@headless-lms/server 0.3.0 → 0.5.0

package/dist/http/routes/member/posts.js

@@ -1,10 +1,10 @@
 import { PageQuery, refusals } from "../../schemas/shared.js";
-import { CommentView, PostComment, Reactions, SetReaction } from "../../schemas/discussion.js";
+import { resolveActor } from "../../scope.js";
+import { CommentView, PostComment, Reactions, SetPostSubscription, SetReaction } from "../../schemas/discussion.js";
 import { CommunitySpaceParam } from "../../schemas/community.js";
 import { CreatePost, FeedQuery, FlagReason, PostCommentsPage, PostFeedPage, PostFlag, PostIdParam, PostView, ResolvePostFlags, SchedulePost, SetPostReactions, SpaceQueue, UpdatePost } from "../../schemas/posts.js";
 import { CommunityParam } from "../../schemas/chats.js";
 import "../../schemas/index.js";
-import { actorOf } from "./actor.js";
 import { z } from "zod";
 //#region src/http/routes/member/posts.ts
 async function memberPostRoutes(app, container) {
@@ -28,8 +28,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.memberFeed(req.orgId, actor, req.params.communityId, req.query);
+			const actor = await resolveActor(container, req);
+			return posts.memberFeed(req.params.communityId, req.query, actor);
 		}
 	});
 	r.route({
@@ -49,8 +49,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.listOwn(req.orgId, actor, req.params.communityId, req.query);
+			const actor = await resolveActor(container, req);
+			return posts.listOwn(req.params.communityId, req.query, actor);
 		}
 	});
 	r.route({
@@ -70,8 +70,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.listBookmarked(req.orgId, actor, req.params.communityId, req.query);
+			const actor = await resolveActor(container, req);
+			return posts.listBookmarked(req.params.communityId, req.query, actor);
 		}
 	});
 	r.route({
@@ -91,8 +91,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.spaceFeed(req.orgId, actor, req.params.communityId, req.params.spaceId, req.query);
+			const actor = await resolveActor(container, req);
+			return posts.spaceFeed(req.params.communityId, req.params.spaceId, req.query, actor);
 		}
 	});
 	r.route({
@@ -111,8 +111,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.moderationQueue(req.orgId, actor, req.params.communityId, req.params.spaceId);
+			const actor = await resolveActor(container, req);
+			return posts.moderationQueue(req.params.communityId, req.params.spaceId, actor);
 		}
 	});
 	r.route({
@@ -123,21 +123,21 @@ async function memberPostRoutes(app, container) {
 			operationId: "createPost",
 			tags,
 			summary: "Create a post",
-			description: "For anyone who can open the space. `mode` decides the status: `draft`, `scheduled`, or on `submit` `published`, or `pending` when the space requires review and you are not staff. 409 when the space has topics and none is given, or a schedule is missing or in the past.",
+			description: "For anyone who can open the space. `mode` decides the status: `draft`, `scheduled`, or on `submit` `published`, or `pending` when the space requires review and you do not hold `communities:moderate` on the community. 409 when the space has topics and none is given. 400 when a schedule is missing or in the past. 503 when a scheduled post could not be timed; the post is then kept as a draft, and `details.postId` names it, so open that draft instead of creating the post again.",
 			params: CommunitySpaceParam,
 			body: CreatePost,
 			response: {
 				201: PostView,
-				...refusals(403, 404, 409)
+				...refusals(400, 403, 404, 409, 503)
 			}
 		},
 		handler: async (req, reply) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			const post = await posts.create(req.orgId, actor, {
+			const actor = await resolveActor(container, req);
+			const post = await posts.create({
 				...req.body,
 				communityId: req.params.communityId,
 				spaceId: req.params.spaceId
-			});
+			}, actor);
 			req.log.info({
 				postId: post.id,
 				status: post.status
@@ -161,8 +161,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.getPost(req.orgId, actor, req.params.postId);
+			const actor = await resolveActor(container, req);
+			return posts.getPost(req.params.postId, actor);
 		}
 	});
 	r.route({
@@ -182,19 +182,19 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.update(req.orgId, req.params.postId, actor, req.body);
+			const actor = await resolveActor(container, req);
+			return posts.update(req.params.postId, req.body, actor);
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/member/posts/:postId/submission",
+		url: "/api/member/posts/:postId/submit",
 		preHandler: app.requireOrgSession,
 		schema: {
 			operationId: "submitPost",
 			tags,
 			summary: "Submit your draft or scheduled post",
-			description: "Author only. Publishes it now, or holds it for review when the space requires review and you are not staff. 409 when the post is not a draft or scheduled.",
+			description: "Author only. Publishes it now, or holds it for review when the space requires review and you do not hold `communities:moderate` on the community. A scheduled post is no longer published at its time. 409 when the post is not a draft or scheduled.",
 			params: PostIdParam,
 			response: {
 				200: PostView,
@@ -202,8 +202,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.submit(req.orgId, req.params.postId, actor);
+			const actor = await resolveActor(container, req);
+			return posts.submit(req.params.postId, actor);
 		}
 	});
 	r.route({
@@ -214,22 +214,42 @@ async function memberPostRoutes(app, container) {
 			operationId: "schedulePost",
 			tags,
 			summary: "Schedule your post",
-			description: "Author only. The post is submitted at `scheduledAt`. 409 when it is already submitted or removed, or the time is not in the future.",
+			description: "Author only. Schedules a draft, or moves a scheduled post to a new time; the post is submitted at `scheduledAt`. 409 when it is already submitted or removed, or the time is not in the future. 503 when the time could not be set; a draft stays a draft and a moved post keeps its previous time, and `details.postId` names the post.",
 			params: PostIdParam,
 			body: SchedulePost,
+			response: {
+				200: PostView,
+				...refusals(403, 404, 409, 503)
+			}
+		},
+		handler: async (req) => {
+			const actor = await resolveActor(container, req);
+			return posts.schedule(req.params.postId, req.body.scheduledAt, actor);
+		}
+	});
+	r.route({
+		method: "POST",
+		url: "/api/member/posts/:postId/unschedule",
+		preHandler: app.requireOrgSession,
+		schema: {
+			operationId: "unschedulePost",
+			tags,
+			summary: "Unschedule your post",
+			description: "Author only. The scheduled post becomes a draft and is not submitted at its time. 409 when the post is not scheduled.",
+			params: PostIdParam,
 			response: {
 				200: PostView,
 				...refusals(403, 404, 409)
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.schedule(req.orgId, req.params.postId, actor, req.body.scheduledAt);
+			const actor = await resolveActor(container, req);
+			return posts.unschedule(req.params.postId, actor);
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/member/posts/:postId/approval",
+		url: "/api/member/posts/:postId/approve",
 		preHandler: app.requireOrgSession,
