Group 3 - Brendan Geary

workshops/fullstack-aws/projects/submission/Group3/backend/.gitignore

@@ -0,0 +1,4 @@
+.venv/
+__pycache__/
+*.pyc
+.pytest_cache/

workshops/fullstack-aws/projects/submission/Group3/backend/README.md

@@ -0,0 +1,34 @@
+# NoticeBoardTracker API
+
+FastAPI backend, layered: `api` (controllers) -> `services` (business logic) -> `repositories` (DB access) -> `models` (ORM). `schemas` holds the Pydantic request/response DTOs.
+
+## Setup
+
+1. `python -m venv .venv` then activate it (`.venv\Scripts\activate` on Windows, `source .venv/bin/activate` elsewhere)
+2. `pip install -r requirements.txt`
+3. Copy `.env.example` to `.env`, fill in `DATABASE_URL` (from whoever set up Postgres) and a `JWT_SECRET_KEY`
+4. `alembic upgrade head` to create the schema
+5. `uvicorn app.main:app --reload`
+
+Interactive API docs: `http://localhost:8000/docs`
+
+## Layout
+
+- `app/models` — SQLAlchemy ORM classes, the DB shape
+- `app/schemas` — Pydantic DTOs, the API shape. All inherit `CamelModel` (`app/schemas/base.py`), so Python stays snake_case internally and JSON on the wire is camelCase automatically
+- `app/repositories` — DB queries only, no business logic
+- `app/services` — business logic; `TaskAssignmentFactory` is where a task fans out into one `task_assignments` row per trainee
+- `app/api/v1` — routers, thin HTTP layer only
+- `app/dependencies/auth.py` — JWT decode + role guards (`get_current_manager`, `get_current_trainee`)
+- `alembic/versions` — migrations, the source of truth for DB structure; don't hand-edit the shared DB, add a migration instead
+
+## Adding a migration
+
+After changing a model in `app/models/`:
+
+```
+alembic revision --autogenerate -m "describe the change"
+alembic upgrade head
+```
+
+Review the generated file before committing — autogenerate doesn't always get constraints/enums exactly right.

workshops/fullstack-aws/projects/submission/Group3/backend/alembic.ini

@@ -0,0 +1,38 @@
+[alembic]
+script_location = alembic
+prepend_sys_path = .
+sqlalchemy.url =
+
+[loggers]
+keys = root,sqlalchemy,alembic
+
+[handlers]
+keys = console
+
+[formatters]
+keys = generic
+
+[logger_root]
+level = WARN
+handlers = console
+qualname =
+
+[logger_sqlalchemy]
+level = WARN
+handlers =
+qualname = sqlalchemy.engine
+
+[logger_alembic]
+level = INFO
+handlers =
+qualname = alembic
+
+[handler_console]
+class = StreamHandler
+args = (sys.stderr,)
+level = NOTSET
+formatter = generic
+
+[formatter_generic]
+format = %(levelname)-5.5s [%(name)s] %(message)s
+datefmt = %H:%M:%S

workshops/fullstack-aws/projects/submission/Group3/backend/alembic/env.py

@@ -0,0 +1,41 @@
+from logging.config import fileConfig
+
+from alembic import context
+from sqlalchemy import engine_from_config, pool
+
+from app.core.config import get_settings
+from app.core.database import Base
+from app.models import *  # noqa: F401,F403 - register all models on Base.metadata
+
+config = context.config
+if config.config_file_name is not None:
+    fileConfig(config.config_file_name)
+
+# configparser treats "%" as interpolation syntax (URL-encoded passwords hit
+# this), so escape it before handing the URL to alembic's Config.
+config.set_main_option("sqlalchemy.url", get_settings().database_url.replace("%", "%%"))
+
+target_metadata = Base.metadata
+
+
+def run_migrations_offline() -> None:
+    url = config.get_main_option("sqlalchemy.url")
+    context.configure(url=url, target_metadata=target_metadata, literal_binds=True)
+    with context.begin_transaction():
+        context.run_migrations()
+
+
+def run_migrations_online() -> None:
+    connectable = engine_from_config(
+        config.get_section(config.config_ini_section), prefix="sqlalchemy.", poolclass=pool.NullPool
+    )
+    with connectable.connect() as connection:
+        context.configure(connection=connection, target_metadata=target_metadata)
+        with context.begin_transaction():
+            context.run_migrations()
+
+
+if context.is_offline_mode():
+    run_migrations_offline()
+else:
+    run_migrations_online()

workshops/fullstack-aws/projects/submission/Group3/backend/alembic/script.py.mako

