@studious-lms/server 1.15.0 → 1.16.0

package/dist/services/userPrivacy.js

@@ -1,184 +0,0 @@
-/**
- * User privacy service — data export and account erasure (anonymization).
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7184e3ea-1921-5a91-936e-6fa9a92f8a03")}catch(e){}}();
-import { TRPCError } from "@trpc/server";
-import { randomBytes } from "node:crypto";
-import { hash } from "bcryptjs";
-import { prisma } from "../lib/prisma.js";
-import { deleteSessionsByUserId } from "../models/auth.js";
-async function assertAccountCanBeErased(userId) {
-    const user = await prisma.user.findUnique({
-        where: { id: userId },
-        select: {
-            id: true,
-            teacherIn: {
-                select: {
-                    id: true,
-                    name: true,
-                    _count: { select: { students: true } },
-                },
-            },
-            _count: {
-                select: {
-                    assignments: true,
-                    createdLabChats: true,
-                },
-            },
-        },
-    });
-    if (!user) {
-        throw new TRPCError({ code: "NOT_FOUND", message: "User not found" });
-    }
-    const classesWithStudents = user.teacherIn.filter((cls) => cls._count.students > 0);
-    if (classesWithStudents.length > 0) {
-        throw new TRPCError({
-            code: "PRECONDITION_FAILED",
-            message: "Delete or transfer your classes before deleting your account.",
-        });
-    }
-    if (user._count.assignments > 0) {
-        throw new TRPCError({
-            code: "PRECONDITION_FAILED",
-            message: "Remove or reassign your assignments before deleting your account.",
-        });
-    }
-    if (user._count.createdLabChats > 0) {
-        throw new TRPCError({
-            code: "PRECONDITION_FAILED",
-            message: "Remove your AI lab chats before deleting your account.",
-        });
-    }
-}
-/** Export a portable snapshot of the authenticated user's personal data. */
-export async function exportUserData(userId) {
-    const user = await prisma.user.findUnique({
-        where: { id: userId },
-        select: {
-            id: true,
-            username: true,
-            email: true,
-            verified: true,
-            termsAcceptedAt: true,
-            termsVersion: true,
-            profile: true,
-            teacherIn: {
-                select: { id: true, name: true, subject: true, section: true },
-            },
-            studentIn: {
-                select: { id: true, name: true, subject: true, section: true },
-            },
-            schoolMemberships: {
-                select: {
-                    role: true,
-                    status: true,
-                    school: { select: { id: true, name: true } },
-                },
-            },
-            submissions: {
-                select: {
-                    id: true,
-                    createdAt: true,
-                    submittedAt: true,
-                    gradeReceived: true,
-                    extendedResponse: true,
-                    assignment: { select: { id: true, title: true, classId: true } },
-                },
-            },
-            events: {
-                select: {
-                    id: true,
-                    name: true,
-                    startTime: true,
-                    endTime: true,
-                    location: true,
-                    remarks: true,
-                },
-            },
-            sentMessages: {
-                select: {
-                    id: true,
-                    content: true,
-                    createdAt: true,
-                    conversationId: true,
-                },
-                take: 500,
-                orderBy: { createdAt: "desc" },
-            },
-            notificationsReceived: {
-                select: {
-                    id: true,
-                    title: true,
-                    content: true,
-                    read: true,
-                    createdAt: true,
-                },
-                take: 200,
-                orderBy: { createdAt: "desc" },
-            },
-        },
-    });
-    if (!user) {
-        throw new TRPCError({ code: "NOT_FOUND", message: "User not found" });
-    }
-    return {
-        exportedAt: new Date().toISOString(),
-        user,
-    };
-}
-/**
- * Erase personal account data by anonymizing the user record and removing
- * sessions and memberships. Educational records tied to classes (e.g.
- * submissions) remain with an anonymized identity where required.
- */
-export async function deleteUserAccount(userId) {
-    await assertAccountCanBeErased(userId);
-    await deleteSessionsByUserId(userId);
-    const anonUsername = `deleted_${userId.slice(0, 8)}`;
-    const anonEmail = `deleted+${userId}@studious.invalid`;
-    const randomPassword = await hash(randomBytes(32).toString("hex"), 10);
-    await prisma.$transaction([
-        prisma.conversationMember.deleteMany({ where: { userId } }),
-        prisma.notification.deleteMany({
-            where: { OR: [{ senderId: userId }, { receiverId: userId }] },
-        }),
-        prisma.schoolMembership.deleteMany({ where: { userId } }),
-        prisma.permission.deleteMany({
-            where: { OR: [{ userId }, { grantedById: userId }] },
-        }),
-        prisma.user.update({
-            where: { id: userId },
-            data: {
-                teacherIn: { set: [] },
-                studentIn: { set: [] },
-                departments: { set: [] },
-                tags: { set: [] },
-                specificAssignments: { set: [] },
-                presentAttendance: { set: [] },
-                lateAttendance: { set: [] },
-                absentAttendance: { set: [] },
-                schoolId: null,
-                username: anonUsername,
-                email: anonEmail,
-                password: randomPassword,
-                verified: false,
-                termsAcceptedAt: null,
-                termsVersion: null,
-                profile: {
-                    update: {
-                        displayName: null,
-                        bio: null,
-                        location: null,
-                        website: null,
-                        profilePicture: null,
-                        profilePictureThumbnail: null,
-                    },
-                },
-            },
-        }),
-    ]);
-    return { success: true };
-}
-//# sourceMappingURL=userPrivacy.js.map
-//# debugId=7184e3ea-1921-5a91-936e-6fa9a92f8a03

