@brite-future-schools-contracts/contracts 2.0.12 → 2.0.16

package/dist/index.js

@@ -1,35 +1,47 @@
-import "./chunk-PDCM3NIB.js";
+import "./chunk-NCAGCDZV.js";
 import {
   attendanceContract,
   authContract,
   bulkUploadStudentsContract,
+  calendarContract,
+  calendarListTermsContract,
   changePasswordContract,
   createDepartmentContract,
+  createGradeContract,
   createStaffContract,
   createStudentContract,
+  createTermContract,
+  createYearContract,
   getByClassContract,
   getByStudentContract,
   getMeContract,
   getStaffByIdContract,
   getStudentByIdContract,
+  gradesContract,
   hrContract,
   linkGuardianContract,
   listClassesContract,
   listDepartmentsContract,
+  listGradesContract,
   listStaffContract,
   listStudentsContract,
   listTermsContract,
+  listYearsContract,
   loginContract,
   logoutContract,
   markAttendanceContract,
   refreshTokenContract,
   requestPasswordResetContract,
   resetPasswordContract,
+  setCurrentTermContract,
+  setCurrentYearContract,
   studentsContract,
   switchBranchContract,
   updateStaffStatusContract
-} from "./chunk-YQELK62C.js";
+} from "./chunk-ZHUFBLV5.js";
 import {
+  AcademicTermSchema,
+  AcademicYearSchema,
   AttendanceRecordInputSchema,
   AttendanceStatusSchema,
   BranchRefSchema,
@@ -40,20 +52,26 @@ import {
   ClassAttendanceRowSchema,
   ClassSummarySchema,
   CreateDepartmentInputSchema,
+  CreateGradeInputSchema,
   CreateStaffInputSchema,
   CreateStaffOutputSchema,
   CreateStudentInputSchema,
   CreateStudentOutputSchema,
+  CreateTermInputSchema,
+  CreateYearInputSchema,
   CuidSchema,
   DepartmentSchema,
   EmploymentTypeSchema,
+  GRADE_LEVELS,
   GenderSchema,
   GetByClassInputSchema,
   GetByStudentInputSchema,
   GradeLevelSchema,
+  GradeSchema,
   LinkGuardianInputSchema,
   ListStaffInputSchema,
   ListStudentsInputSchema,
+  ListTermsInputSchema,
   LoginInputSchema,
   LoginOutputSchema,
   LogoutInputSchema,
@@ -64,10 +82,11 @@ import {
   RefreshTokenOutputSchema,
   RequestPasswordResetInputSchema,
   ResetPasswordInputSchema,
-  RoleNameSchema,
   SessionUserOutputSchema,
   SessionUserRoleSchema,
   SessionUserSubRoleSchema,
+  SetCurrentTermInputSchema,
+  SetCurrentYearInputSchema,
   SoftDeleteSchema,
   StaffListItemSchema,
   StaffProfileSchema,
@@ -80,7 +99,7 @@ import {
   TimestampsSchema,
   UuidSchema,
   paginatedOutputSchema
-} from "./chunk-TTAZOH4Y.js";
+} from "./chunk-TBCAMVHG.js";
 
 // src/roles/helpers.ts
 function hasRole(user, role) {
@@ -238,6 +257,8 @@ function canAccessAdminDashboard(user) {
   return !isStudent(user) && !isParent(user) && !isPrefect(user) && !isOrgSponsor(user) && !isIndividualSponsor(user);
 }
 export {
+  AcademicTermSchema,
+  AcademicYearSchema,
   AttendanceRecordInputSchema,
   AttendanceStatusSchema,
   BranchRefSchema,
@@ -248,20 +269,26 @@ export {
   ClassAttendanceRowSchema,
   ClassSummarySchema,
   CreateDepartmentInputSchema,
+  CreateGradeInputSchema,
   CreateStaffInputSchema,
   CreateStaffOutputSchema,
   CreateStudentInputSchema,
   CreateStudentOutputSchema,
+  CreateTermInputSchema,
+  CreateYearInputSchema,
   CuidSchema,
   DepartmentSchema,
   EmploymentTypeSchema,
+  GRADE_LEVELS,
   GenderSchema,
   GetByClassInputSchema,
   GetByStudentInputSchema,
   GradeLevelSchema,
+  GradeSchema,
   LinkGuardianInputSchema,
   ListStaffInputSchema,
   ListStudentsInputSchema,
+  ListTermsInputSchema,
   LoginInputSchema,
   LoginOutputSchema,
   LogoutInputSchema,
@@ -272,10 +299,11 @@ export {
   RefreshTokenOutputSchema,
   RequestPasswordResetInputSchema,
   ResetPasswordInputSchema,
-  RoleNameSchema,
   SessionUserOutputSchema,
   SessionUserRoleSchema,
   SessionUserSubRoleSchema,
+  SetCurrentTermInputSchema,
+  SetCurrentYearInputSchema,
   SoftDeleteSchema,
   StaffListItemSchema,
   StaffProfileSchema,
@@ -290,6 +318,8 @@ export {
   attendanceContract,
   authContract,
   bulkUploadStudentsContract,
+  calendarContract,
+  calendarListTermsContract,
   canAccessAdminDashboard,
   canAssignClassTeacher,
   canManageStaff,
@@ -303,13 +333,17 @@ export {
   canViewStudentList,
   changePasswordContract,
   createDepartmentContract,
+  createGradeContract,
   createStaffContract,
   createStudentContract,
+  createTermContract,
+  createYearContract,
   getByClassContract,
   getByStudentContract,
   getMeContract,
   getStaffByIdContract,
   getStudentByIdContract,
+  gradesContract,
   hrContract,
   isBoardingMaster,
   isBursar,
@@ -343,9 +377,11 @@ export {
   linkGuardianContract,
   listClassesContract,
   listDepartmentsContract,
+  listGradesContract,
   listStaffContract,
   listStudentsContract,
   listTermsContract,
+  listYearsContract,
   loginContract,
   logoutContract,
   markAttendanceContract,
@@ -353,6 +389,8 @@ export {
   refreshTokenContract,
   requestPasswordResetContract,
   resetPasswordContract,
+  setCurrentTermContract,
+  setCurrentYearContract,
   studentsContract,
   switchBranchContract,
   updateStaffStatusContract