@@ -0,0 +1,23 @@
+"""${message}
+
+Revision ID: ${up_revision}
+Revises: ${down_revision | comma,n}
+Create Date: ${create_date}
+
+"""
+from alembic import op
+import sqlalchemy as sa
+${imports if imports else ""}
+
+revision = ${repr(up_revision)}
+down_revision = ${repr(down_revision)}
+branch_labels = ${repr(branch_labels)}
+depends_on = ${repr(depends_on)}
+
+
+def upgrade() -> None:
+    ${upgrades if upgrades else "pass"}
+
+
+def downgrade() -> None:
+    ${downgrades if downgrades else "pass"}

workshops/fullstack-aws/projects/submission/Group3/backend/alembic/versions/0001_initial_schema.py

@@ -0,0 +1,118 @@
+"""initial schema
+
+Revision ID: 0001
+Revises:
+Create Date: 2026-08-28
+
+"""
+from alembic import op
+import sqlalchemy as sa
+
+revision = "0001"
+down_revision = None
+branch_labels = None
+depends_on = None
+
+user_role = sa.Enum("trainee", "manager", "hr", name="user_role")
+urgency_level = sa.Enum("low", "medium", "high", "urgent", name="urgency_level")
+
+
+def upgrade() -> None:
+    op.create_table(
+        "cohorts",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column("name", sa.String(255), nullable=False),
+        sa.Column("description", sa.Text, nullable=True),
+        sa.Column("manager_id", sa.Integer, nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now()),
+    )
+
+    op.create_table(
+        "users",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column("email", sa.String(255), unique=True, nullable=False),
+        sa.Column("hashed_password", sa.String(255), nullable=False),
+        sa.Column("full_name", sa.String(255), nullable=False),
+        sa.Column("role", user_role, nullable=False),
+        sa.Column("cohort_id", sa.Integer, sa.ForeignKey("cohorts.id"), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now()),
+        sa.Column("updated_at", sa.DateTime(timezone=True), server_default=sa.func.now()),
+    )
+
+    op.create_foreign_key("fk_cohorts_manager_id", "cohorts", "users", ["manager_id"], ["id"])
+
+    op.create_table(
+        "tasks",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column("title", sa.String(255), nullable=False),
+        sa.Column("description", sa.Text, nullable=True),
+        sa.Column("created_by", sa.Integer, sa.ForeignKey("users.id"), nullable=False),
+        sa.Column("cohort_id", sa.Integer, sa.ForeignKey("cohorts.id"), nullable=True),
+        sa.Column("due_date", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("urgency", urgency_level, nullable=False, server_default="medium"),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now()),
+        sa.Column("updated_at", sa.DateTime(timezone=True), server_default=sa.func.now()),
+    )
+
+    op.create_table(
+        "subtasks",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column("task_id", sa.Integer, sa.ForeignKey("tasks.id", ondelete="CASCADE"), nullable=False),
+        sa.Column("title", sa.String(255), nullable=False),
+        sa.Column("order_index", sa.Integer, nullable=False, server_default="0"),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now()),
+    )
+
+    op.create_table(
+        "task_assignments",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column("task_id", sa.Integer, sa.ForeignKey("tasks.id", ondelete="CASCADE"), nullable=False),
+        sa.Column("trainee_id", sa.Integer, sa.ForeignKey("users.id"), nullable=False),
+        sa.Column("current_percentage", sa.SmallInteger, nullable=False, server_default="0"),
+        sa.Column("last_updated_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now()),
+        sa.UniqueConstraint("task_id", "trainee_id", name="uq_task_assignment"),
+        sa.CheckConstraint("current_percentage BETWEEN 0 AND 100", name="ck_task_assignment_pct"),
+    )
+
+    op.create_table(
+        "subtask_completions",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column("subtask_id", sa.Integer, sa.ForeignKey("subtasks.id", ondelete="CASCADE"), nullable=False),
+        sa.Column("trainee_id", sa.Integer, sa.ForeignKey("users.id"), nullable=False),
+        sa.Column("is_completed", sa.Boolean, nullable=False, server_default=sa.false()),
+        sa.Column("completed_at", sa.DateTime(timezone=True), nullable=True),
+        sa.UniqueConstraint("subtask_id", "trainee_id", name="uq_subtask_completion"),
+    )
+
+    op.create_table(
+        "progress_updates",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column(
+            "task_assignment_id",
+            sa.Integer,
+            sa.ForeignKey("task_assignments.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column("percentage", sa.SmallInteger, nullable=False),
+        sa.Column("comment", sa.Text, nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now()),
+        sa.CheckConstraint("percentage BETWEEN 0 AND 100", name="ck_progress_update_pct"),
+    )
+
+    op.create_index("idx_task_assignments_task", "task_assignments", ["task_id"])
+    op.create_index("idx_task_assignments_trainee", "task_assignments", ["trainee_id"])
+    op.create_index("idx_progress_updates_assignment", "progress_updates", ["task_assignment_id", "created_at"])
+
+
+def downgrade() -> None:
+    op.drop_table("progress_updates")
+    op.drop_table("subtask_completions")
+    op.drop_table("task_assignments")
+    op.drop_table("subtasks")
+    op.drop_table("tasks")
+    op.drop_constraint("fk_cohorts_manager_id", "cohorts", type_="foreignkey")
+    op.drop_table("users")
+    op.drop_table("cohorts")
+    urgency_level.drop(op.get_bind(), checkfirst=True)
+    user_role.drop(op.get_bind(), checkfirst=True)

