@olinfo/quizms-firebase 4.0.0-canary.20251130

package/bin/bin.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env -S node --no-deprecation --experimental-import-meta-resolve
+"use strict";
+
+void import("../dist/cli.js");

package/dist/cli.d.ts

@@ -0,0 +1 @@
+export { }

package/dist/cli.js

@@ -0,0 +1,36 @@
+import { existsSync as n } from "node:fs";
+import { homedir as a } from "node:os";
+import e from "node:path";
+import { exit as c, cwd as m, chdir as d } from "node:process";
+import { fatal as f } from "@olinfo/quizms/utils-node";
+import { program as t, Option as r } from "commander";
+import { version as s } from "./package.json.js";
+import l from "./src/cli/definalize.js";
+import h from "./src/cli/export.js";
+import u from "./src/cli/import.js";
+import x from "./src/cli/init.js";
+import g from "./src/cli/update-scores.js";
+function v() {
+  const p = a();
+  let o = m();
+  for (; ; ) {
+    if (n(e.join(o, "package.json")) && n(e.join(o, "src"))) {
+      d(o);
+      return;
+    }
+    const i = e.dirname(o);
+    (i === o || i === p) && f("Invalid directory. Make sure you're inside a QuizMS project."), o = i;
+  }
+}
+async function I() {
+  t.addHelpText("beforeAll", `QuizMS-firebase cli v${s}
+`), t.name("quizms-firebase"), t.version(s), t.command("init").description("Initialize the Firebase project.").option("--force", "Overwrite existing files.").action(x), t.command("export").description("Export the contests data.").option("--contests", "Export the contests.").option("--participations", "Export the participations.").option("--students", "Export the students.").option("--variants", "Export the variants.").action(h), t.command("import").description("Import the contests data.").option("-c, --config <config>", "The contests config file.").option("--admins", "Import the admins.").option("--contests", "Import the contests.").option("--schools", "Import the schools.").option("--statements", "Import the statements.").option("--students", "Import the students.").option("--teachers", "Import the teachers.").option("--variants", "Import the variants.").option("-d, --delete", "Delete existing collections.").addOption(new r("-s, --skip-existing", "Skip existing files.").conflicts(["--delete"])).addOption(
+    new r("-f, --force", "Overwrite existing documents.").conflicts([
+      "--delete",
+      "--skip-existing"
+    ])
+  ).action(u), t.command("definalize").description("Definalize all participations.").action(l), t.command("update-scores").description("Update student scores.").action(g), v(), await t.parseAsync();
+}
+await I();
+c(0);
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sources":["../src/cli/index.ts"],"sourcesContent":["import { existsSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport path from \"node:path\";\nimport { chdir, cwd, exit } from \"node:process\";\n\nimport { fatal } from \"@olinfo/quizms/utils-node\";\nimport { Option, program } from \"commander\";\nimport { version } from \"package.json\";\n\nimport definalize from \"./definalize\";\nimport exportData from \"./export\";\nimport importData from \"./import\";\nimport init from \"./init\";\nimport updateScores from \"./update-scores\";\n\nfunction findProjectDirectory() {\n  const home = homedir();\n  let root = cwd();\n  for (;;) {\n    if (existsSync(path.join(root, \"package.json\")) && existsSync(path.join(root, \"src\"))) {\n      chdir(root);\n      return;\n    }\n    const parent = path.dirname(root);\n    if (parent === root || parent === home) {\n      fatal(\"Invalid directory. Make sure you're inside a QuizMS project.\");\n    }\n    root = parent;\n  }\n}\n\nasync function main() {\n  program.addHelpText(\"beforeAll\", `QuizMS-firebase cli v${version}\\n`);\n  program.name(\"quizms-firebase\");\n  program.version(version);\n\n  program\n    .command(\"init\")\n    .description(\"Initialize the Firebase project.\")\n    .option(\"--force\", \"Overwrite existing files.\")\n    .action(init);\n\n  program\n    .command(\"export\")\n    .description(\"Export the contests data.\")\n    .option(\"--contests\", \"Export the contests.\")\n    .option(\"--participations\", \"Export the participations.\")\n    .option(\"--students\", \"Export the students.\")\n    .option(\"--variants\", \"Export the variants.\")\n    .action(exportData);\n\n  program\n    .command(\"import\")\n    .description(\"Import the contests data.\")\n    .option(\"-c, --config <config>\", \"The contests config file.\")\n    .option(\"--admins\", \"Import the admins.\")\n    .option(\"--contests\", \"Import the contests.\")\n    .option(\"--schools\", \"Import the schools.\")\n    .option(\"--statements\", \"Import the statements.\")\n    .option(\"--students\", \"Import the students.\")\n    .option(\"--teachers\", \"Import the teachers.\")\n    .option(\"--variants\", \"Import the variants.\")\n    .option(\"-d, --delete\", \"Delete existing collections.\")\n    .addOption(new Option(\"-s, --skip-existing\", \"Skip existing files.\").conflicts([\"--delete\"]))\n    .addOption(\n      new Option(\"-f, --force\", \"Overwrite existing documents.\").conflicts([\n        \"--delete\",\n        \"--skip-existing\",\n      ]),\n    )\n    .action(importData);\n\n  program.command(\"definalize\").description(\"Definalize all participations.\").action(definalize);\n  program.command(\"update-scores\").description(\"Update student scores.\").action(updateScores);\n\n  findProjectDirectory();\n  await program.parseAsync();\n}\n\nawait main();\nexit(0);\n"],"names":["findProjectDirectory","home","homedir","root","cwd","existsSync","path","chdir","parent","fatal","main","program","version","init","exportData","Option","importData","definalize","updateScores","exit"],"mappings":";;;;;;;;;;;;AAeA,SAASA,IAAuB;AAC9B,QAAMC,IAAOC,EAAA;AACb,MAAIC,IAAOC,EAAA;AACX,aAAS;AACP,QAAIC,EAAWC,EAAK,KAAKH,GAAM,cAAc,CAAC,KAAKE,EAAWC,EAAK,KAAKH,GAAM,KAAK,CAAC,GAAG;AACrF,MAAAI,EAAMJ,CAAI;AACV;AAAA,IACF;AACA,UAAMK,IAASF,EAAK,QAAQH,CAAI;AAChC,KAAIK,MAAWL,KAAQK,MAAWP,MAChCQ,EAAM,8DAA8D,GAEtEN,IAAOK;AAAA,EACT;AACF;AAEA,eAAeE,IAAO;AACpB,EAAAC,EAAQ,YAAY,aAAa,wBAAwBC,CAAO;AAAA,CAAI,GACpED,EAAQ,KAAK,iBAAiB,GAC9BA,EAAQ,QAAQC,CAAO,GAEvBD,EACG,QAAQ,MAAM,EACd,YAAY,kCAAkC,EAC9C,OAAO,WAAW,2BAA2B,EAC7C,OAAOE,CAAI,GAEdF,EACG,QAAQ,QAAQ,EAChB,YAAY,2BAA2B,EACvC,OAAO,cAAc,sBAAsB,EAC3C,OAAO,oBAAoB,4BAA4B,EACvD,OAAO,cAAc,sBAAsB,EAC3C,OAAO,cAAc,sBAAsB,EAC3C,OAAOG,CAAU,GAEpBH,EACG,QAAQ,QAAQ,EAChB,YAAY,2BAA2B,EACvC,OAAO,yBAAyB,2BAA2B,EAC3D,OAAO,YAAY,oBAAoB,EACvC,OAAO,cAAc,sBAAsB,EAC3C,OAAO,aAAa,qBAAqB,EACzC,OAAO,gBAAgB,wBAAwB,EAC/C,OAAO,cAAc,sBAAsB,EAC3C,OAAO,cAAc,sBAAsB,EAC3C,OAAO,cAAc,sBAAsB,EAC3C,OAAO,gBAAgB,8BAA8B,EACrD,UAAU,IAAII,EAAO,uBAAuB,sBAAsB,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,EAC3F;AAAA,IACC,IAAIA,EAAO,eAAe,+BAA+B,EAAE,UAAU;AAAA,MACnE;AAAA,MACA;AAAA,IAAA,CACD;AAAA,EAAA,EAEF,OAAOC,CAAU,GAEpBL,EAAQ,QAAQ,YAAY,EAAE,YAAY,gCAAgC,EAAE,OAAOM,CAAU,GAC7FN,EAAQ,QAAQ,eAAe,EAAE,YAAY,wBAAwB,EAAE,OAAOO,CAAY,GAE1FlB,EAAA,GACA,MAAMW,EAAQ,WAAA;AAChB;AAEA,MAAMD,EAAA;AACNS,EAAK,CAAC;"}

