@headless-lms/server 0.2.0 → 0.4.0

package/dist/http/mcp/tools/courses.js

@@ -0,0 +1,121 @@
+import { CoursesQuery, CreateCourse, PatchCourseSettings, UpdateCourse } from "../../schemas/content.js";
+import { CourseIdPathParam, CreateModule, ModulePathParam, ReorderInput, UpdateModule } from "../../schemas/activities.js";
+import "../../schemas/index.js";
+import { actor, defineTool } from "../tool.js";
+//#region src/http/mcp/tools/courses.ts
+const courseTools = [
+	defineTool({
+		name: "list_courses",
+		title: "List courses",
+		description: "Search and page through the courses, each with its status and settings. Filter by status or category.",
+		scope: "courses:read",
+		kind: "read",
+		idempotent: true,
+		openWorld: false,
+		input: CoursesQuery,
+		call: (input, { container, scope }) => container.content.listCourses(scope.orgId, input)
+	}),
+	defineTool({
+		name: "list_modules",
+		title: "List modules",
+		description: "The modules of a course, in order.",
+		scope: "courses:read",
+		kind: "read",
+		idempotent: true,
+		openWorld: false,
+		input: CourseIdPathParam,
+		call: ({ courseId }, { container, scope }) => container.content.listCourseModules(scope.orgId, courseId)
+	}),
+	defineTool({
+		name: "create_course",
+		title: "Create course",
+		description: "Create a draft course. Publish it with update_course.",
+		scope: "courses:write",
+		kind: "write",
+		idempotent: false,
+		openWorld: false,
+		input: CreateCourse,
+		call: (input, { container, scope }) => container.content.createCourse(scope.orgId, input)
+	}),
+	defineTool({
+		name: "update_course",
+		title: "Update course",
+		description: "Change a course title, description, category or cover image, or publish and unpublish it with status. Fields left out stay as they are.",
+		scope: "courses:write",
+		kind: "write",
+		idempotent: true,
+		openWorld: false,
+		input: UpdateCourse.extend(CourseIdPathParam.shape),
+		call: ({ courseId, ...patch }, { container, scope }) => container.content.updateCourse(scope.orgId, courseId, patch)
+	}),
+	defineTool({
+		name: "update_course_settings",
+		title: "Update course settings",
+		description: "Change course settings such as transcript downloads and comments. Settings left out stay as they are.",
+		scope: "courses:write",
+		kind: "write",
+		idempotent: true,
+		openWorld: false,
+		input: PatchCourseSettings.extend(CourseIdPathParam.shape),
+		call: ({ courseId, ...settings }, { container, scope }) => container.content.patchCourseSettings(scope.orgId, courseId, settings)
+	}),
+	defineTool({
+		name: "create_module",
+		title: "Create module",
+		description: "Add a module at the end of a course. Returns the course modules in order.",
+		scope: "courses:write",
+		kind: "write",
+		idempotent: false,
+		openWorld: false,
+		input: CreateModule.extend(CourseIdPathParam.shape),
+		call: ({ courseId, title }, { container, scope }) => container.content.createModule(scope.orgId, courseId, title)
+	}),
+	defineTool({
+		name: "rename_module",
+		title: "Rename module",
+		description: "Rename a module. Returns the course modules in order.",
+		scope: "courses:write",
+		kind: "write",
+		idempotent: true,
+		openWorld: false,
+		input: UpdateModule.extend(ModulePathParam.shape),
+		call: ({ courseId, moduleId, title }, { container, scope }) => container.content.updateModule(scope.orgId, courseId, moduleId, title)
+	}),
+	defineTool({
+		name: "reorder_modules",
+		title: "Reorder modules",
+		description: "Set the module order of a course. Pass every module id of the course in the new order.",
+		scope: "courses:write",
+		kind: "write",
+		idempotent: true,
+		openWorld: false,
+		input: ReorderInput.extend(CourseIdPathParam.shape),
+		call: ({ courseId, orderedIds }, { container, scope }) => container.content.reorderModules(scope.orgId, courseId, orderedIds)
+	}),
+	defineTool({
+		name: "delete_course",
+		title: "Delete course",
+		description: "Permanently delete a course with its modules and activities.",
+		scope: "courses:delete",
+		kind: "destructive",
+		idempotent: true,
+		openWorld: false,
+		input: CourseIdPathParam,
+		call: ({ courseId }, { container, scope }) => container.content.deleteCourse(scope.orgId, courseId, actor(scope))
+	}),
+	defineTool({
+		name: "delete_module",
+		title: "Delete module",
+		description: "Permanently delete a module with its activities. Returns the remaining modules in order.",
+		scope: "courses:delete",
+		kind: "destructive",
+		idempotent: true,
+		openWorld: false,
+		input: ModulePathParam,
+		call: ({ courseId, moduleId }, { container, scope }) => container.content.deleteModule(scope.orgId, courseId, moduleId)
+	})
+];
+//#endregion
+export { courseTools };
+
+//# sourceMappingURL=courses.js.map

