@happyvertical/smrt-education 0.57.8 → 0.57.10

package/agents/catalog-sync.md

@@ -0,0 +1,35 @@
+# Catalog synchronization contract
+
+`CatalogResource` is a global provider-native metadata record. Its identity is
+`providerId + stableId`; do not merge or overwrite it with a matching record
+from another provider. `CatalogSelection` and `CatalogAcquisition` are required
+tenant-scoped records and are the only catalog records that express family use.
+
+Use `CatalogSyncService` with a durable `CatalogSyncStore`. Adapters enumerate
+metadata through `CatalogSyncAdapter`; this API has no byte or download method.
+Persist the cursor after every partial page. Only a terminal successful page may
+mark a checkpoint complete and withdraw source records not seen in that run.
+A failed, restricted, or incomplete enumeration remains incomplete and retains
+its cursor and failures for resumption.
+
+Use `CatalogPolicy` for server-side visibility and operation decisions. Unknown,
+conflicting, and restricted license evidence denies content operations. Teacher
+material is omitted for non-teachers before any DTO is formed. Acquisitions are
+explicit selected-content requests through `CatalogAcquisitionService`; it
+requires a currently pinned revision and available format, verifies the returned
+revision and SHA-256, and returns an existing acquisition before contacting a
+provider on retry. Catalog browsing and synchronization must never call it.
+
+`CatalogMaterializationService` is the only framework path from an acquired
+selection to learner material. It requires a tenant-owned acquisition whose
+resource revision still matches, current host-derived guardian authorization
+(`education.catalog.materialize`), and a host storage adapter that creates an
+authorized private Asset from the pinned bytes. Caller-provided roles are never
+authorized. Before private storage side effects it re-runs `CatalogPolicy` on
+the current resource and its current license evidence (`print` for PDF,
+`download` otherwise); restricted or conflicting evidence denies promotion. It
+creates a `personal-use-copy` external course, its section and lesson, and the
+sole `LessonAsset` join; it never makes a browsed resource assignable. A host
+may then supply curriculum and learner identifiers so the service calls the
+existing guardian-authorized learner enrollment API. Missing provider subject
+classification must be supplied explicitly by the guardian.

