<?php
error_reporting(0);ini_set('display_errors',0);date_default_timezone_set('Asia/Shanghai');session_start();
header('Access-Control-Allow-Origin:*');header('Access-Control-Allow-Headers:Authorization,Content-Type,sign,timestamp');header('Access-Control-Allow-Methods:GET,POST,OPTIONS');
if($_SERVER['REQUEST_METHOD']==='OPTIONS')exit;
require_once __DIR__.'/lib/common.php';require_once __DIR__.'/lib/db.php';require_once __DIR__.'/lib/auth.php';require_once __DIR__.'/lib/log.php';require_once __DIR__.'/lib/oss.php';
$uri=parse_url($_SERVER['REQUEST_URI']??'/',PHP_URL_PATH);$uri=rtrim($uri,'/')?:'/';
// ===== 后台管理 =====
if($uri==='/admin'||strpos($uri,'/admin/')===0){
  $am=['/admin/api/login'=>'admin/api/login.php','/admin/api/logout'=>'admin/api/login.php','/admin/api/dept_list'=>'admin/api/dept.php','/admin/api/dept_save'=>'admin/api/dept.php','/admin/api/user_list'=>'admin/api/user.php','/admin/api/user_add'=>'admin/api/user.php','/admin/api/user_archive_detail'=>'admin/api/user.php','/admin/api/user_black_list'=>'admin/api/user.php','/admin/api/project_list'=>'admin/api/project.php','/admin/api/project_save'=>'admin/api/project.php','/admin/api/task_all'=>'admin/api/task.php','/admin/api/task_batch_add'=>'admin/api/task.php','/admin/api/task_batch_transfer'=>'admin/api/task.php','/admin/api/task_audit_do'=>'admin/api/task.php','/admin/api/plan_audit_batch'=>'admin/api/plan.php','/admin/api/plan_audit_list'=>'admin/api/data.php','/admin/api/approve_all'=>'admin/api/approve.php','/admin/api/approve_audit'=>'admin/api/approve.php','/admin/api/checkin_all'=>'admin/api/checkin.php','/admin/api/checkin_holiday'=>'admin/api/checkin.php','/admin/api/checkin_report'=>'admin/api/checkin.php','/admin/api/checkin_abnormal'=>'admin/api/checkin.php','/admin/api/doc_all'=>'admin/api/doc.php','/admin/api/doc_save'=>'admin/api/doc.php','/admin/api/doc_delete'=>'admin/api/doc.php','/admin/api/cate_save'=>'admin/api/doc.php','/admin/api/cate_list'=>'admin/api/doc.php','/admin/api/notice_save'=>'admin/api/notice.php','/admin/api/notice_list'=>'admin/api/notice.php','/admin/api/data_echart'=>'admin/api/data.php','/admin/api/data_rank'=>'admin/api/data.php','/admin/api/data_task_rate'=>'admin/api/data.php','/admin/api/data_sign_month'=>'admin/api/data.php','/admin/api/sys_dict'=>'admin/api/sys.php','/admin/api/sys_config'=>'admin/api/sys.php','/admin/api/sys_log'=>'admin/api/sys.php','/admin/api/export_task'=>'admin/api/export.php','/admin/api/role_list'=>'admin/api/role.php','/admin/api/menu_by_role'=>'admin/api/role.php','/admin/api/me'=>'admin/api/login.php','/admin/api/page'=>'admin/page.php'];
  // 1) API 请求优先
  if(isset($am[$uri])){
    // 鉴权：除登录外的所有 admin api 必须 session 登录
    $noAuth=['/admin/api/login','/admin/api/logout'];
    if(!in_array($uri,$noAuth)){
      if(empty($_SESSION['admin_id'])){json_response(401,'未登录或会话过期');}
    }
    require __DIR__.'/'.$am[$uri];
    exit;
  }
  // 2) 访问具体 page（/admin?page=xxx）
  $pg=$_GET['page']??'';
  $ps=['dashboard','dept','user','project','task_all','plan_audit','checkin_all','checkin_report','checkin_abnormal','approve_all','reward_salary','doc','notice','performance','dict','sys_config','msg_push','log_export','role_config'];
  if(in_array($pg,$ps)){
    if(empty($_SESSION['admin_id'])){header('Location:/admin');exit;}
    readfile(__DIR__.'/admin/frame.php');
    exit;
  }
  // 3) 默认显示登录页
  if(!isset($_SESSION['admin_id'])){
    readfile(__DIR__.'/admin/login.php');
  } else {
    // 已登录但没指定 page，直接进 dashboard
    readfile(__DIR__.'/admin/frame.php');
  }
  exit;
}
// ===== 前端API =====
if(strpos($uri,'/api/')===0){
