@kelpie/server 0.7.0 → 0.9.0

package/dist/modules/consent-purposes/schema.d.ts

@@ -0,0 +1,175 @@
+/**
+ * Workspace-defined consent purposes.
+ *
+ * Every capture site — a form's consent field, a list, an import job, the
+ * manual override on a Person — names one of these. `slug` is set at create
+ * and immutable after: a rename would strand every form/list/import that
+ * names it and every `person_consents` row that carries it (identified by
+ * the purpose id). The strict PATCH body naturally refuses either as a `422`.
+ *
+ * `default_status` is the workspace default: a person without an explicit
+ * `person_consents` row for this purpose inherits it.
+ */
+export { CONSENT_PURPOSE_STATUSES } from '@kelpie/schemas';
+export type { ConsentPurposeStatus } from '@kelpie/schemas';
+export declare const consentPurposes: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "consent_purposes";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "consent_purposes";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        workspaceId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "workspace_id";
+            tableName: "consent_purposes";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        slug: import("drizzle-orm/pg-core").PgColumn<{
+            name: "slug";
+            tableName: "consent_purposes";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        label: import("drizzle-orm/pg-core").PgColumn<{
+            name: "label";
+            tableName: "consent_purposes";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        description: import("drizzle-orm/pg-core").PgColumn<{
+            name: "description";
+            tableName: "consent_purposes";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        defaultStatus: import("drizzle-orm/pg-core").PgColumn<{
+            name: "default_status";
+            tableName: "consent_purposes";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        sortOrder: import("drizzle-orm/pg-core").PgColumn<{
+            name: "sort_order";
+            tableName: "consent_purposes";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "consent_purposes";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "consent_purposes";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: 'pg';
+}>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/modules/consent-purposes/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/modules/consent-purposes/schema.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAC1D,YAAY,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAE3D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwB3B,CAAA"}

package/dist/modules/consent-purposes/schema.js

@@ -0,0 +1,35 @@
+import { CONSENT_PURPOSE_STATUSES } from '@kelpie/schemas';
+import { index, integer, pgTable, text, unique } from 'drizzle-orm/pg-core';
+import { checkOneOf, createdAt, primaryId, updatedAt } from '../../lib/columns.js';
+import { workspaces } from '../workspace/schema.js';
+/**
+ * Workspace-defined consent purposes.
+ *
+ * Every capture site — a form's consent field, a list, an import job, the
+ * manual override on a Person — names one of these. `slug` is set at create
+ * and immutable after: a rename would strand every form/list/import that
+ * names it and every `person_consents` row that carries it (identified by
+ * the purpose id). The strict PATCH body naturally refuses either as a `422`.
+ *
+ * `default_status` is the workspace default: a person without an explicit
+ * `person_consents` row for this purpose inherits it.
+ */
+export { CONSENT_PURPOSE_STATUSES } from '@kelpie/schemas';
+export const consentPurposes = pgTable('consent_purposes', {
+    id: primaryId(),
+    workspaceId: text('workspace_id')
+        .notNull()
+        .references(() => workspaces.id, { onDelete: 'cascade' }),
+    slug: text('slug').notNull(),
+    label: text('label').notNull(),
+    description: text('description').notNull().default(''),
+    defaultStatus: text('default_status').notNull().default('unknown'),
+    sortOrder: integer('sort_order').notNull(),
+    createdAt: createdAt(),
+    updatedAt: updatedAt(),
+}, (table) => [
+    index('consent_purposes_workspace_idx').on(table.workspaceId),
+    unique('consent_purposes_workspace_slug_key').on(table.workspaceId, table.slug),
+    checkOneOf('consent_purposes_default_status_check', table.defaultStatus, CONSENT_PURPOSE_STATUSES),
+]);
+//# sourceMappingURL=schema.js.map

package/dist/modules/consent-purposes/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/modules/consent-purposes/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAE3E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAEnD;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAG1D,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CACpC,kBAAkB,EAClB;IACE,EAAE,EAAE,SAAS,EAAE;IACf,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;SAC9B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC3D,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IAClE,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC1C,SAAS,EAAE,SAAS,EAAE;IACtB,SAAS,EAAE,SAAS,EAAE;CACvB,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;IAC7D,MAAM,CAAC,qCAAqC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC;IAC/E,UAAU,CACR,uCAAuC,EACvC,KAAK,CAAC,aAAa,EACnB,wBAAwB,CACzB;CACF,CACF,CAAA"}

