npm - @studious-lms/server - Versions diffs - 1.2.44 → 1.2.46 - Mend

@studious-lms/server 1.2.44 → 1.2.46

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (234) hide show

package/.env.example +45 -0
package/.env.test.example +37 -0
package/README.md +34 -7
package/coverage/base.css +224 -0
package/coverage/block-navigation.js +87 -0
package/coverage/clover.xml +12110 -0
package/coverage/coverage-final.json +44 -0
package/coverage/favicon.png +0 -0
package/coverage/index.html +221 -0
package/coverage/prettify.css +1 -0
package/coverage/prettify.js +2 -0
package/coverage/server/index.html +116 -0
package/coverage/server/src/exportType.ts.html +109 -0
package/coverage/server/src/index.html +161 -0
package/coverage/server/src/index.ts.html +1702 -0
package/coverage/server/src/instrument.ts.html +130 -0
package/coverage/server/src/lib/config/env.ts.html +448 -0
package/coverage/server/src/lib/config/index.html +116 -0
package/coverage/server/src/lib/fileUpload.ts.html +1138 -0
package/coverage/server/src/lib/googleCloudStorage.ts.html +334 -0
package/coverage/server/src/lib/index.html +206 -0
package/coverage/server/src/lib/jsonConversion.ts.html +2323 -0
package/coverage/server/src/lib/jsonStyles.ts.html +193 -0
package/coverage/server/src/lib/notificationHandler.ts.html +193 -0
package/coverage/server/src/lib/pusher.ts.html +121 -0
package/coverage/server/src/lib/thumbnailGenerator.ts.html +592 -0
package/coverage/server/src/middleware/auth.ts.html +646 -0
package/coverage/server/src/middleware/index.html +146 -0
package/coverage/server/src/middleware/logging.ts.html +244 -0
package/coverage/server/src/middleware/security.ts.html +271 -0
package/coverage/server/src/routers/_app.ts.html +232 -0
package/coverage/server/src/routers/agenda.ts.html +319 -0
package/coverage/server/src/routers/announcement.ts.html +3481 -0
package/coverage/server/src/routers/assignment.ts.html +7633 -0
package/coverage/server/src/routers/attendance.ts.html +1030 -0
package/coverage/server/src/routers/auth.ts.html +1081 -0
package/coverage/server/src/routers/class.ts.html +3535 -0
package/coverage/server/src/routers/comment.ts.html +991 -0
package/coverage/server/src/routers/conversation.ts.html +982 -0
package/coverage/server/src/routers/event.ts.html +1609 -0
package/coverage/server/src/routers/file.ts.html +1144 -0
package/coverage/server/src/routers/folder.ts.html +2797 -0
package/coverage/server/src/routers/index.html +386 -0
package/coverage/server/src/routers/labChat.ts.html +3073 -0
package/coverage/server/src/routers/marketing.ts.html +340 -0
package/coverage/server/src/routers/message.ts.html +1912 -0
package/coverage/server/src/routers/notifications.ts.html +364 -0
package/coverage/server/src/routers/section.ts.html +1120 -0
package/coverage/server/src/routers/user.ts.html +862 -0
package/coverage/server/src/routers/worksheet.ts.html +1729 -0
package/coverage/server/src/trpc.ts.html +397 -0
package/coverage/server/src/types/index.html +116 -0
package/coverage/server/src/types/trpc.ts.html +127 -0
package/coverage/server/src/utils/aiUser.ts.html +280 -0
package/coverage/server/src/utils/email.ts.html +121 -0
package/coverage/server/src/utils/generateInviteCode.ts.html +106 -0
package/coverage/server/src/utils/index.html +206 -0
package/coverage/server/src/utils/inference.ts.html +709 -0
package/coverage/server/src/utils/logger.ts.html +664 -0
package/coverage/server/src/utils/prismaErrorHandler.ts.html +907 -0
package/coverage/server/src/utils/prismaWrapper.ts.html +355 -0
package/coverage/server/vitest.config.ts.html +196 -0
