@happyvertical/smrt-education 0.57.42 → 0.57.44

package/dist/chunks/{workbook-photo-service-C6mbUUp6.js → workbook-photo-service-BxvZDqjM.js}

@@ -4,8 +4,8 @@ import { AssetCollection, createAssetRuntime, withPrivateAssetAccess } from "@ha
 import { TenantCollection } from "@happyvertical/smrt-users";
 //#region \0rolldown/runtime.js
 var __create = Object.create;
-var __defProp$8 = Object.defineProperty;
-var __getOwnPropDesc$8 = Object.getOwnPropertyDescriptor;
+var __defProp$9 = Object.defineProperty;
+var __getOwnPropDesc$9 = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
@@ -13,35 +13,35 @@ var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).expor
 var __copyProps = (to, from, except, desc) => {
 	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
 		key = keys[i];
-		if (!__hasOwnProp.call(to, key) && key !== except) __defProp$8(to, key, {
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp$9(to, key, {
 			get: ((k) => from[k]).bind(null, key),
-			enumerable: !(desc = __getOwnPropDesc$8(from, key)) || desc.enumerable
+			enumerable: !(desc = __getOwnPropDesc$9(from, key)) || desc.enumerable
 		});
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp$8(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp$9(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));
 //#endregion
 //#region src/catalog.ts
-var __defProp$7 = Object.defineProperty;
-var __getOwnPropDesc$7 = Object.getOwnPropertyDescriptor;
-var __defNormalProp$7 = (obj, key, value) => key in obj ? __defProp$7(obj, key, {
+var __defProp$8 = Object.defineProperty;
+var __getOwnPropDesc$8 = Object.getOwnPropertyDescriptor;
+var __defNormalProp$8 = (obj, key, value) => key in obj ? __defProp$8(obj, key, {
 	enumerable: true,
 	configurable: true,
 	writable: true,
 	value
 }) : obj[key] = value;
-var __decorateClass$7 = (decorators, target, key, kind) => {
-	var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc$7(target, key) : target;
+var __decorateClass$8 = (decorators, target, key, kind) => {
+	var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc$8(target, key) : target;
 	for (var i = decorators.length - 1, decorator; i >= 0; i--) if (decorator = decorators[i]) result = (kind ? decorator(target, key, result) : decorator(result)) || result;
-	if (kind && result) __defProp$7(target, key, result);
+	if (kind && result) __defProp$8(target, key, result);
 	return result;
 };
-var __publicField$7 = (obj, key, value) => __defNormalProp$7(obj, typeof key !== "symbol" ? key + "" : key, value);
-var closed$5 = {
+var __publicField$8 = (obj, key, value) => __defNormalProp$8(obj, typeof key !== "symbol" ? key + "" : key, value);
+var closed$6 = {
 	api: false,
 	mcp: false,
 	cli: false
@@ -100,24 +100,24 @@ var Course = class extends SmrtObject {
 		return await super.save(options);
 	}
 };
-__publicField$7(Course, "__smrtPackage__", "@happyvertical/smrt-education");
-__decorateClass$7([tenantId({ nullable: true })], Course.prototype, "tenantId", 2);
-__decorateClass$7([field({ required: true })], Course.prototype, "title", 2);
-Course = __decorateClass$7([TenantScoped({ mode: "optional" }), smrt({
+__publicField$8(Course, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$8([tenantId({ nullable: true })], Course.prototype, "tenantId", 2);
+__decorateClass$8([field({ required: true })], Course.prototype, "title", 2);
+Course = __decorateClass$8([TenantScoped({ mode: "optional" }), smrt({
 	tableStrategy: "sti",
-	...closed$5
+	...closed$6
 })], Course);
 var ExternalCourse = class extends Course {};
-__publicField$7(ExternalCourse, "__smrtPackage__", "@happyvertical/smrt-education");
-ExternalCourse = __decorateClass$7([smrt({
+__publicField$8(ExternalCourse, "__smrtPackage__", "@happyvertical/smrt-education");
+ExternalCourse = __decorateClass$8([smrt({
 	tableName: "courses",
-	...closed$5
+	...closed$6
 })], ExternalCourse);
 var AuthoredCourse = class extends Course {};
-__publicField$7(AuthoredCourse, "__smrtPackage__", "@happyvertical/smrt-education");
-AuthoredCourse = __decorateClass$7([smrt({
+__publicField$8(AuthoredCourse, "__smrtPackage__", "@happyvertical/smrt-education");
+AuthoredCourse = __decorateClass$8([smrt({
 	tableName: "courses",
-	...closed$5
+	...closed$6
 })], AuthoredCourse);
 var CourseSection = class extends SmrtObject {
 	tenantId = null;
@@ -138,11 +138,11 @@ var CourseSection = class extends SmrtObject {
 		return await super.save(options);
 	}
 };
-__publicField$7(CourseSection, "__smrtPackage__", "@happyvertical/smrt-education");
-__decorateClass$7([tenantId({ nullable: true })], CourseSection.prototype, "tenantId", 2);
-__decorateClass$7([foreignKey("Course", { required: true })], CourseSection.prototype, "courseId", 2);
-__decorateClass$7([field({ required: true })], CourseSection.prototype, "title", 2);
-CourseSection = __decorateClass$7([TenantScoped({ mode: "optional" }), smrt({ ...closed$5 })], CourseSection);
+__publicField$8(CourseSection, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$8([tenantId({ nullable: true })], CourseSection.prototype, "tenantId", 2);
+__decorateClass$8([foreignKey("Course", { required: true })], CourseSection.prototype, "courseId", 2);
+__decorateClass$8([field({ required: true })], CourseSection.prototype, "title", 2);
+CourseSection = __decorateClass$8([TenantScoped({ mode: "optional" }), smrt({ ...closed$6 })], CourseSection);
 var Lesson = class extends SmrtObject {
 	tenantId = null;
 	sectionId = "";
@@ -169,19 +169,19 @@ var Lesson = class extends SmrtObject {
 		return await super.save(options);
 	}
 };
-__publicField$7(Lesson, "__smrtPackage__", "@happyvertical/smrt-education");
-__decorateClass$7([tenantId({ nullable: true })], Lesson.prototype, "tenantId", 2);
-__decorateClass$7([foreignKey("CourseSection", { required: true })], Lesson.prototype, "sectionId", 2);
-__decorateClass$7([field({ required: true })], Lesson.prototype, "title", 2);
-Lesson = __decorateClass$7([TenantScoped({ mode: "optional" }), smrt({
+__publicField$8(Lesson, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$8([tenantId({ nullable: true })], Lesson.prototype, "tenantId", 2);
+__decorateClass$8([foreignKey("CourseSection", { required: true })], Lesson.prototype, "sectionId", 2);
+__decorateClass$8([field({ required: true })], Lesson.prototype, "title", 2);
+Lesson = __decorateClass$8([TenantScoped({ mode: "optional" }), smrt({
 	tableStrategy: "sti",
-	...closed$5
+	...closed$6
 })], Lesson);
 var Reading = class extends Lesson {};
-__publicField$7(Reading, "__smrtPackage__", "@happyvertical/smrt-education");
-Reading = __decorateClass$7([smrt({
+__publicField$8(Reading, "__smrtPackage__", "@happyvertical/smrt-education");
+Reading = __decorateClass$8([smrt({
 	tableName: "lessons",
-	...closed$5
+	...closed$6
 })], Reading);
 var Video = class extends Lesson {
 	videoUrl = "";
@@ -190,10 +190,10 @@ var Video = class extends Lesson {
 		applyModelOptions(this, options);
 	}
 };
-__publicField$7(Video, "__smrtPackage__", "@happyvertical/smrt-education");
-Video = __decorateClass$7([smrt({
+__publicField$8(Video, "__smrtPackage__", "@happyvertical/smrt-education");
+Video = __decorateClass$8([smrt({
 	tableName: "lessons",
-	...closed$5
+	...closed$6
 })], Video);
 var Worksheet = class extends Lesson {
 	printableUrl = "";
@@ -205,16 +205,16 @@ var Worksheet = class extends Lesson {
 		applyModelOptions(this, options);
 	}
 };
-__publicField$7(Worksheet, "__smrtPackage__", "@happyvertical/smrt-education");
-Worksheet = __decorateClass$7([smrt({
+__publicField$8(Worksheet, "__smrtPackage__", "@happyvertical/smrt-education");
+Worksheet = __decorateClass$8([smrt({
 	tableName: "lessons",
-	...closed$5
+	...closed$6
 })], Worksheet);
 var Exercise = class extends Lesson {};
-__publicField$7(Exercise, "__smrtPackage__", "@happyvertical/smrt-education");
-Exercise = __decorateClass$7([smrt({
+__publicField$8(Exercise, "__smrtPackage__", "@happyvertical/smrt-education");
+Exercise = __decorateClass$8([smrt({
 	tableName: "lessons",
-	...closed$5
+	...closed$6
 })], Exercise);
 GlobalInterceptors.register({
 	name: "education-catalog-identity",
@@ -246,22 +246,22 @@ GlobalInterceptors.register({
 });
 //#endregion
 //#region src/learners.ts
-var __defProp$6 = Object.defineProperty;
-var __getOwnPropDesc$6 = Object.getOwnPropertyDescriptor;
-var __defNormalProp$6 = (obj, key, value) => key in obj ? __defProp$6(obj, key, {
+var __defProp$7 = Object.defineProperty;
+var __getOwnPropDesc$7 = Object.getOwnPropertyDescriptor;
+var __defNormalProp$7 = (obj, key, value) => key in obj ? __defProp$7(obj, key, {
 	enumerable: true,
 	configurable: true,
 	writable: true,
 	value
 }) : obj[key] = value;
-var __decorateClass$6 = (decorators, target, key, kind) => {
-	var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc$6(target, key) : target;
+var __decorateClass$7 = (decorators, target, key, kind) => {
+	var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc$7(target, key) : target;
 	for (var i = decorators.length - 1, decorator; i >= 0; i--) if (decorator = decorators[i]) result = (kind ? decorator(target, key, result) : decorator(result)) || result;
-	if (kind && result) __defProp$6(target, key, result);
+	if (kind && result) __defProp$7(target, key, result);
 	return result;
 };
-var __publicField$6 = (obj, key, value) => __defNormalProp$6(obj, typeof key !== "symbol" ? key + "" : key, value);
-var closed$4 = {
+var __publicField$7 = (obj, key, value) => __defNormalProp$7(obj, typeof key !== "symbol" ? key + "" : key, value);
+var closed$5 = {
 	api: false,
 	mcp: false,
 	cli: false
@@ -326,11 +326,11 @@ var Learner = class extends SmrtObject {
 		return super.save(options);
 	}
 };
-__publicField$6(Learner, "__smrtPackage__", "@happyvertical/smrt-education");
-__decorateClass$6([tenantId()], Learner.prototype, "tenantId", 2);
-__decorateClass$6([crossPackageRef("@happyvertical/smrt-users:User", { required: true })], Learner.prototype, "userId", 2);
-__decorateClass$6([crossPackageRef("@happyvertical/smrt-profiles:Profile", { required: true })], Learner.prototype, "profileId", 2);
-Learner = __decorateClass$6([TenantScoped({ mode: "required" }), smrt({ ...closed$4 })], Learner);
+__publicField$7(Learner, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$7([tenantId()], Learner.prototype, "tenantId", 2);
+__decorateClass$7([crossPackageRef("@happyvertical/smrt-users:User", { required: true })], Learner.prototype, "userId", 2);
+__decorateClass$7([crossPackageRef("@happyvertical/smrt-profiles:Profile", { required: true })], Learner.prototype, "profileId", 2);
+Learner = __decorateClass$7([TenantScoped({ mode: "required" }), smrt({ ...closed$5 })], Learner);
 var Curriculum = class extends SmrtObject {
 	tenantId = "";
 	learnerId = "";
@@ -357,12 +357,12 @@ var Curriculum = class extends SmrtObject {
 		return super.save(options);
 	}
 };
-__publicField$6(Curriculum, "__smrtPackage__", "@happyvertical/smrt-education");
-__decorateClass$6([tenantId()], Curriculum.prototype, "tenantId", 2);
-__decorateClass$6([foreignKey("Learner", { required: true })], Curriculum.prototype, "learnerId", 2);
-__decorateClass$6([field({ required: true })], Curriculum.prototype, "title", 2);
-Curriculum = __decorateClass$6([TenantScoped({ mode: "required" }), smrt({
-	...closed$4,
+__publicField$7(Curriculum, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$7([tenantId()], Curriculum.prototype, "tenantId", 2);
+__decorateClass$7([foreignKey("Learner", { required: true })], Curriculum.prototype, "learnerId", 2);
+__decorateClass$7([field({ required: true })], Curriculum.prototype, "title", 2);
+Curriculum = __decorateClass$7([TenantScoped({ mode: "required" }), smrt({
+	...closed$5,
 	tableName: "curricula"
 })], Curriculum);
 var Enrollment = class extends SmrtObject {
@@ -401,13 +401,13 @@ var Enrollment = class extends SmrtObject {
 		return super.save(options);
 	}
 };
-__publicField$6(Enrollment, "__smrtPackage__", "@happyvertical/smrt-education");
-__decorateClass$6([tenantId()], Enrollment.prototype, "tenantId", 2);
-__decorateClass$6([foreignKey("Curriculum", { required: true })], Enrollment.prototype, "curriculumId", 2);
-__decorateClass$6([foreignKey("Learner", { required: true })], Enrollment.prototype, "learnerId", 2);
-__decorateClass$6([foreignKey("Course", { required: true })], Enrollment.prototype, "courseId", 2);
-Enrollment = __decorateClass$6([TenantScoped({ mode: "required" }), smrt({
-	...closed$4,
+__publicField$7(Enrollment, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$7([tenantId()], Enrollment.prototype, "tenantId", 2);
+__decorateClass$7([foreignKey("Curriculum", { required: true })], Enrollment.prototype, "curriculumId", 2);
+__decorateClass$7([foreignKey("Learner", { required: true })], Enrollment.prototype, "learnerId", 2);
+__decorateClass$7([foreignKey("Course", { required: true })], Enrollment.prototype, "courseId", 2);
+Enrollment = __decorateClass$7([TenantScoped({ mode: "required" }), smrt({
+	...closed$5,
 	conflictColumns: [
 		"tenant_id",
 		"curriculum_id",
@@ -429,6 +429,23 @@ var LessonProgress = class extends SmrtObject {
 		super(options);
 		applyOptions$1(this, options);
 	}
+	/**
+	* A pinned enrollment may follow a later release, whose lessons live on that
+	* release's own materialized Course row. Hosts that have not migrated the
+	* authoring tables keep the strict enrollment-course rule.
