@headless-lms/server 0.1.0 → 0.2.0

package/README.md

@@ -23,7 +23,7 @@ Public surface (`src/index.ts`): `createContainer`, `buildServer`,
 `@headless-lms/adapter-db`, which ships the `drizzle/` migration assets;
 `@headless-lms/cli` wraps it as `headless-lms migrate`), and the types
 installations need (`ServerConfig`, `Container`, `AdapterOverrides`, shared ports
-like `EmailSender` / `ObjectStorage`). Everything else is internal.
+like `EmailSender` / `ObjectStorage` / `WebhookSender`). Everything else is internal.
 
 ## Layout
 

package/dist/app/container.d.ts

@@ -1,7 +1,7 @@
 import { PollingOutboxRelayConfig } from "@headless-lms/adapter-defaults/events/outbox-relay";
 import { LogLevel, PinoInstance, RequestLogContext } from "@headless-lms/adapter-defaults/logging";
 import { BetterAuth } from "@headless-lms/adapter-auth";
-import { ContentServiceImpl } from "@headless-lms/core/content";
+import { ContentService } from "@headless-lms/core/content";
 import { EntitlementsServiceImpl } from "@headless-lms/core/entitlements";
 import { ProgressServiceImpl } from "@headless-lms/core/progress";
 import { DiscussionServiceImpl } from "@headless-lms/core/discussion";
@@ -12,10 +12,11 @@ import { IntegrationsServiceImpl } from "@headless-lms/core/integrations";
 import { AutomationsServiceImpl } from "@headless-lms/core/automations";
 import { StudentsReportServiceImpl } from "@headless-lms/core/reporting/students";
 import { DashboardReportServiceImpl } from "@headless-lms/core/reporting/dashboard";
+import { CoursesReportServiceImpl } from "@headless-lms/core/reporting/courses";
 import { LearnReportServiceImpl } from "@headless-lms/core/reporting/learn";
 import { Mailer } from "@headless-lms/core/shared/mailer";
 import { SettingsService } from "@headless-lms/core/shared/settings";
-import { AutomationEngine } from "@headless-lms/core/types";
+import { AutomationEngine, WebhookSender } from "@headless-lms/core/types";
 import { CredentialStore, EmailSender, Logger, ObjectStorage, OutboxRelay, TemplateContext, TemplateRenderer } from "@headless-lms/core/shared/ports";
 //#region src/app/container.d.ts
 /** Installation-supplied ports; an absent slot falls back to a fail-loudly stub. */
@@ -26,6 +27,8 @@ interface AdapterOverrides {
   templates?: TemplateRenderer;
   /** Durable automation engine. Absent → InlineAutomationEngine (in-process, one attempt per action). */
   workflows?: AutomationEngine;
+  /** Outbound HTTP for webhook deliveries. Absent → FetchWebhookSender (fetch, 10s timeout). */
+  webhooks?: WebhookSender;
 }
 interface BuildContainerOptions {
   /** Installation's plugins folder, scanned by loadIntegrations. Absent → no integrations. */
@@ -82,7 +85,7 @@ interface Container {
   orgProvider: OrgAdmin;
   identity: IdentityServiceImpl;
   organizations: OrganizationServiceImpl;
-  content: ContentServiceImpl;
+  content: ContentService;
   entitlements: EntitlementsServiceImpl;
   progress: ProgressServiceImpl;
   discussion: DiscussionServiceImpl;
@@ -95,6 +98,7 @@ interface Container {
   reporting: {
     students: StudentsReportServiceImpl;
     dashboard: DashboardReportServiceImpl;
+    courses: CoursesReportServiceImpl;
     learn: LearnReportServiceImpl;
   };
   storage: ObjectStorage;

package/dist/app/container.js

@@ -1,14 +1,15 @@
 import { loadIntegrations } from "./integrations.js";
 import { registerNotificationSubscribers } from "./notifications.js";
-import { DrizzleAssetsRepository, DrizzleAutomationRunsRepository, DrizzleAutomationsRepository, DrizzleConnectionsRepository, DrizzleContentRepository, DrizzleCredentialStore, DrizzleDashboardRepository, DrizzleDiscussionRepository, DrizzleEntitlementsRepository, DrizzleIdentityRepository, DrizzleLearnRepository, DrizzleMembersRepository, DrizzleOrganizationsRepository, DrizzleOutboxAppender, DrizzleOutboxStore, DrizzleProgressRepository, DrizzleSettingsRepository, DrizzleStudentsRepository, DrizzleUnitOfWork, createDb } from "@headless-lms/adapter-db";
+import { DrizzleAssetsRepository, DrizzleAutomationRunsRepository, DrizzleAutomationsRepository, DrizzleConnectionsRepository, DrizzleContentRepository, DrizzleCourseAnalyticsRepository, DrizzleCredentialStore, DrizzleDashboardRepository, DrizzleDiscussionRepository, DrizzleEntitlementsRepository, DrizzleIdentityRepository, DrizzleLearnRepository, DrizzleMembersRepository, DrizzleOrganizationsRepository, DrizzleOutboxAppender, DrizzleOutboxStore, DrizzleProgressRepository, DrizzleSettingsRepository, DrizzleStudentsRepository, DrizzleUnitOfWork, createDb } from "@headless-lms/adapter-db";
 import { InMemoryEventBus } from "@headless-lms/adapter-defaults/events";
 import { PollingOutboxRelay } from "@headless-lms/adapter-defaults/events/outbox-relay";
 import { InlineAutomationEngine } from "@headless-lms/adapter-defaults/workflows";
+import { FetchWebhookSender } from "@headless-lms/adapter-defaults/webhooks";
 import { EmailAdapter, StubTemplateRenderer } from "@headless-lms/adapter-defaults/email";
 import { createRootLogger, requestLogContext } from "@headless-lms/adapter-defaults/logging";
 import { StorageAdapter } from "@headless-lms/adapter-defaults/storage";
 import { BetterAuth } from "@headless-lms/adapter-auth";
-import { ContentServiceImpl } from "@headless-lms/core/content";
+import { ContentService } from "@headless-lms/core/content";
 import { EntitlementsServiceImpl } from "@headless-lms/core/entitlements";
 import { ProgressServiceImpl } from "@headless-lms/core/progress";
 import { DiscussionServiceImpl } from "@headless-lms/core/discussion";
@@ -19,6 +20,7 @@ import { IntegrationsServiceImpl } from "@headless-lms/core/integrations";
 import { AutomationsServiceImpl } from "@headless-lms/core/automations";
 import { StudentsReportServiceImpl } from "@headless-lms/core/reporting/students";
 import { DashboardReportServiceImpl } from "@headless-lms/core/reporting/dashboard";
+import { CoursesReportServiceImpl } from "@headless-lms/core/reporting/courses";
 import { LearnReportServiceImpl } from "@headless-lms/core/reporting/learn";
 import { Mailer } from "@headless-lms/core/shared/mailer";
 import { SettingsService } from "@headless-lms/core/shared/settings";
@@ -76,11 +78,16 @@ async function buildContainer(config, options) {
 		organizations: new DrizzleOrganizationsRepository(tx, logger.child({ name: "org" })),
 		outbox: new DrizzleOutboxAppender(tx, logger.child({ name: "org" }))
 	}));
+	const orgAdminRef = { current: void 0 };
 	const organizations = new OrganizationServiceImpl({
 		repo: new DrizzleOrganizationsRepository(db, logger.child({ name: "org" })),
 		membersRepo: new DrizzleMembersRepository(db, logger.child({ name: "org" })),
 		people: identity,
 		uow: organizationsUow,
+		orgAdmin: () => {
+			if (!orgAdminRef.current) throw new Error("orgAdmin not initialised");
+			return orgAdminRef.current;
+		},
 		logger: logger.child({ name: "org" }),
 		mailer,
 		inviteUrls: {
@@ -93,10 +100,9 @@ async function buildContainer(config, options) {
 		content: new DrizzleContentRepository(tx, contentLogger),
 		outbox: new DrizzleOutboxAppender(tx, outboxLogger)
 	}));
-	const content = new ContentServiceImpl({
+	const content = new ContentService({
 		repo: new DrizzleContentRepository(db, contentLogger),
 		uow: contentUow,
-		settings,
 		logger: contentLogger
 	});
 	const entitlementsUow = new DrizzleUnitOfWork(db, (tx) => ({
@@ -147,6 +153,10 @@ async function buildContainer(config, options) {
 			repo: new DrizzleDashboardRepository(db, reportingLogger),
 			logger: reportingLogger
 		}),
+		courses: new CoursesReportServiceImpl({
+			repo: new DrizzleCourseAnalyticsRepository(db, reportingLogger),
+			logger: reportingLogger
+		}),
 		learn: new LearnReportServiceImpl({
 			reader: new DrizzleLearnRepository(db, reportingLogger),
 			content,
@@ -173,6 +183,7 @@ async function buildContainer(config, options) {
 	const automationsUow = new DrizzleUnitOfWork(db, (tx) => ({
 		automations: new DrizzleAutomationsRepository(tx, automationsLogger),
 		runs: new DrizzleAutomationRunsRepository(tx, automationsLogger),
+		credentials: new DrizzleCredentialStore(tx, config.credentialStoreKey, automationsLogger),
 		outbox: new DrizzleOutboxAppender(tx, automationsLogger)
 	}));
 	const mailerLookups = {
@@ -181,12 +192,14 @@ async function buildContainer(config, options) {
 			const course = await content.getCourse(orgId, contentId);
 			if (course) return {
 				id: course.id,
-				title: course.title
+				title: course.title,
+				type: course.type
 			};
 			const download = await content.getDownload(orgId, contentId);
 			return download ? {
 				id: download.id,
-				title: download.title
+				title: download.title,
+				type: download.type
 			} : null;
 		}
 	};
@@ -198,6 +211,8 @@ async function buildContainer(config, options) {
 		mailer,
 		lookups: mailerLookups,
 		integrations,
+		credentials: credentialStore,
+		webhooks: options?.adapters?.webhooks ?? new FetchWebhookSender(),
 		logger: automationsLogger
 	});
 	automationEngine.register(automations);
@@ -206,25 +221,37 @@ async function buildContainer(config, options) {
 	eventBus.subscribeAll((event) => automations.handle(event));
 	const outboxConfig = resolveOutboxConfig(config.outbox);
 	const outboxRelay = new PollingOutboxRelay(new DrizzleOutboxStore(db, outboxLogger), eventBus, outboxConfig, outboxLogger);
+	const authLogger = logger.child({ name: "auth" });
+	const authHook = (name, fn) => async (...args) => {
+		try {
+			return await fn(...args);
+		} catch (err) {
+			authLogger.error(`auth hook ${name} failed`, { err });
+			throw err;
+		}
+	};
 	const auth = new BetterAuth({
 		db,
 		baseUrl: config.authBaseURL,
 		secret: config.authSecret,
 		trustedOrigins: config.trustedOrigins,
 		hooks: {
-			sendResetPassword: async (data) => {
+			sendResetPassword: async ({ user, url }) => {
 				await identity.sendPasswordReset({
-					email: data.user.email,
-					url: ""
+					email: user.email,
+					url
 				});
 			},
-			sendMagicLink: async ({ email, url }) => {
+			onPasswordReset: async ({ user }) => {
+				await identity.sendPasswordChanged({ email: user.email });
+			},
+			sendMagicLink: authHook("sendMagicLink", async ({ email, url }) => {
 				await identity.sendMagicLink({
 					email,
 					url
 				});
-			},
-			beforeUserCreate: async (user) => {
+			}),
+			beforeUserCreate: authHook("beforeUserCreate", async (user) => {
 				const { email, name } = user;
 				const [firstName, lastName] = name.split(" ");
 				const domainUser = await identity.linkOrCreateUser({
@@ -236,8 +263,8 @@ async function buildContainer(config, options) {
 					...user,
 					id: domainUser.id
 				} };
-			},
-			beforeCreateSession: async (session) => {
+			}),
+			beforeCreateSession: authHook("beforeCreateSession", async (session) => {
 				const person = await identity.getUserByExternalId(session.userId);
 				if (!person) return;
 				const orgs = await organizations.getOrgUsersForUser(person.id);
@@ -248,8 +275,8 @@ async function buildContainer(config, options) {
 					...session,
 					activeOrganizationId: org.id
 				} };
-			},
-			beforeCreateOrganization: async ({ organization: org, user: baUser }) => {
+			}),
+			beforeCreateOrganization: authHook("beforeCreateOrganization", async ({ organization: org, user: baUser }) => {
 				const domainOrg = await organizations.createOrganization({
 					ownerId: baUser.id,
 					...org,
@@ -259,28 +286,32 @@ async function buildContainer(config, options) {
 					...org,
 					id: domainOrg.id
 				} };
-			},
-			beforeUpdateOrganization: async ({ organization }) => {
+			}),
+			beforeUpdateOrganization: authHook("beforeUpdateOrganization", async ({ organization }) => {
 				await organizations.updateOrganization(organization.id, organization);
-			},
-			beforeDeleteOrganization: async ({ organization }) => {
+			}),
+			beforeDeleteOrganization: authHook("beforeDeleteOrganization", async ({ organization }) => {
 				await organizations.deleteOrganization(organization.id);
-			},
-			beforeAddMember: async ({ member }) => {
+			}),
+			beforeAddMember: authHook("beforeAddMember", async ({ member }) => {
 				await organizations.addOrgUser({
 					orgId: member.organizationId,
 					userId: member.userId,
 					role: parseRole(member.role)
 				});
-			},
-			beforeRemoveMember: async ({ member }) => {
+			}),
+			beforeUpdateMemberRole: authHook("beforeUpdateMemberRole", async ({ member, newRole }) => {
+				await organizations.updateOrgUser(member.organizationId, member.userId, { role: parseRole(newRole) });
+			}),
+			beforeRemoveMember: authHook("beforeRemoveMember", async ({ member }) => {
 				await organizations.removeOrgUser(member.organizationId, member.userId);
-			}
+			})
 		},
-		logger: logger.child({ name: "auth" }),
+		logger: authLogger,
 		cookieDomain: config.cookieDomain,
 		secureCookies: config.secureCookies
 	});
+	orgAdminRef.current = auth;
 	return {
 		auth,
 		identity,

