@kernhq/module-inventory 0.1.1 → 0.2.0

package/dist/server/router.js

@@ -0,0 +1,83 @@
+import { defineModule, defineServerModule, packageVersion, requires, workspaceScoped, } from '@kernhq/kernel';
+import { implement } from '@orpc/server';
+import { inventoryContract, inventoryEvents, MODULE_ID } from '../contract/index.js';
+import { toAsset } from './services/assets.js';
+import { inventoryServices } from './services/index.js';
+/**
+ * oRPC router for `/api/inventory`.
+ *
+ * Deliberately thin: it opens the workspace-bound transaction and hands straight over to a service,
+ * which is where the logic lives. Kept apart from `index.ts` so `module.test.ts` can walk it as data
+ * without booting a kernel.
+ *
+ * Two middlewares on every procedure, and the test fails if either is missing: `workspaceScoped`
+ * (a real membership, and the module switched on for that workspace) and `requires` (the permission
+ * this particular call needs). A capability adds a third, between them.
+ */
+export { defineModule, defineServerModule, packageVersion };
+const os = implement(inventoryContract).$context();
+export function inventoryRouter(kernel) {
+    const svc = inventoryServices(kernel);
+    const scoped = os.use(workspaceScoped(MODULE_ID));
+    /**
+     * Everything a write announces, once the transaction that wrote it has actually committed.
+     *
+     * Three things, and all three are after the commit on purpose: the core activity feed's copy of
+     * the history row, the event for whatever reacts later, and the realtime change that redraws a
+     * screen somebody is looking at now. A mutation that skips them leaves the product believing the
+     * old answer; a mutation that fires them *inside* the transaction tells the rest of the instance
+     * about a row a rollback then took away, which is worse — it cannot be retracted.
+     */
+    const announce = async (workspaceId, written, event, op, actorId) => {
+        const assetId = written.row.id;
+        if (written.activity)
+            await svc.notify.activity(written.activity);
+        await kernel.emit(event, { assetId, workspaceId }, { workspaceId, actorId: actorId ?? undefined });
+        await svc.notify.change(workspaceId, 'asset', assetId, op);
+    };
+    /** Every handler is this: a workspace-bound transaction, tagged with who is asking, and a service. */
+    const run = (context, workspaceId, fn) => kernel.database.withWorkspace(workspaceId, fn, { userId: context.principal.userId });
+    return os.router({
+        assets: {
+            list: scoped.assets.list
+                .use(requires('inventory.asset.view'))
+                .handler(({ input, context }) => run(context, input.workspaceId, (tx) => svc.assets.list(tx, input))),
+            get: scoped.assets.get
+                .use(requires('inventory.asset.view'))
+                .handler(({ input, context }) => run(context, input.workspaceId, async (tx) => toAsset(await svc.assets.get(tx, input.workspaceId, input.assetId)))),
+            create: scoped.assets.create
+                .use(requires('inventory.asset.manage'))
+                .handler(async ({ input, context }) => {
+                const actorId = context.principal.userId;
+                // Module settings are read *before* the transaction opens. They come from core over the
+                // broker, and awaiting that inside the transaction holds a pooled connection and the
+                // counter row lock across a network call to another service.
+                const format = await svc.assets.codeFormat(input.workspaceId);
+                const written = await run(context, input.workspaceId, (tx) => svc.assets.create(tx, input.workspaceId, actorId, input, format));
+                await announce(input.workspaceId, written, inventoryEvents.assetCreated, 'created', actorId);
+                return toAsset(written.row);
+            }),
+            update: scoped.assets.update
+                .use(requires('inventory.asset.manage'))
+                .handler(async ({ input, context }) => {
+                const actorId = context.principal.userId;
+                const written = await run(context, input.workspaceId, (tx) => svc.assets.update(tx, input.workspaceId, actorId, input.assetId, input));
+                await announce(input.workspaceId, written, inventoryEvents.assetUpdated, 'updated', actorId);
+                return toAsset(written.row);
+            }),
+            archive: scoped.assets.archive
+                .use(requires('inventory.asset.manage'))
+                .handler(async ({ input, context }) => {
+                const actorId = context.principal.userId;
+                const written = await run(context, input.workspaceId, (tx) => svc.assets.archive(tx, input.workspaceId, actorId, input.assetId, input.archived));
+                // This procedure is the restore path too, and it used to announce `archived` either way —
+                // telling every subscriber that a restored item had just been retired, while the module's
+                // own history row beside it said `restored`.