 		schema: {
 			operationId: "approvePost",
@@ -243,19 +263,19 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.approve(req.orgId, req.params.postId, actor);
+			const actor = await resolveActor(container, req);
+			return posts.approve(req.params.postId, null, actor);
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/member/posts/:postId/removal",
+		url: "/api/member/posts/:postId/remove",
 		preHandler: app.requireOrgSession,
 		schema: {
 			operationId: "removePost",
 			tags,
 			summary: "Remove your post, or one in a space you moderate",
-			description: "For the author or a moderator. Takes a published or pending post down; a moderator removing someone else's post resolves its open flags as `removed`. 409 when it is already removed or was never submitted.",
+			description: "The author can remove their own post; anyone else needs `communities:moderate` on the community. Takes a published or pending post down; removing someone else's post resolves its open flags as `removed`. 409 when it is already removed or was never submitted.",
 			params: PostIdParam,
 			response: {
 				200: PostView,
@@ -263,13 +283,13 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.remove(req.orgId, req.params.postId, actor);
+			const actor = await resolveActor(container, req);
+			return posts.remove(req.params.postId, null, actor);
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/member/posts/:postId/restoration",
+		url: "/api/member/posts/:postId/restore",
 		preHandler: app.requireOrgSession,
 		schema: {
 			operationId: "restorePost",
@@ -283,8 +303,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.restore(req.orgId, req.params.postId, actor);
+			const actor = await resolveActor(container, req);
+			return posts.restore(req.params.postId, null, actor);
 		}
 	});
 	r.route({
@@ -303,8 +323,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.pin(req.orgId, req.params.postId, actor);
+			const actor = await resolveActor(container, req);
+			return posts.pin(req.params.postId, actor);
 		}
 	});
 	r.route({
@@ -323,8 +343,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.unpin(req.orgId, req.params.postId, actor);
+			const actor = await resolveActor(container, req);
+			return posts.unpin(req.params.postId, actor);
 		}
 	});
 	r.route({
@@ -343,8 +363,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.closeComments(req.orgId, req.params.postId, actor);
+			const actor = await resolveActor(container, req);
+			return posts.closeComments(req.params.postId, actor);
 		}
 	});
 	r.route({
@@ -363,8 +383,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.openComments(req.orgId, req.params.postId, actor);
+			const actor = await resolveActor(container, req);
+			return posts.openComments(req.params.postId, actor);
 		}
 	});
 	r.route({
@@ -384,8 +404,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.setReactions(req.orgId, req.params.postId, actor, req.body.enabled);
+			const actor = await resolveActor(container, req);
+			return posts.setReactions(req.params.postId, req.body.enabled, actor);
 		}
 	});
 	r.route({
@@ -405,8 +425,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.setReaction(req.orgId, req.params.postId, actor, req.body.emoji);
+			const actor = await resolveActor(container, req);
+			return posts.setReaction(req.params.postId, req.body.emoji, actor);
 		}
 	});
 	r.route({
@@ -425,49 +445,29 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return posts.setReaction(req.orgId, req.params.postId, actor, null);
+			const actor = await resolveActor(container, req);
+			return posts.setReaction(req.params.postId, null, actor);
 		}
 	});
 	r.route({
-		method: "POST",
-		url: "/api/member/posts/:postId/follow",
-		preHandler: app.requireOrgSession,
-		schema: {
-			operationId: "followPost",
-			tags,
-			summary: "Follow a post",
-			description: "For anyone who can read the post. You are notified of new comments on it. Following twice is harmless.",
-			params: PostIdParam,
-			response: {
-				204: z.void(),
-				...refusals(403, 404)
-			}
-		},
-		handler: async (req, reply) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			await posts.follow(req.orgId, req.params.postId, actor);
-			return reply.code(204).send();
-		}
-	});
-	r.route({
-		method: "DELETE",
-		url: "/api/member/posts/:postId/follow",
+		method: "PUT",
+		url: "/api/member/posts/:postId/subscription",
 		preHandler: app.requireOrgSession,
 		schema: {
-			operationId: "unfollowPost",
+			operationId: "setPostSubscription",
 			tags,
-			summary: "Stop following a post",
-			description: "For anyone who can read the post. Harmless when you do not follow it.",
+			summary: "Follow or mute a post, or clear either",
+			description: "For anyone who can read the post. `following` notifies you of its new comments. `muted` stops its activity notifying you, until `mutedUntil` when given; mentions and actions on you still notify. `none` clears both.",
 			params: PostIdParam,
+			body: SetPostSubscription,
 			response: {
 				204: z.void(),
 				...refusals(403, 404)
 			}
 		},
 		handler: async (req, reply) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			await posts.unfollow(req.orgId, req.params.postId, actor);
+			const actor = await resolveActor(container, req);
+			await container.subscriptions.setPost(req.params.postId, req.body, actor);
 			return reply.code(204).send();
 		}
 	});
@@ -487,8 +487,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req, reply) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			await posts.bookmark(req.orgId, req.params.postId, actor);
+			const actor = await resolveActor(container, req);
+			await posts.bookmark(req.params.postId, actor);
 			return reply.code(204).send();
 		}
 	});
@@ -508,8 +508,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req, reply) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			await posts.unbookmark(req.orgId, req.params.postId, actor);
+			const actor = await resolveActor(container, req);
+			await posts.unbookmark(req.params.postId, actor);
 			return reply.code(204).send();
 		}
 	});
@@ -530,14 +530,14 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req, reply) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			const flag = await posts.flag(req.orgId, req.params.postId, actor, req.body.reason);
+			const actor = await resolveActor(container, req);
+			const flag = await posts.flag(req.params.postId, req.body.reason, actor);
 			return reply.code(201).send(flag);
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/member/posts/:postId/flags/resolution",
+		url: "/api/member/posts/:postId/flags/resolve",
 		preHandler: app.requireOrgSession,
 		schema: {
 			operationId: "resolvePostFlags",
@@ -552,8 +552,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req, reply) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			await posts.resolveFlags(req.orgId, req.params.postId, actor, req.body.resolution);
+			const actor = await resolveActor(container, req);
+			await posts.resolveFlags(req.params.postId, req.body.resolution, null, actor);
 			return reply.code(204).send();
 		}
 	});
@@ -574,8 +574,8 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			return container.discussion.postComments(req.orgId, req.params.postId, actor, req.query);
