FM / routes

/home/techb158/workloadmatch.com/api/routes/

/home/techb158/workloadmatch.com/api/routes

Name	Size	Mode	Actions
ai_generate.php	11642	0644	edit dl rm
assignments.php	9931	0644	edit dl rm
auth.php	6697	0644	edit dl rm
chat.php	9934	0644	edit dl rm
courses.php	7225	0644	edit dl rm
coursesessions.php	6705	0644	edit dl rm
dashboard.php	6232	0644	edit dl rm
groups.php	11099	0644	edit dl rm
logs.php	3587	0644	edit dl rm
managers.php	9612	0644	edit dl rm
masters.php	6685	0644	edit dl rm
notifications.php	5975	0644	edit dl rm
preferences.php	6487	0644	edit dl rm
programs.php	4882	0644	edit dl rm
reports.php	13696	0644	edit dl rm
roles.php	8516	0644	edit dl rm
schedules.php	11042	0644	edit dl rm
settings.php	4295	0644	edit dl rm
teachers.php	16013	0644	edit dl rm
timeslots.php	4807	0644	edit dl rm

Edit: /home/techb158/workloadmatch.com/api/routes/schedules.php (11042B)

<?php

switch ($method) {
        case 'GET':
            if ($id) {
                getSchedule($id, $mysqli);
            } else {
                listSchedules($mysqli);
            }
            break;
        case 'POST':
            createSchedule($body, $mysqli);
            break;
        case 'PUT':
            updateSchedule($id, $body, $mysqli);
            break;
        case 'DELETE':
            deleteSchedule($id, $mysqli);
            break;
        default:
            Response::error('Method not allowed', 405);
    }
}

function listSchedules(mysqli $mysqli): void
{
    Auth::requireLogin();
    [$page, $perPage, $offset] = getPagination();

$wheres = [];
    $params = [];
    $types  = '';

if (!empty($_GET['group_id'])) {
        $wheres[] = 's.Group_ID = ?';
        $params[] = (int)$_GET['group_id'];
        $types   .= 'i';
    }
    if (!empty($_GET['course_id'])) {
        $wheres[] = 's.Course_ID = ?';
        $params[] = (int)$_GET['course_id'];
        $types   .= 'i';
    }
    if (!empty($_GET['program_id'])) {
        $wheres[] = 's.Program_ID = ?';
        $params[] = (int)$_GET['program_id'];
        $types   .= 'i';
    }
    if (isset($_GET['assigned'])) {
        $wheres[] = 's.Assigned = ?';
        $params[] = (int)$_GET['assigned'];
        $types   .= 'i';
    }
    if (!empty($_GET['start_date'])) {
        $wheres[] = 's.Start_Date >= ?';
        $params[] = $_GET['start_date'];
        $types   .= 's';
    }
    if (!empty($_GET['end_date'])) {
        $wheres[] = 's.End_Date <= ?';
        $params[] = $_GET['end_date'];
        $types   .= 's';
    }

// Auto-filter for managers
    $userType = Auth::getUserType();
    if ($userType === 'manager_profile') {
        $wheres[] = 's.Group_ID IN (SELECT Group_ID FROM manager_group_name WHERE Manager_ID = ?)';
        $params[] = Auth::getEffectiveManagerId();
        $types   .= 'i';
    }

$whereClause = $wheres ? 'WHERE ' . implode(' AND ', $wheres) : '';

$total = 0;
    $sql = "SELECT COUNT(*) FROM schedule_course_for_group s $whereClause";
    $stmt = $mysqli->prepare($sql);
    if ($params) $stmt->bind_param($types, ...$params);
    $stmt->execute();
    $stmt->bind_result($total);
    $stmt->fetch();
    $stmt->close();

$sql = "SELECT s.*, c.Course_Name, c.Course_Code, g.Group_Name, p.Program_Name 
            FROM schedule_course_for_group s
            LEFT JOIN Courses c ON c.Course_ID = s.Course_ID
            LEFT JOIN manager_group_name g ON g.Group_ID = s.Group_ID
            LEFT JOIN Programs p ON p.Program_ID = s.Program_ID
            $whereClause
            ORDER BY s.Start_Date DESC LIMIT ? OFFSET ?";
    $stmt = $mysqli->prepare($sql);
    $bindParams = array_merge($params, [$perPage, $offset]);
    $bindTypes = $types . 'ii';
    if ($bindParams) $stmt->bind_param($bindTypes, ...$bindParams);
    $stmt->execute();
    $result = $stmt->get_result();
    $items = $result->fetch_all(MYSQLI_ASSOC);
    $stmt->close();