package/dist/entry.d.ts

@@ -0,0 +1,4 @@
+declare function createFirebaseEntry(): void;
+export default createFirebaseEntry;
+
+export { }

package/dist/entry.js

@@ -0,0 +1,19 @@
+import { jsx as r, jsxs as n } from "react/jsx-runtime";
+import { lazy as t } from "react";
+import { createApp as o } from "@olinfo/quizms/entry";
+import { Router as i, Switch as c, Route as e } from "wouter";
+import { FirebaseLogin as m } from "./src/web/common/base-login.js";
+const p = t(() => import("./src/web/entry/admin.js")), a = t(() => import("./src/web/entry/teacher.js")), s = t(() => import("./src/web/entry/student.js"));
+function E() {
+  return o(
+    /* @__PURE__ */ r(i, { base: process.env.NODE_ENV === "development" ? "/firebase" : "", children: /* @__PURE__ */ r(m, { children: /* @__PURE__ */ n(c, { children: [
+      /* @__PURE__ */ r(e, { path: "/admin", nest: !0, children: /* @__PURE__ */ r(p, {}) }),
+      /* @__PURE__ */ r(e, { path: "/teacher", nest: !0, children: /* @__PURE__ */ r(a, {}) }),
+      /* @__PURE__ */ r(e, { path: "/", children: /* @__PURE__ */ r(s, {}) })
+    ] }) }) })
+  );
+}
+export {
+  E as default
+};
+//# sourceMappingURL=entry.js.map

package/dist/entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.js","sources":["../src/web/entry/index.tsx"],"sourcesContent":["import { lazy } from \"react\";\n\nimport { createApp } from \"@olinfo/quizms/entry\";\nimport { Route, Router, Switch } from \"wouter\";\n\nimport { FirebaseLogin } from \"~/web/common/base-login\";\n\nconst AdminEntry = lazy(() => import(\"./admin\"));\nconst TeacherEntry = lazy(() => import(\"./teacher\"));\nconst StudentEntry = lazy(() => import(\"./student\"));\n\nexport default function createFirebaseEntry() {\n  return createApp(\n    <Router base={process.env.NODE_ENV === \"development\" ? \"/firebase\" : \"\"}>\n      <FirebaseLogin>\n        <Switch>\n          <Route path=\"/admin\" nest>\n            <AdminEntry />\n          </Route>\n          <Route path=\"/teacher\" nest>\n            <TeacherEntry />\n          </Route>\n          <Route path=\"/\">\n            <StudentEntry />\n          </Route>\n        </Switch>\n      </FirebaseLogin>\n    </Router>,\n  );\n}\n"],"names":["AdminEntry","lazy","TeacherEntry","StudentEntry","createFirebaseEntry","createApp","jsx","Router","FirebaseLogin","jsxs","Switch","Route"],"mappings":";;;;;AAOA,MAAMA,IAAaC,EAAK,MAAM,OAAO,0BAAS,CAAC,GACzCC,IAAeD,EAAK,MAAM,OAAO,4BAAW,CAAC,GAC7CE,IAAeF,EAAK,MAAM,OAAO,4BAAW,CAAC;AAEnD,SAAwBG,IAAsB;AAC5C,SAAOC;AAAA,IACL,gBAAAC,EAACC,GAAA,EAAO,MAAM,QAAQ,IAAI,aAAa,gBAAgB,cAAc,IACnE,UAAA,gBAAAD,EAACE,GAAA,EACC,UAAA,gBAAAC,EAACC,GAAA,EACC,UAAA;AAAA,MAAA,gBAAAJ,EAACK,KAAM,MAAK,UAAS,MAAI,IACvB,UAAA,gBAAAL,EAACN,KAAW,EAAA,CACd;AAAA,MACA,gBAAAM,EAACK,KAAM,MAAK,YAAW,MAAI,IACzB,UAAA,gBAAAL,EAACJ,KAAa,EAAA,CAChB;AAAA,wBACCS,GAAA,EAAM,MAAK,KACV,UAAA,gBAAAL,EAACH,KAAa,EAAA,CAChB;AAAA,IAAA,EAAA,CACF,GACF,EAAA,CACF;AAAA,EAAA;AAEJ;"}

package/dist/functions.d.ts

@@ -0,0 +1,14 @@
+import { CallableFunction as CallableFunction_2 } from 'firebase-functions/https';
+
+export declare const api: CallableFunction_2<any, Promise<EndpointSuccess<any> | {
+success: boolean;
+errorCode: string;
+error: string;
+}>, unknown>;
+
+declare type EndpointSuccess<Res> = {
+    success: true;
+    data: Res;
+};
+
+export { }

package/dist/functions.js

@@ -0,0 +1,104 @@
+import * as p from "node:crypto";
+import { randomToken as u } from "@olinfo/quizms/utils";
+import { roundToNearestMinutes as f, addSeconds as l, addMinutes as h, isFuture as m, isPast as T } from "date-fns";
+import { initializeApp as w } from "firebase-admin/app";
+import { getAuth as C } from "firebase-admin/auth";
+import { getFirestore as N } from "firebase-admin/firestore";
+import { onCall as g } from "firebase-functions/https";
+import * as n from "firebase-functions/logger";
+import { participationConverter as I, contestConverter as O } from "./src/cli/utils/converters-admin.js";
+w();
+const i = N(), E = C(), S = (t) => (n.info("Student login request received", { data: t.data }), { success: !1, errorCode: "NOT_IMPLEMENTED", error: "Not implemented yet" }), D = async (t) => {
+  n.info("Teacher login request received", { data: t.data });
+  const r = await i.collection("users").where("username", "==", t.data.username).get();
+  if (r.empty)
+    return { success: !1, errorCode: "USER_NOT_FOUND", error: "User not found" };
+  const e = r.docs[0], a = e.data();
+  return a.role !== "teacher" ? { success: !1, errorCode: "INVALID_ROLE", error: "User is not a teacher" } : a.password !== t.data.password ? { success: !1, errorCode: "INVALID_PASSWORD", error: "Wrong password" } : { success: !0, data: { token: await E.createCustomToken(p.randomUUID(), {
+    role: "teacher",
+    schoolId: e.id
+  }) } };
+};
+async function c(t, r) {
+  const e = t.data.participationId, a = await i.doc(`participations/${e}`).withConverter(I).get();
+  if (!a.exists)
+    return [
+      { success: !1, errorCode: "PARTICIPATION_NOT_FOUND", error: "Participation not found" }
+    ];
+  const o = a.data();
+  if (o.schoolId !== t.auth?.token.schoolId)
+    return [
+      {
+        success: !1,
+        errorCode: "FORBIDDEN",
+        error: "You don't have permission to access this participation"
+      }
+    ];
+  const s = (await i.doc(`contests/${o.contestId}`).withConverter(O).get()).data();
+  if (r) {
+    if (!s.hasOnline)
+      return [{ success: !1, errorCode: "CONTEST_OFFLINE", error: "Contest is not online" }];
+    if (m(s.contestWindowStart))
+      return [
+        { success: !1, errorCode: "CONTEST_NOT_STARTED", error: "Contest has not started yet" }
+      ];
+    if (T(s.contestWindowEnd))
+      return [{ success: !1, errorCode: "CONTEST_ENDED", error: "Contest has already ended" }];
+  }
+  return [null, o, s];
+}
+const P = async (t) => {
+  n.info("Teacher start participation received", { data: t.data });
+  const [r, e, a] = await c(t, !0);
+  if (r)
+    return r;
+  const o = f(l(Date.now(), 3.5 * 60)), d = h(o, a.hasOnline ? a.duration : 0);
+  return await i.doc(`participations/${e.id}`).update({
+    token: await u(),
+    // TODO: controllare duplicati
+    startingTime: o,
+    endingTime: d
+  }), { success: !0, data: {} };
+}, _ = async (t) => {
+  n.info("Teacher stop participation received", { data: t.data });
+  const [r, e] = await c(t, !0);
+  return r || (await i.doc(`participations/${e.id}`).update({
+    token: null,
+    startingTime: null,
+    endingTime: null
+  }), { success: !0, data: {} });
+}, y = async (t) => {
+  n.info("Teacher finalize participation received", { data: t.data });
+  const [r, e] = await c(t, !1);
+  return r || (await i.doc(`participations/${e.id}`).update({ finalized: !0 }), { success: !0, data: {} });
+}, $ = g(
+  {
+    region: "europe-west6",
+    cors: ["http://localhost:1234"]
+  },
+  async (t) => {
+    n.info(`Received request for action: ${t.data.action}`);
+    try {
+      switch (t.data.action) {
+        case "studentLogin":
+          return S(t);
+        case "teacherLogin":
+          return await D(t);
+        case "teacherStartParticipation":
+          return await P(t);
+        case "teacherStopParticipation":
+          return await _(t);
+        case "teacherFinalizeParticipation":
+          return y(t);
+        default:
+          return { success: !1, errorCode: "UNKNOWN_ACTION", error: "Unknown action" };
+      }
+    } catch (r) {
+      return n.error("Error processing request", r), { success: !1, errorCode: "INTERNAL_ERROR", error: "An internal error occurred" };
+    }
+  }
+);
+export {
+  $ as api
+};
+//# sourceMappingURL=functions.js.map

