@headless-lms/core 0.1.0

package/dist/entitlements/service.js

@@ -0,0 +1,60 @@
+import { noopLogger } from "../shared/logger.js";
+import { entitlementEvents } from "./events.js";
+//#region src/entitlements/service.ts
+var EntitlementsServiceImpl = class {
+	repo;
+	uow;
+	logger;
+	constructor(params) {
+		this.repo = params.repo;
+		this.uow = params.uow;
+		this.logger = params.logger ?? noopLogger;
+	}
+	list(orgId, query) {
+		return this.repo.list(orgId, query);
+	}
+	async grant(orgId, input) {
+		const entitlement = await this.uow.run(async ({ entitlements, outbox }) => {
+			const created = await entitlements.insert(orgId, input);
+			await outbox.append([entitlementEvents.entitlementCreated.make({
+				orgId,
+				data: created
+			})]);
+			return created;
+		});
+		this.logger.info("entitlement granted", {
+			orgId,
+			entitlementId: entitlement.id,
+			orgUserId: entitlement.orgUserId,
+			contentId: entitlement.contentId
+		});
+		return entitlement;
+	}
+	async setStatus(orgId, id, status) {
+		const entitlement = await this.uow.run(async ({ entitlements, outbox }) => {
+			const updated = await entitlements.setStatus(orgId, id, status);
+			if (!updated) return null;
+			await outbox.append([status === "revoked" ? entitlementEvents.entitlementDeleted.make({
+				orgId,
+				data: updated
+			}) : entitlementEvents.entitlementUpdated.make({
+				orgId,
+				data: updated
+			})]);
+			return updated;
+		});
+		if (entitlement) this.logger.info("entitlement status changed", {
+			orgId,
+			entitlementId: id,
+			status
+		});
+		return entitlement;
+	}
+	hasCourseAccess(orgId, orgUserId, courseId) {
+		return this.repo.hasCourseAccess(orgId, orgUserId, courseId);
+	}
+};
+//#endregion
+export { EntitlementsServiceImpl };
+
+//# sourceMappingURL=service.js.map

package/dist/entitlements/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","names":[],"sources":["../../src/entitlements/service.ts"],"sourcesContent":["// entitlements context — service implementation (inbound port).\n//\n// Mutations run inside the context's UnitOfWork: the domain write and the\n// outbox append commit in ONE transaction (transactional outbox). This\n// service never publishes — the outbox relay republishes committed events to\n// the EventBus at-least-once.\nimport type { Entitlement, EntitlementsQuery, GrantEntitlementInput, Page } from './model.js';\nimport type {\n  EntitlementsRepository,\n  EntitlementsService,\n  EntitlementsUnitOfWork,\n} from './ports.js';\nimport type { Logger } from '../shared/ports.js';\nimport { noopLogger } from '../shared/logger.js';\nimport { entitlementEvents } from './events.js';\n\nexport type EntitlementsServiceParams = {\n  /** Read-only access (list) — runs outside any transaction. */\n  repo: EntitlementsRepository;\n  /** Atomic write scope: tx-bound repo + outbox appender. */\n  uow: EntitlementsUnitOfWork;\n  logger?: Logger;\n};\n\nexport class EntitlementsServiceImpl implements EntitlementsService {\n  private readonly repo: EntitlementsRepository;\n  private readonly uow: EntitlementsUnitOfWork;\n  private readonly logger: Logger;\n\n  constructor(params: EntitlementsServiceParams) {\n    this.repo = params.repo;\n    this.uow = params.uow;\n    this.logger = params.logger ?? noopLogger;\n  }\n\n  list(orgId: string, query: EntitlementsQuery): Promise<Page<Entitlement>> {\n    return this.repo.list(orgId, query);\n  }\n\n  async grant(orgId: string, input: GrantEntitlementInput): Promise<Entitlement> {\n    const entitlement = await this.uow.run(async ({ entitlements, outbox }) => {\n      const created = await entitlements.insert(orgId, input);\n      await outbox.append([\n        entitlementEvents.entitlementCreated.make({\n          orgId,\n          data: created,\n        }),\n      ]);\n      return created;\n    });\n    this.logger.info('entitlement granted', {\n      orgId,\n      entitlementId: entitlement.id,\n      orgUserId: entitlement.orgUserId,\n      contentId: entitlement.contentId,\n    });\n    return entitlement;\n  }\n\n  async setStatus(\n    orgId: string,\n    id: string,\n    status: 'active' | 'revoked',\n  ): Promise<Entitlement | null> {\n    const entitlement = await this.uow.run(async ({ entitlements, outbox }) => {\n      const updated = await entitlements.setStatus(orgId, id, status);\n      if (!updated) {\n        return null;\n      }\n      await outbox.append([\n        status === 'revoked'\n          ? entitlementEvents.entitlementDeleted.make({\n              orgId,\n              data: updated,\n            })\n          : entitlementEvents.entitlementUpdated.make({\n              orgId,\n              data: updated,\n            }),\n      ]);\n      return updated;\n    });\n    if (entitlement) {\n      this.logger.info('entitlement status changed', { orgId, entitlementId: id, status });\n    }\n    return entitlement;\n  }\n\n  hasCourseAccess(orgId: string, orgUserId: string, courseId: string): Promise<boolean> {\n    return this.repo.hasCourseAccess(orgId, orgUserId, courseId);\n  }\n}\n"],"mappings":";;;AAwBA,IAAa,0BAAb,MAAoE;CAClE;CACA;CACA;CAEA,YAAY,QAAmC;EAC7C,KAAK,OAAO,OAAO;EACnB,KAAK,MAAM,OAAO;EAClB,KAAK,SAAS,OAAO,UAAU;CACjC;CAEA,KAAK,OAAe,OAAsD;EACxE,OAAO,KAAK,KAAK,KAAK,OAAO,KAAK;CACpC;CAEA,MAAM,MAAM,OAAe,OAAoD;EAC7E,MAAM,cAAc,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,cAAc,aAAa;GACzE,MAAM,UAAU,MAAM,aAAa,OAAO,OAAO,KAAK;GACtD,MAAM,OAAO,OAAO,CAClB,kBAAkB,mBAAmB,KAAK;IACxC;IACA,MAAM;GACR,CAAC,CACH,CAAC;GACD,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,uBAAuB;GACtC;GACA,eAAe,YAAY;GAC3B,WAAW,YAAY;GACvB,WAAW,YAAY;EACzB,CAAC;EACD,OAAO;CACT;CAEA,MAAM,UACJ,OACA,IACA,QAC6B;EAC7B,MAAM,cAAc,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,cAAc,aAAa;GACzE,MAAM,UAAU,MAAM,aAAa,UAAU,OAAO,IAAI,MAAM;GAC9D,IAAI,CAAC,SACH,OAAO;GAET,MAAM,OAAO,OAAO,CAClB,WAAW,YACP,kBAAkB,mBAAmB,KAAK;IACxC;IACA,MAAM;GACR,CAAC,IACD,kBAAkB,mBAAmB,KAAK;IACxC;IACA,MAAM;GACR,CAAC,CACP,CAAC;GACD,OAAO;EACT,CAAC;EACD,IAAI,aACF,KAAK,OAAO,KAAK,8BAA8B;GAAE;GAAO,eAAe;GAAI;EAAO,CAAC;EAErF,OAAO;CACT;CAEA,gBAAgB,OAAe,WAAmB,UAAoC;EACpF,OAAO,KAAK,KAAK,gBAAgB,OAAO,WAAW,QAAQ;CAC7D;AACF"}

