@studious-lms/server 1.4.5 → 1.4.7

package/dist/lib/config/cors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cors.d.ts","sourceRoot":"/","sources":["lib/config/cors.ts"],"names":[],"mappings":"AAAA,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,EAAE,aAAa,GAAG,YAAY,GAAG,MAAM,CAAC;IACjD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,4BAA4B,CAAC,EAAE,MAAM,CAAC;CACvC,CAAC;AAqCF,eAAO,MAAM,gBAAgB,GAAI,UAAU,MAAM,aACX,CAAC;AAiBvC,eAAO,MAAM,uBAAuB,GAAI,WAAW,MAAM,aAC6B,CAAC;AAEvF,eAAO,MAAM,4BAA4B,GAAI,WAAW,MAAM,YAO7D,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAAI,KAAK,OAAO;;;+BAShB,MAAM;CAczC,CAAC"}
+{"version":3,"file":"cors.d.ts","sourceRoot":"/","sources":["lib/config/cors.ts"],"names":[],"mappings":"AAAA,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,EAAE,aAAa,GAAG,YAAY,GAAG,MAAM,CAAC;IACjD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,4BAA4B,CAAC,EAAE,MAAM,CAAC;CACvC,CAAC;AAyCF,eAAO,MAAM,gBAAgB,GAAI,UAAU,MAAM,aACX,CAAC;AAiBvC,eAAO,MAAM,uBAAuB,GAAI,WAAW,MAAM,aAC6B,CAAC;AAEvF,eAAO,MAAM,4BAA4B,GAAI,WAAW,MAAM,YAO7D,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAAI,KAAK,OAAO;;;+BAYhB,MAAM;CAczC,CAAC"}

package/dist/lib/config/cors.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="2499986f-b37e-5e23-a023-556de6317b0f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="fed6d0aa-55db-5889-9721-82cba71f1d3b")}catch(e){}}();
 const productionOrigins = [
     'https://www.studious.sh',
     'https://studious.sh',
@@ -12,6 +12,8 @@ const nonProductionOrigins = [
     'http://127.0.0.1:3000',
     'http://127.0.0.1:3001',
 ];
+/** Any preview / prod deployment on *.vercel.app (HTTPS only). */
+const vercelAppOriginPattern = /^https:\/\/[a-z0-9][a-z0-9.-]*\.vercel\.app$/i;
 const MAX_PATTERN_LENGTH = 200;
 // This heuristic only targets common nested-quantifier cases like `(a+)+`.
 // It does not catch every risky construct (for example `.*.*` or deep alternation nesting),
@@ -59,7 +61,10 @@ export const createCorsOriginMatcher = (env) => {
         env.NEXT_PUBLIC_APP_URL ? toCorsOrigin(env.NEXT_PUBLIC_APP_URL) : undefined,
         ...parseCorsOrigins(env.CORS_ALLOWED_ORIGINS),
     ].filter(isDefined)));
-    const allowedOriginPatterns = parseCorsOriginPatterns(env.CORS_ALLOWED_ORIGIN_PATTERNS);
+    const allowedOriginPatterns = [
+        vercelAppOriginPattern,
+        ...parseCorsOriginPatterns(env.CORS_ALLOWED_ORIGIN_PATTERNS),
+    ];
     const isAllowedOrigin = (origin) => {
         const corsOrigin = origin ? toCorsOrigin(origin) : undefined;
         return Boolean(corsOrigin && (allowedOrigins.includes(corsOrigin) ||
@@ -72,4 +77,4 @@ export const createCorsOriginMatcher = (env) => {
     };
 };
 //# sourceMappingURL=cors.js.map
-//# debugId=2499986f-b37e-5e23-a023-556de6317b0f
+//# debugId=fed6d0aa-55db-5889-9721-82cba71f1d3b

