refactor: resolve remaining field audit issues

apps/server/src/archive/archive.controller.ts

@@ -20,8 +20,11 @@ import { ArchiveService } from './archive.service';
 import {
   UpsertProfileDto,
   CreateEnrollmentDto,
+  UpdateEnrollmentDto,
   CreateExamScoreDto,
+  UpdateExamScoreDto,
   CreateLearningRecordDto,
+  UpdateLearningRecordDto,
   UpsertResultDto,
 } from './dto/archive.dto';
 import { JwtAuthGuard } from '../auth/guards/jwt-auth.guard';
@@ -110,7 +113,7 @@ export class ArchiveController {
   @RequirePermission('student:edit')
   async updateEnrollment(
     @Param('id') id: string,
-    @Body() dto: Partial<CreateEnrollmentDto>,
+    @Body() dto: UpdateEnrollmentDto,
     @Request() req: AuthenticatedRequest,
   ) {
     const { ipAddress, userAgent } = extractRequestInfo(req);
@@ -174,7 +177,7 @@ export class ArchiveController {
   @RequirePermission('student:edit')
   async updateExamScore(
     @Param('id') id: string,
-    @Body() dto: Partial<CreateExamScoreDto>,
+    @Body() dto: UpdateExamScoreDto,
     @Request() req: AuthenticatedRequest,
   ) {
     const { ipAddress, userAgent } = extractRequestInfo(req);
@@ -238,7 +241,7 @@ export class ArchiveController {
   @RequirePermission('student:edit')
   async updateLearningRecord(
     @Param('id') id: string,
-    @Body() dto: Partial<CreateLearningRecordDto>,
+    @Body() dto: UpdateLearningRecordDto,
     @Request() req: AuthenticatedRequest,
   ) {
     const { ipAddress, userAgent } = extractRequestInfo(req);
@@ -330,12 +333,12 @@ export class ArchiveController {
     @Param('id') id: string,
     @Res() res: Response,
   ) {
-    const { fullPath, fileName, mimeType } = await this.archiveService.getAttachmentFile(+studentId, +id);
-    res.setHeader('Content-Type', mimeType);
-    res.setHeader(
-      'Content-Disposition',
-      `inline; filename="${encodeURIComponent(fileName)}"`,
+    const { fullPath, fileName, mimeType } = await this.archiveService.getAttachmentFile(
+      +studentId,
+      +id,
     );
+    res.setHeader('Content-Type', mimeType);
+    res.setHeader('Content-Disposition', `inline; filename="${encodeURIComponent(fileName)}"`);
     const stream = fs.createReadStream(fullPath);
     stream.pipe(res);
   }
@@ -358,7 +361,6 @@ export class ArchiveController {
     return result;
   }
 
-
   @Get(':studentId/report-html')
   @RequirePermission('student:view')
   async generateReportHtml(