package/dist/identity/events.d.ts

@@ -0,0 +1,63 @@
+import { EventOf, EventOfValues, RuntimeEventDefinition, VersionedDomainEvent } from "../shared/events.js";
+import "../shared/ports.js";
+//#region src/identity/events.d.ts
+declare const identityEvents: {
+  userCreated: RuntimeEventDefinition<VersionedDomainEvent<{
+    id: string;
+    externalId: string | null;
+    email: string;
+    firstName: string | null;
+    lastName: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+  }, "identity.user.created", 1>, {
+    id: string;
+    externalId: string | null;
+    email: string;
+    firstName: string | null;
+    lastName: string | null;
+    createdAt: unknown;
+    updatedAt: unknown;
+  }>;
+  userUpdated: RuntimeEventDefinition<VersionedDomainEvent<{
+    id: string;
+    externalId: string | null;
+    email: string;
+    firstName: string | null;
+    lastName: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+  }, "identity.user.updated", 1>, {
+    id: string;
+    externalId: string | null;
+    email: string;
+    firstName: string | null;
+    lastName: string | null;
+    createdAt: unknown;
+    updatedAt: unknown;
+  }>;
+  userDeleted: RuntimeEventDefinition<VersionedDomainEvent<{
+    id: string;
+    externalId: string | null;
+    email: string;
+    firstName: string | null;
+    lastName: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+  }, "identity.user.deleted", 1>, {
+    id: string;
+    externalId: string | null;
+    email: string;
+    firstName: string | null;
+    lastName: string | null;
+    createdAt: unknown;
+    updatedAt: unknown;
+  }>;
+};
+type UserCreated = EventOf<typeof identityEvents.userCreated>;
+type UserUpdated = EventOf<typeof identityEvents.userUpdated>;
+type UserDeleted = EventOf<typeof identityEvents.userDeleted>;
+type IdentityEvent = EventOfValues<typeof identityEvents>;
+//#endregion
+export { IdentityEvent, UserCreated, UserDeleted, UserUpdated, identityEvents };
+//# sourceMappingURL=events.d.ts.map

package/dist/identity/events.js

@@ -0,0 +1,24 @@
+import { userSchema } from "../types/schemas/identity.js";
+import { defineEvent } from "../shared/events.js";
+//#region src/identity/events.ts
+const identityEvents = {
+	userCreated: defineEvent({
+		type: "identity.user.created",
+		version: 1,
+		data: userSchema
+	}),
+	userUpdated: defineEvent({
+		type: "identity.user.updated",
+		version: 1,
+		data: userSchema
+	}),
+	userDeleted: defineEvent({
+		type: "identity.user.deleted",
+		version: 1,
+		data: userSchema
+	})
+};
+//#endregion
+export { identityEvents };
+
+//# sourceMappingURL=events.js.map

