@kelpie/server 0.12.0 → 0.14.0

package/migrations/0044_events.sql

@@ -0,0 +1,79 @@
+CREATE TABLE "events" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"name" text NOT NULL,
+	"kind" text DEFAULT '' NOT NULL,
+	"starts_at" timestamp with time zone NOT NULL,
+	"ends_at" timestamp with time zone NOT NULL,
+	"timezone" text NOT NULL,
+	"location" text DEFAULT '' NOT NULL,
+	"meeting_url" text,
+	"format" text NOT NULL,
+	"details" text DEFAULT '' NOT NULL,
+	"status" text NOT NULL,
+	"owner_id" text,
+	"summary" text DEFAULT '' NOT NULL,
+	"tags" text[] DEFAULT '{}' NOT NULL,
+	"custom_fields" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"search_vector" "tsvector" GENERATED ALWAYS AS (setweight(to_tsvector('english', regexp_replace(coalesce("events"."name"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'A') || setweight(to_tsvector('english', regexp_replace(coalesce("events"."details"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'B') || setweight(to_tsvector('english', regexp_replace(coalesce("events"."summary"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'B') || setweight(to_tsvector('english', regexp_replace(coalesce("events"."kind"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'C') || setweight(to_tsvector('english', regexp_replace(coalesce("events"."location"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'C') || setweight(to_tsvector('english', regexp_replace(coalesce(kelpie_text_array_to_string("events"."tags"), ''), '[^[:alnum:]]+', ' ', 'g')), 'C')) STORED
+);
+--> statement-breakpoint
+CREATE TABLE "attendances" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"event_id" text NOT NULL,
+	"person_id" text NOT NULL,
+	"status" text NOT NULL,
+	"source" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "event_associations" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"event_id" text NOT NULL,
+	"target_type" text NOT NULL,
+	"target_id" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "notes" DROP CONSTRAINT "notes_target_type_check";--> statement-breakpoint
+ALTER TABLE "activities" DROP CONSTRAINT "activities_target_type_check";--> statement-breakpoint
+ALTER TABLE "decisions" DROP CONSTRAINT "decisions_target_type_check";--> statement-breakpoint
+ALTER TABLE "lists" DROP CONSTRAINT "lists_target_type_check";--> statement-breakpoint
+ALTER TABLE "list_members" DROP CONSTRAINT "list_members_target_type_check";--> statement-breakpoint
+ALTER TABLE "plan_items" DROP CONSTRAINT "plan_items_target_type_check";--> statement-breakpoint
+ALTER TABLE "form_attach_targets" DROP CONSTRAINT "form_attach_targets_target_type_check";--> statement-breakpoint
+ALTER TABLE "custom_field_definitions" DROP CONSTRAINT "custom_field_definitions_object_type_check";--> statement-breakpoint
+ALTER TABLE "events" ADD CONSTRAINT "events_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "events" ADD CONSTRAINT "events_owner_id_workspace_members_id_fk" FOREIGN KEY ("owner_id") REFERENCES "public"."workspace_members"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "events" ADD CONSTRAINT "events_format_check" CHECK ("events"."format" in ('in_person', 'virtual', 'hybrid'));--> statement-breakpoint
+ALTER TABLE "events" ADD CONSTRAINT "events_status_check" CHECK ("events"."status" in ('draft', 'scheduled', 'cancelled'));--> statement-breakpoint
+CREATE INDEX "events_workspace_idx" ON "events" USING btree ("workspace_id");--> statement-breakpoint
+CREATE INDEX "events_starts_idx" ON "events" USING btree ("workspace_id","starts_at");--> statement-breakpoint
+CREATE INDEX "events_search_idx" ON "events" USING gin ("search_vector");--> statement-breakpoint
