@managemint-solutions/sdk 0.16.0 → 0.18.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/audit/index.d.ts +23 -2
- package/dist/audit/index.js +56 -21
- package/dist/audit/index.js.map +1 -1
- package/dist/auth-client/index.d.ts +1 -6
- package/dist/auth-client/index.js +3 -18
- package/dist/auth-client/index.js.map +1 -1
- package/dist/auth.d.ts +36 -1
- package/dist/auth.js +52 -22
- package/dist/auth.js.map +1 -1
- package/dist/billing/index.d.ts +22 -13
- package/dist/billing/index.js +51 -48
- package/dist/billing/index.js.map +1 -1
- package/dist/client.d.ts +18 -1
- package/dist/client.js +11 -6
- package/dist/client.js.map +1 -1
- package/dist/clients/index.js +13 -75
- package/dist/clients/index.js.map +1 -1
- package/dist/errors.d.ts +4 -1
- package/dist/errors.js +7 -58
- package/dist/errors.js.map +1 -1
- package/dist/index.d.ts +48 -22
- package/dist/index.js +116 -36
- package/dist/index.js.map +1 -1
- package/dist/nest/index.d.ts +26 -3
- package/dist/nest/index.js +54 -15
- package/dist/nest/index.js.map +1 -1
- package/dist/notifications/index.d.ts +0 -1
- package/dist/notifications/index.js +4 -16
- package/dist/notifications/index.js.map +1 -1
- package/dist/organization-invites/index.d.ts +29 -0
- package/dist/organization-invites/index.js +48 -0
- package/dist/organization-invites/index.js.map +1 -0
- package/dist/organizations/index.js +4 -9
- package/dist/organizations/index.js.map +1 -1
- package/dist/permissions/index.d.ts +8 -0
- package/dist/permissions/index.js +16 -1
- package/dist/permissions/index.js.map +1 -1
- package/dist/projects/index.js +12 -75
- package/dist/projects/index.js.map +1 -1
- package/dist/service-client/index.d.ts +2 -0
- package/dist/service-client/index.js +7 -6
- package/dist/service-client/index.js.map +1 -1
- package/dist/supporting-files/index.js +31 -15
- package/dist/supporting-files/index.js.map +1 -1
- package/dist/supporting-files/paths.d.ts +19 -5
- package/dist/supporting-files/paths.js +46 -10
- package/dist/supporting-files/paths.js.map +1 -1
- package/dist/tasks/index.js +7 -33
- package/dist/tasks/index.js.map +1 -1
- package/dist/transforms.d.ts +43 -0
- package/dist/transforms.js +73 -2
- package/dist/transforms.js.map +1 -1
- package/dist/users/index.js +4 -14
- package/dist/users/index.js.map +1 -1
- package/package.json +6 -2
package/dist/index.js
CHANGED
|
@@ -1,39 +1,119 @@
|
|
|
1
1
|
"use strict";
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
-
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
-
}
|
|
8
|
-
Object.defineProperty(o, k2, desc);
|
|
9
|
-
}) : (function(o, m, k, k2) {
|
|
10
|
-
if (k2 === undefined) k2 = k;
|
|
11
|
-
o[k2] = m[k];
|
|
12
|
-
}));
|
|
13
|
-
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
14
|
-
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
|
-
};
|
|
2
|
+
// The package's public surface, spelled out. Anything not listed here is the SDK's own plumbing —
|
|
3
|
+
// the audit diff, the row helpers, the select-string fragments, the error mappers — and stays
|
|
4
|
+
// reachable only from inside. The `./nest` entrypoint is listed separately, in src/nest/index.ts.
|
|
16
5
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
6
|
+
exports.UsersResource = exports.UpdatePermissionsDto = exports.PermissionsResource = exports.UpdateOrganizationDto = exports.CreateOrganizationDto = exports.OrganizationSignupResource = exports.OrganizationsResource = exports.OrganizationInvitesResource = exports.NotificationIdDto = exports.GetNotificationsDto = exports.NotificationsOutboxResource = exports.NotificationsResource = exports.NoteIdDto = exports.GetNotesDto = exports.AddNoteDto = exports.NotesResource = exports.UpdateAdditionalDetailsDto = exports.IsAdditionalDetailsValueByType = exports.GetAdditionalDetailsDto = exports.AdditionalDetailsIdDto = exports.AddAdditionalDetailsDto = exports.AdditionalDetailsResource = exports.UpdateStatusDto = exports.StatusIdDto = exports.GetStatusesDto = exports.AddStatusDto = exports.StatusesResource = exports.ReinstateSubscriptionDto = exports.PurchaseModuleDto = exports.InitialPaymentDto = exports.CancelSubscriptionDto = exports.BillingResource = exports.BillingReadsResource = exports.GetAuditTrailDto = exports.AuditResource = exports.IsNullable = exports.SupabaseClientError = exports.createSupabaseServiceClient = exports.SupabaseOrganizationScope = exports.SupabaseServiceClient = exports.SignInDto = exports.SendPasswordResetEmailDto = exports.ResetPasswordDto = exports.ExchangeTokenHashDto = exports.ExchangeRefreshTokenDto = exports.createSupabaseAuthClient = exports.SupabaseAuthClient = exports.verifyAccessToken = exports.createSupabaseClient = exports.SupabaseClient = void 0;
|
|
7
|
+
exports.monthlyTotalMinor = exports.PricebooksResource = exports.UpdateTaskDto = exports.TaskIdDto = exports.GetTasksDto = exports.CreateTaskDto = exports.TasksResource = exports.UpdateProjectDto = exports.ProjectIdDto = exports.GetProjectsDto = exports.CreateProjectDto = exports.ProjectsResource = exports.UpdateClientDto = exports.GetClientsDto = exports.CreateClientDto = exports.ClientIdDto = exports.ClientsResource = exports.SupportingFileIdDto = exports.GetSupportingFilesDto = exports.SupportingFilesResource = exports.WebhookEventsResource = exports.UserIdDto = exports.UpdateUserDto = exports.GetUsersQueryDto = exports.AddUserDto = void 0;
|
|
8
|
+
var client_1 = require("./client");
|
|
9
|
+
Object.defineProperty(exports, "SupabaseClient", { enumerable: true, get: function () { return client_1.SupabaseClient; } });
|
|
10
|
+
Object.defineProperty(exports, "createSupabaseClient", { enumerable: true, get: function () { return client_1.createSupabaseClient; } });
|
|
11
|
+
var auth_1 = require("./auth");
|
|
12
|
+
Object.defineProperty(exports, "verifyAccessToken", { enumerable: true, get: function () { return auth_1.verifyAccessToken; } });
|
|
13
|
+
var auth_client_1 = require("./auth-client");
|
|
14
|
+
Object.defineProperty(exports, "SupabaseAuthClient", { enumerable: true, get: function () { return auth_client_1.SupabaseAuthClient; } });
|
|
15
|
+
Object.defineProperty(exports, "createSupabaseAuthClient", { enumerable: true, get: function () { return auth_client_1.createSupabaseAuthClient; } });
|
|
16
|
+
var auth_client_2 = require("./auth-client");
