@headless-lms/server 0.2.0 → 0.3.0

package/dist/http/routes/member/courses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"courses.js","names":[],"sources":["../../../../src/http/routes/member/courses.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport {\n  ActivityList,\n  Course,\n  MemberCourseIdParam,\n  MemberCourses,\n  MemberModules,\n  refusals,\n} from '../../schemas/index.js';\nimport { NotFoundError } from '@headless-lms/core/shared/errors';\nimport type { Container } from '../../../app/container.js';\nimport { actorOf } from './actor.js';\n\nexport async function memberCoursesRoutes(\n  app: FastifyInstance,\n  container: Container,\n): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const member = container.reporting.member;\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/courses',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listMemberCourses',\n      tags: ['Content'],\n      summary: 'List the courses you can open',\n      description:\n        'For a member of the organization. Published courses you hold, directly or through a bundle.',\n      response: { 200: MemberCourses, ...refusals(403) },\n    },\n    handler: async (req) => {\n      const orgUser = await actorOf(container, req.orgId, req.userId);\n      return member.listCourses(req.orgId, orgUser.id);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/courses/:courseId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberCourse',\n      tags: ['Content'],\n      summary: 'Get one course you can open',\n      description:\n        'For a member of the organization. 404 when the course is not published or you do not hold it.',\n      params: MemberCourseIdParam,\n      response: { 200: Course, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const orgUser = await actorOf(container, req.orgId, req.userId);\n      const course = await member.getCourse(req.orgId, orgUser.id, req.params.courseId);\n      if (!course) {\n        throw new NotFoundError('Course', req.params.courseId);\n      }\n      return course;\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/courses/:courseId/modules',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listMemberModules',\n      tags: ['Content'],\n      summary: 'List the modules and activities of a course you can open',\n      description:\n        'For a member of the organization. Published activities only. 404 when the course is not published or you do not hold it.',\n      params: MemberCourseIdParam,\n      response: { 200: MemberModules, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const orgUser = await actorOf(container, req.orgId, req.userId);\n      const modules = await member.listModules(req.orgId, orgUser.id, req.params.courseId);\n      if (!modules) {\n        throw new NotFoundError('Course', req.params.courseId);\n      }\n      return modules;\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/courses/:courseId/activities',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listMemberActivities',\n      tags: ['Content'],\n      summary: 'List the published activities of a course you can open',\n      description:\n        'For a member of the organization. 404 when the course is not published or you do not hold it.',\n      params: MemberCourseIdParam,\n      response: { 200: ActivityList, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const orgUser = await actorOf(container, req.orgId, req.userId);\n      const activities = await member.listActivities(req.orgId, orgUser.id, req.params.courseId);\n      if (!activities) {\n        throw new NotFoundError('Course', req.params.courseId);\n      }\n      return activities;\n    },\n  });\n}\n"],"mappings":";;;;;;;;AAcA,eAAsB,oBACpB,KACA,WACe;CACf,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,SAAS,UAAU,UAAU;CAEnC,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,SAAS;GAChB,SAAS;GACT,aACE;GACF,UAAU;IAAE,KAAK;IAAe,GAAG,SAAS,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9D,OAAO,OAAO,YAAY,IAAI,OAAO,QAAQ,EAAE;EACjD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,SAAS;GAChB,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAQ,GAAG,SAAS,KAAK,GAAG;GAAE;EACjD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9D,MAAM,SAAS,MAAM,OAAO,UAAU,IAAI,OAAO,QAAQ,IAAI,IAAI,OAAO,QAAQ;GAChF,IAAI,CAAC,QACH,MAAM,IAAI,cAAc,UAAU,IAAI,OAAO,QAAQ;GAEvD,OAAO;EACT;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,SAAS;GAChB,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAe,GAAG,SAAS,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9D,MAAM,UAAU,MAAM,OAAO,YAAY,IAAI,OAAO,QAAQ,IAAI,IAAI,OAAO,QAAQ;GACnF,IAAI,CAAC,SACH,MAAM,IAAI,cAAc,UAAU,IAAI,OAAO,QAAQ;GAEvD,OAAO;EACT;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,SAAS;GAChB,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAc,GAAG,SAAS,KAAK,GAAG;GAAE;EACvD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9D,MAAM,aAAa,MAAM,OAAO,eAAe,IAAI,OAAO,QAAQ,IAAI,IAAI,OAAO,QAAQ;GACzF,IAAI,CAAC,YACH,MAAM,IAAI,cAAc,UAAU,IAAI,OAAO,QAAQ;GAEvD,OAAO;EACT;CACF,CAAC;AACH"}

package/dist/http/routes/member/downloads.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/member/downloads.d.ts
+declare function memberDownloadsRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { memberDownloadsRoutes };
+//# sourceMappingURL=downloads.d.ts.map

