@managemint-solutions/sdk 0.41.0 → 0.43.0

package/README.md

@@ -202,10 +202,13 @@ await supabase.tasks.archive(task.mms_id);
 await supabase.tasks.unarchive(task.mms_id);
 await supabase.tasks.remove(task.mms_id);   // soft delete
 await supabase.tasks.restore(task.mms_id);
+await supabase.tasks.linkTask(task.mms_id, { linked_task_id: otherId, link_type: TaskLinkType.CHILD });
+await supabase.tasks.unlinkTask(task.mms_id, otherId);
 ```
 
 A task's `task_id` (its per-organization number) is assigned by the database on insert, and each
-task carries its embedded `status`, `assigned_to`, `project` and `client`.
+task carries its embedded `status`, `assigned_to`, `project` and `client`. The detail read also carries its `parent`,
+`subtasks` and `related` tasks, read from `task_links` in both directions.
 
 The client decodes `{ mms_id, organization_id }` from the JWT itself and scopes every query
 by `organization_id`. `supabase.supabase` is the raw `@supabase/supabase-js` client

package/dist/client.d.ts

@@ -8,6 +8,7 @@ import { NotesResource } from './notes';
 import { NotificationsResource } from './notifications';
 import { BillingReadsResource } from './billing';
 import { InvoicesReadsResource } from './billing/invoices';
+import { LabelsResource } from './labels';
 import { LeaveEntitlementsResource, LeaveRequestsResource, LeaveTypesResource } from './leave';
 import { OrganizationsResource } from './organizations';
 import { PermissionsResource } from './permissions';
@@ -47,6 +48,7 @@ export declare class SupabaseClient {
     readonly audit: AuditResource;
     readonly configs: ConfigsResource;
     readonly statuses: StatusesResource;
+    readonly labels: LabelsResource;
     readonly additionalDetails: AdditionalDetailsResource;
     readonly notes: NotesResource;
     readonly notifications: NotificationsResource;

package/dist/client.js

@@ -10,6 +10,7 @@ const notes_1 = require("./notes");
 const notifications_1 = require("./notifications");
 const billing_1 = require("./billing");
 const invoices_1 = require("./billing/invoices");
+const labels_1 = require("./labels");
 const leave_1 = require("./leave");
 const organizations_1 = require("./organizations");
 const permissions_1 = require("./permissions");
@@ -32,6 +33,7 @@ class SupabaseClient {
     // Reads run under the authenticated grant; the writes are the service client's.
     configs;
     statuses;
+    labels;
     additionalDetails;
     notes;
     notifications;
@@ -58,6 +60,7 @@ class SupabaseClient {
         this.audit = new audit_1.AuditResource(this.supabase, this.auth, config.onAuditError);
         this.configs = new configs_1.ConfigsResource(this.supabase);
         this.statuses = new statuses_1.StatusesResource(this.supabase, this.auth, this.audit);
+        this.labels = new labels_1.LabelsResource(this.supabase, this.auth, this.audit);
         this.additionalDetails = new additional_details_1.AdditionalDetailsResource(this.supabase, this.auth, this.audit);
         this.notes = new notes_1.NotesResource(this.supabase, this.auth, this.audit);
         this.notifications = new notifications_1.NotificationsResource(this.supabase, this.auth, this.audit);

package/dist/index.d.ts

@@ -18,6 +18,7 @@ export { CreateFeatureRequestDto } from './feature-requests';
 export { CreateConfigDto, UpdateConfigDto } from './configs';
 export { CreateSupportRequestDto } from './support';
 export { AddStatusDto, GetStatusesDto, StatusIdDto, UpdateStatusDto } from './statuses';
+export { AddLabelDto, GetLabelsDto, LabelIdDto, UpdateLabelDto } from './labels';
 export { AddAdditionalDetailsDto, AdditionalDetailsIdDto, GetAdditionalDetailsDto, IsAdditionalDetailsValueByType, UpdateAdditionalDetailsDto, } from './additional-details';
 export { AddNoteDto, GetNotesDto, NoteIdDto } from './notes';
 export type { CreateNotificationInput, CreatedNotification, NotificationContentRow, OrganizationTableFactory, QueuedNotification, } from './notifications';
@@ -35,7 +36,7 @@ export type { ClaimOutcome, WebhookEventRow, WebhookEventsTable } from './webhoo
 export { GetSupportingFilesDto, SupportingFileIdDto } from './supporting-files';
 export { ClientIdDto, CreateClientDto, GetClientsDto, UpdateClientDto } from './clients';
 export { CreateProjectDto, GetProjectsDto, ProjectIdDto, UpdateProjectDto } from './projects';
-export { CreateTaskDto, GetTasksDto, TaskIdDto, UpdateTaskDto } from './tasks';
+export { AddTaskLinkDto, CreateTaskDto, GetTasksDto, TaskIdDto, TaskLinkIdDto, UpdateTaskDto } from './tasks';
 export type { CreateLeaveEntitlementInput, CreateLeaveRequestRow, LeaveEntitlementCover, ReviewLeaveRequestRow, UpdateLeaveRequestRow, } from './leave';
 export { CreateLeaveEntitlementDto, CreateLeaveRequestDto, CreateLeaveTypeDto, GetLeaveEntitlementsDto, GetLeaveRequestsDto, GetLeaveTypesDto, LeaveEntitlementIdDto, LeaveRequestIdDto, LeaveTypeIdDto, ReviewLeaveRequestDto, UpdateLeaveEntitlementDto, UpdateLeaveRequestDto, UpdateLeaveTypeDto, } from './leave';
 export { GetPublicHolidaysDto } from './public-holidays';

package/dist/index.js

@@ -7,8 +7,8 @@
 // their classes are not exported: a consumer never constructs one, and every export is a contract