+ALTER TABLE "attendances" ADD CONSTRAINT "attendances_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "attendances" ADD CONSTRAINT "attendances_event_id_events_id_fk" FOREIGN KEY ("event_id") REFERENCES "public"."events"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "attendances" ADD CONSTRAINT "attendances_person_id_people_id_fk" FOREIGN KEY ("person_id") REFERENCES "public"."people"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "attendances" ADD CONSTRAINT "attendances_event_person_key" UNIQUE ("event_id","person_id");--> statement-breakpoint
+ALTER TABLE "attendances" ADD CONSTRAINT "attendances_status_check" CHECK ("attendances"."status" in ('registered', 'attended', 'no_show', 'cancelled'));--> statement-breakpoint
+ALTER TABLE "attendances" ADD CONSTRAINT "attendances_source_check" CHECK ("attendances"."source" in ('manual', 'form'));--> statement-breakpoint
+CREATE INDEX "attendances_workspace_idx" ON "attendances" USING btree ("workspace_id");--> statement-breakpoint
+CREATE INDEX "attendances_event_idx" ON "attendances" USING btree ("event_id");--> statement-breakpoint
+CREATE INDEX "attendances_person_idx" ON "attendances" USING btree ("person_id");--> statement-breakpoint
+ALTER TABLE "event_associations" ADD CONSTRAINT "event_associations_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "event_associations" ADD CONSTRAINT "event_associations_event_id_events_id_fk" FOREIGN KEY ("event_id") REFERENCES "public"."events"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "event_associations" ADD CONSTRAINT "event_associations_event_target_key" UNIQUE ("event_id","target_type","target_id");--> statement-breakpoint
+ALTER TABLE "event_associations" ADD CONSTRAINT "event_associations_target_type_check" CHECK ("event_associations"."target_type" in ('person', 'company', 'deal', 'opportunity', 'partnership', 'raise', 'enquiry', 'role', 'candidate'));--> statement-breakpoint
+CREATE INDEX "event_associations_target_idx" ON "event_associations" USING btree ("workspace_id","target_type","target_id");--> statement-breakpoint
+ALTER TABLE "notes" ADD CONSTRAINT "notes_target_type_check" CHECK ("notes"."target_type" in ('person', 'company', 'deal', 'opportunity', 'partnership', 'raise', 'enquiry', 'candidate', 'event', 'attendance'));--> statement-breakpoint
+ALTER TABLE "activities" ADD CONSTRAINT "activities_target_type_check" CHECK ("activities"."target_type" in ('person', 'company', 'deal', 'opportunity', 'partnership', 'raise', 'enquiry', 'candidate', 'event', 'attendance'));--> statement-breakpoint
+ALTER TABLE "decisions" ADD CONSTRAINT "decisions_target_type_check" CHECK ("decisions"."target_type" in ('person', 'company', 'deal', 'opportunity', 'partnership', 'raise', 'enquiry', 'candidate', 'event', 'attendance'));--> statement-breakpoint
+ALTER TABLE "lists" ADD CONSTRAINT "lists_target_type_check" CHECK ("lists"."target_type" in ('person', 'company', 'deal', 'opportunity', 'partnership', 'raise', 'enquiry', 'candidate', 'event', 'attendance'));--> statement-breakpoint
+ALTER TABLE "list_members" ADD CONSTRAINT "list_members_target_type_check" CHECK ("list_members"."target_type" in ('person', 'company', 'deal', 'opportunity', 'partnership', 'raise', 'enquiry', 'candidate', 'event', 'attendance'));--> statement-breakpoint
+ALTER TABLE "plan_items" ADD CONSTRAINT "plan_items_target_type_check" CHECK ("plan_items"."target_type" in ('enquiry', 'deal', 'opportunity', 'raise', 'partnership', 'event'));--> statement-breakpoint
+ALTER TABLE "form_attach_targets" ADD CONSTRAINT "form_attach_targets_target_type_check" CHECK ("form_attach_targets"."target_type" in ('enquiry', 'deal', 'opportunity', 'raise', 'partnership', 'event'));--> statement-breakpoint
+ALTER TABLE "custom_field_definitions" ADD CONSTRAINT "custom_field_definitions_object_type_check" CHECK ("custom_field_definitions"."object_type" in ('person', 'company', 'deal', 'opportunity', 'partnership', 'raise', 'enquiry', 'event'));

