246 lines
19 KiB
PHP
246 lines
19 KiB
PHP
<?php
|
|
/**
|
|
* Saqel API Front Controller
|
|
* Single entry point handling routing and application bootstrap.
|
|
*/
|
|
|
|
// 1. Boot the application (autoloader, env, errors)
|
|
require_once dirname(__DIR__) . '/app/bootstrap.php';
|
|
|
|
use App\Core\Request;
|
|
use App\Core\Response;
|
|
use App\Core\Router;
|
|
|
|
// 2. Initialize request and response objects
|
|
$request = new Request();
|
|
$response = new Response();
|
|
$router = new Router();
|
|
|
|
// 3. Define Global Middleware
|
|
$router->use(\App\Middlewares\SecurityMiddleware::class);
|
|
|
|
// 4. Define Web and API Routes
|
|
|
|
// Main Platform Landing Page (Public High-Conversion Showcase)
|
|
$router->get('/', function ($request, $response) {
|
|
$response->html(\App\Views\LandingPage::render());
|
|
});
|
|
|
|
// Dedicated Institutional Proposal for Military Culture Directorate
|
|
$router->get('/military-culture', function ($request, $response) {
|
|
$response->html(\App\Views\MilitaryCulturePitch::render());
|
|
});
|
|
$router->get('/military', function ($request, $response) {
|
|
$response->html(\App\Views\MilitaryCulturePitch::render());
|
|
});
|
|
|
|
// Dedicated Institutional Proposal for Vocational Training Corporation (VTC)
|
|
$router->get('/vtc', function ($request, $response) {
|
|
$response->html(\App\Views\VocationalTrainingPitch::render());
|
|
});
|
|
$router->get('/vocational', function ($request, $response) {
|
|
$response->html(\App\Views\VocationalTrainingPitch::render());
|
|
});
|
|
|
|
// Web Portals (HTML + Native JavaScript)
|
|
$router->get('/student', function ($request, $response) {
|
|
$response->html(\App\Views\StudentPortal::render());
|
|
});
|
|
|
|
$router->get('/teacher', function ($request, $response) {
|
|
$response->html(\App\Views\TeacherPortal::render());
|
|
});
|
|
|
|
$router->get('/guardian', function ($request, $response) {
|
|
$response->html(\App\Views\GuardianPortal::render());
|
|
});
|
|
|
|
$router->get('/school-admin', function ($request, $response) {
|
|
$response->html(\App\Views\SchoolAdminPortal::render());
|
|
});
|
|
|
|
$router->get('/curriculum-studio', function ($request, $response) {
|
|
$response->html(\App\Views\CurriculumStudio::render());
|
|
});
|
|
|
|
// Real Ministry Curriculum PDF Ingestion & Live Tree API
|
|
$curriculumManagerMiddleware = [\App\Middlewares\AuthMiddleware::class, \App\Middlewares\CurriculumManagerMiddleware::class];
|
|
$teacherMiddleware = [\App\Middlewares\AuthMiddleware::class, \App\Middlewares\TeacherRoleMiddleware::class];
|
|
$studentMiddleware = [\App\Middlewares\AuthMiddleware::class, \App\Middlewares\StudentRoleMiddleware::class];
|
|
$guardianMiddleware = [\App\Middlewares\AuthMiddleware::class, \App\Middlewares\GuardianRoleMiddleware::class];
|
|
$institutionalMiddleware = [\App\Middlewares\AuthMiddleware::class, \App\Middlewares\InstitutionalRoleMiddleware::class];
|
|
$superAdminMiddleware = [\App\Middlewares\AuthMiddleware::class, \App\Middlewares\SuperAdminRoleMiddleware::class];
|
|
$chatMiddleware = [\App\Middlewares\AuthMiddleware::class, \App\Middlewares\ChatRoleMiddleware::class];
|
|
|
|
$router->post('/api/curriculum/upload-pdf', [\App\Controllers\CurriculumController::class, 'uploadPdf'], $curriculumManagerMiddleware);
|
|