+	*/
+	async inPinnedRelease(courseId) {
+		if (!await this.db.tableExists("enrollment_release_pins")) return false;
+		const pins = await this.db.list("enrollment_release_pins", {
+			tenant_id: this.tenantId,
+			enrollment_id: this.enrollmentId
+		});
+		for (const pin of pins) if ((await this.db.get("course_releases", {
+			id: pin.release_id,
+			tenant_id: this.tenantId
+		}))?.release_course_id === courseId) return true;
+		return false;
+	}
 	async save(options) {
 		await immutableIdentity$1(this, {
 			enrollment_id: this.enrollmentId,
@@ -449,26 +466,24 @@ var LessonProgress = class extends SmrtObject {
 			tenant_id: this.tenantId
 		});
 		const lesson = await this.db.get("lessons", { id: this.lessonId });
-		if (!enrollment || !lesson || !await this.db.get("course_sections", {
-			id: lesson.section_id,
-			course_id: enrollment.course_id
-		})) throw new Error("Progress requires its enrollment learner and course lesson");
+		const section = lesson ? await this.db.get("course_sections", { id: lesson.section_id }) : null;
+		if (!enrollment || !section || !(section.course_id === enrollment.course_id || await this.inPinnedRelease(String(section.course_id)))) throw new Error("Progress requires its enrollment learner and course lesson");
 		for (const value of [this.attempts, this.timeSpentSeconds]) if (!Number.isSafeInteger(value) || value < 0) throw new Error("Progress counters must be nonnegative integers");
 		if (this.bestScore !== null && (!Number.isFinite(this.bestScore) || this.bestScore < 0 || this.bestScore > 1)) throw new Error("Score must be null or a number from zero to one");
 		return super.save(options);
 	}
 };
-__publicField$6(LessonProgress, "__smrtPackage__", "@happyvertical/smrt-education");
-__decorateClass$6([tenantId()], LessonProgress.prototype, "tenantId", 2);
-__decorateClass$6([foreignKey("Enrollment", { required: true })], LessonProgress.prototype, "enrollmentId", 2);
-__decorateClass$6([foreignKey("Learner", { required: true })], LessonProgress.prototype, "learnerId", 2);
-__decorateClass$6([foreignKey("Lesson", { required: true })], LessonProgress.prototype, "lessonId", 2);
-__decorateClass$6([field({
+__publicField$7(LessonProgress, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$7([tenantId()], LessonProgress.prototype, "tenantId", 2);
+__decorateClass$7([foreignKey("Enrollment", { required: true })], LessonProgress.prototype, "enrollmentId", 2);
+__decorateClass$7([foreignKey("Learner", { required: true })], LessonProgress.prototype, "learnerId", 2);
+__decorateClass$7([foreignKey("Lesson", { required: true })], LessonProgress.prototype, "lessonId", 2);
+__decorateClass$7([field({
 	type: "decimal",
 	nullable: true
 })], LessonProgress.prototype, "bestScore", 2);
-LessonProgress = __decorateClass$6([TenantScoped({ mode: "required" }), smrt({
-	...closed$4,
+LessonProgress = __decorateClass$7([TenantScoped({ mode: "required" }), smrt({
+	...closed$5,
 	tableName: "lesson_progress",
 	conflictColumns: [
 		"tenant_id",
@@ -478,21 +493,21 @@ LessonProgress = __decorateClass$6([TenantScoped({ mode: "required" }), smrt({
 })], LessonProgress);
 //#endregion
 //#region src/lesson-assets.ts
-var __defProp$5 = Object.defineProperty;
-var __getOwnPropDesc$5 = Object.getOwnPropertyDescriptor;
-var __defNormalProp$5 = (obj, key, value) => key in obj ? __defProp$5(obj, key, {
+var __defProp$6 = Object.defineProperty;
+var __getOwnPropDesc$6 = Object.getOwnPropertyDescriptor;
+var __defNormalProp$6 = (obj, key, value) => key in obj ? __defProp$6(obj, key, {
 	enumerable: true,
 	configurable: true,
 	writable: true,
 	value
 }) : obj[key] = value;
-var __decorateClass$5 = (decorators, target, key, kind) => {
-	var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc$5(target, key) : target;
+var __decorateClass$6 = (decorators, target, key, kind) => {
+	var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc$6(target, key) : target;
 	for (var i = decorators.length - 1, decorator; i >= 0; i--) if (decorator = decorators[i]) result = (kind ? decorator(target, key, result) : decorator(result)) || result;
-	if (kind && result) __defProp$5(target, key, result);
+	if (kind && result) __defProp$6(target, key, result);
 	return result;
 };
-var __publicField$5 = (obj, key, value) => __defNormalProp$5(obj, typeof key !== "symbol" ? key + "" : key, value);
+var __publicField$6 = (obj, key, value) => __defNormalProp$6(obj, typeof key !== "symbol" ? key + "" : key, value);
 var LessonAsset = class extends SmrtObject {
 	tenantId = null;
 	lessonId = "";
@@ -526,12 +541,12 @@ var LessonAsset = class extends SmrtObject {
 		return await super.save(options);
 	}
 };
-__publicField$5(LessonAsset, "__smrtPackage__", "@happyvertical/smrt-education");
-__decorateClass$5([tenantId({ nullable: true })], LessonAsset.prototype, "tenantId", 2);
-__decorateClass$5([foreignKey("Lesson", { required: true })], LessonAsset.prototype, "lessonId", 2);
-__decorateClass$5([crossPackageRef("@happyvertical/smrt-assets:Asset", { required: true })], LessonAsset.prototype, "assetId", 2);
-__decorateClass$5([field({ required: true })], LessonAsset.prototype, "relationship", 2);
-LessonAsset = __decorateClass$5([TenantScoped({ mode: "optional" }), smrt({
+__publicField$6(LessonAsset, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$6([tenantId({ nullable: true })], LessonAsset.prototype, "tenantId", 2);
+__decorateClass$6([foreignKey("Lesson", { required: true })], LessonAsset.prototype, "lessonId", 2);
+__decorateClass$6([crossPackageRef("@happyvertical/smrt-assets:Asset", { required: true })], LessonAsset.prototype, "assetId", 2);
+__decorateClass$6([field({ required: true })], LessonAsset.prototype, "relationship", 2);
+LessonAsset = __decorateClass$6([TenantScoped({ mode: "optional" }), smrt({
 	tableName: "lesson_assets",
 	conflictColumns: [
 		"tenant_id",
@@ -544,23 +559,51 @@ LessonAsset = __decorateClass$5([TenantScoped({ mode: "optional" }), smrt({
 	cli: false
 })], LessonAsset);
 //#endregion
+//#region src/question-rubric.ts
+var CRITERION_ID = /^[A-Za-z0-9._:-]{1,80}$/;
+function parseQuestionRubric(value) {
+	const criteria = value?.criteria;
+	if (!Array.isArray(criteria) || !criteria.length || criteria.length > 50) throw new Error("Rubric requires between one and fifty criteria");
+	const seen = /* @__PURE__ */ new Set();
+	return { criteria: criteria.map((c) => {
+		if (!c || typeof c.id !== "string" || !CRITERION_ID.test(c.id) || seen.has(c.id) || typeof c.label !== "string" || !c.label.trim() || c.label.length > 500 || !Number.isFinite(c.maxPoints) || c.maxPoints <= 0) throw new Error("Invalid rubric criterion");
+		seen.add(c.id);
+		return {
+			id: c.id,
+			label: c.label,
+			maxPoints: c.maxPoints
+		};
+	}) };
+}
+function validateRubricResults(rubricJson, results) {
+	const entries = Object.entries(results);
+	if (!entries.length) return;
+	if (!rubricJson) throw new Error("Rubric results require a rubric on the question revision");
+	const rubric = parseQuestionRubric(JSON.parse(rubricJson));
+	const max = new Map(rubric.criteria.map((c) => [c.id, c.maxPoints]));
+	for (const [id, raw] of entries) {
+		const points = raw && typeof raw === "object" && !Array.isArray(raw) ? raw.points : raw;
+		if (!max.has(id) || typeof points !== "number" || !Number.isFinite(points) || points < 0 || points > max.get(id)) throw new Error("Rubric results do not match the question rubric");
+	}
+}
+//#endregion
 //#region src/submissions.ts
-var __defProp$4 = Object.defineProperty;
-var __getOwnPropDesc$4 = Object.getOwnPropertyDescriptor;
-var __defNormalProp$4 = (obj, key, value) => key in obj ? __defProp$4(obj, key, {
+var __defProp$5 = Object.defineProperty;
+var __getOwnPropDesc$5 = Object.getOwnPropertyDescriptor;
+var __defNormalProp$5 = (obj, key, value) => key in obj ? __defProp$5(obj, key, {
 	enumerable: true,
 	configurable: true,
 	writable: true,
 	value
 }) : obj[key] = value;
-var __decorateClass$4 = (decorators, target, key, kind) => {
-	var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc$4(target, key) : target;
+var __decorateClass$5 = (decorators, target, key, kind) => {
+	var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc$5(target, key) : target;
 	for (var i = decorators.length - 1, decorator; i >= 0; i--) if (decorator = decorators[i]) result = (kind ? decorator(target, key, result) : decorator(result)) || result;
-	if (kind && result) __defProp$4(target, key, result);
+	if (kind && result) __defProp$5(target, key, result);
 	return result;
 };
-var __publicField$4 = (obj, key, value) => __defNormalProp$4(obj, typeof key !== "symbol" ? key + "" : key, value);
-var closed$3 = {
+var __publicField$5 = (obj, key, value) => __defNormalProp$5(obj, typeof key !== "symbol" ? key + "" : key, value);
+var closed$4 = {
 	api: false,
 	mcp: false,
 	cli: false
@@ -650,20 +693,20 @@ var Submission = class extends SmrtObject {
 		return super.save(options);
 	}
 };
-__publicField$4(Submission, "__smrtPackage__", "@happyvertical/smrt-education");
-__decorateClass$4([tenantId()], Submission.prototype, "tenantId", 2);
-__decorateClass$4([foreignKey("Learner", { required: true })], Submission.prototype, "learnerId", 2);
-__decorateClass$4([foreignKey("Lesson", { required: true })], Submission.prototype, "lessonId", 2);
-__decorateClass$4([foreignKey("LessonProgress", { required: true })], Submission.prototype, "progressId", 2);
-__decorateClass$4([field({ required: true })], Submission.prototype, "kind", 2);
-__decorateClass$4([foreignKey("Submission", { nullable: true })], Submission.prototype, "previousSubmissionId", 2);
-__decorateClass$4([field({
+__publicField$5(Submission, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$5([tenantId()], Submission.prototype, "tenantId", 2);
+__decorateClass$5([foreignKey("Learner", { required: true })], Submission.prototype, "learnerId", 2);
+__decorateClass$5([foreignKey("Lesson", { required: true })], Submission.prototype, "lessonId", 2);
+__decorateClass$5([foreignKey("LessonProgress", { required: true })], Submission.prototype, "progressId", 2);
+__decorateClass$5([field({ required: true })], Submission.prototype, "kind", 2);
+__decorateClass$5([foreignKey("Submission", { nullable: true })], Submission.prototype, "previousSubmissionId", 2);
+__decorateClass$5([field({
 	type: "text",
 	nullable: true
 })], Submission.prototype, "intakeItemId", 2);
-Submission = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+Submission = __decorateClass$5([TenantScoped({ mode: "required" }), smrt({
 	tableStrategy: "sti",
-	...closed$3
+	...closed$4
 })], Submission);
 var SubmissionIntakeBinding = class extends SmrtObject {
 	tenantId = "";
@@ -684,16 +727,16 @@ var SubmissionIntakeBinding = class extends SmrtObject {
 		return super.save(options);
 	}
 };
-__publicField$4(SubmissionIntakeBinding, "__smrtPackage__", "@happyvertical/smrt-education");
-__decorateClass$4([tenantId()], SubmissionIntakeBinding.prototype, "tenantId", 2);
-__decorateClass$4([field({
+__publicField$5(SubmissionIntakeBinding, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$5([tenantId()], SubmissionIntakeBinding.prototype, "tenantId", 2);
+__decorateClass$5([field({
 	required: true,
 	type: "text"
 })], SubmissionIntakeBinding.prototype, "intakeItemId", 2);
-__decorateClass$4([foreignKey("Submission", { required: true })], SubmissionIntakeBinding.prototype, "submissionId", 2);
-SubmissionIntakeBinding = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+__decorateClass$5([foreignKey("Submission", { required: true })], SubmissionIntakeBinding.prototype, "submissionId", 2);
+SubmissionIntakeBinding = __decorateClass$5([TenantScoped({ mode: "required" }), smrt({
 	tableName: "submission_intake_bindings",
-	...closed$3,
+	...closed$4,
 	conflictColumns: ["tenant_id", "intake_item_id"]
 })], SubmissionIntakeBinding);
 var ScannedSubmission = class extends Submission {
@@ -715,10 +758,10 @@ var ScannedSubmission = class extends Submission {
 		return super.save(options);
 	}
 };
-__publicField$4(ScannedSubmission, "__smrtPackage__", "@happyvertical/smrt-education");
-ScannedSubmission = __decorateClass$4([smrt({
+__publicField$5(ScannedSubmission, "__smrtPackage__", "@happyvertical/smrt-education");
+ScannedSubmission = __decorateClass$5([smrt({
 	tableName: "submissions",
-	...closed$3
+	...closed$4
 })], ScannedSubmission);
 var ExternalCompletion = class extends Submission {
