Supabase Setup Needed

Connect your backend to unlock auth and classes

Add `NEXT_PUBLIC_SUPABASE_URL` and `NEXT_PUBLIC_SUPABASE_ANON_KEY` in `.env.local`, then apply the SQL in `docs/schema.sql`. After that, the auth forms and class creation flow will work against your Supabase project.

Proctoring

Client tracking and trusted logging

The first monitoring pipeline is now session-based: students and teachers open a session room, start monitoring, and the browser sends authenticated events to the backend.

tab_switchcamera_offmultiple_facecopy_pastepresence_ping
Attendance tracked with join, heartbeat, and leave updates
Browser events captured through authenticated API routes
Session detail pages show event evidence in a transparent feed