Labs - Quizzes - Assignment student Dashboard still under work

COMPLETE_API_ENDPOINTS.md

@@ -1,317 +0,0 @@
-# 📊 EduVerse Backend - Complete API Endpoints Summary
-
-## AUTH MODULE - api/auth (Public + Protected)
-POST   /api/auth/register              - Register new user
-POST   /api/auth/login                 - User login
-POST   /api/auth/logout                - Logout (JWT required)
-POST   /api/auth/refresh-token         - Refresh access token
-POST   /api/auth/forgot-password       - Request password reset
-POST   /api/auth/reset-password        - Reset with token
-GET    /api/auth/me                    - Get current user profile
-GET    /api/admin/users                - List users (ADMIN)
-POST   /api/admin/users                - Create user (ADMIN)
-GET    /api/admin/users/:id            - Get user details (ADMIN)
-PATCH  /api/admin/users/:id            - Update user (ADMIN)
-DELETE /api/admin/users/:id            - Delete user (ADMIN)
-POST   /api/admin/users/:id/roles      - Assign roles (ADMIN)
-
-## COURSES MODULE - api/courses
-GET    /api/courses                    - List all courses
-GET    /api/courses/department/:deptId - Courses by department
-GET    /api/courses/:id                - Get course details
-POST   /api/courses                    - Create course (INSTRUCTOR/ADMIN)
-PATCH  /api/courses/:id                - Update course
-DELETE /api/courses/:id                - Delete course
-GET    /api/sections                   - List sections
-POST   /api/sections                   - Create section
-GET    /api/sections/:id               - Get section details
-PATCH  /api/sections/:id               - Update section
-DELETE /api/sections/:id               - Delete section
-GET    /api/schedules                  - List schedules
-POST   /api/schedules                  - Create schedule
-GET    /api/schedules/:id              - Get schedule
-
-## ENROLLMENTS MODULE - api/enrollments (JWT + Role-based)
-GET    /api/enrollments/my-courses     - Get student's enrolled courses (STUDENT)
-GET    /api/enrollments/available      - Get available courses to enroll (STUDENT)
-POST   /api/enrollments                - Enroll in course (STUDENT)
-DELETE /api/enrollments/:enrollmentId  - Drop course (STUDENT)
-GET    /api/enrollments/:courseId      - List course enrollments (INSTRUCTOR/ADMIN)
-PATCH  /api/enrollments/:id            - Update enrollment (ADMIN)
-
-## ASSIGNMENTS MODULE - api/assignments (JWT + Role-based)
-GET    /api/assignments                - List assignments (paginated, filtered)
-POST   /api/assignments                - Create assignment (INSTRUCTOR/ADMIN)
-GET    /api/assignments/:id            - Get assignment with submissions
-PATCH  /api/assignments/:id            - Update assignment
-DELETE /api/assignments/:id            - Delete assignment
-POST   /api/assignments/:id/submit     - Submit assignment (STUDENT)
-POST   /api/assignments/:submissionId/grade - Grade submission (INSTRUCTOR/ADMIN)
-GET    /api/assignments/:id/submissions - List all submissions
-
-## QUIZZES MODULE - quizzes (JWT + Role-based)
-POST   /quizzes                        - Create quiz (INSTRUCTOR/TA/ADMIN)
-GET    /quizzes                        - List quizzes
-GET    /quizzes/:quizId                - Get quiz details
-PATCH  /quizzes/:quizId                - Update quiz
-DELETE /quizzes/:quizId                - Delete quiz
-POST   /quizzes/:quizId/start          - Start quiz attempt (STUDENT)
-POST   /quizzes/:quizId/submit         - Submit quiz answers
-GET    /quizzes/:quizId/results/:attemptId - Get attempt results
-GET    /quizzes/:quizId/statistics     - Quiz statistics (INSTRUCTOR)
-POST   /quizzes/:quizId/questions      - Add question
-PATCH  /quizzes/:quizId/questions/:qId - Update question
-DELETE /quizzes/:quizId/questions/:qId - Delete question
-
-## GRADES MODULE - api/grades (JWT + Role-based)
-GET    /api/grades                     - List grades (INSTRUCTOR/TA/ADMIN)
-GET    /api/grades/my                  - Get my grades (STUDENT)
-GET    /api/grades/transcript/:studentId - Get transcript
-GET    /api/grades/gpa/:studentId      - Calculate GPA
-GET    /api/grades/distribution/:courseId - Grade distribution
-PUT    /api/grades/:id                 - Update grade
-POST   /api/grades                     - Create grade (INSTRUCTOR/ADMIN)
-GET    /api/rubrics                    - List rubrics
-POST   /api/rubrics                    - Create rubric
-GET    /api/rubrics/:id                - Get rubric
-PATCH  /api/rubrics/:id                - Update rubric
-DELETE /api/rubrics/:id                - Delete rubric
-
-## ATTENDANCE MODULE - attendance (JWT + Role-based)
-POST   /attendance/sessions            - Create session (INSTRUCTOR)
-PATCH  /attendance/sessions/:id        - Update session
-GET    /attendance/sessions/:sessionId - Get session records
-POST   /attendance/mark               - Mark attendance (INSTRUCTOR/SYSTEM)
-POST   /attendance/batch              - Batch mark attendance
-GET    /attendance/summary/:courseId  - Attendance summary
-POST   /attendance/import             - Import from Excel
-GET    /attendance/student/:studentId - Student attendance
-
-## LABS MODULE - api/labs (JWT + Role-based)
-GET    /api/labs                       - List labs
-POST   /api/labs                       - Create lab (INSTRUCTOR/ADMIN)
-GET    /api/labs/:id                   - Get lab details
-PATCH  /api/labs/:id                   - Update lab
-DELETE /api/labs/:id                   - Delete lab
-POST   /api/labs/:id/submit            - Submit lab (STUDENT)
-GET    /api/labs/:id/submissions       - List submissions
-POST   /api/labs/:submissionId/grade   - Grade submission
-
-## ANNOUNCEMENTS MODULE - api/announcements (JWT + Role-based)
-GET    /api/announcements              - List announcements
-POST   /api/announcements              - Create announcement (INSTRUCTOR/ADMIN)
-GET    /api/announcements/:id          - Get announcement
-PATCH  /api/announcements/:id          - Update announcement
-DELETE /api/announcements/:id          - Delete announcement
-POST   /api/announcements/:id/schedule - Schedule announcement
-
-## DISCUSSIONS MODULE - api/discussions (JWT + Role-based)
-GET    /api/discussions                - List discussions/threads
-POST   /api/discussions                - Create thread
-GET    /api/discussions/:threadId      - Get thread with messages
-POST   /api/discussions/:threadId/message - Post message
-DELETE /api/discussions/:messageId     - Delete message
-
-## COMMUNITY MODULE - api/community* (JWT + Role-based)
-GET    /api/community                  - List communities
-POST   /api/community                  - Create community
-GET    /api/community/:id              - Get community
-PATCH  /api/community/:id              - Update community
-DELETE /api/community/:id              - Delete community
-GET    /api/community/posts            - List posts (all)
-POST   /api/community/posts            - Create post
-GET    /api/community/posts/:postId    - Get post with comments
-PATCH  /api/community/posts/:postId    - Update post
-DELETE /api/community/posts/:postId    - Delete post
-POST   /api/community/posts/:postId/upvote - Upvote post
-GET    /api/community/comments         - List comments
-POST   /api/community/comments         - Create comment
-DELETE /api/community/comments/:id     - Delete comment
-POST   /api/community/reactions        - React to post/comment
-GET    /api/community/categories       - List categories
-POST   /api/community/categories       - Create category
-PATCH  /api/community/categories/:id   - Update category
-DELETE /api/community/categories/:id   - Delete category
-
-## MESSAGING MODULE - api/messages (JWT + Role-based)
-GET    /api/messages                   - List conversations
-POST   /api/messages                   - Send message
-GET    /api/messages/:conversationId   - Get conversation
-POST   /api/messages/:messageId/reply  - Reply to message
-GET    /api/messages/search            - Search messages
-DELETE /api/messages/:messageId        - Delete message
-
-## NOTIFICATIONS MODULE - api/notifications (JWT)
-GET    /api/notifications              - Get user notifications
-POST   /api/notifications/:id/read     - Mark as read
-GET    /api/notifications/preferences  - Get preferences
-PATCH  /api/notifications/preferences  - Update preferences
-DELETE /api/notifications/:id          - Delete notification
-
-## SCHEDULE MODULE - api/schedule, api/exams/schedule, api/calendar/* (JWT + Role-based)
-GET    /api/schedule                   - Get user schedule
-GET    /api/exams/schedule             - List exam schedules
-POST   /api/exams/schedule             - Create exam schedule (INSTRUCTOR/ADMIN)
-PATCH  /api/exams/schedule/:id         - Update exam schedule
-DELETE /api/exams/schedule/:id         - Delete exam schedule
-GET    /api/calendar/events            - List calendar events
-POST   /api/calendar/events            - Create event
-PATCH  /api/calendar/events/:id        - Update event
-DELETE /api/calendar/events/:id        - Delete event
-POST   /api/calendar/integrations      - Connect calendar (Google/Outlook)
-GET    /api/calendar/integrations      - Get integration status
-
-## COURSE MATERIALS MODULE - api/courses/:courseId/materials* (JWT + Role-based)
-GET    /api/courses/:courseId/materials - List materials
-POST   /api/courses/:courseId/materials - Upload material (INSTRUCTOR)
-GET    /api/courses/:courseId/materials/:id - Get material
-PATCH  /api/courses/:courseId/materials/:id - Update material
-DELETE /api/courses/:courseId/materials/:id - Delete material
-POST   /api/courses/:courseId/materials/bulk - Bulk upload
-GET    /api/courses/:courseId/structure - Get course structure
-POST   /api/courses/:courseId/structure - Create structure
-PATCH  /api/courses/:courseId/structure/:id - Update structure
-POST   /api/courses/:courseId/structure/reorder - Reorder modules
-
-## TASKS MODULE - api/tasks (JWT + Role-based)
-GET    /api/tasks                      - List tasks (STUDENT/INSTRUCTOR)
-POST   /api/tasks                      - Create task
-GET    /api/tasks/:id                  - Get task
-PATCH  /api/tasks/:id                  - Update task
-DELETE /api/tasks/:id                  - Delete task
-POST   /api/tasks/:id/complete         - Mark complete
-GET    /api/tasks/reminders            - Get deadline reminders
-POST   /api/tasks/:id/remind           - Create reminder
-
-## REPORTS MODULE - api/reports (JWT + Role-based)
-GET    /api/reports                    - List reports
-POST   /api/reports/generate           - Generate report (INSTRUCTOR/ADMIN)
-GET    /api/reports/:id                - Get report
-DELETE /api/reports/:id                - Delete report
-POST   /api/reports/:id/export         - Export report
-
-## ANALYTICS MODULE - api/analytics (JWT + Role-based)
-GET    /api/analytics/courses/:courseId - Course analytics (INSTRUCTOR/ADMIN)
-GET    /api/analytics/students/:studentId - Student analytics (STUDENT/ADMIN)
-GET    /api/analytics/class/:courseId  - Class overview analytics
-GET    /api/analytics/dashboard        - Dashboard data
-
-## SEARCH MODULE - api/search (JWT)
-GET    /api/search                     - Global search (courses, materials, announcements)
-GET    /api/search/history             - Get search history
-DELETE /api/search/history/:id         - Delete history entry
-GET    /api/search/advanced            - Advanced search with filters
-
-## CAMPUS MODULE - api/* (JWT + Role-based)
-GET    /api/campuses                   - List campuses
-POST   /api/campuses                   - Create campus (ADMIN)
-GET    /api/campuses/:id               - Get campus
-PATCH  /api/campuses/:id               - Update campus
-DELETE /api/campuses/:id               - Delete campus
-GET    /api/departments                - List departments
-POST   /api/departments                - Create department (ADMIN)
-GET    /api/departments/:id            - Get department
-PATCH  /api/departments/:id            - Update department
-DELETE /api/departments/:id            - Delete department
-GET    /api/programs                   - List programs
-POST   /api/programs                   - Create program (ADMIN)
-GET    /api/semesters                  - List semesters
-POST   /api/semesters                  - Create semester (ADMIN)
-PATCH  /api/semesters/:id              - Update semester
-DELETE /api/semesters/:id              - Delete semester
-
-## FILES MODULE - api/files* (JWT + Role-based)
-GET    /api/files                      - List files
-POST   /api/files                      - Upload file
-GET    /api/files/:fileId              - Download file
-DELETE /api/files/:fileId              - Delete file
-GET    /api/files/:fileId/versions     - Get file versions
-POST   /api/files/:fileId/share        - Share file
-DELETE /api/files/:fileId/permissions/:userId - Revoke permission
-GET    /api/files/folders              - List folders
-POST   /api/files/folders              - Create folder
-GET    /api/files/folders/:folderId    - Get folder contents
-PATCH  /api/files/folders/:folderId    - Update folder
-DELETE /api/files/folders/:folderId    - Delete folder
-
-## YOUTUBE MODULE - youtube (JWT + Role-based)
-POST   /youtube/upload                 - Upload video to YouTube
-GET    /youtube/status/:videoId        - Get upload status
-
----
-
-## Authentication & Authorization
-
-### Public Endpoints (No JWT Required):
-- POST /api/auth/register
-- POST /api/auth/login
-- POST /api/auth/refresh-token
-- POST /api/auth/forgot-password
-- POST /api/auth/reset-password
-- GET /api/courses (list only)
-
-### Protected Endpoints (JWT Required):
-- All endpoints requiring @UseGuards(JwtAuthGuard)
-- Role-based access via @Roles() decorator
-
-### Role-Based Access Control:
-- **STUDENT**: Can access own courses, submissions, grades
-- **INSTRUCTOR**: Can create courses, assignments, quizzes; grade submissions
-- **TA**: Can manage assignments/quizzes; grade under instructor
-- **ADMIN**: Full access to all resources
-- **IT_ADMIN**: System administration
-
-### Decorators Used:
-- @UseGuards(JwtAuthGuard, RolesGuard)
-- @Roles(RoleName.STUDENT, RoleName.INSTRUCTOR, etc.)
-- @ApiBearerAuth('JWT-auth') - Swagger documentation
-- @Public() - Marks public endpoints
-
----
-
-## Common Query Parameters
-
-### Pagination:
-- **page** - Page number (default: 1)
-- **limit** - Items per page (default: 20, max: 100)
-
-### Filtering (varies by endpoint):
-- **status** - Filter by status enum
-- **departmentId** - Filter by department
-- **courseId** - Filter by course
-- **search** - Full-text search
-- **semester** - Filter by semester
-- **date range** - startDate, endDate
-
-### Sorting:
-- **sort** - Field to sort by
-- **order** - ASC or DESC
-
----
-
-## Response Format Standards
-
-### Success Response (2xx):
-\\\json
-{
-  "data": {...} or [...],
-  "message": "Success message",
-  "timestamp": "2024-01-15T10:30:00Z"
-}
-\\\
-
-### Error Response (4xx/5xx):
-\\\json
-{
-  "statusCode": 400,
-  "message": "Error description",
-  "error": "BadRequest | Unauthorized | Forbidden | NotFound",
-  "timestamp": "2024-01-15T10:30:00Z"
-}
-\\\
-
----
-
-## File Saved
-✅ Full module analysis: COMPLETE_MODULE_ANALYSIS.md
-✅ API Endpoints summary: COMPLETE_API_ENDPOINTS.md