package/agents/ingestion.md

@@ -0,0 +1,93 @@
+# Paper intake bridge
+
+Import server integration from `@happyvertical/smrt-education/ingestion`, never
+from browser code. Build IngestionService, SubmissionService and the supplied
+scope from one authenticated server session. Derive learner/enrollment selection
+from authorized application state, not OCR output or uploaded metadata.
+
+1. Receive retained bytes through IngestionService.receive with bounded request
+   sizes, captured authority and retention. Accepted/duplicate receipts share the
+   existing durable item identity. Retry/unavailable is not a successful upload.
+2. `queueEducationExtraction(service,itemId,configuration)` allocates the immutable
+   extraction revision. The registered ingestion job dispatch invokes
+   `processEducationAnalysis` with the saved item/revision and its authenticated
+   worker service. Extraction runs outside transactions; success allocates a
+   separately dispatched interpretation revision with ingestion's frozen source
+   pin. Ingestion's outbox repair/recovery APIs remain the owner of missing jobs.
+3. `educationIntakeHandlers({submissions,request})` discovers only the authorized
+   learner/enrollment's assignment lessons. Unknown/ambiguous proposal outcomes
+   remain unresolved. Use ingestion's preview/decision/apply APIs for the human
+   identification choice; do not select the first candidate automatically.
+4. After explicit assignment confirmation, `captureEducationIntake` reads original
+   evidence through the authenticated ingestion service and copies it through
+   SubmissionService private storage. Supply `kind: 'blank_reference'` before work
+   begins or `kind: 'completed_work'` for an attempt. A correction supplies the
+   previous submission ID and a NEW intake item. Durable tenant/item uniqueness
+   prohibits rebinding captured bytes to another learner/lesson/kind/predecessor.
+   Retrying a capture preserves its identity; storage failures propagate with the
+   owning service's compensation/reconciliation contract.
+5. Reconfigure the authoritative catalog with the captured `submissionId`, then
+   queue fresh extraction with `queueEducationExtraction(service,itemId,config,
+   submissionId)`, then generate a fresh interpretation/preview for grading. The grade handler binds
+   the exact captured intake and attempt. Every policy must require human review;
+   the adapter rejects an effective policy without `requireReview`. Marks remain
+   proposals until ingestion records an approved guardian decision. A blank
+   reference cannot be graded. Applying uses `withExecutor(context.db)` and
+   `applyReviewedSubmission`, with no provider or blob I/O. Ingestion owns action
+   retries/decision idempotency; education owns current-attempt checks.
+
+The host execution authorizer must serialize current grant checks/revocation with
+writes. Use `educationIntakeTargetResolver({submissions,request,submissionId?})`
+for its target resolver: it locks the enrollment and reauthorizes on the supplied
+executor. It uses these revision formats: lessons use
+`assignment:<enrollmentId>:<lessonId>`; submissions use
+`attempt:<submissionId>:<status>`. The latter must also recheck the current attempt
+and intake binding. These identities do not authorize arbitrary catalog access.
+Answer keys and private source locators never enter candidate labels.
+
+## Decoder deployment
+
+The SDK adapter uses disposable child processes with deadlines and a Node heap
+cap. Native decoder allocations require a real operating-system ceiling. Call
+`requireIngestionMemoryLimit(maximumBytes)` **in the decoder worker at startup**
+before constructing `createSDKExtractionAdapter({nativeMemoryIsolation:
+'host-enforced', ...})`. The check requires Linux cgroup v2, reads actual process
+membership and all visible ancestor `memory.max` values, and fails closed for
+missing/unlimited/over-policy limits or inaccessible files. Children inherit the
+worker cgroup. Deploy an unprivileged container with a finite memory limit, no
+writable cgroup mount, and no permission to escape/migrate cgroups. A configuration
+string alone is insufficient. Container termination/OOM remains a retry/recovery
+condition in ingestion, never a successful extraction.
+
+The web server may run on macOS or another platform while jobs run in that Linux
+worker. Local mock extraction tests establish sequencing and authorization,
+not live OCR quality or production container enforcement. An actual memory-limited
+worker launch and live provider smoke test are deployment acceptance prerequisites.
+Provider credentials belong only in trusted worker configuration; do not put them
+in receipts, job arguments, scope metadata or logs.
+
+Selected catalog content must come from the explicit acquisition service, carrying
+resource/revision/hash and attribution/notices. Catalog discovery is metadata
+only and cannot establish download permission. Pin the acquired reference to the
+assignment; do not replace it when the source catalog changes.
+
+## Learner uploads and guardian execution
+
+`capturedCeiling.execution.principalId` is mandatory and immutable. A learner
+upload that will later be reviewed by a guardian must capture a trusted,
+server-provisioned execution principal, distinct from the requesting person.
+The host explicitly provisions that principal's maximum scoped operations and
+rechecks its current grants on the supplied executor. Uploading never grants
+those permissions to the learner. Missing principal provisioning is a closed
+configuration error; existing learner-principal receipts cannot be silently
+upgraded or have their captured ceiling rewritten.
+
+Ingestion already executes as that stable principal **on behalf of** the current
+authenticated `scope.actorId`. The bridge preserves the principal permission
+runtime and its intersected permission snapshot while entering a nested tenant
+context for the actual requesting human. Education then verifies this actor's
+membership, learner ownership or guardian relationship on `context.db`; its
+existing own-learner grading prohibition still applies. Both authorizations are
+required: principal grants alone cannot authorize guardian grading, and a
+legitimate guardian cannot exceed the receipt's principal ceiling. Current grant
+and guardian relationship revocation must serialize with execution, as before.

package/agents/learner-service.md

@@ -29,10 +29,19 @@ actor's User Profile to the learner's Profile. `authorizeLearner` receives
 that the type represents guardianship, its terms are effective, and that
 its permission policy allows the action. An arbitrary relationship is not a
 guardian grant. Missing relationships and host denials/exceptions fail closed.
+The authorizer also receives `executor`, the service's active database
+executor. Host policy reads, including relationship and revocation checks, must
+use that executor so they share a `withTransaction` or `withExecutor` boundary.
 Same-tenant membership alone never grants sibling access.
 
 ## Supported workflow
 
+- `getLearnerSetupStatus({ tenantId, actorUserId, learnerUserId })` is a
+  host-authorized onboarding probe for an active tenant member. It returns only
+  `{ needsSetup }`; it neither returns learner or relationship data nor grants
+  relationships. The host authorizer receives `education.learner.setup`, the
+  target user id, and the active executor. `provisionLearner` remains the write
+  path and still requires a directed guardian relationship.
 - `getLearner` returns authorized learner metadata and parsed settings.
 - `createCurriculum` creates a **planned** curriculum for an authorized guardian.
   A learner cannot plan their own curriculum. Title is required.

package/agents/source-import.md

@@ -58,6 +58,15 @@ ON UPDATE CASCADE/self-referential schema limitations documented in
 [catalog-service.md](catalog-service.md); no alternate schema is substituted.
 Tests use synthetic local HTML and an injected fetch callback, never the network.
 
