@headless-lms/server 0.5.0 → 0.6.1

package/dist/http/routes/member/files.js.map

@@ -1 +1 @@
-{"version":3,"file":"files.js","names":[],"sources":["../../../../src/http/routes/member/files.ts"],"sourcesContent":["// Member file proxies. Each route asks the context that owns the file, then\n// redirects to a short-lived signed storage URL. Every refusal is a 404, so a\n// response never confirms that a file exists. A 403 only means the caller is\n// not an active member of the organization.\nimport type { FastifyInstance, FastifyReply } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { z } from 'zod';\nimport {\n  ActivityFileParams,\n  CommunityThumbnailParams,\n  CourseThumbnailParams,\n  DownloadFileParams,\n  DownloadThumbnailParams,\n  EventFileParams,\n  EventThumbnailParams,\n  MessageAttachmentParams,\n  PostCoverParams,\n  PostAssetParams,\n  UploadFileParams,\n  refusals,\n} from '../../schemas/index.js';\nimport { resolveActor } from '../../scope.js';\nimport type { Container } from '../../../app/container.js';\n\nconst tags = ['Files'];\nconst responses = { 302: z.void(), ...refusals(403, 404) };\n\nfunction redirect(reply: FastifyReply, url: string) {\n  return reply\n    .header('cache-control', 'no-store')\n    .header('referrer-policy', 'no-referrer')\n    .redirect(url, 302);\n}\n\nexport async function memberFileRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const member = container.reporting.member;\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/courses/:courseId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getCourseThumbnail',\n      tags,\n      summary: \"Redirect to a course's thumbnail\",\n      description:\n        'For an unpublished course, which only a holder of `courses:read` on it may fetch: a published course carries a public `thumbnailUrl` instead. 404 when the course has no thumbnail.',\n      params: CourseThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.thumbnailFile('course', req.params.courseId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/events/:eventId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getEventThumbnail',\n      tags,\n      summary: \"Redirect to an event's cover\",\n      description:\n        'For a draft event, which only a holder of `events:read` on it may fetch: a published or canceled event carries a public `thumbnailUrl` instead. 404 when the event read returns 404 or the event has no cover.',\n      params: EventThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.thumbnailFile('event', req.params.eventId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/events/:eventId/assets/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getEventFile',\n      tags,\n      summary: 'Redirect to a file attached to an event',\n      description:\n        'For a holder of `events:read` on the event or the org, or an attendee of the published or canceled event. Saved under its display name. 404 otherwise, or when the file is not attached to the event.',\n      params: EventFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.eventFile(req.params.eventId, req.params.assetId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/downloads/:downloadId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getDownloadThumbnail',\n      tags,\n      summary: \"Redirect to a download's thumbnail\",\n      description:\n        'For an unpublished download, which only a holder of `downloads:read` on it may fetch: a published download carries a public `thumbnailUrl` instead. 404 when the download has no thumbnail.',\n      params: DownloadThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.thumbnailFile('download', req.params.downloadId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getCommunityThumbnail',\n      tags,\n      summary: \"Redirect to a community's thumbnail\",\n      description:\n        'For an unpublished community, which only a holder of `communities:read` on it may fetch: a published community carries a public `thumbnailUrl` instead. 404 when the community has no thumbnail.',\n      params: CommunityThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.thumbnailFile('community', req.params.communityId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/activities/:activityId/assets/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getActivityFile',\n      tags,\n      summary: 'Redirect to a file used in a lesson',\n      description:\n        'Served when the person can open the course, the course and the lesson are published, and the lesson lists the file. A holder of `courses:read` on the course may fetch any file a lesson lists. Use the URL as an img, video or audio src.',\n      params: ActivityFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.activityFile(req.params.activityId, req.params.assetId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/downloads/:downloadId/assets/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getDownloadFile',\n      tags,\n      summary: 'Redirect to a file in a download, saved under its display name',\n      description:\n        'Served when the person can open the download, it is published, and it lists the file. A holder of `downloads:read` on the download may fetch it unpublished. The storage link lives DELIVERY_URL_EXPIRY seconds.',\n      params: DownloadFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.downloadFile(req.params.downloadId, req.params.assetId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/posts/:postId/cover',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getPostCover',\n      tags,\n      summary: \"Redirect to a post's cover image\",\n      description:\n        'For a post that is not published, served to whoever can read it: a published post carries a public `coverUrl` instead. 404 when the post has no cover.',\n      params: PostCoverParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await container.posts.coverFile(req.params.postId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/posts/:postId/assets/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getPostAsset',\n      tags,\n      summary: \"Redirect to a file in a post's body\",\n      description:\n        'Served to whoever can read the post while its body shows the file. Images, video, audio and PDFs open in place; any other file downloads under its name.',\n      params: PostAssetParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await container.posts.assetFile(req.params.postId, req.params.assetId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/chats/:chatId/messages/:messageId/attachments/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMessageAttachment',\n      tags,\n      summary: 'Redirect to an image attached to a chat message',\n      description:\n        \"Served to the chat's participants while the message stands, to holders of `communities:moderate` on the community also after it is deleted, and to them while the message is flagged.