package/dist/http/routes/member/downloads.js

@@ -0,0 +1,56 @@
+import { refusals } from "../../schemas/shared.js";
+import { DownloadIdParam } from "../../schemas/downloads.js";
+import { MemberDownload, MemberDownloads } from "../../schemas/member.js";
+import "../../schemas/index.js";
+import { actorOf } from "./actor.js";
+import { NotFoundError } from "@headless-lms/core/shared/errors";
+//#region src/http/routes/member/downloads.ts
+async function memberDownloadsRoutes(app, container) {
+	const r = app.withTypeProvider();
+	const member = container.reporting.member;
+	r.route({
+		method: "GET",
+		url: "/api/member/downloads",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "listMemberDownloads",
+			tags: ["Content"],
+			summary: "List the downloads you can open",
+			description: "For a member of the organization. Published downloads you hold, directly or through a bundle.",
+			response: {
+				200: MemberDownloads,
+				...refusals(403)
+			}
+		},
+		handler: async (req) => {
+			const orgUser = await actorOf(container, req.orgId, req.userId);
+			return member.listDownloads(req.orgId, orgUser.id);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/downloads/:downloadId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getMemberDownload",
+			tags: ["Content"],
+			summary: "One download you can open, with its files in order",
+			description: "For a member of the organization. 404 when the download is not published or you do not hold it.",
+			params: DownloadIdParam,
+			response: {
+				200: MemberDownload,
+				...refusals(403, 404)
+			}
+		},
+		handler: async (req) => {
+			const orgUser = await actorOf(container, req.orgId, req.userId);
+			const result = await member.getDownload(req.orgId, orgUser.id, req.params.downloadId);
+			if (!result) throw new NotFoundError("Download", req.params.downloadId);
+			return result;
+		}
+	});
+}
+//#endregion
+export { memberDownloadsRoutes };
+
+//# sourceMappingURL=downloads.js.map

package/dist/http/routes/member/downloads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"downloads.js","names":[],"sources":["../../../../src/http/routes/member/downloads.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { DownloadIdParam, MemberDownload, MemberDownloads, refusals } from '../../schemas/index.js';\nimport { NotFoundError } from '@headless-lms/core/shared/errors';\nimport type { Container } from '../../../app/container.js';\nimport { actorOf } from './actor.js';\n\nexport async function memberDownloadsRoutes(\n  app: FastifyInstance,\n  container: Container,\n): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const member = container.reporting.member;\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/downloads',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listMemberDownloads',\n      tags: ['Content'],\n      summary: 'List the downloads you can open',\n      description:\n        'For a member of the organization. Published downloads you hold, directly or through a bundle.',\n      response: { 200: MemberDownloads, ...refusals(403) },\n    },\n    handler: async (req) => {\n      const orgUser = await actorOf(container, req.orgId, req.userId);\n      return member.listDownloads(req.orgId, orgUser.id);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/downloads/:downloadId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberDownload',\n      tags: ['Content'],\n      summary: 'One download you can open, with its files in order',\n      description:\n        'For a member of the organization. 404 when the download is not published or you do not hold it.',\n      params: DownloadIdParam,\n      response: { 200: MemberDownload, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const orgUser = await actorOf(container, req.orgId, req.userId);\n      const result = await member.getDownload(req.orgId, orgUser.id, req.params.downloadId);\n      if (!result) {\n        throw new NotFoundError('Download', req.params.downloadId);\n      }\n      return result;\n    },\n  });\n}\n"],"mappings":";;;;;;;AAOA,eAAsB,sBACpB,KACA,WACe;CACf,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,SAAS,UAAU,UAAU;CAEnC,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,SAAS;GAChB,SAAS;GACT,aACE;GACF,UAAU;IAAE,KAAK;IAAiB,GAAG,SAAS,GAAG;GAAE;EACrD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9D,OAAO,OAAO,cAAc,IAAI,OAAO,QAAQ,EAAE;EACnD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,SAAS;GAChB,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAgB,GAAG,SAAS,KAAK,GAAG;GAAE;EACzD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9D,MAAM,SAAS,MAAM,OAAO,YAAY,IAAI,OAAO,QAAQ,IAAI,IAAI,OAAO,UAAU;GACpF,IAAI,CAAC,QACH,MAAM,IAAI,cAAc,YAAY,IAAI,OAAO,UAAU;GAE3D,OAAO;EACT;CACF,CAAC;AACH"}

package/dist/http/routes/member/files.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/member/files.d.ts
+declare function memberFileRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { memberFileRoutes };
+//# sourceMappingURL=files.d.ts.map

