@growthub/cli 0.3.1 → 0.3.3

package/dist/runtime/server/dist/services/access.js

@@ -0,0 +1,231 @@
+import { and, eq, inArray, sql } from "drizzle-orm";
+import { companyMemberships, instanceUserRoles, principalPermissionGrants, } from "@paperclipai/db";
+export function accessService(db) {
+    async function isInstanceAdmin(userId) {
+        if (!userId)
+            return false;
+        const row = await db
+            .select({ id: instanceUserRoles.id })
+            .from(instanceUserRoles)
+            .where(and(eq(instanceUserRoles.userId, userId), eq(instanceUserRoles.role, "instance_admin")))
+            .then((rows) => rows[0] ?? null);
+        return Boolean(row);
+    }
+    async function getMembership(companyId, principalType, principalId) {
+        return db
+            .select()
+            .from(companyMemberships)
+            .where(and(eq(companyMemberships.companyId, companyId), eq(companyMemberships.principalType, principalType), eq(companyMemberships.principalId, principalId)))
+            .then((rows) => rows[0] ?? null);
+    }
+    async function hasPermission(companyId, principalType, principalId, permissionKey) {
+        const membership = await getMembership(companyId, principalType, principalId);
+        if (!membership || membership.status !== "active")
+            return false;
+        const grant = await db
+            .select({ id: principalPermissionGrants.id })
+            .from(principalPermissionGrants)
+            .where(and(eq(principalPermissionGrants.companyId, companyId), eq(principalPermissionGrants.principalType, principalType), eq(principalPermissionGrants.principalId, principalId), eq(principalPermissionGrants.permissionKey, permissionKey)))
+            .then((rows) => rows[0] ?? null);
+        return Boolean(grant);
+    }
+    async function canUser(companyId, userId, permissionKey) {
+        if (!userId)
+            return false;
+        if (await isInstanceAdmin(userId))
+            return true;
+        return hasPermission(companyId, "user", userId, permissionKey);
+    }
+    async function listMembers(companyId) {
+        return db
+            .select()
+            .from(companyMemberships)
+            .where(eq(companyMemberships.companyId, companyId))
+            .orderBy(sql `${companyMemberships.createdAt} desc`);
+    }
+    async function setMemberPermissions(companyId, memberId, grants, grantedByUserId) {
+        const member = await db
+            .select()
+            .from(companyMemberships)
+            .where(and(eq(companyMemberships.companyId, companyId), eq(companyMemberships.id, memberId)))
+            .then((rows) => rows[0] ?? null);
+        if (!member)
+            return null;
+        await db.transaction(async (tx) => {
+            await tx
+                .delete(principalPermissionGrants)
+                .where(and(eq(principalPermissionGrants.companyId, companyId), eq(principalPermissionGrants.principalType, member.principalType), eq(principalPermissionGrants.principalId, member.principalId)));
+            if (grants.length > 0) {
+                await tx.insert(principalPermissionGrants).values(grants.map((grant) => ({
+                    companyId,
+                    principalType: member.principalType,
+                    principalId: member.principalId,
+                    permissionKey: grant.permissionKey,
+                    scope: grant.scope ?? null,
+                    grantedByUserId,
+                    createdAt: new Date(),
+                    updatedAt: new Date(),
+                })));
+            }
+        });
+        return member;
+    }
+    async function promoteInstanceAdmin(userId) {
+        const existing = await db
+            .select()
+            .from(instanceUserRoles)
