@happyvertical/smrt-education 0.57.36 → 0.57.38

package/dist/ingestion.d.ts

@@ -136,5 +136,7 @@ export declare function preserveWorkbookIntakeAnalysis(input: {
     submissionId: string;
     workbookVocabulary?: WorkbookAssessment['vocabulary'];
 }): Promise<WorkbookPreservationResult>;
+export { receiveFamilyIntake, retainFamilyIntakeReceipt, } from './family-intake-ingestion.js';
+export { FamilyIntakeService } from './family-intake-service.js';
 export { preserveWorkbookPhotoIdentification, processWorkbookPhotoAnalysis, receiveWorkbookPhotoIntake, retainWorkbookPhotoReceipt, WORKBOOK_PHOTO_HANDLER, workbookPhotoIntakeHandlers, workbookPhotoIntakeTargetResolver, } from './workbook-photo-ingestion.js';
 //# sourceMappingURL=ingestion.d.ts.map

package/dist/ingestion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ingestion.d.ts","sourceRoot":"","sources":["../src/ingestion.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAGrB,KAAK,gBAAgB,EAGtB,MAAM,sCAAsC,CAAC;AAK9C,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAEvE,oFAAoF;AACpF,MAAM,WAAW,gCAAgC;IAC/C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,gBAAgB,EAC3B,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,gCAAgC,EAC/C,YAAY,CAAC,EAAE,MAAM;;;GAOtB;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,SAAS,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,UAAU,EAAE,gCAAgC,CAAC;CAC9C,GAAG,OAAO,CACP;IAAE,IAAI,EAAE,WAAW,GAAG,uBAAuB,GAAG,aAAa,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAClD,CAsCA;AAGD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAG3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAIL,KAAK,kBAAkB,EAGxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,MAAM,6BAA6B,GAAG,cAAc,GAAG;IAC3D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,OAAO,yBAAyB,EAAE,kBAAkB,CAAC;IAClE,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,iBAAiB,GAAG,gBAAgB,CAAC;IAC3C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,SAAS,EAAE,gBAAgB,CAAC;IAC5B,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,OAAO,EAAE,6BAA6B,CAAC;CACxC;;;;;;;;;;;;;;;;;;;;;;;IA0FA;AAED,OAAO,KAAK,EAGV,gBAAgB,EACjB,MAAM,yCAAyC,CAAC;AAuBjD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,WAAW,EAAE,iBAAiB,CAAC;IAC/B,OAAO,EAAE,cAAc,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;CACvD,GAAG,gBAAgB,EAAE,CA2WrB;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,WAAW,EAAE,iBAAiB,CAAC;IAC/B,OAAO,EAAE,cAAc,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,yCAAyC,EAAE,sBAAsB,CAAC,cAAc,CAAC,CA2E3F;AA0LD,MAAM,MAAM,0BAA0B,GAClC;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACzC;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EACF,oBAAoB,GACpB,mBAAmB,GACnB,oBAAoB,GACpB,gBAAgB,CAAC;CACtB,CAAC;AAEN;;;GAGG;AACH,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,eAAe,CAAC;IAC3B,OAAO,EAAE,cAAc,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;CACvD,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAgWtC;AAED,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,0BAA0B,EAC1B,0BAA0B,EAC1B,sBAAsB,EACtB,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"ingestion.d.ts","sourceRoot":"","sources":["../src/ingestion.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAGrB,KAAK,gBAAgB,EAGtB,MAAM,sCAAsC,CAAC;AAM9C,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAEvE,oFAAoF;AACpF,MAAM,WAAW,gCAAgC;IAC/C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,gBAAgB,EAC3B,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,gCAAgC,EAC/C,YAAY,CAAC,EAAE,MAAM;;;GAOtB;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,SAAS,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,UAAU,EAAE,gCAAgC,CAAC;CAC9C,GAAG,OAAO,CACP;IAAE,IAAI,EAAE,WAAW,GAAG,uBAAuB,GAAG,aAAa,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAClD,CAsCA;AAGD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAG3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAEV,iBAAiB,EAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAIL,KAAK,kBAAkB,EAGxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,MAAM,6BAA6B,GAAG,cAAc,GAAG;IAC3D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,OAAO,yBAAyB,EAAE,kBAAkB,CAAC;IAClE,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,iBAAiB,GAAG,gBAAgB,CAAC;IAC3C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,SAAS,EAAE,gBAAgB,CAAC;IAC5B,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,OAAO,EAAE,6BAA6B,CAAC;CACxC;;;;;;;;;;;;;;;;;;;;;;;IA0FA;AAED,OAAO,KAAK,EAGV,gBAAgB,EACjB,MAAM,yCAAyC,CAAC;AAuBjD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,WAAW,EAAE,iBAAiB,CAAC;IAC/B,OAAO,EAAE,cAAc,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;CACvD,GAAG,gBAAgB,EAAE,CA2WrB;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,WAAW,EAAE,iBAAiB,CAAC;IAC/B,OAAO,EAAE,cAAc,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,yCAAyC,EAAE,sBAAsB,CAAC,cAAc,CAAC,CA2E3F;AA0LD,MAAM,MAAM,0BAA0B,GAClC;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACzC;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EACF,oBAAoB,GACpB,mBAAmB,GACnB,oBAAoB,GACpB,gBAAgB,CAAC;CACtB,CAAC;AAEN;;;GAGG;AACH,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,eAAe,CAAC;IAC3B,OAAO,EAAE,cAAc,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;CACvD,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAgWtC;AAED,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,0BAA0B,EAC1B,0BAA0B,EAC1B,sBAAsB,EACtB,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,+BAA+B,CAAC"}

package/dist/ingestion.js

@@ -1,10 +1,35 @@
-import { F as WorkbookAssessmentValidationError, I as aggregateWorkbookQuestions, L as validateWorkbookAssessment, P as WORKBOOK_MATH_VOCABULARY, R as workbookAggregateFeedback, f as validateWorkbookPhotoIdentification, m as normalizeWorkbookAnswerRegions, n as preservePhotoProposal, p as normalizeWorkbookObservedLayout, r as WorkbookService } from "./chunks/workbook-photo-service-1wcnf-Xf.js";
+import { F as WorkbookAssessmentValidationError, G as familyIntakeScopeId, H as FamilyIntakeCollection, I as aggregateWorkbookQuestions, L as validateWorkbookAssessment, P as WORKBOOK_MATH_VOCABULARY, R as workbookAggregateFeedback, V as FamilyIntakeAssetCollection, W as FamilyIntakeDecisionCollection, d as WorkbookPhotoIntakeCollection, f as validateWorkbookPhotoIdentification, m as normalizeWorkbookAnswerRegions, n as preservePhotoProposal, p as normalizeWorkbookObservedLayout, r as WorkbookService, s as WorkbookPhotoAssetCollection, t as WorkbookPhotoService, v as LearnerAuthorizationError } from "./chunks/workbook-photo-service-DCmqeWLd.js";
 import { getCurrentTenant, withTenant } from "@happyvertical/smrt-tenancy";
+import { withPrivateAssetAccess } from "@happyvertical/smrt-assets";
 import { registerPermissionDefinitions } from "@happyvertical/smrt-users";
 import { GenerationSnapshotStaleError, ProposalsNotConfiguredError, extractAnalysis, normalizeObservedImageRegions } from "@happyvertical/smrt-ingestion/server";
 import { readFile } from "node:fs/promises";
 import { resolve } from "node:path";
 import { createHash } from "node:crypto";
+//#region src/intake-original-evidence.ts
+var supportedIntakeOriginal = (type) => [
+	"image/png",
+	"image/jpeg",
+	"image/webp",
+	"application/pdf"
+].includes(type);
+function intakeOriginalEvidence(evidence) {
+	const byId = new Map(evidence.map((entry) => [entry.id, entry]));
+	return evidence.filter((entry) => {
+		let parentId = entry.parentEvidenceId;
+		const visited = /* @__PURE__ */ new Set([entry.id]);
+		while (parentId) {
+			if (visited.has(parentId)) throw new Error("Invalid family evidence lineage");
+			visited.add(parentId);
+			const parent = byId.get(parentId);
