202 lines
8.6 KiB
PHP
202 lines
8.6 KiB
PHP
<?php
|
|
|
|
namespace App\Controllers;
|
|
|
|
use App\Core\Request;
|
|
use App\Core\Response;
|
|
use App\Core\Database;
|
|
|
|
class GuardianController
|
|
{
|
|
public function requestChildLink(Request $request, Response $response): void
|
|
{
|
|
$body = $request->getBody();
|
|
$nationalId = trim((string)($body['national_id'] ?? ''));
|
|
$relationship = (string)($body['relationship_type'] ?? 'guardian');
|
|
if (!preg_match('/^[0-9]{10}$/', $nationalId)) {
|
|
$response->status(422)->json(['status' => 'error', 'message' => 'الرقم الوطني يجب أن يتكون من 10 أرقام']);
|
|
return;
|
|
}
|
|
if (!in_array($relationship, ['father', 'mother', 'brother', 'guardian'], true)) {
|
|
$relationship = 'guardian';
|
|
}
|
|
$student = Database::selectOne("SELECT id FROM students WHERE national_id_hash = ? LIMIT 1", [\App\Core\Security::blindIndex($nationalId)]);
|
|
if (!$student) {
|
|
// Do not reveal whether a national identity exists.
|
|
$response->status(202)->json(['status' => 'pending', 'message' => 'تم استلام طلب الربط للمراجعة']);
|
|
return;
|
|
}
|
|
$existing = Database::selectOne("SELECT id FROM guardian_students WHERE guardian_id = ? AND student_id = ? LIMIT 1", [$request->user_id, $student['id']]);
|
|
if ($existing) {
|
|
$response->json(['status' => 'success', 'message' => 'الطالب مرتبط بهذا الحساب مسبقاً']);
|
|
return;
|
|
}
|
|
$uuid = $this->uuid();
|
|
Database::query(
|
|
"INSERT INTO guardian_link_requests (uuid, guardian_id, student_id, relationship_type, status)
|
|
VALUES (?, ?, ?, ?, 'pending') ON DUPLICATE KEY UPDATE relationship_type = VALUES(relationship_type)",
|
|
[$uuid, $request->user_id, $student['id'], $relationship]
|
|
);
|
|
$response->status(202)->json(['status' => 'pending', 'message' => 'أُرسل طلب الربط إلى الطالب للموافقة']);
|
|
}
|
|
|
|
public function pendingLinkRequests(Request $request, Response $response): void
|
|
{
|
|
$requests = Database::select(
|
|
"SELECT glr.uuid, glr.relationship_type, glr.created_at, g.full_name AS guardian_name
|
|
FROM guardian_link_requests glr JOIN guardians g ON g.id = glr.guardian_id
|
|
WHERE glr.student_id = ? AND glr.status = 'pending' ORDER BY glr.created_at DESC",
|
|
[$request->user_id]
|
|
);
|
|
$response->json(['status' => 'success', 'data' => $requests]);
|
|
}
|
|
|
|
public function reviewLinkRequest(Request $request, Response $response): void
|
|
{
|
|
$uuid = trim((string)($request->getBody()['request_uuid'] ?? ''));
|
|
$decision = (string)($request->getBody()['decision'] ?? '');
|
|
if (!in_array($decision, ['approved', 'rejected'], true)) {
|
|
$response->status(422)->json(['status' => 'error', 'message' => 'قرار الربط غير صالح']);
|
|
return;
|
|
}
|
|
$link = Database::selectOne(
|
|
"SELECT * FROM guardian_link_requests WHERE uuid = ? AND student_id = ? AND status = 'pending' LIMIT 1",
|
|
[$uuid, $request->user_id]
|
|
);
|
|
if (!$link) {
|
|
$response->status(404)->json(['status' => 'error', 'message' => 'طلب الربط غير موجود']);
|
|
return;
|
|
}
|
|
Database::query("UPDATE guardian_link_requests SET status = ?, reviewed_at = NOW() WHERE id = ?", [$decision, $link['id']]);
|
|
if ($decision === 'approved') {
|
|
Database::query(
|
|
"INSERT INTO guardian_students (guardian_id, student_id, relationship_type) VALUES (?, ?, ?)
|
|
ON DUPLICATE KEY UPDATE relationship_type = VALUES(relationship_type), can_view_analytics = 1",
|
|
[$link['guardian_id'], $request->user_id, $link['relationship_type']]
|
|
);
|
|
}
|
|
$response->json(['status' => 'success', 'message' => $decision === 'approved' ? 'تم اعتماد ربط ولي الأمر' : 'تم رفض طلب الربط']);
|
|
}
|
|
|
|
/**
|
|
* Get Dashboard Data for Guardian
|
|
* GET /api/guardian/dashboard
|
|
*/
|
|
public function getDashboard(Request $request, Response $response): void
|
|
{
|
|
$guardianId = $request->user_id;
|
|
|
|
// Fetch children linked to this guardian
|
|
$children = Database::select(
|
|
"SELECT s.id, s.uuid, s.full_name, s.national_id, s.grade_level, s.stream
|
|
FROM students s
|
|
JOIN guardian_students gs ON gs.student_id = s.id
|
|
WHERE gs.guardian_id = ?",
|
|
[$guardianId]
|
|
);
|
|
|
|
$dashboardData = [];
|
|
|
|
foreach ($children as $child) {
|
|
$studentId = $child['id'];
|
|
|
|
// 1. Mastery Analytics (Readiness)
|
|
$mastery = Database::selectOne(
|
|
"SELECT tawjihi_readiness_score, exams_passed_count, exams_total_count
|
|
FROM student_mastery_analytics
|
|
WHERE student_id = ?