package/coverage/sort-arrow-sprite.png +0 -0
package/coverage/sorter.js +210 -0
package/dist/index.d.ts.map +1 -1
package/dist/index.js +83 -52
package/dist/index.js.map +1 -1
package/dist/instrument.js +15 -8
package/dist/instrument.js.map +1 -1
package/dist/lib/config/env.d.ts +169 -0
package/dist/lib/config/env.d.ts.map +1 -0
package/dist/lib/config/env.js +115 -0
package/dist/lib/config/env.js.map +1 -0
package/dist/lib/fileUpload.d.ts.map +1 -1
package/dist/lib/fileUpload.js +5 -4
package/dist/lib/fileUpload.js.map +1 -1
package/dist/lib/googleCloudStorage.d.ts.map +1 -1
package/dist/lib/googleCloudStorage.js +7 -8
package/dist/lib/googleCloudStorage.js.map +1 -1
package/dist/lib/jsonConversion.d.ts.map +1 -1
package/dist/lib/jsonConversion.js +14 -16
package/dist/lib/jsonConversion.js.map +1 -1
package/dist/lib/notificationHandler.d.ts +2 -2
package/dist/lib/prisma.d.ts +2 -2
package/dist/lib/prisma.d.ts.map +1 -1
package/dist/lib/prisma.js +22 -3
package/dist/lib/prisma.js.map +1 -1
package/dist/lib/pusher.d.ts.map +1 -1
package/dist/lib/pusher.js +8 -7
package/dist/lib/pusher.js.map +1 -1
package/dist/middleware/auth.d.ts.map +1 -1
package/dist/middleware/auth.js +6 -5
package/dist/middleware/auth.js.map +1 -1
package/dist/middleware/security.d.ts +5 -0
package/dist/middleware/security.d.ts.map +1 -0
package/dist/middleware/security.js +77 -0
package/dist/middleware/security.js.map +1 -0
package/dist/routers/_app.d.ts +304 -98
package/dist/routers/_app.d.ts.map +1 -1
package/dist/routers/_app.js +4 -2
package/dist/routers/_app.js.map +1 -1
package/dist/routers/agenda.d.ts.map +1 -1
package/dist/routers/agenda.js +12 -9
package/dist/routers/agenda.js.map +1 -1
package/dist/routers/announcement.d.ts +8 -0
package/dist/routers/announcement.d.ts.map +1 -1
package/dist/routers/announcement.js +6 -4
package/dist/routers/announcement.js.map +1 -1
package/dist/routers/assignment.d.ts +7 -4
package/dist/routers/assignment.d.ts.map +1 -1
package/dist/routers/assignment.js +35 -18
package/dist/routers/assignment.js.map +1 -1
package/dist/routers/attendance.d.ts +1 -0
package/dist/routers/attendance.d.ts.map +1 -1
package/dist/routers/attendance.js +4 -4
package/dist/routers/attendance.js.map +1 -1
package/dist/routers/auth.d.ts +20 -0
package/dist/routers/auth.d.ts.map +1 -1
package/dist/routers/auth.js +132 -15
package/dist/routers/auth.js.map +1 -1
package/dist/routers/class.d.ts +10 -0
package/dist/routers/class.d.ts.map +1 -1
package/dist/routers/class.js +49 -5
package/dist/routers/class.js.map +1 -1
package/dist/routers/comment.d.ts +7 -0
package/dist/routers/comment.d.ts.map +1 -1
package/dist/routers/comment.js +9 -2
package/dist/routers/comment.js.map +1 -1
package/dist/routers/conversation.d.ts +1 -0
package/dist/routers/conversation.d.ts.map +1 -1
package/dist/routers/conversation.js +46 -31
package/dist/routers/conversation.js.map +1 -1
package/dist/routers/file.d.ts.map +1 -1
package/dist/routers/file.js +30 -7
package/dist/routers/file.js.map +1 -1
package/dist/routers/labChat.d.ts +1 -0
package/dist/routers/labChat.d.ts.map +1 -1
package/dist/routers/labChat.js +2 -3
package/dist/routers/labChat.js.map +1 -1
package/dist/routers/marketing.d.ts +1 -1
package/dist/routers/newtonChat.d.ts +55 -0
package/dist/routers/newtonChat.d.ts.map +1 -0
package/dist/routers/newtonChat.js +438 -0
package/dist/routers/newtonChat.js.map +1 -0
package/dist/routers/notifications.d.ts +4 -4
package/dist/routers/section.d.ts +9 -4
package/dist/routers/section.d.ts.map +1 -1
package/dist/routers/section.js +8 -8