package/dist/services/userPrivacy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"userPrivacy.js","sources":["services/userPrivacy.ts"],"sourceRoot":"/","sourcesContent":["/**\n * User privacy service — data export and account erasure (anonymization).\n */\nimport { TRPCError } from \"@trpc/server\";\nimport { randomBytes } from \"node:crypto\";\nimport { hash } from \"bcryptjs\";\nimport { prisma } from \"../lib/prisma.js\";\nimport { deleteSessionsByUserId } from \"../models/auth.js\";\n\nasync function assertAccountCanBeErased(userId: string) {\n  const user = await prisma.user.findUnique({\n    where: { id: userId },\n    select: {\n      id: true,\n      teacherIn: {\n        select: {\n          id: true,\n          name: true,\n          _count: { select: { students: true } },\n        },\n      },\n      _count: {\n        select: {\n          assignments: true,\n          createdLabChats: true,\n        },\n      },\n    },\n  });\n\n  if (!user) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"User not found\" });\n  }\n\n  const classesWithStudents = user.teacherIn.filter(\n    (cls) => cls._count.students > 0,\n  );\n  if (classesWithStudents.length > 0) {\n    throw new TRPCError({\n      code: \"PRECONDITION_FAILED\",\n      message:\n        \"Delete or transfer your classes before deleting your account.\",\n    });\n  }\n\n  if (user._count.assignments > 0) {\n    throw new TRPCError({\n      code: \"PRECONDITION_FAILED\",\n      message:\n        \"Remove or reassign your assignments before deleting your account.\",\n    });\n  }\n\n  if (user._count.createdLabChats > 0) {\n    throw new TRPCError({\n      code: \"PRECONDITION_FAILED\",\n      message: \"Remove your AI lab chats before deleting your account.\",\n    });\n  }\n}\n\n/** Export a portable snapshot of the authenticated user's personal data. */\nexport async function exportUserData(userId: string) {\n  const user = await prisma.user.findUnique({\n    where: { id: userId },\n    select: {\n      id: true,\n      username: true,\n      email: true,\n      verified: true,\n      termsAcceptedAt: true,\n      termsVersion: true,\n      profile: true,\n      teacherIn: {\n        select: { id: true, name: true, subject: true, section: true },\n      },\n      studentIn: {\n        select: { id: true, name: true, subject: true, section: true },\n      },\n      schoolMemberships: {\n        select: {\n          role: true,\n          status: true,\n          school: { select: { id: true, name: true } },\n        },\n      },\n      submissions: {\n        select: {\n          id: true,\n          createdAt: true,\n          submittedAt: true,\n          gradeReceived: true,\n          extendedResponse: true,\n          assignment: { select: { id: true, title: true, classId: true } },\n        },\n      },\n      events: {\n        select: {\n          id: true,\n          name: true,\n          startTime: true,\n          endTime: true,\n          location: true,\n          remarks: true,\n        },\n      },\n      sentMessages: {\n        select: {\n          id: true,\n          content: true,\n          createdAt: true,\n          conversationId: true,\n        },\n        take: 500,\n        orderBy: { createdAt: \"desc\" },\n      },\n      notificationsReceived: {\n        select: {\n          id: true,\n          title: true,\n          content: true,\n          read: true,\n          createdAt: true,\n        },\n        take: 200,\n        orderBy: { createdAt: \"desc\" },\n      },\n    },\n  });\n\n  if (!user) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"User not found\" });\n  }\n\n  return {\n    exportedAt: new Date().toISOString(),\n    user,\n  };\n}\n\n/**\n * Erase personal account data by anonymizing the user record and removing\n * sessions and memberships. Educational records tied to classes (e.g.\n * submissions) remain with an anonymized identity where required.\n */\nexport async function deleteUserAccount(userId: string) {\n  await assertAccountCanBeErased(userId);\n  await deleteSessionsByUserId(userId);\n\n  const anonUsername = `deleted_${userId.slice(0, 8)}`;\n  const anonEmail = `deleted+${userId}@studious.invalid`;\n  const randomPassword = await hash(randomBytes(32).toString(\"hex\"), 10);\n\n  await prisma.