@headless-lms/server 0.4.0 → 0.5.0

package/dist/http/routes/communities.js.map

@@ -1 +1 @@
-{"version":3,"file":"communities.js","names":[],"sources":["../../../src/http/routes/communities.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { z } from 'zod';\nimport type { Container } from '../../app/container.js';\nimport { NotFoundError } from '@headless-lms/core/shared/errors';\nimport { resolveConfiguratorScope, resolveScope } from '../scope.js';\nimport {\n  Community,\n  CommunityAnalytics,\n  CommunityIdParam,\n  CommunitySpaceParam,\n  CommunitiesPage,\n  CommunitiesQuery,\n  CreateCommunity,\n  CreateSpace,\n  MessageQueue,\n  NotificationCategoryList,\n  OrderedIds,\n  PatchCommunitySettings,\n  ReplaceNotificationCategories,\n  SetSpaceTopics,\n  SpaceDetail,\n  SpaceLinkBody,\n  SpaceLinkParam,\n  UpdateCommunity,\n  UpdateSpace,\n  refusals,\n} from '../schemas/index.js';\n\nexport async function communitiesRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const content = container.content;\n  const tags = ['Communities'];\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities',\n    schema: {\n      operationId: 'listCommunities',\n      tags,\n      summary: 'List communities (staff)',\n      description:\n        'Staff only (owner, admin, instructor). Pages every community in the organization, drafts included, filtered by `status` and searched by title.',\n      querystring: CommunitiesQuery,\n      response: { 200: CommunitiesPage, ...refusals(403) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      return content.listCommunities(scope.orgId, req.query);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/communities',\n    schema: {\n      operationId: 'createCommunity',\n      tags,\n      summary: 'Create a community (staff)',\n      description:\n        'Owner or admin only. The community starts as a draft with the default direct-message settings and no spaces. Members see it once it is published and they hold it.',\n      body: CreateCommunity,\n      response: { 201: Community, ...refusals(403, 409) },\n    },\n    handler: async (req, reply) => {\n      const scope = await resolveScope(container, req);\n      const community = await content.createCommunity(scope.orgId, req.body, {\n        id: scope.orgUserId,\n        role: scope.role,\n      });\n      req.log.info({ communityId: community.id }, 'community created');\n      return reply.code(201).send(community);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities/:communityId',\n    schema: {\n      operationId: 'getCommunity',\n      tags,\n      summary: 'Get a community (staff)',\n      description:\n        'Staff only (owner, admin, instructor). Any community of the organization, drafts included.',\n      params: CommunityIdParam,\n      response: { 200: Community, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      const community = await content.getCommunity(scope.orgId, req.params.communityId);\n      if (!community) {\n        throw new NotFoundError('Community', req.params.communityId);\n      }\n      return community;\n    },\n  });\n\n  r.route({\n    method: 'PATCH',\n    url: '/api/communities/:communityId',\n    schema: {\n      operationId: 'updateCommunity',\n      tags,\n      summary: 'Update a community (staff)',\n      description:\n        'Owner or admin only. Changes only the fields sent. `thumbnailAssetId` must be a ready library image (409 otherwise); null clears it.',\n      params: CommunityIdParam,\n      body: UpdateCommunity,\n      response: { 200: Community, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      return content.updateCommunity(scope.orgId, req.params.communityId, req.body, {\n        id: scope.orgUserId,\n        role: scope.role,\n      });\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/communities/:communityId',\n    schema: {\n      operationId: 'deleteCommunity',\n      tags,\n      summary: 'Delete a community (staff)',\n      description:\n        'Owner or admin only. Links to the community from other spaces are removed with it.',\n      params: CommunityIdParam,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const scope = await resolveScope(container, req);\n      await content.deleteCommunity(scope.orgId, req.params.communityId, {\n        id: scope.orgUserId,\n        role: scope.role,\n      });\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'PATCH',\n    url: '/api/communities/:communityId/settings',\n    schema: {\n      operationId: 'patchCommunitySettings',\n      tags,\n      summary: 'Change the direct-message and digest settings of a community (staff)',\n      description:\n        'Owner or admin only. Changes only the settings sent; the rest keep their values. The direct-message settings decide who may message whom from then on. `digest` sets when the community digest goes out, or `null` stops it; the first digest after a change goes out at the next slot.',\n      params: CommunityIdParam,\n      body: PatchCommunitySettings,\n      response: { 200: Community, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      return content.patchCommunitySettings(scope.orgId, req.params.communityId, req.body, {\n        id: scope.orgUserId,\n        role: scope.role,\n      });\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities/:communityId/notification-categories',\n    schema: {\n      operationId: 'getCommunityNotificationCategories',\n      tags: ['Notifications'],\n      summary: \"Get a community's notification categories (staff)\",\n      description:\n        'Owner or admin only. The list in use for the community, with `source` saying whether it is the default or a stored list.',\n      params: CommunityIdParam,\n      response: { 200: NotificationCategoryList, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const scope = await resolveConfiguratorScope(container, req);\n      return container.notificationCategories.community.get(scope.orgId, req.params.communityId);\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/communities/:communityId/notification-categories',\n    schema: {\n      operationId: 'replaceCommunityNotificationCategories',\n      tags: ['Notifications'],\n      summary: \"Replace a community's notification categories (staff)\",\n      description:\n        'Owner or admin only. Stores the whole list for this community; other communities keep theirs. 422 when a key repeats, a type cannot be in a community list, a reason is not allowed for its type, a channel is not configured, `perSpace` is set on a type that cannot occur in a space, `spaceDefaults` appears without `perSpace` or names a channel the category does not offer, or earlier categories already cover everything a category covers.',\n      params: CommunityIdParam,\n      body: ReplaceNotificationCategories,\n      response: { 200: NotificationCategoryList, ...refusals(400, 403, 404, 422) },\n    },\n    handler: async (req) => {\n      const scope = await resolveConfiguratorScope(container, req);\n      return container.notificationCategories.community.replace(\n        scope.orgId,\n        req.params.communityId,\n        req.body.categories,\n      );\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/communities/:communityId/notification-categories',\n    schema: {\n      operationId: 'resetCommunityNotificationCategories',\n      tags: ['Notifications'],\n      summary: 'Go back to the default notification categories for a community (staff)',\n      description: 'Owner or admin only. Removes the stored list; the default applies again.',\n      params: CommunityIdParam,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const scope = await resolveConfiguratorScope(container, req);\n      await container.notificationCategories.community.reset(scope.orgId, req.params.communityId);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/communities/:communityId/publish',\n    schema: {\n      operationId: 'publishCommunity',\n      tags,\n      summary: 'Publish a community (staff)',\n      description: 'Owner or admin only. Makes the community visible to the people who hold it.',\n      params: CommunityIdParam,\n      response: { 200: Community, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      return content.publishCommunity(scope.orgId, req.params.communityId, {\n        id: scope.orgUserId,\n        role: scope.role,\n      });\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/communities/:communityId/unpublish',\n    schema: {\n      operationId: 'unpublishCommunity',\n      tags,\n      summary: 'Unpublish a community (staff)',\n      description:\n        'Owner or admin only. Hides the community from members again; nothing in it is deleted.',\n      params: CommunityIdParam,\n      response: { 200: Community, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      return content.unpublishCommunity(scope.orgId, req.params.communityId, {\n        id: scope.orgUserId,\n        role: scope.role,\n      });\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities/:communityId/analytics',\n    schema: {\n      operationId: 'getCommunityAnalytics',\n      tags,\n      summary: 'Staff analytics for a community',\n      description:\n        'Staff only (owner, admin, instructor). Membership, activity and moderation counts for one community.',\n      params: CommunityIdParam,\n      response: { 200: CommunityAnalytics, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      const stats = await container.reporting.admin.communityAnalytics(\n        scope.orgId,\n        req.params.communityId,\n      );\n      if (!stats) {\n        throw new NotFoundError('Community', req.params.communityId);\n      }\n      return stats;\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities/:communityId/message-queue',\n    schema: {\n      operationId: 'getCommunityMessageQueue',\n      tags,\n      summary: 'Open message flags in a community (staff)',\n      description:\n        \"Staff only (owner, admin, instructor). The messages in the community's chats with open flags, with the flags and the chat each is in. Holds at most the 100 oldest open flags; working the queue brings in the next ones.\",\n      params: CommunityIdParam,\n      response: { 200: MessageQueue, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      return container.chats.messageQueue(\n        scope.orgId,\n        { id: scope.orgUserId, role: scope.role },\n        req.params.communityId,\n      );\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities/:communityId/spaces',\n    schema: {\n      operationId: 'listCommunitySpaces',\n      tags,\n      summary: 'List the spaces in a community (staff)',\n      description:\n        'Staff only (owner, admin, instructor). Every space in order, with its topics and links.',\n      params: CommunityIdParam,\n      response: { 200: z.array(SpaceDetail), ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      return content.listSpaces(scope.orgId, req.params.communityId);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/communities/:communityId/spaces',\n    schema: {\n      operationId: 'createSpace',\n      tags,\n      summary: 'Create a space (staff)',\n      description:\n        'Owner or admin only. The space is added last. An `all_members` space cannot have a capacity (409).',\n      params: CommunityIdParam,\n      body: CreateSpace,\n      response: { 201: SpaceDetail, ...refusals(403, 404, 409) },\n    },\n    handler: async (req, reply) => {\n      const scope = await resolveScope(container, req);\n      const space = await content.createSpace(scope.orgId, req.params.communityId, req.body, {\n        id: scope.orgUserId,\n        role: scope.role,\n      });\n      return reply.code(201).send(space);\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/communities/:communityId/spaces/order',\n    schema: {\n      operationId: 'reorderSpaces',\n      tags,\n      summary: 'Reorder the spaces in a community (staff)',\n      description:\n        'Owner or admin only. Send every space id of the community exactly once (409 otherwise).',\n      params: CommunityIdParam,\n      body: OrderedIds,\n      response: { 200: z.array(SpaceDetail), ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      return content.reorderSpaces(scope.orgId, req.params.communityId, req.body.ids, {\n        id: scope.orgUserId,\n        role: scope.role,\n      });\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities/:communityId/spaces/:spaceId',\n    schema: {\n      operationId: 'getSpace',\n      tags,\n      summary: 'Get a space (staff)',\n      description: 'Staff only (owner, admin, instructor). The space with its topics and links.',\n      params: CommunitySpaceParam,\n      response: { 200: SpaceDetail, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      const space = await content.getCommunitySpace(\n        scope.orgId,\n        req.params.communityId,\n        req.params.spaceId,\n      );\n      if (!space) {\n        throw new NotFoundError('Space', req.params.spaceId);\n      }\n      return space;\n    },\n  });\n\n  r.route({\n    method: 'PATCH',\n    url: '/api/communities/:communityId/spaces/:spaceId',\n    schema: {\n      operationId: 'updateSpace',\n      tags,\n      summary: 'Update a space (staff)',\n      description:\n        'Owner or admin only. Changes only the fields sent; `settings` merges into the current settings. An `all_members` space cannot have a capacity (409).',\n      params: CommunitySpaceParam,\n      body: UpdateSpace,\n      response: { 200: SpaceDetail, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      return content.updateSpace(\n        scope.orgId,\n        req.params.communityId,\n        req.params.spaceId,\n        req.body,\n        { id: scope.orgUserId, role: scope.role },\n      );\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/communities/:communityId/spaces/:spaceId',\n    schema: {\n      operationId: 'deleteSpace',\n      tags,\n      summary: 'Delete a space (staff)',\n      description: 'Owner or admin only. The space and everything in it go.',\n      params: CommunitySpaceParam,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const scope = await resolveScope(container, req);\n      await content.deleteSpace(scope.orgId, req.params.communityId, req.params.spaceId, {\n        id: scope.orgUserId,\n        role: scope.role,\n      });\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/communities/:communityId/spaces/:spaceId/topics',\n    schema: {\n      operationId: 'setSpaceTopics',\n      tags,\n      summary: 'Replace the topics on a space (staff)',\n      description:\n        'Owner or admin only. The list replaces the current topics: an entry with an `id` keeps and renames that topic, one without adds a topic, and a topic left out is deleted. Names must be unique (409), and a topic that posts use cannot be deleted (409).',\n      params: CommunitySpaceParam,\n      body: SetSpaceTopics,\n      response: { 200: SpaceDetail, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      return content.setSpaceTopics(\n        scope.orgId,\n        req.params.communityId,\n        req.params.spaceId,\n        req.body,\n        { id: scope.orgUserId, role: scope.role },\n      );\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/communities/:communityId/spaces/:spaceId/links',\n    schema: {\n      operationId: 'addSpaceLink',\n      tags,\n      summary: 'Link a course, download, or community into a space (staff)',\n      description:\n        'Owner or admin only. The link is added last. Linking the same content twice is a 409.',\n      params: CommunitySpaceParam,\n      body: SpaceLinkBody,\n      response: { 201: SpaceDetail, ...refusals(403, 404, 409) },\n    },\n    handler: async (req, reply) => {\n      const scope = await resolveScope(container, req);\n      const space = await content.addSpaceLink(\n        scope.orgId,\n        req.params.communityId,\n        req.params.spaceId,\n        req.body.contentId,\n        { id: scope.orgUserId, role: scope.role },\n      );\n      return reply.code(201).send(space);\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/communities/:communityId/spaces/:spaceId/links/:linkId',\n    schema: {\n      operationId: 'removeSpaceLink',\n      tags,\n      summary: 'Remove a link from a space (staff)',\n      description: 'Owner or admin