package/dist/identity/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","names":[],"sources":["../../src/identity/events.ts"],"sourcesContent":["import { userSchema } from '../types/schemas/index.js';\nimport { defineEvent, type EventOf, type EventOfValues } from '../shared/ports.js';\n\nexport const identityEvents = {\n  userCreated: defineEvent({\n    type: 'identity.user.created',\n    version: 1,\n    data: userSchema,\n  }),\n  userUpdated: defineEvent({\n    type: 'identity.user.updated',\n    version: 1,\n    data: userSchema,\n  }),\n  userDeleted: defineEvent({\n    type: 'identity.user.deleted',\n    version: 1,\n    data: userSchema,\n  }),\n};\n\nexport type UserCreated = EventOf<typeof identityEvents.userCreated>;\nexport type UserUpdated = EventOf<typeof identityEvents.userUpdated>;\nexport type UserDeleted = EventOf<typeof identityEvents.userDeleted>;\nexport type IdentityEvent = EventOfValues<typeof identityEvents>;\n"],"mappings":";;;AAGA,MAAa,iBAAiB;CAC5B,aAAa,YAAY;EACvB,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;CACD,aAAa,YAAY;EACvB,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;CACD,aAAa,YAAY;EACvB,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;AACH"}

package/dist/identity/index.d.ts

@@ -0,0 +1,8 @@
+import { CreateUserInput, ProvisionUserInput, UpdateUserInput } from "../types/schemas/identity.js";
+import { User, UserId } from "../types/identity.js";
+import { IdentityEvent, UserCreated, UserDeleted, UserUpdated, identityEvents } from "./events.js";
+import "./model.js";
+import "./types.js";
+import { AuthHeaders, IdentityRepository, IdentityService, SessionAdmin, UserEditor, UserProvisioner, UserResolver } from "./ports.js";
+import { IdentityServiceImpl } from "./service.js";
+export { type AuthHeaders, type CreateUserInput, type IdentityEvent, type IdentityRepository, type IdentityService, IdentityServiceImpl, type ProvisionUserInput, type SessionAdmin, type UpdateUserInput, type User, type UserCreated, type UserDeleted, type UserEditor, type UserId, type UserProvisioner, type UserResolver, type UserUpdated, identityEvents };

package/dist/identity/index.js

@@ -0,0 +1,3 @@
+import { identityEvents } from "./events.js";
+import { IdentityServiceImpl } from "./service.js";
+export { IdentityServiceImpl, identityEvents };

package/dist/identity/model.d.ts

@@ -0,0 +1,3 @@
+import { User } from "../types/identity.js";
+import "../types/index.js";
+export type { User };

package/dist/identity/model.js

@@ -0,0 +1 @@
+export {};

package/dist/identity/ports.d.ts

@@ -0,0 +1,58 @@
+import { CreateUserInput, UpdateUserInput } from "../types/schemas/identity.js";
+import { User } from "../types/identity.js";
+import { OutboxAppender, UnitOfWork } from "../shared/ports.js";
+import "./model.js";
+import "./types.js";
+//#region src/identity/ports.d.ts
+interface UserProvisioner {
+  createUser(input: CreateUserInput): Promise<User>;
+  /** Auth signup entry point. Claims a person provisioned at invite time by
+   *  stamping `externalId`; creates the person when the email is unknown.
+   *  Throws ConflictError when the email is already linked to an account. */
+  linkOrCreateUser(input: CreateUserInput): Promise<User>;
+  sendPasswordReset(input: {
+    email: string;
+    url: string;
+  }): Promise<void>;
+  sendMagicLink(input: {
+    email: string;
+    url: string;
+  }): Promise<void>;
+}
+/** Resolves an auth account to the domain person. Used by the organizations
+ *  context at invite acceptance, so core never reads the auth schema. */
+interface UserResolver {
+  getUserByExternalId(externalId: string): Promise<User | null>;
+  /** A hit says a person exists, NOT that they can sign in — provisioned
+   *  students have no account until `externalId` is filled in. */
+  getUserByEmail(email: string): Promise<User | null>;
+  getUserById(id: string): Promise<User | null>;
+}
+/** Corrects the person an admin named. Throws ConflictError when a new address
+ *  already belongs to somebody else. */
+interface UserEditor {
+  updateUser(id: string, input: UpdateUserInput): Promise<User>;
+}
+/** Inbound HTTP headers carrying the session, forwarded to the auth provider. */
+type AuthHeaders = Record<string, string | string[] | undefined>;
+/** Writes to a live session, fulfilled by the auth provider.  */
+interface SessionAdmin {
+  /** Points the caller's current session at `orgId`.  */
+  stampActiveOrganization(headers: AuthHeaders, orgId: string): Promise<boolean>;
+}
+interface IdentityService extends UserProvisioner, UserResolver, UserEditor {}
+interface IdentityRepository {
+  insertUser(input: CreateUserInput): Promise<User>;
+  updateUser(id: string, input: UpdateUserInput): Promise<User | null>;
+  findUserById(id: string): Promise<User | null>;
+  findUserByExternalId(externalId: string): Promise<User | null>;
+  findUserByEmail(email: string): Promise<User | null>;
+}
+interface IdentityTxScope {
+  identity: IdentityRepository;
+  outbox: OutboxAppender;
+}
+type IdentityUnitOfWork = UnitOfWork<IdentityTxScope>;
+//#endregion
+export { AuthHeaders, IdentityRepository, IdentityService, IdentityTxScope, IdentityUnitOfWork, SessionAdmin, UserEditor, UserProvisioner, UserResolver };
+//# sourceMappingURL=ports.d.ts.map