$transaction([\n    prisma.conversationMember.deleteMany({ where: { userId } }),\n    prisma.notification.deleteMany({\n      where: { OR: [{ senderId: userId }, { receiverId: userId }] },\n    }),\n    prisma.schoolMembership.deleteMany({ where: { userId } }),\n    prisma.permission.deleteMany({\n      where: { OR: [{ userId }, { grantedById: userId }] },\n    }),\n    prisma.user.update({\n      where: { id: userId },\n      data: {\n        teacherIn: { set: [] },\n        studentIn: { set: [] },\n        departments: { set: [] },\n        tags: { set: [] },\n        specificAssignments: { set: [] },\n        presentAttendance: { set: [] },\n        lateAttendance: { set: [] },\n        absentAttendance: { set: [] },\n        schoolId: null,\n        username: anonUsername,\n        email: anonEmail,\n        password: randomPassword,\n        verified: false,\n        termsAcceptedAt: null,\n        termsVersion: null,\n        profile: {\n          update: {\n            displayName: null,\n            bio: null,\n            location: null,\n            website: null,\n            profilePicture: null,\n            profilePictureThumbnail: null,\n          },\n        },\n      },\n    }),\n  ]);\n\n  return { success: true };\n}\n"],"names":[],"mappings":"AAAA;;GAEG;;;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,KAAK,UAAU,wBAAwB,CAAC,MAAc;IACpD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QACxC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;QACrB,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,SAAS,EAAE;gBACT,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;iBACvC;aACF;YACD,MAAM,EAAE;gBACN,MAAM,EAAE;oBACN,WAAW,EAAE,IAAI;oBACjB,eAAe,EAAE,IAAI;iBACtB;aACF;SACF;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAC/C,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CACjC,CAAC;IACF,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EACL,+DAA+D;SAClE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EACL,mEAAmE;SACtE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,wDAAwD;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IACjD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QACxC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;QACrB,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,IAAI;YACd,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE;gBACT,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;aAC/D;YACD,SAAS,EAAE;gBACT,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;aAC/D;YACD,iBAAiB,EAAE;gBACjB,MAAM,EAAE;oBACN,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;iBAC7C;aACF;YACD,WAAW,EAAE;gBACX,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,SAAS,EAAE,IAAI;oBACf,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,IAAI;oBACnB,gBAAgB,EAAE,IAAI;oBACtB,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;iBACjE;aACF;YACD,MAAM,EAAE;gBACN,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,IAAI;iBACd;aACF;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,cAAc,EAAE,IAAI;iBACrB;gBACD,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;aAC/B;YACD,qBAAqB,EAAE;gBACrB,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE,IAAI;iBAChB;gBACD,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;aAC/B;SACF;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,OAAO;QACL,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,IAAI;KACL,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc;IACpD,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAErC,MAAM,YAAY,GAAG,WAAW,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACrD,MAAM,SAAS,GAAG,WAAW,MAAM,mBAAmB,CAAC;IACvD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAEvE,MAAM,MAAM,CAAC,YAAY,CAAC;QACxB,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;QAC3D,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;YAC7B,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE;SAC9D,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;QACzD,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YAC3B,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE;SACrD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACjB,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,IAAI,EAAE;gBACJ,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBACtB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBACtB,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBACxB,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBACjB,mBAAmB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAChC,iBAAiB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC9B,cAAc,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC3B,gBAAgB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC7B,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,YAAY;gBACtB,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,KAAK;gBACf,eAAe,EAAE,IAAI;gBACrB,YAAY,EAAE,IAAI;gBAClB,OAAO,EAAE;oBACP,MAAM,EAAE;wBACN,WAAW,EAAE,IAAI;wBACjB,GAAG,EAAE,IAAI;wBACT,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE,IAAI;wBACb,cAAc,EAAE,IAAI;wBACpB,uBAAuB,EAAE,IAAI;qBAC9B;iBACF;aACF;SACF,CAAC;KACH,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC","debug_id":"7184e3ea-1921-5a91-936e-6fa9a92f8a03"}

