@studious-lms/server 1.8.0 → 1.11.0

package/dist/services/event.d.ts

@@ -143,8 +143,8 @@ export declare function attachAssignment(userId: string, eventId: string, assign
         type: import(".prisma/client").$Enums.AssignmentType;
         id: string;
         createdAt: Date | null;
-        modifiedAt: Date | null;
         classId: string;
+        modifiedAt: Date | null;
         title: string;
         instructions: string;
         dueDate: Date;
@@ -185,8 +185,8 @@ export declare function detachAssignment(userId: string, eventId: string, assign
         type: import(".prisma/client").$Enums.AssignmentType;
         id: string;
         createdAt: Date | null;
-        modifiedAt: Date | null;
         classId: string;
+        modifiedAt: Date | null;
         title: string;
         instructions: string;
         dueDate: Date;

package/dist/services/file.d.ts

@@ -1,4 +1,21 @@
-/** Generate a signed URL for file download. Validates user has access. */
+/**
+ * Generate a signed URL for file download.
+ *
+ * Access resolution, in order — first match wins:
+ *   1. Owner of the file.
+ *   2. Member of the conversation the file is attached to (chat upload).
+ *   3. Contextual access via the file's class context: assignment / announcement
+ *      / submission / annotations attached to a class the user teaches, learns
+ *      in, or is a school admin for.
+ *   4. The central permissions resolver, which covers folder-scoped files —
+ *      explicit Permission grants (USER / TAG / CLASS / DEPARTMENT / SCHOOL
+ *      principals) plus scope defaults (school members read SCHOOL_STORAGE,
+ *      class members read class folders, owners read personal folders).
+ *
+ * The resolver is invoked unconditionally as the last step, so files shared
+ * via the new Permission system reach this code path even when they have no
+ * matching domain context.
+ */
 export declare function getFileSignedUrl(userId: string, fileId: string): Promise<{
     url: string;
 }>;
@@ -13,6 +30,7 @@ export declare function moveFile(fileId: string, targetFolderId: string): Promis
     name: string;
     id: string;
     userId: string | null;
+    folderId: string | null;
     size: number | null;
     uploadedAt: Date | null;
     uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -29,7 +47,6 @@ export declare function moveFile(fileId: string, targetFolderId: string): Promis
     submissionId: string | null;
     annotationId: string | null;
     classDraftId: string | null;
-    folderId: string | null;
     conversationId: string | null;
     messageId: string | null;
     announcementId: string | null;
@@ -46,6 +63,7 @@ export declare function renameFile(fileId: string, newName: string): Promise<{
     name: string;
     id: string;
     userId: string | null;
+    folderId: string | null;
     size: number | null;
     uploadedAt: Date | null;
     uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -62,7 +80,6 @@ export declare function renameFile(fileId: string, newName: string): Promise<{
     submissionId: string | null;
     annotationId: string | null;
     classDraftId: string | null;
-    folderId: string | null;
     conversationId: string | null;
     messageId: string | null;
     announcementId: string | null;
@@ -89,6 +106,7 @@ export declare function moveFileScoped(userId: string, input: {
     name: string;
     id: string;
     userId: string | null;
+    folderId: string | null;
     size: number | null;
     uploadedAt: Date | null;
     uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -105,7 +123,6 @@ export declare function moveFileScoped(userId: string, input: {
     submissionId: string | null;
     annotationId: string | null;
     classDraftId: string | null;
-    folderId: string | null;
     conversationId: string | null;
     messageId: string | null;
     announcementId: string | null;
@@ -126,6 +143,7 @@ export declare function renameFileScoped(userId: string, input: {
     name: string;
     id: string;
     userId: string | null;
+    folderId: string | null;
     size: number | null;
     uploadedAt: Date | null;
     uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -142,7 +160,6 @@ export declare function renameFileScoped(userId: string, input: {
     submissionId: string | null;
     annotationId: string | null;
     classDraftId: string | null;
-    folderId: string | null;
     conversationId: string | null;
     messageId: string | null;
     announcementId: string | null;

package/dist/services/file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file.d.ts","sourceRoot":"/","sources":["services/file.ts"],"names":[],"mappings":"AAmCA,0EAA0E;AAC1E,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;GAkFpE;AAED,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmBvB;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkBhB;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;;GA6BrE;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsBlD;AAED,0BAA0B;AAC1B,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsB3C;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;GA4BrE"}
+{"version":3,"file":"file.d.ts","sourceRoot":"/","sources":["services/file.ts"],"names":[],"mappings":"AA+CA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;GAkFpE;AAED,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmBvB;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkBhB;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;;GA6BrE;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsBlD;AAED,0BAA0B;AAC1B,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsB3C;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;GA4BrE"}

package/dist/services/file.js

@@ -1,14 +1,26 @@
 /**
- * File service – signed URLs, move, rename, delete. Handles permission checks
- * for assignment, submission, announcement, folder, and user-owned files.
+ * File service – signed URLs, move, rename, delete.
  *
- * The class files page calls the legacy class-scoped helpers; the unified
- * cloud-storage page calls the `*Scoped` / `*Generic` helpers below, which
- * derive permissions from the parent folder's CloudScope so the same endpoint
- * can serve class, school, and personal storage.
