@studious-lms/server 1.4.1 → 1.4.3

package/dist/services/worksheet.d.ts

@@ -1,34 +1,34 @@
 import { type WorksheetQuestionType } from "@prisma/client";
 /** Get worksheet with questions and mark schemes. */
-export declare function getWorksheet(worksheetId: string): Promise<{
+export declare function getWorksheet(worksheetId: string, userId: string): Promise<{
     class: {
+        name: string;
         id: string;
         schoolId: string | null;
-        name: string;
         subject: string;
         color: string | null;
         section: string;
         syllabus: string | null;
     } | null;
     questions: {
-        options: import("@prisma/client/runtime/library.js").JsonValue | null;
         type: import(".prisma/client").$Enums.WorksheetQuestionType;
+        options: import("@prisma/client/runtime/library.js").JsonValue | null;
         id: string;
         createdAt: Date;
-        updatedAt: Date;
         order: number | null;
-        markScheme: import("@prisma/client/runtime/library.js").JsonValue | null;
+        points: number;
+        updatedAt: Date;
         worksheetId: string;
+        markScheme: import("@prisma/client/runtime/library.js").JsonValue | null;
         question: string;
         answer: string;
-        points: number;
     }[];
 } & {
+    name: string;
     id: string;
     createdAt: Date;
-    updatedAt: Date;
     classId: string;
-    name: string;
+    updatedAt: Date;
 }>;
 /** Check if worksheet exists. */
 export declare function worksheetExists(id: string): Promise<boolean>;
@@ -37,36 +37,36 @@ export declare function listWorksheets(classId: string): Promise<{
     questions: {
         id: string;
     }[];
+    name: string;
     id: string;
     createdAt: Date;
-    updatedAt: Date;
     classId: string;
-    name: string;
+    updatedAt: Date;
 }[]>;
-export declare function updateWorksheetRecord(worksheetId: string, data: {
+export declare function updateWorksheetRecord(worksheetId: string, userId: string, data: {
     name?: string;
 }): Promise<{
+    name: string;
     id: string;
     createdAt: Date;
-    updatedAt: Date;
     classId: string;
-    name: string;
+    updatedAt: Date;
 }>;
-export declare function deleteWorksheetRecord(worksheetId: string): Promise<{
+export declare function deleteWorksheetRecord(worksheetId: string, userId: string): Promise<{
+    name: string;
     id: string;
     createdAt: Date;
-    updatedAt: Date;
     classId: string;
-    name: string;
+    updatedAt: Date;
 }>;
 export declare function createWorksheetRecord(classId: string, name: string): Promise<{
+    name: string;
     id: string;
     createdAt: Date;
-    updatedAt: Date;
     classId: string;
-    name: string;
+    updatedAt: Date;
 }>;
-export declare function addQuestionToWorksheet(worksheetId: string, data: {
+export declare function addQuestionToWorksheet(worksheetId: string, userId: string, data: {
     question: string;
     answer: string;
     points?: number;
@@ -74,22 +74,22 @@ export declare function addQuestionToWorksheet(worksheetId: string, data: {
     markScheme?: object;
     type: WorksheetQuestionType;
 }): Promise<{
-    options: import("@prisma/client/runtime/library.js").JsonValue | null;
     type: import(".prisma/client").$Enums.WorksheetQuestionType;
+    options: import("@prisma/client/runtime/library.js").JsonValue | null;
     id: string;
     createdAt: Date;
-    updatedAt: Date;
     order: number | null;
-    markScheme: import("@prisma/client/runtime/library.js").JsonValue | null;
+    points: number;
+    updatedAt: Date;
     worksheetId: string;
+    markScheme: import("@prisma/client/runtime/library.js").JsonValue | null;
     question: string;
     answer: string;
-    points: number;
 }>;
-export declare function reorderWorksheetQuestions(worksheetId: string, movedId: string, position: "before" | "after", targetId: string): Promise<{
+export declare function reorderWorksheetQuestions(worksheetId: string, userId: string, movedId: string, position: "before" | "after", targetId: string): Promise<{
     id: string;
 }[]>;
