ad2app-lib 1.49.0 → 1.59.0

package/dist/types/agency.js

@@ -9,7 +9,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AdminSetOrganizationStatusDto = exports.UpdateAgencyDiscoverableDto = exports.AgencyAccessRequestDto = exports.AgencyDiscoverQueryDto = exports.SponsorCreatorDto = exports.UpdateGrantScopesDto = exports.AcceptGrantDto = exports.AcceptAgencyMemberInviteDto = exports.RedeemAgencyInviteDto = exports.InviteAgencyMemberDto = exports.CreateAgencyOrganizationDto = exports.AGENCY_ROSTER_METRICS_STATES = exports.AGENCY_ROSTER_NEEDS_ATTENTION_STATES = exports.AGENCY_ROSTER_ROW_STATES = exports.AGENCY_REQUEST_CODES = exports.CREATOR_ACCESS_GRANT_STATES = exports.AGENCY_ORGANIZATION_STATUSES = exports.isAgencyGrantScope = exports.AGENCY_GRANT_SCOPES = exports.AGENCY_ROUTE_PATHS = void 0;
+exports.AdminSetOrganizationStatusDto = exports.UpdateAgencyDiscoverableDto = exports.AgencyAccessRequestDto = exports.AgencyDiscoverQueryDto = exports.SponsorCreatorDto = exports.ACTING_FOR_HEADER = exports.UpdateGrantScopesDto = exports.AcceptGrantDto = exports.AcceptAgencyMemberInviteDto = exports.RedeemAgencyInviteDto = exports.InviteAgencyMemberDto = exports.CreateAgencyOrganizationDto = exports.AGENCY_ROSTER_METRICS_STATES = exports.AGENCY_ROSTER_NEEDS_ATTENTION_STATES = exports.AGENCY_ROSTER_ROW_STATES = exports.AGENCY_REQUEST_CODES = exports.CREATOR_ACCESS_GRANT_ORIGINS = exports.CREATOR_ACCESS_GRANT_STATES = exports.AGENCY_ORGANIZATION_STATUSES = exports.AGENCY_ORGANIZATION_TYPES = exports.isGrantScope = exports.DELEGATION_SCOPES = exports.isAgencyGrantScope = exports.AGENCY_GRANT_SCOPES = exports.AGENCY_ROUTE_PATHS = void 0;
 const class_validator_1 = require("class-validator");
 // ── Cross-repo route constants ───────────────────────────────────────────────
 /**
@@ -61,6 +61,27 @@ exports.AGENCY_GRANT_SCOPES = [
  */
 const isAgencyGrantScope = (value) => exports.AGENCY_GRANT_SCOPES.includes(value);
 exports.isAgencyGrantScope = isAgencyGrantScope;
+/**
+ * Delegation (spec 148 FR-017a): the one scope that reaches WRITES, and only
+ * the creator-side deal acts (apply, offer acts, materials, the deal thread).
+ *
+ * Kept OUT of AGENCY_GRANT_SCOPES on purpose: that list is what an
+ * organization may ASK for, and no organization ever asks for this. Only the
+ * creator adds it to `grantedScopes`, which makes it the one exception to
+ * "granted is a subset of requested". Publishing, contract signature,
+ * payouts, the settlement form and platforms stay unreachable through it.
+ */
+exports.DELEGATION_SCOPES = ['deals'];
+/** Narrowing guard over both sets; an unrecognised scope fails closed. */
+const isGrantScope = (value) => (0, exports.isAgencyGrantScope)(value) || exports.DELEGATION_SCOPES.includes(value);
+exports.isGrantScope = isGrantScope;
+// ── Organization ─────────────────────────────────────────────────────────────
+/**
+ * `'brand'` arrived with spec 148 (US2): one column, no enum table. A brand
+ * authors campaigns like an agency but has no roster; it is created only
+ * while the backend's brand door is open.
+ */
+exports.AGENCY_ORGANIZATION_TYPES = ['agency', 'brand'];
 /**
  * `closed` was added by the 2026-09-21 requirements review (FR-004b).
