@headless-lms/core 0.1.0 → 0.3.0

package/dist/identity/events.js

@@ -1,16 +1,26 @@
 import { userSchema } from "../types/schemas/identity.js";
 import { defineEvent } from "../shared/events.js";
 //#region src/identity/events.ts
+const publicUser = userSchema.pick({
+	id: true,
+	email: true,
+	firstName: true,
+	lastName: true,
+	createdAt: true,
+	updatedAt: true
+}).strip();
 const identityEvents = {
 	userCreated: defineEvent({
 		type: "identity.user.created",
 		version: 1,
-		data: userSchema
+		data: userSchema,
+		publicData: publicUser
 	}),
 	userUpdated: defineEvent({
 		type: "identity.user.updated",
 		version: 1,
-		data: userSchema
+		data: userSchema,
+		publicData: publicUser
 	}),
 	userDeleted: defineEvent({
 		type: "identity.user.deleted",

package/dist/identity/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","names":[],"sources":["../../src/identity/events.ts"],"sourcesContent":["import { userSchema } from '../types/schemas/index.js';\nimport { defineEvent, type EventOf, type EventOfValues } from '../shared/ports.js';\n\nexport const identityEvents = {\n  userCreated: defineEvent({\n    type: 'identity.user.created',\n    version: 1,\n    data: userSchema,\n  }),\n  userUpdated: defineEvent({\n    type: 'identity.user.updated',\n    version: 1,\n    data: userSchema,\n  }),\n  userDeleted: defineEvent({\n    type: 'identity.user.deleted',\n    version: 1,\n    data: userSchema,\n  }),\n};\n\nexport type UserCreated = EventOf<typeof identityEvents.userCreated>;\nexport type UserUpdated = EventOf<typeof identityEvents.userUpdated>;\nexport type UserDeleted = EventOf<typeof identityEvents.userDeleted>;\nexport type IdentityEvent = EventOfValues<typeof identityEvents>;\n"],"mappings":";;;AAGA,MAAa,iBAAiB;CAC5B,aAAa,YAAY;EACvB,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;CACD,aAAa,YAAY;EACvB,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;CACD,aAAa,YAAY;EACvB,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;AACH"}
+{"version":3,"file":"events.js","names":[],"sources":["../../src/identity/events.ts"],"sourcesContent":["import { userSchema } from '../types/schemas/index.js';\nimport { defineEvent, type EventOf, type EventOfValues } from '../shared/ports.js';\n\nconst publicUser = userSchema\n  .pick({\n    id: true,\n    email: true,\n    firstName: true,\n    lastName: true,\n    createdAt: true,\n    updatedAt: true,\n  })\n  .strip();\n\nexport const identityEvents = {\n  userCreated: defineEvent({\n    type: 'identity.user.created',\n    version: 1,\n    data: userSchema,\n    publicData: publicUser,\n  }),\n  userUpdated: defineEvent({\n    type: 'identity.user.updated',\n    version: 1,\n    data: userSchema,\n    publicData: publicUser,\n  }),\n  userDeleted: defineEvent({\n    type: 'identity.user.deleted',\n    version: 1,\n    data: userSchema,\n  }),\n};\n\nexport type UserCreated = EventOf<typeof identityEvents.userCreated>;\nexport type UserUpdated = EventOf<typeof identityEvents.userUpdated>;\nexport type UserDeleted = EventOf<typeof identityEvents.userDeleted>;\nexport type IdentityEvent = EventOfValues<typeof identityEvents>;\n"],"mappings":";;;AAGA,MAAM,aAAa,WAChB,KAAK;CACJ,IAAI;CACJ,OAAO;CACP,WAAW;CACX,UAAU;CACV,WAAW;CACX,WAAW;AACb,CAAC,CAAC,CACD,MAAM;AAET,MAAa,iBAAiB;CAC5B,aAAa,YAAY;EACvB,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,aAAa,YAAY;EACvB,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,aAAa,YAAY;EACvB,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;AACH"}

package/dist/identity/index.d.ts

@@ -1,8 +1,10 @@
-import { CreateUserInput, ProvisionUserInput, UpdateUserInput } from "../types/schemas/identity.js";
+import { CreateUserInput, Notification, NotificationKind, NotificationPreference, ProvisionUserInput, UpdateUserInput, UserProfile, UserProfileView } from "../types/schemas/identity.js";
 import { User, UserId } from "../types/identity.js";
-import { IdentityEvent, UserCreated, UserDeleted, UserUpdated, identityEvents } from "./events.js";
 import "./model.js";
 import "./types.js";
-import { AuthHeaders, IdentityRepository, IdentityService, SessionAdmin, UserEditor, UserProvisioner, UserResolver } from "./ports.js";
+import { AuthHeaders, IdentityRepository, IdentityService, NewNotification, NotificationDesk, NotificationInbox, NotificationPage, NotificationService, NotificationsQuery, NotificationsRepository, ProfilePatch, SessionAdmin, UpdateProfileInput, UserEditor, UserProvisioner, UserResolver } from "./ports.js";
 import { IdentityServiceImpl } from "./service.js";
-export { type AuthHeaders, type CreateUserInput, type IdentityEvent, type IdentityRepository, type IdentityService, IdentityServiceImpl, type ProvisionUserInput, type SessionAdmin, type UpdateUserInput, type User, type UserCreated, type UserDeleted, type UserEditor, type UserId, type UserProvisioner, type UserResolver, type UserUpdated, identityEvents };
+import { NotificationServiceImpl, defaultPreference } from "./notifications.js";
+import { IdentityEvent, UserCreated, UserDeleted, UserUpdated, identityEvents } from "./events.js";
+import { ACCESS_TOKEN_TTL_SECONDS, ORG_CLAIM } from "./access.js";
+export { ACCESS_TOKEN_TTL_SECONDS, type AuthHeaders, type CreateUserInput, type IdentityEvent, type IdentityRepository, type IdentityService, IdentityServiceImpl, type NewNotification, type Notification, type NotificationDesk, type NotificationInbox, type NotificationKind, type NotificationPage, type NotificationPreference, type NotificationService, NotificationServiceImpl, type NotificationsQuery, type NotificationsRepository, ORG_CLAIM, type ProfilePatch, type ProvisionUserInput, type SessionAdmin, type UpdateProfileInput, type UpdateUserInput, type User, type UserCreated, type UserDeleted, type UserEditor, type UserId, type UserProfile, type UserProfileView, type UserProvisioner, type UserResolver, type UserUpdated, defaultPreference, identityEvents };

package/dist/identity/index.js

@@ -1,3 +1,5 @@
 import { identityEvents } from "./events.js";
 import { IdentityServiceImpl } from "./service.js";
-export { IdentityServiceImpl, identityEvents };
+import { NotificationServiceImpl, defaultPreference } from "./notifications.js";
+import { ACCESS_TOKEN_TTL_SECONDS, ORG_CLAIM } from "./access.js";
+export { ACCESS_TOKEN_TTL_SECONDS, IdentityServiceImpl, NotificationServiceImpl, ORG_CLAIM, defaultPreference, identityEvents };

package/dist/identity/model.d.ts

@@ -1,3 +1,4 @@
+import { Notification, NotificationKind, NotificationPreference, UserProfile, UserProfileView } from "../types/schemas/identity.js";
 import { User } from "../types/identity.js";
 import "../types/index.js";
-export type { User };
+export type { Notification, NotificationKind, NotificationPreference, User, UserProfile, UserProfileView };

