feat: implement admin authentication services and tenant impersonation logic

- New migration: create support_ticket_attachments table
- Dockerfile: RUN_SEED=true env var triggers seed after migrations

Dockerfile

@@ -39,4 +39,4 @@ COPY --from=builder /app/dist ./dist
 ENV NODE_ENV=production
 EXPOSE 3004
 ENTRYPOINT ["dumb-init", "--"]
-CMD ["sh", "-c", "cd packages/admin-db && npx prisma migrate deploy && cd /app && node dist/main.js"]
+CMD ["sh", "-c", "cd packages/admin-db && npx prisma migrate deploy && if [ \"$RUN_SEED\" = \"true\" ]; then echo 'Seeding admin database...' && npx tsx prisma/seed.ts; fi && cd /app && node dist/main.js"]

README.md

@@ -0,0 +1,2 @@
+# fiberops-api-admin
+

packages/admin-db/prisma/migrations/20260415000000_add_support_ticket_attachments/migration.sql

@@ -0,0 +1,24 @@
+-- CreateTable: support_ticket_attachments
+CREATE TABLE "support_ticket_attachments" (
+    "id"           TEXT NOT NULL,
+    "ticketId"     TEXT NOT NULL,
+    "commentId"    TEXT,
+    "fileName"     TEXT NOT NULL,
+    "originalName" TEXT NOT NULL,
+    "mimeType"     TEXT NOT NULL,
+    "sizeBytes"    INTEGER NOT NULL,
+    "uploadedBy"   TEXT NOT NULL,
+    "createdAt"    TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "support_ticket_attachments_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "support_ticket_attachments_ticketId_idx" ON "support_ticket_attachments"("ticketId");
+CREATE INDEX "support_ticket_attachments_commentId_idx" ON "support_ticket_attachments"("commentId");
+
+-- AddForeignKey
+ALTER TABLE "support_ticket_attachments" ADD CONSTRAINT "support_ticket_attachments_ticketId_fkey"
+  FOREIGN KEY ("ticketId") REFERENCES "support_tickets"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+ALTER TABLE "support_ticket_attachments" ADD CONSTRAINT "support_ticket_attachments_commentId_fkey"
+  FOREIGN KEY ("commentId") REFERENCES "support_ticket_comments"("id") ON DELETE CASCADE ON UPDATE CASCADE;

packages/shared/package.json

@@ -2,8 +2,8 @@
   "name": "@fiberops/shared",
   "version": "0.1.0",
   "private": true,
-  "main": "./src/index.ts",
+  "main": "./dist/index.js",
-  "types": "./src/index.ts",
+  "types": "./dist/index.d.ts",
   "scripts": {
     "build": "tsc",
     "lint": "tsc --noEmit",

packages/shared/tsconfig.json

@@ -1,15 +1,14 @@
 {
   "compilerOptions": {
     "target": "ES2022",
-    "module": "ESNext",
+    "module": "CommonJS",
-    "moduleResolution": "bundler",
+    "moduleResolution": "node",
     "lib": ["ES2022"],
     "strict": true,
     "esModuleInterop": true,
     "skipLibCheck": true,
     "forceConsistentCasingInFileNames": true,
     "resolveJsonModule": true,
-    "isolatedModules": true,
     "declaration": true,
     "sourceMap": true,
     "outDir": "./dist",

src/auth/auth.service.ts

@@ -6,6 +6,7 @@ import {
 import { JwtService } from '@nestjs/jwt';
 import { ConfigService } from '@nestjs/config';
 import * as bcrypt from 'bcrypt';
+import { randomUUID } from 'crypto';
 import { AdminPrismaService } from '../prisma/admin-prisma.service';
 
 @Injectable()
@@ -119,6 +120,7 @@ export class AuthService {
       sub: adminId,
       email,
       type: 'super_admin',
+      jti: randomUUID(),
     });
 
     const refreshSecret = this.config.get<string>(
@@ -131,7 +133,7 @@ export class AuthService {
     );
 
     const refreshToken = this.jwt.sign(
-      { sub: adminId, email, type: 'super_admin' },
+      { sub: adminId, email, type: 'super_admin', jti: randomUUID() },
       {
         secret: refreshSecret,
         expiresIn: refreshExpiresIn as any,

src/impersonate/impersonate.service.ts

@@ -15,7 +15,7 @@ export class ImpersonateService {
     private readonly audit: AuditService,
   ) {
     // Use the MAIN API's JWT secret so the token works with the tenant API
-    this.mainJwtSecret = this.config.get<string>('JWT_SECRET', 'dev-jwt-secret-not-for-production');
+    this.mainJwtSecret = this.config.get<string>('MAIN_API_JWT_SECRET', 'your-secret-key');
   }
 
   async startImpersonation(tenantId: string, adminId: string, adminName: string) {