@managemint-solutions/sdk 0.68.0 → 0.69.0

package/dist/notes/dto.js

@@ -9,9 +9,11 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AddNoteDto = exports.GetNotesDto = exports.NoteIdDto = void 0;
+exports.GetAllNotesDto = exports.AddNoteDto = exports.GetNotesDto = exports.NoteIdDto = void 0;
 const class_validator_1 = require("class-validator");
+const class_transformer_1 = require("class-transformer");
 const enum_1 = require("@managemint-solutions/entities/notes/enum");
+const validators_1 = require("../validators");
 // class-validator versions of the shared DTO types from @managemint-solutions/entities.
 // Each class `implements` its entities type so the wire contract cannot drift.
 class NoteIdDto {
@@ -45,3 +47,46 @@ __decorate([
     (0, class_validator_1.MaxLength)(255, { message: 'Content cannot exceed 255 characters' }),
     __metadata("design:type", String)
 ], AddNoteDto.prototype, "content", void 0);
+/** The admin api's GET /notes: every organization's notes, a page at a time. */
+class GetAllNotesDto {
+    page = 1;
+    page_size = 25;
+    organization_id;
+    entity_type;
+    search;
+}
+exports.GetAllNotesDto = GetAllNotesDto;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Transform)(({ value }) => (value ? Number(value) : 1), { toClassOnly: true }),
+    (0, class_validator_1.IsNumber)({}, { message: 'Page must be a number' }),
+    (0, class_validator_1.Min)(1, { message: 'Page must be at least 1' }),
+    __metadata("design:type", Number)
+], GetAllNotesDto.prototype, "page", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Transform)(({ value }) => (value ? Number(value) : 25), { toClassOnly: true }),
+    (0, class_validator_1.IsNumber)({}, { message: 'Page size must be a number' }),
+    (0, class_validator_1.Min)(1, { message: 'Page size must be at least 1' }),
+    (0, class_validator_1.Max)(100, { message: 'Page size cannot exceed 100' }),
+    __metadata("design:type", Number)
+], GetAllNotesDto.prototype, "page_size", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsUUID)('7', { message: 'Invalid organization ID format' }),
+    __metadata("design:type", Object)
+], GetAllNotesDto.prototype, "organization_id", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsEnum)(enum_1.NotesEntityTypes, { message: 'Invalid record type' }),
+    __metadata("design:type", Object)
+], GetAllNotesDto.prototype, "entity_type", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsString)({ message: 'Invalid search' }),
+    (0, class_validator_1.MaxLength)(200, { message: 'Search cannot exceed 200 characters' }),
+    __metadata("design:type", Object)
+], GetAllNotesDto.prototype, "search", void 0);

package/dist/notes/index.d.ts

@@ -1,10 +1,13 @@
 import type { NoteEntity } from '@managemint-solutions/entities/notes';
+import type { StaffNoteRow } from '@managemint-solutions/entities/notes';
+import type { MmsList } from '@managemint-solutions/entities/common';
 import type { AddNoteDto } from '@managemint-solutions/entities/notes/dto';
 import { NotesEntityTypes } from '@managemint-solutions/entities/notes/enum';
 import type { ClientContext } from '../auth';
 import { type AuditResource } from '../audit';
 import type { TypedSupabaseClient } from '../client';
 export * from './dto';
+import type { GetAllNotesDto } from './dto';
 export declare class NotesResource {
     private readonly supabase;
     private readonly auth;
@@ -12,6 +15,12 @@ export declare class NotesResource {
     constructor(supabase: TypedSupabaseClient, auth: ClientContext, audit: AuditResource);
     getById(noteId: string): Promise<NoteEntity>;
     list(entity: NotesEntityTypes, entityId: string): Promise<NoteEntity[]>;
+    /**
+     * The admin portal's Notes list: every note on a record type in `entityTypes` (the ones the
+     * caller may read), across the organizations staff can see, newest first. `record` is left
+     * for the caller to name.
+     */
+    listAll(query: GetAllNotesDto, entityTypes: string[]): Promise<MmsList<StaffNoteRow>>;
     create(entity: NotesEntityTypes, entityId: string, input: AddNoteDto): Promise<NoteEntity>;
     togglePin(noteId: string): Promise<NoteEntity>;
     remove(noteId: string): Promise<void>;

