@managemint-solutions/sdk 0.19.0 → 0.20.1

package/dist/support/tickets/index.d.ts

@@ -0,0 +1,161 @@
+import type { SupportAttachment, SupportMessageEntity, SupportTicketEntity, SupportTicketSummary } from '@managemint-solutions/entities/support/tickets';
+import { SupportMessageSource, SupportTicketStatus } from '@managemint-solutions/entities/support/tickets/enum';
+import type { AuthContext } from '../../auth';
+import { type AuditedTable, type AuditedTableOptions, type AuditResource, type AuditRow } from '../../audit';
+import type { TypedSupabaseClient } from '../../client';
+import type { CreateSupportTicketDto, GetSupportTicketsDto, ReplySupportTicketDto } from './dto';
+export * from './dto';
+/**
+ * A member's own tickets. Every read and write is scoped by `organization_id`, matching the RLS
+ * policies, and both tables are audited: `support_tickets` for the ticket and its status moves,
+ * `support_messages` for the thread.
+ *
+ * The write payloads are deliberately narrow. Members hold an INSERT grant on `support_messages`
+ * that omits `author_type`/`author_email`/`source`/`email_message_id` — the column defaults do
+ * that work, so a member cannot forge an agent message — and an UPDATE grant on
+ * `support_tickets` of `(status, updated_at)` only, which is why assignment, resolution and
+ * closure live on the admin resource instead.
+ */
+export declare class SupportTicketsResource {
+    private readonly supabase;
+    private readonly auth;
+    private readonly ticketsTable;
+    private readonly messagesTable;
+    constructor(supabase: TypedSupabaseClient, auth: AuthContext, audit: AuditResource);
+    list(query: GetSupportTicketsDto): Promise<SupportTicketSummary[]>;
+    getById(ticketId: string): Promise<SupportTicketEntity>;
+    /** The thread, oldest first — it is a conversation, and it is append-only. */
+    messages(ticketId: string): Promise<SupportMessageEntity[]>;
+    create(input: CreateSupportTicketDto): Promise<SupportTicketEntity>;
+    /**
+     * A client's reply. The status is read first because a closed ticket must be refused outright
+     * — no row written, a 400 back — rather than silently swallowed by the compare-and-set below.
+     *
+     * Everything else moves the ticket to `awaiting_agent`, including `resolved`, which is what
+     * reopens it. The move is guarded so a reply that races the agent closing the ticket loses
+     * cleanly: the message stands, the status does not move.
+     */
+    reply(ticketId: string, input: ReplySupportTicketDto): Promise<SupportMessageEntity>;
+    /** The just-written message, re-read so the caller gets the entity shape, embed and all. */
+    private messageById;
+}
+/**
+ * How the admin resource reaches an audited table once the row has told it which organization —
+ * and, where there is one, which user — the write belongs to. The same shape as the outbox's
+ * `OrganizationTableFactory`, and for the same reason: the resource spans organizations, so it
+ * cannot be built inside one.
+ */
+export type SupportAuditedTableFactory = (organizationId: string, actorMmsId: string | null, options: AuditedTableOptions) => AuditedTable;
+/** A ticket as the admin side reads it — tenancy and the reply token included. */
+export type SupportTicketWithSecrets = {
+    mms_id: string;
+    organization_id: string;
+    created_at: string;
+    created_by: string | null;
+    subject: string;
+    description: string;
+    status: SupportTicketStatus;
+    priority: string;
+    category: string;
+    assigned_to: string | null;
+    deleted: boolean;
+    /**
+     * The secret behind `support+<token>@…`, from the ticket's row in
+     * `support_ticket_email_tokens`. `null` when the ticket has no token row — a ticket whose
+     * token insert never landed can still be worked on, it just has no replyable address.
+     */
+    email_token: string | null;
+};
+/** A cross-organization row of `listAll` — the summary plus the tenant it belongs to. */
+export type SupportTicketAdminSummary = SupportTicketSummary & {
+    organization_id: string;
+};
+/** What the agent side supplies when it writes into a thread. */
+export type SupportAgentMessageInput = {
+    body: string;
+    author_email: string | null;
+    source: SupportMessageSource;
+    email_message_id?: string | null;
+    attachments?: SupportAttachment[] | null;
+};
+/** What an inbound client email supplies. Its source is always email, so it is not asked for. */
+export type SupportInboundMessageInput = {
+    body: string;
+    author_email: string | null;
+    email_message_id?: string | null;
+    attachments?: SupportAttachment[] | null;
+};
+/**
+ * The agent's side of support, on the service client: the inbound email webhook, which knows only
+ * a reply token, and the shared-secret admin routes. RLS reserves everything here to the service
+ * role — `assigned_to`, `resolved_at`, `closed_at` and the agent columns on a message are all
+ * outside a member's grants, and `support_ticket_email_tokens` is outside every member's grant
+ * entirely.