+			const actor = await resolveActor(container, req);
+			return container.discussion.postComments(req.params.postId, req.query, actor);
 		}
 	});
 	r.route({
@@ -595,13 +595,12 @@ async function memberPostRoutes(app, container) {
 			}
 		},
 		handler: async (req, reply) => {
-			const actor = await actorOf(container, req.orgId, req.userId);
-			const comment = await container.discussion.postComment(req.orgId, {
-				actor,
+			const actor = await resolveActor(container, req);
+			const comment = await container.discussion.postComment({
 				postId: req.params.postId,
 				parentId: req.body.parentId,
 				body: req.body.body
-			});
+			}, actor);
 			return reply.code(201).send(comment);
 		}
 	});

package/dist/http/routes/member/posts.js.map

@@ -1 +1 @@
-{"version":3,"file":"posts.js","names":[],"sources":["../../../../src/http/routes/member/posts.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { z } from 'zod';\nimport type { Container } from '../../../app/container.js';\nimport { actorOf } from './actor.js';\nimport {\n  CommentView,\n  CommunityParam,\n  CommunitySpaceParam,\n  CreatePost,\n  FeedQuery,\n  FlagReason,\n  PageQuery,\n  PostCommentsPage,\n  PostComment,\n  PostFeedPage,\n  PostFlag,\n  PostIdParam,\n  PostView,\n  Reactions,\n  ResolvePostFlags,\n  SchedulePost,\n  SetPostReactions,\n  SetReaction,\n  SpaceQueue,\n  UpdatePost,\n  refusals,\n} from '../../schemas/index.js';\n\nexport async function memberPostRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const posts = container.posts;\n  const tags = ['Posts'];\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/feed',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberFeed',\n      tags,\n      summary: 'Published posts across the spaces you can open',\n      description:\n        'For a member of the community. Pinned posts first, then newest first. 404 when you are not a member.',\n      params: CommunityParam,\n      querystring: PageQuery,\n      response: { 200: PostFeedPage, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.memberFeed(req.orgId, actor, req.params.communityId, req.query);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/own-posts',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listOwnPosts',\n      tags,\n      summary: 'Your own posts in a community, newest first',\n      description:\n        'For a member of the community. Your posts in any status, drafts included, in the spaces you can open. 404 when you are not a member.',\n      params: CommunityParam,\n      querystring: PageQuery,\n      response: { 200: PostFeedPage, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.listOwn(req.orgId, actor, req.params.communityId, req.query);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/bookmarks',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listBookmarkedPosts',\n      tags,\n      summary: 'The posts you bookmarked in a community, newest bookmark first',\n      description:\n        'For a member of the community. Only posts you can still read. 404 when you are not a member.',\n      params: CommunityParam,\n      querystring: PageQuery,\n      response: { 200: PostFeedPage, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.listBookmarked(req.orgId, actor, req.params.communityId, req.query);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/spaces/:spaceId/feed',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getSpaceFeed',\n      tags,\n      summary: 'Published posts in a space',\n      description:\n        'For anyone who can open the space (403 otherwise). Filter by `topicId`; an unknown topic is a 404.',\n      params: CommunitySpaceParam,\n      querystring: FeedQuery,\n      response: { 200: PostFeedPage, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.spaceFeed(\n        req.orgId,\n        actor,\n        req.params.communityId,\n        req.params.spaceId,\n        req.query,\n      );\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/spaces/:spaceId/queue',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getSpaceQueue',\n      tags,\n      summary: 'The moderation queue of a space you moderate',\n      description:\n        'For a moderator who can open the space. Posts awaiting review, and the open flags on posts and on comments in the space. Each list holds at most the 100 oldest entries: pending posts by creation, flags by when they were raised; working the queue brings in the next ones.',\n      params: CommunitySpaceParam,\n      response: { 200: SpaceQueue, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.moderationQueue(req.orgId, actor, req.params.communityId, req.params.spaceId);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/communities/:communityId/spaces/:spaceId/posts',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'createPost',\n      tags,\n      summary: 'Create a post',\n      description:\n        'For anyone who can open the space. `mode` decides the status: `draft`, `scheduled`, or on `submit` `published`, or `pending` when the space requires review and you are not staff. 409 when the space has topics and none is given, or a schedule is missing or in the past.',\n      params: CommunitySpaceParam,\n      body: CreatePost,\n      response: { 201: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      const post = await posts.create(req.orgId, actor, {\n        ...req.body,\n        communityId: req.params.communityId,\n        spaceId: req.params.spaceId,\n      });\n      req.log.info({ postId: post.id, status: post.status }, 'post created');\n      return reply.code(201).send(post);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/posts/:postId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getPost',\n      tags,\n      summary: 'Read a post',\n      description:\n        'For anyone who can open the space while the post is published; for its author in any status; for moderators also while it is pending or removed. Any other post is a 404.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.getPost(req.orgId, actor, req.params.postId);\n    },\n  });\n\n  r.route({\n    method: 'PATCH',\n    url: '/api/member/posts/:postId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'updatePost',\n      tags,\n      summary: 'Edit your own post',\n      description:\n        'Author only. Changes only the fields sent. 409 when the post is removed, or the topic rules of the space are not met.',\n      params: PostIdParam,\n      body: UpdatePost,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.update(req.orgId, req.params.postId, actor, req.body);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/submission',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'submitPost',\n      tags,\n      summary: 'Submit your draft or scheduled post',\n      description:\n        'Author only. Publishes it now, or holds it for review when the space requires review and you are not staff. 409 when the post is not a draft or scheduled.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.submit(req.orgId, req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/schedule',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'schedulePost',\n      tags,\n      summary: 'Schedule your post',\n      description:\n        'Author only. The post is submitted at `scheduledAt`. 