Upload 54 files

App.tsx

@@ -1,3 +1,4 @@
+
 import React, { useState, useEffect, Suspense } from 'react';
 import { Sidebar } from './components/Sidebar';
 import { Header } from './components/Header';
@@ -5,6 +6,7 @@ import { Login } from './pages/Login';
 import { User, UserRole } from './types';
 import { api } from './services/api';
 import { AlertTriangle, Loader2 } from 'lucide-react';
+import { LiveVoiceFab } from './components/LiveVoiceFab'; // Import
 
 // --- Lazy Load Helper with Retry Strategy ---
 // This wrapper catches chunk loading errors (common after deployments) and reloads the page once.
@@ -196,13 +198,16 @@ const AppContent: React.FC = () => {
         onClose={() => setSidebarOpen(false)}
       />
       
-      <div className="flex-1 flex flex-col w-full">
+      <div className="flex-1 flex flex-col w-full relative">
         <Header user={currentUser!} title={viewTitles[currentView] || '智慧校园'} onMenuClick={() => setSidebarOpen(true)}/>
         <main className="flex-1 overflow-x-hidden overflow-y-auto bg-gray-50 p-4 md:p-6 w-full">
           <div className="max-w-7xl mx-auto w-full h-full">
             <Suspense fallback={<PageLoading />}>{renderContent()}</Suspense>
           </div>
         </main>
+        
+        {/* Global AI Voice Assistant FAB */}
+        <LiveVoiceFab />
       </div>
     </div>
   );
@@ -216,4 +221,4 @@ const App: React.FC = () => {
   );
 };
 
-export default App;
+export default App;

components/LiveVoiceFab.tsx

@@ -0,0 +1,370 @@
+
+import React, { useState, useRef, useEffect } from 'react';
+import { Bot, Mic, X, MessageSquare, Loader2, Volume2, Power, Minimize2 } from 'lucide-react';
+import { GoogleGenAI, LiveServerMessage, Modality } from '@google/genai';
+import { api } from '../services/api';
+import { Toast } from './Toast';
+
+// --- Audio Utils (Specific for Live API PCM) ---
+const decodeAudioData = async (
+  base64String: string,
+  ctx: AudioContext,
+  sampleRate: number = 24000
+): Promise<AudioBuffer> => {
+  const binaryString = atob(base64String);
+  const len = binaryString.length;
+  const bytes = new Uint8Array(len);
+  for (let i = 0; i < len; i++) {
+    bytes[i] = binaryString.charCodeAt(i);
+  }
+  
+  // Convert Int16 PCM to Float32
+  const int16Data = new Int16Array(bytes.buffer);
+  const float32Data = new Float32Array(int16Data.length);
+  for (let i = 0; i < int16Data.length; i++) {
+    float32Data[i] = int16Data[i] / 32768.0;
+  }
+
+  const buffer = ctx.createBuffer(1, float32Data.length, sampleRate);
+  buffer.copyToChannel(float32Data, 0);
+  return buffer;
+};
+
+const createPCMBlob = (data: Float32Array): { data: string, mimeType: string } => {
+  const l = data.length;
+  const int16 = new Int16Array(l);
+  for (let i = 0; i < l; i++) {
+    int16[i] = Math.max(-1, Math.min(1, data[i])) * 32768;
+  }
+  const bytes = new Uint8Array(int16.buffer);
+  let binary = '';
+  const len = bytes.byteLength;
+  for (let i = 0; i < len; i++) {
+    binary += String.fromCharCode(bytes[i]);
+  }
+  return {
+    data: btoa(binary),
+    mimeType: 'audio/pcm;rate=16000', // Client input is usually 16k
+  };
+};
+
+interface ChatMessage {
+  id: string;
+  role: 'user' | 'model';
+  text: string;
+}
+
+export const LiveVoiceFab: React.FC = () => {
+  const [isOpen, setIsOpen] = useState(false);
+  const [isConnected, setIsConnected] = useState(false);
+  const [isRecording, setIsRecording] = useState(false);
+  const [isAiSpeaking, setIsAiSpeaking] = useState(false);
+  const [messages, setMessages] = useState<ChatMessage[]>([]);
+  const [error, setError] = useState<string | null>(null);
+  
+  // Refs for Audio & Session
+  const sessionRef = useRef<any>(null);
+  const audioContextRef = useRef<AudioContext | null>(null);
+  const inputContextRef = useRef<AudioContext | null>(null);
+  const nextStartTimeRef = useRef<number>(0);
+  const sourceNodeRef = useRef<MediaStreamAudioSourceNode | null>(null);
+  const processorRef = useRef<ScriptProcessorNode | null>(null);
+  const activeSourcesRef = useRef<Set<AudioBufferSourceNode>>(new Set());
+  const messagesEndRef = useRef<HTMLDivElement>(null);
+
+  const currentUser = api.auth.getCurrentUser();
+  const hasAccess = currentUser?.aiAccess || currentUser?.role === 'ADMIN';
+
+  useEffect(() => {
+    if (isOpen && !audioContextRef.current) {
+        // @ts-ignore
+        const AudioCtor = window.AudioContext || window.webkitAudioContext;
+        audioContextRef.current = new AudioCtor({ sampleRate: 24000 });
+        inputContextRef.current = new AudioCtor({ sampleRate: 16000 });
+    }
+    // Scroll to bottom
+    messagesEndRef.current?.scrollIntoView({ behavior: 'smooth' });
+  }, [isOpen, messages]);
+
+  // Clean up on unmount
+  useEffect(() => {
+    return () => {
+      disconnectSession();
+    };
+  }, []);
+
+  const connectSession = async () => {
+    setError(null);
+    try {
+      const { key } = await api.ai.getKey();
+      if (!key) throw new Error("无法获取 AI 配置");
+
+      const ai = new GoogleGenAI({ apiKey: key });
+      
+      // Use the model mentioned (mapped to the standard preview)
+      const model = 'gemini-2.5-flash-native-audio-preview-09-2025';
+      
+      const session = await ai.live.connect({
+        model,
+        config: {
+          responseModalities: [Modality.AUDIO],
+          speechConfig: { voiceConfig: { prebuiltVoiceConfig: { voiceName: 'Kore' } } },
+          systemInstruction: { parts: [{ text: "你是一位友善的校园助手。请用简短、口语化的中文回答。请在回答中包含文字转录。" }] },
+          outputAudioTranscription: { } // Enable text output
+        },
+      });
+
+      sessionRef.current = session;
+      setIsConnected(true);
+      
+      // Welcome message
+      setMessages(prev => [...prev, { id: 'sys-start', role: 'model', text: '已连接！按住按钮说话。' }]);
+
+      // Listen for messages
+      receiveLoop(session);
+
+    } catch (e: any) {
+      console.error(e);
+      setError(e.message || "连接失败");
+      setIsConnected(false);
+    }
+  };
+
+  const disconnectSession = async () => {
+    if (sessionRef.current) {
+      // Typically session closure is handled by the server or object cleanup
+      sessionRef.current = null; 
+    }
+    setIsConnected(false);
+    setIsRecording(false);
+    
+    // Stop audio input
+    if (sourceNodeRef.current) sourceNodeRef.current.disconnect();
+    if (processorRef.current) processorRef.current.disconnect();
+    
+    // Stop audio output
+    activeSourcesRef.current.forEach(s => s.stop());
+    activeSourcesRef.current.clear();
+  };
+
+  const receiveLoop = async (session: any) => {
+    try {
+      for await (const msg of session.receive()) {
+        const message = msg as LiveServerMessage;
+
+        // 1. Handle Text (Transcription)
+        const transcript = message.serverContent?.modelTurn?.parts?.find(p => p.text)?.text;
+        if (transcript) {
+           setMessages(prev => {
+               const last = prev[prev.length - 1];
+               if (last && last.role === 'model' && !last.text.endsWith('\n')) {
+                   // Append to streaming message
+                   return [...prev.slice(0, -1), { ...last, text: last.text + transcript }];
+               }
+               return [...prev, { id: Date.now().toString(), role: 'model', text: transcript }];
+           });
+        }
+
+        // 2. Handle User Transcription (Echo)
+        if (message.serverContent?.interrupted) {
+            // Clear queue if interrupted
+            activeSourcesRef.current.forEach(s => s.stop());
+            activeSourcesRef.current.clear();
+            nextStartTimeRef.current = 0;
+            setIsAiSpeaking(false);
+        }
+
+        // 3. Handle Audio Output
+        const audioData = message.serverContent?.modelTurn?.parts?.find(p => p.inlineData)?.inlineData?.data;
+        if (audioData && audioContextRef.current) {
+            setIsAiSpeaking(true);
+            const ctx = audioContextRef.current;
+            const buffer = await decodeAudioData(audioData, ctx);
+            
+            const source = ctx.createBufferSource();
+            source.buffer = buffer;
+            source.connect(ctx.destination);
+            
+            // Scheduling
+            const currentTime = ctx.currentTime;
+            if (nextStartTimeRef.current < currentTime) {
+                nextStartTimeRef.current = currentTime;
+            }
+            source.start(nextStartTimeRef.current);
+            nextStartTimeRef.current += buffer.duration;
+            
+            activeSourcesRef.current.add(source);
+            source.onended = () => {
+                activeSourcesRef.current.delete(source);
+                if (activeSourcesRef.current.size === 0) setIsAiSpeaking(false);
+            };
+        }
+      }
+    } catch (e) {
+      console.log("Session ended or error", e);
+      setIsConnected(false);
+    }
+  };
+
+  const startRecording = async () => {
+    if (!isConnected || !sessionRef.current || !inputContextRef.current) return;
+    setIsRecording(true);
+    
+    // Interrupt AI if speaking
+    // We can send an empty text to interrupt or rely on VAD, but explicit clear is safer for UI
+    activeSourcesRef.current.forEach(s => s.stop());
+    activeSourcesRef.current.clear();
+    nextStartTimeRef.current = 0;
+    setIsAiSpeaking(false);
+
+    try {
+        const ctx = inputContextRef.current;
+        if (ctx.state === 'suspended') await ctx.resume();
+
+        const stream = await navigator.mediaDevices.getUserMedia({ audio: {
+            sampleRate: 16000,
+            channelCount: 1,
+            echoCancellation: true
+        }});
+        
+        const source = ctx.createMediaStreamSource(stream);
+        // Using ScriptProcessor for raw PCM access (AudioWorklet is better but more complex to setup in a single file)
+        const processor = ctx.createScriptProcessor(4096, 1, 1);
+        
+        processor.onaudioprocess = (e) => {
+            if (!sessionRef.current) return;
+            const inputData = e.inputBuffer.getChannelData(0);
+            const pcmBlob = createPCMBlob(inputData);
+            sessionRef.current.sendRealtimeInput({ media: pcmBlob });
+        };
+
+        source.connect(processor);
+        processor.connect(ctx.destination); // Required for script processor to run
+        
+        sourceNodeRef.current = source;
+        processorRef.current = processor;
+
+    } catch (e) {
+        console.error("Mic error", e);
+        setError("无法访问麦克风");
+        setIsRecording(false);
+    }
+  };
+
+  const stopRecording = () => {
+    setIsRecording(false);
+    if (sourceNodeRef.current) {
+        sourceNodeRef.current.disconnect();
+        sourceNodeRef.current = null;
+    }
+    if (processorRef.current) {
+        processorRef.current.disconnect();
+        processorRef.current = null;
+    }
+    // Note: We don't explicitly send "End of Turn", the model infers it from silence/VAD in Live API usually, 
+    // but stopping the stream is sufficient.
+  };
+
+  if (!hasAccess) return null;
+
+  return (
+    <>
+      {/* Floating Button */}
+      <button
+        onClick={() => {
+            setIsOpen(!isOpen);
+            if (!isOpen && !isConnected) connectSession(); 
+        }}
+        className={`fixed bottom-6 right-6 z-[9990] w-14 h-14 rounded-full shadow-2xl flex items-center justify-center transition-all hover:scale-110 active:scale-95 ${isOpen ? 'bg-red-500 rotate-45' : 'bg-gradient-to-tr from-blue-600 to-indigo-600'}`}
+      >
+        {isOpen ? <X color="white" size={24}/> : <Bot color="white" size={28}/>}
+      </button>
+
+      {/* Floating Window */}
+      {isOpen && (
+        <div className="fixed bottom-24 right-6 z-[9990] w-80 md:w-96 bg-white rounded-2xl shadow-2xl border border-gray-100 flex flex-col overflow-hidden animate-in slide-in-from-bottom-10 fade-in duration-200" style={{height: '500px'}}>
+            
+            {/* Header */}
+            <div className="p-4 bg-gradient-to-r from-blue-600 to-indigo-600 flex justify-between items-center shrink-0">
+                <div className="flex items-center gap-2 text-white">
+                    <div className={`w-2 h-2 rounded-full ${isConnected ? 'bg-green-400 animate-pulse' : 'bg-red-400'}`}></div>
+                    <span className="font-bold text-sm">AI 实时语音 (Live)</span>
+                </div>
+                <div className="flex gap-2">
+                    <button onClick={disconnectSession} className="text-white/80 hover:text-white" title="重连/刷新">
+                       <Power size={16}/>
+                    </button>
+                    <button onClick={() => setIsOpen(false)} className="text-white/80 hover:text-white">
+                       <Minimize2 size={16}/>
+                    </button>
+                </div>
+            </div>
+
+            {/* Chat Body */}
+            <div className="flex-1 bg-gray-50 overflow-y-auto p-4 space-y-3 custom-scrollbar">
+                {messages.length === 0 && isConnected && (
+                    <div className="text-center text-gray-400 text-xs mt-10">
+                        <p>已连接 Gemini Native Audio Dialog</p>
+                        <p>按住下方按钮开始对话</p>
+                    </div>
+                )}
+                {!isConnected && !error && (
+                    <div className="flex flex-col items-center justify-center h-full text-gray-400 gap-2">
+                        <Loader2 className="animate-spin text-blue-500" size={24}/>
+                        <span className="text-xs">正在建立加密连接...</span>
+                    </div>
+                )}
+                {error && (
+                    <div className="bg-red-50 text-red-600 p-3 rounded-lg text-xs text-center border border-red-100">
+                        {error}
+                        <button onClick={connectSession} className="block mx-auto mt-2 text-blue-600 underline">重试</button>
+                    </div>
+                )}
+                {messages.map((msg, idx) => (
+                    <div key={idx} className={`flex ${msg.role === 'user' ? 'justify-end' : 'justify-start'}`}>
+                        <div className={`max-w-[85%] px-3 py-2 rounded-xl text-sm ${msg.role === 'user' ? 'bg-blue-600 text-white rounded-tr-none' : 'bg-white border border-gray-200 text-gray-800 rounded-tl-none shadow-sm'}`}>
+                            {msg.text}
+                        </div>
+                    </div>
+                ))}
+                {isAiSpeaking && (
+                    <div className="flex justify-start">
+                        <div className="bg-white border border-gray-200 px-3 py-2 rounded-xl rounded-tl-none shadow-sm flex items-center gap-1 text-blue-600">
+                            <Volume2 size={14} className="animate-pulse"/>
+                            <div className="flex gap-0.5 items-end h-3">
+                                <div className="w-0.5 bg-blue-500 h-1 animate-[bounce_1s_infinite]"></div>
+                                <div className="w-0.5 bg-blue-500 h-2 animate-[bounce_1.2s_infinite]"></div>
+                                <div className="w-0.5 bg-blue-500 h-3 animate-[bounce_0.8s_infinite]"></div>
+                            </div>
+                        </div>
+                    </div>
+                )}
+                <div ref={messagesEndRef}></div>
+            </div>
+
+            {/* Controls */}
+            <div className="p-4 bg-white border-t border-gray-100 shrink-0 flex flex-col items-center gap-2">
+                <button
+                    disabled={!isConnected}
+                    onMouseDown={startRecording}
+                    onMouseUp={stopRecording}
+                    onMouseLeave={stopRecording}
+                    onTouchStart={startRecording}
+                    onTouchEnd={stopRecording}
+                    className={`w-full py-3 rounded-full font-bold text-white shadow-lg transition-all transform active:scale-95 flex items-center justify-center gap-2 ${
+                        isRecording 
+                        ? 'bg-red-500 scale-105 ring-4 ring-red-100' 
+                        : isConnected ? 'bg-blue-600 hover:bg-blue-700' : 'bg-gray-300 cursor-not-allowed'
+                    }`}
+                >
+                    {isRecording ? <><div className="w-3 h-3 bg-white rounded-full animate-ping"></div> 松开发送</> : <><Mic size={18}/> 按住说话</>}
+                </button>
+                <div className="text-[10px] text-gray-400">
+                    Model: gemini-2.5-flash-native-audio
+                </div>
+            </div>
+        </div>
+      )}
+    </>
+  );
+};