+            .where(and(eq(instanceUserRoles.userId, userId), eq(instanceUserRoles.role, "instance_admin")))
+            .then((rows) => rows[0] ?? null);
+        if (existing)
+            return existing;
+        return db
+            .insert(instanceUserRoles)
+            .values({
+            userId,
+            role: "instance_admin",
+        })
+            .returning()
+            .then((rows) => rows[0]);
+    }
+    async function demoteInstanceAdmin(userId) {
+        return db
+            .delete(instanceUserRoles)
+            .where(and(eq(instanceUserRoles.userId, userId), eq(instanceUserRoles.role, "instance_admin")))
+            .returning()
+            .then((rows) => rows[0] ?? null);
+    }
+    async function listUserCompanyAccess(userId) {
+        return db
+            .select()
+            .from(companyMemberships)
+            .where(and(eq(companyMemberships.principalType, "user"), eq(companyMemberships.principalId, userId)))
+            .orderBy(sql `${companyMemberships.createdAt} desc`);
+    }
+    async function setUserCompanyAccess(userId, companyIds) {
+        const existing = await listUserCompanyAccess(userId);
+        const existingByCompany = new Map(existing.map((row) => [row.companyId, row]));
+        const target = new Set(companyIds);
+        await db.transaction(async (tx) => {
+            const toDelete = existing.filter((row) => !target.has(row.companyId)).map((row) => row.id);
+            if (toDelete.length > 0) {
+                await tx.delete(companyMemberships).where(inArray(companyMemberships.id, toDelete));
+            }
+            for (const companyId of target) {
+                if (existingByCompany.has(companyId))
+                    continue;
+                await tx.insert(companyMemberships).values({
+                    companyId,
+                    principalType: "user",
+                    principalId: userId,
+                    status: "active",
+                    membershipRole: "member",
+                });
+            }
+        });
+        return listUserCompanyAccess(userId);
+    }
+    async function ensureMembership(companyId, principalType, principalId, membershipRole = "member", status = "active") {
+        const existing = await getMembership(companyId, principalType, principalId);
+        if (existing) {
+            if (existing.status !== status || existing.membershipRole !== membershipRole) {
+                const updated = await db
+                    .update(companyMemberships)
+                    .set({ status, membershipRole, updatedAt: new Date() })
+                    .where(eq(companyMemberships.id, existing.id))
+                    .returning()
+                    .then((rows) => rows[0] ?? null);
+                return updated ?? existing;
+            }
+            return existing;
+        }
+        return db
+            .insert(companyMemberships)
+            .values({
+            companyId,
+            principalType,
+            principalId,
+            status,
+            membershipRole,
+        })
+            .returning()
+            .then((rows) => rows[0]);
+    }
+    async function setPrincipalGrants(companyId, principalType, principalId, grants, grantedByUserId) {
+        await db.transaction(async (tx) => {
+            await tx
+                .delete(principalPermissionGrants)
+                .where(and(eq(principalPermissionGrants.companyId, companyId), eq(principalPermissionGrants.principalType, principalType), eq(principalPermissionGrants.principalId, principalId)));
+            if (grants.length === 0)
+                return;
+            await tx.insert(principalPermissionGrants).values(grants.map((grant) => ({
+                companyId,
+                principalType,
+                principalId,
+                permissionKey: grant.permissionKey,
