@headless-lms/server 0.2.0 → 0.3.0

package/dist/_virtual/_rolldown/runtime.js

@@ -0,0 +1,5 @@
+import { createRequire } from "node:module";
+//#region \0rolldown/runtime.js
+var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))();
+//#endregion
+export { __require };

package/dist/app/community-mail.d.ts

@@ -0,0 +1,26 @@
+import { ContentService } from "@headless-lms/core/content";
+import { EntitlementsService } from "@headless-lms/core/entitlements";
+import { ChatService, DiscussionService, PostService } from "@headless-lms/core/discussion";
+import { IdentityService } from "@headless-lms/core/identity";
+import { OrganizationService } from "@headless-lms/core/organizations";
+import { AssetsService } from "@headless-lms/core/assets";
+import { CommunityMailReads, GrantWriter, ScheduledWork } from "@headless-lms/core/automations";
+//#region src/app/community-mail.d.ts
+type CommunityMailDeps = {
+  content: Pick<ContentService, 'getCommunity' | 'getSpace' | 'listCommunitiesById'>;
+  entitlements: Pick<EntitlementsService, 'openSpacesFor' | 'communitiesOpenedBy' | 'communityMembersAmong' | 'spaceOpenersAmong' | 'spaceOpeners' | 'communityModeratorIds' | 'countActiveSpaceMembers' | 'communityIdsOpenedFor' | 'ensureGrant' | 'expireDue' | 'hasDueNotices'>;
+  organizations: Pick<OrganizationService, 'getOrgUserById' | 'staffOrgUserIds'>;
+  identity: Pick<IdentityService, 'displayName'>;
+  posts: Pick<PostService, 'followerIds' | 'find' | 'publishDue' | 'hasDue'>;
+  discussion: Pick<DiscussionService, 'getComment' | 'sendDigest'>;
+  chats: Pick<ChatService, 'chatSummary' | 'latestMessageBody' | 'isBlocked'>;
+  assets: Pick<AssetsService, 'removeUnattached' | 'hasUnattached'>;
+};
+declare function communityMail(deps: CommunityMailDeps): {
+  mail: Omit<CommunityMailReads, 'recentMessageRecipients'>;
+  grants: GrantWriter;
+  scheduledWork: ScheduledWork;
+};
+//#endregion
+export { CommunityMailDeps, communityMail };
+//# sourceMappingURL=community-mail.d.ts.map

package/dist/app/community-mail.js

@@ -0,0 +1,96 @@
+//#region src/app/community-mail.ts
+function communityMail(deps) {
+	return {
+		mail: {
+			async communityTitle(orgId, communityId) {
+				return (await deps.content.getCommunity(orgId, communityId))?.title ?? null;
+			},
+			async space(orgId, spaceId) {
+				const space = await deps.content.getSpace(orgId, spaceId);
+				return space ? {
+					name: space.name,
+					communityId: space.communityId,
+					capacity: space.capacity
+				} : null;
+			},
+			async openSpaceNames(orgId, orgUserId, communityId) {
+				const orgUser = await deps.organizations.getOrgUserById(orgId, orgUserId);
+				if (!orgUser) return [];
+				return (await deps.entitlements.openSpacesFor(orgId, {
+					id: orgUser.id,
+					role: orgUser.role
+				}, communityId)).map((space) => space.name);
+			},
+			communitiesOpenedBy: (orgId, grant) => deps.entitlements.communitiesOpenedBy(orgId, grant),
+			communityMembersAmong: (orgId, communityId, ids) => deps.entitlements.communityMembersAmong(orgId, communityId, ids),
+			spaceOpenersAmong: (orgId, spaceId, ids) => deps.entitlements.spaceOpenersAmong(orgId, spaceId, ids),
+			spaceOpeners: (orgId, spaceId) => deps.entitlements.spaceOpeners(orgId, spaceId),
+			moderationAudience: (orgId, communityId) => deps.entitlements.communityModeratorIds(orgId, communityId),
+			staffIds: (orgId) => deps.organizations.staffOrgUserIds(orgId),
+			async displayName(orgId, orgUserId) {
+				const orgUser = await deps.organizations.getOrgUserById(orgId, orgUserId);
+				return deps.identity.displayName(orgUser?.userId ?? null);
+			},
+			followerIds: (orgId, postId) => deps.posts.followerIds(orgId, postId),
+			async comment(orgId, commentId) {
+				const comment = await deps.discussion.getComment(orgId, commentId);
+				return comment ? {
+					orgUserId: comment.orgUserId,
+					postId: comment.postId,
+					body: comment.body
+				} : null;
+			},
+			async post(orgId, postId) {
+				const post = await deps.posts.find(orgId, postId);
+				return post ? {
+					title: post.title,
+					body: post.body,
+					spaceId: post.spaceId,