package/dist/notes/index.js

@@ -21,11 +21,13 @@ const audit_1 = require("../audit");
 const errors_1 = require("../errors");
 const won_1 = require("../leads/won");
 const tenancy_1 = require("../tenancy");
+const transforms_1 = require("../transforms");
 __exportStar(require("./dto"), exports);
 // The public contract is the shared NoteEntity from @managemint-solutions/entities; the casts at
 // the returns declare the shape the select string below produces (the columns are defined in the
 // api's supabase/migrations).
 const NOTE_SELECT = 'mms_id, created_at, content, pinned, user:user_profiles!user_id(*)';
+const NOTE_LIST_SELECT = `${NOTE_SELECT}, entity_type, entity_id, organization:organizations!organization_id(mms_id, name)`;
 class NotesResource {
     supabase;
     auth;
@@ -55,6 +57,17 @@ class NotesResource {
             throw (0, errors_1.mapPostgrestError)(error);
         return data;
     }
+    /**
+     * The admin portal's Notes list: every note on a record type in `entityTypes` (the ones the
+     * caller may read), across the organizations staff can see, newest first. `record` is left
+     * for the caller to name.
+     */
+    async listAll(query, entityTypes) {
+        const { data, error, count } = await (0, tenancy_1.filterStaffList)(this.supabase.from('notes').select(NOTE_LIST_SELECT, { count: 'exact' }), query, ['content'], entityTypes).order('created_at', { ascending: false });
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return (0, transforms_1.toMmsList)(data, query.page, query.page_size, count);
+    }
     async create(entity, entityId, input) {
         const organizationId = (0, tenancy_1.requireOrganization)(this.auth);
         if (entity === enum_1.NotesEntityTypes.LEAD) {

package/dist/service-client/index.d.ts

@@ -4,6 +4,7 @@ import { BillingResource } from '../billing';
 import { InvoicesResource } from '../billing/invoices';
 import { ClientsResource } from '../clients';
 import { ConfigsResource } from '../configs';
+import { CronRunsResource, CronsResource } from '../crons';
 import { DocumentsResource } from '../documents';
 import { EmulationHandshakesResource } from '../emulation-handshakes';
 import { FeatureRequestsResource } from '../feature-requests';
@@ -112,6 +113,9 @@ export declare class SupabaseServiceClient {
     readonly notifications: NotificationsOutboxResource;
     readonly featureRequests: FeatureRequestsResource;
     readonly configs: ConfigsResource;
+    /** The api's cron routes record each run here. */
+    readonly crons: CronsResource;
+    readonly cronRuns: CronRunsResource;
     readonly signup: OrganizationSignupResource;
     readonly paystackEvents: WebhookEventsResource;
     readonly resendEvents: WebhookEventsResource;

package/dist/service-client/index.js

@@ -9,6 +9,7 @@ const billing_1 = require("../billing");
 const invoices_1 = require("../billing/invoices");
 const clients_1 = require("../clients");
 const configs_1 = require("../configs");
+const crons_1 = require("../crons");
 const documents_1 = require("../documents");
 const emulation_handshakes_1 = require("../emulation-handshakes");
 const feature_requests_1 = require("../feature-requests");
@@ -159,6 +160,9 @@ class SupabaseServiceClient {
     featureRequests;
     // Global, with no organization on the row, so it hangs off the client rather than a scope.
     configs;
+    /** The api's cron routes record each run here. */
+    crons;
+    cronRuns;
     signup;
     paystackEvents;
     resendEvents;
@@ -173,6 +177,8 @@ class SupabaseServiceClient {
         this.resendEvents = new webhook_events_1.WebhookEventsResource(this.supabase, 'resend_webhook_events');
         this.featureRequests = new feature_requests_1.FeatureRequestsResource(this.supabase);
         this.configs = new configs_1.ConfigsResource(this.supabase);
+        this.crons = new crons_1.CronsResource(this.supabase);
+        this.cronRuns = new crons_1.CronRunsResource(this.supabase);
         this.signup = new organizations_1.OrganizationSignupResource(this.supabase, (organizationId) => this.forOrganization(organizationId).audit);
         // The outbox spans organizations - the row it is about carries its own - so it takes a
         // factory and scopes per write rather than being built inside one organization's scope.

