Upload 5 files

Dockerfile

@@ -0,0 +1,19 @@
+FROM python:3.11-slim
+
+WORKDIR /app
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    gcc \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+COPY . .
+
+EXPOSE 7860
+
+ENV GRADIO_SERVER_NAME="0.0.0.0"
+ENV GRADIO_SERVER_PORT=7860
+
+CMD ["python", "app.py"]

README.md

@@ -0,0 +1,29 @@
+---
+title: EduClone AI Portal
+emoji: 🎓
+colorFrom: blue
+colorTo: green
+sdk: docker
+app_port: 7860
+pinned: false
+license: mit
+---
+
+# 🎓 EduClone AI — Exam Intelligence Portal
+
+## Default Admin Login
+- **Username:** `abdulqayyum`
+- **Password:** `Admin@EduClone2025`
+> ⚠️ Change `ADMIN_PASSWORD` in `auth.py` before going public.
+
+## Roles
+| Role | Access |
+|---|---|
+| **Admin** | Dashboard · User management · Activity log · Full MCQ tools |
+| **User** | Upload MCQs · Format · Download Word / PDF / Excel |
+
+## Files
+- `Dockerfile` — forces Python 3.11, avoids audioop/pydub conflict
+- `app.py` — Gradio portal
+- `auth.py` — SQLite + bcrypt auth
+- `mcq_engine.py` — MCQ parser and document builder

app.py

@@ -0,0 +1,489 @@
+"""
+EduClone AI Portal — Login / Register / Admin / User roles
+Tab 1: Generate MCQs from topic (AI, 4 options, answer always provided)
+Tab 2: Upload MCQs → smart answer detection → clone with 4 distractors
+Author: Abdulqayyum MBA
+"""
+import gradio as gr
+import pandas as pd
+import datetime
+from auth import (init_db, register_user, login_user, log_activity,
+                  get_all_users, toggle_user_active, change_user_role,
+                  delete_user, get_activity_log, get_stats)
+from mcq_engine import (
+    generate_from_topic, read_and_parse, clone_mcqs, preview_mcqs,
+    make_word, make_pdf, make_excel, BLOOMS
+)
+
+init_db()
+
+# ── CSS ───────────────────────────────────────────────────────────────────────
+CSS = """
+* { box-sizing: border-box; }
+body { font-family: 'Inter', sans-serif; margin: 0; }
+.portal-banner {
+  background: linear-gradient(135deg,#1e3a5f 0%,#1a56db 55%,#059669 100%);
+  padding: 20px 28px 18px; border-radius: 14px; color: white; margin-bottom: 18px;
+}
+.portal-banner h1 { margin:0; font-size:1.65rem; letter-spacing:-.3px; font-weight:600; }
+.portal-banner p  { margin:5px 0 0; opacity:.88; font-size:.88rem; }
+.auth-card {
+  background: var(--color-background-primary);
+  border: 1px solid var(--color-border-primary);
+  border-radius: 14px; padding: 28px 32px; max-width: 460px;
+  margin: 0 auto; box-shadow: 0 4px 24px rgba(0,0,0,.07);
+}
+.auth-card h2 { margin:0 0 18px; font-size:1.25rem; color:#1e3a5f; }
+.auth-divider { text-align:center; color:#9ca3af; margin:10px 0; font-size:.85rem; }
+.user-bar {
+  background: var(--color-background-secondary);
+  border: 1px solid var(--color-border-tertiary);
+  border-radius: 10px; padding: 12px 18px;
+  display: flex; align-items: center; justify-content: space-between;
+  margin-bottom: 14px; font-size: .9rem;
+}
+.role-badge { font-size:.78rem; font-weight:600; padding:3px 10px; border-radius:20px; }
+.role-admin { background:#dbeafe; color:#1e40af; }
+.role-user  { background:#dcfce7; color:#166534; }
+.hint-box {
+  background: #fefce8; border: 1px solid #fde68a;
+  border-radius: 8px; padding: 10px 14px; font-size:.85rem; line-height:1.7;
+  margin-bottom: 12px;
+}
+.detect-box {
+  background: #f0fdf4; border: 1px solid #a7f3d0;
+  border-radius: 8px; padding: 10px 14px; font-size:.85rem; line-height:1.7;
+  margin-bottom: 12px;
+}
+.dl-row { background:#f0fdf4; border:1px solid #a7f3d0; border-radius:8px; padding:12px; margin-top:8px; }
+footer { display:none !important; }
+"""
+
+BANNER_HTML = """
+<div class="portal-banner">
+  <h1>🎓 EduClone AI — Exam Intelligence Portal</h1>
+  <p>Generate · Upload · Clone MCQs · Download Word / PDF / Excel
+  &nbsp;|&nbsp; <strong>Abdulqayyum MBA</strong> — 18 yrs Academic Assessment · MBA · AI Governance · Azure AI</p>
+</div>
+"""
+
+TAB1_HINT = """<div class="hint-box">
+<b>📝 Tab 1 — Generate MCQs from a Topic:</b>
+Enter any subject → choose Bloom's level → AI generates fresh MCQs with
+<b>4 options (A B C D)</b> and a correct answer. Download as Word / PDF / Excel.