+                const event = input.archived ? inventoryEvents.assetArchived : inventoryEvents.assetRestored;
+                await announce(input.workspaceId, written, event, 'updated', actorId);
+                return toAsset(written.row);
+            }),
+        },
+    });
+}
+//# sourceMappingURL=router.js.map

package/dist/server/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/server/router.ts"],"names":[],"mappings":"AACA,OAAO,EACL,YAAY,EACZ,kBAAkB,EAElB,cAAc,EAEd,QAAQ,EAER,eAAe,GAChB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACpF,OAAO,EAAE,OAAO,EAAgB,MAAM,sBAAsB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEvD;;;;;;;;;;GAUG;AACH,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAA;AAE3D,MAAM,EAAE,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAkB,CAAA;AAElE,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAA;IAEjD;;;;;;;;OAQG;IACH,MAAM,QAAQ,GAAG,KAAK,EACpB,WAAwB,EACxB,OAAgB,EAChB,KAA6D,EAC7D,EAAqC,EACrC,OAAsB,EACtB,EAAE;QACF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAA;QAC9B,IAAI,OAAO,CAAC,QAAQ;YAAE,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACjE,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC,CAAA;QAClG,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;IAC5D,CAAC,CAAA;IAED,sGAAsG;IACtG,MAAM,GAAG,GAAG,CAAI,OAAuB,EAAE,WAAmB,EAAE,EAA0B,EAAc,EAAE,CACtG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAA;IAEtF,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;iBACrB,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;iBACrC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;YAEvG,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;iBACnB,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;iBACrC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAC9B,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAC3C,OAAO,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CACpE,CACF;YAEH,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;iBACzB,GAAG,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;iBACvC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACpC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAA;gBACxC,wFAAwF;gBACxF,qFAAqF;gBACrF,6DAA6D;gBAC7D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;gBAC7D,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAC3D,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CACjE,CAAA;gBACD,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,eAAe,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;gBAC5F,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAC7B,CAAC,CAAC;YAEJ,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;iBACzB,GAAG,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;iBACvC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACpC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAA;gBACxC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAC3D,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CACxE,CAAA;gBACD,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,eAAe,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;gBAC5F,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAC7B,CAAC,CAAC;YAEJ,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;iBAC3B,GAAG,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;iBACvC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACpC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAA;gBACxC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAC3D,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAClF,CAAA;gBACD,0FAA0F;gBAC1F,0FAA0F;gBAC1F,6CAA6C;gBAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAA;gBAC5F,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;gBACrE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAC7B,CAAC,CAAC;SACL;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/server/schema.d.ts

@@ -9,11 +9,6 @@
  *   somebody will eventually write a query that skips it.
  */
 export declare const schema: import("drizzle-orm/pg-core").PgSchema<string>;
-/**
- * Asset lifecycle. Stored rather than derived because every list filter asks for it; every
- * transition is written inside the same transaction as the row it derives from.
- */
-export declare const assetStatus: import("drizzle-orm/pg-core").PgEnum<["in_stock", "assigned", "under_repair", "retired"]>;
 export declare const counters: import("drizzle-orm/pg-core").PgTableWithColumns<{
     name: "counters";
     schema: string;
@@ -27,7 +22,7 @@ export declare const counters: import("drizzle-orm/pg-core").PgTableWithColumns<
             driverParam: string;
             notNull: true;
             hasDefault: false;
-            isPrimaryKey: true;
+            isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
             enumValues: undefined;
@@ -44,7 +39,7 @@ export declare const counters: import("drizzle-orm/pg-core").PgTableWithColumns<
             driverParam: string;
             notNull: true;
             hasDefault: false;
-            isPrimaryKey: true;
+            isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
             enumValues: [string, ...string[]];
@@ -291,15 +286,15 @@ export declare const assets: import("drizzle-orm/pg-core").PgTableWithColumns<{
             name: "status";
             tableName: "assets";
             dataType: "string";
-            columnType: "PgEnumColumn";
-            data: "in_stock" | "assigned" | "under_repair" | "retired";
+            columnType: "PgText";
+            data: string;
             driverParam: string;
             notNull: true;
             hasDefault: true;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: ["in_stock", "assigned", "under_repair", "retired"];
+            enumValues: [string, ...string[]];
             baseColumn: never;
             identity: undefined;
             generated: undefined;
@@ -476,6 +471,25 @@ export declare const assets: import("drizzle-orm/pg-core").PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        custom: import("drizzle-orm/pg-core").PgColumn<{
+            name: "custom";
+            tableName: "assets";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: Record<string, unknown>;