 	reportedBy = "learner";
@@ -738,17 +781,17 @@ var ExternalCompletion = class extends Submission {
 		return super.save(options);
 	}
 };
-__publicField$4(ExternalCompletion, "__smrtPackage__", "@happyvertical/smrt-education");
-__decorateClass$4([field({ type: "decimal" })], ExternalCompletion.prototype, "reportedScore", 2);
-ExternalCompletion = __decorateClass$4([smrt({
+__publicField$5(ExternalCompletion, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$5([field({ type: "decimal" })], ExternalCompletion.prototype, "reportedScore", 2);
+ExternalCompletion = __decorateClass$5([smrt({
 	tableName: "submissions",
-	...closed$3
+	...closed$4
 })], ExternalCompletion);
 var Attestation = class extends Submission {};
-__publicField$4(Attestation, "__smrtPackage__", "@happyvertical/smrt-education");
-Attestation = __decorateClass$4([smrt({
+__publicField$5(Attestation, "__smrtPackage__", "@happyvertical/smrt-education");
+Attestation = __decorateClass$5([smrt({
 	tableName: "submissions",
-	...closed$3
+	...closed$4
 })], Attestation);
 var SubmissionAsset = class extends SmrtObject {
 	tenantId = "";
@@ -785,12 +828,12 @@ var SubmissionAsset = class extends SmrtObject {
 		return super.save(options);
 	}
 };
-__publicField$4(SubmissionAsset, "__smrtPackage__", "@happyvertical/smrt-education");
-__decorateClass$4([tenantId()], SubmissionAsset.prototype, "tenantId", 2);
-__decorateClass$4([foreignKey("Submission", { required: true })], SubmissionAsset.prototype, "submissionId", 2);
-__decorateClass$4([crossPackageRef("@happyvertical/smrt-assets:Asset", { required: true })], SubmissionAsset.prototype, "assetId", 2);
-__decorateClass$4([field({ required: true })], SubmissionAsset.prototype, "relationship", 2);
-SubmissionAsset = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+__publicField$5(SubmissionAsset, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$5([tenantId()], SubmissionAsset.prototype, "tenantId", 2);
+__decorateClass$5([foreignKey("Submission", { required: true })], SubmissionAsset.prototype, "submissionId", 2);
+__decorateClass$5([crossPackageRef("@happyvertical/smrt-assets:Asset", { required: true })], SubmissionAsset.prototype, "assetId", 2);
+__decorateClass$5([field({ required: true })], SubmissionAsset.prototype, "relationship", 2);
+SubmissionAsset = __decorateClass$5([TenantScoped({ mode: "required" }), smrt({
 	tableName: "submission_assets",
 	conflictColumns: [
 		"tenant_id",
@@ -798,7 +841,7 @@ SubmissionAsset = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
 		"asset_id",
 		"relationship"
 	],
-	...closed$3
+	...closed$4
 })], SubmissionAsset);
 var Grade = class extends SmrtObject {
 	tenantId = "";
@@ -809,6 +852,7 @@ var Grade = class extends SmrtObject {
 	pointsEarned = null;
 	pointsPossible = null;
 	rubricResults = "{}";
+	questionRevisionId = null;
 	feedback = "";
 	gradedAt = /* @__PURE__ */ new Date();
 	constructor(options = {}) {
@@ -836,27 +880,39 @@ var Grade = class extends SmrtObject {
 		requireScore(this.score, "Score");
 		for (const [value, label] of [[this.pointsEarned, "Points earned"], [this.pointsPossible, "Points possible"]]) if (value !== null) requireNonnegativeInteger(value, label);
 		if (this.pointsEarned !== null && this.pointsPossible !== null && this.pointsEarned > this.pointsPossible) throw new Error("Points earned cannot exceed points possible");
+		if (this.questionRevisionId !== null) {
+			const revision = await this.db.get("question_revisions", {
+				id: this.questionRevisionId,
+				tenant_id: this.tenantId
+			});
+			if (!revision) throw new Error("Grade requires its tenant question revision");
+			validateRubricResults(revision.rubric_json, this.getRubricResults());
+		}
 		return super.save(options);
 	}
 };
-__publicField$4(Grade, "__smrtPackage__", "@happyvertical/smrt-education");
-__decorateClass$4([tenantId()], Grade.prototype, "tenantId", 2);
-__decorateClass$4([foreignKey("Submission", { required: true })], Grade.prototype, "submissionId", 2);
-__decorateClass$4([field({ required: true })], Grade.prototype, "graderKind", 2);
-__decorateClass$4([crossPackageRef("@happyvertical/smrt-profiles:Profile", { nullable: true })], Grade.prototype, "graderProfileId", 2);
-__decorateClass$4([field({
+__publicField$5(Grade, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$5([tenantId()], Grade.prototype, "tenantId", 2);
+__decorateClass$5([foreignKey("Submission", { required: true })], Grade.prototype, "submissionId", 2);
+__decorateClass$5([field({ required: true })], Grade.prototype, "graderKind", 2);
+__decorateClass$5([crossPackageRef("@happyvertical/smrt-profiles:Profile", { nullable: true })], Grade.prototype, "graderProfileId", 2);
+__decorateClass$5([field({
 	type: "decimal",
 	nullable: true
 })], Grade.prototype, "score", 2);
-__decorateClass$4([field({
+__decorateClass$5([field({
 	type: "integer",
 	nullable: true
 })], Grade.prototype, "pointsEarned", 2);
-__decorateClass$4([field({
+__decorateClass$5([field({
 	type: "integer",
 	nullable: true
 })], Grade.prototype, "pointsPossible", 2);
-Grade = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({ ...closed$3 })], Grade);
+__decorateClass$5([field({
+	type: "text",
+	nullable: true
+})], Grade.prototype, "questionRevisionId", 2);
+Grade = __decorateClass$5([TenantScoped({ mode: "required" }), smrt({ ...closed$4 })], Grade);
 //#endregion
 //#region src/collections.ts
 var CourseCollection = class extends SmrtCollection {
@@ -915,143 +971,1051 @@ var ScannedSubmissionCollection = class extends SmrtCollection {
 var ExternalCompletionCollection = class extends SmrtCollection {
 	static _itemClass = ExternalCompletion;
 };
-var AttestationCollection = class extends SmrtCollection {
-	static _itemClass = Attestation;
+var AttestationCollection = class extends SmrtCollection {
+	static _itemClass = Attestation;
+};
+var GradeCollection = class extends SmrtCollection {
+	static _itemClass = Grade;
+};
+var SubmissionAssetCollection = class extends SmrtJunction {
+	static _itemClass = SubmissionAsset;
+	leftField = "submissionId";
+	rightField = "assetId";
+};
+//#endregion
+//#region src/catalog-service.ts
+var CatalogAuthorizationError = class extends Error {
+	constructor() {
+		super("Education catalog access is not authorized.");
+		this.name = "CatalogAuthorizationError";
+	}
+};
+function projectLesson(lesson, includeAnswerKeys) {
+	if (includeAnswerKeys || !("answerUrl" in lesson)) return lesson;
+	return Object.assign(Object.create(Object.getPrototypeOf(lesson)), lesson, { answerUrl: "" });
+}
+var CatalogService = class {
+	constructor(courses, sections, lessons, assets, tenants, authorize) {
+		this.courses = courses;
+		this.sections = sections;
+		this.lessons = lessons;
+		this.assets = assets;
+		this.tenants = tenants;
+		this.authorize = authorize;
+	}
+	courses;
+	sections;
+	lessons;
+	assets;
+	tenants;
+	authorize;
+	executor() {
+		const executor = this.courses.db;
+		if (!executor || [
+			this.sections,
+			this.lessons,
+			this.assets
+		].some((collection) => collection.db !== executor)) throw new CatalogAuthorizationError();
+		return executor;
+	}
+	authorizeInScope(request) {
+		return this.authorize({
+			...request,
+			executor: this.executor()
+		});
+	}
+	async findVisible(request) {
+		const { tenantId, actorUserId, includePrivate = false, options = {} } = request;
+		if (!tenantId.trim() || !actorUserId.trim()) throw new CatalogAuthorizationError();
+		const actor = {
+			actorTenantId: tenantId,
+			actorUserId,
+			rootTenantId: tenantId
+		};
+		if (await this.authorizeInScope({
+			...actor,
+			action: "education.catalog.read"
+		}) !== true) throw new CatalogAuthorizationError();
+		if (includePrivate && await this.authorizeInScope({
+			...actor,
+			action: "education.catalog.read-private"
+		}) !== true) throw new CatalogAuthorizationError();
+		return this.tenants.withTenantCatalogReadScope({
+			collections: [
+				"@happyvertical/smrt-education:Course",
+				"@happyvertical/smrt-education:CourseSection",
+				"@happyvertical/smrt-education:Lesson",
+				"@happyvertical/smrt-education:LessonAsset"
+			],
+			authorize: async (scope2) => scope2.mode === "catalog" && scope2.actorTenantId === tenantId && scope2.actorUserId === actorUserId && scope2.rootTenantId === tenantId
+		}, async () => this.courses.list({
+			...options,
+			where: [
+				[{ "licenseKind !=": "personal-use-copy" }],
+				[{ licenseKind: null }],
+				...includePrivate ? [[{
+					licenseKind: "personal-use-copy",
+					tenantId
+				}]] : []
+			]
+		}));
+	}
+	/** Project one already-visible course without exposing answer-key assets by default. */
+	async projectCourse(request) {
+		const course = (await this.findVisible(request)).find((item) => item.id === request.courseId);
+		if (!course?.id) return null;
+		const includeAnswerKeys = request.includeAnswerKeys === true;
+		const actor = {
+			actorTenantId: request.tenantId,
+			actorUserId: request.actorUserId,
+			rootTenantId: request.tenantId
+		};
+		if (includeAnswerKeys && await this.authorizeInScope({
+			...actor,
+			action: "education.catalog.answer-key.read"
+		}) !== true) throw new CatalogAuthorizationError();
+		return this.tenants.withTenantCatalogReadScope({
+			collections: [
+				"@happyvertical/smrt-education:CourseSection",
+				"@happyvertical/smrt-education:Lesson",
+				"@happyvertical/smrt-education:LessonAsset"
+			],
+			authorize: async (scope) => scope.mode === "catalog" && scope.actorTenantId === request.tenantId && scope.actorUserId === request.actorUserId
+		}, async () => {
+			const sections = await this.sections.list({
+				where: { courseId: course.id },
+				orderBy: ["sortOrder ASC", "id ASC"]
+			});
+			const result = [];
+			for (const section of sections) {
+				if (section.tenantId !== course.tenantId) continue;
+				const lessons = await this.lessons.list({
+					where: { sectionId: section.id },
+					orderBy: ["sortOrder ASC", "id ASC"]
+				});
+				result.push({
+					section,
+					lessons: await Promise.all(lessons.filter((lesson) => lesson.tenantId === course.tenantId).map(async (lesson) => ({
+						lesson: projectLesson(lesson, includeAnswerKeys),
+						assets: (await this.assets.byLeft(String(lesson.id))).filter((asset) => asset.tenantId === course.tenantId && (includeAnswerKeys || asset.relationship !== "answer-key"))
+					})))
+				});
+			}
+			return {
+				course,
+				sections: result
+			};
+		});
+	}
+};
+//#endregion
+//#region src/course-authoring-contracts.ts
+var COURSE_AUTHORING_ACTIONS = [
+	"education.course.read-draft",
+	"education.course.author",
+	"education.course.generate",
+	"education.course.review",
+	"education.course.release",
+	"education.course.assign",
+	"education.course.archive"
+];
+var COURSE_PROVENANCES = [
+	"supplied",
+	"generated",
+	"edited",
+	"extracted"
+];
+var MAX_PAGE_SIZE = 100;
+var DEFAULT_PAGE_SIZE = 50;
+var CourseAuthoringError = class extends Error {
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+		this.name = new.target.name;
+	}
+	code;
+};
+var CourseAuthoringAuthorizationError = class extends CourseAuthoringError {
+	constructor() {
+		super("not-authorized", "Course authoring access is not authorized.");
+	}
+};
+var CourseAuthoringValidationError = class extends CourseAuthoringError {
+	constructor(message) {
+		super("invalid-request", message);
+	}
+};
+var CourseNotFoundError = class extends CourseAuthoringError {
+	constructor() {
+		super("course-not-found", "Course was not found.");
+	}
+};
+var CourseDiscardedError = class extends CourseAuthoringError {
+	constructor() {
+		super("course-discarded", "Course draft was discarded.");
+	}
+};
+var CourseArchivedError = class extends CourseAuthoringError {
+	constructor() {
+		super("course-archived", "Course is archived; unarchive it first.");
+	}
+};
+var CourseStaleHeadError = class extends CourseAuthoringError {
+	constructor(currentHeadRevisionId) {
+		super("stale-head", "The draft head moved; reload and retry.");
+		this.currentHeadRevisionId = currentHeadRevisionId;
+	}
+	currentHeadRevisionId;
+};
+var CoursePolicyBasisMismatchError = class extends CourseAuthoringError {
+	constructor() {
+		super("policy-basis-mismatch", "The supplied policy basis differs from the one the authorizer relied on.");
+	}
+};
+var CourseRequestKeyConflictError = class extends CourseAuthoringError {