package/dist/http/routes/member/files.js

@@ -0,0 +1,184 @@
+import { refusals } from "../../schemas/shared.js";
+import { ActivityFileParams, CommunityThumbnailParams, CourseThumbnailParams, DownloadFileParams, DownloadThumbnailParams, MessageAttachmentParams, PersonImageParams, PostCoverParams, UploadFileParams } from "../../schemas/files.js";
+import "../../schemas/index.js";
+import { actorOf } from "./actor.js";
+import { z } from "zod";
+import { NotFoundError } from "@headless-lms/core/shared/errors";
+//#region src/http/routes/member/files.ts
+const tags = ["Files"];
+const responses = {
+	302: z.void(),
+	...refusals(403, 404)
+};
+function redirect(reply, url, what, id) {
+	if (!url) throw new NotFoundError(what, id);
+	return reply.header("cache-control", "no-store").header("referrer-policy", "no-referrer").redirect(url, 302);
+}
+async function memberFileRoutes(app, container) {
+	const r = app.withTypeProvider();
+	const member = container.reporting.member;
+	async function actorOf$1(orgId, userId) {
+		const orgUser = await actorOf(container, orgId, userId);
+		return {
+			id: orgUser.id,
+			role: orgUser.role
+		};
+	}
+	r.route({
+		method: "GET",
+		url: "/api/member/courses/:courseId/thumbnail",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getCourseThumbnail",
+			tags,
+			summary: "Redirect to a course's thumbnail",
+			description: "Any org user may fetch the thumbnail of a published course; staff may fetch any. 404 when the course has no thumbnail.",
+			params: CourseThumbnailParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await member.thumbnailFile(req.orgId, actor, "course", req.params.courseId), "Course thumbnail", req.params.courseId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/downloads/:downloadId/thumbnail",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getDownloadThumbnail",
+			tags,
+			summary: "Redirect to a download's thumbnail",
+			description: "Any org user may fetch the thumbnail of a published download; staff may fetch any. 404 when the download has no thumbnail.",
+			params: DownloadThumbnailParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await member.thumbnailFile(req.orgId, actor, "download", req.params.downloadId), "Download thumbnail", req.params.downloadId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/communities/:communityId/thumbnail",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getCommunityThumbnail",
+			tags,
+			summary: "Redirect to a community's thumbnail",
+			description: "Any org user may fetch the thumbnail of a published community; staff may fetch any. 404 when the community has no thumbnail.",
+			params: CommunityThumbnailParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await member.thumbnailFile(req.orgId, actor, "community", req.params.communityId), "Community thumbnail", req.params.communityId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/activities/:activityId/assets/:assetId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getActivityFile",
+			tags,
+			summary: "Redirect to a file used in a lesson",
+			description: "Served when the student can open the course, the course and the lesson are published, and the lesson lists the file. Staff may fetch any file a lesson lists. Use the URL as an img, video or audio src.",
+			params: ActivityFileParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await member.activityFile(req.orgId, actor, req.params.activityId, req.params.assetId), "Lesson file", req.params.assetId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/downloads/:downloadId/assets/:assetId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getDownloadFile",
+			tags,
+			summary: "Redirect to a file in a download, saved under its display name",
+			description: "Served when the student can open the download, it is published, and it lists the file. Staff may fetch any file a download lists. The storage link lives DELIVERY_URL_EXPIRY seconds.",
+			params: DownloadFileParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await member.downloadFile(req.orgId, actor, req.params.downloadId, req.params.assetId), "Download file", req.params.assetId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/posts/:postId/cover",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getPostCover",
+			tags,
+			summary: "Redirect to a post's cover image",
+			description: "Served to whoever can read the post. 404 when the post has no cover.",
+			params: PostCoverParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await container.posts.coverFile(req.orgId, actor, req.params.postId), "Post cover", req.params.postId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/chats/:chatId/messages/:messageId/attachments/:assetId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getMessageAttachment",
+			tags,
+			summary: "Redirect to an image attached to a chat message",
+			description: "Served to the chat's participants while the message stands (staff also after it is deleted), and to moderators while the message is flagged.",
+			params: MessageAttachmentParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await container.chats.attachmentFile(req.orgId, actor, req.params.chatId, req.params.messageId, req.params.assetId), "Message attachment", req.params.assetId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/people/:orgUserId/image",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getPersonImage",
+			tags,
+			summary: "Redirect to an org user's profile photo",
+			description: "Served to org users of the same organization when the photo belongs to it. 404 when the person has no photo here.",
+			params: PersonImageParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await member.personImage(req.orgId, req.params.orgUserId), "Profile photo", req.params.orgUserId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/uploads/:id/file",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getMemberUploadFile",
+			tags,
+			summary: "Redirect to an image you uploaded",
+			description: "Served only to the person who uploaded it, once it is finalized.",
+			params: UploadFileParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await container.assets.ownUploadFile(req.orgId, req.params.id, actor.id), "Upload", req.params.id);
+		}
+	});
+}
+//#endregion
+export { memberFileRoutes };
+
+//# sourceMappingURL=files.js.map

