.notification_to_dict(notification)
|
|
await redis_publish(notification.user_id, data)
|
|
|
|
@staticmethod
|
|
async def publish_notification(notification: Optional[Notification]) -> None:
|
|
"""Publish a single notification to Redis."""
|
|
if notification:
|
|
await NotificationService.publish_notifications([notification])
|
|
|
|
@staticmethod
|
|
def _queue_for_publish(db: Session, notification: Notification):
|
|
"""Queue notification for auto-publish after commit. Thread-safe."""
|
|
session_id = id(db)
|
|
|
|
# Register handlers first (has its own lock)
|
|
_register_session_handlers(db, session_id)
|
|
|
|
# Store notification data (not object) for publishing
|
|
notification_data = {
|
|
"user_id": notification.user_id,
|
|
"data": NotificationService.notification_to_dict(notification),
|
|
}
|
|
|
|
with _lock:
|
|
if session_id not in _pending_publish:
|
|
_pending_publish[session_id] = []
|
|
_pending_publish[session_id].append(notification_data)
|
|
|
|
@staticmethod
|
|
def create_notification(
|
|
db: Session,
|
|
user_id: str,
|
|
notification_type: str,
|
|
reference_type: str,
|
|
reference_id: str,
|
|
title: str,
|
|
message: Optional[str] = None,
|
|
) -> Notification:
|
|
"""Create a notification for a user. Auto-publishes via Redis after commit."""
|
|
notification = Notification(
|
|
id=str(uuid.uuid4()),
|
|
user_id=user_id,
|
|
type=notification_type,
|
|
reference_type=reference_type,
|
|
reference_id=reference_id,
|
|
title=title,
|
|
message=message,
|
|
)
|
|
db.add(notification)
|
|
|
|
# Queue for auto-publish after commit
|
|
NotificationService._queue_for_publish(db, notification)
|
|
|
|
return notification
|
|
|
|
@staticmethod
|
|
def notify_task_assignment(
|
|
db: Session,
|
|
task: Task,
|
|
assigned_by: User,
|
|
) -> Optional[Notification]:
|
|
"""Notify user when they are assigned to a task."""
|
|
if not task.assignee_id or task.assignee_id == assigned_by.id:
|
|
return None
|
|
|
|
return NotificationService.create_notification(
|
|
db=db,
|
|
user_id=task.assignee_id,
|
|
notification_type="assignment",
|
|
reference_type="task",
|
|
reference_id=task.id,
|
|
title=f"You've been assigned to: {task.title}",
|
|
message=f"Assigned by {assigned_by.name}",
|
|
)
|
|
|
|
@staticmethod
|
|
def notify_blocker(
|
|
db: Session,
|
|
task: Task,
|
|
reported_by: User,
|
|
reason: str,
|
|
) -> List[Notification]:
|
|
"""Notify project owner when a task is blocked."""
|
|
notifications = []
|
|
|
|
# Notify project owner
|
|
project = task.project
|
|
if project and project.owner_id and project.owner_id != reported_by.id:
|
|
notification = NotificationService.create_notification(
|
|
db=db,
|
|
user_id=project.owner_id,
|
|
notification_type="blocker",
|
|
reference_type="task",
|
|
reference_id=task.id,
|
|
title=f"Task blocked: {task.title}",
|
|
message=f"Reported by {reported_by.name}: {reason[:100]}...",
|
|
)
|
|
notifications.append(notification)
|
|
|
|
return notifications
|
|
|
|
@staticmethod
|
|
def notify_blocker_resolved(
|
|
db: Session,
|
|
task: Task,
|
|
resolved_by: User,
|
|
reporter_id: str,
|
|
) -> Optional[Notification]:
|
|
"""Notify the original reporter when a blocker is resolved."""
|
|
if reporter_id == resolved_by.id:
|
|
return None
|
|
|
|
return NotificationService.create_notification(
|
|
db=db,
|
|
user_id=reporter_id,
|
|
notification_type="blocker_resolved",
|
|
reference_type="task",
|
|
reference_id=task.id,
|
|
title=f"Blocker resolved: {task.title}",
|
|
message=f"Resolved by {resolved_by.name}",
|
|
)
|
|
|
|
@staticmethod
|
|
def count_mentions(content: str) -> int:
|
|
"""Count the number of @mentions in content."""
|
|
pattern = r'@([a-zA-Z0-9._-]+(?:@[a-zA-Z0-9.-]+)?)'
|
|
matches = re.findall(pattern, content)
|
|
return len(matches)
|
|
|
|
@staticmethod
|
|
def parse_mentions(content: str) -> List[str]:
|
|
"""Extract @mentions from comment content. Returns list of email usernames."""
|
|
# Match @username patterns (alphanumeric and common email chars before @domain)
|
|
pattern = r'@([a-zA-Z0-9._-]+(?:@[a-zA-Z0-9.-]+)?)'
|
|
matches = re.findall(pattern, content)
|
|
return matches[:NotificationService.MAX_MENTIONS_PER_COMMENT]
|
|
|
|
@staticmethod
|
|
def process_mentions(
|
|
db: Session,
|
|
comment: Comment,
|
|
task: Task,
|
|
author: User,
|
|
) -> List[Notification]:
|
|
"""Process mentions in a comment and create notifications."""
|
|
notifications = []
|
|
mentioned_usernames = NotificationService.parse_mentions(comment.content)
|
|
|
|
if not mentioned_usernames:
|
|
return notifications
|
|
|
|
# Find users by email or name
|
|
for username in mentioned_usernames:
|
|
# Try to find user by email first
|
|
user = db.query(User).filter(
|
|
(User.email.ilike(f"{username}%")) | (User.name.ilike(f"%{username}%"))
|
|
).first()
|
|
|
|
if user and user.id != author.id:
|
|
# Create mention record
|
|
mention = Mention(
|
|
id=str(uuid.uuid4()),
|
|
comment_id=comment.id,
|
|
mentioned_user_id=user.id,
|
|
)
|
|
db.add(mention)
|
|
|
|
# Create notification
|
|
notification = NotificationService.create_notification(
|
|
db=db,
|
|
user_id=user.id,
|
|
notification_type="mention",
|
|
reference_type="comment",
|
|
reference_id=comment.id,
|
|
title=f"{author.name} mentioned you in: {task.title}",
|
|
message=comment.content[:100] + ("..." if len(comment.content) > 100 else ""),
|
|
)
|
|
notifications.append(notification)
|
|
|
|
return notifications
|
|
|
|
@staticmethod
|
|
def notify_comment_reply(
|
|
db: Session,
|
|
comment: Comment,
|
|
task: Task,
|
|
author: User,
|
|
parent_author_id: str,
|
|
) -> Optional[Notification]:
|
|
"""Notify original commenter when someone replies."""
|
|
if parent_author_id == author.id:
|
|
return None
|
|
|
|
return NotificationService.create_notification(
|
|
db=db,
|
|
user_id=parent_author_id,
|
|
notification_type="comment",
|
|
reference_type="comment",
|
|
reference_id=comment.id,
|
|
title=f"{author.name} replied to your comment on: {task.title}",
|
|
message=comment.content[:100] + ("..." if len(comment.content) > 100 else ""),
|
|
)
|