@studious-lms/server 1.19.0 → 1.21.0

package/dist/workers/processors/gradeWorksheet.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1acdee19-3e17-56ee-ab44-55001b9460f2")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="777a2189-86f3-5317-9904-cac13606cce2")}catch(e){}}();
 import { gradeWorksheetPipeline } from '../../pipelines/gradeWorksheet.js';
 import { createRunJobWorker } from './createRunJobWorker.js';
 export const gradeWorksheetWorker = createRunJobWorker({
@@ -10,10 +10,10 @@ export const gradeWorksheetWorker = createRunJobWorker({
         // throughput modest until we measure real-world usage.
         limiter: { max: 5, duration: 60000 },
     },
-    run: async ({ worksheetResponseId }) => {
-        await gradeWorksheetPipeline(worksheetResponseId);
+    run: async ({ worksheetResponseId }, ctx) => {
+        await gradeWorksheetPipeline(worksheetResponseId, ctx.userId);
         return { worksheetResponseId };
     },
 });
 //# sourceMappingURL=gradeWorksheet.js.map
-//# debugId=1acdee19-3e17-56ee-ab44-55001b9460f2
+//# debugId=777a2189-86f3-5317-9904-cac13606cce2

package/dist/workers/processors/gradeWorksheet.js.map

@@ -1 +1 @@
-{"version":3,"file":"gradeWorksheet.js","sources":["workers/processors/gradeWorksheet.ts"],"sourceRoot":"/","sourcesContent":["import { gradeWorksheetPipeline } from '../../pipelines/gradeWorksheet.js';\nimport { createRunJobWorker } from './createRunJobWorker.js';\n\nexport const gradeWorksheetWorker = createRunJobWorker({\n  type: 'GRADE_WORKSHEET',\n  workerOptions: {\n    concurrency: 2,\n    // Each pipeline run can fan out to many per-question inferences; keep\n    // throughput modest until we measure real-world usage.\n    limiter: { max: 5, duration: 60_000 },\n  },\n  run: async ({ worksheetResponseId }) => {\n    await gradeWorksheetPipeline(worksheetResponseId);\n    return { worksheetResponseId };\n  },\n});\n"],"names":[],"mappings":";;AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;IACrD,IAAI,EAAE,iBAAiB;IACvB,aAAa,EAAE;QACb,WAAW,EAAE,CAAC;QACd,sEAAsE;QACtE,uDAAuD;QACvD,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAM,EAAE;KACtC;IACD,GAAG,EAAE,KAAK,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE;QACrC,MAAM,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;QAClD,OAAO,EAAE,mBAAmB,EAAE,CAAC;IACjC,CAAC;CACF,CAAC,CAAC","debug_id":"1acdee19-3e17-56ee-ab44-55001b9460f2"}
+{"version":3,"file":"gradeWorksheet.js","sources":["workers/processors/gradeWorksheet.ts"],"sourceRoot":"/","sourcesContent":["import { gradeWorksheetPipeline } from '../../pipelines/gradeWorksheet.js';\nimport { createRunJobWorker } from './createRunJobWorker.js';\n\nexport const gradeWorksheetWorker = createRunJobWorker({\n  type: 'GRADE_WORKSHEET',\n  workerOptions: {\n    concurrency: 2,\n    // Each pipeline run can fan out to many per-question inferences; keep\n    // throughput modest until we measure real-world usage.\n    limiter: { max: 5, duration: 60_000 },\n  },\n  run: async ({ worksheetResponseId }, ctx) => {\n    await gradeWorksheetPipeline(worksheetResponseId, ctx.userId);\n    return { worksheetResponseId };\n  },\n});\n"],"names":[],"mappings":";;AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;IACrD,IAAI,EAAE,iBAAiB;IACvB,aAAa,EAAE;QACb,WAAW,EAAE,CAAC;QACd,sEAAsE;QACtE,uDAAuD;QACvD,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAM,EAAE;KACtC;IACD,GAAG,EAAE,KAAK,EAAE,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,EAAE;QAC1C,MAAM,sBAAsB,CAAC,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9D,OAAO,EAAE,mBAAmB,EAAE,CAAC;IACjC,CAAC;CACF,CAAC,CAAC","debug_id":"777a2189-86f3-5317-9904-cac13606cce2"}

