KCGL/inventory-backend/app/__init__.py

# 文件路径: inventory-backend/app/__init__.py

from flask import Flask, jsonify
from config import Config
from app.extensions import db, migrate, cors, jwt
from app.api.v1.scan import scan_bp
import os


def create_app():
    app = Flask(__name__)
    app.config.from_object(Config)

    # =========================================================
    # 1. 初始化插件
    # =========================================================
    db.init_app(app)
    migrate.init_app(app, db)
    jwt.init_app(app)  # 初始化 JWT

    # 允许所有 /api/ 开头的请求跨域，支持 credentials
    cors.init_app(app, resources={r"/*": {"origins": "*"}}, supports_credentials=True)

    # =========================================================
    # 1.1 [已迁移] 审计日志监听器注册
    #
    # 原注册的是 app/utils/audit_events.py 的全局监听器（监听 db.Model、
    # 无白名单、无请求上下文守卫），已停用；审计统一由
    # app/core/audit_listener.py 接管。
    #
    # ★ 注册动作已移至本函数末尾（见「5. 注册审计监听器」），
    #   因为此处模型尚未全部映射，会导致 scrap_approval 等表被静默漏掉。
    # =========================================================
    # 2. 注册蓝图 (Blueprints)
    # ---------------------------------------------------------
    # 注意：为了解决前端请求不带 /v1 导致的 404 错误，
    # 下面的模块都采用了 "双重注册" 策略：
    # 1. 标准地址: /api/v1/...
    # 2. 兼容地址: /api/... (name 参数必须不同)
    # =========================================================

    # -----------------------------------------------------
    # 2.0 注册权限与认证模块 (Auth)
    # -----------------------------------------------------
    try:
        from app.api.v1.auth import auth_bp
        # 标准
        app.register_blueprint(auth_bp, url_prefix='/api/v1/auth')
        # 兼容 (防止前端忘记写 v1)
        app.register_blueprint(auth_bp, url_prefix='/api/auth', name='auth_legacy')
        print("✅ Auth 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: Auth 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.1 注册入库聚合模块 (Inbound)
    # -----------------------------------------------------
    try:
        from app.api.v1.inbound import inbound_bp
        # 标准: /api/v1/inbound/base/list
        app.register_blueprint(inbound_bp, url_prefix='/api/v1/inbound')

        # 兼容: /api/inbound/base/list (修复前端 404)
        app.register_blueprint(inbound_bp, url_prefix='/api/inbound', name='inbound_legacy')
        print("✅ Inbound 模块注册成功 (已启用兼容模式: /api/inbound)")
    except ImportError as e:
        print(f"❌ 错误: Inbound 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.2 注册通用打印模块 (Common Print)
    # -----------------------------------------------------
    try:
        from app.api.v1.common.print import print_bp
        app.register_blueprint(print_bp, url_prefix='/api/v1/common/print')
        app.register_blueprint(print_bp, url_prefix='/api/common/print', name='print_legacy')
        print("✅ Print 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: Print 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.3 注册通用上传模块 (Common Upload)
    # -----------------------------------------------------
    try:
        from app.api.v1.common.upload import upload_bp
        app.register_blueprint(upload_bp, url_prefix='/api/v1/common')
        app.register_blueprint(upload_bp, url_prefix='/api/common', name='upload_legacy')
        print("✅ Upload 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: Upload 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.4 注册以图搜图模块 (Image Search)
    # -----------------------------------------------------
    try:
        from app.api.v1.common.image_search import image_search_bp
        app.register_blueprint(image_search_bp, url_prefix='/api/v1/common')
        app.register_blueprint(image_search_bp, url_prefix='/api/common', name='image_search_legacy')
        print("✅ Image Search 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: Image Search 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.4 注册业务操作模块 (Transactions - 借还/维修/报废)
    # -----------------------------------------------------
    try:
        from app.api.v1.transactions import trans_bp
        # 标准: /api/v1/transactions/borrow
        app.register_blueprint(trans_bp, url_prefix='/api/v1/transactions')
        # 兼容: /api/transactions/borrow
        app.register_blueprint(trans_bp, url_prefix='/api/transactions', name='trans_legacy')
        print("✅ Transactions 模块注册成功")
    except ImportError as e:
        print(f"⚠️ 提示: Transaction 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.5 注册出库模块 (Outbound)
    # -----------------------------------------------------
    try:
        from app.api.v1.outbound import outbound_bp
        # 标准: /api/v1/outbound
        app.register_blueprint(outbound_bp, url_prefix='/api/v1/outbound')
        # 兼容: /api/outbound
        app.register_blueprint(outbound_bp, url_prefix='/api/outbound', name='outbound_legacy')
        print("✅ Outbound 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: Outbound 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.6 注册报废模块
    # -----------------------------------------------------
    try:
        from app.api.v1.scrap import scrap_bp
        app.register_blueprint(scrap_bp, url_prefix='/api/v1/scrap')
        print("✅ Scrap 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: Scrap 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.8 注册采购管理模块
    # -----------------------------------------------------
    try:
        from app.api.v1.purchase import purchase_bp
        app.register_blueprint(purchase_bp, url_prefix='/api/v1/purchase')
        app.register_blueprint(purchase_bp, url_prefix='/api/purchase', name='purchase_legacy')
        print("✅ Purchase 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: Purchase 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.7 注册 BOM 模块
    # -----------------------------------------------------
    try:
        from app.api.v1.bom import bom_bp
        # 标准: /api/v1/bom
        app.register_blueprint(bom_bp, url_prefix='/api/v1/bom')
        # 兼容: /api/bom
        app.register_blueprint(bom_bp, url_prefix='/api/bom', name='bom_legacy')
        print("✅ BOM 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: BOM 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.7 注册权限管理模块 (Permission) - [新增]
    # -----------------------------------------------------
    try:
        from app.api.v1.permission import permission_bp
        # 标准: /api/v1/permissions/tree
        app.register_blueprint(permission_bp, url_prefix='/api/v1/permissions')
        # 兼容: /api/permissions/tree
        app.register_blueprint(permission_bp, url_prefix='/api/permissions', name='permission_legacy')
        print("✅ Permission 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: Permission 模块导入失败 (请检查 app/api/v1/permission.py 是否存在): {e}")