|
|
17
|
+
Object.defineProperty(exports, "ExchangeRefreshTokenDto", { enumerable: true, get: function () { return auth_client_2.ExchangeRefreshTokenDto; } });
|
|
18
|
+
Object.defineProperty(exports, "ExchangeTokenHashDto", { enumerable: true, get: function () { return auth_client_2.ExchangeTokenHashDto; } });
|
|
19
|
+
Object.defineProperty(exports, "ResetPasswordDto", { enumerable: true, get: function () { return auth_client_2.ResetPasswordDto; } });
|
|
20
|
+
Object.defineProperty(exports, "SendPasswordResetEmailDto", { enumerable: true, get: function () { return auth_client_2.SendPasswordResetEmailDto; } });
|
|
21
|
+
Object.defineProperty(exports, "SignInDto", { enumerable: true, get: function () { return auth_client_2.SignInDto; } });
|
|
22
|
+
var service_client_1 = require("./service-client");
|
|
23
|
+
Object.defineProperty(exports, "SupabaseServiceClient", { enumerable: true, get: function () { return service_client_1.SupabaseServiceClient; } });
|
|
24
|
+
Object.defineProperty(exports, "SupabaseOrganizationScope", { enumerable: true, get: function () { return service_client_1.SupabaseOrganizationScope; } });
|
|
25
|
+
Object.defineProperty(exports, "createSupabaseServiceClient", { enumerable: true, get: function () { return service_client_1.createSupabaseServiceClient; } });
|
|
26
|
+
var errors_1 = require("./errors");
|
|
27
|
+
Object.defineProperty(exports, "SupabaseClientError", { enumerable: true, get: function () { return errors_1.SupabaseClientError; } });
|
|
28
|
+
var validators_1 = require("./validators");
|
|
29
|
+
Object.defineProperty(exports, "IsNullable", { enumerable: true, get: function () { return validators_1.IsNullable; } });
|
|
30
|
+
var audit_1 = require("./audit");
|
|
31
|
+
Object.defineProperty(exports, "AuditResource", { enumerable: true, get: function () { return audit_1.AuditResource; } });
|
|
32
|
+
var audit_2 = require("./audit");
|
|
33
|
+
Object.defineProperty(exports, "GetAuditTrailDto", { enumerable: true, get: function () { return audit_2.GetAuditTrailDto; } });
|
|
34
|
+
var billing_1 = require("./billing");
|
|
35
|
+
Object.defineProperty(exports, "BillingReadsResource", { enumerable: true, get: function () { return billing_1.BillingReadsResource; } });
|
|
36
|
+
Object.defineProperty(exports, "BillingResource", { enumerable: true, get: function () { return billing_1.BillingResource; } });
|
|
37
|
+
var billing_2 = require("./billing");
|
|
38
|
+
Object.defineProperty(exports, "CancelSubscriptionDto", { enumerable: true, get: function () { return billing_2.CancelSubscriptionDto; } });
|
|
39
|
+
Object.defineProperty(exports, "InitialPaymentDto", { enumerable: true, get: function () { return billing_2.InitialPaymentDto; } });
|
|
40
|
+
Object.defineProperty(exports, "PurchaseModuleDto", { enumerable: true, get: function () { return billing_2.PurchaseModuleDto; } });
|
|
41
|
+
Object.defineProperty(exports, "ReinstateSubscriptionDto", { enumerable: true, get: function () { return billing_2.ReinstateSubscriptionDto; } });
|
|
42
|
+
var statuses_1 = require("./statuses");
|
|
43
|
+
Object.defineProperty(exports, "StatusesResource", { enumerable: true, get: function () { return statuses_1.StatusesResource; } });
|
|
44
|
+
var statuses_2 = require("./statuses");
|
|
45
|
+
Object.defineProperty(exports, "AddStatusDto", { enumerable: true, get: function () { return statuses_2.AddStatusDto; } });
|
|
46
|
+
Object.defineProperty(exports, "GetStatusesDto", { enumerable: true, get: function () { return statuses_2.GetStatusesDto; } });
|
|
47
|
+
Object.defineProperty(exports, "StatusIdDto", { enumerable: true, get: function () { return statuses_2.StatusIdDto; } });
|
|
48
|
+
Object.defineProperty(exports, "UpdateStatusDto", { enumerable: true, get: function () { return statuses_2.UpdateStatusDto; } });
|
|
49
|
+
var additional_details_1 = require("./additional-details");
|
|
50
|
+
Object.defineProperty(exports, "AdditionalDetailsResource", { enumerable: true, get: function () { return additional_details_1.AdditionalDetailsResource; } });
|
|
51
|
+
var additional_details_2 = require("./additional-details");
|
|
52
|
+
Object.defineProperty(exports, "AddAdditionalDetailsDto", { enumerable: true, get: function () { return additional_details_2.AddAdditionalDetailsDto; } });
|
|
53
|
+
Object.defineProperty(exports, "AdditionalDetailsIdDto", { enumerable: true, get: function () { return additional_details_2.AdditionalDetailsIdDto; } });
|
|
54
|
+
Object.defineProperty(exports, "GetAdditionalDetailsDto", { enumerable: true, get: function () { return additional_details_2.GetAdditionalDetailsDto; } });
|
|
55
|
+
Object.defineProperty(exports, "IsAdditionalDetailsValueByType", { enumerable: true, get: function () { return additional_details_2.IsAdditionalDetailsValueByType; } });
|
|
56
|
+
Object.defineProperty(exports, "UpdateAdditionalDetailsDto", { enumerable: true, get: function () { return additional_details_2.UpdateAdditionalDetailsDto; } });
|
|
57
|
+
var notes_1 = require("./notes");
|
|
58
|
+
Object.defineProperty(exports, "NotesResource", { enumerable: true, get: function () { return notes_1.NotesResource; } });
|
|
59
|
+
var notes_2 = require("./notes");
|
|
60
|
+
Object.defineProperty(exports, "AddNoteDto", { enumerable: true, get: function () { return notes_2.AddNoteDto; } });
|
|
61
|
+
Object.defineProperty(exports, "GetNotesDto", { enumerable: true, get: function () { return notes_2.GetNotesDto; } });
|
|
62
|
+
Object.defineProperty(exports, "NoteIdDto", { enumerable: true, get: function () { return notes_2.NoteIdDto; } });
|
|
63
|
+
var notifications_1 = require("./notifications");
|
|
64
|
+
Object.defineProperty(exports, "NotificationsResource", { enumerable: true, get: function () { return notifications_1.NotificationsResource; } });
|
|
65
|
+
Object.defineProperty(exports, "NotificationsOutboxResource", { enumerable: true, get: function () { return notifications_1.NotificationsOutboxResource; } });
|
|
66
|
+
var notifications_2 = require("./notifications");
|
|
67
|
+
Object.defineProperty(exports, "GetNotificationsDto", { enumerable: true, get: function () { return notifications_2.GetNotificationsDto; } });
|
|
68
|
+