+</div>"""
+
+TAB2_HINT = """<div class="hint-box">
+<b>🔁 Tab 2 — Upload &amp; Clone your existing MCQs:</b><br>
+Upload <b>.docx / .pdf / .txt</b> file with your questions. The system detects the correct answer using:<br>
+&nbsp;&nbsp;<b>1.</b> Bold option text &nbsp;
+<b>2.</b> Underlined option text &nbsp;
+<b>3.</b> Coloured (non-black) option text &nbsp;
+<b>4.</b> Highlighted option text &nbsp;
+<b>5.</b> <code>Answer: X</code> line at the end<br>
+If none of these are found, the answer is left as <b>⚠️ Unknown</b> — no guess is made.
+Then the AI clones each question with <b>4 new distractors</b>.
+</div>"""
+
+SAMPLE_MCQS = """1. Your patient is a 44-year-old female, alert and oriented, in moderate distress, complaining of difficulty breathing. She has a 1-week history of fever and malaise, shortness of breath developing 3 days ago. Left-sided chest pain with deep inspiration and a cough with sputum. Examination: hot, pale, dry skin; rhonchi and rales throughout the left lung. Right lung clear.
+
+HR = 134, BP = 88/64, RR = 24, SpO2 = 92%.
+
+History of two previous myocardial infarctions. Takes nitroglycerin as needed. Which prehospital management is most appropriate?
+
+A. Oxygen via venturi mask 24-35%, nebulized albuterol and ipratropium, IV NS KVO, IV corticosteroids
+B. Endotracheal intubation, 100% oxygen, IV NS KVO, nebulized albuterol and Atrovent, IV corticosteroids
+C. Albuterol via nebulizer with 100% oxygen, IV NS KVO
+D. Oxygen via nonrebreathing mask 15 LPM, IV NS with fluid challenge
+
+Answer: D
+
+2. A 60-year-old male presents with sudden crushing chest pain radiating to left arm and jaw. Diaphoretic and pale. BP = 90/60, HR = 110, RR = 22, SpO2 = 94%. Most appropriate prehospital intervention?
+
+A. Aspirin 324 mg PO, nitroglycerin 0.4 mg SL, oxygen via NRB mask, IV access, transport immediately
+B. Morphine IV, 12-lead ECG, transport to nearest hospital without further intervention
+C. Apply CPAP at 10 cmH2O, furosemide IV, IV access
+D. Endotracheal intubation, lidocaine IV, transport Code 3
+
+Answer: A
+"""
+
+# ── session helpers ───────────────────────────────────────────────────────────
+def _logged_in(s): return s.get("logged_in", False)
+def _is_admin(s):  return s.get("role") == "admin"
+
+def _welcome_html(session):
+    role = session.get("role","user")
+    name = session.get("full_name") or session.get("username","")
+    bc   = "role-admin" if role=="admin" else "role-user"
+    bl   = "🔑 Admin"  if role=="admin" else "👤 User"
+    return (f'<div class="user-bar">'
+            f'<span>👋 Welcome, <strong>{name}</strong> &nbsp;|&nbsp;'
+            f'<span class="role-badge {bc}">{bl}</span></span>'
+            f'<span style="font-size:.82rem;color:#6b7280;">'
+            f'{datetime.datetime.now():%d %b %Y  %H:%M}</span></div>')
+
+
+# ── auth handlers ─────────────────────────────────────────────────────────────
+def do_login(username, password, session):
+    ok, msg, user = login_user(username, password)
+    if ok:
+        session.update({"logged_in": True, "username": user["username"],
+                        "role": user["role"], "full_name": user.get("full_name",""),
+                        "user_id": user["id"]})
+        return (msg, session,
+                gr.update(visible=False),
+                gr.update(visible=True),
+                _welcome_html(session),
+                gr.update(visible=_is_admin(session)),
+                gr.update(visible=True))
