@@ -535,10 +592,10 @@
html += `لا توجد فواتير.
- ${inv.id}
+
+ ${inv.id}
${inv.company_id}
${new Date(inv.created_at).toLocaleDateString('ar-JO')}
${inv.status}
@@ -554,6 +611,128 @@
}
}
+ async function renderInvoiceDetail(id) {
+ document.getElementById('page-title').textContent = 'تفاصيل الفاتورة';
+ contentDiv.innerHTML = `
+ ${line.description || 'بدون وصف'}
+ ${line.quantity}
+ ${line.unit_price}
+ ${line.line_total}
+
+ `;
+ });
+ } else {
+ linesHtml = 'لا توجد بنود مستخرجة بعد
`;
+
+ try {
+ const res = await API.get(`/invoices/${id}`);
+ const inv = res.data;
+
+ const statusColor = inv.status === 'approved' ? 'text-primary' : (inv.status === 'rejected' ? 'text-red-400' : 'text-yellow-400');
+
+ let linesHtml = '';
+ if (inv.lines && inv.lines.length > 0) {
+ inv.lines.forEach(line => {
+ linesHtml += `
+
+
+
+ `;
+ } catch (err) {
+ contentDiv.innerHTML = `
+
+
+
+
+
+
+ المستند الأصلي
+ فتح في نافذة جديدة +
+ ${inv.original_file_path.endsWith('.pdf')
+ ? ``
+ : `
`
+ }
+
+ خطأ في تحميل تفاصيل الفاتورة: ${err.message}
`;
+ }
+ }
+
+ async function submitToJoFotara(id) {
+ try {
+ // We'll need a POST /api/v1/invoices/{id}/submit endpoint
+ const res = await API.post(`/invoices/${id}/submit`, {});
+ alert('تم إرسال الفاتورة للطابور بنجاح. سيتم تحديث الحالة تلقائياً.');
+ renderInvoiceDetail(id);
+ } catch (err) {
+ alert(err.error?.message_ar || 'فشل الإرسال: تأكد من إعدادات الربط للشركة.');
+ }
+ }
+
// ── Modals & Actions ─────────────────────────────────────
function showAddCompanyModal() {
const modals = document.getElementById('modals');
diff --git a/queue/Jobs/RiskAnalysisJob.php b/queue/Jobs/RiskAnalysisJob.php
new file mode 100644
index 0000000..047cb2b
--- /dev/null
+++ b/queue/Jobs/RiskAnalysisJob.php
@@ -0,0 +1,56 @@
+riskService->calculateCompanyRiskScore($companyId);
+
+ // Store or update risk score
+ $db = Database::getInstance();
+
+ $stmt = $db->prepare("SELECT id FROM risk_scores WHERE company_id = ? LIMIT 1");
+ $stmt->execute([$companyId]);
+ $existing = $stmt->fetch();
+
+ if ($existing) {
+ $stmt = $db->prepare("UPDATE risk_scores SET risk_level = ?, score = ?, factors = ?, calculated_at = NOW() WHERE company_id = ?");
+ $stmt->execute([
+ $analysis['level'],
+ $analysis['score'],
+ json_encode($analysis['factors'], JSON_UNESCAPED_UNICODE),
+ $companyId
+ ]);
+ } else {
+ $stmt = $db->prepare("INSERT INTO risk_scores (id, tenant_id, company_id, risk_level, score, factors, calculated_at) VALUES (?, ?, ?, ?, ?, ?, NOW())");
+ $stmt->execute([
+ \Ramsey\Uuid\Uuid::uuid4()->toString(),
+ $tenantId,
+ $companyId,
+ $analysis['level'],
+ $analysis['score'],
+ json_encode($analysis['factors'], JSON_UNESCAPED_UNICODE)
+ ]);
+ }
+ } catch (Throwable $e) {
+ echo "[!] Risk Analysis failed for company {$companyId}: " . $e->getMessage() . "\n";
+ throw $e;
+ }
+ }
+}
diff --git a/queue/Jobs/SendNotificationJob.php b/queue/Jobs/SendNotificationJob.php
new file mode 100644
index 0000000..341ffa5
--- /dev/null
+++ b/queue/Jobs/SendNotificationJob.php
@@ -0,0 +1,37 @@
+prepare("INSERT INTO notifications (id, user_id, title, message, type, is_read, created_at) VALUES (?, ?, ?, ?, ?, 0, NOW())");
+ $stmt->execute([
+ \Ramsey\Uuid\Uuid::uuid4()->toString(),
+ $userId,
+ $title,
+ $message,
+ $type
+ ]);
+
+ // Here we could also trigger WebSockets or push notifications if implemented
+
+ } catch (Throwable $e) {
+ echo "[!] Notification failed for user {$userId}: " . $e->getMessage() . "\n";
+ throw $e;
+ }
+ }
+}
diff --git a/queue/Jobs/SubmitJoFotaraJob.php b/queue/Jobs/SubmitJoFotaraJob.php
new file mode 100644
index 0000000..0e7ef0c
--- /dev/null