\",\n      params: MessageAttachmentParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await container.chats.attachmentFile(\n        req.params.chatId,\n        req.params.messageId,\n        req.params.assetId,\n        actor,\n      );\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/uploads/:id/file',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberUploadFile',\n      tags,\n      summary: 'Redirect to an image you uploaded',\n      description: 'Served only to the person who uploaded it, once it is finalized.',\n      params: UploadFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await container.assets.ownUploadFile(req.params.id, actor);\n      return redirect(reply, url);\n    },\n  });\n}\n"],"mappings":";;;;;;AAwBA,MAAM,OAAO,CAAC,OAAO;AACrB,MAAM,YAAY;CAAE,KAAK,EAAE,KAAK;CAAG,GAAG,SAAS,KAAK,GAAG;AAAE;AAEzD,SAAS,SAAS,OAAqB,KAAa;CAClD,OAAO,MACJ,OAAO,iBAAiB,UAAU,CAAC,CACnC,OAAO,mBAAmB,aAAa,CAAC,CACxC,SAAS,KAAK,GAAG;AACtB;AAEA,eAAsB,iBAAiB,KAAsB,WAAqC;CAChG,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,SAAS,UAAU,UAAU;CAEnC,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,UAAU,IAAI,OAAO,UAAU,KAAK,CACjD;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,SAAS,IAAI,OAAO,SAAS,KAAK,CAC/C;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,UAAU,IAAI,OAAO,SAAS,IAAI,OAAO,SAAS,KAAK,CACtD;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,YAAY,IAAI,OAAO,YAAY,KAAK,CACrD;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,aAAa,IAAI,OAAO,aAAa,KAAK,CACvD;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,aAAa,IAAI,OAAO,YAAY,IAAI,OAAO,SAAS,KAAK,CAC5D;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,aAAa,IAAI,OAAO,YAAY,IAAI,OAAO,SAAS,KAAK,CAC5D;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,UAAU,MAAM,UAAU,IAAI,OAAO,QAAQ,KAAK,CAC1C;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,UAAU,MAAM,UAAU,IAAI,OAAO,QAAQ,IAAI,OAAO,SAAS,KAAK,CAC9D;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAO/C,OAAO,SAAS,OAAO,MANL,UAAU,MAAM,eAChC,IAAI,OAAO,QACX,IAAI,OAAO,WACX,IAAI,OAAO,SACX,KACF,CAC0B;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,UAAU,OAAO,cAAc,IAAI,OAAO,IAAI,KAAK,CAC3C;EAC5B;CACF,CAAC;AACH"}
+{"version":3,"file":"files.js","names":[],"sources":["../../../../src/http/routes/member/files.ts"],"sourcesContent":["// Member file proxies. Each route asks the context that owns the file, then\n// redirects to a short-lived signed storage URL. Every refusal is a 404, so a\n// response never confirms that a file exists. A 403 only means the caller is\n// not an active member of the organization.\nimport type { FastifyInstance, FastifyReply } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport { z } from 'zod';\nimport {\n  ActivityFileParams,\n  CommunityThumbnailParams,\n  CourseThumbnailParams,\n  DownloadFileParams,\n  DownloadThumbnailParams,\n  EventFileParams,\n  EventThumbnailParams,\n  MessageAttachmentParams,\n  PostCoverParams,\n  PostAssetParams,\n  SpaceImageParams,\n  UploadFileParams,\n  refusals,\n} from '../../schemas/index.js';\nimport { resolveActor } from '../../scope.js';\nimport type { Container } from '../../../app/container.js';\n\nconst tags = ['Files'];\nconst responses = { 302: z.void(), ...refusals(403, 404) };\n\nfunction redirect(reply: FastifyReply, url: string) {\n  return reply\n    .header('cache-control', 'no-store')\n    .header('referrer-policy', 'no-referrer')\n    .redirect(url, 302);\n}\n\nexport async function memberFileRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const member = container.reporting.member;\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/courses/:courseId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getCourseThumbnail',\n      tags,\n      summary: \"Redirect to a course's thumbnail\",\n      description:\n        'For an unpublished course, which only a holder of `courses:read` on it may fetch: a published course carries a public `thumbnailUrl` instead. 404 when the course has no thumbnail.',\n      params: CourseThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.thumbnailFile('course', req.params.courseId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/events/:eventId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getEventThumbnail',\n      tags,\n      summary: \"Redirect to an event's cover\",\n      description:\n        'For a draft event, which only a holder of `events:read` on it may fetch: a published or canceled event carries a public `thumbnailUrl` instead. 404 when the event read returns 404 or the event has no cover.',\n      params: EventThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.thumbnailFile('event', req.params.eventId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/events/:eventId/assets/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getEventFile',\n      tags,\n      summary: 'Redirect to a file attached to an event',\n      description:\n        'For a holder of `events:read` on the event or the org, or an attendee of the published or canceled event. Saved under its display name. 404 otherwise, or when the file is not attached to the event.',\n      params: EventFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.eventFile(req.params.eventId, req.params.assetId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/downloads/:downloadId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getDownloadThumbnail',\n      tags,\n      summary: \"Redirect to a download's thumbnail\",\n      description:\n        'For an unpublished download, which only a holder of `downloads:read` on it may fetch: a published download carries a public `thumbnailUrl` instead. 404 when the download has no thumbnail.',\n      params: DownloadThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.thumbnailFile('download', req.params.downloadId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/communities/:communityId/thumbnail',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getCommunityThumbnail',\n      tags,\n      summary: \"Redirect to a community's thumbnail\",\n      description:\n        'For an unpublished community, which only a holder of `communities:read` on it may fetch: a published community carries a public `thumbnailUrl` instead. 