@hraness/peopleblade 0.1.0

package/dist/migrations/012_granola_note_attribution.sql

@@ -0,0 +1,389 @@
+PRAGMA foreign_keys = ON;
+
+DROP INDEX person_notes_source_identity;
+
+CREATE UNIQUE INDEX person_notes_non_granola_source_identity
+ON person_notes(source, source_id, person_id)
+WHERE source_id IS NOT NULL AND source <> 'granola';
+
+CREATE UNIQUE INDEX person_notes_granola_legacy_source_identity
+ON person_notes(source, source_id, person_id)
+WHERE source = 'granola'
+  AND source_id IS NOT NULL
+  AND json_type(metadata_json, '$.granolaAttendeeIdentity') IS NOT 'object';
+
+CREATE INDEX person_notes_granola_source_id
+ON person_notes(source_id, id)
+WHERE source = 'granola' AND source_id IS NOT NULL;
+
+CREATE TRIGGER person_notes_positive_id
+AFTER INSERT ON person_notes FOR EACH ROW
+WHEN NEW.id < 1
+BEGIN SELECT RAISE(ABORT, 'person note ids must be positive'); END;
+
+CREATE TRIGGER person_notes_no_replace
+BEFORE INSERT ON person_notes FOR EACH ROW
+WHEN EXISTS (
+  SELECT 1 FROM person_notes existing
+  WHERE (NEW.id IS NOT -1 AND existing.id = NEW.id)
+     OR (
+       NEW.source_id IS NOT NULL
+       AND existing.source = NEW.source
+       AND existing.source_id = NEW.source_id
+       AND (
+         (NEW.source <> 'granola' AND existing.person_id = NEW.person_id)
+         OR (
+           NEW.source = 'granola'
+           AND (
+             (
+               json_type(NEW.metadata_json, '$.granolaAttendeeIdentity') IS NOT 'object'
+               AND existing.person_id = NEW.person_id
+             )
+             OR (
+               json_type(NEW.metadata_json, '$.granolaAttendeeIdentity') = 'object'
+               AND json_type(existing.metadata_json, '$.granolaAttendeeIdentity') = 'object'
+               AND json_extract(
+                 NEW.metadata_json, '$.granolaAttendeeIdentity.kind'
+               ) IS json_extract(
+                 existing.metadata_json, '$.granolaAttendeeIdentity.kind'
+               )
+               AND json_extract(
+                 NEW.metadata_json, '$.granolaAttendeeIdentity.valueSha256'
+               ) IS json_extract(
+                 existing.metadata_json, '$.granolaAttendeeIdentity.valueSha256'
+               )
+             )
+             OR (
+               existing.person_id = NEW.person_id
+               AND json_type(
+                 existing.metadata_json, '$.granolaAttendeeIdentity'
+               ) IS NOT 'object'
+             )
+           )
+         )
+       )
+     )
+)
+BEGIN SELECT RAISE(ABORT, 'person notes cannot be replaced'); END;
+
+CREATE TABLE person_note_granola_identity_sources (
+    note_id INTEGER PRIMARY KEY CHECK(note_id >= 1)
+      REFERENCES person_notes(id) ON DELETE RESTRICT,
+    source_id TEXT NOT NULL CHECK(length(source_id) BETWEEN 1 AND 256),
+    source_contact_method_id INTEGER NOT NULL CHECK(source_contact_method_id >= 1)
+      REFERENCES contact_methods(id) ON DELETE RESTRICT,
+    identity_kind TEXT NOT NULL CHECK(identity_kind IN ('email','phone')),
+    identity_value_sha256 TEXT NOT NULL CHECK(
+      length(identity_value_sha256) = 64
+      AND identity_value_sha256 NOT GLOB '*[^0-9a-f]*'
+    ),
+    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    UNIQUE(source_id, identity_kind, identity_value_sha256)
+) STRICT;
+
+CREATE INDEX person_note_granola_identity_sources_method
+ON person_note_granola_identity_sources(source_contact_method_id);
+
+CREATE TRIGGER person_note_granola_identity_source_valid
+BEFORE INSERT ON person_note_granola_identity_sources FOR EACH ROW
+BEGIN
+  SELECT CASE WHEN
+       EXISTS (
+         SELECT 1 FROM person_note_granola_identity_sources existing
+         WHERE existing.note_id = NEW.note_id
+            OR (
+              existing.source_id = NEW.source_id
+              AND existing.identity_kind = NEW.identity_kind
+              AND existing.identity_value_sha256 = NEW.identity_value_sha256
+            )
+       )
+    OR NOT EXISTS (
+         SELECT 1
+         FROM person_notes note
+         JOIN contact_methods method ON method.id = NEW.source_contact_method_id
+         LEFT JOIN provider_resources resource ON resource.id = method.provider_resource_id
+         LEFT JOIN source_realms realm ON realm.id = resource.source_realm_id
+         JOIN person_identity_components method_component