package/dist/identity/notifications.d.ts

@@ -0,0 +1,27 @@
+import { Logger } from "../types/ports.js";
+import { Notification, NotificationKind, NotificationPreference } from "../types/schemas/identity.js";
+import "../shared/ports.js";
+import "./model.js";
+import { NewNotification, NotificationPage, NotificationService, NotificationsQuery, NotificationsRepository } from "./ports.js";
+//#region src/identity/notifications.d.ts
+declare function defaultPreference(kind: NotificationKind): NotificationPreference;
+declare class NotificationServiceImpl implements NotificationService {
+  private readonly repo;
+  private readonly logger;
+  constructor(params: {
+    repo: NotificationsRepository;
+    logger?: Logger;
+  });
+  notify(orgId: string, notifications: NewNotification[]): Promise<void>;
+  preferencesFor(orgId: string, userIds: string[], kind: NotificationKind): Promise<Record<string, NotificationPreference>>;
+  listNotifications(orgId: string, userId: string, query: NotificationsQuery): Promise<NotificationPage>;
+  markNotificationRead(orgId: string, userId: string, notificationId: string): Promise<Notification>;
+  markAllNotificationsRead(orgId: string, userId: string): Promise<{
+    updated: number;
+  }>;
+  notificationPreferences(orgId: string, userId: string): Promise<NotificationPreference[]>;
+  setNotificationPreferences(orgId: string, userId: string, preferences: NotificationPreference[]): Promise<NotificationPreference[]>;
+}
+//#endregion
+export { NotificationServiceImpl, defaultPreference };
+//# sourceMappingURL=notifications.d.ts.map

package/dist/identity/notifications.js

@@ -0,0 +1,101 @@
+import { notificationKindSchema } from "../types/schemas/identity.js";
+import { genId } from "../shared/id.js";
+import { NotFoundError } from "../shared/errors.js";
+import { noopLogger } from "../shared/logger.js";
+//#region src/identity/notifications.ts
+function defaultPreference(kind) {
+	return {
+		kind,
+		inApp: true,
+		email: true
+	};
+}
+var NotificationServiceImpl = class {
+	repo;
+	logger;
+	constructor(params) {
+		this.repo = params.repo;
+		this.logger = params.logger ?? noopLogger;
+	}
+	async notify(orgId, notifications) {
+		if (notifications.length === 0) return;
+		const now = /* @__PURE__ */ new Date();
+		const rows = notifications.map((notification) => ({
+			...notification,
+			orgId,
+			id: genId("notification"),
+			createdAt: now,
+			readAt: null
+		}));
+		await this.repo.insert(orgId, rows);
+		this.logger.info("notifications added", {
+			orgId,
+			kinds: [...new Set(rows.map((row) => row.kind))],
+			count: rows.length
+		});
+	}
+	async preferencesFor(orgId, userIds, kind) {
+		const unique = [...new Set(userIds)];
+		const stored = await this.repo.preferences(orgId, unique);
+		const result = {};
+		for (const userId of unique) result[userId] = defaultPreference(kind);
+		for (const row of stored) if (row.kind === kind) result[row.userId] = {
+			kind,
+			inApp: row.inApp,
+			email: row.email
+		};
+		return result;
+	}
+	async listNotifications(orgId, userId, query) {
+		const page = await this.repo.page(orgId, userId, query);
+		this.logger.debug("notifications listed", {
+			orgId,
+			userId,
+			count: page.rows.length
+		});
+		return {
+			...page,
+			page: query.page,
+			pageSize: query.pageSize
+		};
+	}
+	async markNotificationRead(orgId, userId, notificationId) {
+		const row = await this.repo.markRead(orgId, userId, notificationId, /* @__PURE__ */ new Date());
+		if (!row) throw new NotFoundError("Notification", notificationId);
+		return row;
+	}
+	async markAllNotificationsRead(orgId, userId) {
+		const updated = await this.repo.markAllRead(orgId, userId, /* @__PURE__ */ new Date());
+		this.logger.debug("notifications marked read", {
+			orgId,
+			userId,
+			updated
+		});
+		return { updated };
+	}
+	async notificationPreferences(orgId, userId) {
+		const stored = await this.repo.preferences(orgId, [userId]);
+		const byKind = new Map(stored.map((row) => [row.kind, row]));
+		return notificationKindSchema.options.map((kind) => {
+			const row = byKind.get(kind);
+			return row ? {
+				kind,
+				inApp: row.inApp,
+				email: row.email
+			} : defaultPreference(kind);
+		});
+	}
+	async setNotificationPreferences(orgId, userId, preferences) {
+		await this.repo.upsertPreferences(orgId, userId, preferences);
+		this.logger.info("notification preferences updated", {
+			orgId,
+			userId,
+			kinds: preferences.map((pref) => pref.kind)
+		});
+		return this.notificationPreferences(orgId, userId);
+	}
+};
+//#endregion
+export { NotificationServiceImpl, defaultPreference };
+
+//# sourceMappingURL=notifications.js.map