404 when the community has no thumbnail.',\n      params: CommunityThumbnailParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.thumbnailFile('community', req.params.communityId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/spaces/:spaceId/images/:image',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getSpaceImage',\n      tags,\n      summary: \"Redirect to a space's cover, background or icon\",\n      description:\n        'For a space in an unpublished community, which only a holder of `communities:read` on the community may fetch: a space in a published community carries public `coverUrl`, `backgroundUrl` and `iconUrl` instead. 404 when the space has no such image.',\n      params: SpaceImageParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.spaceImageFile(req.params.spaceId, req.params.image, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/activities/:activityId/assets/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getActivityFile',\n      tags,\n      summary: 'Redirect to a file used in a lesson',\n      description:\n        'Served when the person can open the course, the course and the lesson are published, and the lesson lists the file. A holder of `courses:read` on the course may fetch any file a lesson lists. Use the URL as an img, video or audio src.',\n      params: ActivityFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.activityFile(req.params.activityId, req.params.assetId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/downloads/:downloadId/assets/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getDownloadFile',\n      tags,\n      summary: 'Redirect to a file in a download, saved under its display name',\n      description:\n        'Served when the person can open the download, it is published, and it lists the file. A holder of `downloads:read` on the download may fetch it unpublished. The storage link lives DELIVERY_URL_EXPIRY seconds.',\n      params: DownloadFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await member.downloadFile(req.params.downloadId, req.params.assetId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/posts/:postId/cover',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getPostCover',\n      tags,\n      summary: \"Redirect to a post's cover image\",\n      description:\n        'For a post that is not published, served to whoever can read it: a published post carries a public `coverUrl` instead. 404 when the post has no cover.',\n      params: PostCoverParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await container.posts.coverFile(req.params.postId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/posts/:postId/assets/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getPostAsset',\n      tags,\n      summary: \"Redirect to a file in a post's body\",\n      description:\n        'Served to whoever can read the post while its body shows the file. Images, video, audio and PDFs open in place; any other file downloads under its name.',\n      params: PostAssetParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await container.posts.assetFile(req.params.postId, req.params.assetId, actor);\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/chats/:chatId/messages/:messageId/attachments/:assetId',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMessageAttachment',\n      tags,\n      summary: 'Redirect to an image attached to a chat message',\n      description:\n        \"Served to the chat's participants while the message stands, to holders of `communities:moderate` on the community also after it is deleted, and to them while the message is flagged.\",\n      params: MessageAttachmentParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await container.chats.attachmentFile(\n        req.params.chatId,\n        req.params.messageId,\n        req.params.assetId,\n        actor,\n      );\n      return redirect(reply, url);\n    },\n  });\n\n  r.route({\n    method: 'GET',\n    url: '/api/member/uploads/:id/file',\n    preHandler: app.requireOrgSession,\n    schema: {\n      operationId: 'getMemberUploadFile',\n      tags,\n      summary: 'Redirect to an image you uploaded',\n      description: 'Served only to the person who uploaded it, once it is finalized.',\n      params: UploadFileParams,\n      response: responses,\n    },\n    handler: async (req, reply) => {\n      const actor = await resolveActor(container, req);\n      const url = await container.assets.ownUploadFile(req.params.id, actor);\n      return redirect(reply, url);\n    },\n  });\n}\n"],"mappings":";;;;;;AAyBA,MAAM,OAAO,CAAC,OAAO;AACrB,MAAM,YAAY;CAAE,KAAK,EAAE,KAAK;CAAG,GAAG,SAAS,KAAK,GAAG;AAAE;AAEzD,SAAS,SAAS,OAAqB,KAAa;CAClD,OAAO,MACJ,OAAO,iBAAiB,UAAU,CAAC,CACnC,OAAO,mBAAmB,aAAa,CAAC,CACxC,SAAS,KAAK,GAAG;AACtB;AAEA,eAAsB,iBAAiB,KAAsB,WAAqC;CAChG,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,SAAS,UAAU,UAAU;CAEnC,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,UAAU,IAAI,OAAO,UAAU,KAAK,CACjD;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,SAAS,IAAI,OAAO,SAAS,KAAK,CAC/C;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,UAAU,IAAI,OAAO,SAAS,IAAI,OAAO,SAAS,KAAK,CACtD;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,YAAY,IAAI,OAAO,YAAY,KAAK,CACrD;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,cAAc,aAAa,IAAI,OAAO,aAAa,KAAK,CACvD;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,eAAe,IAAI,OAAO,SAAS,IAAI,OAAO,OAAO,KAAK,CACzD;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,aAAa,IAAI,OAAO,YAAY,IAAI,OAAO,SAAS,KAAK,CAC5D;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,OAAO,aAAa,IAAI,OAAO,YAAY,IAAI,OAAO,SAAS,KAAK,CAC5D;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,UAAU,MAAM,UAAU,IAAI,OAAO,QAAQ,KAAK,CAC1C;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,UAAU,MAAM,UAAU,IAAI,OAAO,QAAQ,IAAI,OAAO,SAAS,KAAK,CAC9D;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aACE;GACF,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAO/C,OAAO,SAAS,OAAO,MANL,UAAU,MAAM,eAChC,IAAI,OAAO,QACX,IAAI,OAAO,WACX,IAAI,OAAO,SACX,KACF,CAC0B;EAC5B;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,UAAU;EACZ;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;GAE/C,OAAO,SAAS,OAAO,MADL,UAAU,OAAO,cAAc,IAAI,OAAO,IAAI,KAAK,CAC3C;EAC5B;CACF,CAAC;AACH"}

