@7365admin1/core 2.14.0 → 2.15.0

package/dist/index.js

@@ -30,7 +30,9 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  ANPRMode: () => ANPRMode,
   AccessTypeProps: () => AccessTypeProps,
+  BULLETIN_RECIPIENTS: () => BULLETIN_RECIPIENTS,
   DEVICE_STATUS: () => DEVICE_STATUS,
   EAccessCardTypes: () => EAccessCardTypes,
   EAccessCardUserTypes: () => EAccessCardUserTypes,
@@ -89,12 +91,15 @@ __export(src_exports, {
   MVerification: () => MVerification,
   MVisitorTransaction: () => MVisitorTransaction,
   MWorkOrder: () => MWorkOrder,
+  OrgNature: () => OrgNature,
   PERSON_TYPES: () => PERSON_TYPES,
+  STATUS_VALUES: () => STATUS_VALUES,
   UseAccessManagementRepo: () => UseAccessManagementRepo,
-  allowedCategories: () => allowedCategories,
+  VehicleCategory: () => VehicleCategory,
+  VehicleStatus: () => VehicleStatus,
+  VehicleType: () => VehicleType,
   allowedFieldsSite: () => allowedFieldsSite,
   allowedNatures: () => allowedNatures,
-  allowedTypes: () => allowedTypes,
   attendanceSchema: () => attendanceSchema,
   attendanceSettingsSchema: () => attendanceSettingsSchema,
   chatSchema: () => chatSchema,
@@ -1669,7 +1674,9 @@ var schemaOccurrenceEntry = import_joi5.default.object({
   subject: import_joi5.default.string().hex().optional().allow(null, ""),
   occurrence: import_joi5.default.string().optional().allow(null, ""),
   signature: import_joi5.default.string().hex().optional().allow(null, ""),
-  incidentReportId: import_joi5.default.string().hex().optional().allow(null, "")
+  incidentReportId: import_joi5.default.string().hex().optional().allow(null, ""),
+  eSignature: import_joi5.default.string().required(),
+  createdByName: import_joi5.default.string().optional().allow(null, "")
 });
 var schemaUpdateOccurrenceEntry = import_joi5.default.object({
   _id: import_joi5.default.string().hex().required(),
@@ -1678,7 +1685,9 @@ var schemaUpdateOccurrenceEntry = import_joi5.default.object({
   subject: import_joi5.default.string().hex().optional().allow(null, ""),
   occurrence: import_joi5.default.string().optional().allow(null, ""),
   signature: import_joi5.default.string().hex().optional().allow(null, ""),
-  incidentReportId: import_joi5.default.string().hex().optional().allow(null, "")
+  incidentReportId: import_joi5.default.string().hex().optional().allow(null, ""),
+  eSignature: import_joi5.default.string().required(),
+  createdByName: import_joi5.default.string().optional().allow(null, "")
 });
 function MOccurrenceEntry(value) {
   if (value._id && typeof value._id === "string") {
@@ -1735,6 +1744,8 @@ function MOccurrenceEntry(value) {
     incidentReportId: value.incidentReportId,
     signature: value.signature,
     userName: value.userName,
+    eSignature: value.eSignature,
+    createdByName: value.createdByName,
     date: value.date,
     createdAt: value.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(),
     updatedAt: value.updatedAt,
@@ -6617,12 +6628,12 @@ function useUserController() {
     }
   }
   async function createUserByVerification(req, res, next) {
-    const allowedTypes2 = ["user-sign-up", "user-invite"];
+    const allowedTypes = ["user-sign-up", "user-invite"];
     const validation = import_joi14.default.object({
       id: import_joi14.default.string().hex().required(),
       name: import_joi14.default.string().required(),
       password: import_joi14.default.string().required(),
-      type: import_joi14.default.string().required().valid(...allowedTypes2)
+      type: import_joi14.default.string().required().valid(...allowedTypes)
     });
     const id = req.params.id;
     const payload = { ...req.body };
@@ -15533,12 +15544,37 @@ var import_node_server_utils81 = require("@7365admin1/node-server-utils");
 var import_node_server_utils80 = require("@7365admin1/node-server-utils");
 var import_joi43 = __toESM(require("joi"));
 var import_mongodb45 = require("mongodb");
-var allowedTypes = ["whitelist", "blacklist"];
-var allowedCategories = ["resident", "visitor"];
+var VehicleType = /* @__PURE__ */ ((VehicleType2) => {
+  VehicleType2["WHITELIST"] = "whitelist";
+  VehicleType2["BLOCKLIST"] = "blocklist";
+  return VehicleType2;
+})(VehicleType || {});
+var VehicleCategory = /* @__PURE__ */ ((VehicleCategory2) => {
+  VehicleCategory2["RESIDENT"] = "resident";
+  VehicleCategory2["VISITOR"] = "visitor";
+  return VehicleCategory2;
+})(VehicleCategory || {});
+var VehicleStatus = /* @__PURE__ */ ((VehicleStatus2) => {
+  VehicleStatus2["PENDING"] = "pending";
+  VehicleStatus2["ACTIVE"] = "active";
+  VehicleStatus2["INACTIVE"] = "inactive";
+  VehicleStatus2["DELETED"] = "deleted";
+  return VehicleStatus2;
+})(VehicleStatus || {});
+var OrgNature = /* @__PURE__ */ ((OrgNature2) => {
+  OrgNature2["PROPERTY_MANAGEMENT_AGENCY"] = "property_management_agency";
+  OrgNature2["SECURITY_AGENCY"] = "security_agency";
+  return OrgNature2;
+})(OrgNature || {});
+var ANPRMode = /* @__PURE__ */ ((ANPRMode2) => {
+  ANPRMode2["TRAFFIC_REDLIST"] = "TrafficRedList";
+  ANPRMode2["TRAFFIC_BLACKLIST"] = "TrafficBlackList";
+  return ANPRMode2;
+})(ANPRMode || {});
 var vehicleSchema = import_joi43.default.object({
   plateNumber: import_joi43.default.string().required(),
-  type: import_joi43.default.string().required().allow(...allowedTypes),
-  category: import_joi43.default.string().required().allow(...allowedCategories),
+  type: import_joi43.default.string().required().valid(...Object.values(VehicleType)),
+  category: import_joi43.default.string().required().valid(...Object.values(VehicleCategory)),
   name: import_joi43.default.string().required(),
   phoneNumber: import_joi43.default.string().optional().allow("", null),
   recNo: import_joi43.default.string().optional().allow("", null),
@@ -15552,7 +15588,8 @@ var vehicleSchema = import_joi43.default.object({
   seasonPassType: import_joi43.default.string().optional().allow("", null),
   start: import_joi43.default.date().optional().allow("", null),
   end: import_joi43.default.date().optional().allow("", null),
-  unitName: import_joi43.default.string().optional().allow("", null)
+  unitName: import_joi43.default.string().optional().allow("", null),
+  status: import_joi43.default.string().optional().valid(...Object.values(VehicleStatus)).allow("")
 });
 function MVehicle(value) {
   const { error } = vehicleSchema.validate(value);
@@ -15581,6 +15618,11 @@ function MVehicle(value) {
       throw new import_node_server_utils80.BadRequestError("Invalid building unit ID format.");
     }
   }
+  const createdAtDate = value.createdAt ? new Date(value.createdAt) : /* @__PURE__ */ new Date();
+  const expiredDate = new Date(createdAtDate);
+  expiredDate.setFullYear(expiredDate.getFullYear() + 10);
+  const createdAt = createdAtDate.toISOString();
+  const expiredAt = value.end ?? expiredDate.toISOString();
   return {
     plateNumber: value.plateNumber ?? "",
     type: value.type ?? "",
@@ -15596,11 +15638,11 @@ function MVehicle(value) {
     nric: value.nric ?? "",
     remarks: value.remarks ?? "",
     seasonPassType: value.seasonPassType ?? "",
-    start: value.start ?? "",
-    end: value.end ?? "",
-    status: value.status ?? "active",
+    start: value.start ?? createdAt,
+    end: value.end ?? expiredAt,
+    status: value.status ?? "active" /* ACTIVE */,
     unitName: value.unitName ?? "",
-    createdAt: value.createdAt ?? /* @__PURE__ */ new Date(),
+    createdAt,
     updatedAt: value.updatedAt ?? "",
     deletedAt: value.deletedAt ?? ""
   };
@@ -15658,18 +15700,44 @@ function useVehicleRepo() {
   }
   const namespace_collection = "vehicles";
   const collection = db.collection(namespace_collection);
-  const { delNamespace, setCache, getCache, delCache } = (0, import_node_server_utils81.useCache)(namespace_collection);
+  const { delNamespace, setCache, getCache } = (0, import_node_server_utils81.useCache)(namespace_collection);
   async function createIndex() {
     try {
       await collection.createIndexes([
         { key: { status: 1 } },
         { key: { type: 1 } },
-        { key: { category: 1 } }
+        { key: { category: 1 } },
+        {
+          key: { nric: 1 },
+          name: "uniq_nric_not_deleted_nonempty",
+          unique: true,
+          partialFilterExpression: {
+            nric: { $type: "string", $gt: "" },
+            deletedAt: ""
+          }
+        }
       ]);
     } catch (error) {
+      console.error("createIndexes error:", error);
       throw new import_node_server_utils81.InternalServerError("Failed to create index on vehicle.");
     }
   }
+  async function createTextIndex() {
+    try {
+      await collection.createIndex({
+        name: "text",
+        plateNumber: "text",
+        level: "text",
+        unitName: "text",
+        phoneNumber: "text",
+        nric: "text"
+      });
+    } catch (error) {
+      throw new import_node_server_utils81.InternalServerError(
+        "Failed to create text index on visitor transaction."
