feat(m4): project & member management with tests and e2e

- ProjectRepository, ProjectMemberRepository, minimal NotificationRepository
- ProjectService: create/update/archive/delete project, add/remove member,
  permission checks (isMember/admin), member-added notification, getDashboard
  skeleton, getMyProjects, getMemberRole
- projectValidator, API services factory
- API routes: projects CRUD, members list/add/remove
- Screens: dashboard (project list + create form), project overview, members,
  settings; layout (Header/Sidebar/ProjectNav) and project components
- Unit tests (Project/ProjectMember repositories, ProjectService),
  integration project-member-permission, e2e project-management

app/api/projects/[projectId]/members/[userId]/route.ts

@@ -0,0 +1,30 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { getCurrentUser } from '@/lib/auth/getCurrentUser';
+import { createProjectService } from '@/lib/api/services';
+import { UnauthorizedError } from '@/lib/errors';
+import { handleApiError } from '@/lib/api/handleError';
+
+export const runtime = 'nodejs';
+
+export async function DELETE(
+  _request: NextRequest,
+  {
+    params,
+  }: {
+    params: Promise<{ projectId: string; userId: string }>;
+  }
+) {
+  const user = await getCurrentUser();
+  if (!user) {
+    return handleApiError(new UnauthorizedError());
+  }
+  const { projectId, userId } = await params;
+
+  const service = createProjectService();
+  try {
+    service.removeMember(user.id, Number(projectId), Number(userId));
+    return NextResponse.json({ ok: true });
+  } catch (error) {
+    return handleApiError(error);
+  }
+}

app/api/projects/[projectId]/members/route.ts

@@ -0,0 +1,69 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { getCurrentUser } from '@/lib/auth/getCurrentUser';
+import { createProjectService, createUserRepository } from '@/lib/api/services';
+import { UnauthorizedError, NotFoundError } from '@/lib/errors';
+import { handleApiError, jsonError } from '@/lib/api/handleError';
+import type { ProjectMemberRole } from '@/lib/types';
+
+export const runtime = 'nodejs';
+
+export async function GET(
+  _request: NextRequest,
+  { params }: { params: Promise<{ projectId: string }> }
+) {
+  const user = await getCurrentUser();
+  if (!user) {
+    return handleApiError(new UnauthorizedError());
+  }
+  const { projectId } = await params;
+
+  const service = createProjectService();
+  try {
+    const members = service.getMembers(user.id, Number(projectId));
+    return NextResponse.json({ members });
+  } catch (error) {
+    return handleApiError(error);
+  }
+}
+
+export async function POST(
+  request: NextRequest,
+  { params }: { params: Promise<{ projectId: string }> }
+) {
+  const user = await getCurrentUser();
+  if (!user) {
+    return handleApiError(new UnauthorizedError());
+  }
+  const { projectId } = await params;
+
+  let body: Record<string, unknown>;
+  try {
+    body = (await request.json()) as Record<string, unknown>;
+  } catch {
+    return jsonError(400, 'リクエスト本文が不正です');
+  }
+
+  const email = String(body.email ?? '');
+  const role = (
+    typeof body.role === 'string' ? body.role : 'member'
+  ) as ProjectMemberRole;
+
+  // メールアドレスからユーザーを解決する
+  const targetUser = createUserRepository().findByEmail(email);
+  if (!targetUser) {
+    return handleApiError(new NotFoundError('User', email));
+  }
+
+  const service = createProjectService();
+  try {
+    const member = service.addMember(
+      user.id,
+      Number(projectId),
+      targetUser.id,
+      role
+    );
+    return NextResponse.json({ member }, { status: 201 });
+  } catch (error) {
+    return handleApiError(error);
+  }
+}

