@studious-lms/server 1.7.0 → 1.9.0

package/dist/services/event.d.ts

@@ -7,7 +7,6 @@ export declare function getEvent(userId: string, id: string): Promise<{
             email: string;
             password: string;
             verified: boolean;
-            role: import(".prisma/client").$Enums.UserRole;
             schoolId: string | null;
         } | null;
         class: ({
@@ -21,6 +20,7 @@ export declare function getEvent(userId: string, id: string): Promise<{
             } & {
                 name: string;
                 id: string;
+                description: string | null;
                 logoId: string | null;
                 subdomain: string | null;
                 createdAt: Date;
@@ -37,6 +37,7 @@ export declare function getEvent(userId: string, id: string): Promise<{
             color: string | null;
             section: string;
             syllabus: string | null;
+            departmentId: string | null;
         }) | null;
         assignmentsAttached: {
             type: import(".prisma/client").$Enums.AssignmentType;
@@ -142,8 +143,8 @@ export declare function attachAssignment(userId: string, eventId: string, assign
         type: import(".prisma/client").$Enums.AssignmentType;
         id: string;
         createdAt: Date | null;
-        modifiedAt: Date | null;
         classId: string;
+        modifiedAt: Date | null;
         title: string;
         instructions: string;
         dueDate: Date;
@@ -184,8 +185,8 @@ export declare function detachAssignment(userId: string, eventId: string, assign
         type: import(".prisma/client").$Enums.AssignmentType;
         id: string;
         createdAt: Date | null;
-        modifiedAt: Date | null;
         classId: string;
+        modifiedAt: Date | null;
         title: string;
         instructions: string;
         dueDate: Date;

package/dist/services/event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event.d.ts","sourceRoot":"/","sources":["services/event.ts"],"names":[],"mappings":"AAmBA,6DAA6D;AAC7D,wBAAsB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAexD;AAED,wCAAwC;AACxC,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IACL,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;;;;;;;;;;;;;;;;GAwBF;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;IACJ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;;;;;;;;;;;;GA2BF;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM;;GAiBjE;AAuBD,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CrB;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkBrB;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;GAkBhB"}
+{"version":3,"file":"event.d.ts","sourceRoot":"/","sources":["services/event.ts"],"names":[],"mappings":"AAmBA,6DAA6D;AAC7D,wBAAsB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAexD;AAED,wCAAwC;AACxC,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IACL,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;;;;;;;;;;;;;;;;GAwBF;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;IACJ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;;;;;;;;;;;;GA2BF;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM;;GAiBjE;AAuBD,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CrB;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkBrB;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;GAkBhB"}

package/dist/services/file.d.ts

@@ -1,4 +1,21 @@
-/** Generate a signed URL for file download. Validates user has access. */
+/**
+ * Generate a signed URL for file download.
+ *
+ * Access resolution, in order — first match wins:
+ *   1. Owner of the file.
+ *   2. Member of the conversation the file is attached to (chat upload).
+ *   3. Contextual access via the file's class context: assignment / announcement
+ *      / submission / annotations attached to a class the user teaches, learns
+ *      in, or is a school admin for.
+ *   4. The central permissions resolver, which covers folder-scoped files —
+ *      explicit Permission grants (USER / TAG / CLASS / DEPARTMENT / SCHOOL
+ *      principals) plus scope defaults (school members read SCHOOL_STORAGE,
+ *      class members read class folders, owners read personal folders).
+ *
+ * The resolver is invoked unconditionally as the last step, so files shared
+ * via the new Permission system reach this code path even when they have no
+ * matching domain context.
+ */
 export declare function getFileSignedUrl(userId: string, fileId: string): Promise<{
     url: string;
 }>;
@@ -13,6 +30,7 @@ export declare function moveFile(fileId: string, targetFolderId: string): Promis
     name: string;
     id: string;
     userId: string | null;
+    folderId: string | null;
     size: number | null;
     uploadedAt: Date | null;
     uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -29,7 +47,6 @@ export declare function moveFile(fileId: string, targetFolderId: string): Promis
     submissionId: string | null;
     annotationId: string | null;
     classDraftId: string | null;
-    folderId: string | null;
     conversationId: string | null;
     messageId: string | null;
     announcementId: string | null;
@@ -46,6 +63,7 @@ export declare function renameFile(fileId: string, newName: string): Promise<{
     name: string;
     id: string;
     userId: string | null;
+    folderId: string | null;
     size: number | null;
     uploadedAt: Date | null;
     uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -62,7 +80,6 @@ export declare function renameFile(fileId: string, newName: string): Promise<{
     submissionId: string | null;
     annotationId: string | null;
     classDraftId: string | null;
-    folderId: string | null;
     conversationId: string | null;
     messageId: string | null;
     announcementId: string | null;
@@ -71,4 +88,89 @@ export declare function renameFile(fileId: string, newName: string): Promise<{
 export declare function deleteFileRecord(fileId: string, classId: string): Promise<{
     success: boolean;
 }>;
+/**
+ * Scope-aware move: works for class, school, and personal storage. Source
+ * and target must live in the same scope (no cross-scope moves).