package/dist/routers/section.js.map +1 -1
package/dist/routers/user.d.ts.map +1 -1
package/dist/routers/user.js +5 -4
package/dist/routers/user.js.map +1 -1
package/dist/routers/worksheet.d.ts +30 -36
package/dist/routers/worksheet.d.ts.map +1 -1
package/dist/routers/worksheet.js +11 -33
package/dist/routers/worksheet.js.map +1 -1
package/dist/seedDatabase.d.ts +1 -1
package/dist/seedDatabase.js +275 -284
package/dist/seedDatabase.js.map +1 -1
package/dist/server/pipelines/aiLabChat.d.ts +10 -0
package/dist/server/pipelines/aiLabChat.d.ts.map +1 -0
package/dist/server/pipelines/aiLabChat.js +83 -0
package/dist/server/pipelines/aiLabChat.js.map +1 -0
package/dist/server/pipelines/gradeWorksheet.d.ts +2 -0
package/dist/server/pipelines/gradeWorksheet.d.ts.map +1 -0
package/dist/server/pipelines/gradeWorksheet.js +138 -0
package/dist/server/pipelines/gradeWorksheet.js.map +1 -0
package/dist/trpc.d.ts.map +1 -1
package/dist/trpc.js +2 -2
package/dist/trpc.js.map +1 -1
package/dist/utils/email.d.ts +9 -1
package/dist/utils/email.d.ts.map +1 -1
package/dist/utils/email.js +20 -5
package/dist/utils/email.js.map +1 -1
package/dist/utils/inference.d.ts +3 -0
package/dist/utils/inference.d.ts.map +1 -1
package/dist/utils/inference.js +41 -7
package/dist/utils/inference.js.map +1 -1
package/dist/utils/logger.d.ts.map +1 -1
package/dist/utils/logger.js +3 -3
package/dist/utils/logger.js.map +1 -1
package/docker-compose.yml +14 -0
package/package.json +13 -4
package/prisma/schema.prisma +32 -5
package/scripts/test-pre-push.ts +14 -0
package/src/index.ts +98 -54
package/src/instrument.ts +13 -6
package/src/lib/config/env.ts +126 -0
package/src/lib/fileUpload.ts +3 -2
package/src/lib/googleCloudStorage.ts +6 -6
package/src/lib/jsonConversion.ts +12 -14
package/src/lib/prisma.ts +23 -2
package/src/lib/pusher.ts +6 -5
package/src/middleware/auth.ts +4 -3
package/src/middleware/security.ts +80 -0
package/src/routers/_app.ts +2 -0
package/src/routers/agenda.ts +10 -7
package/src/routers/announcement.ts +4 -2
package/src/routers/assignment.ts +58 -40
package/src/routers/attendance.ts +2 -2
package/src/routers/auth.ts +143 -14
package/src/routers/class.ts +52 -3
package/src/routers/comment.ts +7 -0
package/src/routers/conversation.ts +49 -29
package/src/routers/file.ts +29 -5
package/src/routers/labChat.ts +0 -1
package/src/routers/newtonChat.ts +520 -0
package/src/routers/section.ts +6 -6
package/src/routers/user.ts +3 -2
package/src/routers/worksheet.ts +9 -37
package/src/seedDatabase.ts +290 -283
package/src/server/pipelines/aiLabChat.ts +92 -0
package/src/server/pipelines/gradeWorksheet.ts +152 -0
package/src/trpc.ts +2 -0
package/src/utils/email.ts +30 -3
package/src/utils/inference.ts +50 -5
package/src/utils/logger.ts +2 -1
package/tests/announcement.test.ts +164 -0
package/tests/assignment.test.ts +296 -0
package/tests/attendance.test.ts +168 -0
package/tests/auth.test.ts +33 -10
package/tests/class.test.ts +34 -9
package/tests/event.test.ts +228 -0
package/tests/section.test.ts +216 -0
package/tests/setup.ts +70 -16
package/tests/user.test.ts +158 -0
package/vitest.config.ts +26 -0
package/API_SPECIFICATION.md +0 -1597
package/BASE64_REMOVAL_SUMMARY.md +0 -164
package/CHAT_API_SPEC.md +0 -579
package/LAB_CHAT_API_SPEC.md +0 -518
package/dist/routers/school.d.ts +0 -208
package/dist/routers/school.d.ts.map +0 -1
package/dist/routers/school.js +0 -483

package/coverage/server/src/middleware/security.ts.html ADDED Viewed

@@ -0,0 +1,271 @@
+<!doctype html>
+<html lang="en">
+<head>