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/roles/helpers.ts","../src/permissions/index.ts"],"sourcesContent":["/**\n * Brite Future Schools — bfs-contracts\n * Role helper functions.\n *\n * Every helper takes a SessionUser and returns a boolean.\n * Use these instead of hardcoded role string comparisons everywhere.\n *\n * Usage:\n *   import { isProprietor, isPrincipal } from '@brite-future-schools-contracts/contracts'\n *   if (isProprietor(user)) { ... }\n *\n * Phase History:\n *   Phase 0.1 (2026-06-05): Initial creation\n *   Phase 0.2 (2026-06-06): Roles reconciled against schema — added\n *                            SCHOOL_NURSE, LAB_TECHNICIAN, SPORTS_COACH,\n *                            CARETAKER, SECURITY, KITCHEN_STAFF, IT_ADMIN,\n *                            ORG_SPONSOR, INDIVIDUAL_SPONSOR, KITCHEN_MANAGER,\n *                            BOARDING_MASTER, PREFECT\n *\n * @module src/roles/helpers\n * @since Phase 0.1\n */\n\nimport type { RoleName, SessionUser } from './types.js'\n\n// ── Private helper ─────────────────────────────────────────────────────────────\n\nfunction hasRole(user: SessionUser, role: RoleName): boolean {\n  return user.roles.some(\n    (r) => r.name === role && r.branchId === user.activeBranchId,\n  )\n}\n\n// ── Senior leadership ──────────────────────────────────────────────────────────\n\nexport function isProprietor(user: SessionUser): boolean {\n  return hasRole(user, 'PROPRIETOR')\n}\n\nexport function isDirector(user: SessionUser): boolean {\n  return hasRole(user, 'DIRECTOR')\n}\n\nexport function isSystemAdmin(user: SessionUser): boolean {\n  return hasRole(user, 'SYSTEM_ADMIN')\n}\n\nexport function isPrincipal(user: SessionUser): boolean {\n  return hasRole(user, 'PRINCIPAL')\n}\n\nexport function isDeputyPrincipal(user: SessionUser): boolean {\n  return hasRole(user, 'DEPUTY_PRINCIPAL')\n}\n\nexport function isSeniorLeadership(user: SessionUser): boolean {\n  return (\n    isProprietor(user) ||\n    isDirector(user) ||\n    isPrincipal(user) ||\n    isDeputyPrincipal(user)\n  )\n}\n\n// ── Academic staff ─────────────────────────────────────────────────────────────\n\nexport function isHOD(user: SessionUser): boolean {\n  return hasRole(user, 'HOD')\n}\n\nexport function isClassTeacher(user: SessionUser): boolean {\n  return hasRole(user, 'CLASS_TEACHER')\n}\n\nexport function isSubjectTeacher(user: SessionUser): boolean {\n  return hasRole(user, 'SUBJECT_TEACHER')\n}\n\n// ── Support staff ──────────────────────────────────────────────────────────────\n\nexport function isSchoolNurse(user: SessionUser): boolean {\n  return hasRole(user, 'SCHOOL_NURSE')\n}\n\nexport function isLibrarian(user: SessionUser): boolean {\n  return hasRole(user, 'LIBRARIAN')\n}\n\nexport function isLabTechnician(user: SessionUser): boolean {\n  return hasRole(user, 'LAB_TECHNICIAN')\n}\n\nexport function isSportsCoach(user: SessionUser): boolean {\n  return hasRole(user, 'SPORTS_COACH')\n}\n\nexport function isCounsellor(user: SessionUser): boolean {\n  return hasRole(user, 'COUNSELLOR')\n}\n\nexport function isCaretaker(user: SessionUser): boolean {\n  return hasRole(user, 'CARETAKER')\n}\n\nexport function isSecurity(user: SessionUser): boolean {\n  return hasRole(user, 'SECURITY')\n}\n\nexport function isBoardingMaster(user: SessionUser): boolean {\n  return hasRole(user, 'BOARDING_MASTER')\n}\n\n// ── Operations ─────────────────────────────────────────────────────────────────\n\nexport function isBursar(user: SessionUser): boolean {\n  return hasRole(user, 'BURSAR')\n}\n\nexport function isHrAdmin(user: SessionUser): boolean {\n  return hasRole(user, 'HR_ADMIN')\n}\n\nexport function isDriver(user: SessionUser): boolean {\n  return hasRole(user, 'DRIVER')\n}\n\nexport function isKitchenStaff(user: SessionUser): boolean {\n  return hasRole(user, 'KITCHEN_STAFF')\n}\n\nexport function isKitchenManager(user: SessionUser): boolean {\n  return hasRole(user, 'KITCHEN_MANAGER')\n}\n\nexport function isItAdmin(user: SessionUser): boolean {\n  return hasRole(user, 'IT_ADMIN')\n}\n\n// ── Students and parents ───────────────────────────────────────────────────────\n\nexport function isPrefect(user: SessionUser): boolean {\n  return hasRole(user, 'PREFECT')\n}\n\nexport function isStudent(user: SessionUser): boolean {\n  return hasRole(user, 'STUDENT')\n}\n\nexport function isParent(user: SessionUser): boolean {\n  return hasRole(user, 'PARENT')\n}\n\n// ── Sponsors ───────────────────────────────────────────────────────────────────\n\nexport function isOrgSponsor(user: SessionUser): boolean {\n  return hasRole(user, 'ORG_SPONSOR')\n}\n\nexport function isIndividualSponsor(user: SessionUser): boolean {\n  return hasRole(user, 'INDIVIDUAL_SPONSOR')\n}\n\n// ── Broad groupings ────────────────────────────────────────────────────────────\n\nexport function isStaff(user: SessionUser): boolean {\n  const staffRoles: RoleName[] = [\n    'PROPRIETOR',\n    'DIRECTOR',\n    'SYSTEM_ADMIN',\n    'PRINCIPAL',\n    'DEPUTY_PRINCIPAL',\n    'HOD',\n    'CLASS_TEACHER',\n    'SUBJECT_TEACHER',\n    'BURSAR',\n    'HR_ADMIN',\n    'SCHOOL_NURSE',\n    'LIBRARIAN',\n    'LAB_TECHNICIAN',\n    'SPORTS_COACH',\n    'COUNSELLOR',\n    'CARETAKER',\n    'SECURITY',\n    'KITCHEN_STAFF',\n    'KITCHEN_MANAGER',\n    'DRIVER',\n    'IT_ADMIN',\n    'BOARDING_MASTER',\n    'PREFECT',\n  ]\n  return user.roles.some(\n    (r) =>\n      staffRoles.includes(r.name) && r.branchId === user.activeBranchId,\n  )\n}","/**\n * Brite Future Schools — bfs-contracts\n * Permission helper functions.\n *\n * Answer \"can this user do X?\" — not \"is this user role Y?\".\n * Every UI gate and API guard must use these instead of raw role checks.