package/dist/identity/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.js","names":[],"sources":["../../src/identity/notifications.ts"],"sourcesContent":["import { NotFoundError } from '../shared/errors.js';\nimport { genId } from '../shared/id.js';\nimport { noopLogger } from '../shared/logger.js';\nimport type { Logger } from '../shared/ports.js';\nimport { notificationKindSchema } from '../types/schemas/identity.js';\nimport type { Notification, NotificationKind, NotificationPreference } from './model.js';\nimport type {\n  NewNotification,\n  NotificationPage,\n  NotificationService,\n  NotificationsQuery,\n  NotificationsRepository,\n} from './ports.js';\n\nexport function defaultPreference(kind: NotificationKind): NotificationPreference {\n  return { kind, inApp: true, email: true };\n}\n\nexport class NotificationServiceImpl implements NotificationService {\n  private readonly repo: NotificationsRepository;\n  private readonly logger: Logger;\n\n  constructor(params: { repo: NotificationsRepository; logger?: Logger }) {\n    this.repo = params.repo;\n    this.logger = params.logger ?? noopLogger;\n  }\n\n  async notify(orgId: string, notifications: NewNotification[]): Promise<void> {\n    if (notifications.length === 0) {\n      return;\n    }\n    const now = new Date();\n    const rows: Notification[] = notifications.map((notification) => ({\n      ...notification,\n      orgId,\n      id: genId('notification'),\n      createdAt: now,\n      readAt: null,\n    }));\n    await this.repo.insert(orgId, rows);\n    this.logger.info('notifications added', {\n      orgId,\n      kinds: [...new Set(rows.map((row) => row.kind))],\n      count: rows.length,\n    });\n  }\n\n  async preferencesFor(\n    orgId: string,\n    userIds: string[],\n    kind: NotificationKind,\n  ): Promise<Record<string, NotificationPreference>> {\n    const unique = [...new Set(userIds)];\n    const stored = await this.repo.preferences(orgId, unique);\n    const result: Record<string, NotificationPreference> = {};\n    for (const userId of unique) {\n      result[userId] = defaultPreference(kind);\n    }\n    for (const row of stored) {\n      if (row.kind === kind) {\n        result[row.userId] = { kind, inApp: row.inApp, email: row.email };\n      }\n    }\n    return result;\n  }\n\n  async listNotifications(\n    orgId: string,\n    userId: string,\n    query: NotificationsQuery,\n  ): Promise<NotificationPage> {\n    const page = await this.repo.page(orgId, userId, query);\n    this.logger.debug('notifications listed', { orgId, userId, count: page.rows.length });\n    return { ...page, page: query.page, pageSize: query.pageSize };\n  }\n\n  async markNotificationRead(\n    orgId: string,\n    userId: string,\n    notificationId: string,\n  ): Promise<Notification> {\n    const row = await this.repo.markRead(orgId, userId, notificationId, new Date());\n    if (!row) {\n      throw new NotFoundError('Notification', notificationId);\n    }\n    return row;\n  }\n\n  async markAllNotificationsRead(orgId: string, userId: string): Promise<{ updated: number }> {\n    const updated = await this.repo.markAllRead(orgId, userId, new Date());\n    this.logger.debug('notifications marked read', { orgId, userId, updated });\n    return { updated };\n  }\n\n  async notificationPreferences(orgId: string, userId: string): Promise<NotificationPreference[]> {\n    const stored = await this.repo.preferences(orgId, [userId]);\n    const byKind = new Map(stored.map((row) => [row.kind, row]));\n    return notificationKindSchema.options.map((kind) => {\n      const row = byKind.get(kind);\n      return row ? { kind, inApp: row.inApp, email: row.email } : defaultPreference(kind);\n    });\n  }\n\n  async setNotificationPreferences(\n    orgId: string,\n    userId: string,\n    preferences: NotificationPreference[],\n  ): Promise<NotificationPreference[]> {\n    await this.repo.upsertPreferences(orgId, userId, preferences);\n    this.logger.info('notification preferences updated', {\n      orgId,\n      userId,\n      kinds: preferences.map((pref) => pref.kind),\n    });\n    return this.notificationPreferences(orgId, userId);\n  }\n}\n"],"mappings":";;;;;AAcA,SAAgB,kBAAkB,MAAgD;CAChF,OAAO;EAAE;EAAM,OAAO;EAAM,OAAO;CAAK;AAC1C;AAEA,IAAa,0BAAb,MAAoE;CAClE;CACA;CAEA,YAAY,QAA4D;EACtE,KAAK,OAAO,OAAO;EACnB,KAAK,SAAS,OAAO,UAAU;CACjC;CAEA,MAAM,OAAO,OAAe,eAAiD;EAC3E,IAAI,cAAc,WAAW,GAC3B;EAEF,MAAM,sBAAM,IAAI,KAAK;EACrB,MAAM,OAAuB,cAAc,KAAK,kBAAkB;GAChE,GAAG;GACH;GACA,IAAI,MAAM,cAAc;GACxB,WAAW;GACX,QAAQ;EACV,EAAE;EACF,MAAM,KAAK,KAAK,OAAO,OAAO,IAAI;EAClC,KAAK,OAAO,KAAK,uBAAuB;GACtC;GACA,OAAO,CAAC,GAAG,IAAI,IAAI,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC;GAC/C,OAAO,KAAK;EACd,CAAC;CACH;CAEA,MAAM,eACJ,OACA,SACA,MACiD;EACjD,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC;EACnC,MAAM,SAAS,MAAM,KAAK,KAAK,YAAY,OAAO,MAAM;EACxD,MAAM,SAAiD,CAAC;EACxD,KAAK,MAAM,UAAU,QACnB,OAAO,UAAU,kBAAkB,IAAI;EAEzC,KAAK,MAAM,OAAO,QAChB,IAAI,IAAI,SAAS,MACf,OAAO,IAAI,UAAU;GAAE;GAAM,OAAO,IAAI;GAAO,OAAO,IAAI;EAAM;EAGpE,OAAO;CACT;CAEA,MAAM,kBACJ,OACA,QACA,OAC2B;EAC3B,MAAM,OAAO,MAAM,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK;EACtD,KAAK,OAAO,MAAM,wBAAwB;GAAE;GAAO;GAAQ,OAAO,KAAK,KAAK;EAAO,CAAC;EACpF,OAAO;GAAE,GAAG;GAAM,MAAM,MAAM;GAAM,UAAU,MAAM;EAAS;CAC/D;CAEA,MAAM,qBACJ,OACA,QACA,gBACuB;EACvB,MAAM,MAAM,MAAM,KAAK,KAAK,SAAS,OAAO,QAAQ,gCAAgB,IAAI,KAAK,CAAC;EAC9E,IAAI,CAAC,KACH,MAAM,IAAI,cAAc,gBAAgB,cAAc;EAExD,OAAO;CACT;CAEA,MAAM,yBAAyB,OAAe,QAA8C;EAC1F,MAAM,UAAU,MAAM,KAAK,KAAK,YAAY,OAAO,wBAAQ,IAAI,KAAK,CAAC;EACrE,KAAK,OAAO,MAAM,6BAA6B;GAAE;GAAO;GAAQ;EAAQ,CAAC;EACzE,OAAO,EAAE,QAAQ;CACnB;CAEA,MAAM,wBAAwB,OAAe,QAAmD;EAC9F,MAAM,SAAS,MAAM,KAAK,KAAK,YAAY,OAAO,CAAC,MAAM,CAAC;EAC1D,MAAM,SAAS,IAAI,IAAI,OAAO,KAAK,QAAQ,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC;EAC3D,OAAO,uBAAuB,QAAQ,KAAK,SAAS;GAClD,MAAM,MAAM,OAAO,IAAI,IAAI;GAC3B,OAAO,MAAM;IAAE;IAAM,OAAO,IAAI;IAAO,OAAO,IAAI;GAAM,IAAI,kBAAkB,IAAI;EACpF,CAAC;CACH;CAEA,MAAM,2BACJ,OACA,QACA,aACmC;EACnC,MAAM,KAAK,KAAK,kBAAkB,OAAO,QAAQ,WAAW;EAC5D,KAAK,OAAO,KAAK,oCAAoC;GACnD;GACA;GACA,OAAO,YAAY,KAAK,SAAS,KAAK,IAAI;EAC5C,CAAC;EACD,OAAO,KAAK,wBAAwB,OAAO,MAAM;CACnD;AACF"}