+	constructor() {
+		super("request-key-conflict", "The request key was already used for a different request.");
+	}
+};
+var ReviewGateRequiredError = class extends CourseAuthoringError {
+	constructor() {
+		super("review-gate-required", "Release requires a configured review gate; none is configured.");
+	}
+};
+var ReviewNotCurrentError = class extends CourseAuthoringError {
+	constructor(reason) {
+		super("review-not-current", "Release requires a current review of this exact revision.");
+		this.reason = reason;
+	}
+	reason;
+};
+var CourseRevisionAlreadyReleasedError = class extends CourseAuthoringError {
+	constructor(releaseId) {
+		super("revision-already-released", "This revision is already released.");
+		this.releaseId = releaseId;
+	}
+	releaseId;
+};
+var CourseDiscardRefusedError = class extends CourseAuthoringError {
+	constructor(references) {
+		super("discard-refused", "Only drafts with no release, enrollment, attempt, review or variant can be discarded.");
+		this.references = references;
+	}
+	references;
+};
+var EnrollmentPinConflictError = class extends CourseAuthoringError {
+	constructor(message = "Enrollment pin request conflicts with current state.") {
+		super("enrollment-pin-conflict", message);
+	}
+};
+var CourseMaterialCopyError = class extends CourseAuthoringError {
+	constructor(message = "Course material could not be copied to an owned asset.") {
+		super("material-copy-failed", message);
+	}
+};
+//#endregion
+//#region src/course-authoring-models.ts
+var __defProp$4 = Object.defineProperty;
+var __getOwnPropDesc$4 = Object.getOwnPropertyDescriptor;
+var __defNormalProp$4 = (obj, key, value) => key in obj ? __defProp$4(obj, key, {
+	enumerable: true,
+	configurable: true,
+	writable: true,
+	value
+}) : obj[key] = value;
+var __decorateClass$4 = (decorators, target, key, kind) => {
+	var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc$4(target, key) : target;
+	for (var i = decorators.length - 1, decorator; i >= 0; i--) if (decorator = decorators[i]) result = (kind ? decorator(target, key, result) : decorator(result)) || result;
+	if (kind && result) __defProp$4(target, key, result);
+	return result;
+};
+var __publicField$4 = (obj, key, value) => __defNormalProp$4(obj, typeof key !== "symbol" ? key + "" : key, value);
+var closed$3 = {
+	api: false,
+	mcp: false,
+	cli: false
+};
+var LICENSES = [
+	"own-work",
+	"open-license",
+	"personal-use-copy",
+	"licensed-for-sharing"
+];
+var PROVENANCES = [
+	"supplied",
+	"generated",
+	"edited",
+	"extracted"
+];
+function adopt(target, options) {
+	for (const [key, value] of Object.entries(options)) if (Object.hasOwn(target, key)) target[key] = value;
+}
+function requireText(value, message, max = 200) {
+	if (typeof value !== "string" || !value.trim() || value.length > max) throw new Error(message);
+}
+function requireJson(value, shape, what) {
+	let parsed;
+	try {
+		parsed = JSON.parse(value);
+	} catch {
+		throw new Error(`${what} must be JSON`);
+	}
+	if (shape === "array" ? !Array.isArray(parsed) : !parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error(`${what} must be a JSON ${shape}`);
+}
+async function requireInsert(row) {
+	if (!row.tenantId?.trim()) throw new Error("Course authoring requires a tenant");
+	if (row.id && await row.db.get(row.tableName, { id: row.id })) throw new Error("Course authoring history is immutable");
+}
+async function requireOwned(row, table, id, extra = {}) {
+	if (!await row.db.get(table, {
+		id,
+		tenant_id: row.tenantId,
+		...extra
+	})) throw new Error("Course authoring parent ownership mismatch");
+}
+function noDelete$1() {
+	throw new Error("Authored course history is immutable; erasure requires an owning retention operation");
+}
+function validDate(value) {
+	if (!(value instanceof Date) || !Number.isFinite(value.getTime())) throw new Error("Invalid course authoring timestamp");
+}
+var CourseRevision = class extends SmrtObject {
+	tenantId = "";
+	courseId = "";
+	parentRevisionId = null;
+	sequence = 1;
+	authorUserId = "";
+	delegatingGuardianUserId = "";
+	delegationId = "";
+	provenance = "supplied";
+	fieldProvenanceJson = "{}";
+	title = "";
+	summary = "";
+	subject = "";
+	theme = "";
+	levelMin = 0;
+	levelMax = 0;
+	objectivesJson = "[]";
+	sectionsJson = "[]";
+	licenseKind = "own-work";
+	requestKey = "";
+	payloadDigest = "";
+	contentDigest = "";
+	recordedAt = /* @__PURE__ */ new Date();
+	constructor(options = {}) {
+		super(options);
+		adopt(this, options);
+	}
+	async delete() {
+		noDelete$1();
+	}
+	async save(options) {
+		await requireInsert(this);
+		await requireOwned(this, "courses", this.courseId);
+		if (this.parentRevisionId) await requireOwned(this, "course_revisions", this.parentRevisionId, { course_id: this.courseId });
+		requireText(this.authorUserId, "Revision requires an author");
+		requireText(this.title, "Revision requires a title");
+		requireText(this.requestKey, "Revision requires a request key");
+		if (!PROVENANCES.includes(this.provenance) || !LICENSES.includes(this.licenseKind) || !Number.isSafeInteger(this.sequence) || this.sequence < 1 || !Number.isSafeInteger(this.levelMin) || !Number.isSafeInteger(this.levelMax) || this.levelMin < 0 || this.levelMax < this.levelMin) throw new Error("Invalid course revision");
+		requireJson(this.fieldProvenanceJson, "object", "Field provenance");
+		requireJson(this.objectivesJson, "array", "Objectives");
+		requireJson(this.sectionsJson, "array", "Sections");
+		validDate(this.recordedAt);
+		this.requireInsertOnSave();
+		return super.save(options);
+	}
+};
+__publicField$4(CourseRevision, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$4([tenantId()], CourseRevision.prototype, "tenantId", 2);
+__decorateClass$4([foreignKey("Course", { required: true })], CourseRevision.prototype, "courseId", 2);
+__decorateClass$4([foreignKey("CourseRevision", { nullable: true })], CourseRevision.prototype, "parentRevisionId", 2);
+__decorateClass$4([field({ type: "text" })], CourseRevision.prototype, "fieldProvenanceJson", 2);
+__decorateClass$4([field({ type: "text" })], CourseRevision.prototype, "summary", 2);
+__decorateClass$4([field({ type: "text" })], CourseRevision.prototype, "objectivesJson", 2);
+__decorateClass$4([field({ type: "text" })], CourseRevision.prototype, "sectionsJson", 2);
+CourseRevision = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+	tableName: "course_revisions",
+	conflictColumns: [
+		"tenant_id",
+		"course_id",
+		"request_key"
+	],
+	...closed$3
+})], CourseRevision);
+var CourseRevisionCollection = class extends SmrtCollection {
+	static _itemClass = CourseRevision;
+};
+var LessonRevision = class extends SmrtObject {
+	tenantId = "";
+	courseId = "";
+	lessonKey = "";
+	parentRevisionId = null;
+	title = "";
+	body = "";
+	lessonType = "reading";
+	completionRule = "attest";
+	estimatedMinutes = 0;
+	difficulty = 0;
+	modality = "online";
+	externalRef = "";
+	externalUrl = "";
+	licenseKind = "own-work";
+	/** The lesson's own licence before materials; sticky across revisions of a lessonKey. */
+	ownLicenseKind = "own-work";
+	materialsJson = "[]";
+	questionsJson = "[]";
+	layoutParamsJson = "{}";
+	provenance = "supplied";
+	fieldProvenanceJson = "{}";
+	authorUserId = "";
+	delegatingGuardianUserId = "";
+	delegationId = "";
+	contentDigest = "";
+	recordedAt = /* @__PURE__ */ new Date();
+	constructor(options = {}) {
+		super(options);
+		adopt(this, options);
+	}
+	async delete() {
+		noDelete$1();
+	}
+	async save(options) {
+		await requireInsert(this);
+		await requireOwned(this, "courses", this.courseId);
+		if (this.parentRevisionId) await requireOwned(this, "lesson_revisions", this.parentRevisionId, {
+			course_id: this.courseId,
+			lesson_key: this.lessonKey
+		});
+		requireText(this.lessonKey, "Lesson revision requires a lesson key");
+		requireText(this.title, "Lesson revision requires a title");
+		requireText(this.authorUserId, "Lesson revision requires an author");
+		if (![
+			"reading",
+			"video",
+			"worksheet",
+			"exercise"
+		].includes(this.lessonType) || ![
+			"attest",
+			"submit",
+			"score",
+			"external"
+		].includes(this.completionRule) || !PROVENANCES.includes(this.provenance) || !LICENSES.includes(this.licenseKind) || !Number.isSafeInteger(this.estimatedMinutes) || this.estimatedMinutes < 0 || !Number.isFinite(this.difficulty)) throw new Error("Invalid lesson revision");
+		requireJson(this.materialsJson, "array", "Materials");
+		requireJson(this.questionsJson, "array", "Lesson questions");
+		requireJson(this.layoutParamsJson, "object", "Layout params");
+		for (const ref of JSON.parse(this.questionsJson)) {
+			if (typeof ref?.questionRevisionId !== "string") throw new Error("Lesson question reference is invalid");
+			await requireOwned(this, "question_revisions", ref.questionRevisionId);
+		}
+		requireJson(this.fieldProvenanceJson, "object", "Field provenance");
+		validDate(this.recordedAt);
+		this.requireInsertOnSave();
+		return super.save(options);
+	}
+};
+__publicField$4(LessonRevision, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$4([tenantId()], LessonRevision.prototype, "tenantId", 2);
+__decorateClass$4([foreignKey("Course", { required: true })], LessonRevision.prototype, "courseId", 2);
+__decorateClass$4([foreignKey("LessonRevision", { nullable: true })], LessonRevision.prototype, "parentRevisionId", 2);
+__decorateClass$4([field({ type: "text" })], LessonRevision.prototype, "body", 2);
+__decorateClass$4([field({ type: "text" })], LessonRevision.prototype, "materialsJson", 2);
+__decorateClass$4([field({ type: "text" })], LessonRevision.prototype, "questionsJson", 2);
+__decorateClass$4([field({ type: "text" })], LessonRevision.prototype, "layoutParamsJson", 2);
+__decorateClass$4([field({ type: "text" })], LessonRevision.prototype, "fieldProvenanceJson", 2);
+LessonRevision = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+	tableName: "lesson_revisions",
+	conflictColumns: [
+		"tenant_id",
+		"course_id",
+		"lesson_key",
+		"content_digest"
+	],
+	...closed$3
+})], LessonRevision);
+var LessonRevisionCollection = class extends SmrtCollection {
+	static _itemClass = LessonRevision;
+};
+var CourseDraftHead = class extends SmrtObject {
+	tenantId = "";
+	courseId = "";
+	headRevisionId = "";
+	version = 1;
+	updatedByUserId = "";
+	updatedAt = /* @__PURE__ */ new Date();
+	constructor(options = {}) {
+		super(options);
+		adopt(this, options);
+	}
+	async delete() {
+		noDelete$1();
+	}
+	async save(options) {
+		if (!this.tenantId?.trim()) throw new Error("Course head requires a tenant");
+		await requireOwned(this, "courses", this.courseId);
+		await requireOwned(this, "course_revisions", this.headRevisionId, { course_id: this.courseId });
+		if (this.id && await this.db.get(this.tableName, { id: this.id }) && !await this.db.get(this.tableName, {
+			id: this.id,
+			tenant_id: this.tenantId,
+			course_id: this.courseId
+		})) throw new Error("Course head identity cannot change");
+		if (!Number.isSafeInteger(this.version) || this.version < 1) throw new Error("Invalid course head version");
+		requireText(this.updatedByUserId, "Course head requires an actor");
+		return super.save(options);
+	}
+};
+__publicField$4(CourseDraftHead, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$4([tenantId()], CourseDraftHead.prototype, "tenantId", 2);
+__decorateClass$4([foreignKey("Course", { required: true })], CourseDraftHead.prototype, "courseId", 2);
+__decorateClass$4([foreignKey("CourseRevision", { required: true })], CourseDraftHead.prototype, "headRevisionId", 2);
+CourseDraftHead = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+	tableName: "course_draft_heads",
+	conflictColumns: ["tenant_id", "course_id"],
+	...closed$3
+})], CourseDraftHead);
+var CourseDraftHeadCollection = class extends SmrtCollection {
+	static _itemClass = CourseDraftHead;
+};
+var CourseRelease = class extends SmrtObject {
+	tenantId = "";
+	courseId = "";
+	revisionId = "";
+	releaseCourseId = "";
+	releaseNumber = 1;
+	reviewId = "";
+	actorUserId = "";
+	delegatingGuardianUserId = "";
+	delegationId = "";
+	requestKey = "";
+	recordedAt = /* @__PURE__ */ new Date();
+	constructor(options = {}) {
+		super(options);
+		adopt(this, options);
+	}
+	async delete() {
+		noDelete$1();
+	}
+	async save(options) {
+		await requireInsert(this);
+		await requireOwned(this, "courses", this.courseId);