+            driverParam: unknown;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: Record<string, unknown>;
+        }>;
         createdAt: import("drizzle-orm/pg-core").PgColumn<{
             name: string;
             tableName: "assets";
@@ -1548,5 +1562,5 @@ export declare const attachments: import("drizzle-orm/pg-core").PgTableWithColum
     dialect: "pg";
 }>;
 /** Every tenant table, so the RLS migration can be checked against one list rather than memory. */
-export declare const TENANT_TABLES: readonly ["categories", "assets", "field_defs", "custody_periods", "asset_history", "repairs", "attachments"];
+export declare const TENANT_TABLES: readonly ["counters", "categories", "assets", "field_defs", "custody_periods", "asset_history", "repairs", "attachments"];
 //# sourceMappingURL=schema.d.ts.map

package/dist/server/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/server/schema.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;GASG;AACH,eAAO,MAAM,MAAM,gDAA4B,CAAA;AAS/C;;;GAGG;AACH,eAAO,MAAM,WAAW,2FAA8E,CAAA;AAEtG,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQpB,CAAA;AAED,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EActB,CAAA;AAED,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmClB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwBrB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAc1B,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAQoB,MAAM;sBAAQ,OAAO;oBAAM,OAAO;;;;;;;;;;;;;;uBAAlC,MAAM;sBAAQ,OAAO;oBAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAK9E,CAAA;AAED,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBnB,CAAA;AAED,mGAAmG;AACnG,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBvB,CAAA;AAED,mGAAmG;AACnG,eAAO,MAAM,aAAa,+GAQhB,CAAA"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/server/schema.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;GASG;AACH,eAAO,MAAM,MAAM,gDAA4B,CAAA;AAS/C,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBpB,CAAA;AAED,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EActB,CAAA;AAED,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4ClB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwBrB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAc1B,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAQoB,MAAM;sBAAQ,OAAO;oBAAM,OAAO;;;;;;;;;;;;;;uBAAlC,MAAM;sBAAQ,OAAO;oBAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAK9E,CAAA;AAED,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBnB,CAAA;AAED,mGAAmG;AACnG,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBvB,CAAA;AAED,mGAAmG;AACnG,eAAO,MAAM,aAAa,2HAahB,CAAA"}

package/dist/server/schema.js

@@ -1,6 +1,6 @@
 import { moduleSchema } from '@kernhq/kernel';
 import { sql } from 'drizzle-orm';
-import { boolean, char, date, index, integer, jsonb, pgEnum, text, timestamp, uniqueIndex, uuid, } from 'drizzle-orm/pg-core';
+import { boolean, char, date, index, integer, jsonb, primaryKey, text, timestamp, uniqueIndex, uuid, } from 'drizzle-orm/pg-core';
 /**
  * This module's tables, in its own Postgres schema.
  *
@@ -18,18 +18,22 @@ const ws = () => uuid('workspace_id').notNull();
 const ts = (name) => timestamp(name, { withTimezone: true, mode: 'date' });
 const created = () => ts('created_at').notNull().defaultNow();
 const updated = () => ts('updated_at').notNull().defaultNow();
-/**
- * Asset lifecycle. Stored rather than derived because every list filter asks for it; every
- * transition is written inside the same transaction as the row it derives from.
- */
-export const assetStatus = pgEnum('asset_status', ['in_stock', 'assigned', 'under_repair', 'retired']);
 export const counters = schema.table('counters', 
 /** Per-workspace sequence sources (`asset_code`). Narrow on purpose: one row per key. */
 {
-    workspaceId: ws().primaryKey(),
-    key: text('key').primaryKey(),
+    workspaceId: ws(),
+    key: text('key').notNull(),
     value: integer('value').notNull(),
-});
+}, 
+/**
+ * Composite, declared here rather than as two `.primaryKey()` columns.
+ *
+ * Column-level `.primaryKey()` twice reads like a compound key and is not one: drizzle emits
+ * `PRIMARY KEY` on both columns and Postgres refuses the table outright — "multiple primary keys
+ * for table are not allowed", SQLSTATE 42P16. The module's migration is the first thing the
+ * kernel runs, so the failure is not a broken table but a service that will not boot.
+ */
+(t) => [primaryKey({ columns: [t.workspaceId, t.key] })]);
 export const categories = schema.table('categories', {
     id: id(),
     workspaceId: ws(),
@@ -48,7 +52,10 @@ export const assets = schema.table('assets', {
     name: text('name').notNull(),
     description: text('description').notNull().default(''),
     categoryId: uuid('category_id'),
-    status: assetStatus('status').notNull().default('in_stock'),
+    /** `AssetStatus` in the contract. Text, not a pg enum: every other Kern module stores a
+     * status this way, and an enum named `asset_status` in `public` is a type this module
+     * leaves behind when it is removed. */
+    status: text('status').notNull().default('in_stock'),
     /** Denormalized from `custody_periods`, which stays authoritative for history. */
     custodianUserId: uuid('custodian_user_id'),
     custodySince: ts('custody_since'),
@@ -60,6 +67,8 @@ export const assets = schema.table('assets', {
     currency: char('currency', { length: 3 }),
     warrantyUntil: date('warranty_until'),
     photoFileId: uuid('photo_file_id'),
+    /** Values for this workspace's own `field_defs`, keyed by their `key`. */
+    custom: jsonb('custom').$type().notNull().default({}),
     createdAt: created(),
     updatedAt: updated(),
     archivedAt: ts('archived_at'),
@@ -68,6 +77,10 @@ export const assets = schema.table('assets', {
     index('inventory_assets_ws_created_idx').on(t.workspaceId, t.createdAt),
     index('inventory_assets_ws_status_idx').on(t.workspaceId, t.status),
     index('inventory_assets_ws_category_idx').on(t.workspaceId, t.categoryId),
+    // "What is Ada holding?" — asked by the person, by the offboarding hook, and by a widget.
