@managemint-solutions/sdk 0.68.0 → 0.70.0

package/dist/index.js

@@ -7,10 +7,10 @@
 // their classes are not exported: a consumer never constructs one, and every export is a contract
 // to keep. The row and input types they produce and accept are exported for annotations.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GetNotificationsDto = exports.NoteIdDto = exports.GetNotesDto = exports.AddNoteDto = exports.UpdateAdditionalDetailsDto = exports.IsAdditionalDetailsValueByType = exports.GetAdditionalDetailsDto = exports.AdditionalDetailsIdDto = exports.AddAdditionalDetailsDto = exports.UpdateLabelDto = exports.LabelIdDto = exports.GetLabelsDto = exports.AddLabelDto = exports.UpdateStatusDto = exports.StatusIdDto = exports.ReorderStatusesDto = exports.GetStatusesDto = exports.AddStatusDto = exports.CreateSupportRequestDto = exports.UpdateConfigDto = exports.CreateConfigDto = exports.CreateFeatureRequestDto = exports.InvoiceIdDto = exports.GetInvoicesQueryDto = exports.ReinstateSubscriptionDto = exports.PurchaseModuleDto = exports.ModuleSetDto = exports.ChangeModulesDto = exports.PaymentIdDto = exports.InitialPaymentDto = exports.GetPaymentsQueryDto = exports.CancelSubscriptionDto = exports.withAuditBatch = exports.GetAuditTrailDto = exports.IsNullable = exports.EmptyToNull = exports.SupabaseClientError = exports.createSupabaseServiceClient = exports.SupabaseServiceClient = exports.SignInDto = exports.SendPasswordResetEmailDto = exports.ResetPasswordDto = exports.ExchangeTokenHashDto = exports.ExchangeRefreshTokenDto = exports.createSupabaseAuthClient = exports.SupabaseAuthClient = exports.createSupabaseStaffClient = exports.SupabaseStaffClient = exports.createSupabaseClient = exports.SupabaseClient = void 0;
-exports.InventoryItemIdDto = exports.ImportInventoryItemsDto = exports.ImportInventoryItemDto = exports.GetInventoryTransfersDto = exports.GetInventoryStocktakesDto = exports.GetInventoryMovementsDto = exports.GetInventoryLocationsDto = exports.GetInventoryItemsDto = exports.GeocodeAddressDto = exports.CreateInventoryTransferLineDto = exports.CreateInventoryTransferDto = exports.CreateInventoryMovementDto = exports.CreateInventoryLocationDto = exports.CreateInventoryItemDto = exports.CountInventoryLineDto = exports.CountInventoryDto = exports.UpdateLeadDto = exports.StaffGetLeadsDto = exports.LeadIdDto = exports.GetLeadsDto = exports.CreateLeadDto = exports.ConvertLeadDto = exports.UpdateClientDto = exports.StaffGetClientsDto = exports.GetClientsDto = exports.CreateClientDto = exports.ClientIdDto = exports.SupportingFileNamesDto = exports.SupportingFileIdDto = exports.GetSupportingFilesDto = exports.UserIdDto = exports.UpdateUserDto = exports.UpdateMyProfileDto = exports.StaffGetUsersDto = exports.GetUsersQueryDto = exports.AddUserDto = exports.UserApiCredentialIdDto = exports.MintEmulationTokenDto = exports.CreateUserApiCredentialDto = exports.UpdateStaffPermissionsDto = exports.StaffIdDto = exports.CreateStaffDto = exports.UpdatePermissionsDto = exports.PermissionsResource = exports.UpdateOrganizationDto = exports.OrganizationIdDto = exports.GetOrganizationsDto = exports.CreateOrganizationDto = exports.UpdateOrganizationPayoutsDto = exports.NotificationIdDto = void 0;
-exports.CreateLeaveEntitlementDto = exports.CreateLeaveAdjustmentDto = exports.BulkCreateLeaveEntitlementsDto = exports.UpdateTaskDto = exports.TaskLinkIdDto = exports.TaskIdDto = exports.StaffGetTasksDto = exports.GetTasksDto = exports.CreateTaskDto = exports.AddTaskLinkDto = exports.UpdateProjectDto = exports.StaffGetProjectsDto = exports.ProjectIdDto = exports.GetProjectsDto = exports.CreateProjectDto = exports.UpdateVisibilityDto = exports.ReassignPrivateDocumentsDto = exports.ConvertDocumentDto = exports.VoidDocumentDto = exports.UpdateDocumentTemplateDto = exports.UpdateDocumentDto = exports.SendDocumentDto = exports.RecordDocumentPaymentDto = exports.PayDocumentDto = exports.GetDocumentTemplatesDto = exports.GetDocumentsDto = exports.GetCatalogueTemplatesDto = exports.documentProblem = exports.DocumentTemplateIdDto = exports.DocumentPaymentIdDto = exports.DocumentPayTokenDto = exports.DocumentPayQueryDto = exports.DocumentImageUrlsDto = exports.DocumentImageNameDto = exports.DocumentIdDto = exports.CreateDocumentTemplateDto = exports.CreateDocumentDto = exports.CopyCatalogueTemplateDto = exports.CatalogueTemplateSlugDto = exports.UpdateInventoryTransferDto = exports.UpdateInventoryLocationDto = exports.UpdateInventoryLevelDto = exports.UpdateInventoryItemDto = exports.SuggestAddressesDto = exports.StaffGetInventoryItemsDto = exports.ReceiveInventoryTransferDto = exports.InventoryTransferIdDto = exports.InventoryStocktakeIdDto = exports.InventoryLocationIdDto = exports.InventoryLevelKeyDto = void 0;
-exports.monthlyTotalMinor = exports.weekStartOf = exports.minutesBetween = exports.UpdateTimesheetEntryDto = exports.TimesheetIdDto = exports.TimesheetEntryIdDto = exports.ReviewTimesheetDto = exports.GetTimesheetsDto = exports.GetTimesheetReportDto = exports.CreateTimesheetEntryDto = exports.todayInJohannesburg = exports.shiftDays = exports.proRataDays = exports.isWithinPeriod = exports.initialUntil = exports.cyclePeriodFor = exports.countWorkingDays = exports.completedMonths = exports.addMonths = exports.GetPublicHolidaysDto = exports.UpdateLeaveTypeDto = exports.UpdateLeaveRequestDto = exports.UpdateLeaveEntitlementDto = exports.ReviewLeaveRequestDto = exports.LeaveTypeIdDto = exports.LeaveRequestIdDto = exports.LeaveEntitlementIdDto = exports.GetLeaveTypesDto = exports.GetLeaveRequestsDto = exports.GetLeaveEntitlementsDto = exports.GetLeaveCalendarDto = exports.CreateLeaveTypeDto = exports.CreateLeaveRequestDto = void 0;
