@studious-lms/server 1.8.0 → 1.9.0

package/dist/middleware/security.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"security.d.ts","sourceRoot":"/","sources":["middleware/security.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,cAAc,sDAWzB,CAAC;AAGH,eAAO,MAAM,WAAW,sDAQtB,CAAC;AAGH,eAAO,MAAM,aAAa,sDAOxB,CAAC;AAGH,eAAO,MAAM,YAAY,sFAwBomF,CAAC,2BAA5nF,CAAC"}
+{"version":3,"file":"security.d.ts","sourceRoot":"/","sources":["middleware/security.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,cAAc,sDAWzB,CAAC;AAGH,eAAO,MAAM,WAAW,sDAQtB,CAAC;AAGH,eAAO,MAAM,aAAa,sDAOxB,CAAC;AAGH,eAAO,MAAM,YAAY,sFAwBmmF,CAAC,2BAA3nF,CAAC"}

package/dist/middleware/security.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e27a3dc9-6e2a-5b94-b404-01bf23ea1d5f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="47d2d7ec-bf41-5da8-a7f7-78b133efc204")}catch(e){}}();
 import helmet from 'helmet';
 import rateLimit from 'express-rate-limit';
 const isDevelopment = process.env.NODE_ENV === 'development';
@@ -18,7 +18,7 @@ const rateLimitHandler = (req, res) => {
 // General API rate limiter - applies to all routes
 export const generalLimiter = rateLimit({
     windowMs: 10 * 60 * 1000, // 10 minutes
-    max: 100, // Limit each IP to 100 requests per windowMs
+    max: 1000, // Limit each IP to 100 requests per windowMs
     message: 'Too many requests from this IP, please try again later.',
     standardHeaders: true, // Return rate limit info in the `RateLimit-*` headers
     legacyHeaders: false, // Disable the `X-RateLimit-*` headers
@@ -74,4 +74,4 @@ export const helmetConfig = helmet({
     },
 });
 //# sourceMappingURL=security.js.map
-//# debugId=e27a3dc9-6e2a-5b94-b404-01bf23ea1d5f
+//# debugId=47d2d7ec-bf41-5da8-a7f7-78b133efc204

