@kernhq/module-inventory 0.1.0

package/dist/server/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/server/schema.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;GASG;AACH,eAAO,MAAM,MAAM,gDAA4B,CAAA;AAS/C;;;GAGG;AACH,eAAO,MAAM,WAAW,2FAA8E,CAAA;AAEtG,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQpB,CAAA;AAED,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EActB,CAAA;AAED,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmClB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwBrB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAc1B,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAQoB,MAAM;sBAAQ,OAAO;oBAAM,OAAO;;;;;;;;;;;;;;uBAAlC,MAAM;sBAAQ,OAAO;oBAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAK9E,CAAA;AAED,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBnB,CAAA;AAED,mGAAmG;AACnG,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBvB,CAAA;AAED,mGAAmG;AACnG,eAAO,MAAM,aAAa,+GAQhB,CAAA"}

package/dist/server/schema.js

@@ -0,0 +1,175 @@
+import { moduleSchema } from '@kernhq/kernel';
+import { sql } from 'drizzle-orm';
+import { boolean, char, date, index, integer, jsonb, pgEnum, text, timestamp, uniqueIndex, uuid, } from 'drizzle-orm/pg-core';
+/**
+ * This module's tables, in its own Postgres schema.
+ *
+ * Two rules, neither optional:
+ *
+ * - every tenant table carries `workspace_id` and an index that starts with it;
+ * - every tenant table gets a row-level security policy, hand-written in the migration, because
+ *   drizzle-kit does not generate one. RLS is the last line — the API check is the first, and
+ *   somebody will eventually write a query that skips it.
+ */
+export const schema = moduleSchema('inventory');
+/** Local column factories, so the conventions stay in one place. */
+const id = () => uuid('id').primaryKey().default(sql `uuidv7()`);
+const ws = () => uuid('workspace_id').notNull();
+const ts = (name) => timestamp(name, { withTimezone: true, mode: 'date' });
+const created = () => ts('created_at').notNull().defaultNow();
+const updated = () => ts('updated_at').notNull().defaultNow();
+/**
+ * Asset lifecycle. Stored rather than derived because every list filter asks for it; every
+ * transition is written inside the same transaction as the row it derives from.
+ */
+export const assetStatus = pgEnum('asset_status', ['in_stock', 'assigned', 'under_repair', 'retired']);
+export const counters = schema.table('counters', 
+/** Per-workspace sequence sources (`asset_code`). Narrow on purpose: one row per key. */
+{
+    workspaceId: ws().primaryKey(),
+    key: text('key').primaryKey(),
+    value: integer('value').notNull(),
+});
+export const categories = schema.table('categories', {
+    id: id(),
+    workspaceId: ws(),
+    name: text('name').notNull(),
+    order: integer('order').notNull().default(0),
+    createdAt: created(),
+    updatedAt: updated(),
+}, (t) => [
+    uniqueIndex('inventory_categories_ws_name_uq').on(t.workspaceId, t.name),
+    index('inventory_categories_ws_idx').on(t.workspaceId, t.order),
+]);
+export const assets = schema.table('assets', {
+    id: id(),
+    workspaceId: ws(),
+    code: text('code').notNull(),
+    name: text('name').notNull(),
+    description: text('description').notNull().default(''),
+    categoryId: uuid('category_id'),
+    status: assetStatus('status').notNull().default('in_stock'),
+    /** Denormalized from `custody_periods`, which stays authoritative for history. */
+    custodianUserId: uuid('custodian_user_id'),
+    custodySince: ts('custody_since'),
+    serialNumber: text('serial_number'),
+    location: text('location'),
+    purchasedOn: date('purchased_on'),
+    purchasedFrom: text('purchased_from'),
+    priceMinor: integer('price_minor'),
+    currency: char('currency', { length: 3 }),
+    warrantyUntil: date('warranty_until'),
+    photoFileId: uuid('photo_file_id'),
+    createdAt: created(),
+    updatedAt: updated(),
+    archivedAt: ts('archived_at'),
+}, (t) => [
+    uniqueIndex('inventory_assets_ws_code_uq').on(t.workspaceId, t.code),
+    index('inventory_assets_ws_created_idx').on(t.workspaceId, t.createdAt),
+    index('inventory_assets_ws_status_idx').on(t.workspaceId, t.status),
+    index('inventory_assets_ws_category_idx').on(t.workspaceId, t.categoryId),
+    // The "what leaves warranty this month" scan, before a job makes it a widget's cheap query.
+    index('inventory_assets_ws_warranty_idx')
+        .on(t.workspaceId, t.warrantyUntil)