\n *\n * Phase History:\n *   Phase 2 (2026-06-08): Initial creation — attendance, staff, students,\n *                          dashboard permissions\n *   Phase 3 (2026-06-10): Added canAssignClassTeacher, canViewClasses\n *\n * @module src/permissions/index\n * @since Phase 2\n */\n\nimport type { SessionUser } from '../roles/types.js'\nimport {\n    isProprietor,\n    isDirector,\n    isSystemAdmin,\n    isPrincipal,\n    isDeputyPrincipal,\n    isHOD,\n    isClassTeacher,\n    isHrAdmin,\n    isStudent,\n    isParent,\n    isOrgSponsor,\n    isIndividualSponsor,\n    isPrefect,\n} from '../roles/helpers.js'\n\n// ── Attendance ─────────────────────────────────────────────────────────────────\n\n/** Class teacher marks roll for their own class; senior staff can mark any. */\nexport function canMarkClassAttendance(user: SessionUser): boolean {\n    return (\n        isClassTeacher(user) ||\n        isHOD(user) ||\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isSystemAdmin(user)\n    )\n}\n\n/** Who can read class attendance records. */\nexport function canViewClassAttendance(user: SessionUser): boolean {\n    return (\n        canMarkClassAttendance(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n/** Who can record staff attendance. */\nexport function canMarkStaffAttendance(user: SessionUser): boolean {\n    return (\n        isHrAdmin(user) ||\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isSystemAdmin(user)\n    )\n}\n\n/** Who can view staff attendance records. */\nexport function canViewStaffAttendance(user: SessionUser): boolean {\n    return (\n        canMarkStaffAttendance(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n// ── Staff ──────────────────────────────────────────────────────────────────────\n\n/** Who can view the staff list. */\nexport function canViewStaffList(user: SessionUser): boolean {\n    return (\n        isHrAdmin(user) ||\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isSystemAdmin(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n/** Who can create or edit staff records. */\nexport function canManageStaff(user: SessionUser): boolean {\n    return (\n        isHrAdmin(user) ||\n        isPrincipal(user) ||\n        isSystemAdmin(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n// ── Students ───────────────────────────────────────────────────────────────────\n\n/** Who can view the student list. */\nexport function canViewStudentList(user: SessionUser): boolean {\n    return (\n        isClassTeacher(user) ||\n        isHOD(user) ||\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isHrAdmin(user) ||\n        isSystemAdmin(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n/** Who can enrol or edit student records. */\nexport function canManageStudents(user: SessionUser): boolean {\n    return (\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isHrAdmin(user) ||\n        isSystemAdmin(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n// ── Classes ────────────────────────────────────────────────────────────────────\n\n/** Who can view the classes list and class detail. */\nexport function canViewClasses(user: SessionUser): boolean {\n    return (\n        isClassTeacher(user) ||\n        isHOD(user) ||\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isSystemAdmin(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n/** Who can assign or reassign a class teacher to a class. */\nexport function canAssignClassTeacher(user: SessionUser): boolean {\n    return (\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isSystemAdmin(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n// ── Dashboard ──────────────────────────────────────────────────────────────────\n\n/** Anyone with a staff-level or above role can access the admin dashboard. */\nexport function canAccessAdminDashboard(user: SessionUser): boolean {\n    return (\n        !isStudent(user) &&\n        !isParent(user) &&\n        !isPrefect(user) &&\n        !isOrgSponsor(user) &&\n        !isIndividualSponsor(user)\n    )\n}"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,SAAS,QAAQ,MAAmB,MAAyB;AAC3D,SAAO,KAAK,MAAM;AAAA,IAChB,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,aAAa,KAAK;AAAA,EAChD;AACF;AAIO,SAAS,aAAa,MAA4B;AACvD,SAAO,QAAQ,MAAM,YAAY;AACnC;AAEO,SAAS,WAAW,MAA4B;AACrD,SAAO,QAAQ,MAAM,UAAU;AACjC;AAEO,SAAS,cAAc,MAA4B;AACxD,SAAO,QAAQ,MAAM,cAAc;AACrC;AAEO,SAAS,YAAY,MAA4B;AACtD,SAAO,QAAQ,MAAM,WAAW;AAClC;AAEO,SAAS,kBAAkB,MAA4B;AAC5D,SAAO,QAAQ,MAAM,kBAAkB;AACzC;AAEO,SAAS,mBAAmB,MAA4B;AAC7D,SACE,aAAa,IAAI,KACjB,WAAW,IAAI,KACf,YAAY,IAAI,KAChB,kBAAkB,IAAI;AAE1B;AAIO,SAAS,MAAM,MAA4B;AAChD,SAAO,QAAQ,MAAM,KAAK;AAC5B;AAEO,SAAS,eAAe,MAA4B;AACzD,SAAO,QAAQ,MAAM,eAAe;AACtC;AAEO,SAAS,iBAAiB,MAA4B;AAC3D,SAAO,QAAQ,MAAM,iBAAiB;AACxC;AAIO,SAAS,cAAc,MAA4B;AACxD,SAAO,QAAQ,MAAM,cAAc;AACrC;AAEO,SAAS,YAAY,MAA4B;AACtD,SAAO,QAAQ,MAAM,WAAW;AAClC;AAEO,SAAS,gBAAgB,MAA4B;AAC1D,SAAO,QAAQ,MAAM,gBAAgB;AACvC;AAEO,SAAS,cAAc,MAA4B;AACxD,SAAO,QAAQ,MAAM,cAAc;AACrC;AAEO,SAAS,aAAa,MAA4B;AACvD,SAAO,QAAQ,MAAM,YAAY;AACnC;AAEO,SAAS,YAAY,MAA4B;AACtD,SAAO,QAAQ,MAAM,WAAW;AAClC;AAEO,SAAS,WAAW,MAA4B;AACrD,SAAO,QAAQ,MAAM,UAAU;AACjC;AAEO,SAAS,iBAAiB,MAA4B;AAC3D,SAAO,QAAQ,MAAM,iBAAiB;AACxC;AAIO,SAAS,SAAS,MAA4B;AACnD,SAAO,QAAQ,MAAM,QAAQ;AAC/B;AAEO,SAAS,UAAU,MAA4B;AACpD,SAAO,QAAQ,MAAM,UAAU;AACjC;AAEO,SAAS,SAAS,MAA4B;AACnD,SAAO,QAAQ,MAAM,QAAQ;AAC/B;