@managemint-solutions/sdk 0.5.0 → 0.7.0

package/README.md

@@ -1,7 +1,7 @@
 # ManageMint Solutions SDK
 
-Typed Supabase data-access SDK for ManageMint Solutions. Query logic and the generated
-database types live here; consumers (api, portal) get typed responses with no casts.
+Typed Supabase data-access SDK for ManageMint Solutions. Query logic lives here; consumers
+(api, portal) get responses typed as the shared `@managemint-solutions/entities` types with no casts.
 
 ## Install
 
@@ -14,7 +14,10 @@ are peer dependencies — the request DTOs (`AddStatusDto`, `UpdateStatusDto`, `
 `GetStatusesDto`, `AddAdditionalDetailsDto`, `UpdateAdditionalDetailsDto`,
 `AdditionalDetailsIdDto`, `GetAdditionalDetailsDto`, `AddNoteDto`, `NoteIdDto`,
 `GetNotesDto`, `SupportingFileIdDto`, `GetSupportingFilesDto`, `GetClientsDto`, `ClientIdDto`,
-`CreateClientDto`, `UpdateClientDto`) ship with their class-validator
+`CreateClientDto`, `UpdateClientDto`, `GetProjectsDto`, `ProjectIdDto`, `CreateProjectDto`,
+`UpdateProjectDto`, `GetTasksDto`, `TaskIdDto`, `CreateTaskDto`, `UpdateTaskDto`, `SignInDto`,
+`ExchangeRefreshTokenDto`, `SendPasswordResetEmailDto`, `ExchangeTokenHashDto`,
+`ResetPasswordDto`) ship with their class-validator
 decorators so consumers validate against
 the same rules the SDK's input types describe. `@nestjs/common` (^11) is an optional peer
 dependency, needed only for the `@managemint-solutions/sdk/nest` subpath.
@@ -124,17 +127,128 @@ await supabase.clients.restore(client.mms_id);   // deleted = false + restored_a
 email and phone empty, no status, `contract_client` false, `contracted_hours` 0). Every write
 except `remove` re-reads and returns the full record afterwards.
 
+```ts
+// Projects are paginated the same way, with extra date-range and client filters.
+const page = await supabase.projects.list({
+  page: 1,
+  page_size: 10,
+  archive: false,
+  client_id: clientId, // a UUID, or the base64-JSON option value a select sends
+});
+// `search` matches name/specification; `created_*`, `start_date_*` and `end_date_*` bound the
+// date columns, and `status_id_in` filters by status.
+
+const project = await supabase.projects.create({
+  name: 'Website rebuild',
+  specification: 'Rebuild the marketing site',
+  start_date: '2026-04-22',
+  end_date: '2026-06-30',
+  has_budget: true,
+  status_id: statusId,
+  client_id: clientId,
+  manager_id: userId,
+});
+await supabase.projects.getById(project.mms_id);
+await supabase.projects.update(project.mms_id, { ...project, name: 'Website rebuild v2' });
+await supabase.projects.archive(project.mms_id);
+await supabase.projects.unarchive(project.mms_id);
+await supabase.projects.remove(project.mms_id);  // soft delete
+await supabase.projects.restore(project.mms_id);
+```
+
+Each project carries its embedded `status`, `manager` and `client`; `getById` on a soft-deleted
+project returns the creation audit with the rest blanked (empty name, no specification, dates,
+status, manager or client).
+
+```ts
+// Tasks are paginated too, ordered by priority then newest first.
+const page = await supabase.tasks.list({
+  page: 1,
+  page_size: 10,
+  archive: false,
+  project_id: projectId,
+  priority_in: [1, 3],
+});
+// `search` matches name/description, and `client_id`, `assigned_to_id`, the date ranges and
+// `status_id_in` narrow it further.
+
+const task = await supabase.tasks.create({
+  name: 'Draft the proposal',
+  description: 'Write the first pass and circulate it',
+  start_date: '2026-04-22',
+  end_date: '2026-04-30',
+  status_id: statusId,
+  priority: 2,
+  assigned_to_id: userId,
+  project_id: projectId,
+  client_id: clientId,
+});
+await supabase.tasks.getById(task.mms_id);
+await supabase.tasks.update(task.mms_id, { ...task, priority: 3 });
+await supabase.tasks.archive(task.mms_id);
+await supabase.tasks.unarchive(task.mms_id);
+await supabase.tasks.remove(task.mms_id);   // soft delete
+await supabase.tasks.restore(task.mms_id);
+```
+
+A task's `task_id` (its per-organization number) is assigned by the database on insert, and each
+task carries its embedded `status`, `assigned_to`, `project` and `client`.
+
 The client decodes `{ mms_id, organization_id }` from the JWT itself and scopes every query
-by `organization_id`. `supabase.supabase` is the raw typed `@supabase/supabase-js` client
+by `organization_id`. `supabase.supabase` is the raw `@supabase/supabase-js` client
 (`TypedSupabaseClient`) — the escape hatch for queries not yet covered by a resource.
 
+## Auth
+
+`SupabaseClient` needs the caller's JWT, which the auth flows are there to produce — so sign-in,
+refresh and the password-reset exchanges live on a separate `SupabaseAuthClient`, built from the
+publishable key alone.
+
+```ts
+import { createSupabaseAuthClient } from '@managemint-solutions/sdk';
+
+const auth = createSupabaseAuthClient({
+  url: process.env.SUPABASE_URL!,
+  key: process.env.SUPABASE_PUBLISHABLE_KEY!, // no caller token — these callers are logged out
+});
+
+const { access_token, refresh_token } = await auth.signIn({ email, password });
+await auth.refreshSession({ refresh_token });
+await auth.signOut();
+
+// The redirect URL is passed in; the SDK reads no environment variables.
+await auth.sendPasswordResetEmail({ email }, `${process.env.FRONTEND_URL}/reset-password`);
+await auth.exchangeRecoveryToken({ token_hash }); // recovery link → tokens
+await auth.exchangeConfirmToken({ token_hash });  // signup confirmation link → tokens
+await auth.resetPassword({ password, access_token, refresh_token });
+```
+
+`signIn` also stamps `users.last_logged_in` for the user who just signed in, on a throwaway
+client carrying the fresh access token; a failed stamp never fails the login. `signOut` is a
+no-op server-side — the client holds no session — and is kept for parity with the api endpoint
+it replaces. `auth.supabase` is the raw `@supabase/supabase-js` client.