package/dist/workers/processors/pdfToWorksheet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pdfToWorksheet.d.ts","sourceRoot":"/","sources":["workers/processors/pdfToWorksheet.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,oBAAoB;;;;;;eAa/B,CAAC"}
+{"version":3,"file":"pdfToWorksheet.d.ts","sourceRoot":"/","sources":["workers/processors/pdfToWorksheet.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,oBAAoB;;;;;;eAgB/B,CAAC"}

package/dist/workers/processors/pdfToWorksheet.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="3beb4788-6c75-5aae-b6c1-3195cbdeffa3")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="83752754-be47-54a0-b136-1b4140250056")}catch(e){}}();
 import { pdfToWorksheet } from '../../pipelines/pdfToWorksheet.js';
 import { createRunJobWorker } from './createRunJobWorker.js';
 export const pdfToWorksheetWorker = createRunJobWorker({
@@ -9,12 +9,15 @@ export const pdfToWorksheetWorker = createRunJobWorker({
         // 5 jobs / minute, e.g. to stay under OpenAI rate limits.
         limiter: { max: 5, duration: 60000 },
     },
-    run: async ({ gcsUrl, classId, worksheetId }) => {
-        const worksheet = await pdfToWorksheet(gcsUrl, classId, { worksheetId });
+    run: async ({ gcsUrl, classId, worksheetId }, ctx) => {
+        const worksheet = await pdfToWorksheet(gcsUrl, classId, {
+            worksheetId,
+            userId: ctx.userId,
+        });
         return worksheet
             ? { worksheetId: worksheet.id, name: worksheet.name }
             : null;
     },
 });
 //# sourceMappingURL=pdfToWorksheet.js.map
-//# debugId=3beb4788-6c75-5aae-b6c1-3195cbdeffa3
+//# debugId=83752754-be47-54a0-b136-1b4140250056

package/dist/workers/processors/pdfToWorksheet.js.map

@@ -1 +1 @@
-{"version":3,"file":"pdfToWorksheet.js","sources":["workers/processors/pdfToWorksheet.ts"],"sourceRoot":"/","sourcesContent":["import { pdfToWorksheet } from '../../pipelines/pdfToWorksheet.js';\nimport { createRunJobWorker } from './createRunJobWorker.js';\n\nexport const pdfToWorksheetWorker = createRunJobWorker({\n  type: 'PDF_TO_WORKSHEET',\n  workerOptions: {\n    concurrency: 2,\n    // 5 jobs / minute, e.g. to stay under OpenAI rate limits.\n    limiter: { max: 5, duration: 60_000 },\n  },\n  run: async ({ gcsUrl, classId, worksheetId }) => {\n    const worksheet = await pdfToWorksheet(gcsUrl, classId, { worksheetId });\n    return worksheet\n      ? { worksheetId: worksheet.id, name: worksheet.name }\n      : null;\n  },\n});\n"],"names":[],"mappings":";;AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;IACrD,IAAI,EAAE,kBAAkB;IACxB,aAAa,EAAE;QACb,WAAW,EAAE,CAAC;QACd,0DAA0D;QAC1D,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAM,EAAE;KACtC;IACD,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE;QAC9C,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACzE,OAAO,SAAS;YACd,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE;YACrD,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;CACF,CAAC,CAAC","debug_id":"3beb4788-6c75-5aae-b6c1-3195cbdeffa3"}
+{"version":3,"file":"pdfToWorksheet.js","sources":["workers/processors/pdfToWorksheet.ts"],"sourceRoot":"/","sourcesContent":["import { pdfToWorksheet } from '../../pipelines/pdfToWorksheet.js';\nimport { createRunJobWorker } from './createRunJobWorker.js';\n\nexport const pdfToWorksheetWorker = createRunJobWorker({\n  type: 'PDF_TO_WORKSHEET',\n  workerOptions: {\n    concurrency: 2,\n    // 5 jobs / minute, e.g. to stay under OpenAI rate limits.\n    limiter: { max: 5, duration: 60_000 },\n  },\n  run: async ({ gcsUrl, classId, worksheetId }, ctx) => {\n    const worksheet = await pdfToWorksheet(gcsUrl, classId, {\n      worksheetId,\n      userId: ctx.userId,\n    });\n    return worksheet\n      ? { worksheetId: worksheet.id, name: worksheet.name }\n      : null;\n  },\n});\n"],"names":[],"mappings":";;AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;IACrD,IAAI,EAAE,kBAAkB;IACxB,aAAa,EAAE;QACb,WAAW,EAAE,CAAC;QACd,0DAA0D;QAC1D,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAM,EAAE;KACtC;IACD,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE;YACtD,WAAW;YACX,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;QACH,OAAO,SAAS;YACd,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE;YACrD,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;CACF,CAAC,CAAC","debug_id":"83752754-be47-54a0-b136-1b4140250056"}