+Google Drive discovery defaults every record to `teacher`. A trusted host may
+make only an exact reviewed file ID visible by passing `studentSafeFileIds`;
+folder IDs and descendant membership never grant visibility. A teacher-marked
+folder or name still wins over that allowlist. File shortcuts are excluded: a
+shortcut does not prove the target remains under a reviewed root or retains the
+target's teacher-path classification. Resync after changing the allowlist: the
+durable sync upsert rewrites existing visibility rather than retaining a
+previous learner classification.
+
 Generic “Printable” and “Printables” labels identify lesson PDFs; course packets
 require explicit packet/whole-course/complete-course wording. Only actual href
 attributes supply pointers; data-href metadata does not.

package/agents/submission-service.md

@@ -28,6 +28,20 @@ the existing submission; altered retries fail. Submitted/review/complete/skipped
 progress rejects new captures. Content includes ordered filenames, MIME types,
 bytes and notes. Hosts should impose tighter request/body limits as needed.
 
+`captureBlankReference` records a workbook-page scan as immutable
+`blank_reference` evidence without advancing completion or creating a grade.
+Trusted ingestion scopes each receipt to the exact `enrollmentId` and calls
+`assertLessonAssignment` before reading retained evidence; it proves the active
+tenant, actor, learner, enrollment, and lesson without creating progress. A
+stable `intakeItemId` is claimed once in the durable tenant/item binding table,
+then bound to the tenant, learner, lesson, progress, kind and predecessor; an
+altered retry fails. The binding is database-unique across enrollments while
+ordinary uploads remain unbound. `resubmitSubmission` requires the current completed-work predecessor and
+creates a new immutable `completed_work` attempt. Old pages, grades and feedback
+remain history; stale predecessors cannot be graded or replaced. A correction may
+reopen submitted, review or complete progress, while an AI proposal remains a
+non-authoritative Grade until guardian review.
+
 `reviewSubmission` accepts an existing authorized submission and optional score
 and feedback. `attestLesson` creates/reuses an Attestation for a matching progress
 item without requiring uploads. Both require a verified guardian and create a
@@ -73,6 +87,10 @@ returned. The host signs every claim and its serving endpoint must verify the
 signature, expiry, current actor/tenant and object authorization before serving.
 A bearer URL must never become a cross-family or sibling access bypass.
 
+`signLessonPrintable` signs only the exact authorized `printable` LessonAsset
+join for an enrolled lesson. It never accepts an answer-key join and carries the
+same tenant, actor, learner and enrollment scope as a submission claim.
+
 ## Personal worksheet packets
 
 `splitWorksheetPacket` takes the guardian learner request, exact-owned

package/dist/catalog-acquisition-service.d.ts

@@ -0,0 +1,58 @@
+import type { CatalogAcquireAdapter, CatalogOperation, CatalogSourceRecord } from './catalog-contracts.js';
+import { CatalogPolicy } from './catalog-policy.js';
+export interface CatalogAcquisitionRecord {
+    id: string;
+    tenantId: string;
+    resourceId: string;
+    selectionId: string;
+    revision: string;
+    format: string;
+    sha256: string;
+    attribution?: string;
+    notices?: string;
+}
+export interface CatalogSelectionRecord {
+    id: string;
+    tenantId: string;
+    resourceId: string;
+    selectedRevision: string;
+}
+export interface CatalogAcquisitionStore {
+    getResource(resourceId: string): Promise<(CatalogSourceRecord & {
+        id: string;
+        withdrawnAt: Date | null;
+    }) | undefined>;
+    getSelection(input: {
+        tenantId: string;
+        selectionId: string;
+    }): Promise<CatalogSelectionRecord | undefined>;
+    findAcquisition(input: {
+        tenantId: string;
+        resourceId: string;
+        selectionId: string;
+        revision: string;
+        format: string;
+    }): Promise<CatalogAcquisitionRecord | undefined>;
+    createAcquisition(input: Omit<CatalogAcquisitionRecord, 'id'> & {
+        bytes: Uint8Array;
+    }): Promise<CatalogAcquisitionRecord>;
+}
+export interface CatalogAcquisitionRequest {
+    tenantId: string;
+    actorUserId: string;
+    roles: readonly string[];
+    resourceId: string;
+    selectionId: string;
+    revision: string;
+    format: string;
+    operation: CatalogOperation;
+}
+/** Explicit, policy-gated selected-content acquisition. Catalog discovery has no route here. */
+export declare class CatalogAcquisitionService {
+    private readonly store;
+    private readonly adapter;
+    private readonly policy;
+    constructor(store: CatalogAcquisitionStore, adapter: CatalogAcquireAdapter, policy?: CatalogPolicy);
+    acquire(request: CatalogAcquisitionRequest): Promise<CatalogAcquisitionRecord>;
+}
+//# sourceMappingURL=catalog-acquisition-service.d.ts.map

