@kelpie/server 0.1.0

package/dist/modules/auth/service.js

@@ -0,0 +1,288 @@
+import { AppError } from '../../lib/errors.js';
+import { UNIQUE_VIOLATION, postgresErrorCode } from '../../lib/database.js';
+import { MINIMUM_PASSWORD_LENGTH, hashPassword, verifyPassword } from '../../lib/passwords.js';
+import { generateToken, hashToken } from '../../lib/tokens.js';
+import { DEFAULT_PREFERENCES, applyPreferenceChanges } from './preferences.js';
+import * as repository from './repository.js';
+/**
+ * Account and session rules.
+ *
+ * Two principles run through this file. Anything a stranger can call must not
+ * reveal whether an email is registered, so login and reset-request behave the
+ * same either way. And any change of password ends every other session, because
+ * the usual reason to change one is that it leaked.
+ */
+const SESSION_LIFETIME_MS = 30 * 24 * 60 * 60 * 1000;
+const RESET_TOKEN_LIFETIME_MS = 60 * 60 * 1000;
+function toAccountView(user) {
+    return { id: user.id, email: user.email, name: user.name };
+}
+function toPreferenceValues(record) {
+    return {
+        timezone: record.timezone,
+        theme: record.theme,
+        emailDigest: record.emailDigest,
+        mentionEmails: record.mentionEmails,
+        productUpdates: record.productUpdates,
+    };
+}
+/** Emails are stored and compared lowercase, per `schema.md`. */
+function normaliseEmail(email) {
+    return email.trim().toLowerCase();
+}
+/**
+ * Rejects a field that is only whitespace.
+ *
+ * The route already refuses an empty string, but `"   "` passes that and then
+ * normalises to nothing. Storing a nameless account or an empty address would be
+ * accepting a request the caller did not mean to make.
+ */
+function requireText(value, field) {
+    const trimmed = value.trim();
+    if (trimmed.length === 0) {
+        throw AppError.validationFailed(`${field} cannot be blank`, [
+            { field, message: 'Cannot be blank' },
+        ]);
+    }
+    return trimmed;
+}
+export function createAuthService(dependencies) {
+    const newToken = dependencies.newToken ?? generateToken;
+    /**
+     * The account behind a live session. A session outliving its user means the
+     * row was deleted underneath it, which is not an authenticated caller.
+     */
+    async function requireUser(userId) {
+        const user = await repository.findUserById(dependencies.db, userId);
+        if (user === undefined) {
+            throw AppError.unauthorized('This session no longer belongs to an account');
+        }
+        return user;
+    }
+    async function issueSession(db, user, device, location) {
+        const now = dependencies.now();
+        const token = newToken();
+        const expiresAt = new Date(now.getTime() + SESSION_LIFETIME_MS);
+        const membership = await repository.findFirstMembership(db, user.id);
+        await repository.insertSession(db, {
+            id: dependencies.createId('session'),
+            userId: user.id,
+            activeWorkspaceId: membership?.workspaceId ?? null,
+            tokenHash: hashToken(token),
+            device: device ?? null,
+            location: location ?? null,
+            lastActiveAt: now,
+            expiresAt,
+        });
+        return {
+            account: toAccountView(user),
+            sessionToken: token,
+            expiresAt,
+            activeWorkspaceId: membership?.workspaceId ?? null,
+        };
+    }
+    return {
+        /** Creates the account only. The first workspace comes from onboarding. */
+        async signUp(input) {
+            if (input.password.length < MINIMUM_PASSWORD_LENGTH) {
+                throw AppError.validationFailed('Password is too short', [
+                    { field: 'password', message: `Must be at least ${MINIMUM_PASSWORD_LENGTH} characters` },
+                ]);
+            }
+            const email = normaliseEmail(input.email);
+            const passwordHash = await hashPassword(input.password);
+            return dependencies.transaction(async ({ tx }) => {
+                let user;
+                try {
+                    user = await repository.insertUser(tx, {
+                        id: dependencies.createId('user'),
+                        email,
+                        name: input.name,
+                        passwordHash,
+                    });
+                }
+                catch (error) {
+                    if (postgresErrorCode(error) === UNIQUE_VIOLATION) {
+                        // Signup is the one place the address is already known to the caller,
+                        // so saying so is not a disclosure.
+                        throw AppError.conflict('An account with that email already exists', [
+                            { field: 'email', message: 'Already registered' },
+                        ]);
+                    }
+                    throw error;
+                }
+                return issueSession(tx, user, input.device, input.location);
+            });
+        },
+        async logIn(input) {
+            const user = await repository.findUserByEmail(dependencies.db, normaliseEmail(input.email));
+            // Hash a throwaway password when the user is unknown, so a missing account
+            // and a wrong password take the same time to answer.
+            const storedHash = user?.passwordHash ?? (await hashPassword('not-a-real-password-placeholder'));
+            if (!(await verifyPassword(storedHash, input.password)) || user === undefined) {
+                throw AppError.unauthorized('Email or password is incorrect');
+            }
+            return dependencies.transaction(({ tx }) => issueSession(tx, user, input.device, input.location));
+        },
+        async logOut(actor) {
+            await repository.deleteSession(dependencies.db, actor.userId, actor.sessionId);
+        },
+        async getAccount(actor) {
+            return toAccountView(await requireUser(actor.userId));
+        },