package/docker-entrypoint.sh

@@ -0,0 +1,7 @@
+#!/bin/sh
+set -e
+
+# Apply pending database migrations before starting the API.
+./node_modules/.bin/prisma migrate deploy
+
+exec node dist/index.js

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@studious-lms/server",
-  "version": "1.19.0",
+  "version": "1.21.0",
   "description": "Backend server for Studious application",
   "main": "dist/exportType.js",
   "types": "dist/exportType.d.ts",

package/prisma/migrations/20260708011456_add_file_annotations/migration.sql

@@ -0,0 +1,35 @@
+-- CreateEnum
+CREATE TYPE "FileAnnotationType" AS ENUM ('HIGHLIGHT', 'INK', 'COMMENT', 'TEXT');
+
+-- CreateTable
+CREATE TABLE "FileAnnotation" (
+    "id" TEXT NOT NULL,
+    "fileId" TEXT NOT NULL,
+    "submissionId" TEXT NOT NULL,
+    "authorId" TEXT NOT NULL,
+    "page" INTEGER NOT NULL,
+    "type" "FileAnnotationType" NOT NULL,
+    "geometry" JSONB NOT NULL,
+    "text" TEXT,
+    "color" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "FileAnnotation_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "FileAnnotation_fileId_idx" ON "FileAnnotation"("fileId");
+
+-- CreateIndex
+CREATE INDEX "FileAnnotation_submissionId_idx" ON "FileAnnotation"("submissionId");
+
+-- AddForeignKey
+ALTER TABLE "FileAnnotation" ADD CONSTRAINT "FileAnnotation_fileId_fkey" FOREIGN KEY ("fileId") REFERENCES "File"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "FileAnnotation" ADD CONSTRAINT "FileAnnotation_submissionId_fkey" FOREIGN KEY ("submissionId") REFERENCES "Submission"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "FileAnnotation" ADD CONSTRAINT "FileAnnotation_authorId_fkey" FOREIGN KEY ("authorId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+

package/prisma/migrations/20260708011500_add_ai_usage_attribution/migration.sql

@@ -0,0 +1,13 @@
+-- AlterTable
+ALTER TABLE "AiUsageLog" ADD COLUMN "userId" TEXT,
+ADD COLUMN "schoolId" TEXT,
+ADD COLUMN "classId" TEXT;
+
+-- CreateIndex
+CREATE INDEX "AiUsageLog_userId_createdAt_idx" ON "AiUsageLog"("userId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "AiUsageLog_schoolId_createdAt_idx" ON "AiUsageLog"("schoolId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "AiUsageLog_classId_createdAt_idx" ON "AiUsageLog"("classId", "createdAt");

package/prisma/migrations/20260708013000_add_notification_type_and_entity/migration.sql