package/dist/identity/ports.js

@@ -0,0 +1 @@
+export {};

package/dist/identity/service.d.ts

@@ -0,0 +1,38 @@
+import { Logger } from "../types/ports.js";
+import { CreateUserInput, UpdateUserInput } from "../types/schemas/identity.js";
+import { User } from "../types/identity.js";
+import "../shared/ports.js";
+import { Mailer } from "../shared/mailer.js";
+import "./model.js";
+import "./types.js";
+import { IdentityRepository, IdentityService, IdentityUnitOfWork } from "./ports.js";
+//#region src/identity/service.d.ts
+declare class IdentityServiceImpl implements IdentityService {
+  private readonly repo;
+  private readonly logger;
+  private readonly uow;
+  private readonly mailer;
+  constructor(input: {
+    repo: IdentityRepository;
+    logger?: Logger;
+    mailer: Mailer;
+    uow: IdentityUnitOfWork;
+  });
+  createUser(input: CreateUserInput): Promise<User>;
+  linkOrCreateUser(input: CreateUserInput): Promise<User>;
+  updateUser(id: string, input: UpdateUserInput): Promise<User>;
+  getUserByExternalId(externalId: string): Promise<User | null>;
+  getUserByEmail(email: string): Promise<User | null>;
+  getUserById(id: string): Promise<User | null>;
+  sendPasswordReset(input: {
+    email: string;
+    url: string;
+  }): Promise<void>;
+  sendMagicLink(input: {
+    email: string;
+    url: string;
+  }): Promise<void>;
+}
+//#endregion
+export { IdentityServiceImpl };
+//# sourceMappingURL=service.d.ts.map

package/dist/identity/service.js

@@ -0,0 +1,79 @@
+import { noopLogger } from "../shared/logger.js";
+import { ConflictError, NotFoundError } from "../shared/errors.js";
+import { identityEvents } from "./events.js";
+//#region src/identity/service.ts
+var IdentityServiceImpl = class {
+	repo;
+	logger;
+	uow;
+	mailer;
+	constructor(input) {
+		this.repo = input.repo;
+		this.mailer = input.mailer;
+		this.logger = input.logger ?? noopLogger;
+		this.uow = input.uow;
+	}
+	async createUser(input) {
+		const created = await this.uow.run(async ({ identity, outbox }) => {
+			const user = await identity.insertUser(input);
+			await outbox.append([identityEvents.userCreated.make({
+				orgId: "-",
+				data: user
+			})]);
+			return user;
+		});
+		this.logger.info("user created", { user: created });
+		return created;
+	}
+	async linkOrCreateUser(input) {
+		const existing = await this.repo.findUserByEmail(input.email);
+		if (!existing) return this.createUser(input);
+		if (existing.externalId !== null) throw new ConflictError("That email already has an account");
+		const linked = await this.uow.run(async ({ identity, outbox }) => {
+			const user = await identity.updateUser(existing.id, {
+				externalId: existing.id,
+				...input.firstName !== void 0 && { firstName: input.firstName },
+				...input.lastName !== void 0 && { lastName: input.lastName }
+			});
+			await outbox.append([identityEvents.userUpdated.make({
+				orgId: "-",
+				data: user
+			})]);
+			return user;
+		});
+		this.logger.info("user linked to auth account", { user: linked });
+		return linked;
+	}
+	async updateUser(id, input) {
+		if (!await this.repo.findUserById(id)) throw new NotFoundError("User", id);
+		const updated = await this.uow.run(async ({ identity, outbox }) => {
+			const user = await identity.updateUser(id, input);
+			await outbox.append([identityEvents.userUpdated.make({
+				orgId: "-",
+				data: user
+			})]);
+			return user;
+		});
+		this.logger.info("user updated", { user: updated });
+		return updated;
+	}
+	async getUserByExternalId(externalId) {
+		return this.repo.findUserByExternalId(externalId);
+	}
+	async getUserByEmail(email) {
+		return this.repo.findUserByEmail(email);
+	}
+	async getUserById(id) {
+		return this.repo.findUserById(id);
+	}
+	async sendPasswordReset(input) {
+		await this.mailer.send(input.email, "passwordReset", { resetUrl: input.url });
+	}
+	async sendMagicLink(input) {
+		await this.mailer.send(input.email, "magicLink", { url: input.url });
+	}
+};
+//#endregion
+export { IdentityServiceImpl };
+
+//# sourceMappingURL=service.js.map

