@studious-lms/server 1.24.0 → 1.25.0

package/dist/services/studentImport.js

@@ -8,14 +8,13 @@
  * placeholder local-part is used so the User.email uniqueness constraint holds.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ce1c4284-8c8b-5ddd-bed4-ff674956801e")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="92478865-5731-54e7-88bf-a4d20ad22e07")}catch(e){}}();
 import { randomBytes } from "crypto";
 import { hash } from "bcryptjs";
 import { TRPCError } from "@trpc/server";
 import { prisma } from "../lib/prisma.js";
-import { createUser, findUserByEmail, findUserByUsername } from "../models/auth.js";
-import { findActiveSchoolAdminMembership, upsertSchoolMembership } from "../models/school.js";
-import { upsertUserProfile } from "../models/user.js";
+import { findUserByEmail, findUserByUsername } from "../models/auth.js";
+import { findActiveSchoolAdminMembership } from "../models/school.js";
 import { generateUniqueUsername } from "../utils/generateUsername.js";
 function parseCsvLine(line) {
     const cells = [];
@@ -111,7 +110,7 @@ export async function importStudentsCsv(userId, input) {
     for (let i = 0; i < rows.length; i += 1) {
         const rowNum = i + 2; // 1-indexed + header
         const row = rows[i];
-        const displayName = row.displayname || row.name || row.fullname || row.fullname || "";
+        const displayName = row.displayname || row.name || row.fullname || "";
         const requestedUsername = row.username || "";
         const requestedEmail = (row.email || "").toLowerCase();
         const requestedPassword = row.password || "";
@@ -180,26 +179,40 @@ export async function importStudentsCsv(userId, input) {
                 continue;
             }
             const hashed = await hash(password, 10);
-            const user = await createUser({
-                username,
-                email,
-                password: hashed,
-                verified: true,
-            });
-            if (displayName) {
-                await upsertUserProfile(user.id, { displayName });
-            }
-            await upsertSchoolMembership({
-                schoolId: input.schoolId,
-                userId: user.id,
-                role: "STUDENT",
-            });
-            if (classId) {
-                await prisma.class.update({
-                    where: { id: classId },
-                    data: { students: { connect: { id: user.id } } },
+            const user = await prisma.$transaction(async (tx) => {
+                const createdUser = await tx.user.create({
+                    data: {
+                        username,
+                        email,
+                        password: hashed,
+                        verified: true,
+                        profile: { create: displayName ? { displayName } : {} },
+                    },
+                    select: { id: true, username: true, email: true },
                 });
-            }
+                await tx.schoolMembership.upsert({
+                    where: {
+                        schoolId_userId: {
+                            schoolId: input.schoolId,
+                            userId: createdUser.id,
+                        },
+                    },
+                    update: { role: "STUDENT", status: "ACTIVE" },
+                    create: {
+                        schoolId: input.schoolId,
+                        userId: createdUser.id,
+                        role: "STUDENT",
+                        status: "ACTIVE",
+                    },
+                });
+                if (classId) {
+                    await tx.class.update({
+                        where: { id: classId },
+                        data: { students: { connect: { id: createdUser.id } } },
+                    });
+                }
+                return createdUser;
+            });
             results.push({
                 ok: true,
                 row: rowNum,
@@ -233,4 +246,4 @@ export async function importStudentsCsv(userId, input) {
     };
 }
 //# sourceMappingURL=studentImport.js.map
-//# debugId=ce1c4284-8c8b-5ddd-bed4-ff674956801e
+//# debugId=92478865-5731-54e7-88bf-a4d20ad22e07