@@ -0,0 +1,14 @@
+-- CreateEnum
+CREATE TYPE "NotificationType" AS ENUM ('ASSIGNMENT_POSTED', 'ASSIGNMENT_RETURNED', 'COMMENT_REPLY', 'DISCUSSION_REPLY', 'DISCUSSION_MENTION', 'ANNOUNCEMENT', 'ATTENDANCE', 'SYSTEM');
+
+-- AlterTable
+ALTER TABLE "Notification" ADD COLUMN     "type" "NotificationType" NOT NULL DEFAULT 'SYSTEM',
+ADD COLUMN     "entityType" TEXT,
+ADD COLUMN     "entityId" TEXT,
+ADD COLUMN     "classId" TEXT;
+
+-- CreateIndex
+CREATE INDEX "Notification_receiverId_createdAt_idx" ON "Notification"("receiverId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "Notification_receiverId_read_idx" ON "Notification"("receiverId", "read");

package/prisma/schema.prisma

@@ -128,14 +128,14 @@ model School {
   createdAt   DateTime @default(now())
   updatedAt   DateTime @updatedAt
 
-  users         User[]
-  memberships   SchoolMembership[]
-  invites       SchoolInvite[]
-  classes       Class[]
-  departments   Department[]
-  tags          Tag[]
-  storageRoot   Folder?            @relation("SchoolStorageRoot")
-  permissions   Permission[]       @relation("SchoolPermissions")
+  users       User[]
+  memberships SchoolMembership[]
+  invites     SchoolInvite[]
+  classes     Class[]
+  departments Department[]
+  tags        Tag[]
+  storageRoot Folder?            @relation("SchoolStorageRoot")
+  permissions Permission[]       @relation("SchoolPermissions")
 }
 
 model Department {
@@ -175,13 +175,13 @@ model Tag {
   createdAt    DateTime @default(now())
   updatedAt    DateTime @updatedAt
 
-  school     School            @relation(fields: [schoolId], references: [id], onDelete: Cascade)
-  department Department?       @relation(fields: [departmentId], references: [id], onDelete: SetNull)
-  users      User[]            @relation("UserTags")
-  classes    Class[]           @relation("ClassTags")
-  rubrics    MarkScheme[]      @relation("MarkSchemeTags")
-  boundaries GradingBoundary[] @relation("GradingBoundaryTags")
-  permissions Permission[]     @relation("TagPermissions")
+  school      School            @relation(fields: [schoolId], references: [id], onDelete: Cascade)
+  department  Department?       @relation(fields: [departmentId], references: [id], onDelete: SetNull)
+  users       User[]            @relation("UserTags")
+  classes     Class[]           @relation("ClassTags")
+  rubrics     MarkScheme[]      @relation("MarkSchemeTags")
+  boundaries  GradingBoundary[] @relation("GradingBoundaryTags")
+  permissions Permission[]      @relation("TagPermissions")
 
   @@unique([schoolId, name])
   @@index([schoolId])
@@ -197,7 +197,7 @@ model User {
   verified Boolean      @default(false)
 
   termsAcceptedAt DateTime?
-  termsVersion      String?
+  termsVersion    String?
 
   teacherIn Class[] @relation("UserTeacherToClass")
   studentIn Class[] @relation("UserStudentToClass")
@@ -241,6 +241,7 @@ model User {
   discussions             Discussion[]
   discussionReplies       DiscussionReply[]
   discussionReads         DiscussionRead[]
+  fileAnnotations         FileAnnotation[]     @relation("AuthoredFileAnnotations")
 }
 
 model SchoolMembership {
@@ -330,9 +331,9 @@ model Class {
   classTags         ClassTag[]
   embeddings        Embedding[]
 
-  discussionsEnabled              Boolean @default(true)
-  studentsCanCreateDiscussions    Boolean @default(true)
-  studentsCanReply                Boolean @default(true)
+  discussionsEnabled           Boolean @default(true)
+  studentsCanCreateDiscussions Boolean @default(true)
+  studentsCanReply             Boolean @default(true)
 
