@tostudy-ai/cli 0.11.0 → 0.11.1

package/dist/cli.js

@@ -104,7 +104,7 @@ var require_picocolors = __commonJS({
   }
 });
 
-// ../../node_modules/@parisgroup-ai/logger/dist/logger.base-CHajMTDD.js
+// ../../node_modules/@parisgroup-ai/logger/dist/logger.base-CG4i4G4l.mjs
 function formatJson(entry) {
   const { timestamp: timestamp2, level, message, service, environment, context, data, error: error49 } = entry;
   const output3 = {
@@ -284,8 +284,8 @@ function extractErrorInfo(error49, includeStack) {
   return info;
 }
 var import_picocolors, LOG_LEVELS, LEVEL_COLORS, LEVEL_WIDTH, SENSITIVE_FIELDS, sanitize, BaseLogger;
-var init_logger_base_CHajMTDD = __esm({
-  "../../node_modules/@parisgroup-ai/logger/dist/logger.base-CHajMTDD.js"() {
+var init_logger_base_CG4i4G4l = __esm({
+  "../../node_modules/@parisgroup-ai/logger/dist/logger.base-CG4i4G4l.mjs"() {
     import_picocolors = __toESM(require_picocolors(), 1);
     LOG_LEVELS = {
       trace: 0,
@@ -541,7 +541,7 @@ var init_logger_base_CHajMTDD = __esm({
   }
 });
 
-// ../../node_modules/@parisgroup-ai/logger/dist/index.js
+// ../../node_modules/@parisgroup-ai/logger/dist/index.mjs
 import { AsyncLocalStorage } from "node:async_hooks";
 import { appendFileSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
@@ -610,8 +610,8 @@ function createLogger(module, options) {
 }
 var asyncLocalStorage, ConsoleTransport, FileTransport, HttpTransport, SINGLETON_KEY, Logger, logger;
 var init_dist = __esm({
-  "../../node_modules/@parisgroup-ai/logger/dist/index.js"() {
-    init_logger_base_CHajMTDD();
+  "../../node_modules/@parisgroup-ai/logger/dist/index.mjs"() {
+    init_logger_base_CG4i4G4l();
     asyncLocalStorage = new AsyncLocalStorage();
     ConsoleTransport = class {
       log(entry, formatted) {
@@ -859,6 +859,21 @@ function createHttpProvider(apiUrl, token2) {
         const res = await apiFetch(`${base}/courses`, token2);
         return res.courses;
       },
+      listCreatorCourses: async (filters) => {
+        const params = new URLSearchParams();
+        params.append("status", filters.status || "all");
+        if (filters.search) params.append("search", filters.search);
+        if (filters.sortBy) params.append("sortBy", filters.sortBy);
+        if (filters.sortOrder) params.append("sortOrder", filters.sortOrder);
+        if (filters.limit) params.append("limit", filters.limit.toString());
+        if (filters.offset) params.append("offset", filters.offset.toString());
+        if (filters.projectId) params.append("projectId", filters.projectId);
+        const res = await apiFetch(
+          `${base}/creator-courses?${params.toString()}`,
+          token2
+        );
+        return res.courses;
+      },
       select: async (_userId, courseId) => {
         const res = await apiFetch(`${base}/courses/select`, token2, {
           method: "POST",
@@ -1265,12 +1280,16 @@ function formatCourseList(courses3) {
       month: "short",
       day: "numeric"
     }) : null;
-    lines.push(`  ${idx + 1}. ${course.title}`);
+    const archivedBadge = course.status === "archived" ? " [ARQUIVADO]" : "";
+    lines.push(`  ${idx + 1}. ${course.title}${archivedBadge}`);
     lines.push(`     ${bar}`);
     lines.push(`     Professor: ${course.creatorName}`);
     if (enrolledDate) {
       lines.push(`     Inscrito em: ${enrolledDate}`);
     }
+    if (course.status === "archived") {
+      lines.push(`     \u26A0 Arquivado \u2014 somente leitura (use \`tostudy lesson\`)`);
+    }
     lines.push("");
   });
   lines.push("\u2192 tostudy select <n\xFAmero>  para ativar um curso");
@@ -2303,7 +2322,8 @@ var init_errors_pt_br = __esm({
       vaultNotFound: "\u274C Vault n\xE3o encontrado. Execute 'tostudy vault init' primeiro.\n",
       logoutSuccess: "\n  Deslogado com sucesso.\n",
       workspaceCommandDescription: "Gerenciar workspace de estudo local",
-      workspaceSetupDescription: "Criar estrutura do workspace para o curso ativo"
+      workspaceSetupDescription: "Criar estrutura do workspace para o curso ativo",
+      insufficientCredits: "\u274C Voc\xEA est\xE1 sem cr\xE9ditos. Cada resposta do tutor de IA consome cr\xE9ditos para cobrir o processamento. Recarregue em https://tostudy.ai/student/credits para continuar de onde parou.\n"
     };
   }
 });
@@ -2320,7 +2340,8 @@ var init_errors_en_us = __esm({
       vaultNotFound: "\u274C Vault not found. Run 'tostudy vault init' first.\n",
       logoutSuccess: "\n  Logged out successfully.\n",
       workspaceCommandDescription: "Manage local study workspace",
-      workspaceSetupDescription: "Create the workspace structure for the active course"
+      workspaceSetupDescription: "Create the workspace structure for the active course",
+      insufficientCredits: "\u274C You're out of credits. Every reply from the AI tutor uses credits to cover processing. Top up at https://tostudy.ai/student/credits to continue from where you stopped.\n"
     };
   }
 });
@@ -2348,6 +2369,10 @@ function resolveLocale() {
 function getErrors(locale) {
   return BUNDLES[locale ?? resolveLocale()];
 }
+function isInsufficientCreditsError(err) {
+  const msg = err instanceof Error ? err.message : String(err);
+  return msg.includes("INSUFFICIENT_CREDITS");
+}
 var BUNDLES, _cachedLocale;
 var init_errors = __esm({
   "src/errors/index.ts"() {