package/migrations/0045_addresses.sql

@@ -0,0 +1,66 @@
+-- Postal addresses on people and companies. jsonb, like phones and social
+-- profiles: nothing queries into the parts, and the route layer is what
+-- validates the shape. `kelpie_addresses_search_text` is hand-added because
+-- Drizzle Kit does not manage functions, the same reason `kelpie_text_array_to_string`
+-- lives in 0015. jsonb_array_elements is STABLE; the wrapper asserts IMMUTABLE
+-- so a generated search_vector can read it.
+--
+-- Stored keys match the TypeScript shape (`postalCode`), not the wire
+-- (`postal_code`). The route maps at the boundary the same way it does for
+-- every other resource.
+CREATE OR REPLACE FUNCTION kelpie_addresses_search_text(jsonb) RETURNS text
+  LANGUAGE sql IMMUTABLE PARALLEL SAFE STRICT
+  AS $$
+    SELECT coalesce((
+      SELECT string_agg(trim(both ' ' from concat_ws(' ',
+        nullif(elem->>'line1', ''),
+        nullif(elem->>'line2', ''),
+        nullif(elem->>'city', ''),
+        nullif(elem->>'region', ''),
+        nullif(elem->>'postalCode', ''),
+        nullif(elem->>'country', '')
+      )), ' ')
+      FROM jsonb_array_elements($1) AS t(elem)
+    ), '')
+  $$;
+--> statement-breakpoint
+ALTER TABLE "people" ADD COLUMN "addresses" jsonb DEFAULT '[]'::jsonb NOT NULL;--> statement-breakpoint
+ALTER TABLE "companies" ADD COLUMN "addresses" jsonb DEFAULT '[]'::jsonb NOT NULL;--> statement-breakpoint
+UPDATE "people"
+SET "addresses" = jsonb_build_array(
+  jsonb_build_object(
+    'kind', 'home',
+    'line1', null,
+    'line2', null,
+    'city', "location",
+    'region', null,
+    'postalCode', null,
+    'country', null,
+    'primary', true
+  )
+)
+WHERE "location" IS NOT NULL AND btrim("location") <> '';--> statement-breakpoint
+UPDATE "companies"
+SET "addresses" = jsonb_build_array(
+  jsonb_build_object(
+    'kind', 'hq',
+    'line1', null,
+    'line2', null,
+    'city', "hq",
+    'region', null,
+    'postalCode', null,
+    'country', null,
+    'primary', true
+  )
+)
+WHERE "hq" IS NOT NULL AND btrim("hq") <> '';--> statement-breakpoint
+UPDATE "form_fields" SET "map_to" = 'person.address.city' WHERE "map_to" = 'person.location';--> statement-breakpoint
+UPDATE "form_fields" SET "map_to" = 'company.address.city' WHERE "map_to" = 'company.hq';--> statement-breakpoint
+ALTER TABLE "people" DROP COLUMN "location";--> statement-breakpoint
+ALTER TABLE "companies" DROP COLUMN "hq";--> statement-breakpoint
+ALTER TABLE "people" DROP COLUMN "search_vector";--> statement-breakpoint
+ALTER TABLE "people" ADD COLUMN "search_vector" "tsvector" GENERATED ALWAYS AS (setweight(to_tsvector('english', regexp_replace(coalesce("people"."name"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'A') || setweight(to_tsvector('english', regexp_replace(coalesce("people"."first_name"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'A') || setweight(to_tsvector('english', regexp_replace(coalesce("people"."last_name"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'A') || setweight(to_tsvector('english', regexp_replace(coalesce("people"."email"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'B') || setweight(to_tsvector('english', regexp_replace(coalesce("people"."summary"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'B') || setweight(to_tsvector('english', regexp_replace(coalesce(kelpie_text_array_to_string("people"."tags"), ''), '[^[:alnum:]]+', ' ', 'g')), 'C') || setweight(to_tsvector('english', regexp_replace(coalesce(kelpie_addresses_search_text("people"."addresses"), ''), '[^[:alnum:]]+', ' ', 'g')), 'C')) STORED;--> statement-breakpoint
+CREATE INDEX "people_search_idx" ON "people" USING gin ("search_vector");--> statement-breakpoint
+ALTER TABLE "companies" DROP COLUMN "search_vector";--> statement-breakpoint
+ALTER TABLE "companies" ADD COLUMN "search_vector" "tsvector" GENERATED ALWAYS AS (setweight(to_tsvector('english', regexp_replace(coalesce("companies"."name"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'A') || setweight(to_tsvector('english', regexp_replace(coalesce("companies"."domain"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'B') || setweight(to_tsvector('english', regexp_replace(coalesce("companies"."industry"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'B') || setweight(to_tsvector('english', regexp_replace(coalesce("companies"."description"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'B') || setweight(to_tsvector('english', regexp_replace(coalesce("companies"."summary"::text, ''), '[^[:alnum:]]+', ' ', 'g')), 'B') || setweight(to_tsvector('english', regexp_replace(coalesce(kelpie_text_array_to_string("companies"."tags"), ''), '[^[:alnum:]]+', ' ', 'g')), 'C') || setweight(to_tsvector('english', regexp_replace(coalesce(kelpie_text_array_to_string("companies"."tech_stack"), ''), '[^[:alnum:]]+', ' ', 'g')), 'C') || setweight(to_tsvector('english', regexp_replace(coalesce(kelpie_addresses_search_text("companies"."addresses"), ''), '[^[:alnum:]]+', ' ', 'g')), 'C')) STORED;--> statement-breakpoint
+CREATE INDEX "companies_search_idx" ON "companies" USING gin ("search_vector");