Object.defineProperty(exports, "NotificationIdDto", { enumerable: true, get: function () { return notifications_2.NotificationIdDto; } });
|
|
69
|
+
var organization_invites_1 = require("./organization-invites");
|
|
70
|
+
Object.defineProperty(exports, "OrganizationInvitesResource", { enumerable: true, get: function () { return organization_invites_1.OrganizationInvitesResource; } });
|
|
71
|
+
var organizations_1 = require("./organizations");
|
|
72
|
+
Object.defineProperty(exports, "OrganizationsResource", { enumerable: true, get: function () { return organizations_1.OrganizationsResource; } });
|
|
73
|
+
Object.defineProperty(exports, "OrganizationSignupResource", { enumerable: true, get: function () { return organizations_1.OrganizationSignupResource; } });
|
|
74
|
+
var organizations_2 = require("./organizations");
|
|
75
|
+
Object.defineProperty(exports, "CreateOrganizationDto", { enumerable: true, get: function () { return organizations_2.CreateOrganizationDto; } });
|
|
76
|
+
Object.defineProperty(exports, "UpdateOrganizationDto", { enumerable: true, get: function () { return organizations_2.UpdateOrganizationDto; } });
|
|
77
|
+
var permissions_1 = require("./permissions");
|
|
78
|
+
Object.defineProperty(exports, "PermissionsResource", { enumerable: true, get: function () { return permissions_1.PermissionsResource; } });
|
|
79
|
+
var permissions_2 = require("./permissions");
|
|
80
|
+
Object.defineProperty(exports, "UpdatePermissionsDto", { enumerable: true, get: function () { return permissions_2.UpdatePermissionsDto; } });
|
|
81
|
+
var users_1 = require("./users");
|
|
82
|
+
Object.defineProperty(exports, "UsersResource", { enumerable: true, get: function () { return users_1.UsersResource; } });
|
|
83
|
+
var users_2 = require("./users");
|
|
84
|
+
Object.defineProperty(exports, "AddUserDto", { enumerable: true, get: function () { return users_2.AddUserDto; } });
|
|
85
|
+
Object.defineProperty(exports, "GetUsersQueryDto", { enumerable: true, get: function () { return users_2.GetUsersQueryDto; } });
|
|
86
|
+
Object.defineProperty(exports, "UpdateUserDto", { enumerable: true, get: function () { return users_2.UpdateUserDto; } });
|
|
87
|
+
Object.defineProperty(exports, "UserIdDto", { enumerable: true, get: function () { return users_2.UserIdDto; } });
|
|
88
|
+
var webhook_events_1 = require("./webhook-events");
|
|
89
|
+
Object.defineProperty(exports, "WebhookEventsResource", { enumerable: true, get: function () { return webhook_events_1.WebhookEventsResource; } });
|
|
90
|
+
var supporting_files_1 = require("./supporting-files");
|
|
91
|
+
Object.defineProperty(exports, "SupportingFilesResource", { enumerable: true, get: function () { return supporting_files_1.SupportingFilesResource; } });
|
|
92
|
+
var supporting_files_2 = require("./supporting-files");
|
|
93
|
+
Object.defineProperty(exports, "GetSupportingFilesDto", { enumerable: true, get: function () { return supporting_files_2.GetSupportingFilesDto; } });
|
|
94
|
+
Object.defineProperty(exports, "SupportingFileIdDto", { enumerable: true, get: function () { return supporting_files_2.SupportingFileIdDto; } });
|
|
95
|
+
var clients_1 = require("./clients");
|
|
96
|
+
Object.defineProperty(exports, "ClientsResource", { enumerable: true, get: function () { return clients_1.ClientsResource; } });
|
|
97
|
+
var clients_2 = require("./clients");
|
|
98
|
+
Object.defineProperty(exports, "ClientIdDto", { enumerable: true, get: function () { return clients_2.ClientIdDto; } });
|
|
99
|
+
Object.defineProperty(exports, "CreateClientDto", { enumerable: true, get: function () { return clients_2.CreateClientDto; } });
|
|
100
|
+
Object.defineProperty(exports, "GetClientsDto", { enumerable: true, get: function () { return clients_2.GetClientsDto; } });
|
|
101
|
+
Object.defineProperty(exports, "UpdateClientDto", { enumerable: true, get: function () { return clients_2.UpdateClientDto; } });
|
|
102
|
+
var projects_1 = require("./projects");
|
|
103
|
+
Object.defineProperty(exports, "ProjectsResource", { enumerable: true, get: function () { return projects_1.ProjectsResource; } });
|
|
104
|
+
var projects_2 = require("./projects");
|
|
105
|
+
Object.defineProperty(exports, "CreateProjectDto", { enumerable: true, get: function () { return projects_2.CreateProjectDto; } });
|
|
106
|
+
Object.defineProperty(exports, "GetProjectsDto", { enumerable: true, get: function () { return projects_2.GetProjectsDto; } });
|
|
107
|
+
Object.defineProperty(exports, "ProjectIdDto", { enumerable: true, get: function () { return projects_2.ProjectIdDto; } });
|
|
108
|
+
Object.defineProperty(exports, "UpdateProjectDto", { enumerable: true, get: function () { return projects_2.UpdateProjectDto; } });
|
|
109
|
+
var tasks_1 = require("./tasks");
|
|
110
|
+
Object.defineProperty(exports, "TasksResource", { enumerable: true, get: function () { return tasks_1.TasksResource; } });
|
|
111
|
+
var tasks_2 = require("./tasks");
|
|
112
|
+
Object.defineProperty(exports, "CreateTaskDto", { enumerable: true, get: function () { return tasks_2.CreateTaskDto; } });
|
|
113
|
+
Object.defineProperty(exports, "GetTasksDto", { enumerable: true, get: function () { return tasks_2.GetTasksDto; } });
|
|
114
|
+
Object.defineProperty(exports, "TaskIdDto", { enumerable: true, get: function () { return tasks_2.TaskIdDto; } });
|
|
115
|
+
Object.defineProperty(exports, "UpdateTaskDto", { enumerable: true, get: function () { return tasks_2.UpdateTaskDto; } });
|
|
116
|
+
var pricebooks_1 = require("./pricebooks");
|
|
117
|
+
Object.defineProperty(exports, "PricebooksResource", { enumerable: true, get: function () { return pricebooks_1.PricebooksResource; } });
|
|
118
|
+
Object.defineProperty(exports, "monthlyTotalMinor", { enumerable: true, get: function () { return pricebooks_1.monthlyTotalMinor; } });
|
|
39
119
|
//# sourceMappingURL=index.js.map
