@headless-lms/server 0.3.0 → 0.5.0

package/dist/app/container.js

@@ -1,7 +1,10 @@
+import { buildNotificationRegistries, configuredPushSender } from "./notification-channels.js";
 import { loadIntegrations } from "./integrations.js";
 import { mcpEndpoints } from "./mcp-endpoints.js";
 import { communityMail } from "./community-mail.js";
-import { DrizzleAdminRepository, DrizzleAssetsRepository, DrizzleAutomationRunsRepository, DrizzleAutomationsRepository, DrizzleChatRepository, DrizzleConnectionsRepository, DrizzleContentRepository, DrizzleCredentialStore, DrizzleDiscussionRepository, DrizzleEntitlementsRepository, DrizzleIdentityRepository, DrizzleMemberRepository, DrizzleMembersRepository, DrizzleNotificationsRepository, DrizzleOrganizationsRepository, DrizzleOutboxAppender, DrizzleOutboxStore, DrizzlePostRepository, DrizzleProgressRepository, DrizzleSettingsRepository, DrizzleUnitOfWork, createDb } from "@headless-lms/adapter-db";
+import { notificationReads } from "./notification-reads.js";
+import { platformKeyCheck } from "./platform.js";
+import { DrizzleAdminRepository, DrizzleAssetsRepository, DrizzleAutomationRunsRepository, DrizzleAutomationsRepository, DrizzleChatRepository, DrizzleConnectionsRepository, DrizzleContentRepository, DrizzleCredentialStore, DrizzleDevicesRepository, DrizzleDigestRunRepository, DrizzleDiscussionRepository, DrizzleEntitlementsRepository, DrizzleIdentityRepository, DrizzleMemberRepository, DrizzleMembersRepository, DrizzleMentionsRepository, DrizzleNotificationSettingsRepository, DrizzleNotificationsRepository, DrizzleOrganizationsRepository, DrizzleOutboxAppender, DrizzleOutboxStore, DrizzlePostRepository, DrizzleProgressRepository, DrizzleRolesRepository, DrizzleSettingsRepository, DrizzleSubscriptionsRepository, DrizzleUnitOfWork, createDb } from "@headless-lms/adapter-db";
 import { InMemoryEventBus } from "@headless-lms/adapter-defaults/events";
 import { PollingOutboxRelay } from "@headless-lms/adapter-defaults/events/outbox-relay";
 import { InlineAutomationEngine } from "@headless-lms/adapter-defaults/workflows";
@@ -9,25 +12,27 @@ import { FetchWebhookSender } from "@headless-lms/adapter-defaults/webhooks";
 import { EmailAdapter, StubTemplateRenderer } from "@headless-lms/adapter-defaults/email";
 import { createRootLogger, requestLogContext } from "@headless-lms/adapter-defaults/logging";
 import { StorageAdapter } from "@headless-lms/adapter-defaults/storage";
+import { PlainBodyParser } from "@headless-lms/adapter-defaults/body";
 import { BetterAuth } from "@headless-lms/adapter-auth";
-import { ContentService } from "@headless-lms/core/content";
-import { EntitlementsServiceImpl } from "@headless-lms/core/entitlements";
+import { CommunityNotificationCategories, ContentItemTitles, ContentService, contentJobs } from "@headless-lms/core/content";
+import { EntitlementsServiceImpl, entitlementsJobs, entitlementsRecurringJobs } from "@headless-lms/core/entitlements";
 import { ProgressServiceImpl } from "@headless-lms/core/progress";
-import { ChatServiceImpl, DiscussionServiceImpl, PostServiceImpl } from "@headless-lms/core/discussion";
-import { IdentityServiceImpl, NotificationServiceImpl } from "@headless-lms/core/identity";
-import { OrganizationServiceImpl, parseRole } from "@headless-lms/core/organizations";
-import { AssetsServiceImpl, createFileUrls } from "@headless-lms/core/assets";
