@7365admin1/core 3.52.13 → 3.52.14

package/dist/index.mjs

@@ -10965,6 +10965,7 @@ var orgSchema = Joi8.object({
   busInst: Joi8.string().optional().allow("", null),
   status: Joi8.string().optional().allow("", null),
   defaultSite: Joi8.string().hex().optional().allow("", null),
+  createdBy: Joi8.string().hex().optional().allow("", null),
   terms: Joi8.string().optional().allow("", null),
   policies: Joi8.string().optional().allow("", null),
   createdAt: Joi8.string().optional().allow("", null),
@@ -10994,6 +10995,7 @@ function MOrg(value) {
     busInst: value.busInst,
     status: value.status || "active",
     defaultSite: value.defaultSite,
+    createdBy: value.createdBy && ObjectId18.isValid(value.createdBy.toString()) ? new ObjectId18(value.createdBy.toString()) : void 0,
     terms: value.terms ?? "",
     policies: value.policies ?? "",
     createdAt: value.createdAt || /* @__PURE__ */ new Date(),
@@ -13496,6 +13498,30 @@ async function orgLevelRoles(db2, roles) {
   }
   return orgLevel;
 }
+async function hasOrgOwnership(userId, orgId) {
+  const id = userId?.toString() ?? "";
+  const org = orgId?.toString() ?? "";
+  if (!id || !org || !ObjectId25.isValid(id) || !ObjectId25.isValid(org)) {
+    return false;
+  }
+  const db2 = useAtlas16.getDb();
+  if (!db2)
+    return false;
+  const user = await db2.collection("users").findOne({ _id: new ObjectId25(id) }, { projection: { email: 1 } });
+  const email = user?.email?.toString?.().trim() ?? "";
+  const reach = [
+    { createdBy: new ObjectId25(id) },
+    // older rows may carry the id as a string
+    { createdBy: id }
+  ];
+  if (email)
+    reach.push({ email });
+  const found = await db2.collection("organizations").findOne(
+    { _id: new ObjectId25(org), $or: reach },
+    { projection: { _id: 1 }, collation: { locale: "en", strength: 2 } }
+  );
+  return Boolean(found);
+}
 
 // src/services/service-provider-invite.service.ts
 import {
@@ -18009,15 +18035,7 @@ async function requireSelfOrPlatformStaff(req, userId) {
   return await requirePlatformStaff(req);
 }
 async function requireOrgAccess(req, orgId) {
-  const id = callerId(req);
-  if (!id)
-    throw new UnauthorizedError3("Not authorized.");
-  const actor = await resolveInviteActor(id);
-  const org = orgId?.toString() ?? "";
-  if (!actor.isSuperAdmin && !(org && actor.orgIds.includes(org))) {
-    throw new UnauthorizedError3("Not authorized.");
-  }
-  return id;
+  return await requireOrgReach(req, orgId);
 }
 async function requirePlatformOwner(req) {
   const id = callerId(req);
@@ -18038,6 +18056,8 @@ async function requireOrgReach(req, orgId) {
     return id;
   if (org && await hasOrgInvitation(id, org))
     return id;
+  if (org && await hasOrgOwnership(id, org))
+    return id;
   throw new UnauthorizedError3("Not authorized.");
 }
 async function requireInviteReach(req, org, app) {
@@ -18048,6 +18068,11 @@ async function requireInviteReach(req, org, app) {
   if (org)
     await requireOrgReach(req, org);
 }
+async function requireUserFieldWrite(req, userId, field) {
+  if (field === "email")
+    return await requirePlatformStaff(req);
+  return await requireSelfOrPlatformStaff(req, userId);
+}
 
 // src/utils/user-response.util.ts
 function withoutCredentials(user) {
@@ -18308,7 +18333,7 @@ function useUserController() {
       return;
     }
     try {
-      await requireSelfOrPlatformStaff(req, _id);
+      await requireUserFieldWrite(req, _id, payload.field);
       let message;
       if (payload.field === "plateNumber") {
         message = await updatePlateNumberByUserId(
@@ -27062,7 +27087,8 @@ function useFileController() {
 import {
   BadRequestError as BadRequestError54,
   logger as logger38,
-  NotFoundError as NotFoundError17
+  NotFoundError as NotFoundError17,
+  UnauthorizedError as UnauthorizedError7
 } from "@7365admin1/node-server-utils";
 import Joi31 from "joi";
 
@@ -28266,8 +28292,8 @@ function useOrgController() {
       return;
     }
     try {
-      await requirePlatformStaff(req);
-      await _add(req.body);
+      const createdBy = await requirePlatformStaff(req);
+      await _add({ ...req.body, createdBy });
       res.status(201).json({ message: "Successfully created organization." });