package/dist/lib/config/cors.js.map

@@ -1 +1 @@
-{"version":3,"file":"cors.js","sources":["lib/config/cors.ts"],"sourceRoot":"/","sourcesContent":["type CorsEnv = {\n  NODE_ENV?: 'development' | 'production' | 'test';\n  NEXT_PUBLIC_APP_URL?: string;\n  CORS_ALLOWED_ORIGINS?: string;\n  CORS_ALLOWED_ORIGIN_PATTERNS?: string;\n};\n\nconst productionOrigins = [\n  'https://www.studious.sh',\n  'https://studious.sh',\n  'https://dev.studious.sh',\n  'https://www.dev.studious.sh',\n];\n\nconst nonProductionOrigins = [\n  'http://localhost:3000',\n  'http://localhost:3001',\n  'http://127.0.0.1:3000',\n  'http://127.0.0.1:3001',\n];\nconst MAX_PATTERN_LENGTH = 200;\n// This heuristic only targets common nested-quantifier cases like `(a+)+`.\n// It does not catch every risky construct (for example `.*.*` or deep alternation nesting),\n// so `parseCorsOriginPatterns` should still be limited to operator-controlled, anchored patterns.\nconst SUSPICIOUS_QUANTIFIER_PATTERN = /(\\([^)]*[+*{][^)]*\\)|\\[[^\\]]+[+*{][^\\]]*\\])[+*{]/;\n\nconst parseList = (value?: string) =>\n  value\n    ?.split(',')\n    .map((item) => item.trim())\n    .filter(Boolean) ?? [];\n\nconst isDefined = <T>(value: T | undefined | null): value is T => Boolean(value);\n\nconst toCorsOrigin = (value: string) => {\n  try {\n    return new URL(value).origin;\n  } catch {\n    return value.replace(/\\/+$/, '');\n  }\n};\n\nexport const parseCorsOrigins = (origins?: string) =>\n  parseList(origins).map(toCorsOrigin);\n\nconst validateCorsOriginPattern = (pattern: string) => {\n  if (pattern.length > MAX_PATTERN_LENGTH) {\n    throw new Error(`CORS pattern exceeds maximum length of ${MAX_PATTERN_LENGTH}`);\n  }\n\n  // Prefer short, anchored patterns and avoid other complex regex features even if they pass this check.\n  if (SUSPICIOUS_QUANTIFIER_PATTERN.test(pattern)) {\n    throw new Error(\"CORS pattern contains nested or ambiguous quantifiers\");\n  }\n\n  return pattern;\n};\n\n// Patterns are operator-controlled and matched against bounded URL origins, so ReDoS risk is low.\n// Syntax validation does not guarantee safety; prefer anchored patterns and avoid nested quantifiers.\nexport const parseCorsOriginPatterns = (patterns?: string) =>\n  parseList(patterns).map((pattern) => new RegExp(validateCorsOriginPattern(pattern)));\n\nexport const isValidCorsOriginPatternList = (patterns?: string) => {\n  try {\n    parseCorsOriginPatterns(patterns);\n    return true;\n  } catch {\n    return false;\n  }\n};\n\nexport const createCorsOriginMatcher = (env: CorsEnv) => {\n  const allowedOrigins = Array.from(new Set([\n    ...(env.NODE_ENV === 'production' ? productionOrigins : nonProductionOrigins),\n    env.NEXT_PUBLIC_APP_URL ? toCorsOrigin(env.NEXT_PUBLIC_APP_URL) : undefined,\n    ...parseCorsOrigins(env.CORS_ALLOWED_ORIGINS),\n  ].filter(isDefined)));\n\n  const allowedOriginPatterns = parseCorsOriginPatterns(env.CORS_ALLOWED_ORIGIN_PATTERNS);\n\n  const isAllowedOrigin = (origin?: string) => {\n    const corsOrigin = origin ? toCorsOrigin(origin) : undefined;\n\n    return Boolean(corsOrigin && (\n      allowedOrigins.includes(corsOrigin) ||\n      allowedOriginPatterns.some((pattern) => pattern.test(corsOrigin))\n    ));\n  };\n\n  return {\n    allowedOrigins,\n    allowedOriginPatterns,\n    isAllowedOrigin,\n  };\n};\n"],"names":[],"mappings":";;AAOA,MAAM,iBAAiB,GAAG;IACxB,yBAAyB;IACzB,qBAAqB;IACrB,yBAAyB;IACzB,6BAA6B;CAC9B,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,uBAAuB;IACvB,uBAAuB;IACvB,uBAAuB;IACvB,uBAAuB;CACxB,CAAC;AACF,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,2EAA2E;AAC3E,4FAA4F;AAC5F,kGAAkG;AAClG,MAAM,6BAA6B,GAAG,kDAAkD,CAAC;AAEzF,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE,CACnC,KAAK;IACH,EAAE,KAAK,CAAC,GAAG,CAAC;KACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;KAC1B,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;AAE3B,MAAM,SAAS,GAAG,CAAI,KAA2B,EAAc,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEjF,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE;IACrC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAgB,EAAE,EAAE,CACnD,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAEvC,MAAM,yBAAyB,GAAG,CAAC,OAAe,EAAE,EAAE;IACpD,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,0CAA0C,kBAAkB,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,uGAAuG;IACvG,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,kGAAkG;AAClG,sGAAsG;AACtG,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,QAAiB,EAAE,EAAE,CAC3D,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEvF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,QAAiB,EAAE,EAAE;IAChE,IAAI,CAAC;QACH,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAY,EAAE,EAAE;IACtD,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACxC,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAC7E,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3E,GAAG,gBAAgB,CAAC,GAAG,CAAC,oBAAoB,CAAC;KAC9C,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAEtB,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAExF,MAAM,eAAe,GAAG,CAAC,MAAe,EAAE,EAAE;QAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE7D,OAAO,OAAO,CAAC,UAAU,IAAI,CAC3B,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC;YACnC,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAClE,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,cAAc;QACd,qBAAqB;QACrB,eAAe;KAChB,CAAC;AACJ,CAAC,CAAC","debug_id":"2499986f-b37e-5e23-a023-556de6317b0f"}
