@7365admin1/core 3.8.0 → 3.9.0

package/dist/index.js

@@ -536,13 +536,13 @@ var require_logger = __commonJS({
     "use strict";
     exports.__esModule = true;
     var _utils = require_utils();
-    var logger197 = {
+    var logger200 = {
       methodMap: ["debug", "info", "warn", "error"],
       level: "info",
       // Maps a given level value to the `methodMap` indexes above.
       lookupLevel: function lookupLevel(level) {
         if (typeof level === "string") {
-          var levelMap = _utils.indexOf(logger197.methodMap, level.toLowerCase());
+          var levelMap = _utils.indexOf(logger200.methodMap, level.toLowerCase());
           if (levelMap >= 0) {
             level = levelMap;
           } else {
@@ -553,9 +553,9 @@ var require_logger = __commonJS({
       },
       // Can be overridden in the host environment
       log: function log(level) {
-        level = logger197.lookupLevel(level);
-        if (typeof console !== "undefined" && logger197.lookupLevel(logger197.level) <= level) {
-          var method = logger197.methodMap[level];
+        level = logger200.lookupLevel(level);
+        if (typeof console !== "undefined" && logger200.lookupLevel(logger200.level) <= level) {
+          var method = logger200.methodMap[level];
           if (!console[method]) {
             method = "log";
           }
@@ -566,7 +566,7 @@ var require_logger = __commonJS({
         }
       }
     };
-    exports["default"] = logger197;
+    exports["default"] = logger200;
     module2.exports = exports["default"];
   }
 });
@@ -5892,6 +5892,8 @@ __export(src_exports, {
   ANPRMode: () => ANPRMode,
   AccessTypeProps: () => AccessTypeProps,
   AppServiceType: () => AppServiceType,
+  BidStatus: () => BidStatus,
+  BidType: () => BidType,
   BuildingLevelStatus: () => BuildingLevelStatus,
   BuildingStatus: () => BuildingStatus,
   BulletinOrder: () => BulletinOrder,
@@ -5923,6 +5925,7 @@ __export(src_exports, {
   MAddress: () => MAddress,
   MAttendance: () => MAttendance,
   MAttendanceSettings: () => MAttendanceSettings,
+  MBidPreloved: () => MBidPreloved,
   MBillingConfiguration: () => MBillingConfiguration,
   MBillingItem: () => MBillingItem,
   MBuilding: () => MBuilding,
@@ -5943,6 +5946,9 @@ __export(src_exports, {
   MFile: () => MFile,
   MFormEntry: () => MFormEntry,
   MGuestManagement: () => MGuestManagement,
+  MHidAmicoEvent: () => MHidAmicoEvent,
+  MHidAmicoIdentity: () => MHidAmicoIdentity,
+  MHidAmicoReader: () => MHidAmicoReader,
   MIncidentReport: () => MIncidentReport,
   MManpowerDesignations: () => MManpowerDesignations,
   MManpowerMonitoring: () => MManpowerMonitoring,
@@ -6062,6 +6068,7 @@ __export(src_exports, {
   schema: () => schema,
   schemaApprovedBy: () => schemaApprovedBy,
   schemaApprover: () => schemaApprover,
+  schemaBidPreloved: () => schemaBidPreloved,
   schemaBilling: () => schemaBilling,
   schemaBillingConfiguration: () => schemaBillingConfiguration,
   schemaBillingItem: () => schemaBillingItem,
@@ -6074,6 +6081,7 @@ __export(src_exports, {
   schemaCategoryPreloved: () => schemaCategoryPreloved,
   schemaChannelPreloved: () => schemaChannelPreloved,
   schemaChatPreloved: () => schemaChatPreloved,
+  schemaCreateHidAmicoIdentity: () => schemaCreateHidAmicoIdentity,
   schemaCustomerSite: () => schemaCustomerSite,
   schemaDocumentManagement: () => schemaDocumentManagement,
   schemaEntryPassSettings: () => schemaEntryPassSettings,
@@ -6081,6 +6089,21 @@ __export(src_exports, {
   schemaFiles: () => schemaFiles,
   schemaFormEntry: () => schemaFormEntry,
   schemaGuestManagement: () => schemaGuestManagement,
+  schemaHidAmicoConfiguration: () => schemaHidAmicoConfiguration,
+  schemaHidAmicoEvent: () => schemaHidAmicoEvent,
+  schemaHidAmicoExecuteActions: () => schemaHidAmicoExecuteActions,
+  schemaHidAmicoIdentity: () => schemaHidAmicoIdentity,
+  schemaHidAmicoIdentityIdParams: () => schemaHidAmicoIdentityIdParams,
+  schemaHidAmicoIdentityQuery: () => schemaHidAmicoIdentityQuery,
+  schemaHidAmicoLogQuery: () => schemaHidAmicoLogQuery,
+  schemaHidAmicoNotificationParams: () => schemaHidAmicoNotificationParams,
+  schemaHidAmicoObjectOperation: () => schemaHidAmicoObjectOperation,
+  schemaHidAmicoReader: () => schemaHidAmicoReader,
+  schemaHidAmicoReaderIdParams: () => schemaHidAmicoReaderIdParams,
+  schemaHidAmicoReaderListQuery: () => schemaHidAmicoReaderListQuery,
+  schemaHidAmicoSetConfiguration: () => schemaHidAmicoSetConfiguration,
+  schemaHidAmicoSync: () => schemaHidAmicoSync,
+  schemaHidAmicoUserImageParams: () => schemaHidAmicoUserImageParams,
   schemaIncidentReport: () => schemaIncidentReport,
   schemaMultipleDocumentManagement: () => schemaMultipleDocumentManagement,
   schemaNfcPatrolLog: () => schemaNfcPatrolLog,
@@ -6108,6 +6131,7 @@ __export(src_exports, {
   schemaStatementOfAccount: () => schemaStatementOfAccount,
   schemaSubcategoryPreloved: () => schemaSubcategoryPreloved,
   schemaUnitBilling: () => schemaUnitBilling,
+  schemaUpdateBidPreloved: () => schemaUpdateBidPreloved,
   schemaUpdateBuildingLevel: () => schemaUpdateBuildingLevel,
   schemaUpdateBulletinBoard: () => schemaUpdateBulletinBoard,
   schemaUpdateBulletinVideo: () => schemaUpdateBulletinVideo,
@@ -6118,6 +6142,8 @@ __export(src_exports, {
   schemaUpdateEventManagement: () => schemaUpdateEventManagement,
   schemaUpdateFormEntry: () => schemaUpdateFormEntry,
   schemaUpdateGuestManagement: () => schemaUpdateGuestManagement,
+  schemaUpdateHidAmicoIdentity: () => schemaUpdateHidAmicoIdentity,
+  schemaUpdateHidAmicoReader: () => schemaUpdateHidAmicoReader,
   schemaUpdateIncidentReport: () => schemaUpdateIncidentReport,
   schemaUpdateOccurrenceBook: () => schemaUpdateOccurrenceBook,
   schemaUpdateOccurrenceEntry: () => schemaUpdateOccurrenceEntry,
@@ -6163,6 +6189,8 @@ __export(src_exports, {
   useAuthControllerV2: () => useAuthControllerV2,
   useAuthService: () => useAuthService,
   useAuthServiceV2: () => useAuthServiceV2,
+  useBidPrelovedController: () => useBidPrelovedController,
+  useBidPrelovedRepo: () => useBidPrelovedRepo,
   useBuildingController: () => useBuildingController,
   useBuildingLevelController: () => useBuildingLevelController,
   useBuildingLevelRepo: () => useBuildingLevelRepo,
@@ -6185,6 +6213,7 @@ __export(src_exports, {
   useChatController: () => useChatController,
   useChatPrelovedController: () => useChatPrelovedController,
   useChatPrelovedRepo: () => useChatPrelovedRepo,
+  useChatPrelovedService: () => useChatPrelovedService,
   useChatRepo: () => useChatRepo,
   useCounterModel: () => useCounterModel,
   useCounterRepo: () => useCounterRepo,
@@ -6215,6 +6244,9 @@ __export(src_exports, {
   useGuestManagementController: () => useGuestManagementController,
   useGuestManagementRepo: () => useGuestManagementRepo,
   useGuestManagementService: () => useGuestManagementService,
+  useHidAmicoController: () => useHidAmicoController,
+  useHidAmicoRepo: () => useHidAmicoRepo,
+  useHidAmicoService: () => useHidAmicoService,
   useHrmLabsAttendanceCtrl: () => useHrmLabsAttendanceCtrl,
   useHrmLabsAttendanceSrvc: () => useHrmLabsAttendanceSrvc,
   useIncidentReportController: () => useIncidentReportController,
@@ -11204,7 +11236,8 @@ var metadataSchema3 = import_joi9.default.object({
   guardPosts: import_joi9.default.number().optional(),
   gracePeriod: import_joi9.default.number().optional(),
   incidentCounter: import_joi9.default.number().optional(),
-  incidentLogo: import_joi9.default.string().optional().allow("", null)
+  incidentLogo: import_joi9.default.string().optional().allow("", null),
+  services: import_joi9.default.array().items(import_joi9.default.object().unknown(true)).optional()
 });
 var updateAddressSchema = import_joi9.default.object({
   line1: import_joi9.default.string().min(3).allow("", null),
@@ -11234,7 +11267,8 @@ var allowedFieldsSite = [
   "metadata.guardPosts",
   "metadata.gracePeriod",
   "metadata.incidentCounter",
-  "metadata.incidentLogo"
+  "metadata.incidentLogo",
+  "metadata.services"
 ];
 var siteSchema = import_joi9.default.object({
   name: import_joi9.default.string().required(),
@@ -12108,9 +12142,7 @@ function useVerificationRepoV2() {
         }
       );
     } catch (error) {
-      throw new import_node_server_utils20.InternalServerError(
-        "Failed to retrieve verification."
-      );
+      throw new import_node_server_utils20.InternalServerError("Failed to retrieve verification.");
     }
   }
   async function updateVerificationCodeById(_id, verificationCode, expireAt, session) {
@@ -12128,9 +12160,7 @@ function useVerificationRepoV2() {
         { session }
       );
     } catch (error) {
-      throw new import_node_server_utils20.InternalServerError(
-        "Failed to update verification code."
-      );
+      throw new import_node_server_utils20.InternalServerError("Failed to update verification code.");
     }
   }
   return {
@@ -21014,12 +21044,20 @@ var schemaVisitorTransaction = import_joi37.default.object({
       nric: import_joi37.default.string().optional().allow(null, ""),
       visitorPass: import_joi37.default.array().items(
         import_joi37.default.object({
-          keyId: import_joi37.default.string().hex().length(24).required()
+          keyId: import_joi37.default.string().hex().length(24).required(),
+          receivedDate: import_joi37.default.date().optional().allow(null),
+          status: import_joi37.default.string().optional().allow(null, ""),
+          lastUpdate: import_joi37.default.date().optional().allow(null),
+          remarks: import_joi37.default.string().optional().allow(null, "")
         })
       ).optional().allow(null),
       passKeys: import_joi37.default.array().items(
         import_joi37.default.object({
-          keyId: import_joi37.default.string().hex().length(24).required()
+          keyId: import_joi37.default.string().hex().length(24).required(),
+          receivedDate: import_joi37.default.date().optional().allow(null),
+          status: import_joi37.default.string().optional().allow(null, ""),
+          lastUpdate: import_joi37.default.date().optional().allow(null),
+          remarks: import_joi37.default.string().optional().allow(null, "")
         })
       ).optional().allow(null),
       contact: import_joi37.default.string().optional().allow(null, "")
@@ -21036,19 +21074,28 @@ var schemaVisitorTransaction = import_joi37.default.object({
   numberOfPassengers: import_joi37.default.number().integer().optional().allow(null, ""),
   visitorPass: import_joi37.default.array().items(
     import_joi37.default.object({
-      keyId: import_joi37.default.string().hex().length(24).allow(null, "")
+      keyId: import_joi37.default.string().hex().length(24).allow(null, ""),
+      receivedDate: import_joi37.default.date().optional().allow(null),
+      status: import_joi37.default.string().optional().allow(null, ""),
+      lastUpdate: import_joi37.default.date().optional().allow(null),
+      remarks: import_joi37.default.string().optional().allow(null, "")
     })
   ).optional().allow(null),
   passKeys: import_joi37.default.array().items(
     import_joi37.default.object({
-      keyId: import_joi37.default.string().hex().length(24).allow(null, "")
+      keyId: import_joi37.default.string().hex().length(24).allow(null, ""),
+      receivedDate: import_joi37.default.date().optional().allow(null),
+      status: import_joi37.default.string().optional().allow(null, ""),
+      lastUpdate: import_joi37.default.date().optional().allow(null),
+      remarks: import_joi37.default.string().optional().allow(null, "")
     })
   ).optional().allow(null),
   checkInRemarks: import_joi37.default.string().optional().allow("", null),
   checkOutRemarks: import_joi37.default.string().optional().allow("", null),
   expectedCheckIn: import_joi37.default.string().isoDate().optional(),
   purpose: import_joi37.default.string().optional().allow(null, ""),
-  inviterId: import_joi37.default.any().optional().allow(null, "")
+  inviterId: import_joi37.default.any().optional().allow(null, ""),
+  createdBy: import_joi37.default.string().hex().length(24).optional().allow(null, "")
 });
 var schemaUpdateVisTrans = import_joi37.default.object({
   _id: import_joi37.default.string().hex().length(24).required(),
@@ -21168,22 +21215,22 @@ function MVisitorTransaction(value) {
       throw new Error("Invalid type for manualCheckout key.");
     }
   }
-  if (value.visitorPass && Array.isArray(value.visitorPass) && value.visitorPass.length > 0) {
+  if (Array.isArray(value.visitorPass)) {
     value.visitorPass = value.visitorPass.map((v) => {
-      if (typeof v === "string")
-        return { keyId: new import_mongodb39.ObjectId(v) };
-      if (v?.keyId && typeof v.keyId === "string") {
-        return { keyId: new import_mongodb39.ObjectId(v.keyId) };
+      try {
+        v.keyId = new import_mongodb39.ObjectId(v.keyId);
+      } catch (error2) {
+        throw new Error("Invalid VisitorPass ID.");
       }
       return v;
     });
   }
-  if (value.passKeys && Array.isArray(value.passKeys) && value.passKeys.length > 0) {
+  if (Array.isArray(value.passKeys)) {
     value.passKeys = value.passKeys.map((p) => {
-      if (typeof p === "string")
-        return { keyId: new import_mongodb39.ObjectId(p) };
-      if (p?.keyId && typeof p.keyId === "string") {
-        return { keyId: new import_mongodb39.ObjectId(p.keyId) };
+      try {
+        p.keyId = new import_mongodb39.ObjectId(p.keyId);
+      } catch (error2) {
+        throw new Error("Invalid PassKey ID.");
       }
       return p;
     });
@@ -21878,9 +21925,57 @@ function useVisitorTransactionRepo() {
     }
   }
   async function resendEmailInvitedResident(visitorId, updatedBy) {
-    const updatedDocument = await collection.findOne({
-      _id: await convertObjectIdUtil(visitorId)
-    });
+    const pipeline = [
+      { $match: { _id: await convertObjectIdUtil(visitorId) } },
+      {
+        $lookup: {
+          from: "buildings",
+          localField: "block",
+          foreignField: "_id",
+          as: "blockDetails"
+        }
+      },
+      {
+        $addFields: {
+          blockName: {
+            $ifNull: [
+              { $arrayElemAt: ["$blockDetails.name", 0] },
+              "Unknown"
+            ]
+          }
+        }
+      },
+      {
+        $project: {
+          blockDetails: 0
+        }
+      },
+      {
+        $lookup: {
+          from: "building-levels",
+          localField: "level",
+          foreignField: "_id",
+          as: "levelDetails"
+        }
+      },
+      {
+        $addFields: {
+          levelName: {
+            $ifNull: [
+              { $arrayElemAt: ["$levelDetails.name", 0] },
+              "Unknown"
+            ]
+          }
+        }
+      },
+      {
+        $project: {
+          levelDetails: 0
+        }
+      }
+    ];
+    const results = await collection.aggregate(pipeline).toArray();
+    const updatedDocument = results[0] || null;
     if (!updatedDocument?.email)
       return;
     if (!updatedDocument?._id)
@@ -21895,7 +21990,7 @@ function useVisitorTransactionRepo() {
       name: `${updatedDocument?.name}`,
       plateNumber: updatedDocument?.plateNumber,
       nric: updatedDocument?.nric,
-      address: `${updatedDocument?.block} ${updatedDocument?.level} ${updatedDocument?.unitName}`,
+      address: `${updatedDocument?.blockName} ${updatedDocument?.levelName} ${updatedDocument?.unitName}`,
       contactNumber: updatedDocument?.contact ? updatedDocument?.contact : "N/A",
       email: updatedDocument?.email ? updatedDocument?.email : "N/A",
       duration: updatedDocument?.duration ? updatedDocument?.duration : "N/A",
@@ -27795,7 +27890,7 @@ function useBuildingRepo() {
     try {
       await collection.createIndexes([
         { key: { name: "text" }, name: "text-index" },
-        { key: { name: 1 }, unique: true, name: "unique-name-index" },
+        // { key: { name: 1 }, unique: true, name: "unique-name-index" },
         { key: { site: 1 } },
         { key: { createdAt: 1 } },
         {
@@ -28472,11 +28567,6 @@ function useBuildingLevelRepo() {
     try {
       await collection.createIndexes([
         // Ensure name is unique per blockId
-        {
-          key: { blockId: 1, name: 1 },
-          unique: true,
-          name: "unique_name_per_blockId"
-        },
         // Other useful indexes
         { key: { site: 1 }, name: "idx_site" },
         { key: { blockId: 1 }, name: "idx_blockId" },
@@ -28737,7 +28827,11 @@ function useBuildingLevelRepo() {
       const res = await collection.bulkWrite(operations, { session });
       delCachedData();
       return {
-        insertedIds: res.insertedIds
+        insertedIds: res.insertedIds,
+        levels: levels.map((l, i) => ({
+          _id: res.insertedIds[i],
+          name: l.name
+        }))
       };
     } catch (error) {
       import_node_server_utils86.logger.log({
@@ -29021,8 +29115,8 @@ function useBuildingService() {
         const name = row.name;
         const rawLevel = row.level?.toString().trim();
         const rawUnit = row.unit?.toString().trim();
-        const normalizedLevel = /^(na|n\/a)$/i.test(rawLevel) ? null : `Lvl${rawLevel}`;
-        const normalizedUnit = /^(na|n\/a)$/i.test(rawUnit) ? null : `Unit ${rawUnit}`;
+        const normalizedLevel = /^(na|n\/a)$/i.test(rawLevel) ? null : rawLevel;
+        const normalizedUnit = /^(na|n\/a)$/i.test(rawUnit) ? null : rawUnit;
         if (!blockMap.has(block)) {
           blockMap.set(block, { name, levels: [], unitsByLevel: /* @__PURE__ */ new Map() });
         }
@@ -29043,57 +29137,76 @@ function useBuildingService() {
           }
         }
       }
-      const buildingPayloads = Array.from(blockMap.entries()).map(
-        ([block, { name, levels }]) => ({
+      const buildingPayloads = [];
+      const buildingUnitPayloads = [];
+      for (const [
+        block,
+        { name, levels, unitsByLevel }
+      ] of blockMap.entries()) {
+        const buildingId = new import_mongodb53.ObjectId();