COMPLETE_MODULE_ANALYSIS.md

@@ -1,954 +0,0 @@
-# 🏗️ EduVerse Backend - Complete NestJS Module Structure Analysis
-
-## Overview
-**Total Modules:** 23
-**Architecture:** Modular NestJS with TypeORM
-**Database:** MySQL
-**All modules registered in:** src/app.module.ts
-
----
-
-## 📋 Table of Contents
-1. [Module Registration](#module-registration)
-2. [Core Modules](#core-modules)
-3. [Academic Modules](#academic-modules)
-4. [Community & Discussion Modules](#community--discussion-modules)
-5. [Administrative Modules](#administrative-modules)
-6. [Infrastructure Modules](#infrastructure-modules)
-
----
-
-## Module Registration
-
-### All 23 modules imported in src/app.module.ts:
-- AuthModule
-- EmailModule
-- CampusModule
-- CoursesModule
-- EnrollmentsModule
-- YoutubeModule
-- FilesModule
-- AssignmentsModule
-- GradesModule
-- AttendanceModule
-- QuizzesModule
-- LabsModule
-- NotificationsModule
-- MessagingModule
-- DiscussionsModule
-- AnnouncementsModule
-- CommunityModule
-- ScheduleModule
-- CourseMaterialsModule
-- TasksModule
-- ReportsModule
-- SearchModule
-- AnalyticsModule
-
----
-
-## Core Modules
-
-### 1️⃣ AUTH MODULE (Authentication & Authorization)
-**Location:** \src/modules/auth/\
-
-#### Entities (8):
-- **User** - Primary user entity with roles, sessions
-  - Fields: userId, email, passwordHash, firstName, lastName, phone, profilePictureUrl, bio, socialLinks, campusId, status (ACTIVE/INACTIVE/SUSPENDED/PENDING), emailVerified, lastLoginAt
-  - Relationships: ManyToMany(Role), OneToMany(Session), OneToMany(PasswordReset), OneToMany(TwoFactorAuth)
-  
-- **Role** - User roles (STUDENT, INSTRUCTOR, TA, ADMIN, IT_ADMIN)
-  - Many-to-Many relationship with User
-  - Has many Permissions
-  
-- **Permission** - Fine-grained access control
-  - Linked to Roles
-  
-- **Session** - Active user sessions with tokens
-  - userId, refreshToken, userAgent, ipAddress, expiresAt
-  
-- **PasswordReset** - Password reset tokens
-  - userId, token, expiresAt
-  
-- **TwoFactorAuth** - 2FA configuration
-  - userId, secret, isEnabled, backupCodes
-  
-- **EmailVerification** - Email verification tokens
-  - userId, token, expiresAt
-  
-- **UserPreference** - User UI/notification preferences
-  - userId, theme, notifications, language
-
-#### DTOs (5):
-- **user.dto** - User profile data transfer
-- **user-response.dto** - Response format for user endpoints
-- **user-management.dto** - Admin operations
-- **register-request.dto** - Registration validation
-- **login-request.dto** - Login credentials
-- **auth-response.dto** - Auth token response
-
-#### Controllers (3):
-- **auth.controller** (@Controller('api/auth'))
-  - POST /register - Public user registration
-  - POST /login - Public login
-  - POST /logout - Logout (requires JWT)
-  - POST /refresh-token - Refresh access token
-  - POST /forgot-password - Request password reset
-  - POST /reset-password - Reset with token
-  - GET /me - Get current user profile
-  
-- **user-management.controller** (@Controller('api/admin'))
-  - User CRUD operations for admins
-  
-- **user-profile.controller** (@Controller('api/users'))
-  - Profile management endpoints
-
-#### Services (2):
-- **auth.service** - Authentication logic, JWT handling
-- **user-management.service** - User CRUD & role assignment
-
----
-
-### 2️⃣ COURSES MODULE
-**Location:** \src/modules/courses/\
-
-#### Entities (4):
-- **Course**
-  - Fields: courseId, departmentId, name, code, description, credits, level (enum), syllabusUrl, status (ACTIVE/ARCHIVED)
-  - Relationships: ManyToOne(Department), OneToMany(CoursePrerequisite), OneToMany(CourseSection)
-  
-- **CourseSection**
-  - Fields: sectionId, courseId, semesterId, sectionNumber, maxCapacity, currentEnrollment, location, status (OPEN/CLOSED/FULL)
-  - Relationships: ManyToOne(Course), ManyToOne(Semester), OneToMany(CourseSchedule)
-  
-- **CourseSchedule**
-  - Class meeting times and locations for sections
-  
-- **CoursePrerequisite**
-  - Links prerequisite courses to courses
-
-#### DTOs (4):
-- **course.dto** - Create/Update course
-- **section.dto** - Section management
-- **schedule.dto** - Schedule management
-- **prerequisite.dto** - Prerequisite relationships
-
-#### Controllers (3):
-- **courses.controller** (@Controller('api/courses'))
-  - GET / - List all courses with filters
-  - GET /department/:deptId - List courses by department
-  - GET /:id - Get course details
-  - POST / - Create course (INSTRUCTOR/ADMIN)
-  - PATCH /:id - Update course
-  - DELETE /:id - Delete course
-  
-- **course-sections.controller** (@Controller('api/sections'))
-  - GET / - List sections
-  - POST / - Create section
-  - GET /:id - Get section details
-  - PATCH /:id - Update section
-  - DELETE /:id - Delete section
-  
-- **course-schedules.controller** (@Controller('api/schedules'))
-  - Schedule management for course sections
-
-#### Services (3):
-- **courses.service** - Course CRUD & filtering
-- **course-sections.service** - Section management
-- **course-schedules.service** - Schedule management
-
----
-
-## Academic Modules
-
-### 3️⃣ ENROLLMENTS MODULE
-**Location:** \src/modules/enrollments/\
-
-#### Entities (3):
-- **CourseEnrollment**
-  - Fields: enrollmentId, userId, sectionId, programId, status (ENROLLED/DROPPED/COMPLETED), grade, finalScore
-  - Relationships: ManyToOne(User), ManyToOne(CourseSection), ManyToOne(Program)
-  
-- **CourseInstructor**
-  - Link instructors to course sections
-  
-- **CourseTA**
-  - Link teaching assistants to course sections
-
-#### DTOs (3):
-- **enrollment-response.dto**
-- **enroll-course.dto**
-- **available-courses.dto**
-- **drop-course.dto**
-
-#### Controllers (1):
-- **enrollments.controller** (@Controller('api/enrollments'))
-  - GET /my-courses - Get student's enrolled courses
-  - GET /available - Get available courses to enroll
-  - POST / - Enroll in course
-  - DELETE /:enrollmentId - Drop course
-
-#### Services (1):
-- **enrollments.service** - Enrollment CRUD & validation
-
----
-
-### 4️⃣ ASSIGNMENTS MODULE
-**Location:** \src/modules/assignments/\
-
-#### Entities (2):
-- **Assignment**
-  - Fields: assignmentId, courseId, title, description, instructions, maxScore, weight, dueDate, availableFrom, lateSubmissionAllowed, latePenaltyPercent, submissionType (FILE/TEXT/CODE), maxFileSizeMb, allowedFileTypes, status (DRAFT/PUBLISHED/CLOSED), createdBy
-  - Relationships: ManyToOne(Course), ManyToOne(User), OneToMany(AssignmentSubmission)
-  
-- **AssignmentSubmission**
-  - Student submission with files, grade, feedback
-
-#### DTOs (5):
-- **create-assignment.dto**
-- **update-assignment.dto**
-- **submit-assignment.dto**
-- **grade-submission.dto**
-- **assignment-query.dto**
-
-#### Controllers (1):
-- **assignments.controller** (@Controller('api/assignments'))
-  - GET / - List assignments with filters
-  - POST / - Create assignment (INSTRUCTOR/ADMIN)
-  - GET /:id - Get assignment details
-  - PATCH /:id - Update assignment
-  - DELETE /:id - Delete assignment
-  - POST /:id/submit - Submit assignment
-  - POST /:submissionId/grade - Grade submission
-
-#### Services (1):
-- **assignments.service** - CRUD & grading
-
----
-
-### 5️⃣ QUIZZES MODULE
-**Location:** \src/modules/quizzes/\
-
-#### Entities (5):
-- **Quiz**
-  - Fields: quizId, courseId, title, description, instructions, quizType (GRADED/PRACTICE), timeLimitMinutes, maxAttempts, passingScore, randomizeQuestions, showCorrectAnswers, showAnswersAfter (enum), availableFrom, availableUntil, weight, createdBy
-  - Relationships: ManyToOne(Course), ManyToOne(User), OneToMany(QuizQuestion), OneToMany(QuizAttempt)
-  
-- **QuizQuestion**
-  - Different question types with options and correct answers
-  
-- **QuizAttempt**
-  - Student quiz attempt with start/end times, score
-  
-- **QuizAnswer**
-  - Individual answers to questions
-  
-- **QuizDifficultyLevel**
-  - Question difficulty tracking
-
-#### DTOs (10):
-- **create-quiz.dto**, **update-quiz.dto**
-- **create-question.dto**, **update-question.dto**
-- **start-attempt.dto**, **submit-quiz.dto**
-- **quiz-query.dto**, **quiz-results.dto**
-- **manual-grade.dto**, **reorder-questions.dto**
-
-#### Controllers (1):
-- **quizzes.controller** (@Controller('quizzes'))
-  - POST / - Create quiz (INSTRUCTOR/TA/ADMIN)
-  - GET / - List quizzes
-  - GET /:quizId - Get quiz details
-  - PATCH /:quizId - Update quiz
-  - DELETE /:quizId - Delete quiz
-  - POST /:quizId/start - Start attempt
-  - POST /:quizId/submit - Submit answers
-  - GET /:quizId/results/:attemptId - Get attempt results
-
-#### Services (2):
-- **quizzes.service** - Quiz CRUD & attempt management
-- **quiz-grading.service** - Auto & manual grading
-
----
-
-### 6️⃣ GRADES MODULE
-**Location:** \src/modules/grades/\
-
-#### Entities (5):
-- **Grade**
-  - Fields: gradeId, userId, courseId, gradeType (ASSIGNMENT/QUIZ/LAB/EXAM/PARTICIPATION), assignmentId, quizId, labId, score, maxScore, percentage, letterGrade, feedback, gradedBy, gradedAt, isPublished
-  - Relationships: ManyToOne(User), ManyToOne(Course), ManyToOne(Assignment), ManyToOne(Quiz), ManyToOne(Lab), ManyToOne(User-Grader)
-  
-- **GradeComponent**
-  - Breakdown of grade components
-  
-- **Rubric**
-  - Grading rubric for assignments
-  
-- **RubricCriteria**
-  - Individual criteria within rubric
-  
-- **GpaCalculation**
-  - GPA calculations per student/semester
-
-#### DTOs (4):
-- **create-grade.dto**, **update-grade.dto**
-- **create-rubric.dto**
-- **grade-query.dto**
-- **transcript-response.dto**
-
-#### Controllers (2):
-- **grades.controller** (@Controller('api/grades'))
-  - GET / - List grades (INSTRUCTOR/TA/ADMIN)
-  - GET /my - Get student's grades (STUDENT)
-  - GET /transcript/:studentId - Get transcript
-  - GET /gpa/:studentId - Calculate GPA
-  - GET /distribution/:courseId - Grade distribution
-  - PUT /:id - Update grade
-  
-- **rubrics.controller** (@Controller('api/rubrics'))
-  - Rubric CRUD operations
-
-#### Services (2):
-- **grades.service** - Grade CRUD, GPA calculation, transcript
-- **rubrics.service** - Rubric management
-
----
-
-### 7️⃣ ATTENDANCE MODULE
-**Location:** \src/modules/attendance/\
-
-#### Entities (4):
-- **AttendanceSession**
-  - Class session for attendance tracking
-  
-- **AttendanceRecord**
-  - Fields: recordId, sessionId, userId, attendanceStatus (PRESENT/ABSENT/LATE/EXCUSED), checkInTime, markedBy (MANUAL/AI/SYSTEM), confidenceScore, notes
-  - Relationships: ManyToOne(AttendanceSession), ManyToOne(User)
-  
-- **AttendancePhoto**
-  - Photos for AI-based attendance
-  
-- **AiAttendanceProcessing**
-  - AI processing status and results
-
-#### DTOs (8):
-- **create-session.dto**, **update-session.dto**
-- **mark-attendance.dto**, **batch-attendance.dto**
-- **update-record.dto**
-- **attendance-query.dto**, **attendance-summary.dto**
-- **import-attendance.dto**
-
-#### Controllers (1):
-- **attendance.controller** (@Controller('attendance'))
-  - POST /sessions - Create session
-  - PATCH /sessions/:id - Update session
-  - POST /mark - Mark attendance
-  - POST /batch - Batch mark attendance
-  - GET /sessions/:sessionId - Get session records
-  - POST /import - Import from Excel
-  - GET /summary/:courseId - Attendance summary
-
-#### Services (3):
-- **attendance.service** - Attendance CRUD
-- **attendance-excel.service** - Excel import/export
-- **attendance-ai.service** - AI photo recognition
-
----
-
-### 8️⃣ LABS MODULE
-**Location:** \src/modules/labs/\
-
-#### Entities (4):
-- **Lab**
-  - Lab assignments/projects
-  
-- **LabSubmission**
-  - Student lab submissions with grading
-  
-- **LabInstruction**
-  - Lab instructions and resources
-  
-- **LabAttendance**
-  - Lab attendance tracking
-
-#### DTOs (Multiple)
-- Various lab management DTOs
-
-#### Controllers (1):
-- **labs.controller** (@Controller('api/labs'))
-  - Lab CRUD and submission operations
-
-#### Services (1):
-- **labs.service** - Lab management
-
----
-
-## Community & Discussion Modules
-
-### 9️⃣ COMMUNITY MODULE
-**Location:** \src/modules/community/\
-
-#### Entities (6):
-- **Community**
-  - General community groups/forums
-  
-- **CommunityPost**
-  - Fields: postId, courseId, communityId, userId, title, content, postType (DISCUSSION/QUESTION/ANNOUNCEMENT/POLL), isPinned, isLocked, viewCount, upvoteCount, replyCount
-  - Relationships: ManyToOne(User), ManyToOne(Course), ManyToOne(Community), OneToMany(CommunityComment), OneToMany(CommunityReaction), ManyToMany(CommunityTag)
-  
-- **CommunityComment**
-  - Comments on posts with nested replies
-  
-- **CommunityReaction**
-  - Like/upvote reactions to posts
-  
-- **CommunityTag**
-  - Tags for categorizing posts
-  
-- **ForumCategory**
-  - Forum categories/sections
-
-#### DTOs (12):
-- **create-post.dto**, **update-post.dto**, **post-query.dto**
-- **create-comment.dto**, **update-comment.dto**
-- **create-reaction.dto**
-- **create-tag.dto**
-- **create-community.dto**, **update-community.dto**
-- **create-category.dto**, **update-category.dto**
-- **community-query.dto**
-
-#### Controllers (4):
-- **communities.controller** (@Controller('api/community'))
-  - CRUD for communities
-  
-- **community-posts.controller** (@Controller('api/community/posts'))
-  - GET / - List posts with filters
-  - POST / - Create post
-  - GET /:postId - Get post
-  - PATCH /:postId - Update post
-  - DELETE /:postId - Delete post
-  
-- **community-comments.controller** (@Controller('api/community/comments'))
-  - Comments CRUD
-  
-- **forum-categories.controller** (@Controller('api/community/categories'))
-  - Category management
-
-#### Services (5):
-- **communities.service**
-- **community-posts.service**
-- **community-comments.service**
-- **community-tags.service**
-- **forum-categories.service**
-
----
-
-### 🔟 DISCUSSIONS MODULE
-**Location:** \src/modules/discussions/\
-
-#### Entities (2):
-- **CourseChatThread**
-  - Course-specific discussion threads
-  
-- **ChatMessage**
-  - Individual chat messages
-
-#### DTOs (Multiple)
-- Discussion management DTOs
-
-#### Controllers (1):
-- **discussions.controller** (@Controller('api/discussions'))
-  - Thread and message CRUD
-
-#### Services (1):
-- **discussions.service**
-
----
-
-### 1️⃣1️⃣ ANNOUNCEMENTS MODULE
-**Location:** \src/modules/announcements/\
-
-#### Entities (1):
-- **Announcement**
-  - Course/system announcements with scheduling
-
-#### DTOs (4):
-- **create-announcement.dto**
-- **update-announcement.dto**
-- **schedule-announcement.dto**
-- **announcement-query.dto**
-
-#### Controllers (1):
-- **announcements.controller** (@Controller('api/announcements'))
-  - GET / - List announcements
-  - POST / - Create (INSTRUCTOR/ADMIN)
-  - GET /:id - Get details
-  - PATCH /:id - Update
-  - DELETE /:id - Delete
-  - POST /:id/schedule - Schedule announcement
-
-#### Services (1):
-- **announcements.service**
-
----
-
-## Administrative Modules
-
-### 1️⃣2️⃣ CAMPUS MODULE
-**Location:** \src/modules/campus/\
-
-#### Entities (4):
-- **Campus**
-  - Fields: campusId, name, code (unique), address, city, country, phone, email, timezone, status (ACTIVE/INACTIVE)
-  - Relationships: OneToMany(Department)
-  
-- **Department**
-  - Fields: departmentId, campusId, name, code, phone, email, status
-  - Relationships: ManyToOne(Campus)
-  
-- **Program**
-  - Degree/program offerings
-  
-- **Semester**
-  - Academic semester/term information
-
-#### DTOs (4):
-- **campus.dto**, **department.dto**, **program.dto**, **semester.dto**
-
-#### Controllers (4):
-- **campus.controller** (@Controller('api/campuses'))
-  - Campus CRUD
-  
-- **department.controller** (@Controller('api'))
-  - Department CRUD
-  
-- **program.controller** (@Controller('api'))
-  - Program CRUD
-  
-- **semester.controller** (@Controller('api/semesters'))
-  - Semester CRUD
-
-#### Services (4):
-- **campus.service**
-- **department.service**
-- **program.service**
-- **semester.service**
-
----
-
-### 1️⃣3️⃣ ATTENDANCE MODULE (Already covered - see Academic Modules)
-
-### 1️⃣4️⃣ REPORTS MODULE
-**Location:** \src/modules/reports/\
-
-#### Entities (3):
-- **GeneratedReport**
-  - Generated reports for analysis
-  
-- **ReportTemplate**
-  - Report templates for customization
-  
-- **ExportHistory**
-  - Track exported reports
-
-#### DTOs (2):
-- **generate-report.dto**
-- **report-query.dto**
-
-#### Controllers (1):
-- **reports.controller** (@Controller('api/reports'))
-  - Report generation and export
-
-#### Services (1):
-- **reports.service**
-
----
-
-## Infrastructure Modules
-
-### 1️⃣5️⃣ FILES MODULE
-**Location:** \src/modules/files/\
-
-#### Entities (4):
-- **Folder**
-  - User/course file folders
-  
-- **File**
-  - Files with metadata and versioning
-  
-- **FileVersion**
-  - File version history
-  
-- **FilePermission**
-  - File-level permissions
-
-#### DTOs (9):
-- **upload-file.dto**, **create-folder.dto**
-- **file-response.dto**, **folder-response.dto**
-- **file-version-response.dto**
-- **file-permission.dto**, **grant-permission.dto**
-- **file-search.dto**, **update-folder.dto**
-
-#### Controllers (2):
-- **files.controller** (@Controller('api/files'))
-  - GET / - List files
-  - POST / - Upload file
-  - GET /:fileId - Download file
-  - DELETE /:fileId - Delete file
-  
-- **folder.controller** (@Controller('api/files/folders'))
-  - Folder CRUD operations
-
-#### Services (4):
-- **files.service** - File CRUD
-- **folder.service** - Folder management
-- **file-storage.service** - S3/Cloud storage
-- **file-permission.service** - Permission management
-
----
-
-### 1️⃣6️⃣ NOTIFICATIONS MODULE
-**Location:** \src/modules/notifications/\
-
-#### Entities (3):
-- **Notification**
-  - Fields: notificationId, userId, notificationType (announcement/grade/assignment/message/deadline/system), title, body, relatedEntityType, relatedEntityId, isRead, readAt, priority (low/medium/high/urgent), actionUrl
-  - Relationships: ManyToOne(User)
-  
-- **NotificationPreference**
-  - User notification settings
-  
-- **ScheduledNotification**
-  - Scheduled notifications
-
-#### DTOs (Multiple)
-- Notification management DTOs
-
-#### Controllers (1):
-- **notifications.controller** (@Controller('api/notifications'))
-  - Notification CRUD and preferences
-
-#### Services (1):
-- **notifications.service**
-
----
-
-### 1️⃣7️⃣ MESSAGING MODULE
-**Location:** \src/modules/messaging/\
-
-#### Entities (2):
-- **Message**
-  - Fields: messageId, senderId, subject, body, messageType (direct/group/announcement), parentMessageId, replyToId, readStatus, sentAt, editedAt
-  - Relationships: ManyToOne(Message), OneToMany(Message), OneToMany(MessageParticipant)
-  
-- **MessageParticipant**
-  - Link messages to recipient users
-
-#### DTOs (Multiple)
-- Message management DTOs
-
-#### Controllers (1):
-- **messaging.controller** (@Controller('api/messages'))
-  - Message CRUD with threading
-
-#### Services (1):
-- **messaging.service** - Message operations
-
----
-
-### 1️⃣8️⃣ SCHEDULE MODULE
-**Location:** \src/modules/schedule/\
-
-#### Entities (3):
-- **ExamSchedule**
-  - Exam scheduling for courses
-  
-- **CalendarEvent**
-  - Generic calendar events
-  
-- **CalendarIntegration**
-  - Integration with Google Calendar/Outlook
-
-#### DTOs (8):
-- **create-exam-schedule.dto**, **update-exam-schedule.dto**
-- **create-calendar-event.dto**, **update-calendar-event.dto**
-- **query-exam-schedule.dto**, **query-calendar-event.dto**
-- **connect-calendar.dto**, **query-schedule.dto**
-
-#### Controllers (4):
-- **schedule.controller** (@Controller('api/schedule'))
-- **exam-schedule.controller** (@Controller('api/exams/schedule'))
-- **calendar-events.controller** (@Controller('api/calendar/events'))
-- **calendar-integrations.controller** (@Controller('api/calendar/integrations'))
-
-#### Services (4):
-- **schedule.service**
-- **exam-schedule.service**
-- **calendar-events.service**
-- **calendar-integrations.service**
-
----
-
-### 1️⃣9️⃣ COURSE MATERIALS MODULE
-**Location:** \src/modules/course-materials/\
-
-#### Entities (2):
-- **CourseMaterial**
-  - Lecture notes, slides, videos, documents
-  
-- **LectureSectionLab**
-  - Structure linking lectures/sections/labs
-
-#### DTOs (6):
-- **create-material.dto**, **update-material.dto**
-- **bulk-create-material.dto**
-- **query-materials.dto**
-- **create-structure.dto**, **update-structure.dto**
-- **reorder-structure.dto**, **toggle-visibility.dto**
-- **upload-video-material.dto**
-
-#### Controllers (2):
-- **materials.controller** (@Controller('api/courses/:courseId/materials'))
-  - GET / - List materials
-  - POST / - Upload material
-  - PATCH /:materialId - Update material
-  - DELETE /:materialId - Delete material
-  
-- **course-structure.controller** (@Controller('api/courses/:courseId/structure'))
-  - Course structure/organization
-
-#### Services (2):
-- **materials.service**
-- **course-structure.service**
-
----
-
-### 2️⃣0️⃣ TASKS MODULE
-**Location:** \src/modules/tasks/\
-
-#### Entities (3):
-- **StudentTask**
-  - Student task management
-  
-- **TaskCompletion**
-  - Task completion tracking
-  
-- **DeadlineReminder**
-  - Deadline reminder notifications
-
-#### DTOs (4):
-- **create-task.dto**, **update-task.dto**
-- **task-query.dto**
-- **create-reminder.dto**
-
-#### Controllers (1):
-- **tasks.controller** (@Controller('api/tasks'))
-  - Task CRUD and deadline reminders
-
-#### Services (2):
-- **tasks.service**
-- **reminders.service** - Deadline reminders
-
----
-
-### 2️⃣1️⃣ ANALYTICS MODULE
-**Location:** \src/modules/analytics/\
-
-#### Entities (6):
-- **CourseAnalytics**
-  - Course engagement metrics
-  
-- **LearningAnalytics**
-  - Learning behavior tracking
-  
-- **PerformanceMetrics**
-  - Student performance data
-  
-- **StudentProgress**
-  - Course progress tracking
-  
-- **WeakTopicsAnalysis**
-  - Weak topic identification for students
-  
-- **ActivityLog**
-  - System activity logging
-
-#### DTOs (2):
-- **analytics-query.dto**
-- **student-analytics-query.dto**
-
-#### Controllers (1):
-- **analytics.controller** (@Controller('api/analytics'))
-  - GET /courses/:courseId - Course analytics
-  - GET /students/:studentId - Student analytics
-  - GET /class/:courseId - Class analytics
-
-#### Services (2):
-- **analytics.service** - Analytics calculations
-- **analytics-cron.service** - Scheduled analytics processing
-
----
-
-### 2️⃣2️⃣ SEARCH MODULE
-**Location:** \src/modules/search/\
-
-#### Entities (2):
-- **SearchIndex**
-  - Search index for full-text search
-  
-- **SearchHistory**
-  - User search history
-
-#### DTOs (2):
-- **global-search.dto**
-- **search-history-query.dto**
-
-#### Controllers (1):
-- **search.controller** (@Controller('api/search'))
-  - Global search across courses, materials, announcements
-
-#### Services (1):
-- **search.service**
-
----
-
-### 2️⃣3️⃣ EMAIL MODULE
-**Location:** \src/modules/email/\
-
-#### Entities: None (Service-only)
-
-#### DTOs: None
-
-#### Controllers: None
-
-#### Services (1):
-- **email.service** - Email sending for notifications, passwords, etc.
-
----
-
-### 2️⃣4️⃣ YOUTUBE MODULE
-**Location:** \src/modules/youtube/\
-
-#### Entities: None
-
-#### DTOs: None
-
-#### Controllers (1):
-- **youtube.controller** (@Controller('youtube'))
-  - YouTube integration for video uploads
-
-#### Services (1):
-- **youtube.service** - YouTube API integration
-
----
-
-## Key Relationships Summary
-
-### User-Centric Relationships:
-- User → Roles (Many-to-Many)
-- User → CourseEnrollment (One-to-Many)
-- User → Grade (One-to-Many)
-- User → Assignment/Quiz/Lab (Many creators)
-- User → Message (One-to-Many as sender)
-- User → Notification (One-to-Many)
-
-### Course-Centric Relationships:
-- Course → Department (Many-to-One)
-- Course → CourseSection (One-to-Many)
-- Course → CourseEnrollment (One-to-Many via Section)
-- Course → Assignment/Quiz/Lab (One-to-Many)
-- Course → Grade (One-to-Many)
-- Course → CourseMaterial (One-to-Many)
-- Course → Announcement (One-to-Many)
-
-### Academic Assessment Flow:
-- Assignment → AssignmentSubmission → Grade
-- Quiz → QuizAttempt → QuizAnswer → Grade
-- Lab → LabSubmission → Grade
-- All grades rollup to CourseEnrollment.finalScore
-
-### Enrollment Flow:
-- User → CourseEnrollment (Many-to-Many via CourseSection)
-- CourseEnrollment → Grade (One-to-Many)
-- CourseEnrollment.status → ENROLLED/DROPPED/COMPLETED
-
----
-
-## Key Features by Module
-
-### Authentication & Security:
-- JWT token-based authentication
-- Role-based access control (RBAC)
-- Password hashing with bcrypt
-- Email verification
-- Password reset tokens
-- 2FA support
-- Session management
-
-### Academic Management:
-- Course enrollment with prerequisites
-- Assignment submissions with late penalties
-- Quiz creation with adaptive difficulty
-- Grade tracking and GPA calculation
-- Lab sessions and submissions
-- Attendance tracking with AI recognition
-
-### Communication:
-- Direct messaging with threading
-- Course discussions
-- Announcements with scheduling
-- Notifications with preferences
-- Email integration
-
-### Community & Engagement:
-- Community forums with categories
-- Posts with reactions and comments
-- Tagging system
-- Pinned/locked posts
-- Reputation system (upvotes)
-
-### Administrative:
-- Multi-campus support
-- Department and program management
-- Academic calendar (semesters)
-- User management (creation, role assignment)
-- Report generation and export
-- Analytics and performance tracking
-
-### Infrastructure:
-- File management with versioning
-- File-level permissions
-- Integration with cloud storage
-- Calendar integration (Google/Outlook)
-- Search functionality
-- Activity logging
-- Scheduled notifications/reminders
-
----
-
-## Architecture Patterns
-
-### Module Structure Pattern:
-Each module follows: Entity → DTO → Controller → Service → Repository (TypeORM)
-
-### Database Constraints:
-- Unique indexes for key fields
-- Foreign key relationships with CASCADE/SET NULL
-- Soft deletes with DeleteDateColumn
-- Audit trails with CreateDateColumn/UpdateDateColumn
-
-### Authentication Guards:
-- JwtAuthGuard - Validates JWT tokens
-- RolesGuard - Enforces role-based access
-- @Public() decorator for public endpoints
-- @Roles() decorator for role requirements
-
-### Status Enums:
-- User: ACTIVE, INACTIVE, SUSPENDED, PENDING
-- Course: ACTIVE, ARCHIVED
-- Section: OPEN, CLOSED, FULL
-- Assignment: DRAFT, PUBLISHED, CLOSED
-- Enrollment: ENROLLED, DROPPED, COMPLETED
-- Grade: Published/Unpublished
-- Notification: Read/Unread
-

