tps-dashboard/backend/app/api/dashboard.py

"""
仪表盘 API — 题图上传 / 查询

权限：
- POST /cover — 仅 zhipianren / zebian（biandao 返回 403）
- GET /cover  — 三角色均可读
"""

import os
import uuid
from datetime import datetime
from pathlib import Path

from fastapi import APIRouter, Depends, HTTPException, UploadFile, File, Form, status
from sqlmodel import Session, select

from app.core.deps import get_current_user, require_role
from app.db.session import get_session
from app.models.user import User, UserRole
from app.models.cover_settings import CoverSettings

router = APIRouter(prefix="/api/dashboard", tags=["仪表盘"])

# 题图文件存放目录（相对于 backend/）
STATIC_COVERS_DIR = Path(__file__).parent.parent.parent / "static" / "covers"
STATIC_COVERS_URL = "/static/covers"

# 确保目录存在
STATIC_COVERS_DIR.mkdir(parents=True, exist_ok=True)

ALLOWED_TYPES = {"image/png", "image/jpeg", "image/webp"}
MAX_SIZE = 5 * 1024 * 1024  # 5MB


def require_upload_role():
    return require_role(UserRole.zhipianren, UserRole.zebian)


@router.get("/cover")
def get_current_cover(
    session: Session = Depends(get_session),
    current_user: User = Depends(get_current_user),
):
    """查询当前题图设置（三角色均可读）。"""
    row = session.exec(
        select(CoverSettings).where(CoverSettings.key == "dashboard_cover")
    ).first()
    
    if not row:
        return {"cover_path": None, "episode_number": None, "episode_title": None}
    
    return {
        "cover_path": row.cover_path,
        "episode_number": row.episode_number,
        "episode_title": row.episode_title,
    }


@router.post("/cover")
def upload_cover(
    file: UploadFile = File(...),
    episode_number: int = Form(...),
    episode_title: str = Form(...),
    session: Session = Depends(get_session),
    current_user: User = Depends(require_upload_role()),
):
    """上传题图（仅制片人/责编）。
    
    文件存 static/covers/{uuid}.{ext}，更新 cover_settings 表。
    """
    # 校验文件类型
    if file.content_type not in ALLOWED_TYPES:
        raise HTTPException(
            status_code=status.HTTP_400_BAD_REQUEST,
            detail=f"仅支持 PNG/JPG/WEBP，当前：{file.content_type}",
        )

    # 校验文件大小
    contents = file.file.read()
    if len(contents) > MAX_SIZE:
        raise HTTPException(
            status_code=status.HTTP_400_BAD_REQUEST,
            detail="文件大小不能超过 5MB",
        )
    file.file.seek(0)

    # 生成文件名
    ext = file.filename.split(".")[-1] if "." in file.filename else "jpg"
    safe_ext = ext.lower() if ext.lower() in {"png", "jpg", "jpeg", "webp"} else "jpg"
    filename = f"{uuid.uuid4().hex}.{safe_ext}"
    filepath = STATIC_COVERS_DIR / filename

    # 写文件
    with open(filepath, "wb") as f:
        f.write(contents)

    cover_path = f"{STATIC_COVERS_URL}/{filename}"
    now = datetime.now()
    
    row = session.exec(
        select(CoverSettings).where(CoverSettings.key == "dashboard_cover")
    ).first()
    
    if row:
        row.cover_path = cover_path
        row.episode_number = episode_number
        row.episode_title = episode_title
        row.updated_at = now
    else:
        row = CoverSettings(
            key="dashboard_cover",
            cover_path=cover_path,
            episode_number=episode_number,
            episode_title=episode_title,
            updated_at=now,
        )
        session.add(row)
    
    session.commit()
    
    return {"success": True, "cover_path": cover_path}