package/dist/http/routes/platform.js

@@ -15,7 +15,7 @@ async function platformRoutes(app, container) {
 			operationId: "createPlatformOrganization",
 			tags,
 			summary: "Create an organization and its first API key",
-			description: `Requires the platform key as \`Authorization: Bearer <platform key>\`. Creates the organization, owned by the platform account, and an API key for the platform account with the Owner role and no expiry. The key is returned once. 409 when the slug is in use.`,
+			description: `Requires the platform key as \`Authorization: Bearer <platform key>\`. Creates the organization, owned by the platform account, with its metadata, and an API key for the platform account with the Owner role and no expiry. The key is returned once. 409 when the slug is in use.`,
 			body: CreatePlatformOrganization,
 			response: {
 				201: PlatformOrganization,

package/dist/http/routes/platform.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform.js","names":[],"sources":["../../../src/http/routes/platform.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport type { Container } from '../../app/container.js';\nimport {\n  CreatedApiKey,\n  CreatePlatformApiKey,\n  CreatePlatformOrganization,\n  PlatformOrganization,\n  PlatformOrgIdParam,\n  refusals,\n} from '../schemas/index.js';\n\nexport async function platformRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const tags = ['Platform'];\n  const organizations = container.organizations;\n\n  r.route({\n    method: 'POST',\n    url: '/api/platform/organizations',\n    preHandler: app.requirePlatform,\n    schema: {\n      operationId: 'createPlatformOrganization',\n      tags,\n      summary: 'Create an organization and its first API key',\n      description: `Requires the platform key as \\`Authorization: Bearer <platform key>\\`. Creates the organization, owned by the platform account, and an API key for the platform account with the Owner role and no expiry. The key is returned once. 409 when the slug is in use.`,\n      body: CreatePlatformOrganization,\n      response: { 201: PlatformOrganization, ...refusals(400, 409) },\n    },\n    handler: async (req, reply) => {\n      const created = await organizations.createPlatformOrganization(req.body);\n      return reply.code(201).send({\n        organization: {\n          ...created.organization,\n          createdAt: created.organization.createdAt.toISOString(),\n        },\n        apiKey: created.apiKey,\n      });\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/platform/organizations/:orgId/api-keys',\n    preHandler: app.requirePlatform,\n    schema: {\n      operationId: 'createPlatformApiKey',\n      tags,\n      summary: 'Create another API key for an organization',\n      description: `Requires the platform key as \\`Authorization: Bearer <platform key>\\`. Creates an API key for the platform account in the organization, with the Owner role and no expiry, to replace a lost or leaked one; revoke the old key with the new one. The key is returned once. 404 when the platform account is not an active member of the organization.`,\n      params: PlatformOrgIdParam,\n      body: CreatePlatformApiKey,\n      response: { 201: CreatedApiKey, ...refusals(400, 404) },\n    },\n    handler: async (req, reply) => {\n      const created = await organizations.createPlatformApiKey(req.params.orgId, req.body.name);\n      return reply.code(201).send(created);\n    },\n  });\n}\n"],"mappings":";;;;;AAYA,eAAsB,eAAe,KAAsB,WAAqC;CAC9F,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,OAAO,CAAC,UAAU;CACxB,MAAM,gBAAgB,UAAU;CAEhC,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,MAAM;GACN,UAAU;IAAE,KAAK;IAAsB,GAAG,SAAS,KAAK,GAAG;GAAE;EAC/D;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,UAAU,MAAM,cAAc,2BAA2B,IAAI,IAAI;GACvE,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;IAC1B,cAAc;KACZ,GAAG,QAAQ;KACX,WAAW,QAAQ,aAAa,UAAU,YAAY;IACxD;IACA,QAAQ,QAAQ;GAClB,CAAC;EACH;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAe,GAAG,SAAS,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,UAAU,MAAM,cAAc,qBAAqB,IAAI,OAAO,OAAO,IAAI,KAAK,IAAI;GACxF,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,OAAO;EACrC;CACF,CAAC;AACH"}
+{"version":3,"file":"platform.js","names":[],"sources":["../../../src/http/routes/platform.ts"],"sourcesContent":["import type { FastifyInstance } from 'fastify';\nimport type { ZodTypeProvider } from 'fastify-type-provider-zod';\nimport type { Container } from '../../app/container.js';\nimport {\n  CreatedApiKey,\n  CreatePlatformApiKey,\n  CreatePlatformOrganization,\n  PlatformOrganization,\n  PlatformOrgIdParam,\n  refusals,\n} from '../schemas/index.js';\n\nexport async function platformRoutes(app: FastifyInstance, container: Container): Promise<void> {\n  const r = app.withTypeProvider<ZodTypeProvider>();\n  const tags = ['Platform'];\n  const organizations = container.organizations;\n\n  r.route({\n    method: 'POST',\n    url: '/api/platform/organizations',\n    preHandler: app.requirePlatform,\n    schema: {\n      operationId: 'createPlatformOrganization',\n      tags,\n      summary: 'Create an organization and its first API key',\n      description: `Requires the platform key as \\`Authorization: Bearer <platform key>\\`. Creates the organization, owned by the platform account, with its metadata, and an API key for the platform account with the Owner role and no expiry. The key is returned once. 409 when the slug is in use.`,\n      body: CreatePlatformOrganization,\n      response: { 201: PlatformOrganization, ...refusals(400, 409) },\n    },\n    handler: async (req, reply) => {\n      const created = await organizations.createPlatformOrganization(req.body);\n      return reply.code(201).send({\n        organization: {\n          ...created.organization,\n          createdAt: created.organization.createdAt.toISOString(),\n        },\n        apiKey: created.apiKey,\n      });\n    },\n  });\n\n  r.route({\n    method: 'POST',\n    url: '/api/platform/organizations/:orgId/api-keys',\n    preHandler: app.requirePlatform,\n    schema: {\n      operationId: 'createPlatformApiKey',\n      tags,\n      summary: 'Create another API key for an organization',\n      description: `Requires the platform key as \\`Authorization: Bearer <platform key>\\`. Creates an API key for the platform account in the organization, with the Owner role and no expiry, to replace a lost or leaked one; revoke the old key with the new one. The key is returned once. 404 when the platform account is not an active member of the organization.`,\n      params: PlatformOrgIdParam,\n      body: CreatePlatformApiKey,\n      response: { 201: CreatedApiKey, ...refusals(400, 404) },\n    },\n    handler: async (req, reply) => {\n      const created = await organizations.createPlatformApiKey(req.params.orgId, req.body.name);\n      return reply.code(201).send(created);\n    },\n  });\n}\n"],"mappings":";;;;;AAYA,eAAsB,eAAe,KAAsB,WAAqC;CAC9F,MAAM,IAAI,IAAI,iBAAkC;CAChD,MAAM,OAAO,CAAC,UAAU;CACxB,MAAM,gBAAgB,UAAU;CAEhC,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,MAAM;GACN,UAAU;IAAE,KAAK;IAAsB,GAAG,SAAS,KAAK,GAAG;GAAE;EAC/D;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,UAAU,MAAM,cAAc,2BAA2B,IAAI,IAAI;GACvE,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;IAC1B,cAAc;KACZ,GAAG,QAAQ;KACX,WAAW,QAAQ,aAAa,UAAU,YAAY;IACxD;IACA,QAAQ,QAAQ;GAClB,CAAC;EACH;CACF,CAAC;CAED,EAAE,MAAM;EACN,QAAQ;EACR,KAAK;EACL,YAAY,IAAI;EAChB,QAAQ;GACN,aAAa;GACb;GACA,SAAS;GACT,aAAa;GACb,QAAQ;GACR,MAAM;GACN,UAAU;IAAE,KAAK;IAAe,GAAG,SAAS,KAAK,GAAG;GAAE;EACxD;EACA,SAAS,OAAO,KAAK,UAAU;GAC7B,MAAM,UAAU,MAAM,cAAc,qBAAqB,IAAI,OAAO,OAAO,IAAI,KAAK,IAAI;GACxF,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,OAAO;EACrC;CACF,CAAC;AACH"}