package/dist/middleware/security.js.map

@@ -1 +1 @@
-{"version":3,"file":"security.js","sources":["middleware/security.ts"],"sourceRoot":"/","sourcesContent":["import helmet from 'helmet';\nimport rateLimit from 'express-rate-limit';\nimport type { Request, Response } from 'express';\n\nconst isDevelopment = process.env.NODE_ENV === 'development';\n\n// Custom handler for rate limit errors that returns JSON\n// This format can be intercepted on the frontend with:\n// error.data?.code === 'TOO_MANY_REQUESTS' || error.data?.httpStatus === 429\nconst rateLimitHandler = (req: Request, res: Response) => {\n  // Return JSON structure that can be intercepted on frontend with:\n  // error.data?.code === 'TOO_MANY_REQUESTS' || error.data?.httpStatus === 429\n  // When tRPC wraps this, the response body becomes error.data, so we put code/httpStatus at top level\n  res.status(429).json({\n    code: 'TOO_MANY_REQUESTS',\n    message: 'Too many requests, please try again later.',\n  });\n};\n\n// General API rate limiter - applies to all routes\nexport const generalLimiter = rateLimit({\n  windowMs: 10 * 60 * 1000, // 10 minutes\n  max: 100, // Limit each IP to 100 requests per windowMs\n  message: 'Too many requests from this IP, please try again later.',\n  standardHeaders: true, // Return rate limit info in the `RateLimit-*` headers\n  legacyHeaders: false, // Disable the `X-RateLimit-*` headers\n  handler: rateLimitHandler,\n  skip: (req) => {\n    // Skip rate limiting for health checks\n    return req.path === '/health' || req.method === 'OPTIONS';\n  },\n});\n\n// Stricter rate limiter for authentication endpoints\nexport const authLimiter = rateLimit({\n  windowMs: 5 * 60 * 1000, // 5 minutes\n  max: 5, // Limit each IP to 5 login attempts per windowMs\n  message: 'Too many authentication attempts, please try again later.',\n  standardHeaders: true,\n  legacyHeaders: false,\n  skipSuccessfulRequests: true, // Don't count successful requests\n  handler: rateLimitHandler,\n});\n\n// File upload rate limiter\nexport const uploadLimiter = rateLimit({\n  windowMs: 30 * 60 * 1000, // 30 minutes\n  max: 50, // Limit each IP to 50 uploads per hour\n  message: 'Too many file uploads, please try again later.',\n  standardHeaders: true,\n  legacyHeaders: false,\n  handler: rateLimitHandler,\n});\n\n// Helmet configuration\nexport const helmetConfig = helmet({\n  contentSecurityPolicy: {\n    directives: {\n      defaultSrc: [\"'self'\"],\n      styleSrc: [\"'self'\", \"'unsafe-inline'\"], // Allow inline styles for tRPC panel\n      // Allow inline scripts only in development (for tRPC panel)\n      // In production, keep strict CSP without unsafe-inline\n      scriptSrc: isDevelopment \n        ? [\"'self'\", \"'unsafe-inline'\"] \n        : [\"'self'\"],\n      imgSrc: [\"'self'\", \"data:\", \"https:\"], // Allow images from any HTTPS source\n      connectSrc: [\"'self'\", \"https://*.sentry.io\"], // Allow Sentry connections\n      fontSrc: [\"'self'\", \"data:\"],\n      objectSrc: [\"'none'\"],\n      mediaSrc: [\"'self'\"],\n      frameSrc: [\"'none'\"],\n    },\n  },\n  crossOriginEmbedderPolicy: false, // Disable if you need to embed resources\n  hsts: {\n    maxAge: 31536000, // 1 year\n    includeSubDomains: true,\n    preload: true,\n  },\n});"],"names":[],"mappings":";;AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAG3C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC;AAE7D,yDAAyD;AACzD,uDAAuD;AACvD,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IACvD,kEAAkE;IAClE,6EAA6E;IAC7E,qGAAqG;IACrG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,4CAA4C;KACtD,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,mDAAmD;AACnD,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;IACtC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;IACvC,GAAG,EAAE,GAAG,EAAE,6CAA6C;IACvD,OAAO,EAAE,yDAAyD;IAClE,eAAe,EAAE,IAAI,EAAE,sDAAsD;IAC7E,aAAa,EAAE,KAAK,EAAE,sCAAsC;IAC5D,OAAO,EAAE,gBAAgB;IACzB,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;QACZ,uCAAuC;QACvC,OAAO,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;IAC5D,CAAC;CACF,CAAC,CAAC;AAEH,qDAAqD;AACrD,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC;IACnC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,YAAY;IACrC,GAAG,EAAE,CAAC,EAAE,iDAAiD;IACzD,OAAO,EAAE,2DAA2D;IACpE,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,KAAK;IACpB,sBAAsB,EAAE,IAAI,EAAE,kCAAkC;IAChE,OAAO,EAAE,gBAAgB;CAC1B,CAAC,CAAC;AAEH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;IACrC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;IACvC,GAAG,EAAE,EAAE,EAAE,uCAAuC;IAChD,OAAO,EAAE,gDAAgD;IACzD,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,KAAK;IACpB,OAAO,EAAE,gBAAgB;CAC1B,CAAC,CAAC;AAEH,uBAAuB;AACvB,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;IACjC,qBAAqB,EAAE;QACrB,UAAU,EAAE;YACV,UAAU,EAAE,CAAC,QAAQ,CAAC;YACtB,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,qCAAqC;YAC9E,4DAA4D;YAC5D,uDAAuD;YACvD,SAAS,EAAE,aAAa;gBACtB,CAAC,CAAC,CAAC,QAAQ,EAAE,iBAAiB,CAAC;gBAC/B,CAAC,CAAC,CAAC,QAAQ,CAAC;YACd,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,qCAAqC;YAC5E,UAAU,EAAE,CAAC,QAAQ,EAAE,qBAAqB,CAAC,EAAE,2BAA2B;YAC1E,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC5B,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,QAAQ,EAAE,CAAC,QAAQ,CAAC;YACpB,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;KACF;IACD,yBAAyB,EAAE,KAAK,EAAE,yCAAyC;IAC3E,IAAI,EAAE;QACJ,MAAM,EAAE,QAAQ,EAAE,SAAS;QAC3B,iBAAiB,EAAE,IAAI;QACvB,OAAO,EAAE,IAAI;KACd;CACF,CAAC,CAAC","debug_id":"e27a3dc9-6e2a-5b94-b404-01bf23ea1d5f"}