+		await requireOwned(this, "courses", this.releaseCourseId);
+		await requireOwned(this, "course_revisions", this.revisionId, { course_id: this.courseId });
+		requireText(this.actorUserId, "Release requires an actor");
+		requireText(this.requestKey, "Release requires a request key");
+		if (!Number.isSafeInteger(this.releaseNumber) || this.releaseNumber < 1) throw new Error("Invalid release number");
+		validDate(this.recordedAt);
+		this.requireInsertOnSave();
+		return super.save(options);
+	}
+};
+__publicField$4(CourseRelease, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$4([tenantId()], CourseRelease.prototype, "tenantId", 2);
+__decorateClass$4([foreignKey("Course", { required: true })], CourseRelease.prototype, "courseId", 2);
+__decorateClass$4([foreignKey("CourseRevision", { required: true })], CourseRelease.prototype, "revisionId", 2);
+__decorateClass$4([foreignKey("Course", { required: true })], CourseRelease.prototype, "releaseCourseId", 2);
+CourseRelease = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+	tableName: "course_releases",
+	conflictColumns: [
+		"tenant_id",
+		"course_id",
+		"request_key"
+	],
+	...closed$3
+})], CourseRelease);
+var CourseReleaseCollection = class extends SmrtCollection {
+	static _itemClass = CourseRelease;
+};
+var ReleasedLesson = class extends SmrtObject {
+	tenantId = "";
+	courseId = "";
+	releaseId = "";
+	lessonKey = "";
+	lessonRevisionId = "";
+	lessonId = "";
+	sectionId = "";
+	constructor(options = {}) {
+		super(options);
+		adopt(this, options);
+	}
+	async delete() {
+		noDelete$1();
+	}
+	async save(options) {
+		await requireInsert(this);
+		await requireOwned(this, "course_releases", this.releaseId, { course_id: this.courseId });
+		await requireOwned(this, "lesson_revisions", this.lessonRevisionId, {
+			course_id: this.courseId,
+			lesson_key: this.lessonKey
+		});
+		await requireOwned(this, "lessons", this.lessonId);
+		requireText(this.lessonKey, "Released lesson requires a lesson key");
+		this.requireInsertOnSave();
+		return super.save(options);
+	}
+};
+__publicField$4(ReleasedLesson, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$4([tenantId()], ReleasedLesson.prototype, "tenantId", 2);
+__decorateClass$4([foreignKey("Course", { required: true })], ReleasedLesson.prototype, "courseId", 2);
+__decorateClass$4([foreignKey("CourseRelease", { required: true })], ReleasedLesson.prototype, "releaseId", 2);
+__decorateClass$4([foreignKey("LessonRevision", { required: true })], ReleasedLesson.prototype, "lessonRevisionId", 2);
+__decorateClass$4([foreignKey("Lesson", { required: true })], ReleasedLesson.prototype, "lessonId", 2);
+__decorateClass$4([foreignKey("CourseSection", { required: true })], ReleasedLesson.prototype, "sectionId", 2);
+ReleasedLesson = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+	tableName: "released_lessons",
+	conflictColumns: [
+		"tenant_id",
+		"release_id",
+		"lesson_key"
+	],
+	...closed$3
+})], ReleasedLesson);
+var ReleasedLessonCollection = class extends SmrtCollection {
+	static _itemClass = ReleasedLesson;
+};
+var CourseArchiveDecision = class extends SmrtObject {
+	tenantId = "";
+	courseId = "";
+	action = "archive";
+	sequence = 1;
+	actorUserId = "";
+	delegatingGuardianUserId = "";
+	delegationId = "";
+	requestKey = "";
+	recordedAt = /* @__PURE__ */ new Date();
+	constructor(options = {}) {
+		super(options);
+		adopt(this, options);
+	}
+	async delete() {
+		noDelete$1();
+	}
+	async save(options) {
+		await requireInsert(this);
+		await requireOwned(this, "courses", this.courseId);
+		requireText(this.actorUserId, "Archive decision requires an actor");
+		requireText(this.requestKey, "Archive decision requires a request key");
+		if (!["archive", "unarchive"].includes(this.action) || !Number.isSafeInteger(this.sequence) || this.sequence < 1) throw new Error("Invalid archive decision");
+		validDate(this.recordedAt);
+		this.requireInsertOnSave();
+		return super.save(options);
+	}
+};
+__publicField$4(CourseArchiveDecision, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$4([tenantId()], CourseArchiveDecision.prototype, "tenantId", 2);
+__decorateClass$4([foreignKey("Course", { required: true })], CourseArchiveDecision.prototype, "courseId", 2);
+CourseArchiveDecision = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+	tableName: "course_archive_decisions",
+	conflictColumns: [
+		"tenant_id",
+		"course_id",
+		"request_key"
+	],
+	...closed$3
+})], CourseArchiveDecision);
+var CourseArchiveDecisionCollection = class extends SmrtCollection {
+	static _itemClass = CourseArchiveDecision;
+};
+var CourseDiscardTombstone = class extends SmrtObject {
+	tenantId = "";
+	courseId = "";
+	title = "";
+	headRevisionId = "";
+	revisionCount = 0;
+	reason = "";
+	actorUserId = "";
+	delegatingGuardianUserId = "";
+	delegationId = "";
+	requestKey = "";
+	recordedAt = /* @__PURE__ */ new Date();
+	constructor(options = {}) {
+		super(options);
+		adopt(this, options);
+	}
+	async delete() {
+		noDelete$1();
+	}
+	async save(options) {
+		await requireInsert(this);
+		await requireOwned(this, "courses", this.courseId);
+		requireText(this.actorUserId, "Discard requires an actor");
+		requireText(this.requestKey, "Discard requires a request key");
+		validDate(this.recordedAt);
+		this.requireInsertOnSave();
+		return super.save(options);
+	}
+};
+__publicField$4(CourseDiscardTombstone, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$4([tenantId()], CourseDiscardTombstone.prototype, "tenantId", 2);
+__decorateClass$4([foreignKey("Course", { required: true })], CourseDiscardTombstone.prototype, "courseId", 2);
+CourseDiscardTombstone = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+	tableName: "course_discard_tombstones",
+	conflictColumns: ["tenant_id", "course_id"],
+	...closed$3
+})], CourseDiscardTombstone);
+var CourseDiscardTombstoneCollection = class extends SmrtCollection {
+	static _itemClass = CourseDiscardTombstone;
+};
+var EnrollmentReleasePin = class extends SmrtObject {
+	tenantId = "";
+	enrollmentId = "";
+	learnerId = "";
+	courseId = "";
+	releaseId = "";
+	previousReleaseId = null;
+	kind = "initial";
+	sequence = 1;
+	/** Empty for automatic moves, which have no actor. */
+	actorUserId = "";
+	delegatingGuardianUserId = "";
+	delegationId = "";
+	/** Automatic moves: the delegation id recorded on the opt-in followed; empty otherwise. */
+	optInDelegationId = "";
+	/** Host assignment-setting value relied on; automatic moves copy the opt-in's. */
+	policyBasis = "";
+	/** Scope of the opt-in an automatic move followed ('course' | 'enrollment'); empty otherwise. */
+	optInScope = "";
+	requestKey = "";
+	recordedAt = /* @__PURE__ */ new Date();
+	constructor(options = {}) {
+		super(options);
+		adopt(this, options);
+	}
+	async delete() {
+		noDelete$1();
+	}
+	async save(options) {
+		await requireInsert(this);
+		await requireOwned(this, "enrollments", this.enrollmentId, { learner_id: this.learnerId });
+		await requireOwned(this, "course_releases", this.releaseId, { course_id: this.courseId });
+		if (this.previousReleaseId) await requireOwned(this, "course_releases", this.previousReleaseId, { course_id: this.courseId });
+		requireText(this.requestKey, "Enrollment pin requires a request key", 300);
+		requireText(this.policyBasis, "Enrollment pin requires a policy basis");
+		if (![
+			"initial",
+			"explicit",
+			"auto"
+		].includes(this.kind) || this.kind !== "auto" && !this.actorUserId || !Number.isSafeInteger(this.sequence) || this.sequence < 1) throw new Error("Invalid enrollment pin");
+		if (this.kind === "auto" ? !["course", "enrollment"].includes(this.optInScope) : this.optInScope !== "") throw new Error("Invalid enrollment pin opt-in scope");
+		validDate(this.recordedAt);
+		this.requireInsertOnSave();
+		return super.save(options);
+	}
+};
+__publicField$4(EnrollmentReleasePin, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$4([tenantId()], EnrollmentReleasePin.prototype, "tenantId", 2);
+__decorateClass$4([foreignKey("Enrollment", { required: true })], EnrollmentReleasePin.prototype, "enrollmentId", 2);
+__decorateClass$4([foreignKey("Learner", { required: true })], EnrollmentReleasePin.prototype, "learnerId", 2);
+__decorateClass$4([foreignKey("Course", { required: true })], EnrollmentReleasePin.prototype, "courseId", 2);
+__decorateClass$4([foreignKey("CourseRelease", { required: true })], EnrollmentReleasePin.prototype, "releaseId", 2);
+__decorateClass$4([foreignKey("CourseRelease", { nullable: true })], EnrollmentReleasePin.prototype, "previousReleaseId", 2);
+EnrollmentReleasePin = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+	tableName: "enrollment_release_pins",
+	conflictColumns: [
+		"tenant_id",
+		"enrollment_id",
+		"request_key"
+	],
+	...closed$3
+})], EnrollmentReleasePin);
+var EnrollmentReleasePinCollection = class extends SmrtCollection {
+	static _itemClass = EnrollmentReleasePin;
+};
+var CourseUpgradeChoice = class extends SmrtObject {
+	tenantId = "";
+	courseId = "";
+	/** Empty for a course-level choice. */
+	enrollmentId = "";
+	enabled = false;
+	sequence = 1;
+	actorUserId = "";
+	delegatingGuardianUserId = "";
+	delegationId = "";
+	/** Host assignment-setting value relied on for this choice. */
+	policyBasis = "";
+	requestKey = "";
+	recordedAt = /* @__PURE__ */ new Date();
+	constructor(options = {}) {
+		super(options);
+		adopt(this, options);
+	}
+	async delete() {
+		noDelete$1();
+	}
+	async save(options) {
+		await requireInsert(this);
+		await requireOwned(this, "courses", this.courseId);
+		if (this.enrollmentId) await requireOwned(this, "enrollments", this.enrollmentId);
+		requireText(this.actorUserId, "Upgrade choice requires an actor");
+		requireText(this.requestKey, "Upgrade choice requires a request key");
+		requireText(this.policyBasis, "Upgrade choice requires a policy basis");
+		if (typeof this.enabled !== "boolean" || !Number.isSafeInteger(this.sequence) || this.sequence < 1) throw new Error("Invalid upgrade choice");
+		validDate(this.recordedAt);
+		this.requireInsertOnSave();
+		return super.save(options);
+	}
+};
+__publicField$4(CourseUpgradeChoice, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$4([tenantId()], CourseUpgradeChoice.prototype, "tenantId", 2);
+__decorateClass$4([foreignKey("Course", { required: true })], CourseUpgradeChoice.prototype, "courseId", 2);
+CourseUpgradeChoice = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+	tableName: "course_upgrade_choices",
+	conflictColumns: [
+		"tenant_id",
+		"course_id",
+		"request_key"
+	],
+	...closed$3
+})], CourseUpgradeChoice);
+var CourseUpgradeChoiceCollection = class extends SmrtCollection {
+	static _itemClass = CourseUpgradeChoice;
+};
+var EnrollmentAutoUpgradeSkip = class extends SmrtObject {
+	tenantId = "";
+	enrollmentId = "";
+	learnerId = "";
+	courseId = "";
+	releaseId = "";
+	/** 'course' or 'enrollment': the scope of the opt-in that was followed. */
+	optInScope = "";
+	optInActorUserId = "";
+	optInDelegatingGuardianUserId = "";
+	optInDelegationId = "";
+	policyBasis = "";
+	/** The authorizer's bounded reason, else 'not-authorized'. Never a thrown message. */
+	reason = "not-authorized";
+	/** The authorizer's short code (`[a-z0-9._-]`, up to 64); empty when none. */
+	code = "";
+	recordedAt = /* @__PURE__ */ new Date();
+	constructor(options = {}) {
+		super(options);
+		adopt(this, options);
+	}
+	async delete() {
+		noDelete$1();
+	}
+	async save(options) {
+		await requireInsert(this);
+		await requireOwned(this, "enrollments", this.enrollmentId, { learner_id: this.learnerId });
+		await requireOwned(this, "course_releases", this.releaseId, { course_id: this.courseId });
+		requireText(this.optInActorUserId, "Auto-upgrade skip requires the opt-in actor");
+		requireText(this.policyBasis, "Auto-upgrade skip requires a policy basis");
+		requireText(this.reason, "Auto-upgrade skip requires a reason", 200);
+		if (!["course", "enrollment"].includes(this.optInScope) || /[\u0000-\u001f\u007f]/.test(this.reason) || !/^[a-z0-9._-]{0,64}$/.test(this.code)) throw new Error("Invalid auto-upgrade skip");
+		validDate(this.recordedAt);
+		this.requireInsertOnSave();
+		return super.save(options);
+	}
+};
+__publicField$4(EnrollmentAutoUpgradeSkip, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$4([tenantId()], EnrollmentAutoUpgradeSkip.prototype, "tenantId", 2);