+{"version":3,"file":"cors.js","sources":["lib/config/cors.ts"],"sourceRoot":"/","sourcesContent":["type CorsEnv = {\n  NODE_ENV?: 'development' | 'production' | 'test';\n  NEXT_PUBLIC_APP_URL?: string;\n  CORS_ALLOWED_ORIGINS?: string;\n  CORS_ALLOWED_ORIGIN_PATTERNS?: string;\n};\n\nconst productionOrigins = [\n  'https://www.studious.sh',\n  'https://studious.sh',\n  'https://dev.studious.sh',\n  'https://www.dev.studious.sh',\n];\n\nconst nonProductionOrigins = [\n  'http://localhost:3000',\n  'http://localhost:3001',\n  'http://127.0.0.1:3000',\n  'http://127.0.0.1:3001',\n];\n\n/** Any preview / prod deployment on *.vercel.app (HTTPS only). */\nconst vercelAppOriginPattern = /^https:\\/\\/[a-z0-9][a-z0-9.-]*\\.vercel\\.app$/i;\n\nconst MAX_PATTERN_LENGTH = 200;\n// This heuristic only targets common nested-quantifier cases like `(a+)+`.\n// It does not catch every risky construct (for example `.*.*` or deep alternation nesting),\n// so `parseCorsOriginPatterns` should still be limited to operator-controlled, anchored patterns.\nconst SUSPICIOUS_QUANTIFIER_PATTERN = /(\\([^)]*[+*{][^)]*\\)|\\[[^\\]]+[+*{][^\\]]*\\])[+*{]/;\n\nconst parseList = (value?: string) =>\n  value\n    ?.split(',')\n    .map((item) => item.trim())\n    .filter(Boolean) ?? [];\n\nconst isDefined = <T>(value: T | undefined | null): value is T => Boolean(value);\n\nconst toCorsOrigin = (value: string) => {\n  try {\n    return new URL(value).origin;\n  } catch {\n    return value.replace(/\\/+$/, '');\n  }\n};\n\nexport const parseCorsOrigins = (origins?: string) =>\n  parseList(origins).map(toCorsOrigin);\n\nconst validateCorsOriginPattern = (pattern: string) => {\n  if (pattern.length > MAX_PATTERN_LENGTH) {\n    throw new Error(`CORS pattern exceeds maximum length of ${MAX_PATTERN_LENGTH}`);\n  }\n\n  // Prefer short, anchored patterns and avoid other complex regex features even if they pass this check.\n  if (SUSPICIOUS_QUANTIFIER_PATTERN.test(pattern)) {\n    throw new Error(\"CORS pattern contains nested or ambiguous quantifiers\");\n  }\n\n  return pattern;\n};\n\n// Patterns are operator-controlled and matched against bounded URL origins, so ReDoS risk is low.\n// Syntax validation does not guarantee safety; prefer anchored patterns and avoid nested quantifiers.\nexport const parseCorsOriginPatterns = (patterns?: string) =>\n  parseList(patterns).map((pattern) => new RegExp(validateCorsOriginPattern(pattern)));\n\nexport const isValidCorsOriginPatternList = (patterns?: string) => {\n  try {\n    parseCorsOriginPatterns(patterns);\n    return true;\n  } catch {\n    return false;\n  }\n};\n\nexport const createCorsOriginMatcher = (env: CorsEnv) => {\n  const allowedOrigins = Array.from(new Set([\n    ...(env.NODE_ENV === 'production' ? productionOrigins : nonProductionOrigins),\n    env.NEXT_PUBLIC_APP_URL ? toCorsOrigin(env.NEXT_PUBLIC_APP_URL) : undefined,\n    ...parseCorsOrigins(env.CORS_ALLOWED_ORIGINS),\n  ].filter(isDefined)));\n\n  const allowedOriginPatterns = [\n    vercelAppOriginPattern,\n    ...parseCorsOriginPatterns(env.CORS_ALLOWED_ORIGIN_PATTERNS),\n  ];\n\n  const isAllowedOrigin = (origin?: string) => {\n    const corsOrigin = origin ? toCorsOrigin(origin) : undefined;\n\n    return Boolean(corsOrigin && (\n      allowedOrigins.includes(corsOrigin) ||\n      allowedOriginPatterns.some((pattern) => pattern.test(corsOrigin))\n    ));\n  };\n\n  return {\n    allowedOrigins,\n    allowedOriginPatterns,\n    isAllowedOrigin,\n  };\n};\n"],"names":[],"mappings":";;AAOA,MAAM,iBAAiB,GAAG;IACxB,yBAAyB;IACzB,qBAAqB;IACrB,yBAAyB;IACzB,6BAA6B;CAC9B,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,uBAAuB;IACvB,uBAAuB;IACvB,uBAAuB;IACvB,uBAAuB;CACxB,CAAC;AAEF,kEAAkE;AAClE,MAAM,sBAAsB,GAAG,+CAA+C,CAAC;AAE/E,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,2EAA2E;AAC3E,4FAA4F;AAC5F,kGAAkG;AAClG,MAAM,6BAA6B,GAAG,kDAAkD,CAAC;AAEzF,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE,CACnC,KAAK;IACH,EAAE,KAAK,CAAC,GAAG,CAAC;KACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;KAC1B,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;AAE3B,MAAM,SAAS,GAAG,CAAI,KAA2B,EAAc,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEjF,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE;IACrC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAgB,EAAE,EAAE,CACnD,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAEvC,MAAM,yBAAyB,GAAG,CAAC,OAAe,EAAE,EAAE;IACpD,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,0CAA0C,kBAAkB,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,uGAAuG;IACvG,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,kGAAkG;AAClG,sGAAsG;AACtG,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,QAAiB,EAAE,EAAE,CAC3D,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEvF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,QAAiB,EAAE,EAAE;IAChE,IAAI,CAAC;QACH,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAY,EAAE,EAAE;IACtD,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACxC,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAC7E,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3E,GAAG,gBAAgB,CAAC,GAAG,CAAC,oBAAoB,CAAC;KAC9C,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAEtB,MAAM,qBAAqB,GAAG;QAC5B,sBAAsB;QACtB,GAAG,uBAAuB,CAAC,GAAG,CAAC,4BAA4B,CAAC;KAC7D,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,MAAe,EAAE,EAAE;QAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE7D,OAAO,OAAO,CAAC,UAAU,IAAI,CAC3B,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC;YACnC,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAClE,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,cAAc;QACd,qBAAqB;QACrB,eAAe;KAChB,CAAC;AACJ,CAAC,CAAC","debug_id":"fed6d0aa-55db-5889-9721-82cba71f1d3b"}