+      );
+    }
+  }
   async function add(value, session) {
     try {
       value = MVehicle(value);
@@ -15701,37 +15769,40 @@ function useVehicleRepo() {
     search = "",
     sort = {},
     type = "",
-    category = ""
+    category = "",
+    status = ""
   }) {
     page = page > 0 ? page - 1 : 0;
-    const query = { status: "active" };
+    const baseQuery = {
+      ...status && { status },
+      ...type && { type },
+      ...type && { type }
+    };
+    let query = { ...baseQuery };
+    sort = Object.keys(sort).length > 0 ? sort : { _id: -1 };
     const cacheOptions = {
-      status: "active",
+      ...status && { status },
+      ...type && { type },
+      ...type && { type },
       page: String(page),
-      limit: String(limit)
+      limit: String(limit),
+      sort: JSON.stringify(sort)
     };
-    sort = Object.keys(sort).length > 0 ? sort : { _id: -1 };
-    cacheOptions.sort = JSON.stringify(sort);
     if (search) {
-      query.$or = [{ name: { $regex: search, $options: "i" } }];
+      query.$text = { $search: search };
       cacheOptions.search = search;
     }
-    if (type) {
-      query.type = type;
-      cacheOptions.type = type;
-    }
-    if (category) {
-      query.category = category;
-      cacheOptions.category = category;
-    }
     const cacheKey = (0, import_node_server_utils81.makeCacheKey)(namespace_collection, cacheOptions);
     const cachedData = await getCache(cacheKey);
     if (cachedData) {
       import_node_server_utils81.logger.info(`Cache hit for key: ${cacheKey}`);
       return cachedData;
     }
+    const escapeRegex = (input) => input.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
     try {
-      const items = await collection.aggregate([
+      let items = [];
+      let length = 0;
+      items = await collection.aggregate([
         { $match: query },
         { $sort: sort },
         { $skip: page * limit },
@@ -15757,17 +15828,65 @@ function useVehicleRepo() {
             level: 1,
             unit: "$units.name",
             plateNumber: 1,
-            recNo: 1
+            recNo: 1,
+            nric: 1
           }
         }
       ]).toArray();
-      const length = await collection.countDocuments(query);
+      length = await collection.countDocuments(query);
+      if ((!items || items.length === 0) && search) {
+        const escaped = escapeRegex(search);
+        const regexQuery = {
+          ...baseQuery,
+          ...type && { type },
+          ...category && { category },
+          $or: [
+            { name: { $regex: escaped, $options: "i" } },
+            { plateNumber: { $regex: escaped, $options: "i" } },
+            { company: { $regex: escaped, $options: "i" } },
+            { level: { $regex: escaped, $options: "i" } },
+            { unitName: { $regex: escaped, $options: "i" } },
+            { contact: { $regex: escaped, $options: "i" } },
+            { nric: { $regex: escaped, $options: "i" } }
+          ]
+        };
+        items = await collection.aggregate([
+          { $match: regexQuery },
+          { $sort: sort },
+          { $skip: page * limit },
+          { $limit: limit },
+          {
+            $lookup: {
+              from: "building-units",
+              localField: "unit",
+              foreignField: "_id",
+              as: "units",
+              pipeline: [{ $project: { name: 1 } }]
+            }
+          },
+          { $unwind: { path: "$units", preserveNullAndEmptyArrays: true } },
+          {
+            $project: {
+              name: 1,
+              type: 1,
+              category: 1,
+              status: 1,
+              phoneNumber: 1,
+              block: 1,
+              level: 1,
+              unit: "$units.name",
+              plateNumber: 1,
+              recNo: 1,
+              nric: 1
+            }
+          }
+        ]).toArray();
+        length = await collection.countDocuments(regexQuery);
+      }
       const data = (0, import_node_server_utils81.paginate)(items, page, limit, length);
-      setCache(cacheKey, data, 15 * 60).then(() => {
-        import_node_server_utils81.logger.info(`Cache set for key: ${cacheKey}`);
-      }).catch((err) => {
-        import_node_server_utils81.logger.error(`Failed to set cache for key: ${cacheKey}`, err);
-      });
+      setCache(cacheKey, data, 15 * 60).then(() => import_node_server_utils81.logger.info(`Cache set for key: ${cacheKey}`)).catch(
+        (err) => import_node_server_utils81.logger.error(`Failed to set cache for key: ${cacheKey}`, err)
+      );
       return data;
     } catch (error) {
       throw error;
@@ -15861,7 +15980,10 @@ function useVehicleRepo() {
             type: 1,
             category: 1,
             status: 1,
-            recNo: 1
+            recNo: 1,
+            start: 1,
+            end: 1,
+            seasonPassType: 1
           }
         }
       ]).toArray();
@@ -15910,7 +16032,7 @@ function useVehicleRepo() {
       throw error2;
     }
   }
-  async function updateVehicle(_id, value) {
+  async function updateVehicle(_id, value, session) {
     try {
       _id = new import_mongodb46.ObjectId(_id);
     } catch (error) {
@@ -15921,7 +16043,11 @@ function useVehicleRepo() {
         ...value,
         updatedAt: (/* @__PURE__ */ new Date()).toISOString()
       };
-      const res = await collection.updateOne({ _id }, { $set: updateValue });
+      const res = await collection.updateOne(
+        { _id },
+        { $set: updateValue },
+        { session }
+      );
       if (res.modifiedCount === 0) {
         throw new import_node_server_utils81.InternalServerError("Unable to update vehicle.");
       }
@@ -16000,8 +16126,126 @@ function useVehicleRepo() {
       );
     }
   }
+  async function getVehiclesByNRIC({
+    page = 1,
+    limit = 10,
+    search = "",
+    sort = {}
+  }) {
+    page = page > 0 ? page - 1 : 0;
+    const baseQuery = {
+      deletedAt: ""
+    };
+    let query = { ...baseQuery };
+    sort = Object.keys(sort).length > 0 ? sort : { _id: -1 };
+    const cacheOptions = {
+      deletedAt: "",
+      page: String(page),
+      limit: String(limit),
+      sort: JSON.stringify(sort)
+    };
+    if (search) {
+      query.$text = { $search: search };
+      cacheOptions.search = search;
+    }
+    const cacheKey = (0, import_node_server_utils81.makeCacheKey)(namespace_collection, cacheOptions);
+    const cachedData = await getCache(cacheKey);
+    if (cachedData) {
+      import_node_server_utils81.logger.info(`Cache hit for key: ${cacheKey}`);
+      return cachedData;
+    }
+    const escapeRegex = (input) => input.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    try {
+      let items = [];
+      let length = 0;
+      items = await collection.aggregate([
+        { $match: query },
+        { $sort: sort },
+        { $skip: page * limit },
+        { $limit: limit },
+        {
+          $project: {
+            name: 1,
+            phoneNumber: 1,
+            plateNumber: 1,
+            recNo: 1,
+            nric: 1,
+            status: 1,
+            type: 1
+          }
+        }
+      ]).toArray();
+      length = await collection.countDocuments(query);
+      if ((!items || items.length === 0) && search) {
+        const escaped = escapeRegex(search);
+        const regexQuery = {
+          ...baseQuery,
+          $or: [
+            { name: { $regex: escaped, $options: "i" } },
+            { plateNumber: { $regex: escaped, $options: "i" } },
+            { level: { $regex: escaped, $options: "i" } },
+            { nric: { $regex: escaped, $options: "i" } }
+          ]
+        };
+        items = await collection.aggregate([
+          { $match: regexQuery },
+          { $sort: sort },
+          { $skip: page * limit },
+          { $limit: limit },
+          {
+            $project: {
+              name: 1,
+              phoneNumber: 1,
+              plateNumber: 1,
+              recNo: 1,
+              nric: 1,
+              status: 1,
+              type: 1
+            }
+          }
+        ]).toArray();
+        length = await collection.countDocuments(regexQuery);
+      }
+      const data = (0, import_node_server_utils81.paginate)(items, page, limit, length);
+      setCache(cacheKey, data, 15 * 60).then(() => import_node_server_utils81.logger.info(`Cache set for key: ${cacheKey}`)).catch(
+        (err) => import_node_server_utils81.logger.error(`Failed to set cache for key: ${cacheKey}`, err)
+      );
+      return data;
+    } catch (error) {
+      throw error;
+    }
+  }
+  async function deleteExpiredVehicles(session) {
+    try {
+      const tenYearsAgo = /* @__PURE__ */ new Date();
+      tenYearsAgo.setFullYear(tenYearsAgo.getFullYear() - 10);
+      const res = await collection.updateMany(
+        {
+          status: { $ne: "deleted" },
+          end: { $exists: true, $lte: tenYearsAgo }
+          // check only end
+        },
+        { $set: { status: "deleted", deletedAt: /* @__PURE__ */ new Date() } },
+        { session }
+      );
+      if (res.modifiedCount === 0)
+        throw new import_node_server_utils81.InternalServerError("Unable to delete vehicle.");
+      delNamespace().then(() => {
+        import_node_server_utils81.logger.info(`Cache cleared for namespace: ${namespace_collection}`);
+      }).catch((err) => {
+        import_node_server_utils81.logger.error(
+          `Failed to clear cache for namespace: ${namespace_collection}`,
+          err
+        );
+      });
+      return res.modifiedCount;
+    } catch (error) {
+      throw error;
+    }
+  }
   return {
     createIndex,
+    createTextIndex,
     add,
     getVehicles,
     getSeasonPassTypes,
@@ -16009,7 +16253,9 @@ function useVehicleRepo() {
     updateVehicle,
     deleteVehicle,
     getByPlaceNumber,
-    getVehicleByPlateNumber
+    getVehicleByPlateNumber,
+    getVehiclesByNRIC,
+    deleteExpiredVehicles
   };
 }
 
@@ -16395,7 +16641,7 @@ function useDahuaService() {
       username: import_joi45.default.string().required(),
       password: import_joi45.default.string().required(),
       plateNumber: import_joi45.default.string().required(),