+import { ChatLiveForwarder, ChatServiceImpl, DigestServiceImpl, DiscussionItemTitles, DiscussionServiceImpl, PostServiceImpl, SubscriptionServiceImpl, discussionJobs, discussionRecurringJobs } from "@headless-lms/core/discussion";
+import { DevicesServiceImpl, IdentityServiceImpl, NotificationSettingsServiceImpl } from "@headless-lms/core/identity";
+import { NotificationCatalog, OrgNotificationCategories, OrganizationServiceImpl } from "@headless-lms/core/organizations";
+import { AssetsServiceImpl, assetsJobs, assetsRecurringJobs, createFileUrls } from "@headless-lms/core/assets";
 import { IntegrationsServiceImpl } from "@headless-lms/core/integrations";
-import { AutomationsServiceImpl } from "@headless-lms/core/automations";
+import { AutomationsServiceImpl, DEFAULT_COMMUNITY_CATEGORIES, DEFAULT_ORG_CATEGORIES, NOTIFICATION_TYPES, NotificationDelivery, NotificationProcessor, NotificationsServiceImpl, RECIPIENT_RULES, SchedulerChatDebounce, notificationJobs } from "@headless-lms/core/automations";
+import { Mailer } from "@headless-lms/core/shared/mailer";
 import { AdminReportServiceImpl } from "@headless-lms/core/reporting/admin";
 import { MemberReportServiceImpl } from "@headless-lms/core/reporting/member";
-import { Mailer } from "@headless-lms/core/shared/mailer";
 import { SettingsService } from "@headless-lms/core/shared/settings";
 //#region src/app/container.ts
 const OUTBOX_DEFAULTS = {
 	enabled: true,
 	pollIntervalMs: 1e3,
-	batchSize: 100
+	batchSize: 100,
+	concurrency: 16
 };
 function resolveOutboxConfig(config = {}) {
 	const overrides = Object.fromEntries(Object.entries(config).filter(([, value]) => value !== void 0));
@@ -51,12 +56,15 @@ async function buildContainer(config, options) {
 	const automationsLogger = logger.child({ name: "automations" });
 	const reportingLogger = logger.child({ name: "reporting" });
 	const outboxLogger = logger.child({ name: "outbox" });
-	const db = createDb(config.databaseUrl);
+	const db = createDb(config.databaseUrl, logger.child({ name: "db" }), config.databasePool);
 	const email = options?.adapters?.email ?? new EmailAdapter(logger.child({ name: "email" }));
 	const storage = options?.adapters?.storage ?? new StorageAdapter(logger.child({ name: "storage" }));
 	const templates = options?.adapters?.templates ?? new StubTemplateRenderer(logger.child({ name: "email" }));
+	const bodies = options?.adapters?.bodyParser ?? new PlainBodyParser();
 	const workflows = options?.adapters?.workflows;
 	const automationEngine = typeof workflows === "function" ? workflows(automationsLogger) : workflows ?? new InlineAutomationEngine(automationsLogger);
+	const pubsubOption = options?.adapters?.pubsub;
+	const pubsub = typeof pubsubOption === "function" ? pubsubOption(logger.child({ name: "pubsub" })) : pubsubOption ?? null;
 	const mailer = new Mailer(templates, email, {
 		...config.emailBranding ?? {
 			brandName: "Headless LMS",
@@ -64,7 +72,7 @@ async function buildContainer(config, options) {
 		},
 		studentPortalUrl: config.studentPortalUrl
 	});
-	const fileUrls = createFileUrls(config.authBaseURL);
+	const fileUrls = createFileUrls(config.authBaseURL, (key) => storage.publicUrl(key));
 	const assets = new AssetsServiceImpl({
 		storage,
 		repo: new DrizzleAssetsRepository(db, assetsLogger),
@@ -73,6 +81,7 @@ async function buildContainer(config, options) {
 			outbox: new DrizzleOutboxAppender(tx, outboxLogger)
 		})),
 		memberImageMaxBytes: config.memberImageMaxBytes,
+		memberFileMaxBytes: config.memberFileMaxBytes,
