@headless-lms/server 0.2.0 → 0.4.0

package/dist/http/routes/member/downloads.js

@@ -0,0 +1,56 @@
+import { refusals } from "../../schemas/shared.js";
+import { DownloadIdParam } from "../../schemas/downloads.js";
+import { MemberDownload, MemberDownloads } from "../../schemas/member.js";
+import "../../schemas/index.js";
+import { actorOf } from "./actor.js";
+import { NotFoundError } from "@headless-lms/core/shared/errors";
+//#region src/http/routes/member/downloads.ts
+async function memberDownloadsRoutes(app, container) {
+	const r = app.withTypeProvider();
+	const member = container.reporting.member;
+	r.route({
+		method: "GET",
+		url: "/api/member/downloads",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "listMemberDownloads",
+			tags: ["Content"],
+			summary: "List the downloads you can open",
+			description: "For a member of the organization. Published downloads you hold, directly or through a bundle.",
+			response: {
+				200: MemberDownloads,
+				...refusals(403)
+			}
+		},
+		handler: async (req) => {
+			const orgUser = await actorOf(container, req.orgId, req.userId);
+			return member.listDownloads(req.orgId, orgUser.id);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/downloads/:downloadId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getMemberDownload",
+			tags: ["Content"],
+			summary: "One download you can open, with its files in order",
+			description: "For a member of the organization. 404 when the download is not published or you do not hold it.",
+			params: DownloadIdParam,
+			response: {
+				200: MemberDownload,
+				...refusals(403, 404)
+			}
+		},
+		handler: async (req) => {
+			const orgUser = await actorOf(container, req.orgId, req.userId);
+			const result = await member.getDownload(req.orgId, orgUser.id, req.params.downloadId);
+			if (!result) throw new NotFoundError("Download", req.params.downloadId);
+			return result;
+		}
+	});
+}
+//#endregion
+export { memberDownloadsRoutes };
+
+//# sourceMappingURL=downloads.js.map

package/dist/http/routes/member/downloads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"downloads.js","names":[],"sources":["../../../../src/http/routes/member/downloads.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { DownloadIdParam, MemberDownload, MemberDownloads, refusals } from '../../schemas/index.js';\nimport { NotFoundError } from '@headless-lms/core/shared/errors';\nimport type { Container } from '../../../app/container.js';\nimport { actorOf } from './actor.js';\n\nexport async function memberDownloadsRoutes(\n  app: FastifyInstance,\n  container: Container,\n): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const member = container.reporting.member;\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/downloads',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listMemberDownloads',\n      tags: ['Content'],\n      summary: 'List the downloads you can open',\n      description:\n        'For a member of the organization. Published downloads you hold, directly or through a bundle.',\n      response: { 200: MemberDownloads, ...refusals(403) },\n    },\n    handler: async (req) => {\n      const orgUser = await actorOf(container, req.orgId, req.userId);\n      return member.listDownloads(req.orgId, orgUser.id);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/downloads/:downloadId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberDownload',\n      tags: ['Content'],\n      summary: 'One download you can open, with its files in order',\n      description:\n        'For a member of the organization. 404 when the download is not published or you do not hold it.',\n      params: DownloadIdParam,\n      response: { 200: MemberDownload, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const orgUser = await actorOf(container, req.orgId, req.userId);\n      const result = await member.getDownload(req.orgId, orgUser.id, req.params.downloadId);\n      if (!result) {\n        throw new NotFoundError('Download', req.params.downloadId);\n      }\n      return result;\n    },\n  });\n}\n"],"mappings":";;;;;;;AAOA,eAAsB,sBACpB,KACA,WACe;CACf,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,SAAS,UAAU,UAAU;CAEnC,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,SAAS;GAChB,SAAS;GACT,aACE;GACF,UAAU;IAAE,KAAK;IAAiB,GAAG,SAAS,GAAG;GAAE;EACrD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9D,OAAO,OAAO,cAAc,IAAI,OAAO,QAAQ,EAAE;EACnD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,SAAS;GAChB,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAgB,GAAG,SAAS,KAAK,GAAG;GAAE;EACzD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9D,MAAM,SAAS,MAAM,OAAO,YAAY,IAAI,OAAO,QAAQ,IAAI,IAAI,OAAO,UAAU;GACpF,IAAI,CAAC,QACH,MAAM,IAAI,cAAc,YAAY,IAAI,OAAO,UAAU;GAE3D,OAAO;EACT;CACF,CAAC;AACH"}

package/dist/http/routes/member/files.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/member/files.d.ts
+declare function memberFileRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { memberFileRoutes };
+//# sourceMappingURL=files.d.ts.map