package/migrations/0046_drop_company_website.sql

@@ -0,0 +1,66 @@
+-- Domain is the company homepage. `website` was a second URL that almost
+-- always repeated `https://` plus the same host. Fill a blank domain from
+-- that URL, then drop the column. Visit on the heading opens https://{domain}.
+UPDATE "companies" AS c
+SET "domain" = v.host
+FROM (
+  SELECT DISTINCT ON (workspace_id, host)
+    id,
+    workspace_id,
+    host
+  FROM (
+    SELECT
+      id,
+      workspace_id,
+      NULLIF(
+        regexp_replace(
+          regexp_replace(
+            regexp_replace(lower(trim(website)), '^[a-z][a-z0-9+.-]*://', ''),
+            '/.*$',
+            ''
+          ),
+          '\.$',
+          ''
+        ),
+        ''
+      ) AS host
+    FROM "companies"
+    WHERE "domain" IS NULL AND "website" IS NOT NULL
+  ) AS sourced
+  WHERE host IS NOT NULL
+  ORDER BY workspace_id, host, id
+) AS v
+WHERE c.id = v.id
+  AND NOT EXISTS (
+    SELECT 1
+    FROM "companies" AS other
+    WHERE other.workspace_id = c.workspace_id
+      AND other.domain = v.host
+      AND other.id <> c.id
+  );
+--> statement-breakpoint
+ALTER TABLE "companies" DROP COLUMN "website";
+--> statement-breakpoint
+UPDATE "form_fields"
+SET "map_to" = 'company.domain'
+WHERE "map_to" = 'company.website';
+--> statement-breakpoint
+UPDATE "import_jobs"
+SET "column_map" = ("column_map" - 'website') || jsonb_build_object('domain', "column_map"->>'website')
+WHERE jsonb_typeof("column_map") = 'object'
+  AND "column_map" ? 'website'
+  AND "column_map"->>'website' IS NOT NULL
+  AND NOT (
+    "column_map" ? 'domain'
+    AND "column_map"->>'domain' IS NOT NULL
+  );
+--> statement-breakpoint
+UPDATE "import_jobs"
+SET "column_map" = "column_map" - 'website'
+WHERE jsonb_typeof("column_map") = 'object'
+  AND "column_map" ? 'website';
+--> statement-breakpoint
+UPDATE "import_jobs"
+SET "match_key" = 'domain'
+WHERE "object" = 'companies'
+  AND "match_key" = 'website';

package/migrations/meta/_journal.json

@@ -309,6 +309,27 @@
       "when": 1788700000000,
       "tag": "0043_external_sign_in",
       "breakpoints": true
+    },
+    {
+      "idx": 44,
+      "version": "7",
+      "when": 1788800000000,
+      "tag": "0044_events",
+      "breakpoints": true
+    },
+    {
+      "idx": 45,
+      "version": "7",
+      "when": 1788900000000,
+      "tag": "0045_addresses",
+      "breakpoints": true
+    },
+    {
+      "idx": 46,
+      "version": "7",
+      "when": 1789000000000,
+      "tag": "0046_drop_company_website",
+      "breakpoints": true
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kelpie/server",
-  "version": "0.12.0",
+  "version": "0.14.0",
   "description": "The Kelpie service as a library: module runtime, core CRM modules, REST API, MCP surface, and the shared migration pipeline.",
   "keywords": [
     "kelpie",
@@ -52,13 +52,14 @@
   },
   "dependencies": {
     "@hono/node-server": "^2.0.12",
-    "@kelpie/schemas": "^0.12.0",
+    "@kelpie/schemas": "^0.14.0",
     "@node-rs/argon2": "^2.0.2",
     "drizzle-orm": "^0.45.2",
     "emittery": "^2.0.0",
-    "hono": "^4.12.32",
+    "hono": "^4.13.7",
     "mailgen": "^2.0.36",
     "nodemailer": "^9.0.5",
+    "pg-boss": "^12.31.0",
     "postgres": "^3.4.9",
     "ulid": "^3.0.2",
     "winston": "^3.19.0",

package/src/app.ts

@@ -2,6 +2,8 @@ import { Hono } from 'hono'
 import type { Context } from 'hono'
 import { cors } from 'hono/cors'
 