package/dist/http/mcp/tools/courses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"courses.js","names":[],"sources":["../../../../src/http/mcp/tools/courses.ts"],"sourcesContent":["import {\n  CourseIdPathParam,\n  CoursesQuery,\n  CreateCourse,\n  CreateModule,\n  ModulePathParam,\n  PatchCourseSettings,\n  ReorderInput,\n  UpdateCourse,\n  UpdateModule,\n} from '../../schemas/index.js';\nimport { actor, defineTool, type Tool } from '../tool.js';\n\nexport const courseTools: Tool[] = [\n  defineTool({\n    name: 'list_courses',\n    title: 'List courses',\n    description:\n      'Search and page through the courses, each with its status and settings. Filter by status or category.',\n    scope: 'courses:read',\n    kind: 'read',\n    idempotent: true,\n    openWorld: false,\n    input: CoursesQuery,\n    call: (input, { container, scope }) => container.content.listCourses(scope.orgId, input),\n  }),\n  defineTool({\n    name: 'list_modules',\n    title: 'List modules',\n    description: 'The modules of a course, in order.',\n    scope: 'courses:read',\n    kind: 'read',\n    idempotent: true,\n    openWorld: false,\n    input: CourseIdPathParam,\n    call: ({ courseId }, { container, scope }) =>\n      container.content.listCourseModules(scope.orgId, courseId),\n  }),\n  defineTool({\n    name: 'create_course',\n    title: 'Create course',\n    description: 'Create a draft course. Publish it with update_course.',\n    scope: 'courses:write',\n    kind: 'write',\n    idempotent: false,\n    openWorld: false,\n    input: CreateCourse,\n    call: (input, { container, scope }) => container.content.createCourse(scope.orgId, input),\n  }),\n  defineTool({\n    name: 'update_course',\n    title: 'Update course',\n    description:\n      'Change a course title, description, category or cover image, or publish and unpublish it with status. Fields left out stay as they are.',\n    scope: 'courses:write',\n    kind: 'write',\n    idempotent: true,\n    openWorld: false,\n    input: UpdateCourse.extend(CourseIdPathParam.shape),\n    call: ({ courseId, ...patch }, { container, scope }) =>\n      container.content.updateCourse(scope.orgId, courseId, patch),\n  }),\n  defineTool({\n    name: 'update_course_settings',\n    title: 'Update course settings',\n    description:\n      'Change course settings such as transcript downloads and comments. Settings left out stay as they are.',\n    scope: 'courses:write',\n    kind: 'write',\n    idempotent: true,\n    openWorld: false,\n    input: PatchCourseSettings.extend(CourseIdPathParam.shape),\n    call: ({ courseId, ...settings }, { container, scope }) =>\n      container.content.patchCourseSettings(scope.orgId, courseId, settings),\n  }),\n  defineTool({\n    name: 'create_module',\n    title: 'Create module',\n    description: 'Add a module at the end of a course. Returns the course modules in order.',\n    scope: 'courses:write',\n    kind: 'write',\n    idempotent: false,\n    openWorld: false,\n    input: CreateModule.extend(CourseIdPathParam.shape),\n    call: ({ courseId, title }, { container, scope }) =>\n      container.content.createModule(scope.orgId, courseId, title),\n  }),\n  defineTool({\n    name: 'rename_module',\n    title: 'Rename module',\n    description: 'Rename a module. Returns the course modules in order.',\n    scope: 'courses:write',\n    kind: 'write',\n    idempotent: true,\n    openWorld: false,\n    input: UpdateModule.extend(ModulePathParam.shape),\n    call: ({ courseId, moduleId, title }, { container, scope }) =>\n      container.content.updateModule(scope.orgId, courseId, moduleId, title),\n  }),\n  defineTool({\n    name: 'reorder_modules',\n    title: 'Reorder modules',\n    description:\n      'Set the module order of a course. Pass every module id of the course in the new order.',\n    scope: 'courses:write',\n    kind: 'write',\n    idempotent: true,\n    openWorld: false,\n    input: ReorderInput.extend(CourseIdPathParam.shape),\n    call: ({ courseId, orderedIds }, { container, scope }) =>\n      container.content.reorderModules(scope.orgId, courseId, orderedIds),\n  }),\n  defineTool({\n    name: 'delete_course',\n    title: 'Delete course',\n    description: 'Permanently delete a course with its modules and activities.',\n    scope: 'courses:delete',\n    kind: 'destructive',\n    idempotent: true,\n    openWorld: false,\n    input: CourseIdPathParam,\n    call: ({ courseId }, { container, scope }) =>\n      container.content.deleteCourse(scope.orgId, courseId, actor(scope)),\n  }),\n  defineTool({\n    name: 'delete_module',\n    title: 'Delete module',\n    description:\n      'Permanently delete a module with its activities. Returns the remaining modules in order.',\n    scope: 'courses:delete',\n    kind: 'destructive',\n    idempotent: true,\n    openWorld: false,\n    input: ModulePathParam,\n    call: ({ courseId, moduleId }, { container, scope }) =>\n      container.content.deleteModule(scope.orgId, courseId, moduleId),\n  }),\n];\n"],"mappings":";;;;;AAaA,MAAa,cAAsB;CACjC,WAAW;EACT,MAAM;EACN,OAAO;EACP,aACE;EACF,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO;EACP,OAAO,OAAO,EAAE,WAAW,YAAY,UAAU,QAAQ,YAAY,MAAM,OAAO,KAAK;CACzF,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aAAa;EACb,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO;EACP,OAAO,EAAE,YAAY,EAAE,WAAW,YAChC,UAAU,QAAQ,kBAAkB,MAAM,OAAO,QAAQ;CAC7D,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aAAa;EACb,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO;EACP,OAAO,OAAO,EAAE,WAAW,YAAY,UAAU,QAAQ,aAAa,MAAM,OAAO,KAAK;CAC1F,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aACE;EACF,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO,aAAa,OAAO,kBAAkB,KAAK;EAClD,OAAO,EAAE,UAAU,GAAG,SAAS,EAAE,WAAW,YAC1C,UAAU,QAAQ,aAAa,MAAM,OAAO,UAAU,KAAK;CAC/D,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aACE;EACF,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO,oBAAoB,OAAO,kBAAkB,KAAK;EACzD,OAAO,EAAE,UAAU,GAAG,YAAY,EAAE,WAAW,YAC7C,UAAU,QAAQ,oBAAoB,MAAM,OAAO,UAAU,QAAQ;CACzE,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aAAa;EACb,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO,aAAa,OAAO,kBAAkB,KAAK;EAClD,OAAO,EAAE,UAAU,SAAS,EAAE,WAAW,YACvC,UAAU,QAAQ,aAAa,MAAM,OAAO,UAAU,KAAK;CAC/D,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aAAa;EACb,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO,aAAa,OAAO,gBAAgB,KAAK;EAChD,OAAO,EAAE,UAAU,UAAU,SAAS,EAAE,WAAW,YACjD,UAAU,QAAQ,aAAa,MAAM,OAAO,UAAU,UAAU,KAAK;CACzE,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aACE;EACF,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO,aAAa,OAAO,kBAAkB,KAAK;EAClD,OAAO,EAAE,UAAU,cAAc,EAAE,WAAW,YAC5C,UAAU,QAAQ,eAAe,MAAM,OAAO,UAAU,UAAU;CACtE,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aAAa;EACb,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO;EACP,OAAO,EAAE,YAAY,EAAE,WAAW,YAChC,UAAU,QAAQ,aAAa,MAAM,OAAO,UAAU,MAAM,KAAK,CAAC;CACtE,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aACE;EACF,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO;EACP,OAAO,EAAE,UAAU,YAAY,EAAE,WAAW,YAC1C,UAAU,QAAQ,aAAa,MAAM,OAAO,UAAU,QAAQ;CAClE,CAAC;AACH"}

package/dist/http/mcp/tools/index.d.ts

@@ -0,0 +1,6 @@
+import { Tool } from "../tool.js";
+//#region src/http/mcp/tools/index.d.ts
+declare const TOOLS: Tool[];
+//#endregion
+export { TOOLS };
+//# sourceMappingURL=index.d.ts.map

package/dist/http/mcp/tools/index.js

@@ -0,0 +1,23 @@
+import { automationTools } from "./automations.js";
+import { catalogTools } from "./catalog.js";
+import { commentTools } from "./comments.js";
+import { communityMemberTools } from "./community-members.js";
+import { communityModerationTools } from "./community-moderation.js";
+import { communityTools } from "./communities.js";
+import { courseTools } from "./courses.js";
+import { peopleTools } from "./people.js";
+//#region src/http/mcp/tools/index.ts
+const TOOLS = [
+	...courseTools,
+	...catalogTools,
+	...peopleTools,
+	...automationTools,
+	...commentTools,
+	...communityTools,
+	...communityMemberTools,
+	...communityModerationTools
+];
+//#endregion
+export { TOOLS };
+
+//# sourceMappingURL=index.js.map

package/dist/http/mcp/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../../src/http/mcp/tools/index.ts"],"sourcesContent":["import type { Tool } from '../tool.js';\nimport { automationTools } from './automations.js';\nimport { catalogTools } from './catalog.js';\nimport { commentTools } from './comments.js';\nimport { communityMemberTools } from './community-members.js';\nimport { communityModerationTools } from './community-moderation.js';\nimport { communityTools } from './communities.js';\nimport { courseTools } from './courses.js';\nimport { peopleTools } from './people.js';\n\nexport const TOOLS: Tool[] = [\n  ...courseTools,\n  ...catalogTools,\n  ...peopleTools,\n  ...automationTools,\n  ...commentTools,\n  ...communityTools,\n  ...communityMemberTools,\n  ...communityModerationTools,\n];\n"],"mappings":";;;;;;;;;AAUA,MAAa,QAAgB;CAC3B,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;AACL"}

package/dist/http/mcp/tools/people.d.ts

@@ -0,0 +1,6 @@
+import { Tool } from "../tool.js";
+//#region src/http/mcp/tools/people.d.ts
+declare const peopleTools: Tool[];
+//#endregion
+export { peopleTools };
+//# sourceMappingURL=people.d.ts.map

