@voyant-travel/relationships 0.119.2

package/dist/service/person-documents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"person-documents.d.ts","sourceRoot":"","sources":["../../src/service/person-documents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAG/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,KAAK,EACV,0BAA0B,EAC1B,6BAA6B,EAC7B,0BAA0B,EAC3B,MAAM,kBAAkB,CAAA;AAEzB;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B;;iBAAiC,CAAA;AAE1E;;;;GAIG;AACH,eAAO,MAAM,mCAAmC;;iBAAmC,CAAA;AAEnF,kEAAkE;AAClE,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,YAAY,EAAE,kBAAkB,GAAG,IAAI,CAAA;IACvC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAA;IACvC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAA;CACxC;AAED,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAClF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAClF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAA;AACnF,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAA;AAgClE,eAAO,MAAM,sBAAsB;4BACT,kBAAkB,YAAY,MAAM,UAAU,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0BAkBjE,kBAAkB,cAAc,MAAM;;;;;;;;;;;;;;;;;;IASlE;;;;;OAKG;mCAEG,kBAAkB,cACV,MAAM,WACT;QAAE,GAAG,EAAE,WAAW,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAchE;;;OAGG;iCAEG,kBAAkB,YACZ,MAAM,QACV,kBAAkB;;;;;;;;;;;;;;;;;;6BAiBpB,kBAAkB,YACZ,MAAM,QACV,yBAAyB;;;;;;;;;;;;;;;;;;6BAiB3B,kBAAkB,cACV,MAAM,QACZ,yBAAyB;;;;;;;;;;;;;;;;;;6BAoCF,kBAAkB,cAAc,MAAM;;;IAQrE;;;OAGG;iCACgC,kBAAkB,cAAc,MAAM;;;;;;;;;;;;;;;;;;IAyBzE;;;;;;;;;OASG;iCAEG,kBAAkB,YACZ,MAAM,WACP;QAAE,GAAG,EAAE,WAAW,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IA8DvC;;;;OAIG;oCAC6B,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmBnD,CAAA"}

package/dist/service/person-documents.js

@@ -0,0 +1,240 @@
+import { decryptOptionalJsonEnvelope } from "@voyant-travel/utils";
+import { and, asc, desc, eq, gte, isNotNull, lte, sql } from "drizzle-orm";
+import { z } from "zod";
+import { people, personDocuments } from "../schema.js";
+/**
+ * Canonical plaintext shape for free-text PII blobs encrypted as
+ * `accessibilityEncrypted` / `dietaryEncrypted` / `loyaltyEncrypted` /
+ * `insuranceEncrypted` on `relationships.people`. Wrapped so future fields can
+ * be added without breaking existing ciphertexts.
+ *
+ * Writers (customer-portal) and readers (crm + bookings snapshot)
+ * must use this shape — drift between sides means decryption fails
+ * silently and pre-fill stops working.
+ */
+export const personPiiBlobPlaintextSchema = z.object({ text: z.string() });
+/**
+ * Canonical plaintext shape for `numberEncrypted` on
+ * `relationships.person_documents`. Same compatibility contract as
+ * `personPiiBlobPlaintextSchema`.
+ */
+export const personDocumentNumberPlaintextSchema = z.object({ number: z.string() });
+async function personExists(db, personId) {
+    const [row] = await db
+        .select({ id: people.id })
+        .from(people)
+        .where(eq(people.id, personId))
+        .limit(1);
+    return Boolean(row);
+}
+async function clearPrimaryForType(db, personId, type, exceptDocumentId) {
+    const conditions = [
+        eq(personDocuments.personId, personId),
+        eq(personDocuments.type, type),
+        eq(personDocuments.isPrimary, true),
+    ];
+    if (exceptDocumentId) {
+        // agent-quality: raw-sql reviewed -- owner: crm; dynamic SQL interpolation uses Drizzle parameter binding or vetted SQL identifiers.