 // to keep. The row and input types they produce and accept are exported for annotations.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.UserIdDto = exports.UpdateUserDto = exports.UpdateMyProfileDto = exports.GetUsersQueryDto = exports.AddUserDto = exports.UpdatePermissionsDto = exports.PermissionsResource = exports.UpdateOrganizationDto = exports.CreateOrganizationDto = exports.NotificationIdDto = exports.GetNotificationsDto = exports.NoteIdDto = exports.GetNotesDto = exports.AddNoteDto = exports.UpdateAdditionalDetailsDto = exports.IsAdditionalDetailsValueByType = exports.GetAdditionalDetailsDto = exports.AdditionalDetailsIdDto = exports.AddAdditionalDetailsDto = exports.UpdateStatusDto = exports.StatusIdDto = exports.GetStatusesDto = exports.AddStatusDto = exports.CreateSupportRequestDto = exports.UpdateConfigDto = exports.CreateConfigDto = exports.CreateFeatureRequestDto = exports.InvoiceIdDto = exports.GetInvoicesQueryDto = exports.ReinstateSubscriptionDto = exports.PurchaseModuleDto = exports.PaymentIdDto = exports.InitialPaymentDto = exports.GetPaymentsQueryDto = exports.CancelSubscriptionDto = exports.GetAuditTrailDto = exports.IsNullable = exports.EmptyToNull = exports.SupabaseClientError = exports.createSupabaseServiceClient = exports.SupabaseServiceClient = exports.SignInDto = exports.SendPasswordResetEmailDto = exports.ResetPasswordDto = exports.ExchangeTokenHashDto = exports.ExchangeRefreshTokenDto = exports.createSupabaseAuthClient = exports.SupabaseAuthClient = exports.createSupabaseClient = exports.SupabaseClient = void 0;
-exports.monthlyTotalMinor = exports.weekStartOf = exports.minutesBetween = exports.UpdateTimesheetEntryDto = exports.TimesheetIdDto = exports.TimesheetEntryIdDto = exports.ReviewTimesheetDto = exports.GetTimesheetsDto = exports.GetTimesheetReportDto = exports.CreateTimesheetEntryDto = exports.todayInJohannesburg = exports.shiftDays = exports.leavePeriodFor = exports.isWithinPeriod = exports.countWorkingDays = exports.addOneYearMinusDay = exports.GetPublicHolidaysDto = exports.UpdateLeaveTypeDto = exports.UpdateLeaveRequestDto = exports.UpdateLeaveEntitlementDto = exports.ReviewLeaveRequestDto = exports.LeaveTypeIdDto = exports.LeaveRequestIdDto = exports.LeaveEntitlementIdDto = exports.GetLeaveTypesDto = exports.GetLeaveRequestsDto = exports.GetLeaveEntitlementsDto = exports.CreateLeaveTypeDto = exports.CreateLeaveRequestDto = exports.CreateLeaveEntitlementDto = exports.UpdateTaskDto = exports.TaskIdDto = exports.GetTasksDto = exports.CreateTaskDto = exports.UpdateProjectDto = exports.ProjectIdDto = exports.GetProjectsDto = exports.CreateProjectDto = exports.UpdateClientDto = exports.GetClientsDto = exports.CreateClientDto = exports.ClientIdDto = exports.SupportingFileIdDto = exports.GetSupportingFilesDto = void 0;
+exports.AddUserDto = exports.UpdatePermissionsDto = exports.PermissionsResource = exports.UpdateOrganizationDto = exports.CreateOrganizationDto = exports.NotificationIdDto = exports.GetNotificationsDto = exports.NoteIdDto = exports.GetNotesDto = exports.AddNoteDto = exports.UpdateAdditionalDetailsDto = exports.IsAdditionalDetailsValueByType = exports.GetAdditionalDetailsDto = exports.AdditionalDetailsIdDto = exports.AddAdditionalDetailsDto = exports.UpdateLabelDto = exports.LabelIdDto = exports.GetLabelsDto = exports.AddLabelDto = exports.UpdateStatusDto = exports.StatusIdDto = exports.GetStatusesDto = exports.AddStatusDto = exports.CreateSupportRequestDto = exports.UpdateConfigDto = exports.CreateConfigDto = exports.CreateFeatureRequestDto = exports.InvoiceIdDto = exports.GetInvoicesQueryDto = exports.ReinstateSubscriptionDto = exports.PurchaseModuleDto = exports.PaymentIdDto = exports.InitialPaymentDto = exports.GetPaymentsQueryDto = exports.CancelSubscriptionDto = exports.GetAuditTrailDto = exports.IsNullable = exports.EmptyToNull = exports.SupabaseClientError = exports.createSupabaseServiceClient = exports.SupabaseServiceClient = exports.SignInDto = exports.SendPasswordResetEmailDto = exports.ResetPasswordDto = exports.ExchangeTokenHashDto = exports.ExchangeRefreshTokenDto = exports.createSupabaseAuthClient = exports.SupabaseAuthClient = exports.createSupabaseClient = exports.SupabaseClient = void 0;
+exports.monthlyTotalMinor = exports.weekStartOf = exports.minutesBetween = exports.UpdateTimesheetEntryDto = exports.TimesheetIdDto = exports.TimesheetEntryIdDto = exports.ReviewTimesheetDto = exports.GetTimesheetsDto = exports.GetTimesheetReportDto = exports.CreateTimesheetEntryDto = exports.todayInJohannesburg = exports.shiftDays = exports.leavePeriodFor = exports.isWithinPeriod = exports.countWorkingDays = exports.addOneYearMinusDay = exports.GetPublicHolidaysDto = exports.UpdateLeaveTypeDto = exports.UpdateLeaveRequestDto = exports.UpdateLeaveEntitlementDto = exports.ReviewLeaveRequestDto = exports.LeaveTypeIdDto = exports.LeaveRequestIdDto = exports.LeaveEntitlementIdDto = exports.GetLeaveTypesDto = exports.GetLeaveRequestsDto = exports.GetLeaveEntitlementsDto = exports.CreateLeaveTypeDto = exports.CreateLeaveRequestDto = exports.CreateLeaveEntitlementDto = exports.UpdateTaskDto = exports.TaskLinkIdDto = exports.TaskIdDto = exports.GetTasksDto = exports.CreateTaskDto = exports.AddTaskLinkDto = exports.UpdateProjectDto = exports.ProjectIdDto = exports.GetProjectsDto = exports.CreateProjectDto = exports.UpdateClientDto = exports.GetClientsDto = exports.CreateClientDto = exports.ClientIdDto = exports.SupportingFileIdDto = exports.GetSupportingFilesDto = exports.UserIdDto = exports.UpdateUserDto = exports.UpdateMyProfileDto = exports.GetUsersQueryDto = void 0;
 var client_1 = require("./client");
 Object.defineProperty(exports, "SupabaseClient", { enumerable: true, get: function () { return client_1.SupabaseClient; } });
 Object.defineProperty(exports, "createSupabaseClient", { enumerable: true, get: function () { return client_1.createSupabaseClient; } });
@@ -53,6 +53,11 @@ Object.defineProperty(exports, "AddStatusDto", { enumerable: true, get: function
 Object.defineProperty(exports, "GetStatusesDto", { enumerable: true, get: function () { return statuses_1.GetStatusesDto; } });
 Object.defineProperty(exports, "StatusIdDto", { enumerable: true, get: function () { return statuses_1.StatusIdDto; } });
 Object.defineProperty(exports, "UpdateStatusDto", { enumerable: true, get: function () { return statuses_1.UpdateStatusDto; } });
+var labels_1 = require("./labels");