-export declare function updateWorksheetQuestionRecord(worksheetId: string, questionId: string, data: {
+export declare function updateWorksheetQuestionRecord(worksheetId: string, questionId: string, userId: string, data: {
     question?: string;
     answer?: string;
     points?: number;
@@ -97,32 +97,32 @@ export declare function updateWorksheetQuestionRecord(worksheetId: string, quest
     markScheme?: object;
     type?: WorksheetQuestionType;
 }): Promise<{
-    options: import("@prisma/client/runtime/library.js").JsonValue | null;
     type: import(".prisma/client").$Enums.WorksheetQuestionType;
+    options: import("@prisma/client/runtime/library.js").JsonValue | null;
     id: string;
     createdAt: Date;
-    updatedAt: Date;
     order: number | null;
-    markScheme: import("@prisma/client/runtime/library.js").JsonValue | null;
+    points: number;
+    updatedAt: Date;
     worksheetId: string;
+    markScheme: import("@prisma/client/runtime/library.js").JsonValue | null;
     question: string;
     answer: string;
-    points: number;
 }>;
-export declare function deleteWorksheetQuestionRecord(worksheetId: string, questionId: string): Promise<{
-    options: import("@prisma/client/runtime/library.js").JsonValue | null;
+export declare function deleteWorksheetQuestionRecord(worksheetId: string, questionId: string, userId: string): Promise<{
     type: import(".prisma/client").$Enums.WorksheetQuestionType;
+    options: import("@prisma/client/runtime/library.js").JsonValue | null;
     id: string;
     createdAt: Date;
-    updatedAt: Date;
     order: number | null;
-    markScheme: import("@prisma/client/runtime/library.js").JsonValue | null;
+    points: number;
+    updatedAt: Date;
     worksheetId: string;
+    markScheme: import("@prisma/client/runtime/library.js").JsonValue | null;
     question: string;
     answer: string;
-    points: number;
 }>;
-export declare function getWorksheetSubmission(worksheetId: string, submissionId: string): Promise<{
+export declare function getWorksheetSubmission(worksheetId: string, submissionId: string, userId: string): Promise<{
     responses: ({
         comments: {
             id: string;
@@ -131,24 +131,24 @@ export declare function getWorksheetSubmission(worksheetId: string, submissionId
         status: import(".prisma/client").$Enums.GenerationStatus | null;
         id: string;
         createdAt: Date;
-        updatedAt: Date | null;
-        feedback: string | null;
         studentId: string;
-        points: number;
+        questionId: string;
         response: string;
         isCorrect: boolean;
         markschemeState: import("@prisma/client/runtime/library.js").JsonValue | null;
+        points: number;
+        feedback: string | null;
+        updatedAt: Date | null;
         studentWorksheetResponseId: string | null;
-        questionId: string;
     })[];
 } & {
     id: string;
-    createdAt: Date;
-    updatedAt: Date;
     submissionId: string | null;
+    createdAt: Date;
     studentId: string;
     submittedAt: Date | null;
     submitted: boolean;
+    updatedAt: Date;
     worksheetId: string;
 }>;
 export declare function answerWorksheetQuestion(worksheetResponseId: string, questionId: string, response: string, userId: string): Promise<{
@@ -156,55 +156,55 @@ export declare function answerWorksheetQuestion(worksheetResponseId: string, que
         status: import(".prisma/client").$Enums.GenerationStatus | null;
         id: string;
         createdAt: Date;
-        updatedAt: Date | null;
-        feedback: string | null;
         studentId: string;
-        points: number;
+        questionId: string;
         response: string;
         isCorrect: boolean;
         markschemeState: import("@prisma/client/runtime/library.js").JsonValue | null;
+        points: number;
+        feedback: string | null;
+        updatedAt: Date | null;
         studentWorksheetResponseId: string | null;
-        questionId: string;
     }[];
 } & {
     id: string;
-    createdAt: Date;
-    updatedAt: Date;
     submissionId: string | null;
+    createdAt: Date;
     studentId: string;
     submittedAt: Date | null;
