@kelpie/server 0.11.0 → 0.13.0

package/src/modules/auth/service.ts

@@ -1,13 +1,16 @@
 import { APP_LINK_PATHS, buildAppLink } from '../../lib/appUrl.ts'
 import type { EmailSender } from '../../lib/email.ts'
 import { renderEmail } from '../../lib/emailContent.ts'
-import { AppError } from '../../lib/errors.ts'
+import { AppError, ExternalSignInError } from '../../lib/errors.ts'
 import type { IdFactory } from '../../lib/ids.ts'
 import { UNIQUE_VIOLATION, postgresErrorCode } from '../../lib/database.ts'
 import type { Database } from '../../lib/database.ts'
 import { MINIMUM_PASSWORD_LENGTH, hashPassword, verifyPassword } from '../../lib/passwords.ts'
 import { generateToken, hashToken } from '../../lib/tokens.ts'
+import type { VerifiedIdentity } from '../../runtime/module.ts'
 import type { TransactionScope } from '../../runtime/transaction.ts'
+import type { MemberRole } from '../workspace/roles.ts'
+import { parseMemberRole } from '../workspace/roles.ts'
 import type { SessionActor } from './actor.ts'
 import { DEFAULT_PREFERENCES, applyPreferenceChanges } from './preferences.ts'
 import type { PreferenceChanges, PreferenceValues } from './preferences.ts'
@@ -35,6 +38,13 @@ export interface AuthDependencies {
   readonly now: () => Date
   /** The deployment's own base URL. Every emailed link is built from it. */
   readonly appBaseUrl: string
+  /**
+   * Whether a brand-new account may be created, through `signUp` or
+   * `completeExternalSignIn` provisioning. Joining an existing workspace via
+   * invite, and workspace creation by an already-verified account, are
+   * unaffected either way — this only gates the account-creation step itself.
+   */
+  readonly signupsEnabled: boolean
   /** Injected only so tests can pin tokens. Production uses the crypto default. */
   readonly newToken?: () => string
 }
@@ -54,12 +64,37 @@ export interface IssuedSession {
   readonly activeWorkspaceId: string | null
 }
 
+/** What `completeExternalSignIn` returns: an issued session plus whether it made the account. */
+export interface ExternalIssuedSession extends IssuedSession {
+  readonly created: boolean
+}
+
 export interface SessionView {
   readonly id: string
   readonly device: string | null
   readonly location: string | null
   readonly lastActiveAt: Date
   readonly current: boolean
+  /** The module that signed this session in, or null for a password sign-in. */
+  readonly signedInVia: string | null
+}
+
+/** What `GET /v1/auth/me` and `POST /v1/auth/workspace` answer with. */
+export interface MeView {
+  readonly userId: string
+  readonly sessionId: string
+  readonly workspaceId: string | null
+  readonly role: MemberRole | null
+  readonly emailVerified: boolean
+}
+
+/** One membership on `GET /v1/auth/workspaces`. */
+export interface AccountWorkspaceView {
+  readonly id: string
+  readonly name: string
+  readonly slug: string
+  readonly timezone: string
+  readonly role: MemberRole
 }
 
 export interface SignUpInput {
@@ -85,6 +120,12 @@ export interface LogInInput {
   readonly location?: string
 }
 
+/** A `VerifiedIdentity` plus what the request itself says about the client. */
+export interface ExternalSignInInput extends VerifiedIdentity {
+  readonly device?: string
+  readonly location?: string
+}
+
 function toAccountView(user: repository.UserRecord): AccountView {
   return { id: user.id, email: user.email, name: user.name, emailVerified: user.emailVerifiedAt !== null }
 }
@@ -105,6 +146,16 @@ function normaliseEmail(email: string): string {
   return email.trim().toLowerCase()
 }
 
