@7365admin1/core 3.8.0 → 3.9.0

package/dist/index.mjs

@@ -537,13 +537,13 @@ var require_logger = __commonJS({
     "use strict";
     exports.__esModule = true;
     var _utils = require_utils();
-    var logger197 = {
+    var logger200 = {
       methodMap: ["debug", "info", "warn", "error"],
       level: "info",
       // Maps a given level value to the `methodMap` indexes above.
       lookupLevel: function lookupLevel(level) {
         if (typeof level === "string") {
-          var levelMap = _utils.indexOf(logger197.methodMap, level.toLowerCase());
+          var levelMap = _utils.indexOf(logger200.methodMap, level.toLowerCase());
           if (levelMap >= 0) {
             level = levelMap;
           } else {
@@ -554,9 +554,9 @@ var require_logger = __commonJS({
       },
       // Can be overridden in the host environment
       log: function log(level) {
-        level = logger197.lookupLevel(level);
-        if (typeof console !== "undefined" && logger197.lookupLevel(logger197.level) <= level) {
-          var method = logger197.methodMap[level];
+        level = logger200.lookupLevel(level);
+        if (typeof console !== "undefined" && logger200.lookupLevel(logger200.level) <= level) {
+          var method = logger200.methodMap[level];
           if (!console[method]) {
             method = "log";
           }
@@ -567,7 +567,7 @@ var require_logger = __commonJS({
         }
       }
     };
-    exports["default"] = logger197;
+    exports["default"] = logger200;
     module.exports = exports["default"];
   }
 });
@@ -10822,7 +10822,8 @@ var metadataSchema3 = Joi9.object({
   guardPosts: Joi9.number().optional(),
   gracePeriod: Joi9.number().optional(),
   incidentCounter: Joi9.number().optional(),
-  incidentLogo: Joi9.string().optional().allow("", null)
+  incidentLogo: Joi9.string().optional().allow("", null),
+  services: Joi9.array().items(Joi9.object().unknown(true)).optional()
 });
 var updateAddressSchema = Joi9.object({
   line1: Joi9.string().min(3).allow("", null),
@@ -10852,7 +10853,8 @@ var allowedFieldsSite = [
   "metadata.guardPosts",
   "metadata.gracePeriod",
   "metadata.incidentCounter",
-  "metadata.incidentLogo"
+  "metadata.incidentLogo",
+  "metadata.services"
 ];
 var siteSchema = Joi9.object({
   name: Joi9.string().required(),
@@ -11746,9 +11748,7 @@ function useVerificationRepoV2() {
         }
       );
     } catch (error) {
-      throw new InternalServerError11(
-        "Failed to retrieve verification."
-      );
+      throw new InternalServerError11("Failed to retrieve verification.");
     }
   }
   async function updateVerificationCodeById(_id, verificationCode, expireAt, session) {
@@ -11766,9 +11766,7 @@ function useVerificationRepoV2() {
         { session }
       );
     } catch (error) {
-      throw new InternalServerError11(
-        "Failed to update verification code."
-      );
+      throw new InternalServerError11("Failed to update verification code.");
     }
   }
   return {
@@ -20787,12 +20785,20 @@ var schemaVisitorTransaction = Joi37.object({
       nric: Joi37.string().optional().allow(null, ""),
       visitorPass: Joi37.array().items(
         Joi37.object({
-          keyId: Joi37.string().hex().length(24).required()
+          keyId: Joi37.string().hex().length(24).required(),
+          receivedDate: Joi37.date().optional().allow(null),
+          status: Joi37.string().optional().allow(null, ""),
+          lastUpdate: Joi37.date().optional().allow(null),
+          remarks: Joi37.string().optional().allow(null, "")
         })
       ).optional().allow(null),
       passKeys: Joi37.array().items(
         Joi37.object({
-          keyId: Joi37.string().hex().length(24).required()
+          keyId: Joi37.string().hex().length(24).required(),
+          receivedDate: Joi37.date().optional().allow(null),
+          status: Joi37.string().optional().allow(null, ""),
+          lastUpdate: Joi37.date().optional().allow(null),
+          remarks: Joi37.string().optional().allow(null, "")
         })
       ).optional().allow(null),
       contact: Joi37.string().optional().allow(null, "")
@@ -20809,19 +20815,28 @@ var schemaVisitorTransaction = Joi37.object({
   numberOfPassengers: Joi37.number().integer().optional().allow(null, ""),
   visitorPass: Joi37.array().items(
     Joi37.object({
-      keyId: Joi37.string().hex().length(24).allow(null, "")
+      keyId: Joi37.string().hex().length(24).allow(null, ""),
+      receivedDate: Joi37.date().optional().allow(null),
+      status: Joi37.string().optional().allow(null, ""),
+      lastUpdate: Joi37.date().optional().allow(null),
+      remarks: Joi37.string().optional().allow(null, "")
     })
   ).optional().allow(null),
   passKeys: Joi37.array().items(
     Joi37.object({
-      keyId: Joi37.string().hex().length(24).allow(null, "")
+      keyId: Joi37.string().hex().length(24).allow(null, ""),
+      receivedDate: Joi37.date().optional().allow(null),
+      status: Joi37.string().optional().allow(null, ""),
+      lastUpdate: Joi37.date().optional().allow(null),
+      remarks: Joi37.string().optional().allow(null, "")
     })
   ).optional().allow(null),
   checkInRemarks: Joi37.string().optional().allow("", null),
   checkOutRemarks: Joi37.string().optional().allow("", null),
   expectedCheckIn: Joi37.string().isoDate().optional(),
   purpose: Joi37.string().optional().allow(null, ""),
-  inviterId: Joi37.any().optional().allow(null, "")
+  inviterId: Joi37.any().optional().allow(null, ""),
+  createdBy: Joi37.string().hex().length(24).optional().allow(null, "")
 });
 var schemaUpdateVisTrans = Joi37.object({
   _id: Joi37.string().hex().length(24).required(),
@@ -20941,22 +20956,22 @@ function MVisitorTransaction(value) {
       throw new Error("Invalid type for manualCheckout key.");
     }
   }
-  if (value.visitorPass && Array.isArray(value.visitorPass) && value.visitorPass.length > 0) {
+  if (Array.isArray(value.visitorPass)) {
     value.visitorPass = value.visitorPass.map((v) => {
-      if (typeof v === "string")
-        return { keyId: new ObjectId39(v) };
-      if (v?.keyId && typeof v.keyId === "string") {
-        return { keyId: new ObjectId39(v.keyId) };
+      try {
+        v.keyId = new ObjectId39(v.keyId);
+      } catch (error2) {
+        throw new Error("Invalid VisitorPass ID.");
       }
       return v;
     });
   }
-  if (value.passKeys && Array.isArray(value.passKeys) && value.passKeys.length > 0) {
+  if (Array.isArray(value.passKeys)) {
     value.passKeys = value.passKeys.map((p) => {
-      if (typeof p === "string")
-        return { keyId: new ObjectId39(p) };
-      if (p?.keyId && typeof p.keyId === "string") {
-        return { keyId: new ObjectId39(p.keyId) };
+      try {
+        p.keyId = new ObjectId39(p.keyId);
+      } catch (error2) {
+        throw new Error("Invalid PassKey ID.");
       }
       return p;
     });
@@ -21651,9 +21666,57 @@ function useVisitorTransactionRepo() {
     }
   }
   async function resendEmailInvitedResident(visitorId, updatedBy) {
-    const updatedDocument = await collection.findOne({
-      _id: await convertObjectIdUtil(visitorId)
-    });
+    const pipeline = [
+      { $match: { _id: await convertObjectIdUtil(visitorId) } },
+      {
+        $lookup: {
+          from: "buildings",
+          localField: "block",
+          foreignField: "_id",
+          as: "blockDetails"
+        }
+      },
+      {
+        $addFields: {
+          blockName: {
+            $ifNull: [
+              { $arrayElemAt: ["$blockDetails.name", 0] },
+              "Unknown"
+            ]
+          }
+        }
+      },
+      {
+        $project: {
+          blockDetails: 0
+        }
+      },
+      {
+        $lookup: {
+          from: "building-levels",
+          localField: "level",
+          foreignField: "_id",
+          as: "levelDetails"
+        }
+      },
+      {
+        $addFields: {
+          levelName: {
+            $ifNull: [
+              { $arrayElemAt: ["$levelDetails.name", 0] },
+              "Unknown"