+        const levelsPayload = (levels ?? []).map((levelName) => ({
+          blockId: buildingId.toString(),
+          site: site.toString(),
+          name: levelName,
+          status: "active" /* ACTIVE */,
+          createdAt: /* @__PURE__ */ new Date(),
+          updatedAt: null,
+          deletedAt: null
+        }));
+        let insertedLevels;
+        if (levelsPayload.length > 0) {
+          insertedLevels = await _bulkWriteLevels(levelsPayload, session);
+        }
+        const levelNameToId = /* @__PURE__ */ new Map();
+        if (insertedLevels) {
+          insertedLevels.levels.forEach((lvl) => {
+            levelNameToId.set(lvl.name, lvl._id);
+          });
+        }
+        const buildingPayload = {
+          _id: buildingId,
           site,
           block,
           name,
-          levels
-        })
-      );
-      const blockToBuildingId = /* @__PURE__ */ new Map();
-      for (const buildingPayload of buildingPayloads) {
-        const result = await _add(buildingPayload);
-        blockToBuildingId.set(buildingPayload.block, result);
-      }
-      const buildingUnitPayloads = [];
-      Array.from(blockMap.entries()).forEach(
-        ([block, { name, unitsByLevel }]) => {
-          const buildingId = blockToBuildingId.get(block);
-          Array.from(unitsByLevel.entries()).forEach(([level, units]) => {
-            units.forEach((unit) => {
-              buildingUnitPayloads.push({
-                site,
-                name: unit,
-                building: buildingId.toString(),
-                buildingName: name,
-                block,
-                level,
-                category: "",
-                status: "active" /* ACTIVE */,
-                buildingUnitFiles: [],
-                owner: "",
-                ownerName: "",
-                companyName: "",
-                companyRegistrationNumber: "",
-                billing: [],
-                unitNumber: parseInt(unit.replace("Unit ", ""), 10) || null,
-                createdAt: /* @__PURE__ */ new Date(),
-                updatedAt: "",
-                deletedAt: ""
-              });
+          levels: insertedLevels ? Object.values(insertedLevels.insertedIds) : []
+        };
+        const buildingResult = await _add(buildingPayload, session);
+        Array.from(unitsByLevel.entries()).forEach(([levelName, units]) => {
+          const levelId = levelNameToId.get(levelName);
+          units.forEach((unit) => {
+            buildingUnitPayloads.push({
+              site: new import_mongodb53.ObjectId(site),
+              name: unit,
+              building: buildingId,
+              // already an ObjectId
+              buildingName: name,
+              block,
+              level: levelId,
+              // ✅ use ObjectId instead of string
+              category: "",
+              status: "active" /* ACTIVE */,
+              buildingUnitFiles: [],
+              owner: "",
+              ownerName: "",
+              companyName: "",
+              companyRegistrationNumber: "",
+              billing: [],
+              unitNumber: parseInt(unit.replace("Unit ", ""), 10) || null,
+              createdAt: /* @__PURE__ */ new Date(),
+              updatedAt: "",
+              deletedAt: ""
             });
           });
-        }
-      );
+        });
+      }
       await _bulkAddBuildingUnits(buildingUnitPayloads);
-      await session?.commitTransaction();
+      await session.commitTransaction();
       return { buildingPayloads, buildingUnitPayloads };
     } catch (error) {
-      await session?.abortTransaction();
+      await session.abortTransaction();
       throw error;
     } finally {
-      session?.endSession();
+      session.endSession();
     }
   }
   return {
@@ -29364,9 +29477,9 @@ function useBuildingController() {
       const lowerName = originalname.toLowerCase();
       const rowSchema = import_joi46.default.object({
         block: import_joi46.default.number().integer().min(0).required(),
-        level: import_joi46.default.string().optional().allow(null, ""),
-        unit: import_joi46.default.string().optional().allow(null, ""),
-        category: import_joi46.default.string().trim().required(),
+        level: import_joi46.default.alternatives().try(import_joi46.default.string(), import_joi46.default.number()).custom((value) => String(value)).optional().allow(null, ""),
+        unit: import_joi46.default.alternatives().try(import_joi46.default.string(), import_joi46.default.number()).custom((value) => String(value)).optional().allow(null, ""),
+        category: import_joi46.default.string().trim().optional().allow(null, ""),
         name: import_joi46.default.string().trim().optional().allow(null, ""),
         email: import_joi46.default.string().email().lowercase().optional().allow(null, ""),
         phoneNumber: import_joi46.default.string().trim().optional().allow(null, "")
@@ -29380,11 +29493,9 @@ function useBuildingController() {
         { abortEarly: false, convert: true }
       );
       if (queryError) {
-        next(
-          new import_node_server_utils88.BadRequestError(
-            queryError.details.map((d) => d.message).join(", ")
-          )
-        );
+        const messages = queryError.details.map((d) => d.message).join(", ");
+        import_node_server_utils88.logger.log({ level: "error", message: messages });
+        next(new import_node_server_utils88.BadRequestError(messages));
         return;
       }
       const { site, org } = queryValue;
@@ -29419,11 +29530,11 @@ function useBuildingController() {
       } else if (lowerName.endsWith(".csv")) {
         rows = await new Promise((resolve, reject) => {
           const parsed = [];
-          import_fs3.default.createReadStream(path5).pipe((0, import_csv_parser.default)()).on("headers", (headers) => {
-            headers = headers.map(
-              (h) => h.trim().replace(/\(.*\)/, "").trim()
-            );
-          }).on("data", (row) => parsed.push(row)).on("end", () => resolve(parsed)).on("error", reject);
+          import_fs3.default.createReadStream(path5).pipe(
+            (0, import_csv_parser.default)({
+              mapHeaders: ({ header }) => header.trim().replace(/\(.*\)/, "").trim()
+            })
+          ).on("data", (row) => parsed.push(row)).on("end", () => resolve(parsed)).on("error", reject);
         });
       } else {
         next(
@@ -29441,6 +29552,7 @@ function useBuildingController() {
         if (error) {
           invalidRows.push({
             row: index + 2,
+            // +2 because header is row 1
             data: row,
             errors: error.details.map((d) => d.message)
           });
@@ -29462,6 +29574,7 @@ function useBuildingController() {
       import_fs3.default.unlink(path5, () => {
       });
     } catch (error) {
+      console.log(error);
       import_node_server_utils88.logger.log({ level: "error", message: error.message });
       next(error);
     }
@@ -33390,17 +33503,13 @@ var KeyRepo = class {
     }
   }
   static async updateKeyById(keyId, key, site, session, isChild) {
-    try {
-      keyId = new import_mongodb61.ObjectId(keyId);
-      if (site)
-        site = new import_mongodb61.ObjectId(site);
-      if (key.updatedBy)
-        key.updatedBy = await convertObjectIdUtil(key.updatedBy);
-      if (!key.status)
-        delete key.status;
-    } catch (error) {
-      return Promise.reject("Invalid key id");
-    }
+    keyId = await convertObjectIdUtil2(keyId, "keyId");
+    if (site)
+      site = await convertObjectIdUtil2(site, "Site");
+    if (key.updatedBy)
+      key.updatedBy = await convertObjectIdUtil2(key.updatedBy, "Updated By");
+    if (!key.status)
+      delete key.status;
     try {
       key.updatedAt = /* @__PURE__ */ new Date();
       const query = { _id: keyId, ...site && { site } };
@@ -33413,6 +33522,7 @@ var KeyRepo = class {
         { session }
       );
       let setKeys = [];
+      console.log("updateKeyById result", result);
       if (result.modifiedCount > 0) {
         const updatedDocs = await this.collection().find(find).toArray();
         if (Array.isArray(updatedDocs) && updatedDocs.length > 0) {
@@ -33427,10 +33537,12 @@ var KeyRepo = class {
         await this.collectionDynamic("keys-histories").insertMany(setKeys, {
           session
         });
+      } else {
+        throw new Error("Failed Updating Keys");
       }
       return result;
     } catch (error) {
-      console.log(error);
+      throw new Error(error);
     }
   }
   static async deleteKeyById(_id, session) {
@@ -33870,51 +33982,51 @@ function useVisitorTransactionService() {
         for (let i = 0; i < value.members.length; i += chunkSize) {
           const chunk = value.members.slice(i, i + chunkSize);
           for (const member of chunk) {
-            await KeyRepo.checkPassKeyAvailability(
-              member.visitorPass,
-              member.passKeys
-            );
-            if (member.visitorPass && Array.isArray(member.visitorPass) && member.visitorPass.length > 0) {
-              for (const vp of member.visitorPass) {
-                try {
-                  const updatePayload = { status: "In Use" /* IN_USE */ };
-                  const visitorPassId = typeof vp === "string" || vp instanceof import_mongodb62.ObjectId ? vp : vp.keyId;
-                  if (!visitorPassId)
-                    value.visitorPass = [];
-                  await KeyRepo.updateKeyById(
-                    visitorPassId,
-                    updatePayload,
-                    value.site
-                  );
-                } catch (error) {
-                  throw error;
-                }
+            await KeyRepo.checkPassKeyAvailability(member.visitorPass, member.passKeys);
+            if (Array.isArray(member.visitorPass)) {
+              for (const item of member.visitorPass) {
+                console.log("Type of keyId:", typeof item.keyId);
+                console.log("item visitorPass", item);
+                await KeyRepo.updateKeyById(
+                  item.keyId,
+                  {
+                    status: "In Use" /* IN_USE */,
+                    updatedBy: value.createdBy
+                  },
+                  value.site,
+                  session
+                );
+                item.receivedDate = /* @__PURE__ */ new Date();
+                item.status = "Not Returned" /* NOT_RETURNED */;
+                item.lastUpdate = null;
+                item.remarks = "";
               }
             }
-            if (member.passKeys && Array.isArray(member.passKeys) && member.passKeys.length > 0) {
-              for (const pk of member.passKeys) {
-                try {
-                  const updatePayload = { status: "In Use" /* IN_USE */ };
-                  const passKeyId = typeof pk === "string" || pk instanceof import_mongodb62.ObjectId ? pk : pk.keyId;
-                  if (!passKeyId)
-                    value.passKeys = [];
-                  await KeyRepo.updateKeyById(
-                    passKeyId,
-                    updatePayload,
-                    value.site
-                  );
-                } catch (error) {
-                  throw error;
-                }
+            if (Array.isArray(member.passKeys)) {
+              for (const item of member.passKeys) {
+                await KeyRepo.updateKeyById(
+                  item.keyId,
+                  {
+                    status: "In Use" /* IN_USE */,
+                    updatedBy: value.createdBy
+                  },
+                  value.site,
+                  session
+                );
+                item.receivedDate = /* @__PURE__ */ new Date();
+                item.status = "Not Returned" /* NOT_RETURNED */;
+                item.lastUpdate = null;
+                item.remarks = "";
               }
             }
           }
           await Promise.all(
             chunk.map((member) => {
-              const { visitorPass, passKeys } = member;
+              const clonedMember = structuredClone(member);
+              const { visitorPass, passKeys } = clonedMember;
               return _add(
                 {
-                  ...member,
+                  ...clonedMember,
                   block,
                   level,
                   unit,
@@ -33961,184 +34073,184 @@ function useVisitorTransactionService() {
           throw new import_node_server_utils106.BadRequestError("This plate number is blocklisted");
       }
       await KeyRepo.checkPassKeyAvailability(value.visitorPass, value.passKeys);
-      if (value.visitorPass && Array.isArray(value.visitorPass) && value.visitorPass.length > 0 && value.visitorPass) {
+      if (Array.isArray(value.visitorPass)) {
+        for (const item of value.visitorPass) {
+          await KeyRepo.updateKeyById(
+            item.keyId,
+            {
+              status: "In Use" /* IN_USE */,
+              updatedBy: value.createdBy
+            },
+            value.site,
+            session
+          );
+          item.receivedDate = /* @__PURE__ */ new Date();
+          item.status = "Not Returned" /* NOT_RETURNED */;
+          item.lastUpdate = null;
+          item.remarks = "";
+        }
+      }
+      if (Array.isArray(value.passKeys)) {
+        for (const item of value.passKeys) {
+          await KeyRepo.updateKeyById(
+            item.keyId,
+            {
+              status: "In Use" /* IN_USE */,
+              updatedBy: value.createdBy
+            },
+            value.site,
+            session
+          );
+          item.receivedDate = /* @__PURE__ */ new Date();
+          item.status = "Not Returned" /* NOT_RETURNED */;
+          item.lastUpdate = null;
+          item.remarks = "";
+        }
+      }
+      const result = await _add(value, session);
+      await session?.commitTransaction();
+      let openBarrier = null;
+      const isOpenBarrier = allowedPersonTypes.includes(value?.type) || camera?.ANPRSwitches?.openBarrierPickUpDropOff == true;
+      if (isOpenBarrier && value.plateNumber && host && username && password) {
+        try {
+          import_node_server_utils106.logger.info(`Attempting to open barrier at host: ${host}`);
+          openBarrier = await _openBarrier({
+            host,
+            username,
+            password,
+            plateNumber: value?.plateNumber
+          });
+          import_node_server_utils106.logger.info(`Barrier command sent successfully to ${host}`, {
+            response: openBarrier
+          });
+        } catch (error) {
+          import_node_server_utils106.logger.error(
+            `Failed to open barrier at host ${host}. Critical system error:`,
+            error
+          );
+          openBarrier = { success: false, error: error?.message };
+        }
+      }
+      console.log("Open barrier response:", openBarrier);
+      return result;
+    } catch (error) {
+      await session?.abortTransaction();
+      throw error;
+    } finally {
+      session?.endSession();
+    }
+  }
+  async function updateVisitorTransactionById(id, value) {
+    const session = import_node_server_utils106.useAtlas.getClient()?.startSession();
+    session?.startTransaction();
+    try {
+      let camera;
+      let host;
+      let username;
+      let password;
+      if (value.site && value.plateNumber) {
+        try {
+          camera = await _getVisitorsInBySite(value.site);
+          if (!camera) {
+            import_node_server_utils106.logger.warn(`No camera document found for site: ${value.site}`);
+          }
+        } catch (error) {
+          import_node_server_utils106.logger.error(
+            `Error _getVisitorsInBySite camera for site ${value.site}:`,
+            error
+          );
+        }
+      }
+      if (camera && value.plateNumber && camera.host && camera.username && camera.password) {
+        host = camera.host;
+        username = camera.username;
+        password = camera.password;
+        const blacklist = "TrafficBlackList" /* TRAFFIC_BLACKLIST */;
+        const _plateNumber = value.plateNumber;
+        const dahuaBlocklistQuery = {
+          host,
+          username,
+          password,
+          plateNumber: _plateNumber,
+          mode: blacklist
+        };
+        const isBlocklistedRaw = await _getPlateNumber(dahuaBlocklistQuery);
+        const rawString = isBlocklistedRaw?.toString?.("utf-8") ?? String(isBlocklistedRaw);
+        const foundMatch = rawString.match(/found=(\d+)/);
+        const found = foundMatch ? Number(foundMatch[1]) : 0;
+        if (found === 1)
+          throw new import_node_server_utils106.BadRequestError("This plate number is blocklisted");
+      }
+      if (Array.isArray(value.visitorPass) && value.visitorPass.length > 0) {
+        const keptVisitorPass = [];
         for (const vp of value.visitorPass) {
-          try {
-            const updatePayload = { status: "In Use" /* IN_USE */ };
-            const visitorPassId = typeof vp === "string" || vp instanceof import_mongodb62.ObjectId ? vp : vp.keyId;
-            if (!visitorPassId)
-              value.visitorPass = [];
-            await KeyRepo.updateKeyById(
-              visitorPassId,
-              updatePayload,
-              value.site
-            );
-          } catch (error) {
-            throw error;
+          const updatePayload = {
+            ...vp.status && { status: vp.status },
+            ...vp.remarks && { remarks: vp.remarks }
+          };
+          const visitorPassId = typeof vp === "string" || vp instanceof import_mongodb62.ObjectId ? vp : vp.keyId;
+          await KeyRepo.updateKeyById(
+            visitorPassId,
+            updatePayload,
+            value.site
+          );
+          if (typeof vp !== "string" && !(vp instanceof import_mongodb62.ObjectId)) {
+            keptVisitorPass.push({
+              keyId: new import_mongodb62.ObjectId(visitorPassId)
+            });
           }
         }
+        value.visitorPass = keptVisitorPass;
       }