+        /**
+         * Name and email, for every workspace at once. An account is global, so this
+         * is not a change to one membership.
+         *
+         * Moving the address is treated like a password change, because it is one:
+         * whoever controls the sign-in address controls the account through a
+         * password reset. The current password must verify, every other session
+         * ends, and the address being replaced is told, in case the caller was not
+         * its owner.
+         */
+        async updateAccount(actor, changes) {
+            const user = await requireUser(actor.userId);
+            const values = {
+                ...(changes.name === undefined ? {} : { name: requireText(changes.name, 'name') }),
+                ...(changes.email === undefined
+                    ? {}
+                    : { email: requireText(normaliseEmail(changes.email), 'email') }),
+            };
+            if (changes.email !== undefined &&
+                (changes.currentPassword === undefined ||
+                    !(await verifyPassword(user.passwordHash, changes.currentPassword)))) {
+                throw AppError.unauthorized('Current password is incorrect');
+            }
+            const previousEmail = user.email;
+            try {
+                const updated = await dependencies.transaction(async ({ tx }) => {
+                    const saved = await repository.updateUserProfile(tx, actor.userId, values, dependencies.now());
+                    if (saved === undefined) {
+                        throw AppError.unauthorized('This session no longer belongs to an account');
+                    }
+                    if (changes.email !== undefined) {
+                        await repository.deleteOtherSessionsForUser(tx, actor.userId, actor.sessionId);
+                    }
+                    return saved;
+                });
+                if (changes.email !== undefined) {
+                    await dependencies.email.send({
+                        to: previousEmail,
+                        subject: 'Your Kelpie sign-in email changed',
+                        body: `Your Kelpie sign-in email changed from ${previousEmail} to ${updated.email}. If you did not make this change, reset your password right away.`,
+                    });
+                }
+                return toAccountView(updated);
+            }
+            catch (error) {
+                if (postgresErrorCode(error) === UNIQUE_VIOLATION) {
+                    // The caller typed this address, so naming the clash discloses nothing
+                    // they did not already supply. Same reasoning as signup.
+                    throw AppError.conflict('An account with that email already exists', [
+                        { field: 'email', message: 'Already registered' },
+                    ]);
+                }
+                throw error;
+            }
+        },
+        async getPreferences(actor) {
+            const stored = await repository.findPreferences(dependencies.db, actor.userId);
+            return stored === undefined ? DEFAULT_PREFERENCES : toPreferenceValues(stored);
+        },
+        /**
+         * Writes the whole row from defaults plus what is stored plus what changed,
+         * so a first save and a later one take the same path and a repeat is a no-op.
+         */
+        async updatePreferences(actor, changes) {
+            await requireUser(actor.userId);
+            return dependencies.transaction(async ({ tx }) => {
+                const stored = await repository.findPreferences(tx, actor.userId);
+                const values = applyPreferenceChanges(stored === undefined ? undefined : toPreferenceValues(stored), changes);
+                return toPreferenceValues(await repository.upsertPreferences(tx, {
+                    userId: actor.userId,
+                    ...values,
+                    updatedAt: dependencies.now(),
+                }));
+            });
+        },
+        async listSessions(actor) {
+            const records = await repository.listSessionsForUser(dependencies.db, actor.userId);
+            return records.map((record) => ({
+                id: record.id,
+                device: record.device,
+                location: record.location,
+                lastActiveAt: record.lastActiveAt,
+                current: record.id === actor.sessionId,
+            }));
+        },
+        async revokeSession(actor, sessionId) {
+            const removed = await repository.deleteSession(dependencies.db, actor.userId, sessionId);
+            if (removed === 0) {
+                // Another user's session id is indistinguishable from one that never
+                // existed, which is what `api.md` requires of a cross-tenant miss.
+                throw AppError.notFound('Session not found');
+            }
+        },
+        /**
+         * Always resolves, whether or not the address is registered. Telling a
+         * stranger which addresses have accounts is the whole attack.
+         */
+        async requestPasswordReset(email, resetUrlTemplate) {
+            const user = await repository.findUserByEmail(dependencies.db, normaliseEmail(email));
+            if (user === undefined) {
+                return;
+            }
+            const now = dependencies.now();
+            const token = newToken();
+            await repository.insertPasswordResetToken(dependencies.db, {
+                id: dependencies.createId('passwordResetToken'),
+                userId: user.id,
+                tokenHash: hashToken(token),
+                expiresAt: new Date(now.getTime() + RESET_TOKEN_LIFETIME_MS),
+            });
+            await dependencies.email.send({
+                to: user.email,
+                subject: 'Reset your Kelpie password',
+                body: `Use this link within the hour to choose a new password:\n\n${resetUrlTemplate.replace('{token}', token)}\n\nIf you did not ask for this, ignore it.`,