+					orgUserId: post.orgUserId,
+					communityId: post.communityId
+				} : null;
+			},
+			async chat(orgId, chatId) {
+				const summary = await deps.chats.chatSummary(orgId, chatId);
+				return summary ? {
+					communityId: summary.chat.communityId,
+					kind: summary.chat.kind,
+					status: summary.chat.status,
+					createdBy: summary.chat.createdBy,
+					participants: summary.participants.map((participant) => ({
+						orgUserId: participant.orgUserId,
+						muted: participant.muted,
+						mutedUntil: participant.mutedUntil,
+						leftAt: participant.leftAt
+					}))
+				} : null;
+			},
+			latestMessageBody: (orgId, chatId) => deps.chats.latestMessageBody(orgId, chatId),
+			pairBlocked: (orgId, communityId, a, b) => deps.chats.isBlocked(orgId, communityId, a, b),
+			activeMemberCount: (orgId, spaceId) => deps.entitlements.countActiveSpaceMembers(orgId, spaceId),
+			async memberCommunityTitles(orgId, orgUserId) {
+				const ids = await deps.entitlements.communityIdsOpenedFor(orgId, orgUserId);
+				return (await deps.content.listCommunitiesById(orgId, ids)).map((community) => ({
+					id: community.id,
+					title: community.title
+				}));
+			}
+		},
+		grants: { grant: (orgId, input) => deps.entitlements.ensureGrant(orgId, input) },
+		scheduledWork: {
+			publishDuePosts: (orgId, now) => deps.posts.publishDue(orgId, now),
+			hasDuePosts: (orgId, now) => deps.posts.hasDue(orgId, now),
+			expireDueGrants: (orgId, now) => deps.entitlements.expireDue(orgId, now),
+			hasDueGrants: (orgId, now) => deps.entitlements.hasDueNotices(orgId, now),
+			sendDigest: (orgId, now) => deps.discussion.sendDigest(orgId, now),
+			removeUnattachedUploads: async (orgId, now) => {
+				await deps.assets.removeUnattached(orgId, now);
+			},
+			hasUnattachedUploads: (orgId, now) => deps.assets.hasUnattached(orgId, now)
+		}
+	};
+}
+//#endregion
+export { communityMail };
+
+//# sourceMappingURL=community-mail.js.map

package/dist/app/community-mail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"community-mail.js","names":[],"sources":["../../src/app/community-mail.ts"],"sourcesContent":["import type { AssetsService } from '@headless-lms/core/assets';\nimport type {\n  CommunityMailReads,\n  GrantWriter,\n  ScheduledWork,\n} from '@headless-lms/core/automations';\nimport type { ContentService } from '@headless-lms/core/content';\nimport type { ChatService, DiscussionService, PostService } from '@headless-lms/core/discussion';\nimport type { EntitlementsService } from '@headless-lms/core/entitlements';\nimport type { IdentityService } from '@headless-lms/core/identity';\nimport type { OrganizationService } from '@headless-lms/core/organizations';\n\nexport type CommunityMailDeps = {\n  content: Pick<ContentService, 'getCommunity' | 'getSpace' | 'listCommunitiesById'>;\n  entitlements: Pick<\n    EntitlementsService,\n    | 'openSpacesFor'\n    | 'communitiesOpenedBy'\n    | 'communityMembersAmong'\n    | 'spaceOpenersAmong'\n    | 'spaceOpeners'\n    | 'communityModeratorIds'\n    | 'countActiveSpaceMembers'\n    | 'communityIdsOpenedFor'\n    | 'ensureGrant'\n    | 'expireDue'\n    | 'hasDueNotices'\n  >;\n  organizations: Pick<OrganizationService, 'getOrgUserById' | 'staffOrgUserIds'>;\n  identity: Pick<IdentityService, 'displayName'>;\n  posts: Pick<PostService, 'followerIds' | 'find' | 'publishDue' | 'hasDue'>;\n  discussion: Pick<DiscussionService, 'getComment' | 'sendDigest'>;\n  chats: Pick<ChatService, 'chatSummary' | 'latestMessageBody' | 'isBlocked'>;\n  assets: Pick<AssetsService, 'removeUnattached' | 'hasUnattached'>;\n};\n\nexport function communityMail(deps: CommunityMailDeps): {\n  mail: Omit<CommunityMailReads, 'recentMessageRecipients'>;\n  grants: GrantWriter;\n  scheduledWork: ScheduledWork;\n} {\n  const mail: Omit<CommunityMailReads, 'recentMessageRecipients'> = {\n    async communityTitle(orgId, communityId) {\n      return (await deps.content.getCommunity(orgId, communityId))?.title ?? null;\n    },\n    async space(orgId, spaceId) {\n      const space = await deps.content.getSpace(orgId, spaceId);\n      return space\n        ? { name: space.name, communityId: space.communityId, capacity: space.capacity }\n        : null;\n    },\n    async openSpaceNames(orgId, orgUserId, communityId) {\n      const orgUser = await deps.organizations.getOrgUserById(orgId, orgUserId);\n      if (!orgUser) {\n        return [];\n      }\n      const spaces = await deps.entitlements.openSpacesFor(\n        orgId,\n        { id: orgUser.id, role: orgUser.role },\n        communityId,\n      );\n      return spaces.map((space) => space.name);\n    },\n    communitiesOpenedBy: (orgId, grant) => deps.entitlements.communitiesOpenedBy(orgId, grant),\n    communityMembersAmong: (orgId, communityId, ids) =>\n      deps.entitlements.communityMembersAmong(orgId, communityId, ids),\n    spaceOpenersAmong: (orgId, spaceId, ids) =>\n      deps.entitlements.spaceOpenersAmong(orgId, spaceId, ids),\n    spaceOpeners: (orgId, spaceId) => deps.entitlements.spaceOpeners(orgId, spaceId),\n    moderationAudience: (orgId, communityId) =>\n      deps.entitlements.communityModeratorIds(orgId, communityId),\n    staffIds: (orgId) => deps.organizations.staffOrgUserIds(orgId),\n    async displayName(orgId, orgUserId) {\n      const orgUser = await deps.organizations.getOrgUserById(orgId, orgUserId);\n      return deps.identity.displayName(orgUser?.userId ?? null);\n    },\n    followerIds: (orgId, postId) => deps.posts.followerIds(orgId, postId),\n    async comment(orgId, commentId) {\n      const comment = await deps.discussion.getComment(orgId, commentId);\n      return comment\n        ? { orgUserId: comment.orgUserId, postId: comment.postId, body: comment.body }\n        : null;\n    },\n    async post(orgId, postId) {\n      const post = await deps.posts.find(orgId, postId);\n      return post\n        ? {\n            title: post.title,\n            body: post.body,\n            spaceId: post.spaceId,\n            orgUserId: post.orgUserId,\n            communityId: post.communityId,\n          }\n        : null;\n    },\n    async chat(orgId, chatId) {\n      const summary = await deps.chats.chatSummary(orgId, chatId);\n      return summary\n        ? {\n            communityId: summary.chat.communityId,\n            kind: summary.chat.kind,\n            status: summary.chat.status,\n            createdBy: summary.chat.createdBy,\n            participants: summary.participants.map((participant) => ({\n              orgUserId: participant.orgUserId,\n              muted: participant.muted,\n              mutedUntil: participant.mutedUntil,\n              leftAt: participant.leftAt,\n            })),\n          }\n        : null;\n    },\n    latestMessageBody: (orgId, chatId) => deps.chats.latestMessageBody(orgId, chatId),\n    pairBlocked: (orgId, communityId, a, b) => deps.chats.isBlocked(orgId, communityId, a, b),\n    activeMemberCount: (orgId, spaceId) =>\n      deps.entitlements.countActiveSpaceMembers(orgId, spaceId),\n    async memberCommunityTitles(orgId, orgUserId) {\n      const ids = await deps.entitlements.communityIdsOpenedFor(orgId, orgUserId);\n      const communities = await deps.content.listCommunitiesById(orgId, ids);\n      return communities.map((community) => ({ id: community.id, title: community.title }));\n    },\n  };\n  return {\n    mail,\n    grants: {\n      grant: (orgId, input) => deps.entitlements.ensureGrant(orgId, input),\n    },\n    scheduledWork: {\n      publishDuePosts: (orgId, now) => deps.posts.publishDue(orgId, now),\n      hasDuePosts: (orgId, now) => deps.posts.hasDue(orgId, now),\n      expireDueGrants: (orgId, now) => deps.entitlements.expireDue(orgId, now),\n      hasDueGrants: (orgId, now) => deps.entitlements.hasDueNotices(orgId, now),\n      sendDigest: (orgId, now) => deps.discussion.sendDigest(orgId, now),\n      removeUnattachedUploads: async (orgId, now) => {\n        await deps.assets.removeUnattached(orgId, now);\n      },\n      hasUnattachedUploads: (orgId, now) => deps.assets.hasUnattached(orgId, now),\n    },\n  };\n}\n"],"mappings":";AAoCA,SAAgB,cAAc,MAI5B;CAkFA,OAAO;EACL,MAAA;GAjFA,MAAM,eAAe,OAAO,aAAa;IACvC,QAAQ,MAAM,KAAK,QAAQ,aAAa,OAAO,WAAW,EAAA,EAAI,SAAS;GACzE;GACA,MAAM,MAAM,OAAO,SAAS;IAC1B,MAAM,QAAQ,MAAM,KAAK,QAAQ,SAAS,OAAO,OAAO;IACxD,OAAO,QACH;KAAE,MAAM,MAAM;KAAM,aAAa,MAAM;KAAa,UAAU,MAAM;IAAS,IAC7E;GACN;GACA,MAAM,eAAe,OAAO,WAAW,aAAa;IAClD,MAAM,UAAU,MAAM,KAAK,cAAc,eAAe,OAAO,SAAS;IACxE,IAAI,CAAC,SACH,OAAO,CAAC;IAOV,QAAO,MALc,KAAK,aAAa,cACrC,OACA;KAAE,IAAI,QAAQ;KAAI,MAAM,QAAQ;IAAK,GACrC,WACF,EAAA,CACc,KAAK,UAAU,MAAM,IAAI;GACzC;GACA,sBAAsB,OAAO,UAAU,KAAK,aAAa,oBAAoB,OAAO,KAAK;GACzF,wBAAwB,OAAO,aAAa,QAC1C,KAAK,aAAa,sBAAsB,OAAO,aAAa,GAAG;GACjE,oBAAoB,OAAO,SAAS,QAClC,KAAK,aAAa,kBAAkB,OAAO,SAAS,GAAG;GACzD,eAAe,OAAO,YAAY,KAAK,aAAa,aAAa,OAAO,OAAO;GAC/E,qBAAqB,OAAO,gBAC1B,KAAK,aAAa,sBAAsB,OAAO,WAAW;GAC5D,WAAW,UAAU,KAAK,cAAc,gBAAgB,KAAK;GAC7D,MAAM,YAAY,OAAO,WAAW;IAClC,MAAM,UAAU,MAAM,KAAK,cAAc,eAAe,OAAO,SAAS;IACxE,OAAO,KAAK,SAAS,YAAY,SAAS,UAAU,IAAI;GAC1D;GACA,cAAc,OAAO,WAAW,KAAK,MAAM,YAAY,OAAO,MAAM;GACpE,MAAM,QAAQ,OAAO,WAAW;IAC9B,MAAM,UAAU,MAAM,KAAK,WAAW,WAAW,OAAO,SAAS;IACjE,OAAO,UACH;KAAE,WAAW,QAAQ;KAAW,QAAQ,QAAQ;KAAQ,MAAM,QAAQ;IAAK,IAC3E;GACN;GACA,MAAM,KAAK,OAAO,QAAQ;IACxB,MAAM,OAAO,MAAM,KAAK,MAAM,KAAK,OAAO,MAAM;IAChD,OAAO,OACH;KACE,OAAO,KAAK;KACZ,MAAM,KAAK;KACX,SAAS,KAAK;KACd,WAAW,KAAK;KAChB,aAAa,KAAK;IACpB,IACA;GACN;GACA,MAAM,KAAK,OAAO,QAAQ;IACxB,MAAM,UAAU,MAAM,KAAK,MAAM,YAAY,OAAO,MAAM;IAC1D,OAAO,UACH;KACE,aAAa,QAAQ,KAAK;KAC1B,MAAM,QAAQ,KAAK;KACnB,QAAQ,QAAQ,KAAK;KACrB,WAAW,QAAQ,KAAK;KACxB,cAAc,QAAQ,aAAa,KAAK,iBAAiB;MACvD,WAAW,YAAY;MACvB,OAAO,YAAY;MACnB,YAAY,YAAY;MACxB,QAAQ,YAAY;KACtB,EAAE;IACJ,IACA;GACN;GACA,oBAAoB,OAAO,WAAW,KAAK,MAAM,kBAAkB,OAAO,MAAM;GAChF,cAAc,OAAO,aAAa,GAAG,MAAM,KAAK,MAAM,UAAU,OAAO,aAAa,GAAG,CAAC;GACxF,oBAAoB,OAAO,YACzB,KAAK,aAAa,wBAAwB,OAAO,OAAO;GAC1D,MAAM,sBAAsB,OAAO,WAAW;IAC5C,MAAM,MAAM,MAAM,KAAK,aAAa,sBAAsB,OAAO,SAAS;IAE1E,QAAO,MADmB,KAAK,QAAQ,oBAAoB,OAAO,GAAG,EAAA,CAClD,KAAK,eAAe;KAAE,IAAI,UAAU;KAAI,OAAO,UAAU;IAAM,EAAE;GACtF;EAGG;EACH,QAAQ,EACN,QAAQ,OAAO,UAAU,KAAK,aAAa,YAAY,OAAO,KAAK,EACrE;EACA,eAAe;GACb,kBAAkB,OAAO,QAAQ,KAAK,MAAM,WAAW,OAAO,GAAG;GACjE,cAAc,OAAO,QAAQ,KAAK,MAAM,OAAO,OAAO,GAAG;GACzD,kBAAkB,OAAO,QAAQ,KAAK,aAAa,UAAU,OAAO,GAAG;GACvE,eAAe,OAAO,QAAQ,KAAK,aAAa,cAAc,OAAO,GAAG;GACxE,aAAa,OAAO,QAAQ,KAAK,WAAW,WAAW,OAAO,GAAG;GACjE,yBAAyB,OAAO,OAAO,QAAQ;IAC7C,MAAM,KAAK,OAAO,iBAAiB,OAAO,GAAG;GAC/C;GACA,uBAAuB,OAAO,QAAQ,KAAK,OAAO,cAAc,OAAO,GAAG;EAC5E;CACF;AACF"}

package/dist/app/container.d.ts

@@ -1,19 +1,18 @@
+import { McpEndpoints } from "./mcp-endpoints.js";
 import { PollingOutboxRelayConfig } from "@headless-lms/adapter-defaults/events/outbox-relay";
 import { LogLevel, PinoInstance, RequestLogContext } from "@headless-lms/adapter-defaults/logging";
 import { BetterAuth } from "@headless-lms/adapter-auth";
 import { ContentService } from "@headless-lms/core/content";
 import { EntitlementsServiceImpl } from "@headless-lms/core/entitlements";
 import { ProgressServiceImpl } from "@headless-lms/core/progress";
-import { DiscussionServiceImpl } from "@headless-lms/core/discussion";
-import { IdentityServiceImpl, SessionAdmin } from "@headless-lms/core/identity";
+import { ChatServiceImpl, DiscussionServiceImpl, PostServiceImpl } from "@headless-lms/core/discussion";
+import { IdentityServiceImpl, NotificationServiceImpl, SessionAdmin } from "@headless-lms/core/identity";
 import { OrgAdmin, OrganizationServiceImpl } from "@headless-lms/core/organizations";
 import { AssetsServiceImpl } from "@headless-lms/core/assets";
 import { IntegrationsServiceImpl } from "@headless-lms/core/integrations";
 import { AutomationsServiceImpl } from "@headless-lms/core/automations";
-import { StudentsReportServiceImpl } from "@headless-lms/core/reporting/students";
-import { DashboardReportServiceImpl } from "@headless-lms/core/reporting/dashboard";
-import { CoursesReportServiceImpl } from "@headless-lms/core/reporting/courses";
-import { LearnReportServiceImpl } from "@headless-lms/core/reporting/learn";
+import { AdminReportServiceImpl } from "@headless-lms/core/reporting/admin";
+import { MemberReportServiceImpl } from "@headless-lms/core/reporting/member";
 import { Mailer } from "@headless-lms/core/shared/mailer";
 import { SettingsService } from "@headless-lms/core/shared/settings";
 import { AutomationEngine, WebhookSender } from "@headless-lms/core/types";