AAEO,SAAS,eAAe,MAA4B;AACzD,SAAO,QAAQ,MAAM,eAAe;AACtC;AAEO,SAAS,iBAAiB,MAA4B;AAC3D,SAAO,QAAQ,MAAM,iBAAiB;AACxC;AAEO,SAAS,UAAU,MAA4B;AACpD,SAAO,QAAQ,MAAM,UAAU;AACjC;AAIO,SAAS,UAAU,MAA4B;AACpD,SAAO,QAAQ,MAAM,SAAS;AAChC;AAEO,SAAS,UAAU,MAA4B;AACpD,SAAO,QAAQ,MAAM,SAAS;AAChC;AAEO,SAAS,SAAS,MAA4B;AACnD,SAAO,QAAQ,MAAM,QAAQ;AAC/B;AAIO,SAAS,aAAa,MAA4B;AACvD,SAAO,QAAQ,MAAM,aAAa;AACpC;AAEO,SAAS,oBAAoB,MAA4B;AAC9D,SAAO,QAAQ,MAAM,oBAAoB;AAC3C;AAIO,SAAS,QAAQ,MAA4B;AAClD,QAAM,aAAyB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,SAAO,KAAK,MAAM;AAAA,IAChB,CAAC,MACC,WAAW,SAAS,EAAE,IAAI,KAAK,EAAE,aAAa,KAAK;AAAA,EACvD;AACF;;;AC9JO,SAAS,uBAAuB,MAA4B;AAC/D,SACI,eAAe,IAAI,KACnB,MAAM,IAAI,KACV,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,cAAc,IAAI;AAE1B;AAGO,SAAS,uBAAuB,MAA4B;AAC/D,SACI,uBAAuB,IAAI,KAC3B,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAGO,SAAS,uBAAuB,MAA4B;AAC/D,SACI,UAAU,IAAI,KACd,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,cAAc,IAAI;AAE1B;AAGO,SAAS,uBAAuB,MAA4B;AAC/D,SACI,uBAAuB,IAAI,KAC3B,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAKO,SAAS,iBAAiB,MAA4B;AACzD,SACI,UAAU,IAAI,KACd,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,cAAc,IAAI,KAClB,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAGO,SAAS,eAAe,MAA4B;AACvD,SACI,UAAU,IAAI,KACd,YAAY,IAAI,KAChB,cAAc,IAAI,KAClB,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAKO,SAAS,mBAAmB,MAA4B;AAC3D,SACI,eAAe,IAAI,KACnB,MAAM,IAAI,KACV,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,UAAU,IAAI,KACd,cAAc,IAAI,KAClB,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAGO,SAAS,kBAAkB,MAA4B;AAC1D,SACI,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,UAAU,IAAI,KACd,cAAc,IAAI,KAClB,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAKO,SAAS,eAAe,MAA4B;AACvD,SACI,eAAe,IAAI,KACnB,MAAM,IAAI,KACV,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,cAAc,IAAI,KAClB,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAGO,SAAS,sBAAsB,MAA4B;AAC9D,SACI,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,cAAc,IAAI,KAClB,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAKO,SAAS,wBAAwB,MAA4B;AAChE,SACI,CAAC,UAAU,IAAI,KACf,CAAC,SAAS,IAAI,KACd,CAAC,UAAU,IAAI,KACf,CAAC,aAAa,IAAI,KAClB,CAAC,oBAAoB,IAAI;AAEjC;","names":[]}
+{"version":3,"sources":["../src/roles/helpers.ts","../src/permissions/index.ts"],"sourcesContent":["/**\n * Brite Future Schools — bfs-contracts\n * Role helper functions.\n *\n * Every helper takes a SessionUser and returns a boolean.\n * Use these instead of hardcoded role string comparisons everywhere.\n *\n * Usage:\n *   import { isProprietor, isPrincipal } from '@brite-future-schools-contracts/contracts'\n *   if (isProprietor(user)) { ... }\n *\n * Phase History:\n *   Phase 0.1 (2026-06-05): Initial creation\n *   Phase 0.2 (2026-06-06): Roles reconciled against schema — added\n *                            SCHOOL_NURSE, LAB_TECHNICIAN, SPORTS_COACH,\n *                            CARETAKER, SECURITY, KITCHEN_STAFF, IT_ADMIN,\n *                            ORG_SPONSOR, INDIVIDUAL_SPONSOR, KITCHEN_MANAGER,\n *                            BOARDING_MASTER, PREFECT\n *\n * @module src/roles/helpers\n * @since Phase 0.1\n */\n\nimport type { RoleName, SessionUser } from './types.js'\n\n// ── Private helper ─────────────────────────────────────────────────────────────\n\nfunction hasRole(user: SessionUser, role: RoleName): boolean {\n  return user.roles.some(\n    (r) => r.name === role && r.branchId === user.activeBranchId,\n  )\n}\n\n// ── Senior leadership ──────────────────────────────────────────────────────────\n\nexport function isProprietor(user: SessionUser): boolean {\n  return hasRole(user, 'PROPRIETOR')\n}\n\nexport function isDirector(user: SessionUser): boolean {\n  return hasRole(user, 'DIRECTOR')\n}\n\nexport function isSystemAdmin(user: SessionUser): boolean {\n  return hasRole(user, 'SYSTEM_ADMIN')\n}\n\nexport function isPrincipal(user: SessionUser): boolean {\n  return hasRole(user, 'PRINCIPAL')\n}\n\nexport function isDeputyPrincipal(user: SessionUser): boolean {\n  return hasRole(user, 'DEPUTY_PRINCIPAL')\n}\n\nexport function isSeniorLeadership(user: SessionUser): boolean {\n  return (\n    isProprietor(user) ||\n    isDirector(user) ||\n    isPrincipal(user) ||\n    isDeputyPrincipal(user)\n  )\n}\n\n// ── Academic staff ─────────────────────────────────────────────────────────────\n\nexport function isHOD(user: SessionUser): boolean {\n  return hasRole(user, 'HOD')\n}\n\nexport function isClassTeacher(user: SessionUser): boolean {\n  return hasRole(user, 'CLASS_TEACHER')\n}\n\nexport function isSubjectTeacher(user: SessionUser): boolean {\n  return hasRole(user, 'SUBJECT_TEACHER')\n}\n\n// ── Support staff ──────────────────────────────────────────────────────────────\n\nexport function isSchoolNurse(user: SessionUser): boolean {\n  return hasRole(user, 'SCHOOL_NURSE')\n}\n\nexport function isLibrarian(user: SessionUser): boolean {\n  return hasRole(user, 'LIBRARIAN')\n}\n\nexport function isLabTechnician(user: SessionUser): boolean {\n  return hasRole(user, 'LAB_TECHNICIAN')\n}\n\nexport function isSportsCoach(user: SessionUser): boolean {\n  return hasRole(user, 'SPORTS_COACH')\n}\n\nexport function isCounsellor(user: SessionUser): boolean {\n  return hasRole(user, 'COUNSELLOR')\n}\n\nexport function isCaretaker(user: SessionUser): boolean {\n  return hasRole(user, 'CARETAKER')\n}\n\nexport function isSecurity(user: SessionUser): boolean {\n  return hasRole(user, 'SECURITY')\n}\n\nexport function isBoardingMaster(user: SessionUser): boolean {\n  return hasRole(user, 'BOARDING_MASTER')\n}\n\n// ── Operations ─────────────────────────────────────────────────────────────────\n\nexport function isBursar(user: SessionUser): boolean {\n  return hasRole(user, 'BURSAR')\n}\n\nexport function isHrAdmin(user: SessionUser): boolean {\n  return hasRole(user, 'HR_ADMIN')\n}\n\nexport function isDriver(user: SessionUser): boolean {\n  return hasRole(user, 'DRIVER')\n}\n\nexport function isKitchenStaff(user: SessionUser): boolean {\n  return hasRole(user, 'KITCHEN_STAFF')\n}\n\nexport function isKitchenManager(user: SessionUser): boolean {\n  return hasRole(user, 'KITCHEN_MANAGER')\n}\n\nexport function isItAdmin(user: SessionUser): boolean {\n  return hasRole(user, 'IT_ADMIN')\n}\n\n// ── Students and parents ───────────────────────────────────────────────────────\n\nexport function isPrefect(user: SessionUser): boolean {\n  return hasRole(user, 'PREFECT')\n}\n\nexport function isStudent(user: SessionUser): boolean {\n  return hasRole(user, 'STUDENT')\n}\n\nexport function isParent(user: SessionUser): boolean {\n  return hasRole(user, 'PARENT')\n}\n\n// ── Sponsors ───────────────────────────────────────────────────────────────────\n\nexport function isOrgSponsor(user: SessionUser): boolean {\n  return hasRole(user, 'ORG_SPONSOR')\n}\n\nexport function isIndividualSponsor(user: SessionUser): boolean {\n  return hasRole(user, 'INDIVIDUAL_SPONSOR')\n}\n\n// ── Broad groupings ────────────────────────────────────────────────────────────\n\nexport function isStaff(user: SessionUser): boolean {\n  const staffRoles: RoleName[] = [\n    'PROPRIETOR',\n    'DIRECTOR',\n    'SYSTEM_ADMIN',\n    'PRINCIPAL',\n    'DEPUTY_PRINCIPAL',\n    'HOD',\n    'CLASS_TEACHER',\n    'SUBJECT_TEACHER',\n    'BURSAR',\n    'HR_ADMIN',\n    'SCHOOL_NURSE',\n    'LIBRARIAN',\n    'LAB_TECHNICIAN',\n    'SPORTS_COACH',\n    'COUNSELLOR',\n    'CARETAKER',\n    'SECURITY',\n    'KITCHEN_STAFF',\n    'KITCHEN_MANAGER',\n    'DRIVER',\n    'IT_ADMIN',\n    'BOARDING_MASTER',\n    'PREFECT',\n  ]\n  return user.roles.some(\n    (r) =>\n      staffRoles.includes(r.name) && r.branchId === user.activeBranchId,\n  )\n}","/**\n * Brite Future Schools — bfs-contracts\n * Permission helper functions.\n *\n * Answer \"can this user do X?\" — not \"is this user role Y?\".\n * Every UI gate and API guard must use these instead of raw role checks.\n *\n * Phase History:\n *   Phase 2 (2026-06-08): Initial creation — attendance, staff, students,\n *                          dashboard permissions\n *   Phase 3 (2026-06-10): Added canAssignClassTeacher, canViewClasses\n *\n * @module src/permissions/index\n * @since Phase 2\n */\n\nimport type { SessionUser } from '../roles/types.js'\nimport {\n    isProprietor,\n    isDirector,\n    isSystemAdmin,\n    isPrincipal,\n    isDeputyPrincipal,\n    isHOD,\n    isClassTeacher,\n    isHrAdmin,\n    isStudent,\n    isParent,\n    isOrgSponsor,\n    isIndividualSponsor,\n    isPrefect,\n} from '../roles/helpers.js'\n\n// ── Attendance ─────────────────────────────────────────────────────────────────\n\n/** Class teacher marks roll for their own class; senior staff can mark any. */\nexport function canMarkClassAttendance(user: SessionUser): boolean {\n    return (\n        isClassTeacher(user) ||\n        isHOD(user) ||\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isSystemAdmin(user)\n    )\n}\n\n/** Who can read class attendance records. */\nexport function canViewClassAttendance(user: SessionUser): boolean {\n    return (\n        canMarkClassAttendance(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n/** Who can record staff attendance. */\nexport function canMarkStaffAttendance(user: SessionUser): boolean {\n    return (\n        isHrAdmin(user) ||\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isSystemAdmin(user)\n    )\n}\n\n/** Who can view staff attendance records. */\nexport function canViewStaffAttendance(user: SessionUser): boolean {\n    return (\n        canMarkStaffAttendance(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n// ── Staff ──────────────────────────────────────────────────────────────────────\n\n/** Who can view the staff list. */\nexport function canViewStaffList(user: SessionUser): boolean {\n    return (\n        isHrAdmin(user) ||\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isSystemAdmin(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n/** Who can create or edit staff records. */\nexport function canManageStaff(user: SessionUser): boolean {\n    return (\n        isHrAdmin(user) ||\n        isPrincipal(user) ||\n        isSystemAdmin(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n// ── Students ───────────────────────────────────────────────────────────────────\n\n/** Who can view the student list. */\nexport function canViewStudentList(user: SessionUser): boolean {\n    return (\n        isClassTeacher(user) ||\n        isHOD(user) ||\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isHrAdmin(user) ||\n        isSystemAdmin(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n/** Who can enrol or edit student records. */\nexport function