package/dist/services/studentImport.js.map

@@ -1 +1 @@
-{"version":3,"file":"studentImport.js","sources":["services/studentImport.ts"],"sourceRoot":"/","sourcesContent":["/**\n * C3: Bulk student CSV onboarding under school admin.\n *\n * CSV columns (header row required):\n *   displayName, username?, email?, password?, classId?\n *\n * Username/password are generated when omitted. Email is optional — a\n * placeholder local-part is used so the User.email uniqueness constraint holds.\n */\nimport { randomBytes } from \"crypto\";\nimport { hash } from \"bcryptjs\";\nimport { TRPCError } from \"@trpc/server\";\nimport { prisma } from \"../lib/prisma.js\";\nimport { createUser, findUserByEmail, findUserByUsername } from \"../models/auth.js\";\nimport { findActiveSchoolAdminMembership, upsertSchoolMembership } from \"../models/school.js\";\nimport { upsertUserProfile } from \"../models/user.js\";\nimport { generateUniqueUsername } from \"../utils/generateUsername.js\";\n\nexport type StudentCsvRowResult =\n  | {\n      ok: true;\n      row: number;\n      userId: string;\n      username: string;\n      email: string;\n      password: string;\n      displayName: string | null;\n      classId: string | null;\n      generatedUsername: boolean;\n      generatedPassword: boolean;\n      placeholderEmail: boolean;\n    }\n  | {\n      ok: false;\n      row: number;\n      error: string;\n      raw?: string;\n    };\n\nfunction parseCsvLine(line: string): string[] {\n  const cells: string[] = [];\n  let current = \"\";\n  let inQuotes = false;\n  for (let i = 0; i < line.length; i += 1) {\n    const ch = line[i];\n    if (inQuotes) {\n      if (ch === '\"') {\n        if (line[i + 1] === '\"') {\n          current += '\"';\n          i += 1;\n        } else {\n          inQuotes = false;\n        }\n      } else {\n        current += ch;\n      }\n    } else if (ch === '\"') {\n      inQuotes = true;\n    } else if (ch === \",\") {\n      cells.push(current.trim());\n      current = \"\";\n    } else {\n      current += ch;\n    }\n  }\n  cells.push(current.trim());\n  return cells;\n}\n\nfunction normalizeHeader(h: string) {\n  return h.trim().toLowerCase().replace(/[\\s_]+/g, \"\");\n}\n\nfunction generatePassword(length = 12) {\n  const alphabet = \"ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz23456789\";\n  const bytes = randomBytes(length);\n  let out = \"\";\n  for (let i = 0; i < length; i += 1) {\n    out += alphabet[bytes[i]! % alphabet.length];\n  }\n  return out;\n}\n\nfunction placeholderEmail(username: string) {\n  const safe = username.toLowerCase().replace(/[^a-z0-9._-]/g, \"\");\n  return `${safe || \"student\"}.${randomBytes(3).toString(\"hex\")}@noemail.studious.local`;\n}\n\nexport function parseStudentCsv(csvText: string): {\n  headers: string[];\n  rows: Record<string, string>[];\n} {\n  const lines = csvText\n    .replace(/^\\uFEFF/, \"\")\n    .split(/\\r?\\n/)\n    .map((l) => l.trim())\n    .filter((l) => l.length > 0);\n  if (lines.length < 2) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"CSV must include a header row and at least one data row\",\n    });\n  }\n  const headers = parseCsvLine(lines[0]!).map(normalizeHeader);\n  const rows = lines.slice(1).map((line) => {\n    const cells = parseCsvLine(line);\n    const row: Record<string, string> = {};\n    headers.forEach((h, i) => {\n      row[h] = cells[i] ?? \"\";\n    });\n    return row;\n  });\n  return { headers, rows };\n}\n\nexport async function importStudentsCsv(\n  userId: string,\n  input: { schoolId: string; csvText: string; dryRun?: boolean }\n) {\n  const membership = await findActiveSchoolAdminMembership(input.schoolId, userId);\n  if (!membership) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"Only school admins can perform this action\",\n    });\n  }\n\n  const { rows } = parseStudentCsv(input.csvText);\n  if (rows.length > 500) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"CSV import is limited to 500 rows per request\",\n    });\n  }\n\n  const results: StudentCsvRowResult[] = [];\n  let created = 0;\n  let failed = 0;\n\n  for (let i = 0; i < rows.length; i += 1) {\n    const rowNum = i + 2; // 1-indexed + header\n    const row = rows[i]!;\n    const displayName =\n      row.displayname || row.name || row.fullname || row.fullname || \"\";\n    const requestedUsername = row.username || \"\";\n    const requestedEmail = (row.email || \"\").toLowerCase();\n    const requestedPassword = row.password || \"\";\n    const classId = row.classid || row.class || \"\";\n\n    try {\n      if (!displayName && !requestedUsername && !requestedEmail) {\n        throw new Error(\"Row needs displayName, username, or email\");\n      }\n\n      let username = requestedUsername;\n      let generatedUsername = false;\n      if (!username) {\n        username = await generateUniqueUsername(async (candidate) => {\n          const existing = await findUserByUsername(candidate);\n          return Boolean(existing);\n        });\n        generatedUsername = true;\n      } else {\n        const taken = await findUserByUsername(username);\n        if (taken) {\n          throw new Error(`Username \"${username}\" already taken`);\n        }\n      }\n\n      let email = requestedEmail;\n      let placeholderEmailUsed = false;\n      if (!email) {\n        email = placeholderEmail(username);\n        placeholderEmailUsed = true;\n      } else {\n        const existing = await findUserByEmail(email);\n        if (existing) {\n          throw new Error(`Email \"${email}\" already in use`);\n        }\n      }\n\n      let password = requestedPassword;\n      let generatedPassword = false;\n      if (!password) {\n        password = generatePassword();\n        generatedPassword = true;\n      }\n\n      if (classId) {\n        const cls = await prisma.class.findFirst({\n          where: { id: classId, schoolId: input.schoolId },\n          select: { id: true },\n        });\n        if (!cls) {\n          throw new Error(`classId \"${classId}\" not found in this school`);\n        }\n      }\n\n      if (input.dryRun) {\n        results.push({\n          ok: true,\n          row: rowNum,\n          userId: \"dry-run\",\n          username,\n          email,\n          password,\n          displayName: displayName || null,\n          classId: classId || null,\n          generatedUsername,\n          generatedPassword,\n          placeholderEmail: placeholderEmailUsed,\n        });\n        created += 1;\n        continue;\n      }\n\n      const hashed = await hash(password, 10);\n      const user = await createUser({\n        username,\n        email,\n        password: hashed,\n        verified: true,\n      });\n\n      if (displayName) {\n        await upsertUserProfile(user.id, { displayName });\n      }\n\n      await upsertSchoolMembership({\n        schoolId: input.schoolId,\n        userId: user.id,\n        role: \"STUDENT\",\n      });\n\n      if (classId) {\n        await prisma.class.update({\n          where: { id: classId },\n          data: { students: { connect: { id: user.id } } },\n        });\n      }\n\n      results.push({\n        ok: true,\n        row: rowNum,\n        userId: user.id,\n        username: user.username,\n        email: user.email,\n        password,\n        displayName: displayName || null,\n        classId: classId || null,\n        generatedUsername,\n        generatedPassword,\n        placeholderEmail: placeholderEmailUsed,\n      });\n      created += 1;\n    } catch (err) {\n      failed += 1;\n      results.push({\n        ok: false,\n        row: rowNum,\n        error: err instanceof Error ? err.message : \"Unknown error\",\n      });\n    }\n  }\n\n  return {\n    dryRun: Boolean(input.dryRun),\n    created,\n    failed,\n    total: rows.length,\n    results,\n  };\n}\n"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;;;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,+BAA+B,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC9F,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAuBtE,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACxB,OAAO,IAAI,GAAG,CAAC;oBACf,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,KAAK,CAAC;gBACnB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3B,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAM,GAAG,EAAE;IACnC,MAAM,QAAQ,GAAG,2DAA2D,CAAC;IAC7E,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACjE,OAAO,GAAG,IAAI,IAAI,SAAS,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,yBAAyB,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAI7C,MAAM,KAAK,GAAG,OAAO;SAClB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,yDAAyD;SACnE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvB,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,KAA8D;IAE9D,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,+CAA+C;SACzD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,MAAM,WAAW,GACf,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QACpE,MAAM,iBAAiB,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,iBAAiB,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAE/C,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,IAAI,CAAC,iBAAiB,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,QAAQ,GAAG,iBAAiB,CAAC;YACjC,IAAI,iBAAiB,GAAG,KAAK,CAAC;YAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;oBAC1D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;oBACrD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC3B,CAAC,CAAC,CAAC;gBACH,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;gBACjD,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,iBAAiB,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YAED,IAAI,KAAK,GAAG,cAAc,CAAC;YAC3B,IAAI,oBAAoB,GAAG,KAAK,CAAC;YACjC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACnC,oBAAoB,GAAG,IAAI,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,kBAAkB,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,GAAG,iBAAiB,CAAC;YACjC,IAAI,iBAAiB,GAAG,KAAK,CAAC;YAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,gBAAgB,EAAE,CAAC;gBAC9B,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;oBACvC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;oBAChD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;iBACrB,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,MAAM,IAAI,KAAK,CAAC,YAAY,OAAO,4BAA4B,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC;oBACX,EAAE,EAAE,IAAI;oBACR,GAAG,EAAE,MAAM;oBACX,MAAM,EAAE,SAAS;oBACjB,QAAQ;oBACR,KAAK;oBACL,QAAQ;oBACR,WAAW,EAAE,WAAW,IAAI,IAAI;oBAChC,OAAO,EAAE,OAAO,IAAI,IAAI;oBACxB,iBAAiB;oBACjB,iBAAiB;oBACjB,gBAAgB,EAAE,oBAAoB;iBACvC,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC;gBAC5B,QAAQ;gBACR,KAAK;gBACL,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,sBAAsB,CAAC;gBAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;oBACxB,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE;oBACtB,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE;iBACjD,CAAC,CAAC;YACL,CAAC;YAED,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,IAAI;gBACR,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ;gBACR,WAAW,EAAE,WAAW,IAAI,IAAI;gBAChC,OAAO,EAAE,OAAO,IAAI,IAAI;gBACxB,iBAAiB;gBACjB,iBAAiB;gBACjB,gBAAgB,EAAE,oBAAoB;aACvC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,KAAK;gBACT,GAAG,EAAE,MAAM;gBACX,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAC5D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7B,OAAO;QACP,MAAM;QACN,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,OAAO;KACR,CAAC;AACJ,CAAC","debug_id":"ce1c4284-8c8b-5ddd-bed4-ff674956801e"}