@@ -25,9 +24,9 @@ interface AdapterOverrides {
   storage?: ObjectStorage;
   /** Resolves email templates to rendered content. Absent → fail-loudly stub. */
   templates?: TemplateRenderer;
-  /** Durable automation engine. Absent → InlineAutomationEngine (in-process, one attempt per action). */
-  workflows?: AutomationEngine;
-  /** Outbound HTTP for webhook deliveries. Absent → FetchWebhookSender (fetch, 10s timeout). */
+  /** Durable automation engine, or a factory given the automations logger. Absent → InlineAutomationEngine (in-process, one attempt per action). */
+  workflows?: AutomationEngine | ((logger: Logger) => AutomationEngine);
+  /** Outbound HTTP for webhook deliveries. Absent → FetchWebhookSender (public addresses only, 10s timeout). */
   webhooks?: WebhookSender;
 }
 interface BuildContainerOptions {
@@ -57,9 +56,12 @@ interface Config {
   outbox?: OutboxConfig;
   /** Log level for the process-wide logger (HTTP + domain + relay). Default "info". */
   logging?: LoggingConfig;
-  /** Presigned URL lifetime for entitled download delivery, seconds. Mirrors
+  /** Lifetime of every signed file URL a response carries, seconds. Mirrors
    *  ServerConfig.deliveryExpirySeconds — createContainer threads it through. */
   deliveryExpirySeconds: number;
+  memberImageMaxBytes: number;
+  /** Let the default webhook sender reach loopback and private network addresses. Local development only. */
+  webhookAllowPrivateNetwork?: boolean;
 }
 /** Tuning for the transactional-outbox relay. Every field is optional; the
  *  container resolves against OUTBOX_DEFAULTS. */
@@ -82,13 +84,17 @@ declare const LOGGING_DEFAULTS: Required<LoggingConfig>;
 declare function resolveLoggingConfig(config?: LoggingConfig): Required<LoggingConfig>;
 interface Container {
   auth: BetterAuth;
+  mcp: McpEndpoints;
   orgProvider: OrgAdmin;
   identity: IdentityServiceImpl;
+  notifications: NotificationServiceImpl;
   organizations: OrganizationServiceImpl;
   content: ContentService;
   entitlements: EntitlementsServiceImpl;
   progress: ProgressServiceImpl;
   discussion: DiscussionServiceImpl;
+  posts: PostServiceImpl;
+  chats: ChatServiceImpl;
   assets: AssetsServiceImpl;
   integrations: IntegrationsServiceImpl;
   automations: AutomationsServiceImpl;
@@ -96,10 +102,8 @@ interface Container {
    *  inject `settings.for('<namespace>')` into a service, never the service itself. */
   settings: SettingsService;
   reporting: {
-    students: StudentsReportServiceImpl;
-    dashboard: DashboardReportServiceImpl;
-    courses: CoursesReportServiceImpl;
-    learn: LearnReportServiceImpl;
+    admin: AdminReportServiceImpl;
+    member: MemberReportServiceImpl;
   };
   storage: ObjectStorage;
   mailer: Mailer;

package/dist/app/container.js

@@ -1,6 +1,7 @@
 import { loadIntegrations } from "./integrations.js";
-import { registerNotificationSubscribers } from "./notifications.js";
-import { DrizzleAssetsRepository, DrizzleAutomationRunsRepository, DrizzleAutomationsRepository, DrizzleConnectionsRepository, DrizzleContentRepository, DrizzleCourseAnalyticsRepository, DrizzleCredentialStore, DrizzleDashboardRepository, DrizzleDiscussionRepository, DrizzleEntitlementsRepository, DrizzleIdentityRepository, DrizzleLearnRepository, DrizzleMembersRepository, DrizzleOrganizationsRepository, DrizzleOutboxAppender, DrizzleOutboxStore, DrizzleProgressRepository, DrizzleSettingsRepository, DrizzleStudentsRepository, DrizzleUnitOfWork, createDb } from "@headless-lms/adapter-db";
+import { mcpEndpoints } from "./mcp-endpoints.js";
+import { communityMail } from "./community-mail.js";
+import { DrizzleAdminRepository, DrizzleAssetsRepository, DrizzleAutomationRunsRepository, DrizzleAutomationsRepository, DrizzleChatRepository, DrizzleConnectionsRepository, DrizzleContentRepository, DrizzleCredentialStore, DrizzleDiscussionRepository, DrizzleEntitlementsRepository, DrizzleIdentityRepository, DrizzleMemberRepository, DrizzleMembersRepository, DrizzleNotificationsRepository, DrizzleOrganizationsRepository, DrizzleOutboxAppender, DrizzleOutboxStore, DrizzlePostRepository, DrizzleProgressRepository, DrizzleSettingsRepository, DrizzleUnitOfWork, createDb } from "@headless-lms/adapter-db";