+
+```ts
+import { SupabasePublicClient } from '@managemint-solutions/sdk/nest';
+import { SignInDto, SupabaseAuthClient } from '@managemint-solutions/sdk';
+
+@Controller('auth')
+export class AuthController {
+  @Post('sign-in')
+  signIn(@SupabasePublicClient() auth: SupabaseAuthClient, @Body() body: SignInDto) {
+    return auth.signIn(body);
+  }
+}
+```
+
 ## Errors
 
 Every error the SDK throws is a `SupabaseClientError` carrying the HTTP `status` to respond
 with and the client-facing body, `toResponse()` → `{ error, message }`. Postgrest/Postgres
 errors are translated by `mapPostgrestError` (Postgrest code → status, RLS permission and
 module denials → readable messages), Storage errors by `mapStorageError` (the storage error's
-own HTTP status, or 500 when it has none); JWT problems are `401 Authentication Error`. Consumers
+own HTTP status, or 500 when it has none), Supabase Auth errors by `mapAuthError` (same rule,
+`Authentication Error`); JWT problems are `401 Authentication Error`. Consumers
 return these as-is instead of mapping database errors themselves.
 
 ## NestJS
@@ -169,6 +283,6 @@ npm test        # jest + ts-jest; specs live in src/<resource>/tests/*.spec.ts
 npm run build   # tsc -p tsconfig.build.json (excludes specs), CommonJS output in dist/ — the type gate
 ```
 
-`src/database.types.ts` is generated by `supabase gen types typescript` and is committed
-here; regenerating it produces a reviewable diff and requires a version bump.
+The SDK carries no generated database types: the schema of record is the api's
+`supabase/migrations`, and each resource declares the row shape its select string produces.
 Publishing happens on push to `main` via `.github/workflows/release.yml`.

package/dist/additional-details/dto.d.ts

@@ -1,10 +1,8 @@
 import { type ValidationOptions } from 'class-validator';
 import type { AddAdditionalDetailsDto as AddAdditionalDetailsDtoType, AdditionalDetailsIdDto as AdditionalDetailsIdDtoType, GetAdditionalDetailsDto as GetAdditionalDetailsDtoType, UpdateAdditionalDetailsDto as UpdateAdditionalDetailsDtoType } from '@managemint-solutions/entities/additional-details/dto';
 import { AdditionalDetailsEntityTypes, AdditionalDetailsTypes } from '@managemint-solutions/entities/additional-details/enum';
-import type { TablesInsert } from '../database.types';
 /** Validates `value` against the sibling `type` property (the discriminator). */
 export declare function IsAdditionalDetailsValueByType(typeProperty: string, validationOptions?: ValidationOptions): (object: object, propertyName: string) => void;
-type AdditionalDetailsInsertColumns = Required<Pick<TablesInsert<'additional_details'>, 'key' | 'copyable'>>;
 export declare class AdditionalDetailsIdDto implements AdditionalDetailsIdDtoType {
     readonly additionalDetailsId: string;
 }
@@ -12,16 +10,15 @@ export declare class GetAdditionalDetailsDto implements GetAdditionalDetailsDtoT
     readonly entity: AdditionalDetailsEntityTypes;
     readonly entityId: string;
 }
-export declare class AddAdditionalDetailsDto implements AddAdditionalDetailsDtoType, AdditionalDetailsInsertColumns {
+export declare class AddAdditionalDetailsDto implements AddAdditionalDetailsDtoType {
     readonly key: string;
     readonly value: string | number | boolean | Date | URL;
     readonly type: AdditionalDetailsTypes;
     readonly copyable: boolean;
 }
-export declare class UpdateAdditionalDetailsDto implements UpdateAdditionalDetailsDtoType, AdditionalDetailsInsertColumns {
+export declare class UpdateAdditionalDetailsDto implements UpdateAdditionalDetailsDtoType {
     readonly key: string;
     readonly value: string | number | boolean;
     readonly type: AdditionalDetailsTypes;
     readonly copyable: boolean;
 }
-export {};

package/dist/additional-details/dto.js

@@ -66,6 +66,8 @@ function IsAdditionalDetailsValueByType(typeProperty, validationOptions) {
         });
     };
 }
+// class-validator versions of the shared DTO types from @managemint-solutions/entities.
+// Each class `implements` its entities type so the wire contract cannot drift.
