@headless-lms/server 0.4.0 → 0.5.0

package/dist/app/container.js

@@ -3,7 +3,8 @@ import { loadIntegrations } from "./integrations.js";
 import { mcpEndpoints } from "./mcp-endpoints.js";
 import { communityMail } from "./community-mail.js";
 import { notificationReads } from "./notification-reads.js";
-import { DrizzleAdminRepository, DrizzleAssetsRepository, DrizzleAutomationRunsRepository, DrizzleAutomationsRepository, DrizzleChatRepository, DrizzleConnectionsRepository, DrizzleContentRepository, DrizzleCredentialStore, DrizzleDevicesRepository, DrizzleDigestRunRepository, DrizzleDiscussionRepository, DrizzleEntitlementsRepository, DrizzleIdentityRepository, DrizzleMemberRepository, DrizzleMembersRepository, DrizzleMentionsRepository, DrizzleNotificationSettingsRepository, DrizzleNotificationsRepository, DrizzleOrganizationsRepository, DrizzleOutboxAppender, DrizzleOutboxStore, DrizzlePostRepository, DrizzleProgressRepository, DrizzleSettingsRepository, DrizzleSubscriptionsRepository, DrizzleUnitOfWork, createDb } from "@headless-lms/adapter-db";
+import { platformKeyCheck } from "./platform.js";
+import { DrizzleAdminRepository, DrizzleAssetsRepository, DrizzleAutomationRunsRepository, DrizzleAutomationsRepository, DrizzleChatRepository, DrizzleConnectionsRepository, DrizzleContentRepository, DrizzleCredentialStore, DrizzleDevicesRepository, DrizzleDigestRunRepository, DrizzleDiscussionRepository, DrizzleEntitlementsRepository, DrizzleIdentityRepository, DrizzleMemberRepository, DrizzleMembersRepository, DrizzleMentionsRepository, DrizzleNotificationSettingsRepository, DrizzleNotificationsRepository, DrizzleOrganizationsRepository, DrizzleOutboxAppender, DrizzleOutboxStore, DrizzlePostRepository, DrizzleProgressRepository, DrizzleRolesRepository, DrizzleSettingsRepository, DrizzleSubscriptionsRepository, DrizzleUnitOfWork, createDb } from "@headless-lms/adapter-db";
 import { InMemoryEventBus } from "@headless-lms/adapter-defaults/events";
 import { PollingOutboxRelay } from "@headless-lms/adapter-defaults/events/outbox-relay";
 import { InlineAutomationEngine } from "@headless-lms/adapter-defaults/workflows";
@@ -11,13 +12,14 @@ import { FetchWebhookSender } from "@headless-lms/adapter-defaults/webhooks";
 import { EmailAdapter, StubTemplateRenderer } from "@headless-lms/adapter-defaults/email";
 import { createRootLogger, requestLogContext } from "@headless-lms/adapter-defaults/logging";
 import { StorageAdapter } from "@headless-lms/adapter-defaults/storage";
+import { PlainBodyParser } from "@headless-lms/adapter-defaults/body";
 import { BetterAuth } from "@headless-lms/adapter-auth";
-import { CommunityNotificationCategories, ContentItemTitles, ContentService } from "@headless-lms/core/content";
+import { CommunityNotificationCategories, ContentItemTitles, ContentService, contentJobs } from "@headless-lms/core/content";
 import { EntitlementsServiceImpl, entitlementsJobs, entitlementsRecurringJobs } from "@headless-lms/core/entitlements";
 import { ProgressServiceImpl } from "@headless-lms/core/progress";
-import { ChatServiceImpl, DigestServiceImpl, DiscussionItemTitles, DiscussionServiceImpl, PostServiceImpl, SubscriptionServiceImpl, discussionJobs, discussionRecurringJobs } from "@headless-lms/core/discussion";
+import { ChatLiveForwarder, ChatServiceImpl, DigestServiceImpl, DiscussionItemTitles, DiscussionServiceImpl, PostServiceImpl, SubscriptionServiceImpl, discussionJobs, discussionRecurringJobs } from "@headless-lms/core/discussion";
 import { DevicesServiceImpl, IdentityServiceImpl, NotificationSettingsServiceImpl } from "@headless-lms/core/identity";
-import { OrgNotificationCategories, OrganizationServiceImpl, parseRole } from "@headless-lms/core/organizations";
+import { NotificationCatalog, OrgNotificationCategories, OrganizationServiceImpl } from "@headless-lms/core/organizations";
 import { AssetsServiceImpl, assetsJobs, assetsRecurringJobs, createFileUrls } from "@headless-lms/core/assets";
 import { IntegrationsServiceImpl } from "@headless-lms/core/integrations";
 import { AutomationsServiceImpl, DEFAULT_COMMUNITY_CATEGORIES, DEFAULT_ORG_CATEGORIES, NOTIFICATION_TYPES, NotificationDelivery, NotificationProcessor, NotificationsServiceImpl, RECIPIENT_RULES, SchedulerChatDebounce, notificationJobs } from "@headless-lms/core/automations";
@@ -54,12 +56,15 @@ async function buildContainer(config, options) {
 	const automationsLogger = logger.child({ name: "automations" });
 	const reportingLogger = logger.child({ name: "reporting" });
 	const outboxLogger = logger.child({ name: "outbox" });
-	const db = createDb(config.databaseUrl);
+	const db = createDb(config.databaseUrl, logger.child({ name: "db" }), config.databasePool);
 	const email = options?.adapters?.email ?? new EmailAdapter(logger.child({ name: "email" }));
 	const storage = options?.adapters?.storage ?? new StorageAdapter(logger.child({ name: "storage" }));
 	const templates = options?.adapters?.templates ?? new StubTemplateRenderer(logger.child({ name: "email" }));
+	const bodies = options?.adapters?.bodyParser ?? new PlainBodyParser();
 	const workflows = options?.adapters?.workflows;
 	const automationEngine = typeof workflows === "function" ? workflows(automationsLogger) : workflows ?? new InlineAutomationEngine(automationsLogger);
+	const pubsubOption = options?.adapters?.pubsub;
+	const pubsub = typeof pubsubOption === "function" ? pubsubOption(logger.child({ name: "pubsub" })) : pubsubOption ?? null;
 	const mailer = new Mailer(templates, email, {
 		...config.emailBranding ?? {
 			brandName: "Headless LMS",
@@ -67,7 +72,7 @@ async function buildContainer(config, options) {
 		},
 		studentPortalUrl: config.studentPortalUrl
 	});
-	const fileUrls = createFileUrls(config.authBaseURL);
+	const fileUrls = createFileUrls(config.authBaseURL, (key) => storage.publicUrl(key));
 	const assets = new AssetsServiceImpl({
 		storage,
 		repo: new DrizzleAssetsRepository(db, assetsLogger),
@@ -76,6 +81,7 @@ async function buildContainer(config, options) {
 			outbox: new DrizzleOutboxAppender(tx, outboxLogger)
 		})),
 		memberImageMaxBytes: config.memberImageMaxBytes,
+		memberFileMaxBytes: config.memberFileMaxBytes,
 		downloadLinkExpirySeconds: config.deliveryExpirySeconds,
 		fileUrls,
 		logger: assetsLogger
@@ -95,24 +101,46 @@ async function buildContainer(config, options) {
 	const organizationsRepo = new DrizzleOrganizationsRepository(db, logger.child({ name: "org" }));
 	const organizationsUow = new DrizzleUnitOfWork(db, (tx) => ({
 		organizations: new DrizzleOrganizationsRepository(tx, logger.child({ name: "org" })),
+		roles: new DrizzleRolesRepository(tx),
 		outbox: new DrizzleOutboxAppender(tx, logger.child({ name: "org" }))
 	}));
 	const orgAdminRef = { current: void 0 };
+	const platform = config.platform ? platformKeyCheck(config.platform) : null;
 	const organizations = new OrganizationServiceImpl({
 		repo: organizationsRepo,
+		roles: new DrizzleRolesRepository(db),
+		...options?.roles && { defaultRoles: options.roles },
+		apiKeys: () => {
+			if (!orgAdminRef.current) throw new Error("api keys not initialised");
+			return orgAdminRef.current;
+		},
+		accounts: () => {
+			if (!orgAdminRef.current) throw new Error("accounts not initialised");
+			return orgAdminRef.current;
+		},
+		...config.platform && { platform: {
+			email: config.platform.accountEmail,
+			name: config.platform.accountName ?? "Platform"
+		} },
 		membersRepo: new DrizzleMembersRepository(db, logger.child({ name: "org" })),
 		people: identity,
+		images: assets,
 		uow: organizationsUow,
 		orgAdmin: () => {
 			if (!orgAdminRef.current) throw new Error("orgAdmin not initialised");
 			return orgAdminRef.current;
 		},
+		sessions: () => {
+			if (!orgAdminRef.current) throw new Error("sessions not initialised");
+			return orgAdminRef.current;
+		},
 		logger: logger.child({ name: "org" }),
 		mailer,
 		inviteUrls: {
 			studentPortalUrl: config.studentPortalUrl,
 			adminAppUrl: config.adminAppUrl
-		}
+		},
+		grants: () => entitlements
 	});
 	const settings = new SettingsService(new DrizzleSettingsRepository(db, logger.child({ name: "settings" })));
 	const contentUow = new DrizzleUnitOfWork(db, (tx) => ({
@@ -125,6 +153,7 @@ async function buildContainer(config, options) {
 		libraryAssets: assets,
 		files: assets,
 		fileUrls,
+		scheduler: automationEngine,
 		logger: contentLogger
 	});
 	const pushConfig = options?.adapters?.push ?? {};
@@ -158,24 +187,21 @@ async function buildContainer(config, options) {
 			logger: logger.child({ name: "org" })
 		})
 	};
-	const notificationCategoryLists = { listFor: async (orgId, communityId) => (communityId ? await notificationCategories.community.get(orgId, communityId) : await notificationCategories.org.get(orgId, orgId)).categories };
+	const notificationCatalog = new NotificationCatalog({
+		types: notificationRegistries.types,
+		channels: notificationRegistries.channels
+	});
+	const notificationCategoryLists = { listFor: async (orgId, communityId) => (communityId ? await notificationCategories.community.get(communityId, organizations.systemActor(orgId)) : await notificationCategories.org.get(orgId, organizations.systemActor(orgId))).categories };
 	const entitlementsUow = new DrizzleUnitOfWork(db, (tx) => ({
 		entitlements: new DrizzleEntitlementsRepository(tx, entitlementsLogger),
 		spaces: new DrizzleContentRepository(tx, contentLogger),
 		outbox: new DrizzleOutboxAppender(tx, outboxLogger)
 	}));
-	const authors = {
-		roleOf: async (orgId, orgUserId) => {
-			return (await organizationsRepo.findOrgUserById(orgId, orgUserId))?.role ?? null;
-		},
-		rolesOf: async (orgId, orgUserIds) => {
-			const rows = await organizationsRepo.findOrgUsersByIds(orgId, orgUserIds);
-			return Object.fromEntries(rows.map((row) => [row.id, row.role]));
-		}
-	};
+	const authors = organizations;
 	const entitlements = new EntitlementsServiceImpl({
 		repo: new DrizzleEntitlementsRepository(db, entitlementsLogger),
 		content,
+		permissions: organizations,
 		uow: entitlementsUow,
 		logger: entitlementsLogger
 	});
@@ -183,10 +209,10 @@ async function buildContainer(config, options) {
 	const notificationSettings = new NotificationSettingsServiceImpl({
 		repo: new DrizzleNotificationSettingsRepository(db, identityLogger),
 		categories: {
-			communityList: async (orgId, communityId) => (await notificationCategories.community.get(orgId, communityId)).categories,
-			orgList: async (orgId) => (await notificationCategories.org.get(orgId, orgId)).categories
+			communityList: async (orgId, communityId) => (await notificationCategories.community.get(communityId, organizations.systemActor(orgId))).categories,
+			orgList: async (orgId) => (await notificationCategories.org.get(orgId, organizations.systemActor(orgId))).categories
 		},
-		access: { canOpen: (orgId, actor, communityId) => entitlements.isCommunityMember(orgId, actor, communityId) },
+		access: { canOpen: (orgId, actor, communityId) => entitlements.isCommunityMember(communityId, actor) },
 		channels: notificationRegistries.channels,
 		logger: identityLogger
 	});
@@ -203,6 +229,7 @@ async function buildContainer(config, options) {
 		repo: new DrizzleProgressRepository(db, progressLogger),
 		content,
 		access: entitlements,
+		system: organizations,
 		uow: progressUow,
 		logger: progressLogger
 	});
@@ -222,6 +249,7 @@ async function buildContainer(config, options) {
 		mentions: mentionReads,
 		images: assets,
 		fileUrls,
+		bodies,
 		uow: new DrizzleUnitOfWork(db, (tx) => ({
 			posts: new DrizzlePostRepository(tx, discussionLogger),
 			mentions: new DrizzleMentionsRepository(tx, discussionLogger),
@@ -245,6 +273,8 @@ async function buildContainer(config, options) {
 			mentions: new DrizzleMentionsRepository(tx, discussionLogger),
 			outbox: new DrizzleOutboxAppender(tx, outboxLogger)
 		})),
+		...pubsub && { pubsub },
+		...options?.live && { live: options.live },
 		logger: discussionLogger
 	});
 	const discussion = new DiscussionServiceImpl({
@@ -253,6 +283,7 @@ async function buildContainer(config, options) {
 		content,
 		posts,
 		spaces: entitlements,
+		authors,
 		mentions: mentionReads,
 		fileUrls,
 		uow: new DrizzleUnitOfWork(db, (tx) => ({
@@ -268,6 +299,10 @@ async function buildContainer(config, options) {
 		access: entitlements,
 		posts,
 		chats,
+		uow: new DrizzleUnitOfWork(db, (tx) => ({
+			subscriptions: new DrizzleSubscriptionsRepository(tx, discussionLogger),
+			outbox: new DrizzleOutboxAppender(tx, outboxLogger)
+		})),
 		logger: discussionLogger
 	});
 	const digests = new DigestServiceImpl({
@@ -292,15 +327,23 @@ async function buildContainer(config, options) {
 			messages: chatReads,
 			profiles: discussionReads,
 			activities: content,
-			access: entitlements
+			access: entitlements,
+			actors: organizations
 		}),
 		content: new ContentItemTitles({
 			content,
-			access: entitlements
+			access: entitlements,
+			organizations
 		})
 	};
 	const reporting = {
-		admin: new AdminReportServiceImpl({ repo: new DrizzleAdminRepository(db, reportingLogger) }),
+		admin: new AdminReportServiceImpl({
+			repo: new DrizzleAdminRepository(db, reportingLogger),
+			permissions: organizations,
+			spaces: entitlements,
+			events: content,
+			fileUrls
+		}),
 		member: new MemberReportServiceImpl({
 			repo: new DrizzleMemberRepository(db, reportingLogger),
 			content,
@@ -308,12 +351,14 @@ async function buildContainer(config, options) {
 			files: assets,
 			fileUrls,
 			access: entitlements,
+			people: organizations,
 			notifications: notificationList,
 			titles: itemTitles,
 			subscriptions,
 			notificationCategories,
 			notificationSettings,
-			channels: notificationRegistries.channels
+			channels: notificationRegistries.channels,
+			studentPortalUrl: config.studentPortalUrl
 		})
 	};
 	const credentialStore = new DrizzleCredentialStore(db, config.credentialStoreKey, integrationsLogger);
@@ -346,23 +391,30 @@ async function buildContainer(config, options) {
 			} : null;
 		},
 		contentInfo: async (orgId, contentId) => {
-			const course = await content.getCourse(orgId, contentId);
+			const system = organizations.systemActor(orgId);
+			const course = await content.findCourse(contentId, system);
 			if (course) return {
 				id: course.id,
 				title: course.title,
 				type: course.type
 			};