package/dist/modules/consent-purposes/service.d.ts

@@ -0,0 +1,50 @@
+import type { ConsentPurposeStatus } from '@kelpie/schemas';
+import type { Database } from '../../lib/database.ts';
+import type { IdFactory } from '../../lib/ids.ts';
+import type { ListQueryParameters, Page } from '../../lib/pagination.ts';
+import type { EntitlementRegistry } from '../../runtime/entitlements.ts';
+import type { TransactionScope } from '../../runtime/transaction.ts';
+import type { Actor } from '../auth/actor.ts';
+import './events.ts';
+import type { ConsentPurposeFilters, ConsentPurposeRecord } from './repository.ts';
+/**
+ * CRUD for the workspace's consent purposes.
+ *
+ * Reads are open to any workspace member — every capture site needs to list
+ * them to render its purpose picker. Writes need the admin role: a purpose
+ * change touches every form, list, and import job that names it, and it is
+ * team-wide config rather than a per-user preference.
+ */
+/** Hard cap per workspace. Bites when the entitlement leaves the count unlimited. */
+export declare const CONSENT_PURPOSES_HARD_CAP = 50;
+export interface ConsentPurposesDependencies {
+    readonly db: Database;
+    readonly transaction: TransactionScope;
+    readonly createId: IdFactory;
+    readonly now: () => Date;
+    readonly entitlements: EntitlementRegistry;
+}
+/** What the API returns: the stored row minus the tenancy column. */
+export type ConsentPurposeView = Omit<ConsentPurposeRecord, 'workspaceId'>;
+export interface CreateConsentPurposeInput {
+    readonly slug: string;
+    readonly label: string;
+    readonly description: string;
+    readonly defaultStatus: ConsentPurposeStatus;
+}
+/** PATCH semantics: `slug` is immutable and refused by the route body. */
+export interface UpdateConsentPurposeInput {
+    readonly label?: string | undefined;
+    readonly description?: string | undefined;
+    readonly defaultStatus?: ConsentPurposeStatus | undefined;
+    readonly sortOrder?: number | undefined;
+}
+export interface ConsentPurposesService {
+    list(actor: Actor, filters: ConsentPurposeFilters, query: ListQueryParameters): Promise<Page<ConsentPurposeView>>;
+    get(actor: Actor, id: string): Promise<ConsentPurposeView>;
+    create(actor: Actor, input: CreateConsentPurposeInput): Promise<ConsentPurposeView>;
+    update(actor: Actor, id: string, changes: UpdateConsentPurposeInput): Promise<ConsentPurposeView>;
+    remove(actor: Actor, id: string): Promise<void>;
+}
+export declare function createConsentPurposesService(dependencies: ConsentPurposesDependencies): ConsentPurposesService;
+//# sourceMappingURL=service.d.ts.map

package/dist/modules/consent-purposes/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/modules/consent-purposes/service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAU3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAErD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAEjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AAExE,OAAO,KAAK,EAAe,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACjF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAM7C,OAAO,aAAa,CAAA;AAMpB,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,iBAAiB,CAAA;AAExB;;;;;;;GAOG;AAEH,qFAAqF;AACrF,eAAO,MAAM,yBAAyB,KAAK,CAAA;AAQ3C,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAA;IACtC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,IAAI,CAAA;IACxB,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAA;CAC3C;AAED,qEAAqE;AACrE,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAA;AAE1E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;CAC7C;AAED,0EAA0E;AAC1E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAA;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACxC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CACF,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,qBAAqB,EAC9B,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAA;IACpC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC1D,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACnF,MAAM,CACJ,KAAK,EAAE,KAAK,EACZ,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9B,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAChD;AAyFD,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,2BAA2B,GACxC,sBAAsB,CA6OxB"}