package/dist/app/container.js.map

@@ -1 +1 @@
-{"version":3,"file":"container.js","names":[],"sources":["../../src/app/container.ts"],"sourcesContent":["// Wires adapters + services in dependency order. Starts nothing.\nimport {\n  createDb,\n  DrizzleAssetsRepository,\n  DrizzleAutomationRunsRepository,\n  DrizzleAutomationsRepository,\n  DrizzleConnectionsRepository,\n  DrizzleContentRepository,\n  DrizzleCredentialStore,\n  DrizzleDashboardRepository,\n  DrizzleDiscussionRepository,\n  DrizzleEntitlementsRepository,\n  DrizzleIdentityRepository,\n  DrizzleLearnRepository,\n  DrizzleMembersRepository,\n  DrizzleOrganizationsRepository,\n  DrizzleOutboxAppender,\n  DrizzleOutboxStore,\n  DrizzleProgressRepository,\n  DrizzleSettingsRepository,\n  DrizzleStudentsRepository,\n  DrizzleUnitOfWork,\n} from '@headless-lms/adapter-db';\nimport { InMemoryEventBus } from '@headless-lms/adapter-defaults/events';\nimport {\n  PollingOutboxRelay,\n  type PollingOutboxRelayConfig,\n} from '@headless-lms/adapter-defaults/events/outbox-relay';\nimport { InlineAutomationEngine } from '@headless-lms/adapter-defaults/workflows';\nimport { EmailAdapter, StubTemplateRenderer } from '@headless-lms/adapter-defaults/email';\nimport {\n  createRootLogger,\n  type LogLevel,\n  type PinoInstance,\n  requestLogContext,\n  type RequestLogContext,\n} from '@headless-lms/adapter-defaults/logging';\nimport { StorageAdapter } from '@headless-lms/adapter-defaults/storage';\nimport { BetterAuth } from '@headless-lms/adapter-auth';\n\nimport { ContentServiceImpl } from '@headless-lms/core/content';\nimport { EntitlementsServiceImpl } from '@headless-lms/core/entitlements';\nimport { ProgressServiceImpl } from '@headless-lms/core/progress';\nimport { DiscussionServiceImpl } from '@headless-lms/core/discussion';\nimport { IdentityServiceImpl, type SessionAdmin } from '@headless-lms/core/identity';\nimport { type OrgAdmin, OrganizationServiceImpl, parseRole } from '@headless-lms/core/organizations';\nimport { AssetsServiceImpl } from '@headless-lms/core/assets';\nimport { IntegrationsServiceImpl } from '@headless-lms/core/integrations';\nimport { AutomationsServiceImpl } from '@headless-lms/core/automations';\nimport { loadIntegrations } from './integrations.js';\nimport { registerNotificationSubscribers } from './notifications.js';\nimport { StudentsReportServiceImpl } from '@headless-lms/core/reporting/students';\nimport { DashboardReportServiceImpl } from '@headless-lms/core/reporting/dashboard';\nimport { LearnReportServiceImpl } from '@headless-lms/core/reporting/learn';\nimport { Mailer, type MailerLookups } from '@headless-lms/core/shared/mailer';\nimport { SettingsService } from '@headless-lms/core/shared/settings';\n\nimport type {\n  CredentialStore,\n  EmailSender,\n  Logger,\n  ObjectStorage,\n  OutboxRelay,\n  TemplateContext,\n  TemplateRenderer,\n} from '@headless-lms/core/shared/ports';\nimport type { AutomationEngine } from '@headless-lms/core/types';\n\n/** Installation-supplied ports; an absent slot falls back to a fail-loudly stub. */\nexport interface AdapterOverrides {\n  email?: EmailSender;\n  storage?: ObjectStorage;\n  /** Resolves email templates to rendered content. Absent → fail-loudly stub. */\n  templates?: TemplateRenderer;\n  /** Durable automation engine. Absent → InlineAutomationEngine (in-process, one attempt per action). */\n  workflows?: AutomationEngine;\n}\n\nexport interface BuildContainerOptions {\n  /** Installation's plugins folder, scanned by loadIntegrations. Absent → no integrations. */\n  pluginsDir?: string;\n  adapters?: AdapterOverrides;\n}\n\nexport interface Config {\n  databaseUrl: string;\n  authBaseURL: string;\n  authSecret: string;\n  trustedOrigins: string[];\n  /** Branding threaded into every email template. Default: brandName \"Headless LMS\", baseUrl = adminAppUrl.\n   *  (studentPortalUrl is composed in from the top-level config field.) */\n  emailBranding?: Omit<TemplateContext, 'studentPortalUrl'>;\n  /** base64-encoded 32-byte key for the credential store (CREDENTIAL_STORE_KEY). */\n  credentialStoreKey: string;\n  /** Parent domain for cross-subdomain session cookies (e.g. \".example.com\"); undefined → host-only cookie. */\n  cookieDomain?: string;\n  /** Mark session cookies Secure (set behind HTTPS / in production). */\n  secureCookies?: boolean;\n  /** Student portal origin — invite links for students, and the origin whose signups are invite-gated. */\n  studentPortalUrl: string;\n  /** Admin app origin — invite links for staff. */\n  adminAppUrl: string;\n  /** Transactional-outbox relay tuning. All optional — see OUTBOX_DEFAULTS. */\n  outbox?: OutboxConfig;\n  /** Log level for the process-wide logger (HTTP + domain + relay). Default \"info\". */\n  logging?: LoggingConfig;\n  /** Presigned URL lifetime for entitled download delivery, seconds. Mirrors\n   *  ServerConfig.deliveryExpirySeconds — createContainer threads it through. */\n  deliveryExpirySeconds: number;\n}\n\n/** Tuning for the transactional-outbox relay. Every field is optional; the\n *  container resolves against OUTBOX_DEFAULTS. */\nexport interface OutboxConfig {\n  /** Master switch for the same-process relay. Default true. */\n  enabled?: boolean;\n  /** Idle delay between polls. Default 1000. */\n  pollIntervalMs?: number;\n  /** Max rows fetched/dispatched per tick. Default 100. */\n  batchSize?: number;\n}\n\nexport const OUTBOX_DEFAULTS: PollingOutboxRelayConfig = {\n  enabled: true,\n  pollIntervalMs: 1000,\n  batchSize: 100,\n};\n\nexport function resolveOutboxConfig(config: OutboxConfig = {}): PollingOutboxRelayConfig {\n  const overrides = Object.fromEntries(\n    Object.entries(config).filter(([, value]) => value !== undefined),\n  );\n  return { ...OUTBOX_DEFAULTS, ...overrides };\n}\n\n/** Logging tuning. Optional; resolved against LOGGING_DEFAULTS. */\nexport interface LoggingConfig {\n  /** Minimum level emitted. Default \"info\". */\n  level?: LogLevel;\n}\n\nexport const LOGGING_DEFAULTS: Required<LoggingConfig> = { level: 'info' };\n\nexport function resolveLoggingConfig(config: LoggingConfig = {}): Required<LoggingConfig> {\n  return { level: config.level ?? LOGGING_DEFAULTS.level };\n}\n\nexport interface Container {\n  auth: BetterAuth;\n  // Org Provider\n  orgProvider: OrgAdmin;\n\n  // Domains\n  identity: IdentityServiceImpl;\n  organizations: OrganizationServiceImpl;\n  content: ContentServiceImpl;\n  entitlements: EntitlementsServiceImpl;\n  progress: ProgressServiceImpl;\n  discussion: DiscussionServiceImpl;\n  assets: AssetsServiceImpl;\n  integrations: IntegrationsServiceImpl;\n  automations: AutomationsServiceImpl;\n  /** Cross-cutting settings store. Not a context — a leaf every context may use;\n   *  inject `settings.for('<namespace>')` into a service, never the service itself. */\n  settings: SettingsService;\n  // Reporting read layer (composed cross-context reads; owns no domain rules).\n  reporting: {\n    students: StudentsReportServiceImpl;\n    dashboard: DashboardReportServiceImpl;\n    learn: LearnReportServiceImpl;\n  };\n  storage: ObjectStorage;\n  mailer: Mailer;\n  /** Shared secure credential store — encrypted at rest, org-scoped, decrypt at point of use. */\n  credentials: CredentialStore;\n  /** The outbox relay — constructed but NEVER started by the container; the\n   *  installation's entry point starts it after listen (gen-openapi must not\n   *  poll). buildServer stops it onClose. */\n  outboxRelay: OutboxRelay;\n  /** The automation engine — constructed but NEVER started by the container;\n   *  the installation's entry point starts it after listen (gen-openapi must\n   *  not run a worker). buildServer stops it onClose. */\n  automationEngine: AutomationEngine;\n  /** Root logger port — components receive children bound with { name }. */\n  logger: Logger;\n  /** The raw pino root; buildServer hands it to Fastify so HTTP shares the stream. */\n  loggerInstance: PinoInstance;\n  /** Request-scoped log correlation; the HTTP layer enters it per request. */\n  requestContext: RequestLogContext;\n  /** Identity's session-write port; the auth adapter fulfils it. */\n  sessions: SessionAdmin;\n}\n\nexport async function buildContainer(\n  config: Config,\n  options?: BuildContainerOptions,\n): Promise<Container> {\n  const { instance: loggerInstance, logger } = createRootLogger(\n    resolveLoggingConfig(config.logging).level,\n  );\n  // One child per domain — a context's service and repositories share it.\n\n  const contentLogger = logger.child({ name: 'content' });\n  const entitlementsLogger = logger.child({ name: 'entitlements' });\n  const progressLogger = logger.child({ name: 'progress' });\n  const discussionLogger = logger.child({ name: 'discussion' });\n  const assetsLogger = logger.child({ name: 'assets' });\n  const integrationsLogger = logger.child({ name: 'integrations' });\n  const automationsLogger = logger.child({ name: 'automations' });\n  const reportingLogger = logger.child({ name: 'reporting' });\n  const outboxLogger = logger.child({ name: 'outbox' });\n\n  // Outbound adapters\n  const db = createDb(config.databaseUrl);\n  const email = options?.adapters?.email ?? new EmailAdapter(logger.child({ name: 'email' }));\n  const storage: ObjectStorage =\n    options?.adapters?.storage ?? new StorageAdapter(logger.child({ name: 'storage' }));\n  const templates =\n    options?.adapters?.templates ?? new StubTemplateRenderer(logger.child({ name: 'email' }));\n  const automationEngine: AutomationEngine =\n    options?.adapters?.workflows ?? new InlineAutomationEngine();\n  const mailer = new Mailer(templates, email, {\n    ...(config.emailBranding ?? { brandName: 'Headless LMS', baseUrl: config.adminAppUrl }),\n    studentPortalUrl: config.studentPortalUrl,\n  });\n\n  /*\n   * Identity\n   */\n  const identityUoW = new DrizzleUnitOfWork(db, (tx) => ({\n    identity: new DrizzleIdentityRepository(tx, logger.child({ name: 'identity' })),\n    outbox: new DrizzleOutboxAppender(tx, logger.child({ name: 'identity' })),\n  }));\n  const identity = new IdentityServiceImpl({\n    repo: new DrizzleIdentityRepository(db, logger.child({ name: 'identity_repo' })),\n    logger: logger.child({ name: 'identity' }),\n    uow: identityUoW,\n    mailer,\n  });\n\n  /*\n   * Organization\n   */\n  const organizationsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    organizations: new DrizzleOrganizationsRepository(tx, logger.child({ name: 'org' })),\n    outbox: new DrizzleOutboxAppender(tx, logger.child({ name: 'org' })),\n  }));\n  const organizations = new OrganizationServiceImpl({\n    repo: new DrizzleOrganizationsRepository(db, logger.child({ name: 'org' })),\n    membersRepo: new DrizzleMembersRepository(db, logger.child({ name: 'org' })),\n    people: identity,\n    uow: organizationsUow,\n    logger: logger.child({ name: 'org' }),\n    mailer,\n    inviteUrls: { studentPortalUrl: config.studentPortalUrl, adminAppUrl: config.adminAppUrl },\n  });\n\n  /*\n   * Settings\n   */\n  const settings = new SettingsService(\n    new DrizzleSettingsRepository(db, logger.child({ name: 'settings' })),\n  );\n  // Content: reads on the root db; course writes + outbox append in one tx.\n  const contentUow = new DrizzleUnitOfWork(db, (tx) => ({\n    content: new DrizzleContentRepository(tx, contentLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const content = new ContentServiceImpl({\n    repo: new DrizzleContentRepository(db, contentLogger),\n    uow: contentUow,\n    settings,\n    logger: contentLogger,\n  });\n  // Entitlements: reads on the root db; writes + outbox append in one tx.\n  const entitlementsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    entitlements: new DrizzleEntitlementsRepository(tx, entitlementsLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const entitlements = new EntitlementsServiceImpl({\n    repo: new DrizzleEntitlementsRepository(db, entitlementsLogger),\n    uow: entitlementsUow,\n    logger: entitlementsLogger,\n  });\n  // Progress: report writes + outbox append in one tx; content supplies the\n  // structure and completion rules the service evaluates against.\n  const progressUow = new DrizzleUnitOfWork(db, (tx) => ({\n    progress: new DrizzleProgressRepository(tx, progressLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const progress = new ProgressServiceImpl({\n    repo: new DrizzleProgressRepository(db, progressLogger),\n    content,\n    uow: progressUow,\n    logger: progressLogger,\n  });\n\n  const discussion = new DiscussionServiceImpl({\n    repo: new DrizzleDiscussionRepository(db, discussionLogger),\n    access: entitlements,\n    content: content,\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      discussion: new DrizzleDiscussionRepository(tx, discussionLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    settings,\n    logger: discussionLogger,\n  });\n  const assets = new AssetsServiceImpl({\n    storage,\n    repo: new DrizzleAssetsRepository(db, assetsLogger),\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      assets: new DrizzleAssetsRepository(tx, assetsLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    logger: assetsLogger,\n  });\n\n  const reporting = {\n    students: new StudentsReportServiceImpl({\n      repo: new DrizzleStudentsRepository(db, reportingLogger),\n      logger: reportingLogger,\n    }),\n    dashboard: new DashboardReportServiceImpl({\n      repo: new DrizzleDashboardRepository(db, reportingLogger),\n      logger: reportingLogger,\n    }),\n    learn: new LearnReportServiceImpl({\n      reader: new DrizzleLearnRepository(db, reportingLogger),\n      content,\n      progress,\n      assets,\n      deliveryExpirySeconds: config.deliveryExpirySeconds,\n      logger: reportingLogger,\n    }),\n  };\n\n  const credentialStore = new DrizzleCredentialStore(\n    db,\n    config.credentialStoreKey,\n    integrationsLogger,\n  );\n  // The integrations this deployment supports: the installation's declared\n  // plugins folder (directory name = integration id), loaded at startup.\n  // Connect/configure reject undeclared ids and validate config with the\n  // integration's own schema. No folder → no integrations.\n  const integrationsRegistry = await loadIntegrations(options?.pluginsDir, integrationsLogger);\n  // Integrations: credential + connection writes + outbox append in one tx\n  // (a tx-bound credential store instance shares the scope's transaction).