package/dist/functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions.js","sources":["../src/functions/index.ts"],"sourcesContent":["import * as crypto from \"node:crypto\";\n\nimport type { Contest, Participation } from \"@olinfo/quizms/models\";\nimport { randomToken } from \"@olinfo/quizms/utils\";\nimport { addMinutes, addSeconds, isFuture, isPast, roundToNearestMinutes } from \"date-fns\";\nimport { initializeApp } from \"firebase-admin/app\";\nimport { getAuth } from \"firebase-admin/auth\";\nimport { getFirestore } from \"firebase-admin/firestore\";\nimport { type CallableRequest, onCall } from \"firebase-functions/https\";\nimport * as logger from \"firebase-functions/logger\";\n\nimport { contestConverter, participationConverter } from \"~/cli/utils/converters-admin\";\n\ninitializeApp();\nconst db = getFirestore();\nconst auth = getAuth();\n\ntype MaybePromise<T> = T | Promise<T>;\n\ntype EndpointSuccess<Res> = { success: true; data: Res };\ntype EndpointError = { success: false; errorCode: string; error: string };\n\ntype Endpoint<Req = any, Res = any> = (\n  request: CallableRequest<Req>,\n) => MaybePromise<EndpointSuccess<Res> | EndpointError>;\n\nconst studentLogin: Endpoint = (request) => {\n  logger.info(\"Student login request received\", { data: request.data });\n  return { success: false, errorCode: \"NOT_IMPLEMENTED\", error: \"Not implemented yet\" };\n};\n\nconst teacherLogin: Endpoint = async (request) => {\n  logger.info(\"Teacher login request received\", { data: request.data });\n  const snapshot = await db\n    .collection(\"users\")\n    .where(\"username\", \"==\", request.data.username)\n    .get();\n\n  if (snapshot.empty) {\n    return { success: false, errorCode: \"USER_NOT_FOUND\", error: \"User not found\" };\n  }\n\n  const doc = snapshot.docs[0];\n  const user = doc.data();\n\n  if (user.role !== \"teacher\") {\n    return { success: false, errorCode: \"INVALID_ROLE\", error: \"User is not a teacher\" };\n  }\n  if (user.password !== request.data.password) {\n    return { success: false, errorCode: \"INVALID_PASSWORD\", error: \"Wrong password\" };\n  }\n  const token = await auth.createCustomToken(crypto.randomUUID(), {\n    role: \"teacher\",\n    schoolId: doc.id,\n  });\n  return { success: true, data: { token } };\n};\n\nasync function getParticipation(\n  request: CallableRequest,\n  onlineOnly: boolean,\n): Promise<[EndpointError] | [null, Participation, Contest]> {\n  const participationId = request.data.participationId;\n\n  const snapshot = await db\n    .doc(`participations/${participationId}`)\n    .withConverter(participationConverter)\n    .get();\n  if (!snapshot.exists) {\n    return [\n      { success: false, errorCode: \"PARTICIPATION_NOT_FOUND\", error: \"Participation not found\" },\n    ];\n  }\n\n  const participation = snapshot.data()!;\n  if (participation.schoolId !== request.auth?.token.schoolId) {\n    return [\n      {\n        success: false,\n        errorCode: \"FORBIDDEN\",\n        error: \"You don't have permission to access this participation\",\n      },\n    ];\n  }\n\n  const contestSnapshot = await db\n    .doc(`contests/${participation.contestId}`)\n    .withConverter(contestConverter)\n    .get();\n  const contest = contestSnapshot.data()!;\n  if (onlineOnly) {\n    if (!contest.hasOnline) {\n      return [{ success: false, errorCode: \"CONTEST_OFFLINE\", error: \"Contest is not online\" }];\n    }\n    if (isFuture(contest.contestWindowStart)) {\n      return [\n        { success: false, errorCode: \"CONTEST_NOT_STARTED\", error: \"Contest has not started yet\" },\n      ];\n    }\n    if (isPast(contest.contestWindowEnd)) {\n      return [{ success: false, errorCode: \"CONTEST_ENDED\", error: \"Contest has already ended\" }];\n    }\n  }\n\n  return [null, participation, contest];\n}\n\nconst teacherStartParticipation: Endpoint = async (request) => {\n  logger.info(\"Teacher start participation received\", { data: request.data });\n\n  const [error, participation, contest] = await getParticipation(request, true);\n  if (error) {\n    return error;\n  }\n\n  const startingTime = roundToNearestMinutes(addSeconds(Date.now(), 3.5 * 60));\n  const endingTime = addMinutes(startingTime, contest.hasOnline ? contest.duration : 0);\n\n  await db.doc(`participations/${participation.id}`).update({\n    token: await randomToken(), // TODO: controllare duplicati\n    startingTime: startingTime,\n    endingTime: endingTime,\n  });\n\n  return { success: true, data: {} };\n};\n\nconst teacherStopParticipation: Endpoint = async (request) => {\n  logger.info(\"Teacher stop participation received\", { data: request.data });\n\n  const [error, participation] = await getParticipation(request, true);\n  if (error) {\n    return error;\n  }\n\n  await db.doc(`participations/${participation.id}`).update({\n    token: null,\n    startingTime: null,\n    endingTime: null,\n  });\n\n  return { success: true, data: {} };\n};\n\nconst teacherFinalizeParticipation: Endpoint = async (request) => {\n  