+ * Two access concepts coexist here, and they should not be conflated:
+ *
+ *   1. **Contextual access** — assignment, submission, announcement, and chat
+ *      attachments. A teacher viewing a student's submission has access by
+ *      virtue of teaching the class, not because anyone explicitly "shared"
+ *      the file with them. These checks live inline in `getFileSignedUrl`
+ *      below and predate the explicit-share system.
+ *
+ *   2. **Explicit-share access** — folder-scoped files in cloud storage.
+ *      Permission flows through the central resolver in `permissions.ts`,
+ *      which consults explicit `Permission` rows in addition to the
+ *      scope-derived defaults. The cloud-storage helpers (`*Scoped` /
+ *      `*Generic`) below all use this path.
+ *
+ * If you're tempted to refactor the contextual checks into the resolver,
+ * don't — they intentionally key off the file's domain context, not its
+ * filesystem location.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="461807a5-9bef-532d-8edf-7763337de98b")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f5c84cd2-4bba-5d8c-80c8-a64d756df4c6")}catch(e){}}();
 import { TRPCError } from "@trpc/server";
 import { getSignedUrl, deleteFile } from "../lib/googleCloudStorage.js";
 import { logger } from "../utils/logger.js";
@@ -16,11 +28,28 @@ import { findFileById, findFileWithFolder, findFileWithFolderAndThumbnail, findF
 import { findConversationMembership } from "../models/message.js";
 import { resolveFolderScope } from "../models/cloudStorage.js";
 import { requireFolderAccess } from "./folder.js";
+import { requireFileAccess } from "./permissions.js";
 function isSchoolAdminForClass(classData, userId) {
-    return Boolean(classData?.school?.memberships?.some((membership) => membership.userId === userId) ||
-        classData?.school?.users?.some((admin) => admin.id === userId));
+    return Boolean(classData?.school?.memberships?.some((membership) => membership.userId === userId));
 }
-/** Generate a signed URL for file download. Validates user has access. */
+/**
+ * Generate a signed URL for file download.
+ *
+ * Access resolution, in order — first match wins:
+ *   1. Owner of the file.
+ *   2. Member of the conversation the file is attached to (chat upload).
+ *   3. Contextual access via the file's class context: assignment / announcement
+ *      / submission / annotations attached to a class the user teaches, learns
+ *      in, or is a school admin for.
+ *   4. The central permissions resolver, which covers folder-scoped files —
+ *      explicit Permission grants (USER / TAG / CLASS / DEPARTMENT / SCHOOL
+ *      principals) plus scope defaults (school members read SCHOOL_STORAGE,
+ *      class members read class folders, owners read personal folders).
+ *
+ * The resolver is invoked unconditionally as the last step, so files shared
+ * via the new Permission system reach this code path even when they have no
+ * matching domain context.
+ */
 export async function getFileSignedUrl(userId, fileId) {
     const file = await findFileById(fileId);
     if (!file) {
@@ -30,46 +59,53 @@ export async function getFileSignedUrl(userId, fileId) {
         });
     }
     let hasAccess = false;
-    if (file.assignment?.class) {
-        const isTeacher = file.assignment.class.teachers.some((t) => t.id === userId);
-        const isStudent = file.assignment.class.students.some((s) => s.id === userId);
-        const isSchoolAdmin = isSchoolAdminForClass(file.assignment.class, userId);
-        logger.info(`Assignment file access check - userId: ${userId}, isTeacher: ${isTeacher}, isStudent: ${isStudent}, isSchoolAdmin: ${isSchoolAdmin}`);
-        hasAccess = isTeacher || isStudent || isSchoolAdmin;
-    }
-    if (file.announcement?.class) {
-        const ann = file.announcement;
-        const isTeacher = ann.class.teachers.some((t) => t.id === userId);
-        const isStudent = ann.class.students.some((s) => s.id === userId);
-        const isSchoolAdmin = isSchoolAdminForClass(ann.class, userId);
-        hasAccess = hasAccess || isTeacher || isStudent || isSchoolAdmin;
-    }
-    if (file.submission?.assignment?.classId) {
+    if (file.userId === userId) {
+        hasAccess = true;
+    }
+    if (!hasAccess && file.conversationId) {
+        const membership = await findConversationMembership(file.conversationId, userId);
+        hasAccess = Boolean(membership);
+    }
+    if (!hasAccess && file.assignment?.class) {
+        const cls = file.assignment.class;
         hasAccess =
-            hasAccess ||
-                file.submission.studentId === userId ||
-                file.submission.assignment.class.teachers.some((t) => t.id === userId) ||
-                isSchoolAdminForClass(file.submission.assignment.class, userId);
+            cls.teachers.some((t) => t.id === userId) ||
+                cls.students.some((s) => s.id === userId) ||
+                isSchoolAdminForClass(cls, userId);
     }
-    if (file.annotations?.assignment?.classId) {
+    if (!hasAccess && file.announcement?.class) {
+        const cls = file.announcement.class;
         hasAccess =
-            hasAccess ||
-                file.annotations.studentId === userId ||
-                file.annotations.assignment.class.teachers.some((t) => t.id === userId) ||
-                isSchoolAdminForClass(file.annotations.assignment.class, userId);
+            cls.teachers.some((t) => t.id === userId) ||
+                cls.students.some((s) => s.id === userId) ||
+                isSchoolAdminForClass(cls, userId);
     }
-    if (file.userId === userId) {
-        hasAccess = true;
+    if (!hasAccess && file.submission?.assignment?.classId) {
+        const cls = file.submission.assignment.class;
+        hasAccess =
+            file.submission.studentId === userId ||
+                cls.teachers.some((t) => t.id === userId) ||
+                isSchoolAdminForClass(cls, userId);
     }
-    if (file.conversationId) {
-        const membership = await findConversationMembership(file.conversationId, userId);
-        hasAccess = hasAccess || Boolean(membership);
+    if (!hasAccess && file.annotations?.assignment?.classId) {
+        const cls = file.annotations.assignment.class;
+        hasAccess =
+            file.annotations.studentId === userId ||
+                cls.teachers.some((t) => t.id === userId) ||
+                isSchoolAdminForClass(cls, userId);
     }
-    if (file.folder?.class) {
-        const isTeacher = file.folder.class.teachers.some((t) => t.id === userId);
-        const isStudent = file.folder.class.students.some((s) => s.id === userId);
-        const isSchoolAdmin = isSchoolAdminForClass(file.folder.class, userId);
-        hasAccess = hasAccess || isTeacher || isStudent || isSchoolAdmin;
+    // Final fallback: the explicit-share + scope-default resolver. Covers
+    // folder-scoped files shared via Permission grants (incl. SCHOOL/CLASS/TAG
+    // principals) and any institution member reading SCHOOL_STORAGE files.