+            ]
+          }
+        }
+      },
+      {
+        $project: {
+          levelDetails: 0
+        }
+      }
+    ];
+    const results = await collection.aggregate(pipeline).toArray();
+    const updatedDocument = results[0] || null;
     if (!updatedDocument?.email)
       return;
     if (!updatedDocument?._id)
@@ -21668,7 +21731,7 @@ function useVisitorTransactionRepo() {
       name: `${updatedDocument?.name}`,
       plateNumber: updatedDocument?.plateNumber,
       nric: updatedDocument?.nric,
-      address: `${updatedDocument?.block} ${updatedDocument?.level} ${updatedDocument?.unitName}`,
+      address: `${updatedDocument?.blockName} ${updatedDocument?.levelName} ${updatedDocument?.unitName}`,
       contactNumber: updatedDocument?.contact ? updatedDocument?.contact : "N/A",
       email: updatedDocument?.email ? updatedDocument?.email : "N/A",
       duration: updatedDocument?.duration ? updatedDocument?.duration : "N/A",
@@ -27615,7 +27678,7 @@ function useBuildingRepo() {
     try {
       await collection.createIndexes([
         { key: { name: "text" }, name: "text-index" },
-        { key: { name: 1 }, unique: true, name: "unique-name-index" },
+        // { key: { name: 1 }, unique: true, name: "unique-name-index" },
         { key: { site: 1 } },
         { key: { createdAt: 1 } },
         {
@@ -28307,11 +28370,6 @@ function useBuildingLevelRepo() {
     try {
       await collection.createIndexes([
         // Ensure name is unique per blockId
-        {
-          key: { blockId: 1, name: 1 },
-          unique: true,
-          name: "unique_name_per_blockId"
-        },
         // Other useful indexes
         { key: { site: 1 }, name: "idx_site" },
         { key: { blockId: 1 }, name: "idx_blockId" },
@@ -28572,7 +28630,11 @@ function useBuildingLevelRepo() {
       const res = await collection.bulkWrite(operations, { session });
       delCachedData();
       return {
-        insertedIds: res.insertedIds
+        insertedIds: res.insertedIds,
+        levels: levels.map((l, i) => ({
+          _id: res.insertedIds[i],
+          name: l.name
+        }))
       };
     } catch (error) {
       logger63.log({
@@ -28856,8 +28918,8 @@ function useBuildingService() {
         const name = row.name;
         const rawLevel = row.level?.toString().trim();
         const rawUnit = row.unit?.toString().trim();
-        const normalizedLevel = /^(na|n\/a)$/i.test(rawLevel) ? null : `Lvl${rawLevel}`;
-        const normalizedUnit = /^(na|n\/a)$/i.test(rawUnit) ? null : `Unit ${rawUnit}`;
+        const normalizedLevel = /^(na|n\/a)$/i.test(rawLevel) ? null : rawLevel;
+        const normalizedUnit = /^(na|n\/a)$/i.test(rawUnit) ? null : rawUnit;
         if (!blockMap.has(block)) {
           blockMap.set(block, { name, levels: [], unitsByLevel: /* @__PURE__ */ new Map() });
         }
@@ -28878,57 +28940,76 @@ function useBuildingService() {
           }
         }
       }
-      const buildingPayloads = Array.from(blockMap.entries()).map(
-        ([block, { name, levels }]) => ({
+      const buildingPayloads = [];
+      const buildingUnitPayloads = [];
+      for (const [
+        block,
+        { name, levels, unitsByLevel }
+      ] of blockMap.entries()) {
+        const buildingId = new ObjectId53();
+        const levelsPayload = (levels ?? []).map((levelName) => ({
+          blockId: buildingId.toString(),
+          site: site.toString(),
+          name: levelName,
+          status: "active" /* ACTIVE */,
+          createdAt: /* @__PURE__ */ new Date(),
+          updatedAt: null,
+          deletedAt: null
+        }));
+        let insertedLevels;
+        if (levelsPayload.length > 0) {
+          insertedLevels = await _bulkWriteLevels(levelsPayload, session);
+        }
+        const levelNameToId = /* @__PURE__ */ new Map();
+        if (insertedLevels) {
+          insertedLevels.levels.forEach((lvl) => {
+            levelNameToId.set(lvl.name, lvl._id);
+          });
+        }
+        const buildingPayload = {
+          _id: buildingId,
           site,
           block,
           name,
-          levels
-        })
-      );
-      const blockToBuildingId = /* @__PURE__ */ new Map();
-      for (const buildingPayload of buildingPayloads) {
-        const result = await _add(buildingPayload);
-        blockToBuildingId.set(buildingPayload.block, result);
-      }
-      const buildingUnitPayloads = [];
-      Array.from(blockMap.entries()).forEach(
-        ([block, { name, unitsByLevel }]) => {
-          const buildingId = blockToBuildingId.get(block);
-          Array.from(unitsByLevel.entries()).forEach(([level, units]) => {
-            units.forEach((unit) => {
-              buildingUnitPayloads.push({
-                site,
-                name: unit,
-                building: buildingId.toString(),
-                buildingName: name,
-                block,
-                level,
-                category: "",
-                status: "active" /* ACTIVE */,
-                buildingUnitFiles: [],
-                owner: "",
-                ownerName: "",
-                companyName: "",
-                companyRegistrationNumber: "",
-                billing: [],
-                unitNumber: parseInt(unit.replace("Unit ", ""), 10) || null,
-                createdAt: /* @__PURE__ */ new Date(),
-                updatedAt: "",
-                deletedAt: ""
-              });
+          levels: insertedLevels ? Object.values(insertedLevels.insertedIds) : []
+        };
+        const buildingResult = await _add(buildingPayload, session);
+        Array.from(unitsByLevel.entries()).forEach(([levelName, units]) => {
+          const levelId = levelNameToId.get(levelName);
+          units.forEach((unit) => {
+            buildingUnitPayloads.push({
+              site: new ObjectId53(site),
+              name: unit,
+              building: buildingId,
+              // already an ObjectId
+              buildingName: name,
+              block,
+              level: levelId,
+              // ✅ use ObjectId instead of string
+              category: "",
+              status: "active" /* ACTIVE */,
+              buildingUnitFiles: [],
+              owner: "",
+              ownerName: "",
+              companyName: "",
+              companyRegistrationNumber: "",
+              billing: [],
+              unitNumber: parseInt(unit.replace("Unit ", ""), 10) || null,
+              createdAt: /* @__PURE__ */ new Date(),
+              updatedAt: "",
+              deletedAt: ""
             });
           });
-        }
-      );
+        });
+      }
       await _bulkAddBuildingUnits(buildingUnitPayloads);
-      await session?.commitTransaction();
+      await session.commitTransaction();
       return { buildingPayloads, buildingUnitPayloads };
     } catch (error) {
-      await session?.abortTransaction();
+      await session.abortTransaction();
       throw error;
     } finally {
-      session?.endSession();
+      session.endSession();
     }
   }
   return {
@@ -29199,9 +29280,9 @@ function useBuildingController() {
       const lowerName = originalname.toLowerCase();
       const rowSchema = Joi46.object({
         block: Joi46.number().integer().min(0).required(),
-        level: Joi46.string().optional().allow(null, ""),
-        unit: Joi46.string().optional().allow(null, ""),
-        category: Joi46.string().trim().required(),
+        level: Joi46.alternatives().try(Joi46.string(), Joi46.number()).custom((value) => String(value)).optional().allow(null, ""),
+        unit: Joi46.alternatives().try(Joi46.string(), Joi46.number()).custom((value) => String(value)).optional().allow(null, ""),
+        category: Joi46.string().trim().optional().allow(null, ""),
         name: Joi46.string().trim().optional().allow(null, ""),
         email: Joi46.string().email().lowercase().optional().allow(null, ""),
         phoneNumber: Joi46.string().trim().optional().allow(null, "")
@@ -29215,11 +29296,9 @@ function useBuildingController() {