logger.info(\"Teacher finalize participation received\", { data: request.data });\n\n  const [error, participation] = await getParticipation(request, false);\n  if (error) {\n    return error;\n  }\n\n  await db.doc(`participations/${participation.id}`).update({ finalized: true });\n\n  return { success: true, data: {} };\n};\n\nexport const api = onCall(\n  {\n    region: \"europe-west6\",\n    cors: [\"http://localhost:1234\"],\n  },\n  async (request) => {\n    logger.info(`Received request for action: ${request.data.action}`);\n    try {\n      switch (request.data.action) {\n        case \"studentLogin\":\n          return studentLogin(request);\n        case \"teacherLogin\":\n          return await teacherLogin(request);\n        case \"teacherStartParticipation\":\n          return await teacherStartParticipation(request);\n        case \"teacherStopParticipation\":\n          return await teacherStopParticipation(request);\n        case \"teacherFinalizeParticipation\":\n          return teacherFinalizeParticipation(request);\n        default:\n          return { success: false, errorCode: \"UNKNOWN_ACTION\", error: \"Unknown action\" };\n      }\n    } catch (error) {\n      logger.error(\"Error processing request\", error);\n      return { success: false, errorCode: \"INTERNAL_ERROR\", error: \"An internal error occurred\" };\n    }\n  },\n);\n"],"names":["initializeApp","db","getFirestore","auth","getAuth","studentLogin","request","logger","teacherLogin","snapshot","doc","user","crypto","getParticipation","onlineOnly","participationId","participationConverter","participation","contest","contestConverter","isFuture","isPast","teacherStartParticipation","error","startingTime","roundToNearestMinutes","addSeconds","endingTime","addMinutes","randomToken","teacherStopParticipation","teacherFinalizeParticipation","api","onCall"],"mappings":";;;;;;;;;AAaAA,EAAA;AACA,MAAMC,IAAKC,EAAA,GACLC,IAAOC,EAAA,GAWPC,IAAyB,CAACC,OAC9BC,EAAO,KAAK,kCAAkC,EAAE,MAAMD,EAAQ,MAAM,GAC7D,EAAE,SAAS,IAAO,WAAW,mBAAmB,OAAO,sBAAA,IAG1DE,IAAyB,OAAOF,MAAY;AAChD,EAAAC,EAAO,KAAK,kCAAkC,EAAE,MAAMD,EAAQ,MAAM;AACpE,QAAMG,IAAW,MAAMR,EACpB,WAAW,OAAO,EAClB,MAAM,YAAY,MAAMK,EAAQ,KAAK,QAAQ,EAC7C,IAAA;AAEH,MAAIG,EAAS;AACX,WAAO,EAAE,SAAS,IAAO,WAAW,kBAAkB,OAAO,iBAAA;AAG/D,QAAMC,IAAMD,EAAS,KAAK,CAAC,GACrBE,IAAOD,EAAI,KAAA;AAEjB,SAAIC,EAAK,SAAS,YACT,EAAE,SAAS,IAAO,WAAW,gBAAgB,OAAO,wBAAA,IAEzDA,EAAK,aAAaL,EAAQ,KAAK,WAC1B,EAAE,SAAS,IAAO,WAAW,oBAAoB,OAAO,iBAAA,IAM1D,EAAE,SAAS,IAAM,MAAM,EAAE,OAJlB,MAAMH,EAAK,kBAAkBS,EAAO,cAAc;AAAA,IAC9D,MAAM;AAAA,IACN,UAAUF,EAAI;AAAA,EAAA,CACf,IACqC;AACxC;AAEA,eAAeG,EACbP,GACAQ,GAC2D;AAC3D,QAAMC,IAAkBT,EAAQ,KAAK,iBAE/BG,IAAW,MAAMR,EACpB,IAAI,kBAAkBc,CAAe,EAAE,EACvC,cAAcC,CAAsB,EACpC,IAAA;AACH,MAAI,CAACP,EAAS;AACZ,WAAO;AAAA,MACL,EAAE,SAAS,IAAO,WAAW,2BAA2B,OAAO,0BAAA;AAAA,IAA0B;AAI7F,QAAMQ,IAAgBR,EAAS,KAAA;AAC/B,MAAIQ,EAAc,aAAaX,EAAQ,MAAM,MAAM;AACjD,WAAO;AAAA,MACL;AAAA,QACE,SAAS;AAAA,QACT,WAAW;AAAA,QACX,OAAO;AAAA,MAAA;AAAA,IACT;AAQJ,QAAMY,KAJkB,MAAMjB,EAC3B,IAAI,YAAYgB,EAAc,SAAS,EAAE,EACzC,cAAcE,CAAgB,EAC9B,IAAA,GAC6B,KAAA;AAChC,MAAIL,GAAY;AACd,QAAI,CAACI,EAAQ;AACX,aAAO,CAAC,EAAE,SAAS,IAAO,WAAW,mBAAmB,OAAO,yBAAyB;AAE1F,QAAIE,EAASF,EAAQ,kBAAkB;AACrC,aAAO;AAAA,QACL,EAAE,SAAS,IAAO,WAAW,uBAAuB,OAAO,8BAAA;AAAA,MAA8B;AAG7F,QAAIG,EAAOH,EAAQ,gBAAgB;AACjC,aAAO,CAAC,EAAE,SAAS,IAAO,WAAW,iBAAiB,OAAO,6BAA6B;AAAA,EAE9F;AAEA,SAAO,CAAC,MAAMD,GAAeC,CAAO;AACtC;AAEA,MAAMI,IAAsC,OAAOhB,MAAY;AAC7D,EAAAC,EAAO,KAAK,wCAAwC,EAAE,MAAMD,EAAQ,MAAM;AAE1E,QAAM,CAACiB,GAAON,GAAeC,CAAO,IAAI,MAAML,EAAiBP,GAAS,EAAI;AAC5E,MAAIiB;AACF,WAAOA;AAGT,QAAMC,IAAeC,EAAsBC,EAAW,KAAK,OAAO,MAAM,EAAE,CAAC,GACrEC,IAAaC,EAAWJ,GAAcN,EAAQ,YAAYA,EAAQ,WAAW,CAAC;AAEpF,eAAMjB,EAAG,IAAI,kBAAkBgB,EAAc,EAAE,EAAE,EAAE,OAAO;AAAA,IACxD,OAAO,MAAMY,EAAA;AAAA;AAAA,IACb,cAAAL;AAAA,IACA,YAAAG;AAAA,EAAA,CACD,GAEM,EAAE,SAAS,IAAM,MAAM,CAAA,EAAC;AACjC,GAEMG,IAAqC,OAAOxB,MAAY;AAC5D,EAAAC,EAAO,KAAK,uCAAuC,EAAE,MAAMD,EAAQ,MAAM;AAEzE,QAAM,CAACiB,GAAON,CAAa,IAAI,MAAMJ,EAAiBP,GAAS,EAAI;AACnE,SAAIiB,MAIJ,MAAMtB,EAAG,IAAI,kBAAkBgB,EAAc,EAAE,EAAE,EAAE,OAAO;AAAA,IACxD,OAAO;AAAA,IACP,cAAc;AAAA,IACd,YAAY;AAAA,EAAA,CACb,GAEM,EAAE,SAAS,IAAM,MAAM,CAAA,EAAC;AACjC,GAEMc,IAAyC,OAAOzB,MAAY;AAChE,EAAAC,EAAO,KAAK,2CAA2C,EAAE,MAAMD,EAAQ,MAAM;AAE7E,QAAM,CAACiB,GAAON,CAAa,IAAI,MAAMJ,EAAiBP,GAAS,EAAK;AACpE,SAAIiB,MAIJ,MAAMtB,EAAG,IAAI,kBAAkBgB,EAAc,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,GAAA,CAAM,GAEtE,EAAE,SAAS,IAAM,MAAM,CAAA,EAAC;AACjC,GAEae,IAAMC;AAAA,EACjB;AAAA,IACE,QAAQ;AAAA,IACR,MAAM,CAAC,uBAAuB;AAAA,EAAA;AAAA,EAEhC,OAAO3B,MAAY;AACjB,IAAAC,EAAO,KAAK,gCAAgCD,EAAQ,KAAK,MAAM,EAAE;AACjE,QAAI;AACF,cAAQA,EAAQ,KAAK,QAAA;AAAA,QACnB,KAAK;AACH,iBAAOD,EAAaC,CAAO;AAAA,QAC7B,KAAK;AACH,iBAAO,MAAME,EAAaF,CAAO;AAAA,QACnC,KAAK;AACH,iBAAO,MAAMgB,EAA0BhB,CAAO;AAAA,QAChD,KAAK;AACH,iBAAO,MAAMwB,EAAyBxB,CAAO;AAAA,QAC/C,KAAK;AACH,iBAAOyB,EAA6BzB,CAAO;AAAA,QAC7C;AACE,iBAAO,EAAE,SAAS,IAAO,WAAW,kBAAkB,OAAO,iBAAA;AAAA,MAAiB;AAAA,IAEpF,SAASiB,GAAO;AACd,aAAAhB,EAAO,MAAM,4BAA4BgB,CAAK,GACvC,EAAE,SAAS,IAAO,WAAW,kBAAkB,OAAO,6BAAA;AAAA,IAC/D;AAAA,EACF;AACF;"}