|
|
ORDER BY updated_at DESC LIMIT 1",
|
|
[$studentId]
|
|
);
|
|
|
|
// 2. Socratic checkpoints count (in_video_checkpoint passed)
|
|
$checkpointsCount = Database::selectOne(
|
|
"SELECT COUNT(*) as cnt
|
|
FROM exam_attempts ea
|
|
JOIN exams e ON e.id = ea.exam_id
|
|
WHERE ea.student_id = ? AND e.scope = 'in_video_checkpoint' AND ea.status = 'passed'",
|
|
[$studentId]
|
|
)['cnt'] ?? 0;
|
|
|
|
// 3. Remediation count (weaknesses fixed)
|
|
$remediationCount = Database::selectOne(
|
|
"SELECT COUNT(DISTINCT ea.exam_id) as cnt
|
|
FROM exam_attempts ea
|
|
WHERE ea.student_id = ? AND ea.status = 'needs_remediation'",
|
|
[$studentId]
|
|
)['cnt'] ?? 0;
|
|
|
|
// 4. Forensic Weakness Log (Recent exam attempts with AI diagnostic)
|
|
$diagnosticLogs = Database::select(
|
|
"SELECT ea.percentage, ea.status, ea.weak_topics_json, ea.ai_diagnostic_report, ea.completed_at, e.title as exam_title, e.scope
|
|
FROM exam_attempts ea
|
|
JOIN exams e ON e.id = ea.exam_id
|
|
WHERE ea.student_id = ?
|
|
ORDER BY ea.id DESC LIMIT 5",
|
|
[$studentId]
|
|
);
|
|
|
|
// Process weak topics JSON
|
|
foreach ($diagnosticLogs as &$log) {
|
|
if (!empty($log['weak_topics_json'])) {
|
|
$log['weak_topics'] = json_decode($log['weak_topics_json'], true) ?: [];
|
|
} else {
|
|
$log['weak_topics'] = [];
|
|
}
|
|
unset($log['weak_topics_json']);
|
|
}
|
|
|
|
$dashboardData[] = [
|
|
'student' => [
|
|
'id' => $child['id'],
|
|
'uuid' => $child['uuid'],
|
|
'name' => $child['full_name'],
|
|
'national_id' => $this->maskNationalId((string)$child['national_id']),
|
|
'grade_stream' => ($child['grade_level'] ?? 'غير محدد') . ' (' . ($child['stream'] ?? 'عام') . ')'
|
|
],
|
|
'metrics' => [
|
|
'readiness_score' => $mastery ? (float)$mastery['tawjihi_readiness_score'] : 0.0,
|
|
'checkpoints_passed' => (int)$checkpointsCount,
|
|
'remediations_flagged' => (int)$remediationCount,
|
|
'exams_passed_count' => $mastery ? (int)$mastery['exams_passed_count'] : 0,
|
|
'exams_total_count' => $mastery ? (int)$mastery['exams_total_count'] : 0
|
|
],
|
|
'diagnostics' => $diagnosticLogs
|
|
];
|
|
}
|
|
|
|
$response->json([
|
|
'status' => 'success',
|
|
'data' => [
|
|
'children' => $dashboardData
|
|
]
|
|
]);
|
|
}
|
|
|
|
private function maskNationalId(string $storedValue): string
|
|
{
|
|
if ($storedValue === '') {
|
|
return '';
|
|
}
|
|
|
|
try {
|
|
$decrypted = \App\Core\Security::decrypt($storedValue);
|
|
$nationalId = $decrypted !== '' ? $decrypted : $storedValue;
|
|
} catch (\Throwable $e) {
|
|
$nationalId = $storedValue;
|
|
}
|
|
|
|
return strlen($nationalId) >= 4
|
|
? str_repeat('*', max(0, strlen($nationalId) - 4)) . substr($nationalId, -4)
|
|
: '****';
|
|
}
|
|
|
|
private function uuid(): string
|
|
{
|
|
$data = random_bytes(16);
|
|
$data[6] = chr((ord($data[6]) & 0x0f) | 0x40);
|
|
$data[8] = chr((ord($data[8]) & 0x3f) | 0x80);
|
|
return vsprintf('%s%s-%s-%s-%s-%s%s%s', str_split(bin2hex($data), 4));
|
|
}
|
|
}
|