+    return msg, session, gr.update(visible=True), gr.update(visible=False), \
+           "", gr.update(visible=False), gr.update(visible=False)
+
+def do_register(username, email, password, confirm, full_name, institution, session):
+    if password != confirm:
+        return "❌ Passwords do not match.", session
+    ok, msg = register_user(username, email, password, full_name, institution)
+    return msg, session
+
+def do_logout(session):
+    if session.get("username"):
+        log_activity(session.get("user_id"), session.get("username"), "logout", "")
+    session.clear()
+    return (session, gr.update(visible=True), gr.update(visible=False),
+            "", gr.update(visible=False), gr.update(visible=False))
+
+
+# ── Tab 1: generate from topic ────────────────────────────────────────────────
+def handle_generate(topic, num_q, blooms, difficulty, want_word, want_pdf, want_excel, session):
+    if not _logged_in(session):
+        return "⚠️ Please log in first.", None, None, None, ""
+    if not topic.strip():
+        return "⚠️ Please enter a topic name.", None, None, None, ""
+
+    mcqs, source = generate_from_topic(topic, int(num_q), blooms, difficulty)
+    if not mcqs:
+        return "❌ Could not generate questions. Please try again.", None, None, None, ""
+
+    log_activity(session.get("user_id"), session.get("username"),
+                 "generate_topic", f"{len(mcqs)} Qs · {topic} · {blooms}")
+
+    note = ("⚡ AI was busy — template questions shown. Re-run for AI results.\n\n"
+            if source == "template" else "✅ AI-generated questions:\n\n")
+    preview = preview_mcqs(mcqs, f"Topic: {topic} | Bloom's: {blooms} | Difficulty: {difficulty}")
+
+    title = f"MCQs: {topic}"
+    w = make_word(mcqs, title)  if want_word  else None
+    p = make_pdf(mcqs,  title)  if want_pdf   else None
+    e = make_excel(mcqs, title) if want_excel else None
+
+    metrics = (f"📊 Questions: **{len(mcqs)}** · Bloom's: **{blooms}** · "
+               f"Difficulty: **{difficulty}** · Source: **{source}**")
+    return note + preview, w, p, e, metrics
+
+
+# ── Tab 2: upload + clone ─────────────────────────────────────────────────────
+def handle_upload_preview(file_obj, paste_text, session):
+    """Step 1: parse uploaded file, show what was detected."""
+    if not _logged_in(session):
+        return "⚠️ Please log in first.", session
+
+    mcqs, err = [], ""
+    if file_obj:
+        mcqs, err = read_and_parse(file_obj)
+    elif paste_text.strip():
+        from mcq_engine import _parse_plain
+        mcqs = _parse_plain(paste_text.strip())
+    else:
+        return "⚠️ Please upload a file or paste MCQs.", session
+
+    if err:
+        return f"❌ {err}", session
+    if not mcqs:
+        return ("❌ Could not detect MCQ structure.\n\n"
+                "Ensure questions start with `1.` or `Q1.` and options with `A.` / `A)`"), session
+
+    # Store in session for cloning step
+    session["_mcqs"] = mcqs
+    detected = sum(1 for m in mcqs if m.get("answer"))
+    unknown  = len(mcqs) - detected
+
+    summary  = f"✅ **{len(mcqs)} question(s) parsed**"
+    if detected:
+        summary += f" · **{detected}** answer(s) detected"
+    if unknown:
+        summary += f" · **{unknown}** answer(s) ⚠️ unknown (no formatting mark or key found)"
+    summary += "\n\n"
+    summary += preview_mcqs(mcqs)
+    return summary, session
+
+
+def handle_clone(num_clones, blooms, want_word, want_pdf, want_excel, exam_title, session):
+    """Step 2: clone the already-parsed MCQs."""