@@ -2544,7 +2569,7 @@ var CLI_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    CLI_VERSION = true ? "0.11.0" : "0.7.1";
+    CLI_VERSION = true ? "0.11.1" : "0.7.1";
   }
 });
 
@@ -2947,16 +2972,24 @@ var init_courses2 = __esm({
     init_guards();
     init_formatter();
     logger4 = createLogger("cli:courses");
-    coursesCommand = new Command5("courses").description("List your enrolled courses with progress").option("--json", "Output structured JSON").action(async (opts) => {
+    coursesCommand = new Command5("courses").description("List your enrolled courses with progress").option("--json", "Output structured JSON").option("--mine", "List only your own courses, including drafts").action(async (opts) => {
       try {
         const session = await requireSession();
         const data = createHttpProvider(session.apiUrl, session.token);
         const deps = { data, logger: logger4 };
-        const courses3 = await listCourses({ userId: session.userId }, deps);
+        let coursesToList;
+        if (opts.mine) {
+          coursesToList = await data.courses.listCreatorCourses({
+            userId: session.userId,
+            status: "all"
+          });
+        } else {
+          coursesToList = await listCourses({ userId: session.userId }, deps);
+        }
         if (opts.json) {
-          output(courses3, { json: true });
+          output(coursesToList, { json: true });
         } else {
-          output(formatCourseList(courses3), { json: false });
+          output(formatCourseList(coursesToList), { json: false });
         }
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
@@ -28729,6 +28762,12 @@ var init_users = __esm({
         // Stripe Integration
         stripeCustomerId: varchar("stripe_customer_id", { length: 255 }),
         // Stripe Customer ID (cus_xxx) for payment method reuse
+        // Paris Group integration: server-to-server provisioning attribution.
+        // Set by `POST /api/internal/v1/cohort-enrollments` so the same paris
+        // participant maps idempotently to a single tostudy user, and outbound
+        // webhooks can scope themselves to `provisioning_source='paris-immersion'`.
+        provisioningSource: text("provisioning_source"),
+        externalUserId: text("external_user_id"),
         metadata: jsonb("metadata").$type().default({}),
         createdAt: timestamp("created_at", { withTimezone: true }).defaultNow().notNull(),
         updatedAt: timestamp("updated_at", { withTimezone: true }).defaultNow().notNull()
@@ -28747,7 +28786,12 @@ var init_users = __esm({
         // FEAT-754: Portfolio index for public portfolio queries
         portfolioEnabledIdx: index("users_portfolio_enabled_idx").on(table.portfolioEnabled),
         // Admin analytics: date-range queries on users.createdAt (gte/lte)
-        createdAtIdx: index("users_created_at_idx").on(table.createdAt)
+        createdAtIdx: index("users_created_at_idx").on(table.createdAt),
+        // Paris Group integration: composite lookup for idempotent provisioning.
+        externalIdIdx: index("idx_users_external_id").on(
+          table.provisioningSource,
+          table.externalUserId
+        )
       })
     );
   }
@@ -28888,6 +28932,8 @@ var init_user_preferences = __esm({
       emailNewReplies: boolean("email_new_replies").default(true).notNull(),
       /** Whether user wants push notifications for mentorship (via MCP) */
       pushMentoria: boolean("push_mentoria").default(true).notNull(),
+      // i18n nickname pilot column (dogfooding)
+      nicknameI18n: jsonb("nickname_i18n").$type(),
       // Timestamps
       createdAt: timestamp("created_at").defaultNow().notNull(),
       updatedAt: timestamp("updated_at").defaultNow().notNull()
@@ -29071,6 +29117,20 @@ var init_course_categories = __esm({
   }
 });
 
+// ../../packages/database/src/schema/course-visibility.ts
+var courseVisibilityEnum;
+var init_course_visibility = __esm({
+  "../../packages/database/src/schema/course-visibility.ts"() {
+    "use strict";
+    init_pg_core();
+    courseVisibilityEnum = pgEnum("course_visibility", [
+      "public",
+      "unlisted",
+      "private_allowlist"
+    ]);
+  }
+});
+
 // ../../packages/database/src/schema/courses.ts
 var courseStatusEnum, courseFormatEnum, courseLevelEnum, creatorReviewStatusEnum, studyChannelEnum, courses;
 var init_courses3 = __esm({
@@ -29079,6 +29139,7 @@ var init_courses3 = __esm({
     init_pg_core();
     init_users();
     init_course_categories();
+    init_course_visibility();
     courseStatusEnum = pgEnum("course_status", [
       "draft",
       "pending_review",
@@ -29111,6 +29172,7 @@ var init_courses3 = __esm({
         type: varchar("type", { length: 50 }),
         // "self-paced" | "with-mentorship"
         status: courseStatusEnum("status").default("draft"),
+        visibility: courseVisibilityEnum("visibility").default("public").notNull(),
         featured: boolean("featured").default(false).notNull(),
         verified: boolean("verified").default(false).notNull(),
         isEssential: boolean("is_essential").default(false).notNull(),
@@ -29206,7 +29268,20 @@ var init_courses3 = __esm({
         // Widened to 800 in BUG-1346 (GH #382) — `deriveCertificateSummary` can
         // return up to 203 chars (truncated + "..."), and AI-path edge cases
         // exceeded varchar(200) silently. 800 covers worst observed (~660) + buffer.