package/dist/http/routes/member/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","names":["actorOf","memberOf"],"sources":["../../../../src/http/routes/member/files.ts"],"sourcesContent":["// Member file proxies. Each route checks access with the context that owns the\n// file, then redirects to a short-lived signed storage URL. Every refusal is a\n// 404, so a response never confirms that a file exists. A 403 only means the\n// caller is not a member of the organization.\nimport type { FastifyInstance, FastifyReply } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { z } from 'zod';\nimport { NotFoundError } from '@headless-lms/core/shared/errors';\nimport {\n  ActivityFileParams,\n  CommunityThumbnailParams,\n  CourseThumbnailParams,\n  DownloadFileParams,\n  DownloadThumbnailParams,\n  MessageAttachmentParams,\n  PersonImageParams,\n  PostCoverParams,\n  UploadFileParams,\n  refusals,\n} from '../../schemas/index.js';\nimport { actorOf as memberOf } from './actor.js';\nimport type { Container } from '../../../app/container.js';\n\nconst tags = ['Files'];\nconst responses = { 302: z.void(), ...refusals(403, 404) };\n\nfunction redirect(reply: FastifyReply, url: string | null, what: string, id: string) {\n  if (!url) {\n    throw new NotFoundError(what, id);\n  }\n  return reply\n    .header('cache-control', 'no-store')\n    .header('referrer-policy', 'no-referrer')\n    .redirect(url, 302);\n}\n\nexport async function memberFileRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const member = container.reporting.member;\n\n  async function actorOf(orgId: string, userId: string) {\n    const orgUser = await memberOf(container, orgId, userId);\n    return { id: orgUser.id, role: orgUser.role };\n  }\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/courses/:courseId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getCourseThumbnail',\n      tags,\n      summary: \"Redirect to a course's thumbnail\",\n      description:\n        'Any org user may fetch the thumbnail of a published course; staff may fetch any. 404 when the course has no thumbnail.',\n      params: CourseThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await member.thumbnailFile(req.orgId, actor, 'course', req.params.courseId);\n      return redirect(reply, url, 'Course thumbnail', req.params.courseId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/downloads/:downloadId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getDownloadThumbnail',\n      tags,\n      summary: \"Redirect to a download's thumbnail\",\n      description:\n        'Any org user may fetch the thumbnail of a published download; staff may fetch any. 404 when the download has no thumbnail.',\n      params: DownloadThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await member.thumbnailFile(req.orgId, actor, 'download', req.params.downloadId);\n      return redirect(reply, url, 'Download thumbnail', req.params.downloadId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getCommunityThumbnail',\n      tags,\n      summary: \"Redirect to a community's thumbnail\",\n      description:\n        'Any org user may fetch the thumbnail of a published community; staff may fetch any. 404 when the community has no thumbnail.',\n      params: CommunityThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await member.thumbnailFile(req.orgId, actor, 'community', req.params.communityId);\n      return redirect(reply, url, 'Community thumbnail', req.params.communityId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/activities/:activityId/assets/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getActivityFile',\n      tags,\n      summary: 'Redirect to a file used in a lesson',\n      description:\n        'Served when the student can open the course, the course and the lesson are published, and the lesson lists the file. Staff may fetch any file a lesson lists. Use the URL as an img, video or audio src.',\n      params: ActivityFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await member.activityFile(\n        req.orgId,\n        actor,\n        req.params.activityId,\n        req.params.assetId,\n      );\n      return redirect(reply, url, 'Lesson file', req.params.assetId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/downloads/:downloadId/assets/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getDownloadFile',\n      tags,\n      summary: 'Redirect to a file in a download, saved under its display name',\n      description:\n        'Served when the student can open the download, it is published, and it lists the file. Staff may fetch any file a download lists. The storage link lives DELIVERY_URL_EXPIRY seconds.',\n      params: DownloadFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await member.downloadFile(\n        req.orgId,\n        actor,\n        req.params.downloadId,\n        req.params.assetId,\n      );\n      return redirect(reply, url, 'Download file', req.params.assetId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/posts/:postId/cover',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getPostCover',\n      tags,\n      summary: \"Redirect to a post's cover image\",\n      description: 'Served to whoever can read the post. 404 when the post has no cover.',\n      params: PostCoverParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await container.posts.coverFile(req.orgId, actor, req.params.postId);\n      return redirect(reply, url, 'Post cover', req.params.postId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/chats/:chatId/messages/:messageId/attachments/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMessageAttachment',\n      tags,\n      summary: 'Redirect to an image attached to a chat message',\n      description:\n        \"Served to the chat's participants while the message stands (staff also after it is deleted), and to moderators while the message is flagged.\",\n      params: MessageAttachmentParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await container.chats.attachmentFile(\n        req.orgId,\n        actor,\n        req.params.chatId,\n        req.params.messageId,\n        req.params.assetId,\n      );\n      return redirect(reply, url, 'Message attachment', req.params.assetId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/people/:orgUserId/image',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getPersonImage',\n      tags,\n      summary: \"Redirect to an org user's profile photo\",\n      description:\n        'Served to org users of the same organization when the photo belongs to it. 404 when the person has no photo here.',\n      params: PersonImageParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      await actorOf(req.orgId, req.userId);\n      const url = await member.personImage(req.orgId, req.params.orgUserId);\n      return redirect(reply, url, 'Profile photo', req.params.orgUserId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/uploads/:id/file',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberUploadFile',\n      tags,\n      summary: 'Redirect to an image you uploaded',\n      description: 'Served only to the person who uploaded it, once it is finalized.',\n      params: UploadFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await container.assets.ownUploadFile(req.orgId, req.params.id, actor.id);\n      return redirect(reply, url, 'Upload', req.params.id);\n    },\n  });\n}\n"],"mappings":";;;;;;;AAuBA,MAAM,OAAO,CAAC,OAAO;AACrB,MAAM,YAAY;CAAE,KAAK,EAAE,KAAK;CAAG,GAAG,SAAS,KAAK,GAAG;AAAE;AAEzD,SAAS,SAAS,OAAqB,KAAoB,MAAc,IAAY;CACnF,IAAI,CAAC,KACH,MAAM,IAAI,cAAc,MAAM,EAAE;CAElC,OAAO,MACJ,OAAO,iBAAiB,UAAU,CAAC,CACnC,OAAO,mBAAmB,aAAa,CAAC,CACxC,SAAS,KAAK,GAAG;AACtB;AAEA,eAAsB,iBAAiB,KAAsB,WAAqC;CAChG,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,SAAS,UAAU,UAAU;CAEnC,eAAeA,UAAQ,OAAe,QAAgB;EACpD,MAAM,UAAU,MAAMC,QAAS,WAAW,OAAO,MAAM;EACvD,OAAO;GAAE,IAAI,QAAQ;GAAI,MAAM,QAAQ;EAAK;CAC9C;CAEA,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMD,UAAQ,IAAI,OAAO,IAAI,MAAM;GAEjD,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,IAAI,OAAO,OAAO,UAAU,IAAI,OAAO,QAAQ,GAC1D,oBAAoB,IAAI,OAAO,QAAQ;EACrE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAEjD,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,IAAI,OAAO,OAAO,YAAY,IAAI,OAAO,UAAU,GAC9D,sBAAsB,IAAI,OAAO,UAAU;EACzE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAEjD,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,IAAI,OAAO,OAAO,aAAa,IAAI,OAAO,WAAW,GAChE,uBAAuB,IAAI,OAAO,WAAW;EAC3E;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAOjD,OAAO,SAAS,OAAO,MANL,OAAO,aACvB,IAAI,OACJ,OACA,IAAI,OAAO,YACX,IAAI,OAAO,OACb,GAC4B,eAAe,IAAI,OAAO,OAAO;EAC/D;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAOjD,OAAO,SAAS,OAAO,MANL,OAAO,aACvB,IAAI,OACJ,OACA,IAAI,OAAO,YACX,IAAI,OAAO,OACb,GAC4B,iBAAiB,IAAI,OAAO,OAAO;EACjE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAEjD,OAAO,SAAS,OAAO,MADL,UAAU,MAAM,UAAU,IAAI,OAAO,OAAO,IAAI,OAAO,MAAM,GACnD,cAAc,IAAI,OAAO,MAAM;EAC7D;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAQjD,OAAO,SAAS,OAAO,MAPL,UAAU,MAAM,eAChC,IAAI,OACJ,OACA,IAAI,OAAO,QACX,IAAI,OAAO,WACX,IAAI,OAAO,OACb,GAC4B,sBAAsB,IAAI,OAAO,OAAO;EACtE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAEnC,OAAO,SAAS,OAAO,MADL,OAAO,YAAY,IAAI,OAAO,IAAI,OAAO,SAAS,GACxC,iBAAiB,IAAI,OAAO,SAAS;EACnE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAEjD,OAAO,SAAS,OAAO,MADL,UAAU,OAAO,cAAc,IAAI,OAAO,IAAI,OAAO,IAAI,MAAM,EAAE,GACvD,UAAU,IAAI,OAAO,EAAE;EACrD;CACF,CAAC;AACH"}