409 when it is already submitted or removed, or the time is not in the future.',\n      params: PostIdParam,\n      body: SchedulePost,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.schedule(req.orgId, req.params.postId, actor, req.body.scheduledAt);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/approval',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'approvePost',\n      tags,\n      summary: 'Publish a post that awaits review in a space you moderate',\n      description:\n        'For a moderator who can open the space. 409 when the post is not awaiting review.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.approve(req.orgId, req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/removal',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'removePost',\n      tags,\n      summary: 'Remove your post, or one in a space you moderate',\n      description:\n        \"For the author or a moderator. Takes a published or pending post down; a moderator removing someone else's post resolves its open flags as `removed`. 409 when it is already removed or was never submitted.\",\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.remove(req.orgId, req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/restoration',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'restorePost',\n      tags,\n      summary: 'Restore a removed post in a space you moderate',\n      description: 'For a moderator who can open the space. 409 when the post is not removed.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.restore(req.orgId, req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/pin',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'pinPost',\n      tags,\n      summary: 'Pin a post in a space you moderate',\n      description: 'For a moderator. Pinned posts lead the feeds. 409 when the post is removed.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.pin(req.orgId, req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/unpin',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'unpinPost',\n      tags,\n      summary: 'Unpin a post in a space you moderate',\n      description: 'For a moderator. 409 when the post is removed.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.unpin(req.orgId, req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/comments/close',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'closePostComments',\n      tags,\n      summary: 'Close comments on a post in a space you moderate',\n      description:\n        'For a moderator. Nobody can comment until they are opened again. 409 when the post is removed.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.closeComments(req.orgId, req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/comments/open',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'openPostComments',\n      tags,\n      summary: 'Open comments on a post in a space you moderate',\n      description: 'For a moderator. 409 when the post is removed.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.openComments(req.orgId, req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/member/posts/:postId/reactions',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'setPostReactionPolicy',\n      tags,\n      summary: 'Turn reactions on or off for a post in a space you moderate',\n      description:\n        \"For a moderator. Overrides the space's reactions setting for this post. 409 when the post is removed.\",\n      params: PostIdParam,\n      body: SetPostReactions,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.setReactions(req.orgId, req.params.postId, actor, req.body.enabled);\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/member/posts/:postId/reaction',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'setPostReaction',\n      tags,\n      summary: 'Set your reaction on a post',\n      description:\n        'For anyone who can read the post, while reactions are on for it (403 otherwise). Replaces any reaction you already had and returns the new counts.',\n      params: PostIdParam,\n      body: SetReaction,\n      response: { 200: Reactions, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.setReaction(req.orgId, req.params.postId, actor, req.body.emoji);\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/member/posts/:postId/reaction',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'clearPostReaction',\n      tags,\n      summary: 'Withdraw your reaction from a post',\n      description:\n        'For anyone who can read the post, while reactions are on for it (403 otherwise). Returns the new counts.',\n      params: PostIdParam,\n      response: { 200: Reactions, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return posts.setReaction(req.orgId, req.params.postId, actor, null);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/follow',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'followPost',\n      tags,\n      summary: 'Follow a post',\n      description:\n        'For anyone who can read the post. You are notified of new comments on it. Following twice is harmless.',\n      params: PostIdParam,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      await posts.follow(req.orgId, req.params.postId, actor);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/member/posts/:postId/follow',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'unfollowPost',\n      tags,\n      summary: 'Stop following a post',\n      description: 'For anyone who can read the post. Harmless when you do not follow it.',\n      params: PostIdParam,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      await posts.unfollow(req.orgId, req.params.postId, actor);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/bookmark',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'bookmarkPost',\n      tags,\n      summary: 'Bookmark a post',\n      description: 'For anyone who can read the post. Bookmarking twice is harmless.',\n      params: PostIdParam,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      await posts.bookmark(req.orgId, req.params.postId, actor);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/member/posts/:postId/bookmark',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'unbookmarkPost',\n      tags,\n      summary: 'Remove a bookmark',\n      description: 'For anyone who can read the post. Harmless when you have not bookmarked it.',\n      params: PostIdParam,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      await posts.unbookmark(req.orgId, req.params.postId, actor);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/flags',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'flagPost',\n      tags,\n      summary: 'Flag a post for the moderators',\n      description:\n        'For anyone who can read the post. Flagging it again while your flag is open returns that flag.',\n      params: PostIdParam,\n      body: FlagReason,\n      response: { 201: PostFlag, ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      const flag = await posts.flag(req.orgId, req.params.postId, actor, req.body.reason);\n      return