+    <title>Code coverage report for server/src/middleware/security.ts</title>
+    <meta charset="utf-8" />
+    <link rel="stylesheet" href="../../../prettify.css" />
+    <link rel="stylesheet" href="../../../base.css" />
+    <link rel="shortcut icon" type="image/x-icon" href="../../../favicon.png" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <style type='text/css'>
+        .coverage-summary .sorter {
+            background-image: url(../../../sort-arrow-sprite.png);
+        }
+    </style>
+</head>
+<body>
+<div class='wrapper'>
+    <div class='pad1'>
+        <h1><a href="../../../index.html">All files</a> / <a href="index.html">server/src/middleware</a> security.ts</h1>
+        <div class='clearfix'>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">0% </span>
+                <span class="quiet">Statements</span>
+                <span class='fraction'>0/51</span>
+            </div>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">0% </span>
+                <span class="quiet">Branches</span>
+                <span class='fraction'>0/1</span>
+            </div>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">0% </span>
+                <span class="quiet">Functions</span>
+                <span class='fraction'>0/1</span>
+            </div>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">0% </span>
+                <span class="quiet">Lines</span>
+                <span class='fraction'>0/51</span>
+            </div>
+        </div>
+        <p class="quiet">
+            Press <em>n</em> or <em>j</em> to go to the next uncovered block, <em>b</em>, <em>p</em> or <em>k</em> for the previous block.
+        </p>
+        <template id="filterTemplate">
+            <div class="quiet">
+                Filter:
+                <input type="search" id="fileSearch">
+            </div>
+        </template>
+    </div>
+    <div class='status-line low'></div>
+    <pre><table class="coverage">
+<tr><td class="line-count quiet"><a name='L1'></a><a href='#L1'>1</a>
+<a name='L2'></a><a href='#L2'>2</a>
+<a name='L3'></a><a href='#L3'>3</a>
+<a name='L4'></a><a href='#L4'>4</a>
+<a name='L5'></a><a href='#L5'>5</a>
+<a name='L6'></a><a href='#L6'>6</a>
+<a name='L7'></a><a href='#L7'>7</a>
+<a name='L8'></a><a href='#L8'>8</a>
+<a name='L9'></a><a href='#L9'>9</a>
+<a name='L10'></a><a href='#L10'>10</a>
+<a name='L11'></a><a href='#L11'>11</a>
+<a name='L12'></a><a href='#L12'>12</a>
+<a name='L13'></a><a href='#L13'>13</a>
+<a name='L14'></a><a href='#L14'>14</a>
+<a name='L15'></a><a href='#L15'>15</a>
+<a name='L16'></a><a href='#L16'>16</a>
+<a name='L17'></a><a href='#L17'>17</a>
+<a name='L18'></a><a href='#L18'>18</a>
+<a name='L19'></a><a href='#L19'>19</a>
+<a name='L20'></a><a href='#L20'>20</a>
+<a name='L21'></a><a href='#L21'>21</a>
+<a name='L22'></a><a href='#L22'>22</a>
+<a name='L23'></a><a href='#L23'>23</a>
+<a name='L24'></a><a href='#L24'>24</a>
+<a name='L25'></a><a href='#L25'>25</a>
+<a name='L26'></a><a href='#L26'>26</a>
+<a name='L27'></a><a href='#L27'>27</a>
+<a name='L28'></a><a href='#L28'>28</a>
+<a name='L29'></a><a href='#L29'>29</a>
+<a name='L30'></a><a href='#L30'>30</a>
+<a name='L31'></a><a href='#L31'>31</a>
+<a name='L32'></a><a href='#L32'>32</a>
+<a name='L33'></a><a href='#L33'>33</a>
+<a name='L34'></a><a href='#L34'>34</a>
+<a name='L35'></a><a href='#L35'>35</a>
+<a name='L36'></a><a href='#L36'>36</a>
+<a name='L37'></a><a href='#L37'>37</a>
+<a name='L38'></a><a href='#L38'>38</a>
+<a name='L39'></a><a href='#L39'>39</a>
+<a name='L40'></a><a href='#L40'>40</a>
