@7365admin1/core 3.70.0 → 3.71.0

package/dist/index.mjs

@@ -3607,6 +3607,7 @@ function useMemberRepo() {
     user = "",
     org = "",
     siteId = "",
+    siteIds,
     type = "",
     status = ""
   }) {
@@ -3640,6 +3641,12 @@ function useMemberRepo() {
         throw new BadRequestError13("Invalid site ID format.");
       }
     }
+    if (siteIds) {
+      query2.siteId = {
+        $in: siteIds.filter((id) => ObjectId13.isValid(id)).map((id) => new ObjectId13(id))
+      };
+      cacheOptions.siteIds = [...siteIds].sort().join(",") || "no-site";
+    }
     if (user) {
       try {
         query2.user = new ObjectId13(user);
@@ -9813,6 +9820,15 @@ function pickLookupMembership(rows, type, site = "", org = "") {
     return inOrg;
   return list.find((m) => m.type === type) ?? null;
 }
+function memberListSiteScope(memberships, org) {
+  const inOrg = (memberships ?? []).filter((m) => idOf2(m.org) === idOf2(org));
+  const here = inOrg.filter((m) => m.type !== "resident");
+  if (!inOrg.length)
+    return null;
+  if (here.some((m) => !idOf2(m.siteId) || m.orgLevelRole))
+    return null;
+  return [...new Set(here.map((m) => idOf2(m.siteId)))];
+}
 
 // src/services/module-gate.service.ts
 var idOf3 = (v) => v == null ? "" : String(v?._id ?? v).toLowerCase();
@@ -14979,7 +14995,7 @@ function useRoleController() {
 
 // src/controllers/member.controller.ts
 import Joi27 from "joi";
-import { BadRequestError as BadRequestError50, logger as logger37 } from "@7365admin1/node-server-utils";
+import { BadRequestError as BadRequestError50, logger as logger37, UnauthorizedError as UnauthorizedError9 } from "@7365admin1/node-server-utils";
 
 // src/services/member.service.ts
 import {
@@ -23083,6 +23099,18 @@ function useMemberController() {
         await requireConsolePermission(req, "members", "view-members");
       } else if (org) {
         await requireOrgAccess(req, org);
+      }
+      let siteIds;
+      if (org && type !== "admin") {
+        const actor = await resolveInviteActor(callerId(req));
+        const scope = staffMayBypass(actor) ? null : memberListSiteScope(actor.memberships, org);
+        if (scope) {
+          if (siteId && !scope.includes(siteId.toLowerCase())) {
+            throw new UnauthorizedError9("Not authorized.");
+          }
+          if (!siteId)
+            siteIds = scope;
+        }
       } else if (user && user !== callerId(req)) {
         await requireConsolePermission(req, "users", "see-all-users");
       }
@@ -23093,6 +23121,7 @@ function useMemberController() {
         user,
         org,
         siteId,
+        siteIds,
         type,
         status
       });
@@ -23833,7 +23862,7 @@ function useVerificationController() {
 // src/controllers/file.controller.ts
 import {
   BadRequestError as BadRequestError52,
-  UnauthorizedError as UnauthorizedError9,
+  UnauthorizedError as UnauthorizedError10,
   logger as logger39
 } from "@7365admin1/node-server-utils";
 import Joi29 from "joi";
@@ -23862,7 +23891,7 @@ async function requireFileDelete(req, file) {
     return;
   const caller = callerId(req);
   if (!caller)
-    throw new UnauthorizedError9("Not authorized.");
+    throw new UnauthorizedError10("Not authorized.");
   if (caller === ownerId)
     return;
   const [me, owner] = await Promise.all([
@@ -23878,7 +23907,7 @@ async function requireFileDelete(req, file) {
   })) {
     return;
   }
-  throw new UnauthorizedError9("Not authorized.");
+  throw new UnauthorizedError10("Not authorized.");
 }
 function useFileController() {
   const { createFile, deleteFile: _deleteFile } = useFileService();
@@ -23952,7 +23981,7 @@ import {
   BadRequestError as BadRequestError55,
   logger as logger41,
   NotFoundError as NotFoundError17,
-  UnauthorizedError as UnauthorizedError10
+  UnauthorizedError as UnauthorizedError11
 } from "@7365admin1/node-server-utils";
 import Joi32 from "joi";
 