+import type { PublicRegion } from '@kelpie/schemas'
+
 import type { RuntimeMode } from './lib/config.ts'
 import type { DatabaseProbe } from './lib/database.ts'
 import { AppError, internalErrorBody, toErrorBody } from './lib/errors.ts'
@@ -65,6 +67,18 @@ export interface AppDependencies {
    * name itself".
    */
   readonly siteName?: string | undefined
+  /**
+   * Reported through `GET /v1/public/config` so the sign-up page can show a
+   * "signups are closed" message instead of the form. Defaults to `true`
+   * (open), matching the config layer's own default.
+   */
+  readonly signupsEnabled?: boolean
+  /**
+   * Reported through `GET /v1/public/config` so signed-out pages can draw a
+   * region switcher. Defaults to `[]` (no switcher), matching a self-hosted
+   * install that never declared regions.
+   */
+  readonly regions?: readonly PublicRegion[]
 }
 
 /** Per-request values the middleware chain sets and handlers read. */
@@ -185,9 +199,19 @@ export function createApp(dependencies: AppDependencies): Hono<AppBindings> {
   // exists to be visible; nothing here is sensitive.
   const runtimeMode: RuntimeMode = dependencies.runtimeMode ?? 'production'
   const siteName = dependencies.siteName ?? null
+  const signupsEnabled = dependencies.signupsEnabled ?? true
+  const regions = dependencies.regions ?? []
 
   app.get(`${PUBLIC_ROUTE_PREFIX}/config`, (context) =>
-    context.json({ runtime_mode: runtimeMode, site_name: siteName }, 200),
+    context.json(
+      {
+        runtime_mode: runtimeMode,
+        site_name: siteName,
+        signups_enabled: signupsEnabled,
+        regions,
+      },
+      200,
+    ),
   )
 
   for (const { router } of dependencies.contributions.routers) {

package/src/boot.ts

@@ -11,6 +11,8 @@ import { readModuleConfigFile } from './lib/moduleConfig.ts'
 import { resolveActorFrom } from './modules/auth/credentials.ts'
 import type { CredentialDependencies } from './modules/auth/credentials.ts'
 import { createEventBus } from './runtime/events.ts'
+import { createJobsRuntime } from './runtime/jobs.ts'
+import type { JobsRuntime } from './runtime/jobs.ts'
 import { registerModules } from './runtime/registry.ts'
 import type { ModuleContributions } from './runtime/registry.ts'
 import { createTransactionScope } from './runtime/transaction.ts'
@@ -34,6 +36,14 @@ export interface AssemblyBoot {
   readonly createId: IdFactory
   readonly credentials: CredentialDependencies
   readonly contributions: ModuleContributions
+  /**
+   * The pg-boss-backed job runtime the modules registered against. The
+   * entry point owns its lifecycle: call `jobs.migrate()` alongside
+   * `runMigrations`, `jobs.start()` before serving, and — on the worker —
+   * `jobs.startWorking()` right after. `jobs.stop()` drains before
+   * `database.close()`.
+   */
+  readonly jobs: JobsRuntime
 }
 
 /**
@@ -60,6 +70,7 @@ export async function bootAssembly(
   })
   const database = connectDatabase(config.databaseUrl, logger)
   const events = createEventBus(logger)
+  const jobs = createJobsRuntime({ connectionString: config.databaseUrl, logger })
   const createId = createIdFactory()
   const credentials: CredentialDependencies = { db: database.db, now: () => new Date() }
   const moduleConfig = readModuleConfigFile(config.moduleConfigPath)
@@ -69,14 +80,22 @@ export async function bootAssembly(
     logger,
     events,
     moduleConfig,
+    jobs: jobs.registry,
     resolveActor: (context) => resolveActorFrom(credentials, context),
     services: {
       db: database.db,
-      transaction: createTransactionScope({ db: database.db, bus: events, logger, createId }),
+      transaction: createTransactionScope({
+        db: database.db,
+        bus: events,
+        logger,
+        createId,
+        enqueueOnTx: jobs.enqueueOnTx,
+      }),
       createId,
       now: () => new Date(),
       appBaseUrl: config.appBaseUrl,
       secretEncryption: config.secretEncryption,
+      signupsEnabled: config.signups === 'open',
     },
     // `provider` picks a named sender from the runtime's registry. `'log'` is
     // built in; `'smtp'` is registered by the built-in `smtp-email` core
@@ -85,5 +104,5 @@ export async function bootAssembly(
     email: { provider: config.email.EMAIL_PROVIDER, from: config.email.EMAIL_FROM },
   })
 