package/dist/http/routes/member/files.js

@@ -0,0 +1,184 @@
+import { refusals } from "../../schemas/shared.js";
+import { ActivityFileParams, CommunityThumbnailParams, CourseThumbnailParams, DownloadFileParams, DownloadThumbnailParams, MessageAttachmentParams, PersonImageParams, PostCoverParams, UploadFileParams } from "../../schemas/files.js";
+import "../../schemas/index.js";
+import { actorOf } from "./actor.js";
+import { z } from "zod";
+import { NotFoundError } from "@headless-lms/core/shared/errors";
+//#region src/http/routes/member/files.ts
+const tags = ["Files"];
+const responses = {
+	302: z.void(),
+	...refusals(403, 404)
+};
+function redirect(reply, url, what, id) {
+	if (!url) throw new NotFoundError(what, id);
+	return reply.header("cache-control", "no-store").header("referrer-policy", "no-referrer").redirect(url, 302);
+}
+async function memberFileRoutes(app, container) {
+	const r = app.withTypeProvider();
+	const member = container.reporting.member;
+	async function actorOf$1(orgId, userId) {
+		const orgUser = await actorOf(container, orgId, userId);
+		return {
+			id: orgUser.id,
+			role: orgUser.role
+		};
+	}
+	r.route({
+		method: "GET",
+		url: "/api/member/courses/:courseId/thumbnail",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getCourseThumbnail",
+			tags,
+			summary: "Redirect to a course's thumbnail",
+			description: "Any org user may fetch the thumbnail of a published course; staff may fetch any. 404 when the course has no thumbnail.",
+			params: CourseThumbnailParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await member.thumbnailFile(req.orgId, actor, "course", req.params.courseId), "Course thumbnail", req.params.courseId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/downloads/:downloadId/thumbnail",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getDownloadThumbnail",
+			tags,
+			summary: "Redirect to a download's thumbnail",
+			description: "Any org user may fetch the thumbnail of a published download; staff may fetch any. 404 when the download has no thumbnail.",
+			params: DownloadThumbnailParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await member.thumbnailFile(req.orgId, actor, "download", req.params.downloadId), "Download thumbnail", req.params.downloadId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/communities/:communityId/thumbnail",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getCommunityThumbnail",
+			tags,
+			summary: "Redirect to a community's thumbnail",
+			description: "Any org user may fetch the thumbnail of a published community; staff may fetch any. 404 when the community has no thumbnail.",
+			params: CommunityThumbnailParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await member.thumbnailFile(req.orgId, actor, "community", req.params.communityId), "Community thumbnail", req.params.communityId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/activities/:activityId/assets/:assetId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getActivityFile",
+			tags,
+			summary: "Redirect to a file used in a lesson",
+			description: "Served when the student can open the course, the course and the lesson are published, and the lesson lists the file. Staff may fetch any file a lesson lists. Use the URL as an img, video or audio src.",
+			params: ActivityFileParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await member.activityFile(req.orgId, actor, req.params.activityId, req.params.assetId), "Lesson file", req.params.assetId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/downloads/:downloadId/assets/:assetId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getDownloadFile",
+			tags,
+			summary: "Redirect to a file in a download, saved under its display name",
+			description: "Served when the student can open the download, it is published, and it lists the file. Staff may fetch any file a download lists. The storage link lives DELIVERY_URL_EXPIRY seconds.",
+			params: DownloadFileParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await member.downloadFile(req.orgId, actor, req.params.downloadId, req.params.assetId), "Download file", req.params.assetId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/posts/:postId/cover",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getPostCover",
+			tags,
+			summary: "Redirect to a post's cover image",
+			description: "Served to whoever can read the post. 404 when the post has no cover.",
+			params: PostCoverParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await container.posts.coverFile(req.orgId, actor, req.params.postId), "Post cover", req.params.postId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/chats/:chatId/messages/:messageId/attachments/:assetId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getMessageAttachment",
+			tags,
+			summary: "Redirect to an image attached to a chat message",
+			description: "Served to the chat's participants while the message stands (staff also after it is deleted), and to moderators while the message is flagged.",
+			params: MessageAttachmentParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await container.chats.attachmentFile(req.orgId, actor, req.params.chatId, req.params.messageId, req.params.assetId), "Message attachment", req.params.assetId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/people/:orgUserId/image",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getPersonImage",
+			tags,
+			summary: "Redirect to an org user's profile photo",
+			description: "Served to org users of the same organization when the photo belongs to it. 404 when the person has no photo here.",
+			params: PersonImageParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await member.personImage(req.orgId, req.params.orgUserId), "Profile photo", req.params.orgUserId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/uploads/:id/file",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getMemberUploadFile",
+			tags,
+			summary: "Redirect to an image you uploaded",
+			description: "Served only to the person who uploaded it, once it is finalized.",
+			params: UploadFileParams,
+			response: responses
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf$1(req.orgId, req.userId);
+			return redirect(reply, await container.assets.ownUploadFile(req.orgId, req.params.id, actor.id), "Upload", req.params.id);
+		}
+	});
+}
+//#endregion
+export { memberFileRoutes };
+
+//# sourceMappingURL=files.js.map