@@ -25257,7 +25286,7 @@ function useOrgController() {
     try {
       const createdBy = callerId(req);
       if (!createdBy)
-        throw new UnauthorizedError10("Not authorized.");
+        throw new UnauthorizedError11("Not authorized.");
       const { inviteId, ...body } = req.body ?? {};
       let invitedFrom = null;
       let invitedRole = null;
@@ -27891,7 +27920,7 @@ function useSubscriptionService() {
 import Joi37 from "joi";
 import {
   BadRequestError as BadRequestError71,
-  UnauthorizedError as UnauthorizedError11,
+  UnauthorizedError as UnauthorizedError12,
   logger as logger51
 } from "@7365admin1/node-server-utils";
 
@@ -28312,7 +28341,7 @@ function useSubscriptionController() {
     try {
       const subscription = await _getSubscriptionById(subscriptionId);
       if (!subscription) {
-        throw new UnauthorizedError11("Not authorized.");
+        throw new UnauthorizedError12("Not authorized.");
       }
       await requireOrgAccess(req, subscription.org?.toString());
       const _res = await _updateSubscriptionSeats({
@@ -34016,7 +34045,7 @@ import {
   BadRequestError as BadRequestError92,
   logger as logger68,
   NotFoundError as NotFoundError26,
-  UnauthorizedError as UnauthorizedError12,
+  UnauthorizedError as UnauthorizedError13,
   useAtlas as useAtlas56
 } from "@7365admin1/node-server-utils";
 
@@ -34122,7 +34151,7 @@ function siteModulesHandlers({
         return;
       }
       if (!await mayManage(actor, site)) {
-        throw new UnauthorizedError12("Not authorized.");
+        throw new UnauthorizedError13("Not authorized.");
       }
       const org = site.orgId ? await _getOrgById(site.orgId.toString()) : null;
       const rejected = rejectedSiteModules(
@@ -34184,7 +34213,7 @@ function siteModulesHandlers({
       if (!site)
         throw new NotFoundError26("Site not found.");
       if (!await mayManage(actor, site))
-        throw new UnauthorizedError12("Not authorized.");
+        throw new UnauthorizedError13("Not authorized.");
       const org = site?.orgId ? await _getOrgById(site.orgId.toString()) : null;
       res.json(
         await siteModulePreview(site, org, normaliseModules(req.body.modules), gateData)
@@ -39496,7 +39525,7 @@ function useCustomerSiteService() {
 import Joi60 from "joi";
 import {
   BadRequestError as BadRequestError107,
-  UnauthorizedError as UnauthorizedError13,
+  UnauthorizedError as UnauthorizedError14,
   logger as logger81
 } from "@7365admin1/node-server-utils";
 async function requireEitherOrg(req, ...orgs) {
@@ -39505,7 +39534,7 @@ async function requireEitherOrg(req, ...orgs) {
   if (staffMayBypass(actor))
     return;
   if (wanted.length === 0 || !wanted.some((org) => actor.orgIds.includes(org))) {
-    throw new UnauthorizedError13("Not authorized.");
+    throw new UnauthorizedError14("Not authorized.");
   }
 }
 function useCustomerSiteController() {
@@ -42717,7 +42746,7 @@ import {
   BadRequestError as BadRequestError121,
   InternalServerError as InternalServerError44,
   NotFoundError as NotFoundError37,
-  UnauthorizedError as UnauthorizedError14,
+  UnauthorizedError as UnauthorizedError15,
   logger as logger93
 } from "@7365admin1/node-server-utils";
 
