@kernhq/module-quire 0.2.0

package/dist/server/services/pages.js

@@ -0,0 +1,242 @@
+import { formatCollabDocument } from '@kernhq/contracts';
+import { KernError, uuidv7 } from '@kernhq/kernel';
+import { and, asc, desc, eq, inArray, isNotNull, isNull, lt, sql } from 'drizzle-orm';
+import { initialRank, rankBetween } from '../../client/rank.js';
+import { MODULE_ID } from '../../contract/index.js';
+import { pages } from '../schema.js';
+/** The name this page's prose is synchronised under, on the collab service. */
+export function documentNameOf(row) {
+    return formatCollabDocument({
+        workspaceId: row.workspaceId,
+        module: MODULE_ID,
+        type: 'page',
+        objectId: row.id,
+    });
+}
+export function toPage(row) {
+    return {
+        id: row.id,
+        workspaceId: row.workspaceId,
+        spaceId: row.spaceId,
+        parentId: row.parentId,
+        position: row.position,
+        kind: row.kind,
+        title: row.title,
+        icon: row.icon,
+        coverUrl: row.coverUrl,
+        publishedVersionId: row.publishedVersionId,
+        hasUnpublishedChanges: row.hasUnpublishedChanges,
+        createdBy: row.createdBy,
+        updatedBy: row.updatedBy,
+        createdAt: row.createdAt.toISOString(),
+        updatedAt: row.updatedAt.toISOString(),
+        archivedAt: row.archivedAt?.toISOString() ?? null,
+        deletedAt: row.deletedAt?.toISOString() ?? null,
+    };
+}
+export function quirePages(access) {
+    /** The position for a new or moved page landing behind `afterId` among `parentId`'s children. */
+    async function positionAfter(tx, workspaceId, spaceId, parentId, afterId, movingId) {
+        const siblings = await tx
+            .select({ id: pages.id, position: pages.position })
+            .from(pages)
+            .where(and(eq(pages.workspaceId, workspaceId), eq(pages.spaceId, spaceId), parentId === null ? isNull(pages.parentId) : eq(pages.parentId, parentId), isNull(pages.deletedAt)))
+            .orderBy(asc(pages.position));
+        const ordered = siblings.filter((s) => s.id !== movingId);
+        if (afterId === null)
+            return rankBetween(null, ordered[0]?.position ?? null);
+        const at = ordered.findIndex((s) => s.id === afterId);
+        if (at < 0)
+            throw KernError.badRequest('afterId is not a sibling at this position');
+        return rankBetween(ordered[at].position, ordered[at + 1]?.position ?? null);
+    }
+    return {
+        /**
+         * Every page in the space, flat, ordered so the caller can build the tree without sorting.
+         *
+         * One query for the whole space rather than one per expanded level: a wiki sidebar shows every
+         * level at once, and paging by level turns opening a space into a request per node.
+         */
+        async tree(tx, workspaceId, spaceId, includeArchived) {
+            const rows = await tx
+                .select({
+                id: pages.id,
+                parentId: pages.parentId,
+                position: pages.position,
+                kind: pages.kind,
+                title: pages.title,
+                icon: pages.icon,
+                archivedAt: pages.archivedAt,
+            })
+                .from(pages)
+                .where(and(eq(pages.workspaceId, workspaceId), eq(pages.spaceId, spaceId), isNull(pages.deletedAt), includeArchived ? undefined : isNull(pages.archivedAt)))
+                .orderBy(asc(pages.position));
+            const withChildren = new Set(rows.map((r) => r.parentId).filter((id) => id !== null));
+            return rows.map((r) => ({
+                id: r.id,
+                parentId: r.parentId,
+                position: r.position,
+                kind: r.kind,
+                title: r.title,
+                icon: r.icon,
+                hasChildren: withChildren.has(r.id),
+                archivedAt: r.archivedAt?.toISOString() ?? null,
+            }));
+        },
+        async get(tx, workspaceId, pageId) {
+            return toPage(await access.pageRow(tx, workspaceId, pageId));
+        },
+        async trash(tx, workspaceId, spaceId, limit, cursor) {
+            const rows = await tx
+                .select()
+                .from(pages)
+                .where(and(eq(pages.workspaceId, workspaceId), eq(pages.spaceId, spaceId), isNotNull(pages.deletedAt), cursor ? lt(pages.id, cursor) : undefined))
+                .orderBy(desc(pages.id))
+                .limit(limit + 1);
+            const items = rows.slice(0, limit).map(toPage);
+            return { items, nextCursor: rows.length > limit ? (items.at(-1)?.id ?? null) : null };
+        },
+        async create(tx, principal, workspaceId, input) {
+            if (input.parentId) {
+                const parent = await access.pageRow(tx, workspaceId, input.parentId);
+                if (parent.spaceId !== input.spaceId)