+        .where(sql `warranty_until is not null`),
+]);
+/**
+ * Workspace-defined extra fields, copied from tracker's `field_defs` (which cannot be shared:
+ * cross-schema joins are what the module boundary exists to prevent). The `key` **is** the key a
+ * value lives under in `assets.custom`, hence unique per workspace whatever the category scope.
+ */
+export const fieldDefs = schema.table('field_defs', {
+    id: id(),
+    workspaceId: ws(),
+    categoryId: uuid('category_id'),
+    key: text('key').notNull(),
+    name: text('name').notNull(),
+    description: text('description'),
+    type: text('type').notNull(), // text | number | date | select | multiselect | checkbox | url
+    options: jsonb('options').$type(),
+    defaultValue: jsonb('default_value'),
+    required: boolean('required').notNull().default(false),
+    searchable: boolean('searchable').notNull().default(false),
+    showInList: boolean('show_in_list').notNull().default(false),
+    order: integer('order').notNull().default(0),
+    archivedAt: ts('archived_at'),
+    createdAt: created(),
+    updatedAt: updated(),
+}, (t) => [
+    uniqueIndex('inventory_field_defs_ws_key_uq').on(t.workspaceId, t.key),
+    index('inventory_field_defs_ws_idx').on(t.workspaceId, t.order),
+]);
+/**
+ * Custody over time. Never updated in place — a change closes the open row and inserts a new one,
+ * the way HR keeps employments. The exclusion constraint (hand-written migration) makes two open
+ * periods for one asset impossible at the database level, not merely unlikely in the service.
+ */
+export const custodyPeriods = schema.table('custody_periods', {
+    id: id(),
+    workspaceId: ws(),
+    assetId: uuid('asset_id').notNull(),
+    userId: uuid('user_id').notNull(),
+    note: text('note'),
+    effectiveFrom: ts('effective_from').notNull().defaultNow(),
+    effectiveTo: ts('effective_to'),
+    createdBy: uuid('created_by'),
+    createdAt: created(),
+}, (t) => [index('inventory_custody_ws_asset_idx').on(t.workspaceId, t.assetId, t.effectiveFrom)]);
+/**
+ * Append-only. What changed, when, by whom — the timeline an asset page renders and the answer to
+ * "who had this laptop before me". Written inside the caller's transaction; nothing edits or
+ * deletes rows here, ever.
+ */
+export const assetHistory = schema.table('asset_history', {
+    id: id(),
+    workspaceId: ws(),
+    assetId: uuid('asset_id').notNull(),
+    actorId: uuid('actor_id'),
+    action: text('action').notNull(), // created | updated | transferred | returned | repair_logged | repair_completed | attachment_added | retired | restored
+    changes: jsonb('changes').$type(),
+    data: jsonb('data'),
+    occurredAt: created(),
+}, (t) => [index('inventory_asset_history_asset_idx').on(t.workspaceId, t.assetId, t.occurredAt)]);
+export const repairs = schema.table('repairs', {
+    id: id(),
+    workspaceId: ws(),
+    assetId: uuid('asset_id').notNull(),
+    summary: text('summary').notNull(),
+    detail: text('detail'),
+    vendor: text('vendor'),
+    costMinor: integer('cost_minor'),
+    currency: char('currency', { length: 3 }),
+    sentOn: date('sent_on').notNull(),
+    /** Null while the item is still away — also how `under_repair` is derived. */
+    returnedOn: date('returned_on'),
+    createdBy: uuid('created_by'),
+    createdAt: created(),
+    updatedAt: updated(),
+}, (t) => [index('inventory_repairs_ws_asset_idx').on(t.workspaceId, t.assetId, t.sentOn)]);
+/** Bytes live in core object storage via `uploadFile`; this only records that an asset has one. */
+export const attachments = schema.table('attachments', {
+    id: id(),
+    workspaceId: ws(),
+    assetId: uuid('asset_id').notNull(),
+    repairId: uuid('repair_id'),
+    fileId: uuid('file_id').notNull(),
+    name: text('name').notNull(),
+    mimeType: text('mime_type'),
+    size: integer('size'),
+    uploadedBy: uuid('uploaded_by'),
+    createdAt: created(),
+}, (t) => [
+    uniqueIndex('inventory_attachments_asset_file_uq').on(t.assetId, t.fileId),
+    index('inventory_attachments_ws_asset_idx').on(t.workspaceId, t.assetId, t.createdAt),
+]);
+/** Every tenant table, so the RLS migration can be checked against one list rather than memory. */
+export const TENANT_TABLES = [
+    'categories',
+    'assets',
+    'field_defs',
+    'custody_periods',
+    'asset_history',
+    'repairs',
+    'attachments',
+];
+//# sourceMappingURL=schema.js.map