+                scope: grant.scope ?? null,
+                grantedByUserId,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+            })));
+        });
+    }
+    async function listPrincipalGrants(companyId, principalType, principalId) {
+        return db
+            .select()
+            .from(principalPermissionGrants)
+            .where(and(eq(principalPermissionGrants.companyId, companyId), eq(principalPermissionGrants.principalType, principalType), eq(principalPermissionGrants.principalId, principalId)))
+            .orderBy(principalPermissionGrants.permissionKey);
+    }
+    async function setPrincipalPermission(companyId, principalType, principalId, permissionKey, enabled, grantedByUserId, scope = null) {
+        if (!enabled) {
+            await db
+                .delete(principalPermissionGrants)
+                .where(and(eq(principalPermissionGrants.companyId, companyId), eq(principalPermissionGrants.principalType, principalType), eq(principalPermissionGrants.principalId, principalId), eq(principalPermissionGrants.permissionKey, permissionKey)));
+            return;
+        }
+        await ensureMembership(companyId, principalType, principalId, "member", "active");
+        const existing = await db
+            .select()
+            .from(principalPermissionGrants)
+            .where(and(eq(principalPermissionGrants.companyId, companyId), eq(principalPermissionGrants.principalType, principalType), eq(principalPermissionGrants.principalId, principalId), eq(principalPermissionGrants.permissionKey, permissionKey)))
+            .then((rows) => rows[0] ?? null);
+        if (existing) {
+            await db
+                .update(principalPermissionGrants)
+                .set({
+                scope,
+                grantedByUserId,
+                updatedAt: new Date(),
+            })
+                .where(eq(principalPermissionGrants.id, existing.id));
+            return;
+        }
+        await db.insert(principalPermissionGrants).values({
+            companyId,
+            principalType,
+            principalId,
+            permissionKey,
+            scope,
+            grantedByUserId,
+            createdAt: new Date(),
+            updatedAt: new Date(),
+        });
+    }
+    return {
+        isInstanceAdmin,
+        canUser,
+        hasPermission,
+        getMembership,
+        ensureMembership,
+        listMembers,
+        setMemberPermissions,
+        promoteInstanceAdmin,
+        demoteInstanceAdmin,
+        listUserCompanyAccess,
+        setUserCompanyAccess,
+        setPrincipalGrants,
+        listPrincipalGrants,
+        setPrincipalPermission,
+    };
+}
+//# sourceMappingURL=access.js.map

package/dist/runtime/server/dist/services/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../src/services/access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AASzB,MAAM,UAAU,aAAa,CAAC,EAAM;IAClC,KAAK,UAAU,eAAe,CAAC,MAAiC;QAC9D,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,EAAE;aACjB,MAAM,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC;aACpC,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;aAC9F,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,KAAK,UAAU,aAAa,CAC1B,SAAiB,EACjB,aAA4B,EAC5B,WAAmB;QAEnB,OAAO,EAAE;aACN,MAAM,EAAE;aACR,IAAI,CAAC,kBAAkB,CAAC;aACxB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,EAC3C,EAAE,CAAC,kBAAkB,CAAC,aAAa,EAAE,aAAa,CAAC,EACnD,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,WAAW,CAAC,CAChD,CACF;aACA,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,UAAU,aAAa,CAC1B,SAAiB,EACjB,aAA4B,EAC5B,WAAmB,EACnB,aAA4B;QAE5B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAC9E,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,EAAE,EAAE,EAAE,yBAAyB,CAAC,EAAE,EAAE,CAAC;aAC5C,IAAI,CAAC,yBAAyB,CAAC;aAC/B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