+                    throw KernError.badRequest('The parent page is in a different space');
+            }
+            const position = await positionAfter(tx, workspaceId, input.spaceId, input.parentId, input.afterId);
+            const [row] = await tx
+                .insert(pages)
+                .values({
+                id: uuidv7(),
+                workspaceId,
+                spaceId: input.spaceId,
+                parentId: input.parentId,
+                position,
+                kind: input.kind,
+                title: input.title,
+                icon: input.icon,
+                createdBy: principal.userId,
+                updatedBy: principal.userId,
+            })
+                .returning();
+            return toPage(row);
+        },
+        async update(tx, principal, workspaceId, pageId, patch) {
+            const [row] = await tx
+                .update(pages)
+                .set({ ...patch, updatedBy: principal.userId, updatedAt: new Date() })
+                .where(and(eq(pages.workspaceId, workspaceId), eq(pages.id, pageId), isNull(pages.deletedAt)))
+                .returning();
+            if (!row)
+                throw KernError.notFound('Page');
+            return toPage(row);
+        },
+        /**
+         * Reparent and reorder in one step.
+         *
+         * The cycle guard is the part worth reading: dragging a page onto one of its own descendants
+         * would otherwise produce a subtree with no root, invisible in every query that walks down from
+         * the top and impossible to reach or delete.
+         */
+        async move(tx, principal, workspaceId, pageId, parentId, afterId) {
+            const row = await access.pageRow(tx, workspaceId, pageId);
+            if (parentId === pageId)
+                throw KernError.badRequest('A page cannot be its own parent');
+            if (parentId) {
+                const parent = await access.pageRow(tx, workspaceId, parentId);
+                if (parent.spaceId !== row.spaceId)
+                    throw KernError.badRequest('A page can only move within its own space');
+                const parentScope = await access.scopeOf(tx, workspaceId, parentId);
+                if (parentScope.ancestorIds.includes(pageId))
+                    throw KernError.badRequest('A page cannot move inside one of its own descendants');
+            }
+            const position = await positionAfter(tx, workspaceId, row.spaceId, parentId, afterId, pageId);
+            const [moved] = await tx
+                .update(pages)
+                .set({ parentId, position, updatedBy: principal.userId, updatedAt: new Date() })
+                .where(and(eq(pages.workspaceId, workspaceId), eq(pages.id, pageId)))
+                .returning();
+            return toPage(moved);
+        },
+        async archive(tx, principal, workspaceId, pageId, archived) {
+            const [row] = await tx
+                .update(pages)
+                .set({
+                archivedAt: archived ? new Date() : null,
+                updatedBy: principal.userId,
+                updatedAt: new Date(),
+            })
+                .where(and(eq(pages.workspaceId, workspaceId), eq(pages.id, pageId), isNull(pages.deletedAt)))
+                .returning();
+            if (!row)
+                throw KernError.notFound('Page');
+            return toPage(row);
+        },
+        /** Every page in the subtree rooted at `pageId`, including it, nearest first. */
+        async subtreeIds(tx, workspaceId, pageId) {
+            const res = await tx.execute(sql `
+        with recursive subtree as (
+          select id from mod_quire.pages
+           where workspace_id = ${workspaceId}::uuid and id = ${pageId}::uuid
+          union all
+          select p.id from mod_quire.pages p
+            join subtree on p.parent_id = subtree.id
+           where p.workspace_id = ${workspaceId}::uuid
+        ) cycle id set looped using path
+        select id from subtree
+      `);
+            return res.rows.map((r) => r.id);
+        },
+        /** Into the trash, with every descendant — a page whose parent is gone is unreachable. */
+        async trashPage(tx, workspaceId, pageId) {
+            const ids = await this.subtreeIds(tx, workspaceId, pageId);
+            if (ids.length === 0)
+                throw KernError.notFound('Page');
+            await tx
+                .update(pages)
+                .set({ deletedAt: new Date(), updatedAt: new Date() })
+                .where(and(eq(pages.workspaceId, workspaceId), inArray(pages.id, ids)));
+            return { ids };
+        },
+        /**
+         * Back out of the trash. Only the page asked for and its descendants come back, and only if its
+         * parent is still there — restoring under a deleted parent would put it somewhere unreachable.