+exports.IsAdditionalDetailsValueByType = exports.GetAllAdditionalDetailsDto = exports.GetAdditionalDetailsDto = exports.AdditionalDetailsIdDto = exports.AddAdditionalDetailsDto = exports.UpdateLabelDto = exports.LabelIdDto = exports.GetLabelsDto = exports.AddLabelDto = exports.UpdateStatusDto = exports.StatusIdDto = exports.ReorderStatusesDto = exports.GetStatusesDto = exports.GetAllStatusesDto = exports.AddStatusDto = exports.CreateSupportRequestDto = exports.GetCronRunsDto = exports.CronIdDto = exports.UpdateConfigDto = exports.CreateConfigDto = exports.ConfigIdDto = exports.CreateFeatureRequestDto = exports.InvoiceIdDto = exports.GetInvoicesQueryDto = exports.ReinstateSubscriptionDto = exports.PurchaseModuleDto = exports.ModuleSetDto = exports.ChangeModulesDto = exports.PaymentIdDto = exports.InitialPaymentDto = exports.GetPaymentsQueryDto = exports.CancelSubscriptionDto = exports.withAuditBatch = exports.GetAuditTrailDto = exports.IsNullable = exports.EmptyToNull = exports.SupabaseClientError = exports.createSupabaseServiceClient = exports.SupabaseServiceClient = exports.SignInDto = exports.SendPasswordResetEmailDto = exports.ResetPasswordDto = exports.ExchangeTokenHashDto = exports.ExchangeRefreshTokenDto = exports.createSupabaseAuthClient = exports.SupabaseAuthClient = exports.createSupabaseStaffClient = exports.SupabaseStaffClient = exports.createSupabaseClient = exports.SupabaseClient = void 0;
+exports.CreateInventoryTransferLineDto = exports.CreateInventoryTransferDto = exports.CreateInventoryMovementDto = exports.CreateInventoryLocationDto = exports.CreateInventoryItemDto = exports.CountInventoryLineDto = exports.CountInventoryDto = exports.UpdateLeadDto = exports.StaffGetLeadsDto = exports.LeadIdDto = exports.GetLeadsDto = exports.CreateLeadDto = exports.ConvertLeadDto = exports.UpdateClientDto = exports.StaffGetClientsDto = exports.GetClientsDto = exports.CreateClientDto = exports.ClientIdDto = exports.SupportingFileNamesDto = exports.SupportingFileIdDto = exports.GetSupportingFilesDto = exports.GetAllSupportingFilesDto = exports.UserIdDto = exports.UpdateUserDto = exports.UpdateMyProfileDto = exports.StaffGetUsersDto = exports.GetUsersQueryDto = exports.AddUserDto = exports.UserApiCredentialIdDto = exports.MintEmulationTokenDto = exports.CreateUserApiCredentialDto = exports.UpdateStaffPermissionsDto = exports.StaffIdDto = exports.CreateStaffDto = exports.OAuthClientIdDto = exports.OAuthAuthorizationIdDto = exports.UpdatePermissionsDto = exports.PermissionsResource = exports.UpdateOrganizationDto = exports.OrganizationIdDto = exports.GetOrganizationsDto = exports.CreateOrganizationDto = exports.UpdateOrganizationPayoutsDto = exports.NotificationIdDto = exports.GetNotificationsDto = exports.NoteIdDto = exports.GetNotesDto = exports.GetAllNotesDto = exports.AddNoteDto = exports.UpdateAdditionalDetailsDto = void 0;
+exports.AddTaskLinkDto = exports.UpdateProjectDto = exports.StaffGetProjectsDto = exports.ProjectIdDto = exports.GetProjectsDto = exports.CreateProjectDto = exports.UpdateVisibilityDto = exports.ReassignPrivateDocumentsDto = exports.ConvertDocumentDto = exports.VoidDocumentDto = exports.UpdateDocumentTemplateDto = exports.UpdateDocumentDto = exports.SendDocumentDto = exports.RecordDocumentPaymentDto = exports.PayDocumentDto = exports.GetDocumentTemplatesDto = exports.GetDocumentsDto = exports.GetCatalogueTemplatesDto = exports.documentProblem = exports.DocumentTemplateIdDto = exports.DocumentPaymentIdDto = exports.DocumentPayTokenDto = exports.DocumentPayQueryDto = exports.DocumentImageUrlsDto = exports.DocumentImageNameDto = exports.DocumentIdDto = exports.CreateDocumentTemplateDto = exports.CreateDocumentDto = exports.CopyCatalogueTemplateDto = exports.CatalogueTemplateSlugDto = exports.UpdateInventoryTransferDto = exports.UpdateInventoryLocationDto = exports.UpdateInventoryLevelDto = exports.UpdateInventoryItemDto = exports.SuggestAddressesDto = exports.StaffGetInventoryItemsDto = exports.ReceiveInventoryTransferDto = exports.InventoryTransferIdDto = exports.InventoryStocktakeIdDto = exports.InventoryLocationIdDto = exports.InventoryLevelKeyDto = exports.InventoryItemIdDto = exports.ImportInventoryItemsDto = exports.ImportInventoryItemDto = exports.GetInventoryTransfersDto = exports.GetInventoryStocktakesDto = exports.GetInventoryMovementsDto = exports.GetInventoryLocationsDto = exports.GetInventoryItemsDto = exports.GeocodeAddressDto = void 0;
+exports.monthlyTotalMinor = exports.weekStartOf = exports.minutesBetween = exports.UpdateTimesheetEntryDto = exports.TimesheetIdDto = exports.TimesheetEntryIdDto = exports.ReviewTimesheetDto = exports.GetTimesheetsDto = exports.GetTimesheetReportDto = exports.CreateTimesheetEntryDto = exports.todayInJohannesburg = exports.shiftDays = exports.proRataDays = exports.isWithinPeriod = exports.initialUntil = exports.cyclePeriodFor = exports.countWorkingDays = exports.completedMonths = exports.addMonths = exports.GetPublicHolidaysDto = exports.UpdateLeaveTypeDto = exports.UpdateLeaveRequestDto = exports.UpdateLeaveEntitlementDto = exports.ReviewLeaveRequestDto = exports.LeaveTypeIdDto = exports.LeaveRequestIdDto = exports.LeaveEntitlementIdDto = exports.GetLeaveTypesDto = exports.GetLeaveRequestsDto = exports.GetLeaveEntitlementsDto = exports.GetLeaveCalendarDto = exports.CreateLeaveTypeDto = exports.CreateLeaveRequestDto = exports.CreateLeaveEntitlementDto = exports.CreateLeaveAdjustmentDto = exports.BulkCreateLeaveEntitlementsDto = exports.UpdateTaskDto = exports.TaskLinkIdDto = exports.TaskIdDto = exports.StaffGetTasksDto = exports.GetTasksDto = exports.CreateTaskDto = void 0;
 var client_1 = require("./client");
