@kernhq/module-hr 0.1.0

package/dist/server/services/people.js

@@ -0,0 +1,182 @@
+import { KernError, uuidv7 } from '@kernhq/kernel';
+import { and, eq, isNull, sql } from 'drizzle-orm';
+import { employments, officeAssignments, people, personHistory } from '../schema.js';
+import { isOpen, todayIso } from './db.js';
+/**
+ * Writing people, employment and office moves — the three things that must stay consistent.
+ *
+ * Everything effective-dated goes through here rather than through the router, because "close the
+ * open row, then insert the new one" has to happen in one transaction and in that order. Done the
+ * other way round, a unique or exclusion constraint fires on the overlap and the change looks like
+ * a validation error instead of a race.
+ */
+export class PeopleService {
+    kernel;
+    constructor(kernel) {
+        this.kernel = kernel;
+    }
+    /** Serialise a row for the wire. Postgres `numeric` arrives as a string; the contract says number. */
+    static toPerson(row) {
+        return {
+            ...row,
+            // `status`, `employment_type` and friends are `text` in Postgres and unions in the contract.
+            // Narrowing here rather than widening the contract keeps the enum meaningful for every
+            // consumer; the column is only ever written from the same union.
+            status: row.status,
+            custom: row.custom ?? {},
+            createdAt: row.createdAt.toISOString(),
+            updatedAt: row.updatedAt.toISOString(),
+        };
+    }
+    static toEmployment(row) {
+        return {
+            ...row,
+            employmentType: row.employmentType,
+            fte: Number.parseFloat(row.fte ?? '1'),
+            contractHoursWeek: row.contractHoursWeek === null ? null : Number.parseFloat(row.contractHoursWeek),
+            createdAt: row.createdAt.toISOString(),
+        };
+    }
+    async load(tx, workspaceId, personId) {
+        const [row] = await tx
+            .select()
+            .from(people)
+            .where(and(eq(people.workspaceId, workspaceId), eq(people.id, personId)))
+            .limit(1);
+        if (!row)
+            throw KernError.notFound('Person');
+        return row;
+    }
+    async byUserId(tx, workspaceId, userId) {
+        const [row] = await tx
+            .select()
+            .from(people)
+            .where(and(eq(people.workspaceId, workspaceId), eq(people.userId, userId)))
+            .limit(1);
+        return row;
+    }
+    /**
+     * The next employee number, from workspace settings.
+     *
+     * Read-modify-write rather than a sequence, because the prefix and the counter are things an
+     * administrator edits — and a Postgres sequence cannot be edited without surprising them. Two
+     * people created in the same instant can therefore collide; the unique index catches it and the
+     * caller retries, which is the right trade for something that happens a handful of times a day.
+     */
+    async nextEmployeeNo(workspaceId, settings) {
+        if (!settings.employeeNumberPrefix && settings.employeeNumberNext <= 1)
+            return null;
+        const next = settings.employeeNumberNext;
+        await this.kernel.settings.setModule(workspaceId, 'hr', {
+            ...settings,
+            employeeNumberNext: next + 1,
+        });
+        return `${settings.employeeNumberPrefix}${next}`;
+    }
+    /** Append-only. Every field change lands here, and nothing rewrites it. */
+    async record(tx, workspaceId, personId, actorId, changes, source = 'app') {
+        if (!changes.length)
+            return;
+        await tx.insert(personHistory).values(changes.map((c) => ({
+            id: uuidv7(),
+            workspaceId,
+            personId,
+            field: c.field,
+            from: (c.from ?? null),
+            to: (c.to ?? null),
+            actorId,
+            source,
+        })));
+    }
+    /**
+     * Close the open employment row and open a new one from `effectiveFrom`.
+     *
+     * The new row inherits everything the caller did not name, so "change her manager" does not
+     * silently blank her department. A change dated before the current row's start is refused rather
+     than than quietly reordering history — that is a correction, and corrections need their own path.
+     */
+    async changeEmployment(tx, workspaceId, personId, effectiveFrom, patch) {
+        const [open] = await tx
+            .select()
+            .from(employments)
+            .where(and(eq(employments.workspaceId, workspaceId), eq(employments.personId, personId), isOpen(employments.effectiveTo)))
+            .limit(1);
+        if (open && effectiveFrom < open.effectiveFrom)
+            throw KernError.badRequest(`This person's current record starts on ${open.effectiveFrom}; a change cannot be dated before it.`);
+        if (open) {
+            // The previous period ends the day before the new one starts. Computed in SQL so the boundary
+            // is Postgres's own date arithmetic rather than a string manipulation that has to know about
+            // month lengths and leap years.