package/dist/catalog-acquisition-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-acquisition-service.d.ts","sourceRoot":"","sources":["../src/catalog-acquisition-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EAErB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,WAAW,CACT,UAAU,EAAE,MAAM,GACjB,OAAO,CACR,CAAC,mBAAmB,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,CAAC,GAAG,SAAS,CAC7E,CAAC;IACF,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAChD,eAAe,CAAC,KAAK,EAAE;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IAClD,iBAAiB,CACf,KAAK,EAAE,IAAI,CAAC,wBAAwB,EAAE,IAAI,CAAC,GAAG;QAAE,KAAK,EAAE,UAAU,CAAA;KAAE,GAClE,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,gBAAgB,CAAC;CAC7B;AASD,gGAAgG;AAChG,qBAAa,yBAAyB;IAElC,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,KAAK,EAAE,uBAAuB,EAC9B,OAAO,EAAE,qBAAqB,EAC9B,MAAM,gBAAsB;IAGzC,OAAO,CACX,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC;CAgErC"}

package/dist/catalog-collections.d.ts

@@ -0,0 +1,18 @@
+import { SmrtCollection } from '@happyvertical/smrt-core';
+import { CatalogAcquisition, CatalogProvider, CatalogResource, CatalogSelection, CatalogSyncState } from './catalog-models.js';
+export declare class CatalogProviderCollection extends SmrtCollection<CatalogProvider> {
+    static readonly _itemClass: typeof CatalogProvider;
+}
+export declare class CatalogResourceCollection extends SmrtCollection<CatalogResource> {
+    static readonly _itemClass: typeof CatalogResource;
+}
+export declare class CatalogSyncStateCollection extends SmrtCollection<CatalogSyncState> {
+    static readonly _itemClass: typeof CatalogSyncState;
+}
+export declare class CatalogSelectionCollection extends SmrtCollection<CatalogSelection> {
+    static readonly _itemClass: typeof CatalogSelection;
+}
+export declare class CatalogAcquisitionCollection extends SmrtCollection<CatalogAcquisition> {
+    static readonly _itemClass: typeof CatalogAcquisition;
+}
+//# sourceMappingURL=catalog-collections.d.ts.map

package/dist/catalog-collections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-collections.d.ts","sourceRoot":"","sources":["../src/catalog-collections.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAE7B,qBAAa,yBAA0B,SAAQ,cAAc,CAAC,eAAe,CAAC;IAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,yBAAmB;CAC9C;AACD,qBAAa,yBAA0B,SAAQ,cAAc,CAAC,eAAe,CAAC;IAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,yBAAmB;CAC9C;AACD,qBAAa,0BAA2B,SAAQ,cAAc,CAAC,gBAAgB,CAAC;IAC9E,MAAM,CAAC,QAAQ,CAAC,UAAU,0BAAoB;CAC/C;AACD,qBAAa,0BAA2B,SAAQ,cAAc,CAAC,gBAAgB,CAAC;IAC9E,MAAM,CAAC,QAAQ,CAAC,UAAU,0BAAoB;CAC/C;AACD,qBAAa,4BAA6B,SAAQ,cAAc,CAAC,kBAAkB,CAAC;IAClF,MAAM,CAAC,QAAQ,CAAC,UAAU,4BAAsB;CACjD"}