package/dist/models/access.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Shared class access filters.
+ */
+export declare const schoolAdminForClassWhere: (userId: string) => {
+    OR: ({
+        school: {
+            is: {
+                memberships: {
+                    some: {
+                        userId: string;
+                        role: "ADMIN";
+                        status: "ACTIVE";
+                    };
+                };
+                users?: undefined;
+            };
+        };
+    } | {
+        school: {
+            is: {
+                users: {
+                    some: {
+                        id: string;
+                        role: "ADMIN";
+                    };
+                };
+                memberships?: undefined;
+            };
+        };
+    })[];
+};
+export declare const classTeacherOrSchoolAdminWhere: (userId: string) => {
+    OR: ({
+        OR: ({
+            school: {
+                is: {
+                    memberships: {
+                        some: {
+                            userId: string;
+                            role: "ADMIN";
+                            status: "ACTIVE";
+                        };
+                    };
+                    users?: undefined;
+                };
+            };
+        } | {
+            school: {
+                is: {
+                    users: {
+                        some: {
+                            id: string;
+                            role: "ADMIN";
+                        };
+                    };
+                    memberships?: undefined;
+                };
+            };
+        })[];
+    } | {
+        teachers: {
+            some: {
+                id: string;
+            };
+        };
+    })[];
+};
+export declare const classMemberOrSchoolAdminWhere: (userId: string) => {
+    OR: ({
+        OR: ({
+            school: {
+                is: {
+                    memberships: {
+                        some: {
+                            userId: string;
+                            role: "ADMIN";
+                            status: "ACTIVE";
+                        };
+                    };
+                    users?: undefined;
+                };
+            };
+        } | {
+            school: {
+                is: {
+                    users: {
+                        some: {
+                            id: string;
+                            role: "ADMIN";
+                        };
+                    };
+                    memberships?: undefined;
+                };
+            };
+        })[];
+    } | {
+        teachers: {
+            some: {
+                id: string;
+            };
+        };
+        students?: undefined;
+    } | {
+        students: {
+            some: {
+                id: string;
+            };
+        };
+        teachers?: undefined;
+    })[];
+};
+//# sourceMappingURL=access.d.ts.map

package/dist/models/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"/","sources":["models/access.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,wBAAwB,GAAI,QAAQ,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BrD,CAAC;AAEH,eAAO,MAAM,8BAA8B,GAAI,QAAQ,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAK3D,CAAC;AAEH,eAAO,MAAM,6BAA6B,GAAI,QAAQ,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAM1D,CAAC"}