package/dist/package.json.js

@@ -0,0 +1,5 @@
+const n = "4.0.0-canary.20251130";
+export {
+  n as version
+};
+//# sourceMappingURL=package.json.js.map

package/dist/package.json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package.json.js","sources":[],"sourcesContent":[],"names":[],"mappings":";"}

package/dist/src/cli/definalize.js

@@ -0,0 +1,23 @@
+import { info as r, success as l } from "@olinfo/quizms/utils-node";
+import { sumBy as p } from "lodash-es";
+import { participationConverter as c } from "./utils/converters-admin.js";
+import { initializeFirebase as f } from "./utils/initialize.js";
+async function h() {
+  const { db: a } = await f();
+  r("Definalizing all participations.");
+  const e = a.collection("participations").where("finalized", "==", !1).withConverter(c).limit(1e3);
+  let i = await e.get(), t = 0;
+  for (; !i.empty; ) {
+    const o = await Promise.all(
+      i.docs.map(async (n) => n.data().finalized ? (await a.doc(n.ref.path).update({ finalized: !1 }), 1) : 0)
+    );
+    t += p(o), r(`Definalized ${t} participations.`);
+    const s = i.docs.at(-1);
+    i = await e.startAfter(s).get();
+  }
+  l(`${t} participations were successfully definalized.`);
+}
+export {
+  h as default
+};
+//# sourceMappingURL=definalize.js.map

package/dist/src/cli/definalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definalize.js","sources":["../../../src/cli/definalize.ts"],"sourcesContent":["import { info, success } from \"@olinfo/quizms/utils-node\";\nimport { sumBy } from \"lodash-es\";\n\nimport { participationConverter } from \"./utils/converters-admin\";\nimport { initializeFirebase } from \"./utils/initialize\";\n\nexport default async function definalize() {\n  const { db } = await initializeFirebase();\n\n  info(\"Definalizing all participations.\");\n\n  const ref = db\n    .collection(\"participations\")\n    .where(\"finalized\", \"==\", false)\n    .withConverter(participationConverter)\n    .limit(1000);\n\n  let snapshot = await ref.get();\n\n  let sum = 0;\n  while (!snapshot.empty) {\n    const finalized = await Promise.all(\n      snapshot.docs.map(async (doc) => {\n        const participation = doc.data();\n        if (participation.finalized) {\n          await db.doc(doc.ref.path).update({ finalized: false });\n          return 1;\n        }\n        return 0;\n      }),\n    );\n\n    sum += sumBy(finalized);\n    info(`Definalized ${sum} participations.`);\n\n    const last = snapshot.docs.at(-1);\n    snapshot = await ref.startAfter(last).get();\n  }\n\n  success(`${sum} participations were successfully definalized.`);\n}\n"],"names":["definalize","db","initializeFirebase","info","ref","participationConverter","snapshot","sum","finalized","doc","sumBy","last","success"],"mappings":";;;;AAMA,eAA8BA,IAAa;AACzC,QAAM,EAAE,IAAAC,MAAO,MAAMC,EAAA;AAErB,EAAAC,EAAK,kCAAkC;AAEvC,QAAMC,IAAMH,EACT,WAAW,gBAAgB,EAC3B,MAAM,aAAa,MAAM,EAAK,EAC9B,cAAcI,CAAsB,EACpC,MAAM,GAAI;AAEb,MAAIC,IAAW,MAAMF,EAAI,IAAA,GAErBG,IAAM;AACV,SAAO,CAACD,EAAS,SAAO;AACtB,UAAME,IAAY,MAAM,QAAQ;AAAA,MAC9BF,EAAS,KAAK,IAAI,OAAOG,MACDA,EAAI,KAAA,EACR,aAChB,MAAMR,EAAG,IAAIQ,EAAI,IAAI,IAAI,EAAE,OAAO,EAAE,WAAW,IAAO,GAC/C,KAEF,CACR;AAAA,IAAA;AAGH,IAAAF,KAAOG,EAAMF,CAAS,GACtBL,EAAK,eAAeI,CAAG,kBAAkB;AAEzC,UAAMI,IAAOL,EAAS,KAAK,GAAG,EAAE;AAChC,IAAAA,IAAW,MAAMF,EAAI,WAAWO,CAAI,EAAE,IAAA;AAAA,EACxC;AAEA,EAAAC,EAAQ,GAAGL,CAAG,gDAAgD;AAChE;"}

package/dist/src/cli/export.js

@@ -0,0 +1,54 @@
+import { createWriteStream as p } from "node:fs";
+import { mkdir as m } from "node:fs/promises";
+import s from "node:path";
+import { pipeline as f } from "node:stream/promises";
+import { info as l, success as u } from "@olinfo/quizms/utils-node";
+import { SingleBar as w } from "cli-progress";
+import { formatDistanceStrict as d } from "date-fns";
+import { deleteApp as v } from "firebase-admin/app";
+import { capitalize as C } from "lodash-es";
+import { studentConverter as h, participationConverter as x, variantConverter as b, contestConverter as g } from "./utils/converters-admin.js";
+import { initializeFirebase as S } from "./utils/initialize.js";
+async function F(e) {
+  const { app: a, db: o } = await S(), n = (/* @__PURE__ */ new Date()).toISOString(), r = s.join("export", n);
+  if (await m(r, { recursive: !0 }), e.students) {
+    const t = o.collectionGroup("students").withConverter(h);
+    await i(t, "students", r);
+  }
+  if (e.participations) {
+    const t = o.collection("participations").withConverter(x);
+    await i(t, "participations", r);
+  }
+  if (e.variants) {
+    const t = o.collection("variants").withConverter(b);
+    await i(t, "variants", r);
+  }
+  if (e.contests) {
+    const t = o.collection("contests").withConverter(g);
+    await i(t, "contests", r);
+  }
+  await v(a);
+}
+async function i(e, a, o) {
+  l(`Exporting ${a}.`);
+  const n = await e.count().get(), r = new w({
+    format: "  {bar} {percentage}% | ETA: {eta_formatted} | {value}/{total}",
+    barCompleteChar: "█",
+    barIncompleteChar: "▂",
+    etaBuffer: 1e4,
+    formatTime: (t) => d(0, t * 1e3)
+  });
+  r.start(n.data().count, 0), await f(
+    e.stream(),
+    async function* (t) {
+      for await (const c of t)
+        r.increment(), yield `${JSON.stringify(c.data())}
+`;
+    },
+    p(s.format({ dir: o, name: a, ext: ".jsonl" }))
+  ), r.stop(), u(`${C(a)} export completed.`);
+}
+export {
+  F as default
+};
+//# sourceMappingURL=export.js.map