  *
@@ -91,6 +112,12 @@ exports.CREATOR_ACCESS_GRANT_STATES = [
     'expired',
     'revoked',
 ];
+/**
+ * `dealroom_application` (spec 148): created or widened when the creator
+ * applies to an open listing. The system revokes a grant of this origin, and
+ * only of this origin, when that deal ends.
+ */
+exports.CREATOR_ACCESS_GRANT_ORIGINS = ['invite_link', 'agency_request', 'dealroom_application'];
 /**
  * Outcomes of discovery and requests that are not refusals of access, sent as
  * codes so the screen composes the sentence in the reader's language (FR-019,
@@ -171,6 +198,8 @@ exports.AGENCY_ROSTER_METRICS_STATES = [
  */
 class CreateAgencyOrganizationDto {
     constructor(data) {
+        this.type = data?.type;
+        this.paymentMethodId = data?.paymentMethodId;
         this.name = data?.name ?? '';
         this.website = data?.website;
         this.registryId = data?.registryId ?? '';
@@ -203,6 +232,17 @@ __decorate([
     (0, class_validator_1.IsEmail)(),
     __metadata("design:type", String)
 ], CreateAgencyOrganizationDto.prototype, "contactEmail", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(exports.AGENCY_ORGANIZATION_TYPES),
+    __metadata("design:type", String)
+], CreateAgencyOrganizationDto.prototype, "type", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Matches)(/^pm_[A-Za-z0-9]{1,200}$/),
+    __metadata("design:type", String)
+], CreateAgencyOrganizationDto.prototype, "paymentMethodId", void 0);
 class InviteAgencyMemberDto {
     constructor(data) {
         this.email = data?.email ?? '';
@@ -265,19 +305,46 @@ __decorate([
     (0, class_validator_1.IsIn)(exports.AGENCY_GRANT_SCOPES, { each: true }),
     __metadata("design:type", Array)
 ], AcceptGrantDto.prototype, "scopes", void 0);
-/** The creator narrowing or widening a live grant — the only other write path. */
+/**
+ * The creator narrowing or widening a live grant — the only other write path.
+ *
+ * `scopes` are the READS only; `deals` is never one of them (it stays out of
+ * AGENCY_GRANT_SCOPES). Delegation (spec 148 FR-017a) is its own field, so the
+ * data-access screen, which saves reads, can never drop it by omission:
+ *
+ *  - `deals` absent ⇒ delegation unchanged (a reads-only save keeps `deals`);
+ *  - `deals: true` ⇒ added, `deals: false` ⇒ removed;
+ *  - `scopes` may be left out when `deals` is sent ⇒ the reads stay as they are.
+ */
 class UpdateGrantScopesDto {
     constructor(data) {
-        this.scopes = data?.scopes ?? [];
+        // Undefined when not given (never []): class-transformer builds the body
+        // with an empty construct, and a default would make `{ deals: true }` fail.
+        if (data?.scopes !== undefined)
+            this.scopes = data.scopes;
+        if (data?.deals !== undefined)
+            this.deals = data.deals;
     }
 }
 exports.UpdateGrantScopesDto = UpdateGrantScopesDto;
 __decorate([
+    (0, class_validator_1.ValidateIf)((dto) => dto.deals === undefined || dto.scopes !== undefined),
     (0, class_validator_1.IsArray)(),
     (0, class_validator_1.ArrayNotEmpty)(),
     (0, class_validator_1.IsIn)(exports.AGENCY_GRANT_SCOPES, { each: true }),
     __metadata("design:type", Array)
 ], UpdateGrantScopesDto.prototype, "scopes", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], UpdateGrantScopesDto.prototype, "deals", void 0);
+/**
+ * Spec 148 US8: the header a delegate names the creator with on the
+ * creator-side deal routes (`X-Acting-For: <creatorUserId>`). Every other
+ * route refuses a request that carries it (`dealroom-delegate-forbidden`).
+ */
+exports.ACTING_FOR_HEADER = 'x-acting-for';
 class SponsorCreatorDto {
     constructor(data) {
         this.tier = data?.tier ?? 'starter';