 		downloadLinkExpirySeconds: config.deliveryExpirySeconds,
 		fileUrls,
 		logger: assetsLogger
@@ -89,31 +98,49 @@ async function buildContainer(config, options) {
 		images: assets,
 		fileUrls
 	});
-	const notifications = new NotificationServiceImpl({
-		repo: new DrizzleNotificationsRepository(db),
-		logger: logger.child({ name: "notifications" })
-	});
 	const organizationsRepo = new DrizzleOrganizationsRepository(db, logger.child({ name: "org" }));
 	const organizationsUow = new DrizzleUnitOfWork(db, (tx) => ({
 		organizations: new DrizzleOrganizationsRepository(tx, logger.child({ name: "org" })),
+		roles: new DrizzleRolesRepository(tx),
 		outbox: new DrizzleOutboxAppender(tx, logger.child({ name: "org" }))
 	}));
 	const orgAdminRef = { current: void 0 };
+	const platform = config.platform ? platformKeyCheck(config.platform) : null;
 	const organizations = new OrganizationServiceImpl({
 		repo: organizationsRepo,
+		roles: new DrizzleRolesRepository(db),
+		...options?.roles && { defaultRoles: options.roles },
+		apiKeys: () => {
+			if (!orgAdminRef.current) throw new Error("api keys not initialised");
+			return orgAdminRef.current;
+		},
+		accounts: () => {
+			if (!orgAdminRef.current) throw new Error("accounts not initialised");
+			return orgAdminRef.current;
+		},
+		...config.platform && { platform: {
+			email: config.platform.accountEmail,
+			name: config.platform.accountName ?? "Platform"
+		} },
 		membersRepo: new DrizzleMembersRepository(db, logger.child({ name: "org" })),
 		people: identity,
+		images: assets,
 		uow: organizationsUow,
 		orgAdmin: () => {
 			if (!orgAdminRef.current) throw new Error("orgAdmin not initialised");
 			return orgAdminRef.current;
 		},
+		sessions: () => {
+			if (!orgAdminRef.current) throw new Error("sessions not initialised");
+			return orgAdminRef.current;
+		},
 		logger: logger.child({ name: "org" }),
 		mailer,
 		inviteUrls: {
 			studentPortalUrl: config.studentPortalUrl,
 			adminAppUrl: config.adminAppUrl
-		}
+		},
+		grants: () => entitlements
 	});
 	const settings = new SettingsService(new DrizzleSettingsRepository(db, logger.child({ name: "settings" })));
 	const contentUow = new DrizzleUnitOfWork(db, (tx) => ({
@@ -126,28 +153,74 @@ async function buildContainer(config, options) {
 		libraryAssets: assets,
 		files: assets,
 		fileUrls,
+		scheduler: automationEngine,
 		logger: contentLogger
 	});
+	const pushConfig = options?.adapters?.push ?? {};
+	const pushSender = configuredPushSender(pushConfig, options?.adapters?.pushSender);
+	const notificationRegistries = buildNotificationRegistries({
+		declarations: NOTIFICATION_TYPES,
+		defaults: {
+			community: DEFAULT_COMMUNITY_CATEGORIES,
+			org: DEFAULT_ORG_CATEGORIES
+		},
+		mailer: options?.adapters?.email ? mailer : null,
+		emailOf: async (_orgId, userId) => (await identity.getUserById(userId))?.email ?? null,
+		push: pushSender ? {
+			sender: pushSender,
+			activeDevices: (orgId, userId, since) => devices.activeDevices(orgId, userId, since)
+		} : null,
+		channels: options?.adapters?.notificationChannels ?? []
+	});
+	const notificationCategories = {
+		community: new CommunityNotificationCategories({
+			communities: new DrizzleContentRepository(db, contentLogger),
+			settings,
+			types: notificationRegistries.types,
+			channels: notificationRegistries.channels,
+			logger: contentLogger
+		}),
+		org: new OrgNotificationCategories({
+			settings,
+			types: notificationRegistries.types,