+Object.defineProperty(exports, "AddLabelDto", { enumerable: true, get: function () { return labels_1.AddLabelDto; } });
+Object.defineProperty(exports, "GetLabelsDto", { enumerable: true, get: function () { return labels_1.GetLabelsDto; } });
+Object.defineProperty(exports, "LabelIdDto", { enumerable: true, get: function () { return labels_1.LabelIdDto; } });
+Object.defineProperty(exports, "UpdateLabelDto", { enumerable: true, get: function () { return labels_1.UpdateLabelDto; } });
 var additional_details_1 = require("./additional-details");
 Object.defineProperty(exports, "AddAdditionalDetailsDto", { enumerable: true, get: function () { return additional_details_1.AddAdditionalDetailsDto; } });
 Object.defineProperty(exports, "AdditionalDetailsIdDto", { enumerable: true, get: function () { return additional_details_1.AdditionalDetailsIdDto; } });
@@ -95,9 +100,11 @@ Object.defineProperty(exports, "GetProjectsDto", { enumerable: true, get: functi
 Object.defineProperty(exports, "ProjectIdDto", { enumerable: true, get: function () { return projects_1.ProjectIdDto; } });
 Object.defineProperty(exports, "UpdateProjectDto", { enumerable: true, get: function () { return projects_1.UpdateProjectDto; } });
 var tasks_1 = require("./tasks");
+Object.defineProperty(exports, "AddTaskLinkDto", { enumerable: true, get: function () { return tasks_1.AddTaskLinkDto; } });
 Object.defineProperty(exports, "CreateTaskDto", { enumerable: true, get: function () { return tasks_1.CreateTaskDto; } });
 Object.defineProperty(exports, "GetTasksDto", { enumerable: true, get: function () { return tasks_1.GetTasksDto; } });
 Object.defineProperty(exports, "TaskIdDto", { enumerable: true, get: function () { return tasks_1.TaskIdDto; } });
+Object.defineProperty(exports, "TaskLinkIdDto", { enumerable: true, get: function () { return tasks_1.TaskLinkIdDto; } });
 Object.defineProperty(exports, "UpdateTaskDto", { enumerable: true, get: function () { return tasks_1.UpdateTaskDto; } });
 var leave_1 = require("./leave");
 Object.defineProperty(exports, "CreateLeaveEntitlementDto", { enumerable: true, get: function () { return leave_1.CreateLeaveEntitlementDto; } });

package/dist/labels/dto.d.ts

@@ -0,0 +1,19 @@
+import type { AddLabelDto as AddLabelDtoType, GetLabelsDto as GetLabelsDtoType, LabelIdDto as LabelIdDtoType, UpdateLabelDto as UpdateLabelDtoType } from '@managemint-solutions/entities/labels/dto';
+import { LabelEntityTypes } from '@managemint-solutions/entities/labels/enum';
+export declare class LabelIdDto implements LabelIdDtoType {
+    readonly labelId: string;
+}
+export declare class GetLabelsDto implements GetLabelsDtoType {
+    readonly entity: LabelEntityTypes;
+}
+export declare class AddLabelDto implements AddLabelDtoType {
+    readonly name: string;
+    readonly colour: string;
+    readonly entity: LabelEntityTypes;
+    readonly description?: string | null;
+}
+export declare class UpdateLabelDto implements UpdateLabelDtoType {
+    readonly name: string;
+    readonly colour: string;
+    readonly description?: string | null;
+}

package/dist/labels/dto.js

@@ -0,0 +1,95 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateLabelDto = exports.AddLabelDto = exports.GetLabelsDto = exports.LabelIdDto = void 0;
+const class_validator_1 = require("class-validator");
+const enum_1 = require("@managemint-solutions/entities/labels/enum");
+const validators_1 = require("../validators");
+// class-validator versions of the shared DTO types from @managemint-solutions/entities.
+// Each class `implements` its entities type so the wire contract cannot drift.
+class LabelIdDto {
+    labelId;
+}
+exports.LabelIdDto = LabelIdDto;
+__decorate([
+    (0, class_validator_1.IsUUID)('7', { message: 'Invalid label ID format' }),
+    __metadata("design:type", String)
+], LabelIdDto.prototype, "labelId", void 0);
+class GetLabelsDto {
+    entity;
+}
+exports.GetLabelsDto = GetLabelsDto;
+__decorate([
+    (0, class_validator_1.IsEnum)(enum_1.LabelEntityTypes, { message: 'Invalid entity type' }),
+    __metadata("design:type", String)
+], GetLabelsDto.prototype, "entity", void 0);
+class AddLabelDto {
+    name;
+    // Colour must be a valid hex code (e.g., #FFFFFF)
+    colour;
+    // `entity` is the wire name; the SDK maps it to the `entity_type` column.
+    entity;
+    // What the label is for; omitted or null means none.
+    description;
+}
+exports.AddLabelDto = AddLabelDto;
+__decorate([
+    (0, class_validator_1.IsString)({ message: 'Invalid name' }),
+    (0, class_validator_1.MinLength)(1, { message: 'Name cannot be empty' }),
+    (0, class_validator_1.MaxLength)(50, { message: 'Name cannot exceed 50 characters' }),
+    __metadata("design:type", String)
+], AddLabelDto.prototype, "name", void 0);
+__decorate([
+    (0, class_validator_1.IsString)({ message: 'Invalid colour format' }),
+    (0, class_validator_1.MinLength)(7, { message: 'Colour must be a valid hex code' }),
+    (0, class_validator_1.MaxLength)(7, { message: 'Colour must be a valid hex code' }),
+    (0, class_validator_1.Matches)(/^#[0-9A-Fa-f]{6}$/, { message: 'Colour must be a valid hex code' }),
+    __metadata("design:type", String)
+], AddLabelDto.prototype, "colour", void 0);
+__decorate([
+    (0, class_validator_1.IsEnum)(enum_1.LabelEntityTypes, { message: 'Invalid entity type' }),
+    __metadata("design:type", String)
+], AddLabelDto.prototype, "entity", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsString)({ message: 'Invalid description' }),
+    (0, class_validator_1.MaxLength)(255, { message: 'Description cannot exceed 255 characters' }),
+    __metadata("design:type", Object)
+], AddLabelDto.prototype, "description", void 0);
+class UpdateLabelDto {
+    name;
+    // Colour must be a valid hex code (e.g., #FFFFFF)
+    colour;
+    // Omitted leaves the description as it is; null clears it.