DATABASE_SCHEMA.md

@@ -1,508 +0,0 @@
-# 🗄️ EduVerse Backend - Database Schema & Entity Relationships
-
-## Core Entity Relationships
-
-### USER HIERARCHY
-\\\
-User (userId) 
-├── Roles (Many-to-Many)
-├── Sessions (One-to-Many)
-├── PasswordReset (One-to-Many)
-├── TwoFactorAuth (One-to-Many)
-├── UserPreference (One-to-One)
-├── EmailVerification (One-to-One)
-├── CourseEnrollment (One-to-Many)
-├── Grade (One-to-Many)
-├── Assignment (One-to-Many, as creator)
-├── Quiz (One-to-Many, as creator)
-├── Lab (One-to-Many, as creator)
-├── CommunityPost (One-to-Many, as author)
-├── Message (One-to-Many, as sender)
-├── Notification (One-to-Many)
-└── AttendanceRecord (One-to-Many)
-\\\
-
-### COURSE STRUCTURE
-\\\
-Campus (campusId)
-└── Department (One-to-Many)
-    └── Course (One-to-Many)
-        ├── CoursePrerequisite (One-to-Many, prerequisites)
-        ├── CourseSection (One-to-Many)
-        │   ├── CourseSchedule (One-to-Many)
-        │   ├── CourseEnrollment (One-to-Many)
-        │   │   ├── CourseInstructor
-        │   │   ├── CourseTA
-        │   │   └── User (Student)
-        │   └── AttendanceSession (One-to-Many)
-        │       └── AttendanceRecord (One-to-Many)
-        ├── Announcement (One-to-Many)
-        ├── CourseMaterial (One-to-Many)
-        ├── CourseChatThread (One-to-Many)
-        ├── CommunityPost (One-to-Many)
-        ├── Quiz (One-to-Many)
-        ├── Assignment (One-to-Many)
-        ├── Lab (One-to-Many)
-        └── Grade (One-to-Many)
-
-Semester (semesterId)
-└── CourseSection (One-to-Many)
-\\\
-
-### ACADEMIC ASSESSMENT FLOW
-\\\
-User (Student) → CourseEnrollment → Course
-                       ↓
-         ┌─────────────┼─────────────┐
-         ↓             ↓             ↓
-    Assignment    Quiz          Lab
-         ↓             ↓             ↓
-  AssignmentSubmission QuizAttempt LabSubmission
-         ↓             ↓             ↓
-       Grade  ←────────┴─────────────┘
-         ↓
-    GradeComponent
-    RubricCriteria
-    GPACalculation
-\\\
-
-### ENROLLMENT & GRADING
-\\\
-CourseEnrollment (enrollmentId)
-├── User (userId)
-├── CourseSection (sectionId)
-├── Program (programId)
-└── Grade (One-to-Many for same user/course)
-    ├── Assignment (links to assignment)
-    ├── Quiz (links to quiz)
-    └── Lab (links to lab)
-\\\
-
-### QUIZ STRUCTURE
-\\\
-Quiz (quizId)
-├── Course (courseId)
-├── CreatedBy (userId)
-├── QuizQuestion (One-to-Many)
-│   ├── QuizDifficultyLevel
-│   └── QuizAnswer (One-to-Many, correct answers)
-└── QuizAttempt (One-to-Many, by students)
-    ├── User (userId)
-    ├── QuizAnswer (One-to-Many, student answers)
-    └── Grade (linked)
-\\\
-
-### MESSAGING & COMMUNICATION
-\\\
-Message (messageId)
-├── Sender (userId)
-├── ParentMessage (self-join for threads)
-├── Replies (One-to-Many, self-join)
-└── MessageParticipant (One-to-Many)
-    └── User (recipients)
-
-CourseChatThread (threadId)
-├── Course (courseId)
-└── ChatMessage (One-to-Many)
-    ├── Sender (userId)
-    └── CreatedAt (timestamp)
-\\\
-
-### COMMUNITY & FORUMS
-\\\
-Community (communityId)
-└── CommunityPost (One-to-Many)
-    ├── Author (userId)
-    ├── Course (optional)
-    ├── CommunityComment (One-to-Many)
-    │   ├── Author (userId)
-    │   └── Replies (self-join)
-    ├── CommunityReaction (One-to-Many)
-    │   └── User (userId)
-    └── CommunityTag (Many-to-Many)
-
-ForumCategory (categoryId)
-└── CommunityPost (One-to-Many)
-\\\
-
-### FILES & STORAGE
-\\\
-Folder (folderId)
-└── File (One-to-Many)
-    ├── FileVersion (One-to-Many)
-    └── FilePermission (One-to-Many)
-        └── User (userId)
-\\\
-
-### NOTIFICATIONS & SCHEDULING
-\\\
-Notification (notificationId)
-├── User (userId)
-├── NotificationPreference (One-to-One)
-└── ScheduledNotification (One-to-Many)
-
-Announcement (announcementId)
-└── Notification (One-to-Many, linked)
-
-DeadlineReminder (reminderId)
-├── StudentTask (taskId)
-└── User (userId)
-\\\
-
-### ANALYTICS & REPORTING
-\\\
-CourseAnalytics
-├── Course (courseId)
-└── PerformanceMetrics (One-to-Many)
-
-StudentProgress
-├── User (userId)
-├── Course (courseId)
-└── WeakTopicsAnalysis (One-to-Many)
-
-LearningAnalytics
-├── User (userId)
-└── ActivityLog (One-to-Many)
-
-GeneratedReport
-├── User (userId)
-└── ReportTemplate (templateId)
-\\\
-
-### CALENDAR & SCHEDULING
-\\\
-CourseSchedule (course_schedules)
-├── CourseSection (sectionId)
-└���─ Day/Time info
-
-ExamSchedule (exam_schedules)
-├── Course (courseId)
-└── Exam date/time
-
-CalendarEvent (calendar_events)
-├── User (userId)
-└── CalendarIntegration (integrationId)
-    ├── Google Calendar
-    └── Outlook Calendar
-\\\
-
----
-
-## Database Tables (70+ total)
-
-### AUTH TABLES (8)
-- users
-- roles
-- permissions
-- user_roles (junction)
-- sessions
-- password_resets
-- two_factor_auths
-- email_verifications
-- user_preferences
-
-### CAMPUS & ORGANIZATIONAL (4)
-- campuses
-- departments
-- programs
-- semesters
-
-### COURSES & ENROLLMENT (7)
-- courses
-- course_sections
-- course_schedules
-- course_prerequisites
-- course_enrollments
-- course_instructors
-- course_tas
-
-### ACADEMIC ASSESSMENT (12)
-- assignments
-- assignment_submissions
-- quizzes
-- quiz_questions
-- quiz_attempts
-- quiz_answers
-- quiz_difficulty_levels
-- labs
-- lab_submissions
-- lab_instructions
-- lab_attendance
-- grades
-- grade_components
-- rubrics
-- rubric_criteria
-- gpa_calculations
-
-### ATTENDANCE (4)
-- attendance_sessions
-- attendance_records
-- attendance_photos
-- ai_attendance_processing
-
-### COMMUNICATION (5)
-- announcements
-- course_chat_threads
-- chat_messages
-- messages
-- message_participants
-
-### COMMUNITY & FORUMS (6)
-- communities
-- community_posts
-- community_comments
-- community_reactions
-- community_tags
-- community_post_tags (junction)
-- forum_categories
-
-### FILES & STORAGE (4)
-- folders
-- files
-- file_versions
-- file_permissions
-
-### NOTIFICATIONS (3)
-- notifications
-- notification_preferences
-- scheduled_notifications
-
-### SCHEDULE & CALENDAR (3)
-- exam_schedules
-- calendar_events
-- calendar_integrations
-
-### MATERIALS & CONTENT (2)
-- course_materials
-- lecture_section_lab
-
-### TASKS & REMINDERS (3)
-- student_tasks
-- task_completions
-- deadline_reminders
-
-### ANALYTICS & REPORTING (7)
-- course_analytics
-- learning_analytics
-- performance_metrics
-- student_progress
-- weak_topics_analysis
-- activity_logs
-- generated_reports
-- report_templates
-- export_history
-
-### SEARCH (2)
-- search_indexes
-- search_history
-
----
-
-## Enum Types
-
-### User Status
-- ACTIVE
-- INACTIVE
-- SUSPENDED
-- PENDING
-
-### Enrollment Status
-- ENROLLED
-- DROPPED
-- COMPLETED
-
-### Course Status
-- ACTIVE
-- ARCHIVED
-
-### Section Status
-- OPEN
-- CLOSED
-- FULL
-
-### Assignment Status
-- DRAFT
-- PUBLISHED
-- CLOSED
-
-### Submission Type
-- FILE
-- TEXT
-- CODE
-
-### Attendance Status
-- PRESENT
-- ABSENT
-- LATE
-- EXCUSED
-
-### Quiz Type
-- GRADED
-- PRACTICE
-
-### Question Type
-- MULTIPLE_CHOICE
-- TRUE_FALSE
-- SHORT_ANSWER
-- ESSAY
-
-### Post Type (Community)
-- DISCUSSION
-- QUESTION
-- ANNOUNCEMENT
-- POLL
-
-### Notification Priority
-- LOW
-- MEDIUM
-- HIGH
-- URGENT
-
-### Notification Type
-- ANNOUNCEMENT
-- GRADE
-- ASSIGNMENT
-- MESSAGE
-- DEADLINE
-- SYSTEM
-
-### Grade Type
-- ASSIGNMENT
-- QUIZ
-- LAB
-- EXAM
-- PARTICIPATION
-
-### Message Type
-- DIRECT
-- GROUP
-- ANNOUNCEMENT
-
-### Campus Status
-- ACTIVE
-- INACTIVE
-
----
-
-## Key Indexes
-
-### Performance Indexes
-- users(email) - UNIQUE
-- courses(departmentId, code) - UNIQUE
-- course_sections(courseId, semesterId, sectionNumber) - UNIQUE
-- course_enrollments(userId, sectionId) - UNIQUE
-- grades(userId, courseId)
-- grades(courseId, gradeType)
-- attendance_records(sessionId)
-- attendance_records(userId)
-- attendance_records(attendanceStatus)
-- assignments(courseId)
-- assignments(createdBy)
-- assignments(status)
-
----
-
-## Relationship Cardinalities
-
-### One-to-One (1:1)
-- User ↔ UserPreference
-- User ↔ EmailVerification
-
-### One-to-Many (1:n)
-- Course → CourseSection
-- Course → Assignment
-- Course → Quiz
-- Course → Lab
-- User → CourseEnrollment
-- CourseEnrollment → Grade
-
-### Many-to-Many (n:m)
-- User ↔ Role (via user_roles)
-- Community ↔ User (members)
-- CommunityPost ↔ CommunityTag
-
-### Self-Referencing
-- Message → ParentMessage/Replies
-- CommunityComment → ParentComment/Replies
-
----
-
-## Cascade Rules
-
-### CASCADE (ON DELETE CASCADE)
-- CourseSection → when Course deleted
-- Assignment → when Course deleted
-- AssignmentSubmission → when Assignment deleted
-- Grade → when Course/User/Assignment deleted
-- AttendanceRecord → when AttendanceSession deleted
-- Quiz → when Course deleted
-- Message → when Sender/ParentMessage deleted
-
-### SET NULL (ON DELETE SET NULL)
-- Grade.gradedBy → when Grader User deleted
-- Grade.quiz → when Quiz deleted
-- Grade.lab → when Lab deleted
-- CourseEnrollment.program → when Program deleted
-- PasswordReset → soft delete
-
-### RESTRICT (ON DELETE RESTRICT)
-- User → cannot delete while enrolled in courses (must drop first)
-- Course → cannot delete while having active sections
-
----
-
-## Soft Deletes
-
-The following entities support soft deletion (not physically removed):
-- User
-- Course
-- Assignment
-- Quiz
-- Announcement
-- CommunityPost
-- Message
-
-### Soft Delete Implementation
-- Added deleted_at column
-- Type: DeleteDateColumn from TypeORM
-- Queries automatically filter deleted records
-- Can be restored (set deleted_at to NULL)
-
----
-
-## Audit Timestamps
-
-All main entities include:
-- **created_at** - Record creation timestamp (immutable)
-- **updated_at** - Last modification timestamp (auto-updated)
-
-Examples:
-- users: createdAt, updatedAt
-- courses: createdAt, updatedAt
-- grades: createdAt, updatedAt
-- messages: sentAt, editedAt
-
----
-
-## Junction Tables
-
-Many-to-Many relationships use junction tables:
-- user_roles (user_id ↔ role_id)
-- community_post_tags (post_id ↔ tag_id)
-- [Any other n:m relationship in future]
-
----
-
-## Search Capabilities
-
-### Full-Text Search Tables
-- search_indexes - Indexed content for quick lookup
-- search_history - User search queries for analytics
-
-### Searchable Entities
-- Courses (name, code, description)
-- CourseMaterial (title, content)
-- CommunityPost (title, content)
-- Announcement (title, content)
-- Assignment (title, description, instructions)
-

DB_CHANGES_GRADING_FIX.sql

@@ -0,0 +1,113 @@
+-- =========================================================================
+-- DATABASE MIGRATION: Grading System Fix
+-- =========================================================================
+-- This migration adds missing columns to submission tables and quiz status
+-- to properly integrate all assessment grading with the central grades table.
+--
+-- Run this migration BEFORE deploying the updated backend code.
+-- =========================================================================
+
+-- =========================================================================
+-- 1. Add score/feedback columns to assignment_submissions
+-- =========================================================================
+-- These columns persist the grade on the submission record
+-- in addition to the central grades table.
+
+-- Check if columns exist before adding
+SET @col_exists = (SELECT COUNT(*) FROM INFORMATION_SCHEMA.COLUMNS 
+  WHERE TABLE_SCHEMA = 'eduverse_db' AND TABLE_NAME = 'assignment_submissions' AND COLUMN_NAME = 'score');
+
+SET @sql = IF(@col_exists = 0, 
+  'ALTER TABLE assignment_submissions 
+   ADD COLUMN score DECIMAL(5,2) NULL COMMENT ''Score achieved (0-100)'' AFTER submission_link,
+   ADD COLUMN feedback TEXT NULL COMMENT ''Grader feedback'' AFTER score,
+   ADD COLUMN graded_by BIGINT UNSIGNED NULL COMMENT ''User who graded'' AFTER feedback,
+   ADD COLUMN graded_at TIMESTAMP NULL COMMENT ''When graded'' AFTER graded_by',
+  'SELECT ''Columns already exist in assignment_submissions'' AS message');
+
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- Add foreign key for grader
+ALTER TABLE assignment_submissions
+ADD CONSTRAINT fk_assignment_submission_grader 
+FOREIGN KEY (graded_by) REFERENCES users(user_id) ON DELETE SET NULL;
+
+-- =========================================================================
+-- 2. Add score/feedback columns to lab_submissions
+-- =========================================================================
+-- Previously lab grading only changed status, now it persists scores.
+
+-- Check if columns exist before adding
+SET @col_exists = (SELECT COUNT(*) FROM INFORMATION_SCHEMA.COLUMNS 
+  WHERE TABLE_SCHEMA = 'eduverse_db' AND TABLE_NAME = 'lab_submissions' AND COLUMN_NAME = 'score');
+
+SET @sql = IF(@col_exists = 0, 
+  'ALTER TABLE lab_submissions 
+   ADD COLUMN score DECIMAL(5,2) NULL COMMENT ''Score achieved (0-100)'' AFTER status,
+   ADD COLUMN feedback TEXT NULL COMMENT ''Grader feedback'' AFTER score,
+   ADD COLUMN graded_by BIGINT UNSIGNED NULL COMMENT ''User who graded'' AFTER feedback,
+   ADD COLUMN graded_at TIMESTAMP NULL COMMENT ''When graded'' AFTER graded_by',
+  'SELECT ''Columns already exist in lab_submissions'' AS message');
+
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- Add foreign key for grader
+ALTER TABLE lab_submissions
+ADD CONSTRAINT fk_lab_submission_grader 
+FOREIGN KEY (graded_by) REFERENCES users(user_id) ON DELETE SET NULL;
+
+-- =========================================================================
+-- 3. Add status column to quizzes
+-- =========================================================================
+-- Quizzes now have explicit status like assignments/labs.
+
+-- Check if status column exists before adding
+SET @col_exists = (SELECT COUNT(*) FROM INFORMATION_SCHEMA.COLUMNS 
+  WHERE TABLE_SCHEMA = 'eduverse_db' AND TABLE_NAME = 'quizzes' AND COLUMN_NAME = 'status');
+
+SET @sql = IF(@col_exists = 0, 
+  'ALTER TABLE quizzes
+   ADD COLUMN status ENUM(''draft'', ''published'', ''closed'', ''archived'') 
+   NOT NULL DEFAULT ''draft'' COMMENT ''Quiz visibility/availability status'' AFTER description',
+  'SELECT ''Status column already exists in quizzes'' AS message');
+
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- Set all existing quizzes to published (assuming they were already in use)
+UPDATE quizzes SET status = 'published' WHERE status = 'draft';
+
+-- =========================================================================
+-- VERIFICATION QUERIES
+-- =========================================================================
+-- Run these to confirm the changes were applied:
+
+-- SELECT COLUMN_NAME, DATA_TYPE, IS_NULLABLE 
+-- FROM INFORMATION_SCHEMA.COLUMNS 
+-- WHERE TABLE_NAME = 'assignment_submissions' 
+-- AND COLUMN_NAME IN ('score', 'feedback', 'graded_by', 'graded_at');
+
+-- SELECT COLUMN_NAME, DATA_TYPE, IS_NULLABLE 
+-- FROM INFORMATION_SCHEMA.COLUMNS 
+-- WHERE TABLE_NAME = 'lab_submissions' 
+-- AND COLUMN_NAME IN ('score', 'feedback', 'graded_by', 'graded_at');
+
+-- SELECT COLUMN_NAME, COLUMN_TYPE 
+-- FROM INFORMATION_SCHEMA.COLUMNS 
+-- WHERE TABLE_NAME = 'quizzes' AND COLUMN_NAME = 'status';
+
+-- =========================================================================
+-- ROLLBACK (if needed)
+-- =========================================================================
+-- ALTER TABLE assignment_submissions DROP FOREIGN KEY fk_assignment_submission_grader;
+-- ALTER TABLE assignment_submissions DROP COLUMN score, DROP COLUMN feedback, DROP COLUMN graded_by, DROP COLUMN graded_at;
+
+-- ALTER TABLE lab_submissions DROP FOREIGN KEY fk_lab_submission_grader;
+-- ALTER TABLE lab_submissions DROP COLUMN score, DROP COLUMN feedback, DROP COLUMN graded_by, DROP COLUMN graded_at;
+
+-- ALTER TABLE quizzes DROP COLUMN status;

DB_SCHEMA_FIXES.sql

@@ -1,64 +0,0 @@
--- ============================================================================
--- EduVerse Database Schema Fixes
--- Version: 1.0
--- Created: For fixing entity-database mismatches
--- Description: Contains SQL fixes for schema inconsistencies between
---              TypeORM entities and actual database tables
--- ============================================================================
-
--- ============================================================================
--- Fix 1: Add missing columns to courses table
--- ============================================================================
--- The Course entity (src/modules/courses/entities/course.entity.ts) expects
--- these columns but they may be missing from older database schemas.
---
--- Error message this fixes:
---   "QueryFailedError: Unknown column 'course.instructor_id' in 'field list'"
---
--- This error occurs when accessing endpoints that JOIN to the courses table:
---   - GET /api/labs
---   - GET /api/assignments
---   - Any query with relations: ['course']
--- ============================================================================
-
--- Check if columns exist before adding (run this to see current state)
--- SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS 
--- WHERE TABLE_SCHEMA = 'eduverse_db' AND TABLE_NAME = 'courses' 
--- AND COLUMN_NAME IN ('instructor_id', 'ta_ids');
-
--- Add the missing columns
-ALTER TABLE courses
-ADD COLUMN instructor_id BIGINT UNSIGNED NULL COMMENT 'Primary instructor user ID',
-ADD COLUMN ta_ids JSON NULL COMMENT 'Array of TA user IDs';
-
--- Note: If columns already exist, you'll get an error. That's expected.
--- You can safely ignore "Duplicate column name" errors.
-
--- ============================================================================
--- Verification Queries
--- ============================================================================
-
--- Verify the columns were added
-SHOW COLUMNS FROM courses WHERE Field IN ('instructor_id', 'ta_ids');
-
--- Test that labs endpoint query works
-SELECT l.*, c.course_code, c.course_name 
-FROM labs l
-LEFT JOIN courses c ON l.course_id = c.course_id
-LIMIT 1;
-
--- Test that assignments endpoint query works
-SELECT a.*, c.course_code, c.course_name
-FROM assignments a
-LEFT JOIN courses c ON a.course_id = c.course_id
-LIMIT 1;
-
--- ============================================================================
--- Rollback (if needed)
--- ============================================================================
--- WARNING: Only run this if you need to undo the changes
--- 
--- ALTER TABLE courses
--- DROP COLUMN instructor_id,
--- DROP COLUMN ta_ids;
--- ============================================================================