only. The linked content itself is untouched.',\n      params: SpaceLinkParam,\n      response: { 200: SpaceDetail, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      return content.removeSpaceLink(\n        scope.orgId,\n        req.params.communityId,\n        req.params.spaceId,\n        req.params.linkId,\n        { id: scope.orgUserId, role: scope.role },\n      );\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/communities/:communityId/spaces/:spaceId/links/order',\n    schema: {\n      operationId: 'reorderSpaceLinks',\n      tags,\n      summary: 'Reorder the links in a space (staff)',\n      description:\n        'Owner or admin only. Send every link id of the space exactly once (409 otherwise).',\n      params: CommunitySpaceParam,\n      body: OrderedIds,\n      response: { 200: SpaceDetail, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const scope = await resolveScope(container, req);\n      return content.reorderSpaceLinks(\n        scope.orgId,\n        req.params.communityId,\n        req.params.spaceId,\n        req.body.ids,\n        { id: scope.orgUserId, role: scope.role },\n      );\n    },\n  });\n}\n"],"mappings":";;;;;;;;;AA6BA,eAAsB,kBAAkB,KAAsB,WAAqC;CACjG,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,UAAU,UAAU;CAC1B,MAAM,OAAO,CAAC,aAAa;CAE3B,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,aAAa;GACb,UAAU;IAAE,KAAK;IAAiB,GAAG,SAAS,GAAG;GAAE;EACrD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,gBAAgB,MAAM,OAAO,IAAI,KAAK;EACvD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,MAAM;GACN,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,GAAG;GAAE;EACpD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,YAAY,MAAM,QAAQ,gBAAgB,MAAM,OAAO,IAAI,MAAM;IACrE,IAAI,MAAM;IACV,MAAM,MAAM;GACd,CAAC;GACD,IAAI,IAAI,KAAK,EAAE,aAAa,UAAU,GAAG,GAAG,mBAAmB;GAC/D,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,SAAS;EACvC;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,GAAG;GAAE;EACpD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,YAAY,MAAM,QAAQ,aAAa,MAAM,OAAO,IAAI,OAAO,WAAW;GAChF,IAAI,CAAC,WACH,MAAM,IAAI,cAAc,aAAa,IAAI,OAAO,WAAW;GAE7D,OAAO;EACT;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACzD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,gBAAgB,MAAM,OAAO,IAAI,OAAO,aAAa,IAAI,MAAM;IAC5E,IAAI,MAAM;IACV,MAAM,MAAM;GACd,CAAC;EACH;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,QAAQ,gBAAgB,MAAM,OAAO,IAAI,OAAO,aAAa;IACjE,IAAI,MAAM;IACV,MAAM,MAAM;GACd,CAAC;GACD,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,GAAG;GAAE;EACpD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,uBAAuB,MAAM,OAAO,IAAI,OAAO,aAAa,IAAI,MAAM;IACnF,IAAI,MAAM;IACV,MAAM,MAAM;GACd,CAAC;EACH;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,eAAe;GACtB,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAA0B,GAAG,SAAS,KAAK,GAAG;GAAE;EACnE;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,yBAAyB,WAAW,GAAG;GAC3D,OAAO,UAAU,uBAAuB,UAAU,IAAI,MAAM,OAAO,IAAI,OAAO,WAAW;EAC3F;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,eAAe;GACtB,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAA0B,GAAG,SAAS,KAAK,KAAK,KAAK,GAAG;GAAE;EAC7E;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,yBAAyB,WAAW,GAAG;GAC3D,OAAO,UAAU,uBAAuB,UAAU,QAChD,MAAM,OACN,IAAI,OAAO,aACX,IAAI,KAAK,UACX;EACF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,eAAe;GACtB,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,yBAAyB,WAAW,GAAG;GAC3D,MAAM,UAAU,uBAAuB,UAAU,MAAM,MAAM,OAAO,IAAI,OAAO,WAAW;GAC1F,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACzD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,iBAAiB,MAAM,OAAO,IAAI,OAAO,aAAa;IACnE,IAAI,MAAM;IACV,MAAM,MAAM;GACd,CAAC;EACH;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACzD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,mBAAmB,MAAM,OAAO,IAAI,OAAO,aAAa;IACrE,IAAI,MAAM;IACV,MAAM,MAAM;GACd,CAAC;EACH;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAoB,GAAG,SAAS,KAAK,GAAG;GAAE;EAC7D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,QAAQ,MAAM,UAAU,UAAU,MAAM,mBAC5C,MAAM,OACN,IAAI,OAAO,WACb;GACA,IAAI,CAAC,OACH,MAAM,IAAI,cAAc,aAAa,IAAI,OAAO,WAAW;GAE7D,OAAO;EACT;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK;IAAc,GAAG,SAAS,KAAK,GAAG;GAAE;EACvD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,UAAU,MAAM,aACrB,MAAM,OACN;IAAE,IAAI,MAAM;IAAW,MAAM,MAAM;GAAK,GACxC,IAAI,OAAO,WACb;EACF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,MAAM,WAAW;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EAC/D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,WAAW,MAAM,OAAO,IAAI,OAAO,WAAW;EAC/D;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,QAAQ,MAAM,QAAQ,YAAY,MAAM,OAAO,IAAI,OAAO,aAAa,IAAI,MAAM;IACrF,IAAI,MAAM;IACV,MAAM,MAAM;GACd,CAAC;GACD,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK;EACnC;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK,EAAE,MAAM,WAAW;IAAG,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACpE;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,cAAc,MAAM,OAAO,IAAI,OAAO,aAAa,IAAI,KAAK,KAAK;IAC9E,IAAI,MAAM;IACV,MAAM,MAAM;GACd,CAAC;EACH;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,GAAG;GAAE;EACtD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,QAAQ,MAAM,QAAQ,kBAC1B,MAAM,OACN,IAAI,OAAO,aACX,IAAI,OAAO,OACb;GACA,IAAI,CAAC,OACH,MAAM,IAAI,cAAc,SAAS,IAAI,OAAO,OAAO;GAErD,OAAO;EACT;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,YACb,MAAM,OACN,IAAI,OAAO,aACX,IAAI,OAAO,SACX,IAAI,MACJ;IAAE,IAAI,MAAM;IAAW,MAAM,MAAM;GAAK,CAC1C;EACF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,QAAQ,YAAY,MAAM,OAAO,IAAI,OAAO,aAAa,IAAI,OAAO,SAAS;IACjF,IAAI,MAAM;IACV,MAAM,MAAM;GACd,CAAC;GACD,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,eACb,MAAM,OACN,IAAI,OAAO,aACX,IAAI,OAAO,SACX,IAAI,MACJ;IAAE,IAAI,MAAM;IAAW,MAAM,MAAM;GAAK,CAC1C;EACF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,QAAQ,MAAM,QAAQ,aAC1B,MAAM,OACN,IAAI,OAAO,aACX,IAAI,OAAO,SACX,IAAI,KAAK,WACT;IAAE,IAAI,MAAM;IAAW,MAAM,MAAM;GAAK,CAC1C;GACA,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK;EACnC;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,GAAG;GAAE;EACtD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,gBACb,MAAM,OACN,IAAI,OAAO,aACX,IAAI,OAAO,SACX,IAAI,OAAO,QACX;IAAE,IAAI,MAAM;IAAW,MAAM,MAAM;GAAK,CAC1C;EACF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,kBACb,MAAM,OACN,IAAI,OAAO,aACX,IAAI,OAAO,SACX,IAAI,KAAK,KACT;IAAE,IAAI,MAAM;IAAW,MAAM,MAAM;GAAK,CAC1C;EACF;CACF,CAAC;AACH"}
+{"version":3,"file":"communities.js","names":[],"sources":["../../../src/http/routes/communities.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { z } from 'zod';\nimport type { Container } from '../../app/container.js';\nimport { resolveActor } from '../scope.js';\nimport {\n  Community,\n  CommunityAnalytics,\n  CommunityIdParam,\n  CommunitySpaceParam,\n  CommunitiesPage,\n  CommunitiesQuery,\n  CreateCommunity,\n  CreateSpace,\n  MessageQueue,\n  NotificationCategoryList,\n  OrderedIds,\n  PatchCommunitySettings,\n  ReplaceNotificationCategories,\n  SetSpaceTopics,\n  SpaceDetail,\n  SpaceLinkBody,\n  SpaceLinkParam,\n  UpdateCommunity,\n  UpdateSpace,\n  refusals,\n} from '../schemas/index.js';\n\nexport async function communitiesRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const content = container.content;\n  const tags = ['Communities'];\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities',\n    schema: {\n      operationId: 'listCommunities',\n      tags,\n      summary: 'List communities',\n      description: `Requires one of \\`communities:read\\`, \\`communities:moderate\\`. Pages every community in the organization, drafts included, filtered by \\`status\\` and searched by title.`,\n      querystring: CommunitiesQuery,\n      response: { 200: CommunitiesPage, ...refusals(403) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return content.listCommunities(req.query, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/communities',\n    schema: {\n      operationId: 'createCommunity',\n      tags,\n      summary: 'Create a community',\n      description: `Requires \\`communities:write\\`. The community starts as a draft with the default direct-message settings and no spaces. Members see it once it is published and they hold it.