server.js

@@ -1,548 +1,27 @@
 
-const { 
-    School, User, Student, Course, Score, ClassModel, SubjectModel, ExamModel, ScheduleModel,
-    ConfigModel, NotificationModel, GameSessionModel, StudentRewardModel, LuckyDrawConfigModel, GameMonsterConfigModel, GameZenConfigModel,
-    AchievementConfigModel, TeacherExchangeConfigModel, StudentAchievementModel, AttendanceModel, LeaveRequestModel, SchoolCalendarModel,
-    WishModel, FeedbackModel, TodoModel
-} = require('./models');
-
-// Import AI Routes
-const aiRoutes = require('./ai-routes');
-
-const express = require('express');
-const mongoose = require('mongoose');
-const cors = require('cors');
-const bodyParser = require('body-parser');
-const path = require('path');
-const compression = require('compression'); 
-
-const PORT = 7860;
-const MONGO_URI = 'mongodb+srv://dv890a:db8822723@chatpro.gw3v0v7.mongodb.net/chatpro?retryWrites=true&w=majority&appName=chatpro&authSource=admin';
-
-const app = express();
-
-app.use(compression({
-  filter: (req, res) => {
-    if (req.originalUrl && req.originalUrl.includes('/api/ai/chat')) {
-        return false; 
-    }
-    return compression.filter(req, res);
-  }
-}));
-
-app.use(cors());
-app.use(bodyParser.json({ limit: '50mb' })); 
-app.use(express.static(path.join(__dirname, 'dist'), {
-  setHeaders: (res, filePath) => {
-    if (filePath.endsWith('.html')) {
-      res.setHeader('Cache-Control', 'no-cache, no-store, must-revalidate');
-    } else {
-      res.setHeader('Cache-Control', 'public, max-age=31536000, immutable');
-    }
-  }
-}));
-
-const InMemoryDB = { schools: [], users: [], isFallback: false };
-const connectDB = async () => {
-  try {
-    await mongoose.connect(MONGO_URI, { serverSelectionTimeoutMS: 30000 });
-    console.log('✅ MongoDB 连接成功 (Real Data)');
-    
-    // FIX: Drop the restrictive index that prevents multiple schedules per slot
-    try {
-        await ScheduleModel.collection.dropIndex('schoolId_1_className_1_dayOfWeek_1_period_1');
-        console.log('✅ Dropped restrictive schedule index');
-    } catch (e) {
-        // Ignore error if index doesn't exist
-    }
-
-  } catch (err) {
-    console.error('❌ MongoDB 连接失败:', err.message);
-    InMemoryDB.isFallback = true;
-  }
-};
-connectDB();
-
-const getQueryFilter = (req) => { 
-  const s = req.headers['x-school-id']; 
-  const role = req.headers['x-user-role'];
-  if (role === 'PRINCIPAL') {
-      if (!s) return { _id: null }; 
-      return { schoolId: s };
-  }
-  if (!s) return {};
-  return { 
-    $or: [
-      { schoolId: s },
-      { schoolId: { $exists: false } },
-      { schoolId: null }
-    ]
-  }; 
-};
-const injectSchoolId = (req, b) => ({ ...b, schoolId: req.headers['x-school-id'] });
-
-const getGameOwnerFilter = async (req) => {
-    const role = req.headers['x-user-role'];
-    const username = req.headers['x-user-username'];
-    if (role === 'TEACHER') {
-        const user = await User.findOne({ username });
-        return { ownerId: user ? user._id.toString() : 'unknown' };
-    }
-    return {};
-};
-
-const getAutoSemester = () => {
-    const now = new Date();
-    const month = now.getMonth() + 1; 
-    const year = now.getFullYear();
-    if (month >= 8 || month === 1) {
-        const startYear = month === 1 ? year - 1 : year;
-        return `${startYear}-${startYear + 1}学年 第一学期`;
-    } else {
-        const startYear = year - 1;
-        return `${startYear}-${startYear + 1}学年 第二学期`;
-    }
-};
-
-const generateStudentNo = async () => {
-    const year = new Date().getFullYear();
-    const random = Math.floor(100000 + Math.random() * 900000); 
-    return `${year}${random}`;
-};
-
-// MOUNT AI ROUTES
-app.use('/api/ai', aiRoutes);
-
-// ... (Rest of Existing Routes) ...
-
-// --- TODO LIST ENDPOINTS ---
-app.get('/api/todos', async (req, res) => {
-    const username = req.headers['x-user-username'];
-    if (!username) return res.status(401).json({ error: 'Unauthorized' });
-    const user = await User.findOne({ username });
-    if (!user) return res.status(404).json({ error: 'User not found' });
-    res.json(await TodoModel.find({ userId: user._id.toString() }).sort({ isCompleted: 1, createTime: -1 }));
-});
-
-app.post('/api/todos', async (req, res) => {
-    const username = req.headers['x-user-username'];
-    const user = await User.findOne({ username });
-    if (!user) return res.status(404).json({ error: 'User not found' });
-    await TodoModel.create({ ...req.body, userId: user._id.toString() });
-    res.json({ success: true });
-});
-
-app.put('/api/todos/:id', async (req, res) => {
-    await TodoModel.findByIdAndUpdate(req.params.id, req.body);
-    res.json({ success: true });
-});
-
-app.delete('/api/todos/:id', async (req, res) => {
-    await TodoModel.findByIdAndDelete(req.params.id);
-    res.json({ success: true });
-});
-
-// --- UPDATED SCHEDULE ENDPOINTS ---
-app.get('/api/schedules', async (req, res) => { 
-    const query = { ...getQueryFilter(req), ...req.query }; 
-    if (query.grade) { query.className = { $regex: '^' + query.grade }; delete query.grade; } 
-    res.json(await ScheduleModel.find(query)); 
-});
-
-// NEW: Update by ID (Exact Update)
-app.put('/api/schedules/:id', async (req, res) => {
-    try {
-        await ScheduleModel.findByIdAndUpdate(req.params.id, req.body);
-        res.json({ success: true });
-    } catch (e) {
-        res.status(500).json({ error: e.message });
-    }
-});
-
-// Create or Update by Logic (Upsert)
-app.post('/api/schedules', async (req, res) => { 
-    try {
-        // Updated Filter: Include weekType to allow separate ODD/EVEN records for same slot
-        const filter = { 
-            className: req.body.className, 
-            dayOfWeek: req.body.dayOfWeek, 
-            period: req.body.period,
-            weekType: req.body.weekType || 'ALL'
-        }; 
-        const sId = req.headers['x-school-id']; 
-        if(sId) filter.schoolId = sId; 
-        
-        await ScheduleModel.findOneAndUpdate(filter, injectSchoolId(req, req.body), {upsert:true}); 
-        res.json({}); 
-    } catch (e) {
-        console.error("Save schedule error:", e);
-        res.status(500).json({ error: e.message });
-    }
-});
-
-app.delete('/api/schedules', async (req, res) => { 
-    try {
-        // Support deleting by ID if provided
-        if (req.query.id) {
-            await ScheduleModel.findByIdAndDelete(req.query.id);
-        } else {
-            await ScheduleModel.deleteOne({...getQueryFilter(req), ...req.query}); 
-        }
-        res.json({}); 
+// ... existing code ...
+const AIUsageSchema = new mongoose.Schema({
+    date: String, // Format: YYYY-MM-DD
+    model: String,
+    provider: String,
+    count: { type: Number, default: 0 }
+});
+// Optimize lookups by date and model
+AIUsageSchema.index({ date: 1, model: 1, provider: 1 }, { unique: true });
+const AIUsageModel = mongoose.model('AIUsage', AIUsageSchema);
+
+// NEW: Endpoint to get a valid Gemini Key for Client-side Live API
+router.get('/config/key', checkAIAccess, async (req, res) => {
+    try {
+        const keys = await getKeyPool('gemini');
+        if (keys.length === 0) return res.status(404).json({ error: 'No API keys configured' });
+        // Return a random key to load balance slightly, or just the first one
+        const key = keys[0]; 
+        res.json({ key });
     } catch (e) {
         res.status(500).json({ error: e.message });
     }
 });
 