package/dist/models/access.js

@@ -0,0 +1,49 @@
+/**
+ * Shared class access filters.
+ */
+
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7b5148ef-61c8-512a-bcea-eacfc9066ef7")}catch(e){}}();
+export const schoolAdminForClassWhere = (userId) => ({
+    OR: [
+        {
+            school: {
+                is: {
+                    memberships: {
+                        some: {
+                            userId,
+                            role: "ADMIN",
+                            status: "ACTIVE",
+                        },
+                    },
+                },
+            },
+        },
+        {
+            school: {
+                is: {
+                    users: {
+                        some: {
+                            id: userId,
+                            role: "ADMIN",
+                        },
+                    },
+                },
+            },
+        },
+    ],
+});
+export const classTeacherOrSchoolAdminWhere = (userId) => ({
+    OR: [
+        { teachers: { some: { id: userId } } },
+        schoolAdminForClassWhere(userId),
+    ],
+});
+export const classMemberOrSchoolAdminWhere = (userId) => ({
+    OR: [
+        { teachers: { some: { id: userId } } },
+        { students: { some: { id: userId } } },
+        schoolAdminForClassWhere(userId),
+    ],
+});
+//# sourceMappingURL=access.js.map
+//# debugId=7b5148ef-61c8-512a-bcea-eacfc9066ef7

package/dist/models/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sources":["models/access.ts"],"sourceRoot":"/","sourcesContent":["/**\n * Shared class access filters.\n */\n\nexport const schoolAdminForClassWhere = (userId: string) => ({\n  OR: [\n    {\n      school: {\n        is: {\n          memberships: {\n            some: {\n              userId,\n              role: \"ADMIN\" as const,\n              status: \"ACTIVE\" as const,\n            },\n          },\n        },\n      },\n    },\n    {\n      school: {\n        is: {\n          users: {\n            some: {\n              id: userId,\n              role: \"ADMIN\" as const,\n            },\n          },\n        },\n      },\n    },\n  ],\n});\n\nexport const classTeacherOrSchoolAdminWhere = (userId: string) => ({\n  OR: [\n    { teachers: { some: { id: userId } } },\n    schoolAdminForClassWhere(userId),\n  ],\n});\n\nexport const classMemberOrSchoolAdminWhere = (userId: string) => ({\n  OR: [\n    { teachers: { some: { id: userId } } },\n    { students: { some: { id: userId } } },\n    schoolAdminForClassWhere(userId),\n  ],\n});\n"],"names":[],"mappings":"AAAA;;GAEG;;;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC;IAC3D,EAAE,EAAE;QACF;YACE,MAAM,EAAE;gBACN,EAAE,EAAE;oBACF,WAAW,EAAE;wBACX,IAAI,EAAE;4BACJ,MAAM;4BACN,IAAI,EAAE,OAAgB;4BACtB,MAAM,EAAE,QAAiB;yBAC1B;qBACF;iBACF;aACF;SACF;QACD;YACE,MAAM,EAAE;gBACN,EAAE,EAAE;oBACF,KAAK,EAAE;wBACL,IAAI,EAAE;4BACJ,EAAE,EAAE,MAAM;4BACV,IAAI,EAAE,OAAgB;yBACvB;qBACF;iBACF;aACF;SACF;KACF;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC;IACjE,EAAE,EAAE;QACF,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACtC,wBAAwB,CAAC,MAAM,CAAC;KACjC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC;IAChE,EAAE,EAAE;QACF,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACtC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACtC,wBAAwB,CAAC,MAAM,CAAC;KACjC;CACF,CAAC,CAAC","debug_id":"7b5148ef-61c8-512a-bcea-eacfc9066ef7"}

package/dist/models/announcement.d.ts

@@ -31,10 +31,10 @@ export declare const announcementSelect: {
 /** @returns Announcements for a class. */
 export declare function findAnnouncementsByClassId(classId: string): import(".prisma/client").Prisma.PrismaPromise<{
     id: string;
+    createdAt: Date;
     _count: {
         comments: number;
     };
-    createdAt: Date;
     modifiedAt: Date | null;
     remarks: string;
     teacher: {
@@ -87,9 +87,24 @@ export declare function findAnnouncementByIdAndClass(id: string, classId: string
         };
     };
 }>;
-/** @returns Announcement by ID with class and teachers. */
+/** @returns Announcement by ID with class teachers and school admins. */
 export declare function findAnnouncementWithClass(id: string): import(".prisma/client").Prisma.Prisma__AnnouncementClient<({
     class: {
+        school: ({
+            users: {
+                id: string;
+            }[];
+            memberships: {
+                userId: string;
+            }[];
+        } & {
+            name: string;
+            id: string;
+            logoId: string | null;
+            subdomain: string | null;
+            createdAt: Date;
+            updatedAt: Date;
+        }) | null;
         teachers: {
             id: string;
             username: string;