+{"version":3,"file":"security.js","sources":["middleware/security.ts"],"sourceRoot":"/","sourcesContent":["import helmet from 'helmet';\nimport rateLimit from 'express-rate-limit';\nimport type { Request, Response } from 'express';\n\nconst isDevelopment = process.env.NODE_ENV === 'development';\n\n// Custom handler for rate limit errors that returns JSON\n// This format can be intercepted on the frontend with:\n// error.data?.code === 'TOO_MANY_REQUESTS' || error.data?.httpStatus === 429\nconst rateLimitHandler = (req: Request, res: Response) => {\n  // Return JSON structure that can be intercepted on frontend with:\n  // error.data?.code === 'TOO_MANY_REQUESTS' || error.data?.httpStatus === 429\n  // When tRPC wraps this, the response body becomes error.data, so we put code/httpStatus at top level\n  res.status(429).json({\n    code: 'TOO_MANY_REQUESTS',\n    message: 'Too many requests, please try again later.',\n  });\n};\n\n// General API rate limiter - applies to all routes\nexport const generalLimiter = rateLimit({\n  windowMs: 10 * 60 * 1000, // 10 minutes\n  max: 1000, // Limit each IP to 100 requests per windowMs\n  message: 'Too many requests from this IP, please try again later.',\n  standardHeaders: true, // Return rate limit info in the `RateLimit-*` headers\n  legacyHeaders: false, // Disable the `X-RateLimit-*` headers\n  handler: rateLimitHandler,\n  skip: (req) => {\n    // Skip rate limiting for health checks\n    return req.path === '/health' || req.method === 'OPTIONS';\n  },\n});\n\n// Stricter rate limiter for authentication endpoints\nexport const authLimiter = rateLimit({\n  windowMs: 5 * 60 * 1000, // 5 minutes\n  max: 5, // Limit each IP to 5 login attempts per windowMs\n  message: 'Too many authentication attempts, please try again later.',\n  standardHeaders: true,\n  legacyHeaders: false,\n  skipSuccessfulRequests: true, // Don't count successful requests\n  handler: rateLimitHandler,\n});\n\n// File upload rate limiter\nexport const uploadLimiter = rateLimit({\n  windowMs: 30 * 60 * 1000, // 30 minutes\n  max: 50, // Limit each IP to 50 uploads per hour\n  message: 'Too many file uploads, please try again later.',\n  standardHeaders: true,\n  legacyHeaders: false,\n  handler: rateLimitHandler,\n});\n\n// Helmet configuration\nexport const helmetConfig = helmet({\n  contentSecurityPolicy: {\n    directives: {\n      defaultSrc: [\"'self'\"],\n      styleSrc: [\"'self'\", \"'unsafe-inline'\"], // Allow inline styles for tRPC panel\n      // Allow inline scripts only in development (for tRPC panel)\n      // In production, keep strict CSP without unsafe-inline\n      scriptSrc: isDevelopment \n        ? [\"'self'\", \"'unsafe-inline'\"] \n        : [\"'self'\"],\n      imgSrc: [\"'self'\", \"data:\", \"https:\"], // Allow images from any HTTPS source\n      connectSrc: [\"'self'\", \"https://*.sentry.io\"], // Allow Sentry connections\n      fontSrc: [\"'self'\", \"data:\"],\n      objectSrc: [\"'none'\"],\n      mediaSrc: [\"'self'\"],\n      frameSrc: [\"'none'\"],\n    },\n  },\n  crossOriginEmbedderPolicy: false, // Disable if you need to embed resources\n  hsts: {\n    maxAge: 31536000, // 1 year\n    includeSubDomains: true,\n    preload: true,\n  },\n});"],"names":[],"mappings":";;AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAG3C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC;AAE7D,yDAAyD;AACzD,uDAAuD;AACvD,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IACvD,kEAAkE;IAClE,6EAA6E;IAC7E,qGAAqG;IACrG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,4CAA4C;KACtD,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,mDAAmD;AACnD,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;IACtC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;IACvC,GAAG,EAAE,IAAI,EAAE,6CAA6C;IACxD,OAAO,EAAE,yDAAyD;IAClE,eAAe,EAAE,IAAI,EAAE,sDAAsD;IAC7E,aAAa,EAAE,KAAK,EAAE,sCAAsC;IAC5D,OAAO,EAAE,gBAAgB;IACzB,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;QACZ,uCAAuC;QACvC,OAAO,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;IAC5D,CAAC;CACF,CAAC,CAAC;AAEH,qDAAqD;AACrD,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC;IACnC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,YAAY;IACrC,GAAG,EAAE,CAAC,EAAE,iDAAiD;IACzD,OAAO,EAAE,2DAA2D;IACpE,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,KAAK;IACpB,sBAAsB,EAAE,IAAI,EAAE,kCAAkC;IAChE,OAAO,EAAE,gBAAgB;CAC1B,CAAC,CAAC;AAEH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;IACrC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;IACvC,GAAG,EAAE,EAAE,EAAE,uCAAuC;IAChD,OAAO,EAAE,gDAAgD;IACzD,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,KAAK;IACpB,OAAO,EAAE,gBAAgB;CAC1B,CAAC,CAAC;AAEH,uBAAuB;AACvB,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;IACjC,qBAAqB,EAAE;QACrB,UAAU,EAAE;YACV,UAAU,EAAE,CAAC,QAAQ,CAAC;YACtB,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,qCAAqC;YAC9E,4DAA4D;YAC5D,uDAAuD;YACvD,SAAS,EAAE,aAAa;gBACtB,CAAC,CAAC,CAAC,QAAQ,EAAE,iBAAiB,CAAC;gBAC/B,CAAC,CAAC,CAAC,QAAQ,CAAC;YACd,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,qCAAqC;YAC5E,UAAU,EAAE,CAAC,QAAQ,EAAE,qBAAqB,CAAC,EAAE,2BAA2B;YAC1E,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC5B,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,QAAQ,EAAE,CAAC,QAAQ,CAAC;YACpB,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;KACF;IACD,yBAAyB,EAAE,KAAK,EAAE,yCAAyC;IAC3E,IAAI,EAAE;QACJ,MAAM,EAAE,QAAQ,EAAE,SAAS;QAC3B,iBAAiB,EAAE,IAAI;QACvB,OAAO,EAAE,IAAI;KACd;CACF,CAAC,CAAC","debug_id":"47d2d7ec-bf41-5da8-a7f7-78b133efc204"}