+			channels: notificationRegistries.channels,
+			logger: logger.child({ name: "org" })
+		})
+	};
+	const notificationCatalog = new NotificationCatalog({
+		types: notificationRegistries.types,
+		channels: notificationRegistries.channels
+	});
+	const notificationCategoryLists = { listFor: async (orgId, communityId) => (communityId ? await notificationCategories.community.get(communityId, organizations.systemActor(orgId)) : await notificationCategories.org.get(orgId, organizations.systemActor(orgId))).categories };
 	const entitlementsUow = new DrizzleUnitOfWork(db, (tx) => ({
 		entitlements: new DrizzleEntitlementsRepository(tx, entitlementsLogger),
 		spaces: new DrizzleContentRepository(tx, contentLogger),
 		outbox: new DrizzleOutboxAppender(tx, outboxLogger)
 	}));
-	const authors = {
-		roleOf: async (orgId, orgUserId) => {
-			return (await organizationsRepo.findOrgUserById(orgId, orgUserId))?.role ?? null;
-		},
-		rolesOf: async (orgId, orgUserIds) => {
-			const rows = await organizationsRepo.findOrgUsersByIds(orgId, orgUserIds);
-			return Object.fromEntries(rows.map((row) => [row.id, row.role]));
-		}
-	};
+	const authors = organizations;
 	const entitlements = new EntitlementsServiceImpl({
 		repo: new DrizzleEntitlementsRepository(db, entitlementsLogger),
 		content,
+		permissions: organizations,
 		uow: entitlementsUow,
 		logger: entitlementsLogger
 	});
+	const identityLogger = logger.child({ name: "identity" });
+	const notificationSettings = new NotificationSettingsServiceImpl({
+		repo: new DrizzleNotificationSettingsRepository(db, identityLogger),
+		categories: {
+			communityList: async (orgId, communityId) => (await notificationCategories.community.get(communityId, organizations.systemActor(orgId))).categories,
+			orgList: async (orgId) => (await notificationCategories.org.get(orgId, organizations.systemActor(orgId))).categories
+		},
+		access: { canOpen: (orgId, actor, communityId) => entitlements.isCommunityMember(communityId, actor) },
+		channels: notificationRegistries.channels,
+		logger: identityLogger
+	});
+	const devices = new DevicesServiceImpl({
+		repo: new DrizzleDevicesRepository(db, identityLogger),
+		push: pushConfig,
+		logger: identityLogger
+	});
 	const progressUow = new DrizzleUnitOfWork(db, (tx) => ({
 		progress: new DrizzleProgressRepository(tx, progressLogger),
 		outbox: new DrizzleOutboxAppender(tx, outboxLogger)
@@ -156,12 +229,15 @@ async function buildContainer(config, options) {
 		repo: new DrizzleProgressRepository(db, progressLogger),
 		content,
 		access: entitlements,
+		system: organizations,
 		uow: progressUow,
 		logger: progressLogger
 	});
 	const postReads = new DrizzlePostRepository(db, discussionLogger);
 	const discussionReads = new DrizzleDiscussionRepository(db, discussionLogger);
 	const chatReads = new DrizzleChatRepository(db, discussionLogger);
+	const subscriptionReads = new DrizzleSubscriptionsRepository(db, discussionLogger);
+	const mentionReads = new DrizzleMentionsRepository(db, discussionLogger);
 	const posts = new PostServiceImpl({
 		repo: postReads,
 		access: entitlements,
@@ -169,12 +245,17 @@ async function buildContainer(config, options) {
 		authors,
 		profiles: discussionReads,
 		comments: discussionReads,
+		subscriptions: subscriptionReads,
+		mentions: mentionReads,
 		images: assets,
 		fileUrls,
+		bodies,
 		uow: new DrizzleUnitOfWork(db, (tx) => ({
 			posts: new DrizzlePostRepository(tx, discussionLogger),