package/dist/identity/ports.d.ts

@@ -1,9 +1,21 @@
-import { CreateUserInput, UpdateUserInput } from "../types/schemas/identity.js";
+import { JsonValue } from "../types/shared.js";
+import { CreateUserInput, Notification, NotificationKind, NotificationPreference, UpdateUserInput, UserProfile, UserProfileView } from "../types/schemas/identity.js";
 import { User } from "../types/identity.js";
+import "../types/index.js";
 import { OutboxAppender, UnitOfWork } from "../shared/ports.js";
 import "./model.js";
 import "./types.js";
 //#region src/identity/ports.d.ts
+interface UpdateProfileInput {
+  displayName?: string | null;
+  headline?: string | null;
+  bio?: string | null;
+  imageAssetId?: string | null;
+  extra?: JsonValue;
+}
+interface ProfilePatch extends UpdateProfileInput {
+  imageAssetOrgId?: string | null;
+}
 interface UserProvisioner {
   createUser(input: CreateUserInput): Promise<User>;
   /** Auth signup entry point. Claims a person provisioned at invite time by
@@ -14,6 +26,9 @@ interface UserProvisioner {
     email: string;
     url: string;
   }): Promise<void>;
+  sendPasswordChanged(input: {
+    email: string;
+  }): Promise<void>;
   sendMagicLink(input: {
     email: string;
     url: string;
@@ -40,13 +55,71 @@ interface SessionAdmin {
   /** Points the caller's current session at `orgId`.  */
   stampActiveOrganization(headers: AuthHeaders, orgId: string): Promise<boolean>;
 }
-interface IdentityService extends UserProvisioner, UserResolver, UserEditor {}
+interface NewNotification {
+  userId: string;
+  kind: NotificationKind;
+  actorOrgUserId: string | null;
+  communityId: string | null;
+  spaceId: string | null;
+  postId: string | null;
+  commentId: string | null;
+  chatId: string | null;
+  messageId: string | null;
+}
+interface NotificationsQuery {
+  page: number;
+  pageSize: number;
+}
+interface NotificationPage {
+  rows: Notification[];
+  total: number;
+  page: number;
+  pageSize: number;
+  unreadCount: number;
+}
+/** What automations calls to tell people. */
+interface NotificationDesk {
+  notify(orgId: string, notifications: NewNotification[]): Promise<void>;
+  preferencesFor(orgId: string, userIds: string[], kind: NotificationKind): Promise<Record<string, NotificationPreference>>;
+}
+/** A person's own notifications and preferences. */
+interface NotificationInbox {
+  listNotifications(orgId: string, userId: string, query: NotificationsQuery): Promise<NotificationPage>;
+  markNotificationRead(orgId: string, userId: string, notificationId: string): Promise<Notification>;
+  markAllNotificationsRead(orgId: string, userId: string): Promise<{
+    updated: number;
+  }>;
+  notificationPreferences(orgId: string, userId: string): Promise<NotificationPreference[]>;
+  setNotificationPreferences(orgId: string, userId: string, preferences: NotificationPreference[]): Promise<NotificationPreference[]>;
+}
+interface NotificationService extends NotificationDesk, NotificationInbox {}
+interface IdentityService extends UserProvisioner, UserResolver, UserEditor {
+  profileOf(orgId: string, userId: string): Promise<UserProfileView>;
+  displayName(userId: string | null): Promise<string>;
+  updateProfile(orgId: string, userId: string, actorUserId: string, orgUserId: string, patch: UpdateProfileInput): Promise<UserProfileView>;
+}
 interface IdentityRepository {
   insertUser(input: CreateUserInput): Promise<User>;
   updateUser(id: string, input: UpdateUserInput): Promise<User | null>;
   findUserById(id: string): Promise<User | null>;
   findUserByExternalId(externalId: string): Promise<User | null>;
   findUserByEmail(email: string): Promise<User | null>;
+  findProfile(userId: string): Promise<UserProfile | null>;
+  upsertProfile(userId: string, patch: ProfilePatch): Promise<UserProfile>;
+}
+interface NotificationsRepository {
+  insert(orgId: string, rows: Notification[]): Promise<void>;
+  page(orgId: string, userId: string, query: NotificationsQuery): Promise<{
+    rows: Notification[];
+    total: number;
+    unreadCount: number;
+  }>;
+  markRead(orgId: string, userId: string, notificationId: string, at: Date): Promise<Notification | null>;
+  markAllRead(orgId: string, userId: string, at: Date): Promise<number>;
+  preferences(orgId: string, userIds: string[]): Promise<(NotificationPreference & {
+    userId: string;
+  })[]>;
+  upsertPreferences(orgId: string, userId: string, preferences: NotificationPreference[]): Promise<void>;
 }
 interface IdentityTxScope {
   identity: IdentityRepository;
@@ -54,5 +127,5 @@ interface IdentityTxScope {
 }
 type IdentityUnitOfWork = UnitOfWork<IdentityTxScope>;
 //#endregion
-export { AuthHeaders, IdentityRepository, IdentityService, IdentityTxScope, IdentityUnitOfWork, SessionAdmin, UserEditor, UserProvisioner, UserResolver };
+export { AuthHeaders, IdentityRepository, IdentityService, IdentityTxScope, IdentityUnitOfWork, NewNotification, NotificationDesk, NotificationInbox, NotificationPage, NotificationService, NotificationsQuery, NotificationsRepository, ProfilePatch, SessionAdmin, UpdateProfileInput, UserEditor, UserProvisioner, UserResolver };
 //# sourceMappingURL=ports.d.ts.map

package/dist/identity/service.d.ts

@@ -1,22 +1,29 @@
 import { Logger } from "../types/ports.js";
-import { CreateUserInput, UpdateUserInput } from "../types/schemas/identity.js";
+import { CreateUserInput, UpdateUserInput, UserProfileView } from "../types/schemas/identity.js";
 import { User } from "../types/identity.js";
 import "../shared/ports.js";
-import { Mailer } from "../shared/mailer.js";
+import { FileUrls } from "../assets/file-urls.js";
+import { MemberImageReader } from "../assets/ports.js";
+import "../assets/index.js";
 import "./model.js";
 import "./types.js";
-import { IdentityRepository, IdentityService, IdentityUnitOfWork } from "./ports.js";
+import { IdentityRepository, IdentityService, IdentityUnitOfWork, UpdateProfileInput } from "./ports.js";
+import { Mailer } from "../shared/mailer.js";
 //#region src/identity/service.d.ts
 declare class IdentityServiceImpl implements IdentityService {
   private readonly repo;
   private readonly logger;
   private readonly uow;
   private readonly mailer;
+  private readonly images;
+  private readonly fileUrls;
   constructor(input: {
     repo: IdentityRepository;
     logger?: Logger;
     mailer: Mailer;
     uow: IdentityUnitOfWork;
+    images: MemberImageReader;
+    fileUrls: FileUrls;
   });
   createUser(input: CreateUserInput): Promise<User>;
   linkOrCreateUser(input: CreateUserInput): Promise<User>;
@@ -28,10 +35,17 @@ declare class IdentityServiceImpl implements IdentityService {
     email: string;
     url: string;
   }): Promise<void>;
+  sendPasswordChanged(input: {
+    email: string;
+  }): Promise<void>;
   sendMagicLink(input: {
     email: string;
     url: string;
   }): Promise<void>;
+  profileOf(orgId: string, userId: string): Promise<UserProfileView>;
+  private view;
+  displayName(userId: string | null): Promise<string>;
+  updateProfile(orgId: string, userId: string, actorUserId: string, orgUserId: string, patch: UpdateProfileInput): Promise<UserProfileView>;
 }
 //#endregion
 export { IdentityServiceImpl };

