sam-manage/routes/api.php

<?php

use App\Http\Controllers\Api\Admin\BoardController;
use App\Http\Controllers\Api\Admin\DepartmentController;
use App\Http\Controllers\Api\Admin\MenuController;
use App\Http\Controllers\Api\Admin\PermissionController;
use App\Http\Controllers\Api\Admin\DailyLogController;
use App\Http\Controllers\Api\Admin\ProjectManagement\ImportController as PmImportController;
use App\Http\Controllers\Api\Admin\ProjectManagement\IssueController as PmIssueController;
use App\Http\Controllers\Api\Admin\ProjectManagement\ProjectController as PmProjectController;
use App\Http\Controllers\Api\Admin\ProjectManagement\TaskController as PmTaskController;
use App\Http\Controllers\Api\Admin\RoleController;
use App\Http\Controllers\Api\Admin\RolePermissionController;
use App\Http\Controllers\Api\Admin\TenantController;
use App\Http\Controllers\Api\Admin\UserController;
use Illuminate\Support\Facades\Route;

/*
|--------------------------------------------------------------------------
| API Routes
|--------------------------------------------------------------------------
|
| HTMX 요청 시 HTML 반환, 일반 요청 시 JSON 반환
| - auth: 기본 인증 확인
| - hq.member: 본사(HQ) 테넌트 소속 확인
| - super.admin: 슈퍼관리자 전용 (복구, 영구삭제)
*/

Route::middleware(['web', 'auth', 'hq.member'])->prefix('admin')->name('api.admin.')->group(function () {

    // 테넌트 관리 API
    Route::prefix('tenants')->name('tenants.')->group(function () {
        // 고정 경로는 먼저 정의
        Route::get('/stats', [TenantController::class, 'stats'])->name('stats');

        // 동적 경로는 나중에 정의
        Route::get('/', [TenantController::class, 'index'])->name('index');
        Route::post('/', [TenantController::class, 'store'])->name('store');
        Route::get('/{id}', [TenantController::class, 'show'])->name('show');
        Route::put('/{id}', [TenantController::class, 'update'])->name('update');
        Route::delete('/{id}', [TenantController::class, 'destroy'])->name('destroy');

        // 복원 (일반관리자 가능)
        Route::post('/{id}/restore', [TenantController::class, 'restore'])->name('restore');

        // 슈퍼관리자 전용 액션 (영구삭제)
        Route::middleware('super.admin')->group(function () {
            Route::delete('/{id}/force', [TenantController::class, 'forceDestroy'])->name('forceDestroy');
        });

        // 모달 관련 API
        Route::get('/{id}/modal', [TenantController::class, 'modal'])->name('modal');
        Route::get('/{id}/users', [TenantController::class, 'users'])->name('users');
        Route::get('/{id}/departments', [TenantController::class, 'departments'])->name('departments');
        Route::get('/{id}/roles', [TenantController::class, 'roles'])->name('roles');
        Route::get('/{id}/menus', [TenantController::class, 'menus'])->name('menus');
        Route::get('/{id}/subscription', [TenantController::class, 'subscription'])->name('subscription');
    });

    // 역할 관리 API
    Route::prefix('roles')->name('roles.')->group(function () {
        Route::get('/', [RoleController::class, 'index'])->name('index');
        Route::post('/', [RoleController::class, 'store'])->name('store');
        Route::get('/{id}', [RoleController::class, 'show'])->name('show');
        Route::put('/{id}', [RoleController::class, 'update'])->name('update');
        Route::delete('/{id}', [RoleController::class, 'destroy'])->name('destroy');
    });

    // 부서 관리 API
    Route::prefix('departments')->name('departments.')->group(function () {
        Route::get('/', [DepartmentController::class, 'index'])->name('index');
        Route::post('/', [DepartmentController::class, 'store'])->name('store');
        Route::get('/{id}', [DepartmentController::class, 'show'])->name('show');
        Route::put('/{id}', [DepartmentController::class, 'update'])->name('update');
        Route::delete('/{id}', [DepartmentController::class, 'destroy'])->name('destroy');