+<a name='L41'></a><a href='#L41'>41</a>
+<a name='L42'></a><a href='#L42'>42</a>
+<a name='L43'></a><a href='#L43'>43</a>
+<a name='L44'></a><a href='#L44'>44</a>
+<a name='L45'></a><a href='#L45'>45</a>
+<a name='L46'></a><a href='#L46'>46</a>
+<a name='L47'></a><a href='#L47'>47</a>
+<a name='L48'></a><a href='#L48'>48</a>
+<a name='L49'></a><a href='#L49'>49</a>
+<a name='L50'></a><a href='#L50'>50</a>
+<a name='L51'></a><a href='#L51'>51</a>
+<a name='L52'></a><a href='#L52'>52</a>
+<a name='L53'></a><a href='#L53'>53</a>
+<a name='L54'></a><a href='#L54'>54</a>
+<a name='L55'></a><a href='#L55'>55</a>
+<a name='L56'></a><a href='#L56'>56</a>
+<a name='L57'></a><a href='#L57'>57</a>
+<a name='L58'></a><a href='#L58'>58</a>
+<a name='L59'></a><a href='#L59'>59</a>
+<a name='L60'></a><a href='#L60'>60</a>
+<a name='L61'></a><a href='#L61'>61</a>
+<a name='L62'></a><a href='#L62'>62</a>
+<a name='L63'></a><a href='#L63'>63</a></td><td class="line-coverage quiet"><span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span></td><td class="text"><pre class="prettyprint lang-js"><span class="cstat-no" title="statement not covered" >import helmet from 'helmet';<span class="fstat-no" title="function not covered" ><span class="branch-0 cbranch-no" title="branch not covered" ></span></span></span>
+<span class="cstat-no" title="statement not covered" >import rateLimit from 'express-rate-limit';</span>
+&nbsp;
+<span class="cstat-no" title="statement not covered" >const isDevelopment = process.env.NODE_ENV === 'development';</span>
+&nbsp;
+// General API rate limiter - applies to all routes
+<span class="cstat-no" title="statement not covered" >export const generalLimiter = rateLimit({</span>
+<span class="cstat-no" title="statement not covered" >  windowMs: 10 * 60 * 1000, // 10 minutes</span>
+<span class="cstat-no" title="statement not covered" >  max: 100, // Limit each IP to 100 requests per windowMs</span>
+<span class="cstat-no" title="statement not covered" >  message: 'Too many requests from this IP, please try again later.',</span>
+<span class="cstat-no" title="statement not covered" >  standardHeaders: true, // Return rate limit info in the `RateLimit-*` headers</span>
+<span class="cstat-no" title="statement not covered" >  legacyHeaders: false, // Disable the `X-RateLimit-*` headers</span>
+<span class="cstat-no" title="statement not covered" >  skip: (req) =&gt; {</span>
+    // Skip rate limiting for health checks
+<span class="cstat-no" title="statement not covered" >    return req.path === '/health';</span>
+<span class="cstat-no" title="statement not covered" >  },</span>
+<span class="cstat-no" title="statement not covered" >});</span>
+&nbsp;
+// Stricter rate limiter for authentication endpoints
+<span class="cstat-no" title="statement not covered" >export const authLimiter = rateLimit({</span>
+<span class="cstat-no" title="statement not covered" >  windowMs: 5 * 60 * 1000, // 5 minutes</span>
+<span class="cstat-no" title="statement not covered" >  max: 5, // Limit each IP to 5 login attempts per windowMs</span>
+<span class="cstat-no" title="statement not covered" >  message: 'Too many authentication attempts, please try again later.',</span>
+<span class="cstat-no" title="statement not covered" >  standardHeaders: true,</span>
+<span class="cstat-no" title="statement not covered" >  legacyHeaders: false,</span>
+<span class="cstat-no" title="statement not covered" >  skipSuccessfulRequests: true, // Don't count successful requests</span>
+<span class="cstat-no" title="statement not covered" >});</span>