reply.code(201).send(flag);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/flags/resolution',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'resolvePostFlags',\n      tags,\n      summary: 'Dismiss the open flags on a post in a space you moderate',\n      description:\n        'For a moderator who can open the space. Closes every open flag and leaves the post up.',\n      params: PostIdParam,\n      body: ResolvePostFlags,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      await posts.resolveFlags(req.orgId, req.params.postId, actor, req.body.resolution);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/posts/:postId/comments',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listPostComments',\n      tags,\n      summary: \"Read a post's comments\",\n      description:\n        'For anyone who can read the post. Pages by top-level comment, oldest first. Each page carries its top-level comments and all of their replies; `total` counts top-level comments.',\n      params: PostIdParam,\n      querystring: PageQuery,\n      response: { 200: PostCommentsPage, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      return container.discussion.postComments(req.orgId, req.params.postId, actor, req.query);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/comments',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'createPostComment',\n      tags,\n      summary: 'Comment on a post',\n      description:\n        'For anyone who can read the post, while its comments are open (403 otherwise). Replies nest one level. 409 when the post is not published.',\n      params: PostIdParam,\n      body: PostComment,\n      response: { 201: CommentView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req, reply) => {\n      const actor = await actorOf(container, req.orgId, req.userId);\n      const comment = await container.discussion.postComment(req.orgId, {\n        actor,\n        postId: req.params.postId,\n        parentId: req.body.parentId,\n        body: req.body.body,\n      });\n      return reply.code(201).send(comment);\n    },\n  });\n}\n"],"mappings":";;;;;;;;;AA6BA,eAAsB,iBAAiB,KAAsB,WAAqC;CAChG,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,QAAQ,UAAU;CACxB,MAAM,OAAO,CAAC,OAAO;CAErB,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,aAAa;GACb,UAAU;IAAE,KAAK;IAAc,GAAG,SAAS,KAAK,GAAG;GAAE;EACvD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,WAAW,IAAI,OAAO,OAAO,IAAI,OAAO,aAAa,IAAI,KAAK;EAC7E;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,aAAa;GACb,UAAU;IAAE,KAAK;IAAc,GAAG,SAAS,KAAK,GAAG;GAAE;EACvD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,QAAQ,IAAI,OAAO,OAAO,IAAI,OAAO,aAAa,IAAI,KAAK;EAC1E;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,aAAa;GACb,UAAU;IAAE,KAAK;IAAc,GAAG,SAAS,KAAK,GAAG;GAAE;EACvD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,eAAe,IAAI,OAAO,OAAO,IAAI,OAAO,aAAa,IAAI,KAAK;EACjF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,aAAa;GACb,UAAU;IAAE,KAAK;IAAc,GAAG,SAAS,KAAK,GAAG;GAAE;EACvD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,UACX,IAAI,OACJ,OACA,IAAI,OAAO,aACX,IAAI,OAAO,SACX,IAAI,KACN;EACF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAY,GAAG,SAAS,KAAK,GAAG;GAAE;EACrD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,gBAAgB,IAAI,OAAO,OAAO,IAAI,OAAO,aAAa,IAAI,OAAO,OAAO;EAC3F;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,OAAO,MAAM,MAAM,OAAO,IAAI,OAAO,OAAO;IAChD,GAAG,IAAI;IACP,aAAa,IAAI,OAAO;IACxB,SAAS,IAAI,OAAO;GACtB,CAAC;GACD,IAAI,IAAI,KAAK;IAAE,QAAQ,KAAK;IAAI,QAAQ,KAAK;GAAO,GAAG,cAAc;GACrE,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI;EAClC;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,QAAQ,IAAI,OAAO,OAAO,IAAI,OAAO,MAAM;EAC1D;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,OAAO,IAAI,OAAO,IAAI,OAAO,QAAQ,OAAO,IAAI,IAAI;EACnE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,OAAO,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK;EACzD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,SAAS,IAAI,OAAO,IAAI,OAAO,QAAQ,OAAO,IAAI,KAAK,WAAW;EACjF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,QAAQ,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK;EAC1D;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,OAAO,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK;EACzD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,QAAQ,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK;EAC1D;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,IAAI,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK;EACtD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,MAAM,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK;EACxD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,cAAc,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK;EAChE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,aAAa,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK;EAC/D;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,aAAa,IAAI,OAAO,IAAI,OAAO,QAAQ,OAAO,IAAI,KAAK,OAAO;EACjF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,GAAG;GAAE;EACpD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,YAAY,IAAI,OAAO,IAAI,OAAO,QAAQ,OAAO,IAAI,KAAK,KAAK;EAC9E;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,GAAG;GAAE;EACpD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,MAAM,YAAY,IAAI,OAAO,IAAI,OAAO,QAAQ,OAAO,IAAI;EACpE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,MAAM,OAAO,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK;GACtD,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,MAAM,SAAS,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK;GACxD,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,MAAM,SAAS,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK;GACxD,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,MAAM,WAAW,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK;GAC1D,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,OAAO,MAAM,MAAM,KAAK,IAAI,OAAO,IAAI,OAAO,QAAQ,OAAO,IAAI,KAAK,MAAM;GAClF,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI;EAClC;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,MAAM,aAAa,IAAI,OAAO,IAAI,OAAO,QAAQ,OAAO,IAAI,KAAK,UAAU;GACjF,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,aAAa;GACb,UAAU;IAAE,KAAK;IAAkB,GAAG,SAAS,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,OAAO,UAAU,WAAW,aAAa,IAAI,OAAO,IAAI,OAAO,QAAQ,OAAO,IAAI,KAAK;EACzF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,MAAM;GAC5D,MAAM,UAAU,MAAM,UAAU,WAAW,YAAY,IAAI,OAAO;IAChE;IACA,QAAQ,IAAI,OAAO;IACnB,UAAU,IAAI,KAAK;IACnB,MAAM,IAAI,KAAK;GACjB,CAAC;GACD,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,OAAO;EACrC;CACF,CAAC;AACH"}