package/dist/catalog-contracts.d.ts

@@ -0,0 +1,88 @@
+/** Metadata-only resource visibility. Teacher material is never learner-visible. */
+export type CatalogVisibility = 'catalog' | 'teacher';
+export type CatalogLicenseState = 'verified' | 'unknown' | 'conflicting' | 'restricted';
+export type CatalogOperation = 'link' | 'download' | 'print' | 'adapt' | 'redistribute' | 'commercial-use';
+/** Exact source evidence; no provider-wide license inference is permitted. */
+export interface CatalogLicenseEvidence {
+    state: CatalogLicenseState;
+    identifier?: string;
+    version?: string;
+    sourceUrl?: string;
+    attribution?: string;
+    exceptions?: string;
+    retrievedAt?: string;
+    /** Operations expressly authorized by the source evidence. */
+    permittedOperations?: CatalogOperation[];
+}
+/** A provider's durable source record. It remains distinct after deduplication. */
+export interface CatalogSourceRecord {
+    providerId: string;
+    stableId: string;
+    revision: string;
+    canonicalUrl: string;
+    title: string;
+    suppliedDescription?: string;
+    author?: string;
+    subjects?: string[];
+    gradeRange?: {
+        min?: string;
+        max?: string;
+    };
+    language?: string;
+    resourceType?: string;
+    parentStableId?: string;
+    availableFormats?: string[];
+    licenseEvidence: CatalogLicenseEvidence;
+    visibility: CatalogVisibility;
+}
+export interface CatalogSyncFailure {
+    cursor?: string;
+    code: string;
+    message: string;
+    retryAfterMs?: number;
+}
+/** One metadata-only enumeration result. `complete` only means this page is terminal. */
+export interface CatalogSyncPage {
+    records: CatalogSourceRecord[];
+    nextCursor?: string;
+    complete: boolean;
+    /** Honest non-terminal stop, e.g. missing source authorization. */
+    paused?: boolean;
+    exclusions?: CatalogSyncFailure[];
+}
+export interface CatalogSyncCheckpoint {
+    providerId: string;
+    /** Internal sync generation retained until its terminal page permits withdrawals. */
+    runId?: string;
+    cursor?: string;
+    lastSuccessfulAt?: string;
+    complete: boolean;
+    paused?: boolean;
+    pauseReason?: string;
+    importedCount: number;
+    failures: CatalogSyncFailure[];
+}
+export interface CatalogSyncAdapter {
+    enumerate(input: {
+        cursor?: string;
+        checkpoint: CatalogSyncCheckpoint;
+    }): Promise<CatalogSyncPage>;
+}
+export interface CatalogAcquireAdapter {
+    acquire(input: {
+        providerId: string;
+        stableId: string;
+        revision: string;
+        format: string;
+    }): Promise<{
+        bytes: Uint8Array;
+        sha256: string;
+        revision: string;
+    }>;
+}
+export interface CatalogActor {
+    tenantId: string;
+    actorUserId: string;
+    roles: readonly string[];
+}
+//# sourceMappingURL=catalog-contracts.d.ts.map

package/dist/catalog-contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-contracts.d.ts","sourceRoot":"","sources":["../src/catalog-contracts.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,SAAS,CAAC;AACtD,MAAM,MAAM,mBAAmB,GAC3B,UAAU,GACV,SAAS,GACT,aAAa,GACb,YAAY,CAAC;AACjB,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,UAAU,GACV,OAAO,GACP,OAAO,GACP,cAAc,GACd,gBAAgB,CAAC;AAErB,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,mBAAmB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAC1C;AAED,mFAAmF;AACnF,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,eAAe,EAAE,sBAAsB,CAAC;IACxC,UAAU,EAAE,iBAAiB,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,mEAAmE;IACnE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,KAAK,EAAE;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,qBAAqB,CAAC;KACnC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,KAAK,EAAE;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B"}

package/dist/catalog-database-sync-store.d.ts

@@ -0,0 +1,13 @@
+import type { DatabaseInterface } from '@happyvertical/sql';
+import type { CatalogSourceRecord, CatalogSyncCheckpoint } from './catalog-contracts.js';
+import type { CatalogSyncStore } from './catalog-sync-service.js';
+/** Default durable store for metadata-only provider synchronization. */
+export declare class CatalogDatabaseSyncStore implements CatalogSyncStore {
+    private readonly db;
+    constructor(db: DatabaseInterface);
+    getCheckpoint(providerId: string): Promise<CatalogSyncCheckpoint | undefined>;
+    saveCheckpoint(value: CatalogSyncCheckpoint): Promise<void>;
+    upsert(record: CatalogSourceRecord, runId: string): Promise<void>;
+    withdrawUnseen(providerId: string, runId: string): Promise<number>;
+}
+//# sourceMappingURL=catalog-database-sync-store.d.ts.map

package/dist/catalog-database-sync-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-database-sync-store.d.ts","sourceRoot":"","sources":["../src/catalog-database-sync-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAK5D,OAAO,KAAK,EACV,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AA2ClE,wEAAwE;AACxE,qBAAa,wBAAyB,YAAW,gBAAgB;IACnD,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,iBAAiB;IAE5C,aAAa,CACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC;IAQvC,cAAc,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB3D,MAAM,CAAC,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCjE,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAazE"}

