@headless-lms/server 0.3.0 → 0.5.0

package/README.md

@@ -10,14 +10,28 @@ integration plugins. The `headless-lms` bin lives in `@headless-lms/cli`.
 
 ```ts
 import { createContainer, buildServer } from '@headless-lms/server';
+import { PostgresPubSub } from '@headless-lms/adapter-pubsub-postgres';
 
 const container = await createContainer(config, {
   pluginsDir, // one folder per integration (directory name = integration id)
+  adapters: {
+    pubsub: (logger) => new PostgresPubSub({ connectionString: config.pubsubDatabaseUrl, logger }),
+  },
 });
 const app = await buildServer(config, container);
 await app.listen({ port: config.port, host: config.host });
+await container.pubsub?.start();
+await container.chatHub?.start();
+container.outboxRelay.start();
+await container.automationEngine.start();
 ```
 
+The container constructs the outbox relay, the automation engine, `PubSub` and the
+chat hub but starts none of them; the entry point starts them after `listen`, `PubSub`
+and the hub before the relay. `buildServer` closes the hub in `preClose`, so open chat
+streams receive their closing frame, and on close stops the relay, the engine and then
+`PubSub`.
+
 Public surface (`src/index.ts`): `createContainer`, `buildServer`,
 `loadIntegrations`, the operational function `runMigrations` (re-exported from
 `@headless-lms/adapter-db`, which ships the `drizzle/` migration assets;

package/dist/app/community-mail.d.ts

@@ -1,25 +1,25 @@
 import { ContentService } from "@headless-lms/core/content";
 import { EntitlementsService } from "@headless-lms/core/entitlements";
-import { ChatService, DiscussionService, PostService } from "@headless-lms/core/discussion";
+import { ChatService, DiscussionService, PostService, SubscriptionService } from "@headless-lms/core/discussion";
 import { IdentityService } from "@headless-lms/core/identity";
 import { OrganizationService } from "@headless-lms/core/organizations";
-import { AssetsService } from "@headless-lms/core/assets";
-import { CommunityMailReads, GrantWriter, ScheduledWork } from "@headless-lms/core/automations";
+import { CommunityMailReads, GrantWriter } from "@headless-lms/core/automations";
+import { BodyParser } from "@headless-lms/core/shared/ports";
 //#region src/app/community-mail.d.ts
 type CommunityMailDeps = {
-  content: Pick<ContentService, 'getCommunity' | 'getSpace' | 'listCommunitiesById'>;
-  entitlements: Pick<EntitlementsService, 'openSpacesFor' | 'communitiesOpenedBy' | 'communityMembersAmong' | 'spaceOpenersAmong' | 'spaceOpeners' | 'communityModeratorIds' | 'countActiveSpaceMembers' | 'communityIdsOpenedFor' | 'ensureGrant' | 'expireDue' | 'hasDueNotices'>;
-  organizations: Pick<OrganizationService, 'getOrgUserById' | 'staffOrgUserIds'>;
+  content: Pick<ContentService, 'findCommunity' | 'getSpace' | 'listCommunitiesById' | 'findCourse' | 'findDownload' | 'findEvent' | 'findBundle'>;
+  entitlements: Pick<EntitlementsService, 'openSpacesFor' | 'communitiesOpenedBy' | 'communityMembersAmong' | 'spaceOpenersAmong' | 'spaceOpeners' | 'countActiveSpaceMembers' | 'communityIdsOpenedFor' | 'grant'>;
+  organizations: Pick<OrganizationService, 'getById' | 'getOrgUserById' | 'actorFor' | 'systemActor' | 'holders' | 'getRole' | 'permissionsOfMany'>;
   identity: Pick<IdentityService, 'displayName'>;
-  posts: Pick<PostService, 'followerIds' | 'find' | 'publishDue' | 'hasDue'>;
-  discussion: Pick<DiscussionService, 'getComment' | 'sendDigest'>;
+  posts: Pick<PostService, 'find'>;
+  subscriptions: Pick<SubscriptionService, 'followerIds' | 'itemSubscriptions'>;
+  discussion: Pick<DiscussionService, 'getComment'>;
   chats: Pick<ChatService, 'chatSummary' | 'latestMessageBody' | 'isBlocked'>;
-  assets: Pick<AssetsService, 'removeUnattached' | 'hasUnattached'>;
+  bodies: BodyParser;
 };
 declare function communityMail(deps: CommunityMailDeps): {
   mail: Omit<CommunityMailReads, 'recentMessageRecipients'>;
   grants: GrantWriter;
-  scheduledWork: ScheduledWork;
 };
 //#endregion
 export { CommunityMailDeps, communityMail };

package/dist/app/community-mail.js

@@ -1,12 +1,14 @@
+import { NotFoundError } from "@headless-lms/core/shared/errors";
 //#region src/app/community-mail.ts
 function communityMail(deps) {
+	const system = (orgId) => deps.organizations.systemActor(orgId);
 	return {
 		mail: {
 			async communityTitle(orgId, communityId) {
-				return (await deps.content.getCommunity(orgId, communityId))?.title ?? null;
+				return (await deps.content.findCommunity(communityId, system(orgId)))?.title ?? null;
 			},
 			async space(orgId, spaceId) {
-				const space = await deps.content.getSpace(orgId, spaceId);
+				const space = await deps.content.getSpace(spaceId, system(orgId));
 				return space ? {
 					name: space.name,