app/api/projects/[projectId]/route.ts

@@ -0,0 +1,79 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { getCurrentUser } from '@/lib/auth/getCurrentUser';
+import { createProjectService } from '@/lib/api/services';
+import { UnauthorizedError } from '@/lib/errors';
+import { handleApiError, jsonError } from '@/lib/api/handleError';
+
+export const runtime = 'nodejs';
+
+export async function GET(
+  _request: NextRequest,
+  { params }: { params: Promise<{ projectId: string }> }
+) {
+  const user = await getCurrentUser();
+  if (!user) {
+    return handleApiError(new UnauthorizedError());
+  }
+  const { projectId } = await params;
+
+  const service = createProjectService();
+  try {
+    const dashboard = service.getDashboard(user.id, Number(projectId));
+    return NextResponse.json(dashboard);
+  } catch (error) {
+    return handleApiError(error);
+  }
+}
+
+export async function PATCH(
+  request: NextRequest,
+  { params }: { params: Promise<{ projectId: string }> }
+) {
+  const user = await getCurrentUser();
+  if (!user) {
+    return handleApiError(new UnauthorizedError());
+  }
+  const { projectId } = await params;
+
+  let body: Record<string, unknown>;
+  try {
+    body = (await request.json()) as Record<string, unknown>;
+  } catch {
+    return jsonError(400, 'リクエスト本文が不正です');
+  }
+
+  const service = createProjectService();
+  try {
+    const project = service.updateProject(user.id, Number(projectId), {
+      name: typeof body.name === 'string' ? body.name : undefined,
+      description:
+        typeof body.description === 'string' ? body.description : undefined,
+      status:
+        typeof body.status === 'string'
+          ? (body.status as 'active' | 'on_hold' | 'completed' | 'archived')
+          : undefined,
+    });
+    return NextResponse.json({ project });
+  } catch (error) {
+    return handleApiError(error);
+  }
+}
+
+export async function DELETE(
+  _request: NextRequest,
+  { params }: { params: Promise<{ projectId: string }> }
+) {
+  const user = await getCurrentUser();
+  if (!user) {
+    return handleApiError(new UnauthorizedError());
+  }
+  const { projectId } = await params;
+
+  const service = createProjectService();
+  try {
+    service.deleteProject(user.id, Number(projectId));
+    return NextResponse.json({ ok: true });
+  } catch (error) {
+    return handleApiError(error);
+  }
+}

app/api/projects/route.ts

@@ -0,0 +1,43 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { getCurrentUser } from '@/lib/auth/getCurrentUser';
+import { createProjectService } from '@/lib/api/services';
+import { UnauthorizedError } from '@/lib/errors';
+import { handleApiError, jsonError } from '@/lib/api/handleError';
+
+export const runtime = 'nodejs';
+
+export async function GET() {
+  const user = await getCurrentUser();
+  if (!user) {
+    return handleApiError(new UnauthorizedError());
+  }
+  const service = createProjectService();
+  const projects = service.getMyProjects(user.id);
+  return NextResponse.json({ projects });
+}
+
+export async function POST(request: NextRequest) {
+  const user = await getCurrentUser();
+  if (!user) {
+    return handleApiError(new UnauthorizedError());
+  }
+
+  let body: Record<string, unknown>;
+  try {
+    body = (await request.json()) as Record<string, unknown>;
+  } catch {
+    return jsonError(400, 'リクエスト本文が不正です');
+  }
+
+  const service = createProjectService();
+  try {
+    const project = service.createProject(user.id, {
+      name: String(body.name ?? ''),
+      description:
+        typeof body.description === 'string' ? body.description : undefined,
+    });
+    return NextResponse.json({ project }, { status: 201 });
+  } catch (error) {
+    return handleApiError(error);
+  }
+}

app/dashboard/page.tsx

@@ -1,5 +1,9 @@
 import { redirect } from 'next/navigation';
-import { getCurrentUser } from '@/lib/auth/getCurrentUser';
+import { getCurrentUser, toPublicUser } from '@/lib/auth/getCurrentUser';
+import { createProjectService } from '@/lib/api/services';
+import { Header } from '@/components/layout/Header';
+import { ProjectCard } from '@/components/project/ProjectCard';
+import { CreateProjectForm } from '@/components/project/CreateProjectForm';
 
 export const dynamic = 'force-dynamic';
 
@@ -9,19 +13,32 @@ export default async function DashboardPage() {
     redirect('/login');
   }
 