     submitted: boolean;
+    updatedAt: Date;
     worksheetId: string;
 }>;
-export declare function cancelGrading(worksheetResponseId: string, progressId: string): Promise<{
+export declare function cancelGrading(worksheetResponseId: string, progressId: string, userId: string): Promise<{
     status: import(".prisma/client").$Enums.GenerationStatus | null;
     id: string;
     createdAt: Date;
-    updatedAt: Date | null;
-    feedback: string | null;
     studentId: string;
-    points: number;
+    questionId: string;
     response: string;
     isCorrect: boolean;
     markschemeState: import("@prisma/client/runtime/library.js").JsonValue | null;
+    points: number;
+    feedback: string | null;
+    updatedAt: Date | null;
     studentWorksheetResponseId: string | null;
-    questionId: string;
 }>;
-export declare function regradeQuestion(worksheetResponseId: string, progressId: string): Promise<{
+export declare function regradeQuestion(worksheetResponseId: string, progressId: string, userId: string): Promise<{
     status: import(".prisma/client").$Enums.GenerationStatus | null;
     id: string;
     createdAt: Date;
-    updatedAt: Date | null;
-    feedback: string | null;
     studentId: string;
-    points: number;
+    questionId: string;
     response: string;
     isCorrect: boolean;
     markschemeState: import("@prisma/client/runtime/library.js").JsonValue | null;
+    points: number;
+    feedback: string | null;
+    updatedAt: Date | null;
     studentWorksheetResponseId: string | null;
-    questionId: string;
 }>;
-export declare function gradeAnswer(questionId: string, studentWorksheetResponseId: string, data: {
+export declare function gradeAnswer(questionId: string, studentWorksheetResponseId: string, userId: string, data: {
     responseId?: string;
     response?: string;
     isCorrect: boolean;
@@ -215,23 +215,23 @@ export declare function gradeAnswer(questionId: string, studentWorksheetResponse
     status: import(".prisma/client").$Enums.GenerationStatus | null;
     id: string;
     createdAt: Date;
-    updatedAt: Date | null;
-    feedback: string | null;
     studentId: string;
-    points: number;
+    questionId: string;
     response: string;
     isCorrect: boolean;
     markschemeState: import("@prisma/client/runtime/library.js").JsonValue | null;
+    points: number;
+    feedback: string | null;
+    updatedAt: Date | null;
     studentWorksheetResponseId: string | null;
-    questionId: string;
 }>;
 export declare function addCommentToResponse(responseId: string, comment: string, authorId: string): Promise<{
     status: import(".prisma/client").$Enums.GenerationStatus | null;
     id: string;
+    announcementId: string | null;
     createdAt: Date;
-    content: string;
     modifiedAt: Date | null;
-    announcementId: string | null;
+    content: string;
     authorId: string;
     parentCommentId: string | null;
     studentQuestionProgressId: string | null;

package/dist/services/worksheet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worksheet.d.ts","sourceRoot":"/","sources":["services/worksheet.ts"],"names":[],"mappings":"AAKA,OAAO,EAAoB,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AA4B9E,qDAAqD;AACrD,wBAAsB,YAAY,CAAC,WAAW,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GASrD;AAED,iCAAiC;AACjC,wBAAsB,eAAe,CAAC,EAAE,EAAE,MAAM,oBAG/C;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;KAMnD;AAED,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;;;;;;GAGxB;AAED,wBAAsB,qBAAqB,CAAC,WAAW,EAAE,MAAM;;;;;;GAE9D;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;;;;;;GAExE;AAED,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,qBAAqB,CAAC;CAC7B;;;;;;;;;;;;GAaF;AAED,wBAAsB,yBAAyB,CAC7C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,QAAQ,GAAG,OAAO,EAC5B,QAAQ,EAAE,MAAM;;KAqDjB;AAED,wBAAsB,6BAA6B,CACjD,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE;IACJ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,qBAAqB,CAAC;CAC9B;;;;;;;;;;;;GAUF;AAED,wBAAsB,6BAA6B,CACjD,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM;;;;;;;;;;;;GAUnB;AAED,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAcrB;AAED,wBAAsB,uBAAuB,CAC3C,mBAAmB,EAAE,MAAM,EAC3B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;GAwDf;AAED,wBAAsB,aAAa,CACjC,mBAAmB,EAAE,MAAM,EAC3B,UAAU,EAAE,MAAM;;;;;;;;;;;;;GAGnB;AAED,wBAAsB,eAAe,CACnC,mBAAmB,EAAE,MAAM,EAC3B,UAAU,EAAE,MAAM;;;;;;;;;;;;;GAGnB;AAED,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,0BAA0B,EAAE,MAAM,EAClC,IAAI,EAAE;IACJ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;;;;;;;;;;;;;GAgDF;AAED,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM;;;;;;;;;;GAOjB"}
