@nacre.work/api 0.34.0 → 0.35.0

package/dist/messages.js

@@ -1,4 +1,4 @@
-import { consoleUrl, message } from '@nacre.work/core';
+import { consoleUrl, message, notificationMessage, ruleSentence } from '@nacre.work/core';
 /**
  * Every message this product sends, in one file.
  *
@@ -99,6 +99,11 @@ export function secondFactorMessage(to, what) {
  * All of them, for anything that has to reason about the set rather than about
  * one — the preview, and whatever comes after it.
  *
+ * Including the notification, which is written in the core because the worker
+ * sends it and cannot import this package. Listed here all the same, in both
+ * of its forms: the set is what the preview renders, and a message missing
+ * from it is a message nobody looked at in a mail client.
+ *
  * A list rather than a count, because a count is the thing that goes stale.
  */
 export const everyMessage = (to, consoleBase) => [
@@ -107,5 +112,19 @@ export const everyMessage = (to, consoleBase) => [
     passwordChangedMessage(to, 'recovery-link'),
     secondFactorMessage(to, 'enrolled'),
     secondFactorMessage(to, 'removed'),
+    notificationMessage(to, consoleBase, {
+        subject: 'Contracts layer reorganised',
+        body: 'The contracts layer now holds signed agreements only. Drafts moved to contracts-drafts.\n\n' +
+            'Grants on contracts are unchanged; ask an administrator if you need the drafts.',
+    }, { source: 'agent', appliedBy: 'dana@example.com', application: 'Claude' }),
+    notificationMessage(to, consoleBase, {
+        subject: '12 documents failed to index',
+        body: '12 documents failed to index in the last 60 minutes:\n\n- handbook: 9\n- contracts: 3\n\n' +
+            'Each failed document carries its reason.',
+    }, {
+        source: 'rule',
+        when: ruleSentence({ kind: 'documents_failed', layerSlug: null, threshold: 10, windowMinutes: 60 }),
+        ruleBy: 'dana@example.com',
+    }),
 ];
 //# sourceMappingURL=messages.js.map