canManageStudents(user: SessionUser): boolean {\n    return (\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isHrAdmin(user) ||\n        isSystemAdmin(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n// ── Classes ────────────────────────────────────────────────────────────────────\n\n/** Who can view the classes list and class detail. */\nexport function canViewClasses(user: SessionUser): boolean {\n    return (\n        isClassTeacher(user) ||\n        isHOD(user) ||\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isSystemAdmin(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n/** Who can assign or reassign a class teacher to a class. */\nexport function canAssignClassTeacher(user: SessionUser): boolean {\n    return (\n        isPrincipal(user) ||\n        isDeputyPrincipal(user) ||\n        isSystemAdmin(user) ||\n        isDirector(user) ||\n        isProprietor(user)\n    )\n}\n\n// ── Dashboard ──────────────────────────────────────────────────────────────────\n\n/** Anyone with a staff-level or above role can access the admin dashboard. */\nexport function canAccessAdminDashboard(user: SessionUser): boolean {\n    return (\n        !isStudent(user) &&\n        !isParent(user) &&\n        !isPrefect(user) &&\n        !isOrgSponsor(user) &&\n        !isIndividualSponsor(user)\n    )\n}"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,SAAS,QAAQ,MAAmB,MAAyB;AAC3D,SAAO,KAAK,MAAM;AAAA,IAChB,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,aAAa,KAAK;AAAA,EAChD;AACF;AAIO,SAAS,aAAa,MAA4B;AACvD,SAAO,QAAQ,MAAM,YAAY;AACnC;AAEO,SAAS,WAAW,MAA4B;AACrD,SAAO,QAAQ,MAAM,UAAU;AACjC;AAEO,SAAS,cAAc,MAA4B;AACxD,SAAO,QAAQ,MAAM,cAAc;AACrC;AAEO,SAAS,YAAY,MAA4B;AACtD,SAAO,QAAQ,MAAM,WAAW;AAClC;AAEO,SAAS,kBAAkB,MAA4B;AAC5D,SAAO,QAAQ,MAAM,kBAAkB;AACzC;AAEO,SAAS,mBAAmB,MAA4B;AAC7D,SACE,aAAa,IAAI,KACjB,WAAW,IAAI,KACf,YAAY,IAAI,KAChB,kBAAkB,IAAI;AAE1B;AAIO,SAAS,MAAM,MAA4B;AAChD,SAAO,QAAQ,MAAM,KAAK;AAC5B;AAEO,SAAS,eAAe,MAA4B;AACzD,SAAO,QAAQ,MAAM,eAAe;AACtC;AAEO,SAAS,iBAAiB,MAA4B;AAC3D,SAAO,QAAQ,MAAM,iBAAiB;AACxC;AAIO,SAAS,cAAc,MAA4B;AACxD,SAAO,QAAQ,MAAM,cAAc;AACrC;AAEO,SAAS,YAAY,MAA4B;AACtD,SAAO,QAAQ,MAAM,WAAW;AAClC;AAEO,SAAS,gBAAgB,MAA4B;AAC1D,SAAO,QAAQ,MAAM,gBAAgB;AACvC;AAEO,SAAS,cAAc,MAA4B;AACxD,SAAO,QAAQ,MAAM,cAAc;AACrC;AAEO,SAAS,aAAa,MAA4B;AACvD,SAAO,QAAQ,MAAM,YAAY;AACnC;AAEO,SAAS,YAAY,MAA4B;AACtD,SAAO,QAAQ,MAAM,WAAW;AAClC;AAEO,SAAS,WAAW,MAA4B;AACrD,SAAO,QAAQ,MAAM,UAAU;AACjC;AAEO,SAAS,iBAAiB,MAA4B;AAC3D,SAAO,QAAQ,MAAM,iBAAiB;AACxC;AAIO,SAAS,SAAS,MAA4B;AACnD,SAAO,QAAQ,MAAM,QAAQ;AAC/B;AAEO,SAAS,UAAU,MAA4B;AACpD,SAAO,QAAQ,MAAM,UAAU;AACjC;AAEO,SAAS,SAAS,MAA4B;AACnD,SAAO,QAAQ,MAAM,QAAQ;AAC/B;AAEO,SAAS,eAAe,MAA4B;AACzD,SAAO,QAAQ,MAAM,eAAe;AACtC;AAEO,SAAS,iBAAiB,MAA4B;AAC3D,SAAO,QAAQ,MAAM,iBAAiB;AACxC;AAEO,SAAS,UAAU,MAA4B;AACpD,SAAO,QAAQ,MAAM,UAAU;AACjC;AAIO,SAAS,UAAU,MAA4B;AACpD,SAAO,QAAQ,MAAM,SAAS;AAChC;AAEO,SAAS,UAAU,MAA4B;AACpD,SAAO,QAAQ,MAAM,SAAS;AAChC;AAEO,SAAS,SAAS,MAA4B;AACnD,SAAO,QAAQ,MAAM,QAAQ;AAC/B;AAIO,SAAS,aAAa,MAA4B;AACvD,SAAO,QAAQ,MAAM,aAAa;AACpC;AAEO,SAAS,oBAAoB,MAA4B;AAC9D,SAAO,QAAQ,MAAM,oBAAoB;AAC3C;AAIO,SAAS,QAAQ,MAA4B;AAClD,QAAM,aAAyB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,SAAO,KAAK,MAAM;AAAA,IAChB,CAAC,MACC,WAAW,SAAS,EAAE,IAAI,KAAK,EAAE,aAAa,KAAK;AAAA,EACvD;AACF;;;AC9JO,SAAS,uBAAuB,MAA4B;AAC/D,SACI,eAAe,IAAI,KACnB,MAAM,IAAI,KACV,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,cAAc,IAAI;AAE1B;AAGO,SAAS,uBAAuB,MAA4B;AAC/D,SACI,uBAAuB,IAAI,KAC3B,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAGO,SAAS,uBAAuB,MAA4B;AAC/D,SACI,UAAU,IAAI,KACd,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,cAAc,IAAI;AAE1B;AAGO,SAAS,uBAAuB,MAA4B;AAC/D,SACI,uBAAuB,IAAI,KAC3B,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAKO,SAAS,iBAAiB,MAA4B;AACzD,SACI,UAAU,IAAI,KACd,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,cAAc,IAAI,KAClB,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAGO,SAAS,eAAe,MAA4B;AACvD,SACI,UAAU,IAAI,KACd,YAAY,IAAI,KAChB,cAAc,IAAI,KAClB,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAKO,SAAS,mBAAmB,MAA4B;AAC3D,SACI,eAAe,IAAI,KACnB,MAAM,IAAI,KACV,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,UAAU,IAAI,KACd,cAAc,IAAI,KAClB,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAGO,SAAS,kBAAkB,MAA4B;AAC1D,SACI,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,UAAU,IAAI,KACd,cAAc,IAAI,KAClB,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAKO,SAAS,eAAe,MAA4B;AACvD,SACI,eAAe,IAAI,KACnB,MAAM,IAAI,KACV,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,cAAc,IAAI,KAClB,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAGO,SAAS,sBAAsB,MAA4B;AAC9D,SACI,YAAY,IAAI,KAChB,kBAAkB,IAAI,KACtB,cAAc,IAAI,KAClB,WAAW,IAAI,KACf,aAAa,IAAI;AAEzB;AAKO,SAAS,wBAAwB,MAA4B;AAChE,SACI,CAAC,UAAU,IAAI,KACf,CAAC,SAAS,IAAI,KACd,CAAC,UAAU,IAAI,KACf,CAAC,aAAa,IAAI,KAClB,CAAC,oBAAoB,IAAI;AAEjC;","names":[]}

package/dist/schemas/index.cjs

@@ -30,6 +30,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/schemas/index.ts
 var schemas_exports = {};
 __export(schemas_exports, {
+  AcademicTermSchema: () => AcademicTermSchema,
+  AcademicYearSchema: () => AcademicYearSchema,
   AttendanceRecordInputSchema: () => AttendanceRecordInputSchema,
   AttendanceStatusSchema: () => AttendanceStatusSchema,
   BranchRefSchema: () => BranchRefSchema,
@@ -40,20 +42,26 @@ __export(schemas_exports, {
   ClassAttendanceRowSchema: () => ClassAttendanceRowSchema,