-			const download = await content.getDownload(orgId, contentId);
+			const download = await content.findDownload(contentId, system);
 			if (download) return {
 				id: download.id,
 				title: download.title,
 				type: download.type
 			};
-			const community = await content.getCommunity(orgId, contentId);
-			return community ? {
+			const community = await content.findCommunity(contentId, system);
+			if (community) return {
 				id: community.id,
 				title: community.title,
 				type: community.type
+			};
+			const event = await content.findEvent(contentId, system);
+			return event ? {
+				id: event.id,
+				title: event.title,
+				type: event.type
 			} : null;
 		}
 	};
@@ -375,7 +427,8 @@ async function buildContainer(config, options) {
 		posts,
 		subscriptions,
 		discussion,
-		chats
+		chats,
+		bodies
 	});
 	const recipientReads = notificationReads({
 		content,
@@ -386,6 +439,7 @@ async function buildContainer(config, options) {
 		subscriptions,
 		discussion,
 		chats,
+		bodies,
 		settings: notificationSettings
 	});
 	const notificationProcessor = new NotificationProcessor({
@@ -409,6 +463,7 @@ async function buildContainer(config, options) {
 		mailer,
 		lookups: mailerLookups,
 		integrations,
+		systemActor: (orgId) => organizations.systemActor(orgId),
 		credentials: credentialStore,
 		webhooks: options?.adapters?.webhooks ?? new FetchWebhookSender({ allowPrivateNetwork: config.webhookAllowPrivateNetwork }),
 		mail: wired.mail,
@@ -429,6 +484,10 @@ async function buildContainer(config, options) {
 			digests,
 			logger: discussionLogger
 		}),
+		...contentJobs({
+			events: content,
+			logger: contentLogger
+		}),
 		...entitlementsJobs({ grants: entitlements }),
 		...assetsJobs({
 			assets,
@@ -446,6 +505,10 @@ async function buildContainer(config, options) {
 		...assetsRecurringJobs
 	]);
 	const eventBus = new InMemoryEventBus();
+	if (pubsub) new ChatLiveForwarder({
+		pubsub,
+		logger: discussionLogger
+	}).attach(eventBus);
 	eventBus.subscribeAll((event) => automations.handle(event));
 	const outboxConfig = resolveOutboxConfig(config.outbox);
 	const outboxRelay = new PollingOutboxRelay(new DrizzleOutboxStore(db, outboxLogger), eventBus, outboxConfig, outboxLogger);
@@ -504,6 +567,10 @@ async function buildContainer(config, options) {
 			beforeCreateSession: authHook("beforeCreateSession", async (session) => {
 				const person = await identity.getUserByExternalId(session.userId);
 				if (!person) return;
+				if (organizations.isPlatformAccount(person.email)) {
+					authLogger.warn("sign-in refused for the platform account", { userId: person.id });
+					return false;
+				}
 				const orgs = await organizations.getOrgUsersForUser(person.id);
 				if (orgs.length !== 1) return;
 				const org = await organizations.getById(orgs[0].orgId);
@@ -514,7 +581,7 @@ async function buildContainer(config, options) {
 				} };
 			}),
 			beforeCreateOrganization: authHook("beforeCreateOrganization", async ({ organization: org, user: baUser }) => {
-				const domainOrg = await organizations.createOrganization({
+				const domainOrg = await organizations.provisionOrganization({
 					ownerId: baUser.id,
 					...org,
 					logo: org.logo ?? void 0
@@ -524,22 +591,15 @@ async function buildContainer(config, options) {
 					id: domainOrg.id
 				} };
 			}),
-			beforeUpdateOrganization: authHook("beforeUpdateOrganization", async ({ organization }) => {
-				await organizations.updateOrganization(organization.id, organization);
-			}),
 			beforeDeleteOrganization: authHook("beforeDeleteOrganization", async ({ organization }) => {
 				await organizations.deleteOrganization(organization.id);
 			}),
 			beforeAddMember: authHook("beforeAddMember", async ({ member }) => {
 				await organizations.addOrgUser({
 					orgId: member.organizationId,
-					userId: member.userId,
-					role: parseRole(member.role)
+					userId: member.userId
 				});
 			}),
-			beforeUpdateMemberRole: authHook("beforeUpdateMemberRole", async ({ member, newRole }) => {
-				await organizations.updateOrgUser(member.organizationId, member.userId, { role: parseRole(newRole) });
-			}),
 			beforeRemoveMember: authHook("beforeRemoveMember", async ({ member }) => {
 				await organizations.removeOrgUser(member.organizationId, member.userId);
 			})
@@ -552,6 +612,7 @@ async function buildContainer(config, options) {
 	return {
 		auth,
 		mcp,
+		platform,
 		identity,
 		organizations,
 		orgProvider: auth,
@@ -568,6 +629,7 @@ async function buildContainer(config, options) {
 		notificationTypes: notificationRegistries.types,
 		notificationChannels: notificationRegistries.channels,
 		notificationCategories,
+		notificationCatalog,
 		notificationCategoryLists,
 		notificationSettings,
 		devices,
@@ -580,6 +642,8 @@ async function buildContainer(config, options) {
 		outboxRelay,
 		automationEngine,
 		scheduler: automationEngine,
+		pubsub,
+		chatHub: chats.hub,
 		logger,
 		loggerInstance,
 		requestContext: requestLogContext,

package/dist/app/container.js.map

@@ -1 +1 @@
-{"version":3,"file":"container.js","names":[],"sources":["../../src/app/container.ts"],"sourcesContent":["// Wires adapters + services in dependency order. Starts nothing.\nimport {\n  createDb,\n  DrizzleAssetsRepository,\n  DrizzleAutomationRunsRepository,\n  DrizzleAutomationsRepository,\n  DrizzleConnectionsRepository,\n  DrizzleContentRepository,\n  DrizzleCredentialStore,\n  DrizzleAdminRepository,\n  DrizzleDigestRunRepository,\n  DrizzleDevicesRepository,\n  DrizzleDiscussionRepository,\n  DrizzlePostRepository,\n  DrizzleChatRepository,\n  DrizzleEntitlementsRepository,\n  DrizzleIdentityRepository,\n  DrizzleMemberRepository,\n  DrizzleMembersRepository,\n  DrizzleMentionsRepository,\n  DrizzleNotificationsRepository,\n  DrizzleNotificationSettingsRepository,\n  DrizzleOrganizationsRepository,\n  DrizzleOutboxAppender,\n  DrizzleOutboxStore,\n  DrizzleProgressRepository,\n  DrizzleSettingsRepository,\n  DrizzleSubscriptionsRepository,\n  DrizzleUnitOfWork,\n} from '@headless-lms/adapter-db';\nimport { InMemoryEventBus } from '@headless-lms/adapter-defaults/events';\nimport {\n  PollingOutboxRelay,\n  type PollingOutboxRelayConfig,\n} from '@headless-lms/adapter-defaults/events/outbox-relay';\nimport { InlineAutomationEngine } from '@headless-lms/adapter-defaults/workflows';\nimport { FetchWebhookSender } from '@headless-lms/adapter-defaults/webhooks';\nimport { EmailAdapter, StubTemplateRenderer } from '@headless-lms/adapter-defaults/email';\nimport {\n  createRootLogger,\n  type LogLevel,\n  type PinoInstance,\n  requestLogContext,\n  type RequestLogContext,\n} from '@headless-lms/adapter-defaults/logging';\nimport { StorageAdapter } from '@headless-lms/adapter-defaults/storage';\nimport { BetterAuth } from '@headless-lms/adapter-auth';\n\nimport {\n  CommunityNotificationCategories,\n  ContentItemTitles,\n  ContentService,\n} from '@headless-lms/core/content';\nimport {\n  EntitlementsServiceImpl,\n  entitlementsJobs,\n  entitlementsRecurringJobs,\n} from '@headless-lms/core/entitlements';\nimport { ProgressServiceImpl } from '@headless-lms/core/progress';\nimport {\n  ChatServiceImpl,\n  DigestServiceImpl,\n  DiscussionItemTitles,\n  DiscussionServiceImpl,\n  PostServiceImpl,\n  SubscriptionServiceImpl,\n  discussionJobs,\n  discussionRecurringJobs,\n} from '@headless-lms/core/discussion';\nimport {\n  DevicesServiceImpl,\n  IdentityServiceImpl,\n  NotificationSettingsServiceImpl,\n  type SessionAdmin,\n} from '@headless-lms/core/identity';\nimport {\n  type OrgAdmin,\n  OrganizationServiceImpl,\n  OrgNotificationCategories,\n  parseRole,\n} from '@headless-lms/core/organizations';\nimport {\n  AssetsServiceImpl,\n  assetsJobs,\n  assetsRecurringJobs,\n  createFileUrls,\n} from '@headless-lms/core/assets';\nimport { IntegrationsServiceImpl } from '@headless-lms/core/integrations';\nimport {\n  AutomationsServiceImpl,\n  DEFAULT_COMMUNITY_CATEGORIES,\n  DEFAULT_ORG_CATEGORIES,\n  NOTIFICATION_TYPES,\n  NotificationDelivery,\n  NotificationProcessor,\n  NotificationsServiceImpl,\n  RECIPIENT_RULES,\n  SchedulerChatDebounce,\n  notificationJobs,\n  type NotificationCategories,\n} from '@headless-lms/core/automations';\nimport { buildNotificationRegistries, configuredPushSender } from './notification-channels.js';\nimport { loadIntegrations } from './integrations.js';\nimport { mcpEndpoints, type McpEndpoints } from './mcp-endpoints.js';\nimport { communityMail } from './community-mail.js';\nimport { notificationReads } from './notification-reads.js';\nimport { AdminReportServiceImpl } from '@headless-lms/core/reporting/admin';\nimport { MemberReportServiceImpl } from '@headless-lms/core/reporting/member';\nimport { Mailer, type MailerLookups } from '@headless-lms/core/shared/mailer';\nimport { SettingsService } from '@headless-lms/core/shared/settings';\n\nimport type {\n  ChannelRegistry,\n  CredentialStore,\n  EmailSender,\n  Logger,\n  NotificationChannel,\n  NotificationTypeRegistry,\n  ObjectStorage,\n  OutboxRelay,\n  PushSender,\n  Scheduler,\n  TemplateContext,\n  TemplateRenderer,\n} from '@headless-lms/core/shared/ports';\nimport type { AutomationEngine, PushConfig, WebhookSender } from '@headless-lms/core/types';\n\n/** Installation-supplied ports; an absent slot falls back to a fail-loudly stub. */\nexport interface AdapterOverrides {\n  email?: EmailSender;\n  storage?: ObjectStorage;\n  /** Resolves email templates to rendered content. Absent → fail-loudly stub. */\n  templates?: TemplateRenderer;\n  /** Durable automation engine, or a factory given the automations logger. Absent → InlineAutomationEngine (in-process, one attempt per action). */\n  workflows?: (AutomationEngine & Scheduler) | ((logger: Logger) => AutomationEngine & Scheduler);\n  /** Outbound HTTP for webhook deliveries. Absent → FetchWebhookSender (public addresses only, 10s timeout). */\n  webhooks?: WebhookSender;\n  /** Notification channels beyond in-app, email and push; each key must be new. */\n  notificationChannels?: NotificationChannel[];\n  /** Push credentials per provider. Absent → no provider is configured and devices cannot register. */\n  push?: PushConfig;\n  pushSender?: PushSender;\n}\n\nexport interface BuildContainerOptions {\n  /** Installation's plugins folder, scanned by loadIntegrations. Absent → no integrations. */\n  pluginsDir?: string;\n  adapters?: AdapterOverrides;\n}\n\nexport interface Config {\n  databaseUrl: string;\n  authBaseURL: string;\n  authSecret: string;\n  trustedOrigins: string[];\n  /** Branding threaded into every email template. Default: brandName \"Headless LMS\", baseUrl = adminAppUrl.\n   *  (studentPortalUrl is composed in from the top-level config field.) */\n  emailBranding?: Omit<TemplateContext, 'studentPortalUrl'>;\n  /** base64-encoded 32-byte key for the credential store (CREDENTIAL_STORE_KEY). */\n  credentialStoreKey: string;\n  /** Parent domain for cross-subdomain session cookies (e.g. \".example.com\"); undefined → host-only cookie. */\n  cookieDomain?: string;\n  /** Mark session cookies Secure (set behind HTTPS / in production). */\n  secureCookies?: boolean;\n  /** Student portal origin — invite links for students, and the origin whose signups are invite-gated. */\n  studentPortalUrl: string;\n  /** Admin app origin — invite links for staff. */\n  adminAppUrl: string;\n  /** Transactional-outbox relay tuning. All optional — see OUTBOX_DEFAULTS. */\n  outbox?: OutboxConfig;\n  /** Log level for the process-wide logger (HTTP + domain + relay). Default \"info\". */\n  logging?: LoggingConfig;\n  /** Lifetime of every signed file URL a response carries, seconds. Mirrors\n   *  ServerConfig.deliveryExpirySeconds — createContainer threads it through. */\n  deliveryExpirySeconds: number;\n  memberImageMaxBytes: number;\n  /** Let the default webhook sender reach loopback and private network addresses. Local development only. */\n  webhookAllowPrivateNetwork?: boolean;\n}\n\n/** Tuning for the transactional-outbox relay. Every field is optional; the\n *  container resolves against OUTBOX_DEFAULTS. */\nexport interface OutboxConfig {\n  /** Master switch for the same-process relay. Default true. */\n  enabled?: boolean;\n  /** Idle delay between polls. Default 1000. */\n  pollIntervalMs?: number;\n  /** Max rows fetched/dispatched per tick. Default 100. */\n  batchSize?: number;\n  concurrency?: number;\n}\n\nexport const OUTBOX_DEFAULTS: PollingOutboxRelayConfig = {\n  enabled: true,\n  pollIntervalMs: 1000,\n  batchSize: 100,\n  concurrency: 16,\n};\n\nexport function resolveOutboxConfig(config: OutboxConfig = {}): PollingOutboxRelayConfig {\n  const overrides = Object.fromEntries(\n    Object.entries(config).filter(([, value]) => value !== undefined),\n  );\n  return { ...OUTBOX_DEFAULTS, ...overrides };\n}\n\n/** Logging tuning. Optional; resolved against LOGGING_DEFAULTS. */\nexport interface LoggingConfig {\n  /** Minimum level emitted. Default \"info\". */\n  level?: LogLevel;\n}\n\nexport const LOGGING_DEFAULTS: Required<LoggingConfig> = { level: 'info' };\n\nexport function resolveLoggingConfig(config: LoggingConfig = {}): Required<LoggingConfig> {\n  return { level: config.level ?? LOGGING_DEFAULTS.level };\n}\n\nexport interface Container {\n  auth: BetterAuth;\n  mcp: McpEndpoints;\n  // Org Provider\n  orgProvider: OrgAdmin;\n\n  // Domains\n  identity: IdentityServiceImpl;\n  organizations: OrganizationServiceImpl;\n  content: ContentService;\n  entitlements: EntitlementsServiceImpl;\n  progress: ProgressServiceImpl;\n  discussion: DiscussionServiceImpl;\n  posts: PostServiceImpl;\n  chats: ChatServiceImpl;\n  subscriptions: SubscriptionServiceImpl;\n  assets: AssetsServiceImpl;\n  integrations: IntegrationsServiceImpl;\n  automations: AutomationsServiceImpl;\n  notificationTypes: NotificationTypeRegistry;\n  notificationChannels: ChannelRegistry;\n  notificationCategories: {\n    community: CommunityNotificationCategories;\n    org: OrgNotificationCategories;\n  };\n  notificationCategoryLists: NotificationCategories;\n  notificationSettings: NotificationSettingsServiceImpl;\n  devices: DevicesServiceImpl;\n  notificationList: NotificationsServiceImpl;\n  /** Cross-cutting settings store. Not a context — a leaf every context may use;\n   *  inject `settings.for('<namespace>')` into a service, never the service itself. */\n  settings: SettingsService;\n  // Reporting read layer (composed cross-context reads; owns no domain rules).