       return;
     } catch (error2) {
@@ -28333,7 +28359,10 @@ function useOrgController() {
       return;
     }
     try {
-      const _id = await _add(req.body);
+      const createdBy = callerId(req);
+      if (!createdBy)
+        throw new UnauthorizedError7("Not authorized.");
+      const _id = await _add({ ...req.body, createdBy });
       const data = await _getById(_id);
       res.status(201).json({
         message: "Successfully created organization.",
@@ -30833,7 +30862,7 @@ function useSubscriptionService() {
 import Joi36 from "joi";
 import {
   BadRequestError as BadRequestError70,
-  UnauthorizedError as UnauthorizedError7,
+  UnauthorizedError as UnauthorizedError8,
   logger as logger48
 } from "@7365admin1/node-server-utils";
 
@@ -31252,7 +31281,7 @@ function useSubscriptionController() {
     try {
       const subscription = await _getSubscriptionById(subscriptionId);
       if (!subscription) {
-        throw new UnauthorizedError7("Not authorized.");
+        throw new UnauthorizedError8("Not authorized.");
       }
       await requireOrgAccess(req, subscription.org?.toString());
       const _res = await _updateSubscriptionSeats({
@@ -41583,7 +41612,7 @@ function useCustomerSiteService() {
 import Joi59 from "joi";
 import {
   BadRequestError as BadRequestError106,
-  UnauthorizedError as UnauthorizedError8,
+  UnauthorizedError as UnauthorizedError9,
   logger as logger78
 } from "@7365admin1/node-server-utils";
 async function requireEitherOrg(req, ...orgs) {
@@ -41592,7 +41621,7 @@ async function requireEitherOrg(req, ...orgs) {
   if (actor.isSuperAdmin)
     return;
   if (wanted.length === 0 || !wanted.some((org) => actor.orgIds.includes(org))) {
-    throw new UnauthorizedError8("Not authorized.");
+    throw new UnauthorizedError9("Not authorized.");
   }
 }
 function useCustomerSiteController() {
@@ -44805,7 +44834,7 @@ import {
   BadRequestError as BadRequestError120,
   InternalServerError as InternalServerError42,
   NotFoundError as NotFoundError34,
-  UnauthorizedError as UnauthorizedError9,
+  UnauthorizedError as UnauthorizedError10,
   logger as logger90
 } from "@7365admin1/node-server-utils";
 
@@ -48339,8 +48368,8 @@ function useHidAmicoService() {
         await siteAccess.authorizeSite({ siteId, userId: value.userId, permissions });
       }
     } catch (error) {
-      if (error instanceof UnauthorizedError9) {
-        throw new UnauthorizedError9("You do not have permission to manage HID access at this site.");
+      if (error instanceof UnauthorizedError10) {
+        throw new UnauthorizedError10("You do not have permission to manage HID access at this site.");
       }
       throw error;
     }
@@ -48364,7 +48393,7 @@ function useHidAmicoService() {
     try {
       await authorizeSiteForCaller(String(reader.site || ""), userId);
     } catch (error) {
-      if (error instanceof UnauthorizedError9)
+      if (error instanceof UnauthorizedError10)
         throw error;
       throw new NotFoundError34(HID_READER_NOT_FOUND);
     }
@@ -48416,10 +48445,10 @@ function useHidAmicoService() {
   async function assertUserReaderPermission(reader, userId, options = {}) {
     const permission = await getReaderPermissionForUser(reader, userId);
     if (!permission.granted) {
-      throw new UnauthorizedError9("You do not have HID access permission for this reader.");
+      throw new UnauthorizedError10("You do not have HID access permission for this reader.");
     }
     if (options.intercom && !permission.intercom) {
-      throw new UnauthorizedError9("You do not have HID intercom permission for this reader.");
+      throw new UnauthorizedError10("You do not have HID intercom permission for this reader.");
     }
     return permission;
   }
@@ -49757,10 +49786,10 @@ function useHidAmicoService() {
     const hasActiveMembership = memberships.some((membership) => membership.status !== "deleted" && membership.status !== "inactive");
     const resolvedIssuer = issuer || (hasResidentMembership ? "resident" : "property_management");
     if (resolvedIssuer === "resident" && !hasResidentMembership) {
-      throw new UnauthorizedError9("Only a Resident account can issue a Resident visitor QR code.");