package/dist/http/mcp/tools/people.js

@@ -0,0 +1,145 @@
+import { CourseIdPathParam } from "../../schemas/activities.js";
+import { StudentIdParam, StudentsQuery } from "../../schemas/students.js";
+import { EntitlementIdParam, EntitlementsQuery, GrantEntitlement, SetEntitlementStatus } from "../../schemas/entitlements.js";
+import { CreateInvite, Invite } from "../../schemas/invites.js";
+import { EnrollmentSeriesQuery } from "../../schemas/dashboard.js";
+import "../../schemas/index.js";
+import { actor, defineTool, noInput } from "../tool.js";
+//#region src/http/mcp/tools/people.ts
+const peopleTools = [
+	defineTool({
+		name: "list_students",
+		title: "List students",
+		description: "Search and page through the students with their access count, average progress, status and last activity.",
+		scope: "students:read",
+		kind: "read",
+		idempotent: true,
+		openWorld: false,
+		input: StudentsQuery,
+		call: (input, { container, scope }) => container.reporting.admin.listStudents(scope.orgId, input)
+	}),
+	defineTool({
+		name: "invite_student",
+		title: "Invite student",
+		description: "Invite someone by email as a student. They exist as an invited student at once. sendEmail false skips the email.",
+		scope: "students:invite",
+		kind: "write",
+		idempotent: false,
+		openWorld: true,
+		input: CreateInvite.omit({ role: true }),
+		output: Invite,
+		call: (input, { container, scope }) => container.organizations.createInvite(actor(scope), {
+			orgId: scope.orgId,
+			inviterUserId: scope.userId,
+			role: "student",
+			...input
+		})
+	}),
+	defineTool({
+		name: "resend_student_invite",
+		title: "Resend student invite",
+		description: "Send a pending student's invite email again.",
+		scope: "students:invite",
+		kind: "write",
+		idempotent: false,
+		openWorld: true,
+		input: StudentIdParam,
+		call: ({ id }, { container, scope }) => container.organizations.resendStudentInvite(actor(scope), {
+			orgId: scope.orgId,
+			orgUserId: id,
+			inviterUserId: scope.userId
+		})
+	}),
+	defineTool({
+		name: "list_access",
+		title: "List access",
+		description: "Who has access to what. Filter by student (orgUserId), content, type or status.",
+		scope: "access:read",
+		kind: "read",
+		idempotent: true,
+		openWorld: false,
+		input: EntitlementsQuery,
+		call: (input, { container, scope }) => container.entitlements.list(scope.orgId, input)
+	}),
+	defineTool({
+		name: "grant_access",
+		title: "Grant access",
+		description: "Give a student access to one course, download or community (contentId) or to a bundle (bundleId), never both. expiresAt is a date-time, or null for no expiry.",
+		scope: "access:write",
+		kind: "write",
+		idempotent: false,
+		openWorld: false,
+		input: GrantEntitlement,
+		call: (input, { container, scope }) => container.entitlements.grant(scope.orgId, input)
+	}),
+	defineTool({
+		name: "set_access_status",
+		title: "Revoke or reinstate access",
+		description: "Revoke an access grant, or reinstate a revoked one.",
+		scope: "access:write",
+		kind: "destructive",
+		idempotent: true,
+		openWorld: false,
+		input: SetEntitlementStatus.extend(EntitlementIdParam.shape),
+		call: ({ id, status }, { container, scope }) => container.entitlements.setStatus(scope.orgId, id, status)
+	}),
+	defineTool({
+		name: "get_dashboard",
+		title: "Get dashboard",
+		description: "Published and draft course counts, active students, and access grants expiring soon.",
+		scope: "analytics:read",
+		kind: "read",
+		idempotent: true,
+		openWorld: false,
+		input: noInput,
+		call: (_input, { container, scope }) => container.reporting.admin.overview(scope.orgId)
+	}),
+	defineTool({
+		name: "get_enrollment_trend",
+		title: "Get enrollment trend",
+		description: "Daily enrollments across the organization for the last days (default 30, at most 365).",
+		scope: "analytics:read",
+		kind: "read",
+		idempotent: true,
+		openWorld: false,
+		input: EnrollmentSeriesQuery,
+		call: ({ days }, { container, scope }) => container.reporting.admin.enrollments(scope.orgId, days)
+	}),
+	defineTool({
+		name: "get_course_analytics",
+		title: "Get course analytics",
+		description: "Enrolled, started and completed counts, average progress and per-activity engagement for one course.",
+		scope: "analytics:read",
+		kind: "read",
+		idempotent: true,
+		openWorld: false,
+		input: CourseIdPathParam,
+		call: ({ courseId }, { container, scope }) => container.reporting.admin.courseAnalytics(scope.orgId, courseId)
+	}),
+	defineTool({
+		name: "get_course_enrollment_trend",
+		title: "Get course enrollment trend",
+		description: "Daily enrollments in one course for the last days (default 30, at most 365).",
+		scope: "analytics:read",
+		kind: "read",
+		idempotent: true,
+		openWorld: false,
+		input: EnrollmentSeriesQuery.extend(CourseIdPathParam.shape),
+		call: ({ courseId, days }, { container, scope }) => container.reporting.admin.courseEnrollments(scope.orgId, courseId, days)
+	}),
+	defineTool({
+		name: "get_student_analytics",
+		title: "Get student analytics",
+		description: "One student's enrolled, started and completed counts, average progress and progress in each course.",
+		scope: "analytics:read",
+		kind: "read",
+		idempotent: true,
+		openWorld: false,
+		input: StudentIdParam,
+		call: ({ id }, { container, scope }) => container.reporting.admin.studentAnalytics(scope.orgId, id)
+	})
+];
+//#endregion
+export { peopleTools };
+
+//# sourceMappingURL=people.js.map

