@7365admin1/core 2.50.0 → 2.52.0

package/dist/index.js

@@ -4333,6 +4333,9 @@ function useVerificationRepo() {
       return Promise.reject(error);
     }
   }
+  async function findOne(query) {
+    return await collection.findOne(query);
+  }
   return {
     createIndex,
     createTextIndex,
@@ -4341,7 +4344,8 @@ function useVerificationRepo() {
     getVerifications,
     getByIdByType,
     updateStatusById,
-    getByStatus
+    getByStatus,
+    findOne
   };
 }
 
@@ -5645,29 +5649,28 @@ function useVerificationService() {
       throw error;
     }
   }
-  async function createSimpleUserInvite({
-    email,
-    metadata
-  }) {
+  async function createSimpleUserInvite({ email, metadata }) {
     const type = "user-invite";
+    if (metadata?.org)
+      await getOrgById(metadata.org);
+    if (metadata?.siteId)
+      await getSiteById(metadata.siteId);
+    const existing = await useVerificationRepo().findOne({
+      type,
+      email,
+      "metadata.org": metadata?.org,
+      "metadata.siteId": metadata?.siteId
+    });
+    if (existing)
+      return existing._id;
     const value = {
       type,
       email,
       metadata,
-      expireAt: new Date(
-        (/* @__PURE__ */ new Date()).getTime() + 72 * 60 * 60 * 1e3
-      ).toISOString(),
+      expireAt: new Date(Date.now() + 72 * 60 * 60 * 1e3).toISOString(),
       createdAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    if (value.metadata?.org) {
-      await getOrgById(value.metadata?.org);
-    }
-    if (value.metadata?.siteId) {
-      await getSiteById(value.metadata?.siteId);
-    }
     const res = await add(value);
-    const dir = __dirname;
-    const filePath = (0, import_node_server_utils21.getDirectory)(dir, "./public/handlebars/user-invite");
     const link = `${APP_MAIN}/verify/invitation/${res}`;
     const emailContent = (0, import_node_server_utils21.compileHandlebar)({
       context: {
@@ -5675,9 +5678,9 @@ function useVerificationService() {
         validity: VERIFICATION_USER_INVITE_DURATION,
         link
       },
-      filePath
+      filePath: (0, import_node_server_utils21.getDirectory)(__dirname, "./public/handlebars/user-invite")
     });
-    mailer.sendMail({
+    await mailer.sendMail({
       to: email,
       subject: "User Invite",
       html: emailContent,
@@ -7504,7 +7507,7 @@ function useMemberService() {
     getByRoles
   } = useMemberRepo();
   const { getById: _getVerificationById, updateStatusById } = useVerificationRepo();
-  const { getUserByEmail, updateDefaultOrgByEmail } = useUserRepo();
+  const { getUserByEmail, updateDefaultOrgByEmail, getUserById } = useUserRepo();
   const { getById: getOrgById } = useOrgRepo();
   const { getSiteById } = useSiteRepo();
   const { getOwnerRolesByTypeOrg } = useRoleRepo();
@@ -7566,6 +7569,52 @@ function useMemberService() {
       session?.endSession();
     }
   }
+  async function createMemberDirect({
+    userId,
+    orgId,
+    roleId,
+    app,
+    siteId,
+    siteName
+  }) {
+    const session = import_node_server_utils30.useAtlas.getClient()?.startSession();
+    session?.startTransaction();
+    try {
+      const org = await getOrgById(orgId);
+      if (!org)
+        throw new import_node_server_utils30.BadRequestError("Organization not found.");
+      const user = await getUserById(userId);
+      if (!user)
+        throw new import_node_server_utils30.BadRequestError("User not found.");
+      const member = await addMember(
+        {
+          org: org._id?.toString() || "",
+          orgName: org.name || "",
+          user: user._id?.toString() || "",
+          name: user?.email,
+          role: roleId,
+          type: app,
+          siteId: siteId ?? "",
+          siteName: siteName ?? ""
+        },
+        session
+      );
+      if (!user.defaultOrg) {
+        await updateDefaultOrgByEmail(
+          user.email,
+          org._id?.toString() || "",
+          session
+        );
+      }
+      await session?.commitTransaction();
+      return { member };
+    } catch (error) {
+      await session?.abortTransaction();
+      throw error;
+    } finally {
+      session?.endSession();
+    }
+  }
   async function updateRoleById(id, role, type, org) {