+    index('inventory_assets_ws_custodian_idx')
+        .on(t.workspaceId, t.custodianUserId)
+        .where(sql `custodian_user_id is not null`),
     // The "what leaves warranty this month" scan, before a job makes it a widget's cheap query.
     index('inventory_assets_ws_warranty_idx')
         .on(t.workspaceId, t.warrantyUntil)
@@ -164,6 +177,11 @@ export const attachments = schema.table('attachments', {
 ]);
 /** Every tenant table, so the RLS migration can be checked against one list rather than memory. */
 export const TENANT_TABLES = [
+    // `counters` is a tenant table like any other: it carries `workspace_id`, so one workspace's
+    // asset-code sequence is readable to another without a policy. It was left out of this list —
+    // and therefore out of `0001_rls.sql` — because it holds no asset data, which is not the rule
+    // the file states at the top. Tracker's structurally identical `issue_counters` is covered.
+    'counters',
     'categories',
     'assets',
     'field_defs',

package/dist/server/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/server/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,EACL,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,OAAO,EACP,KAAK,EACL,MAAM,EACN,IAAI,EACJ,SAAS,EACT,WAAW,EACX,IAAI,GACL,MAAM,qBAAqB,CAAA;AAE5B;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAA;AAE/C,oEAAoE;AACpE,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,UAAU,CAAC,CAAA;AAC/D,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAA;AAC/C,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;AAClF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,CAAA;AAC7D,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,CAAA;AAE7D;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAA;AAEtG,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAClC,UAAU;AACV,yFAAyF;AACzF;IACE,WAAW,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE;IAC9B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE;IAC7B,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;CAClC,CACF,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CACpC,YAAY,EACZ;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,SAAS,EAAE,OAAO,EAAE;IACpB,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC;IACxE,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC;CAChE,CACF,CAAA;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAChC,QAAQ,EACR;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3D,kFAAkF;IAClF,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,YAAY,EAAE,EAAE,CAAC,eAAe,CAAC;IACjC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;IACnC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;IAC1B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACrC,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC;IAClC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACzC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACrC,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC;IAClC,SAAS,EAAE,OAAO,EAAE;IACpB,SAAS,EAAE,OAAO,EAAE;IACpB,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC;CAC9B,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC;IACpE,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC;IACvE,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;IACnE,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IACzE,4FAA4F;IAC5F,KAAK,CAAC,kCAAkC,CAAC;SACtC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,aAAa,CAAC;SAClC,KAAK,CAAC,GAAG,CAAA,4BAA4B,CAAC;CAC1C,CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CACnC,YAAY,EACZ;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;IAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;IAChC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,+DAA+D;IAC7F,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAY;IAC3C,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC;IACpC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtD,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1D,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5D,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC;IAC7B,SAAS,EAAE,OAAO,EAAE;IACpB,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC;IACtE,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC;CAChE,CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CACxC,iBAAiB,EACjB;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;IAClB,aAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IAC1D,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAC/F,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CACtC,eAAe,EACf;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IACzB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,wHAAwH;IAC1J,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAmD;IAClF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,EAAE;CACtB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAC/F,CAAA;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CACjC,SAAS,EACT;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;IACtB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC;IAChC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACzC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,8EAA8E;IAC9E,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,OAAO,EAAE;IACpB,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CACxF,CAAA;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CACrC,aAAa,EACb;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;IACrB,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,qCAAqC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;IAC1E,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;CACtF,CACF,CAAA;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,iBAAiB;IACjB,eAAe;IACf,SAAS;IACT,aAAa;CACL,CAAA"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/server/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,EACL,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,OAAO,EACP,KAAK,EACL,UAAU,EACV,IAAI,EACJ,SAAS,EACT,WAAW,EACX,IAAI,GACL,MAAM,qBAAqB,CAAA;AAE5B;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAA;AAE/C,oEAAoE;AACpE,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,UAAU,CAAC,CAAA;AAC/D,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAA;AAC/C,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;AAClF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,CAAA;AAC7D,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,CAAA;AAE7D,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAClC,UAAU;AACV,yFAAyF;AACzF;IACE,WAAW,EAAE,EAAE,EAAE;IACjB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;IAC1B,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;CAClC;AACD;;;;;;;GAOG;AACH,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CACzD,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CACpC,YAAY,EACZ;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,SAAS,EAAE,OAAO,EAAE;IACpB,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC;IACxE,