@studious-lms/server 1.16.1 → 1.17.1

package/dist/services/tag.js

@@ -3,11 +3,27 @@
  * targets (users, classes, rubrics, boundaries).
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6ab21e9e-024c-5347-9864-92a8edf76dbe")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="b6385fba-13fc-519e-9095-49126706f392")}catch(e){}}();
 import { TRPCError } from "@trpc/server";
 import { prisma } from "../lib/prisma.js";
-import { attachTagToTarget, createTag, deleteTag, detachTagFromTarget, getTag, listTagsAttachedTo, listTagsForSchool, updateTag, } from "../models/tag.js";
+import { attachTagToTarget, createTag, deleteTag, detachTagFromTarget, findTagByName, getTag, listTagsAttachedTo, listTagsForSchool, updateTag, } from "../models/tag.js";
 import { findActiveSchoolAdminMembership, findSchoolMembership, } from "../models/school.js";
+/**
+ * Normalises a tag name to a canonical display form: trimmed with internal
+ * whitespace collapsed to single spaces. Casing is preserved so labels like
+ * "AP" or "Year 12" read naturally; uniqueness is enforced case-insensitively
+ * separately via {@link findTagByName}.
+ */
+function normalizeTagName(name) {
+    const normalized = name.trim().replace(/\s+/g, " ");
+    if (!normalized) {
+        throw new TRPCError({
+            code: "BAD_REQUEST",
+            message: "Tag name can't be empty",
+        });
+    }
+    return normalized;
+}
 async function requireAdmin(schoolId, userId) {
     const membership = await findActiveSchoolAdminMembership(schoolId, userId);
     if (!membership) {
@@ -47,7 +63,15 @@ export async function createTagRecord(userId, input) {
             });
         }
     }
-    return createTag(input);
+    const name = normalizeTagName(input.name);
+    const existing = await findTagByName(input.schoolId, name);
+    if (existing) {
+        throw new TRPCError({
+            code: "CONFLICT",
+            message: `A tag named "${existing.name}" already exists in this institution`,
+        });
+    }
+    return createTag({ ...input, name });
 }
 export async function updateTagRecord(userId, input) {
     const tag = await getTag(input.tagId);
@@ -67,8 +91,19 @@ export async function updateTagRecord(userId, input) {
             });
         }
     }
+    let name = input.name;
+    if (name !== undefined) {
+        name = normalizeTagName(name);
+        const existing = await findTagByName(tag.schoolId, name, input.tagId);
+        if (existing) {
+            throw new TRPCError({
+                code: "CONFLICT",
+                message: `A tag named "${existing.name}" already exists in this institution`,
+            });
+        }
+    }
     return updateTag(input.tagId, {
-        name: input.name,
+        name,
         color: input.color,
         departmentId: input.departmentId,
     });
@@ -175,4 +210,4 @@ export async function getAttachedTags(userId, input) {
     return tags;
 }
 //# sourceMappingURL=tag.js.map
-//# debugId=6ab21e9e-024c-5347-9864-92a8edf76dbe
+//# debugId=b6385fba-13fc-519e-9095-49126706f392