+         */
+        async restore(tx, workspaceId, pageId) {
+            const row = await access.pageRow(tx, workspaceId, pageId, { includeTrashed: true });
+            if (!row.deletedAt)
+                return toPage(row);
+            if (row.parentId) {
+                const [parent] = await tx
+                    .select({ deletedAt: pages.deletedAt })
+                    .from(pages)
+                    .where(and(eq(pages.workspaceId, workspaceId), eq(pages.id, row.parentId)))
+                    .limit(1);
+                // Restoring to the top of the space beats restoring into nothing.
+                if (!parent || parent.deletedAt) {
+                    const position = await positionAfter(tx, workspaceId, row.spaceId, null, null, pageId);
+                    await tx
+                        .update(pages)
+                        .set({ parentId: null, position })
+                        .where(and(eq(pages.workspaceId, workspaceId), eq(pages.id, pageId)));
+                }
+            }
+            const ids = await this.subtreeIds(tx, workspaceId, pageId);
+            await tx
+                .update(pages)
+                .set({ deletedAt: null, updatedAt: new Date() })
+                .where(and(eq(pages.workspaceId, workspaceId), inArray(pages.id, ids)));
+            return toPage(await access.pageRow(tx, workspaceId, pageId));
+        },
+        /** Gone. The caller is responsible for telling collab to forget the documents. */
+        async purge(tx, workspaceId, pageId) {
+            const ids = await this.subtreeIds(tx, workspaceId, pageId);
+            if (ids.length === 0)
+                throw KernError.notFound('Page');
+            await tx.delete(pages).where(and(eq(pages.workspaceId, workspaceId), inArray(pages.id, ids)));
+            return { ids };
+        },
+        /** The first page of a brand new space, so a space is never an empty screen. */
+        firstPosition: () => initialRank(),
+    };
+}
+//# sourceMappingURL=pages.js.map

package/dist/server/services/pages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pages.js","sourceRoot":"","sources":["../../../src/server/services/pages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAkB,MAAM,mBAAmB,CAAA;AACxE,OAAO,EAAE,SAAS,EAAW,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC3D,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AACrF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAE/D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AAKpC,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,GAAwC;IACrE,OAAO,oBAAoB,CAAC;QAC1B,WAAW,EAAE,GAAG,CAAC,WAAoB;QACrC,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,GAAG,CAAC,EAAE;KACjB,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAY;IACjC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,GAAG,CAAC,WAAkC;QACnD,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,IAAoB;QAC9B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;QAChD,SAAS,EAAE,GAAG,CAAC,SAA8B;QAC7C,SAAS,EAAE,GAAG,CAAC,SAA8B;QAC7C,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;QACjD,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;KAChD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,iGAAiG;IACjG,KAAK,UAAU,aAAa,CAC1B,EAAM,EACN,WAAmB,EACnB,OAAe,EACf,QAAuB,EACvB,OAAsB,EACtB,QAAiB;QAEjB,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;aAClD,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAClC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,EAC1B,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACzE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CACxB,CACF;aACA,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC/B,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAA;QACzD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAA;QAC5E,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAA;QACrD,IAAI,EAAE,GAAG,CAAC;YAAE,MAAM,SAAS,CAAC,UAAU,CAAC,2CAA2C,CAAC,CAAA;QACnF,OAAO,WAAW,CAAC,OAAO,CAAC,EAAE,CAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAA;IAC9E,CAAC;IAED,OAAO;QACL;;;;;WAKG;QACH,KAAK,CAAC,IAAI,CAAC,EAAM,EAAE,WAAmB,EAAE,OAAe,EAAE,eAAwB;YAC/E,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC;gBACN,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC;iBACD,IAAI,CAAC,KAAK,CAAC;iBACX,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAClC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,EAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CACvD,CACF;iBACA,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;YAE/B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAA;YACnG,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAwB;gBAChC,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;aAChD,CAAC,CAAC,CAAA;QACL,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,EAAM,EAAE,WAAmB,EAAE,MAAc;YACnD,OAAO,MAAM,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;QAC9D,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,EAAM,EAAE,WAAmB,EAAE,OAAe,EAAE,KAAa,EAAE,MAAqB;YAC5F,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,KAAK,CAAC;iBACX,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAClC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,EAC1B,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAC1C,CACF;iBACA,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;iBACvB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YACnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC9C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACvF,CAAC;QAED,KAAK,CAAC,MAAM,CACV,EAAM,EACN,SAAoB,EACpB,WAAmB,EACnB,KAOC;YAED,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;gBACpE,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;oBAClC,MAAM,SAAS,CAAC,UAAU,CAAC,yCAAyC,CAAC,CAAA;YACzE,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YACnG,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,CAAC,KAAK,CAAC;iBACb,MAAM,CAAC;gBACN,EAAE,EAAE,MAAM,EAAE;gBACZ,WAAW;gBACX,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ;gBACR,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,SAAS,CAAC,MAAM;gBAC3B,SAAS,EAAE,SAAS,CAAC,MAAM;aAC5B,CAAC;iBACD,SAAS,EAAE,CAAA;YACd,OAAO,MAAM,CAAC,GAAI,CAAC,CAAA;QACrB,CAAC;QAED,KAAK,CAAC,MAAM,CACV,EAAM,EACN,SAAoB,EACpB,WAAmB,EACnB,MAAc,EACd,KAAqE;YAErE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBACrE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC7F,SAAS,EAAE,CAAA;YACd,IAAI,CAAC,GAAG;gBAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;QACpB,CAAC;QAED;;;;;;WAMG;QACH,KAAK,CAAC,IAAI,CACR,EAAM,EACN,SAAoB,EACpB,WAAmB,EACnB,MAAc,EACd,QAAuB,EACvB,OAAsB;YAEtB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;YACzD,IAAI,QAAQ,KAAK,MAAM;gBAAE,MAAM,SAAS,CAAC,UAAU,CAAC,iCAAiC,CAAC,CAAA;YACtF,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;gBAC9D,IAAI,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO;oBAChC,MAAM,SAAS,CAAC,UAAU,CAAC,2CAA2C,CAAC,CAAA;gBACzE,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;gBACnE,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC1C,MAAM,SAAS,CAAC,UAAU,CAAC,sDAAsD,CAAC,CAAA;YACtF,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;YAC7F,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE;iBACrB,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBAC/E,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;iBACpE,SAAS,EAAE,CAAA;YACd,OAAO,MAAM,CAAC,KAAM,CAAC,CAAA;QACvB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,EAAM,EAAE,SAAoB,EAAE,WAAmB,EAAE,MAAc,EAAE,QAAiB;YAChG,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC;gBACH,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;gBACxC,SAAS,EAAE,SAAS,CAAC,MAAM;gBAC3B,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB,CAAC;iBACD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC7F,SAAS,EAAE,CAAA;YACd,IAAI,CAAC,GAAG;gBAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;QACpB,CAAC;QAED,iFAAiF;QACjF,KAAK,CAAC,UAAU,CAAC,EAAM,EAAE,WAAmB,EAAE,MAAc;YAC1D,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAiB,GAAG,CAAA;;;kCAGpB,WAAW,mBAAmB,MAAM;;;;oCAIlC