+            });
+        },
+        /** Ends every session on success: a reset is how you recover a stolen account. */
+        async confirmPasswordReset(token, newPassword) {
+            if (newPassword.length < MINIMUM_PASSWORD_LENGTH) {
+                throw AppError.validationFailed('Password is too short', [
+                    { field: 'password', message: `Must be at least ${MINIMUM_PASSWORD_LENGTH} characters` },
+                ]);
+            }
+            const now = dependencies.now();
+            const record = await repository.findUsablePasswordResetToken(dependencies.db, hashToken(token), now);
+            if (record === undefined) {
+                throw AppError.unauthorized('That reset link is invalid or has expired');
+            }
+            const passwordHash = await hashPassword(newPassword);
+            await dependencies.transaction(async ({ tx }) => {
+                await repository.markPasswordResetTokenUsed(tx, record.id, now);
+                await repository.updateUserPassword(tx, record.userId, passwordHash, now);
+                await repository.deleteAllSessionsForUser(tx, record.userId);
+            });
+        },
+        /** Keeps the caller signed in and ends every other session. */
+        async changePassword(actor, currentPassword, newPassword) {
+            if (newPassword.length < MINIMUM_PASSWORD_LENGTH) {
+                throw AppError.validationFailed('Password is too short', [
+                    { field: 'new_password', message: `Must be at least ${MINIMUM_PASSWORD_LENGTH} characters` },
+                ]);
+            }
+            const user = await repository.findUserById(dependencies.db, actor.userId);
+            if (user === undefined || !(await verifyPassword(user.passwordHash, currentPassword))) {
+                throw AppError.unauthorized('Current password is incorrect');
+            }
+            const now = dependencies.now();
+            const passwordHash = await hashPassword(newPassword);
+            await dependencies.transaction(async ({ tx }) => {
+                await repository.updateUserPassword(tx, user.id, passwordHash, now);
+                await repository.deleteOtherSessionsForUser(tx, user.id, actor.sessionId);
+            });
+        },
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/modules/auth/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/modules/auth/service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAE9C,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAE3E,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC9F,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAG9D,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAE9E,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;;;;;;GAOG;AAEH,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACpD,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAyD9C,SAAS,aAAa,CAAC,IAA2B;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;AAC5D,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAwC;IAClE,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAA;AACH,CAAC;AAED,iEAAiE;AACjE,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,KAAa,EAAE,KAAa;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAE5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,QAAQ,CAAC,gBAAgB,CAAC,GAAG,KAAK,kBAAkB,EAAE;YAC1D,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE;SACtC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAoBD,MAAM,UAAU,iBAAiB,CAAC,YAA8B;IAC9D,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,IAAI,aAAa,CAAA;IAEvD;;;OAGG;IACH,KAAK,UAAU,WAAW,CAAC,MAAc;QACvC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAEnE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,QAAQ,CAAC,YAAY,CAAC,8CAA8C,CAAC,CAAA;QAC7E,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,UAAU,YAAY,CACzB,EAAwB,EACxB,IAA2B,EAC3B,MAA0B,EAC1B,QAA4B;QAE5B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,CAAA;QAC9B,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;QACxB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,mBAAmB,CAAC,CAAA;QAC/D,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QAEpE,MAAM,UAAU,CAAC,aAAa,CAAC,EAAE,EAAE;YACjC,EAAE,EAAE,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC;YACpC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,iBAAiB,EAAE,UAAU,EAAE,WAAW,IAAI,IAAI;YAClD,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC;YAC3B,MAAM,EAAE,MAAM,IAAI,IAAI;YACtB,QAAQ,EAAE,QAAQ,IAAI,IAAI;YAC1B,YAAY,EAAE,GAAG;YACjB,SAAS;SACV,CAAC,CAAA;QAEF,OAAO;YACL,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC;YAC5B,YAAY,EAAE,KAAK;YACnB,SAAS;YACT,iBAAiB,EAAE,UAAU,EAAE,WAAW,IAAI,IAAI;SACnD,CAAA;IACH,CAAC;IAED,OAAO;QACL,2EAA2E;QAC3E,KAAK,CAAC,MAAM,CAAC,KAAkB;YAC7B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;gBACpD,MAAM,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE;oBACvD,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,oBAAoB,uBAAuB,aAAa,EAAE;iBACzF,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACzC,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YAEvD,OAAO,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;gBAC/C,IAAI,IAA2B,CAAA;gBAE/B,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,EAAE;wBACrC,EAAE,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;wBACjC,KAAK;wBACL,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,YAAY;qBACb,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,gBAAgB,EAAE,CAAC;wBAClD,sEAAsE;wBACtE,oCAAoC;wBACpC,MAAM,QAAQ,CAAC,QAAQ,CAAC,2CAA2C,EAAE;4BACnE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE;yBAClD,CAAC,CAAA;oBACJ,CAAC;oBAED,MAAM,KAAK,CAAA;gBACb,CAAC;gBAED,OAAO,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;YAC7D,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,KAAiB;YAC3B,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;YAE3F,2EAA2E;YAC3E,qDAAqD;YACrD,MAAM,UAAU,GAAG,IAAI,EAAE,YAAY,IAAI,CAAC,MAAM,YAAY,CAAC,iCAAiC,CAAC,CAAC,CAAA;YAEhG,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