package/dist/identity/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","names":[],"sources":["../../src/identity/service.ts"],"sourcesContent":["import type { IdentityRepository, IdentityService, IdentityUnitOfWork } from './ports.js';\nimport type { User } from './model.js';\nimport type { CreateUserInput, UpdateUserInput } from './types.js';\nimport type { Logger } from '../shared/ports.js';\nimport { noopLogger } from '../shared/logger.js';\nimport { ConflictError, NotFoundError } from '../shared/errors.js';\nimport type { Mailer } from '../shared/mailer.js';\nimport { identityEvents } from './events.js';\n\nexport class IdentityServiceImpl implements IdentityService {\n  private readonly repo: IdentityRepository;\n  private readonly logger: Logger;\n  private readonly uow: IdentityUnitOfWork;\n  private readonly mailer: Pick<Mailer, 'send'>;\n\n  constructor(input: {\n    repo: IdentityRepository;\n    logger?: Logger;\n    mailer: Mailer;\n    uow: IdentityUnitOfWork;\n  }) {\n    this.repo = input.repo;\n    this.mailer = input.mailer;\n    this.logger = input.logger ?? noopLogger;\n    this.uow = input.uow;\n  }\n\n  async createUser(input: CreateUserInput): Promise<User> {\n    const created = await this.uow.run(async ({ identity, outbox }) => {\n      const user = await identity.insertUser(input);\n      await outbox.append([\n        identityEvents.userCreated.make({ orgId: '-', data: user }),\n      ]);\n      return user;\n    });\n    this.logger.info('user created', { user: created });\n    return created;\n  }\n\n  async linkOrCreateUser(input: CreateUserInput): Promise<User> {\n    const existing = await this.repo.findUserByEmail(input.email);\n    if (!existing) {\n      return this.createUser(input);\n    }\n    if (existing.externalId !== null) {\n      throw new ConflictError('That email already has an account');\n    }\n    // Existing user without external link, so invited. update the user with the\n    // id.\n    const linked = await this.uow.run(async ({ identity, outbox }) => {\n      const user = await identity.updateUser(existing.id, {\n        externalId: existing.id,\n        ...(input.firstName !== undefined && { firstName: input.firstName }),\n        ...(input.lastName !== undefined && { lastName: input.lastName }),\n      });\n      await outbox.append([\n        identityEvents.userUpdated.make({ orgId: '-', data: user! }),\n      ]);\n      return user!;\n    });\n    this.logger.info('user linked to auth account', { user: linked });\n    return linked;\n  }\n\n  async updateUser(id: string, input: UpdateUserInput): Promise<User> {\n    const person = await this.repo.findUserById(id);\n    if (!person) {\n      throw new NotFoundError('User', id);\n    }\n\n    const updated = await this.uow.run(async ({ identity, outbox }) => {\n      const user = await identity.updateUser(id, input);\n      await outbox.append([\n        identityEvents.userUpdated.make({ orgId: '-', data: user! }),\n      ]);\n      return user!;\n    });\n    this.logger.info('user updated', { user: updated });\n    return updated;\n  }\n\n  async getUserByExternalId(externalId: string): Promise<User | null> {\n    return this.repo.findUserByExternalId(externalId);\n  }\n\n  async getUserByEmail(email: string): Promise<User | null> {\n    return this.repo.findUserByEmail(email);\n  }\n\n  async getUserById(id: string): Promise<User | null> {\n    return this.repo.findUserById(id);\n  }\n\n  async sendPasswordReset(input: { email: string; url: string }): Promise<void> {\n    await this.mailer.send(input.email, 'passwordReset', { resetUrl: input.url });\n  }\n\n  async sendMagicLink(input: { email: string; url: string }): Promise<void> {\n    await this.mailer.send(input.email, 'magicLink', { url: input.url });\n  }\n}\n"],"mappings":";;;;AASA,IAAa,sBAAb,MAA4D;CAC1D;CACA;CACA;CACA;CAEA,YAAY,OAKT;EACD,KAAK,OAAO,MAAM;EAClB,KAAK,SAAS,MAAM;EACpB,KAAK,SAAS,MAAM,UAAU;EAC9B,KAAK,MAAM,MAAM;CACnB;CAEA,MAAM,WAAW,OAAuC;EACtD,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,UAAU,aAAa;GACjE,MAAM,OAAO,MAAM,SAAS,WAAW,KAAK;GAC5C,MAAM,OAAO,OAAO,CAClB,eAAe,YAAY,KAAK;IAAE,OAAO;IAAK,MAAM;GAAK,CAAC,CAC5D,CAAC;GACD,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,gBAAgB,EAAE,MAAM,QAAQ,CAAC;EAClD,OAAO;CACT;CAEA,MAAM,iBAAiB,OAAuC;EAC5D,MAAM,WAAW,MAAM,KAAK,KAAK,gBAAgB,MAAM,KAAK;EAC5D,IAAI,CAAC,UACH,OAAO,KAAK,WAAW,KAAK;EAE9B,IAAI,SAAS,eAAe,MAC1B,MAAM,IAAI,cAAc,mCAAmC;EAI7D,MAAM,SAAS,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,UAAU,aAAa;GAChE,MAAM,OAAO,MAAM,SAAS,WAAW,SAAS,IAAI;IAClD,YAAY,SAAS;IACrB,GAAI,MAAM,cAAc,KAAA,KAAa,EAAE,WAAW,MAAM,UAAU;IAClE,GAAI,MAAM,aAAa,KAAA,KAAa,EAAE,UAAU,MAAM,SAAS;GACjE,CAAC;GACD,MAAM,OAAO,OAAO,CAClB,eAAe,YAAY,KAAK;IAAE,OAAO;IAAK,MAAM;GAAM,CAAC,CAC7D,CAAC;GACD,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,+BAA+B,EAAE,MAAM,OAAO,CAAC;EAChE,OAAO;CACT;CAEA,MAAM,WAAW,IAAY,OAAuC;EAElE,IAAI,CAAC,MADgB,KAAK,KAAK,aAAa,EAAE,GAE5C,MAAM,IAAI,cAAc,QAAQ,EAAE;EAGpC,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,UAAU,aAAa;GACjE,MAAM,OAAO,MAAM,SAAS,WAAW,IAAI,KAAK;GAChD,MAAM,OAAO,OAAO,CAClB,eAAe,YAAY,KAAK;IAAE,OAAO;IAAK,MAAM;GAAM,CAAC,CAC7D,CAAC;GACD,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,gBAAgB,EAAE,MAAM,QAAQ,CAAC;EAClD,OAAO;CACT;CAEA,MAAM,oBAAoB,YAA0C;EAClE,OAAO,KAAK,KAAK,qBAAqB,UAAU;CAClD;CAEA,MAAM,eAAe,OAAqC;EACxD,OAAO,KAAK,KAAK,gBAAgB,KAAK;CACxC;CAEA,MAAM,YAAY,IAAkC;EAClD,OAAO,KAAK,KAAK,aAAa,EAAE;CAClC;CAEA,MAAM,kBAAkB,OAAsD;EAC5E,MAAM,KAAK,OAAO,KAAK,MAAM,OAAO,iBAAiB,EAAE,UAAU,MAAM,IAAI,CAAC;CAC9E;CAEA,MAAM,cAAc,OAAsD;EACxE,MAAM,KAAK,OAAO,KAAK,MAAM,OAAO,aAAa,EAAE,KAAK,MAAM,IAAI,CAAC;CACrE;AACF"}