+    description;
+}
+exports.UpdateLabelDto = UpdateLabelDto;
+__decorate([
+    (0, class_validator_1.IsString)({ message: 'Invalid name' }),
+    (0, class_validator_1.MinLength)(1, { message: 'Name cannot be empty' }),
+    (0, class_validator_1.MaxLength)(50, { message: 'Name cannot exceed 50 characters' }),
+    __metadata("design:type", String)
+], UpdateLabelDto.prototype, "name", void 0);
+__decorate([
+    (0, class_validator_1.IsString)({ message: 'Invalid colour format' }),
+    (0, class_validator_1.MinLength)(7, { message: 'Colour must be a valid hex code' }),
+    (0, class_validator_1.MaxLength)(7, { message: 'Colour must be a valid hex code' }),
+    (0, class_validator_1.Matches)(/^#[0-9A-Fa-f]{6}$/, { message: 'Colour must be a valid hex code' }),
+    __metadata("design:type", String)
+], UpdateLabelDto.prototype, "colour", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsString)({ message: 'Invalid description' }),
+    (0, class_validator_1.MaxLength)(255, { message: 'Description cannot exceed 255 characters' }),
+    __metadata("design:type", Object)
+], UpdateLabelDto.prototype, "description", void 0);

package/dist/labels/index.d.ts

@@ -0,0 +1,17 @@
+import type { LabelEntity } from '@managemint-solutions/entities/labels';
+import type { AddLabelDto, UpdateLabelDto } from '@managemint-solutions/entities/labels/dto';
+import { LabelEntityTypes } from '@managemint-solutions/entities/labels/enum';
+import type { AuthContext } from '../auth';
+import { type AuditResource } from '../audit';
+import type { TypedSupabaseClient } from '../client';
+export * from './dto';
+export declare class LabelsResource {
+    private readonly supabase;
+    private readonly auth;
+    private readonly table;
+    constructor(supabase: TypedSupabaseClient, auth: AuthContext, audit: AuditResource);
+    list(entity: LabelEntityTypes): Promise<LabelEntity[]>;
+    create(input: AddLabelDto): Promise<LabelEntity>;
+    update(labelId: string, input: UpdateLabelDto): Promise<LabelEntity>;
+    remove(labelId: string): Promise<void>;
+}

package/dist/labels/index.js

@@ -0,0 +1,88 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LabelsResource = void 0;
+const enum_1 = require("@managemint-solutions/entities/audit-trail/enum");
+const audit_1 = require("../audit");
+const errors_1 = require("../errors");
+__exportStar(require("./dto"), exports);
+// The public contract is the shared LabelEntity from @managemint-solutions/entities; the
+// `as LabelEntity` casts declare the shape the select string below produces (the columns are
+// defined in the api's supabase/migrations).
+const LABEL_SELECT = 'mms_id, name, colour, description';
+// The audited write returns the whole row; the wire shape is the LABEL_SELECT columns.
+const toLabel = (row) => ({
+    mms_id: row.mms_id,
+    name: row.name,
+    colour: row.colour,
+    description: row.description,
+});
+// The unique index is (organization, entity type, lower(name)), so a 23505 from a label write can
+// only mean the name is taken. Postgres names the index; the caller gets a sentence instead.
+const refuseDuplicateName = (error) => {
+    if (error instanceof errors_1.SupabaseClientError && error.code === '23505') {
+        throw new errors_1.SupabaseClientError({ status: 409, error: error.error, message: 'A label with that name already exists', code: error.code }, { cause: error });
+    }
+    throw error;
+};
+class LabelsResource {
+    supabase;
+    auth;
+    table;
+    constructor(supabase, auth, audit) {
+        this.supabase = supabase;
+        this.auth = auth;
+        this.table = (0, audit_1.auditedTable)(supabase, auth, audit, {
+            table: 'labels',
+            entityType: enum_1.AuditTrailEntityType.LABEL,
+        });
+    }
+    async list(entity) {
+        const { data, error } = await this.supabase
+            .from('labels')
+            .select(LABEL_SELECT)
+            .eq('organization_id', this.auth.organization_id)
+            .eq('entity_type', entity);
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return data;
+    }
+    async create(input) {
+        const row = await this.table.insert({
+            name: input.name,
+            colour: input.colour,
+            entity_type: input.entity,
+            description: input.description ?? null,
+            organization_id: this.auth.organization_id,
+            created_by: this.auth.mms_id,
+        }).catch(refuseDuplicateName);
+        return toLabel(row);
+    }
+    async update(labelId, input) {
+        const row = await this.table.update(labelId, {
+            name: input.name,
+            colour: input.colour,
+            ...(input.description !== undefined && { description: input.description }),
+            updated_at: new Date().toISOString(),
+            last_updated_by: this.auth.mms_id,
+        }).catch(refuseDuplicateName);
+        return toLabel(row);
+    }
+    async remove(labelId) {
+        await this.table.remove(labelId);
+    }
+}
+exports.LabelsResource = LabelsResource;

package/dist/tasks/dto.d.ts

@@ -1,8 +1,17 @@
-import type { CreateTaskDto as CreateTaskDtoType, GetTasksDto as GetTasksDtoType, TaskIdDto as TaskIdDtoType, UpdateTaskDto as UpdateTaskDtoType } from '@managemint-solutions/entities/tasks/dto';
+import type { AddTaskLinkDto as AddTaskLinkDtoType, CreateTaskDto as CreateTaskDtoType, GetTasksDto as GetTasksDtoType, TaskIdDto as TaskIdDtoType, TaskLinkIdDto as TaskLinkIdDtoType, UpdateTaskDto as UpdateTaskDtoType } from '@managemint-solutions/entities/tasks/dto';
+import { TaskLinkType } from '@managemint-solutions/entities/tasks/enum';
 export declare class TaskIdDto implements TaskIdDtoType {
     readonly taskId: string;
 }
-export declare class GetTasksDto implements Omit<GetTasksDtoType, 'status_id_in' | 'status_id_not_in' | 'priority_in'> {
+export declare class TaskLinkIdDto implements TaskLinkIdDtoType {
+    readonly taskId: string;
+    readonly linkedTaskId: string;
+}
+export declare class AddTaskLinkDto implements AddTaskLinkDtoType {
+    readonly linked_task_id: string;
+    readonly link_type: TaskLinkType;
+}
+export declare class GetTasksDto implements Omit<GetTasksDtoType, 'status_id_in' | 'status_id_not_in' | 'label_id_in' | 'priority_in'> {
     readonly search?: string | null;
     readonly page: number;
     readonly page_size: number;
@@ -17,6 +26,7 @@ export declare class GetTasksDto implements Omit<GetTasksDtoType, 'status_id_in'
     readonly end_date_before?: string | null;
     readonly status_id_in?: string[] | null;
     readonly status_id_not_in?: string[] | null;
+    readonly label_id_in?: string[] | null;
     readonly completed?: boolean | null;
     readonly priority_in?: number[] | null;
     readonly archive: boolean;
@@ -31,6 +41,7 @@ export declare class CreateTaskDto implements CreateTaskDtoType {
     readonly assigned_to_id?: string | null;
     readonly project_id?: string | null;
     readonly client_id?: string | null;
+    readonly label_ids?: string[] | null;
 }
 export declare class UpdateTaskDto implements UpdateTaskDtoType {
     readonly name: string;
@@ -42,4 +53,5 @@ export declare class UpdateTaskDto implements UpdateTaskDtoType {
     readonly assigned_to_id?: string | null;
     readonly project_id?: string | null;
     readonly client_id?: string | null;
+    readonly label_ids?: string[] | null;
 }

package/dist/tasks/dto.js

@@ -9,9 +9,10 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.UpdateTaskDto = exports.CreateTaskDto = exports.GetTasksDto = exports.TaskIdDto = void 0;
+exports.UpdateTaskDto = exports.CreateTaskDto = exports.GetTasksDto = exports.AddTaskLinkDto = exports.TaskLinkIdDto = exports.TaskIdDto = void 0;
 const class_validator_1 = require("class-validator");
 const class_transformer_1 = require("class-transformer");
+const enum_1 = require("@managemint-solutions/entities/tasks/enum");
 const transforms_1 = require("../transforms");
 const validators_1 = require("../validators");
 // class-validator versions of the shared DTO types from @managemint-solutions/entities, so the
@@ -25,10 +26,38 @@ __decorate([
     ,
     __metadata("design:type", String)
 ], TaskIdDto.prototype, "taskId", void 0);
-// `status_id_in`, `status_id_not_in` and `priority_in` are omitted from the implemented type on
-// purpose: the entities type carries the CSV wire values, while this class carries the
-// `@Transform`-parsed arrays the query builder feeds to `.in('status_id', ...)` /
-// `.in('priority', ...)` and to the `status_id.is.null,status_id.not.in.(...)` exclusion.