         { abortEarly: false, convert: true }
       );
       if (queryError) {
-        next(
-          new BadRequestError84(
-            queryError.details.map((d) => d.message).join(", ")
-          )
-        );
+        const messages = queryError.details.map((d) => d.message).join(", ");
+        logger65.log({ level: "error", message: messages });
+        next(new BadRequestError84(messages));
         return;
       }
       const { site, org } = queryValue;
@@ -29254,11 +29333,11 @@ function useBuildingController() {
       } else if (lowerName.endsWith(".csv")) {
         rows = await new Promise((resolve, reject) => {
           const parsed = [];
-          fs2.createReadStream(path5).pipe(csv()).on("headers", (headers) => {
-            headers = headers.map(
-              (h) => h.trim().replace(/\(.*\)/, "").trim()
-            );
-          }).on("data", (row) => parsed.push(row)).on("end", () => resolve(parsed)).on("error", reject);
+          fs2.createReadStream(path5).pipe(
+            csv({
+              mapHeaders: ({ header }) => header.trim().replace(/\(.*\)/, "").trim()
+            })
+          ).on("data", (row) => parsed.push(row)).on("end", () => resolve(parsed)).on("error", reject);
         });
       } else {
         next(
@@ -29276,6 +29355,7 @@ function useBuildingController() {
         if (error) {
           invalidRows.push({
             row: index + 2,
+            // +2 because header is row 1
             data: row,
             errors: error.details.map((d) => d.message)
           });
@@ -29297,6 +29377,7 @@ function useBuildingController() {
       fs2.unlink(path5, () => {
       });
     } catch (error) {
+      console.log(error);
       logger65.log({ level: "error", message: error.message });
       next(error);
     }
@@ -33271,17 +33352,13 @@ var KeyRepo = class {
     }
   }
   static async updateKeyById(keyId, key, site, session, isChild) {
-    try {
-      keyId = new ObjectId61(keyId);
-      if (site)
-        site = new ObjectId61(site);
-      if (key.updatedBy)
-        key.updatedBy = await convertObjectIdUtil(key.updatedBy);
-      if (!key.status)
-        delete key.status;
-    } catch (error) {
-      return Promise.reject("Invalid key id");
-    }
+    keyId = await convertObjectIdUtil2(keyId, "keyId");
+    if (site)
+      site = await convertObjectIdUtil2(site, "Site");
+    if (key.updatedBy)
+      key.updatedBy = await convertObjectIdUtil2(key.updatedBy, "Updated By");
+    if (!key.status)
+      delete key.status;
     try {
       key.updatedAt = /* @__PURE__ */ new Date();
       const query = { _id: keyId, ...site && { site } };
@@ -33294,6 +33371,7 @@ var KeyRepo = class {
         { session }
       );
       let setKeys = [];
+      console.log("updateKeyById result", result);
       if (result.modifiedCount > 0) {
         const updatedDocs = await this.collection().find(find).toArray();
         if (Array.isArray(updatedDocs) && updatedDocs.length > 0) {
@@ -33308,10 +33386,12 @@ var KeyRepo = class {
         await this.collectionDynamic("keys-histories").insertMany(setKeys, {
           session
         });
+      } else {
+        throw new Error("Failed Updating Keys");
       }
       return result;
     } catch (error) {
-      console.log(error);
+      throw new Error(error);
     }
   }
   static async deleteKeyById(_id, session) {
@@ -33751,51 +33831,51 @@ function useVisitorTransactionService() {
         for (let i = 0; i < value.members.length; i += chunkSize) {
           const chunk = value.members.slice(i, i + chunkSize);
           for (const member of chunk) {
-            await KeyRepo.checkPassKeyAvailability(
-              member.visitorPass,
-              member.passKeys
-            );
-            if (member.visitorPass && Array.isArray(member.visitorPass) && member.visitorPass.length > 0) {
-              for (const vp of member.visitorPass) {
-                try {
-                  const updatePayload = { status: "In Use" /* IN_USE */ };
-                  const visitorPassId = typeof vp === "string" || vp instanceof ObjectId62 ? vp : vp.keyId;
-                  if (!visitorPassId)
-                    value.visitorPass = [];
-                  await KeyRepo.updateKeyById(
-                    visitorPassId,
-                    updatePayload,
-                    value.site
-                  );
-                } catch (error) {
-                  throw error;
-                }
+            await KeyRepo.checkPassKeyAvailability(member.visitorPass, member.passKeys);
+            if (Array.isArray(member.visitorPass)) {
+              for (const item of member.visitorPass) {
+                console.log("Type of keyId:", typeof item.keyId);
+                console.log("item visitorPass", item);
+                await KeyRepo.updateKeyById(
+                  item.keyId,
+                  {
+                    status: "In Use" /* IN_USE */,
+                    updatedBy: value.createdBy
+                  },
+                  value.site,
+                  session
+                );
+                item.receivedDate = /* @__PURE__ */ new Date();
+                item.status = "Not Returned" /* NOT_RETURNED */;
+                item.lastUpdate = null;
+                item.remarks = "";
               }
             }
-            if (member.passKeys && Array.isArray(member.passKeys) && member.passKeys.length > 0) {
-              for (const pk of member.passKeys) {
-                try {
-                  const updatePayload = { status: "In Use" /* IN_USE */ };
-                  const passKeyId = typeof pk === "string" || pk instanceof ObjectId62 ? pk : pk.keyId;
-                  if (!passKeyId)
-                    value.passKeys = [];
-                  await KeyRepo.updateKeyById(
-                    passKeyId,
-                    updatePayload,
-                    value.site
-                  );
-                } catch (error) {
-                  throw error;
-                }
+            if (Array.isArray(member.passKeys)) {
+              for (const item of member.passKeys) {
+                await KeyRepo.updateKeyById(
+                  item.keyId,
+                  {
+                    status: "In Use" /* IN_USE */,
+                    updatedBy: value.createdBy
+                  },
+                  value.site,
+                  session
+                );
+                item.receivedDate = /* @__PURE__ */ new Date();
+                item.status = "Not Returned" /* NOT_RETURNED */;
+                item.lastUpdate = null;
+                item.remarks = "";
               }
             }
           }
           await Promise.all(
             chunk.map((member) => {
-              const { visitorPass, passKeys } = member;
+              const clonedMember = structuredClone(member);
+              const { visitorPass, passKeys } = clonedMember;
               return _add(
                 {
-                  ...member,
+                  ...clonedMember,
                   block,
                   level,
                   unit,
@@ -33842,38 +33922,38 @@ function useVisitorTransactionService() {
           throw new BadRequestError100("This plate number is blocklisted");
       }
       await KeyRepo.checkPassKeyAvailability(value.visitorPass, value.passKeys);
-      if (value.visitorPass && Array.isArray(value.visitorPass) && value.visitorPass.length > 0 && value.visitorPass) {
-        for (const vp of value.visitorPass) {
-          try {
-            const updatePayload = { status: "In Use" /* IN_USE */ };
-            const visitorPassId = typeof vp === "string" || vp instanceof ObjectId62 ? vp : vp.keyId;
-            if (!visitorPassId)
-              value.visitorPass = [];
-            await KeyRepo.updateKeyById(
-              visitorPassId,
-              updatePayload,
-              value.site
-            );
-          } catch (error) {
-            throw error;
-          }
+      if (Array.isArray(value.visitorPass)) {
+        for (const item of value.visitorPass) {