package/dist/models/agenda.d.ts

@@ -14,8 +14,8 @@ export declare function findPersonalEvents(userId: string, rangeStart: Date, ran
         type: import(".prisma/client").$Enums.AssignmentType;
         id: string;
         createdAt: Date | null;
-        modifiedAt: Date | null;
         classId: string;
+        modifiedAt: Date | null;
         title: string;
         instructions: string;
         dueDate: Date;
@@ -63,8 +63,8 @@ export declare function findClassEvents(userId: string, rangeStart: Date, rangeE
         type: import(".prisma/client").$Enums.AssignmentType;
         id: string;
         createdAt: Date | null;
-        modifiedAt: Date | null;
         classId: string;
+        modifiedAt: Date | null;
         title: string;
         instructions: string;
         dueDate: Date;

package/dist/models/announcement.d.ts

@@ -138,8 +138,8 @@ export declare function findAnnouncementWithClass(id: string): import(".prisma/c
 } & {
     id: string;
     createdAt: Date;
-    modifiedAt: Date | null;
     classId: string;
+    modifiedAt: Date | null;
     teacherId: string;
     remarks: string;
 }) | null, null, import("@prisma/client/runtime/library.js").DefaultArgs, {
@@ -261,8 +261,8 @@ export declare function updateAnnouncement(id: string, data: {
 export declare function deleteAnnouncement(id: string): import(".prisma/client").Prisma.Prisma__AnnouncementClient<{
     id: string;
     createdAt: Date;
-    modifiedAt: Date | null;
     classId: string;
+    modifiedAt: Date | null;
     teacherId: string;
     remarks: string;
 }, never, import("@prisma/client/runtime/library.js").DefaultArgs, {