+  const service = createProjectService();
+  const projects = service.getMyProjects(user.id);
+
   return (
-    <main className="min-h-screen bg-gray-50 p-8">
-      <div className="mx-auto max-w-3xl">
-        <div className="flex items-center justify-between">
-          <h1 className="text-2xl font-bold">ダッシュボード</h1>
-          <a href="/profile" className="text-sm text-blue-600 hover:underline">
-            {user.name} さん
-          </a>
-        </div>
-        <p className="mt-4 text-gray-600">
-          プロジェクト機能は後続マイルストーンで実装されます。
-        </p>
-      </div>
-    </main>
+    <div className="min-h-screen bg-gray-50">
+      <Header user={toPublicUser(user)} />
+      <main className="mx-auto max-w-4xl space-y-6 p-6">
+        <h1 className="text-2xl font-bold">ダッシュボード</h1>
+        <CreateProjectForm />
+        <section>
+          <h2 className="mb-3 text-sm font-semibold text-gray-700">
+            参加プロジェクト
+          </h2>
+          {projects.length === 0 ? (
+            <p className="text-sm text-gray-400">
+              参加しているプロジェクトはありません。
+            </p>
+          ) : (
+            <div className="grid gap-3 sm:grid-cols-2">
+              {projects.map((project) => (
+                <ProjectCard key={project.id} project={project} />
+              ))}
+            </div>
+          )}
+        </section>
+      </main>
+    </div>
   );
 }

app/projects/[projectId]/members/page.tsx

@@ -0,0 +1,86 @@
+import { redirect } from 'next/navigation';
+import { getCurrentUser, toPublicUser } from '@/lib/auth/getCurrentUser';
+import { createProjectService } from '@/lib/api/services';
+import { Header } from '@/components/layout/Header';
+import { ProjectNav } from '@/components/layout/ProjectNav';
+import { AddMemberForm } from '@/components/project/AddMemberForm';
+import { RemoveMemberButton } from '@/components/project/RemoveMemberButton';
+import { ForbiddenError, NotFoundError } from '@/lib/errors';
+
+export const dynamic = 'force-dynamic';
+
+const ROLE_LABEL = { admin: '管理者', member: 'メンバー', guest: 'ゲスト' };
+
+export default async function ProjectMembersPage({
+  params,
+}: {
+  params: Promise<{ projectId: string }>;
+}) {
+  const user = await getCurrentUser();
+  if (!user) {
+    redirect('/login');
+  }
+  const { projectId } = await params;
+
+  const service = createProjectService();
+  let project: Awaited<ReturnType<typeof service.getProject>>;
+  let members: Awaited<ReturnType<typeof service.getMembers>>;
+  let canManage: boolean;
+  try {
+    project = service.getProject(user.id, Number(projectId));
+    members = service.getMembers(user.id, Number(projectId));
+    canManage = service.getMemberRole(user.id, Number(projectId)) === 'admin';
+  } catch (error) {
+    if (error instanceof ForbiddenError || error instanceof NotFoundError) {
+      redirect('/dashboard');
+    }
+    throw error;
+  }
+
+  return (
+    <div className="min-h-screen bg-gray-50">
+      <Header user={toPublicUser(user)} />
+      <ProjectNav projectId={project.id} active="members" />
+      <main className="mx-auto max-w-3xl space-y-6 p-6">
+        <h1 className="text-2xl font-bold">メンバー管理</h1>
+
+        {canManage && <AddMemberForm projectId={project.id} />}
+
+        <section className="rounded-lg border bg-white shadow-sm">
+          <ul className="divide-y">
+            {members.map((member) => (
+              <li
+                key={member.id}
+                className="flex items-center justify-between p-4"
+              >
+                <div>
+                  <p className="font-medium text-gray-800">
+                    {member.user.name}
+                    {member.userId === user.id && (
+                      <span className="ml-2 text-xs text-gray-400">
+                        (あなた)
+                      </span>
+                    )}
+                  </p>
+                  <p className="text-sm text-gray-500">{member.user.email}</p>
+                </div>
+                <div className="flex items-center gap-3">
+                  <span className="text-sm text-gray-600">
+                    {ROLE_LABEL[member.role] ?? member.role}
+                  </span>
+                  {canManage && member.userId !== user.id && (
+                    <RemoveMemberButton
+                      projectId={project.id}
+                      userId={member.userId}
+                      label="削除"
+                    />
+                  )}
+                </div>
+              </li>
+            ))}
+          </ul>
+        </section>
+      </main>
+    </div>
+  );
+}