+          await KeyRepo.updateKeyById(
+            item.keyId,
+            {
+              status: "In Use" /* IN_USE */,
+              updatedBy: value.createdBy
+            },
+            value.site,
+            session
+          );
+          item.receivedDate = /* @__PURE__ */ new Date();
+          item.status = "Not Returned" /* NOT_RETURNED */;
+          item.lastUpdate = null;
+          item.remarks = "";
         }
       }
-      if (value.passKeys && Array.isArray(value.passKeys) && value.passKeys.length > 0) {
-        for (const pk of value.passKeys) {
-          try {
-            const updatePayload = { status: "In Use" /* IN_USE */ };
-            const passKeyId = typeof pk === "string" || pk instanceof ObjectId62 ? pk : pk.keyId;
-            if (!passKeyId)
-              value.passKeys = [];
-            await KeyRepo.updateKeyById(
-              passKeyId,
-              updatePayload,
-              value.site
-            );
-          } catch (error) {
-            throw error;
-          }
+      if (Array.isArray(value.passKeys)) {
+        for (const item of value.passKeys) {
+          await KeyRepo.updateKeyById(
+            item.keyId,
+            {
+              status: "In Use" /* IN_USE */,
+              updatedBy: value.createdBy
+            },
+            value.site,
+            session
+          );
+          item.receivedDate = /* @__PURE__ */ new Date();
+          item.status = "Not Returned" /* NOT_RETURNED */;
+          item.lastUpdate = null;
+          item.remarks = "";
         }
       }
       const result = await _add(value, session);
@@ -34156,9 +34236,9 @@ function useVisitorTransactionService() {
       value.checkIn = null;
       const payload = {
         ...value,
-        block: inviter?.block,
-        level: inviter?.level,
-        unit: inviter?.unit,
+        block: inviter?.block?.toString(),
+        level: inviter?.level?.toString(),
+        unit: inviter?.unit?.toString(),
         unitName: unit?.name,
         org: inviter?.org.toString(),
         site: inviter?.site.toString(),
@@ -34254,7 +34334,8 @@ function useVisitorTransactionController() {
   } = useVisitorTransactionRepo();
   async function add(req, res, next) {
     try {
-      const { error, value } = schemaVisitorTransaction.validate(req.body, {
+      const { companyName, firstName, lastName, ...restData } = req.body;
+      const { error, value } = schemaVisitorTransaction.validate(restData, {
         abortEarly: false
       });
       if (error) {
@@ -34486,8 +34567,11 @@ function useVisitorTransactionController() {
       return;
     } catch (error2) {
       logger81.log({ level: "error", message: error2.message });
-      next(error2);
-      return;
+      if (error2?.message) {
+        next(new BadRequestError101(error2?.message));
+      } else {
+        next(error2);
+      }
     }
   }
   async function changeVisitorTransactionKeysById(req, res, next) {
@@ -66391,10 +66475,6 @@ function useChatPrelovedRepo() {
   return { add, updateById, deleteById };
 }
 
-// src/controllers/chat-preloved.controller.ts
-import { BadRequestError as BadRequestError222, logger as logger192 } from "@7365admin1/node-server-utils";
-import Joi143 from "joi";
-
 // src/services/chat-preloved.service.ts
 import { BadRequestError as BadRequestError221, InternalServerError as InternalServerError81, useAtlas as useAtlas126 } from "@7365admin1/node-server-utils";
 
@@ -66725,6 +66805,8 @@ function useChatPrelovedService() {
 }
 
 // src/controllers/chat-preloved.controller.ts
+import { BadRequestError as BadRequestError222, logger as logger192 } from "@7365admin1/node-server-utils";
+import Joi143 from "joi";
 function useChatPrelovedController() {
   const { add: _add } = useChatPrelovedService();
   const { updateById: _updateById, deleteById: _deleteById } = useChatPrelovedRepo();
@@ -66904,58 +66986,200 @@ function useChannelPrelovedController() {
   return { add, getChannel, getChatLists, getChannelMessages };
 }
 
-// src/models/online-forms-v2.model.ts
+// src/models/bid-preloved.model.ts
 import Joi145 from "joi";
 import { ObjectId as ObjectId149 } from "mongodb";
+var BidType = /* @__PURE__ */ ((BidType2) => {
+  BidType2["BID"] = "bid";
+  BidType2["RESERVE"] = "reserve";
+  return BidType2;
+})(BidType || {});
+var BidStatus = /* @__PURE__ */ ((BidStatus3) => {
+  BidStatus3["PENDING"] = "pending";
+  BidStatus3["ACCEPTED"] = "accepted";
+  BidStatus3["RESERVED"] = "reserved";
+  BidStatus3["CANCELLED"] = "cancelled";
+  return BidStatus3;
+})(BidStatus || {});
+var schemaBidPreloved = Joi145.object({
+  type: Joi145.string().valid(...Object.values(BidType)).required(),
+  postId: Joi145.string().hex().length(24).required(),
+  price: Joi145.when("type", {
+    is: "bid" /* BID */,
+    then: Joi145.number().required(),
+    otherwise: Joi145.number().optional().allow(null)
+  }),
+  message: Joi145.string().optional().allow("", null),
+  buyerId: Joi145.string().hex().length(24).optional().allow("", null),
+  status: Joi145.string().valid(...Object.values(BidStatus)).optional().default("pending" /* PENDING */)
+});
+var schemaUpdateBidPreloved = Joi145.object({
+  status: Joi145.string().valid(...Object.values(BidStatus)).required()
+});
+function MBidPreloved(value) {
+  const { error } = schemaBidPreloved.validate(value);
+  if (error)
+    throw new Error(error.details[0].message);
+  if (value.postId && typeof value.postId === "string")
+    value.postId = new ObjectId149(value.postId);
+  if (value.buyerId && typeof value.buyerId === "string")
+    value.buyerId = new ObjectId149(value.buyerId);
+  return {
+    _id: new ObjectId149(),
+    price: value.price ?? null,
+    message: value.message ?? "",
+    status: value.status ?? "pending" /* PENDING */,
+    type: value.type,
+    postId: value.postId,
+    buyerId: value.buyerId ?? null,
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+    updatedAt: null
+  };
+}
+
+// src/repositories/bid-preloved.repo.ts
+import {
+  InternalServerError as InternalServerError82,
+  NotFoundError as NotFoundError61,
+  useAtlas as useAtlas127
+} from "@7365admin1/node-server-utils";
+import { ObjectId as ObjectId150 } from "mongodb";
+function useBidPrelovedRepo() {
+  const db = useAtlas127.getDb();
+  if (!db)
+    throw new InternalServerError82("Unable to connect to server.");
+  const collection = db.collection("bid-preloved");
+  async function add(value, session) {
+    try {
+      const doc = MBidPreloved(value);
+      const res = await collection.insertOne(doc, { session });
+      return res.insertedId;
+    } catch (error) {
+      throw error;
+    }
+  }
+  async function updateStatus(_id, status) {
+    const objectId2 = typeof _id === "string" ? new ObjectId150(_id) : _id;
+    const existing = await collection.findOne({ _id: objectId2 });
+    if (!existing)
+      throw new NotFoundError61("Bid not found.");
+    const res = await collection.updateOne(
+      { _id: objectId2 },
+      { $set: { status, updatedAt: (/* @__PURE__ */ new Date()).toISOString() } }
+    );
+    if (res.modifiedCount === 0)
+      throw new InternalServerError82("Unable to update bid.");
+    return "Bid updated successfully.";
+  }
+  return { add, updateStatus };
+}
+
+// src/controllers/bid-preloved.controller.ts
+import { BadRequestError as BadRequestError224, logger as logger194 } from "@7365admin1/node-server-utils";
+import Joi146 from "joi";
+function useBidPrelovedController() {
+  const { add: _add, updateStatus: _updateStatus } = useBidPrelovedRepo();
+  async function add(req, res, next) {
+    const { error, value } = schemaBidPreloved.validate(req.body, {
+      abortEarly: false
+    });
+    if (error) {
+      const messages = error.details.map((d) => d.message).join(", ");
+      logger194.log({ level: "error", message: messages });
+      next(new BadRequestError224(messages));
+      return;
+    }
+    try {
+      const data = await _add(value);
+      res.status(201).json(data);
+    } catch (error2) {