+           ON method_component.person_id = method.person_id
+         JOIN person_identity_components note_component
+           ON note_component.person_id = note.person_id
+         WHERE note.id = NEW.note_id
+           AND note.source = 'granola'
+           AND note.source_id = NEW.source_id
+           AND json_type(note.metadata_json, '$.granolaAttendeeIdentity') = 'object'
+           AND json_extract(note.metadata_json, '$.granolaAttendeeIdentity.schemaVersion') = 1
+           AND json_extract(note.metadata_json, '$.granolaAttendeeIdentity.kind') = NEW.identity_kind
+           AND json_extract(
+             note.metadata_json, '$.granolaAttendeeIdentity.valueSha256'
+           ) = NEW.identity_value_sha256
+           AND json_type(
+             note.metadata_json, '$.granolaAttendeeIdentity.contactMethodId'
+           ) = 'integer'
+           AND json_extract(
+             note.metadata_json, '$.granolaAttendeeIdentity.contactMethodId'
+           ) = NEW.source_contact_method_id
+           AND method.kind = NEW.identity_kind
+           AND method.confidence = 'exact'
+           AND method.active = 1
+           AND method.identity_eligible = 1
+           AND method_component.canonical_person_id = note_component.canonical_person_id
+           AND (
+             method.provider_resource_id IS NULL
+             OR (resource.active = 1 AND (realm.id IS NULL OR realm.active = 1))
+           )
+       )
+  THEN RAISE(ABORT, 'Granola note identity source is not exact') END;
+END;
+
+CREATE TRIGGER person_note_granola_identity_sources_immutable_update
+BEFORE UPDATE ON person_note_granola_identity_sources FOR EACH ROW
+BEGIN SELECT RAISE(ABORT, 'Granola note identity sources are immutable'); END;
+
+CREATE TRIGGER person_note_granola_identity_sources_immutable_delete
+BEFORE DELETE ON person_note_granola_identity_sources FOR EACH ROW
+BEGIN SELECT RAISE(ABORT, 'Granola note identity sources are immutable'); END;
+
+CREATE TABLE person_note_attribution_revisions (
+    id INTEGER PRIMARY KEY AUTOINCREMENT CHECK(id >= 1),
+    note_id INTEGER NOT NULL
+      REFERENCES person_note_granola_identity_sources(note_id) ON DELETE RESTRICT,
+    source_id TEXT NOT NULL CHECK(length(source_id) BETWEEN 1 AND 256),
+    from_person_id INTEGER NOT NULL REFERENCES people(id) ON DELETE RESTRICT,
+    to_person_id INTEGER NOT NULL REFERENCES people(id) ON DELETE RESTRICT,
+    target_contact_method_id INTEGER NOT NULL CHECK(target_contact_method_id >= 1)
+      REFERENCES contact_methods(id) ON DELETE RESTRICT,
+    identity_kind TEXT NOT NULL CHECK(identity_kind IN ('email','phone')),
+    identity_value_sha256 TEXT NOT NULL CHECK(
+      length(identity_value_sha256) = 64
+      AND identity_value_sha256 NOT GLOB '*[^0-9a-f]*'
+    ),
+    identity_revision INTEGER NOT NULL CHECK(identity_revision >= 0),
+    reason TEXT NOT NULL CHECK(reason = 'exact-granola-source-replay'),
+    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CHECK(from_person_id <> to_person_id)
+) STRICT;
+
+CREATE INDEX person_note_attribution_revisions_note
+ON person_note_attribution_revisions(note_id, id);
+
+CREATE INDEX person_note_attribution_revisions_target_method
+ON person_note_attribution_revisions(target_contact_method_id);
+
+CREATE TRIGGER person_note_attribution_revision_valid
+BEFORE INSERT ON person_note_attribution_revisions FOR EACH ROW
+BEGIN
+  SELECT CASE WHEN
+       NEW.id IS NOT -1
+    OR NEW.from_person_id IS NOT coalesce(
+         (SELECT prior.to_person_id
+          FROM person_note_attribution_revisions prior
+          WHERE prior.note_id = NEW.note_id
+          ORDER BY prior.id DESC LIMIT 1),
+         (SELECT note.person_id FROM person_notes note WHERE note.id = NEW.note_id)
+       )
+    OR NOT EXISTS (
+         SELECT 1
+         FROM person_note_granola_identity_sources source
+         JOIN person_notes note ON note.id = source.note_id
+         JOIN contact_methods original_method
+           ON original_method.id = source.source_contact_method_id
+         JOIN contact_methods method ON method.id = NEW.target_contact_method_id
+         LEFT JOIN provider_resources resource ON resource.id = method.provider_resource_id
+         LEFT JOIN source_realms realm ON realm.id = resource.source_realm_id
+         JOIN person_identity_components method_component
+           ON method_component.person_id = method.person_id
+         JOIN person_identity_components target_component
+           ON target_component.person_id = NEW.to_person_id
+         WHERE source.note_id = NEW.note_id
+           AND source.source_id = NEW.source_id
+           AND source.identity_kind = NEW.identity_kind
+           AND source.identity_value_sha256 = NEW.identity_value_sha256
+           AND note.source = 'granola'
+           AND note.source_id = source.source_id
+           AND json_type(note.metadata_json, '$.granolaAttendeeIdentity') = 'object'
+           AND json_extract(note.metadata_json, '$.granolaAttendeeIdentity.schemaVersion') = 1
+           AND json_extract(note.metadata_json, '$.granolaAttendeeIdentity.kind')
+             = source.identity_kind
+           AND json_extract(
+             note.metadata_json, '$.granolaAttendeeIdentity.valueSha256'
+           ) = source.identity_value_sha256
+           AND json_extract(
+             note.metadata_json, '$.granolaAttendeeIdentity.contactMethodId'
+           ) = source.source_contact_method_id
+           AND original_method.kind = source.identity_kind
+           AND method.kind = NEW.identity_kind
+           AND method.confidence = 'exact'
+           AND method.active = 1
+           AND method.identity_eligible = 1
+           AND original_method.normalized_value = method.normalized_value
+           AND method_component.canonical_person_id = target_component.canonical_person_id
+           AND (
+             method.provider_resource_id IS NULL
+             OR (resource.active = 1 AND (realm.id IS NULL OR realm.active = 1))
+           )
+           AND (
+             NOT EXISTS (
+               SELECT 1
+               FROM contact_methods rival
+               LEFT JOIN provider_resources rival_resource
+                 ON rival_resource.id = rival.provider_resource_id
+               LEFT JOIN source_realms rival_realm
+                 ON rival_realm.id = rival_resource.source_realm_id
+               JOIN person_identity_components rival_component
+                 ON rival_component.person_id = rival.person_id
+               WHERE rival.kind = method.kind
+                 AND rival.normalized_value = method.normalized_value
+                 AND rival.confidence = 'exact'
+                 AND rival.active = 1
+                 AND rival.identity_eligible = 1
+                 AND (
+                   rival.provider_resource_id IS NULL
+                   OR (
+                     rival_resource.active = 1
+                     AND (rival_realm.id IS NULL OR rival_realm.active = 1)
+                   )
+                 )
+                 AND rival_component.canonical_person_id
+                   <> target_component.canonical_person_id
+             )
+             OR (
+               method.kind = 'email'
+               AND method.provider_resource_id IS NULL
+               AND json_extract(method.metadata_json, '$.source')
+                 = 'explicit-user-attestation'
+               AND json_extract(method.metadata_json, '$.conflictOverride') = 1
+               AND json_type(method.metadata_json, '$.reviewedConflictingMethods') = 'array'
+               AND (
+                 SELECT count(*)
+                 FROM json_each(
+                   method.metadata_json, '$.reviewedConflictingMethods'
+                 ) reviewed
+               ) = (
+                 SELECT count(*)
+                 FROM contact_methods rival
+                 LEFT JOIN provider_resources rival_resource
+                   ON rival_resource.id = rival.provider_resource_id
+                 LEFT JOIN source_realms rival_realm
+                   ON rival_realm.id = rival_resource.source_realm_id
+                 JOIN person_identity_components rival_component
+                   ON rival_component.person_id = rival.person_id
+                 WHERE rival.kind = method.kind
+                   AND rival.normalized_value = method.normalized_value
+                   AND rival.confidence = 'exact'
+                   AND rival.active = 1
+                   AND rival.identity_eligible = 1
+                   AND (
+                     rival.provider_resource_id IS NULL
+                     OR (
+                       rival_resource.active = 1
+                       AND (rival_realm.id IS NULL OR rival_realm.active = 1)