\n  const integrationsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    connections: new DrizzleConnectionsRepository(tx, integrationsLogger),\n    credentials: new DrizzleCredentialStore(tx, config.credentialStoreKey, integrationsLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const integrations = new IntegrationsServiceImpl({\n    registry: integrationsRegistry,\n    repo: new DrizzleConnectionsRepository(db, integrationsLogger),\n    uow: integrationsUow,\n    credentials: credentialStore,\n    logger: integrationsLogger,\n  });\n\n  // Automations: run writes + outbox append in one tx; the engine drives\n  // execution (register below), integrations supplies the loaded\n  // integrations' actions for `available`.\n  const automationsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    automations: new DrizzleAutomationsRepository(tx, automationsLogger),\n    runs: new DrizzleAutomationRunsRepository(tx, automationsLogger),\n    outbox: new DrizzleOutboxAppender(tx, automationsLogger),\n  }));\n  // Emails triggered by row-shaped events resolve their recipient and content\n  // details at send time — the event carries ids only.\n  const mailerLookups: MailerLookups = {\n    orgUserEmail: async (orgId, orgUserId) =>\n      (await reporting.students.get(orgId, orgUserId))?.email ?? null,\n    contentInfo: async (orgId, contentId) => {\n      const course = await content.getCourse(orgId, contentId);\n      if (course) {\n        return { id: course.id, title: course.title };\n      }\n      const download = await content.getDownload(orgId, contentId);\n      return download ? { id: download.id, title: download.title } : null;\n    },\n  };\n\n  const automations = new AutomationsServiceImpl({\n    repo: new DrizzleAutomationsRepository(db, automationsLogger),\n    runsRepo: new DrizzleAutomationRunsRepository(db, automationsLogger),\n    uow: automationsUow,\n    engine: automationEngine,\n    mailer,\n    lookups: mailerLookups,\n    integrations,\n    logger: automationsLogger,\n  });\n  automationEngine.register(automations);\n\n  const eventBus = new InMemoryEventBus();\n  registerNotificationSubscribers(eventBus, mailer, mailerLookups);\n  // handle() never throws — the EventBus fans out to every subscriber\n  // sequentially, and a rejection here would break sibling subscribers.\n  eventBus.subscribeAll((event) => automations.handle(event));\n  const outboxConfig = resolveOutboxConfig(config.outbox);\n  const outboxRelay = new PollingOutboxRelay(\n    new DrizzleOutboxStore(db, outboxLogger),\n    eventBus,\n    outboxConfig,\n    outboxLogger,\n  );\n\n  /*\n   * Auth Adapter\n   */\n  const auth = new BetterAuth({\n    db,\n    baseUrl: config.authBaseURL,\n    secret: config.authSecret,\n    trustedOrigins: config.trustedOrigins,\n    hooks: {\n      sendResetPassword: async (data) => {\n        await identity.sendPasswordReset({\n          email: data.user.email,\n          url: '',\n        });\n      },\n      sendMagicLink: async ({ email, url }) => {\n        await identity.sendMagicLink({\n          email,\n          url,\n        });\n      },\n      beforeUserCreate: async (user) => {\n        const { email, name } = user;\n        const [firstName, lastName] = name.split(' ');\n        // Better Auth has not minted an id yet — the id returned below becomes\n        // its account id. A person provisioned at invite time is linked instead of re-created.\n        const domainUser = await identity.linkOrCreateUser({\n          email,\n          ...(firstName !== undefined && { firstName }),\n          ...(lastName !== undefined && { lastName }),\n        });\n\n        return {\n          data: {\n            ...user,\n            id: domainUser.id,\n          },\n        };\n      },\n      beforeCreateSession: async (session) => {\n        const person = await identity.getUserByExternalId(session.userId);\n        if (!person) {\n          return;\n        }\n        const orgs = await organizations.getOrgUsersForUser(person.id);\n        if (orgs.length !== 1) {\n          return;\n        }\n        // TODO - fix, why default to the first?\n        const org = await organizations.getById(orgs[0]!.orgId);\n        if (!org) {\n          return;\n        }\n\n        return { data: { ...session, activeOrganizationId: org.id } };\n      },\n      /*\n       * We're making sure the domain org creates and using the same ID for better-auth org ID.\n       */\n      beforeCreateOrganization: async ({ organization: org, user: baUser }) => {\n        const domainOrg = await organizations.createOrganization({\n          ownerId: baUser.id,\n          ...org,\n          logo: org.logo ?? undefined,\n        });\n        return { data: { ...org, id: domainOrg.id } };\n      },\n      beforeUpdateOrganization: async ({ organization }) => {\n        await organizations.updateOrganization(organization.id, organization);\n      },\n      beforeDeleteOrganization: async ({ organization }) => {\n        await organizations.deleteOrganization(organization.id);\n      },\n      beforeAddMember: async ({ member }) => {\n        await organizations.addOrgUser({\n          orgId: member.organizationId,\n          userId: member.userId,\n          role: parseRole(member.role),\n        });\n      },\n      beforeRemoveMember: async ({ member }) => {\n        await organizations.removeOrgUser(member.organizationId, member.userId);\n      },\n    },\n    logger: logger.child({ name: 'auth' }),\n    cookieDomain: config.cookieDomain,\n    secureCookies: config.secureCookies,\n  });\n\n  return {\n    auth,\n    identity,\n    organizations,\n    // Better Auth owns org writes; the same instance fulfils the OrgAdmin port.\n    orgProvider: auth,\n    content,\n    entitlements,\n    progress,\n    discussion,\n    assets,\n    integrations,\n    automations,\n    settings,\n    reporting,\n    storage,\n    mailer,\n    credentials: credentialStore,\n    outboxRelay,\n    automationEngine,\n    logger,\n    loggerInstance,\n    requestContext: requestLogContext,\n    // Better Auth owns the session store; the same instance fulfils SessionAdmin.\n    sessions: auth,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA0HA,MAAa,kBAA4C;CACvD,SAAS;CACT,gBAAgB;CAChB,WAAW;AACb;AAEA,SAAgB,oBAAoB,SAAuB,CAAC,GAA6B;CACvF,MAAM,YAAY,OAAO,YACvB,OAAO,QAAQ,MAAM,CAAC,CAAC,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CAClE;CACA,OAAO;EAAE,GAAG;EAAiB,GAAG;CAAU;AAC5C;AAQA,MAAa,mBAA4C,EAAE,OAAO,OAAO;AAEzE,SAAgB,qBAAqB,SAAwB,CAAC,GAA4B;CACxF,OAAO,EAAE,OAAO,OAAO,SAAS,iBAAiB,MAAM;AACzD;AAgDA,eAAsB,eACpB,QACA,SACoB;CACpB,MAAM,EAAE,UAAU,gBAAgB,WAAW,iBAC3C,qBAAqB,OAAO,OAAO,CAAC,CAAC,KACvC;CAGA,MAAM,gBAAgB,OAAO,MAAM,EAAE,MAAM,UAAU,CAAC;CACtD,MAAM,qBAAqB,OAAO,MAAM,EAAE,MAAM,eAAe,CAAC;CAChE,MAAM,iBAAiB,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC;CACxD,MAAM,mBAAmB,OAAO,MAAM,EAAE,MAAM,aAAa,CAAC;CAC5D,MAAM,eAAe,OAAO,MAAM,EAAE,MAAM,SAAS,CAAC;CACpD,MAAM,qBAAqB,OAAO,MAAM,EAAE,MAAM,eAAe,CAAC;CAChE,MAAM,oBAAoB,OAAO,MAAM,EAAE,MAAM,cAAc,CAAC;CAC9D,MAAM,kBAAkB,OAAO,MAAM,EAAE,MAAM,YAAY,CAAC;CAC1D,MAAM,eAAe,OAAO,MAAM,EAAE,MAAM,SAAS,CAAC;CAGpD,MAAM,KAAK,SAAS,OAAO,WAAW;CACtC,MAAM,QAAQ,SAAS,UAAU,SAAS,IAAI,aAAa,OAAO,MAAM,EAAE,MAAM,QAAQ,CAAC,CAAC;CAC1F,MAAM,UACJ,SAAS,UAAU,WAAW,IAAI,eAAe,OAAO,MAAM,EAAE,MAAM,UAAU,CAAC,CAAC;CACpF,MAAM,YACJ,SAAS,UAAU,aAAa,IAAI,qBAAqB,OAAO,MAAM,EAAE,MAAM,QAAQ,CAAC,CAAC;CAC1F,MAAM,mBACJ,SAAS,UAAU,aAAa,IAAI,uBAAuB;CAC7D,MAAM,SAAS,IAAI,OAAO,WAAW,OAAO;EAC1C,GAAI,OAAO,iBAAiB;GAAE,WAAW;GAAgB,SAAS,OAAO;EAAY;EACrF,kBAAkB,OAAO;CAC3B,CAAC;CAKD,MAAM,cAAc,IAAI,kBAAkB,KAAK,QAAQ;EACrD,UAAU,IAAI,0BAA0B,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC,CAAC;EAC9E,QAAQ,IAAI,sBAAsB,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC,CAAC;CAC1E,EAAE;CACF,MAAM,WAAW,IAAI,oBAAoB;EACvC,MAAM,IAAI,0BAA0B,IAAI,OAAO,MAAM,EAAE,MAAM,gBAAgB,CAAC,CAAC;EAC/E,QAAQ,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC;EACzC,KAAK;EACL;CACF,CAAC;CAKD,MAAM,mBAAmB,IAAI,kBAAkB,KAAK,QAAQ;EAC1D,eAAe,IAAI,+BAA+B,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;EACnF,QAAQ,IAAI,sBAAsB,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;CACrE,EAAE;CACF,MAAM,gBAAgB,IAAI,wBAAwB;EAChD,MAAM,IAAI,+BAA+B,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;EAC1E,aAAa,IAAI,yBAAyB,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;EAC3E,QAAQ;EACR,KAAK;EACL,QAAQ,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC;EACpC;EACA,YAAY;GAAE,kBAAkB,OAAO;GAAkB,aAAa,OAAO;EAAY;CAC3F,CAAC;CAKD,MAAM,WAAW,IAAI,gBACnB,IAAI,0BAA0B,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC,CAAC,CACtE;CAEA,MAAM,aAAa,IAAI,kBAAkB,KAAK,QAAQ;EACpD,SAAS,IAAI,yBAAyB,IAAI,aAAa;EACvD,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,UAAU,IAAI,mBAAmB;EACrC,MAAM,IAAI,yBAAyB,IAAI,aAAa;EACpD,KAAK;EACL;EACA,QAAQ;CACV,CAAC;CAED,MAAM,kBAAkB,IAAI,kBAAkB,KAAK,QAAQ;EACzD,cAAc,IAAI,8BAA8B,IAAI,kBAAkB;EACtE,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,eAAe,IAAI,wBAAwB;EAC/C,MAAM,IAAI,8BAA8B,IAAI,kBAAkB;EAC9D,KAAK;EACL,QAAQ;CACV,CAAC;CAGD,MAAM,cAAc,IAAI,kBAAkB,KAAK,QAAQ;EACrD,UAAU,IAAI,0BAA0B,IAAI,cAAc;EAC1D,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,WAAW,IAAI,oBAAoB;EACvC,MAAM,IAAI,0BAA0B,IAAI,cAAc;EACtD;EACA,KAAK;EACL,QAAQ;CACV,CAAC;CAED,MAAM,aAAa,IAAI,sBAAsB;EAC3C,MAAM,IAAI,4BAA4B,IAAI,gBAAgB;EAC1D,QAAQ;EACC;EACT,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,YAAY,IAAI,4BAA4B,IAAI,gBAAgB;GAChE,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF;EACA,QAAQ;CACV,CAAC;CACD,MAAM,SAAS,IAAI,kBAAkB;EACnC;EACA,MAAM,IAAI,wBAAwB,IAAI,YAAY;EAClD,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,QAAQ,IAAI,wBAAwB,IAAI,YAAY;GACpD,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF,QAAQ;CACV,CAAC;CAED,MAAM,YAAY;EAChB,UAAU,IAAI,0BAA0B;GACtC,MAAM,IAAI,0BAA0B,IAAI,eAAe;GACvD,QAAQ;EACV,CAAC;EACD,WAAW,IAAI,2BAA2B;GACxC,MAAM,IAAI,2BAA2B,IAAI,eAAe;GACxD,QAAQ;EACV,CAAC;EACD,OAAO,IAAI,uBAAuB;GAChC,QAAQ,IAAI,uBAAuB,IAAI,eAAe;GACtD;GACA;GACA;GACA,uBAAuB,OAAO;GAC9B,QAAQ;EACV,CAAC;CACH;CAEA,MAAM,kBAAkB,IAAI,uBAC1B,IACA,OAAO,oBACP,kBACF;CAKA,MAAM,uBAAuB,MAAM,iBAAiB,SAAS,YAAY,kBAAkB;CAG3F,MAAM,kBAAkB,IAAI,kBAAkB,KAAK,QAAQ;EACzD,aAAa,IAAI,6BAA6B,IAAI,kBAAkB;EACpE,aAAa,IAAI,uBAAuB,IAAI,OAAO,oBAAoB,kBAAkB;EACzF,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,eAAe,IAAI,wBAAwB;EAC/C,UAAU;EACV,MAAM,IAAI,6BAA6B,IAAI,kBAAkB;EAC7D,KAAK;EACL,aAAa;EACb,QAAQ;CACV,CAAC;CAKD,MAAM,iBAAiB,IAAI,kBAAkB,KAAK,QAAQ;EACxD,aAAa,IAAI,6BAA6B,IAAI,iBAAiB;EACnE,MAAM,IAAI,gCAAgC,IAAI,iBAAiB;EAC/D,QAAQ,IAAI,sBAAsB,IAAI,iBAAiB;CACzD,EAAE;CAGF,MAAM,gBAA+B;EACnC,cAAc,OAAO,OAAO,eACzB,MAAM,UAAU,SAAS,IAAI,OAAO,SAAS,EAAA,EAAI,SAAS;EAC7D,aAAa,OAAO,OAAO,cAAc;GACvC,MAAM,SAAS,MAAM,QAAQ,UAAU,OAAO,SAAS;GACvD,IAAI,QACF,OAAO;IAAE,IAAI,OAAO;IAAI,OAAO,OAAO;GAAM;GAE9C,MAAM,WAAW,MAAM,QAAQ,YAAY,OAAO,SAAS;GAC3D,OAAO,WAAW;IAAE,IAAI,SAAS;IAAI,OAAO,SAAS;GAAM,IAAI;EACjE;CACF;CAEA,MAAM,cAAc,IAAI,uBAAuB;EAC7C,MAAM,IAAI,6BAA6B,IAAI,iBAAiB;EAC5D,UAAU,IAAI,gCAAgC,IAAI,iBAAiB;EACnE,KAAK;EACL,QAAQ;EACR;EACA,SAAS;EACT;EACA,QAAQ;CACV,CAAC;CACD,iBAAiB,SAAS,WAAW;CAErC,MAAM,WAAW,IAAI,iBAAiB;CACtC,gCAAgC,UAAU,QAAQ,aAAa;CAG/D,SAAS,cAAc,UAAU,YAAY,OAAO,KAAK,CAAC;CAC1D,MAAM,eAAe,oBAAoB,OAAO,MAAM;CACtD,MAAM,cAAc,IAAI,mBACtB,IAAI,mBAAmB,IAAI,YAAY,GACvC,UACA,cACA,YACF;CAKA,MAAM,OAAO,IAAI,WAAW;EAC1B;EACA,SAAS,OAAO;EAChB,QAAQ,OAAO;EACf,gBAAgB,OAAO;EACvB,OAAO;GACL,mBAAmB,OAAO,SAAS;IACjC,MAAM,SAAS,kBAAkB;KAC/B,OAAO,KAAK,KAAK;KACjB,KAAK;IACP,CAAC;GACH;GACA,eAAe,OAAO,EAAE,OAAO,UAAU;IACvC,MAAM,SAAS,cAAc;KAC3B;KACA;IACF,CAAC;GACH;GACA,kBAAkB,OAAO,SAAS;IAChC,MAAM,EAAE,OAAO,SAAS;IACxB,MAAM,CAAC,WAAW,YAAY,KAAK,MAAM,GAAG;IAG5C,MAAM,aAAa,MAAM,SAAS,iBAAiB;KACjD;KACA,GAAI,cAAc,KAAA,KAAa,EAAE,UAAU;KAC3C,GAAI,aAAa,KAAA,KAAa,EAAE,SAAS;IAC3C,CAAC;IAED,OAAO,EACL,MAAM;KACJ,GAAG;KACH,IAAI,WAAW;IACjB,EACF;GACF;GACA,qBAAqB,OAAO,YAAY;IACtC,MAAM,SAAS,MAAM,SAAS,oBAAoB,QAAQ,MAAM;IAChE,IAAI,CAAC,QACH;IAEF,MAAM,OAAO,MAAM,cAAc,mBAAmB,OAAO,EAAE;IAC7D,IAAI,KAAK,WAAW,GAClB;IAGF,MAAM,MAAM,MAAM,cAAc,QAAQ,KAAK,EAAE,CAAE,KAAK;IACtD,IAAI,CAAC,KACH;IAGF,OAAO,EAAE,MAAM;KAAE,GAAG;KAAS,sBAAsB,IAAI;IAAG,EAAE;GAC9D;GAIA,0BAA0B,OAAO,EAAE,cAAc,KAAK,MAAM,aAAa;IACvE,MAAM,YAAY,MAAM,cAAc,mBAAmB;KACvD,SAAS,OAAO;KAChB,GAAG;KACH,MAAM,IAAI,QAAQ,KAAA;IACpB,CAAC;IACD,OAAO,EAAE,MAAM;KAAE,GAAG;KAAK,IAAI,UAAU;IAAG,EAAE;GAC9C;GACA,0BAA0B,OAAO,EAAE,mBAAmB;IACpD,MAAM,cAAc,mBAAmB,aAAa,IAAI,YAAY;GACtE;GACA,0BAA0B,OAAO,EAAE,mBAAmB;IACpD,MAAM,cAAc,mBAAmB,aAAa,EAAE;GACxD;GACA,iBAAiB,OAAO,EAAE,aAAa;IACrC,MAAM,cAAc,WAAW;KAC7B,OAAO,OAAO;KACd,QAAQ,OAAO;KACf,MAAM,UAAU,OAAO,IAAI;IAC7B,CAAC;GACH;GACA,oBAAoB,OAAO,EAAE,aAAa;IACxC,MAAM,cAAc,cAAc,OAAO,gBAAgB,OAAO,MAAM;GACxE;EACF;EACA,QAAQ,OAAO,MAAM,EAAE,MAAM,OAAO,CAAC;EACrC,cAAc,OAAO;EACrB,eAAe,OAAO;CACxB,CAAC;CAED,OAAO;EACL;EACA;EACA;EAEA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA;EACA;EACA,gBAAgB;EAEhB,UAAU;CACZ;AACF"}