package/dist/http/routes/member/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","names":["actorOf","memberOf"],"sources":["../../../../src/http/routes/member/files.ts"],"sourcesContent":["// Member file proxies. Each route checks access with the context that owns the\n// file, then redirects to a short-lived signed storage URL. Every refusal is a\n// 404, so a response never confirms that a file exists. A 403 only means the\n// caller is not a member of the organization.\nimport type { FastifyInstance, FastifyReply } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { z } from 'zod';\nimport { NotFoundError } from '@headless-lms/core/shared/errors';\nimport {\n  ActivityFileParams,\n  CommunityThumbnailParams,\n  CourseThumbnailParams,\n  DownloadFileParams,\n  DownloadThumbnailParams,\n  MessageAttachmentParams,\n  PersonImageParams,\n  PostCoverParams,\n  UploadFileParams,\n  refusals,\n} from '../../schemas/index.js';\nimport { actorOf as memberOf } from './actor.js';\nimport type { Container } from '../../../app/container.js';\n\nconst tags = ['Files'];\nconst responses = { 302: z.void(), ...refusals(403, 404) };\n\nfunction redirect(reply: FastifyReply, url: string | null, what: string, id: string) {\n  if (!url) {\n    throw new NotFoundError(what, id);\n  }\n  return reply\n    .header('cache-control', 'no-store')\n    .header('referrer-policy', 'no-referrer')\n    .redirect(url, 302);\n}\n\nexport async function memberFileRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const member = container.reporting.member;\n\n  async function actorOf(orgId: string, userId: string) {\n    const orgUser = await memberOf(container, orgId, userId);\n    return { id: orgUser.id, role: orgUser.role };\n  }\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/courses/:courseId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getCourseThumbnail',\n      tags,\n      summary: \"Redirect to a course's thumbnail\",\n      description:\n        'Any org user may fetch the thumbnail of a published course; staff may fetch any. 404 when the course has no thumbnail.',\n      params: CourseThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await member.thumbnailFile(req.orgId, actor, 'course', req.params.courseId);\n      return redirect(reply, url, 'Course thumbnail', req.params.courseId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/downloads/:downloadId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getDownloadThumbnail',\n      tags,\n      summary: \"Redirect to a download's thumbnail\",\n      description:\n        'Any org user may fetch the thumbnail of a published download; staff may fetch any. 404 when the download has no thumbnail.',\n      params: DownloadThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await member.thumbnailFile(req.orgId, actor, 'download', req.params.downloadId);\n      return redirect(reply, url, 'Download thumbnail', req.params.downloadId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getCommunityThumbnail',\n      tags,\n      summary: \"Redirect to a community's thumbnail\",\n      description:\n        'Any org user may fetch the thumbnail of a published community; staff may fetch any. 404 when the community has no thumbnail.',\n      params: CommunityThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await member.thumbnailFile(req.orgId, actor, 'community', req.params.communityId);\n      return redirect(reply, url, 'Community thumbnail', req.params.communityId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/activities/:activityId/assets/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getActivityFile',\n      tags,\n      summary: 'Redirect to a file used in a lesson',\n      description:\n        'Served when the student can open the course, the course and the lesson are published, and the lesson lists the file. Staff may fetch any file a lesson lists. Use the URL as an img, video or audio src.',\n      params: ActivityFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await member.activityFile(\n        req.orgId,\n        actor,\n        req.params.activityId,\n        req.params.assetId,\n      );\n      return redirect(reply, url, 'Lesson file', req.params.assetId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/downloads/:downloadId/assets/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getDownloadFile',\n      tags,\n      summary: 'Redirect to a file in a download, saved under its display name',\n      description:\n        'Served when the student can open the download, it is published, and it lists the file. Staff may fetch any file a download lists. The storage link lives DELIVERY_URL_EXPIRY seconds.',\n      params: DownloadFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await member.downloadFile(\n        req.orgId,\n        actor,\n        req.params.downloadId,\n        req.params.assetId,\n      );\n      return redirect(reply, url, 'Download file', req.params.assetId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/posts/:postId/cover',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getPostCover',\n      tags,\n      summary: \"Redirect to a post's cover image\",\n      description: 'Served to whoever can read the post. 404 when the post has no cover.',\n      params: PostCoverParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await container.posts.coverFile(req.orgId, actor, req.params.postId);\n      return redirect(reply, url, 'Post cover', req.params.postId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/chats/:chatId/messages/:messageId/attachments/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMessageAttachment',\n      tags,\n      summary: 'Redirect to an image attached to a chat message',\n      description:\n        \"Served to the chat's participants while the message stands (staff also after it is deleted), and to moderators while the message is flagged.\",\n      params: MessageAttachmentParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await container.chats.attachmentFile(\n        req.orgId,\n        actor,\n        req.params.chatId,\n        req.params.messageId,\n        req.params.assetId,\n      );\n      return redirect(reply, url, 'Message attachment', req.params.assetId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/people/:orgUserId/image',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getPersonImage',\n      tags,\n      summary: \"Redirect to an org user's profile photo\",\n      description:\n        'Served to org users of the same organization when the photo belongs to it. 404 when the person has no photo here.',\n      params: PersonImageParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      await actorOf(req.orgId, req.userId);\n      const url = await member.personImage(req.orgId, req.params.orgUserId);\n      return redirect(reply, url, 'Profile photo', req.params.orgUserId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/uploads/:id/file',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberUploadFile',\n      tags,\n      summary: 'Redirect to an image you uploaded',\n      description: 'Served only to the person who uploaded it, once it is finalized.',\n      params: UploadFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(req.orgId, req.userId);\n      const url = await container.assets.ownUploadFile(req.orgId, req.params.id, actor.id);\n      return redirect(reply, url, 'Upload', req.params.id);\n    },\n  });\n}\n"],"mappings":";;;;;;;AAuBA,MAAM,OAAO,CAAC,OAAO;AACrB,MAAM,YAAY;CAAE,KAAK,EAAE,KAAK;CAAG,GAAG,SAAS,KAAK,GAAG;AAAE;AAEzD,SAAS,SAAS,OAAqB,KAAoB,MAAc,IAAY;CACnF,IAAI,CAAC,KACH,MAAM,IAAI,cAAc,MAAM,EAAE;CAElC,OAAO,MACJ,OAAO,iBAAiB,UAAU,CAAC,CACnC,OAAO,mBAAmB,aAAa,CAAC,CACxC,SAAS,KAAK,GAAG;AACtB;AAEA,eAAsB,iBAAiB,KAAsB,WAAqC;CAChG,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,SAAS,UAAU,UAAU;CAEnC,eAAeA,UAAQ,OAAe,QAAgB;EACpD,MAAM,UAAU,MAAMC,QAAS,WAAW,OAAO,MAAM;EACvD,OAAO;GAAE,IAAI,QAAQ;GAAI,MAAM,QAAQ;EAAK;CAC9C;CAEA,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMD,UAAQ,IAAI,OAAO,IAAI,MAAM;GAEjD,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,IAAI,OAAO,OAAO,UAAU,IAAI,OAAO,QAAQ,GAC1D,oBAAoB,IAAI,OAAO,QAAQ;EACrE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAEjD,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,IAAI,OAAO,OAAO,YAAY,IAAI,OAAO,UAAU,GAC9D,sBAAsB,IAAI,OAAO,UAAU;EACzE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAEjD,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,IAAI,OAAO,OAAO,aAAa,IAAI,OAAO,WAAW,GAChE,uBAAuB,IAAI,OAAO,WAAW;EAC3E;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAOjD,OAAO,SAAS,OAAO,MANL,OAAO,aACvB,IAAI,OACJ,OACA,IAAI,OAAO,YACX,IAAI,OAAO,OACb,GAC4B,eAAe,IAAI,OAAO,OAAO;EAC/D;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAOjD,OAAO,SAAS,OAAO,MANL,OAAO,aACvB,IAAI,OACJ,OACA,IAAI,OAAO,YACX,IAAI,OAAO,OACb,GAC4B,iBAAiB,IAAI,OAAO,OAAO;EACjE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAEjD,OAAO,SAAS,OAAO,MADL,UAAU,MAAM,UAAU,IAAI,OAAO,OAAO,IAAI,OAAO,MAAM,GACnD,cAAc,IAAI,OAAO,MAAM;EAC7D;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAQjD,OAAO,SAAS,OAAO,MAPL,UAAU,MAAM,eAChC,IAAI,OACJ,OACA,IAAI,OAAO,QACX,IAAI,OAAO,WACX,IAAI,OAAO,OACb,GAC4B,sBAAsB,IAAI,OAAO,OAAO;EACtE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAEnC,OAAO,SAAS,OAAO,MADL,OAAO,YAAY,IAAI,OAAO,IAAI,OAAO,SAAS,GACxC,iBAAiB,IAAI,OAAO,SAAS;EACnE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAMA,UAAQ,IAAI,OAAO,IAAI,MAAM;GAEjD,OAAO,SAAS,OAAO,MADL,UAAU,OAAO,cAAc,IAAI,OAAO,IAAI,OAAO,IAAI,MAAM,EAAE,GACvD,UAAU,IAAI,OAAO,EAAE;EACrD;CACF,CAAC;AACH"}