 class AdditionalDetailsIdDto {
     additionalDetailsId;
 }

package/dist/additional-details/dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"dto.js","sourceRoot":"","sources":["../../src/additional-details/dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAyBA,wEA4DC;AArFD,qDAWyB;AAOzB,iFAGgE;AAGhE,iFAAiF;AACjF,SAAgB,8BAA8B,CAC5C,YAAoB,EACpB,iBAAqC;IAErC,OAAO,UAAU,MAAc,EAAE,YAAoB;QACnD,IAAA,mCAAiB,EAAC;YAChB,IAAI,EAAE,gCAAgC;YACtC,MAAM,EAAE,MAAM,CAAC,WAAW;YAC1B,YAAY;YACZ,WAAW,EAAE,CAAC,YAAY,CAAC;YAC3B,OAAO,EAAE,iBAAiB;YAC1B,SAAS,EAAE;gBACT,QAAQ,CAAC,KAAc,EAAE,IAAyB;oBAChD,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;oBACnC,MAAM,YAAY,GAAI,IAAI,CAAC,MAAkC,CAAC,OAAO,CAExD,CAAC;oBAEd,4DAA4D;oBAC5D,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,6BAAsB,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;wBACnF,OAAO,IAAI,CAAC;oBACd,CAAC;oBAED,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBAC1C,OAAO,KAAK,CAAC;oBACf,CAAC;oBAED,QAAQ,YAAY,EAAE,CAAC;wBACrB,KAAK,6BAAsB,CAAC,IAAI;4BAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;wBAC9D,KAAK,6BAAsB,CAAC,MAAM;4BAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;wBAC7D,KAAK,6BAAsB,CAAC,OAAO;4BACjC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;wBACpC,KAAK,6BAAsB,CAAC,IAAI;4BAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;wBACvE,KAAK,6BAAsB,CAAC,GAAG;4BAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gCAC9B,OAAO,KAAK,CAAC;4BACf,CAAC;4BAED,IAAI,CAAC;gCACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;gCACjC,OAAO,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC;4BAC3E,CAAC;4BAAC,MAAM,CAAC;gCACP,OAAO,KAAK,CAAC;4BACf,CAAC;wBACH;4BACE,OAAO,IAAI,CAAC;oBAChB,CAAC;gBACH,CAAC;gBACD,cAAc,CAAC,IAAyB;oBACtC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;oBACnC,MAAM,YAAY,GAAI,IAAI,CAAC,MAAkC,CAAC,OAAO,CAAC,CAAC;oBAEvE,OAAO,uCAAuC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBACvE,CAAC;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAUD,MAAa,sBAAsB;IAExB,mBAAmB,CAAU;CACvC;AAHD,wDAGC;AADU;IADR,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;;mEAC3B;AAGxC,MAAa,uBAAuB;IAEzB,MAAM,CAAgC;IAGtC,QAAQ,CAAU;CAC5B;AAND,0DAMC;AAJU;IADR,IAAA,wBAAM,EAAC,mCAA4B,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;;uDAC1B;AAGtC;IADR,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;;yDAC1B;AAG7B,MAAa,uBAAuB;IAMzB,GAAG,CAAU;IAIb,KAAK,CAA0C;IAG/C,IAAI,CAA0B;IAG9B,QAAQ,CAAW;CAC7B;AAjBD,0DAiBC;AAXU;IAHR,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACpC,IAAA,2BAAS,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IAChD,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;;oDAC1C;AAIb;IAFR,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC3C,8BAA8B,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;;sDACtC;AAG/C;IADR,IAAA,wBAAM,EAAC,6BAAsB,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;;qDACxC;AAG9B;IADR,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;;yDACrB;AAG9B,MAAa,0BAA0B;IAM5B,GAAG,CAAU;IAIb,KAAK,CAA6B;IAGlC,IAAI,CAA0B;IAG9B,QAAQ,CAAW;CAC7B;AAjBD,gEAiBC;AAXU;IAHR,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACpC,IAAA,2BAAS,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IAChD,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;;uDAC1C;AAIb;IAFR,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC3C,8BAA8B,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;;yDACnD;AAGlC;IADR,IAAA,wBAAM,EAAC,6BAAsB,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;;wDACxC;AAG9B;IADR,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;;4DACrB"}
+{"version":3,"file":"dto.js","sourceRoot":"","sources":["../../src/additional-details/dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAwBA,wEA4DC;AApFD,qDAWyB;AAOzB,iFAGgE;AAEhE,iFAAiF;AACjF,SAAgB,8BAA8B,CAC5C,YAAoB,EACpB,iBAAqC;IAErC,OAAO,UAAU,MAAc,EAAE,YAAoB;QACnD,IAAA,mCAAiB,EAAC;YAChB,IAAI,EAAE,gCAAgC;YACtC,MAAM,EAAE,MAAM,CAAC,WAAW;YAC1B,YAAY;YACZ,WAAW,EAAE,CAAC,YAAY,CAAC;YAC3B,OAAO,EAAE,iBAAiB;YAC1B,SAAS,EAAE;gBACT,QAAQ,CAAC,KAAc,EAAE,IAAyB;oBAChD,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;oBACnC,MAAM,YAAY,GAAI,IAAI,CAAC,MAAkC,CAAC,OAAO,CAExD,CAAC;oBAEd,4DAA4D;oBAC5D,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,6BAAsB,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;wBACnF,OAAO,IAAI,CAAC;oBACd,CAAC;oBAED,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBAC1C,OAAO,KAAK,CAAC;oBACf,CAAC;oBAED,QAAQ,YAAY,EAAE,CAAC;wBACrB,KAAK,6BAAsB,CAAC,IAAI;4BAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;wBAC9D,KAAK,6BAAsB,CAAC,MAAM;4BAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;wBAC7D,KAAK,6BAAsB,CAAC,OAAO;4BACjC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;wBACpC,KAAK,6BAAsB,CAAC,IAAI;4BAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;wBACvE,KAAK,6BAAsB,CAAC,GAAG;4BAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gCAC9B,OAAO,KAAK,CAAC;4BACf,CAAC;4BAED,IAAI,CAAC;gCACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;gCACjC,OAAO,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC;4BAC3E,CAAC;4BAAC,MAAM,CAAC;gCACP,OAAO,KAAK,CAAC;4BACf,CAAC;wBACH;4BACE,OAAO,IAAI,CAAC;oBAChB,CAAC;gBACH,CAAC;gBACD,cAAc,CAAC,IAAyB;oBACtC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;oBACnC,MAAM,YAAY,GAAI,IAAI,CAAC,MAAkC,CAAC,OAAO,CAAC,CAAC;oBAEvE,OAAO,uCAAuC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBACvE,CAAC;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,+EAA+E;AAE/E,MAAa,sBAAsB;IAExB,mBAAmB,CAAU;CACvC;AAHD,wDAGC;AADU;IADR,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;;mEAC3B;AAGxC,MAAa,uBAAuB;IAEzB,MAAM,CAAgC;IAGtC,QAAQ,CAAU;CAC5B;AAND,0DAMC;AAJU;IADR,IAAA,wBAAM,EAAC,mCAA4B,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;;uDAC1B;AAGtC;IADR,IAAA,wBAAM,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;;yDAC1B;AAG7B,MAAa,uBAAuB;IAIzB,GAAG,CAAU;IAIb,KAAK,CAA0C;IAG/C,IAAI,CAA0B;IAG9B,QAAQ,CAAW;CAC7B;AAfD,0DAeC;AAXU;IAHR,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACpC,IAAA,2BAAS,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IAChD,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;;oDAC1C;AAIb;IAFR,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC3C,8BAA8B,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;;sDACtC;AAG/C;IADR,IAAA,wBAAM,EAAC,6BAAsB,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;;qDACxC;AAG9B;IADR,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;;yDACrB;AAG9B,MAAa,0BAA0B;IAI5B,GAAG,CAAU;IAIb,KAAK,CAA6B;IAGlC,IAAI,CAA0B;IAG9B,QAAQ,CAAW;CAC7B;AAfD,gEAeC;AAXU;IAHR,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACpC,IAAA,2BAAS,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IAChD,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;;uDAC1C;AAIb;IAFR,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC3C,8BAA8B,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;;yDACnD;AAGlC;IADR,IAAA,wBAAM,EAAC,6BAAsB,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;;wDACxC;AAG9B;IADR,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;;4DACrB"}

package/dist/additional-details/index.js

@@ -19,12 +19,11 @@ const errors_1 = require("../errors");
 const values_1 = require("./values");
 __exportStar(require("./dto"), exports);
 __exportStar(require("./values"), exports);
-// The query is typed by the generated Database schema (so the select string and the
-// insert/update payloads are checked); the public contract is the shared entities type.