@@ -46251,8 +46280,8 @@ function useHidAmicoService() {
         await siteAccess.authorizeSite({ siteId, userId: value.userId, permissions });
       }
     } catch (error) {
-      if (error instanceof UnauthorizedError14) {
-        throw new UnauthorizedError14("You do not have permission to manage HID access at this site.");
+      if (error instanceof UnauthorizedError15) {
+        throw new UnauthorizedError15("You do not have permission to manage HID access at this site.");
       }
       throw error;
     }
@@ -46276,7 +46305,7 @@ function useHidAmicoService() {
     try {
       await authorizeSiteForCaller(String(reader.site || ""), userId);
     } catch (error) {
-      if (error instanceof UnauthorizedError14)
+      if (error instanceof UnauthorizedError15)
         throw error;
       throw new NotFoundError37(HID_READER_NOT_FOUND);
     }
@@ -46328,10 +46357,10 @@ function useHidAmicoService() {
   async function assertUserReaderPermission(reader, userId, options = {}) {
     const permission = await getReaderPermissionForUser(reader, userId);
     if (!permission.granted) {
-      throw new UnauthorizedError14("You do not have HID access permission for this reader.");
+      throw new UnauthorizedError15("You do not have HID access permission for this reader.");
     }
     if (options.intercom && !permission.intercom) {
-      throw new UnauthorizedError14("You do not have HID intercom permission for this reader.");
+      throw new UnauthorizedError15("You do not have HID intercom permission for this reader.");
     }
     return permission;
   }
@@ -47669,10 +47698,10 @@ function useHidAmicoService() {
     const hasActiveMembership = memberships.some((membership) => membership.status !== "deleted" && membership.status !== "inactive");
     const resolvedIssuer = issuer || (hasResidentMembership ? "resident" : "property_management");
     if (resolvedIssuer === "resident" && !hasResidentMembership) {
-      throw new UnauthorizedError14("Only a Resident account can issue a Resident visitor QR code.");
+      throw new UnauthorizedError15("Only a Resident account can issue a Resident visitor QR code.");
     }
     if (resolvedIssuer === "property_management" && !hasActiveMembership) {
-      throw new UnauthorizedError14("Only a site Property Management account can issue this visitor QR code.");
+      throw new UnauthorizedError15("Only a site Property Management account can issue this visitor QR code.");
     }
     const configuredGateIds = site?.metadata?.hidQrCodePass?.qrGatePermissions?.[resolvedIssuer === "resident" ? "resident" : "propertyManagement"] || [];
     const gateReaderIds = configuredGateIds.filter((readerId) => typeof readerId === "string" && /^[a-f0-9]{24}$/i.test(readerId)).map(String);
@@ -50265,7 +50294,7 @@ function useVisitorTransactionService() {
 import Joi69 from "joi";
 import moment5 from "moment-timezone";
 import { ObjectId as ObjectId94 } from "mongodb";
-import { BadRequestError as BadRequestError124, NotFoundError as NotFoundError39, InternalServerError as InternalServerError46, UnauthorizedError as UnauthorizedError15, logger as logger97 } from "@7365admin1/node-server-utils";
+import { BadRequestError as BadRequestError124, NotFoundError as NotFoundError39, InternalServerError as InternalServerError46, UnauthorizedError as UnauthorizedError16, logger as logger97 } from "@7365admin1/node-server-utils";
 
 // src/models/visitor-invite.model.ts
 import Joi67 from "joi";
@@ -55086,7 +55115,7 @@ function useVisitorTransactionController() {
     }
     const inviterUserId = callerId(req);
     if (!inviterUserId) {
-      next(new UnauthorizedError15("Not authorized."));
+      next(new UnauthorizedError16("Not authorized."));
       return;
     }
     try {
@@ -55650,7 +55679,7 @@ function useGuestManagementController() {
 // src/controllers/person.controller.ts
 import Joi72 from "joi";
 import { BadRequestError as BadRequestError127, logger as logger100 } from "@7365admin1/node-server-utils";
-import { NotFoundError as NotFoundError40, UnauthorizedError as UnauthorizedError16 } from "@7365admin1/node-server-utils";
+import { NotFoundError as NotFoundError40, UnauthorizedError as UnauthorizedError17 } from "@7365admin1/node-server-utils";
 