// Get teacher assignments for each schedule
    foreach ($items as &$item) {
        $s = $mysqli->prepare("SELECT tca.Teacher_ID, tp.First_Name, tp.Last_Name FROM teacher_course_assignments tca JOIN teacher_profile tp ON tp.Teacher_ID = tca.Teacher_ID WHERE tca.Schedule_ID = ?");
        $s->bind_param('i', $item['Schedule_ID']);
        $s->execute();
        $r = $s->get_result();
        $item['teachers'] = $r->fetch_all(MYSQLI_ASSOC);
        $s->close();
    }

Response::paginated($items, $total, $page, $perPage);
}

function getSchedule(string $id, mysqli $mysqli): void
{
    Auth::requireLogin();
    $stmt = $mysqli->prepare("
        SELECT s.*, c.Course_Name, c.Course_Code, g.Group_Name, p.Program_Name
        FROM schedule_course_for_group s
        LEFT JOIN Courses c ON c.Course_ID = s.Course_ID
        LEFT JOIN manager_group_name g ON g.Group_ID = s.Group_ID
        LEFT JOIN Programs p ON p.Program_ID = s.Program_ID
        WHERE s.Schedule_ID = ?
    ");
    $stmt->bind_param('i', $id);
    $stmt->execute();
    $result = $stmt->get_result();
    $item = $result->fetch_assoc();
    $stmt->close();

if (!$item) Response::notFound('Schedule not found');

// Get assigned teachers
    $s = $mysqli->prepare("SELECT tca.*, tp.First_Name, tp.Last_Name, tp.Email FROM teacher_course_assignments tca JOIN teacher_profile tp ON tp.Teacher_ID = tca.Teacher_ID WHERE tca.Schedule_ID = ?");
    $s->bind_param('i', $id);
    $s->execute();
    $r = $s->get_result();
    $item['teachers'] = $r->fetch_all(MYSQLI_ASSOC);
    $s->close();

Response::success($item);
}

function createSchedule(?array $body, mysqli $mysqli): void
{
    Auth::requireAnyRole(['admin_profile', 'master_profile', 'manager_profile']);

$courseId  = $body['Course_ID'] ?? null;
    $groupId   = $body['Group_ID'] ?? null;
    $programId = $body['Program_ID'] ?? null;
    $startDate = $body['Start_Date'] ?? null;
    $endDate   = $body['End_Date'] ?? null;
    $assigned  = (int)($body['Assigned'] ?? 0);

if (!$courseId || !$groupId || !$startDate || !$endDate) {
        Response::validationError(['Course_ID', 'Group_ID', 'Start_Date', 'End_Date' => 'Required']);
    }

$stmt = $mysqli->prepare("INSERT INTO schedule_course_for_group (Course_ID, Group_ID, Program_ID, Assigned, Start_Date, End_Date) VALUES (?, ?, ?, ?, ?, ?)");
    $stmt->bind_param('iiiiss', $courseId, $groupId, $programId, $assigned, $startDate, $endDate);
    $stmt->execute();
    $newId = $stmt->insert_id;
    $stmt->close();

log_activity($mysqli, 'create', 'schedule', $newId, "Course $courseId / Group $groupId", 'Schedule created via API');

$stmt = $mysqli->prepare("SELECT * FROM schedule_course_for_group WHERE Schedule_ID = ?");
    $stmt->bind_param('i', $newId);
    $stmt->execute();
    $result = $stmt->get_result();
    $item = $result->fetch_assoc();
    $stmt->close();

Response::created($item);
}

function updateSchedule(?string $id, ?array $body, mysqli $mysqli): void
{
    Auth::requireAnyRole(['admin_profile', 'master_profile', 'manager_profile']);
    if (!$id) Response::error('Schedule ID required');

$stmt = $mysqli->prepare("SELECT * FROM schedule_course_for_group WHERE Schedule_ID = ?");
    $stmt->bind_param('i', $id);
    $stmt->execute();
    $result = $stmt->get_result();
    $existing = $result->fetch_assoc();
    $stmt->close();

if (!$existing) Response::notFound('Schedule not found');