package/dist/http/routes/member/index.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/member/index.d.ts
+declare function memberRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { memberRoutes };
+//# sourceMappingURL=index.d.ts.map

package/dist/http/routes/member/index.js

@@ -0,0 +1,35 @@
+import { memberAssetsRoutes } from "./assets.js";
+import { memberChatRoutes } from "./chats.js";
+import { memberCommentsRoutes } from "./comments.js";
+import { memberCommunityRoutes } from "./community.js";
+import { memberCoursesRoutes } from "./courses.js";
+import { memberDownloadsRoutes } from "./downloads.js";
+import { memberFileRoutes } from "./files.js";
+import { memberNotificationRoutes } from "./notifications.js";
+import { memberNotificationSettingsRoutes } from "./notification-settings.js";
+import { memberDeviceRoutes } from "./devices.js";
+import { memberOrgRoutes } from "./org.js";
+import { memberPostRoutes } from "./posts.js";
+import { memberProfileRoutes } from "./profile.js";
+import { memberProgressRoutes } from "./progress.js";
+//#region src/http/routes/member/index.ts
+async function memberRoutes(app, container) {
+	await memberOrgRoutes(app, container);
+	await memberProfileRoutes(app, container);
+	await memberCommunityRoutes(app, container);
+	await memberPostRoutes(app, container);
+	await memberChatRoutes(app, container);
+	await memberCoursesRoutes(app, container);
+	await memberProgressRoutes(app, container);
+	await memberCommentsRoutes(app, container);
+	await memberAssetsRoutes(app, container);
+	await memberDownloadsRoutes(app, container);
+	await memberFileRoutes(app, container);
+	await memberNotificationRoutes(app, container);
+	await memberNotificationSettingsRoutes(app, container);
+	await memberDeviceRoutes(app, container);
+}
+//#endregion
+export { memberRoutes };
+
+//# sourceMappingURL=index.js.map