+    // Safe to call for unfiled files — the resolver returns owner-only there.
+    if (!hasAccess) {
+        try {
+            await requireFileAccess(userId, fileId, "READ");
+            hasAccess = true;
+        }
+        catch {
+            // resolver denied — fall through to FORBIDDEN below.
+        }
     }
     if (!hasAccess) {
         throw new TRPCError({
@@ -234,4 +270,4 @@ export async function deleteFileGeneric(userId, fileId) {
     return { success: true };
 }
 //# sourceMappingURL=file.js.map
-//# debugId=461807a5-9bef-532d-8edf-7763337de98b
+//# debugId=f5c84cd2-4bba-5d8c-80c8-a64d756df4c6

package/dist/services/file.js.map

@@ -1 +1 @@
-{"version":3,"file":"file.js","sources":["services/file.ts"],"sourceRoot":"/","sourcesContent":["/**\n * File service – signed URLs, move, rename, delete. Handles permission checks\n * for assignment, submission, announcement, folder, and user-owned files.\n *\n * The class files page calls the legacy class-scoped helpers; the unified\n * cloud-storage page calls the `*Scoped` / `*Generic` helpers below, which\n * derive permissions from the parent folder's CloudScope so the same endpoint\n * can serve class, school, and personal storage.\n */\nimport { TRPCError } from \"@trpc/server\";\nimport { getSignedUrl, deleteFile } from \"../lib/googleCloudStorage.js\";\nimport { logger } from \"../utils/logger.js\";\nimport {\n  findFileById,\n  findFileWithFolder,\n  findFileWithFolderAndThumbnail,\n  findFolderById,\n  updateFileFolder,\n  updateFileName,\n  deleteFileById,\n} from \"../models/file.js\";\nimport { findConversationMembership } from \"../models/message.js\";\nimport { prisma } from \"../lib/prisma.js\";\nimport { resolveFolderScope } from \"../models/cloudStorage.js\";\nimport { requireFolderAccess } from \"./folder.js\";\n\nfunction isSchoolAdminForClass(classData: any, userId: string) {\n  return Boolean(\n    classData?.school?.memberships?.some(\n      (membership: { userId: string }) => membership.userId === userId\n    ) ||\n      classData?.school?.users?.some((admin: { id: string }) => admin.id === userId)\n  );\n}\n\n/** Generate a signed URL for file download. Validates user has access. */\nexport async function getFileSignedUrl(userId: string, fileId: string) {\n  const file = await findFileById(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File does not exist\",\n    });\n  }\n\n  let hasAccess = false;\n\n  if (file.assignment?.class) {\n    const isTeacher = file.assignment.class.teachers.some(\n      (t) => t.id === userId\n    );\n    const isStudent = file.assignment.class.students.some(\n      (s) => s.id === userId\n    );\n    const isSchoolAdmin = isSchoolAdminForClass(file.assignment.class, userId);\n    logger.info(\n      `Assignment file access check - userId: ${userId}, isTeacher: ${isTeacher}, isStudent: ${isStudent}, isSchoolAdmin: ${isSchoolAdmin}`\n    );\n    hasAccess = isTeacher || isStudent || isSchoolAdmin;\n  }\n\n  if ((file as any).announcement?.class) {\n    const ann = (file as any).announcement;\n    const isTeacher = ann.class.teachers.some((t: any) => t.id === userId);\n    const isStudent = ann.class.students.some((s: any) => s.id === userId);\n    const isSchoolAdmin = isSchoolAdminForClass(ann.class, userId);\n    hasAccess = hasAccess || isTeacher || isStudent || isSchoolAdmin;\n  }\n\n  if (file.submission?.assignment?.classId) {\n    hasAccess =\n      hasAccess ||\n      file.submission.studentId === userId ||\n      file.submission.assignment.class.teachers.some((t) => t.id === userId) ||\n      isSchoolAdminForClass(file.submission.assignment.class, userId);\n  }\n\n  if (file.annotations?.assignment?.classId) {\n    hasAccess =\n      hasAccess ||\n      file.annotations.studentId === userId ||\n      file.annotations.assignment.class.teachers.some((t) => t.id === userId) ||\n      isSchoolAdminForClass(file.annotations.assignment.class, userId);\n  }\n\n  if (file.userId === userId) {\n    hasAccess = true;\n  }\n\n  if (file.conversationId) {\n    const membership = await findConversationMembership(file.conversationId, userId);\n    hasAccess = hasAccess || Boolean(membership);\n  }\n\n  if (file.folder?.class) {\n    const isTeacher = file.folder.class.teachers.some((t) => t.id === userId);\n    const isStudent = file.folder.class.students.some((s) => s.id === userId);\n    const isSchoolAdmin = isSchoolAdminForClass(file.folder.class, userId);\n    hasAccess = hasAccess || isTeacher || isStudent || isSchoolAdmin;\n  }\n\n  if (!hasAccess) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"You do not have access to this file\",\n    });\n  }\n\n  try {\n    const signedUrl = await getSignedUrl(file.path);\n    return { url: signedUrl };\n  } catch (error) {\n    logger.error(\"Error generating signed URL:\", error as Record<string, unknown>);\n    throw new TRPCError({\n      code: \"INTERNAL_SERVER_ERROR\",\n      message: \"Failed to generate download URL\",\n    });\n  }\n}\n\nexport async function moveFile(\n  fileId: string,\n  targetFolderId: string\n) {\n  const file = await findFileWithFolder(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File not found\",\n    });\n  }\n\n  const targetFolder = await findFolderById(targetFolderId);\n  if (!targetFolder) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"Target folder not found\",\n    });\n  }\n\n  return updateFileFolder(fileId, targetFolderId);\n}\n\nexport async function renameFile(\n  fileId: string,\n  newName: string\n) {\n  const file = await findFileWithFolder(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File not found\",\n    });\n  }\n\n  if (!newName.trim()) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"File name cannot be empty\",\n    });\n  }\n\n  return updateFileName(fileId, newName.trim());\n}\n\nexport async function deleteFileRecord(fileId: string, classId: string) {\n  const file = await findFileWithFolderAndThumbnail(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File not found\",\n    });\n  }\n\n  if (file.folder?.classId !