Documentation/ASSESSMENT_INTEGRATION_GUIDE.md

@@ -0,0 +1,846 @@
+# Assessment Integration Guide
+
+> Common patterns and shared components for integrating Quizzes, Assignments, and Labs in the EduVerse frontend.
+
+---
+
+## Table of Contents
+
+1. [Overview](#overview)
+2. [Authentication & Authorization](#authentication--authorization)
+3. [Common API Patterns](#common-api-patterns)
+4. [File Upload Integration](#file-upload-integration)
+5. [Grading Integration](#grading-integration)
+6. [State Management](#state-management)
+7. [Shared Components](#shared-components)
+8. [Error Handling](#error-handling)
+9. [Real-time Features](#real-time-features)
+
+---
+
+## Overview
+
+All three assessment modules (Quizzes, Assignments, Labs) share common patterns:
+
+| Feature | Quizzes | Assignments | Labs |
+|---------|---------|-------------|------|
+| Status workflow | ✅ draft→published→closed→archived | ✅ | ✅ |
+| File attachments | ❌ (planned) | ✅ Google Drive | ✅ Google Drive |
+| Auto-grading | ✅ MCQ/TF | ❌ | ❌ |
+| Manual grading | ✅ Essay | ✅ | ✅ |
+| Grades table integration | ✅ | ✅ | ✅ |
+| Due dates | ✅ availableUntil | ✅ dueDate | ✅ dueDate |
+| Late handling | ❌ | ✅ latePenalty % | ✅ isLate flag |
+| Attendance | ❌ | ❌ | ✅ |
+
+---
+
+## Authentication & Authorization
+
+### JWT Token Usage
+
+All API requests require a Bearer token:
+
+```typescript
+// api/client.ts
+const API_BASE = 'http://localhost:8081';
+
+export async function apiRequest<T>(
+  endpoint: string,
+  options: RequestInit = {}
+): Promise<T> {
+  const token = localStorage.getItem('accessToken');
+  
+  const response = await fetch(`${API_BASE}${endpoint}`, {
+    ...options,
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+      ...options.headers,
+    },
+  });
+
+  if (response.status === 401) {
+    // Token expired - redirect to login
+    localStorage.removeItem('accessToken');
+    window.location.href = '/login';
+    throw new Error('Unauthorized');
+  }
+
+  if (!response.ok) {
+    const error = await response.json();
+    throw new Error(error.message || 'Request failed');
+  }
+
+  return response.json();
+}
+```
+
+### Login Flow
+
+```typescript
+// POST /api/auth/login
+interface LoginDto {
+  email: string;
+  password: string;
+  rememberMe?: boolean;
+}
+
+interface LoginResponse {
+  accessToken: string;
+}
+
+const login = async (credentials: LoginDto): Promise<void> => {
+  const response = await fetch('/api/auth/login', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify(credentials),
+  });
+
+  if (!response.ok) {
+    throw new Error('Invalid credentials');
+  }
+
+  const { accessToken } = await response.json();
+  localStorage.setItem('accessToken', accessToken);
+};
+```
+
+### Role-Based UI
+
+```typescript
+// hooks/useAuth.ts
+interface User {
+  userId: number;
+  email: string;
+  firstName: string;
+  lastName: string;
+  roles: Array<{ roleName: string }>;
+}
+
+export function useAuth() {
+  const [user, setUser] = useState<User | null>(null);
+
+  const hasRole = (role: string) => {
+    return user?.roles.some(r => r.roleName === role) ?? false;
+  };
+
+  const isInstructor = hasRole('instructor');
+  const isStudent = hasRole('student');
+  const isTA = hasRole('teaching_assistant');
+  const isAdmin = hasRole('admin') || hasRole('it_admin');
+
+  const canManageAssessments = isInstructor || isTA || isAdmin;
+  const canGrade = isInstructor || isTA;
+  const canSubmit = isStudent;
+
+  return { user, hasRole, isInstructor, isStudent, isTA, canManageAssessments, canGrade, canSubmit };
+}
+```
+
+---
+
+## Common API Patterns
+
+### Pagination
+
+All list endpoints support pagination:
+
+```typescript
+interface PaginatedResponse<T> {
+  data: T[];
+  meta: {
+    total: number;
+    page: number;
+    limit: number;
+    totalPages: number;
+  };
+}
+
+// Usage
+const getQuizzes = async (page = 1, limit = 10): Promise<PaginatedResponse<Quiz>> => {
+  return apiRequest(`/api/quizzes?page=${page}&limit=${limit}`);
+};
+```
+
+### Filtering
+
+Common query parameters:
+
+| Parameter | Description | Example |
+|-----------|-------------|---------|
+| `courseId` | Filter by course | `?courseId=1` |
+| `status` | Filter by status | `?status=published` |
+| `page` | Page number | `?page=2` |
+| `limit` | Items per page | `?limit=20` |
+| `search` | Search text | `?search=midterm` |
+
+### Status Change Pattern
+
+All modules use the same status change pattern:
+
+```typescript
+type AssessmentStatus = 'draft' | 'published' | 'closed' | 'archived';
+
+const changeStatus = async (
+  type: 'quizzes' | 'assignments' | 'labs',
+  id: number,
+  status: AssessmentStatus
+): Promise<void> => {
+  await apiRequest(`/api/${type}/${id}/status`, {
+    method: 'PATCH',
+    body: JSON.stringify({ status }),
+  });
+};
+```
+
+---
+
+## File Upload Integration
+
+### Google Drive Integration
+
+The backend uses Google Drive for file storage. Two-step upload process:
+
+```typescript
+// Step 1: Upload file to Drive
+interface UploadResponse {
+  fileId: number;
+  fileName: string;
+  webViewLink: string;
+}
+
+const uploadFile = async (
+  type: 'assignments' | 'labs',
+  id: number,
+  file: File,
+  purpose: 'instructions' | 'submissions' | 'ta-materials'
+): Promise<UploadResponse> => {
+  const formData = new FormData();
+  formData.append('file', file);
+
+  const endpoint = purpose === 'instructions'
+    ? `/api/${type}/${id}/instructions/upload`
+    : purpose === 'ta-materials'
+    ? `/api/${type}/${id}/ta-materials/upload`
+    : `/api/${type}/${id}/submissions/upload`;
+
+  const response = await fetch(endpoint, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${localStorage.getItem('accessToken')}`,
+    },
+    body: formData,
+  });
+
+  return response.json();
+};
+
+// Step 2: Submit with file ID
+const submitWithFile = async (
+  type: 'assignments' | 'labs',
+  id: number,
+  fileId: number
+): Promise<void> => {
+  await apiRequest(`/api/${type}/${id}/submit`, {
+    method: 'POST',
+    body: JSON.stringify({ fileId }),
+  });
+};
+```
+
+### File Upload Component
+
+```typescript
+// components/FileUploader.tsx
+import { useState, useCallback } from 'react';
+
+interface FileUploaderProps {
+  type: 'assignments' | 'labs';
+  id: number;
+  purpose: 'instructions' | 'submissions' | 'ta-materials';
+  accept?: string;
+  maxSize?: number;  // bytes
+  onUpload: (fileId: number, fileName: string) => void;
+  onError: (error: string) => void;
+}
+
+export function FileUploader({
+  type,
+  id,
+  purpose,
+  accept = '*/*',
+  maxSize = 10 * 1024 * 1024,  // 10MB default
+  onUpload,
+  onError,
+}: FileUploaderProps) {
+  const [uploading, setUploading] = useState(false);
+  const [progress, setProgress] = useState(0);
+
+  const handleFile = useCallback(async (file: File) => {
+    // Validate size
+    if (file.size > maxSize) {
+      onError(`File too large. Max size: ${formatBytes(maxSize)}`);
+      return;
+    }
+
+    setUploading(true);
+    setProgress(0);
+
+    try {
+      const result = await uploadFile(type, id, file, purpose);
+      onUpload(result.fileId, result.fileName);
+    } catch (err) {
+      onError(err instanceof Error ? err.message : 'Upload failed');
+    } finally {
+      setUploading(false);
+    }
+  }, [type, id, purpose, maxSize, onUpload, onError]);
+
+  return (
+    <div className="file-uploader">
+      <input
+        type="file"
+        accept={accept}
+        disabled={uploading}
+        onChange={(e) => e.target.files?.[0] && handleFile(e.target.files[0])}
+      />
+      {uploading && (
+        <div className="progress-bar">
+          <div className="progress" style={{ width: `${progress}%` }} />
+        </div>
+      )}
+    </div>
+  );
+}
+
+function formatBytes(bytes: number): string {
+  if (bytes < 1024) return `${bytes} B`;
+  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
+  return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
+}
+```
+
+---
+
+## Grading Integration
+
+### Central Grades Table
+
+All grades are now stored in the central `grades` table. When you grade a submission, the backend automatically:
+
+1. Saves score/feedback to the submission record
+2. Creates/updates a `Grade` record in the grades table
+3. Calculates percentage and letter grade
+
+```typescript
+// Grade is automatically created when grading:
+// - Quiz: After auto-grading or manual grading
+// - Assignment: When calling PATCH /grade
+// - Lab: When calling PATCH /grade
+
+interface Grade {
+  gradeId: number;
+  userId: number;
+  courseId: number;
+  gradeType: 'assignment' | 'quiz' | 'lab' | 'exam' | 'final';
+  assignmentId?: number;
+  quizId?: number;
+  labId?: number;
+  score: number;
+  maxScore: number;
+  percentage: number;
+  letterGrade: string;
+  feedback?: string;
+  isPublished: boolean;
+  createdAt: Date;
+  updatedAt: Date;
+}
+```
+
+### Viewing Grades
+
+```typescript
+// GET /api/grades/my - Student's grades
+const getMyGrades = async (): Promise<PaginatedResponse<Grade>> => {
+  return apiRequest('/api/grades/my');
+};
+
+// GET /api/grades?courseId=X - Course grades (instructor)
+const getCourseGrades = async (courseId: number): Promise<PaginatedResponse<Grade>> => {
+  return apiRequest(`/api/grades?courseId=${courseId}`);
+};
+
+// GET /api/grades/transcript/:studentId - Student transcript
+const getTranscript = async (studentId: number): Promise<Transcript> => {
+  return apiRequest(`/api/grades/transcript/${studentId}`);
+};
+
+// GET /api/grades/gpa/:studentId - GPA calculation
+const getGPA = async (studentId: number): Promise<GpaResult> => {
+  return apiRequest(`/api/grades/gpa/${studentId}`);
+};
+```
+
+---
+
+## State Management
+
+### Recommended Store Structure (Zustand)
+
+```typescript
+// stores/assessmentStore.ts
+import { create } from 'zustand';
+
+interface AssessmentStore {
+  // Quizzes
+  quizzes: Quiz[];
+  loadingQuizzes: boolean;
+  fetchQuizzes: (courseId?: number) => Promise<void>;
+  
+  // Assignments
+  assignments: Assignment[];
+  loadingAssignments: boolean;
+  fetchAssignments: (courseId?: number) => Promise<void>;
+  
+  // Labs
+  labs: Lab[];
+  loadingLabs: boolean;
+  fetchLabs: (courseId?: number) => Promise<void>;
+  
+  // Common
+  currentCourseId: number | null;
+  setCourseId: (id: number) => void;
+}
+
+export const useAssessmentStore = create<AssessmentStore>((set, get) => ({
+  // Quizzes
+  quizzes: [],
+  loadingQuizzes: false,
+  fetchQuizzes: async (courseId) => {
+    set({ loadingQuizzes: true });
+    const cid = courseId || get().currentCourseId;
+    const { data } = await apiRequest<PaginatedResponse<Quiz>>(
+      `/api/quizzes${cid ? `?courseId=${cid}` : ''}`
+    );
+    set({ quizzes: data, loadingQuizzes: false });
+  },
+  
+  // Assignments
+  assignments: [],
+  loadingAssignments: false,
+  fetchAssignments: async (courseId) => {
+    set({ loadingAssignments: true });
+    const cid = courseId || get().currentCourseId;
+    const { data } = await apiRequest<PaginatedResponse<Assignment>>(
+      `/api/assignments${cid ? `?courseId=${cid}` : ''}`
+    );
+    set({ assignments: data, loadingAssignments: false });
+  },
+  
+  // Labs
+  labs: [],
+  loadingLabs: false,
+  fetchLabs: async (courseId) => {
+    set({ loadingLabs: true });
+    const cid = courseId || get().currentCourseId;
+    const { data } = await apiRequest<PaginatedResponse<Lab>>(
+      `/api/labs${cid ? `?courseId=${cid}` : ''}`
+    );
+    set({ labs: data, loadingLabs: false });
+  },
+  
+  // Common
+  currentCourseId: null,
+  setCourseId: (id) => set({ currentCourseId: id }),
+}));
+```
+
+### Caching Strategy
+
+```typescript
+// hooks/useAssessmentCache.ts
+import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query';
+
+// Quizzes
+export function useQuizzes(courseId?: number) {
+  return useQuery({
+    queryKey: ['quizzes', courseId],
+    queryFn: () => apiRequest<PaginatedResponse<Quiz>>(
+      `/api/quizzes${courseId ? `?courseId=${courseId}` : ''}`
+    ),
+    staleTime: 5 * 60 * 1000,  // 5 minutes
+  });
+}
+
+// Single Quiz
+export function useQuiz(id: number) {
+  return useQuery({
+    queryKey: ['quiz', id],
+    queryFn: () => apiRequest<Quiz>(`/api/quizzes/${id}`),
+  });
+}
+
+// Create Quiz
+export function useCreateQuiz() {
+  const queryClient = useQueryClient();
+  
+  return useMutation({
+    mutationFn: (data: CreateQuizDto) => 
+      apiRequest<Quiz>('/api/quizzes', {
+        method: 'POST',
+        body: JSON.stringify(data),
+      }),
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ['quizzes'] });
+    },
+  });
+}
+
+// Update Quiz Status
+export function useChangeQuizStatus() {
+  const queryClient = useQueryClient();
+  
+  return useMutation({
+    mutationFn: ({ id, status }: { id: number; status: string }) =>
+      apiRequest<Quiz>(`/api/quizzes/${id}/status`, {
+        method: 'PATCH',
+        body: JSON.stringify({ status }),
+      }),
+    onSuccess: (_, { id }) => {
+      queryClient.invalidateQueries({ queryKey: ['quiz', id] });
+      queryClient.invalidateQueries({ queryKey: ['quizzes'] });
+    },
+  });
+}
+```
+
+---
+
+## Shared Components
+
+### Status Badge
+
+```typescript
+// components/StatusBadge.tsx
+type Status = 'draft' | 'published' | 'closed' | 'archived';
+
+const statusColors: Record<Status, string> = {
+  draft: 'bg-gray-500',
+  published: 'bg-green-500',
+  closed: 'bg-yellow-500',
+  archived: 'bg-red-500',
+};
+
+export function StatusBadge({ status }: { status: Status }) {
+  return (
+    <span className={`px-2 py-1 rounded text-white text-sm ${statusColors[status]}`}>
+      {status.charAt(0).toUpperCase() + status.slice(1)}
+    </span>
+  );
+}
+```
+
+### Due Date Display
+
+```typescript
+// components/DueDate.tsx
+import { formatDistanceToNow, isPast, isToday, isTomorrow } from 'date-fns';
+
+interface DueDateProps {
+  date: Date;
+  showCountdown?: boolean;
+}
+
+export function DueDate({ date, showCountdown = true }: DueDateProps) {
+  const due = new Date(date);
+  const overdue = isPast(due);
+  const today = isToday(due);
+  const tomorrow = isTomorrow(due);
+
+  let label: string;
+  let className: string;
+
+  if (overdue) {
+    label = 'Overdue';
+    className = 'text-red-600 font-bold';
+  } else if (today) {
+    label = 'Due Today';
+    className = 'text-orange-600 font-bold';
+  } else if (tomorrow) {
+    label = 'Due Tomorrow';
+    className = 'text-yellow-600';
+  } else {
+    label = showCountdown
+      ? `Due ${formatDistanceToNow(due, { addSuffix: true })}`
+      : due.toLocaleDateString();
+    className = 'text-gray-600';
+  }
+
+  return (
+    <span className={className} title={due.toLocaleString()}>
+      {label}
+    </span>
+  );
+}
+```
+
+### Grade Display
+
+```typescript
+// components/GradeDisplay.tsx
+interface GradeDisplayProps {
+  score: number;
+  maxScore: number;
+  percentage?: number;
+  letterGrade?: string;
+  showLetter?: boolean;
+}
+
+export function GradeDisplay({
+  score,
+  maxScore,
+  percentage,
+  letterGrade,
+  showLetter = true,
+}: GradeDisplayProps) {
+  const pct = percentage ?? (score / maxScore) * 100;
+  const letter = letterGrade ?? getLetterGrade(pct);
+
+  const getColor = () => {
+    if (pct >= 90) return 'text-green-600';
+    if (pct >= 80) return 'text-blue-600';
+    if (pct >= 70) return 'text-yellow-600';
+    if (pct >= 60) return 'text-orange-600';
+    return 'text-red-600';
+  };
+
+  return (
+    <div className={`grade-display ${getColor()}`}>
+      <span className="score">{score} / {maxScore}</span>
+      <span className="percentage">({pct.toFixed(1)}%)</span>
+      {showLetter && <span className="letter">{letter}</span>}
+    </div>
+  );
+}
+
+function getLetterGrade(percentage: number): string {
+  if (percentage >= 97) return 'A+';
+  if (percentage >= 93) return 'A';
+  if (percentage >= 90) return 'A-';
+  if (percentage >= 87) return 'B+';
+  if (percentage >= 83) return 'B';
+  if (percentage >= 80) return 'B-';
+  if (percentage >= 77) return 'C+';
+  if (percentage >= 73) return 'C';
+  if (percentage >= 70) return 'C-';
+  if (percentage >= 67) return 'D+';
+  if (percentage >= 63) return 'D';
+  if (percentage >= 60) return 'D-';
+  return 'F';
+}
+```
+
+### Loading Skeleton
+
+```typescript
+// components/AssessmentSkeleton.tsx
+export function AssessmentCardSkeleton() {
+  return (
+    <div className="assessment-card skeleton">
+      <div className="skeleton-line title" />
+      <div className="skeleton-line description" />
+      <div className="skeleton-line meta" />
+    </div>
+  );
+}
+
+export function AssessmentListSkeleton({ count = 5 }: { count?: number }) {
+  return (
+    <div className="assessment-list">
+      {Array.from({ length: count }).map((_, i) => (
+        <AssessmentCardSkeleton key={i} />
+      ))}
+    </div>
+  );
+}
+```
+
+---
+
+## Error Handling
+
+### Common Error Codes
+
+| Status | Meaning | Action |
+|--------|---------|--------|
+| 400 | Bad Request | Show validation errors |
+| 401 | Unauthorized | Redirect to login |
+| 403 | Forbidden | Show "access denied" |
+| 404 | Not Found | Show "not found" page |
+| 409 | Conflict | Show conflict message |
+| 500 | Server Error | Show generic error |
+
+### Error Boundary
+
+```typescript
+// components/ErrorBoundary.tsx
+import { Component, ErrorInfo, ReactNode } from 'react';
+
+interface Props {
+  children: ReactNode;
+  fallback?: ReactNode;
+}
+
+interface State {
+  hasError: boolean;
+  error?: Error;
+}
+
+export class ErrorBoundary extends Component<Props, State> {
+  state: State = { hasError: false };
+
+  static getDerivedStateFromError(error: Error): State {
+    return { hasError: true, error };
+  }
+
+  componentDidCatch(error: Error, info: ErrorInfo) {
+    console.error('Error caught:', error, info);
+    // Log to monitoring service
+  }
+
+  render() {
+    if (this.state.hasError) {
+      return this.props.fallback || (
+        <div className="error-fallback">
+          <h2>Something went wrong</h2>
+          <p>{this.state.error?.message}</p>
+          <button onClick={() => window.location.reload()}>
+            Refresh Page
+          </button>
+        </div>
+      );
+    }
+
+    return this.props.children;
+  }
+}
+```
+
+### API Error Hook
+
+```typescript
+// hooks/useApiError.ts
+import { useState, useCallback } from 'react';
+
+interface ApiError {
+  message: string;
+  statusCode: number;
+  field?: string;
+}
+
+export function useApiError() {
+  const [error, setError] = useState<ApiError | null>(null);
+
+  const handleError = useCallback((err: unknown) => {
+    if (err instanceof Response) {
+      err.json().then(data => {
+        setError({
+          message: data.message || 'An error occurred',
+          statusCode: err.status,
+          field: data.field,
+        });
+      });
+    } else if (err instanceof Error) {
+      setError({
+        message: err.message,
+        statusCode: 500,
+      });
+    }
+  }, []);
+
+  const clearError = useCallback(() => setError(null), []);
+
+  return { error, handleError, clearError };
+}
+```
+
+---
+
+## Real-time Features
+
+### Quiz Timer WebSocket (Future)
+
+```typescript
+// For quiz timers, consider WebSocket connection for:
+// - Server-authoritative timer
+// - Auto-submit on timeout
+// - Sync across devices
+
+interface TimerMessage {
+  type: 'TICK' | 'EXPIRED' | 'SYNC';
+  attemptId: number;
+  remainingSeconds: number;
+}
+
+// Example WebSocket setup (to be implemented)
+const connectQuizTimer = (attemptId: number, onMessage: (msg: TimerMessage) => void) => {
+  const ws = new WebSocket(`ws://localhost:8081/quiz-timer/${attemptId}`);
+  
+  ws.onmessage = (event) => {
+    const message = JSON.parse(event.data);
+    onMessage(message);
+  };
+
+  return () => ws.close();
+};
+```
+
+### Notifications
+
+```typescript
+// Poll for notifications (WebSocket integration planned)
+const useNotifications = () => {
+  const [notifications, setNotifications] = useState<Notification[]>([]);
+
+  useEffect(() => {
+    const poll = setInterval(async () => {
+      const data = await apiRequest<Notification[]>('/api/notifications/unread');
+      setNotifications(data);
+    }, 30000);  // Poll every 30 seconds
+
+    return () => clearInterval(poll);
+  }, []);
+
+  return notifications;
+};
+```
+
+---
+
+## Quick Reference
+
+### Endpoint Summary
+
+| Module | Base URL | CRUD | Submit | Grade | Status |
+|--------|----------|------|--------|-------|--------|
+| Quizzes | `/api/quizzes` | ✅ | POST `/attempts/start` | POST `/attempts/:id/grade` | PATCH `/:id/status` |
+| Assignments | `/api/assignments` | ✅ | POST `/:id/submit` | PATCH `/:id/submissions/:subId/grade` | PATCH `/:id/status` |
+| Labs | `/api/labs` | ✅ | POST `/:id/submit` | PATCH `/:id/submissions/:subId/grade` | PATCH `/:id/status` |
+
+### Status Values
+
+All three modules use the same status values:
+- `draft` - Not visible to students
+- `published` - Available to students
+- `closed` - No longer accepting submissions
+- `archived` - Hidden from all views
+
+### Test Accounts
+
+| Role | Email | Password |
+|------|-------|----------|
+| Admin | admin.tarek@example.com | SecureP@ss123 |
+| Instructor | instructor.tarek@example.com | SecureP@ss123 |
+| TA | ta.tarek@example.com | SecureP@ss123 |
+| Student | student.tarek@example.com | SecureP@ss123 |

Documentation/ASSIGNMENTS_FRONTEND_GUIDE.md

@@ -0,0 +1,508 @@
+# Assignments Frontend Integration Guide
+
+> Complete API reference and integration guide for building assignment functionality in the EduVerse frontend.
+
+---
+
+## Table of Contents
+
+1. [Overview](#overview)
+2. [User Stories](#user-stories)
+3. [API Endpoints](#api-endpoints)
+4. [Data Models](#data-models)
+5. [Flow Diagrams](#flow-diagrams)
+6. [Component Structure](#component-structure)
+7. [Code Examples](#code-examples)
+
+---
+
+## Overview
+
+The Assignments module supports:
+- **Submission Types**: Text, file upload, link, or Google Drive file
+- **File Management**: Local upload or Google Drive integration
+- **Late Submissions**: Configurable late penalty percentage
+- **Status**: draft → published → closed → archived
+- **Grading**: Manual grading with score and feedback
+
+---
+
+## User Stories
+
+### Instructor
+
+| Story | Description |
+|-------|-------------|
+| **Create Assignment** | Create assignment with title, description, due date, max score |
+| **Add Instructions** | Upload instruction files to Google Drive |
+| **Set Requirements** | Configure submission type, file limits, late penalty |
+| **Publish** | Change status to make visible to students |
+| **View Submissions** | See all student submissions with timestamps |
+| **Grade** | Assign score and feedback to submissions |
+| **Download Files** | Download/view student submitted files |
+
+### Student
+
+| Story | Description |
+|-------|-------------|
+| **View Assignments** | See all assignments for enrolled courses |
+| **View Details** | Read instructions and requirements |
+| **Submit** | Submit text, upload file, paste link, or select Drive file |
+| **Check Status** | See if submission is on time or late |
+| **View Grade** | See score and feedback after grading |
+| **Resubmit** | Submit again if allowed (increments attempt number) |
+
+---
+
+## API Endpoints
+
+### Assignment CRUD
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `GET` | `/api/assignments` | List assignments (with filters) | All authenticated |
+| `GET` | `/api/assignments/:id` | Get assignment details | All authenticated |
+| `POST` | `/api/assignments` | Create assignment | INSTRUCTOR, TA, ADMIN |
+| `PATCH` | `/api/assignments/:id` | Update assignment | INSTRUCTOR, TA, ADMIN |
+| `DELETE` | `/api/assignments/:id` | Delete assignment | INSTRUCTOR, ADMIN |
+| `PATCH` | `/api/assignments/:id/status` | Change status | INSTRUCTOR, TA, ADMIN |
+
+### Instructions (Google Drive)
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `POST` | `/api/assignments/:id/instructions/upload` | Upload instruction file | INSTRUCTOR, TA, ADMIN |
+
+### Submissions
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `GET` | `/api/assignments/:id/submissions` | List all submissions | INSTRUCTOR, TA |
+| `GET` | `/api/assignments/:id/submissions/my` | Get my submission | STUDENT |
+| `POST` | `/api/assignments/:id/submit` | Submit assignment | STUDENT |
+| `POST` | `/api/assignments/:id/submissions/upload` | Upload file to Drive | STUDENT |
+
+### Grading
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `PATCH` | `/api/assignments/:id/submissions/:subId/grade` | Grade submission | INSTRUCTOR, TA |
+
+---
+
+## Data Models
+
+### Assignment
+
+```typescript
+interface Assignment {
+  assignmentId: number;
+  courseId: number;
+  title: string;
+  description?: string;
+  instructions?: string;  // Markdown text
+  dueDate?: Date;
+  maxScore: number;
+  weight?: number;
+  status: 'draft' | 'published' | 'closed' | 'archived';
+  submissionType: 'text' | 'file' | 'link' | 'any';
+  maxFileSize?: number;   // in bytes
+  allowedFileTypes?: string[];  // e.g., ['pdf', 'docx']
+  latePenalty?: number;   // percentage per day
+  createdAt: Date;
+  updatedAt: Date;
+}
+```
+
+### AssignmentSubmission
+
+```typescript
+interface AssignmentSubmission {
+  submissionId: number;
+  assignmentId: number;
+  userId: number;
+  user?: User;
+  submissionText?: string;
+  submissionLink?: string;
+  fileId?: number;        // Drive file ID
+  file?: DriveFile;
+  score?: number;
+  feedback?: string;
+  gradedBy?: number;
+  gradedAt?: Date;
+  isLate: boolean;
+  attemptNumber: number;
+  submittedAt: Date;
+}
+```
+
+---
+
+## Flow Diagrams
+
+### Assignment Submission Flow
+
+```
+┌─────────────────┐
+│ Student Views   │
+│ Assignment      │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ Read Instructions│
+│ & Requirements  │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────────────────────────┐
+│ Choose Submission Type:             │
+│ ┌─────┐ ┌─────┐ ┌─────┐ ���─────────┐│
+│ │Text │ │File │ │Link │ │Drive    ││
+│ └──┬──┘ └──┬──┘ └──┬──┘ └────┬────┘│
+└────┼───────┼───────┼─────────┼─────┘
+     │       │       │         │
+     └───────┴───────┴─────────┘
+                 │
+                 ▼
+        ┌─────────────────┐
+        │ POST /submit    │
+        │ (with content)  │
+        └────────┬────────┘
+                 │
+                 ▼
+        ┌─────────────────┐
+        │ Check Due Date  │
+        │ → isLate flag   │
+        └────────┬────────┘
+                 │
+                 ▼
+        ┌─────────────────┐
+        │ Submission      │
+        │ Created         │
+        └────────┬────────┘
+                 │
+         Wait for Grading
+                 │
+                 ▼
+        ┌─────────────────┐
+        │ View Grade &    │
+        │ Feedback        │
+        └─────────────────┘
+```
+
+### Assignment Creation Flow
+
+```
+┌─────────────────┐
+│ Instructor      │
+│ Creates         │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ POST /assignments│
+│ (status: draft) │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ Upload Instruction│
+│ Files (optional)│
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ Configure       │
+│ Settings        │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ PATCH /status   │
+│ → "published"   │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ Students Can    │
+│ Submit          │
+└─────────────────┘
+```
+
+---
+
+## Component Structure
+
+```
+AssignmentModule/
+├── instructor/
+│   ├── AssignmentList.tsx      # List with filters/sorting
+│   ├── AssignmentCreate.tsx    # Create form
+│   ├── AssignmentEdit.tsx      # Edit settings
+│   ├── InstructionUpload.tsx   # Upload instruction files
+│   ├── SubmissionList.tsx      # View all submissions
+│   └── GradingPanel.tsx        # Grade with score/feedback
+├── student/
+│   ├── AssignmentList.tsx      # View available assignments
+│   ├── AssignmentView.tsx      # View details/instructions
+│   ├── SubmissionForm.tsx      # Submit assignment
+│   ├── FileUpload.tsx          # Upload file component
+│   └── MySubmission.tsx        # View submission & grade
+└── shared/
+    ├── DueDateBadge.tsx        # Due date with countdown
+    ├── LateBadge.tsx           # Late submission indicator
+    ├── StatusBadge.tsx         # Assignment status
+    └── FilePreviewer.tsx       # Preview uploaded files
+```
+
+---
+
+## Code Examples
+
+### Create Assignment
+
+```typescript
+// POST /api/assignments
+const createAssignment = async (data: CreateAssignmentDto): Promise<Assignment> => {
+  const response = await fetch('/api/assignments', {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({
+      courseId: 1,
+      title: 'Research Paper',
+      description: 'Write a 10-page research paper on a topic of your choice.',
+      instructions: '## Requirements\n- 10 pages minimum\n- APA format\n- Include references',
+      dueDate: '2025-03-01T23:59:59Z',
+      maxScore: 100,
+      weight: 20,
+      submissionType: 'file',
+      maxFileSize: 10485760,  // 10MB
+      allowedFileTypes: ['pdf', 'docx'],
+      latePenalty: 10,  // 10% per day
+    }),
+  });
+  return response.json();
+};
+```
+
+### Upload Instruction File
+
+```typescript
+// POST /api/assignments/:id/instructions/upload
+const uploadInstructions = async (assignmentId: number, file: File): Promise<void> => {
+  const formData = new FormData();
+  formData.append('file', file);
+
+  await fetch(`/api/assignments/${assignmentId}/instructions/upload`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${token}`,
+    },
+    body: formData,
+  });
+};
+```
+
+### Change Assignment Status
+
+```typescript
+// PATCH /api/assignments/:id/status
+const publishAssignment = async (assignmentId: number): Promise<Assignment> => {
+  const response = await fetch(`/api/assignments/${assignmentId}/status`, {
+    method: 'PATCH',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({ status: 'published' }),
+  });
+  return response.json();
+};
+```
+
+### Submit Assignment (Text)
+
+```typescript
+// POST /api/assignments/:id/submit
+const submitText = async (assignmentId: number, text: string): Promise<AssignmentSubmission> => {
+  const response = await fetch(`/api/assignments/${assignmentId}/submit`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({ submissionText: text }),
+  });
+  return response.json();
+};
+```
+
+### Submit Assignment (File Upload)
+
+```typescript
+// Step 1: Upload file to Drive
+// POST /api/assignments/:id/submissions/upload
+const uploadFile = async (assignmentId: number, file: File): Promise<{ fileId: number }> => {
+  const formData = new FormData();
+  formData.append('file', file);
+
+  const response = await fetch(`/api/assignments/${assignmentId}/submissions/upload`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${token}`,
+    },
+    body: formData,
+  });
+  return response.json();
+};
+
+// Step 2: Submit with file ID
+// POST /api/assignments/:id/submit
+const submitWithFile = async (assignmentId: number, fileId: number): Promise<AssignmentSubmission> => {
+  const response = await fetch(`/api/assignments/${assignmentId}/submit`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({ fileId }),
+  });
+  return response.json();
+};
+```
+
+### Submit Assignment (Link)
+
+```typescript
+// POST /api/assignments/:id/submit
+const submitLink = async (assignmentId: number, link: string): Promise<AssignmentSubmission> => {
+  const response = await fetch(`/api/assignments/${assignmentId}/submit`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({ submissionLink: link }),
+  });
+  return response.json();
+};
+```
+
+### Grade Submission
+
+```typescript
+// PATCH /api/assignments/:id/submissions/:subId/grade
+const gradeSubmission = async (
+  assignmentId: number,
+  submissionId: number,
+  score: number,
+  feedback: string
+): Promise<AssignmentSubmission> => {
+  const response = await fetch(
+    `/api/assignments/${assignmentId}/submissions/${submissionId}/grade`,
+    {
+      method: 'PATCH',
+      headers: {
+        'Content-Type': 'application/json',
+        'Authorization': `Bearer ${token}`,
+      },
+      body: JSON.stringify({ score, feedback }),
+    }
+  );
+  return response.json();
+};
+```
+
+### Get My Submission
+
+```typescript
+// GET /api/assignments/:id/submissions/my
+const getMySubmission = async (assignmentId: number): Promise<AssignmentSubmission | null> => {
+  const response = await fetch(`/api/assignments/${assignmentId}/submissions/my`, {
+    headers: {
+      'Authorization': `Bearer ${token}`,
+    },
+  });
+  
+  if (response.status === 404) {
+    return null;  // No submission yet
+  }
+  
+  return response.json();
+};
+```
+
+### Due Date Badge Component
+
+```typescript
+// components/DueDateBadge.tsx
+import { useMemo } from 'react';
+
+interface DueDateBadgeProps {
+  dueDate: Date;
+}
+
+export function DueDateBadge({ dueDate }: DueDateBadgeProps) {
+  const { status, text } = useMemo(() => {
+    const now = new Date();
+    const due = new Date(dueDate);
+    const diff = due.getTime() - now.getTime();
+    const days = Math.ceil(diff / (1000 * 60 * 60 * 24));
+
+    if (diff < 0) {
+      return { status: 'overdue', text: 'Overdue' };
+    } else if (days === 0) {
+      return { status: 'today', text: 'Due Today' };
+    } else if (days === 1) {
+      return { status: 'soon', text: 'Due Tomorrow' };
+    } else if (days <= 3) {
+      return { status: 'soon', text: `Due in ${days} days` };
+    } else {
+      return { status: 'normal', text: due.toLocaleDateString() };
+    }
+  }, [dueDate]);
+
+  return (
+    <span className={`badge badge-${status}`}>
+      {text}
+    </span>
+  );
+}
+```
+
+---
+
+## Error Handling
+
+| Error | Status | Message | UI Action |
+|-------|--------|---------|-----------|
+| Assignment not found | 404 | Assignment not found | Show error, redirect |
+| Not enrolled | 403 | Not enrolled in course | Show enrollment prompt |
+| Assignment closed | 400 | Assignment is closed | Disable submit button |
+| File too large | 400 | File exceeds max size | Show size limit |
+| Invalid file type | 400 | File type not allowed | Show allowed types |
+| Already submitted | 400 | Submission exists | Show resubmit option |
+
+---
+
+## Best Practices
+
+1. **Auto-save drafts** - Save text drafts to localStorage
+2. **File validation** - Check file size/type before upload
+3. **Progress indicator** - Show upload progress for large files
+4. **Confirmation** - Confirm before final submission
+5. **Late warning** - Show warning if submitting after due date
+6. **Offline queue** - Queue submissions if offline
+
+---
+
+## Related Modules
+
+- [Grades Module](/api/grades) - Assignment scores saved to grades table
+- [Google Drive Module](/api/google-drive) - File storage
+- [Courses Module](/api/courses) - Assignments belong to courses
+- [Notifications Module](/api/notifications) - Due date reminders