package/dist/src/cli/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sources":["../../../src/cli/export.ts"],"sourcesContent":["import { createWriteStream } from \"node:fs\";\nimport { mkdir } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { pipeline } from \"node:stream/promises\";\n\nimport { info, success } from \"@olinfo/quizms/utils-node\";\nimport { SingleBar } from \"cli-progress\";\nimport { formatDistanceStrict } from \"date-fns\";\nimport { deleteApp } from \"firebase-admin/app\";\nimport type { Query, QueryDocumentSnapshot } from \"firebase-admin/firestore\";\nimport { capitalize } from \"lodash-es\";\n\nimport {\n  contestConverter,\n  participationConverter,\n  studentConverter,\n  variantConverter,\n} from \"./utils/converters-admin\";\nimport { initializeFirebase } from \"./utils/initialize\";\n\ntype ExportOptions = {\n  contests?: true;\n  participations?: true;\n  students?: true;\n  variants?: true;\n};\n\nexport default async function exportContests(options: ExportOptions) {\n  const { app, db } = await initializeFirebase();\n\n  const timestamp = new Date().toISOString();\n  const outDir = path.join(\"export\", timestamp);\n  await mkdir(outDir, { recursive: true });\n\n  if (options.students) {\n    const ref = db.collectionGroup(\"students\").withConverter(studentConverter);\n    await exportCollection(ref, \"students\", outDir);\n  }\n  if (options.participations) {\n    const ref = db.collection(\"participations\").withConverter(participationConverter);\n    await exportCollection(ref, \"participations\", outDir);\n  }\n  if (options.variants) {\n    const ref = db.collection(\"variants\").withConverter(variantConverter);\n    await exportCollection(ref, \"variants\", outDir);\n  }\n  if (options.contests) {\n    const ref = db.collection(\"contests\").withConverter(contestConverter);\n    await exportCollection(ref, \"contests\", outDir);\n  }\n\n  await deleteApp(app);\n}\n\nasync function exportCollection(ref: Query, collection: string, dir: string) {\n  info(`Exporting ${collection}.`);\n\n  const count = await ref.count().get();\n  const bar = new SingleBar({\n    format: \"  {bar} {percentage}% | ETA: {eta_formatted} | {value}/{total}\",\n    barCompleteChar: \"\\u2588\",\n    barIncompleteChar: \"\\u2582\",\n    etaBuffer: 10000,\n    formatTime: (t) => formatDistanceStrict(0, t * 1000),\n  });\n  bar.start(count.data().count, 0);\n\n  await pipeline(\n    ref.stream(),\n    async function* (stream) {\n      for await (const data of stream) {\n        bar.increment();\n        const snapshot = data as unknown as QueryDocumentSnapshot;\n        yield `${JSON.stringify(snapshot.data())}\\n`;\n      }\n    },\n    createWriteStream(path.format({ dir, name: collection, ext: \".jsonl\" })),\n  );\n\n  bar.stop();\n  success(`${capitalize(collection)} export completed.`);\n}\n"],"names":["exportContests","options","app","db","initializeFirebase","timestamp","outDir","path","mkdir","ref","studentConverter","exportCollection","participationConverter","variantConverter","contestConverter","deleteApp","collection","dir","info","count","bar","SingleBar","formatDistanceStrict","pipeline","stream","data","createWriteStream","success","capitalize"],"mappings":";;;;;;;;;;;AA2BA,eAA8BA,EAAeC,GAAwB;AACnE,QAAM,EAAE,KAAAC,GAAK,IAAAC,EAAA,IAAO,MAAMC,EAAA,GAEpBC,KAAY,oBAAI,KAAA,GAAO,YAAA,GACvBC,IAASC,EAAK,KAAK,UAAUF,CAAS;AAG5C,MAFA,MAAMG,EAAMF,GAAQ,EAAE,WAAW,IAAM,GAEnCL,EAAQ,UAAU;AACpB,UAAMQ,IAAMN,EAAG,gBAAgB,UAAU,EAAE,cAAcO,CAAgB;AACzE,UAAMC,EAAiBF,GAAK,YAAYH,CAAM;AAAA,EAChD;AACA,MAAIL,EAAQ,gBAAgB;AAC1B,UAAMQ,IAAMN,EAAG,WAAW,gBAAgB,EAAE,cAAcS,CAAsB;AAChF,UAAMD,EAAiBF,GAAK,kBAAkBH,CAAM;AAAA,EACtD;AACA,MAAIL,EAAQ,UAAU;AACpB,UAAMQ,IAAMN,EAAG,WAAW,UAAU,EAAE,cAAcU,CAAgB;AACpE,UAAMF,EAAiBF,GAAK,YAAYH,CAAM;AAAA,EAChD;AACA,MAAIL,EAAQ,UAAU;AACpB,UAAMQ,IAAMN,EAAG,WAAW,UAAU,EAAE,cAAcW,CAAgB;AACpE,UAAMH,EAAiBF,GAAK,YAAYH,CAAM;AAAA,EAChD;AAEA,QAAMS,EAAUb,CAAG;AACrB;AAEA,eAAeS,EAAiBF,GAAYO,GAAoBC,GAAa;AAC3E,EAAAC,EAAK,aAAaF,CAAU,GAAG;AAE/B,QAAMG,IAAQ,MAAMV,EAAI,MAAA,EAAQ,IAAA,GAC1BW,IAAM,IAAIC,EAAU;AAAA,IACxB,QAAQ;AAAA,IACR,iBAAiB;AAAA,IACjB,mBAAmB;AAAA,IACnB,WAAW;AAAA,IACX,YAAY,CAAC,MAAMC,EAAqB,GAAG,IAAI,GAAI;AAAA,EAAA,CACpD;AACD,EAAAF,EAAI,MAAMD,EAAM,KAAA,EAAO,OAAO,CAAC,GAE/B,MAAMI;AAAA,IACJd,EAAI,OAAA;AAAA,IACJ,iBAAiBe,GAAQ;AACvB,uBAAiBC,KAAQD;AACvB,QAAAJ,EAAI,UAAA,GAEJ,MAAM,GAAG,KAAK,UADGK,EACgB,KAAA,CAAM,CAAC;AAAA;AAAA,IAE5C;AAAA,IACAC,EAAkBnB,EAAK,OAAO,EAAE,KAAAU,GAAK,MAAMD,GAAY,KAAK,UAAU,CAAC;AAAA,EAAA,GAGzEI,EAAI,KAAA,GACJO,EAAQ,GAAGC,EAAWZ,CAAU,CAAC,oBAAoB;AACvD;"}

package/dist/src/cli/files/firestore-indexes.json.js

@@ -0,0 +1,10 @@
+const e = [{ collectionGroup: "announcements", queryScope: "COLLECTION", fields: [{ fieldPath: "contestIds", arrayConfig: "CONTAINS" }, { fieldPath: "createdAt", order: "DESCENDING" }] }, { collectionGroup: "students", queryScope: "COLLECTION_GROUP", fields: [{ fieldPath: "contestId", order: "ASCENDING" }, { fieldPath: "disabled", order: "ASCENDING" }] }], t = [{ collectionGroup: "students", fieldPath: "answers", indexes: [] }, { collectionGroup: "students", fieldPath: "updatedAt", indexes: [] }, { collectionGroup: "students", fieldPath: "extraData", indexes: [] }, { collectionGroup: "submissions", fieldPath: "student", indexes: [] }, { collectionGroup: "submissions", fieldPath: "submittedAt", indexes: [] }], s = {
+  indexes: e,
+  fieldOverrides: t
+};
+export {
+  s as default,
+  t as fieldOverrides,
+  e as indexes
+};
+//# sourceMappingURL=firestore-indexes.json.js.map

package/dist/src/cli/files/firestore-indexes.json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore-indexes.json.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;"}