+&nbsp;
+// File upload rate limiter
+<span class="cstat-no" title="statement not covered" >export const uploadLimiter = rateLimit({</span>
+<span class="cstat-no" title="statement not covered" >  windowMs: 30 * 60 * 1000, // 30 minutes</span>
+<span class="cstat-no" title="statement not covered" >  max: 50, // Limit each IP to 50 uploads per hour</span>
+<span class="cstat-no" title="statement not covered" >  message: 'Too many file uploads, please try again later.',</span>
+<span class="cstat-no" title="statement not covered" >  standardHeaders: true,</span>
+<span class="cstat-no" title="statement not covered" >  legacyHeaders: false,</span>
+<span class="cstat-no" title="statement not covered" >});</span>
+&nbsp;
+// Helmet configuration
+<span class="cstat-no" title="statement not covered" >export const helmetConfig = helmet({</span>
+<span class="cstat-no" title="statement not covered" >  contentSecurityPolicy: {</span>
+<span class="cstat-no" title="statement not covered" >    directives: {</span>
+<span class="cstat-no" title="statement not covered" >      defaultSrc: ["'self'"],</span>
+<span class="cstat-no" title="statement not covered" >      styleSrc: ["'self'", "'unsafe-inline'"], // Allow inline styles for tRPC panel</span>
+      // Allow inline scripts only in development (for tRPC panel)
+      // In production, keep strict CSP without unsafe-inline
+<span class="cstat-no" title="statement not covered" >      scriptSrc: isDevelopment </span>
+<span class="cstat-no" title="statement not covered" >        ? ["'self'", "'unsafe-inline'"] </span>
+<span class="cstat-no" title="statement not covered" >        : ["'self'"],</span>
+<span class="cstat-no" title="statement not covered" >      imgSrc: ["'self'", "data:", "https:"], // Allow images from any HTTPS source</span>
+<span class="cstat-no" title="statement not covered" >      connectSrc: ["'self'", "https://*.sentry.io"], // Allow Sentry connections</span>
+<span class="cstat-no" title="statement not covered" >      fontSrc: ["'self'", "data:"],</span>
+<span class="cstat-no" title="statement not covered" >      objectSrc: ["'none'"],</span>
+<span class="cstat-no" title="statement not covered" >      mediaSrc: ["'self'"],</span>
+<span class="cstat-no" title="statement not covered" >      frameSrc: ["'none'"],</span>
+<span class="cstat-no" title="statement not covered" >    },</span>
+<span class="cstat-no" title="statement not covered" >  },</span>
+<span class="cstat-no" title="statement not covered" >  crossOriginEmbedderPolicy: false, // Disable if you need to embed resources</span>
+<span class="cstat-no" title="statement not covered" >  hsts: {</span>
+<span class="cstat-no" title="statement not covered" >    maxAge: 31536000, // 1 year</span>
+<span class="cstat-no" title="statement not covered" >    includeSubDomains: true,</span>
+<span class="cstat-no" title="statement not covered" >    preload: true,</span>
+<span class="cstat-no" title="statement not covered" >  },</span>
+<span class="cstat-no" title="statement not covered" >});</span></pre></td></tr></table></pre>
+                <div class='push'></div><!-- for sticky footer -->
+            </div><!-- /wrapper -->
+            <div class='footer quiet pad2 space-top1 center small'>
+                Code coverage generated by
+                <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
+                at 2025-11-22T10:42:40.796Z
+            </div>
+        <script src="../../../prettify.js"></script>
+        <script>