== classId) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"File does not belong to this class\",\n    });\n  }\n\n  try {\n    if (file.uploadStatus === \"COMPLETED\") {\n      await deleteFile(file.path);\n      if (file.thumbnail) {\n        await deleteFile(file.thumbnail.path);\n      }\n    }\n  } catch (error) {\n    logger.warn(`Failed to delete file ${file.path}:`, error as Record<string, unknown>);\n  }\n\n  await deleteFileById(fileId);\n  return { success: true };\n}\n\n/**\n * Scope-aware move: works for class, school, and personal storage. Source\n * and target must live in the same scope (no cross-scope moves).\n */\nexport async function moveFileScoped(\n  userId: string,\n  input: { fileId: string; targetFolderId: string }\n) {\n  const file = await findFileWithFolder(input.fileId);\n  if (!file?.folderId) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"File not found\" });\n  }\n  const [sourceScope, targetScope] = await Promise.all([\n    resolveFolderScope(file.folderId),\n    resolveFolderScope(input.targetFolderId),\n  ]);\n  if (!sourceScope || !targetScope) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"Folder not found\" });\n  }\n  if (JSON.stringify(sourceScope) !== JSON.stringify(targetScope)) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"Cannot move files between scopes\",\n    });\n  }\n  await requireFolderAccess(userId, file.folderId, \"WRITE\");\n  await requireFolderAccess(userId, input.targetFolderId, \"WRITE\");\n  return updateFileFolder(input.fileId, input.targetFolderId);\n}\n\n/** Scope-aware rename. */\nexport async function renameFileScoped(\n  userId: string,\n  input: { fileId: string; newName: string }\n) {\n  const trimmed = input.newName.trim();\n  if (!trimmed) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"File name cannot be empty\",\n    });\n  }\n  const file = await findFileWithFolder(input.fileId);\n  if (!file) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"File not found\" });\n  }\n  if (file.folderId) {\n    await requireFolderAccess(userId, file.folderId, \"WRITE\");\n  } else if (file.userId !== userId) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"You don't own this file\",\n    });\n  }\n  return updateFileName(input.fileId, trimmed);\n}\n\n/**\n * Generic delete that works across class / school / personal storage by\n * deriving permissions from the parent folder's CloudScope (or owning user\n * for unfiled files).\n */\nexport async function deleteFileGeneric(userId: string, fileId: string) {\n  const file = await findFileWithFolderAndThumbnail(fileId);\n  if (!file) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"File not found\" });\n  }\n  if (file.folderId) {\n    await requireFolderAccess(userId, file.folderId, \"WRITE\");\n  } else if (file.userId !== userId) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"You don't own this file\",\n    });\n  }\n  try {\n    if (file.uploadStatus === \"COMPLETED\") {\n      await deleteFile(file.path);\n      if (file.thumbnail) {\n        await deleteFile(file.thumbnail.path);\n      }\n    }\n  } catch (error) {\n    logger.warn(\n      `Failed to delete file ${file.path}:`,\n      error as Record<string, unknown>\n    );\n  }\n  await deleteFileById(fileId);\n  return { success: true };\n}\n"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;;;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,8BAA8B,EAC9B,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAElE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,SAAS,qBAAqB,CAAC,SAAc,EAAE,MAAc;IAC3D,OAAO,OAAO,CACZ,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAClC,CAAC,UAA8B,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,CACjE;QACC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,KAAqB,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,CACjF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAc;IACnE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,qBAAqB;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CACnD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CACvB,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CACnD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CACvB,CAAC;QACF,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CACT,0CAA0C,MAAM,gBAAgB,SAAS,gBAAgB,SAAS,oBAAoB,aAAa,EAAE,CACtI,CAAC;QACF,SAAS,GAAG,SAAS,IAAI,SAAS,IAAI,aAAa,CAAC;IACtD,CAAC;IAED,IAAK,IAAY,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC;QACtC,MAAM,GAAG,GAAI,IAAY,CAAC,YAAY,CAAC;QACvC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,qBAAqB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/D,SAAS,GAAG,SAAS,IAAI,SAAS,IAAI