    # 2.8 注册审计日志模块 (Audit)
    # -----------------------------------------------------
    try:
        from app.api.v1.audit import audit_bp
        # 标准: /api/v1/audit/logs
        app.register_blueprint(audit_bp, url_prefix='/api/v1/audit')
        # 兼容: /api/audit/logs
        app.register_blueprint(audit_bp, url_prefix='/api/audit', name='audit_legacy')
        print("✅ Audit 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: Audit 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.8 我的申请单（跨模块聚合，申请人视角）
    #     仅需登录态，applicant_id 硬编码为当前用户；
    #     与各模块的审批端点（管理视角）严格分离。
    # -----------------------------------------------------
    try:
        from app.api.v1.my_requests import my_requests_bp
        app.register_blueprint(my_requests_bp, url_prefix='/api/v1/my-requests')
        app.register_blueprint(my_requests_bp, url_prefix='/api/my-requests', name='my_requests_legacy')
        print("✅ MyRequests 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: MyRequests 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.85 扫码草稿（出库/借库作业中途暂停用）
    #      按 (user_id, biz_type, request_id) 隔离，仅需登录态。
    #      模型在此显式导入，确保审计监听器注册时已进入 db.metadata。
    # -----------------------------------------------------
    try:
        from app.models.scan_draft import ScanDraft  # noqa: F401
        from app.api.v1.scan_draft import scan_draft_bp
        app.register_blueprint(scan_draft_bp, url_prefix='/api/v1/scan-draft')
        app.register_blueprint(scan_draft_bp, url_prefix='/api/scan-draft', name='scan_draft_legacy')
        print("✅ ScanDraft 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: ScanDraft 模块导入失败: {e}")

    # 2.9 初始化审计日志菜单和权限（防重复）
    # -----------------------------------------------------
    try:
        from app.services.permission_service import PermissionService
        with app.app_context():
            # 先清理旧版菜单，再初始化新版
            PermissionService.cleanup_legacy_stocktake_menus()
            PermissionService.init_audit_menu()
            PermissionService.init_stocktake_menus()
            # 初始化所有菜单的层级结构
            PermissionService.init_all_menus()
            # ★ 启动时自动为所有已知角色补充默认权限（仅补充空角色，不覆盖已有）
            PermissionService.ensure_default_permissions()
    except Exception as e:
        print(f"⚠️ 菜单初始化跳过: {e}")

    # -----------------------------------------------------
    # 2.10 注册盘盈盘亏管理模块 (Stock Adjustment)
    # -----------------------------------------------------
    try:
        from app.api.v1.stock.adjustment import adjustment_bp
        app.register_blueprint(adjustment_bp, url_prefix='/api/v1/stock/adjustment')
        print("✅ Stock Adjustment 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: Stock Adjustment 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.11 注册库位管理模块 (Warehouse)
    # -----------------------------------------------------
    try:
        from app.api.v1.warehouse import warehouse_bp
        # 标准: /api/v1/warehouse/tree
        app.register_blueprint(warehouse_bp, url_prefix='/api/v1/warehouse')
        # 兼容: /api/warehouse/tree
        app.register_blueprint(warehouse_bp, url_prefix='/api/warehouse', name='warehouse_legacy')
        print("✅ Warehouse 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: Warehouse 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.12 注册通用聚合搜索模块 (Common - Global Search)
    # -----------------------------------------------------
    try:
        from app.api.v1.common import common_bp
        # 标准: /api/v1/common/global-search
        app.register_blueprint(common_bp, url_prefix='/api/v1/common')
        # 兼容: /api/common/global-search
        app.register_blueprint(common_bp, url_prefix='/api/common', name='common_legacy')
        print("✅ Common 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: Common 模块导入失败: {e}")

