@headless-lms/server 0.1.0

package/dist/http/routes/integrations.js

@@ -0,0 +1,210 @@
+import { ErrorBody } from "../schemas/shared.js";
+import { ActionInvocationResult, AvailableIntegrationsList, ConfigureRequest, ConnectRequest, Connection, ConnectionActionParams, ConnectionIdParam, ConnectionsList, InvokeActionRequest, ReconnectRequest } from "../schemas/integrations.js";
+import "../schemas/index.js";
+import { NotFoundError } from "@headless-lms/core/shared/errors";
+import { z } from "zod";
+//#region src/http/routes/integrations.ts
+function toApi(connection) {
+	const { credentialRef: _credentialRef, ...rest } = connection;
+	return rest;
+}
+/** Resolve the session's active org to the domain org id, or 400 and return null. */
+async function resolveOrgId(req, reply) {
+	if (!req.orgId) {
+		await reply.code(400).send({
+			error: "no_active_org",
+			message: "No active organization"
+		});
+		return null;
+	}
+	return req.orgId;
+}
+async function integrationsRoutes(app, container) {
+	const r = app.withTypeProvider();
+	const integrations = container.integrations;
+	const tags = ["Integrations"];
+	r.route({
+		method: "GET",
+		url: "/api/integrations/available",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "listAvailableIntegrations",
+			tags,
+			summary: "List the integrations this deployment supports, with their config schemas",
+			response: {
+				200: AvailableIntegrationsList,
+				401: ErrorBody
+			}
+		},
+		handler: async () => integrations.available()
+	});
+	r.route({
+		method: "GET",
+		url: "/api/integrations",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "listConnections",
+			tags,
+			summary: "List the organization's integration connections",
+			response: {
+				200: ConnectionsList,
+				400: ErrorBody,
+				401: ErrorBody
+			}
+		},
+		handler: async (req, reply) => {
+			const orgId = await resolveOrgId(req, reply);
+			if (!orgId) return;
+			return (await integrations.list(orgId)).map(toApi);
+		}
+	});
+	r.route({
+		method: "POST",
+		url: "/api/integrations",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "connectIntegration",
+			tags,
+			summary: "Connect an integration (stores its secrets encrypted)",
+			body: ConnectRequest,
+			response: {
+				201: Connection,
+				400: ErrorBody,
+				401: ErrorBody,
+				409: ErrorBody
+			}
+		},
+		handler: async (req, reply) => {
+			const orgId = await resolveOrgId(req, reply);
+			if (!orgId) return;
+			const connection = await integrations.connect(orgId, req.body);
+			return reply.code(201).send(toApi(connection));
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/integrations/:id",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getConnection",
+			tags,
+			summary: "Get a connection",
+			params: ConnectionIdParam,
+			response: {
+				200: Connection,
+				400: ErrorBody,
+				401: ErrorBody,
+				404: ErrorBody
+			}
+		},
+		handler: async (req, reply) => {
+			const orgId = await resolveOrgId(req, reply);
+			if (!orgId) return;
+			const connection = await integrations.get(orgId, req.params.id);
+			if (!connection) throw new NotFoundError("Connection", req.params.id);
+			return toApi(connection);
+		}
+	});
+	r.route({
+		method: "PATCH",
+		url: "/api/integrations/:id",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "configureConnection",
+			tags,
+			summary: "Change a connection's configuration or active flag",
+			params: ConnectionIdParam,
+			body: ConfigureRequest,
+			response: {
+				200: Connection,
+				400: ErrorBody,
+				401: ErrorBody,
+				404: ErrorBody
+			}
+		},
+		handler: async (req, reply) => {
+			const orgId = await resolveOrgId(req, reply);
+			if (!orgId) return;
+			const connection = await integrations.configure(orgId, req.params.id, req.body);
+			if (!connection) throw new NotFoundError("Connection", req.params.id);
+			return toApi(connection);
+		}
+	});
+	r.route({
+		method: "POST",
+		url: "/api/integrations/:id/reconnect",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "reconnectIntegration",
+			tags,
+			summary: "Replace a connection's secrets (re-authenticate)",
+			params: ConnectionIdParam,
+			body: ReconnectRequest,
+			response: {
+				200: Connection,
+				400: ErrorBody,
+				401: ErrorBody,
+				404: ErrorBody
+			}
+		},
+		handler: async (req, reply) => {
+			const orgId = await resolveOrgId(req, reply);
+			if (!orgId) return;
+			const connection = await integrations.reconnect(orgId, req.params.id, req.body.secrets);
+			if (!connection) throw new NotFoundError("Connection", req.params.id);
+			return toApi(connection);
+		}
+	});
+	r.route({
+		method: "POST",
+		url: "/api/integrations/:id/actions/:actionId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "invokeConnectionAction",
+			tags,
+			summary: "Invoke one of a connection's actions (e.g. a listing that feeds a picker)",
+			params: ConnectionActionParams,
+			body: InvokeActionRequest,
+			response: {
+				200: ActionInvocationResult,
+				400: ErrorBody,
+				401: ErrorBody,
+				404: ErrorBody,
+				409: ErrorBody,
+				502: ErrorBody
+			}
+		},
+		handler: async (req, reply) => {
+			const orgId = await resolveOrgId(req, reply);
+			if (!orgId) return;
+			return { output: await integrations.invoke(orgId, req.params.id, req.params.actionId, req.body.input ?? {}) };
+		}
+	});
+	r.route({
+		method: "DELETE",
+		url: "/api/integrations/:id",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "disconnectIntegration",
+			tags,
+			summary: "Disconnect an integration (destroys its stored secrets)",
+			params: ConnectionIdParam,
+			response: {
+				204: z.void(),
+				400: ErrorBody,
+				401: ErrorBody,
+				404: ErrorBody
+			}
+		},
+		handler: async (req, reply) => {
+			const orgId = await resolveOrgId(req, reply);
+			if (!orgId) return;
+			if (!await integrations.disconnect(orgId, req.params.id)) throw new NotFoundError("Connection", req.params.id);
+			return reply.code(204).send();
+		}
+	});
+}
+//#endregion
+export { integrationsRoutes };
+
+//# sourceMappingURL=integrations.js.map