+    if not _logged_in(session):
+        return "⚠️ Please log in first.", None, None, None, ""
+    originals = session.get("_mcqs", [])
+    if not originals:
+        return "⚠️ Please parse/upload MCQs first (click Preview above).", None, None, None, ""
+
+    clones = clone_mcqs(originals, int(num_clones), blooms)
+    log_activity(session.get("user_id"), session.get("username"),
+                 "clone_mcqs", f"{len(originals)} orig → {len(clones)} clones")
+
+    title = exam_title.strip() or "Cloned MCQs"
+    w = make_word(clones, title)  if want_word  else None
+    p = make_pdf(clones,  title)  if want_pdf   else None
+    e = make_excel(clones, title) if want_excel else None
+
+    metrics = (f"📊 Original: **{len(originals)}** · "
+               f"Clones: **{len(clones)}** · "
+               f"Bloom's: **{blooms}**")
+    return preview_mcqs(clones, "Generated Clones"), w, p, e, metrics
+
+
+# ── admin handlers (unchanged) ────────────────────────────────────────────────
+def admin_get_stats(session):
+    if not _is_admin(session): return "❌ Admin only."
+    s = get_stats()
+    return (f"## 📊 Portal Statistics\n|Metric|Value|\n|---|---|\n"
+            f"|Total Users|**{s['total']}**|\n|Admins|**{s['admins']}**|\n"
+            f"|Active|**{s['active']}**|\n|New Today|**{s['new_today']}**|\n"
+            f"|Logins Today|**{s['logins_today']}**|")
+
+def admin_get_users(session):
+    if not _is_admin(session): return pd.DataFrame()
+    users = get_all_users()
+    if not users: return pd.DataFrame()
+    df = pd.DataFrame(users)[["id","username","email","full_name","institution",
+                               "role","is_active","created_at","last_login"]]
+    df.columns = ["ID","Username","Email","Full Name","Institution",
+                  "Role","Active","Registered","Last Login"]
+    df["Active"] = df["Active"].map({1:"✅ Yes", 0:"❌ No"})
+    df["Last Login"] = df["Last Login"].fillna("Never")
+    return df
+
+def admin_toggle(uid_str, activate, session):
+    if not _is_admin(session): return "❌ Admin only.", admin_get_users(session)
+    try:
+        msg = toggle_user_active(int(uid_str), activate)
+        return msg, admin_get_users(session)
+    except ValueError:
+        return "❌ Enter a numeric User ID.", admin_get_users(session)
+
+def admin_change_role(uid_str, role, session):
+    if not _is_admin(session): return "❌ Admin only.", admin_get_users(session)
+    try:
+        msg = change_user_role(int(uid_str), role)
+        return msg, admin_get_users(session)
+    except ValueError:
+        return "❌ Enter a numeric User ID.", admin_get_users(session)
+
+def admin_delete(uid_str, session):
+    if not _is_admin(session): return "❌ Admin only.", admin_get_users(session)
+    try:
+        msg = delete_user(int(uid_str))
+        return msg, admin_get_users(session)
+    except ValueError:
+        return "❌ Enter a numeric User ID.", admin_get_users(session)
+
+def admin_get_log(session):
+    if not _is_admin(session): return pd.DataFrame()
+    logs = get_activity_log(200)
+    if not logs: return pd.DataFrame()
+    df = pd.DataFrame(logs)[["timestamp","username","action","detail"]]
+    df.columns = ["Timestamp","User","Action","Detail"]
+    df["Timestamp"] = df["Timestamp"].str[:19].str.replace("T"," ")
+    return df
+
+
+# ══════════════════════════════════════════════════════════════════════════════
+#  GRADIO UI
+# ══════════════════════════════════════════════════════════════════════════════
+def create_app():
+    with gr.Blocks(css=CSS, title="EduClone AI Portal") as demo:
+        session_state = gr.State({})
+        gr.HTML(BANNER_HTML)
+
+        # ── Login / Register ──────────────────────────────────────────────────
+        with gr.Column(visible=True) as login_panel:
+            with gr.Tabs():
+                with gr.TabItem("🔐 Login"):
+                    with gr.Column(elem_classes=["auth-card"]):
+                        gr.HTML("<h2>Sign in to EduClone AI</h2>")
+                        li_user = gr.Textbox(label="Username or Email")
+                        li_pass = gr.Textbox(label="Password", type="password")
+                        li_btn  = gr.Button("🔐 Login", variant="primary", size="lg")
+                        li_msg  = gr.Markdown()
+                with gr.TabItem("📝 Register"):
+                    with gr.Column(elem_classes=["auth-card"]):
+                        gr.HTML("<h2>Create your account</h2>")
+                        rg_name  = gr.Textbox(label="Full Name")
+                        rg_inst  = gr.Textbox(label="Institution / Organisation")
+                        rg_user  = gr.Textbox(label="Username (3–30 chars, no spaces)")
+                        rg_email = gr.Textbox(label="Email Address")
+                        rg_pass  = gr.Textbox(label="Password (8+ chars, 1 uppercase, 1 number)", type="password")
+                        rg_conf  = gr.Textbox(label="Confirm Password", type="password")
+                        rg_btn   = gr.Button("📝 Create Account", variant="primary", size="lg")
+                        rg_msg   = gr.Markdown()
+
+        # ── Main Portal ───────────────────────────────────────────────────────