+			if (!parent) throw new Error("Incomplete family evidence lineage");
+			if (supportedIntakeOriginal(parent.mediaType)) return false;
+			parentId = parent.parentEvidenceId;
+		}
+		return true;
+	}).sort((a, b) => a.partId.localeCompare(b.partId));
+}
+//#endregion
 //#region src/ingestion-isolation.ts
 async function requireIngestionMemoryLimit(maximumBytes) {
 	if (process.platform !== "linux") throw new Error("Extraction requires a Linux cgroup-v2 memory-limited worker");
@@ -31,6 +56,388 @@ async function requireIngestionMemoryLimit(maximumBytes) {
 	return { memoryLimitBytes: limit };
 }
 //#endregion
+//#region src/family-intake-ingestion.ts
+function assertScope$1(input) {
+	if (input.scope.tenantId !== input.request.tenantId || input.scope.actorId !== input.request.actorUserId || input.scope.confidentialScopeId !== familyIntakeScopeId(input.request.tenantId)) throw new Error("Family intake scope mismatch");
+}
+async function receiveFamilyIntake(input) {
+	assertScope$1(input);
+	await input.family.authorizeFamilyIntake(input.request, "education.family-intake.receive");
+	const receipt = await input.ingestion.receive(input.receive);
+	if (!("itemId" in receipt) || !receipt.itemId) return {
+		receipt,
+		intake: null
+	};
+	return {
+		receipt,
+		intake: await retainFamilyIntakeReceipt({
+			...input,
+			itemId: receipt.itemId
+		})
+	};
+}
+async function retainFamilyIntakeReceipt(input) {
+	assertScope$1(input);
+	await input.family.authorizeFamilyIntake(input.request, "education.family-intake.receive");
+	const identity = await input.ingestion.getReceiptSource(input.itemId);
+	const evidence = await input.ingestion.getEvidence(input.itemId);
+	if (evidence.length > 200) throw new Error("Family receipt evidence exceeds limit");
+	const source = {
+		...identity,
+		evidence: evidence.map((e) => ({
+			evidenceId: e.id,
+			partId: e.partId,
+			parentEvidenceId: e.parentEvidenceId,
+			mimeType: e.mediaType,
+			sha256: e.contentHash
+		}))
+	};
+	const supported = supportedIntakeOriginal;
+	const originalEvidence = intakeOriginalEvidence(evidence);
+	if (originalEvidence.some((e) => e.mediaType !== "application/json" && !supported(e.mediaType))) throw new Error("Unsupported family original: only JPEG, PNG, WebP and PDF are supported");
+	const originals = originalEvidence.filter((e) => supported(e.mediaType));
+	if (!originals.length || originals.length > 100 || originals.some((e) => e.byteLength < 1 || e.byteLength > 25 * 1024 * 1024) || originals.reduce((n, e) => n + e.byteLength, 0) > 100 * 1024 * 1024) throw new Error("Unsupported or oversized family intake");
+	const pages = [];
+	const extensions = {
+		"image/png": "png",
+		"image/jpeg": "jpg",
+		"image/webp": "webp",
+		"application/pdf": "pdf"
+	};
+	for (const original of originals) {
+		if (!Object.hasOwn(extensions, original.mediaType)) throw new Error("Unsupported family original");
+		const data = await input.ingestion.readEvidence(input.itemId, original.id);
+		if (data.length !== original.byteLength || createHash("sha256").update(data).digest("hex") !== original.contentHash) throw new Error("Family receipt integrity mismatch");
+		pages.push({
+			name: original.filename || `${original.id}.${extensions[original.mediaType]}`,
+			mimeType: original.mediaType,
+			data: Buffer.from(data)
+		});
+	}
+	return input.family.retainFamilyIntake({
+		...input.request,
+		itemId: input.itemId,
+		source,
+		pages
+	});
+}
+//#endregion
+//#region src/family-intake-service.ts
+var canonical$1 = (value) => JSON.stringify(value, (_key, v) => v && typeof v === "object" && !Array.isArray(v) ? Object.fromEntries(Object.entries(v).sort(([a], [b]) => a.localeCompare(b))) : v);
+function digest(value) {
+	const crypto = typeof process !== "undefined" && process.getBuiltinModule?.("node:crypto");