+/**
+ * The name to use when a provider sends none. `users.name` is not nullable and
+ * an address is the only other thing an identity is guaranteed to carry.
+ */
+function localPartOf(email: string): string {
+  const [local] = email.split('@')
+
+  return local === undefined || local.length === 0 ? email : local
+}
+
 /**
  * Rejects a field that is only whitespace.
  *
@@ -128,6 +179,12 @@ export interface AuthService {
   /** Creates the account only. The first workspace comes from onboarding. */
   signUp(input: SignUpInput): Promise<IssuedSession>
   logIn(input: LogInInput): Promise<IssuedSession>
+  /**
+   * Signs in an identity a module verified elsewhere, provisioning the account
+   * when the module asked for it. Never sends a verification email: the
+   * provider already proved control of the address.
+   */
+  completeExternalSignIn(input: ExternalSignInInput): Promise<ExternalIssuedSession>
   logOut(actor: SessionActor): Promise<void>
   getAccount(actor: SessionActor): Promise<AccountView>
   updateAccount(actor: SessionActor, changes: UpdateAccountChanges): Promise<AccountView>
@@ -136,6 +193,10 @@ export interface AuthService {
   updatePreferences(actor: SessionActor, changes: PreferenceChanges): Promise<PreferenceValues>
   listSessions(actor: SessionActor): Promise<readonly SessionView[]>
   revokeSession(actor: SessionActor, sessionId: string): Promise<void>
+  /** Workspaces this account belongs to. Oldest membership first. */
+  listWorkspaces(actor: SessionActor): Promise<readonly AccountWorkspaceView[]>
+  /** Moves this session into a membership. Answers the same shape as `GET /v1/auth/me`. */
+  switchWorkspace(actor: SessionActor, workspaceId: string): Promise<MeView>
   /** Resolves whether or not the address is registered. */
   requestPasswordReset(email: string): Promise<void>
   confirmPasswordReset(token: string, newPassword: string): Promise<void>
@@ -167,6 +228,8 @@ export function createAuthService(dependencies: AuthDependencies): AuthService {
     user: repository.UserRecord,
     device: string | undefined,
     location: string | undefined,
+    /** The module that verified the identity, or null for a password sign-in. */
+    signedInVia: string | null = null,
   ): Promise<IssuedSession> {
     const now = dependencies.now()
     const token = newToken()
@@ -180,6 +243,7 @@ export function createAuthService(dependencies: AuthDependencies): AuthService {
       tokenHash: hashToken(token),
       device: device ?? null,
       location: location ?? null,
+      signedInVia,
       lastActiveAt: now,
       expiresAt,
     })
@@ -217,6 +281,10 @@ export function createAuthService(dependencies: AuthDependencies): AuthService {
   return {
     /** Creates the account only. The first workspace comes from onboarding. */
     async signUp(input: SignUpInput): Promise<IssuedSession> {
+      if (!dependencies.signupsEnabled) {
+        throw new AppError('forbidden', 'Signups are closed on this instance')
+      }
+
       if (input.password.length < MINIMUM_PASSWORD_LENGTH) {
         throw AppError.validationFailed('Password is too short', [
           { field: 'password', message: `Must be at least ${MINIMUM_PASSWORD_LENGTH} characters` },
@@ -269,17 +337,119 @@ export function createAuthService(dependencies: AuthDependencies): AuthService {
     async logIn(input: LogInInput): Promise<IssuedSession> {
       const user = await repository.findUserByEmail(dependencies.db, normaliseEmail(input.email))
 
-      // Hash a throwaway password when the user is unknown, so a missing account
-      // and a wrong password take the same time to answer.
+      // Hash a throwaway password when the account is unknown or has no
+      // password, so all three cases take the same time to answer.
       const storedHash = user?.passwordHash ?? (await hashPassword('not-a-real-password-placeholder'))
-
-      if (!(await verifyPassword(storedHash, input.password)) || user === undefined) {
+      // Always run the verify, even when the hash is the placeholder: skipping
+      // it would make a passwordless account answer faster than a wrong one.
+      const matches = await verifyPassword(storedHash, input.password)
+
+      // The null check is the guard, not the placeholder hash. Without it,
+      // whoever guessed the placeholder string would sign in to every account
+      // that has no password.
+      if (user === undefined || user.passwordHash === null || !matches) {
         throw AppError.unauthorized('Email or password is incorrect')
       }
 
       return dependencies.transaction(({ tx }) => issueSession(tx, user, input.device, input.location))
     },
 