package/prisma/migrations/20260611120000_add_user_terms_acceptance/migration.sql

@@ -1,3 +0,0 @@
--- AlterTable
-ALTER TABLE "User" ADD COLUMN "termsAcceptedAt" TIMESTAMP(3),
-ADD COLUMN "termsVersion" TEXT;

package/src/lib/legal.ts

@@ -1,2 +0,0 @@
-/** Must match the "Last updated" month in the client privacy/terms copy. */
-export const CURRENT_TERMS_VERSION = "2025-11";

package/src/services/userPrivacy.ts

@@ -1,196 +0,0 @@
-/**
- * User privacy service — data export and account erasure (anonymization).
- */
-import { TRPCError } from "@trpc/server";
-import { randomBytes } from "node:crypto";
-import { hash } from "bcryptjs";
-import { prisma } from "../lib/prisma.js";
-import { deleteSessionsByUserId } from "../models/auth.js";
-
-async function assertAccountCanBeErased(userId: string) {
-  const user = await prisma.user.findUnique({
-    where: { id: userId },
-    select: {
-      id: true,
-      teacherIn: {
-        select: {
-          id: true,
-          name: true,
-          _count: { select: { students: true } },
-        },
-      },
-      _count: {
-        select: {
-          assignments: true,
-          createdLabChats: true,
-        },
-      },
-    },
-  });
-
-  if (!user) {
-    throw new TRPCError({ code: "NOT_FOUND", message: "User not found" });
-  }
-
-  const classesWithStudents = user.teacherIn.filter(
-    (cls) => cls._count.students > 0,
-  );
-  if (classesWithStudents.length > 0) {
-    throw new TRPCError({
-      code: "PRECONDITION_FAILED",
-      message:
-        "Delete or transfer your classes before deleting your account.",
-    });
-  }
-
-  if (user._count.assignments > 0) {
-    throw new TRPCError({
-      code: "PRECONDITION_FAILED",
-      message:
-        "Remove or reassign your assignments before deleting your account.",
-    });
-  }
-
-  if (user._count.createdLabChats > 0) {
-    throw new TRPCError({
-      code: "PRECONDITION_FAILED",
-      message: "Remove your AI lab chats before deleting your account.",
-    });
-  }
-}
-
-/** Export a portable snapshot of the authenticated user's personal data. */
-export async function exportUserData(userId: string) {
-  const user = await prisma.user.findUnique({
-    where: { id: userId },
-    select: {
-      id: true,
-      username: true,
-      email: true,
-      verified: true,
-      termsAcceptedAt: true,
-      termsVersion: true,
-      profile: true,
-      teacherIn: {
-        select: { id: true, name: true, subject: true, section: true },
-      },
-      studentIn: {
-        select: { id: true, name: true, subject: true, section: true },
-      },
-      schoolMemberships: {
-        select: {
-          role: true,
-          status: true,
-          school: { select: { id: true, name: true } },
-        },
-      },
-      submissions: {
-        select: {
-          id: true,
-          createdAt: true,
-          submittedAt: true,
-          gradeReceived: true,
-          extendedResponse: true,
-          assignment: { select: { id: true, title: true, classId: true } },
-        },
-      },
-      events: {
-        select: {
-          id: true,
-          name: true,
-          startTime: true,
