@headless-lms/server 0.3.0 → 0.4.0

package/dist/http/schemas/notifications.js

@@ -1,19 +1,53 @@
-import { paginated } from "./shared.js";
+import { PageQuery, paginated } from "./shared.js";
 import { z } from "zod";
-import { notificationKindSchema, notificationPreferenceSchema, notificationSchema } from "@headless-lms/core/schemas";
+import { digestScheduleSchema, jsonValueSchema, notificationCategoryKeySchema, notificationCategoryListSchema, notificationCategorySchema, notificationChannelKeySchema, notificationScopeSchema, notificationTypeKeySchema, reasonSchema, subjectTypeSchema } from "@headless-lms/core/schemas";
 //#region src/http/schemas/notifications.ts
-const Notification = notificationSchema;
 const NotificationIdParam = z.object({ notificationId: z.string() });
+function commaSeparated(item, description) {
+	return z.string().max(2e3).transform((value) => value.split(",").map((part) => part.trim()).filter((part) => part.length > 0)).pipe(z.array(item).min(1).max(50)).describe(description);
+}
+function scopeMatchesCommunity(filter, ctx) {
+	if (filter.scope === "org" && filter.communityId !== void 0) ctx.addIssue({
+		code: "custom",
+		path: ["communityId"],
+		message: "`communityId` implies `scope=community`; it cannot go with `scope=org`"
+	});
+	if (filter.includeOrg === true && filter.communityId === void 0) ctx.addIssue({
+		code: "custom",
+		path: ["includeOrg"],
+		message: "`includeOrg` goes with `communityId`"
+	});
+	if (filter.includeOrg === true && filter.scope !== void 0) ctx.addIssue({
+		code: "custom",
+		path: ["includeOrg"],
+		message: "`includeOrg` cannot go with `scope`"
+	});
+}
+const notificationFilterShape = z.object({
+	scope: z.enum(["org", "community"]).optional().describe("`org`: the org list only; `community`: notifications in any community"),
+	communityId: z.string().min(1).max(64).optional().describe("Notifications in this community; implies `scope=community`"),
+	includeOrg: z.stringbool().optional().describe("With `communityId`, `true` adds the org list (notifications in no community); not with `scope`"),
+	category: commaSeparated(notificationCategoryKeySchema, "One or more category keys, comma separated").optional(),
+	reason: commaSeparated(reasonSchema, "One or more reasons, comma separated; matches any").optional(),
+	type: commaSeparated(notificationTypeKeySchema, "One or more types, comma separated").optional(),
+	unread: z.stringbool().optional().describe("`true` for unread notifications only")
+}).strict();
+const NotificationFilterQuery = notificationFilterShape.superRefine(scopeMatchesCommunity);
+const NotificationListQuery = PageQuery.extend(notificationFilterShape.shape).strict().superRefine(scopeMatchesCommunity);
+const NotificationItem = z.object({
+	type: subjectTypeSchema,
+	id: z.string(),
+	title: z.string().optional(),
+	excerpt: z.string().optional()
+});
 const NotificationView = z.object({
 	id: z.string(),
-	kind: notificationKindSchema,
-	createdAt: z.coerce.date(),
-	readAt: z.coerce.date().nullable(),
-	actor: z.object({
-		orgUserId: z.string(),
-		displayName: z.string().nullable(),
-		imageUrl: z.string().nullable()
-	}).nullable(),
+	type: z.string(),
+	scope: notificationScopeSchema,
+	reasons: z.array(reasonSchema),
+	matchedReason: reasonSchema.describe("The reason of the pair the category matched, which picks the wording, such as a reply to your comment"),
+	category: z.string(),
+	display: z.record(z.string(), jsonValueSchema).describe("The text stored when the notification was sent"),
 	community: z.object({
 		id: z.string(),
 		title: z.string()
@@ -22,23 +56,109 @@ const NotificationView = z.object({
 		id: z.string(),
 		name: z.string()
 	}).nullable(),
-	post: z.object({
-		id: z.string(),
-		title: z.string()
-	}).nullable().describe("Null when the viewer can no longer see the post"),
-	commentId: z.string().nullable(),
-	chat: z.object({
-		id: z.string(),
-		title: z.string()
-	}).nullable().describe("Null when the viewer is not in the chat"),
-	messageId: z.string().nullable()
-});
-const NotificationsPage = paginated(NotificationView).extend({ unreadCount: z.number().int() });
-const MarkedRead = z.object({ updated: z.number().int() });
-const NotificationPreference = notificationPreferenceSchema;
-const NotificationPreferences = z.array(NotificationPreference);
-const SetNotificationPreferences = z.object({ preferences: z.array(NotificationPreference).min(1).max(notificationKindSchema.options.length).refine((preferences) => new Set(preferences.map((p) => p.kind)).size === preferences.length, { message: "must name each kind at most once" }).describe("One entry per kind to change, each kind at most once; kinds left out keep theirs") }).strict();
+	actor: z.object({
+		orgUserId: z.string(),
+		name: z.string().nullable(),
+		imageUrl: z.string().nullable()
+	}).nullable(),
+	subject: NotificationItem.nullable().describe("What the notification is about, with its current title or excerpt; null when you can no longer open it or it was deleted"),
+	parent: NotificationItem.nullable().describe("The subject's container, such as a comment's post; null when you can no longer open it or it was deleted"),
+	createdAt: z.coerce.date(),
+	readAt: z.coerce.date().nullable()
+});
+const NotificationsPage = paginated(NotificationView).extend({ unreadCount: z.number().int().describe("Unread notifications matching the same filters") });
+const NotificationUnreadCounts = z.object({
+	org: z.number().int(),
+	communities: z.array(z.object({
+		communityId: z.string(),
+		unread: z.number().int()
+	}))
+});
+const NotificationCategory = notificationCategorySchema;
+const NotificationCategoryList = z.object({
+	categories: z.array(NotificationCategory),
+	source: z.enum(["default", "stored"]).describe("`default` while the list in use is the server default, `stored` once one is saved")
+});
+const ReplaceNotificationCategories = z.object({ categories: notificationCategoryListSchema.describe("The whole ordered list; a notification is filed under the first category that matches") }).strict();
+const NotificationCategoryDefaults = z.object({ categories: z.array(NotificationCategory) });
+const NotificationListScopeQuery = z.object({ scope: z.enum(["org", "community"]) }).strict();
+const NotificationTypeInfo = z.object({
+	type: z.string(),
+	scopes: z.array(notificationScopeSchema),
+	reasons: z.array(reasonSchema)
+});
+const NotificationTypeInfos = z.array(NotificationTypeInfo);
+const NotificationChannelInfos = z.array(z.object({ channel: z.string() }));
+const ResolvedChannel = z.object({
+	channel: z.string(),
+	enabled: z.boolean(),
+	default: z.boolean().describe("What the channel would be without your own setting at this level: what `enabled: null` gives"),
+	source: z.enum([
+		"locked",
+		"space",
+		"community",
+		"spaceDefault",
+		"default"
+	]).describe("Why the channel is on or off: locked by the category, your setting for the space, your setting for the whole community (or the org), the default for the space, or the category default"),
+	locked: z.boolean()
+});
+const NotificationSettingsCategory = z.object({
+	key: z.string(),
+	perSpace: z.boolean(),
+	channels: z.array(ResolvedChannel),
+	spaces: z.array(z.object({
+		spaceId: z.string(),
+		name: z.string(),
+		channels: z.array(ResolvedChannel)
+	})).optional().describe("Per-space categories only: every space you can open")
+});
+const CommunityNotificationSettings = z.object({
+	communityId: z.string(),
+	digest: digestScheduleSchema.nullable().describe("The community's digest schedule; null when it sends no digest"),
+	categories: z.array(NotificationSettingsCategory)
+});
+const OrgNotificationSettings = z.object({ categories: z.array(NotificationSettingsCategory) });
+const PatchNotificationSettings = z.object({ settings: z.array(z.object({
+	category: notificationCategoryKeySchema,
+	spaceId: z.string().min(1).max(64).optional(),
+	channel: notificationChannelKeySchema,
+	enabled: z.boolean().nullable().describe("null removes your choice, so the default applies again")
+}).strict()).min(1).max(200) }).strict();
+const DeviceFields = {
+	id: z.string(),
+	provider: z.enum([
+		"apns",
+		"fcm",
+		"webpush"
+	]),
+	token: z.string(),
+	p256dh: z.string().nullable(),
+	auth: z.string().nullable(),
+	appId: z.string().nullable(),
+	environment: z.enum(["production", "sandbox"]).nullable()
+};
+const Device = z.object(DeviceFields);
+const DeviceList = z.array(z.object({
+	...DeviceFields,
+	lastSeenAt: z.coerce.date()
+}));
+const DeviceIdParam = z.object({ deviceId: z.string() });
+const RegisterDevice = z.object({
+	provider: z.enum([
+		"apns",
+		"fcm",
+		"webpush"
+	]),
+	token: z.string().min(1).max(4096).describe("The APNs device token, the FCM registration token, or the Web Push endpoint URL"),
+	keys: z.object({
+		p256dh: z.string().min(1).max(512),
+		auth: z.string().min(1).max(512)
+	}).strict().optional().describe("The Web Push subscription keys; webpush only"),
+	appId: z.string().min(1).max(255).optional().describe("The iOS bundle id or Android package name"),
+	environment: z.enum(["production", "sandbox"]).optional().describe("apns only")
+}).strict();
+const PushConfigView = z.object({ vapidPublicKey: z.string().nullable() });
 //#endregion
-export { MarkedRead, Notification, NotificationIdParam, NotificationPreference, NotificationPreferences, NotificationView, NotificationsPage, SetNotificationPreferences };
+export { CommunityNotificationSettings, Device, DeviceIdParam, DeviceList, NotificationCategory, NotificationCategoryDefaults, NotificationCategoryList, NotificationChannelInfos, NotificationFilterQuery, NotificationIdParam, NotificationListQuery, NotificationListScopeQuery, NotificationTypeInfo, NotificationTypeInfos, NotificationUnreadCounts, NotificationView, NotificationsPage, OrgNotificationSettings, PatchNotificationSettings, PushConfigView, RegisterDevice, ReplaceNotificationCategories };
 