+    /**
+     * Signs in an identity a module already verified.
+     *
+     * Core does not redo the verification and never learns the protocol. What
+     * it owns is everything downstream: finding or provisioning the account,
+     * issuing the session, and recording which module vouched for it.
+     */
+    async completeExternalSignIn(input: ExternalSignInInput): Promise<ExternalIssuedSession> {
+      // An unverified address is not an identity. A provider that does not say
+      // it checked is treated as not having checked.
+      if (!input.emailVerified) {
+        throw new ExternalSignInError('email_unverified')
+      }
+
+      const email = requireText(normaliseEmail(input.email), 'email')
+      const name = requireText(input.name ?? localPartOf(email), 'name')
+      const now = dependencies.now()
+
+      const link = async (
+        tx: repository.Queryable,
+        user: repository.UserRecord,
+      ): Promise<ExternalIssuedSession> => {
+        // Signing in through a provider on an account whose address was never
+        // confirmed is the pre-registration takeover case: somebody registered
+        // this address with a password and never proved they own it. The
+        // provider just proved the opposite. Drop that password and every
+        // session it opened; the real owner sets a new one through a reset.
+        if (user.emailVerifiedAt === null) {
+          await repository.updateUserPassword(tx, user.id, null, now)
+          await repository.deleteAllSessionsForUser(tx, user.id)
+        }
+
+        // The provider proved control of the address, which is the same thing
+        // accepting an invite proves.
+        await repository.markEmailVerified(tx, user.id, now)
+
+        const issued = await issueSession(
+          tx,
+          { ...user, emailVerifiedAt: user.emailVerifiedAt ?? now },
+          input.device,
+          input.location,
+          input.verifiedBy,
+        )
+
+        return { ...issued, created: false }
+      }
+
+      const existing = await repository.findUserByEmail(dependencies.db, email)
+
+      if (existing !== undefined) {
+        return dependencies.transaction(({ tx }) => link(tx, existing))
+      }
+
+      // The instance-level gate applies before the module's own policy: a
+      // module that would provision does not get to override it.
+      if (!dependencies.signupsEnabled) {
+        throw new ExternalSignInError('signups_closed')
+      }
+
+      if (input.provision === 'refuse') {
+        throw new ExternalSignInError('unknown_identity')
+      }
+
+      return dependencies.transaction(async ({ tx }) => {
+        let user: repository.UserRecord
+
+        try {
+          user = await repository.insertUser(tx, {
+            id: dependencies.createId('user'),
+            email,
+            name,
+            passwordHash: null,
+            emailVerifiedAt: now,
+          })
+        } catch (error: unknown) {
+          if (postgresErrorCode(error) !== UNIQUE_VIOLATION) {
+            throw error
+          }
+
+          // Two first sign-ins for the same address at once. The other one won;
+          // this is now an ordinary link.
+          const raced = await repository.findUserByEmail(tx, email)
+
+          if (raced === undefined) {
+            throw error
+          }
+
+          return link(tx, raced)
+        }
+
+        const issued = await issueSession(tx, user, input.device, input.location, input.verifiedBy)
+
+        return { ...issued, created: true }
+      })
+    },
+
     async logOut(actor: SessionActor): Promise<void> {
       await repository.deleteSession(dependencies.db, actor.userId, actor.sessionId)
     },
@@ -297,30 +467,45 @@ export function createAuthService(dependencies: AuthDependencies): AuthService {
      * password reset. The current password must verify, every other session
      * ends, and the address being replaced is told, in case the caller was not
      * its owner.
+     *
+     * A real change of address also resets verification and sends a fresh
+     * token to the new one. Verifying the old address proves nothing about the
+     * new one, and leaving the flag set would let anyone who can rename an
+     * unregistered account onto a given address inherit "verified" for free —
+     * exactly the mailbox-ownership proof signup's own token exists to require.
+     * Submitting the address already on file is not a change and resets nothing.
      */
     async updateAccount(actor: SessionActor, changes: UpdateAccountChanges): Promise<AccountView> {
       const user = await requireUser(actor.userId)
 