   @@index([schoolId])
   @@index([departmentId])
@@ -454,6 +455,35 @@ model File {
 
   schoolDevelopementProgram   SchoolDevelopementProgram? @relation("SchoolDevelopementProgramSupportingDocumentation", fields: [schoolDevelopementProgramId], references: [id], onDelete: Cascade)
   schoolDevelopementProgramId String?
+
+  fileAnnotations FileAnnotation[] @relation("FileAnnotations")
+}
+
+enum FileAnnotationType {
+  HIGHLIGHT
+  INK
+  COMMENT
+  TEXT
+}
+
+model FileAnnotation {
+  id           String             @id @default(uuid())
+  file         File               @relation("FileAnnotations", fields: [fileId], references: [id], onDelete: Cascade)
+  fileId       String
+  submission   Submission         @relation("SubmissionFileAnnotations", fields: [submissionId], references: [id], onDelete: Cascade)
+  submissionId String
+  author       User               @relation("AuthoredFileAnnotations", fields: [authorId], references: [id], onDelete: Cascade)
+  authorId     String
+  page         Int
+  type         FileAnnotationType
+  geometry     Json
+  text         String?
+  color        String?
+  createdAt    DateTime           @default(now())
+  updatedAt    DateTime           @updatedAt
+
+  @@index([fileId])
+  @@index([submissionId])
 }
 
 model Assignment {
@@ -607,19 +637,19 @@ model DiscussionRead {
 }
 
 model Reaction {
-  id             String        @id @default(uuid())
-  type           ReactionType
-  user           User          @relation(fields: [userId], references: [id], onDelete: Cascade)
-  userId         String
-  announcement   Announcement? @relation(fields: [announcementId], references: [id], onDelete: Cascade)
-  announcementId String?
-  comment        Comment?      @relation(fields: [commentId], references: [id], onDelete: Cascade)
-  commentId      String?
+  id                String           @id @default(uuid())
+  type              ReactionType
+  user              User             @relation(fields: [userId], references: [id], onDelete: Cascade)
+  userId            String
+  announcement      Announcement?    @relation(fields: [announcementId], references: [id], onDelete: Cascade)
+  announcementId    String?
+  comment           Comment?         @relation(fields: [commentId], references: [id], onDelete: Cascade)
+  commentId         String?
   discussion        Discussion?      @relation(fields: [discussionId], references: [id], onDelete: Cascade)
   discussionId      String?
   discussionReply   DiscussionReply? @relation(fields: [discussionReplyId], references: [id], onDelete: Cascade)
   discussionReplyId String?
-  createdAt      DateTime      @default(now())
+  createdAt         DateTime         @default(now())
 
   @@unique([userId, announcementId])
   @@unique([userId, commentId])
@@ -661,6 +691,8 @@ model Submission {
   returned     Boolean?     @default(false)
   newtonTutors NewtonChat[]
 
+  fileAnnotations FileAnnotation[] @relation("SubmissionFileAnnotations")
+
   @@index([studentId, recommendationState])
 }
 
@@ -734,16 +766,34 @@ model Attendance {
   absent  User[] @relation("AbsentAttendance")
 }
 