package/dist/identity/service.js

@@ -1,17 +1,23 @@
+import { genId } from "../shared/id.js";
+import { ConflictError, ForbiddenError, NotFoundError } from "../shared/errors.js";
 import { noopLogger } from "../shared/logger.js";
-import { ConflictError, NotFoundError } from "../shared/errors.js";
 import { identityEvents } from "./events.js";
 //#region src/identity/service.ts
+const UNNAMED = "A member";
 var IdentityServiceImpl = class {
 	repo;
 	logger;
 	uow;
 	mailer;
+	images;
+	fileUrls;
 	constructor(input) {
 		this.repo = input.repo;
 		this.mailer = input.mailer;
 		this.logger = input.logger ?? noopLogger;
 		this.uow = input.uow;
+		this.images = input.images;
+		this.fileUrls = input.fileUrls;
 	}
 	async createUser(input) {
 		const created = await this.uow.run(async ({ identity, outbox }) => {
@@ -22,12 +28,19 @@ var IdentityServiceImpl = class {
 			})]);
 			return user;
 		});
-		this.logger.info("user created", { user: created });
+		this.logger.info("user created", { userId: created.id });
 		return created;
 	}
 	async linkOrCreateUser(input) {
 		const existing = await this.repo.findUserByEmail(input.email);
-		if (!existing) return this.createUser(input);
+		if (!existing) {
+			const id = input.id ?? genId("user");
+			return this.createUser({
+				...input,
+				id,
+				externalId: id
+			});
+		}
 		if (existing.externalId !== null) throw new ConflictError("That email already has an account");
 		const linked = await this.uow.run(async ({ identity, outbox }) => {
 			const user = await identity.updateUser(existing.id, {
@@ -41,7 +54,7 @@ var IdentityServiceImpl = class {
 			})]);
 			return user;
 		});
-		this.logger.info("user linked to auth account", { user: linked });
+		this.logger.info("user linked to auth account", { userId: linked.id });
 		return linked;
 	}
 	async updateUser(id, input) {
@@ -54,7 +67,7 @@ var IdentityServiceImpl = class {
 			})]);
 			return user;
 		});
-		this.logger.info("user updated", { user: updated });
+		this.logger.info("user updated", { userId: updated.id });
 		return updated;
 	}
 	async getUserByExternalId(externalId) {
@@ -69,9 +82,64 @@ var IdentityServiceImpl = class {
 	async sendPasswordReset(input) {
 		await this.mailer.send(input.email, "passwordReset", { resetUrl: input.url });
 	}
+	async sendPasswordChanged(input) {
+		await this.mailer.send(input.email, "passwordChanged", {});
+	}
 	async sendMagicLink(input) {
 		await this.mailer.send(input.email, "magicLink", { url: input.url });
 	}
+	async profileOf(orgId, userId) {
+		const stored = await this.repo.findProfile(userId);
+		if (stored) return this.view(orgId, stored);
+		const never = /* @__PURE__ */ new Date(0);
+		return {
+			userId,
+			displayName: null,
+			headline: null,
+			bio: null,
+			imageAssetOrgId: null,
+			imageAssetId: null,
+			imageUrl: null,
+			extra: {},
+			createdAt: never,
+			updatedAt: never
+		};
+	}
+	view(orgId, profile) {
+		const imageAssetId = profile.imageAssetOrgId === orgId ? profile.imageAssetId : null;
+		return {
+			...profile,
+			imageUrl: imageAssetId ? this.fileUrls.memberUpload(imageAssetId) : null
+		};
+	}
+	async displayName(userId) {
+		if (userId === null) return UNNAMED;
+		const [profile, user] = await Promise.all([this.repo.findProfile(userId), this.repo.findUserById(userId)]);
+		const named = profile?.displayName?.trim();
+		if (named) return named;
+		return [user?.firstName, user?.lastName].filter(Boolean).join(" ").trim() || UNNAMED;
+	}
+	async updateProfile(orgId, userId, actorUserId, orgUserId, patch) {
+		if (actorUserId !== userId) throw new ForbiddenError("You can only update your own profile");
+		if (!await this.repo.findUserById(userId)) throw new NotFoundError("User", userId);
+		if (patch.imageAssetId != null) {
+			if (!await this.images.ownsImage(orgId, patch.imageAssetId, orgUserId)) {
+				this.logger.debug("profile photo refused", {
+					userId,
+					orgUserId,
+					assetId: patch.imageAssetId
+				});
+				throw new NotFoundError("Asset", patch.imageAssetId);
+			}
+		}
+		const imageAssetOrgId = patch.imageAssetId === void 0 ? void 0 : patch.imageAssetId === null ? null : orgId;
+		const profile = await this.repo.upsertProfile(userId, {
+			...patch,
+			imageAssetOrgId
+		});
+		this.logger.info("profile updated", { userId });
+		return this.view(orgId, profile);
+	}
 };
 //#endregion
 export { IdentityServiceImpl };