    # -----------------------------------------------------
    # 2.13 注册扫码查库存模块 (Scan)
    # -----------------------------------------------------
    try:
        app.register_blueprint(scan_bp, url_prefix='/api/v1/scan')
        print("✅ Scan 模块注册成功")
    except Exception as e:
        print(f"❌ 错误: Scan 模块注册失败: {e}")

    # -----------------------------------------------------
    # 2.x 注册异步导出模块 (Export)
    # -----------------------------------------------------
    try:
        from app.api.v1.export import export_bp
        app.register_blueprint(export_bp, url_prefix='/api/v1/export')
        app.register_blueprint(export_bp, url_prefix='/api/export', name='export_legacy')
        print("✅ Export 模块注册成功")
    except Exception as e:
        print(f"❌ 错误: Export 模块注册失败: {e}")

    # -----------------------------------------------------
    # 2.14 注册批量导入模块 (Import)
    # -----------------------------------------------------
    try:
        from app.api.v1.import_api import import_bp
        app.register_blueprint(import_bp, url_prefix='/api/v1/import')
        print("✅ Import 模块注册成功")
    except ImportError as e:
        print(f"❌ 错误: Import 模块导入失败: {e}")

    # =========================================================
    # 3. 预加载数据模型
    # =========================================================
    with app.app_context():
        try:
            # 基础与库存模型
            from app.models.base import MaterialBase
            from app.models.inbound.buy import StockBuy
            from app.models.inbound.semi import StockSemi
            from app.models.inbound.product import StockProduct

            # 出库模型
            from app.models.outbound import TransOutbound

            # 系统与业务模型 (SysRolePermission 等在 models.system 中)
            from app.models.system import SysUser, SysLog, SysMenu, SysElement, SysRolePermission, SysWarehouseLocation
            # 确保借还模型被加载
            # ★ TransReturn / TransDefectiveGoods 为二期逆向物流新增，必须在此
            #   预加载：审计监听器按表名从 db.metadata 取模型，未预加载的表在
            #   create_app() 完成时尚未映射，会漏绑审计（虽然后续惰性补绑能兜底，
            #   但预加载更可靠）。
            from app.models.transaction import (
                TransBorrow, TransRepair, TransScrap,
                TransReturn, TransDefectiveGoods,
            )
            # ★ 审批单模型（原仅在函数体内延迟导入，会导致审计监听器漏绑）
            from app.models.outbound import OutboundApproval
            from app.models.borrow import BorrowApproval
            from app.models.scrap_approval import ScrapApproval
            # ★ 其余延迟导入的业务模型，一并预加载以便审计覆盖
            from app.models.bom import BomTable
            from app.models.inbound.service import StockService
            from app.models.stock.adjustment import StockAdjustment
            from app.models.purchase import PurchaseRequest

            # 首次运行时可取消注释自动建表 (但在生产环境建议使用 flask db upgrade)
            # db.create_all()

        except ImportError as e:
            print(f"⚠️ 模型预加载部分失败 (检查是否缺少文件): {e}")
        except Exception as e:
            print(f"⚠️ 模型预加载发生未知错误: {e}")

    # =========================================================
    # 5. 注册审计监听器（必须放在最后，等所有模型完成映射）
    #
    # ★ 为什么不能放在 create_app 开头（紧邻 db.init_app）：
    #   本函数早期只有 17/18 张白名单表完成映射 —— scrap_approval 等模型是在
    #   蓝图注册阶段才被导入的，注册过早会导致这些表被静默漏掉
    #   （register_audit_listeners 遍历 db.metadata.tables，未映射即不可见）。
    #   放在模型预加载之后可确保白名单全部就位。
    # =========================================================
    with app.app_context():
        try:
            from app.core.audit_listener import register_audit_listeners
            count = register_audit_listeners(db)
            print(f"✅ 审计监听器注册成功，共绑定 {count} 个模型")
        except Exception as e:
            print(f"⚠️ 审计监听器注册失败: {e}")

    # =========================================================
    # 6. 全局异常处理（面向生产：不泄露堆栈）
    # =========================================================
    import logging
    import traceback

    @app.errorhandler(ValueError)
    def handle_value_error(e):
        """业务校验异常 → 400 + 自定义消息"""
        return jsonify({'code': 400, 'msg': str(e)}), 400

    @app.errorhandler(404)
    def handle_not_found(e):
        return jsonify({'code': 404, 'msg': '资源不存在'}), 404

    @app.errorhandler(405)
    def handle_method_not_allowed(e):
        return jsonify({'code': 405, 'msg': '请求方法不允许'}), 405

    @app.errorhandler(Exception)
    def handle_unhandled_exception(e):
        """兜底：任何未捕获异常 → 500 + 通用消息，堆栈仅记录日志"""
        app.logger.error(f"Unhandled exception: {type(e).__name__}: {e}\n{traceback.format_exc()}")
        return jsonify({
            'code': 500,
            'msg': '系统繁忙，请稍后再试',
            'error': 'Internal Server Error'
        }), 500

    return app