 Object.defineProperty(exports, "SupabaseClient", { enumerable: true, get: function () { return client_1.SupabaseClient; } });
 Object.defineProperty(exports, "createSupabaseClient", { enumerable: true, get: function () { return client_1.createSupabaseClient; } });
@@ -52,12 +52,17 @@ Object.defineProperty(exports, "InvoiceIdDto", { enumerable: true, get: function
 var feature_requests_1 = require("./feature-requests");
 Object.defineProperty(exports, "CreateFeatureRequestDto", { enumerable: true, get: function () { return feature_requests_1.CreateFeatureRequestDto; } });
 var configs_1 = require("./configs");
+Object.defineProperty(exports, "ConfigIdDto", { enumerable: true, get: function () { return configs_1.ConfigIdDto; } });
 Object.defineProperty(exports, "CreateConfigDto", { enumerable: true, get: function () { return configs_1.CreateConfigDto; } });
 Object.defineProperty(exports, "UpdateConfigDto", { enumerable: true, get: function () { return configs_1.UpdateConfigDto; } });
+var crons_1 = require("./crons");
+Object.defineProperty(exports, "CronIdDto", { enumerable: true, get: function () { return crons_1.CronIdDto; } });
+Object.defineProperty(exports, "GetCronRunsDto", { enumerable: true, get: function () { return crons_1.GetCronRunsDto; } });
 var support_1 = require("./support");
 Object.defineProperty(exports, "CreateSupportRequestDto", { enumerable: true, get: function () { return support_1.CreateSupportRequestDto; } });
 var statuses_1 = require("./statuses");
 Object.defineProperty(exports, "AddStatusDto", { enumerable: true, get: function () { return statuses_1.AddStatusDto; } });
+Object.defineProperty(exports, "GetAllStatusesDto", { enumerable: true, get: function () { return statuses_1.GetAllStatusesDto; } });
 Object.defineProperty(exports, "GetStatusesDto", { enumerable: true, get: function () { return statuses_1.GetStatusesDto; } });
 Object.defineProperty(exports, "ReorderStatusesDto", { enumerable: true, get: function () { return statuses_1.ReorderStatusesDto; } });
 Object.defineProperty(exports, "StatusIdDto", { enumerable: true, get: function () { return statuses_1.StatusIdDto; } });
@@ -71,10 +76,12 @@ var additional_details_1 = require("./additional-details");
 Object.defineProperty(exports, "AddAdditionalDetailsDto", { enumerable: true, get: function () { return additional_details_1.AddAdditionalDetailsDto; } });
 Object.defineProperty(exports, "AdditionalDetailsIdDto", { enumerable: true, get: function () { return additional_details_1.AdditionalDetailsIdDto; } });
 Object.defineProperty(exports, "GetAdditionalDetailsDto", { enumerable: true, get: function () { return additional_details_1.GetAdditionalDetailsDto; } });
+Object.defineProperty(exports, "GetAllAdditionalDetailsDto", { enumerable: true, get: function () { return additional_details_1.GetAllAdditionalDetailsDto; } });
 Object.defineProperty(exports, "IsAdditionalDetailsValueByType", { enumerable: true, get: function () { return additional_details_1.IsAdditionalDetailsValueByType; } });
 Object.defineProperty(exports, "UpdateAdditionalDetailsDto", { enumerable: true, get: function () { return additional_details_1.UpdateAdditionalDetailsDto; } });
 var notes_1 = require("./notes");
 Object.defineProperty(exports, "AddNoteDto", { enumerable: true, get: function () { return notes_1.AddNoteDto; } });
+Object.defineProperty(exports, "GetAllNotesDto", { enumerable: true, get: function () { return notes_1.GetAllNotesDto; } });
 Object.defineProperty(exports, "GetNotesDto", { enumerable: true, get: function () { return notes_1.GetNotesDto; } });
 Object.defineProperty(exports, "NoteIdDto", { enumerable: true, get: function () { return notes_1.NoteIdDto; } });
 var notifications_1 = require("./notifications");
@@ -93,6 +100,9 @@ var permissions_1 = require("./permissions");
 Object.defineProperty(exports, "PermissionsResource", { enumerable: true, get: function () { return permissions_1.PermissionsResource; } });
 var permissions_2 = require("./permissions");
 Object.defineProperty(exports, "UpdatePermissionsDto", { enumerable: true, get: function () { return permissions_2.UpdatePermissionsDto; } });
+var oauth_1 = require("./oauth");
+Object.defineProperty(exports, "OAuthAuthorizationIdDto", { enumerable: true, get: function () { return oauth_1.OAuthAuthorizationIdDto; } });
+Object.defineProperty(exports, "OAuthClientIdDto", { enumerable: true, get: function () { return oauth_1.OAuthClientIdDto; } });
 var staff_1 = require("./staff");
 Object.defineProperty(exports, "CreateStaffDto", { enumerable: true, get: function () { return staff_1.CreateStaffDto; } });
 Object.defineProperty(exports, "StaffIdDto", { enumerable: true, get: function () { return staff_1.StaffIdDto; } });
@@ -109,6 +119,7 @@ Object.defineProperty(exports, "UpdateMyProfileDto", { enumerable: true, get: fu
 Object.defineProperty(exports, "UpdateUserDto", { enumerable: true, get: function () { return users_1.UpdateUserDto; } });
 Object.defineProperty(exports, "UserIdDto", { enumerable: true, get: function () { return users_1.UserIdDto; } });
 var supporting_files_1 = require("./supporting-files");
+Object.defineProperty(exports, "GetAllSupportingFilesDto", { enumerable: true, get: function () { return supporting_files_1.GetAllSupportingFilesDto; } });
 Object.defineProperty(exports, "GetSupportingFilesDto", { enumerable: true, get: function () { return supporting_files_1.GetSupportingFilesDto; } });
 Object.defineProperty(exports, "SupportingFileIdDto", { enumerable: true, get: function () { return supporting_files_1.SupportingFileIdDto; } });
 Object.defineProperty(exports, "SupportingFileNamesDto", { enumerable: true, get: function () { return supporting_files_1.SupportingFileNamesDto; } });