package/dist/http/mcp/tools/people.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"people.js","names":[],"sources":["../../../../src/http/mcp/tools/people.ts"],"sourcesContent":["import {\n  CourseIdPathParam,\n  CreateInvite,\n  EnrollmentSeriesQuery,\n  EntitlementIdParam,\n  EntitlementsQuery,\n  GrantEntitlement,\n  Invite,\n  SetEntitlementStatus,\n  StudentIdParam,\n  StudentsQuery,\n} from '../../schemas/index.js';\nimport { actor, defineTool, noInput, type Tool } from '../tool.js';\n\nexport const peopleTools: Tool[] = [\n  defineTool({\n    name: 'list_students',\n    title: 'List students',\n    description:\n      'Search and page through the students with their access count, average progress, status and last activity.',\n    scope: 'students:read',\n    kind: 'read',\n    idempotent: true,\n    openWorld: false,\n    input: StudentsQuery,\n    call: (input, { container, scope }) =>\n      container.reporting.admin.listStudents(scope.orgId, input),\n  }),\n  defineTool({\n    name: 'invite_student',\n    title: 'Invite student',\n    description:\n      'Invite someone by email as a student. They exist as an invited student at once. sendEmail false skips the email.',\n    scope: 'students:invite',\n    kind: 'write',\n    idempotent: false,\n    openWorld: true,\n    input: CreateInvite.omit({ role: true }),\n    output: Invite,\n    call: (input, { container, scope }) =>\n      container.organizations.createInvite(actor(scope), {\n        orgId: scope.orgId,\n        inviterUserId: scope.userId,\n        role: 'student',\n        ...input,\n      }),\n  }),\n  defineTool({\n    name: 'resend_student_invite',\n    title: 'Resend student invite',\n    description: \"Send a pending student's invite email again.\",\n    scope: 'students:invite',\n    kind: 'write',\n    idempotent: false,\n    openWorld: true,\n    input: StudentIdParam,\n    call: ({ id }, { container, scope }) =>\n      container.organizations.resendStudentInvite(actor(scope), {\n        orgId: scope.orgId,\n        orgUserId: id,\n        inviterUserId: scope.userId,\n      }),\n  }),\n  defineTool({\n    name: 'list_access',\n    title: 'List access',\n    description: 'Who has access to what. Filter by student (orgUserId), content, type or status.',\n    scope: 'access:read',\n    kind: 'read',\n    idempotent: true,\n    openWorld: false,\n    input: EntitlementsQuery,\n    call: (input, { container, scope }) => container.entitlements.list(scope.orgId, input),\n  }),\n  defineTool({\n    name: 'grant_access',\n    title: 'Grant access',\n    description:\n      'Give a student access to one course, download or community (contentId) or to a bundle (bundleId), never both. expiresAt is a date-time, or null for no expiry.',\n    scope: 'access:write',\n    kind: 'write',\n    idempotent: false,\n    openWorld: false,\n    input: GrantEntitlement,\n    call: (input, { container, scope }) => container.entitlements.grant(scope.orgId, input),\n  }),\n  defineTool({\n    name: 'set_access_status',\n    title: 'Revoke or reinstate access',\n    description: 'Revoke an access grant, or reinstate a revoked one.',\n    scope: 'access:write',\n    kind: 'destructive',\n    idempotent: true,\n    openWorld: false,\n    input: SetEntitlementStatus.extend(EntitlementIdParam.shape),\n    call: ({ id, status }, { container, scope }) =>\n      container.entitlements.setStatus(scope.orgId, id, status),\n  }),\n  defineTool({\n    name: 'get_dashboard',\n    title: 'Get dashboard',\n    description:\n      'Published and draft course counts, active students, and access grants expiring soon.',\n    scope: 'analytics:read',\n    kind: 'read',\n    idempotent: true,\n    openWorld: false,\n    input: noInput,\n    call: (_input, { container, scope }) => container.reporting.admin.overview(scope.orgId),\n  }),\n  defineTool({\n    name: 'get_enrollment_trend',\n    title: 'Get enrollment trend',\n    description:\n      'Daily enrollments across the organization for the last days (default 30, at most 365).',\n    scope: 'analytics:read',\n    kind: 'read',\n    idempotent: true,\n    openWorld: false,\n    input: EnrollmentSeriesQuery,\n    call: ({ days }, { container, scope }) =>\n      container.reporting.admin.enrollments(scope.orgId, days),\n  }),\n  defineTool({\n    name: 'get_course_analytics',\n    title: 'Get course analytics',\n    description:\n      'Enrolled, started and completed counts, average progress and per-activity engagement for one course.',\n    scope: 'analytics:read',\n    kind: 'read',\n    idempotent: true,\n    openWorld: false,\n    input: CourseIdPathParam,\n    call: ({ courseId }, { container, scope }) =>\n      container.reporting.admin.courseAnalytics(scope.orgId, courseId),\n  }),\n  defineTool({\n    name: 'get_course_enrollment_trend',\n    title: 'Get course enrollment trend',\n    description: 'Daily enrollments in one course for the last days (default 30, at most 365).',\n    scope: 'analytics:read',\n    kind: 'read',\n    idempotent: true,\n    openWorld: false,\n    input: EnrollmentSeriesQuery.extend(CourseIdPathParam.shape),\n    call: ({ courseId, days }, { container, scope }) =>\n      container.reporting.admin.courseEnrollments(scope.orgId, courseId, days),\n  }),\n  defineTool({\n    name: 'get_student_analytics',\n    title: 'Get student analytics',\n    description:\n      \"One student's enrolled, started and completed counts, average progress and progress in each course.\",\n    scope: 'analytics:read',\n    kind: 'read',\n    idempotent: true,\n    openWorld: false,\n    input: StudentIdParam,\n    call: ({ id }, { container, scope }) =>\n      container.reporting.admin.studentAnalytics(scope.orgId, id),\n  }),\n];\n"],"mappings":";;;;;;;;AAcA,MAAa,cAAsB;CACjC,WAAW;EACT,MAAM;EACN,OAAO;EACP,aACE;EACF,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO;EACP,OAAO,OAAO,EAAE,WAAW,YACzB,UAAU,UAAU,MAAM,aAAa,MAAM,OAAO,KAAK;CAC7D,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aACE;EACF,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO,aAAa,KAAK,EAAE,MAAM,KAAK,CAAC;EACvC,QAAQ;EACR,OAAO,OAAO,EAAE,WAAW,YACzB,UAAU,cAAc,aAAa,MAAM,KAAK,GAAG;GACjD,OAAO,MAAM;GACb,eAAe,MAAM;GACrB,MAAM;GACN,GAAG;EACL,CAAC;CACL,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aAAa;EACb,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO;EACP,OAAO,EAAE,MAAM,EAAE,WAAW,YAC1B,UAAU,cAAc,oBAAoB,MAAM,KAAK,GAAG;GACxD,OAAO,MAAM;GACb,WAAW;GACX,eAAe,MAAM;EACvB,CAAC;CACL,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aAAa;EACb,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO;EACP,OAAO,OAAO,EAAE,WAAW,YAAY,UAAU,aAAa,KAAK,MAAM,OAAO,KAAK;CACvF,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aACE;EACF,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO;EACP,OAAO,OAAO,EAAE,WAAW,YAAY,UAAU,aAAa,MAAM,MAAM,OAAO,KAAK;CACxF,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aAAa;EACb,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO,qBAAqB,OAAO,mBAAmB,KAAK;EAC3D,OAAO,EAAE,IAAI,UAAU,EAAE,WAAW,YAClC,UAAU,aAAa,UAAU,MAAM,OAAO,IAAI,MAAM;CAC5D,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aACE;EACF,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO;EACP,OAAO,QAAQ,EAAE,WAAW,YAAY,UAAU,UAAU,MAAM,SAAS,MAAM,KAAK;CACxF,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aACE;EACF,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO;EACP,OAAO,EAAE,QAAQ,EAAE,WAAW,YAC5B,UAAU,UAAU,MAAM,YAAY,MAAM,OAAO,IAAI;CAC3D,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aACE;EACF,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO;EACP,OAAO,EAAE,YAAY,EAAE,WAAW,YAChC,UAAU,UAAU,MAAM,gBAAgB,MAAM,OAAO,QAAQ;CACnE,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aAAa;EACb,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO,sBAAsB,OAAO,kBAAkB,KAAK;EAC3D,OAAO,EAAE,UAAU,QAAQ,EAAE,WAAW,YACtC,UAAU,UAAU,MAAM,kBAAkB,MAAM,OAAO,UAAU,IAAI;CAC3E,CAAC;CACD,WAAW;EACT,MAAM;EACN,OAAO;EACP,aACE;EACF,OAAO;EACP,MAAM;EACN,YAAY;EACZ,WAAW;EACX,OAAO;EACP,OAAO,EAAE,MAAM,EAAE,WAAW,YAC1B,UAAU,UAAU,MAAM,iBAAiB,MAAM,OAAO,EAAE;CAC9D,CAAC;AACH"}