-          endTime: true,
-          location: true,
-          remarks: true,
-        },
-      },
-      sentMessages: {
-        select: {
-          id: true,
-          content: true,
-          createdAt: true,
-          conversationId: true,
-        },
-        take: 500,
-        orderBy: { createdAt: "desc" },
-      },
-      notificationsReceived: {
-        select: {
-          id: true,
-          title: true,
-          content: true,
-          read: true,
-          createdAt: true,
-        },
-        take: 200,
-        orderBy: { createdAt: "desc" },
-      },
-    },
-  });
-
-  if (!user) {
-    throw new TRPCError({ code: "NOT_FOUND", message: "User not found" });
-  }
-
-  return {
-    exportedAt: new Date().toISOString(),
-    user,
-  };
-}
-
-/**
- * Erase personal account data by anonymizing the user record and removing
- * sessions and memberships. Educational records tied to classes (e.g.
- * submissions) remain with an anonymized identity where required.
- */
-export async function deleteUserAccount(userId: string) {
-  await assertAccountCanBeErased(userId);
-  await deleteSessionsByUserId(userId);
-
-  const anonUsername = `deleted_${userId.slice(0, 8)}`;
-  const anonEmail = `deleted+${userId}@studious.invalid`;
-  const randomPassword = await hash(randomBytes(32).toString("hex"), 10);
-
-  await prisma.$transaction([
-    prisma.conversationMember.deleteMany({ where: { userId } }),
-    prisma.notification.deleteMany({
-      where: { OR: [{ senderId: userId }, { receiverId: userId }] },
-    }),
-    prisma.schoolMembership.deleteMany({ where: { userId } }),
-    prisma.permission.deleteMany({
-      where: { OR: [{ userId }, { grantedById: userId }] },
-    }),
-    prisma.user.update({
-      where: { id: userId },
-      data: {
-        teacherIn: { set: [] },
-        studentIn: { set: [] },
-        departments: { set: [] },
-        tags: { set: [] },
-        specificAssignments: { set: [] },
-        presentAttendance: { set: [] },
-        lateAttendance: { set: [] },
-        absentAttendance: { set: [] },
-        schoolId: null,
-        username: anonUsername,
-        email: anonEmail,
-        password: randomPassword,
-        verified: false,
-        termsAcceptedAt: null,
-        termsVersion: null,
-        profile: {
-          update: {
-            displayName: null,
-            bio: null,
-            location: null,
-            website: null,
-            profilePicture: null,
-            profilePictureThumbnail: null,
-          },
-        },
-      },
-    }),
-  ]);
-
-  return { success: true };
-}

package/tests/helpers/registerInput.ts

@@ -1,20 +0,0 @@
-import { CURRENT_TERMS_VERSION } from "../../src/lib/legal.js";
-
-export function registerInput(
-  overrides: {
-    username: string;
-    email: string;
-    password?: string;
-    confirmPassword?: string;
-  },
-) {
-  const password = overrides.password ?? "password_is_1234";
-  return {
-    username: overrides.username,
-    email: overrides.email,
-    password,
-    confirmPassword: overrides.confirmPassword ?? password,
-    agreeToTerms: true as const,
-    termsVersion: CURRENT_TERMS_VERSION,
-  };
-}