package/dist/staff-client.d.ts

@@ -1,14 +1,17 @@
 import { type StaffContext } from './auth';
 import { AuditResource } from './audit';
 import { AdditionalDetailsResource } from './additional-details';
-import type { SupabaseClientConfig, TypedSupabaseClient } from './client';
+import { SupabaseClient, type SupabaseClientConfig, type TypedSupabaseClient } from './client';
 import { ClientsResource } from './clients';
+import { ConfigsResource } from './configs';
+import { CronRunsResource, CronsResource } from './crons';
 import { DocumentsResource, DocumentTemplatesResource } from './documents';
 import { LeadsResource } from './leads';
 import { NotesResource } from './notes';
 import { OrganizationsResource } from './organizations';
 import { ProjectsResource } from './projects';
 import { StaffPermissionsResource, StaffResource } from './staff';
+import { StatusesResource } from './statuses';
 import { SupportingFilesResource } from './supporting-files';
 import { TasksResource } from './tasks';
 import { UserApiCredentialsReads } from './user-api-credentials';
@@ -28,6 +31,10 @@ export declare class SupabaseStaffClient {
     readonly audit: AuditResource;
     readonly additionalDetails: AdditionalDetailsResource;
     readonly clients: ClientsResource;
+    /** Reads only: the `staff` role has no write grant, so an edit goes through the service client. */
+    readonly configs: ConfigsResource;
+    readonly crons: CronsResource;
+    readonly cronRuns: CronRunsResource;
     readonly leads: LeadsResource;
     readonly notes: NotesResource;
     readonly projects: ProjectsResource;
@@ -38,10 +45,20 @@ export declare class SupabaseStaffClient {
     readonly organizations: OrganizationsResource;
     readonly staff: StaffResource;
     readonly staffPermissions: StaffPermissionsResource;
+    /** Every organization's statuses (`listAll`); a write is refused, there being no organization. */
+    readonly statuses: StatusesResource;
     /** Lists and parents only: Storage names no staff, so a download is signed on the service client. */
     readonly supportingFiles: SupportingFilesResource;
     readonly userApiCredentials: UserApiCredentialsReads;
     constructor({ url, key, accessToken, auth, client }: SupabaseStaffClientConfig);
+    /**
+     * The tenant client's resources, reading one organization as this staff member: the same
+     * staff token, so the `staff` role's policies still decide what comes back, and every write
+     * is still refused at the database (the role holds SELECT alone). For the modules whose
+     * resources scope every query to the caller's organization - HR, inventory, documents,
+     * billing, statuses and labels - which a staff client, having none, cannot read through.
+     */
+    forOrganization(organizationId: string): SupabaseClient;
 }
 export declare const createSupabaseStaffClient: (config: SupabaseStaffClientConfig) => SupabaseStaffClient;
 export {};