package/dist/messages.js.map

@@ -1 +1 @@
-{"version":3,"file":"messages.js","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAgB,MAAM,kBAAkB,CAAA;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,+DAA+D;AAC/D,MAAM,UAAU,oBAAoB,CAClC,EAAU,EACV,WAAmB,EACnB,KAAa,EACb,UAAkB;IAElB,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAClF,OAAO,OAAO,CAAC,EAAE,EAAE,2BAA2B,EAAE;QAC9C,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,wDAAwD,EAAE;QAC/E,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,EAAE;QACzD;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EACF,sCAAsC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,YAAY;gBACrF,oFAAoF;gBACpF,oBAAoB;SACvB;QACD,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,yEAAyE,EAAE;KACjG,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAU,EAAE,GAAgC;IACjF,OAAO,OAAO,CAAC,EAAE,EAAE,iCAAiC,EAAE;QACpD;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EACF,GAAG,KAAK,SAAS;gBACf,CAAC,CAAC,0EAA0E;gBAC5E,CAAC,CAAC,4EAA4E;SACnF;QACD;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EACF,oFAAoF;gBACpF,wBAAwB;SAC3B;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EACF,GAAG,KAAK,SAAS;gBACf,CAAC,CAAC,+EAA+E;oBAC/E,qCAAqC;gBACvC,CAAC,CAAC,+EAA+E;oBAC/E,4DAA4D;SACnE;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAU,EAAE,IAA4B;IAC1E,OAAO,IAAI,KAAK,UAAU;QACxB,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,iDAAiD,EAAE;YAC7D,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,kDAAkD,EAAE;YACzE;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,kFAAkF;oBAClF,qBAAqB;aACxB;SACF,CAAC;QACJ,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,qDAAqD,EAAE;YACjE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,sDAAsD,EAAE;YAC7E;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,iFAAiF;oBACjF,4DAA4D;aAC/D;SACF,CAAC,CAAA;AACR,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,WAAmB,EAAsB,EAAE,CAAC;IACnF,oBAAoB,CAAC,EAAE,EAAE,WAAW,EAAE,0CAA0C,EAAE,IAAI,CAAC;IACvF,sBAAsB,CAAC,EAAE,EAAE,SAAS,CAAC;IACrC,sBAAsB,CAAC,EAAE,EAAE,eAAe,CAAC;IAC3C,mBAAmB,CAAC,EAAE,EAAE,UAAU,CAAC;IACnC,mBAAmB,CAAC,EAAE,EAAE,SAAS,CAAC;CACnC,CAAA"}
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAgB,MAAM,kBAAkB,CAAA;AAEvG;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,+DAA+D;AAC/D,MAAM,UAAU,oBAAoB,CAClC,EAAU,EACV,WAAmB,EACnB,KAAa,EACb,UAAkB;IAElB,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAClF,OAAO,OAAO,CAAC,EAAE,EAAE,2BAA2B,EAAE;QAC9C,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,wDAAwD,EAAE;QAC/E,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,EAAE;QACzD;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EACF,sCAAsC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,YAAY;gBACrF,oFAAoF;gBACpF,oBAAoB;SACvB;QACD,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,yEAAyE,EAAE;KACjG,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAU,EAAE,GAAgC;IACjF,OAAO,OAAO,CAAC,EAAE,EAAE,iCAAiC,EAAE;QACpD;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EACF,GAAG,KAAK,SAAS;gBACf,CAAC,CAAC,0EAA0E;gBAC5E,CAAC,CAAC,4EAA4E;SACnF;QACD;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EACF,oFAAoF;gBACpF,wBAAwB;SAC3B;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EACF,GAAG,KAAK,SAAS;gBACf,CAAC,CAAC,+EAA+E;oBAC/E,qCAAqC;gBACvC,CAAC,CAAC,+EAA+E;oBAC/E,4DAA4D;SACnE;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAU,EAAE,IAA4B;IAC1E,OAAO,IAAI,KAAK,UAAU;QACxB,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,iDAAiD,EAAE;YAC7D,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,kDAAkD,EAAE;YACzE;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,kFAAkF;oBAClF,qBAAqB;aACxB;SACF,CAAC;QACJ,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,qDAAqD,EAAE;YACjE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,sDAAsD,EAAE;YAC7E;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,iFAAiF;oBACjF,4DAA4D;aAC/D;SACF,CAAC,CAAA;AACR,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,WAAmB,EAAsB,EAAE,CAAC;IACnF,oBAAoB,CAAC,EAAE,EAAE,WAAW,EAAE,0CAA0C,EAAE,IAAI,CAAC;IACvF,sBAAsB,CAAC,EAAE,EAAE,SAAS,CAAC;IACrC,sBAAsB,CAAC,EAAE,EAAE,eAAe,CAAC;IAC3C,mBAAmB,CAAC,EAAE,EAAE,UAAU,CAAC;IACnC,mBAAmB,CAAC,EAAE,EAAE,SAAS,CAAC;IAClC,mBAAmB,CACjB,EAAE,EACF,WAAW,EACX;QACE,OAAO,EAAE,6BAA6B;QACtC,IAAI,EACF,6FAA6F;YAC7F,iFAAiF;KACpF,EACD,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,WAAW,EAAE,QAAQ,EAAE,CAC1E;IACD,mBAAmB,CACjB,EAAE,EACF,WAAW,EACX;QACE,OAAO,EAAE,8BAA8B;QACvC,IAAI,EACF,2FAA2F;YAC3F,0CAA0C;KAC7C,EACD;QACE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;QACnG,MAAM,EAAE,kBAAkB;KAC3B,CACF;CACF,CAAA"}