9E,MAAM,QAAQ,CAAC,YAAY,CAAC,gCAAgC,CAAC,CAAA;YAC/D,CAAC;YAED,OAAO,YAAY,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;QACnG,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAmB;YAC9B,MAAM,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;QAChF,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,KAAmB;YAClC,OAAO,aAAa,CAAC,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QACvD,CAAC;QAED;;;;;;;;;WASG;QACH,KAAK,CAAC,aAAa,CAAC,KAAmB,EAAE,OAA6B;YACpE,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YAE5C,MAAM,MAAM,GAAG;gBACb,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;gBAClF,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;oBAC7B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;aACpE,CAAA;YAED,IACE,OAAO,CAAC,KAAK,KAAK,SAAS;gBAC3B,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;oBACpC,CAAC,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EACtE,CAAC;gBACD,MAAM,QAAQ,CAAC,YAAY,CAAC,+BAA+B,CAAC,CAAA;YAC9D,CAAC;YAED,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAA;YAEhC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;oBAC9D,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAA;oBAE9F,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBACxB,MAAM,QAAQ,CAAC,YAAY,CAAC,8CAA8C,CAAC,CAAA;oBAC7E,CAAC;oBAED,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;wBAChC,MAAM,UAAU,CAAC,0BAA0B,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;oBAChF,CAAC;oBAED,OAAO,KAAK,CAAA;gBACd,CAAC,CAAC,CAAA;gBAEF,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAChC,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;wBAC5B,EAAE,EAAE,aAAa;wBACjB,OAAO,EAAE,mCAAmC;wBAC5C,IAAI,EAAE,0CAA0C,aAAa,OAAO,OAAO,CAAC,KAAK,oEAAoE;qBACtJ,CAAC,CAAA;gBACJ,CAAC;gBAED,OAAO,aAAa,CAAC,OAAO,CAAC,CAAA;YAC/B,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,gBAAgB,EAAE,CAAC;oBAClD,uEAAuE;oBACvE,yDAAyD;oBACzD,MAAM,QAAQ,CAAC,QAAQ,CAAC,2CAA2C,EAAE;wBACnE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE;qBAClD,CAAC,CAAA;gBACJ,CAAC;gBAED,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,KAAmB;YACtC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;YAE9E,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAChF,CAAC;QAED;;;WAGG;QACH,KAAK,CAAC,iBAAiB,CACrB,KAAmB,EACnB,OAA0B;YAE1B,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YAE/B,OAAO,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;gBAC/C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;gBACjE,MAAM,MAAM,GAAG,sBAAsB,CACnC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAC7D,OAAO,CACR,CAAA;gBAED,OAAO,kBAAkB,CACvB,MAAM,UAAU,CAAC,iBAAiB,CAAC,EAAE,EAAE;oBACrC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,GAAG,MAAM;oBACT,SAAS,EAAE,YAAY,CAAC,GAAG,EAAE;iBAC9B,CAAC,CACH,CAAA;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,KAAmB;YACpC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;YAEnF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC9B,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,OAAO,EAAE,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,SAAS;aACvC,CAAC,CAAC,CAAA;QACL,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAmB,EAAE,SAAiB;YACxD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;YAExF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,qEAAqE;gBACrE,mEAAmE;gBACnE,MAAM,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAA;YAC9C,CAAC;QACH,CAAC;QAED;;;WAGG;QACH,KAAK,CAAC,oBAAoB,CAAC,KAAa,EAAE,gBAAwB;YAChE,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;YAErF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAM;YACR,CAAC;YAED,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,CAAA;YAC9B,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;YAExB,MAAM,UAAU,CAAC,wBAAwB,CAAC,YAAY,CAAC,EAAE,EAAE;gBACzD,EAAE,EAAE,YAAY,CAAC,QAAQ,CAAC,oBAAoB,CAAC;gBAC/C,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC;gBAC3B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,uBAAuB,CAAC;aAC7D,CAAC,CAAA;YAEF,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC5B,EAAE,EAAE,IAAI,CAAC,KAAK;gBACd,OAAO,EAAE,4BAA4B;gBACrC,IAAI,EAAE,8DAA8D,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,6CAA6C;aAC5J,CAAC,CAAA;QACJ,CAAC;QAED,kFAAkF;QAClF,KAAK,CAAC,oBAAoB,CAAC,KAAa,EAAE,WAAmB;YAC3D,IAAI,WAAW,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;gBACjD,MAAM,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE;oBACvD,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,oBAAoB,uBAAuB,aAAa,EAAE;iBACzF,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,CAAA;YAC9B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,4BAA4B,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAA;YAEpG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,QAAQ,CAAC,YAAY,CAAC,2CAA2C,CAAC,CAAA;YAC1E,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAA;YAEpD,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;gBAC9C,MAAM,UAAU,CAAC,0BAA0B,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;gBAC/D,MAAM,UAAU,CAAC,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;gBACzE,MAAM,UAAU,CAAC,wBAAwB,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;YAC9D,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,+DAA+D;QAC/D,KAAK,CAAC,cAAc,CAAC,KAAmB,EAAE,eAAuB,EAAE,WAAmB;YACpF,IAAI,WAAW,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;gBACjD,MAAM,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,EAAE;oBACvD,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,oBAAoB,uBAAuB,aAAa,EAAE;iBAC7F,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;YAEzE,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;gBACtF,MAAM,QAAQ,CAAC,YAAY,CAAC,+BAA+B,CAAC,CAAA;YAC9D,CAAC;YAED,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,CAAA;YAC9B,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAA;YAEpD,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;gBAC9C,MAAM,UAAU,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;gBACnE,MAAM,UAAU,CAAC,0BAA0B,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;YAC3E,CAAC,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/modules/auth/session.d.ts