       if (value.passKeys && Array.isArray(value.passKeys) && value.passKeys.length > 0) {
+        const keptPassKeys = [];
         for (const pk of value.passKeys) {
           try {
-            const updatePayload = { status: "In Use" /* IN_USE */ };
+            const updatePayload = {
+              ...pk.status && { status: pk.status },
+              ...pk.remarks && { remarks: pk.remarks }
+            };
             const passKeyId = typeof pk === "string" || pk instanceof import_mongodb62.ObjectId ? pk : pk.keyId;
-            if (!passKeyId)
-              value.passKeys = [];
             await KeyRepo.updateKeyById(
               passKeyId,
               updatePayload,
               value.site
             );
+            if (typeof pk !== "string" && !(pk instanceof import_mongodb62.ObjectId)) {
+              keptPassKeys.push({
+                keyId: new import_mongodb62.ObjectId(passKeyId)
+              });
+            }
           } catch (error) {
             throw error;
           }
         }
+        value.passKeys = keptPassKeys;
       }
-      const result = await _add(value, session);
-      await session?.commitTransaction();
-      let openBarrier = null;
-      const isOpenBarrier = allowedPersonTypes.includes(value?.type) || camera?.ANPRSwitches?.openBarrierPickUpDropOff == true;
-      if (isOpenBarrier && value.plateNumber && host && username && password) {
-        try {
-          import_node_server_utils106.logger.info(`Attempting to open barrier at host: ${host}`);
-          openBarrier = await _openBarrier({
-            host,
-            username,
-            password,
-            plateNumber: value?.plateNumber
-          });
-          import_node_server_utils106.logger.info(`Barrier command sent successfully to ${host}`, {
-            response: openBarrier
-          });
-        } catch (error) {
-          import_node_server_utils106.logger.error(
-            `Failed to open barrier at host ${host}. Critical system error:`,
-            error
-          );
-          openBarrier = { success: false, error: error?.message };
-        }
-      }
-      console.log("Open barrier response:", openBarrier);
-      return result;
-    } catch (error) {
-      await session?.abortTransaction();
-      throw error;
-    } finally {
-      session?.endSession();
-    }
-  }
-  async function updateVisitorTransactionById(id, value) {
-    const session = import_node_server_utils106.useAtlas.getClient()?.startSession();
-    session?.startTransaction();
-    try {
-      let camera;
-      let host;
-      let username;
-      let password;
-      if (value.site && value.plateNumber) {
-        try {
-          camera = await _getVisitorsInBySite(value.site);
-          if (!camera) {
-            import_node_server_utils106.logger.warn(`No camera document found for site: ${value.site}`);
-          }
-        } catch (error) {
-          import_node_server_utils106.logger.error(
-            `Error _getVisitorsInBySite camera for site ${value.site}:`,
-            error
-          );
-        }
-      }
-      if (camera && value.plateNumber && camera.host && camera.username && camera.password) {
-        host = camera.host;
-        username = camera.username;
-        password = camera.password;
-        const blacklist = "TrafficBlackList" /* TRAFFIC_BLACKLIST */;
-        const _plateNumber = value.plateNumber;
-        const dahuaBlocklistQuery = {
-          host,
-          username,
-          password,
-          plateNumber: _plateNumber,
-          mode: blacklist
-        };
-        const isBlocklistedRaw = await _getPlateNumber(dahuaBlocklistQuery);
-        const rawString = isBlocklistedRaw?.toString?.("utf-8") ?? String(isBlocklistedRaw);
-        const foundMatch = rawString.match(/found=(\d+)/);
-        const found = foundMatch ? Number(foundMatch[1]) : 0;
-        if (found === 1)
-          throw new import_node_server_utils106.BadRequestError("This plate number is blocklisted");
-      }
-      if (Array.isArray(value.visitorPass) && value.visitorPass.length > 0) {
-        const keptVisitorPass = [];
-        for (const vp of value.visitorPass) {
-          const updatePayload = {
-            ...vp.status && { status: vp.status },
-            ...vp.remarks && { remarks: vp.remarks }
-          };
-          const visitorPassId = typeof vp === "string" || vp instanceof import_mongodb62.ObjectId ? vp : vp.keyId;
-          await KeyRepo.updateKeyById(
-            visitorPassId,
-            updatePayload,
-            value.site
-          );
-          if (typeof vp !== "string" && !(vp instanceof import_mongodb62.ObjectId)) {
-            keptVisitorPass.push({
-              keyId: new import_mongodb62.ObjectId(visitorPassId)
-            });
-          }
-        }
-        value.visitorPass = keptVisitorPass;
-      }
-      if (value.passKeys && Array.isArray(value.passKeys) && value.passKeys.length > 0) {
-        const keptPassKeys = [];
-        for (const pk of value.passKeys) {
-          try {
-            const updatePayload = {
-              ...pk.status && { status: pk.status },
-              ...pk.remarks && { remarks: pk.remarks }
-            };
-            const passKeyId = typeof pk === "string" || pk instanceof import_mongodb62.ObjectId ? pk : pk.keyId;
-            await KeyRepo.updateKeyById(
-              passKeyId,
-              updatePayload,
-              value.site
-            );
-            if (typeof pk !== "string" && !(pk instanceof import_mongodb62.ObjectId)) {
-              keptPassKeys.push({
-                keyId: new import_mongodb62.ObjectId(passKeyId)
-              });
-            }
-          } catch (error) {
-            throw error;
-          }
-        }
-        value.passKeys = keptPassKeys;
-      }
-      if (value.checkIn) {
-        const parsed = new Date(value.checkIn);
-        value.checkIn = isNaN(parsed.getTime()) ? null : parsed;
-      }
-      if (value.checkOut) {
-        const parsed = new Date(value.checkOut);
-        value.checkOut = isNaN(parsed.getTime()) ? null : parsed;
-      }
-      if (value.site) {
-        value.site = typeof value.site === "string" ? new import_mongodb62.ObjectId(value.site) : value.site;
-      }
-      if (value.unit) {
-        value.unit = typeof value.unit === "string" ? new import_mongodb62.ObjectId(value.unit) : value.unit;
-        const unit = await _getUnitById(value.unit);
-        value.unitName = unit?.name;
-      }
-      await _updateVisitorTansactionById(id, value, session);
-      const allowedPersonTypes = [
-        "contractor" /* CONTRACTOR */,
-        "walk-in" /* WALK_IN */,
-        "guest" /* GUEST */,
-        "delivery" /* DELIVERY */
-        // PersonTypes.PICK_UP,
-      ];
+      if (value.checkIn) {
+        const parsed = new Date(value.checkIn);
+        value.checkIn = isNaN(parsed.getTime()) ? null : parsed;
+      }
+      if (value.checkOut) {
+        const parsed = new Date(value.checkOut);
+        value.checkOut = isNaN(parsed.getTime()) ? null : parsed;
+      }
+      if (value.site) {
+        value.site = typeof value.site === "string" ? new import_mongodb62.ObjectId(value.site) : value.site;
+      }
+      if (value.unit) {
+        value.unit = typeof value.unit === "string" ? new import_mongodb62.ObjectId(value.unit) : value.unit;
+        const unit = await _getUnitById(value.unit);
+        value.unitName = unit?.name;
+      }
+      await _updateVisitorTansactionById(id, value, session);
+      const allowedPersonTypes = [
+        "contractor" /* CONTRACTOR */,
+        "walk-in" /* WALK_IN */,
+        "guest" /* GUEST */,
+        "delivery" /* DELIVERY */
+        // PersonTypes.PICK_UP,
+      ];
       let openBarrier = null;
       const isOpenBarrier = allowedPersonTypes.includes(value?.type) || camera?.ANPRSwitches?.openBarrierPickUpDropOff == true;
       if (isOpenBarrier && value.plateNumber && host && username && password) {
@@ -34275,9 +34387,9 @@ function useVisitorTransactionService() {
       value.checkIn = null;
       const payload = {
         ...value,
-        block: inviter?.block,
-        level: inviter?.level,
-        unit: inviter?.unit,
+        block: inviter?.block?.toString(),
+        level: inviter?.level?.toString(),
+        unit: inviter?.unit?.toString(),
         unitName: unit?.name,
         org: inviter?.org.toString(),
         site: inviter?.site.toString(),
@@ -34373,7 +34485,8 @@ function useVisitorTransactionController() {
   } = useVisitorTransactionRepo();
   async function add(req, res, next) {
     try {
-      const { error, value } = schemaVisitorTransaction.validate(req.body, {
+      const { companyName, firstName, lastName, ...restData } = req.body;
+      const { error, value } = schemaVisitorTransaction.validate(restData, {
         abortEarly: false
       });
       if (error) {
@@ -34605,8 +34718,11 @@ function useVisitorTransactionController() {
       return;
     } catch (error2) {
       import_node_server_utils107.logger.log({ level: "error", message: error2.message });
-      next(error2);
-      return;
+      if (error2?.message) {
+        next(new import_node_server_utils107.BadRequestError(error2?.message));
+      } else {
+        next(error2);
+      }
     }
   }
   async function changeVisitorTransactionKeysById(req, res, next) {
@@ -66094,10 +66210,6 @@ function useChatPrelovedRepo() {
   return { add, updateById, deleteById };
 }
 
-// src/controllers/chat-preloved.controller.ts
-var import_node_server_utils248 = require("@7365admin1/node-server-utils");
-var import_joi143 = __toESM(require("joi"));
-
 // src/services/chat-preloved.service.ts
 var import_node_server_utils247 = require("@7365admin1/node-server-utils");
 
@@ -66424,6 +66536,8 @@ function useChatPrelovedService() {
 }
 
 // src/controllers/chat-preloved.controller.ts
+var import_node_server_utils248 = require("@7365admin1/node-server-utils");
+var import_joi143 = __toESM(require("joi"));
 function useChatPrelovedController() {
   const { add: _add } = useChatPrelovedService();
   const { updateById: _updateById, deleteById: _deleteById } = useChatPrelovedRepo();
@@ -66603,58 +66717,196 @@ function useChannelPrelovedController() {
   return { add, getChannel, getChatLists, getChannelMessages };
 }
 
-// src/models/online-forms-v2.model.ts
+// src/models/bid-preloved.model.ts
 var import_joi145 = __toESM(require("joi"));
 var import_mongodb149 = require("mongodb");
+var BidType = /* @__PURE__ */ ((BidType2) => {
+  BidType2["BID"] = "bid";
+  BidType2["RESERVE"] = "reserve";
+  return BidType2;
+})(BidType || {});
+var BidStatus = /* @__PURE__ */ ((BidStatus3) => {
+  BidStatus3["PENDING"] = "pending";
+  BidStatus3["ACCEPTED"] = "accepted";
+  BidStatus3["RESERVED"] = "reserved";
+  BidStatus3["CANCELLED"] = "cancelled";
+  return BidStatus3;
+})(BidStatus || {});
+var schemaBidPreloved = import_joi145.default.object({
+  type: import_joi145.default.string().valid(...Object.values(BidType)).required(),
+  postId: import_joi145.default.string().hex().length(24).required(),
+  price: import_joi145.default.when("type", {
+    is: "bid" /* BID */,
+    then: import_joi145.default.number().required(),
+    otherwise: import_joi145.default.number().optional().allow(null)
+  }),
+  message: import_joi145.default.string().optional().allow("", null),
+  buyerId: import_joi145.default.string().hex().length(24).optional().allow("", null),
+  status: import_joi145.default.string().valid(...Object.values(BidStatus)).optional().default("pending" /* PENDING */)
+});
+var schemaUpdateBidPreloved = import_joi145.default.object({
+  status: import_joi145.default.string().valid(...Object.values(BidStatus)).required()
+});
+function MBidPreloved(value) {
+  const { error } = schemaBidPreloved.validate(value);
+  if (error)
+    throw new Error(error.details[0].message);
+  if (value.postId && typeof value.postId === "string")
+    value.postId = new import_mongodb149.ObjectId(value.postId);
+  if (value.buyerId && typeof value.buyerId === "string")
+    value.buyerId = new import_mongodb149.ObjectId(value.buyerId);
+  return {
+    _id: new import_mongodb149.ObjectId(),
+    price: value.price ?? null,
+    message: value.message ?? "",
+    status: value.status ?? "pending" /* PENDING */,
+    type: value.type,
+    postId: value.postId,
+    buyerId: value.buyerId ?? null,
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+    updatedAt: null
+  };
+}
+
+// src/repositories/bid-preloved.repo.ts
+var import_node_server_utils250 = require("@7365admin1/node-server-utils");
+var import_mongodb150 = require("mongodb");
+function useBidPrelovedRepo() {
+  const db = import_node_server_utils250.useAtlas.getDb();
+  if (!db)
+    throw new import_node_server_utils250.InternalServerError("Unable to connect to server.");
+  const collection = db.collection("bid-preloved");
+  async function add(value, session) {
+    try {
+      const doc = MBidPreloved(value);
+      const res = await collection.insertOne(doc, { session });
+      return res.insertedId;
+    } catch (error) {
+      throw error;
+    }
+  }
+  async function updateStatus(_id, status) {
+    const objectId2 = typeof _id === "string" ? new import_mongodb150.ObjectId(_id) : _id;
+    const existing = await collection.findOne({ _id: objectId2 });
+    if (!existing)
+      throw new import_node_server_utils250.NotFoundError("Bid not found.");
+    const res = await collection.updateOne(
+      { _id: objectId2 },
+      { $set: { status, updatedAt: (/* @__PURE__ */ new Date()).toISOString() } }
+    );
+    if (res.modifiedCount === 0)
+      throw new import_node_server_utils250.InternalServerError("Unable to update bid.");
+    return "Bid updated successfully.";
+  }
+  return { add, updateStatus };
+}
+
+// src/controllers/bid-preloved.controller.ts
+var import_node_server_utils251 = require("@7365admin1/node-server-utils");
+var import_joi146 = __toESM(require("joi"));
+function useBidPrelovedController() {
+  const { add: _add, updateStatus: _updateStatus } = useBidPrelovedRepo();
+  async function add(req, res, next) {
+    const { error, value } = schemaBidPreloved.validate(req.body, {
+      abortEarly: false
+    });
+    if (error) {
+      const messages = error.details.map((d) => d.message).join(", ");
+      import_node_server_utils251.logger.log({ level: "error", message: messages });
+      next(new import_node_server_utils251.BadRequestError(messages));
+      return;
+    }
+    try {
+      const data = await _add(value);
+      res.status(201).json(data);
+    } catch (error2) {
+      import_node_server_utils251.logger.log({ level: "error", message: error2.message });
+      next(error2);
+    }
+  }
+  async function updateStatus(req, res, next) {
+    const paramsSchema = import_joi146.default.object({
+      id: import_joi146.default.string().hex().length(24).required()
+    });
+    const { error: paramError, value: params } = paramsSchema.validate(
+      req.params
+    );
+    if (paramError) {
+      import_node_server_utils251.logger.log({ level: "error", message: paramError.message });
+      next(new import_node_server_utils251.BadRequestError(paramError.message));
+      return;
+    }
+    const { error: bodyError, value: body } = schemaUpdateBidPreloved.validate(
+      req.body
+    );
+    if (bodyError) {
+      import_node_server_utils251.logger.log({ level: "error", message: bodyError.message });
+      next(new import_node_server_utils251.BadRequestError(bodyError.message));
+      return;
+    }
+    try {
+      const data = await _updateStatus(params.id, body.status);
+      res.status(200).json(data);
+    } catch (error) {
+      import_node_server_utils251.logger.log({ level: "error", message: error.message });
+      next(error);
+    }
+  }
+  return { add, updateStatus };
+}
+
+// src/models/online-forms-v2.model.ts
+var import_joi147 = __toESM(require("joi"));
+var import_mongodb151 = require("mongodb");
 var FormEntryStatus = /* @__PURE__ */ ((FormEntryStatus2) => {
   FormEntryStatus2["ACTIVE"] = "active";
   FormEntryStatus2["INACTIVE"] = "inactive";
   FormEntryStatus2["DELETED"] = "deleted";
   return FormEntryStatus2;
 })(FormEntryStatus || {});
-var schemaFormEntry = import_joi145.default.object({
-  _id: import_joi145.default.string().hex().optional().allow("", null),
-  formType: import_joi145.default.string().required(),
-  block: import_joi145.default.string().optional().allow(null, ""),
-  level: import_joi145.default.string().optional().allow(null, ""),
-  unit: import_joi145.default.string().optional().allow(null, ""),
-  name: import_joi145.default.string().optional().allow(null, ""),
-  phoneNumber: import_joi145.default.string().optional().allow(null, ""),
-  createdBy: import_joi145.default.string().required(),
-  fields: import_joi145.default.object().pattern(
-    import_joi145.default.string(),
-    import_joi145.default.alternatives().try(
-      import_joi145.default.string(),
-      import_joi145.default.number(),
-      import_joi145.default.boolean(),
-      import_joi145.default.valid(null)
+var schemaFormEntry = import_joi147.default.object({
+  _id: import_joi147.default.string().hex().optional().allow("", null),
+  formType: import_joi147.default.string().required(),
+  block: import_joi147.default.string().optional().allow(null, ""),
+  level: import_joi147.default.string().optional().allow(null, ""),
+  unit: import_joi147.default.string().optional().allow(null, ""),
+  name: import_joi147.default.string().optional().allow(null, ""),
+  phoneNumber: import_joi147.default.string().optional().allow(null, ""),
+  createdBy: import_joi147.default.string().required(),
+  fields: import_joi147.default.object().pattern(
+    import_joi147.default.string(),
+    import_joi147.default.alternatives().try(
+      import_joi147.default.string(),
+      import_joi147.default.number(),
+      import_joi147.default.boolean(),
+      import_joi147.default.valid(null)
     )
   ).required(),
-  status: import_joi145.default.string().optional().allow("", null),