package/dist/http/routes/member/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../../src/http/routes/member/index.ts"],"sourcesContent":["// Student HTTP API under `/api/member`. Session-guarded like every\n// back-office route, but scoped by the session's `org_users` row —\n// the reads gate on the person's enrollments, not on staff role. One file per\n// resource; everything under `/api/member` lives in this directory and nowhere\n// else. The course, download, and progress reads call reporting/member.\nimport type { FastifyInstance } from 'fastify';\nimport type { Container } from '../../../app/container.js';\nimport { memberAssetsRoutes } from './assets.js';\nimport { memberChatRoutes } from './chats.js';\nimport { memberCommentsRoutes } from './comments.js';\nimport { memberCommunityRoutes } from './community.js';\nimport { memberCoursesRoutes } from './courses.js';\nimport { memberDownloadsRoutes } from './downloads.js';\nimport { memberFileRoutes } from './files.js';\nimport { memberNotificationRoutes } from './notifications.js';\nimport { memberNotificationSettingsRoutes } from './notification-settings.js';\nimport { memberDeviceRoutes } from './devices.js';\nimport { memberOrgRoutes } from './org.js';\nimport { memberPostRoutes } from './posts.js';\nimport { memberProfileRoutes } from './profile.js';\nimport { memberProgressRoutes } from './progress.js';\n\nexport async function memberRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  await memberOrgRoutes(app, container);\n  await memberProfileRoutes(app, container);\n  await memberCommunityRoutes(app, container);\n  await memberPostRoutes(app, container);\n  await memberChatRoutes(app, container);\n  await memberCoursesRoutes(app, container);\n  await memberProgressRoutes(app, container);\n  await memberCommentsRoutes(app, container);\n  await memberAssetsRoutes(app, container);\n  await memberDownloadsRoutes(app, container);\n  await memberFileRoutes(app, container);\n  await memberNotificationRoutes(app, container);\n  await memberNotificationSettingsRoutes(app, container);\n  await memberDeviceRoutes(app, container);\n}\n"],"mappings":";;;;;;;;;;;;;;;AAsBA,eAAsB,aAAa,KAAsB,WAAqC;CAC5F,MAAM,gBAAgB,KAAK,SAAS;CACpC,MAAM,oBAAoB,KAAK,SAAS;CACxC,MAAM,sBAAsB,KAAK,SAAS;CAC1C,MAAM,iBAAiB,KAAK,SAAS;CACrC,MAAM,iBAAiB,KAAK,SAAS;CACrC,MAAM,oBAAoB,KAAK,SAAS;CACxC,MAAM,qBAAqB,KAAK,SAAS;CACzC,MAAM,qBAAqB,KAAK,SAAS;CACzC,MAAM,mBAAmB,KAAK,SAAS;CACvC,MAAM,sBAAsB,KAAK,SAAS;CAC1C,MAAM,iBAAiB,KAAK,SAAS;CACrC,MAAM,yBAAyB,KAAK,SAAS;CAC7C,MAAM,iCAAiC,KAAK,SAAS;CACrD,MAAM,mBAAmB,KAAK,SAAS;AACzC"}

package/dist/http/routes/member/notification-settings.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/member/notification-settings.d.ts
+declare function memberNotificationSettingsRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { memberNotificationSettingsRoutes };
+//# sourceMappingURL=notification-settings.d.ts.map

package/dist/http/routes/member/notification-settings.js

@@ -0,0 +1,108 @@
+import { refusals } from "../../schemas/shared.js";
+import { CommunityParam } from "../../schemas/chats.js";
+import { CommunityNotificationSettings, OrgNotificationSettings, PatchNotificationSettings } from "../../schemas/notifications.js";
+import "../../schemas/index.js";
+import { actorOf } from "./actor.js";
+import { z } from "zod";
+import { NotFoundError } from "@headless-lms/core/shared/errors";
+//#region src/http/routes/member/notification-settings.ts
+async function memberNotificationSettingsRoutes(app, container) {
+	const r = app.withTypeProvider();
+	const tags = ["Notifications"];
+	r.route({
+		method: "GET",
+		url: "/api/member/communities/:communityId/settings/notifications",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getMemberCommunityNotificationSettings",
+			tags,
+			summary: "Read how you are told about each notification category in a community",
+			description: "For anyone who can open the community, staff included. One entry per category of the list in use, each with the channels it offers on this deployment, whether each is on for you and why (`locked`, `space`, `community`, `spaceDefault` or `default`), and `default`, what the channel would be without your own setting at that level. A per-space category also lists every space you can open, with its name. `digest` is the digest schedule of the community, null when it sends none. 404 when you cannot open the community.",
+			params: CommunityParam,
+			response: {
+				200: CommunityNotificationSettings,
+				...refusals(403, 404)
+			}
+		},
+		handler: async (req) => {
+			const actor = await actorOf(container, req.orgId, req.userId);
+			const view = await container.reporting.member.communityNotificationSettings(req.orgId, actor, req.userId, req.params.communityId);
+			if (!view) throw new NotFoundError("Community", req.params.communityId);
+			return view;
+		}
+	});
+	r.route({
+		method: "PATCH",
+		url: "/api/member/communities/:communityId/settings/notifications",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "setMemberCommunityNotificationSettings",
+			tags,
+			summary: "Switch notification categories on or off per channel in a community",
+			description: "For anyone who can open the community, staff included. Each setting switches one category on one channel, for all spaces or, for a per-space category, for one space; `enabled: null` removes your choice so the default applies again. Settings left out keep their values. 404 when you cannot open the community; 422 when a category does not exist, does not offer the channel, the channel is locked, or `spaceId` is given for a category that is not per space.",
+			params: CommunityParam,
+			body: PatchNotificationSettings,
+			response: {
+				204: z.void(),
+				...refusals(400, 403, 404, 422)
+			}
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf(container, req.orgId, req.userId);
+			await container.notificationSettings.set(req.orgId, {
+				id: actor.id,
+				role: actor.role,
+				userId: req.userId
+			}, { communityId: req.params.communityId }, req.body.settings);
+			return reply.code(204).send();
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/settings/notifications",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getMemberNotificationSettings",
+			tags,
+			summary: "Read how you are told about notifications outside any community",
+			description: "For anyone signed in to the organization. The organization's categories, such as access and course content, each with the channels it offers, whether each is on for you, and `default`, what it would be without your own setting.",
+			response: {
+				200: OrgNotificationSettings,
+				...refusals(403)
+			}
+		},
+		handler: async (req) => {
+			await actorOf(container, req.orgId, req.userId);
+			return container.reporting.member.orgNotificationSettings(req.orgId, req.userId);
+		}
+	});
+	r.route({
+		method: "PATCH",
+		url: "/api/member/settings/notifications",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "setMemberNotificationSettings",
+			tags,
+			summary: "Switch notification categories outside any community on or off per channel",
+			description: "For anyone signed in to the organization. Works like the community settings, against the organization's categories; `enabled: null` removes your choice. 422 when a category does not exist, does not offer the channel, the channel is locked, or `spaceId` is given.",
+			body: PatchNotificationSettings,
+			response: {
+				204: z.void(),
+				...refusals(400, 403, 422)
+			}
+		},
+		handler: async (req, reply) => {
+			const actor = await actorOf(container, req.orgId, req.userId);
+			await container.notificationSettings.set(req.orgId, {
+				id: actor.id,
+				role: actor.role,
+				userId: req.userId
+			}, "org", req.body.settings);
+			return reply.code(204).send();
+		}
+	});
+}
+//#endregion
+export { memberNotificationSettingsRoutes };
+
+//# sourceMappingURL=notification-settings.js.map