-      mode: import_joi45.default.string().valid("TrafficBlackList", "TrafficRedList").required(),
+      mode: import_joi45.default.string().valid(...Object.values(ANPRMode)).required(),
       start: import_joi45.default.string().isoDate().optional().allow("", null),
       end: import_joi45.default.string().isoDate().optional().allow("", null),
       owner: import_joi45.default.string().optional().allow("", null)
@@ -16419,7 +16665,7 @@ function useDahuaService() {
         host: value.host,
         username: value.username,
         password: value.password,
-        endpoint: `/cgi-bin/recordUpdater.cgi?action=insert&name=${value.mode}&PlateNumber=${value.plateNumber}&BeginTime=${value.start}&CancelTime=${value.end}&+OpenGate=true&MasterOfCar=${value.owner}`
+        endpoint: `/cgi-bin/recordUpdater.cgi?action=insert&name=${value.mode}&PlateNumber=${value.plateNumber}&BeginTime=${value.start}&CancelTime=${value.end}&OpenGate=true&MasterOfCar=${value.owner}`
       });
       return response;
     } catch (error2) {
@@ -16461,18 +16707,148 @@ function useDahuaService() {
 
 // src/services/vehicle.service.ts
 var import_node_server_utils83 = require("@7365admin1/node-server-utils");
+function formatDahuaDate(date) {
+  const pad = (n) => String(n).padStart(2, "0");
+  return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(
+    date.getDate()
+  )} ${pad(date.getHours())}:${pad(date.getMinutes())}:${pad(
+    date.getSeconds()
+  )}`;
+}
 function useVehicleService() {
-  const { add: _add, deleteVehicle: _deleteVehicle } = useVehicleRepo();
+  const {
+    add: _add,
+    deleteVehicle: _deleteVehicle,
+    updateVehicle: _updateVehicle,
+    getVehicleById: _getVehicleById,
+    deleteExpiredVehicles: _deleteExpiredVehicles
+  } = useVehicleRepo();
   const {
     addPlateNumber: _addPlateNumber,
     removePlateNumber: _removePlateNumber
   } = useDahuaService();
   const { getAllCameraWithPassword: _getAllSiteCameras } = useSiteCameraRepo();
+  const { getById: _getById } = useOrgRepo();
   async function add(value) {
+    const session = import_node_server_utils83.useAtlas.getClient()?.startSession();
+    if (!session)
+      throw new Error("Unable to start session for vehicle service.");
+    const org = await _getById(value.org);
+    if (!org)
+      throw new import_node_server_utils83.BadRequestError("Org not found");
+    if (!Object.values(OrgNature).includes(org.nature)) {
+      throw new import_node_server_utils83.BadRequestError(
+        "This organization is not allowed to add vehicles."
+      );
+    }
+    value.status = "active" /* ACTIVE */;
+    const addedBySecurity = org.nature === "security_agency" /* SECURITY_AGENCY */;
+    const addedByPM = org.nature === "property_management_agency" /* PROPERTY_MANAGEMENT_AGENCY */;
+    if (addedBySecurity)
+      value.status = "pending" /* PENDING */;
+    const isBlocklist = value.type === "blocklist" /* BLOCKLIST */;
+    if (isBlocklist)
+      value.status = "inactive" /* INACTIVE */;
+    const _type = value.type;
+    const _mode = isBlocklist ? "TrafficBlackList" /* TRAFFIC_BLACKLIST */ : "TrafficRedList" /* TRAFFIC_REDLIST */;
+    const hasStart = typeof value.start === "string" ? value.start.trim() !== "" : !!value.start;
+    const hasEnd = typeof value.end === "string" ? value.end.trim() !== "" : !!value.end;
+    let startDate = null;
+    let endDate = null;
+    let start = "";
+    let end = "";
+    let startDateDahua;
+    let endDateDahua;
+    if (addedByPM && !hasStart && !hasEnd) {
+      startDate = /* @__PURE__ */ new Date();
+      endDate = new Date(startDate);
+      endDate.setFullYear(endDate.getFullYear() + 10);
+      start = startDate.toISOString();
+      end = endDate.toISOString();
+      startDateDahua = formatDahuaDate(startDate);
+      endDateDahua = formatDahuaDate(endDate);
+    } else {
+      if (hasStart) {
+        startDate = new Date(value.start);
+        start = startDate.toISOString();
+        startDateDahua = formatDahuaDate(startDate);
+      }
+      if (hasEnd) {
+        endDate = new Date(value.end);
+        end = endDate.toISOString();
+        endDateDahua = formatDahuaDate(endDate);
+      }
+    }
+    const owner = String(value.name ?? "").substring(0, 15);
+    try {
+      session.startTransaction();
+      let message = "Vehicle plate number needs approval from property management.";
+      if (value.status && value.status !== "pending" /* PENDING */) {
+        const siteCameras = [];
+        let page = 1;
+        let pages = 1;
+        const limit = 20;
+        do {
+          const siteCameraReq = await _getAllSiteCameras({
+            site: value.site,
+            type: "anpr",
+            direction: ["both", "entry"],
+            page,
+            limit
+          });
+          pages = siteCameraReq.pages || 1;
+          siteCameras.push(...siteCameraReq.items);
+          page++;
+        } while (page < pages);
+        if (!siteCameras.length)
+          throw new import_node_server_utils83.BadRequestError("No site cameras found.");
+        for (const camera of siteCameras) {
+          const { host, username, password } = camera;
+          const dahuaPayload = {
+            host,
+            username,
+            password,
+            plateNumber: value.plateNumber,
+            mode: _mode,
+            owner,
+            ...startDateDahua ? { start: startDateDahua } : "",
+            ...endDateDahua ? { end: endDateDahua } : ""
+          };
+          const dahuaResponse = await _addPlateNumber(dahuaPayload);
+          if (dahuaResponse?.statusCode !== 200) {
+            throw new import_node_server_utils83.BadRequestError(
+              `Failed to add plate number to ANPR ${_type}`
+            );
+          }
+          const responseData = dahuaResponse?.data.toString("utf-8");
+          value.recNo = responseData.split("=")[1]?.trim();
+          message = `Vehicle plate number added to ${_type} successfully.`;
+        }
+      }
+      const formattedValue = {
+        ...value,
+        start,
+        // ISO string or ""
+        end
+        // ISO string or ""
+      };
+      await _add(formattedValue, session);
+      await session.commitTransaction();
+      return message;
+    } catch (error) {
+      import_node_server_utils83.logger.error("Error in vehicle service add:", error);
+      await session.abortTransaction();
+      throw error;
+    } finally {
+      session.endSession();
+    }
+  }
+  async function deleteVehicle(_id, recno, site, type, bypass = false) {
     const session = import_node_server_utils83.useAtlas.getClient()?.startSession();
     if (!session) {
       throw new Error("Unable to start session for vehicle service.");
     }
+    const _mode = type !== "whitelist" /* WHITELIST */ ? "TrafficBlackList" /* TRAFFIC_BLACKLIST */ : "TrafficRedList" /* TRAFFIC_REDLIST */;
     try {
       session.startTransaction();
       const siteCameras = [];
@@ -16481,9 +16857,8 @@ function useVehicleService() {
       const limit = 20;
       do {
         const siteCameraReq = await _getAllSiteCameras({
-          site: value.site,
+          site,
           type: "anpr",
-          direction: ["both", "entry"],
           page,
           limit
         });
@@ -16495,55 +16870,82 @@ function useVehicleService() {
         throw new import_node_server_utils83.BadRequestError("No site cameras found.");
       }
       for (const camera of siteCameras) {
-        const { host, username, password } = camera;
+        const host = camera.host;
+        const username = camera.username;
+        const password = camera.password;
         const dahuaPayload = {
           host,
           username,
           password,
-          plateNumber: value.plateNumber,
-          mode: "TrafficRedList",
-          start: value.start ? new Date(value.start).toISOString() : "",
-          end: value.end ? new Date(value.end).toISOString() : "",
-          owner: value.name
+          recno,
+          mode: _mode
         };
-        const dahuaResponse = await _addPlateNumber(dahuaPayload);
-        if (dahuaResponse?.statusCode !== 200) {
-          throw new import_node_server_utils83.BadRequestError("Failed to add plate number to ANPR");
+        const dahuaResponse = await _removePlateNumber(dahuaPayload);
+        if (!bypass && dahuaResponse?.statusCode !== 200) {
+          throw new import_node_server_utils83.BadRequestError(
+            `Failed to remove plate number to ANPR from ${type}`
+          );
         }
-        const responseData = dahuaResponse?.data.toString("utf-8");
-        value.recNo = responseData.split("=")[1]?.trim();
-        const formattedValue = {
-          ...value,
-          start: value.start ? new Date(value.start).toISOString() : "",
-          end: value.end ? new Date(value.end).toISOString() : ""
-        };
-        await _add(formattedValue, session);
       }
+      await _deleteVehicle(_id, session);
       await session.commitTransaction();
-      return "Vehicle plate number added successfully.";
+      return `Vehicle plate number deleted from ${type} record successfully.`;
     } catch (error) {
-      import_node_server_utils83.logger.error("Error in vehicle service add:", error);
       await session.abortTransaction();
-      throw error;
+      if (error instanceof import_node_server_utils83.AppError)
+        throw error;
+      throw new import_node_server_utils83.InternalServerError("Failed to delete vehicle");
     } finally {
       session.endSession();
     }
   }
-  async function deleteVehicle(_id, recno, site, bypass = false) {
+  async function approveVehicleById(id, orgId, siteId) {
     const session = import_node_server_utils83.useAtlas.getClient()?.startSession();
     if (!session) {
       throw new Error("Unable to start session for vehicle service.");
     }
+    const org = await _getById(orgId);
+    if (!org)
+      throw new import_node_server_utils83.BadRequestError("Org not found");
+    const allowedNatures2 = ["property_management_agency"];
+    if (!allowedNatures2.includes(org.nature)) {
+      throw new import_node_server_utils83.BadRequestError(
+        "Only property management can approve vehicles."