package/dist/models/announcement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"announcement.d.ts","sourceRoot":"/","sources":["models/announcement.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6B9B,CAAC;AAEF,0CAA0C;AAC1C,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;KAWzD;AAED,6CAA6C;AAC7C,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAKvE;AAED,2DAA2D;AAC3D,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoBnD;AAED,8BAA8B;AAC9B,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GASA;AAED,uCAAuC;AACvC,wBAAgB,6BAA6B,CAC3C,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;IACJ,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE;QAAE,EAAE,EAAE;YAAE,EAAE,EAAE,MAAM,EAAE,CAAA;SAAE,CAAA;KAAE,CAAC;CACvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAcF;AAED,mCAAmC;AACnC,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAMxE;AAED,8BAA8B;AAC9B,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;GAI5C"}
+{"version":3,"file":"announcement.d.ts","sourceRoot":"/","sources":["models/announcement.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6B9B,CAAC;AAEF,0CAA0C;AAC1C,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;KAWzD;AAED,6CAA6C;AAC7C,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAKvE;AAED,yEAAyE;AACzE,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCnD;AAED,8BAA8B;AAC9B,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GASA;AAED,uCAAuC;AACvC,wBAAgB,6BAA6B,CAC3C,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;IACJ,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE;QAAE,EAAE,EAAE;YAAE,EAAE,EAAE,MAAM,EAAE,CAAA;SAAE,CAAA;KAAE,CAAC;CACvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAcF;AAED,mCAAmC;AACnC,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAMxE;AAED,8BAA8B;AAC9B,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;GAI5C"}

package/dist/models/announcement.js

@@ -2,7 +2,7 @@
  * Announcement model – announcements, attachments, comments.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="897fb52e-f646-5b38-a7f5-276b83746de9")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="fff848bf-ce06-59fe-83ea-7a9d6e208421")}catch(e){}}();
 import { prisma } from "../lib/prisma.js";
 export const announcementSelect = {
     id: true,
@@ -54,13 +54,30 @@ export function findAnnouncementByIdAndClass(id, classId) {
         select: announcementSelect,
     });
 }
-/** @returns Announcement by ID with class and teachers. */
+/** @returns Announcement by ID with class teachers and school admins. */
 export function findAnnouncementWithClass(id) {
     return prisma.announcement.findUnique({
         where: { id },
         include: {
             class: {
-                include: { teachers: true },
+                include: {
+                    teachers: true,
+                    school: {
+                        include: {
+                            users: {
+                                where: { role: "ADMIN" },
+                                select: { id: true },
+                            },
+                            memberships: {
+                                where: {
+                                    role: "ADMIN",
+                                    status: "ACTIVE",
+                                },
+                                select: { userId: true },
+                            },
+                        },
+                    },
+                },
             },
             attachments: {
                 select: {
@@ -117,4 +134,4 @@ export function deleteAnnouncement(id) {
     });
 }
 //# sourceMappingURL=announcement.js.map
-//# debugId=897fb52e-f646-5b38-a7f5-276b83746de9
+//# debugId=fff848bf-ce06-59fe-83ea-7a9d6e208421