     const owner = await getOwnerRolesByTypeOrg(type, org);
     if (!owner.length) {
@@ -7593,6 +7642,7 @@ function useMemberService() {
   }
   return {
     createMember,
+    createMemberDirect,
     updateRoleById
   };
 }
@@ -7607,7 +7657,7 @@ function useMemberController() {
     updateMemberStatus: _updateMemberStatus,
     updateStatusByUserId: _updateStatusByUserId
   } = useMemberRepo();
-  const { createMember: _createMember, updateRoleById: _updateRoleById } = useMemberService();
+  const { createMember: _createMember, createMemberDirect: _createMemberDirect, updateRoleById: _updateRoleById } = useMemberService();
   async function createMember(req, res, next) {
     const validation = import_joi15.default.string().hex().required();
     const _id = req.params.id;
@@ -7796,6 +7846,32 @@ function useMemberController() {
       return;
     }
   }
+  async function createMemberDirect(req, res, next) {
+    const validation = import_joi15.default.object({
+      userId: import_joi15.default.string().hex().required(),
+      orgId: import_joi15.default.string().hex().required(),
+      roleId: import_joi15.default.string().hex().required(),
+      app: import_joi15.default.string().required(),
+      siteId: import_joi15.default.string().hex().optional().allow("", null),
+      siteName: import_joi15.default.string().optional().allow("", null)
+    });
+    const { error } = validation.validate(req.body);
+    if (error) {
+      import_node_server_utils31.logger.log({ level: "error", message: error.message });
+      next(new import_node_server_utils31.BadRequestError(error.message));
+      return;
+    }
+    const { userId, orgId, roleId, app, siteId, siteName } = req.body;
+    try {
+      const data = await _createMemberDirect({ userId, orgId, roleId, app, siteId, siteName });
+      res.status(201).json(data);
+      return;
+    } catch (error2) {
+      import_node_server_utils31.logger.log({ level: "error", message: error2.message });
+      next(error2);
+      return;
+    }
+  }
   return {
     createMember,
     getByUserId,
@@ -7803,7 +7879,8 @@ function useMemberController() {
     getAll,
     getOrgsByMembership,
     updateMemberStatus,
-    updateRoleById
+    updateRoleById,
+    createMemberDirect
   };
 }
 
@@ -13236,23 +13313,42 @@ var CameraType = /* @__PURE__ */ ((CameraType2) => {
 })(CameraType || {});
 var schemaUpdateSiteCamera = import_joi34.default.object({
   host: import_joi34.default.string().required(),
-  username: import_joi34.default.string().required(),
-  password: import_joi34.default.string().required(),
+  username: import_joi34.default.string().when("type", {
+    is: "anpr",
+    then: import_joi34.default.required(),
+    otherwise: import_joi34.default.optional().allow(null, "")
+  }),
+  password: import_joi34.default.string().when("type", {
+    is: "anpr",
+    then: import_joi34.default.required(),
+    otherwise: import_joi34.default.optional().allow(null, "")
+  }),
   category: import_joi34.default.string().allow("standard", "resident", "visitor").required(),
   guardPost: import_joi34.default.number().integer().optional(),
-  direction: import_joi34.default.string().optional().allow("entry", "exit", "both", "none")
+  direction: import_joi34.default.string().optional().allow("entry", "exit", "both", "none"),
+  status: import_joi34.default.string().optional().allow("active", "inactive", "deleted"),
+  name: import_joi34.default.string().optional().allow(null, "")
 });
 var schemaSiteCamera = import_joi34.default.object({
   _id: import_joi34.default.string().hex().optional(),
   site: import_joi34.default.string().hex().required(),
   host: import_joi34.default.string().required(),
-  username: import_joi34.default.string().required(),
-  password: import_joi34.default.string().required(),
+  username: import_joi34.default.string().when("type", {
+    is: "anpr",
+    then: import_joi34.default.required(),
+    otherwise: import_joi34.default.optional().allow(null, "")
+  }),
+  password: import_joi34.default.string().when("type", {
+    is: "anpr",
+    then: import_joi34.default.required(),
+    otherwise: import_joi34.default.optional().allow(null, "")
+  }),
