@headless-lms/core 0.3.0 → 0.4.0

package/dist/assets/events.d.ts

@@ -29,8 +29,10 @@ declare const assetEvents: {
     createdAt: unknown;
     updatedAt: unknown;
   }, import("zod").ZodObject<{
-    orgId: import("zod").ZodString;
     id: import("zod").ZodString;
+    orgId: import("zod").ZodString;
+    createdAt: import("zod").ZodCoercedDate<unknown>;
+    updatedAt: import("zod").ZodCoercedDate<unknown>;
     kind: import("zod").ZodEnum<{
       image: "image";
       video: "video";
@@ -49,8 +51,6 @@ declare const assetEvents: {
     filename: import("zod").ZodString;
     contentType: import("zod").ZodString;
     size: import("zod").ZodNumber;
-    createdAt: import("zod").ZodCoercedDate<unknown>;
-    updatedAt: import("zod").ZodCoercedDate<unknown>;
   }, import("zod/v4/core").$strip>>;
   assetReady: RuntimeEventDefinition<VersionedDomainEvent<{
     orgId: string;
@@ -79,8 +79,10 @@ declare const assetEvents: {
     createdAt: unknown;
     updatedAt: unknown;
   }, import("zod").ZodObject<{
-    orgId: import("zod").ZodString;
     id: import("zod").ZodString;
+    orgId: import("zod").ZodString;
+    createdAt: import("zod").ZodCoercedDate<unknown>;
+    updatedAt: import("zod").ZodCoercedDate<unknown>;
     kind: import("zod").ZodEnum<{
       image: "image";
       video: "video";
@@ -99,8 +101,6 @@ declare const assetEvents: {
     filename: import("zod").ZodString;
     contentType: import("zod").ZodString;
     size: import("zod").ZodNumber;
-    createdAt: import("zod").ZodCoercedDate<unknown>;
-    updatedAt: import("zod").ZodCoercedDate<unknown>;
   }, import("zod/v4/core").$strip>>;
   assetDeleted: RuntimeEventDefinition<VersionedDomainEvent<{
     orgId: string;
@@ -129,8 +129,10 @@ declare const assetEvents: {
     createdAt: unknown;
     updatedAt: unknown;
   }, import("zod").ZodObject<{
-    orgId: import("zod").ZodString;
     id: import("zod").ZodString;
+    orgId: import("zod").ZodString;
+    createdAt: import("zod").ZodCoercedDate<unknown>;
+    updatedAt: import("zod").ZodCoercedDate<unknown>;
     kind: import("zod").ZodEnum<{
       image: "image";
       video: "video";
@@ -149,8 +151,6 @@ declare const assetEvents: {
     filename: import("zod").ZodString;
     contentType: import("zod").ZodString;
     size: import("zod").ZodNumber;
-    createdAt: import("zod").ZodCoercedDate<unknown>;
-    updatedAt: import("zod").ZodCoercedDate<unknown>;
   }, import("zod/v4/core").$strip>>;
 };
 type AssetCreated = EventOf<typeof assetEvents.assetCreated>;

package/dist/assets/index.d.ts

@@ -3,6 +3,7 @@ import { Asset, AssetKind, AssetSource, AssetStatus, AssetUrls, AssetView, Asset
 import { AssetCreated, AssetDeleted, AssetEvent, AssetReady, assetEvents } from "./events.js";
 import { FileUrls, ThumbnailOwner, createFileUrls } from "./file-urls.js";
 import "./model.js";
-import { AssetFiles, AssetsRepository, AssetsService, LibraryAssetReader, MemberImageReader, MemberUploadInput, ReadyFile } from "./ports.js";
+import { AssetFiles, AssetsRepository, AssetsService, LibraryAssetReader, MemberImageReader, MemberUploadInput, OrgDirectory, ReadyFile } from "./ports.js";
 import { AssetsServiceImpl, MEMBER_IMAGE_TYPE, isMemberImageType, kindOf } from "./service.js";
-export { type Asset, type AssetCreated, type AssetDeleted, type AssetEvent, type AssetFiles, type AssetKind, type AssetReady, type AssetSource, type AssetStatus, type AssetUrls, type AssetView, type AssetsQuery, type AssetsRepository, type AssetsService, AssetsServiceImpl, type FileUrls, type LibraryAssetReader, MEMBER_IMAGE_TYPE, type MemberImageReader, type MemberUploadInput, type Page, type ReadyFile, type RequestUploadInput, type ThumbnailOwner, type UploadTicket, assetEvents, createFileUrls, isMemberImageType, kindOf };
+import { UPLOADS_REMOVE_UNATTACHED_JOB, assetsJobs, assetsRecurringJobs } from "./jobs.js";
+export { type Asset, type AssetCreated, type AssetDeleted, type AssetEvent, type AssetFiles, type AssetKind, type AssetReady, type AssetSource, type AssetStatus, type AssetUrls, type AssetView, type AssetsQuery, type AssetsRepository, type AssetsService, AssetsServiceImpl, type FileUrls, type LibraryAssetReader, MEMBER_IMAGE_TYPE, type MemberImageReader, type MemberUploadInput, type OrgDirectory, type Page, type ReadyFile, type RequestUploadInput, type ThumbnailOwner, UPLOADS_REMOVE_UNATTACHED_JOB, type UploadTicket, assetEvents, assetsJobs, assetsRecurringJobs, createFileUrls, isMemberImageType, kindOf };

package/dist/assets/index.js

@@ -1,4 +1,5 @@
 import { assetEvents } from "./events.js";
 import { createFileUrls } from "./file-urls.js";
 import { AssetsServiceImpl, MEMBER_IMAGE_TYPE, isMemberImageType, kindOf } from "./service.js";
-export { AssetsServiceImpl, MEMBER_IMAGE_TYPE, assetEvents, createFileUrls, isMemberImageType, kindOf };
+import { UPLOADS_REMOVE_UNATTACHED_JOB, assetsJobs, assetsRecurringJobs } from "./jobs.js";
+export { AssetsServiceImpl, MEMBER_IMAGE_TYPE, UPLOADS_REMOVE_UNATTACHED_JOB, assetEvents, assetsJobs, assetsRecurringJobs, createFileUrls, isMemberImageType, kindOf };

package/dist/assets/jobs.d.ts

@@ -0,0 +1,15 @@
+import { Logger } from "../types/ports.js";
+import { RecurringJob, ScheduledJob } from "../shared/ports.js";
+import { AssetsService, OrgDirectory } from "./ports.js";
+//#region src/assets/jobs.d.ts
+declare const UPLOADS_REMOVE_UNATTACHED_JOB = "assets.uploads.removeUnattached";
+interface AssetsJobDeps {
+  assets: Pick<AssetsService, 'removeUnattached'>;
+  orgs: OrgDirectory;
+  logger?: Logger;
+}
+declare function assetsJobs(deps: AssetsJobDeps): ScheduledJob[];
+declare const assetsRecurringJobs: RecurringJob[];
+//#endregion
+export { AssetsJobDeps, UPLOADS_REMOVE_UNATTACHED_JOB, assetsJobs, assetsRecurringJobs };
+//# sourceMappingURL=jobs.d.ts.map

package/dist/assets/jobs.js

@@ -0,0 +1,30 @@
+import { noopLogger } from "../shared/logger.js";
+//#region src/assets/jobs.ts
+const UPLOADS_REMOVE_UNATTACHED_JOB = "assets.uploads.removeUnattached";
+function assetsJobs(deps) {
+	const logger = deps.logger ?? noopLogger;
+	return [{
+		job: UPLOADS_REMOVE_UNATTACHED_JOB,
+		async run(_payload, fire) {
+			let failed = 0;
+			for (const orgId of await deps.orgs.orgIds()) try {
+				await deps.assets.removeUnattached(orgId, fire.startedAt);
+			} catch (err) {
+				failed += 1;
+				logger.error("unattached uploads not swept", {
+					orgId,
+					err
+				});
+			}
+			if (failed > 0) throw new Error(`unattached uploads of ${failed} orgs could not be swept`);
+		}
+	}];
+}
+const assetsRecurringJobs = [{
+	job: UPLOADS_REMOVE_UNATTACHED_JOB,
+	cron: "0 * * * *"
+}];
+//#endregion
+export { UPLOADS_REMOVE_UNATTACHED_JOB, assetsJobs, assetsRecurringJobs };
+
+//# sourceMappingURL=jobs.js.map

package/dist/assets/jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.js","names":[],"sources":["../../src/assets/jobs.ts"],"sourcesContent":["import type { Logger, RecurringJob, ScheduledJob } from '../shared/ports.js';\nimport { noopLogger } from '../shared/logger.js';\nimport type { AssetsService, OrgDirectory } from './ports.js';\n\nexport const UPLOADS_REMOVE_UNATTACHED_JOB = 'assets.uploads.removeUnattached';\n\nexport interface AssetsJobDeps {\n  assets: Pick<AssetsService, 'removeUnattached'>;\n  orgs: OrgDirectory;\n  logger?: Logger;\n}\n\nexport function assetsJobs(deps: AssetsJobDeps): ScheduledJob[] {\n  const logger = deps.logger ?? noopLogger;\n  return [\n    {\n      job: UPLOADS_REMOVE_UNATTACHED_JOB,\n      async run(_payload, fire) {\n        let failed = 0;\n        for (const orgId of await deps.orgs.orgIds()) {\n          try {\n            await deps.assets.removeUnattached(orgId, fire.startedAt);\n          } catch (err) {\n            failed += 1;\n            logger.error('unattached uploads not swept', { orgId, err });\n          }\n        }\n        if (failed > 0) {\n          throw new Error(`unattached uploads of ${failed} orgs could not be swept`);\n        }\n      },\n    },\n  ];\n}\n\nexport const assetsRecurringJobs: RecurringJob[] = [\n  { job: UPLOADS_REMOVE_UNATTACHED_JOB, cron: '0 * * * *' },\n];\n"],"mappings":";;AAIA,MAAa,gCAAgC;AAQ7C,SAAgB,WAAW,MAAqC;CAC9D,MAAM,SAAS,KAAK,UAAU;CAC9B,OAAO,CACL;EACE,KAAK;EACL,MAAM,IAAI,UAAU,MAAM;GACxB,IAAI,SAAS;GACb,KAAK,MAAM,SAAS,MAAM,KAAK,KAAK,OAAO,GACzC,IAAI;IACF,MAAM,KAAK,OAAO,iBAAiB,OAAO,KAAK,SAAS;GAC1D,SAAS,KAAK;IACZ,UAAU;IACV,OAAO,MAAM,gCAAgC;KAAE;KAAO;IAAI,CAAC;GAC7D;GAEF,IAAI,SAAS,GACX,MAAM,IAAI,MAAM,yBAAyB,OAAO,yBAAyB;EAE7E;CACF,CACF;AACF;AAEA,MAAa,sBAAsC,CACjD;CAAE,KAAK;CAA+B,MAAM;AAAY,CAC1D"}

package/dist/assets/ports.d.ts

@@ -40,9 +40,11 @@ interface AssetsService extends MemberImageReader, LibraryAssetReader, AssetFile
   ownUploadFile(orgId: string, assetId: string, orgUserId: string): Promise<string | null>;
   remove(orgId: string, id: string): Promise<boolean>;
   removeOwn(orgId: string, id: string, orgUserId: string): Promise<boolean>;
-  hasUnattached(orgId: string, now: Date): Promise<boolean>;
   removeUnattached(orgId: string, now: Date): Promise<number>;
 }
+interface OrgDirectory {
+  orgIds(): Promise<string[]>;
+}
 interface AssetsRepository {
   insert(orgId: string, asset: Asset): Promise<Asset>;
   list(orgId: string, query: AssetsQuery): Promise<Page<Asset>>;
@@ -50,7 +52,6 @@ interface AssetsRepository {
   findByIds(orgId: string, ids: string[]): Promise<Asset[]>;
   markReady(orgId: string, id: string, patch: Pick<Asset, 'key' | 'kind' | 'size' | 'contentType'>): Promise<Asset | null>;
   delete(orgId: string, id: string): Promise<boolean>;
-  hasUnreferencedMemberUploads(orgId: string, before: Date): Promise<boolean>;
   listUnreferencedMemberUploads(orgId: string, before: Date): Promise<Asset[]>;
   heldKeys(orgId: string, keys: string[]): Promise<string[]>;
 }
@@ -60,5 +61,5 @@ interface AssetsWriteScope {
 }
 type AssetsUnitOfWork = UnitOfWork<AssetsWriteScope>;
 //#endregion
-export { AssetFiles, AssetsRepository, AssetsService, AssetsUnitOfWork, AssetsWriteScope, LibraryAssetReader, MemberImageReader, MemberUploadInput, ReadyFile };
+export { AssetFiles, AssetsRepository, AssetsService, AssetsUnitOfWork, AssetsWriteScope, LibraryAssetReader, MemberImageReader, MemberUploadInput, OrgDirectory, ReadyFile };
 //# sourceMappingURL=ports.d.ts.map

package/dist/assets/service.d.ts

@@ -45,7 +45,6 @@ declare class AssetsServiceImpl implements AssetsService {
   }): Promise<string | null>;
   remove(orgId: string, id: string): Promise<boolean>;
   removeOwn(orgId: string, id: string, orgUserId: string): Promise<boolean>;
-  hasUnattached(orgId: string, now: Date): Promise<boolean>;
   removeUnattached(orgId: string, now: Date): Promise<number>;
   private strayUploads;
   private finalize;

package/dist/assets/service.js

@@ -220,10 +220,6 @@ var AssetsServiceImpl = class {
 		if (!asset || asset.source !== "member" || asset.uploadedBy !== orgUserId) return false;
 		return this.remove(orgId, id);
 	}
-	async hasUnattached(orgId, now) {
-		if (await this.repo.hasUnreferencedMemberUploads(orgId, graceCutoff(now))) return true;
-		return (await this.strayUploads(orgId, now)).length > 0;
-	}
 	async removeUnattached(orgId, now) {
 		const stale = await this.repo.listUnreferencedMemberUploads(orgId, graceCutoff(now));
 		let removed = 0;