+ */
+export declare function moveFileScoped(userId: string, input: {
+    fileId: string;
+    targetFolderId: string;
+}): Promise<{
+    user: {
+        id: string;
+        username: string;
+    } | null;
+} & {
+    path: string;
+    type: string;
+    name: string;
+    id: string;
+    userId: string | null;
+    folderId: string | null;
+    size: number | null;
+    uploadedAt: Date | null;
+    uploadStatus: import(".prisma/client").$Enums.UploadStatus;
+    uploadUrl: string | null;
+    uploadExpiresAt: Date | null;
+    uploadSessionId: string | null;
+    uploadProgress: number | null;
+    uploadError: string | null;
+    uploadRetryCount: number;
+    isOrphaned: boolean;
+    cleanupAt: Date | null;
+    thumbnailId: string | null;
+    assignmentId: string | null;
+    submissionId: string | null;
+    annotationId: string | null;
+    classDraftId: string | null;
+    conversationId: string | null;
+    messageId: string | null;
+    announcementId: string | null;
+    schoolDevelopementProgramId: string | null;
+}>;
+/** Scope-aware rename. */
+export declare function renameFileScoped(userId: string, input: {
+    fileId: string;
+    newName: string;
+}): Promise<{
+    user: {
+        id: string;
+        username: string;
+    } | null;
+} & {
+    path: string;
+    type: string;
+    name: string;
+    id: string;
+    userId: string | null;
+    folderId: string | null;
+    size: number | null;
+    uploadedAt: Date | null;
+    uploadStatus: import(".prisma/client").$Enums.UploadStatus;
+    uploadUrl: string | null;
+    uploadExpiresAt: Date | null;
+    uploadSessionId: string | null;
+    uploadProgress: number | null;
+    uploadError: string | null;
+    uploadRetryCount: number;
+    isOrphaned: boolean;
+    cleanupAt: Date | null;
+    thumbnailId: string | null;
+    assignmentId: string | null;
+    submissionId: string | null;
+    annotationId: string | null;
+    classDraftId: string | null;
+    conversationId: string | null;
+    messageId: string | null;
+    announcementId: string | null;
+    schoolDevelopementProgramId: string | null;
+}>;
+/**
+ * Generic delete that works across class / school / personal storage by
+ * deriving permissions from the parent folder's CloudScope (or owning user
+ * for unfiled files).
+ */
+export declare function deleteFileGeneric(userId: string, fileId: string): Promise<{
+    success: boolean;
+}>;
 //# sourceMappingURL=file.d.ts.map

package/dist/services/file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file.d.ts","sourceRoot":"/","sources":["services/file.ts"],"names":[],"mappings":"AA2BA,0EAA0E;AAC1E,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;GAkFpE;AAED,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmBvB;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkBhB;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;;GA6BrE"}
+{"version":3,"file":"file.d.ts","sourceRoot":"/","sources":["services/file.ts"],"names":[],"mappings":"AA+CA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;GAkFpE;AAED,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmBvB;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkBhB;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;;GA6BrE;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsBlD;AAED,0BAA0B;AAC1B,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsB3C;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;GA4BrE"}

package/dist/services/file.js

@@ -1,19 +1,55 @@
 /**
- * File service – signed URLs, move, rename, delete. Handles permission checks
- * for assignment, submission, announcement, folder, and user-owned files.
+ * File service – signed URLs, move, rename, delete.
+ *
+ * Two access concepts coexist here, and they should not be conflated:
+ *
+ *   1. **Contextual access** — assignment, submission, announcement, and chat
+ *      attachments. A teacher viewing a student's submission has access by
+ *      virtue of teaching the class, not because anyone explicitly "shared"
+ *      the file with them. These checks live inline in `getFileSignedUrl`
+ *      below and predate the explicit-share system.
+ *
+ *   2. **Explicit-share access** — folder-scoped files in cloud storage.
+ *      Permission flows through the central resolver in `permissions.ts`,
+ *      which consults explicit `Permission` rows in addition to the
+ *      scope-derived defaults. The cloud-storage helpers (`*Scoped` /
+ *      `*Generic`) below all use this path.