package/dist/server/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/server/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,EACL,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,OAAO,EACP,KAAK,EACL,MAAM,EACN,IAAI,EACJ,SAAS,EACT,WAAW,EACX,IAAI,GACL,MAAM,qBAAqB,CAAA;AAE5B;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAA;AAE/C,oEAAoE;AACpE,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,UAAU,CAAC,CAAA;AAC/D,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAA;AAC/C,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;AAClF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,CAAA;AAC7D,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,CAAA;AAE7D;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAA;AAEtG,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAClC,UAAU;AACV,yFAAyF;AACzF;IACE,WAAW,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE;IAC9B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE;IAC7B,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;CAClC,CACF,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CACpC,YAAY,EACZ;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,SAAS,EAAE,OAAO,EAAE;IACpB,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC;IACxE,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC;CAChE,CACF,CAAA;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAChC,QAAQ,EACR;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3D,kFAAkF;IAClF,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,YAAY,EAAE,EAAE,CAAC,eAAe,CAAC;IACjC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;IACnC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;IAC1B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACrC,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC;IAClC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACzC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACrC,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC;IAClC,SAAS,EAAE,OAAO,EAAE;IACpB,SAAS,EAAE,OAAO,EAAE;IACpB,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC;CAC9B,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC;IACpE,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC;IACvE,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;IACnE,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IACzE,4FAA4F;IAC5F,KAAK,CAAC,kCAAkC,CAAC;SACtC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,aAAa,CAAC;SAClC,KAAK,CAAC,GAAG,CAAA,4BAA4B,CAAC;CAC1C,CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CACnC,YAAY,EACZ;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;IAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;IAChC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,+DAA+D;IAC7F,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAY;IAC3C,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC;IACpC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtD,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1D,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5D,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC;IAC7B,SAAS,EAAE,OAAO,EAAE;IACpB,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC;IACtE,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC;CAChE,CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CACxC,iBAAiB,EACjB;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;IAClB,aAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IAC1D,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAC/F,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CACtC,eAAe,EACf;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IACzB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,wHAAwH;IAC1J,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAmD;IAClF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,EAAE;CACtB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAC/F,CAAA;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CACjC,SAAS,EACT;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;IACtB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC;IAChC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACzC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,8EAA8E;IAC9E,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,OAAO,EAAE;IACpB,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CACxF,CAAA;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CACrC,aAAa,EACb;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;IACrB,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,qCAAqC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;IAC1E,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;CACtF,CACF,CAAA;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,iBAAiB;IACjB,eAAe;IACf,SAAS;IACT,aAAa;CACL,CAAA"}

package/drizzle.config.ts

@@ -0,0 +1,8 @@
+import { defineConfig } from 'drizzle-kit'
+// Generates SQL migrations for this module's own schema. Run: pnpm db:generate
+export default defineConfig({
+  dialect: 'postgresql',
+  schema: './src/server/schema.ts',
+  out: './migrations',
+  schemaFilter: ['mod_inventory'],
+})