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,kGAAkG;AAClG,8FAA8F;AAC9F,kGAAkG;;;;AAElG,mCAAgE;AAAvD,wGAAA,cAAc,OAAA;AAAE,8GAAA,oBAAoB,OAAA;AAG7C,+BAA2C;AAAlC,yGAAA,iBAAiB,OAAA;AAG1B,6CAA6E;AAApE,iHAAA,kBAAkB,OAAA;AAAE,uHAAA,wBAAwB,OAAA;AAErD,6CAMuB;AALrB,sHAAA,uBAAuB,OAAA;AACvB,mHAAA,oBAAoB,OAAA;AACpB,+GAAA,gBAAgB,OAAA;AAChB,wHAAA,yBAAyB,OAAA;AACzB,wGAAA,SAAS,OAAA;AAGX,mDAI0B;AAHxB,uHAAA,qBAAqB,OAAA;AACrB,2HAAA,yBAAyB,OAAA;AACzB,6HAAA,2BAA2B,OAAA;AAI7B,mCAA+C;AAAtC,6GAAA,mBAAmB,OAAA;AAG5B,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AAEnB,iCAAwC;AAA/B,sGAAA,aAAa,OAAA;AAWtB,iCAA2C;AAAlC,yGAAA,gBAAgB,OAAA;AAEzB,qCAAkE;AAAzD,+GAAA,oBAAoB,OAAA;AAAE,0GAAA,eAAe,OAAA;AAC9C,qCAKmB;AAJjB,gHAAA,qBAAqB,OAAA;AACrB,4GAAA,iBAAiB,OAAA;AACjB,4GAAA,iBAAiB,OAAA;AACjB,mHAAA,wBAAwB,OAAA;AAG1B,uCAA8C;AAArC,4GAAA,gBAAgB,OAAA;AACzB,uCAAwF;AAA/E,wGAAA,YAAY,OAAA;AAAE,0GAAA,cAAc,OAAA;AAAE,uGAAA,WAAW,OAAA;AAAE,2GAAA,eAAe,OAAA;AAEnE,2DAAiE;AAAxD,+HAAA,yBAAyB,OAAA;AAClC,2DAM8B;AAL5B,6HAAA,uBAAuB,OAAA;AACvB,4HAAA,sBAAsB,OAAA;AACtB,6HAAA,uBAAuB,OAAA;AACvB,oIAAA,8BAA8B,OAAA;AAC9B,gIAAA,0BAA0B,OAAA;AAG5B,iCAAwC;AAA/B,sGAAA,aAAa,OAAA;AACtB,iCAA6D;AAApD,mGAAA,UAAU,OAAA;AAAE,oGAAA,WAAW,OAAA;AAAE,kGAAA,SAAS,OAAA;AAE3C,iDAAqF;AAA5E,sHAAA,qBAAqB,OAAA;AAAE,4HAAA,2BAA2B,OAAA;AAQ3D,iDAAyE;AAAhE,oHAAA,mBAAmB,OAAA;AAAE,kHAAA,iBAAiB,OAAA;AAE/C,+DAAqE;AAA5D,mIAAA,2BAA2B,OAAA;AAGpC,iDAAoF;AAA3E,sHAAA,qBAAqB,OAAA;AAAE,2HAAA,0BAA0B,OAAA;AAE1D,iDAA+E;AAAtE,sHAAA,qBAAqB,OAAA;AAAE,sHAAA,qBAAqB,OAAA;AAErD,6CAAoD;AAA3C,kHAAA,mBAAmB,OAAA;AAE5B,6CAAqD;AAA5C,mHAAA,oBAAoB,OAAA;AAE7B,iCAAwC;AAA/B,sGAAA,aAAa,OAAA;AAEtB,iCAAiF;AAAxE,mGAAA,UAAU,OAAA;AAAE,yGAAA,gBAAgB,OAAA;AAAE,sGAAA,aAAa,OAAA;AAAE,kGAAA,SAAS,OAAA;AAE/D,mDAAyD;AAAhD,uHAAA,qBAAqB,OAAA;AAG9B,uDAA6D;AAApD,2HAAA,uBAAuB,OAAA;AAChC,uDAAgF;AAAvE,yHAAA,qBAAqB,OAAA;AAAE,uHAAA,mBAAmB,OAAA;AAEnD,qCAA4C;AAAnC,0GAAA,eAAe,OAAA;AACxB,qCAAyF;AAAhF,sGAAA,WAAW,OAAA;AAAE,0GAAA,eAAe,OAAA;AAAE,wGAAA,aAAa,OAAA;AAAE,0GAAA,eAAe,OAAA;AAErE,uCAA8C;AAArC,4GAAA,gBAAgB,OAAA;AACzB,uCAA8F;AAArF,4GAAA,gBAAgB,OAAA;AAAE,0GAAA,cAAc,OAAA;AAAE,wGAAA,YAAY,OAAA;AAAE,4GAAA,gBAAgB,OAAA;AAEzE,iCAAwC;AAA/B,sGAAA,aAAa,OAAA;AACtB,iCAA+E;AAAtE,sGAAA,aAAa,OAAA;AAAE,oGAAA,WAAW,OAAA;AAAE,kGAAA,SAAS,OAAA;AAAE,sGAAA,aAAa,OAAA;AAE7D,2CAAqE;AAA5D,gHAAA,kBAAkB,OAAA;AAAE,+GAAA,iBAAiB,OAAA"}
|
package/dist/nest/index.d.ts
CHANGED
|
@@ -1,5 +1,8 @@
|
|
|
1
1
|
import { HttpException } from '@nestjs/common';
|
|
2
|
+
import type { Request } from 'express';
|
|
2
3
|
import type { AuditErrorHandler } from '../audit';
|
|
4
|
+
import { type VerifiedAuth } from '../auth';
|
|
5
|
+
import { type SupabaseClient } from '../client';
|
|
3
6
|
import { SupabaseClientError } from '../errors';
|
|
4
7
|
import { type SupabaseServiceClient } from '../service-client';
|
|
5
8
|
/**
|
|
@@ -13,11 +16,31 @@ export type SupabaseUserClientOptions = {
|
|
|
13
16
|
onAuditError?: AuditErrorHandler;
|
|
14
17
|
};
|
|
15
18
|
/**
|
|
16
|
-
* Options the
|
|
17
|
-
*
|
|
18
|
-
* pass them).
|
|
19
|
+
* Options the per-request clients are built with. Call it once at startup (the auth guard
|
|
20
|
+
* constructs the client itself, so there is nowhere else to pass them).
|
|
19
21
|
*/
|
|
20
22
|
export declare const configureSupabaseUserClient: (options: SupabaseUserClientOptions) => void;
|
|
23
|
+
/** What the auth guard leaves on the request for the decorators to pick up. */
|
|
24
|
+
export type SupabaseRequestContext = {
|
|
25
|
+
client: SupabaseClient;
|
|
26
|
+
auth: VerifiedAuth;
|
|
27
|
+
};
|
|
28
|
+
/** Where on the request the context is stored — `request[SUPABASE_REQUEST_KEY]`. */
|
|
29
|
+
export declare const SUPABASE_REQUEST_KEY = "supabase";
|
|
30
|
+
/**
|
|
31
|
+
* Verifies the bearer token on `request`, builds the caller's client from it and stores both on
|
|
32
|
+
* the request. This is the one place a token is authenticated, so it belongs in the api's auth
|
|
33
|
+
* guard — a param decorator cannot be async and must not be where identity is established.
|
|
34
|
+
*
|
|
35
|
+
* Idempotent: a second call hands back the context the first one attached.
|
|
36
|
+
*/
|
|
37
|
+
export declare const attachSupabaseRequestContext: (request: Request) => Promise<SupabaseRequestContext>;
|
|
38
|
+
/**
|
|
39
|
+
* The context the auth guard attached. Throws when it is absent, which only happens when the
|
|
40
|
+
* route is missing the guard.
|
|
41
|
+
*/
|
|
42
|
+
export declare const getSupabaseRequestContext: (request: Request) => SupabaseRequestContext;
|
|
43
|
+
/** The caller's data client, from the context the auth guard attached. */
|
|
21
44
|
export declare const SupabaseUserClient: (...dataOrPipes: unknown[]) => ParameterDecorator;
|
|
22
45
|
/**
|
|
23
46
|
* A `SupabaseServiceClient` from the ambient env — the SDK-side replacement for the api's
|
package/dist/nest/index.js
CHANGED
|
@@ -1,7 +1,8 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.SupabasePublicClient = exports.createSupabaseServiceClientFromEnv = exports.SupabaseUserClient = exports.configureSupabaseUserClient = exports.toHttpException = void 0;
|
|
3
|
+
exports.SupabasePublicClient = exports.createSupabaseServiceClientFromEnv = exports.SupabaseUserClient = exports.getSupabaseRequestContext = exports.attachSupabaseRequestContext = exports.SUPABASE_REQUEST_KEY = exports.configureSupabaseUserClient = exports.toHttpException = void 0;
|
|
4
4
|
const common_1 = require("@nestjs/common");
|
|
5
|
+
const auth_1 = require("../auth");
|
|
5
6
|
const auth_client_1 = require("../auth-client");
|
|
6
7
|
const client_1 = require("../client");
|
|
7
8
|
const errors_1 = require("../errors");
|
|
@@ -31,32 +32,70 @@ const getBearerToken = (request) => {
|
|
|
31
32
|
};
|
|
32
33
|
let userClientOptions = {};
|
|
33
34
|
/**
|
|
34
|
-
* Options the
|
|
35
|
-
*
|
|
36
|
-
* pass them).
|
|
35
|
+
* Options the per-request clients are built with. Call it once at startup (the auth guard
|
|
36
|
+
* constructs the client itself, so there is nowhere else to pass them).
|
|
37
37
|
*/
|
|
38
38
|
const configureSupabaseUserClient = (options) => {
|
|
39
39
|
userClientOptions = options;
|
|
40
40
|
};
|
|
41
41
|
exports.configureSupabaseUserClient = configureSupabaseUserClient;
|
|
42
|
-
|
|
43
|
-
|
|
42
|
+
/** Where on the request the context is stored — `request[SUPABASE_REQUEST_KEY]`. */
|
|
43
|
+
exports.SUPABASE_REQUEST_KEY = 'supabase';
|
|
44
|
+
/**
|
|
45
|
+
* Verifies the bearer token on `request`, builds the caller's client from it and stores both on
|
|
46
|
+
* the request. This is the one place a token is authenticated, so it belongs in the api's auth
|
|
47
|
+
* guard — a param decorator cannot be async and must not be where identity is established.