package/dist/http/routes/integrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.js","names":[],"sources":["../../../src/http/routes/integrations.ts"],"sourcesContent":["// HTTP routes for integrations (an org's connections to external services).\n// All require a session with an active organization. Credentials are\n// write-only: accepted on connect/reconnect, never present in a response —\n// `toApi` strips the credentialRef so not even the reference leaks.\nimport type { FastifyInstance, FastifyReply, FastifyRequest } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { z } from 'zod';\nimport {\n  ActionInvocationResult,\n  AvailableIntegrationsList,\n  ConfigureRequest,\n  ConnectRequest,\n  Connection,\n  ConnectionActionParams,\n  ConnectionIdParam,\n  ConnectionsList,\n  ErrorBody,\n  InvokeActionRequest,\n  ReconnectRequest,\n} from '../schemas/index.js';\nimport type { Connection as DomainConnection } from '@headless-lms/core/integrations';\nimport { NotFoundError } from '@headless-lms/core/shared/errors';\nimport type { Container } from '../../app/container.js';\n\nfunction toApi(connection: DomainConnection): Connection {\n  const { credentialRef: _credentialRef, ...rest } = connection;\n  return rest;\n}\n\n/** Resolve the session's active org to the domain org id, or 400 and return null. */\nasync function resolveOrgId(\n  req: FastifyRequest,\n  reply: FastifyReply,\n): Promise<string | null> {\n  if (!req.orgId) {\n    await reply.code(400).send({ error: 'no_active_org', message: 'No active organization' });\n    return null;\n  }\n  return req.orgId;\n}\n\nexport async function integrationsRoutes(\n  app: FastifyInstance,\n  container: Container,\n): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const integrations = container.integrations;\n  const tags = ['Integrations'];\n\n  r.route({\n    method: 'GET',\n    url: '/api/integrations/available',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listAvailableIntegrations',\n      tags,\n      summary: 'List the integrations this deployment supports, with their config schemas',\n      response: { 200: AvailableIntegrationsList, 401: ErrorBody },\n    },\n    handler: async () => integrations.available(),\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/integrations',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listConnections',\n      tags,\n      summary: \"List the organization's integration connections\",\n      response: { 200: ConnectionsList, 400: ErrorBody, 401: ErrorBody },\n    },\n    handler: async (req, reply) => {\n      const orgId = await resolveOrgId(req, reply);\n      if (!orgId) {\n        return;\n      }\n      return (await integrations.list(orgId)).map(toApi);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/integrations',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'connectIntegration',\n      tags,\n      summary: 'Connect an integration (stores its secrets encrypted)',\n      body: ConnectRequest,\n      response: { 201: Connection, 400: ErrorBody, 401: ErrorBody, 409: ErrorBody },\n    },\n    handler: async (req, reply) => {\n      const orgId = await resolveOrgId(req, reply);\n      if (!orgId) {\n        return;\n      }\n      const connection = await integrations.connect(orgId, req.body);\n      return reply.code(201).send(toApi(connection));\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/integrations/:id',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getConnection',\n      tags,\n      summary: 'Get a connection',\n      params: ConnectionIdParam,\n      response: { 200: Connection, 400: ErrorBody, 401: ErrorBody, 404: ErrorBody },\n    },\n    handler: async (req, reply) => {\n      const orgId = await resolveOrgId(req, reply);\n      if (!orgId) {\n        return;\n      }\n      const connection = await integrations.get(orgId, req.params.id);\n      if (!connection) {\n        throw new NotFoundError('Connection', req.params.id);\n      }\n      return toApi(connection);\n    },\n  });\n\n  r.route({\n    method: 'PATCH',\n    url: '/api/integrations/:id',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'configureConnection',\n      tags,\n      summary: \"Change a connection's configuration or active flag\",\n      params: ConnectionIdParam,\n      body: ConfigureRequest,\n      response: { 200: Connection, 400: ErrorBody, 401: ErrorBody, 404: ErrorBody },\n    },\n    handler: async (req, reply) => {\n      const orgId = await resolveOrgId(req, reply);\n      if (!orgId) {\n        return;\n      }\n      const connection = await integrations.configure(orgId, req.params.id, req.body);\n      if (!connection) {\n        throw new NotFoundError('Connection', req.params.id);\n      }\n      return toApi(connection);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/integrations/:id/reconnect',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'reconnectIntegration',\n      tags,\n      summary: \"Replace a