-// The two shapes legitimately differ, hence `as unknown as`: the embedded user_profiles rows
-// are all-nullable view rows where the entity declares UserIdentity, the timestamps are ISO
-// strings where the entity declares Date, and `value` is the `text` column where the entity
-// declares the parsed string | number | boolean | Date | URL union that castValueByType produces.
+// The public contract is the shared AdditionalDetailsEntity / AdditionalDetailSummary from
+// @managemint-solutions/entities; the casts at the returns declare the shape the select strings
+// below produce (the columns are defined in the api's supabase/migrations). `value` is a `text`
+// column, and castValueByType turns it into the string | number | boolean | Date | URL union the
+// entity declares.
 const ADDITIONAL_DETAILS_SELECT = 'mms_id, created_at, created_by:user_profiles!created_by(*), updated_at, last_updated_by:user_profiles!last_updated_by(*), key, value, type, copyable';
 const ADDITIONAL_DETAILS_SUMMARY_SELECT = 'mms_id, key, value, type, copyable';
 const withCastValue = (detail) => ({

package/dist/additional-details/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/additional-details/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAcA,sCAA8C;AAC9C,qCAA2D;AAE3D,wCAAsB;AACtB,2CAAyB;AAEzB,oFAAoF;AACpF,wFAAwF;AACxF,6FAA6F;AAC7F,4FAA4F;AAC5F,4FAA4F;AAC5F,kGAAkG;AAClG,MAAM,yBAAyB,GAC7B,sJAA+J,CAAC;AAElK,MAAM,iCAAiC,GAAG,oCAA6C,CAAC;AAExF,MAAM,aAAa,GAAG,CAA6C,MAAS,EAAE,EAAE,CAAC,CAAC;IAChF,GAAG,MAAM;IACT,KAAK,EAAE,IAAA,wBAAe,EAAC,MAAM,CAAC,IAA8B,EAAE,MAAM,CAAC,KAAK,CAAC;CAC5E,CAAC,CAAC;AAEH,MAAa,yBAAyB;IAEjB;IACA;IAFnB,YACmB,QAA6B,EAC7B,IAAiB;QADjB,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,SAAI,GAAJ,IAAI,CAAa;IACjC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,mBAA2B;QACvC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,oBAAoB,CAAC;aAC1B,MAAM,CAAC,yBAAyB,CAAC;aACjC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;aAChD,EAAE,CAAC,QAAQ,EAAE,mBAAmB,CAAC;aACjC,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,aAAa,CAAC,IAAI,CAAuC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,IAAI,CACR,MAAoC,EACpC,QAAgB;QAEhB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,oBAAoB,CAAC;aAC1B,MAAM,CAAC,iCAAiC,CAAC;aACzC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;aAChD,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC;aACzB,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;aACzB,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACtC,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAyC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,MAAM,CACV,MAAoC,EACpC,QAAgB,EAChB,KAA8B;QAE9B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,oBAAoB,CAAC;aAC1B,MAAM,CAAC;YACN,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe;YAC1C,WAAW,EAAE,MAAM;YACnB,SAAS,EAAE,QAAQ;YACnB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,KAAK,EAAE,IAAA,uBAAc,EAAC,KAAK,CAAC,KAAK,CAAC;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;SAC7B,CAAC;aACD,MAAM,CAAC,yBAAyB,CAAC;aACjC,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,aAAa,CAAC,IAAI,CAAuC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,MAAM,CACV,mBAA2B,EAC3B,KAAiC;QAEjC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,oBAAoB,CAAC;aAC1B,MAAM,CAAC;YACN,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,KAAK,EAAE,IAAA,uBAAc,EAAC,KAAK,CAAC,KAAK,CAAC;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;SAClC,CAAC;aACD,EAAE,CAAC,QAAQ,EAAE,mBAAmB,CAAC;aACjC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;aAChD,MAAM,CAAC,yBAAyB,CAAC;aACjC,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,aAAa,CAAC,IAAI,CAAuC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,mBAA2B;QACtC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aAClC,IAAI,CAAC,oBAAoB,CAAC;aAC1B,MAAM,EAAE;aACR,EAAE,CAAC,QAAQ,EAAE,mBAAmB,CAAC;aACjC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpD,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;CACF;AArFD,8DAqFC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/additional-details/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAcA,sCAA8C;AAC9C,qCAA2D;AAE3D,wCAAsB;AACtB,2CAAyB;AAEzB,2FAA2F;AAC3F,gGAAgG;AAChG,gGAAgG;AAChG,iGAAiG;AACjG,mBAAmB;AACnB,MAAM,yBAAyB,GAC7B,sJAA+J,CAAC;AAElK,MAAM,iCAAiC,GAAG,oCAA6C,CAAC;AAExF,MAAM,aAAa,GAAG,CAA6C,MAAS,EAAE,EAAE,CAAC,CAAC;IAChF,GAAG,MAAM;IACT,KAAK,EAAE,IAAA,wBAAe,EAAC,MAAM,CAAC,IAA8B,EAAE,MAAM,CAAC,KAAK,CAAC;CAC5E,CAAC,CAAC;AAEH,MAAa,yBAAyB;IAEjB;IACA;IAFnB,YACmB,QAA6B,EAC7B,IAAiB;QADjB,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,SAAI,GAAJ,IAAI,CAAa;IACjC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,mBAA2B;QACvC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,oBAAoB,CAAC;aAC1B,MAAM,CAAC,yBAAyB,CAAC;aACjC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;aAChD,EAAE,CAAC,QAAQ,EAAE,mBAAmB,CAAC;aACjC,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