+      logger194.log({ level: "error", message: error2.message });
+      next(error2);
+    }
+  }
+  async function updateStatus(req, res, next) {
+    const paramsSchema = Joi146.object({
+      id: Joi146.string().hex().length(24).required()
+    });
+    const { error: paramError, value: params } = paramsSchema.validate(
+      req.params
+    );
+    if (paramError) {
+      logger194.log({ level: "error", message: paramError.message });
+      next(new BadRequestError224(paramError.message));
+      return;
+    }
+    const { error: bodyError, value: body } = schemaUpdateBidPreloved.validate(
+      req.body
+    );
+    if (bodyError) {
+      logger194.log({ level: "error", message: bodyError.message });
+      next(new BadRequestError224(bodyError.message));
+      return;
+    }
+    try {
+      const data = await _updateStatus(params.id, body.status);
+      res.status(200).json(data);
+    } catch (error) {
+      logger194.log({ level: "error", message: error.message });
+      next(error);
+    }
+  }
+  return { add, updateStatus };
+}
+
+// src/models/online-forms-v2.model.ts
+import Joi147 from "joi";
+import { ObjectId as ObjectId151 } from "mongodb";
 var FormEntryStatus = /* @__PURE__ */ ((FormEntryStatus2) => {
   FormEntryStatus2["ACTIVE"] = "active";
   FormEntryStatus2["INACTIVE"] = "inactive";
   FormEntryStatus2["DELETED"] = "deleted";
   return FormEntryStatus2;
 })(FormEntryStatus || {});
-var schemaFormEntry = Joi145.object({
-  _id: Joi145.string().hex().optional().allow("", null),
-  formType: Joi145.string().required(),
-  block: Joi145.string().optional().allow(null, ""),
-  level: Joi145.string().optional().allow(null, ""),
-  unit: Joi145.string().optional().allow(null, ""),
-  name: Joi145.string().optional().allow(null, ""),
-  phoneNumber: Joi145.string().optional().allow(null, ""),
-  createdBy: Joi145.string().required(),
-  fields: Joi145.object().pattern(
-    Joi145.string(),
-    Joi145.alternatives().try(
-      Joi145.string(),
-      Joi145.number(),
-      Joi145.boolean(),
-      Joi145.valid(null)
+var schemaFormEntry = Joi147.object({
+  _id: Joi147.string().hex().optional().allow("", null),
+  formType: Joi147.string().required(),
+  block: Joi147.string().optional().allow(null, ""),
+  level: Joi147.string().optional().allow(null, ""),
+  unit: Joi147.string().optional().allow(null, ""),
+  name: Joi147.string().optional().allow(null, ""),
+  phoneNumber: Joi147.string().optional().allow(null, ""),
+  createdBy: Joi147.string().required(),
+  fields: Joi147.object().pattern(
+    Joi147.string(),
+    Joi147.alternatives().try(
+      Joi147.string(),
+      Joi147.number(),
+      Joi147.boolean(),
+      Joi147.valid(null)
     )
   ).required(),
-  status: Joi145.string().optional().allow("", null),
-  org: Joi145.string().hex().optional().allow("", null),
-  site: Joi145.string().hex().optional().allow("", null),
-  createdAt: Joi145.date().optional().allow("", null),
-  updatedAt: Joi145.date().optional().allow("", null),
-  deletedAt: Joi145.date().optional().allow("", null)
+  status: Joi147.string().optional().allow("", null),
+  org: Joi147.string().hex().optional().allow("", null),
+  site: Joi147.string().hex().optional().allow("", null),
+  createdAt: Joi147.date().optional().allow("", null),
+  updatedAt: Joi147.date().optional().allow("", null),
+  deletedAt: Joi147.date().optional().allow("", null)
 });
-var schemaUpdateFormEntry = Joi145.object({
-  _id: Joi145.string().hex().required(),
-  formType: Joi145.string().optional().allow("", null),
-  block: Joi145.string().optional().allow(null, ""),
-  level: Joi145.string().optional().allow(null, ""),
-  unit: Joi145.string().optional().allow(null, ""),
-  fields: Joi145.object().pattern(
-    Joi145.string(),
-    Joi145.alternatives().try(
-      Joi145.string(),
-      Joi145.number(),
-      Joi145.boolean(),
-      Joi145.valid(null)
+var schemaUpdateFormEntry = Joi147.object({
+  _id: Joi147.string().hex().required(),
+  formType: Joi147.string().optional().allow("", null),
+  block: Joi147.string().optional().allow(null, ""),
+  level: Joi147.string().optional().allow(null, ""),
+  unit: Joi147.string().optional().allow(null, ""),
+  fields: Joi147.object().pattern(
+    Joi147.string(),
+    Joi147.alternatives().try(
+      Joi147.string(),
+      Joi147.number(),
+      Joi147.boolean(),
+      Joi147.valid(null)
     )
   ).optional(),
-  status: Joi145.string().optional().allow("", null),
-  updatedAt: Joi145.date().optional().allow("", null),
-  deletedAt: Joi145.date().optional().allow("", null)
+  status: Joi147.string().optional().allow("", null),
+  updatedAt: Joi147.date().optional().allow("", null),
+  deletedAt: Joi147.date().optional().allow("", null)
 });
 function MFormEntry(value) {
   const { error } = schemaFormEntry.validate(value);
@@ -66964,21 +67188,21 @@ function MFormEntry(value) {
   }
   if (value._id && typeof value._id === "string") {
     try {
-      value._id = new ObjectId149(value._id);
+      value._id = new ObjectId151(value._id);
     } catch {
       throw new Error("Invalid ID.");
     }
   }
   if (value.org && typeof value.org === "string") {
     try {
-      value.org = new ObjectId149(value.org);
+      value.org = new ObjectId151(value.org);
     } catch {
       throw new Error("Invalid org ID.");
     }
   }
   if (value.site && typeof value.site === "string") {
     try {
-      value.site = new ObjectId149(value.site);
+      value.site = new ObjectId151(value.site);
     } catch {
       throw new Error("Invalid site ID.");
     }
@@ -67000,55 +67224,55 @@ function MFormEntry(value) {
     deletedAt: value.deletedAt ?? null
   };
 }
-var residentFormEntry = Joi145.object({
-  _id: Joi145.string().hex().optional().allow("", null),
-  typeOfForm: Joi145.string().optional().allow("", null),
-  unitNumber: Joi145.string().optional().allow(null, ""),
-  fields: Joi145.object().pattern(
-    Joi145.string(),
-    Joi145.alternatives().try(
-      Joi145.string(),
-      Joi145.number(),
-      Joi145.boolean(),
-      Joi145.valid(null)
+var residentFormEntry = Joi147.object({
+  _id: Joi147.string().hex().optional().allow("", null),
+  typeOfForm: Joi147.string().optional().allow("", null),
+  unitNumber: Joi147.string().optional().allow(null, ""),
+  fields: Joi147.object().pattern(
+    Joi147.string(),
+    Joi147.alternatives().try(
+      Joi147.string(),
+      Joi147.number(),
+      Joi147.boolean(),
+      Joi147.valid(null)
     )
   ).optional().allow(null, ""),
-  status: Joi145.string().optional().allow("", null),
-  org: Joi145.string().hex().optional().allow("", null),
-  site: Joi145.string().hex().optional().allow("", null),
-  userId: Joi145.string().hex().optional().allow("", null),
-  createdAt: Joi145.date().optional().allow("", null),
-  updatedAt: Joi145.date().optional().allow("", null),
-  deletedAt: Joi145.date().optional().allow("", null),
-  remarks: Joi145.string().optional().allow("", null),
-  managementValues: Joi145.object().pattern(
-    Joi145.string(),
-    Joi145.alternatives().try(
-      Joi145.string(),
-      Joi145.number(),
-      Joi145.boolean(),
-      Joi145.valid(null)
+  status: Joi147.string().optional().allow("", null),
+  org: Joi147.string().hex().optional().allow("", null),
+  site: Joi147.string().hex().optional().allow("", null),
+  userId: Joi147.string().hex().optional().allow("", null),
+  createdAt: Joi147.date().optional().allow("", null),
+  updatedAt: Joi147.date().optional().allow("", null),
+  deletedAt: Joi147.date().optional().allow("", null),
+  remarks: Joi147.string().optional().allow("", null),
+  managementValues: Joi147.object().pattern(
+    Joi147.string(),
+    Joi147.alternatives().try(
+      Joi147.string(),
+      Joi147.number(),
+      Joi147.boolean(),
+      Joi147.valid(null)
     )
   ).optional().allow(null, "")
 });
 
 // src/repositories/online-forms-v2.repository.ts
 import {
-  BadRequestError as BadRequestError224,
-  InternalServerError as InternalServerError82,