connection's secrets (re-authenticate)\",\n      params: ConnectionIdParam,\n      body: ReconnectRequest,\n      response: { 200: Connection, 400: ErrorBody, 401: ErrorBody, 404: ErrorBody },\n    },\n    handler: async (req, reply) => {\n      const orgId = await resolveOrgId(req, reply);\n      if (!orgId) {\n        return;\n      }\n      const connection = await integrations.reconnect(orgId, req.params.id, req.body.secrets);\n      if (!connection) {\n        throw new NotFoundError('Connection', req.params.id);\n      }\n      return toApi(connection);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/integrations/:id/actions/:actionId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'invokeConnectionAction',\n      tags,\n      summary: \"Invoke one of a connection's actions (e.g. a listing that feeds a picker)\",\n      params: ConnectionActionParams,\n      body: InvokeActionRequest,\n      response: {\n        200: ActionInvocationResult,\n        400: ErrorBody,\n        401: ErrorBody,\n        404: ErrorBody,\n        409: ErrorBody,\n        502: ErrorBody,\n      },\n    },\n    handler: async (req, reply) => {\n      const orgId = await resolveOrgId(req, reply);\n      if (!orgId) {\n        return;\n      }\n      const output = await integrations.invoke(\n        orgId,\n        req.params.id,\n        req.params.actionId,\n        req.body.input ?? {},\n      );\n      return { output: output as Record<string, unknown> };\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/integrations/:id',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'disconnectIntegration',\n      tags,\n      summary: 'Disconnect an integration (destroys its stored secrets)',\n      params: ConnectionIdParam,\n      response: { 204: z.void(), 400: ErrorBody, 401: ErrorBody, 404: ErrorBody },\n    },\n    handler: async (req, reply) => {\n      const orgId = await resolveOrgId(req, reply);\n      if (!orgId) {\n        return;\n      }\n      const removed = await integrations.disconnect(orgId, req.params.id);\n      if (!removed) {\n        throw new NotFoundError('Connection', req.params.id);\n      }\n      return reply.code(204).send();\n    },\n  });\n}\n"],"mappings":";;;;;;AAwBA,SAAS,MAAM,YAA0C;CACvD,MAAM,EAAE,eAAe,gBAAgB,GAAG,SAAS;CACnD,OAAO;AACT;;AAGA,eAAe,aACb,KACA,OACwB;CACxB,IAAI,CAAC,IAAI,OAAO;EACd,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;GAAE,OAAO;GAAiB,SAAS;EAAyB,CAAC;EACxF,OAAO;CACT;CACA,OAAO,IAAI;AACb;AAEA,eAAsB,mBACpB,KACA,WACe;CACf,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,eAAe,UAAU;CAC/B,MAAM,OAAO,CAAC,cAAc;CAE5B,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,UAAU;IAAE,KAAK;IAA2B,KAAK;GAAU;EAC7D;EACA,SAAS,YAAY,aAAa,UAAU;CAC9C,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,UAAU;IAAE,KAAK;IAAiB,KAAK;IAAW,KAAK;GAAU;EACnE;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,KAAK,KAAK;GAC3C,IAAI,CAAC,OACH;GAEF,QAAQ,MAAM,aAAa,KAAK,KAAK,EAAA,CAAG,IAAI,KAAK;EACnD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,MAAM;GACN,UAAU;IAAE,KAAK;IAAY,KAAK;IAAW,KAAK;IAAW,KAAK;GAAU;EAC9E;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,KAAK,KAAK;GAC3C,IAAI,CAAC,OACH;GAEF,MAAM,aAAa,MAAM,aAAa,QAAQ,OAAO,IAAI,IAAI;GAC7D,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,MAAM,UAAU,CAAC;EAC/C;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,QAAQ;GACR,UAAU;IAAE,KAAK;IAAY,KAAK;IAAW,KAAK;IAAW,KAAK;GAAU;EAC9E;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,KAAK,KAAK;GAC3C,IAAI,CAAC,OACH;GAEF,MAAM,aAAa,MAAM,aAAa,IAAI,OAAO,IAAI,OAAO,EAAE;GAC9D,IAAI,CAAC,YACH,MAAM,IAAI,cAAc,cAAc,IAAI,OAAO,EAAE;GAErD,OAAO,MAAM,UAAU;EACzB;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAY,KAAK;IAAW,KAAK;IAAW,KAAK;GAAU;EAC9E;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,KAAK,KAAK;GAC3C,IAAI,CAAC,OACH;GAEF,MAAM,aAAa,MAAM,aAAa,UAAU,OAAO,IAAI,OAAO,IAAI,IAAI,IAAI;GAC9E,IAAI,CAAC,YACH,MAAM,IAAI,cAAc,cAAc,IAAI,OAAO,EAAE;GAErD,OAAO,MAAM,UAAU;EACzB;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAY,KAAK;IAAW,KAAK;IAAW,KAAK;GAAU;EAC9E;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,KAAK,KAAK;GAC3C,IAAI,CAAC,OACH;GAEF,MAAM,aAAa,MAAM,aAAa,UAAU,OAAO,IAAI,OAAO,IAAI,IAAI,KAAK,OAAO;GACtF,IAAI,CAAC,YACH,MAAM,IAAI,cAAc,cAAc,IAAI,OAAO,EAAE;GAErD,OAAO,MAAM,UAAU;EACzB;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,QAAQ;GACR,MAAM;GACN,UAAU;IACR,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;GACP;EACF;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,KAAK,KAAK;GAC3C,IAAI,CAAC,OACH;GAQF,OAAO,EAAE,QAAQ,MANI,aAAa,OAChC,OACA,IAAI,OAAO,IACX,IAAI,OAAO,UACX,IAAI,KAAK,SAAS,CAAC,CACrB,EACmD;EACrD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,KAAK;IAAW,KAAK;IAAW,KAAK;GAAU;EAC5E;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,KAAK,KAAK;GAC3C,IAAI,CAAC,OACH;GAGF,IAAI,CAAC,MADiB,aAAa,WAAW,OAAO,IAAI,OAAO,EAAE,GAEhE,MAAM,IAAI,cAAc,cAAc,IAAI,OAAO,EAAE;GAErD,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;AACH"}