package/dist/http/routes/member/index.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/member/index.d.ts
+declare function memberRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { memberRoutes };
+//# sourceMappingURL=index.d.ts.map

package/dist/http/routes/member/index.js

@@ -0,0 +1,31 @@
+import { memberAssetsRoutes } from "./assets.js";
+import { memberChatRoutes } from "./chats.js";
+import { memberCommentsRoutes } from "./comments.js";
+import { memberCommunityRoutes } from "./community.js";
+import { memberCoursesRoutes } from "./courses.js";
+import { memberDownloadsRoutes } from "./downloads.js";
+import { memberFileRoutes } from "./files.js";
+import { memberNotificationRoutes } from "./notifications.js";
+import { memberOrgRoutes } from "./org.js";
+import { memberPostRoutes } from "./posts.js";
+import { memberProfileRoutes } from "./profile.js";
+import { memberProgressRoutes } from "./progress.js";
+//#region src/http/routes/member/index.ts
+async function memberRoutes(app, container) {
+	await memberOrgRoutes(app, container);
+	await memberProfileRoutes(app, container);
+	await memberCommunityRoutes(app, container);
+	await memberPostRoutes(app, container);
+	await memberChatRoutes(app, container);
+	await memberCoursesRoutes(app, container);
+	await memberProgressRoutes(app, container);
+	await memberCommentsRoutes(app, container);
+	await memberAssetsRoutes(app, container);
+	await memberDownloadsRoutes(app, container);
+	await memberFileRoutes(app, container);
+	await memberNotificationRoutes(app, container);
+}
+//#endregion
+export { memberRoutes };
+
+//# sourceMappingURL=index.js.map