 					communityId: space.communityId,
@@ -14,29 +16,77 @@ function communityMail(deps) {
 				} : null;
 			},
 			async openSpaceNames(orgId, orgUserId, communityId) {
-				const orgUser = await deps.organizations.getOrgUserById(orgId, orgUserId);
-				if (!orgUser) return [];
-				return (await deps.entitlements.openSpacesFor(orgId, {
-					id: orgUser.id,
-					role: orgUser.role
-				}, communityId)).map((space) => space.name);
+				const person = await deps.organizations.actorFor(orgId, orgUserId);
+				if (!person) return [];
+				return (await deps.entitlements.openSpacesFor(communityId, person)).map((space) => space.name);
 			},
 			communitiesOpenedBy: (orgId, grant) => deps.entitlements.communitiesOpenedBy(orgId, grant),
 			communityMembersAmong: (orgId, communityId, ids) => deps.entitlements.communityMembersAmong(orgId, communityId, ids),
 			spaceOpenersAmong: (orgId, spaceId, ids) => deps.entitlements.spaceOpenersAmong(orgId, spaceId, ids),
 			spaceOpeners: (orgId, spaceId) => deps.entitlements.spaceOpeners(orgId, spaceId),
-			moderationAudience: (orgId, communityId) => deps.entitlements.communityModeratorIds(orgId, communityId),
-			staffIds: (orgId) => deps.organizations.staffOrgUserIds(orgId),
+			holders: (orgId, permission, on) => deps.organizations.holders(orgId, permission, on),
+			async heldOnOrg(orgId, orgUserId, permissions) {
+				const held = (await deps.organizations.permissionsOfMany(orgId, [orgUserId])).get(orgUserId);
+				return held ? permissions.filter((permission) => held.has(permission)) : [];
+			},
+			async role(orgId, roleKey) {
+				try {
+					const role = await deps.organizations.getRole(roleKey, system(orgId));
+					return {
+						name: role.name,
+						permissions: role.permissions
+					};
+				} catch (err) {
+					if (err instanceof NotFoundError) return null;
+					throw err;
+				}
+			},
+			async orgName(orgId) {
+				return (await deps.organizations.getById(orgId))?.name ?? null;
+			},
+			async contentInfo(orgId, item) {
+				const actor = system(orgId);
+				if ("bundleId" in item) {
+					const bundle = await deps.content.findBundle(item.bundleId, actor);
+					return bundle ? {
+						title: bundle.name,
+						type: "bundle"
+					} : null;
+				}
+				const course = await deps.content.findCourse(item.contentId, actor);
+				if (course) return {
+					title: course.title,
+					type: course.type
+				};
+				const download = await deps.content.findDownload(item.contentId, actor);
+				if (download) return {
+					title: download.title,
+					type: download.type
+				};
+				const community = await deps.content.findCommunity(item.contentId, actor);
+				if (community) return {
+					title: community.title,
+					type: community.type
+				};
+				const event = await deps.content.findEvent(item.contentId, actor);
+				return event ? {
+					title: event.title,
+					type: event.type
+				} : null;
+			},
 			async displayName(orgId, orgUserId) {
 				const orgUser = await deps.organizations.getOrgUserById(orgId, orgUserId);
 				return deps.identity.displayName(orgUser?.userId ?? null);
 			},
-			followerIds: (orgId, postId) => deps.posts.followerIds(orgId, postId),
+			postText: (body) => deps.bodies.parse(body).text,
+			followerIds: (orgId, postId) => deps.subscriptions.followerIds(orgId, postId),
 			async comment(orgId, commentId) {
 				const comment = await deps.discussion.getComment(orgId, commentId);
 				return comment ? {
 					orgUserId: comment.orgUserId,
 					postId: comment.postId,
+					activityId: comment.activityId,
+					parentId: comment.parentId,
 					body: comment.body
 				} : null;
 			},
@@ -52,42 +102,36 @@ function communityMail(deps) {
 			},
 			async chat(orgId, chatId) {
 				const summary = await deps.chats.chatSummary(orgId, chatId);
-				return summary ? {
+				if (!summary) return null;
+				const mutes = new Map((await deps.subscriptions.itemSubscriptions(orgId, {
+					type: "chat",
+					id: chatId
+				})).filter((subscription) => subscription.state === "muted").map((subscription) => [subscription.orgUserId, subscription.mutedUntil]));
+				return {
 					communityId: summary.chat.communityId,
 					kind: summary.chat.kind,
 					status: summary.chat.status,
 					createdBy: summary.chat.createdBy,
 					participants: summary.participants.map((participant) => ({
 						orgUserId: participant.orgUserId,
-						muted: participant.muted,
-						mutedUntil: participant.mutedUntil,
+						muted: mutes.has(participant.orgUserId),
+						mutedUntil: mutes.get(participant.orgUserId) ?? null,
 						leftAt: participant.leftAt
 					}))
-				} : null;
+				};
 			},
 			latestMessageBody: (orgId, chatId) => deps.chats.latestMessageBody(orgId, chatId),
 			pairBlocked: (orgId, communityId, a, b) => deps.chats.isBlocked(orgId, communityId, a, b),
