update api and add more features

app/Http/Controllers/Api/Parents/ParentController.php

@@ -148,10 +148,14 @@ class ParentController extends BaseApiController
             $payload['emergency_contacts'] ?? []
         );
 
+        $createdCount = count($result['created_student_ids']);
+        $skipped = $result['skipped'] ?? [];
+
         return response()->json([
             'ok' => true,
             'created_student_ids' => $result['created_student_ids'],
-        ], 201);
+            'skipped' => $skipped,
+        ], $createdCount > 0 ? 201 : 200);
     }
 
     public function updateStudent(ParentStudentUpdateRequest $request, int $studentId): JsonResponse
@@ -283,10 +287,21 @@ class ParentController extends BaseApiController
     }
 
     /**
-     * @return int|JsonResponse Authenticated parent user id, or 401 JSON for this controller's legacy `{ ok }` shape.
+     * @return int|JsonResponse Effective primary-parent user id, or 401 JSON for this controller's legacy `{ ok }` shape.
+     *
+     * `parent.access` middleware resolves second parents (user_type=secondary)
+     * and authorized users (user_type=tertiary) to their primary parent and
+     * stashes the result as `primary_parent_id` on the request. If we are
+     * called outside that middleware we fall back to the authenticated id.
      */
     private function parentIdOrUnauthorized(): int|JsonResponse
     {
+        $request = request();
+        $primary = (int) ($request?->attributes?->get('primary_parent_id') ?? 0);
+        if ($primary > 0) {
+            return $primary;
+        }
+
         $parentId = (int) (auth()->id() ?? 0);
         if ($parentId <= 0) {
             return response()->json(['ok' => false, 'message' => 'Unauthorized.'], 401);