-// --- USER MENU ORDER ---
-app.put('/api/users/:id/menu-order', async (req, res) => {
-    const { menuOrder } = req.body;
-    await User.findByIdAndUpdate(req.params.id, { menuOrder });
-    res.json({ success: true });
-});
-
-// ... (Rest of existing routes unchanged) ...
-app.get('/api/classes/:className/teachers', async (req, res) => {
-    const { className } = req.params;
-    const schoolId = req.headers['x-school-id'];
-    const normalize = (s) => (s || '').replace(/\s+/g, '');
-    const searchName = normalize(decodeURIComponent(className));
-    const teacherIds = new Set();
-    const teacherNamesToResolve = new Set();
-    try {
-        const allClasses = await ClassModel.find({ schoolId });
-        const matchedClass = allClasses.find(c => {
-             const full = normalize(c.grade + c.className);
-             const sub = normalize(c.className);
-             return full === searchName || sub === searchName;
-        });
-        if (matchedClass) {
-            if (matchedClass.homeroomTeacherIds && matchedClass.homeroomTeacherIds.length > 0) {
-                matchedClass.homeroomTeacherIds.forEach(id => teacherIds.add(id));
-            }
-            if (matchedClass.teacherName) { matchedClass.teacherName.split(/[,，]/).forEach(n => { if(n.trim()) teacherNamesToResolve.add(n.trim()); }); }
-        }
-        const allCourses = await Course.find({ schoolId });
-        allCourses.forEach(c => {
-            if (normalize(c.className) === searchName) {
-                if (c.teacherId) { teacherIds.add(c.teacherId); } else if (c.teacherName) { teacherNamesToResolve.add(c.teacherName); }
-            }
-        });
-        if (teacherNamesToResolve.size > 0) {
-            const names = Array.from(teacherNamesToResolve);
-            const users = await User.find({ schoolId, role: 'TEACHER', $or: [ { trueName: { $in: names } }, { username: { $in: names } } ] });
-            users.forEach(u => teacherIds.add(u._id.toString()));
-        }
-        if (teacherIds.size === 0) return res.json([]);
-        const teachers = await User.find({ _id: { $in: Array.from(teacherIds) } }, 'trueName username _id teachingSubject');
-        res.json(teachers);
-    } catch (e) { res.json([]); }
-});
-
-app.get('/api/wishes', async (req, res) => {
-    const { teacherId, studentId, status } = req.query;
-    const filter = getQueryFilter(req);
-    if (teacherId) filter.teacherId = teacherId;
-    if (studentId) filter.studentId = studentId;
-    if (status) filter.status = status;
-    res.json(await WishModel.find(filter).sort({ status: -1, createTime: -1 }));
-});
-
-app.post('/api/wishes', async (req, res) => {
-    const data = injectSchoolId(req, req.body);
-    const existing = await WishModel.findOne({ studentId: data.studentId, status: 'PENDING' });
-    if (existing) { return res.status(400).json({ error: 'LIMIT_REACHED', message: '您还有一个未实现的愿望，请等待实现后再许愿！' }); }
-    await WishModel.create(data);
-    res.json({ success: true });
-});
-
-app.post('/api/wishes/:id/fulfill', async (req, res) => {
-    await WishModel.findByIdAndUpdate(req.params.id, { status: 'FULFILLED', fulfillTime: new Date() });
-    res.json({ success: true });
-});
-
-app.post('/api/wishes/random-fulfill', async (req, res) => {
-    const { teacherId } = req.body;
-    const pendingWishes = await WishModel.find({ teacherId, status: 'PENDING' });
-    if (pendingWishes.length === 0) { return res.status(404).json({ error: 'NO_WISHES', message: '暂无待实现的愿望' }); }
-    const randomWish = pendingWishes[Math.floor(Math.random() * pendingWishes.length)];
-    await WishModel.findByIdAndUpdate(randomWish._id, { status: 'FULFILLED', fulfillTime: new Date() });
-    res.json({ success: true, wish: randomWish });
-});
-
-app.get('/api/feedback', async (req, res) => {
-    const { targetId, creatorId, type, status } = req.query;
-    const filter = getQueryFilter(req);
-    if (targetId) filter.targetId = targetId;
-    if (creatorId) filter.creatorId = creatorId;
-    if (type) filter.type = type;
-    if (status) { const statuses = status.split(','); if (statuses.length > 1) { filter.status = { $in: statuses }; } else { filter.status = status; } }
-    res.json(await FeedbackModel.find(filter).sort({ createTime: -1 }));
-});
-
-app.post('/api/feedback', async (req, res) => {
-    const data = injectSchoolId(req, req.body);
-    await FeedbackModel.create(data);
-    res.json({ success: true });
-});
-
-app.put('/api/feedback/:id', async (req, res) => {
-    const { id } = req.params; const { status, reply } = req.body;
-    const updateData = { updateTime: new Date() };
-    if (status) updateData.status = status;
-    if (reply !== undefined) updateData.reply = reply;
-    await FeedbackModel.findByIdAndUpdate(id, updateData);
-    res.json({ success: true });
-});
-
-app.post('/api/feedback/ignore-all', async (req, res) => {
-    const { targetId } = req.body;
-    await FeedbackModel.updateMany( { targetId, status: 'PENDING' }, { status: 'IGNORED', updateTime: new Date() } );
-    res.json({ success: true });
-});
-
-app.get('/api/games/lucky-config', async (req, res) => {
-   const filter = getQueryFilter(req);
-   if (req.query.ownerId) { filter.ownerId = req.query.ownerId; } else { const ownerFilter = await getGameOwnerFilter(req); Object.assign(filter, ownerFilter); }
-   if (req.query.className) filter.className = req.query.className;
-   const config = await LuckyDrawConfigModel.findOne(filter);
-   res.json(config || null); 
-});
-app.get('/api/achievements/config', async (req, res) => {
-    const { className } = req.query;
-    const filter = getQueryFilter(req);
-    if (className) filter.className = className;
-    res.json(await AchievementConfigModel.findOne(filter));
-});
-app.post('/api/achievements/config', async (req, res) => {
-    const data = injectSchoolId(req, req.body);
-    await AchievementConfigModel.findOneAndUpdate( { className: data.className, ...getQueryFilter(req) },  data,  { upsert: true } );
-    res.json({ success: true });
-});
-app.get('/api/achievements/teacher-rules', async (req, res) => {
-    const filter = getQueryFilter(req);
-    if (req.query.teacherId) { filter.teacherId = req.query.teacherId; } else if (req.headers['x-user-role'] === 'TEACHER') { const user = await User.findOne({ username: req.headers['x-user-username'] }); if (user) filter.teacherId = user._id.toString(); }
-    if (req.query.teacherIds) { const ids = req.query.teacherIds.split(','); delete filter.teacherId; filter.teacherId = { $in: ids }; const configs = await TeacherExchangeConfigModel.find(filter); return res.json(configs); }
-    const config = await TeacherExchangeConfigModel.findOne(filter);
-    res.json(config || { rules: [] });
-});
-app.post('/api/achievements/teacher-rules', async (req, res) => {
-    const data = injectSchoolId(req, req.body);
-    const user = await User.findOne({ username: req.headers['x-user-username'] });
-    if (!user) return res.status(404).json({ error: 'User not found' });
-    data.teacherId = user._id.toString();
-    data.teacherName = user.trueName || user.username;
-    await TeacherExchangeConfigModel.findOneAndUpdate( { teacherId: data.teacherId, ...getQueryFilter(req) }, data, { upsert: true } );
-    res.json({ success: true });
-});
-app.get('/api/achievements/student', async (req, res) => {
-    const { studentId, semester } = req.query;
-    const filter = { studentId };
-    if (semester) filter.semester = semester;
-    res.json(await StudentAchievementModel.find(filter).sort({ createTime: -1 }));
-});
-app.post('/api/achievements/grant', async (req, res) => {
-    const { studentId, achievementId, semester } = req.body;
-    const sId = req.headers['x-school-id'];
-    const student = await Student.findById(studentId);
-    if (!student) return res.status(404).json({ error: 'Student not found' });
-    const config = await AchievementConfigModel.findOne({ className: student.className, schoolId: sId });
-    const achievement = config?.achievements.find(a => a.id === achievementId);
-    if (!achievement) return res.status(404).json({ error: 'Achievement not found' });
-    await StudentAchievementModel.create({ schoolId: sId, studentId, studentName: student.name, achievementId: achievement.id, achievementName: achievement.name, achievementIcon: achievement.icon, semester, createTime: new Date() });
-    await Student.findByIdAndUpdate(studentId, { $inc: { flowerBalance: achievement.points } });
-    res.json({ success: true });
-});
-app.post('/api/achievements/exchange', async (req, res) => {
-    const { studentId, ruleId, teacherId } = req.body; 
-    const sId = req.headers['x-school-id'];
-    const student = await Student.findById(studentId);
-    if (!student) return res.status(404).json({ error: 'Student not found' });
-    let rule = null;
-    let ownerId = null; 
-    if (teacherId) { const tConfig = await TeacherExchangeConfigModel.findOne({ teacherId, schoolId: sId }); rule = tConfig?.rules.find(r => r.id === ruleId); ownerId = teacherId; } else { const config = await AchievementConfigModel.findOne({ className: student.className, schoolId: sId }); rule = config?.exchangeRules?.find(r => r.id === ruleId); }
-    if (!rule) return res.status(404).json({ error: 'Rule not found' });
-    if (student.flowerBalance < rule.cost) { return res.status(400).json({ error: 'INSUFFICIENT_FUNDS', message: '小红花余额不足' }); }
-    await Student.findByIdAndUpdate(studentId, { $inc: { flowerBalance: -rule.cost } });
-    await StudentRewardModel.create({ schoolId: sId, studentId, studentName: student.name, rewardType: rule.rewardType, name: rule.rewardName, count: rule.rewardValue, status: rule.rewardType === 'DRAW_COUNT' ? 'REDEEMED' : 'PENDING', source: '积分兑换', ownerId, createTime: new Date() });
-    if (rule.rewardType === 'DRAW_COUNT') { await Student.findByIdAndUpdate(studentId, { $inc: { drawAttempts: rule.rewardValue } }); }
-    res.json({ success: true });
-});
-app.get('/api/auth/me', async (req, res) => {
-    const username = req.headers['x-user-username'];
-    if (!username) return res.status(401).json({ error: 'Unauthorized' });
-    const user = await User.findOne({ username });
-    if (!user) return res.status(404).json({ error: 'User not found' });
-    res.json(user);
-});
-app.post('/api/auth/update-profile', async (req, res) => {
-    const { userId, trueName, phone, avatar, currentPassword, newPassword } = req.body;
-    try {
-        const user = await User.findById(userId);
-        if (!user) return res.status(404).json({ error: 'User not found' });
-        if (newPassword) { if (user.password !== currentPassword) return res.status(401).json({ error: 'INVALID_PASSWORD', message: '旧密码错误' }); user.password = newPassword; }
-        if (trueName) user.trueName = trueName; if (phone) user.phone = phone; if (avatar) user.avatar = avatar;
-        await user.save();
-        if (user.role === 'STUDENT') await Student.findOneAndUpdate({ studentNo: user.studentNo }, { name: user.trueName || user.username, phone: user.phone });
-        res.json({ success: true, user });
-    } catch (e) { res.status(500).json({ error: e.message }); }
-});
-app.post('/api/auth/register', async (req, res) => {
-    const { role, username, password, schoolId, trueName, seatNo } = req.body;
-    const className = req.body.className || req.body.homeroomClass; 
-    try {
-        if (role === 'STUDENT') {
-            if (!trueName || !className) return res.status(400).json({ error: 'MISSING_FIELDS', message: '姓名和班级不能为空' });
-            const cleanName = trueName.trim(); const cleanClass = className.trim();
-            const existingProfile = await Student.findOne({ schoolId, name: { $regex: new RegExp(`^${cleanName}$`, 'i') }, className: cleanClass });
-            let finalUsername = '';
-            if (existingProfile) {
-                if (existingProfile.studentNo && existingProfile.studentNo.length > 5) finalUsername = existingProfile.studentNo;
-                else { finalUsername = await generateStudentNo(); existingProfile.studentNo = finalUsername; await existingProfile.save(); }
-                const userExists = await User.findOne({ username: finalUsername, schoolId });
-                if (userExists) return res.status(409).json({ error: userExists.status === 'active' ? 'ACCOUNT_EXISTS' : 'ACCOUNT_PENDING', message: '账号已存在' });
-            } else finalUsername = await generateStudentNo();
-            await User.create({ username: finalUsername, password, role: 'STUDENT', trueName: cleanName, schoolId, status: 'pending', homeroomClass: cleanClass, studentNo: finalUsername, seatNo: seatNo || '', parentName: req.body.parentName, parentPhone: req.body.parentPhone, address: req.body.address, idCard: req.body.idCard, gender: req.body.gender || 'Male', createTime: new Date() });
-            return res.json({ username: finalUsername });
-        } 
-        const existing = await User.findOne({ username });
-        if (existing) return res.status(409).json({ error: 'USERNAME_EXISTS', message: '用户名已存在' });
-        await User.create({...req.body, status: 'pending', createTime: new Date()});
-        res.json({ username });
-    } catch(e) { res.status(500).json({ error: e.message }); }
-});
-app.get('/api/users', async (req, res) => {
-    const filter = getQueryFilter(req);
-    if (req.headers['x-user-role'] === 'PRINCIPAL') filter.role = { $ne: 'ADMIN' };
-    if (req.query.role) filter.role = req.query.role;
-    res.json(await User.find(filter).sort({ createTime: -1 })); 
-});
-app.put('/api/users/:id', async (req, res) => {
-    const userId = req.params.id; const updates = req.body;
-    try {
-        const user = await User.findById(userId);
-        if (!user) return res.status(404).json({ error: 'User not found' });
-        if (user.status !== 'active' && updates.status === 'active' && user.role === 'STUDENT') {
