@managemint-solutions/sdk 0.33.0 → 0.35.0

package/README.md

@@ -18,10 +18,11 @@ are peer dependencies — the request DTOs (`AddStatusDto`, `UpdateStatusDto`, `
 `UpdateProjectDto`, `GetTasksDto`, `TaskIdDto`, `CreateTaskDto`, `UpdateTaskDto`,
 `GetAuditTrailDto`, `SignInDto`,
 `ExchangeRefreshTokenDto`, `SendPasswordResetEmailDto`, `ExchangeTokenHashDto`,
-`ResetPasswordDto`) ship with their class-validator
+`ResetPasswordDto`, `CreateConfigDto`, `UpdateConfigDto`) ship with their class-validator
 decorators so consumers validate against
 the same rules the SDK's input types describe. `@nestjs/common` (^11) is an optional peer
-dependency, needed only for the `@managemint-solutions/sdk/nest` subpath.
+dependency, needed only for the `@managemint-solutions/sdk/nest` subpath, and `@upstash/redis`
+(^1.38) is an optional peer needed only for the `@managemint-solutions/sdk/cache` subpath.
 
 ## Usage
 
@@ -378,6 +379,27 @@ const total = monthlyTotalMinor(pricebook, ['CRM'], seatCount);
 Each pricebook comes back with its `modules` flattened to `PricedModule`s (the `pricebook_modules`
 row joined with its `billing_modules` catalog entry). Exactly one pricebook is active at a time.
 
+## Configs
+
+`public.configs` holds global named JSON configs — one `value` object per row, with no
+organization on it. Every signed-in caller may read, and only the service role may write, so
+`configs` hangs off the caller's client and the service client alike and a write on the former
+fails at the database (Scott edits the rows in Supabase Studio for now). A feature-flag set is
+just a row someone named, not a concept the SDK knows about, and the table is not audited.
+
+```ts
+import type { ConfigEntity } from '@managemint-solutions/entities/configs';
+
+const all: ConfigEntity[] = await supabase.configs.list();          // user client reads
+const flags = await supabase.configs.getByName('feature_flags');   // whatever rows exist in Studio
+const one = await supabase.configs.getById(flags.mms_id);
+
+const service = createSupabaseServiceClient({ url, serviceRoleKey });
+await service.configs.create({ name: 'maintenance', description: 'Planned downtime banner' });
+await service.configs.update('feature_flags', { value: { ...flags.value, timesheets: false } }); // replaces the object, stamps updated_at
+await service.configs.remove('maintenance');   // hard delete, service role only
+```
+
 ## Errors
 
 Every error the SDK throws is a `SupabaseClientError` carrying the HTTP `status` to respond
@@ -391,6 +413,33 @@ missing JWT is `401 Authentication Error`. Consumers return these as-is instead
 database errors themselves, and `error.code` keeps the raw Postgres code for the few callers
 that branch on one (the invoice-number retry on `23505`).
 
+## Cache
+
+```ts
+import { createTaggedCache } from '@managemint-solutions/sdk/cache';
+import { userMeCacheKey, userCacheTag, USER_ME_CACHE_TTL_SECONDS } from '@managemint-solutions/entities/users/cache';
+
+const cache = createTaggedCache({ url: UPSTASH_REDIS_REST_URL, token: UPSTASH_REDIS_REST_TOKEN });
+
+await cache.set(userMeCacheKey(mmsId), profile, { ttl: USER_ME_CACHE_TTL_SECONDS, tags: [userCacheTag(mmsId)] });
+const hit = await cache.get<LoggedInUser>(userMeCacheKey(mmsId)); // null on a miss
+await cache.invalidateTag([userCacheTag(mmsId)]);
+```
+
+A tag-aware key-value cache on Upstash Redis (REST), shared by the portal, which reads and
+writes each member's own `GET /users/me`, and the api, which only expires it after a write.
+Redis has no tags, so each tag is a set of the keys written under it, stored as `tag:<tag>`
+and expiring with its newest member: `set` is one pipeline (`SET … EX ttl`, then `SADD` and
+`EXPIRE` per tag), `invalidateTag` is two round trips (`SMEMBERS` per tag, then one `DEL` of the
+members and the sets). Values are JSON-serialised by the client; `get<T>` is the caller's
+promise about what was written, not a check.