$router->get('/api/curriculum/upload-status', [\App\Controllers\CurriculumController::class, 'getUploadStatus'], $curriculumManagerMiddleware);
|
|
$router->get('/api/curriculum/upload-log', [\App\Controllers\CurriculumController::class, 'getUploadLog'], $curriculumManagerMiddleware);
|
|
$router->get('/api/curriculum/tree', [\App\Controllers\CurriculumController::class, 'getTree']);
|
|
$router->get('/api/curriculum/lesson', [\App\Controllers\CurriculumController::class, 'getLessonContent'], [\App\Middlewares\AuthMiddleware::class]);
|
|
$router->post('/api/curriculum/save-lesson', [\App\Controllers\CurriculumController::class, 'saveLessonContent'], $curriculumManagerMiddleware);
|
|
$router->post('/api/curriculum/generate-ai-assets', [\App\Controllers\CurriculumController::class, 'generateAiAssets'], $curriculumManagerMiddleware);
|
|
$router->post('/api/curriculum/bake-lab', [\App\Controllers\CurriculumController::class, 'bakeInteractiveLab'], $curriculumManagerMiddleware);
|
|
$router->post('/api/curriculum/generate-questions', [\App\Controllers\CurriculumController::class, 'generateQuestionBank'], $curriculumManagerMiddleware);
|
|
$router->post('/api/curriculum/upload-video', [\App\Controllers\CurriculumController::class, 'uploadLessonVideo'], $curriculumManagerMiddleware);
|
|
$router->get('/api/curriculum/search', function ($request, $response) {
|
|
$q = $request->getQueryParams()['q'] ?? '';
|
|
$response->json([
|
|
'status' => 'success',
|
|
'data' => \App\Services\CurriculumService::searchCurriculum($q)
|
|
]);
|
|
});
|
|
$router->get('/api/curriculum/simulations', [\App\Controllers\CurriculumController::class, 'listSimulations']);
|
|
$router->get('/api/curriculum/simulations/{subject}/{simName}', [\App\Controllers\CurriculumController::class, 'getSimulation']);
|
|
$router->get('/api/curriculum/document', [\App\Controllers\CurriculumController::class, 'getDocumentContent'], [\App\Middlewares\AuthMiddleware::class]);
|
|
$router->get('/api/curriculum/assets/{assetId}', [\App\Controllers\CurriculumController::class, 'getPublishedAsset'], $studentMiddleware);
|
|
$router->get('/api/curriculum/lessons/{lessonId}/videos', [\App\Controllers\VideoController::class, 'listPublishedLessonVideos'], $studentMiddleware);
|
|
$router->get('/api/curriculum/lessons/{lessonId}/english-package', [\App\Controllers\CurriculumController::class, 'getPublishedEnglishPackage'], $studentMiddleware);
|
|
$router->get('/api/video-versions/{versionId}/playback', [\App\Controllers\VideoController::class, 'getVideoVersionPlayback'], $studentMiddleware);
|
|
$router->post('/api/video-versions/{versionId}/watch-sessions', [\App\Controllers\VideoController::class, 'startWatchSession'], $studentMiddleware);
|
|
$router->post('/api/watch-sessions/{sessionId}/events', [\App\Controllers\VideoController::class, 'recordWatchEvent'], $studentMiddleware);
|
|
|
|
// Health & Diagnostic Routes
|
|
$router->get('/api/health', function ($request, $response) {
|
|
$response->json([
|
|
'status' => 'success',
|
|
'message' => 'Saqel API is healthy and fast (Pure PHP)',
|
|
'app_name' => getenv('APP_NAME') ?: 'Saqel',
|
|
'time' => date('Y-m-d H:i:s')
|
|
]);
|
|
});
|
|
$router->get('/api/health/upload-limits', function ($request, $response) {
|
|
$response->json([
|
|
'status' => 'success',
|
|
'data' => [
|
|
'php_sapi' => PHP_SAPI,
|
|
'post_max_size' => ini_get('post_max_size'),