package/dist/http/routes/learn/assets.d.ts

@@ -0,0 +1,8 @@
+import { Container } from "../../../app/container.js";
+import "../../../index.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/learn/assets.d.ts
+declare function learnAssetsRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { learnAssetsRoutes };
+//# sourceMappingURL=assets.d.ts.map

package/dist/http/routes/learn/assets.js

@@ -0,0 +1,32 @@
+import { ErrorBody } from "../../schemas/shared.js";
+import { AssetIdParam, DownloadTicket } from "../../schemas/assets.js";
+import "../../schemas/index.js";
+import { NotFoundError } from "@headless-lms/core/shared/errors";
+//#region src/http/routes/learn/assets.ts
+async function learnAssetsRoutes(app, container) {
+	app.withTypeProvider().route({
+		method: "POST",
+		url: "/api/learn/assets/:id/url",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getAssetDownloadUrl",
+			tags: ["Learn"],
+			summary: "Get a short-lived presigned URL to serve an asset to the student",
+			params: AssetIdParam,
+			response: {
+				200: DownloadTicket,
+				401: ErrorBody,
+				404: ErrorBody
+			}
+		},
+		handler: async (req) => {
+			const ticket = await container.assets.requestDownload(req.orgId, req.params.id);
+			if (!ticket) throw new NotFoundError("Asset", req.params.id);
+			return ticket;
+		}
+	});
+}
+//#endregion
+export { learnAssetsRoutes };
+
+//# sourceMappingURL=assets.js.map

package/dist/http/routes/learn/assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.js","names":[],"sources":["../../../../src/http/routes/learn/assets.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { AssetIdParam, DownloadTicket, ErrorBody } from '../../schemas/index.js';\nimport { NotFoundError } from '@headless-lms/core/shared/errors';\nimport type { Container } from '@headless-lms/server';\n\nexport async function learnAssetsRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n\n  // Content embeds assets by stable `assetId`; the URL persisted at authoring\n  // time is a long-expired presign. The student surface mints a fresh\n  // short-lived ticket here, scoped to the session's portal org.\n  r.route({\n    method: 'POST',\n    url: '/api/learn/assets/:id/url',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getAssetDownloadUrl',\n      tags: ['Learn'],\n      summary: 'Get a short-lived presigned URL to serve an asset to the student',\n      params: AssetIdParam,\n      response: { 200: DownloadTicket, 401: ErrorBody, 404: ErrorBody },\n    },\n    handler: async (req) => {\n\n      // No body: the student surface never renames a download, so the asset's\n      // own filename stands.\n      const ticket = await container.assets.requestDownload(req.orgId, req.params.id);\n      if (!ticket) {\n        throw new NotFoundError('Asset', req.params.id);\n      }\n      return ticket;\n    },\n  });\n}\n"],"mappings":";;;;;AAMA,eAAsB,kBAAkB,KAAsB,WAAqC;CAMjG,IALc,iBAKd,CAAC,CAAC,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,OAAO;GACd,SAAS;GACT,QAAQ;GACR,UAAU;IAAE,KAAK;IAAgB,KAAK;IAAW,KAAK;GAAU;EAClE;EACA,SAAS,OAAO,QAAQ;GAItB,MAAM,SAAS,MAAM,UAAU,OAAO,gBAAgB,IAAI,OAAO,IAAI,OAAO,EAAE;GAC9E,IAAI,CAAC,QACH,MAAM,IAAI,cAAc,SAAS,IAAI,OAAO,EAAE;GAEhD,OAAO;EACT;CACF,CAAC;AACH"}

package/dist/http/routes/learn/comments.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/learn/comments.d.ts
+declare function learnCommentsRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { learnCommentsRoutes };
+//# sourceMappingURL=comments.d.ts.map