package/dist/modules/consent-purposes/service.js

@@ -0,0 +1,263 @@
+import { CONSENT_PURPOSE_STATUSES } from '@kelpie/schemas';
+import { and, eq, sql } from 'drizzle-orm';
+import { toEventActor } from '../../lib/actor.js';
+import { changedKeys } from '../../lib/changes.js';
+import { FOREIGN_KEY_VIOLATION, UNIQUE_VIOLATION, postgresErrorCode, } from '../../lib/database.js';
+import { AppError } from '../../lib/errors.js';
+import { mapPage, readListWindow, toPage } from '../../lib/pagination.js';
+import { limitFor } from '../../runtime/entitlements.js';
+import { requireWorkspaceId } from '../auth/actor.js';
+import { formFields } from '../forms/schema.js';
+import { lists } from '../lists/schema.js';
+import { roleAllows } from '../workspace/roles.js';
+import { CONSENT_PURPOSES_LIMIT } from './capabilities.js';
+import './events.js';
+import * as repository from './repository.js';
+import { CONSENT_PURPOSE_SORTS, DEFAULT_CONSENT_PURPOSE_SORT, } from './repository.js';
+/**
+ * CRUD for the workspace's consent purposes.
+ *
+ * Reads are open to any workspace member — every capture site needs to list
+ * them to render its purpose picker. Writes need the admin role: a purpose
+ * change touches every form, list, and import job that names it, and it is
+ * team-wide config rather than a per-user preference.
+ */
+/** Hard cap per workspace. Bites when the entitlement leaves the count unlimited. */
+export const CONSENT_PURPOSES_HARD_CAP = 50;
+const KEY_PATTERN = /^[a-z][a-z0-9_]*$/u;
+const MAX_SLUG_LENGTH = 64;
+const MAX_LABEL_LENGTH = 120;
+const MIN_LABEL_LENGTH = 1;
+const MAX_DESCRIPTION_LENGTH = 2000;
+function toView(record) {
+    const { workspaceId: _workspaceId, ...view } = record;
+    return view;
+}
+function fieldError(field, message) {
+    return AppError.validationFailed('That consent purpose is not valid', [{ field, message }]);
+}
+function duplicateSlug() {
+    return AppError.conflict('Another consent purpose already uses that slug', [
+        { field: 'slug', message: 'Already in use' },
+    ]);
+}
+function validateSlug(slug) {
+    if (slug.length === 0 || slug.length > MAX_SLUG_LENGTH) {
+        throw fieldError('slug', `1 to ${String(MAX_SLUG_LENGTH)} characters`);
+    }
+    if (!KEY_PATTERN.test(slug)) {
+        throw fieldError('slug', 'Lowercase letters, digits and underscores; must start with a letter');
+    }
+}
+function validateLabel(label) {
+    if (label.length < MIN_LABEL_LENGTH || label.length > MAX_LABEL_LENGTH) {
+        throw fieldError('label', `${String(MIN_LABEL_LENGTH)} to ${String(MAX_LABEL_LENGTH)} characters`);
+    }
+}
+function validateDescription(description) {
+    if (description.length > MAX_DESCRIPTION_LENGTH) {
+        throw fieldError('description', `At most ${String(MAX_DESCRIPTION_LENGTH)} characters`);
+    }
+}
+function validateDefaultStatus(status) {
+    if (!CONSENT_PURPOSE_STATUSES.includes(status)) {
+        throw fieldError('default_status', `Unknown status "${status}"`);
+    }
+}
+/**
+ * A purpose still named by a form's consent field or a list's
+ * `consent_purpose_id` cannot be deleted. Counted here so the 409 lists both
+ * types; the FK on either side would refuse the delete on its own but only
+ * name one.
+ */
+async function referencingTypes(db, workspaceId, id) {
+    const [fieldRow, listRow] = await Promise.all([
+        db
+            .select({ count: sql `count(*)::int` })
+            .from(formFields)
+            .where(and(eq(formFields.workspaceId, workspaceId), 
+        // The array contains this purpose id. A form field carries a set of
+        // purposes; the delete is refused if any field still lists this one.
+        sql `${id} = ANY(${formFields.consentPurposeIds})`)),
+        db
+            .select({ count: sql `count(*)::int` })
+            .from(lists)
+            .where(and(eq(lists.workspaceId, workspaceId), eq(lists.consentPurposeId, id))),
+    ]);
+    const referencing = [];
+    if (Number(fieldRow[0]?.count ?? 0) > 0) {
+        referencing.push('form_field');
+    }
+    if (Number(listRow[0]?.count ?? 0) > 0) {
+        referencing.push('list');
+    }
+    return referencing;
+}
+export function createConsentPurposesService(dependencies) {
+    function requireAdminWorkspace(actor) {
+        const workspaceId = requireWorkspaceId(actor);
+        if (actor.role === null || !roleAllows(actor.role, 'admin')) {
+            throw new AppError('forbidden', 'This action needs the admin role');
+        }
+        return workspaceId;