-  return { config, logger, database, createId, credentials, contributions }
+  return { config, logger, database, createId, credentials, contributions, jobs }
 }

package/src/index.ts

@@ -9,6 +9,22 @@ export type { AppDependencies, AppBindings } from './app.ts'
 export { bootAssembly } from './boot.ts'
 export type { AssemblyBoot } from './boot.ts'
 
+export { startWorker } from './worker.ts'
+
+export { createJobsRuntime } from './runtime/jobs.ts'
+export type { JobsRuntime, JobsRuntimeOptions } from './runtime/jobs.ts'
+export { deadLetterQueueName } from './lib/jobs.ts'
+export type {
+  EnqueueOptions,
+  JobContext,
+  JobDefaults,
+  JobDefinition,
+  JobHandle,
+  JobHandler,
+  JobRegistry,
+  TransactionJobs,
+} from './lib/jobs.ts'
+
 export { WebBundleError, serveWebBundle } from './webBundle.ts'
 export type { WebBundleOptions } from './webBundle.ts'
 
@@ -143,6 +159,7 @@ export type { ModuleEventCatalog } from './runtime/module.ts'
 export { createTransactionScope } from './runtime/transaction.ts'
 export type {
   BufferedEvents,
+  EnqueueOnTransaction,
   Transaction,
   TransactionContext,
   TransactionOptions,

package/src/lib/apiKeyScopes.ts

@@ -58,6 +58,10 @@ const ROUTE_SCOPE_RULES: readonly RouteScopeRule[] = [
   { methods: ['POST', 'PATCH', 'DELETE'], pattern: /^\/v1\/roles(?:\/[^/]+)?$/u, scope: 'roles:write' },
   { methods: ['GET'], pattern: /^\/v1\/candidates(?:\/[^/]+)?$/u, scope: 'candidates:read' },
   { methods: ['POST', 'PATCH', 'DELETE'], pattern: /^\/v1\/candidates(?:\/[^/]+)?$/u, scope: 'candidates:write' },
+  { methods: ['GET'], pattern: /^\/v1\/(?:events(?:\/[^/]+(?:\/attendances)?)?|event-associations)$/u, scope: 'events:read' },
+  { methods: ['POST', 'PATCH', 'DELETE'], pattern: /^\/v1\/(?:events(?:\/[^/]+(?:\/attendances)?)?|event-associations)$/u, scope: 'events:write' },
+  { methods: ['GET'], pattern: /^\/v1\/attendances(?:\/[^/]+)?$/u, scope: 'attendances:read' },
+  { methods: ['POST', 'PATCH', 'DELETE'], pattern: /^\/v1\/attendances(?:\/[^/]+)?$/u, scope: 'attendances:write' },
   { methods: ['GET'], pattern: /^\/v1\/decisions(?:\/[^/]+)?$/u, scope: 'decisions:read' },
   { methods: ['POST', 'PATCH', 'DELETE'], pattern: /^\/v1\/decisions(?:\/[^/]+)?$/u, scope: 'decisions:write' },
   { methods: ['GET'], pattern: /^\/v1\/plan_items(?:\/[^/]+)?$/u, scope: 'plan_items:read' },
@@ -100,6 +104,7 @@ const ROUTE_SCOPE_RULES: readonly RouteScopeRule[] = [
   { methods: ['GET'], pattern: /^\/v1\/workspaces\/[^/]+\/modules(?:\/[^/]+)?$/u, scope: 'modules:read' },
   { methods: ['PATCH'], pattern: /^\/v1\/workspaces\/[^/]+\/modules(?:\/[^/]+)?$/u, scope: 'modules:write' },
   { methods: ['POST'], pattern: /^\/v1\/workspaces\/[^/]+\/sample-data$/u, scope: 'sample_data:write' },
+  { methods: ['POST'], pattern: /^\/v1\/workspaces\/[^/]+\/handbook\/seed$/u, scope: 'handbook:write' },
   { methods: ['POST'], pattern: /^\/v1\/workspaces\/[^/]+\/relink-email-domains$/u, scope: 'workspace:write' },
   { methods: ['GET'], pattern: /^\/v1\/mcp\/tools$/u, scope: 'search:read' },
 ]
@@ -158,6 +163,7 @@ const MCP_RESOURCE_ALIASES: Readonly<Record<string, string>> = {
   consent_purposes: 'consent_purposes',
   form_submissions: 'forms',
   list_memberships: 'lists',
+  event_associations: 'events',
   agent_tasks: 'agent_tasks',
   agent_runs: 'agent_runs',
   import_jobs: 'import_export',