package/dist/services/tag.js.map

@@ -1 +1 @@
-{"version":3,"file":"tag.js","sources":["services/tag.ts"],"sourceRoot":"/","sourcesContent":["/**\n * Tag service — institution-scoped tag CRUD and assignment to taggable\n * targets (users, classes, rubrics, boundaries).\n */\nimport { TRPCError } from \"@trpc/server\";\nimport { prisma } from \"../lib/prisma.js\";\nimport {\n  attachTagToTarget,\n  createTag,\n  deleteTag,\n  detachTagFromTarget,\n  getTag,\n  listTagsAttachedTo,\n  listTagsForSchool,\n  type TagTarget,\n  updateTag,\n} from \"../models/tag.js\";\nimport {\n  findActiveSchoolAdminMembership,\n  findSchoolMembership,\n} from \"../models/school.js\";\n\nasync function requireAdmin(schoolId: string, userId: string) {\n  const membership = await findActiveSchoolAdminMembership(schoolId, userId);\n  if (!membership) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"Only school admins can manage tags\",\n    });\n  }\n}\n\nasync function requireMember(schoolId: string, userId: string) {\n  const membership = await findSchoolMembership(schoolId, userId);\n  if (!membership || membership.status !== \"ACTIVE\") {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"You aren't a member of this institution\",\n    });\n  }\n  return membership;\n}\n\nexport async function listTags(\n  userId: string,\n  input: { schoolId: string; departmentId?: string | null }\n) {\n  await requireMember(input.schoolId, userId);\n  return listTagsForSchool(input.schoolId, {\n    departmentId: input.departmentId,\n  });\n}\n\nexport async function createTagRecord(\n  userId: string,\n  input: {\n    schoolId: string;\n    departmentId?: string | null;\n    name: string;\n    color?: string;\n  }\n) {\n  await requireAdmin(input.schoolId, userId);\n  if (input.departmentId) {\n    const dept = await prisma.department.findUnique({\n      where: { id: input.departmentId },\n      select: { schoolId: true },\n    });\n    if (!dept || dept.schoolId !== input.schoolId) {\n      throw new TRPCError({\n        code: \"BAD_REQUEST\",\n        message: \"Department does not belong to this institution\",\n      });\n    }\n  }\n  return createTag(input);\n}\n\nexport async function updateTagRecord(\n  userId: string,\n  input: {\n    tagId: string;\n    name?: string;\n    color?: string;\n    departmentId?: string | null;\n  }\n) {\n  const tag = await getTag(input.tagId);\n  if (!tag) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"Tag not found\" });\n  }\n  await requireAdmin(tag.schoolId, userId);\n  if (input.departmentId) {\n    const dept = await prisma.department.findUnique({\n      where: { id: input.departmentId },\n      select: { schoolId: true },\n    });\n    if (!dept || dept.schoolId !== tag.schoolId) {\n      throw new TRPCError({\n        code: \"BAD_REQUEST\",\n        message: \"Department does not belong to this institution\",\n      });\n    }\n  }\n  return updateTag(input.tagId, {\n    name: input.name,\n    color: input.color,\n    departmentId: input.departmentId,\n  });\n}\n\nexport async function deleteTagRecord(userId: string, tagId: string) {\n  const tag = await getTag(tagId);\n  if (!tag) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"Tag not found\" });\n  }\n  await requireAdmin(tag.schoolId, userId);\n  await deleteTag(tagId);\n  return { success: true };\n}\n\nasync function ensureTargetInScope(\n  schoolId: string,\n  target: TagTarget,\n  targetId: string\n) {\n  switch (target) {\n    case \"USER\": {\n      const inSchool = await prisma.schoolMembership.findFirst({\n        where: { schoolId, userId: targetId, status: \"ACTIVE\" },\n        select: { id: true },\n      });\n      if (!inSchool) {\n        throw new TRPCError({\n          code: \"BAD_REQUEST\",\n          message: \"User is not in this institution\",\n        });\n      }\n      return;\n    }\n    case \"CLASS\": {\n      const inSchool = await prisma.class.findFirst({\n        where: { id: targetId, schoolId },\n        select: { id: true },\n      });\n      if (!inSchool) {\n        throw new TRPCError({\n          code: \"BAD_REQUEST\",\n          message: \"Class is not in this institution\",\n        });\n      }\n      return;\n    }\n    case \"RUBRIC\": {\n      const inSchool = await prisma.markScheme.findFirst({\n        where: {\n          id: targetId,\n          OR: [\n            { class: { schoolId } },\n            { department: { schoolId } },\n          ],\n        },\n        select: { id: true },\n      });\n      if (!inSchool) {\n        throw new TRPCError({\n          code: \"BAD_REQUEST\",\n          message: \"Rubric is not in this institution\",\n        });\n      }\n      return;\n    }\n    case \"BOUNDARY\": {\n      const inSchool = await prisma.gradingBoundary.findFirst({\n        where: {\n          id: targetId,\n          OR: [\n            { class: { schoolId } },\n            { department: { schoolId } },\n          ],\n        },\n        select: { id: true },\n      });\n      if (!inSchool) {\n        throw new TRPCError({\n          code: \"BAD_REQUEST\",\n          message: \"Boundary is not in this institution\",\n        });\n      }\n      return;\n    }\n  }\n}\n\nexport async function attachTag(\n  userId: string,\n  input: { tagId: string; target: TagTarget; targetId: string }\n) {\n  const tag = await getTag(input.tagId);\n  if (!tag) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"Tag not found\" });\n  }\n  await requireMember(tag.schoolId, userId);\n  await ensureTargetInScope(tag.schoolId, input.target, input.targetId);\n  return attachTagToTarget(input);\n}\n\nexport async function detachTag(\n  userId: string,\n  input: { tagId: string; target: TagTarget; targetId: string }\n) {\n  const tag = await getTag(input.tagId);\n  if (!tag) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"Tag not found\" });\n  }\n  await requireMember(tag.schoolId, userId);\n  return detachTagFromTarget(input);\n}\n\nexport async function getAttachedTags(\n  userId: string,\n  input: { target: TagTarget; targetId: string }\n) {\n  const tags = await listTagsAttachedTo(input.target, input.targetId);\n  if (tags[0]) {\n    await requireMember(tags[0].schoolId, userId);\n  }\n  return tags;\n}\n"],"names":[],"mappings":"AAAA;;;GAGG;;;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,mBAAmB,EACnB,MAAM,EACN,kBAAkB,EAClB,iBAAiB,EAEjB,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,+BAA+B,EAC/B,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,MAAc;IAC1D,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,MAAc;IAC3D,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yCAAyC;SACnD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAc,EACd,KAAyD;IAEzD,MAAM,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE;QACvC,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,KAKC;IAED,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,YAAY,EAAE;YACjC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,gDAAgD;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,KAKC;IAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,YAAY,EAAE;YACjC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,gDAAgD;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,KAAa;IACjE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,QAAgB,EAChB,MAAiB,EACjB,QAAgB;IAEhB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;gBACvD,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACvD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,SAAS,CAAC;oBAClB,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,iCAAiC;iBAC3C,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC5C,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;gBACjC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,SAAS,CAAC;oBAClB,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,kCAAkC;iBAC5C,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;gBACjD,KAAK,EAAE;oBACL,EAAE,EAAE,QAAQ;oBACZ,EAAE,EAAE;wBACF,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE;wBACvB,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE;qBAC7B;iBACF;gBACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,SAAS,CAAC;oBAClB,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,mCAAmC;iBAC7C,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC;gBACtD,KAAK,EAAE;oBACL,EAAE,EAAE,QAAQ;oBACZ,EAAE,EAAE;wBACF,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE;wBACvB,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE;qBAC7B;iBACF;gBACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,SAAS,CAAC;oBAClB,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,qCAAqC;iBAC/C,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,KAA6D;IAE7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtE,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,KAA6D;IAE7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,KAA8C;IAE9C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACZ,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","debug_id":"6ab21e9e-024c-5347-9864-92a8edf76dbe"}
+{"version":3,"file":"tag.js","sources":["services/tag.ts"],"sourceRoot":"/","sourcesContent":["/**\n * Tag service — institution-scoped tag CRUD and assignment to taggable\n * targets (users, classes, rubrics, boundaries).\n */\nimport { TRPCError } from \"@trpc/server\";\nimport { prisma } from \"../lib/prisma.js\";\nimport {\n  attachTagToTarget,\n  createTag,\n  deleteTag,\n  detachTagFromTarget,\n  findTagByName,\n  getTag,\n  listTagsAttachedTo,\n  listTagsForSchool,\n  type TagTarget,\n  updateTag,\n} from \"../models/tag.js\";\nimport {\n  findActiveSchoolAdminMembership,\n  findSchoolMembership,\n} from \"../models/school.js\";\n\n/**\n * Normalises a tag name to a canonical display form: trimmed with internal\n * whitespace collapsed to single spaces. Casing is preserved so labels like\n * \"AP\" or \"Year 12\" read naturally; uniqueness is enforced case-insensitively\n * separately via {@link findTagByName}.