package/dist/notes/dto.d.ts

@@ -1,4 +1,4 @@
-import type { AddNoteDto as AddNoteDtoType, GetNotesDto as GetNotesDtoType, NoteIdDto as NoteIdDtoType } from '@managemint-solutions/entities/notes/dto';
+import type { AddNoteDto as AddNoteDtoType, GetAllNotesDto as GetAllNotesDtoType, GetNotesDto as GetNotesDtoType, NoteIdDto as NoteIdDtoType } from '@managemint-solutions/entities/notes/dto';
 import { NotesEntityTypes } from '@managemint-solutions/entities/notes/enum';
 export declare class NoteIdDto implements NoteIdDtoType {
     readonly noteId: string;
@@ -10,3 +10,11 @@ export declare class GetNotesDto implements GetNotesDtoType {
 export declare class AddNoteDto implements AddNoteDtoType {
     readonly content: string;
 }
+/** The admin api's GET /notes: every organization's notes, a page at a time. */
+export declare class GetAllNotesDto implements GetAllNotesDtoType {
+    readonly page: number;
+    readonly page_size: number;
+    readonly organization_id?: string | null;
+    readonly entity_type?: NotesEntityTypes | null;
+    readonly search?: string | null;
+}

package/dist/notes/dto.js

@@ -9,9 +9,11 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AddNoteDto = exports.GetNotesDto = exports.NoteIdDto = void 0;
+exports.GetAllNotesDto = exports.AddNoteDto = exports.GetNotesDto = exports.NoteIdDto = void 0;
 const class_validator_1 = require("class-validator");
+const class_transformer_1 = require("class-transformer");
 const enum_1 = require("@managemint-solutions/entities/notes/enum");
+const validators_1 = require("../validators");
 // class-validator versions of the shared DTO types from @managemint-solutions/entities.
 // Each class `implements` its entities type so the wire contract cannot drift.
 class NoteIdDto {
@@ -45,3 +47,46 @@ __decorate([
     (0, class_validator_1.MaxLength)(255, { message: 'Content cannot exceed 255 characters' }),
     __metadata("design:type", String)
 ], AddNoteDto.prototype, "content", void 0);
+/** The admin api's GET /notes: every organization's notes, a page at a time. */
+class GetAllNotesDto {
+    page = 1;
+    page_size = 25;
+    organization_id;
+    entity_type;
+    search;
+}
+exports.GetAllNotesDto = GetAllNotesDto;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Transform)(({ value }) => (value ? Number(value) : 1), { toClassOnly: true }),
+    (0, class_validator_1.IsNumber)({}, { message: 'Page must be a number' }),
+    (0, class_validator_1.Min)(1, { message: 'Page must be at least 1' }),
+    __metadata("design:type", Number)
+], GetAllNotesDto.prototype, "page", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Transform)(({ value }) => (value ? Number(value) : 25), { toClassOnly: true }),
+    (0, class_validator_1.IsNumber)({}, { message: 'Page size must be a number' }),
+    (0, class_validator_1.Min)(1, { message: 'Page size must be at least 1' }),
+    (0, class_validator_1.Max)(100, { message: 'Page size cannot exceed 100' }),
+    __metadata("design:type", Number)
+], GetAllNotesDto.prototype, "page_size", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsUUID)('7', { message: 'Invalid organization ID format' }),
+    __metadata("design:type", Object)
+], GetAllNotesDto.prototype, "organization_id", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsEnum)(enum_1.NotesEntityTypes, { message: 'Invalid record type' }),
+    __metadata("design:type", Object)
+], GetAllNotesDto.prototype, "entity_type", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsString)({ message: 'Invalid search' }),
+    (0, class_validator_1.MaxLength)(200, { message: 'Search cannot exceed 200 characters' }),
+    __metadata("design:type", Object)
+], GetAllNotesDto.prototype, "search", void 0);