Documentation/LABS_FRONTEND_GUIDE.md

@@ -0,0 +1,661 @@
+# Labs Frontend Integration Guide
+
+> Complete API reference and integration guide for building lab functionality in the EduVerse frontend.
+
+---
+
+## Table of Contents
+
+1. [Overview](#overview)
+2. [User Stories](#user-stories)
+3. [API Endpoints](#api-endpoints)
+4. [Data Models](#data-models)
+5. [Flow Diagrams](#flow-diagrams)
+6. [Component Structure](#component-structure)
+7. [Code Examples](#code-examples)
+
+---
+
+## Overview
+
+The Labs module supports:
+- **Step-by-step Instructions**: Ordered instruction cards with text and files
+- **TA Materials**: Private materials (answer keys, rubrics) visible only to TAs/instructors
+- **Attendance Tracking**: Mark students as present/absent/late/excused
+- **Submissions**: Text or file upload via Google Drive
+- **Status**: draft → published → closed → archived
+- **Grading**: Manual grading with score and feedback
+
+---
+
+## User Stories
+
+### Instructor
+
+| Story | Description |
+|-------|-------------|
+| **Create Lab** | Create lab with title, description, due date, max score |
+| **Add Instructions** | Add step-by-step instructions with text and/or files |
+| **Upload TA Materials** | Upload answer keys, rubrics (private to TAs) |
+| **Publish** | Change status to make visible to students |
+| **View Submissions** | See all student submissions |
+| **Grade** | Assign score and feedback |
+| **View Attendance** | See attendance report for lab session |
+
+### Teaching Assistant
+
+| Story | Description |
+|-------|-------------|
+| **Mark Attendance** | Mark individual student attendance (present/absent/late/excused) |
+| **View TA Materials** | Access answer keys and rubrics |
+| **Grade Submissions** | Grade assigned student submissions |
+| **View Instructions** | View all lab instructions |
+
+### Student
+
+| Story | Description |
+|-------|-------------|
+| **View Labs** | See all labs for enrolled courses |
+| **View Instructions** | See step-by-step lab instructions |
+| **Submit Work** | Submit text or upload file |
+| **Check Attendance** | See my attendance status |
+| **View Grade** | See score and feedback after grading |
+
+---
+
+## API Endpoints
+
+### Lab CRUD
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `GET` | `/api/labs` | List labs (with filters) | All authenticated |
+| `GET` | `/api/labs/:id` | Get lab details | All authenticated |
+| `POST` | `/api/labs` | Create lab | INSTRUCTOR, ADMIN |
+| `PUT` | `/api/labs/:id` | Update lab | INSTRUCTOR, ADMIN |
+| `DELETE` | `/api/labs/:id` | Delete lab | INSTRUCTOR, ADMIN |
+| `PATCH` | `/api/labs/:id/status` | Change status | INSTRUCTOR, TA, ADMIN |
+
+### Instructions
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `GET` | `/api/labs/:id/instructions` | Get all instructions | All authenticated |
+| `POST` | `/api/labs/:id/instructions` | Add instruction | INSTRUCTOR, TA, ADMIN |
+| `POST` | `/api/labs/:id/instructions/upload` | Upload instruction file | INSTRUCTOR, TA, ADMIN |
+
+### TA Materials
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `POST` | `/api/labs/:id/ta-materials/upload` | Upload TA material | INSTRUCTOR, TA, ADMIN |
+
+### Submissions
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `GET` | `/api/labs/:id/submissions` | List all submissions | INSTRUCTOR, TA |
+| `GET` | `/api/labs/:id/submissions/my` | Get my submission | STUDENT |
+| `POST` | `/api/labs/:id/submit` | Submit lab work | STUDENT |
+| `POST` | `/api/labs/:id/submissions/upload` | Upload file to Drive | STUDENT |
+
+### Grading
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `PATCH` | `/api/labs/:id/submissions/:subId/grade` | Grade submission | INSTRUCTOR, TA |
+
+### Attendance
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `GET` | `/api/labs/:id/attendance` | Get attendance list | INSTRUCTOR, TA |
+| `POST` | `/api/labs/:id/attendance` | Mark attendance | INSTRUCTOR, TA |
+
+---
+
+## Data Models
+
+### Lab
+
+```typescript
+interface Lab {
+  labId: number;
+  courseId: number;
+  title: string;
+  description?: string;
+  dueDate?: Date;
+  maxScore: number;
+  weight?: number;
+  status: 'draft' | 'published' | 'closed' | 'archived';
+  instructions?: LabInstruction[];
+  createdAt: Date;
+  updatedAt: Date;
+}
+```
+
+### LabInstruction
+
+```typescript
+interface LabInstruction {
+  instructionId: number;
+  labId: number;
+  instructionText?: string;  // Markdown supported
+  fileId?: number;           // Drive file ID
+  file?: DriveFile;
+  orderIndex: number;
+  createdAt: Date;
+}
+```
+
+### LabSubmission
+
+```typescript
+interface LabSubmission {
+  submissionId: number;
+  labId: number;
+  userId: number;
+  user?: User;
+  submissionText?: string;
+  fileId?: number;
+  file?: DriveFile;
+  status: 'submitted' | 'graded' | 'returned' | 'resubmit';
+  score?: number;
+  feedback?: string;
+  gradedBy?: number;
+  gradedAt?: Date;
+  isLate: boolean;
+  submittedAt: Date;
+}
+```
+
+### LabAttendance
+
+```typescript
+interface LabAttendance {
+  attendanceId: number;
+  labId: number;
+  userId: number;
+  user?: User;
+  status: 'present' | 'absent' | 'excused' | 'late';
+  notes?: string;
+  markedBy: number;
+  markedAt: Date;
+}
+```
+
+---
+
+## Flow Diagrams
+
+### Lab Session Flow
+
+```
+┌─────────────────┐
+│ Instructor      │
+│ Creates Lab     │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ Add Instructions│
+│ (Step by Step)  │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ Upload TA       │
+│ Materials       │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ PATCH /status   │
+│ → "published"   │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────────────────────────┐
+│            LAB SESSION              │
+│  ┌──────────┐      ┌──────────────┐│
+│  │   TA     │      │   Students   ││
+│  │          │      │              ││
+│  │ Mark     │      │ Follow       ││
+│  │ Attend.  │      │ Instructions ││
+│  │          │      │              ││
+│  │ View TA  │      │ Submit Work  ││
+│  │ Materials│      │              ││
+│  │          │      │ Check Grade  ││
+│  │ Grade    │      │              ││
+│  └──────────┘      └──────────────┘│
+└─────────────────────────────────────┘
+```
+
+### Submission & Grading Flow
+
+```
+┌─────────────────┐
+│ Student Views   │
+│ Lab Instructions│
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ Complete Lab    │
+│ Work            │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────────────────┐
+│ Submit:                     │
+│ ┌───────────┐ ┌───────────┐│
+│ │ Text      │ │ File      ││
+│ │ (markdown)│ │ (upload)  ││
+│ └─────┬─────┘ └─────┬─────┘│
+└───────┼─────────────┼──────┘
+        └──────┬──────┘
+               │
+               ▼
+      ┌─────────────────┐
+      │ POST /submit    │
+      └────────┬────────┘
+               │
+               ▼
+      ┌─────────────────┐
+      │ status:         │
+      │ "submitted"     │
+      └────────┬────────┘
+               │
+          TA Grades
+               │
+               ▼
+      ┌─────────────────┐
+      │ PATCH /grade    │
+      │ score + feedback│
+      └────────┬────────┘
+               │
+               ▼
+      ┌─────────────────┐
+      │ status: "graded"│
+      │ → grades table  │
+      └─────────────────┘
+```
+
+---
+
+## Component Structure
+
+```
+LabModule/
+├── instructor/
+│   ├── LabList.tsx             # List all labs
+│   ├── LabCreate.tsx           # Create lab form
+│   ├── LabEdit.tsx             # Edit lab settings
+│   ├── InstructionEditor.tsx   # Add/edit instructions
+│   ├── TaMaterialUpload.tsx    # Upload answer keys
+│   ├── SubmissionList.tsx      # View all submissions
+│   └── AttendanceSheet.tsx     # Full attendance grid
+├── ta/
+│   ├── AttendanceMarker.tsx    # Mark individual attendance
+│   ├── SubmissionGrader.tsx    # Grade submissions
+│   ├── TaMaterials.tsx         # View answer keys/rubrics
+│   └── MyAssignedLabs.tsx      # Labs assigned to TA
+├── student/
+│   ├── LabList.tsx             # View available labs
+│   ├── LabView.tsx             # View lab details
+│   ├── InstructionViewer.tsx   # Step-through instructions
+│   ├── SubmissionForm.tsx      # Submit work
+│   └── MySubmission.tsx        # View grade/feedback
+└── shared/
+    ├── InstructionCard.tsx     # Single instruction display
+    ├── AttendanceBadge.tsx     # Present/absent/late badge
+    ├── LabStatusBadge.tsx      # Draft/published/closed
+    └── StepProgress.tsx        # Instruction step progress
+```
+
+---
+
+## Code Examples
+
+### Create Lab
+
+```typescript
+// POST /api/labs
+const createLab = async (data: CreateLabDto): Promise<Lab> => {
+  const response = await fetch('/api/labs', {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({
+      courseId: 1,
+      title: 'Lab 1: Introduction to React',
+      description: 'Hands-on introduction to React components and hooks.',
+      dueDate: '2025-02-15T17:00:00Z',
+      maxScore: 50,
+      weight: 10,
+    }),
+  });
+  return response.json();
+};
+```
+
+### Add Instruction
+
+```typescript
+// POST /api/labs/:id/instructions
+const addInstruction = async (labId: number, text: string, orderIndex: number): Promise<LabInstruction> => {
+  const response = await fetch(`/api/labs/${labId}/instructions`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({
+      instructionText: text,
+      orderIndex,
+    }),
+  });
+  return response.json();
+};
+```
+
+### Upload Instruction File
+
+```typescript
+// POST /api/labs/:id/instructions/upload
+const uploadInstructionFile = async (labId: number, file: File): Promise<LabInstruction> => {
+  const formData = new FormData();
+  formData.append('file', file);
+
+  const response = await fetch(`/api/labs/${labId}/instructions/upload`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${token}`,
+    },
+    body: formData,
+  });
+  return response.json();
+};
+```
+
+### Upload TA Material
+
+```typescript
+// POST /api/labs/:id/ta-materials/upload
+const uploadTaMaterial = async (labId: number, file: File): Promise<void> => {
+  const formData = new FormData();
+  formData.append('file', file);
+
+  await fetch(`/api/labs/${labId}/ta-materials/upload`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${token}`,
+    },
+    body: formData,
+  });
+};
+```
+
+### Change Lab Status
+
+```typescript
+// PATCH /api/labs/:id/status
+const publishLab = async (labId: number): Promise<Lab> => {
+  const response = await fetch(`/api/labs/${labId}/status`, {
+    method: 'PATCH',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({ status: 'published' }),
+  });
+  return response.json();
+};
+```
+
+### Mark Attendance
+
+```typescript
+// POST /api/labs/:id/attendance
+const markAttendance = async (
+  labId: number,
+  userId: number,
+  status: 'present' | 'absent' | 'excused' | 'late',
+  notes?: string
+): Promise<LabAttendance> => {
+  const response = await fetch(`/api/labs/${labId}/attendance`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({ userId, status, notes }),
+  });
+  return response.json();
+};
+```
+
+### Submit Lab Work
+
+```typescript
+// POST /api/labs/:id/submit
+const submitLab = async (labId: number, text: string): Promise<LabSubmission> => {
+  const response = await fetch(`/api/labs/${labId}/submit`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({ submissionText: text }),
+  });
+  return response.json();
+};
+```
+
+### Upload Submission File
+
+```typescript
+// POST /api/labs/:id/submissions/upload
+const uploadSubmissionFile = async (labId: number, file: File): Promise<{ fileId: number }> => {
+  const formData = new FormData();
+  formData.append('file', file);
+
+  const response = await fetch(`/api/labs/${labId}/submissions/upload`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${token}`,
+    },
+    body: formData,
+  });
+  return response.json();
+};
+```
+
+### Grade Submission
+
+```typescript
+// PATCH /api/labs/:id/submissions/:subId/grade
+const gradeSubmission = async (
+  labId: number,
+  submissionId: number,
+  score: number,
+  feedback: string
+): Promise<LabSubmission> => {
+  const response = await fetch(
+    `/api/labs/${labId}/submissions/${submissionId}/grade`,
+    {
+      method: 'PATCH',
+      headers: {
+        'Content-Type': 'application/json',
+        'Authorization': `Bearer ${token}`,
+      },
+      body: JSON.stringify({ score, feedback }),
+    }
+  );
+  return response.json();
+};
+```
+
+### Instruction Viewer Component
+
+```typescript
+// components/InstructionViewer.tsx
+import { useState } from 'react';
+
+interface InstructionViewerProps {
+  instructions: LabInstruction[];
+}
+
+export function InstructionViewer({ instructions }: InstructionViewerProps) {
+  const [currentStep, setCurrentStep] = useState(0);
+  const sorted = [...instructions].sort((a, b) => a.orderIndex - b.orderIndex);
+
+  const current = sorted[currentStep];
+  const canGoPrev = currentStep > 0;
+  const canGoNext = currentStep < sorted.length - 1;
+
+  return (
+    <div className="instruction-viewer">
+      {/* Progress */}
+      <div className="step-progress">
+        {sorted.map((_, idx) => (
+          <div
+            key={idx}
+            className={`step ${idx === currentStep ? 'active' : ''} ${idx < currentStep ? 'completed' : ''}`}
+            onClick={() => setCurrentStep(idx)}
+          />
+        ))}
+      </div>
+
+      {/* Current Instruction */}
+      <div className="instruction-card">
+        <h3>Step {currentStep + 1} of {sorted.length}</h3>
+        
+        {current.instructionText && (
+          <div className="instruction-text" 
+               dangerouslySetInnerHTML={{ __html: renderMarkdown(current.instructionText) }} />
+        )}
+        
+        {current.file && (
+          <a href={current.file.webViewLink} target="_blank" rel="noopener noreferrer">
+            📎 {current.file.fileName}
+          </a>
+        )}
+      </div>
+
+      {/* Navigation */}
+      <div className="navigation">
+        <button disabled={!canGoPrev} onClick={() => setCurrentStep(s => s - 1)}>
+          ← Previous
+        </button>
+        <button disabled={!canGoNext} onClick={() => setCurrentStep(s => s + 1)}>
+          Next →
+        </button>
+      </div>
+    </div>
+  );
+}
+```
+
+### Attendance Marker Component
+
+```typescript
+// components/AttendanceMarker.tsx
+import { useState } from 'react';
+
+interface AttendanceMarkerProps {
+  labId: number;
+  students: User[];
+  attendance: LabAttendance[];
+  onMark: (userId: number, status: string, notes?: string) => Promise<void>;
+}
+
+export function AttendanceMarker({ labId, students, attendance, onMark }: AttendanceMarkerProps) {
+  const getStatus = (userId: number) => {
+    const record = attendance.find(a => a.userId === userId);
+    return record?.status || 'not_marked';
+  };
+
+  const statusOptions = ['present', 'absent', 'late', 'excused'];
+
+  return (
+    <div className="attendance-marker">
+      <table>
+        <thead>
+          <tr>
+            <th>Student</th>
+            <th>Status</th>
+            <th>Notes</th>
+          </tr>
+        </thead>
+        <tbody>
+          {students.map(student => (
+            <tr key={student.userId}>
+              <td>{student.firstName} {student.lastName}</td>
+              <td>
+                <select
+                  value={getStatus(student.userId)}
+                  onChange={(e) => onMark(student.userId, e.target.value)}
+                >
+                  <option value="not_marked">-- Select --</option>
+                  {statusOptions.map(status => (
+                    <option key={status} value={status}>
+                      {status.charAt(0).toUpperCase() + status.slice(1)}
+                    </option>
+                  ))}
+                </select>
+              </td>
+              <td>
+                <input
+                  type="text"
+                  placeholder="Optional notes"
+                  onBlur={(e) => {
+                    if (e.target.value) {
+                      onMark(student.userId, getStatus(student.userId), e.target.value);
+                    }
+                  }}
+                />
+              </td>
+            </tr>
+          ))}
+        </tbody>
+      </table>
+    </div>
+  );
+}
+```
+
+---
+
+## Error Handling
+
+| Error | Status | Message | UI Action |
+|-------|--------|---------|-----------|
+| Lab not found | 404 | Lab not found | Show error, redirect |
+| Not enrolled | 403 | Not enrolled in course | Show enrollment prompt |
+| Lab closed | 400 | Lab is closed | Disable submit |
+| Already submitted | 400 | Submission exists | Show resubmit option |
+| File too large | 400 | File exceeds max size | Show size limit |
+| Attendance exists | 400 | Attendance already marked | Show update option |
+
+---
+
+## Best Practices
+
+1. **Step progress persistence** - Save current step to localStorage
+2. **Auto-save drafts** - Save submission drafts
+3. **Attendance confirmation** - Confirm before marking absent
+4. **File preview** - Preview files before submission
+5. **Offline support** - Queue attendance marks if offline
+6. **Real-time updates** - Use WebSocket for live attendance status
+
+---
+
+## Related Modules
+
+- [Grades Module](/api/grades) - Lab scores saved to grades table
+- [Google Drive Module](/api/google-drive) - File storage
+- [Courses Module](/api/courses) - Labs belong to courses
+- [Users Module](/api/users) - Student/TA info for attendance