 // src/utils/people-create-gate.util.ts
 var PEOPLE_CREATE_REACH_MODE_DEFAULT = "log";
@@ -55717,7 +55746,7 @@ function usePersonController() {
     }
     const org = person.org?.toString() ?? "";
     if (!org || !actor.orgIds.includes(org)) {
-      throw new UnauthorizedError16("Not authorized.");
+      throw new UnauthorizedError17("Not authorized.");
     }
     return actor;
   }
@@ -55800,7 +55829,7 @@ function usePersonController() {
           });
         }
         if (verdict.refuse) {
-          next(new UnauthorizedError16("Not authorized."));
+          next(new UnauthorizedError17("Not authorized."));
           return;
         }
       }
@@ -55883,7 +55912,7 @@ function usePersonController() {
           });
         } else if (org) {
           if (!actor.orgIds.includes(org)) {
-            throw new UnauthorizedError16("Not authorized.");
+            throw new UnauthorizedError17("Not authorized.");
           }
         } else {
           orgs = actor.orgIds;
@@ -60203,7 +60232,7 @@ function useSiteFacilityService() {
 import {
   BadRequestError as BadRequestError149,
   NotFoundError as NotFoundError46,
-  UnauthorizedError as UnauthorizedError17,
+  UnauthorizedError as UnauthorizedError18,
   logger as logger119
 } from "@7365admin1/node-server-utils";
 import Joi84 from "joi";
@@ -60290,7 +60319,7 @@ function useSiteFacilityController() {
       } else {
         const { actor } = await siteReachOf(req);
         if (!actor.isSuperAdmin)
-          throw new UnauthorizedError17("Not authorized.");
+          throw new UnauthorizedError18("Not authorized.");
       }
       const data = await _getAll({
         search,
@@ -63325,7 +63354,7 @@ function useBulletinBoardService() {
 import {
   BadRequestError as BadRequestError158,
   NotFoundError as NotFoundError54,
-  UnauthorizedError as UnauthorizedError18,
+  UnauthorizedError as UnauthorizedError19,
   logger as logger128
 } from "@7365admin1/node-server-utils";
 import Joi92 from "joi";
@@ -63361,7 +63390,7 @@ function useBulletinBoardController() {
       } else {
         const { canReach } = await siteReachOf(req);
         if (!await canReach(scopeOf(value))) {
-          throw new UnauthorizedError18("Not authorized.");
+          throw new UnauthorizedError19("Not authorized.");
         }
       }
       const data = await _add(value);
@@ -63918,7 +63947,7 @@ import { BadRequestError as BadRequestError164, logger as logger134 } from "@736
 import {
   BadRequestError as BadRequestError163,
   logger as logger133,
-  UnauthorizedError as UnauthorizedError19,
+  UnauthorizedError as UnauthorizedError20,
   useAtlas as useAtlas93
 } from "@7365admin1/node-server-utils";
 
@@ -64302,7 +64331,7 @@ function useSiteBillingItemService() {
   function assertUnitAtSite(buildingUnit, site) {
     const siteId = site?.toString?.() ?? "";
     if (!siteId || (buildingUnit?.site?.toString() ?? "") !== siteId) {
-      throw new UnauthorizedError19("Not authorized.");
+      throw new UnauthorizedError20("Not authorized.");
     }
   }
   async function add(value) {
@@ -64473,7 +64502,7 @@ function useSiteBillingItemService() {
         message: error.message
       });
       await session.abortTransaction();
-      if (error instanceof BadRequestError163 || error instanceof UnauthorizedError19) {
+      if (error instanceof BadRequestError163 || error instanceof UnauthorizedError20) {
         throw error;
       }
       throw new BadRequestError163("Failed to update Site Billing Item.");
@@ -66442,7 +66471,7 @@ import Joi100 from "joi";
 