+        with gr.Column(visible=False) as main_portal:
+            welcome_html = gr.HTML()
+            logout_btn   = gr.Button("🚪 Logout", size="sm", variant="secondary")
+
+            # ── Admin Panel ───────────────────────────────────────────────────
+            with gr.Column(visible=False) as admin_tabs:
+                gr.HTML("<h3 style='color:#1e3a5f;margin:8px 0 4px'>🔑 Admin Panel</h3>")
+                with gr.Tabs():
+                    with gr.TabItem("📊 Dashboard"):
+                        dash_btn = gr.Button("🔄 Refresh Stats", variant="secondary")
+                        dash_out = gr.Markdown()
+                    with gr.TabItem("👥 User Management"):
+                        refresh_users_btn = gr.Button("🔄 Refresh List", variant="secondary")
+                        users_table = gr.DataFrame(interactive=False, wrap=True)
+                        gr.Markdown("**Actions — enter User ID:**")
+                        with gr.Row():
+                            action_uid  = gr.Textbox(label="User ID", scale=1, placeholder="e.g. 3")
+                            action_role = gr.Dropdown(choices=["user","admin"], value="user",
+                                                      label="Set Role", scale=1)
+                        with gr.Row():
+                            btn_activate   = gr.Button("✅ Activate",   variant="secondary")
+                            btn_deactivate = gr.Button("❌ Deactivate", variant="secondary")
+                            btn_set_role   = gr.Button("🔄 Set Role",   variant="secondary")
+                            btn_del_user   = gr.Button("🗑️ Delete",    variant="stop")
+                        action_msg = gr.Markdown()
+                    with gr.TabItem("📋 Activity Log"):
+                        refresh_log_btn = gr.Button("🔄 Refresh", variant="secondary")
+                        log_table = gr.DataFrame(interactive=False, wrap=True)
+
+            # ── USER SECTION — Tab 1 & 2 ─────────────────────────────────────
+            with gr.Column(visible=False) as user_tabs:
+                with gr.Tabs():
+
+                    # ══ TAB 1: Generate from Topic ═══════════════════════════
+                    with gr.TabItem("📝 Generate from Topic"):
+                        gr.HTML(TAB1_HINT)
+                        with gr.Row():
+                            with gr.Column(scale=1):
+                                t1_topic = gr.Textbox(
+                                    label="Topic / Subject Name",
+                                    placeholder="e.g. Mitochondria · Supply Chain · Newton's Laws",
+                                    lines=2)
+                                t1_num = gr.Slider(1, 10, value=5, step=1,
+                                                   label="Number of Questions")
+                                t1_blooms = gr.Dropdown(
+                                    choices=list(BLOOMS.keys()),
+                                    value="Mixed (All)",
+                                    label="📚 Bloom's Taxonomy Level")
+                                t1_diff = gr.Radio(
+                                    choices=["Easy","Medium","Hard","Mixed"],
+                                    value="Mixed", label="Difficulty")
+                                gr.Markdown("**Download formats:**")
+                                with gr.Row():
+                                    t1_word  = gr.Checkbox(label="📄 Word",  value=True)
+                                    t1_pdf   = gr.Checkbox(label="📑 PDF",   value=True)
+                                    t1_excel = gr.Checkbox(label="📊 Excel", value=False)
+                                t1_btn = gr.Button("🚀 Generate MCQs",
+                                                   variant="primary", size="lg")
+                            with gr.Column(scale=2):
+                                t1_preview = gr.Markdown(label="Preview")
+                                with gr.Row(elem_classes=["dl-row"]):
+                                    t1_w = gr.File(label="📄 Word")
+                                    t1_p = gr.File(label="📑 PDF")
+                                    t1_e = gr.File(label="📊 Excel")
+                                t1_metrics = gr.Markdown()
+
+                    # ══ TAB 2: Upload & Clone ═════════════════════════════════
+                    with gr.TabItem("🔁 Upload & Clone"):
+                        gr.HTML(TAB2_HINT)
+                        with gr.Row():
+                            with gr.Column(scale=1):
+                                gr.Markdown("### Step 1 — Upload your MCQs")
+                                t2_file = gr.File(
+                                    label="Upload File (.docx / .pdf / .txt) — formatting detected from .docx",
+                                    file_types=[".docx",".doc",".pdf",".txt"])
+                                t2_paste = gr.Textbox(
+                                    label="Or paste plain-text MCQs here",
+                                    lines=10, value=SAMPLE_MCQS)
+                                t2_preview_btn = gr.Button("🔍 Parse & Preview",
+                                                           variant="secondary", size="lg")