package/dist/staff-client.js

@@ -4,13 +4,17 @@ exports.createSupabaseStaffClient = exports.SupabaseStaffClient = void 0;
 const auth_1 = require("./auth");
 const audit_1 = require("./audit");
 const additional_details_1 = require("./additional-details");
+const client_1 = require("./client");
 const clients_1 = require("./clients");
+const configs_1 = require("./configs");
+const crons_1 = require("./crons");
 const documents_1 = require("./documents");
 const leads_1 = require("./leads");
 const notes_1 = require("./notes");
 const organizations_1 = require("./organizations");
 const projects_1 = require("./projects");
 const staff_1 = require("./staff");
+const statuses_1 = require("./statuses");
 const supporting_files_1 = require("./supporting-files");
 const tasks_1 = require("./tasks");
 const user_api_credentials_1 = require("./user-api-credentials");
@@ -27,6 +31,10 @@ class SupabaseStaffClient {
     audit;
     additionalDetails;
     clients;
+    /** Reads only: the `staff` role has no write grant, so an edit goes through the service client. */
+    configs;
+    crons;
+    cronRuns;
     leads;
     notes;
     projects;
@@ -37,6 +45,8 @@ class SupabaseStaffClient {
     organizations;
     staff;
     staffPermissions;
+    /** Every organization's statuses (`listAll`); a write is refused, there being no organization. */
+    statuses;
     /** Lists and parents only: Storage names no staff, so a download is signed on the service client. */
     supportingFiles;
     userApiCredentials;
@@ -45,6 +55,9 @@ class SupabaseStaffClient {
         this.auth = auth;
         this.audit = new audit_1.AuditResource(this.supabase, auth);
         this.clients = new clients_1.ClientsResource(this.supabase, auth, this.audit);
+        this.configs = new configs_1.ConfigsResource(this.supabase);
+        this.crons = new crons_1.CronsResource(this.supabase);
+        this.cronRuns = new crons_1.CronRunsResource(this.supabase);
         this.additionalDetails = new additional_details_1.AdditionalDetailsResource(this.supabase, auth, this.audit);
         this.leads = new leads_1.LeadsResource(this.supabase, auth, this.audit, this.additionalDetails);
         this.notes = new notes_1.NotesResource(this.supabase, auth, this.audit);
@@ -56,9 +69,26 @@ class SupabaseStaffClient {
         this.organizations = new organizations_1.OrganizationsResource(this.supabase, auth, this.audit);
         this.staff = new staff_1.StaffResource(this.supabase);
         this.staffPermissions = new staff_1.StaffPermissionsResource(this.supabase);
+        this.statuses = new statuses_1.StatusesResource(this.supabase, auth, this.audit);
         this.supportingFiles = new supporting_files_1.SupportingFilesResource(this.supabase, auth, this.audit);
         this.userApiCredentials = new user_api_credentials_1.UserApiCredentialsReads(this.supabase);
     }
+    /**
+     * The tenant client's resources, reading one organization as this staff member: the same
+     * staff token, so the `staff` role's policies still decide what comes back, and every write
+     * is still refused at the database (the role holds SELECT alone). For the modules whose
+     * resources scope every query to the caller's organization - HR, inventory, documents,
+     * billing, statuses and labels - which a staff client, having none, cannot read through.
+     */
+    forOrganization(organizationId) {
+        return new client_1.SupabaseClient({
+            url: '',
+            key: '',
+            accessToken: '',
+            client: this.supabase,
+            auth: { mms_id: this.auth.mms_id, organization_id: organizationId },
+        });
+    }
 }
 exports.SupabaseStaffClient = SupabaseStaffClient;
 const createSupabaseStaffClient = (config) => new SupabaseStaffClient(config);

package/dist/statuses/dto.d.ts

@@ -1,4 +1,4 @@
-import type { AddStatusDto as AddStatusDtoType, GetStatusesDto as GetStatusesDtoType, ReorderStatusesDto as ReorderStatusesDtoType, StatusIdDto as StatusIdDtoType, UpdateStatusDto as UpdateStatusDtoType } from '@managemint-solutions/entities/status/dto';
+import type { AddStatusDto as AddStatusDtoType, GetAllStatusesDto as GetAllStatusesDtoType, GetStatusesDto as GetStatusesDtoType, ReorderStatusesDto as ReorderStatusesDtoType, StatusIdDto as StatusIdDtoType, UpdateStatusDto as UpdateStatusDtoType } from '@managemint-solutions/entities/status/dto';
 import { StatusEntityTypes } from '@managemint-solutions/entities/status/enum';
 export declare class StatusIdDto implements StatusIdDtoType {
     readonly statusId: string;
@@ -20,3 +20,11 @@ export declare class UpdateStatusDto implements UpdateStatusDtoType {
     readonly colour: string;
     readonly is_complete?: boolean;
 }
+/** The admin api's GET /statuses: every organization's statuses, a page at a time. */
+export declare class GetAllStatusesDto implements GetAllStatusesDtoType {
+    readonly page: number;
+    readonly page_size: number;
+    readonly organization_id?: string | null;
+    readonly entity_type?: StatusEntityTypes | null;
+    readonly search?: string | null;
+}