   type: import_joi34.default.string().allow("ip", "anpr").required(),
   category: import_joi34.default.string().allow("standard", "resident", "visitor").required(),
   direction: import_joi34.default.string().required().allow("entry", "exit", "both", "none"),
   guardPost: import_joi34.default.number().integer().optional(),
   status: import_joi34.default.string().optional().allow("active", "inactive", "deleted"),
+  name: import_joi34.default.string().optional().allow(null, ""),
   createdAt: import_joi34.default.date().optional(),
   updatedAt: import_joi34.default.date().optional(),
   deletedAt: import_joi34.default.date().optional()
@@ -13281,6 +13377,7 @@ function MSiteCamera(value) {
     guardPost: value.guardPost ?? 0,
     status: value.status ?? "active",
     direction: value.direction ?? "",
+    name: value.name ?? "",
     createdAt: value.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(),
     updatedAt: value.updatedAt ?? "",
     deletedAt: value.deletedAt ?? ""
@@ -13595,7 +13692,24 @@ var schemaUpdateVisTrans = import_joi36.default.object({
   checkInRemarks: import_joi36.default.string().optional().allow("", null),
   checkOutRemarks: import_joi36.default.string().optional().allow("", null),
   expectedCheckIn: import_joi36.default.string().isoDate().optional(),
-  purpose: import_joi36.default.string().optional().allow(null, "")
+  purpose: import_joi36.default.string().optional().allow(null, ""),
+  members: import_joi36.default.array().items(
+    import_joi36.default.object({
+      name: import_joi36.default.string().optional().allow(null, ""),
+      nric: import_joi36.default.string().optional().allow(null, ""),
+      visitorPass: import_joi36.default.array().items(
+        import_joi36.default.object({
+          keyId: import_joi36.default.string().hex().length(24).required()
+        })
+      ).optional().allow(null),
+      passKeys: import_joi36.default.array().items(
+        import_joi36.default.object({
+          keyId: import_joi36.default.string().hex().length(24).required()
+        })
+      ).optional().allow(null),
+      contact: import_joi36.default.string().optional().allow(null, "")
+    })
+  ).optional().allow(null)
 });
 function MVisitorTransaction(value) {
   const { error } = schemaVisitorTransaction.validate(value, {
@@ -14045,14 +14159,14 @@ function useVisitorTransactionRepo() {
       );
     }
   }
-  async function updateById(_id, value, session, isNotManualCheckOut = true) {
+  async function updateById(_id, value, session, isManualCheckOut = true) {
     try {
       _id = new import_mongodb40.ObjectId(_id);
     } catch (error) {
       throw new import_node_server_utils68.BadRequestError("Invalid visitor transaction ID format.");
     }
     value.updatedAt = /* @__PURE__ */ new Date();
-    if (value.checkOut && isNotManualCheckOut) {
+    if (value.checkOut && isManualCheckOut) {
       value.manualCheckout = true;
     }
     try {
@@ -17475,7 +17589,7 @@ function useDahuaService() {
             );
           }
         }
-        if (["entry", "both"].includes(designation) && direction.toLowerCase() === "approach" && plateNumber) {
+        if (["entry"].includes(designation) && plateNumber) {
           await closeOpenTransaction(plateNumber);
           const vehicle = await getVehicleByPlateNumber(plateNumber);
           const visitorTransaction = {
@@ -17530,11 +17644,11 @@ function useDahuaService() {
           } catch (error) {
             console.log("failed to create visitor transaction", error);
             loggerDahua.error(
-              `[${site}][${gate}] Error creating visitor transaction:`,
+              `[${site}][${host}] Error creating visitor transaction:`,
               error
             );
           }
-        } else if (["exit", "both"].includes(designation) && direction.toLowerCase() === "leave" && plateNumber) {
+        } else if (["exit"].includes(designation) && plateNumber) {
           const vehicle = await getVehicleByPlateNumber(plateNumber);
           const existingOpenTransaction = await getOpenByPlateNumber(
             plateNumber,
@@ -17559,6 +17673,92 @@ function useDahuaService() {
           if (onDetected2) {