+	if (!crypto) throw new Error("Family intake requires a Node server");
+	return crypto.createHash("sha256").update(value).digest("hex");
+}
+function key(value) {
+	if (typeof value !== "string" || !value.trim() || value.length > 200 || Array.from(value).some((c) => c.charCodeAt(0) < 32 || c.charCodeAt(0) === 127)) throw new Error("Invalid family intake key");
+}
+var FamilyIntakeService = class FamilyIntakeService extends WorkbookPhotoService {
+	constructor(db, authorize, authorizeCatalog, familyOptions, authorizeFamily) {
+		super(db, authorize, authorizeCatalog, familyOptions);
+		this.familyOptions = familyOptions;
+		this.authorizeFamily = authorizeFamily;
+	}
+	familyOptions;
+	authorizeFamily;
+	createTransactionService(db) {
+		return new FamilyIntakeService(db, this.authorize, this.authorizeCatalog, this.familyOptions, this.authorizeFamily);
+	}
+	async authorizeFamilyIntake(request, action = "education.family-intake.read") {
+		this.assertServiceOpen();
+		const context = getCurrentTenant();
+		if (!context || context.superAdminBypass || context.tenantId !== request.tenantId || context.userId !== request.actorUserId || !request.tenantId || !request.actorUserId || !await this.db.get("memberships", {
+			tenant_id: request.tenantId,
+			user_id: request.actorUserId,
+			status: "active"
+		}) || !await this.db.get("users", {
+			id: request.actorUserId,
+			status: "active"
+		}) || await this.authorizeFamily({
+			...request,
+			executor: this.db,
+			action
+		}) !== true) throw new LearnerAuthorizationError();
+	}
+	async familyRow(request) {
+		await this.authorizeFamilyIntake(request);
+		const row = await (await FamilyIntakeCollection.create({ db: this.db })).get({
+			id: request.intakeId,
+			tenantId: request.tenantId
+		}, { cache: false });
+		if (!row) throw new LearnerAuthorizationError();
+		return row;
+	}
+	async familyDecisions(request) {
+		return (await (await FamilyIntakeDecisionCollection.create({ db: this.db })).list({
+			where: {
+				tenantId: request.tenantId,
+				intakeId: request.intakeId
+			},
+			limit: 1e4
+		})).sort((a, b) => a.sequence - b.sequence);
+	}
+	async lockFamily(request) {
+		await this.db.query("UPDATE family_intakes SET id=id WHERE id=? AND tenant_id=?", [request.intakeId, request.tenantId]);
+	}
+	async appendFamily(request, requestKey, body) {
+		return (await FamilyIntakeDecisionCollection.create({ db: this.db })).create({
+			_insertOnly: true,
+			tenantId: request.tenantId,
+			intakeId: request.intakeId,
+			actorUserId: request.actorUserId,
+			requestKey,
+			sequence: (await this.familyDecisions(request)).length + 1,
+			bodyJson: canonical$1(body)
+		});
+	}
+	async retainFamilyIntake(request) {
+		return this.composeMutation(async (service) => {
+			if (service.executorBorrowed) throw new Error("Family storage requires an owned transaction");
+			await service.authorizeFamilyIntake(request, "education.family-intake.receive");
+			key(request.itemId);
+			for (const value of [
+				request.source?.sourceId,
+				request.source?.sourceVersion,
+				request.source?.deliveryKey
+			]) key(value);
+			if (Buffer.byteLength(canonical$1(request.source)) > 128 * 1024) throw new Error("Family source provenance exceeds limit");
+			if (request.source.evidence !== void 0) {
+				if (!Array.isArray(request.source.evidence) || request.source.evidence.length > 200) throw new Error("Invalid family source evidence");
+				for (const evidence of request.source.evidence) {
+					for (const value of [
+						evidence.evidenceId,
+						evidence.partId,
+						evidence.mimeType
+					]) key(value);
+					if (evidence.parentEvidenceId !== null) key(evidence.parentEvidenceId);
+					if (typeof evidence.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(evidence.sha256)) throw new Error("Invalid family source evidence hash");