-  logger as logger194,
+  BadRequestError as BadRequestError225,
+  InternalServerError as InternalServerError83,
+  logger as logger195,
   makeCacheKey as makeCacheKey65,
-  NotFoundError as NotFoundError61,
+  NotFoundError as NotFoundError62,
   paginate as paginate64,
-  useAtlas as useAtlas127,
+  useAtlas as useAtlas128,
   useCache as useCache69
 } from "@7365admin1/node-server-utils";
-import { ObjectId as ObjectId150 } from "mongodb";
+import { ObjectId as ObjectId152 } from "mongodb";
 var online_forms_namespace_collection = "online-forms";
 function useFormEntryRepo() {
-  const db = useAtlas127.getDb();
+  const db = useAtlas128.getDb();
   if (!db) {
-    throw new InternalServerError82("Unable to connect to server.");
+    throw new InternalServerError83("Unable to connect to server.");
   }
   const collection = db.collection(online_forms_namespace_collection);
   const { delNamespace, getCache, setCache } = useCache69(
@@ -67060,7 +67284,7 @@ function useFormEntryRepo() {
         name: "text"
       });
     } catch (error) {
-      throw new InternalServerError82(
+      throw new InternalServerError83(
         "Failed to create text index on online form."
       );
     }
@@ -67070,11 +67294,11 @@ function useFormEntryRepo() {
       value = MFormEntry(value);
       const res = await collection.insertOne(value, { session });
       delNamespace().then(() => {
-        logger194.info(
+        logger195.info(
           `Cache cleared for namespace: ${online_forms_namespace_collection}`
         );
       }).catch((err) => {
-        logger194.error(
+        logger195.error(
           `Failed to clear cache for namespace: ${online_forms_namespace_collection}`,
           err
         );
@@ -67083,7 +67307,7 @@ function useFormEntryRepo() {
     } catch (error) {
       const isDuplicated = error.message.includes("duplicate");
       if (isDuplicated) {
-        throw new BadRequestError224("Online Form already exists.");
+        throw new BadRequestError225("Online Form already exists.");
       }
       throw error;
     }
@@ -67099,8 +67323,8 @@ function useFormEntryRepo() {
   }) {
     page = page > 0 ? page - 1 : 0;
     sort = Object.keys(sort).length > 0 ? sort : { _id: -1 };
-    site = new ObjectId150(site);
-    org = new ObjectId150(org);
+    site = new ObjectId152(site);
+    org = new ObjectId152(org);
     const cacheOptions = {
       page,
       limit,
@@ -67126,7 +67350,7 @@ function useFormEntryRepo() {
     );
     const cachedData = await getCache(cacheKey);
     if (cachedData) {
-      logger194.info(`Cache hit for key: ${cacheKey}`);
+      logger195.info(`Cache hit for key: ${cacheKey}`);
       return cachedData;
     }
     try {
@@ -67155,9 +67379,9 @@ function useFormEntryRepo() {
       const length = await collection.countDocuments(query);
       const data = paginate64(items, page, limit, length);
       setCache(cacheKey, data, 15 * 60).then(() => {
-        logger194.info(`Cache set for key: ${cacheKey}`);
+        logger195.info(`Cache set for key: ${cacheKey}`);
       }).catch((err) => {
-        logger194.error(`Failed to set cache for key: ${cacheKey}`, err);
+        logger195.error(`Failed to set cache for key: ${cacheKey}`, err);
       });
       return data;
     } catch (error) {
@@ -67168,24 +67392,24 @@ function useFormEntryRepo() {
     const cacheKey = makeCacheKey65(online_forms_namespace_collection, { _id });
     const cachedData = await getCache(cacheKey);
     if (cachedData) {
-      logger194.info(`Cache hit for key: ${cacheKey}`);
+      logger195.info(`Cache hit for key: ${cacheKey}`);
       return cachedData;
     }
     try {
-      _id = new ObjectId150(_id);
+      _id = new ObjectId152(_id);
     } catch (error) {
-      throw new BadRequestError224("Invalid online form ID format.");
+      throw new BadRequestError225("Invalid online form ID format.");
     }
     const query = { _id, status: { $ne: "deleted" } };
     try {
       const [data] = await collection.aggregate([{ $match: query }]).toArray();
       if (!data) {
-        throw new NotFoundError61("Document not found.");
+        throw new NotFoundError62("Document not found.");
       }
       setCache(cacheKey, data, 15 * 60).then(() => {
-        logger194.info(`Cache set for key: ${cacheKey}`);
+        logger195.info(`Cache set for key: ${cacheKey}`);
       }).catch((err) => {
-        logger194.error(`Failed to set cache for key: ${cacheKey}`, err);
+        logger195.error(`Failed to set cache for key: ${cacheKey}`, err);
       });
       return data;
     } catch (error) {
@@ -67194,9 +67418,9 @@ function useFormEntryRepo() {
   }
   async function updateFormEntryById(_id, value) {
     try {
-      _id = new ObjectId150(_id);
+      _id = new ObjectId152(_id);
     } catch (error) {
-      throw new BadRequestError224("Invalid online form ID format.");
+      throw new BadRequestError225("Invalid online form ID format.");
     }
     try {
       const updateValue = {
@@ -67205,14 +67429,14 @@ function useFormEntryRepo() {
       };
       const res = await collection.updateOne({ _id }, { $set: updateValue });
       if (res.modifiedCount === 0) {
-        throw new InternalServerError82("Unable to update online form.");
+        throw new InternalServerError83("Unable to update online form.");
       }
       delNamespace().then(() => {
-        logger194.info(
+        logger195.info(
           `Cache cleared for namespace: ${online_forms_namespace_collection}`
         );
       }).catch((err) => {
-        logger194.error(
+        logger195.error(
           `Failed to clear cache for namespace: ${online_forms_namespace_collection}`,
           err
         );
@@ -67224,9 +67448,9 @@ function useFormEntryRepo() {
   }
   async function deleteOnlineFormById(_id, session) {
     try {
-      _id = new ObjectId150(_id);
+      _id = new ObjectId152(_id);
     } catch (error) {
-      throw new BadRequestError224("Invalid online form ID format.");
+      throw new BadRequestError225("Invalid online form ID format.");
     }
     try {
       const updateValue = {
@@ -67240,12 +67464,12 @@ function useFormEntryRepo() {
         { session }
       );
       if (res.modifiedCount === 0) {
-        throw new InternalServerError82("Unable to delete online form.");
+        throw new InternalServerError83("Unable to delete online form.");
       }
       delNamespace().then(() => {
-        logger194.info(`Cache cleared for namespace: ${online_forms_namespace_collection}`);
+        logger195.info(`Cache cleared for namespace: ${online_forms_namespace_collection}`);
       }).catch((err) => {
-        logger194.error(
+        logger195.error(
           `Failed to clear cache for namespace: ${online_forms_namespace_collection}`,
           err
         );
@@ -67257,16 +67481,16 @@ function useFormEntryRepo() {
   }
   async function addResidentForm(value, session) {
     try {
-      value.site = new ObjectId150(value.site);
-      value.org = new ObjectId150(value.org);
-      value.userId = new ObjectId150(value.userId);
+      value.site = new ObjectId152(value.site);
+      value.org = new ObjectId152(value.org);
+      value.userId = new ObjectId152(value.userId);
       const res = await collection.insertOne(value, { session });
       delNamespace().then(() => {
-        logger194.info(
+        logger195.info(
           `Cache cleared for namespace: ${online_forms_namespace_collection}`
         );
       }).catch((err) => {
-        logger194.error(
+        logger195.error(
           `Failed to clear cache for namespace: ${online_forms_namespace_collection}`,
           err
         );
@@ -67275,16 +67499,16 @@ function useFormEntryRepo() {
     } catch (error) {
       const isDuplicated = error.message.includes("duplicate");
       if (isDuplicated) {
-        throw new BadRequestError224("Online Form already exists.");
+        throw new BadRequestError225("Online Form already exists.");
       }
       throw error;
     }
   }
   async function residentForm({ userId, site, org }) {