\n */\nfunction normalizeTagName(name: string): string {\n  const normalized = name.trim().replace(/\\s+/g, \" \");\n  if (!normalized) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"Tag name can't be empty\",\n    });\n  }\n  return normalized;\n}\n\nasync function requireAdmin(schoolId: string, userId: string) {\n  const membership = await findActiveSchoolAdminMembership(schoolId, userId);\n  if (!membership) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"Only school admins can manage tags\",\n    });\n  }\n}\n\nasync function requireMember(schoolId: string, userId: string) {\n  const membership = await findSchoolMembership(schoolId, userId);\n  if (!membership || membership.status !== \"ACTIVE\") {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"You aren't a member of this institution\",\n    });\n  }\n  return membership;\n}\n\nexport async function listTags(\n  userId: string,\n  input: { schoolId: string; departmentId?: string | null }\n) {\n  await requireMember(input.schoolId, userId);\n  return listTagsForSchool(input.schoolId, {\n    departmentId: input.departmentId,\n  });\n}\n\nexport async function createTagRecord(\n  userId: string,\n  input: {\n    schoolId: string;\n    departmentId?: string | null;\n    name: string;\n    color?: string;\n  }\n) {\n  await requireAdmin(input.schoolId, userId);\n  if (input.departmentId) {\n    const dept = await prisma.department.findUnique({\n      where: { id: input.departmentId },\n      select: { schoolId: true },\n    });\n    if (!dept || dept.schoolId !== input.schoolId) {\n      throw new TRPCError({\n        code: \"BAD_REQUEST\",\n        message: \"Department does not belong to this institution\",\n      });\n    }\n  }\n  const name = normalizeTagName(input.name);\n  const existing = await findTagByName(input.schoolId, name);\n  if (existing) {\n    throw new TRPCError({\n      code: \"CONFLICT\",\n      message: `A tag named \"${existing.name}\" already exists in this institution`,\n    });\n  }\n  return createTag({ ...input, name });\n}\n\nexport async function updateTagRecord(\n  userId: string,\n  input: {\n    tagId: string;\n    name?: string;\n    color?: string;\n    departmentId?: string | null;\n  }\n) {\n  const tag = await getTag(input.tagId);\n  if (!tag) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"Tag not found\" });\n  }\n  await requireAdmin(tag.schoolId, userId);\n  if (input.departmentId) {\n    const dept = await prisma.department.findUnique({\n      where: { id: input.departmentId },\n      select: { schoolId: true },\n    });\n    if (!dept || dept.schoolId !== tag.schoolId) {\n      throw new TRPCError({\n        code: \"BAD_REQUEST\",\n        message: \"Department does not belong to this institution\",\n      });\n    }\n  }\n  let name = input.name;\n  if (name !== undefined) {\n    name = normalizeTagName(name);\n    const existing = await findTagByName(tag.schoolId, name, input.tagId);\n    if (existing) {\n      throw new TRPCError({\n        code: \"CONFLICT\",\n        message: `A tag named \"${existing.name}\" already exists in this institution`,\n      });\n    }\n  }\n  return updateTag(input.tagId, {\n    name,\n    color: input.color,\n    departmentId: input.departmentId,\n  });\n}\n\nexport async function deleteTagRecord(userId: string, tagId: string) {\n  const tag = await getTag(tagId);\n  if (!tag) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"Tag not found\" });\n  }\n  await requireAdmin(tag.schoolId, userId);\n  await deleteTag(tagId);\n  return { success: true };\n}\n\nasync function ensureTargetInScope(\n  schoolId: string,\n  target: TagTarget,\n  targetId: string\n) {\n  switch (target) {\n    case \"USER\": {\n      const inSchool = await prisma.schoolMembership.findFirst({\n        where: { schoolId, userId: targetId, status: \"ACTIVE\" },\n        select: { id: true },\n      });\n      if (!inSchool) {\n        throw new TRPCError({\n          code: \"BAD_REQUEST\",\n          message: \"User is not in this institution\",\n        });\n      }\n      return;\n    }\n    case \"CLASS\": {\n      const inSchool = await prisma.class.findFirst({\n        where: { id: targetId, schoolId },\n        select: { id: true },\n      });\n      if (!inSchool) {\n        throw new TRPCError({\n          code: \"BAD_REQUEST\",\n          message: \"Class is not in this institution\",\n        });\n      }\n      return;\n    }\n    case \"RUBRIC\": {\n      const inSchool = await prisma.markScheme.findFirst({\n        where: {\n          id: targetId,\n          OR: [\n            { class: { schoolId } },\n            { department: { schoolId } },\n          ],\n        },\n        select: { id: true },\n      });\n      if (!inSchool) {\n        throw new TRPCError({\n          code: \"BAD_REQUEST\",\n          message: \"Rubric is not in this