+				}
+			}
+			const source = {
+				sourceId: request.source.sourceId,
+				sourceVersion: request.source.sourceVersion,
+				deliveryKey: request.source.deliveryKey,
+				...request.source.evidence ? { evidence: request.source.evidence.map((e) => ({
+					evidenceId: e.evidenceId,
+					partId: e.partId,
+					parentEvidenceId: e.parentEvidenceId,
+					mimeType: e.mimeType,
+					sha256: e.sha256
+				})) } : {}
+			};
+			service.validatePages(request.pages);
+			if (request.pages.reduce((n, p) => n + p.data.length, 0) > 100 * 1024 * 1024) throw new Error("Family intake exceeds total byte limit");
+			await service.db.query("UPDATE tenants SET id=id WHERE id=?", [request.tenantId]);
+			const contentDigest = digest(canonical$1({
+				source,
+				pages: request.pages.map((p) => ({
+					name: p.name,
+					mimeType: p.mimeType,
+					sha256: digest(p.data)
+				}))
+			}));
+			const collection = await FamilyIntakeCollection.create({ db: service.db });
+			const prior = await collection.get({
+				tenantId: request.tenantId,
+				itemId: request.itemId
+			}, { cache: false });
+			if (prior) {
+				if (prior.contentDigest !== contentDigest) throw new Error("Family receipt retry content conflict");
+				return service.getFamilyIntake({
+					...request,
+					intakeId: String(prior.id)
+				});
+			}
+			const actor = await service.db.get("users", { id: request.actorUserId });
+			if (!actor?.profile_id) throw new LearnerAuthorizationError();
+			const row = await collection.create({
+				_insertOnly: true,
+				tenantId: request.tenantId,
+				itemId: request.itemId,
+				actorUserId: request.actorUserId,
+				ownerProfileId: actor.profile_id,
+				contentDigest,
+				sourceJson: canonical$1(source)
+			});
+			const links = await FamilyIntakeAssetCollection.create({ db: service.db });
+			for (const [position, page] of request.pages.entries()) {
+				const asset = await service.storePage(request, actor.profile_id, page);
+				await links.create({
+					_insertOnly: true,
+					tenantId: request.tenantId,
+					intakeId: String(row.id),
+					assetId: String(asset.id),
+					name: page.name,
+					mimeType: page.mimeType,
+					sha256: digest(page.data),
+					position
+				});
+			}
+			return service.getFamilyIntake({
+				...request,
+				intakeId: String(row.id)
+			});
+		});
+	}
+	async getFamilyIntake(request) {
+		const row = await this.familyRow(request);
+		const decisions = await this.familyDecisions(request);
+		const assignment = decisions.map((d) => JSON.parse(d.bodyJson)).findLast((d) => d.kind === "assign");
+		const adoption = decisions.map((d) => JSON.parse(d.bodyJson)).find((d) => d.kind === "adopt");
+		const originals = await (await FamilyIntakeAssetCollection.create({ db: this.db })).list({
+			where: {
+				tenantId: request.tenantId,
+				intakeId: request.intakeId
+			},
+			orderBy: "position",
+			limit: 100
+		});
+		return {
+			id: String(row.id),
+			itemId: row.itemId,
+			source: JSON.parse(row.sourceJson),
+			revision: decisions.length,
+			learnerId: assignment?.learnerId ?? null,
+			photoIntakeId: adoption?.kind === "adopt" ? adoption.photoIntakeId : null,
+			originals: originals.map((o) => ({
+				assetId: o.assetId,
+				name: o.name,
+				mimeType: o.mimeType,
+				sha256: o.sha256
+			}))
+		};
+	}
+	async listFamilyIntakes(request, options = {}) {
+		await this.authorizeFamilyIntake(request);
+		const limit = options.limit ?? 20, offset = options.offset ?? 0;
+		if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100 || !Number.isSafeInteger(offset) || offset < 0) throw new Error("Invalid family inbox page");
+		const rows = await (await FamilyIntakeCollection.create({ db: this.db })).list({
+			where: { tenantId: request.tenantId },
+			orderBy: "createdAt DESC",
+			limit,
+			offset
+		});