+ *
+ * If you're tempted to refactor the contextual checks into the resolver,
+ * don't — they intentionally key off the file's domain context, not its
+ * filesystem location.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4ce26498-ba77-5a67-910b-428e64d7047b")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f5c84cd2-4bba-5d8c-80c8-a64d756df4c6")}catch(e){}}();
 import { TRPCError } from "@trpc/server";
 import { getSignedUrl, deleteFile } from "../lib/googleCloudStorage.js";
 import { logger } from "../utils/logger.js";
 import { findFileById, findFileWithFolder, findFileWithFolderAndThumbnail, findFolderById, updateFileFolder, updateFileName, deleteFileById, } from "../models/file.js";
 import { findConversationMembership } from "../models/message.js";
+import { resolveFolderScope } from "../models/cloudStorage.js";
+import { requireFolderAccess } from "./folder.js";
+import { requireFileAccess } from "./permissions.js";
 function isSchoolAdminForClass(classData, userId) {
-    return Boolean(classData?.school?.memberships?.some((membership) => membership.userId === userId) ||
-        classData?.school?.users?.some((admin) => admin.id === userId));
+    return Boolean(classData?.school?.memberships?.some((membership) => membership.userId === userId));
 }
-/** Generate a signed URL for file download. Validates user has access. */
+/**
+ * Generate a signed URL for file download.
+ *
+ * Access resolution, in order — first match wins:
+ *   1. Owner of the file.
+ *   2. Member of the conversation the file is attached to (chat upload).
+ *   3. Contextual access via the file's class context: assignment / announcement
+ *      / submission / annotations attached to a class the user teaches, learns
+ *      in, or is a school admin for.
+ *   4. The central permissions resolver, which covers folder-scoped files —
+ *      explicit Permission grants (USER / TAG / CLASS / DEPARTMENT / SCHOOL
+ *      principals) plus scope defaults (school members read SCHOOL_STORAGE,
+ *      class members read class folders, owners read personal folders).
+ *
+ * The resolver is invoked unconditionally as the last step, so files shared
+ * via the new Permission system reach this code path even when they have no
+ * matching domain context.
+ */
 export async function getFileSignedUrl(userId, fileId) {
     const file = await findFileById(fileId);
     if (!file) {
@@ -23,46 +59,53 @@ export async function getFileSignedUrl(userId, fileId) {
         });
     }
     let hasAccess = false;
-    if (file.assignment?.class) {
-        const isTeacher = file.assignment.class.teachers.some((t) => t.id === userId);
-        const isStudent = file.assignment.class.students.some((s) => s.id === userId);
-        const isSchoolAdmin = isSchoolAdminForClass(file.assignment.class, userId);
-        logger.info(`Assignment file access check - userId: ${userId}, isTeacher: ${isTeacher}, isStudent: ${isStudent}, isSchoolAdmin: ${isSchoolAdmin}`);
-        hasAccess = isTeacher || isStudent || isSchoolAdmin;
-    }
-    if (file.announcement?.class) {
-        const ann = file.announcement;
-        const isTeacher = ann.class.teachers.some((t) => t.id === userId);
-        const isStudent = ann.class.students.some((s) => s.id === userId);
-        const isSchoolAdmin = isSchoolAdminForClass(ann.class, userId);
-        hasAccess = hasAccess || isTeacher || isStudent || isSchoolAdmin;
-    }
-    if (file.submission?.assignment?.classId) {
+    if (file.userId === userId) {
+        hasAccess = true;
+    }
+    if (!hasAccess && file.conversationId) {
+        const membership = await findConversationMembership(file.conversationId, userId);
+        hasAccess = Boolean(membership);
+    }
+    if (!hasAccess && file.assignment?.class) {
+        const cls = file.assignment.class;
         hasAccess =
-            hasAccess ||
-                file.submission.studentId === userId ||
-                file.submission.assignment.class.teachers.some((t) => t.id === userId) ||
-                isSchoolAdminForClass(file.submission.assignment.class, userId);
+            cls.teachers.some((t) => t.id === userId) ||
+                cls.students.some((s) => s.id === userId) ||
+                isSchoolAdminForClass(cls, userId);
     }
-    if (file.annotations?.assignment?.classId) {
+    if (!hasAccess && file.announcement?.class) {
+        const cls = file.announcement.class;
         hasAccess =
-            hasAccess ||
-                file.annotations.studentId === userId ||
-                file.annotations.assignment.class.teachers.some((t) => t.id === userId) ||
-                isSchoolAdminForClass(file.annotations.assignment.class, userId);
+            cls.teachers.some((t) => t.id === userId) ||
+                cls.students.some((s) => s.id === userId) ||
+                isSchoolAdminForClass(cls, userId);
     }
-    if (file.userId === userId) {
-        hasAccess = true;
+    if (!hasAccess && file.submission?.assignment?.classId) {
+        const cls = file.submission.assignment.class;
+        hasAccess =
+            file.submission.studentId === userId ||
+                cls.teachers.some((t) => t.id === userId) ||
+                isSchoolAdminForClass(cls, userId);
     }
-    if (file.conversationId) {
-        const membership = await findConversationMembership(file.conversationId, userId);
-        hasAccess = hasAccess || Boolean(membership);
+    if (!hasAccess && file.annotations?.assignment?.classId) {
+        const cls = file.annotations.assignment.class;
+        hasAccess =
+            file.annotations.studentId === userId ||
+                cls.teachers.some((t) => t.id === userId) ||
+                isSchoolAdminForClass(cls, userId);
     }
-    if (file.folder?.class) {
-        const isTeacher = file.folder.class.teachers.some((t) => t.id === userId);
-        const isStudent = file.folder.class.students.some((s) => s.id === userId);
-        const isSchoolAdmin = isSchoolAdminForClass(file.folder.class, userId);
-        hasAccess = hasAccess || isTeacher || isStudent || isSchoolAdmin;
+    // Final fallback: the explicit-share + scope-default resolver. Covers
+    // folder-scoped files shared via Permission grants (incl. SCHOOL/CLASS/TAG
+    // principals) and any institution member reading SCHOOL_STORAGE files.
