Update app.py

app.py

@@ -1,6 +1,7 @@
 import os
 import random
 import hashlib
+import tempfile
 import threading
 from typing import Dict, List, Tuple, Any, Optional
 
@@ -378,7 +379,15 @@ class PrivacyMemoryStore:
     def __init__(self):
         self._lock = threading.Lock()
         self._records: List[Dict[str, Any]] = []
-        self._admin_pin = os.environ.get("ADMIN_PIN", "2026")
+        self._admin_pin = (
+            os.environ.get("ADMIN_PIN")
+            or os.environ.get("PIN")
+            or os.environ.get("LECTURER_PIN")
+            or "2026"
+        )
+
+    def verify_pin(self, pin: str) -> bool:
+        return bool(pin) and pin.strip() == self._admin_pin
 
     def upsert_entry(self, code: str, scores: Dict[str, Any], previous_code: Optional[str] = None) -> str:
         with self._lock:
@@ -704,11 +713,30 @@ def switch_language(lang_choice: str):
             )
         )
 
+    dl_labels = {
+        "DE": "📥 Persönliche Ergebnisse herunterladen (.md)",
+        "EN": "📥 Download Personal Results (.md)",
+        "ZH": "📥 下载个人评估结果 (.md)",
+    }
     updates.append(gr.update(value=t["submit_btn"]))
+    updates.append(gr.update(label=dl_labels.get(lang_code, dl_labels["DE"])))
     updates.append(t["sources_footer"])
     return updates
 
 
+def create_student_download_file(code: str, scores: Dict[str, Any], lang: str = "DE") -> str:
+    report_md = (
+        f"# 🧭 Umgang mit Ungewissheit & Kontrollüberzeugung – Ergebnisprofil ({code})\n\n"
+        + generate_profile_feedback(scores, lang=lang)
+    )
+    tmp_dir = tempfile.mkdtemp()
+    safe_code = "".join(c for c in code if c.isalnum() or c in ("-", "_")) or "Profil"
+    file_path = os.path.join(tmp_dir, f"Ergebnis_{safe_code}.md")
+    with open(file_path, "w", encoding="utf-8") as f:
+        f.write(report_md)
+    return file_path
+
+
 def process_student_submission(lang_code: str, custom_code: str, current_token: Optional[str], *answers):
     t = TRANSLATIONS.get(lang_code, TRANSLATIONS["DE"])
     missing_nccs = [i + 1 for i in range(16) if answers[i] is None]
@@ -723,6 +751,7 @@ def process_student_submission(lang_code: str, custom_code: str, current_token:
         return (
             "\n".join(msg_parts),
             gr.update(visible=False, value=None),
+            gr.update(visible=False, value=None),
             current_token
         )
 
@@ -752,9 +781,17 @@ def process_student_submission(lang_code: str, custom_code: str, current_token:
         title=f"Psychometrisches 2x2-Profil ({final_code})"
     )
 
+    download_path = create_student_download_file(final_code, scores, lang=lang_code)
+    dl_labels = {
+        "DE": "📥 Persönliche Ergebnisse herunterladen (.md)",
+        "EN": "📥 Download Personal Results (.md)",
+        "ZH": "📥 下载个人评估结果 (.md)",
+    }
+
     return (
         code_banner,
         gr.update(visible=True, value=fig),
+        gr.update(visible=True, value=download_path, label=dl_labels.get(lang_code, dl_labels["DE"])),
         final_code
     )
 