+		return Promise.all(rows.map((row) => this.getFamilyIntake({
+			...request,
+			intakeId: String(row.id)
+		})));
+	}
+	async countFamilyIntakes(request) {
+		await this.authorizeFamilyIntake(request);
+		const rows = await this.db.query("SELECT COUNT(*) AS total FROM family_intakes f WHERE f.tenant_id=? AND NOT EXISTS (SELECT 1 FROM workbook_photo_intakes p WHERE p.tenant_id=f.tenant_id AND p.family_intake_id=f.id)", [request.tenantId]);
+		return Number(rows.rows[0]?.total ?? 0);
+	}
+	async getFamilyIntakeTimeline(request) {
+		await this.familyRow(request);
+		return (await this.familyDecisions(request)).map((d) => ({
+			id: String(d.id),
+			revision: d.sequence,
+			actorUserId: d.actorUserId,
+			requestKey: d.requestKey,
+			decision: JSON.parse(d.bodyJson)
+		}));
+	}
+	async readFamilyIntakeOriginal(request) {
+		const row = await this.familyRow(request);
+		const original = (await this.getFamilyIntake(request)).originals.find((o) => o.assetId === request.assetId);
+		if (!original) throw new LearnerAuthorizationError();
+		return withPrivateAssetAccess({
+			tenantId: request.tenantId,
+			actorUserId: request.actorUserId,
+			ownerProfileId: row.ownerProfileId,
+			assetIds: [request.assetId]
+		}, async () => {
+			const runtime = await this.assets();
+			const asset = await runtime.collection.get({
+				id: request.assetId,
+				tenantId: request.tenantId,
+				ownerProfileId: row.ownerProfileId
+			}, { cache: false });
+			if (asset?.accessMode !== "private") throw new LearnerAuthorizationError();
+			const data = await runtime.store.read(asset);
+			if (digest(data) !== original.sha256) throw new Error("Retained family original integrity mismatch");
+			return {
+				data,
+				mimeType: original.mimeType
+			};
+		});
+	}
+	async assignFamilyIntake(request) {
+		return this.composeMutation(async (service) => {
+			await service.authorizeFamilyIntake(request, "education.family-intake.assign");
+			await service.lockFamily(request);
+			await service.requireActor(request, "education.learner.plan");
+			key(request.requestKey);
+			key(request.reason);
+			const view = await service.getFamilyIntake(request);
+			const body = {
+				kind: "assign",
+				learnerId: request.learnerId,
+				reason: request.reason
+			};
+			const prior = (await service.familyDecisions(request)).find((d) => d.requestKey === request.requestKey);
+			if (prior) {
+				if (prior.bodyJson !== canonical$1(body)) throw new Error("Family decision retry content conflict");
+				return view;
+			}
+			if (view.photoIntakeId) throw new Error("Adopted family intake cannot be retargeted");
+			if (!Number.isSafeInteger(request.expectedRevision) || request.expectedRevision !== view.revision) throw new Error("Family intake revision conflict");
+			await service.appendFamily(request, request.requestKey, body);
+			return service.getFamilyIntake(request);
+		});
+	}
+	/** Freeze the explicit assignment and borrow exact originals; no capture or grading. */
+	async adoptFamilyIntake(request) {
+		return this.composeMutation(async (service) => {
+			await service.authorizeFamilyIntake(request, "education.family-intake.assign");
+			await service.lockFamily(request);
+			await service.requireActor(request, "education.learner.plan");
+			key(request.requestKey);
+			const view = await service.getFamilyIntake(request);
+			const prior = (await service.familyDecisions(request)).find((d) => d.requestKey === request.requestKey);
+			if (prior) {
+				const body = JSON.parse(prior.bodyJson);
+				if (body.kind !== "adopt" || body.learnerId !== request.learnerId) throw new Error("Family decision retry content conflict");
+				return view;
+			}
+			if (view.photoIntakeId || view.learnerId !== request.learnerId) throw new Error("Family intake assignment mismatch");