package/dist/http/routes/member/notification-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-settings.js","names":[],"sources":["../../../../src/http/routes/member/notification-settings.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { z } from 'zod';\nimport type { Container } from '../../../app/container.js';\nimport { NotFoundError } from '@headless-lms/core/shared/errors';\nimport { actorOf } from './actor.js';\nimport {\n  CommunityParam,\n  CommunityNotificationSettings,\n  OrgNotificationSettings,\n  PatchNotificationSettings,\n  refusals,\n} from '../../schemas/index.js';\n\nexport async function memberNotificationSettingsRoutes(\n  app: FastifyInstance,\n  container: Container,\n): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const tags = ['Notifications'];\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/settings/notifications',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberCommunityNotificationSettings',\n      tags,\n      summary: 'Read how you are told about each notification category in a community',\n      description:\n        'For anyone who can open the community, staff included. One entry per category of the list in use, each with the channels it offers on this deployment, whether each is on for you and why (`locked`, `space`, `community`, `spaceDefault` or `default`), and `default`, what the channel would be without your own setting at that level. A per-space category also lists every space you can open, with its name. `digest` is the digest schedule of the community, null when it sends none. 404 when you cannot open the community.',\n      params: CommunityParam,\n      response: { 200: CommunityNotificationSettings, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      const view = await container.reporting.member.communityNotificationSettings(\n        req.orgId,\n        actor,\n        req.userId,\n        req.params.communityId,\n      );\n      if (!view) {\n        throw new NotFoundError('Community', req.params.communityId);\n      }\n      return view;\n    },\n  });\n\n  r.route({\n    method: 'PATCH',\n    url: '/api/member/communities/:communityId/settings/notifications',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'setMemberCommunityNotificationSettings',\n      tags,\n      summary: 'Switch notification categories on or off per channel in a community',\n      description:\n        'For anyone who can open the community, staff included. Each setting switches one category on one channel, for all spaces or, for a per-space category, for one space; `enabled: null` removes your choice so the default applies again. Settings left out keep their values. 404 when you cannot open the community; 422 when a category does not exist, does not offer the channel, the channel is locked, or `spaceId` is given for a category that is not per space.',\n      params: CommunityParam,\n      body: PatchNotificationSettings,\n      response: { 204: z.void(), ...refusals(400, 403, 404, 422) },\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      await container.notificationSettings.set(\n        req.orgId,\n        { id: actor.id, role: actor.role, userId: req.userId },\n        { communityId: req.params.communityId },\n        req.body.settings,\n      );\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/settings/notifications',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberNotificationSettings',\n      tags,\n      summary: 'Read how you are told about notifications outside any community',\n      description:\n        \"For anyone signed in to the organization. The organization's categories, such as access and course content, each with the channels it offers, whether each is on for you, and `default`, what it would be without your own setting.\",\n      response: { 200: OrgNotificationSettings, ...refusals(403) },\n    },\n    handler: async (req) => {\n      await actorOf(container, req.orgId, req.userId);\n      return container.reporting.member.orgNotificationSettings(req.orgId, req.userId);\n    },\n  });\n\n  r.route({\n    method: 'PATCH',\n    url: '/api/member/settings/notifications',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'setMemberNotificationSettings',\n      tags,\n      summary: 'Switch notification categories outside any community on or off per channel',\n      description:\n        \"For anyone signed in to the organization. Works like the community settings, against the organization's categories; `enabled: null` removes your choice. 422 when a category does not exist, does not offer the channel, the channel is locked, or `spaceId` is given.\",\n      body: PatchNotificationSettings,\n      response: { 204: z.void(), ...refusals(400, 403, 422) },\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      await container.notificationSettings.set(\n        req.orgId,\n        { id: actor.id, role: actor.role, userId: req.userId },\n        'org',\n        req.body.settings,\n      );\n      return reply.code(204).send();\n    },\n  });\n}\n"],"mappings":";;;;;;;;AAcA,eAAsB,iCACpB,KACA,WACe;CACf,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,OAAO,CAAC,eAAe;CAE7B,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAA+B,GAAG,SAAS,KAAK,GAAG;GAAE;EACxE;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,OAAO,MAAM,UAAU,UAAU,OAAO,8BAC5C,IAAI,OACJ,OACA,IAAI,QACJ,IAAI,OAAO,WACb;GACA,IAAI,CAAC,MACH,MAAM,IAAI,cAAc,aAAa,IAAI,OAAO,WAAW;GAE7D,OAAO;EACT;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,KAAK,KAAK,GAAG;GAAE;EAC7D;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,UAAU,qBAAqB,IACnC,IAAI,OACJ;IAAE,IAAI,MAAM;IAAI,MAAM,MAAM;IAAM,QAAQ,IAAI;GAAO,GACrD,EAAE,aAAa,IAAI,OAAO,YAAY,GACtC,IAAI,KAAK,QACX;GACA,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,UAAU;IAAE,KAAK;IAAyB,GAAG,SAAS,GAAG;GAAE;EAC7D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9C,OAAO,UAAU,UAAU,OAAO,wBAAwB,IAAI,OAAO,IAAI,MAAM;EACjF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,MAAM;GACN,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,UAAU,qBAAqB,IACnC,IAAI,OACJ;IAAE,IAAI,MAAM;IAAI,MAAM,MAAM;IAAM,QAAQ,IAAI;GAAO,GACrD,OACA,IAAI,KAAK,QACX;GACA,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;AACH"}