+{"version":3,"file":"studentImport.js","sources":["services/studentImport.ts"],"sourceRoot":"/","sourcesContent":["/**\n * C3: Bulk student CSV onboarding under school admin.\n *\n * CSV columns (header row required):\n *   displayName, username?, email?, password?, classId?\n *\n * Username/password are generated when omitted. Email is optional — a\n * placeholder local-part is used so the User.email uniqueness constraint holds.\n */\nimport { randomBytes } from \"crypto\";\nimport { hash } from \"bcryptjs\";\nimport { TRPCError } from \"@trpc/server\";\nimport { prisma } from \"../lib/prisma.js\";\nimport { findUserByEmail, findUserByUsername } from \"../models/auth.js\";\nimport { findActiveSchoolAdminMembership } from \"../models/school.js\";\nimport { generateUniqueUsername } from \"../utils/generateUsername.js\";\n\nexport type StudentCsvRowResult =\n  | {\n      ok: true;\n      row: number;\n      userId: string;\n      username: string;\n      email: string;\n      password: string;\n      displayName: string | null;\n      classId: string | null;\n      generatedUsername: boolean;\n      generatedPassword: boolean;\n      placeholderEmail: boolean;\n    }\n  | {\n      ok: false;\n      row: number;\n      error: string;\n      raw?: string;\n    };\n\nfunction parseCsvLine(line: string): string[] {\n  const cells: string[] = [];\n  let current = \"\";\n  let inQuotes = false;\n  for (let i = 0; i < line.length; i += 1) {\n    const ch = line[i];\n    if (inQuotes) {\n      if (ch === '\"') {\n        if (line[i + 1] === '\"') {\n          current += '\"';\n          i += 1;\n        } else {\n          inQuotes = false;\n        }\n      } else {\n        current += ch;\n      }\n    } else if (ch === '\"') {\n      inQuotes = true;\n    } else if (ch === \",\") {\n      cells.push(current.trim());\n      current = \"\";\n    } else {\n      current += ch;\n    }\n  }\n  cells.push(current.trim());\n  return cells;\n}\n\nfunction normalizeHeader(h: string) {\n  return h.trim().toLowerCase().replace(/[\\s_]+/g, \"\");\n}\n\nfunction generatePassword(length = 12) {\n  const alphabet = \"ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz23456789\";\n  const bytes = randomBytes(length);\n  let out = \"\";\n  for (let i = 0; i < length; i += 1) {\n    out += alphabet[bytes[i]! % alphabet.length];\n  }\n  return out;\n}\n\nfunction placeholderEmail(username: string) {\n  const safe = username.toLowerCase().replace(/[^a-z0-9._-]/g, \"\");\n  return `${safe || \"student\"}.${randomBytes(3).toString(\"hex\")}@noemail.studious.local`;\n}\n\nexport function parseStudentCsv(csvText: string): {\n  headers: string[];\n  rows: Record<string, string>[];\n} {\n  const lines = csvText\n    .replace(/^\\uFEFF/, \"\")\n    .split(/\\r?\\n/)\n    .map((l) => l.trim())\n    .filter((l) => l.length > 0);\n  if (lines.length < 2) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"CSV must include a header row and at least one data row\",\n    });\n  }\n  const headers = parseCsvLine(lines[0]!).map(normalizeHeader);\n  const rows = lines.slice(1).map((line) => {\n    const cells = parseCsvLine(line);\n    const row: Record<string, string> = {};\n    headers.forEach((h, i) => {\n      row[h] = cells[i] ?? \"\";\n    });\n    return row;\n  });\n  return { headers, rows };\n}\n\nexport async function importStudentsCsv(\n  userId: string,\n  input: { schoolId: string; csvText: string; dryRun?: boolean }\n) {\n  const membership = await findActiveSchoolAdminMembership(input.schoolId, userId);\n  if (!membership) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"Only school admins can perform this action\",\n    });\n  }\n\n  const { rows } = parseStudentCsv(input.csvText);\n  if (rows.length > 500) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"CSV import is limited to 500 rows per request\",\n    });\n  }\n\n  const results: StudentCsvRowResult[] = [];\n  let created = 0;\n  let failed = 0;\n\n  for (let i = 0; i < rows.length; i += 1) {\n    const rowNum = i + 2; // 1-indexed + header\n    const row = rows[i]!;\n    const displayName = row.displayname || row.name || row.fullname || \"\";\n    const requestedUsername = row.username || \"\";\n    const requestedEmail = (row.email || \"\").toLowerCase();\n    const requestedPassword = row.password || \"\";\n    const classId = row.classid || row.class || \"\";\n\n    try {\n      if (!displayName && !requestedUsername && !requestedEmail) {\n        throw new Error(\"Row needs displayName, username, or email\");\n      }\n\n      let username = requestedUsername;\n      let generatedUsername = false;\n      if (!username) {\n        username = await generateUniqueUsername(async (candidate) => {\n          const existing = await findUserByUsername(candidate);\n          return Boolean(existing);\n        });\n        generatedUsername = true;\n      } else {\n        const taken = await findUserByUsername(username);\n        if (taken) {\n          throw new Error(`Username \"${username}\" already taken`);\n        }\n      }\n\n      let email = requestedEmail;\n      let placeholderEmailUsed = false;\n      if (!email) {\n        email = placeholderEmail(username);\n        placeholderEmailUsed = true;\n      } else {\n        const existing = await findUserByEmail(email);\n        if (existing) {\n          throw new Error(`Email \"${email}\" already in use`);\n        }\n      }\n\n      let password = requestedPassword;\n      let generatedPassword = false;\n      if (!password) {\n        password = generatePassword();\n        generatedPassword = true;\n      }\n\n      if (classId) {\n        const cls = await prisma.class.findFirst({\n          where: { id: classId, schoolId: input.schoolId },\n          select: { id: true },\n        });\n        if (!cls) {\n          throw new Error(`classId \"${classId}\" not found in this school`);\n        }\n      }\n\n      if (input.dryRun) {\n        results.push({\n          ok: true,\n          row: rowNum,\n          userId: \"dry-run\",\n          username,\n          email,\n          password,\n          displayName: displayName || null,\n          classId: classId || null,\n          generatedUsername,\n          generatedPassword,\n          placeholderEmail: placeholderEmailUsed,\n        });\n        created += 1;\n        continue;\n      }\n\n      const hashed = await hash(password, 10);\n      const user = await prisma.$transaction(async (tx) => {\n        const createdUser = await tx.user.create({\n          data: {\n            username,\n            email,\n            password: hashed,\n            verified: true,\n            profile: { create: displayName ? { displayName } : {} },\n          },\n          select: { id: true, username: true, email: true },\n        });\n\n        await tx.schoolMembership.upsert({\n          where: {\n            schoolId_userId: {\n              schoolId: input.schoolId,\n              userId: createdUser.id,\n            },\n          },\n          update: { role: \"STUDENT\", status: \"ACTIVE\" },\n          create: {\n            schoolId: input.schoolId,\n            userId: createdUser.id,\n            role: \"STUDENT\",\n            status: \"ACTIVE\",\n          },\n        });\n\n        if (classId) {\n          await tx.class.update({\n            where: { id: classId },\n            data: { students: { connect: { id: createdUser.id } } },\n          });\n        }\n\n        return createdUser;\n      });\n\n      results.push({\n        ok: true,\n        row: rowNum,\n        userId: user.id,\n        username: user.username,\n        email: user.email,\n        password,\n        displayName: displayName || null,\n        classId: classId || null,\n        generatedUsername,\n        generatedPassword,\n        placeholderEmail: placeholderEmailUsed,\n      });\n      created += 1;\n    } catch (err) {\n      failed += 1;\n      results.push({\n        ok: false,\n        row: rowNum,\n        error: err instanceof Error ? err.message : \"Unknown error\",\n      });\n    }\n  }\n\n  return {\n    dryRun: Boolean(input.dryRun),\n    created,\n    failed,\n    total: rows.length,\n    results,\n  };\n}\n"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;;;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAuBtE,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACxB,OAAO,IAAI,GAAG,CAAC;oBACf,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,KAAK,CAAC;gBACnB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3B,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAM,GAAG,EAAE;IACnC,MAAM,QAAQ,GAAG,2DAA2D,CAAC;IAC7E,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACjE,OAAO,GAAG,IAAI,IAAI,SAAS,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,yBAAyB,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAI7C,MAAM,KAAK,GAAG,OAAO;SAClB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,yDAAyD;SACnE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvB,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,KAA8D;IAE9D,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,+CAA+C;SACzD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QACtE,MAAM,iBAAiB,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,iBAAiB,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAE/C,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,IAAI,CAAC,iBAAiB,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,QAAQ,GAAG,iBAAiB,CAAC;YACjC,IAAI,iBAAiB,GAAG,KAAK,CAAC;YAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;oBAC1D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;oBACrD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC3B,CAAC,CAAC,CAAC;gBACH,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;gBACjD,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,iBAAiB,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YAED,IAAI,KAAK,GAAG,cAAc,CAAC;YAC3B,IAAI,oBAAoB,GAAG,KAAK,CAAC;YACjC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACnC,oBAAoB,GAAG,IAAI,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,kBAAkB,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,GAAG,iBAAiB,CAAC;YACjC,IAAI,iBAAiB,GAAG,KAAK,CAAC;YAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,gBAAgB,EAAE,CAAC;gBAC9B,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;oBACvC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;oBAChD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;iBACrB,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,MAAM,IAAI,KAAK,CAAC,YAAY,OAAO,4BAA4B,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC;oBACX,EAAE,EAAE,IAAI;oBACR,GAAG,EAAE,MAAM;oBACX,MAAM,EAAE,SAAS;oBACjB,QAAQ;oBACR,KAAK;oBACL,QAAQ;oBACR,WAAW,EAAE,WAAW,IAAI,IAAI;oBAChC,OAAO,EAAE,OAAO,IAAI,IAAI;oBACxB,iBAAiB;oBACjB,iBAAiB;oBACjB,gBAAgB,EAAE,oBAAoB;iBACvC,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBAClD,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;oBACvC,IAAI,EAAE;wBACJ,QAAQ;wBACR,KAAK;wBACL,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;qBACxD;oBACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;iBAClD,CAAC,CAAC;gBAEH,MAAM,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC;oBAC/B,KAAK,EAAE;wBACL,eAAe,EAAE;4BACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;4BACxB,MAAM,EAAE,WAAW,CAAC,EAAE;yBACvB;qBACF;oBACD,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE;oBAC7C,MAAM,EAAE;wBACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,MAAM,EAAE,WAAW,CAAC,EAAE;wBACtB,IAAI,EAAE,SAAS;wBACf,MAAM,EAAE,QAAQ;qBACjB;iBACF,CAAC,CAAC;gBAEH,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;wBACpB,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE;wBACtB,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE;qBACxD,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,WAAW,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,IAAI;gBACR,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ;gBACR,WAAW,EAAE,WAAW,IAAI,IAAI;gBAChC,OAAO,EAAE,OAAO,IAAI,IAAI;gBACxB,iBAAiB;gBACjB,iBAAiB;gBACjB,gBAAgB,EAAE,oBAAoB;aACvC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,KAAK;gBACT,GAAG,EAAE,MAAM;gBACX,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAC5D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7B,OAAO;QACP,MAAM;QACN,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,OAAO;KACR,CAAC;AACJ,CAAC","debug_id":"92478865-5731-54e7-88bf-a4d20ad22e07"}