+{"version":3,"file":"posts.js","names":[],"sources":["../../../../src/http/routes/member/posts.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { z } from 'zod';\nimport type { Container } from '../../../app/container.js';\nimport { resolveActor } from '../../scope.js';\nimport {\n  CommentView,\n  CommunityParam,\n  CommunitySpaceParam,\n  CreatePost,\n  FeedQuery,\n  FlagReason,\n  PageQuery,\n  PostCommentsPage,\n  PostComment,\n  PostFeedPage,\n  PostFlag,\n  PostIdParam,\n  PostView,\n  Reactions,\n  ResolvePostFlags,\n  SchedulePost,\n  SetPostReactions,\n  SetPostSubscription,\n  SetReaction,\n  SpaceQueue,\n  UpdatePost,\n  refusals,\n} from '../../schemas/index.js';\n\nexport async function memberPostRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const posts = container.posts;\n  const tags = ['Posts'];\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/feed',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberFeed',\n      tags,\n      summary: 'Published posts across the spaces you can open',\n      description:\n        'For a member of the community. Pinned posts first, then newest first. 404 when you are not a member.',\n      params: CommunityParam,\n      querystring: PageQuery,\n      response: { 200: PostFeedPage, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.memberFeed(req.params.communityId, req.query, actor);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/own-posts',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listOwnPosts',\n      tags,\n      summary: 'Your own posts in a community, newest first',\n      description:\n        'For a member of the community. Your posts in any status, drafts included, in the spaces you can open. 404 when you are not a member.',\n      params: CommunityParam,\n      querystring: PageQuery,\n      response: { 200: PostFeedPage, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.listOwn(req.params.communityId, req.query, actor);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/bookmarks',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listBookmarkedPosts',\n      tags,\n      summary: 'The posts you bookmarked in a community, newest bookmark first',\n      description:\n        'For a member of the community. Only posts you can still read. 404 when you are not a member.',\n      params: CommunityParam,\n      querystring: PageQuery,\n      response: { 200: PostFeedPage, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.listBookmarked(req.params.communityId, req.query, actor);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/spaces/:spaceId/feed',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getSpaceFeed',\n      tags,\n      summary: 'Published posts in a space',\n      description:\n        'For anyone who can open the space (403 otherwise). Filter by `topicId`; an unknown topic is a 404.',\n      params: CommunitySpaceParam,\n      querystring: FeedQuery,\n      response: { 200: PostFeedPage, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.spaceFeed(req.params.communityId, req.params.spaceId, req.query, actor);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/spaces/:spaceId/queue',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getSpaceQueue',\n      tags,\n      summary: 'The moderation queue of a space you moderate',\n      description:\n        'For a moderator who can open the space. Posts awaiting review, and the open flags on posts and on comments in the space. Each list holds at most the 100 oldest entries: pending posts by creation, flags by when they were raised; working the queue brings in the next ones.',\n      params: CommunitySpaceParam,\n      response: { 200: SpaceQueue, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.moderationQueue(req.params.communityId, req.params.spaceId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/communities/:communityId/spaces/:spaceId/posts',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'createPost',\n      tags,\n      summary: 'Create a post',\n      description:\n        'For anyone who can open the space. `mode` decides the status: `draft`, `scheduled`, or on `submit` `published`, or `pending` when the space requires review and you do not hold `communities:moderate` on the community. 409 when the space has topics and none is given. 400 when a schedule is missing or in the past. 503 when a scheduled post could not be timed; the post is then kept as a draft, and `details.postId` names it, so open that draft instead of creating the post again.',\n      params: CommunitySpaceParam,\n      body: CreatePost,\n      response: { 201: PostView, ...refusals(400, 403, 404, 409, 503) },\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const post = await posts.create(\n        { ...req.body, communityId: req.params.communityId, spaceId: req.params.spaceId },\n        actor,\n      );\n      req.log.info({ postId: post.id, status: post.status }, 'post created');\n      return reply.code(201).send(post);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/posts/:postId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getPost',\n      tags,\n      summary: 'Read a post',\n      description:\n        'For anyone who can open the space while the post is published; for its author in any status; for moderators also while it is pending or removed. Any other post is a 404.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.getPost(req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'PATCH',\n    url: '/api/member/posts/:postId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'updatePost',\n      tags,\n      summary: 'Edit your own post',\n      description:\n        'Author only. Changes only the fields sent. 409 when the post is removed, or the topic rules of the space are not met.',\n      params: PostIdParam,\n      body: UpdatePost,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.update(req.params.postId, req.body, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/submit',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'submitPost',\n      tags,\n      summary: 'Submit your draft or scheduled post',\n      description:\n        'Author only. Publishes it now, or holds it for review when the space requires review and you do not hold `communities:moderate` on the community. A scheduled post is no longer published at its time. 409 when the post is not a draft or scheduled.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.submit(req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/schedule',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'schedulePost',\n      tags,\n      summary: 'Schedule your post',\n      description:\n        'Author only. Schedules a draft, or moves a scheduled post to a new time; the post is submitted at `scheduledAt`. 409 when it is already submitted or removed, or the time is not in the future. 503 when the time could not be set; a draft stays a draft and a moved post keeps its previous time, and `details.postId` names the post.',\n      params: PostIdParam,\n      body: SchedulePost,\n      response: { 200: PostView, ...refusals(403, 404, 409, 503) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.schedule(req.params.postId, req.body.scheduledAt, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/unschedule',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'unschedulePost',\n      tags,\n      summary: 'Unschedule your post',\n      description:\n        'Author only. The scheduled post becomes a draft and is not submitted at its time. 409 when the post is not scheduled.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.unschedule(req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/approve',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'approvePost',\n      tags,\n      summary: 'Publish a post that awaits review in a space you moderate',\n      description:\n        'For a moderator who can open the space. 