+ *
+ * Reads that answer "which tenant is this?" are unscoped by necessity; every write is attributed
+ * to the row's own organization, with the actor being the matched user for an inbound client mail
+ * and `null` for agent and system work.
+ */
+export declare class SupportTicketsAdminResource {
+    private readonly supabase;
+    private readonly tableFor;
+    constructor(supabase: TypedSupabaseClient, tableFor: SupportAuditedTableFactory);
+    private tickets;
+    private messages;
+    /**
+     * Every organization's tickets in one list. Deliberately unscoped: the sole support agent works
+     * across tenants, and this read is what the service role exists for.
+     */
+    listAll(): Promise<SupportTicketAdminSummary[]>;
+    /**
+     * The ticket behind a reply address. Read from the token table, which is the side that holds
+     * the foreign key, so the ticket arrives embedded and one query answers the whole question.
+     * Also unscoped by necessity — an inbound email carries nothing but the token, and the row it
+     * matches is what says which tenant it belongs to. No match means the mail was never ticket
+     * mail, and neither is a soft-deleted ticket.
+     */
+    findByEmailToken(token: string): Promise<SupportTicketWithSecrets | null>;
+    /**
+     * The same shape by id, for the admin routes, which already know the ticket they are acting on.
+     * The ticket is read first and on its own: an admin must be able to work a ticket whose token
+     * row is missing, so the token is looked up separately and its absence is a `null`, not a 404.
+     */
+    getWithSecrets(ticketId: string): Promise<SupportTicketWithSecrets>;
+    /**
+     * Mints the ticket's reply token. The api calls it as soon as a member's ticket is created,
+     * and the address `support+<token>@…` is built from what comes back.
+     *
+     * A plain insert, deliberately unaudited: there is no `AuditTrailEntityType` for the table, and
+     * `audit_logs` is readable by any member holding `read_logs` — so a token snapshotted into a
+     * change set would be the one leak the separate table exists to prevent.
+     */
+    createEmailToken(ticketId: string): Promise<string>;
+    private emailToken;
+    /**
+     * An agent's reply, from the mail Scott sends or from the admin route. The ball goes back to
+     * the client — but only from a live status, so writing on a resolved or closed ticket leaves it
+     * where it is.
+     */
+    addAgentMessage(ticket: SupportTicketWithSecrets, message: SupportAgentMessageInput): Promise<AuditRow>;
+    /**
+     * A client's reply that arrived by email. `userMmsId` is the profile the From header was matched
+     * to — the classification the webhook has already done — so the message and the status move are
+     * attributed to them exactly as a portal reply would be, reopening a resolved ticket.
+     */
+    addInboundUserMessage(ticket: SupportTicketWithSecrets, userMmsId: string, message: SupportInboundMessageInput): Promise<AuditRow>;
+    /**
+     * Puts a ticket on a staff member. Works for a first assign and a reassign alike, and refuses
+     * on a closed ticket — the guard is `status <> closed`, so losing that race writes nothing and
+     * returns null.
+     *
+     * A first assign additionally puts the ticket in the agent's queue, but only from `open`: a
+     * thread that has already moved on keeps the status it earned, and a reassign never touches
+     * status at all. That flip is its own compare-and-set rather than part of the patch above, so
+     * a status that moves between the two never gets overwritten.
+     */
+    assign(ticketId: string, staffMmsId: string): Promise<AuditRow | null>;
+    /** Resolves a live ticket. Concurrent resolves settle on one write; the loser returns null. */
+    resolve(ticketId: string): Promise<AuditRow | null>;
+    /** Closes a ticket from any status but closed. Terminal — nothing reopens it. */
+    close(ticketId: string): Promise<AuditRow | null>;
+}

package/dist/support/tickets/index.js

@@ -0,0 +1,443 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SupportTicketsAdminResource = exports.SupportTicketsResource = void 0;
+const enum_1 = require("@managemint-solutions/entities/support/tickets/enum");
+const enum_2 = require("@managemint-solutions/entities/audit-trail/enum");
+const audit_1 = require("../../audit");
+const errors_1 = require("../../errors");
+const transforms_1 = require("../../transforms");
+__exportStar(require("./dto"), exports);
+const SUPPORT_TICKETS_TABLE = {
+    table: 'support_tickets',
+    entityType: enum_2.AuditTrailEntityType.SUPPORT_TICKETS,
+};
+const SUPPORT_MESSAGES_TABLE = {
+    table: 'support_messages',
+    entityType: enum_2.AuditTrailEntityType.SUPPORT_MESSAGES,
+};
+// The public contract is the shared entities types; the casts at the returns declare the shape
+// these select strings produce (the columns are defined in the api's supabase/migrations).