package/dist/services/transcript.d.ts

@@ -8,9 +8,8 @@
  * AcademicTerm (C1) is not modelled yet — accept `from`/`to` date range and/or
  * a free-text `schoolYear` string for the report header.
  *
- * Attendance is read via the existing present/late/absent M2M lists only
- * (same shaping as getStudentTimeline). Do not conflict with A1 Attendance
- * refactor — rate math lives in attendanceRate.ts.
+ * Attendance is read from AttendanceRecord (EXCUSED excluded from the rate
+ * denominator) — rate math lives in attendanceRate.ts.
  */
 import { type TranscriptReportVariant } from "../lib/transcriptPdf.js";
 export interface GenerateTranscriptInput {

package/dist/services/transcript.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transcript.d.ts","sourceRoot":"/","sources":["services/transcript.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,yBAAyB,CAAC;AAUjC,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,EAAE,CAAC,EAAE,IAAI,CAAC;IACV;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAkID,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB;;;;;;IAoF5B,yDAAyD;;;;GAK5D;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IACL,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,EAAE,CAAC,EAAE,IAAI,CAAC;IACV,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;;;;;;;QAfC,yDAAyD;;;;;;mBA6BhC,MAAM;iBAAW,MAAM;;GAwBnD"}
+{"version":3,"file":"transcript.d.ts","sourceRoot":"/","sources":["services/transcript.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,yBAAyB,CAAC;AAUjC,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,EAAE,CAAC,EAAE,IAAI,CAAC;IACV;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAuHD,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB;;;;;;IAoF5B,yDAAyD;;;;GAK5D;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IACL,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,EAAE,CAAC,EAAE,IAAI,CAAC;IACV,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;;;;;;;QAfC,yDAAyD;;;;;;mBA6BhC,MAAM;iBAAW,MAAM;;GAwBnD"}

package/dist/services/transcript.js

@@ -8,12 +8,11 @@
  * AcademicTerm (C1) is not modelled yet — accept `from`/`to` date range and/or
  * a free-text `schoolYear` string for the report header.
  *
- * Attendance is read via the existing present/late/absent M2M lists only
- * (same shaping as getStudentTimeline). Do not conflict with A1 Attendance
- * refactor — rate math lives in attendanceRate.ts.
+ * Attendance is read from AttendanceRecord (EXCUSED excluded from the rate
+ * denominator) — rate math lives in attendanceRate.ts.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c7eb65fe-e18f-5b5b-9897-ce16dc61c93d")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="186437e2-1c14-52c2-94d5-09ccd8035936")}catch(e){}}();
 import { TRPCError } from "@trpc/server";
 import { prisma } from "../lib/prisma.js";
 import { bucket } from "../lib/googleCloudStorage.js";
@@ -66,29 +65,18 @@ async function fetchStudentAttendance(studentId, from, to) {
         ...(to ? { lte: to } : {}),
     };
     const hasRange = Object.keys(range).length > 0;
-    // Same M2M present/late/absent read path as getStudentTimeline (A1-safe).
-    const attendance = await prisma.attendance.findMany({
+    // Read AttendanceRecord so EXCUSED records are excluded from the rate
+    // denominator (computeAttendanceRate ignores non-PRESENT/LATE/ABSENT).
+    const records = await prisma.attendanceRecord.findMany({
         where: {
-            OR: [
-                { present: { some: { id: studentId } } },
-                { late: { some: { id: studentId } } },
-                { absent: { some: { id: studentId } } },
-            ],
-            ...(hasRange ? { date: range } : {}),
-        },
-        select: {
-            id: true,
-            present: { where: { id: studentId }, select: { id: true } },
-            late: { where: { id: studentId }, select: { id: true } },
-            absent: { where: { id: studentId }, select: { id: true } },
+            studentId,
+            status: { in: ["PRESENT", "LATE", "ABSENT"] },
+            ...(hasRange ? { attendance: { date: range } } : {}),
         },
+        select: { status: true },
     });
-    return attendance.map((record) => ({
-        status: record.present.length
-            ? "PRESENT"
-            : record.late.length
-                ? "LATE"
-                : "ABSENT",
+    return records.map((record) => ({
+        status: record.status,
     }));
 }
 async function buildClassRows(schoolId, studentId) {
@@ -240,4 +228,4 @@ export async function generateTranscripts(userId, input) {
     return { transcripts: results, errors };
 }
 //# sourceMappingURL=transcript.js.map
-//# debugId=c7eb65fe-e18f-5b5b-9897-ce16dc61c93d
+//# debugId=186437e2-1c14-52c2-94d5-09ccd8035936