package/dist/catalog-materialization-service.d.ts

@@ -0,0 +1,78 @@
+import type { DatabaseInterface } from '@happyvertical/sql';
+import type { CatalogAcquisitionRecord } from './catalog-acquisition-service.js';
+import type { CatalogSourceRecord } from './catalog-contracts.js';
+import { CatalogPolicy } from './catalog-policy.js';
+import type { LearnerRequest } from './learner-service.js';
+export interface CatalogMaterializationStore {
+    getResource(resourceId: string): Promise<(CatalogSourceRecord & {
+        id: string;
+        withdrawnAt: Date | null;
+    }) | undefined>;
+    getAcquisition(input: {
+        tenantId: string;
+        acquisitionId: string;
+    }): Promise<CatalogAcquisitionRecord | undefined>;
+}
+/** Host-owned copy operation; it must retain the pinned bytes and prove a private Asset capability. */
+export interface CatalogMaterializationStorage {
+    ensurePrivateAsset(input: {
+        tenantId: string;
+        actorUserId: string;
+        acquisition: CatalogAcquisitionRecord;
+        name: string;
+    }): Promise<{
+        assetId: string;
+    }>;
+}
+export interface CatalogEnrollmentPort {
+    enroll(input: LearnerRequest & {
+        curriculumId: string;
+        courseId: string;
+    }): Promise<{
+        id: string;
+    }>;
+}
+export interface CatalogMaterializationRequest {
+    tenantId: string;
+    actorUserId: string;
+    acquisitionId: string;
+    /** Required when provider metadata does not classify a subject. */
+    subject?: string;
+    courseTitle?: string;
+    lessonTitle?: string;
+    curriculumId?: string;
+    learnerId?: string;
+    guardianRelationshipId?: string;
+}
+/** Host derives this from current memberships and guardian terms; callers never supply roles. */
+export type CatalogMaterializationAuthorizer = (input: {
+    tenantId: string;
+    actorUserId: string;
+    executor: DatabaseInterface;
+    action: 'education.catalog.materialize';
+}) => Promise<Readonly<{
+    allowed: boolean;
+    roles: readonly string[];
+}>>;
+export interface CatalogMaterializationResult {
+    courseId: string;
+    lessonId: string;
+    assetId: string;
+    revision: string;
+    sha256: string;
+    enrollmentId?: string;
+}
+/** Both adapter file extensions and MIME media types preserve PDF layout. */
+export declare function isPrintableAcquisitionFormat(format: string): boolean;
+/** Creates a private course from an already-authorized, pinned acquisition. */
+export declare class CatalogMaterializationService {
+    private readonly db;
+    private readonly store;
+    private readonly storage;
+    private readonly learner;
+    private readonly authorize;
+    private readonly policy;
+    constructor(db: DatabaseInterface, store: CatalogMaterializationStore, storage: CatalogMaterializationStorage, learner: CatalogEnrollmentPort | undefined, authorize: CatalogMaterializationAuthorizer, policy?: CatalogPolicy);
+    materialize(request: CatalogMaterializationRequest): Promise<CatalogMaterializationResult>;
+}
+//# sourceMappingURL=catalog-materialization-service.d.ts.map

package/dist/catalog-materialization-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-materialization-service.d.ts","sourceRoot":"","sources":["../src/catalog-materialization-service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAgB,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,WAAW,2BAA2B;IAC1C,WAAW,CACT,UAAU,EAAE,MAAM,GACjB,OAAO,CACR,CAAC,mBAAmB,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,CAAC,GAAG,SAAS,CAC7E,CAAC;IACF,cAAc,CAAC,KAAK,EAAE;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;CACnD;AAED,uGAAuG;AACvG,MAAM,WAAW,6BAA6B;IAC5C,kBAAkB,CAAC,KAAK,EAAE;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,wBAAwB,CAAC;QACtC,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CACJ,KAAK,EAAE,cAAc,GAAG;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GACjE,OAAO,CAAC;QACT,EAAE,EAAE,MAAM,CAAC;KACZ,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,iGAAiG;AACjG,MAAM,MAAM,gCAAgC,GAAG,CAAC,KAAK,EAAE;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE,+BAA+B,CAAC;CACzC,KAAK,OAAO,CAAC,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC,CAAC;AAExE,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAeD,6EAA6E;AAC7E,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEpE;AAED,+EAA+E;AAC/E,qBAAa,6BAA6B;IAEtC,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBALN,EAAE,EAAE,iBAAiB,EACrB,KAAK,EAAE,2BAA2B,EAClC,OAAO,EAAE,6BAA6B,EACtC,OAAO,EAAE,qBAAqB,GAAG,SAAS,EAC1C,SAAS,EAAE,gCAAgC,EAC3C,MAAM,gBAAsB;IAGzC,WAAW,CACf,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,4BAA4B,CAAC;CA6KzC"}