package/migrations/0000_init.sql

@@ -0,0 +1,129 @@
+-- `create schema if not exists` matters: the kernel creates `mod_inventory` before running these, so
+-- the bare form fails on boot.
+CREATE SCHEMA IF NOT EXISTS "mod_inventory";
+--> statement-breakpoint
+CREATE TYPE "public"."asset_status" AS ENUM('in_stock', 'assigned', 'under_repair', 'retired');--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "mod_inventory"."asset_history" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"asset_id" uuid NOT NULL,
+	"actor_id" uuid,
+	"action" text NOT NULL,
+	"changes" jsonb,
+	"data" jsonb,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "mod_inventory"."assets" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"code" text NOT NULL,
+	"name" text NOT NULL,
+	"description" text DEFAULT '' NOT NULL,
+	"category_id" uuid,
+	"status" "asset_status" DEFAULT 'in_stock' NOT NULL,
+	"custodian_user_id" uuid,
+	"custody_since" timestamp with time zone,
+	"serial_number" text,
+	"location" text,
+	"purchased_on" date,
+	"purchased_from" text,
+	"price_minor" integer,
+	"currency" char(3),
+	"warranty_until" date,
+	"photo_file_id" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"archived_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "mod_inventory"."attachments" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"asset_id" uuid NOT NULL,
+	"repair_id" uuid,
+	"file_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"mime_type" text,
+	"size" integer,
+	"uploaded_by" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "mod_inventory"."categories" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"name" text NOT NULL,
+	"order" integer DEFAULT 0 NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "mod_inventory"."counters" (
+	"workspace_id" uuid NOT NULL,
+	"key" text NOT NULL,
+	"value" integer NOT NULL,
+	CONSTRAINT "counters_workspace_id_key_pk" PRIMARY KEY("workspace_id","key")
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "mod_inventory"."custody_periods" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"asset_id" uuid NOT NULL,
+	"user_id" uuid NOT NULL,
+	"note" text,
+	"effective_from" timestamp with time zone DEFAULT now() NOT NULL,
+	"effective_to" timestamp with time zone,
+	"created_by" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "mod_inventory"."field_defs" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"category_id" uuid,
+	"key" text NOT NULL,
+	"name" text NOT NULL,
+	"description" text,
+	"type" text NOT NULL,
+	"options" jsonb,
+	"default_value" jsonb,
+	"required" boolean DEFAULT false NOT NULL,
+	"searchable" boolean DEFAULT false NOT NULL,
+	"show_in_list" boolean DEFAULT false NOT NULL,
+	"order" integer DEFAULT 0 NOT NULL,
+	"archived_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "mod_inventory"."repairs" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"asset_id" uuid NOT NULL,
+	"summary" text NOT NULL,
+	"detail" text,
+	"vendor" text,
+	"cost_minor" integer,
+	"currency" char(3),
+	"sent_on" date NOT NULL,
+	"returned_on" date,
+	"created_by" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "inventory_asset_history_asset_idx" ON "mod_inventory"."asset_history" USING btree ("workspace_id","asset_id","created_at");--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "inventory_assets_ws_code_uq" ON "mod_inventory"."assets" USING btree ("workspace_id","code");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "inventory_assets_ws_created_idx" ON "mod_inventory"."assets" USING btree ("workspace_id","created_at");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "inventory_assets_ws_status_idx" ON "mod_inventory"."assets" USING btree ("workspace_id","status");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "inventory_assets_ws_category_idx" ON "mod_inventory"."assets" USING btree ("workspace_id","category_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "inventory_assets_ws_warranty_idx" ON "mod_inventory"."assets" USING btree ("workspace_id","warranty_until") WHERE warranty_until is not null;--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "inventory_attachments_asset_file_uq" ON "mod_inventory"."attachments" USING btree ("asset_id","file_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "inventory_attachments_ws_asset_idx" ON "mod_inventory"."attachments" USING btree ("workspace_id","asset_id","created_at");--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "inventory_categories_ws_name_uq" ON "mod_inventory"."categories" USING btree ("workspace_id","name");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "inventory_categories_ws_idx" ON "mod_inventory"."categories" USING btree ("workspace_id","order");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "inventory_custody_ws_asset_idx" ON "mod_inventory"."custody_periods" USING btree ("workspace_id","asset_id","effective_from");--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "inventory_field_defs_ws_key_uq" ON "mod_inventory"."field_defs" USING btree ("workspace_id","key");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "inventory_field_defs_ws_idx" ON "mod_inventory"."field_defs" USING btree ("workspace_id","order");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "inventory_repairs_ws_asset_idx" ON "mod_inventory"."repairs" USING btree ("workspace_id","asset_id","sent_on");