             onDetected2({ reload: true, site: existingOpenTransaction?.site?.toString(), host, direction });
           }
+        } else if (["both"].includes(designation) && plateNumber) {
+          if (direction.toLowerCase() === "leave") {
+            const vehicle = await getVehicleByPlateNumber(plateNumber);
+            const existingOpenTransaction = await getOpenByPlateNumber(
+              plateNumber,
+              site
+            );
+            if (existingOpenTransaction?._id) {
+              currentTransactionId = existingOpenTransaction._id.toString();
+              currentSnapshotField = "snapshotExitImage";
+            }
+            if (vehicle?.recNo) {
+              const dahuaPayload = {
+                host,
+                username,
+                password,
+                plateNumber,
+                mode: "TrafficRedList" /* TRAFFIC_REDLIST */,
+                recno: vehicle?.recNo
+              };
+              await removePlateNumber(dahuaPayload);
+            }
+            await closeOpenTransaction(plateNumber);
+            if (onDetected2 && existingOpenTransaction?.site) {
+              onDetected2({ reload: true, site: existingOpenTransaction?.site?.toString(), host, direction });
+            }
+          } else if (direction.toLowerCase() === "approach") {
+            await closeOpenTransaction(plateNumber);
+            const vehicle = await getVehicleByPlateNumber(plateNumber);
+            const visitorTransaction = {
+              site,
+              plateNumber,
+              org,
+              status: "unregistered" /* UNREGISTERED */
+            };
+            const typesForAutoRegister = Object.values(PersonTypes);
+            let startDate = vehicle?.start ? new Date(vehicle?.start) : /* @__PURE__ */ new Date();
+            let endDate = vehicle?.end ? new Date(vehicle?.end) : new Date(startDate.getTime() + 60 * 60 * 1e3);
+            if (vehicle && typeof vehicle.category === "string" && typesForAutoRegister.includes(vehicle.category)) {
+              visitorTransaction.name = vehicle.name;
+              visitorTransaction.nric = vehicle.nric;
+              visitorTransaction.contact = vehicle.phoneNumber;
+              visitorTransaction.block = Number(vehicle.block);
+              visitorTransaction.level = vehicle.level;
+              visitorTransaction.unit = vehicle.unit?.toString();
+              visitorTransaction.unitName = vehicle.unitName;
+              visitorTransaction.type = vehicle.category;
+              visitorTransaction.status = "registered" /* REGISTERED */;
+              visitorTransaction.recNo = vehicle.recNo;
+              visitorTransaction.expiredAt = vehicle.end;
+            }
+            const dahuaPayload = {
+              host,
+              username,
+              password,
+              plateNumber,
+              mode: "TrafficRedList" /* TRAFFIC_REDLIST */,
+              owner: vehicle?.name ?? ""
+            };
+            dahuaPayload.start = formatDahuaDate(startDate);
+            dahuaPayload.end = formatDahuaDate(endDate);
+            const shouldHaveTimeLimit = visitorTransaction.type === "guest" /* GUEST */ || visitorTransaction.status === "unregistered" /* UNREGISTERED */;
+            if (shouldHaveTimeLimit) {
+              const startDate2 = /* @__PURE__ */ new Date();
+              const endDate2 = new Date(startDate2.getTime() + 60 * 60 * 1e3);
+              dahuaPayload.start = formatDahuaDate(startDate2);
+              dahuaPayload.end = formatDahuaDate(endDate2);
+              visitorTransaction.expiredAt = endDate2.toISOString();
+            }
+            try {
+              await addPlateNumber(dahuaPayload);
+              const result = await add(visitorTransaction, void 0, true);
+              const transactionId = result?._id;
+              currentTransactionId = transactionId?.toString();
+              currentSnapshotField = "snapshotEntryImage";
+              if (onDetected2) {
+                onDetected2({ _id: transactionId, site: result?.site?.toString(), plateNumber: result.plateNumber, host, direction });
+              }
+            } catch (error) {
+              console.log("failed to create visitor transaction", error);