package/dist/http/routes/member/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../../src/http/routes/member/index.ts"],"sourcesContent":["// Student HTTP API under `/api/member`. Session-guarded like every\n// back-office route, but scoped by the session's `org_users` row —\n// the reads gate on the person's enrollments, not on staff role. One file per\n// resource; everything under `/api/member` lives in this directory and nowhere\n// else. The course, download, and progress reads call reporting/member.\nimport type { FastifyInstance } from 'fastify';\nimport type { Container } from '../../../app/container.js';\nimport { memberAssetsRoutes } from './assets.js';\nimport { memberChatRoutes } from './chats.js';\nimport { memberCommentsRoutes } from './comments.js';\nimport { memberCommunityRoutes } from './community.js';\nimport { memberCoursesRoutes } from './courses.js';\nimport { memberDownloadsRoutes } from './downloads.js';\nimport { memberFileRoutes } from './files.js';\nimport { memberNotificationRoutes } from './notifications.js';\nimport { memberOrgRoutes } from './org.js';\nimport { memberPostRoutes } from './posts.js';\nimport { memberProfileRoutes } from './profile.js';\nimport { memberProgressRoutes } from './progress.js';\n\nexport async function memberRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  await memberOrgRoutes(app, container);\n  await memberProfileRoutes(app, container);\n  await memberCommunityRoutes(app, container);\n  await memberPostRoutes(app, container);\n  await memberChatRoutes(app, container);\n  await memberCoursesRoutes(app, container);\n  await memberProgressRoutes(app, container);\n  await memberCommentsRoutes(app, container);\n  await memberAssetsRoutes(app, container);\n  await memberDownloadsRoutes(app, container);\n  await memberFileRoutes(app, container);\n  await memberNotificationRoutes(app, container);\n}\n"],"mappings":";;;;;;;;;;;;;AAoBA,eAAsB,aAAa,KAAsB,WAAqC;CAC5F,MAAM,gBAAgB,KAAK,SAAS;CACpC,MAAM,oBAAoB,KAAK,SAAS;CACxC,MAAM,sBAAsB,KAAK,SAAS;CAC1C,MAAM,iBAAiB,KAAK,SAAS;CACrC,MAAM,iBAAiB,KAAK,SAAS;CACrC,MAAM,oBAAoB,KAAK,SAAS;CACxC,MAAM,qBAAqB,KAAK,SAAS;CACzC,MAAM,qBAAqB,KAAK,SAAS;CACzC,MAAM,mBAAmB,KAAK,SAAS;CACvC,MAAM,sBAAsB,KAAK,SAAS;CAC1C,MAAM,iBAAiB,KAAK,SAAS;CACrC,MAAM,yBAAyB,KAAK,SAAS;AAC/C"}

package/dist/http/routes/member/notifications.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/member/notifications.d.ts
+declare function memberNotificationRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { memberNotificationRoutes };
+//# sourceMappingURL=notifications.d.ts.map

package/dist/http/routes/member/notifications.js

@@ -0,0 +1,101 @@
+import { PageQuery, refusals } from "../../schemas/shared.js";
+import { MarkedRead, NotificationIdParam, NotificationPreferences, NotificationView, NotificationsPage, SetNotificationPreferences } from "../../schemas/notifications.js";
+import "../../schemas/index.js";
+import { actorOf } from "./actor.js";
+//#region src/http/routes/member/notifications.ts
+async function memberNotificationRoutes(app, container) {
+	const r = app.withTypeProvider();
+	const notifications = container.notifications;
+	const tags = ["Notifications"];
+	r.route({
+		method: "GET",
+		url: "/api/member/notifications",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "listMemberNotifications",
+			tags,
+			summary: "List your notifications, newest first, with your unread count",
+			description: "For any member of the organization. Each notification names what it refers to; a post or chat you can no longer see is null.",
+			querystring: PageQuery,
+			response: {
+				200: NotificationsPage,
+				...refusals(403)
+			}
+		},
+		handler: async (req) => {
+			const actor = await actorOf(container, req.orgId, req.userId);
+			return container.reporting.member.notifications(req.orgId, actor, req.userId, req.query);
+		}
+	});
+	r.route({
+		method: "POST",
+		url: "/api/member/notifications/:notificationId/read",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "markMemberNotificationRead",
+			tags,
+			summary: "Mark one of your notifications read",
+			description: "For any member of the organization. Returns the notification the way the list shows it. Marking a read notification keeps its first read time. 404 when it is not yours.",
+			params: NotificationIdParam,
+			response: {
+				200: NotificationView,
+				...refusals(403, 404)
+			}
+		},
+		handler: async (req) => {
+			const actor = await actorOf(container, req.orgId, req.userId);
+			const notification = await notifications.markNotificationRead(req.orgId, req.userId, req.params.notificationId);
+			return container.reporting.member.notificationView(req.orgId, actor, notification);
+		}
+	});
+	r.route({
+		method: "POST",
+		url: "/api/member/notifications/read",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "markAllMemberNotificationsRead",
+			tags,
+			summary: "Mark all your notifications read",
+			description: "For any signed-in person in the organization. Returns how many were unread.",
+			response: { 200: MarkedRead }
+		},
+		handler: async (req) => {
+			return notifications.markAllNotificationsRead(req.orgId, req.userId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/notification-preferences",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getMemberNotificationPreferences",
+			tags,
+			summary: "Read how you are told about each kind of notification",
+			description: "For any signed-in person in the organization. One entry per kind; a kind you never set is on in the app and by email.",
+			response: { 200: NotificationPreferences }
+		},
+		handler: async (req) => {
+			return notifications.notificationPreferences(req.orgId, req.userId);
+		}
+	});
+	r.route({
+		method: "PUT",
+		url: "/api/member/notification-preferences",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "setMemberNotificationPreferences",
+			tags,
+			summary: "Set how you are told about the given kinds of notification",
+			description: "For any signed-in person in the organization. Changes only the kinds sent and returns every kind.",
+			body: SetNotificationPreferences,
+			response: { 200: NotificationPreferences }
+		},
+		handler: async (req) => {
+			return notifications.setNotificationPreferences(req.orgId, req.userId, req.body.preferences);
+		}
+	});
+}
+//#endregion
+export { memberNotificationRoutes };
+
+//# sourceMappingURL=notifications.js.map