package/dist/assets/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","names":[],"sources":["../../src/assets/service.ts"],"sourcesContent":["import { genId } from '../shared/id.js';\nimport type { Logger, ObjectStorage } from '../shared/ports.js';\nimport { ConflictError, ForbiddenError, InvalidInputError } from '../shared/errors.js';\nimport type {\n  Asset,\n  AssetKind,\n  AssetView,\n  AssetsQuery,\n  Page,\n  RequestUploadInput,\n  UploadTicket,\n} from './model.js';\nimport type {\n  AssetsRepository,\n  AssetsService,\n  AssetsUnitOfWork,\n  MemberUploadInput,\n  ReadyFile,\n} from './ports.js';\nimport type { FileUrls } from './file-urls.js';\nimport { noopLogger } from '../shared/logger.js';\nimport { assetEvents } from './events.js';\n\nconst UNATTACHED_UPLOAD_GRACE_MS = 60 * 60 * 1000;\n\nexport const MEMBER_IMAGE_TYPE = /^image\\/(png|jpeg|gif|webp|avif)$/i;\nconst MEMBER_IMAGE_REFUSAL = 'A member upload must be a PNG, JPEG, GIF, WebP or AVIF image';\n\nexport function isMemberImageType(contentType: string): boolean {\n  return MEMBER_IMAGE_TYPE.test(contentType.trim());\n}\n\nexport function kindOf(contentType: string): AssetKind {\n  const type = contentType.trim().toLowerCase();\n  if (type.startsWith('image/')) {\n    return 'image';\n  }\n  if (type.startsWith('video/')) {\n    return 'video';\n  }\n  if (type.startsWith('audio/')) {\n    return 'audio';\n  }\n  return 'document';\n}\n\nfunction orgPrefix(orgId: string): string {\n  return `org/${orgId}/`;\n}\n\nfunction sanitizeFilename(filename: string): string {\n  const base = filename.split(/[\\\\/]/).pop() ?? 'file';\n  return base.replace(/[^a-zA-Z0-9._-]/g, '_').slice(0, 120) || 'file';\n}\n\nfunction storedKey(orgId: string, folder: string, id: string, filename: string): string {\n  return `${orgPrefix(orgId)}${folder}/${id}/${sanitizeFilename(filename)}`;\n}\n\nfunction finalMemberKey(orgId: string, asset: Asset): string {\n  return `${orgPrefix(orgId)}image/${asset.id}/${sanitizeFilename(asset.filename)}`;\n}\n\nfunction graceCutoff(now: Date): Date {\n  return new Date(now.getTime() - UNATTACHED_UPLOAD_GRACE_MS);\n}\n\nexport type AssetsServiceParams = {\n  storage: ObjectStorage;\n  repo: AssetsRepository;\n  uow: AssetsUnitOfWork;\n  memberImageMaxBytes: number;\n  downloadLinkExpirySeconds: number;\n  fileUrls: FileUrls;\n  logger?: Logger;\n};\n\nexport class AssetsServiceImpl implements AssetsService {\n  private readonly storage: ObjectStorage;\n  private readonly repo: AssetsRepository;\n  private readonly uow: AssetsUnitOfWork;\n  private readonly memberImageMaxBytes: number;\n  private readonly downloadLinkExpirySeconds: number;\n  private readonly fileUrls: FileUrls;\n  private readonly logger: Logger;\n\n  constructor(params: AssetsServiceParams) {\n    if (!Number.isSafeInteger(params.memberImageMaxBytes) || params.memberImageMaxBytes <= 0) {\n      throw new Error(\n        `invalid memberImageMaxBytes \"${params.memberImageMaxBytes}\" (expected a positive integer)`,\n      );\n    }\n    if (\n      !Number.isSafeInteger(params.downloadLinkExpirySeconds) ||\n      params.downloadLinkExpirySeconds <= 0\n    ) {\n      throw new Error(\n        `invalid downloadLinkExpirySeconds \"${params.downloadLinkExpirySeconds}\" (expected a positive integer)`,\n      );\n    }\n    this.storage = params.storage;\n    this.repo = params.repo;\n    this.uow = params.uow;\n    this.memberImageMaxBytes = params.memberImageMaxBytes;\n    this.downloadLinkExpirySeconds = params.downloadLinkExpirySeconds;\n    this.fileUrls = params.fileUrls;\n    this.logger = params.logger ?? noopLogger;\n  }\n\n  async requestUpload(orgId: string, input: RequestUploadInput): Promise<UploadTicket> {\n    const id = genId('asset');\n    const kind = kindOf(input.contentType);\n    const folder = input.source === 'member' ? 'uploads' : kind;\n    const key = storedKey(orgId, folder, id, input.filename);\n    const presigned = await this.storage.presignUpload({ key, contentType: input.contentType });\n    const now = new Date();\n    const asset = await this.uow.run(async ({ assets, outbox }) => {\n      const asset = await assets.insert(orgId, {\n        orgId,\n        id,\n        key,\n        kind,\n        source: input.source,\n        filename: input.filename,\n        contentType: input.contentType,\n        size: 0,\n        status: 'pending',\n        uploadedBy: input.uploadedBy,\n        createdAt: now,\n        updatedAt: now,\n      });\n      await outbox.append([assetEvents.assetCreated.make({ orgId, data: asset })]);\n      return asset;\n    });\n    this.logger.info('asset upload requested', {\n      orgId,\n      assetId: id,\n      kind,\n      source: input.source,\n    });\n    return {\n      asset: { ...asset, url: null, downloadUrl: null },\n      uploadUrl: presigned.url,\n      method: 'PUT',\n      expiresInSeconds: presigned.expiresInSeconds,\n      headers: presigned.headers,\n    };\n  }\n\n  async requestMemberUpload(\n    orgId: string,\n    orgUserId: string,\n    input: MemberUploadInput,\n  ): Promise<UploadTicket> {\n    if (!isMemberImageType(input.contentType)) {\n      throw new InvalidInputError(MEMBER_IMAGE_REFUSAL);\n    }\n    return this.requestUpload(orgId, {\n      filename: input.filename,\n      contentType: input.contentType,\n      source: 'member',\n      uploadedBy: orgUserId,\n    });\n  }\n\n  async confirm(orgId: string, id: string): Promise<AssetView | null> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset) {\n      return null;\n    }\n    if (asset.source === 'member') {\n      throw new ForbiddenError('Only the uploader can finalize a member upload');\n    }\n    const confirmed = await this.finalize(orgId, asset);\n    return confirmed ? this.view(confirmed) : null;\n  }\n\n  async confirmOwn(orgId: string, id: string, orgUserId: string): Promise<AssetView | null> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset || asset.source !== 'member' || asset.uploadedBy !== orgUserId) {\n      this.logger.debug('upload confirm refused', { orgId, assetId: id, orgUserId });\n      return null;\n    }\n    const confirmed = await this.finalize(orgId, asset);\n    if (!confirmed) {\n      return null;\n    }\n    return confirmed.status === 'ready'\n      ? { ...confirmed, url: this.fileUrls.memberUpload(confirmed.id), downloadUrl: null }\n      : { ...confirmed, url: null, downloadUrl: null };\n  }\n\n  async ownUploadFile(orgId: string, assetId: string, orgUserId: string): Promise<string | null> {\n    if (!(await this.ownsImage(orgId, assetId, orgUserId))) {\n      this.logger.warn('upload file not served — not the uploader', { orgId, assetId, orgUserId });\n      return null;\n    }\n    return this.signFile(orgId, assetId);\n  }\n\n  async ownsImage(orgId: string, assetId: string, orgUserId: string): Promise<boolean> {\n    const asset = await this.repo.findById(orgId, assetId);\n    return (\n      asset !== null &&\n      asset.source === 'member' &&\n      asset.kind === 'image' &&\n      asset.status === 'ready' &&\n      asset.uploadedBy === orgUserId\n    );\n  }\n\n  async libraryAssetsAmong(orgId: string, assetIds: string[]): Promise<string[]> {\n    if (assetIds.length === 0) {\n      return [];\n    }\n    const rows = await this.repo.findByIds(orgId, [...new Set(assetIds)]);\n    const library = new Set(\n      rows.filter((a) => a.source === 'library' && a.status === 'ready').map((a) => a.id),\n    );\n    return assetIds.filter((id) => library.has(id));\n  }\n\n  async list(orgId: string, query: AssetsQuery): Promise<Page<AssetView>> {\n    const page = await this.repo.list(orgId, { ...query, source: query.source ?? 'library' });\n    return { ...page, rows: await Promise.all(page.rows.map((asset) => this.view(asset))) };\n  }\n\n  async get(orgId: string, id: string): Promise<AssetView | null> {\n    const asset = await this.repo.findById(orgId, id);\n    return asset ? this.view(asset) : null;\n  }\n\n  async readyFiles(orgId: string, assetIds: readonly string[]): Promise<Record<string, ReadyFile>> {\n    const ready = await this.readyAmong(orgId, assetIds);\n    return Object.fromEntries(\n      ready.map((asset) => [\n        asset.id,\n        { filename: asset.filename, contentType: asset.contentType, size: asset.size },\n      ]),\n    );\n  }\n\n  async signFile(\n    orgId: string,\n    assetId: string,\n    opts: { saveAs?: string } = {},\n  ): Promise<string | null> {\n    const [asset] = await this.readyAmong(orgId, [assetId]);\n    if (!asset) {\n      this.logger.warn('file not served — no ready asset', { orgId, assetId });\n      return null;\n    }\n    return opts.saveAs === undefined\n      ? this.storage.presignDownload({ key: asset.key })\n      : this.storage.presignDownload({\n          key: asset.key,\n          downloadFilename: opts.saveAs,\n          expiresInSeconds: this.downloadLinkExpirySeconds,\n        });\n  }\n\n  async libraryFile(\n    orgId: string,\n    assetId: string,\n    opts: { download: boolean },\n  ): Promise<string | null> {\n    const asset = await this.repo.findById(orgId, assetId);\n    if (!asset || asset.source !== 'library') {\n      this.logger.warn('library file not served — not a library asset', { orgId, assetId });\n      return null;\n    }\n    return this.signFile(orgId, assetId, opts.download ? { saveAs: asset.filename } : {});\n  }\n\n  async remove(orgId: string, id: string): Promise<boolean> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset) {\n      return false;\n    }\n    const removed = await this.discard(orgId, asset);\n    if (removed) {\n      this.logger.info('asset removed', { orgId, assetId: id });\n    }\n    return removed;\n  }\n\n  async removeOwn(orgId: string, id: string, orgUserId: string): Promise<boolean> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset || asset.source !== 'member' || asset.uploadedBy !== orgUserId) {\n      return false;\n    }\n    return this.remove(orgId, id);\n  }\n\n  async hasUnattached(orgId: string, now: Date): Promise<boolean> {\n    if (await this.repo.hasUnreferencedMemberUploads(orgId, graceCutoff(now))) {\n      return true;\n    }\n    return (await this.strayUploads(orgId, now)).length > 0;\n  }\n\n  async removeUnattached(orgId: string, now: Date): Promise<number> {\n    const stale = await this.repo.listUnreferencedMemberUploads(orgId, graceCutoff(now));\n    let removed = 0;\n    let failed = 0;\n    for (const asset of stale) {\n      try {\n        if (await this.discard(orgId, asset)) {\n          removed += 1;\n        }\n      } catch (err) {\n        if (!(err instanceof ConflictError)) {\n          failed += 1;\n          this.logger.error('unattached upload not removed', { orgId, assetId: asset.id, err });\n        }\n      }\n    }\n    let stray = 0;\n    for (const key of await this.strayUploads(orgId, now)) {\n      try {\n        await this.storage.remove(key);\n        stray += 1;\n      } catch (err) {\n        failed += 1;\n        this.logger.warn('stray upload not removed', { orgId, err });\n      }\n    }\n    if (removed > 0 || stray > 0 || failed > 0) {\n      this.logger.info('unattached uploads removed', { orgId, count: removed, stray, failed });\n    }\n    return removed + stray;\n  }\n\n  private async strayUploads(orgId: string, now: Date): Promise<string[]> {\n    const cutoff = now.getTime() - this.storage.uploadExpirySeconds * 1000;\n    const objects = await this.storage.list(`${orgPrefix(orgId)}uploads/`);\n    const old = objects\n      .filter((o) => o.lastModified !== undefined && Date.parse(o.lastModified) < cutoff)\n      .map((o) => o.key);\n    if (old.length === 0) {\n      return [];\n    }\n    const held = new Set(await this.repo.heldKeys(orgId, old));\n    return old.filter((key) => !held.has(key));\n  }\n\n  private async finalize(orgId: string, asset: Asset): Promise<Asset | null> {\n    if (asset.status !