409 when the post is not awaiting review.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.approve(req.params.postId, null, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/remove',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'removePost',\n      tags,\n      summary: 'Remove your post, or one in a space you moderate',\n      description:\n        \"The author can remove their own post; anyone else needs `communities:moderate` on the community. Takes a published or pending post down; removing someone else's post resolves its open flags as `removed`. 409 when it is already removed or was never submitted.\",\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.remove(req.params.postId, null, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/restore',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'restorePost',\n      tags,\n      summary: 'Restore a removed post in a space you moderate',\n      description: 'For a moderator who can open the space. 409 when the post is not removed.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.restore(req.params.postId, null, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/pin',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'pinPost',\n      tags,\n      summary: 'Pin a post in a space you moderate',\n      description: 'For a moderator. Pinned posts lead the feeds. 409 when the post is removed.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.pin(req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/unpin',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'unpinPost',\n      tags,\n      summary: 'Unpin a post in a space you moderate',\n      description: 'For a moderator. 409 when the post is removed.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.unpin(req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/comments/close',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'closePostComments',\n      tags,\n      summary: 'Close comments on a post in a space you moderate',\n      description:\n        'For a moderator. Nobody can comment until they are opened again. 409 when the post is removed.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.closeComments(req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/comments/open',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'openPostComments',\n      tags,\n      summary: 'Open comments on a post in a space you moderate',\n      description: 'For a moderator. 409 when the post is removed.',\n      params: PostIdParam,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.openComments(req.params.postId, actor);\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/member/posts/:postId/reactions',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'setPostReactionPolicy',\n      tags,\n      summary: 'Turn reactions on or off for a post in a space you moderate',\n      description:\n        \"For a moderator. Overrides the space's reactions setting for this post. 409 when the post is removed.\",\n      params: PostIdParam,\n      body: SetPostReactions,\n      response: { 200: PostView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.setReactions(req.params.postId, req.body.enabled, actor);\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/member/posts/:postId/reaction',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'setPostReaction',\n      tags,\n      summary: 'Set your reaction on a post',\n      description:\n        'For anyone who can read the post, while reactions are on for it (403 otherwise). Replaces any reaction you already had and returns the new counts.',\n      params: PostIdParam,\n      body: SetReaction,\n      response: { 200: Reactions, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.setReaction(req.params.postId, req.body.emoji, actor);\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/member/posts/:postId/reaction',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'clearPostReaction',\n      tags,\n      summary: 'Withdraw your reaction from a post',\n      description:\n        'For anyone who can read the post, while reactions are on for it (403 otherwise). Returns the new counts.',\n      params: PostIdParam,\n      response: { 200: Reactions, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return posts.setReaction(req.params.postId, null, actor);\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/member/posts/:postId/subscription',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'setPostSubscription',\n      tags,\n      summary: 'Follow or mute a post, or clear either',\n      description:\n        'For anyone who can read the post. `following` notifies you of its new comments. `muted` stops its activity notifying you, until `mutedUntil` when given; mentions and actions on you still notify. `none` clears both.',\n      params: PostIdParam,\n      body: SetPostSubscription,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      await container.subscriptions.setPost(req.params.postId, req.body, actor);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/bookmark',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'bookmarkPost',\n      tags,\n      summary: 'Bookmark a post',\n      description: 'For anyone who can read the post. Bookmarking twice is harmless.',\n      params: PostIdParam,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      await posts.bookmark(req.params.postId, actor);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/member/posts/:postId/bookmark',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'unbookmarkPost',\n      tags,\n      summary: 'Remove a bookmark',\n      description: 'For anyone who can read the post. Harmless when you have not bookmarked it.',\n      params: PostIdParam,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      await posts.unbookmark(req.params.postId, actor);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/flags',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'flagPost',\n      tags,\n      summary: 'Flag a post for the moderators',\n      description:\n        'For anyone who can read the post. Flagging it again while your flag is open returns that flag.',\n      params: PostIdParam,\n      body: FlagReason,\n      response: { 201: PostFlag, ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const flag = await posts.flag(req.params.postId, req.body.reason, actor);\n      return reply.code(201).send(flag);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/flags/resolve',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'resolvePostFlags',\n      tags,\n      summary: 'Dismiss the open flags on a post in a space you moderate',\n      description:\n        'For a moderator who can open the space. Closes every open flag and leaves the post up.',\n      params: PostIdParam,\n      body: ResolvePostFlags,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      await posts.resolveFlags(req.params.postId, req.body.resolution, null, actor);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/posts/:postId/comments',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'listPostComments',\n      tags,\n      summary: \"Read a post's comments\",\n      description:\n        'For anyone who can read the post. Pages by top-level comment, oldest first. Each page carries its top-level comments and all of their replies; `total` counts top-level comments.',\n      params: PostIdParam,\n      querystring: PageQuery,\n      response: { 200: PostCommentsPage, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return container.discussion.postComments(req.params.postId, req.query, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/member/posts/:postId/comments',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'createPostComment',\n      tags,\n      summary: 'Comment on a post',\n      description:\n        'For anyone who can read the post, while its comments are open (403 otherwise). Replies nest one level. 