     try {
-      const user = new ObjectId150(userId);
-      const siteId = new ObjectId150(site);
-      const orgId = new ObjectId150(org);
+      const user = new ObjectId152(userId);
+      const siteId = new ObjectId152(site);
+      const orgId = new ObjectId152(org);
       const res = await collection.aggregate([
         {
           $match: {
@@ -67312,8 +67536,8 @@ function useFormEntryRepo() {
 }
 
 // src/controllers/online-forms-v2.controller.ts
-import { BadRequestError as BadRequestError225, logger as logger195 } from "@7365admin1/node-server-utils";
-import Joi146 from "joi";
+import { BadRequestError as BadRequestError226, logger as logger196 } from "@7365admin1/node-server-utils";
+import Joi148 from "joi";
 import ExcelJS3 from "exceljs";
 import fs6 from "fs";
 function useFormEntryController() {
@@ -67339,14 +67563,14 @@ function useFormEntryController() {
   async function uploadFormEntrys(req, res, next) {
     try {
       if (!req.file) {
-        next(new BadRequestError225("Excel file is required."));
+        next(new BadRequestError226("Excel file is required."));
         return;
       }
       const workbook = new ExcelJS3.Workbook();
       await workbook.xlsx.readFile(req.file.path);
       const worksheet = workbook.worksheets[0];
       if (!worksheet) {
-        next(new BadRequestError225("No worksheet found in uploaded Excel file."));
+        next(new BadRequestError226("No worksheet found in uploaded Excel file."));
         return;
       }
       const headerRow = worksheet.getRow(1);
@@ -67374,8 +67598,8 @@ function useFormEntryController() {
       });
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        logger195.log({ level: "error", message: messages });
-        next(new BadRequestError225(messages));
+        logger196.log({ level: "error", message: messages });
+        next(new BadRequestError226(messages));
         return;
       }
       const result = await _add(value);
@@ -67383,25 +67607,25 @@ function useFormEntryController() {
       fs6.unlink(req.file.path, () => {
       });
     } catch (error) {
-      logger195.log({ level: "error", message: error.message });
+      logger196.log({ level: "error", message: error.message });
       next(error);
     }
   }
   async function getAll(req, res, next) {
     try {
-      const schema2 = Joi146.object({
-        search: Joi146.string().optional().allow("", null),
-        page: Joi146.number().integer().min(1).allow("", null).default(1),
-        limit: Joi146.number().integer().min(1).max(100).allow("", null).default(10),
-        status: Joi146.string().optional().allow(null, ""),
-        org: Joi146.string().hex().optional().allow("", null),
-        site: Joi146.string().hex().optional().allow("", null)
+      const schema2 = Joi148.object({
+        search: Joi148.string().optional().allow("", null),
+        page: Joi148.number().integer().min(1).allow("", null).default(1),
+        limit: Joi148.number().integer().min(1).max(100).allow("", null).default(10),
+        status: Joi148.string().optional().allow(null, ""),
+        org: Joi148.string().hex().optional().allow("", null),
+        site: Joi148.string().hex().optional().allow("", null)
       });
       const { error, value } = schema2.validate(req.query);
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        logger195.log({ level: "error", message: messages });
-        next(new BadRequestError225(messages));
+        logger196.log({ level: "error", message: messages });
+        next(new BadRequestError226(messages));
         return;
       }
       const { search, page, limit, status, org, site } = value;
@@ -67409,21 +67633,21 @@ function useFormEntryController() {
       res.json(data);
       return;
     } catch (error) {
-      logger195.log({ level: "error", message: error.message });
+      logger196.log({ level: "error", message: error.message });
       next(error);
       return;
     }
   }
   async function getFormEntryById(req, res, next) {
     try {
-      const schema2 = Joi146.object({
-        _id: Joi146.string().hex().length(24).required()
+      const schema2 = Joi148.object({
+        _id: Joi148.string().hex().length(24).required()
       });
       const { error, value } = schema2.validate({ _id: req.params.id });
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        logger195.log({ level: "error", message: messages });
-        next(new BadRequestError225(messages));
+        logger196.log({ level: "error", message: messages });
+        next(new BadRequestError226(messages));
         return;
       }
       const { _id } = value;
@@ -67431,7 +67655,7 @@ function useFormEntryController() {
       res.json(data);
       return;
     } catch (error) {
-      logger195.log({ level: "error", message: error.message });
+      logger196.log({ level: "error", message: error.message });
       next(error);
       return;
     }
@@ -67444,8 +67668,8 @@ function useFormEntryController() {
       });
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        logger195.log({ level: "error", message: messages });
-        next(new BadRequestError225(messages));
+        logger196.log({ level: "error", message: messages });
+        next(new BadRequestError226(messages));
         return;
       }
       const { _id, ...rest } = value;
@@ -67453,26 +67677,26 @@ function useFormEntryController() {
       res.json({ message: "Successfully updated online form." });
       return;
     } catch (error) {
-      logger195.log({ level: "error", message: error.message });
+      logger196.log({ level: "error", message: error.message });
       next(error);
       return;
     }
   }
   async function deleteFormEntryById(req, res, next) {
     try {
-      const validation = Joi146.string().hex().required();
+      const validation = Joi148.string().hex().required();
       const _id = req.params.id;
       const { error } = validation.validate(_id);
       if (error) {
-        logger195.log({ level: "error", message: error.message });
-        next(new BadRequestError225(error.message));
+        logger196.log({ level: "error", message: error.message });
+        next(new BadRequestError226(error.message));
         return;
       }
       await _deleteOnlineFormById(_id);
       res.json({ message: "Successfully deleted online form." });
       return;
     } catch (error) {
-      logger195.log({ level: "error", message: error.message });
+      logger196.log({ level: "error", message: error.message });
       next(error);
       return;
     }
@@ -67489,8 +67713,8 @@ function useFormEntryController() {
     });
     if (error) {
       const messages = error.details.map((d) => d.message).join(", ");
-      logger195.log({ level: "error", message: messages });
-      next(new BadRequestError225(messages));
+      logger196.log({ level: "error", message: messages });
+      next(new BadRequestError226(messages));
       return;
     }
     try {
@@ -67498,7 +67722,7 @@ function useFormEntryController() {
       res.status(201).json({ message: data });
       return;
     } catch (error2) {
-      logger195.log({ level: "error", message: error2.message });
+      logger196.log({ level: "error", message: error2.message });
       next(error2);
       return;
     }
@@ -67510,8 +67734,8 @@ function useFormEntryController() {
     });
     if (error) {
       const messages = error.details.map((d) => d.message).join(", ");
-      logger195.log({ level: "error", message: messages });
-      next(new BadRequestError225(messages));
+      logger196.log({ level: "error", message: messages });
+      next(new BadRequestError226(messages));
       return;
     }
     try {
@@ -67519,7 +67743,7 @@ function useFormEntryController() {
       res.status(201).json({ message: data });
       return;
     } catch (error2) {
-      logger195.log({ level: "error", message: error2.message });
+      logger196.log({ level: "error", message: error2.message });
       next(error2);
       return;
     }