package/dist/http/plugins/auth.js

@@ -2,18 +2,22 @@ import { bridgeWebResponse, toWebRequest } from "../web-bridge.js";
 //#region src/http/plugins/auth.ts
 /** The request carries no session. The central error handler maps this to 401. */
 var UnauthorizedError = class extends Error {
-	constructor(message = "no session on the request") {
+	constructor(message = "Sign in to continue") {
 		super(message);
 		this.name = "UnauthorizedError";
 	}
 };
 function registerAuth(app, appServer) {
 	const { auth } = appServer;
+	const origin = new URL(appServer.mcp.issuer).origin;
+	app.addContentTypeParser("application/x-www-form-urlencoded", { parseAs: "string" }, (_request, body, done) => {
+		done(null, body);
+	});
 	app.route({
 		method: ["GET", "POST"],
 		url: "/api/auth/*",
 		async handler(request, reply) {
-			await bridgeWebResponse(await auth.handler(toWebRequest(request)), reply);
+			await bridgeWebResponse(await auth.handler(toWebRequest(request, origin)), reply);
 		}
 	});
 	app.decorate("requireSession", async (request) => {
@@ -25,19 +29,23 @@ function registerAuth(app, appServer) {
 		if (authOrgId) {
 			request.authOrgId = authOrgId;
 			const org = await appServer.organizations.getByExternalId(authOrgId);
-			if (org) request.orgId = org.id;
+			if (org) {
+				request.orgId = org.id;
+				appServer.requestContext.set({ orgId: org.id });
+			}
 		}
 	});
 	app.decorate("requireOrgSession", async (request) => {
 		const session = await appServer.auth.verify(request.headers);
 		if (!session) throw new UnauthorizedError();
 		const authOrgId = session.session.activeOrganizationId;
-		if (!authOrgId) throw new UnauthorizedError();
+		if (!authOrgId) throw new UnauthorizedError("Choose an organization to continue");
 		const org = await appServer.organizations.getByExternalId(authOrgId);
-		if (!org) throw new UnauthorizedError("session organization not found");
+		if (!org) throw new UnauthorizedError("Your session points to an organization that no longer exists");
 		request.authUser = session.user;
 		request.userId = session.user.id;
 		request.orgId = org.id;
+		appServer.requestContext.set({ orgId: org.id });
 		request.authOrgId = authOrgId;
 	});
 }