package/dist/identity/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","names":[],"sources":["../../src/identity/service.ts"],"sourcesContent":["import type { IdentityRepository, IdentityService, IdentityUnitOfWork } from './ports.js';\nimport type { User } from './model.js';\nimport type { CreateUserInput, UpdateUserInput } from './types.js';\nimport type { Logger } from '../shared/ports.js';\nimport { noopLogger } from '../shared/logger.js';\nimport { ConflictError, NotFoundError } from '../shared/errors.js';\nimport type { Mailer } from '../shared/mailer.js';\nimport { identityEvents } from './events.js';\n\nexport class IdentityServiceImpl implements IdentityService {\n  private readonly repo: IdentityRepository;\n  private readonly logger: Logger;\n  private readonly uow: IdentityUnitOfWork;\n  private readonly mailer: Pick<Mailer, 'send'>;\n\n  constructor(input: {\n    repo: IdentityRepository;\n    logger?: Logger;\n    mailer: Mailer;\n    uow: IdentityUnitOfWork;\n  }) {\n    this.repo = input.repo;\n    this.mailer = input.mailer;\n    this.logger = input.logger ?? noopLogger;\n    this.uow = input.uow;\n  }\n\n  async createUser(input: CreateUserInput): Promise<User> {\n    const created = await this.uow.run(async ({ identity, outbox }) => {\n      const user = await identity.insertUser(input);\n      await outbox.append([\n        identityEvents.userCreated.make({ orgId: '-', data: user }),\n      ]);\n      return user;\n    });\n    this.logger.info('user created', { user: created });\n    return created;\n  }\n\n  async linkOrCreateUser(input: CreateUserInput): Promise<User> {\n    const existing = await this.repo.findUserByEmail(input.email);\n    if (!existing) {\n      return this.createUser(input);\n    }\n    if (existing.externalId !== null) {\n      throw new ConflictError('That email already has an account');\n    }\n    // Existing user without external link, so invited. update the user with the\n    // id.\n    const linked = await this.uow.run(async ({ identity, outbox }) => {\n      const user = await identity.updateUser(existing.id, {\n        externalId: existing.id,\n        ...(input.firstName !== undefined && { firstName: input.firstName }),\n        ...(input.lastName !== undefined && { lastName: input.lastName }),\n      });\n      await outbox.append([\n        identityEvents.userUpdated.make({ orgId: '-', data: user! }),\n      ]);\n      return user!;\n    });\n    this.logger.info('user linked to auth account', { user: linked });\n    return linked;\n  }\n\n  async updateUser(id: string, input: UpdateUserInput): Promise<User> {\n    const person = await this.repo.findUserById(id);\n    if (!person) {\n      throw new NotFoundError('User', id);\n    }\n\n    const updated = await this.uow.run(async ({ identity, outbox }) => {\n      const user = await identity.updateUser(id, input);\n      await outbox.append([\n        identityEvents.userUpdated.make({ orgId: '-', data: user! }),\n      ]);\n      return user!;\n    });\n    this.logger.info('user updated', { user: updated });\n    return updated;\n  }\n\n  async getUserByExternalId(externalId: string): Promise<User | null> {\n    return this.repo.findUserByExternalId(externalId);\n  }\n\n  async getUserByEmail(email: string): Promise<User | null> {\n    return this.repo.findUserByEmail(email);\n  }\n\n  async getUserById(id: string): Promise<User | null> {\n    return this.repo.findUserById(id);\n  }\n\n  async sendPasswordReset(input: { email: string; url: string }): Promise<void> {\n    await this.mailer.send(input.email, 'passwordReset', { resetUrl: input.url });\n  }\n\n  async sendMagicLink(input: { email: string; url: string }): Promise<void> {\n    await this.mailer.send(input.email, 'magicLink', { url: input.url });\n  }\n}\n"],"mappings":";;;;AASA,IAAa,sBAAb,MAA4D;CAC1D;CACA;CACA;CACA;CAEA,YAAY,OAKT;EACD,KAAK,OAAO,MAAM;EAClB,KAAK,SAAS,MAAM;EACpB,KAAK,SAAS,MAAM,UAAU;EAC9B,KAAK,MAAM,MAAM;CACnB;CAEA,MAAM,WAAW,OAAuC;EACtD,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,UAAU,aAAa;GACjE,MAAM,OAAO,MAAM,SAAS,WAAW,KAAK;GAC5C,MAAM,OAAO,OAAO,CAClB,eAAe,YAAY,KAAK;IAAE,OAAO;IAAK,MAAM;GAAK,CAAC,CAC5D,CAAC;GACD,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,gBAAgB,EAAE,MAAM,QAAQ,CAAC;EAClD,OAAO;CACT;CAEA,MAAM,iBAAiB,OAAuC;EAC5D,MAAM,WAAW,MAAM,KAAK,KAAK,gBAAgB,MAAM,KAAK;EAC5D,IAAI,CAAC,UACH,OAAO,KAAK,WAAW,KAAK;EAE9B,IAAI,SAAS,eAAe,MAC1B,MAAM,IAAI,cAAc,mCAAmC;EAI7D,MAAM,SAAS,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,UAAU,aAAa;GAChE,MAAM,OAAO,MAAM,SAAS,WAAW,SAAS,IAAI;IAClD,YAAY,SAAS;IACrB,GAAI,MAAM,cAAc,KAAA,KAAa,EAAE,WAAW,MAAM,UAAU;IAClE,GAAI,MAAM,aAAa,KAAA,KAAa,EAAE,UAAU,MAAM,SAAS;GACjE,CAAC;GACD,MAAM,OAAO,OAAO,CAClB,eAAe,YAAY,KAAK;IAAE,OAAO;IAAK,MAAM;GAAM,CAAC,CAC7D,CAAC;GACD,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,+BAA+B,EAAE,MAAM,OAAO,CAAC;EAChE,OAAO;CACT;CAEA,MAAM,WAAW,IAAY,OAAuC;EAElE,IAAI,CAAC,MADgB,KAAK,KAAK,aAAa,EAAE,GAE5C,MAAM,IAAI,cAAc,QAAQ,EAAE;EAGpC,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,UAAU,aAAa;GACjE,MAAM,OAAO,MAAM,SAAS,WAAW,IAAI,KAAK;GAChD,MAAM,OAAO,OAAO,CAClB,eAAe,YAAY,KAAK;IAAE,OAAO;IAAK,MAAM;GAAM,CAAC,CAC7D,CAAC;GACD,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,gBAAgB,EAAE,MAAM,QAAQ,CAAC;EAClD,OAAO;CACT;CAEA,MAAM,oBAAoB,YAA0C;EAClE,OAAO,KAAK,KAAK,qBAAqB,UAAU;CAClD;CAEA,MAAM,eAAe,OAAqC;EACxD,OAAO,KAAK,KAAK,gBAAgB,KAAK;CACxC;CAEA,MAAM,YAAY,IAAkC;EAClD,OAAO,KAAK,KAAK,aAAa,EAAE;CAClC;CAEA,MAAM,kBAAkB,OAAsD;EAC5E,MAAM,KAAK,OAAO,KAAK,MAAM,OAAO,iBAAiB,EAAE,UAAU,MAAM,IAAI,CAAC;CAC9E;CAEA,MAAM,cAAc,OAAsD;EACxE,MAAM,KAAK,OAAO,KAAK,MAAM,OAAO,aAAa,EAAE,KAAK,MAAM,IAAI,CAAC;CACrE;AACF"}
+{"version":3,"file":"service.js","names":[],"sources":["../../src/identity/service.ts"],"sourcesContent":["import type { IdentityRepository, IdentityService, IdentityUnitOfWork } from './ports.js';\nimport type { User, UserProfile, UserProfileView } from './model.js';\nimport type { UpdateProfileInput } from './ports.js';\nimport type { CreateUserInput, UpdateUserInput } from './types.js';\nimport type { Logger } from '../shared/ports.js';\nimport { noopLogger } from '../shared/logger.js';\nimport { genId } from '../shared/id.js';\nimport { ConflictError, ForbiddenError, NotFoundError } from '../shared/errors.js';\nimport type { Mailer } from '../shared/mailer.js';\nimport type { FileUrls, MemberImageReader } from '../assets/index.js';\nimport { identityEvents } from './events.js';\n\nconst UNNAMED = 'A member';\n\nexport class IdentityServiceImpl implements IdentityService {\n  private readonly repo: IdentityRepository;\n  private readonly logger: Logger;\n  private readonly uow: IdentityUnitOfWork;\n  private readonly mailer: Pick<Mailer, 'send'>;\n  private readonly images: MemberImageReader;\n  private readonly fileUrls: FileUrls;\n\n  constructor(input: {\n    repo: IdentityRepository;\n    logger?: Logger;\n    mailer: Mailer;\n    uow: IdentityUnitOfWork;\n    images: MemberImageReader;\n    fileUrls: FileUrls;\n  }) {\n    this.repo = input.repo;\n    this.mailer = input.mailer;\n    this.logger = input.logger ?? noopLogger;\n    this.uow = input.uow;\n    this.images = input.images;\n    this.fileUrls = input.fileUrls;\n  }\n\n  async createUser(input: CreateUserInput): Promise<User> {\n    const created = await this.uow.run(async ({ identity, outbox }) => {\n      const user = await identity.insertUser(input);\n      await outbox.append([identityEvents.userCreated.make({ orgId: '-', data: user })]);\n      return user;\n    });\n    this.logger.info('user created', { userId: created.id });\n    return created;\n  }\n\n  async linkOrCreateUser(input: CreateUserInput): Promise<User> {\n    const existing = await this.repo.findUserByEmail(input.email);\n    if (!existing) {\n      const id = input.id ?? genId('user');\n      return this.createUser({ ...input, id, externalId: id });\n    }\n    if (existing.externalId !