+__decorateClass$4([foreignKey("Enrollment", { required: true })], EnrollmentAutoUpgradeSkip.prototype, "enrollmentId", 2);
+__decorateClass$4([foreignKey("Learner", { required: true })], EnrollmentAutoUpgradeSkip.prototype, "learnerId", 2);
+__decorateClass$4([foreignKey("Course", { required: true })], EnrollmentAutoUpgradeSkip.prototype, "courseId", 2);
+__decorateClass$4([foreignKey("CourseRelease", { required: true })], EnrollmentAutoUpgradeSkip.prototype, "releaseId", 2);
+EnrollmentAutoUpgradeSkip = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+	tableName: "enrollment_auto_upgrade_skips",
+	conflictColumns: [
+		"tenant_id",
+		"enrollment_id",
+		"release_id"
+	],
+	...closed$3
+})], EnrollmentAutoUpgradeSkip);
+var EnrollmentAutoUpgradeSkipCollection = class extends SmrtCollection {
+	static _itemClass = EnrollmentAutoUpgradeSkip;
 };
-var GradeCollection = class extends SmrtCollection {
-	static _itemClass = Grade;
+var EnrollmentAssignmentRecord = class extends SmrtObject {
+	tenantId = "";
+	enrollmentId = "";
+	learnerId = "";
+	actorUserId = "";
+	delegatingGuardianUserId = "";
+	delegationId = "";
+	recordedAt = /* @__PURE__ */ new Date();
+	constructor(options = {}) {
+		super(options);
+		adopt(this, options);
+	}
+	async delete() {
+		noDelete$1();
+	}
+	async save(options) {
+		await requireInsert(this);
+		await requireOwned(this, "enrollments", this.enrollmentId, { learner_id: this.learnerId });
+		requireText(this.actorUserId, "Assignment record requires the agent");
+		requireText(this.delegatingGuardianUserId, "Assignment record requires the delegating guardian", 200);
+		requireText(this.delegationId, "Assignment record requires a delegation id", 200);
+		validDate(this.recordedAt);
+		this.requireInsertOnSave();
+		return super.save(options);
+	}
 };
-var SubmissionAssetCollection = class extends SmrtJunction {
-	static _itemClass = SubmissionAsset;
-	leftField = "submissionId";
-	rightField = "assetId";
+__publicField$4(EnrollmentAssignmentRecord, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$4([tenantId()], EnrollmentAssignmentRecord.prototype, "tenantId", 2);
+__decorateClass$4([foreignKey("Enrollment", { required: true })], EnrollmentAssignmentRecord.prototype, "enrollmentId", 2);
+__decorateClass$4([foreignKey("Learner", { required: true })], EnrollmentAssignmentRecord.prototype, "learnerId", 2);
+EnrollmentAssignmentRecord = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+	tableName: "enrollment_assignment_records",
+	conflictColumns: ["tenant_id", "enrollment_id"],
+	...closed$3
+})], EnrollmentAssignmentRecord);
+var EnrollmentAssignmentRecordCollection = class extends SmrtCollection {
+	static _itemClass = EnrollmentAssignmentRecord;
 };
-//#endregion
-//#region src/catalog-service.ts
-var CatalogAuthorizationError = class extends Error {
-	constructor() {
-		super("Education catalog access is not authorized.");
-		this.name = "CatalogAuthorizationError";
+var CurriculumCreationRecord = class extends SmrtObject {
+	tenantId = "";
+	curriculumId = "";
+	learnerId = "";
+	actorUserId = "";
+	delegatingGuardianUserId = "";
+	delegationId = "";
+	recordedAt = /* @__PURE__ */ new Date();
+	constructor(options = {}) {
+		super(options);
+		adopt(this, options);
 	}
-};
-function projectLesson(lesson, includeAnswerKeys) {
-	if (includeAnswerKeys || !("answerUrl" in lesson)) return lesson;
-	return Object.assign(Object.create(Object.getPrototypeOf(lesson)), lesson, { answerUrl: "" });
-}
-var CatalogService = class {
-	constructor(courses, sections, lessons, assets, tenants, authorize) {
-		this.courses = courses;
-		this.sections = sections;
-		this.lessons = lessons;
-		this.assets = assets;
-		this.tenants = tenants;
-		this.authorize = authorize;
+	async delete() {
+		noDelete$1();
 	}
-	courses;
-	sections;
-	lessons;
-	assets;
-	tenants;
-	authorize;
-	executor() {
-		const executor = this.courses.db;
-		if (!executor || [
-			this.sections,
-			this.lessons,
-			this.assets
-		].some((collection) => collection.db !== executor)) throw new CatalogAuthorizationError();
-		return executor;
+	async save(options) {
+		await requireInsert(this);
+		await requireOwned(this, "curricula", this.curriculumId, { learner_id: this.learnerId });
+		requireText(this.actorUserId, "Creation record requires the agent");
+		requireText(this.delegatingGuardianUserId, "Creation record requires the delegating guardian", 200);
+		requireText(this.delegationId, "Creation record requires a delegation id", 200);
+		validDate(this.recordedAt);
+		this.requireInsertOnSave();
+		return super.save(options);
 	}
-	authorizeInScope(request) {
-		return this.authorize({
-			...request,
-			executor: this.executor()
+};
+__publicField$4(CurriculumCreationRecord, "__smrtPackage__", "@happyvertical/smrt-education");
+__decorateClass$4([tenantId()], CurriculumCreationRecord.prototype, "tenantId", 2);
+__decorateClass$4([foreignKey("Curriculum", { required: true })], CurriculumCreationRecord.prototype, "curriculumId", 2);
+__decorateClass$4([foreignKey("Learner", { required: true })], CurriculumCreationRecord.prototype, "learnerId", 2);
+CurriculumCreationRecord = __decorateClass$4([TenantScoped({ mode: "required" }), smrt({
+	tableName: "curriculum_creation_records",
+	conflictColumns: ["tenant_id", "curriculum_id"],
+	...closed$3
+})], CurriculumCreationRecord);
+var CurriculumCreationRecordCollection = class extends SmrtCollection {
+	static _itemClass = CurriculumCreationRecord;
+};
+var present = (value) => value !== void 0 && value !== null && value !== "";
+function bounded(value, label) {
+	if (typeof value !== "string" || value.length < 1 || value.length > 200 || /[\u0000-\u001f\u007f]/.test(value)) throw new CourseAuthoringValidationError(`Delegation ${label} must be 1-200 printable characters`);
+	return value;
+}
+function readDelegation(claim) {
+	const hasGuardian = present(claim.delegatingGuardianUserId);
+	const hasId = present(claim.delegationId);
+	if (!hasGuardian && !hasId) return null;
+	if (hasGuardian !== hasId) throw new CourseAuthoringValidationError("A delegation id requires a delegating guardian, and the reverse");
+	const delegatingGuardianUserId = bounded(claim.delegatingGuardianUserId, "guardian");
+	const delegationId = bounded(claim.delegationId, "id");
+	if (delegatingGuardianUserId === claim.actorUserId) throw new CourseAuthoringAuthorizationError();
+	return {
+		delegatingGuardianUserId,
+		delegationId
+	};
+}
+function delegationActorFields(claim) {
+	return readDelegation(claim) ?? {};
+}
+function delegationRecordFields(claim) {
+	return readDelegation(claim) ?? {
+		delegatingGuardianUserId: "",
+		delegationId: ""
+	};
+}
+//#endregion
+//#region src/course-release-scope.ts
+async function resolveEnrollmentLessons(db, tenantId, enrollmentId) {
+	const pins = (await (await EnrollmentReleasePinCollection.create({ db })).list({
+		where: {
+			tenantId,
+			enrollmentId
+		},
+		limit: 1e5
+	})).sort((a, b) => a.sequence - b.sequence);
+	const current = pins.at(-1);
+	if (!current) return null;
+	const currentReleaseId = current.releaseId;
+	const lineage = [...new Set(pins.map((p) => p.releaseId))];
+	const releasedLessons = await ReleasedLessonCollection.create({ db });
+	const keysByRelease = /* @__PURE__ */ new Map();
+	for (const releaseId of lineage) {
+		const rows = await releasedLessons.list({
+			where: {
+				tenantId,
+				releaseId
+			},
+			limit: 1e5
 		});
+		keysByRelease.set(releaseId, new Map(rows.map((row) => [row.lessonKey, row.lessonId])));
 	}
-	async findVisible(request) {
-		const { tenantId, actorUserId, includePrivate = false, options = {} } = request;
-		if (!tenantId.trim() || !actorUserId.trim()) throw new CatalogAuthorizationError();
-		const actor = {
-			actorTenantId: tenantId,
-			actorUserId,
-			rootTenantId: tenantId
-		};
-		if (await this.authorizeInScope({
-			...actor,
-			action: "education.catalog.read"
-		}) !== true) throw new CatalogAuthorizationError();
-		if (includePrivate && await this.authorizeInScope({
-			...actor,
-			action: "education.catalog.read-private"
-		}) !== true) throw new CatalogAuthorizationError();
-		return this.tenants.withTenantCatalogReadScope({
-			collections: [
-				"@happyvertical/smrt-education:Course",
-				"@happyvertical/smrt-education:CourseSection",
-				"@happyvertical/smrt-education:Lesson",
-				"@happyvertical/smrt-education:LessonAsset"
-			],
-			authorize: async (scope2) => scope2.mode === "catalog" && scope2.actorTenantId === tenantId && scope2.actorUserId === actorUserId && scope2.rootTenantId === tenantId
-		}, async () => this.courses.list({
-			...options,
-			where: [
-				[{ "licenseKind !=": "personal-use-copy" }],
-				[{ licenseKind: null }],
-				...includePrivate ? [[{
-					licenseKind: "personal-use-copy",
-					tenantId
-				}]] : []
-			]
-		}));
-	}
-	/** Project one already-visible course without exposing answer-key assets by default. */
-	async projectCourse(request) {
-		const course = (await this.findVisible(request)).find((item) => item.id === request.courseId);
-		if (!course?.id) return null;
-		const includeAnswerKeys = request.includeAnswerKeys === true;
-		const actor = {
-			actorTenantId: request.tenantId,
-			actorUserId: request.actorUserId,
-			rootTenantId: request.tenantId
-		};
-		if (includeAnswerKeys && await this.authorizeInScope({
-			...actor,
-			action: "education.catalog.answer-key.read"
-		}) !== true) throw new CatalogAuthorizationError();
-		return this.tenants.withTenantCatalogReadScope({
-			collections: [
-				"@happyvertical/smrt-education:CourseSection",
-				"@happyvertical/smrt-education:Lesson",
-				"@happyvertical/smrt-education:LessonAsset"
-			],
-			authorize: async (scope) => scope.mode === "catalog" && scope.actorTenantId === request.tenantId && scope.actorUserId === request.actorUserId
-		}, async () => {
-			const sections = await this.sections.list({
-				where: { courseId: course.id },
-				orderBy: ["sortOrder ASC", "id ASC"]
-			});
-			const result = [];
-			for (const section of sections) {
-				if (section.tenantId !== course.tenantId) continue;
-				const lessons = await this.lessons.list({
-					where: { sectionId: section.id },
-					orderBy: ["sortOrder ASC", "id ASC"]
-				});
-				result.push({
-					section,
-					lessons: await Promise.all(lessons.filter((lesson) => lesson.tenantId === course.tenantId).map(async (lesson) => ({
-						lesson: projectLesson(lesson, includeAnswerKeys),
-						assets: (await this.assets.byLeft(String(lesson.id))).filter((asset) => asset.tenantId === course.tenantId && (includeAnswerKeys || asset.relationship !== "answer-key"))
-					})))
-				});
-			}
-			return {
-				course,
-				sections: result
-			};
+	const progress = await (await LessonProgressCollection.create({ db })).list({
+		where: {
+			tenantId,
+			enrollmentId
+		},
+		limit: 1e6
+	});
+	const startedIds = new Set(progress.filter((row) => row.status !== "not_started" || Number(row.attempts) > 0).map((row) => row.lessonId));
+	const result = /* @__PURE__ */ new Map();
+	for (const [lessonKey, lessonId] of keysByRelease.get(currentReleaseId) ?? []) result.set(lessonKey, {
+		lessonKey,
+		lessonId,
+		releaseId: currentReleaseId,
+		pinnedToOlderRelease: false
+	});
+	for (const releaseId of lineage.filter((id) => id !== currentReleaseId)) for (const [lessonKey, lessonId] of keysByRelease.get(releaseId) ?? []) if (startedIds.has(lessonId)) result.set(lessonKey, {
+		lessonKey,
+		lessonId,
+		releaseId,
+		pinnedToOlderRelease: true
+	});
+	const lessons = [...result.values()].sort((a, b) => a.lessonKey.localeCompare(b.lessonKey));
+	const releaseCourseIds = /* @__PURE__ */ new Map();
+	for (const releaseId of /* @__PURE__ */ new Set([currentReleaseId, ...lessons.map((l) => l.releaseId)])) {
+		const release = await db.get("course_releases", {
+			id: releaseId,
+			tenant_id: tenantId
 		});
+		if (release) releaseCourseIds.set(releaseId, String(release.release_course_id));
 	}
-};
+	return {
+		currentReleaseId,
+		lineage,
+		lessons,
+		releaseCourseIds,
+		keysByRelease,
+		pinLearnerIds: new Set(pins.map((p) => p.learnerId))
+	};
+}
+function orderEffectiveLessons(selection, orderOf) {
+	const currentKeys = selection.keysByRelease.get(selection.currentReleaseId);
+	const rank = (lesson) => {
+		const position = (releaseId, lessonId) => {