-            await Student.findOneAndUpdate({ studentNo: user.studentNo, schoolId: user.schoolId }, { $set: { schoolId: user.schoolId, studentNo: user.studentNo, seatNo: user.seatNo, name: user.trueName, className: user.homeroomClass, gender: user.gender || 'Male', parentName: user.parentName, parentPhone: user.parentPhone, address: user.address, idCard: user.idCard, status: 'Enrolled', birthday: '2015-01-01' } }, { upsert: true, new: true });
-        }
-        await User.findByIdAndUpdate(userId, updates);
-        res.json({});
-    } catch (e) { res.status(500).json({ error: e.message }); }
-});
-app.post('/api/users/class-application', async (req, res) => {
-    const { userId, type, targetClass, action } = req.body; 
-    const userRole = req.headers['x-user-role']; const schoolId = req.headers['x-school-id'];
-    if (action === 'APPLY') { try { const user = await User.findById(userId); if(!user) return res.status(404).json({error:'User not found'}); await User.findByIdAndUpdate(userId, { classApplication: { type: type, targetClass: targetClass || '', status: 'PENDING' } }); await NotificationModel.create({ schoolId, targetRole: 'ADMIN', title: '新的班主任任免申请', content: `${user.trueName || user.username} 申请 ${type === 'CLAIM' ? '任教' : '卸任'}，请及时处理。`, type: 'warning' }); return res.json({ success: true }); } catch (e) { return res.status(500).json({ error: e.message }); } }
-    if (userRole === 'ADMIN' || userRole === 'PRINCIPAL') {
-        const user = await User.findById(userId);
-        if (!user || !user.classApplication) return res.status(404).json({ error: 'Application not found' });
-        const appType = user.classApplication.type; const appTarget = user.classApplication.targetClass;
-        if (action === 'APPROVE') {
-            const updates = { classApplication: null }; const classes = await ClassModel.find({ schoolId });
-            if (appType === 'CLAIM') { updates.homeroomClass = appTarget; const matchedClass = classes.find(c => (c.grade + c.className) === appTarget); if (matchedClass) { const teacherIds = matchedClass.homeroomTeacherIds || []; if (!teacherIds.includes(userId)) { teacherIds.push(userId); const teachers = await User.find({ _id: { $in: teacherIds } }); const names = teachers.map(t => t.trueName || t.username).join(', '); await ClassModel.findByIdAndUpdate(matchedClass._id, { homeroomTeacherIds: teacherIds, teacherName: names }); } } } else if (appType === 'RESIGN') { updates.homeroomClass = ''; const matchedClass = classes.find(c => (c.grade + c.className) === user.homeroomClass); if (matchedClass) { const teacherIds = (matchedClass.homeroomTeacherIds || []).filter(id => id !== userId); const teachers = await User.find({ _id: { $in: teacherIds } }); const names = teachers.map(t => t.trueName || t.username).join(', '); await ClassModel.findByIdAndUpdate(matchedClass._id, { homeroomTeacherIds: teacherIds, teacherName: names }); } }
-            await User.findByIdAndUpdate(userId, updates);
-        } else await User.findByIdAndUpdate(userId, { 'classApplication.status': 'REJECTED' });
-        return res.json({ success: true });
-    }
-    res.status(403).json({ error: 'Permission denied' });
-});
-app.post('/api/students/promote', async (req, res) => {
-    const { teacherFollows } = req.body; const sId = req.headers['x-school-id'];
-    const GRADE_MAP = { '一年级': '二年级', '二年级': '三年级', '三年级': '四年级', '四年级': '五年级', '五年级': '六年级', '六年级': '毕业', '初一': '初二', '七年级': '八年级', '初二': '初三', '八年级': '九年级', '初三': '毕业', '九年级': '毕业', '高一': '高二', '高二': '高三', '高三': '毕业' };
-    const classes = await ClassModel.find(getQueryFilter(req)); let promotedCount = 0;
-    for (const cls of classes) {
-        const currentGrade = cls.grade; const nextGrade = GRADE_MAP[currentGrade] || currentGrade; const suffix = cls.className; 
-        if (nextGrade === '毕业') { const oldFullClass = cls.grade + cls.className; await Student.updateMany({ className: oldFullClass, ...getQueryFilter(req) }, { status: 'Graduated', className: '已毕业' }); if (teacherFollows && cls.homeroomTeacherIds?.length) { await User.updateMany({ _id: { $in: cls.homeroomTeacherIds }, schoolId: sId }, { homeroomClass: '' }); await ClassModel.findByIdAndUpdate(cls._id, { teacherName: '', homeroomTeacherIds: [] }); } } else { const oldFullClass = cls.grade + cls.className; const newFullClass = nextGrade + suffix; await ClassModel.findOneAndUpdate({ grade: nextGrade, className: suffix, schoolId: sId }, { schoolId: sId, grade: nextGrade, className: suffix, teacherName: teacherFollows ? cls.teacherName : undefined, homeroomTeacherIds: teacherFollows ? cls.homeroomTeacherIds : [] }, { upsert: true }); const result = await Student.updateMany({ className: oldFullClass, status: 'Enrolled', ...getQueryFilter(req) }, { className: newFullClass }); promotedCount += result.modifiedCount; if (teacherFollows && cls.homeroomTeacherIds?.length) { await User.updateMany({ _id: { $in: cls.homeroomTeacherIds }, schoolId: sId, homeroomClass: oldFullClass }, { homeroomClass: newFullClass }); await ClassModel.findByIdAndUpdate(cls._id, { teacherName: '', homeroomTeacherIds: [] }); } }
-    }
-    res.json({ success: true, count: promotedCount });
-});
-app.post('/api/games/lucky-config', async (req, res) => { const data = injectSchoolId(req, req.body); if (req.headers['x-user-role'] === 'TEACHER') { const user = await User.findOne({ username: req.headers['x-user-username'] }); data.ownerId = user ? user._id.toString() : null; } await LuckyDrawConfigModel.findOneAndUpdate({ className: data.className, ...getQueryFilter(req), ownerId: data.ownerId }, data, { upsert: true }); res.json({ success: true }); });
-app.post('/api/games/lucky-draw', async (req, res) => { const { studentId } = req.body; const schoolId = req.headers['x-school-id']; const userRole = req.headers['x-user-role']; try { const student = await Student.findById(studentId); if (!student) return res.status(404).json({ error: 'Student not found' }); let configFilter = { className: student.className, schoolId }; if (userRole === 'TEACHER') { const user = await User.findOne({ username: req.headers['x-user-username'] }); configFilter.ownerId = user ? user._id.toString() : null; } const config = await LuckyDrawConfigModel.findOne(configFilter); const prizes = config?.prizes || []; const defaultPrize = config?.defaultPrize || '再接再厉'; const dailyLimit = config?.dailyLimit || 3; const consolationWeight = config?.consolationWeight || 0; const availablePrizes = prizes.filter(p => (p.count === undefined || p.count > 0)); if (availablePrizes.length === 0 && consolationWeight === 0) return res.status(400).json({ error: 'POOL_EMPTY', message: '奖品库存不足' }); if (userRole === 'STUDENT') { if (student.drawAttempts <= 0) return res.status(403).json({ error: '次数不足', message: '您的抽奖次数已用完' }); const today = new Date().toISOString().split('T')[0]; let dailyLog = student.dailyDrawLog || { date: today, count: 0 }; if (dailyLog.date !== today) dailyLog = { date: today, count: 0 }; if (dailyLog.count >= dailyLimit) return res.status(403).json({ error: 'DAILY_LIMIT_REACHED', message: `今日抽奖次数已达上限 (${dailyLimit}次)` }); dailyLog.count += 1; student.drawAttempts -= 1; student.dailyDrawLog = dailyLog; await student.save(); } else { if (student.drawAttempts <= 0) return res.status(403).json({ error: '次数不足', message: '该学生抽奖次数已用完' }); student.drawAttempts -= 1; await student.save(); } let totalWeight = consolationWeight; availablePrizes.forEach(p => totalWeight += (p.probability || 0)); let random = Math.random() * totalWeight; let selectedPrize = defaultPrize; let rewardType = 'CONSOLATION'; let matchedPrize = null; for (const p of availablePrizes) { random -= (p.probability || 0); if (random <= 0) { matchedPrize = p; break; } } if (matchedPrize) { selectedPrize = matchedPrize.name; rewardType = 'ITEM'; if (config._id) await LuckyDrawConfigModel.updateOne({ _id: config._id, "prizes.id": matchedPrize.id }, { $inc: { "prizes.$.count": -1 } }); } let ownerId = config?.ownerId; await StudentRewardModel.create({ schoolId, studentId, studentName: student.name, rewardType, name: selectedPrize, count: 1, status: 'PENDING', source: '幸运大抽奖', ownerId }); res.json({ prize: selectedPrize, rewardType }); } catch (e) { res.status(500).json({ error: e.message }); } });
-app.get('/api/games/monster-config', async (req, res) => { const filter = getQueryFilter(req); const ownerFilter = await getGameOwnerFilter(req); if (req.query.className) filter.className = req.query.className; Object.assign(filter, ownerFilter); const config = await GameMonsterConfigModel.findOne(filter); res.json(config || {}); });
-app.post('/api/games/monster-config', async (req, res) => { const data = injectSchoolId(req, req.body); if (req.headers['x-user-role'] === 'TEACHER') { const user = await User.findOne({ username: req.headers['x-user-username'] }); data.ownerId = user ? user._id.toString() : null; } await GameMonsterConfigModel.findOneAndUpdate({ className: data.className, ...getQueryFilter(req), ownerId: data.ownerId }, data, { upsert: true }); res.json({ success: true }); });
-app.get('/api/games/zen-config', async (req, res) => { const filter = getQueryFilter(req); const ownerFilter = await getGameOwnerFilter(req); if (req.query.className) filter.className = req.query.className; Object.assign(filter, ownerFilter); const config = await GameZenConfigModel.findOne(filter); res.json(config || {}); });
-app.post('/api/games/zen-config', async (req, res) => { const data = injectSchoolId(req, req.body); if (req.headers['x-user-role'] === 'TEACHER') { const user = await User.findOne({ username: req.headers['x-user-username'] }); data.ownerId = user ? user._id.toString() : null; } await GameZenConfigModel.findOneAndUpdate({ className: data.className, ...getQueryFilter(req), ownerId: data.ownerId }, data, { upsert: true }); res.json({ success: true }); });
-app.get('/api/games/mountain', async (req, res) => { res.json(await GameSessionModel.findOne({...getQueryFilter(req), className: req.query.className})); });
-app.post('/api/games/mountain', async (req, res) => { const { className } = req.body; const sId = req.headers['x-school-id']; const role = req.headers['x-user-role']; const username = req.headers['x-user-username']; if (role === 'TEACHER') { const user = await User.findOne({ username }); const cls = await ClassModel.findOne({ schoolId: sId, $expr: { $eq: [{ $concat: ["$grade", "$className"] }, className] } }); if (!cls) return res.status(404).json({ error: 'Class not found' }); const allowedIds = cls.homeroomTeacherIds || []; if (!allowedIds.includes(user._id.toString())) return res.status(403).json({ error: 'PERMISSION_DENIED', message: '只有班主任可以操作登峰游戏' }); } await GameSessionModel.findOneAndUpdate({ className, ...getQueryFilter(req) }, injectSchoolId(req, req.body), {upsert:true}); res.json({}); });
-app.get('/api/rewards', async (req, res) => { const filter = getQueryFilter(req); if (req.headers['x-user-role'] === 'TEACHER') { const user = await User.findOne({ username: req.headers['x-user-username'] }); if (user) filter.ownerId = user._id.toString(); } if(req.query.studentId) filter.studentId = req.query.studentId; if (req.query.className) { const classStudents = await Student.find({ className: req.query.className, ...getQueryFilter(req) }, '_id'); filter.studentId = { $in: classStudents.map(s => s._id.toString()) }; } if (req.query.excludeType) filter.rewardType = { $ne: req.query.excludeType }; const page = parseInt(req.query.page) || 1; const limit = parseInt(req.query.limit) || 20; const skip = (page - 1) * limit; const total = await StudentRewardModel.countDocuments(filter); const list = await StudentRewardModel.find(filter).sort({createTime:-1}).skip(skip).limit(limit); res.json({ list, total }); });
-app.post('/api/rewards', async (req, res) => { const data = injectSchoolId(req, req.body); if (!data.count) data.count = 1; if (req.headers['x-user-role'] === 'TEACHER') { const user = await User.findOne({ username: req.headers['x-user-username'] }); data.ownerId = user ? user._id.toString() : null; } if(data.rewardType==='DRAW_COUNT') { data.status='REDEEMED'; await Student.findByIdAndUpdate(data.studentId, {$inc:{drawAttempts:data.count}}); } await StudentRewardModel.create(data); res.json({}); });
-app.post('/api/games/grant-reward', async (req, res) => { const { studentId, count, rewardType, name } = req.body; const finalCount = count || 1; const finalName = name || (rewardType === 'DRAW_COUNT' ? '抽奖券' : '奖品'); let ownerId = null; if (req.headers['x-user-role'] === 'TEACHER') { const user = await User.findOne({ username: req.headers['x-user-username'] }); ownerId = user ? user._id.toString() : null; } if (rewardType === 'DRAW_COUNT') await Student.findByIdAndUpdate(studentId, { $inc: { drawAttempts: finalCount } }); await StudentRewardModel.create({ schoolId: req.headers['x-school-id'], studentId, studentName: (await Student.findById(studentId)).name, rewardType, name: finalName, count: finalCount, status: rewardType === 'DRAW_COUNT' ? 'REDEEMED' : 'PENDING', source: '教师发放', ownerId }); res.json({}); });
-app.put('/api/classes/:id', async (req, res) => { 
-    const classId = req.params.id; 
-    const { grade, className, teacherName, homeroomTeacherIds, periodConfig } = req.body; 
-    const sId = req.headers['x-school-id']; 
-    const oldClass = await ClassModel.findById(classId); 
-    if (!oldClass) return res.status(404).json({ error: 'Class not found' }); 
-    const newFullClass = grade + className; 
-    const oldFullClass = oldClass.grade + oldClass.className; 
-    const oldTeacherIds = oldClass.homeroomTeacherIds || []; 
-    const newTeacherIds = homeroomTeacherIds || []; 
-    const removedIds = oldTeacherIds.filter(id => !newTeacherIds.includes(id)); 
-    if (removedIds.length > 0) await User.updateMany({ _id: { $in: removedIds }, schoolId: sId }, { homeroomClass: '' }); 
-    if (newTeacherIds.length > 0) await User.updateMany({ _id: { $in: newTeacherIds }, schoolId: sId }, { homeroomClass: newFullClass }); 