package/dist/models/announcement.js.map

@@ -1 +1 @@
-{"version":3,"file":"announcement.js","sources":["models/announcement.ts"],"sourceRoot":"/","sourcesContent":["/**\n * Announcement model – announcements, attachments, comments.\n */\nimport { prisma } from \"../lib/prisma.js\";\n\nexport const announcementSelect = {\n  id: true,\n  teacher: {\n    select: {\n      id: true,\n      username: true,\n      profile: {\n        select: {\n          displayName: true,\n          profilePicture: true,\n          profilePictureThumbnail: true,\n        },\n      },\n    },\n  },\n  remarks: true,\n  createdAt: true,\n  modifiedAt: true,\n  attachments: {\n    select: {\n      id: true,\n      name: true,\n      type: true,\n      size: true,\n      path: true,\n      uploadedAt: true,\n      thumbnailId: true,\n    },\n  },\n};\n\n/** @returns Announcements for a class. */\nexport function findAnnouncementsByClassId(classId: string) {\n  return prisma.announcement.findMany({\n    where: { classId },\n    select: {\n      ...announcementSelect,\n      _count: {\n        select: { comments: true },\n      },\n    },\n    orderBy: { createdAt: \"desc\" },\n  });\n}\n\n/** @returns Announcement by ID and class. */\nexport function findAnnouncementByIdAndClass(id: string, classId: string) {\n  return prisma.announcement.findFirst({\n    where: { id, classId },\n    select: announcementSelect,\n  });\n}\n\n/** @returns Announcement by ID with class and teachers. */\nexport function findAnnouncementWithClass(id: string) {\n  return prisma.announcement.findUnique({\n    where: { id },\n    include: {\n      class: {\n        include: { teachers: true },\n      },\n      attachments: {\n        select: {\n          id: true,\n          name: true,\n          type: true,\n          path: true,\n          size: true,\n          uploadStatus: true,\n          thumbnail: { select: { path: true } },\n        },\n      },\n    },\n  });\n}\n\n/** Create an announcement. */\nexport function createAnnouncement(data: {\n  remarks: string;\n  teacherId: string;\n  classId: string;\n}) {\n  return prisma.announcement.create({\n    data: {\n      remarks: data.remarks,\n      teacher: { connect: { id: data.teacherId } },\n      class: { connect: { id: data.classId } },\n    },\n    select: announcementSelect,\n  });\n}\n\n/** Update announcement attachments. */\nexport function updateAnnouncementAttachments(\n  id: string,\n  data: {\n    connect?: { id: string }[];\n    deleteMany?: { id: { in: string[] } };\n  }\n) {\n  return prisma.announcement.update({\n    where: { id },\n    data: {\n      ...(data.connect?.length && {\n        attachments: { connect: data.connect },\n      }),\n      ...(data.deleteMany && {\n        attachments: { deleteMany: data.deleteMany },\n      }),\n    },\n    select: announcementSelect,\n  });\n}\n\n/** Update announcement remarks. */\nexport function updateAnnouncement(id: string, data: { remarks?: string }) {\n  return prisma.announcement.update({\n    where: { id },\n    data,\n    select: announcementSelect,\n  });\n}\n\n/** Delete an announcement. */\nexport function deleteAnnouncement(id: string) {\n  return prisma.announcement.delete({\n    where: { id },\n  });\n}\n"],"names":[],"mappings":"AAAA;;GAEG;;;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,EAAE,EAAE,IAAI;IACR,OAAO,EAAE;QACP,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE;gBACP,MAAM,EAAE;oBACN,WAAW,EAAE,IAAI;oBACjB,cAAc,EAAE,IAAI;oBACpB,uBAAuB,EAAE,IAAI;iBAC9B;aACF;SACF;KACF;IACD,OAAO,EAAE,IAAI;IACb,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE;QACX,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,IAAI;SAClB;KACF;CACF,CAAC;AAEF,0CAA0C;AAC1C,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,OAAO,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;QAClC,KAAK,EAAE,EAAE,OAAO,EAAE;QAClB,MAAM,EAAE;YACN,GAAG,kBAAkB;YACrB,MAAM,EAAE;gBACN,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC3B;SACF;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,4BAA4B,CAAC,EAAU,EAAE,OAAe;IACtE,OAAO,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC;QACnC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE;QACtB,MAAM,EAAE,kBAAkB;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,yBAAyB,CAAC,EAAU;IAClD,OAAO,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;QACpC,KAAK,EAAE,EAAE,EAAE,EAAE;QACb,OAAO,EAAE;YACP,KAAK,EAAE;gBACL,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC5B;YACD,WAAW,EAAE;gBACX,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,IAAI;oBACV,YAAY,EAAE,IAAI;oBAClB,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;iBACtC;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,kBAAkB,CAAC,IAIlC;IACC,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;QAChC,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;YAC5C,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE;SACzC;QACD,MAAM,EAAE,kBAAkB;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,6BAA6B,CAC3C,EAAU,EACV,IAGC;IAED,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;QAChC,KAAK,EAAE,EAAE,EAAE,EAAE;QACb,IAAI,EAAE;YACJ,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI;gBAC1B,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;aACvC,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI;gBACrB,WAAW,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;aAC7C,CAAC;SACH;QACD,MAAM,EAAE,kBAAkB;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,kBAAkB,CAAC,EAAU,EAAE,IAA0B;IACvE,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;QAChC,KAAK,EAAE,EAAE,EAAE,EAAE;QACb,IAAI;QACJ,MAAM,EAAE,kBAAkB;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;QAChC,KAAK,EAAE,EAAE,EAAE,EAAE;KACd,CAAC,CAAC;AACL,CAAC","debug_id":"897fb52e-f646-5b38-a7f5-276b83746de9"}