Documentation/QUIZZES_FRONTEND_GUIDE.md

@@ -0,0 +1,508 @@
+# Quizzes Frontend Integration Guide
+
+> Complete API reference and integration guide for building quiz functionality in the EduVerse frontend.
+
+---
+
+## Table of Contents
+
+1. [Overview](#overview)
+2. [User Stories](#user-stories)
+3. [API Endpoints](#api-endpoints)
+4. [Data Models](#data-models)
+5. [Flow Diagrams](#flow-diagrams)
+6. [Component Structure](#component-structure)
+7. [Code Examples](#code-examples)
+
+---
+
+## Overview
+
+The Quizzes module supports:
+- **Question Types**: MCQ, True/False, Short Answer, Essay, Matching
+- **Auto-grading**: MCQ, True/False, Short Answer (exact match)
+- **Manual grading**: Essay, Short Answer (flexible grading)
+- **Settings**: Time limits, max attempts, randomization, passing score
+- **Status**: draft → published → closed → archived
+
+---
+
+## User Stories
+
+### Instructor
+
+| Story | Description |
+|-------|-------------|
+| **Create Quiz** | Create a quiz with title, description, settings (time limit, max attempts, passing score) |
+| **Add Questions** | Add questions with types: MCQ, true/false, short answer, essay, matching |
+| **Reorder Questions** | Drag-and-drop to reorder questions |
+| **Publish/Unpublish** | Change quiz status (draft/published/closed/archived) |
+| **View Attempts** | See all student attempts with scores |
+| **Manual Grade** | Grade essay/short answer questions with points and feedback |
+| **View Statistics** | See quiz analytics (avg score, pass rate, question analysis) |
+
+### Student
+
+| Story | Description |
+|-------|-------------|
+| **View Quizzes** | See available quizzes for enrolled courses |
+| **Start Quiz** | Begin a new attempt (if attempts remaining) |
+| **Answer Questions** | Answer questions with timer countdown |
+| **Submit Quiz** | Submit answers and see immediate results (auto-graded) |
+| **View Results** | See detailed results with correct answers (after submission) |
+| **View History** | See all past attempts with scores |
+
+---
+
+## API Endpoints
+
+### Quiz CRUD
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `GET` | `/api/quizzes` | List quizzes (with filters) | All authenticated |
+| `GET` | `/api/quizzes/:id` | Get quiz details | All authenticated |
+| `POST` | `/api/quizzes` | Create quiz | INSTRUCTOR, TA, ADMIN |
+| `PUT` | `/api/quizzes/:id` | Update quiz | INSTRUCTOR, TA, ADMIN |
+| `DELETE` | `/api/quizzes/:id` | Delete quiz | INSTRUCTOR, TA, ADMIN |
+| `PATCH` | `/api/quizzes/:id/status` | Change status | INSTRUCTOR, TA, ADMIN |
+
+### Questions
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `POST` | `/api/quizzes/:quizId/questions` | Add question | INSTRUCTOR, TA, ADMIN |
+| `PUT` | `/api/quizzes/:quizId/questions/:questionId` | Update question | INSTRUCTOR, TA, ADMIN |
+| `DELETE` | `/api/quizzes/:quizId/questions/:questionId` | Delete question | INSTRUCTOR, TA, ADMIN |
+| `PUT` | `/api/quizzes/:quizId/questions/reorder` | Reorder questions | INSTRUCTOR, TA, ADMIN |
+
+### Student Attempts
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `POST` | `/api/quizzes/:quizId/attempts/start` | Start new attempt | STUDENT |
+| `POST` | `/api/quizzes/attempts/:attemptId/submit` | Submit answers | STUDENT |
+| `GET` | `/api/quizzes/attempts/:attemptId` | Get attempt details | STUDENT (own), INSTRUCTOR |
+| `GET` | `/api/quizzes/my-attempts` | List my attempts | STUDENT |
+
+### Grading
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `GET` | `/api/quizzes/attempts/:attemptId/pending-grading` | Get pending questions | INSTRUCTOR, TA |
+| `POST` | `/api/quizzes/attempts/:attemptId/grade` | Apply manual grades | INSTRUCTOR, TA |
+
+### Statistics
+
+| Method | Endpoint | Description | Roles |
+|--------|----------|-------------|-------|
+| `GET` | `/api/quizzes/:quizId/statistics` | Quiz analytics | INSTRUCTOR, TA, ADMIN |
+| `GET` | `/api/quizzes/:quizId/progress/:studentId` | Student progress | INSTRUCTOR, TA |
+
+---
+
+## Data Models
+
+### Quiz
+
+```typescript
+interface Quiz {
+  quizId: number;
+  courseId: number;
+  title: string;
+  description?: string;
+  status: 'draft' | 'published' | 'closed' | 'archived';
+  timeLimitMinutes?: number;
+  maxAttempts?: number;
+  passingScore?: number;
+  randomizeQuestions: boolean;
+  randomizeOptions: boolean;
+  showCorrectAnswers: boolean;
+  availableFrom?: Date;
+  availableUntil?: Date;
+  questions?: QuizQuestion[];
+  createdAt: Date;
+  updatedAt: Date;
+}
+```
+
+### QuizQuestion
+
+```typescript
+interface QuizQuestion {
+  questionId: number;
+  quizId: number;
+  questionType: 'mcq' | 'true_false' | 'short_answer' | 'essay' | 'matching';
+  questionText: string;
+  options?: string[];      // For MCQ: ["Option A", "Option B", ...]
+  correctAnswer?: string;  // For MCQ: "A" | For true/false: "true"/"false"
+  matchingPairs?: { left: string; right: string }[];
+  points: number;
+  orderIndex: number;
+  difficultyLevel?: QuizDifficultyLevel;
+}
+```
+
+### QuizAttempt
+
+```typescript
+interface QuizAttempt {
+  attemptId: number;
+  quizId: number;
+  userId: number;
+  status: 'in_progress' | 'submitted' | 'graded' | 'abandoned';
+  startTime: Date;
+  submitTime?: Date;
+  score?: number;
+  maxScore?: number;
+  percentage?: number;
+  passed?: boolean;
+  answers?: QuizAnswer[];
+}
+```
+
+### QuizAnswer
+
+```typescript
+interface QuizAnswer {
+  answerId: number;
+  attemptId: number;
+  questionId: number;
+  answerText?: string;
+  selectedOptions?: string[];
+  matchingAnswers?: { left: string; right: string }[];
+  isCorrect?: boolean;
+  pointsEarned?: number;
+  feedback?: string;
+}
+```
+
+---
+
+## Flow Diagrams
+
+### Quiz Taking Flow
+
+```
+┌─────────────────┐
+│ Student Views   │
+│ Available Quiz  │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ POST /attempts  │
+│     /start      │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ Quiz In Progress│
+│ Timer Running   │◄──────┐
+└────────┬────────┘       │
+         │                │
+    Navigate         Save Progress
+    Questions            │
+         │                │
+         ▼                │
+┌─────────────────┐       │
+│ Answer Question │───────┘
+└────────┬────────┘
+         │
+    Time Up / Submit
+         │
+         ▼
+┌─────────────────┐
+│ POST /attempts  │
+│    /submit      │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ Auto-Grade MCQ, │
+│ True/False      │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ Show Results    │
+│ (partial if     │
+│ essays pending) │
+└─────────────────┘
+```
+
+### Quiz Creation Flow
+
+```
+┌─────────────────┐
+│ Instructor      │
+│ Creates Quiz    │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ POST /quizzes   │
+│ (status: draft) │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ Add Questions   │
+│ POST /questions │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ Reorder/Edit    │
+│ Questions       │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ PATCH /status   │
+│ → "published"   │
+└────────┬────────┘
+         │
+         ▼
+┌─────────────────┐
+│ Students Can    │
+│ Take Quiz       │
+└─────────────────┘
+```
+
+---
+
+## Component Structure
+
+```
+QuizModule/
+├── instructor/
+│   ├── QuizList.tsx           # List all quizzes with filters
+│   ├── QuizCreate.tsx         # Create new quiz form
+│   ├── QuizEdit.tsx           # Edit quiz settings
+│   ├── QuestionEditor.tsx     # Add/edit questions
+│   ├── QuestionReorder.tsx    # Drag-drop reorder
+│   ├── AttemptsList.tsx       # View student attempts
+│   ├── GradingQueue.tsx       # Manual grading UI
+│   └── QuizStatistics.tsx     # Analytics dashboard
+├── student/
+│   ├── AvailableQuizzes.tsx   # View available quizzes
+│   ├── QuizTaker.tsx          # Take quiz with timer
+│   ├── QuestionDisplay.tsx    # Render question by type
+│   ├── QuizResults.tsx        # View results after submit
+│   └── AttemptHistory.tsx     # Past attempts
+└── shared/
+    ├── Timer.tsx              # Countdown timer
+    ├── ProgressBar.tsx        # Question progress
+    └── QuestionTypeIcon.tsx   # Icon by question type
+```
+
+---
+
+## Code Examples
+
+### Create Quiz
+
+```typescript
+// POST /api/quizzes
+const createQuiz = async (data: CreateQuizDto): Promise<Quiz> => {
+  const response = await fetch('/api/quizzes', {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({
+      courseId: 1,
+      title: 'Midterm Quiz',
+      description: 'Covers chapters 1-5',
+      timeLimitMinutes: 60,
+      maxAttempts: 2,
+      passingScore: 70,
+      randomizeQuestions: true,
+      randomizeOptions: true,
+      showCorrectAnswers: true,
+      availableFrom: '2025-02-01T08:00:00Z',
+      availableUntil: '2025-02-15T23:59:59Z',
+    }),
+  });
+  return response.json();
+};
+```
+
+### Add MCQ Question
+
+```typescript
+// POST /api/quizzes/:quizId/questions
+const addQuestion = async (quizId: number): Promise<QuizQuestion> => {
+  const response = await fetch(`/api/quizzes/${quizId}/questions`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({
+      questionType: 'mcq',
+      questionText: 'What is the capital of France?',
+      options: ['London', 'Paris', 'Berlin', 'Madrid'],
+      correctAnswer: 'B',
+      points: 10,
+    }),
+  });
+  return response.json();
+};
+```
+
+### Change Quiz Status
+
+```typescript
+// PATCH /api/quizzes/:id/status
+const publishQuiz = async (quizId: number): Promise<Quiz> => {
+  const response = await fetch(`/api/quizzes/${quizId}/status`, {
+    method: 'PATCH',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({ status: 'published' }),
+  });
+  return response.json();
+};
+```
+
+### Start Quiz Attempt
+
+```typescript
+// POST /api/quizzes/:quizId/attempts/start
+const startAttempt = async (quizId: number): Promise<QuizAttempt> => {
+  const response = await fetch(`/api/quizzes/${quizId}/attempts/start`, {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${token}`,
+    },
+  });
+  return response.json();
+};
+```
+
+### Submit Quiz
+
+```typescript
+// POST /api/quizzes/attempts/:attemptId/submit
+const submitQuiz = async (attemptId: number, answers: SubmitAnswerDto[]): Promise<QuizAttempt> => {
+  const response = await fetch(`/api/quizzes/attempts/${attemptId}/submit`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({ answers }),
+  });
+  return response.json();
+};
+
+// Example answers array
+const answers: SubmitAnswerDto[] = [
+  { questionId: 1, answerText: 'B' },           // MCQ
+  { questionId: 2, answerText: 'true' },        // True/False
+  { questionId: 3, answerText: 'Photosynthesis' }, // Short answer
+  { questionId: 4, answerText: 'Essay response...' }, // Essay
+];
+```
+
+### Manual Grading
+
+```typescript
+// POST /api/quizzes/attempts/:attemptId/grade
+const gradeEssay = async (attemptId: number, grades: ManualGradeDto[]): Promise<void> => {
+  await fetch(`/api/quizzes/attempts/${attemptId}/grade`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${token}`,
+    },
+    body: JSON.stringify({
+      grades: [
+        {
+          questionId: 4,
+          pointsEarned: 8,
+          feedback: 'Good analysis but missing conclusion.',
+        },
+      ],
+    }),
+  });
+};
+```
+
+### Timer Component
+
+```typescript
+// components/Timer.tsx
+import { useEffect, useState } from 'react';
+
+interface TimerProps {
+  endTime: Date;
+  onTimeUp: () => void;
+}
+
+export function Timer({ endTime, onTimeUp }: TimerProps) {
+  const [remaining, setRemaining] = useState<number>(0);
+
+  useEffect(() => {
+    const interval = setInterval(() => {
+      const now = new Date().getTime();
+      const end = new Date(endTime).getTime();
+      const diff = Math.max(0, Math.floor((end - now) / 1000));
+      
+      setRemaining(diff);
+      
+      if (diff === 0) {
+        clearInterval(interval);
+        onTimeUp();
+      }
+    }, 1000);
+
+    return () => clearInterval(interval);
+  }, [endTime, onTimeUp]);
+
+  const minutes = Math.floor(remaining / 60);
+  const seconds = remaining % 60;
+
+  return (
+    <div className={`timer ${remaining < 300 ? 'warning' : ''}`}>
+      {String(minutes).padStart(2, '0')}:{String(seconds).padStart(2, '0')}
+    </div>
+  );
+}
+```
+
+---
+
+## Error Handling
+
+| Error | Status | Message | UI Action |
+|-------|--------|---------|-----------|
+| Quiz not found | 404 | Quiz not found | Show error, redirect to list |
+| Max attempts exceeded | 400 | Maximum attempts exceeded | Show message, disable start |
+| Quiz closed | 400 | Quiz is closed | Show message |
+| Time expired | 400 | Quiz time limit exceeded | Auto-submit, show results |
+| Not enrolled | 403 | Not enrolled in course | Show enrollment prompt |
+
+---
+
+## Best Practices
+
+1. **Auto-save answers** - Save answers to localStorage during quiz to prevent data loss
+2. **Confirm submit** - Show confirmation dialog before final submit
+3. **Handle timer edge cases** - Auto-submit when timer reaches 0
+4. **Offline handling** - Queue answer submissions and retry on reconnect
+5. **Accessibility** - Ensure all question types are keyboard navigable
+6. **Progress indication** - Show which questions are answered vs unanswered
+
+---
+
+## Related Modules
+
+- [Grades Module](/api/grades) - Quiz scores are saved to grades table
+- [Courses Module](/api/courses) - Quizzes belong to courses
+- [Notifications Module](/api/notifications) - Quiz deadline reminders

EduVerse_Postman_Collection.json

@@ -2854,6 +2854,38 @@
             }
           }
         },
+        {
+          "name": "Change Quiz Status (Instructor)",
+          "request": {
+            "description": "Change quiz status: draft, published, closed, archived",
+            "method": "PATCH",
+            "header": [
+              {
+                "key": "Authorization",
+                "value": "Bearer {{instructor_token}}"
+              },
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{\"status\":\"published\"}"
+            },
+            "url": {
+              "raw": "{{baseUrl}}/quizzes/1/status",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "quizzes",
+                "1",
+                "status"
+              ]
+            }
+          }
+        },
         {
           "name": "Get Difficulty Levels",
           "request": {
@@ -3427,6 +3459,45 @@
             }
           }
         },
+        {
+          "name": "Change Lab Status",
+          "request": {
+            "description": "Change lab status: draft, published, closed, archived. Roles: Instructor, TA, Admin",
+            "auth": {
+              "bearer": [
+                {
+                  "key": "token",
+                  "type": "string",
+                  "value": "{{instructor_token}}"
+                }
+              ],
+              "type": "bearer"
+            },
+            "method": "PATCH",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{\"status\":\"published\"}"
+            },
+            "url": {
+              "path": [
+                "api",
+                "labs",
+                "1",
+                "status"
+              ],
+              "raw": "{{baseUrl}}/api/labs/1/status",
+              "host": [
+                "{{baseUrl}}"
+              ]
+            }
+          }
+        },
         {
           "name": "Get Instructions",
           "request": {

howtotest.md

@@ -0,0 +1,910 @@
+# EduVerse Frontend Integration Master Plan — Test-First Edition
+
+**Last Updated**: 2026-03-15  
+**Stack**: React (Vite) + NestJS Backend | **Base URL**: `http://localhost:8081`
+
+---
+
+## ✅ COMPLETED
+
+- Phase 0 — Infrastructure
+- Phase 1 — Auth + Layout + All 4 dashboard shells
+- Phase 8 — WebSocket Messaging
+- Course Management — Create/Edit/Delete course, multi-step modal (section + schedule + staff), instructor/TA assignment + display
+
+---
+
+## METHODOLOGY — TEST BEFORE INTEGRATING
+
+Every task follows this exact workflow before writing a single line of frontend code:
+
+### Step 1 — Test the endpoint
+
+Paste into browser console (replace TOKEN):
+
+```javascript
+fetch('http://localhost:8081/api/ENDPOINT', {
+  headers: { Authorization: 'Bearer TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+For POST endpoints:
+
+```javascript
+fetch('http://localhost:8081/api/ENDPOINT', {
+  method: 'POST',
+  headers: {
+    Authorization: 'Bearer TOKEN',
+    'Content-Type': 'application/json',
+  },
+  body: JSON.stringify({ ...payload }),
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+### Step 2 — Check the DB if needed
+
+```sql
+SELECT * FROM table_name LIMIT 5;
+DESCRIBE table_name;
+```
+
+### Step 3 — Verify shape + decide
+
+- Does it return the right fields?
+- Is pagination wrapped in `{ data: [], total, page }` or flat array?
+- Are IDs `id` or `courseId` or `userId`?
+- Does it need a backend fix before frontend work starts?
+
+### Step 4 — Write the Copilot prompt with real shapes
+
+Only after steps 1-3, write the integration prompt with actual field names.
+
+---
+
+## NEXT UP — Phase 3: Student Enrollment Flow
+
+### TASK: COURSE-03 — My Courses Sidebar
+
+**Test first:**
+
+```javascript
+// Test 1: get my enrolled courses (log in as student first)
+fetch('http://localhost:8081/api/enrollments/my-courses', {
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+-- Check enrollment table structure
+SELECT * FROM course_enrollments LIMIT 5;
+SELECT e.*, c.name, c.code FROM course_enrollments e
+JOIN courses c ON e.course_id = c.id
+WHERE e.user_id = 57 LIMIT 5;
+```
+
+**After testing** → Build `<MyCoursesSidebar />` with real field names.
+
+---
+
+### TASK: COURSE-04 — Available Courses
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/enrollments/available', {
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+SELECT * FROM course_sections WHERE status = 'open' LIMIT 5;
+```
+
+**After testing** → Build `<AvailableCoursesPage />`.
+
+---
+
+### TASK: COURSE-05 — Enroll in Course
+
+**Test first:**
+
+```javascript
+// Test enrollment
+fetch('http://localhost:8081/api/enrollments/register', {
+  method: 'POST',
+  headers: {
+    Authorization: 'Bearer STUDENT_TOKEN',
+    'Content-Type': 'application/json',
+  },
+  body: JSON.stringify({ sectionId: 1 }),
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+-- Check prerequisites table
+SELECT * FROM course_prerequisites LIMIT 5;
+-- Check if student meets prerequisites
+SELECT * FROM course_enrollments WHERE user_id = 57;
+```
+
+**After testing** → Build `<EnrollButton />` with section picker modal.
+
+---
+
+### TASK: COURSE-06 — Drop Course
+
+**Test first:**
+
+```javascript
+// Find enrollment ID first
+fetch('http://localhost:8081/api/enrollments/my-courses', {
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) =>
+    console.log(
+      'enrollment IDs:',
+      d.map((e) => e.enrollmentId || e.id),
+    ),
+  );
+
+// Then test drop
+fetch('http://localhost:8081/api/enrollments/ENROLLMENT_ID', {
+  method: 'DELETE',
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then(console.log);
+```
+
+**After testing** → Build `<DropCourseButton />`.
+
+---
+
+### TASK: COURSE-07 — Student Roster (Instructor view)
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/enrollments/section/1/students', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+SELECT e.*, u.first_name, u.last_name, u.email
+FROM course_enrollments e
+JOIN users u ON e.user_id = u.user_id
+WHERE e.section_id = 1;
+```
+
+**After testing** → Build `<StudentRosterTable />`.
+
+---
+
+### TASK: COURSE-08 — Waitlist
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/enrollments/section/1/waitlist', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+**After testing** → Build `<WaitlistTable />`.
+
+---
+
+### TASK: COURSE-09 — Section Schedule View
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/schedules/section/1', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+**After testing** → Build `<SectionScheduleView />`.
+
+---
+
+## Phase 4 — Course Materials + Structure
+
+### TASK: MAT-01 — Course Structure
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/courses/1/structure', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+SELECT * FROM lecture_section_labs WHERE course_id = 1 LIMIT 5;
+```
+
+---
+
+### TASK: MAT-02 — Materials List
+
+**Test first:**
+
+```javascript
+// As admin
+fetch('http://localhost:8081/api/courses/1/materials', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+
+// As student (should only see published)
+fetch('http://localhost:8081/api/courses/1/materials', {
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+SELECT * FROM course_materials WHERE course_id = 1 LIMIT 5;
+```
+
+---
+
+### TASK: MAT-03 — Video Player (YouTube embed)
+
+**Test first:**
+
+```javascript
+// Find a material with materialType = 'video'
+fetch('http://localhost:8081/api/courses/1/materials', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) =>
+    console.log(
+      'video materials:',
+      d.filter((m) => m.materialType === 'video'),
+    ),
+  );
+
+// Get embed URL for a video material
+fetch('http://localhost:8081/api/courses/1/materials/23/embed', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then(console.log);
+```
+
+---
+
+### TASK: MAT-04 — File Download
+
+**Test first:**
+
+```javascript
+// Find a material with a fileId
+fetch('http://localhost:8081/api/courses/2/materials/4/download', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+}).then((r) =>
+  console.log('status:', r.status, 'type:', r.headers.get('content-type')),
+);
+```
+
+---
+
+### TASK: MAT-05 — File Upload
+
+**Test first (check multer field name):**
+
+```javascript
+const formData = new FormData();
+// Create a test file
+const blob = new Blob(['test content'], { type: 'text/plain' });
+formData.append('file', blob, 'test.txt');
+formData.append('title', 'Test Upload');
+formData.append('materialType', 'document');
+formData.append('weekNumber', '1');
+
+fetch('http://localhost:8081/api/courses/1/materials', {
+  method: 'POST',
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+  body: formData,
+})
+  .then((r) => r.json())
+  .then(console.log);
+```
+
+---
+
+### TASK: MAT-06 — Video Upload (YouTube)
+
+**Test first:**
+
+```javascript
+// Check if YouTube is configured
+fetch('http://localhost:8081/youtube/auth', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then(console.log);
+```
+
+```sql
+-- Check if YouTube tokens are stored
+SELECT * FROM youtube_tokens LIMIT 1;
+-- or check env
+```
+
+---
+
+## Phase 5 — Assignments + Quizzes + Labs
+
+### TASK: ASGN-01 — Assignments List
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/assignments?courseId=1', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+SELECT * FROM assignments WHERE course_id = 1 LIMIT 5;
+```
+
+---
+
+### TASK: ASGN-02 — Assignment Detail
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/assignments/1', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+---
+
+### TASK: ASGN-03 — Submit Assignment
+
+**Test first:**
+
+```javascript
+// Test text submission first (no file)
+fetch('http://localhost:8081/api/assignments/1/submit', {
+  method: 'POST',
+  headers: {
+    Authorization: 'Bearer STUDENT_TOKEN',
+    'Content-Type': 'application/json',
+  },
+  body: JSON.stringify({ submissionText: 'Test submission' }),
+})
+  .then((r) => r.json())
+  .then(console.log);
+```
+
+```sql
+SELECT * FROM assignment_submissions WHERE assignment_id = 1 LIMIT 5;
+```
+
+---
+
+### TASK: ASGN-04 — My Submission
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/assignments/1/submissions/my', {
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+---
+
+### TASK: ASGN-05+06 — All Submissions + Grade
+
+**Test first:**
+
+```javascript
+// List all submissions
+fetch('http://localhost:8081/api/assignments/1/submissions', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+
+// Grade a submission (find submissionId first)
+fetch('http://localhost:8081/api/assignments/1/submissions/1/grade', {
+  method: 'PATCH',
+  headers: {
+    Authorization: 'Bearer ADMIN_TOKEN',
+    'Content-Type': 'application/json',
+  },
+  body: JSON.stringify({ score: 85, feedback: 'Good work', letterGrade: 'A' }),
+})
+  .then((r) => r.json())
+  .then(console.log);
+```
+
+---
+
+### TASK: QUIZ-01 — Quiz List
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/quizzes?courseId=1', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+SELECT * FROM quizzes WHERE course_id = 1 LIMIT 5;
+```
+
+---
+
+### TASK: QUIZ-02+03 — Quiz Attempt + Submit
+
+**Test first:**
+
+```javascript
+// Start attempt
+fetch('http://localhost:8081/quizzes/1/attempts/start', {
+  method: 'POST',
+  headers: {
+    Authorization: 'Bearer STUDENT_TOKEN',
+    'Content-Type': 'application/json',
+  },
+  body: JSON.stringify({}),
+})
+  .then((r) => r.json())
+  .then((d) => {
+    console.log('attempt:', JSON.stringify(d, null, 2));
+    window._attemptId = d.attemptId || d.id;
+  });
+
+// Submit attempt (use attemptId from above)
+fetch(`http://localhost:8081/quizzes/attempts/${window._attemptId}/submit`, {
+  method: 'POST',
+  headers: {
+    Authorization: 'Bearer STUDENT_TOKEN',
+    'Content-Type': 'application/json',
+  },
+  body: JSON.stringify({ answers: [] }),
+})
+  .then((r) => r.json())
+  .then(console.log);
+```
+
+---
+
+### TASK: LAB-01+02 — Labs List + Detail
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/labs?courseId=1', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+
+fetch('http://localhost:8081/api/labs/3/instructions', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+---
+
+## Phase 6 — Grades + Attendance
+
+### TASK: GRADE-01 — My Grades
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/grades/my', {
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+SELECT g.*, c.name as course_name
+FROM grades g
+JOIN courses c ON g.course_id = c.id
+WHERE g.user_id = 57 LIMIT 10;
+```
+
+---
+
+### TASK: GRADE-02 — GPA Widget
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/grades/gpa/57', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+---
+
+### TASK: GRADE-03 — Transcript
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/grades/transcript/57', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+---
+
+### TASK: ATT-01+02 — Attendance Sessions
+
+**Test first:**
+
+```javascript
+// Create session
+fetch('http://localhost:8081/attendance/sessions', {
+  method: 'POST',
+  headers: {
+    Authorization: 'Bearer ADMIN_TOKEN',
+    'Content-Type': 'application/json',
+  },
+  body: JSON.stringify({
+    sectionId: 1,
+    sessionDate: '2026-03-15',
+    sessionType: 'lecture',
+    startTime: '09:00:00',
+    endTime: '10:30:00',
+  }),
+})
+  .then((r) => r.json())
+  .then(console.log);
+
+// List sessions
+fetch('http://localhost:8081/attendance/sessions?sectionId=1', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+SELECT * FROM attendance_sessions LIMIT 5;
+DESCRIBE attendance_sessions;
+```
+
+---
+
+### TASK: ATT-03 — Batch Attendance
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/attendance/records/batch', {
+  method: 'POST',
+  headers: {
+    Authorization: 'Bearer ADMIN_TOKEN',
+    'Content-Type': 'application/json',
+  },
+  body: JSON.stringify({
+    sessionId: 1,
+    records: [
+      { userId: 57, status: 'present' },
+      { userId: 63, status: 'absent' },
+    ],
+  }),
+})
+  .then((r) => r.json())
+  .then(console.log);
+```
+
+```sql
+DESCRIBE attendance_records;
+```
+
+---
+
+### TASK: ATT-04 — My Attendance (Student)
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/attendance/my', {
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+---
+
+## Phase 7 — Announcements + Discussions + Schedule
+
+### TASK: ANN-01+02 — Announcements
+
+**Test first:**
+
+```javascript
+// List
+fetch('http://localhost:8081/api/announcements', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d[0], null, 2)));
+
+// Create
+fetch('http://localhost:8081/api/announcements', {
+  method: 'POST',
+  headers: {
+    Authorization: 'Bearer ADMIN_TOKEN',
+    'Content-Type': 'application/json',
+  },
+  body: JSON.stringify({
+    title: 'Test Announcement',
+    content: 'Test content',
+    courseId: 1,
+    priority: 'medium',
+  }),
+})
+  .then((r) => r.json())
+  .then(console.log);
+```
+
+---
+
+### TASK: DISC-01+02 — Discussions
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/discussions?courseId=1', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+
+fetch('http://localhost:8081/api/discussions/3', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+---
+
+### TASK: SCHED-01+02 — Schedule
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/schedule/my/daily', {
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+
+fetch('http://localhost:8081/api/schedule/my/weekly', {
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+---
+
+## Phase 9 — Notifications + Files + Community
+
+### TASK: NOTIF-01+02 — Notifications
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/notifications/unread-count', {
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then(console.log);
+
+fetch('http://localhost:8081/api/notifications', {
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+SELECT * FROM notifications WHERE user_id = 57 LIMIT 5;
+DESCRIBE notifications;
+```
+
+---
+
+### TASK: FILES-01+02 — Files
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/files/recent', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+
+fetch('http://localhost:8081/api/files/folders/1', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+SELECT * FROM files LIMIT 5;
+SELECT * FROM folders LIMIT 5;
+DESCRIBE files;
+```
+
+---
+
+### TASK: COMM-01+02 — Community
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/community/global', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+
+fetch('http://localhost:8081/api/community/communities', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+---
+
+## Phase 10 — Analytics + Reports + Search
+
+### TASK: ANAL-01 — Analytics Dashboard
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/analytics/dashboard', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+
+fetch('http://localhost:8081/api/analytics/courses/1', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+---
+
+### TASK: SEARCH-01 — Global Search
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/search?query=programming&page=1&limit=10', {
+  headers: { Authorization: 'Bearer ADMIN_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+SELECT * FROM search_index LIMIT 5;
+```
+
+---
+
+## Phase 11 — Tasks + Google Drive + YouTube
+
+### TASK: TASKS-01+02 — Tasks
+
+**Test first:**
+
+```javascript
+fetch('http://localhost:8081/api/tasks?page=1&limit=10', {
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+
+fetch('http://localhost:8081/api/tasks/upcoming?days=7', {
+  headers: { Authorization: 'Bearer STUDENT_TOKEN' },
+})
+  .then((r) => r.json())
+  .then((d) => console.log(JSON.stringify(d, null, 2)));
+```
+
+```sql
+SELECT * FROM student_tasks WHERE user_id = 57 LIMIT 5;
+DESCRIBE student_tasks;
+```
+
+---
+
+## HOW TO USE THIS PLAN
+
+For each task:
+
+1. **Run the test snippets** in the browser console
+2. **Run the SQL queries** in your MySQL client
+3. **Share the output** here — I'll give you an exact Copilot prompt with real field names
+4. **Paste the prompt** into Copilot Chat and implement
+5. **Mark the task done** and move to the next one
+
+Start with **COURSE-03** (My Courses Sidebar). Run the test, share the output.
+
+---
+
+## Test Accounts
+
+| Role       | Email                        | Password      |
+| ---------- | ---------------------------- | ------------- |
+| Admin      | admin.tarek@example.com      | SecureP@ss123 |
+| Instructor | instructor.tarek@example.com | SecureP@ss123 |
+| Student    | student.tarek@example.com    | SecureP@ss123 |
+| TA         | ta.tarek@example.com         | SecureP@ss123 |
+
+## Endpoint Prefix Watch ⚠️
+
+These do NOT use `/api/` prefix:
+
+- Quizzes → `/quizzes/`
+- Attendance → `/attendance/`
+- YouTube → `/youtube/`
+- Google Drive → `/google-drive/`