package/dist/services/transcript.js.map

@@ -1 +1 @@
-{"version":3,"file":"transcript.js","sources":["services/transcript.ts"],"sourceRoot":"/","sourcesContent":["/**\n * School-admin branded transcripts / progress reports (A4 — Nepal pilot).\n *\n * Aggregates per-class gradebook grades + grading boundaries + attendance %\n * into a pdf-lib PDF. Branding: school name + logo (letterhead optional when\n * present on School; schema does not include it yet — do not block).\n *\n * AcademicTerm (C1) is not modelled yet — accept `from`/`to` date range and/or\n * a free-text `schoolYear` string for the report header.\n *\n * Attendance is read via the existing present/late/absent M2M lists only\n * (same shaping as getStudentTimeline). Do not conflict with A1 Attendance\n * refactor — rate math lives in attendanceRate.ts.\n */\n\nimport { TRPCError } from \"@trpc/server\";\nimport { prisma } from \"../lib/prisma.js\";\nimport { bucket } from \"../lib/googleCloudStorage.js\";\nimport {\n  buildTranscriptPdf,\n  isLevelBasedBoundary,\n  type TranscriptClassRow,\n  type TranscriptReportVariant,\n} from \"../lib/transcriptPdf.js\";\nimport {\n  findActiveSchoolAdminMembership,\n  getSchoolById,\n} from \"../models/school.js\";\nimport { computeAttendanceRate } from \"./attendanceRate.js\";\nimport { computeStudentGradeInClass } from \"./gradebook.js\";\n\nconst MAX_BULK = 50;\n\nexport interface GenerateTranscriptInput {\n  schoolId: string;\n  studentId: string;\n  from?: Date;\n  to?: Date;\n  /**\n   * Free-text school year label (e.g. \"2082 BS\", \"2025–2026\").\n   * Prefer AcademicTerm (C1) once available.\n   */\n  schoolYear?: string;\n}\n\nasync function requireSchoolAdmin(schoolId: string, userId: string) {\n  const membership = await findActiveSchoolAdminMembership(schoolId, userId);\n  if (!membership) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"Only school admins can generate transcripts\",\n    });\n  }\n  return membership;\n}\n\nasync function loadFileBytes(\n  path: string | null | undefined\n): Promise<Uint8Array | null> {\n  if (!path) return null;\n  try {\n    const [bytes] = await bucket.file(path).download();\n    return new Uint8Array(bytes);\n  } catch {\n    return null;\n  }\n}\n\nfunction formatPeriodLabel(from?: Date, to?: Date): string | null {\n  if (!from && !to) return null;\n  const fmt = (d: Date) => d.toISOString().slice(0, 10);\n  if (from && to) return `${fmt(from)} – ${fmt(to)}`;\n  if (from) return `From ${fmt(from)}`;\n  return `Through ${fmt(to!)}`;\n}\n\nfunction slugify(value: string): string {\n  return value\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-|-$/g, \"\")\n    .slice(0, 48);\n}\n\nasync function fetchStudentAttendance(\n  studentId: string,\n  from?: Date,\n  to?: Date\n) {\n  const range = {\n    ...(from ? { gte: from } : {}),\n    ...(to ? { lte: to } : {}),\n  };\n  const hasRange = Object.keys(range).length > 0;\n\n  // Same M2M present/late/absent read path as getStudentTimeline (A1-safe).\n  const attendance = await prisma.attendance.findMany({\n    where: {\n      OR: [\n        { present: { some: { id: studentId } } },\n        { late: { some: { id: studentId } } },\n        { absent: { some: { id: studentId } } },\n      ],\n      ...(hasRange ? { date: range } : {}),\n    },\n    select: {\n      id: true,\n      present: { where: { id: studentId }, select: { id: true } },\n      late: { where: { id: studentId }, select: { id: true } },\n      absent: { where: { id: studentId }, select: { id: true } },\n    },\n  });\n\n  return attendance.map((record) => ({\n    status: record.present.length\n      ? (\"PRESENT\" as const)\n      : record.late.length\n        ? (\"LATE\" as const)\n        : (\"ABSENT\" as const),\n  }));\n}\n\nasync function buildClassRows(\n  schoolId: string,\n  studentId: string\n): Promise<{ rows: TranscriptClassRow[]; variant: TranscriptReportVariant }> {\n  const classes = await prisma.class.findMany({\n    where: {\n      schoolId,\n      students: { some: { id: studentId } },\n    },\n    select: {\n      id: true,\n      name: true,\n      subject: true,\n      section: true,\n    },\n    orderBy: [{ subject: \"asc\" }, { name: \"asc\" }],\n  });\n\n  const rows: TranscriptClassRow[] = [];\n  let levelVotes = 0;\n  let letterVotes = 0;\n\n  for (const cls of classes) {\n    const grade = await computeStudentGradeInClass(cls.id, studentId);\n    if (!grade) continue;\n\n    if (isLevelBasedBoundary(grade.gradingBoundary?.structured)) {\n      levelVotes += 1;\n    } else if (grade.gradingBoundary) {\n      letterVotes += 1;\n    }\n\n    rows.push({\n      className: cls.name,\n      subject: cls.subject,\n      section: cls.section,\n      percentage: grade.result.percentage,\n      gradeLabel: grade.letterGrade,\n      categorySummaries: grade.result.categories.map((c) => ({\n        name: c.name,\n        average: c.average,\n      })),\n    });\n  }\n\n  const variant: TranscriptReportVariant =\n    levelVotes > 0 && levelVotes >= letterVotes ? \"level\" : \"letter\";\n\n  return { rows, variant };\n}\n\nexport async function generateTranscript(\n  userId: string,\n  input: GenerateTranscriptInput\n) {\n  await requireSchoolAdmin(input.schoolId, userId);\n\n  const school = await getSchoolById(input.schoolId);\n  if (!school) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"School not found\" });\n  }\n\n  const membership = await prisma.schoolMembership.findFirst({\n    where: {\n      schoolId: input.schoolId,\n      userId: input.studentId,\n      status: \"ACTIVE\",\n      role: \"STUDENT\",\n    },\n    select: {\n      user: {\n        select: {\n          id: true,\n          username: true,\n          profile: { select: { displayName: true } },\n        },\n      },\n    },\n  });\n  if (!membership) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"Student is not an active student in this school\",\n    });\n  }\n\n  const studentName =\n    membership.user.profile?.displayName || membership.user.username;\n\n  const [{ rows, variant }, attendanceStatuses, logoBytes] = await Promise.all([\n    buildClassRows(input.schoolId, input.studentId),\n    fetchStudentAttendance(input.studentId, input.from, input.to),\n    loadFileBytes(school.logo?.path),\n  ]);\n\n  // Soft letterhead support when schema later adds it — never required.\n  const schoolAny = school as {\n    letterhead?: { path?: string | null; type?: string | null } | null;\n    letterheadPath?: string | null;\n    letterheadType?: string | null;\n  };\n  const letterheadPath =\n    schoolAny.letterhead?.path ?? schoolAny.letterheadPath ?? null;\n  const letterheadType =\n    schoolAny.letterhead?.type ?? schoolAny.letterheadType ?? null;\n  const letterheadBytes = await loadFileBytes(letterheadPath);\n\n  const attendance = computeAttendanceRate(attendanceStatuses);\n  const generatedAt = new Date();\n\n  const pdfBytes = await buildTranscriptPdf({\n    schoolName: school.name,\n    studentName,\n    studentUsername: membership.user.username,\n    schoolYear: input.schoolYear ?? null,\n    periodLabel: formatPeriodLabel(input.from, input.to),\n    variant,\n    classes: rows,\n    attendance,\n    logoBytes,\n    logoContentType: school.logo?.type ?? null,\n    letterheadBytes,\n    letterheadContentType: letterheadType,\n    generatedAt,\n  });\n\n  const yearSlug = input.schoolYear\n    ? slugify(input.schoolYear)\n    : generatedAt.toISOString().slice(0, 10);\n  const fileName = `progress-report-${slugify(studentName) || membership.user.username}-${yearSlug}.pdf`;\n\n  return {\n    pdfBase64: Buffer.from(pdfBytes).toString(\"base64\"),\n    fileName,\n    variant,\n    studentId: input.studentId,\n    studentName,\n    /** C1 blocker: AcademicTerm model does not exist yet. */\n    academicTermSupported: false as const,\n    attendance,\n    classCount: rows.length,\n  };\n}\n\nexport async function generateTranscripts(\n  userId: string,\n  input: {\n    schoolId: string;\n    studentIds: string[];\n    from?: Date;\n    to?: Date;\n    schoolYear?: string;\n  }\n) {\n  await requireSchoolAdmin(input.schoolId, userId);\n\n  const uniqueIds = [...new Set(input.studentIds)].slice(0, MAX_BULK);\n  if (uniqueIds.length === 0) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"Select at least one student\",\n    });\n  }\n\n  type TranscriptResult = Awaited<ReturnType<typeof generateTranscript>>;\n  const results: TranscriptResult[] = [];\n  const errors: { studentId: string; message: string }[] = [];\n\n  for (const studentId of uniqueIds) {\n    try {\n      const result = await generateTranscript(userId, {\n        schoolId: input.schoolId,\n        studentId,\n        from: input.from,\n        to: input.to,\n        schoolYear: input.schoolYear,\n      });\n      results.push(result);\n    } catch (error) {\n      const message =\n        error instanceof TRPCError\n          ? error.message\n          : error instanceof Error\n            ? error.message\n            : \"Failed to generate transcript\";\n      errors.push({ studentId, message });\n    }\n  }\n\n  return { transcripts: results, errors };\n}\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;;;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AACtD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,GAGrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,+BAA+B,EAC/B,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D,MAAM,QAAQ,GAAG,EAAE,CAAC;AAcpB,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,MAAc;IAChE,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,6CAA6C;SACvD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAA+B;IAE/B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAW,EAAE,EAAS;IAC/C,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,GAAG,GAAG,CAAC,CAAO,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;IACnD,IAAI,IAAI;QAAE,OAAO,QAAQ,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;IACrC,OAAO,WAAW,GAAG,CAAC,EAAG,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,SAAiB,EACjB,IAAW,EACX,EAAS;IAET,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3B,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAE/C,0EAA0E;IAC1E,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;QAClD,KAAK,EAAE;YACL,EAAE,EAAE;gBACF,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;gBACxC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;gBACrC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;aACxC;YACD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrC;QACD,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;YAC3D,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;YACxD,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;SAC3D;KACF,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAE,SAAmB;YACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM;gBAClB,CAAC,CAAE,MAAgB;gBACnB,CAAC,CAAE,QAAkB;KAC1B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAAgB,EAChB,SAAiB;IAEjB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1C,KAAK,EAAE;YACL,QAAQ;YACR,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;SACtC;QACD,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;SACd;QACD,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;KAC/C,CAAC,CAAC;IAEH,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,IAAI,oBAAoB,CAAC,KAAK,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,CAAC;YAC5D,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;aAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YACjC,WAAW,IAAI,CAAC,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC;YACR,SAAS,EAAE,GAAG,CAAC,IAAI;YACnB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;YACnC,UAAU,EAAE,KAAK,CAAC,WAAW;YAC7B,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrD,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GACX,UAAU,GAAG,CAAC,IAAI,UAAU,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEnE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,KAA8B;IAE9B,MAAM,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;QACzD,KAAK,EAAE;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,SAAS;YACvB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,SAAS;SAChB;QACD,MAAM,EAAE;YACN,IAAI,EAAE;gBACJ,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE;iBAC3C;aACF;SACF;KACF,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,iDAAiD;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GACf,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;IAEnE,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3E,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;QAC/C,sBAAsB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7D,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;KACjC,CAAC,CAAC;IAEH,sEAAsE;IACtE,MAAM,SAAS,GAAG,MAIjB,CAAC;IACF,MAAM,cAAc,GAClB,SAAS,CAAC,UAAU,EAAE,IAAI,IAAI,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC;IACjE,MAAM,cAAc,GAClB,SAAS,CAAC,UAAU,EAAE,IAAI,IAAI,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC;IACjE,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,cAAc,CAAC,CAAC;IAE5D,MAAM,UAAU,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IAE/B,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;QACxC,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,WAAW;QACX,eAAe,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ;QACzC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QACpC,WAAW,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO;QACP,OAAO,EAAE,IAAI;QACb,UAAU;QACV,SAAS;QACT,eAAe,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI;QAC1C,eAAe;QACf,qBAAqB,EAAE,cAAc;QACrC,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU;QAC/B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QAC3B,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,mBAAmB,OAAO,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,MAAM,CAAC;IAEvG,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACnD,QAAQ;QACR,OAAO;QACP,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW;QACX,yDAAyD;QACzD,qBAAqB,EAAE,KAAc;QACrC,UAAU;QACV,UAAU,EAAE,IAAI,CAAC,MAAM;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,KAMC;IAED,MAAM,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEjD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,6BAA6B;SACvC,CAAC,CAAC;IACL,CAAC;IAGD,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,MAAM,GAA6C,EAAE,CAAC;IAE5D,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE;gBAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS;gBACT,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,SAAS;gBACxB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,KAAK,YAAY,KAAK;oBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,+BAA+B,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC","debug_id":"c7eb65fe-e18f-5b5b-9897-ce16dc61c93d"}
