@7365admin1/core 3.139.0 → 3.140.0

package/dist/index.mjs

@@ -3203,7 +3203,10 @@ function sameAppType(a, b) {
 // src/utils/member-lookup.util.ts
 var idOf = (v) => v == null ? "" : String(v?._id ?? v).toLowerCase();
 function isLiveMembership(m) {
-  return m.status !== "deleted" && !m.deletedAt;
+  return !TAKEN_AWAY_MEMBER_STATUSES.includes(String(m?.status ?? "")) && !m?.deletedAt;
+}
+function entitledMemberships(rows) {
+  return (Array.isArray(rows) ? rows : []).filter(isLiveMembership);
 }
 function pickSiteMembership(rows, type, site, org = "") {
   site = site.toLowerCase();
@@ -3231,6 +3234,7 @@ function pickLookupMembership(rows, type, site = "", org = "") {
   return preferWorkingMembership(list.filter((m) => sameAppType(m.type, type)));
 }
 var WORKING = /* @__PURE__ */ new Set(["active", "approved"]);
+var TAKEN_AWAY_MEMBER_STATUSES = ["deleted", "inactive"];
 function preferWorkingMembership(rows, defaultOrg = "") {
   const list = Array.isArray(rows) ? rows : [];
   const working = list.filter((m) => WORKING.has(String(m.status ?? "")) && !m.deletedAt);
@@ -4094,7 +4098,7 @@ function useMemberRepo() {
       // sets it inactive, removal deletes it) must not keep the organisation
       // on the person's list: latitude.sec@ still saw JLL Singapore beside its
       // own company after the repair (owner report 2026-09-30).
-      status: { $nin: ["inactive", "deleted"] }
+      status: { $nin: TAKEN_AWAY_MEMBER_STATUSES }
     };
     const cacheOptions = {
       page: page2,
@@ -8803,7 +8807,7 @@ async function resolveInviteActor(userId) {
   const db2 = useAtlas17.getDb();
   if (!db2)
     return { ...EMPTY, id };
-  const members = await db2.collection("members").find({ user: new ObjectId26(id), status: { $ne: "deleted" } }).toArray();
+  const members = await db2.collection("members").find({ user: new ObjectId26(id), status: { $nin: TAKEN_AWAY_MEMBER_STATUSES } }).toArray();
   const adminMember = members.find((m) => m.type === "admin");
   let isSuperAdmin2 = false;
   let staffPermissions;
@@ -9110,7 +9114,7 @@ async function holdsRole(userId, roleId, orgId) {
   const member = await db2.collection("members").findOne({
     user: new ObjectId26(id),
     role: new ObjectId26(role),
-    status: { $ne: "deleted" },
+    status: { $nin: TAKEN_AWAY_MEMBER_STATUSES },
     // both shapes, as `hasOrgInvitation` does for `metadata.org`
     ...org ? { org: { $in: [new ObjectId26(org), org] } } : {}
   });
@@ -22152,7 +22156,8 @@ async function getUserPermissions(params) {
   if (!roleId || !ObjectId51.isValid(roleId)) {
     const memberQuery = {
       user: new ObjectId51(user),
-      status: { $ne: "deleted" }
+      // A taken-away (inactive) row grants no permissions either.
+      status: { $nin: TAKEN_AWAY_MEMBER_STATUSES }
     };
     if (org && ObjectId51.isValid(org)) {
       memberQuery.org = new ObjectId51(org);
@@ -22242,7 +22247,7 @@ function useCameraViewService() {
     }
   }
   async function resolveSiteAccess(params) {
-    const memberships = await params.db.collection("members").find({ user: new ObjectId52(params.userId), status: { $ne: "deleted" } }).project({ siteId: 1, org: 1, role: 1, type: 1 }).toArray();
+    const memberships = await params.db.collection("members").find({ user: new ObjectId52(params.userId), status: { $nin: TAKEN_AWAY_MEMBER_STATUSES } }).project({ siteId: 1, org: 1, role: 1, type: 1 }).toArray();
     const memberOrgIds = [
       ...new Map(
         memberships.filter((membership) => membership.org).map((membership) => [String(membership.org), membership.org])
@@ -28480,9 +28485,10 @@ function useMemberService() {
       throw error;
     }
   }
-  async function getAllByUser(user) {
+  async function getAllByUser(user, { includeRemoved = false } = {}) {
     try {
-      const members = await _getAllByUserId(user);
+      const all = await _getAllByUserId(user);
+      const members = includeRemoved ? all : entitledMemberships(all);
       return {
         items: members,
         total: members.length
@@ -29043,7 +29049,9 @@ function useMemberController() {
       return;
     }
     try {
-      const data = await _getAllByUser(userId);
+      const data = await _getAllByUser(userId, {
+        includeRemoved: req.query.include === "removed"
+      });
       const whole = await requireSelfOrPlatformStaff(req, userId, {
         resource: "members",
         action: "view-members"
@@ -29084,7 +29092,7 @@ function useMemberController() {
         org
       ) : null;
       const inOrg = org && !atSite ? await _getByUserIdTypeOrg(user, type, org).catch(() => null) : null;
-      const liveInOrg = inOrg && inOrg.status !== "deleted" && !inOrg.deletedAt ? inOrg : null;
+      const liveInOrg = inOrg && isLiveMembership(inOrg) ? inOrg : null;
       const data = atSite ?? liveInOrg ?? await _getByUserIdType(user, type);
       res.json(data);
       return;
@@ -107852,7 +107860,7 @@ function useNotificationPreferenceService() {
     const db2 = useAtlas163.getDb();
     if (!db2)
       return [];
-    const members = await db2.collection("members").find({ user: new ObjectId200(userId), status: { $ne: "deleted" } }).toArray();
+    const members = await db2.collection("members").find({ user: new ObjectId200(userId), status: { $nin: TAKEN_AWAY_MEMBER_STATUSES } }).toArray();
     if (!members.length)
       return [];
     const isResident = members.some((m) => m.type === "resident");