package/dist/http/plugins/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","names":[],"sources":["../../../src/http/plugins/auth.ts"],"sourcesContent":["// Everything better-auth touches on the HTTP surface:\n//   - the /api/auth/* catch-all bridged to better-auth's Web handler\n//   - the `requireSession` / `requireOrgSession` decorators routes guard with\nimport type { FastifyInstance, FastifyRequest } from 'fastify';\nimport type { Container } from '../../app/container.js';\nimport { bridgeWebResponse, toWebRequest } from '../web-bridge.js';\n\n/** The request carries no session. The central error handler maps this to 401. */\nexport class UnauthorizedError extends Error {\n  constructor(message = 'no session on the request') {\n    super(message);\n    this.name = 'UnauthorizedError';\n  }\n}\n\nexport function registerAuth(app: FastifyInstance, appServer: Container): void {\n  const { auth } = appServer;\n\n  // Mount better-auth: a catch-all that bridges Fastify <-> Web Request/Response.\n  app.route({\n    method: ['GET', 'POST'],\n    url: '/api/auth/*',\n    async handler(request, reply) {\n      await bridgeWebResponse(await auth.handler(toWebRequest(request)), reply);\n    },\n  });\n\n  // Session only, no active org required. For the routes a caller reaches\n  // *before* they have an org: creating their first organization, and accepting\n  // an invitation (which is what stamps the active org onto the session).\n  app.decorate('requireSession', async (request: FastifyRequest) => {\n    const session = await appServer.auth.verify(request.headers);\n    if (!session) {\n      throw new UnauthorizedError();\n    }\n    request.authUser = session.user;\n    request.userId = session.user.id;\n\n    const authOrgId = session.session.activeOrganizationId;\n    if (authOrgId) {\n      request.authOrgId = authOrgId;\n      const org = await appServer.organizations.getByExternalId(authOrgId);\n      if (org) {\n        request.orgId = org.id;\n      }\n    }\n  });\n\n  // Requires a valid session with an active org set — every org-scoped route.\n  app.decorate('requireOrgSession', async (request: FastifyRequest) => {\n    const session = await appServer.auth.verify(request.headers);\n    if (!session) {\n      throw new UnauthorizedError();\n    }\n    const authOrgId = session.session.activeOrganizationId;\n    if (!authOrgId) {\n      throw new UnauthorizedError();\n    }\n\n    const org = await appServer.organizations.getByExternalId(authOrgId);\n    if (!org) {\n      throw new UnauthorizedError('session organization not found');\n    }\n    request.authUser = session.user;\n    request.userId = session.user.id;\n    request.orgId = org.id;\n    // resolveScope requires the auth-provider id too — routes that write back\n    // through better-auth key on it.\n    request.authOrgId = authOrgId;\n  });\n}\n"],"mappings":";;;AAQA,IAAa,oBAAb,cAAuC,MAAM;CAC3C,YAAY,UAAU,6BAA6B;EACjD,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,SAAgB,aAAa,KAAsB,WAA4B;CAC7E,MAAM,EAAE,SAAS;CAGjB,IAAI,MAAM;EACR,QAAQ,CAAC,OAAO,MAAM;EACtB,KAAK;EACL,MAAM,QAAQ,SAAS,OAAO;GAC5B,MAAM,kBAAkB,MAAM,KAAK,QAAQ,aAAa,OAAO,CAAC,GAAG,KAAK;EAC1E;CACF,CAAC;CAKD,IAAI,SAAS,kBAAkB,OAAO,YAA4B;EAChE,MAAM,UAAU,MAAM,UAAU,KAAK,OAAO,QAAQ,OAAO;EAC3D,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;EAE9B,QAAQ,WAAW,QAAQ;EAC3B,QAAQ,SAAS,QAAQ,KAAK;EAE9B,MAAM,YAAY,QAAQ,QAAQ;EAClC,IAAI,WAAW;GACb,QAAQ,YAAY;GACpB,MAAM,MAAM,MAAM,UAAU,cAAc,gBAAgB,SAAS;GACnE,IAAI,KACF,QAAQ,QAAQ,IAAI;EAExB;CACF,CAAC;CAGD,IAAI,SAAS,qBAAqB,OAAO,YAA4B;EACnE,MAAM,UAAU,MAAM,UAAU,KAAK,OAAO,QAAQ,OAAO;EAC3D,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;EAE9B,MAAM,YAAY,QAAQ,QAAQ;EAClC,IAAI,CAAC,WACH,MAAM,IAAI,kBAAkB;EAG9B,MAAM,MAAM,MAAM,UAAU,cAAc,gBAAgB,SAAS;EACnE,IAAI,CAAC,KACH,MAAM,IAAI,kBAAkB,gCAAgC;EAE9D,QAAQ,WAAW,QAAQ;EAC3B,QAAQ,SAAS,QAAQ,KAAK;EAC9B,QAAQ,QAAQ,IAAI;EAGpB,QAAQ,YAAY;CACtB,CAAC;AACH"}
+{"version":3,"file":"auth.js","names":[],"sources":["../../../src/http/plugins/auth.ts"],"sourcesContent":["// Everything better-auth touches on the HTTP surface:\n//   - the /api/auth/* catch-all bridged to better-auth's Web handler\n//   - the `requireSession` / `requireOrgSession` decorators routes guard with\nimport type { FastifyInstance, FastifyRequest } from 'fastify';\nimport type { Container } from '../../app/container.js';\nimport { bridgeWebResponse, toWebRequest } from '../web-bridge.js';\n\n/** The request carries no session. The central error handler maps this to 401. */\nexport class UnauthorizedError extends Error {\n  constructor(message = 'Sign in to continue') {\n    super(message);\n    this.name = 'UnauthorizedError';\n  }\n}\n\nexport function registerAuth(app: FastifyInstance, appServer: Container): void {\n  const { auth } = appServer;\n  const origin = new URL(appServer.mcp.issuer).origin;\n\n  app.addContentTypeParser(\n    'application/x-www-form-urlencoded',\n    { parseAs: 'string' },\n    (_request, body, done) => {\n      done(null, body);\n    },\n  );\n\n  // Mount better-auth: a catch-all that bridges Fastify <-> Web Request/Response.\n  app.route({\n    method: ['GET', 'POST'],\n    url: '/api/auth/*',\n    async handler(request, reply) {\n      await bridgeWebResponse(await auth.handler(toWebRequest(request, origin)), reply);\n    },\n  });\n\n  // Session only, no active org required. For the routes a caller reaches\n  // *before* they have an org: creating their first organization, and accepting\n  // an invitation (which is what stamps the active org onto the session).\n  app.decorate('requireSession', async (request: FastifyRequest) => {\n    const session = await appServer.auth.verify(request.headers);\n    if (!session) {\n      throw new UnauthorizedError();\n    }\n    request.authUser = session.user;\n    request.userId = session.user.id;\n\n    const authOrgId = session.session.activeOrganizationId;\n    if (authOrgId) {\n      request.authOrgId = authOrgId;\n      const org = await appServer.organizations.getByExternalId(authOrgId);\n      if (org) {\n        request.orgId = org.id;\n        appServer.requestContext.set({ orgId: org.id });\n      }\n    }\n  });\n\n  // Requires a valid session with an active org set — every org-scoped route.\n  app.decorate('requireOrgSession', async (request: FastifyRequest) => {\n    const session = await appServer.auth.verify(request.headers);\n    if (!session) {\n      throw new UnauthorizedError();\n    }\n    const authOrgId = session.session.activeOrganizationId;\n    if (!authOrgId) {\n      throw new UnauthorizedError('Choose an organization to continue');\n    }\n\n    const org = await appServer.organizations.getByExternalId(authOrgId);\n    if (!org) {\n      throw new UnauthorizedError('Your session points to an organization that no longer exists');\n    }\n    request.authUser = session.user;\n    request.userId = session.user.id;\n    request.orgId = org.id;\n    appServer.requestContext.set({ orgId: org.id });\n    // resolveScope requires the auth-provider id too — routes that write back\n    // through better-auth key on it.\n    request.authOrgId = authOrgId;\n  });\n}\n"],"mappings":";;;AAQA,IAAa,oBAAb,cAAuC,MAAM;CAC3C,YAAY,UAAU,uBAAuB;EAC3C,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,SAAgB,aAAa,KAAsB,WAA4B;CAC7E,MAAM,EAAE,SAAS;CACjB,MAAM,SAAS,IAAI,IAAI,UAAU,IAAI,MAAM,CAAC,CAAC;CAE7C,IAAI,qBACF,qCACA,EAAE,SAAS,SAAS,IACnB,UAAU,MAAM,SAAS;EACxB,KAAK,MAAM,IAAI;CACjB,CACF;CAGA,IAAI,MAAM;EACR,QAAQ,CAAC,OAAO,MAAM;EACtB,KAAK;EACL,MAAM,QAAQ,SAAS,OAAO;GAC5B,MAAM,kBAAkB,MAAM,KAAK,QAAQ,aAAa,SAAS,MAAM,CAAC,GAAG,KAAK;EAClF;CACF,CAAC;CAKD,IAAI,SAAS,kBAAkB,OAAO,YAA4B;EAChE,MAAM,UAAU,MAAM,UAAU,KAAK,OAAO,QAAQ,OAAO;EAC3D,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;EAE9B,QAAQ,WAAW,QAAQ;EAC3B,QAAQ,SAAS,QAAQ,KAAK;EAE9B,MAAM,YAAY,QAAQ,QAAQ;EAClC,IAAI,WAAW;GACb,QAAQ,YAAY;GACpB,MAAM,MAAM,MAAM,UAAU,cAAc,gBAAgB,SAAS;GACnE,IAAI,KAAK;IACP,QAAQ,QAAQ,IAAI;IACpB,UAAU,eAAe,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC;GAChD;EACF;CACF,CAAC;CAGD,IAAI,SAAS,qBAAqB,OAAO,YAA4B;EACnE,MAAM,UAAU,MAAM,UAAU,KAAK,OAAO,QAAQ,OAAO;EAC3D,IAAI,CAAC,SACH,MAAM,IAAI,kBAAkB;EAE9B,MAAM,YAAY,QAAQ,QAAQ;EAClC,IAAI,CAAC,WACH,MAAM,IAAI,kBAAkB,oCAAoC;EAGlE,MAAM,MAAM,MAAM,UAAU,cAAc,gBAAgB,SAAS;EACnE,IAAI,CAAC,KACH,MAAM,IAAI,kBAAkB,8DAA8D;EAE5F,QAAQ,WAAW,QAAQ;EAC3B,QAAQ,SAAS,QAAQ,KAAK;EAC9B,QAAQ,QAAQ,IAAI;EACpB,UAAU,eAAe,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC;EAG9C,QAAQ,YAAY;CACtB,CAAC;AACH"}

package/dist/http/plugins/error-handler.d.ts

@@ -1,6 +1,7 @@
 import { FastifyReply, FastifyRequest } from "fastify";
 //#region src/http/plugins/error-handler.d.ts
 declare function errorHandler(error: unknown, request: FastifyRequest, reply: FastifyReply): FastifyReply<import("fastify").RouteGenericInterface, import("fastify").RawServerDefault, import("http").IncomingMessage, import("http").ServerResponse<import("http").IncomingMessage>, unknown, import("fastify").FastifySchema, import("fastify").FastifyTypeProviderDefault, unknown>;
+declare function notFoundHandler(request: FastifyRequest, reply: FastifyReply): FastifyReply<import("fastify").RouteGenericInterface, import("fastify").RawServerDefault, import("http").IncomingMessage, import("http").ServerResponse<import("http").IncomingMessage>, unknown, import("fastify").FastifySchema, import("fastify").FastifyTypeProviderDefault, unknown>;
 //#endregion
-export { errorHandler };
+export { errorHandler, notFoundHandler };
 //# sourceMappingURL=error-handler.d.ts.map