+			if (!Number.isSafeInteger(request.expectedRevision) || request.expectedRevision !== view.revision) throw new Error("Family intake revision conflict");
+			const row = await service.familyRow(request);
+			for (const original of view.originals) await service.readFamilyIntakeOriginal({
+				...request,
+				assetId: original.assetId
+			});
+			const photoIntakeId = globalThis.crypto.randomUUID();
+			await service.appendFamily(request, request.requestKey, {
+				kind: "adopt",
+				learnerId: request.learnerId,
+				photoIntakeId
+			});
+			const photo = await (await WorkbookPhotoIntakeCollection.create({ db: service.db })).create({
+				id: photoIntakeId,
+				_insertOnly: true,
+				tenantId: request.tenantId,
+				learnerId: request.learnerId,
+				familyIntakeId: request.intakeId,
+				itemId: row.itemId,
+				actorUserId: row.actorUserId,
+				contentDigest: row.contentDigest
+			});
+			const links = await WorkbookPhotoAssetCollection.create({ db: service.db });
+			for (const [position, original] of view.originals.entries()) await links.create({
+				_insertOnly: true,
+				tenantId: request.tenantId,
+				learnerId: request.learnerId,
+				intakeId: String(photo.id),
+				...original,
+				position
+			});
+			return service.getFamilyIntake(request);
+		});
+	}
+};
+//#endregion
 //#region src/workbook-photo-ingestion.ts
 var MODEL = "@happyvertical/smrt-education:WorkbookPhotoIntake";
 var WORKBOOK_PHOTO_HANDLER = "@happyvertical/smrt-education:identify-workbook-photo";
@@ -128,9 +535,12 @@ var schema = {
 };
 function workbookPhotoIntakeHandlers(input) {
 	const bound = async (context, work) => {
-		assertScope(context.scope, input.request);
+		const checked = async (service) => {
+			await service.assertWorkbookPhotoScope(input.request, context.scope, context.itemId);
+			return work(service);
+		};
 		if (!context.policy.requireReview) throw new Error("Photo intake requires review policy");
-		if (!context.principal) return input.workbooks.withExecutor(context.db, work);
+		if (!context.principal) return input.workbooks.withExecutor(context.db, checked);
 		const tenant = getCurrentTenant();
 		if (!tenant || tenant.tenantId !== input.request.tenantId || tenant.userId !== context.principal.context.userId || context.principal.context.tenantId !== input.request.tenantId) throw new Error("Photo principal tenant mismatch");
 		return withTenant({
@@ -138,7 +548,7 @@ function workbookPhotoIntakeHandlers(input) {
 			tenantId: input.request.tenantId,
 			userId: input.request.actorUserId,
 			superAdminBypass: false
-		}, () => input.workbooks.withExecutor(context.db, work));
+		}, () => input.workbooks.withExecutor(context.db, checked));
 	};
 	const authorize = async (context) => bound(context, async (service) => {
 		await service.authorizePhotoIntake(input.request);
@@ -220,15 +630,17 @@ function workbookRevision(book) {
 	return `workbook:${createHash("sha256").update(canonical(book)).digest("hex")}`;
 }
 function workbookPhotoIntakeTargetResolver(input) {
-	return async ({ db, scope, model, id, revision }) => {
-		assertScope(scope, input.request);
+	return async ({ db, scope, itemId, model, id, revision }) => {
 		if (model !== "@happyvertical/smrt-education:Workbook") throw new Error("Photo target unavailable");
 		const book = (await withTenant({
 			...getCurrentTenant(),
 			tenantId: input.request.tenantId,
 			userId: input.request.actorUserId,
 			superAdminBypass: false
-		}, () => input.workbooks.withExecutor(db, (service) => service.listWorkbookPhotoWorkbooks(input.request)))).find((book2) => book2.id === id);
+		}, () => input.workbooks.withExecutor(db, async (service) => {
+			await service.assertWorkbookPhotoScope(input.request, scope, itemId);
+			return service.listWorkbookPhotoWorkbooks(input.request);
+		}))).find((book2) => book2.id === id);