package/dist/notes/index.d.ts

@@ -1,10 +1,13 @@
 import type { NoteEntity } from '@managemint-solutions/entities/notes';
+import type { StaffNoteRow } from '@managemint-solutions/entities/notes';
+import type { MmsList } from '@managemint-solutions/entities/common';
 import type { AddNoteDto } from '@managemint-solutions/entities/notes/dto';
 import { NotesEntityTypes } from '@managemint-solutions/entities/notes/enum';
 import type { ClientContext } from '../auth';
 import { type AuditResource } from '../audit';
 import type { TypedSupabaseClient } from '../client';
 export * from './dto';
+import type { GetAllNotesDto } from './dto';
 export declare class NotesResource {
     private readonly supabase;
     private readonly auth;
@@ -12,6 +15,12 @@ export declare class NotesResource {
     constructor(supabase: TypedSupabaseClient, auth: ClientContext, audit: AuditResource);
     getById(noteId: string): Promise<NoteEntity>;
     list(entity: NotesEntityTypes, entityId: string): Promise<NoteEntity[]>;
+    /**
+     * The admin portal's Notes list: every note on a record type in `entityTypes` (the ones the
+     * caller may read), across the organizations staff can see, newest first. `record` is left
+     * for the caller to name.
+     */
+    listAll(query: GetAllNotesDto, entityTypes: string[]): Promise<MmsList<StaffNoteRow>>;
     create(entity: NotesEntityTypes, entityId: string, input: AddNoteDto): Promise<NoteEntity>;
     togglePin(noteId: string): Promise<NoteEntity>;
     remove(noteId: string): Promise<void>;

package/dist/notes/index.js

@@ -21,11 +21,13 @@ const audit_1 = require("../audit");
 const errors_1 = require("../errors");
 const won_1 = require("../leads/won");
 const tenancy_1 = require("../tenancy");
+const transforms_1 = require("../transforms");
 __exportStar(require("./dto"), exports);
 // The public contract is the shared NoteEntity from @managemint-solutions/entities; the casts at
 // the returns declare the shape the select string below produces (the columns are defined in the
 // api's supabase/migrations).
 const NOTE_SELECT = 'mms_id, created_at, content, pinned, user:user_profiles!user_id(*)';
+const NOTE_LIST_SELECT = `${NOTE_SELECT}, entity_type, entity_id, organization:organizations!organization_id(mms_id, name)`;
 class NotesResource {
     supabase;
     auth;
@@ -55,6 +57,17 @@ class NotesResource {
             throw (0, errors_1.mapPostgrestError)(error);
         return data;
     }
+    /**
+     * The admin portal's Notes list: every note on a record type in `entityTypes` (the ones the
+     * caller may read), across the organizations staff can see, newest first. `record` is left
+     * for the caller to name.
+     */
+    async listAll(query, entityTypes) {
+        const { data, error, count } = await (0, tenancy_1.filterStaffList)(this.supabase.from('notes').select(NOTE_LIST_SELECT, { count: 'exact' }), query, ['content'], entityTypes).order('created_at', { ascending: false });
+        if (error)
+            throw (0, errors_1.mapPostgrestError)(error);
+        return (0, transforms_1.toMmsList)(data, query.page, query.page_size, count);
+    }
     async create(entity, entityId, input) {
         const organizationId = (0, tenancy_1.requireOrganization)(this.auth);
         if (entity === enum_1.NotesEntityTypes.LEAD) {

package/dist/oauth/dto.d.ts

@@ -0,0 +1,7 @@
+import type { OAuthAuthorizationIdDto as OAuthAuthorizationIdDtoType, OAuthClientIdDto as OAuthClientIdDtoType } from '@managemint-solutions/entities/oauth/dto';
+export declare class OAuthAuthorizationIdDto implements OAuthAuthorizationIdDtoType {
+    readonly authorizationId: string;
+}
+export declare class OAuthClientIdDto implements OAuthClientIdDtoType {
+    readonly clientId: string;
+}

package/dist/oauth/dto.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthClientIdDto = exports.OAuthAuthorizationIdDto = void 0;
+const class_validator_1 = require("class-validator");
+class OAuthAuthorizationIdDto {
+    // GoTrue's own id format, not one of ours, so only its length is checked.
+    authorizationId;
+}
+exports.OAuthAuthorizationIdDto = OAuthAuthorizationIdDto;
+__decorate([
+    (0, class_validator_1.IsString)({ message: 'Invalid authorization ID' }),
+    (0, class_validator_1.MinLength)(1, { message: 'Invalid authorization ID' }),
+    (0, class_validator_1.MaxLength)(255, { message: 'Invalid authorization ID' }),
+    __metadata("design:type", String)
+], OAuthAuthorizationIdDto.prototype, "authorizationId", void 0);
+class OAuthClientIdDto {
+    clientId;
+}
+exports.OAuthClientIdDto = OAuthClientIdDto;
+__decorate([
+    (0, class_validator_1.IsUUID)('all', { message: 'Invalid app ID format' }),
+    __metadata("design:type", String)
+], OAuthClientIdDto.prototype, "clientId", void 0);