+{"version":3,"file":"transcript.js","sources":["services/transcript.ts"],"sourceRoot":"/","sourcesContent":["/**\n * School-admin branded transcripts / progress reports (A4 — Nepal pilot).\n *\n * Aggregates per-class gradebook grades + grading boundaries + attendance %\n * into a pdf-lib PDF. Branding: school name + logo (letterhead optional when\n * present on School; schema does not include it yet — do not block).\n *\n * AcademicTerm (C1) is not modelled yet — accept `from`/`to` date range and/or\n * a free-text `schoolYear` string for the report header.\n *\n * Attendance is read from AttendanceRecord (EXCUSED excluded from the rate\n * denominator) — rate math lives in attendanceRate.ts.\n */\n\nimport { TRPCError } from \"@trpc/server\";\nimport { prisma } from \"../lib/prisma.js\";\nimport { bucket } from \"../lib/googleCloudStorage.js\";\nimport {\n  buildTranscriptPdf,\n  isLevelBasedBoundary,\n  type TranscriptClassRow,\n  type TranscriptReportVariant,\n} from \"../lib/transcriptPdf.js\";\nimport {\n  findActiveSchoolAdminMembership,\n  getSchoolById,\n} from \"../models/school.js\";\nimport { computeAttendanceRate } from \"./attendanceRate.js\";\nimport { computeStudentGradeInClass } from \"./gradebook.js\";\n\nconst MAX_BULK = 50;\n\nexport interface GenerateTranscriptInput {\n  schoolId: string;\n  studentId: string;\n  from?: Date;\n  to?: Date;\n  /**\n   * Free-text school year label (e.g. \"2082 BS\", \"2025–2026\").\n   * Prefer AcademicTerm (C1) once available.\n   */\n  schoolYear?: string;\n}\n\nasync function requireSchoolAdmin(schoolId: string, userId: string) {\n  const membership = await findActiveSchoolAdminMembership(schoolId, userId);\n  if (!membership) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"Only school admins can generate transcripts\",\n    });\n  }\n  return membership;\n}\n\nasync function loadFileBytes(\n  path: string | null | undefined\n): Promise<Uint8Array | null> {\n  if (!path) return null;\n  try {\n    const [bytes] = await bucket.file(path).download();\n    return new Uint8Array(bytes);\n  } catch {\n    return null;\n  }\n}\n\nfunction formatPeriodLabel(from?: Date, to?: Date): string | null {\n  if (!from && !to) return null;\n  const fmt = (d: Date) => d.toISOString().slice(0, 10);\n  if (from && to) return `${fmt(from)} – ${fmt(to)}`;\n  if (from) return `From ${fmt(from)}`;\n  return `Through ${fmt(to!)}`;\n}\n\nfunction slugify(value: string): string {\n  return value\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-|-$/g, \"\")\n    .slice(0, 48);\n}\n\nasync function fetchStudentAttendance(\n  studentId: string,\n  from?: Date,\n  to?: Date\n) {\n  const range = {\n    ...(from ? { gte: from } : {}),\n    ...(to ? { lte: to } : {}),\n  };\n  const hasRange = Object.keys(range).length > 0;\n\n  // Read AttendanceRecord so EXCUSED records are excluded from the rate\n  // denominator (computeAttendanceRate ignores non-PRESENT/LATE/ABSENT).\n  const records = await prisma.attendanceRecord.findMany({\n    where: {\n      studentId,\n      status: { in: [\"PRESENT\", \"LATE\", \"ABSENT\"] },\n      ...(hasRange ? { attendance: { date: range } } : {}),\n    },\n    select: { status: true },\n  });\n\n  return records.map((record) => ({\n    status: record.status as \"PRESENT\" | \"LATE\" | \"ABSENT\",\n  }));\n}\n\nasync function buildClassRows(\n  schoolId: string,\n  studentId: string\n): Promise<{ rows: TranscriptClassRow[]; variant: TranscriptReportVariant }> {\n  const classes = await prisma.class.findMany({\n    where: {\n      schoolId,\n      students: { some: { id: studentId } },\n    },\n    select: {\n      id: true,\n      name: true,\n      subject: true,\n      section: true,\n    },\n    orderBy: [{ subject: \"asc\" }, { name: \"asc\" }],\n  });\n\n  const rows: TranscriptClassRow[] = [];\n  let levelVotes = 0;\n  let letterVotes = 0;\n\n  for (const cls of classes) {\n    const grade = await computeStudentGradeInClass(cls.id, studentId);\n    if (!grade) continue;\n\n    if (isLevelBasedBoundary(grade.gradingBoundary?.structured)) {\n      levelVotes += 1;\n    } else if (grade.gradingBoundary) {\n      letterVotes += 1;\n    }\n\n    rows.push({\n      className: cls.name,\n      subject: cls.subject,\n      section: cls.section,\n      percentage: grade.result.percentage,\n      gradeLabel: grade.letterGrade,\n      categorySummaries: grade.result.categories.map((c) => ({\n        name: c.name,\n        average: c.average,\n      })),\n    });\n  }\n\n  const variant: TranscriptReportVariant =\n    levelVotes > 0 && levelVotes >= letterVotes ? \"level\" : \"letter\";\n\n  return { rows, variant };\n}\n\nexport async function generateTranscript(\n  userId: string,\n  input: GenerateTranscriptInput\n) {\n  await requireSchoolAdmin(input.schoolId, userId);\n\n  const school = await getSchoolById(input.schoolId);\n  if (!school) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"School not found\" });\n  }\n\n  const membership = await prisma.schoolMembership.findFirst({\n    where: {\n      schoolId: input.schoolId,\n      userId: input.studentId,\n      status: \"ACTIVE\",\n      role: \"STUDENT\",\n    },\n    select: {\n      user: {\n        select: {\n          id: true,\n          username: true,\n          profile: { select: { displayName: true } },\n        },\n      },\n    },\n  });\n  if (!membership) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"Student is not an active student in this school\",\n    });\n  }\n\n  const studentName =\n    membership.user.profile?.displayName || membership.user.username;\n\n  const [{ rows, variant }, attendanceStatuses, logoBytes] = await Promise.all([\n    buildClassRows(input.schoolId, input.studentId),\n    fetchStudentAttendance(input.studentId, input.from, input.to),\n    loadFileBytes(school.logo?.path),\n  ]);\n\n  // Soft letterhead support when schema later adds it — never required.\n  const schoolAny = school as {\n    letterhead?: { path?: string | null; type?: string | null } | null;\n    letterheadPath?: string | null;\n    letterheadType?: string | null;\n  };\n  const letterheadPath =\n    schoolAny.letterhead?.path ?? schoolAny.letterheadPath ?? null;\n  const letterheadType =\n    schoolAny.letterhead?.type ?? schoolAny.letterheadType ?? null;\n  const letterheadBytes = await loadFileBytes(letterheadPath);\n\n  const attendance = computeAttendanceRate(attendanceStatuses);\n  const generatedAt = new Date();\n\n  const pdfBytes = await buildTranscriptPdf({\n    schoolName: school.name,\n    studentName,\n    studentUsername: membership.user.username,\n    schoolYear: input.schoolYear ?? null,\n    periodLabel: formatPeriodLabel(input.from, input.to),\n    variant,\n    classes: rows,\n    attendance,\n    logoBytes,\n    logoContentType: school.logo?.type ?? null,\n    letterheadBytes,\n    letterheadContentType: letterheadType,\n    generatedAt,\n  });\n\n  const yearSlug = input.schoolYear\n    ? slugify(input.schoolYear)\n    : generatedAt.toISOString().slice(0, 10);\n  const fileName = `progress-report-${slugify(studentName) || membership.user.username}-${yearSlug}.pdf`;\n\n  return {\n    pdfBase64: Buffer.from(pdfBytes).toString(\"base64\"),\n    fileName,\n    variant,\n    studentId: input.studentId,\n    studentName,\n    /** C1 blocker: AcademicTerm model does not exist yet. */\n    academicTermSupported: false as const,\n    attendance,\n    classCount: rows.length,\n  };\n}\n\nexport async function generateTranscripts(\n  userId: string,\n  input: {\n    schoolId: string;\n    studentIds: string[];\n    from?: Date;\n    to?: Date;\n    schoolYear?: string;\n  }\n) {\n  await requireSchoolAdmin(input.schoolId, userId);\n\n  const uniqueIds = [...new Set(input.studentIds)].slice(0, MAX_BULK);\n  if (uniqueIds.length === 0) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"Select at least one student\",\n    });\n  }\n\n  type TranscriptResult = Awaited<ReturnType<typeof generateTranscript>>;\n  const results: TranscriptResult[] = [];\n  const errors: { studentId: string; message: string }[] = [];\n\n  for (const studentId of uniqueIds) {\n    try {\n      const result = await generateTranscript(userId, {\n        schoolId: input.schoolId,\n        studentId,\n        from: input.from,\n        to: input.to,\n        schoolYear: input.schoolYear,\n      });\n      results.push(result);\n    } catch (error) {\n      const message =\n        error instanceof TRPCError\n          ? error.message\n          : error instanceof Error\n            ? error.message\n            : \"Failed to generate transcript\";\n      errors.push({ studentId, message });\n    }\n  }\n\n  return { transcripts: results, errors };\n}\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;;;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AACtD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,GAGrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,+BAA+B,EAC/B,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D,MAAM,QAAQ,GAAG,EAAE,CAAC;AAcpB,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,MAAc;IAChE,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,6CAA6C;SACvD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAA+B;IAE/B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAW,EAAE,EAAS;IAC/C,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,GAAG,GAAG,CAAC,CAAO,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;IACnD,IAAI,IAAI;QAAE,OAAO,QAAQ,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;IACrC,OAAO,WAAW,GAAG,CAAC,EAAG,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,SAAiB,EACjB,IAAW,EACX,EAAS;IAET,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3B,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAE/C,sEAAsE;IACtE,uEAAuE;IACvE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QACrD,KAAK,EAAE;YACL,SAAS;YACT,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;YAC7C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD;QACD,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;KACzB,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAuC;KACvD,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAAgB,EAChB,SAAiB;IAEjB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1C,KAAK,EAAE;YACL,QAAQ;YACR,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;SACtC;QACD,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;SACd;QACD,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;KAC/C,CAAC,CAAC;IAEH,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,IAAI,oBAAoB,CAAC,KAAK,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,CAAC;YAC5D,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;aAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YACjC,WAAW,IAAI,CAAC,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC;YACR,SAAS,EAAE,GAAG,CAAC,IAAI;YACnB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;YACnC,UAAU,EAAE,KAAK,CAAC,WAAW;YAC7B,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrD,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GACX,UAAU,GAAG,CAAC,IAAI,UAAU,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEnE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,KAA8B;IAE9B,MAAM,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;QACzD,KAAK,EAAE;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,SAAS;YACvB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,SAAS;SAChB;QACD,MAAM,EAAE;YACN,IAAI,EAAE;gBACJ,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE;iBAC3C;aACF;SACF;KACF,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,iDAAiD;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GACf,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;IAEnE,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3E,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;QAC/C,sBAAsB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7D,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;KACjC,CAAC,CAAC;IAEH,sEAAsE;IACtE,MAAM,SAAS,GAAG,MAIjB,CAAC;IACF,MAAM,cAAc,GAClB,SAAS,CAAC,UAAU,EAAE,IAAI,IAAI,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC;IACjE,MAAM,cAAc,GAClB,SAAS,CAAC,UAAU,EAAE,IAAI,IAAI,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC;IACjE,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,cAAc,CAAC,CAAC;IAE5D,MAAM,UAAU,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IAE/B,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;QACxC,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,WAAW;QACX,eAAe,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ;QACzC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QACpC,WAAW,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO;QACP,OAAO,EAAE,IAAI;QACb,UAAU;QACV,SAAS;QACT,eAAe,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI;QAC1C,eAAe;QACf,qBAAqB,EAAE,cAAc;QACrC,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU;QAC/B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QAC3B,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,mBAAmB,OAAO,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,MAAM,CAAC;IAEvG,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACnD,QAAQ;QACR,OAAO;QACP,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW;QACX,yDAAyD;QACzD,qBAAqB,EAAE,KAAc;QACrC,UAAU;QACV,UAAU,EAAE,IAAI,CAAC,MAAM;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,KAMC;IAED,MAAM,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEjD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,6BAA6B;SACvC,CAAC,CAAC;IACL,CAAC;IAGD,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,MAAM,GAA6C,EAAE,CAAC;IAE5D,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE;gBAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS;gBACT,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,SAAS;gBACxB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,KAAK,YAAY,KAAK;oBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,+BAA+B,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC","debug_id":"186437e2-1c14-52c2-94d5-09ccd8035936"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@studious-lms/server",
-  "version": "1.24.0",
+  "version": "1.25.0",
   "description": "Backend server for Studious application",
   "main": "dist/exportType.js",
   "types": "dist/exportType.d.ts",