-  org: import_joi145.default.string().hex().optional().allow("", null),
-  site: import_joi145.default.string().hex().optional().allow("", null),
-  createdAt: import_joi145.default.date().optional().allow("", null),
-  updatedAt: import_joi145.default.date().optional().allow("", null),
-  deletedAt: import_joi145.default.date().optional().allow("", null)
+  status: import_joi147.default.string().optional().allow("", null),
+  org: import_joi147.default.string().hex().optional().allow("", null),
+  site: import_joi147.default.string().hex().optional().allow("", null),
+  createdAt: import_joi147.default.date().optional().allow("", null),
+  updatedAt: import_joi147.default.date().optional().allow("", null),
+  deletedAt: import_joi147.default.date().optional().allow("", null)
 });
-var schemaUpdateFormEntry = import_joi145.default.object({
-  _id: import_joi145.default.string().hex().required(),
-  formType: import_joi145.default.string().optional().allow("", null),
-  block: import_joi145.default.string().optional().allow(null, ""),
-  level: import_joi145.default.string().optional().allow(null, ""),
-  unit: import_joi145.default.string().optional().allow(null, ""),
-  fields: import_joi145.default.object().pattern(
-    import_joi145.default.string(),
-    import_joi145.default.alternatives().try(
-      import_joi145.default.string(),
-      import_joi145.default.number(),
-      import_joi145.default.boolean(),
-      import_joi145.default.valid(null)
+var schemaUpdateFormEntry = import_joi147.default.object({
+  _id: import_joi147.default.string().hex().required(),
+  formType: import_joi147.default.string().optional().allow("", null),
+  block: import_joi147.default.string().optional().allow(null, ""),
+  level: import_joi147.default.string().optional().allow(null, ""),
+  unit: import_joi147.default.string().optional().allow(null, ""),
+  fields: import_joi147.default.object().pattern(
+    import_joi147.default.string(),
+    import_joi147.default.alternatives().try(
+      import_joi147.default.string(),
+      import_joi147.default.number(),
+      import_joi147.default.boolean(),
+      import_joi147.default.valid(null)
     )
   ).optional(),
-  status: import_joi145.default.string().optional().allow("", null),
-  updatedAt: import_joi145.default.date().optional().allow("", null),
-  deletedAt: import_joi145.default.date().optional().allow("", null)
+  status: import_joi147.default.string().optional().allow("", null),
+  updatedAt: import_joi147.default.date().optional().allow("", null),
+  deletedAt: import_joi147.default.date().optional().allow("", null)
 });
 function MFormEntry(value) {
   const { error } = schemaFormEntry.validate(value);
@@ -66663,21 +66915,21 @@ function MFormEntry(value) {
   }
   if (value._id && typeof value._id === "string") {
     try {
-      value._id = new import_mongodb149.ObjectId(value._id);
+      value._id = new import_mongodb151.ObjectId(value._id);
     } catch {
       throw new Error("Invalid ID.");
     }
   }
   if (value.org && typeof value.org === "string") {
     try {
-      value.org = new import_mongodb149.ObjectId(value.org);
+      value.org = new import_mongodb151.ObjectId(value.org);
     } catch {
       throw new Error("Invalid org ID.");
     }
   }
   if (value.site && typeof value.site === "string") {
     try {
-      value.site = new import_mongodb149.ObjectId(value.site);
+      value.site = new import_mongodb151.ObjectId(value.site);
     } catch {
       throw new Error("Invalid site ID.");
     }
@@ -66699,49 +66951,49 @@ function MFormEntry(value) {
     deletedAt: value.deletedAt ?? null
   };
 }
-var residentFormEntry = import_joi145.default.object({
-  _id: import_joi145.default.string().hex().optional().allow("", null),
-  typeOfForm: import_joi145.default.string().optional().allow("", null),
-  unitNumber: import_joi145.default.string().optional().allow(null, ""),
-  fields: import_joi145.default.object().pattern(
-    import_joi145.default.string(),
-    import_joi145.default.alternatives().try(
-      import_joi145.default.string(),
-      import_joi145.default.number(),
-      import_joi145.default.boolean(),
-      import_joi145.default.valid(null)
+var residentFormEntry = import_joi147.default.object({
+  _id: import_joi147.default.string().hex().optional().allow("", null),
+  typeOfForm: import_joi147.default.string().optional().allow("", null),
+  unitNumber: import_joi147.default.string().optional().allow(null, ""),
+  fields: import_joi147.default.object().pattern(
+    import_joi147.default.string(),
+    import_joi147.default.alternatives().try(
+      import_joi147.default.string(),
+      import_joi147.default.number(),
+      import_joi147.default.boolean(),
+      import_joi147.default.valid(null)
     )
   ).optional().allow(null, ""),
-  status: import_joi145.default.string().optional().allow("", null),
-  org: import_joi145.default.string().hex().optional().allow("", null),
-  site: import_joi145.default.string().hex().optional().allow("", null),
-  userId: import_joi145.default.string().hex().optional().allow("", null),
-  createdAt: import_joi145.default.date().optional().allow("", null),
-  updatedAt: import_joi145.default.date().optional().allow("", null),
-  deletedAt: import_joi145.default.date().optional().allow("", null),
-  remarks: import_joi145.default.string().optional().allow("", null),
-  managementValues: import_joi145.default.object().pattern(
-    import_joi145.default.string(),
-    import_joi145.default.alternatives().try(
-      import_joi145.default.string(),
-      import_joi145.default.number(),
-      import_joi145.default.boolean(),
-      import_joi145.default.valid(null)
+  status: import_joi147.default.string().optional().allow("", null),
+  org: import_joi147.default.string().hex().optional().allow("", null),
+  site: import_joi147.default.string().hex().optional().allow("", null),
+  userId: import_joi147.default.string().hex().optional().allow("", null),
+  createdAt: import_joi147.default.date().optional().allow("", null),
+  updatedAt: import_joi147.default.date().optional().allow("", null),
+  deletedAt: import_joi147.default.date().optional().allow("", null),
+  remarks: import_joi147.default.string().optional().allow("", null),
+  managementValues: import_joi147.default.object().pattern(
+    import_joi147.default.string(),
+    import_joi147.default.alternatives().try(
+      import_joi147.default.string(),
+      import_joi147.default.number(),
+      import_joi147.default.boolean(),
+      import_joi147.default.valid(null)
     )
   ).optional().allow(null, "")
 });
 
 // src/repositories/online-forms-v2.repository.ts
-var import_node_server_utils250 = require("@7365admin1/node-server-utils");
-var import_mongodb150 = require("mongodb");
+var import_node_server_utils252 = require("@7365admin1/node-server-utils");
+var import_mongodb152 = require("mongodb");
 var online_forms_namespace_collection = "online-forms";
 function useFormEntryRepo() {
-  const db = import_node_server_utils250.useAtlas.getDb();
+  const db = import_node_server_utils252.useAtlas.getDb();
   if (!db) {
-    throw new import_node_server_utils250.InternalServerError("Unable to connect to server.");
+    throw new import_node_server_utils252.InternalServerError("Unable to connect to server.");
   }
   const collection = db.collection(online_forms_namespace_collection);
-  const { delNamespace, getCache, setCache } = (0, import_node_server_utils250.useCache)(
+  const { delNamespace, getCache, setCache } = (0, import_node_server_utils252.useCache)(
     online_forms_namespace_collection
   );
   async function createTextIndex() {
@@ -66750,7 +67002,7 @@ function useFormEntryRepo() {
         name: "text"
       });
     } catch (error) {
-      throw new import_node_server_utils250.InternalServerError(
+      throw new import_node_server_utils252.InternalServerError(
         "Failed to create text index on online form."
       );
     }
@@ -66760,11 +67012,11 @@ function useFormEntryRepo() {
       value = MFormEntry(value);
       const res = await collection.insertOne(value, { session });
       delNamespace().then(() => {
-        import_node_server_utils250.logger.info(
+        import_node_server_utils252.logger.info(
           `Cache cleared for namespace: ${online_forms_namespace_collection}`
         );
       }).catch((err) => {
-        import_node_server_utils250.logger.error(
+        import_node_server_utils252.logger.error(
           `Failed to clear cache for namespace: ${online_forms_namespace_collection}`,
           err
         );
@@ -66773,7 +67025,7 @@ function useFormEntryRepo() {
     } catch (error) {
       const isDuplicated = error.message.includes("duplicate");
       if (isDuplicated) {
-        throw new import_node_server_utils250.BadRequestError("Online Form already exists.");
+        throw new import_node_server_utils252.BadRequestError("Online Form already exists.");
       }
       throw error;
     }
@@ -66789,8 +67041,8 @@ function useFormEntryRepo() {
   }) {
     page = page > 0 ? page - 1 : 0;
     sort = Object.keys(sort).length > 0 ? sort : { _id: -1 };
-    site = new import_mongodb150.ObjectId(site);
-    org = new import_mongodb150.ObjectId(org);
+    site = new import_mongodb152.ObjectId(site);
+    org = new import_mongodb152.ObjectId(org);
     const cacheOptions = {
       page,
       limit,
@@ -66810,13 +67062,13 @@ function useFormEntryRepo() {
         { unitNumber: { $regex: search, $options: "i" } }
       ];
     }
-    const cacheKey = (0, import_node_server_utils250.makeCacheKey)(
+    const cacheKey = (0, import_node_server_utils252.makeCacheKey)(
       online_forms_namespace_collection,
       cacheOptions
     );
     const cachedData = await getCache(cacheKey);
     if (cachedData) {
-      import_node_server_utils250.logger.info(`Cache hit for key: ${cacheKey}`);
+      import_node_server_utils252.logger.info(`Cache hit for key: ${cacheKey}`);
       return cachedData;
     }
     try {
@@ -66843,11 +67095,11 @@ function useFormEntryRepo() {
         { $project: { user: 0 } }
       ]).toArray();
       const length = await collection.countDocuments(query);
-      const data = (0, import_node_server_utils250.paginate)(items, page, limit, length);
+      const data = (0, import_node_server_utils252.paginate)(items, page, limit, length);
       setCache(cacheKey, data, 15 * 60).then(() => {
-        import_node_server_utils250.logger.info(`Cache set for key: ${cacheKey}`);
+        import_node_server_utils252.logger.info(`Cache set for key: ${cacheKey}`);
       }).catch((err) => {
-        import_node_server_utils250.logger.error(`Failed to set cache for key: ${cacheKey}`, err);
+        import_node_server_utils252.logger.error(`Failed to set cache for key: ${cacheKey}`, err);
       });
       return data;
     } catch (error) {
@@ -66855,27 +67107,27 @@ function useFormEntryRepo() {
     }
   }
   async function getFormEntryById(_id) {
-    const cacheKey = (0, import_node_server_utils250.makeCacheKey)(online_forms_namespace_collection, { _id });
+    const cacheKey = (0, import_node_server_utils252.makeCacheKey)(online_forms_namespace_collection, { _id });
     const cachedData = await getCache(cacheKey);
     if (cachedData) {
-      import_node_server_utils250.logger.info(`Cache hit for key: ${cacheKey}`);
+      import_node_server_utils252.logger.info(`Cache hit for key: ${cacheKey}`);
       return cachedData;
     }
     try {
-      _id = new import_mongodb150.ObjectId(_id);
+      _id = new import_mongodb152.ObjectId(_id);
     } catch (error) {
-      throw new import_node_server_utils250.BadRequestError("Invalid online form ID format.");
+      throw new import_node_server_utils252.BadRequestError("Invalid online form ID format.");
     }
     const query = { _id, status: { $ne: "deleted" } };
     try {
       const [data] = await collection.aggregate([{ $match: query }]).toArray();
       if (!data) {
-        throw new import_node_server_utils250.NotFoundError("Document not found.");
+        throw new import_node_server_utils252.NotFoundError("Document not found.");
       }
       setCache(cacheKey, data, 15 * 60).then(() => {
-        import_node_server_utils250.logger.info(`Cache set for key: ${cacheKey}`);
+        import_node_server_utils252.logger.info(`Cache set for key: ${cacheKey}`);
       }).catch((err) => {
-        import_node_server_utils250.logger.error(`Failed to set cache for key: ${cacheKey}`, err);
+        import_node_server_utils252.logger.error(`Failed to set cache for key: ${cacheKey}`, err);
       });
       return data;
     } catch (error) {
@@ -66884,9 +67136,9 @@ function useFormEntryRepo() {
   }
   async function updateFormEntryById(_id, value) {
     try {
-      _id = new import_mongodb150.ObjectId(_id);
+      _id = new import_mongodb152.ObjectId(_id);
     } catch (error) {
-      throw new import_node_server_utils250.BadRequestError("Invalid online form ID format.");
+      throw new import_node_server_utils252.BadRequestError("Invalid online form ID format.");
     }
     try {
       const updateValue = {
@@ -66895,14 +67147,14 @@ function useFormEntryRepo() {
       };
       const res = await collection.updateOne({ _id }, { $set: updateValue });
       if (res.modifiedCount === 0) {
-        throw new import_node_server_utils250.InternalServerError("Unable to update online form.");
+        throw new import_node_server_utils252.InternalServerError("Unable to update online form.");
       }
       delNamespace().then(() => {
-        import_node_server_utils250.logger.info(
+        import_node_server_utils252.logger.info(
           `Cache cleared for namespace: ${online_forms_namespace_collection}`
         );
       }).catch((err) => {
-        import_node_server_utils250.logger.error(
+        import_node_server_utils252.logger.error(
           `Failed to clear cache for namespace: ${online_forms_namespace_collection}`,
           err
         );
@@ -66914,9 +67166,9 @@ function useFormEntryRepo() {
   }
   async function deleteOnlineFormById(_id, session) {
     try {
-      _id = new import_mongodb150.ObjectId(_id);
+      _id = new import_mongodb152.ObjectId(_id);
     } catch (error) {
-      throw new import_node_server_utils250.BadRequestError("Invalid online form ID format.");
+      throw new import_node_server_utils252.BadRequestError("Invalid online form ID format.");
     }
     try {
       const updateValue = {
@@ -66930,12 +67182,12 @@ function useFormEntryRepo() {
         { session }
       );
       if (res.modifiedCount === 0) {
-        throw new import_node_server_utils250.InternalServerError("Unable to delete online form.");
+        throw new import_node_server_utils252.InternalServerError("Unable to delete online form.");
       }
       delNamespace().then(() => {
-        import_node_server_utils250.logger.info(`Cache cleared for namespace: ${online_forms_namespace_collection}`);
+        import_node_server_utils252.logger.info(`Cache cleared for namespace: ${online_forms_namespace_collection}`);
       }).catch((err) => {
-        import_node_server_utils250.logger.error(
+        import_node_server_utils252.logger.error(
           `Failed to clear cache for namespace: ${online_forms_namespace_collection}`,
           err
         );
@@ -66947,16 +67199,16 @@ function useFormEntryRepo() {
   }
   async function addResidentForm(value, session) {
     try {
-      value.site = new import_mongodb150.ObjectId(value.site);
-      value.org = new import_mongodb150.ObjectId(value.org);
-      value.userId = new import_mongodb150.ObjectId(value.userId);
+      value.site = new import_mongodb152.ObjectId(value.site);
+      value.org = new import_mongodb152.ObjectId(value.org);
+      value.userId = new import_mongodb152.ObjectId(value.userId);
       const res = await collection.insertOne(value, { session });
       delNamespace().then(() => {
-        import_node_server_utils250.logger.info(
+        import_node_server_utils252.logger.info(
           `Cache cleared for namespace: ${online_forms_namespace_collection}`
         );
       }).catch((err) => {
-        import_node_server_utils250.logger.error(
+        import_node_server_utils252.logger.error(
           `Failed to clear cache for namespace: ${online_forms_namespace_collection}`,
           err
         );
@@ -66965,16 +67217,16 @@ function useFormEntryRepo() {
     } catch (error) {
       const isDuplicated = error.message.includes("duplicate");
       if (isDuplicated) {
-        throw new import_node_server_utils250.BadRequestError("Online Form already exists.");
+        throw new import_node_server_utils252.BadRequestError("Online Form already exists.");
       }
       throw error;
     }
   }
   async function residentForm({ userId, site, org }) {
     try {
-      const user = new import_mongodb150.ObjectId(userId);
-      const siteId = new import_mongodb150.ObjectId(site);
-      const orgId = new import_mongodb150.ObjectId(org);
+      const user = new import_mongodb152.ObjectId(userId);
+      const siteId = new import_mongodb152.ObjectId(site);
+      const orgId = new import_mongodb152.ObjectId(org);
       const res = await collection.aggregate([
         {
           $match: {
@@ -67002,8 +67254,8 @@ function useFormEntryRepo() {
 }
 
 // src/controllers/online-forms-v2.controller.ts
-var import_node_server_utils251 = require("@7365admin1/node-server-utils");
-var import_joi146 = __toESM(require("joi"));
+var import_node_server_utils253 = require("@7365admin1/node-server-utils");
+var import_joi148 = __toESM(require("joi"));
 var import_exceljs3 = __toESM(require("exceljs"));
 var import_fs7 = __toESM(require("fs"));
 function useFormEntryController() {
@@ -67029,14 +67281,14 @@ function useFormEntryController() {
   async function uploadFormEntrys(req, res, next) {
     try {
       if (!req.file) {
-        next(new import_node_server_utils251.BadRequestError("Excel file is required."));
+        next(new import_node_server_utils253.BadRequestError("Excel file is required."));