 			activeMemberCount: (orgId, spaceId) => deps.entitlements.countActiveSpaceMembers(orgId, spaceId),
 			async memberCommunityTitles(orgId, orgUserId) {
 				const ids = await deps.entitlements.communityIdsOpenedFor(orgId, orgUserId);
-				return (await deps.content.listCommunitiesById(orgId, ids)).map((community) => ({
+				return (await deps.content.listCommunitiesById(ids, system(orgId))).map((community) => ({
 					id: community.id,
 					title: community.title
 				}));
 			}
 		},
-		grants: { grant: (orgId, input) => deps.entitlements.ensureGrant(orgId, input) },
-		scheduledWork: {
-			publishDuePosts: (orgId, now) => deps.posts.publishDue(orgId, now),
-			hasDuePosts: (orgId, now) => deps.posts.hasDue(orgId, now),
-			expireDueGrants: (orgId, now) => deps.entitlements.expireDue(orgId, now),
-			hasDueGrants: (orgId, now) => deps.entitlements.hasDueNotices(orgId, now),
-			sendDigest: (orgId, now) => deps.discussion.sendDigest(orgId, now),
-			removeUnattachedUploads: async (orgId, now) => {
-				await deps.assets.removeUnattached(orgId, now);
-			},
-			hasUnattachedUploads: (orgId, now) => deps.assets.hasUnattached(orgId, now)
-		}
+		grants: { grant: (orgId, input) => deps.entitlements.grant(input, system(orgId)) }
 	};
 }
 //#endregion

package/dist/app/community-mail.js.map

@@ -1 +1 @@
-{"version":3,"file":"community-mail.js","names":[],"sources":["../../src/app/community-mail.ts"],"sourcesContent":["import type { AssetsService } from '@headless-lms/core/assets';\nimport type {\n  CommunityMailReads,\n  GrantWriter,\n  ScheduledWork,\n} from '@headless-lms/core/automations';\nimport type { ContentService } from '@headless-lms/core/content';\nimport type { ChatService, DiscussionService, PostService } from '@headless-lms/core/discussion';\nimport type { EntitlementsService } from '@headless-lms/core/entitlements';\nimport type { IdentityService } from '@headless-lms/core/identity';\nimport type { OrganizationService } from '@headless-lms/core/organizations';\n\nexport type CommunityMailDeps = {\n  content: Pick<ContentService, 'getCommunity' | 'getSpace' | 'listCommunitiesById'>;\n  entitlements: Pick<\n    EntitlementsService,\n    | 'openSpacesFor'\n    | 'communitiesOpenedBy'\n    | 'communityMembersAmong'\n    | 'spaceOpenersAmong'\n    | 'spaceOpeners'\n    | 'communityModeratorIds'\n    | 'countActiveSpaceMembers'\n    | 'communityIdsOpenedFor'\n    | 'ensureGrant'\n    | 'expireDue'\n    | 'hasDueNotices'\n  >;\n  organizations: Pick<OrganizationService, 'getOrgUserById' | 'staffOrgUserIds'>;\n  identity: Pick<IdentityService, 'displayName'>;\n  posts: Pick<PostService, 'followerIds' | 'find' | 'publishDue' | 'hasDue'>;\n  discussion: Pick<DiscussionService, 'getComment' | 'sendDigest'>;\n  chats: Pick<ChatService, 'chatSummary' | 'latestMessageBody' | 'isBlocked'>;\n  assets: Pick<AssetsService, 'removeUnattached' | 'hasUnattached'>;\n};\n\nexport function communityMail(deps: CommunityMailDeps): {\n  mail: Omit<CommunityMailReads, 'recentMessageRecipients'>;\n  grants: GrantWriter;\n  scheduledWork: ScheduledWork;\n} {\n  const mail: Omit<CommunityMailReads, 'recentMessageRecipients'> = {\n    async communityTitle(orgId, communityId) {\n      return (await deps.content.getCommunity(orgId, communityId))?.title ?? null;\n    },\n    async space(orgId, spaceId) {\n      const space = await deps.content.getSpace(orgId, spaceId);\n      return space\n        ? { name: space.name, communityId: space.communityId, capacity: space.capacity }\n        : null;\n    },\n    async openSpaceNames(orgId, orgUserId, communityId) {\n      const orgUser = await deps.organizations.getOrgUserById(orgId, orgUserId);\n      if (!orgUser) {\n        return [];\n      }\n      const spaces = await deps.entitlements.openSpacesFor(\n        orgId,\n        { id: orgUser.id, role: orgUser.role },\n        communityId,\n      );\n      return spaces.map((space) => space.name);\n    },\n    communitiesOpenedBy: (orgId, grant) => deps.entitlements.communitiesOpenedBy(orgId, grant),\n    communityMembersAmong: (orgId, communityId, ids) =>\n      deps.entitlements.communityMembersAmong(orgId, communityId, ids),\n    spaceOpenersAmong: (orgId, spaceId, ids) =>\n      deps.entitlements.spaceOpenersAmong(orgId, spaceId, ids),\n    spaceOpeners: (orgId, spaceId) => deps.entitlements.spaceOpeners(orgId, spaceId),\n    moderationAudience: (orgId, communityId) =>\n      deps.entitlements.communityModeratorIds(orgId, communityId),\n    staffIds: (orgId) => deps.organizations.staffOrgUserIds(orgId),\n    async displayName(orgId, orgUserId) {\n      const orgUser = await deps.organizations.getOrgUserById(orgId, orgUserId);\n      return deps.identity.displayName(orgUser?.userId ?? null);\n    },\n    followerIds: (orgId, postId) => deps.posts.followerIds(orgId, postId),\n    async comment(orgId, commentId) {\n      const comment = await deps.discussion.getComment(orgId, commentId);\n      return comment\n        ? { orgUserId: comment.orgUserId, postId: comment.postId, body: comment.body }\n        : null;\n    },\n    async post(orgId, postId) {\n      const post = await deps.posts.find(orgId, postId);\n      return post\n        ? {\n            title: post.title,\n            body: post.body,\n            spaceId: post.spaceId,\n            orgUserId: post.orgUserId,\n            communityId: post.communityId,\n          }\n        : null;\n    },\n    async chat(orgId, chatId) {\n      const summary = await deps.chats.chatSummary(orgId, chatId);\n      return summary\n        ? {\n            communityId: summary.chat.communityId,\n            kind: summary.chat.kind,\n            status: summary.chat.status,\n            createdBy: summary.chat.createdBy,\n            participants: summary.participants.map((participant) => ({\n              orgUserId: participant.orgUserId,\n              muted: participant.muted,\n              mutedUntil: participant.mutedUntil,\n              leftAt: participant.leftAt,\n            })),\n          }\n        : null;\n    },\n    latestMessageBody: (orgId, chatId) => deps.chats.latestMessageBody(orgId, chatId),\n    pairBlocked: (orgId, communityId, a, b) => deps.chats.isBlocked(orgId, communityId, a, b),\n    activeMemberCount: (orgId, spaceId) =>\n      deps.entitlements.countActiveSpaceMembers(orgId, spaceId),\n    async memberCommunityTitles(orgId, orgUserId) {\n      const ids = await deps.entitlements.communityIdsOpenedFor(orgId, orgUserId);\n      const communities = await deps.content.listCommunitiesById(orgId, ids);\n      return communities.map((community) => ({ id: community.id, title: community.title }));\n    },\n  };\n  return {\n    mail,\n    grants: {\n      grant: (orgId, input) => deps.entitlements.ensureGrant(orgId, input),\n    },\n    scheduledWork: {\n      publishDuePosts: (orgId, now) => deps.posts.publishDue(orgId, now),\n      hasDuePosts: (orgId, now) => deps.posts.hasDue(orgId, now),\n      expireDueGrants: (orgId, now) => deps.entitlements.expireDue(orgId, now),\n      hasDueGrants: (orgId, now) => deps.entitlements.hasDueNotices(orgId, now),\n      sendDigest: (orgId, now) => deps.discussion.sendDigest(orgId, now),\n      removeUnattachedUploads: async (orgId, now) => {\n        await deps.assets.removeUnattached(orgId, now);\n      },\n      hasUnattachedUploads: (orgId, now) => deps.assets.hasUnattached(orgId, now),\n    },\n  };\n}\n"],"mappings":";AAoCA,SAAgB,cAAc,MAI5B;CAkFA,OAAO;EACL,MAAA;GAjFA,MAAM,eAAe,OAAO,aAAa;IACvC,QAAQ,MAAM,KAAK,QAAQ,aAAa,OAAO,WAAW,EAAA,EAAI,SAAS;GACzE;GACA,MAAM,MAAM,OAAO,SAAS;IAC1B,MAAM,QAAQ,MAAM,KAAK,QAAQ,SAAS,OAAO,OAAO;IACxD,OAAO,QACH;KAAE,MAAM,MAAM;KAAM,aAAa,MAAM;KAAa,UAAU,MAAM;IAAS,IAC7E;GACN;GACA,MAAM,eAAe,OAAO,WAAW,aAAa;IAClD,MAAM,UAAU,MAAM,KAAK,cAAc,eAAe,OAAO,SAAS;IACxE,IAAI,CAAC,SACH,OAAO,CAAC;IAOV,QAAO,MALc,KAAK,aAAa,cACrC,OACA;KAAE,IAAI,QAAQ;KAAI,MAAM,QAAQ;IAAK,GACrC,WACF,EAAA,CACc,KAAK,UAAU,MAAM,IAAI;GACzC;GACA,sBAAsB,OAAO,UAAU,KAAK,aAAa,oBAAoB,OAAO,KAAK;GACzF,wBAAwB,OAAO,aAAa,QAC1C,KAAK,aAAa,sBAAsB,OAAO,aAAa,GAAG;GACjE,oBAAoB,OAAO,SAAS,QAClC,KAAK,aAAa,kBAAkB,OAAO,SAAS,GAAG;GACzD,eAAe,OAAO,YAAY,KAAK,aAAa,aAAa,OAAO,OAAO;GAC/E,qBAAqB,OAAO,gBAC1B,KAAK,aAAa,sBAAsB,OAAO,WAAW;GAC5D,WAAW,UAAU,KAAK,cAAc,gBAAgB,KAAK;GAC7D,MAAM,YAAY,OAAO,WAAW;IAClC,MAAM,UAAU,MAAM,KAAK,cAAc,eAAe,OAAO,SAAS;IACxE,OAAO,KAAK,SAAS,YAAY,SAAS,UAAU,IAAI;GAC1D;GACA,cAAc,OAAO,WAAW,KAAK,MAAM,YAAY,OAAO,MAAM;GACpE,MAAM,QAAQ,OAAO,WAAW;IAC9B,MAAM,UAAU,MAAM,KAAK,WAAW,WAAW,OAAO,SAAS;IACjE,OAAO,UACH;KAAE,WAAW,QAAQ;KAAW,QAAQ,QAAQ;KAAQ,MAAM,QAAQ;IAAK,IAC3E;GACN;GACA,MAAM,KAAK,OAAO,QAAQ;IACxB,MAAM,OAAO,MAAM,KAAK,MAAM,KAAK,OAAO,MAAM;IAChD,OAAO,OACH;KACE,OAAO,KAAK;KACZ,MAAM,KAAK;KACX,SAAS,KAAK;KACd,WAAW,KAAK;KAChB,aAAa,KAAK;IACpB,IACA;GACN;GACA,MAAM,KAAK,OAAO,QAAQ;IACxB,MAAM,UAAU,MAAM,KAAK,MAAM,YAAY,OAAO,MAAM;IAC1D,OAAO,UACH;KACE,aAAa,QAAQ,KAAK;KAC1B,MAAM,QAAQ,KAAK;KACnB,QAAQ,QAAQ,KAAK;KACrB,WAAW,QAAQ,KAAK;KACxB,cAAc,QAAQ,aAAa,KAAK,iBAAiB;MACvD,WAAW,YAAY;MACvB,OAAO,YAAY;MACnB,YAAY,YAAY;MACxB,QAAQ,YAAY;KACtB,EAAE;IACJ,IACA;GACN;GACA,oBAAoB,OAAO,WAAW,KAAK,MAAM,kBAAkB,OAAO,MAAM;GAChF,cAAc,OAAO,aAAa,GAAG,MAAM,KAAK,MAAM,UAAU,OAAO,aAAa,GAAG,CAAC;GACxF,oBAAoB,OAAO,YACzB,KAAK,aAAa,wBAAwB,OAAO,OAAO;GAC1D,MAAM,sBAAsB,OAAO,WAAW;IAC5C,MAAM,MAAM,MAAM,KAAK,aAAa,sBAAsB,OAAO,SAAS;IAE1E,QAAO,MADmB,KAAK,QAAQ,oBAAoB,OAAO,GAAG,EAAA,CAClD,KAAK,eAAe;KAAE,IAAI,UAAU;KAAI,OAAO,UAAU;IAAM,EAAE;GACtF;EAGG;EACH,QAAQ,EACN,QAAQ,OAAO,UAAU,KAAK,aAAa,YAAY,OAAO,KAAK,EACrE;EACA,eAAe;GACb,kBAAkB,OAAO,QAAQ,KAAK,MAAM,WAAW,OAAO,GAAG;GACjE,cAAc,OAAO,QAAQ,KAAK,MAAM,OAAO,OAAO,GAAG;GACzD,kBAAkB,OAAO,QAAQ,KAAK,aAAa,UAAU,OAAO,GAAG;GACvE,eAAe,OAAO,QAAQ,KAAK,aAAa,cAAc,OAAO,GAAG;GACxE,aAAa,OAAO,QAAQ,KAAK,WAAW,WAAW,OAAO,GAAG;GACjE,yBAAyB,OAAO,OAAO,QAAQ;IAC7C,MAAM,KAAK,OAAO,iBAAiB,OAAO,GAAG;GAC/C;GACA,uBAAuB,OAAO,QAAQ,KAAK,OAAO,cAAc,OAAO,GAAG;EAC5E;CACF;AACF"}