package/dist/statuses/dto.js

@@ -9,9 +9,11 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.UpdateStatusDto = exports.ReorderStatusesDto = exports.AddStatusDto = exports.GetStatusesDto = exports.StatusIdDto = void 0;
+exports.GetAllStatusesDto = exports.UpdateStatusDto = exports.ReorderStatusesDto = exports.AddStatusDto = exports.GetStatusesDto = exports.StatusIdDto = void 0;
 const class_validator_1 = require("class-validator");
+const class_transformer_1 = require("class-transformer");
 const enum_1 = require("@managemint-solutions/entities/status/enum");
+const validators_1 = require("../validators");
 // class-validator versions of the shared DTO types from @managemint-solutions/entities.
 // Each class `implements` its entities type so the wire contract cannot drift.
 class StatusIdDto {
@@ -100,3 +102,46 @@ __decorate([
     (0, class_validator_1.IsBoolean)({ message: 'is_complete must be true or false' }),
     __metadata("design:type", Boolean)
 ], UpdateStatusDto.prototype, "is_complete", void 0);
+/** The admin api's GET /statuses: every organization's statuses, a page at a time. */
+class GetAllStatusesDto {
+    page = 1;
+    page_size = 25;
+    organization_id;
+    entity_type;
+    search;
+}
+exports.GetAllStatusesDto = GetAllStatusesDto;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Transform)(({ value }) => (value ? Number(value) : 1), { toClassOnly: true }),
+    (0, class_validator_1.IsNumber)({}, { message: 'Page must be a number' }),
+    (0, class_validator_1.Min)(1, { message: 'Page must be at least 1' }),
+    __metadata("design:type", Number)
+], GetAllStatusesDto.prototype, "page", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Transform)(({ value }) => (value ? Number(value) : 25), { toClassOnly: true }),
+    (0, class_validator_1.IsNumber)({}, { message: 'Page size must be a number' }),
+    (0, class_validator_1.Min)(1, { message: 'Page size must be at least 1' }),
+    (0, class_validator_1.Max)(100, { message: 'Page size cannot exceed 100' }),
+    __metadata("design:type", Number)
+], GetAllStatusesDto.prototype, "page_size", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsUUID)('7', { message: 'Invalid organization ID format' }),
+    __metadata("design:type", Object)
+], GetAllStatusesDto.prototype, "organization_id", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsEnum)(enum_1.StatusEntityTypes, { message: 'Invalid record type' }),
+    __metadata("design:type", Object)
+], GetAllStatusesDto.prototype, "entity_type", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsString)({ message: 'Invalid search' }),
+    (0, class_validator_1.MaxLength)(200, { message: 'Search cannot exceed 200 characters' }),
+    __metadata("design:type", Object)
+], GetAllStatusesDto.prototype, "search", void 0);

package/dist/statuses/index.d.ts

@@ -1,17 +1,22 @@
+import type { StaffStatusRow } from '@managemint-solutions/entities/status';
+import type { MmsList } from '@managemint-solutions/entities/common';
 import type { StatusEntity } from '@managemint-solutions/entities/status';
 import type { AddStatusDto, ReorderStatusesDto, UpdateStatusDto } from '@managemint-solutions/entities/status/dto';
 import type { StatusEntityTypes } from '@managemint-solutions/entities/status/enum';
-import type { AuthContext } from '../auth';
+import type { ClientContext } from '../auth';
 import { type AuditResource } from '../audit';
 import type { TypedSupabaseClient } from '../client';
 export * from './dto';
+import type { GetAllStatusesDto } from './dto';
 export declare class StatusesResource {
     private readonly supabase;
     private readonly auth;
     private readonly table;
-    constructor(supabase: TypedSupabaseClient, auth: AuthContext, audit: AuditResource);
+    constructor(supabase: TypedSupabaseClient, auth: ClientContext, audit: AuditResource);
     /** The catalogue in its order: `position` first, then insertion order for the seeded ties. */
     list(entity: StatusEntityTypes): Promise<StatusEntity[]>;
+    /** The admin portal's Statuses list: every organization's statuses, by organization, record type and position. */
+    listAll(query: GetAllStatusesDto): Promise<MmsList<StaffStatusRow>>;
     /** A new status goes last: one past the highest position its entity type has. */
     create(input: AddStatusDto): Promise<StatusEntity>;
     /**