+            await tx
+                .update(employments)
+                .set({ effectiveTo: sql `${effectiveFrom}::date - 1` })
+                .where(eq(employments.id, open.id));
+        }
+        const [row] = await tx
+            .insert(employments)
+            .values({
+            id: uuidv7(),
+            workspaceId,
+            personId,
+            effectiveFrom,
+            effectiveTo: null,
+            orgUnitId: patch.orgUnitId ?? open?.orgUnitId ?? null,
+            positionId: patch.positionId ?? open?.positionId ?? null,
+            legalEntityId: patch.legalEntityId ?? open?.legalEntityId ?? null,
+            costCenterId: patch.costCenterId ?? open?.costCenterId ?? null,
+            managerPersonId: patch.managerPersonId ?? open?.managerPersonId ?? null,
+            employmentType: patch.employmentType ?? open?.employmentType ?? 'full_time',
+            fte: patch.fte ?? open?.fte ?? '1.000',
+            contractHoursWeek: patch.contractHoursWeek ?? open?.contractHoursWeek ?? null,
+            reason: patch.reason ?? null,
+        })
+            .returning();
+        return row;
+    }
+    /**
+     * Assign somebody to an office from a date, optionally as their primary.
+     *
+     * Making one primary demotes the other primary rather than leaving two — the database refuses two
+     * anyway, and finding that out as a constraint violation would turn an ordinary office move into
+     * an error the person doing it cannot act on.
+     */
+    async assignOffice(tx, workspaceId, personId, officeId, isPrimary, effectiveFrom, reason) {
+        const open = await tx
+            .select()
+            .from(officeAssignments)
+            .where(and(eq(officeAssignments.workspaceId, workspaceId), eq(officeAssignments.personId, personId), isNull(officeAssignments.effectiveTo)));
+        for (const row of open) {
+            if (row.officeId === officeId) {
+                // Already here. Close it so the new row carries the new primary flag and start date rather
+                // than leaving two rows for one office.
+                await tx
+                    .update(officeAssignments)
+                    .set({ effectiveTo: sql `${effectiveFrom}::date - 1` })
+                    .where(eq(officeAssignments.id, row.id));
+            }
+            else if (isPrimary && row.isPrimary) {
+                // Demote, do not close: somebody moving their primary from Istanbul to Amsterdam usually
+                // keeps a presence in Istanbul, and closing it would remove them from that directory.
+                await tx.update(officeAssignments).set({ isPrimary: false }).where(eq(officeAssignments.id, row.id));
+            }
+        }
+        await tx.insert(officeAssignments).values({
+            id: uuidv7(),
+            workspaceId,
+            personId,
+            officeId,
+            isPrimary,
+            effectiveFrom,
+            reason,
+        });
+        return tx
+            .select()
+            .from(officeAssignments)
+            .where(and(eq(officeAssignments.workspaceId, workspaceId), eq(officeAssignments.personId, personId), isNull(officeAssignments.effectiveTo)));
+    }
+    static toAssignment(row) {
+        return { ...row, createdAt: row.createdAt.toISOString() };
+    }
+    today = todayIso;
+}
+//# sourceMappingURL=people.js.map

package/dist/server/services/people.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"people.js","sourceRoot":"","sources":["../../../src/server/services/people.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAwB,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACxE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACpF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAM1C;;;;;;;GAOG;AACH,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,sGAAsG;IACtG,MAAM,CAAC,QAAQ,CAAC,GAAc;QAC5B,OAAO;YACL,GAAG,GAAG;YACN,6FAA6F;YAC7F,uFAAuF;YACvF,iEAAiE;YACjE,MAAM,EAAE,GAAG,CAAC,MAAsB;YAClC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;YACtC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;SACvC,CAAA;IACH,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,GAAkB;QACpC,OAAO;YACL,GAAG,GAAG;YACN,cAAc,EAAE,GAAG,CAAC,cAAgC;YACpD,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YACtC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACnG,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;SACvC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAM,EAAE,WAAmB,EAAE,QAAgB;QACtD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