`,\n      body: CreateCommunity,\n      response: { 201: Community, ...refusals(403, 409) },\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const community = await content.createCommunity(req.body, actor);\n      req.log.info({ communityId: community.id }, 'community created');\n      return reply.code(201).send(community);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities/:communityId',\n    schema: {\n      operationId: 'getCommunity',\n      tags,\n      summary: 'Get a community',\n      description: `Requires one of \\`communities:read\\`, \\`communities:moderate\\`. Any community of the organization, drafts included.`,\n      params: CommunityIdParam,\n      response: { 200: Community, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return content.getCommunity(req.params.communityId, actor);\n    },\n  });\n\n  r.route({\n    method: 'PATCH',\n    url: '/api/communities/:communityId',\n    schema: {\n      operationId: 'updateCommunity',\n      tags,\n      summary: 'Update a community',\n      description: `Requires \\`communities:write\\`. Changes only the fields sent. \\`thumbnailAssetId\\` must be a ready library image (409 otherwise); null clears it. A file it does not already use must be uploaded for it, or the caller needs \\`media:read\\` (403 otherwise).`,\n      params: CommunityIdParam,\n      body: UpdateCommunity,\n      response: { 200: Community, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return content.updateCommunity(req.params.communityId, req.body, actor);\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/communities/:communityId',\n    schema: {\n      operationId: 'deleteCommunity',\n      tags,\n      summary: 'Delete a community',\n      description: `Requires \\`communities:delete\\`. Links to the community from other spaces are removed with it.`,\n      params: CommunityIdParam,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      await content.deleteCommunity(req.params.communityId, actor);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'PATCH',\n    url: '/api/communities/:communityId/settings',\n    schema: {\n      operationId: 'patchCommunitySettings',\n      tags,\n      summary: 'Change the direct-message and digest settings of a community',\n      description: `Requires \\`communities:write\\`. Changes only the settings sent; the rest keep their values. The direct-message settings decide who may message whom from then on. \\`digest\\` sets when the community digest goes out, or \\`null\\` stops it; the first digest after a change goes out at the next slot.`,\n      params: CommunityIdParam,\n      body: PatchCommunitySettings,\n      response: { 200: Community, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return content.patchCommunitySettings(req.params.communityId, req.body, actor);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities/:communityId/notification-categories',\n    schema: {\n      operationId: 'getCommunityNotificationCategories',\n      tags: ['Notifications'],\n      summary: \"Get a community's notification categories\",\n      description: `Requires \\`communities:read\\`. On the community. The list in use for the community, with \\`source\\` saying whether it is the default or a stored list.`,\n      params: CommunityIdParam,\n      response: { 200: NotificationCategoryList, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return container.notificationCategories.community.get(req.params.communityId, actor);\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/communities/:communityId/notification-categories',\n    schema: {\n      operationId: 'replaceCommunityNotificationCategories',\n      tags: ['Notifications'],\n      summary: \"Replace a community's notification categories\",\n      description: `Requires \\`communities:write\\`. On the community. Stores the whole list for this community; other communities keep theirs. 422 when a key repeats, a type cannot be in a community list, a reason is not allowed for its type, a channel is not configured, \\`perSpace\\` is set on a type that cannot occur in a space, \\`spaceDefaults\\` appears without \\`perSpace\\` or names a channel the category does not offer, or earlier categories already cover everything a category covers.`,\n      params: CommunityIdParam,\n      body: ReplaceNotificationCategories,\n      response: { 200: NotificationCategoryList, ...refusals(400, 403, 404, 422) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return container.notificationCategories.community.replace(\n        req.params.communityId,\n        req.body.categories,\n        actor,\n      );\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/communities/:communityId/notification-categories',\n    schema: {\n      operationId: 'resetCommunityNotificationCategories',\n      tags: ['Notifications'],\n      summary: 'Go back to the default notification categories for a community',\n      description: `Requires \\`communities:write\\`. On the community. Removes the stored list; the default applies again.`,\n      params: CommunityIdParam,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      await container.notificationCategories.community.reset(req.params.communityId, actor);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/communities/:communityId/publish',\n    schema: {\n      operationId: 'publishCommunity',\n      tags,\n      summary: 'Publish a community',\n      description: `Requires \\`communities:write\\`. Makes the community visible to the people who hold it.`,\n      params: CommunityIdParam,\n      response: { 200: Community, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return content.publishCommunity(req.params.communityId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/communities/:communityId/unpublish',\n    schema: {\n      operationId: 'unpublishCommunity',\n      tags,\n      summary: 'Unpublish a community',\n      description: `Requires \\`communities:write\\`. Hides the community from members again; nothing in it is deleted.`,\n      params: CommunityIdParam,\n      response: { 200: Community, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return content.unpublishCommunity(req.params.communityId, actor);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities/:communityId/analytics',\n    schema: {\n      operationId: 'getCommunityAnalytics',\n      tags,\n      summary: 'Analytics for a community',\n      description: `Requires \\`communities:read\\`. Membership, activity and moderation counts for one community.`,\n      params: CommunityIdParam,\n      response: { 200: CommunityAnalytics, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return container.reporting.admin.communityAnalytics(req.params.communityId, actor);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities/:communityId/message-queue',\n    schema: {\n      operationId: 'getCommunityMessageQueue',\n      tags,\n      summary: 'Open message flags in a community',\n      description: `Requires \\`communities:moderate\\`. The messages in the community's chats with open flags, with the flags and the chat each is in. Holds at most the 100 oldest open flags; working the queue brings in the next ones.`,\n      params: CommunityIdParam,\n      response: { 200: MessageQueue, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return container.chats.messageQueue(req.params.communityId, actor);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities/:communityId/spaces',\n    schema: {\n      operationId: 'listCommunitySpaces',\n      tags,\n      summary: 'List the spaces in a community',\n      description: `Requires one of \\`communities:read\\`, \\`communities:moderate\\`. Every space in order, with its topics and links.`,\n      params: CommunityIdParam,\n      response: { 200: z.array(SpaceDetail), ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return content.listSpaces(req.params.communityId, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/communities/:communityId/spaces',\n    schema: {\n      operationId: 'createSpace',\n      tags,\n      summary: 'Create a space',\n      description: `Requires \\`communities:write\\`. The space is added last. An \\`all_members\\` space cannot have a capacity (409).