package/dist/http/schemas/access.d.ts

@@ -46,10 +46,10 @@ declare const Permission: z.ZodEnum<{
   "automations:delete": "automations:delete";
 }>;
 declare const Level: z.ZodUnion<readonly [z.ZodLiteral<"org">, z.ZodLazy<z.ZodEnum<{
-  community: "community";
-  course: "course";
   download: "download";
+  course: "course";
   event: "event";
+  community: "community";
 }>>]>;
 declare const PermissionDefinition: z.ZodObject<{
   key: z.ZodEnum<{
@@ -101,10 +101,10 @@ declare const PermissionDefinition: z.ZodObject<{
   label: z.ZodString;
   description: z.ZodString;
   about: z.ZodUnion<readonly [z.ZodLiteral<"org">, z.ZodLazy<z.ZodEnum<{
-    community: "community";
-    course: "course";
     download: "download";
+    course: "course";
     event: "event";
+    community: "community";
   }>>]>;
   implies: z.ZodOptional<z.ZodArray<z.ZodEnum<{
     "organizations:read": "organizations:read";
@@ -202,10 +202,10 @@ declare const PermissionDefinitionList: z.ZodArray<z.ZodObject<{
   label: z.ZodString;
   description: z.ZodString;
   about: z.ZodUnion<readonly [z.ZodLiteral<"org">, z.ZodLazy<z.ZodEnum<{
-    community: "community";
-    course: "course";
     download: "download";
+    course: "course";
     event: "event";
+    community: "community";
   }>>]>;
   implies: z.ZodOptional<z.ZodArray<z.ZodEnum<{
     "organizations:read": "organizations:read";

package/dist/http/schemas/assets.d.ts

@@ -18,7 +18,6 @@ declare const AssetStatus: z.ZodEnum<{
 }>;
 type AssetStatus = z.infer<typeof AssetStatus>;
 declare const Asset: z.ZodObject<{
-  orgId: z.ZodString;
   id: z.ZodString;
   status: z.ZodEnum<{
     pending: "pending";
@@ -26,10 +25,11 @@ declare const Asset: z.ZodObject<{
   }>;
   createdAt: z.ZodCoercedDate<unknown>;
   updatedAt: z.ZodCoercedDate<unknown>;
-  contentId: z.ZodNullable<z.ZodString>;
+  orgId: z.ZodString;
   filename: z.ZodString;
   contentType: z.ZodString;
   size: z.ZodNumber;
+  contentId: z.ZodNullable<z.ZodString>;
   uploadedBy: z.ZodString;
   kind: z.ZodEnum<{
     image: "image";
@@ -65,7 +65,6 @@ declare const AssetsQuery: z.ZodObject<{
 type AssetsQuery = z.infer<typeof AssetsQuery>;
 declare const AssetsPage: z.ZodObject<{
   rows: z.ZodArray<z.ZodObject<{
-    orgId: z.ZodString;
     id: z.ZodString;
     status: z.ZodEnum<{
       pending: "pending";
@@ -73,10 +72,11 @@ declare const AssetsPage: z.ZodObject<{
     }>;
     createdAt: z.ZodCoercedDate<unknown>;
     updatedAt: z.ZodCoercedDate<unknown>;
-    contentId: z.ZodNullable<z.ZodString>;
+    orgId: z.ZodString;
     filename: z.ZodString;
     contentType: z.ZodString;
     size: z.ZodNumber;
+    contentId: z.ZodNullable<z.ZodString>;
     uploadedBy: z.ZodString;
     kind: z.ZodEnum<{
       image: "image";
@@ -117,7 +117,6 @@ declare const UploadTicket: z.ZodObject<{
   expiresInSeconds: z.ZodNumber;
   headers: z.ZodRecord<z.ZodString, z.ZodString>;
   asset: z.ZodObject<{
-    orgId: z.ZodString;
     id: z.ZodString;
     status: z.ZodEnum<{
       pending: "pending";
@@ -125,10 +124,11 @@ declare const UploadTicket: z.ZodObject<{
     }>;
     createdAt: z.ZodCoercedDate<unknown>;
     updatedAt: z.ZodCoercedDate<unknown>;
-    contentId: z.ZodNullable<z.ZodString>;
+    orgId: z.ZodString;
     filename: z.ZodString;
     contentType: z.ZodString;
     size: z.ZodNumber;
+    contentId: z.ZodNullable<z.ZodString>;
     uploadedBy: z.ZodString;
     kind: z.ZodEnum<{
       image: "image";