== 'pending') {\n      return asset;\n    }\n    if (asset.source === 'member') {\n      return this.finalizeMember(orgId, asset);\n    }\n    const stat = await this.storage.stat(asset.key);\n    if (!stat) {\n      this.logger.debug('asset not yet uploaded', { orgId, assetId: asset.id });\n      return asset;\n    }\n    const contentType = stat.contentType ?? asset.contentType;\n    const ready = await this.markReady(orgId, asset, {\n      key: asset.key,\n      kind: kindOf(contentType),\n      size: stat.size,\n      contentType,\n    });\n    return ready ?? this.repo.findById(orgId, asset.id);\n  }\n\n  private async finalizeMember(orgId: string, asset: Asset): Promise<Asset | null> {\n    if (!(await this.storage.stat(asset.key))) {\n      this.logger.debug('asset not yet uploaded', { orgId, assetId: asset.id });\n      return asset;\n    }\n    const key = finalMemberKey(orgId, asset);\n    await this.storage.copy({ from: asset.key, to: key });\n    const stat = await this.storage.stat(key);\n    if (!stat) {\n      throw new Error('copied upload not found');\n    }\n    const contentType = asset.contentType;\n    const kind = kindOf(contentType);\n    const reason = !isMemberImageType(contentType)\n      ? MEMBER_IMAGE_REFUSAL\n      : stat.contentType !== undefined && stat.contentType !== contentType\n        ? 'The uploaded file is not the declared type'\n        : stat.size > this.memberImageMaxBytes\n          ? 'This image is too large'\n          : null;\n    if (reason) {\n      await this.removeObject(orgId, asset.id, key);\n      await this.discard(orgId, asset);\n      this.logger.info('member upload refused', { orgId, assetId: asset.id, reason });\n      throw new InvalidInputError(reason);\n    }\n    const ready = await this.markReady(orgId, asset, { key, kind, size: stat.size, contentType });\n    if (!ready) {\n      return this.repo.findById(orgId, asset.id);\n    }\n    await this.removeObject(orgId, asset.id, asset.key);\n    return ready;\n  }\n\n  private async markReady(\n    orgId: string,\n    asset: Asset,\n    patch: Pick<Asset, 'key' | 'kind' | 'size' | 'contentType'>,\n  ): Promise<Asset | null> {\n    const updated = await this.uow.run(async ({ assets, outbox }) => {\n      const updated = await assets.markReady(orgId, asset.id, patch);\n      if (updated) {\n        await outbox.append([assetEvents.assetReady.make({ orgId, data: updated })]);\n      }\n      return updated;\n    });\n    if (updated) {\n      this.logger.info('asset confirmed', { orgId, assetId: asset.id });\n    }\n    return updated;\n  }\n\n  private async readyAmong(orgId: string, assetIds: readonly string[]): Promise<Asset[]> {\n    const ids = [...new Set(assetIds)];\n    if (ids.length === 0) {\n      return [];\n    }\n    const rows = await this.repo.findByIds(orgId, ids);\n    return rows.filter((asset) => asset.orgId === orgId && asset.status === 'ready');\n  }\n\n  private view(asset: Asset): AssetView {\n    if (asset.source !== 'library' || asset.status !== 'ready') {\n      return { ...asset, url: null, downloadUrl: null };\n    }\n    return {\n      ...asset,\n      url: this.fileUrls.libraryFile(asset.id),\n      downloadUrl: this.fileUrls.libraryDownload(asset.id),\n    };\n  }\n\n  private async discard(orgId: string, asset: Asset): Promise<boolean> {\n    const deleted = await this.uow.run(async ({ assets, outbox }) => {\n      const deleted = await assets.delete(orgId, asset.id);\n      if (deleted) {\n        await outbox.append([assetEvents.assetDeleted.make({ orgId, data: asset })]);\n      }\n      return deleted;\n    });\n    if (deleted) {\n      await this.removeObject(orgId, asset.id, asset.key);\n    }\n    return deleted;\n  }\n\n  private async removeObject(orgId: string, assetId: string, key: string): Promise<void> {\n    try {\n      await this.storage.remove(key);\n    } catch (error) {\n      this.logger.warn('stored object not removed', { orgId, assetId, err: error });\n    }\n  }\n}\n"],"mappings":";;;;;AAuBA,MAAM,6BAA6B,OAAU;AAE7C,MAAa,oBAAoB;AACjC,MAAM,uBAAuB;AAE7B,SAAgB,kBAAkB,aAA8B;CAC9D,OAAO,kBAAkB,KAAK,YAAY,KAAK,CAAC;AAClD;AAEA,SAAgB,OAAO,aAAgC;CACrD,MAAM,OAAO,YAAY,KAAK,CAAC,CAAC,YAAY;CAC5C,IAAI,KAAK,WAAW,QAAQ,GAC1B,OAAO;CAET,IAAI,KAAK,WAAW,QAAQ,GAC1B,OAAO;CAET,IAAI,KAAK,WAAW,QAAQ,GAC1B,OAAO;CAET,OAAO;AACT;AAEA,SAAS,UAAU,OAAuB;CACxC,OAAO,OAAO,MAAM;AACtB;AAEA,SAAS,iBAAiB,UAA0B;CAElD,QADa,SAAS,MAAM,OAAO,CAAC,CAAC,IAAI,KAAK,OAAA,CAClC,QAAQ,oBAAoB,GAAG,CAAC,CAAC,MAAM,GAAG,GAAG,KAAK;AAChE;AAEA,SAAS,UAAU,OAAe,QAAgB,IAAY,UAA0B;CACtF,OAAO,GAAG,UAAU,KAAK,IAAI,OAAO,GAAG,GAAG,GAAG,iBAAiB,QAAQ;AACxE;AAEA,SAAS,eAAe,OAAe,OAAsB;CAC3D,OAAO,GAAG,UAAU,KAAK,EAAE,QAAQ,MAAM,GAAG,GAAG,iBAAiB,MAAM,QAAQ;AAChF;AAEA,SAAS,YAAY,KAAiB;CACpC,uBAAO,IAAI,KAAK,IAAI,QAAQ,IAAI,0BAA0B;AAC5D;AAYA,IAAa,oBAAb,MAAwD;CACtD;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAA6B;EACvC,IAAI,CAAC,OAAO,cAAc,OAAO,mBAAmB,KAAK,OAAO,uBAAuB,GACrF,MAAM,IAAI,MACR,gCAAgC,OAAO,oBAAoB,gCAC7D;EAEF,IACE,CAAC,OAAO,cAAc,OAAO,yBAAyB,KACtD,OAAO,6BAA6B,GAEpC,MAAM,IAAI,MACR,sCAAsC,OAAO,0BAA0B,gCACzE;EAEF,KAAK,UAAU,OAAO;EACtB,KAAK,OAAO,OAAO;EACnB,KAAK,MAAM,OAAO;EAClB,KAAK,sBAAsB,OAAO;EAClC,KAAK,4BAA4B,OAAO;EACxC,KAAK,WAAW,OAAO;EACvB,KAAK,SAAS,OAAO,UAAU;CACjC;CAEA,MAAM,cAAc,OAAe,OAAkD;EACnF,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,OAAO,OAAO,MAAM,WAAW;EAErC,MAAM,MAAM,UAAU,OADP,MAAM,WAAW,WAAW,YAAY,MAClB,IAAI,MAAM,QAAQ;EACvD,MAAM,YAAY,MAAM,KAAK,QAAQ,cAAc;GAAE;GAAK,aAAa,MAAM;EAAY,CAAC;EAC1F,MAAM,sBAAM,IAAI,KAAK;EACrB,MAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,aAAa;GAC7D,MAAM,QAAQ,MAAM,OAAO,OAAO,OAAO;IACvC;IACA;IACA;IACA;IACA,QAAQ,MAAM;IACd,UAAU,MAAM;IAChB,aAAa,MAAM;IACnB,MAAM;IACN,QAAQ;IACR,YAAY,MAAM;IAClB,WAAW;IACX,WAAW;GACb,CAAC;GACD,MAAM,OAAO,OAAO,CAAC,YAAY,aAAa,KAAK;IAAE;IAAO,MAAM;GAAM,CAAC,CAAC,CAAC;GAC3E,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,0BAA0B;GACzC;GACA,SAAS;GACT;GACA,QAAQ,MAAM;EAChB,CAAC;EACD,OAAO;GACL,OAAO;IAAE,GAAG;IAAO,KAAK;IAAM,aAAa;GAAK;GAChD,WAAW,UAAU;GACrB,QAAQ;GACR,kBAAkB,UAAU;GAC5B,SAAS,UAAU;EACrB;CACF;CAEA,MAAM,oBACJ,OACA,WACA,OACuB;EACvB,IAAI,CAAC,kBAAkB,MAAM,WAAW,GACtC,MAAM,IAAI,kBAAkB,oBAAoB;EAElD,OAAO,KAAK,cAAc,OAAO;GAC/B,UAAU,MAAM;GAChB,aAAa,MAAM;GACnB,QAAQ;GACR,YAAY;EACd,CAAC;CACH;CAEA,MAAM,QAAQ,OAAe,IAAuC;EAClE,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,OACH,OAAO;EAET,IAAI,MAAM,WAAW,UACnB,MAAM,IAAI,eAAe,gDAAgD;EAE3E,MAAM,YAAY,MAAM,KAAK,SAAS,OAAO,KAAK;EAClD,OAAO,YAAY,KAAK,KAAK,SAAS,IAAI;CAC5C;CAEA,MAAM,WAAW,OAAe,IAAY,WAA8C;EACxF,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,SAAS,MAAM,WAAW,YAAY,MAAM,eAAe,WAAW;GACzE,KAAK,OAAO,MAAM,0BAA0B;IAAE;IAAO,SAAS;IAAI;GAAU,CAAC;GAC7E,OAAO;EACT;EACA,MAAM,YAAY,MAAM,KAAK,SAAS,OAAO,KAAK;EAClD,IAAI,CAAC,WACH,OAAO;EAET,OAAO,UAAU,WAAW,UACxB;GAAE,GAAG;GAAW,KAAK,KAAK,SAAS,aAAa,UAAU,EAAE;GAAG,aAAa;EAAK,IACjF;GAAE,GAAG;GAAW,KAAK;GAAM,aAAa;EAAK;CACnD;CAEA,MAAM,cAAc,OAAe,SAAiB,WAA2C;EAC7F,IAAI,CAAE,MAAM,KAAK,UAAU,OAAO,SAAS,SAAS,GAAI;GACtD,KAAK,OAAO,KAAK,6CAA6C;IAAE;IAAO;IAAS;GAAU,CAAC;GAC3F,OAAO;EACT;EACA,OAAO,KAAK,SAAS,OAAO,OAAO;CACrC;CAEA,MAAM,UAAU,OAAe,SAAiB,WAAqC;EACnF,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,OAAO;EACrD,OACE,UAAU,QACV,MAAM,WAAW,YACjB,MAAM,SAAS,WACf,MAAM,WAAW,WACjB,MAAM,eAAe;CAEzB;CAEA,MAAM,mBAAmB,OAAe,UAAuC;EAC7E,IAAI,SAAS,WAAW,GACtB,OAAO,CAAC;EAEV,MAAM,OAAO,MAAM,KAAK,KAAK,UAAU,OAAO,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,CAAC;EACpE,MAAM,UAAU,IAAI,IAClB,KAAK,QAAQ,MAAM,EAAE,WAAW,aAAa,EAAE,WAAW,OAAO,CAAC,CAAC,KAAK,MAAM,EAAE,EAAE,CACpF;EACA,OAAO,SAAS,QAAQ,OAAO,QAAQ,IAAI,EAAE,CAAC;CAChD;CAEA,MAAM,KAAK,OAAe,OAA8C;EACtE,MAAM,OAAO,MAAM,KAAK,KAAK,KAAK,OAAO;GAAE,GAAG;GAAO,QAAQ,MAAM,UAAU;EAAU,CAAC;EACxF,OAAO;GAAE,GAAG;GAAM,MAAM,MAAM,QAAQ,IAAI,KAAK,KAAK,KAAK,UAAU,KAAK,KAAK,KAAK,CAAC,CAAC;EAAE;CACxF;CAEA,MAAM,IAAI,OAAe,IAAuC;EAC9D,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,OAAO,QAAQ,KAAK,KAAK,KAAK,IAAI;CACpC;CAEA,MAAM,WAAW,OAAe,UAAiE;EAC/F,MAAM,QAAQ,MAAM,KAAK,WAAW,OAAO,QAAQ;EACnD,OAAO,OAAO,YACZ,MAAM,KAAK,UAAU,CACnB,MAAM,IACN;GAAE,UAAU,MAAM;GAAU,aAAa,MAAM;GAAa,MAAM,MAAM;EAAK,CAC/E,CAAC,CACH;CACF;CAEA,MAAM,SACJ,OACA,SACA,OAA4B,CAAC,GACL;EACxB,MAAM,CAAC,SAAS,MAAM,KAAK,WAAW,OAAO,CAAC,OAAO,CAAC;EACtD,IAAI,CAAC,OAAO;GACV,KAAK,OAAO,KAAK,oCAAoC;IAAE;IAAO;GAAQ,CAAC;GACvE,OAAO;EACT;EACA,OAAO,KAAK,WAAW,KAAA,IACnB,KAAK,QAAQ,gBAAgB,EAAE,KAAK,MAAM,IAAI,CAAC,IAC/C,KAAK,QAAQ,gBAAgB;GAC3B,KAAK,MAAM;GACX,kBAAkB,KAAK;GACvB,kBAAkB,KAAK;EACzB,CAAC;CACP;CAEA,MAAM,YACJ,OACA,SACA,MACwB;EACxB,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,OAAO;EACrD,IAAI,CAAC,SAAS,MAAM,WAAW,WAAW;GACxC,KAAK,OAAO,KAAK,iDAAiD;IAAE;IAAO;GAAQ,CAAC;GACpF,OAAO;EACT;EACA,OAAO,KAAK,SAAS,OAAO,SAAS,KAAK,WAAW,EAAE,QAAQ,MAAM,SAAS,IAAI,CAAC,CAAC;CACtF;CAEA,MAAM,OAAO,OAAe,IAA8B;EACxD,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,OACH,OAAO;EAET,MAAM,UAAU,MAAM,KAAK,QAAQ,OAAO,KAAK;EAC/C,IAAI,SACF,KAAK,OAAO,KAAK,iBAAiB;GAAE;GAAO,SAAS;EAAG,CAAC;EAE1D,OAAO;CACT;CAEA,MAAM,UAAU,OAAe,IAAY,WAAqC;EAC9E,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,SAAS,MAAM,WAAW,YAAY,MAAM,eAAe,WAC9D,OAAO;EAET,OAAO,KAAK,OAAO,OAAO,EAAE;CAC9B;CAEA,MAAM,cAAc,OAAe,KAA6B;EAC9D,IAAI,MAAM,KAAK,KAAK,6BAA6B,OAAO,YAAY,GAAG,CAAC,GACtE,OAAO;EAET,QAAQ,MAAM,KAAK,aAAa,OAAO,GAAG,EAAA,CAAG,SAAS;CACxD;CAEA,MAAM,iBAAiB,OAAe,KAA4B;EAChE,MAAM,QAAQ,MAAM,KAAK,KAAK,8BAA8B,OAAO,YAAY,GAAG,CAAC;EACnF,IAAI,UAAU;EACd,IAAI,SAAS;EACb,KAAK,MAAM,SAAS,OAClB,IAAI;GACF,IAAI,MAAM,KAAK,QAAQ,OAAO,KAAK,GACjC,WAAW;EAEf,SAAS,KAAK;GACZ,IAAI,EAAE,eAAe,gBAAgB;IACnC,UAAU;IACV,KAAK,OAAO,MAAM,iCAAiC;KAAE;KAAO,SAAS,MAAM;KAAI;IAAI,CAAC;GACtF;EACF;EAEF,IAAI,QAAQ;EACZ,KAAK,MAAM,OAAO,MAAM,KAAK,aAAa,OAAO,GAAG,GAClD,IAAI;GACF,MAAM,KAAK,QAAQ,OAAO,GAAG;GAC7B,SAAS;EACX,SAAS,KAAK;GACZ,UAAU;GACV,KAAK,OAAO,KAAK,4BAA4B;IAAE;IAAO;GAAI,CAAC;EAC7D;EAEF,IAAI,UAAU,KAAK,QAAQ,KAAK,SAAS,GACvC,KAAK,OAAO,KAAK,8BAA8B;GAAE;GAAO,OAAO;GAAS;GAAO;EAAO,CAAC;EAEzF,OAAO,UAAU;CACnB;CAEA,MAAc,aAAa,OAAe,KAA8B;EACtE,MAAM,SAAS,IAAI,QAAQ,IAAI,KAAK,QAAQ,sBAAsB;EAElE,MAAM,OAAM,MADU,KAAK,QAAQ,KAAK,GAAG,UAAU,KAAK,EAAE,SAAS,EAAA,CAElE,QAAQ,MAAM,EAAE,iBAAiB,KAAA,KAAa,KAAK,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,CAClF,KAAK,MAAM,EAAE,GAAG;EACnB,IAAI,IAAI,WAAW,GACjB,OAAO,CAAC;EAEV,MAAM,OAAO,IAAI,IAAI,MAAM,KAAK,KAAK,SAAS,OAAO,GAAG,CAAC;EACzD,OAAO,IAAI,QAAQ,QAAQ,CAAC,KAAK,IAAI,GAAG,CAAC;CAC3C;CAEA,MAAc,SAAS,OAAe,OAAqC;EACzE,IAAI,MAAM,WAAW,WACnB,OAAO;EAET,IAAI,MAAM,WAAW,UACnB,OAAO,KAAK,eAAe,OAAO,KAAK;EAEzC,MAAM,OAAO,MAAM,KAAK,QAAQ,KAAK,MAAM,GAAG;EAC9C,IAAI,CAAC,MAAM;GACT,KAAK,OAAO,MAAM,0BAA0B;IAAE;IAAO,SAAS,MAAM;GAAG,CAAC;GACxE,OAAO;EACT;EACA,MAAM,cAAc,KAAK,eAAe,MAAM;EAO9C,OAAO,MANa,KAAK,UAAU,OAAO,OAAO;GAC/C,KAAK,MAAM;GACX,MAAM,OAAO,WAAW;GACxB,MAAM,KAAK;GACX;EACF,CAAC,KACe,KAAK,KAAK,SAAS,OAAO,MAAM,EAAE;CACpD;CAEA,MAAc,eAAe,OAAe,OAAqC;EAC/E,IAAI,CAAE,MAAM,KAAK,QAAQ,KAAK,MAAM,GAAG,GAAI;GACzC,KAAK,OAAO,MAAM,0BAA0B;IAAE;IAAO,SAAS,MAAM;GAAG,CAAC;GACxE,OAAO;EACT;EACA,MAAM,MAAM,eAAe,OAAO,KAAK;EACvC,MAAM,KAAK,QAAQ,KAAK;GAAE,MAAM,MAAM;GAAK,IAAI;EAAI,CAAC;EACpD,MAAM,OAAO,MAAM,KAAK,QAAQ,KAAK,GAAG;EACxC,IAAI,CAAC,MACH,MAAM,IAAI,MAAM,yBAAyB;EAE3C,MAAM,cAAc,MAAM;EAC1B,MAAM,OAAO,OAAO,WAAW;EAC/B,MAAM,SAAS,CAAC,kBAAkB,WAAW,IACzC,uBACA,KAAK,gBAAgB,KAAA,KAAa,KAAK,gBAAgB,cACrD,+CACA,KAAK,OAAO,KAAK,sBACf,4BACA;EACR,IAAI,QAAQ;GACV,MAAM,KAAK,aAAa,OAAO,MAAM,IAAI,GAAG;GAC5C,MAAM,KAAK,QAAQ,OAAO,KAAK;GAC/B,KAAK,OAAO,KAAK,yBAAyB;IAAE;IAAO,SAAS,MAAM;IAAI;GAAO,CAAC;GAC9E,MAAM,IAAI,kBAAkB,MAAM;EACpC;EACA,MAAM,QAAQ,MAAM,KAAK,UAAU,OAAO,OAAO;GAAE;GAAK;GAAM,MAAM,KAAK;GAAM;EAAY,CAAC;EAC5F,IAAI,CAAC,OACH,OAAO,KAAK,KAAK,SAAS,OAAO,MAAM,EAAE;EAE3C,MAAM,KAAK,aAAa,OAAO,MAAM,IAAI,MAAM,GAAG;EAClD,OAAO;CACT;CAEA,MAAc,UACZ,OACA,OACA,OACuB;EACvB,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,aAAa;GAC/D,MAAM,UAAU,MAAM,OAAO,UAAU,OAAO,MAAM,IAAI,KAAK;GAC7D,IAAI,SACF,MAAM,OAAO,OAAO,CAAC,YAAY,WAAW,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GAE7E,OAAO;EACT,CAAC;EACD,IAAI,SACF,KAAK,OAAO,KAAK,mBAAmB;GAAE;GAAO,SAAS,MAAM;EAAG,CAAC;EAElE,OAAO;CACT;CAEA,MAAc,WAAW,OAAe,UAA+C;EACrF,MAAM,MAAM,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC;EACjC,IAAI,IAAI,WAAW,GACjB,OAAO,CAAC;EAGV,QAAO,MADY,KAAK,KAAK,UAAU,OAAO,GAAG,EAAA,CACrC,QAAQ,UAAU,MAAM,UAAU,SAAS,MAAM,WAAW,OAAO;CACjF;CAEA,KAAa,OAAyB;EACpC,IAAI,MAAM,WAAW,aAAa,MAAM,WAAW,SACjD,OAAO;GAAE,GAAG;GAAO,KAAK;GAAM,aAAa;EAAK;EAElD,OAAO;GACL,GAAG;GACH,KAAK,KAAK,SAAS,YAAY,MAAM,EAAE;GACvC,aAAa,KAAK,SAAS,gBAAgB,MAAM,EAAE;EACrD;CACF;CAEA,MAAc,QAAQ,OAAe,OAAgC;EACnE,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,aAAa;GAC/D,MAAM,UAAU,MAAM,OAAO,OAAO,OAAO,MAAM,EAAE;GACnD,IAAI,SACF,MAAM,OAAO,OAAO,CAAC,YAAY,aAAa,KAAK;IAAE;IAAO,MAAM;GAAM,CAAC,CAAC,CAAC;GAE7E,OAAO;EACT,CAAC;EACD,IAAI,SACF,MAAM,KAAK,aAAa,OAAO,MAAM,IAAI,MAAM,GAAG;EAEpD,OAAO;CACT;CAEA,MAAc,aAAa,OAAe,SAAiB,KAA4B;EACrF,IAAI;GACF,MAAM,KAAK,QAAQ,OAAO,GAAG;EAC/B,SAAS,OAAO;GACd,KAAK,OAAO,KAAK,6BAA6B;IAAE;IAAO;IAAS,KAAK;GAAM,CAAC;EAC9E;CACF;AACF"}