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC;CAChE,CACF,CAAA;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAChC,QAAQ,EACR;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B;;2CAEuC;IACvC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;IACpD,kFAAkF;IAClF,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,YAAY,EAAE,EAAE,CAAC,eAAe,CAAC;IACjC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;IACnC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;IAC1B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACrC,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC;IAClC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACzC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACrC,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC;IAClC,0EAA0E;IAC1E,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,EAA2B,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9E,SAAS,EAAE,OAAO,EAAE;IACpB,SAAS,EAAE,OAAO,EAAE;IACpB,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC;CAC9B,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC;IACpE,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC;IACvE,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;IACnE,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IACzE,0FAA0F;IAC1F,KAAK,CAAC,mCAAmC,CAAC;SACvC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,eAAe,CAAC;SACpC,KAAK,CAAC,GAAG,CAAA,+BAA+B,CAAC;IAC5C,4FAA4F;IAC5F,KAAK,CAAC,kCAAkC,CAAC;SACtC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,aAAa,CAAC;SAClC,KAAK,CAAC,GAAG,CAAA,4BAA4B,CAAC;CAC1C,CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CACnC,YAAY,EACZ;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;IAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;IAChC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,+DAA+D;IAC7F,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAY;IAC3C,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC;IACpC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtD,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1D,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5D,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC;IAC7B,SAAS,EAAE,OAAO,EAAE;IACpB,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC;IACtE,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC;CAChE,CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CACxC,iBAAiB,EACjB;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;IAClB,aAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IAC1D,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAC/F,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CACtC,eAAe,EACf;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IACzB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,wHAAwH;IAC1J,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAmD;IAClF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,EAAE;CACtB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAC/F,CAAA;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CACjC,SAAS,EACT;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;IACtB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC;IAChC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACzC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,8EAA8E;IAC9E,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,OAAO,EAAE;IACpB,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CACxF,CAAA;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CACrC,aAAa,EACb;IACE,EAAE,EAAE,EAAE,EAAE;IACR,WAAW,EAAE,EAAE,EAAE;IACjB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;IACrB,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,SAAS,EAAE,OAAO,EAAE;CACrB,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,qCAAqC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;IAC1E,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;CACtF,CACF,CAAA;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,4FAA4F;IAC5F,UAAU;IACV,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,iBAAiB;IACjB,eAAe;IACf,SAAS;IACT,aAAa;CACL,CAAA"}

package/dist/server/services/assets.d.ts

@@ -0,0 +1,73 @@
+import { type Kernel, type Tx } from '@kernhq/kernel';
+import type { AssetCreateInput, Asset as AssetModel, AssetPatchInput, AssetSort } from '../../contract/models.js';
+import { assets } from '../schema.js';
+import type { HistoryInput, NotifyService } from './notify.js';
+type Row = typeof assets.$inferSelect;
+/**
+ * What a mutation wrote, and what may only leave the module once it has committed.
+ *
+ * `asset_history` is written inside the caller's transaction and is authoritative; the mirror of it
+ * in core's activity feed is not, and used to be fired off with `void` while the transaction was
+ * still open. A rollback then left the workspace's feed showing an event for an id that does not
+ * exist. Everything else this module announces — the event, the realtime change — already waits for
+ * the commit, so the activity record is handed back here and flushed beside them.
+ */
+export interface Written {
+    row: Row;
+    /** `null` when nothing happened worth recording, which is what an update that changed nothing is. */
+    activity: HistoryInput | null;
+}
+/** How this workspace spells an asset tag. Read before the transaction opens — see `codeFormat`. */
+export interface CodeFormat {
+    prefix: string;
+    pad: number;
+}
+/** The wire shape: drizzle gives Date objects for timestamps, the contract promises ISO strings. */
+export declare function toAsset(row: Row): AssetModel;
+export interface ListInput {
+    workspaceId: string;
+    limit: number;
+    cursor?: string;
+    q?: string;
+    categoryId?: string;
+    status?: string;
+    custodianUserId?: string;
+    archived: boolean;
+    sort: AssetSort;
+}
+export declare class AssetService {
+    private readonly kernel;
+    private readonly notify;
+    constructor(kernel: Kernel, notify: NotifyService);
+    /**
+     * How this workspace spells an asset tag.
+     *
+     * **Called before the transaction opens, never inside one.** `kernel.settings.module` is a
+     * `core.settings.getModule` call over the broker, and awaiting a remote service while holding a
+     * pooled connection *and* the counter row lock is two failures waiting: the pool starves under
+     * concurrent creates, and a create fails outright whenever core is briefly away — which is the
+     * one thing `NotifyService`'s own docblock says a mutation here must never do.
+     */
+    codeFormat(workspaceId: string): Promise<CodeFormat>;
+    /**
+     * The next asset tag for a workspace.
+     *
+     * One narrow row per workspace and key, incremented under the insert's conflict lock — two
+     * concurrent creates each read the value their own statement returned, so codes stay unique
+     * without a retry loop. `INV-0042`, because people say asset tags out loud. Nothing in here
+     * leaves the database, which is what keeps the lock short.