+      );
+    }
+    const vehicle = await _getVehicleById(id);
+    if (!vehicle) {
+      throw new import_node_server_utils83.BadRequestError("Vehicle not found");
+    }
+    const owner = vehicle.name.substring(0, 15);
+    const hasStart = typeof vehicle.start === "string" ? vehicle.start.trim() !== "" : !!vehicle.start;
+    const hasEnd = typeof vehicle.end === "string" ? vehicle.end.trim() !== "" : !!vehicle.end;
+    let startDate = null;
+    let endDate = null;
+    if (!hasStart && !hasEnd) {
+      startDate = /* @__PURE__ */ new Date();
+      endDate = new Date(startDate);
+      endDate.setFullYear(endDate.getFullYear() + 10);
+    } else {
+      startDate = hasStart ? new Date(vehicle.start) : null;
+      endDate = hasEnd ? new Date(vehicle.end) : null;
+    }
+    const startIso = startDate ? startDate.toISOString() : "";
+    const endIso = endDate ? endDate.toISOString() : "";
+    const startDahua = startDate ? formatDahuaDate(startDate) : "";
+    const endDahua = endDate ? formatDahuaDate(endDate) : "";
     try {
       session.startTransaction();
       const siteCameras = [];
       let page = 1;
       let pages = 1;
       const limit = 20;
+      let value = {};
       do {
         const siteCameraReq = await _getAllSiteCameras({
-          site,
+          site: siteId,
           type: "anpr",
+          direction: ["both", "entry"],
           page,
           limit
         });
@@ -16555,24 +16957,51 @@ function useVehicleService() {
         throw new import_node_server_utils83.BadRequestError("No site cameras found.");
       }
       for (const camera of siteCameras) {
-        const host = camera.host;
-        const username = camera.username;
-        const password = camera.password;
+        const { host, username, password } = camera;
         const dahuaPayload = {
           host,
           username,
           password,
-          recno,
-          mode: "TrafficRedList"
+          plateNumber: vehicle.plateNumber,
+          mode: "TrafficRedList" /* TRAFFIC_REDLIST */,
+          start: startDahua,
+          end: endDahua,
+          owner
         };
-        const dahuaResponse = await _removePlateNumber(dahuaPayload);
-        if (!bypass && dahuaResponse?.statusCode !== 200) {
-          throw new import_node_server_utils83.BadRequestError("Failed to remove plate number to ANPR");
+        const dahuaResponse = await _addPlateNumber(dahuaPayload);
+        if (dahuaResponse?.statusCode !== 200) {
+          throw new import_node_server_utils83.BadRequestError("Failed to add plate number to ANPR");
         }
+        const responseData = dahuaResponse?.data.toString("utf-8");
+        value.recNo = responseData.split("=")[1]?.trim();
       }
-      await _deleteVehicle(_id, session);
+      value.status = "active";
+      const formattedValue = {
+        ...value,
+        start: startIso,
+        end: endIso
+      };
+      await _updateVehicle(id, formattedValue, session);
+      await session.commitTransaction();
+      return "Vehicle plate number approved and added successfully.";
+    } catch (error) {
+      import_node_server_utils83.logger.error("Error in vehicle service add:", error);
+      await session.abortTransaction();
+      throw error;
+    } finally {
+      session.endSession();
+    }
+  }
+  async function processDeletingExpiredVehicles() {
+    const session = import_node_server_utils83.useAtlas.getClient()?.startSession();
+    if (!session) {
+      throw new Error("Unable to start session for vehicle service.");
+    }
+    try {
+      session.startTransaction();
+      await _deleteExpiredVehicles();
       await session.commitTransaction();
-      return "Vehicle plate number deleted successfully.";
+      return `Expired Vehicle plate numbers deleted successfully.`;
     } catch (error) {
       await session.abortTransaction();
       if (error instanceof import_node_server_utils83.AppError)
@@ -16584,7 +17013,9 @@ function useVehicleService() {
   }
   return {
     add,
-    deleteVehicle
+    deleteVehicle,
+    approveVehicleById,
+    processDeletingExpiredVehicles
   };
 }
 
@@ -16592,12 +17023,17 @@ function useVehicleService() {
 var import_node_server_utils84 = require("@7365admin1/node-server-utils");
 var import_joi46 = __toESM(require("joi"));
 function useVehicleController() {
-  const { add: _add, deleteVehicle: _deleteVehicle } = useVehicleService();
+  const {
+    add: _add,
+    deleteVehicle: _deleteVehicle,
+    approveVehicleById: _approveVehicleById
+  } = useVehicleService();
   const {
     getSeasonPassTypes: _getSeasonPassTypes,
     getVehicles: _getVehicles,
     getVehicleById: _getVehicleById,
-    updateVehicle: _updateVehicle
+    updateVehicle: _updateVehicle,
+    getVehiclesByNRIC: _getVehiclesByNRIC
   } = useVehicleRepo();
   async function add(req, res, next) {
     const payload = req.body;
@@ -16628,8 +17064,9 @@ function useVehicleController() {
       limit: import_joi46.default.number().integer().min(1).max(100).allow("", null).default(10),
       sort: import_joi46.default.string().pattern(/^([a-zA-Z0-9_]+)(,[a-zA-Z0-9_]+)*$/).optional().allow("", ...allowedFields),
       order: import_joi46.default.string().pattern(/^(asc|desc)(,(asc|desc))*$/).optional().allow("", ...allowedOrder),
-      type: import_joi46.default.string().optional().allow("", ...allowedTypes),
-      category: import_joi46.default.string().optional().allow("", ...allowedCategories)
+      type: import_joi46.default.string().optional().valid(...Object.values(VehicleType)),
+      category: import_joi46.default.string().optional().valid(...Object.values(VehicleCategory)),
+      status: import_joi46.default.string().optional().valid(...Object.values(VehicleStatus)).allow("")
     });
     const query = { ...req.query };
     const { error } = validation.validate(query);
@@ -16643,6 +17080,7 @@ function useVehicleController() {
     const limit = parseInt(req.query.limit ?? "10");
     const type = req.query.type ?? "";
     const category = req.query.category ?? "";
+    const status = req.query.status ?? "";
     const sortObj = {};
     const sortFields = String(req.query.sort).split(",");
     const sortOrders = String(req.query.order).split(",");
@@ -16659,7 +17097,8 @@ function useVehicleController() {
         limit,
         sort: sortObj,
         type,
-        category
+        category,
+        status
       });
       res.json(data);
       return;
@@ -16715,7 +17154,8 @@ function useVehicleController() {
       block: import_joi46.default.number().integer().optional().allow(0, null),
       level: import_joi46.default.string().optional().allow("", null),
       unit: import_joi46.default.string().optional().allow("", null),
-      plateNumber: import_joi46.default.string().optional().allow("", null)
+      plateNumber: import_joi46.default.string().optional().allow("", null),
+      nric: import_joi46.default.string().optional().allow("", null)
     });
     const _id = req.params.id;
     const payload = { ...req.body };
@@ -16736,23 +17176,23 @@ function useVehicleController() {
     }
   }
   async function deleteVehicle(req, res, next) {
-    const site = req.params.site ?? "";
-    const _id = req.params.id ?? "";
-    const recno = req.params.recno ?? "";
-    const bypass = req.query.bypass === "true";
+    const _id = req.params.id;
     const deleteVehicleSchema = import_joi46.default.object({
-      _id: import_joi46.default.string().hex().required(),
+      _id: import_joi46.default.string().hex().length(24).required(),
       recno: import_joi46.default.string().required(),
-      bypass: import_joi46.default.boolean().optional()
+      site: import_joi46.default.string().hex().length(24).required(),
+      type: import_joi46.default.string().valid("whitelist", "blocklist").required(),
+      bypass: import_joi46.default.boolean().optional().default(true)
     });
-    const { error } = deleteVehicleSchema.validate({ _id, recno, bypass });
+    const { error, value } = deleteVehicleSchema.validate({ _id, ...req.body });
     if (error) {
       import_node_server_utils84.logger.log({ level: "error", message: error.message });
       next(new import_node_server_utils84.BadRequestError(error.message));
       return;
     }
+    const { recno, site, type, bypass } = value;
     try {
-      const data = await _deleteVehicle(_id, recno, site, bypass);
+      const data = await _deleteVehicle(_id, recno, site, type, bypass);
       res.json({
         message: "Vehicle deleted successfully.",
         data
@@ -16763,13 +17203,83 @@ function useVehicleController() {
       return;
     }
   }
+  async function approveVehicleById(req, res, next) {
+    const validation = import_joi46.default.object({
+      _id: import_joi46.default.string().hex().length(24).required(),
+      org: import_joi46.default.string().hex().length(24).required(),
+      site: import_joi46.default.string().hex().length(24).required()
+    });
+    const _id = req.params.id;
+    const payload = { ...req.body };