institution\",\n        });\n      }\n      return;\n    }\n    case \"BOUNDARY\": {\n      const inSchool = await prisma.gradingBoundary.findFirst({\n        where: {\n          id: targetId,\n          OR: [\n            { class: { schoolId } },\n            { department: { schoolId } },\n          ],\n        },\n        select: { id: true },\n      });\n      if (!inSchool) {\n        throw new TRPCError({\n          code: \"BAD_REQUEST\",\n          message: \"Boundary is not in this institution\",\n        });\n      }\n      return;\n    }\n  }\n}\n\nexport async function attachTag(\n  userId: string,\n  input: { tagId: string; target: TagTarget; targetId: string }\n) {\n  const tag = await getTag(input.tagId);\n  if (!tag) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"Tag not found\" });\n  }\n  await requireMember(tag.schoolId, userId);\n  await ensureTargetInScope(tag.schoolId, input.target, input.targetId);\n  return attachTagToTarget(input);\n}\n\nexport async function detachTag(\n  userId: string,\n  input: { tagId: string; target: TagTarget; targetId: string }\n) {\n  const tag = await getTag(input.tagId);\n  if (!tag) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"Tag not found\" });\n  }\n  await requireMember(tag.schoolId, userId);\n  return detachTagFromTarget(input);\n}\n\nexport async function getAttachedTags(\n  userId: string,\n  input: { target: TagTarget; targetId: string }\n) {\n  const tags = await listTagsAttachedTo(input.target, input.targetId);\n  if (tags[0]) {\n    await requireMember(tags[0].schoolId, userId);\n  }\n  return tags;\n}\n"],"names":[],"mappings":"AAAA;;;GAGG;;;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,mBAAmB,EACnB,aAAa,EACb,MAAM,EACN,kBAAkB,EAClB,iBAAiB,EAEjB,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,+BAA+B,EAC/B,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,MAAc;IAC1D,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,MAAc;IAC3D,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yCAAyC;SACnD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAc,EACd,KAAyD;IAEzD,MAAM,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE;QACvC,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,KAKC;IAED,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,YAAY,EAAE;YACjC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,gDAAgD;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,gBAAgB,QAAQ,CAAC,IAAI,sCAAsC;SAC7E,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,KAKC;IAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,YAAY,EAAE;YACjC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,gDAAgD;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACtB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,gBAAgB,QAAQ,CAAC,IAAI,sCAAsC;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE;QAC5B,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,KAAa;IACjE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,QAAgB,EAChB,MAAiB,EACjB,QAAgB;IAEhB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;gBACvD,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACvD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,SAAS,CAAC;oBAClB,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,iCAAiC;iBAC3C,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC5C,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;gBACjC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,SAAS,CAAC;oBAClB,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,kCAAkC;iBAC5C,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;gBACjD,KAAK,EAAE;oBACL,EAAE,EAAE,QAAQ;oBACZ,EAAE,EAAE;wBACF,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE;wBACvB,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE;qBAC7B;iBACF;gBACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,SAAS,CAAC;oBAClB,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,mCAAmC;iBAC7C,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC;gBACtD,KAAK,EAAE;oBACL,EAAE,EAAE,QAAQ;oBACZ,EAAE,EAAE;wBACF,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE;wBACvB,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE;qBAC7B;iBACF;gBACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,SAAS,CAAC;oBAClB,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,qCAAqC;iBAC/C,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,KAA6D;IAE7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtE,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,KAA6D;IAE7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,KAA8C;IAE9C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACZ,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","debug_id":"b6385fba-13fc-519e-9095-49126706f392"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@studious-lms/server",
-  "version": "1.16.1",
+  "version": "1.17.1",
   "description": "Backend server for Studious application",
   "main": "dist/exportType.js",
   "types": "dist/exportType.d.ts",