   ClassSummarySchema: () => ClassSummarySchema,
   CreateDepartmentInputSchema: () => CreateDepartmentInputSchema,
+  CreateGradeInputSchema: () => CreateGradeInputSchema,
   CreateStaffInputSchema: () => CreateStaffInputSchema,
   CreateStaffOutputSchema: () => CreateStaffOutputSchema,
   CreateStudentInputSchema: () => CreateStudentInputSchema,
   CreateStudentOutputSchema: () => CreateStudentOutputSchema,
+  CreateTermInputSchema: () => CreateTermInputSchema,
+  CreateYearInputSchema: () => CreateYearInputSchema,
   CuidSchema: () => CuidSchema,
   DepartmentSchema: () => DepartmentSchema,
   EmploymentTypeSchema: () => EmploymentTypeSchema,
+  GRADE_LEVELS: () => GRADE_LEVELS,
   GenderSchema: () => GenderSchema,
   GetByClassInputSchema: () => GetByClassInputSchema,
   GetByStudentInputSchema: () => GetByStudentInputSchema,
   GradeLevelSchema: () => GradeLevelSchema,
+  GradeSchema: () => GradeSchema,
   LinkGuardianInputSchema: () => LinkGuardianInputSchema,
   ListStaffInputSchema: () => ListStaffInputSchema,
   ListStudentsInputSchema: () => ListStudentsInputSchema,
+  ListTermsInputSchema: () => ListTermsInputSchema,
   LoginInputSchema: () => LoginInputSchema,
   LoginOutputSchema: () => LoginOutputSchema,
   LogoutInputSchema: () => LogoutInputSchema,
@@ -64,10 +72,11 @@ __export(schemas_exports, {
   RefreshTokenOutputSchema: () => RefreshTokenOutputSchema,
   RequestPasswordResetInputSchema: () => RequestPasswordResetInputSchema,
   ResetPasswordInputSchema: () => ResetPasswordInputSchema,
-  RoleNameSchema: () => RoleNameSchema,
   SessionUserOutputSchema: () => SessionUserOutputSchema,
   SessionUserRoleSchema: () => SessionUserRoleSchema,
   SessionUserSubRoleSchema: () => SessionUserSubRoleSchema,
+  SetCurrentTermInputSchema: () => SetCurrentTermInputSchema,
+  SetCurrentYearInputSchema: () => SetCurrentYearInputSchema,
   SoftDeleteSchema: () => SoftDeleteSchema,
   StaffListItemSchema: () => StaffListItemSchema,
   StaffProfileSchema: () => StaffProfileSchema,
@@ -98,15 +107,15 @@ var SoftDeleteSchema = z.object({
   })
 });
 var PaginationInputSchema = z.object({
-  cursor: CuidSchema.optional().meta({
+  cursor: z.string().optional().meta({
     description: "Opaque cursor from the previous page response"
   }),
-  limit: z.int().min(1).max(100).default(20).meta({ description: "Number of items to return (1\u2013100, default 20)" })
+  limit: z.int().min(1).max(200).default(20).meta({ description: "Number of items to return (1\u2013200, default 20)" })
 });
 function paginatedOutputSchema(itemSchema) {
   return z.object({
     items: z.array(itemSchema),
-    nextCursor: CuidSchema.nullable().meta({
+    nextCursor: z.string().nullable().meta({
       description: "Pass as `cursor` on the next request; null when no more pages"
     }),
     total: z.int().nonnegative().meta({ description: "Total matching records (before pagination)" })
@@ -196,35 +205,6 @@ var EmploymentTypeSchema = z3.enum([
   "temporary",
   "intern"
 ]);
-var RoleNameSchema = z3.enum([
-  "PROPRIETOR",
-  "DIRECTOR",
-  "SYSTEM_ADMIN",
-  "PRINCIPAL",
-  "DEPUTY_PRINCIPAL",
-  "HOD",
-  "CLASS_TEACHER",
-  "SUBJECT_TEACHER",
-  "BURSAR",
-  "HR_ADMIN",
-  "SCHOOL_NURSE",
-  "LIBRARIAN",
-  "LAB_TECHNICIAN",
-  "SPORTS_COACH",
-  "COUNSELLOR",
-  "CARETAKER",
-  "SECURITY",
-  "KITCHEN_STAFF",
-  "KITCHEN_MANAGER",
-  "DRIVER",
-  "IT_ADMIN",
-  "BOARDING_MASTER",
-  "PREFECT",
-  "STUDENT",
-  "PARENT",
-  "ORG_SPONSOR",
-  "INDIVIDUAL_SPONSOR"
-]);
 var CreateStaffInputSchema = z3.object({
   // Personal details
   firstName: z3.string().min(1).max(100),
@@ -233,9 +213,9 @@ var CreateStaffInputSchema = z3.object({
   email: z3.email(),
   phone: z3.string().min(9).max(30),
   nationalId: z3.string().min(1).max(20),
-  // Role assignment
-  roleName: RoleNameSchema.meta({
-    description: "System role to assign \u2014 determines dashboard access and permissions"
+  // Role assignment — DB-driven, any valid role code accepted
+  roleName: z3.string().min(1).meta({
+    description: "Role code from the roles table \u2014 e.g. TEACHER, PRINCIPAL"
   }),
   isPrimaryRole: z3.boolean().default(true),
   // Employment details
@@ -246,24 +226,19 @@ var CreateStaffInputSchema = z3.object({
   employmentType: EmploymentTypeSchema,
   contractStart: z3.iso.date().meta({ description: "ISO date, e.g. 2026-01-15" }),
   contractEnd: z3.iso.date().optional(),
-  // Payroll
-  basicSalary: z3.number().positive(),
-  houseAllowance: z3.number().nonnegative().default(0),
-  transportAllowance: z3.number().nonnegative().default(0),
-  helbDeduction: z3.number().nonnegative().default(0),
-  saccoDeduction: z3.number().nonnegative().default(0),
-  // Banking
+  // Banking (optional at creation — can be completed later)
   bankName: z3.string().max(100).optional(),
   bankAccount: z3.string().max(30).optional(),
   bankBranch: z3.string().max(100).optional(),
-  // Statutory
+  // Statutory (optional at creation)
   tscNumber: z3.string().max(30).optional(),
   kraPin: z3.string().max(20).optional(),
   nhifNo: z3.string().max(20).optional(),
-  nssfNo: z3.string().max(20).optional()
+  nssfNo: z3.string().max(20).optional(),
+  helbNo: z3.string().max(20).optional(),
+  saccoNo: z3.string().max(20).optional()
 });
 var StaffProfileSchema = z3.object({
-  // Staff record
   id: UuidSchema,