+{"version":3,"file":"container.js","names":[],"sources":["../../src/app/container.ts"],"sourcesContent":["// Wires adapters + services in dependency order. Starts nothing.\nimport {\n  createDb,\n  DrizzleAssetsRepository,\n  DrizzleAutomationRunsRepository,\n  DrizzleAutomationsRepository,\n  DrizzleConnectionsRepository,\n  DrizzleContentRepository,\n  DrizzleCredentialStore,\n  DrizzleCourseAnalyticsRepository,\n  DrizzleDashboardRepository,\n  DrizzleDiscussionRepository,\n  DrizzleEntitlementsRepository,\n  DrizzleIdentityRepository,\n  DrizzleLearnRepository,\n  DrizzleMembersRepository,\n  DrizzleOrganizationsRepository,\n  DrizzleOutboxAppender,\n  DrizzleOutboxStore,\n  DrizzleProgressRepository,\n  DrizzleSettingsRepository,\n  DrizzleStudentsRepository,\n  DrizzleUnitOfWork,\n} from '@headless-lms/adapter-db';\nimport { InMemoryEventBus } from '@headless-lms/adapter-defaults/events';\nimport {\n  PollingOutboxRelay,\n  type PollingOutboxRelayConfig,\n} from '@headless-lms/adapter-defaults/events/outbox-relay';\nimport { InlineAutomationEngine } from '@headless-lms/adapter-defaults/workflows';\nimport { FetchWebhookSender } from '@headless-lms/adapter-defaults/webhooks';\nimport { EmailAdapter, StubTemplateRenderer } from '@headless-lms/adapter-defaults/email';\nimport {\n  createRootLogger,\n  type LogLevel,\n  type PinoInstance,\n  requestLogContext,\n  type RequestLogContext,\n} from '@headless-lms/adapter-defaults/logging';\nimport { StorageAdapter } from '@headless-lms/adapter-defaults/storage';\nimport { BetterAuth } from '@headless-lms/adapter-auth';\n\nimport { ContentService } from '@headless-lms/core/content';\nimport { EntitlementsServiceImpl } from '@headless-lms/core/entitlements';\nimport { ProgressServiceImpl } from '@headless-lms/core/progress';\nimport { DiscussionServiceImpl } from '@headless-lms/core/discussion';\nimport { IdentityServiceImpl, type SessionAdmin } from '@headless-lms/core/identity';\nimport {\n  type OrgAdmin,\n  OrganizationServiceImpl,\n  parseRole,\n} from '@headless-lms/core/organizations';\nimport { AssetsServiceImpl } from '@headless-lms/core/assets';\nimport { IntegrationsServiceImpl } from '@headless-lms/core/integrations';\nimport { AutomationsServiceImpl } from '@headless-lms/core/automations';\nimport { loadIntegrations } from './integrations.js';\nimport { registerNotificationSubscribers } from './notifications.js';\nimport { StudentsReportServiceImpl } from '@headless-lms/core/reporting/students';\nimport { DashboardReportServiceImpl } from '@headless-lms/core/reporting/dashboard';\nimport { CoursesReportServiceImpl } from '@headless-lms/core/reporting/courses';\nimport { LearnReportServiceImpl } from '@headless-lms/core/reporting/learn';\nimport { Mailer, type MailerLookups } from '@headless-lms/core/shared/mailer';\nimport { SettingsService } from '@headless-lms/core/shared/settings';\n\nimport type {\n  CredentialStore,\n  EmailSender,\n  Logger,\n  ObjectStorage,\n  OutboxRelay,\n  TemplateContext,\n  TemplateRenderer,\n} from '@headless-lms/core/shared/ports';\nimport type { AutomationEngine, WebhookSender } from '@headless-lms/core/types';\n\n/** Installation-supplied ports; an absent slot falls back to a fail-loudly stub. */\nexport interface AdapterOverrides {\n  email?: EmailSender;\n  storage?: ObjectStorage;\n  /** Resolves email templates to rendered content. Absent → fail-loudly stub. */\n  templates?: TemplateRenderer;\n  /** Durable automation engine. Absent → InlineAutomationEngine (in-process, one attempt per action). */\n  workflows?: AutomationEngine;\n  /** Outbound HTTP for webhook deliveries. Absent → FetchWebhookSender (fetch, 10s timeout). */\n  webhooks?: WebhookSender;\n}\n\nexport interface BuildContainerOptions {\n  /** Installation's plugins folder, scanned by loadIntegrations. Absent → no integrations. */\n  pluginsDir?: string;\n  adapters?: AdapterOverrides;\n}\n\nexport interface Config {\n  databaseUrl: string;\n  authBaseURL: string;\n  authSecret: string;\n  trustedOrigins: string[];\n  /** Branding threaded into every email template. Default: brandName \"Headless LMS\", baseUrl = adminAppUrl.\n   *  (studentPortalUrl is composed in from the top-level config field.) */\n  emailBranding?: Omit<TemplateContext, 'studentPortalUrl'>;\n  /** base64-encoded 32-byte key for the credential store (CREDENTIAL_STORE_KEY). */\n  credentialStoreKey: string;\n  /** Parent domain for cross-subdomain session cookies (e.g. \".example.com\"); undefined → host-only cookie. */\n  cookieDomain?: string;\n  /** Mark session cookies Secure (set behind HTTPS / in production). */\n  secureCookies?: boolean;\n  /** Student portal origin — invite links for students, and the origin whose signups are invite-gated. */\n  studentPortalUrl: string;\n  /** Admin app origin — invite links for staff. */\n  adminAppUrl: string;\n  /** Transactional-outbox relay tuning. All optional — see OUTBOX_DEFAULTS. */\n  outbox?: OutboxConfig;\n  /** Log level for the process-wide logger (HTTP + domain + relay). Default \"info\". */\n  logging?: LoggingConfig;\n  /** Presigned URL lifetime for entitled download delivery, seconds. Mirrors\n   *  ServerConfig.deliveryExpirySeconds — createContainer threads it through. */\n  deliveryExpirySeconds: number;\n}\n\n/** Tuning for the transactional-outbox relay. Every field is optional; the\n *  container resolves against OUTBOX_DEFAULTS. */\nexport interface OutboxConfig {\n  /** Master switch for the same-process relay. Default true. */\n  enabled?: boolean;\n  /** Idle delay between polls. Default 1000. */\n  pollIntervalMs?: number;\n  /** Max rows fetched/dispatched per tick. Default 100. */\n  batchSize?: number;\n}\n\nexport const OUTBOX_DEFAULTS: PollingOutboxRelayConfig = {\n  enabled: true,\n  pollIntervalMs: 1000,\n  batchSize: 100,\n};\n\nexport function resolveOutboxConfig(config: OutboxConfig = {}): PollingOutboxRelayConfig {\n  const overrides = Object.fromEntries(\n    Object.entries(config).filter(([, value]) => value !== undefined),\n  );\n  return { ...OUTBOX_DEFAULTS, ...overrides };\n}\n\n/** Logging tuning. Optional; resolved against LOGGING_DEFAULTS. */\nexport interface LoggingConfig {\n  /** Minimum level emitted. Default \"info\". */\n  level?: LogLevel;\n}\n\nexport const LOGGING_DEFAULTS: Required<LoggingConfig> = { level: 'info' };\n\nexport function resolveLoggingConfig(config: LoggingConfig = {}): Required<LoggingConfig> {\n  return { level: config.level ?? LOGGING_DEFAULTS.level };\n}\n\nexport interface Container {\n  auth: BetterAuth;\n  // Org Provider\n  orgProvider: OrgAdmin;\n\n  // Domains\n  identity: IdentityServiceImpl;\n  organizations: OrganizationServiceImpl;\n  content: ContentService;\n  entitlements: EntitlementsServiceImpl;\n  progress: ProgressServiceImpl;\n  discussion: DiscussionServiceImpl;\n  assets: AssetsServiceImpl;\n  integrations: IntegrationsServiceImpl;\n  automations: AutomationsServiceImpl;\n  /** Cross-cutting settings store. Not a context — a leaf every context may use;\n   *  inject `settings.for('<namespace>')` into a service, never the service itself. */\n  settings: SettingsService;\n  // Reporting read layer (composed cross-context reads; owns no domain rules).\n  reporting: {\n    students: StudentsReportServiceImpl;\n    dashboard: DashboardReportServiceImpl;\n    courses: CoursesReportServiceImpl;\n    learn: LearnReportServiceImpl;\n  };\n  storage: ObjectStorage;\n  mailer: Mailer;\n  /** Shared secure credential store — encrypted at rest, org-scoped, decrypt at point of use. */\n  credentials: CredentialStore;\n  /** The outbox relay — constructed but NEVER started by the container; the\n   *  installation's entry point starts it after listen (gen-openapi must not\n   *  poll). buildServer stops it onClose. */\n  outboxRelay: OutboxRelay;\n  /** The automation engine — constructed but NEVER started by the container;\n   *  the installation's entry point starts it after listen (gen-openapi must\n   *  not run a worker). buildServer stops it onClose. */\n  automationEngine: AutomationEngine;\n  /** Root logger port — components receive children bound with { name }. */\n  logger: Logger;\n  /** The raw pino root; buildServer hands it to Fastify so HTTP shares the stream. */\n  loggerInstance: PinoInstance;\n  /** Request-scoped log correlation; the HTTP layer enters it per request. */\n  requestContext: RequestLogContext;\n  /** Identity's session-write port; the auth adapter fulfils it. */\n  sessions: SessionAdmin;\n}\n\nexport async function buildContainer(\n  config: Config,\n  options?: BuildContainerOptions,\n): Promise<Container> {\n  const { instance: loggerInstance, logger } = createRootLogger(\n    resolveLoggingConfig(config.logging).level,\n  );\n  // One child per domain — a context's service and repositories share it.\n\n  const contentLogger = logger.child({ name: 'content' });\n  const entitlementsLogger = logger.child({ name: 'entitlements' });\n  const progressLogger = logger.child({ name: 'progress' });\n  const discussionLogger = logger.child({ name: 'discussion' });\n  const assetsLogger = logger.child({ name: 'assets' });\n  const integrationsLogger = logger.child({ name: 'integrations' });\n  const automationsLogger = logger.child({ name: 'automations' });\n  const reportingLogger = logger.child({ name: 'reporting' });\n  const outboxLogger = logger.child({ name: 'outbox' });\n\n  // Outbound adapters\n  const db = createDb(config.databaseUrl);\n  const email = options?.adapters?.email ?? new EmailAdapter(logger.child({ name: 'email' }));\n  const storage: ObjectStorage =\n    options?.adapters?.storage ?? new StorageAdapter(logger.child({ name: 'storage' }));\n  const templates =\n    options?.adapters?.templates ?? new StubTemplateRenderer(logger.child({ name: 'email' }));\n  const automationEngine: AutomationEngine =\n    options?.adapters?.workflows ?? new InlineAutomationEngine();\n  const mailer = new Mailer(templates, email, {\n    ...(config.emailBranding ?? { brandName: 'Headless LMS', baseUrl: config.adminAppUrl }),\n    studentPortalUrl: config.studentPortalUrl,\n  });\n\n  /*\n   * Identity\n   */\n  const identityUoW = new DrizzleUnitOfWork(db, (tx) => ({\n    identity: new DrizzleIdentityRepository(tx, logger.child({ name: 'identity' })),\n    outbox: new DrizzleOutboxAppender(tx, logger.child({ name: 'identity' })),\n  }));\n  const identity = new IdentityServiceImpl({\n    repo: new DrizzleIdentityRepository(db, logger.child({ name: 'identity_repo' })),\n    logger: logger.child({ name: 'identity' }),\n    uow: identityUoW,\n    mailer,\n  });\n\n  /*\n   * Organization\n   */\n  const organizationsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    organizations: new DrizzleOrganizationsRepository(tx, logger.child({ name: 'org' })),\n    outbox: new DrizzleOutboxAppender(tx, logger.child({ name: 'org' })),\n  }));\n  const orgAdminRef: { current: OrgAdmin | undefined } = { current: undefined };\n  const organizations = new OrganizationServiceImpl({\n    repo: new DrizzleOrganizationsRepository(db, logger.child({ name: 'org' })),\n    membersRepo: new DrizzleMembersRepository(db, logger.child({ name: 'org' })),\n    people: identity,\n    uow: organizationsUow,\n    orgAdmin: () => {\n      if (!orgAdminRef.current) {\n        throw new Error('orgAdmin not initialised');\n      }\n      return orgAdminRef.current;\n    },\n    logger: logger.child({ name: 'org' }),\n    mailer,\n    inviteUrls: { studentPortalUrl: config.studentPortalUrl, adminAppUrl: config.adminAppUrl },\n  });\n\n  /*\n   * Settings\n   */\n  const settings = new SettingsService(\n    new DrizzleSettingsRepository(db, logger.child({ name: 'settings' })),\n  );\n  // Content: reads on the root db; course writes + outbox append in one tx.\n  const contentUow = new DrizzleUnitOfWork(db, (tx) => ({\n    content: new DrizzleContentRepository(tx, contentLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const content = new ContentService({\n    repo: new DrizzleContentRepository(db, contentLogger),\n    uow: contentUow,\n    logger: contentLogger,\n  });\n  // Entitlements: reads on the root db; writes + outbox append in one tx.\n  const entitlementsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    entitlements: new DrizzleEntitlementsRepository(tx, entitlementsLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const entitlements = new EntitlementsServiceImpl({\n    repo: new DrizzleEntitlementsRepository(db, entitlementsLogger),\n    uow: entitlementsUow,\n    logger: entitlementsLogger,\n  });\n  // Progress: report writes + outbox append in one tx; content supplies the\n  // structure and completion rules the service evaluates against.\n  const progressUow = new DrizzleUnitOfWork(db, (tx) => ({\n    progress: new DrizzleProgressRepository(tx, progressLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const progress = new ProgressServiceImpl({\n    repo: new DrizzleProgressRepository(db, progressLogger),\n    content,\n    uow: progressUow,\n    logger: progressLogger,\n  });\n\n  const discussion = new DiscussionServiceImpl({\n    repo: new DrizzleDiscussionRepository(db, discussionLogger),\n    access: entitlements,\n    content: content,\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      discussion: new DrizzleDiscussionRepository(tx, discussionLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    settings,\n    logger: discussionLogger,\n  });\n  const assets = new AssetsServiceImpl({\n    storage,\n    repo: new DrizzleAssetsRepository(db, assetsLogger),\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      assets: new DrizzleAssetsRepository(tx, assetsLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    logger: assetsLogger,\n  });\n\n  const reporting = {\n    students: new StudentsReportServiceImpl({\n      repo: new DrizzleStudentsRepository(db, reportingLogger),\n      logger: reportingLogger,\n    }),\n    dashboard: new DashboardReportServiceImpl({\n      repo: new DrizzleDashboardRepository(db, reportingLogger),\n      logger: reportingLogger,\n    }),\n    courses: new CoursesReportServiceImpl({\n      repo: new DrizzleCourseAnalyticsRepository(db, reportingLogger),\n      logger: reportingLogger,\n    }),\n    learn: new LearnReportServiceImpl({\n      reader: new DrizzleLearnRepository(db, reportingLogger),\n      content,\n      progress,\n      assets,\n      deliveryExpirySeconds: config.deliveryExpirySeconds,\n      logger: reportingLogger,\n    }),\n  };\n\n  const credentialStore = new DrizzleCredentialStore(\n    db,\n    config.credentialStoreKey,\n    integrationsLogger,\n  );\n  // The integrations this deployment supports: the installation's declared\n  // plugins folder (directory name = integration id), loaded at startup.\n  // Connect/configure reject undeclared ids and validate config with the\n  // integration's own schema. No folder → no integrations.\n  const integrationsRegistry = await loadIntegrations(options?.pluginsDir, integrationsLogger);\n  // Integrations: credential + connection writes + outbox append in one tx\n  // (a tx-bound credential store instance shares the scope's transaction).\n  const integrationsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    connections: new DrizzleConnectionsRepository(tx, integrationsLogger),\n    credentials: new DrizzleCredentialStore(tx, config.credentialStoreKey, integrationsLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const integrations = new IntegrationsServiceImpl({\n    registry: integrationsRegistry,\n    repo: new DrizzleConnectionsRepository(db, integrationsLogger),\n    uow: integrationsUow,\n    credentials: credentialStore,\n    logger: integrationsLogger,\n  });\n\n  // Automations: run writes + outbox append in one tx; the engine drives\n  // execution (register below), integrations supplies the loaded\n  // integrations' actions for `available`.