+
+
+
+
+
+```
+
+---
+
+## الملف: `public/index.php`
+
+```php
+getRouter();
+
+// ══ Auth Routes ══════════════════════════════════════════════
+$router->addRoute('POST', '/api/v1/auth/login', [AuthController::class, 'login']);
+$router->addRoute('POST', '/api/v1/auth/register', [AuthController::class, 'register']);
+$router->addRoute('GET', '/api/v1/auth/me', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [AuthController::class, 'me']
+]);
+$router->addRoute('POST', '/api/v1/auth/2fa/enable', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [AuthController::class, 'enable2FA']
+]);
+$router->addRoute('POST', '/api/v1/auth/2fa/verify', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [AuthController::class, 'verify2FA']
+]);
+$router->addRoute('POST', '/api/v1/auth/2fa/disable', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [AuthController::class, 'disable2FA']
+]);
+
+// ══ Company Routes ═══════════════════════════════════════════
+$router->addRoute('GET', '/api/v1/companies', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [\App\Modules\Companies\CompanyController::class, 'list']
+]);
+$router->addRoute('POST', '/api/v1/companies', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [\App\Modules\Companies\CompanyController::class, 'create']
+]);
+$router->addRoute('POST', '/api/v1/companies/{id}/jofotara', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [\App\Modules\Companies\CompanyController::class, 'updateJoFotara']
+]);
+
+// ══ User Routes ══════════════════════════════════════════════
+$router->addRoute('GET', '/api/v1/users', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [\App\Modules\Users\UserController::class, 'index']
+]);
+$router->addRoute('POST', '/api/v1/users', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [\App\Modules\Users\UserController::class, 'create']
+]);
+
+// ══ Invoice Routes ═══════════════════════════════════════════
+$router->addRoute('GET', '/api/v1/invoices', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [\App\Modules\Invoices\InvoiceController::class, 'list']
+]);
+$router->addRoute('POST', '/api/v1/invoices/upload', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [\App\Modules\Invoices\InvoiceController::class, 'upload']
+]);
+$router->addRoute('GET', '/api/v1/invoices/{id}', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [\App\Modules\Invoices\InvoiceController::class, 'detail']
+]);
+$router->addRoute('POST', '/api/v1/invoices/{id}/submit', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [\App\Modules\Invoices\InvoiceController::class, 'submit']
+]);
+
+// ══ Subscriptions ═════════════════════════════════════════════════
+$router->addRoute('GET', '/api/v1/subscriptions/me', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class, \App\Middleware\TenantMiddleware::class],
+ 'handler' => [\App\Modules\Subscriptions\SubscriptionController::class, 'me']
+]);
+
+// ══ API Keys ═══════════════════════════════════════════════════
+$router->addRoute('GET', '/api/v1/api-keys', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class, \App\Middleware\TenantMiddleware::class],
+ 'handler' => [\App\Modules\ApiKeys\ApiKeyController::class, 'list']
+]);
+$router->addRoute('POST', '/api/v1/api-keys', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class, \App\Middleware\TenantMiddleware::class],
+ 'handler' => [\App\Modules\ApiKeys\ApiKeyController::class, 'create']
+]);
+
+// ══ External API (HMAC) ══════════════════════════════════════
+$router->addRoute('POST', '/api/v1/external/invoices/upload', [
+ 'middleware' => [\App\Middleware\HmacMiddleware::class],
+ 'handler' => [\App\Modules\Invoices\InvoiceController::class, 'upload']
+]);
+
+// ══ Dashboard ════════════════════════════════════════════════