package/dist/http/routes/learn/comments.js

@@ -0,0 +1,175 @@
+import { UnauthorizedError } from "../../plugins/auth.js";
+import { ErrorBody } from "../../schemas/shared.js";
+import { ActivityComments, Comment, CommentIdParam, CommentReactions, CommentReport, CommentView, DiscussionActivityParam, EditComment, PostComment, ReportComment, SetCommentReaction } from "../../schemas/discussion.js";
+import "../../schemas/index.js";
+//#region src/http/routes/learn/comments.ts
+async function learnCommentsRoutes(app, container) {
+	const r = app.withTypeProvider();
+	const discussion = container.discussion;
+	r.route({
+		method: "GET",
+		url: "/api/learn/activities/:activityId/comments",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "listActivityComments",
+			tags: ["Learn"],
+			summary: "Read an activity's comments",
+			params: DiscussionActivityParam,
+			response: {
+				200: ActivityComments,
+				404: ErrorBody
+			}
+		},
+		handler: async (req) => {
+			const orgId = req.orgId;
+			const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);
+			if (!orgUser) throw new UnauthorizedError();
+			return discussion.activityComments(orgId, req.params.activityId, orgUser);
+		}
+	});
+	r.route({
+		method: "POST",
+		url: "/api/learn/activities/:activityId/comments",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "postComment",
+			tags: ["Learn"],
+			summary: "Post a comment or reply on an activity",
+			params: DiscussionActivityParam,
+			body: PostComment,
+			response: {
+				200: CommentView,
+				403: ErrorBody,
+				404: ErrorBody
+			}
+		},
+		handler: async (req) => {
+			const orgId = req.orgId;
+			const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);
+			if (!orgUser) throw new UnauthorizedError();
+			return discussion.postComment(orgId, {
+				actor: orgUser,
+				activityId: req.params.activityId,
+				parentId: req.body.parentId,
+				body: req.body.body
+			});
+		}
+	});
+	r.route({
+		method: "PATCH",
+		url: "/api/learn/comments/:commentId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "editComment",
+			tags: ["Learn"],
+			summary: "Revise your own comment",
+			params: CommentIdParam,
+			body: EditComment,
+			response: {
+				200: CommentView,
+				403: ErrorBody,
+				404: ErrorBody
+			}
+		},
+		handler: async (req) => {
+			const orgId = req.orgId;
+			const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);
+			if (!orgUser) throw new UnauthorizedError();
+			return discussion.edit(orgId, req.params.commentId, orgUser, req.body.body);
+		}
+	});
+	r.route({
+		method: "DELETE",
+		url: "/api/learn/comments/:commentId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "deleteComment",
+			tags: ["Learn"],
+			summary: "Delete a comment",
+			params: CommentIdParam,
+			response: {
+				200: Comment,
+				403: ErrorBody,
+				404: ErrorBody
+			}
+		},
+		handler: async (req) => {
+			const orgId = req.orgId;
+			const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);
+			if (!orgUser) throw new UnauthorizedError();
+			return discussion.remove(orgId, req.params.commentId, orgUser);
+		}
+	});
+	r.route({
+		method: "PUT",
+		url: "/api/learn/comments/:commentId/reaction",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "setCommentReaction",
+			tags: ["Learn"],
+			summary: "Set your reaction to a comment, replacing any you already had",
+			params: CommentIdParam,
+			body: SetCommentReaction,
+			response: {
+				200: CommentReactions,
+				403: ErrorBody,
+				404: ErrorBody
+			}
+		},
+		handler: async (req) => {
+			const orgId = req.orgId;
+			const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);
+			if (!orgUser) throw new UnauthorizedError();
+			return discussion.setReaction(orgId, req.params.commentId, orgUser, req.body.emoji);
+		}
+	});
+	r.route({
+		method: "DELETE",
+		url: "/api/learn/comments/:commentId/reaction",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "clearCommentReaction",
+			tags: ["Learn"],
+			summary: "Withdraw your reaction from a comment",
+			params: CommentIdParam,
+			response: {
+				200: CommentReactions,
+				403: ErrorBody,
+				404: ErrorBody
+			}
+		},
+		handler: async (req) => {
+			const orgId = req.orgId;
+			const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);
+			if (!orgUser) throw new UnauthorizedError();
+			return discussion.setReaction(orgId, req.params.commentId, orgUser, null);
+		}
+	});
+	r.route({
+		method: "POST",
+		url: "/api/learn/comments/:commentId/reports",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "reportComment",
+			tags: ["Learn"],
+			summary: "Flag a comment for moderator attention",
+			params: CommentIdParam,
+			body: ReportComment,
+			response: {
+				200: CommentReport,
+				403: ErrorBody,
+				404: ErrorBody
+			}
+		},
+		handler: async (req) => {
+			const orgId = req.orgId;
+			const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);
+			if (!orgUser) throw new UnauthorizedError();
+			return discussion.reportComment(orgId, req.params.commentId, orgUser, req.body.reason);
+		}
+	});
+}
+//#endregion
+export { learnCommentsRoutes };
+
+//# sourceMappingURL=comments.js.map