package/dist/models/assignment.d.ts

@@ -3,8 +3,8 @@ export declare function findAssignmentById(id: string): import(".prisma/client")
     type: import(".prisma/client").$Enums.AssignmentType;
     id: string;
     createdAt: Date | null;
-    modifiedAt: Date | null;
     classId: string;
+    modifiedAt: Date | null;
     title: string;
     instructions: string;
     dueDate: Date;
@@ -85,8 +85,8 @@ export declare function findAssignmentWithDetails(id: string): import(".prisma/c
     type: import(".prisma/client").$Enums.AssignmentType;
     id: string;
     createdAt: Date | null;
-    modifiedAt: Date | null;
     classId: string;
+    modifiedAt: Date | null;
     title: string;
     instructions: string;
     dueDate: Date;
@@ -123,6 +123,7 @@ export declare function findAssignmentForDelete(id: string, teacherId: string):
                 name: string;
                 id: string;
                 userId: string | null;
+                folderId: string | null;
                 size: number | null;
                 uploadedAt: Date | null;
                 uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -139,7 +140,6 @@ export declare function findAssignmentForDelete(id: string, teacherId: string):
                 submissionId: string | null;
                 annotationId: string | null;
                 classDraftId: string | null;
-                folderId: string | null;
                 conversationId: string | null;
                 messageId: string | null;
                 announcementId: string | null;
@@ -151,6 +151,7 @@ export declare function findAssignmentForDelete(id: string, teacherId: string):
             name: string;
             id: string;
             userId: string | null;
+            folderId: string | null;
             size: number | null;
             uploadedAt: Date | null;
             uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -167,7 +168,6 @@ export declare function findAssignmentForDelete(id: string, teacherId: string):
             submissionId: string | null;
             annotationId: string | null;
             classDraftId: string | null;
-            folderId: string | null;
             conversationId: string | null;
             messageId: string | null;
             announcementId: string | null;
@@ -180,6 +180,7 @@ export declare function findAssignmentForDelete(id: string, teacherId: string):
                 name: string;
                 id: string;
                 userId: string | null;
+                folderId: string | null;
                 size: number | null;
                 uploadedAt: Date | null;
                 uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -196,7 +197,6 @@ export declare function findAssignmentForDelete(id: string, teacherId: string):
                 submissionId: string | null;
                 annotationId: string | null;
                 classDraftId: string | null;
-                folderId: string | null;
                 conversationId: string | null;
                 messageId: string | null;
                 announcementId: string | null;
@@ -208,6 +208,7 @@ export declare function findAssignmentForDelete(id: string, teacherId: string):
             name: string;
             id: string;
             userId: string | null;
+            folderId: string | null;
             size: number | null;
             uploadedAt: Date | null;
             uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -224,7 +225,6 @@ export declare function findAssignmentForDelete(id: string, teacherId: string):
             submissionId: string | null;
             annotationId: string | null;
             classDraftId: string | null;
-            folderId: string | null;
             conversationId: string | null;
             messageId: string | null;
             announcementId: string | null;
@@ -254,6 +254,7 @@ export declare function findAssignmentForDelete(id: string, teacherId: string):
             name: string;
             id: string;
             userId: string | null;
+            folderId: string | null;
             size: number | null;
             uploadedAt: Date | null;
             uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -270,7 +271,6 @@ export declare function findAssignmentForDelete(id: string, teacherId: string):
             submissionId: string | null;
             annotationId: string | null;
             classDraftId: string | null;
-            folderId: string | null;
             conversationId: string | null;
             messageId: string | null;
             announcementId: string | null;
@@ -282,6 +282,7 @@ export declare function findAssignmentForDelete(id: string, teacherId: string):
         name: string;
         id: string;
         userId: string | null;
+        folderId: string | null;
         size: number | null;
         uploadedAt: Date | null;
         uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -298,7 +299,6 @@ export declare function findAssignmentForDelete(id: string, teacherId: string):
         submissionId: string | null;
         annotationId: string | null;
         classDraftId: string | null;
-        folderId: string | null;
         conversationId: string | null;
         messageId: string | null;
         announcementId: string | null;
@@ -308,8 +308,8 @@ export declare function findAssignmentForDelete(id: string, teacherId: string):
     type: import(".prisma/client").$Enums.AssignmentType;
     id: string;
     createdAt: Date | null;
-    modifiedAt: Date | null;
     classId: string;
+    modifiedAt: Date | null;
     title: string;
     instructions: string;
     dueDate: Date;
@@ -378,8 +378,8 @@ export declare function findSubmissionByAssignmentAndStudent(assignmentId: strin
         type: import(".prisma/client").$Enums.AssignmentType;
         id: string;
         createdAt: Date | null;
-        modifiedAt: Date | null;
         classId: string;
+        modifiedAt: Date | null;
         title: string;
         instructions: string;
         dueDate: Date;
@@ -406,6 +406,7 @@ export declare function findSubmissionByAssignmentAndStudent(assignmentId: strin
         name: string;
         id: string;
         userId: string | null;
+        folderId: string | null;
         size: number | null;
         uploadedAt: Date | null;
         uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -422,7 +423,6 @@ export declare function findSubmissionByAssignmentAndStudent(assignmentId: strin