\n  reporting: {\n    admin: AdminReportServiceImpl;\n    member: MemberReportServiceImpl;\n  };\n  storage: ObjectStorage;\n  mailer: Mailer;\n  /** Shared secure credential store — encrypted at rest, org-scoped, decrypt at point of use. */\n  credentials: CredentialStore;\n  /** The outbox relay — constructed but NEVER started by the container; the\n   *  installation's entry point starts it after listen (gen-openapi must not\n   *  poll). buildServer stops it onClose. */\n  outboxRelay: OutboxRelay;\n  /** The automation engine — constructed but NEVER started by the container;\n   *  the installation's entry point starts it after listen (gen-openapi must\n   *  not run a worker). buildServer stops it onClose. */\n  automationEngine: AutomationEngine;\n  scheduler: Scheduler;\n  /** Root logger port — components receive children bound with { name }. */\n  logger: Logger;\n  /** The raw pino root; buildServer hands it to Fastify so HTTP shares the stream. */\n  loggerInstance: PinoInstance;\n  /** Request-scoped log correlation; the HTTP layer enters it per request. */\n  requestContext: RequestLogContext;\n  /** Identity's session-write port; the auth adapter fulfils it. */\n  sessions: SessionAdmin;\n}\n\nexport async function buildContainer(\n  config: Config,\n  options?: BuildContainerOptions,\n): Promise<Container> {\n  const { instance: loggerInstance, logger } = createRootLogger(\n    resolveLoggingConfig(config.logging).level,\n  );\n  // One child per domain — a context's service and repositories share it.\n\n  const contentLogger = logger.child({ name: 'content' });\n  const entitlementsLogger = logger.child({ name: 'entitlements' });\n  const progressLogger = logger.child({ name: 'progress' });\n  const discussionLogger = logger.child({ name: 'discussion' });\n  const assetsLogger = logger.child({ name: 'assets' });\n  const integrationsLogger = logger.child({ name: 'integrations' });\n  const automationsLogger = logger.child({ name: 'automations' });\n  const reportingLogger = logger.child({ name: 'reporting' });\n  const outboxLogger = logger.child({ name: 'outbox' });\n\n  // Outbound adapters\n  const db = createDb(config.databaseUrl);\n  const email = options?.adapters?.email ?? new EmailAdapter(logger.child({ name: 'email' }));\n  const storage: ObjectStorage =\n    options?.adapters?.storage ?? new StorageAdapter(logger.child({ name: 'storage' }));\n  const templates =\n    options?.adapters?.templates ?? new StubTemplateRenderer(logger.child({ name: 'email' }));\n  const workflows = options?.adapters?.workflows;\n  const automationEngine: AutomationEngine & Scheduler =\n    typeof workflows === 'function'\n      ? workflows(automationsLogger)\n      : (workflows ?? new InlineAutomationEngine(automationsLogger));\n  const mailer = new Mailer(templates, email, {\n    ...(config.emailBranding ?? { brandName: 'Headless LMS', baseUrl: config.adminAppUrl }),\n    studentPortalUrl: config.studentPortalUrl,\n  });\n\n  const fileUrls = createFileUrls(config.authBaseURL);\n  const assets = new AssetsServiceImpl({\n    storage,\n    repo: new DrizzleAssetsRepository(db, assetsLogger),\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      assets: new DrizzleAssetsRepository(tx, assetsLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    memberImageMaxBytes: config.memberImageMaxBytes,\n    downloadLinkExpirySeconds: config.deliveryExpirySeconds,\n    fileUrls,\n    logger: assetsLogger,\n  });\n\n  /*\n   * Identity\n   */\n  const identityUoW = new DrizzleUnitOfWork(db, (tx) => ({\n    identity: new DrizzleIdentityRepository(tx, logger.child({ name: 'identity' })),\n    outbox: new DrizzleOutboxAppender(tx, logger.child({ name: 'identity' })),\n  }));\n  const identity = new IdentityServiceImpl({\n    repo: new DrizzleIdentityRepository(db, logger.child({ name: 'identity_repo' })),\n    logger: logger.child({ name: 'identity' }),\n    uow: identityUoW,\n    mailer,\n    images: assets,\n    fileUrls,\n  });\n\n  /*\n   * Organization\n   */\n  const organizationsRepo = new DrizzleOrganizationsRepository(db, logger.child({ name: 'org' }));\n  const organizationsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    organizations: new DrizzleOrganizationsRepository(tx, logger.child({ name: 'org' })),\n    outbox: new DrizzleOutboxAppender(tx, logger.child({ name: 'org' })),\n  }));\n  const orgAdminRef: { current: OrgAdmin | undefined } = { current: undefined };\n  const organizations = new OrganizationServiceImpl({\n    repo: organizationsRepo,\n    membersRepo: new DrizzleMembersRepository(db, logger.child({ name: 'org' })),\n    people: identity,\n    uow: organizationsUow,\n    orgAdmin: () => {\n      if (!orgAdminRef.current) {\n        throw new Error('orgAdmin not initialised');\n      }\n      return orgAdminRef.current;\n    },\n    logger: logger.child({ name: 'org' }),\n    mailer,\n    inviteUrls: { studentPortalUrl: config.studentPortalUrl, adminAppUrl: config.adminAppUrl },\n  });\n\n  /*\n   * Settings\n   */\n  const settings = new SettingsService(\n    new DrizzleSettingsRepository(db, logger.child({ name: 'settings' })),\n  );\n  // Content: reads on the root db; course writes + outbox append in one tx.\n  const contentUow = new DrizzleUnitOfWork(db, (tx) => ({\n    content: new DrizzleContentRepository(tx, contentLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const content = new ContentService({\n    repo: new DrizzleContentRepository(db, contentLogger),\n    uow: contentUow,\n    libraryAssets: assets,\n    files: assets,\n    fileUrls,\n    logger: contentLogger,\n  });\n  const pushConfig = options?.adapters?.push ?? {};\n  const pushSender = configuredPushSender(pushConfig, options?.adapters?.pushSender);\n  const notificationRegistries = buildNotificationRegistries({\n    declarations: NOTIFICATION_TYPES,\n    defaults: { community: DEFAULT_COMMUNITY_CATEGORIES, org: DEFAULT_ORG_CATEGORIES },\n    mailer: options?.adapters?.email ? mailer : null,\n    emailOf: async (_orgId, userId) => (await identity.getUserById(userId))?.email ?? null,\n    push: pushSender\n      ? {\n          sender: pushSender,\n          activeDevices: (orgId, userId, since) => devices.activeDevices(orgId, userId, since),\n        }\n      : null,\n    channels: options?.adapters?.notificationChannels ?? [],\n  });\n  const notificationCategories = {\n    community: new CommunityNotificationCategories({\n      communities: new DrizzleContentRepository(db, contentLogger),\n      settings,\n      types: notificationRegistries.types,\n      channels: notificationRegistries.channels,\n      logger: contentLogger,\n    }),\n    org: new OrgNotificationCategories({\n      settings,\n      types: notificationRegistries.types,\n      channels: notificationRegistries.channels,\n      logger: logger.child({ name: 'org' }),\n    }),\n  };\n  const notificationCategoryLists: NotificationCategories = {\n    listFor: async (orgId, communityId) =>\n      (communityId\n        ? await notificationCategories.community.get(orgId, communityId)\n        : await notificationCategories.org.get(orgId, orgId)\n      ).categories,\n  };\n  // Entitlements: reads on the root db; writes + outbox append in one tx.\n  const entitlementsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    entitlements: new DrizzleEntitlementsRepository(tx, entitlementsLogger),\n    spaces: new DrizzleContentRepository(tx, contentLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const authors = {\n    roleOf: async (orgId: string, orgUserId: string) => {\n      const row = await organizationsRepo.findOrgUserById(orgId, orgUserId);\n      return row?.role ?? null;\n    },\n    rolesOf: async (orgId: string, orgUserIds: string[]) => {\n      const rows = await organizationsRepo.findOrgUsersByIds(orgId, orgUserIds);\n      return Object.fromEntries(rows.map((row) => [row.id, row.role]));\n    },\n  };\n  const entitlementsRepo = new DrizzleEntitlementsRepository(db, entitlementsLogger);\n  const entitlements = new EntitlementsServiceImpl({\n    repo: entitlementsRepo,\n    content,\n    uow: entitlementsUow,\n    logger: entitlementsLogger,\n  });\n  const identityLogger = logger.child({ name: 'identity' });\n  const notificationSettings = new NotificationSettingsServiceImpl({\n    repo: new DrizzleNotificationSettingsRepository(db, identityLogger),\n    categories: {\n      communityList: async (orgId, communityId) =>\n        (await notificationCategories.community.get(orgId, communityId)).categories,\n      orgList: async (orgId) => (await notificationCategories.org.get(orgId, orgId)).categories,\n    },\n    access: {\n      canOpen: (orgId, actor, communityId) =>\n        entitlements.isCommunityMember(orgId, actor, communityId),\n    },\n    channels: notificationRegistries.channels,\n    logger: identityLogger,\n  });\n  const devices = new DevicesServiceImpl({\n    repo: new DrizzleDevicesRepository(db, identityLogger),\n    push: pushConfig,\n    logger: identityLogger,\n  });\n  // Progress: report writes + outbox append in one tx; content supplies the\n  // structure and completion rules the service evaluates against.\n  const progressUow = new DrizzleUnitOfWork(db, (tx) => ({\n    progress: new DrizzleProgressRepository(tx, progressLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const progress = new ProgressServiceImpl({\n    repo: new DrizzleProgressRepository(db, progressLogger),\n    content,\n    access: entitlements,\n    uow: progressUow,\n    logger: progressLogger,\n  });\n\n  const postReads = new DrizzlePostRepository(db, discussionLogger);\n  const discussionReads = new DrizzleDiscussionRepository(db, discussionLogger);\n  const chatReads = new DrizzleChatRepository(db, discussionLogger);\n  const subscriptionReads = new DrizzleSubscriptionsRepository(db, discussionLogger);\n  const mentionReads = new DrizzleMentionsRepository(db, discussionLogger);\n  const posts = new PostServiceImpl({\n    repo: postReads,\n    access: entitlements,\n    content,\n    authors,\n    profiles: discussionReads,\n    comments: discussionReads,\n    subscriptions: subscriptionReads,\n    mentions: mentionReads,\n    images: assets,\n    fileUrls,\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      posts: new DrizzlePostRepository(tx, discussionLogger),\n      mentions: new DrizzleMentionsRepository(tx, discussionLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    scheduler: automationEngine,\n    logger: discussionLogger,\n  });\n  const chats = new ChatServiceImpl({\n    repo: chatReads,\n    access: entitlements,\n    content,\n    authors,\n    profiles: discussionReads,\n    subscriptions: subscriptionReads,\n    mentions: mentionReads,\n    images: assets,\n    fileUrls,\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      chats: new DrizzleChatRepository(tx, discussionLogger),\n      mentions: new DrizzleMentionsRepository(tx, discussionLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    logger: discussionLogger,\n  });\n  const discussion = new DiscussionServiceImpl({\n    repo: discussionReads,\n    access: entitlements,\n    content: content,\n    posts,\n    spaces: entitlements,\n    mentions: mentionReads,\n    fileUrls,\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      discussion: new DrizzleDiscussionRepository(tx, discussionLogger),\n      mentions: new DrizzleMentionsRepository(tx, discussionLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    settings,\n    logger: discussionLogger,\n  });\n\n  const subscriptions = new SubscriptionServiceImpl({\n    repo: subscriptionReads,\n    access: entitlements,\n    posts,\n    chats,\n    logger: discussionLogger,\n  });\n\n  const digests = new DigestServiceImpl({\n    schedules: { communitiesWithDigest: () => content.communitiesWithDigest() },\n    runs: new DrizzleDigestRunRepository(db, discussionLogger),\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      digests: new DrizzleDigestRunRepository(tx, discussionLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    logger: discussionLogger,\n  });\n\n  const notificationsRepo = new DrizzleNotificationsRepository(db);\n  const notificationList = new NotificationsServiceImpl({\n    repo: notificationsRepo,\n    logger: automationsLogger,\n  });\n  const itemTitles = {\n    discussion: new DiscussionItemTitles({\n      posts,\n      chats,\n      comments: discussionReads,\n      messages: chatReads,\n      profiles: discussionReads,\n      activities: content,\n      access: entitlements,\n    }),\n    content: new ContentItemTitles({ content, access: entitlements }),\n  };\n\n  const reporting = {\n    admin: new AdminReportServiceImpl({\n      repo: new DrizzleAdminRepository(db, reportingLogger),\n    }),\n    member: new MemberReportServiceImpl({\n      repo: new DrizzleMemberRepository(db, reportingLogger),\n      content,\n      progress,\n      files: assets,\n      fileUrls,\n      access: entitlements,\n      notifications: notificationList,\n      titles: itemTitles,\n      subscriptions,\n      notificationCategories,\n      notificationSettings,\n      channels: notificationRegistries.channels,\n    }),\n  };\n\n  const credentialStore = new DrizzleCredentialStore(\n    db,\n    config.credentialStoreKey,\n    integrationsLogger,\n  );\n  // The integrations this deployment supports: the installation's declared\n  // plugins folder (directory name = integration id), loaded at startup.\n  // Connect/configure reject undeclared ids and validate config with the\n  // integration's own schema. No folder → no integrations.\n  const integrationsRegistry = await loadIntegrations(options?.pluginsDir, integrationsLogger);\n  // Integrations: credential + connection writes + outbox append in one tx\n  // (a tx-bound credential store instance shares the scope's transaction).\n  const integrationsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    connections: new DrizzleConnectionsRepository(tx, integrationsLogger),\n    credentials: new DrizzleCredentialStore(tx, config.credentialStoreKey, integrationsLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const integrations = new IntegrationsServiceImpl({\n    registry: integrationsRegistry,\n    repo: new DrizzleConnectionsRepository(db, integrationsLogger),\n    uow: integrationsUow,\n    credentials: credentialStore,\n    logger: integrationsLogger,\n  });\n\n  // Automations: run writes + outbox append in one tx; the engine drives\n  // execution (register below), integrations supplies the loaded\n  // integrations' actions for `available`.