package/dist/http/routes/learn/comments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comments.js","names":[],"sources":["../../../../src/http/routes/learn/comments.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport {\n  ActivityComments,\n  Comment,\n  CommentIdParam,\n  CommentReactions,\n  CommentReport,\n  CommentView,\n  DiscussionActivityParam,\n  EditComment,\n  ErrorBody,\n  PostComment,\n  ReportComment,\n  SetCommentReaction,\n} from '../../schemas/index.js';\nimport type { Container } from '../../../app/container.js';\nimport { UnauthorizedError } from '../../plugins/auth.js';\n\nexport async function learnCommentsRoutes(\n  app: FastifyInstance,\n  container: Container,\n): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const discussion = container.discussion;\n\n  r.route({\n    method: 'GET',\n    url: '/api/learn/activities/:activityId/comments',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listActivityComments',\n      tags: ['Learn'],\n      summary: \"Read an activity's comments\",\n      params: DiscussionActivityParam,\n      response: { 200: ActivityComments, 404: ErrorBody },\n    },\n    handler: async (req) => {\n      const orgId = req.orgId;\n      const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);\n      if (!orgUser) {\n        throw new UnauthorizedError();\n      }\n      return discussion.activityComments(orgId, req.params.activityId, orgUser);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/learn/activities/:activityId/comments',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'postComment',\n      tags: ['Learn'],\n      summary: 'Post a comment or reply on an activity',\n      params: DiscussionActivityParam,\n      body: PostComment,\n      response: { 200: CommentView, 403: ErrorBody, 404: ErrorBody },\n    },\n    handler: async (req) => {\n      const orgId = req.orgId;\n      const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);\n      if (!orgUser) {\n        throw new UnauthorizedError();\n      }\n      return discussion.postComment(orgId, {\n        actor: orgUser,\n        activityId: req.params.activityId,\n        parentId: req.body.parentId,\n        body: req.body.body,\n      });\n    },\n  });\n\n  r.route({\n    method: 'PATCH',\n    url: '/api/learn/comments/:commentId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'editComment',\n      tags: ['Learn'],\n      summary: 'Revise your own comment',\n      params: CommentIdParam,\n      body: EditComment,\n      response: { 200: CommentView, 403: ErrorBody, 404: ErrorBody },\n    },\n    handler: async (req) => {\n      const orgId = req.orgId;\n      const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);\n      if (!orgUser) {\n        throw new UnauthorizedError();\n      }\n      return discussion.edit(orgId, req.params.commentId, orgUser, req.body.body);\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/learn/comments/:commentId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'deleteComment',\n      tags: ['Learn'],\n      summary: 'Delete a comment',\n      params: CommentIdParam,\n      response: { 200: Comment, 403: ErrorBody, 404: ErrorBody },\n    },\n    handler: async (req) => {\n      const orgId = req.orgId;\n      const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);\n      if (!orgUser) {\n        throw new UnauthorizedError();\n      }\n      return discussion.remove(orgId, req.params.commentId, orgUser);\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/learn/comments/:commentId/reaction',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'setCommentReaction',\n      tags: ['Learn'],\n      summary: 'Set your reaction to a comment, replacing any you already had',\n      params: CommentIdParam,\n      body: SetCommentReaction,\n      response: { 200: CommentReactions, 403: ErrorBody, 404: ErrorBody },\n    },\n    handler: async (req) => {\n      const orgId = req.orgId;\n      const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);\n      if (!orgUser) {\n        throw new UnauthorizedError();\n      }\n      return discussion.setReaction(orgId, req.params.commentId, orgUser, req.body.emoji);\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/learn/comments/:commentId/reaction',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'clearCommentReaction',\n      tags: ['Learn'],\n      summary: 'Withdraw your reaction from a comment',\n      params: CommentIdParam,\n      response: { 200: CommentReactions, 403: ErrorBody, 404: ErrorBody },\n    },\n    handler: async (req) => {\n      const orgId = req.orgId;\n      const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);\n      if (!orgUser) {\n        throw new UnauthorizedError();\n      }\n      return discussion.setReaction(orgId, req.params.commentId, orgUser, null);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/learn/comments/:commentId/reports',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'reportComment',\n      tags: ['Learn'],\n      summary: 'Flag a comment for moderator attention',\n      params: CommentIdParam,\n      body: ReportComment,\n      response: { 200: CommentReport, 403: ErrorBody, 404: ErrorBody },\n    },\n    handler: async (req) => {\n      const orgId = req.orgId;\n      const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);\n      if (!orgUser) {\n        throw new UnauthorizedError();\n      }\n      return discussion.reportComment(orgId, req.params.commentId, orgUser, req.body.reason);\n    },\n  });\n}\n"],"mappings":";;;;;AAmBA,eAAsB,oBACpB,KACA,WACe;CACf,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,aAAa,UAAU;CAE7B,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,OAAO;GACd,SAAS;GACT,QAAQ;GACR,UAAU;IAAE,KAAK;IAAkB,KAAK;GAAU;EACpD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,IAAI;GAClB,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9E,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;GAE9B,OAAO,WAAW,iBAAiB,OAAO,IAAI,OAAO,YAAY,OAAO;EAC1E;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,OAAO;GACd,SAAS;GACT,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,KAAK;IAAW,KAAK;GAAU;EAC/D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,IAAI;GAClB,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9E,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;GAE9B,OAAO,WAAW,YAAY,OAAO;IACnC,OAAO;IACP,YAAY,IAAI,OAAO;IACvB,UAAU,IAAI,KAAK;IACnB,MAAM,IAAI,KAAK;GACjB,CAAC;EACH;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,OAAO;GACd,SAAS;GACT,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,KAAK;IAAW,KAAK;GAAU;EAC/D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,IAAI;GAClB,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9E,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;GAE9B,OAAO,WAAW,KAAK,OAAO,IAAI,OAAO,WAAW,SAAS,IAAI,KAAK,IAAI;EAC5E;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,OAAO;GACd,SAAS;GACT,QAAQ;GACR,UAAU;IAAE,KAAK;IAAS,KAAK;IAAW,KAAK;GAAU;EAC3D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,IAAI;GAClB,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9E,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;GAE9B,OAAO,WAAW,OAAO,OAAO,IAAI,OAAO,WAAW,OAAO;EAC/D;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,OAAO;GACd,SAAS;GACT,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAkB,KAAK;IAAW,KAAK;GAAU;EACpE;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,IAAI;GAClB,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9E,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;GAE9B,OAAO,WAAW,YAAY,OAAO,IAAI,OAAO,WAAW,SAAS,IAAI,KAAK,KAAK;EACpF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,OAAO;GACd,SAAS;GACT,QAAQ;GACR,UAAU;IAAE,KAAK;IAAkB,KAAK;IAAW,KAAK;GAAU;EACpE;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,IAAI;GAClB,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9E,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;GAE9B,OAAO,WAAW,YAAY,OAAO,IAAI,OAAO,WAAW,SAAS,IAAI;EAC1E;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,OAAO;GACd,SAAS;GACT,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAe,KAAK;IAAW,KAAK;GAAU;EACjE;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,IAAI;GAClB,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9E,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;GAE9B,OAAO,WAAW,cAAc,OAAO,IAAI,OAAO,WAAW,SAAS,IAAI,KAAK,MAAM;EACvF;CACF,CAAC;AACH"}