app/projects/[projectId]/page.tsx

@@ -0,0 +1,79 @@
+import { redirect } from 'next/navigation';
+import { getCurrentUser, toPublicUser } from '@/lib/auth/getCurrentUser';
+import { createProjectService } from '@/lib/api/services';
+import { Header } from '@/components/layout/Header';
+import { ProjectNav } from '@/components/layout/ProjectNav';
+import { DashboardWidget } from '@/components/project/DashboardWidget';
+import { ForbiddenError, NotFoundError } from '@/lib/errors';
+
+export const dynamic = 'force-dynamic';
+
+const STATUS_LABELS: Record<string, string> = {
+  active: 'Active',
+  on_hold: 'On Hold',
+  completed: 'Completed',
+  archived: 'Archived',
+};
+
+export default async function ProjectOverviewPage({
+  params,
+}: {
+  params: Promise<{ projectId: string }>;
+}) {
+  const user = await getCurrentUser();
+  if (!user) {
+    redirect('/login');
+  }
+  const { projectId } = await params;
+
+  const service = createProjectService();
+  let dashboard;
+  try {
+    dashboard = service.getDashboard(user.id, Number(projectId));
+  } catch (error) {
+    if (error instanceof ForbiddenError || error instanceof NotFoundError) {
+      redirect('/dashboard');
+    }
+    throw error;
+  }
+
+  const { project, members } = dashboard;
+
+  return (
+    <div className="min-h-screen bg-gray-50">
+      <Header user={toPublicUser(user)} />
+      <ProjectNav projectId={project.id} active="overview" />
+      <main className="mx-auto max-w-4xl space-y-6 p-6">
+        <div className="flex items-center justify-between">
+          <h1 className="text-2xl font-bold">{project.name}</h1>
+          <span className="rounded bg-gray-100 px-2 py-0.5 text-xs">
+            {STATUS_LABELS[project.status] ?? project.status}
+          </span>
+        </div>
+        {project.description && (
+          <p className="text-gray-600">{project.description}</p>
+        )}
+        <p className="text-sm text-gray-500">メンバー数: {members.length}</p>
+
+        <div className="grid gap-4 sm:grid-cols-2">
+          <DashboardWidget
+            title="進行中ToDo"
+            empty="ToDo機能は後続マイルストーンで実装されます"
+          />
+          <DashboardWidget
+            title="最新チャット"
+            empty="チャット機能は後続マイルストーンで実装されます"
+          />
+          <DashboardWidget
+            title="最新掲示板"
+            empty="掲示板機能は後続マイルストーンで実装されます"
+          />
+          <DashboardWidget
+            title="最近のアクティビティ"
+            empty="アクティビティログは後続マイルストーンで実装されます"
+          />
+        </div>
+      </main>
+    </div>
+  );
+}

app/projects/[projectId]/settings/page.tsx

@@ -0,0 +1,57 @@
+import { redirect } from 'next/navigation';
+import { getCurrentUser, toPublicUser } from '@/lib/auth/getCurrentUser';
+import { createProjectService } from '@/lib/api/services';
+import { Header } from '@/components/layout/Header';
+import { ProjectNav } from '@/components/layout/ProjectNav';
+import { ProjectSettingsForm } from '@/components/project/ProjectSettingsForm';
+import { DeleteProjectButton } from '@/components/project/DeleteProjectButton';
+import { ForbiddenError, NotFoundError } from '@/lib/errors';
+
+export const dynamic = 'force-dynamic';
+
+export default async function ProjectSettingsPage({
+  params,
+}: {
+  params: Promise<{ projectId: string }>;
+}) {
+  const user = await getCurrentUser();
+  if (!user) {
+    redirect('/login');
+  }
+  const { projectId } = await params;
+
+  const service = createProjectService();
+  let project;
+  let canManage;
+  try {
+    project = service.getProject(user.id, Number(projectId));
+    canManage = service.getMemberRole(user.id, Number(projectId)) === 'admin';
+  } catch (error) {
+    if (error instanceof ForbiddenError || error instanceof NotFoundError) {
+      redirect('/dashboard');
+    }
+    throw error;
+  }
+
+  return (
+    <div className="min-h-screen bg-gray-50">
+      <Header user={toPublicUser(user)} />
+      <ProjectNav projectId={project.id} active="settings" />
+      <main className="mx-auto max-w-2xl space-y-6 p-6">
+        <h1 className="text-2xl font-bold">プロジェクト設定</h1>
+        <div className="rounded-lg border bg-white p-6 shadow-sm">
+          <ProjectSettingsForm project={project} canManage={canManage} />
+        </div>
+        {canManage && (
+          <div className="rounded-lg border border-red-200 bg-white p-6 shadow-sm">
+            <h2 className="text-sm font-semibold text-red-700">危険操作</h2>
+            <p className="mt-1 text-sm text-gray-600">
+              プロジェクトを削除すると、関連データも削除されます。
+            </p>
+            <DeleteProjectButton projectId={project.id} />
+          </div>
+        )}
+      </main>
+    </div>
+  );
+}