+
+The client takes its URL and token as config — the SDK reads no environment variables — and
+retries once with a three-second timeout per request. It **throws** on a failed call: what a
+failure means is the caller's decision, and both callers today fail open (a miss on the portal,
+a Sentry report on the api). The key, tag and TTL contract for the profile entry lives in
+`@managemint-solutions/entities/users/cache`, so the tagging is one edit for both sides.
+
 ## NestJS
 
 ```ts

package/dist/cache/index.d.ts

@@ -0,0 +1,41 @@
+/**
+ * A tag-aware key-value cache on Upstash Redis, shared by the portal (which reads and writes
+ * profile entries) and the api (which only expires them).
+ *
+ * Redis has no tags of its own, so each tag is a set of the keys written under it, stored as
+ * `tag:<tag>`. Expiring a tag deletes every key in the set and the set itself. The sets expire
+ * with the entries they hold, so an entry that simply ages out leaves nothing behind.
+ *
+ * Deliberately narrow: three calls and no knowledge of what is cached. The key, tag and TTL
+ * contract for the one thing cached today lives in `@managemint-solutions/entities/users/cache`.
+ *
+ * Like every other client in the SDK it takes its configuration as an argument and reads no
+ * environment variables. It throws on a failed call; the callers decide what a failure means,
+ * and both of them fail open.
+ */
+export type TaggedCacheConfig = {
+    /** The database's REST URL, `https://<name>.upstash.io`. */
+    url: string;
+    /** The database's REST token. */
+    token: string;
+};
+export type TaggedCacheSetOptions = {
+    /** Seconds until the entry expires on its own. */
+    ttl: number;
+    /** The tags a later `invalidateTag` may drop the entry under. */
+    tags?: string[];
+};
+export declare class TaggedCache {
+    private readonly redis;
+    constructor(config: TaggedCacheConfig);
+    /**
+     * The entry under `key`, or null when there is none. The value is JSON-parsed by the
+     * client; `T` is the caller's promise about what was written, not a check.
+     */
+    get<T>(key: string): Promise<T | null>;
+    /** Writes `value` under `key` for `ttl` seconds, and files the key under each tag. One round trip. */
+    set(key: string, value: unknown, { ttl, tags }: TaggedCacheSetOptions): Promise<void>;
+    /** Deletes every entry filed under any of `tags`, and the tag sets themselves. Two round trips. */
+    invalidateTag(tags: string[]): Promise<void>;
+}
+export declare const createTaggedCache: (config: TaggedCacheConfig) => TaggedCache;

package/dist/cache/index.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTaggedCache = exports.TaggedCache = void 0;
+const redis_1 = require("@upstash/redis");
+/**
+ * How long one Upstash call may take before it is abandoned. Every call here sits on the
+ * request path - a portal boot on the read side, a profile write on the expiry side - so a
+ * stalled Redis must cost the caller a bounded wait and nothing more.
+ */
+const REQUEST_TIMEOUT_MS = 3_000;
+/** One retry, briefly: the callers fail open, so patience only lengthens the miss. */
+const RETRY = { retries: 1, backoff: () => 200 };
+const tagSetKey = (tag) => `tag:${tag}`;
+class TaggedCache {
+    redis;
+    constructor(config) {
+        this.redis = new redis_1.Redis({
+            url: config.url,
+            token: config.token,
+            retry: RETRY,
+            // A function, so each request gets a fresh signal; one shared signal would be dead for
+            // every call after the first timeout.
+            signal: () => AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+        });
+    }
+    /**
+     * The entry under `key`, or null when there is none. The value is JSON-parsed by the
+     * client; `T` is the caller's promise about what was written, not a check.
+     */
+    get(key) {
+        return this.redis.get(key);
+    }
+    /** Writes `value` under `key` for `ttl` seconds, and files the key under each tag. One round trip. */
+    async set(key, value, { ttl, tags = [] }) {
+        const pipeline = this.redis.pipeline().set(key, value, { ex: ttl });
+        for (const tag of tags) {
+            // The set lives at least as long as its newest member, so a member can never outlive
+            // the set that would be used to find it.