package/dist/http/routes/learn/courses.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/learn/courses.d.ts
+declare function learnCoursesRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { learnCoursesRoutes };
+//# sourceMappingURL=courses.d.ts.map

package/dist/http/routes/learn/courses.js

@@ -0,0 +1,75 @@
+import { UnauthorizedError } from "../../plugins/auth.js";
+import { ErrorBody } from "../../schemas/shared.js";
+import { Course } from "../../schemas/content.js";
+import { LearnCourseIdParam, LearnCourses, LearnModules } from "../../schemas/learn.js";
+import "../../schemas/index.js";
+import { NotFoundError } from "@headless-lms/core/shared/errors";
+//#region src/http/routes/learn/courses.ts
+async function learnCoursesRoutes(app, container) {
+	const r = app.withTypeProvider();
+	const learn = container.reporting.learn;
+	r.route({
+		method: "GET",
+		url: "/api/learn/courses",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "listLearnCourses",
+			tags: ["Learn"],
+			summary: "List the student's enrolled courses",
+			response: { 200: LearnCourses }
+		},
+		handler: async (req) => {
+			const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);
+			if (!orgUser) throw new UnauthorizedError();
+			return learn.listCourses(req.orgId, orgUser.id);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/learn/courses/:courseId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getLearnCourse",
+			tags: ["Learn"],
+			summary: "Get one enrolled course",
+			params: LearnCourseIdParam,
+			response: {
+				200: Course,
+				404: ErrorBody
+			}
+		},
+		handler: async (req) => {
+			const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);
+			if (!orgUser) throw new UnauthorizedError();
+			const course = await learn.getCourse(req.orgId, orgUser.id, req.params.courseId);
+			if (!course) throw new NotFoundError("Course", req.params.courseId);
+			return course;
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/learn/courses/:courseId/modules",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "listLearnModules",
+			tags: ["Learn"],
+			summary: "List an enrolled course's module/activity tree",
+			params: LearnCourseIdParam,
+			response: {
+				200: LearnModules,
+				404: ErrorBody
+			}
+		},
+		handler: async (req) => {
+			const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);
+			if (!orgUser) throw new UnauthorizedError();
+			const modules = await learn.listModules(req.orgId, orgUser.id, req.params.courseId);
+			if (!modules) throw new NotFoundError("Course", req.params.courseId);
+			return modules;
+		}
+	});
+}
+//#endregion
+export { learnCoursesRoutes };
+
+//# sourceMappingURL=courses.js.map