+{"version":3,"file":"service.js","names":[],"sources":["../../src/assets/service.ts"],"sourcesContent":["import { genId } from '../shared/id.js';\nimport type { Logger, ObjectStorage } from '../shared/ports.js';\nimport { ConflictError, ForbiddenError, InvalidInputError } from '../shared/errors.js';\nimport type {\n  Asset,\n  AssetKind,\n  AssetView,\n  AssetsQuery,\n  Page,\n  RequestUploadInput,\n  UploadTicket,\n} from './model.js';\nimport type {\n  AssetsRepository,\n  AssetsService,\n  AssetsUnitOfWork,\n  MemberUploadInput,\n  ReadyFile,\n} from './ports.js';\nimport type { FileUrls } from './file-urls.js';\nimport { noopLogger } from '../shared/logger.js';\nimport { assetEvents } from './events.js';\n\nconst UNATTACHED_UPLOAD_GRACE_MS = 60 * 60 * 1000;\n\nexport const MEMBER_IMAGE_TYPE = /^image\\/(png|jpeg|gif|webp|avif)$/i;\nconst MEMBER_IMAGE_REFUSAL = 'A member upload must be a PNG, JPEG, GIF, WebP or AVIF image';\n\nexport function isMemberImageType(contentType: string): boolean {\n  return MEMBER_IMAGE_TYPE.test(contentType.trim());\n}\n\nexport function kindOf(contentType: string): AssetKind {\n  const type = contentType.trim().toLowerCase();\n  if (type.startsWith('image/')) {\n    return 'image';\n  }\n  if (type.startsWith('video/')) {\n    return 'video';\n  }\n  if (type.startsWith('audio/')) {\n    return 'audio';\n  }\n  return 'document';\n}\n\nfunction orgPrefix(orgId: string): string {\n  return `org/${orgId}/`;\n}\n\nfunction sanitizeFilename(filename: string): string {\n  const base = filename.split(/[\\\\/]/).pop() ?? 'file';\n  return base.replace(/[^a-zA-Z0-9._-]/g, '_').slice(0, 120) || 'file';\n}\n\nfunction storedKey(orgId: string, folder: string, id: string, filename: string): string {\n  return `${orgPrefix(orgId)}${folder}/${id}/${sanitizeFilename(filename)}`;\n}\n\nfunction finalMemberKey(orgId: string, asset: Asset): string {\n  return `${orgPrefix(orgId)}image/${asset.id}/${sanitizeFilename(asset.filename)}`;\n}\n\nfunction graceCutoff(now: Date): Date {\n  return new Date(now.getTime() - UNATTACHED_UPLOAD_GRACE_MS);\n}\n\nexport type AssetsServiceParams = {\n  storage: ObjectStorage;\n  repo: AssetsRepository;\n  uow: AssetsUnitOfWork;\n  memberImageMaxBytes: number;\n  downloadLinkExpirySeconds: number;\n  fileUrls: FileUrls;\n  logger?: Logger;\n};\n\nexport class AssetsServiceImpl implements AssetsService {\n  private readonly storage: ObjectStorage;\n  private readonly repo: AssetsRepository;\n  private readonly uow: AssetsUnitOfWork;\n  private readonly memberImageMaxBytes: number;\n  private readonly downloadLinkExpirySeconds: number;\n  private readonly fileUrls: FileUrls;\n  private readonly logger: Logger;\n\n  constructor(params: AssetsServiceParams) {\n    if (!Number.isSafeInteger(params.memberImageMaxBytes) || params.memberImageMaxBytes <= 0) {\n      throw new Error(\n        `invalid memberImageMaxBytes \"${params.memberImageMaxBytes}\" (expected a positive integer)`,\n      );\n    }\n    if (\n      !Number.isSafeInteger(params.downloadLinkExpirySeconds) ||\n      params.downloadLinkExpirySeconds <= 0\n    ) {\n      throw new Error(\n        `invalid downloadLinkExpirySeconds \"${params.downloadLinkExpirySeconds}\" (expected a positive integer)`,\n      );\n    }\n    this.storage = params.storage;\n    this.repo = params.repo;\n    this.uow = params.uow;\n    this.memberImageMaxBytes = params.memberImageMaxBytes;\n    this.downloadLinkExpirySeconds = params.downloadLinkExpirySeconds;\n    this.fileUrls = params.fileUrls;\n    this.logger = params.logger ?? noopLogger;\n  }\n\n  async requestUpload(orgId: string, input: RequestUploadInput): Promise<UploadTicket> {\n    const id = genId('asset');\n    const kind = kindOf(input.contentType);\n    const folder = input.source === 'member' ? 'uploads' : kind;\n    const key = storedKey(orgId, folder, id, input.filename);\n    const presigned = await this.storage.presignUpload({ key, contentType: input.contentType });\n    const now = new Date();\n    const asset = await this.uow.run(async ({ assets, outbox }) => {\n      const asset = await assets.insert(orgId, {\n        orgId,\n        id,\n        key,\n        kind,\n        source: input.source,\n        filename: input.filename,\n        contentType: input.contentType,\n        size: 0,\n        status: 'pending',\n        uploadedBy: input.uploadedBy,\n        createdAt: now,\n        updatedAt: now,\n      });\n      await outbox.append([assetEvents.assetCreated.make({ orgId, data: asset })]);\n      return asset;\n    });\n    this.logger.info('asset upload requested', {\n      orgId,\n      assetId: id,\n      kind,\n      source: input.source,\n    });\n    return {\n      asset: { ...asset, url: null, downloadUrl: null },\n      uploadUrl: presigned.url,\n      method: 'PUT',\n      expiresInSeconds: presigned.expiresInSeconds,\n      headers: presigned.headers,\n    };\n  }\n\n  async requestMemberUpload(\n    orgId: string,\n    orgUserId: string,\n    input: MemberUploadInput,\n  ): Promise<UploadTicket> {\n    if (!isMemberImageType(input.contentType)) {\n      throw new InvalidInputError(MEMBER_IMAGE_REFUSAL);\n    }\n    return this.requestUpload(orgId, {\n      filename: input.filename,\n      contentType: input.contentType,\n      source: 'member',\n      uploadedBy: orgUserId,\n    });\n  }\n\n  async confirm(orgId: string, id: string): Promise<AssetView | null> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset) {\n      return null;\n    }\n    if (asset.source === 'member') {\n      throw new ForbiddenError('Only the uploader can finalize a member upload');\n    }\n    const confirmed = await this.finalize(orgId, asset);\n    return confirmed ? this.view(confirmed) : null;\n  }\n\n  async confirmOwn(orgId: string, id: string, orgUserId: string): Promise<AssetView | null> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset || asset.source !== 'member' || asset.uploadedBy !== orgUserId) {\n      this.logger.debug('upload confirm refused', { orgId, assetId: id, orgUserId });\n      return null;\n    }\n    const confirmed = await this.finalize(orgId, asset);\n    if (!confirmed) {\n      return null;\n    }\n    return confirmed.status === 'ready'\n      ? { ...confirmed, url: this.fileUrls.memberUpload(confirmed.id), downloadUrl: null }\n      : { ...confirmed, url: null, downloadUrl: null };\n  }\n\n  async ownUploadFile(orgId: string, assetId: string, orgUserId: string): Promise<string | null> {\n    if (!(await this.ownsImage(orgId, assetId, orgUserId))) {\n      this.logger.warn('upload file not served — not the uploader', { orgId, assetId, orgUserId });\n      return null;\n    }\n    return this.signFile(orgId, assetId);\n  }\n\n  async ownsImage(orgId: string, assetId: string, orgUserId: string): Promise<boolean> {\n    const asset = await this.repo.findById(orgId, assetId);\n    return (\n      asset !== null &&\n      asset.source === 'member' &&\n      asset.kind === 'image' &&\n      asset.status === 'ready' &&\n      asset.uploadedBy === orgUserId\n    );\n  }\n\n  async libraryAssetsAmong(orgId: string, assetIds: string[]): Promise<string[]> {\n    if (assetIds.length === 0) {\n      return [];\n    }\n    const rows = await this.repo.findByIds(orgId, [...new Set(assetIds)]);\n    const library = new Set(\n      rows.filter((a) => a.source === 'library' && a.status === 'ready').map((a) => a.id),\n    );\n    return assetIds.filter((id) => library.has(id));\n  }\n\n  async list(orgId: string, query: AssetsQuery): Promise<Page<AssetView>> {\n    const page = await this.repo.list(orgId, { ...query, source: query.source ?? 'library' });\n    return { ...page, rows: await Promise.all(page.rows.map((asset) => this.view(asset))) };\n  }\n\n  async get(orgId: string, id: string): Promise<AssetView | null> {\n    const asset = await this.repo.findById(orgId, id);\n    return asset ? this.view(asset) : null;\n  }\n\n  async readyFiles(orgId: string, assetIds: readonly string[]): Promise<Record<string, ReadyFile>> {\n    const ready = await this.readyAmong(orgId, assetIds);\n    return Object.fromEntries(\n      ready.map((asset) => [\n        asset.id,\n        { filename: asset.filename, contentType: asset.contentType, size: asset.size },\n      ]),\n    );\n  }\n\n  async signFile(\n    orgId: string,\n    assetId: string,\n    opts: { saveAs?: string } = {},\n  ): Promise<string | null> {\n    const [asset] = await this.readyAmong(orgId, [assetId]);\n    if (!asset) {\n      this.logger.warn('file not served — no ready asset', { orgId, assetId });\n      return null;\n    }\n    return opts.saveAs === undefined\n      ? this.storage.presignDownload({ key: asset.key })\n      : this.storage.presignDownload({\n          key: asset.key,\n          downloadFilename: opts.saveAs,\n          expiresInSeconds: this.downloadLinkExpirySeconds,\n        });\n  }\n\n  async libraryFile(\n    orgId: string,\n    assetId: string,\n    opts: { download: boolean },\n  ): Promise<string | null> {\n    const asset = await this.repo.findById(orgId, assetId);\n    if (!asset || asset.source !== 'library') {\n      this.logger.warn('library file not served — not a library asset', { orgId, assetId });\n      return null;\n    }\n    return this.signFile(orgId, assetId, opts.download ? { saveAs: asset.filename } : {});\n  }\n\n  async remove(orgId: string, id: string): Promise<boolean> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset) {\n      return false;\n    }\n    const removed = await this.discard(orgId, asset);\n    if (removed) {\n      this.logger.info('asset removed', { orgId, assetId: id });\n    }\n    return removed;\n  }\n\n  async removeOwn(orgId: string, id: string, orgUserId: string): Promise<boolean> {\n    const asset = await this.repo.findById(orgId, id);\n    if (!asset || asset.source !== 'member' || asset.uploadedBy !== orgUserId) {\n      return false;\n    }\n    return this.remove(orgId, id);\n  }\n\n  async removeUnattached(orgId: string, now: Date): Promise<number> {\n    const stale = await this.repo.listUnreferencedMemberUploads(orgId, graceCutoff(now));\n    let removed = 0;\n    let failed = 0;\n    for (const asset of stale) {\n      try {\n        if (await this.discard(orgId, asset)) {\n          removed += 1;\n        }\n      } catch (err) {\n        if (!(err instanceof ConflictError)) {\n          failed += 1;\n          this.logger.error('unattached upload not removed', { orgId, assetId: asset.id, err });\n        }\n      }\n    }\n    let stray = 0;\n    for (const key of await this.strayUploads(orgId, now)) {\n      try {\n        await this.storage.remove(key);\n        stray += 1;\n      } catch (err) {\n        failed += 1;\n        this.logger.warn('stray upload not removed', { orgId, err });\n      }\n    }\n    if (removed > 0 || stray > 0 || failed > 0) {\n      this.logger.info('unattached uploads removed', { orgId, count: removed, stray, failed });\n    }\n    return removed + stray;\n  }\n\n  private async strayUploads(orgId: string, now: Date): Promise<string[]> {\n    const cutoff = now.getTime() - this.storage.uploadExpirySeconds * 1000;\n    const objects = await this.storage.list(`${orgPrefix(orgId)}uploads/`);\n    const old = objects\n      .filter((o) => o.lastModified !== undefined && Date.parse(o.lastModified) < cutoff)\n      .map((o) => o.key);\n    if (old.length === 0) {\n      return [];\n    }\n    const held = new Set(await this.repo.heldKeys(orgId, old));\n    return old.filter((key) => !held.has(key));\n  }\n\n  private async finalize(orgId: string, asset: Asset): Promise<Asset | null> {\n    if (asset.status !== 'pending') {\n      return asset;\n    }\n    if (asset.source === 'member') {\n      return this.finalizeMember(orgId, asset);\n    }\n    const stat = await this.storage.stat(asset.key);\n    if (!stat) {\n      this.logger.debug('asset not yet uploaded', { orgId, assetId: asset.id });\n      return asset;\n    }\n    const contentType = stat.contentType ?? asset.contentType;\n    const ready = await this.markReady(orgId, asset, {\n      key: asset.key,\n      kind: kindOf(contentType),\n      size: stat.size,\n      contentType,\n    });\n    return ready ?? this.repo.findById(orgId, asset.id);\n  }\n\n  private async finalizeMember(orgId: string, asset: Asset): Promise<Asset | null> {\n    if (!