geograsim/App/php/api/progress.php

<?php
/**
 * API: Spieler-Fortschritt + Level-System + Wirkungsklammer
 * GET  /api/progress?sim_id=X              → Level/XP für ein Spiel
 * GET  /api/progress?student_id=X          → Alle Fortschritte (Lehrer-Ansicht)
 * POST /api/progress {action}              → Level updaten, Pre/Post-Antworten speichern
 */

$method = $_SERVER['REQUEST_METHOD'];
$db = Database::get();

if ($method === 'GET') {
    $simId = $_GET['sim_id'] ?? '';
    $studentId = (int)($_GET['student_id'] ?? 0);

    // Schüler*in: eigener Fortschritt
    if ($simId && !$studentId) {
        $sessionId = Session::requireStudent();
        $session = $db->fetchOne('SELECT class_id, display_name FROM student_sessions WHERE id = ?', [$sessionId]);
        if ($session) {
            $student = $db->fetchOne('SELECT id FROM students WHERE class_id = ? AND display_name = ?', [$session['class_id'], $session['display_name']]);
            if ($student) $studentId = (int)$student['id'];
        }
    }

    if ($studentId && $simId) {
        $progress = $db->fetchOne('SELECT level, xp, plays, best_stars FROM player_progress WHERE student_id = ? AND sim_id = ?', [$studentId, $simId]);
        $answers = $db->fetchAll('SELECT phase, question_id, answer, correct, answered_at FROM assessment_answers WHERE session_id IN (SELECT id FROM student_sessions WHERE class_id = (SELECT class_id FROM students WHERE id = ?)) AND sim_id = ? ORDER BY answered_at DESC', [$studentId, $simId]);
        Response::ok(['progress' => $progress ?: ['level'=>1,'xp'=>0,'plays'=>0,'best_stars'=>0], 'answers' => $answers]);
    }

    // Lehrer*in: alle Fortschritte eines/r Schüler*in
    if ($studentId && !$simId) {
        $teacherId = Session::requireTeacher();
        $all = $db->fetchAll('SELECT sim_id, level, xp, plays, best_stars FROM player_progress WHERE student_id = ? ORDER BY sim_id', [$studentId]);
        Response::ok($all);
    }

    Response::error('sim_id oder student_id erforderlich');
}

if ($method === 'POST') {
    $body = json_decode(file_get_contents('php://input'), true);
    $action = $body['action'] ?? '';

    // === Spiel-Ergebnis speichern + Level berechnen ===
    if ($action === 'complete') {
        $sessionId = Session::requireStudent();
        $simId = $body['simId'] ?? '';
        $stars = max(0, min(5, (int)($body['stars'] ?? 0)));
        $data = json_encode($body['data'] ?? []);

        if (!$simId) Response::error('simId erforderlich');

        // Student-ID finden
        $session = $db->fetchOne('SELECT class_id, display_name FROM student_sessions WHERE id = ?', [$sessionId]);
        $student = $session ? $db->fetchOne('SELECT id FROM students WHERE class_id = ? AND display_name = ?', [$session['class_id'], $session['display_name']]) : null;
        if (!$student) Response::error('Schüler*in nicht gefunden');
        $studentId = (int)$student['id'];

        // XP berechnen: 10 pro Stern + 5 Bonus für 5 Sterne
        $xpGain = $stars * 10 + ($stars >= 5 ? 5 : 0);

        // Upsert progress
        $db->execute(
            'INSERT INTO player_progress (student_id, sim_id, level, xp, plays, best_stars)
             VALUES (?, ?, 1, ?, 1, ?)
             ON DUPLICATE KEY UPDATE xp = xp + VALUES(xp), plays = plays + 1, best_stars = GREATEST(best_stars, VALUES(best_stars))',
            [$studentId, $simId, $xpGain, $stars]
        );

        // Level berechnen: 0-49 XP = Level 1, 50-149 = Level 2, 150-299 = Level 3, 300+ = Level 4
        $progress = $db->fetchOne('SELECT xp FROM player_progress WHERE student_id = ? AND sim_id = ?', [$studentId, $simId]);
        $xp = (int)$progress['xp'];
        $newLevel = $xp < 50 ? 1 : ($xp < 150 ? 2 : ($xp < 300 ? 3 : 4));
        $db->execute('UPDATE player_progress SET level = ? WHERE student_id = ? AND sim_id = ?', [$newLevel, $studentId, $simId]);

        // Assessment speichern
        $db->execute(
            'INSERT INTO assessments (session_id, sim_id, class_id, results, duration_ms, submitted_at) VALUES (?, ?, ?, ?, ?, NOW())',
            [$sessionId, $simId, $session['class_id'], $data, (int)($body['durationMs'] ?? 0)]
        );

        Response::ok(['xpGained' => $xpGain, 'totalXp' => $xp + $xpGain, 'level' => $newLevel, 'stars' => $stars]);
    }

    // === Pre/Post-Antworten speichern ===
    if ($action === 'answer') {
        $sessionId = Session::requireStudent();
        $simId = $body['simId'] ?? '';
        $phase = $body['phase'] ?? ''; // 'pre' oder 'post'
        $questionId = (int)($body['questionId'] ?? 0);
        $answer = substr(trim($body['answer'] ?? ''), 0, 1);
        $correct = (bool)($body['correct'] ?? false);

        if (!$simId || !$phase || !$questionId || !$answer) Response::error('Felder unvollständig');

        $db->execute(
            'INSERT INTO assessment_answers (session_id, sim_id, phase, question_id, answer, correct) VALUES (?, ?, ?, ?, ?, ?)',
            [$sessionId, $simId, $phase, $questionId, $answer, $correct ? 1 : 0]
        );
        Response::ok();
    }

    // === Wirkungsklammer-Ergebnis abrufen ===
    if ($action === 'wirkung') {
        $sessionId = $body['sessionId'] ?? Session::studentId();
        $simId = $body['simId'] ?? '';
        if (!$simId) Response::error('simId erforderlich');

        $pre = $db->fetchAll('SELECT question_id, correct FROM assessment_answers WHERE session_id = ? AND sim_id = ? AND phase = "pre"', [$sessionId, $simId]);
        $post = $db->fetchAll('SELECT question_id, correct FROM assessment_answers WHERE session_id = ? AND sim_id = ? AND phase = "post"', [$sessionId, $simId]);

        $preCorrect = count(array_filter($pre, function($a){return $a['correct'];}));
        $postCorrect = count(array_filter($post, function($a){return $a['correct'];}));

        Response::ok([
            'pre' => ['total' => count($pre), 'correct' => $preCorrect],
            'post' => ['total' => count($post), 'correct' => $postCorrect],
            'improvement' => $postCorrect - $preCorrect,
        ]);
    }

    Response::error('Unbekannte Aktion');
}

Response::error('Methode nicht erlaubt', 405);