-        certificateSummary: varchar("certificate_summary", { length: 800 })
+        certificateSummary: varchar("certificate_summary", { length: 800 }),
+        /**
+         * paris-immersion onboarding gate: true quando o curso foi endossado
+         * pela equipe Paris para ser servido como onboarding de turmas. Default
+         * false. NÃO afeta o marketplace ou a publicação normal — apenas o
+         * endpoint `/api/internal/v1/courses?tag=paris-onboarding&endorsed=true`
+         * filtra por este campo.
+         *
+         * Auto-marcado true quando o creator está em `paris_authorized_creators`
+         * E o curso tem `tags` contendo 'paris-onboarding' (ver application/paris-endorsement.ts).
+         * Admins paris-immersion podem endossar manualmente via
+         * POST /api/internal/v1/courses/:slug/endorse.
+         */
+        parisEndorsed: boolean("paris_endorsed").default(false).notNull()
       },
       (table) => ({
         creatorIdIdx: index("courses_creator_id_idx").on(table.creatorId),
@@ -29233,6 +29308,8 @@ var init_courses3 = __esm({
         // B-tree for FIFO ordering
         statusSubmittedIdx: index("courses_status_submitted_idx").on(table.status, table.submittedAt),
         // Composite for queue queries
+        visibilityIdx: index("courses_visibility_idx").on(table.visibility),
+        statusVisibilityIdx: index("courses_status_visibility_idx").on(table.status, table.visibility),
         // Course completeness tracking index
         completenessStatusIdx: index("courses_completeness_status_idx").on(table.completenessStatus),
         // Verified Seal Quality System - Indexes for quality metrics filtering
@@ -29770,6 +29847,9 @@ var init_badges = __esm({
       // Link to specific module (for module badges)
       isEssentialBadge: boolean("is_essential_badge").default(false).notNull(),
       // Flag for essential course badges
+      // i18n dynamic translation pilot columns (Expand pattern)
+      nameI18n: jsonb("name_i18n").$type(),
+      descriptionI18n: jsonb("description_i18n").$type(),
       // Display
       order: integer("order").notNull().default(0),
       // Display order
@@ -30203,6 +30283,34 @@ var init_course_reports = __esm({
   }
 });
 
+// ../../packages/database/src/schema/cohorts.ts
+var cohorts;
+var init_cohorts = __esm({
+  "../../packages/database/src/schema/cohorts.ts"() {
+    "use strict";
+    init_pg_core();
+    cohorts = pgTable(
+      "cohorts",
+      {
+        id: uuid("id").defaultRandom().primaryKey(),
+        slug: text("slug").notNull().unique(),
+        name: text("name").notNull(),
+        /** e.g. "paris-immersion" — namespace for the external system that owns this cohort. */
+        source: text("source").notNull(),
+        /** Stable identifier in the source system (e.g. immersion slug). */
+        sourceExternalId: text("source_external_id").notNull(),
+        startsAt: timestamp("starts_at", { withTimezone: true }).notNull(),
+        endsAt: timestamp("ends_at", { withTimezone: true }).notNull(),
+        metadata: jsonb("metadata").$type().notNull().default({}),
+        createdAt: timestamp("created_at", { withTimezone: true }).defaultNow().notNull()
+      },
+      (table) => ({
+        sourceIdx: index("idx_cohorts_source").on(table.source, table.sourceExternalId)
+      })
+    );
+  }
+});
+
 // ../../packages/database/src/schema/enrollments.ts
 var enrollmentStatusEnum, enrollmentSourceEnum, exerciseEntryLevelEnum, EXERCISE_ENTRY_LEVELS, enrollments;
 var init_enrollments = __esm({
@@ -30211,6 +30319,7 @@ var init_enrollments = __esm({
     init_pg_core();
     init_users();
     init_courses3();
+    init_cohorts();
     enrollmentStatusEnum = pgEnum("enrollment_status", [
       "active",
       "preview",
@@ -30264,6 +30373,10 @@ var init_enrollments = __esm({
         // adjusts via the `enrollments.setExerciseLevel` mutation.
         entryLevel: exerciseEntryLevelEnum("entry_level").notNull().default("L4"),
         currentLevel: exerciseEntryLevelEnum("current_level").notNull().default("L4"),
+        // Paris Group integration: links a provisioned enrollment to its cohort.
+        // Set when tostudy provisions an account via `POST /api/internal/v1/cohort-enrollments`.
+        // Nullable for non-cohort enrollments (self-enrollment, subscriptions, etc.).
+        cohortId: uuid("cohort_id").references(() => cohorts.id, { onDelete: "set null" }),
         updatedAt: timestamp("updated_at", { withTimezone: true }).defaultNow().notNull(),
         metadata: jsonb("metadata").$type().default({})
       },
@@ -30282,7 +30395,9 @@ var init_enrollments = __esm({
         courseCurrentLevelIdx: index("enrollments_course_current_level_idx").on(
           table.courseId,
           table.currentLevel
-        )
+        ),
+        // Paris Group integration: partial index for cohort lookups.