+     */
+    nextCode(tx: Tx, workspaceId: string, format: CodeFormat): Promise<string>;
+    list(tx: Tx, input: ListInput): Promise<{
+        items: AssetModel[];
+        nextCursor: string | null;
+    }>;
+    get(tx: Tx, workspaceId: string, assetId: string): Promise<Row>;
+    create(tx: Tx, workspaceId: string, actorId: string | null, input: AssetCreateInput, format: CodeFormat): Promise<Written>;
+    /** Fields a person edits directly, and therefore the fields the timeline reports a diff for. */
+    private static readonly EDITABLE;
+    update(tx: Tx, workspaceId: string, actorId: string | null, assetId: string, input: AssetPatchInput): Promise<Written>;
+    archive(tx: Tx, workspaceId: string, actorId: string | null, assetId: string, archived: boolean): Promise<Written>;
+}
+export {};
+//# sourceMappingURL=assets.d.ts.map

package/dist/server/services/assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../../src/server/services/assets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,MAAM,EAAE,KAAK,EAAE,EAAU,MAAM,gBAAgB,CAAA;AAGxE,OAAO,KAAK,EACV,gBAAgB,EAChB,KAAK,IAAI,UAAU,EACnB,eAAe,EACf,SAAS,EACV,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EAAE,MAAM,EAAY,MAAM,cAAc,CAAA;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE9D,KAAK,GAAG,GAAG,OAAO,MAAM,CAAC,YAAY,CAAA;AAErC;;;;;;;;GAQG;AACH,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,GAAG,CAAA;IACR,qGAAqG;IACrG,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAA;CAC9B;AAED,oGAAoG;AACpG,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,oGAAoG;AACpG,wBAAgB,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAwB5C;AAgED,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,CAAC,CAAC,EAAE,MAAM,CAAA;IACV,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,EAAE,OAAO,CAAA;IACjB,IAAI,EAAE,SAAS,CAAA;CAChB;AAED,qBAAa,YAAY;IAErB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa;IAGxC;;;;;;;;OAQG;IACG,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAK1D;;;;;;;OAOG;IACG,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAY1E,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAoE3F,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAS/D,MAAM,CACV,EAAE,EAAE,EAAE,EACN,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,OAAO,CAAC;IAyBnB,gGAAgG;IAChG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAYtB;IAEJ,MAAM,CACV,EAAE,EAAE,EAAE,EACN,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,OAAO,CAAC;IAuCb,OAAO,CACX,EAAE,EAAE,EAAE,EACN,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,OAAO,CAAC;CAgBpB"}

package/dist/server/services/assets.js

@@ -0,0 +1,261 @@
+import { KernError, uuidv7 } from '@kernhq/kernel';
+import { and, asc, desc, eq, ilike, isNull, or, sql } from 'drizzle-orm';
+import { alias } from 'drizzle-orm/pg-core';
+import { InventorySettings } from '../../contract/settings.js';
+import { assets, counters } from '../schema.js';
+/** The wire shape: drizzle gives Date objects for timestamps, the contract promises ISO strings. */
+export function toAsset(row) {
+    return {
+        id: row.id,
+        workspaceId: row.workspaceId,
+        code: row.code,
+        name: row.name,
+        description: row.description,
+        categoryId: row.categoryId,
+        status: row.status,
+        custodianUserId: row.custodianUserId,
+        custodySince: row.custodySince?.toISOString() ?? null,
+        serialNumber: row.serialNumber,
+        location: row.location,
+        purchasedOn: row.purchasedOn ?? null,
+        purchasedFrom: row.purchasedFrom,
+        priceMinor: row.priceMinor,
+        currency: row.currency,
+        warrantyUntil: row.warrantyUntil ?? null,
+        photoFileId: row.photoFileId,
+        custom: row.custom ?? {},
+        createdAt: row.createdAt.toISOString(),
+        updatedAt: row.updatedAt.toISOString(),
+        archivedAt: row.archivedAt?.toISOString() ?? null,
+    };
+}
+const encode = (b) => Buffer.from(JSON.stringify(b), 'utf8').toString('base64url');
+/** Cheap and total, and it runs before the value can reach a `::uuid` cast. */
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function decode(cursor, sort) {
+    const refuse = () => KernError.badRequest('That page marker is not one this list issued');
+    let parsed;
+    try {
+        parsed = JSON.parse(Buffer.from(cursor, 'base64url').toString('utf8'));
+    }
+    catch {
+        throw refuse();
+    }
+    if (typeof parsed?.i !== 'string' || !UUID.test(parsed.i))
+        throw refuse();
+    // One comparison covers both a sort this list never issues and a sort it issued under a
+    // *different* request. Either way the bookmark cannot be read against the ordering asked for,
+    // and pretending otherwise is what made "Load more" loop for ever.