@@ -0,0 +1,16 @@
+import type { Context } from 'hono';
+/**
+ * The session cookie. Turning credentials into an actor lives in
+ * `credentials.ts`, which handles bearer keys too.
+ *
+ * `api.md`: the workspace is always implicit. It comes from the session or the
+ * key, never from a header, a path segment, or a request body.
+ */
+export declare const SESSION_COOKIE = "kelpie_session";
+export interface SessionCookieOptions {
+    /** Only sent over HTTPS outside development. */
+    readonly secure: boolean;
+}
+export declare function writeSessionCookie(context: Context, token: string, options: SessionCookieOptions): void;
+export declare function clearSessionCookie(context: Context, options: SessionCookieOptions): void;
+//# sourceMappingURL=session.d.ts.map

package/dist/modules/auth/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/modules/auth/session.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAEnC;;;;;;GAMG;AAEH,eAAO,MAAM,cAAc,mBAAmB,CAAA;AAK9C,MAAM,WAAW,oBAAoB;IACnC,gDAAgD;IAChD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CACzB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAQvG;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAQxF"}

package/dist/modules/auth/session.js

@@ -0,0 +1,30 @@
+import { setCookie } from 'hono/cookie';
+/**
+ * The session cookie. Turning credentials into an actor lives in
+ * `credentials.ts`, which handles bearer keys too.
+ *
+ * `api.md`: the workspace is always implicit. It comes from the session or the
+ * key, never from a header, a path segment, or a request body.
+ */
+export const SESSION_COOKIE = 'kelpie_session';
+/** Thirty days, matching the session row's expiry. */
+const COOKIE_MAX_AGE_SECONDS = 30 * 24 * 60 * 60;
+export function writeSessionCookie(context, token, options) {
+    setCookie(context, SESSION_COOKIE, token, {
+        httpOnly: true,
+        sameSite: 'Lax',
+        secure: options.secure,
+        path: '/',
+        maxAge: COOKIE_MAX_AGE_SECONDS,
+    });
+}
+export function clearSessionCookie(context, options) {
+    setCookie(context, SESSION_COOKIE, '', {
+        httpOnly: true,
+        sameSite: 'Lax',
+        secure: options.secure,
+        path: '/',
+        maxAge: 0,
+    });
+}
+//# sourceMappingURL=session.js.map