package/migrations/0001_rls.sql

@@ -0,0 +1,62 @@
+-- Row-level security. Hand-written, because drizzle-kit does not generate it.
+--
+-- This is the last line, not the first: the API already checks membership and permission. It exists
+-- for the query that skips them — a job, a report, a mistake — and for anyone who reaches the
+-- database another way. A tenant table without a policy is simply readable.
+--
+-- `@kernhq/kernel` exports `rlsPolicySql('mod_inventory', '<table>')`, which emits exactly this
+-- block per table. Superusers bypass RLS, so a database owned by one will pass a test that proves
+-- nothing: run the application as a plain role.
+
+alter table "mod_inventory"."categories" enable row level security;--> statement-breakpoint
+alter table "mod_inventory"."categories" force row level security;--> statement-breakpoint
+create policy "categories_ws_isolation" on "mod_inventory"."categories"
+  using (workspace_id::text = current_setting('app.workspace_id', true))
+  with check (workspace_id::text = current_setting('app.workspace_id', true));--> statement-breakpoint
+
+alter table "mod_inventory"."assets" enable row level security;--> statement-breakpoint
+alter table "mod_inventory"."assets" force row level security;--> statement-breakpoint
+create policy "assets_ws_isolation" on "mod_inventory"."assets"
+  using (workspace_id::text = current_setting('app.workspace_id', true))
+  with check (workspace_id::text = current_setting('app.workspace_id', true));--> statement-breakpoint
+
+alter table "mod_inventory"."field_defs" enable row level security;--> statement-breakpoint
+alter table "mod_inventory"."field_defs" force row level security;--> statement-breakpoint
+create policy "field_defs_ws_isolation" on "mod_inventory"."field_defs"
+  using (workspace_id::text = current_setting('app.workspace_id', true))
+  with check (workspace_id::text = current_setting('app.workspace_id', true));--> statement-breakpoint
+
+alter table "mod_inventory"."custody_periods" enable row level security;--> statement-breakpoint
+alter table "mod_inventory"."custody_periods" force row level security;--> statement-breakpoint
+create policy "custody_periods_ws_isolation" on "mod_inventory"."custody_periods"
+  using (workspace_id::text = current_setting('app.workspace_id', true))
+  with check (workspace_id::text = current_setting('app.workspace_id', true));--> statement-breakpoint
+
+alter table "mod_inventory"."asset_history" enable row level security;--> statement-breakpoint
+alter table "mod_inventory"."asset_history" force row level security;--> statement-breakpoint
+create policy "asset_history_ws_isolation" on "mod_inventory"."asset_history"
+  using (workspace_id::text = current_setting('app.workspace_id', true))
+  with check (workspace_id::text = current_setting('app.workspace_id', true));--> statement-breakpoint
+
+alter table "mod_inventory"."repairs" enable row level security;--> statement-breakpoint
+alter table "mod_inventory"."repairs" force row level security;--> statement-breakpoint
+create policy "repairs_ws_isolation" on "mod_inventory"."repairs"
+  using (workspace_id::text = current_setting('app.workspace_id', true))
+  with check (workspace_id::text = current_setting('app.workspace_id', true));--> statement-breakpoint
+
+alter table "mod_inventory"."attachments" enable row level security;--> statement-breakpoint
+alter table "mod_inventory"."attachments" force row level security;--> statement-breakpoint
+create policy "attachments_ws_isolation" on "mod_inventory"."attachments"
+  using (workspace_id::text = current_setting('app.workspace_id', true))
+  with check (workspace_id::text = current_setting('app.workspace_id', true));
+
+-- Custody is effective-dated: a change closes the open row and inserts a new one. This constraint
+-- is what makes two overlapping custody periods for one asset impossible at the database level —
+-- two concurrent transfers cannot both win. `effective_to` null means "still open", which tstzrange
+-- treats as unbounded, so an open period conflicts with everything that would follow it.
+alter table "mod_inventory"."custody_periods"
+  add constraint "inventory_custody_no_overlap"
+  exclude using gist (
+    asset_id with =,
+    tstzrange(effective_from, effective_to, '[)') with &&
+  );