+{"version":3,"file":"community-mail.js","names":[],"sources":["../../src/app/community-mail.ts"],"sourcesContent":["import type { CommunityMailReads, GrantWriter } from '@headless-lms/core/automations';\nimport type { ContentService } from '@headless-lms/core/content';\nimport type {\n  ChatService,\n  DiscussionService,\n  PostService,\n  SubscriptionService,\n} from '@headless-lms/core/discussion';\nimport type { EntitlementsService } from '@headless-lms/core/entitlements';\nimport type { IdentityService } from '@headless-lms/core/identity';\nimport type { OrganizationService } from '@headless-lms/core/organizations';\nimport { NotFoundError } from '@headless-lms/core/shared/errors';\nimport type { BodyParser } from '@headless-lms/core/shared/ports';\n\nexport type CommunityMailDeps = {\n  content: Pick<\n    ContentService,\n    | 'findCommunity'\n    | 'getSpace'\n    | 'listCommunitiesById'\n    | 'findCourse'\n    | 'findDownload'\n    | 'findEvent'\n    | 'findBundle'\n  >;\n  entitlements: Pick<\n    EntitlementsService,\n    | 'openSpacesFor'\n    | 'communitiesOpenedBy'\n    | 'communityMembersAmong'\n    | 'spaceOpenersAmong'\n    | 'spaceOpeners'\n    | 'countActiveSpaceMembers'\n    | 'communityIdsOpenedFor'\n    | 'grant'\n  >;\n  organizations: Pick<\n    OrganizationService,\n    | 'getById'\n    | 'getOrgUserById'\n    | 'actorFor'\n    | 'systemActor'\n    | 'holders'\n    | 'getRole'\n    | 'permissionsOfMany'\n  >;\n  identity: Pick<IdentityService, 'displayName'>;\n  posts: Pick<PostService, 'find'>;\n  subscriptions: Pick<SubscriptionService, 'followerIds' | 'itemSubscriptions'>;\n  discussion: Pick<DiscussionService, 'getComment'>;\n  chats: Pick<ChatService, 'chatSummary' | 'latestMessageBody' | 'isBlocked'>;\n  bodies: BodyParser;\n};\n\nexport function communityMail(deps: CommunityMailDeps): {\n  mail: Omit<CommunityMailReads, 'recentMessageRecipients'>;\n  grants: GrantWriter;\n} {\n  const system = (orgId: string) => deps.organizations.systemActor(orgId);\n  const mail: Omit<CommunityMailReads, 'recentMessageRecipients'> = {\n    async communityTitle(orgId, communityId) {\n      return (await deps.content.findCommunity(communityId, system(orgId)))?.title ?? null;\n    },\n    async space(orgId, spaceId) {\n      const space = await deps.content.getSpace(spaceId, system(orgId));\n      return space\n        ? { name: space.name, communityId: space.communityId, capacity: space.capacity }\n        : null;\n    },\n    async openSpaceNames(orgId, orgUserId, communityId) {\n      const person = await deps.organizations.actorFor(orgId, orgUserId);\n      if (!person) {\n        return [];\n      }\n      const spaces = await deps.entitlements.openSpacesFor(communityId, person);\n      return spaces.map((space) => space.name);\n    },\n    communitiesOpenedBy: (orgId, grant) => deps.entitlements.communitiesOpenedBy(orgId, grant),\n    communityMembersAmong: (orgId, communityId, ids) =>\n      deps.entitlements.communityMembersAmong(orgId, communityId, ids),\n    spaceOpenersAmong: (orgId, spaceId, ids) =>\n      deps.entitlements.spaceOpenersAmong(orgId, spaceId, ids),\n    spaceOpeners: (orgId, spaceId) => deps.entitlements.spaceOpeners(orgId, spaceId),\n    holders: (orgId, permission, on) => deps.organizations.holders(orgId, permission, on),\n    async heldOnOrg(orgId, orgUserId, permissions) {\n      const held = (await deps.organizations.permissionsOfMany(orgId, [orgUserId])).get(orgUserId);\n      return held ? permissions.filter((permission) => held.has(permission)) : [];\n    },\n    async role(orgId, roleKey) {\n      try {\n        const role = await deps.organizations.getRole(roleKey, system(orgId));\n        return { name: role.name, permissions: role.permissions };\n      } catch (err) {\n        if (err instanceof NotFoundError) {\n          return null;\n        }\n        throw err;\n      }\n    },\n    async orgName(orgId) {\n      return (await deps.organizations.getById(orgId))?.name ?? null;\n    },\n    async contentInfo(orgId, item) {\n      const actor = system(orgId);\n      if ('bundleId' in item) {\n        const bundle = await deps.content.findBundle(item.bundleId, actor);\n        return bundle ? { title: bundle.name, type: 'bundle' } : null;\n      }\n      const course = await deps.content.findCourse(item.contentId, actor);\n      if (course) {\n        return { title: course.title, type: course.type };\n      }\n      const download = await deps.content.findDownload(item.contentId, actor);\n      