+			const at = orderOf(releaseId).indexOf(lessonId);
+			return at < 0 ? Number.MAX_SAFE_INTEGER : at;
+		};
+		const currentId = currentKeys?.get(lesson.lessonKey);
+		if (currentId) return [
+			0,
+			position(selection.currentReleaseId, currentId),
+			0
+		];
+		return [
+			1,
+			selection.lineage.indexOf(lesson.releaseId),
+			position(lesson.releaseId, lesson.lessonId)
+		];
+	};
+	return [...selection.lessons].sort((a, b) => {
+		const [a0, a1, a2] = rank(a);
+		const [b0, b1, b2] = rank(b);
+		return a0 - b0 || a1 - b1 || a2 - b2 || a.lessonKey.localeCompare(b.lessonKey);
+	});
+}
 //#endregion
 //#region src/family-intake-contracts.ts
 function familyIntakeScopeId(tenantId) {
@@ -1292,6 +2256,7 @@ function evaluateGroupSharingPolicy(policy, facts) {
 	if (!Number.isFinite(captured) || !Number.isFinite(Date.parse(policy.historyFrom)) || captured < Date.parse(policy.historyFrom)) reasons.push("history");
 	if (policy.courseIds.mode === "include" && (!facts.courseId || !policy.courseIds.values.includes(facts.courseId))) reasons.push("course");
 	if (policy.subjects.mode === "include" && (!facts.subject || !policy.subjects.values.includes(facts.subject))) reasons.push("subject");
+	if (facts.courseShareable === false) reasons.push("course-private");
 	if (policy.parentReviewedOnly && !facts.parentReviewed) reasons.push("parent-review");
 	const eligible = reasons.length === 0;
 	return {
@@ -1461,6 +2426,7 @@ function validateWorkbookAssessment(value) {
 			"unknown"
 		].includes(q.mappingProvenance)) throw new WorkbookAssessmentValidationError("Invalid mapping provenance");
 		if (q.evidenceLimitations !== void 0 && (!Array.isArray(q.evidenceLimitations) || q.evidenceLimitations.length > 20 || q.evidenceLimitations.some((v) => typeof v !== "string" || v.length > 500))) throw new WorkbookAssessmentValidationError("Invalid evidence limitations");
+		for (const [value2, label] of [[q.questionRevisionId, "question revision id"], [q.lessonRevisionId, "lesson revision id"]]) if (value2 !== void 0 && (typeof value2 !== "string" || !value2.trim() || value2.length > 200)) throw new WorkbookAssessmentValidationError(`Invalid ${label}`);
 		text(q.id, "question id", 200);
 		text(q.prompt, "prompt");
 		text(q.answer, "answer");
@@ -1859,6 +2825,19 @@ var WorkbookAssessmentRevision = class extends SmrtObject {
 			learner_id: this.learnerId,
 			attempt_id: this.attemptId
 		})) throw new Error("Workbook reviewed source mismatch");
+		const assessment = JSON.parse(this.assessmentJson);
+		for (const [column, table, ids] of [[
+			"question revision",
+			"question_revisions",
+			assessment.questions.map((q) => q.questionRevisionId)
+		], [
+			"lesson revision",
+			"lesson_revisions",
+			assessment.questions.map((q) => q.lessonRevisionId)
+		]]) for (const id of new Set(ids.filter((v) => !!v))) if (!await this.db.get(table, {
+			id,
+			tenant_id: this.tenantId
+		})) throw new Error(`Workbook ${column} reference mismatch`);
 		if (!["ai", "guardian"].includes(this.kind)) throw new Error("Invalid revision kind");
 		return super.save(options);
 	}
@@ -2192,15 +3171,17 @@ function progressView(row) {
 	};
 }
 var LearnerService = class LearnerService {
-	constructor(db, authorize, authorizeCatalog) {
+	constructor(db, authorize, authorizeCatalog, learnerOptions = {}) {
 		this.db = db;
 		this.authorize = authorize;
 		this.authorizeCatalog = authorizeCatalog;
+		this.learnerOptions = learnerOptions;
 		this.postgres = isPostgresDatabase(db);
 	}
 	db;
 	authorize;
 	authorizeCatalog;
+	learnerOptions;
 	transactionState;
 	writeFailure;
 	writeTail = Promise.resolve();
@@ -2264,7 +3245,7 @@ var LearnerService = class LearnerService {
 	}
 	/** Internal subclass hook: preserve the concrete owning service in a transaction. */
 	createTransactionService(db) {
-		return new LearnerService(db, this.authorize, this.authorizeCatalog);
+		return new LearnerService(db, this.authorize, this.authorizeCatalog, this.learnerOptions);
 	}
 	/** Internal compensation hook, invoked after in-flight work drains on abort. */
 	async rollbackResources(_cause, _rootDb) {}
@@ -2312,7 +3293,7 @@ var LearnerService = class LearnerService {
 	assertServiceOpen() {
 		if (this.transactionState === "aborting" || this.transactionState === "closed") throw new Error("Learner transaction scope is closed");
 	}
-	async requireActor(request, action) {
+	async requireActor(request, action, delegation = null) {
 		this.assertServiceOpen();
 		const context = getCurrentTenant();
 		if (!context || !request.tenantId || !request.actorUserId || !request.learnerId || context.tenantId !== request.tenantId || context.userId !== request.actorUserId || context.superAdminBypass) throw new LearnerAuthorizationError();
@@ -2335,10 +3316,41 @@ var LearnerService = class LearnerService {
 			id: learner.profileId,
 			_meta_type: "@happyvertical/smrt-profiles:Person"
 		})) throw new LearnerAuthorizationError();
-		const own = learner.userId === request.actorUserId;
+		const holder = delegation?.delegatingGuardianUserId ?? request.actorUserId;
+		if (delegation && (learner.userId === request.actorUserId || !await this.db.get("users", {
+			id: request.actorUserId,
+			status: "active"
+		}) || !await this.db.get("memberships", {
+			tenant_id: request.tenantId,
+			user_id: holder,
+			status: "active"
+		}))) throw new LearnerAuthorizationError();
+		if (delegation) {
+			const verify = this.learnerOptions.verifyDelegation;
+			let verified = false;
+			if (typeof verify === "function") try {
+				const decision = await verify(this.db, {
+					tenantId: request.tenantId,
+					actorUserId: request.actorUserId,
+					delegatingGuardianUserId: delegation.delegatingGuardianUserId,
+					delegationId: delegation.delegationId,
+					learnerId: request.learnerId,
+					...delegation.courseId ? { courseId: delegation.courseId } : {},
+					...delegation.operation ? { operation: delegation.operation } : {}
+				});
+				verified = typeof decision === "object" && decision !== null ? decision.allowed === true : decision === true;
+			} catch {
+				verified = false;
+			}
+			if (!verified) throw new LearnerAuthorizationError();
+		}
+		const own = learner.userId === holder;
 		let relationshipTypeId;
 		if (!own) {
-			const user = await this.db.get("users", { id: request.actorUserId });
+			const user = await this.db.get("users", {
+				id: holder,
+				...delegation ? { status: "active" } : {}
+			});
 			const relationship = user && request.guardianRelationshipId ? await this.db.get("profile_relationships", {
 				id: request.guardianRelationshipId,
 				tenant_id: request.tenantId,
@@ -2354,14 +3366,29 @@ var LearnerService = class LearnerService {
 			"education.learner.packet",
 			"education.learner.notes.read",
 			"education.learner.notes.add",
-			"education.learner.complete"
+			"education.learner.complete",
+			"education.learner.review-response"
 		].includes(action)) throw new LearnerAuthorizationError();
+		const { delegatingGuardianUserId: _guardian, delegationId: _id, relationshipTypeId: _type, delegated: _delegated, delegatingRelationshipTypeId: _delegatingType, own: _own, ...base } = request;
+		const authority = delegation ? {
+			delegated: true,
+			relationshipTypeId: void 0,
+			delegatingGuardianUserId: delegation.delegatingGuardianUserId,
+			delegationId: delegation.delegationId,
+			delegatingRelationshipTypeId: relationshipTypeId
+		} : {
+			delegated: void 0,
+			relationshipTypeId,
+			delegatingGuardianUserId: void 0,
+			delegationId: void 0,
+			delegatingRelationshipTypeId: void 0
+		};
 		if (await this.authorize({
-			...request,
+			...base,
+			...authority,
 			executor: this.db,
 			action,
-			own,
-			relationshipTypeId
+			own
 		}) !== true) throw new LearnerAuthorizationError();
 		return learner;
 	}
@@ -2509,15 +3536,40 @@ var LearnerService = class LearnerService {
 			};
 		});
 	}
+	/**
+	* Creates a planned curriculum. A delegated agent passes
+	* `delegatingGuardianUserId` + `delegationId` (as for `enroll`); the new
+	* curriculum then also appends one `CurriculumCreationRecord`.
+	*/
 	async createCurriculum(request) {
+		let delegation;
+		try {
+			delegation = readDelegation(request);
+		} catch (error) {
+			if (error instanceof CourseAuthoringAuthorizationError) throw new LearnerAuthorizationError();
+			throw error;
+		}
 		return this.mutate(async (service) => {
-			const learner = await service.requireActor(request, "education.learner.plan");
+			const learner = await service.requireActor(request, "education.learner.plan", delegation ? {
+				...delegation,
+				operation: "create-curriculum"
+			} : null);
 			if (typeof request.title !== "string" || !request.title.trim()) throw new Error("Curriculum title is required");
-			return curriculumView(await (await CurriculumCollection.create({ db: service.db })).create({
+			const created = await (await CurriculumCollection.create({ db: service.db })).create({
 				tenantId: request.tenantId,
 				learnerId: String(learner.id),
 				title: request.title
-			}));
+			});
+			if (delegation) await (await CurriculumCreationRecordCollection.create({ db: service.db })).create({
+				_insertOnly: true,
+				tenantId: request.tenantId,
+				curriculumId: String(created.id),
+				learnerId: String(learner.id),
+				actorUserId: request.actorUserId,
+				...delegation,
+				recordedAt: /* @__PURE__ */ new Date()
+			});
+			return curriculumView(created);
 		});
 	}
 	async catalog(request, courseId) {
@@ -2531,12 +3583,81 @@ var LearnerService = class LearnerService {
 		if (!projection) throw new LearnerAuthorizationError();
 		return projection;
 	}
+	/**
+	* The lessons that apply to an authorized enrollment. An unpinned enrollment
+	* reads its own course, exactly as before. A pinned one reads the effective
+	* set shared with `CourseAuthoringService.getEnrollmentRelease`: started
+	* lessons stay on their original immutable rows, the rest follow the current
+	* release. Every course row is still authorized through the catalog.
+	*/
+	async lessonScope(request, enrollment) {
+		const selection = await this.db.tableExists("enrollment_release_pins") ? await resolveEnrollmentLessons(this.db, request.tenantId, String(enrollment.id)) : null;
+		if (!selection) {
+			const catalog = await this.catalog(request, enrollment.courseId);
+			return {
+				course: catalog.course,
+				entries: catalog.sections.flatMap((section) => section.lessons.map(({ lesson }) => ({
+					lesson,
+					course: catalog.course
+				})))
+			};
+		}
+		if ([...selection.pinLearnerIds].some((id) => id !== enrollment.learnerId)) throw new LearnerAuthorizationError();
+		const releases = /* @__PURE__ */ new Set([selection.currentReleaseId, ...selection.lessons.map((lesson) => lesson.releaseId)]);
+		const catalogs = /* @__PURE__ */ new Map();
+		for (const releaseId of releases) {
+			const courseId = selection.releaseCourseIds.get(releaseId);
+			if (!courseId) throw new LearnerAuthorizationError();
+			catalogs.set(releaseId, await this.catalog(request, courseId));
+		}
+		const rows = /* @__PURE__ */ new Map();
+		const order = /* @__PURE__ */ new Map();
+		for (const [releaseId, catalog] of catalogs) {
+			const ids = [];
+			for (const section of catalog.sections) for (const { lesson } of section.lessons) {
+				ids.push(String(lesson.id));
+				rows.set(String(lesson.id), {
+					lesson,
+					course: catalog.course
+				});
+			}
+			order.set(releaseId, ids);
+		}
+		const entries = [];
+		for (const effective of orderEffectiveLessons(selection, (releaseId) => order.get(releaseId) ?? [])) {
+			const entry = rows.get(effective.lessonId);
+			if (entry && order.get(effective.releaseId)?.includes(effective.lessonId)) entries.push(entry);
+		}
+		return {
+			course: catalogs.get(selection.currentReleaseId).course,
+			entries
+		};
+	}
+	async lessonInScope(request, enrollment, lessonId) {
+		return (await this.lessonScope(request, enrollment)).entries.some(({ lesson }) => String(lesson.id) === lessonId);
+	}
 	async lock(table, id, tenant) {
 		if (this.postgres) await this.db.query(`SELECT id FROM ${table} WHERE id = ? AND tenant_id = ? FOR UPDATE`, [id, tenant]);
 	}
+	/**
+	* Creates (or returns) the enrollment that assigns a course to a learner. A
+	* delegated agent passes `delegatingGuardianUserId` + `delegationId`; a new
+	* delegated enrollment also appends an `EnrollmentAssignmentRecord`.
