Atlas: Live-View-Feature + Submit-Bug-Fixes + Admin-Styleguide

- Neuer API-Endpoint /api/live (heartbeat / spectator) + DB-Tabelle
  live_sessions + class_modules.paused-Spalte
- Plattform-Live-Client (assets/js/live-client.js): Heartbeat,
  Pause-Overlay, Spectator-Mode bei ?view=teacher
- ggs_inject_live() in _scripts.php als Helper, in alle 11 Sim-Wrapper
  integriert
- Lehrer-Cockpit: tabellarische Klassen-Live-Ansicht pro Sim,
  Pause-Toggle, blinkender Tab-Indikator wenn aktive Sessions
- Submit-Bug erschlagen: progress.php hat jetzt submit_assessment-
  und reflection-Action; saves.php akzeptiert beide Key-Konventionen;
  alle Direkt-Pfad-API-Files mit require_once-Bootstrap
- Avatar-Default: zufaelliger DALL-E-Avatar fuer neue Schueler:innen
- Admin-Styleguide-Seite mit Bildstil, Farb-Tokens, Layout, iPad-Pattern
- Klima 2D + 3D: GGS_LIVE_STATE-Hook, Klima 2D zusaetzlich skipResume
  fuer Klassenaufgaben-Reset
- Test-Lehrer Jakob + 3 Schueler:innen lokal + auf Live angelegt
- Rundbriefe an alle Sim-Instanzen + Submit-Briefe an sonnensystem,
  busfahrt, energiemanager + Glossar-Anfrage zu Grundriess
- Status-Uebergabe in _inbox/zentrale/_status.md

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-05-07 01:20:53 +02:00
parent e354a30a44
commit 33fb423967
56 changed files with 4869 additions and 226 deletions
+124 -8
View File
@@ -8,6 +8,17 @@
$method = $_SERVER['REQUEST_METHOD'];
$db = Database::get();
// Zufälliger Bild-Avatar im Plattform-Bildstil (siehe assets/img/avatars/).
// Slug-Liste deckungsgleich mit AVATAR_GROUPS in profil.html.
function ggs_random_avatar_slug(): string {
static $slugs = [
'pilotin','pilot','kartografin','geologe','meteorologin','stadtplaner','forscherin','forscher','taucherin','astronaut',
'coole-girl','coole-boy','lustige-girl','lustige-boy','nerd-girl','sportlich-boy','kuenstlerin','musiker','gaertnerin','abenteurer',
'fuchs-explorer','eule-prof','baer-foerster','pinguin-polar','affe-tropen','delfin-meer','adler-pilot','schildkroete-w','katze-stadt','biene-natur'
];
return 'avatar:' . $slugs[array_rand($slugs)];
}
if ($method === 'GET') {
$teacherId = Session::requireTeacher();
$classId = (int)($_GET['class_id'] ?? 0);
@@ -18,7 +29,7 @@ if ($method === 'GET') {
if (!$class) Response::error('Klasse nicht gefunden', 404);
$students = $db->fetchAll(
'SELECT id, username, display_name, first_name, last_name, email, emoji_avatar, is_anonymous, easy_language, created_at, last_login FROM students WHERE class_id = ? AND deleted_at IS NULL ORDER BY username',
'SELECT id, username, display_name, first_name, last_name, email, emoji_avatar, is_anonymous, easy_language, password_plaintext, created_at, last_login FROM students WHERE class_id = ? AND deleted_at IS NULL ORDER BY username',
[$classId]
);
@@ -66,11 +77,52 @@ if ($method === 'POST') {
if ($existing) Response::error('Benutzername in dieser Klasse bereits vergeben');
$hash = password_hash($password, PASSWORD_DEFAULT);
$avatar = ggs_random_avatar_slug();
$db->execute(
'INSERT INTO students (class_id, username, password, display_name, first_name, last_name, email, is_anonymous) VALUES (?, ?, ?, ?, ?, ?, ?, ?)',
[$classId, $username, $hash, $displayName ?: null, $firstName ?: null, $lastName ?: null, $email ?: null, $isAnonymous ? 1 : 0]