+                     )
+                   )
+                   AND rival_component.canonical_person_id
+                     <> target_component.canonical_person_id
+               )
+               AND NOT EXISTS (
+                 SELECT 1
+                 FROM contact_methods rival
+                 LEFT JOIN provider_resources rival_resource
+                   ON rival_resource.id = rival.provider_resource_id
+                 LEFT JOIN source_realms rival_realm
+                   ON rival_realm.id = rival_resource.source_realm_id
+                 JOIN person_identity_components rival_component
+                   ON rival_component.person_id = rival.person_id
+                 WHERE rival.kind = method.kind
+                   AND rival.normalized_value = method.normalized_value
+                   AND rival.confidence = 'exact'
+                   AND rival.active = 1
+                   AND rival.identity_eligible = 1
+                   AND (
+                     rival.provider_resource_id IS NULL
+                     OR (
+                       rival_resource.active = 1
+                       AND (rival_realm.id IS NULL OR rival_realm.active = 1)
+                     )
+                   )
+                   AND rival_component.canonical_person_id
+                     <> target_component.canonical_person_id
+                   AND NOT EXISTS (
+                     SELECT 1
+                     FROM json_each(
+                       method.metadata_json, '$.reviewedConflictingMethods'
+                     ) reviewed
+                     WHERE json_type(reviewed.value) = 'object'
+                       AND json_extract(reviewed.value, '$.methodId') = rival.id
+                       AND json_extract(reviewed.value, '$.personId') = rival.person_id
+                       AND json_extract(reviewed.value, '$.canonicalPersonId')
+                         = rival_component.canonical_person_id
+                       AND json_extract(reviewed.value, '$.provider')
+                         IS rival_resource.provider
+                   )
+               )
+             )
+           )
+       )
+    OR NEW.identity_revision IS NOT (
+         SELECT identity_revision FROM local_revisions WHERE singleton = 1
+       )
+  THEN RAISE(ABORT, 'Granola attribution revision is not exact and current') END;
+END;
+
+CREATE TRIGGER person_note_attribution_revisions_immutable_update
+BEFORE UPDATE ON person_note_attribution_revisions FOR EACH ROW
+BEGIN SELECT RAISE(ABORT, 'person note attribution revisions are immutable'); END;
+
+CREATE TRIGGER person_note_attribution_revisions_immutable_delete
+BEFORE DELETE ON person_note_attribution_revisions FOR EACH ROW
+BEGIN SELECT RAISE(ABORT, 'person note attribution revisions are immutable'); END;
+
+CREATE TRIGGER person_note_identity_method_coordinate_immutable_update
+BEFORE UPDATE OF id, person_id, kind, normalized_value
+ON contact_methods FOR EACH ROW
+WHEN (
+  NEW.id IS NOT OLD.id
+  OR NEW.person_id IS NOT OLD.person_id
+  OR NEW.kind IS NOT OLD.kind
+  OR NEW.normalized_value IS NOT OLD.normalized_value
+)
+AND (
+  EXISTS (
+    SELECT 1 FROM person_note_granola_identity_sources source
+    WHERE source.source_contact_method_id = OLD.id
+  )
+  OR EXISTS (
+    SELECT 1 FROM person_note_attribution_revisions revision
+    WHERE revision.target_contact_method_id = OLD.id
+  )
+)
+BEGIN SELECT RAISE(ABORT, 'person note identity method coordinate is immutable'); END;
+
+CREATE TRIGGER person_note_identity_method_immutable_delete
+BEFORE DELETE ON contact_methods FOR EACH ROW
+WHEN EXISTS (
+  SELECT 1 FROM person_note_granola_identity_sources source
+  WHERE source.source_contact_method_id = OLD.id
+)
+OR EXISTS (
+  SELECT 1 FROM person_note_attribution_revisions revision
+  WHERE revision.target_contact_method_id = OLD.id
+)
+BEGIN SELECT RAISE(ABORT, 'person note identity method is immutable'); END;
+
+CREATE VIEW person_notes_current AS
+SELECT
+  note.id,
+  coalesce(
+    (SELECT revision.to_person_id
+     FROM person_note_attribution_revisions revision
+     WHERE revision.note_id = note.id
+     ORDER BY revision.id DESC LIMIT 1),
+    note.person_id
+  ) AS person_id,
+  note.occurred_at,
+  note.source,
+  note.source_id,
+  note.title,
+  note.body,
+  note.metadata_json,
+  note.created_at
+FROM person_notes note;