`,\n      params: CommunityIdParam,\n      body: CreateSpace,\n      response: { 201: SpaceDetail, ...refusals(403, 404, 409) },\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const space = await content.createSpace(req.params.communityId, req.body, actor);\n      return reply.code(201).send(space);\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/communities/:communityId/spaces/order',\n    schema: {\n      operationId: 'reorderSpaces',\n      tags,\n      summary: 'Reorder the spaces in a community',\n      description: `Requires \\`communities:write\\`. Send every space id of the community exactly once (409 otherwise).`,\n      params: CommunityIdParam,\n      body: OrderedIds,\n      response: { 200: z.array(SpaceDetail), ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return content.reorderSpaces(req.params.communityId, req.body.ids, actor);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/communities/:communityId/spaces/:spaceId',\n    schema: {\n      operationId: 'getSpace',\n      tags,\n      summary: 'Get a space',\n      description: `Requires \\`communities:read\\`. The space with its topics and links.`,\n      params: CommunitySpaceParam,\n      response: { 200: SpaceDetail, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return content.getCommunitySpace(req.params.communityId, req.params.spaceId, actor);\n    },\n  });\n\n  r.route({\n    method: 'PATCH',\n    url: '/api/communities/:communityId/spaces/:spaceId',\n    schema: {\n      operationId: 'updateSpace',\n      tags,\n      summary: 'Update a space',\n      description: `Requires \\`communities:write\\`. Changes only the fields sent; \\`settings\\` merges into the current settings. An \\`all_members\\` space cannot have a capacity (409).`,\n      params: CommunitySpaceParam,\n      body: UpdateSpace,\n      response: { 200: SpaceDetail, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return content.updateSpace(req.params.communityId, req.params.spaceId, req.body, actor);\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/communities/:communityId/spaces/:spaceId',\n    schema: {\n      operationId: 'deleteSpace',\n      tags,\n      summary: 'Delete a space',\n      description: `Requires \\`communities:write\\`. The space and everything in it go.`,\n      params: CommunitySpaceParam,\n      response: { 204: z.void(), ...refusals(403, 404) },\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      await content.deleteSpace(req.params.communityId, req.params.spaceId, actor);\n      return reply.code(204).send();\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/communities/:communityId/spaces/:spaceId/topics',\n    schema: {\n      operationId: 'setSpaceTopics',\n      tags,\n      summary: 'Replace the topics on a space',\n      description: `Requires \\`communities:write\\`. The list replaces the current topics: an entry with an \\`id\\` keeps and renames that topic, one without adds a topic, and a topic left out is deleted. Names must be unique (409), and a topic that posts use cannot be deleted (409).`,\n      params: CommunitySpaceParam,\n      body: SetSpaceTopics,\n      response: { 200: SpaceDetail, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return content.setSpaceTopics(req.params.communityId, req.params.spaceId, req.body, actor);\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/communities/:communityId/spaces/:spaceId/links',\n    schema: {\n      operationId: 'addSpaceLink',\n      tags,\n      summary: 'Link a course, download, or community into a space',\n      description: `Requires \\`communities:write\\`. The link is added last. Linking the same content twice is a 409.`,\n      params: CommunitySpaceParam,\n      body: SpaceLinkBody,\n      response: { 201: SpaceDetail, ...refusals(403, 404, 409) },\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const space = await content.addSpaceLink(\n        req.params.communityId,\n        req.params.spaceId,\n        req.body.contentId,\n        actor,\n      );\n      return reply.code(201).send(space);\n    },\n  });\n\n  r.route({\n    method: 'DELETE',\n    url: '/api/communities/:communityId/spaces/:spaceId/links/:linkId',\n    schema: {\n      operationId: 'removeSpaceLink',\n      tags,\n      summary: 'Remove a link from a space',\n      description: `Requires \\`communities:write\\`. The linked content itself is untouched.`,\n      params: SpaceLinkParam,\n      response: { 200: SpaceDetail, ...refusals(403, 404) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return content.removeSpaceLink(\n        req.params.communityId,\n        req.params.spaceId,\n        req.params.linkId,\n        actor,\n      );\n    },\n  });\n\n  r.route({\n    method: 'PUT',\n    url: '/api/communities/:communityId/spaces/:spaceId/links/order',\n    schema: {\n      operationId: 'reorderSpaceLinks',\n      tags,\n      summary: 'Reorder the links in a space',\n      description: `Requires \\`communities:write\\`. Send every link id of the space exactly once (409 otherwise).`,\n      params: CommunitySpaceParam,\n      body: OrderedIds,\n      response: { 200: SpaceDetail, ...refusals(403, 404, 409) },\n    },\n    handler: async (req) => {\n      const actor = await resolveActor(container, req);\n      return content.reorderSpaceLinks(\n        req.params.communityId,\n        req.params.spaceId,\n        req.body.ids,\n        actor,\n      );\n    },\n  });\n}\n"],"mappings":";;;;;;;;AA4BA,eAAsB,kBAAkB,KAAsB,WAAqC;CACjG,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,UAAU,UAAU;CAC1B,MAAM,OAAO,CAAC,aAAa;CAE3B,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,aAAa;GACb,UAAU;IAAE,KAAK;IAAiB,GAAG,SAAS,GAAG;GAAE;EACrD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,gBAAgB,IAAI,OAAO,KAAK;EACjD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,MAAM;GACN,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,GAAG;GAAE;EACpD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,YAAY,MAAM,QAAQ,gBAAgB,IAAI,MAAM,KAAK;GAC/D,IAAI,IAAI,KAAK,EAAE,aAAa,UAAU,GAAG,GAAG,mBAAmB;GAC/D,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,SAAS;EACvC;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,GAAG;GAAE;EACpD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,aAAa,IAAI,OAAO,aAAa,KAAK;EAC3D;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACzD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,gBAAgB,IAAI,OAAO,aAAa,IAAI,MAAM,KAAK;EACxE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,QAAQ,gBAAgB,IAAI,OAAO,aAAa,KAAK;GAC3D,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,GAAG;GAAE;EACpD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,uBAAuB,IAAI,OAAO,aAAa,IAAI,MAAM,KAAK;EAC/E;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,eAAe;GACtB,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAA0B,GAAG,SAAS,KAAK,GAAG;GAAE;EACnE;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,UAAU,uBAAuB,UAAU,IAAI,IAAI,OAAO,aAAa,KAAK;EACrF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,eAAe;GACtB,SAAS;GACT,aAAa;GACb,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAA0B,GAAG,SAAS,KAAK,KAAK,KAAK,GAAG;GAAE;EAC7E;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,UAAU,uBAAuB,UAAU,QAChD,IAAI,OAAO,aACX,IAAI,KAAK,YACT,KACF;EACF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb,MAAM,CAAC,eAAe;GACtB,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,UAAU,uBAAuB,UAAU,MAAM,IAAI,OAAO,aAAa,KAAK;GACpF,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACzD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,iBAAiB,IAAI,OAAO,aAAa,KAAK;EAC/D;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAW,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACzD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,mBAAmB,IAAI,OAAO,aAAa,KAAK;EACjE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAoB,GAAG,SAAS,KAAK,GAAG;GAAE;EAC7D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,UAAU,UAAU,MAAM,mBAAmB,IAAI,OAAO,aAAa,KAAK;EACnF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAc,GAAG,SAAS,KAAK,GAAG;GAAE;EACvD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,UAAU,MAAM,aAAa,IAAI,OAAO,aAAa,KAAK;EACnE;