|
|
48
|
+
*
|
|
49
|
+
* Idempotent: a second call hands back the context the first one attached.
|
|
50
|
+
*/
|
|
51
|
+
const attachSupabaseRequestContext = async (request) => {
|
|
52
|
+
const existing = request[exports.SUPABASE_REQUEST_KEY];
|
|
53
|
+
if (existing)
|
|
54
|
+
return existing;
|
|
55
|
+
const accessToken = getBearerToken(request);
|
|
56
|
+
const url = getEnvOrThrow('SUPABASE_URL');
|
|
57
|
+
const key = getEnvOrThrow('SUPABASE_PUBLISHABLE_KEY');
|
|
58
|
+
// One supabase-js client for the request: the token check and the caller's data client run on
|
|
59
|
+
// the same url/key/bearer, so there is no reason to build it twice.
|
|
60
|
+
const client = (0, auth_1.createRawClient)(url, key, accessToken);
|
|
44
61
|
try {
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
62
|
+
const auth = await (0, auth_1.verifyAccessToken)({ url, key, accessToken, client });
|
|
63
|
+
const context = {
|
|
64
|
+
auth,
|
|
65
|
+
client: (0, client_1.createSupabaseClient)({
|
|
66
|
+
url,
|
|
67
|
+
key,
|
|
68
|
+
accessToken,
|
|
69
|
+
client,
|
|
70
|
+
auth: { mms_id: auth.mms_id, organization_id: auth.organization_id },
|
|
71
|
+
onAuditError: userClientOptions.onAuditError,
|
|
72
|
+
}),
|
|
73
|
+
};
|
|
74
|
+
request[exports.SUPABASE_REQUEST_KEY] = context;
|
|
75
|
+
return context;
|
|
51
76
|
}
|
|
52
77
|
catch (error) {
|
|
53
|
-
//
|
|
54
|
-
//
|
|
78
|
+
// Guards run outside the exception filters' reach for SDK errors, so the authentication
|
|
79
|
+
// failure is converted here.
|
|
55
80
|
if (error instanceof errors_1.SupabaseClientError)
|
|
56
81
|
throw (0, exports.toHttpException)(error);
|
|
57
82
|
throw error;
|
|
58
83
|
}
|
|
59
|
-
}
|
|
84
|
+
};
|
|
85
|
+
exports.attachSupabaseRequestContext = attachSupabaseRequestContext;
|
|
86
|
+
/**
|
|
87
|
+
* The context the auth guard attached. Throws when it is absent, which only happens when the
|
|
88
|
+
* route is missing the guard.
|
|
89
|
+
*/
|
|
90
|
+
const getSupabaseRequestContext = (request) => {
|
|
91
|
+
const context = request[exports.SUPABASE_REQUEST_KEY];
|
|
92
|
+
if (!context)
|
|
93
|
+
throw new common_1.UnauthorizedException('Request is not authenticated');
|
|
94
|
+
return context;
|
|
95
|
+
};
|
|
96
|
+
exports.getSupabaseRequestContext = getSupabaseRequestContext;
|
|
97
|
+
/** The caller's data client, from the context the auth guard attached. */
|
|
98
|
+
exports.SupabaseUserClient = (0, common_1.createParamDecorator)((_, ctx) => (0, exports.getSupabaseRequestContext)(ctx.switchToHttp().getRequest()).client);
|
|
60
99
|
/**
|
|
61
100
|
* A `SupabaseServiceClient` from the ambient env — the SDK-side replacement for the api's
|
|
62
101
|
* `createSupabaseAdminClient()`.
|
package/dist/nest/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nest/index.ts"],"names":[],"mappings":";;;AAAA,2CAMwB;AAGxB,gDAAmF;AACnF,sCAAsE;AACtE,sCAAgD;AAChD,sDAA4F;AAE5F;;;;GAIG;AACI,MAAM,eAAe,GAAG,CAAC,KAA0B,EAAiB,EAAE,CAC3E,IAAI,sBAAa,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAD3D,QAAA,eAAe,mBAC4C;AAExE,MAAM,aAAa,GAAG,CACpB,GAA8E,EACtE,EAAE;IACV,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,qCAA4B,CAAC,GAAG,GAAG,oBAAoB,CAAC,CAAC;IAC/E,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,OAAgB,EAAU,EAAE;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,8BAAqB,CAAC,0BAA0B,CAAC,CAAC;IACzE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,MAAM,EAAE,WAAW,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACjD,MAAM,IAAI,8BAAqB,CAAC,4CAA4C,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAOF,IAAI,iBAAiB,GAA8B,EAAE,CAAC;AAEtD
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nest/index.ts"],"names":[],"mappings":";;;AAAA,2CAMwB;AAGxB,kCAAgF;AAChF,gDAAmF;AACnF,sCAAsE;AACtE,sCAAgD;AAChD,sDAA4F;AAE5F;;;;GAIG;AACI,MAAM,eAAe,GAAG,CAAC,KAA0B,EAAiB,EAAE,CAC3E,IAAI,sBAAa,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAD3D,QAAA,eAAe,mBAC4C;AAExE,MAAM,aAAa,GAAG,CACpB,GAA8E,EACtE,EAAE;IACV,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,qCAA4B,CAAC,GAAG,GAAG,oBAAoB,CAAC,CAAC;IAC/E,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,OAAgB,EAAU,EAAE;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,8BAAqB,CAAC,0BAA0B,CAAC,CAAC;IACzE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,MAAM,EAAE,WAAW,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACjD,MAAM,IAAI,8BAAqB,CAAC,4CAA4C,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAOF,IAAI,iBAAiB,GAA8B,EAAE,CAAC;AAEtD;;;GAGG;AACI,MAAM,2BAA2B,GAAG,CAAC,OAAkC,EAAQ,EAAE;IACtF,iBAAiB,GAAG,OAAO,CAAC;AAC9B,CAAC,CAAC;AAFW,QAAA,2BAA2B,+BAEtC;AAKF,oFAAoF;AACvE,QAAA,oBAAoB,GAAG,UAAU,CAAC;AAI/C;;;;;;GAMG;AACI,MAAM,4BAA4B,GAAG,KAAK,EAC/C,OAAgB,EACiB,EAAE;IACnC,MAAM,QAAQ,GAAI,OAA+B,CAAC,4BAAoB,CAAC,CAAC;IACxE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,0BAA0B,CAAC,CAAC;IAEtD,8FAA8F;IAC9F,oEAAoE;IACpE,MAAM,MAAM,GAAG,IAAA,sBAAe,EAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAA,wBAAiB,EAAC,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,MAAM,OAAO,GAA2B;YACtC,IAAI;YACJ,MAAM,EAAE,IAAA,6BAAoB,EAAC;gBAC3B,GAAG;gBACH,GAAG;gBACH,WAAW;gBACX,MAAM;gBACN,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE;gBACpE,YAAY,EAAE,iBAAiB,CAAC,YAAY;aAC7C,CAAC;SACH,CAAC;QACD,OAA+B,CAAC,4BAAoB,CAAC,GAAG,OAAO,CAAC;QAEjE,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wFAAwF;QACxF,6BAA6B;QAC7B,IAAI,KAAK,YAAY,4BAAmB;YAAE,MAAM,IAAA,uBAAe,EAAC,KAAK,CAAC,CAAC;QACvE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AApCW,QAAA,4BAA4B,gCAoCvC;AAEF;;;GAGG;AACI,MAAM,yBAAyB,GAAG,CAAC,OAAgB,EAA0B,EAAE;IACpF,MAAM,OAAO,GAAI,OAA+B,CAAC,4BAAoB,CAAC,CAAC;IACvE,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,8BAAqB,CAAC,8BAA8B,CAAC,CAAC;IAC9E,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAJW,QAAA,yBAAyB,6BAIpC;AAEF,0EAA0E;AAC7D,QAAA,kBAAkB,GAAG,IAAA,6BAAoB,EACpD,CAAC,CAAU,EAAE,GAAqB,EAAkB,EAAE,CACpD,IAAA,iCAAyB,EAAC,GAAG,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC,CAAC,MAAM,CAC7E,CAAC;AAEF;;;;;;;;GAQG;AACI,MAAM,kCAAkC,GAAG,CAChD,UAAqC,EAAE,EAChB,EAAE,CACzB,IAAA,4CAA2B,EAAC;IAC1B,GAAG,EAAE,aAAa,CAAC,cAAc,CAAC;IAClC,cAAc,EAAE,aAAa,CAAC,2BAA2B,CAAC;IAC1D,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,iBAAiB,CAAC,YAAY;CACrE,CAAC,CAAC;AAPQ,QAAA,kCAAkC,sCAO1C;AAEL;;;GAGG;AACU,QAAA,oBAAoB,GAAG,IAAA,6BAAoB,EACtD,GAAuB,EAAE,CACvB,IAAA,sCAAwB,EAAC;IACvB,GAAG,EAAE,aAAa,CAAC,cAAc,CAAC;IAClC,GAAG,EAAE,aAAa,CAAC,0BAA0B,CAAC;CAC/C,CAAC,CACL,CAAC"}
|
|
@@ -14,13 +14,12 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
|
14
14
|
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
15
|
};
|
|
16
16
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
-
exports.