        // 복원 (일반관리자 가능)
        Route::post('/{id}/restore', [DepartmentController::class, 'restore'])->name('restore');

        // 슈퍼관리자 전용 액션 (영구삭제)
        Route::middleware('super.admin')->group(function () {
            Route::delete('/{id}/force', [DepartmentController::class, 'forceDelete'])->name('forceDelete');
        });
    });

    // 사용자 관리 API
    Route::prefix('users')->name('users.')->group(function () {
        Route::get('/', [UserController::class, 'index'])->name('index');
        Route::post('/', [UserController::class, 'store'])->name('store');
        Route::get('/{id}', [UserController::class, 'show'])->name('show');
        Route::put('/{id}', [UserController::class, 'update'])->name('update');
        Route::delete('/{id}', [UserController::class, 'destroy'])->name('destroy');

        // 복원 (일반관리자 가능 - 슈퍼관리자 복원은 컨트롤러에서 차단)
        Route::post('/{id}/restore', [UserController::class, 'restore'])->name('restore');

        // 비밀번호 초기화 (임의 비밀번호 생성 + 메일 발송)
        Route::post('/{id}/reset-password', [UserController::class, 'resetPassword'])->name('resetPassword');

        // 슈퍼관리자 전용 액션 (영구삭제)
        Route::middleware('super.admin')->group(function () {
            Route::delete('/{id}/force', [UserController::class, 'forceDestroy'])->name('forceDestroy');
        });

        // 모달 관련 API
        Route::get('/{id}/modal', [UserController::class, 'modal'])->name('modal');
    });

    // 메뉴 관리 API
    Route::prefix('menus')->name('menus.')->group(function () {
        // 고정 경로는 먼저 정의
        Route::get('/tree', [MenuController::class, 'tree'])->name('tree');

        // 동적 경로는 나중에 정의
        Route::get('/', [MenuController::class, 'index'])->name('index');
        Route::post('/', [MenuController::class, 'store'])->name('store');
        Route::get('/{id}', [MenuController::class, 'show'])->name('show');
        Route::put('/{id}', [MenuController::class, 'update'])->name('update');
        Route::delete('/{id}', [MenuController::class, 'destroy'])->name('destroy');

        // 복원 (일반관리자 가능)
        Route::post('/{id}/restore', [MenuController::class, 'restore'])->name('restore');

        // 슈퍼관리자 전용 액션 (영구삭제)
        Route::middleware('super.admin')->group(function () {
            Route::delete('/{id}/force', [MenuController::class, 'forceDestroy'])->name('forceDestroy');
        });

        // 추가 액션
        Route::post('/{id}/toggle-active', [MenuController::class, 'toggleActive'])->name('toggleActive');
        Route::post('/{id}/toggle-hidden', [MenuController::class, 'toggleHidden'])->name('toggleHidden');
    });

    // 권한 관리 API
    Route::prefix('permissions')->name('permissions.')->group(function () {
        Route::get('/', [PermissionController::class, 'index'])->name('index');
        Route::post('/', [PermissionController::class, 'store'])->name('store');
        Route::get('/{id}', [PermissionController::class, 'show'])->name('show');
        Route::put('/{id}', [PermissionController::class, 'update'])->name('update');
        Route::delete('/{id}', [PermissionController::class, 'destroy'])->name('destroy');
    });

    // 시스템 게시판 관리 API
    Route::prefix('boards')->name('boards.')->group(function () {
        // 고정 경로는 먼저 정의
        Route::get('/stats', [BoardController::class, 'stats'])->name('stats');

        // 기본 CRUD
        Route::get('/', [BoardController::class, 'index'])->name('index');
        Route::post('/', [BoardController::class, 'store'])->name('store');
        Route::get('/{id}', [BoardController::class, 'show'])->name('show');
        Route::put('/{id}', [BoardController::class, 'update'])->name('update');
        Route::delete('/{id}', [BoardController::class, 'destroy'])->name('destroy');