,aAAa,CAAC,IAAI,CAAuC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,IAAI,CACR,MAAoC,EACpC,QAAgB;QAEhB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,oBAAoB,CAAC;aAC1B,MAAM,CAAC,iCAAiC,CAAC;aACzC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;aAChD,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC;aACzB,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;aACzB,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACtC,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAyC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,MAAM,CACV,MAAoC,EACpC,QAAgB,EAChB,KAA8B;QAE9B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,oBAAoB,CAAC;aAC1B,MAAM,CAAC;YACN,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe;YAC1C,WAAW,EAAE,MAAM;YACnB,SAAS,EAAE,QAAQ;YACnB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,KAAK,EAAE,IAAA,uBAAc,EAAC,KAAK,CAAC,KAAK,CAAC;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;SAC7B,CAAC;aACD,MAAM,CAAC,yBAAyB,CAAC;aACjC,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,aAAa,CAAC,IAAI,CAAuC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,MAAM,CACV,mBAA2B,EAC3B,KAAiC;QAEjC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,oBAAoB,CAAC;aAC1B,MAAM,CAAC;YACN,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,KAAK,EAAE,IAAA,uBAAc,EAAC,KAAK,CAAC,KAAK,CAAC;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;SAClC,CAAC;aACD,EAAE,CAAC,QAAQ,EAAE,mBAAmB,CAAC;aACjC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;aAChD,MAAM,CAAC,yBAAyB,CAAC;aACjC,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,aAAa,CAAC,IAAI,CAAuC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,mBAA2B;QACtC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aAClC,IAAI,CAAC,oBAAoB,CAAC;aAC1B,MAAM,EAAE;aACR,EAAE,CAAC,QAAQ,EAAE,mBAAmB,CAAC;aACjC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpD,IAAI,KAAK;YAAE,MAAM,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;CACF;AArFD,8DAqFC"}

package/dist/additional-details/values.d.ts

@@ -5,7 +5,7 @@ import { AdditionalDetailsTypes } from '@managemint-solutions/entities/additiona
  */
 export declare const castValueByType: (type: AdditionalDetailsTypes, value: unknown) => unknown;
 /**
- * What gets written to the `text` column. The generated Insert/Update requires `value: string`;
- * `String()` reproduces the JSON → text coercion PostgREST used to do for number/boolean/string.
+ * What gets written to the `text` column. `String()` reproduces the JSON → text coercion
+ * PostgREST used to do for number/boolean/string.
  */
 export declare const serializeValue: (value: string | number | boolean | Date | URL) => string;

package/dist/additional-details/values.js

@@ -29,8 +29,8 @@ const castValueByType = (type, value) => {
 };
 exports.castValueByType = castValueByType;
 /**
- * What gets written to the `text` column. The generated Insert/Update requires `value: string`;
- * `String()` reproduces the JSON → text coercion PostgREST used to do for number/boolean/string.
+ * What gets written to the `text` column. `String()` reproduces the JSON → text coercion
+ * PostgREST used to do for number/boolean/string.
  */
 const serializeValue = (value) => value instanceof Date ? value.toISOString() : String(value);
 exports.serializeValue = serializeValue;

package/dist/auth-client/dto.d.ts

@@ -0,0 +1,19 @@
+import type { ExchangeRefreshTokenDto as ExchangeRefreshTokenDtoType, ExchangeTokenHashDto as ExchangeTokenHashDtoType, loginDto as LoginDtoType, ResetPasswordDto as ResetPasswordDtoType, SendPasswordResetEmailDto as SendPasswordResetEmailDtoType } from '@managemint-solutions/entities/auth/dto';
+export declare class SignInDto implements LoginDtoType {
+    readonly email: string;
+    readonly password: string;
+}
+export declare class ExchangeRefreshTokenDto implements ExchangeRefreshTokenDtoType {
+    readonly refresh_token: string;
+}
+export declare class SendPasswordResetEmailDto implements SendPasswordResetEmailDtoType {
+    readonly email: string;
+}
+export declare class ExchangeTokenHashDto implements ExchangeTokenHashDtoType {
+    readonly token_hash: string;
+}
+export declare class ResetPasswordDto implements ResetPasswordDtoType {
+    readonly password: string;
+    readonly access_token: string;
+    readonly refresh_token: string;
+}

package/dist/auth-client/dto.js

@@ -0,0 +1,72 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResetPasswordDto = exports.ExchangeTokenHashDto = exports.SendPasswordResetEmailDto = exports.ExchangeRefreshTokenDto = exports.SignInDto = void 0;
+const class_validator_1 = require("class-validator");
+// class-validator versions of the shared DTO types from @managemint-solutions/entities.
+// Each class `implements` its entities type so the wire contract cannot drift.
+// The entities type is spelled `loginDto` (lowercase); the class keeps the `SignInDto` name.