package/dist/http/routes/member/notifications.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/member/notifications.d.ts
+declare function memberNotificationRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { memberNotificationRoutes };
+//# sourceMappingURL=notifications.d.ts.map

package/dist/http/routes/member/notifications.js

@@ -0,0 +1,125 @@
+import { refusals } from "../../schemas/shared.js";
+import { NotificationFilterQuery, NotificationIdParam, NotificationListQuery, NotificationUnreadCounts, NotificationView, NotificationsPage } from "../../schemas/notifications.js";
+import "../../schemas/index.js";
+import { actorOf } from "./actor.js";
+import { z } from "zod";
+import { InvalidInputError, NotFoundError } from "@headless-lms/core/shared/errors";
+//#region src/http/routes/member/notifications.ts
+async function memberNotificationRoutes(app, container) {
+	const r = app.withTypeProvider();
+	const tags = ["Notifications"];
+	r.route({
+		method: "GET",
+		url: "/api/member/notifications",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "listMemberNotifications",
+			tags,
+			summary: "List your notifications, newest first, with the unread count of the same filters",
+			description: "For any member of the organization. Filters combine with AND; the values of one filter combine with OR, and `includeOrg=true` with `communityId` adds the org list, so one query reads a community with the course and account notifications. 400 for `includeOrg` without `communityId` or with `scope`. Each notification carries the current titles, names and excerpts of what it refers to; a subject or parent you can no longer open, or that was deleted, is null. `display` is the text stored when it was sent.",
+			querystring: NotificationListQuery,
+			response: {
+				200: NotificationsPage,
+				...refusals(400, 403)
+			}
+		},
+		handler: async (req) => {
+			const actor = await actorOf(container, req.orgId, req.userId);
+			const { page, pageSize, ...filter } = req.query;
+			return container.reporting.member.notifications(req.orgId, actor, req.userId, filter, {
+				page,
+				pageSize
+			});
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/notifications/unread-counts",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getMemberNotificationUnreadCounts",
+			tags,
+			summary: "Count your unread notifications in the org list and in each community",
+			description: "For any member of the organization. `org` counts the org list; `communities` has one entry per community you can open, staff included.",
+			response: {
+				200: NotificationUnreadCounts,
+				...refusals(403)
+			}
+		},
+		handler: async (req) => {
+			const actor = await actorOf(container, req.orgId, req.userId);
+			return container.reporting.member.notificationUnreadCounts(req.orgId, actor, req.userId);
+		}
+	});
+	r.route({
+		method: "GET",
+		url: "/api/member/notifications/:notificationId",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "getMemberNotification",
+			tags,
+			summary: "Read one of your notifications",
+			description: "For any member of the organization. The notification as the list shows it, with current titles, names and excerpts; reading it does not mark it read. 404 when it is not yours or was not shown in the app.",
+			params: NotificationIdParam,
+			response: {
+				200: NotificationView,
+				...refusals(403, 404)
+			}
+		},
+		handler: async (req) => {
+			const actor = await actorOf(container, req.orgId, req.userId);
+			const view = await container.reporting.member.notification(req.orgId, actor, req.userId, req.params.notificationId);
+			if (!view) throw new NotFoundError("Notification", req.params.notificationId);
+			return view;
+		}
+	});
+	r.route({
+		method: "POST",
+		url: "/api/member/notifications/:notificationId/read",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "markMemberNotificationRead",
+			tags,
+			summary: "Mark one of your notifications read",
+			description: "For any member of the organization. Marking a read notification keeps its first read time. 404 when it is not yours.",
+			params: NotificationIdParam,
+			response: {
+				204: z.void(),
+				...refusals(403, 404)
+			}
+		},
+		handler: async (req, reply) => {
+			await actorOf(container, req.orgId, req.userId);
+			await container.notificationList.markRead(req.orgId, req.userId, req.params.notificationId);
+			return reply.code(204).send();
+		}
+	});
+	r.route({
+		method: "POST",
+		url: "/api/member/notifications/read",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "markAllMemberNotificationsRead",
+			tags,
+			summary: "Mark your notifications matching the filters read",
+			description: "For any member of the organization. Takes the filters of the list in the query string, `includeOrg` included; with none, marks every notification read. 400 when the request has a body.",
+			querystring: NotificationFilterQuery,
+			response: {
+				204: z.void(),
+				...refusals(400, 403)
+			}
+		},
+		preValidation: async (req) => {
+			if (req.body !== void 0) throw new InvalidInputError("Mark-read takes its filters in the query string, not in a body");
+		},
+		handler: async (req, reply) => {
+			await actorOf(container, req.orgId, req.userId);
+			await container.notificationList.markAllRead(req.orgId, req.userId, req.query);
+			return reply.code(204).send();
+		}
+	});
+}
+//#endregion
+export { memberNotificationRoutes };
+
+//# sourceMappingURL=notifications.js.map