\n  const automationsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    automations: new DrizzleAutomationsRepository(tx, automationsLogger),\n    runs: new DrizzleAutomationRunsRepository(tx, automationsLogger),\n    credentials: new DrizzleCredentialStore(tx, config.credentialStoreKey, automationsLogger),\n    outbox: new DrizzleOutboxAppender(tx, automationsLogger),\n  }));\n  // Emails triggered by row-shaped events resolve their recipient and content\n  // details at send time — the event carries ids only.\n  const mailerLookups: MailerLookups = {\n    orgUserPerson: async (orgId, orgUserId) => {\n      const orgUser = await organizationsRepo.findOrgUserById(orgId, orgUserId);\n      const user = orgUser ? await identity.getUserById(orgUser.userId) : null;\n      return user ? { userId: user.id, email: user.email } : null;\n    },\n    contentInfo: async (orgId, contentId) => {\n      const course = await content.getCourse(orgId, contentId);\n      if (course) {\n        return { id: course.id, title: course.title, type: course.type };\n      }\n      const download = await content.getDownload(orgId, contentId);\n      if (download) {\n        return { id: download.id, title: download.title, type: download.type };\n      }\n      const community = await content.getCommunity(orgId, contentId);\n      return community ? { id: community.id, title: community.title, type: community.type } : null;\n    },\n  };\n\n  const runsRepo = new DrizzleAutomationRunsRepository(db, automationsLogger);\n  const wired = communityMail({\n    content,\n    entitlements,\n    organizations,\n    identity,\n    posts,\n    subscriptions,\n    discussion,\n    chats,\n  });\n  const recipientReads = notificationReads({\n    content,\n    entitlements,\n    organizations,\n    identity,\n    posts,\n    subscriptions,\n    discussion,\n    chats,\n    settings: notificationSettings,\n  });\n  const notificationProcessor = new NotificationProcessor({\n    rules: RECIPIENT_RULES,\n    reads: recipientReads,\n    types: notificationRegistries.types,\n    channels: notificationRegistries.channels,\n    categories: notificationCategoryLists,\n    settings: notificationSettings,\n    devices,\n    repo: notificationsRepo,\n    engine: automationEngine,\n    debounce: new SchedulerChatDebounce(automationEngine),\n    logger: automationsLogger,\n  });\n  const automations = new AutomationsServiceImpl({\n    repo: new DrizzleAutomationsRepository(db, automationsLogger),\n    runsRepo,\n    uow: automationsUow,\n    engine: automationEngine,\n    mailer,\n    lookups: mailerLookups,\n    integrations,\n    credentials: credentialStore,\n    webhooks:\n      options?.adapters?.webhooks ??\n      new FetchWebhookSender({ allowPrivateNetwork: config.webhookAllowPrivateNetwork }),\n    mail: wired.mail,\n    grants: wired.grants,\n    delivery: new NotificationDelivery({\n      repo: notificationsRepo,\n      channels: notificationRegistries.channels,\n      devices,\n      logger: automationsLogger,\n    }),\n    processor: notificationProcessor,\n    logger: automationsLogger,\n  });\n  automationEngine.register(automations);\n  automationEngine.registerJobs(\n    [\n      ...discussionJobs({ posts, digests, logger: discussionLogger }),\n      ...entitlementsJobs({ grants: entitlements }),\n      ...assetsJobs({ assets, orgs: organizations, logger: assetsLogger }),\n      ...notificationJobs({\n        processor: notificationProcessor,\n        reads: recipientReads,\n        logger: automationsLogger,\n      }),\n    ],\n    [...discussionRecurringJobs, ...entitlementsRecurringJobs, ...assetsRecurringJobs],\n  );\n\n  const eventBus = new InMemoryEventBus();\n  eventBus.subscribeAll((event) => automations.handle(event));\n  const outboxConfig = resolveOutboxConfig(config.outbox);\n  const outboxRelay = new PollingOutboxRelay(\n    new DrizzleOutboxStore(db, outboxLogger),\n    eventBus,\n    outboxConfig,\n    outboxLogger,\n  );\n\n  /*\n   * Auth Adapter\n   */\n  const authLogger = logger.child({ name: 'auth' });\n  // Hook failures otherwise surface through Better Auth's route as an opaque\n  // 500 — log which hook died before rethrowing.\n  const authHook =\n    <A extends unknown[], R>(name: string, fn: (...args: A) => Promise<R>) =>\n    async (...args: A): Promise<R> => {\n      try {\n        return await fn(...args);\n      } catch (err) {\n        authLogger.error(`auth hook ${name} failed`, { err });\n        throw err;\n      }\n    };\n  const mcp = mcpEndpoints(config);\n  if (!mcp.oauthEnabled) {\n    authLogger.warn(\n      'MCP OAuth is off: BETTER_AUTH_URL must be https or a loopback host; /mcp accepts API keys only',\n      { authBaseURL: config.authBaseURL },\n    );\n  }\n  const auth = new BetterAuth({\n    db,\n    baseUrl: config.authBaseURL,\n    mcp: {\n      oauthEnabled: mcp.oauthEnabled,\n      resource: mcp.resource,\n      loginPage: mcp.loginPage,\n      consentPage: mcp.consentPage,\n      orgPickerPage: mcp.orgPickerPage,\n    },\n    secret: config.authSecret,\n    trustedOrigins: config.trustedOrigins,\n    hooks: {\n      sendResetPassword: async ({ user, url }) => {\n        await identity.sendPasswordReset({ email: user.email, url });\n      },\n      onPasswordReset: async ({ user }) => {\n        await identity.sendPasswordChanged({ email: user.email });\n      },\n      sendMagicLink: authHook('sendMagicLink', async ({ email, url }) => {\n        await identity.sendMagicLink({\n          email,\n          url,\n        });\n      }),\n      beforeUserCreate: authHook('beforeUserCreate', async (user) => {\n        const { email, name } = user;\n        const [firstName, lastName] = name.split(' ');\n        // Better Auth has not minted an id yet — the id returned below becomes\n        // its account id. A person provisioned at invite time is linked instead of re-created.\n        const domainUser = await identity.linkOrCreateUser({\n          email,\n          ...(firstName !== undefined && { firstName }),\n          ...(lastName !== undefined && { lastName }),\n        });\n\n        return {\n          data: {\n            ...user,\n            id: domainUser.id,\n          },\n        };\n      }),\n      beforeCreateSession: authHook('beforeCreateSession', async (session) => {\n        const person = await identity.getUserByExternalId(session.userId);\n        if (!person) {\n          return;\n        }\n        const orgs = await organizations.getOrgUsersForUser(person.id);\n        if (orgs.length !== 1) {\n          return;\n        }\n        // TODO - fix, why default to the first?\n        const org = await organizations.getById(orgs[0]!.orgId);\n        if (!org) {\n          return;\n        }\n\n        return { data: { ...session, activeOrganizationId: org.id } };\n      }),\n      /*\n       * We're making sure the domain org creates and using the same ID for better-auth org ID.\n       */\n      beforeCreateOrganization: authHook(\n        'beforeCreateOrganization',\n        async ({ organization: org, user: baUser }) => {\n          const domainOrg = await organizations.createOrganization({\n            ownerId: baUser.id,\n            ...org,\n            logo: org.logo ?? undefined,\n          });\n          return { data: { ...org, id: domainOrg.id } };\n        },\n      ),\n      beforeUpdateOrganization: authHook('beforeUpdateOrganization', async ({ organization }) => {\n        await organizations.updateOrganization(organization.id, organization);\n      }),\n      beforeDeleteOrganization: authHook('beforeDeleteOrganization', async ({ organization }) => {\n        await organizations.deleteOrganization(organization.id);\n      }),\n      beforeAddMember: authHook('beforeAddMember', async ({ member }) => {\n        await organizations.addOrgUser({\n          orgId: member.organizationId,\n          userId: member.userId,\n          role: parseRole(member.role),\n        });\n      }),\n      beforeUpdateMemberRole: authHook('beforeUpdateMemberRole', async ({ member, newRole }) => {\n        await organizations.updateOrgUser(member.organizationId, member.userId, {\n          role: parseRole(newRole),\n        });\n      }),\n      beforeRemoveMember: authHook('beforeRemoveMember', async ({ member }) => {\n        await organizations.removeOrgUser(member.organizationId, member.userId);\n      }),\n    },\n    logger: authLogger,\n    cookieDomain: config.cookieDomain,\n    secureCookies: config.secureCookies,\n  });\n  orgAdminRef.current = auth;\n\n  return {\n    auth,\n    mcp,\n    identity,\n    organizations,\n    // Better Auth owns org writes; the same instance fulfils the OrgAdmin port.\n    orgProvider: auth,\n    content,\n    entitlements,\n    progress,\n    discussion,\n    posts,\n    chats,\n    subscriptions,\n    assets,\n    integrations,\n    automations,\n    notificationTypes: notificationRegistries.types,\n    notificationChannels: notificationRegistries.channels,\n    notificationCategories,\n    notificationCategoryLists,\n    notificationSettings,\n    devices,\n    notificationList,\n    settings,\n    reporting,\n    storage,\n    mailer,\n    credentials: credentialStore,\n    outboxRelay,\n    automationEngine,\n    scheduler: automationEngine,\n    logger,\n    loggerInstance,\n    requestContext: requestLogContext,\n    // Better Auth owns the session store; the same instance fulfils SessionAdmin.\n    sessions: auth,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgMA,MAAa,kBAA4C;CACvD,SAAS;CACT,gBAAgB;CAChB,WAAW;CACX,aAAa;AACf;AAEA,SAAgB,oBAAoB,SAAuB,CAAC,GAA6B;CACvF,MAAM,YAAY,OAAO,YACvB,OAAO,QAAQ,MAAM,CAAC,CAAC,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CAClE;CACA,OAAO;EAAE,GAAG;EAAiB,GAAG;CAAU;AAC5C;AAQA,MAAa,mBAA4C,EAAE,OAAO,OAAO;AAEzE,SAAgB,qBAAqB,SAAwB,CAAC,GAA4B;CACxF,OAAO,EAAE,OAAO,OAAO,SAAS,iBAAiB,MAAM;AACzD;AA8DA,eAAsB,eACpB,QACA,SACoB;CACpB,MAAM,EAAE,UAAU,gBAAgB,WAAW,iBAC3C,qBAAqB,OAAO,OAAO,CAAC,CAAC,KACvC;CAGA,MAAM,gBAAgB,OAAO,MAAM,EAAE,MAAM,UAAU,CAAC;CACtD,MAAM,qBAAqB,OAAO,MAAM,EAAE,MAAM,eAAe,CAAC;CAChE,MAAM,iBAAiB,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC;CACxD,MAAM,mBAAmB,OAAO,MAAM,EAAE,MAAM,aAAa,CAAC;CAC5D,MAAM,eAAe,OAAO,MAAM,EAAE,MAAM,SAAS,CAAC;CACpD,MAAM,qBAAqB,OAAO,MAAM,EAAE,MAAM,eAAe,CAAC;CAChE,MAAM,oBAAoB,OAAO,MAAM,EAAE,MAAM,cAAc,CAAC;CAC9D,MAAM,kBAAkB,OAAO,MAAM,EAAE,MAAM,YAAY,CAAC;CAC1D,MAAM,eAAe,OAAO,MAAM,EAAE,MAAM,SAAS,CAAC;CAGpD,MAAM,KAAK,SAAS,OAAO,WAAW;CACtC,MAAM,QAAQ,SAAS,UAAU,SAAS,IAAI,aAAa,OAAO,MAAM,EAAE,MAAM,QAAQ,CAAC,CAAC;CAC1F,MAAM,UACJ,SAAS,UAAU,WAAW,IAAI,eAAe,OAAO,MAAM,EAAE,MAAM,UAAU,CAAC,CAAC;CACpF,MAAM,YACJ,SAAS,UAAU,aAAa,IAAI,qBAAqB,OAAO,MAAM,EAAE,MAAM,QAAQ,CAAC,CAAC;CAC1F,MAAM,YAAY,SAAS,UAAU;CACrC,MAAM,mBACJ,OAAO,cAAc,aACjB,UAAU,iBAAiB,IAC1B,aAAa,IAAI,uBAAuB,iBAAiB;CAChE,MAAM,SAAS,IAAI,OAAO,WAAW,OAAO;EAC1C,GAAI,OAAO,iBAAiB;GAAE,WAAW;GAAgB,SAAS,OAAO;EAAY;EACrF,kBAAkB,OAAO;CAC3B,CAAC;CAED,MAAM,WAAW,eAAe,OAAO,WAAW;CAClD,MAAM,SAAS,IAAI,kBAAkB;EACnC;EACA,MAAM,IAAI,wBAAwB,IAAI,YAAY;EAClD,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,QAAQ,IAAI,wBAAwB,IAAI,YAAY;GACpD,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF,qBAAqB,OAAO;EAC5B,2BAA2B,OAAO;EAClC;EACA,QAAQ;CACV,CAAC;CAKD,MAAM,cAAc,IAAI,kBAAkB,KAAK,QAAQ;EACrD,UAAU,IAAI,0BAA0B,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC,CAAC;EAC9E,QAAQ,IAAI,sBAAsB,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC,CAAC;CAC1E,EAAE;CACF,MAAM,WAAW,IAAI,oBAAoB;EACvC,MAAM,IAAI,0BAA0B,IAAI,OAAO,MAAM,EAAE,MAAM,gBAAgB,CAAC,CAAC;EAC/E,QAAQ,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC;EACzC,KAAK;EACL;EACA,QAAQ;EACR;CACF,CAAC;CAKD,MAAM,oBAAoB,IAAI,+BAA+B,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;CAC9F,MAAM,mBAAmB,IAAI,kBAAkB,KAAK,QAAQ;EAC1D,eAAe,IAAI,+BAA+B,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;EACnF,QAAQ,IAAI,sBAAsB,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;CACrE,EAAE;CACF,MAAM,cAAiD,EAAE,SAAS,KAAA,EAAU;CAC5E,MAAM,gBAAgB,IAAI,wBAAwB;EAChD,MAAM;EACN,aAAa,IAAI,yBAAyB,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;EAC3E,QAAQ;EACR,KAAK;EACL,gBAAgB;GACd,IAAI,CAAC,YAAY,SACf,MAAM,IAAI,MAAM,0BAA0B;GAE5C,OAAO,YAAY;EACrB;EACA,QAAQ,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC;EACpC;EACA,YAAY;GAAE,kBAAkB,OAAO;GAAkB,aAAa,OAAO;EAAY;CAC3F,CAAC;CAKD,MAAM,WAAW,IAAI,gBACnB,IAAI,0BAA0B,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC,CAAC,CACtE;CAEA,MAAM,aAAa,IAAI,kBAAkB,KAAK,QAAQ;EACpD,SAAS,IAAI,yBAAyB,IAAI,aAAa;EACvD,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,UAAU,IAAI,eAAe;EACjC,MAAM,IAAI,yBAAyB,IAAI,aAAa;EACpD,KAAK;EACL,eAAe;EACf,OAAO;EACP;EACA,QAAQ;CACV,CAAC;CACD,MAAM,aAAa,SAAS,UAAU,QAAQ,CAAC;CAC/C,MAAM,aAAa,qBAAqB,YAAY,SAAS,UAAU,UAAU;CACjF,MAAM,yBAAyB,4BAA4B;EACzD,cAAc;EACd,UAAU;GAAE,WAAW;GAA8B,KAAK;EAAuB;EACjF,QAAQ,SAAS,UAAU,QAAQ,SAAS;EAC5C,SAAS,OAAO,QAAQ,YAAY,MAAM,SAAS,YAAY,MAAM,EAAA,EAAI,SAAS;EAClF,MAAM,aACF;GACE,QAAQ;GACR,gBAAgB,OAAO,QAAQ,UAAU,QAAQ,cAAc,OAAO,QAAQ,KAAK;EACrF,IACA;EACJ,UAAU,SAAS,UAAU,wBAAwB,CAAC;CACxD,CAAC;CACD,MAAM,yBAAyB;EAC7B,WAAW,IAAI,gCAAgC;GAC7C,aAAa,IAAI,yBAAyB,IAAI,aAAa;GAC3D;GACA,OAAO,uBAAuB;GAC9B,UAAU,uBAAuB;GACjC,QAAQ;EACV,CAAC;EACD,KAAK,IAAI,0BAA0B;GACjC;GACA,OAAO,uBAAuB;GAC9B,UAAU,uBAAuB;GACjC,QAAQ,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC;EACtC,CAAC;CACH;CACA,MAAM,4BAAoD,EACxD,SAAS,OAAO,OAAO,iBACpB,cACG,MAAM,uBAAuB,UAAU,IAAI,OAAO,WAAW,IAC7D,MAAM,uBAAuB,IAAI,IAAI,OAAO,KAAK,EAAA,CACnD,WACN;CAEA,MAAM,kBAAkB,IAAI,kBAAkB,KAAK,QAAQ;EACzD,cAAc,IAAI,8BAA8B,IAAI,kBAAkB;EACtE,QAAQ,IAAI,yBAAyB,IAAI,aAAa;EACtD,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,UAAU;EACd,QAAQ,OAAO,OAAe,cAAsB;GAElD,QAAO,MADW,kBAAkB,gBAAgB,OAAO,SAAS,EAAA,EACxD,QAAQ;EACtB;EACA,SAAS,OAAO,OAAe,eAAyB;GACtD,MAAM,OAAO,MAAM,kBAAkB,kBAAkB,OAAO,UAAU;GACxE,OAAO,OAAO,YAAY,KAAK,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC;EACjE;CACF;CAEA,MAAM,eAAe,IAAI,wBAAwB;EAC/C,MAAM,IAFqB,8BAA8B,IAAI,kBAExC;EACrB;EACA,KAAK;EACL,QAAQ;CACV,CAAC;CACD,MAAM,iBAAiB,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC;CACxD,MAAM,uBAAuB,IAAI,gCAAgC;EAC/D,MAAM,IAAI,sCAAsC,IAAI,cAAc;EAClE,YAAY;GACV,eAAe,OAAO,OAAO,iBAC1B,MAAM,uBAAuB,UAAU,IAAI,OAAO,WAAW,EAAA,CAAG;GACnE,SAAS,OAAO,WAAW,MAAM,uBAAuB,IAAI,IAAI,OAAO,KAAK,EAAA,CAAG;EACjF;EACA,QAAQ,EACN,UAAU,OAAO,OAAO,gBACtB,aAAa,kBAAkB,OAAO,OAAO,WAAW,EAC5D;EACA,UAAU,uBAAuB;EACjC,QAAQ;CACV,CAAC;CACD,MAAM,UAAU,IAAI,mBAAmB;EACrC,MAAM,IAAI,yBAAyB,IAAI,cAAc;EACrD,MAAM;EACN,QAAQ;CACV,CAAC;CAGD,MAAM,cAAc,IAAI,kBAAkB,KAAK,QAAQ;EACrD,UAAU,IAAI,0BAA0B,IAAI,cAAc;EAC1D,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,WAAW,IAAI,oBAAoB;EACvC,MAAM,IAAI,0BAA0B,IAAI,cAAc;EACtD;EACA,QAAQ;EACR,KAAK;EACL,QAAQ;CACV,CAAC;CAED,MAAM,YAAY,IAAI,sBAAsB,IAAI,gBAAgB;CAChE,MAAM,kBAAkB,IAAI,4BAA4B,IAAI,gBAAgB;CAC5E,MAAM,YAAY,IAAI,sBAAsB,IAAI,gBAAgB;CAChE,MAAM,oBAAoB,IAAI,+BAA+B,IAAI,gBAAgB;CACjF,MAAM,eAAe,IAAI,0BAA0B,IAAI,gBAAgB;CACvE,MAAM,QAAQ,IAAI,gBAAgB;EAChC,MAAM;EACN,QAAQ;EACR;EACA;EACA,UAAU;EACV,UAAU;EACV,eAAe;EACf,UAAU;EACV,QAAQ;EACR;EACA,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,OAAO,IAAI,sBAAsB,IAAI,gBAAgB;GACrD,UAAU,IAAI,0BAA0B,IAAI,gBAAgB;GAC5D,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF,WAAW;EACX,QAAQ;CACV,CAAC;CACD,MAAM,QAAQ,IAAI,gBAAgB;EAChC,MAAM;EACN,QAAQ;EACR;EACA;EACA,UAAU;EACV,eAAe;EACf,UAAU;EACV,QAAQ;EACR;EACA,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,OAAO,IAAI,sBAAsB,IAAI,gBAAgB;GACrD,UAAU,IAAI,0BAA0B,IAAI,gBAAgB;GAC5D,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF,QAAQ;CACV,CAAC;CACD,MAAM,aAAa,IAAI,sBAAsB;EAC3C,MAAM;EACN,QAAQ;EACC;EACT;EACA,QAAQ;EACR,UAAU;EACV;EACA,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,YAAY,IAAI,4BAA4B,IAAI,gBAAgB;GAChE,UAAU,IAAI,0BAA0B,IAAI,gBAAgB;GAC5D,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF;EACA,QAAQ;CACV,CAAC;CAED,MAAM,gBAAgB,IAAI,wBAAwB;EAChD,MAAM;EACN,QAAQ;EACR;EACA;EACA,QAAQ;CACV,CAAC;CAED,MAAM,UAAU,IAAI,kBAAkB;EACpC,WAAW,EAAE,6BAA6B,QAAQ,sBAAsB,EAAE;EAC1E,MAAM,IAAI,2BAA2B,IAAI,gBAAgB;EACzD,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,SAAS,IAAI,2BAA2B,IAAI,gBAAgB;GAC5D,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF,QAAQ;CACV,CAAC;CAED,MAAM,oBAAoB,IAAI,+BAA+B,EAAE;CAC/D,MAAM,mBAAmB,IAAI,yBAAyB;EACpD,MAAM;EACN,QAAQ;CACV,CAAC;CACD,MAAM,aAAa;EACjB,YAAY,IAAI,qBAAqB;GACnC;GACA;GACA,UAAU;GACV,UAAU;GACV,UAAU;GACV,YAAY;GACZ,QAAQ;EACV,CAAC;EACD,SAAS,IAAI,kBAAkB;GAAE;GAAS,QAAQ;EAAa,CAAC;CAClE;CAEA,MAAM,YAAY;EAChB,OAAO,IAAI,uBAAuB,EAChC,MAAM,IAAI,uBAAuB,IAAI,eAAe,EACtD,CAAC;EACD,QAAQ,IAAI,wBAAwB;GAClC,MAAM,IAAI,wBAAwB,IAAI,eAAe;GACrD;GACA;GACA,OAAO;GACP;GACA,QAAQ;GACR,eAAe;GACf,QAAQ;GACR;GACA;GACA;GACA,UAAU,uBAAuB;EACnC,CAAC;CACH;CAEA,MAAM,kBAAkB,IAAI,uBAC1B,IACA,OAAO,oBACP,kBACF;CAKA,MAAM,uBAAuB,MAAM,iBAAiB,SAAS,YAAY,kBAAkB;CAG3F,MAAM,kBAAkB,IAAI,kBAAkB,KAAK,QAAQ;EACzD,aAAa,IAAI,6BAA6B,IAAI,kBAAkB;EACpE,aAAa,IAAI,uBAAuB,IAAI,OAAO,oBAAoB,kBAAkB;EACzF,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,eAAe,IAAI,wBAAwB;EAC/C,UAAU;EACV,MAAM,IAAI,6BAA6B,IAAI,kBAAkB;EAC7D,KAAK;EACL,aAAa;EACb,QAAQ;CACV,CAAC;CAKD,MAAM,iBAAiB,IAAI,kBAAkB,KAAK,QAAQ;EACxD,aAAa,IAAI,6BAA6B,IAAI,iBAAiB;EACnE,MAAM,IAAI,gCAAgC,IAAI,iBAAiB;EAC/D,aAAa,IAAI,uBAAuB,IAAI,OAAO,oBAAoB,iBAAiB;EACxF,QAAQ,IAAI,sBAAsB,IAAI,iBAAiB;CACzD,EAAE;CAGF,MAAM,gBAA+B;EACnC,eAAe,OAAO,OAAO,cAAc;GACzC,MAAM,UAAU,MAAM,kBAAkB,gBAAgB,OAAO,SAAS;GACxE,MAAM,OAAO,UAAU,MAAM,SAAS,YAAY,QAAQ,MAAM,IAAI;GACpE,OAAO,OAAO;IAAE,QAAQ,KAAK;IAAI,OAAO,KAAK;GAAM,IAAI;EACzD;EACA,aAAa,OAAO,OAAO,cAAc;GACvC,MAAM,SAAS,MAAM,QAAQ,UAAU,OAAO,SAAS;GACvD,IAAI,QACF,OAAO;IAAE,IAAI,OAAO;IAAI,OAAO,OAAO;IAAO,MAAM,OAAO;GAAK;GAEjE,MAAM,WAAW,MAAM,QAAQ,YAAY,OAAO,SAAS;GAC3D,IAAI,UACF,OAAO;IAAE,IAAI,SAAS;IAAI,OAAO,SAAS;IAAO,MAAM,SAAS;GAAK;GAEvE,MAAM,YAAY,MAAM,QAAQ,aAAa,OAAO,SAAS;GAC7D,OAAO,YAAY;IAAE,IAAI,UAAU;IAAI,OAAO,UAAU;IAAO,MAAM,UAAU;GAAK,IAAI;EAC1F;CACF;CAEA,MAAM,WAAW,IAAI,gCAAgC,IAAI,iBAAiB;CAC1E,MAAM,QAAQ,cAAc;EAC1B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;CACD,MAAM,iBAAiB,kBAAkB;EACvC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,UAAU;CACZ,CAAC;CACD,MAAM,wBAAwB,IAAI,sBAAsB;EACtD,OAAO;EACP,OAAO;EACP,OAAO,uBAAuB;EAC9B,UAAU,uBAAuB;EACjC,YAAY;EACZ,UAAU;EACV;EACA,MAAM;EACN,QAAQ;EACR,UAAU,IAAI,sBAAsB,gBAAgB;EACpD,QAAQ;CACV,CAAC;CACD,MAAM,cAAc,IAAI,uBAAuB;EAC7C,MAAM,IAAI,6BAA6B,IAAI,iBAAiB;EAC5D;EACA,KAAK;EACL,QAAQ;EACR;EACA,SAAS;EACT;EACA,aAAa;EACb,UACE,SAAS,UAAU,YACnB,IAAI,mBAAmB,EAAE,qBAAqB,OAAO,2BAA2B,CAAC;EACnF,MAAM,MAAM;EACZ,QAAQ,MAAM;EACd,UAAU,IAAI,qBAAqB;GACjC,MAAM;GACN,UAAU,uBAAuB;GACjC;GACA,QAAQ;EACV,CAAC;EACD,WAAW;EACX,QAAQ;CACV,CAAC;CACD,iBAAiB,SAAS,WAAW;CACrC,iBAAiB,aACf;EACE,GAAG,eAAe;GAAE;GAAO;GAAS,QAAQ;EAAiB,CAAC;EAC9D,GAAG,iBAAiB,EAAE,QAAQ,aAAa,CAAC;EAC5C,GAAG,WAAW;GAAE;GAAQ,MAAM;GAAe,QAAQ;EAAa,CAAC;EACnE,GAAG,iBAAiB;GAClB,WAAW;GACX,OAAO;GACP,QAAQ;EACV,CAAC;CACH,GACA;EAAC,GAAG;EAAyB,GAAG;EAA2B,GAAG;CAAmB,CACnF;CAEA,MAAM,WAAW,IAAI,iBAAiB;CACtC,SAAS,cAAc,UAAU,YAAY,OAAO,KAAK,CAAC;CAC1D,MAAM,eAAe,oBAAoB,OAAO,MAAM;CACtD,MAAM,cAAc,IAAI,mBACtB,IAAI,mBAAmB,IAAI,YAAY,GACvC,UACA,cACA,YACF;CAKA,MAAM,aAAa,OAAO,MAAM,EAAE,MAAM,OAAO,CAAC;CAGhD,MAAM,YACqB,MAAc,OACvC,OAAO,GAAG,SAAwB;EAChC,IAAI;GACF,OAAO,MAAM,GAAG,GAAG,IAAI;EACzB,SAAS,KAAK;GACZ,WAAW,MAAM,aAAa,KAAK,UAAU,EAAE,IAAI,CAAC;GACpD,MAAM;EACR;CACF;CACF,MAAM,MAAM,aAAa,MAAM;CAC/B,IAAI,CAAC,IAAI,cACP,WAAW,KACT,kGACA,EAAE,aAAa,OAAO,YAAY,CACpC;CAEF,MAAM,OAAO,IAAI,WAAW;EAC1B;EACA,SAAS,OAAO;EAChB,KAAK;GACH,cAAc,IAAI;GAClB,UAAU,IAAI;GACd,WAAW,IAAI;GACf,aAAa,IAAI;GACjB,eAAe,IAAI;EACrB;EACA,QAAQ,OAAO;EACf,gBAAgB,OAAO;EACvB,OAAO;GACL,mBAAmB,OAAO,EAAE,MAAM,UAAU;IAC1C,MAAM,SAAS,kBAAkB;KAAE,OAAO,KAAK;KAAO;IAAI,CAAC;GAC7D;GACA,iBAAiB,OAAO,EAAE,WAAW;IACnC,MAAM,SAAS,oBAAoB,EAAE,OAAO,KAAK,MAAM,CAAC;GAC1D;GACA,eAAe,SAAS,iBAAiB,OAAO,EAAE,OAAO,UAAU;IACjE,MAAM,SAAS,cAAc;KAC3B;KACA;IACF,CAAC;GACH,CAAC;GACD,kBAAkB,SAAS,oBAAoB,OAAO,SAAS;IAC7D,MAAM,EAAE,OAAO,SAAS;IACxB,MAAM,CAAC,WAAW,YAAY,KAAK,MAAM,GAAG;IAG5C,MAAM,aAAa,MAAM,SAAS,iBAAiB;KACjD;KACA,GAAI,cAAc,KAAA,KAAa,EAAE,UAAU;KAC3C,GAAI,aAAa,KAAA,KAAa,EAAE,SAAS;IAC3C,CAAC;IAED,OAAO,EACL,MAAM;KACJ,GAAG;KACH,IAAI,WAAW;IACjB,EACF;GACF,CAAC;GACD,qBAAqB,SAAS,uBAAuB,OAAO,YAAY;IACtE,MAAM,SAAS,MAAM,SAAS,oBAAoB,QAAQ,MAAM;IAChE,IAAI,CAAC,QACH;IAEF,MAAM,OAAO,MAAM,cAAc,mBAAmB,OAAO,EAAE;IAC7D,IAAI,KAAK,WAAW,GAClB;IAGF,MAAM,MAAM,MAAM,cAAc,QAAQ,KAAK,EAAE,CAAE,KAAK;IACtD,IAAI,CAAC,KACH;IAGF,OAAO,EAAE,MAAM;KAAE,GAAG;KAAS,sBAAsB,IAAI;IAAG,EAAE;GAC9D,CAAC;GAID,0BAA0B,SACxB,4BACA,OAAO,EAAE,cAAc,KAAK,MAAM,aAAa;IAC7C,MAAM,YAAY,MAAM,cAAc,mBAAmB;KACvD,SAAS,OAAO;KAChB,GAAG;KACH,MAAM,IAAI,QAAQ,KAAA;IACpB,CAAC;IACD,OAAO,EAAE,MAAM;KAAE,GAAG;KAAK,IAAI,UAAU;IAAG,EAAE;GAC9C,CACF;GACA,0BAA0B,SAAS,4BAA4B,OAAO,EAAE,mBAAmB;IACzF,MAAM,cAAc,mBAAmB,aAAa,IAAI,YAAY;GACtE,CAAC;GACD,0BAA0B,SAAS,4BAA4B,OAAO,EAAE,mBAAmB;IACzF,MAAM,cAAc,mBAAmB,aAAa,EAAE;GACxD,CAAC;GACD,iBAAiB,SAAS,mBAAmB,OAAO,EAAE,aAAa;IACjE,MAAM,cAAc,WAAW;KAC7B,OAAO,OAAO;KACd,QAAQ,OAAO;KACf,MAAM,UAAU,OAAO,IAAI;IAC7B,CAAC;GACH,CAAC;GACD,wBAAwB,SAAS,0BAA0B,OAAO,EAAE,QAAQ,cAAc;IACxF,MAAM,cAAc,cAAc,OAAO,gBAAgB,OAAO,QAAQ,EACtE,MAAM,UAAU,OAAO,EACzB,CAAC;GACH,CAAC;GACD,oBAAoB,SAAS,sBAAsB,OAAO,EAAE,aAAa;IACvE,MAAM,cAAc,cAAc,OAAO,gBAAgB,OAAO,MAAM;GACxE,CAAC;EACH;EACA,QAAQ;EACR,cAAc,OAAO;EACrB,eAAe,OAAO;CACxB,CAAC;CACD,YAAY,UAAU;CAEtB,OAAO;EACL;EACA;EACA;EACA;EAEA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,mBAAmB,uBAAuB;EAC1C,sBAAsB,uBAAuB;EAC7C;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA,WAAW;EACX;EACA;EACA,gBAAgB;EAEhB,UAAU;CACZ;AACF"}
+{"version":3,"file":"container.js","names":[],"sources":["../../src/app/container.ts"],"sourcesContent":["// Wires adapters + services in dependency order. Starts nothing.\nimport {\n  createDb,\n  type DatabasePoolOptions,\n  DrizzleAssetsRepository,\n  DrizzleAutomationRunsRepository,\n  DrizzleAutomationsRepository,\n  DrizzleConnectionsRepository,\n  DrizzleContentRepository,\n  DrizzleCredentialStore,\n  DrizzleAdminRepository,\n  DrizzleDigestRunRepository,\n  DrizzleDevicesRepository,\n  DrizzleDiscussionRepository,\n  DrizzlePostRepository,\n  DrizzleChatRepository,\n  DrizzleEntitlementsRepository,\n  DrizzleIdentityRepository,\n  DrizzleMemberRepository,\n  DrizzleMembersRepository,\n  DrizzleMentionsRepository,\n  DrizzleNotificationsRepository,\n  DrizzleNotificationSettingsRepository,\n  DrizzleOrganizationsRepository,\n  DrizzleRolesRepository,\n  DrizzleOutboxAppender,\n  DrizzleOutboxStore,\n  DrizzleProgressRepository,\n  DrizzleSettingsRepository,\n  DrizzleSubscriptionsRepository,\n  DrizzleUnitOfWork,\n} from '@headless-lms/adapter-db';\nimport { InMemoryEventBus } from '@headless-lms/adapter-defaults/events';\nimport {\n  PollingOutboxRelay,\n  type PollingOutboxRelayConfig,\n} from '@headless-lms/adapter-defaults/events/outbox-relay';\nimport { InlineAutomationEngine } from '@headless-lms/adapter-defaults/workflows';\nimport { FetchWebhookSender } from '@headless-lms/adapter-defaults/webhooks';\nimport { EmailAdapter, StubTemplateRenderer } from '@headless-lms/adapter-defaults/email';\nimport {\n  createRootLogger,\n  type LogLevel,\n  type PinoInstance,\n  requestLogContext,\n  type RequestLogContext,\n} from '@headless-lms/adapter-defaults/logging';\nimport { StorageAdapter } from '@headless-lms/adapter-defaults/storage';\nimport { PlainBodyParser } from '@headless-lms/adapter-defaults/body';\nimport { BetterAuth } from '@headless-lms/adapter-auth';\n\nimport {\n  CommunityNotificationCategories,\n  ContentItemTitles,\n  ContentService,\n  contentJobs,\n} from '@headless-lms/core/content';\nimport {\n  EntitlementsServiceImpl,\n  entitlementsJobs,\n  entitlementsRecurringJobs,\n} from '@headless-lms/core/entitlements';\nimport { ProgressServiceImpl } from '@headless-lms/core/progress';\nimport {\n  type ChatHub,\n  type ChatHubOptions,\n  ChatLiveForwarder,\n  ChatServiceImpl,\n  DigestServiceImpl,\n  DiscussionItemTitles,\n  DiscussionServiceImpl,\n  type AuthorPermissionReader,\n  PostServiceImpl,\n  SubscriptionServiceImpl,\n  discussionJobs,\n  discussionRecurringJobs,\n} from '@headless-lms/core/discussion';\nimport {\n  DevicesServiceImpl,\n  IdentityServiceImpl,\n  NotificationSettingsServiceImpl,\n  type SessionAdmin,\n} from '@headless-lms/core/identity';\nimport {\n  type ApiKeys,\n  type GrantReader,\n  type OrgAdmin,\n  NotificationCatalog,\n  OrganizationServiceImpl,\n  OrgNotificationCategories,\n  type RoleDefinition,\n} from '@headless-lms/core/organizations';\nimport {\n  AssetsServiceImpl,\n  assetsJobs,\n  assetsRecurringJobs,\n  createFileUrls,\n} from '@headless-lms/core/assets';\nimport { IntegrationsServiceImpl } from '@headless-lms/core/integrations';\nimport {\n  AutomationsServiceImpl,\n  DEFAULT_COMMUNITY_CATEGORIES,\n  DEFAULT_ORG_CATEGORIES,\n  NOTIFICATION_TYPES,\n  NotificationDelivery,\n  NotificationProcessor,\n  NotificationsServiceImpl,\n  RECIPIENT_RULES,\n  SchedulerChatDebounce,\n  notificationJobs,\n  type NotificationCategories,\n} from '@headless-lms/core/automations';\nimport { buildNotificationRegistries, configuredPushSender } from './notification-channels.js';\nimport { loadIntegrations } from './integrations.js';\nimport { mcpEndpoints, type McpEndpoints } from './mcp-endpoints.js';\nimport { communityMail } from './community-mail.js';\nimport { notificationReads } from './notification-reads.js';\nimport { AdminReportServiceImpl } from '@headless-lms/core/reporting/admin';\nimport { MemberReportServiceImpl } from '@headless-lms/core/reporting/member';\nimport { Mailer, type MailerLookups } from '@headless-lms/core/shared/mailer';\nimport { SettingsService } from '@headless-lms/core/shared/settings';\nimport { platformKeyCheck, type PlatformConfig, type PlatformKeyCheck } from './platform.js';\n\nimport type {\n  BodyParser,\n  ChannelRegistry,\n  CredentialStore,\n  EmailSender,\n  Logger,\n  NotificationChannel,\n  NotificationTypeRegistry,\n  ObjectStorage,\n  OutboxRelay,\n  PubSub,\n  PushSender,\n  Scheduler,\n  TemplateContext,\n  TemplateRenderer,\n} from '@headless-lms/core/shared/ports';\nimport type { AutomationEngine, PushConfig, WebhookSender } from '@headless-lms/core/types';\n\n/** Installation-supplied ports; an absent slot falls back to a fail-loudly stub. */\nexport interface AdapterOverrides {\n  email?: EmailSender;\n  storage?: ObjectStorage;\n  /** Resolves email templates to rendered content. Absent → fail-loudly stub. */\n  templates?: TemplateRenderer;\n  /** Durable automation engine, or a factory given the automations logger. Absent → InlineAutomationEngine (in-process, one attempt per action). */\n  workflows?: (AutomationEngine & Scheduler) | ((logger: Logger) => AutomationEngine & Scheduler);\n  /** Outbound HTTP for webhook deliveries. Absent → FetchWebhookSender (public addresses only, 10s timeout). */\n  webhooks?: WebhookSender;\n  /** Notification channels beyond in-app, email and push; each key must be new. */\n  notificationChannels?: NotificationChannel[];\n  /** Push credentials per provider. Absent → no provider is configured and devices cannot register. */\n  push?: PushConfig;\n  pushSender?: PushSender;\n  /** Reads post bodies: their text, mentions and images. Absent → PlainBodyParser (plain text, no images). */\n  bodyParser?: BodyParser;\n  /** Delivery to every API instance, or a factory given its logger. Absent → no live chat; the chat stream answers 503. */\n  pubsub?: PubSub | ((logger: Logger) => PubSub);\n}\n\nexport interface BuildContainerOptions {\n  /** Installation's plugins folder, scanned by loadIntegrations. Absent → no integrations. */\n  pluginsDir?: string;\n  adapters?: AdapterOverrides;\n  roles?: readonly RoleDefinition[];\n  /** Live chat hub timings. Absent → the defaults (1 s state flush, 30 s session check). */\n  live?: ChatHubOptions;\n}\n\nexport interface Config {\n  databaseUrl: string;\n  databasePool?: DatabasePoolOptions;\n  authBaseURL: string;\n  authSecret: string;\n  trustedOrigins: string[];\n  /** Branding threaded into every email template. Default: brandName \"Headless LMS\", baseUrl = adminAppUrl.