+enum NotificationType {
+  ASSIGNMENT_POSTED
+  ASSIGNMENT_RETURNED
+  COMMENT_REPLY
+  DISCUSSION_REPLY
+  DISCUSSION_MENTION
+  ANNOUNCEMENT
+  ATTENDANCE
+  SYSTEM
+}
+
 model Notification {
-  id         String   @id @default(uuid())
+  id         String           @id @default(uuid())
   title      String
   content    String
-  createdAt  DateTime @default(now())
+  createdAt  DateTime         @default(now())
   senderId   String? // no ID means sys
   receiverId String
-  read       Boolean  @default(false)
-  sender     User?    @relation("SentNotifications", fields: [senderId], references: [id])
-  receiver   User     @relation("ReceivedNotifications", fields: [receiverId], references: [id], onDelete: Cascade)
+  read       Boolean          @default(false)
+  type       NotificationType @default(SYSTEM)
+  entityType String? // e.g. ASSIGNMENT, ANNOUNCEMENT, DISCUSSION, SUBMISSION
+  entityId   String?
+  classId    String?
+  sender     User?            @relation("SentNotifications", fields: [senderId], references: [id])
+  receiver   User             @relation("ReceivedNotifications", fields: [receiverId], references: [id], onDelete: Cascade)
+
+  @@index([receiverId, createdAt])
+  @@index([receiverId, read])
 }
 
 enum ConversationType {
@@ -837,9 +887,15 @@ model AiUsageLog {
   estimatedInputTokens Int?
   metadata             Json?    @default("{}")
   error                String?
+  userId               String?
+  schoolId             String?
+  classId              String?
   createdAt            DateTime @default(now())
 
   @@index([reason, createdAt])
+  @@index([userId, createdAt])
+  @@index([schoolId, createdAt])
+  @@index([classId, createdAt])
 }
 
 model Mention {
@@ -866,11 +922,11 @@ model Worksheet {
   questions                 WorksheetQuestion[]
   studentWorksheetResponses StudentWorksheetResponse[]
 
-  runJobId                  String?
-  runJob                    RunJob?                    @relation("WorksheetRunJob", fields: [runJobId], references: [id], onDelete: SetNull)
+  runJobId String?
+  runJob   RunJob? @relation("WorksheetRunJob", fields: [runJobId], references: [id], onDelete: SetNull)
 
-  status                    JobStatus?                 @default(NOT_STARTED)
-  tags                      ClassTag[]                 @relation("WorksheetToTag")
+  status JobStatus? @default(NOT_STARTED)
+  tags   ClassTag[] @relation("WorksheetToTag")
 
   @@unique([classId, sourceUrl])
 }
@@ -987,14 +1043,14 @@ enum EmbeddingSourceType {
 }
 
 model Embedding {
-  id         String              @id @default(uuid())
+  id         String                      @id @default(uuid())
   classId    String
   sourceType EmbeddingSourceType
   sourceId   String
   content    String
   vector     Unsupported("vector(1536)")
-  metadata   Json?               @default("{}")
-  createdAt  DateTime            @default(now())
+  metadata   Json?                       @default("{}")
+  createdAt  DateTime                    @default(now())
 
   class Class @relation(fields: [classId], references: [id], onDelete: Cascade)
 
@@ -1038,7 +1094,7 @@ model RunJob {
   /// most jobs touch zero or one of these.
   messages                  Message[]                 @relation("MessageRunJob")
   studentQuestionProgresses StudentQuestionProgress[] @relation("StudentQuestionProgressRunJob")
-  worksheet                 Worksheet[]                @relation("WorksheetRunJob")
+  worksheet                 Worksheet[]               @relation("WorksheetRunJob")
 
   @@index([userId, type, status])
   @@index([classId, status])
@@ -1074,9 +1130,9 @@ enum PermissionLevel {
 ///     `schoolId` is set, matching `principalType`. CLASS, CLASS_TEACHERS,
 ///     CLASS_STUDENTS all share `classId`.
 model Permission {
-  id       String  @id @default(uuid())
+  id       String @id @default(uuid())
   folderId String
-  folder   Folder  @relation("FolderPermissions", fields: [folderId], references: [id], onDelete: Cascade)
+  folder   Folder @relation("FolderPermissions", fields: [folderId], references: [id], onDelete: Cascade)
 
   principalType PermissionPrincipalType
   userId        String?

package/src/index.ts

@@ -272,6 +272,13 @@ app.post('/api/pusher/auth', async (req, res) => {
     //   }
     // }
 