+class TaskLinkIdDto {
+    taskId;
+    linkedTaskId;
+}
+exports.TaskLinkIdDto = TaskLinkIdDto;
+__decorate([
+    (0, class_validator_1.IsUUID)('7', { message: 'Invalid task ID format' }),
+    __metadata("design:type", String)
+], TaskLinkIdDto.prototype, "taskId", void 0);
+__decorate([
+    (0, class_validator_1.IsUUID)('7', { message: 'Invalid linked task ID format' }),
+    __metadata("design:type", String)
+], TaskLinkIdDto.prototype, "linkedTaskId", void 0);
+class AddTaskLinkDto {
+    linked_task_id;
+    // The only check on the value: `task_links.link_type` is plain text.
+    link_type;
+}
+exports.AddTaskLinkDto = AddTaskLinkDto;
+__decorate([
+    (0, class_validator_1.IsUUID)('7', { message: 'Invalid linked task ID format' }),
+    __metadata("design:type", String)
+], AddTaskLinkDto.prototype, "linked_task_id", void 0);
+__decorate([
+    (0, class_validator_1.IsEnum)(enum_1.TaskLinkType, { message: 'Link type must be child or related' }),
+    __metadata("design:type", String)
+], AddTaskLinkDto.prototype, "link_type", void 0);
+// `status_id_in`, `status_id_not_in`, `label_id_in` and `priority_in` are omitted from the
+// implemented type on purpose: the entities type carries the CSV wire values, while this class
+// carries the `@Transform`-parsed arrays the query builder feeds to `.in('status_id', ...)` /
+// `.in('task_labels.label_id', ...)` / `.in('priority', ...)` and to the
+// `status_id.is.null,status_id.not.in.(...)` exclusion.
 class GetTasksDto {
     search;
     page = 1;
@@ -44,6 +73,8 @@ class GetTasksDto {
     end_date_before;
     status_id_in;
     status_id_not_in;
+    // A task matches when it carries any one of these labels.
+    label_id_in;
     // Tri-state: true = only completed rows, false = only rows that are not completed, omitted = no
     // completion filter. The api resolves it to status ids before it reaches `list`.
     completed;
@@ -147,6 +178,13 @@ __decorate([
     (0, class_validator_1.IsUUID)('7', { each: true, message: 'Invalid status ID format' }),
     __metadata("design:type", Object)
 ], GetTasksDto.prototype, "status_id_not_in", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_transformer_1.Transform)(({ value }) => value ? value.split(',').map((id) => id.trim()) : null, { toClassOnly: true }),
+    (0, class_validator_1.IsUUID)('7', { each: true, message: 'Invalid label ID format' }),
+    __metadata("design:type", Object)
+], GetTasksDto.prototype, "label_id_in", void 0);
 __decorate([
     (0, class_validator_1.IsOptional)(),
     (0, validators_1.IsNullable)(),
@@ -178,6 +216,8 @@ class CreateTaskDto {
     assigned_to_id;
     project_id;
     client_id;
+    // The labels to pin to the new task; omitted means none.
+    label_ids;
 }
 exports.CreateTaskDto = CreateTaskDto;
 __decorate([
@@ -239,6 +279,13 @@ __decorate([
     (0, class_validator_1.IsUUID)('7', { message: 'Invalid client ID format' }),
     __metadata("design:type", Object)
 ], CreateTaskDto.prototype, "client_id", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)({ message: 'Label IDs must be an array' }),
+    (0, class_validator_1.ArrayUnique)({ message: 'Label IDs must not repeat' }),
+    (0, class_validator_1.IsUUID)('7', { each: true, message: 'Invalid label ID format' }),
+    __metadata("design:type", Object)
+], CreateTaskDto.prototype, "label_ids", void 0);
 class UpdateTaskDto {
     name;
     description;
@@ -249,6 +296,9 @@ class UpdateTaskDto {
     assigned_to_id;
     project_id;
     client_id;
+    // The full set of labels after the update: an array replaces the set (empty clears it);
+    // omitted or null leaves the labels as they are.
+    label_ids;
 }
 exports.UpdateTaskDto = UpdateTaskDto;
 __decorate([
@@ -312,3 +362,10 @@ __decorate([
     (0, class_validator_1.IsUUID)('7', { message: 'Invalid client ID format' }),
     __metadata("design:type", Object)
 ], UpdateTaskDto.prototype, "client_id", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)({ message: 'Label IDs must be an array' }),
+    (0, class_validator_1.ArrayUnique)({ message: 'Label IDs must not repeat' }),
+    (0, class_validator_1.IsUUID)('7', { each: true, message: 'Invalid label ID format' }),
+    __metadata("design:type", Object)
+], UpdateTaskDto.prototype, "label_ids", void 0);

package/dist/tasks/index.d.ts

@@ -3,11 +3,12 @@ import type { TaskEntity, TaskSummary } from '@managemint-solutions/entities/tas
 import type { AuthContext } from '../auth';
 import { type AuditResource } from '../audit';
 import type { TypedSupabaseClient } from '../client';
-import type { CreateTaskDto, GetTasksDto, UpdateTaskDto } from './dto';
+import type { AddTaskLinkDto, CreateTaskDto, GetTasksDto, UpdateTaskDto } from './dto';
 export * from './dto';
 export declare class TasksResource {
     private readonly supabase;
     private readonly auth;
+    private readonly audit;
     private readonly table;
     constructor(supabase: TypedSupabaseClient, auth: AuthContext, audit: AuditResource);
     list(query: GetTasksDto): Promise<MmsList<TaskSummary>>;
@@ -19,4 +20,34 @@ export declare class TasksResource {
     restore(taskId: string): Promise<TaskEntity>;
     /** Soft delete - the row stays, flagged `deleted`, and `restore()` brings it back. */
     remove(taskId: string): Promise<void>;
+    /**
+     * Links `input.linked_task_id` to the task as a subtask or as related. The rules live here,
+     * checked before the insert: not the task itself, both tasks this organization's and not
+     * deleted, and no loop of subtasks. The two a concurrent write could still break - one link
+     * per pair, one parent per task - are unique indexes, and their violations are turned into
+     * sentences. The link has no audit of its own: it is one UPDATE entry on the task it was
+     * made from.