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,MAAM,WAAW;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EAC/D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,WAAW,IAAI,OAAO,aAAa,KAAK;EACzD;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,QAAQ,MAAM,QAAQ,YAAY,IAAI,OAAO,aAAa,IAAI,MAAM,KAAK;GAC/E,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK;EACnC;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK,EAAE,MAAM,WAAW;IAAG,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EACpE;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,cAAc,IAAI,OAAO,aAAa,IAAI,KAAK,KAAK,KAAK;EAC1E;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,GAAG;GAAE;EACtD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,kBAAkB,IAAI,OAAO,aAAa,IAAI,OAAO,SAAS,KAAK;EACpF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,YAAY,IAAI,OAAO,aAAa,IAAI,OAAO,SAAS,IAAI,MAAM,KAAK;EACxF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK,EAAE,KAAK;IAAG,GAAG,SAAS,KAAK,GAAG;GAAE;EACnD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,QAAQ,YAAY,IAAI,OAAO,aAAa,IAAI,OAAO,SAAS,KAAK;GAC3E,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;EAC9B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,eAAe,IAAI,OAAO,aAAa,IAAI,OAAO,SAAS,IAAI,MAAM,KAAK;EAC3F;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,MAAM,QAAQ,MAAM,QAAQ,aAC1B,IAAI,OAAO,aACX,IAAI,OAAO,SACX,IAAI,KAAK,WACT,KACF;GACA,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK;EACnC;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,GAAG;GAAE;EACtD;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,gBACb,IAAI,OAAO,aACX,IAAI,OAAO,SACX,IAAI,OAAO,QACX,KACF;EACF;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAa,GAAG,SAAS,KAAK,KAAK,GAAG;GAAE;EAC3D;EACA,SAAS,OAAO,QAAQ;GACtB,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAC/C,OAAO,QAAQ,kBACb,IAAI,OAAO,aACX,IAAI,OAAO,SACX,IAAI,KAAK,KACT,KACF;EACF;CACF,CAAC;AACH"}

package/dist/http/routes/community-moderation.js

@@ -1,12 +1,11 @@
 import { PageQuery, refusals } from "../schemas/shared.js";
-import { resolveScope } from "../scope.js";
+import { resolveActor } from "../scope.js";
 import { CommentView, ResolveCommentFlags } from "../schemas/discussion.js";
 import { CommunityChatParam, CommunityCommentParam, CommunityIdParam, CommunityMembersPage, CommunityMembersQuery, CommunityMessageParam, CommunityPostParam, CommunitySpaceParam, SpaceMember, SpaceMemberParam, SpaceMembersPage } from "../schemas/community.js";
 import { PostView, ResolvePostFlags, SpaceQueue } from "../schemas/posts.js";
 import { Chat, OrgUserBody, ResolveMessageFlags } from "../schemas/chats.js";
 import "../schemas/index.js";
 import { z } from "zod";
-import { NotFoundError } from "@headless-lms/core/shared/errors";
 //#region src/http/routes/community-moderation.ts
 async function communityModerationRoutes(app, container) {
 	const r = app.withTypeProvider();
@@ -17,8 +16,8 @@ async function communityModerationRoutes(app, container) {
 		schema: {
 			operationId: "listCommunityMembers",
 			tags,
-			summary: "List the people who hold a community (staff)",
-			description: "Staff only (owner, admin, instructor). Everyone with active access to the community, granted directly or through a bundle, paged and searched by name or email.",
+			summary: "List the people who hold a community",
+			description: `Requires \`access:read\`. Everyone with active access to the community, granted directly or through a bundle, paged and searched by name or email.`,
 			params: CommunityIdParam,
 			querystring: CommunityMembersQuery,
 			response: {
@@ -27,10 +26,8 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const scope = await resolveScope(container, req);
-			const page = await container.reporting.admin.communityMembers(scope.orgId, req.params.communityId, req.query);
-			if (!page) throw new NotFoundError("Community", req.params.communityId);
-			return page;
+			const actor = await resolveActor(container, req);
+			return container.reporting.admin.communityMembers(req.params.communityId, req.query, actor);
 		}
 	});
 	r.route({
@@ -39,8 +36,8 @@ async function communityModerationRoutes(app, container) {
 		schema: {
 			operationId: "listCommunitySpaceMembers",
 			tags,
-			summary: "List the members, requests and invitations of a space (staff)",
-			description: "Staff only (owner, admin, instructor). The space's members, its open requests to join and its open invitations.",
+			summary: "List the members, requests and invitations of a space",
+			description: `For a person who can open the space. Its members; a holder of \`communities:moderate\` on the community also sees its open requests to join and open invitations. People who open every space of the community through their role are not listed. 404 when you cannot open the space.`,
 			params: CommunitySpaceParam,
 			querystring: PageQuery,
 			response: {
@@ -49,11 +46,8 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const scope = await resolveScope(container, req);
-			return container.entitlements.listSpaceMembers(scope.orgId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.communityId, req.params.spaceId, req.query);
+			const actor = await resolveActor(container, req);
+			return container.entitlements.listSpaceMembers(req.params.communityId, req.params.spaceId, req.query, actor);
 		}
 	});
 	r.route({
@@ -62,8 +56,8 @@ async function communityModerationRoutes(app, container) {
 		schema: {
 			operationId: "addCommunitySpaceMember",
 			tags,
-			summary: "Add a person to a space (staff)",
-			description: "Staff only (owner, admin, instructor). Places a member of the community straight into the space, with no request or invitation. 409 when the space is open to all members, the person is already placed, or the space is full.",
+			summary: "Add a person to a space",
+			description: `Requires \`communities:moderate\`. Places a member of the community straight into the space, with no request or invitation. 409 when the space is open to all members, the person is already placed, or the space is full.`,
 			params: CommunitySpaceParam,
 			body: OrgUserBody,
 			response: {
@@ -72,11 +66,8 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req, reply) => {
-			const scope = await resolveScope(container, req);
-			const member = await container.entitlements.addSpaceMember(scope.orgId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.communityId, req.params.spaceId, req.body.orgUserId);
+			const actor = await resolveActor(container, req);
+			const member = await container.entitlements.addSpaceMember(req.params.communityId, req.params.spaceId, req.body.orgUserId, actor);
 			return reply.code(201).send(member);
 		}
 	});
@@ -86,8 +77,8 @@ async function communityModerationRoutes(app, container) {
 		schema: {
 			operationId: "inviteCommunitySpaceMember",
 			tags,
-			summary: "Invite a person into a space (staff)",
-			description: "Staff only (owner, admin, instructor). Invites a member of the community into a `by_invite` space; they join when they accept. 403 when the person is staff or does not hold the community; 409 when the space is not invite-only or the person is already placed.",
+			summary: "Invite a person into a space",
+			description: `Requires \`communities:moderate\`. Invites a member of the community into a \`by_invite\` space; they join when they accept. 403 when the person opens every space or is not a member of the community; 409 when the space is not invite-only or the person is already placed.`,
 			params: CommunitySpaceParam,
 			body: OrgUserBody,
 			response: {
@@ -96,22 +87,19 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req, reply) => {
-			const scope = await resolveScope(container, req);
-			const member = await container.entitlements.invite(scope.orgId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.communityId, req.params.spaceId, req.body.orgUserId);
+			const actor = await resolveActor(container, req);
+			const member = await container.entitlements.invite(req.params.communityId, req.params.spaceId, req.body.orgUserId, actor);
 			return reply.code(201).send(member);
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/communities/:communityId/spaces/:spaceId/members/:orgUserId/approval",