(await this.storage.stat(asset.key))) {\n      this.logger.debug('asset not yet uploaded', { orgId, assetId: asset.id });\n      return asset;\n    }\n    const key = finalMemberKey(orgId, asset);\n    await this.storage.copy({ from: asset.key, to: key });\n    const stat = await this.storage.stat(key);\n    if (!stat) {\n      throw new Error('copied upload not found');\n    }\n    const contentType = asset.contentType;\n    const kind = kindOf(contentType);\n    const reason = !isMemberImageType(contentType)\n      ? MEMBER_IMAGE_REFUSAL\n      : stat.contentType !== undefined && stat.contentType !== contentType\n        ? 'The uploaded file is not the declared type'\n        : stat.size > this.memberImageMaxBytes\n          ? 'This image is too large'\n          : null;\n    if (reason) {\n      await this.removeObject(orgId, asset.id, key);\n      await this.discard(orgId, asset);\n      this.logger.info('member upload refused', { orgId, assetId: asset.id, reason });\n      throw new InvalidInputError(reason);\n    }\n    const ready = await this.markReady(orgId, asset, { key, kind, size: stat.size, contentType });\n    if (!ready) {\n      return this.repo.findById(orgId, asset.id);\n    }\n    await this.removeObject(orgId, asset.id, asset.key);\n    return ready;\n  }\n\n  private async markReady(\n    orgId: string,\n    asset: Asset,\n    patch: Pick<Asset, 'key' | 'kind' | 'size' | 'contentType'>,\n  ): Promise<Asset | null> {\n    const updated = await this.uow.run(async ({ assets, outbox }) => {\n      const updated = await assets.markReady(orgId, asset.id, patch);\n      if (updated) {\n        await outbox.append([assetEvents.assetReady.make({ orgId, data: updated })]);\n      }\n      return updated;\n    });\n    if (updated) {\n      this.logger.info('asset confirmed', { orgId, assetId: asset.id });\n    }\n    return updated;\n  }\n\n  private async readyAmong(orgId: string, assetIds: readonly string[]): Promise<Asset[]> {\n    const ids = [...new Set(assetIds)];\n    if (ids.length === 0) {\n      return [];\n    }\n    const rows = await this.repo.findByIds(orgId, ids);\n    return rows.filter((asset) => asset.orgId === orgId && asset.status === 'ready');\n  }\n\n  private view(asset: Asset): AssetView {\n    if (asset.source !== 'library' || asset.status !== 'ready') {\n      return { ...asset, url: null, downloadUrl: null };\n    }\n    return {\n      ...asset,\n      url: this.fileUrls.libraryFile(asset.id),\n      downloadUrl: this.fileUrls.libraryDownload(asset.id),\n    };\n  }\n\n  private async discard(orgId: string, asset: Asset): Promise<boolean> {\n    const deleted = await this.uow.run(async ({ assets, outbox }) => {\n      const deleted = await assets.delete(orgId, asset.id);\n      if (deleted) {\n        await outbox.append([assetEvents.assetDeleted.make({ orgId, data: asset })]);\n      }\n      return deleted;\n    });\n    if (deleted) {\n      await this.removeObject(orgId, asset.id, asset.key);\n    }\n    return deleted;\n  }\n\n  private async removeObject(orgId: string, assetId: string, key: string): Promise<void> {\n    try {\n      await this.storage.remove(key);\n    } catch (error) {\n      this.logger.warn('stored object not removed', { orgId, assetId, err: error });\n    }\n  }\n}\n"],"mappings":";;;;;AAuBA,MAAM,6BAA6B,OAAU;AAE7C,MAAa,oBAAoB;AACjC,MAAM,uBAAuB;AAE7B,SAAgB,kBAAkB,aAA8B;CAC9D,OAAO,kBAAkB,KAAK,YAAY,KAAK,CAAC;AAClD;AAEA,SAAgB,OAAO,aAAgC;CACrD,MAAM,OAAO,YAAY,KAAK,CAAC,CAAC,YAAY;CAC5C,IAAI,KAAK,WAAW,QAAQ,GAC1B,OAAO;CAET,IAAI,KAAK,WAAW,QAAQ,GAC1B,OAAO;CAET,IAAI,KAAK,WAAW,QAAQ,GAC1B,OAAO;CAET,OAAO;AACT;AAEA,SAAS,UAAU,OAAuB;CACxC,OAAO,OAAO,MAAM;AACtB;AAEA,SAAS,iBAAiB,UAA0B;CAElD,QADa,SAAS,MAAM,OAAO,CAAC,CAAC,IAAI,KAAK,OAAA,CAClC,QAAQ,oBAAoB,GAAG,CAAC,CAAC,MAAM,GAAG,GAAG,KAAK;AAChE;AAEA,SAAS,UAAU,OAAe,QAAgB,IAAY,UAA0B;CACtF,OAAO,GAAG,UAAU,KAAK,IAAI,OAAO,GAAG,GAAG,GAAG,iBAAiB,QAAQ;AACxE;AAEA,SAAS,eAAe,OAAe,OAAsB;CAC3D,OAAO,GAAG,UAAU,KAAK,EAAE,QAAQ,MAAM,GAAG,GAAG,iBAAiB,MAAM,QAAQ;AAChF;AAEA,SAAS,YAAY,KAAiB;CACpC,uBAAO,IAAI,KAAK,IAAI,QAAQ,IAAI,0BAA0B;AAC5D;AAYA,IAAa,oBAAb,MAAwD;CACtD;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAA6B;EACvC,IAAI,CAAC,OAAO,cAAc,OAAO,mBAAmB,KAAK,OAAO,uBAAuB,GACrF,MAAM,IAAI,MACR,gCAAgC,OAAO,oBAAoB,gCAC7D;EAEF,IACE,CAAC,OAAO,cAAc,OAAO,yBAAyB,KACtD,OAAO,6BAA6B,GAEpC,MAAM,IAAI,MACR,sCAAsC,OAAO,0BAA0B,gCACzE;EAEF,KAAK,UAAU,OAAO;EACtB,KAAK,OAAO,OAAO;EACnB,KAAK,MAAM,OAAO;EAClB,KAAK,sBAAsB,OAAO;EAClC,KAAK,4BAA4B,OAAO;EACxC,KAAK,WAAW,OAAO;EACvB,KAAK,SAAS,OAAO,UAAU;CACjC;CAEA,MAAM,cAAc,OAAe,OAAkD;EACnF,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,OAAO,OAAO,MAAM,WAAW;EAErC,MAAM,MAAM,UAAU,OADP,MAAM,WAAW,WAAW,YAAY,MAClB,IAAI,MAAM,QAAQ;EACvD,MAAM,YAAY,MAAM,KAAK,QAAQ,cAAc;GAAE;GAAK,aAAa,MAAM;EAAY,CAAC;EAC1F,MAAM,sBAAM,IAAI,KAAK;EACrB,MAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,aAAa;GAC7D,MAAM,QAAQ,MAAM,OAAO,OAAO,OAAO;IACvC;IACA;IACA;IACA;IACA,QAAQ,MAAM;IACd,UAAU,MAAM;IAChB,aAAa,MAAM;IACnB,MAAM;IACN,QAAQ;IACR,YAAY,MAAM;IAClB,WAAW;IACX,WAAW;GACb,CAAC;GACD,MAAM,OAAO,OAAO,CAAC,YAAY,aAAa,KAAK;IAAE;IAAO,MAAM;GAAM,CAAC,CAAC,CAAC;GAC3E,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,0BAA0B;GACzC;GACA,SAAS;GACT;GACA,QAAQ,MAAM;EAChB,CAAC;EACD,OAAO;GACL,OAAO;IAAE,GAAG;IAAO,KAAK;IAAM,aAAa;GAAK;GAChD,WAAW,UAAU;GACrB,QAAQ;GACR,kBAAkB,UAAU;GAC5B,SAAS,UAAU;EACrB;CACF;CAEA,MAAM,oBACJ,OACA,WACA,OACuB;EACvB,IAAI,CAAC,kBAAkB,MAAM,WAAW,GACtC,MAAM,IAAI,kBAAkB,oBAAoB;EAElD,OAAO,KAAK,cAAc,OAAO;GAC/B,UAAU,MAAM;GAChB,aAAa,MAAM;GACnB,QAAQ;GACR,YAAY;EACd,CAAC;CACH;CAEA,MAAM,QAAQ,OAAe,IAAuC;EAClE,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,OACH,OAAO;EAET,IAAI,MAAM,WAAW,UACnB,MAAM,IAAI,eAAe,gDAAgD;EAE3E,MAAM,YAAY,MAAM,KAAK,SAAS,OAAO,KAAK;EAClD,OAAO,YAAY,KAAK,KAAK,SAAS,IAAI;CAC5C;CAEA,MAAM,WAAW,OAAe,IAAY,WAA8C;EACxF,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,SAAS,MAAM,WAAW,YAAY,MAAM,eAAe,WAAW;GACzE,KAAK,OAAO,MAAM,0BAA0B;IAAE;IAAO,SAAS;IAAI;GAAU,CAAC;GAC7E,OAAO;EACT;EACA,MAAM,YAAY,MAAM,KAAK,SAAS,OAAO,KAAK;EAClD,IAAI,CAAC,WACH,OAAO;EAET,OAAO,UAAU,WAAW,UACxB;GAAE,GAAG;GAAW,KAAK,KAAK,SAAS,aAAa,UAAU,EAAE;GAAG,aAAa;EAAK,IACjF;GAAE,GAAG;GAAW,KAAK;GAAM,aAAa;EAAK;CACnD;CAEA,MAAM,cAAc,OAAe,SAAiB,WAA2C;EAC7F,IAAI,CAAE,MAAM,KAAK,UAAU,OAAO,SAAS,SAAS,GAAI;GACtD,KAAK,OAAO,KAAK,6CAA6C;IAAE;IAAO;IAAS;GAAU,CAAC;GAC3F,OAAO;EACT;EACA,OAAO,KAAK,SAAS,OAAO,OAAO;CACrC;CAEA,MAAM,UAAU,OAAe,SAAiB,WAAqC;EACnF,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,OAAO;EACrD,OACE,UAAU,QACV,MAAM,WAAW,YACjB,MAAM,SAAS,WACf,MAAM,WAAW,WACjB,MAAM,eAAe;CAEzB;CAEA,MAAM,mBAAmB,OAAe,UAAuC;EAC7E,IAAI,SAAS,WAAW,GACtB,OAAO,CAAC;EAEV,MAAM,OAAO,MAAM,KAAK,KAAK,UAAU,OAAO,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,CAAC;EACpE,MAAM,UAAU,IAAI,IAClB,KAAK,QAAQ,MAAM,EAAE,WAAW,aAAa,EAAE,WAAW,OAAO,CAAC,CAAC,KAAK,MAAM,EAAE,EAAE,CACpF;EACA,OAAO,SAAS,QAAQ,OAAO,QAAQ,IAAI,EAAE,CAAC;CAChD;CAEA,MAAM,KAAK,OAAe,OAA8C;EACtE,MAAM,OAAO,MAAM,KAAK,KAAK,KAAK,OAAO;GAAE,GAAG;GAAO,QAAQ,MAAM,UAAU;EAAU,CAAC;EACxF,OAAO;GAAE,GAAG;GAAM,MAAM,MAAM,QAAQ,IAAI,KAAK,KAAK,KAAK,UAAU,KAAK,KAAK,KAAK,CAAC,CAAC;EAAE;CACxF;CAEA,MAAM,IAAI,OAAe,IAAuC;EAC9D,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,OAAO,QAAQ,KAAK,KAAK,KAAK,IAAI;CACpC;CAEA,MAAM,WAAW,OAAe,UAAiE;EAC/F,MAAM,QAAQ,MAAM,KAAK,WAAW,OAAO,QAAQ;EACnD,OAAO,OAAO,YACZ,MAAM,KAAK,UAAU,CACnB,MAAM,IACN;GAAE,UAAU,MAAM;GAAU,aAAa,MAAM;GAAa,MAAM,MAAM;EAAK,CAC/E,CAAC,CACH;CACF;CAEA,MAAM,SACJ,OACA,SACA,OAA4B,CAAC,GACL;EACxB,MAAM,CAAC,SAAS,MAAM,KAAK,WAAW,OAAO,CAAC,OAAO,CAAC;EACtD,IAAI,CAAC,OAAO;GACV,KAAK,OAAO,KAAK,oCAAoC;IAAE;IAAO;GAAQ,CAAC;GACvE,OAAO;EACT;EACA,OAAO,KAAK,WAAW,KAAA,IACnB,KAAK,QAAQ,gBAAgB,EAAE,KAAK,MAAM,IAAI,CAAC,IAC/C,KAAK,QAAQ,gBAAgB;GAC3B,KAAK,MAAM;GACX,kBAAkB,KAAK;GACvB,kBAAkB,KAAK;EACzB,CAAC;CACP;CAEA,MAAM,YACJ,OACA,SACA,MACwB;EACxB,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,OAAO;EACrD,IAAI,CAAC,SAAS,MAAM,WAAW,WAAW;GACxC,KAAK,OAAO,KAAK,iDAAiD;IAAE;IAAO;GAAQ,CAAC;GACpF,OAAO;EACT;EACA,OAAO,KAAK,SAAS,OAAO,SAAS,KAAK,WAAW,EAAE,QAAQ,MAAM,SAAS,IAAI,CAAC,CAAC;CACtF;CAEA,MAAM,OAAO,OAAe,IAA8B;EACxD,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,OACH,OAAO;EAET,MAAM,UAAU,MAAM,KAAK,QAAQ,OAAO,KAAK;EAC/C,IAAI,SACF,KAAK,OAAO,KAAK,iBAAiB;GAAE;GAAO,SAAS;EAAG,CAAC;EAE1D,OAAO;CACT;CAEA,MAAM,UAAU,OAAe,IAAY,WAAqC;EAC9E,MAAM,QAAQ,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EAChD,IAAI,CAAC,SAAS,MAAM,WAAW,YAAY,MAAM,eAAe,WAC9D,OAAO;EAET,OAAO,KAAK,OAAO,OAAO,EAAE;CAC9B;CAEA,MAAM,iBAAiB,OAAe,KAA4B;EAChE,MAAM,QAAQ,MAAM,KAAK,KAAK,8BAA8B,OAAO,YAAY,GAAG,CAAC;EACnF,IAAI,UAAU;EACd,IAAI,SAAS;EACb,KAAK,MAAM,SAAS,OAClB,IAAI;GACF,IAAI,MAAM,KAAK,QAAQ,OAAO,KAAK,GACjC,WAAW;EAEf,SAAS,KAAK;GACZ,IAAI,EAAE,eAAe,gBAAgB;IACnC,UAAU;IACV,KAAK,OAAO,MAAM,iCAAiC;KAAE;KAAO,SAAS,MAAM;KAAI;IAAI,CAAC;GACtF;EACF;EAEF,IAAI,QAAQ;EACZ,KAAK,MAAM,OAAO,MAAM,KAAK,aAAa,OAAO,GAAG,GAClD,IAAI;GACF,MAAM,KAAK,QAAQ,OAAO,GAAG;GAC7B,SAAS;EACX,SAAS,KAAK;GACZ,UAAU;GACV,KAAK,OAAO,KAAK,4BAA4B;IAAE;IAAO;GAAI,CAAC;EAC7D;EAEF,IAAI,UAAU,KAAK,QAAQ,KAAK,SAAS,GACvC,KAAK,OAAO,KAAK,8BAA8B;GAAE;GAAO,OAAO;GAAS;GAAO;EAAO,CAAC;EAEzF,OAAO,UAAU;CACnB;CAEA,MAAc,aAAa,OAAe,KAA8B;EACtE,MAAM,SAAS,IAAI,QAAQ,IAAI,KAAK,QAAQ,sBAAsB;EAElE,MAAM,OAAM,MADU,KAAK,QAAQ,KAAK,GAAG,UAAU,KAAK,EAAE,SAAS,EAAA,CAElE,QAAQ,MAAM,EAAE,iBAAiB,KAAA,KAAa,KAAK,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,CAClF,KAAK,MAAM,EAAE,GAAG;EACnB,IAAI,IAAI,WAAW,GACjB,OAAO,CAAC;EAEV,MAAM,OAAO,IAAI,IAAI,MAAM,KAAK,KAAK,SAAS,OAAO,GAAG,CAAC;EACzD,OAAO,IAAI,QAAQ,QAAQ,CAAC,KAAK,IAAI,GAAG,CAAC;CAC3C;CAEA,MAAc,SAAS,OAAe,OAAqC;EACzE,IAAI,MAAM,WAAW,WACnB,OAAO;EAET,IAAI,MAAM,WAAW,UACnB,OAAO,KAAK,eAAe,OAAO,KAAK;EAEzC,MAAM,OAAO,MAAM,KAAK,QAAQ,KAAK,MAAM,GAAG;EAC9C,IAAI,CAAC,MAAM;GACT,KAAK,OAAO,MAAM,0BAA0B;IAAE;IAAO,SAAS,MAAM;GAAG,CAAC;GACxE,OAAO;EACT;EACA,MAAM,cAAc,KAAK,eAAe,MAAM;EAO9C,OAAO,MANa,KAAK,UAAU,OAAO,OAAO;GAC/C,KAAK,MAAM;GACX,MAAM,OAAO,WAAW;GACxB,MAAM,KAAK;GACX;EACF,CAAC,KACe,KAAK,KAAK,SAAS,OAAO,MAAM,EAAE;CACpD;CAEA,MAAc,eAAe,OAAe,OAAqC;EAC/E,IAAI,CAAE,MAAM,KAAK,QAAQ,KAAK,MAAM,GAAG,GAAI;GACzC,KAAK,OAAO,MAAM,0BAA0B;IAAE;IAAO,SAAS,MAAM;GAAG,CAAC;GACxE,OAAO;EACT;EACA,MAAM,MAAM,eAAe,OAAO,KAAK;EACvC,MAAM,KAAK,QAAQ,KAAK;GAAE,MAAM,MAAM;GAAK,IAAI;EAAI,CAAC;EACpD,MAAM,OAAO,MAAM,KAAK,QAAQ,KAAK,GAAG;EACxC,IAAI,CAAC,MACH,MAAM,IAAI,MAAM,yBAAyB;EAE3C,MAAM,cAAc,MAAM;EAC1B,MAAM,OAAO,OAAO,WAAW;EAC/B,MAAM,SAAS,CAAC,kBAAkB,WAAW,IACzC,uBACA,KAAK,gBAAgB,KAAA,KAAa,KAAK,gBAAgB,cACrD,+CACA,KAAK,OAAO,KAAK,sBACf,4BACA;EACR,IAAI,QAAQ;GACV,MAAM,KAAK,aAAa,OAAO,MAAM,IAAI,GAAG;GAC5C,MAAM,KAAK,QAAQ,OAAO,KAAK;GAC/B,KAAK,OAAO,KAAK,yBAAyB;IAAE;IAAO,SAAS,MAAM;IAAI;GAAO,CAAC;GAC9E,MAAM,IAAI,kBAAkB,MAAM;EACpC;EACA,MAAM,QAAQ,MAAM,KAAK,UAAU,OAAO,OAAO;GAAE;GAAK;GAAM,MAAM,KAAK;GAAM;EAAY,CAAC;EAC5F,IAAI,CAAC,OACH,OAAO,KAAK,KAAK,SAAS,OAAO,MAAM,EAAE;EAE3C,MAAM,KAAK,aAAa,OAAO,MAAM,IAAI,MAAM,GAAG;EAClD,OAAO;CACT;CAEA,MAAc,UACZ,OACA,OACA,OACuB;EACvB,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,aAAa;GAC/D,MAAM,UAAU,MAAM,OAAO,UAAU,OAAO,MAAM,IAAI,KAAK;GAC7D,IAAI,SACF,MAAM,OAAO,OAAO,CAAC,YAAY,WAAW,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GAE7E,OAAO;EACT,CAAC;EACD,IAAI,SACF,KAAK,OAAO,KAAK,mBAAmB;GAAE;GAAO,SAAS,MAAM;EAAG,CAAC;EAElE,OAAO;CACT;CAEA,MAAc,WAAW,OAAe,UAA+C;EACrF,MAAM,MAAM,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC;EACjC,IAAI,IAAI,WAAW,GACjB,OAAO,CAAC;EAGV,QAAO,MADY,KAAK,KAAK,UAAU,OAAO,GAAG,EAAA,CACrC,QAAQ,UAAU,MAAM,UAAU,SAAS,MAAM,WAAW,OAAO;CACjF;CAEA,KAAa,OAAyB;EACpC,IAAI,MAAM,WAAW,aAAa,MAAM,WAAW,SACjD,OAAO;GAAE,GAAG;GAAO,KAAK;GAAM,aAAa;EAAK;EAElD,OAAO;GACL,GAAG;GACH,KAAK,KAAK,SAAS,YAAY,MAAM,EAAE;GACvC,aAAa,KAAK,SAAS,gBAAgB,MAAM,EAAE;EACrD;CACF;CAEA,MAAc,QAAQ,OAAe,OAAgC;EACnE,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,aAAa;GAC/D,MAAM,UAAU,MAAM,OAAO,OAAO,OAAO,MAAM,EAAE;GACnD,IAAI,SACF,MAAM,OAAO,OAAO,CAAC,YAAY,aAAa,KAAK;IAAE;IAAO,MAAM;GAAM,CAAC,CAAC,CAAC;GAE7E,OAAO;EACT,CAAC;EACD,IAAI,SACF,MAAM,KAAK,aAAa,OAAO,MAAM,IAAI,MAAM,GAAG;EAEpD,OAAO;CACT;CAEA,MAAc,aAAa,OAAe,SAAiB,KAA4B;EACrF,IAAI;GACF,MAAM,KAAK,QAAQ,OAAO,GAAG;EAC/B,SAAS,OAAO;GACd,KAAK,OAAO,KAAK,6BAA6B;IAAE;IAAO;IAAS,KAAK;GAAM,CAAC;EAC9E;CACF;AACF"}