package/dist/notifications.d.ts

@@ -0,0 +1,108 @@
+import { type AlertKind } from '@nacre.work/core';
+import type { Pool } from 'pg';
+import type { AuthContext } from './auth.js';
+/**
+ * The outbox and the alert rules, from the side that proposes and applies.
+ * docs/mcp-admin.md, "Notifications".
+ *
+ * Nothing here sends: the worker does, reading addresses from `users` at the
+ * moment it sends. This side's job is the first of the three bounds on who can
+ * receive one — that every recipient it stores is an **active user of the
+ * caller's organization**, resolved here, inside `withOrg`, with the
+ * organization named in each statement's own literal.
+ */
+/** A rule as an administrator reads it back. */
+export interface AlertRule {
+    readonly id: string;
+    readonly kind: AlertKind;
+    readonly layerId: string | null;
+    readonly layerSlug: string | null;
+    readonly threshold: number | null;
+    readonly windowMinutes: number | null;
+    readonly recipients: readonly string[];
+    readonly toOrgAdmins: boolean;
+    readonly createdBy: string;
+    readonly createdAt: string;
+    readonly lastFiredAt: string | null;
+}
+export interface NewAlertRule {
+    readonly kind: AlertKind;
+    readonly layerId: string | null;
+    readonly threshold: number | null;
+    readonly windowMinutes: number | null;
+    readonly recipients: readonly string[];
+    readonly toOrgAdmins: boolean;
+}
+export type Enqueued = {
+    readonly kind: 'queued';
+    readonly id: string;
+} | {
+    readonly kind: 'limited';
+};
+/** Active rules one organization may keep. A rule is a standing query against its log every minute. */
+export declare const MAX_ALERT_RULES = 50;
+export interface NotificationStore {
+    /**
+     * Each reference — an address or an id — resolved to an active person in the
+     * caller's organization, or listed as unknown. Unknown is everything else:
+     * another organization's person, a disabled one, a service account's name,
+     * an address nobody has. One answer for all of them, the way a `404` is.
+     */
+    people(auth: AuthContext, refs: readonly string[]): Promise<{
+        readonly found: ReadonlyMap<string, {
+            readonly id: string;
+            readonly email: string;
+        }>;
+        readonly unknown: readonly string[];
+    }>;
+    /** How many active organization administrators there are: what "every org_admin" reaches today. */
+    orgAdmins(auth: AuthContext): Promise<number>;
+    /** Into the outbox, inside the hourly bound. */
+    enqueue(auth: AuthContext, notification: {
+        readonly recipients: readonly string[];
+        readonly toOrgAdmins: boolean;
+        readonly subject: string;
+        readonly body: string;
+        readonly consentId: string;
+    }): Promise<Enqueued>;
+    rules(auth: AuthContext): Promise<readonly AlertRule[]>;
+    createRule(auth: AuthContext, rule: NewAlertRule): Promise<{
+        readonly kind: 'created';
+        readonly id: string;
+    } | {
+        readonly kind: 'full';
+    }>;
+    removeRule(auth: AuthContext, id: string): Promise<boolean>;
+    rule(auth: AuthContext, id: string): Promise<AlertRule | undefined>;
+}
+export declare class PostgresNotifications implements NotificationStore {
+    private readonly pool;
+    private readonly role;
+    constructor(pool: Pool, role: string);
+    private inOrg;
+    people(auth: AuthContext, refs: readonly string[]): Promise<{
+        found: ReadonlyMap<string, {
+            id: string;
+            email: string;
+        }>;
+        unknown: readonly string[];
+    }>;
+    orgAdmins(auth: AuthContext): Promise<number>;
+    enqueue(auth: AuthContext, n: {
+        recipients: readonly string[];
+        toOrgAdmins: boolean;
+        subject: string;
+        body: string;
+        consentId: string;
+    }): Promise<Enqueued>;
+    rules(auth: AuthContext): Promise<readonly AlertRule[]>;
+    rule(auth: AuthContext, id: string): Promise<AlertRule | undefined>;
+    createRule(auth: AuthContext, rule: NewAlertRule): Promise<{
+        kind: 'created';
+        id: string;
+    } | {
+        kind: 'full';
+    }>;
+    removeRule(auth: AuthContext, id: string): Promise<boolean>;
+}
+//# sourceMappingURL=notifications.d.ts.map