 import { InMemoryEventBus } from "@headless-lms/adapter-defaults/events";
 import { PollingOutboxRelay } from "@headless-lms/adapter-defaults/events/outbox-relay";
 import { InlineAutomationEngine } from "@headless-lms/adapter-defaults/workflows";
@@ -12,16 +13,14 @@ import { BetterAuth } from "@headless-lms/adapter-auth";
 import { ContentService } from "@headless-lms/core/content";
 import { EntitlementsServiceImpl } from "@headless-lms/core/entitlements";
 import { ProgressServiceImpl } from "@headless-lms/core/progress";
-import { DiscussionServiceImpl } from "@headless-lms/core/discussion";
-import { IdentityServiceImpl } from "@headless-lms/core/identity";
+import { ChatServiceImpl, DiscussionServiceImpl, PostServiceImpl } from "@headless-lms/core/discussion";
+import { IdentityServiceImpl, NotificationServiceImpl } from "@headless-lms/core/identity";
 import { OrganizationServiceImpl, parseRole } from "@headless-lms/core/organizations";
-import { AssetsServiceImpl } from "@headless-lms/core/assets";
+import { AssetsServiceImpl, createFileUrls } from "@headless-lms/core/assets";
 import { IntegrationsServiceImpl } from "@headless-lms/core/integrations";
 import { AutomationsServiceImpl } from "@headless-lms/core/automations";
-import { StudentsReportServiceImpl } from "@headless-lms/core/reporting/students";
-import { DashboardReportServiceImpl } from "@headless-lms/core/reporting/dashboard";
-import { CoursesReportServiceImpl } from "@headless-lms/core/reporting/courses";
-import { LearnReportServiceImpl } from "@headless-lms/core/reporting/learn";
+import { AdminReportServiceImpl } from "@headless-lms/core/reporting/admin";
+import { MemberReportServiceImpl } from "@headless-lms/core/reporting/member";
 import { Mailer } from "@headless-lms/core/shared/mailer";
 import { SettingsService } from "@headless-lms/core/shared/settings";
 //#region src/app/container.ts
@@ -56,7 +55,8 @@ async function buildContainer(config, options) {
 	const email = options?.adapters?.email ?? new EmailAdapter(logger.child({ name: "email" }));
 	const storage = options?.adapters?.storage ?? new StorageAdapter(logger.child({ name: "storage" }));
 	const templates = options?.adapters?.templates ?? new StubTemplateRenderer(logger.child({ name: "email" }));
-	const automationEngine = options?.adapters?.workflows ?? new InlineAutomationEngine();
+	const workflows = options?.adapters?.workflows;
+	const automationEngine = typeof workflows === "function" ? workflows(automationsLogger) : workflows ?? new InlineAutomationEngine(automationsLogger);
 	const mailer = new Mailer(templates, email, {
 		...config.emailBranding ?? {
 			brandName: "Headless LMS",
@@ -64,6 +64,19 @@ async function buildContainer(config, options) {
 		},
 		studentPortalUrl: config.studentPortalUrl
 	});
+	const fileUrls = createFileUrls(config.authBaseURL);
+	const assets = new AssetsServiceImpl({
+		storage,
+		repo: new DrizzleAssetsRepository(db, assetsLogger),
+		uow: new DrizzleUnitOfWork(db, (tx) => ({
+			assets: new DrizzleAssetsRepository(tx, assetsLogger),
+			outbox: new DrizzleOutboxAppender(tx, outboxLogger)
+		})),
+		memberImageMaxBytes: config.memberImageMaxBytes,
+		downloadLinkExpirySeconds: config.deliveryExpirySeconds,
+		fileUrls,
+		logger: assetsLogger
+	});
 	const identityUoW = new DrizzleUnitOfWork(db, (tx) => ({
 		identity: new DrizzleIdentityRepository(tx, logger.child({ name: "identity" })),
 		outbox: new DrizzleOutboxAppender(tx, logger.child({ name: "identity" }))
@@ -72,15 +85,22 @@ async function buildContainer(config, options) {
 		repo: new DrizzleIdentityRepository(db, logger.child({ name: "identity_repo" })),
 		logger: logger.child({ name: "identity" }),
 		uow: identityUoW,
-		mailer
+		mailer,
+		images: assets,
+		fileUrls
+	});
+	const notifications = new NotificationServiceImpl({
+		repo: new DrizzleNotificationsRepository(db),
+		logger: logger.child({ name: "notifications" })
 	});
+	const organizationsRepo = new DrizzleOrganizationsRepository(db, logger.child({ name: "org" }));