,yBAAyB,CAAC,SAAS,EAAE,SAAS,CAAC,EAClD,EAAE,CAAC,yBAAyB,CAAC,aAAa,EAAE,aAAa,CAAC,EAC1D,EAAE,CAAC,yBAAyB,CAAC,WAAW,EAAE,WAAW,CAAC,EACtD,EAAE,CAAC,yBAAyB,CAAC,aAAa,EAAE,aAAa,CAAC,CAC3D,CACF;aACA,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,UAAU,OAAO,CACpB,SAAiB,EACjB,MAAiC,EACjC,aAA4B;QAE5B,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,MAAM,eAAe,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,SAAiB;QAC1C,OAAO,EAAE;aACN,MAAM,EAAE;aACR,IAAI,CAAC,kBAAkB,CAAC;aACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aAClD,OAAO,CAAC,GAAG,CAAA,GAAG,kBAAkB,CAAC,SAAS,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,UAAU,oBAAoB,CACjC,SAAiB,EACjB,QAAgB,EAChB,MAAoB,EACpB,eAA8B;QAE9B,MAAM,MAAM,GAAG,MAAM,EAAE;aACpB,MAAM,EAAE;aACR,IAAI,CAAC,kBAAkB,CAAC;aACxB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;aAC5F,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAChC,MAAM,EAAE;iBACL,MAAM,CAAC,yBAAyB,CAAC;iBACjC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,yBAAyB,CAAC,SAAS,EAAE,SAAS,CAAC,EAClD,EAAE,CAAC,yBAAyB,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,EACjE,EAAE,CAAC,yBAAyB,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAC9D,CACF,CAAC;YACJ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,MAAM,CAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACrB,SAAS;oBACT,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;oBAC1B,eAAe;oBACf,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB,CAAC,CAAC,CACJ,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,oBAAoB,CAAC,MAAc;QAChD,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;aAC9F,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,OAAO,EAAE;aACN,MAAM,CAAC,iBAAiB,CAAC;aACzB,MAAM,CAAC;YACN,MAAM;YACN,IAAI,EAAE,gBAAgB;SACvB,CAAC;aACD,SAAS,EAAE;aACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,UAAU,mBAAmB,CAAC,MAAc;QAC/C,OAAO,EAAE;aACN,MAAM,CAAC,iBAAiB,CAAC;aACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;aAC9F,SAAS,EAAE;aACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,UAAU,qBAAqB,CAAC,MAAc;QACjD,OAAO,EAAE;aACN,MAAM,EAAE;aACR,IAAI,CAAC,kBAAkB,CAAC;aACxB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;aACpG,OAAO,CAAC,GAAG,CAAA,GAAG,kBAAkB,CAAC,SAAS,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,UAAU,oBAAoB,CAAC,MAAc,EAAE,UAAoB;QACtE,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QAEnC,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3F,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;YACtF,CAAC;YAED,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;oBAAE,SAAS;gBAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;oBACzC,SAAS;oBACT,aAAa,EAAE,MAAM;oBACrB,WAAW,EAAE,MAAM;oBACnB,MAAM,EAAE,QAAQ;oBAChB,cAAc,EAAE,QAAQ;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,UAAU,gBAAgB,CAC7B,SAAiB,EACjB,aAA4B,EAC5B,WAAmB,EACnB,iBAAgC,QAAQ,EACxC,SAA6C,QAAQ;QAErD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAC5E,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;gBAC7E,MAAM,OAAO,GAAG,MAAM,EAAE;qBACrB,MAAM,CAAC,kBAAkB,CAAC;qBAC1B,GAAG,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;qBACtD,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;qBAC7C,SAAS,EAAE;qBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;gBACnC,OAAO,OAAO,IAAI,QAAQ,CAAC;YAC7B,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,OAAO,EAAE;aACN,MAAM,CAAC,kBAAkB,CAAC;aAC1B,MAAM,CAAC;YACN,SAAS;YACT,aAAa;YACb,WAAW;YACX,MAAM;YACN,cAAc;SACf,CAAC;aACD,SAAS,EAAE;aACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,UAAU,kBAAkB,CAC/B,SAAiB,EACjB,aAA4B,EAC5B,WAAmB,EACnB,MAAoB,EACpB,eAA8B;QAE9B,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAChC,MAAM,EAAE;iBACL,MAAM,CAAC,yBAAyB,CAAC;iBACjC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,yBAAyB,CAAC,SAAS,EAAE,SAAS,CAAC,EAClD,EAAE,CAAC,yBAAyB,CAAC,aAAa,EAAE,aAAa,CAAC,EAC1D,EAAE,CAAC,yBAAyB,CAAC,WAAW,EAAE