+// `staff` is embedded through the `assigned_to` column, the same way every other embed here
+// names its foreign key column rather than the constraint behind it.
+const STAFF_EMBED = `(
+          mms_id,
+          name,
+          surname
+        )`;
+const SUPPORT_TICKET_LIST_SELECT = `
+        mms_id,
+        created_at,
+        updated_at,
+        subject,
+        status,
+        priority,
+        category,
+        assigned_to_staff:staff!assigned_to ${STAFF_EMBED}
+      `;
+const SUPPORT_TICKET_DETAIL_SELECT = `
+        mms_id,
+        created_at,
+        created_by:user_profiles!created_by ${transforms_1.USER_PROFILE_EMBED},
+        updated_at,
+        subject,
+        description,
+        status,
+        priority,
+        category,
+        assigned_to_staff:staff!assigned_to ${STAFF_EMBED},
+        attachments,
+        resolved_at,
+        closed_at
+      `;
+const SUPPORT_MESSAGE_SELECT = `
+        mms_id,
+        created_at,
+        created_by:user_profiles!created_by ${transforms_1.USER_PROFILE_EMBED},
+        author_type,
+        author_email,
+        source,
+        body,
+        attachments
+      `;
+/**
+ * The statuses a client reply may move a ticket out of — every one but `closed`, which is
+ * terminal. `resolved` is deliberately in the list: a reply reopens a resolved ticket.
+ */
+const CLIENT_REPLY_FROM = [
+    enum_1.SupportTicketStatus.OPEN,
+    enum_1.SupportTicketStatus.AWAITING_AGENT,
+    enum_1.SupportTicketStatus.AWAITING_USER,
+    enum_1.SupportTicketStatus.RESOLVED,
+];
+/**
+ * The statuses an agent reply may move a ticket out of. `resolved` is absent — an agent writing
+ * on a resolved ticket is a parting note, not a reason to put the ball back in the client's court.
+ */
+const AGENT_REPLY_FROM = [
+    enum_1.SupportTicketStatus.OPEN,
+    enum_1.SupportTicketStatus.AWAITING_AGENT,
+    enum_1.SupportTicketStatus.AWAITING_USER,
+];
+/** The statuses `resolve` may move a ticket out of — anything still live. */
+const RESOLVABLE_FROM = [
+    enum_1.SupportTicketStatus.OPEN,
+    enum_1.SupportTicketStatus.AWAITING_AGENT,
+    enum_1.SupportTicketStatus.AWAITING_USER,
+];
+/** The 400 a portal or admin reply gets when the thread is over. */
+const ticketClosed = () => new errors_1.SupabaseClientError({
+    status: 400,
+    error: 'Ticket Closed',
+    message: 'This ticket is closed and can no longer be replied to.',
+});
+/**
+ * A member's own tickets. Every read and write is scoped by `organization_id`, matching the RLS
+ * policies, and both tables are audited: `support_tickets` for the ticket and its status moves,
+ * `support_messages` for the thread.
+ *
+ * The write payloads are deliberately narrow. Members hold an INSERT grant on `support_messages`
+ * that omits `author_type`/`author_email`/`source`/`email_message_id` — the column defaults do
+ * that work, so a member cannot forge an agent message — and an UPDATE grant on
+ * `support_tickets` of `(status, updated_at)` only, which is why assignment, resolution and
+ * closure live on the admin resource instead.
+ */
+class SupportTicketsResource {
+    supabase;
+    auth;
+    ticketsTable;
+    messagesTable;
+    constructor(supabase, auth, audit) {
+        this.supabase = supabase;
+        this.auth = auth;
+        this.ticketsTable = (0, audit_1.auditedTable)(supabase, auth, audit, SUPPORT_TICKETS_TABLE);
+        this.messagesTable = (0, audit_1.auditedTable)(supabase, auth, audit, SUPPORT_MESSAGES_TABLE);
+    }
+    async list(query) {
+        // `order` returns `this`, so the builder stays a filter builder and the conditional filter
+        // below can be reassigned onto it without a cast.
+        let ticketsQuery = this.supabase
+            .from('support_tickets')
+            .select(SUPPORT_TICKET_LIST_SELECT)
+            .eq('organization_id', this.auth.organization_id)
+            .eq('deleted', false)
+            .order('created_at', { ascending: false });
+        if (query.status) {
+            ticketsQuery = ticketsQuery.eq('status', query.status);
+        }
+        const { data, error } = await ticketsQuery;
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return data;
+    }
+    async getById(ticketId) {
+        const { data, error } = await this.supabase
+            .from('support_tickets')
+            .select(SUPPORT_TICKET_DETAIL_SELECT)
+            .eq('mms_id', ticketId)
+            .eq('organization_id', this.auth.organization_id)
+            .single();
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return data;
+    }
+    /** The thread, oldest first — it is a conversation, and it is append-only. */
+    async messages(ticketId) {
+        const { data, error } = await this.supabase
+            .from('support_messages')
+            .select(SUPPORT_MESSAGE_SELECT)
+            .eq('organization_id', this.auth.organization_id)
+            .eq('ticket_id', ticketId)
+            .order('created_at', { ascending: true });
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return data;
+    }
+    async create(input) {
+        // `status` is left out, and so are `priority`/`category` when the caller sent nothing: the
+        // column defaults (`open`, `normal`, `other`) are what a new ticket is meant to start as.