package/src/lib/columns.ts

@@ -60,6 +60,12 @@ export interface SearchVectorPart {
    * a generated column built on it.
    */
   readonly array?: boolean
+  /**
+   * True for an `addresses` jsonb column. Flattened by
+   * `kelpie_addresses_search_text`, a wrapper that migration `0045` adds so the
+   * generated vector reads city and postal code without the kind keys.
+   */
+  readonly addresses?: boolean
 }
 
 /**
@@ -78,9 +84,12 @@ export interface SearchVectorPart {
 const SPLIT_ON_PUNCTUATION = sql.raw("'[^[:alnum:]]+', ' ', 'g'")
 
 function searchVectorPart(part: SearchVectorPart): SQL {
-  const raw = part.array === true
-    ? sql`coalesce(kelpie_text_array_to_string(${part.column}), '')`
-    : sql`coalesce(${part.column}::text, '')`
+  const raw =
+    part.addresses === true
+      ? sql`coalesce(kelpie_addresses_search_text(${part.column}), '')`
+      : part.array === true
+        ? sql`coalesce(kelpie_text_array_to_string(${part.column}), '')`
+        : sql`coalesce(${part.column}::text, '')`
   const source = sql`regexp_replace(${raw}, ${SPLIT_ON_PUNCTUATION})`
 
   return sql`setweight(to_tsvector(${sql.raw(`'${SEARCH_CONFIGURATION}'`)}, ${source}), ${sql.raw(`'${part.weight}'`)})`

package/src/lib/config.ts

@@ -1,3 +1,4 @@
+import type { PublicRegion } from '@kelpie/schemas'
 import { z } from 'zod'
 
 import { emailConfigSchema } from './email.ts'
@@ -24,6 +25,9 @@ export type RuntimeMode = 'development' | 'test' | 'production'
 
 export type LogLevel = 'debug' | 'info' | 'warn' | 'error'
 
+/** Whether `POST /v1/auth/signup` and external-sign-in provisioning accept a brand-new account. */
+export type SignupsMode = 'open' | 'closed'
+
 /**
  * Everything the logger needs to boot: the minimum severity to emit, and the
  * ordered list of destinations each line is written to. Stdout is one such
@@ -96,6 +100,20 @@ export interface KelpieConfig {
    * it, so both webhooks and agent-tasks receive it through `services`.
    */
   readonly secretEncryption: SecretEncryptionConfig | undefined
+  /**
+   * Whether the instance accepts a brand-new account, through password signup
+   * or external-sign-in provisioning. Defaults to `'open'`, so a self-hoster
+   * who never sets `SIGNUPS` sees no change in behaviour. Joining an existing
+   * workspace via invite, and workspace creation by an already-verified
+   * account, are unaffected either way.
+   */
+  readonly signups: SignupsMode
+  /**
+   * Origins a multi-region assembly advertises on signed-out pages. Empty
+   * (the default) hides the switcher. Two or more draws it. Exposed through
+   * `GET /v1/public/config`.
+   */
+  readonly regions: readonly PublicRegion[]
 }
 
 /** Thrown at boot when the environment cannot produce a valid configuration. */
@@ -129,6 +147,7 @@ const environmentSchema = z.object({
   KELPIE_SITE_NAME: z.string().min(1).optional(),
   WEB_BUNDLE_DIR: z.string().min(1).optional(),
   TRUSTED_PROXY_HOP_COUNT: z.coerce.number().int().nonnegative().default(0),
+  SIGNUPS: z.enum(['open', 'closed']).default('open'),
   ...rateLimitConfigSchema.shape,
 })
 