+            pipeline.sadd(tagSetKey(tag), key).expire(tagSetKey(tag), ttl);
+        }
+        await pipeline.exec();
+    }
+    /** Deletes every entry filed under any of `tags`, and the tag sets themselves. Two round trips. */
+    async invalidateTag(tags) {
+        if (tags.length === 0) {
+            return;
+        }
+        const sets = tags.map(tagSetKey);
+        const read = this.redis.pipeline();
+        for (const set of sets) {
+            read.smembers(set);
+        }
+        const members = (await read.exec()).flat();
+        await this.redis.del(...new Set([...members, ...sets]));
+    }
+}
+exports.TaggedCache = TaggedCache;
+const createTaggedCache = (config) => new TaggedCache(config);
+exports.createTaggedCache = createTaggedCache;

package/dist/client.d.ts

@@ -3,6 +3,7 @@ import { type AuthContext } from './auth';
 import { AuditResource, type AuditErrorHandler } from './audit';
 import { AdditionalDetailsResource } from './additional-details';
 import { ClientsResource } from './clients';
+import { ConfigsResource } from './configs';
 import { NotesResource } from './notes';
 import { NotificationsResource } from './notifications';
 import { BillingReadsResource } from './billing';
@@ -41,6 +42,7 @@ export declare class SupabaseClient {
     readonly supabase: TypedSupabaseClient;
     readonly auth: AuthContext;
     readonly audit: AuditResource;
+    readonly configs: ConfigsResource;
     readonly statuses: StatusesResource;
     readonly additionalDetails: AdditionalDetailsResource;
     readonly notes: NotesResource;

package/dist/client.js

@@ -5,6 +5,7 @@ const auth_1 = require("./auth");
 const audit_1 = require("./audit");
 const additional_details_1 = require("./additional-details");
 const clients_1 = require("./clients");
+const configs_1 = require("./configs");
 const notes_1 = require("./notes");
 const notifications_1 = require("./notifications");
 const billing_1 = require("./billing");
@@ -25,6 +26,8 @@ class SupabaseClient {
     supabase; // escape hatch for not-yet-migrated queries
     auth;
     audit;
+    // Reads run under the authenticated grant; the writes are the service client's.
+    configs;
     statuses;
     additionalDetails;
     notes;
@@ -44,6 +47,7 @@ class SupabaseClient {
             config.client ?? (0, auth_1.createRawClient)(config.url, config.key, config.accessToken);
         // Built before the resources: every write they make goes through it.
         this.audit = new audit_1.AuditResource(this.supabase, this.auth, config.onAuditError);
+        this.configs = new configs_1.ConfigsResource(this.supabase);
         this.statuses = new statuses_1.StatusesResource(this.supabase, this.auth, this.audit);
         this.additionalDetails = new additional_details_1.AdditionalDetailsResource(this.supabase, this.auth, this.audit);
         this.notes = new notes_1.NotesResource(this.supabase, this.auth, this.audit);

package/dist/configs/dto.d.ts

@@ -0,0 +1,11 @@
+import type { ConfigValue } from '@managemint-solutions/entities/configs';
+import type { CreateConfigDto as CreateConfigDtoType, UpdateConfigDto as UpdateConfigDtoType } from '@managemint-solutions/entities/configs/dto';
+export declare class CreateConfigDto implements CreateConfigDtoType {
+    readonly name: string;
+    readonly description?: string;
+    readonly value?: ConfigValue;
+}
+export declare class UpdateConfigDto implements UpdateConfigDtoType {
+    readonly description?: string;
+    readonly value?: ConfigValue;
+}

package/dist/configs/dto.js

@@ -0,0 +1,73 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateConfigDto = exports.CreateConfigDto = void 0;
+const class_validator_1 = require("class-validator");
+const class_transformer_1 = require("class-transformer");
+// class-validator version of the shared DTO type from @managemint-solutions/entities, so the
+// wire contract cannot drift.
+/**
+ * Whitespace on either side of a pasted value is not part of the answer. Trimming here rather
+ * than in the api means the length rules below measure what will actually be stored — a name of
+ * three spaces is empty, not three characters long.