== null) {\n      throw new ConflictError('That email already has an account');\n    }\n    // Existing user without external link, so invited. update the user with the\n    // id.\n    const linked = await this.uow.run(async ({ identity, outbox }) => {\n      const user = await identity.updateUser(existing.id, {\n        externalId: existing.id,\n        ...(input.firstName !== undefined && { firstName: input.firstName }),\n        ...(input.lastName !== undefined && { lastName: input.lastName }),\n      });\n      await outbox.append([identityEvents.userUpdated.make({ orgId: '-', data: user! })]);\n      return user!;\n    });\n    this.logger.info('user linked to auth account', { userId: linked.id });\n    return linked;\n  }\n\n  async updateUser(id: string, input: UpdateUserInput): Promise<User> {\n    const person = await this.repo.findUserById(id);\n    if (!person) {\n      throw new NotFoundError('User', id);\n    }\n\n    const updated = await this.uow.run(async ({ identity, outbox }) => {\n      const user = await identity.updateUser(id, input);\n      await outbox.append([identityEvents.userUpdated.make({ orgId: '-', data: user! })]);\n      return user!;\n    });\n    this.logger.info('user updated', { userId: updated.id });\n    return updated;\n  }\n\n  async getUserByExternalId(externalId: string): Promise<User | null> {\n    return this.repo.findUserByExternalId(externalId);\n  }\n\n  async getUserByEmail(email: string): Promise<User | null> {\n    return this.repo.findUserByEmail(email);\n  }\n\n  async getUserById(id: string): Promise<User | null> {\n    return this.repo.findUserById(id);\n  }\n\n  async sendPasswordReset(input: { email: string; url: string }): Promise<void> {\n    await this.mailer.send(input.email, 'passwordReset', { resetUrl: input.url });\n  }\n\n  async sendPasswordChanged(input: { email: string }): Promise<void> {\n    await this.mailer.send(input.email, 'passwordChanged', {});\n  }\n\n  async sendMagicLink(input: { email: string; url: string }): Promise<void> {\n    await this.mailer.send(input.email, 'magicLink', { url: input.url });\n  }\n\n  async profileOf(orgId: string, userId: string): Promise<UserProfileView> {\n    const stored = await this.repo.findProfile(userId);\n    if (stored) {\n      return this.view(orgId, stored);\n    }\n    const never = new Date(0);\n    return {\n      userId,\n      displayName: null,\n      headline: null,\n      bio: null,\n      imageAssetOrgId: null,\n      imageAssetId: null,\n      imageUrl: null,\n      extra: {},\n      createdAt: never,\n      updatedAt: never,\n    };\n  }\n\n  private view(orgId: string, profile: UserProfile): UserProfileView {\n    const imageAssetId = profile.imageAssetOrgId === orgId ? profile.imageAssetId : null;\n    return { ...profile, imageUrl: imageAssetId ? this.fileUrls.memberUpload(imageAssetId) : null };\n  }\n\n  async displayName(userId: string | null): Promise<string> {\n    if (userId === null) {\n      return UNNAMED;\n    }\n    const [profile, user] = await Promise.all([\n      this.repo.findProfile(userId),\n      this.repo.findUserById(userId),\n    ]);\n    const named = profile?.displayName?.trim();\n    if (named) {\n      return named;\n    }\n    const composed = [user?.firstName, user?.lastName].filter(Boolean).join(' ').trim();\n    return composed || UNNAMED;\n  }\n\n  async updateProfile(\n    orgId: string,\n    userId: string,\n    actorUserId: string,\n    orgUserId: string,\n    patch: UpdateProfileInput,\n  ): Promise<UserProfileView> {\n    if (actorUserId !== userId) {\n      throw new ForbiddenError('You can only update your own profile');\n    }\n    const user = await this.repo.findUserById(userId);\n    if (!user) {\n      throw new NotFoundError('User', userId);\n    }\n    if (patch.imageAssetId != null) {\n      const owned = await this.images.ownsImage(orgId, patch.imageAssetId, orgUserId);\n      if (!owned) {\n        this.logger.debug('profile photo refused', {\n          userId,\n          orgUserId,\n          assetId: patch.imageAssetId,\n        });\n        throw new NotFoundError('Asset', patch.imageAssetId);\n      }\n    }\n    const imageAssetOrgId =\n      patch.imageAssetId === undefined ? undefined : patch.imageAssetId === null ? null : orgId;\n    const profile = await this.repo.upsertProfile(userId, { ...patch, imageAssetOrgId });\n    this.logger.info('profile updated', { userId });\n    return this.view(orgId, profile);\n  }\n}\n"],"mappings":";;;;;AAYA,MAAM,UAAU;AAEhB,IAAa,sBAAb,MAA4D;CAC1D;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,OAOT;EACD,KAAK,OAAO,MAAM;EAClB,KAAK,SAAS,MAAM;EACpB,KAAK,SAAS,MAAM,UAAU;EAC9B,KAAK,MAAM,MAAM;EACjB,KAAK,SAAS,MAAM;EACpB,KAAK,WAAW,MAAM;CACxB;CAEA,MAAM,WAAW,OAAuC;EACtD,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,UAAU,aAAa;GACjE,MAAM,OAAO,MAAM,SAAS,WAAW,KAAK;GAC5C,MAAM,OAAO,OAAO,CAAC,eAAe,YAAY,KAAK;IAAE,OAAO;IAAK,MAAM;GAAK,CAAC,CAAC,CAAC;GACjF,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,gBAAgB,EAAE,QAAQ,QAAQ,GAAG,CAAC;EACvD,OAAO;CACT;CAEA,MAAM,iBAAiB,OAAuC;EAC5D,MAAM,WAAW,MAAM,KAAK,KAAK,gBAAgB,MAAM,KAAK;EAC5D,IAAI,CAAC,UAAU;GACb,MAAM,KAAK,MAAM,MAAM,MAAM,MAAM;GACnC,OAAO,KAAK,WAAW;IAAE,GAAG;IAAO;IAAI,YAAY;GAAG,CAAC;EACzD;EACA,IAAI,SAAS,eAAe,MAC1B,MAAM,IAAI,cAAc,mCAAmC;EAI7D,MAAM,SAAS,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,UAAU,aAAa;GAChE,MAAM,OAAO,MAAM,SAAS,WAAW,SAAS,IAAI;IAClD,YAAY,SAAS;IACrB,GAAI,MAAM,cAAc,KAAA,KAAa,EAAE,WAAW,MAAM,UAAU;IAClE,GAAI,MAAM,aAAa,KAAA,KAAa,EAAE,UAAU,MAAM,SAAS;GACjE,CAAC;GACD,MAAM,OAAO,OAAO,CAAC,eAAe,YAAY,KAAK;IAAE,OAAO;IAAK,MAAM;GAAM,CAAC,CAAC,CAAC;GAClF,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,+BAA+B,EAAE,QAAQ,OAAO,GAAG,CAAC;EACrE,OAAO;CACT;CAEA,MAAM,WAAW,IAAY,OAAuC;EAElE,IAAI,CAAC,MADgB,KAAK,KAAK,aAAa,EAAE,GAE5C,MAAM,IAAI,cAAc,QAAQ,EAAE;EAGpC,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,UAAU,aAAa;GACjE,MAAM,OAAO,MAAM,SAAS,WAAW,IAAI,KAAK;GAChD,MAAM,OAAO,OAAO,CAAC,eAAe,YAAY,KAAK;IAAE,OAAO;IAAK,MAAM;GAAM,CAAC,CAAC,CAAC;GAClF,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,gBAAgB,EAAE,QAAQ,QAAQ,GAAG,CAAC;EACvD,OAAO;CACT;CAEA,MAAM,oBAAoB,YAA0C;EAClE,OAAO,KAAK,KAAK,qBAAqB,UAAU;CAClD;CAEA,MAAM,eAAe,OAAqC;EACxD,OAAO,KAAK,KAAK,gBAAgB,KAAK;CACxC;CAEA,MAAM,YAAY,IAAkC;EAClD,OAAO,KAAK,KAAK,aAAa,EAAE;CAClC;CAEA,MAAM,kBAAkB,OAAsD;EAC5E,MAAM,KAAK,OAAO,KAAK,MAAM,OAAO,iBAAiB,EAAE,UAAU,MAAM,IAAI,CAAC;CAC9E;CAEA,MAAM,oBAAoB,OAAyC;EACjE,MAAM,KAAK,OAAO,KAAK,MAAM,OAAO,mBAAmB,CAAC,CAAC;CAC3D;CAEA,MAAM,cAAc,OAAsD;EACxE,MAAM,KAAK,OAAO,KAAK,MAAM,OAAO,aAAa,EAAE,KAAK,MAAM,IAAI,CAAC;CACrE;CAEA,MAAM,UAAU,OAAe,QAA0C;EACvE,MAAM,SAAS,MAAM,KAAK,KAAK,YAAY,MAAM;EACjD,IAAI,QACF,OAAO,KAAK,KAAK,OAAO,MAAM;EAEhC,MAAM,wBAAQ,IAAI,KAAK,CAAC;EACxB,OAAO;GACL;GACA,aAAa;GACb,UAAU;GACV,KAAK;GACL,iBAAiB;GACjB,cAAc;GACd,UAAU;GACV,OAAO,CAAC;GACR,WAAW;GACX,WAAW;EACb;CACF;CAEA,KAAa,OAAe,SAAuC;EACjE,MAAM,eAAe,QAAQ,oBAAoB,QAAQ,QAAQ,eAAe;EAChF,OAAO;GAAE,GAAG;GAAS,UAAU,eAAe,KAAK,SAAS,aAAa,YAAY,IAAI;EAAK;CAChG;CAEA,MAAM,YAAY,QAAwC;EACxD,IAAI,WAAW,MACb,OAAO;EAET,MAAM,CAAC,SAAS,QAAQ,MAAM,QAAQ,IAAI,CACxC,KAAK,KAAK,YAAY,MAAM,GAC5B,KAAK,KAAK,aAAa,MAAM,CAC/B,CAAC;EACD,MAAM,QAAQ,SAAS,aAAa,KAAK;EACzC,IAAI,OACF,OAAO;EAGT,OADiB,CAAC,MAAM,WAAW,MAAM,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAC/D,KAAK;CACrB;CAEA,MAAM,cACJ,OACA,QACA,aACA,WACA,OAC0B;EAC1B,IAAI,gBAAgB,QAClB,MAAM,IAAI,eAAe,sCAAsC;EAGjE,IAAI,CAAC,MADc,KAAK,KAAK,aAAa,MAAM,GAE9C,MAAM,IAAI,cAAc,QAAQ,MAAM;EAExC,IAAI,MAAM,gBAAgB,MAEpB;OAAA,CAAC,MADe,KAAK,OAAO,UAAU,OAAO,MAAM,cAAc,SAAS,GAClE;IACV,KAAK,OAAO,MAAM,yBAAyB;KACzC;KACA;KACA,SAAS,MAAM;IACjB,CAAC;IACD,MAAM,IAAI,cAAc,SAAS,MAAM,YAAY;GACrD;;EAEF,MAAM,kBACJ,MAAM,iBAAiB,KAAA,IAAY,KAAA,IAAY,MAAM,iBAAiB,OAAO,OAAO;EACtF,MAAM,UAAU,MAAM,KAAK,KAAK,cAAc,QAAQ;GAAE,GAAG;GAAO;EAAgB,CAAC;EACnF,KAAK,OAAO,KAAK,mBAAmB,EAAE,OAAO,CAAC;EAC9C,OAAO,KAAK,KAAK,OAAO,OAAO;CACjC;AACF"}