workshops/fullstack-aws/projects/submission/Group3/backend/alembic/versions/0002_add_manager_id_to_users.py

@@ -0,0 +1,59 @@
+"""add manager_id to users
+
+Revision ID: 0002
+Revises: 0001
+Create Date: 2026-08-29
+
+"""
+
+from alembic import op
+import sqlalchemy as sa
+
+
+# revision identifiers, used by Alembic.
+revision = "0002"
+down_revision = "0001"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    # Add manager_id to users.
+    #
+    # This is nullable because manager users do not belong
+    # to another manager. Trainee users will have their
+    # manager's user.id stored here.
+    op.add_column(
+        "users",
+        sa.Column(
+            "manager_id",
+            sa.Integer(),
+            nullable=True,
+        ),
+    )
+
+    # Self-referencing foreign key:
+    #
+    # users.manager_id -> users.id
+    op.create_foreign_key(
+        "fk_users_manager_id",
+        "users",
+        "users",
+        ["manager_id"],
+        ["id"],
+    )
+
+
+def downgrade() -> None:
+    # Remove the self-referencing foreign key first.
+    op.drop_constraint(
+        "fk_users_manager_id",
+        "users",
+        type_="foreignkey",
+    )
+
+    # Then remove the column.
+    op.drop_column(
+        "users",
+        "manager_id",
+    )

workshops/fullstack-aws/projects/submission/Group3/backend/app/api/v1/auth.py

@@ -0,0 +1,37 @@
+from fastapi import APIRouter, Depends, HTTPException, status
+from sqlalchemy.orm import Session
+
+from app.core.database import get_db
+from app.dependencies.auth import get_current_user
+from app.models.user import User
+from app.schemas.auth import LoginRequest, ProfileUpdate, TokenResponse, UserOut
+from app.services.auth_service import AuthService
+
+router = APIRouter(prefix="/auth", tags=["auth"])
+
+
+@router.post("/login", response_model=TokenResponse)
+def login(payload: LoginRequest, db: Session = Depends(get_db)) -> TokenResponse:
+    service = AuthService(db)
+    user = service.authenticate(payload.email, payload.password)
+    if user is None:
+        raise HTTPException(status.HTTP_401_UNAUTHORIZED, "Invalid email or password")
+    token = service.issue_token(user)
+    return TokenResponse(access_token=token, role=user.role.value, user_id=user.id)
+
+
+@router.get("/me", response_model=UserOut)
+def me(current_user: User = Depends(get_current_user)) -> User:
+    return current_user
+
+
+@router.put("/me", response_model=UserOut)
+def update_me(
+    payload: ProfileUpdate,
+    db: Session = Depends(get_db),
+    current_user: User = Depends(get_current_user),
+) -> User:
+    try:
+        return AuthService(db).update_profile(current_user, payload)
+    except ValueError as exc:
+        raise HTTPException(status.HTTP_400_BAD_REQUEST, str(exc)) from exc