from django.conf import settings from django.contrib import messages from django.contrib.auth.decorators import login_required, user_passes_test from django.http import ( HttpResponseBadRequest, HttpResponseForbidden, HttpResponse, JsonResponse ) from django.template.loader import render_to_string from django.views.decorators.http import require_http_methods, require_POST from django.shortcuts import get_object_or_404, redirect, render from django.utils import timezone from .forms import IssueRefForm, ReferenceConfirmForm, ReferenceEditForm, LetterBodyForm from .models import Sector, Reference, GlobalCounter from .services import peek_next_index, issue_reference from pathlib import Path from docxtpl import DocxTemplate from html2docx import html2docx from docx import Document from htmldocx import HtmlToDocx from uuid import uuid4 import tempfile, os, shutil, base64, html, io, docx, re from django.db import transaction, IntegrityError import html as py_html from html import escape as html_escape from bs4 import BeautifulSoup from pathlib import Path import re # ---------- helpers ---------- def _is_manager(user): return user.is_staff or user.is_superuser def _can_edit(user, ref: Reference) -> bool: return _is_manager(user) or ref.assigned_to_id == user.id def _can_delete(user, ref: Reference) -> bool: if _is_manager(user): last = Reference.objects.order_by("-created_at", "-id").first() return bool(last and last.pk == ref.pk) last_user = ( Reference.objects .filter(assigned_to=user) .order_by("-created_at", "-id") .first() ) return bool(last_user and last_user.pk == ref.pk) # ---------- main pages ---------- @login_required def dashboard(request): is_manager = request.user.is_staff or request.user.is_superuser if is_manager: qs = ( Reference.objects .select_related("assigned_to") .order_by("-created_at", "-id")[:50] ) last_overall = Reference.objects.order_by("-created_at", "-id").first() last_id_for_user = last_overall.id if last_overall else None else: qs = ( Reference.objects .filter(assigned_to=request.user) .select_related("assigned_to") .order_by("-created_at", "-id")[:50] ) last_user = ( Reference.objects .filter(assigned_to=request.user) .order_by("-created_at", "-id") .first() ) last_id_for_user = last_user.id if last_user else None # Render the sector select from IssueRefForm so choices are always present. dash_form = IssueRefForm() dash_form.fields["sector"].widget.attrs.update({ "class": "form-select", "id": "dashDepartmentSelect", # JS looks this up }) return render(request, "refs/dashboard.html", { "form": dash_form, "recent": qs, "show_user_col": is_manager, "last_id_for_user": last_id_for_user, "is_manager": is_manager, "sectors": Sector.choices, }) # ---------- modal endpoints (used by popup) ---------- def _counter_should_reset(last: Reference, now, policy: str) -> bool: """ Return True when the counter must reset comparing last Reference vs now. policy: 'yearly' | 'monthly' | 'daily' (case-insensitive). If last is None -> reset. """ if not policy: return False policy = policy.lower() if last is None: return True try: last_dt = timezone.localtime(last.created_at) except Exception: # fallback if created_at missing/naive try: last_dt = timezone.make_aware(last.created_at) except Exception: return False if policy == "yearly": return last_dt.year != now.year if policy == "monthly": return (last_dt.year != now.year) or (last_dt.month != now.month) if policy == "daily": return (last_dt.year != now.year) or (last_dt.month != now.month) or (last_dt.day != now.day) return False @require_POST @login_required def preview_reference_json(request): """ POST with sector -> return modal HTML + preview string. Includes reset logic: if REF_INDEX_RESET_POLICY == 'yearly' and last Reference is from a previous year we preview index 1 without mutating DB. """ form = IssueRefForm(request.POST) if not form.is_valid(): return JsonResponse({"ok": False, "error": "Invalid sector."}, status=400) sector = form.cleaned_data["sector"] now = timezone.localtime() # Default next index from counter counter, _ = GlobalCounter.objects.get_or_create(scope_key="global", defaults={"next_index": 1}) next_idx = counter.next_index # Apply reset policy for preview (no DB change) policy = getattr(settings, "REF_INDEX_RESET_POLICY", "").lower() if policy in ("yearly", "monthly", "daily"): last = Reference.objects.order_by("-created_at", "-id").first() if _counter_should_reset(last, now, policy): next_idx = 1 else: try: last_year = int(getattr(last, "year", None)) if getattr(last, "year", None) else timezone.localtime(last.created_at).year except Exception: last_year = timezone.localtime(last.created_at).year if last_year != now.year: next_idx = 1 preview_ref = f"{next_idx:03d}/RU&CO/{sector}/{now.day:02d}/{now.month:02d}/{now.year}" confirm_form = ReferenceConfirmForm(initial={ "sector": sector, "status": "RESERVED", "index": next_idx, "day": now.day, "month": now.month, "year": now.year, }) html = render_to_string( "refs/_reference_confirm_modal.html", {"preview_ref": preview_ref, "confirm_form": confirm_form}, request=request, ) return JsonResponse({"ok": True, "html": html, "preview_ref": preview_ref}) @require_http_methods(["POST"]) @login_required def confirm_reference(request): """ POST with ReferenceConfirmForm. Atomically consumes the next index from GlobalCounter and creates a Reference. Honors REF_INDEX_RESET_POLICY (yearly reset). """ form = ReferenceConfirmForm(request.POST or None) if not form.is_valid(): return JsonResponse({"ok": False, "error": "Please correct the form.", "errors": form.errors}, status=400) sector = form.cleaned_data["sector"] # e.g. "LIT" title = form.cleaned_data["title"].strip() status = form.cleaned_data["status"].upper() # ensure "ISSUED"/"RESERVED" # Validate against your choices valid_statuses = {choice[0] for choice in Reference.STATUS_CHOICES} if status not in valid_statuses: return JsonResponse({"ok": False, "error": "Invalid status."}, status=400) now = timezone.localtime() with transaction.atomic(): # Lock or create the single global counter row counter = ( GlobalCounter.objects .select_for_update() .get_or_create(scope_key="global", defaults={"next_index": 1})[0] ) # Apply reset policy before consuming policy = getattr(settings, "REF_INDEX_RESET_POLICY", "").lower() if policy in ("yearly", "monthly", "daily"): last = Reference.objects.order_by("-created_at", "-id").first() if _counter_should_reset(last, now, policy): counter.next_index = 1 else: try: last_year = int(getattr(last, "year", None)) if getattr(last, "year", None) else timezone.localtime(last.created_at).year except Exception: last_year = timezone.localtime(last.created_at).year if last_year != now.year: counter.next_index = 1 # consume index idx = counter.next_index counter.next_index = idx + 1 counter.save(update_fields=["next_index"]) # Create the Reference using your model fields ref = Reference.objects.create( index=idx, sector=sector, day=now.day, month=now.month, year=now.year, title=title, status=status, # "ISSUED" or "RESERVED" assigned_to=request.user, ) # Use model's ref_string() for the final string return JsonResponse({"ok": True, "reference": ref.ref_string(), "id": ref.id}) # ---------- staff manage ---------- @user_passes_test(_is_manager) def manage_references(request): items = Reference.objects.select_related("assigned_to").order_by("-created_at", "-id") last = items.first() last_id = last.id if last else None return render(request, "refs/manage.html", {"items": items, "last_id": last_id}) # ---------- edit / delete ---------- @login_required @require_http_methods(["GET", "POST"]) def edit_reference(request, pk: int): ref = get_object_or_404(Reference, pk=pk) if not _can_edit(request.user, ref): return HttpResponseForbidden("You cannot edit this reference.") if request.method == "POST": form = ReferenceEditForm(request.POST, instance=ref) if form.is_valid(): form.save() messages.success(request, "Reference updated.") return redirect("manage_references" if _is_manager(request.user) else "dashboard") messages.error(request, "Please correct the errors below.") else: form = ReferenceEditForm(instance=ref) return render(request, "refs/edit_reference.html", {"form": form, "ref": ref}) @login_required @require_http_methods(["POST"]) def delete_reference(request, pk: int): ref = get_object_or_404(Reference, pk=pk) if not _can_delete(request.user, ref): messages.error(request, "Only your latest reference (or latest overall if staff) can be deleted.") return redirect("manage_references" if _is_manager(request.user) else "dashboard") ref.delete() messages.success(request, "Reference deleted.") return redirect("manage_references" if _is_manager(request.user) else "dashboard") # ---------- letter (unchanged root paths) ---------- TEMPLATE_PATH = Path(settings.BASE_DIR) / "static" / "templates" / "letterhead_template.docx" TMP_DIR = Path(getattr(settings, "MEDIA_ROOT", Path(settings.BASE_DIR) / "media")) / "tmp_letters" TMP_DIR.mkdir(parents=True, exist_ok=True) # -------------------------------------------------------------------------- # helpers for the letter pipeline (robust to htmldocx API differences) # -------------------------------------------------------------------------- def _html_to_docx_file(html_str: str, out_path: str) -> None: """ Convert prepared HTML -> .docx preserving: - paragraph boundaries (

,

,

-

) - lists (