+    // Safe to call for unfiled files — the resolver returns owner-only there.
+    if (!hasAccess) {
+        try {
+            await requireFileAccess(userId, fileId, "READ");
+            hasAccess = true;
+        }
+        catch {
+            // resolver denied — fall through to FORBIDDEN below.
+        }
     }
     if (!hasAccess) {
         throw new TRPCError({
@@ -143,5 +186,88 @@ export async function deleteFileRecord(fileId, classId) {
     await deleteFileById(fileId);
     return { success: true };
 }
+/**
+ * Scope-aware move: works for class, school, and personal storage. Source
+ * and target must live in the same scope (no cross-scope moves).
+ */
+export async function moveFileScoped(userId, input) {
+    const file = await findFileWithFolder(input.fileId);
+    if (!file?.folderId) {
+        throw new TRPCError({ code: "NOT_FOUND", message: "File not found" });
+    }
+    const [sourceScope, targetScope] = await Promise.all([
+        resolveFolderScope(file.folderId),
+        resolveFolderScope(input.targetFolderId),
+    ]);
+    if (!sourceScope || !targetScope) {
+        throw new TRPCError({ code: "NOT_FOUND", message: "Folder not found" });
+    }
+    if (JSON.stringify(sourceScope) !== JSON.stringify(targetScope)) {
+        throw new TRPCError({
+            code: "BAD_REQUEST",
+            message: "Cannot move files between scopes",
+        });
+    }
+    await requireFolderAccess(userId, file.folderId, "WRITE");
+    await requireFolderAccess(userId, input.targetFolderId, "WRITE");
+    return updateFileFolder(input.fileId, input.targetFolderId);
+}
+/** Scope-aware rename. */
+export async function renameFileScoped(userId, input) {
+    const trimmed = input.newName.trim();
+    if (!trimmed) {
+        throw new TRPCError({
+            code: "BAD_REQUEST",
+            message: "File name cannot be empty",
+        });
+    }
+    const file = await findFileWithFolder(input.fileId);
+    if (!file) {
+        throw new TRPCError({ code: "NOT_FOUND", message: "File not found" });
+    }
+    if (file.folderId) {
+        await requireFolderAccess(userId, file.folderId, "WRITE");
+    }
+    else if (file.userId !== userId) {
+        throw new TRPCError({
+            code: "FORBIDDEN",
+            message: "You don't own this file",
+        });
+    }
+    return updateFileName(input.fileId, trimmed);
+}
+/**
+ * Generic delete that works across class / school / personal storage by
+ * deriving permissions from the parent folder's CloudScope (or owning user
+ * for unfiled files).