 //# sourceMappingURL=notifications.js.map

package/dist/http/schemas/notifications.js.map

@@ -1 +1 @@
-{"version":3,"file":"notifications.js","names":[],"sources":["../../../src/http/schemas/notifications.ts"],"sourcesContent":["import { z } from 'zod';\nimport {\n  notificationKindSchema,\n  notificationPreferenceSchema,\n  notificationSchema,\n} from '@headless-lms/core/schemas';\nimport type { NotificationView as DomainNotificationView } from '@headless-lms/core/reporting/member';\nimport { paginated, type Matches } from './shared.js';\n\nexport const Notification = notificationSchema;\nexport const NotificationIdParam = z.object({ notificationId: z.string() });\n\nexport const NotificationView = z.object({\n  id: z.string(),\n  kind: notificationKindSchema,\n  createdAt: z.coerce.date(),\n  readAt: z.coerce.date().nullable(),\n  actor: z\n    .object({\n      orgUserId: z.string(),\n      displayName: z.string().nullable(),\n      imageUrl: z.string().nullable(),\n    })\n    .nullable(),\n  community: z.object({ id: z.string(), title: z.string() }).nullable(),\n  space: z.object({ id: z.string(), name: z.string() }).nullable(),\n  post: z\n    .object({ id: z.string(), title: z.string() })\n    .nullable()\n    .describe('Null when the viewer can no longer see the post'),\n  commentId: z.string().nullable(),\n  chat: z\n    .object({ id: z.string(), title: z.string() })\n    .nullable()\n    .describe('Null when the viewer is not in the chat'),\n  messageId: z.string().nullable(),\n});\ntype _NotificationViewMatches = Matches<DomainNotificationView, z.infer<typeof NotificationView>> &\n  Matches<z.infer<typeof NotificationView>, DomainNotificationView>;\n\nexport const NotificationsPage = paginated(NotificationView).extend({\n  unreadCount: z.number().int(),\n});\n\nexport const MarkedRead = z.object({ updated: z.number().int() });\n\nexport const NotificationPreference = notificationPreferenceSchema;\nexport const NotificationPreferences = z.array(NotificationPreference);\nexport const SetNotificationPreferences = z\n  .object({\n    preferences: z\n      .array(NotificationPreference)\n      .min(1)\n      .max(notificationKindSchema.options.length)\n      .refine(\n        (preferences) => new Set(preferences.map((p) => p.kind)).size === preferences.length,\n        { message: 'must name each kind at most once' },\n      )\n      .describe('One entry per kind to change, each kind at most once; kinds left out keep theirs'),\n  })\n  .strict();\n"],"mappings":";;;;AASA,MAAa,eAAe;AAC5B,MAAa,sBAAsB,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;AAE1E,MAAa,mBAAmB,EAAE,OAAO;CACvC,IAAI,EAAE,OAAO;CACb,MAAM;CACN,WAAW,EAAE,OAAO,KAAK;CACzB,QAAQ,EAAE,OAAO,KAAK,CAAC,CAAC,SAAS;CACjC,OAAO,EACJ,OAAO;EACN,WAAW,EAAE,OAAO;EACpB,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;EACjC,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,CAAC,CAAC,CACD,SAAS;CACZ,WAAW,EAAE,OAAO;EAAE,IAAI,EAAE,OAAO;EAAG,OAAO,EAAE,OAAO;CAAE,CAAC,CAAC,CAAC,SAAS;CACpE,OAAO,EAAE,OAAO;EAAE,IAAI,EAAE,OAAO;EAAG,MAAM,EAAE,OAAO;CAAE,CAAC,CAAC,CAAC,SAAS;CAC/D,MAAM,EACH,OAAO;EAAE,IAAI,EAAE,OAAO;EAAG,OAAO,EAAE,OAAO;CAAE,CAAC,CAAC,CAC7C,SAAS,CAAC,CACV,SAAS,iDAAiD;CAC7D,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,MAAM,EACH,OAAO;EAAE,IAAI,EAAE,OAAO;EAAG,OAAO,EAAE,OAAO;CAAE,CAAC,CAAC,CAC7C,SAAS,CAAC,CACV,SAAS,yCAAyC;CACrD,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;AACjC,CAAC;AAID,MAAa,oBAAoB,UAAU,gBAAgB,CAAC,CAAC,OAAO,EAClE,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,EAC9B,CAAC;AAED,MAAa,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AAEhE,MAAa,yBAAyB;AACtC,MAAa,0BAA0B,EAAE,MAAM,sBAAsB;AACrE,MAAa,6BAA6B,EACvC,OAAO,EACN,aAAa,EACV,MAAM,sBAAsB,CAAC,CAC7B,IAAI,CAAC,CAAC,CACN,IAAI,uBAAuB,QAAQ,MAAM,CAAC,CAC1C,QACE,gBAAgB,IAAI,IAAI,YAAY,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,YAAY,QAC9E,EAAE,SAAS,mCAAmC,CAChD,CAAC,CACA,SAAS,kFAAkF,EAChG,CAAC,CAAC,CACD,OAAO"}
+{"version":3,"file":"notifications.js","names":[],"sources":["../../../src/http/schemas/notifications.ts"],"sourcesContent":["import { z } from 'zod';\nimport {\n  digestScheduleSchema,\n  jsonValueSchema,\n  notificationCategoryKeySchema,\n  notificationChannelKeySchema,\n  notificationCategoryListSchema,\n  notificationCategorySchema,\n  notificationScopeSchema,\n  notificationTypeKeySchema,\n  reasonSchema,\n  subjectTypeSchema,\n} from '@headless-lms/core/schemas';\nimport type {\n  CommunityNotificationSettingsView as DomainCommunityNotificationSettingsView,\n  NotificationUnreadCounts as DomainNotificationUnreadCounts,\n  NotificationView as DomainNotificationView,\n} from '@headless-lms/core/reporting/member';\nimport { PageQuery, paginated, type Matches } from './shared.js';\n\nexport const NotificationIdParam = z.object({ notificationId: z.string() });\n\nfunction commaSeparated<T extends string>(item: z.ZodType<T, string>, description: string) {\n  return z\n    .string()\n    .max(2000)\n    .transform((value) =>\n      value\n        .split(',')\n        .map((part) => part.trim())\n        .filter((part) => part.length > 0),\n    )\n    .pipe(z.array(item).min(1).max(50))\n    .describe(description);\n}\n\nfunction scopeMatchesCommunity(\n  filter: { scope?: 'org' | 'community'; communityId?: string; includeOrg?: boolean },\n  ctx: z.RefinementCtx,\n): void {\n  if (filter.scope === 'org' && filter.communityId !== undefined) {\n    ctx.addIssue({\n      code: 'custom',\n      path: ['communityId'],\n      message: '`communityId` implies `scope=community`; it cannot go with `scope=org`',\n    });\n  }\n  if (filter.includeOrg === true && filter.communityId === undefined) {\n    ctx.addIssue({\n      code: 'custom',\n      path: ['includeOrg'],\n      message: '`includeOrg` goes with `communityId`',\n    });\n  }\n  if (filter.includeOrg === true && filter.scope !== undefined) {\n    ctx.addIssue({\n      code: 'custom',\n      path: ['includeOrg'],\n      message: '`includeOrg` cannot go with `scope`',\n    });\n  }\n}\n\nconst notificationFilterShape = z\n  .object({\n    scope: z\n      .enum(['org', 'community'])\n      .optional()\n      .describe('`org`: the org list only; `community`: notifications in any community'),\n    communityId: z\n      .string()\n      .min(1)\n      .max(64)\n      .optional()\n      .describe('Notifications in this community; implies `scope=community`'),\n    includeOrg: z\n      .stringbool()\n      .optional()\n      .describe(\n        'With `communityId`, `true` adds the org list (notifications in no community); not with `scope`',\n      ),\n    category: commaSeparated(\n      notificationCategoryKeySchema,\n      'One or more category keys, comma separated',\n    ).optional(),\n    reason: commaSeparated(\n      reasonSchema,\n      'One or more reasons, comma separated; matches any',\n    ).optional(),\n    type: commaSeparated(\n      notificationTypeKeySchema,\n      'One or more types, comma separated',\n    ).optional(),\n    unread: z.stringbool().optional().describe('`true` for unread notifications only'),\n  })\n  .strict();\n\nexport const NotificationFilterQuery = notificationFilterShape.superRefine(scopeMatchesCommunity);\n\nexport const NotificationListQuery = PageQuery.extend(notificationFilterShape.shape)\n  .strict()\n  .superRefine(scopeMatchesCommunity);\n\nconst NotificationItem = z.object({\n  type: subjectTypeSchema,\n  id: z.string(),\n  title: z.string().optional(),\n  excerpt: z.string().optional(),\n});\n\nexport const NotificationView = z.object({\n  id: z.string(),\n  type: z.string(),\n  scope: notificationScopeSchema,\n  reasons: z.array(reasonSchema),\n  matchedReason: reasonSchema.describe(\n    'The reason of the pair the category matched, which picks the wording, such as a reply to your comment',\n  ),\n  category: z.string(),\n  display: z\n    .record(z.string(), jsonValueSchema)\n    .describe('The text stored when the notification was sent'),\n  community: z.object({ id: z.string(), title: z.string() }).nullable(),\n  space: z.object({ id: z.string(), name: z.string() }).nullable(),\n  actor: z\n    .object({\n      orgUserId: z.string(),\n      name: z.string().nullable(),\n      imageUrl: z.string().nullable(),\n    })\n    .nullable(),\n  subject: NotificationItem.nullable().describe(\n    'What the notification is about, with its current title or excerpt; null when you can no longer open it or it was deleted',\n  ),\n  parent: NotificationItem.nullable().describe(\n    \"The subject's container, such as a comment's post; null when you can no longer open it or it was deleted\",\n  ),\n  createdAt: z.coerce.date(),\n  readAt: z.coerce.date().nullable(),\n});\ntype _NotificationViewMatches = Matches<DomainNotificationView, z.infer<typeof NotificationView>> &\n  Matches<z.infer<typeof NotificationView>, DomainNotificationView>;\n\nexport const NotificationsPage = paginated(NotificationView).extend({\n  unreadCount: z.number().int().describe('Unread notifications matching the same filters'),\n});\n\nexport const NotificationUnreadCounts = z.object({\n  org: z.number().int(),\n  communities: z.array(z.object({ communityId: z.string(), unread: z.number().int() })),\n});\ntype _NotificationUnreadCountsMatches = Matches<\n  DomainNotificationUnreadCounts,\n  z.infer<typeof NotificationUnreadCounts>\n>;\n\nexport const NotificationCategory = notificationCategorySchema;\n\nexport const NotificationCategoryList = z.object({\n  categories: z.array(NotificationCategory),\n  