,WAAW,CAAC,CACvD,CACF,CAAC;YACJ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAChC,MAAM,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,MAAM,CAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACrB,SAAS;gBACT,aAAa;gBACb,WAAW;gBACX,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;gBAC1B,eAAe;gBACf,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,mBAAmB,CAChC,SAAiB,EACjB,aAA4B,EAC5B,WAAmB;QAEnB,OAAO,EAAE;aACN,MAAM,EAAE;aACR,IAAI,CAAC,yBAAyB,CAAC;aAC/B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,yBAAyB,CAAC,SAAS,EAAE,SAAS,CAAC,EAClD,EAAE,CAAC,yBAAyB,CAAC,aAAa,EAAE,aAAa,CAAC,EAC1D,EAAE,CAAC,yBAAyB,CAAC,WAAW,EAAE,WAAW,CAAC,CACvD,CACF;aACA,OAAO,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,UAAU,sBAAsB,CACnC,SAAiB,EACjB,aAA4B,EAC5B,WAAmB,EACnB,aAA4B,EAC5B,OAAgB,EAChB,eAA8B,EAC9B,QAAwC,IAAI;QAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,EAAE;iBACL,MAAM,CAAC,yBAAyB,CAAC;iBACjC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,yBAAyB,CAAC,SAAS,EAAE,SAAS,CAAC,EAClD,EAAE,CAAC,yBAAyB,CAAC,aAAa,EAAE,aAAa,CAAC,EAC1D,EAAE,CAAC,yBAAyB,CAAC,WAAW,EAAE,WAAW,CAAC,EACtD,EAAE,CAAC,yBAAyB,CAAC,aAAa,EAAE,aAAa,CAAC,CAC3D,CACF,CAAC;YACJ,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAElF,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,MAAM,EAAE;aACR,IAAI,CAAC,yBAAyB,CAAC;aAC/B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,yBAAyB,CAAC,SAAS,EAAE,SAAS,CAAC,EAClD,EAAE,CAAC,yBAAyB,CAAC,aAAa,EAAE,aAAa,CAAC,EAC1D,EAAE,CAAC,yBAAyB,CAAC,WAAW,EAAE,WAAW,CAAC,EACtD,EAAE,CAAC,yBAAyB,CAAC,aAAa,EAAE,aAAa,CAAC,CAC3D,CACF;aACA,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAEnC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,EAAE;iBACL,MAAM,CAAC,yBAAyB,CAAC;iBACjC,GAAG,CAAC;gBACH,KAAK;gBACL,eAAe;gBACf,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB,CAAC;iBACD,KAAK,CAAC,EAAE,CAAC,yBAAyB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,MAAM,CAAC;YAChD,SAAS;YACT,aAAa;YACb,WAAW;YACX,aAAa;YACb,KAAK;YACL,eAAe;YACf,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,eAAe;QACf,OAAO;QACP,aAAa;QACb,aAAa;QACb,gBAAgB;QAChB,WAAW;QACX,oBAAoB;QACpB,oBAAoB;QACpB,mBAAmB;QACnB,qBAAqB;QACrB,oBAAoB;QACpB,kBAAkB;QAClB,mBAAmB;QACnB,sBAAsB;KACvB,CAAC;AACJ,CAAC"}

package/dist/runtime/server/dist/services/activity-log.d.ts

@@ -0,0 +1,17 @@
+import type { Db } from "@paperclipai/db";
+import type { PluginEventBus } from "./plugin-event-bus.js";
+/** Wire the plugin event bus so domain events are forwarded to plugins. */
+export declare function setPluginEventBus(bus: PluginEventBus): void;
+export interface LogActivityInput {
+    companyId: string;
+    actorType: "agent" | "user" | "system";
+    actorId: string;
+    action: string;
+    entityType: string;
+    entityId: string;
+    agentId?: string | null;
+    runId?: string | null;
+    details?: Record<string, unknown> | null;
+}
+export declare function logActivity(db: Db, input: LogActivityInput): Promise<void>;
+//# sourceMappingURL=activity-log.d.ts.map

package/dist/runtime/server/dist/services/activity-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-log.d.ts","sourceRoot":"","sources":["../../src/services/activity-log.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAQ1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAM5D,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAK3D;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1C;AAED,wBAAsB,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,iBAoDhE"}

package/dist/runtime/server/dist/services/activity-log.js

@@ -0,0 +1,68 @@
+import { randomUUID } from "node:crypto";
+import { activityLog } from "@paperclipai/db";
+import { PLUGIN_EVENT_TYPES } from "@paperclipai/shared";
+import { publishLiveEvent } from "./live-events.js";
+import { redactCurrentUserValue } from "../log-redaction.js";
+import { sanitizeRecord } from "../redaction.js";