+class SignInDto {
+    email;
+    password;
+}
+exports.SignInDto = SignInDto;
+__decorate([
+    (0, class_validator_1.IsEmail)({}, { message: 'Email is required' }),
+    __metadata("design:type", String)
+], SignInDto.prototype, "email", void 0);
+__decorate([
+    (0, class_validator_1.IsString)({ message: 'Password is required' }),
+    __metadata("design:type", String)
+], SignInDto.prototype, "password", void 0);
+class ExchangeRefreshTokenDto {
+    refresh_token;
+}
+exports.ExchangeRefreshTokenDto = ExchangeRefreshTokenDto;
+__decorate([
+    (0, class_validator_1.IsString)({ message: 'Refresh token is required' }),
+    __metadata("design:type", String)
+], ExchangeRefreshTokenDto.prototype, "refresh_token", void 0);
+class SendPasswordResetEmailDto {
+    email;
+}
+exports.SendPasswordResetEmailDto = SendPasswordResetEmailDto;
+__decorate([
+    (0, class_validator_1.IsEmail)({}, { message: 'Email is required' }),
+    __metadata("design:type", String)
+], SendPasswordResetEmailDto.prototype, "email", void 0);
+class ExchangeTokenHashDto {
+    token_hash;
+}
+exports.ExchangeTokenHashDto = ExchangeTokenHashDto;
+__decorate([
+    (0, class_validator_1.IsString)({ message: 'Token hash is required' }),
+    __metadata("design:type", String)
+], ExchangeTokenHashDto.prototype, "token_hash", void 0);
+class ResetPasswordDto {
+    password;
+    access_token;
+    refresh_token;
+}
+exports.ResetPasswordDto = ResetPasswordDto;
+__decorate([
+    (0, class_validator_1.IsString)({ message: 'Password is required' }),
+    __metadata("design:type", String)
+], ResetPasswordDto.prototype, "password", void 0);
+__decorate([
+    (0, class_validator_1.IsString)({ message: 'Access token is required' }),
+    __metadata("design:type", String)
+], ResetPasswordDto.prototype, "access_token", void 0);
+__decorate([
+    (0, class_validator_1.IsString)({ message: 'Refresh token is required' }),
+    __metadata("design:type", String)
+], ResetPasswordDto.prototype, "refresh_token", void 0);
+//# sourceMappingURL=dto.js.map

package/dist/auth-client/dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dto.js","sourceRoot":"","sources":["../../src/auth-client/dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAoD;AASpD,wFAAwF;AACxF,+EAA+E;AAE/E,6FAA6F;AAC7F,MAAa,SAAS;IAEX,KAAK,CAAU;IAGf,QAAQ,CAAU;CAC5B;AAND,8BAMC;AAJU;IADR,IAAA,yBAAO,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;;wCACtB;AAGf;IADR,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;;2CACnB;AAG7B,MAAa,uBAAuB;IAEzB,aAAa,CAAU;CACjC;AAHD,0DAGC;AADU;IADR,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;;8DACnB;AAGlC,MAAa,yBAAyB;IAE3B,KAAK,CAAU;CACzB;AAHD,8DAGC;AADU;IADR,IAAA,yBAAO,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;;wDACtB;AAG1B,MAAa,oBAAoB;IAEtB,UAAU,CAAU;CAC9B;AAHD,oDAGC;AADU;IADR,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;;wDACnB;AAG/B,MAAa,gBAAgB;IAElB,QAAQ,CAAU;IAGlB,YAAY,CAAU;IAGtB,aAAa,CAAU;CACjC;AATD,4CASC;AAPU;IADR,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;;kDACnB;AAGlB;IADR,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;;sDACnB;AAGtB;IADR,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;;uDACnB"}

package/dist/auth-client/index.d.ts

@@ -0,0 +1,38 @@
+import { type SupabaseClient as SupabaseJsClient } from '@supabase/supabase-js';
+import type { ExchangeTokenResponse, LoginResponse } from '@managemint-solutions/entities/auth';
+import type { ExchangeRefreshTokenDto, ExchangeTokenHashDto, loginDto, ResetPasswordDto, SendPasswordResetEmailDto } from '@managemint-solutions/entities/auth/dto';
+export * from './dto';
+export type SupabaseAuthClientConfig = {
+    url: string;
+    key: string;
+};
+/**
+ * The auth flows, for callers that do not have a JWT yet. `SupabaseClient` needs the caller's
+ * token to build its RLS context, so sign-in, refresh and the password-reset exchanges live on
+ * this separate client, built from the publishable key alone.
+ */
+export declare class SupabaseAuthClient {
+    private readonly config;
+    readonly supabase: SupabaseJsClient;
+    constructor(config: SupabaseAuthClientConfig);
+    signIn(input: loginDto): Promise<LoginResponse>;
+    refreshSession(input: ExchangeRefreshTokenDto): Promise<ExchangeTokenResponse>;
+    /**
+     * Parity with the api: this client never holds a session (`persistSession` is off), so
+     * server-side there is nothing to revoke and the call is a no-op. Kept as the api had it.
+     */
+    signOut(): Promise<void>;
+    /** `redirectTo` is passed in — the SDK reads no environment variables. */
+    sendPasswordResetEmail(input: SendPasswordResetEmailDto, redirectTo: string): Promise<void>;
+    exchangeRecoveryToken(input: ExchangeTokenHashDto): Promise<ExchangeTokenResponse>;
+    exchangeConfirmToken(input: ExchangeTokenHashDto): Promise<ExchangeTokenResponse>;
+    resetPassword(input: ResetPasswordDto): Promise<void>;
+    /**
+     * Stamps `users.last_logged_in` as the user who just signed in — the users UPDATE policy
+     * allows `auth.uid() = mms_id`, so the write goes through a throwaway client carrying the
+     * fresh access token rather than this session-less one. Parity with the api: the result is
+     * ignored, a failed stamp must not fail the login.
+     */
+    private stampLastLoggedIn;
+}
+export declare const createSupabaseAuthClient: (config: SupabaseAuthClientConfig) => SupabaseAuthClient;

package/dist/auth-client/index.js

@@ -0,0 +1,135 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSupabaseAuthClient = exports.SupabaseAuthClient = void 0;
+const supabase_js_1 = require("@supabase/supabase-js");
+const errors_1 = require("../errors");
+__exportStar(require("./dto"), exports);
+// The api's "no session/user returned" NotFoundException, as an SDK error.
+const noSession = (message) => new errors_1.SupabaseClientError({ status: 404, error: 'Authentication Error', message });
+const toTokens = (session) => ({
+    access_token: session.access_token,
+    refresh_token: session.refresh_token,
+});
+/**
+ * The auth flows, for callers that do not have a JWT yet. `SupabaseClient` needs the caller's
+ * token to build its RLS context, so sign-in, refresh and the password-reset exchanges live on
+ * this separate client, built from the publishable key alone.