source: z\n    .enum(['default', 'stored'])\n    .describe('`default` while the list in use is the server default, `stored` once one is saved'),\n});\n\nexport const ReplaceNotificationCategories = z\n  .object({\n    categories: notificationCategoryListSchema.describe(\n      'The whole ordered list; a notification is filed under the first category that matches',\n    ),\n  })\n  .strict();\n\nexport const NotificationCategoryDefaults = z.object({ categories: z.array(NotificationCategory) });\n\nexport const NotificationListScopeQuery = z\n  .object({ scope: z.enum(['org', 'community']) })\n  .strict();\n\nexport const NotificationTypeInfo = z.object({\n  type: z.string(),\n  scopes: z.array(notificationScopeSchema),\n  reasons: z.array(reasonSchema),\n});\nexport const NotificationTypeInfos = z.array(NotificationTypeInfo);\n\nexport const NotificationChannelInfos = z.array(z.object({ channel: z.string() }));\n\nconst ResolvedChannel = z.object({\n  channel: z.string(),\n  enabled: z.boolean(),\n  default: z\n    .boolean()\n    .describe(\n      'What the channel would be without your own setting at this level: what `enabled: null` gives',\n    ),\n  source: z\n    .enum(['locked', 'space', 'community', 'spaceDefault', 'default'])\n    .describe(\n      'Why the channel is on or off: locked by the category, your setting for the space, your setting for the whole community (or the org), the default for the space, or the category default',\n    ),\n  locked: z.boolean(),\n});\n\nconst NotificationSettingsCategory = z.object({\n  key: z.string(),\n  perSpace: z.boolean(),\n  channels: z.array(ResolvedChannel),\n  spaces: z\n    .array(z.object({ spaceId: z.string(), name: z.string(), channels: z.array(ResolvedChannel) }))\n    .optional()\n    .describe('Per-space categories only: every space you can open'),\n});\n\nexport const CommunityNotificationSettings = z.object({\n  communityId: z.string(),\n  digest: digestScheduleSchema\n    .nullable()\n    .describe(\"The community's digest schedule; null when it sends no digest\"),\n  categories: z.array(NotificationSettingsCategory),\n});\ntype _CommunityNotificationSettingsMatches = Matches<\n  DomainCommunityNotificationSettingsView,\n  z.infer<typeof CommunityNotificationSettings>\n>;\n\nexport const OrgNotificationSettings = z.object({\n  categories: z.array(NotificationSettingsCategory),\n});\n\nexport const PatchNotificationSettings = z\n  .object({\n    settings: z\n      .array(\n        z\n          .object({\n            category: notificationCategoryKeySchema,\n            spaceId: z.string().min(1).max(64).optional(),\n            channel: notificationChannelKeySchema,\n            enabled: z\n              .boolean()\n              .nullable()\n              .describe('null removes your choice, so the default applies again'),\n          })\n          .strict(),\n      )\n      .min(1)\n      .max(200),\n  })\n  .strict();\n\nconst DeviceFields = {\n  id: z.string(),\n  provider: z.enum(['apns', 'fcm', 'webpush']),\n  token: z.string(),\n  p256dh: z.string().nullable(),\n  auth: z.string().nullable(),\n  appId: z.string().nullable(),\n  environment: z.enum(['production', 'sandbox']).nullable(),\n};\n\nexport const Device = z.object(DeviceFields);\nexport const DeviceList = z.array(z.object({ ...DeviceFields, lastSeenAt: z.coerce.date() }));\nexport const DeviceIdParam = z.object({ deviceId: z.string() });\n\nexport const RegisterDevice = z\n  .object({\n    provider: z.enum(['apns', 'fcm', 'webpush']),\n    token: z\n      .string()\n      .min(1)\n      .max(4096)\n      .describe('The APNs device token, the FCM registration token, or the Web Push endpoint URL'),\n    keys: z\n      .object({ p256dh: z.string().min(1).max(512), auth: z.string().min(1).max(512) })\n      .strict()\n      .optional()\n      .describe('The Web Push subscription keys; webpush only'),\n    appId: z\n      .string()\n      .min(1)\n      .max(255)\n      .optional()\n      .describe('The iOS bundle id or Android package name'),\n    environment: z.enum(['production', 'sandbox']).optional().describe('apns only'),\n  })\n  .strict();\n\nexport const PushConfigView = z.object({ vapidPublicKey: z.string().nullable() });\n"],"mappings":";;;;AAoBA,MAAa,sBAAsB,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;AAE1E,SAAS,eAAiC,MAA4B,aAAqB;CACzF,OAAO,EACJ,OAAO,CAAC,CACR,IAAI,GAAI,CAAC,CACT,WAAW,UACV,MACG,MAAM,GAAG,CAAC,CACV,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,CAC1B,QAAQ,SAAS,KAAK,SAAS,CAAC,CACrC,CAAC,CACA,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAClC,SAAS,WAAW;AACzB;AAEA,SAAS,sBACP,QACA,KACM;CACN,IAAI,OAAO,UAAU,SAAS,OAAO,gBAAgB,KAAA,GACnD,IAAI,SAAS;EACX,MAAM;EACN,MAAM,CAAC,aAAa;EACpB,SAAS;CACX,CAAC;CAEH,IAAI,OAAO,eAAe,QAAQ,OAAO,gBAAgB,KAAA,GACvD,IAAI,SAAS;EACX,MAAM;EACN,MAAM,CAAC,YAAY;EACnB,SAAS;CACX,CAAC;CAEH,IAAI,OAAO,eAAe,QAAQ,OAAO,UAAU,KAAA,GACjD,IAAI,SAAS;EACX,MAAM;EACN,MAAM,CAAC,YAAY;EACnB,SAAS;CACX,CAAC;AAEL;AAEA,MAAM,0BAA0B,EAC7B,OAAO;CACN,OAAO,EACJ,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC,CAC1B,SAAS,CAAC,CACV,SAAS,uEAAuE;CACnF,aAAa,EACV,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,IAAI,EAAE,CAAC,CACP,SAAS,CAAC,CACV,SAAS,4DAA4D;CACxE,YAAY,EACT,WAAW,CAAC,CACZ,SAAS,CAAC,CACV,SACC,gGACF;CACF,UAAU,eACR,+BACA,4CACF,CAAC,CAAC,SAAS;CACX,QAAQ,eACN,cACA,mDACF,CAAC,CAAC,SAAS;CACX,MAAM,eACJ,2BACA,oCACF,CAAC,CAAC,SAAS;CACX,QAAQ,EAAE,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,sCAAsC;AACnF,CAAC,CAAC,CACD,OAAO;AAEV,MAAa,0BAA0B,wBAAwB,YAAY,qBAAqB;AAEhG,MAAa,wBAAwB,UAAU,OAAO,wBAAwB,KAAK,CAAC,CACjF,OAAO,CAAC,CACR,YAAY,qBAAqB;AAEpC,MAAM,mBAAmB,EAAE,OAAO;CAChC,MAAM;CACN,IAAI,EAAE,OAAO;CACb,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;AAC/B,CAAC;AAED,MAAa,mBAAmB,EAAE,OAAO;CACvC,IAAI,EAAE,OAAO;CACb,MAAM,EAAE,OAAO;CACf,OAAO;CACP,SAAS,EAAE,MAAM,YAAY;CAC7B,eAAe,aAAa,SAC1B,uGACF;CACA,UAAU,EAAE,OAAO;CACnB,SAAS,EACN,OAAO,EAAE,OAAO,GAAG,eAAe,CAAC,CACnC,SAAS,gDAAgD;CAC5D,WAAW,EAAE,OAAO;EAAE,IAAI,EAAE,OAAO;EAAG,OAAO,EAAE,OAAO;CAAE,CAAC,CAAC,CAAC,SAAS;CACpE,OAAO,EAAE,OAAO;EAAE,IAAI,EAAE,OAAO;EAAG,MAAM,EAAE,OAAO;CAAE,CAAC,CAAC,CAAC,SAAS;CAC/D,OAAO,EACJ,OAAO;EACN,WAAW,EAAE,OAAO;EACpB,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;EAC1B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,CAAC,CAAC,CACD,SAAS;CACZ,SAAS,iBAAiB,SAAS,CAAC,CAAC,SACnC,0HACF;CACA,QAAQ,iBAAiB,SAAS,CAAC,CAAC,SAClC,0GACF;CACA,WAAW,EAAE,OAAO,KAAK;CACzB,QAAQ,EAAE,OAAO,KAAK,CAAC,CAAC,SAAS;AACnC,CAAC;AAID,MAAa,oBAAoB,UAAU,gBAAgB,CAAC,CAAC,OAAO,EAClE,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,gDAAgD,EACzF,CAAC;AAED,MAAa,2BAA2B,EAAE,OAAO;CAC/C,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI;CACpB,aAAa,EAAE,MAAM,EAAE,OAAO;EAAE,aAAa,EAAE,OAAO;EAAG,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI;CAAE,CAAC,CAAC;AACtF,CAAC;AAMD,MAAa,uBAAuB;AAEpC,MAAa,2BAA2B,EAAE,OAAO;CAC/C,YAAY,EAAE,MAAM,oBAAoB;CACxC,QAAQ,EACL,KAAK,CAAC,WAAW,QAAQ,CAAC,CAAC,CAC3B,SAAS,mFAAmF;AACjG,CAAC;AAED,MAAa,gCAAgC,EAC1C,OAAO,EACN,YAAY,+BAA+B,SACzC,uFACF,EACF,CAAC,CAAC,CACD,OAAO;AAEV,MAAa,+BAA+B,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,EAAE,CAAC;AAElG,MAAa,6BAA6B,EACvC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,CAC/C,OAAO;AAEV,MAAa,uBAAuB,EAAE,OAAO;CAC3C,MAAM,EAAE,OAAO;CACf,QAAQ,EAAE,MAAM,uBAAuB;CACvC,SAAS,EAAE,MAAM,YAAY;AAC/B,CAAC;AACD,MAAa,wBAAwB,EAAE,MAAM,oBAAoB;AAEjE,MAAa,2BAA2B,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;AAEjF,MAAM,kBAAkB,EAAE,OAAO;CAC/B,SAAS,EAAE,OAAO;CAClB,SAAS,EAAE,QAAQ;CACnB,SAAS,EACN,QAAQ,CAAC,CACT,SACC,8FACF;CACF,QAAQ,EACL,KAAK;EAAC;EAAU;EAAS;EAAa;EAAgB;CAAS,CAAC,CAAC,CACjE,SACC,yLACF;CACF,QAAQ,EAAE,QAAQ;AACpB,CAAC;AAED,MAAM,+BAA+B,EAAE,OAAO;CAC5C,KAAK,EAAE,OAAO;CACd,UAAU,EAAE,QAAQ;CACpB,UAAU,EAAE,MAAM,eAAe;CACjC,QAAQ,EACL,MAAM,EAAE,OAAO;EAAE,SAAS,EAAE,OAAO;EAAG,MAAM,EAAE,OAAO;EAAG,UAAU,EAAE,MAAM,eAAe;CAAE,CAAC,CAAC,CAAC,CAC9F,SAAS,CAAC,CACV,SAAS,qDAAqD;AACnE,CAAC;AAED,MAAa,gCAAgC,EAAE,OAAO;CACpD,aAAa,EAAE,OAAO;CACtB,QAAQ,qBACL,SAAS,CAAC,CACV,SAAS,+DAA+D;CAC3E,YAAY,EAAE,MAAM,4BAA4B;AAClD,CAAC;AAMD,MAAa,0BAA0B,EAAE,OAAO,EAC9C,YAAY,EAAE,MAAM,4BAA4B,EAClD,CAAC;AAED,MAAa,4BAA4B,EACtC,OAAO,EACN,UAAU,EACP,MACC,EACG,OAAO;CACN,UAAU;CACV,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS;CAC5C,SAAS;CACT,SAAS,EACN,QAAQ,CAAC,CACT,SAAS,CAAC,CACV,SAAS,wDAAwD;AACtE,CAAC,CAAC,CACD,OAAO,CACZ,CAAC,CACA,IAAI,CAAC,CAAC,CACN,IAAI,GAAG,EACZ,CAAC,CAAC,CACD,OAAO;AAEV,MAAM,eAAe;CACnB,IAAI,EAAE,OAAO;CACb,UAAU,EAAE,KAAK;EAAC;EAAQ;EAAO;CAAS,CAAC;CAC3C,OAAO,EAAE,OAAO;CAChB,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,aAAa,EAAE,KAAK,CAAC,cAAc,SAAS,CAAC,CAAC,CAAC,SAAS;AAC1D;AAEA,MAAa,SAAS,EAAE,OAAO,YAAY;AAC3C,MAAa,aAAa,EAAE,MAAM,EAAE,OAAO;CAAE,GAAG;CAAc,YAAY,EAAE,OAAO,KAAK;AAAE,CAAC,CAAC;AAC5F,MAAa,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAE9D,MAAa,iBAAiB,EAC3B,OAAO;CACN,UAAU,EAAE,KAAK;EAAC;EAAQ;EAAO;CAAS,CAAC;CAC3C,OAAO,EACJ,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,IAAI,IAAI,CAAC,CACT,SAAS,iFAAiF;CAC7F,MAAM,EACH,OAAO;EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;EAAG,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CAAE,CAAC,CAAC,CAChF,OAAO,CAAC,CACR,SAAS,CAAC,CACV,SAAS,8CAA8C;CAC1D,OAAO,EACJ,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,IAAI,GAAG,CAAC,CACR,SAAS,CAAC,CACV,SAAS,2CAA2C;CACvD,aAAa,EAAE,KAAK,CAAC,cAAc,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,WAAW;AAChF,CAAC,CAAC,CACD,OAAO;AAEV,MAAa,iBAAiB,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC"}