\n   *  (studentPortalUrl is composed in from the top-level config field.) */\n  emailBranding?: Omit<TemplateContext, 'studentPortalUrl'>;\n  /** base64-encoded 32-byte key for the credential store (CREDENTIAL_STORE_KEY). */\n  credentialStoreKey: string;\n  /** Parent domain for cross-subdomain session cookies (e.g. \".example.com\"); undefined → host-only cookie. */\n  cookieDomain?: string;\n  /** Mark session cookies Secure (set behind HTTPS / in production). */\n  secureCookies?: boolean;\n  /** Student portal origin — invite links for students, and the origin whose signups are invite-gated. */\n  studentPortalUrl: string;\n  /** Admin app origin — invite links for staff. */\n  adminAppUrl: string;\n  /** Transactional-outbox relay tuning. All optional — see OUTBOX_DEFAULTS. */\n  outbox?: OutboxConfig;\n  /** Log level for the process-wide logger (HTTP + domain + relay). Default \"info\". */\n  logging?: LoggingConfig;\n  /** Lifetime of every signed file URL a response carries, seconds. Mirrors\n   *  ServerConfig.deliveryExpirySeconds — createContainer threads it through. */\n  deliveryExpirySeconds: number;\n  memberImageMaxBytes: number;\n  memberFileMaxBytes: number;\n  /** Let the default webhook sender reach loopback and private network addresses. Local development only. */\n  webhookAllowPrivateNetwork?: boolean;\n  platform?: PlatformConfig;\n}\n\n/** Tuning for the transactional-outbox relay. Every field is optional; the\n *  container resolves against OUTBOX_DEFAULTS. */\nexport interface OutboxConfig {\n  /** Master switch for the same-process relay. Default true. */\n  enabled?: boolean;\n  /** Idle delay between polls. Default 1000. */\n  pollIntervalMs?: number;\n  /** Max rows fetched/dispatched per tick. Default 100. */\n  batchSize?: number;\n  concurrency?: number;\n}\n\nexport const OUTBOX_DEFAULTS: PollingOutboxRelayConfig = {\n  enabled: true,\n  pollIntervalMs: 1000,\n  batchSize: 100,\n  concurrency: 16,\n};\n\nexport function resolveOutboxConfig(config: OutboxConfig = {}): PollingOutboxRelayConfig {\n  const overrides = Object.fromEntries(\n    Object.entries(config).filter(([, value]) => value !== undefined),\n  );\n  return { ...OUTBOX_DEFAULTS, ...overrides };\n}\n\n/** Logging tuning. Optional; resolved against LOGGING_DEFAULTS. */\nexport interface LoggingConfig {\n  /** Minimum level emitted. Default \"info\". */\n  level?: LogLevel;\n}\n\nexport const LOGGING_DEFAULTS: Required<LoggingConfig> = { level: 'info' };\n\nexport function resolveLoggingConfig(config: LoggingConfig = {}): Required<LoggingConfig> {\n  return { level: config.level ?? LOGGING_DEFAULTS.level };\n}\n\nexport interface Container {\n  auth: BetterAuth;\n  mcp: McpEndpoints;\n  platform: PlatformKeyCheck | null;\n  // Org Provider\n  orgProvider: OrgAdmin;\n\n  // Domains\n  identity: IdentityServiceImpl;\n  organizations: OrganizationServiceImpl;\n  content: ContentService;\n  entitlements: EntitlementsServiceImpl;\n  progress: ProgressServiceImpl;\n  discussion: DiscussionServiceImpl;\n  posts: PostServiceImpl;\n  chats: ChatServiceImpl;\n  subscriptions: SubscriptionServiceImpl;\n  assets: AssetsServiceImpl;\n  integrations: IntegrationsServiceImpl;\n  automations: AutomationsServiceImpl;\n  notificationTypes: NotificationTypeRegistry;\n  notificationChannels: ChannelRegistry;\n  notificationCategories: {\n    community: CommunityNotificationCategories;\n    org: OrgNotificationCategories;\n  };\n  notificationCatalog: NotificationCatalog;\n  notificationCategoryLists: NotificationCategories;\n  notificationSettings: NotificationSettingsServiceImpl;\n  devices: DevicesServiceImpl;\n  notificationList: NotificationsServiceImpl;\n  /** Cross-cutting settings store. Not a context — a leaf every context may use;\n   *  inject `settings.for('<namespace>')` into a service, never the service itself. */\n  settings: SettingsService;\n  // Reporting read layer (composed cross-context reads; owns no domain rules).\n  reporting: {\n    admin: AdminReportServiceImpl;\n    member: MemberReportServiceImpl;\n  };\n  storage: ObjectStorage;\n  mailer: Mailer;\n  /** Shared secure credential store — encrypted at rest, org-scoped, decrypt at point of use. */\n  credentials: CredentialStore;\n  /** The outbox relay — constructed but NEVER started by the container; the\n   *  installation's entry point starts it after listen (gen-openapi must not\n   *  poll). buildServer stops it onClose. */\n  outboxRelay: OutboxRelay;\n  /** The automation engine — constructed but NEVER started by the container;\n   *  the installation's entry point starts it after listen (gen-openapi must\n   *  not run a worker). buildServer stops it onClose. */\n  automationEngine: AutomationEngine;\n  scheduler: Scheduler;\n  /** The PubSub adapter — constructed but NEVER started by the container; the\n   *  installation's entry point starts it after listen. buildServer stops it\n   *  onClose. Null without one. */\n  pubsub: PubSub | null;\n  /** This process's live chat hub; started by the entry point after `pubsub`,\n   *  closed by buildServer preClose. Null without a PubSub. */\n  chatHub: ChatHub | null;\n  /** Root logger port — components receive children bound with { name }. */\n  logger: Logger;\n  /** The raw pino root; buildServer hands it to Fastify so HTTP shares the stream. */\n  loggerInstance: PinoInstance;\n  /** Request-scoped log correlation; the HTTP layer enters it per request. */\n  requestContext: RequestLogContext;\n  /** Identity's session-write port; the auth adapter fulfils it. */\n  sessions: SessionAdmin;\n}\n\nexport async function buildContainer(\n  config: Config,\n  options?: BuildContainerOptions,\n): Promise<Container> {\n  const { instance: loggerInstance, logger } = createRootLogger(\n    resolveLoggingConfig(config.logging).level,\n  );\n  // One child per domain — a context's service and repositories share it.\n\n  const contentLogger = logger.child({ name: 'content' });\n  const entitlementsLogger = logger.child({ name: 'entitlements' });\n  const progressLogger = logger.child({ name: 'progress' });\n  const discussionLogger = logger.child({ name: 'discussion' });\n  const assetsLogger = logger.child({ name: 'assets' });\n  const integrationsLogger = logger.child({ name: 'integrations' });\n  const automationsLogger = logger.child({ name: 'automations' });\n  const reportingLogger = logger.child({ name: 'reporting' });\n  const outboxLogger = logger.child({ name: 'outbox' });\n\n  // Outbound adapters\n  const db = createDb(config.databaseUrl, logger.child({ name: 'db' }), config.databasePool);\n  const email = options?.adapters?.email ?? new EmailAdapter(logger.child({ name: 'email' }));\n  const storage: ObjectStorage =\n    options?.adapters?.storage ?? new StorageAdapter(logger.child({ name: 'storage' }));\n  const templates =\n    options?.adapters?.templates ?? new StubTemplateRenderer(logger.child({ name: 'email' }));\n  const bodies = options?.adapters?.bodyParser ?? new PlainBodyParser();\n  const workflows = options?.adapters?.workflows;\n  const automationEngine: AutomationEngine & Scheduler =\n    typeof workflows === 'function'\n      ? workflows(automationsLogger)\n      : (workflows ?? new InlineAutomationEngine(automationsLogger));\n  const pubsubOption = options?.adapters?.pubsub;\n  const pubsub: PubSub | null =\n    typeof pubsubOption === 'function'\n      ? pubsubOption(logger.child({ name: 'pubsub' }))\n      : (pubsubOption ?? null);\n  const mailer = new Mailer(templates, email, {\n    ...(config.emailBranding ?? { brandName: 'Headless LMS', baseUrl: config.adminAppUrl }),\n    studentPortalUrl: config.studentPortalUrl,\n  });\n\n  const fileUrls = createFileUrls(config.authBaseURL, (key) => storage.publicUrl(key));\n  const assets = new AssetsServiceImpl({\n    storage,\n    repo: new DrizzleAssetsRepository(db, assetsLogger),\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      assets: new DrizzleAssetsRepository(tx, assetsLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    memberImageMaxBytes: config.memberImageMaxBytes,\n    memberFileMaxBytes: config.memberFileMaxBytes,\n    downloadLinkExpirySeconds: config.deliveryExpirySeconds,\n    fileUrls,\n    logger: assetsLogger,\n  });\n\n  /*\n   * Identity\n   */\n  const identityUoW = new DrizzleUnitOfWork(db, (tx) => ({\n    identity: new DrizzleIdentityRepository(tx, logger.child({ name: 'identity' })),\n    outbox: new DrizzleOutboxAppender(tx, logger.child({ name: 'identity' })),\n  }));\n  const identity = new IdentityServiceImpl({\n    repo: new DrizzleIdentityRepository(db, logger.child({ name: 'identity_repo' })),\n    logger: logger.child({ name: 'identity' }),\n    uow: identityUoW,\n    mailer,\n    images: assets,\n    fileUrls,\n  });\n\n  /*\n   * Organization\n   */\n  const organizationsRepo = new DrizzleOrganizationsRepository(db, logger.child({ name: 'org' }));\n  const organizationsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    organizations: new DrizzleOrganizationsRepository(tx, logger.child({ name: 'org' })),\n    roles: new DrizzleRolesRepository(tx),\n    outbox: new DrizzleOutboxAppender(tx, logger.child({ name: 'org' })),\n  }));\n  const orgAdminRef: { current: BetterAuth | undefined } = { current: undefined };\n  const platform = config.platform ? platformKeyCheck(config.platform) : null;\n  const organizations: OrganizationServiceImpl = new OrganizationServiceImpl({\n    repo: organizationsRepo,\n    roles: new DrizzleRolesRepository(db),\n    ...(options?.roles && { defaultRoles: options.roles }),\n    apiKeys: (): ApiKeys => {\n      if (!orgAdminRef.current) {\n        throw new Error('api keys not initialised');\n      }\n      return orgAdminRef.current;\n    },\n    accounts: () => {\n      if (!orgAdminRef.current) {\n        throw new Error('accounts not initialised');\n      }\n      return orgAdminRef.current;\n    },\n    ...(config.platform && {\n      platform: {\n        email: config.platform.accountEmail,\n        name: config.platform.accountName ?? 'Platform',\n      },\n    }),\n    membersRepo: new DrizzleMembersRepository(db, logger.child({ name: 'org' })),\n    people: identity,\n    images: assets,\n    uow: organizationsUow,\n    orgAdmin: () => {\n      if (!orgAdminRef.current) {\n        throw new Error('orgAdmin not initialised');\n      }\n      return orgAdminRef.current;\n    },\n    sessions: () => {\n      if (!orgAdminRef.current) {\n        throw new Error('sessions not initialised');\n      }\n      return orgAdminRef.current;\n    },\n    logger: logger.child({ name: 'org' }),\n    mailer,\n    inviteUrls: { studentPortalUrl: config.studentPortalUrl, adminAppUrl: config.adminAppUrl },\n    grants: (): GrantReader => entitlements,\n  });\n\n  /*\n   * Settings\n   */\n  const settings = new SettingsService(\n    new DrizzleSettingsRepository(db, logger.child({ name: 'settings' })),\n  );\n  // Content: reads on the root db; course writes + outbox append in one tx.\n  const contentUow = new DrizzleUnitOfWork(db, (tx) => ({\n    content: new DrizzleContentRepository(tx, contentLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const content = new ContentService({\n    repo: new DrizzleContentRepository(db, contentLogger),\n    uow: contentUow,\n    libraryAssets: assets,\n    files: assets,\n    fileUrls,\n    scheduler: automationEngine,\n    logger: contentLogger,\n  });\n  const pushConfig = options?.adapters?.push ?? {};\n  const pushSender = configuredPushSender(pushConfig, options?.adapters?.pushSender);\n  const notificationRegistries = buildNotificationRegistries({\n    declarations: NOTIFICATION_TYPES,\n    defaults: { community: DEFAULT_COMMUNITY_CATEGORIES, org: DEFAULT_ORG_CATEGORIES },\n    mailer: options?.adapters?.email ? mailer : null,\n    emailOf: async (_orgId, userId) => (await identity.getUserById(userId))?.email ?? null,\n    push: pushSender\n      ? {\n          sender: pushSender,\n          activeDevices: (orgId, userId, since) => devices.activeDevices(orgId, userId, since),\n        }\n      : null,\n    channels: options?.adapters?.notificationChannels ?? [],\n  });\n  const notificationCategories = {\n    community: new CommunityNotificationCategories({\n      communities: new DrizzleContentRepository(db, contentLogger),\n      settings,\n      types: notificationRegistries.types,\n      channels: notificationRegistries.channels,\n      logger: contentLogger,\n    }),\n    org: new OrgNotificationCategories({\n      settings,\n      types: notificationRegistries.types,\n      channels: notificationRegistries.channels,\n      logger: logger.child({ name: 'org' }),\n    }),\n  };\n  const notificationCatalog = new NotificationCatalog({\n    types: notificationRegistries.types,\n    channels: notificationRegistries.channels,\n  });\n  const notificationCategoryLists: NotificationCategories = {\n    listFor: async (orgId, communityId) =>\n      (communityId\n        ? await notificationCategories.community.get(communityId, organizations.systemActor(orgId))\n        : await notificationCategories.org.get(orgId, organizations.systemActor(orgId))\n      ).categories,\n  };\n  // Entitlements: reads on the root db; writes + outbox append in one tx.\n  const entitlementsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    entitlements: new DrizzleEntitlementsRepository(tx, entitlementsLogger),\n    spaces: new DrizzleContentRepository(tx, contentLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const authors: AuthorPermissionReader = organizations;\n  const entitlementsRepo = new DrizzleEntitlementsRepository(db, entitlementsLogger);\n  const entitlements = new EntitlementsServiceImpl({\n    repo: entitlementsRepo,\n    content,\n    permissions: organizations,\n    uow: entitlementsUow,\n    logger: entitlementsLogger,\n  });\n  const identityLogger = logger.child({ name: 'identity' });\n  const notificationSettings = new NotificationSettingsServiceImpl({\n    repo: new DrizzleNotificationSettingsRepository(db, identityLogger),\n    categories: {\n      communityList: async (orgId, communityId) =>\n        (await notificationCategories.community.get(communityId, organizations.systemActor(orgId)))\n          .categories,\n      orgList: async (orgId) =>\n        (await notificationCategories.org.get(orgId, organizations.systemActor(orgId))).categories,\n    },\n    access: {\n      canOpen: (orgId, actor, communityId) => entitlements.isCommunityMember(communityId, actor),\n    },\n    channels: notificationRegistries.channels,\n    logger: identityLogger,\n  });\n  const devices = new DevicesServiceImpl({\n    repo: new DrizzleDevicesRepository(db, identityLogger),\n    push: pushConfig,\n    logger: identityLogger,\n  });\n  // Progress: report writes + outbox append in one tx; content supplies the\n  // structure and completion rules the service evaluates against.