        // 복원 (일반관리자 가능)
        Route::post('/{id}/restore', [BoardController::class, 'restore'])->name('restore');

        // 슈퍼관리자 전용 액션 (영구삭제)
        Route::middleware('super.admin')->group(function () {
            Route::delete('/{id}/force', [BoardController::class, 'forceDestroy'])->name('forceDestroy');
        });

        // 추가 액션
        Route::post('/{id}/toggle-active', [BoardController::class, 'toggleActive'])->name('toggleActive');

        // 필드 관리 API
        Route::get('/{id}/fields', [BoardController::class, 'fields'])->name('fields');
        Route::post('/{id}/fields', [BoardController::class, 'storeField'])->name('storeField');
        Route::put('/{id}/fields/{fieldId}', [BoardController::class, 'updateField'])->name('updateField');
        Route::delete('/{id}/fields/{fieldId}', [BoardController::class, 'destroyField'])->name('destroyField');
        Route::post('/{id}/fields/reorder', [BoardController::class, 'reorderFields'])->name('reorderFields');
    });

    // 역할 권한 관리 API
    Route::prefix('role-permissions')->name('role-permissions.')->group(function () {
        Route::get('/matrix', [RolePermissionController::class, 'getMatrix'])->name('matrix');
        Route::post('/toggle', [RolePermissionController::class, 'toggle'])->name('toggle');
        Route::post('/allow-all', [RolePermissionController::class, 'allowAll'])->name('allowAll');
        Route::post('/deny-all', [RolePermissionController::class, 'denyAll'])->name('denyAll');
        Route::post('/reset', [RolePermissionController::class, 'reset'])->name('reset');
    });

    // 부서 권한 관리 API
    Route::prefix('department-permissions')->name('department-permissions.')->group(function () {
        Route::get('/matrix', [\App\Http\Controllers\Api\Admin\DepartmentPermissionController::class, 'getMatrix'])->name('matrix');
        Route::post('/toggle', [\App\Http\Controllers\Api\Admin\DepartmentPermissionController::class, 'toggle'])->name('toggle');
        Route::post('/allow-all', [\App\Http\Controllers\Api\Admin\DepartmentPermissionController::class, 'allowAll'])->name('allowAll');
        Route::post('/deny-all', [\App\Http\Controllers\Api\Admin\DepartmentPermissionController::class, 'denyAll'])->name('denyAll');
        Route::post('/reset', [\App\Http\Controllers\Api\Admin\DepartmentPermissionController::class, 'reset'])->name('reset');
    });

    // 개인 권한 관리 API
    Route::prefix('user-permissions')->name('user-permissions.')->group(function () {
        Route::get('/matrix', [\App\Http\Controllers\Api\Admin\UserPermissionController::class, 'getMatrix'])->name('matrix');
        Route::post('/toggle', [\App\Http\Controllers\Api\Admin\UserPermissionController::class, 'toggle'])->name('toggle');
        Route::post('/allow-all', [\App\Http\Controllers\Api\Admin\UserPermissionController::class, 'allowAll'])->name('allowAll');
        Route::post('/deny-all', [\App\Http\Controllers\Api\Admin\UserPermissionController::class, 'denyAll'])->name('denyAll');
        Route::post('/reset', [\App\Http\Controllers\Api\Admin\UserPermissionController::class, 'reset'])->name('reset');
    });

    // 권한 분석 API
    Route::prefix('permission-analyze')->name('permission-analyze.')->group(function () {
        Route::get('/menu-tree', [\App\Http\Controllers\Api\Admin\PermissionAnalyzeController::class, 'menuTree'])->name('menuTree');
        Route::get('/analyze', [\App\Http\Controllers\Api\Admin\PermissionAnalyzeController::class, 'analyzeMenu'])->name('analyze');
        Route::get('/trace', [\App\Http\Controllers\Api\Admin\PermissionAnalyzeController::class, 'traceUsers'])->name('trace');
        Route::get('/export-csv', [\App\Http\Controllers\Api\Admin\PermissionAnalyzeController::class, 'exportCsv'])->name('exportCsv');
        Route::post('/recalculate', [\App\Http\Controllers\Api\Admin\PermissionAnalyzeController::class, 'recalculate'])->name('recalculate');
    });