@@ -810,16 +847,75 @@ def refresh_lecturer_dashboard(
     return status_md, fig
 
 
-def handle_admin_reset(pin: str, expected_count: int, y_mode_label: str, x_cutoff_label: str, show_labels: bool, beamer_mode: bool):
-    _, msg = SESSION_STORE.clear_all(pin)
+def unlock_lecturer_view(
+    pin: str,
+    expected_count: int,
+    y_mode_label: str,
+    x_cutoff_label: str,
+    show_labels: bool,
+    beamer_mode: bool
+):
+    if not SESSION_STORE.verify_pin(pin):
+        return (
+            False,
+            "",
+            "❌ **PIN ungültig.** Bitte prüfen Sie das im Space hinterlegte Secret.",
+            gr.update(visible=True),
+            gr.update(visible=False),
+            gr.skip(),
+            gr.skip(),
+        )
+    status_md, fig = refresh_lecturer_dashboard(
+        expected_count, y_mode_label, x_cutoff_label, show_labels, beamer_mode
+    )
+    return (
+        True,
+        "",
+        "",
+        gr.update(visible=False),
+        gr.update(visible=True),
+        status_md,
+        fig,
+    )
+
+
+def lock_lecturer_view():
+    return (
+        False,
+        "",
+        gr.update(visible=True),
+        gr.update(visible=False),
+    )
+
+
+def handle_admin_reset(
+    is_unlocked: bool,
+    expected_count: int,
+    y_mode_label: str,
+    x_cutoff_label: str,
+    show_labels: bool,
+    beamer_mode: bool
+):
+    if not is_unlocked:
+        return "❌ Nicht autorisiert.", gr.skip(), gr.skip()
+    _, msg = SESSION_STORE.clear_all(SESSION_STORE._admin_pin)
     status_md, fig = refresh_lecturer_dashboard(expected_count, y_mode_label, x_cutoff_label, show_labels, beamer_mode)
-    return "", msg, status_md, fig
+    return msg, status_md, fig
 
 
-def handle_admin_demo(pin: str, expected_count: int, y_mode_label: str, x_cutoff_label: str, show_labels: bool, beamer_mode: bool):
-    _, msg = SESSION_STORE.seed_demo_data(pin, count=int(expected_count))
+def handle_admin_demo(
+    is_unlocked: bool,
+    expected_count: int,
+    y_mode_label: str,
+    x_cutoff_label: str,
+    show_labels: bool,
+    beamer_mode: bool
+):
+    if not is_unlocked:
+        return "❌ Nicht autorisiert.", gr.skip(), gr.skip()
+    _, msg = SESSION_STORE.seed_demo_data(SESSION_STORE._admin_pin, count=int(expected_count))
     status_md, fig = refresh_lecturer_dashboard(expected_count, y_mode_label, x_cutoff_label, show_labels, beamer_mode)
-    return "", msg, status_md, fig
+    return msg, status_md, fig
 
 
 # ==============================================================================
@@ -992,6 +1088,12 @@ with gr.Blocks(
 
             feedback_output = gr.Markdown()
             personal_plot_output = gr.Plot(visible=False, label="Psychometrisches 2x2-Profil")
+            student_download_btn = gr.DownloadButton(
+                label="📥 Persönliche Ergebnisse herunterladen (.md)",
+                visible=False,
+                variant="secondary",
+                size="lg",
+            )
 
             sources_footer_md = gr.Markdown(
                 TRANSLATIONS["DE"]["sources_footer"],
@@ -1011,6 +1113,7 @@ with gr.Blocks(
                     part_b_header_md,
                     *ie4_inputs,
                     submit_btn,
+                    student_download_btn,
                     sources_footer_md,
                 ],
                 api_name=False
@@ -1019,81 +1122,107 @@ with gr.Blocks(
             submit_btn.click(
                 fn=process_student_submission,
                 inputs=[lang_state, custom_code_input, student_token_state] + nccs_inputs + ie4_inputs,
-                outputs=[feedback_output, personal_plot_output, student_token_state],
+                outputs=[feedback_output, personal_plot_output, student_download_btn, student_token_state],
                 api_name=False
             )
 
         # ----------------------------------------------------------------------
-        # TAB 2: LIVE-AUSWERTUNG HÖRSAAL (DOZENT)
+        # TAB 2: LIVE-AUSWERTUNG HÖRSAAL (DOZENT MIT PIN-SCHUTZ)
         # ----------------------------------------------------------------------
         with gr.TabItem("🖥️ 2. Live-Auswertung Hörsaal"):
-            with gr.Row():
-                with gr.Column(scale=4):
-                    lecturer_status_md = gr.Markdown(
-                        "<div class='beamer-stats'><span>👥 Eingegangene Antworten: <b>0 / 14</b></span></div>"
+            lecturer_unlocked_state = gr.State(value=False)
+
+            # PIN-Sperrbildschirm (standardmäßig sichtbar)
+            with gr.Column(visible=True) as lecturer_login_group:
+                gr.Markdown(
+                    "### 🔒 Geschützter Dozenten-Bereich (Beamer-Ansicht)\n"
+                    "Bitte geben Sie die Dozenten-PIN ein (hinterlegt als Secret `ADMIN_PIN` bzw. `PIN` im Space), "
+                    "um die Live-Auswertung für den Hörsaal freizuschalten."
+                )
+                with gr.Row():
+                    lecturer_pin_input = gr.Textbox(
+                        label="Dozenten-PIN",
+                        type="password",
+                        placeholder="PIN eingeben und mit Enter oder Button bestätigen...",
+                        scale=3,
                     )
-                with gr.Column(scale=1):
-                    refresh_btn = gr.Button(
-                        "🔄 Aktualisieren",
+                    unlock_btn = gr.Button(
+                        "🔓 Beamer-Ansicht freischalten",
                         variant="primary",
-                        size="lg"
+                        size="lg",
+                        scale=1,
                     )
+                login_msg_output = gr.Markdown()
 