|
|
17
|
+
exports.NotificationsOutboxResource = exports.NotificationsResource = void 0;
|
|
18
18
|
const enum_1 = require("@managemint-solutions/entities/notifications/enum");
|
|
19
|
-
Object.defineProperty(exports, "NotificationChannel", { enumerable: true, get: function () { return enum_1.NotificationChannel; } });
|
|
20
|
-
Object.defineProperty(exports, "NotificationStatus", { enumerable: true, get: function () { return enum_1.NotificationStatus; } });
|
|
21
19
|
const enum_2 = require("@managemint-solutions/entities/audit-trail/enum");
|
|
22
20
|
const audit_1 = require("../audit");
|
|
23
21
|
const errors_1 = require("../errors");
|
|
22
|
+
const transforms_1 = require("../transforms");
|
|
24
23
|
__exportStar(require("./dto"), exports);
|
|
25
24
|
// The public contract is the shared entities types; the casts at the returns declare the shape
|
|
26
25
|
// these select strings produce (the columns are defined in the api's supabase/migrations).
|
|
@@ -108,23 +107,12 @@ class NotificationsResource {
|
|
|
108
107
|
notificationsQuery = notificationsQuery.is('read_at', null);
|
|
109
108
|
}
|
|
110
109
|
if (trimmedSearch) {
|
|
111
|
-
|
|
112
|
-
notificationsQuery = notificationsQuery.or(`template_id.ilike.%${escapedSearch}%,type.ilike.%${escapedSearch}%`);
|
|
110
|
+
notificationsQuery = notificationsQuery.or((0, transforms_1.orIlike)(['template_id', 'type'], trimmedSearch));
|
|
113
111
|
}
|
|
114
112
|
const { data, error, count } = await notificationsQuery;
|
|
115
113
|
if (error)
|
|
116
114
|
throw (0, errors_1.mapPostgrestError)(error);
|
|
117
|
-
|
|
118
|
-
const totalPages = totalEstimated > 0 ? Math.ceil(totalEstimated / pageSize) : 0;
|
|
119
|
-
return {
|
|
120
|
-
results: (data ?? []),
|
|
121
|
-
page,
|
|
122
|
-
per_page: pageSize,
|
|
123
|
-
count: totalEstimated,
|
|
124
|
-
total_pages: totalPages,
|
|
125
|
-
has_next_page: page < totalPages,
|
|
126
|
-
has_previous_page: page > 1,
|
|
127
|
-
};
|
|
115
|
+
return (0, transforms_1.toMmsList)(data, page, pageSize, count);
|
|
128
116
|
}
|
|
129
117
|
async getById(notificationId) {
|
|
130
118
|
const { data, error } = await this.supabase
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/notifications/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAMA,4EAI2D;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/notifications/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAMA,4EAI2D;AAC3D,0EAAyG;AAGzG,oCAA8F;AAE9F,sCAA8C;AAC9C,8CAAmD;AAGnD,wCAAsB;AAEtB,+FAA+F;AAC/F,2FAA2F;AAC3F,MAAM,wBAAwB,GAAG;;;;;;;;;;;;OAYjB,CAAC;AAEjB,MAAM,0BAA0B,GAAG;;;;;;;;;;;;;;;;OAgBnB,CAAC;AAEjB,gFAAgF;AAChF,MAAM,2BAA2B,GAAG;;;;;;;;;;;;;;;;OAgBpB,CAAC;AAEjB,MAAM,mBAAmB,GAAG;IAC1B,KAAK,EAAE,eAAe;IACtB,UAAU,EAAE,2BAAoB,CAAC,YAAY;CACrC,CAAC;AA0CX;;;;GAIG;AACH,MAAa,qBAAqB;IAIb;IACA;IAJF,KAAK,CAAe;IAErC,YACmB,QAA6B,EAC7B,IAAiB,EAClC,KAAoB;QAFH,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,SAAI,GAAJ,IAAI,CAAa;QAGlC,IAAI,CAAC,KAAK,GAAG,IAAA,oBAAY,EAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAA0B;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;QACrC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAE3C,2FAA2F;QAC3F,0DAA0D;QAC1D,IAAI,kBAAkB,GAAG,IAAI,CAAC,QAAQ;aACnC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;aACxD,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;aACpC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;aACzC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC;QAExC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,kBAAkB,GAAG,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,kBAAkB,GAAG,kBAAkB,CAAC,EAAE,CAAC,IAAA,oBAAO,EAAC,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,kBAAkB,CAAC;QACxD,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,IAAA,sBAAS,EAAsB,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,cAAsB;QAClC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,0BAA0B,CAAC;aAClC,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC;aAC5B,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;aACpC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;aACpB,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,IAAqC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACzC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;aACpD,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;aACpC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;aACpB,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACvB,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;IAC/B,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,QAAQ,CAAC,cAAsB;QACnC,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAC1B,cAAc,EACd,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,EACpC,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CACtC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW;QACf,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aAClC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;aAC7C,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;aACpC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;aACpB,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACvB,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,cAAsB;QACrC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,yEAAyE,CAAC;aACjF,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC;aAC5B,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;aACpC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;aACpB,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,IAAyC,CAAC;IACnD,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,EAAE,uBAAgB,CAAC,MAAM,EAAE;YACnE,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;CACF;AAnHD,sDAmHC;AAKD;;;;;;;;GAQG;AACH,MAAa,2BAA2B;IAEnB;IACA;IAFnB,YACmB,QAA6B,EAC7B,QAAkC;QADlC,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,aAAQ,GAAR,QAAQ,CAA0B;IAClD,CAAC;IAEI,UAAU,CAAC,cAAyC;QAC1D,OAAO,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,cAAsB,EAAE,OAAiB;QAC/D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aAClC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,OAAO,CAAC;aACf,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAChC,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAEvD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAmB,CAAC,CAAC;YACtD,OAAO,GAAqC,CAAC;QAC/C,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC;aACjB,MAAM,CAAC,2BAA2B,CAAC;aACnC,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,IAAsC,CAAC;IAChD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,uBAAuB,CAC3B,iBAAyB;QAEzB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,yBAAyB,CAAC;aACjC,EAAE,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;aAC5C,WAAW,EAAE,CAAC;QACjB,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,CAAC,IAAI,IAAI,IAAI,CAAsE,CAAC;IAC7F,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CACf,YAAwE,EACxE,MAAkD,EAClD,KAAa;QAEb,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;QAE9D,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,CAAC,WAAW,CACvB,YAAY,CAAC,MAAM,EACnB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EACjC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CACpB,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aAClC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;aAC3B,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC;aACjC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpB,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,mHAAmH;IACnH,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