,WAAW;;;OAGxC,CAAC,CAAA;YACF,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAClC,CAAC;QAED,0FAA0F;QAC1F,KAAK,CAAC,SAAS,CAAC,EAAM,EAAE,WAAmB,EAAE,MAAc;YACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;YAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YACtD,MAAM,EAAE;iBACL,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBACrD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;YACzE,OAAO,EAAE,GAAG,EAAE,CAAA;QAChB,CAAC;QAED;;;WAGG;QACH,KAAK,CAAC,OAAO,CAAC,EAAM,EAAE,WAAmB,EAAE,MAAc;YACvD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;YACnF,IAAI,CAAC,GAAG,CAAC,SAAS;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;YACtC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACjB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;qBACtB,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;qBACtC,IAAI,CAAC,KAAK,CAAC;qBACX,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;qBAC1E,KAAK,CAAC,CAAC,CAAC,CAAA;gBACX,kEAAkE;gBAClE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBAChC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;oBACtF,MAAM,EAAE;yBACL,MAAM,CAAC,KAAK,CAAC;yBACb,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;yBACjC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;gBACzE,CAAC;YACH,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;YAC1D,MAAM,EAAE;iBACL,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBAC/C,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;YACzE,OAAO,MAAM,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;QAC9D,CAAC;QAED,kFAAkF;QAClF,KAAK,CAAC,KAAK,CAAC,EAAM,EAAE,WAAmB,EAAE,MAAc;YACrD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;YAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YACtD,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;YAC7F,OAAO,EAAE,GAAG,EAAE,CAAA;QAChB,CAAC;QAED,gFAAgF;QAChF,aAAa,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;KACnC,CAAA;AACH,CAAC"}

package/dist/server/services/spaces.d.ts

@@ -0,0 +1,95 @@
+import type { Principal } from '@kernhq/contracts';
+import { type Tx } from '@kernhq/kernel';
+import type { Space } from '../../contract/index.js';
+import { spaces } from '../schema.js';
+import type { QuireAccess } from './access.js';
+type SpaceRow = typeof spaces.$inferSelect;
+export declare function toSpace(row: SpaceRow): Space;
+export declare function quireSpaces(access: QuireAccess): {
+    /**
+     * Only the spaces this person may see.
+     *
+     * The filter is per row rather than a single workspace-level check, because visibility is the
+     * whole point of a space: a `private` one should not appear in a list to someone with no
+     * binding, and "you may not open it" is a different, worse answer than not showing it at all.
+     */
+    list(tx: Tx, principal: Principal, workspaceId: string, includeArchived: boolean): Promise<{
+        id: string;
+        workspaceId: string & import("zod").$brand<"WorkspaceId">;
+        key: string;
+        name: string;
+        description: string;
+        icon: string | null;
+        visibility: "open" | "restricted" | "private";
+        homepageId: string | null;
+        createdBy: (string & import("zod").$brand<"UserId">) | null;
+        createdAt: string;
+        updatedAt: string;
+        archivedAt: string | null;
+    }[]>;
+    get(tx: Tx, principal: Principal, workspaceId: string, spaceId: string): Promise<{
+        id: string;
+        workspaceId: string & import("zod").$brand<"WorkspaceId">;
+        key: string;
+        name: string;
+        description: string;
+        icon: string | null;
+        visibility: "open" | "restricted" | "private";
+        homepageId: string | null;
+        createdBy: (string & import("zod").$brand<"UserId">) | null;
+        createdAt: string;
+        updatedAt: string;
+        archivedAt: string | null;
+    }>;
+    create(tx: Tx, principal: Principal, workspaceId: string, input: {
+        key: string;
+        name: string;
+        description: string;