-    let displayTeacherName = teacherName; 
-    if (newTeacherIds.length > 0) { 
-        const teachers = await User.find({ _id: { $in: newTeacherIds } }); 
-        displayTeacherName = teachers.map(t => t.trueName || t.username).join(', '); 
-    } 
-    
-    // FIX: Explicitly update periodConfig if present in the body
-    const updatePayload = { grade, className, teacherName: displayTeacherName, homeroomTeacherIds: newTeacherIds };
-    if (periodConfig) updatePayload.periodConfig = periodConfig;
-
-    await ClassModel.findByIdAndUpdate(classId, updatePayload); 
-    
-    if (oldFullClass !== newFullClass) { 
-        await Student.updateMany({ className: oldFullClass, schoolId: sId }, { className: newFullClass }); 
-        await User.updateMany({ homeroomClass: oldFullClass, schoolId: sId }, { homeroomClass: newFullClass }); 
-    } 
-    res.json({ success: true }); 
-});
-app.post('/api/classes', async (req, res) => { const data = injectSchoolId(req, req.body); const { homeroomTeacherIds } = req.body; if (homeroomTeacherIds && homeroomTeacherIds.length > 0) { const teachers = await User.find({ _id: { $in: homeroomTeacherIds } }); data.teacherName = teachers.map(t => t.trueName || t.username).join(', '); } await ClassModel.create(data); if (homeroomTeacherIds && homeroomTeacherIds.length > 0) await User.updateMany({ _id: { $in: homeroomTeacherIds }, schoolId: data.schoolId }, { homeroomClass: data.grade + data.className }); res.json({}); });
-app.get('/api/courses', async (req, res) => { const filter = getQueryFilter(req); if (req.query.teacherId) filter.teacherId = req.query.teacherId; res.json(await Course.find(filter)); });
-app.post('/api/courses', async (req, res) => { const data = injectSchoolId(req, req.body); try { await Course.create(data); res.json({}); } catch(e) { if (e.code === 11000) return res.status(409).json({ error: 'DUPLICATE', message: '该班级该科目已有任课老师' }); res.status(500).json({ error: e.message }); } });
-app.get('/api/public/schools', async (req, res) => { res.json(await School.find({}, 'name code _id')); });
-app.get('/api/public/config', async (req, res) => { const currentSem = getAutoSemester(); let config = await ConfigModel.findOne({ key: 'main' }); if (config) { let semesters = config.semesters || []; if (!semesters.includes(currentSem)) { semesters.unshift(currentSem); config.semesters = semesters; config.semester = currentSem; await ConfigModel.updateOne({ key: 'main' }, { semesters, semester: currentSem }); } } else { config = { key: 'main', allowRegister: true, semester: currentSem, semesters: [currentSem] }; } res.json(config); });
-app.get('/api/public/meta', async (req, res) => { res.json({ classes: await ClassModel.find({ schoolId: req.query.schoolId }), subjects: await SubjectModel.find({ schoolId: req.query.schoolId }) }); });
-app.post('/api/auth/login', async (req, res) => { const { username, password } = req.body; const user = await User.findOne({ username, password }); if (!user) return res.status(401).json({ message: 'Error' }); if (user.status !== 'active') return res.status(403).json({ error: 'PENDING_APPROVAL' }); res.json(user); });
-app.get('/api/schools', async (req, res) => { res.json(await School.find()); });
-app.post('/api/schools', async (req, res) => { res.json(await School.create(req.body)); });
-app.put('/api/schools/:id', async (req, res) => { await School.findByIdAndUpdate(req.params.id, req.body); res.json({}); });
-app.delete('/api/schools/:id', async (req, res) => { const schoolId = req.params.id; try { await School.findByIdAndDelete(schoolId); await User.deleteMany({ schoolId }); await Student.deleteMany({ schoolId }); await ClassModel.deleteMany({ schoolId }); await SubjectModel.deleteMany({ schoolId }); await Course.deleteMany({ schoolId }); await Score.deleteMany({ schoolId }); await ExamModel.deleteMany({ schoolId }); await ScheduleModel.deleteMany({ schoolId }); await NotificationModel.deleteMany({ schoolId }); await AttendanceModel.deleteMany({ schoolId }); await LeaveRequestModel.deleteMany({ schoolId }); await GameSessionModel.deleteMany({ schoolId }); await StudentRewardModel.deleteMany({ schoolId }); await LuckyDrawConfigModel.deleteMany({ schoolId }); await GameMonsterConfigModel.deleteMany({ schoolId }); await GameZenConfigModel.deleteMany({ schoolId }); await AchievementConfigModel.deleteMany({ schoolId }); await StudentAchievementModel.deleteMany({ schoolId }); await SchoolCalendarModel.deleteMany({ schoolId }); await WishModel.deleteMany({ schoolId }); await FeedbackModel.deleteMany({ schoolId }); await TodoModel.deleteMany({}); res.json({ success: true }); } catch (e) { res.status(500).json({ error: e.message }); } });
-app.delete('/api/users/:id', async (req, res) => { const requesterRole = req.headers['x-user-role']; if (requesterRole === 'PRINCIPAL') { const user = await User.findById(req.params.id); if (!user || user.schoolId !== req.headers['x-school-id']) return res.status(403).json({error: 'Permission denied'}); if (user.role === 'ADMIN') return res.status(403).json({error: 'Cannot delete admin'}); } await User.findByIdAndDelete(req.params.id); res.json({}); });
-app.get('/api/students', async (req, res) => { res.json(await Student.find(getQueryFilter(req))); });
-app.post('/api/students', async (req, res) => { const data = injectSchoolId(req, req.body); if (data.studentNo === '') delete data.studentNo; try { const existing = await Student.findOne({ schoolId: data.schoolId, name: data.name, className: data.className }); if (existing) { Object.assign(existing, data); if (!existing.studentNo) { existing.studentNo = await generateStudentNo(); } await existing.save(); } else { if (!data.studentNo) { data.studentNo = await generateStudentNo(); } await Student.create(data); } res.json({ success: true }); } catch (e) { if (e.code === 11000) return res.status(409).json({ error: 'DUPLICATE', message: '保存失败：存在重复的系统ID' }); res.status(500).json({ error: e.message }); } });
-app.put('/api/students/:id', async (req, res) => { await Student.findByIdAndUpdate(req.params.id, req.body); res.json({}); });
-app.delete('/api/students/:id', async (req, res) => { await Student.findByIdAndDelete(req.params.id); res.json({}); });
-app.get('/api/classes', async (req, res) => { const filter = getQueryFilter(req); const cls = await ClassModel.find(filter); const resData = await Promise.all(cls.map(async c => { const count = await Student.countDocuments({ className: c.grade + c.className, status: 'Enrolled', ...filter }); return { ...c.toObject(), studentCount: count }; })); res.json(resData); });
-app.delete('/api/classes/:id', async (req, res) => { const cls = await ClassModel.findById(req.params.id); if (cls && cls.homeroomTeacherIds) await User.updateMany({ _id: { $in: cls.homeroomTeacherIds }, schoolId: cls.schoolId }, { homeroomClass: '' }); await ClassModel.findByIdAndDelete(req.params.id); res.json({}); });
-app.get('/api/subjects', async (req, res) => { res.json(await SubjectModel.find(getQueryFilter(req))); });
-app.post('/api/subjects', async (req, res) => { await SubjectModel.create(injectSchoolId(req, req.body)); res.json({}); });
-app.put('/api/subjects/:id', async (req, res) => { await SubjectModel.findByIdAndUpdate(req.params.id, req.body); res.json({}); });
-app.delete('/api/subjects/:id', async (req, res) => { await SubjectModel.findByIdAndDelete(req.params.id); res.json({}); });
-app.put('/api/courses/:id', async (req, res) => { await Course.findByIdAndUpdate(req.params.id, req.body); res.json({}); });
-app.delete('/api/courses/:id', async (req, res) => { await Course.findByIdAndDelete(req.params.id); res.json({}); });
-app.get('/api/scores', async (req, res) => { res.json(await Score.find(getQueryFilter(req))); });
-app.post('/api/scores', async (req, res) => { await Score.create(injectSchoolId(req, req.body)); res.json({}); });
-app.put('/api/scores/:id', async (req, res) => { await Score.findByIdAndUpdate(req.params.id, req.body); res.json({}); });
-app.delete('/api/scores/:id', async (req, res) => { await Score.findByIdAndDelete(req.params.id); res.json({}); });
-app.get('/api/exams', async (req, res) => { res.json(await ExamModel.find(getQueryFilter(req))); });
-app.post('/api/exams', async (req, res) => { await ExamModel.findOneAndUpdate({name:req.body.name}, injectSchoolId(req, req.body), {upsert:true}); res.json({}); });
-app.get('/api/stats', async (req, res) => { const filter = getQueryFilter(req); const studentCount = await Student.countDocuments(filter); const courseCount = await Course.countDocuments(filter); const scores = await Score.find({...filter, status: 'Normal'}); let avgScore = 0; let excellentRate = '0%'; if (scores.length > 0) { const total = scores.reduce((sum, s) => sum + s.score, 0); avgScore = parseFloat((total / scores.length).toFixed(1)); const excellent = scores.filter(s => s.score >= 90).length; excellentRate = Math.round((excellent / scores.length) * 100) + '%'; } res.json({ studentCount, courseCount, avgScore, excellentRate }); });
-app.get('/api/config', async (req, res) => { const currentSem = getAutoSemester(); let config = await ConfigModel.findOne({key:'main'}); if (config) { let semesters = config.semesters || []; if (!semesters.includes(currentSem)) { semesters.unshift(currentSem); config.semesters = semesters; config.semester = currentSem; await ConfigModel.updateOne({ key: 'main' }, { semesters, semester: currentSem }); } } else { config = { key: 'main', allowRegister: true, semester: currentSem, semesters: [currentSem] }; } res.json(config); });
-app.post('/api/config', async (req, res) => { await ConfigModel.findOneAndUpdate({key:'main'}, req.body, {upsert:true}); res.json({}); });
-app.put('/api/rewards/:id', async (req, res) => { await StudentRewardModel.findByIdAndUpdate(req.params.id, req.body); res.json({}); });
-app.delete('/api/rewards/:id', async (req, res) => { const reward = await StudentRewardModel.findById(req.params.id); if (!reward) return res.status(404).json({error: 'Not found'}); if (reward.rewardType === 'DRAW_COUNT') { const student = await Student.findById(reward.studentId); if (student && student.drawAttempts < reward.count) return res.status(400).json({ error: 'FAILED_REVOKE', message: '修改失败，次数已被使用' }); await Student.findByIdAndUpdate(reward.studentId, { $inc: { drawAttempts: -reward.count } }); } await StudentRewardModel.findByIdAndDelete(req.params.id); res.json({}); });
-app.post('/api/rewards/:id/redeem', async (req, res) => { await StudentRewardModel.findByIdAndUpdate(req.params.id, {status:'REDEEMED'}); res.json({}); });
-app.get('/api/attendance', async (req, res) => { const { className, date, studentId } = req.query; const filter = getQueryFilter(req); if(className) filter.className = className; if(date) filter.date = date; if(studentId) filter.studentId = studentId; res.json(await AttendanceModel.find(filter)); });
-app.post('/api/attendance/check-in', async (req, res) => { const { studentId, date, status } = req.body; const exists = await AttendanceModel.findOne({ studentId, date }); if (exists) return res.status(400).json({ error: 'ALREADY_CHECKED_IN', message: '今日已打卡' }); const student = await Student.findById(studentId); await AttendanceModel.create({ schoolId: req.headers['x-school-id'], studentId, studentName: student.name, className: student.className, date, status: status || 'Present', checkInTime: new Date() }); res.json({ success: true }); });
-app.post('/api/attendance/batch', async (req, res) => { const { className, date, status } = req.body; const students = await Student.find({ className, ...getQueryFilter(req) }); const ops = students.map(s => ({ updateOne: { filter: { studentId: s._id, date }, update: { $setOnInsert: { schoolId: req.headers['x-school-id'], studentId: s._id, studentName: s.name, className: s.className, date, status: status || 'Present', checkInTime: new Date() } }, upsert: true } })); if (ops.length > 0) await AttendanceModel.bulkWrite(ops); res.json({ success: true, count: ops.length }); });
-app.put('/api/attendance/update', async (req, res) => { const { studentId, date, status } = req.body; const student = await Student.findById(studentId); await AttendanceModel.findOneAndUpdate({ studentId, date }, { schoolId: req.headers['x-school-id'], studentId, studentName: student.name, className: student.className, date, status, checkInTime: new Date() }, { upsert: true }); res.json({ success: true }); });
-app.post('/api/leave', async (req, res) => { await LeaveRequestModel.create(injectSchoolId(req, req.body)); const { studentId, startDate } = req.body; const student = await Student.findById(studentId); if (student) await AttendanceModel.findOneAndUpdate({ studentId, date: startDate }, { schoolId: req.headers['x-school-id'], studentId, studentName: student.name, className: student.className, date: startDate, status: 'Leave', checkInTime: new Date() }, { upsert: true }); res.json({ success: true }); });
-app.get('/api/attendance/calendar', async (req, res) => { const { className } = req.query; const filter = getQueryFilter(req); const query = { $and: [ filter, { $or: [{ className: { $exists: false } }, { className: null }, { className }] } ] }; res.json(await SchoolCalendarModel.find(query)); });
-app.post('/api/attendance/calendar', async (req, res) => { await SchoolCalendarModel.create(injectSchoolId(req, req.body)); res.json({ success: true }); });
-app.delete('/api/attendance/calendar/:id', async (req, res) => { await SchoolCalendarModel.findByIdAndDelete(req.params.id); res.json({}); });
-app.post('/api/batch-delete', async (req, res) => { if(req.body.type==='student') await Student.deleteMany({_id:{$in:req.body.ids}}); if(req.body.type==='score') await Score.deleteMany({_id:{$in:req.body.ids}}); res.json({}); });
-
-app.get('*', (req, res) => { res.sendFile(path.join(__dirname, 'dist', 'index.html')); });
-app.listen(PORT, () => console.log(`🚀 Server running on port ${PORT}`));
+module.exports = router;
+// ... existing code ...