,SAAS,IAAI,aAAa,CAAC;IACnE,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACzC,SAAS;YACP,SAAS;gBACT,IAAI,CAAC,UAAU,CAAC,SAAS,KAAK,MAAM;gBACpC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACtE,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QAC1C,SAAS;YACP,SAAS;gBACT,IAAI,CAAC,WAAW,CAAC,SAAS,KAAK,MAAM;gBACrC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACvE,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACjF,SAAS,GAAG,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QAC1E,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvE,SAAS,GAAG,SAAS,IAAI,SAAS,IAAI,SAAS,IAAI,aAAa,CAAC;IACnE,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,qCAAqC;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAgC,CAAC,CAAC;QAC/E,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAc,EACd,cAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,OAAe;IAEf,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,OAAe;IACpE,MAAM,IAAI,GAAG,MAAM,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YACtC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,IAAI,GAAG,EAAE,KAAgC,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,KAAiD;IAEjD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;QACjC,kBAAkB,CAAC,KAAK,CAAC,cAAc,CAAC;KACzC,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,kCAAkC;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACjE,OAAO,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;AAC9D,CAAC;AAED,0BAA0B;AAC1B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,KAA0C;IAE1C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,MAAc;IACpE,MAAM,IAAI,GAAG,MAAM,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YACtC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CACT,yBAAyB,IAAI,CAAC,IAAI,GAAG,EACrC,KAAgC,CACjC,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC","debug_id":"461807a5-9bef-532d-8edf-7763337de98b"}
+{"version":3,"file":"file.js","sources":["services/file.ts"],"sourceRoot":"/","sourcesContent":["/**\n * File service – signed URLs, move, rename, delete.\n *\n * Two access concepts coexist here, and they should not be conflated:\n *\n *   1. **Contextual access** — assignment, submission, announcement, and chat\n *      attachments. A teacher viewing a student's submission has access by\n *      virtue of teaching the class, not because anyone explicitly \"shared\"\n *      the file with them. These checks live inline in `getFileSignedUrl`\n *      below and predate the explicit-share system.\n *\n *   2. **Explicit-share access** — folder-scoped files in cloud storage.\n *      Permission flows through the central resolver in `permissions.ts`,\n *      which consults explicit `Permission` rows in addition to the\n *      scope-derived defaults. The cloud-storage helpers (`*Scoped` /\n *      `*Generic`) below all use this path.\n *\n * If you're tempted to refactor the contextual checks into the resolver,\n * don't — they intentionally key off the file's domain context, not its\n * filesystem location.\n */\nimport { TRPCError } from \"@trpc/server\";\nimport { getSignedUrl, deleteFile } from \"../lib/googleCloudStorage.js\";\nimport { logger } from \"../utils/logger.js\";\nimport {\n  findFileById,\n  findFileWithFolder,\n  findFileWithFolderAndThumbnail,\n  findFolderById,\n  updateFileFolder,\n  updateFileName,\n  deleteFileById,\n} from \"../models/file.js\";\nimport { findConversationMembership } from \"../models/message.js\";\nimport { prisma } from \"../lib/prisma.js\";\nimport { resolveFolderScope } from \"../models/cloudStorage.js\";\nimport { requireFolderAccess } from \"./folder.js\";\nimport { requireFileAccess } from \"./permissions.js\";\n\nfunction isSchoolAdminForClass(classData: any, userId: string) {\n  return Boolean(\n    classData?.school?.memberships?.some(\n      (membership: { userId: string }) => membership.userId === userId\n    )\n  );\n}\n\n/**\n * Generate a signed URL for file download.\n *\n * Access resolution, in order — first match wins:\n *   1. Owner of the file.\n *   2. Member of the conversation the file is attached to (chat upload).\n *   3. Contextual access via the file's class context: assignment / announcement\n *      / submission / annotations attached to a class the user teaches, learns\n *      in, or is a school admin for.\n *   4. The central permissions resolver, which covers folder-scoped files —\n *      explicit Permission grants (USER / TAG / CLASS / DEPARTMENT / SCHOOL\n *      principals) plus scope defaults (school members read SCHOOL_STORAGE,\n *      class members read class folders, owners read personal folders).\n *\n * The resolver is invoked unconditionally as the last step, so files shared\n * via the new Permission system reach this code path even when they have no\n * matching domain context.