         submissionId: string | null;
         annotationId: string | null;
         classDraftId: string | null;
-        folderId: string | null;
         conversationId: string | null;
         messageId: string | null;
         announcementId: string | null;
@@ -434,6 +434,7 @@ export declare function findSubmissionByAssignmentAndStudent(assignmentId: strin
         name: string;
         id: string;
         userId: string | null;
+        folderId: string | null;
         size: number | null;
         uploadedAt: Date | null;
         uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -450,7 +451,6 @@ export declare function findSubmissionByAssignmentAndStudent(assignmentId: strin
         submissionId: string | null;
         annotationId: string | null;
         classDraftId: string | null;
-        folderId: string | null;
         conversationId: string | null;
         messageId: string | null;
         announcementId: string | null;
@@ -524,8 +524,8 @@ export declare function findSubmissionByIdForClassMember(submissionId: string, c
         type: import(".prisma/client").$Enums.AssignmentType;
         id: string;
         createdAt: Date | null;
-        modifiedAt: Date | null;
         classId: string;
+        modifiedAt: Date | null;
         title: string;
         instructions: string;
         dueDate: Date;
@@ -552,6 +552,7 @@ export declare function findSubmissionByIdForClassMember(submissionId: string, c
         name: string;
         id: string;
         userId: string | null;
+        folderId: string | null;
         size: number | null;
         uploadedAt: Date | null;
         uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -568,7 +569,6 @@ export declare function findSubmissionByIdForClassMember(submissionId: string, c
         submissionId: string | null;
         annotationId: string | null;
         classDraftId: string | null;
-        folderId: string | null;
         conversationId: string | null;
         messageId: string | null;
         announcementId: string | null;
@@ -580,6 +580,7 @@ export declare function findSubmissionByIdForClassMember(submissionId: string, c
         name: string;
         id: string;
         userId: string | null;
+        folderId: string | null;
         size: number | null;
         uploadedAt: Date | null;
         uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -596,7 +597,6 @@ export declare function findSubmissionByIdForClassMember(submissionId: string, c
         submissionId: string | null;
         annotationId: string | null;
         classDraftId: string | null;
-        folderId: string | null;
         conversationId: string | null;
         messageId: string | null;
         announcementId: string | null;
@@ -666,8 +666,8 @@ export declare function findSubmissionForUpdate(submissionId: string, userId: st
         type: import(".prisma/client").$Enums.AssignmentType;
         id: string;
         createdAt: Date | null;
-        modifiedAt: Date | null;
         classId: string;
+        modifiedAt: Date | null;
         title: string;
         instructions: string;
         dueDate: Date;
@@ -695,6 +695,7 @@ export declare function findSubmissionForUpdate(submissionId: string, userId: st
             name: string;
             id: string;
             userId: string | null;
+            folderId: string | null;
             size: number | null;
             uploadedAt: Date | null;
             uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -711,7 +712,6 @@ export declare function findSubmissionForUpdate(submissionId: string, userId: st
             submissionId: string | null;
             annotationId: string | null;
             classDraftId: string | null;
-            folderId: string | null;
             conversationId: string | null;
             messageId: string | null;
             announcementId: string | null;
@@ -723,6 +723,7 @@ export declare function findSubmissionForUpdate(submissionId: string, userId: st
         name: string;
         id: string;
         userId: string | null;
+        folderId: string | null;
         size: number | null;
         uploadedAt: Date | null;
         uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -739,7 +740,6 @@ export declare function findSubmissionForUpdate(submissionId: string, userId: st
         submissionId: string | null;
         annotationId: string | null;
         classDraftId: string | null;
-        folderId: string | null;
         conversationId: string | null;
         messageId: string | null;
         announcementId: string | null;
@@ -797,8 +797,8 @@ export declare function createSubmission(assignmentId: string, studentId: string
         type: import(".prisma/client").$Enums.AssignmentType;
         id: string;
         createdAt: Date | null;
-        modifiedAt: Date | null;
         classId: string;
+        modifiedAt: Date | null;
         title: string;
         instructions: string;
         dueDate: Date;
@@ -825,6 +825,7 @@ export declare function createSubmission(assignmentId: string, studentId: string
         name: string;
         id: string;
         userId: string | null;
+        folderId: string | null;
         size: number | null;
         uploadedAt: Date | null;
         uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -841,7 +842,6 @@ export declare function createSubmission(assignmentId: string, studentId: string
         submissionId: string | null;
         annotationId: string | null;
         classDraftId: string | null;
-        folderId: string | null;
         conversationId: string | null;
         messageId: string | null;
         announcementId: string | null;
@@ -853,6 +853,7 @@ export declare function createSubmission(assignmentId: string, studentId: string
         name: string;
         id: string;
         userId: string | null;
+        folderId: string | null;
         size: number | null;
         uploadedAt: Date | null;
         uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -869,7 +870,6 @@ export declare function createSubmission(assignmentId: string, studentId: string
         submissionId: string | null;
         annotationId: string | null;
         classDraftId: string | null;
-        folderId: string | null;
         conversationId: string | null;
         messageId: string | null;
         announcementId: string | null;
@@ -923,8 +923,8 @@ export declare function findAssignmentWithClassForTeacher(assignmentId: string,