+	*/
 	async enroll(request) {
+		let delegation;
+		try {
+			delegation = readDelegation(request);
+		} catch (error) {
+			if (error instanceof CourseAuthoringAuthorizationError) throw new LearnerAuthorizationError();
+			throw error;
+		}
 		return this.mutate(async (service) => {
-			const learner = await service.requireActor(request, "education.learner.plan");
+			const learner = await service.requireActor(request, "education.learner.plan", delegation ? {
+				...delegation,
+				courseId: request.courseId,
+				operation: "enroll"
+			} : null);
 			await service.lock("curricula", request.curriculumId, request.tenantId);
 			const curriculum = await (await CurriculumCollection.create({ db: service.db })).get({
 				id: request.curriculumId,
@@ -2555,13 +3676,23 @@ var LearnerService = class LearnerService {
 				if (existing.learnerId !== learner.id) throw new LearnerAuthorizationError();
 				return enrollmentView(existing);
 			}
-			return enrollmentView(await enrollments.create({
+			const created = await enrollments.create({
 				tenantId: request.tenantId,
 				curriculumId: String(curriculum.id),
 				learnerId: String(learner.id),
 				courseId: request.courseId,
 				_insertOnly: true
-			}));
+			});
+			if (delegation) await (await EnrollmentAssignmentRecordCollection.create({ db: service.db })).create({
+				_insertOnly: true,
+				tenantId: request.tenantId,
+				enrollmentId: String(created.id),
+				learnerId: String(learner.id),
+				actorUserId: request.actorUserId,
+				...delegation,
+				recordedAt: /* @__PURE__ */ new Date()
+			});
+			return enrollmentView(created);
 		});
 	}
 	async requireEnrollment(request, action) {
@@ -2613,8 +3744,8 @@ var LearnerService = class LearnerService {
 	}
 	async listProgress(request) {
 		const enrollment = await this.requireEnrollment(request, "education.learner.read");
-		const catalog = await this.catalog(request, enrollment.courseId);
-		const lessons = new Set(catalog.sections.flatMap((section) => section.lessons.map(({ lesson }) => lesson.id)));
+		const scope = await this.lessonScope(request, enrollment);
+		const lessons = new Set(scope.entries.map(({ lesson }) => String(lesson.id)));
 		const rows = await (await LessonProgressCollection.create({ db: this.db })).list({ where: {
 			enrollmentId: String(enrollment.id),
 			learnerId: request.learnerId,
@@ -2648,18 +3779,19 @@ var LearnerService = class LearnerService {
 		await this.requireActor(request, "education.learner.read");
 		const result = [];
 		for (const enrollment of enrollments) {
-			const catalog = await this.catalog(request, enrollment.courseId);
+			const scope = await this.lessonScope(request, enrollment);
 			const progresses = await (await LessonProgressCollection.create({ db: this.db })).list({ where: {
 				tenantId: request.tenantId,
 				enrollmentId: String(enrollment.id),
 				learnerId: request.learnerId
 			} });
 			const byLesson = new Map(await Promise.all(progresses.map(async (row) => [row.lessonId, await this.projectProgress(request, row)])));
-			const lesson = catalog.sections.flatMap((section) => section.lessons.map(({ lesson: lesson2 }) => lesson2)).find((candidate) => {
+			const next = scope.entries.find(({ lesson: candidate }) => {
 				const progress2 = byLesson.get(String(candidate.id));
 				return !progress2 || !["complete", "skipped"].includes(progress2.status);
 			});
-			if (!lesson) continue;
+			if (!next) continue;
+			const { lesson, course } = next;
 			const progress = byLesson.get(String(lesson.id));
 			result.push({
 				enrollment: enrollmentView(enrollment),
@@ -2668,7 +3800,7 @@ var LearnerService = class LearnerService {
 					id: String(lesson.id),
 					title: lesson.title,
 					kind: lesson.constructor.name,
-					requiresOnlineResource: catalog.course.modality === "online" || lesson.constructor.name === "Video"
+					requiresOnlineResource: course.modality === "online" || lesson.constructor.name === "Video"
 				}
 			});
 		}
@@ -2677,30 +3809,30 @@ var LearnerService = class LearnerService {
 	/** All lesson summaries for one authorized assignment/enrollment. */
 	async assignmentLessons(request) {
 		const enrollment = await this.requireEnrollment(request, "education.learner.read");
-		const catalog = await this.catalog(request, enrollment.courseId);
+		const scope = await this.lessonScope(request, enrollment);
 		const progresses = await (await LessonProgressCollection.create({ db: this.db })).list({ where: {
 			tenantId: request.tenantId,
 			enrollmentId: String(enrollment.id),
 			learnerId: request.learnerId
 		} });
 		const byLesson = new Map(progresses.map((row) => [row.lessonId, row]));
-		return Promise.all(catalog.sections.flatMap((section) => section.lessons.map(async ({ lesson }) => ({
+		return Promise.all(scope.entries.map(async ({ lesson, course }) => ({
 			enrollment: enrollmentView(enrollment),
 			progress: byLesson.get(String(lesson.id)) ? await this.projectProgress(request, byLesson.get(String(lesson.id))) : null,
 			lesson: {
 				id: String(lesson.id),
 				title: lesson.title,
 				kind: lesson.constructor.name,
-				requiresOnlineResource: catalog.course.modality === "online" || lesson.constructor.name === "Video"
+				requiresOnlineResource: course.modality === "online" || lesson.constructor.name === "Video"
 			}
-		}))));
+		})));
 	}
 	/** Start once. Caller-supplied learner/status/score/counter patches are never applied. */
 	async startLesson(request) {
 		return this.mutate(async (service) => {
 			const enrollment = await service.requireEnrollment(request, "education.learner.start");
 			await service.lock("enrollments", request.enrollmentId, request.tenantId);
-			if (!(await service.catalog(request, enrollment.courseId)).sections.some((section) => section.lessons.some(({ lesson }) => lesson.id === request.lessonId))) throw new LearnerAuthorizationError();
+			if (!await service.lessonInScope(request, enrollment, request.lessonId)) throw new LearnerAuthorizationError();
 			const progress = await LessonProgressCollection.create({ db: service.db });
 			const existing = await progress.get({
 				enrollmentId: String(enrollment.id),
@@ -25459,7 +26591,7 @@ var SubmissionService = class SubmissionService extends LearnerService {
 	async progress(request, action) {
 		const enrollment = await this.requireEnrollment(request, action);
 		await this.lockProgressOwner(request);
-		if (!(await this.catalog(request, enrollment.courseId)).sections.some((section) => section.lessons.some(({ lesson }) => lesson.id === request.lessonId))) throw new LearnerAuthorizationError();
+		if (!await this.lessonInScope(request, enrollment, request.lessonId)) throw new LearnerAuthorizationError();
 		const collection = await LessonProgressCollection.create({ db: this.db });
 		let progress = await collection.get({
 			enrollmentId: request.enrollmentId,
@@ -25493,8 +26625,7 @@ var SubmissionService = class SubmissionService extends LearnerService {
 			lessonId: row.lessonId,
 			tenantId: request.tenantId
 		}, { cache: false });
-		const catalog = await this.catalog(request, enrollment.courseId);
-		if (!progress || !catalog.sections.some((section) => section.lessons.some(({ lesson }) => lesson.id === row.lessonId))) throw new LearnerAuthorizationError();
+		if (!progress || !await this.lessonInScope(request, enrollment, row.lessonId)) throw new LearnerAuthorizationError();
 		return {
 			row,
 			progress
@@ -25622,7 +26753,7 @@ var SubmissionService = class SubmissionService extends LearnerService {
 	*/
 	async assertLessonAssignment(request) {
 		const enrollment = await this.requireEnrollment(request, "education.learner.submit");
-		if (!(await this.catalog(request, enrollment.courseId)).sections.some((section) => section.lessons.some(({ lesson }) => lesson.id === request.lessonId))) throw new LearnerAuthorizationError();
+		if (!await this.lessonInScope(request, enrollment, request.lessonId)) throw new LearnerAuthorizationError();
 	}
 	/** Reject legacy upload/review entry points using authoritative owned scope. */
 	async assertNonWorkbookSubmissionScope(request) {
@@ -25798,7 +26929,7 @@ var SubmissionService = class SubmissionService extends LearnerService {
 	/** Latest retained completed-work evidence; lesson completion is independent. */
 	async getLatestLessonSubmission(request) {
 		const enrollment = await this.requireEnrollment(request, "education.learner.read");
-		if (!(await this.catalog(request, enrollment.courseId)).sections.some((section) => section.lessons.some(({ lesson }) => lesson.id === request.lessonId))) throw new LearnerAuthorizationError();
+		if (!await this.lessonInScope(request, enrollment, request.lessonId)) throw new LearnerAuthorizationError();
 		const progress = await (await LessonProgressCollection.create({ db: this.db })).get({
 			enrollmentId: request.enrollmentId,
 			learnerId: request.learnerId,
@@ -25962,7 +27093,7 @@ var SubmissionService = class SubmissionService extends LearnerService {
 	/** Sign only an exact authorized printable join; answer keys never qualify. */
 	async signLessonPrintable(request) {
 		const enrollment = await this.requireEnrollment(request, "education.learner.read");
-		if (!(await this.catalog(request, enrollment.courseId)).sections.some((section) => section.lessons.some(({ lesson }) => String(lesson.id) === request.lessonId))) throw new LearnerAuthorizationError();
+		if (!await this.lessonInScope(request, enrollment, request.lessonId)) throw new LearnerAuthorizationError();
 		if (!await (await LessonAssetCollection.create({ db: this.db })).get({
 			tenantId: request.tenantId,
 			lessonId: request.lessonId,
@@ -28041,6 +29172,6 @@ var WorkbookPhotoService = class WorkbookPhotoService extends WorkbookService {
 	}
 };
 //#endregion
-export { FamilyIntakeDecision as $, WorkbookFeedbackDelivery as A, SubmissionAsset as At, validateWorkbookAssessment as B, Exercise as Bt, WorkbookActivity as C, VideoCollection as Ct, WorkbookAttempt as D, Grade as Dt, WorkbookAssessmentRevisionCollection as E, ExternalCompletion as Et, WorkbookWorkFilingCollection as F, Learner as Ft, GroupSharingConflictError as G, Worksheet as Gt, evaluateGroupSharingPolicy as H, Lesson as Ht, WORKBOOK_MATH_VOCABULARY as I, LessonProgress as It, validateGroupSharingPolicy as J, GroupSharingPolicyValidationError as K, WorkbookAssessmentValidationError as L, AuthoredCourse as Lt, WorkbookFeedbackRelease as M, LessonAsset as Mt, WorkbookFeedbackReleaseCollection as N, Curriculum as Nt, WorkbookAttemptCollection as O, ScannedSubmission as Ot, WorkbookWorkFiling as P, Enrollment as Pt, FamilyIntakeCollection as Q, WorkbookCompletionConflictError as R, Course as Rt, Workbook as S, SubmissionIntakeBindingCollection as St, WorkbookAssessmentRevision as T, Attestation as Tt, summarizeWorkbookEvidence as U, Reading as Ut, workbookAggregateFeedback as V, ExternalCourse as Vt, GroupSharingAuthorizationError as W, Video as Wt, FamilyIntakeAsset as X, FamilyIntake as Y, FamilyIntakeAssetCollection as Z, WorkbookWorkflowRequiredError as _, LessonProgressCollection as _t, WorkbookContextRevisionCollection as a, AuthoredCourseCollection as at, WorkbookCompletionDecision as b, SubmissionAssetCollection as bt, WorkbookPhotoDecision as c, CurriculumCollection as ct, WorkbookPhotoIntakeCollection as d, ExternalCompletionCollection as dt, FamilyIntakeDecisionCollection as et, validateWorkbookPhotoIdentification as f, ExternalCourseCollection as ft, SubmissionStorageCleanupError as g, LessonCollection as gt, SubmissionService as h, LessonAssetCollection as ht, WorkbookContextRevision as i, AttestationCollection as it, WorkbookFeedbackDeliveryCollection as j, SubmissionIntakeBinding as jt, WorkbookCollection as k, Submission as kt, WorkbookPhotoDecisionCollection as l, EnrollmentCollection as lt, normalizeWorkbookAnswerRegions as m, LearnerCollection as mt, preservePhotoProposal as n, CatalogAuthorizationError as nt, WorkbookPhotoAsset as o, CourseCollection as ot, normalizeWorkbookObservedLayout as p, GradeCollection as pt, canonicalGroupSharingPolicy as q, WorkbookService as r, CatalogService as rt, WorkbookPhotoAssetCollection as s, CourseSectionCollection as st, WorkbookPhotoService as t, familyIntakeScopeId as tt, WorkbookPhotoIntake as u, ExerciseCollection as ut, LearnerAuthorizationError as v, ReadingCollection as vt, WorkbookActivityCollection as w, WorksheetCollection as wt, WorkbookCompletionDecisionCollection as x, SubmissionCollection as xt, LearnerService as y, ScannedSubmissionCollection as yt, aggregateWorkbookQuestions as z, CourseSection as zt };
+export { FamilyIntakeDecision as $, CourseCollection as $t, WorkbookFeedbackDelivery as A, Learner as An, COURSE_AUTHORING_ACTIONS as At, validateWorkbookAssessment as B, Worksheet as Bn, CoursePolicyBasisMismatchError as Bt, WorkbookActivity as C, SubmissionAsset as Cn, EnrollmentAutoUpgradeSkipCollection as Ct, WorkbookAttempt as D, LessonAsset as Dn, LessonRevisionCollection as Dt, WorkbookAssessmentRevisionCollection as E, validateRubricResults as En, LessonRevision as Et, WorkbookWorkFilingCollection as F, Exercise as Fn, CourseAuthoringValidationError as Ft, GroupSharingConflictError as G, EnrollmentPinConflictError as Gt, evaluateGroupSharingPolicy as H, CourseRevisionAlreadyReleasedError as Ht, WORKBOOK_MATH_VOCABULARY as I, ExternalCourse as In, CourseDiscardRefusedError as It, validateGroupSharingPolicy as J, ReviewNotCurrentError as Jt, GroupSharingPolicyValidationError as K, MAX_PAGE_SIZE as Kt, WorkbookAssessmentValidationError as L, Lesson as Ln, CourseDiscardedError as Lt, WorkbookFeedbackRelease as M, AuthoredCourse as Mn, CourseArchivedError as Mt, WorkbookFeedbackReleaseCollection as N, Course as Nn, CourseAuthoringAuthorizationError as Nt, WorkbookAttemptCollection as O, Curriculum as On, ReleasedLesson as Ot, WorkbookWorkFiling as P, CourseSection as Pn, CourseAuthoringError as Pt, FamilyIntakeCollection as Q, AuthoredCourseCollection as Qt, WorkbookCompletionConflictError as R, Reading as Rn, CourseMaterialCopyError as Rt, Workbook as S, Submission as Sn, EnrollmentAutoUpgradeSkip as St, WorkbookAssessmentRevision as T, parseQuestionRubric as Tn, EnrollmentReleasePinCollection as Tt, summarizeWorkbookEvidence as U, CourseStaleHeadError as Ut, workbookAggregateFeedback as V, CourseRequestKeyConflictError as Vt, GroupSharingAuthorizationError as W, DEFAULT_PAGE_SIZE as Wt, FamilyIntakeAsset as X, CatalogService as Xt, FamilyIntake as Y, CatalogAuthorizationError as Yt, FamilyIntakeAssetCollection as Z, AttestationCollection as Zt, WorkbookWorkflowRequiredError as _, WorksheetCollection as _n, CourseUpgradeChoiceCollection as _t, WorkbookContextRevisionCollection as a, ExternalCourseCollection as an, readDelegation as at, WorkbookCompletionDecision as b, Grade as bn, EnrollmentAssignmentRecord as bt, WorkbookPhotoDecision as c, LessonAssetCollection as cn, CourseDiscardTombstone as ct, WorkbookPhotoIntakeCollection as d, ReadingCollection as dn, CourseDraftHeadCollection as dt, CourseSectionCollection as en, FamilyIntakeDecisionCollection as et, validateWorkbookPhotoIdentification as f, ScannedSubmissionCollection as fn, CourseRelease as ft, SubmissionStorageCleanupError as g, VideoCollection as gn, CourseUpgradeChoice as gt, SubmissionService as h, SubmissionIntakeBindingCollection as hn, CourseRevisionCollection as ht, WorkbookContextRevision as i, ExternalCompletionCollection as in, delegationRecordFields as it, WorkbookFeedbackDeliveryCollection as j, LessonProgress as jn, COURSE_PROVENANCES as jt, WorkbookCollection as k, Enrollment as kn, ReleasedLessonCollection as kt, WorkbookPhotoDecisionCollection as l, LessonCollection as ln, CourseDiscardTombstoneCollection as lt, normalizeWorkbookAnswerRegions as m, SubmissionCollection as mn, CourseRevision as mt, preservePhotoProposal as n, EnrollmentCollection as nn, resolveEnrollmentLessons as nt, WorkbookPhotoAsset as o, GradeCollection as on, CourseArchiveDecision as ot, normalizeWorkbookObservedLayout as p, SubmissionAssetCollection as pn, CourseReleaseCollection as pt, canonicalGroupSharingPolicy as q, ReviewGateRequiredError as qt, WorkbookService as r, ExerciseCollection as rn, delegationActorFields as rt, WorkbookPhotoAssetCollection as s, LearnerCollection as sn, CourseArchiveDecisionCollection as st, WorkbookPhotoService as t, CurriculumCollection as tn, familyIntakeScopeId as tt, WorkbookPhotoIntake as u, LessonProgressCollection as un, CourseDraftHead as ut, LearnerAuthorizationError as v, Attestation as vn, CurriculumCreationRecord as vt, WorkbookActivityCollection as w, SubmissionIntakeBinding as wn, EnrollmentReleasePin as wt, WorkbookCompletionDecisionCollection as x, ScannedSubmission as xn, EnrollmentAssignmentRecordCollection as xt, LearnerService as y, ExternalCompletion as yn, CurriculumCreationRecordCollection as yt, aggregateWorkbookQuestions as z, Video as zn, CourseNotFoundError as zt };
 
-//# sourceMappingURL=workbook-photo-service-C6mbUUp6.js.map
+//# sourceMappingURL=workbook-photo-service-BxvZDqjM.js.map