+        const row = await this.ticketsTable.insert({
+            subject: input.subject,
+            description: input.description,
+            ...(input.priority ? { priority: input.priority } : {}),
+            ...(input.category ? { category: input.category } : {}),
+            attachments: input.attachments ?? [],
+            organization_id: this.auth.organization_id,
+            created_by: this.auth.mms_id,
+        });
+        return this.getById(row.mms_id);
+    }
+    /**
+     * A client's reply. The status is read first because a closed ticket must be refused outright
+     * — no row written, a 400 back — rather than silently swallowed by the compare-and-set below.
+     *
+     * Everything else moves the ticket to `awaiting_agent`, including `resolved`, which is what
+     * reopens it. The move is guarded so a reply that races the agent closing the ticket loses
+     * cleanly: the message stands, the status does not move.
+     */
+    async reply(ticketId, input) {
+        const { data, error } = await this.supabase
+            .from('support_tickets')
+            .select('mms_id, status')
+            .eq('mms_id', ticketId)
+            .eq('organization_id', this.auth.organization_id)
+            .single();
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        if (data.status === enum_1.SupportTicketStatus.CLOSED) {
+            throw ticketClosed();
+        }
+        // Only the columns the member's INSERT grant covers — `author_type`, `source` and the rest
+        // are the table's defaults, not this caller's to state.
+        const row = await this.messagesTable.insert({
+            ticket_id: ticketId,
+            body: input.body,
+            attachments: input.attachments ?? [],
+            organization_id: this.auth.organization_id,
+            created_by: this.auth.mms_id,
+        });
+        await this.ticketsTable.updateWhere(ticketId, (query) => query.in('status', CLIENT_REPLY_FROM), {
+            status: enum_1.SupportTicketStatus.AWAITING_AGENT,
+            updated_at: new Date().toISOString(),
+        });
+        return this.messageById(row.mms_id);
+    }
+    /** The just-written message, re-read so the caller gets the entity shape, embed and all. */
+    async messageById(messageId) {
+        const { data, error } = await this.supabase
+            .from('support_messages')
+            .select(SUPPORT_MESSAGE_SELECT)
+            .eq('mms_id', messageId)
+            .eq('organization_id', this.auth.organization_id)
+            .single();
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return data;
+    }
+}
+exports.SupportTicketsResource = SupportTicketsResource;
+/**
+ * The reply tokens, in their own table. Nothing here is granted to `authenticated` at all, which
+ * is what lets `support_tickets` keep full column grants — and so lets every member-side audited
+ * write, which pre-reads with `select('*')`, work at all.
+ */
+const SUPPORT_TICKET_EMAIL_TOKENS = 'support_ticket_email_tokens';
+const SUPPORT_TICKET_SECRETS_SELECT = `
+        mms_id,
+        organization_id,
+        created_at,
+        created_by,
+        subject,
+        description,
+        status,
+        priority,
+        category,
+        assigned_to,
+        deleted
+      `;
+/** A token row with the ticket it points at, read from the foreign key's own side. */
+const SUPPORT_TICKET_BY_TOKEN_SELECT = `
+        email_token,
+        ticket:support_tickets!ticket_id (${SUPPORT_TICKET_SECRETS_SELECT})
+      `;
+/**
+ * The agent's side of support, on the service client: the inbound email webhook, which knows only
+ * a reply token, and the shared-secret admin routes. RLS reserves everything here to the service
+ * role — `assigned_to`, `resolved_at`, `closed_at` and the agent columns on a message are all
+ * outside a member's grants, and `support_ticket_email_tokens` is outside every member's grant
+ * entirely.
+ *
+ * Reads that answer "which tenant is this?" are unscoped by necessity; every write is attributed
+ * to the row's own organization, with the actor being the matched user for an inbound client mail
+ * and `null` for agent and system work.
+ */
+class SupportTicketsAdminResource {
+    supabase;
+    tableFor;
+    constructor(supabase, tableFor) {
+        this.supabase = supabase;
+        this.tableFor = tableFor;
+    }
+    tickets(organizationId, actorMmsId = null) {
+        return this.tableFor(organizationId, actorMmsId, SUPPORT_TICKETS_TABLE);
+    }
+    messages(organizationId, actorMmsId = null) {
+        return this.tableFor(organizationId, actorMmsId, SUPPORT_MESSAGES_TABLE);
+    }
+    /**
+     * Every organization's tickets in one list. Deliberately unscoped: the sole support agent works
+     * across tenants, and this read is what the service role exists for.