package/dist/modules/auth/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../src/modules/auth/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAGvC;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAA;AAE9C,sDAAsD;AACtD,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;AAOhD,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,KAAa,EAAE,OAA6B;IAC/F,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE;QACxC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,sBAAsB;KAC/B,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,OAA6B;IAChF,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE;QACrC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,CAAC;KACV,CAAC,CAAA;AACJ,CAAC"}

package/dist/modules/companies/index.d.ts

@@ -0,0 +1,9 @@
+import type { KelpieModule } from '../../runtime/module.ts';
+/**
+ * Companies: the organisations behind the people.
+ *
+ * Requires `workspace` only. People reach companies through Position, which is
+ * its own module, so nothing here depends on `people`.
+ */
+export declare function createCompaniesModule(migrationsDirectory: string): KelpieModule;
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/companies/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/modules/companies/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAO3D;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,mBAAmB,EAAE,MAAM,GAAG,YAAY,CA6B/E"}

package/dist/modules/companies/index.js

@@ -0,0 +1,37 @@
+import { createActivityRecorder } from '../activities/index.js';
+import { mountCompaniesRoutes } from './routes.js';
+import * as schema from './schema.js';
+import { createCompaniesService } from './service.js';
+import { registerCompaniesTools } from './tools.js';
+/**
+ * Companies: the organisations behind the people.
+ *
+ * Requires `workspace` only. People reach companies through Position, which is
+ * its own module, so nothing here depends on `people`.
+ */
+export function createCompaniesModule(migrationsDirectory) {
+    return {
+        id: 'companies',
+        requires: ['workspace', 'activities'],
+        structural: true,
+        register(context) {
+            const service = createCompaniesService({
+                db: context.db,
+                transaction: context.transaction,
+                createId: context.createId,
+                now: context.now,
+                recordActivity: createActivityRecorder({
+                    createId: context.createId,
+                    now: context.now,
+                }),
+            });
+            context.schema(schema, migrationsDirectory);
+            context.routes((router) => {
+                mountCompaniesRoutes(router, { db: context.db, now: context.now, service });
+            });
+            registerCompaniesTools(context.mcp, service);
+            return Promise.resolve();
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/modules/companies/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/modules/companies/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAEnD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,mBAA2B;IAC/D,OAAO;QACL,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;QACrC,UAAU,EAAE,IAAI;QAEhB,QAAQ,CAAC,OAAO;YACd,MAAM,OAAO,GAAG,sBAAsB,CAAC;gBACrC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,cAAc,EAAE,sBAAsB,CAAC;oBACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;iBACjB,CAAC;aACH,CAAC,CAAA;YAEF,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;YAE3C,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;gBACxB,oBAAoB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;YAC7E,CAAC,CAAC,CAAA;YAEF,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YAE5C,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/modules/companies/repository.d.ts

@@ -0,0 +1,40 @@
+import type { ListWindow, SortableFields } from '../../lib/pagination.ts';
+import type { Queryable } from '../../runtime/transaction.ts';
+import { companies } from './schema.ts';
+export type CompanyRecord = typeof companies.$inferSelect;
+/** The writable column shape. Services build one of these; nothing else knows the column names. */
+export type CompanyColumns = typeof companies.$inferInsert;
+/** The sort fields `?sort=` documents for companies. Nullable columns stay out: a keyset cannot seek past a null. */
+export declare const COMPANY_SORTS: SortableFields<CompanyRecord>;
+export declare const DEFAULT_COMPANY_SORT = "-created_at";
+export interface CompanyFilters {
+    /** `?q=`, matched the way the mockup's Companies filter matches. */
+    readonly term?: string | undefined;
+    /** `?person_id=`, repeatable: companies where any of these people holds a position. */
+    readonly personIds?: readonly string[] | undefined;
+}
+/** @returns Up to `window.fetchLimit` rows: one more than the page, so the caller can tell there is a next one. */
+export declare function listCompanies(db: Queryable, workspaceId: string, filters: CompanyFilters, window: ListWindow<CompanyRecord>): Promise<CompanyRecord[]>;
+export declare function findCompany(db: Queryable, workspaceId: string, id: string): Promise<CompanyRecord | undefined>;
+/**
+ * The one company in this workspace on a domain. `domain` is unique per
+ * workspace and `citext`, so the comparison matches whatever case arrived.
+ */
+export declare function findCompanyByDomain(db: Queryable, workspaceId: string, domain: string): Promise<CompanyRecord | undefined>;
+/**
+ * A company matched by name, for a form submit that was given a name and no
+ * domain.
+ *
+ * Names are not unique, so this is a weaker match than the domain one and is
+ * only ever tried second (`forms.md` submit rule 4). The oldest row wins, which
+ * makes a repeat submission attach to the same company every time rather than
+ * following whichever duplicate was edited last.
+ *
+ * `lower(…) = lower(…)` rather than `ilike`: the name is caller data, and
+ * `ilike` would read a `%` or `_` inside it as a wildcard.
+ */
+export declare function findCompanyByName(db: Queryable, workspaceId: string, name: string): Promise<CompanyRecord | undefined>;
+export declare function insertCompany(db: Queryable, values: CompanyColumns): Promise<CompanyRecord>;
+export declare function updateCompany(db: Queryable, workspaceId: string, id: string, changes: Partial<CompanyColumns>): Promise<CompanyRecord | undefined>;
+export declare function deleteCompany(db: Queryable, workspaceId: string, id: string): Promise<number>;
+//# sourceMappingURL=repository.d.ts.map