+ */
+export async function deleteFileGeneric(userId, fileId) {
+    const file = await findFileWithFolderAndThumbnail(fileId);
+    if (!file) {
+        throw new TRPCError({ code: "NOT_FOUND", message: "File not found" });
+    }
+    if (file.folderId) {
+        await requireFolderAccess(userId, file.folderId, "WRITE");
+    }
+    else if (file.userId !== userId) {
+        throw new TRPCError({
+            code: "FORBIDDEN",
+            message: "You don't own this file",
+        });
+    }
+    try {
+        if (file.uploadStatus === "COMPLETED") {
+            await deleteFile(file.path);
+            if (file.thumbnail) {
+                await deleteFile(file.thumbnail.path);
+            }
+        }
+    }
+    catch (error) {
+        logger.warn(`Failed to delete file ${file.path}:`, error);
+    }
+    await deleteFileById(fileId);
+    return { success: true };
+}
 //# sourceMappingURL=file.js.map
-//# debugId=4ce26498-ba77-5a67-910b-428e64d7047b
+//# debugId=f5c84cd2-4bba-5d8c-80c8-a64d756df4c6

package/dist/services/file.js.map

@@ -1 +1 @@
-{"version":3,"file":"file.js","sources":["services/file.ts"],"sourceRoot":"/","sourcesContent":["/**\n * File service – signed URLs, move, rename, delete. Handles permission checks\n * for assignment, submission, announcement, folder, and user-owned files.\n */\nimport { TRPCError } from \"@trpc/server\";\nimport { getSignedUrl, deleteFile } from \"../lib/googleCloudStorage.js\";\nimport { logger } from \"../utils/logger.js\";\nimport {\n  findFileById,\n  findFileWithFolder,\n  findFileWithFolderAndThumbnail,\n  findFolderById,\n  updateFileFolder,\n  updateFileName,\n  deleteFileById,\n} from \"../models/file.js\";\nimport { findConversationMembership } from \"../models/message.js\";\n\nfunction isSchoolAdminForClass(classData: any, userId: string) {\n  return Boolean(\n    classData?.school?.memberships?.some(\n      (membership: { userId: string }) => membership.userId === userId\n    ) ||\n      classData?.school?.users?.some((admin: { id: string }) => admin.id === userId)\n  );\n}\n\n/** Generate a signed URL for file download. Validates user has access. */\nexport async function getFileSignedUrl(userId: string, fileId: string) {\n  const file = await findFileById(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File does not exist\",\n    });\n  }\n\n  let hasAccess = false;\n\n  if (file.assignment?.class) {\n    const isTeacher = file.assignment.class.teachers.some(\n      (t) => t.id === userId\n    );\n    const isStudent = file.assignment.class.students.some(\n      (s) => s.id === userId\n    );\n    const isSchoolAdmin = isSchoolAdminForClass(file.assignment.class, userId);\n    logger.info(\n      `Assignment file access check - userId: ${userId}, isTeacher: ${isTeacher}, isStudent: ${isStudent}, isSchoolAdmin: ${isSchoolAdmin}`\n    );\n    hasAccess = isTeacher || isStudent || isSchoolAdmin;\n  }\n\n  if ((file as any).announcement?.class) {\n    const ann = (file as any).announcement;\n    const isTeacher = ann.class.teachers.some((t: any) => t.id === userId);\n    const isStudent = ann.class.students.some((s: any) => s.id === userId);\n    const isSchoolAdmin = isSchoolAdminForClass(ann.class, userId);\n    hasAccess = hasAccess || isTeacher || isStudent || isSchoolAdmin;\n  }\n\n  if (file.submission?.assignment?.classId) {\n    hasAccess =\n      hasAccess ||\n      file.submission.studentId === userId ||\n      file.submission.assignment.class.teachers.some((t) => t.id === userId) ||\n      isSchoolAdminForClass(file.submission.assignment.class, userId);\n  }\n\n  if (file.annotations?.assignment?.classId) {\n    hasAccess =\n      hasAccess ||\n      file.annotations.studentId === userId ||\n      file.annotations.assignment.class.teachers.some((t) => t.id === userId) ||\n      isSchoolAdminForClass(file.annotations.assignment.class, userId);\n  }\n\n  if (file.userId === userId) {\n    hasAccess = true;\n  }\n\n  if (file.conversationId) {\n    const membership = await findConversationMembership(file.conversationId, userId);\n    hasAccess = hasAccess || Boolean(membership);\n  }\n\n  if (file.folder?.class) {\n    const isTeacher = file.folder.class.teachers.some((t) => t.id === userId);\n    const isStudent = file.folder.class.students.some((s) => s.id === userId);\n    const isSchoolAdmin = isSchoolAdminForClass(file.folder.class, userId);\n    hasAccess = hasAccess || isTeacher || isStudent || isSchoolAdmin;\n  }\n\n  if (!hasAccess) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"You do not have access to this file\",\n    });\n  }\n\n  try {\n    const signedUrl = await getSignedUrl(file.path);\n    return { url: signedUrl };\n  } catch (error) {\n    logger.error(\"Error generating signed URL:\", error as Record<string, unknown>);\n    throw new TRPCError({\n      code: \"INTERNAL_SERVER_ERROR\",\n      message: \"Failed to generate download URL\",\n    });\n  }\n}\n\nexport async function moveFile(\n  fileId: string,\n  targetFolderId: string\n) {\n  const file = await findFileWithFolder(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File not found\",\n    });\n  }\n\n  const targetFolder = await findFolderById(targetFolderId);\n  if (!targetFolder) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"Target folder not found\",\n    });\n  }\n\n  return updateFileFolder(fileId, targetFolderId);\n}\n\nexport async function renameFile(\n  fileId: string,\n  newName: string\n) {\n  const file = await findFileWithFolder(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File not found\",\n    });\n  }\n\n  if (!newName.trim()) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"File name cannot be empty\",\n    });\n  }\n\n  return updateFileName(fileId, newName.trim());\n}\n\nexport async function deleteFileRecord(fileId: string, classId: string) {\n  const file = await findFileWithFolderAndThumbnail(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File not found\",\n    });\n  }\n\n  if (file.folder?.classId !