package/dist/http/schemas/posts.d.ts

@@ -47,8 +47,18 @@ declare const PostView: z.ZodObject<{
   reactions: z.ZodRecord<z.ZodString, z.ZodNumber>;
   viewerReaction: z.ZodNullable<z.ZodString>;
   commentCount: z.ZodNumber;
-  following: z.ZodBoolean;
+  subscription: z.ZodNullable<z.ZodObject<{
+    state: z.ZodEnum<{
+      following: "following";
+      muted: "muted";
+    }>;
+    mutedUntil: z.ZodNullable<z.ZodCoercedDate<unknown>>;
+  }, z.core.$strict>>;
   bookmarked: z.ZodBoolean;
+  mentions: z.ZodArray<z.ZodObject<{
+    orgUserId: z.ZodString;
+    name: z.ZodString;
+  }, z.core.$strict>>;
 }, z.core.$strict>;
 declare const PostFlag: z.ZodObject<{
   orgId: z.ZodString;
@@ -113,8 +123,18 @@ declare const PostFeedPage: z.ZodObject<{
     reactions: z.ZodRecord<z.ZodString, z.ZodNumber>;
     viewerReaction: z.ZodNullable<z.ZodString>;
     commentCount: z.ZodNumber;
-    following: z.ZodBoolean;
+    subscription: z.ZodNullable<z.ZodObject<{
+      state: z.ZodEnum<{
+        following: "following";
+        muted: "muted";
+      }>;
+      mutedUntil: z.ZodNullable<z.ZodCoercedDate<unknown>>;
+    }, z.core.$strict>>;
     bookmarked: z.ZodBoolean;
+    mentions: z.ZodArray<z.ZodObject<{
+      orgUserId: z.ZodString;
+      name: z.ZodString;
+    }, z.core.$strict>>;
   }, z.core.$strict>>;
   total: z.ZodNumber;
   page: z.ZodNumber;
@@ -210,8 +230,18 @@ declare const SpaceQueue: z.ZodObject<{
     reactions: z.ZodRecord<z.ZodString, z.ZodNumber>;
     viewerReaction: z.ZodNullable<z.ZodString>;
     commentCount: z.ZodNumber;
-    following: z.ZodBoolean;
+    subscription: z.ZodNullable<z.ZodObject<{
+      state: z.ZodEnum<{
+        following: "following";
+        muted: "muted";
+      }>;
+      mutedUntil: z.ZodNullable<z.ZodCoercedDate<unknown>>;
+    }, z.core.$strict>>;
     bookmarked: z.ZodBoolean;
+    mentions: z.ZodArray<z.ZodObject<{
+      orgUserId: z.ZodString;
+      name: z.ZodString;
+    }, z.core.$strict>>;
   }, z.core.$strict>>;
   flags: z.ZodArray<z.ZodObject<{
     orgId: z.ZodString;
@@ -304,6 +334,10 @@ declare const PostCommentsPage: z.ZodObject<{
     }, z.core.$strict>>;
     reactions: z.ZodRecord<z.ZodString, z.ZodNumber>;
     viewerReaction: z.ZodOptional<z.ZodString>;
+    mentions: z.ZodArray<z.ZodObject<{
+      orgUserId: z.ZodString;
+      name: z.ZodString;
+    }, z.core.$strict>>;
     createdAt: z.ZodCoercedDate<unknown>;
     updatedAt: z.ZodCoercedDate<unknown>;
   }, z.core.$strict>>;

package/dist/http/schemas/profile.d.ts

@@ -3,13 +3,13 @@ import { z } from "zod";
 declare const UserProfile: z.ZodObject<{
   createdAt: z.ZodCoercedDate<unknown>;
   updatedAt: z.ZodCoercedDate<unknown>;
+  imageUrl: z.ZodNullable<z.ZodString>;
   displayName: z.ZodNullable<z.ZodString>;
   headline: z.ZodNullable<z.ZodString>;
   imageAssetId: z.ZodNullable<z.ZodString>;
-  imageUrl: z.ZodNullable<z.ZodString>;
   bio: z.ZodNullable<z.ZodString>;
-  userId: z.ZodString;
   extra: z.ZodType<import("@headless-lms/core/types").JsonValue, unknown, z.core.$ZodTypeInternals<import("@headless-lms/core/types").JsonValue, unknown>>;
+  userId: z.ZodString;
 }, z.core.$strip>;
 declare const UpdateProfile: z.ZodObject<{
   displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;