+    const { error, value } = validation.validate({ _id, ...payload });
+    if (error) {
+      import_node_server_utils84.logger.log({ level: "error", message: error.message });
+      next(new import_node_server_utils84.BadRequestError(error.message));
+      return;
+    }
+    try {
+      await _approveVehicleById(value._id, value.org, value.site);
+      res.json({ message: "Successfully approved and updated vehicle." });
+      return;
+    } catch (error2) {
+      import_node_server_utils84.logger.log({ level: "error", message: error2.message });
+      next(error2);
+      return;
+    }
+  }
+  async function getVehiclesByNRIC(req, res, next) {
+    const allowedFields = ["start", "end"];
+    const allowedOrder = ["asc", "desc"];
+    const validation = import_joi46.default.object({
+      search: import_joi46.default.string().optional().allow("", null),
+      page: import_joi46.default.number().integer().min(1).allow("", null).default(1),
+      limit: import_joi46.default.number().integer().min(1).max(100).allow("", null).default(10),
+      sort: import_joi46.default.string().pattern(/^([a-zA-Z0-9_]+)(,[a-zA-Z0-9_]+)*$/).optional().allow("", ...allowedFields),
+      order: import_joi46.default.string().pattern(/^(asc|desc)(,(asc|desc))*$/).optional().allow("", ...allowedOrder)
+    });
+    const query = { ...req.query };
+    const { error } = validation.validate(query);
+    if (error) {
+      import_node_server_utils84.logger.log({ level: "error", message: error.message });
+      next(new import_node_server_utils84.BadRequestError(error.message));
+      return;
+    }
+    const search = req.query.search ?? "";
+    const page = parseInt(req.query.page ?? "1");
+    const limit = parseInt(req.query.limit ?? "10");
+    const sortObj = {};
+    const sortFields = String(req.query.sort).split(",");
+    const sortOrders = String(req.query.order).split(",");
+    sortFields.forEach((field, index) => {
+      if (allowedFields.includes(field)) {
+        const order = sortOrders[index] === "asc" ? 1 : -1;
+        sortObj[field] = order;
+      }
+    });
+    try {
+      const data = await _getVehiclesByNRIC({
+        search,
+        page,
+        limit,
+        sort: sortObj
+      });
+      res.json(data);
+      return;
+    } catch (error2) {
+      import_node_server_utils84.logger.log({ level: "error", message: error2.message });
+      next(error2);
+      return;
+    }
+  }
   return {
     add,
     getVehicles,
     getSeasonPassTypes,
     getVehicleById,
     updateVehicle,
-    deleteVehicle
+    deleteVehicle,
+    approveVehicleById,
+    getVehiclesByNRIC
   };
 }
 
@@ -16868,7 +17378,7 @@ function useSiteCameraController() {
   }
   async function getAll(req, res, next) {
     const query = req.query;
-    const allowedTypes2 = ["ip", "exit", "entry", "both"];
+    const allowedTypes = ["ip", "exit", "entry", "both"];
     const validation = import_joi47.default.object({
       type: import_joi47.default.string().optional(),
       site: import_joi47.default.string().optional(),
@@ -24228,20 +24738,19 @@ function useDocumentManagementController() {
 // src/models/bulletin-board.model.ts
 var import_joi75 = __toESM(require("joi"));
 var import_mongodb71 = require("mongodb");
+var BULLETIN_RECIPIENTS = [
+  "resident",
+  "security_agency",
+  "cleaning_services",
+  "mechanical_electrical",
+  "property_management_agency"
+];
+var STATUS_VALUES = ["active", "expired", "deleted"];
 var schemaBulletinBoard = import_joi75.default.object({
   _id: import_joi75.default.string().hex().optional().allow("", null),
   site: import_joi75.default.string().hex().optional().allow("", null),
   orgId: import_joi75.default.string().hex().optional().allow("", null),
-  recipients: import_joi75.default.array().items(
-    import_joi75.default.string().valid(
-      "admin",
-      "organization",
-      "site",
-      "service-provider",
-      "service-provider-member",
-      "resident"
-    )
-  ).optional(),
+  recipients: import_joi75.default.array().items(import_joi75.default.string().valid(...BULLETIN_RECIPIENTS)).unique().optional(),
   title: import_joi75.default.string().optional().allow("", null),
   content: import_joi75.default.string().optional().allow("", null),
   file: import_joi75.default.array().items(
@@ -24254,23 +24763,14 @@ var schemaBulletinBoard = import_joi75.default.object({
   noExpiration: import_joi75.default.boolean().optional(),
   startDate: import_joi75.default.date().optional().allow("", null),
   endDate: import_joi75.default.date().optional().allow("", null),
-  status: import_joi75.default.string().optional().allow("", null),
+  status: import_joi75.default.string().valid(...STATUS_VALUES).optional(),
   createdAt: import_joi75.default.date().optional().allow(null),
   updatedAt: import_joi75.default.date().optional().allow(null),
   deletedAt: import_joi75.default.date().optional().allow(null)
 });
 var schemaUpdateBulletinBoard = import_joi75.default.object({
   _id: import_joi75.default.string().hex().required(),
-  recipients: import_joi75.default.array().items(
-    import_joi75.default.string().valid(
-      "admin",
-      "organization",
-      "site",
-      "service-provider",
-      "service-provider-member",
-      "resident"
-    )
-  ).optional(),
+  recipients: import_joi75.default.array().items(import_joi75.default.string().valid(...BULLETIN_RECIPIENTS)).unique().optional(),
   title: import_joi75.default.string().optional().allow("", null),
   content: import_joi75.default.string().optional().allow("", null),
   file: import_joi75.default.array().items(
@@ -24283,7 +24783,7 @@ var schemaUpdateBulletinBoard = import_joi75.default.object({
   noExpiration: import_joi75.default.boolean().optional(),
   startDate: import_joi75.default.date().optional().allow("", null),
   endDate: import_joi75.default.date().optional().allow("", null),
-  status: import_joi75.default.string().optional().allow("", null)
+  status: import_joi75.default.string().valid(...STATUS_VALUES).optional()
 });
 function MBulletinBoard(value) {
   const { error } = schemaBulletinBoard.validate(value);
@@ -24374,7 +24874,8 @@ function useBulletinBoardRepo() {
     limit = 10,
     sort = {},
     site = "",
-    status = "active"
+    status = "active",
+    recipients = []
   }, session) {
     page = page > 0 ? page - 1 : 0;
     try {
@@ -24384,7 +24885,9 @@ function useBulletinBoardRepo() {
     }
     const query = {
       site,
-      status
+      status,
+      ...search && { $text: { $search: search } },
+      ...recipients?.length && { recipients: { $in: recipients } }
     };
     sort = Object.keys(sort).length > 0 ? sort : { _id: -1 };
     const cacheOptions = {
@@ -24392,12 +24895,10 @@ function useBulletinBoardRepo() {
       status,
       sort: JSON.stringify(sort),
       page,
-      limit
+      limit,
+      ...search && { search },
+      ...recipients?.length && { recipients: recipients.sort().join(",") }
     };
-    if (search) {
-      query.$text = { $search: search };
-      cacheOptions.search = search;
-    }
     const cacheKey = (0, import_node_server_utils131.makeCacheKey)(namespace_collection, cacheOptions);
     const cachedData = await getCache(cacheKey);
     if (cachedData) {
@@ -24489,7 +24990,7 @@ function useBulletinBoardRepo() {
       throw error;
     }
   }
-  async function deleteBulletinBoardById(_id) {
+  async function deleteBulletinBoardById(_id, session) {
     try {
       _id = new import_mongodb72.ObjectId(_id);
     } catch (error) {
@@ -24501,7 +25002,11 @@ function useBulletinBoardRepo() {
         updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
         deletedAt: (/* @__PURE__ */ new Date()).toISOString()
       };
-      const res = await collection.updateOne({ _id }, { $set: updateValue });
+      const res = await collection.updateOne(
+        { _id },
+        { $set: updateValue },
+        { session }
+      );
       if (res.modifiedCount === 0) {
         throw new import_node_server_utils131.InternalServerError("Unable to delete bulletin board.");
       }
@@ -24567,8 +25072,11 @@ function useBulletinBoardService() {
   const {
     add: _add,
     updateBulletinBoardById: _updateBulletinBoardById,
-    processExpiredBulletinBoards: _processExpiredBulletinBoards
+    processExpiredBulletinBoards: _processExpiredBulletinBoards,
+    deleteBulletinBoardById: _deleteBulletinBoardById,
+    getBulletinBoardById: _getBulletinBoardById
   } = useBulletinBoardRepo();
+  const { deleteFileById: _deleteFileById } = useFileRepo();
   async function add(value) {
     const session = import_node_server_utils132.useAtlas.getClient()?.startSession();
     session?.startTransaction();
@@ -24611,10 +25119,31 @@ function useBulletinBoardService() {
       session?.endSession();
     }
   }
+  async function deleteBulletinBoardById(id) {
+    const session = import_node_server_utils132.useAtlas.getClient()?.startSession();
+    session?.startTransaction();
+    try {
+      const existingBulletinBoard = await _getBulletinBoardById(id);