+                                gr.Markdown("---\n### Step 2 — Clone settings")
+                                t2_clones = gr.Slider(1, 3, value=2, step=1,
+                                                      label="Clones per Question")
+                                t2_blooms = gr.Dropdown(
+                                    choices=list(BLOOMS.keys()),
+                                    value="Mixed (All)",
+                                    label="📚 Bloom's Level for Clones")
+                                t2_title = gr.Textbox(
+                                    label="Exam / Output Title",
+                                    value="Cloned MCQs")
+                                gr.Markdown("**Download formats:**")
+                                with gr.Row():
+                                    t2_word  = gr.Checkbox(label="📄 Word",  value=True)
+                                    t2_pdf   = gr.Checkbox(label="📑 PDF",   value=True)
+                                    t2_excel = gr.Checkbox(label="📊 Excel", value=False)
+                                t2_clone_btn = gr.Button("🔁 Generate Clones",
+                                                         variant="primary", size="lg")
+                            with gr.Column(scale=2):
+                                t2_preview = gr.Markdown(label="Parsed / Clone Preview")
+                                with gr.Row(elem_classes=["dl-row"]):
+                                    t2_w = gr.File(label="📄 Word")
+                                    t2_p = gr.File(label="📑 PDF")
+                                    t2_e = gr.File(label="📊 Excel")
+                                t2_metrics = gr.Markdown()
+
+        # ── Wire events ───────────────────────────────────────────────────────
+
+        # Auth
+        li_btn.click(fn=do_login,
+                     inputs=[li_user, li_pass, session_state],
+                     outputs=[li_msg, session_state, login_panel, main_portal,
+                              welcome_html, admin_tabs, user_tabs])
+        li_pass.submit(fn=do_login,
+                       inputs=[li_user, li_pass, session_state],
+                       outputs=[li_msg, session_state, login_panel, main_portal,
+                                welcome_html, admin_tabs, user_tabs])
+        rg_btn.click(fn=do_register,
+                     inputs=[rg_user, rg_email, rg_pass, rg_conf,
+                             rg_name, rg_inst, session_state],
+                     outputs=[rg_msg, session_state])
+        logout_btn.click(fn=do_logout,
+                         inputs=[session_state],
+                         outputs=[session_state, login_panel, main_portal,
+                                  welcome_html, admin_tabs, user_tabs])
+
+        # Admin
+        dash_btn.click(fn=admin_get_stats, inputs=[session_state], outputs=[dash_out])
+        refresh_users_btn.click(fn=admin_get_users, inputs=[session_state], outputs=[users_table])
+        btn_activate.click(fn=lambda u,s: admin_toggle(u,True,s),
+                           inputs=[action_uid,session_state], outputs=[action_msg,users_table])
+        btn_deactivate.click(fn=lambda u,s: admin_toggle(u,False,s),
+                             inputs=[action_uid,session_state], outputs=[action_msg,users_table])
+        btn_set_role.click(fn=admin_change_role,
+                           inputs=[action_uid,action_role,session_state],
+                           outputs=[action_msg,users_table])
+        btn_del_user.click(fn=admin_delete,
+                           inputs=[action_uid,session_state], outputs=[action_msg,users_table])
+        refresh_log_btn.click(fn=admin_get_log, inputs=[session_state], outputs=[log_table])
+
+        # Tab 1 — Generate
+        t1_btn.click(fn=handle_generate,
+                     inputs=[t1_topic, t1_num, t1_blooms, t1_diff,
+                             t1_word, t1_pdf, t1_excel, session_state],
+                     outputs=[t1_preview, t1_w, t1_p, t1_e, t1_metrics])
+
+        # Tab 2 — Parse then Clone (two separate buttons)
+        t2_preview_btn.click(fn=handle_upload_preview,
+                             inputs=[t2_file, t2_paste, session_state],
+                             outputs=[t2_preview, session_state])
+        t2_clone_btn.click(fn=handle_clone,
+                           inputs=[t2_clones, t2_blooms, t2_word, t2_pdf,
+                                   t2_excel, t2_title, session_state],
+                           outputs=[t2_preview, t2_w, t2_p, t2_e, t2_metrics])
+
+    return demo
+
+
+if __name__ == "__main__":
+    app = create_app()
+    app.launch(server_name="0.0.0.0", server_port=7860, share=False, show_error=True)

auth.py

@@ -0,0 +1,190 @@
+"""
+EduClone AI — Authentication & User Management
+SQLite WAL mode, bcrypt passwords, roles: admin / user
+"""
+import sqlite3, bcrypt, datetime, os, re, threading
+
+DB_PATH = os.environ.get("EDUCLONE_DB", "educlone_users.db")
+ADMIN_USERNAME = "abdulqayyum"
+ADMIN_EMAIL    = "admin@educlone.ai"
+ADMIN_PASSWORD = "Admin@EduClone2025"
+
+_lock = threading.Lock()
+
+def _conn():
+    """Return a fresh connection each call — WAL so reads never block."""