+            window.onload = function () {
+                prettyPrint();
+            };
+        </script>
+        <script src="../../../sorter.js"></script>
+        <script src="../../../block-navigation.js"></script>
+    </body>
+</html>

package/coverage/server/src/routers/_app.ts.html ADDED Viewed

@@ -0,0 +1,232 @@
+<!doctype html>
+<html lang="en">
+<head>
+    <title>Code coverage report for server/src/routers/_app.ts</title>
+    <meta charset="utf-8" />
+    <link rel="stylesheet" href="../../../prettify.css" />
+    <link rel="stylesheet" href="../../../base.css" />
+    <link rel="shortcut icon" type="image/x-icon" href="../../../favicon.png" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <style type='text/css'>
+        .coverage-summary .sorter {
+            background-image: url(../../../sort-arrow-sprite.png);
+        }
+    </style>
+</head>
+<body>
+<div class='wrapper'>
+    <div class='pad1'>
+        <h1><a href="../../../index.html">All files</a> / <a href="index.html">server/src/routers</a> _app.ts</h1>
+        <div class='clearfix'>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">100% </span>
+                <span class="quiet">Statements</span>
+                <span class='fraction'>41/41</span>
+            </div>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">100% </span>
+                <span class="quiet">Branches</span>
+                <span class='fraction'>0/0</span>
+            </div>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">100% </span>
+                <span class="quiet">Functions</span>
+                <span class='fraction'>0/0</span>
+            </div>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">100% </span>
+                <span class="quiet">Lines</span>
+                <span class='fraction'>41/41</span>
+            </div>
+        </div>
+        <p class="quiet">
+            Press <em>n</em> or <em>j</em> to go to the next uncovered block, <em>b</em>, <em>p</em> or <em>k</em> for the previous block.
+        </p>
+        <template id="filterTemplate">
+            <div class="quiet">
+                Filter:
+                <input type="search" id="fileSearch">
+            </div>
+        </template>
+    </div>
+    <div class='status-line high'></div>
+    <pre><table class="coverage">
+<tr><td class="line-count quiet"><a name='L1'></a><a href='#L1'>1</a>
+<a name='L2'></a><a href='#L2'>2</a>
+<a name='L3'></a><a href='#L3'>3</a>
+<a name='L4'></a><a href='#L4'>4</a>
+<a name='L5'></a><a href='#L5'>5</a>
+<a name='L6'></a><a href='#L6'>6</a>
+<a name='L7'></a><a href='#L7'>7</a>
+<a name='L8'></a><a href='#L8'>8</a>
+<a name='L9'></a><a href='#L9'>9</a>
+<a name='L10'></a><a href='#L10'>10</a>
+<a name='L11'></a><a href='#L11'>11</a>
+<a name='L12'></a><a href='#L12'>12</a>
+<a name='L13'></a><a href='#L13'>13</a>
+<a name='L14'></a><a href='#L14'>14</a>
+<a name='L15'></a><a href='#L15'>15</a>
+<a name='L16'></a><a href='#L16'>16</a>
+<a name='L17'></a><a href='#L17'>17</a>
+<a name='L18'></a><a href='#L18'>18</a>
+<a name='L19'></a><a href='#L19'>19</a>
+<a name='L20'></a><a href='#L20'>20</a>
+<a name='L21'></a><a href='#L21'>21</a>
+<a name='L22'></a><a href='#L22'>22</a>
+<a name='L23'></a><a href='#L23'>23</a>
+<a name='L24'></a><a href='#L24'>24</a>
+<a name='L25'></a><a href='#L25'>25</a>
+<a name='L26'></a><a href='#L26'>26</a>
+<a name='L27'></a><a href='#L27'>27</a>
+<a name='L28'></a><a href='#L28'>28</a>
+<a name='L29'></a><a href='#L29'>29</a>
+<a name='L30'></a><a href='#L30'>30</a>