package/dist/catalog-models.d.ts

@@ -0,0 +1,63 @@
+import { SmrtObject } from '@happyvertical/smrt-core';
+import type { CatalogLicenseState, CatalogVisibility } from './catalog-contracts.js';
+/** Globally visible provider registration. Hosts configure adapters and credentials out of band. */
+export declare class CatalogProvider extends SmrtObject {
+    providerId: string;
+    name: string;
+    active: boolean;
+}
+/** A provider-native record. Rows are intentionally not merged across providers. */
+export declare class CatalogResource extends SmrtObject {
+    providerId: string;
+    stableId: string;
+    revision: string;
+    canonicalUrl: string;
+    title: string;
+    suppliedDescription: string;
+    author: string;
+    subjects: string;
+    grades: string;
+    language: string;
+    resourceType: string;
+    parentStableId: string;
+    availableFormats: string;
+    licenseEvidence: string;
+    licenseState: CatalogLicenseState;
+    visibility: CatalogVisibility;
+    /** Last durable enumeration generation that observed this provider record. */
+    lastSeenRunId: string;
+    withdrawnAt: string;
+}
+/** Durable per-provider enumeration state. A failed or partial feed is never complete. */
+export declare class CatalogSyncState extends SmrtObject {
+    /** Provider-owned stable key, not an internal provider row ID. */
+    providerId: string;
+    cursor: string;
+    /** Persists across interrupted pages so terminal withdrawal is safe on resume. */
+    runId: string;
+    complete: boolean;
+    paused: boolean;
+    pauseReason: string;
+    importedCount: number;
+    failures: string;
+    lastSuccessfulAt: string;
+}
+/** Tenant-owned intent to use a metadata record, distinct from acquiring bytes. */
+export declare class CatalogSelection extends SmrtObject {
+    tenantId: string;
+    resourceId: string;
+    selectedByUserId: string;
+    selectedRevision: string;
+}
+/** A pinned, tenant-owned acquisition record. Bytes belong in a host storage service. */
+export declare class CatalogAcquisition extends SmrtObject {
+    tenantId: string;
+    resourceId: string;
+    selectionId: string;
+    revision: string;
+    format: string;
+    sha256: string;
+    attribution: string;
+    notices: string;
+}
+//# sourceMappingURL=catalog-models.d.ts.map

package/dist/catalog-models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-models.d.ts","sourceRoot":"","sources":["../src/catalog-models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,UAAU,EAAQ,MAAM,0BAA0B,CAAC;AAE/E,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,wBAAwB,CAAC;AAIhC,oGAAoG;AACpG,qBACa,eAAgB,SAAQ,UAAU;IAClB,UAAU,SAAM;IAChB,IAAI,SAAM;IACrC,MAAM,UAAQ;CACf;AAED,oFAAoF;AACpF,qBACa,eAAgB,SAAQ,UAAU;IAClB,UAAU,SAAM;IAChB,QAAQ,SAAM;IACd,QAAQ,SAAM;IACzC,YAAY,SAAM;IACS,KAAK,SAAM;IACtC,mBAAmB,SAAM;IACzB,MAAM,SAAM;IACZ,QAAQ,SAAQ;IAChB,MAAM,SAAQ;IACd,QAAQ,SAAM;IACd,YAAY,SAAM;IAClB,cAAc,SAAM;IACpB,gBAAgB,SAAQ;IACxB,eAAe,SAAQ;IACvB,YAAY,EAAE,mBAAmB,CAAa;IAC9C,UAAU,EAAE,iBAAiB,CAAa;IAC1C,8EAA8E;IAC9E,aAAa,SAAM;IACnB,WAAW,SAAM;CAClB;AAED,0FAA0F;AAC1F,qBACa,gBAAiB,SAAQ,UAAU;IAC9C,kEAAkE;IACvC,UAAU,SAAM;IAC3C,MAAM,SAAM;IACZ,kFAAkF;IAClF,KAAK,SAAM;IACX,QAAQ,UAAS;IACjB,MAAM,UAAS;IACf,WAAW,SAAM;IACjB,aAAa,SAAK;IAClB,QAAQ,SAAQ;IAChB,gBAAgB,SAAM;CACvB;AAED,mFAAmF;AACnF,qBAEa,gBAAiB,SAAQ,UAAU;IAClC,QAAQ,SAAM;IACyB,UAAU,SAAM;IACxC,gBAAgB,SAAM;IACtB,gBAAgB,SAAM;CAClD;AAED,yFAAyF;AACzF,qBAEa,kBAAmB,SAAQ,UAAU;IACpC,QAAQ,SAAM;IACyB,UAAU,SAAM;IACf,WAAW,SAAM;IAC1C,QAAQ,SAAM;IACd,MAAM,SAAM;IACZ,MAAM,SAAM;IACvC,WAAW,SAAM;IACjB,OAAO,SAAM;CACd"}

package/dist/catalog-policy.d.ts

@@ -0,0 +1,12 @@
+import type { CatalogActor, CatalogOperation, CatalogSourceRecord } from './catalog-contracts.js';
+export interface CatalogPolicyDecision {
+    allowed: boolean;
+    reason?: 'teacher-material' | 'unverified-license' | 'operation-not-permitted';
+}
+/** Server-side resource policy. UI affordances are advisory and cannot bypass it. */
+export declare class CatalogPolicy {
+    canView(record: Pick<CatalogSourceRecord, 'visibility'>, actor: CatalogActor): boolean;
+    authorize(record: Pick<CatalogSourceRecord, 'visibility' | 'licenseEvidence'>, operation: CatalogOperation, actor: CatalogActor): CatalogPolicyDecision;
+    private isVerified;
+}
+//# sourceMappingURL=catalog-policy.d.ts.map