+        icon: string | null;
+        visibility: string;
+    }): Promise<{
+        id: string;
+        workspaceId: string & import("zod").$brand<"WorkspaceId">;
+        key: string;
+        name: string;
+        description: string;
+        icon: string | null;
+        visibility: "open" | "restricted" | "private";
+        homepageId: string | null;
+        createdBy: (string & import("zod").$brand<"UserId">) | null;
+        createdAt: string;
+        updatedAt: string;
+        archivedAt: string | null;
+    }>;
+    update(tx: Tx, workspaceId: string, spaceId: string, patch: Partial<Pick<SpaceRow, "name" | "description" | "icon" | "visibility" | "homepageId">>): Promise<{
+        id: string;
+        workspaceId: string & import("zod").$brand<"WorkspaceId">;
+        key: string;
+        name: string;
+        description: string;
+        icon: string | null;
+        visibility: "open" | "restricted" | "private";
+        homepageId: string | null;
+        createdBy: (string & import("zod").$brand<"UserId">) | null;
+        createdAt: string;
+        updatedAt: string;
+        archivedAt: string | null;
+    }>;
+    archive(tx: Tx, workspaceId: string, spaceId: string, archived: boolean): Promise<{
+        id: string;
+        workspaceId: string & import("zod").$brand<"WorkspaceId">;
+        key: string;
+        name: string;
+        description: string;
+        icon: string | null;
+        visibility: "open" | "restricted" | "private";
+        homepageId: string | null;
+        createdBy: (string & import("zod").$brand<"UserId">) | null;
+        createdAt: string;
+        updatedAt: string;
+        archivedAt: string | null;
+    }>;
+};
+export type QuireSpaces = ReturnType<typeof quireSpaces>;
+export {};
+//# sourceMappingURL=spaces.d.ts.map

package/dist/server/services/spaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spaces.d.ts","sourceRoot":"","sources":["../../../src/server/services/spaces.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAa,KAAK,EAAE,EAAU,MAAM,gBAAgB,CAAA;AAE3D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAS,MAAM,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C,KAAK,QAAQ,GAAG,OAAO,MAAM,CAAC,YAAY,CAAA;AAE1C,wBAAgB,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,KAAK,CAe5C;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW;IAE3C;;;;;;OAMG;aACY,EAAE,aAAa,SAAS,eAAe,MAAM,mBAAmB,OAAO;;;;;;;;;;;;;;YAkBxE,EAAE,aAAa,SAAS,eAAe,MAAM,WAAW,MAAM;;;;;;;;;;;;;;eAOtE,EAAE,aACK,SAAS,eACP,MAAM,SACZ;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;;;eA0B9F,EAAE,eACO,MAAM,WACV,MAAM,SACR,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,GAAG,MAAM,GAAG,YAAY,GAAG,YAAY,CAAC,CAAC;;;;;;;;;;;;;;gBA2B7E,EAAE,eAAe,MAAM,WAAW,MAAM,YAAY,OAAO;;;;;;;;;;;;;;EAUhF;AACD,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,WAAW,CAAC,CAAA"}

package/dist/server/services/spaces.js

@@ -0,0 +1,100 @@
+import { KernError, uuidv7 } from '@kernhq/kernel';
+import { and, asc, eq, isNull } from 'drizzle-orm';
+import { pages, spaces } from '../schema.js';
+export function toSpace(row) {
+    return {
+        id: row.id,
+        workspaceId: row.workspaceId,
+        key: row.key,
+        name: row.name,
+        description: row.description,
+        icon: row.icon,
+        visibility: row.visibility,
+        homepageId: row.homepageId,
+        createdBy: row.createdBy,
+        createdAt: row.createdAt.toISOString(),
+        updatedAt: row.updatedAt.toISOString(),
+        archivedAt: row.archivedAt?.toISOString() ?? null,
+    };
+}
+export function quireSpaces(access) {
+    return {
+        /**
+         * Only the spaces this person may see.
+         *
+         * The filter is per row rather than a single workspace-level check, because visibility is the
+         * whole point of a space: a `private` one should not appear in a list to someone with no
+         * binding, and "you may not open it" is a different, worse answer than not showing it at all.