+		url: "/api/communities/:communityId/spaces/:spaceId/members/:orgUserId/approve",
 		schema: {
 			operationId: "approveCommunitySpaceRequest",
 			tags,
-			summary: "Approve a person's request to join a space (staff)",
-			description: "Staff only (owner, admin, instructor). Makes the requester an active member. 404 when the person has no open request; 409 when the space is full or they are already a member.",
+			summary: "Approve a person's request to join a space",
+			description: `Requires \`communities:moderate\`. Makes the requester an active member. 404 when the person has no open request; 409 when the space is full or they are already a member.`,
 			params: SpaceMemberParam,
 			response: {
 				200: SpaceMember,
@@ -119,11 +107,8 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const scope = await resolveScope(container, req);
-			return container.entitlements.approve(scope.orgId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.communityId, req.params.spaceId, req.params.orgUserId);
+			const actor = await resolveActor(container, req);
+			return container.entitlements.approve(req.params.communityId, req.params.spaceId, req.params.orgUserId, actor);
 		}
 	});
 	r.route({
@@ -132,8 +117,8 @@ async function communityModerationRoutes(app, container) {
 		schema: {
 			operationId: "declineCommunitySpaceRequest",
 			tags,
-			summary: "Decline a person's request to join a space (staff)",
-			description: "Staff only (owner, admin, instructor). Closes the open request. 404 when the person has no open request; 409 when they are already a member.",
+			summary: "Decline a person's request to join a space",
+			description: `Requires \`communities:moderate\`. Closes the open request. 404 when the person has no open request; 409 when they are already a member.`,
 			params: SpaceMemberParam,
 			response: {
 				200: SpaceMember,
@@ -141,21 +126,18 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const scope = await resolveScope(container, req);
-			return container.entitlements.decline(scope.orgId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.communityId, req.params.spaceId, req.params.orgUserId);
+			const actor = await resolveActor(container, req);
+			return container.entitlements.decline(req.params.communityId, req.params.spaceId, req.params.orgUserId, actor);
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/communities/:communityId/spaces/:spaceId/members/:orgUserId/removal",
+		url: "/api/communities/:communityId/spaces/:spaceId/members/:orgUserId/remove",
 		schema: {
 			operationId: "removeCommunitySpaceMember",
 			tags,
-			summary: "Remove a person from a space (staff)",
-			description: "Staff only (owner, admin, instructor). Revokes the placement, whether it is a membership, a request or an invitation. 409 when the space is open to all members or the placement is already revoked.",
+			summary: "Remove a person from a space",
+			description: `Requires \`communities:moderate\`. Revokes the placement, whether it is a membership, a request or an invitation. 409 when the space is open to all members or the placement is already revoked.`,
 			params: SpaceMemberParam,
 			response: {
 				200: SpaceMember,
@@ -163,11 +145,8 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const scope = await resolveScope(container, req);
-			return container.entitlements.remove(scope.orgId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.communityId, req.params.spaceId, req.params.orgUserId);
+			const actor = await resolveActor(container, req);
+			return container.entitlements.remove(req.params.communityId, req.params.spaceId, req.params.orgUserId, actor);
 		}
 	});
 	r.route({
@@ -176,8 +155,8 @@ async function communityModerationRoutes(app, container) {
 		schema: {
 			operationId: "getCommunitySpaceQueue",
 			tags,
-			summary: "The moderation queue of a space (staff)",
-			description: "Staff only (owner, admin, instructor). Posts awaiting review, and the open flags on posts and on comments in the space. Each list holds at most the 100 oldest entries: pending posts by creation, flags by when they were raised; working the queue brings in the next ones.",
+			summary: "The moderation queue of a space",
+			description: `Requires \`communities:moderate\`. Posts awaiting review, and the open flags on posts and on comments in the space. Each list holds at most the 100 oldest entries: pending posts by creation, flags by when they were raised; working the queue brings in the next ones.`,
 			params: CommunitySpaceParam,
 			response: {
 				200: SpaceQueue,
@@ -185,21 +164,18 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const scope = await resolveScope(container, req);
-			return container.posts.moderationQueue(scope.orgId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.communityId, req.params.spaceId);
+			const actor = await resolveActor(container, req);
+			return container.posts.moderationQueue(req.params.communityId, req.params.spaceId, actor);
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/communities/:communityId/posts/:postId/approval",
+		url: "/api/communities/:communityId/posts/:postId/approve",
 		schema: {
 			operationId: "approveCommunityPost",
 			tags,
-			summary: "Publish a post that is awaiting review (staff)",
-			description: "Staff only (owner, admin, instructor). 409 when the post is not awaiting review.",
+			summary: "Publish a post that is awaiting review",
+			description: `Requires \`communities:moderate\`. 409 when the post is not awaiting review.`,
 			params: CommunityPostParam,
 			response: {
 				200: PostView,
@@ -207,21 +183,18 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const scope = await resolveScope(container, req);
-			return container.posts.approve(scope.orgId, req.params.postId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.communityId);
+			const actor = await resolveActor(container, req);
+			return container.posts.approve(req.params.postId, req.params.communityId, actor);
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/communities/:communityId/posts/:postId/removal",
+		url: "/api/communities/:communityId/posts/:postId/remove",
 		schema: {
 			operationId: "removeCommunityPost",
 			tags,
-			summary: "Remove a post (staff)",
-			description: "Staff only (owner, admin, instructor). Takes a published or pending post down and resolves its open flags as `removed`. 409 when it is already removed or was never submitted.",
+			summary: "Remove a post",
+			description: `The author can remove their own post; anyone else needs \`communities:moderate\` on the community. Takes a published or pending post down; removing someone else's post resolves its open flags as \`removed\`. 409 when it is already removed or was never submitted.`,
 			params: CommunityPostParam,
 			response: {
 				200: PostView,
@@ -229,21 +202,18 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const scope = await resolveScope(container, req);
-			return container.posts.remove(scope.orgId, req.params.postId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.communityId);
+			const actor = await resolveActor(container, req);
+			return container.posts.remove(req.params.postId, req.params.communityId, actor);
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/communities/:communityId/posts/:postId/restoration",
+		url: "/api/communities/:communityId/posts/:postId/restore",
 		schema: {
 			operationId: "restoreCommunityPost",
 			tags,
-			summary: "Restore a removed post (staff)",
-			description: "Staff only (owner, admin, instructor). 409 when the post is not removed.",
+			summary: "Restore a removed post",
+			description: `Requires \`communities:moderate\`. 409 when the post is not removed.`,
 			params: CommunityPostParam,
 			response: {
 				200: PostView,
@@ -251,21 +221,18 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const scope = await resolveScope(container, req);
-			return container.posts.restore(scope.orgId, req.params.postId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.communityId);
+			const actor = await resolveActor(container, req);
+			return container.posts.restore(req.params.postId, req.params.communityId, actor);