+    c = sqlite3.connect(DB_PATH, timeout=30)
+    c.row_factory  = sqlite3.Row
+    c.execute("PRAGMA journal_mode=WAL")
+    c.execute("PRAGMA busy_timeout=10000")
+    return c
+
+def init_db():
+    with _lock:
+        c = _conn()
+        c.execute("""CREATE TABLE IF NOT EXISTS users (
+            id            INTEGER PRIMARY KEY AUTOINCREMENT,
+            username      TEXT UNIQUE NOT NULL,
+            email         TEXT UNIQUE NOT NULL,
+            password_hash TEXT NOT NULL,
+            role          TEXT NOT NULL DEFAULT 'user',
+            full_name     TEXT DEFAULT '',
+            institution   TEXT DEFAULT '',
+            is_approved   INTEGER DEFAULT 1,
+            is_active     INTEGER DEFAULT 1,
+            created_at    TEXT NOT NULL,
+            last_login    TEXT)""")
+        c.execute("""CREATE TABLE IF NOT EXISTS activity_log (
+            id        INTEGER PRIMARY KEY AUTOINCREMENT,
+            user_id   INTEGER,
+            username  TEXT,
+            action    TEXT,
+            detail    TEXT,
+            timestamp TEXT)""")
+        # seed admin
+        if not c.execute("SELECT id FROM users WHERE username=?",
+                         (ADMIN_USERNAME,)).fetchone():
+            ph = bcrypt.hashpw(ADMIN_PASSWORD.encode(), bcrypt.gensalt()).decode()
+            c.execute("""INSERT INTO users
+                (username,email,password_hash,role,full_name,institution,is_approved,created_at)
+                VALUES(?,?,?,?,?,?,?,?)""",
+                (ADMIN_USERNAME, ADMIN_EMAIL, ph, "admin",
+                 "Abdulqayyum MBA", "EduClone AI", 1,
+                 datetime.datetime.now().isoformat()))
+        c.commit(); c.close()
+
+def _valid_email(e): return bool(re.match(r'^[^@\s]+@[^@\s]+\.[^@\s]+$', e))
+def _valid_user(u):  return bool(re.match(r'^[a-zA-Z0-9_]{3,30}$', u))
+def _valid_pass(p):  return len(p)>=8 and re.search(r'[A-Z]',p) and re.search(r'[0-9]',p)
+
+def register_user(username, email, password, full_name="", institution=""):
+    username = username.strip().lower(); email = email.strip().lower()
+    if not _valid_user(username): return False,"Username: 3–30 chars, letters/numbers/underscore only."
+    if not _valid_email(email):   return False,"Please enter a valid email address."
+    if not _valid_pass(password): return False,"Password: 8+ chars, 1 uppercase, 1 number."
+    with _lock:
+        c = _conn()
+        try:
+            if c.execute("SELECT id FROM users WHERE username=?",(username,)).fetchone():
+                return False,"Username already taken."
+            if c.execute("SELECT id FROM users WHERE email=?",(email,)).fetchone():
+                return False,"Email already registered."
+            ph = bcrypt.hashpw(password.encode(), bcrypt.gensalt()).decode()
+            c.execute("""INSERT INTO users
+                (username,email,password_hash,role,full_name,institution,is_approved,created_at)
+                VALUES(?,?,?,?,?,?,?,?)""",
+                (username,email,ph,"user",full_name.strip(),institution.strip(),1,
+                 datetime.datetime.now().isoformat()))
+            c.commit()
+            return True, f"✅ Account created! Welcome, {username}. You can now log in."