== classId) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"File does not belong to this class\",\n    });\n  }\n\n  try {\n    if (file.uploadStatus === \"COMPLETED\") {\n      await deleteFile(file.path);\n      if (file.thumbnail) {\n        await deleteFile(file.thumbnail.path);\n      }\n    }\n  } catch (error) {\n    logger.warn(`Failed to delete file ${file.path}:`, error as Record<string, unknown>);\n  }\n\n  await deleteFileById(fileId);\n  return { success: true };\n}\n"],"names":[],"mappings":"AAAA;;;GAGG;;;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,8BAA8B,EAC9B,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAElE,SAAS,qBAAqB,CAAC,SAAc,EAAE,MAAc;IAC3D,OAAO,OAAO,CACZ,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAClC,CAAC,UAA8B,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,CACjE;QACC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,KAAqB,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,CACjF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAc;IACnE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,qBAAqB;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CACnD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CACvB,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CACnD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CACvB,CAAC;QACF,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CACT,0CAA0C,MAAM,gBAAgB,SAAS,gBAAgB,SAAS,oBAAoB,aAAa,EAAE,CACtI,CAAC;QACF,SAAS,GAAG,SAAS,IAAI,SAAS,IAAI,aAAa,CAAC;IACtD,CAAC;IAED,IAAK,IAAY,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC;QACtC,MAAM,GAAG,GAAI,IAAY,CAAC,YAAY,CAAC;QACvC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,qBAAqB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/D,SAAS,GAAG,SAAS,IAAI,SAAS,IAAI,SAAS,IAAI,aAAa,CAAC;IACnE,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACzC,SAAS;YACP,SAAS;gBACT,IAAI,CAAC,UAAU,CAAC,SAAS,KAAK,MAAM;gBACpC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACtE,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QAC1C,SAAS;YACP,SAAS;gBACT,IAAI,CAAC,WAAW,CAAC,SAAS,KAAK,MAAM;gBACrC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACvE,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACjF,SAAS,GAAG,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QAC1E,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvE,SAAS,GAAG,SAAS,IAAI,SAAS,IAAI,SAAS,IAAI,aAAa,CAAC;IACnE,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,qCAAqC;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAgC,CAAC,CAAC;QAC/E,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAc,EACd,cAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,OAAe;IAEf,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,OAAe;IACpE,MAAM,IAAI,GAAG,MAAM,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YACtC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,IAAI,GAAG,EAAE,KAAgC,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC","debug_id":"4ce26498-ba77-5a67-910b-428e64d7047b"}
+{"version":3,"file":"file.js","sources":["services/file.ts"],"sourceRoot":"/","sourcesContent":["/**\n * File service – signed URLs, move, rename, delete.\n *\n * Two access concepts coexist here, and they should not be conflated:\n *\n *   1. **Contextual access** — assignment, submission, announcement, and chat\n *      attachments. A teacher viewing a student's submission has access by\n *      virtue of teaching the class, not because anyone explicitly \"shared\"\n *      the file with them. These checks live inline in `getFileSignedUrl`\n *      below and predate the explicit-share system.\n *\n *   2. **Explicit-share access** — folder-scoped files in cloud storage.\n *      Permission flows through the central resolver in `permissions.ts`,\n *      which consults explicit `Permission` rows in addition to the\n *      scope-derived defaults. The cloud-storage helpers (`*Scoped` /\n *      `*Generic`) below all use this path.\n *\n * If you're tempted to refactor the contextual checks into the resolver,\n * don't — they intentionally key off the file's domain context, not its\n * filesystem location.\n */\nimport { TRPCError } from \"@trpc/server\";\nimport { getSignedUrl, deleteFile } from \"../lib/googleCloudStorage.js\";\nimport { logger } from \"../utils/logger.js\";\nimport {\n  findFileById,\n  findFileWithFolder,\n  findFileWithFolderAndThumbnail,\n  findFolderById,\n  updateFileFolder,\n  updateFileName,\n  deleteFileById,\n} from \"../models/file.js\";\nimport { findConversationMembership } from \"../models/message.js\";\nimport { prisma } from \"../lib/prisma.js\";\nimport { resolveFolderScope } from \"../models/cloudStorage.js\";\nimport { requireFolderAccess } from \"./folder.js\";\nimport { requireFileAccess } from \"./permissions.js\";\n\nfunction isSchoolAdminForClass(classData: any, userId: string) {\n  return Boolean(\n    classData?.school?.memberships?.some(\n      (membership: { userId: string }) => membership.userId === userId\n    )\n  );\n}\n\n/**\n * Generate a signed URL for file download.