package/dist/statuses/index.js

@@ -18,12 +18,15 @@ exports.StatusesResource = void 0;
 const enum_1 = require("@managemint-solutions/entities/audit-trail/enum");
 const audit_1 = require("../audit");
 const errors_1 = require("../errors");
+const tenancy_1 = require("../tenancy");
+const transforms_1 = require("../transforms");
 __exportStar(require("./dto"), exports);
 const refuseWon = (message) => new errors_1.SupabaseClientError({ status: 400, error: 'Database Error', message });
 // The public contract is the shared StatusEntity from @managemint-solutions/entities; the
 // `as StatusEntity` casts declare the shape the select string below produces (the columns are
 // defined in the api's supabase/migrations).
 const STATUS_SELECT = 'mms_id, label, colour, is_complete, is_fail, is_triage, is_won, position';
+const STATUS_LIST_SELECT = `${STATUS_SELECT}, entity_type, organization:organizations!organization_id(mms_id, name)`;
 // The audited write returns the whole row; the wire shape is the STATUS_SELECT columns.
 const toStatus = (row) => ({
     mms_id: row.mms_id,
@@ -49,10 +52,7 @@ class StatusesResource {
     }
     /** The catalogue in its order: `position` first, then insertion order for the seeded ties. */
     async list(entity) {
-        const { data, error } = await this.supabase
-            .from('statuses')
-            .select(STATUS_SELECT)
-            .eq('organization_id', this.auth.organization_id)
+        const { data, error } = await (0, tenancy_1.scopeToOrganization)(this.supabase.from('statuses').select(STATUS_SELECT), this.auth)
             .eq('entity_type', entity)
             .order('position')
             .order('created_at')
@@ -61,12 +61,23 @@ class StatusesResource {
             throw (0, errors_1.mapPostgrestError)(error);
         return data;
     }
+    /** The admin portal's Statuses list: every organization's statuses, by organization, record type and position. */
+    async listAll(query) {
+        const { data, error, count } = await (0, tenancy_1.filterStaffList)(this.supabase.from('statuses').select(STATUS_LIST_SELECT, { count: 'exact' }), query, ['label'])
+            .order('organization_id')
+            .order('entity_type')
+            .order('position');
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return (0, transforms_1.toMmsList)(data, query.page, query.page_size, count);
+    }
     /** A new status goes last: one past the highest position its entity type has. */
     async create(input) {
+        const organizationId = (0, tenancy_1.requireOrganization)(this.auth);
         const { data, error } = await this.supabase
             .from('statuses')
             .select('position')
-            .eq('organization_id', this.auth.organization_id)
+            .eq('organization_id', organizationId)
             .eq('entity_type', input.entity)
             .order('position', { ascending: false })
             .limit(1)
@@ -80,7 +91,7 @@ class StatusesResource {
             entity_type: input.entity,
             is_complete: input.is_complete ?? false,
             position: last === undefined ? 0 : last + 1,
-            organization_id: this.auth.organization_id,
+            organization_id: organizationId,
             created_by: this.auth.mms_id,
         });
         return toStatus(row);
@@ -142,10 +153,7 @@ class StatusesResource {
      * status the organization marks complete included - is ordinary.
      */
     async isWon(statusId) {
-        const { data, error } = await this.supabase
-            .from('statuses')
-            .select('is_won')
-            .eq('organization_id', this.auth.organization_id)
+        const { data, error } = await (0, tenancy_1.scopeToOrganization)(this.supabase.from('statuses').select('is_won'), this.auth)
             .eq('mms_id', statusId)
             .maybeSingle();
         if (error)

package/dist/supporting-files/dto.d.ts

@@ -1,4 +1,4 @@
-import type { GetSupportingFilesDto as GetSupportingFilesDtoType, SupportingFileIdDto as SupportingFileIdDtoType, SupportingFileNamesDto as SupportingFileNamesDtoType } from '@managemint-solutions/entities/supporting-files/dto';
+import type { GetAllSupportingFilesDto as GetAllSupportingFilesDtoType, GetSupportingFilesDto as GetSupportingFilesDtoType, SupportingFileIdDto as SupportingFileIdDtoType, SupportingFileNamesDto as SupportingFileNamesDtoType } from '@managemint-solutions/entities/supporting-files/dto';
 import { SupportingFilesEntityTypes } from '@managemint-solutions/entities/supporting-files/enum';
 /** Files accepted in one upload. */
 export declare const MAX_FILES_PER_UPLOAD = 10;
@@ -12,3 +12,11 @@ export declare class GetSupportingFilesDto implements GetSupportingFilesDtoType
 export declare class SupportingFileNamesDto implements SupportingFileNamesDtoType {
     readonly names: string[];
 }
+/** The admin api's GET /supporting-files: every organization's supporting files, a page at a time. */
+export declare class GetAllSupportingFilesDto implements GetAllSupportingFilesDtoType {
+    readonly page: number;
+    readonly page_size: number;
+    readonly organization_id?: string | null;
+    readonly entity_type?: SupportingFilesEntityTypes | null;
+    readonly search?: string | null;
+}