package/dist/catalog-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-policy.d.ts","sourceRoot":"","sources":["../src/catalog-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAEZ,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EACH,kBAAkB,GAClB,oBAAoB,GACpB,yBAAyB,CAAC;CAC/B;AAED,qFAAqF;AACrF,qBAAa,aAAa;IACxB,OAAO,CACL,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,CAAC,EAC/C,KAAK,EAAE,YAAY,GAClB,OAAO;IAIV,SAAS,CACP,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,iBAAiB,CAAC,EACnE,SAAS,EAAE,gBAAgB,EAC3B,KAAK,EAAE,YAAY,GAClB,qBAAqB;IAWxB,OAAO,CAAC,UAAU;CAGnB"}

package/dist/catalog-read-service.d.ts

@@ -0,0 +1,44 @@
+import type { CatalogActor, CatalogLicenseEvidence, CatalogSourceRecord } from './catalog-contracts.js';
+import { CatalogPolicy } from './catalog-policy.js';
+export interface CatalogReadStore {
+    search(input: {
+        query?: string;
+        subject?: string;
+        grade?: string;
+    }): Promise<readonly (CatalogSourceRecord & {
+        id: string;
+    })[]>;
+}
+/** Deliberately metadata-only DTO: credentials, byte locations, and teacher records stay server-side. */
+export interface CatalogResourceView {
+    id: string;
+    providerId: string;
+    stableId: string;
+    revision: string;
+    canonicalUrl: string;
+    title: string;
+    suppliedDescription?: string;
+    author?: string;
+    subjects?: string[];
+    gradeRange?: {
+        min?: string;
+        max?: string;
+    };
+    language?: string;
+    resourceType?: string;
+    parentStableId?: string;
+    availableFormats?: string[];
+    license: Pick<CatalogLicenseEvidence, 'state' | 'identifier' | 'version' | 'attribution' | 'exceptions' | 'retrievedAt'>;
+}
+export declare class CatalogReadService {
+    private readonly store;
+    private readonly policy;
+    constructor(store: CatalogReadStore, policy?: CatalogPolicy);
+    search(actor: CatalogActor, filter?: {
+        query?: string;
+        subject?: string;
+        grade?: string;
+    }): Promise<CatalogResourceView[]>;
+    private view;
+}
+//# sourceMappingURL=catalog-read-service.d.ts.map

package/dist/catalog-read-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-read-service.d.ts","sourceRoot":"","sources":["../src/catalog-read-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,KAAK,EAAE;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,SAAS,CAAC,mBAAmB,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC,CAAC;CAChE;AAED,yGAAyG;AACzG,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,EAAE,IAAI,CACX,sBAAsB,EACpB,OAAO,GACP,YAAY,GACZ,SAAS,GACT,aAAa,GACb,YAAY,GACZ,aAAa,CAChB,CAAC;CACH;AAED,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,KAAK,EAAE,gBAAgB,EACvB,MAAM,gBAAsB;IAGzC,MAAM,CACV,KAAK,EAAE,YAAY,EACnB,MAAM,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAChE,OAAO,CAAC,mBAAmB,EAAE,CAAC;IASjC,OAAO,CAAC,IAAI;CA6Cb"}

package/dist/catalog-sync-service.d.ts

@@ -0,0 +1,19 @@
+import type { CatalogSourceRecord, CatalogSyncAdapter, CatalogSyncCheckpoint } from './catalog-contracts.js';
+export interface CatalogSyncStore {
+    getCheckpoint(providerId: string): Promise<CatalogSyncCheckpoint | undefined>;
+    saveCheckpoint(checkpoint: CatalogSyncCheckpoint): Promise<void>;
+    upsert(record: CatalogSourceRecord, runId: string): Promise<void>;
+    withdrawUnseen(providerId: string, runId: string): Promise<number>;
+}
+export interface CatalogSyncReport extends CatalogSyncCheckpoint {
+    withdrawnCount: number;
+}
+/** Durable metadata synchronization. It never invokes a content acquisition adapter. */
+export declare class CatalogSyncService {
+    private readonly store;
+    private readonly retries;
+    private readonly maxPages;
+    constructor(store: CatalogSyncStore, retries?: number, maxPages?: number);
+    sync(providerId: string, adapter: CatalogSyncAdapter): Promise<CatalogSyncReport>;
+}
+//# sourceMappingURL=catalog-sync-service.d.ts.map