package/dist/automations/actions.js

@@ -1,13 +1,11 @@
-import { notificationKindSchema } from "../types/schemas/identity.js";
 import { deliverWebhookInputSchema } from "../types/schemas/automations.js";
 import { noopLogger } from "../shared/logger.js";
 import { entitlementEvents } from "../entitlements/events.js";
 import { ActionFailedError } from "./model.js";
-import { ALL_EMAIL_TEMPLATE_IDS, DELIVER_WEBHOOK_ACTION, NOTIFY_ACTION, publicDataSchema } from "./catalog.js";
+import { ALL_EMAIL_TEMPLATE_IDS, DELIVER_WEBHOOK_ACTION, publicDataSchema } from "./catalog.js";
 import { webhookHeaders } from "./webhook-signing.js";
-import { address, firedAtOf } from "./community-mail.js";
+import { address } from "./community-mail.js";
 import { COMMUNITY_DERIVATIONS } from "./community-derivations.js";
-import { NOTIFICATION_PLACEMENTS } from "./community-notifications.js";
 //#region src/automations/actions.ts
 const SEND_EMAIL_DERIVATIONS = {
 	accessGranted: {
@@ -70,29 +68,9 @@ async function executeAction(action, event, deps) {
 			for (const recipient of derived) (await send(template, recipient, event, deps) ? outcome.recipients : outcome.failed).push(recipient.orgUserId);
 			return assertSomeDelivered("sendEmail", outcome);
 		}
-		case NOTIFY_ACTION: {
-			const kind = notificationKindSchema.safeParse(action.input["kind"]);
-			if (!kind.success) throw new ActionFailedError(`${NOTIFY_ACTION}: unknown kind "${String(action.input["kind"])}"`);
-			return notify(kind.data, event, {
-				...deps,
-				actionInput: action.input
-			});
-		}
 		case "grantAccess":
 			await grantAccess(action, event, deps);
 			return reachedNoOne();
-		case "publishDuePosts":
-			await deps.scheduledWork.publishDuePosts(event.orgId, firedAtOf(event));
-			return reachedNoOne();
-		case "expireDueGrants":
-			await deps.scheduledWork.expireDueGrants(event.orgId, firedAtOf(event));
-			return reachedNoOne();
-		case "sendDigest":
-			await deps.scheduledWork.sendDigest(event.orgId, firedAtOf(event));
-			return reachedNoOne();
-		case "removeUnattachedUploads":
-			await deps.scheduledWork.removeUnattachedUploads(event.orgId, firedAtOf(event));
-			return reachedNoOne();
 		case DELIVER_WEBHOOK_ACTION:
 			await deliverWebhook(action, event, deps);
 			return reachedNoOne();
@@ -115,45 +93,6 @@ async function send(template, recipient, event, deps) {
 		return false;
 	}
 }
-async function notify(kind, event, deps) {
-	const derivation = SEND_EMAIL_DERIVATIONS[kind];
-	if (!derivation || !derivation.triggers.includes(event.type)) throw new ActionFailedError(`${NOTIFY_ACTION}: kind "${kind}" cannot be derived from event "${event.type}"`);
-	const recipients = await derivation.derive(event, deps);
-	if (!recipients) throw new ActionFailedError(`${NOTIFY_ACTION}: event "${event.type}" is missing the data required to derive kind "${kind}"`);
-	const preferences = await deps.desk.preferencesFor(event.orgId, recipients.map((recipient) => recipient.userId), kind);
-	const placement = NOTIFICATION_PLACEMENTS[kind];
-	const notifications = [];
-	const outcome = reachedNoOne();
-	for (const recipient of recipients) {
-		const preference = preferences[recipient.userId];
-		const email = preference?.email !== false;
-		const inApp = preference?.inApp !== false;
-		const emailed = email && await send(kind, recipient, event, deps);
-		let placed = false;
-		if (inApp) try {
-			const placements = await placement.place(event, recipient, deps);
-			notifications.push(...placements.map((spot) => ({
-				...spot,
-				userId: recipient.userId,
-				kind
-			})));
-			placed = true;
-		} catch (err) {
-			(deps.logger ?? noopLogger).warn("automation notification not placed", {
-				orgId: event.orgId,
-				automationId: deps.automationId,
-				trigger: event.type,
-				kind,
-				orgUserId: recipient.orgUserId,
-				err
-			});
-		}
-		if (emailed || placed) outcome.recipients.push(recipient.orgUserId);
-		if (email && !emailed || inApp && !placed) outcome.failed.push(recipient.orgUserId);
-	}
-	await deps.desk.notify(event.orgId, notifications);
-	return assertSomeDelivered(NOTIFY_ACTION, outcome);
-}
 function grantRecipient(event) {
 	if (typeof event.data !== "object" || event.data === null) return;
 	const data = event.data;