package/dist/notifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../src/notifications.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC3E,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAA;AAG1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAE5C;;;;;;;;;GASG;AAEH,gDAAgD;AAChD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAC9B;AAED,MAAM,MAAM,QAAQ,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAA;AAEtG,uGAAuG;AACvG,eAAO,MAAM,eAAe,KAAK,CAAA;AAEjC,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,MAAM,CACJ,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,OAAO,CAAC;QAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;IACzI,mGAAmG;IACnG,SAAS,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7C,gDAAgD;IAChD,OAAO,CACL,IAAI,EAAE,WAAW,EACjB,YAAY,EAAE;QACZ,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;QACtC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;QAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAC3B,GACA,OAAO,CAAC,QAAQ,CAAC,CAAA;IACpB,KAAK,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC,CAAA;IACvD,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACzI,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3D,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAA;CACpE;AAiCD,qBAAa,qBAAsB,YAAW,iBAAiB;IAE3D,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBADJ,IAAI,EAAE,IAAI,EACV,IAAI,EAAE,MAAM;IAG/B,OAAO,CAAC,KAAK;IAIb,MAAM,CACJ,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,OAAO,CAAC;QAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IA2BrG,SAAS,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAU7C,OAAO,CACL,IAAI,EAAE,WAAW,EACjB,CAAC,EAAE;QAAE,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAC3G,OAAO,CAAC,QAAQ,CAAC;IAmBpB,KAAK,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC;IAavD,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAanE,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAyB9G,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAU5D"}

