@studious-lms/server 1.16.1 → 1.17.0

package/src/services/school.ts

@@ -540,6 +540,237 @@ export async function getStudentTimeline(
   };
 }
 
+/**
+ * Role-aware overview used by `/view/[userId]`.
+ *
+ * - For STUDENT members it returns the same timeline as `getStudentTimeline`
+ *   (events, assignments, attendance) so teachers/admins can audit progress.
+ * - For TEACHER/ADMIN members it returns their teaching agenda: every event in
+ *   a class they teach plus their personal events, alongside the classes they
+ *   run with enrolment counts.
+ *
+ * Permissions:
+ * - School admins can view anyone in the institution.
+ * - A teacher can view a STUDENT they share a class with.
+ * - A teacher/admin can always view their own overview.
+ */
+export async function getMemberTimeline(
+  userId: string,
+  input: {
+    schoolId: string;
+    memberId: string;
+    from?: Date;
+    to?: Date;
+  }
+) {
+  const callerIsAdmin = Boolean(
+    await findActiveSchoolAdminMembership(input.schoolId, userId)
+  );
+
+  const membership = await prisma.schoolMembership.findFirst({
+    where: {
+      schoolId: input.schoolId,
+      userId: input.memberId,
+      status: "ACTIVE",
+    },
+    select: {
+      role: true,
+      user: {
+        select: {
+          id: true,
+          username: true,
+          profile: { select: { displayName: true, profilePicture: true } },
+        },
+      },
+    },
+  });
+  if (!membership) {
+    throw new TRPCError({
+      code: "NOT_FOUND",
+      message: "This person is not in this institution",
+    });
+  }
+
+  const range = {
+    ...(input.from ? { gte: input.from } : {}),
+    ...(input.to ? { lte: input.to } : {}),
+  };
+  const hasRange = Object.keys(range).length > 0;
+
+  if (membership.role === "STUDENT") {
+    if (!callerIsAdmin) {
+      const sharedClass = await prisma.class.findFirst({
+        where: {
+          schoolId: input.schoolId,
+          teachers: { some: { id: userId } },
+          students: { some: { id: input.memberId } },
+        },
+        select: { id: true },
+      });
+      if (!sharedClass) {
+        throw new TRPCError({
+          code: "FORBIDDEN",
+          message: "You don't share a class with this student",
+        });
+      }
+    }
+
+    const [events, assignments, attendance] = await Promise.all([
+      prisma.event.findMany({
+        where: {
+          userId: input.memberId,
+          ...(hasRange ? { startTime: range } : {}),
+        },
+        select: {
+          id: true,
+          name: true,
+          startTime: true,
+          endTime: true,
+          location: true,
+          remarks: true,
+          color: true,
+          class: { select: { id: true, name: true, color: true } },
+        },
+        orderBy: { startTime: "asc" },
+      }),
+      prisma.assignment.findMany({
+        where: {
+          class: { students: { some: { id: input.memberId } } },
+          template: false,
+          ...(hasRange ? { dueDate: range } : {}),
+        },
+        select: {
+          id: true,
+          title: true,
+          dueDate: true,
+          type: true,
+          graded: true,
+          maxGrade: true,
+          weight: true,
+          class: {
+            select: {
+              id: true,
+              name: true,
+              section: true,
+              subject: true,
+              color: true,
+            },
+          },
+          submissions: {
+            where: { studentId: input.memberId },
+            select: {
+              id: true,
+              submitted: true,
+              submittedAt: true,
+              returned: true,
+              gradeReceived: true,
+            },
+          },
+        },
+        orderBy: { dueDate: "asc" },
+      }),
+      prisma.attendance.findMany({
+        where: {
+          OR: [
+            { present: { some: { id: input.memberId } } },
+            { late: { some: { id: input.memberId } } },
+            { absent: { some: { id: input.memberId } } },
+          ],
+          ...(hasRange ? { date: range } : {}),
+        },
+        select: {
+          id: true,
+          date: true,
+          class: { select: { id: true, name: true, color: true } },
+          present: { where: { id: input.memberId }, select: { id: true } },
+          late: { where: { id: input.memberId }, select: { id: true } },
+          absent: { where: { id: input.memberId }, select: { id: true } },
+        },
+        orderBy: { date: "asc" },
+      }),
+    ]);
+
+    const attendanceShaped = attendance.map((record) => ({
+      id: record.id,
+      date: record.date,
+      class: record.class,
+      status: record.present.length
+        ? ("PRESENT" as const)
+        : record.late.length
+          ? ("LATE" as const)
+          : ("ABSENT" as const),
+    }));
+
+    return {
+      role: "STUDENT" as const,
+      member: membership.user,
+      events,
+      assignments,
+      attendance: attendanceShaped,
+    };
+  }
+
+  // TEACHER or ADMIN: only admins (or the member themselves) may view.
+  if (!callerIsAdmin && userId !== input.memberId) {
+    throw new TRPCError({
+      code: "FORBIDDEN",
+      message: "Only school admins can view this member",
+    });
+  }
+
+  const [events, classes] = await Promise.all([
+    prisma.event.findMany({
+      where: {
+        OR: [
+          { userId: input.memberId },
+          { class: { teachers: { some: { id: input.memberId } } } },
+        ],
+        ...(hasRange ? { startTime: range } : {}),
+      },
+      select: {
+        id: true,
+        name: true,
+        startTime: true,
+        endTime: true,
+        location: true,
+        remarks: true,
+        color: true,
+        class: { select: { id: true, name: true, color: true } },
+      },
+      orderBy: { startTime: "asc" },
+    }),
+    prisma.class.findMany({
+      where: {
+        schoolId: input.schoolId,
+        teachers: { some: { id: input.memberId } },
+      },
+      select: {
+        id: true,
+        name: true,
+        section: true,
+        subject: true,
+        color: true,
+        _count: { select: { students: true } },
+      },
+      orderBy: { name: "asc" },
+    }),
+  ]);
+
+  return {
+    role: membership.role as "TEACHER" | "ADMIN",
+    member: membership.user,
+    events,
+    classes: classes.map((c) => ({
+      id: c.id,
+      name: c.name,
+      section: c.section,
+      subject: c.subject,
+      color: c.color,
+      studentCount: c._count.students,
+    })),
+  };
+}
+
 export async function createInvite(
   userId: string,
   input: {