+              loggerDahua.error(
+                `[${site}][${host}] Error creating visitor transaction:`,
+                error
+              );
+            }
+          }
         }
       }
     }
@@ -17690,6 +17890,9 @@ function useDahuaService() {
     }
   }
   async function listenToCamera(camera, onDetected) {
+    if (camera?.type != "anpr" && camera?.status != "deleted") {
+      return;
+    }
     if (onDetected) {
       _savedOnDetected = onDetected;
     }
@@ -17698,6 +17901,14 @@ function useDahuaService() {
       return;
     }
     const cameraId = camera._id.toString();
+    if (camera.status !== "active") {
+      if (cameraRegistry.has(cameraId)) {
+        loggerDahua.info(`[${camera?.host ?? camera?._id}] Camera is ${camera.status}. Stopping connection.`);
+        cameraRegistry.get(cameraId)?.abort();
+        cameraRegistry.delete(cameraId);
+      }
+      return;
+    }
     if (cameraRegistry.has(cameraId)) {
       loggerDahua.info(`[${camera.host}] Stopping existing connection for update.`);
       cameraRegistry.get(cameraId)?.abort();
@@ -17845,6 +18056,9 @@ function useDahuaService() {
           continue;
         } else if ([400, 401, 403, 500].includes(response.statusCode)) {
           loggerDahua.error(`[${host}] Connection error: ${response.statusCode}`);
+          if (onDetected) {
+            onDetected({ site, messagePermanent: `Camera with last 3 characters ${host?.slice(-3)} Connection Error. Check username and password.` });
+          }
           return;
         }
         loggerDahua.info(`[${host}] Successfully connected to ANPR.`);
@@ -17897,8 +18111,15 @@ function useDahuaService() {
           break;
         }
         loggerDahua.error(
-          `[${host}] Connection lost or error: ${error.message || error}. Retrying in 5s...`
+          `[${host}] Connection lost or error: ${error.message || error}. Retrying in 10 seconds...`
         );
+        if (onDetected) {
+          onDetected({
+            site,
+            host,
+            message: `Camera in ${gate} Connection Lost. Retrying in 10 seconds. Check the camera if this issue persists, Or set the camera to Inactive to stop this notification.`
+          });
+        }
       } finally {
         if (bufferQueue?.destroy) {
           try {
@@ -17919,7 +18140,7 @@ function useDahuaService() {
         }
       }
       if (!signal.aborted) {
-        await new Promise((res) => setTimeout(res, 5e3));
+        await new Promise((res) => setTimeout(res, 1e4));
       }
     }
     loggerDahua.info(`[${host}] ANPR Listener stopped.`);
@@ -18421,6 +18642,8 @@ function useSiteCameraRepo() {
     }
     try {
       await collection.deleteOne({ _id }, { session });
+      const { listenToCamera } = useDahuaService();
+      await listenToCamera({ _id, status: "deleted" });
       delCachedData();
       return "Successfully deleted site camera.";
     } catch (error) {
@@ -19258,7 +19481,7 @@ function useBuildingRepo() {
       }
     }
   }
-  async function getBuildingLevel(site, block) {
+  async function getBuildingLevel(site, block, isVMS) {
     try {
       site = new import_mongodb49.ObjectId(site);
     } catch (error) {
@@ -19268,8 +19491,7 @@ function useBuildingRepo() {
       site,
       block
     };
-    const cacheOptions = { ...query };
-    const cacheKey = (0, import_node_server_utils82.makeCacheKey)(buildings_namespace_collection, cacheOptions);
+    const cacheKey = (0, import_node_server_utils82.makeCacheKey)(buildings_namespace_collection, { ...query, isVMS });
     try {
       const cached = await getCache(cacheKey);
       if (cached) {
@@ -19279,7 +19501,24 @@ function useBuildingRepo() {
         });
         return cached;
       }
-      const result = await collection.findOne(query);
+      const pipeline = [{ $match: { ...query } }];
+      if (isVMS) {
+        pipeline.push({
+          $lookup: {
+            from: "building-levels",
+            let: { id: "$_id" },
+            pipeline: [
+              {
+                $match: {
+                  $expr: { $eq: ["$block", "$$id"] }
+                }
+              }
+            ],
+            as: "building_levels"