+     */
+    linkTask(taskId: string, input: AddTaskLinkDto): Promise<TaskEntity>;
+    /**
+     * Removes the link between the two tasks, whichever of them it was made from - a pair carries
+     * one link at most. Unlinked from the subtask's side, the entry names the other task as parent.
+     */
+    unlinkTask(taskId: string, linkedTaskId: string): Promise<TaskEntity>;
+    /**
+     * Refuses, before anything is written, a label id that is not one of this organization's task
+     * labels - one deleted while the form was open, or another organization's. The `task_labels`
+     * trigger enforces the same rule, but only once the task row has already been saved, so
+     * without this a create would answer an error for a task it had in fact created.
+     */
+    private checkLabels;
+    /**
+     * Makes `labelIds` the task's whole label set. The join rows carry no audit of their own: the
+     * change is one UPDATE entry on the task, `labels: { old: [names], new: [names] }`, recorded
+     * only when the set actually moved - on a new task that entry is the record of the initial
+     * pinning. Only the difference is written, the new labels inserted before the dropped ones are
+     * deleted, so should the trigger still refuse one (a label deleted after `checkLabels`) the
+     * task's existing labels are untouched, and a label kept across an edit keeps its place.
+     */
+    private setLabels;
 }

package/dist/tasks/index.js

@@ -15,7 +15,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TasksResource = void 0;
-const enum_1 = require("@managemint-solutions/entities/audit-trail/enum");
+const enum_1 = require("@managemint-solutions/entities/tasks/enum");
+const enum_2 = require("@managemint-solutions/entities/labels/enum");
+const enum_3 = require("@managemint-solutions/entities/audit-trail/enum");
 const audit_1 = require("../audit");
 const errors_1 = require("../errors");
 const transforms_1 = require("../transforms");
@@ -38,10 +40,25 @@ const TASK_LIST_SELECT = `
           is_triage
         ),
         priority,
+        labels:labels!task_labels (
+          mms_id,
+          name,
+          colour,
+          description
+        ),
         assigned_to:user_profiles!assigned_to_id (*),
         project:project_profiles!project_id (*),
         client:client_profiles!client_id (*)
       `;
+// A linked task as the detail read shows it. `deleted` is read only so a soft-deleted task can be
+// left out of the links; it is not part of LinkedTask.
+const LINKED_TASK_FIELDS = `
+            mms_id,
+            task_number:task_id,
+            name,
+            priority,
+            deleted,
+            status:statuses!status_id ( mms_id, colour, label, is_complete, is_fail, is_triage )`;
 const TASK_DETAIL_SELECT = `
         mms_id,
         created_at,
@@ -62,6 +79,12 @@ const TASK_DETAIL_SELECT = `
           is_triage
         ),
         priority,
+        labels:labels!task_labels (
+          mms_id,
+          name,
+          colour,
+          description
+        ),
         assigned_to:user_profiles!assigned_to_id (*),
         project:project_profiles!project_id (*),
         client:client_profiles!client_id (*),
@@ -74,18 +97,40 @@ const TASK_DETAIL_SELECT = `
         deleted_at,
         deleted_by:user_profiles!deleted_by (*),
         restored_at,
-        restored_by:user_profiles!restored_by (*)
+        restored_by:user_profiles!restored_by (*),
+        links_out:task_links!task_id (
+          link_type,
+          task:tasks!linked_task_id ( ${LINKED_TASK_FIELDS} )
+        ),
+        links_in:task_links!linked_task_id (
+          link_type,
+          task:tasks!task_id ( ${LINKED_TASK_FIELDS} )
+        )
       `;
+// Added to the list select only when `label_id_in` is set: an inner join on the join table is how
+// PostgREST filters a task by the labels it carries.
+const LABEL_FILTER_SELECT = 'task_labels!inner ( label_id )';
+// A `task_labels` row as `setLabels` reads and writes it: the label id, and the name the audit
+// entry records.
+const PINNED_LABEL_SELECT = 'label_id, label:labels ( name )';
+const linkedTasks = (rows, linkType) => rows
+    .filter((row) => row.link_type === linkType && row.task && !row.task.deleted)
+    .map((row) => {
+    const { deleted: _deleted, ...task } = row.task;
+    return task;
+});
 class TasksResource {
     supabase;
     auth;
+    audit;
     table;
     constructor(supabase, auth, audit) {
         this.supabase = supabase;
         this.auth = auth;
+        this.audit = audit;
         this.table = (0, audit_1.auditedTable)(supabase, auth, audit, {
             table: 'tasks',
-            entityType: enum_1.AuditTrailEntityType.TASKS,
+            entityType: enum_3.AuditTrailEntityType.TASKS,
         });
     }
     async list(query) {
@@ -93,11 +138,14 @@ class TasksResource {
         const pageSize = query.page_size;
         const offset = (page - 1) * pageSize;
         const trimmedSearch = query.search?.trim();
+        const labelIdIn = query.label_id_in && query.label_id_in.length > 0 ? query.label_id_in : null;
         // `order`/`range` return `this`, so the builder stays a filter builder and the conditional
         // filters below can be reassigned onto it without a cast.
         let tasksQuery = this.supabase
             .from('tasks')
-            .select(TASK_LIST_SELECT, { count: 'estimated' })
+            .select(labelIdIn ? `${TASK_LIST_SELECT}, ${LABEL_FILTER_SELECT}` : TASK_LIST_SELECT, {
+            count: 'estimated',
+        })
             .eq('organization_id', this.auth.organization_id)
             .eq('archived', query.archive)
             .eq('deleted', false)
@@ -152,10 +200,19 @@ class TasksResource {
         if (query.priority_in && query.priority_in.length > 0) {
             tasksQuery = tasksQuery.in('priority', query.priority_in);
         }
+        // A task matches when it carries any of the labels. The `!inner` join on `task_labels` only
+        // narrows the rows - the `labels` embed is a separate join, so a matched task still shows
+        // every label it carries. The join's rows are not part of TaskSummary and are dropped below.