-            lecturer_plot_output = gr.Plot(
-                value=build_compass_plot([], beamer_mode=True, title="Live-Auswertung Hörsaal (n = 0)"),
-                label="Psychometrisches 2x2-Profil"
-            )
-
-            with gr.Accordion("⚙️ Anzeige- & Admin-Optionen", open=False):
+            # Eigentliche Beamer-Ansicht (erst nach erfolgreicher PIN-Eingabe sichtbar)
+            with gr.Column(visible=False) as lecturer_content_group:
                 with gr.Row():
-                    expected_course_size = gr.Number(
-                        value=14,
-                        label="Kursgröße",
-                        precision=0,
-                        minimum=1,
-                        maximum=200
-                    )
-                    show_labels_checkbox = gr.Checkbox(
-                        value=True,
-                        label="Teilnehmer-Codes anzeigen"
-                    )
-                    beamer_mode_checkbox = gr.Checkbox(
-                        value=True,
-                        label="Beamer-Modus (Maximaler Kontrast & große Schrift)"
-                    )
-                with gr.Row():
-                    y_mode_dropdown = gr.Dropdown(
-                        choices=[
-                            "EKÜ: Externale Kontrollüberzeugung (1.0 bis 5.0)",
-                            "IKÜ: Internale Kontrollüberzeugung (1.0 bis 5.0)",
-                            "Netto-Internalität: IKÜ minus EKÜ (-4.0 bis +4.0)",
-                        ],
-                        value="EKÜ: Externale Kontrollüberzeugung (1.0 bis 5.0)",
-                        label="Y-Achse"
-                    )
-                    x_cutoff_radio = gr.Radio(
-                        choices=[
-                            "Empirischer Referenzwert (M = 3.30)",
-                            "Theoretische Skalenmitte (3.50)",
-                        ],
-                        value="Empirischer Referenzwert (M = 3.30)",
-                        label="Trennlinie X-Achse"
-                    )
-                with gr.Row():
-                    admin_pin_input = gr.Textbox(
-                        label="PIN",
-                        type="password",
-                        placeholder="PIN",
-                        scale=2
-                    )
-                    reset_btn = gr.Button("🗑️ Reset", variant="stop", scale=1)
-                    demo_btn = gr.Button("🧪 Demo-Daten", variant="secondary", scale=1)
-                admin_msg_output = gr.Markdown()
+                    with gr.Column(scale=3):
+                        lecturer_status_md = gr.Markdown(
+                            "<div class='beamer-stats'><span>👥 Eingegangene Antworten: <b>0 / 14</b></span></div>"
+                        )
+                    with gr.Column(scale=1):
+                        refresh_btn = gr.Button(
+                            "🔄 Aktualisieren",
+                            variant="primary",
+                            size="lg"
+                        )
+                    with gr.Column(scale=1):
+                        lock_btn = gr.Button(
+                            "🔒 Ansicht sperren",
+                            variant="secondary",
+                            size="lg"
+                        )
+
+                lecturer_plot_output = gr.Plot(
+                    value=build_compass_plot([], beamer_mode=True, title="Live-Auswertung Hörsaal (n = 0)"),
+                    label="Psychometrisches 2x2-Profil"
+                )
 