+      const nextEmail =
+        changes.email === undefined ? undefined : requireText(normaliseEmail(changes.email), 'email')
+      const emailChanging = nextEmail !== undefined && nextEmail !== user.email
+
       const values = {
         ...(changes.name === undefined ? {} : { name: requireText(changes.name, 'name') }),
-        ...(changes.email === undefined
-          ? {}
-          : { email: requireText(normaliseEmail(changes.email), 'email') }),
+        ...(nextEmail === undefined ? {} : { email: nextEmail }),
+        ...(emailChanging ? { emailVerifiedAt: null } : {}),
       }
 
+      // A passwordless account cannot prove itself this way. It sets a password
+      // through the reset flow first, which is the same bar this check is.
       if (
         changes.email !== undefined &&
         (changes.currentPassword === undefined ||
+          user.passwordHash === null ||
           !(await verifyPassword(user.passwordHash, changes.currentPassword)))
       ) {
         throw AppError.unauthorized('Current password is incorrect')
       }
 
       const previousEmail = user.email
+      const now = dependencies.now()
+      const verificationToken = emailChanging ? newToken() : undefined
 
       try {
         const updated = await dependencies.transaction(async ({ tx }) => {
-          const saved = await repository.updateUserProfile(tx, actor.userId, values, dependencies.now())
+          const saved = await repository.updateUserProfile(tx, actor.userId, values, now)
 
           if (saved === undefined) {
             throw AppError.unauthorized('This session no longer belongs to an account')
@@ -330,6 +515,15 @@ export function createAuthService(dependencies: AuthDependencies): AuthService {
             await repository.deleteOtherSessionsForUser(tx, actor.userId, actor.sessionId)
           }
 
+          if (verificationToken !== undefined) {
+            await repository.insertEmailVerificationToken(tx, {
+              id: dependencies.createId('emailVerificationToken'),
+              userId: actor.userId,
+              tokenHash: hashToken(verificationToken),
+              expiresAt: new Date(now.getTime() + EMAIL_VERIFICATION_TOKEN_LIFETIME_MS),
+            })
+          }
+
           return saved
         })
 
@@ -349,6 +543,13 @@ export function createAuthService(dependencies: AuthDependencies): AuthService {
           })
         }
 
+        // Sent after commit, same as signup: a rolled-back change never emails
+        // a token, and this token is only ever minted alongside a committed
+        // `emailVerifiedAt: null` write.
+        if (verificationToken !== undefined) {
+          await sendVerificationEmail(updated.email, verificationToken)
+        }
+
         return toAccountView(updated)
       } catch (error: unknown) {
         if (postgresErrorCode(error) === UNIQUE_VIOLATION) {
@@ -405,6 +606,7 @@ export function createAuthService(dependencies: AuthDependencies): AuthService {
         location: record.location,
         lastActiveAt: record.lastActiveAt,
         current: record.id === actor.sessionId,
+        signedInVia: record.signedInVia,
       }))
     },
 
@@ -418,6 +620,51 @@ export function createAuthService(dependencies: AuthDependencies): AuthService {
       }
     },
 