    // 삭제된 데이터 백업 API
    Route::prefix('archived-records')->name('archived-records.')->group(function () {
        Route::get('/stats', [\App\Http\Controllers\Api\Admin\ArchivedRecordController::class, 'stats'])->name('stats');
        Route::get('/', [\App\Http\Controllers\Api\Admin\ArchivedRecordController::class, 'index'])->name('index');
        Route::get('/{id}', [\App\Http\Controllers\Api\Admin\ArchivedRecordController::class, 'show'])->name('show');
    });

    /*
    |--------------------------------------------------------------------------
    | 프로젝트 관리 API
    |--------------------------------------------------------------------------
    */
    Route::prefix('pm')->name('pm.')->group(function () {

        // 프로젝트 관리 API
        Route::prefix('projects')->name('projects.')->group(function () {
            // 고정 경로
            Route::get('/stats', [PmProjectController::class, 'stats'])->name('stats');
            Route::get('/dashboard', [PmProjectController::class, 'dashboard'])->name('dashboard');
            Route::get('/dropdown', [PmProjectController::class, 'dropdown'])->name('dropdown');

            // 기본 CRUD
            Route::get('/', [PmProjectController::class, 'index'])->name('index');
            Route::post('/', [PmProjectController::class, 'store'])->name('store');
            Route::get('/{id}', [PmProjectController::class, 'show'])->name('show');
            Route::put('/{id}', [PmProjectController::class, 'update'])->name('update');
            Route::delete('/{id}', [PmProjectController::class, 'destroy'])->name('destroy');

            // 복원 (일반관리자 가능)
            Route::post('/{id}/restore', [PmProjectController::class, 'restore'])->name('restore');

            // 슈퍼관리자 전용 액션 (영구삭제)
            Route::middleware('super.admin')->group(function () {
                Route::delete('/{id}/force', [PmProjectController::class, 'forceDestroy'])->name('forceDestroy');
            });

            // 추가 액션
            Route::post('/{id}/status', [PmProjectController::class, 'changeStatus'])->name('changeStatus');
            Route::post('/{id}/duplicate', [PmProjectController::class, 'duplicate'])->name('duplicate');
        });

        // 작업 관리 API
        Route::prefix('tasks')->name('tasks.')->group(function () {
            // 고정 경로
            Route::get('/urgent', [PmTaskController::class, 'urgent'])->name('urgent');
            Route::post('/bulk', [PmTaskController::class, 'bulk'])->name('bulk');

            // 기본 CRUD
            Route::get('/', [PmTaskController::class, 'index'])->name('index');
            Route::post('/', [PmTaskController::class, 'store'])->name('store');
            Route::get('/{id}', [PmTaskController::class, 'show'])->name('show');
            Route::put('/{id}', [PmTaskController::class, 'update'])->name('update');
            Route::delete('/{id}', [PmTaskController::class, 'destroy'])->name('destroy');

            // 복원 (일반관리자 가능)
            Route::post('/{id}/restore', [PmTaskController::class, 'restore'])->name('restore');

            // 슈퍼관리자 전용 액션 (영구삭제)
            Route::middleware('super.admin')->group(function () {
                Route::delete('/{id}/force', [PmTaskController::class, 'forceDestroy'])->name('forceDestroy');
            });

            // 추가 액션
            Route::post('/{id}/status', [PmTaskController::class, 'changeStatus'])->name('changeStatus');
            Route::post('/{id}/toggle-urgent', [PmTaskController::class, 'toggleUrgent'])->name('toggleUrgent');

            // 프로젝트별
            Route::get('/project/{projectId}', [PmTaskController::class, 'byProject'])->name('byProject');
            Route::post('/project/{projectId}/reorder', [PmTaskController::class, 'reorder'])->name('reorder');
            Route::get('/project/{projectId}/stats', [PmTaskController::class, 'stats'])->name('stats');
        });