+			mentions: new DrizzleMentionsRepository(tx, discussionLogger),
 			outbox: new DrizzleOutboxAppender(tx, outboxLogger)
 		})),
+		scheduler: automationEngine,
 		logger: discussionLogger
 	});
 	const chats = new ChatServiceImpl({
@@ -183,12 +264,17 @@ async function buildContainer(config, options) {
 		content,
 		authors,
 		profiles: discussionReads,
+		subscriptions: subscriptionReads,
+		mentions: mentionReads,
 		images: assets,
 		fileUrls,
 		uow: new DrizzleUnitOfWork(db, (tx) => ({
 			chats: new DrizzleChatRepository(tx, discussionLogger),
+			mentions: new DrizzleMentionsRepository(tx, discussionLogger),
 			outbox: new DrizzleOutboxAppender(tx, outboxLogger)
 		})),
+		...pubsub && { pubsub },
+		...options?.live && { live: options.live },
 		logger: discussionLogger
 	});
 	const discussion = new DiscussionServiceImpl({
@@ -196,17 +282,68 @@ async function buildContainer(config, options) {
 		access: entitlements,
 		content,
 		posts,
-		communities: { listIds: (orgId) => content.listPublishedCommunityIds(orgId) },
+		spaces: entitlements,
+		authors,
+		mentions: mentionReads,
 		fileUrls,
 		uow: new DrizzleUnitOfWork(db, (tx) => ({
 			discussion: new DrizzleDiscussionRepository(tx, discussionLogger),
+			mentions: new DrizzleMentionsRepository(tx, discussionLogger),
 			outbox: new DrizzleOutboxAppender(tx, outboxLogger)
 		})),
 		settings,
 		logger: discussionLogger
 	});
+	const subscriptions = new SubscriptionServiceImpl({
+		repo: subscriptionReads,
+		access: entitlements,
+		posts,
+		chats,
+		uow: new DrizzleUnitOfWork(db, (tx) => ({
+			subscriptions: new DrizzleSubscriptionsRepository(tx, discussionLogger),
+			outbox: new DrizzleOutboxAppender(tx, outboxLogger)
+		})),
+		logger: discussionLogger
+	});
+	const digests = new DigestServiceImpl({
+		schedules: { communitiesWithDigest: () => content.communitiesWithDigest() },
+		runs: new DrizzleDigestRunRepository(db, discussionLogger),
+		uow: new DrizzleUnitOfWork(db, (tx) => ({
+			digests: new DrizzleDigestRunRepository(tx, discussionLogger),
+			outbox: new DrizzleOutboxAppender(tx, outboxLogger)
+		})),
+		logger: discussionLogger
+	});
+	const notificationsRepo = new DrizzleNotificationsRepository(db);
+	const notificationList = new NotificationsServiceImpl({
+		repo: notificationsRepo,
+		logger: automationsLogger
+	});
+	const itemTitles = {
+		discussion: new DiscussionItemTitles({
+			posts,
+			chats,
+			comments: discussionReads,
+			messages: chatReads,
+			profiles: discussionReads,
+			activities: content,
+			access: entitlements,
+			actors: organizations
+		}),
+		content: new ContentItemTitles({
+			content,
+			access: entitlements,
+			organizations
+		})
+	};
 	const reporting = {
-		admin: new AdminReportServiceImpl({ repo: new DrizzleAdminRepository(db, reportingLogger) }),
+		admin: new AdminReportServiceImpl({
+			repo: new DrizzleAdminRepository(db, reportingLogger),
+			permissions: organizations,
+			spaces: entitlements,
+			events: content,
+			fileUrls
+		}),
 		member: new MemberReportServiceImpl({
 			repo: new DrizzleMemberRepository(db, reportingLogger),
 			content,
@@ -214,9 +351,14 @@ async function buildContainer(config, options) {
 			files: assets,
 			fileUrls,
 			access: entitlements,
-			notifications,
-			posts,
-			chats
+			people: organizations,
+			notifications: notificationList,
+			titles: itemTitles,
+			subscriptions,
+			notificationCategories,
+			notificationSettings,