+ */
+class SupabaseAuthClient {
+    config;
+    supabase; // escape hatch for flows not covered by a method
+    constructor(config) {
+        this.config = config;
+        this.supabase = (0, supabase_js_1.createClient)(config.url, config.key, {
+            // Server-side and stateless: nothing is stored, refreshed or read out of a URL.
+            auth: { persistSession: false, autoRefreshToken: false, detectSessionInUrl: false },
+        });
+    }
+    async signIn(input) {
+        const { data, error } = await this.supabase.auth.signInWithPassword({
+            email: input.email,
+            password: input.password,
+        });
+        if (error)
+            throw (0, errors_1.mapAuthError)(error);
+        if (!data.session || !data.user) {
+            throw noSession('Authentication failed: No session or user data returned');
+        }
+        await this.stampLastLoggedIn(data.session.access_token, data.user.id);
+        return toTokens(data.session);
+    }
+    async refreshSession(input) {
+        const { data, error } = await this.supabase.auth.refreshSession({
+            refresh_token: input.refresh_token,
+        });
+        if (error)
+            throw (0, errors_1.mapAuthError)(error);
+        if (!data.session)
+            throw noSession('Token exchange failed: No session data returned');
+        return toTokens(data.session);
+    }
+    /**
+     * Parity with the api: this client never holds a session (`persistSession` is off), so
+     * server-side there is nothing to revoke and the call is a no-op. Kept as the api had it.
+     */
+    async signOut() {
+        const { error } = await this.supabase.auth.signOut();
+        if (error)
+            throw (0, errors_1.mapAuthError)(error);
+    }
+    /** `redirectTo` is passed in — the SDK reads no environment variables. */
+    async sendPasswordResetEmail(input, redirectTo) {
+        const { error } = await this.supabase.auth.resetPasswordForEmail(input.email, { redirectTo });
+        if (error)
+            throw (0, errors_1.mapAuthError)(error);
+    }
+    async exchangeRecoveryToken(input) {
+        const { data, error } = await this.supabase.auth.verifyOtp({
+            type: 'recovery',
+            token_hash: input.token_hash,
+        });
+        if (error)
+            throw (0, errors_1.mapAuthError)(error);
+        if (!data.session)
+            throw noSession('Token exchange failed: No session data returned');
+        return toTokens(data.session);
+    }
+    async exchangeConfirmToken(input) {
+        const { data, error } = await this.supabase.auth.verifyOtp({
+            type: 'signup',
+            token_hash: input.token_hash,
+        });
+        if (error)
+            throw (0, errors_1.mapAuthError)(error);
+        if (!data.session)
+            throw noSession('Token exchange failed: No session data returned');
+        return toTokens(data.session);
+    }
+    async resetPassword(input) {
+        const { error: sessionError } = await this.supabase.auth.setSession({
+            access_token: input.access_token,
+            refresh_token: input.refresh_token,
+        });
+        if (sessionError)
+            throw (0, errors_1.mapAuthError)(sessionError);
+        const { error: updateError } = await this.supabase.auth.updateUser({
+            password: input.password,
+        });
+        if (updateError)
+            throw (0, errors_1.mapAuthError)(updateError);
+    }
+    /**
+     * Stamps `users.last_logged_in` as the user who just signed in — the users UPDATE policy
+     * allows `auth.uid() = mms_id`, so the write goes through a throwaway client carrying the
+     * fresh access token rather than this session-less one. Parity with the api: the result is
+     * ignored, a failed stamp must not fail the login.
+     */
+    async stampLastLoggedIn(accessToken, userId) {
+        const asUser = (0, supabase_js_1.createClient)(this.config.url, this.config.key, {
+            global: { headers: { Authorization: `Bearer ${accessToken}` } },
+            auth: { persistSession: false, autoRefreshToken: false },
+        });
+        await asUser
+            .from('users')
+            .update({ last_logged_in: new Date().toISOString() })
+            .eq('mms_id', userId);
+    }
+}
+exports.SupabaseAuthClient = SupabaseAuthClient;
+const createSupabaseAuthClient = (config) => new SupabaseAuthClient(config);
+exports.createSupabaseAuthClient = createSupabaseAuthClient;
+//# sourceMappingURL=index.js.map

package/dist/auth-client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth-client/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,uDAA8F;AAY9F,sCAA8D;AAE9D,wCAAsB;AAOtB,2EAA2E;AAC3E,MAAM,SAAS,GAAG,CAAC,OAAe,EAAuB,EAAE,CACzD,IAAI,4BAAmB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,CAAC,CAAC;AAEnF,MAAM,QAAQ,GAAG,CAAC,OAGjB,EAAyB,EAAE,CAAC,CAAC;IAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;IAClC,aAAa,EAAE,OAAO,CAAC,aAAa;CACrC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAa,kBAAkB;IAGA;IAFpB,QAAQ,CAAmB,CAAC,iDAAiD;IAEtF,YAA6B,MAAgC;QAAhC,WAAM,GAAN,MAAM,CAA0B;QAC3D,IAAI,CAAC,QAAQ,GAAG,IAAA,0BAAY,EAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;YACnD,gFAAgF;YAChF,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE;SACpF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAe;QAC1B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC;YAClE,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,IAAA,qBAAY,EAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,SAAS,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEtE,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAA8B;QACjD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC;YAC9D,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,IAAA,qBAAY,EAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,SAAS,CAAC,iDAAiD,CAAC,CAAC;QAEtF,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACrD,IAAI,KAAK;YAAE,MAAM,IAAA,qBAAY,EAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,sBAAsB,CAC1B,KAAgC,EAChC,UAAkB;QAElB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAC9F,IAAI,KAAK;YAAE,MAAM,IAAA,qBAAY,EAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