package/dist/http/schemas/shared.d.ts

@@ -20,8 +20,15 @@ declare const ValidationErrorBody: z.ZodObject<{
   }, z.core.$strip>>>;
 }, z.core.$strip>;
 type ValidationErrorBody = z.infer<typeof ValidationErrorBody>;
-type RefusalStatus = 400 | 403 | 404 | 409 | 413 | 415 | 502;
-type RefusalBodies<S extends RefusalStatus> = { [K in S]: K extends 400 ? typeof ValidationErrorBody : typeof ErrorBody; };
+declare const UnavailableErrorBody: z.ZodObject<{
+  error: z.ZodString;
+  message: z.ZodOptional<z.ZodString>;
+  requestId: z.ZodOptional<z.ZodString>;
+  details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>;
+type UnavailableErrorBody = z.infer<typeof UnavailableErrorBody>;
+type RefusalStatus = 400 | 403 | 404 | 409 | 413 | 415 | 422 | 502 | 503;
+type RefusalBodies<S extends RefusalStatus> = { [K in S]: K extends 400 | 422 ? typeof ValidationErrorBody : K extends 503 ? typeof UnavailableErrorBody : typeof ErrorBody; };
 /** Response schemas for the refusals a route can answer. A 400 keeps the validation `issues`. */
 declare function refusals<S extends RefusalStatus>(...statuses: S[]): RefusalBodies<S>;
 /** An RFC 3339 date-time in a request, such as `2026-10-29T12:00:00Z`, read as a Date. */
@@ -78,5 +85,5 @@ declare const OrgUserProfileSchema: z.ZodObject<{
 }, z.core.$strip>;
 type OrgUserProfileSchema = z.infer<typeof OrgUserProfileSchema>;
 //#endregion
-export { DateTimeInput, ErrorBody, ListQuery, Matches, OrgRole, OrgUserProfileSchema, PageQuery, UserProfileSchema, ValidationErrorBody, paginated, refusals };
+export { DateTimeInput, ErrorBody, ListQuery, Matches, OrgRole, OrgUserProfileSchema, PageQuery, UnavailableErrorBody, UserProfileSchema, ValidationErrorBody, paginated, refusals };
 //# sourceMappingURL=shared.d.ts.map

package/dist/http/schemas/shared.js

@@ -12,9 +12,10 @@ const ValidationErrorBody = ErrorBody.extend({ issues: z.array(z.object({
 	path: z.string().describe("Where in the request, such as `body.topics[1].name`"),
 	message: z.string()
 })).optional() });
+const UnavailableErrorBody = ErrorBody.extend({ details: z.record(z.string(), z.string()).optional().describe("Ids of what the request left behind, such as the post kept as a draft") });
 /** Response schemas for the refusals a route can answer. A 400 keeps the validation `issues`. */
 function refusals(...statuses) {
-	return Object.fromEntries(statuses.map((status) => [status, status === 400 ? ValidationErrorBody : ErrorBody]));
+	return Object.fromEntries(statuses.map((status) => [status, status === 400 || status === 422 ? ValidationErrorBody : status === 503 ? UnavailableErrorBody : ErrorBody]));
 }
 /** An RFC 3339 date-time in a request, such as `2026-10-29T12:00:00Z`, read as a Date. */
 const DateTimeInput = z.iso.datetime({ offset: true }).pipe(z.coerce.date());
@@ -68,6 +69,6 @@ const OrgUserProfileSchema = z.object({
 	image: z.string().nullable()
 });
 //#endregion
-export { DateTimeInput, ErrorBody, ListQuery, OrgRole, OrgUserProfileSchema, PageQuery, UserProfileSchema, ValidationErrorBody, paginated, refusals };
+export { DateTimeInput, ErrorBody, ListQuery, OrgRole, OrgUserProfileSchema, PageQuery, UnavailableErrorBody, UserProfileSchema, ValidationErrorBody, paginated, refusals };
 