+        cohortIdIdx: index("idx_enrollments_cohort_id").on(table.cohortId)
       })
     );
   }
@@ -30443,6 +30558,29 @@ var init_course_index = __esm({
   }
 });
 
+// ../../packages/database/src/schema/paris-authorized-creators.ts
+var parisAuthorizedCreators;
+var init_paris_authorized_creators = __esm({
+  "../../packages/database/src/schema/paris-authorized-creators.ts"() {
+    "use strict";
+    init_pg_core();
+    init_users();
+    parisAuthorizedCreators = pgTable(
+      "paris_authorized_creators",
+      {
+        userId: uuid("user_id").primaryKey().references(() => users.id, { onDelete: "cascade" }),
+        /** Quem aprovou (admin Paris). NULL se setado via seed/SQL direto. */
+        authorizedBy: uuid("authorized_by").references(() => users.id, { onDelete: "set null" }),
+        createdAt: timestamp("created_at", { withTimezone: true }).defaultNow().notNull(),
+        notes: text("notes")
+      },
+      (table) => ({
+        authorizedByIdx: index("idx_paris_authorized_creators_authorized_by").on(table.authorizedBy)
+      })
+    );
+  }
+});
+
 // ../../packages/database/src/schema/enrollment-channel-changes.ts
 var enrollmentChannelChanges;
 var init_enrollment_channel_changes = __esm({
@@ -33693,6 +33831,8 @@ var init_mentorship_services = __esm({
         // 30, 45, 60, 90
         priceCents: integer("price_cents").notNull(),
         // min 5000 for 1:1, 3000 for group/workshop
+        currency: varchar("currency", { length: 3 }).notNull().default("BRL"),
+        // ISO 4217 uppercase; Phase 1 threads through DTOs
         priceCredits: integer("price_credits"),
         // nullable during migration, NOT NULL after Phase 3
         maxParticipants: integer("max_participants").default(1).notNull(),
@@ -33943,37 +34083,50 @@ var init_mentorship_packages = __esm({
     init_users();
     init_mentorship_services();
     init_zod();
-    mentorshipPackages2 = pgTable("mentorship_packages", {
-      id: uuid("id").defaultRandom().primaryKey(),
-      mentorId: uuid("mentor_id").references(() => users.id, { onDelete: "cascade" }).notNull(),
-      serviceId: uuid("service_id").references(() => mentorshipServices2.id, { onDelete: "cascade" }).notNull(),
-      // Package configuration
-      numSessions: integer("num_sessions").notNull(),
-      // 4, 8, or 12 (enforced by check constraint)
-      discountPercent: integer("discount_percent").notNull().default(0),
-      // 0-50 (enforced by check constraint)
-      validityMonths: integer("validity_months").notNull().default(6),
-      // 3, 6, or 12
-      // Calculated prices (stored for consistency and to avoid recalculation issues)
-      pricePerSessionCents: integer("price_per_session_cents").notNull(),
-      // Price per session after discount
-      totalPriceCents: integer("total_price_cents").notNull(),
-      // Total package price
-      // Status
-      isActive: boolean("is_active").notNull().default(true),
-      // Timestamps
-      createdAt: timestamp("created_at").defaultNow().notNull(),
-      updatedAt: timestamp("updated_at").defaultNow().notNull()
-    }, (table) => ({
-      mentorIdIdx: index("mentorship_packages_mentor_id_idx").on(table.mentorId),
-      serviceIdIdx: index("mentorship_packages_service_id_idx").on(table.serviceId),
-      isActiveIdx: index("mentorship_packages_is_active_idx").on(table.isActive),
-      mentorServiceActiveIdx: index("mentorship_packages_mentor_service_active_idx").on(table.mentorId, table.serviceId, table.isActive),
-      // Check constraints for business rules
-      numSessionsCheck: check("num_sessions_check", sql`${table.numSessions} IN (4, 8, 12)`),
-      discountPercentCheck: check("discount_percent_check", sql`${table.discountPercent} >= 0 AND ${table.discountPercent} <= 50`),
-      validityMonthsCheck: check("validity_months_check", sql`${table.validityMonths} IN (3, 6, 12)`)
-    }));
+    mentorshipPackages2 = pgTable(
+      "mentorship_packages",
+      {
+        id: uuid("id").defaultRandom().primaryKey(),
+        mentorId: uuid("mentor_id").references(() => users.id, { onDelete: "cascade" }).notNull(),
+        serviceId: uuid("service_id").references(() => mentorshipServices2.id, { onDelete: "cascade" }).notNull(),
+        // Package configuration
+        numSessions: integer("num_sessions").notNull(),
+        // 4, 8, or 12 (enforced by check constraint)
+        discountPercent: integer("discount_percent").notNull().default(0),
+        // 0-50 (enforced by check constraint)
+        validityMonths: integer("validity_months").notNull().default(6),
+        // 3, 6, or 12
+        // Calculated prices (stored for consistency and to avoid recalculation issues)
+        pricePerSessionCents: integer("price_per_session_cents").notNull(),
+        // Price per session after discount
+        totalPriceCents: integer("total_price_cents").notNull(),
+        // Total package price
+        currency: varchar("currency", { length: 3 }).notNull().default("BRL"),
+        // ISO 4217 uppercase; Phase 2 threads through DTOs (derived from service.currency)
+        // Status
+        isActive: boolean("is_active").notNull().default(true),