+$router->addRoute('GET', '/api/v1/dashboard', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [\App\Modules\Dashboard\DashboardController::class, 'getStats']
+]);
+
+// ══ Super Admin ══════════════════════════════════════════════
+$router->addRoute('GET', '/api/v1/admin/stats', [
+ 'middleware' => [\App\Middleware\AuthMiddleware::class],
+ 'handler' => [\App\Modules\Admin\AdminController::class, 'getSystemStats']
+]);
+
+// ══ Health Check ═════════════════════════════════════════════
+$router->addRoute('GET', '/api/v1/health', function($request) {
+ \App\Core\Response::json([
+ 'status' => 'ok',
+ 'timestamp' => date('c'),
+ 'php' => PHP_VERSION,
+ 'db' => 'connected' // Simple check
+ ]);
+});
+
+// ══ Determine if this is an API request ═════════════════════════════
+$apiRoute = $_GET['route'] ?? null;
+
+if (!$apiRoute) {
+ // Not an API call — serve the SPA shell
+ include __DIR__ . '/shell.php';
+ exit;
+}
+
+$app->run();
+
+```
+
+---
+
+## الملف: `public/shell.php`
+
+```php
+
+
+
+
-
+
- ${i.original_file_path.endsWith('.pdf') ? `
` : `
`}
+ ${i.original_file_path.endsWith('.pdf') ? `
` : `
`}
diff --git a/queue/Jobs/RiskAnalysisJob.php b/queue/Jobs/RiskAnalysisJob.php
index 047cb2b..0e31e9a 100644
--- a/queue/Jobs/RiskAnalysisJob.php
+++ b/queue/Jobs/RiskAnalysisJob.php
@@ -38,11 +38,12 @@ final class RiskAnalysisJob
$companyId
]);
} else {
- $stmt = $db->prepare("INSERT INTO risk_scores (id, tenant_id, company_id, risk_level, score, factors, calculated_at) VALUES (?, ?, ?, ?, ?, ?, NOW())");
+ $stmt = $db->prepare("INSERT INTO risk_scores (id, tenant_id, company_id, risk_type, risk_level, score, factors, calculated_at) VALUES (?, ?, ?, ?, ?, ?, ?, NOW())");
$stmt->execute([
\Ramsey\Uuid\Uuid::uuid4()->toString(),
$tenantId,
$companyId,
+ 'overall_company_risk', // risk_type is required
$analysis['level'],
$analysis['score'],
json_encode($analysis['factors'], JSON_UNESCAPED_UNICODE)
diff --git a/scripts/aggregate_project.py b/scripts/aggregate_project.py
new file mode 100644
index 0000000..0273d8e
--- /dev/null
+++ b/scripts/aggregate_project.py
@@ -0,0 +1,51 @@
+import os
+
+def aggregate_project(root_dir, output_file, exclude_dirs=None, exclude_files=None, extensions=None):
+ if exclude_dirs is None:
+ exclude_dirs = {'.git', 'vendor', 'node_modules', 'storage', '.gemini', 'artifacts', 'brain', 'scratch'}
+ if exclude_files is None:
+ exclude_files = {'composer.lock', 'package-lock.json', 'aggregate_project.py', output_file}
+ if extensions is None:
+ extensions = {'.php', '.js', '.css', '.html', '.sql', '.json', '.md', '.py', '.env.example', '.xml', '.env'}
+
+ with open(output_file, 'w', encoding='utf-8') as f:
+ f.write("# مُصادَق — ملخص كود المشروع الكامل\n\n")
+ f.write("هذا الملف يحتوي على كافة ملفات المصدر للمشروع مجمعة لتسهيل المراجعة.\n\n")
+
+ for root, dirs, files in os.walk(root_dir):
+ # Exclude directories
+ dirs[:] = [d for d in dirs if d not in exclude_dirs]
+
+ for file in files:
+ if file in exclude_files:
+ continue
+
+ _, ext = os.path.splitext(file)
+ # Include specific files or extensions
+ if ext not in extensions and file not in {'.env', 'phpunit.xml'}:
+ continue
+
+ full_path = os.path.join(root, file)
+ rel_path = os.path.relpath(full_path, root_dir)
+
+ f.write(f"## الملف: `{rel_path}`\n\n")
+
+ # Determine language for markdown block
+ lang = ext.replace('.', '')
+ if lang == 'php': lang = 'php'
+ elif lang == 'js': lang = 'javascript'
+ elif lang == 'sql': lang = 'sql'
+ else: lang = ''
+
+ f.write(f"```{lang}\n")
+ try:
+ with open(full_path, 'r', encoding='utf-8') as src:
+ f.write(src.read())
+ except Exception as e:
+ f.write(f"// تعذر قراءة الملف: {str(e)}")
+ f.write("\n```\n\n")
+ f.write("---\n\n")
+
+if __name__ == "__main__":
+ aggregate_project('.', 'musadaq_full_code.md')
+ print("تم تجميع الكود بنجاح في: musadaq_full_code.md")