package/dist/oauth/index.d.ts

@@ -0,0 +1,25 @@
+import type { OAuthAuthorizationResponse, OAuthGrant, OAuthRedirect } from '@managemint-solutions/entities/oauth';
+export * from './dto';
+/**
+ * The caller's side of Supabase Auth's OAuth server: answering a connection request on the
+ * consent page, and the apps they have connected.
+ *
+ * GoTrue authenticates these endpoints with the caller's own token, and supabase-js only sends
+ * one from a stored session, which a stateless server-side client never has - so these are plain
+ * calls to the same endpoints supabase-js uses (`auth.oauth.*`), carrying the caller's bearer.
+ */
+export declare class OAuthResource {
+    private readonly url;
+    private readonly key;
+    private readonly accessToken;
+    constructor(url: string, key: string, accessToken: string);
+    /** A connection request: what the consent page shows, or a redirect if already approved. */
+    getAuthorization(authorizationId: string): Promise<OAuthAuthorizationResponse>;
+    /** Approves or denies a connection request; either way the answer is a redirect to the app. */
+    answerAuthorization(authorizationId: string, action: 'approve' | 'deny'): Promise<OAuthRedirect>;
+    /** The apps the caller has connected. */
+    listGrants(): Promise<OAuthGrant[]>;
+    /** Disconnects an app: GoTrue ends its sessions and refresh tokens at once. */
+    revokeGrant(clientId: string): Promise<void>;
+    private request;
+}

package/dist/oauth/index.js

@@ -0,0 +1,88 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthResource = void 0;
+const errors_1 = require("../errors");
+__exportStar(require("./dto"), exports);
+/**
+ * The caller's side of Supabase Auth's OAuth server: answering a connection request on the
+ * consent page, and the apps they have connected.
+ *
+ * GoTrue authenticates these endpoints with the caller's own token, and supabase-js only sends
+ * one from a stored session, which a stateless server-side client never has - so these are plain
+ * calls to the same endpoints supabase-js uses (`auth.oauth.*`), carrying the caller's bearer.
+ */
+class OAuthResource {
+    url;
+    key;
+    accessToken;
+    constructor(url, key, accessToken) {
+        this.url = url;
+        this.key = key;
+        this.accessToken = accessToken;
+    }
+    /** A connection request: what the consent page shows, or a redirect if already approved. */
+    async getAuthorization(authorizationId) {
+        const data = await this.request('GET', `/oauth/authorizations/${encodeURIComponent(authorizationId)}`);
+        if ('redirect_url' in data)
+            return { redirect_url: data.redirect_url };
+        // GoTrue also sends the signed-in user; the caller already knows who they are.
+        return {
+            authorization_id: data.authorization_id,
+            redirect_uri: data.redirect_uri,
+            client: data.client,
+            scope: data.scope,
+        };
+    }
+    /** Approves or denies a connection request; either way the answer is a redirect to the app. */
+    async answerAuthorization(authorizationId, action) {
+        const data = await this.request('POST', `/oauth/authorizations/${encodeURIComponent(authorizationId)}/consent`, { action });
+        return { redirect_url: data.redirect_url };
+    }
+    /** The apps the caller has connected. */
+    async listGrants() {
+        return await this.request('GET', '/user/oauth/grants');
+    }
+    /** Disconnects an app: GoTrue ends its sessions and refresh tokens at once. */
+    async revokeGrant(clientId) {
+        await this.request('DELETE', `/user/oauth/grants?client_id=${encodeURIComponent(clientId)}`);
+    }
+    async request(method, path, body) {
+        const response = await fetch(`${this.url}/auth/v1${path}`, {
+            method,
+            headers: {
+                apikey: this.key,
+                Authorization: `Bearer ${this.accessToken}`,
+                ...(body ? { 'Content-Type': 'application/json' } : {}),
+            },
+            ...(body ? { body: JSON.stringify(body) } : {}),
+        });
+        const text = await response.text();
+        const data = text ? JSON.parse(text) : null;
+        if (!response.ok) {
+            const error = (data ?? {});
+            throw new errors_1.SupabaseClientError({
+                // GoTrue answers an unknown or expired request with 404 and a bad id with 400; anything
+                // else is its own failure, not the caller's.
+                status: response.status >= 500 ? 502 : response.status,
+                error: 'Authentication Error',
+                message: error.msg ?? error.message ?? error.error_description ?? 'The connection request failed',
+            });
+        }
+        return data;
+    }
+}
+exports.OAuthResource = OAuthResource;

package/dist/service-client/index.d.ts

@@ -4,6 +4,7 @@ import { BillingResource } from '../billing';
 import { InvoicesResource } from '../billing/invoices';
 import { ClientsResource } from '../clients';
 import { ConfigsResource } from '../configs';
+import { CronRunsResource, CronsResource } from '../crons';
 import { DocumentsResource } from '../documents';
 import { EmulationHandshakesResource } from '../emulation-handshakes';
 import { FeatureRequestsResource } from '../feature-requests';
@@ -112,6 +113,9 @@ export declare class SupabaseServiceClient {
     readonly notifications: NotificationsOutboxResource;
     readonly featureRequests: FeatureRequestsResource;
     readonly configs: ConfigsResource;
+    /** The api's cron routes record each run here. */
+    readonly crons: CronsResource;
+    readonly cronRuns: CronRunsResource;
     readonly signup: OrganizationSignupResource;
     readonly paystackEvents: WebhookEventsResource;
     readonly resendEvents: WebhookEventsResource;

package/dist/service-client/index.js

@@ -9,6 +9,7 @@ const billing_1 = require("../billing");
 const invoices_1 = require("../billing/invoices");
 const clients_1 = require("../clients");
 const configs_1 = require("../configs");
+const crons_1 = require("../crons");
 const documents_1 = require("../documents");
 const emulation_handshakes_1 = require("../emulation-handshakes");
 const feature_requests_1 = require("../feature-requests");
@@ -159,6 +160,9 @@ class SupabaseServiceClient {
     featureRequests;
     // Global, with no organization on the row, so it hangs off the client rather than a scope.
     configs;
+    /** The api's cron routes record each run here. */
+    crons;
+    cronRuns;
     signup;
     paystackEvents;
     resendEvents;
@@ -173,6 +177,8 @@ class SupabaseServiceClient {
         this.resendEvents = new webhook_events_1.WebhookEventsResource(this.supabase, 'resend_webhook_events');
         this.featureRequests = new feature_requests_1.FeatureRequestsResource(this.supabase);
         this.configs = new configs_1.ConfigsResource(this.supabase);
+        this.crons = new crons_1.CronsResource(this.supabase);
+        this.cronRuns = new crons_1.CronRunsResource(this.supabase);
         this.signup = new organizations_1.OrganizationSignupResource(this.supabase, (organizationId) => this.forOrganization(organizationId).audit);
         // The outbox spans organizations - the row it is about carries its own - so it takes a
         // factory and scopes per write rather than being built inside one organization's scope.