package/dist/supporting-files/dto.js

@@ -9,9 +9,11 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SupportingFileNamesDto = exports.GetSupportingFilesDto = exports.SupportingFileIdDto = exports.MAX_FILES_PER_UPLOAD = void 0;
+exports.GetAllSupportingFilesDto = exports.SupportingFileNamesDto = exports.GetSupportingFilesDto = exports.SupportingFileIdDto = exports.MAX_FILES_PER_UPLOAD = void 0;
 const class_validator_1 = require("class-validator");
+const class_transformer_1 = require("class-transformer");
 const enum_1 = require("@managemint-solutions/entities/supporting-files/enum");
+const validators_1 = require("../validators");
 // class-validator versions of the shared DTO types from @managemint-solutions/entities.
 // Each class `implements` its entities type so the wire contract cannot drift.
 /** Files accepted in one upload. */
@@ -51,3 +53,46 @@ __decorate([
     (0, class_validator_1.IsNotEmpty)({ each: true, message: 'A file name cannot be empty' }),
     __metadata("design:type", Array)
 ], SupportingFileNamesDto.prototype, "names", void 0);
+/** The admin api's GET /supporting-files: every organization's supporting files, a page at a time. */
+class GetAllSupportingFilesDto {
+    page = 1;
+    page_size = 25;
+    organization_id;
+    entity_type;
+    search;
+}
+exports.GetAllSupportingFilesDto = GetAllSupportingFilesDto;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Transform)(({ value }) => (value ? Number(value) : 1), { toClassOnly: true }),
+    (0, class_validator_1.IsNumber)({}, { message: 'Page must be a number' }),
+    (0, class_validator_1.Min)(1, { message: 'Page must be at least 1' }),
+    __metadata("design:type", Number)
+], GetAllSupportingFilesDto.prototype, "page", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Transform)(({ value }) => (value ? Number(value) : 25), { toClassOnly: true }),
+    (0, class_validator_1.IsNumber)({}, { message: 'Page size must be a number' }),
+    (0, class_validator_1.Min)(1, { message: 'Page size must be at least 1' }),
+    (0, class_validator_1.Max)(100, { message: 'Page size cannot exceed 100' }),
+    __metadata("design:type", Number)
+], GetAllSupportingFilesDto.prototype, "page_size", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsUUID)('7', { message: 'Invalid organization ID format' }),
+    __metadata("design:type", Object)
+], GetAllSupportingFilesDto.prototype, "organization_id", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsEnum)(enum_1.SupportingFilesEntityTypes, { message: 'Invalid record type' }),
+    __metadata("design:type", Object)
+], GetAllSupportingFilesDto.prototype, "entity_type", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsString)({ message: 'Invalid search' }),
+    (0, class_validator_1.MaxLength)(200, { message: 'Search cannot exceed 200 characters' }),
+    __metadata("design:type", Object)
+], GetAllSupportingFilesDto.prototype, "search", void 0);

package/dist/supporting-files/index.d.ts

@@ -1,8 +1,11 @@
 import type { SupportingFileEntity, SupportingFilePresignedUrl, SupportingFileUploadTarget } from '@managemint-solutions/entities/supporting-files';
+import type { StaffSupportingFileRow } from '@managemint-solutions/entities/supporting-files';
+import type { MmsList } from '@managemint-solutions/entities/common';
 import { SupportingFilesEntityTypes } from '@managemint-solutions/entities/supporting-files/enum';
 import { type AuditResource, type ResourceActor } from '../audit';
 import type { TypedSupabaseClient } from '../client';
 export * from './dto';
+import type { GetAllSupportingFilesDto } from './dto';
 export * from './paths';
 export declare class SupportingFilesResource {
     private readonly supabase;
@@ -25,6 +28,8 @@ export declare class SupportingFilesResource {
         organization_id: string;
     }>;
     list(entity: SupportingFilesEntityTypes, entityId: string): Promise<SupportingFileEntity[]>;
+    /** The admin portal's Supporting Files list: every file on a record type in `entityTypes`, newest first. */
+    listAll(query: GetAllSupportingFilesDto, entityTypes: string[]): Promise<MmsList<StaffSupportingFileRow>>;
     /**
      * Where the caller puts each file: one signed upload URL per name, in request order, valid
      * for two hours, into the organization's prefix. Storage checks the bucket's INSERT policy