+			channels: notificationRegistries.channels,
+			studentPortalUrl: config.studentPortalUrl
 		})
 	};
 	const credentialStore = new DrizzleCredentialStore(db, config.credentialStoreKey, integrationsLogger);
@@ -249,23 +391,30 @@ async function buildContainer(config, options) {
 			} : null;
 		},
 		contentInfo: async (orgId, contentId) => {
-			const course = await content.getCourse(orgId, contentId);
+			const system = organizations.systemActor(orgId);
+			const course = await content.findCourse(contentId, system);
 			if (course) return {
 				id: course.id,
 				title: course.title,
 				type: course.type
 			};
-			const download = await content.getDownload(orgId, contentId);
+			const download = await content.findDownload(contentId, system);
 			if (download) return {
 				id: download.id,
 				title: download.title,
 				type: download.type
 			};
-			const community = await content.getCommunity(orgId, contentId);
-			return community ? {
+			const community = await content.findCommunity(contentId, system);
+			if (community) return {
 				id: community.id,
 				title: community.title,
 				type: community.type
+			};
+			const event = await content.findEvent(contentId, system);
+			return event ? {
+				id: event.id,
+				title: event.title,
+				type: event.type
 			} : null;
 		}
 	};
@@ -276,9 +425,35 @@ async function buildContainer(config, options) {
 		organizations,
 		identity,
 		posts,
+		subscriptions,
 		discussion,
 		chats,
-		assets
+		bodies
+	});
+	const recipientReads = notificationReads({
+		content,
+		entitlements,
+		organizations,
+		identity,
+		posts,
+		subscriptions,
+		discussion,
+		chats,
+		bodies,
+		settings: notificationSettings
+	});
+	const notificationProcessor = new NotificationProcessor({
+		rules: RECIPIENT_RULES,
+		reads: recipientReads,
+		types: notificationRegistries.types,
+		channels: notificationRegistries.channels,
+		categories: notificationCategoryLists,
+		settings: notificationSettings,
+		devices,
+		repo: notificationsRepo,
+		engine: automationEngine,
+		debounce: new SchedulerChatDebounce(automationEngine),
+		logger: automationsLogger
 	});
 	const automations = new AutomationsServiceImpl({
 		repo: new DrizzleAutomationsRepository(db, automationsLogger),
@@ -288,16 +463,52 @@ async function buildContainer(config, options) {
 		mailer,
 		lookups: mailerLookups,
 		integrations,
+		systemActor: (orgId) => organizations.systemActor(orgId),
 		credentials: credentialStore,
 		webhooks: options?.adapters?.webhooks ?? new FetchWebhookSender({ allowPrivateNetwork: config.webhookAllowPrivateNetwork }),
 		mail: wired.mail,
 		grants: wired.grants,
-		desk: notifications,
-		scheduledWork: wired.scheduledWork,
+		delivery: new NotificationDelivery({
+			repo: notificationsRepo,
+			channels: notificationRegistries.channels,
+			devices,
+			logger: automationsLogger
+		}),
+		processor: notificationProcessor,
 		logger: automationsLogger
 	});
 	automationEngine.register(automations);
+	automationEngine.registerJobs([
+		...discussionJobs({
+			posts,
+			digests,
+			logger: discussionLogger
+		}),
+		...contentJobs({
+			events: content,
+			logger: contentLogger
+		}),
+		...entitlementsJobs({ grants: entitlements }),
+		...assetsJobs({
+			assets,
+			orgs: organizations,
+			logger: assetsLogger
+		}),
+		...notificationJobs({
+			processor: notificationProcessor,
+			reads: recipientReads,
+			logger: automationsLogger
+		})
+	], [