+    if (parsed.s !== sort)
+        throw refuse();
+    return { i: parsed.i, s: sort };
+}
+/**
+ * `%`, `_` and `\` are pattern syntax to `ilike`, not text.
+ *
+ * Unescaped, a search for `50%` matched every row in the workspace and a search for `_hair` matched
+ * "Chair" — both of which read as a broken search rather than as a clever one. Escaped rather than
+ * stripped: somebody typing a per-cent sign means the character.
+ */
+const contains = (q) => `%${q.replace(/[\\%_]/g, '\\$&')}%`;
+/** Which column an ordering sorts on, for the list itself and for the bookmarked row alike. */
+const sortKey = (t, sort) => sort === 'name' ? t.name : sort === 'code' ? t.code : t.id;
+export class AssetService {
+    kernel;
+    notify;
+    constructor(kernel, notify) {
+        this.kernel = kernel;
+        this.notify = notify;
+    }
+    /**
+     * How this workspace spells an asset tag.
+     *
+     * **Called before the transaction opens, never inside one.** `kernel.settings.module` is a
+     * `core.settings.getModule` call over the broker, and awaiting a remote service while holding a
+     * pooled connection *and* the counter row lock is two failures waiting: the pool starves under
+     * concurrent creates, and a create fails outright whenever core is briefly away — which is the
+     * one thing `NotifyService`'s own docblock says a mutation here must never do.
+     */
+    async codeFormat(workspaceId) {
+        const settings = await this.kernel.settings.module(workspaceId, 'inventory', InventorySettings);
+        return { prefix: settings.assetCodePrefix, pad: settings.assetCodePad };
+    }
+    /**
+     * The next asset tag for a workspace.
+     *
+     * One narrow row per workspace and key, incremented under the insert's conflict lock — two
+     * concurrent creates each read the value their own statement returned, so codes stay unique
+     * without a retry loop. `INV-0042`, because people say asset tags out loud. Nothing in here
+     * leaves the database, which is what keeps the lock short.
+     */
+    async nextCode(tx, workspaceId, format) {
+        const [row] = await tx
+            .insert(counters)
+            .values({ workspaceId, key: 'asset_code', value: 1 })
+            .onConflictDoUpdate({
+            target: [counters.workspaceId, counters.key],
+            set: { value: sql `${counters.value} + 1` },
+        })
+            .returning();
+        return `${format.prefix}${String(row.value).padStart(format.pad, '0')}`;
+    }
+    async list(tx, input) {
+        const filters = [eq(assets.workspaceId, input.workspaceId)];
+        if (input.q) {
+            // A code is something somebody reads off a sticker; matching name, code and serial loosely
+            // matters more than word-splitting here. Full-text arrives with the core indexer.
+            const pattern = contains(input.q);
+            filters.push(or(ilike(assets.name, pattern), ilike(assets.code, pattern), ilike(sql `coalesce(${assets.serialNumber}, '')`, pattern)));
+        }
+        if (input.categoryId)
+            filters.push(eq(assets.categoryId, input.categoryId));
+        if (input.status)
+            filters.push(eq(assets.status, input.status));
+        if (input.custodianUserId)
+            filters.push(eq(assets.custodianUserId, input.custodianUserId));
+        if (!input.archived)
+            filters.push(isNull(assets.archivedAt));
+        // `recent` sorts by id rather than by `created_at`: ids are uuidv7, so they carry the clock,
+        // and one indexed unique column is a cheaper and unambiguous page boundary than a timestamp
+        // two rows can share. Ordered to the millisecond and no finer — the kernel's `uuidv7()` fills
+        // its last ten bytes from `randomUUID()` with no counter — so two assets created inside one
+        // millisecond come back in a stable but arbitrary order relative to each other. That is fine
+        // for a list and fatal for a test that expects creation order; see `inventory.int.test.ts`.
+        const column = sortKey(assets, input.sort);
+        const descending = input.sort === 'recent';
+        if (input.cursor) {
+            const mark = decode(input.cursor, input.sort);
+            /**
+             * The sort key comes back out of the bookmarked row rather than out of the cursor, which is
+             * what keeps the cursor small and stops it disagreeing with the row it names. Scoped by
+             * `workspace_id` as well as by id, so a cursor cannot be used to probe another workspace's
+             * ordering — this module reaches the database as a superuser in `core`, with RLS bypassed.
+             *
+             * A row deleted between two pages leaves the subquery empty, the row comparison NULL and the
+             * page empty: the list simply ends. That is deliberate, and preferred to a 400 — somebody
+             * else archiving a row while you read is an ordinary race, not a malformed request, and an
+             * error toast on "Load more" would be a worse answer than a list that has run out.