package/dist/automations/actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"actions.js","names":[],"sources":["../../src/automations/actions.ts"],"sourcesContent":["// automations context — action runners. `executeAction` maps one\n// AutomationAction against the DomainEvent that triggered its run.\n//\n// SEND_EMAIL_DERIVATIONS is the sendEmail runner's internal derivation table:\n// which (trigger, template) pairings are derivable. A template with no entry\n// (e.g. courseCompleted) makes `executeAction` throw a named error, recorded\n// by the engine as a failed action.\nimport type { EmailTemplateId, NotificationKind } from '../types/index.js';\nimport { deliverWebhookInputSchema, notificationKindSchema } from '../types/schemas/index.js';\nimport { entitlementEvents } from '../entitlements/index.js';\nimport type { NewNotification } from '../identity/index.js';\nimport type { DomainEvent } from '../shared/ports.js';\nimport { noopLogger } from '../shared/logger.js';\nimport { ActionFailedError, type AutomationAction } from './model.js';\nimport type { WebhookResponse } from './ports.js';\nimport {\n  ALL_EMAIL_TEMPLATE_IDS,\n  DELIVER_WEBHOOK_ACTION,\n  NOTIFY_ACTION,\n  publicDataSchema,\n} from './catalog.js';\nimport { webhookHeaders } from './webhook-signing.js';\nimport { address, firedAtOf, type ActionDeps, type EmailRecipient } from './community-mail.js';\nimport { COMMUNITY_DERIVATIONS, type EmailDerivation } from './community-derivations.js';\nimport { NOTIFICATION_PLACEMENTS } from './community-notifications.js';\n\ntype SendEmailDerivations = { [K in EmailTemplateId]?: EmailDerivation<K> };\n\nexport const SEND_EMAIL_DERIVATIONS: SendEmailDerivations = {\n  accessGranted: {\n    triggers: ['entitlement.created'],\n    derive: async (event, deps) => {\n      const result = entitlementEvents.entitlementCreated.safeParse(event);\n      if (!result.success) {\n        return undefined;\n      }\n      const entitlement = result.data.data;\n      if (!entitlement.contentId) {\n        return [];\n      }\n      const content = await deps.lookups.contentInfo(entitlement.orgId, entitlement.contentId);\n      if (!content) {\n        return undefined;\n      }\n      return address(deps, event, entitlement.orgId, [entitlement.orgUserId], {\n        contentTitle: content.title,\n        contentId: content.id,\n        contentType: content.type,\n      });\n    },\n  },\n  accessRevoked: {\n    triggers: ['entitlement.deleted'],\n    derive: async (event, deps) => {\n      const result = entitlementEvents.entitlementDeleted.safeParse(event);\n      if (!result.success) {\n        return undefined;\n      }\n      const entitlement = result.data.data;\n      if (!entitlement.contentId) {\n        return [];\n      }\n      const content = await deps.lookups.contentInfo(entitlement.orgId, entitlement.contentId);\n      if (!content) {\n        return undefined;\n      }\n      return address(deps, event, entitlement.orgId, [entitlement.orgUserId], {\n        contentTitle: content.title,\n      });\n    },\n  },\n  ...COMMUNITY_DERIVATIONS,\n};\n\nexport type { ActionDeps, EmailRecipient };\n\n/** Who an action reached, and who a delivery to failed for (a partial failure does not throw). */\nexport interface ActionOutcome {\n  recipients: string[];\n  failed: string[];\n}\n\nfunction reachedNoOne(): ActionOutcome {\n  return { recipients: [], failed: [] };\n}\n\nfunction assertSomeDelivered(action: string, outcome: ActionOutcome): ActionOutcome {\n  if (outcome.recipients.length === 0 && outcome.failed.length > 0) {\n    throw new ActionFailedError(\n      `${action}: delivery failed for all ${outcome.failed.length} recipients`,\n    );\n  }\n  return outcome;\n}\n\nfunction isEmailTemplateId(value: unknown): value is EmailTemplateId {\n  return typeof value === 'string' && value in ALL_EMAIL_TEMPLATE_IDS;\n}\n\n/** Throws on any failure but a partial fan-out — the engine owns retry policy and failure bookkeeping. */\nexport async function executeAction(\n  action: AutomationAction,\n  event: DomainEvent,\n  deps: ActionDeps,\n): Promise<ActionOutcome> {\n  switch (action.type) {\n    case 'sendEmail': {\n      const template = action.input['template'];\n      if (!isEmailTemplateId(template)) {\n        throw new ActionFailedError(`sendEmail: unknown template \"${String(template)}\"`);\n      }\n      const derivation = SEND_EMAIL_DERIVATIONS[template];\n      if (!derivation || !derivation.triggers.includes(event.type)) {\n        throw new ActionFailedError(\n          `sendEmail: template \"${template}\" cannot be derived from event \"${event.type}\"`,\n        );\n      }\n      const derived = await derivation.derive(event, { ...deps, actionInput: action.input });\n      if (!derived) {\n        throw new ActionFailedError(\n          `sendEmail: event \"${event.type}\" is missing the data required to derive template \"${template}\"`,\n        );\n      }\n      const outcome = reachedNoOne();\n      for (const recipient of derived) {\n        const list = (await send(template, recipient, event, deps))\n          ? outcome.recipients\n          : outcome.failed;\n        list.push(recipient.orgUserId);\n      }\n      return assertSomeDelivered('sendEmail', outcome);\n    }\n    case NOTIFY_ACTION: {\n      const kind = notificationKindSchema.safeParse(action.input['kind']);\n      if (!kind.success) {\n        throw new ActionFailedError(\n          `${NOTIFY_ACTION}: unknown kind \"${String(action.input['kind'])}\"`,\n        );\n      }\n      return notify(kind.data, event, { ...deps, actionInput: action.input });\n    }\n    case 'grantAccess': {\n      await grantAccess(action, event, deps);\n      return reachedNoOne();\n    }\n    case 'publishDuePosts': {\n      await deps.scheduledWork.publishDuePosts(event.orgId, firedAtOf(event));\n      return reachedNoOne();\n    }\n    case 'expireDueGrants': {\n      await deps.scheduledWork.expireDueGrants(event.orgId, firedAtOf(event));\n      return reachedNoOne();\n    }\n    case 'sendDigest': {\n      await deps.scheduledWork.sendDigest(event.orgId, firedAtOf(event));\n      return reachedNoOne();\n    }\n    case 'removeUnattachedUploads': {\n      await deps.scheduledWork.removeUnattachedUploads(event.orgId, firedAtOf(event));\n      return reachedNoOne();\n    }\n    case DELIVER_WEBHOOK_ACTION: {\n      await deliverWebhook(action, event, deps);\n      return reachedNoOne();\n    }\n    default: {\n      throw new ActionFailedError(`unknown automation action type \"${action.type}\"`);\n    }\n  }\n}\n\nasync function send<K extends EmailTemplateId>(\n  template: K,\n  recipient: EmailRecipient<K>,\n  event: DomainEvent,\n  deps: ActionDeps,\n): Promise<boolean> {\n  try {\n    await deps.mailer.send(recipient.to, template, recipient.params);\n    return true;\n  } catch (err) {\n    (deps.logger ?? noopLogger).warn('automation email not delivered', {\n      orgId: event.orgId,\n      automationId: deps.automationId,\n      trigger: event.type,\n      template,\n      orgUserId: recipient.orgUserId,\n      err,\n    });\n    return false;\n  }\n}\n\nasync function notify<K extends NotificationKind>(\n  kind: K,\n  event: DomainEvent,\n  deps: ActionDeps,\n): Promise<ActionOutcome> {\n  const derivation = SEND_EMAIL_DERIVATIONS[kind] as EmailDerivation<K> | undefined;\n  if (!derivation || !derivation.triggers.includes(event.type)) {\n    throw new ActionFailedError(\n      `${NOTIFY_ACTION}: kind \"${kind}\" cannot be derived from event \"${event.type}\"`,\n    );\n  }\n  const recipients = await derivation.derive(event, deps);\n  if (!recipients) {\n    throw new ActionFailedError(\n      `${NOTIFY_ACTION}: event \"${event.type}\" is missing the data required to derive kind \"${kind}\"`,\n    );\n  }\n  const preferences = await deps.desk.preferencesFor(\n    event.orgId,\n    recipients.map((recipient) => recipient.userId),\n    kind,\n  );\n  const placement = NOTIFICATION_PLACEMENTS[kind];\n  const notifications: NewNotification[] = [];\n  const outcome = reachedNoOne();\n  for (const recipient of recipients) {\n    const preference = preferences[recipient.userId];\n    const email = preference?.email !== false;\n    const inApp = preference?.inApp !== false;\n    const emailed = email && (await send(kind, recipient, event, deps));\n    let placed = false;\n    if (inApp) {\n      try {\n        const placements = await placement.place(event, recipient, deps);\n        notifications.push(\n          ...placements.map((spot) => ({ ...spot, userId: recipient.userId, kind })),\n        );\n        placed = true;\n      } catch (err) {\n        (deps.logger ?? noopLogger).warn('automation notification not placed', {\n          orgId: event.orgId,\n          automationId: deps.automationId,\n          trigger: event.type,\n          kind,\n          orgUserId: recipient.orgUserId,\n          err,\n        });\n      }\n    }\n    if (emailed || placed) {\n      outcome.recipients.push(recipient.orgUserId);\n    }\n    if ((email && !emailed) || (inApp && !placed)) {\n      outcome.failed.push(recipient.orgUserId);\n    }\n  }\n  await deps.desk.notify(event.orgId, notifications);\n  return assertSomeDelivered(NOTIFY_ACTION, outcome);\n}\n\nfunction grantRecipient(event: DomainEvent): string | undefined {\n  if (typeof event.data !== 'object' || event.data === null) {\n    return undefined;\n  }\n  const data = event.data as Record<string, unknown>;\n  if (event.type === 'organization.student.created' && typeof data.id === 'string') {\n    return data.id;\n  }\n  if (typeof data.orgUserId === 'string') {\n    return data.orgUserId;\n  }\n  return undefined;\n}\n\nasync function grantAccess(\n  action: AutomationAction,\n  event: DomainEvent,\n  deps: ActionDeps,\n): Promise<void> {\n  const contentId = typeof action.input.contentId === 'string' ? action.input.contentId : null;\n  const bundleId = typeof action.input.bundleId === 'string' ? action.input.bundleId : null;\n  if ((contentId == null) === (bundleId == null)) {\n    throw new ActionFailedError('grantAccess: provide exactly one of contentId or bundleId');\n  }\n  const orgUserId = grantRecipient(event);\n  if (!orgUserId) {\n    throw new ActionFailedError(`grantAccess: event \"${event.type}\" has no recipient`);\n  }\n  const days = action.input.expiresInDays;\n  const expiresAt =\n    typeof days === 'number' && Number.isFinite(days)\n      ? new Date(Date.now() + days * 86_400_000)\n      : null;\n  await deps.grants.grant(event.orgId, { orgUserId, contentId, bundleId, expiresAt });\n}\n\nasync function deliverWebhook(\n  action: AutomationAction,\n  event: DomainEvent,\n  deps: ActionDeps,\n): Promise<void> {\n  const input = deliverWebhookInputSchema.safeParse(action.input);\n  if (!input.success) {\n    throw new ActionFailedError(`${DELIVER_WEBHOOK_ACTION}: invalid input`);\n  }\n  const publicData = publicDataSchema(event.type);\n  if (!publicData) {\n    throw new ActionFailedError(\n      `${DELIVER_WEBHOOK_ACTION}: event \"${event.type}\" is not published`,\n    );\n  }\n  const data = publicData.safeParse(event.data);\n  if (!data.success) {\n    throw new ActionFailedError(\n      `${DELIVER_WEBHOOK_ACTION}: event \"${event.type}\" does not match its published shape`,\n    );\n  }\n  const secrets = await deps.credentials.reveal(event.orgId, input.data.secretRef);\n  const secret = secrets?.['secret'];\n  if (typeof secret !== 'string') {\n    throw new ActionFailedError(`${DELIVER_WEBHOOK_ACTION}: signing secret not found`);\n  }\n  const body = JSON.stringify({\n    id: event.id,\n    type: event.type,\n    version: event.version,\n    orgId: event.orgId,\n    occurredAt: event.occurredAt,\n    data: data.data,\n  });\n  const timestamp = Math.floor(Date.now() / 1000);\n  let response: WebhookResponse;\n  try {\n    response = await deps.webhooks.send({\n      url: input.data.url,\n      headers: webhookHeaders(secret, event.id, timestamp, body),\n      body,\n    });\n  } catch (err) {\n    (deps.logger ?? noopLogger).warn('webhook endpoint not reached', {\n      orgId: event.orgId,\n      automationId: deps.automationId,\n      eventId: event.id,\n      err,\n    });\n    throw new ActionFailedError(`${DELIVER_WEBHOOK_ACTION}: the endpoint could not be reached`);\n  }\n  if (response.status < 200 || response.status >= 300) {\n    throw new ActionFailedError(`${DELIVER_WEBHOOK_ACTION}: endpoint responded ${response.status}`);\n  }\n}\n"],"mappings":";;;;;;;;;;;AA4BA,MAAa,yBAA+C;CAC1D,eAAe;EACb,UAAU,CAAC,qBAAqB;EAChC,QAAQ,OAAO,OAAO,SAAS;GAC7B,MAAM,SAAS,kBAAkB,mBAAmB,UAAU,KAAK;GACnE,IAAI,CAAC,OAAO,SACV;GAEF,MAAM,cAAc,OAAO,KAAK;GAChC,IAAI,CAAC,YAAY,WACf,OAAO,CAAC;GAEV,MAAM,UAAU,MAAM,KAAK,QAAQ,YAAY,YAAY,OAAO,YAAY,SAAS;GACvF,IAAI,CAAC,SACH;GAEF,OAAO,QAAQ,MAAM,OAAO,YAAY,OAAO,CAAC,YAAY,SAAS,GAAG;IACtE,cAAc,QAAQ;IACtB,WAAW,QAAQ;IACnB,aAAa,QAAQ;GACvB,CAAC;EACH;CACF;CACA,eAAe;EACb,UAAU,CAAC,qBAAqB;EAChC,QAAQ,OAAO,OAAO,SAAS;GAC7B,MAAM,SAAS,kBAAkB,mBAAmB,UAAU,KAAK;GACnE,IAAI,CAAC,OAAO,SACV;GAEF,MAAM,cAAc,OAAO,KAAK;GAChC,IAAI,CAAC,YAAY,WACf,OAAO,CAAC;GAEV,MAAM,UAAU,MAAM,KAAK,QAAQ,YAAY,YAAY,OAAO,YAAY,SAAS;GACvF,IAAI,CAAC,SACH;GAEF,OAAO,QAAQ,MAAM,OAAO,YAAY,OAAO,CAAC,YAAY,SAAS,GAAG,EACtE,cAAc,QAAQ,MACxB,CAAC;EACH;CACF;CACA,GAAG;AACL;AAUA,SAAS,eAA8B;CACrC,OAAO;EAAE,YAAY,CAAC;EAAG,QAAQ,CAAC;CAAE;AACtC;AAEA,SAAS,oBAAoB,QAAgB,SAAuC;CAClF,IAAI,QAAQ,WAAW,WAAW,KAAK,QAAQ,OAAO,SAAS,GAC7D,MAAM,IAAI,kBACR,GAAG,OAAO,4BAA4B,QAAQ,OAAO,OAAO,YAC9D;CAEF,OAAO;AACT;AAEA,SAAS,kBAAkB,OAA0C;CACnE,OAAO,OAAO,UAAU,YAAY,SAAS;AAC/C;;AAGA,eAAsB,cACpB,QACA,OACA,MACwB;CACxB,QAAQ,OAAO,MAAf;EACE,KAAK,aAAa;GAChB,MAAM,WAAW,OAAO,MAAM;GAC9B,IAAI,CAAC,kBAAkB,QAAQ,GAC7B,MAAM,IAAI,kBAAkB,gCAAgC,OAAO,QAAQ,EAAE,EAAE;GAEjF,MAAM,aAAa,uBAAuB;GAC1C,IAAI,CAAC,cAAc,CAAC,WAAW,SAAS,SAAS,MAAM,IAAI,GACzD,MAAM,IAAI,kBACR,wBAAwB,SAAS,kCAAkC,MAAM,KAAK,EAChF;GAEF,MAAM,UAAU,MAAM,WAAW,OAAO,OAAO;IAAE,GAAG;IAAM,aAAa,OAAO;GAAM,CAAC;GACrF,IAAI,CAAC,SACH,MAAM,IAAI,kBACR,qBAAqB,MAAM,KAAK,qDAAqD,SAAS,EAChG;GAEF,MAAM,UAAU,aAAa;GAC7B,KAAK,MAAM,aAAa,SAItB,CAHc,MAAM,KAAK,UAAU,WAAW,OAAO,IAAI,IACrD,QAAQ,aACR,QAAQ,OAAA,CACP,KAAK,UAAU,SAAS;GAE/B,OAAO,oBAAoB,aAAa,OAAO;EACjD;EACA,KAAK,eAAe;GAClB,MAAM,OAAO,uBAAuB,UAAU,OAAO,MAAM,OAAO;GAClE,IAAI,CAAC,KAAK,SACR,MAAM,IAAI,kBACR,GAAG,cAAc,kBAAkB,OAAO,OAAO,MAAM,OAAO,EAAE,EAClE;GAEF,OAAO,OAAO,KAAK,MAAM,OAAO;IAAE,GAAG;IAAM,aAAa,OAAO;GAAM,CAAC;EACxE;EACA,KAAK;GACH,MAAM,YAAY,QAAQ,OAAO,IAAI;GACrC,OAAO,aAAa;EAEtB,KAAK;GACH,MAAM,KAAK,cAAc,gBAAgB,MAAM,OAAO,UAAU,KAAK,CAAC;GACtE,OAAO,aAAa;EAEtB,KAAK;GACH,MAAM,KAAK,cAAc,gBAAgB,MAAM,OAAO,UAAU,KAAK,CAAC;GACtE,OAAO,aAAa;EAEtB,KAAK;GACH,MAAM,KAAK,cAAc,WAAW,MAAM,OAAO,UAAU,KAAK,CAAC;GACjE,OAAO,aAAa;EAEtB,KAAK;GACH,MAAM,KAAK,cAAc,wBAAwB,MAAM,OAAO,UAAU,KAAK,CAAC;GAC9E,OAAO,aAAa;EAEtB,KAAK;GACH,MAAM,eAAe,QAAQ,OAAO,IAAI;GACxC,OAAO,aAAa;EAEtB,SACE,MAAM,IAAI,kBAAkB,mCAAmC,OAAO,KAAK,EAAE;CAEjF;AACF;AAEA,eAAe,KACb,UACA,WACA,OACA,MACkB;CAClB,IAAI;EACF,MAAM,KAAK,OAAO,KAAK,UAAU,IAAI,UAAU,UAAU,MAAM;EAC/D,OAAO;CACT,SAAS,KAAK;EACZ,CAAC,KAAK,UAAU,WAAA,CAAY,KAAK,kCAAkC;GACjE,OAAO,MAAM;GACb,cAAc,KAAK;GACnB,SAAS,MAAM;GACf;GACA,WAAW,UAAU;GACrB;EACF,CAAC;EACD,OAAO;CACT;AACF;AAEA,eAAe,OACb,MACA,OACA,MACwB;CACxB,MAAM,aAAa,uBAAuB;CAC1C,IAAI,CAAC,cAAc,CAAC,WAAW,SAAS,SAAS,MAAM,IAAI,GACzD,MAAM,IAAI,kBACR,GAAG,cAAc,UAAU,KAAK,kCAAkC,MAAM,KAAK,EAC/E;CAEF,MAAM,aAAa,MAAM,WAAW,OAAO,OAAO,IAAI;CACtD,IAAI,CAAC,YACH,MAAM,IAAI,kBACR,GAAG,cAAc,WAAW,MAAM,KAAK,iDAAiD,KAAK,EAC/F;CAEF,MAAM,cAAc,MAAM,KAAK,KAAK,eAClC,MAAM,OACN,WAAW,KAAK,cAAc,UAAU,MAAM,GAC9C,IACF;CACA,MAAM,YAAY,wBAAwB;CAC1C,MAAM,gBAAmC,CAAC;CAC1C,MAAM,UAAU,aAAa;CAC7B,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,aAAa,YAAY,UAAU;EACzC,MAAM,QAAQ,YAAY,UAAU;EACpC,MAAM,QAAQ,YAAY,UAAU;EACpC,MAAM,UAAU,SAAU,MAAM,KAAK,MAAM,WAAW,OAAO,IAAI;EACjE,IAAI,SAAS;EACb,IAAI,OACF,IAAI;GACF,MAAM,aAAa,MAAM,UAAU,MAAM,OAAO,WAAW,IAAI;GAC/D,cAAc,KACZ,GAAG,WAAW,KAAK,UAAU;IAAE,GAAG;IAAM,QAAQ,UAAU;IAAQ;GAAK,EAAE,CAC3E;GACA,SAAS;EACX,SAAS,KAAK;GACZ,CAAC,KAAK,UAAU,WAAA,CAAY,KAAK,sCAAsC;IACrE,OAAO,MAAM;IACb,cAAc,KAAK;IACnB,SAAS,MAAM;IACf;IACA,WAAW,UAAU;IACrB;GACF,CAAC;EACH;EAEF,IAAI,WAAW,QACb,QAAQ,WAAW,KAAK,UAAU,SAAS;EAE7C,IAAK,SAAS,CAAC,WAAa,SAAS,CAAC,QACpC,QAAQ,OAAO,KAAK,UAAU,SAAS;CAE3C;CACA,MAAM,KAAK,KAAK,OAAO,MAAM,OAAO,aAAa;CACjD,OAAO,oBAAoB,eAAe,OAAO;AACnD;AAEA,SAAS,eAAe,OAAwC;CAC9D,IAAI,OAAO,MAAM,SAAS,YAAY,MAAM,SAAS,MACnD;CAEF,MAAM,OAAO,MAAM;CACnB,IAAI,MAAM,SAAS,kCAAkC,OAAO,KAAK,OAAO,UACtE,OAAO,KAAK;CAEd,IAAI,OAAO,KAAK,cAAc,UAC5B,OAAO,KAAK;AAGhB;AAEA,eAAe,YACb,QACA,OACA,MACe;CACf,MAAM,YAAY,OAAO,OAAO,MAAM,cAAc,WAAW,OAAO,MAAM,YAAY;CACxF,MAAM,WAAW,OAAO,OAAO,MAAM,aAAa,WAAW,OAAO,MAAM,WAAW;CACrF,IAAK,aAAa,UAAW,YAAY,OACvC,MAAM,IAAI,kBAAkB,2DAA2D;CAEzF,MAAM,YAAY,eAAe,KAAK;CACtC,IAAI,CAAC,WACH,MAAM,IAAI,kBAAkB,uBAAuB,MAAM,KAAK,mBAAmB;CAEnF,MAAM,OAAO,OAAO,MAAM;CAC1B,MAAM,YACJ,OAAO,SAAS,YAAY,OAAO,SAAS,IAAI,IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAU,IACvC;CACN,MAAM,KAAK,OAAO,MAAM,MAAM,OAAO;EAAE;EAAW;EAAW;EAAU;CAAU,CAAC;AACpF;AAEA,eAAe,eACb,QACA,OACA,MACe;CACf,MAAM,QAAQ,0BAA0B,UAAU,OAAO,KAAK;CAC9D,IAAI,CAAC,MAAM,SACT,MAAM,IAAI,kBAAkB,GAAG,uBAAuB,gBAAgB;CAExE,MAAM,aAAa,iBAAiB,MAAM,IAAI;CAC9C,IAAI,CAAC,YACH,MAAM,IAAI,kBACR,GAAG,uBAAuB,WAAW,MAAM,KAAK,mBAClD;CAEF,MAAM,OAAO,WAAW,UAAU,MAAM,IAAI;CAC5C,IAAI,CAAC,KAAK,SACR,MAAM,IAAI,kBACR,GAAG,uBAAuB,WAAW,MAAM,KAAK,qCAClD;CAGF,MAAM,UAAS,MADO,KAAK,YAAY,OAAO,MAAM,OAAO,MAAM,KAAK,SAAS,EAAA,GACtD;CACzB,IAAI,OAAO,WAAW,UACpB,MAAM,IAAI,kBAAkB,GAAG,uBAAuB,2BAA2B;CAEnF,MAAM,OAAO,KAAK,UAAU;EAC1B,IAAI,MAAM;EACV,MAAM,MAAM;EACZ,SAAS,MAAM;EACf,OAAO,MAAM;EACb,YAAY,MAAM;EAClB,MAAM,KAAK;CACb,CAAC;CACD,MAAM,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;CAC9C,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,KAAK,SAAS,KAAK;GAClC,KAAK,MAAM,KAAK;GAChB,SAAS,eAAe,QAAQ,MAAM,IAAI,WAAW,IAAI;GACzD;EACF,CAAC;CACH,SAAS,KAAK;EACZ,CAAC,KAAK,UAAU,WAAA,CAAY,KAAK,gCAAgC;GAC/D,OAAO,MAAM;GACb,cAAc,KAAK;GACnB,SAAS,MAAM;GACf;EACF,CAAC;EACD,MAAM,IAAI,kBAAkB,GAAG,uBAAuB,oCAAoC;CAC5F;CACA,IAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAC9C,MAAM,IAAI,kBAAkB,GAAG,uBAAuB,uBAAuB,SAAS,QAAQ;AAElG"}