     type: import(".prisma/client").$Enums.AssignmentType;
     id: string;
     createdAt: Date | null;
-    modifiedAt: Date | null;
     classId: string;
+    modifiedAt: Date | null;
     title: string;
     instructions: string;
     dueDate: Date;
@@ -961,8 +961,8 @@ export declare function duplicateAssignment(sourceAssignmentId: string, targetCl
     type: import(".prisma/client").$Enums.AssignmentType;
     id: string;
     createdAt: Date | null;
-    modifiedAt: Date | null;
     classId: string;
+    modifiedAt: Date | null;
     title: string;
     instructions: string;
     dueDate: Date;
@@ -1008,8 +1008,8 @@ export declare function findSubmissionsByAssignmentForTeacher(assignmentId: stri
         type: import(".prisma/client").$Enums.AssignmentType;
         id: string;
         createdAt: Date | null;
-        modifiedAt: Date | null;
         classId: string;
+        modifiedAt: Date | null;
         title: string;
         instructions: string;
         dueDate: Date;
@@ -1037,6 +1037,7 @@ export declare function findSubmissionsByAssignmentForTeacher(assignmentId: stri
             name: string;
             id: string;
             userId: string | null;
+            folderId: string | null;
             size: number | null;
             uploadedAt: Date | null;
             uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -1053,7 +1054,6 @@ export declare function findSubmissionsByAssignmentForTeacher(assignmentId: stri
             submissionId: string | null;
             annotationId: string | null;
             classDraftId: string | null;
-            folderId: string | null;
             conversationId: string | null;
             messageId: string | null;
             announcementId: string | null;
@@ -1065,6 +1065,7 @@ export declare function findSubmissionsByAssignmentForTeacher(assignmentId: stri
         name: string;
         id: string;
         userId: string | null;
+        folderId: string | null;
         size: number | null;
         uploadedAt: Date | null;
         uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -1081,7 +1082,6 @@ export declare function findSubmissionsByAssignmentForTeacher(assignmentId: stri
         submissionId: string | null;
         annotationId: string | null;
         classDraftId: string | null;
-        folderId: string | null;
         conversationId: string | null;
         messageId: string | null;
         announcementId: string | null;
@@ -1138,8 +1138,8 @@ export declare function findSubmissionForTeacherUpdate(submissionId: string, tea
         type: import(".prisma/client").$Enums.AssignmentType;
         id: string;
         createdAt: Date | null;
-        modifiedAt: Date | null;
         classId: string;
+        modifiedAt: Date | null;
         title: string;
         instructions: string;
         dueDate: Date;
@@ -1167,6 +1167,7 @@ export declare function findSubmissionForTeacherUpdate(submissionId: string, tea
             name: string;
             id: string;
             userId: string | null;
+            folderId: string | null;
             size: number | null;
             uploadedAt: Date | null;
             uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -1183,7 +1184,6 @@ export declare function findSubmissionForTeacherUpdate(submissionId: string, tea
             submissionId: string | null;
             annotationId: string | null;
             classDraftId: string | null;
-            folderId: string | null;
             conversationId: string | null;
             messageId: string | null;
             announcementId: string | null;
@@ -1195,6 +1195,7 @@ export declare function findSubmissionForTeacherUpdate(submissionId: string, tea
         name: string;
         id: string;
         userId: string | null;
+        folderId: string | null;
         size: number | null;
         uploadedAt: Date | null;
         uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -1211,7 +1212,6 @@ export declare function findSubmissionForTeacherUpdate(submissionId: string, tea
         submissionId: string | null;
         annotationId: string | null;
         classDraftId: string | null;
-        folderId: string | null;
         conversationId: string | null;
         messageId: string | null;
         announcementId: string | null;
@@ -1224,6 +1224,7 @@ export declare function findSubmissionForTeacherUpdate(submissionId: string, tea
             name: string;
             id: string;
             userId: string | null;
+            folderId: string | null;
             size: number | null;
             uploadedAt: Date | null;
             uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -1240,7 +1241,6 @@ export declare function findSubmissionForTeacherUpdate(submissionId: string, tea
             submissionId: string | null;
             annotationId: string | null;
             classDraftId: string | null;
-            folderId: string | null;
             conversationId: string | null;
             messageId: string | null;
             announcementId: string | null;
@@ -1252,6 +1252,7 @@ export declare function findSubmissionForTeacherUpdate(submissionId: string, tea
         name: string;
         id: string;
         userId: string | null;
+        folderId: string | null;
         size: number | null;
         uploadedAt: Date | null;
         uploadStatus: import(".prisma/client").$Enums.UploadStatus;
@@ -1268,7 +1269,6 @@ export declare function findSubmissionForTeacherUpdate(submissionId: string, tea
         submissionId: string | null;
         annotationId: string | null;
         classDraftId: string | null;
-        folderId: string | null;
         conversationId: string | null;
         messageId: string | null;
         announcementId: string | null;
@@ -1333,8 +1333,8 @@ export declare function attachAssignmentToEvent(assignmentId: string, eventId: s
     type: import(".prisma/client").$Enums.AssignmentType;
     id: string;
     createdAt: Date | null;
-    modifiedAt: Date | null;
     classId: string;
+    modifiedAt: Date | null;
     title: string;
     instructions: string;
     dueDate: Date;
@@ -1387,8 +1387,8 @@ export declare function detachAssignmentFromEvent(assignmentId: string): import(
     type: import(".prisma/client").$Enums.AssignmentType;
     id: string;
     createdAt: Date | null;
-    modifiedAt: Date | null;
     classId: string;
+    modifiedAt: Date | null;
     title: string;
     instructions: string;
     dueDate: Date;