package/dist/integrations/events.d.ts

@@ -21,7 +21,15 @@ declare const integrationEvents: {
     credentialRef: string;
     createdAt: unknown;
     updatedAt: unknown;
-  }>;
+  }, import("zod").ZodObject<{
+    orgId: import("zod").ZodString;
+    id: import("zod").ZodString;
+    createdAt: import("zod").ZodCoercedDate<unknown>;
+    updatedAt: import("zod").ZodCoercedDate<unknown>;
+    active: import("zod").ZodBoolean;
+    integrationId: import("zod").ZodString;
+    config: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodType<JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<JsonValue, unknown>>>;
+  }, import("zod/v4/core").$strip>>;
   connectionUpdated: RuntimeEventDefinition<VersionedDomainEvent<{
     orgId: string;
     id: string;
@@ -40,7 +48,15 @@ declare const integrationEvents: {
     credentialRef: string;
     createdAt: unknown;
     updatedAt: unknown;
-  }>;
+  }, import("zod").ZodObject<{
+    orgId: import("zod").ZodString;
+    id: import("zod").ZodString;
+    createdAt: import("zod").ZodCoercedDate<unknown>;
+    updatedAt: import("zod").ZodCoercedDate<unknown>;
+    active: import("zod").ZodBoolean;
+    integrationId: import("zod").ZodString;
+    config: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodType<JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<JsonValue, unknown>>>;
+  }, import("zod/v4/core").$strip>>;
   connectionRemoved: RuntimeEventDefinition<VersionedDomainEvent<{
     orgId: string;
     id: string;
@@ -59,7 +75,15 @@ declare const integrationEvents: {
     credentialRef: string;
     createdAt: unknown;
     updatedAt: unknown;
-  }>;
+  }, import("zod").ZodObject<{
+    orgId: import("zod").ZodString;
+    id: import("zod").ZodString;
+    createdAt: import("zod").ZodCoercedDate<unknown>;
+    updatedAt: import("zod").ZodCoercedDate<unknown>;
+    active: import("zod").ZodBoolean;
+    integrationId: import("zod").ZodString;
+    config: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodType<JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<JsonValue, unknown>>>;
+  }, import("zod/v4/core").$strip>>;
 };
 type ConnectionCreated = EventOf<typeof integrationEvents.connectionCreated>;
 type ConnectionUpdated = EventOf<typeof integrationEvents.connectionUpdated>;

package/dist/integrations/events.js

@@ -1,21 +1,33 @@
 import { connectionSchema } from "../types/schemas/integrations.js";
 import { defineEvent } from "../shared/events.js";
 //#region src/integrations/events.ts
+const publicConnection = connectionSchema.pick({
+	orgId: true,
+	id: true,
+	integrationId: true,
+	config: true,
+	active: true,
+	createdAt: true,
+	updatedAt: true
+}).strip();
 const integrationEvents = {
 	connectionCreated: defineEvent({
 		type: "integration.connection.created",
 		version: 1,
-		data: connectionSchema
+		data: connectionSchema,
+		publicData: publicConnection
 	}),
 	connectionUpdated: defineEvent({
 		type: "integration.connection.updated",
 		version: 1,
-		data: connectionSchema
+		data: connectionSchema,
+		publicData: publicConnection
 	}),
 	connectionRemoved: defineEvent({
 		type: "integration.connection.removed",
 		version: 1,
-		data: connectionSchema
+		data: connectionSchema,
+		publicData: publicConnection
 	})
 };
 //#endregion

package/dist/integrations/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","names":[],"sources":["../../src/integrations/events.ts"],"sourcesContent":["import { connectionSchema } from '../types/schemas/index.js';\nimport { defineEvent, type EventOf, type EventOfValues } from '../shared/ports.js';\n\nexport const integrationEvents = {\n  connectionCreated: defineEvent({\n    type: 'integration.connection.created',\n    version: 1,\n    data: connectionSchema,\n  }),\n  connectionUpdated: defineEvent({\n    type: 'integration.connection.updated',\n    version: 1,\n    data: connectionSchema,\n  }),\n  connectionRemoved: defineEvent({\n    type: 'integration.connection.removed',\n    version: 1,\n    data: connectionSchema,\n  }),\n};\n\nexport type ConnectionCreated = EventOf<typeof integrationEvents.connectionCreated>;\nexport type ConnectionUpdated = EventOf<typeof integrationEvents.connectionUpdated>;\nexport type ConnectionRemoved = EventOf<typeof integrationEvents.connectionRemoved>;\nexport type IntegrationEvent = EventOfValues<typeof integrationEvents>;\n"],"mappings":";;;AAGA,MAAa,oBAAoB;CAC/B,mBAAmB,YAAY;EAC7B,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;CACD,mBAAmB,YAAY;EAC7B,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;CACD,mBAAmB,YAAY;EAC7B,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;AACH"}
+{"version":3,"file":"events.js","names":[],"sources":["../../src/integrations/events.ts"],"sourcesContent":["import { connectionSchema } from '../types/schemas/index.js';\nimport { defineEvent, type EventOf, type EventOfValues } from '../shared/ports.js';\n\nconst publicConnection = connectionSchema\n  .pick({\n    orgId: true,\n    id: true,\n    integrationId: true,\n    config: true,\n    active: true,\n    createdAt: true,\n    updatedAt: true,\n  })\n  .strip();\n\nexport const integrationEvents = {\n  connectionCreated: defineEvent({\n    type: 'integration.connection.created',\n    version: 1,\n    data: connectionSchema,\n    publicData: publicConnection,\n  }),\n  connectionUpdated: defineEvent({\n    type: 'integration.connection.updated',\n    version: 1,\n    data: connectionSchema,\n    publicData: publicConnection,\n  }),\n  connectionRemoved: defineEvent({\n    type: 'integration.connection.removed',\n    version: 1,\n    data: connectionSchema,\n    publicData: publicConnection,\n  }),\n};\n\nexport type ConnectionCreated = EventOf<typeof integrationEvents.connectionCreated>;\nexport type ConnectionUpdated = EventOf<typeof integrationEvents.connectionUpdated>;\nexport type ConnectionRemoved = EventOf<typeof integrationEvents.connectionRemoved>;\nexport type IntegrationEvent = EventOfValues<typeof integrationEvents>;\n"],"mappings":";;;AAGA,MAAM,mBAAmB,iBACtB,KAAK;CACJ,OAAO;CACP,IAAI;CACJ,eAAe;CACf,QAAQ;CACR,QAAQ;CACR,WAAW;CACX,WAAW;AACb,CAAC,CAAC,CACD,MAAM;AAET,MAAa,oBAAoB;CAC/B,mBAAmB,YAAY;EAC7B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,mBAAmB,YAAY;EAC7B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,mBAAmB,YAAY;EAC7B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;AACH"}