+        // Timestamps
+        createdAt: timestamp("created_at").defaultNow().notNull(),
+        updatedAt: timestamp("updated_at").defaultNow().notNull()
+      },
+      (table) => ({
+        mentorIdIdx: index("mentorship_packages_mentor_id_idx").on(table.mentorId),
+        serviceIdIdx: index("mentorship_packages_service_id_idx").on(table.serviceId),
+        isActiveIdx: index("mentorship_packages_is_active_idx").on(table.isActive),
+        mentorServiceActiveIdx: index("mentorship_packages_mentor_service_active_idx").on(
+          table.mentorId,
+          table.serviceId,
+          table.isActive
+        ),
+        // Check constraints for business rules
+        numSessionsCheck: check("num_sessions_check", sql`${table.numSessions} IN (4, 8, 12)`),
+        discountPercentCheck: check(
+          "discount_percent_check",
+          sql`${table.discountPercent} >= 0 AND ${table.discountPercent} <= 50`
+        ),
+        validityMonthsCheck: check("validity_months_check", sql`${table.validityMonths} IN (3, 6, 12)`)
+      })
+    );
     PACKAGE_SESSION_OPTIONS = [4, 8, 12];
     PACKAGE_VALIDITY_OPTIONS = [3, 6, 12];
     MAX_DISCOUNT_PERCENT = 50;
@@ -34207,7 +34360,7 @@ var init_mentorship_transactions = __esm({
         transactionType: mentorshipTransactionTypeEnum("transaction_type").default("session").notNull(),
         packageId: uuid("package_id").references(() => mentorshipPackages2.id, { onDelete: "set null" }),
         serviceId: uuid("service_id").references(() => mentorshipServices2.id, { onDelete: "set null" }),
-        // Financial amounts in cents (BRL) - Story 19.3: Split tracking
+        // Financial amounts in cents - Story 19.3: Split tracking
         grossAmountCents: integer("gross_amount_cents").notNull(),
         // Original price before discount
         discountCents: integer("discount_cents").default(0).notNull(),
@@ -34216,6 +34369,8 @@ var init_mentorship_transactions = __esm({
         // 15% of net amount
         mentorPayoutCents: integer("mentor_payout_cents").notNull(),
         // 85% of net amount (netAmountCents)
+        currency: varchar("currency", { length: 3 }).notNull().default("BRL"),
+        // ISO 4217 uppercase; Phase 3 threads through DTOs (derived from package.currency / service.currency)
         // Transaction status
         status: mentorshipTransactionStatusEnum("status").default("pending").notNull(),
         // Stripe integration
@@ -34462,53 +34617,66 @@ var init_transactions = __esm({
     init_pg_core();
     init_courses3();
     init_users();
-    transactions2 = pgTable("transactions", {
-      id: uuid("id").defaultRandom().primaryKey(),
-      // Stripe references
-      stripePaymentIntentId: varchar("stripe_payment_intent_id", { length: 255 }).notNull().unique(),
-      stripeTransferId: varchar("stripe_transfer_id", { length: 255 }),
-      // Stripe Transfer ID (if separate transfer)
-      // Foreign keys
-      courseId: uuid("course_id").notNull().references(() => courses.id, { onDelete: "restrict" }),
-      creatorId: uuid("creator_id").notNull().references(() => users.id, { onDelete: "restrict" }),
-      studentId: uuid("student_id").notNull().references(() => users.id, { onDelete: "restrict" }),
-      // Financial details (all amounts in cents)
-      amount: integer("amount").notNull(),
-      // Total amount charged
-      platformFee: integer("platform_fee").notNull(),
-      // Amount kept by platform
-      creatorPayout: integer("creator_payout").notNull(),
-      // Amount transferred to creator
-      stripeFee: integer("stripe_fee"),
-      // Stripe processing fee (nullable, updated from webhook)
-      netPlatformRevenue: integer("net_platform_revenue"),
-      // platformFee - stripeFee
-      // Transaction metadata
-      type: varchar("type", { length: 20 }).notNull(),
-      // 'mentoria' or 'self-paced'
-      paymentMethod: varchar("payment_method", { length: 50 }),
-      // 'card' or 'pix'
-      status: varchar("status", { length: 20 }).notNull().default("pending"),
-      // 'pending', 'succeeded', 'failed', 'refunded'
-      // Timestamps
-      createdAt: timestamp("created_at").defaultNow().notNull(),
-      processedAt: timestamp("processed_at"),
-      refundedAt: timestamp("refunded_at"),
-      updatedAt: timestamp("updated_at", { withTimezone: true }).defaultNow().notNull()
-    }, (table) => ({
-      // Indexes for fast lookups
-      stripePaymentIntentIdIdx: index("transactions_stripe_payment_intent_id_idx").on(table.stripePaymentIntentId),
-      creatorIdIdx: index("transactions_creator_id_idx").on(table.creatorId),
-      studentIdIdx: index("transactions_student_id_idx").on(table.studentId),
-      statusIdx: index("transactions_status_idx").on(table.status),
-      paymentMethodIdx: index("transactions_payment_method_idx").on(table.paymentMethod),
-      // For PIX analytics
-      createdAtIdx: index("transactions_created_at_idx").on(table.createdAt),
-      // For analytics queries
-      refundedAtIdx: index("transactions_refunded_at_idx").on(table.refundedAt),
-      // Issue #4: Database Index Gaps - Composite index for refund lookups