package/dist/notifications.js

@@ -0,0 +1,125 @@
+import { NOTIFY_PER_HOUR, withOrg } from '@nacre.work/core';
+import { isUuid } from './admin-names.js';
+/** Active rules one organization may keep. A rule is a standing query against its log every minute. */
+export const MAX_ALERT_RULES = 50;
+const RULE_COLUMNS = `r.id, r.kind, r.layer_id, l.slug AS layer_slug, r.threshold, r.window_minutes, r.recipients,
+       r.to_org_admins, r.created_by, r.created_at, r.last_fired_at`;
+const ruleOf = (r) => ({
+    id: r.id,
+    kind: r.kind,
+    layerId: r.layer_id,
+    layerSlug: r.layer_slug,
+    threshold: r.threshold,
+    windowMinutes: r.window_minutes,
+    recipients: r.recipients,
+    toOrgAdmins: r.to_org_admins,
+    createdBy: r.created_by,
+    createdAt: r.created_at.toISOString(),
+    lastFiredAt: r.last_fired_at === null ? null : r.last_fired_at.toISOString(),
+});
+export class PostgresNotifications {
+    pool;
+    role;
+    constructor(pool, role) {
+        this.pool = pool;
+        this.role = role;
+    }
+    inOrg(auth, run) {
+        return withOrg(this.pool, auth.orgId, run, { role: this.role });
+    }
+    people(auth, refs) {
+        return this.inOrg(auth, async (client) => {
+            const wanted = [...new Set(refs.map((r) => r.trim()).filter((r) => r !== ''))];
+            const ids = wanted.filter(isUuid);
+            const emails = wanted.filter((r) => !isUuid(r)).map((r) => r.toLowerCase());
+            // Both shapes in one statement, and the organization in its own literal:
+            // RLS is the second line here, not the mechanism.
+            const { rows } = await client.query(`SELECT id, email FROM users
+          WHERE org_id = $1 AND disabled_at IS NULL
+            AND (id = ANY($2::uuid[]) OR lower(email) = ANY($3::text[]))`, [auth.orgId, ids, emails]);
+            const found = new Map();
+            const unknown = [];
+            for (const ref of wanted) {
+                const hit = rows.filter((r) => (isUuid(ref) ? r.id === ref.toLowerCase() : r.email.toLowerCase() === ref.toLowerCase()));
+                // An address two accounts share would be two people; refused as unknown
+                // rather than guessed between. `users` is unique on it, so this is the
+                // shape the code has rather than one the data can produce today.
+                if (hit.length === 1 && hit[0] !== undefined)
+                    found.set(ref, hit[0]);
+                else
+                    unknown.push(ref);
+            }
+            return { found, unknown };
+        });
+    }
+    orgAdmins(auth) {
+        return this.inOrg(auth, async (client) => {
+            const { rows } = await client.query(`SELECT count(*)::int AS n FROM users WHERE org_id = $1 AND role = 'org_admin' AND disabled_at IS NULL`, [auth.orgId]);
+            return rows[0]?.n ?? 0;
+        });
+    }
+    enqueue(auth, n) {
+        return this.inOrg(auth, async (client) => {
+            // One organization's count at a time, so two applies in the same second
+            // cannot both read twenty-nine. The lock is the transaction's and goes
+            // with it.
+            await client.query(`SELECT pg_advisory_xact_lock(hashtextextended('nacre.notify:' || $1::text, 0))`, [auth.orgId]);
+            const { rows } = await client.query(`INSERT INTO notifications (org_id, recipients, to_org_admins, subject, body, source, sent_by, consent_id)
+         SELECT $1, $2::uuid[], $3, $4, $5, 'agent', $6, $7
+          WHERE (SELECT count(*) FROM notifications
+                  WHERE org_id = $1 AND created_at > now() - interval '1 hour') < $8
+         RETURNING id`, [auth.orgId, n.recipients, n.toOrgAdmins, n.subject, n.body, auth.principal.id, n.consentId, NOTIFY_PER_HOUR]);
+            const id = rows[0]?.id;
+            return id === undefined ? { kind: 'limited' } : { kind: 'queued', id };
+        });
+    }
+    rules(auth) {
+        return this.inOrg(auth, async (client) => {
+            const { rows } = await client.query(`SELECT ${RULE_COLUMNS}
+           FROM alert_rules r LEFT JOIN layers l ON l.id = r.layer_id AND l.org_id = r.org_id
+          WHERE r.org_id = $1 AND r.removed_at IS NULL
+          ORDER BY r.created_at, r.id`, [auth.orgId]);
+            return rows.map(ruleOf);
+        });
+    }
+    rule(auth, id) {
+        if (!isUuid(id))
+            return Promise.resolve(undefined);
+        return this.inOrg(auth, async (client) => {
+            const { rows } = await client.query(`SELECT ${RULE_COLUMNS}
+           FROM alert_rules r LEFT JOIN layers l ON l.id = r.layer_id AND l.org_id = r.org_id
+          WHERE r.org_id = $1 AND r.id = $2::uuid AND r.removed_at IS NULL`, [auth.orgId, id]);
+            return rows[0] === undefined ? undefined : ruleOf(rows[0]);
+        });
+    }
+    createRule(auth, rule) {
+        return this.inOrg(auth, async (client) => {
+            await client.query(`SELECT pg_advisory_xact_lock(hashtextextended('nacre.alert-rules:' || $1::text, 0))`, [auth.orgId]);
+            const { rows } = await client.query(`INSERT INTO alert_rules (org_id, kind, layer_id, threshold, window_minutes, recipients, to_org_admins, created_by)
+         SELECT $1, $2, $3, $4, $5, $6::uuid[], $7, $8
+          WHERE (SELECT count(*) FROM alert_rules WHERE org_id = $1 AND removed_at IS NULL) < $9
+         RETURNING id`, [
+                auth.orgId,
+                rule.kind,
+                rule.layerId,
+                rule.threshold,
+                rule.windowMinutes,
+                rule.recipients,
+                rule.toOrgAdmins,
+                auth.principal.id,
+                MAX_ALERT_RULES,
+            ]);
+            const id = rows[0]?.id;
+            return id === undefined ? { kind: 'full' } : { kind: 'created', id };
+        });
+    }
+    removeRule(auth, id) {
+        if (!isUuid(id))
+            return Promise.resolve(false);
+        return this.inOrg(auth, async (client) => {
+            const { rowCount } = await client.query(`UPDATE alert_rules SET removed_at = now() WHERE org_id = $1 AND id = $2::uuid AND removed_at IS NULL`, [auth.orgId, id]);
+            return rowCount === 1;
+        });
+    }
+}
+//# sourceMappingURL=notifications.js.map