+      if (Array.isArray(existingBulletinBoard.file)) {
+        for (const file of existingBulletinBoard.file) {
+          await _deleteFileById(file, session);
+        }
+      }
+      await _deleteBulletinBoardById(id, session);
+      await session?.commitTransaction();
+      return "Successfully deleted bulletin board.";
+    } catch (error) {
+      await session?.abortTransaction();
+      throw error;
+    } finally {
+      session?.endSession();
+    }
+  }
   return {
     add,
     updateBulletinBoardById,
-    processExpiredBulletinBoards
+    processExpiredBulletinBoards,
+    deleteBulletinBoardById
   };
 }
 
@@ -24622,12 +25151,12 @@ function useBulletinBoardService() {
 var import_node_server_utils133 = require("@7365admin1/node-server-utils");
 var import_joi76 = __toESM(require("joi"));
 function useBulletinBoardController() {
-  const { add: _add, updateBulletinBoardById: _updateBulletinBoardById } = useBulletinBoardService();
   const {
-    getAll: _getAll,
-    getBulletinBoardById: _getBulletinBoardById,
+    add: _add,
+    updateBulletinBoardById: _updateBulletinBoardById,
     deleteBulletinBoardById: _deleteBulletinBoardById
-  } = useBulletinBoardRepo();
+  } = useBulletinBoardService();
+  const { getAll: _getAll, getBulletinBoardById: _getBulletinBoardById } = useBulletinBoardRepo();
   async function add(req, res, next) {
     const payload = { ...req.body };
     const { error } = schemaBulletinBoard.validate(payload, {
@@ -24659,12 +25188,23 @@ function useBulletinBoardController() {
       sort: import_joi76.default.string().pattern(/^([a-zA-Z0-9_]+)(,[a-zA-Z0-9_]+)*$/).optional().allow("", ...allowedFields),
       order: import_joi76.default.string().pattern(/^(asc|desc)(,(asc|desc))*$/).optional().allow("", ...allowedOrder),
       site: import_joi76.default.string().hex().required(),
-      status: import_joi76.default.string().optional().allow(null, "")
+      status: import_joi76.default.string().optional().allow(null, ""),
+      recipients: import_joi76.default.string().optional().allow("", null).custom((value, helpers) => {
+        const parsed = value.split(",").map((v) => v.trim()).filter(Boolean);
+        for (const r of parsed) {
+          if (!BULLETIN_RECIPIENTS.includes(r)) {
+            return helpers.error("any.only");
+          }
+        }
+        return value;
+      }).messages({
+        "any.only": `Recipients must be one of: ${BULLETIN_RECIPIENTS.join(
+          ", "
+        )}`
+      })
     });
     const query = { ...req.query };
-    const { error } = validation.validate(query, {
-      abortEarly: false
-    });
+    const { error } = validation.validate(query, { abortEarly: false });
     if (error) {
       const messages = error.details.map((d) => d.message).join(", ");
       import_node_server_utils133.logger.log({ level: "error", message: messages });
@@ -24676,9 +25216,15 @@ function useBulletinBoardController() {
     const limit = parseInt(req.query.limit ?? "10");
     const site = req.query.site ?? "";
     const status = req.query.status ?? "active";
+    const recipientsRaw = req.query.recipients ?? "";
+    const recipients = recipientsRaw && typeof recipientsRaw === "string" ? Array.from(
+      new Set(
+        recipientsRaw.split(",").map((r) => r.trim()).filter(Boolean)
+      )
+    ) : [];
     const sortObj = {};
-    const sortFields = String(req.query.sort).split(",");
-    const sortOrders = String(req.query.order).split(",");
+    const sortFields = String(req.query.sort ?? "").split(",").filter(Boolean);
+    const sortOrders = String(req.query.order ?? "").split(",").filter(Boolean);
     sortFields.forEach((field, index) => {
       if (allowedFields.includes(field)) {
         const order = sortOrders[index] === "asc" ? 1 : -1;
@@ -24692,7 +25238,8 @@ function useBulletinBoardController() {
         limit,
         sort: sortObj,
         site,
-        status
+        status,
+        recipients
       });
       res.status(200).json(data);
       return;
@@ -24775,6 +25322,16 @@ function useBulletinBoardController() {
 var import_node_server_utils134 = require("@7365admin1/node-server-utils");
 var import_mongodb73 = require("mongodb");
 var import_joi77 = __toESM(require("joi"));
+
+// src/types/enums/billing-frequency.enum.ts
+var EBillingFrequency = /* @__PURE__ */ ((EBillingFrequency2) => {
+  EBillingFrequency2["MONTHLY"] = "monthly";
+  EBillingFrequency2["QAURTERLY"] = "quarterly";
+  EBillingFrequency2["ANNUALLY"] = "annually";
+  return EBillingFrequency2;
+})(EBillingFrequency || {});
+
+// src/models/site-billing-item.model.ts
 var schemaUnits = import_joi77.default.object({
   _id: import_joi77.default.string().hex().optional(),
   name: import_joi77.default.string().optional()
@@ -24785,7 +25342,7 @@ var schemaBillingItem = import_joi77.default.object({
   org: import_joi77.default.string().hex().required(),
   name: import_joi77.default.string().required(),
   amount: import_joi77.default.number().required(),
-  frequency: import_joi77.default.string().valid("month", "quarter", "annual").required(),
+  frequency: import_joi77.default.string().valid(...Object.values(EBillingFrequency)).required(),
   billingType: import_joi77.default.string().valid("recurring", "non-recurring").required(),
   dueInDays: import_joi77.default.number().optional().allow(null, ""),
   date: import_joi77.default.string().required(),
@@ -24810,7 +25367,7 @@ var schemaUpdateSiteBillingItem = import_joi77.default.object({
   org: import_joi77.default.string().hex().optional().allow(null, ""),
   name: import_joi77.default.string().optional().allow(null, ""),
   amount: import_joi77.default.number().optional().allow(null, ""),
-  frequency: import_joi77.default.string().valid("month", "quarter", "annual").optional().allow(null, ""),
+  frequency: import_joi77.default.string().valid(...Object.values(EBillingFrequency)).optional().allow(null, ""),
   billingType: import_joi77.default.string().valid("recurring", "non-recurring").optional().allow(null, ""),
   dueInDays: import_joi77.default.number().optional().allow(null, ""),
   date: import_joi77.default.string().optional().allow(null, ""),
@@ -24955,7 +25512,16 @@ function useSiteBillingItemRepo() {
       ...search && {
         $or: [
           { name: { $regex: search, $options: "i" } },
-          { frequency: { $regex: search, $options: "i" } }
+          { frequency: { $regex: search, $options: "i" } },
+          {
+            $expr: {
+              $regexMatch: {
+                input: { $toString: "$totalAmount" },
+                regex: search,
+                options: "i"
+              }
+            }
+          }
         ]
       },
       ...import_mongodb74.ObjectId.isValid(site) && { site: new import_mongodb74.ObjectId(site) }
@@ -26105,7 +26671,8 @@ function useEventManagementRepo() {
     sort = {},
     site = "",
     status = "",
-    type = ""
+    type = "",
+    date = ""
   }, session) {
     page = page > 0 ? page - 1 : 0;
     try {
@@ -26116,7 +26683,13 @@ function useEventManagementRepo() {
     const baseQuery = {
       site,
       status: status ? status : { $ne: "deleted" },
-      ...type && { type }
+      ...type && { type },
+      ...date && {
+        dateTime: {
+          $gte: `${date}T00:00:00.000Z`,
+          $lt: `${date}T23:59:59.999Z`
+        }
+      }
     };
     let query = { ...baseQuery };
     sort = Object.keys(sort).length > 0 ? sort : { _id: -1 };
@@ -26414,7 +26987,8 @@ function useEventManagementController() {
       order: import_joi82.default.string().pattern(/^(asc|desc)(,(asc|desc))*$/).optional().allow("", ...allowedOrder),
       site: import_joi82.default.string().hex().required(),
       status: import_joi82.default.string().optional(),
-      type: import_joi82.default.string().optional().valid("TASK", "EVENT").allow(null, "")
+      type: import_joi82.default.string().optional().valid("TASK", "EVENT").allow(null, ""),
+      date: import_joi82.default.string().optional().allow(null, "")
     });
     const query = { ...req.query };
     const { error } = validation.validate(query, {
@@ -26432,6 +27006,7 @@ function useEventManagementController() {
     const site = req.query.site ?? "";
     const status = req.query.status ?? "";
     const type = req.query.type ?? "";
+    const date = req.query.date ?? "";
     const sortObj = {};
     const sortFields = String(req.query.sort).split(",");
     const sortOrders = String(req.query.order).split(",");
@@ -26449,7 +27024,8 @@ function useEventManagementController() {
         sort: sortObj,
         site,
         status,
-        type
+        type,
+        date
       });
       res.status(200).json(data);
       return;
@@ -26766,6 +27342,7 @@ function useSiteUnitBillingRepo() {
         }
       };
     }
+    const unitSearchRegex = search ? search.trim().replace(/\s+/g, "").replace(/\//g, "\\s*/\\s*") : null;
     const query = {
       paymentStatus,
       status,
@@ -26773,7 +27350,16 @@ function useSiteUnitBillingRepo() {
         $or: [