package/src/models/tag.ts

@@ -41,6 +41,27 @@ export function getTag(tagId: string) {
   });
 }
 
+/**
+ * Finds a tag in the same school whose name matches case-insensitively, used to
+ * keep tag names normalised (no "Honors" / "honors" duplicates). Pass
+ * `excludeTagId` when checking during an update so the tag doesn't clash with
+ * itself.
+ */
+export function findTagByName(
+  schoolId: string,
+  name: string,
+  excludeTagId?: string
+) {
+  return prisma.tag.findFirst({
+    where: {
+      schoolId,
+      name: { equals: name, mode: "insensitive" },
+      ...(excludeTagId ? { id: { not: excludeTagId } } : {}),
+    },
+    select: { id: true, name: true },
+  });
+}
+
 export function createTag(data: {
   schoolId: string;
   departmentId?: string | null;

package/src/routers/school.ts

@@ -14,6 +14,7 @@ import {
   getAdminOverview,
   getCurrentSchool,
   getInvite,
+  getMemberTimeline,
   getSchoolAssetUploadUrl,
   getStudentTimeline,
   listClasses,
@@ -126,6 +127,17 @@ export const schoolRouter = createTRPCRouter({
       getStudentTimeline(ctx.user!.id, input)
     ),
 
+  getMemberTimeline: protectedProcedure
+    .input(
+      z.object({
+        schoolId: z.string(),
+        memberId: z.string(),
+        from: z.date().optional(),
+        to: z.date().optional(),
+      })
+    )
+    .query(({ ctx, input }) => getMemberTimeline(ctx.user!.id, input)),
+
   getAdminOverview: protectedProcedure
     .input(schoolIdSchema)
     .query(({ ctx, input }) => getAdminOverview(ctx.user!.id, input.schoolId)),