+        if (labelIdIn) {
+            tasksQuery = tasksQuery.in('task_labels.label_id', labelIdIn);
+        }
         const { data, error, count } = await tasksQuery;
         if (error)
             throw (0, errors_1.mapPostgrestError)(error);
-        return (0, transforms_1.toMmsList)(data, page, pageSize, count);
+        const rows = labelIdIn
+            ? data.map(({ task_labels: _filterRows, ...task }) => task)
+            : data;
+        return (0, transforms_1.toMmsList)(rows, page, pageSize, count);
     }
     async getById(taskId) {
         const { data, error } = await this.supabase
@@ -163,45 +220,262 @@ class TasksResource {
             .select(TASK_DETAIL_SELECT)
             .eq('mms_id', taskId)
             .eq('organization_id', this.auth.organization_id)
+            .order('created_at', { referencedTable: 'links_out' })
+            .order('created_at', { referencedTable: 'links_in' })
             .single();
         if (error)
             throw (0, errors_1.mapPostgrestError)(error);
-        return data;
+        // Related is stored once, so it is read from both directions; a child link is the parent
+        // from the child's side and a subtask from the parent's.
+        const { links_out: linksOut, links_in: linksIn, ...task } = data;
+        return {
+            ...task,
+            parent: linkedTasks(linksIn, enum_1.TaskLinkType.CHILD)[0] ?? null,
+            subtasks: linkedTasks(linksOut, enum_1.TaskLinkType.CHILD),
+            related: [...linkedTasks(linksOut, enum_1.TaskLinkType.RELATED), ...linkedTasks(linksIn, enum_1.TaskLinkType.RELATED)],
+        };
     }
     async create(input) {
+        // `label_ids` is not a tasks column: the labels are join rows, written after the task.
+        const { label_ids: labelIds, ...fields } = input;
+        if (labelIds) {
+            await this.checkLabels(labelIds);
+        }
         // `task_id` (the per-organization task number) is left out: the table's `set_task_id`
         // BEFORE INSERT trigger fills it in when it arrives null.
         const row = await this.table.insert({
-            ...input,
+            ...fields,
             organization_id: this.auth.organization_id,
             created_by: this.auth.mms_id,
             created_at: new Date().toISOString(),
         });
+        if (labelIds) {
+            await this.setLabels(row.mms_id, labelIds);
+        }
         return this.getById(row.mms_id);
     }
     async update(taskId, input) {
+        // `label_ids` is not a tasks column; omitted or null leaves the labels as they are.
+        const { label_ids: labelIds, ...fields } = input;
+        if (labelIds) {
+            await this.checkLabels(labelIds);
+        }
         await this.table.update(taskId, {
-            ...input,
+            ...fields,
             last_updated_by: this.auth.mms_id,
             updated_at: new Date().toISOString(),
         });
+        if (labelIds) {
+            await this.setLabels(taskId, labelIds);
+        }
         return this.getById(taskId);
     }
     async archive(taskId) {
-        await this.table.transition(taskId, enum_1.AuditTrailAction.ARCHIVE, (0, transforms_1.archivedPatch)(this.auth.mms_id));
+        await this.table.transition(taskId, enum_3.AuditTrailAction.ARCHIVE, (0, transforms_1.archivedPatch)(this.auth.mms_id));
         return this.getById(taskId);
     }
     async unarchive(taskId) {
-        await this.table.transition(taskId, enum_1.AuditTrailAction.UNARCHIVE, (0, transforms_1.unarchivedPatch)(this.auth.mms_id));
+        await this.table.transition(taskId, enum_3.AuditTrailAction.UNARCHIVE, (0, transforms_1.unarchivedPatch)(this.auth.mms_id));
         return this.getById(taskId);
     }
     async restore(taskId) {
-        await this.table.transition(taskId, enum_1.AuditTrailAction.RESTORE, (0, transforms_1.restoredPatch)(this.auth.mms_id));
+        await this.table.transition(taskId, enum_3.AuditTrailAction.RESTORE, (0, transforms_1.restoredPatch)(this.auth.mms_id));
         return this.getById(taskId);
     }
     /** Soft delete - the row stays, flagged `deleted`, and `restore()` brings it back. */
     async remove(taskId) {
-        await this.table.transition(taskId, enum_1.AuditTrailAction.DELETE, (0, transforms_1.deletedPatch)(this.auth.mms_id));
+        await this.table.transition(taskId, enum_3.AuditTrailAction.DELETE, (0, transforms_1.deletedPatch)(this.auth.mms_id));
+    }
+    /**
+     * Links `input.linked_task_id` to the task as a subtask or as related. The rules live here,
+     * checked before the insert: not the task itself, both tasks this organization's and not
+     * deleted, and no loop of subtasks. The two a concurrent write could still break - one link
+     * per pair, one parent per task - are unique indexes, and their violations are turned into
+     * sentences. The link has no audit of its own: it is one UPDATE entry on the task it was
+     * made from.
+     */
+    async linkTask(taskId, input) {
+        const refuse = (status, message, cause) => new errors_1.SupabaseClientError({ status, error: 'Database Error', message }, { cause });
+        if (input.linked_task_id === taskId) {
+            throw refuse(400, 'A task cannot be linked to itself');
+        }
+        const { data: tasks, error: tasksError } = await this.supabase
+            .from('tasks')
+            .select('mms_id, task_number:task_id')
+            .eq('organization_id', this.auth.organization_id)
+            .eq('deleted', false)
+            .in('mms_id', [taskId, input.linked_task_id]);
+        if (tasksError)
+            throw (0, errors_1.mapPostgrestError)(tasksError);
+        const linked = tasks.find((task) => task.mms_id === input.linked_task_id);
+        if (tasks.length !== 2 || !linked) {
+            throw refuse(400, 'Invalid task for this organization');
+        }
+        if (input.link_type === enum_1.TaskLinkType.CHILD) {
+            // Walk up from the new parent: were the new subtask among its ancestors, the link would
+            // close a loop. The chain is a few links deep. `seen` stops the walk should two concurrent
+            // links ever have made a loop after all, rather than reading forever.
+            const seen = new Set();
+            let ancestor = taskId;
+            while (ancestor && !seen.has(ancestor)) {
+                const child = ancestor;
+                seen.add(child);
+                const { data: parentLink, error: parentError } = await this.supabase
+                    .from('task_links')
+                    .select('task_id')
+                    .eq('organization_id', this.auth.organization_id)
+                    .eq('linked_task_id', child)
+                    .eq('link_type', enum_1.TaskLinkType.CHILD)
+                    .maybeSingle();
+                if (parentError)
+                    throw (0, errors_1.mapPostgrestError)(parentError);
+                ancestor = parentLink?.task_id ?? null;
+                if (ancestor === input.linked_task_id) {
+                    throw refuse(400, 'A task cannot be a subtask of its own subtask');
+                }
+            }
+        }
+        const { error } = await this.supabase.from('task_links').insert({
+            task_id: taskId,
+            linked_task_id: input.linked_task_id,
+            link_type: input.link_type,
+            organization_id: this.auth.organization_id,
+            created_by: this.auth.mms_id,
+        });
+        if (error) {
+            // Postgres names the violated index: the primary key and the pair index both mean the two
+            // tasks are linked already.