+    }
+    async function require(workspaceId, id) {
+        const purpose = await repository.findPurpose(dependencies.db, workspaceId, id);
+        if (purpose === undefined) {
+            throw AppError.notFound('Consent purpose not found');
+        }
+        return purpose;
+    }
+    async function renumber(tx, workspaceId, order) {
+        for (const [index, purpose] of order.entries()) {
+            if (purpose.sortOrder !== index) {
+                await repository.updatePurpose(tx, workspaceId, purpose.id, {
+                    sortOrder: index,
+                    updatedAt: dependencies.now(),
+                });
+            }
+        }
+    }
+    async function moveToPosition(tx, workspaceId, purpose, position) {
+        const rows = await repository.purposesForWorkspace(tx, workspaceId);
+        const target = rows.find((row) => row.id === purpose.id);
+        if (target === undefined) {
+            throw AppError.notFound('Consent purpose not found');
+        }
+        if (position < 0 || position >= rows.length) {
+            throw fieldError('sort_order', `Use 0 to ${String(rows.length - 1)}`);
+        }
+        const reordered = rows.filter((row) => row.id !== purpose.id);
+        reordered.splice(position, 0, target);
+        await renumber(tx, workspaceId, reordered);
+    }
+    return {
+        async list(actor, filters, query) {
+            const workspaceId = requireWorkspaceId(actor);
+            const window = readListWindow(query, CONSENT_PURPOSE_SORTS, DEFAULT_CONSENT_PURPOSE_SORT);
+            const rows = await repository.listPurposes(dependencies.db, workspaceId, filters, window);
+            return mapPage(toPage(rows, window, (row) => row.id), toView);
+        },
+        async get(actor, id) {
+            return toView(await require(requireWorkspaceId(actor), id));
+        },
+        async create(actor, input) {
+            const workspaceId = requireAdminWorkspace(actor);
+            validateSlug(input.slug);
+            validateLabel(input.label);
+            validateDescription(input.description);
+            validateDefaultStatus(input.defaultStatus);
+            const limit = await limitFor(dependencies.entitlements, workspaceId, CONSENT_PURPOSES_LIMIT.name);
+            if (limit !== null) {
+                const total = await repository.countPurposes(dependencies.db, workspaceId);
+                if (total >= limit) {
+                    throw new AppError('entitlement_required', `Your plan allows ${String(limit)} consent purpose${limit === 1 ? '' : 's'}`);
+                }
+            }
+            const id = dependencies.createId('consentPurpose');
+            return dependencies.transaction(async ({ tx, events }) => {
+                const existing = await repository.purposesForWorkspace(tx, workspaceId);
+                if (existing.length >= CONSENT_PURPOSES_HARD_CAP) {
+                    throw AppError.conflict(`A workspace may define at most ${String(CONSENT_PURPOSES_HARD_CAP)} consent purposes`, [{ field: 'slug', message: 'Limit reached' }]);
+                }
+                let created;
+                try {
+                    created = await repository.insertPurpose(tx, {
+                        id,
+                        workspaceId,
+                        slug: input.slug,
+                        label: input.label,
+                        description: input.description,
+                        defaultStatus: input.defaultStatus,
+                        sortOrder: (existing.at(-1)?.sortOrder ?? -1) + 1,
+                    });
+                }
+                catch (error) {
+                    if (postgresErrorCode(error) === UNIQUE_VIOLATION) {
+                        throw duplicateSlug();
+                    }
+                    throw error;
+                }
+                events.emit('consent_purposes.purpose.created', { type: 'consent_purpose', id: created.id }, { slug: created.slug });
+                return toView(created);
+            }, { workspaceId, actor: toEventActor(actor) });
+        },
+        async update(actor, id, changes) {
+            const workspaceId = requireAdminWorkspace(actor);
+            const existing = await require(workspaceId, id);
+            if (changes.label !== undefined) {
+                validateLabel(changes.label);
+            }
+            if (changes.description !== undefined) {
+                validateDescription(changes.description);
+            }