@@ -171,5 +190,7 @@ export function loadConfig(environment: Environment): KelpieConfig {
     env: environment,
     appBaseUrl: undefined,
     secretEncryption: undefined,
+    signups: environmentResult.data.SIGNUPS,
+    regions: [],
   }
 }

package/src/lib/egress.ts

@@ -74,17 +74,21 @@ function isPrivateIpv4(ip: string): boolean {
 
 /** True for an IPv6 address in a loopback, unspecified, link-local, or unique-local range. */
 function isPrivateIpv6(ip: string): boolean {
-  const lower = ip.toLowerCase()
+  // Normalize both DNS results and literals. URL parsing compresses IPv6 and
+  // rewrites a dotted IPv4 suffix as two hexadecimal groups.
+  const lower = new URL(`http://[${ip}]/`).hostname.slice(1, -1)
 
   if (lower === '::1' || lower === '::') {
     return true
   }
 
-  const mapped = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/u.exec(lower)
+  const mapped = /^::ffff:([\da-f]{1,4}):([\da-f]{1,4})$/u.exec(lower)
 
-  if (mapped?.[1] !== undefined) {
+  if (mapped?.[1] !== undefined && mapped[2] !== undefined) {
     // An IPv4 address written in IPv6 form resolves by its IPv4 rules.
-    return isPrivateIpv4(mapped[1])
+    const high = Number.parseInt(mapped[1], 16)
+    const low = Number.parseInt(mapped[2], 16)
+    return isPrivateIpv4([high >>> 8, high & 255, low >>> 8, low & 255].join('.'))
   }
 
   const firstHextet = Number.parseInt(lower.split(':')[0] || '0', 16)

package/src/lib/errors.ts

@@ -89,25 +89,32 @@ export class AppError extends Error {
  * A reason rather than a message, so a provider module can branch on it (to
  * redirect somewhere useful, say) without matching on English text.
  */
-export type ExternalSignInRefusal = 'email_unverified' | 'unknown_identity'
+export type ExternalSignInRefusal = 'email_unverified' | 'unknown_identity' | 'signups_closed'
+
+const EXTERNAL_SIGN_IN_CODE: Record<ExternalSignInRefusal, ErrorCode> = {
+  email_unverified: 'unauthorized',
+  unknown_identity: 'forbidden',
+  signups_closed: 'forbidden',
+}
+
+const EXTERNAL_SIGN_IN_MESSAGE: Record<ExternalSignInRefusal, string> = {
+  email_unverified: 'The identity provider did not verify this email address',
+  unknown_identity: 'No account exists for this identity',
+  signups_closed: 'Signups are closed on this instance',
+}
 
 /**
  * An external sign-in core would not complete.
  *
  * An `AppError`, so an uncaught one still renders as the `api.md` body. No new
- * `ErrorCode`: refusing an unverified identity is an ordinary `401`, and
- * refusing to provision is an ordinary `403`.
+ * `ErrorCode`: refusing an unverified identity is an ordinary `401`, and both
+ * refusing to provision and signups being closed are an ordinary `403`.
  */
 export class ExternalSignInError extends AppError {
   readonly reason: ExternalSignInRefusal
 
   constructor(reason: ExternalSignInRefusal) {
-    super(
-      reason === 'email_unverified' ? 'unauthorized' : 'forbidden',
-      reason === 'email_unverified'
-        ? 'The identity provider did not verify this email address'
-        : 'No account exists for this identity',
-    )
+    super(EXTERNAL_SIGN_IN_CODE[reason], EXTERNAL_SIGN_IN_MESSAGE[reason])
     this.name = 'ExternalSignInError'
     this.reason = reason
   }

package/src/lib/ids.ts

@@ -71,6 +71,17 @@ export const idPrefixes = {
    * key. Not persisted by core.
    */
   event: 'ev',
+  /**
+   * A dated CRM gathering. The public prefix is `event_`; the factory key is
+   * `crmEvent` because `event` already stamps domain-event envelopes as `ev_`.
+   */
+  crmEvent: 'event',
+  attendance: 'atnd',
+  /**
+   * Never returns over the wire: associations nest on the Event and on
+   * `GET /v1/event-associations`. Same reason as `personLink`.
+   */
+  eventAssociation: 'elink',
 } as const
 
 export type ObjectKind = keyof typeof idPrefixes