 	const organizationsUow = new DrizzleUnitOfWork(db, (tx) => ({
 		organizations: new DrizzleOrganizationsRepository(tx, logger.child({ name: "org" })),
 		outbox: new DrizzleOutboxAppender(tx, logger.child({ name: "org" }))
 	}));
 	const orgAdminRef = { current: void 0 };
 	const organizations = new OrganizationServiceImpl({
-		repo: new DrizzleOrganizationsRepository(db, logger.child({ name: "org" })),
+		repo: organizationsRepo,
 		membersRepo: new DrizzleMembersRepository(db, logger.child({ name: "org" })),
 		people: identity,
 		uow: organizationsUow,
@@ -103,14 +123,28 @@ async function buildContainer(config, options) {
 	const content = new ContentService({
 		repo: new DrizzleContentRepository(db, contentLogger),
 		uow: contentUow,
+		libraryAssets: assets,
+		files: assets,
+		fileUrls,
 		logger: contentLogger
 	});
 	const entitlementsUow = new DrizzleUnitOfWork(db, (tx) => ({
 		entitlements: new DrizzleEntitlementsRepository(tx, entitlementsLogger),
+		spaces: new DrizzleContentRepository(tx, contentLogger),
 		outbox: new DrizzleOutboxAppender(tx, outboxLogger)
 	}));
+	const authors = {
+		roleOf: async (orgId, orgUserId) => {
+			return (await organizationsRepo.findOrgUserById(orgId, orgUserId))?.role ?? null;
+		},
+		rolesOf: async (orgId, orgUserIds) => {
+			const rows = await organizationsRepo.findOrgUsersByIds(orgId, orgUserIds);
+			return Object.fromEntries(rows.map((row) => [row.id, row.role]));
+		}
+	};
 	const entitlements = new EntitlementsServiceImpl({
 		repo: new DrizzleEntitlementsRepository(db, entitlementsLogger),
+		content,
 		uow: entitlementsUow,
 		logger: entitlementsLogger
 	});
@@ -121,49 +155,68 @@ async function buildContainer(config, options) {
 	const progress = new ProgressServiceImpl({
 		repo: new DrizzleProgressRepository(db, progressLogger),
 		content,
+		access: entitlements,
 		uow: progressUow,
 		logger: progressLogger
 	});
-	const discussion = new DiscussionServiceImpl({
-		repo: new DrizzleDiscussionRepository(db, discussionLogger),
+	const postReads = new DrizzlePostRepository(db, discussionLogger);
+	const discussionReads = new DrizzleDiscussionRepository(db, discussionLogger);
+	const chatReads = new DrizzleChatRepository(db, discussionLogger);
+	const posts = new PostServiceImpl({
+		repo: postReads,
 		access: entitlements,
 		content,
+		authors,
+		profiles: discussionReads,
+		comments: discussionReads,
+		images: assets,
+		fileUrls,
 		uow: new DrizzleUnitOfWork(db, (tx) => ({
-			discussion: new DrizzleDiscussionRepository(tx, discussionLogger),
+			posts: new DrizzlePostRepository(tx, discussionLogger),
 			outbox: new DrizzleOutboxAppender(tx, outboxLogger)
 		})),
-		settings,
 		logger: discussionLogger
 	});
-	const assets = new AssetsServiceImpl({
-		storage,
-		repo: new DrizzleAssetsRepository(db, assetsLogger),
+	const chats = new ChatServiceImpl({
+		repo: chatReads,
+		access: entitlements,
+		content,
+		authors,
+		profiles: discussionReads,
+		images: assets,
+		fileUrls,
 		uow: new DrizzleUnitOfWork(db, (tx) => ({
-			assets: new DrizzleAssetsRepository(tx, assetsLogger),
+			chats: new DrizzleChatRepository(tx, discussionLogger),
 			outbox: new DrizzleOutboxAppender(tx, outboxLogger)
 		})),
-		logger: assetsLogger
+		logger: discussionLogger
+	});
+	const discussion = new DiscussionServiceImpl({
+		repo: discussionReads,
+		access: entitlements,
+		content,
+		posts,
+		communities: { listIds: (orgId) => content.listPublishedCommunityIds(orgId) },
+		fileUrls,
+		uow: new DrizzleUnitOfWork(db, (tx) => ({
+			discussion: new DrizzleDiscussionRepository(tx, discussionLogger),
+			outbox: new DrizzleOutboxAppender(tx, outboxLogger)
+		})),
+		settings,
+		logger: discussionLogger
 	});
 	const reporting = {
-		students: new StudentsReportServiceImpl({
-			repo: new DrizzleStudentsRepository(db, reportingLogger),
-			logger: reportingLogger
-		}),
-		dashboard: new DashboardReportServiceImpl({
-			repo: new DrizzleDashboardRepository(db, reportingLogger),
-			logger: reportingLogger
-		}),
-		courses: new CoursesReportServiceImpl({
-			repo: new DrizzleCourseAnalyticsRepository(db, reportingLogger),