-      refundLookupIdx: index("transactions_refund_lookup_idx").on(table.courseId, table.studentId, table.status, table.createdAt)
-    }));
+    transactions2 = pgTable(
+      "transactions",
+      {
+        id: uuid("id").defaultRandom().primaryKey(),
+        // Stripe references
+        stripePaymentIntentId: varchar("stripe_payment_intent_id", { length: 255 }).notNull().unique(),
+        stripeTransferId: varchar("stripe_transfer_id", { length: 255 }),
+        // Stripe Transfer ID (if separate transfer)
+        // Foreign keys
+        courseId: uuid("course_id").notNull().references(() => courses.id, { onDelete: "restrict" }),
+        creatorId: uuid("creator_id").notNull().references(() => users.id, { onDelete: "restrict" }),
+        studentId: uuid("student_id").notNull().references(() => users.id, { onDelete: "restrict" }),
+        // Financial details (all amounts in cents)
+        amount: integer("amount").notNull(),
+        // Total amount charged
+        currency: varchar("currency", { length: 3 }).notNull().default("BRL"),
+        // ISO 4217 uppercase; seeded from Stripe charge.currency on webhook insert
+        platformFee: integer("platform_fee").notNull(),
+        // Amount kept by platform
+        creatorPayout: integer("creator_payout").notNull(),
+        // Amount transferred to creator
+        stripeFee: integer("stripe_fee"),
+        // Stripe processing fee (nullable, updated from webhook)
+        netPlatformRevenue: integer("net_platform_revenue"),
+        // platformFee - stripeFee
+        // Transaction metadata
+        type: varchar("type", { length: 20 }).notNull(),
+        // 'mentoria' or 'self-paced'
+        paymentMethod: varchar("payment_method", { length: 50 }),
+        // 'card' or 'pix'
+        status: varchar("status", { length: 20 }).notNull().default("pending"),
+        // 'pending', 'succeeded', 'failed', 'refunded'
+        // Timestamps
+        createdAt: timestamp("created_at").defaultNow().notNull(),
+        processedAt: timestamp("processed_at"),
+        refundedAt: timestamp("refunded_at"),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).defaultNow().notNull()
+      },
+      (table) => ({
+        // Indexes for fast lookups
+        stripePaymentIntentIdIdx: index("transactions_stripe_payment_intent_id_idx").on(
+          table.stripePaymentIntentId
+        ),
+        creatorIdIdx: index("transactions_creator_id_idx").on(table.creatorId),
+        studentIdIdx: index("transactions_student_id_idx").on(table.studentId),
+        statusIdx: index("transactions_status_idx").on(table.status),
+        paymentMethodIdx: index("transactions_payment_method_idx").on(table.paymentMethod),
+        // For PIX analytics
+        createdAtIdx: index("transactions_created_at_idx").on(table.createdAt),
+        // For analytics queries
+        refundedAtIdx: index("transactions_refunded_at_idx").on(table.refundedAt),
+        // Issue #4: Database Index Gaps - Composite index for refund lookups
+        refundLookupIdx: index("transactions_refund_lookup_idx").on(
+          table.courseId,
+          table.studentId,
+          table.status,
+          table.createdAt
+        )
+      })
+    );
   }
 });
 
@@ -36827,7 +36995,16 @@ var init_security_audit_log = __esm({
       "admin.impersonate_start",
       "admin.impersonate_end",
       "admin.config_change",
-      "admin.student_progress_reset"
+      "admin.student_progress_reset",
+      // Paris integration events (PR #575)
+      "account.claimed_by_external",
+      "account.claim_denied_by_policy",
+      "user.created_by_external",
+      "authorized_creator.added",
+      "authorized_creator.add_attempt_unknown_user",
+      "authorized_creator.removed",
+      "course.paris_endorsed",
+      "course.paris_endorsement_revoked"
     ]);
     securityEventResultEnum = pgEnum("security_event_result", [
       "success",
@@ -40896,6 +41073,80 @@ var init_brainstorm_knowledge_bases = __esm({
   }
 });
 
+// ../../packages/database/src/schema/course-allowlist.ts
+var courseAllowlist;
+var init_course_allowlist = __esm({
+  "../../packages/database/src/schema/course-allowlist.ts"() {
+    "use strict";
+    init_pg_core();
+    init_courses3();
+    init_users();
+    courseAllowlist = pgTable(
+      "course_allowlist",
+      {
+        id: uuid("id").defaultRandom().primaryKey(),
+        courseId: uuid("course_id").references(() => courses.id, { onDelete: "cascade" }).notNull(),
+        email: varchar("email", { length: 255 }).notNull(),
+        userId: uuid("user_id").references(() => users.id, { onDelete: "cascade" }),
+        invitedBy: uuid("invited_by").references(() => users.id, {
+          onDelete: "set null"
+        }),
+        invitedAt: timestamp("invited_at", { withTimezone: true }).defaultNow().notNull(),
+        resolvedAt: timestamp("resolved_at", { withTimezone: true })
+      },
+      (table) => ({
+        courseEmailUnique: uniqueIndex("course_allowlist_course_email_unique").on(
+          table.courseId,
+          table.email
+        ),
+        courseIdIdx: index("course_allowlist_course_id_idx").on(table.courseId)