package/dist/staff-client.d.ts

@@ -1,14 +1,17 @@
 import { type StaffContext } from './auth';
 import { AuditResource } from './audit';
 import { AdditionalDetailsResource } from './additional-details';
-import type { SupabaseClientConfig, TypedSupabaseClient } from './client';
+import { SupabaseClient, type SupabaseClientConfig, type TypedSupabaseClient } from './client';
 import { ClientsResource } from './clients';
+import { ConfigsResource } from './configs';
+import { CronRunsResource, CronsResource } from './crons';
 import { DocumentsResource, DocumentTemplatesResource } from './documents';
 import { LeadsResource } from './leads';
 import { NotesResource } from './notes';
 import { OrganizationsResource } from './organizations';
 import { ProjectsResource } from './projects';
 import { StaffPermissionsResource, StaffResource } from './staff';
+import { StatusesResource } from './statuses';
 import { SupportingFilesResource } from './supporting-files';
 import { TasksResource } from './tasks';
 import { UserApiCredentialsReads } from './user-api-credentials';
@@ -28,6 +31,10 @@ export declare class SupabaseStaffClient {
     readonly audit: AuditResource;
     readonly additionalDetails: AdditionalDetailsResource;
     readonly clients: ClientsResource;
+    /** Reads only: the `staff` role has no write grant, so an edit goes through the service client. */
+    readonly configs: ConfigsResource;
+    readonly crons: CronsResource;
+    readonly cronRuns: CronRunsResource;
     readonly leads: LeadsResource;
     readonly notes: NotesResource;
     readonly projects: ProjectsResource;
@@ -38,10 +45,20 @@ export declare class SupabaseStaffClient {
     readonly organizations: OrganizationsResource;
     readonly staff: StaffResource;
     readonly staffPermissions: StaffPermissionsResource;
+    /** Every organization's statuses (`listAll`); a write is refused, there being no organization. */
+    readonly statuses: StatusesResource;
     /** Lists and parents only: Storage names no staff, so a download is signed on the service client. */
     readonly supportingFiles: SupportingFilesResource;
     readonly userApiCredentials: UserApiCredentialsReads;
     constructor({ url, key, accessToken, auth, client }: SupabaseStaffClientConfig);
+    /**
+     * The tenant client's resources, reading one organization as this staff member: the same
+     * staff token, so the `staff` role's policies still decide what comes back, and every write
+     * is still refused at the database (the role holds SELECT alone). For the modules whose
+     * resources scope every query to the caller's organization - HR, inventory, documents,
+     * billing, statuses and labels - which a staff client, having none, cannot read through.
+     */
+    forOrganization(organizationId: string): SupabaseClient;
 }
 export declare const createSupabaseStaffClient: (config: SupabaseStaffClientConfig) => SupabaseStaffClient;
 export {};

package/dist/staff-client.js

@@ -4,13 +4,17 @@ exports.createSupabaseStaffClient = exports.SupabaseStaffClient = void 0;
 const auth_1 = require("./auth");
 const audit_1 = require("./audit");
 const additional_details_1 = require("./additional-details");
+const client_1 = require("./client");
 const clients_1 = require("./clients");
+const configs_1 = require("./configs");
+const crons_1 = require("./crons");
 const documents_1 = require("./documents");
 const leads_1 = require("./leads");
 const notes_1 = require("./notes");
 const organizations_1 = require("./organizations");
 const projects_1 = require("./projects");
 const staff_1 = require("./staff");
+const statuses_1 = require("./statuses");
 const supporting_files_1 = require("./supporting-files");
 const tasks_1 = require("./tasks");
 const user_api_credentials_1 = require("./user-api-credentials");
@@ -27,6 +31,10 @@ class SupabaseStaffClient {
     audit;
     additionalDetails;
     clients;
+    /** Reads only: the `staff` role has no write grant, so an edit goes through the service client. */
+    configs;
+    crons;
+    cronRuns;
     leads;
     notes;
     projects;
@@ -37,6 +45,8 @@ class SupabaseStaffClient {
     organizations;
     staff;
     staffPermissions;
+    /** Every organization's statuses (`listAll`); a write is refused, there being no organization. */
+    statuses;
     /** Lists and parents only: Storage names no staff, so a download is signed on the service client. */
     supportingFiles;
     userApiCredentials;
@@ -45,6 +55,9 @@ class SupabaseStaffClient {
         this.auth = auth;
         this.audit = new audit_1.AuditResource(this.supabase, auth);
         this.clients = new clients_1.ClientsResource(this.supabase, auth, this.audit);
+        this.configs = new configs_1.ConfigsResource(this.supabase);
+        this.crons = new crons_1.CronsResource(this.supabase);
+        this.cronRuns = new crons_1.CronRunsResource(this.supabase);
         this.additionalDetails = new additional_details_1.AdditionalDetailsResource(this.supabase, auth, this.audit);
         this.leads = new leads_1.LeadsResource(this.supabase, auth, this.audit, this.additionalDetails);
         this.notes = new notes_1.NotesResource(this.supabase, auth, this.audit);
@@ -56,9 +69,26 @@ class SupabaseStaffClient {
         this.organizations = new organizations_1.OrganizationsResource(this.supabase, auth, this.audit);
         this.staff = new staff_1.StaffResource(this.supabase);
         this.staffPermissions = new staff_1.StaffPermissionsResource(this.supabase);
+        this.statuses = new statuses_1.StatusesResource(this.supabase, auth, this.audit);
         this.supportingFiles = new supporting_files_1.SupportingFilesResource(this.supabase, auth, this.audit);
         this.userApiCredentials = new user_api_credentials_1.UserApiCredentialsReads(this.supabase);
     }
+    /**
+     * The tenant client's resources, reading one organization as this staff member: the same
+     * staff token, so the `staff` role's policies still decide what comes back, and every write
+     * is still refused at the database (the role holds SELECT alone). For the modules whose
+     * resources scope every query to the caller's organization - HR, inventory, documents,
+     * billing, statuses and labels - which a staff client, having none, cannot read through.
+     */
+    forOrganization(organizationId) {
+        return new client_1.SupabaseClient({
+            url: '',
+            key: '',
+            accessToken: '',
+            client: this.supabase,
+            auth: { mms_id: this.auth.mms_id, organization_id: organizationId },
+        });
+    }
 }
 exports.SupabaseStaffClient = SupabaseStaffClient;
 const createSupabaseStaffClient = (config) => new SupabaseStaffClient(config);