           { unitOwner: { $regex: search, $options: "i" } },
           { billName: { $regex: search, $options: "i" } },
-          { unit: { $regex: search, $options: "i" } }
+          { unit: { $regex: unitSearchRegex, $options: "i" } },
+          {
+            $expr: {
+              $regexMatch: {
+                input: { $toString: "$amountPaid" },
+                regex: search,
+                options: "i"
+              }
+            }
+          }
         ]
       },
       ...import_mongodb80.ObjectId.isValid(site) && { site: new import_mongodb80.ObjectId(site) },
@@ -27196,14 +27782,14 @@ function useSiteUnitBillingService() {
   function isBillingChecker(billing_item, todayMonth, todayDate) {
     const billingMonth = Number(billing_item.month);
     const billingDay = Number(billing_item.date);
-    if (billing_item.frequency === "month") {
+    if (billing_item.frequency === "monthly" /* MONTHLY */) {
       return todayDate === billingDay;
     }
-    if (billing_item.frequency === "quarter") {
+    if (billing_item.frequency === "quarterly" /* QAURTERLY */) {
       const monthDiff = todayMonth - billingMonth;
       return monthDiff % 3 === 0 && todayDate === billingDay;
     }
-    if (billing_item.frequency === "annual") {
+    if (billing_item.frequency === "annually" /* ANNUALLY */) {
       return todayMonth === billingMonth && todayDate === billingDay;
     }
     return false;
@@ -27995,7 +28581,7 @@ function UseAccessManagementRepo() {
         {
           $match: {
             ...defaultQuery,
-            status: { $ne: "deleted" }
+            status: { $eq: "active" }
           }
         },
         // ✅ Only project needed fields before heavy lookups
@@ -28115,7 +28701,7 @@ function UseAccessManagementRepo() {
                         userType
                       }
                     },
-                    { $project: { _id: 1, userId: 1, type: 1, cardNo: 1, isActivated: 1 } }
+                    { $project: { _id: 1, userId: 1, type: 1, cardNo: 1, isActivated: 1, replacementStatus: 1 } }
                   ],
                   as: "accessCards"
                 }
@@ -28134,7 +28720,21 @@ function UseAccessManagementRepo() {
                     $filter: {
                       input: "$accessCards",
                       as: "card",
-                      cond: { $ne: ["$$card.userId", null] }
+                      cond: { $and: [{ $ne: ["$$card.userId", null] }, { $eq: ["$$card.isActivated", true] }] }
+                    }
+                  },
+                  f_replaced: {
+                    $filter: {
+                      input: "$accessCards",
+                      as: "card",
+                      cond: { $and: [{ $eq: ["$$card.isActivated", false] }, { $ne: ["$$card.replacementStatus", null] }] }
+                    }
+                  },
+                  f_deleted: {
+                    $filter: {
+                      input: "$accessCards",
+                      as: "card",
+                      cond: { $and: [{ $eq: ["$$card.isActivated", false] }, { $eq: ["$$card.replacementStatus", null] }] }
                     }
                   }
                 }
@@ -28166,6 +28766,14 @@ function UseAccessManagementRepo() {
                       non_physical: { $size: { $filter: { input: { $ifNull: ["$f_Assigned", []] }, as: "c", cond: { $eq: ["$$c.type", "QRCODE" /* QR */] } } } }
                     }
                   },
+                  replaced: {
+                    physical: { $filter: { input: "$f_replaced", as: "c", cond: { $eq: ["$$c.type", "NFC" /* NFC */] } } },
+                    non_physical: { $filter: { input: "$f_replaced", as: "c", cond: { $eq: ["$$c.type", "QRCODE" /* QR */] } } }
+                  },
+                  deleted: {
+                    physical: { $filter: { input: "$f_deleted", as: "c", cond: { $eq: ["$$c.type", "NFC" /* NFC */] } } },
+                    non_physical: { $filter: { input: "$f_deleted", as: "c", cond: { $eq: ["$$c.type", "QRCODE" /* QR */] } } }
+                  },
                   totalCardCount: {
                     $add: [
                       { $size: { $filter: { input: { $ifNull: ["$f_Available", []] }, as: "c", cond: { $eq: ["$$c.type", "NFC" /* NFC */] } } } },
@@ -28622,16 +29230,26 @@ function UseAccessManagementRepo() {
   async function cardReplacementRepo(params) {
     const session = import_node_server_utils149.useAtlas.getClient()?.startSession();
     try {
-      const { cardId, remarks } = params;
+      const { cardId, remarks, issuedCardId, unitId, userId } = params;
       const id = new import_mongodb83.ObjectId(cardId);
+      const newCardId = new import_mongodb83.ObjectId(issuedCardId);
+      const unit = new import_mongodb83.ObjectId(unitId);
+      const user = new import_mongodb83.ObjectId(userId);
       session?.startTransaction();
-      const card = await collection().findOneAndUpdate(
-        { _id: id },
-        { $set: { remarks, replacementStatus: "Pending", requestDate: /* @__PURE__ */ new Date(), isActivated: false } },
-        { returnDocument: "after", session }
-      );
+      const sessionResult = await Promise.all([
+        await collection().findOneAndUpdate(
+          { _id: id },
+          { $set: { remarks, replacementStatus: "Complete", requestDate: /* @__PURE__ */ new Date(), isActivated: false } },
+          { returnDocument: "after", session }
+        ),
+        await collection().findOneAndUpdate(
+          { _id: newCardId },
+          { $set: { updatedAt: /* @__PURE__ */ new Date(), assignedUnit: unit, userId: user } },
+          { returnDocument: "after", session }
+        )
+      ]);
       await session?.commitTransaction();
-      return card;
+      return sessionResult;
     } catch (error) {
       await session?.abortTransaction();
       throw new Error(error.message);
@@ -28880,7 +29498,8 @@ function UseAccessManagementRepo() {
         rawItems.map(async (item) => {
           const date = new Date(item["startDate (format MM/DD/YYYY)"]);
           const endDate = new Date(date.setFullYear(date.getFullYear() + 10));
-          const cardNumber = item["cardNo (number 0-65535 ex. 301)"].toString().padStart(10, "0");
+          const cardNumber = String(Number(item["cardNo (number 0-65535 ex. 301)"] || 0)).padStart(6, "0");
+          const facilityCode = String(Number(item["facilityCode (number 0-255 ex. 11)"] || 0)).padStart(4, "0");
           const pin = item["pin (number 6 digits only)"] ? item["pin (number 6 digits only)"].toString().padStart(6, "0") : "123456";
           const match = item["accessLevel (number ex. 1)"];
           const accessLevel = match ? match : null;
@@ -28894,9 +29513,9 @@ function UseAccessManagementRepo() {
             accessLevel,
             accessGroup,
             accessType: "Normal" /* NORMAL */,
-            cardNo: cardNumber,
+            cardNo: `${facilityCode}${cardNumber}`,
             pin,
-            qrData: await createQrData({ cardNumber }),
+            qrData: await createQrData({ cardNumber: `${facilityCode}${cardNumber}` }),
             startDate: new Date(item["startDate (format MM/DD/YYYY)"]),
             endDate: new Date(item["endDate (format MM/DD/YYYY)"] || endDate),
             isActivated: true,
@@ -28970,6 +29589,66 @@ function UseAccessManagementRepo() {
       session?.endSession();
     }
   }
+  async function deleteCardRepo(params) {
+    try {
+      const { cardId, remarks } = params;
+      const id = new import_mongodb83.ObjectId(cardId);
+      const result = await collection().findOneAndUpdate({ _id: id }, { $set: { isActivated: false, updatedAt: /* @__PURE__ */ new Date(), remarks, requestDate: /* @__PURE__ */ new Date() } }, { returnDocument: "after" });
+      return result;
+    } catch (error) {
+      throw new Error(error.message);
+    }
+  }
+  async function getCardDetailsRepo(params) {
+    try {
+      const { siteId, cardId } = params;
+      const convertedSiteId = new import_mongodb83.ObjectId(siteId);
+      const convertedCardId = new import_mongodb83.ObjectId(cardId);
+      const card = await collection().findOne(
+        {
+          _id: convertedCardId,
+          site: convertedSiteId,
+          type: "NFC" /* NFC */,
+          userType: "Visitor/Resident" /* DEFAULT */
+        },
+        {
+          projection: {
+            userId: 1,
+            site: 1,
+            type: 1,
+            userType: 1,
+            cardNo: 1,
+            isActivated: 1,
+            replacementStatus: 1,
+            vmsRemarks: 1,
+            remarks: 1,
+            requestDate: 1,
+            createdAt: 1,
+            updatedAt: 1
+          }
+        }
+      );
+      if (!card)
+        return null;
+      const site = await collectionName("sites").findOne(
+        { _id: card.site },
+        { projection: { name: 1, status: 1 } }
+      );
+      const user = card.userId ? await collectionName("users").findOne(
+        { _id: card.userId },
+        { projection: { name: 1, email: 1 } }