-            gr.Markdown(
-                TRANSLATIONS["DE"]["sources_footer"],
-                elem_classes=["sources-box"]
-            )
+                with gr.Accordion("⚙️ Anzeige- & Admin-Optionen", open=False):
+                    with gr.Row():
+                        expected_course_size = gr.Number(
+                            value=14,
+                            label="Kursgröße",
+                            precision=0,
+                            minimum=1,
+                            maximum=200
+                        )
+                        show_labels_checkbox = gr.Checkbox(
+                            value=True,
+                            label="Teilnehmer-Codes anzeigen"
+                        )
+                        beamer_mode_checkbox = gr.Checkbox(
+                            value=True,
+                            label="Beamer-Modus (Maximaler Kontrast & große Schrift)"
+                        )
+                    with gr.Row():
+                        y_mode_dropdown = gr.Dropdown(
+                            choices=[
+                                "EKÜ: Externale Kontrollüberzeugung (1.0 bis 5.0)",
+                                "IKÜ: Internale Kontrollüberzeugung (1.0 bis 5.0)",
+                                "Netto-Internalität: IKÜ minus EKÜ (-4.0 bis +4.0)",
+                            ],
+                            value="EKÜ: Externale Kontrollüberzeugung (1.0 bis 5.0)",
+                            label="Y-Achse"
+                        )
+                        x_cutoff_radio = gr.Radio(
+                            choices=[
+                                "Empirischer Referenzwert (M = 3.30)",
+                                "Theoretische Skalenmitte (3.50)",
+                            ],
+                            value="Empirischer Referenzwert (M = 3.30)",
+                            label="Trennlinie X-Achse"
+                        )
+                    with gr.Row():
+                        reset_btn = gr.Button("🗑️ Reset (Arbeitsspeicher leeren)", variant="stop", scale=1)
+                        demo_btn = gr.Button("🧪 Demo-Daten laden", variant="secondary", scale=1)
+                    admin_msg_output = gr.Markdown()
+
+                gr.Markdown(
+                    TRANSLATIONS["DE"]["sources_footer"],
+                    elem_classes=["sources-box"]
+                )
 
             plot_controls = [
                 expected_course_size,
@@ -1103,10 +1232,50 @@ with gr.Blocks(
                 beamer_mode_checkbox
             ]
 
+            dashboard_outputs = [
+                lecturer_status_md,
+                lecturer_plot_output,
+            ]
+
+            unlock_outputs = [
+                lecturer_unlocked_state,
+                lecturer_pin_input,
+                login_msg_output,
+                lecturer_login_group,
+                lecturer_content_group,
+                *dashboard_outputs,
+            ]
+
+            unlock_btn.click(
+                fn=unlock_lecturer_view,
+                inputs=[lecturer_pin_input] + plot_controls,
+                outputs=unlock_outputs,
+                api_name=False
+            )
+
+            lecturer_pin_input.submit(
+                fn=unlock_lecturer_view,
+                inputs=[lecturer_pin_input] + plot_controls,
+                outputs=unlock_outputs,
+                api_name=False
+            )
+
+            lock_btn.click(
+                fn=lock_lecturer_view,
+                inputs=[],
+                outputs=[
+                    lecturer_unlocked_state,
+                    login_msg_output,
+                    lecturer_login_group,
+                    lecturer_content_group,
+                ],
+                api_name=False
+            )
+
             refresh_btn.click(
                 fn=refresh_lecturer_dashboard,
                 inputs=plot_controls,
-                outputs=[lecturer_status_md, lecturer_plot_output],
+                outputs=dashboard_outputs,
                 api_name=False
             )
 
@@ -1114,21 +1283,21 @@ with gr.Blocks(
                 ctrl.change(
                     fn=refresh_lecturer_dashboard,
                     inputs=plot_controls,
-                    outputs=[lecturer_status_md, lecturer_plot_output],
+                    outputs=dashboard_outputs,
                     api_name=False
                 )
 
             reset_btn.click(
                 fn=handle_admin_reset,
-                inputs=[admin_pin_input] + plot_controls,
-                outputs=[admin_pin_input, admin_msg_output, lecturer_status_md, lecturer_plot_output],
+                inputs=[lecturer_unlocked_state] + plot_controls,
+                outputs=[admin_msg_output] + dashboard_outputs,
                 api_name=False
             )
 
             demo_btn.click(
                 fn=handle_admin_demo,
-                inputs=[admin_pin_input] + plot_controls,
-                outputs=[admin_pin_input, admin_msg_output, lecturer_status_md, lecturer_plot_output],
+                inputs=[lecturer_unlocked_state] + plot_controls,
+                outputs=[admin_msg_output] + dashboard_outputs,
                 api_name=False
             )