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/communities/:communityId/posts/:postId/flags/resolution",
+		url: "/api/communities/:communityId/posts/:postId/flags/resolve",
 		schema: {
 			operationId: "resolveCommunityPostFlags",
 			tags,
-			summary: "Dismiss the open flags on a post (staff)",
-			description: "Staff only (owner, admin, instructor). Closes every open flag on the post and leaves it up.",
+			summary: "Dismiss the open flags on a post",
+			description: `Requires \`communities:moderate\`. Closes every open flag on the post and leaves it up.`,
 			params: CommunityPostParam,
 			body: ResolvePostFlags,
 			response: {
@@ -274,22 +241,19 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req, reply) => {
-			const scope = await resolveScope(container, req);
-			await container.posts.resolveFlags(scope.orgId, req.params.postId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.body.resolution, req.params.communityId);
+			const actor = await resolveActor(container, req);
+			await container.posts.resolveFlags(req.params.postId, req.body.resolution, req.params.communityId, actor);
 			return reply.code(204).send();
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/communities/:communityId/comments/:commentId/removal",
+		url: "/api/communities/:communityId/comments/:commentId/remove",
 		schema: {
 			operationId: "removeCommunityComment",
 			tags,
-			summary: "Remove a comment on a post (staff)",
-			description: "Staff only (owner, admin, instructor). Hides the comment and resolves its open flags as `removed`. Removing a removed comment returns it unchanged.",
+			summary: "Remove a comment on a post",
+			description: `The author can remove their own comment; anyone else needs \`communities:moderate\` on the community. Hides the comment; removing someone else's comment resolves its open flags as \`removed\`. Removing a removed comment returns it unchanged.`,
 			params: CommunityCommentParam,
 			response: {
 				200: CommentView,
@@ -297,21 +261,18 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const scope = await resolveScope(container, req);
-			return container.discussion.remove(scope.orgId, req.params.commentId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.communityId);
+			const actor = await resolveActor(container, req);
+			return container.discussion.remove(req.params.commentId, { communityId: req.params.communityId }, actor);
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/communities/:communityId/comments/:commentId/restoration",
+		url: "/api/communities/:communityId/comments/:commentId/restore",
 		schema: {
 			operationId: "restoreCommunityComment",
 			tags,
-			summary: "Restore a removed comment on a post (staff)",
-			description: "Staff only (owner, admin, instructor). Publishes the comment again. Restoring a comment that is not removed returns it unchanged.",
+			summary: "Restore a removed comment on a post",
+			description: `Requires one of \`courses:moderate\`, \`communities:moderate\`. Publishes the comment again. Restoring a comment that is not removed returns it unchanged.`,
 			params: CommunityCommentParam,
 			response: {
 				200: CommentView,
@@ -319,21 +280,18 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const scope = await resolveScope(container, req);
-			return container.discussion.restore(scope.orgId, req.params.commentId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.communityId);
+			const actor = await resolveActor(container, req);
+			return container.discussion.restore(req.params.commentId, { communityId: req.params.communityId }, actor);
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/communities/:communityId/comments/:commentId/flags/resolution",
+		url: "/api/communities/:communityId/comments/:commentId/flags/resolve",
 		schema: {
 			operationId: "resolveCommunityCommentFlags",
 			tags,
-			summary: "Dismiss the open flags on a comment (staff)",
-			description: "Staff only (owner, admin, instructor). Closes every open flag on the comment and leaves it up.",
+			summary: "Dismiss the open flags on a comment",
+			description: `Requires one of \`courses:moderate\`, \`communities:moderate\`. Closes every open flag on the comment and leaves it up.`,
 			params: CommunityCommentParam,
 			body: ResolveCommentFlags,
 			response: {
@@ -342,22 +300,19 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req, reply) => {
-			const scope = await resolveScope(container, req);
-			await container.discussion.resolveReports(scope.orgId, req.params.commentId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.communityId);
+			const actor = await resolveActor(container, req);
+			await container.discussion.resolveReports(req.params.commentId, { communityId: req.params.communityId }, actor);
 			return reply.code(204).send();
 		}
 	});
 	r.route({
 		method: "POST",
-		url: "/api/communities/:communityId/messages/:messageId/flags/resolution",
+		url: "/api/communities/:communityId/messages/:messageId/flags/resolve",
 		schema: {
 			operationId: "resolveCommunityMessageFlags",
 			tags,
-			summary: "Dismiss the open flags on a message (staff)",
-			description: "Staff only (owner, admin, instructor). Closes every open flag on the message and leaves it up.",
+			summary: "Dismiss the open flags on a message",
+			description: `Requires \`communities:moderate\`. Closes every open flag on the message and leaves it up.`,
 			params: CommunityMessageParam,
 			body: ResolveMessageFlags,
 			response: {
@@ -366,11 +321,8 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req, reply) => {
-			const scope = await resolveScope(container, req);
-			await container.chats.resolveMessageFlags(scope.orgId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.messageId, req.body.resolution, req.params.communityId);
+			const actor = await resolveActor(container, req);
+			await container.chats.resolveMessageFlags(req.params.messageId, req.body.resolution, req.params.communityId, actor);
 			return reply.code(204).send();
 		}
 	});
@@ -380,8 +332,8 @@ async function communityModerationRoutes(app, container) {
 		schema: {
 			operationId: "lockCommunityChat",
 			tags,
-			summary: "Lock a chat (staff)",
-			description: "Staff only (owner, admin, instructor). Nobody can send or edit messages until it is unlocked; its open message flags are resolved as `locked`. Locking a locked chat returns it unchanged.",
+			summary: "Lock a chat",
+			description: `Requires \`communities:moderate\`. Nobody can send or edit messages until it is unlocked; its open message flags are resolved as \`locked\`. Locking a locked chat returns it unchanged.`,
 			params: CommunityChatParam,
 			response: {
 				200: Chat,
@@ -389,11 +341,8 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const scope = await resolveScope(container, req);
-			return container.chats.lock(scope.orgId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.chatId, req.params.communityId);
+			const actor = await resolveActor(container, req);
+			return container.chats.lock(req.params.chatId, req.params.communityId, actor);
 		}
 	});
 	r.route({
@@ -402,8 +351,8 @@ async function communityModerationRoutes(app, container) {
 		schema: {
 			operationId: "unlockCommunityChat",
 			tags,
-			summary: "Unlock a chat (staff)",
-			description: "Staff only (owner, admin, instructor). Lets participants send messages again. Unlocking an unlocked chat returns it unchanged.",
+			summary: "Unlock a chat",
+			description: `Requires \`communities:moderate\`. Lets participants send messages again. Unlocking an unlocked chat returns it unchanged.`,
 			params: CommunityChatParam,
 			response: {
 				200: Chat,
@@ -411,11 +360,8 @@ async function communityModerationRoutes(app, container) {
 			}
 		},
 		handler: async (req) => {
-			const scope = await resolveScope(container, req);
-			return container.chats.unlock(scope.orgId, {
-				id: scope.orgUserId,
-				role: scope.role
-			}, req.params.chatId, req.params.communityId);
+			const actor = await resolveActor(container, req);
+			return container.chats.unlock(req.params.chatId, req.params.communityId, actor);
 		}
 	});
 }