;aACxE,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,IAAI,CAAC,GAAG;YAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC5C,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAM,EAAE,WAAmB,EAAE,MAAc;QACxD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;aAC1E,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,OAAO,GAAG,CAAA;IACZ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB,EAAE,QAAoB;QAC5D,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,QAAQ,CAAC,kBAAkB,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QACnF,MAAM,IAAI,GAAG,QAAQ,CAAC,kBAAkB,CAAA;QACxC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE;YACtD,GAAG,QAAQ;YACX,kBAAkB,EAAE,IAAI,GAAG,CAAC;SAC7B,CAAC,CAAA;QACF,OAAO,GAAG,QAAQ,CAAC,oBAAoB,GAAG,IAAI,EAAE,CAAA;IAClD,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,MAAM,CACV,EAAM,EACN,WAAmB,EACnB,QAAgB,EAChB,OAAsB,EACtB,OAA6D,EAC7D,MAAM,GAAG,KAAK;QAEd,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAM;QAC3B,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CACnC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClB,EAAE,EAAE,MAAM,EAAE;YACZ,WAAW;YACX,QAAQ;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAU;YAC/B,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAU;YAC3B,OAAO;YACP,MAAM;SACP,CAAC,CAAC,CACJ,CAAA;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,EAAM,EACN,WAAmB,EACnB,QAAgB,EAChB,aAAqB,EACrB,KAAoF;QAEpF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE;aACpB,MAAM,EAAE;aACR,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,EACxC,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAClC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAChC,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAA;QAEX,IAAI,IAAI,IAAI,aAAa,GAAG,IAAI,CAAC,aAAa;YAC5C,MAAM,SAAS,CAAC,UAAU,CACxB,0CAA0C,IAAI,CAAC,aAAa,uCAAuC,CACpG,CAAA;QAEH,IAAI,IAAI,EAAE,CAAC;YACT,8FAA8F;YAC9F,6FAA6F;YAC7F,gCAAgC;YAChC,MAAM,EAAE;iBACL,MAAM,CAAC,WAAW,CAAC;iBACnB,GAAG,CAAC,EAAE,WAAW,EAAE,GAAG,CAAA,GAAG,aAAa,YAAY,EAAE,CAAC;iBACrD,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QACvC,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,WAAW,CAAC;aACnB,MAAM,CAAC;YACN,EAAE,EAAE,MAAM,EAAE;YACZ,WAAW;YACX,QAAQ;YACR,aAAa;YACb,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,EAAE,SAAS,IAAI,IAAI;YACrD,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,UAAU,IAAI,IAAI;YACxD,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI,EAAE,aAAa,IAAI,IAAI;YACjE,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI,EAAE,YAAY,IAAI,IAAI;YAC9D,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI,EAAE,eAAe,IAAI,IAAI;YACvE,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI,EAAE,cAAc,IAAI,WAAW;YAC3E,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,EAAE,GAAG,IAAI,OAAO;YACtC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI,EAAE,iBAAiB,IAAI,IAAI;YAC7E,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;SAC7B,CAAC;aACD,SAAS,EAAE,CAAA;QACd,OAAO,GAAI,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAChB,EAAM,EACN,WAAmB,EACnB,QAAgB,EAChB,QAAgB,EAChB,SAAkB,EAClB,aAAqB,EACrB,MAAqB;QAErB,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,EAC9C,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACxC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,CACtC,CACF,CAAA;QAEH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9B,2FAA2F;gBAC3F,wCAAwC;gBACxC,MAAM,EAAE;qBACL,MAAM,CAAC,iBAAiB,CAAC;qBACzB,GAAG,CAAC,EAAE,WAAW,EAAE,GAAG,CAAA,GAAG,aAAa,YAAY,EAAE,CAAC;qBACrD,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YAC5C,CAAC;iBAAM,IAAI,SAAS,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBACtC,yFAAyF;gBACzF,sFAAsF;gBACtF,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YACtG,CAAC;QACH,CAAC;QAED,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;YACxC,EAAE,EAAE,MAAM,EAAE;YACZ,WAAW;YACX,QAAQ;YACR,QAAQ;YACR,SAAS;YACT,aAAa;YACb,MAAM;SACP,CAAC,CAAA;QAEF,OAAO,EAAE;aACN,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,EAC9C,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACxC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,CACtC,CACF,CAAA;IACL,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,GAA0C;QAC5D,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAA;IAC3D,CAAC;IAED,KAAK,GAAG,QAAQ,CAAA;CACjB"}

package/dist/server/services/resolve.d.ts

@@ -0,0 +1,66 @@
+import { type Tx } from '@kernhq/kernel';
+import type { PersonResolution, WorkingWeek } from '../../contract/index.js';
+/**
+ * What actually applies to a person on a date — and which rung of the ladder answered.