\n *\n * Access resolution, in order — first match wins:\n *   1. Owner of the file.\n *   2. Member of the conversation the file is attached to (chat upload).\n *   3. Contextual access via the file's class context: assignment / announcement\n *      / submission / annotations attached to a class the user teaches, learns\n *      in, or is a school admin for.\n *   4. The central permissions resolver, which covers folder-scoped files —\n *      explicit Permission grants (USER / TAG / CLASS / DEPARTMENT / SCHOOL\n *      principals) plus scope defaults (school members read SCHOOL_STORAGE,\n *      class members read class folders, owners read personal folders).\n *\n * The resolver is invoked unconditionally as the last step, so files shared\n * via the new Permission system reach this code path even when they have no\n * matching domain context.\n */\nexport async function getFileSignedUrl(userId: string, fileId: string) {\n  const file = await findFileById(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File does not exist\",\n    });\n  }\n\n  let hasAccess = false;\n\n  if (file.userId === userId) {\n    hasAccess = true;\n  }\n\n  if (!hasAccess && file.conversationId) {\n    const membership = await findConversationMembership(file.conversationId, userId);\n    hasAccess = Boolean(membership);\n  }\n\n  if (!hasAccess && file.assignment?.class) {\n    const cls = file.assignment.class;\n    hasAccess =\n      cls.teachers.some((t) => t.id === userId) ||\n      cls.students.some((s) => s.id === userId) ||\n      isSchoolAdminForClass(cls, userId);\n  }\n\n  if (!hasAccess && (file as any).announcement?.class) {\n    const cls = (file as any).announcement.class;\n    hasAccess =\n      cls.teachers.some((t: { id: string }) => t.id === userId) ||\n      cls.students.some((s: { id: string }) => s.id === userId) ||\n      isSchoolAdminForClass(cls, userId);\n  }\n\n  if (!hasAccess && file.submission?.assignment?.classId) {\n    const cls = file.submission.assignment.class;\n    hasAccess =\n      file.submission.studentId === userId ||\n      cls.teachers.some((t) => t.id === userId) ||\n      isSchoolAdminForClass(cls, userId);\n  }\n\n  if (!hasAccess && file.annotations?.assignment?.classId) {\n    const cls = file.annotations.assignment.class;\n    hasAccess =\n      file.annotations.studentId === userId ||\n      cls.teachers.some((t) => t.id === userId) ||\n      isSchoolAdminForClass(cls, userId);\n  }\n\n  // Final fallback: the explicit-share + scope-default resolver. Covers\n  // folder-scoped files shared via Permission grants (incl. SCHOOL/CLASS/TAG\n  // principals) and any institution member reading SCHOOL_STORAGE files.\n  // Safe to call for unfiled files — the resolver returns owner-only there.\n  if (!hasAccess) {\n    try {\n      await requireFileAccess(userId, fileId, \"READ\");\n      hasAccess = true;\n    } catch {\n      // resolver denied — fall through to FORBIDDEN below.\n    }\n  }\n\n  if (!hasAccess) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"You do not have access to this file\",\n    });\n  }\n\n  try {\n    const signedUrl = await getSignedUrl(file.path);\n    return { url: signedUrl };\n  } catch (error) {\n    logger.error(\"Error generating signed URL:\", error as Record<string, unknown>);\n    throw new TRPCError({\n      code: \"INTERNAL_SERVER_ERROR\",\n      message: \"Failed to generate download URL\",\n    });\n  }\n}\n\nexport async function moveFile(\n  fileId: string,\n  targetFolderId: string\n) {\n  const file = await findFileWithFolder(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File not found\",\n    });\n  }\n\n  const targetFolder = await findFolderById(targetFolderId);\n  if (!targetFolder) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"Target folder not found\",\n    });\n  }\n\n  return updateFileFolder(fileId, targetFolderId);\n}\n\nexport async function renameFile(\n  fileId: string,\n  newName: string\n) {\n  const file = await findFileWithFolder(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File not found\",\n    });\n  }\n\n  if (!newName.trim()) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"File name cannot be empty\",\n    });\n  }\n\n  return updateFileName(fileId, newName.trim());\n}\n\nexport async function deleteFileRecord(fileId: string, classId: string) {\n  const file = await findFileWithFolderAndThumbnail(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File not found\",\n    });\n  }\n\n  if (file.folder?.classId !== classId) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"File does not belong to this class\",\n    });\n  }\n\n  try {\n    if (file.uploadStatus === \"COMPLETED\") {\n      await deleteFile(file.path);\n      if (file.thumbnail) {\n        await deleteFile(file.thumbnail.path);\n      }\n    }\n  } catch (error) {\n    logger.warn(`Failed to delete file ${file.path}:`, error as Record<string, unknown>);\n  }\n\n  await deleteFileById(fileId);\n  return { success: true };\n}\n\n/**\n * Scope-aware move: works for class, school, and personal storage. Source\n * and target must live in the same scope (no cross-scope moves).