package/scripts/import-nepal-cdc-curriculum.ts

@@ -93,6 +93,12 @@ function parseArgs(argv: string[]) {
   return out;
 }
 
+function parseBool(value: string | boolean | undefined): boolean {
+  if (value === undefined) return false;
+  if (typeof value === "boolean") return value;
+  return !["false", "0", "no"].includes(value.trim().toLowerCase());
+}
+
 function loadJson<T>(path: string): T {
   return JSON.parse(readFileSync(path, "utf8")) as T;
 }
@@ -174,13 +180,19 @@ async function main() {
     process.exit(1);
   }
 
-  const dryRun = Boolean(args["dry-run"]);
-  const force = Boolean(args.force);
-  const skipBoundary = Boolean(args["skip-boundary"]);
-  const grades = String(args.grades ?? "4,5")
+  const dryRun = parseBool(args["dry-run"]);
+  const force = parseBool(args.force);
+  const skipBoundary = parseBool(args["skip-boundary"]);
+  const rawGrades = String(args.grades ?? "4,5")
     .split(",")
-    .map((g) => Number(g.trim()))
-    .filter((g): g is 4 | 5 => g === 4 || g === 5);
+    .map((g) => Number(g.trim()));
+  const grades = rawGrades.filter((g): g is 4 | 5 => g === 4 || g === 5);
+  if (grades.length === 0 || grades.length !== rawGrades.length) {
+    console.error(
+      `Invalid --grades value: ${String(args.grades)}. Use 4, 5, or 4,5.`
+    );
+    process.exit(1);
+  }
   const subjectFilter = args.subjects
     ? String(args.subjects)
         .split(",")
@@ -219,6 +231,17 @@ async function main() {
     loadJson<SubjectFile>(join(PACK_DIR, "subjects", f))
   );
 