         return;
       }
       const workbook = new import_exceljs3.default.Workbook();
       await workbook.xlsx.readFile(req.file.path);
       const worksheet = workbook.worksheets[0];
       if (!worksheet) {
-        next(new import_node_server_utils251.BadRequestError("No worksheet found in uploaded Excel file."));
+        next(new import_node_server_utils253.BadRequestError("No worksheet found in uploaded Excel file."));
         return;
       }
       const headerRow = worksheet.getRow(1);
@@ -67064,8 +67316,8 @@ function useFormEntryController() {
       });
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        import_node_server_utils251.logger.log({ level: "error", message: messages });
-        next(new import_node_server_utils251.BadRequestError(messages));
+        import_node_server_utils253.logger.log({ level: "error", message: messages });
+        next(new import_node_server_utils253.BadRequestError(messages));
         return;
       }
       const result = await _add(value);
@@ -67073,25 +67325,25 @@ function useFormEntryController() {
       import_fs7.default.unlink(req.file.path, () => {
       });
     } catch (error) {
-      import_node_server_utils251.logger.log({ level: "error", message: error.message });
+      import_node_server_utils253.logger.log({ level: "error", message: error.message });
       next(error);
     }
   }
   async function getAll(req, res, next) {
     try {
-      const schema2 = import_joi146.default.object({
-        search: import_joi146.default.string().optional().allow("", null),
-        page: import_joi146.default.number().integer().min(1).allow("", null).default(1),
-        limit: import_joi146.default.number().integer().min(1).max(100).allow("", null).default(10),
-        status: import_joi146.default.string().optional().allow(null, ""),
-        org: import_joi146.default.string().hex().optional().allow("", null),
-        site: import_joi146.default.string().hex().optional().allow("", null)
+      const schema2 = import_joi148.default.object({
+        search: import_joi148.default.string().optional().allow("", null),
+        page: import_joi148.default.number().integer().min(1).allow("", null).default(1),
+        limit: import_joi148.default.number().integer().min(1).max(100).allow("", null).default(10),
+        status: import_joi148.default.string().optional().allow(null, ""),
+        org: import_joi148.default.string().hex().optional().allow("", null),
+        site: import_joi148.default.string().hex().optional().allow("", null)
       });
       const { error, value } = schema2.validate(req.query);
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        import_node_server_utils251.logger.log({ level: "error", message: messages });
-        next(new import_node_server_utils251.BadRequestError(messages));
+        import_node_server_utils253.logger.log({ level: "error", message: messages });
+        next(new import_node_server_utils253.BadRequestError(messages));
         return;
       }
       const { search, page, limit, status, org, site } = value;
@@ -67099,21 +67351,21 @@ function useFormEntryController() {
       res.json(data);
       return;
     } catch (error) {
-      import_node_server_utils251.logger.log({ level: "error", message: error.message });
+      import_node_server_utils253.logger.log({ level: "error", message: error.message });
       next(error);
       return;
     }
   }
   async function getFormEntryById(req, res, next) {
     try {
-      const schema2 = import_joi146.default.object({
-        _id: import_joi146.default.string().hex().length(24).required()
+      const schema2 = import_joi148.default.object({
+        _id: import_joi148.default.string().hex().length(24).required()
       });
       const { error, value } = schema2.validate({ _id: req.params.id });
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        import_node_server_utils251.logger.log({ level: "error", message: messages });
-        next(new import_node_server_utils251.BadRequestError(messages));
+        import_node_server_utils253.logger.log({ level: "error", message: messages });
+        next(new import_node_server_utils253.BadRequestError(messages));
         return;
       }
       const { _id } = value;
@@ -67121,7 +67373,7 @@ function useFormEntryController() {
       res.json(data);
       return;
     } catch (error) {
-      import_node_server_utils251.logger.log({ level: "error", message: error.message });
+      import_node_server_utils253.logger.log({ level: "error", message: error.message });
       next(error);
       return;
     }
@@ -67134,8 +67386,8 @@ function useFormEntryController() {
       });
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        import_node_server_utils251.logger.log({ level: "error", message: messages });
-        next(new import_node_server_utils251.BadRequestError(messages));
+        import_node_server_utils253.logger.log({ level: "error", message: messages });
+        next(new import_node_server_utils253.BadRequestError(messages));
         return;
       }
       const { _id, ...rest } = value;
@@ -67143,26 +67395,26 @@ function useFormEntryController() {
       res.json({ message: "Successfully updated online form." });
       return;
     } catch (error) {
-      import_node_server_utils251.logger.log({ level: "error", message: error.message });
+      import_node_server_utils253.logger.log({ level: "error", message: error.message });
       next(error);
       return;
     }
   }
   async function deleteFormEntryById(req, res, next) {
     try {
-      const validation = import_joi146.default.string().hex().required();
+      const validation = import_joi148.default.string().hex().required();
       const _id = req.params.id;
       const { error } = validation.validate(_id);
       if (error) {
-        import_node_server_utils251.logger.log({ level: "error", message: error.message });
-        next(new import_node_server_utils251.BadRequestError(error.message));
+        import_node_server_utils253.logger.log({ level: "error", message: error.message });
+        next(new import_node_server_utils253.BadRequestError(error.message));
         return;
       }
       await _deleteOnlineFormById(_id);
       res.json({ message: "Successfully deleted online form." });
       return;
     } catch (error) {
-      import_node_server_utils251.logger.log({ level: "error", message: error.message });
+      import_node_server_utils253.logger.log({ level: "error", message: error.message });
       next(error);
       return;
     }
@@ -67179,8 +67431,8 @@ function useFormEntryController() {
     });
     if (error) {
       const messages = error.details.map((d) => d.message).join(", ");
-      import_node_server_utils251.logger.log({ level: "error", message: messages });
-      next(new import_node_server_utils251.BadRequestError(messages));
+      import_node_server_utils253.logger.log({ level: "error", message: messages });
+      next(new import_node_server_utils253.BadRequestError(messages));
       return;
     }
     try {
@@ -67188,7 +67440,7 @@ function useFormEntryController() {
       res.status(201).json({ message: data });
       return;
     } catch (error2) {
-      import_node_server_utils251.logger.log({ level: "error", message: error2.message });
+      import_node_server_utils253.logger.log({ level: "error", message: error2.message });
       next(error2);
       return;
     }
@@ -67200,8 +67452,8 @@ function useFormEntryController() {
     });
     if (error) {
       const messages = error.details.map((d) => d.message).join(", ");
-      import_node_server_utils251.logger.log({ level: "error", message: messages });
-      next(new import_node_server_utils251.BadRequestError(messages));
+      import_node_server_utils253.logger.log({ level: "error", message: messages });
+      next(new import_node_server_utils253.BadRequestError(messages));
       return;
     }
     try {
@@ -67209,7 +67461,7 @@ function useFormEntryController() {
       res.status(201).json({ message: data });
       return;
     } catch (error2) {
-      import_node_server_utils251.logger.log({ level: "error", message: error2.message });
+      import_node_server_utils253.logger.log({ level: "error", message: error2.message });
       next(error2);
       return;
     }
@@ -67217,22 +67469,22 @@ function useFormEntryController() {
   async function residentForm(req, res, next) {
     try {
       const { site, userId, org } = req.query;
-      const residentFormPayload = import_joi146.default.object({
-        org: import_joi146.default.string().hex().required(),
-        site: import_joi146.default.string().hex().required(),
-        userId: import_joi146.default.string().hex().required()
+      const residentFormPayload = import_joi148.default.object({
+        org: import_joi148.default.string().hex().required(),
+        site: import_joi148.default.string().hex().required(),
+        userId: import_joi148.default.string().hex().required()
       });
       const { error } = residentFormPayload.validate({ site, userId, org }, { abortEarly: true });
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        import_node_server_utils251.logger.log({ level: "error", message: messages });
-        next(new import_node_server_utils251.BadRequestError(messages));
+        import_node_server_utils253.logger.log({ level: "error", message: messages });
+        next(new import_node_server_utils253.BadRequestError(messages));
         return;
       }
       const result = await _residentForm({ userId, site, org });
       res.json(result);
     } catch (error) {
-      import_node_server_utils251.logger.log({ level: "error", message: error.message });
+      import_node_server_utils253.logger.log({ level: "error", message: error.message });
       next(error);
       return;
     }
@@ -67250,11 +67502,11 @@ function useFormEntryController() {
 }
 
 // src/services/building-level.service.ts
-var import_node_server_utils252 = require("@7365admin1/node-server-utils");
+var import_node_server_utils254 = require("@7365admin1/node-server-utils");
 function useBuildingLevelService() {
   const { add: _add, updateLevelById: _updateLevelById } = useBuildingLevelRepo();
   async function add(value) {
-    const session = import_node_server_utils252.useAtlas.getClient()?.startSession();
+    const session = import_node_server_utils254.useAtlas.getClient()?.startSession();
     try {
       session?.startTransaction();
       await _add(value, session);
@@ -67268,7 +67520,7 @@ function useBuildingLevelService() {
     }
   }
   async function updateLevelById(_id, value) {
-    const session = import_node_server_utils252.useAtlas.getClient()?.startSession();
+    const session = import_node_server_utils254.useAtlas.getClient()?.startSession();
     try {
       session?.startTransaction();
       await _updateLevelById(_id, value, session);
@@ -67288,8 +67540,8 @@ function useBuildingLevelService() {
 }
 
 // src/controllers/building-level.controller.ts
-var import_node_server_utils253 = require("@7365admin1/node-server-utils");
-var import_joi147 = __toESM(require("joi"));
+var import_node_server_utils255 = require("@7365admin1/node-server-utils");
+var import_joi149 = __toESM(require("joi"));
 function useBuildingLevelController() {
   const { add: _add, updateLevelById: _updateLevelById } = useBuildingLevelService();
   const {
@@ -67306,8 +67558,8 @@ function useBuildingLevelController() {
       });
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        import_node_server_utils253.logger.log({ level: "error", message: messages });
-        next(new import_node_server_utils253.BadRequestError(messages));
+        import_node_server_utils255.logger.log({ level: "error", message: messages });
+        next(new import_node_server_utils255.BadRequestError(messages));
         return;
       }
       const result = await _add(value);
@@ -67318,20 +67570,20 @@ function useBuildingLevelController() {
   }
   async function getAll(req, res, next) {
     try {
-      const validation = import_joi147.default.object({
-        page: import_joi147.default.number().min(1).optional().default(1),
-        limit: import_joi147.default.number().min(1).optional().default(20),
-        search: import_joi147.default.string().optional().allow("", null),
-        site: import_joi147.default.string().hex().length(24).optional().allow("", null),
-        status: import_joi147.default.string().valid(...Object.values(BuildingLevelStatus)).default("active" /* ACTIVE */)
+      const validation = import_joi149.default.object({
+        page: import_joi149.default.number().min(1).optional().default(1),
+        limit: import_joi149.default.number().min(1).optional().default(20),
+        search: import_joi149.default.string().optional().allow("", null),
+        site: import_joi149.default.string().hex().length(24).optional().allow("", null),
+        status: import_joi149.default.string().valid(...Object.values(BuildingLevelStatus)).default("active" /* ACTIVE */)
       });
       const { error, value } = validation.validate(req.query, {
         abortEarly: false
       });
       if (error) {
         const messages = error.details.map((d) => d.message);
-        import_node_server_utils253.logger.log({ level: "error", message: messages.join(", ") });
-        next(new import_node_server_utils253.BadRequestError(messages.join(", ")));
+        import_node_server_utils255.logger.log({ level: "error", message: messages.join(", ") });
+        next(new import_node_server_utils255.BadRequestError(messages.join(", ")));
         return;
       }
       const { page, limit, status, site, search } = value;
@@ -67350,14 +67602,14 @@ function useBuildingLevelController() {
   }
   async function getById(req, res, next) {
     try {
-      const schema2 = import_joi147.default.object({
-        id: import_joi147.default.string().hex().length(24).required()
+      const schema2 = import_joi149.default.object({
+        id: import_joi149.default.string().hex().length(24).required()
       });
       const { error, value } = schema2.validate({ id: req.params.id });
       if (error) {
         const messages = error.details.map((d) => d.message);
-        import_node_server_utils253.logger.log({ level: "error", message: messages.join(", ") });
-        next(new import_node_server_utils253.BadRequestError(messages.join(", ")));
+        import_node_server_utils255.logger.log({ level: "error", message: messages.join(", ") });
+        next(new import_node_server_utils255.BadRequestError(messages.join(", ")));
         return;
       }
       const { id } = value;
@@ -67376,8 +67628,8 @@ function useBuildingLevelController() {
       });
       if (error) {
         const messages = error.details.map((d) => d.message);
-        import_node_server_utils253.logger.log({ level: "error", message: messages.join(", ") });
-        next(new import_node_server_utils253.BadRequestError(messages.join(", ")));
+        import_node_server_utils255.logger.log({ level: "error", message: messages.join(", ") });
+        next(new import_node_server_utils255.BadRequestError(messages.join(", ")));
         return;
       }
       const { _id, ...rest } = value;
@@ -67389,14 +67641,14 @@ function useBuildingLevelController() {
   }
   async function deleteById(req, res, next) {
     try {
-      const schema2 = import_joi147.default.object({
-        id: import_joi147.default.string().hex().required()
+      const schema2 = import_joi149.default.object({
+        id: import_joi149.default.string().hex().required()
       });
       const { error, value } = schema2.validate({ id: req.params.id });
       if (error) {
         const messages = error.details.map((d) => d.message);
-        import_node_server_utils253.logger.log({ level: "error", message: messages.join(", ") });
-        next(new import_node_server_utils253.BadRequestError(messages.join(", ")));
+        import_node_server_utils255.logger.log({ level: "error", message: messages.join(", ") });
+        next(new import_node_server_utils255.BadRequestError(messages.join(", ")));
         return;
       }
       const { id } = value;
@@ -67409,19 +67661,19 @@ function useBuildingLevelController() {
   }
   async function batchUpdateByIds(req, res, next) {
     try {
-      const schema2 = import_joi147.default.array().items(
-        import_joi147.default.object({
-          _id: import_joi147.default.string().hex().length(24).required(),
-          value: import_joi147.default.object({
-            name: import_joi147.default.string().optional().allow("", null)
+      const schema2 = import_joi149.default.array().items(
+        import_joi149.default.object({
+          _id: import_joi149.default.string().hex().length(24).required(),
+          value: import_joi149.default.object({
+            name: import_joi149.default.string().optional().allow("", null)
           }).required()
         })
       );
       const { error, value } = schema2.validate(req.body);
       if (error) {
         const messages = error.details.map((d) => d.message);
-        import_node_server_utils253.logger.log({ level: "error", message: messages.join(", ") });
-        next(new import_node_server_utils253.BadRequestError(messages.join(", ")));
+        import_node_server_utils255.logger.log({ level: "error", message: messages.join(", ") });
+        next(new import_node_server_utils255.BadRequestError(messages.join(", ")));
         return;
       }
       const updates = value.map((item) => ({
@@ -67436,9 +67688,9 @@ function useBuildingLevelController() {
   }
   async function getBuildingLevelList(req, res, next) {
     try {
-      const schema2 = import_joi147.default.object({
-        site: import_joi147.default.string().hex().length(24).required(),
-        block: import_joi147.default.string().hex().length(24).required()
+      const schema2 = import_joi149.default.object({
+        site: import_joi149.default.string().hex().length(24).required(),
+        block: import_joi149.default.string().hex().length(24).required()