$courseId  = $body['Course_ID'] ?? $existing['Course_ID'];
    $groupId   = $body['Group_ID'] ?? $existing['Group_ID'];
    $programId = $body['Program_ID'] ?? $existing['Program_ID'];
    $startDate = $body['Start_Date'] ?? $existing['Start_Date'];
    $endDate   = $body['End_Date'] ?? $existing['End_Date'];
    $assigned  = (int)($body['Assigned'] ?? $existing['Assigned']);

$stmt = $mysqli->prepare("UPDATE schedule_course_for_group SET Course_ID = ?, Group_ID = ?, Program_ID = ?, Assigned = ?, Start_Date = ?, End_Date = ? WHERE Schedule_ID = ?");
    $stmt->bind_param('iiiissi', $courseId, $groupId, $programId, $assigned, $startDate, $endDate, $id);
    $stmt->execute();
    $stmt->close();

log_activity($mysqli, 'update', 'schedule', $id, "Course $courseId", 'Schedule updated via API');

Response::success($item, 'Schedule updated');
}

function deleteSchedule(?string $id, mysqli $mysqli): void
{
    Auth::requireAnyRole(['admin_profile', 'master_profile']);
    if (!$id) Response::error('Schedule ID required');

if (!$existing) Response::notFound('Schedule not found');

// Delete associated assignments
    $stmt = $mysqli->prepare("DELETE FROM teacher_course_assignments WHERE Schedule_ID = ?");
    $stmt->bind_param('i', $id);
    $stmt->execute();
    $stmt->close();

$stmt = $mysqli->prepare("DELETE FROM schedule_course_for_group WHERE Schedule_ID = ?");
    $stmt->bind_param('i', $id);
    $stmt->execute();
    $stmt->close();

log_activity($mysqli, 'delete', 'schedule', $id, 'Schedule deleted via API');
    Response::success(null, 'Schedule deleted');
}

function listSchedulesByGroup(?string $groupId, mysqli $mysqli): void
{
    Auth::requireLogin();
    if (!$groupId) Response::error('Group ID required');

$stmt = $mysqli->prepare("
        SELECT s.*, c.Course_Name, c.Course_Code, c.Course_Time
        FROM schedule_course_for_group s
        JOIN Courses c ON c.Course_ID = s.Course_ID
        WHERE s.Group_ID = ?
        ORDER BY s.Start_Date ASC
    ");
    $stmt->bind_param('i', $groupId);
    $stmt->execute();
    $result = $stmt->get_result();
    $items = $result->fetch_all(MYSQLI_ASSOC);
    $stmt->close();

foreach ($items as &$item) {
        $s = $mysqli->prepare("SELECT t.Teacher_ID, t.First_Name, t.Last_Name FROM teacher_course_assignments tca JOIN teacher_profile t ON t.Teacher_ID = tca.Teacher_ID WHERE tca.Schedule_ID = ?");
        $s->bind_param('i', $item['Schedule_ID']);
        $s->execute();
        $r = $s->get_result();
        $item['teachers'] = $r->fetch_all(MYSQLI_ASSOC);
        $s->close();
    }

Response::success($items);
}

function listSchedulesByCourse(?string $courseId, mysqli $mysqli): void
{
    Auth::requireLogin();
    if (!$courseId) Response::error('Course ID required');

$stmt = $mysqli->prepare("
        SELECT s.*, g.Group_Name, p.Program_Name
        FROM schedule_course_for_group s
        JOIN manager_group_name g ON g.Group_ID = s.Group_ID
        LEFT JOIN Programs p ON p.Program_ID = s.Program_ID
        WHERE s.Course_ID = ?
        ORDER BY s.Start_Date ASC
    ");
    $stmt->bind_param('i', $courseId);
    $stmt->execute();
    $result = $stmt->get_result();
    $items = $result->fetch_all(MYSQLI_ASSOC);
    $stmt->close();

Response::success($items);
}

function generateSchedule(?array $body, mysqli $mysqli): void
{
    Auth::requireAnyRole(['master_profile', 'manager_profile']);
    Response::success(null, 'Schedule generation is handled by the existing AI_Generate_Schedule algorithm. Use POST /api/schedules/generate with appropriate parameters.');
}

cmd: