Initial push

hubzilla/addon/dsc01/dsc01.php

@@ -0,0 +1,155 @@
+<?php
+
+/**
+ * Name: DSC01 Vital Signs
+ * Description: Public civic diagnostic — the ten structural preconditions of an HOA association.
+ * Version: 0.1.0
+ * MinVersion: 11.0
+ * MaxVersion: 12.0
+ */
+
+use Zotlabs\Extend\Widget;
+
+function dsc01_module() {}
+
+function dsc01_load() {
+    register_hook('load_pdl', 'addon/dsc01/dsc01.php', 'dsc01_load_pdl');
+    Widget::register('addon/dsc01/Widget/Dsc01.php', 'dsc01');
+}
+
+function dsc01_unload() {
+    unregister_hook('load_pdl', 'addon/dsc01/dsc01.php', 'dsc01_load_pdl');
+    Widget::unregister('addon/dsc01/Widget/Dsc01.php', 'dsc01');
+}
+
+function dsc01_load_pdl(&$b) {
+    if (!is_array($b) || empty($b['module']) || $b['module'] !== 'dsc01') {
+        return;
+    }
+    $layout = @file_get_contents('addon/dsc01/mod_dsc01.pdl');
+    if ($layout !== false) {
+        $b['layout'] = $layout;
+    }
+}
+
+// ----------------------------------------------------------------------------
+// HELPERS
+// ----------------------------------------------------------------------------
+
+function dsc01_h($value) {
+    return htmlspecialchars((string) $value, ENT_QUOTES, 'UTF-8');
+}
+
+// ----------------------------------------------------------------------------
+// ACCESS
+// ----------------------------------------------------------------------------
+
+function dsc01_access_state() {
+    if (!local_channel()) {
+        return 'public';
+    }
+
+    $channel = App::get_channel();
+
+    if (local_channel() === intval($channel['channel_id'])) {
+        return 'operator';
+    }
+
+    $config = dsc01_load_config();
+    $gid    = intval($config['corpus_builder_group_id'] ?? 0);
+
+    if ($gid && in_array(get_observer_hash(), group_get_members_xchan($gid))) {
+        return 'participant';
+    }
+
+    return 'denied';
+}
+
+function dsc01_access_wall() {
+    return '
+        <div class="dsc01-content">
+            <div class="alert alert-info" role="alert">
+                <strong>HOA_MEMBER standing required to submit.</strong>
+                Vital Signs are public and readable by anyone.
+                To submit a Vital Signs record for your association, you must complete the SASE process.
+                Visit <a href="https://directory.diagnostics.kane-il.us/channel/theron">
+                    directory.diagnostics.kane-il.us
+                </a> to begin.
+            </div>
+        </div>
+    ';
+}
+
+// ----------------------------------------------------------------------------
+// CONTENT
+// ----------------------------------------------------------------------------
+
+function dsc01_content() {
+    if (function_exists('head_add_css')) {
+        head_add_css('/addon/dsc01/view/css/dsc01.css');
+    }
+    if (function_exists('head_add_js')) {
+        head_add_js('/addon/dsc01/view/js/dsc01.js');
+    }
+
+    $access = dsc01_access_state();
+
+    // dsc01 is public — access wall only gates submission, not reading
+    if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+        if ($access === 'public' || $access === 'denied') {
+            return dsc01_access_wall();
+        }
+        // TODO: handle POST submission
+        return dsc01_access_wall();
+    }
+
+    return dsc01_render_main($access);
+}
+
+// ----------------------------------------------------------------------------
+// RENDER
+// ----------------------------------------------------------------------------
+
+function dsc01_render_main($access) {
+    $out  = '<div class="dsc01-content">';
+    $out .= '<div class="dsc01-header mb-3">';
+    $out .= '<h2>Vital Signs</h2>';
+    $out .= '<p class="text-muted">The ten structural preconditions of an HOA association.</p>';
+    $out .= '</div>';
+
+    // TODO: render the ten Vital Signs
+
+    $out .= '<div class="dsc01-placeholder text-muted fst-italic">Content forthcoming.</div>';
+    $out .= '</div>';
+
+    return $out;
+}
+
+// ----------------------------------------------------------------------------
+// CONFIG
+// ----------------------------------------------------------------------------
+
+function dsc01_load_config() {
+    $path = 'addon/dsc01/config.json';
+    $raw  = @file_get_contents($path);
+    if ($raw === false) return [];
+    $data = json_decode($raw, true);
+    return (json_last_error() === JSON_ERROR_NONE) ? $data : [];
+}
+
+// ----------------------------------------------------------------------------
+// CSRF
+// ----------------------------------------------------------------------------
+
+function dsc01_csrf_token() {
+    if (empty($_SESSION['dsc01_csrf'])) {
+        $_SESSION['dsc01_csrf'] = bin2hex(random_bytes(16));
+    }
+    return '<input type="hidden" name="dsc01_csrf" value="'
+         . dsc01_h($_SESSION['dsc01_csrf']) . '">';
+}
+
+function dsc01_verify_csrf() {
+    return isset($_POST['dsc01_csrf'], $_SESSION['dsc01_csrf'])
+        && hash_equals($_SESSION['dsc01_csrf'], $_POST['dsc01_csrf']);
+}