\n */\nexport async function getFileSignedUrl(userId: string, fileId: string) {\n  const file = await findFileById(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File does not exist\",\n    });\n  }\n\n  let hasAccess = false;\n\n  if (file.userId === userId) {\n    hasAccess = true;\n  }\n\n  if (!hasAccess && file.conversationId) {\n    const membership = await findConversationMembership(file.conversationId, userId);\n    hasAccess = Boolean(membership);\n  }\n\n  if (!hasAccess && file.assignment?.class) {\n    const cls = file.assignment.class;\n    hasAccess =\n      cls.teachers.some((t) => t.id === userId) ||\n      cls.students.some((s) => s.id === userId) ||\n      isSchoolAdminForClass(cls, userId);\n  }\n\n  if (!hasAccess && (file as any).announcement?.class) {\n    const cls = (file as any).announcement.class;\n    hasAccess =\n      cls.teachers.some((t: { id: string }) => t.id === userId) ||\n      cls.students.some((s: { id: string }) => s.id === userId) ||\n      isSchoolAdminForClass(cls, userId);\n  }\n\n  if (!hasAccess && file.submission?.assignment?.classId) {\n    const cls = file.submission.assignment.class;\n    hasAccess =\n      file.submission.studentId === userId ||\n      cls.teachers.some((t) => t.id === userId) ||\n      isSchoolAdminForClass(cls, userId);\n  }\n\n  if (!hasAccess && file.annotations?.assignment?.classId) {\n    const cls = file.annotations.assignment.class;\n    hasAccess =\n      file.annotations.studentId === userId ||\n      cls.teachers.some((t) => t.id === userId) ||\n      isSchoolAdminForClass(cls, userId);\n  }\n\n  // Final fallback: the explicit-share + scope-default resolver. Covers\n  // folder-scoped files shared via Permission grants (incl. SCHOOL/CLASS/TAG\n  // principals) and any institution member reading SCHOOL_STORAGE files.\n  // Safe to call for unfiled files — the resolver returns owner-only there.\n  if (!hasAccess) {\n    try {\n      await requireFileAccess(userId, fileId, \"READ\");\n      hasAccess = true;\n    } catch {\n      // resolver denied — fall through to FORBIDDEN below.\n    }\n  }\n\n  if (!hasAccess) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"You do not have access to this file\",\n    });\n  }\n\n  try {\n    const signedUrl = await getSignedUrl(file.path);\n    return { url: signedUrl };\n  } catch (error) {\n    logger.error(\"Error generating signed URL:\", error as Record<string, unknown>);\n    throw new TRPCError({\n      code: \"INTERNAL_SERVER_ERROR\",\n      message: \"Failed to generate download URL\",\n    });\n  }\n}\n\nexport async function moveFile(\n  fileId: string,\n  targetFolderId: string\n) {\n  const file = await findFileWithFolder(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File not found\",\n    });\n  }\n\n  const targetFolder = await findFolderById(targetFolderId);\n  if (!targetFolder) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"Target folder not found\",\n    });\n  }\n\n  return updateFileFolder(fileId, targetFolderId);\n}\n\nexport async function renameFile(\n  fileId: string,\n  newName: string\n) {\n  const file = await findFileWithFolder(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File not found\",\n    });\n  }\n\n  if (!newName.trim()) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"File name cannot be empty\",\n    });\n  }\n\n  return updateFileName(fileId, newName.trim());\n}\n\nexport async function deleteFileRecord(fileId: string, classId: string) {\n  const file = await findFileWithFolderAndThumbnail(fileId);\n  if (!file) {\n    throw new TRPCError({\n      code: \"NOT_FOUND\",\n      message: \"File not found\",\n    });\n  }\n\n  if (file.folder?.classId !== classId) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"File does not belong to this class\",\n    });\n  }\n\n  try {\n    if (file.uploadStatus === \"COMPLETED\") {\n      await deleteFile(file.path);\n      if (file.thumbnail) {\n        await deleteFile(file.thumbnail.path);\n      }\n    }\n  } catch (error) {\n    logger.warn(`Failed to delete file ${file.path}:`, error as Record<string, unknown>);\n  }\n\n  await deleteFileById(fileId);\n  return { success: true };\n}\n\n/**\n * Scope-aware move: works for class, school, and personal storage. Source\n * and target must live in the same scope (no cross-scope moves).\n */\nexport async function moveFileScoped(\n  userId: string,\n  input: { fileId: string; targetFolderId: string }\n) {\n  const file = await findFileWithFolder(input.fileId);\n  if (!file?.folderId) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"File not found\" });\n  }\n  const [sourceScope, targetScope] = await Promise.all([\n    resolveFolderScope(file.folderId),\n    resolveFolderScope(input.targetFolderId),\n  ]);\n  if (!sourceScope || !targetScope) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"Folder not found\" });\n  }\n  if (JSON.stringify(sourceScope) !== JSON.stringify(targetScope)) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"Cannot move files between scopes\",\n    });\n  }\n  await requireFolderAccess(userId, file.folderId, \"WRITE\");\n  await requireFolderAccess(userId, input.targetFolderId, \"WRITE\");\n  return updateFileFolder(input.fileId, input.targetFolderId);\n}\n\n/** Scope-aware rename. */\nexport async function renameFileScoped(\n  userId: string,\n  input: { fileId: string; newName: string }\n) {\n  const trimmed = input.newName.trim();\n  if (!trimmed) {\n    throw new TRPCError({\n      code: \"BAD_REQUEST\",\n      message: \"File name cannot be empty\",\n    });\n  }\n  const file = await findFileWithFolder(input.fileId);\n  if (!file) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"File not found\" });\n  }\n  if (file.folderId) {\n    await requireFolderAccess(userId, file.folderId, \"WRITE\");\n  } else if (file.userId !