\n  const automationsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    automations: new DrizzleAutomationsRepository(tx, automationsLogger),\n    runs: new DrizzleAutomationRunsRepository(tx, automationsLogger),\n    credentials: new DrizzleCredentialStore(tx, config.credentialStoreKey, automationsLogger),\n    outbox: new DrizzleOutboxAppender(tx, automationsLogger),\n  }));\n  // Emails triggered by row-shaped events resolve their recipient and content\n  // details at send time — the event carries ids only.\n  const mailerLookups: MailerLookups = {\n    orgUserEmail: async (orgId, orgUserId) =>\n      (await reporting.students.get(orgId, orgUserId))?.email ?? null,\n    contentInfo: async (orgId, contentId) => {\n      const course = await content.getCourse(orgId, contentId);\n      if (course) {\n        return { id: course.id, title: course.title, type: course.type };\n      }\n      const download = await content.getDownload(orgId, contentId);\n      return download ? { id: download.id, title: download.title, type: download.type } : null;\n    },\n  };\n\n  const automations = new AutomationsServiceImpl({\n    repo: new DrizzleAutomationsRepository(db, automationsLogger),\n    runsRepo: new DrizzleAutomationRunsRepository(db, automationsLogger),\n    uow: automationsUow,\n    engine: automationEngine,\n    mailer,\n    lookups: mailerLookups,\n    integrations,\n    credentials: credentialStore,\n    webhooks: options?.adapters?.webhooks ?? new FetchWebhookSender(),\n    logger: automationsLogger,\n  });\n  automationEngine.register(automations);\n\n  const eventBus = new InMemoryEventBus();\n  registerNotificationSubscribers(eventBus, mailer, mailerLookups);\n  // handle() never throws — the EventBus fans out to every subscriber\n  // sequentially, and a rejection here would break sibling subscribers.\n  eventBus.subscribeAll((event) => automations.handle(event));\n  const outboxConfig = resolveOutboxConfig(config.outbox);\n  const outboxRelay = new PollingOutboxRelay(\n    new DrizzleOutboxStore(db, outboxLogger),\n    eventBus,\n    outboxConfig,\n    outboxLogger,\n  );\n\n  /*\n   * Auth Adapter\n   */\n  const authLogger = logger.child({ name: 'auth' });\n  // Hook failures otherwise surface through Better Auth's route as an opaque\n  // 500 — log which hook died before rethrowing.\n  const authHook =\n    <A extends unknown[], R>(name: string, fn: (...args: A) => Promise<R>) =>\n    async (...args: A): Promise<R> => {\n      try {\n        return await fn(...args);\n      } catch (err) {\n        authLogger.error(`auth hook ${name} failed`, { err });\n        throw err;\n      }\n    };\n  const auth = new BetterAuth({\n    db,\n    baseUrl: config.authBaseURL,\n    secret: config.authSecret,\n    trustedOrigins: config.trustedOrigins,\n    hooks: {\n      sendResetPassword: async ({ user, url }) => {\n        await identity.sendPasswordReset({ email: user.email, url });\n      },\n      onPasswordReset: async ({ user }) => {\n        await identity.sendPasswordChanged({ email: user.email });\n      },\n      sendMagicLink: authHook('sendMagicLink', async ({ email, url }) => {\n        await identity.sendMagicLink({\n          email,\n          url,\n        });\n      }),\n      beforeUserCreate: authHook('beforeUserCreate', async (user) => {\n        const { email, name } = user;\n        const [firstName, lastName] = name.split(' ');\n        // Better Auth has not minted an id yet — the id returned below becomes\n        // its account id. A person provisioned at invite time is linked instead of re-created.\n        const domainUser = await identity.linkOrCreateUser({\n          email,\n          ...(firstName !== undefined && { firstName }),\n          ...(lastName !== undefined && { lastName }),\n        });\n\n        return {\n          data: {\n            ...user,\n            id: domainUser.id,\n          },\n        };\n      }),\n      beforeCreateSession: authHook('beforeCreateSession', async (session) => {\n        const person = await identity.getUserByExternalId(session.userId);\n        if (!person) {\n          return;\n        }\n        const orgs = await organizations.getOrgUsersForUser(person.id);\n        if (orgs.length !== 1) {\n          return;\n        }\n        // TODO - fix, why default to the first?\n        const org = await organizations.getById(orgs[0]!.orgId);\n        if (!org) {\n          return;\n        }\n\n        return { data: { ...session, activeOrganizationId: org.id } };\n      }),\n      /*\n       * We're making sure the domain org creates and using the same ID for better-auth org ID.\n       */\n      beforeCreateOrganization: authHook(\n        'beforeCreateOrganization',\n        async ({ organization: org, user: baUser }) => {\n          const domainOrg = await organizations.createOrganization({\n            ownerId: baUser.id,\n            ...org,\n            logo: org.logo ?? undefined,\n          });\n          return { data: { ...org, id: domainOrg.id } };\n        },\n      ),\n      beforeUpdateOrganization: authHook('beforeUpdateOrganization', async ({ organization }) => {\n        await organizations.updateOrganization(organization.id, organization);\n      }),\n      beforeDeleteOrganization: authHook('beforeDeleteOrganization', async ({ organization }) => {\n        await organizations.deleteOrganization(organization.id);\n      }),\n      beforeAddMember: authHook('beforeAddMember', async ({ member }) => {\n        await organizations.addOrgUser({\n          orgId: member.organizationId,\n          userId: member.userId,\n          role: parseRole(member.role),\n        });\n      }),\n      beforeUpdateMemberRole: authHook('beforeUpdateMemberRole', async ({ member, newRole }) => {\n        await organizations.updateOrgUser(member.organizationId, member.userId, {\n          role: parseRole(newRole),\n        });\n      }),\n      beforeRemoveMember: authHook('beforeRemoveMember', async ({ member }) => {\n        await organizations.removeOrgUser(member.organizationId, member.userId);\n      }),\n    },\n    logger: authLogger,\n    cookieDomain: config.cookieDomain,\n    secureCookies: config.secureCookies,\n  });\n  orgAdminRef.current = auth;\n\n  return {\n    auth,\n    identity,\n    organizations,\n    // Better Auth owns org writes; the same instance fulfils the OrgAdmin port.\n    orgProvider: auth,\n    content,\n    entitlements,\n    progress,\n    discussion,\n    assets,\n    integrations,\n    automations,\n    settings,\n    reporting,\n    storage,\n    mailer,\n    credentials: credentialStore,\n    outboxRelay,\n    automationEngine,\n    logger,\n    loggerInstance,\n    requestContext: requestLogContext,\n    // Better Auth owns the session store; the same instance fulfils SessionAdmin.\n    sessions: auth,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAmIA,MAAa,kBAA4C;CACvD,SAAS;CACT,gBAAgB;CAChB,WAAW;AACb;AAEA,SAAgB,oBAAoB,SAAuB,CAAC,GAA6B;CACvF,MAAM,YAAY,OAAO,YACvB,OAAO,QAAQ,MAAM,CAAC,CAAC,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CAClE;CACA,OAAO;EAAE,GAAG;EAAiB,GAAG;CAAU;AAC5C;AAQA,MAAa,mBAA4C,EAAE,OAAO,OAAO;AAEzE,SAAgB,qBAAqB,SAAwB,CAAC,GAA4B;CACxF,OAAO,EAAE,OAAO,OAAO,SAAS,iBAAiB,MAAM;AACzD;AAiDA,eAAsB,eACpB,QACA,SACoB;CACpB,MAAM,EAAE,UAAU,gBAAgB,WAAW,iBAC3C,qBAAqB,OAAO,OAAO,CAAC,CAAC,KACvC;CAGA,MAAM,gBAAgB,OAAO,MAAM,EAAE,MAAM,UAAU,CAAC;CACtD,MAAM,qBAAqB,OAAO,MAAM,EAAE,MAAM,eAAe,CAAC;CAChE,MAAM,iBAAiB,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC;CACxD,MAAM,mBAAmB,OAAO,MAAM,EAAE,MAAM,aAAa,CAAC;CAC5D,MAAM,eAAe,OAAO,MAAM,EAAE,MAAM,SAAS,CAAC;CACpD,MAAM,qBAAqB,OAAO,MAAM,EAAE,MAAM,eAAe,CAAC;CAChE,MAAM,oBAAoB,OAAO,MAAM,EAAE,MAAM,cAAc,CAAC;CAC9D,MAAM,kBAAkB,OAAO,MAAM,EAAE,MAAM,YAAY,CAAC;CAC1D,MAAM,eAAe,OAAO,MAAM,EAAE,MAAM,SAAS,CAAC;CAGpD,MAAM,KAAK,SAAS,OAAO,WAAW;CACtC,MAAM,QAAQ,SAAS,UAAU,SAAS,IAAI,aAAa,OAAO,MAAM,EAAE,MAAM,QAAQ,CAAC,CAAC;CAC1F,MAAM,UACJ,SAAS,UAAU,WAAW,IAAI,eAAe,OAAO,MAAM,EAAE,MAAM,UAAU,CAAC,CAAC;CACpF,MAAM,YACJ,SAAS,UAAU,aAAa,IAAI,qBAAqB,OAAO,MAAM,EAAE,MAAM,QAAQ,CAAC,CAAC;CAC1F,MAAM,mBACJ,SAAS,UAAU,aAAa,IAAI,uBAAuB;CAC7D,MAAM,SAAS,IAAI,OAAO,WAAW,OAAO;EAC1C,GAAI,OAAO,iBAAiB;GAAE,WAAW;GAAgB,SAAS,OAAO;EAAY;EACrF,kBAAkB,OAAO;CAC3B,CAAC;CAKD,MAAM,cAAc,IAAI,kBAAkB,KAAK,QAAQ;EACrD,UAAU,IAAI,0BAA0B,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC,CAAC;EAC9E,QAAQ,IAAI,sBAAsB,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC,CAAC;CAC1E,EAAE;CACF,MAAM,WAAW,IAAI,oBAAoB;EACvC,MAAM,IAAI,0BAA0B,IAAI,OAAO,MAAM,EAAE,MAAM,gBAAgB,CAAC,CAAC;EAC/E,QAAQ,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC;EACzC,KAAK;EACL;CACF,CAAC;CAKD,MAAM,mBAAmB,IAAI,kBAAkB,KAAK,QAAQ;EAC1D,eAAe,IAAI,+BAA+B,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;EACnF,QAAQ,IAAI,sBAAsB,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;CACrE,EAAE;CACF,MAAM,cAAiD,EAAE,SAAS,KAAA,EAAU;CAC5E,MAAM,gBAAgB,IAAI,wBAAwB;EAChD,MAAM,IAAI,+BAA+B,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;EAC1E,aAAa,IAAI,yBAAyB,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;EAC3E,QAAQ;EACR,KAAK;EACL,gBAAgB;GACd,IAAI,CAAC,YAAY,SACf,MAAM,IAAI,MAAM,0BAA0B;GAE5C,OAAO,YAAY;EACrB;EACA,QAAQ,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC;EACpC;EACA,YAAY;GAAE,kBAAkB,OAAO;GAAkB,aAAa,OAAO;EAAY;CAC3F,CAAC;CAKD,MAAM,WAAW,IAAI,gBACnB,IAAI,0BAA0B,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC,CAAC,CACtE;CAEA,MAAM,aAAa,IAAI,kBAAkB,KAAK,QAAQ;EACpD,SAAS,IAAI,yBAAyB,IAAI,aAAa;EACvD,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,UAAU,IAAI,eAAe;EACjC,MAAM,IAAI,yBAAyB,IAAI,aAAa;EACpD,KAAK;EACL,QAAQ;CACV,CAAC;CAED,MAAM,kBAAkB,IAAI,kBAAkB,KAAK,QAAQ;EACzD,cAAc,IAAI,8BAA8B,IAAI,kBAAkB;EACtE,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,eAAe,IAAI,wBAAwB;EAC/C,MAAM,IAAI,8BAA8B,IAAI,kBAAkB;EAC9D,KAAK;EACL,QAAQ;CACV,CAAC;CAGD,MAAM,cAAc,IAAI,kBAAkB,KAAK,QAAQ;EACrD,UAAU,IAAI,0BAA0B,IAAI,cAAc;EAC1D,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,WAAW,IAAI,oBAAoB;EACvC,MAAM,IAAI,0BAA0B,IAAI,cAAc;EACtD;EACA,KAAK;EACL,QAAQ;CACV,CAAC;CAED,MAAM,aAAa,IAAI,sBAAsB;EAC3C,MAAM,IAAI,4BAA4B,IAAI,gBAAgB;EAC1D,QAAQ;EACC;EACT,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,YAAY,IAAI,4BAA4B,IAAI,gBAAgB;GAChE,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF;EACA,QAAQ;CACV,CAAC;CACD,MAAM,SAAS,IAAI,kBAAkB;EACnC;EACA,MAAM,IAAI,wBAAwB,IAAI,YAAY;EAClD,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,QAAQ,IAAI,wBAAwB,IAAI,YAAY;GACpD,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF,QAAQ;CACV,CAAC;CAED,MAAM,YAAY;EAChB,UAAU,IAAI,0BAA0B;GACtC,MAAM,IAAI,0BAA0B,IAAI,eAAe;GACvD,QAAQ;EACV,CAAC;EACD,WAAW,IAAI,2BAA2B;GACxC,MAAM,IAAI,2BAA2B,IAAI,eAAe;GACxD,QAAQ;EACV,CAAC;EACD,SAAS,IAAI,yBAAyB;GACpC,MAAM,IAAI,iCAAiC,IAAI,eAAe;GAC9D,QAAQ;EACV,CAAC;EACD,OAAO,IAAI,uBAAuB;GAChC,QAAQ,IAAI,uBAAuB,IAAI,eAAe;GACtD;GACA;GACA;GACA,uBAAuB,OAAO;GAC9B,QAAQ;EACV,CAAC;CACH;CAEA,MAAM,kBAAkB,IAAI,uBAC1B,IACA,OAAO,oBACP,kBACF;CAKA,MAAM,uBAAuB,MAAM,iBAAiB,SAAS,YAAY,kBAAkB;CAG3F,MAAM,kBAAkB,IAAI,kBAAkB,KAAK,QAAQ;EACzD,aAAa,IAAI,6BAA6B,IAAI,kBAAkB;EACpE,aAAa,IAAI,uBAAuB,IAAI,OAAO,oBAAoB,kBAAkB;EACzF,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,eAAe,IAAI,wBAAwB;EAC/C,UAAU;EACV,MAAM,IAAI,6BAA6B,IAAI,kBAAkB;EAC7D,KAAK;EACL,aAAa;EACb,QAAQ;CACV,CAAC;CAKD,MAAM,iBAAiB,IAAI,kBAAkB,KAAK,QAAQ;EACxD,aAAa,IAAI,6BAA6B,IAAI,iBAAiB;EACnE,MAAM,IAAI,gCAAgC,IAAI,iBAAiB;EAC/D,aAAa,IAAI,uBAAuB,IAAI,OAAO,oBAAoB,iBAAiB;EACxF,QAAQ,IAAI,sBAAsB,IAAI,iBAAiB;CACzD,EAAE;CAGF,MAAM,gBAA+B;EACnC,cAAc,OAAO,OAAO,eACzB,MAAM,UAAU,SAAS,IAAI,OAAO,SAAS,EAAA,EAAI,SAAS;EAC7D,aAAa,OAAO,OAAO,cAAc;GACvC,MAAM,SAAS,MAAM,QAAQ,UAAU,OAAO,SAAS;GACvD,IAAI,QACF,OAAO;IAAE,IAAI,OAAO;IAAI,OAAO,OAAO;IAAO,MAAM,OAAO;GAAK;GAEjE,MAAM,WAAW,MAAM,QAAQ,YAAY,OAAO,SAAS;GAC3D,OAAO,WAAW;IAAE,IAAI,SAAS;IAAI,OAAO,SAAS;IAAO,MAAM,SAAS;GAAK,IAAI;EACtF;CACF;CAEA,MAAM,cAAc,IAAI,uBAAuB;EAC7C,MAAM,IAAI,6BAA6B,IAAI,iBAAiB;EAC5D,UAAU,IAAI,gCAAgC,IAAI,iBAAiB;EACnE,KAAK;EACL,QAAQ;EACR;EACA,SAAS;EACT;EACA,aAAa;EACb,UAAU,SAAS,UAAU,YAAY,IAAI,mBAAmB;EAChE,QAAQ;CACV,CAAC;CACD,iBAAiB,SAAS,WAAW;CAErC,MAAM,WAAW,IAAI,iBAAiB;CACtC,gCAAgC,UAAU,QAAQ,aAAa;CAG/D,SAAS,cAAc,UAAU,YAAY,OAAO,KAAK,CAAC;CAC1D,MAAM,eAAe,oBAAoB,OAAO,MAAM;CACtD,MAAM,cAAc,IAAI,mBACtB,IAAI,mBAAmB,IAAI,YAAY,GACvC,UACA,cACA,YACF;CAKA,MAAM,aAAa,OAAO,MAAM,EAAE,MAAM,OAAO,CAAC;CAGhD,MAAM,YACqB,MAAc,OACvC,OAAO,GAAG,SAAwB;EAChC,IAAI;GACF,OAAO,MAAM,GAAG,GAAG,IAAI;EACzB,SAAS,KAAK;GACZ,WAAW,MAAM,aAAa,KAAK,UAAU,EAAE,IAAI,CAAC;GACpD,MAAM;EACR;CACF;CACF,MAAM,OAAO,IAAI,WAAW;EAC1B;EACA,SAAS,OAAO;EAChB,QAAQ,OAAO;EACf,gBAAgB,OAAO;EACvB,OAAO;GACL,mBAAmB,OAAO,EAAE,MAAM,UAAU;IAC1C,MAAM,SAAS,kBAAkB;KAAE,OAAO,KAAK;KAAO;IAAI,CAAC;GAC7D;GACA,iBAAiB,OAAO,EAAE,WAAW;IACnC,MAAM,SAAS,oBAAoB,EAAE,OAAO,KAAK,MAAM,CAAC;GAC1D;GACA,eAAe,SAAS,iBAAiB,OAAO,EAAE,OAAO,UAAU;IACjE,MAAM,SAAS,cAAc;KAC3B;KACA;IACF,CAAC;GACH,CAAC;GACD,kBAAkB,SAAS,oBAAoB,OAAO,SAAS;IAC7D,MAAM,EAAE,OAAO,SAAS;IACxB,MAAM,CAAC,WAAW,YAAY,KAAK,MAAM,GAAG;IAG5C,MAAM,aAAa,MAAM,SAAS,iBAAiB;KACjD;KACA,GAAI,cAAc,KAAA,KAAa,EAAE,UAAU;KAC3C,GAAI,aAAa,KAAA,KAAa,EAAE,SAAS;IAC3C,CAAC;IAED,OAAO,EACL,MAAM;KACJ,GAAG;KACH,IAAI,WAAW;IACjB,EACF;GACF,CAAC;GACD,qBAAqB,SAAS,uBAAuB,OAAO,YAAY;IACtE,MAAM,SAAS,MAAM,SAAS,oBAAoB,QAAQ,MAAM;IAChE,IAAI,CAAC,QACH;IAEF,MAAM,OAAO,MAAM,cAAc,mBAAmB,OAAO,EAAE;IAC7D,IAAI,KAAK,WAAW,GAClB;IAGF,MAAM,MAAM,MAAM,cAAc,QAAQ,KAAK,EAAE,CAAE,KAAK;IACtD,IAAI,CAAC,KACH;IAGF,OAAO,EAAE,MAAM;KAAE,GAAG;KAAS,sBAAsB,IAAI;IAAG,EAAE;GAC9D,CAAC;GAID,0BAA0B,SACxB,4BACA,OAAO,EAAE,cAAc,KAAK,MAAM,aAAa;IAC7C,MAAM,YAAY,MAAM,cAAc,mBAAmB;KACvD,SAAS,OAAO;KAChB,GAAG;KACH,MAAM,IAAI,QAAQ,KAAA;IACpB,CAAC;IACD,OAAO,EAAE,MAAM;KAAE,GAAG;KAAK,IAAI,UAAU;IAAG,EAAE;GAC9C,CACF;GACA,0BAA0B,SAAS,4BAA4B,OAAO,EAAE,mBAAmB;IACzF,MAAM,cAAc,mBAAmB,aAAa,IAAI,YAAY;GACtE,CAAC;GACD,0BAA0B,SAAS,4BAA4B,OAAO,EAAE,mBAAmB;IACzF,MAAM,cAAc,mBAAmB,aAAa,EAAE;GACxD,CAAC;GACD,iBAAiB,SAAS,mBAAmB,OAAO,EAAE,aAAa;IACjE,MAAM,cAAc,WAAW;KAC7B,OAAO,OAAO;KACd,QAAQ,OAAO;KACf,MAAM,UAAU,OAAO,IAAI;IAC7B,CAAC;GACH,CAAC;GACD,wBAAwB,SAAS,0BAA0B,OAAO,EAAE,QAAQ,cAAc;IACxF,MAAM,cAAc,cAAc,OAAO,gBAAgB,OAAO,QAAQ,EACtE,MAAM,UAAU,OAAO,EACzB,CAAC;GACH,CAAC;GACD,oBAAoB,SAAS,sBAAsB,OAAO,EAAE,aAAa;IACvE,MAAM,cAAc,cAAc,OAAO,gBAAgB,OAAO,MAAM;GACxE,CAAC;EACH;EACA,QAAQ;EACR,cAAc,OAAO;EACrB,eAAe,OAAO;CACxB,CAAC;CACD,YAAY,UAAU;CAEtB,OAAO;EACL;EACA;EACA;EAEA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA;EACA;EACA,gBAAgB;EAEhB,UAAU;CACZ;AACF"}