+ *
+ * ```
+ * person override  →  primary office  →  org unit  →  workspace default
+ * ```
+ *
+ * **This is the only implementation of that order.** Calendars, timezones and (later) accrual,
+ * overtime and rounding policies all resolve through here. Four services each growing their own
+ * slightly different version of the ladder is the classic way a multi-office HR model rots: they
+ * agree for a year, then one of them forgets that a non-primary office does not vote, and a report
+ * quietly disagrees with a payslip.
+ *
+ * Two rules it enforces so nothing else has to:
+ *
+ * - **Only the primary office decides.** A person may hold several concurrent office assignments —
+ *   somebody splitting the week between two sites — and the others grant presence, not authority.
+ *   Otherwise "how many days off do I have" has two answers, which no employee or auditor accepts.
+ * - **Everything is asked "on a date".** A person who moved offices in March gets March's answer for
+ *   a March question and today's for a today question. Resolving against the *current* row is the
+ *   bug that makes a backdated leave request cost the wrong number of days.
+ */
+export declare class ResolveService {
+    /**
+     * Resolve for several people at once.
+     *
+     * Batched deliberately. A report over five hundred people that resolves row by row is five hundred
+     * ladder walks, and the ladder is four queries deep — the same shape the tracker's field-value
+     * loader had to be rescued from. Callers with one person use `forPerson`, which is this with a
+     * single-element array.
+     */
+    forPeople(tx: Tx, workspaceId: string, personIds: string[], on?: string): Promise<Map<string, PersonResolution>>;
+    forPerson(tx: Tx, workspaceId: string, personId: string, on?: string): Promise<PersonResolution>;
+    /**
+     * The workspace's default office.
+     *
+     * Always exists: HR creates it when the module is enabled for a workspace, built from the
+     * workspace country. That is what lets the `offices` capability be a *reveal* rather than a
+     * migration, and why nothing above has a "no office at all" branch to get wrong.
+     */
+    defaultOffice(tx: Tx, workspaceId: string): Promise<{
+        id: string;
+        workspaceId: string;
+        name: string;
+        code: string | null;
+        kind: string;
+        parentOfficeId: string | null;
+        legalEntityId: string | null;
+        country: string;
+        region: string | null;
+        city: string | null;
+        timezone: string;
+        calendarId: string | null;
+        address: Record<string, string> | null;
+        isDefault: boolean;
+        headPersonId: string | null;
+        archivedAt: Date | null;
+        createdAt: Date;
+        updatedAt: Date;
+    } | undefined>;
+}
+/** Monday to Friday. Overridden per calendar — Iran's weekend is Friday, the Gulf's Friday and Saturday. */
+export declare const DEFAULT_WORKING_WEEK: WorkingWeek;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/server/services/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../src/server/services/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,EAAE,EAAE,MAAM,gBAAgB,CAAA;AAEnD,OAAO,KAAK,EAAE,gBAAgB,EAAkB,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAI5F;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,cAAc;IACzB;;;;;;;OAOG;IACG,SAAS,CACb,EAAE,EAAE,EAAE,EACN,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EAAE,EACnB,EAAE,GAAE,MAAmB,GACtB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAkGnC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAOtG;;;;;;OAMG;IACG,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;CAQhD;AAED,4GAA4G;AAC5G,eAAO,MAAM,oBAAoB,EAAE,WAQlC,CAAA"}

package/dist/server/services/resolve.js

@@ -0,0 +1,145 @@
+import { KernError } from '@kernhq/kernel';
+import { and, eq, inArray } from 'drizzle-orm';
+import { calendars, employments, officeAssignments, offices, orgUnits, people } from '../schema.js';
+import { inForceOn, todayIso } from './db.js';
+/**
+ * What actually applies to a person on a date — and which rung of the ladder answered.
+ *
+ * ```
+ * person override  →  primary office  →  org unit  →  workspace default
+ * ```
+ *
+ * **This is the only implementation of that order.** Calendars, timezones and (later) accrual,
+ * overtime and rounding policies all resolve through here. Four services each growing their own
+ * slightly different version of the ladder is the classic way a multi-office HR model rots: they
+ * agree for a year, then one of them forgets that a non-primary office does not vote, and a report
+ * quietly disagrees with a payslip.
+ *
+ * Two rules it enforces so nothing else has to:
+ *
+ * - **Only the primary office decides.** A person may hold several concurrent office assignments —
+ *   somebody splitting the week between two sites — and the others grant presence, not authority.