+++ b/queue/Jobs/SubmitJoFotaraJob.php
@@ -0,0 +1,81 @@
+invoiceModel->update($invoiceId, ['status' => 'submitting']);
+
+ // 2. Fetch Invoice
+ $db = \App\Core\Database::getInstance();
+ $stmt = $db->prepare("SELECT * FROM invoices WHERE id = ? LIMIT 1");
+ $stmt->execute([$invoiceId]);
+ $invoice = $stmt->fetch();
+
+ if (!$invoice) {
+ throw new \Exception("Invoice not found.");
+ }
+
+ // 3. Fetch Company Credentials
+ $credentials = $this->companyService->getJoFotaraCredentials($invoice['company_id']);
+ if (empty($credentials['clientId']) || empty($credentials['secretKey'])) {
+ throw new \Exception("Company is not linked to JoFotara.");
+ }
+
+ // 4. Fetch Invoice Lines
+ $stmt = $db->prepare("SELECT * FROM invoice_lines WHERE invoice_id = ?");
+ $stmt->execute([$invoiceId]);
+ $lines = $stmt->fetchAll();
+
+ // 5. Generate UBL XML
+ $xmlString = $this->ublGenerator->generate($invoice, $lines);
+ $xmlBase64 = base64_encode($xmlString);
+
+ // 6. Submit to JoFotara
+ $response = $this->jofotaraGateway->submitInvoice($invoice['company_id'], $xmlBase64, $credentials);
+
+ // 7. Process Response
+ // Assuming response contains a success boolean and possibly qr_code
+ if (isset($response['success']) && $response['success']) {
+ $this->invoiceModel->update($invoiceId, [
+ 'status' => 'approved',
+ 'qr_code' => $response['qr_code'] ?? null,
+ 'jofotara_response' => json_encode($response, JSON_UNESCAPED_UNICODE)
+ ]);
+ } else {
+ $this->invoiceModel->update($invoiceId, [
+ 'status' => 'rejected',
+ 'jofotara_response' => json_encode($response, JSON_UNESCAPED_UNICODE)
+ ]);
+ }
+
+ } catch (Throwable $e) {
+ $this->invoiceModel->update($invoiceId, [
+ 'status' => 'validation_failed',
+ 'validation_errors' => json_encode([['message_ar' => 'فشل الإرسال: ' . $e->getMessage()]], JSON_UNESCAPED_UNICODE)
+ ]);
+ throw $e;
+ }
+ }
+}
diff --git a/queue/worker.php b/queue/worker.php
index d94090c..f9e6669 100644
--- a/queue/worker.php
+++ b/queue/worker.php
@@ -34,6 +34,21 @@ while ($keepRunning) {
$handler->handle($job['payload']);
break;
+ case 'submit_jofotara':
+ $handler = $container->get(\Queue\Jobs\SubmitJoFotaraJob::class);
+ $handler->handle($job['payload']);
+ break;
+
+ case 'risk_analysis':
+ $handler = $container->get(\Queue\Jobs\RiskAnalysisJob::class);
+ $handler->handle($job['payload']);
+ break;
+
+ case 'send_notification':
+ $handler = $container->get(\Queue\Jobs\SendNotificationJob::class);
+ $handler->handle($job['payload']);
+ break;
+
default:
echo "[!] Unknown job type: {$job['type']}\n";
}
diff --git a/supervisor.conf b/supervisor.conf
new file mode 100644
index 0000000..5ce6663
--- /dev/null
+++ b/supervisor.conf
@@ -0,0 +1,9 @@
+[program:musadaq-worker]
+command=php /var/www/musadeq/queue/worker.php
+user=www-data
+autostart=true
+autorestart=true
+stderr_logfile=/var/log/musadaq-worker.err.log
+stdout_logfile=/var/log/musadaq-worker.out.log
+numprocs=2
+process_name=%(program_name)s_%(process_num)02d
diff --git a/tests/Unit/TotpServiceTest.php b/tests/Unit/TotpServiceTest.php
new file mode 100644
index 0000000..a030f82
--- /dev/null
+++ b/tests/Unit/TotpServiceTest.php
@@ -0,0 +1,30 @@
+generateSecret();
+
+ $this->assertEquals(16, strlen($secret));
+ $this->assertMatchesRegularExpression('/^[A-Z2-7]+$/', $secret);
+ }
+
+ public function test_it_verifies_correct_code(): void
+ {
+ $service = new TotpService();
+ $secret = 'JBSWY3DPEHPK3PXP'; // Known secret
+
+ // We can't easily test the code without a time mocker or calculation
+ // but we can check if it fails with an obviously wrong code
+ $this->assertFalse($service->verify($secret, '000000'));
+ }
+}