package/dist/http/routes/learn/courses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"courses.js","names":[],"sources":["../../../../src/http/routes/learn/courses.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport {\n  Course,\n  ErrorBody,\n  LearnCourseIdParam,\n  LearnCourses,\n  LearnModules,\n} from '../../schemas/index.js';\nimport { NotFoundError } from '@headless-lms/core/shared/errors';\nimport type { Container } from '../../../app/container.js';\nimport { UnauthorizedError } from '../../plugins/auth.js';\n\nexport async function learnCoursesRoutes(\n  app: FastifyInstance,\n  container: Container,\n): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const learn = container.reporting.learn;\n\n  r.route({\n    method: 'GET',\n    url: '/api/learn/courses',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listLearnCourses',\n      tags: ['Learn'],\n      summary: \"List the student's enrolled courses\",\n      response: { 200: LearnCourses },\n    },\n    handler: async (req) => {\n      const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);\n      if (!orgUser) {\n        throw new UnauthorizedError();\n      }\n      return learn.listCourses(req.orgId, orgUser.id);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/learn/courses/:courseId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getLearnCourse',\n      tags: ['Learn'],\n      summary: 'Get one enrolled course',\n      params: LearnCourseIdParam,\n      response: { 200: Course, 404: ErrorBody },\n    },\n    handler: async (req) => {\n      const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);\n      if (!orgUser) {\n        throw new UnauthorizedError();\n      }\n      const course = await learn.getCourse(req.orgId, orgUser.id, req.params.courseId);\n      if (!course) {\n        throw new NotFoundError('Course', req.params.courseId);\n      }\n      return course;\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/learn/courses/:courseId/modules',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listLearnModules',\n      tags: ['Learn'],\n      summary: \"List an enrolled course's module/activity tree\",\n      params: LearnCourseIdParam,\n      response: { 200: LearnModules, 404: ErrorBody },\n    },\n    handler: async (req) => {\n      const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);\n      if (!orgUser) {\n        throw new UnauthorizedError();\n      }\n      const modules = await learn.listModules(req.orgId, orgUser.id, req.params.courseId);\n      if (!modules) {\n        throw new NotFoundError('Course', req.params.courseId);\n      }\n      return modules;\n    },\n  });\n}\n"],"mappings":";;;;;;;AAaA,eAAsB,mBACpB,KACA,WACe;CACf,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,QAAQ,UAAU,UAAU;CAElC,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,OAAO;GACd,SAAS;GACT,UAAU,EAAE,KAAK,aAAa;EAChC;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9E,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;GAE9B,OAAO,MAAM,YAAY,IAAI,OAAO,QAAQ,EAAE;EAChD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,OAAO;GACd,SAAS;GACT,QAAQ;GACR,UAAU;IAAE,KAAK;IAAQ,KAAK;GAAU;EAC1C;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9E,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;GAE9B,MAAM,SAAS,MAAM,MAAM,UAAU,IAAI,OAAO,QAAQ,IAAI,IAAI,OAAO,QAAQ;GAC/E,IAAI,CAAC,QACH,MAAM,IAAI,cAAc,UAAU,IAAI,OAAO,QAAQ;GAEvD,OAAO;EACT;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,OAAO;GACd,SAAS;GACT,QAAQ;GACR,UAAU;IAAE,KAAK;IAAc,KAAK;GAAU;EAChD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9E,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;GAE9B,MAAM,UAAU,MAAM,MAAM,YAAY,IAAI,OAAO,QAAQ,IAAI,IAAI,OAAO,QAAQ;GAClF,IAAI,CAAC,SACH,MAAM,IAAI,cAAc,UAAU,IAAI,OAAO,QAAQ;GAEvD,OAAO;EACT;CACF,CAAC;AACH"}

package/dist/http/routes/learn/downloads.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/learn/downloads.d.ts
+declare function learnDownloadsRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { learnDownloadsRoutes };
+//# sourceMappingURL=downloads.d.ts.map

package/dist/http/routes/learn/downloads.js

@@ -0,0 +1,76 @@
+import { UnauthorizedError } from "../../plugins/auth.js";
+import { ErrorBody } from "../../schemas/shared.js";
+import { DownloadAssetParams, DownloadIdParam } from "../../schemas/downloads.js";
+import { LearnDownload, LearnDownloads } from "../../schemas/learn.js";
+import "../../schemas/index.js";
+import { NotFoundError } from "@headless-lms/core/shared/errors";
+import { z } from "zod";
+//#region src/http/routes/learn/downloads.ts
+async function learnDownloadsRoutes(app, container) {
+	const r = app.withTypeProvider();
+	const learn = container.reporting.learn;
+	r.route({
+		method: "GET",
+		url: "/api/learn/downloads",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "listLearnDownloads",
+			tags: ["Learn"],
+			summary: "Downloads the student is actively entitled to",
+			response: { 200: LearnDownloads }
+		},
+		handler: async (req) => {
+			const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);
+			if (!orgUser) throw new UnauthorizedError();
+			return learn.listDownloads(req.orgId, orgUser.id);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/learn/downloads/:downloadId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getLearnDownload",
+			tags: ["Learn"],
+			summary: "One entitled download and its ordered assets",
+			params: DownloadIdParam,
+			response: {
+				200: LearnDownload,
+				404: ErrorBody
+			}
+		},
+		handler: async (req) => {
+			const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);
+			if (!orgUser) throw new UnauthorizedError();
+			const result = await learn.getDownload(req.orgId, orgUser.id, req.params.downloadId);
+			if (!result) throw new NotFoundError("Download", req.params.downloadId);
+			return result;
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/learn/downloads/:downloadId/assets/:assetId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getLearnDownloadAsset",
+			tags: ["Learn"],
+			summary: "Redirect to a short-lived signed URL for an entitled asset",
+			params: DownloadAssetParams,
+			response: {
+				302: z.void(),
+				404: ErrorBody
+			}
+		},
+		handler: async (req, reply) => {
+			const orgUser = await container.organizations.getOrgUser(req.orgId, req.userId);
+			if (!orgUser) throw new UnauthorizedError();
+			const signed = await learn.downloadAssetUrl(req.orgId, orgUser.id, req.params.downloadId, req.params.assetId);
+			if (!signed) throw new NotFoundError("Download asset", req.params.assetId);
+			return reply.header("cache-control", "no-store").header("referrer-policy", "no-referrer").redirect(signed.url, 302);
+		}
+	});
+}
+//#endregion
+export { learnDownloadsRoutes };
+
+//# sourceMappingURL=downloads.js.map