+      throw new UnauthorizedError10("Only a Resident account can issue a Resident visitor QR code.");
     }
     if (resolvedIssuer === "property_management" && !hasActiveMembership) {
-      throw new UnauthorizedError9("Only a site Property Management account can issue this visitor QR code.");
+      throw new UnauthorizedError10("Only a site Property Management account can issue this visitor QR code.");
     }
     const configuredGateIds = site?.metadata?.hidQrCodePass?.qrGatePermissions?.[resolvedIssuer === "resident" ? "resident" : "propertyManagement"] || [];
     const gateReaderIds = configuredGateIds.filter((readerId) => typeof readerId === "string" && /^[a-f0-9]{24}$/i.test(readerId)).map(String);
@@ -52159,7 +52188,7 @@ function useVisitorTransactionService() {
         unitName: unit?.name,
         org: inviter?.org?.toString(),
         site: inviter?.site.toString(),
-        status: value?.type === "contractor" ? isAutoApprovedInvitation ? "approved" /* APPROVED */ : "pending" /* PENDING */ : "pending" /* PENDING */,
+        status: value?.type === "contractor" ? isAutoApprovedInvitation ? "approved" /* APPROVED */ : "pending" /* PENDING */ : "approved" /* APPROVED */,
         inviterId: userId
       };
       const leadId = new ObjectId86();
@@ -57522,7 +57551,7 @@ function useGuestManagementController() {
 // src/controllers/person.controller.ts
 import Joi70 from "joi";
 import { BadRequestError as BadRequestError126, logger as logger97 } from "@7365admin1/node-server-utils";
-import { NotFoundError as NotFoundError37, UnauthorizedError as UnauthorizedError10 } from "@7365admin1/node-server-utils";
+import { NotFoundError as NotFoundError37, UnauthorizedError as UnauthorizedError11 } from "@7365admin1/node-server-utils";
 function usePersonController() {
   const {
     getAll: _getAll,
@@ -57556,7 +57585,7 @@ function usePersonController() {
     }
     const org = person.org?.toString() ?? "";
     if (!org || !actor.orgIds.includes(org)) {
-      throw new UnauthorizedError10("Not authorized.");
+      throw new UnauthorizedError11("Not authorized.");
     }
     return actor;
   }
@@ -57682,7 +57711,7 @@ function usePersonController() {
           });
         } else if (org) {
           if (!actor.orgIds.includes(org)) {
-            throw new UnauthorizedError10("Not authorized.");
+            throw new UnauthorizedError11("Not authorized.");
           }
         } else {
           orgs = actor.orgIds;
@@ -61988,7 +62017,7 @@ function useSiteFacilityService() {
 import {
   BadRequestError as BadRequestError148,
   NotFoundError as NotFoundError43,
-  UnauthorizedError as UnauthorizedError11,
+  UnauthorizedError as UnauthorizedError12,
   logger as logger116
 } from "@7365admin1/node-server-utils";
 import Joi82 from "joi";
@@ -62075,7 +62104,7 @@ function useSiteFacilityController() {
       } else {
         const { actor } = await siteReachOf(req);
         if (!actor.isSuperAdmin)
-          throw new UnauthorizedError11("Not authorized.");
+          throw new UnauthorizedError12("Not authorized.");
       }
       const data = await _getAll({
         search,
@@ -65110,7 +65139,7 @@ function useBulletinBoardService() {
 import {
   BadRequestError as BadRequestError157,
   NotFoundError as NotFoundError51,
-  UnauthorizedError as UnauthorizedError12,
+  UnauthorizedError as UnauthorizedError13,
   logger as logger125
 } from "@7365admin1/node-server-utils";
 import Joi90 from "joi";
@@ -65146,7 +65175,7 @@ function useBulletinBoardController() {
       } else {
         const { canReach } = await siteReachOf(req);
         if (!await canReach(scopeOf(value))) {
-          throw new UnauthorizedError12("Not authorized.");
+          throw new UnauthorizedError13("Not authorized.");
         }
       }
       const data = await _add(value);
@@ -65703,7 +65732,7 @@ import { BadRequestError as BadRequestError163, logger as logger131 } from "@736
 import {
   BadRequestError as BadRequestError162,
   logger as logger130,
-  UnauthorizedError as UnauthorizedError13,
+  UnauthorizedError as UnauthorizedError14,
   useAtlas as useAtlas88
 } from "@7365admin1/node-server-utils";
 