+        conditions.push(sql `${personDocuments.id} <> ${exceptDocumentId}`);
+    }
+    await db
+        .update(personDocuments)
+        .set({ isPrimary: false, updatedAt: new Date() })
+        .where(and(...conditions));
+}
+export const personDocumentsService = {
+    listPersonDocuments(db, personId, query) {
+        const conditions = [eq(personDocuments.personId, personId)];
+        if (query?.type)
+            conditions.push(eq(personDocuments.type, query.type));
+        if (query?.expiringBefore) {
+            conditions.push(isNotNull(personDocuments.expiryDate));
+            conditions.push(lte(personDocuments.expiryDate, query.expiringBefore));
+        }
+        const limit = query?.limit ?? 50;
+        const offset = query?.offset ?? 0;
+        return db
+            .select()
+            .from(personDocuments)
+            .where(and(...conditions))
+            .orderBy(asc(personDocuments.type), asc(personDocuments.createdAt))
+            .limit(limit)
+            .offset(offset);
+    },
+    async getPersonDocument(db, documentId) {
+        const [row] = await db
+            .select()
+            .from(personDocuments)
+            .where(eq(personDocuments.id, documentId))
+            .limit(1);
+        return row ?? null;
+    },
+    /**
+     * Decrypts the `numberEncrypted` slot for a single document and
+     * returns the plaintext. Returns `null` when the document has no
+     * encrypted number on file. Caller is responsible for authorization
+     * and audit-logging; this is just the KMS unwrap.
+     */
+    async revealPersonDocumentNumber(db, documentId, options) {
+        const row = await personDocumentsService.getPersonDocument(db, documentId);
+        if (!row)
+            return null;
+        if (!row.numberEncrypted)
+            return { documentId, number: null };
+        const keyRef = options.keyRef ?? { keyType: "people" };
+        const decrypted = await decryptOptionalJsonEnvelope(options.kms, keyRef, row.numberEncrypted, personDocumentNumberPlaintextSchema);
+        return { documentId, number: decrypted?.number ?? null };
+    },
+    /**
+     * Returns the primary document of a given type for a person, or
+     * `null` if no primary is set.
+     */
+    async getPrimaryPersonDocument(db, personId, type) {
+        const [row] = await db
+            .select()
+            .from(personDocuments)
+            .where(and(eq(personDocuments.personId, personId), eq(personDocuments.type, type), eq(personDocuments.isPrimary, true)))
+            .limit(1);
+        return row ?? null;
+    },
+    async createPersonDocument(db, personId, data) {
+        if (!(await personExists(db, personId)))
+            return null;
+        return db.transaction(async (tx) => {
+            if (data.isPrimary) {
+                await clearPrimaryForType(tx, personId, data.type);
+            }
+            const [row] = await tx
+                .insert(personDocuments)
+                .values({ ...data, personId })
+                .returning();
+            return row ?? null;
+        });
+    },
+    async updatePersonDocument(db, documentId, data) {
+        return db.transaction(async (tx) => {
+            const [existing] = await tx
+                .select()
+                .from(personDocuments)
+                .where(eq(personDocuments.id, documentId))
+                .limit(1);
+            if (!existing)
+                return null;
+            // Clear prior primary of the *target* type whenever the row
+            // will end up primary after this update — including the case
+            // where `isPrimary` is unchanged but `type` is being switched
+            // and the existing row is already primary. Without this, the
+            // partial unique index `(person_id, type) WHERE is_primary`
+            // rejects type-only edits on a primary doc.
+            const effectiveIsPrimary = data.isPrimary ?? existing.isPrimary;
+            if (effectiveIsPrimary) {
+                const targetType = data.type ?? existing.type;
+                await clearPrimaryForType(tx, existing.personId, targetType, documentId);
+            }
+            const [row] = await tx
+                .update(personDocuments)
+                .set({ ...data, updatedAt: new Date() })
+                .where(eq(personDocuments.id, documentId))
+                .returning();
+            return row ?? null;
+        });
+    },
+    async deletePersonDocument(db, documentId) {
+        const [row] = await db
+            .delete(personDocuments)
+            .where(eq(personDocuments.id, documentId))
+            .returning({ id: personDocuments.id });
+        return row ?? null;
+    },
+    /**
+     * Atomically promotes a document to primary, demoting any prior
+     * primary of the same type for the same person.