+            if (changes.defaultStatus !== undefined) {
+                validateDefaultStatus(changes.defaultStatus);
+            }
+            const columns = {
+                ...(changes.label === undefined ? {} : { label: changes.label }),
+                ...(changes.description === undefined ? {} : { description: changes.description }),
+                ...(changes.defaultStatus === undefined
+                    ? {}
+                    : { defaultStatus: changes.defaultStatus }),
+            };
+            const changed = changedKeys(existing, columns);
+            const position = changes.sortOrder;
+            if (changed.length === 0 && position === undefined) {
+                return toView(existing);
+            }
+            return dependencies.transaction(async ({ tx, events }) => {
+                if (position !== undefined) {
+                    await moveToPosition(tx, workspaceId, existing, position);
+                }
+                let updated;
+                if (changed.length > 0) {
+                    updated = await repository.updatePurpose(tx, workspaceId, id, {
+                        ...columns,
+                        updatedAt: dependencies.now(),
+                    });
+                    if (updated === undefined) {
+                        throw AppError.notFound('Consent purpose not found');
+                    }
+                }
+                else {
+                    updated = await repository.findPurpose(tx, workspaceId, id);
+                    if (updated === undefined) {
+                        throw AppError.notFound('Consent purpose not found');
+                    }
+                }
+                if (changed.length > 0 || position !== undefined) {
+                    const changedPaths = [
+                        ...changed,
+                        ...(position !== undefined && position !== existing.sortOrder ? ['sortOrder'] : []),
+                    ];
+                    events.emit('consent_purposes.purpose.updated', { type: 'consent_purpose', id }, { slug: updated.slug, changed: changedPaths });
+                }
+                return toView(updated);
+            }, { workspaceId, actor: toEventActor(actor) });
+        },
+        async remove(actor, id) {
+            const workspaceId = requireAdminWorkspace(actor);
+            const existing = await require(workspaceId, id);
+            await dependencies.transaction(async ({ tx, events }) => {
+                const referencing = await referencingTypes(tx, workspaceId, id);
+                if (referencing.length > 0) {
+                    throw AppError.conflict('Remove this purpose from every form and list that names it before deleting it', referencing.map((type) => ({ field: type, message: 'still references this purpose' })));
+                }
+                try {
+                    await repository.deletePurpose(tx, workspaceId, id);
+                }
+                catch (error) {
+                    if (postgresErrorCode(error) === FOREIGN_KEY_VIOLATION) {
+                        throw AppError.conflict('Remove this purpose from every form and list that names it before deleting it', [{ field: 'id', message: 'still referenced' }]);
+                    }
+                    throw error;
+                }
+                const survivors = await repository.purposesForWorkspace(tx, workspaceId);
+                await renumber(tx, workspaceId, survivors);
+                events.emit('consent_purposes.purpose.deleted', { type: 'consent_purpose', id }, { slug: existing.slug });
+            }, { workspaceId, actor: toEventActor(actor) });
+        },
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/modules/consent-purposes/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/modules/consent-purposes/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAE1D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAE9C,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAGzE,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAA;AAGxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,aAAa,CAAA;AACpB,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EACL,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,iBAAiB,CAAA;AAMxB;;;;;;;GAOG;AAEH,qFAAqF;AACrF,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAA;AAE3C,MAAM,WAAW,GAAG,oBAAoB,CAAA;AACxC,MAAM,eAAe,GAAG,EAAE,CAAA;AAC1B,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAC5B,MAAM,gBAAgB,GAAG,CAAC,CAAA;AAC1B,MAAM,sBAAsB,GAAG,IAAI,CAAA;AA4CnC,SAAS