package/dist/identity/types.d.ts

@@ -0,0 +1,4 @@
+import { CreateUserInput, ProvisionUserInput, UpdateUserInput } from "../types/schemas/identity.js";
+import { UserId } from "../types/identity.js";
+import "../types/index.js";
+export type { CreateUserInput, ProvisionUserInput, UpdateUserInput, UserId };

package/dist/identity/types.js

@@ -0,0 +1 @@
+export {};

package/dist/integrations/events.d.ts

@@ -0,0 +1,70 @@
+import { JsonValue } from "../types/shared.js";
+import { EventOf, EventOfValues, RuntimeEventDefinition, VersionedDomainEvent } from "../shared/events.js";
+import "../shared/ports.js";
+//#region src/integrations/events.d.ts
+declare const integrationEvents: {
+  connectionCreated: RuntimeEventDefinition<VersionedDomainEvent<{
+    orgId: string;
+    id: string;
+    integrationId: string;
+    config: Record<string, JsonValue>;
+    active: boolean;
+    credentialRef: string;
+    createdAt: Date;
+    updatedAt: Date;
+  }, "integration.connection.created", 1>, {
+    orgId: string;
+    id: string;
+    integrationId: string;
+    config: Record<string, unknown>;
+    active: boolean;
+    credentialRef: string;
+    createdAt: unknown;
+    updatedAt: unknown;
+  }>;
+  connectionUpdated: RuntimeEventDefinition<VersionedDomainEvent<{
+    orgId: string;
+    id: string;
+    integrationId: string;
+    config: Record<string, JsonValue>;
+    active: boolean;
+    credentialRef: string;
+    createdAt: Date;
+    updatedAt: Date;
+  }, "integration.connection.updated", 1>, {
+    orgId: string;
+    id: string;
+    integrationId: string;
+    config: Record<string, unknown>;
+    active: boolean;
+    credentialRef: string;
+    createdAt: unknown;
+    updatedAt: unknown;
+  }>;
+  connectionRemoved: RuntimeEventDefinition<VersionedDomainEvent<{
+    orgId: string;
+    id: string;
+    integrationId: string;
+    config: Record<string, JsonValue>;
+    active: boolean;
+    credentialRef: string;
+    createdAt: Date;
+    updatedAt: Date;
+  }, "integration.connection.removed", 1>, {
+    orgId: string;
+    id: string;
+    integrationId: string;
+    config: Record<string, unknown>;
+    active: boolean;
+    credentialRef: string;
+    createdAt: unknown;
+    updatedAt: unknown;
+  }>;
+};
+type ConnectionCreated = EventOf<typeof integrationEvents.connectionCreated>;
+type ConnectionUpdated = EventOf<typeof integrationEvents.connectionUpdated>;
+type ConnectionRemoved = EventOf<typeof integrationEvents.connectionRemoved>;
+type IntegrationEvent = EventOfValues<typeof integrationEvents>;
+//#endregion
+export { ConnectionCreated, ConnectionRemoved, ConnectionUpdated, IntegrationEvent, integrationEvents };
+//# sourceMappingURL=events.d.ts.map