+     */
+    async setPrimaryPersonDocument(db, documentId) {
+        return db.transaction(async (tx) => {
+            const [existing] = await tx
+                .select()
+                .from(personDocuments)
+                .where(eq(personDocuments.id, documentId))
+                .limit(1);
+            if (!existing)
+                return null;
+            await clearPrimaryForType(tx, existing.personId, existing.type, documentId);
+            const [row] = await tx
+                .update(personDocuments)
+                .set({ isPrimary: true, updatedAt: new Date() })
+                .where(eq(personDocuments.id, documentId))
+                .returning();
+            return row ?? null;
+        });
+    },
+    /**
+     * Plaintext snapshot of the fields a booking-traveler creation
+     * pulls from a person record: dietary, accessibility, primary identity
+     * document (type + number + expiry + country + authority + provenance id),
+     * and date-of-birth from `people.dateOfBirth`.
+     *
+     * Caller passes a KMS provider so decryption happens in-process.
+     * Missing person → returns null. Missing document or blob → that
+     * field returns null in the snapshot.
+     */
+    async loadPersonTravelSnapshot(db, personId, options) {
+        const [personRow] = await db
+            .select({
+            dateOfBirth: people.dateOfBirth,
+            accessibilityEncrypted: people.accessibilityEncrypted,
+            dietaryEncrypted: people.dietaryEncrypted,
+        })
+            .from(people)
+            .where(eq(people.id, personId))
+            .limit(1);
+        if (!personRow)
+            return null;
+        const keyRef = options.keyRef ?? { keyType: "people" };
+        const primaryDocumentPromise = db
+            .select()
+            .from(personDocuments)
+            .where(and(eq(personDocuments.personId, personId), eq(personDocuments.isPrimary, true)))
+            .orderBy(desc(personDocuments.updatedAt))
+            .limit(1);
+        const [accessibilityBlob, dietaryBlob, primaryDocuments] = await Promise.all([
+            decryptOptionalJsonEnvelope(options.kms, keyRef, personRow.accessibilityEncrypted, personPiiBlobPlaintextSchema),
+            decryptOptionalJsonEnvelope(options.kms, keyRef, personRow.dietaryEncrypted, personPiiBlobPlaintextSchema),
+            primaryDocumentPromise,
+        ]);
+        const primaryDocument = primaryDocuments[0] ?? null;
+        let documentNumber = null;
+        if (primaryDocument?.numberEncrypted) {
+            const decrypted = await decryptOptionalJsonEnvelope(options.kms, keyRef, primaryDocument.numberEncrypted, personDocumentNumberPlaintextSchema);
+            documentNumber = decrypted?.number ?? null;
+        }
+        return {
+            dateOfBirth: personRow.dateOfBirth ?? null,
+            dietaryRequirements: dietaryBlob?.text ?? null,
+            accessibilityNeeds: accessibilityBlob?.text ?? null,
+            documentType: primaryDocument?.type ?? null,
+            documentNumber,
+            documentExpiry: primaryDocument?.expiryDate ?? null,
+            documentIssuingCountry: primaryDocument?.issuingCountry ?? null,
+            documentIssuingAuthority: primaryDocument?.issuingAuthority ?? null,
+            documentPersonDocumentId: primaryDocument?.id ?? null,
+        };
+    },
+    /**
+     * Documents whose `expiryDate` falls within the next `daysAhead`
+     * days. Used by the future `crm.detect-expiring-documents` cron;
+     * shipped now since the helper is free.
+     */
+    listExpiringPersonDocuments(db, daysAhead = 90) {
+        const today = new Date();
+        const horizon = new Date(today);
+        horizon.setUTCDate(horizon.getUTCDate() + daysAhead);
+        const todayIso = today.toISOString().slice(0, 10);
+        const horizonIso = horizon.toISOString().slice(0, 10);
+        return db
+            .select()
+            .from(personDocuments)
+            .where(and(isNotNull(personDocuments.expiryDate), gte(personDocuments.expiryDate, todayIso), lte(personDocuments.expiryDate, horizonIso)))
+            .orderBy(asc(personDocuments.expiryDate));
+    },
+};