package/dist/statuses/dto.d.ts

@@ -1,4 +1,4 @@
-import type { AddStatusDto as AddStatusDtoType, GetStatusesDto as GetStatusesDtoType, ReorderStatusesDto as ReorderStatusesDtoType, StatusIdDto as StatusIdDtoType, UpdateStatusDto as UpdateStatusDtoType } from '@managemint-solutions/entities/status/dto';
+import type { AddStatusDto as AddStatusDtoType, GetAllStatusesDto as GetAllStatusesDtoType, GetStatusesDto as GetStatusesDtoType, ReorderStatusesDto as ReorderStatusesDtoType, StatusIdDto as StatusIdDtoType, UpdateStatusDto as UpdateStatusDtoType } from '@managemint-solutions/entities/status/dto';
 import { StatusEntityTypes } from '@managemint-solutions/entities/status/enum';
 export declare class StatusIdDto implements StatusIdDtoType {
     readonly statusId: string;
@@ -20,3 +20,11 @@ export declare class UpdateStatusDto implements UpdateStatusDtoType {
     readonly colour: string;
     readonly is_complete?: boolean;
 }
+/** The admin api's GET /statuses: every organization's statuses, a page at a time. */
+export declare class GetAllStatusesDto implements GetAllStatusesDtoType {
+    readonly page: number;
+    readonly page_size: number;
+    readonly organization_id?: string | null;
+    readonly entity_type?: StatusEntityTypes | null;
+    readonly search?: string | null;
+}

package/dist/statuses/dto.js

@@ -9,9 +9,11 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.UpdateStatusDto = exports.ReorderStatusesDto = exports.AddStatusDto = exports.GetStatusesDto = exports.StatusIdDto = void 0;
+exports.GetAllStatusesDto = exports.UpdateStatusDto = exports.ReorderStatusesDto = exports.AddStatusDto = exports.GetStatusesDto = exports.StatusIdDto = void 0;
 const class_validator_1 = require("class-validator");
+const class_transformer_1 = require("class-transformer");
 const enum_1 = require("@managemint-solutions/entities/status/enum");
+const validators_1 = require("../validators");
 // class-validator versions of the shared DTO types from @managemint-solutions/entities.
 // Each class `implements` its entities type so the wire contract cannot drift.
 class StatusIdDto {
@@ -100,3 +102,46 @@ __decorate([
     (0, class_validator_1.IsBoolean)({ message: 'is_complete must be true or false' }),
     __metadata("design:type", Boolean)
 ], UpdateStatusDto.prototype, "is_complete", void 0);
+/** The admin api's GET /statuses: every organization's statuses, a page at a time. */
+class GetAllStatusesDto {
+    page = 1;
+    page_size = 25;
+    organization_id;
+    entity_type;
+    search;
+}
+exports.GetAllStatusesDto = GetAllStatusesDto;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Transform)(({ value }) => (value ? Number(value) : 1), { toClassOnly: true }),
+    (0, class_validator_1.IsNumber)({}, { message: 'Page must be a number' }),
+    (0, class_validator_1.Min)(1, { message: 'Page must be at least 1' }),
+    __metadata("design:type", Number)
+], GetAllStatusesDto.prototype, "page", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Transform)(({ value }) => (value ? Number(value) : 25), { toClassOnly: true }),
+    (0, class_validator_1.IsNumber)({}, { message: 'Page size must be a number' }),
+    (0, class_validator_1.Min)(1, { message: 'Page size must be at least 1' }),
+    (0, class_validator_1.Max)(100, { message: 'Page size cannot exceed 100' }),
+    __metadata("design:type", Number)
+], GetAllStatusesDto.prototype, "page_size", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsUUID)('7', { message: 'Invalid organization ID format' }),
+    __metadata("design:type", Object)
+], GetAllStatusesDto.prototype, "organization_id", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsEnum)(enum_1.StatusEntityTypes, { message: 'Invalid record type' }),
+    __metadata("design:type", Object)
+], GetAllStatusesDto.prototype, "entity_type", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, validators_1.IsNullable)(),
+    (0, class_validator_1.IsString)({ message: 'Invalid search' }),
+    (0, class_validator_1.MaxLength)(200, { message: 'Search cannot exceed 200 characters' }),
+    __metadata("design:type", Object)
+], GetAllStatusesDto.prototype, "search", void 0);