package/dist/src/cli/files/firestore.rules.js

@@ -0,0 +1,191 @@
+const t = `rules_version = '2';
+service cloud.firestore {
+    match /databases/{database}/documents {
+        function hasTimestamp(field) {
+            return request.resource.data[field] == request.time;
+        }
+
+        function isAuthenticated(id) {
+            return request.auth != null && request.auth.uid == id;
+        }
+
+        function affectedKeys() {
+            return request.resource.data.diff(resource.data).affectedKeys();
+        }
+
+        function isTeacher() {
+            return request.auth != null && request.auth.token.isTeacher == true;
+        }
+
+        function getStudentById(participationId, studentId) {
+            return getAfter(/databases/$(database)/documents/participations/$(participationId)/students/$(studentId));
+        }
+
+        function getStudent(uid) {
+            let data = get(/databases/$(database)/documents/studentMappingUid/$(uid)).data;
+            return get(/databases/$(database)/documents/participations/$(data.participationId)/students/$(data.studentId));
+        }
+
+        function getParticipation(id) {
+            return get(/databases/$(database)/documents/participations/$(id));
+        }
+
+        function isTeacherParticipation(participationId) {
+            let participation = getParticipation(participationId);
+            return participation != null && isAuthenticated(participation.data.teacher);
+        }
+
+        match /announcements/{announcement} {
+            allow read: if isTeacher();
+        }
+
+        match /contests/{contest} {
+            allow read: if request.auth != null;
+        }
+
+        match /participations/{participationId} {
+            function isStudentParticipation() {
+                let student = getStudent(request.auth.uid);
+                return student != null
+                    && isAuthenticated(student.data.uid)
+                    && student.data.participationId == participationId
+                    && student.data.token == resource.data.token;
+            }
+
+            allow read: if isAuthenticated(resource.data.teacher) || isStudentParticipation();
+            allow update: if isAuthenticated(resource.data.teacher) && affectedKeys().hasOnly(['token', 'startingTime', 'endingTime', 'finalized']);
+        }
+
+        match /participationMapping/{token} {
+            function checkToken(participationId) {
+                let participation = getAfter(/databases/$(database)/documents/participations/$(participationId));
+                return participation != null
+                    && participation.data.token == token
+                    && participation.data.startingTime == request.resource.data.startingTime
+                    && participation.data.endingTime == request.resource.data.endingTime
+                    && participation.data.contestId == request.resource.data.contestId;
+            }
+
+            allow get: if request.auth != null;
+            allow create: if isTeacherParticipation(request.resource.data.participationId) && checkToken(request.resource.data.participationId);
+        }
+
+        function studentHash(student) {
+            let data = student.userData;
+            let joined = [data.name, data.surname, data.classYear, data.classSection, student.token].join('$').lower();
+            return hashing.sha256(joined).toHexString()[0: 24];
+        }
+
+        match /participations/{participationId}/students/{student} {
+            function checkToken() {
+                let participation = getParticipation(participationId);
+                return participation != null
+                    && participation.data.token != null
+                    && participation.data.token == request.resource.data.token
+                    && participation.data.startingTime == request.resource.data.startedAt
+                    && participation.data.endingTime >= request.resource.data.finishedAt
+                    && participation.data.contestId == request.resource.data.contestId
+                    && request.time <= resource.data.finishedAt + duration.value(10, 's');
+            }
+
+            function checkVariant(data) {
+                let hash = data.contestId + '-' + studentHash(data)[0: 3];
+                let mapping = get(/databases/$(database)/documents/variantMappings/$(hash));
+                return mapping != null
+                    && mapping.data.variant == data.variant;
+            }
+
+            function canStudentCreate() {
+                return isAuthenticated(request.resource.data.uid)
+                    && request.resource.data.userData != null
+                    && request.resource.data.contestId != null
+                    && checkToken()
+                    && checkVariant(request.resource.data);
+            }
+
+            function canStudentUpdate() {
+                let keys = affectedKeys();
+                return isAuthenticated(resource.data.uid)
+                    && checkToken()
+                    && keys.hasOnly(['answers', 'updatedAt', 'finishedAt', 'extraData'])
+                    && hasTimestamp('updatedAt');
+            }
+
+            function canTeacherUpdate() {
+                let keys = affectedKeys();
+                return isTeacherParticipation(participationId)
+                    && !keys.hasAny(['participationId', 'createdAt'])
+                    && hasTimestamp('updatedAt');
+            }
+
+            allow read: if isAuthenticated(resource.data.uid) || isTeacherParticipation(participationId);
+            allow create: if (canStudentCreate() || isTeacherParticipation(participationId)) && request.resource.data.participationId == participationId /* TODO && hasTimestamp('createdAt') */;
+            allow update: if canStudentUpdate() || canTeacherUpdate();
+            allow delete: if isTeacherParticipation(participationId);
+        }
+
+        match /participations/{participationId}/studentMappingHash/{id} {
+            function canCreateStudent() {
+                let student = getStudentById(participationId, request.resource.data.studentId);
+                return student != null
+                    && isAuthenticated(student.data.uid)
+                    && student.data.userData != null
+                    && studentHash(student.data) == id;
+            }
+
+            allow get: if request.auth != null;
+            allow create, update: if canCreateStudent() || isTeacherParticipation(participationId);
+            allow delete: if isTeacherParticipation(participationId);
+        }
+
+        match /participations/{participationId}/studentRestore/{uid} {
+            function canStudentCreate() {
+                let participation = getParticipation(participationId);
+                return isAuthenticated(uid)
+                    && participationId == request.resource.data.participationId
+                    && participation != null
+                    && participation.data.token == request.resource.data.token;
+            }
+
+            allow read: if isTeacherParticipation(participationId);
+            allow create, update: if canStudentCreate();
+            allow delete: if isTeacherParticipation(participationId);
+        }
+
+        match /studentMappingUid/{id} {
+            function canCreateStudent() {
+                let student = getStudentById(request.resource.data.participationId, request.resource.data.studentId);
+                return student != null
+                    && isAuthenticated(student.data.uid)
+                    && isAuthenticated(id);
+            }
+
+            allow get: if request.auth != null;
+            allow list: if isTeacherParticipation(resource.data.participationId);
+            allow create, update: if canCreateStudent() || isTeacherParticipation(request.resource.data.participationId);
+            allow delete: if isTeacherParticipation(resource.data.participationId);
+        }
+
+        match /submissions/{submission} {
+            allow get: if isAuthenticated(resource.data.uid);
+            allow create: if isAuthenticated(request.resource.data.uid) && hasTimestamp('submittedAt');
+        }
+
+        match /variants/{variant} {
+            allow read: if isTeacher();
+        }
+
+        match /variantMappings/{hash} {
+            allow read: if request.auth != null;
+        }
+
+        match /{document=**} {
+            allow read, write: if request.auth.token.isAdmin == true;
+        }
+    }
+}
+`;
+export {
+  t as default
+};
+//# sourceMappingURL=firestore.rules.js.map