== userId) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"You don't own this file\",\n    });\n  }\n  return updateFileName(input.fileId, trimmed);\n}\n\n/**\n * Generic delete that works across class / school / personal storage by\n * deriving permissions from the parent folder's CloudScope (or owning user\n * for unfiled files).\n */\nexport async function deleteFileGeneric(userId: string, fileId: string) {\n  const file = await findFileWithFolderAndThumbnail(fileId);\n  if (!file) {\n    throw new TRPCError({ code: \"NOT_FOUND\", message: \"File not found\" });\n  }\n  if (file.folderId) {\n    await requireFolderAccess(userId, file.folderId, \"WRITE\");\n  } else if (file.userId !== userId) {\n    throw new TRPCError({\n      code: \"FORBIDDEN\",\n      message: \"You don't own this file\",\n    });\n  }\n  try {\n    if (file.uploadStatus === \"COMPLETED\") {\n      await deleteFile(file.path);\n      if (file.thumbnail) {\n        await deleteFile(file.thumbnail.path);\n      }\n    }\n  } catch (error) {\n    logger.warn(\n      `Failed to delete file ${file.path}:`,\n      error as Record<string, unknown>\n    );\n  }\n  await deleteFileById(fileId);\n  return { success: true };\n}\n"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,8BAA8B,EAC9B,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAElE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,SAAS,qBAAqB,CAAC,SAAc,EAAE,MAAc;IAC3D,OAAO,OAAO,CACZ,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAClC,CAAC,UAA8B,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,CACjE,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAc;IACnE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,qBAAqB;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACjF,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAClC,SAAS;YACP,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACzC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACzC,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,SAAS,IAAK,IAAY,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC;QACpD,MAAM,GAAG,GAAI,IAAY,CAAC,YAAY,CAAC,KAAK,CAAC;QAC7C,SAAS;YACP,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACzD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACzD,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC7C,SAAS;YACP,IAAI,CAAC,UAAU,CAAC,SAAS,KAAK,MAAM;gBACpC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACzC,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC;QAC9C,SAAS;YACP,IAAI,CAAC,WAAW,CAAC,SAAS,KAAK,MAAM;gBACrC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;gBACzC,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,sEAAsE;IACtE,2EAA2E;IAC3E,uEAAuE;IACvE,0EAA0E;IAC1E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAChD,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,qCAAqC;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAgC,CAAC,CAAC;QAC/E,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAc,EACd,cAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,OAAe;IAEf,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,OAAe;IACpE,MAAM,IAAI,GAAG,MAAM,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YACtC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,IAAI,GAAG,EAAE,KAAgC,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,KAAiD;IAEjD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;QACjC,kBAAkB,CAAC,KAAK,CAAC,cAAc,CAAC;KACzC,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,kCAAkC;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACjE,OAAO,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;AAC9D,CAAC;AAED,0BAA0B;AAC1B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,KAA0C;IAE1C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,MAAc;IACpE,MAAM,IAAI,GAAG,MAAM,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC;YAClB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YACtC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CACT,yBAAyB,IAAI,CAAC,IAAI,GAAG,EACrC,KAAgC,CACjC,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC","debug_id":"f5c84cd2-4bba-5d8c-80c8-a64d756df4c6"}

package/dist/services/folder.d.ts

@@ -1,11 +1,31 @@
 import { CloudScope } from "../models/cloudStorage.js";
 import { type DirectFileData } from "../lib/fileUpload.js";
-type AccessLevel = "READ" | "WRITE";
+import { type AccessLevel } from "./permissions.js";
 interface AccessResult {
     scope: CloudScope;
     canWrite: boolean;
+    /**
+     * True when the viewer's access comes through an explicit grant rather than
+     * scope membership. Used by `browseFolder` to surface a "Shared with me"
+     * heading instead of the underlying scope's title — the grantee shouldn't
+     * see the folder labelled with the owner's scope.
+     */
+    viaGrant: boolean;
 }
-export declare function requireFolderAccess(userId: string, folderId: string, level: AccessLevel): Promise<AccessResult>;
+/**
+ * Folder-level access check. Delegates to the central resolver which consults
+ * explicit grants in addition to the scope default. Returns the scope and a
+ * canWrite flag indicating whether the user has WRITE here (used by the UI to
+ * gate the "New folder" / "Upload" buttons during a READ-level browse).
+ *
+ * Pass `mutatesSelf: true` for actions that target the folder itself (rename,
+ * delete, move-this-folder). Drive-style: explicit grants don't authorize
+ * those — only scope-default WRITE does. Mutations of children should NOT
+ * pass this flag.