 //# sourceMappingURL=shared.js.map

package/dist/http/schemas/shared.js.map

@@ -1 +1 @@
-{"version":3,"file":"shared.js","names":[],"sources":["../../../src/http/schemas/shared.ts"],"sourcesContent":["// Shared contract primitives reused across resource contracts.\nimport { z } from 'zod';\n\n/** Fails typecheck when a schema and its domain type drift apart. */\nexport type Matches<A, _B extends A> = true;\n\n/** Uniform error envelope returned by every non-2xx response. */\nexport const ErrorBody = z.object({\n  error: z.string(),\n  message: z.string().optional(),\n  /** Server-side correlation id — quote it to find the matching API log line. */\n  requestId: z.string().optional(),\n});\nexport type ErrorBody = z.infer<typeof ErrorBody>;\n\n/** A 400 from request validation: `message` names the first problem, `issues` lists them all. */\nexport const ValidationErrorBody = ErrorBody.extend({\n  issues: z\n    .array(\n      z.object({\n        path: z.string().describe('Where in the request, such as `body.topics[1].name`'),\n        message: z.string(),\n      }),\n    )\n    .optional(),\n});\nexport type ValidationErrorBody = z.infer<typeof ValidationErrorBody>;\n\ntype RefusalStatus = 400 | 403 | 404 | 409 | 413 | 415 | 502;\ntype RefusalBodies<S extends RefusalStatus> = {\n  [K in S]: K extends 400 ? typeof ValidationErrorBody : typeof ErrorBody;\n};\n\n/** Response schemas for the refusals a route can answer. A 400 keeps the validation `issues`. */\nexport function refusals<S extends RefusalStatus>(...statuses: S[]): RefusalBodies<S> {\n  return Object.fromEntries(\n    statuses.map((status) => [status, status === 400 ? ValidationErrorBody : ErrorBody]),\n  ) as RefusalBodies<S>;\n}\n\n/** An RFC 3339 date-time in a request, such as `2026-10-29T12:00:00Z`, read as a Date. */\nexport const DateTimeInput = z.iso.datetime({ offset: true }).pipe(z.coerce.date());\n\n/** Page position only, for lists that take no search or sort. */\nexport const PageQuery = z\n  .object({\n    page: z.coerce.number().int().min(1).default(1),\n    pageSize: z.coerce.number().int().min(1).max(100).default(20),\n  })\n  .strict();\nexport type PageQuery = z.infer<typeof PageQuery>;\n\n/**\n * Common list query for page-based collections. `z.coerce` because query-string\n * values arrive as strings; defaults make the params optional for callers.\n */\nexport const ListQuery = z.object({\n  page: z.coerce.number().int().min(1).default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).default(20),\n  search: z.string().trim().max(200).optional(),\n  /** Sort field, optionally prefixed with `-` for descending (e.g. `-updatedAt`). */\n  sort: z.string().optional(),\n});\nexport type ListQuery = z.infer<typeof ListQuery>;\n\n/** Wrap a row schema into the standard paginated envelope. */\nexport function paginated<T extends z.ZodTypeAny>(row: T) {\n  return z.object({\n    rows: z.array(row),\n    total: z.number().int(),\n    page: z.number().int(),\n    pageSize: z.number().int(),\n  });\n}\n\n/** All four org roles. `members.ts` exports a staff-only three-value `Role`;\n *  this is the full set, used wherever a learner can also appear. */\nexport const OrgRole = z.enum(['owner', 'admin', 'instructor', 'moderator', 'student']);\nexport type OrgRole = z.infer<typeof OrgRole>;\n\n/** Mirrors UserProfile in @headless-lms/core/types — keyed on the auth user id. */\nexport const UserProfileSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  email: z.string(),\n  image: z.string().nullable(),\n});\nexport type UserProfileSchema = z.infer<typeof UserProfileSchema>;\n\n/** Mirrors OrgUserProfile in @headless-lms/core/types — keyed on org_users.id. */\nexport const OrgUserProfileSchema = z.object({\n  id: z.string(),\n  firstName: z.string().nullable(),\n  lastName: z.string().nullable(),\n  email: z.string(),\n  image: z.string().nullable(),\n});\nexport type OrgUserProfileSchema = z.infer<typeof OrgUserProfileSchema>;\n"],"mappings":";;;AAOA,MAAa,YAAY,EAAE,OAAO;CAChC,OAAO,EAAE,OAAO;CAChB,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;;CAE7B,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;AACjC,CAAC;;AAID,MAAa,sBAAsB,UAAU,OAAO,EAClD,QAAQ,EACL,MACC,EAAE,OAAO;CACP,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS,qDAAqD;CAC/E,SAAS,EAAE,OAAO;AACpB,CAAC,CACH,CAAC,CACA,SAAS,EACd,CAAC;;AASD,SAAgB,SAAkC,GAAG,UAAiC;CACpF,OAAO,OAAO,YACZ,SAAS,KAAK,WAAW,CAAC,QAAQ,WAAW,MAAM,sBAAsB,SAAS,CAAC,CACrF;AACF;;AAGA,MAAa,gBAAgB,EAAE,IAAI,SAAS,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,CAAC;;AAGlF,MAAa,YAAY,EACtB,OAAO;CACN,MAAM,EAAE,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;CAC9C,UAAU,EAAE,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC9D,CAAC,CAAC,CACD,OAAO;;;;;AAOV,MAAa,YAAY,EAAE,OAAO;CAChC,MAAM,EAAE,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;CAC9C,UAAU,EAAE,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC5D,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;;CAE5C,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;AAC5B,CAAC;;AAID,SAAgB,UAAkC,KAAQ;CACxD,OAAO,EAAE,OAAO;EACd,MAAM,EAAE,MAAM,GAAG;EACjB,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI;EACtB,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI;EACrB,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI;CAC3B,CAAC;AACH;;;AAIA,MAAa,UAAU,EAAE,KAAK;CAAC;CAAS;CAAS;CAAc;CAAa;AAAS,CAAC;;AAItF,MAAa,oBAAoB,EAAE,OAAO;CACxC,IAAI,EAAE,OAAO;CACb,MAAM,EAAE,OAAO;CACf,OAAO,EAAE,OAAO;CAChB,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;AAC7B,CAAC;;AAID,MAAa,uBAAuB,EAAE,OAAO;CAC3C,IAAI,EAAE,OAAO;CACb,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,OAAO,EAAE,OAAO;CAChB,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;AAC7B,CAAC"}
+{"version":3,"file":"shared.js","names":[],"sources":["../../../src/http/schemas/shared.ts"],"sourcesContent":["// Shared contract primitives reused across resource contracts.\nimport { z } from 'zod';\n\n/** Fails typecheck when a schema and its domain type drift apart. */\nexport type Matches<A, _B extends A> = true;\n\n/** Uniform error envelope returned by every non-2xx response. */\nexport const ErrorBody = z.object({\n  error: z.string(),\n  message: z.string().optional(),\n  /** Server-side correlation id — quote it to find the matching API log line. */\n  requestId: z.string().optional(),\n});\nexport type ErrorBody = z.infer<typeof ErrorBody>;\n\n/** A 400 from request validation: `message` names the first problem, `issues` lists them all. */\nexport const ValidationErrorBody = ErrorBody.extend({\n  issues: z\n    .array(\n      z.object({\n        path: z.string().describe('Where in the request, such as `body.topics[1].name`'),\n        message: z.string(),\n      }),\n    )\n    .optional(),\n});\nexport type ValidationErrorBody = z.infer<typeof ValidationErrorBody>;\n\nexport const UnavailableErrorBody = ErrorBody.extend({\n  details: z\n    .record(z.string(), z.string())\n    .optional()\n    .describe('Ids of what the request left behind, such as the post kept as a draft'),\n});\nexport type UnavailableErrorBody = z.infer<typeof UnavailableErrorBody>;\n\ntype RefusalStatus = 400 | 403 | 404 | 409 | 413 | 415 | 422 | 502 | 503;\ntype RefusalBodies<S extends RefusalStatus> = {\n  [K in S]: K extends 400 | 422\n    ? typeof ValidationErrorBody\n    : K extends 503\n      ? typeof UnavailableErrorBody\n      : typeof ErrorBody;\n};\n\n/** Response schemas for the refusals a route can answer. A 400 keeps the validation `issues`. */\nexport function refusals<S extends RefusalStatus>(...statuses: S[]): RefusalBodies<S> {\n  return Object.fromEntries(\n    statuses.map((status) => [\n      status,\n      status === 400 || status === 422\n        ? ValidationErrorBody\n        : status === 503\n          ? UnavailableErrorBody\n          : ErrorBody,\n    ]),\n  ) as RefusalBodies<S>;\n}\n\n/** An RFC 3339 date-time in a request, such as `2026-10-29T12:00:00Z`, read as a Date. */\nexport const DateTimeInput = z.iso.datetime({ offset: true }).pipe(z.coerce.date());\n\n/** Page position only, for lists that take no search or sort. */\nexport const PageQuery = z\n  .object({\n    page: z.coerce.number().int().min(1).default(1),\n    pageSize: z.coerce.number().int().min(1).max(100).default(20),\n  })\n  .strict();\nexport type PageQuery = z.infer<typeof PageQuery>;\n\n/**\n * Common list query for page-based collections. `z.coerce` because query-string\n * values arrive as strings; defaults make the params optional for callers.\n */\nexport const ListQuery = z.object({\n  page: z.coerce.number().int().min(1).default(1),\n  pageSize: z.coerce.number().int().min(1).max(100).default(20),\n  search: z.string().trim().max(200).optional(),\n  /** Sort field, optionally prefixed with `-` for descending (e.g. `-updatedAt`). */\n  sort: z.string().optional(),\n});\nexport type ListQuery = z.infer<typeof ListQuery>;\n\n/** Wrap a row schema into the standard paginated envelope. */\nexport function paginated<T extends z.ZodTypeAny>(row: T) {\n  return z.object({\n    rows: z.array(row),\n    total: z.number().int(),\n    page: z.number().int(),\n    pageSize: z.number().int(),\n  });\n}\n\n/** All four org roles. `members.ts` exports a staff-only three-value `Role`;\n *  this is the full set, used wherever a learner can also appear. */\nexport const OrgRole = z.enum(['owner', 'admin', 'instructor', 'moderator', 'student']);\nexport type OrgRole = z.infer<typeof OrgRole>;\n\n/** Mirrors UserProfile in @headless-lms/core/types — keyed on the auth user id. */\nexport const UserProfileSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  email: z.string(),\n  image: z.string().nullable(),\n});\nexport type UserProfileSchema = z.infer<typeof UserProfileSchema>;\n\n/** Mirrors OrgUserProfile in @headless-lms/core/types — keyed on org_users.id. */\nexport const OrgUserProfileSchema = z.object({\n  id: z.string(),\n  firstName: z.string().nullable(),\n  lastName: z.string().nullable(),\n  email: z.string(),\n  image: z.string().nullable(),\n});\nexport type OrgUserProfileSchema = z.infer<typeof OrgUserProfileSchema>;\n"],"mappings":";;;AAOA,MAAa,YAAY,EAAE,OAAO;CAChC,OAAO,EAAE,OAAO;CAChB,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;;CAE7B,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;AACjC,CAAC;;AAID,MAAa,sBAAsB,UAAU,OAAO,EAClD,QAAQ,EACL,MACC,EAAE,OAAO;CACP,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS,qDAAqD;CAC/E,SAAS,EAAE,OAAO;AACpB,CAAC,CACH,CAAC,CACA,SAAS,EACd,CAAC;AAGD,MAAa,uBAAuB,UAAU,OAAO,EACnD,SAAS,EACN,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAC9B,SAAS,CAAC,CACV,SAAS,uEAAuE,EACrF,CAAC;;AAaD,SAAgB,SAAkC,GAAG,UAAiC;CACpF,OAAO,OAAO,YACZ,SAAS,KAAK,WAAW,CACvB,QACA,WAAW,OAAO,WAAW,MACzB,sBACA,WAAW,MACT,uBACA,SACR,CAAC,CACH;AACF;;AAGA,MAAa,gBAAgB,EAAE,IAAI,SAAS,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,CAAC;;AAGlF,MAAa,YAAY,EACtB,OAAO;CACN,MAAM,EAAE,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;CAC9C,UAAU,EAAE,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC9D,CAAC,CAAC,CACD,OAAO;;;;;AAOV,MAAa,YAAY,EAAE,OAAO;CAChC,MAAM,EAAE,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;CAC9C,UAAU,EAAE,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC5D,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;;CAE5C,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;AAC5B,CAAC;;AAID,SAAgB,UAAkC,KAAQ;CACxD,OAAO,EAAE,OAAO;EACd,MAAM,EAAE,MAAM,GAAG;EACjB,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI;EACtB,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI;EACrB,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI;CAC3B,CAAC;AACH;;;AAIA,MAAa,UAAU,EAAE,KAAK;CAAC;CAAS;CAAS;CAAc;CAAa;AAAS,CAAC;;AAItF,MAAa,oBAAoB,EAAE,OAAO;CACxC,IAAI,EAAE,OAAO;CACb,MAAM,EAAE,OAAO;CACf,OAAO,EAAE,OAAO;CAChB,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;AAC7B,CAAC;;AAID,MAAa,uBAAuB,EAAE,OAAO;CAC3C,IAAI,EAAE,OAAO;CACb,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,OAAO,EAAE,OAAO;CAChB,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;AAC7B,CAAC"}

package/dist/http/schemas/students.d.ts

@@ -1,8 +1,8 @@
 import { z } from "zod";
 //#region src/http/schemas/students.d.ts
 declare const OrgUserStatus: z.ZodEnum<{
-  invited: "invited";
   active: "active";
+  invited: "invited";
 }>;
 type OrgUserStatus = z.infer<typeof OrgUserStatus>;
 declare const Student: z.ZodObject<{
@@ -14,8 +14,8 @@ declare const Student: z.ZodObject<{
   entitlementCount: z.ZodNumber;
   avgProgress: z.ZodNumber;
   status: z.ZodEnum<{
-    invited: "invited";
     active: "active";
+    invited: "invited";
   }>;
   joinedAt: z.ZodString;
   lastActiveAt: z.ZodNullable<z.ZodString>;
@@ -66,8 +66,8 @@ declare const StudentsPage: z.ZodObject<{
     entitlementCount: z.ZodNumber;
     avgProgress: z.ZodNumber;
     status: z.ZodEnum<{
-      invited: "invited";
       active: "active";
+      invited: "invited";
     }>;
     joinedAt: z.ZodString;
     lastActiveAt: z.ZodNullable<z.ZodString>;

package/dist/http/scope.d.ts

@@ -18,6 +18,7 @@ interface OrgScope {
 declare class NoActiveOrgError extends Error {}
 declare function resolveScope(container: Container, req: FastifyRequest): Promise<OrgScope>;
 declare function resolveScopeFor(container: Container, authUserId: string, authOrgId: string): Promise<OrgScope>;
+declare function resolveConfiguratorScope(container: Container, req: FastifyRequest): Promise<OrgScope>;
 //#endregion
-export { NoActiveOrgError, OrgScope, resolveScope, resolveScopeFor };
+export { NoActiveOrgError, OrgScope, resolveConfiguratorScope, resolveScope, resolveScopeFor };
 //# sourceMappingURL=scope.d.ts.map

package/dist/http/scope.js

@@ -1,4 +1,5 @@
 import { isStaffRole } from "@headless-lms/core/organizations";
+import { ForbiddenError } from "@headless-lms/core/shared/errors";
 //#region src/http/scope.ts
 /** Thrown when the session has no resolvable active org / domain user. */
 var NoActiveOrgError = class extends Error {};
@@ -38,7 +39,12 @@ async function resolveScopeFor(container, authUserId, authOrgId) {
 		authOrgId
 	};
 }
+async function resolveConfiguratorScope(container, req) {
+	const scope = await resolveScope(container, req);
+	if (scope.role !== "owner" && scope.role !== "admin") throw new ForbiddenError("Only an owner or an admin can configure notifications");
+	return scope;
+}
 //#endregion
-export { NoActiveOrgError, resolveScope, resolveScopeFor };
+export { NoActiveOrgError, resolveConfiguratorScope, resolveScope, resolveScopeFor };
 