   userId: UuidSchema,
   branchId: UuidSchema,
@@ -276,28 +251,23 @@ var StaffProfileSchema = z3.object({
   kraPin: z3.string().nullable(),
   nhifNo: z3.string().nullable(),
   nssfNo: z3.string().nullable(),
+  helbNo: z3.string().nullable(),
+  saccoNo: z3.string().nullable(),
   designation: z3.string(),
   employmentType: EmploymentTypeSchema,
   contractStart: z3.string(),
   contractEnd: z3.string().nullable(),
-  basicSalary: z3.string(),
-  houseAllowance: z3.string(),
-  transportAllowance: z3.string(),
-  helbDeduction: z3.string().nullable(),
-  saccoDeduction: z3.string().nullable(),
   bankName: z3.string().nullable(),
   bankAccount: z3.string().nullable(),
   bankBranch: z3.string().nullable(),
   status: z3.string(),
   createdAt: z3.string(),
-  // From users join
   email: z3.string(),
   mustChangePassword: z3.boolean(),
-  // Department (nullable — not all staff are in a department)
   departmentId: UuidSchema.nullable(),
   departmentName: z3.string().nullable(),
-  // Primary role
-  roleName: RoleNameSchema.nullable(),
+  // Role — DB-driven code string, not a fixed enum
+  roleName: z3.string().nullable(),
   roleId: UuidSchema.nullable()
 });
 var StaffListItemSchema = z3.object({
@@ -312,7 +282,7 @@ var StaffListItemSchema = z3.object({
   employmentType: EmploymentTypeSchema,
   status: z3.string(),
   departmentName: z3.string().nullable(),
-  roleName: RoleNameSchema.nullable(),
+  roleName: z3.string().nullable(),
   createdAt: z3.string()
 });
 var ListStaffInputSchema = PaginationInputSchema.extend({
@@ -320,14 +290,13 @@ var ListStaffInputSchema = PaginationInputSchema.extend({
     description: "Search by name or email"
   }),
   departmentId: UuidSchema.optional(),
-  roleName: RoleNameSchema.optional(),
+  roleName: z3.string().optional(),
   status: z3.enum(["active", "inactive"]).optional()
 });
 var CreateStaffOutputSchema = z3.object({
   staffId: UuidSchema,
   userId: UuidSchema,
   email: z3.string(),
-  /** Temp password was emailed — not returned in response for security */
   emailSent: z3.boolean()
 });
 var DepartmentSchema = z3.object({
@@ -578,8 +547,80 @@ var StudentAttendanceRowSchema = z5.object({
   classId: UuidSchema,
   className: z5.string()
 });
+
+// src/schemas/calendar.ts
+var z6 = __toESM(require("zod"), 1);
+var AcademicYearSchema = z6.object({
+  id: z6.string().uuid(),
+  branchId: z6.string().uuid(),
+  name: z6.string(),
+  startDate: z6.string(),
+  endDate: z6.string(),
+  isCurrent: z6.boolean(),
+  createdAt: z6.string()
+});
+var CreateYearInputSchema = z6.object({
+  name: z6.string().min(1).max(50),
+  startDate: z6.string().regex(/^\d{4}-\d{2}-\d{2}$/, "Must be YYYY-MM-DD"),
+  endDate: z6.string().regex(/^\d{4}-\d{2}-\d{2}$/, "Must be YYYY-MM-DD")
+});
+var SetCurrentYearInputSchema = z6.object({
+  yearId: z6.string().uuid()
+});
+var AcademicTermSchema = z6.object({
+  id: z6.string().uuid(),
+  branchId: z6.string().uuid(),
+  academicYearId: z6.string().uuid(),
+  name: z6.string(),
+  startDate: z6.string(),
+  endDate: z6.string(),
+  isCurrent: z6.boolean(),
+  createdAt: z6.string()
+});
+var CreateTermInputSchema = z6.object({
+  academicYearId: z6.string().uuid(),
+  name: z6.string().min(1).max(50),
+  startDate: z6.string().regex(/^\d{4}-\d{2}-\d{2}$/, "Must be YYYY-MM-DD"),
+  endDate: z6.string().regex(/^\d{4}-\d{2}-\d{2}$/, "Must be YYYY-MM-DD")
+});
+var SetCurrentTermInputSchema = z6.object({
+  termId: z6.string().uuid()
+});
+var ListTermsInputSchema = z6.object({
+  yearId: z6.string().uuid().optional()
+});
+
+// src/schemas/grades.ts
+var z7 = __toESM(require("zod"), 1);
+var GRADE_LEVELS = [
+  "PP1",
+  "PP2",
+  "G1",
+  "G2",
+  "G3",
+  "G4",
+  "G5",
+  "G6",
+  "G7",
+  "G8",
+  "G9"
+];
+var GradeSchema = z7.object({
+  id: z7.string().uuid(),
+  branchId: z7.string().uuid(),
+  name: z7.string(),
+  level: GradeLevelSchema,
+  description: z7.string().nullable()
+});
+var CreateGradeInputSchema = z7.object({
+  name: z7.string().min(1).max(50),
+  level: GradeLevelSchema,
+  description: z7.string().max(300).optional()
+});
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  AcademicTermSchema,
+  AcademicYearSchema,
   AttendanceRecordInputSchema,
   AttendanceStatusSchema,
   BranchRefSchema,
@@ -590,20 +631,26 @@ var StudentAttendanceRowSchema = z5.object({
   ClassAttendanceRowSchema,
   ClassSummarySchema,
   CreateDepartmentInputSchema,
+  CreateGradeInputSchema,
   CreateStaffInputSchema,
   CreateStaffOutputSchema,
   CreateStudentInputSchema,
   CreateStudentOutputSchema,
+  CreateTermInputSchema,
+  CreateYearInputSchema,
   CuidSchema,
   DepartmentSchema,
   EmploymentTypeSchema,
+  GRADE_LEVELS,
   GenderSchema,
   GetByClassInputSchema,
   GetByStudentInputSchema,
   GradeLevelSchema,
+  GradeSchema,
   LinkGuardianInputSchema,
   ListStaffInputSchema,
   ListStudentsInputSchema,
+  ListTermsInputSchema,
   LoginInputSchema,
   LoginOutputSchema,
   LogoutInputSchema,
@@ -614,10 +661,11 @@ var StudentAttendanceRowSchema = z5.object({
   RefreshTokenOutputSchema,
   RequestPasswordResetInputSchema,
   ResetPasswordInputSchema,
-  RoleNameSchema,
   SessionUserOutputSchema,
   SessionUserRoleSchema,
   SessionUserSubRoleSchema,
+  SetCurrentTermInputSchema,
+  SetCurrentYearInputSchema,
   SoftDeleteSchema,
   StaffListItemSchema,
   StaffProfileSchema,