Line Bot 整合（四）：群組管理與專案綁定

async def check_line_access(
    line_user_uuid: UUID,
    line_group_uuid: UUID | None = None,
) -> tuple[bool, str | None]:
    """
    檢查 Line 用戶是否有權限使用 Bot

    規則：
    1. Line 用戶必須綁定 CTOS 帳號
    2. 如果是群組訊息，群組必須設為 allow_ai_response = true
    """
    async with get_connection() as conn:
        # 檢查用戶綁定
        user_row = await conn.fetchrow(
            "SELECT user_id FROM line_users WHERE id = $1",
            line_user_uuid,
        )
        if not user_row or not user_row["user_id"]:
            return False, "user_not_bound"

        # 如果是群組，檢查群組設定
        if line_group_uuid:
            group_row = await conn.fetchrow(
                "SELECT allow_ai_response FROM line_groups WHERE id = $1",
                line_group_uuid,
            )
            if not group_row or not group_row["allow_ai_response"]:
                return False, "group_not_allowed"

        return True, None

@router.get("/groups", response_model=LineGroupListResponse)
async def api_list_groups(
    is_active: bool | None = None,
    project_id: UUID | None = None,
    limit: int = 50,
    offset: int = 0,
):
    """列出 Line 群組"""
    items, total = await list_groups(
        is_active=is_active,
        project_id=project_id,
        limit=limit,
        offset=offset,
    )
    return LineGroupListResponse(
        items=[LineGroupResponse(**item) for item in items],
        total=total,
    )

@router.post("/groups/{group_id}/bind-project")
async def api_bind_project(group_id: UUID, request: ProjectBindingRequest):
    """綁定群組到專案"""
    success = await bind_group_to_project(group_id, request.project_id)
    if not success:
        raise HTTPException(status_code=404, detail="Group not found")
    return {"status": "ok", "message": "專案綁定成功"}


async def bind_group_to_project(group_id: UUID, project_id: UUID) -> bool:
    """綁定群組到專案"""
    async with get_connection() as conn:
        result = await conn.execute(
            """
            UPDATE line_groups
            SET project_id = $2, updated_at = NOW()
            WHERE id = $1
            """,
            group_id,
            project_id,
        )
        return result == "UPDATE 1"

@router.delete("/groups/{group_id}/bind-project")
async def api_unbind_project(group_id: UUID):
    """解除群組與專案的綁定"""
    success = await unbind_group_from_project(group_id)
    if not success:
        raise HTTPException(status_code=404, detail="Group not found")
    return {"status": "ok", "message": "已解除專案綁定"}


async def unbind_group_from_project(group_id: UUID) -> bool:
    """解除群組與專案的綁定"""
    async with get_connection() as conn:
        result = await conn.execute(
            """
            UPDATE line_groups
            SET project_id = NULL, updated_at = NOW()
            WHERE id = $1
            """,
            group_id,
        )
        return result == "UPDATE 1"

@router.patch("/groups/{group_id}")
async def api_update_group(
    group_id: UUID,
    update: LineGroupUpdate,
    session: SessionData = Depends(get_current_session),
):
    """更新群組設定"""
    group = await get_group_by_id(group_id)
    if not group:
        raise HTTPException(status_code=404, detail="Group not found")

    if update.allow_ai_response is not None:
        await update_group_settings(group_id, update.allow_ai_response)

    updated_group = await get_group_by_id(group_id)
    return LineGroupResponse(**updated_group)


async def update_group_settings(group_id: UUID, allow_ai_response: bool) -> bool:
    """更新群組設定"""
    async with get_connection() as conn:
        result = await conn.execute(
            """
            UPDATE line_groups
            SET allow_ai_response = $2, updated_at = NOW()
            WHERE id = $1
            """,
            group_id,
            allow_ai_response,
        )
        return result == "UPDATE 1"

async def get_ai_context(line_group_uuid: UUID | None) -> dict:
    """取得 AI 處理的上下文資訊"""
    context = {}

    if line_group_uuid:
        async with get_connection() as conn:
            row = await conn.fetchrow(
                """
                SELECT g.name as group_name, p.id as project_id, p.name as project_name
                FROM line_groups g
                LEFT JOIN projects p ON g.project_id = p.id
                WHERE g.id = $1
                """,
                line_group_uuid,
            )
            if row:
                context["group_name"] = row["group_name"]
                if row["project_id"]:
                    context["project_id"] = str(row["project_id"])
                    context["project_name"] = row["project_name"]

    return context

@router.delete("/groups/{group_id}")
async def api_delete_group(group_id: UUID):
    """刪除群組及其相關資料"""
    result = await delete_group(group_id)
    if not result:
        raise HTTPException(status_code=404, detail="Group not found")
    return {
        "status": "ok",
        "message": f"已刪除群組「{result['group_name']}」及 {result['deleted_messages']} 則訊息",
    }