+          }
+        });
+      }
+      const result = await collection.aggregate(pipeline).toArray();
       setCache(cacheKey, result, 300).then(() => {
         import_node_server_utils82.logger.log({
           level: "info",
@@ -19467,6 +19706,9 @@ function useBuildingService() {
 // src/controllers/building.controller.ts
 var import_node_server_utils84 = require("@7365admin1/node-server-utils");
 var import_joi44 = __toESM(require("joi"));
+var import_exceljs = __toESM(require("exceljs"));
+var import_csv_parser = __toESM(require("csv-parser"));
+var import_fs2 = __toESM(require("fs"));
 function useBuildingController() {
   const {
     getAll: _getAll,
@@ -19488,7 +19730,10 @@ function useBuildingController() {
       serial: import_joi44.default.string().optional().allow("", null),
       status: import_joi44.default.string().optional().allow("", null),
       // buildingFloorPlan: Joi.array().items(Joi.string()).optional(),
-      buildingFiles: import_joi44.default.array().items({ id: import_joi44.default.string().hex().optional().allow("", null), name: import_joi44.default.string().optional().allow("", null) }).optional().allow("", null)
+      buildingFiles: import_joi44.default.array().items({
+        id: import_joi44.default.string().hex().optional().allow("", null),
+        name: import_joi44.default.string().optional().allow("", null)
+      }).optional().allow("", null)
     });
     const { error } = validation.validate(value);
     if (error) {
@@ -19608,6 +19853,7 @@ function useBuildingController() {
   async function getBuildingLevel(req, res, next) {
     const site = req.params.site ?? "";
     let block = req.query.block;
+    const isVMS = req.query.isVMS;
     const validation = import_joi44.default.object({
       site: import_joi44.default.string().hex().required(),
       block: import_joi44.default.number().required()
@@ -19619,20 +19865,132 @@ function useBuildingController() {
     }
     block = parseInt(block) ?? 0;
     try {
-      const siteBlock = await _getBuildingLevel(site, block);
+      const siteBlock = await _getBuildingLevel(site, block, isVMS);
       res.json(siteBlock);
       return;
     } catch (error2) {
       next(error2);
     }
   }
+  async function uploadSpreadsheetBuilding(req, res, next) {
+    try {
+      if (!req.file) {
+        next(new import_node_server_utils84.BadRequestError("Spreadsheet file is required."));
+        return;
+      }
+      const { originalname, path: path4 } = req.file;
+      const lowerName = originalname.toLowerCase();
+      const rowSchema = import_joi44.default.object({
+        block: import_joi44.default.number().integer().min(0).required(),
+        level: import_joi44.default.string().optional().allow(null, ""),
+        unit: import_joi44.default.string().optional().allow(null, ""),
+        category: import_joi44.default.string().trim().required(),
+        name: import_joi44.default.string().trim().optional().allow(null, ""),
+        email: import_joi44.default.string().email().lowercase().optional().allow(null, ""),
+        phoneNumber: import_joi44.default.string().trim().optional().allow(null, "")
+      });
+      const querySchema = import_joi44.default.object({
+        site: import_joi44.default.string().hex().length(24).required(),
+        org: import_joi44.default.string().hex().length(24).optional().allow(null, "")
+      });
+      const { error: queryError, value: queryValue } = querySchema.validate(
+        req.query,
+        { abortEarly: false, convert: true }
+      );
+      if (queryError) {
+        next(
+          new import_node_server_utils84.BadRequestError(
+            queryError.details.map((d) => d.message).join(", ")
+          )
+        );
+        return;
+      }
+      const { site, org } = queryValue;
+      let rows = [];
+      if (lowerName.endsWith(".xlsx") || lowerName.endsWith(".xls")) {
+        const workbook = new import_exceljs.default.Workbook();
+        await workbook.xlsx.readFile(path4);
+        const worksheet = workbook.worksheets[0];
+        if (!worksheet) {
+          next(
+            new import_node_server_utils84.BadRequestError("No worksheet found in uploaded Excel file.")