 //# sourceMappingURL=scope.js.map

package/dist/http/scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope.js","names":[],"sources":["../../src/http/scope.ts"],"sourcesContent":["import type { FastifyRequest } from 'fastify';\nimport type { Container } from '../app/container.js';\nimport { isStaffRole, type StaffRole } from '@headless-lms/core/organizations';\n\nexport interface OrgScope {\n  /** Domain `organizations.id` for the session's active org. */\n  orgId: string;\n  /** Domain `users.id` of the acting person. */\n  userId: string;\n  /** Domain `org_users.id` — the acting org user in this org. */\n  orgUserId: string;\n  /** The role held in this org. */\n  role: StaffRole;\n  /** Better-auth organization id (for writes that go through the auth provider). */\n  authOrgId: string;\n}\n\n/** Thrown when the session has no resolvable active org / domain user. */\nexport class NoActiveOrgError extends Error {}\n\nexport async function resolveScope(container: Container, req: FastifyRequest): Promise<OrgScope> {\n  const authUser = req.authUser;\n  const authOrgId = req.authOrgId ?? null;\n  if (!authUser) {\n    throw new NoActiveOrgError('Sign in to continue');\n  }\n  if (!authOrgId || !req.orgId) {\n    throw new NoActiveOrgError('Choose an organization to continue');\n  }\n  // The session guard already translated the auth org id to the domain org.\n  const org = await container.organizations.getById(req.orgId);\n  if (!org) {\n    throw new NoActiveOrgError('The active organization no longer exists');\n  }\n  const user = await container.identity.getUserByExternalId(authUser.id);\n  if (!user) {\n    throw new NoActiveOrgError('Your account is not set up yet');\n  }\n  const orgUser = await container.organizations.getOrgUser(org.id, user.id);\n  if (!orgUser || !isStaffRole(orgUser.role)) {\n    throw new NoActiveOrgError('Only staff of this organization can do this');\n  }\n  container.requestContext.set({ orgId: org.id });\n  return {\n    orgId: org.id,\n    userId: user.id,\n    orgUserId: orgUser.id,\n    role: orgUser.role,\n    authOrgId,\n  };\n}\n\nexport async function resolveScopeFor(\n  container: Container,\n  authUserId: string,\n  authOrgId: string,\n): Promise<OrgScope> {\n  const org = await container.organizations.getByExternalId(authOrgId);\n  if (!org) {\n    throw new NoActiveOrgError('active organization not found');\n  }\n  const user = await container.identity.getUserByExternalId(authUserId);\n  if (!user) {\n    throw new NoActiveOrgError('no domain user for the current user');\n  }\n  const orgUser = await container.organizations.getOrgUser(org.id, user.id);\n  if (!orgUser || !isStaffRole(orgUser.role)) {\n    throw new NoActiveOrgError('not a staff member of the active organization');\n  }\n  container.requestContext.set({ orgId: org.id });\n  return { orgId: org.id, userId: user.id, orgUserId: orgUser.id, role: orgUser.role, authOrgId };\n}\n"],"mappings":";;;AAkBA,IAAa,mBAAb,cAAsC,MAAM,CAAC;AAE7C,eAAsB,aAAa,WAAsB,KAAwC;CAC/F,MAAM,WAAW,IAAI;CACrB,MAAM,YAAY,IAAI,aAAa;CACnC,IAAI,CAAC,UACH,MAAM,IAAI,iBAAiB,qBAAqB;CAElD,IAAI,CAAC,aAAa,CAAC,IAAI,OACrB,MAAM,IAAI,iBAAiB,oCAAoC;CAGjE,MAAM,MAAM,MAAM,UAAU,cAAc,QAAQ,IAAI,KAAK;CAC3D,IAAI,CAAC,KACH,MAAM,IAAI,iBAAiB,0CAA0C;CAEvE,MAAM,OAAO,MAAM,UAAU,SAAS,oBAAoB,SAAS,EAAE;CACrE,IAAI,CAAC,MACH,MAAM,IAAI,iBAAiB,gCAAgC;CAE7D,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,IAAI,KAAK,EAAE;CACxE,IAAI,CAAC,WAAW,CAAC,YAAY,QAAQ,IAAI,GACvC,MAAM,IAAI,iBAAiB,6CAA6C;CAE1E,UAAU,eAAe,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC;CAC9C,OAAO;EACL,OAAO,IAAI;EACX,QAAQ,KAAK;EACb,WAAW,QAAQ;EACnB,MAAM,QAAQ;EACd;CACF;AACF;AAEA,eAAsB,gBACpB,WACA,YACA,WACmB;CACnB,MAAM,MAAM,MAAM,UAAU,cAAc,gBAAgB,SAAS;CACnE,IAAI,CAAC,KACH,MAAM,IAAI,iBAAiB,+BAA+B;CAE5D,MAAM,OAAO,MAAM,UAAU,SAAS,oBAAoB,UAAU;CACpE,IAAI,CAAC,MACH,MAAM,IAAI,iBAAiB,qCAAqC;CAElE,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,IAAI,KAAK,EAAE;CACxE,IAAI,CAAC,WAAW,CAAC,YAAY,QAAQ,IAAI,GACvC,MAAM,IAAI,iBAAiB,+CAA+C;CAE5E,UAAU,eAAe,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC;CAC9C,OAAO;EAAE,OAAO,IAAI;EAAI,QAAQ,KAAK;EAAI,WAAW,QAAQ;EAAI,MAAM,QAAQ;EAAM;CAAU;AAChG"}
+{"version":3,"file":"scope.js","names":[],"sources":["../../src/http/scope.ts"],"sourcesContent":["import type { FastifyRequest } from 'fastify';\nimport type { Container } from '../app/container.js';\nimport { isStaffRole, type StaffRole } from '@headless-lms/core/organizations';\nimport { ForbiddenError } from '@headless-lms/core/shared/errors';\n\nexport interface OrgScope {\n  /** Domain `organizations.id` for the session's active org. */\n  orgId: string;\n  /** Domain `users.id` of the acting person. */\n  userId: string;\n  /** Domain `org_users.id` — the acting org user in this org. */\n  orgUserId: string;\n  /** The role held in this org. */\n  role: StaffRole;\n  /** Better-auth organization id (for writes that go through the auth provider). */\n  authOrgId: string;\n}\n\n/** Thrown when the session has no resolvable active org / domain user. */\nexport class NoActiveOrgError extends Error {}\n\nexport async function resolveScope(container: Container, req: FastifyRequest): Promise<OrgScope> {\n  const authUser = req.authUser;\n  const authOrgId = req.authOrgId ?? null;\n  if (!authUser) {\n    throw new NoActiveOrgError('Sign in to continue');\n  }\n  if (!authOrgId || !req.orgId) {\n    throw new NoActiveOrgError('Choose an organization to continue');\n  }\n  // The session guard already translated the auth org id to the domain org.\n  const org = await container.organizations.getById(req.orgId);\n  if (!org) {\n    throw new NoActiveOrgError('The active organization no longer exists');\n  }\n  const user = await container.identity.getUserByExternalId(authUser.id);\n  if (!user) {\n    throw new NoActiveOrgError('Your account is not set up yet');\n  }\n  const orgUser = await container.organizations.getOrgUser(org.id, user.id);\n  if (!orgUser || !isStaffRole(orgUser.role)) {\n    throw new NoActiveOrgError('Only staff of this organization can do this');\n  }\n  container.requestContext.set({ orgId: org.id });\n  return {\n    orgId: org.id,\n    userId: user.id,\n    orgUserId: orgUser.id,\n    role: orgUser.role,\n    authOrgId,\n  };\n}\n\nexport async function resolveScopeFor(\n  container: Container,\n  authUserId: string,\n  authOrgId: string,\n): Promise<OrgScope> {\n  const org = await container.organizations.getByExternalId(authOrgId);\n  if (!org) {\n    throw new NoActiveOrgError('active organization not found');\n  }\n  const user = await container.identity.getUserByExternalId(authUserId);\n  if (!user) {\n    throw new NoActiveOrgError('no domain user for the current user');\n  }\n  const orgUser = await container.organizations.getOrgUser(org.id, user.id);\n  if (!orgUser || !isStaffRole(orgUser.role)) {\n    throw new NoActiveOrgError('not a staff member of the active organization');\n  }\n  container.requestContext.set({ orgId: org.id });\n  return { orgId: org.id, userId: user.id, orgUserId: orgUser.id, role: orgUser.role, authOrgId };\n}\n\nexport async function resolveConfiguratorScope(\n  container: Container,\n  req: FastifyRequest,\n): Promise<OrgScope> {\n  const scope = await resolveScope(container, req);\n  if (scope.role !== 'owner' && scope.role !== 'admin') {\n    throw new ForbiddenError('Only an owner or an admin can configure notifications');\n  }\n  return scope;\n}\n"],"mappings":";;;;AAmBA,IAAa,mBAAb,cAAsC,MAAM,CAAC;AAE7C,eAAsB,aAAa,WAAsB,KAAwC;CAC/F,MAAM,WAAW,IAAI;CACrB,MAAM,YAAY,IAAI,aAAa;CACnC,IAAI,CAAC,UACH,MAAM,IAAI,iBAAiB,qBAAqB;CAElD,IAAI,CAAC,aAAa,CAAC,IAAI,OACrB,MAAM,IAAI,iBAAiB,oCAAoC;CAGjE,MAAM,MAAM,MAAM,UAAU,cAAc,QAAQ,IAAI,KAAK;CAC3D,IAAI,CAAC,KACH,MAAM,IAAI,iBAAiB,0CAA0C;CAEvE,MAAM,OAAO,MAAM,UAAU,SAAS,oBAAoB,SAAS,EAAE;CACrE,IAAI,CAAC,MACH,MAAM,IAAI,iBAAiB,gCAAgC;CAE7D,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,IAAI,KAAK,EAAE;CACxE,IAAI,CAAC,WAAW,CAAC,YAAY,QAAQ,IAAI,GACvC,MAAM,IAAI,iBAAiB,6CAA6C;CAE1E,UAAU,eAAe,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC;CAC9C,OAAO;EACL,OAAO,IAAI;EACX,QAAQ,KAAK;EACb,WAAW,QAAQ;EACnB,MAAM,QAAQ;EACd;CACF;AACF;AAEA,eAAsB,gBACpB,WACA,YACA,WACmB;CACnB,MAAM,MAAM,MAAM,UAAU,cAAc,gBAAgB,SAAS;CACnE,IAAI,CAAC,KACH,MAAM,IAAI,iBAAiB,+BAA+B;CAE5D,MAAM,OAAO,MAAM,UAAU,SAAS,oBAAoB,UAAU;CACpE,IAAI,CAAC,MACH,MAAM,IAAI,iBAAiB,qCAAqC;CAElE,MAAM,UAAU,MAAM,UAAU,cAAc,WAAW,IAAI,IAAI,KAAK,EAAE;CACxE,IAAI,CAAC,WAAW,CAAC,YAAY,QAAQ,IAAI,GACvC,MAAM,IAAI,iBAAiB,+CAA+C;CAE5E,UAAU,eAAe,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC;CAC9C,OAAO;EAAE,OAAO,IAAI;EAAI,QAAQ,KAAK;EAAI,WAAW,QAAQ;EAAI,MAAM,QAAQ;EAAM;CAAU;AAChG;AAEA,eAAsB,yBACpB,WACA,KACmB;CACnB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;CAC/C,IAAI,MAAM,SAAS,WAAW,MAAM,SAAS,SAC3C,MAAM,IAAI,eAAe,uDAAuD;CAElF,OAAO;AACT"}