+    async listWorkspaces(actor: SessionActor): Promise<readonly AccountWorkspaceView[]> {
+      const rows = await repository.listWorkspacesForUser(dependencies.db, actor.userId)
+
+      return rows.map((row) => {
+        const role = parseMemberRole(row.role)
+
+        if (role === undefined) {
+          throw new Error(`workspace_members.role holds "${row.role}", which its check constraint forbids`)
+        }
+
+        return {
+          id: row.id,
+          name: row.name,
+          slug: row.slug,
+          timezone: row.timezone,
+          role,
+        }
+      })
+    },
+
+    async switchWorkspace(actor: SessionActor, workspaceId: string): Promise<MeView> {
+      const membership = await repository.findMembership(dependencies.db, workspaceId, actor.userId)
+
+      if (membership === undefined) {
+        throw AppError.notFound('Workspace not found')
+      }
+
+      const role = parseMemberRole(membership.role)
+
+      if (role === undefined) {
+        throw new Error(`workspace_members.role holds "${membership.role}", which its check constraint forbids`)
+      }
+
+      await repository.setActiveWorkspace(dependencies.db, actor.sessionId, workspaceId)
+      const user = await requireUser(actor.userId)
+
+      return {
+        userId: actor.userId,
+        sessionId: actor.sessionId,
+        workspaceId,
+        role,
+        emailVerified: user.emailVerifiedAt !== null,
+      }
+    },
+
     /**
      * Always resolves, whether or not the address is registered. Telling a
      * stranger which addresses have accounts is the whole attack.
@@ -494,7 +741,11 @@ export function createAuthService(dependencies: AuthDependencies): AuthService {
 
       const user = await repository.findUserById(dependencies.db, actor.userId)
 
-      if (user === undefined || !(await verifyPassword(user.passwordHash, currentPassword))) {
+      if (
+        user === undefined ||
+        user.passwordHash === null ||
+        !(await verifyPassword(user.passwordHash, currentPassword))
+      ) {
         throw AppError.unauthorized('Current password is incorrect')
       }
 

package/src/modules/auth/session.ts

@@ -11,6 +11,20 @@ import type { Context } from 'hono'
 
 export const SESSION_COOKIE = 'kelpie_session'
 
+/**
+ * The device and location shown on the Security page come from the request
+ * itself.
+ *
+ * Here rather than in `routes.ts` because the external sign-in handler needs
+ * the same description, and a session created by a module should look the same
+ * on that page as one created by the login form.
+ */
+export function describeClient(context: Context): { device?: string; location?: string } {
+  const userAgent = context.req.header('User-Agent')
+
+  return userAgent === undefined ? {} : { device: userAgent }
+}
+
 /** Thirty days, matching the session row's expiry. */
 const COOKIE_MAX_AGE_SECONDS = 30 * 24 * 60 * 60
 

package/src/modules/companies/repository.ts

@@ -58,6 +58,7 @@ function matchesTerm(term: string): SQL | undefined {
     ilike(companies.summary, pattern),
     ilike(companies.accountType, pattern),
     arrayContainsPattern(companies.tags, pattern),
+    sql`kelpie_addresses_search_text(${companies.addresses}) ilike ${pattern}`,
   )
 }
 

package/src/modules/companies/routes.ts

@@ -1,4 +1,4 @@
-import { customFieldsPatchShape } from '@kelpie/schemas'
+import { addressBody, companyAddressesSchema, customFieldsPatchShape } from '@kelpie/schemas'
 import type { Context, Hono } from 'hono'
 import { z } from 'zod'
 