+            if (error.code === '23505' && error.message.includes('uq_task_links_one_parent')) {
+                throw refuse(409, 'That task already has a parent', error);
+            }
+            if (error.code === '23505') {
+                throw refuse(409, 'These tasks are already linked', error);
+            }
+            throw (0, errors_1.mapPostgrestError)(error);
+        }
+        const role = input.link_type === enum_1.TaskLinkType.CHILD ? 'subtask' : 'related';
+        await this.audit.record({
+            action: enum_3.AuditTrailAction.UPDATE,
+            entityType: enum_3.AuditTrailEntityType.TASKS,
+            entityId: taskId,
+            changes: { linked_task: { old: null, new: `TASK-${linked.task_number} (${role})` } },
+        });
+        return this.getById(taskId);
+    }
+    /**
+     * Removes the link between the two tasks, whichever of them it was made from - a pair carries
+     * one link at most. Unlinked from the subtask's side, the entry names the other task as parent.
+     */
+    async unlinkTask(taskId, linkedTaskId) {
+        // Both ids are `@IsUUID('7')`-validated by TaskLinkIdDto, so interpolating them is safe.
+        const { data, error } = await this.supabase
+            .from('task_links')
+            .delete()
+            .eq('organization_id', this.auth.organization_id)
+            .or(`and(task_id.eq.${taskId},linked_task_id.eq.${linkedTaskId}),and(task_id.eq.${linkedTaskId},linked_task_id.eq.${taskId})`)
+            .select('task_id, link_type, from:tasks!task_id ( task_number:task_id ), to:tasks!linked_task_id ( task_number:task_id )');
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        const [row] = data;
+        if (!row) {
+            throw new errors_1.SupabaseClientError({ status: 404, error: 'Database Error', message: 'Link not found' });
+        }
+        const madeHere = row.task_id === taskId;
+        const role = row.link_type === enum_1.TaskLinkType.RELATED ? 'related' : madeHere ? 'subtask' : 'parent';
+        await this.audit.record({
+            action: enum_3.AuditTrailAction.UPDATE,
+            entityType: enum_3.AuditTrailEntityType.TASKS,
+            entityId: taskId,
+            changes: {
+                linked_task: { old: `TASK-${(madeHere ? row.to : row.from).task_number} (${role})`, new: null },
+            },
+        });
+        return this.getById(taskId);
+    }
+    /**
+     * Refuses, before anything is written, a label id that is not one of this organization's task
+     * labels - one deleted while the form was open, or another organization's. The `task_labels`
+     * trigger enforces the same rule, but only once the task row has already been saved, so
+     * without this a create would answer an error for a task it had in fact created.
+     */
+    async checkLabels(labelIds) {
+        if (labelIds.length === 0)
+            return;
+        const { count, error } = await this.supabase
+            .from('labels')
+            .select('mms_id', { count: 'exact', head: true })
+            .eq('organization_id', this.auth.organization_id)
+            .eq('entity_type', enum_2.LabelEntityTypes.TASK)
+            .in('mms_id', labelIds);
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        if (count !== labelIds.length) {
+            throw new errors_1.SupabaseClientError({
+                status: 400,
+                error: 'Database Error',
+                message: 'Invalid label_id for this organization',
+            });
+        }
+    }
+    /**
+     * Makes `labelIds` the task's whole label set. The join rows carry no audit of their own: the
+     * change is one UPDATE entry on the task, `labels: { old: [names], new: [names] }`, recorded
+     * only when the set actually moved - on a new task that entry is the record of the initial
+     * pinning. Only the difference is written, the new labels inserted before the dropped ones are
+     * deleted, so should the trigger still refuse one (a label deleted after `checkLabels`) the
+     * task's existing labels are untouched, and a label kept across an edit keeps its place.
+     */
+    async setLabels(taskId, labelIds) {
+        const { data: current, error: readError } = await this.supabase
+            .from('task_labels')
+            .select(PINNED_LABEL_SELECT)
+            .eq('task_id', taskId)
+            .eq('organization_id', this.auth.organization_id)
+            .order('created_at');
+        if (readError)
+            throw (0, errors_1.mapPostgrestError)(readError);
+        const pinned = current;
+        const added = labelIds.filter((labelId) => !pinned.some((row) => row.label_id === labelId));
+        const kept = pinned.filter((row) => labelIds.includes(row.label_id));
+        const dropped = pinned.filter((row) => !labelIds.includes(row.label_id));
+        if (added.length === 0 && dropped.length === 0)
+            return;
+        let addedRows = [];
+        if (added.length > 0) {
+            const { data, error } = await this.supabase
+                .from('task_labels')
+                .insert(added.map((labelId) => ({
+                task_id: taskId,
+                label_id: labelId,
+                organization_id: this.auth.organization_id,
+                created_by: this.auth.mms_id,
+            })))
+                .select(PINNED_LABEL_SELECT);
+            if (error)
+                throw (0, errors_1.mapPostgrestError)(error);
+            addedRows = data;
+        }
+        if (dropped.length > 0) {
+            const { error } = await this.supabase
+                .from('task_labels')
+                .delete()
+                .eq('task_id', taskId)
+                .eq('organization_id', this.auth.organization_id)
+                .in('label_id', dropped.map((row) => row.label_id));
+            if (error)
+                throw (0, errors_1.mapPostgrestError)(error);
+        }
+        await this.audit.record({
+            action: enum_3.AuditTrailAction.UPDATE,
+            entityType: enum_3.AuditTrailEntityType.TASKS,
+            entityId: taskId,
+            changes: {
+                labels: {
+                    old: pinned.map((row) => row.label.name),
+                    new: [...kept, ...addedRows].map((row) => row.label.name),
+                },
+            },
+        });
     }
 }
 exports.TasksResource = TasksResource;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@managemint-solutions/sdk",
-  "version": "0.41.0",
+  "version": "0.43.0",
   "description": "Typed Supabase data-access SDK for ManageMint Solutions",
   "license": "UNLICENSED",
   "author": "Scott Bebington <scottbebington@gmail.com>",
@@ -51,7 +51,7 @@
     "testEnvironment": "node"
   },
   "dependencies": {
-    "@managemint-solutions/entities": "^1.24.0"
+    "@managemint-solutions/entities": "^1.26.0"
   },
   "peerDependencies": {
     "@nestjs/common": "^11.0.0",