       });
       const { error, value } = schema2.validate({
         site: req.params.siteId,
@@ -67446,8 +67698,8 @@ function useBuildingLevelController() {
       });
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        import_node_server_utils253.logger.log({ level: "error", message: messages });
-        next(new import_node_server_utils253.BadRequestError(messages));
+        import_node_server_utils255.logger.log({ level: "error", message: messages });
+        next(new import_node_server_utils255.BadRequestError(messages));
         return;
       }
       const { site, block } = value;
@@ -67468,11 +67720,1358 @@ function useBuildingLevelController() {
     getBuildingLevelList
   };
 }
+
+// src/models/hid-amico.model.ts
+var import_node_server_utils256 = require("@7365admin1/node-server-utils");
+var import_mongodb153 = require("mongodb");
+var import_joi150 = __toESM(require("joi"));
+function canReadObjectId(value) {
+  if (value instanceof import_mongodb153.ObjectId)
+    return true;
+  if (typeof value === "string")
+    return import_mongodb153.ObjectId.isValid(value);
+  if (value && typeof value === "object") {
+    const candidate = value;
+    if (canReadObjectId(candidate._id) || canReadObjectId(candidate.$oid))
+      return true;
+    if (typeof candidate.toHexString === "function" && import_mongodb153.ObjectId.isValid(candidate.toHexString()))
+      return true;
+    if (typeof candidate.toString === "function") {
+      const text = candidate.toString();
+      return text !== "[object Object]" && import_mongodb153.ObjectId.isValid(text);
+    }
+  }
+  return false;
+}
+function toObjectId23(value, label = "ID") {
+  if (value instanceof import_mongodb153.ObjectId)
+    return value;
+  if (typeof value === "string" && import_mongodb153.ObjectId.isValid(value))
+    return new import_mongodb153.ObjectId(value);
+  if (value && typeof value === "object") {
+    const candidate = value;
+    if (candidate._id)
+      return toObjectId23(candidate._id, label);
+    if (candidate.$oid)
+      return toObjectId23(candidate.$oid, label);
+    if (typeof candidate.toHexString === "function")
+      return toObjectId23(candidate.toHexString(), label);
+    if (typeof candidate.toString === "function") {
+      const text = candidate.toString();
+      if (text !== "[object Object]")
+        return toObjectId23(text, label);
+    }
+  }
+  throw new import_node_server_utils256.BadRequestError(`Invalid ${label} format`);
+}
+var objectIdSchema2 = import_joi150.default.custom((value, helpers) => canReadObjectId(value) ? value : helpers.error("any.invalid"), "ObjectId").messages({
+  "any.invalid": "{{#label}} must be a valid ObjectId"
+});
+var schemaHidAmicoReader = import_joi150.default.object({
+  _id: objectIdSchema2.optional(),
+  site: objectIdSchema2.required(),
+  name: import_joi150.default.string().trim().required(),
+  baseUrl: import_joi150.default.string().uri({ scheme: ["http", "https"] }).required(),
+  username: import_joi150.default.string().trim().required(),
+  password: import_joi150.default.string().required(),
+  location: import_joi150.default.string().allow(null, "").optional(),
+  deviceId: import_joi150.default.string().allow(null, "").optional(),
+  monitorPath: import_joi150.default.string().allow(null, "").optional(),
+  enabled: import_joi150.default.boolean().optional(),
+  status: import_joi150.default.string().valid("active", "inactive", "deleted", "offline").optional(),
+  lastSeenAt: import_joi150.default.date().optional(),
+  lastSyncAt: import_joi150.default.date().optional(),
+  lastSyncStatus: import_joi150.default.string().valid("idle", "running", "completed", "failed").optional(),
+  lastSyncMessage: import_joi150.default.string().allow(null, "").optional(),
+  createdAt: import_joi150.default.date().optional(),
+  updatedAt: import_joi150.default.date().optional(),
+  deletedAt: import_joi150.default.date().optional()
+});
+var schemaUpdateHidAmicoReader = import_joi150.default.object({
+  site: objectIdSchema2.optional(),
+  name: import_joi150.default.string().trim().optional(),
+  baseUrl: import_joi150.default.string().uri({ scheme: ["http", "https"] }).optional(),
+  username: import_joi150.default.string().trim().optional(),
+  password: import_joi150.default.string().allow(null, "").optional(),
+  location: import_joi150.default.string().allow(null, "").optional(),
+  deviceId: import_joi150.default.string().allow(null, "").optional(),
+  monitorPath: import_joi150.default.string().allow(null, "").optional(),
+  enabled: import_joi150.default.boolean().optional(),
+  status: import_joi150.default.string().valid("active", "inactive", "deleted", "offline").optional(),
+  lastSeenAt: import_joi150.default.date().optional(),
+  lastSyncAt: import_joi150.default.date().optional(),
+  lastSyncStatus: import_joi150.default.string().valid("idle", "running", "completed", "failed").optional(),
+  lastSyncMessage: import_joi150.default.string().allow(null, "").optional(),
+  deletedAt: import_joi150.default.date().optional()
+});
+var schemaHidAmicoEvent = import_joi150.default.object({
+  _id: objectIdSchema2.optional(),
+  reader: objectIdSchema2.required(),
+  site: objectIdSchema2.optional(),
+  type: import_joi150.default.string().required(),
+  payload: import_joi150.default.object().unknown(true).required(),
+  status: import_joi150.default.string().valid("received", "processed", "failed").optional(),
+  createdAt: import_joi150.default.date().optional()
+});
+var schemaHidAmicoIdentity = import_joi150.default.object({
+  _id: objectIdSchema2.optional(),
+  reader: objectIdSchema2.required(),
+  site: objectIdSchema2.required(),
+  hidUserId: import_joi150.default.alternatives(import_joi150.default.string(), import_joi150.default.number()).optional().allow(null, ""),
+  registration: import_joi150.default.string().optional().allow(null, ""),
+  cardNo: import_joi150.default.string().optional().allow(null, ""),
+  person: objectIdSchema2.optional().allow(null, ""),
+  user: objectIdSchema2.optional().allow(null, ""),
+  member: objectIdSchema2.optional().allow(null, ""),
+  visitor: objectIdSchema2.optional().allow(null, ""),
+  type: import_joi150.default.string().valid("resident", "staff", "contractor", "visitor", "admin", "unknown").required(),
+  status: import_joi150.default.string().valid("active", "inactive", "deleted").optional(),
+  metadata: import_joi150.default.object().unknown(true).optional(),
+  createdAt: import_joi150.default.date().optional(),
+  updatedAt: import_joi150.default.date().optional(),
+  deletedAt: import_joi150.default.date().optional()
+}).or("hidUserId", "registration", "cardNo");
+var schemaCreateHidAmicoIdentity = import_joi150.default.object({
+  site: objectIdSchema2.optional(),
+  hidUserId: import_joi150.default.alternatives(import_joi150.default.string(), import_joi150.default.number()).optional().allow(null, ""),
+  registration: import_joi150.default.string().optional().allow(null, ""),
+  cardNo: import_joi150.default.string().optional().allow(null, ""),
+  person: objectIdSchema2.optional().allow(null, ""),
+  user: objectIdSchema2.optional().allow(null, ""),
+  member: objectIdSchema2.optional().allow(null, ""),
+  visitor: objectIdSchema2.optional().allow(null, ""),
+  type: import_joi150.default.string().valid("resident", "staff", "contractor", "visitor", "admin", "unknown").required(),
+  status: import_joi150.default.string().valid("active", "inactive", "deleted").optional(),
+  metadata: import_joi150.default.object().unknown(true).optional()
+}).or("hidUserId", "registration", "cardNo");
+var schemaUpdateHidAmicoIdentity = import_joi150.default.object({
+  hidUserId: import_joi150.default.alternatives(import_joi150.default.string(), import_joi150.default.number()).optional().allow(null, ""),
+  registration: import_joi150.default.string().optional().allow(null, ""),
+  cardNo: import_joi150.default.string().optional().allow(null, ""),
+  person: objectIdSchema2.optional().allow(null, ""),
+  user: objectIdSchema2.optional().allow(null, ""),
+  member: objectIdSchema2.optional().allow(null, ""),
+  visitor: objectIdSchema2.optional().allow(null, ""),
+  type: import_joi150.default.string().valid("resident", "staff", "contractor", "visitor", "admin", "unknown").optional(),
+  status: import_joi150.default.string().valid("active", "inactive", "deleted").optional(),
+  metadata: import_joi150.default.object().unknown(true).optional(),
+  deletedAt: import_joi150.default.date().optional()
+});
+var schemaHidAmicoReaderIdParams = import_joi150.default.object({
+  readerId: import_joi150.default.string().hex().length(24).required()
+});
+var schemaHidAmicoUserImageParams = import_joi150.default.object({
+  readerId: import_joi150.default.string().hex().length(24).required(),
+  hidUserId: import_joi150.default.alternatives().try(import_joi150.default.string(), import_joi150.default.number()).required()
+});
+var schemaHidAmicoIdentityIdParams = import_joi150.default.object({
+  identityId: import_joi150.default.string().hex().length(24).required()
+});
+var schemaHidAmicoReaderListQuery = import_joi150.default.object({
+  site: import_joi150.default.string().hex().length(24).optional(),
+  page: import_joi150.default.number().min(1).optional(),
+  limit: import_joi150.default.number().min(1).optional()
+});
+var schemaHidAmicoLogQuery = import_joi150.default.object({
+  page: import_joi150.default.number().min(1).optional(),
+  limit: import_joi150.default.number().min(1).optional(),
+  type: import_joi150.default.string().optional()
+});
+var schemaHidAmicoIdentityQuery = import_joi150.default.object({
+  page: import_joi150.default.number().min(1).optional(),
+  limit: import_joi150.default.number().min(1).optional(),
+  type: import_joi150.default.string().valid("resident", "staff", "contractor", "visitor", "admin", "unknown").optional(),
+  status: import_joi150.default.string().valid("active", "inactive", "deleted").optional(),
+  search: import_joi150.default.string().allow("").optional()
+});
+var schemaHidAmicoSync = import_joi150.default.object({
+  objects: import_joi150.default.array().items(
+    import_joi150.default.object({
+      object: import_joi150.default.string().required(),
+      values: import_joi150.default.array().items(import_joi150.default.object().unknown(true)).required()
+    }).unknown(true)
+  ).optional(),
+  users: import_joi150.default.array().items(import_joi150.default.object().unknown(true)).optional(),
+  cards: import_joi150.default.array().items(import_joi150.default.object().unknown(true)).optional(),
+  qrcodes: import_joi150.default.array().items(import_joi150.default.object().unknown(true)).optional(),
+  pins: import_joi150.default.array().items(import_joi150.default.object().unknown(true)).optional()
+}).unknown(true);
+var schemaHidAmicoExecuteActions = import_joi150.default.object({
+  actions: import_joi150.default.array().items(import_joi150.default.object().unknown(true)).min(1).required()
+}).unknown(true);
+var schemaHidAmicoConfiguration = import_joi150.default.object().pattern(import_joi150.default.string(), import_joi150.default.array().items(import_joi150.default.string())).min(1).unknown(true);
+var schemaHidAmicoSetConfiguration = import_joi150.default.object().unknown(true);
+var schemaHidAmicoObjectOperation = import_joi150.default.object({
+  operation: import_joi150.default.string().valid("load", "create", "modify", "destroy").required(),
+  object: import_joi150.default.string().required(),
+  values: import_joi150.default.alternatives().try(
+    import_joi150.default.array().items(import_joi150.default.object().unknown(true)),
+    import_joi150.default.object().unknown(true)
+  ).optional(),
+  where: import_joi150.default.object().unknown(true).optional(),
+  fields: import_joi150.default.array().items(import_joi150.default.string()).optional(),
+  order: import_joi150.default.array().items(import_joi150.default.string()).optional(),
+  limit: import_joi150.default.number().integer().min(1).optional(),
+  offset: import_joi150.default.number().integer().min(0).optional()
+}).unknown(true);
+var schemaHidAmicoNotificationParams = import_joi150.default.object({
+  readerId: import_joi150.default.string().hex().length(24).required(),
+  type: import_joi150.default.string().valid(
+    "dao",
+    "template",
+    "user_image",
+    "card",
+    "pin",
+    "password",
+    "operation_mode",
+    "door",
+    "secbox",
+    "access_photo",
+    "new_user_identified",
+    "push_result"
+  ).required()
+});
+function MHidAmicoReader(value) {
+  const { error } = schemaHidAmicoReader.validate(value);
+  if (error) {
+    import_node_server_utils256.logger.info(`HID Amico reader: ${error.message}`);
+    throw new import_node_server_utils256.BadRequestError(error.message);
+  }
+  return {
+    _id: value._id ? toObjectId23(value._id, "reader ID") : new import_mongodb153.ObjectId(),
+    site: toObjectId23(value.site, "site ID"),
+    name: value.name,
+    baseUrl: value.baseUrl.replace(/\/+$/, ""),
+    username: value.username,
+    password: value.password,
+    location: value.location ?? "",
+    deviceId: value.deviceId ?? "",
+    monitorPath: value.monitorPath ?? "api/notifications",
+    enabled: value.enabled ?? true,
+    status: value.status ?? "active",
+    lastSeenAt: value.lastSeenAt ?? "",
+    lastSyncAt: value.lastSyncAt ?? "",
+    lastSyncStatus: value.lastSyncStatus ?? "idle",
+    lastSyncMessage: value.lastSyncMessage ?? "",
+    createdAt: value.createdAt ?? /* @__PURE__ */ new Date(),
+    updatedAt: value.updatedAt ?? /* @__PURE__ */ new Date(),
+    deletedAt: value.deletedAt ?? ""
+  };
+}
+function MHidAmicoEvent(value) {
+  const { error } = schemaHidAmicoEvent.validate(value);
+  if (error) {
+    import_node_server_utils256.logger.info(`HID Amico event: ${error.message}`);
+    throw new import_node_server_utils256.BadRequestError(error.message);
+  }
+  return {
+    _id: value._id ? toObjectId23(value._id, "event ID") : new import_mongodb153.ObjectId(),
+    reader: toObjectId23(value.reader, "reader ID"),
+    site: value.site ? toObjectId23(value.site, "site ID") : void 0,
+    type: value.type,
+    payload: value.payload,
+    status: value.status ?? "received",
+    createdAt: value.createdAt ?? /* @__PURE__ */ new Date()
+  };
+}
+function optionalObjectId(value) {
+  return value ? toObjectId23(value) : void 0;
+}
+function MHidAmicoIdentity(value) {
+  const { error } = schemaHidAmicoIdentity.validate(value);
+  if (error) {
+    import_node_server_utils256.logger.info(`HID Amico identity: ${error.message}`);
+    throw new import_node_server_utils256.BadRequestError(error.message);
+  }
+  return {
+    _id: value._id ? toObjectId23(value._id, "identity ID") : new import_mongodb153.ObjectId(),
+    reader: toObjectId23(value.reader, "reader ID"),
+    site: toObjectId23(value.site, "site ID"),
+    hidUserId: value.hidUserId === void 0 || value.hidUserId === null ? "" : String(value.hidUserId),
+    registration: value.registration ?? "",
+    cardNo: value.cardNo ?? "",
+    person: optionalObjectId(value.person),
+    user: optionalObjectId(value.user),
+    member: optionalObjectId(value.member),
+    visitor: optionalObjectId(value.visitor),
+    type: value.type,
+    status: value.status ?? "active",
+    metadata: value.metadata ?? {},
+    createdAt: value.createdAt ?? /* @__PURE__ */ new Date(),
+    updatedAt: value.updatedAt ?? /* @__PURE__ */ new Date(),
+    deletedAt: value.deletedAt ?? ""
+  };
+}
+
+// src/repositories/hid-amico.repo.ts
+var import_node_server_utils257 = require("@7365admin1/node-server-utils");
+var import_mongodb154 = require("mongodb");
+function useHidAmicoRepo() {
+  function db() {
+    const instance = import_node_server_utils257.useAtlas.getDb();
+    if (!instance) {
+      throw new import_node_server_utils257.InternalServerError("Unable to connect to server.");
+    }
+    return instance;
+  }
+  function readers() {
+    return db().collection("hid-amico-readers");
+  }
+  function events() {
+    return db().collection("hid-amico-events");
+  }
+  function identities() {
+    return db().collection("hid-amico-identities");
+  }
+  function toId(id, label = "ID") {
+    try {
+      return new import_mongodb154.ObjectId(id);
+    } catch {
+      throw new import_node_server_utils257.BadRequestError(`Invalid ${label} format`);
+    }
+  }
+  function hideSecret(reader) {
+    if (!reader) {
+      return reader;
+    }
+    const { password, ...safeReader } = reader;
+    const status = safeReader.lastSyncStatus === "failed" && safeReader.status === "active" ? "offline" : safeReader.status;
+    return {
+      ...safeReader,
+      status,
+      passwordSet: Boolean(password)
+    };
+  }
+  function escapeRegex(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  }
+  function buildIdentityKeyQuery(value) {
+    const or = [];
+    if (value.hidUserId !== void 0 && value.hidUserId !== null && String(value.hidUserId) !== "") {
+      or.push({ hidUserId: String(value.hidUserId) });
+    }
+    if (value.registration) {
+      or.push({ registration: value.registration });
+    }
+    if (value.cardNo) {
+      or.push({ cardNo: value.cardNo });
+    }
+    return or;
+  }
+  async function createIndexes() {
+    try {
+      await Promise.all([
+        readers().createIndex({ site: 1, status: 1 }),
+        readers().createIndex(
+          { site: 1, baseUrl: 1 },
+          { unique: true, partialFilterExpression: { status: "active" } }
+        ),
+        readers().createIndex({ deviceId: 1 }),
+        events().createIndex({ reader: 1, createdAt: -1 }),
+        events().createIndex({ site: 1, createdAt: -1 }),
+        events().createIndex({ type: 1, createdAt: -1 }),
+        identities().createIndex({ reader: 1, status: 1 }),
+        identities().createIndex({ site: 1, status: 1 }),
+        identities().createIndex({ reader: 1, hidUserId: 1 }),
+        identities().createIndex({ reader: 1, registration: 1 }),