+{"version":3,"file":"worksheet.d.ts","sourceRoot":"/","sources":["services/worksheet.ts"],"names":[],"mappings":"AAKA,OAAO,EAAoB,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAwD9E,qDAAqD;AACrD,wBAAsB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAerE;AAED,iCAAiC;AACjC,wBAAsB,eAAe,CAAC,EAAE,EAAE,MAAM,oBAG/C;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;KAMnD;AAED,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;;;;;;GAUxB;AAED,wBAAsB,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;;;;GAS9E;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;;;;;;GAExE;AAED,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,qBAAqB,CAAC;CAC7B;;;;;;;;;;;;GAaF;AAED,wBAAsB,yBAAyB,CAC7C,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,QAAQ,GAAG,OAAO,EAC5B,QAAQ,EAAE,MAAM;;KAqDjB;AAED,wBAAsB,6BAA6B,CACjD,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IACJ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,qBAAqB,CAAC;CAC9B;;;;;;;;;;;;GAUF;AAED,wBAAsB,6BAA6B,CACjD,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM;;;;;;;;;;;;GAUf;AAED,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2Bf;AAED,wBAAsB,uBAAuB,CAC3C,mBAAmB,EAAE,MAAM,EAC3B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;GAmEf;AAED,wBAAsB,aAAa,CACjC,mBAAmB,EAAE,MAAM,EAC3B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM;;;;;;;;;;;;;GAcf;AAED,wBAAsB,eAAe,CACnC,mBAAmB,EAAE,MAAM,EAC3B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM;;;;;;;;;;;;;GAcf;AAED,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,0BAA0B,EAAE,MAAM,EAClC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IACJ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;;;;;;;;;;;;;GA0EF;AAED,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM;;;;;;;;;;GAkBjB"}

package/dist/services/worksheet.js

@@ -3,22 +3,45 @@
  * Integrates with gradeWorksheet pipeline for auto-grading.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cffbcf20-cef6-5fd4-979f-670d50592d0a")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="772e1458-6d16-5c53-ba42-60d34dff6ea1")}catch(e){}}();
 import { TRPCError } from "@trpc/server";
 import { GenerationStatus } from "@prisma/client";
 import { prisma } from "../lib/prisma.js";
 import { cancelGradePipeline, regradeWorksheetPipeline } from "../pipelines/gradeWorksheet.js";
-import { findWorksheetById, findWorksheetByIdMinimal, findWorksheetsByClassId, createWorksheet, updateWorksheet, deleteWorksheet, findQuestionsByWorksheetId, createWorksheetQuestion, updateWorksheetQuestion, deleteWorksheetQuestion, findSubmissionById, findOrCreateWorksheetResponse, findWorksheetResponseWithResponses, findWorksheetQuestionById, updateStudentQuestionProgress, createStudentQuestionProgress, findStudentQuestionProgress, updateStudentQuestionProgressForGrading, createStudentQuestionProgressForGrading, createComment, } from "../models/worksheet.js";
+import { findWorksheetByIdMinimal, findWorksheetByIdForClassMember, findWorksheetByIdForTeacher, findWorksheetsByClassId, createWorksheet, updateWorksheet, deleteWorksheet, findQuestionsByWorksheetId, createWorksheetQuestion, updateWorksheetQuestion, deleteWorksheetQuestion, findSubmissionByIdForWorksheetAccess, findOrCreateWorksheetResponse, findWorksheetResponseByIdForTeacher, findWorksheetResponseWithResponsesForStudent, findWorksheetQuestionByIdForTeacher, findWorksheetQuestionByIdInWorksheet, updateStudentQuestionProgress, createStudentQuestionProgress, findStudentQuestionProgress, updateStudentQuestionProgressForGrading, createStudentQuestionProgressForGrading, createComment, findStudentQuestionProgressByIdForTeacher, findStudentQuestionProgressByIdForTeacherAndResponse, } from "../models/worksheet.js";