 // src/utils/resident-unit.util.ts
 import { ObjectId as ObjectId128 } from "mongodb";
-import { UnauthorizedError as UnauthorizedError20, useAtlas as useAtlas99 } from "@7365admin1/node-server-utils";
+import { UnauthorizedError as UnauthorizedError21, useAtlas as useAtlas99 } from "@7365admin1/node-server-utils";
 async function requireOwnUnit(req, site, unitId) {
   const actor = await resolveInviteActor(callerId(req));
   if (staffMayBypass(actor))
@@ -66450,7 +66479,7 @@ async function requireOwnUnit(req, site, unitId) {
   const unit = unitId?.toString?.() ?? "";
   const siteId = site?.toString?.() ?? "";
   if (!ObjectId128.isValid(unit) || !ObjectId128.isValid(siteId) || !actor.id) {
-    throw new UnauthorizedError20("Not authorized.");
+    throw new UnauthorizedError21("Not authorized.");
   }
   const db2 = useAtlas99.getDb();
   if (!db2)
@@ -66462,7 +66491,7 @@ async function requireOwnUnit(req, site, unitId) {
     status: { $ne: "deleted" }
   });
   if (!own)
-    throw new UnauthorizedError20("Not authorized.");
+    throw new UnauthorizedError21("Not authorized.");
 }
 