\n  const progressUow = new DrizzleUnitOfWork(db, (tx) => ({\n    progress: new DrizzleProgressRepository(tx, progressLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const progress = new ProgressServiceImpl({\n    repo: new DrizzleProgressRepository(db, progressLogger),\n    content,\n    access: entitlements,\n    system: organizations,\n    uow: progressUow,\n    logger: progressLogger,\n  });\n\n  const postReads = new DrizzlePostRepository(db, discussionLogger);\n  const discussionReads = new DrizzleDiscussionRepository(db, discussionLogger);\n  const chatReads = new DrizzleChatRepository(db, discussionLogger);\n  const subscriptionReads = new DrizzleSubscriptionsRepository(db, discussionLogger);\n  const mentionReads = new DrizzleMentionsRepository(db, discussionLogger);\n  const posts = new PostServiceImpl({\n    repo: postReads,\n    access: entitlements,\n    content,\n    authors,\n    profiles: discussionReads,\n    comments: discussionReads,\n    subscriptions: subscriptionReads,\n    mentions: mentionReads,\n    images: assets,\n    fileUrls,\n    bodies,\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      posts: new DrizzlePostRepository(tx, discussionLogger),\n      mentions: new DrizzleMentionsRepository(tx, discussionLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    scheduler: automationEngine,\n    logger: discussionLogger,\n  });\n  const chats = new ChatServiceImpl({\n    repo: chatReads,\n    access: entitlements,\n    content,\n    authors,\n    profiles: discussionReads,\n    subscriptions: subscriptionReads,\n    mentions: mentionReads,\n    images: assets,\n    fileUrls,\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      chats: new DrizzleChatRepository(tx, discussionLogger),\n      mentions: new DrizzleMentionsRepository(tx, discussionLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    ...(pubsub && { pubsub }),\n    ...(options?.live && { live: options.live }),\n    logger: discussionLogger,\n  });\n  const discussion = new DiscussionServiceImpl({\n    repo: discussionReads,\n    access: entitlements,\n    content: content,\n    posts,\n    spaces: entitlements,\n    authors,\n    mentions: mentionReads,\n    fileUrls,\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      discussion: new DrizzleDiscussionRepository(tx, discussionLogger),\n      mentions: new DrizzleMentionsRepository(tx, discussionLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    settings,\n    logger: discussionLogger,\n  });\n\n  const subscriptions = new SubscriptionServiceImpl({\n    repo: subscriptionReads,\n    access: entitlements,\n    posts,\n    chats,\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      subscriptions: new DrizzleSubscriptionsRepository(tx, discussionLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    logger: discussionLogger,\n  });\n\n  const digests = new DigestServiceImpl({\n    schedules: { communitiesWithDigest: () => content.communitiesWithDigest() },\n    runs: new DrizzleDigestRunRepository(db, discussionLogger),\n    uow: new DrizzleUnitOfWork(db, (tx) => ({\n      digests: new DrizzleDigestRunRepository(tx, discussionLogger),\n      outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n    })),\n    logger: discussionLogger,\n  });\n\n  const notificationsRepo = new DrizzleNotificationsRepository(db);\n  const notificationList = new NotificationsServiceImpl({\n    repo: notificationsRepo,\n    logger: automationsLogger,\n  });\n  const itemTitles = {\n    discussion: new DiscussionItemTitles({\n      posts,\n      chats,\n      comments: discussionReads,\n      messages: chatReads,\n      profiles: discussionReads,\n      activities: content,\n      access: entitlements,\n      actors: organizations,\n    }),\n    content: new ContentItemTitles({ content, access: entitlements, organizations }),\n  };\n\n  const reporting = {\n    admin: new AdminReportServiceImpl({\n      repo: new DrizzleAdminRepository(db, reportingLogger),\n      permissions: organizations,\n      spaces: entitlements,\n      events: content,\n      fileUrls,\n    }),\n    member: new MemberReportServiceImpl({\n      repo: new DrizzleMemberRepository(db, reportingLogger),\n      content,\n      progress,\n      files: assets,\n      fileUrls,\n      access: entitlements,\n      people: organizations,\n      notifications: notificationList,\n      titles: itemTitles,\n      subscriptions,\n      notificationCategories,\n      notificationSettings,\n      channels: notificationRegistries.channels,\n      studentPortalUrl: config.studentPortalUrl,\n    }),\n  };\n\n  const credentialStore = new DrizzleCredentialStore(\n    db,\n    config.credentialStoreKey,\n    integrationsLogger,\n  );\n  // The integrations this deployment supports: the installation's declared\n  // plugins folder (directory name = integration id), loaded at startup.\n  // Connect/configure reject undeclared ids and validate config with the\n  // integration's own schema. No folder → no integrations.\n  const integrationsRegistry = await loadIntegrations(options?.pluginsDir, integrationsLogger);\n  // Integrations: credential + connection writes + outbox append in one tx\n  // (a tx-bound credential store instance shares the scope's transaction).\n  const integrationsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    connections: new DrizzleConnectionsRepository(tx, integrationsLogger),\n    credentials: new DrizzleCredentialStore(tx, config.credentialStoreKey, integrationsLogger),\n    outbox: new DrizzleOutboxAppender(tx, outboxLogger),\n  }));\n  const integrations = new IntegrationsServiceImpl({\n    registry: integrationsRegistry,\n    repo: new DrizzleConnectionsRepository(db, integrationsLogger),\n    uow: integrationsUow,\n    credentials: credentialStore,\n    logger: integrationsLogger,\n  });\n\n  // Automations: run writes + outbox append in one tx; the engine drives\n  // execution (register below), integrations supplies the loaded\n  // integrations' actions for `available`.\n  const automationsUow = new DrizzleUnitOfWork(db, (tx) => ({\n    automations: new DrizzleAutomationsRepository(tx, automationsLogger),\n    runs: new DrizzleAutomationRunsRepository(tx, automationsLogger),\n    credentials: new DrizzleCredentialStore(tx, config.credentialStoreKey, automationsLogger),\n    outbox: new DrizzleOutboxAppender(tx, automationsLogger),\n  }));\n  // Emails triggered by row-shaped events resolve their recipient and content\n  // details at send time — the event carries ids only.\n  const mailerLookups: MailerLookups = {\n    orgUserPerson: async (orgId, orgUserId) => {\n      const orgUser = await organizationsRepo.findOrgUserById(orgId, orgUserId);\n      const user = orgUser ? await identity.getUserById(orgUser.userId) : null;\n      return user ? { userId: user.id, email: user.email } : null;\n    },\n    contentInfo: async (orgId, contentId) => {\n      const system = organizations.systemActor(orgId);\n      const course = await content.findCourse(contentId, system);\n      if (course) {\n        return { id: course.id, title: course.title, type: course.type };\n      }\n      const download = await content.findDownload(contentId, system);\n      if (download) {\n        return { id: download.id, title: download.title, type: download.type };\n      }\n      const community = await content.findCommunity(contentId, system);\n      if (community) {\n        return { id: community.id, title: community.title, type: community.type };\n      }\n      const event = await content.findEvent(contentId, system);\n      return event ? { id: event.id, title: event.title, type: event.type } : null;\n    },\n  };\n\n  const runsRepo = new DrizzleAutomationRunsRepository(db, automationsLogger);\n  const wired = communityMail({\n    content,\n    entitlements,\n    organizations,\n    identity,\n    posts,\n    subscriptions,\n    discussion,\n    chats,\n    bodies,\n  });\n  const recipientReads = notificationReads({\n    content,\n    entitlements,\n    organizations,\n    identity,\n    posts,\n    subscriptions,\n    discussion,\n    chats,\n    bodies,\n    settings: notificationSettings,\n  });\n  const notificationProcessor = new NotificationProcessor({\n    rules: RECIPIENT_RULES,\n    reads: recipientReads,\n    types: notificationRegistries.types,\n    channels: notificationRegistries.channels,\n    categories: notificationCategoryLists,\n    settings: notificationSettings,\n    devices,\n    repo: notificationsRepo,\n    engine: automationEngine,\n    debounce: new SchedulerChatDebounce(automationEngine),\n    logger: automationsLogger,\n  });\n  const automations = new AutomationsServiceImpl({\n    repo: new DrizzleAutomationsRepository(db, automationsLogger),\n    runsRepo,\n    uow: automationsUow,\n    engine: automationEngine,\n    mailer,\n    lookups: mailerLookups,\n    integrations,\n    systemActor: (orgId) => organizations.systemActor(orgId),\n    credentials: credentialStore,\n    webhooks:\n      options?.adapters?.webhooks ??\n      new FetchWebhookSender({ allowPrivateNetwork: config.webhookAllowPrivateNetwork }),\n    mail: wired.mail,\n    grants: wired.grants,\n    delivery: new NotificationDelivery({\n      repo: notificationsRepo,\n      channels: notificationRegistries.channels,\n      devices,\n      logger: automationsLogger,\n    }),\n    processor: notificationProcessor,\n    logger: automationsLogger,\n  });\n  automationEngine.register(automations);\n  automationEngine.registerJobs(\n    [\n      ...discussionJobs({ posts, digests, logger: discussionLogger }),\n      ...contentJobs({ events: content, logger: contentLogger }),\n      ...entitlementsJobs({ grants: entitlements }),\n      ...assetsJobs({ assets, orgs: organizations, logger: assetsLogger }),\n      ...notificationJobs({\n        processor: notificationProcessor,\n        reads: recipientReads,\n        logger: automationsLogger,\n      }),\n    ],\n    [...discussionRecurringJobs, ...entitlementsRecurringJobs, ...assetsRecurringJobs],\n  );\n\n  const eventBus = new InMemoryEventBus();\n  if (pubsub) {\n    new ChatLiveForwarder({ pubsub, logger: discussionLogger }).attach(eventBus);\n  }\n  eventBus.subscribeAll((event) => automations.handle(event));\n  const outboxConfig = resolveOutboxConfig(config.outbox);\n  const outboxRelay = new PollingOutboxRelay(\n    new DrizzleOutboxStore(db, outboxLogger),\n    eventBus,\n    outboxConfig,\n    outboxLogger,\n  );\n\n  /*\n   * Auth Adapter\n   */\n  const authLogger = logger.child({ name: 'auth' });\n  // Hook failures otherwise surface through Better Auth's route as an opaque\n  // 500 — log which hook died before rethrowing.\n  const authHook =\n    <A extends unknown[], R>(name: string, fn: (...args: A) => Promise<R>) =>\n    async (...args: A): Promise<R> => {\n      try {\n        return await fn(...args);\n      } catch (err) {\n        authLogger.error(`auth hook ${name} failed`, { err });\n        throw err;\n      }\n    };\n  const mcp = mcpEndpoints(config);\n  if (!mcp.oauthEnabled) {\n    authLogger.warn(\n      'MCP OAuth is off: BETTER_AUTH_URL must be https or a loopback host; /mcp accepts API keys only',\n      { authBaseURL: config.authBaseURL },\n    );\n  }\n  const auth: BetterAuth = new BetterAuth({\n    db,\n    baseUrl: config.authBaseURL,\n    mcp: {\n      oauthEnabled: mcp.oauthEnabled,\n      resource: mcp.resource,\n      loginPage: mcp.loginPage,\n      consentPage: mcp.consentPage,\n      orgPickerPage: mcp.orgPickerPage,\n    },\n    secret: config.authSecret,\n    trustedOrigins: config.trustedOrigins,\n    hooks: {\n      sendResetPassword: async ({ user, url }) => {\n        await identity.sendPasswordReset({ email: user.email, url });\n      },\n      onPasswordReset: async ({ user }) => {\n        await identity.sendPasswordChanged({ email: user.email });\n      },\n      sendMagicLink: authHook('sendMagicLink', async ({ email, url }) => {\n        await identity.sendMagicLink({\n          email,\n          url,\n        });\n      }),\n      beforeUserCreate: authHook('beforeUserCreate', async (user) => {\n        const { email, name } = user;\n        const [firstName, lastName] = name.split(' ');\n        // Better Auth has not minted an id yet — the id returned below becomes\n        // its account id. A person provisioned at invite time is linked instead of re-created.\n        const domainUser = await identity.linkOrCreateUser({\n          email,\n          ...(firstName !== undefined && { firstName }),\n          ...(lastName !== undefined && { lastName }),\n        });\n\n        return {\n          data: {\n            ...user,\n            id: domainUser.id,\n          },\n        };\n      }),\n      beforeCreateSession: authHook('beforeCreateSession', async (session) => {\n        const person = await identity.getUserByExternalId(session.userId);\n        if (!person) {\n          return;\n        }\n        if (organizations.isPlatformAccount(person.email)) {\n          authLogger.warn('sign-in refused for the platform account', { userId: person.id });\n          return false;\n        }\n        const orgs = await organizations.getOrgUsersForUser(person.id);\n        if (orgs.length !== 1) {\n          return;\n        }\n        // TODO - fix, why default to the first?\n        const org = await organizations.getById(orgs[0]!.orgId);\n        if (!org) {\n          return;\n        }\n\n        return { data: { ...session, activeOrganizationId: org.id } };\n      }),\n      /*\n       * We're making sure the domain org creates and using the same ID for better-auth org ID.\n       */\n      beforeCreateOrganization: authHook(\n        'beforeCreateOrganization',\n        async ({ organization: org, user: baUser }) => {\n          const domainOrg = await organizations.provisionOrganization({\n            ownerId: baUser.id,\n            ...org,\n            logo: org.logo ?? undefined,\n          });\n          return { data: { ...org, id: domainOrg.id } };\n        },\n      ),\n      beforeDeleteOrganization: authHook('beforeDeleteOrganization', async ({ organization }) => {\n        await organizations.deleteOrganization(organization.id);\n      }),\n      beforeAddMember: authHook('beforeAddMember', async ({ member }) => {\n        await organizations.addOrgUser({\n          orgId: member.organizationId,\n          userId: member.userId,\n        });\n      }),\n      beforeRemoveMember: authHook('beforeRemoveMember', async ({ member }) => {\n        await organizations.removeOrgUser(member.organizationId, member.userId);\n      }),\n    },\n    logger: authLogger,\n    cookieDomain: config.cookieDomain,\n    secureCookies: config.secureCookies,\n  });\n  orgAdminRef.current = auth;\n\n  return {\n    auth,\n    mcp,\n    platform,\n    identity,\n    organizations,\n    // Better Auth owns org writes; the same instance fulfils the OrgAdmin port.