+        // partial indexes (user_id IS NOT NULL / IS NULL) are created via raw SQL in the migration — see drizzle-kit $N gotcha in packages/database/AGENTS.md
+      })
+    );
+  }
+});
+
+// ../../node_modules/@parisgroup-ai/pg-backend/dist/idempotency-schema.mjs
+var pgBackendIdempotencyKeys;
+var init_idempotency_schema = __esm({
+  "../../node_modules/@parisgroup-ai/pg-backend/dist/idempotency-schema.mjs"() {
+    init_drizzle_orm();
+    init_pg_core();
+    pgBackendIdempotencyKeys = pgTable("pg_backend_idempotency_keys", {
+      reservationId: uuid("reservation_id").primaryKey().defaultRandom(),
+      idempotencyKey: text("idempotency_key").notNull(),
+      resource: text("resource").notNull(),
+      operation: text("operation").notNull(),
+      fingerprint: text("fingerprint").notNull(),
+      scopeKey: text("scope_key"),
+      status: text("status").notNull(),
+      response: jsonb("response"),
+      reservedAt: timestamp("reserved_at", { withTimezone: true }).notNull().defaultNow(),
+      committedAt: timestamp("committed_at", { withTimezone: true }),
+      expiresAt: timestamp("expires_at", { withTimezone: true }).notNull()
+    }, (t) => ({
+      uniqueKey: uniqueIndex("pg_backend_idempotency_unique").on(t.idempotencyKey, t.resource, t.operation, sql`COALESCE(${t.scopeKey}, '')`),
+      expiresIdx: index("pg_backend_idempotency_expires").on(t.expiresAt),
+      pendingIdx: index("pg_backend_idempotency_pending").on(t.status, t.reservedAt)
+    }));
+  }
+});
+
+// ../../node_modules/@parisgroup-ai/pg-backend/dist/index.mjs
+var init_dist2 = __esm({
+  "../../node_modules/@parisgroup-ai/pg-backend/dist/index.mjs"() {
+    init_idempotency_schema();
+  }
+});
+
+// ../../packages/database/src/schema/idempotency.ts
+var init_idempotency = __esm({
+  "../../packages/database/src/schema/idempotency.ts"() {
+    "use strict";
+    init_dist2();
+  }
+});
+
 // ../../packages/database/src/schema/index.ts
 var schema_exports = {};
 __export(schema_exports, {
@@ -40943,6 +41194,7 @@ __export(schema_exports, {
   challengeType: () => challengeType,
   challenges: () => challenges,
   challengesRelations: () => challengesRelations,
+  cohorts: () => cohorts,
   communityComments: () => communityComments2,
   communityCommentsRelations: () => communityCommentsRelations2,
   communityLikes: () => communityLikes2,
@@ -40968,6 +41220,7 @@ __export(schema_exports, {
   couponUsagesRelations: () => couponUsagesRelations2,
   coupons: () => coupons2,
   couponsRelations: () => couponsRelations2,
+  courseAllowlist: () => courseAllowlist,
   courseAssets: () => courseAssets,
   courseAssetsRelations: () => courseAssetsRelations,
   courseCategories: () => courseCategories,
@@ -41000,6 +41253,7 @@ __export(schema_exports, {
   courseValidations: () => courseValidations,
   courseVideoPrompts: () => courseVideoPrompts,
   courseVideoPromptsRelations: () => courseVideoPromptsRelations,
+  courseVisibilityEnum: () => courseVisibilityEnum,
   courses: () => courses,
   coursesRelations: () => coursesRelations2,
   creatorApplications: () => creatorApplications2,
@@ -41158,6 +41412,7 @@ __export(schema_exports, {
   onboardingAnalytics: () => onboardingAnalytics2,
   onboardingAnalyticsRelations: () => onboardingAnalyticsRelations2,
   optimizerRoleEnum: () => optimizerRoleEnum,
+  parisAuthorizedCreators: () => parisAuthorizedCreators,
   parseSettingValue: () => parseSettingValue,
   participantStatusEnum: () => participantStatusEnum,
   pathCourses: () => pathCourses2,
@@ -41177,6 +41432,7 @@ __export(schema_exports, {
   payoutWithdrawals: () => payoutWithdrawals,
   payouts: () => payouts2,
   payoutsRelations: () => payoutsRelations2,
+  pgBackendIdempotencyKeys: () => pgBackendIdempotencyKeys,
   pixKeyTypeEnum: () => pixKeyTypeEnum,
   platformConfig: () => platformConfig,
   platformFeeTypeEnum: () => platformFeeTypeEnum,
@@ -41367,6 +41623,8 @@ var init_schema3 = __esm({
     "use strict";
     init_auth_index();
     init_course_index();
+    init_cohorts();
+    init_paris_authorized_creators();
     init_enrollment_channel_changes();
     init_badges();
     init_user_badges();
@@ -41457,6 +41715,9 @@ var init_schema3 = __esm({
     init_announcements();
     init_creator_brainstorm();
     init_brainstorm_knowledge_bases();
+    init_course_visibility();
+    init_course_allowlist();
+    init_idempotency();
   }
 });
 
@@ -41469,6 +41730,14 @@ var init_check_module_unlocked = __esm({
   }
 });
 
+// ../../packages/database/src/utils/courses-filter.ts
+var init_courses_filter = __esm({
+  "../../packages/database/src/utils/courses-filter.ts"() {
+    "use strict";
+    init_courses3();
+  }
+});
+
 // ../../packages/database/src/utils/date-helpers.ts
 var init_date_helpers = __esm({
   "../../packages/database/src/utils/date-helpers.ts"() {
@@ -41494,6 +41763,7 @@ var init_src4 = __esm({
     init_schema3();
     init_schema3();
     init_check_module_unlocked();
+    init_courses_filter();
     init_date_helpers();
     init_lessons();
     init_mentorship_services();
@@ -41791,6 +42061,11 @@ async function runStart(opts, deps = defaultDeps3) {