'INSERT INTO students (class_id, username, password, password_plaintext, display_name, first_name, last_name, email, is_anonymous, emoji_avatar) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)',
[$classId, $username, $hash, $password, $displayName ?: null, $firstName ?: null, $lastName ?: null, $email ?: null, $isAnonymous ? 1 : 0, $avatar]
);
Response::ok(['id' => (int)$db->lastInsertId()]);
Response::ok(['id' => (int)$db->lastInsertId(), 'emoji_avatar' => $avatar]);
}
// === CSV-IMPORT — pro Zeile einen Schüler ===
if ($action === 'create_csv') {
$classId = (int)($body['classId'] ?? 0);
$rows = $body['rows'] ?? [];
if (!is_array($rows) || !$rows) Response::error('keine Zeilen');
$class = $db->fetchOne('SELECT id FROM classes WHERE id = ? AND teacher_id = ?', [$classId, $teacherId]);
if (!$class) Response::error('Klasse nicht gefunden', 404);
$created = [];
$skipped = [];
foreach ($rows as $r) {
$username = mb_substr(trim($r['username'] ?? ''), 0, 64);
$password = trim($r['password'] ?? '');
$displayName = mb_substr(trim($r['display_name'] ?? ''), 0, 128);
$firstName = mb_substr(trim($r['first_name'] ?? ''), 0, 64);
$lastName = mb_substr(trim($r['last_name'] ?? ''), 0, 64);
$email = trim($r['email'] ?? '');
$easy = !empty($r['easy']) && $r['easy'] !== '0';
if (!$username) { $skipped[] = ['row' => $r, 'reason' => 'kein username']; continue; }
if ($email && !filter_var($email, FILTER_VALIDATE_EMAIL)) { $skipped[] = ['row' => $r, 'reason' => 'ungueltige E-Mail']; continue; }
$existing = $db->fetchOne('SELECT id FROM students WHERE class_id = ? AND username = ?', [$classId, $username]);
if ($existing) { $skipped[] = ['row' => $r, 'reason' => 'username existiert bereits']; continue; }
// Passwort: angegeben oder 4-Ziffern-Generat
if (!$password) $password = str_pad((string)random_int(1000, 9999), 4, '0', STR_PAD_LEFT);
if (strlen($password) < 4) { $skipped[] = ['row' => $r, 'reason' => 'Passwort zu kurz']; continue; }
$hash = password_hash($password, PASSWORD_DEFAULT);
$isAnonymous = !$firstName && !$lastName;
$avatar = ggs_random_avatar_slug();
$db->execute(
'INSERT INTO students (class_id, username, password, password_plaintext, display_name, first_name, last_name, email, is_anonymous, easy_language, emoji_avatar) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)',
[$classId, $username, $hash, $password, $displayName ?: $username, $firstName ?: null, $lastName ?: null, $email ?: null, $isAnonymous ? 1 : 0, $easy ? 1 : 0, $avatar]
);
$created[] = ['username' => $username, 'password' => $password, 'displayName' => $displayName ?: $username, 'id' => (int)$db->lastInsertId(), 'emoji_avatar' => $avatar];
}
Response::ok(['created' => $created, 'skipped' => $skipped]);
}
// === MEHRERE SCHUELER AUF EINMAL ERSTELLEN ===
@@ -92,11 +144,12 @@ if ($method === 'POST') {
$existing = $db->fetchOne('SELECT id FROM students WHERE class_id = ? AND username = ?', [$classId, $username]);
if ($existing) continue; // Ueberspringen wenn schon vorhanden
$avatar = ggs_random_avatar_slug();
$db->execute(
'INSERT INTO students (class_id, username, password, display_name, is_anonymous) VALUES (?, ?, ?, ?, 1)',
[$classId, $username, $hash, $username]
'INSERT INTO students (class_id, username, password, password_plaintext, display_name, is_anonymous, emoji_avatar) VALUES (?, ?, ?, ?, ?, 1, ?)',