package/dist/modules/companies/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../src/modules/companies/repository.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAEzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAE7D,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEvC,MAAM,MAAM,aAAa,GAAG,OAAO,SAAS,CAAC,YAAY,CAAA;AAEzD,mGAAmG;AACnG,MAAM,MAAM,cAAc,GAAG,OAAO,SAAS,CAAC,YAAY,CAAA;AAE1D,qHAAqH;AACrH,eAAO,MAAM,aAAa,EAAE,cAAc,CAAC,aAAa,CAIvD,CAAA;AAED,eAAO,MAAM,oBAAoB,gBAAgB,CAAA;AAEjD,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,uFAAuF;IACvF,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;CACnD;AAwCD,mHAAmH;AACnH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC,GAChC,OAAO,CAAC,aAAa,EAAE,CAAC,CAO1B;AAED,wBAAsB,WAAW,CAC/B,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAQpC;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAQpC;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAcpC;AAED,wBAAsB,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAQjG;AAED,wBAAsB,aAAa,CACjC,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,GAC/B,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAQpC;AAED,wBAAsB,aAAa,CACjC,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,MAAM,CAAC,CAOjB"}

package/dist/modules/companies/repository.js

@@ -0,0 +1,112 @@
+import { and, asc, eq, ilike, inArray, or, sql } from 'drizzle-orm';
+import { keysetCondition, orderByWindow, textSort, timestampSort } from '../../lib/pagination.js';
+import { arrayContainsPattern, containsPattern } from '../../lib/search.js';
+import { positions } from '../positions/schema.js';
+import { companies } from './schema.js';
+/** The sort fields `?sort=` documents for companies. Nullable columns stay out: a keyset cannot seek past a null. */
+export const COMPANY_SORTS = {
+    name: textSort(companies.name, (company) => company.name),
+    created_at: timestampSort(companies.createdAt, (company) => company.createdAt),
+    updated_at: timestampSort(companies.updatedAt, (company) => company.updatedAt),
+};
+export const DEFAULT_COMPANY_SORT = '-created_at';
+/**
+ * `api.md` has no `include` expansion, so without this filter a person detail
+ * page would fetch the person's positions and then one company per position.
+ *
+ * Reads the `positions` table, never its repository. See the same note in the
+ * people repository.
+ */
+function employsAnyOf(personIds) {
+    return sql `exists (
+    select 1
+    from ${positions}
+    where ${positions.companyId} = ${companies.id}
+      and ${positions.workspaceId} = ${companies.workspaceId}
+      and ${inArray(positions.personId, personIds)}
+  )`;
+}
+function matchesTerm(term) {
+    const pattern = containsPattern(term);
+    return or(ilike(companies.name, pattern), ilike(companies.domain, pattern), ilike(companies.industry, pattern), ilike(companies.summary, pattern), ilike(companies.accountType, pattern), arrayContainsPattern(companies.tags, pattern));
+}
+function conditionsFor(workspaceId, filters) {
+    return [
+        eq(companies.workspaceId, workspaceId),
+        filters.term === undefined ? undefined : matchesTerm(filters.term),
+        filters.personIds === undefined ? undefined : employsAnyOf(filters.personIds),
+    ];
+}
+/** @returns Up to `window.fetchLimit` rows: one more than the page, so the caller can tell there is a next one. */
+export function listCompanies(db, workspaceId, filters, window) {
+    return db
+        .select()
+        .from(companies)
+        .where(and(...conditionsFor(workspaceId, filters), keysetCondition(window, companies.id)))
+        .orderBy(...orderByWindow(window, companies.id))
+        .limit(window.fetchLimit);
+}
+export async function findCompany(db, workspaceId, id) {
+    const [found] = await db
+        .select()
+        .from(companies)
+        .where(and(eq(companies.workspaceId, workspaceId), eq(companies.id, id)))
+        .limit(1);
+    return found;
+}
+/**
+ * The one company in this workspace on a domain. `domain` is unique per
+ * workspace and `citext`, so the comparison matches whatever case arrived.
+ */
+export async function findCompanyByDomain(db, workspaceId, domain) {
+    const [found] = await db
+        .select()
+        .from(companies)
+        .where(and(eq(companies.workspaceId, workspaceId), eq(companies.domain, domain)))
+        .limit(1);
+    return found;
+}
+/**
+ * A company matched by name, for a form submit that was given a name and no
+ * domain.
+ *
+ * Names are not unique, so this is a weaker match than the domain one and is
+ * only ever tried second (`forms.md` submit rule 4). The oldest row wins, which
+ * makes a repeat submission attach to the same company every time rather than
+ * following whichever duplicate was edited last.
+ *
+ * `lower(…) = lower(…)` rather than `ilike`: the name is caller data, and
+ * `ilike` would read a `%` or `_` inside it as a wildcard.
+ */
+export async function findCompanyByName(db, workspaceId, name) {
+    const [found] = await db
+        .select()
+        .from(companies)
+        .where(and(eq(companies.workspaceId, workspaceId), sql `lower(${companies.name}) = lower(${sql.param(name, companies.name)})`))
+        .orderBy(asc(companies.createdAt), asc(companies.id))
+        .limit(1);
+    return found;
+}
+export async function insertCompany(db, values) {
+    const [created] = await db.insert(companies).values(values).returning();
+    if (created === undefined) {
+        throw new Error(`Inserting company ${values.id} returned no row`);
+    }
+    return created;
+}
+export async function updateCompany(db, workspaceId, id, changes) {
+    const [updated] = await db
+        .update(companies)
+        .set(changes)
+        .where(and(eq(companies.workspaceId, workspaceId), eq(companies.id, id)))
+        .returning();
+    return updated;
+}
+export async function deleteCompany(db, workspaceId, id) {
+    const deleted = await db
+        .delete(companies)
+        .where(and(eq(companies.workspaceId, workspaceId), eq(companies.id, id)))
+        .returning({ id: companies.id });
+    return deleted.length;
+}
+//# sourceMappingURL=repository.js.map