+<a name='L31'></a><a href='#L31'>31</a>
+<a name='L32'></a><a href='#L32'>32</a>
+<a name='L33'></a><a href='#L33'>33</a>
+<a name='L34'></a><a href='#L34'>34</a>
+<a name='L35'></a><a href='#L35'>35</a>
+<a name='L36'></a><a href='#L36'>36</a>
+<a name='L37'></a><a href='#L37'>37</a>
+<a name='L38'></a><a href='#L38'>38</a>
+<a name='L39'></a><a href='#L39'>39</a>
+<a name='L40'></a><a href='#L40'>40</a>
+<a name='L41'></a><a href='#L41'>41</a>
+<a name='L42'></a><a href='#L42'>42</a>
+<a name='L43'></a><a href='#L43'>43</a>
+<a name='L44'></a><a href='#L44'>44</a>
+<a name='L45'></a><a href='#L45'>45</a>
+<a name='L46'></a><a href='#L46'>46</a>
+<a name='L47'></a><a href='#L47'>47</a>
+<a name='L48'></a><a href='#L48'>48</a>
+<a name='L49'></a><a href='#L49'>49</a>
+<a name='L50'></a><a href='#L50'>50</a></td><td class="line-coverage quiet"><span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span></td><td class="text"><pre class="prettyprint lang-js">import { createTRPCRouter } from "../trpc.js";
+import { classRouter } from "./class.js";
+import { announcementRouter } from "./announcement.js";
+import { assignmentRouter } from "./assignment.js";
+import { userRouter } from "./user.js";
+import { createCallerFactory } from "../trpc.js";
+import type { inferRouterInputs, inferRouterOutputs } from "@trpc/server";
+import { sectionRouter } from "./section.js";
+import { attendanceRouter } from "./attendance.js";
+import { eventRouter } from "./event.js";
+import { authRouter } from "./auth.js";
+import { agendaRouter } from "./agenda.js";
+import { fileRouter } from "./file.js";
+import { folderRouter } from "./folder.js";
+import { notificationRouter } from "./notifications.js";
+import { conversationRouter } from "./conversation.js";
+import { messageRouter } from "./message.js";
+import { labChatRouter } from "./labChat.js";
+import { marketingRouter } from "./marketing.js";
+import { worksheetRouter } from "./worksheet.js";
+import { commentRouter } from "./comment.js";
+&nbsp;
+export const appRouter = createTRPCRouter({
+  class: classRouter,
+  announcement: announcementRouter,
+  assignment: assignmentRouter,
+  user: userRouter,
+  section: sectionRouter,
+  attendance: attendanceRouter,
+  event: eventRouter,
+  auth: authRouter,
+  agenda: agendaRouter,
+  file: fileRouter,
+  folder: folderRouter,
+  notification: notificationRouter,
+  conversation: conversationRouter,
+  message: messageRouter,
+  labChat: labChatRouter,
+  marketing: marketingRouter,
+  worksheet: worksheetRouter,
+  comment: commentRouter,
+});
+&nbsp;
+// Export type router type definition
+export type AppRouter = typeof appRouter;
+export type RouterInputs = inferRouterInputs&lt;AppRouter&gt;;
+export type RouterOutputs = inferRouterOutputs&lt;AppRouter&gt;;
+&nbsp;
+// Export caller
+export const createCaller = createCallerFactory(appRouter); </pre></td></tr></table></pre>
+                <div class='push'></div><!-- for sticky footer -->
+            </div><!-- /wrapper -->
+            <div class='footer quiet pad2 space-top1 center small'>
+                Code coverage generated by
+                <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
+                at 2025-11-22T10:42:40.796Z
+            </div>
+        <script src="../../../prettify.js"></script>
+        <script>
+            window.onload = function () {
+                prettyPrint();
+            };
+        </script>
+        <script src="../../../sorter.js"></script>
+        <script src="../../../block-navigation.js"></script>
+    </body>
+</html>