|
|
'upload_max_filesize' => ini_get('upload_max_filesize'),
|
|
'memory_limit' => ini_get('memory_limit'),
|
|
'max_execution_time' => ini_get('max_execution_time'),
|
|
],
|
|
]);
|
|
});
|
|
$router->get('/api/test/nabeh', [\App\Controllers\TestController::class, 'testNabeh'], $superAdminMiddleware);
|
|
$router->get('/api/test/system', [\App\Controllers\TestController::class, 'testSystem'], $superAdminMiddleware);
|
|
$router->get('/api/super-admin/overview', [\App\Controllers\SuperAdminController::class, 'overview'], $superAdminMiddleware);
|
|
$router->get('/api/super-admin/payouts', [\App\Controllers\SuperAdminController::class, 'payouts'], $superAdminMiddleware);
|
|
$router->get('/api/super-admin/ai-nodes', [\App\Controllers\SuperAdminController::class, 'aiNodes'], $superAdminMiddleware);
|
|
$router->get('/api/super-admin/security-alerts', [\App\Controllers\SuperAdminController::class, 'securityAlerts'], $superAdminMiddleware);
|
|
$router->get('/api/super-admin/schools', [\App\Controllers\SuperAdminController::class, 'schools'], $superAdminMiddleware);
|
|
$router->post('/api/super-admin/schools/save', [\App\Controllers\SuperAdminController::class, 'saveSchool'], $superAdminMiddleware);
|
|
$router->post('/api/super-admin/schools/toggle', [\App\Controllers\SuperAdminController::class, 'toggleSchool'], $superAdminMiddleware);
|
|
$router->get('/api/super-admin/staff', [\App\Controllers\SuperAdminController::class, 'staff'], $superAdminMiddleware);
|
|
$router->post('/api/super-admin/staff/save', [\App\Controllers\SuperAdminController::class, 'saveStaff'], $superAdminMiddleware);
|
|
$router->post('/api/super-admin/staff/toggle', [\App\Controllers\SuperAdminController::class, 'toggleStaff'], $superAdminMiddleware);
|
|
$router->get('/api/super-admin/directorates', [\App\Controllers\SuperAdminController::class, 'directorates'], $superAdminMiddleware);
|
|
$router->post('/api/super-admin/directorates/save', [\App\Controllers\SuperAdminController::class, 'saveDirectorate'], $superAdminMiddleware);
|
|
$router->post('/api/super-admin/directorates/toggle', [\App\Controllers\SuperAdminController::class, 'toggleDirectorate'], $superAdminMiddleware);
|
|
|
|
// OTP Authentication Routes (WhatsApp via Nabeh Gateway + Device Fingerprinting)
|
|
$router->post('/api/auth/otp/request', [\App\Controllers\AuthController::class, 'requestOtp'], [\App\Middlewares\RateLimitMiddleware::class]);
|
|
$router->post('/api/auth/otp/verify', [\App\Controllers\AuthController::class, 'verifyOtp'], [\App\Middlewares\RateLimitMiddleware::class]);
|
|
$router->post('/api/auth/logout', [\App\Controllers\AuthController::class, 'logout'], [\App\Middlewares\AuthMiddleware::class]);
|
|
$router->get('/api/auth/me', [\App\Controllers\AuthController::class, 'me'], [\App\Middlewares\AuthMiddleware::class]);
|
|
$router->post('/api/auth/student/login-national-id', [\App\Controllers\AuthController::class, 'verifyNationalId'], [\App\Middlewares\RateLimitMiddleware::class]);
|
|
$router->get('/api/student/profile/status', [\App\Controllers\AuthController::class, 'studentProfileStatus'], [\App\Middlewares\AuthMiddleware::class]);
|
|
$router->post('/api/student/profile/setup', [\App\Controllers\AuthController::class, 'studentProfileSetup'], [\App\Middlewares\RateLimitMiddleware::class]);
|
|