+ *   Otherwise "how many days off do I have" has two answers, which no employee or auditor accepts.
+ * - **Everything is asked "on a date".** A person who moved offices in March gets March's answer for
+ *   a March question and today's for a today question. Resolving against the *current* row is the
+ *   bug that makes a backdated leave request cost the wrong number of days.
+ */
+export class ResolveService {
+    /**
+     * Resolve for several people at once.
+     *
+     * Batched deliberately. A report over five hundred people that resolves row by row is five hundred
+     * ladder walks, and the ladder is four queries deep — the same shape the tracker's field-value
+     * loader had to be rescued from. Callers with one person use `forPerson`, which is this with a
+     * single-element array.
+     */
+    async forPeople(tx, workspaceId, personIds, on = todayIso()) {
+        const out = new Map();
+        if (!personIds.length)
+            return out;
+        const personRows = await tx
+            .select({ id: people.id, timezone: people.timezone })
+            .from(people)
+            .where(and(eq(people.workspaceId, workspaceId), inArray(people.id, personIds)));
+        const assignments = await tx
+            .select()
+            .from(officeAssignments)
+            .where(and(eq(officeAssignments.workspaceId, workspaceId), inArray(officeAssignments.personId, personIds), inForceOn(officeAssignments.effectiveFrom, officeAssignments.effectiveTo, on)));
+        const employmentRows = await tx
+            .select()
+            .from(employments)
+            .where(and(eq(employments.workspaceId, workspaceId), inArray(employments.personId, personIds), inForceOn(employments.effectiveFrom, employments.effectiveTo, on)));
+        const officeIds = [...new Set(assignments.map((a) => a.officeId))];
+        const officeRows = officeIds.length
+            ? await tx
+                .select()
+                .from(offices)
+                .where(and(eq(offices.workspaceId, workspaceId), inArray(offices.id, officeIds)))
+            : [];
+        const officeById = new Map(officeRows.map((o) => [o.id, o]));
+        const unitIds = [...new Set(employmentRows.map((e) => e.orgUnitId).filter((x) => !!x))];
+        const unitRows = unitIds.length
+            ? await tx
+                .select()
+                .from(orgUnits)
+                .where(and(eq(orgUnits.workspaceId, workspaceId), inArray(orgUnits.id, unitIds)))
+            : [];
+        const unitById = new Map(unitRows.map((u) => [u.id, u]));
+        const calendarIds = [...new Set(officeRows.map((o) => o.calendarId).filter((x) => !!x))];
+        const calendarRows = calendarIds.length
+            ? await tx
+                .select()
+                .from(calendars)
+                .where(and(eq(calendars.workspaceId, workspaceId), inArray(calendars.id, calendarIds)))
+            : [];
+        const calendarById = new Map(calendarRows.map((c) => [c.id, c]));
+        const defaultOffice = await this.defaultOffice(tx, workspaceId);
+        for (const p of personRows) {
+            const mine = assignments.filter((a) => a.personId === p.id);
+            // Only the primary decides. If a workspace somehow has none on this date — a person created
+            // before any assignment, a gap left by a backdated move — the default office answers, which is
+            // why there is always exactly one.
+            const primaryAssignment = mine.find((a) => a.isPrimary);
+            const primary = primaryAssignment ? officeById.get(primaryAssignment.officeId) : undefined;
+            const office = primary ?? defaultOffice;
+            const employment = employmentRows.find((e) => e.personId === p.id);
+            const unit = employment?.orgUnitId ? unitById.get(employment.orgUnitId) : undefined;
+            const calendar = office?.calendarId ? calendarById.get(office.calendarId) : undefined;
+            const timezoneFrom = p.timezone ? 'person' : 'office';
+            out.set(p.id, {
+                personId: p.id,
+                on,
+                primaryOfficeId: office?.id ?? null,
+                primaryOfficeName: office?.name ?? null,
+                otherOfficeIds: mine.filter((a) => a.officeId !== office?.id).map((a) => a.officeId),
+                country: office?.country ?? null,
+                // A person override beats the office, for somebody who genuinely works from another zone.
+                // Falling back to UTC rather than the server's zone is deliberate: a server's zone is an
+                // accident of deployment, and a wrong answer that moves when you redeploy is the worst kind.