package/dist/http/schemas/chats.d.ts

@@ -5,8 +5,8 @@ declare const Chat: z.ZodObject<{
   id: z.ZodString;
   communityId: z.ZodString;
   kind: z.ZodEnum<{
-    direct: "direct";
     group: "group";
+    direct: "direct";
   }>;
   status: z.ZodEnum<{
     pending: "pending";
@@ -29,8 +29,8 @@ declare const MessageFlag: z.ZodObject<{
   resolvedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
   resolution: z.ZodNullable<z.ZodEnum<{
     dismissed: "dismissed";
-    deleted: "deleted";
     locked: "locked";
+    deleted: "deleted";
   }>>;
   resolvedBy: z.ZodNullable<z.ZodString>;
   createdAt: z.ZodCoercedDate<unknown>;
@@ -119,8 +119,8 @@ declare const ChatListItem: z.ZodObject<{
     id: z.ZodString;
     communityId: z.ZodString;
     kind: z.ZodEnum<{
-      direct: "direct";
       group: "group";
+      direct: "direct";
     }>;
     status: z.ZodEnum<{
       pending: "pending";
@@ -170,8 +170,8 @@ declare const ChatsPage: z.ZodObject<{
       id: z.ZodString;
       communityId: z.ZodString;
       kind: z.ZodEnum<{
-        direct: "direct";
         group: "group";
+        direct: "direct";
       }>;
       status: z.ZodEnum<{
         pending: "pending";
@@ -234,16 +234,21 @@ declare const ChatLiveEvent: z.ZodDiscriminatedUnion<[z.ZodObject<{
   type: z.ZodLiteral<"message.created">;
   chatId: z.ZodString;
   message: z.ZodObject<{
-    orgId: z.ZodString;
     id: z.ZodString;
+    reactions: z.ZodRecord<z.ZodString, z.ZodNumber>;
     communityId: z.ZodString;
+    body: z.ZodString;
+    mentions: z.ZodArray<z.ZodObject<{
+      orgUserId: z.ZodString;
+      name: z.ZodString;
+    }, z.core.$strict>>;
+    orgUserId: z.ZodString;
     createdAt: z.ZodCoercedDate<unknown>;
     updatedAt: z.ZodCoercedDate<unknown>;
-    orgUserId: z.ZodString;
+    orgId: z.ZodString;
     chatId: z.ZodString;
-    body: z.ZodString;
-    replyToId: z.ZodNullable<z.ZodString>;
     clientId: z.ZodNullable<z.ZodUUID>;
+    replyToId: z.ZodNullable<z.ZodString>;
     editedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
     deletedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
     sender: z.ZodObject<{
@@ -262,26 +267,26 @@ declare const ChatLiveEvent: z.ZodDiscriminatedUnion<[z.ZodObject<{
       assetId: z.ZodString;
       url: z.ZodString;
     }, z.core.$strict>>;
-    reactions: z.ZodRecord<z.ZodString, z.ZodNumber>;
-    mentions: z.ZodArray<z.ZodObject<{
-      orgUserId: z.ZodString;
-      name: z.ZodString;
-    }, z.core.$strict>>;
   }, z.core.$strict>;
 }, z.core.$strict>, z.ZodObject<{
   type: z.ZodLiteral<"message.updated">;
   chatId: z.ZodString;
   message: z.ZodObject<{
-    orgId: z.ZodString;
     id: z.ZodString;
+    reactions: z.ZodRecord<z.ZodString, z.ZodNumber>;
     communityId: z.ZodString;
+    body: z.ZodString;
+    mentions: z.ZodArray<z.ZodObject<{
+      orgUserId: z.ZodString;
+      name: z.ZodString;
+    }, z.core.$strict>>;
+    orgUserId: z.ZodString;
     createdAt: z.ZodCoercedDate<unknown>;
     updatedAt: z.ZodCoercedDate<unknown>;
-    orgUserId: z.ZodString;
+    orgId: z.ZodString;
     chatId: z.ZodString;
-    body: z.ZodString;
-    replyToId: z.ZodNullable<z.ZodString>;
     clientId: z.ZodNullable<z.ZodUUID>;
+    replyToId: z.ZodNullable<z.ZodString>;
     editedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
     deletedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
     sender: z.ZodObject<{
@@ -300,11 +305,6 @@ declare const ChatLiveEvent: z.ZodDiscriminatedUnion<[z.ZodObject<{
       assetId: z.ZodString;
       url: z.ZodString;
     }, z.core.$strict>>;
-    reactions: z.ZodRecord<z.ZodString, z.ZodNumber>;
-    mentions: z.ZodArray<z.ZodObject<{
-      orgUserId: z.ZodString;
-      name: z.ZodString;
-    }, z.core.$strict>>;
   }, z.core.$strict>;
 }, z.core.$strict>, z.ZodObject<{
   type: z.ZodLiteral<"message.deleted">;
@@ -326,8 +326,8 @@ declare const ChatLiveEvent: z.ZodDiscriminatedUnion<[z.ZodObject<{
     id: z.ZodString;
     communityId: z.ZodString;
     kind: z.ZodEnum<{
-      direct: "direct";
       group: "group";
+      direct: "direct";
     }>;
     status: z.ZodEnum<{
       pending: "pending";
@@ -431,8 +431,8 @@ declare const MessageQueueEntry: z.ZodObject<{
     resolvedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
     resolution: z.ZodNullable<z.ZodEnum<{
       dismissed: "dismissed";
-      deleted: "deleted";
       locked: "locked";
+      deleted: "deleted";
     }>>;
     resolvedBy: z.ZodNullable<z.ZodString>;
     createdAt: z.ZodCoercedDate<unknown>;
@@ -443,8 +443,8 @@ declare const MessageQueueEntry: z.ZodObject<{
     id: z.ZodString;
     communityId: z.ZodString;
     kind: z.ZodEnum<{
-      direct: "direct";
       group: "group";
+      direct: "direct";
     }>;
     status: z.ZodEnum<{
       pending: "pending";
@@ -507,8 +507,8 @@ declare const MessageQueue: z.ZodObject<{
       resolvedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
       resolution: z.ZodNullable<z.ZodEnum<{
         dismissed: "dismissed";
-        deleted: "deleted";
         locked: "locked";
+        deleted: "deleted";
       }>>;
       resolvedBy: z.ZodNullable<z.ZodString>;
       createdAt: z.ZodCoercedDate<unknown>;
@@ -519,8 +519,8 @@ declare const MessageQueue: z.ZodObject<{
       id: z.ZodString;
       communityId: z.ZodString;
       kind: z.ZodEnum<{
-        direct: "direct";
         group: "group";
+        direct: "direct";
       }>;
       status: z.ZodEnum<{
         pending: "pending";