package/dist/index.d.ts

@@ -8,9 +8,10 @@ import { runMigrations } from "@headless-lms/adapter-db";
 import { InlineAutomationEngine } from "@headless-lms/adapter-defaults/workflows";
 import { AutomationEngine, WebhookSender } from "@headless-lms/core/automations";
 import { Mailer } from "@headless-lms/core/shared/mailer";
+import { PushConfig } from "@headless-lms/core/types";
 import { EmailMessage, EmailSender, ObjectStorage } from "@headless-lms/core/shared/ports";
 //#region src/index.d.ts
 declare function createContainer(config: ServerConfig, options?: BuildContainerOptions): Promise<Container>;
 //#endregion
-export { type AdapterOverrides, type AuthUser, type AutomationEngine, type BuildContainerOptions, type CatalogueField, type CatalogueScope, type CatalogueTool, type Container, type Config as ContainerConfig, type EmailMessage, type EmailSender, InlineAutomationEngine, type LoggingConfig, type Mailer, type McpCatalogue, type ObjectStorage, type ServerConfig, type WebhookSender, buildServer, createContainer, loadIntegrations, mcpCatalogue, runMigrations };
+export { type AdapterOverrides, type AuthUser, type AutomationEngine, type BuildContainerOptions, type CatalogueField, type CatalogueScope, type CatalogueTool, type Container, type Config as ContainerConfig, type EmailMessage, type EmailSender, InlineAutomationEngine, type LoggingConfig, type Mailer, type McpCatalogue, type ObjectStorage, type PushConfig, type ServerConfig, type WebhookSender, buildServer, createContainer, loadIntegrations, mcpCatalogue, runMigrations };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["// Public surface of @headless-lms/server. Installations compose these:\n//   const container = await createContainer(config, { pluginsDir, adapters })\n//   const app = await buildServer(config, container)\nimport { buildContainer, type BuildContainerOptions, type Container } from './app/container.js';\nimport type { ServerConfig } from './http/config.js';\n\nexport { buildServer } from './http/server.js';\nexport { mcpCatalogue } from './http/mcp/catalogue.js';\nexport type {\n  CatalogueField,\n  CatalogueScope,\n  CatalogueTool,\n  McpCatalogue,\n} from './http/mcp/catalogue.js';\nexport { loadIntegrations } from './app/integrations.js';\nexport { InlineAutomationEngine } from '@headless-lms/adapter-defaults/workflows';\n// Operational functions consumed by the @headless-lms/cli bin.\nexport { runMigrations } from '@headless-lms/adapter-db';\nexport type { ServerConfig } from './http/config.js';\n// Re-exporting AuthUser also pulls its module into any program that imports\n// this file (directly or via the workspace path mapping), which is what\n// applies its ambient `declare module \"fastify\"` augmentation\n// (FastifyRequest.authUser/orgId, FastifyInstance.requireOrgSession) —\n// otherwise nothing imports fastify.d.ts and the augmentation never loads.\nexport type { AuthUser } from './http/fastify.js';\nexport type {\n  Config as ContainerConfig,\n  Container,\n  AdapterOverrides,\n  BuildContainerOptions,\n  LoggingConfig,\n} from './app/container.js';\nexport type { EmailSender, EmailMessage, ObjectStorage } from '@headless-lms/core/shared/ports';\nexport type { Mailer } from '@headless-lms/core/shared/mailer';\nexport type { AutomationEngine, WebhookSender } from '@headless-lms/core/automations';\n\nexport async function createContainer(\n  config: ServerConfig,\n  options?: BuildContainerOptions,\n): Promise<Container> {\n  return buildContainer(\n    {\n      ...config.container,\n      deliveryExpirySeconds: config.deliveryExpirySeconds,\n      memberImageMaxBytes: config.memberImageMaxBytes,\n    },\n    options,\n  );\n}\n"],"mappings":";;;;;;;AAoCA,eAAsB,gBACpB,QACA,SACoB;CACpB,OAAO,eACL;EACE,GAAG,OAAO;EACV,uBAAuB,OAAO;EAC9B,qBAAqB,OAAO;CAC9B,GACA,OACF;AACF"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["// Public surface of @headless-lms/server. Installations compose these:\n//   const container = await createContainer(config, { pluginsDir, adapters })\n//   const app = await buildServer(config, container)\nimport { buildContainer, type BuildContainerOptions, type Container } from './app/container.js';\nimport type { ServerConfig } from './http/config.js';\n\nexport { buildServer } from './http/server.js';\nexport { mcpCatalogue } from './http/mcp/catalogue.js';\nexport type {\n  CatalogueField,\n  CatalogueScope,\n  CatalogueTool,\n  McpCatalogue,\n} from './http/mcp/catalogue.js';\nexport { loadIntegrations } from './app/integrations.js';\nexport { InlineAutomationEngine } from '@headless-lms/adapter-defaults/workflows';\n// Operational functions consumed by the @headless-lms/cli bin.\nexport { runMigrations } from '@headless-lms/adapter-db';\nexport type { ServerConfig } from './http/config.js';\n// Re-exporting AuthUser also pulls its module into any program that imports\n// this file (directly or via the workspace path mapping), which is what\n// applies its ambient `declare module \"fastify\"` augmentation\n// (FastifyRequest.authUser/orgId, FastifyInstance.requireOrgSession) —\n// otherwise nothing imports fastify.d.ts and the augmentation never loads.\nexport type { AuthUser } from './http/fastify.js';\nexport type {\n  Config as ContainerConfig,\n  Container,\n  AdapterOverrides,\n  BuildContainerOptions,\n  LoggingConfig,\n} from './app/container.js';\nexport type { EmailSender, EmailMessage, ObjectStorage } from '@headless-lms/core/shared/ports';\nexport type { Mailer } from '@headless-lms/core/shared/mailer';\nexport type { AutomationEngine, WebhookSender } from '@headless-lms/core/automations';\nexport type { PushConfig } from '@headless-lms/core/types';\n\nexport async function createContainer(\n  config: ServerConfig,\n  options?: BuildContainerOptions,\n): Promise<Container> {\n  return buildContainer(\n    {\n      ...config.container,\n      deliveryExpirySeconds: config.deliveryExpirySeconds,\n      memberImageMaxBytes: config.memberImageMaxBytes,\n    },\n    options,\n  );\n}\n"],"mappings":";;;;;;;AAqCA,eAAsB,gBACpB,QACA,SACoB;CACpB,OAAO,eACL;EACE,GAAG,OAAO;EACV,uBAAuB,OAAO;EAC9B,qBAAqB,OAAO;CAC9B,GACA,OACF;AACF"}

package/dist/packages/server/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.3.0";
+var version = "0.4.0";
 //#endregion
 export { version };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@headless-lms/server",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -23,10 +23,10 @@
     "fastify": "^5.2.0",
     "fastify-type-provider-zod": "^7.0.0",
     "zod": "4.6.7",
-    "@headless-lms/adapter-auth": "0.3.0",
-    "@headless-lms/adapter-db": "0.3.0",
-    "@headless-lms/adapter-defaults": "0.3.0",
-    "@headless-lms/core": "0.3.0"
+    "@headless-lms/adapter-auth": "0.3.1",
+    "@headless-lms/adapter-db": "0.4.0",
+    "@headless-lms/adapter-defaults": "0.4.0",
+    "@headless-lms/core": "0.4.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.2",