,MAAM,CAAC,MAA4B;IAC1C,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;IACrD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,OAAe;IAChD,OAAO,QAAQ,CAAC,gBAAgB,CAAC,mCAAmC,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;AAC7F,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,QAAQ,CAAC,QAAQ,CAAC,gDAAgD,EAAE;QACzE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE;KAC7C,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACvD,MAAM,UAAU,CAAC,MAAM,EAAE,QAAQ,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,CACd,MAAM,EACN,qEAAqE,CACtE,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACvE,MAAM,UAAU,CACd,OAAO,EACP,GAAG,MAAM,CAAC,gBAAgB,CAAC,OAAO,MAAM,CAAC,gBAAgB,CAAC,aAAa,CACxE,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAmB;IAC9C,IAAI,WAAW,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;QAChD,MAAM,UAAU,CAAC,aAAa,EAAE,WAAW,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAA;IACzF,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc;IAC3C,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,MAA8B,CAAC,EAAE,CAAC;QACvE,MAAM,UAAU,CAAC,gBAAgB,EAAE,mBAAmB,MAAM,GAAG,CAAC,CAAA;IAClE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,EAA0B,EAC1B,WAAmB,EACnB,EAAU;IAEV,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,EAAE;aACC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;aAC7C,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,WAAW,CAAC;QACvC,oEAAoE;QACpE,qEAAqE;QACrE,GAAG,CAAA,GAAG,EAAE,UAAU,UAAU,CAAC,iBAAiB,GAAG,CAClD,CACF;QACH,EAAE;aACC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;aAC7C,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC;KAClF,CAAC,CAAA;IAEF,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAChC,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,YAAyC;IAEzC,SAAS,qBAAqB,CAAC,KAAY;QACzC,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;QAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,kCAAkC,CAAC,CAAA;QACrE,CAAC;QACD,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,KAAK,UAAU,OAAO,CACpB,WAAmB,EACnB,EAAU;QAEV,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAA;QAC9E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAA;QACtD,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,UAAU,QAAQ,CACrB,EAAe,EACf,WAAmB,EACnB,KAAsC;QAEtC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;gBAChC,MAAM,UAAU,CAAC,aAAa,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE;oBAC1D,SAAS,EAAE,KAAK;oBAChB,SAAS,EAAE,YAAY,CAAC,GAAG,EAAE;iBAC9B,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,UAAU,cAAc,CAC3B,EAAe,EACf,WAAmB,EACnB,OAA6B,EAC7B,QAAgB;QAEhB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,oBAAoB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAA;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAA;QACxD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAA;QACtD,CAAC;QACD,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5C,MAAM,UAAU,CAAC,YAAY,EAAE,YAAY,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAA;QACvE,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAA;QAC7D,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;QACrC,MAAM,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;IAC5C,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK;YAC9B,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;YAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,qBAAqB,EAAE,4BAA4B,CAAC,CAAA;YACzF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;YACzF,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;QAC/D,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE;YACjB,OAAO,MAAM,CAAC,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAC7D,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK;YACvB,MAAM,WAAW,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;YAChD,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACxB,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC1B,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;YACtC,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;YAE1C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC1B,YAAY,CAAC,YAAY,EACzB,WAAW,EACX,sBAAsB,CAAC,IAAI,CAC5B,CAAA;YACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,EAAE,WAAW,CAAC,CAAA;gBAC1E,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;oBACnB,MAAM,IAAI,QAAQ,CAChB,sBAAsB,EACtB,oBAAoB,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAC7E,CAAA;gBACH,CAAC;YACH,CAAC;YAED,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;YAElD,OAAO,YAAY,CAAC,WAAW,CAC7B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;gBACvB