package/dist/modules/companies/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../src/modules/companies/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAGnE,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEjG,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE3E,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAOvC,qHAAqH;AACrH,MAAM,CAAC,MAAM,aAAa,GAAkC;IAC1D,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzD,UAAU,EAAE,aAAa,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IAC9E,UAAU,EAAE,aAAa,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;CAC/E,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,aAAa,CAAA;AASjD;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,SAA4B;IAChD,OAAO,GAAG,CAAA;;WAED,SAAS;YACR,SAAS,CAAC,SAAS,MAAM,SAAS,CAAC,EAAE;YACrC,SAAS,CAAC,WAAW,MAAM,SAAS,CAAC,WAAW;YAChD,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC9C,CAAA;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAErC,OAAO,EAAE,CACP,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAC9B,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,EAClC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,EACjC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,EACrC,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAC9C,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB,EAAE,OAAuB;IACjE,OAAO;QACL,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC;QACtC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;QAClE,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC;KAC9E,CAAA;AACH,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,aAAa,CAC3B,EAAa,EACb,WAAmB,EACnB,OAAuB,EACvB,MAAiC;IAEjC,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;SACzF,OAAO,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;SAC/C,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAa,EACb,WAAmB,EACnB,EAAU;IAEV,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE;SACrB,MAAM,EAAE;SACR,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;SACxE,KAAK,CAAC,CAAC,CAAC,CAAA;IAEX,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAa,EACb,WAAmB,EACnB,MAAc;IAEd,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE;SACrB,MAAM,EAAE;SACR,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;SAChF,KAAK,CAAC,CAAC,CAAC,CAAA;IAEX,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAa,EACb,WAAmB,EACnB,IAAY;IAEZ,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE;SACrB,MAAM,EAAE;SACR,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,EACtC,GAAG,CAAA,SAAS,SAAS,CAAC,IAAI,aAAa,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAC1E,CACF;SACA,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;SACpD,KAAK,CAAC,CAAC,CAAC,CAAA;IAEX,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAa,EAAE,MAAsB;IACvE,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAA;IAEvE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAA;IACnE,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAa,EACb,WAAmB,EACnB,EAAU,EACV,OAAgC;IAEhC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;SACvB,MAAM,CAAC,SAAS,CAAC;SACjB,GAAG,CAAC,OAAO,CAAC;SACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;SACxE,SAAS,EAAE,CAAA;IAEd,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAa,EACb,WAAmB,EACnB,EAAU;IAEV,MAAM,OAAO,GAAG,MAAM,EAAE;SACrB,MAAM,CAAC,SAAS,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;SACxE,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAA;IAElC,OAAO,OAAO,CAAC,MAAM,CAAA;AACvB,CAAC"}