package/dist/http/schemas/community.d.ts

@@ -8,8 +8,8 @@ declare const Community: z.ZodObject<{
   slug: z.ZodString;
   description: z.ZodString;
   status: z.ZodEnum<{
-    draft: "draft";
     published: "published";
+    draft: "draft";
   }>;
   thumbnailAssetId: z.ZodNullable<z.ZodString>;
   settings: z.ZodObject<{
@@ -42,8 +42,8 @@ declare const CommunitiesQuery: z.ZodObject<{
   search: z.ZodOptional<z.ZodString>;
   sort: z.ZodOptional<z.ZodString>;
   status: z.ZodOptional<z.ZodEnum<{
-    draft: "draft";
     published: "published";
+    draft: "draft";
   }>>;
 }, z.core.$strip>;
 declare const CommunitiesPage: z.ZodObject<{
@@ -55,8 +55,8 @@ declare const CommunitiesPage: z.ZodObject<{
     slug: z.ZodString;
     description: z.ZodString;
     status: z.ZodEnum<{
-      draft: "draft";
       published: "published";
+      draft: "draft";
     }>;
     thumbnailAssetId: z.ZodNullable<z.ZodString>;
     settings: z.ZodObject<{
@@ -95,8 +95,8 @@ declare const UpdateCommunity: z.ZodObject<{
   title: z.ZodOptional<z.ZodString>;
   description: z.ZodOptional<z.ZodString>;
   status: z.ZodOptional<z.ZodEnum<{
-    draft: "draft";
     published: "published";
+    draft: "draft";
   }>>;
   thumbnailAssetId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, z.core.$strict>;
@@ -154,6 +154,9 @@ declare const SpaceDetail: z.ZodObject<{
     reactions: z.ZodBoolean;
     requireReview: z.ZodBoolean;
   }, z.core.$strict>;
+  coverAssetId: z.ZodNullable<z.ZodString>;
+  backgroundAssetId: z.ZodNullable<z.ZodString>;
+  iconAssetId: z.ZodNullable<z.ZodString>;
   createdAt: z.ZodCoercedDate<unknown>;
   updatedAt: z.ZodCoercedDate<unknown>;
   topics: z.ZodArray<z.ZodObject<{
@@ -174,6 +177,9 @@ declare const SpaceDetail: z.ZodObject<{
     createdAt: z.ZodCoercedDate<unknown>;
     updatedAt: z.ZodCoercedDate<unknown>;
   }, z.core.$strict>>;
+  coverUrl: z.ZodNullable<z.ZodString>;
+  backgroundUrl: z.ZodNullable<z.ZodString>;
+  iconUrl: z.ZodNullable<z.ZodString>;
 }, z.core.$strict>;
 declare const SpaceMember: z.ZodObject<{
   orgId: z.ZodString;
@@ -182,15 +188,15 @@ declare const SpaceMember: z.ZodObject<{
   spaceId: z.ZodString;
   orgUserId: z.ZodString;
   status: z.ZodEnum<{
-    requested: "requested";
-    invited: "invited";
     active: "active";
     revoked: "revoked";
+    invited: "invited";
+    requested: "requested";
   }>;
   source: z.ZodEnum<{
+    manual: "manual";
     request: "request";
     invite: "invite";
-    manual: "manual";
   }>;
   createdAt: z.ZodCoercedDate<unknown>;
   updatedAt: z.ZodCoercedDate<unknown>;
@@ -203,15 +209,15 @@ declare const SpaceMembersPage: z.ZodObject<{
     spaceId: z.ZodString;
     orgUserId: z.ZodString;
     status: z.ZodEnum<{
-      requested: "requested";
-      invited: "invited";
       active: "active";
       revoked: "revoked";
+      invited: "invited";
+      requested: "requested";
     }>;
     source: z.ZodEnum<{
+      manual: "manual";
       request: "request";
       invite: "invite";
-      manual: "manual";
     }>;
     createdAt: z.ZodCoercedDate<unknown>;
     updatedAt: z.ZodCoercedDate<unknown>;
@@ -249,6 +255,9 @@ declare const UpdateSpace: z.ZodObject<{
     reactions: z.ZodOptional<z.ZodBoolean>;
     requireReview: z.ZodOptional<z.ZodBoolean>;
   }, z.core.$strict>>;
+  coverAssetId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  backgroundAssetId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  iconAssetId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, z.core.$strict>;
 declare const SetSpaceTopics: z.ZodObject<{
   topics: z.ZodArray<z.ZodObject<{
@@ -370,13 +379,16 @@ declare const LockedCommunitySpace: z.ZodObject<{
     by_invite: "by_invite";
   }>;
   standing: z.ZodEnum<{
+    none: "none";
+    member: "member";
+    invited: "invited";
     open: "open";
     requested: "requested";
-    invited: "invited";
-    member: "member";
     full: "full";
-    none: "none";
   }>;
+  coverUrl: z.ZodNullable<z.ZodString>;
+  backgroundUrl: z.ZodNullable<z.ZodString>;
+  iconUrl: z.ZodNullable<z.ZodString>;
   locked: z.ZodLiteral<true>;
 }, z.core.$strip>;
 declare const OpenCommunitySpace: z.ZodObject<{
@@ -389,13 +401,16 @@ declare const OpenCommunitySpace: z.ZodObject<{
     by_invite: "by_invite";
   }>;
   standing: z.ZodEnum<{
+    none: "none";
+    member: "member";
+    invited: "invited";
     open: "open";
     requested: "requested";
-    invited: "invited";
-    member: "member";
     full: "full";
-    none: "none";
   }>;
+  coverUrl: z.ZodNullable<z.ZodString>;
+  backgroundUrl: z.ZodNullable<z.ZodString>;
+  iconUrl: z.ZodNullable<z.ZodString>;
   locked: z.ZodLiteral<false>;
   description: z.ZodNullable<z.ZodString>;
   capacity: z.ZodNullable<z.ZodNumber>;
@@ -412,9 +427,9 @@ declare const OpenCommunitySpace: z.ZodObject<{
     id: z.ZodString;
     contentId: z.ZodString;
     type: z.ZodEnum<{
-      community: "community";
-      course: "course";
       download: "download";
+      course: "course";
+      community: "community";
     }>;
     title: z.ZodString;
   }, z.core.$strip>>;
@@ -436,13 +451,16 @@ declare const CommunityHomeSpace: z.ZodDiscriminatedUnion<[z.ZodObject<{
     by_invite: "by_invite";
   }>;
   standing: z.ZodEnum<{
+    none: "none";
+    member: "member";
+    invited: "invited";
     open: "open";
     requested: "requested";
-    invited: "invited";
-    member: "member";
     full: "full";
-    none: "none";
   }>;
+  coverUrl: z.ZodNullable<z.ZodString>;
+  backgroundUrl: z.ZodNullable<z.ZodString>;
+  iconUrl: z.ZodNullable<z.ZodString>;
   locked: z.ZodLiteral<true>;
 }, z.core.$strip>, z.ZodObject<{
   id: z.ZodString;
@@ -454,13 +472,16 @@ declare const CommunityHomeSpace: z.ZodDiscriminatedUnion<[z.ZodObject<{
     by_invite: "by_invite";
   }>;
   standing: z.ZodEnum<{
+    none: "none";
+    member: "member";
+    invited: "invited";
     open: "open";
     requested: "requested";
-    invited: "invited";
-    member: "member";
     full: "full";
-    none: "none";
   }>;
+  coverUrl: z.ZodNullable<z.ZodString>;
+  backgroundUrl: z.ZodNullable<z.ZodString>;
+  iconUrl: z.ZodNullable<z.ZodString>;
   locked: z.ZodLiteral<false>;
   description: z.ZodNullable<z.ZodString>;
   capacity: z.ZodNullable<z.ZodNumber>;
@@ -477,9 +498,9 @@ declare const CommunityHomeSpace: z.ZodDiscriminatedUnion<[z.ZodObject<{
     id: z.ZodString;
     contentId: z.ZodString;
     type: z.ZodEnum<{
-      community: "community";
-      course: "course";
       download: "download";
+      course: "course";
+      community: "community";
     }>;
     title: z.ZodString;
   }, z.core.$strip>>;
@@ -515,13 +536,16 @@ declare const CommunityHome: z.ZodObject<{
       by_invite: "by_invite";
     }>;
     standing: z.ZodEnum<{
+      none: "none";
+      member: "member";
+      invited: "invited";
       open: "open";
       requested: "requested";
-      invited: "invited";
-      member: "member";
       full: "full";
-      none: "none";
     }>;
+    coverUrl: z.ZodNullable<z.ZodString>;
+    backgroundUrl: z.ZodNullable<z.ZodString>;
+    iconUrl: z.ZodNullable<z.ZodString>;
     locked: z.ZodLiteral<true>;
   }, z.core.$strip>, z.ZodObject<{
     id: z.ZodString;
@@ -533,13 +557,16 @@ declare const CommunityHome: z.ZodObject<{
       by_invite: "by_invite";
     }>;
     standing: z.ZodEnum<{
+      none: "none";
+      member: "member";
+      invited: "invited";
       open: "open";
       requested: "requested";
-      invited: "invited";
-      member: "member";
       full: "full";
-      none: "none";
     }>;
+    coverUrl: z.ZodNullable<z.ZodString>;
+    backgroundUrl: z.ZodNullable<z.ZodString>;
+    iconUrl: z.ZodNullable<z.ZodString>;
     locked: z.ZodLiteral<false>;
     description: z.ZodNullable<z.ZodString>;
     capacity: z.ZodNullable<z.ZodNumber>;
@@ -556,9 +583,9 @@ declare const CommunityHome: z.ZodObject<{
       id: z.ZodString;
       contentId: z.ZodString;
       type: z.ZodEnum<{
-        community: "community";
-        course: "course";
         download: "download";
+        course: "course";
+        community: "community";
       }>;
       title: z.ZodString;
     }, z.core.$strip>>;