package/dist/supporting-files/index.js

@@ -21,9 +21,11 @@ const audit_1 = require("../audit");
 const errors_1 = require("../errors");
 const won_1 = require("../leads/won");
 const tenancy_1 = require("../tenancy");
+const transforms_1 = require("../transforms");
 const paths_1 = require("./paths");
 __exportStar(require("./dto"), exports);
 __exportStar(require("./paths"), exports);
+const SUPPORTING_FILE_LIST_SELECT = 'mms_id, created_at, name, extension, entity_type, entity_id, created_by:user_profiles!created_by(*), organization:organizations!organization_id(mms_id, name)';
 /** How long a presigned download URL stays valid. */
 const SIGNED_URL_TTL_SECONDS = 300;
 /** Storage calls per file (minting an upload URL, checking an object) run concurrently in batches of this size. */
@@ -98,6 +100,13 @@ class SupportingFilesResource {
             throw (0, errors_1.mapPostgrestError)(error);
         return data;
     }
+    /** The admin portal's Supporting Files list: every file on a record type in `entityTypes`, newest first. */
+    async listAll(query, entityTypes) {
+        const { data, error, count } = await (0, tenancy_1.filterStaffList)(this.supabase.from('supporting_files').select(SUPPORTING_FILE_LIST_SELECT, { count: 'exact' }), query, ['name'], entityTypes).order('created_at', { ascending: false });
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return (0, transforms_1.toMmsList)(data, query.page, query.page_size, count);
+    }
     /**
      * Where the caller puts each file: one signed upload URL per name, in request order, valid
      * for two hours, into the organization's prefix. Storage checks the bucket's INSERT policy

package/dist/tenancy.d.ts

@@ -11,3 +11,15 @@ export declare const requireOrganization: (actor: {
 export declare const withOrganization: (select: string, actor: {
     organization_id: string | null;
 }) => string;
+/**
+ * A staff list's page with its filters applied: the organization, the record type, a text search
+ * over `searchColumns`, and when given, the record types a row may belong to (those the caller
+ * may read). The read spans every organization the caller's policies let it see.
+ */
+export declare const filterStaffList: <Q extends PostgrestFilterBuilder<any, any, any, any, any, any, any>>(query: Q, filters: {
+    page: number;
+    page_size: number;
+    organization_id?: string | null;
+    entity_type?: string | null;
+    search?: string | null;
+}, searchColumns: readonly string[], entityTypes?: string[]) => Q;

package/dist/tenancy.js

@@ -1,7 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.withOrganization = exports.requireOrganization = exports.scopeToOrganization = void 0;
+exports.filterStaffList = exports.withOrganization = exports.requireOrganization = exports.scopeToOrganization = void 0;
 const errors_1 = require("./errors");
+const transforms_1 = require("./transforms");
 // How a resource scopes itself to the caller's organization. A tenant (`AuthContext`) reads and
 // writes inside their own; staff (`StaffContext`, `organization_id: null`) read across every
 // organization, as their role's policies allow, and write nothing.
@@ -23,3 +24,23 @@ exports.requireOrganization = requireOrganization;
 /** A select, plus the row's organization on a staff read so the row says whose it is. */
 const withOrganization = (select, actor) => actor.organization_id === null ? `${select}, organization:organizations!organization_id(mms_id, name)` : select;
 exports.withOrganization = withOrganization;
+/**
+ * A staff list's page with its filters applied: the organization, the record type, a text search
+ * over `searchColumns`, and when given, the record types a row may belong to (those the caller
+ * may read). The read spans every organization the caller's policies let it see.
+ */
+const filterStaffList = (query, filters, searchColumns, entityTypes) => {
+    const from = (filters.page - 1) * filters.page_size;
+    let builder = query.range(from, from + filters.page_size - 1);
+    if (filters.organization_id)
+        builder = builder.eq('organization_id', filters.organization_id);
+    if (filters.entity_type)
+        builder = builder.eq('entity_type', filters.entity_type);
+    if (entityTypes)
+        builder = builder.in('entity_type', entityTypes);
+    const search = filters.search?.trim();
+    if (search)
+        builder = builder.or((0, transforms_1.orIlike)(searchColumns, search));
+    return builder;
+};
+exports.filterStaffList = filterStaffList;