@@ -66087,7 +66116,7 @@ function useSiteBillingItemService() {
   function assertUnitAtSite(buildingUnit, site) {
     const siteId = site?.toString?.() ?? "";
     if (!siteId || (buildingUnit?.site?.toString() ?? "") !== siteId) {
-      throw new UnauthorizedError13("Not authorized.");
+      throw new UnauthorizedError14("Not authorized.");
     }
   }
   async function add(value) {
@@ -66258,7 +66287,7 @@ function useSiteBillingItemService() {
         message: error.message
       });
       await session.abortTransaction();
-      if (error instanceof BadRequestError162 || error instanceof UnauthorizedError13) {
+      if (error instanceof BadRequestError162 || error instanceof UnauthorizedError14) {
         throw error;
       }
       throw new BadRequestError162("Failed to update Site Billing Item.");
@@ -68227,7 +68256,7 @@ import Joi98 from "joi";
 
 // src/utils/resident-unit.util.ts
 import { ObjectId as ObjectId123 } from "mongodb";
-import { UnauthorizedError as UnauthorizedError14, useAtlas as useAtlas94 } from "@7365admin1/node-server-utils";
+import { UnauthorizedError as UnauthorizedError15, useAtlas as useAtlas94 } from "@7365admin1/node-server-utils";
 async function requireOwnUnit(req, site, unitId) {
   const actor = await resolveInviteActor(callerId(req));
   if (actor.isSuperAdmin)
@@ -68235,7 +68264,7 @@ async function requireOwnUnit(req, site, unitId) {
   const unit = unitId?.toString?.() ?? "";
   const siteId = site?.toString?.() ?? "";
   if (!ObjectId123.isValid(unit) || !ObjectId123.isValid(siteId) || !actor.id) {
-    throw new UnauthorizedError14("Not authorized.");
+    throw new UnauthorizedError15("Not authorized.");
   }
   const db2 = useAtlas94.getDb();
   if (!db2)
@@ -68247,7 +68276,7 @@ async function requireOwnUnit(req, site, unitId) {
     status: { $ne: "deleted" }
   });
   if (!own)
-    throw new UnauthorizedError14("Not authorized.");
+    throw new UnauthorizedError15("Not authorized.");
 }
 
 // src/controllers/site-unit-billing.controller.ts
@@ -76799,7 +76828,7 @@ function useOnlineFormRepo() {
 import {
   BadRequestError as BadRequestError203,
   NotFoundError as NotFoundError71,
-  UnauthorizedError as UnauthorizedError15,
+  UnauthorizedError as UnauthorizedError16,
   logger as logger169
 } from "@7365admin1/node-server-utils";
 import Joi121 from "joi";
@@ -76871,10 +76900,10 @@ function useOnlineFormController() {
       if (site) {
         await requireSiteReach(req, site);
       } else if (!actor.isSuperAdmin) {
-        throw new UnauthorizedError15("Not authorized.");
+        throw new UnauthorizedError16("Not authorized.");
       }
       if (org && !actor.isSuperAdmin && !actor.orgIds.includes(org)) {
-        throw new UnauthorizedError15("Not authorized.");
+        throw new UnauthorizedError16("Not authorized.");
       }
       const data = await _getAll({ search, page, limit, status, org, site });
       res.json(data);
@@ -76939,7 +76968,7 @@ function useOnlineFormController() {
       if (payload.org) {
         const { actor } = await siteReachOf(req);
         if (!actor.isSuperAdmin && !actor.orgIds.includes(payload.org)) {
-          throw new UnauthorizedError15("Not authorized.");
+          throw new UnauthorizedError16("Not authorized.");
         }
       }
       await _updateOnlineFormById(_id, payload);
@@ -84185,7 +84214,7 @@ import {
   BadRequestError as BadRequestError228,
   NotFoundError as NotFoundError78,
   InternalServerError as InternalServerError81,
-  UnauthorizedError as UnauthorizedError16,
+  UnauthorizedError as UnauthorizedError17,
   useAtlas as useAtlas131,
   hashPassword as hashPassword4
 } from "@7365admin1/node-server-utils";
@@ -84454,10 +84483,10 @@ function useVerificationServiceV2() {
       const org = await getOrgById(orgId);
       const actor = await resolveInviteActor(invitedBy);
       if (!actor.id) {
-        throw new UnauthorizedError16("Sign in to continue.");
+        throw new UnauthorizedError17("Sign in to continue.");
       }
       if (!actor.isSuperAdmin && !actor.orgIds.includes(orgId)) {
-        throw new UnauthorizedError16(
+        throw new UnauthorizedError17(
           "You can only invite service providers to your own organisation's sites."