package/dist/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../src/notifications.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,OAAO,EAAkB,MAAM,kBAAkB,CAAA;AAG3E,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAwCzC,uGAAuG;AACvG,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAA;AA8CjC,MAAM,YAAY,GAAG;oEAC+C,CAAA;AAEpE,MAAM,MAAM,GAAG,CAAC,CAAU,EAAa,EAAE,CAAC,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,EAAE;IACR,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,OAAO,EAAE,CAAC,CAAC,QAAQ;IACnB,SAAS,EAAE,CAAC,CAAC,UAAU;IACvB,SAAS,EAAE,CAAC,CAAC,SAAS;IACtB,aAAa,EAAE,CAAC,CAAC,cAAc;IAC/B,UAAU,EAAE,CAAC,CAAC,UAAU;IACxB,WAAW,EAAE,CAAC,CAAC,aAAa;IAC5B,SAAS,EAAE,CAAC,CAAC,UAAU;IACvB,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE;IACrC,WAAW,EAAE,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE;CAC7E,CAAC,CAAA;AAEF,MAAM,OAAO,qBAAqB;IAEb;IACA;IAFnB,YACmB,IAAU,EACV,IAAY;QADZ,SAAI,GAAJ,IAAI,CAAM;QACV,SAAI,GAAJ,IAAI,CAAQ;IAC5B,CAAC;IAEI,KAAK,CAAI,IAAiB,EAAE,GAAuC;QACzE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACjE,CAAC;IAED,MAAM,CACJ,IAAiB,EACjB,IAAuB;QAEvB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAA;YAC9E,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACjC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;YAC3E,yEAAyE;YACzE,kDAAkD;YAClD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;yEAEiE,EACjE,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAC1B,CAAA;YACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyC,CAAA;YAC9D,MAAM,OAAO,GAAa,EAAE,CAAA;YAC5B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;gBACxH,wEAAwE;gBACxE,uEAAuE;gBACvE,iEAAiE;gBACjE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS;oBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;;oBAC/D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACxB,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;QAC3B,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,SAAS,CAAC,IAAiB;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,uGAAuG,EACvG,CAAC,IAAI,CAAC,KAAK,CAAC,CACb,CAAA;YACD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;QACxB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,CACL,IAAiB,EACjB,CAA4G;QAE5G,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvC,wEAAwE;YACxE,uEAAuE;YACvE,WAAW;YACX,MAAM,MAAM,CAAC,KAAK,CAAC,gFAAgF,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YAClH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;;;sBAIc,EACd,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,eAAe,CAAC,CAC9G,CAAA;YACD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;YACtB,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,EAAE,EAAE,CAAA;QAC1F,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,IAAiB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,UAAU,YAAY;;;sCAGQ,EAC9B,CAAC,IAAI,CAAC,KAAK,CAAC,CACb,CAAA;YACD,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAC,IAAiB,EAAE,EAAU;QAChC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAClD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,UAAU,YAAY;;2EAE6C,EACnE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CACjB,CAAA;YACD,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5D,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,UAAU,CAAC,IAAiB,EAAE,IAAkB;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvC,MAAM,MAAM,CAAC,KAAK,CAAC,qFAAqF,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YACvH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;;sBAGc,EACd;gBACE,IAAI,CAAC,KAAK;gBACV,IAAI,CAAC,IAAI;gBACT,IAAI,CAAC,OAAO;gBACZ,IAAI,CAAC,SAAS;gBACd,IAAI,CAAC,aAAa;gBAClB,IAAI,CAAC,UAAU;gBACf,IAAI,CAAC,WAAW;gBAChB,IAAI,CAAC,SAAS,CAAC,EAAE;gBACjB,eAAe;aAChB,CACF,CAAA;YACD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;YACtB,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE,EAAE,EAAE,CAAA;QACxF,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,UAAU,CAAC,IAAiB,EAAE,EAAU;QACtC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACrC,sGAAsG,EACtG,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CACjB,CAAA;YACD,OAAO,QAAQ,KAAK,CAAC,CAAA;QACvB,CAAC,CAAC,CAAA;IACJ,CAAC;CACF"}

package/dist/server.js

@@ -4570,6 +4570,10 @@ async function handle(req, res, options) {
                 detail: {
                     client_id: clientId,
                     client_name: client.clientName,
+                    // Which resource the connection is for. The `admin_connection` alert
+                    // rule reads this, and "when was an administrative connection
+                    // approved" is the question it answers for a person too.
+                    surface: administrative ? 'admin' : 'default',
                     acts_as: subject.actsAs,
                     ...(delegating
                         ? {