+  if (subjectFilter) {
+    const knownKeys = new Set(subjects.map((s) => s.key));
+    const unknown = subjectFilter.filter((key) => !knownKeys.has(key));
+    if (unknown.length > 0) {
+      console.error(
+        `Unknown --subjects value(s): ${unknown.join(", ")}. Known: ${[...knownKeys].join(", ")}`
+      );
+      process.exit(1);
+    }
+  }
+
   const units = subjects
     .filter((s) => !subjectFilter || subjectFilter.includes(s.key))
     .flatMap((s) => s.units)

package/src/models/attendance.ts

@@ -370,18 +370,16 @@ function buildRecordsFromLists(input: {
     status: AttendanceStatus;
     updatedById?: string | null;
   }> = [];
-  for (const studentId of input.presentIds) {
-    records.push({ studentId, status: "PRESENT", updatedById: input.updatedById });
-  }
-  for (const studentId of input.lateIds) {
-    records.push({ studentId, status: "LATE", updatedById: input.updatedById });
-  }
-  for (const studentId of input.absentIds) {
-    records.push({ studentId, status: "ABSENT", updatedById: input.updatedById });
-  }
-  for (const studentId of input.excusedIds) {
-    records.push({ studentId, status: "EXCUSED", updatedById: input.updatedById });
-  }
+  const seen = new Set<string>();
+  const pushUnique = (studentId: string, status: AttendanceStatus) => {
+    if (seen.has(studentId)) return;
+    seen.add(studentId);
+    records.push({ studentId, status, updatedById: input.updatedById });
+  };
+  for (const studentId of input.presentIds) pushUnique(studentId, "PRESENT");
+  for (const studentId of input.lateIds) pushUnique(studentId, "LATE");
+  for (const studentId of input.absentIds) pushUnique(studentId, "ABSENT");
+  for (const studentId of input.excusedIds) pushUnique(studentId, "EXCUSED");
   return records;
 }
 

package/src/models/marketplace.ts

@@ -71,10 +71,13 @@ export async function searchMarketplaceListings(input: {
   limit: number;
   /** When true, include the caller's own hidden listings (for authors). */
   authorId?: string;
+  /** When set, restrict the entire result set (including PUBLIC listings) to this school. */
+  scopeSchoolId?: string;
 }) {
   const search = input.search?.trim();
   const where: Prisma.MarketplaceListingWhereInput = {
     AND: [
+      ...(input.scopeSchoolId ? [{ schoolId: input.scopeSchoolId }] : []),
       {
         OR: [
           { visibility: "PUBLIC", isHidden: false },

package/src/models/moduleItem.ts

@@ -96,12 +96,30 @@ export function deleteModuleItem(id: string) {
   return prisma.moduleItem.delete({ where: { id } });
 }
 
+function fileAccessibleToUserWhere(userId: string) {
+  return {
+    OR: [
+      { userId },
+      { folder: { personalOwnerId: userId } },
+      { folder: { class: { is: classTeacherOrSchoolAdminWhere(userId) } } },
+    ],
+  };
+}
+
+export function findAccessibleFilesByIds(fileIds: string[], userId: string) {
+  return prisma.file.findMany({
+    where: { id: { in: fileIds }, ...fileAccessibleToUserWhere(userId) },
+    select: { id: true, type: true },
+  });
+}
+
 export function attachFilesToModuleItem(
   moduleItemId: string,
-  fileIds: string[]
+  fileIds: string[],
+  userId: string
 ) {
   return prisma.file.updateMany({
-    where: { id: { in: fileIds } },
+    where: { id: { in: fileIds }, ...fileAccessibleToUserWhere(userId) },
     data: { moduleItemId },
   });
 }

package/src/routers/moduleItem.ts

@@ -14,10 +14,12 @@ import {
   updateModuleItemRecord,
 } from "../services/moduleItem.js";
 
+const MAX_MODULE_FILE_BYTES = 2 * 1024 * 1024 * 1024; // 2 GB (videos)
+
 const directFileSchema = z.object({
-  name: z.string(),
-  type: z.string(),
-  size: z.number(),
+  name: z.string().trim().min(1).max(255),
+  type: z.string().trim().min(1).max(255),
+  size: z.number().int().positive().max(MAX_MODULE_FILE_BYTES),
 });
 
 const moduleItemTypeSchema = z.enum(["PAGE", "FILES", "VIDEO"]);
@@ -76,7 +78,7 @@ export const moduleItemRouter = createTRPCRouter({
       z.object({
         classId: z.string(),
         sectionId: z.string(),
-        orderedIds: z.array(z.string()),
+        orderedIds: z.array(z.string()).min(1).max(500),
       })
     )
     .mutation(({ ctx, input }) => reorderModuleItems(ctx.user!.id, input)),

package/src/routers/school.ts

@@ -325,9 +325,14 @@ export const schoolRouter = createTRPCRouter({
    */
   generateTranscript: protectedProcedure
     .input(
-      transcriptPeriodSchema.extend({
-        studentId: z.string(),
-      })
+      transcriptPeriodSchema
+        .extend({
+          studentId: z.string(),
+        })
+        .refine((v) => !v.from || !v.to || v.from <= v.to, {
+          message: "from must be on or before to",
+          path: ["from"],
+        })
     )
     .mutation(({ ctx, input }) => generateTranscript(ctx.user!.id, input)),
 
@@ -337,9 +342,14 @@ export const schoolRouter = createTRPCRouter({
    */
   generateTranscripts: protectedProcedure
     .input(
-      transcriptPeriodSchema.extend({
-        studentIds: z.array(z.string()).min(1).max(50),
-      })
+      transcriptPeriodSchema
+        .extend({
+          studentIds: z.array(z.string()).min(1).max(50),
+        })
+        .refine((v) => !v.from || !v.to || v.from <= v.to, {
+          message: "from must be on or before to",
+          path: ["from"],
+        })
     )
     .mutation(({ ctx, input }) => generateTranscripts(ctx.user!.id, input)),
 

package/src/services/academicCalendar.ts

@@ -89,6 +89,20 @@ export async function updateYear(
   }
 ) {
   await requireSchoolAdmin(input.schoolId, userId);
+  if (input.startDate !== undefined || input.endDate !== undefined) {
+    const existing = await getAcademicYearById(input.yearId, input.schoolId);
+    if (!existing) {
+      throw new TRPCError({ code: "NOT_FOUND", message: "Academic year not found" });
+    }
+    const nextStart = input.startDate ?? existing.startDate;
+    const nextEnd = input.endDate ?? existing.endDate;
+    if (nextEnd < nextStart) {
+      throw new TRPCError({
+        code: "BAD_REQUEST",
+        message: "endDate must be on or after startDate",
+      });
+    }
+  }
   const year = await updateAcademicYear(input.yearId, input.schoolId, {
     name: input.name,
     startDate: input.startDate,
@@ -177,6 +191,20 @@ export async function updateTerm(
   if (!year) {
     throw new TRPCError({ code: "NOT_FOUND", message: "Academic year not found" });
   }
+  if (input.startDate !== undefined || input.endDate !== undefined) {
+    const existingTerm = year.terms.find((t) => t.id === input.termId);
+    if (!existingTerm) {
+      throw new TRPCError({ code: "NOT_FOUND", message: "Academic term not found" });
+    }
+    const nextStart = input.startDate ?? existingTerm.startDate;
+    const nextEnd = input.endDate ?? existingTerm.endDate;
+    if (nextEnd < nextStart) {
+      throw new TRPCError({
+        code: "BAD_REQUEST",
+        message: "endDate must be on or after startDate",
+      });
+    }
+  }
   const term = await updateAcademicTerm(input.termId, input.yearId, {
     name: input.name,
     startDate: input.startDate,

package/src/services/attendance.ts

@@ -291,7 +291,11 @@ export async function updateAttendanceRecord(
   return shapeAttendanceSession(updated);
 }
 
-/** School-admin: today's attendance rollup across classes. */
+/**
+ * School-admin: today's attendance rollup across classes.
+ * `percentage` is session-weighted (share of attended class-session records),
+ * not a share of `totalStudents`; a student in six classes contributes six records.
+ */
 export async function listTodayAttendanceSummary(
   userId: string,
   schoolId: string
@@ -440,13 +444,13 @@ export async function listExcusals(
   const now = toDateOnly(new Date());
 
   return excusals.map((excusal) => {
-    let status: "ACTIVE" | "UPCOMING" | "REVOKED" = "ACTIVE";
+    let status: "ACTIVE" | "UPCOMING" | "EXPIRED" | "REVOKED" = "ACTIVE";
     if (excusal.revokedAt) {
       status = "REVOKED";
     } else if (toDateOnly(excusal.startDate) > now) {
       status = "UPCOMING";
     } else if (toDateOnly(excusal.endDate) < now) {
-      status = "ACTIVE"; // past but not revoked — still listed as ACTIVE historically
+      status = "EXPIRED";
     }
 
     return {

package/src/services/class.ts

@@ -2,7 +2,7 @@
  * Class service – CRUD for classes, members, grades, mark schemes, grading boundaries,
  * syllabus, lab drafts, and invite codes.
  */
-import { SessionType } from "@prisma/client";
+import { Prisma, SessionType } from "@prisma/client";
 import { TRPCError } from "@trpc/server";
 import { prisma } from "../lib/prisma.js";
 import { generateInviteCode } from "../utils/generateInviteCode.js";
@@ -247,7 +247,7 @@ export async function updateClass(
         studentsCanReply: data.studentsCanReply,
       }),
       ...(data.sidebarFeatures !== undefined && {
-        sidebarFeatures: data.sidebarFeatures,
+        sidebarFeatures: data.sidebarFeatures ?? Prisma.DbNull,
       }),
     } as Parameters<typeof prisma.class.update>[0]["data"],
     select: {