         );
       }
@@ -86329,7 +86358,7 @@ function useUserControllerV2() {
       return;
     }
     try {
-      await requireSelfOrPlatformStaff(req, _id);
+      await requireUserFieldWrite(req, _id, payload.field);
       const message = await _updateUserFieldById({ _id, ...payload });
       res.json({ message });
       return;
@@ -88836,7 +88865,7 @@ import Joi157 from "joi";
 import { ObjectId as ObjectId178 } from "mongodb";
 import {
   InternalServerError as InternalServerError93,
-  UnauthorizedError as UnauthorizedError17,
+  UnauthorizedError as UnauthorizedError18,
   useAtlas as useAtlas145
 } from "@7365admin1/node-server-utils";
 function db() {
@@ -88852,7 +88881,7 @@ function asObjectId(value) {
 function requireCaller(req) {
   const id = callerId(req);
   if (!id || !ObjectId178.isValid(id)) {
-    throw new UnauthorizedError17("Not authorized.");
+    throw new UnauthorizedError18("Not authorized.");
   }
   return id;
 }
@@ -88860,7 +88889,7 @@ function requireSelfId(req, claimed) {
   const caller = requireCaller(req);
   const asked = claimed?.toString?.() ?? "";
   if (!asked || asked !== caller) {
-    throw new UnauthorizedError17("Not authorized.");
+    throw new UnauthorizedError18("Not authorized.");
   }
   return caller;
 }
@@ -88868,11 +88897,11 @@ async function requireOwnChannel(req, channelId) {
   const caller = requireCaller(req);
   const _id = asObjectId(channelId);
   if (!_id)
-    throw new UnauthorizedError17("Not authorized.");
+    throw new UnauthorizedError18("Not authorized.");
   const channel = await db().collection("channel-preloved").findOne({ _id }, { projection: { senderId: 1, receiverId: 1, postId: 1 } });
   const participants = [channel?.senderId, channel?.receiverId].map((id) => id?.toString?.() ?? "").filter(Boolean);
   if (!channel || !participants.includes(caller)) {
-    throw new UnauthorizedError17("Not authorized.");
+    throw new UnauthorizedError18("Not authorized.");
   }
   return { caller, channel };
 }
@@ -88880,10 +88909,10 @@ async function requireOwnChatMessage(req, chatId) {
   const caller = requireCaller(req);
   const _id = asObjectId(chatId);
   if (!_id)
-    throw new UnauthorizedError17("Not authorized.");
+    throw new UnauthorizedError18("Not authorized.");
   const message = await db().collection("chat-preloved").findOne({ _id }, { projection: { senderId: 1 } });
   if (!message || message.senderId?.toString?.() !== caller) {
-    throw new UnauthorizedError17("Not authorized.");
+    throw new UnauthorizedError18("Not authorized.");
   }
   return caller;
 }
@@ -89309,7 +89338,7 @@ function useBidPrelovedService() {
 // src/controllers/bid-preloved.controller.ts
 import {
   BadRequestError as BadRequestError251,
-  UnauthorizedError as UnauthorizedError18,
+  UnauthorizedError as UnauthorizedError19,
   logger as logger212
 } from "@7365admin1/node-server-utils";
 import Joi160 from "joi";
@@ -89361,7 +89390,7 @@ function useBidPrelovedController() {
       const bid = await _getById(params.id);
       const seller = await sellerOfPost(bid?.postId);
       if (!seller || seller !== caller) {
-        throw new UnauthorizedError18("Not authorized.");
+        throw new UnauthorizedError19("Not authorized.");
       }
       const data = await _updateStatus(params.id, body.status);
       res.status(200).json(data);
@@ -89385,7 +89414,7 @@ function useBidPrelovedController() {
       const data = await _getById(params.id);
       const seller = await sellerOfPost(data?.postId);
       if (data?.buyerId?.toString?.() !== caller && seller !== caller) {
-        throw new UnauthorizedError18("Not authorized.");
+        throw new UnauthorizedError19("Not authorized.");
       }
       res.status(200).json(data);
     } catch (error2) {
@@ -89783,7 +89812,7 @@ function useFormEntryRepo() {