\n */\nexport async function moveFileScoped(\n  userId: string,\n  input: { fileId: string; targetFolderId: string }\n) {\n  const file = await findFileWithFolder(input.fileId);\n  if (!file?.folderId) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"File not found\" });\n  }\n  const [sourceScope, targetScope] = await Promise.all([\n    resolveFolderScope(file.folderId),\n    resolveFolderScope(input.targetFolderId),\n  ]);\n  if (!sourceScope || !targetScope) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"Folder not found\" });\n  }\n  if (JSON.stringify(sourceScope) !== JSON.stringify(targetScope)) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"Cannot move files between scopes\",\n    });\n  }\n  await requireFolderAccess(userId, file.folderId, \"WRITE\");\n  await requireFolderAccess(userId, input.targetFolderId, \"WRITE\");\n  return updateFileFolder(input.fileId, input.targetFolderId);\n}\n\n/** Scope-aware rename. */\nexport async function renameFileScoped(\n  userId: string,\n  input: { fileId: string; newName: string }\n) {\n  const trimmed = input.newName.trim();\n  if (!trimmed) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"File name cannot be empty\",\n    });\n  }\n  const file = await findFileWithFolder(input.fileId);\n  if (!file) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"File not found\" });\n  }\n  if (file.folderId) {\n    await requireFolderAccess(userId, file.folderId, \"WRITE\");\n  } else if (file.userId !== userId) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"You don't own this file\",\n    });\n  }\n  return updateFileName(input.fileId, trimmed);\n}\n\n/**\n * Generic delete that works across class / school / personal storage by\n * deriving permissions from the parent folder's CloudScope (or owning user\n * for unfiled files).\n */\nexport async function deleteFileGeneric(userId: string, fileId: string) {\n  const file = await findFileWithFolderAndThumbnail(fileId);\n  if (!file) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"File not found\" });\n  }\n  if (file.folderId) {\n    await requireFolderAccess(userId, file.folderId, \"WRITE\");\n  } else if (file.userId !== userId) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"You don't own this file\",\n    });\n  }\n  try {\n    if (file.uploadStatus === \"COMPLETED\") {\n      await deleteFile(file.path);\n      if (file.thumbnail) {\n        await deleteFile(file.thumbnail.path);\n      }\n    }\n  } catch (error) {\n    logger.warn(\n      `Failed to delete file ${file.path}:`,\n      error as Record<string, unknown>\n    );\n  }\n  await deleteFileById(fileId);\n  return { success: true };\n}\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,8BAA8B,EAC9B,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAElE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,SAAS,qBAAqB,CAAC,SAAc,EAAE,MAAc;IAC3D,OAAO,OAAO,CACZ,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAClC,CAAC,UAA8B,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,CACjE,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAc;IACnE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,qBAAqB;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACjF,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAClC,SAAS;YACP,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACzC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACzC,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,SAAS,IAAK,IAAY,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC;QACpD,MAAM,GAAG,GAAI,IAAY,CAAC,YAAY,CAAC,KAAK,CAAC;QAC7C,SAAS;YACP,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACzD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACzD,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC7C,SAAS;YACP,IAAI,CAAC,UAAU,CAAC,SAAS,KAAK,MAAM;gBACpC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACzC,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC;QAC9C,SAAS;YACP,IAAI,CAAC,WAAW,CAAC,SAAS,KAAK,MAAM;gBACrC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACzC,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,sEAAsE;IACtE,2EAA2E;IAC3E,uEAAuE;IACvE,0EAA0E;IAC1E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAChD,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,qCAAqC;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAgC,CAAC,CAAC;QAC/E,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAc,EACd,cAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,OAAe;IAEf,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,OAAe;IACpE,MAAM,IAAI,GAAG,MAAM,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YACtC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,IAAI,GAAG,EAAE,KAAgC,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,KAAiD;IAEjD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;QACjC,kBAAkB,CAAC,KAAK,CAAC,cAAc,CAAC;KACzC,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,kCAAkC;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACjE,OAAO,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;AAC9D,CAAC;AAED,0BAA0B;AAC1B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,KAA0C;IAE1C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,MAAc;IACpE,MAAM,IAAI,GAAG,MAAM,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YACtC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CACT,yBAAyB,IAAI,CAAC,IAAI,GAAG,EACrC,KAAgC,CACjC,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC","debug_id":"f5c84cd2-4bba-5d8c-80c8-a64d756df4c6"}