+const sanitizeQuestionOptionsForStudent = (options) => {
+    if (!Array.isArray(options))
+        return options;
+    return options.map((option) => {
+        if (!option || typeof option !== "object")
+            return option;
+        const { isCorrect: _isCorrect, ...rest } = option;
+        return rest;
+    });
+};
+const sanitizeWorksheetForStudent = (worksheet) => ({
+    ...worksheet,
+    questions: worksheet.questions.map((question) => ({
+        ...question,
+        answer: "",
+        markScheme: null,
+        options: sanitizeQuestionOptionsForStudent(question.options),
+    })),
+});
 /** Get worksheet with questions and mark schemes. */
-export async function getWorksheet(worksheetId) {
-    const worksheet = await findWorksheetById(worksheetId);
-    if (!worksheet) {
+export async function getWorksheet(worksheetId, userId) {
+    const teacherWorksheet = await findWorksheetByIdForTeacher(worksheetId, userId);
+    if (teacherWorksheet) {
+        return teacherWorksheet;
+    }
+    const studentWorksheet = await findWorksheetByIdForClassMember(worksheetId, userId);
+    if (!studentWorksheet) {
         throw new TRPCError({
-            code: "NOT_FOUND",
-            message: "Worksheet not found",
+            code: "FORBIDDEN",
+            message: "You do not have access to this worksheet",
         });
     }
-    return worksheet;
+    return sanitizeWorksheetForStudent(studentWorksheet);
 }
 /** Check if worksheet exists. */
 export async function worksheetExists(id) {
@@ -32,21 +55,35 @@ export async function listWorksheets(classId) {
         questionCount: w.questions.length,
     }));
 }
-export async function updateWorksheetRecord(worksheetId, data) {
+export async function updateWorksheetRecord(worksheetId, userId, data) {
+    const worksheet = await findWorksheetByIdForTeacher(worksheetId, userId);
+    if (!worksheet) {
+        throw new TRPCError({
+            code: "FORBIDDEN",
+            message: "Only class teachers can update worksheets",
+        });
+    }
     return updateWorksheet(worksheetId, data);
 }
-export async function deleteWorksheetRecord(worksheetId) {
+export async function deleteWorksheetRecord(worksheetId, userId) {
+    const worksheet = await findWorksheetByIdForTeacher(worksheetId, userId);
+    if (!worksheet) {
+        throw new TRPCError({
+            code: "FORBIDDEN",
+            message: "Only class teachers can delete worksheets",
+        });
+    }
     return deleteWorksheet(worksheetId);
 }
 export async function createWorksheetRecord(classId, name) {
     return createWorksheet({ classId, name });
 }
-export async function addQuestionToWorksheet(worksheetId, data) {
-    const worksheet = await findWorksheetByIdMinimal(worksheetId);
+export async function addQuestionToWorksheet(worksheetId, userId, data) {
+    const worksheet = await findWorksheetByIdForTeacher(worksheetId, userId);
     if (!worksheet) {
         throw new TRPCError({
-            code: "NOT_FOUND",
-            message: "Worksheet not found",
+            code: "FORBIDDEN",
+            message: "Only class teachers can modify worksheet questions",
         });
     }
     return createWorksheetQuestion({
@@ -54,12 +91,12 @@ export async function addQuestionToWorksheet(worksheetId, data) {
         ...data,
     });
 }
-export async function reorderWorksheetQuestions(worksheetId, movedId, position, targetId) {
-    const worksheet = await findWorksheetByIdMinimal(worksheetId);
+export async function reorderWorksheetQuestions(worksheetId, userId, movedId, position, targetId) {
+    const worksheet = await findWorksheetByIdForTeacher(worksheetId, userId);
     if (!worksheet) {
         throw new TRPCError({
-            code: "NOT_FOUND",
-            message: "Worksheet not found",
+            code: "FORBIDDEN",
+            message: "Only class teachers can reorder worksheet questions",
         });
     }
     const questions = await findQuestionsByWorksheetId(worksheetId);
