@7365admin1/core 3.78.0 → 3.79.0

package/dist/index.mjs

@@ -4401,6 +4401,20 @@ async function resolveStaffRole(userId) {
   const role = await db2.collection("roles").findOne({ _id: new ObjectId14(member.role.toString()), ...LIVE_ROLE });
   return role?.type === "admin" ? role : null;
 }
+async function listStaffUserIds() {
+  const db2 = useAtlas8.getDb();
+  if (!db2)
+    return [];
+  const members = await db2.collection("members").find({ type: "admin", status: { $ne: "deleted" } }, { projection: { user: 1, role: 1 } }).toArray();
+  const roleIds = members.map((m) => m.role?.toString?.() ?? "").filter((r) => r && ObjectId14.isValid(r)).map((r) => new ObjectId14(r));
+  if (!roleIds.length)
+    return [];
+  const staffRoles = new Set(
+    (await db2.collection("roles").find({ _id: { $in: roleIds }, type: "admin", ...LIVE_ROLE }, { projection: { _id: 1 } }).toArray()).map((r) => r._id.toString())
+  );
+  const ids2 = members.filter((m) => staffRoles.has(m.role?.toString?.() ?? "")).map((m) => m.user?.toString?.() ?? "").filter((id) => id && ObjectId14.isValid(id));
+  return Array.from(new Set(ids2));
+}
 async function isSuperAdmin(userId) {
   return await resolveStaffRole(userId) !== null;
 }
@@ -8396,6 +8410,7 @@ var NotificationModule = /* @__PURE__ */ ((NotificationModule2) => {
   NotificationModule2["EMERGENCY_CONTACT"] = "emergencyContact";
   NotificationModule2["VIRTUAL_PATROL"] = "virtualPatrol";
   NotificationModule2["CAMERA_FAULT"] = "cameraFault";
+  NotificationModule2["PLATFORM"] = "platform";
   NotificationModule2["OTHER"] = "other";
   return NotificationModule2;
 })(NotificationModule || {});
@@ -8818,6 +8833,17 @@ var NOTIFICATION_CHANNEL_LABELS = {
 var ORG_MARKETPLACE_VENDOR_FIELD = "isMarketplaceVendor";
 var NO_EMAIL_RECIPIENT = "This system does not email anyone about this \u2014 the alert only reaches you in the app and on your phone.";
 var NOTIFICATION_CATEGORIES = [
+  {
+    key: "platform",
+    label: "Seven365 platform",
+    description: "When a new client is created, or an invited client owner accepts and their account goes live. Seven365 staff only.",
+    channels: { inApp: true, push: true, email: false },
+    channelNote: { email: NO_EMAIL_RECIPIENT },
+    // Staff hold `*`; the flag below is what decides, not a resource.
+    permissionResources: [],
+    staffOnly: true,
+    rendered: true
+  },
   {
     key: "feedback",
     label: "Feedback",
@@ -9039,6 +9065,8 @@ function categoriesForPermissions(params) {
   return NOTIFICATION_CATEGORIES.filter((category) => {
     if (!category.rendered)
       return false;
+    if (category.staffOnly)
+      return params.isStaff === true;
     if (wildcard)
       return true;
     if (params.isResident && category.residentDefault)
@@ -10258,7 +10286,61 @@ async function sendSafetyAlert(params) {
   );
   return userIds.length;
 }
+async function staffRecipients() {
+  try {
+    return await listStaffUserIds();
+  } catch (error) {
+    console.warn("[NotificationService] staff lookup", error);
+    return [];
+  }
+}
 var NotificationService = class {
+  /**
+   * Seven365's own staff, told about the platform's client lifecycle.
+   *
+   * Nothing in the estate addressed Seven365 staff before this: their bell was
+   * empty by construction (owner, 2026-09-21). Both senders resolve the staff
+   * list themselves — a caller cannot address the platform by accident — and
+   * both are quiet when there are no staff accounts.
+   *
+   * No `appSlug`: staff work on the web, and the web feed asks for everything
+   * addressed to the person. The category is `platform`, whose switch only
+   * staff are shown.
+   */
+  static async clientCreated(payload) {
+    const staff = await staffRecipients();
+    if (!staff.length)
+      return;
+    const what = [payload.orgName, payload.nature].filter(Boolean).join(" \u2014 ");
+    await send(
+      staff,
+      "New client created",
+      `${what} is now on iService365.`,
+      {
+        module: "platform",
+        screen: "",
+        params: { id: payload.orgId.toString() }
+      },
+      false,
+      void 0,
+      "platform"
+    );
+  }
+  static async clientInvitationAccepted(payload) {
+    const staff = await staffRecipients();
+    if (!staff.length)
+      return;
+    const who = payload.orgName ? `${payload.email} (${payload.orgName})` : payload.email;
+    await send(
+      staff,
+      "Invitation accepted",
+      `${who} accepted their invitation and can sign in.`,
+      { module: "platform", screen: "" },
+      false,
+      void 0,
+      "platform"
+    );
+  }
   static async bulletinBoardCreated(payload) {
     await send(
       toStringArray(payload.to),
@@ -24186,6 +24268,11 @@ function useVerificationController() {
         return;
       }
       const result = await _updateStatusById(id, status);
+      void NotificationService.clientInvitationAccepted({
+        email: verification.email,
+        invitationType: verification.type,
+        orgName: verification?.metadata?.organizationName
+      });
       res.json({ message: result });
       return;
     } catch (error2) {
@@ -25587,6 +25674,12 @@ function useOrgController() {
       const createdBy = await requireConsolePermission(req, "organizations");
       const org = await _add({ ...req.body, createdBy });
       await seedDefaultRoles(org, req.body.nature);
+      void NotificationService.clientCreated({
+        orgId: org,
+        orgName: req.body.name,
+        nature: req.body.nature,
+        createdBy
+      });
       res.status(201).json({ message: "Successfully created organization." });
       return;
     } catch (error2) {
@@ -91461,7 +91554,9 @@ function useNotificationPreferenceService() {
     return categoriesForPermissions({
       permissions,
       isResident,
-      isMarketplaceVendor: await belongsToMarketplaceVendor(db2, members)
+      isMarketplaceVendor: await belongsToMarketplaceVendor(db2, members),
+      // The staff switch is never opened by a role permission — see `staffOnly`.
+      isStaff: await isSuperAdmin(userId)
     });
   }
   async function getForUser(userId) {
@@ -92116,6 +92211,7 @@ export {
   isSuperAdmin,
   isTermsCurrent,
   isValidTimezone,
+  listStaffUserIds,
   manpowerDesignationsSchema,
   manpowerEvents,
   manpowerMonitoringSchema,