+    // Per-user notification channel: only the user themselves may subscribe
+    if (channel_name.startsWith('private-user-')) {
+      if (channel_name !== `private-user-${user.id}-notifications`) {
+        return res.status(403).json({ error: 'No access to this user channel' });
+      }
+    }
+
     if (channel_name.startsWith('presence-')) {
       const authResponse = pusher.authorizeChannel(socket_id, channel_name, {
         user_id: user.id,

package/src/lib/pusher.ts

@@ -19,5 +19,7 @@ const discussionChannel = (classId: string) => `private-class-${classId}-discuss
  * worksheet-response channel so both can co-exist without auth collisions.
  */
 const worksheetJobChannel = (worksheetId: string) => `private-worksheet-job-${worksheetId}`;
+/** Per-user private channel for in-app notification pushes. */
+const userNotificationChannel = (userId: string) => `private-user-${userId}-notifications`;
 
-export { pusher, chatChannel, worksheetChannel, teacherChannel, discussionChannel, worksheetJobChannel };
+export { pusher, chatChannel, worksheetChannel, teacherChannel, discussionChannel, worksheetJobChannel, userNotificationChannel };

package/src/middleware/security.ts

@@ -20,7 +20,7 @@ const rateLimitHandler = (req: Request, res: Response) => {
 // General API rate limiter - applies to all routes
 export const generalLimiter = rateLimit({
   windowMs: 10 * 60 * 1000, // 10 minutes
-  max: 1000, // Limit each IP to 100 requests per windowMs
+  max: 10000, // Limit each IP to 10000 requests per windowMs (schools often share one NAT IP)
   message: 'Too many requests from this IP, please try again later.',
   standardHeaders: true, // Return rate limit info in the `RateLimit-*` headers
   legacyHeaders: false, // Disable the `X-RateLimit-*` headers
@@ -45,7 +45,7 @@ export const authLimiter = rateLimit({
 // File upload rate limiter
 export const uploadLimiter = rateLimit({
   windowMs: 30 * 60 * 1000, // 30 minutes
-  max: 50, // Limit each IP to 50 uploads per hour
+  max: 500, // Limit each IP to 500 uploads per windowMs (a whole class may submit at once behind one IP)
   message: 'Too many file uploads, please try again later.',
   standardHeaders: true,
   legacyHeaders: false,

package/src/models/class.ts

@@ -298,10 +298,11 @@ export function findSessionByClassCode(classCode: string) {
   });
 }
 
-/** @returns Session for a class. */
+/** @returns Invite session for a class. */
 export function findSessionByClassId(classId: string) {
   return prisma.session.findFirst({
-    where: { classId },
+    where: { classId, type: SessionType.CLASS_INVITE },
+    orderBy: { expiresAt: "desc" },
   });
 }
 

package/src/models/notification.ts

@@ -1,6 +1,7 @@
 /**
  * Notification model – in-app notifications, create, mark read.
  */
+import type { NotificationType } from "@prisma/client";
 import { prisma } from "../lib/prisma.js";
 
 const notificationInclude = {
@@ -8,11 +9,28 @@ const notificationInclude = {
   receiver: { select: { username: true } },
 };
 
-/** @returns Notifications for a receiver, newest first. */
-export function findNotificationsByReceiverId(receiverId: string) {
+export type NotificationCreateData = {
+  receiverId: string;
+  title: string;
+  content: string;
+  senderId?: string | null;
+  type?: NotificationType;
+  entityType?: string | null;
+  entityId?: string | null;
+  classId?: string | null;
+};
+
+/** @returns A page of notifications for a receiver, newest first. */
+export function findNotificationsByReceiverIdPaginated(
+  receiverId: string,
+  limit: number,
+  cursor?: string | null
+) {
   return prisma.notification.findMany({
     where: { receiverId },
-    orderBy: { createdAt: "desc" },
+    orderBy: [{ createdAt: "desc" }, { id: "desc" }],
+    take: limit + 1,
+    ...(cursor ? { cursor: { id: cursor }, skip: 1 } : {}),
     include: notificationInclude,
   });
 }
@@ -25,23 +43,26 @@ export function findNotificationByIdForReceiver(id: string, receiverId: string)
   });
 }
 