services/api.ts

@@ -1,284 +1,227 @@
-
-// ... existing imports
-import { User, ClassInfo, SystemConfig, Subject, School, Schedule, GameSession, StudentReward, LuckyDrawConfig, Attendance, LeaveRequest, AchievementConfig, SchoolCalendarEntry, TeacherExchangeConfig, Wish, Feedback, AIChatMessage, Todo } from '../types';
-
-// ... existing getBaseUrl ...
-const getBaseUrl = () => {
-  let isProd = false;
-  try {
-    // @ts-ignore
-    if (typeof import.meta !== 'undefined' && import.meta.env && import.meta.env.PROD) {
-      isProd = true;
-    }
-  } catch (e) {}
-  
-  if (isProd || (typeof window !== 'undefined' && window.location.port === '7860')) {
-    return '/api';
+import { User } from '../types';
+
+const API_BASE = '/api';
+
+const request = async (endpoint: string, options?: RequestInit) => {
+  const token = localStorage.getItem('token');
+  const headers = {
+    'Content-Type': 'application/json',
+    ...(token ? { Authorization: `Bearer ${token}` } : {}),
+    ...options?.headers,
+  };
+
+  // Add school context header if available (for admin view)
+  const schoolId = localStorage.getItem('admin_view_school_id');
+  if (schoolId) {
+      // @ts-ignore
+      headers['x-school-id'] = schoolId;
   }
-  return 'http://localhost:7860/api';
-};
 
-const API_BASE_URL = getBaseUrl();
+  const response = await fetch(`${API_BASE}${endpoint}`, {
+    ...options,
+    headers,
+  });
 
-async function request(endpoint: string, options: RequestInit = {}) {
-  const headers: any = { 'Content-Type': 'application/json', ...options.headers };
-  
-  if (typeof window !== 'undefined') {
-    const currentUser = JSON.parse(localStorage.getItem('user') || 'null');
-    const selectedSchoolId = localStorage.getItem('admin_view_school_id');
-    
-    if (currentUser?.role === 'ADMIN' && selectedSchoolId) {
-      headers['x-school-id'] = selectedSchoolId;
-    } else if (currentUser?.schoolId) {
-      headers['x-school-id'] = currentUser.schoolId;
-    }
-    
-    if (currentUser?.role) {
-      headers['x-user-role'] = currentUser.role;
-      headers['x-user-username'] = currentUser.username;
-    }
+  if (response.status === 401) {
+    localStorage.removeItem('token');
+    localStorage.removeItem('user');
+    window.location.href = '/';
+    throw new Error('Unauthorized');
   }
 