+		...discussionRecurringJobs,
+		...entitlementsRecurringJobs,
+		...assetsRecurringJobs
+	]);
 	const eventBus = new InMemoryEventBus();
+	if (pubsub) new ChatLiveForwarder({
+		pubsub,
+		logger: discussionLogger
+	}).attach(eventBus);
 	eventBus.subscribeAll((event) => automations.handle(event));
 	const outboxConfig = resolveOutboxConfig(config.outbox);
 	const outboxRelay = new PollingOutboxRelay(new DrizzleOutboxStore(db, outboxLogger), eventBus, outboxConfig, outboxLogger);
@@ -356,6 +567,10 @@ async function buildContainer(config, options) {
 			beforeCreateSession: authHook("beforeCreateSession", async (session) => {
 				const person = await identity.getUserByExternalId(session.userId);
 				if (!person) return;
+				if (organizations.isPlatformAccount(person.email)) {
+					authLogger.warn("sign-in refused for the platform account", { userId: person.id });
+					return false;
+				}
 				const orgs = await organizations.getOrgUsersForUser(person.id);
 				if (orgs.length !== 1) return;
 				const org = await organizations.getById(orgs[0].orgId);
@@ -366,7 +581,7 @@ async function buildContainer(config, options) {
 				} };
 			}),
 			beforeCreateOrganization: authHook("beforeCreateOrganization", async ({ organization: org, user: baUser }) => {
-				const domainOrg = await organizations.createOrganization({
+				const domainOrg = await organizations.provisionOrganization({
 					ownerId: baUser.id,
 					...org,
 					logo: org.logo ?? void 0
@@ -376,22 +591,15 @@ async function buildContainer(config, options) {
 					id: domainOrg.id
 				} };
 			}),
-			beforeUpdateOrganization: authHook("beforeUpdateOrganization", async ({ organization }) => {
-				await organizations.updateOrganization(organization.id, organization);
-			}),
 			beforeDeleteOrganization: authHook("beforeDeleteOrganization", async ({ organization }) => {
 				await organizations.deleteOrganization(organization.id);
 			}),
 			beforeAddMember: authHook("beforeAddMember", async ({ member }) => {
 				await organizations.addOrgUser({
 					orgId: member.organizationId,
-					userId: member.userId,
-					role: parseRole(member.role)
+					userId: member.userId
 				});
 			}),
-			beforeUpdateMemberRole: authHook("beforeUpdateMemberRole", async ({ member, newRole }) => {
-				await organizations.updateOrgUser(member.organizationId, member.userId, { role: parseRole(newRole) });
-			}),
 			beforeRemoveMember: authHook("beforeRemoveMember", async ({ member }) => {
 				await organizations.removeOrgUser(member.organizationId, member.userId);
 			})
@@ -404,8 +612,8 @@ async function buildContainer(config, options) {
 	return {
 		auth,
 		mcp,
+		platform,
 		identity,
-		notifications,
 		organizations,
 		orgProvider: auth,
 		content,
@@ -414,9 +622,18 @@ async function buildContainer(config, options) {
 		discussion,
 		posts,
 		chats,
+		subscriptions,
 		assets,
 		integrations,
 		automations,
+		notificationTypes: notificationRegistries.types,
+		notificationChannels: notificationRegistries.channels,
+		notificationCategories,
+		notificationCatalog,
+		notificationCategoryLists,
+		notificationSettings,
+		devices,
+		notificationList,
 		settings,
 		reporting,
 		storage,
@@ -424,6 +641,9 @@ async function buildContainer(config, options) {
 		credentials: credentialStore,
 		outboxRelay,
 		automationEngine,
+		scheduler: automationEngine,
+		pubsub,
+		chatHub: chats.hub,
 		logger,
 		loggerInstance,
 		requestContext: requestLogContext,