+         */
+        async list(tx, principal, workspaceId, includeArchived) {
+            const rows = await tx
+                .select()
+                .from(spaces)
+                .where(includeArchived
+                ? eq(spaces.workspaceId, workspaceId)
+                : and(eq(spaces.workspaceId, workspaceId), isNull(spaces.archivedAt)))
+                .orderBy(asc(spaces.name));
+            const visible = await Promise.all(rows.map(async (r) => (await access.canSpace(principal, 'quire.space.view', workspaceId, r.id)) ? r : null));
+            return visible.filter((r) => r !== null).map(toSpace);
+        },
+        async get(tx, principal, workspaceId, spaceId) {
+            const row = await access.spaceRow(tx, workspaceId, spaceId);
+            await access.requireSpace(principal, 'quire.space.view', workspaceId, spaceId);
+            return toSpace(row);
+        },
+        async create(tx, principal, workspaceId, input) {
+            const [existing] = await tx
+                .select({ id: spaces.id })
+                .from(spaces)
+                .where(and(eq(spaces.workspaceId, workspaceId), eq(spaces.key, input.key)))
+                .limit(1);
+            if (existing)
+                throw KernError.conflict(`A space with the key "${input.key}" already exists`);
+            const [row] = await tx
+                .insert(spaces)
+                .values({
+                id: uuidv7(),
+                workspaceId,
+                key: input.key,
+                name: input.name,
+                description: input.description,
+                icon: input.icon,
+                visibility: input.visibility,
+                createdBy: principal.userId,
+            })
+                .returning();
+            return toSpace(row);
+        },
+        async update(tx, workspaceId, spaceId, patch) {
+            // A home page that is not in this space would make the space open to a page nobody expected.
+            if (patch.homepageId) {
+                const [home] = await tx
+                    .select({ id: pages.id })
+                    .from(pages)
+                    .where(and(eq(pages.workspaceId, workspaceId), eq(pages.id, patch.homepageId), eq(pages.spaceId, spaceId), isNull(pages.deletedAt)))
+                    .limit(1);
+                if (!home)
+                    throw KernError.badRequest('The home page must be a page in this space');
+            }
+            const [row] = await tx
+                .update(spaces)
+                .set({ ...patch, updatedAt: new Date() })
+                .where(and(eq(spaces.workspaceId, workspaceId), eq(spaces.id, spaceId)))
+                .returning();
+            if (!row)
+                throw KernError.notFound('Space');
+            return toSpace(row);
+        },
+        async archive(tx, workspaceId, spaceId, archived) {
+            const [row] = await tx
+                .update(spaces)
+                .set({ archivedAt: archived ? new Date() : null, updatedAt: new Date() })
+                .where(and(eq(spaces.workspaceId, workspaceId), eq(spaces.id, spaceId)))
+                .returning();
+            if (!row)
+                throw KernError.notFound('Space');
+            return toSpace(row);
+        },
+    };
+}
+//# sourceMappingURL=spaces.js.map

package/dist/server/services/spaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spaces.js","sourceRoot":"","sources":["../../../src/server/services/spaces.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAW,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC3D,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAK5C,MAAM,UAAU,OAAO,CAAC,GAAa;IACnC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,GAAG,CAAC,WAAmC;QACpD,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,UAAiC;QACjD,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAA+B;QAC9C,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;KAClD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAmB;IAC7C,OAAO;QACL;;;;;;WAMG;QACH,KAAK,CAAC,IAAI,CAAC,EAAM,EAAE,SAAoB,EAAE,WAAmB,EAAE,eAAwB;YACpF,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CACJ,eAAe;gBACb,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC;gBACrC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CACxE;iBACA,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;YAC5B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CACnB,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACrF,CACF,CAAA;YACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAiB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACtE,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,EAAM,EAAE,SAAoB,EAAE,WAAmB,EAAE,OAAe;YAC1E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;YAC3D,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,kBAAkB,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;YAC9E