+          );
+          return;
+        }
+        const headerRow = worksheet.getRow(1);
+        const headers = (headerRow.values || []).slice(1).map(
+          (header) => String(header ?? "").trim().replace(/\(.*\)/, "").trim()
+        );
+        worksheet.eachRow((row, rowNumber) => {
+          if (rowNumber === 1)
+            return;
+          const rowData = {};
+          headers.forEach((header, index) => {
+            rowData[header] = row.getCell(index + 1).value ?? "";
+          });
+          if (Object.values(rowData).some(
+            (v) => v !== "" && v !== null && v !== void 0
+          )) {
+            rows.push(rowData);
+          }
+        });
+      } else if (lowerName.endsWith(".csv")) {
+        rows = await new Promise((resolve, reject) => {
+          const parsed = [];
+          import_fs2.default.createReadStream(path4).pipe((0, import_csv_parser.default)()).on("headers", (headers) => {
+            headers = headers.map(
+              (h) => h.trim().replace(/\(.*\)/, "").trim()
+            );
+          }).on("data", (row) => parsed.push(row)).on("end", () => resolve(parsed)).on("error", reject);
+        });
+      } else {
+        next(
+          new import_node_server_utils84.BadRequestError("Only .xlsx, .xls, or .csv files are allowed.")
+        );
+        return;
+      }
+      const validRows = [];
+      const invalidRows = [];
+      rows.forEach((row, index) => {
+        const { error, value } = rowSchema.validate(row, {
+          abortEarly: false,
+          stripUnknown: true
+        });
+        if (error) {
+          invalidRows.push({
+            row: index + 2,
+            data: row,
+            errors: error.details.map((d) => d.message)
+          });
+        } else {
+          validRows.push(value);
+        }
+      });
+      res.status(200).json({
+        message: "Spreadsheet import completed (buildings).",
+        fileName: originalname,
+        totalRows: rows.length,
+        validRows: validRows.length,
+        invalidRows: invalidRows.length,
+        validationErrors: invalidRows,
+        data: validRows
+        // testing: return the validated building rows directly
+      });
+      import_fs2.default.unlink(path4, () => {
+      });
+    } catch (error) {
+      import_node_server_utils84.logger.log({ level: "error", message: error.message });
+      next(error);
+    }
+  }
   return {
     createBuilding,
     getAll,
     getById,
     updateById,
     deleteById,
-    getBuildingLevel
+    getBuildingLevel,
+    uploadSpreadsheetBuilding
   };
 }
 
@@ -19948,9 +20306,9 @@ function useBuildingUnitController() {
 // src/controllers/vehicle.controller.ts
 var import_node_server_utils87 = require("@7365admin1/node-server-utils");
 var import_joi46 = __toESM(require("joi"));
-var import_exceljs = __toESM(require("exceljs"));
-var import_csv_parser = __toESM(require("csv-parser"));
-var import_fs2 = __toESM(require("fs"));
+var import_exceljs2 = __toESM(require("exceljs"));
+var import_csv_parser2 = __toESM(require("csv-parser"));
+var import_fs3 = __toESM(require("fs"));
 function useVehicleController() {
   const {
     add: _add,
@@ -20070,7 +20428,7 @@ function useVehicleController() {
       const { site, org } = queryValue;
       let rows = [];
       if (lowerName.endsWith(".xlsx") || lowerName.endsWith(".xls")) {