@@ -99,51 +136,64 @@ export async function reorderWorksheetQuestions(worksheetId, movedId, position,
     })));
     return next;
 }
-export async function updateWorksheetQuestionRecord(worksheetId, questionId, data) {
-    const worksheet = await findWorksheetByIdMinimal(worksheetId);
-    if (!worksheet) {
+export async function updateWorksheetQuestionRecord(worksheetId, questionId, userId, data) {
+    const question = await findWorksheetQuestionByIdForTeacher(questionId, userId);
+    if (!question || question.worksheetId !== worksheetId) {
         throw new TRPCError({
-            code: "NOT_FOUND",
-            message: "Worksheet not found",
+            code: "FORBIDDEN",
+            message: "Only class teachers can update worksheet questions",
         });
     }
     return updateWorksheetQuestion(questionId, data);
 }
-export async function deleteWorksheetQuestionRecord(worksheetId, questionId) {
-    const worksheet = await findWorksheetByIdMinimal(worksheetId);
-    if (!worksheet) {
+export async function deleteWorksheetQuestionRecord(worksheetId, questionId, userId) {
+    const question = await findWorksheetQuestionByIdForTeacher(questionId, userId);
+    if (!question || question.worksheetId !== worksheetId) {
         throw new TRPCError({
-            code: "NOT_FOUND",
-            message: "Worksheet not found",
+            code: "FORBIDDEN",
+            message: "Only class teachers can delete worksheet questions",
         });
     }
     return deleteWorksheetQuestion(questionId);
 }
-export async function getWorksheetSubmission(worksheetId, submissionId) {
-    const submission = await findSubmissionById(submissionId);
+export async function getWorksheetSubmission(worksheetId, submissionId, userId) {
+    const worksheet = await findWorksheetByIdForClassMember(worksheetId, userId);
+    if (!worksheet) {
+        throw new TRPCError({
+            code: "FORBIDDEN",
+            message: "You do not have access to this worksheet",
+        });
+    }
+    const submission = await findSubmissionByIdForWorksheetAccess(submissionId, worksheetId, worksheet.classId, userId);
     if (!submission) {
         throw new TRPCError({
-            code: "NOT_FOUND",
-            message: "Submission not found",
+            code: "FORBIDDEN",
+            message: "You do not have access to this worksheet submission",
         });
     }
     return findOrCreateWorksheetResponse(submissionId, worksheetId, submission.studentId);
 }
 export async function answerWorksheetQuestion(worksheetResponseId, questionId, response, userId) {
-    const worksheetResponse = await findWorksheetResponseWithResponses(worksheetResponseId, questionId);
+    const worksheetResponse = await findWorksheetResponseWithResponsesForStudent(worksheetResponseId, userId, questionId);
     if (!worksheetResponse) {
+        throw new TRPCError({
+            code: "FORBIDDEN",
+            message: "You can only answer your own worksheet responses",
+        });
+    }
+    const question = await findWorksheetQuestionByIdInWorksheet(questionId, worksheetResponse.worksheetId);
+    if (!question) {
         throw new TRPCError({
             code: "NOT_FOUND",
-            message: "Worksheet response not found",
+            message: "Worksheet question not found",
         });
     }
-    const question = await findWorksheetQuestionById(questionId);
-    const isMarkableByAlgo = question?.type === "MULTIPLE_CHOICE" || question?.type === "TRUE_FALSE";
-    const marksAwardedIfCorrect = question?.points || 0;
+    const isMarkableByAlgo = question.type === "MULTIPLE_CHOICE" || question.type === "TRUE_FALSE";
+    const marksAwardedIfCorrect = question.points || 0;
     const correctAnswer = isMarkableByAlgo
-        ? question?.type === "MULTIPLE_CHOICE"
-            ? question?.options?.find((o) => o.isCorrect)?.id
-            : question?.answer?.toString()
+        ? question.type === "MULTIPLE_CHOICE"
+            ? question.options?.find((o) => o.isCorrect)?.id
+            : question.answer?.toString()
         : null;
     const existingResponse = worksheetResponse.responses[0];
     if (existingResponse) {