  $am=['/api/user/login'=>'api/user.php','/api/user/wxlogin'=>'api/user.php','/api/user/register'=>'api/user.php','/api/user/info'=>'api/user.php','/api/user/pwd_edit'=>'api/user.php','/api/user/token_refresh'=>'api/user.php','/api/user/logout'=>'api/user.php','/api/home/banner'=>'api/home.php','/api/home/user_card'=>'api/home.php','/api/home/function_menu'=>'api/home.php','/api/home/todo_count'=>'api/home.php','/api/home/recent_task'=>'api/home.php','/api/home/master_info'=>'api/home.php','/api/home/sign_status'=>'api/home.php','/api/home/unread_msg'=>'api/home.php','/api/checkin/add_sign'=>'api/checkin.php','/api/checkin/list'=>'api/checkin.php','/api/checkin/reissue_apply'=>'api/checkin.php','/api/checkin/reissue_list'=>'api/checkin.php','/api/checkin/month_stat'=>'api/checkin.php','/api/checkin/get_rule'=>'api/checkin.php','/api/checkin/holiday_list'=>'api/checkin.php','/api/checkin/calendar_data'=>'api/checkin.php','/api/checkin/out_audit_record'=>'api/checkin.php','/api/checkin/abnormal_list'=>'api/checkin.php','/api/checkin/remind_switch'=>'api/checkin.php','/api/checkin/remind_set'=>'api/checkin.php','/api/plan/save'=>'api/plan.php','/api/plan/my_list'=>'api/plan.php','/api/plan/detail'=>'api/plan.php','/api/plan/template_list'=>'api/plan.php','/api/plan/template_save'=>'api/plan.php','/api/plan/ai_create'=>'api/plan.php','/api/plan/get_score'=>'api/plan.php','/api/plan/draft_sync'=>'api/plan.php','/api/plan/bind_task_list'=>'api/plan.php','/api/task/project_list'=>'api/task.php','/api/task/my_list'=>'api/task.php','/api/task/detail'=>'api/task.php','/api/task/submit_progress'=>'api/task.php','/api/task/comment_list'=>'api/task.php','/api/task/comment_add'=>'api/task.php','/api/task/delegate_apply'=>'api/task.php','/api/task/review_summary'=>'api/task.php','/api/task/note_save'=>'api/task.php','/api/task/copy_info'=>'api/task.php','/api/task/task_receive'=>'api/task.php','/api/task/wait_audit'=>'api/task.php','/api/task/audit_do'=>'api/task.php','/api/task/overdue_tip'=>'api/task.php','/api/task/batch_transfer'=>'api/task.php','/api/task/overdue_list'=>'api/task.php','/api/approve/type_list'=>'api/approve.php','/api/approve/submit'=>'api/approve.php','/api/approve/my_list'=>'api/approve.php','/api/approve/cancel'=>'api/approve.php','/api/approve/wait_audit'=>'api/approve.php','/api/approve/audit'=>'api/approve.php','/api/approve/detail'=>'api/approve.php','/api/msg/list'=>'api/msg.php','/api/msg/read_mark'=>'api/msg.php','/api/msg/read_detail'=>'api/msg.php','/api/msg/clear_all'=>'api/msg.php','/api/doc/cate_list'=>'api/system.php','/api/doc/file_list'=>'api/system.php','/api/system/config'=>'api/system.php','/api/system/theme_set'=>'api/system.php','/api/upload/img'=>'api/system.php','/api/user/archive'=>'api/system.php'];
  if(isset($am[$uri])){
    $free=['/api/user/login','/api/user/wxlogin','/api/user/register','/api/user/token_refresh','/api/upload/img'];
    if(!in_array($uri,$free)){$h=Auth::getAllHeaders();$s=$h['sign']??$h['Sign']??'';$ts=$h['timestamp']??$h['Timestamp']??'';if(!Auth::verifySign(input(),$ts,$s))json_response(405,'签名错误');}
    $af=['/api/user/login','/api/user/wxlogin','/api/user/register','/api/user/token_refresh'];
    if(!in_array($uri,$af)){$t=Auth::getBearerToken();$p=Auth::verifyToken($t);if(!$p)json_response(40101,'令牌过期');$u=DB::getInstance()->find("SELECT id,status FROM user WHERE id=?",[$p['uid']]);if(!$u||$u['status']!=1)json_response(40102,'账号已禁用');}
    require __DIR__.'/'.$am[$uri];exit;
  }json_response(404,'API不存在');exit;
}
// ===== 前端页面 =====
$page=$_GET['page']??'index';$m=['index'=>'pages/tab/index.html','addplan'=>'pages/tab/addplan.html','mine'=>'pages/tab/mine.html','login'=>'pages/login.html','register'=>'pages/register.html','checkin'=>'pages/checkin/checkin.html','checkinList'=>'pages/checkin/checkinList.html','reissueApply'=>'pages/checkin/reissueApply.html','monthCheck'=>'pages/checkin/monthCheck.html','taskList'=>'pages/task/taskList.html','taskDetail'=>'pages/task/taskDetail.html','progressSubmit'=>'pages/task/progressSubmit.html','taskComment'=>'pages/task/taskComment.html','waitAudit'=>'pages/audit/waitAudit.html','approveIndex'=>'pages/approve/approveIndex.html','approveForm'=>'pages/approve/approveForm.html','approveRecord'=>'pages/approve/approveRecord.html','file'=>'pages/file/file.html','planTemp'=>'pages/plan/planTemp.html','message'=>'pages/message/message.html','setting'=>'pages/setting/setting.html','userArchive'=>'pages/user/userArchive.html','calendarView'=>'pages/calendar/calendarView.html'];
$f=__DIR__.'/'.($m[$page]??'pages/tab/index.html');readfile(file_exists($f)?$f:__DIR__.'/pages/tab/index.html');