-			logger: reportingLogger
-		}),
-		learn: new LearnReportServiceImpl({
-			reader: new DrizzleLearnRepository(db, reportingLogger),
+		admin: new AdminReportServiceImpl({ repo: new DrizzleAdminRepository(db, reportingLogger) }),
+		member: new MemberReportServiceImpl({
+			repo: new DrizzleMemberRepository(db, reportingLogger),
 			content,
 			progress,
-			assets,
-			deliveryExpirySeconds: config.deliveryExpirySeconds,
-			logger: reportingLogger
+			files: assets,
+			fileUrls,
+			access: entitlements,
+			notifications,
+			posts,
+			chats
 		})
 	};
 	const credentialStore = new DrizzleCredentialStore(db, config.credentialStoreKey, integrationsLogger);
@@ -187,7 +240,14 @@ async function buildContainer(config, options) {
 		outbox: new DrizzleOutboxAppender(tx, automationsLogger)
 	}));
 	const mailerLookups = {
-		orgUserEmail: async (orgId, orgUserId) => (await reporting.students.get(orgId, orgUserId))?.email ?? null,
+		orgUserPerson: async (orgId, orgUserId) => {
+			const orgUser = await organizationsRepo.findOrgUserById(orgId, orgUserId);
+			const user = orgUser ? await identity.getUserById(orgUser.userId) : null;
+			return user ? {
+				userId: user.id,
+				email: user.email
+			} : null;
+		},
 		contentInfo: async (orgId, contentId) => {
 			const course = await content.getCourse(orgId, contentId);
 			if (course) return {
@@ -196,28 +256,48 @@ async function buildContainer(config, options) {
 				type: course.type
 			};
 			const download = await content.getDownload(orgId, contentId);
-			return download ? {
+			if (download) return {
 				id: download.id,
 				title: download.title,
 				type: download.type
+			};
+			const community = await content.getCommunity(orgId, contentId);
+			return community ? {
+				id: community.id,
+				title: community.title,
+				type: community.type
 			} : null;
 		}
 	};
+	const runsRepo = new DrizzleAutomationRunsRepository(db, automationsLogger);
+	const wired = communityMail({
+		content,
+		entitlements,
+		organizations,
+		identity,
+		posts,
+		discussion,
+		chats,
+		assets
+	});
 	const automations = new AutomationsServiceImpl({
 		repo: new DrizzleAutomationsRepository(db, automationsLogger),
-		runsRepo: new DrizzleAutomationRunsRepository(db, automationsLogger),
+		runsRepo,
 		uow: automationsUow,
 		engine: automationEngine,
 		mailer,
 		lookups: mailerLookups,
 		integrations,
 		credentials: credentialStore,
-		webhooks: options?.adapters?.webhooks ?? new FetchWebhookSender(),
+		webhooks: options?.adapters?.webhooks ?? new FetchWebhookSender({ allowPrivateNetwork: config.webhookAllowPrivateNetwork }),
+		mail: wired.mail,
+		grants: wired.grants,
+		desk: notifications,
+		scheduledWork: wired.scheduledWork,
 		logger: automationsLogger
 	});
 	automationEngine.register(automations);
 	const eventBus = new InMemoryEventBus();
-	registerNotificationSubscribers(eventBus, mailer, mailerLookups);
 	eventBus.subscribeAll((event) => automations.handle(event));
 	const outboxConfig = resolveOutboxConfig(config.outbox);
 	const outboxRelay = new PollingOutboxRelay(new DrizzleOutboxStore(db, outboxLogger), eventBus, outboxConfig, outboxLogger);
@@ -230,9 +310,18 @@ async function buildContainer(config, options) {
 			throw err;
 		}
 	};
+	const mcp = mcpEndpoints(config);
+	if (!mcp.oauthEnabled) authLogger.warn("MCP OAuth is off: BETTER_AUTH_URL must be https or a loopback host; /mcp accepts API keys only", { authBaseURL: config.authBaseURL });
 	const auth = new BetterAuth({
 		db,
 		baseUrl: config.authBaseURL,
+		mcp: {
+			oauthEnabled: mcp.oauthEnabled,
+			resource: mcp.resource,
+			loginPage: mcp.loginPage,
+			consentPage: mcp.consentPage,
+			orgPickerPage: mcp.orgPickerPage
+		},
 		secret: config.authSecret,
 		trustedOrigins: config.trustedOrigins,
 		hooks: {
@@ -314,13 +403,17 @@ async function buildContainer(config, options) {
 	orgAdminRef.current = auth;
 	return {
 		auth,
+		mcp,
 		identity,
+		notifications,
 		organizations,
 		orgProvider: auth,
 		content,
 		entitlements,
 		progress,
 		discussion,
+		posts,
+		chats,
 		assets,
 		integrations,
 		automations,