package/dist/http/routes/member/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.js","names":[],"sources":["../../../../src/http/routes/member/notifications.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport type { Container } from '../../../app/container.js';\nimport { actorOf } from './actor.js';\nimport {\n  MarkedRead,\n  NotificationIdParam,\n  NotificationPreferences,\n  NotificationView,\n  NotificationsPage,\n  PageQuery,\n  SetNotificationPreferences,\n  refusals,\n} from '../../schemas/index.js';\n\nexport async function memberNotificationRoutes(\n  app: FastifyInstance,\n  container: Container,\n): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const notifications = container.notifications;\n  const tags = ['Notifications'];\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/notifications',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listMemberNotifications',\n      tags,\n      summary: 'List your notifications, newest first, with your unread count',\n      description:\n        'For any member of the organization. Each notification names what it refers to; a post or chat you can no longer see is null.',\n      querystring: PageQuery,\n      response: { 200: NotificationsPage, ...refusals(403) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return container.reporting.member.notifications(req.orgId, actor, req.userId, req.query);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/notifications/:notificationId/read',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'markMemberNotificationRead',\n      tags,\n      summary: 'Mark one of your notifications read',\n      description:\n        'For any member of the organization. Returns the notification the way the list shows it. Marking a read notification keeps its first read time. 404 when it is not yours.',\n      params: NotificationIdParam,\n      response: { 200: NotificationView, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      const notification = await notifications.markNotificationRead(\n        req.orgId,\n        req.userId,\n        req.params.notificationId,\n      );\n      return container.reporting.member.notificationView(req.orgId, actor, notification);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/notifications/read',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'markAllMemberNotificationsRead',\n      tags,\n      summary: 'Mark all your notifications read',\n      description: 'For any signed-in person in the organization. Returns how many were unread.',\n      response: { 200: MarkedRead },\n    },\n    handler: async (req) => {\n      return notifications.markAllNotificationsRead(req.orgId, req.userId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/notification-preferences',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberNotificationPreferences',\n      tags,\n      summary: 'Read how you are told about each kind of notification',\n      description:\n        'For any signed-in person in the organization. One entry per kind; a kind you never set is on in the app and by email.',\n      response: { 200: NotificationPreferences },\n    },\n    handler: async (req) => {\n      return notifications.notificationPreferences(req.orgId, req.userId);\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/member/notification-preferences',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'setMemberNotificationPreferences',\n      tags,\n      summary: 'Set how you are told about the given kinds of notification',\n      description:\n        'For any signed-in person in the organization. Changes only the kinds sent and returns every kind.',\n      body: SetNotificationPreferences,\n      response: { 200: NotificationPreferences },\n    },\n    handler: async (req) => {\n      return notifications.setNotificationPreferences(req.orgId, req.userId, req.body.preferences);\n    },\n  });\n}\n"],"mappings":";;;;;AAeA,eAAsB,yBACpB,KACA,WACe;CACf,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,gBAAgB,UAAU;CAChC,MAAM,OAAO,CAAC,eAAe;CAE7B,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,aAAa;GACb,UAAU;IAAE,KAAK;IAAmB,GAAG,SAAS,GAAG;GAAE;EACvD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,UAAU,UAAU,OAAO,cAAc,IAAI,OAAO,OAAO,IAAI,QAAQ,IAAI,KAAK;EACzF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAkB,GAAG,SAAS,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,eAAe,MAAM,cAAc,qBACvC,IAAI,OACJ,IAAI,QACJ,IAAI,OAAO,cACb;GACA,OAAO,UAAU,UAAU,OAAO,iBAAiB,IAAI,OAAO,OAAO,YAAY;EACnF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,UAAU,EAAE,KAAK,WAAW;EAC9B;EACA,SAAS,OAAO,QAAQ;GACtB,OAAO,cAAc,yBAAyB,IAAI,OAAO,IAAI,MAAM;EACrE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,UAAU,EAAE,KAAK,wBAAwB;EAC3C;EACA,SAAS,OAAO,QAAQ;GACtB,OAAO,cAAc,wBAAwB,IAAI,OAAO,IAAI,MAAM;EACpE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,MAAM;GACN,UAAU,EAAE,KAAK,wBAAwB;EAC3C;EACA,SAAS,OAAO,QAAQ;GACtB,OAAO,cAAc,2BAA2B,IAAI,OAAO,IAAI,QAAQ,IAAI,KAAK,WAAW;EAC7F;CACF,CAAC;AACH"}