409 when the post is not published.',\n      params: PostIdParam,\n      body: PostComment,\n      response: { 201: CommentView, ...refusals(403, 404, 409) },\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const comment = await container.discussion.postComment(\n        { postId: req.params.postId, parentId: req.body.parentId, body: req.body.body },\n        actor,\n      );\n      return reply.code(201).send(comment);\n    },\n  });\n}\n"],"mappings":";;;;;;;;;AA8BA,eAAsB,iBAAiB,KAAsB,WAAqC;CAChG,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,QAAQ,UAAU;CACxB,MAAM,OAAO,CAAC,OAAO;CAErB,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,aAAa;GACb,UAAU;IAAE,KAAK;IAAc,GAAG,SAAS,KAAK,GAAG;GAAE;EACvD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,WAAW,IAAI,OAAO,aAAa,IAAI,OAAO,KAAK;EAClE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,aAAa;GACb,UAAU;IAAE,KAAK;IAAc,GAAG,SAAS,KAAK,GAAG;GAAE;EACvD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,QAAQ,IAAI,OAAO,aAAa,IAAI,OAAO,KAAK;EAC/D;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,aAAa;GACb,UAAU;IAAE,KAAK;IAAc,GAAG,SAAS,KAAK,GAAG;GAAE;EACvD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,eAAe,IAAI,OAAO,aAAa,IAAI,OAAO,KAAK;EACtE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,aAAa;GACb,UAAU;IAAE,KAAK;IAAc,GAAG,SAAS,KAAK,GAAG;GAAE;EACvD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,UAAU,IAAI,OAAO,aAAa,IAAI,OAAO,SAAS,IAAI,OAAO,KAAK;EACrF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAY,GAAG,SAAS,KAAK,GAAG;GAAE;EACrD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,gBAAgB,IAAI,OAAO,aAAa,IAAI,OAAO,SAAS,KAAK;EAChF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,KAAK,KAAK,GAAG;GAAE;EAClE;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,OAAO,MAAM,MAAM,OACvB;IAAE,GAAG,IAAI;IAAM,aAAa,IAAI,OAAO;IAAa,SAAS,IAAI,OAAO;GAAQ,GAChF,KACF;GACA,IAAI,IAAI,KAAK;IAAE,QAAQ,KAAK;IAAI,QAAQ,KAAK;GAAO,GAAG,cAAc;GACrE,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI;EAClC;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,QAAQ,IAAI,OAAO,QAAQ,KAAK;EAC/C;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,OAAO,IAAI,OAAO,QAAQ,IAAI,MAAM,KAAK;EACxD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,OAAO,IAAI,OAAO,QAAQ,KAAK;EAC9C;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,KAAK,GAAG;GAAE;EAC7D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,SAAS,IAAI,OAAO,QAAQ,IAAI,KAAK,aAAa,KAAK;EACtE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,WAAW,IAAI,OAAO,QAAQ,KAAK;EAClD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,QAAQ,IAAI,OAAO,QAAQ,MAAM,KAAK;EACrD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,OAAO,IAAI,OAAO,QAAQ,MAAM,KAAK;EACpD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,QAAQ,IAAI,OAAO,QAAQ,MAAM,KAAK;EACrD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,IAAI,IAAI,OAAO,QAAQ,KAAK;EAC3C;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,MAAM,IAAI,OAAO,QAAQ,KAAK;EAC7C;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,cAAc,IAAI,OAAO,QAAQ,KAAK;EACrD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,aAAa,IAAI,OAAO,QAAQ,KAAK;EACpD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,aAAa,IAAI,OAAO,QAAQ,IAAI,KAAK,SAAS,KAAK;EACtE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,GAAG;GAAE;EACpD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,YAAY,IAAI,OAAO,QAAQ,IAAI,KAAK,OAAO,KAAK;EACnE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,GAAG;GAAE;EACpD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,MAAM,YAAY,IAAI,OAAO,QAAQ,MAAM,KAAK;EACzD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,UAAU,cAAc,QAAQ,IAAI,OAAO,QAAQ,IAAI,MAAM,KAAK;GACxE,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,MAAM,SAAS,IAAI,OAAO,QAAQ,KAAK;GAC7C,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,MAAM,WAAW,IAAI,OAAO,QAAQ,KAAK;GAC/C,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAU,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,OAAO,MAAM,MAAM,KAAK,IAAI,OAAO,QAAQ,IAAI,KAAK,QAAQ,KAAK;GACvE,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI;EAClC;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,MAAM,aAAa,IAAI,OAAO,QAAQ,IAAI,KAAK,YAAY,MAAM,KAAK;GAC5E,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,aAAa;GACb,UAAU;IAAE,KAAK;IAAkB,GAAG,SAAS,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,UAAU,WAAW,aAAa,IAAI,OAAO,QAAQ,IAAI,OAAO,KAAK;EAC9E;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,UAAU,MAAM,UAAU,WAAW,YACzC;IAAE,QAAQ,IAAI,OAAO;IAAQ,UAAU,IAAI,KAAK;IAAU,MAAM,IAAI,KAAK;GAAK,GAC9E,KACF;GACA,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,OAAO;EACrC;CACF,CAAC;AACH"}

package/dist/http/routes/member/profile.js

@@ -1,11 +1,18 @@
 import { refusals } from "../../schemas/shared.js";
+import { resolveCaller } from "../../scope.js";
 import { UpdateProfile, UserProfile } from "../../schemas/profile.js";
 import "../../schemas/index.js";
-import { actorOf } from "./actor.js";
 //#region src/http/routes/member/profile.ts
 async function memberProfileRoutes(app, container) {
 	const r = app.withTypeProvider();
 	const tags = ["Profile"];
+	async function memberOf(req) {
+		const caller = await resolveCaller(container, req);
+		return {
+			...caller.actor,
+			userId: caller.userId
+		};
+	}
 	r.route({
 		method: "GET",
 		url: "/api/member/profile",
@@ -14,11 +21,14 @@ async function memberProfileRoutes(app, container) {
 			operationId: "getMemberProfile",
 			tags,
 			summary: "Read your profile",
-			description: "For any signed-in person. The profile is yours across organizations; `imageUrl` is set only when the photo was uploaded in this organization. Before you save one, every field is empty.",
-			response: { 200: UserProfile }
+			description: "For any active member of the organization. The profile is yours across organizations; `imageUrl` is set only when the photo was uploaded in this organization. Before you save one, every field is empty.",
+			response: {
+				200: UserProfile,
+				...refusals(403)
+			}
 		},
 		handler: async (req) => {
-			return container.identity.profileOf(req.orgId, req.userId);
+			return container.identity.profileOf(await memberOf(req));
 		}
 	});
 	r.route({
@@ -37,8 +47,7 @@ async function memberProfileRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const orgUser = await actorOf(container, req.orgId, req.userId);
-			return container.identity.updateProfile(req.orgId, req.userId, req.userId, orgUser.id, req.body);
+			return container.identity.updateProfile(req.body, await memberOf(req));
 		}
 	});
 }