+ */
+const Trim = () => (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value), {
+    toClassOnly: true,
+});
+class CreateConfigDto {
+    name;
+    description;
+    // This DTO is the only place the object shape is enforced — the column has no CHECK by
+    // design, so a config may hold whatever keys the row's author named. class-validator's
+    // isObject rejects arrays and scalars, which is exactly the line: one JSON object, nothing
+    // else. `@ValidateIf` rather than `@IsOptional` because the latter skips an explicit null
+    // too, and null is not a config value — an omitted `value` becomes `{}` at the insert.
+    value;
+}
+exports.CreateConfigDto = CreateConfigDto;
+__decorate([
+    Trim(),
+    (0, class_validator_1.IsString)({ message: 'Invalid name' }),
+    (0, class_validator_1.MinLength)(1, { message: 'Name cannot be empty' }),
+    (0, class_validator_1.MaxLength)(100, { message: 'Name cannot exceed 100 characters' }),
+    __metadata("design:type", String)
+], CreateConfigDto.prototype, "name", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    Trim(),
+    (0, class_validator_1.IsString)({ message: 'Invalid description' }),
+    (0, class_validator_1.MaxLength)(1000, { message: 'Description cannot exceed 1000 characters' }),
+    __metadata("design:type", String)
+], CreateConfigDto.prototype, "description", void 0);
+__decorate([
+    (0, class_validator_1.ValidateIf)((o) => o.value !== undefined),
+    (0, class_validator_1.IsObject)({ message: 'Value must be a JSON object' }),
+    __metadata("design:type", Object)
+], CreateConfigDto.prototype, "value", void 0);
+class UpdateConfigDto {
+    description;
+    // Same rule as the create: an absent `value` leaves the column alone, but a null is a value
+    // the column cannot hold. It replaces the whole object rather than merging into it.
+    value;
+}
+exports.UpdateConfigDto = UpdateConfigDto;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    Trim(),
+    (0, class_validator_1.IsString)({ message: 'Invalid description' }),
+    (0, class_validator_1.MaxLength)(1000, { message: 'Description cannot exceed 1000 characters' }),
+    __metadata("design:type", String)
+], UpdateConfigDto.prototype, "description", void 0);
+__decorate([
+    (0, class_validator_1.ValidateIf)((o) => o.value !== undefined),
+    (0, class_validator_1.IsObject)({ message: 'Value must be a JSON object' }),
+    __metadata("design:type", Object)
+], UpdateConfigDto.prototype, "value", void 0);

package/dist/configs/index.d.ts

@@ -0,0 +1,25 @@
+import type { ConfigEntity } from '@managemint-solutions/entities/configs';
+import type { CreateConfigDto as CreateConfigDtoType, UpdateConfigDto as UpdateConfigDtoType } from '@managemint-solutions/entities/configs/dto';
+import type { TypedSupabaseClient } from '../client';
+export * from './dto';
+/**
+ * Global named JSON configs. Every signed-in caller may read (the READ policy is `true` — there
+ * is no tenant on the row), so this hangs off the user client and the service client alike;
+ * only the service role may write, and a write on the user client fails at the database.
+ * Not audited: Studio is the other writer, and nothing would see its edits anyway.
+ */
+export declare class ConfigsResource {
+    private readonly supabase;
+    constructor(supabase: TypedSupabaseClient);
+    list(): Promise<ConfigEntity[]>;
+    getByName(name: string): Promise<ConfigEntity>;
+    getById(configId: string): Promise<ConfigEntity>;
+    create(input: CreateConfigDtoType): Promise<ConfigEntity>;
+    /** `value` replaces the whole object — it is not merged. */
+    update(name: string, patch: UpdateConfigDtoType): Promise<ConfigEntity>;
+    /**
+     * Hard delete — there is nothing to soft-delete into and nothing references a config row.
+     * Service role only, like every write here; a call on the user client fails at the database.
+     */
+    remove(name: string): Promise<void>;
+}

package/dist/configs/index.js

@@ -0,0 +1,101 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigsResource = void 0;
+const errors_1 = require("../errors");
+__exportStar(require("./dto"), exports);
+// The public contract is ConfigEntity from @managemint-solutions/entities; the casts at the
+// returns declare the shape this select string produces (columns defined in the api's
+// supabase/migrations). `id` never leaves SQL.
+const CONFIG_SELECT = 'mms_id, created_at, updated_at, name, description, value';
+/**
+ * Global named JSON configs. Every signed-in caller may read (the READ policy is `true` — there
+ * is no tenant on the row), so this hangs off the user client and the service client alike;
+ * only the service role may write, and a write on the user client fails at the database.