if (download) {\n        return { title: download.title, type: download.type };\n      }\n      const community = await deps.content.findCommunity(item.contentId, actor);\n      if (community) {\n        return { title: community.title, type: community.type };\n      }\n      const event = await deps.content.findEvent(item.contentId, actor);\n      return event ? { title: event.title, type: event.type } : null;\n    },\n    async displayName(orgId, orgUserId) {\n      const orgUser = await deps.organizations.getOrgUserById(orgId, orgUserId);\n      return deps.identity.displayName(orgUser?.userId ?? null);\n    },\n    postText: (body) => deps.bodies.parse(body).text,\n    followerIds: (orgId, postId) => deps.subscriptions.followerIds(orgId, postId),\n    async comment(orgId, commentId) {\n      const comment = await deps.discussion.getComment(orgId, commentId);\n      return comment\n        ? {\n            orgUserId: comment.orgUserId,\n            postId: comment.postId,\n            activityId: comment.activityId,\n            parentId: comment.parentId,\n            body: comment.body,\n          }\n        : null;\n    },\n    async post(orgId, postId) {\n      const post = await deps.posts.find(orgId, postId);\n      return post\n        ? {\n            title: post.title,\n            body: post.body,\n            spaceId: post.spaceId,\n            orgUserId: post.orgUserId,\n            communityId: post.communityId,\n          }\n        : null;\n    },\n    async chat(orgId, chatId) {\n      const summary = await deps.chats.chatSummary(orgId, chatId);\n      if (!summary) {\n        return null;\n      }\n      const mutes = new Map(\n        (await deps.subscriptions.itemSubscriptions(orgId, { type: 'chat', id: chatId }))\n          .filter((subscription) => subscription.state === 'muted')\n          .map((subscription) => [subscription.orgUserId, subscription.mutedUntil]),\n      );\n      return {\n        communityId: summary.chat.communityId,\n        kind: summary.chat.kind,\n        status: summary.chat.status,\n        createdBy: summary.chat.createdBy,\n        participants: summary.participants.map((participant) => ({\n          orgUserId: participant.orgUserId,\n          muted: mutes.has(participant.orgUserId),\n          mutedUntil: mutes.get(participant.orgUserId) ?? null,\n          leftAt: participant.leftAt,\n        })),\n      };\n    },\n    latestMessageBody: (orgId, chatId) => deps.chats.latestMessageBody(orgId, chatId),\n    pairBlocked: (orgId, communityId, a, b) => deps.chats.isBlocked(orgId, communityId, a, b),\n    activeMemberCount: (orgId, spaceId) =>\n      deps.entitlements.countActiveSpaceMembers(orgId, spaceId),\n    async memberCommunityTitles(orgId, orgUserId) {\n      const ids = await deps.entitlements.communityIdsOpenedFor(orgId, orgUserId);\n      const communities = await deps.content.listCommunitiesById(ids, system(orgId));\n      return communities.map((community) => ({ id: community.id, title: community.title }));\n    },\n  };\n  return {\n    mail,\n    grants: {\n      grant: (orgId, input) => deps.entitlements.grant(input, system(orgId)),\n    },\n  };\n}\n"],"mappings":";;AAsDA,SAAgB,cAAc,MAG5B;CACA,MAAM,UAAU,UAAkB,KAAK,cAAc,YAAY,KAAK;CAgItE,OAAO;EACL,MAAA;GA/HA,MAAM,eAAe,OAAO,aAAa;IACvC,QAAQ,MAAM,KAAK,QAAQ,cAAc,aAAa,OAAO,KAAK,CAAC,EAAA,EAAI,SAAS;GAClF;GACA,MAAM,MAAM,OAAO,SAAS;IAC1B,MAAM,QAAQ,MAAM,KAAK,QAAQ,SAAS,SAAS,OAAO,KAAK,CAAC;IAChE,OAAO,QACH;KAAE,MAAM,MAAM;KAAM,aAAa,MAAM;KAAa,UAAU,MAAM;IAAS,IAC7E;GACN;GACA,MAAM,eAAe,OAAO,WAAW,aAAa;IAClD,MAAM,SAAS,MAAM,KAAK,cAAc,SAAS,OAAO,SAAS;IACjE,IAAI,CAAC,QACH,OAAO,CAAC;IAGV,QAAO,MADc,KAAK,aAAa,cAAc,aAAa,MAAM,EAAA,CAC1D,KAAK,UAAU,MAAM,IAAI;GACzC;GACA,sBAAsB,OAAO,UAAU,KAAK,aAAa,oBAAoB,OAAO,KAAK;GACzF,wBAAwB,OAAO,aAAa,QAC1C,KAAK,aAAa,sBAAsB,OAAO,aAAa,GAAG;GACjE,oBAAoB,OAAO,SAAS,QAClC,KAAK,aAAa,kBAAkB,OAAO,SAAS,GAAG;GACzD,eAAe,OAAO,YAAY,KAAK,aAAa,aAAa,OAAO,OAAO;GAC/E,UAAU,OAAO,YAAY,OAAO,KAAK,cAAc,QAAQ,OAAO,YAAY,EAAE;GACpF,MAAM,UAAU,OAAO,WAAW,aAAa;IAC7C,MAAM,QAAQ,MAAM,KAAK,cAAc,kBAAkB,OAAO,CAAC,SAAS,CAAC,EAAA,CAAG,IAAI,SAAS;IAC3F,OAAO,OAAO,YAAY,QAAQ,eAAe,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC;GAC5E;GACA,MAAM,KAAK,OAAO,SAAS;IACzB,IAAI;KACF,MAAM,OAAO,MAAM,KAAK,cAAc,QAAQ,SAAS,OAAO,KAAK,CAAC;KACpE,OAAO;MAAE,MAAM,KAAK;MAAM,aAAa,KAAK;KAAY;IAC1D,SAAS,KAAK;KACZ,IAAI,eAAe,eACjB,OAAO;KAET,MAAM;IACR;GACF;GACA,MAAM,QAAQ,OAAO;IACnB,QAAQ,MAAM,KAAK,cAAc,QAAQ,KAAK,EAAA,EAAI,QAAQ;GAC5D;GACA,MAAM,YAAY,OAAO,MAAM;IAC7B,MAAM,QAAQ,OAAO,KAAK;IAC1B,IAAI,cAAc,MAAM;KACtB,MAAM,SAAS,MAAM,KAAK,QAAQ,WAAW,KAAK,UAAU,KAAK;KACjE,OAAO,SAAS;MAAE,OAAO,OAAO;MAAM,MAAM;KAAS,IAAI;IAC3D;IACA,MAAM,SAAS,MAAM,KAAK,QAAQ,WAAW,KAAK,WAAW,KAAK;IAClE,IAAI,QACF,OAAO;KAAE,OAAO,OAAO;KAAO,MAAM,OAAO;IAAK;IAElD,MAAM,WAAW,MAAM,