\n    orgProvider: auth,\n    content,\n    entitlements,\n    progress,\n    discussion,\n    posts,\n    chats,\n    subscriptions,\n    assets,\n    integrations,\n    automations,\n    notificationTypes: notificationRegistries.types,\n    notificationChannels: notificationRegistries.channels,\n    notificationCategories,\n    notificationCatalog,\n    notificationCategoryLists,\n    notificationSettings,\n    devices,\n    notificationList,\n    settings,\n    reporting,\n    storage,\n    mailer,\n    credentials: credentialStore,\n    outboxRelay,\n    automationEngine,\n    scheduler: automationEngine,\n    pubsub,\n    chatHub: chats.hub,\n    logger,\n    loggerInstance,\n    requestContext: requestLogContext,\n    // Better Auth owns the session store; the same instance fulfils SessionAdmin.\n    sessions: auth,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwNA,MAAa,kBAA4C;CACvD,SAAS;CACT,gBAAgB;CAChB,WAAW;CACX,aAAa;AACf;AAEA,SAAgB,oBAAoB,SAAuB,CAAC,GAA6B;CACvF,MAAM,YAAY,OAAO,YACvB,OAAO,QAAQ,MAAM,CAAC,CAAC,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CAClE;CACA,OAAO;EAAE,GAAG;EAAiB,GAAG;CAAU;AAC5C;AAQA,MAAa,mBAA4C,EAAE,OAAO,OAAO;AAEzE,SAAgB,qBAAqB,SAAwB,CAAC,GAA4B;CACxF,OAAO,EAAE,OAAO,OAAO,SAAS,iBAAiB,MAAM;AACzD;AAuEA,eAAsB,eACpB,QACA,SACoB;CACpB,MAAM,EAAE,UAAU,gBAAgB,WAAW,iBAC3C,qBAAqB,OAAO,OAAO,CAAC,CAAC,KACvC;CAGA,MAAM,gBAAgB,OAAO,MAAM,EAAE,MAAM,UAAU,CAAC;CACtD,MAAM,qBAAqB,OAAO,MAAM,EAAE,MAAM,eAAe,CAAC;CAChE,MAAM,iBAAiB,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC;CACxD,MAAM,mBAAmB,OAAO,MAAM,EAAE,MAAM,aAAa,CAAC;CAC5D,MAAM,eAAe,OAAO,MAAM,EAAE,MAAM,SAAS,CAAC;CACpD,MAAM,qBAAqB,OAAO,MAAM,EAAE,MAAM,eAAe,CAAC;CAChE,MAAM,oBAAoB,OAAO,MAAM,EAAE,MAAM,cAAc,CAAC;CAC9D,MAAM,kBAAkB,OAAO,MAAM,EAAE,MAAM,YAAY,CAAC;CAC1D,MAAM,eAAe,OAAO,MAAM,EAAE,MAAM,SAAS,CAAC;CAGpD,MAAM,KAAK,SAAS,OAAO,aAAa,OAAO,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,OAAO,YAAY;CACzF,MAAM,QAAQ,SAAS,UAAU,SAAS,IAAI,aAAa,OAAO,MAAM,EAAE,MAAM,QAAQ,CAAC,CAAC;CAC1F,MAAM,UACJ,SAAS,UAAU,WAAW,IAAI,eAAe,OAAO,MAAM,EAAE,MAAM,UAAU,CAAC,CAAC;CACpF,MAAM,YACJ,SAAS,UAAU,aAAa,IAAI,qBAAqB,OAAO,MAAM,EAAE,MAAM,QAAQ,CAAC,CAAC;CAC1F,MAAM,SAAS,SAAS,UAAU,cAAc,IAAI,gBAAgB;CACpE,MAAM,YAAY,SAAS,UAAU;CACrC,MAAM,mBACJ,OAAO,cAAc,aACjB,UAAU,iBAAiB,IAC1B,aAAa,IAAI,uBAAuB,iBAAiB;CAChE,MAAM,eAAe,SAAS,UAAU;CACxC,MAAM,SACJ,OAAO,iBAAiB,aACpB,aAAa,OAAO,MAAM,EAAE,MAAM,SAAS,CAAC,CAAC,IAC5C,gBAAgB;CACvB,MAAM,SAAS,IAAI,OAAO,WAAW,OAAO;EAC1C,GAAI,OAAO,iBAAiB;GAAE,WAAW;GAAgB,SAAS,OAAO;EAAY;EACrF,kBAAkB,OAAO;CAC3B,CAAC;CAED,MAAM,WAAW,eAAe,OAAO,cAAc,QAAQ,QAAQ,UAAU,GAAG,CAAC;CACnF,MAAM,SAAS,IAAI,kBAAkB;EACnC;EACA,MAAM,IAAI,wBAAwB,IAAI,YAAY;EAClD,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,QAAQ,IAAI,wBAAwB,IAAI,YAAY;GACpD,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF,qBAAqB,OAAO;EAC5B,oBAAoB,OAAO;EAC3B,2BAA2B,OAAO;EAClC;EACA,QAAQ;CACV,CAAC;CAKD,MAAM,cAAc,IAAI,kBAAkB,KAAK,QAAQ;EACrD,UAAU,IAAI,0BAA0B,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC,CAAC;EAC9E,QAAQ,IAAI,sBAAsB,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC,CAAC;CAC1E,EAAE;CACF,MAAM,WAAW,IAAI,oBAAoB;EACvC,MAAM,IAAI,0BAA0B,IAAI,OAAO,MAAM,EAAE,MAAM,gBAAgB,CAAC,CAAC;EAC/E,QAAQ,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC;EACzC,KAAK;EACL;EACA,QAAQ;EACR;CACF,CAAC;CAKD,MAAM,oBAAoB,IAAI,+BAA+B,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;CAC9F,MAAM,mBAAmB,IAAI,kBAAkB,KAAK,QAAQ;EAC1D,eAAe,IAAI,+BAA+B,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;EACnF,OAAO,IAAI,uBAAuB,EAAE;EACpC,QAAQ,IAAI,sBAAsB,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;CACrE,EAAE;CACF,MAAM,cAAmD,EAAE,SAAS,KAAA,EAAU;CAC9E,MAAM,WAAW,OAAO,WAAW,iBAAiB,OAAO,QAAQ,IAAI;CACvE,MAAM,gBAAyC,IAAI,wBAAwB;EACzE,MAAM;EACN,OAAO,IAAI,uBAAuB,EAAE;EACpC,GAAI,SAAS,SAAS,EAAE,cAAc,QAAQ,MAAM;EACpD,eAAwB;GACtB,IAAI,CAAC,YAAY,SACf,MAAM,IAAI,MAAM,0BAA0B;GAE5C,OAAO,YAAY;EACrB;EACA,gBAAgB;GACd,IAAI,CAAC,YAAY,SACf,MAAM,IAAI,MAAM,0BAA0B;GAE5C,OAAO,YAAY;EACrB;EACA,GAAI,OAAO,YAAY,EACrB,UAAU;GACR,OAAO,OAAO,SAAS;GACvB,MAAM,OAAO,SAAS,eAAe;EACvC,EACF;EACA,aAAa,IAAI,yBAAyB,IAAI,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC;EAC3E,QAAQ;EACR,QAAQ;EACR,KAAK;EACL,gBAAgB;GACd,IAAI,CAAC,YAAY,SACf,MAAM,IAAI,MAAM,0BAA0B;GAE5C,OAAO,YAAY;EACrB;EACA,gBAAgB;GACd,IAAI,CAAC,YAAY,SACf,MAAM,IAAI,MAAM,0BAA0B;GAE5C,OAAO,YAAY;EACrB;EACA,QAAQ,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC;EACpC;EACA,YAAY;GAAE,kBAAkB,OAAO;GAAkB,aAAa,OAAO;EAAY;EACzF,cAA2B;CAC7B,CAAC;CAKD,MAAM,WAAW,IAAI,gBACnB,IAAI,0BAA0B,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC,CAAC,CACtE;CAEA,MAAM,aAAa,IAAI,kBAAkB,KAAK,QAAQ;EACpD,SAAS,IAAI,yBAAyB,IAAI,aAAa;EACvD,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,UAAU,IAAI,eAAe;EACjC,MAAM,IAAI,yBAAyB,IAAI,aAAa;EACpD,KAAK;EACL,eAAe;EACf,OAAO;EACP;EACA,WAAW;EACX,QAAQ;CACV,CAAC;CACD,MAAM,aAAa,SAAS,UAAU,QAAQ,CAAC;CAC/C,MAAM,aAAa,qBAAqB,YAAY,SAAS,UAAU,UAAU;CACjF,MAAM,yBAAyB,4BAA4B;EACzD,cAAc;EACd,UAAU;GAAE,WAAW;GAA8B,KAAK;EAAuB;EACjF,QAAQ,SAAS,UAAU,QAAQ,SAAS;EAC5C,SAAS,OAAO,QAAQ,YAAY,MAAM,SAAS,YAAY,MAAM,EAAA,EAAI,SAAS;EAClF,MAAM,aACF;GACE,QAAQ;GACR,gBAAgB,OAAO,QAAQ,UAAU,QAAQ,cAAc,OAAO,QAAQ,KAAK;EACrF,IACA;EACJ,UAAU,SAAS,UAAU,wBAAwB,CAAC;CACxD,CAAC;CACD,MAAM,yBAAyB;EAC7B,WAAW,IAAI,gCAAgC;GAC7C,aAAa,IAAI,yBAAyB,IAAI,aAAa;GAC3D;GACA,OAAO,uBAAuB;GAC9B,UAAU,uBAAuB;GACjC,QAAQ;EACV,CAAC;EACD,KAAK,IAAI,0BAA0B;GACjC;GACA,OAAO,uBAAuB;GAC9B,UAAU,uBAAuB;GACjC,QAAQ,OAAO,MAAM,EAAE,MAAM,MAAM,CAAC;EACtC,CAAC;CACH;CACA,MAAM,sBAAsB,IAAI,oBAAoB;EAClD,OAAO,uBAAuB;EAC9B,UAAU,uBAAuB;CACnC,CAAC;CACD,MAAM,4BAAoD,EACxD,SAAS,OAAO,OAAO,iBACpB,cACG,MAAM,uBAAuB,UAAU,IAAI,aAAa,cAAc,YAAY,KAAK,CAAC,IACxF,MAAM,uBAAuB,IAAI,IAAI,OAAO,cAAc,YAAY,KAAK,CAAC,EAAA,CAC9E,WACN;CAEA,MAAM,kBAAkB,IAAI,kBAAkB,KAAK,QAAQ;EACzD,cAAc,IAAI,8BAA8B,IAAI,kBAAkB;EACtE,QAAQ,IAAI,yBAAyB,IAAI,aAAa;EACtD,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,UAAkC;CAExC,MAAM,eAAe,IAAI,wBAAwB;EAC/C,MAAM,IAFqB,8BAA8B,IAAI,kBAExC;EACrB;EACA,aAAa;EACb,KAAK;EACL,QAAQ;CACV,CAAC;CACD,MAAM,iBAAiB,OAAO,MAAM,EAAE,MAAM,WAAW,CAAC;CACxD,MAAM,uBAAuB,IAAI,gCAAgC;EAC/D,MAAM,IAAI,sCAAsC,IAAI,cAAc;EAClE,YAAY;GACV,eAAe,OAAO,OAAO,iBAC1B,MAAM,uBAAuB,UAAU,IAAI,aAAa,cAAc,YAAY,KAAK,CAAC,EAAA,CACtF;GACL,SAAS,OAAO,WACb,MAAM,uBAAuB,IAAI,IAAI,OAAO,cAAc,YAAY,KAAK,CAAC,EAAA,CAAG;EACpF;EACA,QAAQ,EACN,UAAU,OAAO,OAAO,gBAAgB,aAAa,kBAAkB,aAAa,KAAK,EAC3F;EACA,UAAU,uBAAuB;EACjC,QAAQ;CACV,CAAC;CACD,MAAM,UAAU,IAAI,mBAAmB;EACrC,MAAM,IAAI,yBAAyB,IAAI,cAAc;EACrD,MAAM;EACN,QAAQ;CACV,CAAC;CAGD,MAAM,cAAc,IAAI,kBAAkB,KAAK,QAAQ;EACrD,UAAU,IAAI,0BAA0B,IAAI,cAAc;EAC1D,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,WAAW,IAAI,oBAAoB;EACvC,MAAM,IAAI,0BAA0B,IAAI,cAAc;EACtD;EACA,QAAQ;EACR,QAAQ;EACR,KAAK;EACL,QAAQ;CACV,CAAC;CAED,MAAM,YAAY,IAAI,sBAAsB,IAAI,gBAAgB;CAChE,MAAM,kBAAkB,IAAI,4BAA4B,IAAI,gBAAgB;CAC5E,MAAM,YAAY,IAAI,sBAAsB,IAAI,gBAAgB;CAChE,MAAM,oBAAoB,IAAI,+BAA+B,IAAI,gBAAgB;CACjF,MAAM,eAAe,IAAI,0BAA0B,IAAI,gBAAgB;CACvE,MAAM,QAAQ,IAAI,gBAAgB;EAChC,MAAM;EACN,QAAQ;EACR;EACA;EACA,UAAU;EACV,UAAU;EACV,eAAe;EACf,UAAU;EACV,QAAQ;EACR;EACA;EACA,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,OAAO,IAAI,sBAAsB,IAAI,gBAAgB;GACrD,UAAU,IAAI,0BAA0B,IAAI,gBAAgB;GAC5D,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF,WAAW;EACX,QAAQ;CACV,CAAC;CACD,MAAM,QAAQ,IAAI,gBAAgB;EAChC,MAAM;EACN,QAAQ;EACR;EACA;EACA,UAAU;EACV,eAAe;EACf,UAAU;EACV,QAAQ;EACR;EACA,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,OAAO,IAAI,sBAAsB,IAAI,gBAAgB;GACrD,UAAU,IAAI,0BAA0B,IAAI,gBAAgB;GAC5D,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF,GAAI,UAAU,EAAE,OAAO;EACvB,GAAI,SAAS,QAAQ,EAAE,MAAM,QAAQ,KAAK;EAC1C,QAAQ;CACV,CAAC;CACD,MAAM,aAAa,IAAI,sBAAsB;EAC3C,MAAM;EACN,QAAQ;EACC;EACT;EACA,QAAQ;EACR;EACA,UAAU;EACV;EACA,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,YAAY,IAAI,4BAA4B,IAAI,gBAAgB;GAChE,UAAU,IAAI,0BAA0B,IAAI,gBAAgB;GAC5D,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF;EACA,QAAQ;CACV,CAAC;CAED,MAAM,gBAAgB,IAAI,wBAAwB;EAChD,MAAM;EACN,QAAQ;EACR;EACA;EACA,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,eAAe,IAAI,+BAA+B,IAAI,gBAAgB;GACtE,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF,QAAQ;CACV,CAAC;CAED,MAAM,UAAU,IAAI,kBAAkB;EACpC,WAAW,EAAE,6BAA6B,QAAQ,sBAAsB,EAAE;EAC1E,MAAM,IAAI,2BAA2B,IAAI,gBAAgB;EACzD,KAAK,IAAI,kBAAkB,KAAK,QAAQ;GACtC,SAAS,IAAI,2BAA2B,IAAI,gBAAgB;GAC5D,QAAQ,IAAI,sBAAsB,IAAI,YAAY;EACpD,EAAE;EACF,QAAQ;CACV,CAAC;CAED,MAAM,oBAAoB,IAAI,+BAA+B,EAAE;CAC/D,MAAM,mBAAmB,IAAI,yBAAyB;EACpD,MAAM;EACN,QAAQ;CACV,CAAC;CACD,MAAM,aAAa;EACjB,YAAY,IAAI,qBAAqB;GACnC;GACA;GACA,UAAU;GACV,UAAU;GACV,UAAU;GACV,YAAY;GACZ,QAAQ;GACR,QAAQ;EACV,CAAC;EACD,SAAS,IAAI,kBAAkB;GAAE;GAAS,QAAQ;GAAc;EAAc,CAAC;CACjF;CAEA,MAAM,YAAY;EAChB,OAAO,IAAI,uBAAuB;GAChC,MAAM,IAAI,uBAAuB,IAAI,eAAe;GACpD,aAAa;GACb,QAAQ;GACR,QAAQ;GACR;EACF,CAAC;EACD,QAAQ,IAAI,wBAAwB;GAClC,MAAM,IAAI,wBAAwB,IAAI,eAAe;GACrD;GACA;GACA,OAAO;GACP;GACA,QAAQ;GACR,QAAQ;GACR,eAAe;GACf,QAAQ;GACR;GACA;GACA;GACA,UAAU,uBAAuB;GACjC,kBAAkB,OAAO;EAC3B,CAAC;CACH;CAEA,MAAM,kBAAkB,IAAI,uBAC1B,IACA,OAAO,oBACP,kBACF;CAKA,MAAM,uBAAuB,MAAM,iBAAiB,SAAS,YAAY,kBAAkB;CAG3F,MAAM,kBAAkB,IAAI,kBAAkB,KAAK,QAAQ;EACzD,aAAa,IAAI,6BAA6B,IAAI,kBAAkB;EACpE,aAAa,IAAI,uBAAuB,IAAI,OAAO,oBAAoB,kBAAkB;EACzF,QAAQ,IAAI,sBAAsB,IAAI,YAAY;CACpD,EAAE;CACF,MAAM,eAAe,IAAI,wBAAwB;EAC/C,UAAU;EACV,MAAM,IAAI,6BAA6B,IAAI,kBAAkB;EAC7D,KAAK;EACL,aAAa;EACb,QAAQ;CACV,CAAC;CAKD,MAAM,iBAAiB,IAAI,kBAAkB,KAAK,QAAQ;EACxD,aAAa,IAAI,6BAA6B,IAAI,iBAAiB;EACnE,MAAM,IAAI,gCAAgC,IAAI,iBAAiB;EAC/D,aAAa,IAAI,uBAAuB,IAAI,OAAO,oBAAoB,iBAAiB;EACxF,QAAQ,IAAI,sBAAsB,IAAI,iBAAiB;CACzD,EAAE;CAGF,MAAM,gBAA+B;EACnC,eAAe,OAAO,OAAO,cAAc;GACzC,MAAM,UAAU,MAAM,kBAAkB,gBAAgB,OAAO,SAAS;GACxE,MAAM,OAAO,UAAU,MAAM,SAAS,YAAY,QAAQ,MAAM,IAAI;GACpE,OAAO,OAAO;IAAE,QAAQ,KAAK;IAAI,OAAO,KAAK;GAAM,IAAI;EACzD;EACA,aAAa,OAAO,OAAO,cAAc;GACvC,MAAM,SAAS,cAAc,YAAY,KAAK;GAC9C,MAAM,SAAS,MAAM,QAAQ,WAAW,WAAW,MAAM;GACzD,IAAI,QACF,OAAO;IAAE,IAAI,OAAO;IAAI,OAAO,OAAO;IAAO,MAAM,OAAO;GAAK;GAEjE,MAAM,WAAW,MAAM,QAAQ,aAAa,WAAW,MAAM;GAC7D,IAAI,UACF,OAAO;IAAE,IAAI,SAAS;IAAI,OAAO,SAAS;IAAO,MAAM,SAAS;GAAK;GAEvE,MAAM,YAAY,MAAM,QAAQ,cAAc,WAAW,MAAM;GAC/D,IAAI,WACF,OAAO;IAAE,IAAI,UAAU;IAAI,OAAO,UAAU;IAAO,MAAM,UAAU;GAAK;GAE1E,MAAM,QAAQ,MAAM,QAAQ,UAAU,WAAW,MAAM;GACvD,OAAO,QAAQ;IAAE,IAAI,MAAM;IAAI,OAAO,MAAM;IAAO,MAAM,MAAM;GAAK,IAAI;EAC1E;CACF;CAEA,MAAM,WAAW,IAAI,gCAAgC,IAAI,iBAAiB;CAC1E,MAAM,QAAQ,cAAc;EAC1B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;CACD,MAAM,iBAAiB,kBAAkB;EACvC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,UAAU;CACZ,CAAC;CACD,MAAM,wBAAwB,IAAI,sBAAsB;EACtD,OAAO;EACP,OAAO;EACP,OAAO,uBAAuB;EAC9B,UAAU,uBAAuB;EACjC,YAAY;EACZ,UAAU;EACV;EACA,MAAM;EACN,QAAQ;EACR,UAAU,IAAI,sBAAsB,gBAAgB;EACpD,QAAQ;CACV,CAAC;CACD,MAAM,cAAc,IAAI,uBAAuB;EAC7C,MAAM,IAAI,6BAA6B,IAAI,iBAAiB;EAC5D;EACA,KAAK;EACL,QAAQ;EACR;EACA,SAAS;EACT;EACA,cAAc,UAAU,cAAc,YAAY,KAAK;EACvD,aAAa;EACb,UACE,SAAS,UAAU,YACnB,IAAI,mBAAmB,EAAE,qBAAqB,OAAO,2BAA2B,CAAC;EACnF,MAAM,MAAM;EACZ,QAAQ,MAAM;EACd,UAAU,IAAI,qBAAqB;GACjC,MAAM;GACN,UAAU,uBAAuB;GACjC;GACA,QAAQ;EACV,CAAC;EACD,WAAW;EACX,QAAQ;CACV,CAAC;CACD,iBAAiB,SAAS,WAAW;CACrC,iBAAiB,aACf;EACE,GAAG,eAAe;GAAE;GAAO;GAAS,QAAQ;EAAiB,CAAC;EAC9D,GAAG,YAAY;GAAE,QAAQ;GAAS,QAAQ;EAAc,CAAC;EACzD,GAAG,iBAAiB,EAAE,QAAQ,aAAa,CAAC;EAC5C,GAAG,WAAW;GAAE;GAAQ,MAAM;GAAe,QAAQ;EAAa,CAAC;EACnE,GAAG,iBAAiB;GAClB,WAAW;GACX,OAAO;GACP,QAAQ;EACV,CAAC;CACH,GACA;EAAC,GAAG;EAAyB,GAAG;EAA2B,GAAG;CAAmB,CACnF;CAEA,MAAM,WAAW,IAAI,iBAAiB;CACtC,IAAI,QACF,IAAI,kBAAkB;EAAE;EAAQ,QAAQ;CAAiB,CAAC,CAAC,CAAC,OAAO,QAAQ;CAE7E,SAAS,cAAc,UAAU,YAAY,OAAO,KAAK,CAAC;CAC1D,MAAM,eAAe,oBAAoB,OAAO,MAAM;CACtD,MAAM,cAAc,IAAI,mBACtB,IAAI,mBAAmB,IAAI,YAAY,GACvC,UACA,cACA,YACF;CAKA,MAAM,aAAa,OAAO,MAAM,EAAE,MAAM,OAAO,CAAC;CAGhD,MAAM,YACqB,MAAc,OACvC,OAAO,GAAG,SAAwB;EAChC,IAAI;GACF,OAAO,MAAM,GAAG,GAAG,IAAI;EACzB,SAAS,KAAK;GACZ,WAAW,MAAM,aAAa,KAAK,UAAU,EAAE,IAAI,CAAC;GACpD,MAAM;EACR;CACF;CACF,MAAM,MAAM,aAAa,MAAM;CAC/B,IAAI,CAAC,IAAI,cACP,WAAW,KACT,kGACA,EAAE,aAAa,OAAO,YAAY,CACpC;CAEF,MAAM,OAAmB,IAAI,WAAW;EACtC;EACA,SAAS,OAAO;EAChB,KAAK;GACH,cAAc,IAAI;GAClB,UAAU,IAAI;GACd,WAAW,IAAI;GACf,aAAa,IAAI;GACjB,eAAe,IAAI;EACrB;EACA,QAAQ,OAAO;EACf,gBAAgB,OAAO;EACvB,OAAO;GACL,mBAAmB,OAAO,EAAE,MAAM,UAAU;IAC1C,MAAM,SAAS,kBAAkB;KAAE,OAAO,KAAK;KAAO;IAAI,CAAC;GAC7D;GACA,iBAAiB,OAAO,EAAE,WAAW;IACnC,MAAM,SAAS,oBAAoB,EAAE,OAAO,KAAK,MAAM,CAAC;GAC1D;GACA,eAAe,SAAS,iBAAiB,OAAO,EAAE,OAAO,UAAU;IACjE,MAAM,SAAS,cAAc;KAC3B;KACA;IACF,CAAC;GACH,CAAC;GACD,kBAAkB,SAAS,oBAAoB,OAAO,SAAS;IAC7D,MAAM,EAAE,OAAO,SAAS;IACxB,MAAM,CAAC,WAAW,YAAY,KAAK,MAAM,GAAG;IAG5C,MAAM,aAAa,MAAM,SAAS,iBAAiB;KACjD;KACA,GAAI,cAAc,KAAA,KAAa,EAAE,UAAU;KAC3C,GAAI,aAAa,KAAA,KAAa,EAAE,SAAS;IAC3C,CAAC;IAED,OAAO,EACL,MAAM;KACJ,GAAG;KACH,IAAI,WAAW;IACjB,EACF;GACF,CAAC;GACD,qBAAqB,SAAS,uBAAuB,OAAO,YAAY;IACtE,MAAM,SAAS,MAAM,SAAS,oBAAoB,QAAQ,MAAM;IAChE,IAAI,CAAC,QACH;IAEF,IAAI,cAAc,kBAAkB,OAAO,KAAK,GAAG;KACjD,WAAW,KAAK,4CAA4C,EAAE,QAAQ,OAAO,GAAG,CAAC;KACjF,OAAO;IACT;IACA,MAAM,OAAO,MAAM,cAAc,mBAAmB,OAAO,EAAE;IAC7D,IAAI,KAAK,WAAW,GAClB;IAGF,MAAM,MAAM,MAAM,cAAc,QAAQ,KAAK,EAAE,CAAE,KAAK;IACtD,IAAI,CAAC,KACH;IAGF,OAAO,EAAE,MAAM;KAAE,GAAG;KAAS,sBAAsB,IAAI;IAAG,EAAE;GAC9D,CAAC;GAID,0BAA0B,SACxB,4BACA,OAAO,EAAE,cAAc,KAAK,MAAM,aAAa;IAC7C,MAAM,YAAY,MAAM,cAAc,sBAAsB;KAC1D,SAAS,OAAO;KAChB,GAAG;KACH,MAAM,IAAI,QAAQ,KAAA;IACpB,CAAC;IACD,OAAO,EAAE,MAAM;KAAE,GAAG;KAAK,IAAI,UAAU;IAAG,EAAE;GAC9C,CACF;GACA,0BAA0B,SAAS,4BAA4B,OAAO,EAAE,mBAAmB;IACzF,MAAM,cAAc,mBAAmB,aAAa,EAAE;GACxD,CAAC;GACD,iBAAiB,SAAS,mBAAmB,OAAO,EAAE,aAAa;IACjE,MAAM,cAAc,WAAW;KAC7B,OAAO,OAAO;KACd,QAAQ,OAAO;IACjB,CAAC;GACH,CAAC;GACD,oBAAoB,SAAS,sBAAsB,OAAO,EAAE,aAAa;IACvE,MAAM,cAAc,cAAc,OAAO,gBAAgB,OAAO,MAAM;GACxE,CAAC;EACH;EACA,QAAQ;EACR,cAAc,OAAO;EACrB,eAAe,OAAO;CACxB,CAAC;CACD,YAAY,UAAU;CAEtB,OAAO;EACL;EACA;EACA;EACA;EACA;EAEA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,mBAAmB,uBAAuB;EAC1C,sBAAsB,uBAAuB;EAC7C;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA,WAAW;EACX;EACA,SAAS,MAAM;EACf;EACA;EACA,gBAAgB;EAEhB,UAAU;CACZ;AACF"}

package/dist/app/notification-channels.js

@@ -8,6 +8,7 @@ const CONTENT_SUBJECTS = /* @__PURE__ */ new Set([
 	"course",
 	"download",
 	"community",
+	"event",
 	"bundle"
 ]);
 function buildNotificationTypeRegistry(declarations, defaults, configured) {