package/dist/models/class.d.ts

@@ -336,8 +336,8 @@ export declare function findLabDraftsByClass(classId: string, teacherId: string)
     type: import(".prisma/client").$Enums.AssignmentType;
     id: string;
     createdAt: Date | null;
-    modifiedAt: Date | null;
     classId: string;
+    modifiedAt: Date | null;
     title: string;
     instructions: string;
     dueDate: Date;
@@ -429,8 +429,8 @@ export declare function findAssignmentsWithFiles(classId: string): import(".pris
     type: import(".prisma/client").$Enums.AssignmentType;
     id: string;
     createdAt: Date | null;
-    modifiedAt: Date | null;
     classId: string;
+    modifiedAt: Date | null;
     title: string;
     instructions: string;
     dueDate: Date;

package/dist/models/cloudStorage.d.ts

@@ -133,7 +133,20 @@ export declare function renameFolder(folderId: string, name: string, color?: str
         };
     };
 }>;
-export declare function listFolderBreadcrumbs(folderId: string): Promise<{
+/**
+ * Build the breadcrumb chain for a folder.
+ *
+ * Without `viewerId`: walks all the way up to the scope root (owner-style
+ * view).
+ *
+ * With `viewerId`: walks up but stops at the highest folder the viewer is
+ * actually granted on, OR at the scope root if the viewer is a scope member.
+ * This is the Drive-style "Shared with me" behavior — a grantee never sees
+ * ancestor folders they weren't shared on. The result for a grantee browsing
+ * `Owner/PrivateA/SharedB/C` (granted on B) reads `SharedB / C` — the ancestor
+ * `PrivateA` is correctly hidden.
+ */
+export declare function listFolderBreadcrumbs(folderId: string, viewerId?: string): Promise<{
     id: string;
     name: string;
 }[]>;

package/dist/models/cloudStorage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudStorage.d.ts","sourceRoot":"/","sources":["models/cloudStorage.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAazC,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,UAAU;;;;;;;;;GAqD5D;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAmB5B;AAmBD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgBtD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;;;;;;;;;;;;;;;GASA;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM;;;;;;;;;;;;;;;GAK9C;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM;;;;;;;;;;;;;;;GAEhD;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;GAS1E;AAED,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM;QACjC,MAAM;UAAQ,MAAM;KAc9C"}
+{"version":3,"file":"cloudStorage.d.ts","sourceRoot":"/","sources":["models/cloudStorage.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAazC,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,UAAU;;;;;;;;;GAqD5D;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAmB5B;AAmBD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgBtD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;;;;;;;;;;;;;;;GASA;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM;;;;;;;;;;;;;;;GAK9C;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM;;;;;;;;;;;;;;;GAEhD;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;GAS1E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM;QAEQ,MAAM;UAAQ,MAAM;KAmI9C"}