KAAK,QAAQ,aAAa,KAAK,WAAW,KAAK;IACtE,IAAI,UACF,OAAO;KAAE,OAAO,SAAS;KAAO,MAAM,SAAS;IAAK;IAEtD,MAAM,YAAY,MAAM,KAAK,QAAQ,cAAc,KAAK,WAAW,KAAK;IACxE,IAAI,WACF,OAAO;KAAE,OAAO,UAAU;KAAO,MAAM,UAAU;IAAK;IAExD,MAAM,QAAQ,MAAM,KAAK,QAAQ,UAAU,KAAK,WAAW,KAAK;IAChE,OAAO,QAAQ;KAAE,OAAO,MAAM;KAAO,MAAM,MAAM;IAAK,IAAI;GAC5D;GACA,MAAM,YAAY,OAAO,WAAW;IAClC,MAAM,UAAU,MAAM,KAAK,cAAc,eAAe,OAAO,SAAS;IACxE,OAAO,KAAK,SAAS,YAAY,SAAS,UAAU,IAAI;GAC1D;GACA,WAAW,SAAS,KAAK,OAAO,MAAM,IAAI,CAAC,CAAC;GAC5C,cAAc,OAAO,WAAW,KAAK,cAAc,YAAY,OAAO,MAAM;GAC5E,MAAM,QAAQ,OAAO,WAAW;IAC9B,MAAM,UAAU,MAAM,KAAK,WAAW,WAAW,OAAO,SAAS;IACjE,OAAO,UACH;KACE,WAAW,QAAQ;KACnB,QAAQ,QAAQ;KAChB,YAAY,QAAQ;KACpB,UAAU,QAAQ;KAClB,MAAM,QAAQ;IAChB,IACA;GACN;GACA,MAAM,KAAK,OAAO,QAAQ;IACxB,MAAM,OAAO,MAAM,KAAK,MAAM,KAAK,OAAO,MAAM;IAChD,OAAO,OACH;KACE,OAAO,KAAK;KACZ,MAAM,KAAK;KACX,SAAS,KAAK;KACd,WAAW,KAAK;KAChB,aAAa,KAAK;IACpB,IACA;GACN;GACA,MAAM,KAAK,OAAO,QAAQ;IACxB,MAAM,UAAU,MAAM,KAAK,MAAM,YAAY,OAAO,MAAM;IAC1D,IAAI,CAAC,SACH,OAAO;IAET,MAAM,QAAQ,IAAI,KACf,MAAM,KAAK,cAAc,kBAAkB,OAAO;KAAE,MAAM;KAAQ,IAAI;IAAO,CAAC,EAAA,CAC5E,QAAQ,iBAAiB,aAAa,UAAU,OAAO,CAAC,CACxD,KAAK,iBAAiB,CAAC,aAAa,WAAW,aAAa,UAAU,CAAC,CAC5E;IACA,OAAO;KACL,aAAa,QAAQ,KAAK;KAC1B,MAAM,QAAQ,KAAK;KACnB,QAAQ,QAAQ,KAAK;KACrB,WAAW,QAAQ,KAAK;KACxB,cAAc,QAAQ,aAAa,KAAK,iBAAiB;MACvD,WAAW,YAAY;MACvB,OAAO,MAAM,IAAI,YAAY,SAAS;MACtC,YAAY,MAAM,IAAI,YAAY,SAAS,KAAK;MAChD,QAAQ,YAAY;KACtB,EAAE;IACJ;GACF;GACA,oBAAoB,OAAO,WAAW,KAAK,MAAM,kBAAkB,OAAO,MAAM;GAChF,cAAc,OAAO,aAAa,GAAG,MAAM,KAAK,MAAM,UAAU,OAAO,aAAa,GAAG,CAAC;GACxF,oBAAoB,OAAO,YACzB,KAAK,aAAa,wBAAwB,OAAO,OAAO;GAC1D,MAAM,sBAAsB,OAAO,WAAW;IAC5C,MAAM,MAAM,MAAM,KAAK,aAAa,sBAAsB,OAAO,SAAS;IAE1E,QAAO,MADmB,KAAK,QAAQ,oBAAoB,KAAK,OAAO,KAAK,CAAC,EAAA,CAC1D,KAAK,eAAe;KAAE,IAAI,UAAU;KAAI,OAAO,UAAU;IAAM,EAAE;GACtF;EAGG;EACH,QAAQ,EACN,QAAQ,OAAO,UAAU,KAAK,aAAa,MAAM,OAAO,OAAO,KAAK,CAAC,EACvE;CACF;AACF"}

package/dist/app/container.d.ts

@@ -1,22 +1,24 @@
 import { McpEndpoints } from "./mcp-endpoints.js";
+import { PlatformConfig, PlatformKeyCheck } from "./platform.js";
+import { DatabasePoolOptions } from "@headless-lms/adapter-db";
 import { PollingOutboxRelayConfig } from "@headless-lms/adapter-defaults/events/outbox-relay";
 import { LogLevel, PinoInstance, RequestLogContext } from "@headless-lms/adapter-defaults/logging";
 import { BetterAuth } from "@headless-lms/adapter-auth";
-import { ContentService } from "@headless-lms/core/content";
+import { CommunityNotificationCategories, ContentService } from "@headless-lms/core/content";
 import { EntitlementsServiceImpl } from "@headless-lms/core/entitlements";
 import { ProgressServiceImpl } from "@headless-lms/core/progress";
-import { ChatServiceImpl, DiscussionServiceImpl, PostServiceImpl } from "@headless-lms/core/discussion";
-import { IdentityServiceImpl, NotificationServiceImpl, SessionAdmin } from "@headless-lms/core/identity";
-import { OrgAdmin, OrganizationServiceImpl } from "@headless-lms/core/organizations";
+import { ChatHub, ChatHubOptions, ChatServiceImpl, DiscussionServiceImpl, PostServiceImpl, SubscriptionServiceImpl } from "@headless-lms/core/discussion";
+import { DevicesServiceImpl, IdentityServiceImpl, NotificationSettingsServiceImpl, SessionAdmin } from "@headless-lms/core/identity";
+import { NotificationCatalog, OrgAdmin, OrgNotificationCategories, OrganizationServiceImpl, RoleDefinition } from "@headless-lms/core/organizations";
 import { AssetsServiceImpl } from "@headless-lms/core/assets";
 import { IntegrationsServiceImpl } from "@headless-lms/core/integrations";
-import { AutomationsServiceImpl } from "@headless-lms/core/automations";
+import { AutomationsServiceImpl, NotificationCategories, NotificationsServiceImpl } from "@headless-lms/core/automations";
+import { Mailer } from "@headless-lms/core/shared/mailer";
 import { AdminReportServiceImpl } from "@headless-lms/core/reporting/admin";
 import { MemberReportServiceImpl } from "@headless-lms/core/reporting/member";
-import { Mailer } from "@headless-lms/core/shared/mailer";
 import { SettingsService } from "@headless-lms/core/shared/settings";
-import { AutomationEngine, WebhookSender } from "@headless-lms/core/types";
-import { CredentialStore, EmailSender, Logger, ObjectStorage, OutboxRelay, TemplateContext, TemplateRenderer } from "@headless-lms/core/shared/ports";
+import { AutomationEngine, PushConfig, WebhookSender } from "@headless-lms/core/types";
+import { BodyParser, ChannelRegistry, CredentialStore, EmailSender, Logger, NotificationChannel, NotificationTypeRegistry, ObjectStorage, OutboxRelay, PubSub, PushSender, Scheduler, TemplateContext, TemplateRenderer } from "@headless-lms/core/shared/ports";
 //#region src/app/container.d.ts
 /** Installation-supplied ports; an absent slot falls back to a fail-loudly stub. */
 interface AdapterOverrides {