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,oBAAoB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAA;gBACvE,IAAI,QAAQ,CAAC,MAAM,IAAI,yBAAyB,EAAE,CAAC;oBACjD,MAAM,QAAQ,CAAC,QAAQ,CACrB,kCAAkC,MAAM,CAAC,yBAAyB,CAAC,mBAAmB,EACtF,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAC9C,CAAA;gBACH,CAAC;gBAED,IAAI,OAA6B,CAAA;gBACjC,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,EAAE,EAAE;wBAC3C,EAAE;wBACF,WAAW;wBACX,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;wBAClC,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;qBAClD,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,gBAAgB,EAAE,CAAC;wBAClD,MAAM,aAAa,EAAE,CAAA;oBACvB,CAAC;oBACD,MAAM,KAAK,CAAA;gBACb,CAAC;gBAED,MAAM,CAAC,IAAI,CACT,kCAAkC,EAClC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAC3C,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CACvB,CAAA;gBAED,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;YACxB,CAAC,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAC5C,CAAA;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO;YAC7B,MAAM,WAAW,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;YAChD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;YAE/C,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAChC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAC9B,CAAC;YACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACtC,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;YAC1C,CAAC;YACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACxC,qBAAqB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;YAC9C,CAAC;YAED,MAAM,OAAO,GAA8C;gBACzD,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChE,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;gBAClF,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;oBACrC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;aAC9C,CAAA;YACD,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAA;YAElC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACnD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAA;YACzB,CAAC;YAED,OAAO,YAAY,CAAC,WAAW,CAC7B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;gBACvB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,MAAM,cAAc,CAAC,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAC3D,CAAC;gBAED,IAAI,OAAyC,CAAA;gBAC7C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;wBAC5D,GAAG,OAAO;wBACV,SAAS,EAAE,YAAY,CAAC,GAAG,EAAE;qBAC9B,CAAC,CAAA;oBACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC1B,MAAM,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAA;oBACtD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAA;oBAC3D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC1B,MAAM,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAA;oBACtD,CAAC;gBACH,CAAC;gBAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACjD,MAAM,YAAY,GAAG;wBACnB,GAAG,OAAO;wBACV,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;qBACpF,CAAA;oBACD,MAAM,CAAC,IAAI,CACT,kCAAkC,EAClC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAC/B,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAC9C,CAAA;gBACH,CAAC;gBAED,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;YACxB,CAAC,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAC5C,CAAA;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE;YACpB,MAAM,WAAW,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;YAChD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;YAE/C,MAAM,YAAY,CAAC,WAAW,CAC5B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;gBACvB,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAA;gBAC/D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3B,MAAM,QAAQ,CAAC,QAAQ,CACrB,+EAA+E,EAC/E,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC,CACvF,CAAA;gBACH,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,UAAU,CAAC,aAAa,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAA;gBACrD,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,qBAAqB,EAAE,CAAC;wBACvD,MAAM,QAAQ,CAAC,QAAQ,CACrB,+EAA+E,EAC/E,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAC/C,CAAA;oBACH,CAAC;oBACD,MAAM,KAAK,CAAA;gBACb,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,oBAAoB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAA;gBACxE,MAAM,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;gBAE1C,MAAM,CAAC,IAAI,CACT,kCAAkC,EAClC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAC/B,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CACxB,CAAA;YACH,CAAC,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAC5C,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/modules/consent-purposes/starters.d.ts