integrationPlan.md

@@ -0,0 +1,445 @@
+# EduVerse Frontend Integration Master Plan — Updated
+**Last Updated**: 2026-03-15  
+**Stack**: React (Vite) + NestJS Backend | **Base URL**: `http://localhost:8081`
+
+---
+
+## ✅ COMPLETED
+
+- Phase 0 — Infrastructure (Axios, AuthContext, ProtectedRoute, error handling, pagination)
+- Phase 1 — Auth + Layout (login, logout, refresh, role routing, all 4 dashboard shells, sidebar, header, profile, settings)
+- Phase 8 — Messaging (full WebSocket chat on all tabs, Socket.IO, fallback polling)
+- Phase 2 — Semester fix (active semester, date range fix in backend)
+- Course Management — Create course (multi-step: course + section + schedule + staff), course cards rendering, instructor/TA assignment + display (with new backend endpoints GET /section/:id/instructor and /tas)
+
+---
+
+## REMAINING API MAPPING
+
+### Admin — User Management (`/api/admin`) — NOT YET INTEGRATED
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/admin/users` | `<UserManagementPage />` | admin, it_admin |
+| GET | `/api/admin/users/search` | `<UserSearchBar />` | admin, it_admin |
+| GET | `/api/admin/users/statistics` | `<AdminDashboard />` | admin, it_admin |
+| GET | `/api/admin/users/:id` | `<UserDetailModal />` | admin, it_admin |
+| PUT | `/api/admin/users/:id` | `<EditUserForm />` | admin, it_admin |
+| PUT | `/api/admin/users/:id/status` | `<UserStatusToggle />` | admin, it_admin |
+| GET | `/api/admin/roles` | `<RolesListPage />` | admin, it_admin |
+| POST | `/api/admin/roles` | `<CreateRoleForm />` | it_admin only |
+| GET | `/api/admin/permissions/matrix` | `<PermissionsMatrix />` | admin, it_admin |
+
+### Campus (`/api/campuses`, `/api/departments`, `/api/programs`) — NOT YET INTEGRATED
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/campuses` | `<CampusListPage />` | Any |
+| POST | `/api/campuses` | `<CreateCampusForm />` | admin, it_admin |
+| PUT | `/api/campuses/:id` | `<EditCampusForm />` | admin, it_admin |
+| GET | `/api/campuses/:id/departments` | `<DepartmentList />` | Any |
+| POST | `/api/departments` | `<CreateDeptForm />` | admin, it_admin |
+| GET | `/api/departments/:id/programs` | `<ProgramList />` | Any |
+| POST | `/api/programs` | `<CreateProgramForm />` | admin, it_admin |
+
+### Enrollments (`/api/enrollments`) — PARTIALLY DONE
+
+| Method | Endpoint | Component | Roles | Status |
+|--------|----------|-----------|-------|--------|
+| GET | `/api/enrollments/my-courses` | `<MyCoursesSidebar />` | student | ❌ TODO |
+| GET | `/api/enrollments/available` | `<AvailableCoursesPage />` | student | ❌ TODO |
+| POST | `/api/enrollments/register` | `<EnrollButton />` | student | ❌ TODO |
+| DELETE | `/api/enrollments/:id` | `<DropCourseButton />` | student | ❌ TODO |
+| GET | `/api/enrollments/section/:id/students` | `<StudentRosterTable />` | instructor, admin | ❌ TODO |
+| GET | `/api/enrollments/section/:id/waitlist` | `<WaitlistTable />` | instructor, admin | ❌ TODO |
+| POST | `/api/enrollments/assign-instructor` | multi-step modal | admin | ✅ DONE |
+| POST | `/api/enrollments/assign-ta` | multi-step modal | admin | ✅ DONE |
+| GET | `/api/enrollments/section/:id/instructor` | course card display | admin | ✅ DONE |
+| GET | `/api/enrollments/section/:id/tas` | course card display | admin | ✅ DONE |
+
+### Course Materials (`/api/courses/:id/materials`) — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/courses/:id/materials` | `<MaterialsList />` | Any |
+| POST | `/api/courses/:id/materials` | `<CreateMaterialForm />` | instructor, ta, admin |
+| POST | `/api/courses/:id/materials/video` | `<VideoUploadModal />` | instructor, ta, admin |
+| PUT | `/api/courses/:id/materials/:matId` | `<EditMaterialForm />` | instructor, ta, admin |
+| DELETE | `/api/courses/:id/materials/:matId` | `<DeleteMaterialButton />` | instructor, admin |
+| PATCH | `/api/courses/:id/materials/:matId/visibility` | `<VisibilityToggle />` | instructor, ta, admin |
+| GET | `/api/courses/:id/materials/:matId/download` | `<DownloadButton />` | Any |
+| GET | `/api/courses/:id/materials/:matId/embed` | `<VideoPlayer />` | Any |
+| GET | `/api/courses/:id/structure` | `<CourseStructureView />` | Any |
+| POST | `/api/courses/:id/structure` | `<AddWeekForm />` | instructor, admin |
+
+### Assignments (`/api/assignments`) — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/assignments?courseId=X` | `<AssignmentsList />` | Any |
+| POST | `/api/assignments` | `<CreateAssignmentForm />` | instructor, admin |
+| PATCH | `/api/assignments/:id` | `<EditAssignmentForm />` | instructor, admin |
+| POST | `/api/assignments/:id/submit` | `<SubmitAssignmentForm />` | student |
+| GET | `/api/assignments/:id/submissions/my` | `<MySubmissionView />` | student |
+| GET | `/api/assignments/:id/submissions` | `<AllSubmissionsTable />` | instructor, ta, admin |
+| PATCH | `/api/assignments/:id/submissions/:subId/grade` | `<GradeSubmissionForm />` | instructor, ta |
+
+### Quizzes (`/quizzes`) — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/quizzes?courseId=X` | `<QuizList />` | Any |
+| POST | `/quizzes` | `<CreateQuizForm />` | instructor, ta, admin |
+| GET | `/quizzes/:id` | `<QuizDetailPage />` | Any |
+| POST | `/quizzes/:quizId/attempts/start` | `<StartQuizButton />` | student |
+| POST | `/quizzes/attempts/:attemptId/submit` | `<QuizSubmitButton />` | student |
+| GET | `/quizzes/my-attempts` | `<MyQuizAttemptsPage />` | student |
+| GET | `/quizzes/attempts` | `<AllAttemptsTable />` | instructor, ta, admin |
+| GET | `/quizzes/:quizId/statistics` | `<QuizStatisticsChart />` | instructor, admin |
+| POST | `/quizzes/:quizId/questions` | `<AddQuestionForm />` | instructor, ta, admin |
+
+### Labs (`/api/labs`) — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/labs?courseId=X` | `<LabsList />` | Any |
+| POST | `/api/labs` | `<CreateLabForm />` | instructor, ta, admin |
+| GET | `/api/labs/:id/instructions` | `<LabInstructionsView />` | Any |
+| POST | `/api/labs/:id/submit` | `<SubmitLabForm />` | student |
+| GET | `/api/labs/:id/submissions/my` | `<MyLabSubmissionView />` | student |
+| GET | `/api/labs/:id/submissions` | `<LabSubmissionsTable />` | instructor, ta, admin |
+| POST | `/api/labs/:id/attendance` | `<MarkLabAttendanceForm />` | instructor, ta, admin |
+
+### Grades (`/api/grades`) — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/grades/my` | `<MyGradesPage />` | student |
+| GET | `/api/grades/gpa/:studentId` | `<GPAWidget />` | student, admin |
+| GET | `/api/grades/transcript/:studentId` | `<TranscriptView />` | student, admin |
+| GET | `/api/grades?courseId=X` | `<GradebookTable />` | instructor, ta, admin |
+| GET | `/api/grades/distribution/:courseId` | `<GradeDistributionChart />` | instructor, admin |
+| PUT | `/api/grades/:id` | `<EditGradeForm />` | instructor, ta |
+| GET | `/api/rubrics?courseId=X` | `<RubricsList />` | instructor, ta |
+| POST | `/api/rubrics` | `<CreateRubricForm />` | instructor |
+
+### Attendance (`/attendance`) — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| POST | `/attendance/sessions` | `<CreateSessionForm />` | instructor, ta, admin |
+| GET | `/attendance/sessions?sectionId=X` | `<AttendanceSessionsList />` | instructor, ta, admin |
+| POST | `/attendance/records/batch` | `<BatchAttendanceForm />` | instructor, ta, admin |
+| GET | `/attendance/my` | `<MyAttendancePage />` | student |
+| GET | `/attendance/by-course/:courseId` | `<CourseAttendancePage />` | instructor, ta, admin |
+| GET | `/attendance/summary/:sectionId` | `<AttendanceSummaryChart />` | instructor, ta, admin |
+| POST | `/attendance/import-excel` | `<ImportAttendanceButton />` | instructor, admin |
+
+### Announcements (`/api/announcements`) — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/announcements` | `<AnnouncementsList />` | Any |
+| POST | `/api/announcements` | `<CreateAnnouncementForm />` | instructor, ta, admin |
+| PUT | `/api/announcements/:id` | `<EditAnnouncementForm />` | instructor, ta, admin |
+| PATCH | `/api/announcements/:id/publish` | `<PublishButton />` | instructor, admin |
+| PATCH | `/api/announcements/:id/pin` | `<PinToggle />` | instructor, admin |
+
+### Discussions (`/api/discussions`) — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/discussions?courseId=X` | `<DiscussionsList />` | Any |
+| POST | `/api/discussions` | `<CreateThreadForm />` | Any |
+| GET | `/api/discussions/:id` | `<ThreadDetailPage />` | Any |
+| POST | `/api/discussions/:id/reply` | `<ReplyForm />` | Any |
+| PATCH | `/api/discussions/:id/pin` | `<PinThreadButton />` | instructor, ta, admin |
+| PATCH | `/api/discussions/:id/lock` | `<LockThreadButton />` | instructor, ta, admin |
+
+### Community (`/api/community`) — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/community/global` | `<GlobalFeedPage />` | Any |
+| GET | `/api/community/communities` | `<CommunitiesList />` | Any |
+| GET | `/api/community/communities/:id/posts` | `<CommunityPostsFeed />` | Any |
+| POST | `/api/community/communities/:id/posts` | `<CreatePostForm />` | Any |
+| POST | `/api/community/posts/:id/comment` | `<CommentForm />` | Any |
+| POST | `/api/community/posts/:id/react` | `<ReactionButton />` | Any |
+
+### Files (`/api/files`) — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| POST | `/api/files/upload` | `<FileUploadDropzone />` | Any |
+| GET | `/api/files/recent` | `<RecentFilesWidget />` | Any |
+| GET | `/api/files/shared` | `<SharedFilesPage />` | Any |
+| GET | `/api/files/search` | `<FileSearchPage />` | Any |
+| GET | `/api/files/:fileId/download` | `<DownloadFileButton />` | Any |
+| GET | `/api/files/folders/:id/children` | `<FolderBrowser />` | Any |
+| POST | `/api/files/folders` | `<CreateFolderForm />` | Any |
+
+### Notifications (`/api/notifications`) — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/notifications/unread-count` | `<BellIcon />` | Any |
+| GET | `/api/notifications` | `<NotificationsDropdown />` | Any |
+| PATCH | `/api/notifications/read-all` | `<MarkAllReadButton />` | Any |
+| GET | `/api/notifications/preferences` | `<NotificationSettingsPage />` | Any |
+| PUT | `/api/notifications/preferences` | `<NotificationSettingsForm />` | Any |
+| POST | `/api/notifications/send` | `<SendNotificationForm />` | admin, it_admin |
+
+### Schedule & Calendar — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/schedule/my/daily` | `<DailyScheduleWidget />` | Any |
+| GET | `/api/schedule/my/weekly` | `<WeeklyCalendarView />` | Any |
+| GET | `/api/calendar/events` | `<PersonalEventsList />` | Any |
+| POST | `/api/calendar/events` | `<CreateEventForm />` | Any |
+| GET | `/api/exams/schedule` | `<ExamSchedulePage />` | Any |
+| POST | `/api/exams/schedule` | `<CreateExamForm />` | instructor, admin |
+
+### Analytics & Reports — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/analytics/dashboard` | `<AdminAnalyticsDashboard />` | admin |
+| GET | `/api/analytics/performance?courseId=X` | `<PerformanceChart />` | admin, instructor |
+| GET | `/api/analytics/courses/:courseId` | `<CourseAnalyticsPage />` | instructor |
+| GET | `/api/analytics/students/:studentId` | `<StudentAnalyticsPage />` | student, admin |
+| GET | `/api/analytics/at-risk-students` | `<AtRiskStudentsAlert />` | instructor, admin |
+| GET | `/api/reports/templates` | `<ReportTemplatesList />` | admin |
+| POST | `/api/reports/generate` | `<GenerateReportForm />` | admin |
+| GET | `/api/reports/history` | `<ReportHistoryPage />` | admin |
+
+### Search (`/api/search`) — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/search?query=X` | `<GlobalSearchPage />` | Any |
+| GET | `/api/search/courses` | `<CourseSearchResults />` | Any |
+| GET | `/api/search/users` | `<UserSearchResults />` | Any |
+| GET | `/api/search/materials` | `<MaterialSearchResults />` | Any |
+
+### Tasks & Reminders (`/api/tasks`) — NOT YET
+
+| Method | Endpoint | Component | Roles |
+|--------|----------|-----------|-------|
+| GET | `/api/tasks?page=1&limit=20` | `<TasksListPage />` | Any |
+| POST | `/api/tasks` | `<CreateTaskForm />` | Any |
+| GET | `/api/tasks/upcoming?days=7` | `<UpcomingTasksWidget />` | Any |
+| PATCH | `/api/tasks/:id` | `<EditTaskForm />` | Any |
+| POST | `/api/tasks/:id/complete` | `<CompleteTaskButton />` | Any |
+| POST | `/api/tasks/reminders` | `<SetReminderForm />` | Any |
+
+---
+
+## REMAINING PHASES
+
+### Next Up — Phase 3 Completion: Student Enrollment Flow
+
+**Goal**: Student can browse courses, enroll, see My Courses sidebar, view roster.
+
+- [ ] COURSE-03 `<MyCoursesSidebar />` — GET `/api/enrollments/my-courses`
+- [ ] COURSE-04 `<AvailableCoursesPage />` — GET `/api/enrollments/available`
+- [ ] COURSE-05 `<EnrollButton />` with section picker modal — POST `/api/enrollments/register`
+- [ ] COURSE-06 `<DropCourseButton />` — DELETE `/api/enrollments/:id`
+- [ ] COURSE-07 `<StudentRosterTable />` — GET `/api/enrollments/section/:sectionId/students`
+- [ ] COURSE-08 `<WaitlistTable />` — GET `/api/enrollments/section/:sectionId/waitlist`
+- [ ] COURSE-09 `<SectionScheduleView />` — GET `/api/schedules/section/:sectionId`
+
+---
+
+### Phase 4 — Course Materials + Structure
+
+**Goal**: Instructor uploads materials (files + YouTube). Student views/downloads.
+
+- [ ] MAT-01 `<CourseStructureView />` — GET `/api/courses/:id/structure`
+- [ ] MAT-02 `<MaterialsList />` — GET `/api/courses/:id/materials` (student: published only)
+- [ ] MAT-03 `<VideoPlayer />` — renders YouTube iframe from `externalUrl`
+- [ ] MAT-04 `<DownloadButton />` — GET `/api/courses/:id/materials/:matId/download`
+- [ ] MAT-05 `<FileUploadModal />` — POST with field `file`, show progress bar
+- [ ] MAT-06 `<VideoUploadModal />` — POST with field `video`, YouTube upload
+- [ ] MAT-07 `<VisibilityToggle />` — PATCH visibility `{ isPublished: bool }`
+- [ ] MAT-08 `<EditMaterialForm />` — PUT material
+- [ ] MAT-09 `<AddWeekForm />` — POST `/api/courses/:id/structure`
+
+---
+
+### Phase 5 — Assignments + Quizzes + Labs
+
+**Goal**: Full assessment workflow. Students submit. Instructors grade.
+
+#### Assignments
+- [ ] ASGN-01 `<AssignmentsList />` — sorted by dueDate, badge for overdue
+- [ ] ASGN-02 `<AssignmentDetailPage />` — instructions + due date + max score
+- [ ] ASGN-03 `<SubmitAssignmentForm />` — multipart with optional file
+- [ ] ASGN-04 `<MySubmissionView />` — show grade + feedback if graded
+- [ ] ASGN-05 `<AllSubmissionsTable />` — paginated, sortable by grade
+- [ ] ASGN-06 `<GradeSubmissionForm />` — score + feedback + letterGrade
+- [ ] ASGN-07 `<CreateAssignmentForm />` — POST with courseId, title, dueDate, maxScore
+
+#### Quizzes
+- [ ] QUIZ-01 `<QuizList />` — show availability window, attempts remaining
+- [ ] QUIZ-02 `<QuizAttemptPage />` — timed, countdown timer, auto-submit
+- [ ] QUIZ-03 `<QuizResultPage />` — score + answers if allowed
+- [ ] QUIZ-04 `<QuizBuilderPage />` — create quiz + add questions
+- [ ] QUIZ-05 `<QuizStatisticsChart />` — Chart.js bar chart
+- [ ] QUIZ-06 `<MyQuizAttemptsPage />` — GET `/quizzes/my-attempts`
+
+#### Labs
+- [ ] LAB-01 `<LabsList />` — per course
+- [ ] LAB-02 `<LabDetailPage />` — instructions view
+- [ ] LAB-03 `<SubmitLabForm />` — text + optional file
+- [ ] LAB-04 `<MyLabSubmissionView />` — student view
+- [ ] LAB-05 `<LabSubmissionsTable />` + `<GradeLabForm />`
+- [ ] LAB-06 `<MarkLabAttendanceForm />` — present/absent per student
+
+---
+
+### Phase 6 — Grades + Attendance + Rubrics
+
+#### Grades
+- [ ] GRADE-01 `<MyGradesPage />` — grouped by course, letter grade + score
+- [ ] GRADE-02 `<GPAWidget />` — on student dashboard home
+- [ ] GRADE-03 `<TranscriptView />` — full academic history
+- [ ] GRADE-04 `<GradebookTable />` — editable cells for instructor
+- [ ] GRADE-05 `<GradeDistributionChart />` — Chart.js histogram
+- [ ] GRADE-06 `<EditGradeForm />` — PUT `/api/grades/:id`
+- [ ] GRADE-07 `<CreateRubricForm />` — POST `/api/rubrics`
+- [ ] GRADE-08 `<RubricsList />` — GET `/api/rubrics?courseId=X`
+
+#### Attendance
+- [ ] ATT-01 `<CreateSessionForm />` — POST `/attendance/sessions`
+- [ ] ATT-02 `<AttendanceSessionsList />` — GET sessions by section
+- [ ] ATT-03 `<BatchAttendanceForm />` — present/absent/late toggles per student
+- [ ] ATT-04 `<MyAttendancePage />` — per-course attendance percentage
+- [ ] ATT-05 `<CourseAttendancePage />` — instructor view
+- [ ] ATT-06 `<AttendanceSummaryChart />` — Chart.js line chart
+- [ ] ATT-07 `<ImportAttendanceButton />` — Excel file upload
+- [ ] ATT-08 `<ExportAttendanceButton />` — download Excel
+
+---
+
+### Phase 7 — Announcements + Discussions + Schedule
+
+#### Announcements
+- [ ] ANN-01 `<AnnouncementsList />` — pinned first, role-filtered
+- [ ] ANN-02 `<CreateAnnouncementForm />` — rich text editor
+- [ ] ANN-03 `<PinToggle />` — PATCH pin
+- [ ] ANN-04 `<PublishButton />` — PATCH publish
+
+#### Discussions
+- [ ] DISC-01 `<DiscussionsList />` — per course, pinned first
+- [ ] DISC-02 `<ThreadDetailPage />` — thread + replies
+- [ ] DISC-03 `<ReplyForm />` — inline reply
+- [ ] DISC-04 `<PinThreadButton />` + `<LockThreadButton />`
+
+#### Schedule
+- [ ] SCHED-01 `<DailyScheduleWidget />` — on dashboard home
+- [ ] SCHED-02 `<WeeklyCalendarView />` — FullCalendar
+- [ ] SCHED-03 `<CalendarPage />` — schedule + personal events + exams
+- [ ] SCHED-04 `<ExamSchedulePage />` — sorted by date
+- [ ] SCHED-05 `<CreateExamForm />` — POST `/api/exams/schedule`
+
+---
+
+### Phase 9 — Notifications + Files + Community
+
+#### Notifications
+- [ ] NOTIF-01 `<BellIcon />` — poll unread-count every 30s
+- [ ] NOTIF-02 `<NotificationsDropdown />` — click navigates by relatedEntityType
+- [ ] NOTIF-03 `<NotificationsPage />` — full paginated list
+- [ ] NOTIF-04 `<MarkAllReadButton />`
+- [ ] NOTIF-05 `<NotificationSettingsPage />`
+- [ ] NOTIF-06 `<SendNotificationForm />` — admin only
+
+#### Files
+- [ ] FILES-01 `<FilesPage />` — tabs: Recent / Shared / Search / Folders
+- [ ] FILES-02 `<RecentFilesWidget />` — on dashboard
+- [ ] FILES-03 `<FileUploadDropzone />` — drag-and-drop, progress bar
+- [ ] FILES-04 `<FolderBrowser />` — breadcrumb navigation
+- [ ] FILES-05 `<CreateFolderForm />`
+- [ ] FILES-06 `<DownloadFileButton />`
+
+#### Community
+- [ ] COMM-01 `<CommunityPage />` — Global Feed + Department Communities tabs
+- [ ] COMM-02 `<PostDetailPage />` — post + comments + reactions
+- [ ] COMM-03 `<CreatePostForm />` — rich text + tag selector
+- [ ] COMM-04 `<CommentForm />`
+- [ ] COMM-05 `<ReactionButton />` — toggle like
+
+---
+
+### Phase 10 — Analytics + Reports + Search
+
+- [ ] ANAL-01 `<AdminAnalyticsDashboard />` — system-wide stats cards
+- [ ] ANAL-02 `<PerformanceChart />` — Chart.js line chart
+- [ ] ANAL-03 `<InstructorAnalyticsDashboard />` — course-specific
+- [ ] ANAL-04 `<StudentAnalyticsPage />` — personal progress
+- [ ] ANAL-05 `<AtRiskStudentsAlert />` — warning table
+- [ ] REPORT-01 `<ReportTemplatesList />`
+- [ ] REPORT-02 `<GenerateReportForm />`
+- [ ] REPORT-03 `<ReportHistoryPage />` + `<DownloadReportButton />`
+- [ ] SEARCH-01 `<GlobalSearchPage />` — tabbed results
+- [ ] SEARCH-02 Wire `<GlobalSearchBar />` in header
+
+---
+
+### Phase 11 — Tasks + Google Drive + YouTube
+
+- [ ] TASKS-01 `<TasksListPage />` — filter by status/priority
+- [ ] TASKS-02 `<CreateTaskForm />`
+- [ ] TASKS-03 `<UpcomingTasksWidget />` — dashboard widget
+- [ ] TASKS-04 `<EditTaskForm />`
+- [ ] TASKS-05 `<CompleteTaskButton />`
+- [ ] TASKS-06 `<SetReminderForm />`
+- [ ] DRIVE-01 `<GoogleDriveConnectPage />` — OAuth flow
+- [ ] DRIVE-02 `<DriveFolderBrowser />`
+- [ ] YT-01 `<YouTubeSetupPage />` — admin one-time OAuth
+- [ ] YT-02 `<YouTubeSearchModal />`
+
+---
+
+### Phase 12 — Polish + Accessibility
+
+- [ ] Loading skeletons on all data-fetching components
+- [ ] Empty state components for zero-data cases
+- [ ] Error boundaries on all route-level pages
+- [ ] Form validation errors inline
+- [ ] Mobile responsive — sidebar collapse on <768px
+- [ ] Dark mode — respect prefers-color-scheme
+- [ ] Accessibility — ARIA labels, keyboard navigation
+- [ ] E2E test each role's critical path
+
+---
+
+## Known Backend Gaps
+
+| Gap | Workaround |
+|-----|-----------|
+| No auto-notifications on assignment/grade | Admin sends manually |
+| Notifications not real-time | Poll every 30s |
+| YouTube OAuth must be set up first | Show warning in VideoUploadModal |
+| No student progress % | Calculate client-side |
+| Calendar not auto-populated | Merge schedule API into FullCalendar |
+
+## Test Accounts
+
+| Role | Email | Password |
+|------|-------|----------|
+| Admin | admin.tarek@example.com | SecureP@ss123 |
+| Instructor | instructor.tarek@example.com | SecureP@ss123 |
+| Student | student.tarek@example.com | SecureP@ss123 |
+| TA | ta.tarek@example.com | SecureP@ss123 |
+| IT Admin | it_admin.tarek@example.com | SecureP@ss123 |
+
+## Endpoint Prefix Watch ⚠️
+
+These do NOT use `/api/` prefix:
+- Quizzes → `/quizzes/`
+- Attendance → `/attendance/`
+- YouTube → `/youtube/`
+- Google Drive → `/google-drive/`

src/modules/assignments/assignments.module.ts

@@ -10,6 +10,7 @@ import { User } from '../auth/entities/user.entity';
 import { CoursesModule } from '../courses/courses.module';
 import { EnrollmentsModule } from '../enrollments/enrollments.module';
 import { GoogleDriveModule } from '../google-drive/google-drive.module';
+import { GradesModule } from '../grades/grades.module';
 