+ * Not audited: Studio is the other writer, and nothing would see its edits anyway.
+ */
+class ConfigsResource {
+    supabase;
+    constructor(supabase) {
+        this.supabase = supabase;
+    }
+    async list() {
+        const { data, error } = await this.supabase
+            .from('configs')
+            .select(CONFIG_SELECT)
+            .order('name');
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return (data ?? []);
+    }
+    async getByName(name) {
+        const { data, error } = await this.supabase
+            .from('configs')
+            .select(CONFIG_SELECT)
+            .eq('name', name)
+            .single();
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return data;
+    }
+    async getById(configId) {
+        const { data, error } = await this.supabase
+            .from('configs')
+            .select(CONFIG_SELECT)
+            .eq('mms_id', configId)
+            .single();
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return data;
+    }
+    async create(input) {
+        const { data, error } = await this.supabase
+            .from('configs')
+            .insert({
+            name: input.name,
+            description: input.description ?? '',
+            value: input.value ?? {},
+            created_at: new Date().toISOString(),
+        })
+            .select(CONFIG_SELECT)
+            .single();
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return data;
+    }
+    /** `value` replaces the whole object — it is not merged. */
+    async update(name, patch) {
+        const { data, error } = await this.supabase
+            .from('configs')
+            .update({ ...patch, updated_at: new Date().toISOString() })
+            .eq('name', name)
+            .select(CONFIG_SELECT)
+            .single();
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return data;
+    }
+    /**
+     * Hard delete — there is nothing to soft-delete into and nothing references a config row.
+     * Service role only, like every write here; a call on the user client fails at the database.
+     */
+    async remove(name) {
+        const { error } = await this.supabase.from('configs').delete().eq('name', name);
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+    }
+}
+exports.ConfigsResource = ConfigsResource;

package/dist/index.d.ts

@@ -15,6 +15,7 @@ export { CancelSubscriptionDto, GetPaymentsQueryDto, InitialPaymentDto, PaymentI
 export { GetInvoicesQueryDto, InvoiceIdDto } from './billing/invoices';
 export type { CreateFeatureRequestRow, CreatedFeatureRequest } from './feature-requests';
 export { CreateFeatureRequestDto } from './feature-requests';
+export { CreateConfigDto, UpdateConfigDto } from './configs';
 export { CreateSupportRequestDto } from './support';
 export { AddStatusDto, GetStatusesDto, StatusIdDto, UpdateStatusDto } from './statuses';
 export { AddAdditionalDetailsDto, AdditionalDetailsIdDto, GetAdditionalDetailsDto, IsAdditionalDetailsValueByType, UpdateAdditionalDetailsDto, } from './additional-details';

package/dist/index.js

@@ -7,8 +7,8 @@
 // their classes are not exported: a consumer never constructs one, and every export is a contract
 // to keep. The row and input types they produce and accept are exported for annotations.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SupportingFileIdDto = exports.GetSupportingFilesDto = exports.UserIdDto = exports.UpdateUserDto = exports.UpdateMyProfileDto = exports.GetUsersQueryDto = exports.AddUserDto = exports.UpdatePermissionsDto = exports.PermissionsResource = exports.UpdateOrganizationDto = exports.CreateOrganizationDto = exports.NotificationIdDto = exports.GetNotificationsDto = exports.NoteIdDto = exports.GetNotesDto = exports.AddNoteDto = exports.UpdateAdditionalDetailsDto = exports.IsAdditionalDetailsValueByType = exports.GetAdditionalDetailsDto = exports.AdditionalDetailsIdDto = exports.AddAdditionalDetailsDto = exports.UpdateStatusDto = exports.StatusIdDto = exports.GetStatusesDto = exports.AddStatusDto = exports.CreateSupportRequestDto = exports.CreateFeatureRequestDto = exports.InvoiceIdDto = exports.GetInvoicesQueryDto = exports.ReinstateSubscriptionDto = exports.PurchaseModuleDto = exports.PaymentIdDto = exports.InitialPaymentDto = exports.GetPaymentsQueryDto = exports.CancelSubscriptionDto = exports.GetAuditTrailDto = exports.IsNullable = exports.EmptyToNull = exports.SupabaseClientError = exports.createSupabaseServiceClient = exports.SupabaseServiceClient = exports.SignInDto = exports.SendPasswordResetEmailDto = exports.ResetPasswordDto = exports.ExchangeTokenHashDto = exports.ExchangeRefreshTokenDto = exports.createSupabaseAuthClient = exports.SupabaseAuthClient = exports.createSupabaseClient = exports.SupabaseClient = void 0;
-exports.monthlyTotalMinor = exports.UpdateTaskDto = exports.TaskIdDto = exports.GetTasksDto = exports.CreateTaskDto = exports.UpdateProjectDto = exports.ProjectIdDto = exports.GetProjectsDto = exports.CreateProjectDto = exports.UpdateClientDto = exports.GetClientsDto = exports.CreateClientDto = exports.ClientIdDto = void 0;
+exports.UserIdDto = exports.UpdateUserDto = exports.UpdateMyProfileDto = exports.GetUsersQueryDto = exports.AddUserDto = exports.UpdatePermissionsDto = exports.PermissionsResource = exports.UpdateOrganizationDto = exports.CreateOrganizationDto = exports.NotificationIdDto = exports.GetNotificationsDto = exports.NoteIdDto = exports.GetNotesDto = exports.AddNoteDto = exports.UpdateAdditionalDetailsDto = exports.IsAdditionalDetailsValueByType = exports.GetAdditionalDetailsDto = exports.AdditionalDetailsIdDto = exports.AddAdditionalDetailsDto = exports.UpdateStatusDto = exports.StatusIdDto = exports.GetStatusesDto = exports.AddStatusDto = exports.CreateSupportRequestDto = exports.UpdateConfigDto = exports.CreateConfigDto = exports.CreateFeatureRequestDto = exports.InvoiceIdDto = exports.GetInvoicesQueryDto = exports.ReinstateSubscriptionDto = exports.PurchaseModuleDto = exports.PaymentIdDto = exports.InitialPaymentDto = exports.GetPaymentsQueryDto = exports.CancelSubscriptionDto = exports.GetAuditTrailDto = exports.IsNullable = exports.EmptyToNull = exports.SupabaseClientError = exports.createSupabaseServiceClient = exports.SupabaseServiceClient = exports.SignInDto = exports.SendPasswordResetEmailDto = exports.ResetPasswordDto = exports.ExchangeTokenHashDto = exports.ExchangeRefreshTokenDto = exports.createSupabaseAuthClient = exports.SupabaseAuthClient = exports.createSupabaseClient = exports.SupabaseClient = void 0;
+exports.monthlyTotalMinor = exports.UpdateTaskDto = exports.TaskIdDto = exports.GetTasksDto = exports.CreateTaskDto = exports.UpdateProjectDto = exports.ProjectIdDto = exports.GetProjectsDto = exports.CreateProjectDto = exports.UpdateClientDto = exports.GetClientsDto = exports.CreateClientDto = exports.ClientIdDto = exports.SupportingFileIdDto = exports.GetSupportingFilesDto = void 0;
 var client_1 = require("./client");
 Object.defineProperty(exports, "SupabaseClient", { enumerable: true, get: function () { return client_1.SupabaseClient; } });
 Object.defineProperty(exports, "createSupabaseClient", { enumerable: true, get: function () { return client_1.createSupabaseClient; } });
@@ -43,6 +43,9 @@ Object.defineProperty(exports, "GetInvoicesQueryDto", { enumerable: true, get: f
 Object.defineProperty(exports, "InvoiceIdDto", { enumerable: true, get: function () { return invoices_1.InvoiceIdDto; } });
 var feature_requests_1 = require("./feature-requests");
 Object.defineProperty(exports, "CreateFeatureRequestDto", { enumerable: true, get: function () { return feature_requests_1.CreateFeatureRequestDto; } });
+var configs_1 = require("./configs");
+Object.defineProperty(exports, "CreateConfigDto", { enumerable: true, get: function () { return configs_1.CreateConfigDto; } });
+Object.defineProperty(exports, "UpdateConfigDto", { enumerable: true, get: function () { return configs_1.UpdateConfigDto; } });
 var support_1 = require("./support");
 Object.defineProperty(exports, "CreateSupportRequestDto", { enumerable: true, get: function () { return support_1.CreateSupportRequestDto; } });