package/dist/integrations/events.js

@@ -0,0 +1,24 @@
+import { connectionSchema } from "../types/schemas/integrations.js";
+import { defineEvent } from "../shared/events.js";
+//#region src/integrations/events.ts
+const integrationEvents = {
+	connectionCreated: defineEvent({
+		type: "integration.connection.created",
+		version: 1,
+		data: connectionSchema
+	}),
+	connectionUpdated: defineEvent({
+		type: "integration.connection.updated",
+		version: 1,
+		data: connectionSchema
+	}),
+	connectionRemoved: defineEvent({
+		type: "integration.connection.removed",
+		version: 1,
+		data: connectionSchema
+	})
+};
+//#endregion
+export { integrationEvents };
+
+//# sourceMappingURL=events.js.map

package/dist/integrations/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","names":[],"sources":["../../src/integrations/events.ts"],"sourcesContent":["import { connectionSchema } from '../types/schemas/index.js';\nimport { defineEvent, type EventOf, type EventOfValues } from '../shared/ports.js';\n\nexport const integrationEvents = {\n  connectionCreated: defineEvent({\n    type: 'integration.connection.created',\n    version: 1,\n    data: connectionSchema,\n  }),\n  connectionUpdated: defineEvent({\n    type: 'integration.connection.updated',\n    version: 1,\n    data: connectionSchema,\n  }),\n  connectionRemoved: defineEvent({\n    type: 'integration.connection.removed',\n    version: 1,\n    data: connectionSchema,\n  }),\n};\n\nexport type ConnectionCreated = EventOf<typeof integrationEvents.connectionCreated>;\nexport type ConnectionUpdated = EventOf<typeof integrationEvents.connectionUpdated>;\nexport type ConnectionRemoved = EventOf<typeof integrationEvents.connectionRemoved>;\nexport type IntegrationEvent = EventOfValues<typeof integrationEvents>;\n"],"mappings":";;;AAGA,MAAa,oBAAoB;CAC/B,mBAAmB,YAAY;EAC7B,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;CACD,mBAAmB,YAAY;EAC7B,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;CACD,mBAAmB,YAAY;EAC7B,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;AACH"}

package/dist/integrations/index.d.ts

@@ -0,0 +1,9 @@
+import { ConfigureInput, ConnectInput, Connection, Validation } from "../types/schemas/integrations.js";
+import { Action, ActionContext, Integration } from "../types/integrations.js";
+import { ActionInvocationError, AlreadyConnectedError, InvalidConfigError, UnknownIntegrationError } from "./model.js";
+import { AvailableIntegration, ConnectionsRepository, IntegrationsRegistry, IntegrationsService } from "./ports.js";
+import { IntegrationsServiceImpl } from "./service.js";
+import { ConnectionCreated, ConnectionRemoved, ConnectionUpdated, integrationEvents } from "./events.js";
+import { createIntegrationsRegistry } from "./registry.js";
+import { zodAction, zodConfig, zodSecrets } from "./zod.js";
+export { type Action, type ActionContext, ActionInvocationError, AlreadyConnectedError, type AvailableIntegration, type ConfigureInput, type ConnectInput, type Connection, type ConnectionCreated, type ConnectionRemoved, type ConnectionUpdated, type ConnectionsRepository, type Integration, type IntegrationsRegistry, type IntegrationsService, IntegrationsServiceImpl, InvalidConfigError, UnknownIntegrationError, type Validation, createIntegrationsRegistry, integrationEvents, zodAction, zodConfig, zodSecrets };

package/dist/integrations/index.js

@@ -0,0 +1,6 @@
+import { ActionInvocationError, AlreadyConnectedError, InvalidConfigError, UnknownIntegrationError } from "./model.js";
+import { integrationEvents } from "./events.js";
+import { IntegrationsServiceImpl } from "./service.js";
+import { createIntegrationsRegistry } from "./registry.js";
+import { zodAction, zodConfig, zodSecrets } from "./zod.js";
+export { ActionInvocationError, AlreadyConnectedError, IntegrationsServiceImpl, InvalidConfigError, UnknownIntegrationError, createIntegrationsRegistry, integrationEvents, zodAction, zodConfig, zodSecrets };

package/dist/integrations/model.d.ts

@@ -0,0 +1,28 @@
+import { ConfigureInput, ConnectInput, Connection } from "../types/schemas/integrations.js";
+import "../types/index.js";
+//#region src/integrations/model.d.ts
+/** An org already has a connection for this integration (one per integration per org). */
+declare class AlreadyConnectedError extends Error {
+  readonly integrationId: string;
+  constructor(integrationId: string);
+}
+/** The named integration is not declared in the registry. */
+declare class UnknownIntegrationError extends Error {
+  readonly integrationId: string;
+  constructor(integrationId: string);
+}
+/** An action's external call failed (or the action rejected its input). */
+declare class ActionInvocationError extends Error {
+  readonly integrationId: string;
+  readonly actionId: string;
+  constructor(integrationId: string, actionId: string, cause: unknown);
+}
+/** The config was rejected by the integration's validator. */
+declare class InvalidConfigError extends Error {
+  readonly integrationId: string;
+  readonly errors: string[];
+  constructor(integrationId: string, errors: string[]);
+}
+//#endregion
+export { ActionInvocationError, AlreadyConnectedError, type ConfigureInput, type ConnectInput, type Connection, InvalidConfigError, UnknownIntegrationError };
+//# sourceMappingURL=model.d.ts.map