 // src/controllers/site-unit-billing.controller.ts
@@ -75024,7 +75053,7 @@ function useOnlineFormRepo() {
 import {
   BadRequestError as BadRequestError204,
   NotFoundError as NotFoundError74,
-  UnauthorizedError as UnauthorizedError21,
+  UnauthorizedError as UnauthorizedError22,
   logger as logger172
 } from "@7365admin1/node-server-utils";
 import Joi123 from "joi";
@@ -75096,10 +75125,10 @@ function useOnlineFormController() {
       if (site) {
         await requireSiteReach(req, site);
       } else if (!staffMayBypass(actor)) {
-        throw new UnauthorizedError21("Not authorized.");
+        throw new UnauthorizedError22("Not authorized.");
       }
       if (org && !staffMayBypass(actor) && !actor.orgIds.includes(org)) {
-        throw new UnauthorizedError21("Not authorized.");
+        throw new UnauthorizedError22("Not authorized.");
       }
       const data = await _getAll({ search, page, limit, status, org, site });
       res.json(data);
@@ -75164,7 +75193,7 @@ function useOnlineFormController() {
       if (payload.org) {
         const { actor } = await siteReachOf(req);
         if (!staffMayBypass(actor) && !actor.orgIds.includes(payload.org)) {
-          throw new UnauthorizedError21("Not authorized.");
+          throw new UnauthorizedError22("Not authorized.");
         }
       }
       await _updateOnlineFormById(_id, payload);
@@ -82476,7 +82505,7 @@ import {
   BadRequestError as BadRequestError231,
   NotFoundError as NotFoundError83,
   InternalServerError as InternalServerError85,
-  UnauthorizedError as UnauthorizedError22,
+  UnauthorizedError as UnauthorizedError23,
   useAtlas as useAtlas138,
   hashPassword as hashPassword4
 } from "@7365admin1/node-server-utils";
@@ -83399,10 +83428,10 @@ function useVerificationServiceV2() {
       const org = await getOrgById(orgId);
       const actor = await resolveInviteActor(invitedBy);
       if (!actor.id) {
-        throw new UnauthorizedError22("Sign in to continue.");
+        throw new UnauthorizedError23("Sign in to continue.");
       }
       if (!staffMayBypass(actor) && !actor.orgIds.includes(orgId)) {
-        throw new UnauthorizedError22(
+        throw new UnauthorizedError23(
           "You can only invite service providers to your own organisation's sites."
         );
       }
@@ -83715,7 +83744,7 @@ function useVerificationServiceV2() {
     const user = await _getUserById(userId).catch(() => null);
     const email = user?.email;
     if (!email) {
-      throw new UnauthorizedError22("Not authorized.");
+      throw new UnauthorizedError23("Not authorized.");
     }
     return email;
   }
@@ -83753,7 +83782,7 @@ function useVerificationServiceV2() {
       throw new NotFoundError83("Invitation not found.");
     }
     if (invite.email.toLowerCase() !== email.toLowerCase()) {
-      throw new UnauthorizedError22("Not authorized.");
+      throw new UnauthorizedError23("Not authorized.");
     }
     await _setOnboardingById({
       _id: inviteId,
@@ -87659,7 +87688,7 @@ import Joi159 from "joi";
 import { ObjectId as ObjectId183 } from "mongodb";
 import {
   InternalServerError as InternalServerError95,
-  UnauthorizedError as UnauthorizedError23,
+  UnauthorizedError as UnauthorizedError24,
   useAtlas as useAtlas150
 } from "@7365admin1/node-server-utils";
 function db() {
@@ -87675,7 +87704,7 @@ function asObjectId(value) {
 function requireCaller(req) {
   const id = callerId(req);
   if (!id || !ObjectId183.isValid(id)) {
-    throw new UnauthorizedError23("Not authorized.");
+    throw new UnauthorizedError24("Not authorized.");
   }
   return id;
 }
@@ -87683,7 +87712,7 @@ function requireSelfId(req, claimed) {
   const caller = requireCaller(req);
   const asked = claimed?.toString?.() ?? "";
   if (!asked || asked !== caller) {
-    throw new UnauthorizedError23("Not authorized.");
+    throw new UnauthorizedError24("Not authorized.");
   }
   return caller;
 }
@@ -87691,11 +87720,11 @@ async function requireOwnChannel(req, channelId) {
   const caller = requireCaller(req);
   const _id = asObjectId(channelId);
   if (!_id)
-    throw new UnauthorizedError23("Not authorized.");
+    throw new UnauthorizedError24("Not authorized.");
   const channel = await db().collection("channel-preloved").findOne({ _id }, { projection: { senderId: 1, receiverId: 1, postId: 1 } });
   const participants = [channel?.senderId, channel?.receiverId].map((id) => id?.toString?.() ?? "").filter(Boolean);
   if (!channel || !participants.includes(caller)) {
-    throw new UnauthorizedError23("Not authorized.");
+    throw new UnauthorizedError24("Not authorized.");
   }
   return { caller, channel };
 }
@@ -87703,10 +87732,10 @@ async function requireOwnChatMessage(req, chatId) {
   const caller = requireCaller(req);
   const _id = asObjectId(chatId);
   if (!_id)
-    throw new UnauthorizedError23("Not authorized.");
+    throw new UnauthorizedError24("Not authorized.");
   const message = await db().collection("chat-preloved").findOne({ _id }, { projection: { senderId: 1 } });