package/dist/app/notifications.js

@@ -3,15 +3,18 @@ import { entitlementEvents } from "@headless-lms/core/entitlements";
 function registerNotificationSubscribers(bus, mailer, lookups) {
 	bus.subscribe(entitlementEvents.entitlementCreated, async (event) => {
 		const { orgUserId, contentId } = event.data;
+		if (!contentId) return;
 		const [to, content] = await Promise.all([lookups.orgUserEmail(event.orgId, orgUserId), lookups.contentInfo(event.orgId, contentId)]);
 		if (!to || !content) throw new Error(`entitlement notification lookups failed: ${event.data.id}`);
 		await mailer.send(to, "accessGranted", {
 			contentTitle: content.title,
-			contentId: content.id
+			contentId: content.id,
+			contentType: content.type
 		});
 	});
 	bus.subscribe(entitlementEvents.entitlementDeleted, async (event) => {
 		const { orgUserId, contentId } = event.data;
+		if (!contentId) return;
 		const [to, content] = await Promise.all([lookups.orgUserEmail(event.orgId, orgUserId), lookups.contentInfo(event.orgId, contentId)]);
 		if (!to || !content) throw new Error(`entitlement notification lookups failed: ${event.data.id}`);
 		await mailer.send(to, "accessRevoked", { contentTitle: content.title });