package/src/services/school.ts

@@ -540,6 +540,237 @@ export async function getStudentTimeline(
   };
 }
 
+/**
+ * Role-aware overview used by `/view/[userId]`.
+ *
+ * - For STUDENT members it returns the same timeline as `getStudentTimeline`
+ *   (events, assignments, attendance) so teachers/admins can audit progress.
+ * - For TEACHER/ADMIN members it returns their teaching agenda: every event in
+ *   a class they teach plus their personal events, alongside the classes they
+ *   run with enrolment counts.
+ *
+ * Permissions:
+ * - School admins can view anyone in the institution.
+ * - A teacher can view a STUDENT they share a class with.
+ * - A teacher/admin can always view their own overview.
+ */
+export async function getMemberTimeline(
+  userId: string,
+  input: {
+    schoolId: string;
+    memberId: string;
+    from?: Date;
+    to?: Date;
+  }
+) {
+  const callerIsAdmin = Boolean(
+    await findActiveSchoolAdminMembership(input.schoolId, userId)
+  );
+
+  const membership = await prisma.schoolMembership.findFirst({
+    where: {
+      schoolId: input.schoolId,
+      userId: input.memberId,
+      status: "ACTIVE",
+    },
+    select: {
+      role: true,
+      user: {
+        select: {
+          id: true,
+          username: true,
+          profile: { select: { displayName: true, profilePicture: true } },
+        },
+      },
+    },
+  });
+  if (!membership) {
+    throw new TRPCError({
+      code: "NOT_FOUND",
+      message: "This person is not in this institution",
+    });
+  }
+
+  const range = {
+    ...(input.from ? { gte: input.from } : {}),
+    ...(input.to ? { lte: input.to } : {}),
+  };
+  const hasRange = Object.keys(range).length > 0;
+
+  if (membership.role === "STUDENT") {
+    if (!callerIsAdmin) {
+      const sharedClass = await prisma.class.findFirst({
+        where: {
+          schoolId: input.schoolId,
+          teachers: { some: { id: userId } },
+          students: { some: { id: input.memberId } },
+        },
+        select: { id: true },
+      });
+      if (!sharedClass) {
+        throw new TRPCError({
+          code: "FORBIDDEN",
+          message: "You don't share a class with this student",
+        });
+      }
+    }
+
+    const [events, assignments, attendance] = await Promise.all([
+      prisma.event.findMany({
+        where: {
+          userId: input.memberId,
+          ...(hasRange ? { startTime: range } : {}),
+        },
+        select: {
+          id: true,
+          name: true,
+          startTime: true,
+          endTime: true,
+          location: true,
+          remarks: true,
+          color: true,
+          class: { select: { id: true, name: true, color: true } },
+        },
+        orderBy: { startTime: "asc" },
+      }),
+      prisma.assignment.findMany({
+        where: {
+          class: { students: { some: { id: input.memberId } } },
+          template: false,
+          ...(hasRange ? { dueDate: range } : {}),
+        },
+        select: {
+          id: true,
+          title: true,
+          dueDate: true,
+          type: true,
+          graded: true,
+          maxGrade: true,
+          weight: true,
+          class: {
+            select: {
+              id: true,
+              name: true,
+              section: true,
+              subject: true,
+              color: true,
+            },
+          },
+          submissions: {
+            where: { studentId: input.memberId },
+            select: {
+              id: true,
+              submitted: true,
+              submittedAt: true,
+              returned: true,
+              gradeReceived: true,
+            },
+          },
+        },
+        orderBy: { dueDate: "asc" },
+      }),
+      prisma.attendance.findMany({
+        where: {
+          OR: [
+            { present: { some: { id: input.memberId } } },
+            { late: { some: { id: input.memberId } } },
+            { absent: { some: { id: input.memberId } } },
+          ],
+          ...(hasRange ? { date: range } : {}),
+        },
+        select: {
+          id: true,
+          date: true,
+          class: { select: { id: true, name: true, color: true } },
+          present: { where: { id: input.memberId }, select: { id: true } },
+          late: { where: { id: input.memberId }, select: { id: true } },
+          absent: { where: { id: input.memberId }, select: { id: true } },
+        },
+        orderBy: { date: "asc" },
+      }),
+    ]);
+
+    const attendanceShaped = attendance.map((record) => ({
+      id: record.id,
+      date: record.date,
+      class: record.class,
+      status: record.present.length
+        ? ("PRESENT" as const)
+        : record.late.length
+          ? ("LATE" as const)
+          : ("ABSENT" as const),
+    }));
+
+    return {
+      role: "STUDENT" as const,
+      member: membership.user,
+      events,
+      assignments,
+      attendance: attendanceShaped,
+    };
+  }
+
+  // TEACHER or ADMIN: only admins (or the member themselves) may view.
+  if (!callerIsAdmin && userId !== input.memberId) {
+    throw new TRPCError({
+      code: "FORBIDDEN",
+      message: "Only school admins can view this member",
+    });
+  }
+
+  const [events, classes] = await Promise.all([
+    prisma.event.findMany({
+      where: {
+        OR: [
+          { userId: input.memberId },
+          { class: { teachers: { some: { id: input.memberId } } } },
+        ],
+        ...(hasRange ? { startTime: range } : {}),
+      },
+      select: {
+        id: true,
+        name: true,
+        startTime: true,
+        endTime: true,
+        location: true,
+        remarks: true,
+        color: true,
+        class: { select: { id: true, name: true, color: true } },
+      },
+      orderBy: { startTime: "asc" },
+    }),
+    prisma.class.findMany({
+      where: {
+        schoolId: input.schoolId,
+        teachers: { some: { id: input.memberId } },
+      },
+      select: {
+        id: true,
+        name: true,
+        section: true,
+        subject: true,
+        color: true,
+        _count: { select: { students: true } },
+      },
+      orderBy: { name: "asc" },
+    }),
+  ]);
+
+  return {
+    role: membership.role as "TEACHER" | "ADMIN",
+    member: membership.user,
+    events,
+    classes: classes.map((c) => ({
+      id: c.id,
+      name: c.name,
+      section: c.section,
+      subject: c.subject,
+      color: c.color,
+      studentCount: c._count.students,
+    })),
+  };
+}
+
 export async function createInvite(
   userId: string,
   input: {