+        identities().createIndex({ reader: 1, cardNo: 1 })
+      ]);
+      return "HID Amico indexes created.";
+    } catch (error) {
+      import_node_server_utils257.logger.error(error.message);
+      throw new Error("Failed to create HID Amico indexes.");
+    }
+  }
+  async function add(value, session) {
+    try {
+      const doc = MHidAmicoReader(value);
+      await readers().insertOne(doc, { session });
+      return hideSecret(doc);
+    } catch (error) {
+      if (error.message?.includes("duplicate")) {
+        throw new import_node_server_utils257.BadRequestError("HID Amico reader already exists for this site and URL.");
+      }
+      throw error;
+    }
+  }
+  async function list(value) {
+    const page = value.page ? value.page - 1 : 0;
+    const limit = value.limit || 10;
+    const query = { status: { $ne: "deleted" } };
+    if (value.site) {
+      query.site = toId(value.site, "site ID");
+    }
+    const items = await readers().find(query).sort({ createdAt: -1 }).skip(page * limit).limit(limit).toArray();
+    const total = await readers().countDocuments(query);
+    return (0, import_node_server_utils257.paginate)(items.map(hideSecret), page, limit, total);
+  }
+  async function getById(id, options = {}) {
+    const _id = toId(id, "reader ID");
+    const reader = await readers().findOne(
+      { _id, status: { $ne: "deleted" } }
+    );
+    if (!reader) {
+      throw new import_node_server_utils257.BadRequestError("HID Amico reader not found.");
+    }
+    return options.includePassword ? reader : hideSecret(reader);
+  }
+  async function updateById(id, value, session) {
+    const { error } = schemaUpdateHidAmicoReader.validate(value);
+    if (error) {
+      throw new import_node_server_utils257.BadRequestError(error.message);
+    }
+    const _id = toId(id, "reader ID");
+    const payload = {
+      ...value,
+      updatedAt: /* @__PURE__ */ new Date()
+    };
+    if (payload.site) {
+      payload.site = toId(payload.site, "site ID");
+    }
+    if (payload.baseUrl) {
+      payload.baseUrl = payload.baseUrl.replace(/\/+$/, "");
+    }
+    const updated = await readers().findOneAndUpdate(
+      { _id, status: { $ne: "deleted" } },
+      { $set: payload },
+      { returnDocument: "after", session }
+    );
+    if (!updated) {
+      throw new import_node_server_utils257.BadRequestError("HID Amico reader not found.");
+    }
+    return hideSecret(updated);
+  }
+  async function markDeleted(id, session) {
+    return updateById(
+      id,
+      {
+        status: "deleted",
+        enabled: false,
+        deletedAt: /* @__PURE__ */ new Date()
+      },
+      session
+    );
+  }
+  async function addEvent(value, session) {
+    const event = MHidAmicoEvent(value);
+    await events().insertOne(event, { session });
+    return event;
+  }
+  async function listEvents(value) {
+    const page = value.page ? value.page - 1 : 0;
+    const limit = value.limit || 20;
+    const query = { reader: toId(value.reader, "reader ID") };
+    if (value.type) {
+      query.type = value.type;
+    }
+    const items = await events().find(query).sort({ createdAt: -1 }).skip(page * limit).limit(limit).toArray();
+    const total = await events().countDocuments(query);
+    return (0, import_node_server_utils257.paginate)(items, page, limit, total);
+  }
+  async function addIdentity(value, session) {
+    try {
+      const identity = MHidAmicoIdentity(value);
+      const existing = await findExistingIdentity({
+        reader: identity.reader,
+        hidUserId: identity.hidUserId,
+        registration: identity.registration,
+        cardNo: identity.cardNo
+      });
+      if (existing) {
+        throw new import_node_server_utils257.BadRequestError("HID Amico identity already exists for this reader.");
+      }
+      await identities().insertOne(identity, { session });
+      return identity;
+    } catch (error) {
+      if (error instanceof import_node_server_utils257.BadRequestError) {
+        throw error;
+      }
+      if (error.message?.includes("duplicate")) {
+        throw new import_node_server_utils257.BadRequestError("HID Amico identity already exists for this reader.");
+      }
+      throw error;
+    }
+  }
+  async function listIdentities(value) {
+    const page = value.page ? value.page - 1 : 0;
+    const limit = value.limit || 20;
+    const query = {
+      reader: toId(value.reader, "reader ID"),
+      status: value.status || { $ne: "deleted" }
+    };
+    if (value.type) {
+      query.type = value.type;
+    }
+    if (value.search) {
+      const search = escapeRegex(value.search);
+      query.$or = [
+        { hidUserId: { $regex: search, $options: "i" } },
+        { registration: { $regex: search, $options: "i" } },
+        { cardNo: { $regex: search, $options: "i" } }
+      ];
+    }
+    const items = await identities().find(query).sort({ createdAt: -1 }).skip(page * limit).limit(limit).toArray();
+    const total = await identities().countDocuments(query);
+    return (0, import_node_server_utils257.paginate)(items, page, limit, total);
+  }
+  async function updateIdentity(id, value, session) {
+    const { error } = schemaUpdateHidAmicoIdentity.validate(value);
+    if (error) {
+      throw new import_node_server_utils257.BadRequestError(error.message);
+    }
+    const payload = {
+      ...value,
+      updatedAt: /* @__PURE__ */ new Date()
+    };
+    const unsetPayload = {};
+    ["person", "user", "member", "visitor"].forEach((field) => {
+      if (payload[field]) {
+        payload[field] = toId(payload[field], `${field} ID`);
+      }
+      if (payload[field] === "" || payload[field] === null) {
+        delete payload[field];
+        unsetPayload[field] = "";
+      }
+    });
+    if (payload.hidUserId !== void 0 && payload.hidUserId !== null) {
+      payload.hidUserId = String(payload.hidUserId);
+    }
+    const updated = await identities().findOneAndUpdate(
+      { _id: toId(id, "identity ID"), status: { $ne: "deleted" } },
+      {
+        $set: payload,
+        ...Object.keys(unsetPayload).length ? { $unset: unsetPayload } : {}
+      },
+      { returnDocument: "after", session }
+    );
+    if (!updated) {
+      throw new import_node_server_utils257.BadRequestError("HID Amico identity not found.");
+    }
+    return updated;
+  }
+  async function deleteIdentity(id, session) {
+    return updateIdentity(
+      id,
+      {
+        status: "deleted",
+        deletedAt: /* @__PURE__ */ new Date()
+      },
+      session
+    );
+  }
+  async function findIdentity(value) {
+    const or = buildIdentityKeyQuery(value);
+    if (!or.length) {
+      return null;
+    }
+    return identities().findOne({
+      reader: toId(value.reader, "reader ID"),
+      status: "active",
+      $or: or
+    });
+  }
+  async function findExistingIdentity(value) {
+    const or = buildIdentityKeyQuery(value);
+    if (!or.length) {
+      return null;
+    }
+    return identities().findOne({
+      reader: toId(value.reader, "reader ID"),
+      status: { $ne: "deleted" },
+      $or: or
+    });
+  }
+  return {
+    createIndexes,
+    add,
+    list,
+    getById,
+    updateById,
+    markDeleted,
+    addEvent,
+    listEvents,
+    addIdentity,
+    listIdentities,
+    updateIdentity,
+    deleteIdentity,
+    findIdentity,
+    findExistingIdentity
+  };
+}
+
+// src/services/hid-amico.service.ts
+var import_crypto3 = __toESM(require("crypto"));
+var import_axios4 = __toESM(require("axios"));
+var import_node_server_utils258 = require("@7365admin1/node-server-utils");
+var PASSWORD_PREFIX = "v1";
+function getSecretKey() {
+  const secret = process.env.HID_AMICO_SECRET || process.env.ACCESS_TOKEN_SECRET || "iservice365-hid-amico";
+  return import_crypto3.default.createHash("sha256").update(secret).digest();
+}
+function encryptSecret(value) {
+  const iv = import_crypto3.default.randomBytes(12);
+  const cipher = import_crypto3.default.createCipheriv("aes-256-gcm", getSecretKey(), iv);
+  const encrypted = Buffer.concat([cipher.update(value, "utf8"), cipher.final()]);
+  const tag = cipher.getAuthTag();
+  return [PASSWORD_PREFIX, iv.toString("hex"), tag.toString("hex"), encrypted.toString("hex")].join(":");
+}
+function decryptSecret(value) {
+  if (!value?.startsWith(`${PASSWORD_PREFIX}:`)) {
+    return value;
+  }
+  const [, ivHex, tagHex, encryptedHex] = value.split(":");
+  const decipher = import_crypto3.default.createDecipheriv("aes-256-gcm", getSecretKey(), Buffer.from(ivHex, "hex"));
+  decipher.setAuthTag(Buffer.from(tagHex, "hex"));
+  return Buffer.concat([
+    decipher.update(Buffer.from(encryptedHex, "hex")),
+    decipher.final()
+  ]).toString("utf8");
+}
+function formatHidResponse(data) {
+  if (data === void 0 || data === null) {
+    return "";
+  }
+  const text = typeof data === "string" ? data : JSON.stringify(data);
+  return text.length > 300 ? `${text.slice(0, 300)}...` : text;
+}
+function sanitizeHidPath(path5) {
+  return path5.replace(/([?&]session=)[^&]+/i, "$1<redacted>");
+}
+function toHidRequestError(error, path5) {
+  if (import_axios4.default.isAxiosError(error)) {
+    const status = error.response?.status;
+    const payload = formatHidResponse(error.response?.data);
+    const detail = [
+      `HID Amico request failed: ${sanitizeHidPath(path5)}`,
+      status ? `status ${status}` : "",
+      payload ? `response ${payload}` : error.message
+    ].filter(Boolean).join(" - ");
+    return new import_node_server_utils258.BadRequestError(detail);
+  }
+  return error;
+}
+var HidAmicoClient = class {
+  constructor(reader) {
+    this.reader = reader;
+    this.session = "";
+    this.http = import_axios4.default.create({
+      baseURL: reader.baseUrl.replace(/\/+$/, ""),
+      timeout: 15e3,
+      headers: { "Content-Type": "application/json" }
+    });
+  }
+  async post(path5, body) {
+    try {
+      return await this.http.post(path5, body);
+    } catch (error) {
+      throw toHidRequestError(error, path5);
+    }
+  }
+  async get(path5, responseType = "json") {
+    try {
+      return await this.http.get(path5, { responseType });
+    } catch (error) {
+      throw toHidRequestError(error, path5);
+    }
+  }
+  url(path5) {
+    const normalizedPath = path5.startsWith("/") ? path5 : `/${path5}`;
+    if (!this.session) {
+      return normalizedPath;
+    }
+    const separator = normalizedPath.includes("?") ? "&" : "?";
+    return `${normalizedPath}${separator}session=${encodeURIComponent(this.session)}`;
+  }
+  async login() {
+    const res = await this.post("/hidlogin.fcgi", {
+      login: this.reader.username,
+      password: decryptSecret(this.reader.password)
+    });
+    if (!res.data?.session) {
+      throw new import_node_server_utils258.BadRequestError("HID Amico login failed: missing session.");
+    }
+    this.session = res.data.session;
+    return this.session;
+  }
+  async sessionIsValid() {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/session_is_valid.fcgi"), {});
+    return Boolean(res.data?.session_is_valid ?? res.data?.valid ?? true);
+  }
+  async getUserImage(hidUserId) {
+    if (!this.session) {
+      await this.login();
+    }
+    const path5 = this.url(`/user_get_image.fcgi?user_id=${encodeURIComponent(String(hidUserId))}`);
+    const res = await this.get(path5, "arraybuffer");
+    const contentType = String(res.headers?.["content-type"] || "");
+    const buffer = Buffer.from(res.data);
+    if (contentType.includes("application/json")) {
+      const payload = JSON.parse(buffer.toString("utf8"));
+      const image = payload.image || payload.photo || payload.data?.image || payload.data?.photo;
+      if (!image) {
+        throw new import_node_server_utils258.BadRequestError("HID Amico user image response did not include an image.");
+      }
+      return {
+        contentType: payload.contentType || payload.mimeType || "image/jpeg",
+        base64: String(image).replace(/^data:image\/[a-zA-Z0-9.+-]+;base64,/, "")
+      };
+    }
+    return {
+      contentType: contentType || "image/jpeg",
+      base64: buffer.toString("base64")
+    };
+  }
+  async logout() {
+    if (!this.session) {
+      return;
+    }
+    const logoutUrl = this.url("/logout.fcgi");
+    try {
+      this.session = "";
+      await this.post(logoutUrl, {});
+    } catch {
+      this.session = "";
+    }
+  }
+  async createObjects(batch) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/create_objects.fcgi"), {
+      object: batch.object,
+      values: batch.values
+    });
+    return res.data;
+  }
+  async loadObjects(query) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/load_objects.fcgi"), query);
+    return res.data;
+  }
+  async modifyObjects(payload) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/modify_objects.fcgi"), payload);
+    return res.data;
+  }
+  async destroyObjects(payload) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/destroy_objects.fcgi"), payload);
+    return res.data;
+  }
+  async doorState() {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/door_state.fcgi"), {});
+    return res.data;
+  }
+  async executeActions(actions) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/execute_actions.fcgi"), { actions });
+    return res.data;
+  }
+  async getConfiguration(payload) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/get_configuration.fcgi"), payload);
+    return res.data;
+  }
+  async setConfiguration(payload) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/set_configuration.fcgi"), payload);
+    return res.data;
+  }
+};
+function normalizeBatches(payload) {
+  if (Array.isArray(payload?.objects)) {
+    return payload.objects.filter((batch) => batch?.object && Array.isArray(batch?.values));
+  }
+  const batches = [];
+  const mappings = [
+    ["users", "users"],
+    ["cards", "cards"],
+    ["qrcodes", "qrcodes"],
+    ["pins", "pins"]
+  ];
+  mappings.forEach(([key, object]) => {
+    if (Array.isArray(payload?.[key]) && payload[key].length) {
+      batches.push({ object, values: payload[key] });
+    }
+  });
+  return batches;
+}
+function firstValue(payload, keys) {
+  for (const key of keys) {
+    const value = payload?.[key];
+    if (value !== void 0 && value !== null && value !== "") {
+      return value;
+    }
+  }
+  return void 0;
+}
+function extractIdentityKeys(payload) {
+  const nested = payload?.user || payload?.person || payload?.data || {};
+  const merged = { ...payload, ...nested };
+  return {
+    hidUserId: firstValue(merged, ["hidUserId", "hid_user_id", "user_id", "userId", "id", "user"]),
+    registration: firstValue(merged, ["registration", "register", "employeeNo", "staffNo", "memberNo"]),
+    cardNo: firstValue(merged, ["cardNo", "card_no", "card", "cardNumber", "value"])
+  };
+}
+function useHidAmicoService() {
+  const repo = useHidAmicoRepo();
+  async function getActiveReader(id) {
+    const reader = await repo.getById(id, { includePassword: true });
+    if (reader.enabled === false || reader.status === "inactive" || reader.status === "deleted") {
+      throw new import_node_server_utils258.BadRequestError("HID Amico reader is not active.");
+    }
+    return reader;
+  }
+  async function createReader(value) {
+    return repo.add({
+      ...value,
+      baseUrl: value.baseUrl.replace(/\/+$/, ""),
+      password: encryptSecret(value.password)
+    });
+  }
+  async function updateReader(id, value) {
+    const payload = { ...value };
+    if (payload.password) {
+      payload.password = encryptSecret(payload.password);
+    } else {
+      delete payload.password;
+    }
+    return repo.updateById(id, payload);
+  }
+  async function listReaders(value) {
+    return repo.list(value);
+  }
+  async function deleteReader(id) {
+    return repo.markDeleted(id);
+  }
+  async function testReader(id) {
+    const reader = await repo.getById(id, { includePassword: true });
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      const valid = await client.sessionIsValid();
+      await repo.updateById(id, { lastSeenAt: /* @__PURE__ */ new Date(), lastSyncMessage: "Connection test succeeded." });
+      await repo.addEvent({ reader: id, site: reader.site, type: "test", payload: { valid } });
+      return { valid, message: "HID Amico connection test succeeded." };
+    } catch (error) {
+      await repo.updateById(id, {
+        status: "offline",
+        lastSyncAt: /* @__PURE__ */ new Date(),
+        lastSyncStatus: "failed",
+        lastSyncMessage: error.message
+      });
+      await repo.addEvent({ reader: id, site: reader.site, type: "test_failed", payload: { message: error.message } });
+      throw error;
+    } finally {
+      await client.logout();
+    }
+  }
+  async function syncReader(id, payload) {
+    const reader = await getActiveReader(id);
+    const batches = normalizeBatches(payload);
+    const client = new HidAmicoClient(reader);
+    const results = [];
+    await repo.updateById(id, { lastSyncStatus: "running", lastSyncMessage: "Sync started." });
+    try {
+      await client.login();
+      for (const batch of batches) {
+        const result = await client.createObjects(batch);
+        results.push({ object: batch.object, count: batch.values.length, result });
+      }
+      const message = batches.length ? `Synced ${batches.length} HID object batch(es).` : "HID reader session verified. No sync payload was supplied.";
+      await repo.updateById(id, {
+        lastSeenAt: /* @__PURE__ */ new Date(),
+        lastSyncAt: /* @__PURE__ */ new Date(),
+        lastSyncStatus: "completed",
+        lastSyncMessage: message
+      });
+      await repo.addEvent({ reader: id, site: reader.site, type: "sync", payload: { message, results } });
+      return { message, results };
+    } catch (error) {
+      await repo.updateById(id, {
+        status: "offline",
+        lastSyncAt: /* @__PURE__ */ new Date(),
+        lastSyncStatus: "failed",
+        lastSyncMessage: error.message
+      });
+      await repo.addEvent({ reader: id, site: reader.site, type: "sync_failed", payload: { message: error.message } });