+{"version":3,"file":"actions.js","names":[],"sources":["../../src/automations/actions.ts"],"sourcesContent":["// automations context — action runners. `executeAction` maps one\n// AutomationAction against the DomainEvent that triggered its run.\n//\n// SEND_EMAIL_DERIVATIONS is the sendEmail runner's internal derivation table:\n// which (trigger, template) pairings are derivable. A template with no entry\n// (e.g. courseCompleted) makes `executeAction` throw a named error, recorded\n// by the engine as a failed action.\nimport type { EmailTemplateId } from '../types/index.js';\nimport { deliverWebhookInputSchema } from '../types/schemas/index.js';\nimport { entitlementEvents } from '../entitlements/index.js';\nimport type { DomainEvent } from '../shared/ports.js';\nimport { noopLogger } from '../shared/logger.js';\nimport { ActionFailedError, type AutomationAction } from './model.js';\nimport type { WebhookResponse } from './ports.js';\nimport { ALL_EMAIL_TEMPLATE_IDS, DELIVER_WEBHOOK_ACTION, publicDataSchema } from './catalog.js';\nimport { webhookHeaders } from './webhook-signing.js';\nimport { address, type ActionDeps, type EmailRecipient } from './community-mail.js';\nimport { COMMUNITY_DERIVATIONS, type EmailDerivation } from './community-derivations.js';\n\ntype SendEmailDerivations = { [K in EmailTemplateId]?: EmailDerivation<K> };\n\nexport const SEND_EMAIL_DERIVATIONS: SendEmailDerivations = {\n  accessGranted: {\n    triggers: ['entitlement.created'],\n    derive: async (event, deps) => {\n      const result = entitlementEvents.entitlementCreated.safeParse(event);\n      if (!result.success) {\n        return undefined;\n      }\n      const entitlement = result.data.data;\n      if (!entitlement.contentId) {\n        return [];\n      }\n      const content = await deps.lookups.contentInfo(entitlement.orgId, entitlement.contentId);\n      if (!content) {\n        return undefined;\n      }\n      return address(deps, event, entitlement.orgId, [entitlement.orgUserId], {\n        contentTitle: content.title,\n        contentId: content.id,\n        contentType: content.type,\n      });\n    },\n  },\n  accessRevoked: {\n    triggers: ['entitlement.deleted'],\n    derive: async (event, deps) => {\n      const result = entitlementEvents.entitlementDeleted.safeParse(event);\n      if (!result.success) {\n        return undefined;\n      }\n      const entitlement = result.data.data;\n      if (!entitlement.contentId) {\n        return [];\n      }\n      const content = await deps.lookups.contentInfo(entitlement.orgId, entitlement.contentId);\n      if (!content) {\n        return undefined;\n      }\n      return address(deps, event, entitlement.orgId, [entitlement.orgUserId], {\n        contentTitle: content.title,\n      });\n    },\n  },\n  ...COMMUNITY_DERIVATIONS,\n};\n\nexport type { ActionDeps, EmailRecipient };\n\n/** Who an action reached, and who a delivery to failed for (a partial failure does not throw). */\nexport interface ActionOutcome {\n  recipients: string[];\n  failed: string[];\n}\n\nfunction reachedNoOne(): ActionOutcome {\n  return { recipients: [], failed: [] };\n}\n\nfunction assertSomeDelivered(action: string, outcome: ActionOutcome): ActionOutcome {\n  if (outcome.recipients.length === 0 && outcome.failed.length > 0) {\n    throw new ActionFailedError(\n      `${action}: delivery failed for all ${outcome.failed.length} recipients`,\n    );\n  }\n  return outcome;\n}\n\nfunction isEmailTemplateId(value: unknown): value is EmailTemplateId {\n  return typeof value === 'string' && value in ALL_EMAIL_TEMPLATE_IDS;\n}\n\n/** Throws on any failure but a partial fan-out — the engine owns retry policy and failure bookkeeping. */\nexport async function executeAction(\n  action: AutomationAction,\n  event: DomainEvent,\n  deps: ActionDeps,\n): Promise<ActionOutcome> {\n  switch (action.type) {\n    case 'sendEmail': {\n      const template = action.input['template'];\n      if (!isEmailTemplateId(template)) {\n        throw new ActionFailedError(`sendEmail: unknown template \"${String(template)}\"`);\n      }\n      const derivation = SEND_EMAIL_DERIVATIONS[template];\n      if (!derivation || !derivation.triggers.includes(event.type)) {\n        throw new ActionFailedError(\n          `sendEmail: template \"${template}\" cannot be derived from event \"${event.type}\"`,\n        );\n      }\n      const derived = await derivation.derive(event, { ...deps, actionInput: action.input });\n      if (!derived) {\n        throw new ActionFailedError(\n          `sendEmail: event \"${event.type}\" is missing the data required to derive template \"${template}\"`,\n        );\n      }\n      const outcome = reachedNoOne();\n      for (const recipient of derived) {\n        const list = (await send(template, recipient, event, deps))\n          ? outcome.recipients\n          : outcome.failed;\n        list.push(recipient.orgUserId);\n      }\n      return assertSomeDelivered('sendEmail', outcome);\n    }\n    case 'grantAccess': {\n      await grantAccess(action, event, deps);\n      return reachedNoOne();\n    }\n    case DELIVER_WEBHOOK_ACTION: {\n      await deliverWebhook(action, event, deps);\n      return reachedNoOne();\n    }\n    default: {\n      throw new ActionFailedError(`unknown automation action type \"${action.type}\"`);\n    }\n  }\n}\n\nasync function send<K extends EmailTemplateId>(\n  template: K,\n  recipient: EmailRecipient<K>,\n  event: DomainEvent,\n  deps: ActionDeps,\n): Promise<boolean> {\n  try {\n    await deps.mailer.send(recipient.to, template, recipient.params);\n    return true;\n  } catch (err) {\n    (deps.logger ?? noopLogger).warn('automation email not delivered', {\n      orgId: event.orgId,\n      automationId: deps.automationId,\n      trigger: event.type,\n      template,\n      orgUserId: recipient.orgUserId,\n      err,\n    });\n    return false;\n  }\n}\n\nfunction grantRecipient(event: DomainEvent): string | undefined {\n  if (typeof event.data !== 'object' || event.data === null) {\n    return undefined;\n  }\n  const data = event.data as Record<string, unknown>;\n  if (event.type === 'organization.student.created' && typeof data.id === 'string') {\n    return data.id;\n  }\n  if (typeof data.orgUserId === 'string') {\n    return data.orgUserId;\n  }\n  return undefined;\n}\n\nasync function grantAccess(\n  action: AutomationAction,\n  event: DomainEvent,\n  deps: ActionDeps,\n): Promise<void> {\n  const contentId = typeof action.input.contentId === 'string' ? action.input.contentId : null;\n  const bundleId = typeof action.input.bundleId === 'string' ? action.input.bundleId : null;\n  if ((contentId == null) === (bundleId == null)) {\n    throw new ActionFailedError('grantAccess: provide exactly one of contentId or bundleId');\n  }\n  const orgUserId = grantRecipient(event);\n  if (!orgUserId) {\n    throw new ActionFailedError(`grantAccess: event \"${event.type}\" has no recipient`);\n  }\n  const days = action.input.expiresInDays;\n  const expiresAt =\n    typeof days === 'number' && Number.isFinite(days)\n      ? new Date(Date.now() + days * 86_400_000)\n      : null;\n  await deps.grants.grant(event.orgId, { orgUserId, contentId, bundleId, expiresAt });\n}\n\nasync function deliverWebhook(\n  action: AutomationAction,\n  event: DomainEvent,\n  deps: ActionDeps,\n): Promise<void> {\n  const input = deliverWebhookInputSchema.safeParse(action.input);\n  if (!input.success) {\n    throw new ActionFailedError(`${DELIVER_WEBHOOK_ACTION}: invalid input`);\n  }\n  const publicData = publicDataSchema(event.type);\n  if (!publicData) {\n    throw new ActionFailedError(\n      `${DELIVER_WEBHOOK_ACTION}: event \"${event.type}\" is not published`,\n    );\n  }\n  const data = publicData.safeParse(event.data);\n  if (!data.success) {\n    throw new ActionFailedError(\n      `${DELIVER_WEBHOOK_ACTION}: event \"${event.type}\" does not match its published shape`,\n    );\n  }\n  const secrets = await deps.credentials.reveal(event.orgId, input.data.secretRef);\n  const secret = secrets?.['secret'];\n  if (typeof secret !== 'string') {\n    throw new ActionFailedError(`${DELIVER_WEBHOOK_ACTION}: signing secret not found`);\n  }\n  const body = JSON.stringify({\n    id: event.id,\n    type: event.type,\n    version: event.version,\n    orgId: event.orgId,\n    occurredAt: event.occurredAt,\n    data: data.data,\n  });\n  const timestamp = Math.floor(Date.now() / 1000);\n  let response: WebhookResponse;\n  try {\n    response = await deps.webhooks.send({\n      url: input.data.url,\n      headers: webhookHeaders(secret, event.id, timestamp, body),\n      body,\n    });\n  } catch (err) {\n    (deps.logger ?? noopLogger).warn('webhook endpoint not reached', {\n      orgId: event.orgId,\n      automationId: deps.automationId,\n      eventId: event.id,\n      err,\n    });\n    throw new ActionFailedError(`${DELIVER_WEBHOOK_ACTION}: the endpoint could not be reached`);\n  }\n  if (response.status < 200 || response.status >= 300) {\n    throw new ActionFailedError(`${DELIVER_WEBHOOK_ACTION}: endpoint responded ${response.status}`);\n  }\n}\n"],"mappings":";;;;;;;;;AAqBA,MAAa,yBAA+C;CAC1D,eAAe;EACb,UAAU,CAAC,qBAAqB;EAChC,QAAQ,OAAO,OAAO,SAAS;GAC7B,MAAM,SAAS,kBAAkB,mBAAmB,UAAU,KAAK;GACnE,IAAI,CAAC,OAAO,SACV;GAEF,MAAM,cAAc,OAAO,KAAK;GAChC,IAAI,CAAC,YAAY,WACf,OAAO,CAAC;GAEV,MAAM,UAAU,MAAM,KAAK,QAAQ,YAAY,YAAY,OAAO,YAAY,SAAS;GACvF,IAAI,CAAC,SACH;GAEF,OAAO,QAAQ,MAAM,OAAO,YAAY,OAAO,CAAC,YAAY,SAAS,GAAG;IACtE,cAAc,QAAQ;IACtB,WAAW,QAAQ;IACnB,aAAa,QAAQ;GACvB,CAAC;EACH;CACF;CACA,eAAe;EACb,UAAU,CAAC,qBAAqB;EAChC,QAAQ,OAAO,OAAO,SAAS;GAC7B,MAAM,SAAS,kBAAkB,mBAAmB,UAAU,KAAK;GACnE,IAAI,CAAC,OAAO,SACV;GAEF,MAAM,cAAc,OAAO,KAAK;GAChC,IAAI,CAAC,YAAY,WACf,OAAO,CAAC;GAEV,MAAM,UAAU,MAAM,KAAK,QAAQ,YAAY,YAAY,OAAO,YAAY,SAAS;GACvF,IAAI,CAAC,SACH;GAEF,OAAO,QAAQ,MAAM,OAAO,YAAY,OAAO,CAAC,YAAY,SAAS,GAAG,EACtE,cAAc,QAAQ,MACxB,CAAC;EACH;CACF;CACA,GAAG;AACL;AAUA,SAAS,eAA8B;CACrC,OAAO;EAAE,YAAY,CAAC;EAAG,QAAQ,CAAC;CAAE;AACtC;AAEA,SAAS,oBAAoB,QAAgB,SAAuC;CAClF,IAAI,QAAQ,WAAW,WAAW,KAAK,QAAQ,OAAO,SAAS,GAC7D,MAAM,IAAI,kBACR,GAAG,OAAO,4BAA4B,QAAQ,OAAO,OAAO,YAC9D;CAEF,OAAO;AACT;AAEA,SAAS,kBAAkB,OAA0C;CACnE,OAAO,OAAO,UAAU,YAAY,SAAS;AAC/C;;AAGA,eAAsB,cACpB,QACA,OACA,MACwB;CACxB,QAAQ,OAAO,MAAf;EACE,KAAK,aAAa;GAChB,MAAM,WAAW,OAAO,MAAM;GAC9B,IAAI,CAAC,kBAAkB,QAAQ,GAC7B,MAAM,IAAI,kBAAkB,gCAAgC,OAAO,QAAQ,EAAE,EAAE;GAEjF,MAAM,aAAa,uBAAuB;GAC1C,IAAI,CAAC,cAAc,CAAC,WAAW,SAAS,SAAS,MAAM,IAAI,GACzD,MAAM,IAAI,kBACR,wBAAwB,SAAS,kCAAkC,MAAM,KAAK,EAChF;GAEF,MAAM,UAAU,MAAM,WAAW,OAAO,OAAO;IAAE,GAAG;IAAM,aAAa,OAAO;GAAM,CAAC;GACrF,IAAI,CAAC,SACH,MAAM,IAAI,kBACR,qBAAqB,MAAM,KAAK,qDAAqD,SAAS,EAChG;GAEF,MAAM,UAAU,aAAa;GAC7B,KAAK,MAAM,aAAa,SAItB,CAHc,MAAM,KAAK,UAAU,WAAW,OAAO,IAAI,IACrD,QAAQ,aACR,QAAQ,OAAA,CACP,KAAK,UAAU,SAAS;GAE/B,OAAO,oBAAoB,aAAa,OAAO;EACjD;EACA,KAAK;GACH,MAAM,YAAY,QAAQ,OAAO,IAAI;GACrC,OAAO,aAAa;EAEtB,KAAK;GACH,MAAM,eAAe,QAAQ,OAAO,IAAI;GACxC,OAAO,aAAa;EAEtB,SACE,MAAM,IAAI,kBAAkB,mCAAmC,OAAO,KAAK,EAAE;CAEjF;AACF;AAEA,eAAe,KACb,UACA,WACA,OACA,MACkB;CAClB,IAAI;EACF,MAAM,KAAK,OAAO,KAAK,UAAU,IAAI,UAAU,UAAU,MAAM;EAC/D,OAAO;CACT,SAAS,KAAK;EACZ,CAAC,KAAK,UAAU,WAAA,CAAY,KAAK,kCAAkC;GACjE,OAAO,MAAM;GACb,cAAc,KAAK;GACnB,SAAS,MAAM;GACf;GACA,WAAW,UAAU;GACrB;EACF,CAAC;EACD,OAAO;CACT;AACF;AAEA,SAAS,eAAe,OAAwC;CAC9D,IAAI,OAAO,MAAM,SAAS,YAAY,MAAM,SAAS,MACnD;CAEF,MAAM,OAAO,MAAM;CACnB,IAAI,MAAM,SAAS,kCAAkC,OAAO,KAAK,OAAO,UACtE,OAAO,KAAK;CAEd,IAAI,OAAO,KAAK,cAAc,UAC5B,OAAO,KAAK;AAGhB;AAEA,eAAe,YACb,QACA,OACA,MACe;CACf,MAAM,YAAY,OAAO,OAAO,MAAM,cAAc,WAAW,OAAO,MAAM,YAAY;CACxF,MAAM,WAAW,OAAO,OAAO,MAAM,aAAa,WAAW,OAAO,MAAM,WAAW;CACrF,IAAK,aAAa,UAAW,YAAY,OACvC,MAAM,IAAI,kBAAkB,2DAA2D;CAEzF,MAAM,YAAY,eAAe,KAAK;CACtC,IAAI,CAAC,WACH,MAAM,IAAI,kBAAkB,uBAAuB,MAAM,KAAK,mBAAmB;CAEnF,MAAM,OAAO,OAAO,MAAM;CAC1B,MAAM,YACJ,OAAO,SAAS,YAAY,OAAO,SAAS,IAAI,IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAU,IACvC;CACN,MAAM,KAAK,OAAO,MAAM,MAAM,OAAO;EAAE;EAAW;EAAW;EAAU;CAAU,CAAC;AACpF;AAEA,eAAe,eACb,QACA,OACA,MACe;CACf,MAAM,QAAQ,0BAA0B,UAAU,OAAO,KAAK;CAC9D,IAAI,CAAC,MAAM,SACT,MAAM,IAAI,kBAAkB,GAAG,uBAAuB,gBAAgB;CAExE,MAAM,aAAa,iBAAiB,MAAM,IAAI;CAC9C,IAAI,CAAC,YACH,MAAM,IAAI,kBACR,GAAG,uBAAuB,WAAW,MAAM,KAAK,mBAClD;CAEF,MAAM,OAAO,WAAW,UAAU,MAAM,IAAI;CAC5C,IAAI,CAAC,KAAK,SACR,MAAM,IAAI,kBACR,GAAG,uBAAuB,WAAW,MAAM,KAAK,qCAClD;CAGF,MAAM,UAAS,MADO,KAAK,YAAY,OAAO,MAAM,OAAO,MAAM,KAAK,SAAS,EAAA,GACtD;CACzB,IAAI,OAAO,WAAW,UACpB,MAAM,IAAI,kBAAkB,GAAG,uBAAuB,2BAA2B;CAEnF,MAAM,OAAO,KAAK,UAAU;EAC1B,IAAI,MAAM;EACV,MAAM,MAAM;EACZ,SAAS,MAAM;EACf,OAAO,MAAM;EACb,YAAY,MAAM;EAClB,MAAM,KAAK;CACb,CAAC;CACD,MAAM,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;CAC9C,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,KAAK,SAAS,KAAK;GAClC,KAAK,MAAM,KAAK;GAChB,SAAS,eAAe,QAAQ,MAAM,IAAI,WAAW,IAAI;GACzD;EACF,CAAC;CACH,SAAS,KAAK;EACZ,CAAC,KAAK,UAAU,WAAA,CAAY,KAAK,gCAAgC;GAC/D,OAAO,MAAM;GACb,cAAc,KAAK;GACnB,SAAS,MAAM;GACf;EACF,CAAC;EACD,MAAM,IAAI,kBAAkB,GAAG,uBAAuB,oCAAoC;CAC5F;CACA,IAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAC9C,MAAM,IAAI,kBAAkB,GAAG,uBAAuB,uBAAuB,SAAS,QAAQ;AAElG"}

package/dist/automations/catalog.d.ts

@@ -7,10 +7,9 @@ import { z } from "zod";
 /** Every EmailTemplateId — a missing key here is a compile error, kept exhaustive by construction. */
 declare const ALL_EMAIL_TEMPLATE_IDS: Record<EmailTemplateId, true>;
 declare const DELIVER_WEBHOOK_ACTION = "deliverWebhook";
-declare const NOTIFY_ACTION = "notify";
 declare function catalogActions(): AvailableActions;
 declare function catalogTriggers(): AvailableTriggers['triggers'];
 declare function publicDataSchema(type: string): z.ZodType | undefined;
 //#endregion
-export { ALL_EMAIL_TEMPLATE_IDS, DELIVER_WEBHOOK_ACTION, NOTIFY_ACTION, catalogActions, catalogTriggers, publicDataSchema };
+export { ALL_EMAIL_TEMPLATE_IDS, DELIVER_WEBHOOK_ACTION, catalogActions, catalogTriggers, publicDataSchema };
 //# sourceMappingURL=catalog.d.ts.map