-  const res = await fetch(`${API_BASE_URL}${endpoint}`, { ...options, headers });
-
-  if (!res.ok) {
-    if (res.status === 401) throw new Error('AUTH_FAILED');
-    const errorData = await res.json().catch(() => ({}));
-    const errorMessage = errorData.error || errorData.message || `Server Error: ${res.status}`;
-    if (errorData.error === 'PENDING_APPROVAL') throw new Error('PENDING_APPROVAL');
-    if (errorData.error === 'BANNED') throw new Error('BANNED');
-    if (errorData.error === 'CONFLICT') throw new Error(errorData.message); 
-    if (errorData.error === 'INVALID_PASSWORD') throw new Error('INVALID_PASSWORD');
-    throw new Error(errorMessage);
+  if (!response.ok) {
+    const errorData = await response.json().catch(() => ({}));
+    throw new Error(errorData.message || errorData.error || 'API Request Failed');
   }
-  return res.json();
-}
 
-export const api = {
-  init: () => console.log('🔗 API:', API_BASE_URL),
+  // Handle empty responses
+  const text = await response.text();
+  return text ? JSON.parse(text) : {};
+};
 
+export const api = {
+  init: () => {
+      // Any initialization logic if needed
+  },
   auth: {
-    login: async (username: string, password: string): Promise<User> => {
-      const user = await request('/auth/login', { method: 'POST', body: JSON.stringify({ username, password }) });
-      if (typeof window !== 'undefined') {
-        localStorage.setItem('user', JSON.stringify(user));
-        localStorage.removeItem('admin_view_school_id');
-      }
-      return user;
-    },
-    refreshSession: async (): Promise<User | null> => {
-        try {
-            const user = await request('/auth/me');
-            if (typeof window !== 'undefined' && user) {
-                localStorage.setItem('user', JSON.stringify(user));
-            }
-            return user;
-        } catch (e) { return null; }
-    },
-    register: async (data: any): Promise<User> => {
-      return await request('/auth/register', { method: 'POST', body: JSON.stringify(data) });
-    },
-    updateProfile: async (data: any): Promise<any> => {
-      return await request('/auth/update-profile', { method: 'POST', body: JSON.stringify(data) });
+    login: async (username: string, password?: string) => {
+      const res = await request('/auth/login', {
+        method: 'POST',
+        body: JSON.stringify({ username, password }),
+      });
+      localStorage.setItem('token', res.token);
+      localStorage.setItem('user', JSON.stringify(res.user));
+      return res.user;
     },
+    register: async (data: any) => request('/auth/register', { method: 'POST', body: JSON.stringify(data) }),
     logout: () => {
-      if (typeof window !== 'undefined') {
-        localStorage.removeItem('user');
-        localStorage.removeItem('admin_view_school_id');
-      }
+      localStorage.removeItem('token');
+      localStorage.removeItem('user');
+      window.location.reload();
     },
     getCurrentUser: (): User | null => {
-      if (typeof window !== 'undefined') {
+      const userStr = localStorage.getItem('user');
+      return userStr ? JSON.parse(userStr) : null;
+    },
+    refreshSession: async () => {
         try {
-          const stored = localStorage.getItem('user');
-          if (stored) return JSON.parse(stored);
-        } catch (e) {
-          localStorage.removeItem('user');
-        }
-      }
-      return null;
-    }
-  },
-
-  schools: {
-    getPublic: () => request('/public/schools'),
-    getAll: () => request('/schools'),
-    add: (data: School) => request('/schools', { method: 'POST', body: JSON.stringify(data) }),
-    update: (id: string, data: Partial<School>) => request(`/schools/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
-    delete: (id: string) => request(`/schools/${id}`, { method: 'DELETE' })
-  },
-
-  users: {
-    getAll: (options?: { global?: boolean; role?: string }) => {
-       const params = new URLSearchParams();
-       if (options?.global) params.append('global', 'true');
-       if (options?.role) params.append('role', options.role);
-       return request(`/users?${params.toString()}`);
+            const user = await request('/auth/me');
+            localStorage.setItem('user', JSON.stringify(user));
+            return user;
+        } catch (e) { return null; }
     },
-    update: (id: string, data: Partial<User>) => request(`/users/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
-    delete: (id: string) => request(`/users/${id}`, { method: 'DELETE' }),
-    applyClass: (data: { userId: string, type: 'CLAIM'|'RESIGN', targetClass?: string, action: 'APPLY'|'APPROVE'|'REJECT' }) => 
-        request('/users/class-application', { method: 'POST', body: JSON.stringify(data) }),
-    getTeachersForClass: (className: string) => request(`/classes/${encodeURIComponent(className)}/teachers`),
-    saveMenuOrder: (userId: string, order: string[]) => request(`/users/${userId}/menu-order`, { method: 'PUT', body: JSON.stringify({ menuOrder: order }) }), // NEW
+    updateProfile: (data: any) => request('/auth/profile', { method: 'PUT', body: JSON.stringify(data) }),
   },
-
   students: {
     getAll: () => request('/students'),
     add: (data: any) => request('/students', { method: 'POST', body: JSON.stringify(data) }),
     update: (id: string, data: any) => request(`/students/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
-    delete: (id: string | number) => request(`/students/${id}`, { method: 'DELETE' }),
+    delete: (id: string) => request(`/students/${id}`, { method: 'DELETE' }),
+    transfer: (data: { studentId: string, targetClass: string }) => request('/students/transfer', { method: 'POST', body: JSON.stringify(data) }),
     promote: (data: { teacherFollows: boolean }) => request('/students/promote', { method: 'POST', body: JSON.stringify(data) }),
-    transfer: (data: { studentId: string, targetClass: string }) => request('/students/transfer', { method: 'POST', body: JSON.stringify(data) })
   },
-
   classes: {
     getAll: () => request('/classes'),
-    add: (data: ClassInfo) => request('/classes', { method: 'POST', body: JSON.stringify(data) }),
-    delete: (id: string | number) => request(`/classes/${id}`, { method: 'DELETE' })
+    add: (data: any) => request('/classes', { method: 'POST', body: JSON.stringify(data) }),
+    delete: (id: string | number) => request(`/classes/${id}`, { method: 'DELETE' }),
   },
-
-  subjects: {
-    getAll: () => request('/subjects'),
-    add: (data: Subject) => request('/subjects', { method: 'POST', body: JSON.stringify(data) }),
-    update: (id: string | number, data: Partial<Subject>) => request(`/subjects/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
-    delete: (id: string | number) => request(`/subjects/${id}`, { method: 'DELETE' })
-  },
-
-  exams: {
-    getAll: () => request('/exams'),
-    save: (data: any) => request('/exams', { method: 'POST', body: JSON.stringify(data) })
-  },
-
   courses: {
     getAll: () => request('/courses'),
     add: (data: any) => request('/courses', { method: 'POST', body: JSON.stringify(data) }),
-    update: (id: string | number, data: any) => request(`/courses/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
-    delete: (id: string | number) => request(`/courses/${id}`, { method: 'DELETE' })
+    update: (id: string, data: any) => request(`/courses/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
+    delete: (id: string) => request(`/courses/${id}`, { method: 'DELETE' }),
   },
-
   scores: {
     getAll: () => request('/scores'),
     add: (data: any) => request('/scores', { method: 'POST', body: JSON.stringify(data) }),
-    update: (id: string | number, data: any) => request(`/scores/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
-    delete: (id: string | number) => request(`/scores/${id}`, { method: 'DELETE' })
+    update: (id: string, data: any) => request(`/scores/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
+    delete: (id: string) => request(`/scores/${id}`, { method: 'DELETE' }),
   },
-  
-  schedules: {
-    get: (params: { className?: string; teacherName?: string; grade?: string }) => {
-       const qs = new URLSearchParams(params as any).toString();
-       return request(`/schedules?${qs}`);
-    },
-    save: (data: Schedule) => request('/schedules', { method: 'POST', body: JSON.stringify(data) }),
-    delete: (params: { className: string; dayOfWeek: number; period: number }) => {
-       const qs = new URLSearchParams(params as any).toString();
-       return request(`/schedules?${qs}`, { method: 'DELETE' });
-    }
+  subjects: {
+    getAll: () => request('/subjects'),
+    add: (data: any) => request('/subjects', { method: 'POST', body: JSON.stringify(data) }),
+    update: (id: string, data: any) => request(`/subjects/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
+    delete: (id: string) => request(`/subjects/${id}`, { method: 'DELETE' }),
   },
-
-  attendance: {
-    checkIn: (data: { studentId: string, date: string, status?: string }) => request('/attendance/check-in', { method: 'POST', body: JSON.stringify(data) }),
-    get: (params: { className?: string, date?: string, studentId?: string }) => {
-        const qs = new URLSearchParams(params as any).toString();
-        return request(`/attendance?${qs}`);
+  users: {
+    getAll: (params?: any) => {
+        const qs = new URLSearchParams(params).toString();
+        return request(`/users?${qs}`);
     },
-    batch: (data: { className: string, date: string, status?: string }) => request('/attendance/batch', { method: 'POST', body: JSON.stringify(data) }),
-    update: (data: { studentId: string, date: string, status: string }) => request('/attendance/update', { method: 'PUT', body: JSON.stringify(data) }),
-    applyLeave: (data: { studentId: string, studentName: string, className: string, reason: string, startDate: string, endDate: string }) => request('/leave', { method: 'POST', body: JSON.stringify(data) }),
+    saveMenuOrder: (userId: string, order: string[]) => request(`/users/${userId}/menu`, { method: 'PUT', body: JSON.stringify({ menuOrder: order }) }),
+    applyClass: (data: any) => request('/users/apply-class', { method: 'POST', body: JSON.stringify(data) }),
+    getTeachersForClass: (className: string) => request(`/users/teachers?className=${encodeURIComponent(className)}`),
+    update: (id: string, data: any) => request(`/users/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
+    delete: (id: string) => request(`/users/${id}`, { method: 'DELETE' }),
   },
-  
-  calendar: {
-      get: (className: string) => request(`/attendance/calendar?className=${className}`),
-      add: (data: SchoolCalendarEntry) => request('/attendance/calendar', { method: 'POST', body: JSON.stringify(data) }),
-      delete: (id: string) => request(`/attendance/calendar/${id}`, { method: 'DELETE' })
+  schools: {
+    getAll: () => request('/schools'),
+    getPublic: () => request('/public/schools'),
+    add: (data: any) => request('/schools', { method: 'POST', body: JSON.stringify(data) }),
+    update: (id: string, data: any) => request(`/schools/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
+    delete: (id: string) => request(`/schools/${id}`, { method: 'DELETE' }),
+  },
+  notifications: {
+    getAll: (userId: string, role: string) => request(`/notifications?userId=${userId}&role=${role}`),
   },
-
   stats: {
-    getSummary: () => request('/stats')
+    getSummary: () => request('/stats/summary'),
   },
-
   config: {
-    get: () => request('/config'), 
+    get: () => request('/config'),
     getPublic: () => request('/public/config'),
-    save: (data: SystemConfig) => request('/config', { method: 'POST', body: JSON.stringify(data) })