 var statuses_1 = require("./statuses");

package/dist/service-client/index.d.ts

@@ -2,6 +2,7 @@ import { AuditResource, type AuditActor, type AuditedTable, type AuditedTableOpt
 import type { TypedSupabaseClient } from '../client';
 import { BillingResource } from '../billing';
 import { InvoicesResource } from '../billing/invoices';
+import { ConfigsResource } from '../configs';
 import { FeatureRequestsResource } from '../feature-requests';
 import { NotificationsOutboxResource } from '../notifications';
 import { OrganizationInvitesResource } from '../organization-invites';
@@ -57,6 +58,7 @@ export declare class SupabaseServiceClient {
     readonly supabase: TypedSupabaseClient;
     readonly notifications: NotificationsOutboxResource;
     readonly featureRequests: FeatureRequestsResource;
+    readonly configs: ConfigsResource;
     readonly signup: OrganizationSignupResource;
     readonly paystackEvents: WebhookEventsResource;
     readonly resendEvents: WebhookEventsResource;

package/dist/service-client/index.js

@@ -6,6 +6,7 @@ const audit_1 = require("../audit");
 const enum_1 = require("@managemint-solutions/entities/audit-trail/enum");
 const billing_1 = require("../billing");
 const invoices_1 = require("../billing/invoices");
+const configs_1 = require("../configs");
 const feature_requests_1 = require("../feature-requests");
 const notifications_1 = require("../notifications");
 const errors_1 = require("../errors");
@@ -71,6 +72,8 @@ class SupabaseServiceClient {
     // Tenant-less, like `signup`: a feature request comes from a visitor with no account, so it
     // hangs off the client rather than off an organization scope.
     featureRequests;
+    // Global, with no organization on the row, so it hangs off the client rather than a scope.
+    configs;
     signup;
     paystackEvents;
     resendEvents;
@@ -80,6 +83,7 @@ class SupabaseServiceClient {
         this.paystackEvents = new webhook_events_1.WebhookEventsResource(this.supabase, 'paystack_webhook_events');
         this.resendEvents = new webhook_events_1.WebhookEventsResource(this.supabase, 'resend_webhook_events');
         this.featureRequests = new feature_requests_1.FeatureRequestsResource(this.supabase);
+        this.configs = new configs_1.ConfigsResource(this.supabase);
         this.signup = new organizations_1.OrganizationSignupResource(this.supabase, (organizationId) => this.forOrganization(organizationId).audit);
         // The outbox spans organizations — the row it is about carries its own — so it takes a
         // factory and scopes per write rather than being built inside one organization's scope.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@managemint-solutions/sdk",
-  "version": "0.33.0",
+  "version": "0.35.0",
   "description": "Typed Supabase data-access SDK for ManageMint Solutions",
   "license": "UNLICENSED",
   "author": "Scott Bebington <scottbebington@gmail.com>",
@@ -20,6 +20,10 @@
     "./nest": {
       "types": "./dist/nest/index.d.ts",
       "default": "./dist/nest/index.js"
+    },
+    "./cache": {
+      "types": "./dist/cache/index.d.ts",
+      "default": "./dist/cache/index.js"
     }
   },
   "files": [
@@ -47,11 +51,12 @@
     "testEnvironment": "node"
   },
   "dependencies": {
-    "@managemint-solutions/entities": "^1.16.0"
+    "@managemint-solutions/entities": "^1.17.0"
   },
   "peerDependencies": {
     "@nestjs/common": "^11.0.0",
     "@supabase/supabase-js": "^2.103.0",
+    "@upstash/redis": "^1.38.0",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.15.0",
     "reflect-metadata": "^0.2.0"
@@ -59,6 +64,9 @@
   "peerDependenciesMeta": {
     "@nestjs/common": {
       "optional": true
+    },
+    "@upstash/redis": {
+      "optional": true
     }
   },
   "devDependencies": {
@@ -67,6 +75,7 @@
     "@types/express": "^5.0.0",
     "@types/jest": "^30.0.0",
     "@types/node": "^22.10.7",
+    "@upstash/redis": "^1.38.4",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.15.1",
     "jest": "^30.0.0",