// ===== src/roles.jsx =====
// Role identity, navigation visibility, data scoping, and per-role home dashboards.
// Each "job" (مدير / موظف استقبال / طبيب / الأخصائي) gets its OWN landing,
// OWN sidebar, and sees ONLY its OWN data.
// ── Identity per role ──────────────────────────────────────────
// `match` is the name as it appears in DATA (dr / th fields) so we can scope.
const ROLE_PROFILES = {
"مدير": { name:"أمير", email:"amir@kinetic.eg", match:null, color:"#7BBDE8", title:"مدير الفرع" },
"موظف استقبال": { name:"دينا فؤاد", email:"dina@kinetic.eg", match:null, color:"#3FA984", title:"مكتب الاستقبال" },
"طبيب": { name:"د. ياسمين عادل", email:"yasmin@kinetic.eg", match:"د. ياسمين عادل", color:"#7E6BD3", title:"أخصائي تأهيل" },
"الأخصائي": { name:"كريم صالح", email:"karim@kinetic.eg", match:"كريم صالح", color:"#7BBDE8", title:"أخصائي علاج طبيعي" },
};
// ── Navigation routes ──────────────────────────────────────────
// Which routes each role may reach (also drives sidebar visibility).
const ROLE_ROUTES = {
"مدير": ["dashboard","patients","appointments","treatments","sessions","payments","packages","campaigns","reports","settings"],
"موظف استقبال": ["dashboard","appointments","patients","payments","reports"],
"طبيب": ["dashboard","patients","appointments","treatments","sessions","reports","settings"],
"الأخصائي": ["dashboard","appointments","sessions","patients"],
};
// Tailored label for each role's home tab.
const ROLE_DASH_LABEL = {
"مدير":"لوحة التحكم", "موظف استقبال":"لوحة الاستقبال", "طبيب":"يومي الإكلينيكي", "الأخصائي":"جدول يومي",
};
const ROLE_DEFAULT = {
"مدير":"dashboard", "موظف استقبال":"dashboard", "طبيب":"dashboard", "الأخصائي":"dashboard",
};
function roleScope(role){
return ({"مدير":"all","موظف استقبال":"reception","طبيب":"doctor","الأخصائي":"therapist"})[role] || "none";
}
function roleDefaultRoute(role){ return ROLE_DEFAULT[role] || "dashboard"; }
function roleAllows(role, route){
// Admin-defined custom sections (prefix "custom:") are always allowed for admin.
if (typeof route === "string" && route.startsWith("custom:")) return role === "مدير";
const a = ROLE_ROUTES[role];
// Default-deny: unknown role or missing route list = no access. This is
// client-side UX only — server RLS is the real enforcement — but it stops
// a mistyped role from silently unlocking everything.
if (!Array.isArray(a)) return false;
return a.includes(route);
}
// ── Data scoping (reads window.ME, set by App) ─────────────────
// These are DEFENCE-IN-DEPTH UX filters. They hide rows from a role's UI
// but do NOT enforce access — real enforcement lives in Supabase RLS.
//
// `me.match` is the logged-in clinician's own name (set from the staff
// record at sign-in, not a fixed profile). We match on name OR the
// resolved therapist_id so the filter works for real production accounts,
// not just the demo personas.
function myName(){ const me = window.ME; return me ? (me.match || me.name || "") : ""; }
// The DATA.therapists row id for the logged-in therapist (by name), so we
// can also match patients/appointments linked via therapist_id.
function myTherapistId(){
const nm = myName(); if (!nm) return null;
const t = (DATA.therapists || []).find(x => x.name === nm);
return t ? t.id : null;
}
function scopePatients(list){
const me = window.ME;
if (!me || me.scope==="all" || me.scope==="reception") return list;
const nm = myName();
if (me.scope==="doctor") return list.filter(p=>p.dr===nm);
if (me.scope==="therapist") { const tid = myTherapistId();
return list.filter(p=>p.th===nm || (tid && p.therapist_id===tid)); }
return list;
}
function scopeAppts(list){
const me = window.ME;
if (!me || me.scope==="all" || me.scope==="reception") return list;
const nm = myName();
if (me.scope==="doctor") return list.filter(a=>a.dr===nm);
if (me.scope==="therapist") { const tid = myTherapistId();
return list.filter(a=>a.th===nm || (tid && a.therapist_id===tid)); }
return list;
}
function scopeTherapists(list){
const me = window.ME;
if (me && me.scope==="therapist") return list.filter(t=>t.name===myName());
return list;
}
// Payments: gate by the caller's visible patient set. Doctor/therapist only
// see invoices for patients on their caseload.
function scopePayments(list){
const me = window.ME;
if (!me || me.scope==="all" || me.scope==="reception") return list;
const patients = scopePatients(DATA.patients || []);
const allowedNames = new Set(patients.map(p=>p.name));
const allowedIds = new Set(patients.map(p=>p.id || p.patient_id));
return list.filter(v => {
if (v.patient_id && allowedIds.has(v.patient_id)) return true;
if (v.pid && allowedIds.has(v.pid)) return true;
if (v.patient && allowedNames.has(v.patient)) return true;
return false;
});
}
// Empty-name safe: filter falsy pieces before taking initial characters so
// double-spaces don't produce "undefined" strings.