+{"version":3,"file":"announcement.js","sources":["models/announcement.ts"],"sourceRoot":"/","sourcesContent":["/**\n * Announcement model – announcements, attachments, comments.\n */\nimport { prisma } from \"../lib/prisma.js\";\n\nexport const announcementSelect = {\n  id: true,\n  teacher: {\n    select: {\n      id: true,\n      username: true,\n      profile: {\n        select: {\n          displayName: true,\n          profilePicture: true,\n          profilePictureThumbnail: true,\n        },\n      },\n    },\n  },\n  remarks: true,\n  createdAt: true,\n  modifiedAt: true,\n  attachments: {\n    select: {\n      id: true,\n      name: true,\n      type: true,\n      size: true,\n      path: true,\n      uploadedAt: true,\n      thumbnailId: true,\n    },\n  },\n};\n\n/** @returns Announcements for a class. */\nexport function findAnnouncementsByClassId(classId: string) {\n  return prisma.announcement.findMany({\n    where: { classId },\n    select: {\n      ...announcementSelect,\n      _count: {\n        select: { comments: true },\n      },\n    },\n    orderBy: { createdAt: \"desc\" },\n  });\n}\n\n/** @returns Announcement by ID and class. */\nexport function findAnnouncementByIdAndClass(id: string, classId: string) {\n  return prisma.announcement.findFirst({\n    where: { id, classId },\n    select: announcementSelect,\n  });\n}\n\n/** @returns Announcement by ID with class teachers and school admins. */\nexport function findAnnouncementWithClass(id: string) {\n  return prisma.announcement.findUnique({\n    where: { id },\n    include: {\n      class: {\n        include: {\n          teachers: true,\n          school: {\n            include: {\n              users: {\n                where: { role: \"ADMIN\" as const },\n                select: { id: true },\n              },\n              memberships: {\n                where: {\n                  role: \"ADMIN\" as const,\n                  status: \"ACTIVE\" as const,\n                },\n                select: { userId: true },\n              },\n            },\n          },\n        },\n      },\n      attachments: {\n        select: {\n          id: true,\n          name: true,\n          type: true,\n          path: true,\n          size: true,\n          uploadStatus: true,\n          thumbnail: { select: { path: true } },\n        },\n      },\n    },\n  });\n}\n\n/** Create an announcement. */\nexport function createAnnouncement(data: {\n  remarks: string;\n  teacherId: string;\n  classId: string;\n}) {\n  return prisma.announcement.create({\n    data: {\n      remarks: data.remarks,\n      teacher: { connect: { id: data.teacherId } },\n      class: { connect: { id: data.classId } },\n    },\n    select: announcementSelect,\n  });\n}\n\n/** Update announcement attachments. */\nexport function updateAnnouncementAttachments(\n  id: string,\n  data: {\n    connect?: { id: string }[];\n    deleteMany?: { id: { in: string[] } };\n  }\n) {\n  return prisma.announcement.update({\n    where: { id },\n    data: {\n      ...(data.connect?.length && {\n        attachments: { connect: data.connect },\n      }),\n      ...(data.deleteMany && {\n        attachments: { deleteMany: data.deleteMany },\n      }),\n    },\n    select: announcementSelect,\n  });\n}\n\n/** Update announcement remarks. */\nexport function updateAnnouncement(id: string, data: { remarks?: string }) {\n  return prisma.announcement.update({\n    where: { id },\n    data,\n    select: announcementSelect,\n  });\n}\n\n/** Delete an announcement. */\nexport function deleteAnnouncement(id: string) {\n  return prisma.announcement.delete({\n    where: { id },\n  });\n}\n"],"names":[],"mappings":"AAAA;;GAEG;;;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,EAAE,EAAE,IAAI;IACR,OAAO,EAAE;QACP,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE;gBACP,MAAM,EAAE;oBACN,WAAW,EAAE,IAAI;oBACjB,cAAc,EAAE,IAAI;oBACpB,uBAAuB,EAAE,IAAI;iBAC9B;aACF;SACF;KACF;IACD,OAAO,EAAE,IAAI;IACb,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE;QACX,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,IAAI;SAClB;KACF;CACF,CAAC;AAEF,0CAA0C;AAC1C,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,OAAO,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;QAClC,KAAK,EAAE,EAAE,OAAO,EAAE;QAClB,MAAM,EAAE;YACN,GAAG,kBAAkB;YACrB,MAAM,EAAE;gBACN,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC3B;SACF;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,4BAA4B,CAAC,EAAU,EAAE,OAAe;IACtE,OAAO,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC;QACnC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE;QACtB,MAAM,EAAE,kBAAkB;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,yBAAyB,CAAC,EAAU;IAClD,OAAO,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;QACpC,KAAK,EAAE,EAAE,EAAE,EAAE;QACb,OAAO,EAAE;YACP,KAAK,EAAE;gBACL,OAAO,EAAE;oBACP,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE;wBACN,OAAO,EAAE;4BACP,KAAK,EAAE;gCACL,KAAK,EAAE,EAAE,IAAI,EAAE,OAAgB,EAAE;gCACjC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;6BACrB;4BACD,WAAW,EAAE;gCACX,KAAK,EAAE;oCACL,IAAI,EAAE,OAAgB;oCACtB,MAAM,EAAE,QAAiB;iCAC1B;gCACD,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;6BACzB;yBACF;qBACF;iBACF;aACF;YACD,WAAW,EAAE;gBACX,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,IAAI;oBACV,YAAY,EAAE,IAAI;oBAClB,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;iBACtC;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,kBAAkB,CAAC,IAIlC;IACC,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;QAChC,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;YAC5C,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE;SACzC;QACD,MAAM,EAAE,kBAAkB;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,6BAA6B,CAC3C,EAAU,EACV,IAGC;IAED,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;QAChC,KAAK,EAAE,EAAE,EAAE,EAAE;QACb,IAAI,EAAE;YACJ,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI;gBAC1B,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;aACvC,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI;gBACrB,WAAW,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;aAC7C,CAAC;SACH;QACD,MAAM,EAAE,kBAAkB;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,kBAAkB,CAAC,EAAU,EAAE,IAA0B;IACvE,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;QAChC,KAAK,EAAE,EAAE,EAAE,EAAE;QACb,IAAI;QACJ,MAAM,EAAE,kBAAkB;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;QAChC,KAAK,EAAE,EAAE,EAAE,EAAE;KACd,CAAC,CAAC;AACL,CAAC","debug_id":"fff848bf-ce06-59fe-83ea-7a9d6e208421"}