package/dist/src/cli/files/firestore.rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore.rules.js","sources":["../../../../src/cli/files/firestore.rules?raw"],"sourcesContent":["export default \"rules_version = '2';\\nservice cloud.firestore {\\n    match /databases/{database}/documents {\\n        function hasTimestamp(field) {\\n            return request.resource.data[field] == request.time;\\n        }\\n\\n        function isAuthenticated(id) {\\n            return request.auth != null && request.auth.uid == id;\\n        }\\n\\n        function affectedKeys() {\\n            return request.resource.data.diff(resource.data).affectedKeys();\\n        }\\n\\n        function isTeacher() {\\n            return request.auth != null && request.auth.token.isTeacher == true;\\n        }\\n\\n        function getStudentById(participationId, studentId) {\\n            return getAfter(/databases/$(database)/documents/participations/$(participationId)/students/$(studentId));\\n        }\\n\\n        function getStudent(uid) {\\n            let data = get(/databases/$(database)/documents/studentMappingUid/$(uid)).data;\\n            return get(/databases/$(database)/documents/participations/$(data.participationId)/students/$(data.studentId));\\n        }\\n\\n        function getParticipation(id) {\\n            return get(/databases/$(database)/documents/participations/$(id));\\n        }\\n\\n        function isTeacherParticipation(participationId) {\\n            let participation = getParticipation(participationId);\\n            return participation != null && isAuthenticated(participation.data.teacher);\\n        }\\n\\n        match /announcements/{announcement} {\\n            allow read: if isTeacher();\\n        }\\n\\n        match /contests/{contest} {\\n            allow read: if request.auth != null;\\n        }\\n\\n        match /participations/{participationId} {\\n            function isStudentParticipation() {\\n                let student = getStudent(request.auth.uid);\\n                return student != null\\n                    && isAuthenticated(student.data.uid)\\n                    && student.data.participationId == participationId\\n                    && student.data.token == resource.data.token;\\n            }\\n\\n            allow read: if isAuthenticated(resource.data.teacher) || isStudentParticipation();\\n            allow update: if isAuthenticated(resource.data.teacher) && affectedKeys().hasOnly(['token', 'startingTime', 'endingTime', 'finalized']);\\n        }\\n\\n        match /participationMapping/{token} {\\n            function checkToken(participationId) {\\n                let participation = getAfter(/databases/$(database)/documents/participations/$(participationId));\\n                return participation != null\\n                    && participation.data.token == token\\n                    && participation.data.startingTime == request.resource.data.startingTime\\n                    && participation.data.endingTime == request.resource.data.endingTime\\n                    && participation.data.contestId == request.resource.data.contestId;\\n            }\\n\\n            allow get: if request.auth != null;\\n            allow create: if isTeacherParticipation(request.resource.data.participationId) && checkToken(request.resource.data.participationId);\\n        }\\n\\n        function studentHash(student) {\\n            let data = student.userData;\\n            let joined = [data.name, data.surname, data.classYear, data.classSection, student.token].join('$').lower();\\n            return hashing.sha256(joined).toHexString()[0: 24];\\n        }\\n\\n        match /participations/{participationId}/students/{student} {\\n            function checkToken() {\\n                let participation = getParticipation(participationId);\\n                return participation != null\\n                    && participation.data.token != null\\n                    && participation.data.token == request.resource.data.token\\n                    && participation.data.startingTime == request.resource.data.startedAt\\n                    && participation.data.endingTime >= request.resource.data.finishedAt\\n                    && participation.data.contestId == request.resource.data.contestId\\n                    && request.time <= resource.data.finishedAt + duration.value(10, 's');\\n            }\\n\\n            function checkVariant(data) {\\n                let hash = data.contestId + '-' + studentHash(data)[0: 3];\\n                let mapping = get(/databases/$(database)/documents/variantMappings/$(hash));\\n                return mapping != null\\n                    && mapping.data.variant == data.variant;\\n            }\\n\\n            function canStudentCreate() {\\n                return isAuthenticated(request.resource.data.uid)\\n                    && request.resource.data.userData != null\\n                    && request.resource.data.contestId != null\\n                    && checkToken()\\n                    && checkVariant(request.resource.data);\\n            }\\n\\n            function canStudentUpdate() {\\n                let keys = affectedKeys();\\n                return isAuthenticated(resource.data.uid)\\n                    && checkToken()\\n                    && keys.hasOnly(['answers', 'updatedAt', 'finishedAt', 'extraData'])\\n                    && hasTimestamp('updatedAt');\\n            }\\n\\n            function canTeacherUpdate() {\\n                let keys = affectedKeys();\\n                return isTeacherParticipation(participationId)\\n                    && !keys.hasAny(['participationId', 'createdAt'])\\n                    && hasTimestamp('updatedAt');\\n            }\\n\\n            allow read: if isAuthenticated(resource.data.uid) || isTeacherParticipation(participationId);\\n            allow create: if (canStudentCreate() || isTeacherParticipation(participationId)) && request.resource.data.participationId == participationId /* TODO && hasTimestamp('createdAt') */;\\n            allow update: if canStudentUpdate() || canTeacherUpdate();\\n            allow delete: if isTeacherParticipation(participationId);\\n        }\\n\\n        match /participations/{participationId}/studentMappingHash/{id} {\\n            function canCreateStudent() {\\n                let student = getStudentById(participationId, request.resource.data.studentId);\\n                return student != null\\n                    && isAuthenticated(student.data.uid)\\n                    && student.data.userData != null\\n                    && studentHash(student.data) == id;\\n            }\\n\\n            allow get: if request.auth != null;\\n            allow create, update: if canCreateStudent() || isTeacherParticipation(participationId);\\n            allow delete: if isTeacherParticipation(participationId);\\n        }\\n\\n        match /participations/{participationId}/studentRestore/{uid} {\\n            function canStudentCreate() {\\n                let participation = getParticipation(participationId);\\n                return isAuthenticated(uid)\\n                    && participationId == request.resource.data.participationId\\n                    && participation != null\\n                    && participation.data.token == request.resource.data.token;\\n            }\\n\\n            allow read: if isTeacherParticipation(participationId);\\n            allow create, update: if canStudentCreate();\\n            allow delete: if isTeacherParticipation(participationId);\\n        }\\n\\n        match /studentMappingUid/{id} {\\n            function canCreateStudent() {\\n                let student = getStudentById(request.resource.data.participationId, request.resource.data.studentId);\\n                return student != null\\n                    && isAuthenticated(student.data.uid)\\n                    && isAuthenticated(id);\\n            }\\n\\n            allow get: if request.auth != null;\\n            allow list: if isTeacherParticipation(resource.data.participationId);\\n            allow create, update: if canCreateStudent() || isTeacherParticipation(request.resource.data.participationId);\\n            allow delete: if isTeacherParticipation(resource.data.participationId);\\n        }\\n\\n        match /submissions/{submission} {\\n            allow get: if isAuthenticated(resource.data.uid);\\n            allow create: if isAuthenticated(request.resource.data.uid) && hasTimestamp('submittedAt');\\n        }\\n\\n        match /variants/{variant} {\\n            allow read: if isTeacher();\\n        }\\n\\n        match /variantMappings/{hash} {\\n            allow read: if request.auth != null;\\n        }\\n\\n        match /{document=**} {\\n            allow read, write: if request.auth.token.isAdmin == true;\\n        }\\n    }\\n}\\n\""],"names":["firestoreRules"],"mappings":"AAAA,MAAAA,IAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;"}

package/dist/src/cli/files/storage.rules.js

@@ -0,0 +1,35 @@
+const t = `rules_version = '2';
+service firebase.storage {
+    match /b/{bucket}/o {
+        function isAuthenticated(id) {
+            return request.auth != null && request.auth.uid == id;
+        }
+
+        function isTeacher() {
+            return request.auth != null && request.auth.token.isTeacher == true;
+        }
+
+        function getStudent(uid) {
+            let data = firestore.get(/databases/(default)/documents/studentMappingUid/$(uid)).data;
+            return firestore.get(/databases/(default)/documents/participations/$(data.participationId)/students/$(data.studentId));
+        }
+
+        match /statements/{contestId}/{variantId}/{filename} {
+            function canStudentReadVariant() {
+                let student = getStudent(request.auth.uid);
+                return student != null
+                    && isAuthenticated(student.data.uid)
+                    && student.data.contestId == contestId
+                    && student.data.variant == variantId
+                    && student.data.startedAt <= request.time;
+            }
+
+            allow read: if canStudentReadVariant() || isTeacher();
+        }
+    }
+}
+`;
+export {
+  t as default
+};
+//# sourceMappingURL=storage.rules.js.map

package/dist/src/cli/files/storage.rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.rules.js","sources":["../../../../src/cli/files/storage.rules?raw"],"sourcesContent":["export default \"rules_version = '2';\\nservice firebase.storage {\\n    match /b/{bucket}/o {\\n        function isAuthenticated(id) {\\n            return request.auth != null && request.auth.uid == id;\\n        }\\n\\n        function isTeacher() {\\n            return request.auth != null && request.auth.token.isTeacher == true;\\n        }\\n\\n        function getStudent(uid) {\\n            let data = firestore.get(/databases/(default)/documents/studentMappingUid/$(uid)).data;\\n            return firestore.get(/databases/(default)/documents/participations/$(data.participationId)/students/$(data.studentId));\\n        }\\n\\n        match /statements/{contestId}/{variantId}/{filename} {\\n            function canStudentReadVariant() {\\n                let student = getStudent(request.auth.uid);\\n                return student != null\\n                    && isAuthenticated(student.data.uid)\\n                    && student.data.contestId == contestId\\n                    && student.data.variant == variantId\\n                    && student.data.startedAt <= request.time;\\n            }\\n\\n            allow read: if canStudentReadVariant() || isTeacher();\\n        }\\n    }\\n}\\n\""],"names":["storageRules"],"mappings":"AAAA,MAAAA,IAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;"}