+             */
+            const marker = alias(assets, 'page_marker');
+            const bookmarked = tx
+                .select({ key: sortKey(marker, input.sort), id: marker.id })
+                .from(marker)
+                .where(and(eq(marker.id, mark.i), eq(marker.workspaceId, input.workspaceId)));
+            filters.push(descending
+                ? sql `(${column}, ${assets.id}) < (${bookmarked})`
+                : sql `(${column}, ${assets.id}) > (${bookmarked})`);
+        }
+        const order = descending ? [desc(column), desc(assets.id)] : [asc(column), asc(assets.id)];
+        const rows = await tx
+            .select()
+            .from(assets)
+            .where(and(...filters))
+            .orderBy(...order)
+            .limit(input.limit + 1);
+        const items = rows.slice(0, input.limit);
+        const last = items.at(-1);
+        const nextCursor = rows.length > input.limit && last ? encode({ i: last.id, s: input.sort }) : null;
+        return { items: items.map(toAsset), nextCursor };
+    }
+    async get(tx, workspaceId, assetId) {
+        const [row] = await tx
+            .select()
+            .from(assets)
+            .where(and(eq(assets.workspaceId, workspaceId), eq(assets.id, assetId)));
+        if (!row)
+            throw KernError.notFound('Asset');
+        return row;
+    }
+    async create(tx, workspaceId, actorId, input, format) {
+        const [row] = await tx
+            .insert(assets)
+            .values({
+            id: uuidv7(),
+            workspaceId,
+            code: await this.nextCode(tx, workspaceId, format),
+            name: input.name,
+            description: input.description,
+            categoryId: input.categoryId ?? null,
+            serialNumber: input.serialNumber ?? null,
+            location: input.location ?? null,
+            purchasedFrom: input.purchasedFrom ?? null,
+            purchasedOn: input.purchasedOn ?? null,
+            warrantyUntil: input.warrantyUntil ?? null,
+            priceMinor: input.priceMinor ?? null,
+            currency: input.currency ?? null,
+            photoFileId: input.photoFileId ?? null,
+        })
+            .returning();
+        const activity = { workspaceId, assetId: row.id, actorId, action: 'created' };
+        await this.notify.history(tx, activity);
+        return { row: row, activity };
+    }
+    /** Fields a person edits directly, and therefore the fields the timeline reports a diff for. */
+    static EDITABLE = [
+        'name',
+        'description',
+        'categoryId',
+        'serialNumber',
+        'location',
+        'purchasedFrom',
+        'purchasedOn',
+        'warrantyUntil',
+        'priceMinor',
+        'currency',
+        'photoFileId',
+    ];
+    async update(tx, workspaceId, actorId, assetId, input) {
+        const [prev] = await tx
+            .select()
+            .from(assets)
+            .where(and(eq(assets.workspaceId, workspaceId), eq(assets.id, assetId)))
+            .for('update');
+        if (!prev)
+            throw KernError.notFound('Asset');
+        // `undefined` means "not mentioned"; `null` means "clear it". Collapsing the two is how an
+        // edit of one field quietly wipes the others.
+        const patch = { updatedAt: new Date() };
+        for (const field of AssetService.EDITABLE) {
+            const value = input[field];
+            patch[field] = value !== undefined ? (value ?? null) : prev[field];
+        }
+        // Filtered by workspace as well as by id. The `select … for update` three statements up already
+        // carries the predicate, so this is not reachable today — but `core` connects as a superuser
+        // with RLS bypassed, which makes the predicate in the statement the only barrier there is. A
+        // barrier that holds only because of what another statement happens to do is not one.
+        const [row] = await tx
+            .update(assets)
+            .set(patch)
+            .where(and(eq(assets.workspaceId, workspaceId), eq(assets.id, assetId)))
+            .returning();
+        const iso = (v) => (v instanceof Date ? v.toISOString() : v) ?? null;
+        const changes = AssetService.EDITABLE.filter((f) => iso(patch[f]) !== iso(prev[f])).map((f) => ({
+            field: f,
+            from: iso(prev[f]),
+            to: iso(patch[f]),
+        }));
+        if (changes.length === 0)
+            return { row: row, activity: null };
+        const activity = { workspaceId, assetId, actorId, action: 'updated', changes };
+        await this.notify.history(tx, activity);
+        return { row: row, activity };
+    }
+    async archive(tx, workspaceId, actorId, assetId, archived) {
+        const [row] = await tx
+            .update(assets)
+            .set({ archivedAt: archived ? new Date() : null, updatedAt: new Date() })
+            .where(and(eq(assets.workspaceId, workspaceId), eq(assets.id, assetId)))
+            .returning();
+        if (!row)
+            throw KernError.notFound('Asset');
+        const activity = {
+            workspaceId,
+            assetId,
+            actorId,
+            action: archived ? 'retired' : 'restored',
+        };
+        await this.notify.history(tx, activity);
+        return { row, activity };
+    }
+}
+//# sourceMappingURL=assets.js.map