,KAA2B;QACrD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;YACzD,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,IAAA,qBAAY,EAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,SAAS,CAAC,iDAAiD,CAAC,CAAC;QAEtF,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,KAA2B;QACpD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;YACzD,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,MAAM,IAAA,qBAAY,EAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,SAAS,CAAC,iDAAiD,CAAC,CAAC;QAEtF,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAuB;QACzC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;YAClE,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC,CAAC;QACH,IAAI,YAAY;YAAE,MAAM,IAAA,qBAAY,EAAC,YAAY,CAAC,CAAC;QAEnD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;YACjE,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,IAAI,WAAW;YAAE,MAAM,IAAA,qBAAY,EAAC,WAAW,CAAC,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,iBAAiB,CAAC,WAAmB,EAAE,MAAc;QACjE,MAAM,MAAM,GAAG,IAAA,0BAAY,EAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YAC5D,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,EAAE;YAC/D,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;SACzD,CAAC,CAAC;QACH,MAAM,MAAM;aACT,IAAI,CAAC,OAAO,CAAC;aACb,MAAM,CAAC,EAAE,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;aACpD,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC;CACF;AAxGD,gDAwGC;AAEM,MAAM,wBAAwB,GAAG,CAAC,MAAgC,EAAsB,EAAE,CAC/F,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;AADpB,QAAA,wBAAwB,4BACJ"}

package/dist/client.d.ts

@@ -1,12 +1,13 @@
 import { type SupabaseClient as SupabaseJsClient } from '@supabase/supabase-js';
-import type { Database } from './database.types';
 import { type AuthContext } from './auth';
 import { AdditionalDetailsResource } from './additional-details';
 import { ClientsResource } from './clients';
 import { NotesResource } from './notes';
+import { ProjectsResource } from './projects';
 import { StatusesResource } from './statuses';
 import { SupportingFilesResource } from './supporting-files';
-export type TypedSupabaseClient = SupabaseJsClient<Database>;
+import { TasksResource } from './tasks';
+export type TypedSupabaseClient = SupabaseJsClient;
 export type SupabaseClientConfig = {
     url: string;
     key: string;
@@ -20,6 +21,8 @@ export declare class SupabaseClient {
     readonly notes: NotesResource;
     readonly supportingFiles: SupportingFilesResource;
     readonly clients: ClientsResource;
+    readonly projects: ProjectsResource;
+    readonly tasks: TasksResource;
     constructor(config: SupabaseClientConfig);
 }
 export declare const createSupabaseClient: (config: SupabaseClientConfig) => SupabaseClient;

package/dist/client.js

@@ -6,8 +6,10 @@ const auth_1 = require("./auth");
 const additional_details_1 = require("./additional-details");
 const clients_1 = require("./clients");
 const notes_1 = require("./notes");
+const projects_1 = require("./projects");
 const statuses_1 = require("./statuses");
 const supporting_files_1 = require("./supporting-files");
+const tasks_1 = require("./tasks");
 class SupabaseClient {
     supabase; // escape hatch for not-yet-migrated queries
     auth;
@@ -16,6 +18,8 @@ class SupabaseClient {
     notes;
     supportingFiles;
     clients;
+    projects;
+    tasks;
     constructor(config) {
         this.auth = (0, auth_1.decodeAuthContext)(config.accessToken);
         this.supabase = (0, supabase_js_1.createClient)(config.url, config.key, {
@@ -27,6 +31,8 @@ class SupabaseClient {
         this.notes = new notes_1.NotesResource(this.supabase, this.auth);
         this.supportingFiles = new supporting_files_1.SupportingFilesResource(this.supabase, this.auth);
         this.clients = new clients_1.ClientsResource(this.supabase, this.auth);
+        this.projects = new projects_1.ProjectsResource(this.supabase, this.auth);
+        this.tasks = new tasks_1.TasksResource(this.supabase, this.auth);
     }
 }
 exports.SupabaseClient = SupabaseClient;

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AAAA,uDAA8F;AAE9F,iCAA6D;AAC7D,6DAAiE;AACjE,uCAA4C;AAC5C,mCAAwC;AACxC,yCAA8C;AAC9C,yDAA6D;AAU7D,MAAa,cAAc;IAChB,QAAQ,CAAsB,CAAC,4CAA4C;IAC3E,IAAI,CAAc;IAClB,QAAQ,CAAmB;IAC3B,iBAAiB,CAA4B;IAC7C,KAAK,CAAgB;IACrB,eAAe,CAA0B;IACzC,OAAO,CAAkB;IAElC,YAAY,MAA4B;QACtC,IAAI,CAAC,IAAI,GAAG,IAAA,wBAAiB,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,IAAA,0BAAY,EAAW,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;YAC7D,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE;YACtE,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;SACzD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,iBAAiB,GAAG,IAAI,8CAAyB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,IAAI,CAAC,KAAK,GAAG,IAAI,qBAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,eAAe,GAAG,IAAI,0CAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;CACF;AArBD,wCAqBC;AAEM,MAAM,oBAAoB,GAAG,CAAC,MAA4B,EAAkB,EAAE,CACnF,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;AADhB,QAAA,oBAAoB,wBACJ"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AAAA,uDAA8F;AAC9F,iCAA6D;AAC7D,6DAAiE;AACjE,uCAA4C;AAC5C,mCAAwC;AACxC,yCAA8C;AAC9C,yCAA8C;AAC9C,yDAA6D;AAC7D,mCAAwC;AAaxC,MAAa,cAAc;IAChB,QAAQ,CAAsB,CAAC,4CAA4C;IAC3E,IAAI,CAAc;IAClB,QAAQ,CAAmB;IAC3B,iBAAiB,CAA4B;IAC7C,KAAK,CAAgB;IACrB,eAAe,CAA0B;IACzC,OAAO,CAAkB;IACzB,QAAQ,CAAmB;IAC3B,KAAK,CAAgB;IAE9B,YAAY,MAA4B;QACtC,IAAI,CAAC,IAAI,GAAG,IAAA,wBAAiB,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,IAAA,0BAAY,EAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;YACnD,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE;YACtE,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;SACzD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,iBAAiB,GAAG,IAAI,8CAAyB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,IAAI,CAAC,KAAK,GAAG,IAAI,qBAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,eAAe,GAAG,IAAI,0CAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,GAAG,IAAI,qBAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC;CACF;AAzBD,wCAyBC;AAEM,MAAM,oBAAoB,GAAG,CAAC,MAA4B,EAAkB,EAAE,CACnF,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;AADhB,QAAA,oBAAoB,wBACJ"}