package/src/services/tag.ts

@@ -9,6 +9,7 @@ import {
   createTag,
   deleteTag,
   detachTagFromTarget,
+  findTagByName,
   getTag,
   listTagsAttachedTo,
   listTagsForSchool,
@@ -20,6 +21,23 @@ import {
   findSchoolMembership,
 } from "../models/school.js";
 
+/**
+ * Normalises a tag name to a canonical display form: trimmed with internal
+ * whitespace collapsed to single spaces. Casing is preserved so labels like
+ * "AP" or "Year 12" read naturally; uniqueness is enforced case-insensitively
+ * separately via {@link findTagByName}.
+ */
+function normalizeTagName(name: string): string {
+  const normalized = name.trim().replace(/\s+/g, " ");
+  if (!normalized) {
+    throw new TRPCError({
+      code: "BAD_REQUEST",
+      message: "Tag name can't be empty",
+    });
+  }
+  return normalized;
+}
+
 async function requireAdmin(schoolId: string, userId: string) {
   const membership = await findActiveSchoolAdminMembership(schoolId, userId);
   if (!membership) {
@@ -73,7 +91,15 @@ export async function createTagRecord(
       });
     }
   }
-  return createTag(input);
+  const name = normalizeTagName(input.name);
+  const existing = await findTagByName(input.schoolId, name);
+  if (existing) {
+    throw new TRPCError({
+      code: "CONFLICT",
+      message: `A tag named "${existing.name}" already exists in this institution`,
+    });
+  }
+  return createTag({ ...input, name });
 }
 
 export async function updateTagRecord(
@@ -102,8 +128,19 @@ export async function updateTagRecord(
       });
     }
   }
+  let name = input.name;
+  if (name !== undefined) {
+    name = normalizeTagName(name);
+    const existing = await findTagByName(tag.schoolId, name, input.tagId);
+    if (existing) {
+      throw new TRPCError({
+        code: "CONFLICT",
+        message: `A tag named "${existing.name}" already exists in this institution`,
+      });
+    }
+  }
   return updateTag(input.tagId, {
-    name: input.name,
+    name,
     color: input.color,
     departmentId: input.departmentId,
   });