-        const workbook = new import_exceljs.default.Workbook();
+        const workbook = new import_exceljs2.default.Workbook();
         await workbook.xlsx.readFile(path4);
         const worksheet = workbook.worksheets[0];
         if (!worksheet) {
@@ -20099,7 +20457,7 @@ function useVehicleController() {
       } else if (lowerName.endsWith(".csv")) {
         rows = await new Promise((resolve, reject) => {
           const parsed = [];
-          import_fs2.default.createReadStream(path4).pipe((0, import_csv_parser.default)()).on("headers", (headers) => {
+          import_fs3.default.createReadStream(path4).pipe((0, import_csv_parser2.default)()).on("headers", (headers) => {
             headers = headers.map(
               (h) => h.trim().replace(/\(.*\)/, "").trim()
             );
@@ -20142,7 +20500,7 @@ function useVehicleController() {
         validationErrors: invalidRows,
         data
       });
-      import_fs2.default.unlink(path4, () => {
+      import_fs3.default.unlink(path4, () => {
       });
     } catch (error) {
       import_node_server_utils87.logger.log({ level: "error", message: error.message });
@@ -20536,8 +20894,9 @@ function useSiteCameraService() {
     try {
       session.startTransaction();
       await _add(value, session);
+      const message = value.type === "ip" ? "CCTV(s) added successfully." : "ANPR(s) added successfully.";
       await session.commitTransaction();
-      return "ANPR(s) added successfully.";
+      return message;
     } catch (error2) {
       await session.abortTransaction();
       throw error2;
@@ -33671,7 +34030,7 @@ var import_node_server_utils153 = require("@7365admin1/node-server-utils");
 var import_mongodb90 = require("mongodb");
 
 // src/utils/access-management.ts
-var import_fs3 = __toESM(require("fs"));
+var import_fs4 = __toESM(require("fs"));
 var import_path = __toESM(require("path"));
 var import_axios = __toESM(require("axios"));
 var import_xml2js = require("xml2js");
@@ -33701,7 +34060,7 @@ var minifyXml = (xml) => {
   return xml.replace(/>\s+</g, "><").replace(/\n/g, "").replace(/\r/g, "").replace(/\t/g, "").trim();
 };
 var readTemplate = (name, params) => {
-  const template = import_fs3.default.readFileSync(
+  const template = import_fs4.default.readFileSync(
     import_path.default.join(__dirname, `../dist/public/xml-templates/${name}.xml`),
     "utf-8"
   );
@@ -33832,14 +34191,14 @@ var import_xml2js2 = require("xml2js");
 
 // src/utils/rsa-encryption.ts
 var crypto2 = __toESM(require("crypto"));
-var import_fs4 = __toESM(require("fs"));
+var import_fs5 = __toESM(require("fs"));
 var import_path2 = __toESM(require("path"));
 var pub = import_path2.default.resolve(process.cwd(), "./src/public/rsa-keys/new_rsa_512_pub.pem");
 var priv = import_path2.default.resolve(process.cwd(), "./src/public/rsa-keys/new_rsa_512_priv.pem");
 var EncryptionCredentials = class {
 };
-EncryptionCredentials.RAW_PUBLIC_KEY = import_fs4.default.readFileSync(pub, "utf8");
-EncryptionCredentials.RAW_PRIVATE_KEY = import_fs4.default.readFileSync(priv, "utf8");
+EncryptionCredentials.RAW_PUBLIC_KEY = import_fs5.default.readFileSync(pub, "utf8");
+EncryptionCredentials.RAW_PRIVATE_KEY = import_fs5.default.readFileSync(priv, "utf8");
 var EntrypassRSAEncryption = class extends EncryptionCredentials {
   static hexToCardNumber(hex) {
     if (!/^[0-9A-Fa-f]{8}$/.test(hex)) {