$router->post('/api/student/profile/update-grade', [\App\Controllers\AuthController::class, 'updateStudentGrade'], [\App\Middlewares\AuthMiddleware::class]);
|
|
|
|
// Guardian Routes (Authenticated)
|
|
$router->get('/api/guardian/dashboard', [\App\Controllers\GuardianController::class, 'getDashboard'], $guardianMiddleware);
|
|
$router->post('/api/guardian/children/link-requests', [\App\Controllers\GuardianController::class, 'requestChildLink'], $guardianMiddleware);
|
|
$router->get('/api/student/guardian-link-requests', [\App\Controllers\GuardianController::class, 'pendingLinkRequests'], $studentMiddleware);
|
|
$router->post('/api/student/guardian-link-requests/review', [\App\Controllers\GuardianController::class, 'reviewLinkRequest'], $studentMiddleware);
|
|
|
|
// Teacher Studio Routes (Authenticated)
|
|
$router->get('/api/teacher/profile/status', [\App\Controllers\TeacherController::class, 'profileStatus'], $teacherMiddleware);
|
|
$router->post('/api/teacher/profile/setup', [\App\Controllers\TeacherController::class, 'setupProfile'], $teacherMiddleware);
|
|
$router->get('/api/teacher/dashboard', [\App\Controllers\TeacherController::class, 'getDashboard'], $teacherMiddleware);
|
|
$router->get('/api/teacher/courses', [\App\Controllers\TeacherController::class, 'getCourses'], $teacherMiddleware);
|
|
$router->post('/api/teacher/courses', [\App\Controllers\TeacherController::class, 'addCourse'], $teacherMiddleware);
|
|
$router->post('/api/teacher/lessons', [\App\Controllers\TeacherController::class, 'addLesson'], $teacherMiddleware);
|
|
$router->post('/api/teacher/broadcast', [\App\Controllers\TeacherController::class, 'broadcastToClass'], $teacherMiddleware);
|
|
|
|
// Dual Video Storage & Cloudflare R2 / HLS Stream Routes (API-Driven)
|
|
$router->post('/api/teacher/videos/upload-direct', [\App\Controllers\VideoController::class, 'uploadDirect'], $teacherMiddleware);
|
|
$router->post('/api/teacher/submissions/preflight', [\App\Controllers\VideoController::class, 'preflightSubmission'], $teacherMiddleware);
|
|
$router->get('/api/teacher/submissions', [\App\Controllers\VideoController::class, 'listTeacherSubmissions'], $teacherMiddleware);
|
|
$router->post('/api/admin/video-review/publish', [\App\Controllers\VideoController::class, 'publishReviewedVersion'], $superAdminMiddleware);
|
|
$router->post('/api/admin/video-review/decision', [\App\Controllers\VideoController::class, 'recordVideoReviewDecision'], $superAdminMiddleware);
|
|
$router->post('/api/admin/video-review/evidence', [\App\Controllers\VideoController::class, 'submitVideoReviewEvidence'], $superAdminMiddleware);
|
|
$router->post('/api/teacher/lessons/checkpoints', [\App\Controllers\VideoController::class, 'saveCheckpoint'], $teacherMiddleware);
|
|
$router->get('/api/student/lessons', [\App\Controllers\VideoController::class, 'getStudentLessons'], [\App\Middlewares\AuthMiddleware::class]);
|
|
$router->get('/api/videos/stream/{uuid}', [\App\Controllers\VideoController::class, 'streamLocalVideo'], [\App\Middlewares\AuthMiddleware::class]);
|
|
$router->get('/api/videos/hls/{uuid}/{file}', [\App\Controllers\VideoController::class, 'streamHls'], [\App\Middlewares\AuthMiddleware::class]);
|
|
$router->get('/api/lessons/playback', [\App\Controllers\VideoController::class, 'getPlaybackData'], [\App\Middlewares\AuthMiddleware::class]);
|
|