+/** @returns Number of unread notifications for a receiver. */
+export function countUnreadNotifications(receiverId: string) {
+  return prisma.notification.count({
+    where: { receiverId, read: false },
+  });
+}
+
 /** Create a notification for one receiver. */
-export function createNotification(data: {
-  receiverId: string;
-  title: string;
-  content: string;
-}) {
+export function createNotification(data: NotificationCreateData) {
   return prisma.notification.create({
     data,
+    include: notificationInclude,
   });
 }
 
-/** Create multiple notifications in one call. */
-export function createManyNotifications(
-  data: Array<{ receiverId: string; title: string; content: string }>
-) {
-  return prisma.notification.createMany({
+/** Create multiple notifications in one call and return the created rows. */
+export function createManyNotifications(data: NotificationCreateData[]) {
+  return prisma.notification.createManyAndReturn({
     data,
+    include: notificationInclude,
   });
 }
 
@@ -58,3 +79,11 @@ export async function markNotificationAsReadForReceiver(id: string, receiverId:
 
   return findNotificationByIdForReceiver(id, receiverId);
 }
+
+/** Mark all of a receiver's notifications as read. */
+export function markAllNotificationsAsReadForReceiver(receiverId: string) {
+  return prisma.notification.updateMany({
+    where: { receiverId, read: false },
+    data: { read: true },
+  });
+}

package/src/pipelines/aiLabChat.ts

@@ -378,7 +378,7 @@ export const generateAndSendLabIntroduction = async (
   export const generateAndSendLabResponse = async (
     labChatId: string,
     teacherMessage: string,
-    emitOptions: { classId: string; aiMessageId: string }
+    emitOptions: { classId: string; aiMessageId: string; userId?: string | null }
   ): Promise<void> => {
     try {
       // Get lab context from database
@@ -499,6 +499,11 @@ export const generateAndSendLabIntroduction = async (
           model: AI_CHAT_MODEL,
           system,
           messages,
+          usageReason: 'lab_chat_response',
+          attribution: {
+            userId: emitOptions.userId ?? fullLabChat.createdById,
+            classId: emitOptions.classId,
+          },
           tools,
           temperature: 0.7,
           maxOutputTokens: 4096,

package/src/pipelines/aiNewtonChat.ts

@@ -99,6 +99,7 @@ export const generateAndSendNewtonIntroduction = async (
     conversationId: string,
     submissionId: string,
     aiMessageId: string,
+    actingUserId?: string | null,
   ): Promise<void> => {
     try {
       // Get submission details for context
@@ -109,6 +110,7 @@ export const generateAndSendNewtonIntroduction = async (
             select: {
               title: true,
               instructions: true,
+              classId: true,
               class: {
                 select: {
                   subject: true,
@@ -160,6 +162,11 @@ export const generateAndSendNewtonIntroduction = async (
         ],
         temperature: 0.8,
         maxOutputTokens: 400,
+        usageReason: 'newton_introduction',
+        attribution: {
+          userId: actingUserId,
+          classId: submission.assignment.classId,
+        },
       });
 
       if (!response) {
@@ -237,6 +244,7 @@ export const generateAndSendNewtonIntroduction = async (
       };
     },
     aiMessageId: string,
+    actingUserId?: string | null,
   ): Promise<void> => {
     try {
       // Get recent conversation history (excluding the empty AI placeholder
@@ -339,6 +347,8 @@ export const generateAndSendNewtonIntroduction = async (
         ...(newtonClassId ? { tools: aiTools(newtonClassId), maxSteps: 5 } : {}),
         temperature: 0.7,
         maxOutputTokens: 1200,
+        usageReason: 'newton_response',
+        attribution: { userId: actingUserId, classId: newtonClassId },
       });
       
       if (!response) {