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC;QAED,KAAK,CAAC,MAAM,CACV,EAAM,EACN,SAAoB,EACpB,WAAmB,EACnB,KAAkG;YAElG,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;iBACxB,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;iBACzB,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;iBAC1E,KAAK,CAAC,CAAC,CAAC,CAAA;YACX,IAAI,QAAQ;gBAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,yBAAyB,KAAK,CAAC,GAAG,kBAAkB,CAAC,CAAA;YAE5F,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,CAAC,MAAM,CAAC;iBACd,MAAM,CAAC;gBACN,EAAE,EAAE,MAAM,EAAE;gBACZ,WAAW;gBACX,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,SAAS,CAAC,MAAM;aAC5B,CAAC;iBACD,SAAS,EAAE,CAAA;YACd,OAAO,OAAO,CAAC,GAAI,CAAC,CAAA;QACtB,CAAC;QAED,KAAK,CAAC,MAAM,CACV,EAAM,EACN,WAAmB,EACnB,OAAe,EACf,KAA6F;YAE7F,6FAA6F;YAC7F,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE;qBACpB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;qBACxB,IAAI,CAAC,KAAK,CAAC;qBACX,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAClC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,EAC9B,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,EAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CACxB,CACF;qBACA,KAAK,CAAC,CAAC,CAAC,CAAA;gBACX,IAAI,CAAC,IAAI;oBAAE,MAAM,SAAS,CAAC,UAAU,CAAC,4CAA4C,CAAC,CAAA;YACrF,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,CAAC,MAAM,CAAC;iBACd,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBACxC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;iBACvE,SAAS,EAAE,CAAA;YACd,IAAI,CAAC,GAAG;gBAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,EAAM,EAAE,WAAmB,EAAE,OAAe,EAAE,QAAiB;YAC3E,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,CAAC,MAAM,CAAC;iBACd,GAAG,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBACxE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;iBACvE,SAAS,EAAE,CAAA;YACd,IAAI,CAAC,GAAG;gBAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC;KACF,CAAA;AACH,CAAC"}

package/migrations/0000_init.sql

@@ -0,0 +1,43 @@
+CREATE SCHEMA IF NOT EXISTS "mod_quire";
+--> statement-breakpoint
+CREATE TABLE "mod_quire"."pages" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"space_id" uuid NOT NULL,
+	"parent_id" uuid,
+	"position" text COLLATE "C" NOT NULL,
+	"kind" text DEFAULT 'page' NOT NULL,
+	"title" text DEFAULT '' NOT NULL,
+	"icon" text,
+	"cover_url" text,
+	"published_version_id" uuid,
+	"has_unpublished_changes" boolean DEFAULT false NOT NULL,
+	"text" text DEFAULT '' NOT NULL,
+	"created_by" uuid,
+	"updated_by" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"archived_at" timestamp with time zone,
+	"deleted_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE "mod_quire"."spaces" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"workspace_id" uuid NOT NULL,
+	"key" text NOT NULL,
+	"name" text NOT NULL,
+	"description" text DEFAULT '' NOT NULL,
+	"icon" text,
+	"visibility" text DEFAULT 'open' NOT NULL,
+	"homepage_id" uuid,
+	"created_by" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"archived_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE INDEX "pages_ws_space_idx" ON "mod_quire"."pages" USING btree ("workspace_id","space_id","position");--> statement-breakpoint
+CREATE INDEX "pages_ws_parent_idx" ON "mod_quire"."pages" USING btree ("workspace_id","parent_id","position");--> statement-breakpoint
+CREATE INDEX "pages_ws_updated_idx" ON "mod_quire"."pages" USING btree ("workspace_id","updated_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "spaces_ws_key_uq" ON "mod_quire"."spaces" USING btree ("workspace_id","key");--> statement-breakpoint
+CREATE INDEX "spaces_ws_idx" ON "mod_quire"."spaces" USING btree ("workspace_id","created_at");

package/migrations/0001_rls.sql

@@ -0,0 +1,17 @@
+-- Row-level security, one block per table in TENANT_TABLES.
+--
+-- `force` matters: without it the table owner bypasses the policy, and the owner is the role the
+-- service connects as. Note that a *superuser* bypasses RLS whatever this says, and the development
+-- and CI database roles are superusers — so a test that does not connect as an unprivileged role
+-- proves nothing about isolation.
+alter table "mod_quire"."spaces" enable row level security;--> statement-breakpoint
+alter table "mod_quire"."spaces" force row level security;--> statement-breakpoint
+create policy "spaces_ws_isolation" on "mod_quire"."spaces"
+  using (workspace_id::text = current_setting('app.workspace_id', true))
+  with check (workspace_id::text = current_setting('app.workspace_id', true));--> statement-breakpoint
+
+alter table "mod_quire"."pages" enable row level security;--> statement-breakpoint
+alter table "mod_quire"."pages" force row level security;--> statement-breakpoint
+create policy "pages_ws_isolation" on "mod_quire"."pages"
+  using (workspace_id::text = current_setting('app.workspace_id', true))
+  with check (workspace_id::text = current_setting('app.workspace_id', true));