$router->get('/api/lessons/{id}/playback', [\App\Controllers\VideoController::class, 'getPlaybackData'], [\App\Middlewares\AuthMiddleware::class]);
|
|
|
|
// Student & Teacher Chat Routes (API-Driven, Authenticated)
|
|
$router->get('/api/chat/conversations', [\App\Controllers\ChatController::class, 'getConversations'], $chatMiddleware);
|
|
$router->get('/api/chat/messages', [\App\Controllers\ChatController::class, 'getMessages'], $chatMiddleware);
|
|
$router->post('/api/chat/messages', [\App\Controllers\ChatController::class, 'sendMessage'], $chatMiddleware);
|
|
$router->post('/api/chat/read', [\App\Controllers\ChatController::class, 'markAsRead'], $chatMiddleware);
|
|
$router->get('/api/chat/unread-count', [\App\Controllers\ChatController::class, 'getUnreadCount'], $chatMiddleware);
|
|
|
|
// Multi-Level Exams & AI Mastery Analytics Routes (API-Driven)
|
|
$router->get('/api/exams', [\App\Controllers\ExamController::class, 'getExams'], $studentMiddleware);
|
|
$router->get('/api/exams/{id}', [\App\Controllers\ExamController::class, 'getExamDetails'], $studentMiddleware);
|
|
$router->post('/api/exams/{id}/submit', [\App\Controllers\ExamController::class, 'submitExam'], $studentMiddleware);
|
|
$router->get('/api/student/progress/mastery', [\App\Controllers\ExamController::class, 'getMastery'], $studentMiddleware);
|
|
$router->post('/api/student/lessons/{id}/progress', [\App\Controllers\VideoController::class, 'saveProgress'], $studentMiddleware);
|
|
|
|
// Smart Error Notebook & Adaptive Remediation Routes (دفتر الأخطاء الذكي والمسارات العلاجية)
|
|
$router->get('/api/student/error-notebook', [\App\Controllers\ErrorNotebookController::class, 'getErrorNotebook'], $studentMiddleware);
|
|
$router->post('/api/student/error-notebook/log', [\App\Controllers\ErrorNotebookController::class, 'logError'], $studentMiddleware);
|
|
$router->get('/api/student/error-notebook/remediation-quiz', [\App\Controllers\ErrorNotebookController::class, 'getRemediationQuiz'], $studentMiddleware);
|
|
$router->post('/api/student/error-notebook/resolve', [\App\Controllers\ErrorNotebookController::class, 'resolveError'], $studentMiddleware);
|
|
|
|
// Multi-Teacher Marketplace & Fair Reputation Routes (AI Telemetry + Anti-Brigade Defense)
|
|
$router->get('/api/teachers', [\App\Controllers\TeacherController::class, 'getMarketplaceTeachers']);
|
|
$router->get('/api/teachers/{id}/metrics', [\App\Controllers\TeacherController::class, 'getTeacherMetrics']);
|
|
$router->post('/api/teachers/{id}/reviews', [\App\Controllers\TeacherController::class, 'submitReview'], [\App\Middlewares\AuthMiddleware::class]);
|
|
$router->get('/api/teacher/reputation', [\App\Controllers\TeacherController::class, 'getMyReputation'], [\App\Middlewares\AuthMiddleware::class]);
|
|
$router->get('/api/teacher/monetization', [\App\Controllers\TeacherController::class, 'getMonetizationDashboard'], $teacherMiddleware);
|
|
$router->post('/api/teacher/audit-studio-video', [\App\Controllers\TeacherController::class, 'auditStudioVideo'], $teacherMiddleware);
|
|
$router->get('/api/teacher/qna', [\App\Controllers\TeacherController::class, 'getQnA'], $teacherMiddleware);
|
|
|
|
$router->get('/api/curriculum/interactive-lab', [\App\Controllers\CurriculumController::class, 'getInteractiveLab']);
|
|
|
|