@@ -25,8 +25,7 @@ const companyShape = {
   description: z.string(),
   stage: z.enum(COMPANY_STAGES),
   size_band: z.enum(SIZE_BANDS),
-  hq: z.string().nullable(),
-  website: z.string().nullable(),
+  addresses: companyAddressesSchema,
   account_type: z.enum(ACCOUNT_TYPES),
   icp_fit: z.enum(ICP_FITS),
   tech_stack: z.array(z.string().min(1)),
@@ -48,8 +47,7 @@ export const createBody = z.strictObject({
   description: companyShape.description.default(''),
   stage: companyShape.stage.default('startup'),
   size_band: companyShape.size_band.default('1-10'),
-  hq: companyShape.hq.default(null),
-  website: companyShape.website.default(null),
+  addresses: companyShape.addresses.default([]),
   account_type: companyShape.account_type.default('prospect'),
   icp_fit: companyShape.icp_fit.default('unknown'),
   tech_stack: companyShape.tech_stack.default([]),
@@ -73,8 +71,7 @@ export function toCreateInput(body: z.infer<typeof createBody>): CreateCompanyIn
     description: body.description,
     stage: body.stage,
     sizeBand: body.size_band,
-    hq: body.hq,
-    website: body.website,
+    addresses: body.addresses,
     accountType: body.account_type,
     icpFit: body.icp_fit,
     techStack: body.tech_stack,
@@ -93,8 +90,7 @@ export function toUpdateInput(body: z.infer<typeof updateBody>): UpdateCompanyIn
     ...(body.description === undefined ? {} : { description: body.description }),
     ...(body.stage === undefined ? {} : { stage: body.stage }),
     ...(body.size_band === undefined ? {} : { sizeBand: body.size_band }),
-    ...(body.hq === undefined ? {} : { hq: body.hq }),
-    ...(body.website === undefined ? {} : { website: body.website }),
+    ...(body.addresses === undefined ? {} : { addresses: body.addresses }),
     ...(body.account_type === undefined ? {} : { accountType: body.account_type }),
     ...(body.icp_fit === undefined ? {} : { icpFit: body.icp_fit }),
     ...(body.tech_stack === undefined ? {} : { techStack: body.tech_stack }),
@@ -114,8 +110,7 @@ export function companyResponse(company: CompanyView): Record<string, unknown> {
     description: company.description,
     stage: company.stage,
     size_band: company.sizeBand,
-    hq: company.hq,
-    website: company.website,
+    addresses: company.addresses.map(addressBody),
     account_type: company.accountType,
     icp_fit: company.icpFit,
     tech_stack: company.techStack,

package/src/modules/companies/schema.ts

@@ -1,5 +1,5 @@
 import { ACCOUNT_TYPES, COMPANY_STAGES, ICP_FITS, SIZE_BANDS } from '@kelpie/schemas'
-import type { CustomFieldValue } from '@kelpie/schemas'
+import type { CompanyAddress, CustomFieldValue } from '@kelpie/schemas'
 import { boolean, index, jsonb, pgTable, text, unique } from 'drizzle-orm/pg-core'
 
 import {
@@ -36,8 +36,7 @@ export const companies = pgTable(
     description: text('description').notNull().default(''),
     stage: text('stage').notNull(),
     sizeBand: text('size_band').notNull(),
-    hq: text('hq'),
-    website: text('website'),
+    addresses: jsonb('addresses').$type<readonly CompanyAddress[]>().notNull().default([]),
     accountType: text('account_type').notNull(),
     icpFit: text('icp_fit').notNull(),
     techStack: text('tech_stack').array().notNull().default([]),
@@ -62,6 +61,7 @@ export const companies = pgTable(
       { column: companies.summary, weight: 'B' },
       { column: companies.tags, weight: 'C', array: true },
       { column: companies.techStack, weight: 'C', array: true },
+      { column: companies.addresses, weight: 'C', addresses: true },
     ]),
   },
   (table) => [

package/src/modules/companies/service.ts

@@ -1,4 +1,4 @@
-import type { CustomFieldWireValue } from '@kelpie/schemas'
+import type { CompanyAddress, CustomFieldWireValue } from '@kelpie/schemas'
 