+        except Exception as ex:
+            return False, f"Registration error: {ex}"
+        finally:
+            c.close()
+
+def login_user(username, password):
+    username = username.strip().lower()
+    with _lock:
+        c = _conn()
+        try:
+            row = c.execute(
+                "SELECT * FROM users WHERE username=? OR email=?",
+                (username, username)).fetchone()
+            if not row:
+                return False, "❌ Username or password incorrect.", None
+            if not row["is_active"]:
+                return False, "❌ Account deactivated. Contact admin.", None
+            if not bcrypt.checkpw(password.encode(), row["password_hash"].encode()):
+                return False, "❌ Username or password incorrect.", None
+            c.execute("UPDATE users SET last_login=? WHERE id=?",
+                      (datetime.datetime.now().isoformat(), row["id"]))
+            c.commit()
+            user = {k: row[k] for k in row.keys() if k != "password_hash"}
+            return True, f"✅ Welcome back, {row['full_name'] or row['username']}!", user
+        except Exception as ex:
+            return False, f"Login error: {ex}", None
+        finally:
+            c.close()
+
+def log_activity(user_id, username, action, detail=""):
+    with _lock:
+        c = _conn()
+        try:
+            c.execute("""INSERT INTO activity_log(user_id,username,action,detail,timestamp)
+                         VALUES(?,?,?,?,?)""",
+                      (user_id, username, action, detail, datetime.datetime.now().isoformat()))
+            c.commit()
+        finally:
+            c.close()
+
+def get_all_users():
+    with _lock:
+        c = _conn()
+        try:
+            rows = c.execute("""SELECT id,username,email,role,full_name,institution,
+                                       is_approved,is_active,created_at,last_login
+                                FROM users ORDER BY created_at DESC""").fetchall()
+            return [dict(r) for r in rows]
+        finally:
+            c.close()
+
+def toggle_user_active(user_id, active):
+    with _lock:
+        c = _conn()
+        try:
+            c.execute("UPDATE users SET is_active=? WHERE id=?", (1 if active else 0, user_id))
+            c.commit()
+            return "✅ User status updated."
+        finally:
+            c.close()
+
+def change_user_role(user_id, role):
+    if role not in ("admin","user"): return "❌ Invalid role."
+    with _lock:
+        c = _conn()
+        try:
+            c.execute("UPDATE users SET role=? WHERE id=?", (role, user_id))
+            c.commit()
+            return f"✅ Role updated to {role}."
+        finally:
+            c.close()
+
+def delete_user(user_id):
+    with _lock:
+        c = _conn()
+        try:
+            c.execute("DELETE FROM users WHERE id=? AND role != 'admin'", (user_id,))
+            c.commit()
+            return "✅ User deleted."
+        finally:
+            c.close()
+
+def get_activity_log(limit=200):
+    with _lock:
+        c = _conn()
+        try:
+            rows = c.execute(
+                "SELECT * FROM activity_log ORDER BY timestamp DESC LIMIT ?",
+                (limit,)).fetchall()
+            return [dict(r) for r in rows]
+        finally:
+            c.close()
+
+def get_stats():
+    with _lock:
+        c = _conn()
+        try:
+            today = datetime.date.today().isoformat()
+            return {
+                "total":        c.execute("SELECT COUNT(*) FROM users").fetchone()[0],
+                "admins":       c.execute("SELECT COUNT(*) FROM users WHERE role='admin'").fetchone()[0],
+                "active":       c.execute("SELECT COUNT(*) FROM users WHERE is_active=1").fetchone()[0],
+                "new_today":    c.execute("SELECT COUNT(*) FROM users WHERE created_at LIKE ?",
+                                         (today+"%",)).fetchone()[0],
+                "logins_today": c.execute("SELECT COUNT(*) FROM activity_log WHERE action='login' AND timestamp LIKE ?",
+                                         (today+"%",)).fetchone()[0],
+            }
+        finally:
+            c.close()
+
+init_db()

requirements.txt

@@ -0,0 +1,8 @@
+gradio>=5.0,<6.0
+bcrypt>=4.0.0
+pandas>=2.0.0
+python-docx>=0.8.11
+reportlab>=4.0.0
+openpyxl>=3.1.0
+pdfplumber>=0.9.0
+requests>=2.28.0