 @Module({
   imports: [
@@ -24,6 +25,7 @@ import { GoogleDriveModule } from '../google-drive/google-drive.module';
     forwardRef(() => CoursesModule),
     forwardRef(() => EnrollmentsModule),
     GoogleDriveModule,
+    forwardRef(() => GradesModule),
   ],
   controllers: [AssignmentsController],
   providers: [AssignmentsService],

src/modules/assignments/entities/assignment-submission.entity.ts

@@ -88,6 +88,36 @@ export class AssignmentSubmission {
   })
   submittedAt: Date;
 
+  @Column({
+    type: 'decimal',
+    precision: 5,
+    scale: 2,
+    nullable: true,
+    name: 'score',
+  })
+  score: number | null;
+
+  @Column({
+    type: 'text',
+    nullable: true,
+    name: 'feedback',
+  })
+  feedback: string | null;
+
+  @Column({
+    type: 'bigint',
+    nullable: true,
+    name: 'graded_by',
+  })
+  gradedBy: number | null;
+
+  @Column({
+    type: 'timestamp',
+    nullable: true,
+    name: 'graded_at',
+  })
+  gradedAt: Date | null;
+
   @ManyToOne(() => Assignment, (assignment) => assignment.submissions, {
     onDelete: 'CASCADE',
   })
@@ -105,4 +135,11 @@ export class AssignmentSubmission {
   })
   @JoinColumn({ name: 'file_id' })
   file: File | null;
+
+  @ManyToOne(() => User, {
+    onDelete: 'SET NULL',
+    nullable: true,
+  })
+  @JoinColumn({ name: 'graded_by' })
+  grader: User | null;
 }

src/modules/assignments/services/assignments.service.ts

@@ -1,4 +1,4 @@
-import { Injectable, Logger, BadRequestException } from '@nestjs/common';
+import { Injectable, Logger, BadRequestException, Inject, forwardRef } from '@nestjs/common';
 import { InjectRepository } from '@nestjs/typeorm';
 import { Repository } from 'typeorm';
 import { Assignment, AssignmentSubmission } from '../entities';
@@ -19,6 +19,8 @@ import { Course } from '../../courses/entities/course.entity';
 import { CourseEnrollment } from '../../enrollments/entities/course-enrollment.entity';
 import { DriveFolderService } from '../../google-drive/services/drive-folder.service';
 import { DriveFileEntityType } from '../../google-drive/entities/drive-file.entity';
+import { GradesService } from '../../grades/services';
+import { GradeType } from '../../grades/enums';
 
 @Injectable()
 export class AssignmentsService {
@@ -34,6 +36,8 @@ export class AssignmentsService {
     @InjectRepository(CourseEnrollment)
     private enrollmentRepo: Repository<CourseEnrollment>,
     private driveFolderService: DriveFolderService,
+    @Inject(forwardRef(() => GradesService))
+    private gradesService: GradesService,
   ) {}
 
   async create(dto: CreateAssignmentDto, userId: number): Promise<Assignment> {
@@ -278,7 +282,7 @@ export class AssignmentsService {
     submissionId: number,
     dto: GradeSubmissionDto,
     graderId: number,
-  ): Promise<{ submissionId: number; score: number; maxScore: number; feedback?: string }> {
+  ): Promise<{ submissionId: number; score: number; maxScore: number; feedback?: string; gradeId?: number }> {
     const submission = await this.submissionRepo.findOne({
       where: { id: submissionId, assignmentId },
     });
@@ -291,19 +295,37 @@ export class AssignmentsService {
       throw new AssignmentNotFoundException();
     }
 
+    // Update submission with grading info
     submission.submissionStatus = SubmissionStatus.GRADED;
+    submission.score = dto.score;
+    submission.feedback = dto.feedback || null;
+    submission.gradedBy = graderId;
+    submission.gradedAt = new Date();
     await this.submissionRepo.save(submission);
 
     this.logger.log(
       `Submission ${submissionId} graded by user ${graderId}: ${dto.score}/${assignment.maxScore}`,
     );
 
-    // TODO: Create grade record in grades table when GradesModule is wired
+    // Create grade record in central grades table
+    const grade = await this.gradesService.createGrade({
+      userId: submission.userId,
+      courseId: assignment.courseId,
+      gradeType: GradeType.ASSIGNMENT,
+      assignmentId: assignmentId,
+      score: dto.score,
+      maxScore: Number(assignment.maxScore),
+      feedback: dto.feedback,
+      isPublished: true, // Assignment grades are immediately visible
+    }, graderId);
+    this.logger.log(`Grade record created: ${grade.id} for assignment ${assignmentId}, user ${submission.userId}`);
+
     return {
       submissionId: submission.id,
       score: dto.score,
       maxScore: Number(assignment.maxScore),
       feedback: dto.feedback,
+      gradeId: Number(grade.id),
     };
   }
 

src/modules/labs/controllers/labs.controller.ts

@@ -43,6 +43,8 @@ import {
   UploadLabTaMaterialDto,
   UploadLabSubmissionDto,
 } from '../dto';
+import { LabStatus } from '../enums';
+import { Lab } from '../entities/lab.entity';
 
 @ApiTags('Labs')
 @ApiBearerAuth('JWT-auth')
@@ -118,6 +120,41 @@ export class LabsController {
     return this.labsService.remove(id);
   }
 
+  @Patch(':id/status')
+  @Roles(RoleName.INSTRUCTOR, RoleName.TA, RoleName.ADMIN, RoleName.IT_ADMIN)
+  @ApiOperation({
+    summary: 'Change lab status',
+    description: `
+Change the status of a lab (publish, close, or archive).
+
+### Status Values
+- \`draft\`: Not visible to students
+- \`published\`: Visible to students, accepting submissions
+- \`closed\`: No longer accepting submissions
+- \`archived\`: Hidden from all views
+    `,
+  })
+  @ApiParam({ name: 'id', description: 'Lab ID', type: Number })
+  @ApiBody({
+    schema: {
+      properties: {
+        status: {
+          type: 'string',
+          enum: ['draft', 'published', 'closed', 'archived'],
+          example: 'published',
+        },
+      },
+    },
+  })
+  @ApiResponse({ status: 200, description: 'Lab status updated', type: Lab })
+  @ApiResponse({ status: 404, description: 'Lab not found' })
+  async changeStatus(
+    @Param('id', ParseIntPipe) id: number,
+    @Body('status') status: LabStatus,
+  ): Promise<Lab> {
+    return this.labsService.changeStatus(id, status);
+  }
+
   // ============ INSTRUCTIONS ============
 
   @Get(':id/instructions')
@@ -191,7 +228,7 @@ export class LabsController {
   @Roles(RoleName.INSTRUCTOR, RoleName.TA, RoleName.ADMIN, RoleName.IT_ADMIN)
   @ApiOperation({
     summary: 'Grade lab submission',
-    description: 'Update the status of a lab submission (grade, return, request resubmit).',
+    description: 'Grade a lab submission with score, feedback, and status. Creates a grade record in the gradebook.',
   })
   @ApiParam({ name: 'id', description: 'Lab ID', example: 1 })
   @ApiParam({ name: 'subId', description: 'Submission ID', example: 1 })
@@ -202,8 +239,10 @@ export class LabsController {
     @Param('id', ParseIntPipe) id: number,
     @Param('subId', ParseIntPipe) subId: number,
     @Body() dto: GradeLabSubmissionDto,
+    @Req() req: any,
   ) {
-    return this.labsService.gradeSubmission(id, subId, dto);
+    const graderId = req.user.userId || req.user.id;
+    return this.labsService.gradeSubmission(id, subId, dto, graderId);
   }
 
   // ============ ATTENDANCE ============

src/modules/labs/dto/index.ts

@@ -69,6 +69,17 @@ export class GradeLabSubmissionDto {
   @ApiProperty({ example: 'graded', enum: ['submitted', 'graded', 'returned', 'resubmit'], description: 'Submission status' })
   @IsEnum(['submitted', 'graded', 'returned', 'resubmit'])
   status: string;
+
+  @ApiPropertyOptional({ example: 85, description: 'Score for the submission' })
+  @IsOptional()
+  @IsNumber()
+  @Min(0)
+  score?: number;
+
+  @ApiPropertyOptional({ example: 'Good work! Consider optimizing your code for better performance.', description: 'Feedback for the student' })
+  @IsOptional()
+  @IsString()
+  feedback?: string;
 }
 
 export class CreateInstructionDto {

src/modules/labs/entities/lab-submission.entity.ts

@@ -35,6 +35,18 @@ export class LabSubmission {
   @Column({ name: 'status', type: 'enum', enum: ['submitted', 'graded', 'returned', 'resubmit'], default: 'submitted' })
   status: string;
 
+  @Column({ name: 'score', type: 'decimal', precision: 5, scale: 2, nullable: true })
+  score: number | null;
+
+  @Column({ name: 'feedback', type: 'text', nullable: true })
+  feedback: string | null;
+
+  @Column({ name: 'graded_by', type: 'bigint', unsigned: true, nullable: true })
+  gradedBy: number | null;
+
+  @Column({ name: 'graded_at', type: 'timestamp', nullable: true })
+  gradedAt: Date | null;
+
   @ManyToOne(() => Lab, (lab) => lab.submissions)
   @JoinColumn({ name: 'lab_id' })
   lab: Lab;
@@ -46,4 +58,8 @@ export class LabSubmission {
   @ManyToOne(() => File, { onDelete: 'SET NULL', nullable: true })
   @JoinColumn({ name: 'file_id' })
   file: File;
+
+  @ManyToOne(() => User, { onDelete: 'SET NULL', nullable: true })
+  @JoinColumn({ name: 'graded_by' })
+  grader: User | null;
 }

src/modules/labs/labs.module.ts

@@ -1,4 +1,4 @@
-import { Module } from '@nestjs/common';
+import { Module, forwardRef } from '@nestjs/common';
 import { TypeOrmModule } from '@nestjs/typeorm';
 import { Lab } from './entities/lab.entity';
 import { LabSubmission } from './entities/lab-submission.entity';
@@ -7,11 +7,13 @@ import { LabAttendance } from './entities/lab-attendance.entity';
 import { LabsService } from './services/labs.service';
 import { LabsController } from './controllers/labs.controller';
 import { GoogleDriveModule } from '../google-drive/google-drive.module';
+import { GradesModule } from '../grades/grades.module';
 
 @Module({
   imports: [
     TypeOrmModule.forFeature([Lab, LabSubmission, LabInstruction, LabAttendance]),
     GoogleDriveModule,
+    forwardRef(() => GradesModule),
   ],
   controllers: [LabsController],
   providers: [LabsService],

src/modules/labs/services/labs.service.ts

@@ -1,4 +1,4 @@
-import { Injectable, Logger, NotFoundException, BadRequestException } from '@nestjs/common';
+import { Injectable, Logger, NotFoundException, BadRequestException, Inject, forwardRef } from '@nestjs/common';
 import { InjectRepository } from '@nestjs/typeorm';
 import { Repository } from 'typeorm';
 import { Lab } from '../entities/lab.entity';
@@ -16,6 +16,9 @@ import {
 } from '../dto';
 import { DriveFolderService } from '../../google-drive/services/drive-folder.service';
 import { DriveFileEntityType } from '../../google-drive/entities/drive-file.entity';
+import { GradesService } from '../../grades/services';
+import { GradeType } from '../../grades/enums';
+import { LabStatus } from '../enums';
 
 @Injectable()
 export class LabsService {
@@ -31,6 +34,8 @@ export class LabsService {
     @InjectRepository(LabAttendance)
     private attendanceRepository: Repository<LabAttendance>,
     private driveFolderService: DriveFolderService,
+    @Inject(forwardRef(() => GradesService))
+    private gradesService: GradesService,
   ) {}
 
   // ============ LABS CRUD ============
@@ -81,6 +86,14 @@ export class LabsService {
     this.logger.log(`Lab deleted: ${id}`);
   }
 
+  async changeStatus(id: number, status: LabStatus): Promise<Lab> {
+    const lab = await this.findById(id);
+    lab.status = status;
+    const updated = await this.labRepository.save(lab);
+    this.logger.log(`Lab status changed to ${status}: ${id}`);
+    return updated;
+  }
+
   // ============ INSTRUCTIONS ============
 
   async getInstructions(labId: number): Promise<LabInstruction[]> {
@@ -138,19 +151,45 @@ export class LabsService {
     });
   }
 
-  async gradeSubmission(labId: number, submissionId: number, dto: GradeLabSubmissionDto): Promise<LabSubmission> {
-    await this.findById(labId);
+  async gradeSubmission(labId: number, submissionId: number, dto: GradeLabSubmissionDto, graderId: number): Promise<LabSubmission> {
+    const lab = await this.findById(labId);
     const submission = await this.submissionRepository.findOne({
       where: { id: submissionId, labId },
     });
     if (!submission) throw new NotFoundException(`Submission ${submissionId} not found for lab ${labId}`);
 
+    // Update submission with grading info
     submission.status = dto.status;
+    if (dto.score !== undefined) {
+      submission.score = dto.score;
+    }
+    if (dto.feedback !== undefined) {
+      submission.feedback = dto.feedback;
+    }
+    submission.gradedBy = graderId;
+    submission.gradedAt = new Date();
+    
     const updated = await this.submissionRepository.save(submission);
-    this.logger.log(`Submission ${submissionId} graded: ${dto.status}`);
+    this.logger.log(`Submission ${submissionId} graded: ${dto.status}, score: ${dto.score}`);
+
+    // Create or update grade record in central grades table
+    if (dto.score !== undefined && dto.status === 'graded') {
+      await this.gradesService.createGrade({
+        userId: submission.userId,
+        courseId: lab.courseId,
+        gradeType: GradeType.LAB,
+        labId: labId,
+        score: dto.score,
+        maxScore: Number(lab.maxScore),
+        feedback: dto.feedback,
+        isPublished: true, // Lab grades are immediately visible
+      }, graderId);
+      this.logger.log(`Grade record created for lab ${labId}, user ${submission.userId}`);
+    }
+
     return this.submissionRepository.findOne({
       where: { id: updated.id },
-      relations: ['user', 'file'],
+      relations: ['user', 'file', 'grader'],
     }) as Promise<LabSubmission>;
   }
 

src/modules/quizzes/controllers/quizzes.controller.ts

@@ -4,6 +4,7 @@ import {
   Post,
   Put,
   Delete,
+  Patch,
   Body,
   Param,
   Query,
@@ -43,6 +44,7 @@ import {
   ReorderQuestionsDto,
 } from '../dto';
 import { Quiz, QuizQuestion, QuizAttempt, QuizDifficultyLevel } from '../entities';
+import { QuizStatus } from '../enums';
 
 @ApiTags('📝 Quizzes')
 @ApiBearerAuth('JWT-auth')
@@ -392,6 +394,58 @@ Soft deletes a quiz. The quiz data is preserved but hidden from users.
     return { message: 'Quiz deleted successfully' };
   }
 
+  @Patch(':id/status')
+  @Roles(RoleName.INSTRUCTOR, RoleName.TA, RoleName.ADMIN)
+  @ApiOperation({
+    summary: 'Change quiz status',
+    description: `
+## Change Quiz Status
+
+Updates the status of a quiz (publish, close, or archive).
+
+### Access Control
+- **Authentication Required**: ✅ Yes (Bearer Token)
+- **Roles Required**: INSTRUCTOR, TA, ADMIN
+
+### Status Values
+- \`draft\`: Not visible to students
+- \`published\`: Available for students to take
+- \`closed\`: No longer accepting attempts
+- \`archived\`: Hidden from all views
+
+### Behavior
+- Students can only see published quizzes
+- Closed quizzes preserve existing attempts but prevent new ones
+- Archived quizzes are soft-hidden
+    `,
+  })
+  @ApiParam({ name: 'id', description: 'Quiz ID', type: Number })
+  @ApiBody({
+    schema: {
+      properties: {
+        status: {
+          type: 'string',
+          enum: ['draft', 'published', 'closed', 'archived'],
+          example: 'published',
+        },
+      },
+    },
+  })
+  @ApiResponse({ status: 200, description: 'Quiz status updated', type: Quiz })
+  @ApiResponse({ status: 404, description: 'Quiz not found' })
+  async changeStatus(
+    @Param('id', ParseIntPipe) id: number,
+    @Body('status') status: QuizStatus,
+    @Req() req: any,
+  ): Promise<Quiz> {
+    return this.quizzesService.changeStatus(
+      id,
+      status,
+      req.user.userId,
+      this.getRoleNames(req.user),
+    );
+  }
+
   // ============ QUESTION MANAGEMENT ============
 
   @Post(':quizId/questions')
@@ -774,8 +828,10 @@ Apply manual grades to essay and short answer questions that require human evalu
   async applyManualGrades(
     @Param('attemptId', ParseIntPipe) attemptId: number,
     @Body() dto: ManualGradeDto,
+    @Req() req: any,
   ): Promise<AttemptResultDto> {
-    return this.gradingService.applyManualGrades(attemptId, dto);
+    const graderId = req.user.userId;
+    return this.gradingService.applyManualGrades(attemptId, dto, graderId);
   }
 
   @Get('attempts/:attemptId/pending-grading')

src/modules/quizzes/entities/quiz.entity.ts

@@ -11,7 +11,7 @@ import {
 } from 'typeorm';
 import { Course } from '../../courses/entities/course.entity';
 import { User } from '../../auth/entities/user.entity';
-import { QuizType, ShowAnswersAfter } from '../enums';
+import { QuizType, QuizStatus, ShowAnswersAfter } from '../enums';
 import { QuizQuestion } from './quiz-question.entity';
 import { QuizAttempt } from './quiz-attempt.entity';
 
@@ -40,6 +40,14 @@ export class Quiz {
   })
   quizType: QuizType;
 
+  @Column({
+    name: 'status',
+    type: 'enum',
+    enum: QuizStatus,
+    default: QuizStatus.DRAFT,
+  })
+  status: QuizStatus;
+
   @Column({ name: 'time_limit_minutes', type: 'int', nullable: true })
   timeLimitMinutes: number;
 

src/modules/quizzes/enums/index.ts

@@ -1,4 +1,5 @@
 export * from './question-type.enum';
 export * from './quiz-type.enum';
+export * from './quiz-status.enum';
 export * from './attempt-status.enum';
 export * from './show-answers.enum';

src/modules/quizzes/enums/quiz-status.enum.ts

@@ -0,0 +1,6 @@
+export enum QuizStatus {
+  DRAFT = 'draft',
+  PUBLISHED = 'published',
+  CLOSED = 'closed',
+  ARCHIVED = 'archived',
+}

src/modules/quizzes/quizzes.module.ts

@@ -1,4 +1,4 @@
-import { Module } from '@nestjs/common';
+import { Module, forwardRef } from '@nestjs/common';
 import { TypeOrmModule } from '@nestjs/typeorm';
 import { QuizzesController } from './controllers/quizzes.controller';
 import { QuizzesService, QuizGradingService } from './services';
@@ -6,6 +6,7 @@ import { Quiz, QuizQuestion, QuizAttempt, QuizAnswer, QuizDifficultyLevel } from
 import { Course } from '../courses/entities/course.entity';
 import { CourseTA } from '../enrollments/entities/course-ta.entity';
 import { CourseInstructor } from '../enrollments/entities/course-instructor.entity';
+import { GradesModule } from '../grades/grades.module';
 
 @Module({
   imports: [
@@ -19,6 +20,7 @@ import { CourseInstructor } from '../enrollments/entities/course-instructor.enti
       CourseTA,
       CourseInstructor,
     ]),
+    forwardRef(() => GradesModule),
   ],
   controllers: [QuizzesController],
   providers: [QuizzesService, QuizGradingService],

src/modules/quizzes/services/quiz-grading.service.ts

@@ -1,10 +1,12 @@
-import { Injectable } from '@nestjs/common';
+import { Injectable, Inject, forwardRef } from '@nestjs/common';
 import { InjectRepository } from '@nestjs/typeorm';
 import { Repository } from 'typeorm';
-import { QuizAttempt, QuizAnswer, QuizQuestion } from '../entities';
+import { QuizAttempt, QuizAnswer, QuizQuestion, Quiz } from '../entities';
 import { QuestionType, AttemptStatus } from '../enums';
 import { ManualGradeDto, AttemptResultDto } from '../dto';
 import { AttemptNotFoundException } from '../exceptions';
+import { GradesService } from '../../grades/services';
+import { GradeType } from '../../grades/enums';
 
 @Injectable()
 export class QuizGradingService {
@@ -15,12 +17,14 @@ export class QuizGradingService {
     private readonly answerRepo: Repository<QuizAnswer>,
     @InjectRepository(QuizQuestion)
     private readonly questionRepo: Repository<QuizQuestion>,
+    @Inject(forwardRef(() => GradesService))
+    private readonly gradesService: GradesService,
   ) {}
 
   /**
    * Apply manual grades to essay/short answer questions
    */
-  async applyManualGrades(attemptId: number, dto: ManualGradeDto): Promise<AttemptResultDto> {
+  async applyManualGrades(attemptId: number, dto: ManualGradeDto, graderId?: number): Promise<AttemptResultDto> {
     const attempt = await this.attemptRepo.findOne({
       where: { id: attemptId },
       relations: ['quiz', 'quiz.questions', 'answers', 'user'],
@@ -41,6 +45,7 @@ export class QuizGradingService {
     // Recalculate total score
     const answers = await this.answerRepo.find({ where: { attemptId } });
     const totalScore = answers.reduce((sum, a) => sum + Number(a.pointsEarned || 0), 0);
+    const maxScore = attempt.quiz.questions.reduce((sum, q) => sum + Number(q.points), 0);
 
     // Update attempt status to graded
     await this.attemptRepo.update(attemptId, {
@@ -48,6 +53,17 @@ export class QuizGradingService {
       status: AttemptStatus.GRADED,
     });
 
+    // Create/update grade record in central grades table
+    await this.gradesService.createGrade({
+      userId: attempt.userId,
+      courseId: attempt.quiz.courseId,
+      gradeType: GradeType.QUIZ,
+      quizId: attempt.quiz.id,
+      score: totalScore,
+      maxScore: maxScore,
+      isPublished: true,
+    }, graderId || attempt.quiz.createdBy);
+
     return this.buildAttemptResult(attemptId);
   }
 

src/modules/quizzes/services/quizzes.service.ts

@@ -1,8 +1,8 @@
-import { Injectable, BadRequestException, ForbiddenException } from '@nestjs/common';
+import { Injectable, BadRequestException, ForbiddenException, Inject, forwardRef } from '@nestjs/common';
 import { InjectRepository } from '@nestjs/typeorm';
 import { Repository, Between, Like, IsNull } from 'typeorm';
 import { Quiz, QuizQuestion, QuizAttempt, QuizAnswer, QuizDifficultyLevel } from '../entities';
-import { AttemptStatus, QuestionType } from '../enums';
+import { AttemptStatus, QuestionType, QuizStatus } from '../enums';
 import {
   CreateQuizDto,
   UpdateQuizDto,
@@ -30,6 +30,8 @@ import { Course } from '../../courses/entities/course.entity';
 import { RoleName } from '../../auth/entities/role.entity';
 import { CourseTA } from '../../enrollments/entities/course-ta.entity';
 import { CourseInstructor } from '../../enrollments/entities/course-instructor.entity';
+import { GradesService } from '../../grades/services';
+import { GradeType } from '../../grades/enums';
 
 @Injectable()
 export class QuizzesService {
@@ -50,6 +52,8 @@ export class QuizzesService {
     private readonly courseTARepo: Repository<CourseTA>,
     @InjectRepository(CourseInstructor)
     private readonly courseInstructorRepo: Repository<CourseInstructor>,
+    @Inject(forwardRef(() => GradesService))
+    private readonly gradesService: GradesService,
   ) {}
 
   // ============ QUIZ CRUD ============
@@ -156,6 +160,14 @@ export class QuizzesService {
     await this.quizRepo.softDelete(id);
   }
 
+  async changeStatus(id: number, status: QuizStatus, userId: number, roles: string[]): Promise<Quiz> {
+    const quiz = await this.findQuizById(id);
+    await this.assertQuizManagementAccess(quiz, userId, roles);
+    
+    quiz.status = status;
+    return this.quizRepo.save(quiz);
+  }
+
   // ============ QUESTION MANAGEMENT ============
 
   async addQuestion(
@@ -368,13 +380,28 @@ export class QuizzesService {
       (q) => q.questionType === QuestionType.SHORT_ANSWER || q.questionType === QuestionType.ESSAY,
     );
 
+    const finalStatus = needsManualGrading ? AttemptStatus.SUBMITTED : AttemptStatus.GRADED;
+
     await this.attemptRepo.update(attemptId, {
       submittedAt: new Date(),
       score: totalScore,
       timeTakenMinutes: timeTaken,
-      status: needsManualGrading ? AttemptStatus.SUBMITTED : AttemptStatus.GRADED,
+      status: finalStatus,
     });
 
+    // Create grade record in central grades table if fully graded (no manual grading needed)
+    if (!needsManualGrading) {
+      await this.gradesService.createGrade({
+        userId: userId,
+        courseId: attempt.quiz.courseId,
+        gradeType: GradeType.QUIZ,
+        quizId: attempt.quiz.id,
+        score: totalScore,
+        maxScore: maxScore,
+        isPublished: true,
+      }, attempt.quiz.createdBy);
+    }
+
     return this.getAttemptResult(attemptId, userId);
   }