       process.stderr.write("Acesse tostudy.ai para estudar este curso pelo ChatStudy.\n");
       process.exit(1);
     }
+    if (err instanceof CliApiError && err.status === 403 && err.message === "COURSE_ARCHIVED") {
+      process.stderr.write("Este curso foi arquivado e est\xE1 dispon\xEDvel somente para leitura.\n");
+      process.stderr.write("Use `tostudy lesson` para revisar o conte\xFAdo j\xE1 estudado.\n");
+      process.exit(1);
+    }
     const msg = err instanceof Error ? err.message : String(err);
     deps.error(msg);
   }
@@ -41869,6 +42144,11 @@ var init_start_next = __esm({
           process.stderr.write("\u2192 tostudy courses  para ver outros cursos\n");
           process.exit(0);
         }
+        if (err instanceof CliApiError && err.status === 403 && err.message === "COURSE_ARCHIVED") {
+          process.stderr.write("Este curso foi arquivado e est\xE1 dispon\xEDvel somente para leitura.\n");
+          process.stderr.write("Use `tostudy lesson` para revisar o conte\xFAdo j\xE1 estudado.\n");
+          process.exit(1);
+        }
         const msg = err instanceof Error ? err.message : String(err);
         if (opts.json) jsonError(msg);
         error(msg);
@@ -41996,6 +42276,7 @@ var init_lesson = __esm({
     init_course_state();
     init_formatter();
     init_resolve();
+    init_errors();
     logger12 = createLogger("cli:lesson");
     lessonCommand = new Command11("lesson").description("Show the content of the current lesson").option("--json", "Output structured JSON").action(async (opts) => {
       try {
@@ -42029,6 +42310,12 @@ var init_lesson = __esm({
           }
         }
       } catch (err) {
+        if (isInsufficientCreditsError(err)) {
+          const friendly = getErrors().insufficientCredits;
+          if (opts.json) jsonError("insufficient_credits", { message: friendly });
+          error(friendly);
+          return;
+        }
         const msg = err instanceof Error ? err.message : String(err);
         if (opts.json) jsonError(msg);
         error(msg);
@@ -42049,6 +42336,7 @@ var init_hint = __esm({
     init_guards();
     init_course_state();
     init_formatter();
+    init_errors();
     logger13 = createLogger("cli:hint");
     hintCommand = new Command12("hint").description("Get a progressive hint for the current exercise").option("--json", "Output structured JSON").action(async (opts) => {
       try {
@@ -42068,6 +42356,12 @@ var init_hint = __esm({
           output(formatHint(hint), { json: false });
         }
       } catch (err) {
+        if (isInsufficientCreditsError(err)) {
+          const friendly = getErrors().insufficientCredits;
+          if (opts.json) jsonError("insufficient_credits", { message: friendly });
+          error(friendly);
+          return;
+        }
         const msg = err instanceof Error ? err.message : String(err);
         if (opts.json) jsonError(msg);
         error(msg);
@@ -42404,6 +42698,7 @@ var init_validate = __esm({
     init_course_state();
     init_formatter();
     init_init_template();
+    init_errors();
     logger14 = createLogger("cli:validate");
     validateCommand = new Command13("validate").description("Validate your solution for the current exercise").argument("[file]", "Path to the solution file to read").option("--stdin", "Read solution from stdin instead of a file").option("--json", "Output structured JSON").action(async (file2, opts) => {
       try {
@@ -42485,6 +42780,12 @@ var init_validate = __esm({
         }
         process.exit(result.passed ? 0 : 1);
       } catch (err) {
+        if (isInsufficientCreditsError(err)) {
+          const friendly = getErrors().insufficientCredits;
+          if (opts.json) jsonError("insufficient_credits", { message: friendly });
+          error(friendly);
+          return;
+        }
         const msg = err instanceof Error ? err.message : String(err);
         if (opts.json) jsonError(msg);
         error(msg);
@@ -44286,6 +44587,7 @@ var init_theory = __esm({
     init_src();
     init_guards();
     init_formatter();
+    init_errors();
     logger27 = createLogger("cli:theory");
     EXERCISE_LEVELS2 = ["L0", "L1", "L2", "L3", "L4"];
     theoryCommand = new Command28("theory").description("Request more theory on the current lesson (escape hatch)").option("--focus <text>", "Optional focus area in PT-BR (max 500 chars)").option("--level <L0|L1|L2|L3|L4>", "Override current exercise level (otherwise auto-detect)").option("--lesson <uuid>", "Override lesson ID (defaults to current workspace lesson)").option("--json", "Output structured JSON").action(async (opts) => {
@@ -44352,6 +44654,12 @@ var init_theory = __esm({
           output(formatMoreTheory(data), { json: false });
         }
       } catch (err) {
+        if (isInsufficientCreditsError(err)) {
+          const friendly = getErrors().insufficientCredits;
+          if (opts.json) jsonError("insufficient_credits", { message: friendly });
+          error(friendly);
+          return;
+        }
         const msg = err instanceof Error ? err.message : String(err);
         if (opts.json) jsonError("unexpected_error", { message: msg });
         error(msg);