+                timezone: p.timezone ?? office?.timezone ?? 'UTC',
+                timezoneFrom,
+                calendarId: calendar?.id ?? null,
+                calendarFrom: calendar ? 'office' : null,
+                workingWeek: calendar?.workingWeek ?? DEFAULT_WORKING_WEEK,
+                legalEntityId: employment?.legalEntityId ?? office?.legalEntityId ?? null,
+                orgUnitId: unit?.id ?? null,
+                orgUnitPath: unit?.path ?? null,
+                managerPersonId: employment?.managerPersonId ?? null,
+            });
+        }
+        return out;
+    }
+    async forPerson(tx, workspaceId, personId, on) {
+        const map = await this.forPeople(tx, workspaceId, [personId], on);
+        const found = map.get(personId);
+        if (!found)
+            throw KernError.notFound('Person');
+        return found;
+    }
+    /**
+     * The workspace's default office.
+     *
+     * Always exists: HR creates it when the module is enabled for a workspace, built from the
+     * workspace country. That is what lets the `offices` capability be a *reveal* rather than a
+     * migration, and why nothing above has a "no office at all" branch to get wrong.
+     */
+    async defaultOffice(tx, workspaceId) {
+        const [row] = await tx
+            .select()
+            .from(offices)
+            .where(and(eq(offices.workspaceId, workspaceId), eq(offices.isDefault, true)))
+            .limit(1);
+        return row;
+    }
+}
+/** Monday to Friday. Overridden per calendar — Iran's weekend is Friday, the Gulf's Friday and Saturday. */
+export const DEFAULT_WORKING_WEEK = {
+    mon: 1,
+    tue: 1,
+    wed: 1,
+    thu: 1,
+    fri: 1,
+    sat: 0,
+    sun: 0,
+};
+//# sourceMappingURL=resolve.js.map

package/dist/server/services/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../src/server/services/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAW,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAE9C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACnG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAE7C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,cAAc;IACzB;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CACb,EAAM,EACN,WAAmB,EACnB,SAAmB,EACnB,KAAa,QAAQ,EAAE;QAEvB,MAAM,GAAG,GAAG,IAAI,GAAG,EAA4B,CAAA;QAC/C,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,OAAO,GAAG,CAAA;QAEjC,MAAM,UAAU,GAAG,MAAM,EAAE;aACxB,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;aACpD,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;QAEjF,MAAM,WAAW,GAAG,MAAM,EAAE;aACzB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,EAC9C,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAC9C,SAAS,CAAC,iBAAiB,CAAC,aAAa,EAAE,iBAAiB,CAAC,WAAW,EAAE,EAAE,CAAC,CAC9E,CACF,CAAA;QAEH,MAAM,cAAc,GAAG,MAAM,EAAE;aAC5B,MAAM,EAAE;aACR,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,EACxC,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,EACxC,SAAS,CAAC,WAAW,CAAC,aAAa,EAAE,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC,CAClE,CACF,CAAA;QAEH,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QAClE,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM;YACjC,CAAC,CAAC,MAAM,EAAE;iBACL,MAAM,EAAE;iBACR,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;YACrF,CAAC,CAAC,EAAE,CAAA;QACN,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAE5D,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACpG,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM;YAC7B,CAAC,CAAC,MAAM,EAAE;iBACL,MAAM,EAAE;iBACR,IAAI,CAAC,QAAQ,CAAC;iBACd,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YACrF,CAAC,CAAC,EAAE,CAAA;QACN,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAExD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACrG,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM;YACrC,CAAC,CAAC,MAAM,EAAE;iBACL,MAAM,EAAE;iBACR,IAAI,CAAC,SAAS,CAAC;iBACf,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;YAC3F,CAAC,CAAC,EAAE,CAAA;QACN,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAEhE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,WAAW,CAAC,CAAA;QAE/D,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC,CAAA;YAC3D,4FAA4F;YAC5F,+FAA+F;YAC/F,mCAAmC;YACnC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YACvD,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAC1F,MAAM,MAAM,GAAG,OAAO,IAAI,aAAa,CAAA;YACvC,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC,CAAA;YAClE,MAAM,IAAI,GAAG,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACnF,MAAM,QAAQ,GAAG,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAErF,MAAM,YAAY,GAAmB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;YAErE