 		if (!book) throw new Error("Photo target unavailable");
 		const current = workbookRevision(book);
 		if (revision !== void 0 && revision !== current) throw new Error("Photo target changed");
@@ -279,8 +691,8 @@ async function retainWorkbookPhotoReceipt(input) {
 	});
 }
 async function preserveWorkbookPhotoIdentification(input) {
-	assertScope(input.scope, input.request);
 	const view = await input.workbooks.getWorkbookPhotoIntake(input.request);
+	await input.workbooks.assertWorkbookPhotoScope(input.request, input.scope, view.itemId);
 	let snapshot;
 	try {
 		snapshot = await input.ingestion.getCompletedAnalysis(view.itemId);
@@ -306,7 +718,7 @@ async function preserveWorkbookPhotoIdentification(input) {
 		requestKey: `analysis:${snapshot.attemptId}`,
 		proposal,
 		allowAutomaticResolution: generation.outcome === "proposals" && generation.suggestions.length === 1 && suggestions[0].alternatives.length === 0 && generation.splits.length === 0,
-		sourceHashes: snapshot.evidence.filter((e) => e.parentEvidenceId === null).sort((a, b) => a.partId.localeCompare(b.partId)).map((e) => e.contentHash),
+		sourceHashes: intakeOriginalEvidence(snapshot.evidence).filter((e) => e.mediaType !== "application/json").map((e) => e.contentHash),
 		provenance: {
 			attemptId: snapshot.attemptId,
 			revision: snapshot.revision,
@@ -320,8 +732,9 @@ async function preserveWorkbookPhotoIdentification(input) {
 	});
 }
 async function processWorkbookPhotoAnalysis(input) {
-	assertScope(input.scope, input.request);
-	if ((await input.workbooks.getWorkbookPhotoIntake(input.request)).itemId !== input.itemId) throw new Error("Photo worker receipt mismatch");
+	const view = await input.workbooks.getWorkbookPhotoIntake(input.request);
+	await input.workbooks.assertWorkbookPhotoScope(input.request, input.scope, view.itemId);
+	if (view.itemId !== input.itemId) throw new Error("Photo worker receipt mismatch");
 	const processing = await processEducationAnalysis(input);
 	const intake = await preserveWorkbookPhotoIdentification(input);
 	const capture = intake.status === "resolved" && ["lesson", "work"].includes(intake.identification?.kind ?? "") && intake.identification?.workState === "completed" ? await input.workbooks.captureWorkbookPhotoIntake({
@@ -1010,7 +1423,7 @@ async function preserveWorkbookIntakeAnalysis(input) {
 		activityId,
 		submissionId
 	});
-	const originals = snapshot.evidence.filter((e) => e.parentEvidenceId === null).sort((a, b) => a.partId.localeCompare(b.partId));
+	const originals = intakeOriginalEvidence(snapshot.evidence).filter((e) => e.mediaType !== "application/json");
 	if (originals.length !== sources.length || originals.some((e, i) => e.contentHash !== sources[i].sha256)) throw new Error("Workbook retained source mismatch");
 	let assessment;
 	try {
@@ -1168,6 +1581,6 @@ async function preserveWorkbookIntakeAnalysis(input) {
 	}
 }
 //#endregion
-export { WORKBOOK_PHOTO_HANDLER, captureEducationIntake, educationIntakeHandlers, educationIntakeTargetResolver, preserveWorkbookIntakeAnalysis, preserveWorkbookPhotoIdentification, processEducationAnalysis, processWorkbookPhotoAnalysis, queueEducationExtraction, receiveWorkbookPhotoIntake, requireIngestionMemoryLimit, retainWorkbookPhotoReceipt, workbookPhotoIntakeHandlers, workbookPhotoIntakeTargetResolver };
+export { FamilyIntakeService, WORKBOOK_PHOTO_HANDLER, captureEducationIntake, educationIntakeHandlers, educationIntakeTargetResolver, preserveWorkbookIntakeAnalysis, preserveWorkbookPhotoIdentification, processEducationAnalysis, processWorkbookPhotoAnalysis, queueEducationExtraction, receiveFamilyIntake, receiveWorkbookPhotoIntake, requireIngestionMemoryLimit, retainFamilyIntakeReceipt, retainWorkbookPhotoReceipt, workbookPhotoIntakeHandlers, workbookPhotoIntakeTargetResolver };
 
 //# sourceMappingURL=ingestion.js.map