package/dist/http/plugins/error-handler.js

@@ -1,75 +1,61 @@
-import { UnauthorizedError } from "./auth.js";
-import { NoActiveOrgError } from "../scope.js";
-import { OrganizationRuleError } from "@headless-lms/core/organizations";
-import { ActionInvocationError, AlreadyConnectedError, InvalidConfigError, UnknownIntegrationError } from "@headless-lms/core/integrations";
-import { AutomationKindMismatchError, InvalidTriggerError, ReservedActionError } from "@headless-lms/core/automations";
-import { ConflictError, ForbiddenError, NotFoundError } from "@headless-lms/core/shared/errors";
+import { classifyError } from "../errors.js";
+import { ActionInvocationError } from "@headless-lms/core/integrations";
+import { isResponseSerializationError } from "fastify-type-provider-zod";
 //#region src/http/plugins/error-handler.ts
+function routeOf(request) {
+	return `${request.method} ${request.routeOptions.url ?? "unmatched route"}`;
+}
 function errorHandler(error, request, reply) {
-	if (error instanceof NotFoundError) return reply.status(404).send({
-		error: "not_found",
-		message: error.message
-	});
-	if (error instanceof ConflictError) return reply.status(409).send({
-		error: "conflict",
-		message: error.message
-	});
-	if (error instanceof ForbiddenError) return reply.status(403).send({
-		error: "forbidden",
-		message: error.message
-	});
-	if (error instanceof OrganizationRuleError) return reply.status(409).send({
-		error: "conflict",
-		message: error.message
-	});
-	if (error instanceof AlreadyConnectedError) return reply.status(409).send({
-		error: "already_connected",
-		message: error.message
-	});
-	if (error instanceof UnknownIntegrationError) return reply.status(400).send({
-		error: "unknown_integration",
-		message: error.message
-	});
-	if (error instanceof InvalidConfigError) return reply.status(400).send({
-		error: "invalid_config",
-		message: error.message
-	});
-	if (error instanceof ActionInvocationError) return reply.status(502).send({
-		error: "action_failed",
-		message: error.message
-	});
-	if (error instanceof InvalidTriggerError) return reply.status(400).send({
-		error: "invalid_trigger",
-		message: error.message
-	});
-	if (error instanceof ReservedActionError) return reply.status(400).send({
-		error: "reserved_action",
-		message: error.message
-	});
-	if (error instanceof AutomationKindMismatchError) return reply.status(409).send({
-		error: "kind_mismatch",
-		message: error.message
-	});
-	if (error instanceof NoActiveOrgError) return reply.status(403).send({
-		error: "forbidden",
-		message: error.message
-	});
-	if (error instanceof UnauthorizedError) return reply.status(401).send({
-		error: "unauthorized",
-		message: error.message
-	});
-	const err = error;
-	if (typeof err.statusCode === "number" && err.statusCode >= 400 && err.statusCode < 500) return reply.status(err.statusCode).send({
-		error: err.code ?? "bad_request",
-		message: err.message ?? "Bad request"
-	});
-	request.log.error({ err: error }, `unhandled error in ${request.method} ${request.url}`);
+	if (error instanceof ActionInvocationError) {
+		request.log.error({
+			err: error,
+			integrationId: error.integrationId,
+			actionId: error.actionId
+		}, `integration action failed in ${routeOf(request)}`);
+		return reply.status(502).send({
+			error: "action_failed",
+			message: "The integration did not respond as expected"
+		});
+	}
+	const refusal = classifyError(error);
+	if (refusal) {
+		request.log.info({
+			status: refusal.status,
+			error: refusal.error,
+			message: refusal.message,
+			...refusal.issues && { issues: refusal.issues },
+			...refusal.details && { details: refusal.details },
+			...refusal.error === "bad_request" && { cause: error.message }
+		}, `${routeOf(request)} refused`);
+		return reply.status(refusal.status).send({
+			error: refusal.error,
+			message: refusal.message,
+			...refusal.issues && { issues: refusal.issues },
+			...refusal.details && { details: refusal.details }
+		});
+	}
+	if (isResponseSerializationError(error)) request.log.error({
+		err: error,
+		issues: error.cause.issues
+	}, `response of ${routeOf(request)} does not match its schema`);
+	else request.log.error({ err: error }, `unhandled error in ${routeOf(request)}`);
 	return reply.status(500).send({
 		error: "internal_error",
+		message: "Something went wrong on our side. Quote the request id when reporting it.",
 		requestId: request.id
 	});
 }
+function notFoundHandler(request, reply) {
+	request.log.info({
+		status: 404,
+		error: "not_found"
+	}, `${request.method} unmatched route refused`);
+	return reply.status(404).send({
+		error: "not_found",
+		message: `No route for ${request.method} ${request.url}`
+	});
+}
 //#endregion
-export { errorHandler };
+export { errorHandler, notFoundHandler };
 