+ */
+export declare function requireFolderAccess(userId: string, folderId: string, level: AccessLevel, opts?: {
+    mutatesSelf?: boolean;
+}): Promise<AccessResult>;
 /** Browse a folder. Pass `folderId` to drill into a specific folder, or a `scope` to land on its root. */
 export declare function browseFolder(userId: string, input: {
     folderId: string;
@@ -54,6 +74,76 @@ export declare function browseFolder(userId: string, input: {
     }[];
     canWrite: boolean;
     scope: CloudScope;
+    /**
+     * When the viewer's access comes through an explicit grant (not scope
+     * membership), the UI should label the root as "Shared with me" rather
+     * than the underlying scope's title. The grantee may not even be a
+     * member of that scope — showing "My Files" or "Class Files" would be
+     * misleading. Null when the viewer is a regular scope member.
+     */
+    displayRoot: {
+        kind: "SHARED_WITH_ME";
+        name: string;
+    } | null;
+}>;
+/**
+ * Drive-style "Shared with me" — surfaces every top-most folder/file the user
+ * has an explicit grant on (filtering out anything already covered by their
+ * scope defaults). Shaped like a folder so the existing folder-browser UI can
+ * render it without special cases.
+ *
+ * The pseudo-folder has a synthetic id (`shared-with-me`) and the foreign-key
+ * columns set to null — the UI should never try to mutate it directly. The
+ * union shape matches `browseFolder`'s return type so the same client query
+ * can render either.
+ */
+export declare function browseSharedWithMe(userId: string): Promise<{
+    folder: {
+        id: string;
+        name: string;
+        color: null;
+        classId: null;
+        schoolStorageId: null;
+        personalOwnerId: null;
+        scope: "GENERIC";
+        parentFolderId: null;
+        parentFolder: null;
+        childFolders: {
+            id: string;
+            name: string;
+            color: string | null;
+            _count: {
+                files: number;
+                childFolders: number;
+            };
+        }[];
+        files: {
+            id: string;
+            name: string;
+            type: string;
+            size: number | null;
+            path: string;
+            uploadedAt: Date | null;
+            user: {
+                id: string;
+                username: string;
+            } | null;
+        }[];
+    };
+    breadcrumbs: {
+        id: string;
+        name: string;
+    }[];
+    canWrite: boolean;
+    scope: {
+        kind: "PERSONAL";
+        userId: string;
+    };
+    /** Same `displayRoot` shape as `browseFolder` so the client union is uniform. */
+    displayRoot: {
+        kind: "SHARED_WITH_ME";
+        name: string;
+    };
 }>;
 export declare function getRootFolder(userId: string, scope: CloudScope): Promise<{
     files: {
@@ -210,6 +300,11 @@ export declare function listUserScopes(userId: string): Promise<{
         color: string | null;
         section: string;
     }[];
+    sharedWithMe: {
+        kind: "SHARED_WITH_ME";
+        folderCount: number;
+        fileCount: number;
+    };
 }>;
 export {};
 //# sourceMappingURL=folder.d.ts.map

package/dist/services/folder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"folder.d.ts","sourceRoot":"/","sources":["services/folder.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,UAAU,EASX,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,sBAAsB,CAAC;AAE9B,KAAK,WAAW,GAAG,MAAM,GAAG,OAAO,CAAC;AAEpC,UAAU,YAAY;IACpB,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAoFD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,WAAW,yBAOnB;AAcD,0GAA0G;AAC1G,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCpD;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAGpE;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAG/D;AAED,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;;KAG1E;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;;;;;;;;aAQtE;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IACL,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;;;;;;;;;GAqBF;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;;;;;;;;;GAkB3D;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;GAclE;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAA;CAAE;;GA4C1D;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,EAAE,CAAA;CAAE,8DAIrD;AAED,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE;;GAWzE;AAED,gEAAgE;AAChE,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;GAwClD"}
+{"version":3,"file":"folder.d.ts","sourceRoot":"/","sources":["services/folder.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,UAAU,EASX,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,WAAW,EAIjB,MAAM,kBAAkB,CAAC;AAE1B,UAAU,YAAY;IACpB,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,QAAQ,EAAE,OAAO,CAAC;CACnB;AA+CD;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,WAAW,EAClB,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GACnC,OAAO,CAAC,YAAY,CAAC,CAqBvB;AAcD,0GAA0G;AAC1G,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAuCjD;;;;;;OAMG;;;;;GAKN;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;eAoBpC;YACX,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YACpB,IAAI,EAAE,MAAM,CAAC;YACb,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;YACxB,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAC;gBAAC,QAAQ,EAAE,MAAM,CAAA;aAAE,GAAG,IAAI,CAAC;SAC/C,EAAE;;;;;;;;;;;IAKL,iFAAiF;;;;;GAMpF;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAGpE;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAG/D;AAED,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;;KAG1E;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;;;;;;;;aAQtE;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IACL,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;;;;;;;;;GAqBF;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;;;;;;;;;GAsB3D;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;GAelE;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAA;CAAE;;GAiD1D;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,EAAE,CAAA;CAAE,8DAIrD;AAED,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE;;GAWzE;AAED,gEAAgE;AAChE,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;GAkDlD"}