        // 이슈 관리 API
        Route::prefix('issues')->name('issues.')->group(function () {
            // 고정 경로
            Route::get('/stats', [PmIssueController::class, 'stats'])->name('stats');
            Route::get('/open', [PmIssueController::class, 'open'])->name('open');
            Route::post('/bulk', [PmIssueController::class, 'bulk'])->name('bulk');

            // 기본 CRUD
            Route::get('/', [PmIssueController::class, 'index'])->name('index');
            Route::post('/', [PmIssueController::class, 'store'])->name('store');
            Route::get('/{id}', [PmIssueController::class, 'show'])->name('show');
            Route::put('/{id}', [PmIssueController::class, 'update'])->name('update');
            Route::delete('/{id}', [PmIssueController::class, 'destroy'])->name('destroy');

            // 복원 (일반관리자 가능)
            Route::post('/{id}/restore', [PmIssueController::class, 'restore'])->name('restore');

            // 슈퍼관리자 전용 액션 (영구삭제)
            Route::middleware('super.admin')->group(function () {
                Route::delete('/{id}/force', [PmIssueController::class, 'forceDestroy'])->name('forceDestroy');
            });

            // 추가 액션
            Route::post('/{id}/status', [PmIssueController::class, 'changeStatus'])->name('changeStatus');
            Route::post('/{id}/toggle-urgent', [PmIssueController::class, 'toggleUrgent'])->name('toggleUrgent');

            // 연관별
            Route::get('/project/{projectId}', [PmIssueController::class, 'byProject'])->name('byProject');
            Route::get('/task/{taskId}', [PmIssueController::class, 'byTask'])->name('byTask');
        });

        // JSON Import API
        Route::prefix('import')->name('import.')->group(function () {
            Route::get('/template', [PmImportController::class, 'template'])->name('template');
            Route::post('/validate', [PmImportController::class, 'validate'])->name('validate');
            Route::post('/', [PmImportController::class, 'import'])->name('import');
            Route::post('/project/{projectId}/tasks', [PmImportController::class, 'importTasks'])->name('importTasks');
        });
    });

    /*
    |--------------------------------------------------------------------------
    | 일일 스크럼 API
    |--------------------------------------------------------------------------
    */
    Route::prefix('daily-logs')->name('daily-logs.')->group(function () {
        // 고정 경로
        Route::get('/stats', [DailyLogController::class, 'stats'])->name('stats');
        Route::get('/today', [DailyLogController::class, 'today'])->name('today');
        Route::get('/assignees', [DailyLogController::class, 'assignees'])->name('assignees');

        // 기본 CRUD
        Route::get('/', [DailyLogController::class, 'index'])->name('index');
        Route::post('/', [DailyLogController::class, 'store'])->name('store');
        Route::get('/{id}', [DailyLogController::class, 'show'])->name('show');
        Route::put('/{id}', [DailyLogController::class, 'update'])->name('update');
        Route::delete('/{id}', [DailyLogController::class, 'destroy'])->name('destroy');

        // 복원 (일반관리자 가능)
        Route::post('/{id}/restore', [DailyLogController::class, 'restore'])->name('restore');

        // 슈퍼관리자 전용 액션 (영구삭제)
        Route::middleware('super.admin')->group(function () {
            Route::delete('/{id}/force', [DailyLogController::class, 'forceDestroy'])->name('forceDestroy');
        });

        // 항목(Entry) 관리
        Route::post('/{logId}/entries', [DailyLogController::class, 'addEntry'])->name('addEntry');
        Route::post('/{logId}/entries/reorder', [DailyLogController::class, 'reorderEntries'])->name('reorderEntries');
    });

    // 항목 개별 API (로그 ID 없이 직접 접근)
    Route::prefix('daily-logs/entries')->name('daily-logs.entries.')->group(function () {
        Route::put('/{entryId}/status', [DailyLogController::class, 'updateEntryStatus'])->name('updateStatus');
        Route::delete('/{entryId}', [DailyLogController::class, 'deleteEntry'])->name('delete');
    });
});