package/tests/unit/services/aiChatStream.test.ts

@@ -1,92 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import {
-  enrichStreamPartsWithGeneratedFiles,
-  finalizeDeferredToolParts,
-} from '../../../src/services/aiChatStream.js';
-
-describe('enrichStreamPartsWithGeneratedFiles', () => {
-  it('links generated files to generate_document tool parts by title', () => {
-    const parts = enrichStreamPartsWithGeneratedFiles(
-      [
-        { type: 'text', text: 'Here is your worksheet.' },
-        {
-          type: 'tool',
-          toolCallId: 'tc-1',
-          toolName: 'generate_document',
-          title: 'Algebra Review',
-          status: 'completed',
-        },
-      ],
-      [{ title: 'Algebra Review', fileId: 'file-1', fileName: 'Algebra_Review.pdf' }],
-    );
-
-    expect(parts[1]).toMatchObject({
-      type: 'tool',
-      fileId: 'file-1',
-      fileName: 'Algebra_Review.pdf',
-    });
-  });
-
-  it('falls back to order when titles do not match', () => {
-    const parts = enrichStreamPartsWithGeneratedFiles(
-      [
-        {
-          type: 'tool',
-          toolCallId: 'tc-1',
-          toolName: 'generate_document',
-          status: 'completed',
-        },
-      ],
-      [{ title: 'Doc A', fileId: 'file-a', fileName: 'doc_a.pdf' }],
-    );
-
-    expect(parts[0]).toMatchObject({ fileId: 'file-a' });
-  });
-
-  it('marks linked generate_document tools completed', () => {
-    const parts = enrichStreamPartsWithGeneratedFiles(
-      [
-        {
-          type: 'tool',
-          toolCallId: 'tc-1',
-          toolName: 'generate_document',
-          title: 'Slides',
-          status: 'executing',
-        },
-      ],
-      [{ title: 'Slides', fileId: 'file-1', fileName: 'slides.pptx' }],
-    );
-
-    expect(parts[0]).toMatchObject({ status: 'completed', fileId: 'file-1' });
-  });
-});
-
-describe('finalizeDeferredToolParts', () => {
-  it('marks generate_document without a file as failed', () => {
-    const parts = finalizeDeferredToolParts([
-      {
-        type: 'tool',
-        toolCallId: 'tc-1',
-        toolName: 'generate_document',
-        title: 'Missing',
-        status: 'executing',
-      },
-    ]);
-
-    expect(parts[0]).toMatchObject({ status: 'failed' });
-  });
-
-  it('leaves other tools unchanged', () => {
-    const parts = finalizeDeferredToolParts([
-      {
-        type: 'tool',
-        toolCallId: 'tc-1',
-        toolName: 'propose_assignment',
-        title: 'HW',
-        status: 'completed',
-      },
-    ]);
-
-    expect(parts[0]).toMatchObject({ status: 'completed' });
-  });
-});

package/tests/unit/services/openaiDocumentGen.test.ts

@@ -1,65 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import {
-  extractContainerGeneratedFiles,
-  mimeTypeForFormat,
-  normalizeDocumentFormat,
-} from '../../../src/services/openaiDocumentGen.js';
-import type { Response } from 'openai/resources/responses/responses.js';
-
-describe('openaiDocumentGen', () => {
-  it('normalizes unknown formats to pdf', () => {
-    expect(normalizeDocumentFormat('docx')).toBe('docx');
-    expect(normalizeDocumentFormat('.PDF')).toBe('pdf');
-    expect(normalizeDocumentFormat('bogus')).toBe('pdf');
-  });
-
-  it('maps formats to mime types', () => {
-    expect(mimeTypeForFormat('pdf')).toBe('application/pdf');
-    expect(mimeTypeForFormat('xlsx')).toBe(
-      'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
-    );
-    expect(mimeTypeForFormat('png')).toBe('image/png');
-  });
-
-  it('collects container_file_citation annotations for the requested extension', () => {
-    const response = {
-      output: [
-        {
-          type: 'message',
-          content: [
-            {
-              type: 'output_text',
-              text: 'Here is your spreadsheet.',
-              annotations: [
-                {
-                  type: 'container_file_citation',
-                  container_id: 'cntr_1',
-                  file_id: 'cfile_1',
-                  filename: 'Grades.xlsx',
-                  start_index: 0,
-                  end_index: 0,
-                },
-                {
-                  type: 'container_file_citation',
-                  container_id: 'cntr_1',
-                  file_id: 'cfile_2',
-                  filename: 'Notes.pdf',
-                  start_index: 0,
-                  end_index: 0,
-                },
-              ],
-            },
-          ],
-        },
-      ],
-    } as unknown as Response;
-
-    expect(extractContainerGeneratedFiles(response, 'xlsx')).toEqual([
-      {
-        containerId: 'cntr_1',
-        fileId: 'cfile_1',
-        filename: 'Grades.xlsx',
-      },
-    ]);
-  });
-});