@@ -178,14 +228,51 @@ export async function answerWorksheetQuestion(worksheetResponseId, questionId, r
     });
     return updated;
 }
-export async function cancelGrading(worksheetResponseId, progressId) {
+export async function cancelGrading(worksheetResponseId, progressId, userId) {
+    const progress = await findStudentQuestionProgressByIdForTeacherAndResponse(progressId, worksheetResponseId, userId);
+    if (!progress) {
+        throw new TRPCError({
+            code: "FORBIDDEN",
+            message: "Only class teachers can cancel worksheet grading",
+        });
+    }
     return cancelGradePipeline(worksheetResponseId, progressId);
 }
-export async function regradeQuestion(worksheetResponseId, progressId) {
+export async function regradeQuestion(worksheetResponseId, progressId, userId) {
+    const progress = await findStudentQuestionProgressByIdForTeacherAndResponse(progressId, worksheetResponseId, userId);
+    if (!progress) {
+        throw new TRPCError({
+            code: "FORBIDDEN",
+            message: "Only class teachers can regrade worksheet answers",
+        });
+    }
     return regradeWorksheetPipeline(worksheetResponseId, progressId);
 }
-export async function gradeAnswer(questionId, studentWorksheetResponseId, data) {
+export async function gradeAnswer(questionId, studentWorksheetResponseId, userId, data) {
+    const worksheetResponse = await findWorksheetResponseByIdForTeacher(studentWorksheetResponseId, userId);
+    if (!worksheetResponse) {
+        throw new TRPCError({
+            code: "FORBIDDEN",
+            message: "Only class teachers can grade worksheet answers",
+        });
+    }
+    const question = await findWorksheetQuestionByIdInWorksheet(questionId, worksheetResponse.worksheetId);
+    if (!question) {
+        throw new TRPCError({
+            code: "NOT_FOUND",
+            message: "Worksheet question not found",
+        });
+    }
     if (data.responseId) {
+        const existingProgress = await findStudentQuestionProgressByIdForTeacher(data.responseId, userId);
+        if (!existingProgress ||
+            existingProgress.studentWorksheetResponseId !== studentWorksheetResponseId ||
+            existingProgress.questionId !== questionId) {
+            throw new TRPCError({
+                code: "FORBIDDEN",
+                message: "Only class teachers can grade worksheet answers",
+            });
+        }
         return updateStudentQuestionProgressForGrading(data.responseId, {
             isCorrect: data.isCorrect,
             feedback: data.feedback,
@@ -193,16 +280,6 @@ export async function gradeAnswer(questionId, studentWorksheetResponseId, data)
             points: data.points,
         });
     }
-    const worksheetResponse = await prisma.studentWorksheetResponse.findUnique({
-        where: { id: studentWorksheetResponseId },
-        select: { studentId: true },
-    });
-    if (!worksheetResponse) {
-        throw new TRPCError({
-            code: "NOT_FOUND",
-            message: "Student worksheet response not found",
-        });
-    }
     const existing = await findStudentQuestionProgress(worksheetResponse.studentId, questionId, studentWorksheetResponseId);
     if (existing) {
         return updateStudentQuestionProgressForGrading(existing.id, {
@@ -225,6 +302,13 @@ export async function gradeAnswer(questionId, studentWorksheetResponseId, data)
     });
 }
 export async function addCommentToResponse(responseId, comment, authorId) {
+    const progress = await findStudentQuestionProgressByIdForTeacher(responseId, authorId);
+    if (!progress) {
+        throw new TRPCError({
+            code: "FORBIDDEN",
+            message: "Only class teachers can comment on worksheet responses",
+        });
+    }
     return createComment({
         studentQuestionProgressId: responseId,
         content: comment,
@@ -232,4 +316,4 @@ export async function addCommentToResponse(responseId, comment, authorId) {
     });
 }
 //# sourceMappingURL=worksheet.js.map
-//# debugId=cffbcf20-cef6-5fd4-979f-670d50592d0a
+//# debugId=772e1458-6d16-5c53-ba42-60d34dff6ea1