+     */
+    async listAll() {
+        const { data, error } = await this.supabase
+            .from('support_tickets')
+            .select(`organization_id, ${SUPPORT_TICKET_LIST_SELECT}`)
+            .eq('deleted', false)
+            .order('created_at', { ascending: false });
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return data;
+    }
+    /**
+     * The ticket behind a reply address. Read from the token table, which is the side that holds
+     * the foreign key, so the ticket arrives embedded and one query answers the whole question.
+     * Also unscoped by necessity — an inbound email carries nothing but the token, and the row it
+     * matches is what says which tenant it belongs to. No match means the mail was never ticket
+     * mail, and neither is a soft-deleted ticket.
+     */
+    async findByEmailToken(token) {
+        const { data, error } = await this.supabase
+            .from(SUPPORT_TICKET_EMAIL_TOKENS)
+            .select(SUPPORT_TICKET_BY_TOKEN_SELECT)
+            .eq('email_token', token)
+            .maybeSingle();
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        const row = (data ?? null);
+        if (!row?.ticket || row.ticket.deleted)
+            return null;
+        return { ...row.ticket, email_token: row.email_token };
+    }
+    /**
+     * The same shape by id, for the admin routes, which already know the ticket they are acting on.
+     * The ticket is read first and on its own: an admin must be able to work a ticket whose token
+     * row is missing, so the token is looked up separately and its absence is a `null`, not a 404.
+     */
+    async getWithSecrets(ticketId) {
+        const { data, error } = await this.supabase
+            .from('support_tickets')
+            .select(SUPPORT_TICKET_SECRETS_SELECT)
+            .eq('mms_id', ticketId)
+            .single();
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        const ticket = data;
+        return { ...ticket, email_token: await this.emailToken(ticketId) };
+    }
+    /**
+     * Mints the ticket's reply token. The api calls it as soon as a member's ticket is created,
+     * and the address `support+<token>@…` is built from what comes back.
+     *
+     * A plain insert, deliberately unaudited: there is no `AuditTrailEntityType` for the table, and
+     * `audit_logs` is readable by any member holding `read_logs` — so a token snapshotted into a
+     * change set would be the one leak the separate table exists to prevent.
+     */
+    async createEmailToken(ticketId) {
+        const { data, error } = await this.supabase
+            .from(SUPPORT_TICKET_EMAIL_TOKENS)
+            .insert({ ticket_id: ticketId })
+            .select('email_token')
+            .single();
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return data.email_token;
+    }
+    async emailToken(ticketId) {
+        const { data, error } = await this.supabase
+            .from(SUPPORT_TICKET_EMAIL_TOKENS)
+            .select('email_token')
+            .eq('ticket_id', ticketId)
+            .maybeSingle();
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return data?.email_token ?? null;
+    }
+    /**
+     * An agent's reply, from the mail Scott sends or from the admin route. The ball goes back to
+     * the client — but only from a live status, so writing on a resolved or closed ticket leaves it
+     * where it is.
+     */
+    async addAgentMessage(ticket, message) {
+        // No user is behind agent work, so the audit actor stays null — `audit_logs.created_by` is
+        // nullable precisely for this.
+        const row = await this.messages(ticket.organization_id).insert({
+            ticket_id: ticket.mms_id,
+            organization_id: ticket.organization_id,
+            created_by: null,
+            author_type: enum_1.SupportMessageAuthorType.AGENT,
+            author_email: message.author_email,
+            source: message.source,
+            email_message_id: message.email_message_id ?? null,
+            body: message.body,
+            attachments: message.attachments ?? [],
+        });
+        await this.tickets(ticket.organization_id).updateWhere(ticket.mms_id, (query) => query.in('status', AGENT_REPLY_FROM), {
+            status: enum_1.SupportTicketStatus.AWAITING_USER,
+            updated_at: new Date().toISOString(),
+        });
+        return row;
+    }
+    /**
+     * A client's reply that arrived by email. `userMmsId` is the profile the From header was matched
+     * to — the classification the webhook has already done — so the message and the status move are
+     * attributed to them exactly as a portal reply would be, reopening a resolved ticket.