 import {
   BadRequestError as BadRequestError253,
   NotFoundError as NotFoundError89,
-  UnauthorizedError as UnauthorizedError19,
+  UnauthorizedError as UnauthorizedError20,
   logger as logger214
 } from "@7365admin1/node-server-utils";
 import Joi162 from "joi";
@@ -89893,7 +89922,7 @@ function useFormEntryController() {
       } else {
         const { actor } = await siteReachOf(req);
         if (!actor.isSuperAdmin)
-          throw new UnauthorizedError19("Not authorized.");
+          throw new UnauthorizedError20("Not authorized.");
       }
       const data = await _getAll({ search, page, limit, status, org, site });
       res.json(data);
@@ -89944,7 +89973,7 @@ function useFormEntryController() {
         await requireSiteReach(req, rest.site);
       delete rest.userId;
       if (isOwner && rest.status && rest.status !== "pending") {
-        throw new UnauthorizedError19("Not authorized.");
+        throw new UnauthorizedError20("Not authorized.");
       }
       await _updateFormEntryById(_id, rest);
       res.json({ message: "Successfully updated online form." });
@@ -90001,7 +90030,7 @@ function useFormEntryController() {
   async function residentFormSubmission(req, res, next) {
     const userId = callerId(req);
     if (!userId) {
-      next(new UnauthorizedError19("Not authorized."));
+      next(new UnauthorizedError20("Not authorized."));
       return;
     }
     const payload = { ...req.body, userId };
@@ -91232,7 +91261,7 @@ function useHidAmicoController() {
 import {
   BadRequestError as BadRequestError256,
   logger as logger216,
-  UnauthorizedError as UnauthorizedError20
+  UnauthorizedError as UnauthorizedError21
 } from "@7365admin1/node-server-utils";
 import Joi164 from "joi";
 function usePlatformTermsController() {
@@ -91248,7 +91277,7 @@ function usePlatformTermsController() {
   async function requireOwnRecord(req, user, { staffMayRead = false } = {}) {
     const id = callerId(req);
     if (!id) {
-      throw new UnauthorizedError20("Not authorized.");
+      throw new UnauthorizedError21("Not authorized.");
     }
     if (id === user) {
       return id;
@@ -91256,7 +91285,7 @@ function usePlatformTermsController() {
     if (staffMayRead) {
       return await requirePlatformStaff(req);
     }
-    throw new UnauthorizedError20("Not authorized.");
+    throw new UnauthorizedError21("Not authorized.");
   }
   async function getLatest(_req, res, next) {
     try {
@@ -91462,7 +91491,7 @@ function useConsoleAuditController() {
 // src/controllers/notification.controller.ts
 import {
   BadRequestError as BadRequestError258,
-  UnauthorizedError as UnauthorizedError21,
+  UnauthorizedError as UnauthorizedError22,
   logger as logger218
 } from "@7365admin1/node-server-utils";
 function useNotificationController() {
@@ -91480,10 +91509,10 @@ function useNotificationController() {
   function inboxOwner(req, claimed) {
     const caller = callerId5(req);
     if (!caller) {
-      throw new UnauthorizedError21("Not authorized.");
+      throw new UnauthorizedError22("Not authorized.");
     }
     if (claimed && claimed !== caller) {
-      throw new UnauthorizedError21("Not authorized.");
+      throw new UnauthorizedError22("Not authorized.");
     }
     return caller;
   }
@@ -91495,7 +91524,7 @@ function useNotificationController() {
     }
     try {
       if (!await isSuperAdmin(callerId5(req))) {
-        throw new UnauthorizedError21("Not authorized.");
+        throw new UnauthorizedError22("Not authorized.");
       }
       const inserted = await _addMany(value.to, {
         title: value.title,
@@ -92031,6 +92060,7 @@ export {
   hasAnyCapability,
   hasAnyPermission,
   hasOrgInvitation,
+  hasOrgOwnership,
   hidRawUint64,
   incidentReportLog,
   incidents_namespace_collection,