+    save: (data: any) => request('/config', { method: 'POST', body: JSON.stringify(data) }),
   },
-  
-  notifications: {
-    getAll: (userId: string, role: string) => request(`/notifications?userId=${userId}&role=${role}`),
+  exams: {
+    getAll: () => request('/exams'),
+    save: (data: any) => request('/exams', { method: 'POST', body: JSON.stringify(data) }),
   },
-
-  games: {
-    getMountainSession: (className: string) => request(`/games/mountain?className=${className}`),
-    saveMountainSession: (data: GameSession) => request('/games/mountain', { method: 'POST', body: JSON.stringify(data) }),
-    getLuckyConfig: (className?: string, ownerId?: string) => request(`/games/lucky-config?className=${className || ''}${ownerId ? `&ownerId=${ownerId}` : ''}`),
-    saveLuckyConfig: (data: LuckyDrawConfig) => request('/games/lucky-config', { method: 'POST', body: JSON.stringify(data) }),
-    drawLucky: (studentId: string) => request('/games/lucky-draw', { method: 'POST', body: JSON.stringify({ studentId }) }),
-    grantReward: (data: { studentId: string, count: number, rewardType: string, name?: string }) => request('/games/grant-reward', { method: 'POST', body: JSON.stringify(data) }),
-    getMonsterConfig: (className: string) => request(`/games/monster-config?className=${className}`),
-    saveMonsterConfig: (data: any) => request('/games/monster-config', { method: 'POST', body: JSON.stringify(data) }),
-    getZenConfig: (className: string) => request(`/games/zen-config?className=${className}`),
-    saveZenConfig: (data: any) => request('/games/zen-config', { method: 'POST', body: JSON.stringify(data) }),
+  schedules: {
+    get: (params: any) => {
+        const qs = new URLSearchParams(params).toString();
+        return request(`/schedules?${qs}`);
+    },
+    save: (data: any) => request('/schedules', { method: 'POST', body: JSON.stringify(data) }),
+    delete: (params: any) => {
+        const qs = new URLSearchParams(params).toString();
+        return request(`/schedules?${qs}`, { method: 'DELETE' });
+    }
   },
-  
-  achievements: {
-      getConfig: (className: string) => request(`/achievements/config?className=${className}`),
-      saveConfig: (data: AchievementConfig) => request('/achievements/config', { method: 'POST', body: JSON.stringify(data) }),
-      getStudentAchievements: (studentId: string, semester?: string) => request(`/achievements/student?studentId=${studentId}${semester ? `&semester=${semester}` : ''}`),
-      grant: (data: { studentId: string, achievementId: string, semester: string }) => request('/achievements/grant', { method: 'POST', body: JSON.stringify(data) }),
-      exchange: (data: { studentId: string, ruleId: string, teacherId?: string }) => request('/achievements/exchange', { method: 'POST', body: JSON.stringify(data) }),
-      getMyRules: () => request('/achievements/teacher-rules'),
-      saveMyRules: (data: TeacherExchangeConfig) => request('/achievements/teacher-rules', { method: 'POST', body: JSON.stringify(data) }),
-      getRulesByTeachers: (teacherIds: string[]) => request(`/achievements/teacher-rules?teacherIds=${teacherIds.join(',')}`),
+  games: {
+    grantReward: (data: any) => request('/games/grant', { method: 'POST', body: JSON.stringify(data) }),
+    getMountainSession: (className: string) => request(`/games/mountain?className=${encodeURIComponent(className)}`),
+    saveMountainSession: (data: any) => request('/games/mountain', { method: 'POST', body: JSON.stringify(data) }),
+    getLuckyConfig: (className: string, ownerId: string) => request(`/games/lucky/config?className=${encodeURIComponent(className)}&ownerId=${ownerId}`),
+    saveLuckyConfig: (data: any) => request('/games/lucky/config', { method: 'POST', body: JSON.stringify(data) }),
+    drawLucky: (studentId: string) => request('/games/lucky/draw', { method: 'POST', body: JSON.stringify({ studentId }) }),
+    getMonsterConfig: (className: string) => request(`/games/monster/config?className=${encodeURIComponent(className)}`),
+    saveMonsterConfig: (data: any) => request('/games/monster/config', { method: 'POST', body: JSON.stringify(data) }),
+    getZenConfig: (className: string) => request(`/games/zen/config?className=${encodeURIComponent(className)}`),
+    saveZenConfig: (data: any) => request('/games/zen/config', { method: 'POST', body: JSON.stringify(data) }),
   },
-
   rewards: {
-    getMyRewards: (studentId: string, page = 1, limit = 20) => request(`/rewards?studentId=${studentId}&page=${page}&limit=${limit}&excludeType=CONSOLATION`),
-    getClassRewards: (page = 1, limit = 20, className?: string) => {
-        let qs = `scope=class&page=${page}&limit=${limit}&excludeType=CONSOLATION`;
-        if (className) qs += `&className=${className}`;
-        return request(`/rewards?${qs}`);
-    }, 
-    addReward: (data: Partial<StudentReward>) => request('/rewards', { method: 'POST', body: JSON.stringify(data) }),
-    update: (id: string, data: Partial<StudentReward>) => request(`/rewards/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
-    delete: (id: string) => request(`/rewards/${id}`, { method: 'DELETE' }),
+    getMyRewards: (studentId: string, page: number, pageSize: number) => request(`/rewards/my?studentId=${studentId}&page=${page}&limit=${pageSize}`),
+    getClassRewards: (page: number, pageSize: number, className: string) => request(`/rewards/class?page=${page}&limit=${pageSize}&className=${encodeURIComponent(className)}`),
+    addReward: (data: any) => request('/rewards', { method: 'POST', body: JSON.stringify(data) }),
     redeem: (id: string) => request(`/rewards/${id}/redeem`, { method: 'POST' }),
+    update: (id: string, data: any) => request(`/rewards/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
+    delete: (id: string) => request(`/rewards/${id}`, { method: 'DELETE' }),
   },
-
-  batchDelete: (type: 'student' | 'score' | 'user', ids: string[]) => {
-    return request('/batch-delete', { method: 'POST', body: JSON.stringify({ type, ids }) });
+  achievements: {
+    getConfig: (className: string) => request(`/achievements/config?className=${encodeURIComponent(className)}`),
+    getMyRules: () => request('/achievements/my-rules'),
+    saveConfig: (data: any) => request('/achievements/config', { method: 'POST', body: JSON.stringify(data) }),
+    saveMyRules: (data: any) => request('/achievements/my-rules', { method: 'POST', body: JSON.stringify(data) }),
+    grant: (data: { studentId: string, achievementId: string, semester: string }) => request('/achievements/grant', { method: 'POST', body: JSON.stringify(data) }),
+    exchange: (data: { studentId: string, ruleId: string, teacherId?: string }) => request('/achievements/exchange', { method: 'POST', body: JSON.stringify(data) }),
+    getStudentAchievements: (studentId: string, semester: string) => request(`/achievements/student/${studentId}?semester=${encodeURIComponent(semester)}`),
+    getRulesByTeachers: (teacherIds: string[]) => request('/achievements/rules-by-teachers', { method: 'POST', body: JSON.stringify({ teacherIds }) }),
+  },
+  attendance: {
+    get: (params: any) => {
+        const qs = new URLSearchParams(params).toString();
+        return request(`/attendance?${qs}`);
+    },
+    checkIn: (data: { studentId: string, date: string }) => request('/attendance/checkin', { method: 'POST', body: JSON.stringify(data) }),
+    applyLeave: (data: any) => request('/attendance/leave', { method: 'POST', body: JSON.stringify(data) }),
+    batch: (data: { className: string, date: string }) => request('/attendance/batch', { method: 'POST', body: JSON.stringify(data) }),
+    update: (data: any) => request('/attendance/update', { method: 'POST', body: JSON.stringify(data) }),
+  },
+  calendar: {
+    get: (className: string) => request(`/calendar?className=${encodeURIComponent(className)}`),
+    add: (data: any) => request('/calendar', { method: 'POST', body: JSON.stringify(data) }),
+    delete: (id: string) => request(`/calendar/${id}`, { method: 'DELETE' }),
   },
-
   wishes: {
-      getAll: (params: { teacherId?: string, studentId?: string, status?: string }) => {
-          const qs = new URLSearchParams(params as any).toString();
-          return request(`/wishes?${qs}`);
-      },
-      create: (data: Partial<Wish>) => request('/wishes', { method: 'POST', body: JSON.stringify(data) }),
-      fulfill: (id: string) => request(`/wishes/${id}/fulfill`, { method: 'POST' }),
-      randomFulfill: (teacherId: string) => request('/wishes/random-fulfill', { method: 'POST', body: JSON.stringify({ teacherId }) }),
+    getAll: (params: any) => {
+        const qs = new URLSearchParams(params).toString();
+        return request(`/wishes?${qs}`);
+    },
+    create: (data: any) => request('/wishes', { method: 'POST', body: JSON.stringify(data) }),
+    fulfill: (id: string) => request(`/wishes/${id}/fulfill`, { method: 'POST' }),
+    randomFulfill: (teacherId: string) => request(`/wishes/random?teacherId=${teacherId}`, { method: 'POST' }),
   },
-
   feedback: {
-      getAll: (params: { targetId?: string, creatorId?: string, type?: string, status?: string }) => {
-          const qs = new URLSearchParams(params as any).toString();
-          return request(`/feedback?${qs}`);
-      },
-      create: (data: Partial<Feedback>) => request('/feedback', { method: 'POST', body: JSON.stringify(data) }),
-      update: (id: string, data: { status?: string, reply?: string }) => request(`/feedback/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
-      ignoreAll: (targetId: string) => request('/feedback/ignore-all', { method: 'POST', body: JSON.stringify({ targetId }) }),
+    getAll: (params: any) => {
+        const qs = new URLSearchParams(params).toString();
+        return request(`/feedback?${qs}`);
+    },
+    create: (data: any) => request('/feedback', { method: 'POST', body: JSON.stringify(data) }),
+    update: (id: string, data: any) => request(`/feedback/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
+    ignoreAll: (userId: string) => request(`/feedback/ignore-all`, { method: 'POST', body: JSON.stringify({ userId }) }),
+  },
+  todos: {
+    getAll: () => request('/todos'),
+    add: (content: string) => request('/todos', { method: 'POST', body: JSON.stringify({ content }) }),
+    update: (id: string, data: any) => request(`/todos/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
+    delete: (id: string) => request(`/todos/${id}`, { method: 'DELETE' }),
   },
-
   ai: {
       chat: (data: { text?: string, audio?: string, history?: { role: string, text?: string }[] }) => request('/ai/chat', { method: 'POST', body: JSON.stringify(data) }),
-      evaluate: (data: { question: string, audio?: string, image?: string }) => request('/ai/evaluate', { method: 'POST', body: JSON.stringify(data) }),
+      evaluate: (data: { question: string, audio?: string, images?: string[] }) => request('/ai/evaluate', { method: 'POST', body: JSON.stringify(data) }),
       resetPool: () => request('/ai/reset-pool', { method: 'POST' }), 
-      getStats: () => request('/ai/stats'), // NEW Detailed Stats
+      getStats: () => request('/ai/stats'),
+      getKey: () => request('/ai/config/key'),
   },
-
-  todos: { // NEW
-      getAll: () => request('/todos'),
-      add: (content: string) => request('/todos', { method: 'POST', body: JSON.stringify({ content }) }),
-      update: (id: string, data: Partial<Todo>) => request(`/todos/${id}`, { method: 'PUT', body: JSON.stringify(data) }),
-      delete: (id: string) => request(`/todos/${id}`, { method: 'DELETE' }),
-  }
-};
+  batchDelete: (resource: string, ids: string[]) => request(`/batch/${resource}`, { method: 'POST', body: JSON.stringify({ ids }) }),
+};