// Military Culture Directorate & School Principal/Supervisor Routes (Institutional Architecture)
|
|
$router->get('/api/directorate/dashboard', [\App\Controllers\DirectorateSupervisorController::class, 'getDirectorateDashboard'], $institutionalMiddleware);
|
|
$router->get('/api/supervisor/school-dashboard', [\App\Controllers\DirectorateSupervisorController::class, 'getSchoolDashboard'], $institutionalMiddleware);
|
|
$router->post('/api/supervisor/record-lesson', [\App\Controllers\DirectorateSupervisorController::class, 'recordLesson'], $institutionalMiddleware);
|
|
$router->post('/api/supervisor/exam/push-to-lab', [\App\Controllers\DirectorateSupervisorController::class, 'pushExamToLab'], $institutionalMiddleware);
|
|
$router->post('/api/supervisor/exam/upload-panoramic', [\App\Controllers\DirectorateSupervisorController::class, 'uploadPanoramicSample'], $institutionalMiddleware);
|
|
|
|
// Dual-Form Unified Exams & Statistical Anti-Cheating
|
|
$router->get('/api/unified-exams/dual-forms', [\App\Controllers\DirectorateSupervisorController::class, 'generateDualForms'], $institutionalMiddleware);
|
|
$router->post('/api/unified-exams/evaluate-integrity', [\App\Controllers\DirectorateSupervisorController::class, 'evaluateExamSessionIntegrity'], $institutionalMiddleware);
|
|
|
|
// Automated Parent Reporting via WhatsApp / Nabeh Gateway
|
|
$router->post('/api/parent-reports/dispatch', [\App\Controllers\DirectorateSupervisorController::class, 'dispatchParentReports'], $institutionalMiddleware);
|
|
|
|
// School Roster Import & Encrypted National ID Engine (AES-256-GCM)
|
|
$router->post('/api/school-roster/import', [\App\Controllers\DirectorateSupervisorController::class, 'importSchoolRoster'], $institutionalMiddleware);
|
|
|
|
// CliQ Instant Payments (Siro Pattern) & Teacher Payout Queue
|
|
$router->post('/api/payment/cliq/initiate', [\App\Controllers\CliqPaymentController::class, 'initiatePayment'], $studentMiddleware);
|
|
$router->post('/api/payment/cliq/submit-receipt', [\App\Controllers\CliqPaymentController::class, 'submitReceipt'], $studentMiddleware);
|
|
$router->post('/api/teacher/payout/request', [\App\Controllers\CliqPaymentController::class, 'requestTeacherPayout'], $teacherMiddleware);
|
|
$router->get('/api/teacher/payout/status', [\App\Controllers\CliqPaymentController::class, 'getTeacherPayoutStatus'], $teacherMiddleware);
|
|
$router->post('/api/admin/payout/process-queue', [\App\Controllers\CliqPaymentController::class, 'processPayoutQueue'], $superAdminMiddleware);
|
|
|
|
// Curriculum Integrated Map (Vertical & Horizontal Synergy)
|
|
$router->get('/api/curriculum/integrated-map', function ($request, $response) {
|
|
$grade = $request->getQueryParams()['grade'] ?? 'grade_10';
|
|
$response->json(\App\Services\CurriculumIntegrationService::getIntegratedCurriculumMap($grade));
|
|
});
|
|
|
|
// Vocational Training Corporation (VTC) Modular CBT Curricula & Simulation Endpoints
|
|
$router->get('/api/vocational/tree', [\App\Controllers\CurriculumController::class, 'getVocationalTree']);
|
|
$router->get('/api/vocational/specialization', [\App\Controllers\CurriculumController::class, 'getVocationalSpecialization']);
|
|
$router->get('/api/vocational/simulation', [\App\Controllers\CurriculumController::class, 'getVocationalSimulation']);
|
|
|
|
// 5. Dispatch the request
|
|
$router->dispatch($request, $response);
|