+      ) : null;
+      const status = card.userId === null && card.isActivated === true ? "available" : card.userId !== null && card.isActivated === true ? "assigned" : card.isActivated === false && card.replacementStatus !== null ? "replaced" : "deleted";
+      return {
+        ...card,
+        status,
+        site,
+        user
+      };
+    } catch (error) {
+      throw new Error(error.message);
+    }
+  }
   return {
     createIndexes,
     createIndexForEntrypass,
@@ -28990,7 +29669,9 @@ function UseAccessManagementRepo() {
     getCardReplacementRepo,
     getAccessManagementSettingsRepo,
     bulkPhysicalAccessCardRepo,
-    assignAccessCardToUnitRepo
+    assignAccessCardToUnitRepo,
+    deleteCardRepo,
+    getCardDetailsRepo
   };
 }
 
@@ -29022,7 +29703,9 @@ function useAccessManagementSvc() {
     getCardReplacementRepo,
     getAccessManagementSettingsRepo,
     bulkPhysicalAccessCardRepo,
-    assignAccessCardToUnitRepo
+    assignAccessCardToUnitRepo,
+    deleteCardRepo,
+    getCardDetailsRepo
   } = UseAccessManagementRepo();
   const addPhysicalCardSvc = async (payload) => {
     try {
@@ -29270,6 +29953,22 @@ function useAccessManagementSvc() {
       throw new Error(err.message);
     }
   };
+  const deleteCardSvc = async (params) => {
+    try {
+      const response = await deleteCardRepo({ ...params });
+      return response;
+    } catch (err) {
+      throw new Error(err.message);
+    }
+  };
+  const getCardDetailsSvc = async (params) => {
+    try {
+      const response = await getCardDetailsRepo({ ...params });
+      return response;
+    } catch (err) {
+      throw new Error(err.message);
+    }
+  };
   return {
     addPhysicalCardSvc,
     addNonPhysicalCardSvc,
@@ -29294,7 +29993,9 @@ function useAccessManagementSvc() {
     getAccessManagementSettingsSvc,
     convertBufferFile,
     bulkPhysicalAccessCardSvc,
-    assignAccessCardToUnitSvc
+    assignAccessCardToUnitSvc,
+    deleteCardSvc,
+    getCardDetailsSvc
   };
 }
 
@@ -29326,7 +30027,9 @@ function useAccessManagementController() {
     getAccessManagementSettingsSvc,
     convertBufferFile,
     bulkPhysicalAccessCardSvc,
-    assignAccessCardToUnitSvc
+    assignAccessCardToUnitSvc,
+    deleteCardSvc,
+    getCardDetailsSvc
   } = useAccessManagementSvc();
   const addPhysicalCard = async (req, res) => {
     try {
@@ -29555,11 +30258,24 @@ function useAccessManagementController() {
         userType: import_joi85.default.string().optional().allow("", null),
         type: import_joi85.default.string().optional().allow("", null)
       });
+      const user = req.cookies?.sid;
       const { error } = schema2.validate({ site, userType, type });
       if (error) {
         return res.status(400).json({ message: error.message });
       }
+      const key = `${namespace2}:${user}:available-access-cards`;
+      const listKey = `${namespace2}:${user}:list`;
+      const { redis } = (0, import_node_server_utils151.useCache)(key);
+      const cachedData = await getCache({ key, redis });
+      if (cachedData) {
+        console.log("\u26A1 Cache hit:", key);
+        redis.expire(key, 60).catch(console.error);
+        redis.lrem(listKey, 0, key).then(() => redis.lpush(listKey, key)).then(() => redis.ltrim(listKey, 0, 9)).catch(console.error);
+        return res.status(200).json({ message: "Success", data: cachedData });
+      }
       const result = await availableAccessCardsSvc({ site, userType, type });
+      await setCache({ key, data: result, ttlSeconds: 60, redis });
+      redis.lrem(listKey, 0, key).then(() => redis.lpush(listKey, key)).then(() => redis.ltrim(listKey, 0, 9)).catch(console.error);
       return res.status(200).json({ message: "Success", data: result });
     } catch (error) {
       return res.status(400).json({
@@ -29741,16 +30457,19 @@ function useAccessManagementController() {
   };
   const cardReplacement = async (req, res) => {
     try {
-      const { cardId, remarks } = req.body;
+      const { cardId, remarks, unitId, issuedCardId, userId } = req.body;
       const schema2 = import_joi85.default.object({
         cardId: import_joi85.default.string().required(),
-        remarks: import_joi85.default.string().optional().allow("", null)
+        remarks: import_joi85.default.string().optional().allow("", null),
+        unitId: import_joi85.default.string().hex().required(),
+        issuedCardId: import_joi85.default.string().required(),
+        userId: import_joi85.default.string().hex().required()
       });
-      const { error } = schema2.validate({ cardId, remarks });
+      const { error } = schema2.validate({ cardId, remarks, unitId, issuedCardId, userId });
       if (error) {
         return res.status(400).json({ message: error.message });
       }
-      const result = await cardReplacementSvc({ cardId, remarks });
+      const result = await cardReplacementSvc({ cardId, remarks, unitId, issuedCardId, userId });
       return res.status(200).json({ message: "Success", data: result });
     } catch (error) {
       return res.status(500).json({
@@ -29881,6 +30600,46 @@ function useAccessManagementController() {
       });
     }
   };
+  const deleteCard = async (req, res) => {
+    try {
+      const { cardId, remarks } = req.body;
+      const schema2 = import_joi85.default.object({
+        cardId: import_joi85.default.string().hex().required(),
+        remarks: import_joi85.default.string().optional().allow("", null)
+      });
+      const { error } = schema2.validate({ cardId, remarks });
+      if (error) {
+        return res.status(400).json({ message: error.message });
+      }
+      const result = await deleteCardSvc({ cardId, remarks });
+      return res.status(200).json({ message: "Success", data: result });
+    } catch (error) {
+      return res.status(500).json({
+        data: null,
+        message: error.message
+      });
+    }
+  };
+  const getCardDetails = async (req, res) => {
+    try {
+      const { siteId, cardId } = req.query;
+      const schema2 = import_joi85.default.object({
+        siteId: import_joi85.default.string().hex().required(),
+        cardId: import_joi85.default.string().hex().required()
+      });
+      const { error } = schema2.validate({ siteId, cardId });
+      if (error) {
+        return res.status(400).json({ message: error.message });
+      }
+      const result = await getCardDetailsSvc({ siteId, cardId });
+      return res.status(200).json({ message: "Success", data: result });
+    } catch (error) {
+      return res.status(500).json({
+        data: null,
+        message: error.message
+      });
+    }
+  };
   return {
     addPhysicalCard,
     addNonPhysicalCard,
@@ -29902,7 +30661,9 @@ function useAccessManagementController() {
     getCardReplacement,
     getAccessManagementSettings,
     bulkPhysicalAccessCard,
-    assignAccessCardToUnit
+    assignAccessCardToUnit,
+    deleteCard,
+    getCardDetails
   };
 }
 
@@ -31619,9 +32380,9 @@ function useStatementOfAccountRepo() {
     page = page > 0 ? page - 1 : 0;
     let dateExpr = {};
     if (dateFrom && dateTo) {
-      const startDate = new Date(dateFrom);
+      let startDate = new Date(dateFrom);
       startDate.setHours(0, 0, 0, 0);
-      const endDate = new Date(dateTo);
+      let endDate = new Date(dateTo);
       endDate.setHours(23, 59, 59, 999);
       dateExpr = {
         $expr: {
@@ -31632,13 +32393,15 @@ function useStatementOfAccountRepo() {
         }
       };
     }
+    const unitSearchRegex = search ? search.trim().replace(/\s+/g, "").replace(/\//g, "\\s*/\\s*") : null;
     const query = {
       ...status && status !== "all" && { status },
       ...search && {
         $or: [
           { unitOwner: { $regex: search, $options: "i" } },
-          { unit: { $regex: search, $options: "i" } },
-          { email: { $regex: search, $options: "i" } }
+          { unit: { $regex: unitSearchRegex, $options: "i" } },
+          { email: { $regex: search, $options: "i" } },
+          { category: { $regex: search, $options: "i" } }
         ]
       },
       ...import_mongodb91.ObjectId.isValid(site) && { site: new import_mongodb91.ObjectId(site) },
@@ -33883,6 +34646,9 @@ function useIncidentReportRepo() {
               $regex: search,
               $options: "i"
             }
+          },
+          {
+            approvedByName: { $regex: search, $options: "i" }
           }
         ]
       },
@@ -36396,7 +37162,9 @@ function useNfcPatrolLogController() {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  ANPRMode,
   AccessTypeProps,
+  BULLETIN_RECIPIENTS,
   DEVICE_STATUS,
   EAccessCardTypes,
   EAccessCardUserTypes,
@@ -36455,12 +37223,15 @@ function useNfcPatrolLogController() {
   MVerification,
   MVisitorTransaction,
   MWorkOrder,
+  OrgNature,
   PERSON_TYPES,
+  STATUS_VALUES,
   UseAccessManagementRepo,
-  allowedCategories,
+  VehicleCategory,
+  VehicleStatus,
+  VehicleType,
   allowedFieldsSite,
   allowedNatures,
-  allowedTypes,
   attendanceSchema,
   attendanceSettingsSchema,
   chatSchema,