+      throw error;
+    } finally {
+      await client.logout();
+    }
+  }
+  async function receiveNotification(readerId, type, payload) {
+    const reader = await repo.getById(readerId);
+    const identityKeys = extractIdentityKeys(payload);
+    const identity = await repo.findIdentity({
+      reader: readerId,
+      ...identityKeys
+    });
+    const enrichedPayload = identity ? {
+      ...payload,
+      identity: {
+        _id: identity._id,
+        type: identity.type,
+        hidUserId: identity.hidUserId,
+        registration: identity.registration,
+        cardNo: identity.cardNo,
+        person: identity.person,
+        user: identity.user,
+        member: identity.member,
+        visitor: identity.visitor
+      }
+    } : {
+      ...payload,
+      identity: null,
+      identityLookup: identityKeys
+    };
+    await repo.updateById(readerId, { lastSeenAt: /* @__PURE__ */ new Date() });
+    return repo.addEvent({
+      reader: readerId,
+      site: reader.site,
+      type,
+      payload: enrichedPayload,
+      status: identity ? "processed" : "received"
+    });
+  }
+  async function listLogs(value) {
+    return repo.listEvents(value);
+  }
+  async function listIdentities(value) {
+    return repo.listIdentities(value);
+  }
+  async function createIdentity(readerId, value) {
+    const reader = await repo.getById(readerId);
+    return repo.addIdentity({
+      ...value,
+      reader: readerId,
+      site: value.site || reader?.site?.toString()
+    });
+  }
+  async function updateIdentity(identityId, value) {
+    return repo.updateIdentity(identityId, value);
+  }
+  async function deleteIdentity(identityId) {
+    return repo.deleteIdentity(identityId);
+  }
+  async function runObjectOperation(id, operation, payload) {
+    const reader = await getActiveReader(id);
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      let result;
+      if (operation === "load") {
+        result = await client.loadObjects(payload);
+      } else if (operation === "create") {
+        result = await client.createObjects(payload);
+      } else if (operation === "modify") {
+        result = await client.modifyObjects(payload);
+      } else {
+        result = await client.destroyObjects(payload);
+      }
+      await repo.updateById(id, { lastSeenAt: /* @__PURE__ */ new Date() });
+      await repo.addEvent({ reader: id, site: reader.site, type: `objects_${operation}`, payload: { request: payload, result } });
+      return result;
+    } catch (error) {
+      await repo.addEvent({ reader: id, site: reader.site, type: `objects_${operation}_failed`, payload: { request: payload, message: error.message } });
+      throw error;
+    } finally {
+      await client.logout();
+    }
+  }
+  async function getUserImage(readerId, hidUserId) {
+    const reader = await getActiveReader(readerId);
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      return await client.getUserImage(hidUserId);
+    } finally {
+      await client.logout();
+    }
+  }
+  async function getDoorState(id) {
+    const reader = await getActiveReader(id);
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      const state = await client.doorState();
+      await repo.updateById(id, { lastSeenAt: /* @__PURE__ */ new Date() });
+      await repo.addEvent({ reader: id, site: reader.site, type: "door_state", payload: state });
+      return state;
+    } finally {
+      await client.logout();
+    }
+  }
+  async function executeActions(id, actions) {
+    const reader = await getActiveReader(id);
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      const result = await client.executeActions(actions);
+      await repo.updateById(id, { lastSeenAt: /* @__PURE__ */ new Date() });
+      await repo.addEvent({ reader: id, site: reader.site, type: "execute_actions", payload: { actions, result } });
+      return result;
+    } catch (error) {
+      await repo.addEvent({ reader: id, site: reader.site, type: "execute_actions_failed", payload: { actions, message: error.message } });
+      throw error;
+    } finally {
+      await client.logout();
+    }
+  }
+  async function getConfiguration(id, payload) {
+    const reader = await getActiveReader(id);
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      const result = await client.getConfiguration(payload);
+      await repo.updateById(id, { lastSeenAt: /* @__PURE__ */ new Date() });
+      await repo.addEvent({ reader: id, site: reader.site, type: "configuration", payload: { request: payload, result } });
+      return result;
+    } catch (error) {
+      await repo.addEvent({ reader: id, site: reader.site, type: "configuration_failed", payload: { request: payload, message: error.message } });
+      throw error;
+    } finally {
+      await client.logout();
+    }
+  }
+  async function setConfiguration(id, payload) {
+    const reader = await getActiveReader(id);
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      const result = await client.setConfiguration(payload);
+      await repo.updateById(id, { lastSeenAt: /* @__PURE__ */ new Date() });
+      await repo.addEvent({ reader: id, site: reader.site, type: "set_configuration", payload: { request: payload, result } });
+      return result;
+    } catch (error) {
+      await repo.addEvent({ reader: id, site: reader.site, type: "set_configuration_failed", payload: { request: payload, message: error.message } });
+      throw error;
+    } finally {
+      await client.logout();
+    }
+  }
+  return {
+    listReaders,
+    createReader,
+    updateReader,
+    deleteReader,
+    testReader,
+    syncReader,
+    receiveNotification,
+    listLogs,
+    listIdentities,
+    createIdentity,
+    updateIdentity,
+    deleteIdentity,
+    runObjectOperation,
+    getUserImage,
+    getDoorState,
+    executeActions,
+    getConfiguration,
+    setConfiguration
+  };
+}
+
+// src/controllers/hid-amico.controller.ts
+var import_node_server_utils259 = require("@7365admin1/node-server-utils");
+function useHidAmicoController() {
+  const service = useHidAmicoService();
+  async function listReaders(req, res, next) {
+    const { error, value } = schemaHidAmicoReaderListQuery.validate(req.query);
+    if (error) {
+      next(new import_node_server_utils259.BadRequestError(error.message));
+      return;
+    }
+    try {
+      res.json(await service.listReaders(value));
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function createReader(req, res, next) {
+    const { error, value } = schemaHidAmicoReader.validate(req.body);
+    if (error) {
+      next(new import_node_server_utils259.BadRequestError(error.message));
+      return;
+    }
+    try {
+      res.status(201).json({ data: await service.createReader(value) });
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function updateReader(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const body = schemaUpdateHidAmicoReader.validate(req.body);
+    if (params.error || body.error) {
+      next(new import_node_server_utils259.BadRequestError(params.error?.message || body.error?.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.updateReader(params.value.readerId, body.value) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function deleteReader(req, res, next) {
+    const { error, value } = schemaHidAmicoReaderIdParams.validate(req.params);
+    if (error) {
+      next(new import_node_server_utils259.BadRequestError(error.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.deleteReader(value.readerId), message: "HID Amico reader deleted." });
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function testReader(req, res, next) {
+    const { error, value } = schemaHidAmicoReaderIdParams.validate(req.params);
+    if (error) {
+      next(new import_node_server_utils259.BadRequestError(error.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.testReader(value.readerId) });
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function syncReader(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const body = schemaHidAmicoSync.validate(req.body ?? {});
+    if (params.error || body.error) {
+      next(new import_node_server_utils259.BadRequestError(params.error?.message || body.error?.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.syncReader(params.value.readerId, body.value) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function listLogs(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const query = schemaHidAmicoLogQuery.validate(req.query);
+    if (params.error || query.error) {
+      next(new import_node_server_utils259.BadRequestError(params.error?.message || query.error?.message));
+      return;
+    }
+    try {
+      res.json(await service.listLogs({ reader: params.value.readerId, ...query.value }));
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function listIdentities(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const query = schemaHidAmicoIdentityQuery.validate(req.query);
+    if (params.error || query.error) {
+      next(new import_node_server_utils259.BadRequestError(params.error?.message || query.error?.message));
+      return;
+    }
+    try {
+      res.json(await service.listIdentities({ reader: params.value.readerId, ...query.value }));
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function createIdentity(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    if (params.error) {
+      next(new import_node_server_utils259.BadRequestError(params.error.message));
+      return;
+    }
+    try {
+      const body = schemaCreateHidAmicoIdentity.validate(req.body);
+      if (body.error) {
+        next(new import_node_server_utils259.BadRequestError(body.error.message));
+        return;
+      }
+      res.status(201).json({ data: await service.createIdentity(params.value.readerId, body.value) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function updateIdentity(req, res, next) {
+    const params = schemaHidAmicoIdentityIdParams.validate(req.params);
+    const body = schemaUpdateHidAmicoIdentity.validate(req.body ?? {});
+    if (params.error || body.error) {
+      next(new import_node_server_utils259.BadRequestError(params.error?.message || body.error?.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.updateIdentity(params.value.identityId, body.value) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function deleteIdentity(req, res, next) {
+    const { error, value } = schemaHidAmicoIdentityIdParams.validate(req.params);
+    if (error) {
+      next(new import_node_server_utils259.BadRequestError(error.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.deleteIdentity(value.identityId), message: "HID Amico identity deleted." });
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function receiveNotification(req, res, next) {
+    const validation = schemaHidAmicoNotificationParams.validate(req.params);
+    if (validation.error) {
+      next(new import_node_server_utils259.BadRequestError(validation.error.message));
+      return;
+    }
+    try {
+      const event = await service.receiveNotification(
+        validation.value.readerId,
+        validation.value.type,
+        req.body ?? {}
+      );
+      res.status(202).json({ data: event });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function getDoorState(req, res, next) {
+    const { error, value } = schemaHidAmicoReaderIdParams.validate(req.params);
+    if (error) {
+      next(new import_node_server_utils259.BadRequestError(error.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.getDoorState(value.readerId) });
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function getUserImage(req, res, next) {
+    const { error, value } = schemaHidAmicoUserImageParams.validate(req.params);
+    if (error) {
+      next(new import_node_server_utils259.BadRequestError(error.message));
+      return;
+    }
+    try {
+      const image = await service.getUserImage(value.readerId, value.hidUserId);
+      res.json({ data: image });
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function executeActions(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const body = schemaHidAmicoExecuteActions.validate(req.body ?? {});
+    if (params.error || body.error) {
+      next(new import_node_server_utils259.BadRequestError(params.error?.message || body.error?.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.executeActions(params.value.readerId, body.value.actions) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function getConfiguration(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const body = schemaHidAmicoConfiguration.validate(req.body ?? {});
+    if (params.error || body.error) {
+      next(new import_node_server_utils259.BadRequestError(params.error?.message || body.error?.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.getConfiguration(params.value.readerId, body.value) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function setConfiguration(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const body = schemaHidAmicoSetConfiguration.validate(req.body ?? {});
+    if (params.error || body.error) {
+      next(new import_node_server_utils259.BadRequestError(params.error?.message || body.error?.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.setConfiguration(params.value.readerId, body.value) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function runObjectOperation(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const body = schemaHidAmicoObjectOperation.validate(req.body ?? {});
+    if (params.error || body.error) {
+      next(new import_node_server_utils259.BadRequestError(params.error?.message || body.error?.message));
+      return;
+    }
+    const { operation, ...payload } = body.value;
+    if (operation === "create" && !Array.isArray(payload.values)) {
+      next(new import_node_server_utils259.BadRequestError("values array is required for HID object create operations."));
+      return;
+    }
+    if (operation === "modify" && (!payload.values || Array.isArray(payload.values) || !payload.where)) {
+      next(new import_node_server_utils259.BadRequestError("values object and where are required for HID object modify operations."));
+      return;
+    }
+    if (operation === "destroy" && !payload.where) {
+      next(new import_node_server_utils259.BadRequestError("where is required for HID object destroy operations."));
+      return;
+    }
+    try {
+      res.json({ data: await service.runObjectOperation(params.value.readerId, operation, payload) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  return {
+    listReaders,
+    createReader,
+    updateReader,
+    deleteReader,
+    testReader,
+    syncReader,
+    listLogs,
+    listIdentities,
+    createIdentity,
+    updateIdentity,
+    deleteIdentity,
+    receiveNotification,
+    getUserImage,
+    getDoorState,
+    executeActions,
+    getConfiguration,
+    setConfiguration,
+    runObjectOperation
+  };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ANPRMode,
   AccessTypeProps,
   AppServiceType,
+  BidStatus,
+  BidType,
   BuildingLevelStatus,
   BuildingStatus,
   BulletinOrder,
@@ -67504,6 +69103,7 @@ function useBuildingLevelController() {
   MAddress,
   MAttendance,
   MAttendanceSettings,
+  MBidPreloved,
   MBillingConfiguration,
   MBillingItem,
   MBuilding,
@@ -67524,6 +69124,9 @@ function useBuildingLevelController() {
   MFile,
   MFormEntry,
   MGuestManagement,
+  MHidAmicoEvent,
+  MHidAmicoIdentity,
+  MHidAmicoReader,
   MIncidentReport,
   MManpowerDesignations,
   MManpowerMonitoring,
@@ -67643,6 +69246,7 @@ function useBuildingLevelController() {
   schema,
   schemaApprovedBy,
   schemaApprover,
+  schemaBidPreloved,
   schemaBilling,
   schemaBillingConfiguration,
   schemaBillingItem,
@@ -67655,6 +69259,7 @@ function useBuildingLevelController() {
   schemaCategoryPreloved,
   schemaChannelPreloved,
   schemaChatPreloved,
+  schemaCreateHidAmicoIdentity,
   schemaCustomerSite,
   schemaDocumentManagement,
   schemaEntryPassSettings,
@@ -67662,6 +69267,21 @@ function useBuildingLevelController() {
   schemaFiles,
   schemaFormEntry,
   schemaGuestManagement,
+  schemaHidAmicoConfiguration,
+  schemaHidAmicoEvent,
+  schemaHidAmicoExecuteActions,
+  schemaHidAmicoIdentity,
+  schemaHidAmicoIdentityIdParams,
+  schemaHidAmicoIdentityQuery,
+  schemaHidAmicoLogQuery,
+  schemaHidAmicoNotificationParams,
+  schemaHidAmicoObjectOperation,
+  schemaHidAmicoReader,
+  schemaHidAmicoReaderIdParams,
+  schemaHidAmicoReaderListQuery,
+  schemaHidAmicoSetConfiguration,
+  schemaHidAmicoSync,
+  schemaHidAmicoUserImageParams,
   schemaIncidentReport,
   schemaMultipleDocumentManagement,
   schemaNfcPatrolLog,
@@ -67689,6 +69309,7 @@ function useBuildingLevelController() {
   schemaStatementOfAccount,
   schemaSubcategoryPreloved,
   schemaUnitBilling,
+  schemaUpdateBidPreloved,
   schemaUpdateBuildingLevel,
   schemaUpdateBulletinBoard,
   schemaUpdateBulletinVideo,
@@ -67699,6 +69320,8 @@ function useBuildingLevelController() {
   schemaUpdateEventManagement,
   schemaUpdateFormEntry,
   schemaUpdateGuestManagement,
+  schemaUpdateHidAmicoIdentity,
+  schemaUpdateHidAmicoReader,
   schemaUpdateIncidentReport,
   schemaUpdateOccurrenceBook,
   schemaUpdateOccurrenceEntry,
@@ -67744,6 +69367,8 @@ function useBuildingLevelController() {
   useAuthControllerV2,
   useAuthService,
   useAuthServiceV2,
+  useBidPrelovedController,
+  useBidPrelovedRepo,
   useBuildingController,
   useBuildingLevelController,
   useBuildingLevelRepo,
@@ -67766,6 +69391,7 @@ function useBuildingLevelController() {
   useChatController,
   useChatPrelovedController,
   useChatPrelovedRepo,
+  useChatPrelovedService,
   useChatRepo,
   useCounterModel,
   useCounterRepo,
@@ -67796,6 +69422,9 @@ function useBuildingLevelController() {
   useGuestManagementController,
   useGuestManagementRepo,
   useGuestManagementService,
+  useHidAmicoController,
+  useHidAmicoRepo,
+  useHidAmicoService,
   useHrmLabsAttendanceCtrl,
   useHrmLabsAttendanceSrvc,
   useIncidentReportController,