package/dist/http/routes/member/org.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/member/org.d.ts
+declare function memberOrgRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { memberOrgRoutes };
+//# sourceMappingURL=org.d.ts.map

package/dist/http/routes/member/org.js

@@ -0,0 +1,56 @@
+import { refusals } from "../../schemas/shared.js";
+import { UnauthorizedError } from "../../plugins/auth.js";
+import { MemberOrg, MemberViewer } from "../../schemas/member.js";
+import "../../schemas/index.js";
+import { actorOf } from "./actor.js";
+//#region src/http/routes/member/org.ts
+async function memberOrgRoutes(app, container) {
+	const r = app.withTypeProvider();
+	r.route({
+		method: "GET",
+		url: "/api/member/org",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getMemberOrg",
+			tags: ["Organizations"],
+			summary: "Get the portal org's public identity (branding)",
+			description: "For any signed-in person whose session has this organization active. Name and slug only.",
+			response: { 200: MemberOrg }
+		},
+		handler: async (req) => {
+			const org = await container.organizations.getById(req.orgId);
+			if (!org) throw new UnauthorizedError("Your session points to an organization that no longer exists");
+			return {
+				id: org.id,
+				name: org.name,
+				slug: org.slug
+			};
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/viewer",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getMemberViewer",
+			tags: ["Organizations"],
+			summary: "Get the caller's identity within the session's org",
+			description: "For a member of the organization: your org user id, which the member API keys on, and your role here.",
+			response: {
+				200: MemberViewer,
+				...refusals(403)
+			}
+		},
+		handler: async (req) => {
+			const orgUser = await actorOf(container, req.orgId, req.userId);
+			return {
+				orgUserId: orgUser.id,
+				role: orgUser.role
+			};
+		}
+	});
+}
+//#endregion
+export { memberOrgRoutes };
+
+//# sourceMappingURL=org.js.map

package/dist/http/routes/member/org.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org.js","names":[],"sources":["../../../../src/http/routes/member/org.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { MemberOrg, MemberViewer, refusals } from '../../schemas/index.js';\nimport type { Container } from '../../../app/container.js';\nimport { UnauthorizedError } from '../../plugins/auth.js';\nimport { actorOf } from './actor.js';\n\nexport async function memberOrgRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/org',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberOrg',\n      tags: ['Organizations'],\n      summary: \"Get the portal org's public identity (branding)\",\n      description:\n        'For any signed-in person whose session has this organization active. Name and slug only.',\n      response: { 200: MemberOrg },\n    },\n    handler: async (req) => {\n      // The session's org (from `activeOrganizationId`) — surface its display\n      // identity for the portal brand.\n      const org = await container.organizations.getById(req.orgId);\n      if (!org) {\n        throw new UnauthorizedError('Your session points to an organization that no longer exists');\n      }\n      return { id: org.id, name: org.name, slug: org.slug };\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/viewer',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberViewer',\n      tags: ['Organizations'],\n      summary: \"Get the caller's identity within the session's org\",\n      description:\n        'For a member of the organization: your org user id, which the member API keys on, and your role here.',\n      response: { 200: MemberViewer, ...refusals(403) },\n    },\n    handler: async (req) => {\n      const orgUser = await actorOf(container, req.orgId, req.userId);\n      return { orgUserId: orgUser.id, role: orgUser.role };\n    },\n  });\n}\n"],"mappings":";;;;;;AAOA,eAAsB,gBAAgB,KAAsB,WAAqC;CAC/F,MAAM,IAAI,IAAI,iBAAkC;CAEhD,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,eAAe;GACtB,SAAS;GACT,aACE;GACF,UAAU,EAAE,KAAK,UAAU;EAC7B;EACA,SAAS,OAAO,QAAQ;GAGtB,MAAM,MAAM,MAAM,UAAU,cAAc,QAAQ,IAAI,KAAK;GAC3D,IAAI,CAAC,KACH,MAAM,IAAI,kBAAkB,8DAA8D;GAE5F,OAAO;IAAE,IAAI,IAAI;IAAI,MAAM,IAAI;IAAM,MAAM,IAAI;GAAK;EACtD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,eAAe;GACtB,SAAS;GACT,aACE;GACF,UAAU;IAAE,KAAK;IAAc,GAAG,SAAS,GAAG;GAAE;EAClD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9D,OAAO;IAAE,WAAW,QAAQ;IAAI,MAAM,QAAQ;GAAK;EACrD;CACF,CAAC;AACH"}

package/dist/http/routes/member/posts.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/member/posts.d.ts
+declare function memberPostRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { memberPostRoutes };
+//# sourceMappingURL=posts.d.ts.map