package/dist/integrations/model.js

@@ -0,0 +1,45 @@
+//#region src/integrations/model.ts
+/** An org already has a connection for this integration (one per integration per org). */
+var AlreadyConnectedError = class extends Error {
+	integrationId;
+	constructor(integrationId) {
+		super(`a connection for "${integrationId}" already exists`);
+		this.integrationId = integrationId;
+		this.name = "AlreadyConnectedError";
+	}
+};
+/** The named integration is not declared in the registry. */
+var UnknownIntegrationError = class extends Error {
+	integrationId;
+	constructor(integrationId) {
+		super(`unknown integration "${integrationId}"`);
+		this.integrationId = integrationId;
+		this.name = "UnknownIntegrationError";
+	}
+};
+/** An action's external call failed (or the action rejected its input). */
+var ActionInvocationError = class extends Error {
+	integrationId;
+	actionId;
+	constructor(integrationId, actionId, cause) {
+		super(`action "${integrationId}.${actionId}" failed: ${cause instanceof Error ? cause.message : String(cause)}`);
+		this.integrationId = integrationId;
+		this.actionId = actionId;
+		this.name = "ActionInvocationError";
+	}
+};
+/** The config was rejected by the integration's validator. */
+var InvalidConfigError = class extends Error {
+	integrationId;
+	errors;
+	constructor(integrationId, errors) {
+		super(`invalid config for "${integrationId}": ${errors.join("; ")}`);
+		this.integrationId = integrationId;
+		this.errors = errors;
+		this.name = "InvalidConfigError";
+	}
+};
+//#endregion
+export { ActionInvocationError, AlreadyConnectedError, InvalidConfigError, UnknownIntegrationError };
+
+//# sourceMappingURL=model.js.map

package/dist/integrations/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","names":[],"sources":["../../src/integrations/model.ts"],"sourcesContent":["// integrations context — entities & DTOs are owned by @headless-lms/core/types;\n// the domain errors below are runtime code and stay in core.\nexport type { Connection, ConnectInput, ConfigureInput } from '../types/index.js';\n\n/** An org already has a connection for this integration (one per integration per org). */\nexport class AlreadyConnectedError extends Error {\n  constructor(readonly integrationId: string) {\n    super(`a connection for \"${integrationId}\" already exists`);\n    this.name = 'AlreadyConnectedError';\n  }\n}\n\n/** The named integration is not declared in the registry. */\nexport class UnknownIntegrationError extends Error {\n  constructor(readonly integrationId: string) {\n    super(`unknown integration \"${integrationId}\"`);\n    this.name = 'UnknownIntegrationError';\n  }\n}\n\n/** An action's external call failed (or the action rejected its input). */\nexport class ActionInvocationError extends Error {\n  constructor(\n    readonly integrationId: string,\n    readonly actionId: string,\n    cause: unknown,\n  ) {\n    super(\n      `action \"${integrationId}.${actionId}\" failed: ${\n        cause instanceof Error ? cause.message : String(cause)\n      }`,\n    );\n    this.name = 'ActionInvocationError';\n  }\n}\n\n/** The config was rejected by the integration's validator. */\nexport class InvalidConfigError extends Error {\n  constructor(\n    readonly integrationId: string,\n    readonly errors: string[],\n  ) {\n    super(`invalid config for \"${integrationId}\": ${errors.join('; ')}`);\n    this.name = 'InvalidConfigError';\n  }\n}\n"],"mappings":";;AAKA,IAAa,wBAAb,cAA2C,MAAM;CAC1B;CAArB,YAAY,eAAgC;EAC1C,MAAM,qBAAqB,cAAc,iBAAiB;EADvC,KAAA,gBAAA;EAEnB,KAAK,OAAO;CACd;AACF;;AAGA,IAAa,0BAAb,cAA6C,MAAM;CAC5B;CAArB,YAAY,eAAgC;EAC1C,MAAM,wBAAwB,cAAc,EAAE;EAD3B,KAAA,gBAAA;EAEnB,KAAK,OAAO;CACd;AACF;;AAGA,IAAa,wBAAb,cAA2C,MAAM;CAEpC;CACA;CAFX,YACE,eACA,UACA,OACA;EACA,MACE,WAAW,cAAc,GAAG,SAAS,YACnC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAEzD;EARS,KAAA,gBAAA;EACA,KAAA,WAAA;EAQT,KAAK,OAAO;CACd;AACF;;AAGA,IAAa,qBAAb,cAAwC,MAAM;CAEjC;CACA;CAFX,YACE,eACA,QACA;EACA,MAAM,uBAAuB,cAAc,KAAK,OAAO,KAAK,IAAI,GAAG;EAH1D,KAAA,gBAAA;EACA,KAAA,SAAA;EAGT,KAAK,OAAO;CACd;AACF"}