@@ -25,17 +27,30 @@ interface AdapterOverrides {
   /** Resolves email templates to rendered content. Absent → fail-loudly stub. */
   templates?: TemplateRenderer;
   /** Durable automation engine, or a factory given the automations logger. Absent → InlineAutomationEngine (in-process, one attempt per action). */
-  workflows?: AutomationEngine | ((logger: Logger) => AutomationEngine);
+  workflows?: (AutomationEngine & Scheduler) | ((logger: Logger) => AutomationEngine & Scheduler);
   /** Outbound HTTP for webhook deliveries. Absent → FetchWebhookSender (public addresses only, 10s timeout). */
   webhooks?: WebhookSender;
+  /** Notification channels beyond in-app, email and push; each key must be new. */
+  notificationChannels?: NotificationChannel[];
+  /** Push credentials per provider. Absent → no provider is configured and devices cannot register. */
+  push?: PushConfig;
+  pushSender?: PushSender;
+  /** Reads post bodies: their text, mentions and images. Absent → PlainBodyParser (plain text, no images). */
+  bodyParser?: BodyParser;
+  /** Delivery to every API instance, or a factory given its logger. Absent → no live chat; the chat stream answers 503. */
+  pubsub?: PubSub | ((logger: Logger) => PubSub);
 }
 interface BuildContainerOptions {
   /** Installation's plugins folder, scanned by loadIntegrations. Absent → no integrations. */
   pluginsDir?: string;
   adapters?: AdapterOverrides;
+  roles?: readonly RoleDefinition[];
+  /** Live chat hub timings. Absent → the defaults (1 s state flush, 30 s session check). */
+  live?: ChatHubOptions;
 }
 interface Config {
   databaseUrl: string;
+  databasePool?: DatabasePoolOptions;
   authBaseURL: string;
   authSecret: string;
   trustedOrigins: string[];
@@ -60,8 +75,10 @@ interface Config {
    *  ServerConfig.deliveryExpirySeconds — createContainer threads it through. */
   deliveryExpirySeconds: number;
   memberImageMaxBytes: number;
+  memberFileMaxBytes: number;
   /** Let the default webhook sender reach loopback and private network addresses. Local development only. */
   webhookAllowPrivateNetwork?: boolean;
+  platform?: PlatformConfig;
 }
 /** Tuning for the transactional-outbox relay. Every field is optional; the
  *  container resolves against OUTBOX_DEFAULTS. */
@@ -72,6 +89,7 @@ interface OutboxConfig {
   pollIntervalMs?: number;
   /** Max rows fetched/dispatched per tick. Default 100. */
   batchSize?: number;
+  concurrency?: number;
 }
 declare const OUTBOX_DEFAULTS: PollingOutboxRelayConfig;
 declare function resolveOutboxConfig(config?: OutboxConfig): PollingOutboxRelayConfig;
@@ -85,9 +103,9 @@ declare function resolveLoggingConfig(config?: LoggingConfig): Required<LoggingC
 interface Container {
   auth: BetterAuth;
   mcp: McpEndpoints;
+  platform: PlatformKeyCheck | null;
   orgProvider: OrgAdmin;
   identity: IdentityServiceImpl;
-  notifications: NotificationServiceImpl;
   organizations: OrganizationServiceImpl;
   content: ContentService;
   entitlements: EntitlementsServiceImpl;
@@ -95,9 +113,21 @@ interface Container {
   discussion: DiscussionServiceImpl;
   posts: PostServiceImpl;
   chats: ChatServiceImpl;
+  subscriptions: SubscriptionServiceImpl;
   assets: AssetsServiceImpl;
   integrations: IntegrationsServiceImpl;
   automations: AutomationsServiceImpl;
+  notificationTypes: NotificationTypeRegistry;
+  notificationChannels: ChannelRegistry;
+  notificationCategories: {
+    community: CommunityNotificationCategories;
+    org: OrgNotificationCategories;
+  };
+  notificationCatalog: NotificationCatalog;
+  notificationCategoryLists: NotificationCategories;
+  notificationSettings: NotificationSettingsServiceImpl;
+  devices: DevicesServiceImpl;
+  notificationList: NotificationsServiceImpl;
   /** Cross-cutting settings store. Not a context — a leaf every context may use;
    *  inject `settings.for('<namespace>')` into a service, never the service itself. */
   settings: SettingsService;
@@ -117,6 +147,14 @@ interface Container {
    *  the installation's entry point starts it after listen (gen-openapi must
    *  not run a worker). buildServer stops it onClose. */
   automationEngine: AutomationEngine;
+  scheduler: Scheduler;
+  /** The PubSub adapter — constructed but NEVER started by the container; the
+   *  installation's entry point starts it after listen. buildServer stops it
+   *  onClose. Null without one. */
+  pubsub: PubSub | null;
+  /** This process's live chat hub; started by the entry point after `pubsub`,
+   *  closed by buildServer preClose. Null without a PubSub. */
+  chatHub: ChatHub | null;
   /** Root logger port — components receive children bound with { name }. */
   logger: Logger;
   /** The raw pino root; buildServer hands it to Fastify so HTTP shares the stream. */