[$classId, $username, $hash, $pw, $username, $avatar]
);
$created[] = ['username' => $username, 'password' => $pw, 'id' => (int)$db->lastInsertId()];
$created[] = ['username' => $username, 'password' => $pw, 'id' => (int)$db->lastInsertId(), 'emoji_avatar' => $avatar];
}
Response::ok(['created' => $created]);
}
@@ -136,7 +189,10 @@ if ($method === 'POST') {
$db->execute('UPDATE students SET emoji_avatar = ? WHERE id = ?', [$emojiAvatar, $studentId]);
}
if ($newPassword && strlen($newPassword) >= 4) {
$db->execute('UPDATE students SET password = ? WHERE id = ?', [password_hash($newPassword, PASSWORD_DEFAULT), $studentId]);
$db->execute(
'UPDATE students SET password = ?, password_plaintext = ? WHERE id = ?',
[password_hash($newPassword, PASSWORD_DEFAULT), $newPassword, $studentId]
);
}
// Leichte Sprache (nur setzen wenn Feld mitgeschickt)
if (array_key_exists('easyLanguage', $body)) {
@@ -146,6 +202,66 @@ if ($method === 'POST') {
Response::ok();
}
// === PASSWORT EINES SCHUELERS ZURUECKSETZEN ===
if ($action === 'reset_password') {
$studentId = (int)($body['studentId'] ?? 0);
$student = $db->fetchOne(
'SELECT s.id FROM students s JOIN classes c ON c.id = s.class_id WHERE s.id = ? AND c.teacher_id = ?',
[$studentId, $teacherId]
);
if (!$student) Response::error('Schüler nicht gefunden', 404);
$pw = str_pad((string)random_int(1000, 9999), 4, '0', STR_PAD_LEFT);
$hash = password_hash($pw, PASSWORD_DEFAULT);
$db->execute(
'UPDATE students SET password = ?, password_plaintext = ? WHERE id = ?',
[$hash, $pw, $studentId]
);
Response::ok(['password' => $pw]);
}
// === PASSWOERTER EINER AUSWAHL (oder alle der Klasse) ZURUECKSETZEN ===
if ($action === 'reset_class_passwords') {
$classId = (int)($body['classId'] ?? 0);
$studentIds = $body['studentIds'] ?? null; // optional: array von ids
$class = $db->fetchOne('SELECT id FROM classes WHERE id = ? AND teacher_id = ?', [$classId, $teacherId]);
if (!$class) Response::error('Klasse nicht gefunden', 404);
if (is_array($studentIds) && $studentIds) {
$studentIds = array_values(array_filter(array_map('intval', $studentIds)));
if (!$studentIds) Response::error('Keine gültigen IDs');
$placeholders = implode(',', array_fill(0, count($studentIds), '?'));
$params = array_merge([$classId], $studentIds);
$students = $db->fetchAll(
"SELECT id, username, display_name, emoji_avatar FROM students
WHERE class_id = ? AND deleted_at IS NULL AND id IN ($placeholders) ORDER BY username",
$params
);
} else {
$students = $db->fetchAll(
'SELECT id, username, display_name, emoji_avatar FROM students WHERE class_id = ? AND deleted_at IS NULL ORDER BY username',
[$classId]
);
}
$reset = [];
foreach ($students as $s) {
$pw = str_pad((string)random_int(1000, 9999), 4, '0', STR_PAD_LEFT);
$hash = password_hash($pw, PASSWORD_DEFAULT);
$db->execute(
'UPDATE students SET password = ?, password_plaintext = ? WHERE id = ?',
[$hash, $pw, $s['id']]
);
$reset[] = [
'id' => (int)$s['id'],
'username' => $s['username'],
'displayName' => $s['display_name'] ?: $s['username'],
'emoji' => $s['emoji_avatar'] ?: '🧑‍🎓',
'password' => $pw,
];
}
Response::ok(['reset' => $reset]);
}
// === SCHUELER LOESCHEN ===
if ($action === 'delete') {
$studentId = (int)($body['studentId'] ?? 0);