+import { logger } from "../middleware/logger.js";
+const PLUGIN_EVENT_SET = new Set(PLUGIN_EVENT_TYPES);
+let _pluginEventBus = null;
+/** Wire the plugin event bus so domain events are forwarded to plugins. */
+export function setPluginEventBus(bus) {
+    if (_pluginEventBus) {
+        logger.warn("setPluginEventBus called more than once, replacing existing bus");
+    }
+    _pluginEventBus = bus;
+}
+export async function logActivity(db, input) {
+    const sanitizedDetails = input.details ? sanitizeRecord(input.details) : null;
+    const redactedDetails = sanitizedDetails ? redactCurrentUserValue(sanitizedDetails) : null;
+    await db.insert(activityLog).values({
+        companyId: input.companyId,
+        actorType: input.actorType,
+        actorId: input.actorId,
+        action: input.action,
+        entityType: input.entityType,
+        entityId: input.entityId,
+        agentId: input.agentId ?? null,
+        runId: input.runId ?? null,
+        details: redactedDetails,
+    });
+    publishLiveEvent({
+        companyId: input.companyId,
+        type: "activity.logged",
+        payload: {
+            actorType: input.actorType,
+            actorId: input.actorId,
+            action: input.action,
+            entityType: input.entityType,
+            entityId: input.entityId,
+            agentId: input.agentId ?? null,
+            runId: input.runId ?? null,
+            details: redactedDetails,
+        },
+    });
+    if (_pluginEventBus && PLUGIN_EVENT_SET.has(input.action)) {
+        const event = {
+            eventId: randomUUID(),
+            eventType: input.action,
+            occurredAt: new Date().toISOString(),
+            actorId: input.actorId,
+            actorType: input.actorType,
+            entityId: input.entityId,
+            entityType: input.entityType,
+            companyId: input.companyId,
+            payload: {
+                ...redactedDetails,
+                agentId: input.agentId ?? null,
+                runId: input.runId ?? null,
+            },
+        };
+        void _pluginEventBus.emit(event).then(({ errors }) => {
+            for (const { pluginId, error } of errors) {
+                logger.warn({ pluginId, eventType: event.eventType, err: error }, "plugin event handler failed");
+            }
+        }).catch(() => { });
+    }
+}
+//# sourceMappingURL=activity-log.js.map

package/dist/runtime/server/dist/services/activity-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-log.js","sourceRoot":"","sources":["../../src/services/activity-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAwB,MAAM,qBAAqB,CAAC;AAE/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAGjD,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAE1E,IAAI,eAAe,GAA0B,IAAI,CAAC;AAElD,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,GAAmB;IACnD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;IACjF,CAAC;IACD,eAAe,GAAG,GAAG,CAAC;AACxB,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAM,EAAE,KAAuB;IAC/D,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,MAAM,eAAe,GAAG,gBAAgB,CAAC,CAAC,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;QAC1B,OAAO,EAAE,eAAe;KACzB,CAAC,CAAC;IAEH,gBAAgB,CAAC;QACf,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,OAAO,EAAE,eAAe;SACzB;KACF,CAAC,CAAC;IAEH,IAAI,eAAe,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAgB;YACzB,OAAO,EAAE,UAAU,EAAE;YACrB,SAAS,EAAE,KAAK,CAAC,MAAyB;YAC1C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE;gBACP,GAAG,eAAe;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;aAC3B;SACF,CAAC;QACF,KAAK,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;YACnD,KAAK,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,6BAA6B,CAAC,CAAC;YACnG,CAAC;QACH,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrB,CAAC;AACH,CAAC"}