The app you desire, live and yours.

17-- Cancelling a place gives it to the first person waiting, and emails them.
18-- Their RSVP and their address are another user's, so that read and that
19-- write cross users on purpose.
20function M.cancel(event_id)
21  eql.transaction(function()
22    local mine = eql.one [[
23      select rsvps { id, status }
24      where .event_id = $event_id and .user_id = $auth.id
25    ]]
26    if not mine then
27      return
28    end
29    eql "delete rsvps where .id = $mine.id"
30    if mine.status == "waitlist" then
31      return
32    end
33
34    local first = eql.unscoped([[
35      select rsvps {
36        id,
37        users { email, name },
38        events { id, title, starts_at, venue }
39      }
40      where .event_id = $event_id and .status = 'waitlist'
41      order by .created_at, .id
42      limit 1
43    ]])[1]
44    if not first then
45      return
46    end
47
48    eql.unscoped [[
49      update rsvps set { status: 'going' }
50      where .id = $first.id
51    ]]
52    assert(mail.send {
53      to = first.users.email,
54      template = "promoted",
55      queue = true,
56      data = { name = first.users.name:match("^%S+"), event = first.events },
57    })
58  end)
59end

17  -- Each candidate has one interviewer, who reads and moves their own. A
18  -- manager reads and writes every candidate. `salary`, what the candidate
19  -- asked for, is private: only a manager reads it.
20  candidates = {
21    access = { owner = "interviewer_id", write = "manager" },
22    id = t.pk,
23    name = t.text { required = true, label = true },
24    email = t.text { required = true, email = true },
25    opening_id = t.ref "openings" { required = true },
26    interviewer_id = t.ref "users" { required = true },
27    stage = t.enum { "applied", "screen", "interview", "offer", "hired", default = "applied" },
28    stage_since = t.datetime { default = "now()" },
29    salary = t.integer { private = true },
30    cv = t.file { folder = "cvs", slug = true },
31    created_at = t.now,
32
33    indexes = { "stage" },
34  },

7-- No line here asks who is signed in. The schema's access gives a manager
8-- every candidate and an interviewer their own, and `*` leaves the private
9-- salary out of an interviewer's rows.
10function get(request)
11  local columns = {}
12  for i, stage in ipairs(stages) do
13    local cards = eql [[
14      select candidates {
15        *,
16        .opening_id.title as opening,
17        .interviewer_id.name as interviewer,
18        count(.notes) as notes
19      }
20      where .stage = $stage.key
21      order by .stage_since
22    ]]
23    for _, card in ipairs(cards) do
24      card.initials = initials(card.interviewer)
25      card.since = format.timeago(card.stage_since)
26    end
27    columns[i] = { stage = stage, next = stages[stage.next], cards = cards }
28  end
29  return { columns = columns, total = eql.count "select candidates" }
30end