CACL,wHAAwH,CACzH;aACA,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC;aAC5B,WAAW,EAAE,CAAC;QACjB,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,CAAC,IAAI,IAAI,IAAI,CAA8B,CAAC;IACrD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CACb,YAAgC,EAChC,KAAyE;QAEzE,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,yBAAkB,CAAC,IAAI;YAC/B,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,QAAQ,EAAE,QAAQ;YAClB,mBAAmB,EAAE,KAAK,CAAC,iBAAiB;YAC5C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,iBAAiB,EAAE,KAAK,CAAC,EAAE;SAC5B,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;QAE9D,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9F,OAAO;QACT,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aAClC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,OAAO,CAAC;aACf,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC;aACjC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACvB,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,YAAY,CAChB,YAAgC,EAChC,KAAiF;QAEjF,MAAM,OAAO,GAAa;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,iBAAiB,EAAE,KAAK,CAAC,EAAE;YAC3B,cAAc,EAAE,KAAK,CAAC,aAAa;YACnC,GAAG,CAAC,KAAK,CAAC,QAAQ;gBAChB,CAAC,CAAC,EAAE,MAAM,EAAE,yBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC5D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;QAE9D,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,WAAW,CACf,YAAgC,EAChC,KAA8D;QAE9D,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAChB,YAAwE,EACxE,OAAwD;QAExD,MAAM,OAAO,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;QAE9D,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,CAAC,WAAW,CACvB,YAAY,CAAC,MAAM,EACnB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,kBAAkB,EAAE,IAAI,CAAC,EAC7C,OAAO,CACR,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aAClC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,OAAO,CAAC;aACf,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC;aACjC,EAAE,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;CACF;AA5LD,kEA4LC"}
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
import type { AuditActor } from '../audit';
|
|
2
|
+
import type { TypedSupabaseClient } from '../client';
|
|
3
|
+
/** The row an invite hands back — the id to send with the sign-up link, and when it lapses. */
|
|
4
|
+
export type OrganizationInvite = {
|
|
5
|
+
mms_id: string;
|
|
6
|
+
expires_at: string;
|
|
7
|
+
};
|
|
8
|
+
/**
|
|
9
|
+
* The `organization_invites` table: the record that says a given address is allowed to sign up
|
|
10
|
+
* into a given organization. The `on_auth_user_created` trigger reads it — it requires an
|
|
11
|
+
* unconsumed, unexpired invite matching the new auth user's email and takes the new user's
|
|
12
|
+
* `organization_id` from it, so tenancy is never taken from anything the sign-up supplied.
|
|
13
|
+
*
|
|
14
|
+
* Service-role only: the table carries no `authenticated` grants, so this lives on the service
|
|
15
|
+
* client and never on a caller's client.
|
|
16
|
+
*
|
|
17
|
+
* Not audited — there is no `AuditTrailEntityType` for an invite, so these writes leave no
|
|
18
|
+
* `audit_logs` row. Add one to the entities package before making it audited.
|
|
19
|
+
*/
|
|
20
|
+
export declare class OrganizationInvitesResource {
|
|
21
|
+
private readonly supabase;
|
|
22
|
+
private readonly actor;
|
|
23
|
+
constructor(supabase: TypedSupabaseClient, actor: AuditActor);
|
|
24
|
+
/**
|
|
25
|
+
* Invites an address into the actor's organization. The email is normalized the way the
|
|
26
|
+
* trigger will compare it, so `Sam@Example.com ` and `sam@example.com` are one invite.
|
|
27
|
+
*/
|
|
28
|
+
create(email: string, ttlMinutes?: number): Promise<OrganizationInvite>;
|
|
29
|
+
}
|
|
@@ -0,0 +1,48 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.OrganizationInvitesResource = void 0;
|
|
4
|
+
const errors_1 = require("../errors");
|
|
5
|
+
/** How long an invite stays usable when the caller does not say. */
|
|
6
|
+
const DEFAULT_TTL_MINUTES = 60;
|
|
7
|
+
/**
|
|
8
|
+
* The `organization_invites` table: the record that says a given address is allowed to sign up
|
|
9
|
+
* into a given organization. The `on_auth_user_created` trigger reads it — it requires an
|
|
10
|
+
* unconsumed, unexpired invite matching the new auth user's email and takes the new user's
|
|
11
|
+
* `organization_id` from it, so tenancy is never taken from anything the sign-up supplied.
|
|
12
|
+
*
|
|
13
|
+
* Service-role only: the table carries no `authenticated` grants, so this lives on the service
|
|
14
|
+
* client and never on a caller's client.
|
|
15
|
+
*
|
|
16
|
+
* Not audited — there is no `AuditTrailEntityType` for an invite, so these writes leave no
|
|
17
|
+
* `audit_logs` row. Add one to the entities package before making it audited.
|
|
18
|
+
*/
|
|
19
|
+
class OrganizationInvitesResource {
|
|
20
|
+
supabase;
|
|
21
|
+
actor;
|
|
22
|
+
constructor(supabase, actor) {
|
|
23
|
+
this.supabase = supabase;
|
|
24
|
+
this.actor = actor;
|
|
25
|
+
}
|
|
26
|
+
/**
|
|
27
|
+
* Invites an address into the actor's organization. The email is normalized the way the
|
|
28
|
+
* trigger will compare it, so `Sam@Example.com ` and `sam@example.com` are one invite.
|
|
29
|
+
*/
|
|
30
|
+
async create(email, ttlMinutes = DEFAULT_TTL_MINUTES) {
|
|
31
|
+
const expires_at = new Date(Date.now() + ttlMinutes * 60_000).toISOString();
|
|
32
|
+
const { data, error } = await this.supabase
|
|
33
|
+
.from('organization_invites')
|
|
34
|
+
.insert({
|
|
35
|
+
organization_id: this.actor.organization_id,
|
|
36
|
+
email: email.trim().toLowerCase(),
|
|
37
|
+
created_by: this.actor.mms_id,
|
|
38
|
+
expires_at,
|
|
39
|
+
})
|
|
40
|
+
.select('mms_id, expires_at')
|
|
41
|
+
.single();
|
|
42
|
+
if (error)
|
|
43
|
+
throw (0, errors_1.mapPostgrestError)(error);
|
|
44
|
+
return data;
|
|
45
|
+
}
|
|
46
|
+
}
|
|
47
|
+
exports.OrganizationInvitesResource = OrganizationInvitesResource;
|
|
48
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/organization-invites/index.ts"],"names":[],"mappings":";;;AAEA,sCAA8C;AAE9C,oEAAoE;AACpE,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAK/B;;;;;;;;;;;GAWG;AACH,MAAa,2BAA2B;IAEnB;IACA;IAFnB,YACmB,QAA6B,EAC7B,KAAiB;QADjB,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,UAAK,GAAL,KAAK,CAAY;IACjC,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,UAAU,GAAG,mBAAmB;QAC1D,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QAE5E,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,sBAAsB,CAAC;aAC5B,MAAM,CAAC;YACN,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe;YAC3C,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YACjC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC7B,UAAU;SACX,CAAC;aACD,MAAM,CAAC,oBAAoB,CAAC;aAC5B,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,IAA0B,CAAC;IACpC,CAAC;CACF;AA3BD,kEA2BC"}
|
|
@@ -18,6 +18,7 @@ exports.OrganizationSignupResource = exports.OrganizationsResource = void 0;
|
|
|
18
18
|
const enum_1 = require("@managemint-solutions/entities/audit-trail/enum");
|
|
19
19
|
const audit_1 = require("../audit");
|
|
20
20
|
const errors_1 = require("../errors");
|
|
21
|
+
const transforms_1 = require("../transforms");
|
|
21
22
|
__exportStar(require("./dto"), exports);
|
|
22
23
|
// The organizations row *is* the organization: it has no organization_id column, hence
|
|
23
24
|
// `scopeByOrganization: false` wherever it is audited.