 import { changedKeys } from '../../lib/changes.ts'
 import { UNIQUE_VIOLATION, isReferenceViolation, postgresErrorCode } from '../../lib/database.ts'
@@ -49,8 +49,7 @@ const COMPANY_FIELD_LABELS: FieldLabels = {
   description: 'Description',
   stage: 'Stage',
   sizeBand: 'Size',
-  hq: 'Headquarters',
-  website: 'Website',
+  addresses: 'Addresses',
   accountType: 'Account type',
   icpFit: 'ICP fit',
   techStack: 'Tech stack',
@@ -69,8 +68,7 @@ export interface CreateCompanyInput {
   readonly description: string
   readonly stage: CompanyStage
   readonly sizeBand: SizeBand
-  readonly hq: string | null
-  readonly website: string | null
+  readonly addresses: readonly CompanyAddress[]
   readonly accountType: AccountType
   readonly icpFit: IcpFit
   readonly techStack: readonly string[]
@@ -102,7 +100,7 @@ function toView(record: CompanyRecord): CompanyView {
  * The stored form of what the caller sent. A domain arrives however someone
  * pasted it and is reduced to a host; blank becomes null, because the domain is
  * unique per workspace and a stored `''` would make the second company without a
- * website a 409.
+ * domain a 409.
  */
 function toStoredColumns(input: UpdateCompanyInput): Partial<repository.CompanyColumns> {
   return {
@@ -114,8 +112,7 @@ function toStoredColumns(input: UpdateCompanyInput): Partial<repository.CompanyC
     ...(input.description === undefined ? {} : { description: input.description }),
     ...(input.stage === undefined ? {} : { stage: input.stage }),
     ...(input.sizeBand === undefined ? {} : { sizeBand: input.sizeBand }),
-    ...(input.hq === undefined ? {} : { hq: input.hq }),
-    ...(input.website === undefined ? {} : { website: input.website }),
+    ...(input.addresses === undefined ? {} : { addresses: input.addresses }),
     ...(input.accountType === undefined ? {} : { accountType: input.accountType }),
     ...(input.icpFit === undefined ? {} : { icpFit: input.icpFit }),
     ...(input.techStack === undefined ? {} : { techStack: [...input.techStack] }),
@@ -180,8 +177,7 @@ export function createCompaniesService(dependencies: CompaniesDependencies): Com
             description: input.description,
             stage: input.stage,
             sizeBand: input.sizeBand,
-            hq: input.hq,
-            website: input.website,
+            addresses: input.addresses,
             accountType: input.accountType,
             icpFit: input.icpFit,
             techStack: [...input.techStack],

package/src/modules/core.ts

@@ -13,6 +13,7 @@ import { createDealsModule } from './deals/index.ts'
 import { createDecisionsModule } from './decisions/index.ts'
 import { createEmailDomainLinkerModule } from './email-domain-linker/index.ts'
 import { createEnquiriesModule } from './enquiries/index.ts'
+import { createEventsModule } from './events/index.ts'
 import { createFormsModule } from './forms/index.ts'
 import { createHandbookModule } from './handbook/index.ts'
 import { createHiringModule } from './hiring/index.ts'
@@ -68,6 +69,7 @@ export const coreModules: readonly KelpieModule[] = [
   createPartnershipsModule(coreMigrationsDirectory),
   createRaisesModule(coreMigrationsDirectory),
   createHiringModule(coreMigrationsDirectory),
+  createEventsModule(coreMigrationsDirectory),
   createPlansModule(coreMigrationsDirectory),
   createDecisionsModule(coreMigrationsDirectory),
   createListsModule(coreMigrationsDirectory),

package/src/modules/custom-fields/repository.ts

@@ -8,6 +8,7 @@ import type { Queryable } from '../../runtime/transaction.ts'
 import { companies } from '../companies/schema.ts'
 import { deals } from '../deals/schema.ts'
 import { enquiries } from '../enquiries/schema.ts'
+import { events } from '../events/schema.ts'
 import { opportunities } from '../opportunities/schema.ts'
 import { partnerships } from '../partnerships/schema.ts'
 import { people } from '../people/schema.ts'
@@ -178,6 +179,7 @@ const TABLES = {
   partnership: partnerships,
   raise: raises,
   enquiry: enquiries,
+  event: events,
 } as const
 
 /**

package/src/modules/dashboard/index.ts

@@ -27,6 +27,7 @@ export function createDashboardModule(): KelpieModule {
       'raises',
       'partnerships',
       'plans',
+      'events',
       'decisions',
       'notes',
       'activities',