+     */
+    async addInboundUserMessage(ticket, userMmsId, message) {
+        const row = await this.messages(ticket.organization_id, userMmsId).insert({
+            ticket_id: ticket.mms_id,
+            organization_id: ticket.organization_id,
+            created_by: userMmsId,
+            author_type: enum_1.SupportMessageAuthorType.USER,
+            author_email: message.author_email,
+            source: enum_1.SupportMessageSource.EMAIL,
+            email_message_id: message.email_message_id ?? null,
+            body: message.body,
+            attachments: message.attachments ?? [],
+        });
+        await this.tickets(ticket.organization_id, userMmsId).updateWhere(ticket.mms_id, (query) => query.in('status', CLIENT_REPLY_FROM), {
+            status: enum_1.SupportTicketStatus.AWAITING_AGENT,
+            updated_at: new Date().toISOString(),
+        });
+        return row;
+    }
+    /**
+     * Puts a ticket on a staff member. Works for a first assign and a reassign alike, and refuses
+     * on a closed ticket — the guard is `status <> closed`, so losing that race writes nothing and
+     * returns null.
+     *
+     * A first assign additionally puts the ticket in the agent's queue, but only from `open`: a
+     * thread that has already moved on keeps the status it earned, and a reassign never touches
+     * status at all. That flip is its own compare-and-set rather than part of the patch above, so
+     * a status that moves between the two never gets overwritten.
+     */
+    async assign(ticketId, staffMmsId) {
+        const ticket = await this.getWithSecrets(ticketId);
+        const firstAssign = ticket.assigned_to === null;
+        const table = this.tickets(ticket.organization_id);
+        const at = new Date().toISOString();
+        const assigned = await table.updateWhere(ticketId, (query) => query.neq('status', enum_1.SupportTicketStatus.CLOSED), { assigned_to: staffMmsId, updated_at: at });
+        if (!assigned)
+            return null;
+        if (!firstAssign)
+            return assigned;
+        const queued = await table.updateWhere(ticketId, (query) => query.eq('status', enum_1.SupportTicketStatus.OPEN), { status: enum_1.SupportTicketStatus.AWAITING_AGENT, updated_at: at });
+        return queued ?? assigned;
+    }
+    /** Resolves a live ticket. Concurrent resolves settle on one write; the loser returns null. */
+    async resolve(ticketId) {
+        const ticket = await this.getWithSecrets(ticketId);
+        const at = new Date().toISOString();
+        return this.tickets(ticket.organization_id).updateWhere(ticketId, (query) => query.in('status', RESOLVABLE_FROM), { status: enum_1.SupportTicketStatus.RESOLVED, resolved_at: at, updated_at: at });
+    }
+    /** Closes a ticket from any status but closed. Terminal — nothing reopens it. */
+    async close(ticketId) {
+        const ticket = await this.getWithSecrets(ticketId);
+        const at = new Date().toISOString();
+        return this.tickets(ticket.organization_id).updateWhere(ticketId, (query) => query.neq('status', enum_1.SupportTicketStatus.CLOSED), { status: enum_1.SupportTicketStatus.CLOSED, closed_at: at, updated_at: at });
+    }
+}
+exports.SupportTicketsAdminResource = SupportTicketsAdminResource;
+//# sourceMappingURL=index.js.map

package/dist/support/tickets/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/support/tickets/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAMA,8EAI6D;AAC7D,0EAAuF;AAEvF,uCAMqB;AAErB,yCAAsE;AACtE,iDAAsD;AAGtD,wCAAsB;AAEtB,MAAM,qBAAqB,GAAG;IAC5B,KAAK,EAAE,iBAAiB;IACxB,UAAU,EAAE,2BAAoB,CAAC,eAAe;CACxC,CAAC;AAEX,MAAM,sBAAsB,GAAG;IAC7B,KAAK,EAAE,kBAAkB;IACzB,UAAU,EAAE,2BAAoB,CAAC,gBAAgB;CACzC,CAAC;AAEX,+FAA+F;AAC/F,2FAA2F;AAC3F,4FAA4F;AAC5F,qEAAqE;AACrE,MAAM,WAAW,GAAG;;;;UAID,CAAC;AAEpB,MAAM,0BAA0B,GAAG;;;;;;;;8CAQW,WAAW;OACzC,CAAC;AAEjB,MAAM,4BAA4B,GAAG;;;8CAGS,+BAAkB;;;;;;;8CAOlB,WAAW;;;;OAIzC,CAAC;AAEjB,MAAM,sBAAsB,GAAG;;;8CAGe,+BAAkB;;;;;;OAMhD,CAAC;AAEjB;;;GAGG;AACH,MAAM,iBAAiB,GAA0B;IAC/C,0BAAmB,CAAC,IAAI;IACxB,0BAAmB,CAAC,cAAc;IAClC,0BAAmB,CAAC,aAAa;IACjC,0BAAmB,CAAC,QAAQ;CAC7B,CAAC;AAEF;;;GAGG;AACH,MAAM,gBAAgB,GAA0B;IAC9C,0BAAmB,CAAC,IAAI;IACxB,0BAAmB,CAAC,cAAc;IAClC,0BAAmB,CAAC,aAAa;CAClC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,eAAe,GAA0B;IAC7C,0BAAmB,CAAC,IAAI;IACxB,0BAAmB,CAAC,cAAc;IAClC,0BAAmB,CAAC,aAAa;CAClC,CAAC;AAEF,oEAAoE;AACpE,MAAM,YAAY,GAAG,GAAwB,EAAE,CAC7C,IAAI,4BAAmB,CAAC;IACtB,MAAM,EAAE,GAAG;IACX,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,wDAAwD;CAClE,CAAC,CAAC;AAEL;;;;;;;;;;GAUG;AACH,MAAa,sBAAsB;IAKd;IACA;IALF,YAAY,CAAe;IAC3B,aAAa,CAAe;IAE7C,YACmB,QAA6B,EAC7B,IAAiB,EAClC,KAAoB;QAFH,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,SAAI,GAAJ,IAAI,CAAa;QAGlC,IAAI,CAAC,YAAY,GAAG,IAAA,oBAAY,EAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAC;QAC/E,IAAI,CAAC,aAAa,GAAG,IAAA,oBAAY,EAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAA2B;QACpC,2FAA2F;QAC3F,kDAAkD;QAClD,IAAI,YAAY,GAAG,IAAI,CAAC,QAAQ;aAC7B,IAAI,CAAC,iBAAiB,CAAC;aACvB,MAAM,CAAC,0BAA0B,CAAC;aAClC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;aAChD,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAE7C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,YAAY,GAAG,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC;QAC3C,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,IAAyC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,iBAAiB,CAAC;aACvB,MAAM,CAAC,4BAA4B,CAAC;aACpC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;aACtB,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;aAChD,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,IAAsC,CAAC;IAChD,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,kBAAkB,CAAC;aACxB,MAAM,CAAC,sBAAsB,CAAC;aAC9B,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;aAChD,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;aACzB,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,IAAyC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA6B;QACxC,2FAA2F;QAC3F,0FAA0F;QAC1F,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACzC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;YACpC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe;YAC1C,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;SAC7B,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAgB,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,KAA4B;QACxD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,iBAAiB,CAAC;aACvB,MAAM,CAAC,gBAAgB,CAAC;aACxB,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;aACtB,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;aAChD,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,IAAK,IAAwC,CAAC,MAAM,KAAK,0BAAmB,CAAC,MAAM,EAAE,CAAC;YACpF,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;QAED,2FAA2F;QAC3F,wDAAwD;QACxD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAC1C,SAAS,EAAE,QAAQ;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;YACpC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe;YAC1C,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;SAC7B,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CACjC,QAAQ,EACR,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAChD;YACE,MAAM,EAAE,0BAAmB,CAAC,cAAc;YAC1C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAgB,CAAC,CAAC;IAChD,CAAC;IAED,4FAA4F;IACpF,KAAK,CAAC,WAAW,CAAC,SAAiB;QACzC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,kBAAkB,CAAC;aACxB,MAAM,CAAC,sBAAsB,CAAC;aAC9B,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;aACvB,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;aAChD,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,IAAuC,CAAC;IACjD,CAAC;CACF;AAjID,wDAiIC;AAuDD;;;;GAIG;AACH,MAAM,2BAA2B,GAAG,6BAAsC,CAAC;AAE3E,MAAM,6BAA6B,GAAG;;;;;;;;;;;;OAYtB,CAAC;AAEjB,sFAAsF;AACtF,MAAM,8BAA8B,GAAG;;4CAEK,6BAA6B;OACzD,CAAC;AAQjB;;;;;;;;;;GAUG;AACH,MAAa,2BAA2B;IAEnB;IACA;IAFnB,YACmB,QAA6B,EAC7B,QAAoC;QADpC,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,aAAQ,GAAR,QAAQ,CAA4B;IACpD,CAAC;IAEI,OAAO,CAAC,cAAsB,EAAE,aAA4B,IAAI;QACtE,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;IAC1E,CAAC;IAEO,QAAQ,CAAC,cAAsB,EAAE,aAA4B,IAAI;QACvE,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;IAC3E,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,iBAAiB,CAAC;aACvB,MAAM,CAAC,oBAAoB,0BAA0B,EAAE,CAAC;aACxD,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,IAA8C,CAAC;IACxD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,2BAA2B,CAAC;aACjC,MAAM,CAAC,8BAA8B,CAAC;aACtC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC;aACxB,WAAW,EAAE,CAAC;QACjB,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,CAA6C,CAAC;QACvE,IAAI,CAAC,GAAG,EAAE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAEpD,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;IACzD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,iBAAiB,CAAC;aACvB,MAAM,CAAC,6BAA6B,CAAC;aACrC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;aACtB,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,IAAgE,CAAC;QAEhF,OAAO,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;IACrE,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACrC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,2BAA2B,CAAC;aACjC,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;aAC/B,MAAM,CAAC,aAAa,CAAC;aACrB,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAQ,IAAgC,CAAC,WAAW,CAAC;IACvD,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,QAAgB;QACvC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,2BAA2B,CAAC;aACjC,MAAM,CAAC,aAAa,CAAC;aACrB,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;aACzB,WAAW,EAAE,CAAC;QACjB,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAE1C,OAAQ,IAAuC,EAAE,WAAW,IAAI,IAAI,CAAC;IACvE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CACnB,MAAgC,EAChC,OAAiC;QAEjC,2FAA2F;QAC3F,+BAA+B;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;YAC7D,SAAS,EAAE,MAAM,CAAC,MAAM;YACxB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,+BAAwB,CAAC,KAAK;YAC3C,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;YAClD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;SACvC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,CACpD,MAAM,CAAC,MAAM,EACb,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAC/C;YACE,MAAM,EAAE,0BAAmB,CAAC,aAAa;YACzC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CACF,CAAC;QAEF,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,qBAAqB,CACzB,MAAgC,EAChC,SAAiB,EACjB,OAAmC;QAEnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC;YACxE,SAAS,EAAE,MAAM,CAAC,MAAM;YACxB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,UAAU,EAAE,SAAS;YACrB,WAAW,EAAE,+BAAwB,CAAC,IAAI;YAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,MAAM,EAAE,2BAAoB,CAAC,KAAK;YAClC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;YAClD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;SACvC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,WAAW,CAC/D,MAAM,CAAC,MAAM,EACb,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAChD;YACE,MAAM,EAAE,0BAAmB,CAAC,cAAc;YAC1C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CACF,CAAC;QAEF,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,UAAkB;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CACtC,QAAQ,EACR,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,0BAAmB,CAAC,MAAM,CAAC,EAC1D,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,CAC5C,CAAC;QACF,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,IAAI,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CACpC,QAAQ,EACR,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,0BAAmB,CAAC,IAAI,CAAC,EACvD,EAAE,MAAM,EAAE,0BAAmB,CAAC,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,CAC/D,CAAC;QAEF,OAAO,MAAM,IAAI,QAAQ,CAAC;IAC5B,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEpC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,CACrD,QAAQ,EACR,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,EAC9C,EAAE,MAAM,EAAE,0BAAmB,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,KAAK,CAAC,QAAgB;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEpC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,CACrD,QAAQ,EACR,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,0BAAmB,CAAC,MAAM,CAAC,EAC1D,EAAE,MAAM,EAAE,0BAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CACtE,CAAC;IACJ,CAAC;CACF;AAhOD,kEAgOC"}

package/dist/users/dto.d.ts

@@ -1,4 +1,4 @@
-import type { CreateUserDto as CreateUserDtoType, GetUsersDto as GetUsersDtoType, UpdateUserDto as UpdateUserDtoType, UserIdDto as UserIdDtoType } from '@managemint-solutions/entities/users/dto';
+import type { CreateUserDto as CreateUserDtoType, GetUsersDto as GetUsersDtoType, UpdateMyProfileDto as UpdateMyProfileDtoType, UpdateUserDto as UpdateUserDtoType, UserIdDto as UserIdDtoType } from '@managemint-solutions/entities/users/dto';
 import { EmergencyContactRelationship, EmploymentType } from '@managemint-solutions/entities/users/enum';
 export declare class UserIdDto implements UserIdDtoType {
     readonly userId: string;
@@ -49,3 +49,29 @@ export declare class UpdateUserDto implements UpdateUserDtoType {
     readonly emergency_contact_phone?: string | null;
     readonly emergency_contact_email?: string | null;
 }
+/**
+ * `PATCH /users/me` — what a member may change about themselves.
+ *
+ * Every field here also appears on UpdateUserDto with the same constraints; what makes
+ * this a separate class is what it *omits*. The api's ValidationPipe runs
+ * `whitelist + forbidNonWhitelisted`, so a self-service request carrying `job_title`,
+ * `manager_id`, `employment_type`, `start_date`, `end_date` or `profile_image` is
+ * rejected with a 400 rather than silently ignored — the narrowing is the guard.
+ */
+export declare class UpdateMyProfileDto implements UpdateMyProfileDtoType {
+    readonly name: string;
+    readonly surname: string;
+    readonly phone: string;
+    readonly country_code: string;
+    readonly birthday?: string | null;
+    readonly social_facebook?: string | null;
+    readonly social_linkedin?: string | null;
+    readonly social_twitter?: string | null;
+    readonly social_instagram?: string | null;
+    readonly social_github?: string | null;
+    readonly social_website?: string | null;
+    readonly emergency_contact_name?: string | null;
+    readonly emergency_contact_relationship?: EmergencyContactRelationship | null;
+    readonly emergency_contact_phone?: string | null;
+    readonly emergency_contact_email?: string | null;
+}