 //# sourceMappingURL=error-handler.js.map

package/dist/http/plugins/error-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-handler.js","names":[],"sources":["../../../src/http/plugins/error-handler.ts"],"sourcesContent":["import { ConflictError, ForbiddenError, NotFoundError } from '@headless-lms/core/shared/errors';\nimport { OrganizationRuleError } from '@headless-lms/core/organizations';\nimport {\n  ActionInvocationError,\n  AlreadyConnectedError,\n  InvalidConfigError,\n  UnknownIntegrationError,\n} from '@headless-lms/core/integrations';\nimport {\n  AutomationKindMismatchError,\n  InvalidTriggerError,\n  ReservedActionError,\n} from '@headless-lms/core/automations';\nimport { NoActiveOrgError } from '../scope.js';\nimport { UnauthorizedError } from './auth.js';\nimport type { FastifyReply, FastifyRequest } from 'fastify';\n\nexport function errorHandler(error: unknown, request: FastifyRequest, reply: FastifyReply) {\n  if (error instanceof NotFoundError) {\n    return reply.status(404).send({ error: 'not_found', message: error.message });\n  }\n  if (error instanceof ConflictError) {\n    return reply.status(409).send({ error: 'conflict', message: error.message });\n  }\n  if (error instanceof ForbiddenError) {\n    return reply.status(403).send({ error: 'forbidden', message: error.message });\n  }\n  if (error instanceof OrganizationRuleError) {\n    return reply.status(409).send({ error: 'conflict', message: error.message });\n  }\n  if (error instanceof AlreadyConnectedError) {\n    return reply.status(409).send({ error: 'already_connected', message: error.message });\n  }\n  if (error instanceof UnknownIntegrationError) {\n    return reply.status(400).send({ error: 'unknown_integration', message: error.message });\n  }\n  if (error instanceof InvalidConfigError) {\n    return reply.status(400).send({ error: 'invalid_config', message: error.message });\n  }\n  if (error instanceof ActionInvocationError) {\n    return reply.status(502).send({ error: 'action_failed', message: error.message });\n  }\n  if (error instanceof InvalidTriggerError) {\n    return reply.status(400).send({ error: 'invalid_trigger', message: error.message });\n  }\n  if (error instanceof ReservedActionError) {\n    return reply.status(400).send({ error: 'reserved_action', message: error.message });\n  }\n  if (error instanceof AutomationKindMismatchError) {\n    return reply.status(409).send({ error: 'kind_mismatch', message: error.message });\n  }\n  if (error instanceof NoActiveOrgError) {\n    return reply.status(403).send({ error: 'forbidden', message: error.message });\n  }\n  // No session at all — 401 so the client bounces to login, not a generic 403.\n  if (error instanceof UnauthorizedError) {\n    return reply.status(401).send({ error: 'unauthorized', message: error.message });\n  }\n  const err = error as { statusCode?: number; code?: string; message?: string };\n  if (typeof err.statusCode === 'number' && err.statusCode >= 400 && err.statusCode < 500) {\n    return reply\n      .status(err.statusCode)\n      .send({ error: err.code ?? 'bad_request', message: err.message ?? 'Bad request' });\n  }\n  request.log.error({ err: error }, `unhandled error in ${request.method} ${request.url}`);\n  return reply.status(500).send({ error: 'internal_error', requestId: request.id });\n}\n"],"mappings":";;;;;;;AAiBA,SAAgB,aAAa,OAAgB,SAAyB,OAAqB;CACzF,IAAI,iBAAiB,eACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAa,SAAS,MAAM;CAAQ,CAAC;CAE9E,IAAI,iBAAiB,eACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAY,SAAS,MAAM;CAAQ,CAAC;CAE7E,IAAI,iBAAiB,gBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAa,SAAS,MAAM;CAAQ,CAAC;CAE9E,IAAI,iBAAiB,uBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAY,SAAS,MAAM;CAAQ,CAAC;CAE7E,IAAI,iBAAiB,uBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAqB,SAAS,MAAM;CAAQ,CAAC;CAEtF,IAAI,iBAAiB,yBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAuB,SAAS,MAAM;CAAQ,CAAC;CAExF,IAAI,iBAAiB,oBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAkB,SAAS,MAAM;CAAQ,CAAC;CAEnF,IAAI,iBAAiB,uBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAiB,SAAS,MAAM;CAAQ,CAAC;CAElF,IAAI,iBAAiB,qBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAmB,SAAS,MAAM;CAAQ,CAAC;CAEpF,IAAI,iBAAiB,qBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAmB,SAAS,MAAM;CAAQ,CAAC;CAEpF,IAAI,iBAAiB,6BACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAiB,SAAS,MAAM;CAAQ,CAAC;CAElF,IAAI,iBAAiB,kBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAa,SAAS,MAAM;CAAQ,CAAC;CAG9E,IAAI,iBAAiB,mBACnB,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAgB,SAAS,MAAM;CAAQ,CAAC;CAEjF,MAAM,MAAM;CACZ,IAAI,OAAO,IAAI,eAAe,YAAY,IAAI,cAAc,OAAO,IAAI,aAAa,KAClF,OAAO,MACJ,OAAO,IAAI,UAAU,CAAC,CACtB,KAAK;EAAE,OAAO,IAAI,QAAQ;EAAe,SAAS,IAAI,WAAW;CAAc,CAAC;CAErF,QAAQ,IAAI,MAAM,EAAE,KAAK,MAAM,GAAG,sBAAsB,QAAQ,OAAO,GAAG,QAAQ,KAAK;CACvF,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAAE,OAAO;EAAkB,WAAW,QAAQ;CAAG,CAAC;AAClF"}
+{"version":3,"file":"error-handler.js","names":[],"sources":["../../../src/http/plugins/error-handler.ts"],"sourcesContent":["import type { FastifyReply, FastifyRequest } from 'fastify';\nimport { ActionInvocationError } from '@headless-lms/core/integrations';\nimport { isResponseSerializationError } from 'fastify-type-provider-zod';\nimport { classifyError } from '../errors.js';\n\nfunction routeOf(request: FastifyRequest): string {\n  return `${request.method} ${request.routeOptions.url ?? 'unmatched route'}`;\n}\n\nexport function errorHandler(error: unknown, request: FastifyRequest, reply: FastifyReply) {\n  if (error instanceof ActionInvocationError) {\n    request.log.error(\n      { err: error, integrationId: error.integrationId, actionId: error.actionId },\n      `integration action failed in ${routeOf(request)}`,\n    );\n    return reply.status(502).send({\n      error: 'action_failed',\n      message: 'The integration did not respond as expected',\n    });\n  }\n  const refusal = classifyError(error);\n  if (refusal) {\n    request.log.info(\n      {\n        status: refusal.status,\n        error: refusal.error,\n        message: refusal.message,\n        ...(refusal.issues && { issues: refusal.issues }),\n        ...(refusal.details && { details: refusal.details }),\n        ...(refusal.error === 'bad_request' && { cause: (error as Error).message }),\n      },\n      `${routeOf(request)} refused`,\n    );\n    return reply.status(refusal.status).send({\n      error: refusal.error,\n      message: refusal.message,\n      ...(refusal.issues && { issues: refusal.issues }),\n      ...(refusal.details && { details: refusal.details }),\n    });\n  }\n  if (isResponseSerializationError(error)) {\n    request.log.error(\n      { err: error, issues: error.cause.issues },\n      `response of ${routeOf(request)} does not match its schema`,\n    );\n  } else {\n    request.log.error({ err: error }, `unhandled error in ${routeOf(request)}`);\n  }\n  return reply.status(500).send({\n    error: 'internal_error',\n    message: 'Something went wrong on our side. Quote the request id when reporting it.',\n    requestId: request.id,\n  });\n}\n\nexport function notFoundHandler(request: FastifyRequest, reply: FastifyReply) {\n  request.log.info(\n    { status: 404, error: 'not_found' },\n    `${request.method} unmatched route refused`,\n  );\n  return reply\n    .status(404)\n    .send({ error: 'not_found', message: `No route for ${request.method} ${request.url}` });\n}\n"],"mappings":";;;;AAKA,SAAS,QAAQ,SAAiC;CAChD,OAAO,GAAG,QAAQ,OAAO,GAAG,QAAQ,aAAa,OAAO;AAC1D;AAEA,SAAgB,aAAa,OAAgB,SAAyB,OAAqB;CACzF,IAAI,iBAAiB,uBAAuB;EAC1C,QAAQ,IAAI,MACV;GAAE,KAAK;GAAO,eAAe,MAAM;GAAe,UAAU,MAAM;EAAS,GAC3E,gCAAgC,QAAQ,OAAO,GACjD;EACA,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;GAC5B,OAAO;GACP,SAAS;EACX,CAAC;CACH;CACA,MAAM,UAAU,cAAc,KAAK;CACnC,IAAI,SAAS;EACX,QAAQ,IAAI,KACV;GACE,QAAQ,QAAQ;GAChB,OAAO,QAAQ;GACf,SAAS,QAAQ;GACjB,GAAI,QAAQ,UAAU,EAAE,QAAQ,QAAQ,OAAO;GAC/C,GAAI,QAAQ,WAAW,EAAE,SAAS,QAAQ,QAAQ;GAClD,GAAI,QAAQ,UAAU,iBAAiB,EAAE,OAAQ,MAAgB,QAAQ;EAC3E,GACA,GAAG,QAAQ,OAAO,EAAE,SACtB;EACA,OAAO,MAAM,OAAO,QAAQ,MAAM,CAAC,CAAC,KAAK;GACvC,OAAO,QAAQ;GACf,SAAS,QAAQ;GACjB,GAAI,QAAQ,UAAU,EAAE,QAAQ,QAAQ,OAAO;GAC/C,GAAI,QAAQ,WAAW,EAAE,SAAS,QAAQ,QAAQ;EACpD,CAAC;CACH;CACA,IAAI,6BAA6B,KAAK,GACpC,QAAQ,IAAI,MACV;EAAE,KAAK;EAAO,QAAQ,MAAM,MAAM;CAAO,GACzC,eAAe,QAAQ,OAAO,EAAE,2BAClC;MAEA,QAAQ,IAAI,MAAM,EAAE,KAAK,MAAM,GAAG,sBAAsB,QAAQ,OAAO,GAAG;CAE5E,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;EAC5B,OAAO;EACP,SAAS;EACT,WAAW,QAAQ;CACrB,CAAC;AACH;AAEA,SAAgB,gBAAgB,SAAyB,OAAqB;CAC5E,QAAQ,IAAI,KACV;EAAE,QAAQ;EAAK,OAAO;CAAY,GAClC,GAAG,QAAQ,OAAO,yBACpB;CACA,OAAO,MACJ,OAAO,GAAG,CAAC,CACX,KAAK;EAAE,OAAO;EAAa,SAAS,gBAAgB,QAAQ,OAAO,GAAG,QAAQ;CAAM,CAAC;AAC1F"}