|
|
@@ -44,13 +45,7 @@ const ORGANIZATION_SELECT = `
|
|
|
44
45
|
industry,
|
|
45
46
|
currency,
|
|
46
47
|
updated_at,
|
|
47
|
-
last_updated_by:user_profiles!last_updated_by
|
|
48
|
-
mms_id,
|
|
49
|
-
name,
|
|
50
|
-
surname,
|
|
51
|
-
email,
|
|
52
|
-
profile_image
|
|
53
|
-
),
|
|
48
|
+
last_updated_by:user_profiles!last_updated_by ${transforms_1.USER_PROFILE_EMBED},
|
|
54
49
|
address_line_1,
|
|
55
50
|
address_line_2,
|
|
56
51
|
city,
|
|
@@ -118,7 +113,7 @@ class OrganizationsResource {
|
|
|
118
113
|
.single();
|
|
119
114
|
if (error)
|
|
120
115
|
throw (0, errors_1.mapPostgrestError)(error);
|
|
121
|
-
return data;
|
|
116
|
+
return (0, audit_1.withoutInternalId)(data);
|
|
122
117
|
}
|
|
123
118
|
/**
|
|
124
119
|
* A status move that only lands while the organization is still in `expectedFrom` — the
|
|
@@ -214,7 +209,7 @@ class OrganizationSignupResource {
|
|
|
214
209
|
entityId: row.mms_id,
|
|
215
210
|
changes: (0, audit_1.snapshotChanges)(row, 'new'),
|
|
216
211
|
});
|
|
217
|
-
return row;
|
|
212
|
+
return (0, audit_1.withoutInternalId)(row);
|
|
218
213
|
}
|
|
219
214
|
}
|
|
220
215
|
exports.OrganizationSignupResource = OrganizationSignupResource;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/organizations/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,0EAAyG;AAEzG,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/organizations/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,0EAAyG;AAEzG,oCAQkB;AAElB,sCAA8C;AAC9C,8CAAmD;AAEnD,wCAAsB;AAEtB,uFAAuF;AACvF,uDAAuD;AACvD,MAAM,mBAAmB,GAAG;IAC1B,KAAK,EAAE,eAAe;IACtB,UAAU,EAAE,2BAAoB,CAAC,YAAY;IAC7C,mBAAmB,EAAE,KAAK;CAClB,CAAC;AAEX,wFAAwF;AACxF,yFAAyF;AACzF,oFAAoF;AACpF,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;wDAe4B,+BAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;OA0B1D,CAAC;AAWjB;;;;GAIG;AACH,MAAa,qBAAqB;IAIb;IACA;IAJF,KAAK,CAAe;IAErC,YACmB,QAA6B,EAC7B,IAAgB,EACjC,KAAoB;QAFH,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,SAAI,GAAJ,IAAI,CAAY;QAGjC,IAAI,CAAC,KAAK,GAAG,IAAA,oBAAY,EAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,cAAsB;QAClC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,mBAAmB,CAAC;aAC3B,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC;aAC5B,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,IAAkC,CAAC;IAC5C,CAAC;IAED,4DAA4D;IAC5D,KAAK,CAAC,GAAG;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,cAAsB;QACrC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC;aAC5B,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,IAAA,yBAAiB,EAAC,IAA2B,CAA+B,CAAC;IACtF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CACrB,cAAsB,EACtB,YAAoB,EACpB,KAAe;QAEf,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAC3B,cAAc,EACd,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,EAAE,YAAY,CAAC,EACnD,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CACnD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,cAAsB,EAAE,KAAe;QAClD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE;YACtC,GAAG,KAAK;YACR,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;SAClC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACtC,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC3C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,cAAsB;QACtC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,2BAA2B,EAAE;YAC3E,iBAAiB,EAAE,cAAc;SAClC,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,4FAA4F;QAC5F,iDAAiD;QACjD,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAA2B,CAAC;IACpF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,cAAsB;QACtC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,2BAA2B,EAAE;YACrE,iBAAiB,EAAE,cAAc;SAClC,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;CACF;AAtGD,sDAsGC;AAED;;;GAGG;AACH,MAAa,0BAA0B;IAElB;IACA;IAFnB,YACmB,QAA6B,EAC7B,QAAmD;QADnD,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,aAAQ,GAAR,QAAQ,CAA2C;IACnE,CAAC;IAEJ,8FAA8F;IAC9F,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,OAAO,CAAC;aACb,MAAM,CAAC,QAAQ,CAAC;aAChB,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC;aAClB,WAAW,EAAE,CAAC;QACjB,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,IAAI,KAAK,IAAI,CAAC;IACvB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAC,OAA8B;QACzC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC,GAAG,CAAC;aACX,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,GAAG,GAAG,IAAkC,CAAC;QAE/C,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;YACrC,MAAM,EAAE,uBAAgB,CAAC,MAAM;YAC/B,UAAU,EAAE,2BAAoB,CAAC,YAAY;YAC7C,QAAQ,EAAE,GAAG,CAAC,MAAM;YACpB,OAAO,EAAE,IAAA,uBAAe,EAAC,GAAe,EAAE,KAAK,CAAC;SACjD,CAAC,CAAC;QAEH,OAAO,IAAA,yBAAiB,EAAC,GAAe,CAA+B,CAAC;IAC1E,CAAC;CACF;AA7CD,gEA6CC"}
|
|
@@ -17,11 +17,19 @@ export declare class PermissionsResource {
|
|
|
17
17
|
private readonly auth;
|
|
18
18
|
private readonly table;
|
|
19
19
|
constructor(supabase: TypedSupabaseClient, auth: AuditActor, audit: AuditResource);
|
|
20
|
+
/**
|
|
21
|
+
* The whole permissions row. `*` rather than a select string — the alternative is naming the
|
|
22
|
+
* two role flags and all 78 permission flags — so the internal `id` is dropped on the way out.
|
|
23
|
+
*/
|
|
20
24
|
getForUser(userId: string): Promise<PermissionsEntity>;
|
|
21
25
|
/**
|
|
22
26
|
* The one lookup `PermissionsGuard` makes per gated request: the flag the route asked for,
|
|
23
27
|
* plus the two that bypass it. Returns null when the caller has no permissions row, which the
|
|
24
28
|
* guard treats as a denial.
|
|
29
|
+
*
|
|
30
|
+
* `flag` is interpolated into the select string, so it is checked against the shape a column
|
|
31
|
+
* name can take first — a flag never comes from a request, only from a route's own decorator,
|
|
32
|
+
* so anything else is a bug rather than a bad request.
|
|
25
33
|
*/
|
|
26
34
|
flagsFor(userId: string, flag: string): Promise<PermissionFlags | null>;
|
|
27
35
|
/** Whether a user owns the organization — the guard behind "you cannot deactivate the owner". */
|