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACZ,QAAQ,EAAE,CAAC,CAAC,EAAE;gBACd,EAAE;gBACF,eAAe,EAAE,MAAM,EAAE,EAAE,IAAI,IAAI;gBACnC,iBAAiB,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI;gBACvC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACpF,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,IAAI;gBAChC,0FAA0F;gBAC1F,yFAAyF;gBACzF,6FAA6F;gBAC7F,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,MAAM,EAAE,QAAQ,IAAI,KAAK;gBACjD,YAAY;gBACZ,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI;gBAChC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;gBACxC,WAAW,EAAG,QAAQ,EAAE,WAAuC,IAAI,oBAAoB;gBACvF,aAAa,EAAE,UAAU,EAAE,aAAa,IAAI,MAAM,EAAE,aAAa,IAAI,IAAI;gBACzE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;gBAC3B,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI;gBAC/B,eAAe,EAAE,UAAU,EAAE,eAAe,IAAI,IAAI;aACrD,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAM,EAAE,WAAmB,EAAE,QAAgB,EAAE,EAAW;QACxE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;QACjE,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC/B,IAAI,CAAC,KAAK;YAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC9C,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,EAAM,EAAE,WAAmB;QAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,EAAE;aACR,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;aAC7E,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,OAAO,GAAG,CAAA;IACZ,CAAC;CACF;AAED,4GAA4G;AAC5G,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAC/C,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;CACP,CAAA"}

package/migrations/0000_init.sql

@@ -0,0 +1,223 @@
+CREATE SCHEMA IF NOT EXISTS "mod_hr";
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."calendar_days" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"calendar_id" uuid NOT NULL,
+	"date" date NOT NULL,
+	"kind" text DEFAULT 'public_holiday' NOT NULL,
+	"name" text NOT NULL,
+	"working_fraction" numeric(3, 2) DEFAULT '0' NOT NULL,
+	"source" text DEFAULT 'custom' NOT NULL,
+	"paid" boolean DEFAULT true NOT NULL,
+	"note" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."calendars" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"extends_id" uuid,
+	"country" text,
+	"region" text,
+	"working_week" jsonb DEFAULT '{"mon":1,"tue":1,"wed":1,"thu":1,"fri":1,"sat":0,"sun":0}'::jsonb NOT NULL,
+	"source" text DEFAULT 'custom' NOT NULL,
+	"pack_key" text,
+	"pack_version" text,
+	"archived_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."cost_centers" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"code" text NOT NULL,
+	"name" text NOT NULL,
+	"office_id" uuid,
+	"org_unit_id" uuid,
+	"legal_entity_id" uuid,
+	"archived_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."custom_field_defs" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"key" text NOT NULL,
+	"name" text NOT NULL,
+	"type" text NOT NULL,
+	"options" jsonb,
+	"required" boolean DEFAULT false NOT NULL,
+	"sensitive" boolean DEFAULT false NOT NULL,
+	"section" text DEFAULT 'profile' NOT NULL,
+	"order" integer DEFAULT 0 NOT NULL,
+	"archived_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."employments" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"person_id" uuid NOT NULL,
+	"effective_from" date NOT NULL,
+	"effective_to" date,
+	"org_unit_id" uuid,
+	"position_id" uuid,
+	"legal_entity_id" uuid,
+	"cost_center_id" uuid,
+	"manager_person_id" uuid,
+	"employment_type" text DEFAULT 'full_time' NOT NULL,
+	"fte" numeric(4, 3) DEFAULT '1.000' NOT NULL,
+	"contract_hours_week" numeric(5, 2),
+	"reason" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."legal_entities" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"registration_no" text,
+	"tax_no" text,
+	"country" text NOT NULL,
+	"currency" text,
+	"archived_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."office_assignments" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"person_id" uuid NOT NULL,
+	"office_id" uuid NOT NULL,
+	"is_primary" boolean DEFAULT true NOT NULL,
+	"effective_from" date NOT NULL,
+	"effective_to" date,
+	"reason" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."offices" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"code" text,
+	"kind" text DEFAULT 'branch' NOT NULL,
+	"parent_office_id" uuid,
+	"legal_entity_id" uuid,
+	"country" text NOT NULL,
+	"region" text,
+	"city" text,
+	"timezone" text DEFAULT 'UTC' NOT NULL,
+	"calendar_id" uuid,
+	"address" jsonb,
+	"is_default" boolean DEFAULT false NOT NULL,
+	"head_person_id" uuid,
+	"archived_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."org_units" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"parent_id" uuid,