package/dist/app/notifications.js.map

@@ -1 +1 @@
-{"version":3,"file":"notifications.js","names":[],"sources":["../../src/app/notifications.ts"],"sourcesContent":["// Email side-effects of domain events, subscribed on the EventBus. Events\n// reach the bus via the outbox relay at-least-once: a mailer failure throws\n// through publish, and the relay retries with backoff — no email is silently\n// dropped.\nimport type { EventBus } from '@headless-lms/core/shared/ports';\nimport type { Mailer, MailerLookups } from '@headless-lms/core/shared/mailer';\nimport { entitlementEvents } from '@headless-lms/core/entitlements';\n\nexport function registerNotificationSubscribers(\n  bus: EventBus,\n  mailer: Pick<Mailer, 'send'>,\n  lookups: MailerLookups,\n): void {\n  bus.subscribe(entitlementEvents.entitlementCreated, async (event) => {\n    const { orgUserId, contentId } = event.data;\n    const [to, content] = await Promise.all([\n      lookups.orgUserEmail(event.orgId, orgUserId),\n      lookups.contentInfo(event.orgId, contentId),\n    ]);\n    if (!to || !content) {\n      throw new Error(`entitlement notification lookups failed: ${event.data.id}`);\n    }\n    await mailer.send(to, 'accessGranted', {\n      contentTitle: content.title,\n      contentId: content.id,\n    });\n  });\n\n  bus.subscribe(entitlementEvents.entitlementDeleted, async (event) => {\n    const { orgUserId, contentId } = event.data;\n    const [to, content] = await Promise.all([\n      lookups.orgUserEmail(event.orgId, orgUserId),\n      lookups.contentInfo(event.orgId, contentId),\n    ]);\n    if (!to || !content) {\n      throw new Error(`entitlement notification lookups failed: ${event.data.id}`);\n    }\n    await mailer.send(to, 'accessRevoked', {\n      contentTitle: content.title,\n    });\n  });\n}\n"],"mappings":";;AAQA,SAAgB,gCACd,KACA,QACA,SACM;CACN,IAAI,UAAU,kBAAkB,oBAAoB,OAAO,UAAU;EACnE,MAAM,EAAE,WAAW,cAAc,MAAM;EACvC,MAAM,CAAC,IAAI,WAAW,MAAM,QAAQ,IAAI,CACtC,QAAQ,aAAa,MAAM,OAAO,SAAS,GAC3C,QAAQ,YAAY,MAAM,OAAO,SAAS,CAC5C,CAAC;EACD,IAAI,CAAC,MAAM,CAAC,SACV,MAAM,IAAI,MAAM,4CAA4C,MAAM,KAAK,IAAI;EAE7E,MAAM,OAAO,KAAK,IAAI,iBAAiB;GACrC,cAAc,QAAQ;GACtB,WAAW,QAAQ;EACrB,CAAC;CACH,CAAC;CAED,IAAI,UAAU,kBAAkB,oBAAoB,OAAO,UAAU;EACnE,MAAM,EAAE,WAAW,cAAc,MAAM;EACvC,MAAM,CAAC,IAAI,WAAW,MAAM,QAAQ,IAAI,CACtC,QAAQ,aAAa,MAAM,OAAO,SAAS,GAC3C,QAAQ,YAAY,MAAM,OAAO,SAAS,CAC5C,CAAC;EACD,IAAI,CAAC,MAAM,CAAC,SACV,MAAM,IAAI,MAAM,4CAA4C,MAAM,KAAK,IAAI;EAE7E,MAAM,OAAO,KAAK,IAAI,iBAAiB,EACrC,cAAc,QAAQ,MACxB,CAAC;CACH,CAAC;AACH"}
+{"version":3,"file":"notifications.js","names":[],"sources":["../../src/app/notifications.ts"],"sourcesContent":["// Email side-effects of domain events, subscribed on the EventBus. Events\n// reach the bus via the outbox relay at-least-once: a mailer failure throws\n// through publish, and the relay retries with backoff — no email is silently\n// dropped.\nimport type { EventBus } from '@headless-lms/core/shared/ports';\nimport type { Mailer, MailerLookups } from '@headless-lms/core/shared/mailer';\nimport { entitlementEvents } from '@headless-lms/core/entitlements';\n\nexport function registerNotificationSubscribers(\n  bus: EventBus,\n  mailer: Pick<Mailer, 'send'>,\n  lookups: MailerLookups,\n): void {\n  bus.subscribe(entitlementEvents.entitlementCreated, async (event) => {\n    const { orgUserId, contentId } = event.data;\n    // Bundle grants carry no content id — these emails are per content item.\n    if (!contentId) {\n      return;\n    }\n    const [to, content] = await Promise.all([\n      lookups.orgUserEmail(event.orgId, orgUserId),\n      lookups.contentInfo(event.orgId, contentId),\n    ]);\n    if (!to || !content) {\n      throw new Error(`entitlement notification lookups failed: ${event.data.id}`);\n    }\n    await mailer.send(to, 'accessGranted', {\n      contentTitle: content.title,\n      contentId: content.id,\n      contentType: content.type,\n    });\n  });\n\n  bus.subscribe(entitlementEvents.entitlementDeleted, async (event) => {\n    const { orgUserId, contentId } = event.data;\n    // Bundle grants carry no content id — these emails are per content item.\n    if (!contentId) {\n      return;\n    }\n    const [to, content] = await Promise.all([\n      lookups.orgUserEmail(event.orgId, orgUserId),\n      lookups.contentInfo(event.orgId, contentId),\n    ]);\n    if (!to || !content) {\n      throw new Error(`entitlement notification lookups failed: ${event.data.id}`);\n    }\n    await mailer.send(to, 'accessRevoked', {\n      contentTitle: content.title,\n    });\n  });\n}\n"],"mappings":";;AAQA,SAAgB,gCACd,KACA,QACA,SACM;CACN,IAAI,UAAU,kBAAkB,oBAAoB,OAAO,UAAU;EACnE,MAAM,EAAE,WAAW,cAAc,MAAM;EAEvC,IAAI,CAAC,WACH;EAEF,MAAM,CAAC,IAAI,WAAW,MAAM,QAAQ,IAAI,CACtC,QAAQ,aAAa,MAAM,OAAO,SAAS,GAC3C,QAAQ,YAAY,MAAM,OAAO,SAAS,CAC5C,CAAC;EACD,IAAI,CAAC,MAAM,CAAC,SACV,MAAM,IAAI,MAAM,4CAA4C,MAAM,KAAK,IAAI;EAE7E,MAAM,OAAO,KAAK,IAAI,iBAAiB;GACrC,cAAc,QAAQ;GACtB,WAAW,QAAQ;GACnB,aAAa,QAAQ;EACvB,CAAC;CACH,CAAC;CAED,IAAI,UAAU,kBAAkB,oBAAoB,OAAO,UAAU;EACnE,MAAM,EAAE,WAAW,cAAc,MAAM;EAEvC,IAAI,CAAC,WACH;EAEF,MAAM,CAAC,IAAI,WAAW,MAAM,QAAQ,IAAI,CACtC,QAAQ,aAAa,MAAM,OAAO,SAAS,GAC3C,QAAQ,YAAY,MAAM,OAAO,SAAS,CAC5C,CAAC;EACD,IAAI,CAAC,MAAM,CAAC,SACV,MAAM,IAAI,MAAM,4CAA4C,MAAM,KAAK,IAAI;EAE7E,MAAM,OAAO,KAAK,IAAI,iBAAiB,EACrC,cAAc,QAAQ,MACxB,CAAC;CACH,CAAC;AACH"}

package/dist/http/plugins/error-handler.d.ts

@@ -1,6 +1,6 @@
 import { FastifyReply, FastifyRequest } from "fastify";
 //#region src/http/plugins/error-handler.d.ts
-declare function errorHandler(error: unknown, _request: FastifyRequest, reply: FastifyReply): FastifyReply<import("fastify").RouteGenericInterface, import("fastify").RawServerDefault, import("http").IncomingMessage, import("http").ServerResponse<import("http").IncomingMessage>, unknown, import("fastify").FastifySchema, import("fastify").FastifyTypeProviderDefault, unknown>;
+declare function errorHandler(error: unknown, request: FastifyRequest, reply: FastifyReply): FastifyReply<import("fastify").RouteGenericInterface, import("fastify").RawServerDefault, import("http").IncomingMessage, import("http").ServerResponse<import("http").IncomingMessage>, unknown, import("fastify").FastifySchema, import("fastify").FastifyTypeProviderDefault, unknown>;
 //#endregion
 export { errorHandler };
 //# sourceMappingURL=error-handler.d.ts.map

package/dist/http/plugins/error-handler.js

@@ -2,10 +2,10 @@ import { UnauthorizedError } from "./auth.js";
 import { NoActiveOrgError } from "../scope.js";
 import { OrganizationRuleError } from "@headless-lms/core/organizations";
 import { ActionInvocationError, AlreadyConnectedError, InvalidConfigError, UnknownIntegrationError } from "@headless-lms/core/integrations";
-import { InvalidTriggerError } from "@headless-lms/core/automations";
+import { AutomationKindMismatchError, InvalidTriggerError, ReservedActionError } from "@headless-lms/core/automations";
 import { ConflictError, ForbiddenError, NotFoundError } from "@headless-lms/core/shared/errors";
 //#region src/http/plugins/error-handler.ts
-function errorHandler(error, _request, reply) {
+function errorHandler(error, request, reply) {
 	if (error instanceof NotFoundError) return reply.status(404).send({
 		error: "not_found",
 		message: error.message
@@ -42,6 +42,14 @@ function errorHandler(error, _request, reply) {
 		error: "invalid_trigger",
 		message: error.message
 	});
+	if (error instanceof ReservedActionError) return reply.status(400).send({
+		error: "reserved_action",
+		message: error.message
+	});
+	if (error instanceof AutomationKindMismatchError) return reply.status(409).send({
+		error: "kind_mismatch",
+		message: error.message
+	});
 	if (error instanceof NoActiveOrgError) return reply.status(403).send({
 		error: "forbidden",
 		message: error.message
@@ -55,8 +63,11 @@ function errorHandler(error, _request, reply) {
 		error: err.code ?? "bad_request",
 		message: err.message ?? "Bad request"
 	});
-	_request.log.error(error);
-	return reply.status(500).send({ error: "internal_error" });
+	request.log.error({ err: error }, `unhandled error in ${request.method} ${request.url}`);
+	return reply.status(500).send({
+		error: "internal_error",
+		requestId: request.id
+	});
 }
 //#endregion
 export { errorHandler };