@@ -0,0 +1,17 @@
+import type { ConsentPurposeStatus } from '@kelpie/schemas';
+/**
+ * The purposes a new workspace starts with. Data, not migrations: a workspace
+ * owner may rename, reorder, or delete them, and add any others they need.
+ *
+ * Both starters default to `unknown` — silence about a person's wishes is not
+ * a grant, and every capture site (forms, lists, imports, manual override)
+ * writes an explicit `person_consents` row when consent is actually given.
+ */
+export interface StarterConsentPurpose {
+    readonly slug: string;
+    readonly label: string;
+    readonly description: string;
+    readonly defaultStatus: ConsentPurposeStatus;
+}
+export declare const STARTER_CONSENT_PURPOSES: readonly StarterConsentPurpose[];
+//# sourceMappingURL=starters.d.ts.map

package/dist/modules/consent-purposes/starters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"starters.d.ts","sourceRoot":"","sources":["../../../src/modules/consent-purposes/starters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAE3D;;;;;;;GAOG;AAEH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;CAC7C;AAED,eAAO,MAAM,wBAAwB,EAAE,SAAS,qBAAqB,EAapE,CAAA"}

package/dist/modules/consent-purposes/starters.js

@@ -0,0 +1,15 @@
+export const STARTER_CONSENT_PURPOSES = [
+    {
+        slug: 'contact',
+        label: 'Contact',
+        description: 'Being contacted by the workspace about our work together.',
+        defaultStatus: 'unknown',
+    },
+    {
+        slug: 'marketing',
+        label: 'Marketing',
+        description: 'Marketing communications — newsletters, product updates, and campaigns.',
+        defaultStatus: 'unknown',
+    },
+];
+//# sourceMappingURL=starters.js.map

package/dist/modules/consent-purposes/starters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"starters.js","sourceRoot":"","sources":["../../../src/modules/consent-purposes/starters.ts"],"names":[],"mappings":"AAkBA,MAAM,CAAC,MAAM,wBAAwB,GAAqC;IACxE;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,2DAA2D;QACxE,aAAa,EAAE,SAAS;KACzB;IACD;QACE,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,yEAAyE;QACtF,aAAa,EAAE,SAAS;KACzB;CACF,CAAA"}

package/dist/modules/consent-purposes/tools.d.ts

@@ -0,0 +1,4 @@
+import type { McpToolRegistry } from '../../runtime/module.ts';
+import type { ConsentPurposesService } from './service.ts';
+export declare function registerConsentPurposesTools(mcp: McpToolRegistry, service: ConsentPurposesService): void;
+//# sourceMappingURL=tools.d.ts.map

package/dist/modules/consent-purposes/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/modules/consent-purposes/tools.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAS9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAa1D,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,sBAAsB,GAC9B,IAAI,CAgBN"}

package/dist/modules/consent-purposes/tools.js

@@ -0,0 +1,29 @@
+import { z } from 'zod';
+import { idArg, listWindowShape, registerCrudTools, termArg } from '../crudTools.js';
+import { createBody, consentPurposeResponse, toCreateInput, toUpdateInput, updateBody, } from './routes.js';
+/**
+ * `consent_purposes_*`. Same schemas and mappers as `/v1/consent_purposes`, so
+ * the REST surface and the MCP one cannot drift. Agents list purposes before
+ * a person consent write so they know which slugs the workspace defines.
+ */
+const listArgs = z.strictObject({
+    ...listWindowShape,
+    q: termArg,
+});
+export function registerConsentPurposesTools(mcp, service) {
+    registerCrudTools(mcp, {
+        resource: 'consent_purposes',
+        subject: 'consent purpose',
+        about: 'A workspace-defined consent purpose. Read these before writing a person ' +
+            'consent or setting a form/list/import purpose_id.',
+        service,
+        render: consentPurposeResponse,
+        listArgs,
+        toFilters: (args) => ({ term: args.q }),
+        createArgs: createBody,
+        toCreateInput,
+        updateArgs: updateBody.extend({ id: idArg }),
+        toUpdateInput,
+    });
+}
+//# sourceMappingURL=tools.js.map

package/dist/modules/consent-purposes/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/modules/consent-purposes/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACpF,OAAO,EACL,UAAU,EACV,sBAAsB,EACtB,aAAa,EACb,aAAa,EACb,UAAU,GACX,MAAM,aAAa,CAAA;AAGpB;;;;GAIG;AAEH,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9B,GAAG,eAAe;IAClB,CAAC,EAAE,OAAO;CACX,CAAC,CAAA;AAEF,MAAM,UAAU,4BAA4B,CAC1C,GAAoB,EACpB,OAA+B;IAE/B,iBAAiB,CAAC,GAAG,EAAE;QACrB,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,iBAAiB;QAC1B,KAAK,EACH,0EAA0E;YAC1E,mDAAmD;QACrD,OAAO;QACP,MAAM,EAAE,sBAAsB;QAC9B,QAAQ;QACR,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACvC,UAAU,EAAE,UAAU;QACtB,aAAa;QACb,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAC5C,aAAa;KACd,CAAC,CAAA;AACJ,CAAC"}

package/dist/modules/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../src/modules/core.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AA0BxD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,QAA8D,CAAA;AAElG,eAAO,MAAM,WAAW,EAAE,SAAS,YAAY,EA6B9C,CAAA"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../src/modules/core.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAgCxD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,QAA8D,CAAA;AAElG,eAAO,MAAM,WAAW,EAAE,SAAS,YAAY,EA4C9C,CAAA"}