   if (!message || message.senderId?.toString?.() !== caller) {
-    throw new UnauthorizedError23("Not authorized.");
+    throw new UnauthorizedError24("Not authorized.");
   }
   return caller;
 }
@@ -88132,7 +88161,7 @@ function useBidPrelovedService() {
 // src/controllers/bid-preloved.controller.ts
 import {
   BadRequestError as BadRequestError252,
-  UnauthorizedError as UnauthorizedError24,
+  UnauthorizedError as UnauthorizedError25,
   logger as logger216
 } from "@7365admin1/node-server-utils";
 import Joi162 from "joi";
@@ -88184,7 +88213,7 @@ function useBidPrelovedController() {
       const bid = await _getById(params.id);
       const seller = await sellerOfPost(bid?.postId);
       if (!seller || seller !== caller) {
-        throw new UnauthorizedError24("Not authorized.");
+        throw new UnauthorizedError25("Not authorized.");
       }
       const data = await _updateStatus(params.id, body.status);
       res.status(200).json(data);
@@ -88208,7 +88237,7 @@ function useBidPrelovedController() {
       const data = await _getById(params.id);
       const seller = await sellerOfPost(data?.postId);
       if (data?.buyerId?.toString?.() !== caller && seller !== caller) {
-        throw new UnauthorizedError24("Not authorized.");
+        throw new UnauthorizedError25("Not authorized.");
       }
       res.status(200).json(data);
     } catch (error2) {
@@ -88606,7 +88635,7 @@ function useFormEntryRepo() {
 import {
   BadRequestError as BadRequestError254,
   NotFoundError as NotFoundError92,
-  UnauthorizedError as UnauthorizedError25,
+  UnauthorizedError as UnauthorizedError26,
   logger as logger218
 } from "@7365admin1/node-server-utils";
 import Joi164 from "joi";
@@ -88716,7 +88745,7 @@ function useFormEntryController() {
       } else {
         const { actor } = await siteReachOf(req);
         if (!actor.isSuperAdmin)
-          throw new UnauthorizedError25("Not authorized.");
+          throw new UnauthorizedError26("Not authorized.");
       }
       const data = await _getAll({ search, page, limit, status, org, site });
       res.json(data);
@@ -88767,7 +88796,7 @@ function useFormEntryController() {
         await requireSiteReach(req, rest.site);
       delete rest.userId;
       if (isOwner && rest.status && rest.status !== "pending") {
-        throw new UnauthorizedError25("Not authorized.");
+        throw new UnauthorizedError26("Not authorized.");
       }
       await _updateFormEntryById(_id, rest);
       res.json({ message: "Successfully updated online form." });
@@ -88824,7 +88853,7 @@ function useFormEntryController() {
   async function residentFormSubmission(req, res, next) {
     const userId = callerId(req);
     if (!userId) {
-      next(new UnauthorizedError25("Not authorized."));
+      next(new UnauthorizedError26("Not authorized."));
       return;
     }
     const payload = { ...req.body, userId };
@@ -90055,7 +90084,7 @@ function useHidAmicoController() {
 import {
   BadRequestError as BadRequestError257,
   logger as logger220,
-  UnauthorizedError as UnauthorizedError26
+  UnauthorizedError as UnauthorizedError27
 } from "@7365admin1/node-server-utils";
 import Joi166 from "joi";
 function usePlatformTermsController() {
@@ -90071,7 +90100,7 @@ function usePlatformTermsController() {
   async function requireOwnRecord(req, user, { staffMayRead = false } = {}) {
     const id = callerId(req);
     if (!id) {
-      throw new UnauthorizedError26("Not authorized.");
+      throw new UnauthorizedError27("Not authorized.");
     }
     if (id === user) {
       return id;
@@ -90079,7 +90108,7 @@ function usePlatformTermsController() {
     if (staffMayRead) {
       return await requireConsolePermission(req, "platform-terms", "see-platform-terms");
     }
-    throw new UnauthorizedError26("Not authorized.");
+    throw new UnauthorizedError27("Not authorized.");
   }
   async function getLatest(_req, res, next) {
     try {
@@ -90288,7 +90317,7 @@ function useConsoleAuditController() {
 // src/controllers/notification.controller.ts
 import {
   BadRequestError as BadRequestError259,
-  UnauthorizedError as UnauthorizedError27,
+  UnauthorizedError as UnauthorizedError28,
   logger as logger222
 } from "@7365admin1/node-server-utils";
 function useNotificationController() {
@@ -90306,10 +90335,10 @@ function useNotificationController() {
   function inboxOwner(req, claimed) {
     const caller = callerId5(req);
     if (!caller) {
-      throw new UnauthorizedError27("Not authorized.");
+      throw new UnauthorizedError28("Not authorized.");
     }
     if (claimed && claimed !== caller) {
-      throw new UnauthorizedError27("Not authorized.");
+      throw new UnauthorizedError28("Not authorized.");
     }
     return caller;
   }
@@ -90321,7 +90350,7 @@ function useNotificationController() {
     }
     try {
       if (!await isSuperAdmin(callerId5(req))) {
-        throw new UnauthorizedError27("Not authorized.");
+        throw new UnauthorizedError28("Not authorized.");
       }
       const inserted = await _addMany(value.to, {
         title: value.title,