package/dist/http/plugins/error-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-handler.js","names":[],"sources":["../../../src/http/plugins/error-handler.ts"],"sourcesContent":["import { ConflictError, ForbiddenError, NotFoundError } from '@headless-lms/core/shared/errors';\nimport { OrganizationRuleError } from '@headless-lms/core/organizations';\nimport {\n  ActionInvocationError,\n  AlreadyConnectedError,\n  InvalidConfigError,\n  UnknownIntegrationError,\n} from '@headless-lms/core/integrations';\nimport { InvalidTriggerError } from '@headless-lms/core/automations';\nimport { NoActiveOrgError } from '../scope.js';\nimport { UnauthorizedError } from './auth.js';\nimport type { FastifyReply, FastifyRequest } from 'fastify';\n\nexport function errorHandler(error: unknown, _request: FastifyRequest, reply: FastifyReply) {\n  if (error instanceof NotFoundError) {\n    return reply.status(404).send({ error: 'not_found', message: error.message });\n  }\n  if (error instanceof ConflictError) {\n    return reply.status(409).send({ error: 'conflict', message: error.message });\n  }\n  if (error instanceof ForbiddenError) {\n    return reply.status(403).send({ error: 'forbidden', message: error.message });\n  }\n  if (error instanceof OrganizationRuleError) {\n    return reply.status(409).send({ error: 'conflict', message: error.message });\n  }\n  if (error instanceof AlreadyConnectedError) {\n    return reply.status(409).send({ error: 'already_connected', message: error.message });\n  }\n  if (error instanceof UnknownIntegrationError) {\n    return reply.status(400).send({ error: 'unknown_integration', message: error.message });\n  }\n  if (error instanceof InvalidConfigError) {\n    return reply.status(400).send({ error: 'invalid_config', message: error.message });\n  }\n  if (error instanceof ActionInvocationError) {\n    return reply.status(502).send({ error: 'action_failed', message: error.message });\n  }\n  if (error instanceof InvalidTriggerError) {\n    return reply.status(400).send({ error: 'invalid_trigger', message: error.message });\n  }\n  if (error instanceof NoActiveOrgError) {\n    return reply.status(403).send({ error: 'forbidden', message: error.message });\n  }\n  // No session at all — 401 so the client bounces to login, not a generic 403.\n  if (error instanceof UnauthorizedError) {\n    return reply.status(401).send({ error: 'unauthorized', message: error.message });\n  }\n  const err = error as { statusCode?: number; code?: string; message?: string };\n  if (typeof err.statusCode === 'number' && err.statusCode >= 400 && err.statusCode < 500) {\n    return reply\n      .status(err.statusCode)\n      .send({ error: err.code ?? 'bad_request', message: err.message ?? 'Bad request' });\n  }\n  _request.log.error(error);\n  return reply.status(500).send({ error: 'internal_error' });\n}\n"],"mappings":";;;;;;;AAaA,SAAgB,aAAa,OAAgB,UAA0B,OAAqB;CAC1F,IAAI,iBAAiB,eACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAa,SAAS,MAAM;CAAQ,CAAC;CAE9E,IAAI,iBAAiB,eACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAY,SAAS,MAAM;CAAQ,CAAC;CAE7E,IAAI,iBAAiB,gBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAa,SAAS,MAAM;CAAQ,CAAC;CAE9E,IAAI,iBAAiB,uBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAY,SAAS,MAAM;CAAQ,CAAC;CAE7E,IAAI,iBAAiB,uBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAqB,SAAS,MAAM;CAAQ,CAAC;CAEtF,IAAI,iBAAiB,yBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAuB,SAAS,MAAM;CAAQ,CAAC;CAExF,IAAI,iBAAiB,oBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAkB,SAAS,MAAM;CAAQ,CAAC;CAEnF,IAAI,iBAAiB,uBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAiB,SAAS,MAAM;CAAQ,CAAC;CAElF,IAAI,iBAAiB,qBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAmB,SAAS,MAAM;CAAQ,CAAC;CAEpF,IAAI,iBAAiB,kBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAa,SAAS,MAAM;CAAQ,CAAC;CAG9E,IAAI,iBAAiB,mBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAgB,SAAS,MAAM;CAAQ,CAAC;CAEjF,MAAM,MAAM;CACZ,IAAI,OAAO,IAAI,eAAe,YAAY,IAAI,cAAc,OAAO,IAAI,aAAa,KAClF,OAAO,MACJ,OAAO,IAAI,UAAU,CAAC,CACtB,KAAK;EAAE,OAAO,IAAI,QAAQ;EAAe,SAAS,IAAI,WAAW;CAAc,CAAC;CAErF,SAAS,IAAI,MAAM,KAAK;CACxB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,iBAAiB,CAAC;AAC3D"}
+{"version":3,"file":"error-handler.js","names":[],"sources":["../../../src/http/plugins/error-handler.ts"],"sourcesContent":["import { ConflictError, ForbiddenError, NotFoundError } from '@headless-lms/core/shared/errors';\nimport { OrganizationRuleError } from '@headless-lms/core/organizations';\nimport {\n  ActionInvocationError,\n  AlreadyConnectedError,\n  InvalidConfigError,\n  UnknownIntegrationError,\n} from '@headless-lms/core/integrations';\nimport {\n  AutomationKindMismatchError,\n  InvalidTriggerError,\n  ReservedActionError,\n} from '@headless-lms/core/automations';\nimport { NoActiveOrgError } from '../scope.js';\nimport { UnauthorizedError } from './auth.js';\nimport type { FastifyReply, FastifyRequest } from 'fastify';\n\nexport function errorHandler(error: unknown, request: FastifyRequest, reply: FastifyReply) {\n  if (error instanceof NotFoundError) {\n    return reply.status(404).send({ error: 'not_found', message: error.message });\n  }\n  if (error instanceof ConflictError) {\n    return reply.status(409).send({ error: 'conflict', message: error.message });\n  }\n  if (error instanceof ForbiddenError) {\n    return reply.status(403).send({ error: 'forbidden', message: error.message });\n  }\n  if (error instanceof OrganizationRuleError) {\n    return reply.status(409).send({ error: 'conflict', message: error.message });\n  }\n  if (error instanceof AlreadyConnectedError) {\n    return reply.status(409).send({ error: 'already_connected', message: error.message });\n  }\n  if (error instanceof UnknownIntegrationError) {\n    return reply.status(400).send({ error: 'unknown_integration', message: error.message });\n  }\n  if (error instanceof InvalidConfigError) {\n    return reply.status(400).send({ error: 'invalid_config', message: error.message });\n  }\n  if (error instanceof ActionInvocationError) {\n    return reply.status(502).send({ error: 'action_failed', message: error.message });\n  }\n  if (error instanceof InvalidTriggerError) {\n    return reply.status(400).send({ error: 'invalid_trigger', message: error.message });\n  }\n  if (error instanceof ReservedActionError) {\n    return reply.status(400).send({ error: 'reserved_action', message: error.message });\n  }\n  if (error instanceof AutomationKindMismatchError) {\n    return reply.status(409).send({ error: 'kind_mismatch', message: error.message });\n  }\n  if (error instanceof NoActiveOrgError) {\n    return reply.status(403).send({ error: 'forbidden', message: error.message });\n  }\n  // No session at all — 401 so the client bounces to login, not a generic 403.\n  if (error instanceof UnauthorizedError) {\n    return reply.status(401).send({ error: 'unauthorized', message: error.message });\n  }\n  const err = error as { statusCode?: number; code?: string; message?: string };\n  if (typeof err.statusCode === 'number' && err.statusCode >= 400 && err.statusCode < 500) {\n    return reply\n      .status(err.statusCode)\n      .send({ error: err.code ?? 'bad_request', message: err.message ?? 'Bad request' });\n  }\n  request.log.error({ err: error }, `unhandled error in ${request.method} ${request.url}`);\n  return reply.status(500).send({ error: 'internal_error', requestId: request.id });\n}\n"],"mappings":";;;;;;;AAiBA,SAAgB,aAAa,OAAgB,SAAyB,OAAqB;CACzF,IAAI,iBAAiB,eACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAa,SAAS,MAAM;CAAQ,CAAC;CAE9E,IAAI,iBAAiB,eACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAY,SAAS,MAAM;CAAQ,CAAC;CAE7E,IAAI,iBAAiB,gBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAa,SAAS,MAAM;CAAQ,CAAC;CAE9E,IAAI,iBAAiB,uBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAY,SAAS,MAAM;CAAQ,CAAC;CAE7E,IAAI,iBAAiB,uBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAqB,SAAS,MAAM;CAAQ,CAAC;CAEtF,IAAI,iBAAiB,yBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAuB,SAAS,MAAM;CAAQ,CAAC;CAExF,IAAI,iBAAiB,oBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAkB,SAAS,MAAM;CAAQ,CAAC;CAEnF,IAAI,iBAAiB,uBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAiB,SAAS,MAAM;CAAQ,CAAC;CAElF,IAAI,iBAAiB,qBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAmB,SAAS,MAAM;CAAQ,CAAC;CAEpF,IAAI,iBAAiB,qBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAmB,SAAS,MAAM;CAAQ,CAAC;CAEpF,IAAI,iBAAiB,6BACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAiB,SAAS,MAAM;CAAQ,CAAC;CAElF,IAAI,iBAAiB,kBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAa,SAAS,MAAM;CAAQ,CAAC;CAG9E,IAAI,iBAAiB,mBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAgB,SAAS,MAAM;CAAQ,CAAC;CAEjF,MAAM,MAAM;CACZ,IAAI,OAAO,IAAI,eAAe,YAAY,IAAI,cAAc,OAAO,IAAI,aAAa,KAClF,OAAO,MACJ,OAAO,IAAI,UAAU,CAAC,CACtB,KAAK;EAAE,OAAO,IAAI,QAAQ;EAAe,SAAS,IAAI,WAAW;CAAc,CAAC;CAErF,QAAQ,IAAI,MAAM,EAAE,KAAK,MAAM,GAAG,sBAAsB,QAAQ,OAAO,GAAG,QAAQ,KAAK;CACvF,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAkB,WAAW,QAAQ;CAAG,CAAC;AAClF"}

package/dist/http/plugins/openapi.js

@@ -1,4 +1,5 @@
-import { jsonSchemaTransform } from "fastify-type-provider-zod";
+import { version } from "../../package.js";
+import { jsonSchemaTransform, jsonSchemaTransformObject } from "fastify-type-provider-zod";
 import swagger from "@fastify/swagger";
 import swaggerUi from "@fastify/swagger-ui";
 //#region src/http/plugins/openapi.ts
@@ -7,25 +8,22 @@ function registerOpenApi(app, config) {
 		openapi: {
 			info: {
 				title: "Headless LMS API",
-				version: "0.0.0"
+				version,
+				description: "API documentation for the Headless LMS platform",
+				license: {
+					name: "MIT",
+					url: "https://opensource.org/licenses/MIT"
+				}
 			},
 			servers: [{ url: config.publicUrl }],
 			tags: [
 				{
 					name: "Organizations",
-					description: "Organizations and member management"
-				},
-				{
-					name: "Courses",
-					description: "Course authoring: courses, modules, activities"
+					description: "The tenant: its members, roles, invites and students"
 				},
 				{
-					name: "Learn",
-					description: "Student-facing course delivery"
-				},
-				{
-					name: "Students",
-					description: "Students and their enrollments"
+					name: "Content",
+					description: "Authored content: courses and downloads, their structure and delivery"
 				},
 				{
 					name: "Entitlements",
@@ -33,27 +31,32 @@ function registerOpenApi(app, config) {
 				},
 				{
 					name: "Progress",
-					description: "Completion tracking"
+					description: "Per-student progress and completion through course content"
 				},
 				{
-					name: "Automations",
-					description: "Trigger/action workflows"
+					name: "Discussion",
+					description: "Learner comments, replies, reactions and moderation"
 				},
 				{
-					name: "Dashboard",
-					description: "Back-office overview"
+					name: "Assets",
+					description: "The org media library: uploads, serving and lifecycle"
 				},
 				{
-					name: "Assets",
-					description: "Media library and uploads"
+					name: "Automations",
+					description: "Workflows and webhooks that react to system events"
 				},
 				{
 					name: "Integrations",
-					description: "Third-party integration connections"
+					description: "Connections to external services"
+				},
+				{
+					name: "Reporting",
+					description: "Reporting and analytics"
 				}
 			]
 		},
-		transform: jsonSchemaTransform
+		transform: jsonSchemaTransform,
+		transformObject: jsonSchemaTransformObject
 	});
 	app.register(swaggerUi, { routePrefix: "/docs" });
 }

package/dist/http/plugins/openapi.js.map

@@ -1 +1 @@
-{"version":3,"file":"openapi.js","names":[],"sources":["../../../src/http/plugins/openapi.ts"],"sourcesContent":["// OpenAPI documentation. @fastify/swagger reads the Zod route schemas (via the\n// transform) to build the spec the frontend SDK is generated from; it must be\n// registered before the routes so its onRoute hook captures them. UI + JSON are\n// served under /docs.\nimport type { FastifyInstance } from 'fastify';\nimport swagger from '@fastify/swagger';\nimport swaggerUi from '@fastify/swagger-ui';\nimport { jsonSchemaTransform } from 'fastify-type-provider-zod';\nimport type { ServerConfig } from '../config.js';\n\nexport function registerOpenApi(app: FastifyInstance, config: ServerConfig): void {\n  app.register(swagger, {\n    openapi: {\n      info: { title: 'Headless LMS API', version: '0.0.0' },\n      servers: [{ url: config.publicUrl }],\n      tags: [\n        { name: 'Organizations', description: 'Organizations and member management' },\n        { name: 'Courses', description: 'Course authoring: courses, modules, activities' },\n        { name: 'Learn', description: 'Student-facing course delivery' },\n        { name: 'Students', description: 'Students and their enrollments' },\n        { name: 'Entitlements', description: 'Access grants to content' },\n        { name: 'Progress', description: 'Completion tracking' },\n        { name: 'Automations', description: 'Trigger/action workflows' },\n        { name: 'Dashboard', description: 'Back-office overview' },\n        { name: 'Assets', description: 'Media library and uploads' },\n        { name: 'Integrations', description: 'Third-party integration connections' },\n      ],\n    },\n    transform: jsonSchemaTransform,\n  });\n  app.register(swaggerUi, { routePrefix: '/docs' });\n}\n"],"mappings":";;;;AAUA,SAAgB,gBAAgB,KAAsB,QAA4B;CAChF,IAAI,SAAS,SAAS;EACpB,SAAS;GACP,MAAM;IAAE,OAAO;IAAoB,SAAS;GAAQ;GACpD,SAAS,CAAC,EAAE,KAAK,OAAO,UAAU,CAAC;GACnC,MAAM;IACJ;KAAE,MAAM;KAAiB,aAAa;IAAsC;IAC5E;KAAE,MAAM;KAAW,aAAa;IAAiD;IACjF;KAAE,MAAM;KAAS,aAAa;IAAiC;IAC/D;KAAE,MAAM;KAAY,aAAa;IAAiC;IAClE;KAAE,MAAM;KAAgB,aAAa;IAA2B;IAChE;KAAE,MAAM;KAAY,aAAa;IAAsB;IACvD;KAAE,MAAM;KAAe,aAAa;IAA2B;IAC/D;KAAE,MAAM;KAAa,aAAa;IAAuB;IACzD;KAAE,MAAM;KAAU,aAAa;IAA4B;IAC3D;KAAE,MAAM;KAAgB,aAAa;IAAsC;GAC7E;EACF;EACA,WAAW;CACb,CAAC;CACD,IAAI,SAAS,WAAW,EAAE,aAAa,QAAQ,CAAC;AAClD"}
+{"version":3,"file":"openapi.js","names":["pkg.version"],"sources":["../../../src/http/plugins/openapi.ts"],"sourcesContent":["// OpenAPI documentation. @fastify/swagger reads the Zod route schemas (via the\n// transform) to build the spec the frontend SDK is generated from; it must be\n// registered before the routes so its onRoute hook captures them. UI + JSON are\n// served under /docs.\nimport type { FastifyInstance } from 'fastify';\nimport swagger from '@fastify/swagger';\nimport swaggerUi from '@fastify/swagger-ui';\nimport { jsonSchemaTransform, jsonSchemaTransformObject } from 'fastify-type-provider-zod';\nimport type { ServerConfig } from '../config.js';\nimport pkg from '../../../package.json' with { type: 'json' };\n\nexport function registerOpenApi(app: FastifyInstance, config: ServerConfig): void {\n  app.register(swagger, {\n    openapi: {\n      info: {\n        title: 'Headless LMS API',\n        version: pkg.version,\n        description: 'API documentation for the Headless LMS platform',\n        license: {\n          name: 'MIT',\n          url: 'https://opensource.org/licenses/MIT',\n        },\n      },\n      servers: [{ url: config.publicUrl }],\n      tags: [\n        {\n          name: 'Organizations',\n          description: 'The tenant: its members, roles, invites and students',\n        },\n        {\n          name: 'Content',\n          description: 'Authored content: courses and downloads, their structure and delivery',\n        },\n        { name: 'Entitlements', description: 'Access grants to content' },\n        {\n          name: 'Progress',\n          description: 'Per-student progress and completion through course content',\n        },\n        { name: 'Discussion', description: 'Learner comments, replies, reactions and moderation' },\n        { name: 'Assets', description: 'The org media library: uploads, serving and lifecycle' },\n        { name: 'Automations', description: 'Workflows and webhooks that react to system events' },\n        { name: 'Integrations', description: 'Connections to external services' },\n        { name: 'Reporting', description: 'Reporting and analytics' },\n      ],\n    },\n    transform: jsonSchemaTransform,\n    transformObject: jsonSchemaTransformObject,\n  });\n  app.register(swaggerUi, { routePrefix: '/docs' });\n}\n"],"mappings":";;;;;AAWA,SAAgB,gBAAgB,KAAsB,QAA4B;CAChF,IAAI,SAAS,SAAS;EACpB,SAAS;GACP,MAAM;IACJ,OAAO;IACEA;IACT,aAAa;IACb,SAAS;KACP,MAAM;KACN,KAAK;IACP;GACF;GACA,SAAS,CAAC,EAAE,KAAK,OAAO,UAAU,CAAC;GACnC,MAAM;IACJ;KACE,MAAM;KACN,aAAa;IACf;IACA;KACE,MAAM;KACN,aAAa;IACf;IACA;KAAE,MAAM;KAAgB,aAAa;IAA2B;IAChE;KACE,MAAM;KACN,aAAa;IACf;IACA;KAAE,MAAM;KAAc,aAAa;IAAsD;IACzF;KAAE,MAAM;KAAU,aAAa;IAAwD;IACvF;KAAE,MAAM;KAAe,aAAa;IAAqD;IACzF;KAAE,MAAM;KAAgB,aAAa;IAAmC;IACxE;KAAE,MAAM;KAAa,aAAa;IAA0B;GAC9D;EACF;EACA,WAAW;EACX,iBAAiB;CACnB,CAAC;CACD,IAAI,SAAS,WAAW,EAAE,aAAa,QAAQ,CAAC;AAClD"}