const initialsOf = (n)=> (n||"")
.replace("د. ","")
.split(" ")
.filter(Boolean)
.map(x => x[0] || "")
.join("")
.slice(0,2);
Object.assign(window, {
ROLE_PROFILES, ROLE_ROUTES, ROLE_DASH_LABEL, ROLE_DEFAULT,
roleScope, roleDefaultRoute, roleAllows,
scopePatients, scopeAppts, scopeTherapists, scopePayments, initialsOf,
});
// ── Shared bits for role homes ─────────────────────────────────
function HomeHeader({ kicker, title, sub, right }){
return (
الرئيسية{kicker}
{title}
{sub}
{right &&
{right}
}
);
}
function ApptRow({ a, right }){
return (
{a.time}
{a.dur}m
{a.patient}
{a.room} · {a.type || "—"}
{right ? right : }
);
}
// ════════════════════════════════════════════════════════════════
// RECEPTIONIST — front desk: today's flow, check-ins, daily cash
// ════════════════════════════════════════════════════════════════
function ReceptionDashboard({ go, user }){
window.useDataVersion && window.useDataVersion();
const [quickPayOpen, setQuickPayOpen] = React.useState(false);
const appts = DATA.appts;
const booked = appts.filter(a=>a.status!=="متاح");
const free = appts.filter(a=>a.status==="متاح");
const waiting = appts.filter(a=>a.status==="مؤكد"||a.status==="معلّق");
// "Today's cash" — only invoices dated today. Seed rows use ISO date
// strings; live rows may use `created_at`. Fallback to all-time is fine
// for demo mode.
const today = new Date().toISOString().slice(0,10);
const todaysInvoices = DATA.payments.filter(p => {
const d = (p.date || p.created_at || "").slice(0,10);
return !d || d === today;
});
const collected = todaysInvoices.reduce((s,p)=>s+p.paid,0);
const outstanding = todaysInvoices.reduce((s,p)=>s+(p.amount-p.paid),0);
const unpaid = DATA.payments.filter(p=>p.status!=="مدفوع");
return (
صباح الخير، {user.name.split(" ")[0]} 👋🏼}
sub={`${todayLabelAr()} — حركة مكتب الاستقبال اليوم في ${activeBranchName()}.`}
right={<>
}
/>
}/>
}/>
}/>
}/>
}/>
{/* Check-in queue */}
طابور الوصول
سجّل وصول المرضى عند حضورهم
{booked.slice(0,7).map(a=>(
تم
: a.status==="قيد التنفيذ" ?
:
}/>
))}
);
}
// ════════════════════════════════════════════════════════════════
// THERAPIST — my day: schedule to run, sessions to log, my caseload
// ════════════════════════════════════════════════════════════════
function TherapistDashboard({ go, user }){
const me = (window.ROLE_PROFILES||{})["الأخصائي"];
const myAppts = scopeAppts(DATA.appts).filter(a=>a.status!=="متاح");
const done = myAppts.filter(a=>a.status==="مكتمل");
const remaining = myAppts.filter(a=>a.status!=="مكتمل");
const myPatients= scopePatients(DATA.patients);
const meT = DATA.therapists.find(t=>t.name===user.match) || { load: myAppts.length, max: 8 };
return (
أهلاً، {user.name.split(" ")[0]} 💪🏼}
sub={`${todayLabelAr()} — ${myAppts.length} جلسات على جدولك اليوم، ${done.length} مكتملة.`}
right={}
/>
}/>
}/>
}/>
}/>
}/>
{/* Schedule timeline */}
جدولي اليوم
اضغط لبدء الجلسة وتسجيل الملاحظات
{myAppts.map(a=>(
تمت
:
}/>
))}
{myAppts.length===0 &&
لا جلسات اليوم.
}
{/* My assigned patients */}
مرضاي المسندون
{myPatients.map(p=>{
// Pull the package size out of the pkg label ("12 Sessions", "24 جلسة", …).
// Fall back to Math.max so a stale/missing pkg doesn't produce >100% bars.
const pkgMatch = (p.pkg || "").match(/(\d+)/);
const total = pkgMatch ? parseInt(pkgMatch[1], 10) : Math.max(12, (p.remain || 0));
const done = Math.max(0, total - (p.remain || 0));
const pct = total > 0 ? Math.min(100, (done / total) * 100) : 0;
return (
go("patients")}>
{initialsOf(p.name)}
{p.name}
{p.diag}
{done}/{total}
);
})}
);
}
// ── Home dispatcher: picks the right dashboard for the role ────
function RoleHome({ role, go, user }){
if (role==="موظف استقبال") return ;
if (role==="طبيب") return ;
if (role==="الأخصائي") return ;
return ; // مدير → full admin KPI dashboard
}
Object.assign(window, { ReceptionDashboard, DoctorDashboard, TherapistDashboard, RoleHome });