package/dist/http/schemas/community.js

@@ -1,6 +1,6 @@
 import { ListQuery, OrgUserProfileSchema, PageQuery, paginated } from "./shared.js";
 import { z } from "zod";
-import { communityStatusSchema, communityViewSchema, createCommunityInputSchema, createSpaceInputSchema, dmSettingsSchema, idSchema, patchCommunitySettingsInputSchema, patchDmSettingsInputSchema, permissionSchema, setSpaceTopicsInputSchema, spaceDetailSchema, spaceMemberSchema, subscriptionViewSchema, updateCommunityInputSchema, updateSpaceInputSchema } from "@headless-lms/core/schemas";
+import { communityStatusSchema, communityViewSchema, createCommunityInputSchema, createSpaceInputSchema, dmSettingsSchema, idSchema, patchCommunitySettingsInputSchema, patchDmSettingsInputSchema, permissionSchema, setSpaceTopicsInputSchema, spaceMemberSchema, spaceViewSchema, subscriptionViewSchema, updateCommunityInputSchema, updateSpaceInputSchema } from "@headless-lms/core/schemas";
 //#region src/http/schemas/community.ts
 const Community = communityViewSchema;
 const CommunitiesQuery = ListQuery.extend({ status: communityStatusSchema.optional() });
@@ -10,7 +10,7 @@ const UpdateCommunity = updateCommunityInputSchema;
 const PatchDmSettings = patchDmSettingsInputSchema;
 const PatchCommunitySettings = patchCommunitySettingsInputSchema;
 const DmSettings = dmSettingsSchema;
-const SpaceDetail = spaceDetailSchema;
+const SpaceDetail = spaceViewSchema;
 const SpaceMember = spaceMemberSchema;
 const SpaceMembersPage = paginated(SpaceMember);
 const CreateSpace = createSpaceInputSchema;
@@ -78,7 +78,10 @@ const CommunityHomeSpaceBase = z.object({
 		"invited",
 		"full",
 		"none"
-	]).describe("Where the viewer stands with this space, and so which action it offers. `open`: the viewer can open it without joining (an all-members space, or the viewer opens every space). `member`: the viewer belongs to it. `requested`: the viewer asked to join and awaits a decision. `invited`: the viewer may accept or refuse an invitation. `full`: it is at capacity. `none`: none of these; ask to join a `by_request` space, or wait for an invitation to a `by_invite` one.")
+	]).describe("Where the viewer stands with this space, and so which action it offers. `open`: the viewer can open it without joining (an all-members space, or the viewer opens every space). `member`: the viewer belongs to it. `requested`: the viewer asked to join and awaits a decision. `invited`: the viewer may accept or refuse an invitation. `full`: it is at capacity. `none`: none of these; ask to join a `by_request` space, or wait for an invitation to a `by_invite` one."),
+	coverUrl: z.string().nullable(),
+	backgroundUrl: z.string().nullable(),
+	iconUrl: z.string().nullable()
 });
 const LockedCommunitySpace = CommunityHomeSpaceBase.extend({ locked: z.literal(true).describe("The viewer cannot open this space. Only enough to request a place, accept an invite or contact the team is served; never its description, topics, links or settings") });
 const OpenCommunitySpace = CommunityHomeSpaceBase.extend({