+	"path" "ltree" NOT NULL,
+	"name" text NOT NULL,
+	"code" text,
+	"head_person_id" uuid,
+	"archived_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."people" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"user_id" uuid,
+	"employee_no" text,
+	"display_name" text NOT NULL,
+	"work_email" text,
+	"personal_email" text,
+	"phone" text,
+	"photo_file_id" uuid,
+	"status" text DEFAULT 'active' NOT NULL,
+	"hired_on" date,
+	"terminated_on" date,
+	"timezone" text,
+	"custom" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."people_sensitive" (
+	"person_id" uuid PRIMARY KEY NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"national_id_enc" text,
+	"birth_date" date,
+	"iban_enc" text,
+	"emergency_contact" jsonb,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."person_documents" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"person_id" uuid NOT NULL,
+	"file_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"kind" text DEFAULT 'other' NOT NULL,
+	"issued_on" date,
+	"expires_on" date,
+	"uploaded_by" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."person_history" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"person_id" uuid NOT NULL,
+	"field" text NOT NULL,
+	"from_value" jsonb,
+	"to_value" jsonb,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"actor_id" uuid,
+	"source" text DEFAULT 'app' NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "mod_hr"."positions" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"title" text NOT NULL,
+	"code" text,
+	"job_family" text,
+	"level" text,
+	"archived_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX "hr_calendar_days_idx" ON "mod_hr"."calendar_days" USING btree ("workspace_id","calendar_id","date");--> statement-breakpoint
+CREATE UNIQUE INDEX "hr_calendar_days_uq" ON "mod_hr"."calendar_days" USING btree ("calendar_id","date","kind");--> statement-breakpoint
+CREATE INDEX "hr_calendars_ws_idx" ON "mod_hr"."calendars" USING btree ("workspace_id","archived_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "hr_cost_centers_ws_code_uq" ON "mod_hr"."cost_centers" USING btree ("workspace_id","code");--> statement-breakpoint
+CREATE UNIQUE INDEX "hr_fields_ws_key_uq" ON "mod_hr"."custom_field_defs" USING btree ("workspace_id","key");--> statement-breakpoint
+CREATE INDEX "hr_employments_person_idx" ON "mod_hr"."employments" USING btree ("workspace_id","person_id","effective_from");--> statement-breakpoint
+CREATE INDEX "hr_employments_ws_manager_idx" ON "mod_hr"."employments" USING btree ("workspace_id","manager_person_id");--> statement-breakpoint
+CREATE INDEX "hr_employments_ws_unit_idx" ON "mod_hr"."employments" USING btree ("workspace_id","org_unit_id");--> statement-breakpoint
+CREATE INDEX "hr_entities_ws_idx" ON "mod_hr"."legal_entities" USING btree ("workspace_id","archived_at");--> statement-breakpoint
+CREATE INDEX "hr_office_assign_person_idx" ON "mod_hr"."office_assignments" USING btree ("workspace_id","person_id","effective_from");--> statement-breakpoint
+CREATE INDEX "hr_office_assign_office_idx" ON "mod_hr"."office_assignments" USING btree ("workspace_id","office_id","effective_from");--> statement-breakpoint
+CREATE INDEX "hr_offices_ws_idx" ON "mod_hr"."offices" USING btree ("workspace_id","archived_at");--> statement-breakpoint
+CREATE INDEX "hr_offices_ws_country_idx" ON "mod_hr"."offices" USING btree ("workspace_id","country");--> statement-breakpoint
+CREATE INDEX "hr_org_units_ws_idx" ON "mod_hr"."org_units" USING btree ("workspace_id","archived_at");--> statement-breakpoint
+CREATE INDEX "hr_people_ws_status_idx" ON "mod_hr"."people" USING btree ("workspace_id","status","display_name");--> statement-breakpoint
+CREATE UNIQUE INDEX "hr_people_ws_user_uq" ON "mod_hr"."people" USING btree ("workspace_id","user_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "hr_people_ws_empno_uq" ON "mod_hr"."people" USING btree ("workspace_id","employee_no");--> statement-breakpoint
+CREATE INDEX "hr_people_sensitive_ws_idx" ON "mod_hr"."people_sensitive" USING btree ("workspace_id");--> statement-breakpoint
+CREATE INDEX "hr_person_docs_idx" ON "mod_hr"."person_documents" USING btree ("workspace_id","person_id","created_at");--> statement-breakpoint
+CREATE INDEX "hr_person_docs_expiry_idx" ON "mod_hr"."person_documents" USING btree ("workspace_id","expires_on");--> statement-breakpoint
+CREATE INDEX "hr_person_history_idx" ON "mod_hr"."person_history" USING btree ("workspace_id","person_id","created_at");--> statement-breakpoint
+CREATE INDEX "hr_positions_ws_idx" ON "mod_hr"."positions" USING btree ("workspace_id","archived_at");