package/dist/http/routes/member/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.js","names":[],"sources":["../../../../src/http/routes/member/notifications.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { z } from 'zod';\nimport type { Container } from '../../../app/container.js';\nimport { InvalidInputError, NotFoundError } from '@headless-lms/core/shared/errors';\nimport { actorOf } from './actor.js';\nimport {\n  NotificationFilterQuery,\n  NotificationIdParam,\n  NotificationListQuery,\n  NotificationUnreadCounts,\n  NotificationView,\n  NotificationsPage,\n  refusals,\n} from '../../schemas/index.js';\n\nexport async function memberNotificationRoutes(\n  app: FastifyInstance,\n  container: Container,\n): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const tags = ['Notifications'];\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/notifications',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listMemberNotifications',\n      tags,\n      summary: 'List your notifications, newest first, with the unread count of the same filters',\n      description:\n        'For any member of the organization. Filters combine with AND; the values of one filter combine with OR, and `includeOrg=true` with `communityId` adds the org list, so one query reads a community with the course and account notifications. 400 for `includeOrg` without `communityId` or with `scope`. Each notification carries the current titles, names and excerpts of what it refers to; a subject or parent you can no longer open, or that was deleted, is null. `display` is the text stored when it was sent.',\n      querystring: NotificationListQuery,\n      response: { 200: NotificationsPage, ...refusals(400, 403) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      const { page, pageSize, ...filter } = req.query;\n      return container.reporting.member.notifications(req.orgId, actor, req.userId, filter, {\n        page,\n        pageSize,\n      });\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/notifications/unread-counts',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberNotificationUnreadCounts',\n      tags,\n      summary: 'Count your unread notifications in the org list and in each community',\n      description:\n        'For any member of the organization. `org` counts the org list; `communities` has one entry per community you can open, staff included.',\n      response: { 200: NotificationUnreadCounts, ...refusals(403) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return container.reporting.member.notificationUnreadCounts(req.orgId, actor, req.userId);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/notifications/:notificationId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberNotification',\n      tags,\n      summary: 'Read one of your notifications',\n      description:\n        'For any member of the organization. The notification as the list shows it, with current titles, names and excerpts; reading it does not mark it read. 404 when it is not yours or was not shown in the app.',\n      params: NotificationIdParam,\n      response: { 200: NotificationView, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      const view = await container.reporting.member.notification(\n        req.orgId,\n        actor,\n        req.userId,\n        req.params.notificationId,\n      );\n      if (!view) {\n        throw new NotFoundError('Notification', req.params.notificationId);\n      }\n      return view;\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/notifications/:notificationId/read',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'markMemberNotificationRead',\n      tags,\n      summary: 'Mark one of your notifications read',\n      description:\n        'For any member of the organization. Marking a read notification keeps its first read time. 404 when it is not yours.',\n      params: NotificationIdParam,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      await actorOf(container, req.orgId, req.userId);\n      await container.notificationList.markRead(req.orgId, req.userId, req.params.notificationId);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/notifications/read',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'markAllMemberNotificationsRead',\n      tags,\n      summary: 'Mark your notifications matching the filters read',\n      description:\n        'For any member of the organization. Takes the filters of the list in the query string, `includeOrg` included; with none, marks every notification read. 400 when the request has a body.',\n      querystring: NotificationFilterQuery,\n      response: { 204: z.void(), ...refusals(400, 403) },\n    },\n    preValidation: async (req) => {\n      if (req.body !== undefined) {\n        throw new InvalidInputError('Mark-read takes its filters in the query string, not in a body');\n      }\n    },\n    handler: async (req, reply) => {\n      await actorOf(container, req.orgId, req.userId);\n      await container.notificationList.markAllRead(req.orgId, req.userId, req.query);\n      return reply.code(204).send();\n    },\n  });\n}\n"],"mappings":";;;;;;;AAgBA,eAAsB,yBACpB,KACA,WACe;CACf,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,OAAO,CAAC,eAAe;CAE7B,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,aAAa;GACb,UAAU;IAAE,KAAK;IAAmB,GAAG,SAAS,KAAK,GAAG;GAAE;EAC5D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,EAAE,MAAM,UAAU,GAAG,WAAW,IAAI;GAC1C,OAAO,UAAU,UAAU,OAAO,cAAc,IAAI,OAAO,OAAO,IAAI,QAAQ,QAAQ;IACpF;IACA;GACF,CAAC;EACH;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,UAAU;IAAE,KAAK;IAA0B,GAAG,SAAS,GAAG;GAAE;EAC9D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,UAAU,UAAU,OAAO,yBAAyB,IAAI,OAAO,OAAO,IAAI,MAAM;EACzF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAkB,GAAG,SAAS,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,OAAO,MAAM,UAAU,UAAU,OAAO,aAC5C,IAAI,OACJ,OACA,IAAI,QACJ,IAAI,OAAO,cACb;GACA,IAAI,CAAC,MACH,MAAM,IAAI,cAAc,gBAAgB,IAAI,OAAO,cAAc;GAEnE,OAAO;EACT;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9C,MAAM,UAAU,iBAAiB,SAAS,IAAI,OAAO,IAAI,QAAQ,IAAI,OAAO,cAAc;GAC1F,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,aAAa;GACb,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,eAAe,OAAO,QAAQ;GAC5B,IAAI,IAAI,SAAS,KAAA,GACf,MAAM,IAAI,kBAAkB,gEAAgE;EAEhG;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC9C,MAAM,UAAU,iBAAiB,YAAY,IAAI,OAAO,IAAI,QAAQ,IAAI,KAAK;GAC7E,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;AACH"}

package/dist/http/routes/member/org.d.ts

@@ -0,0 +1,7 @@
+import { Container } from "../../../app/container.js";
+import { FastifyInstance } from "fastify";
+//#region src/http/routes/member/org.d.ts
+declare function memberOrgRoutes(app: FastifyInstance, container: Container): Promise<void>;
+//#endregion
+export { memberOrgRoutes };
+//# sourceMappingURL=org.d.ts.map