@@ -67527,22 +67751,22 @@ function useFormEntryController() {
   async function residentForm(req, res, next) {
     try {
       const { site, userId, org } = req.query;
-      const residentFormPayload = Joi146.object({
-        org: Joi146.string().hex().required(),
-        site: Joi146.string().hex().required(),
-        userId: Joi146.string().hex().required()
+      const residentFormPayload = Joi148.object({
+        org: Joi148.string().hex().required(),
+        site: Joi148.string().hex().required(),
+        userId: Joi148.string().hex().required()
       });
       const { error } = residentFormPayload.validate({ site, userId, org }, { abortEarly: true });
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        logger195.log({ level: "error", message: messages });
-        next(new BadRequestError225(messages));
+        logger196.log({ level: "error", message: messages });
+        next(new BadRequestError226(messages));
         return;
       }
       const result = await _residentForm({ userId, site, org });
       res.json(result);
     } catch (error) {
-      logger195.log({ level: "error", message: error.message });
+      logger196.log({ level: "error", message: error.message });
       next(error);
       return;
     }
@@ -67560,11 +67784,11 @@ function useFormEntryController() {
 }
 
 // src/services/building-level.service.ts
-import { useAtlas as useAtlas128 } from "@7365admin1/node-server-utils";
+import { useAtlas as useAtlas129 } from "@7365admin1/node-server-utils";
 function useBuildingLevelService() {
   const { add: _add, updateLevelById: _updateLevelById } = useBuildingLevelRepo();
   async function add(value) {
-    const session = useAtlas128.getClient()?.startSession();
+    const session = useAtlas129.getClient()?.startSession();
     try {
       session?.startTransaction();
       await _add(value, session);
@@ -67578,7 +67802,7 @@ function useBuildingLevelService() {
     }
   }
   async function updateLevelById(_id, value) {
-    const session = useAtlas128.getClient()?.startSession();
+    const session = useAtlas129.getClient()?.startSession();
     try {
       session?.startTransaction();
       await _updateLevelById(_id, value, session);
@@ -67598,8 +67822,8 @@ function useBuildingLevelService() {
 }
 
 // src/controllers/building-level.controller.ts
-import { BadRequestError as BadRequestError226, logger as logger196 } from "@7365admin1/node-server-utils";
-import Joi147 from "joi";
+import { BadRequestError as BadRequestError227, logger as logger197 } from "@7365admin1/node-server-utils";
+import Joi149 from "joi";
 function useBuildingLevelController() {
   const { add: _add, updateLevelById: _updateLevelById } = useBuildingLevelService();
   const {
@@ -67616,8 +67840,8 @@ function useBuildingLevelController() {
       });
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        logger196.log({ level: "error", message: messages });
-        next(new BadRequestError226(messages));
+        logger197.log({ level: "error", message: messages });
+        next(new BadRequestError227(messages));
         return;
       }
       const result = await _add(value);
@@ -67628,20 +67852,20 @@ function useBuildingLevelController() {
   }
   async function getAll(req, res, next) {
     try {
-      const validation = Joi147.object({
-        page: Joi147.number().min(1).optional().default(1),
-        limit: Joi147.number().min(1).optional().default(20),
-        search: Joi147.string().optional().allow("", null),
-        site: Joi147.string().hex().length(24).optional().allow("", null),
-        status: Joi147.string().valid(...Object.values(BuildingLevelStatus)).default("active" /* ACTIVE */)
+      const validation = Joi149.object({
+        page: Joi149.number().min(1).optional().default(1),
+        limit: Joi149.number().min(1).optional().default(20),
+        search: Joi149.string().optional().allow("", null),
+        site: Joi149.string().hex().length(24).optional().allow("", null),
+        status: Joi149.string().valid(...Object.values(BuildingLevelStatus)).default("active" /* ACTIVE */)
       });
       const { error, value } = validation.validate(req.query, {
         abortEarly: false
       });
       if (error) {
         const messages = error.details.map((d) => d.message);
-        logger196.log({ level: "error", message: messages.join(", ") });
-        next(new BadRequestError226(messages.join(", ")));
+        logger197.log({ level: "error", message: messages.join(", ") });
+        next(new BadRequestError227(messages.join(", ")));
         return;
       }
       const { page, limit, status, site, search } = value;
@@ -67660,14 +67884,14 @@ function useBuildingLevelController() {
   }
   async function getById(req, res, next) {
     try {
-      const schema2 = Joi147.object({
-        id: Joi147.string().hex().length(24).required()
+      const schema2 = Joi149.object({
+        id: Joi149.string().hex().length(24).required()
       });
       const { error, value } = schema2.validate({ id: req.params.id });
       if (error) {
         const messages = error.details.map((d) => d.message);
-        logger196.log({ level: "error", message: messages.join(", ") });
-        next(new BadRequestError226(messages.join(", ")));
+        logger197.log({ level: "error", message: messages.join(", ") });
+        next(new BadRequestError227(messages.join(", ")));
         return;
       }
       const { id } = value;
@@ -67686,8 +67910,8 @@ function useBuildingLevelController() {
       });
       if (error) {
         const messages = error.details.map((d) => d.message);
-        logger196.log({ level: "error", message: messages.join(", ") });
-        next(new BadRequestError226(messages.join(", ")));
+        logger197.log({ level: "error", message: messages.join(", ") });
+        next(new BadRequestError227(messages.join(", ")));
         return;
       }
       const { _id, ...rest } = value;
@@ -67699,14 +67923,14 @@ function useBuildingLevelController() {
   }
   async function deleteById(req, res, next) {
     try {
-      const schema2 = Joi147.object({
-        id: Joi147.string().hex().required()
+      const schema2 = Joi149.object({
+        id: Joi149.string().hex().required()
       });
       const { error, value } = schema2.validate({ id: req.params.id });
       if (error) {
         const messages = error.details.map((d) => d.message);
-        logger196.log({ level: "error", message: messages.join(", ") });
-        next(new BadRequestError226(messages.join(", ")));
+        logger197.log({ level: "error", message: messages.join(", ") });
+        next(new BadRequestError227(messages.join(", ")));
         return;
       }
       const { id } = value;
@@ -67719,19 +67943,19 @@ function useBuildingLevelController() {
   }
   async function batchUpdateByIds(req, res, next) {
     try {
-      const schema2 = Joi147.array().items(
-        Joi147.object({
-          _id: Joi147.string().hex().length(24).required(),
-          value: Joi147.object({
-            name: Joi147.string().optional().allow("", null)
+      const schema2 = Joi149.array().items(
+        Joi149.object({
+          _id: Joi149.string().hex().length(24).required(),
+          value: Joi149.object({
+            name: Joi149.string().optional().allow("", null)
           }).required()
         })
       );
       const { error, value } = schema2.validate(req.body);
       if (error) {
         const messages = error.details.map((d) => d.message);
-        logger196.log({ level: "error", message: messages.join(", ") });
-        next(new BadRequestError226(messages.join(", ")));
+        logger197.log({ level: "error", message: messages.join(", ") });
+        next(new BadRequestError227(messages.join(", ")));
         return;
       }
       const updates = value.map((item) => ({
@@ -67746,9 +67970,9 @@ function useBuildingLevelController() {
   }
   async function getBuildingLevelList(req, res, next) {
     try {
-      const schema2 = Joi147.object({
-        site: Joi147.string().hex().length(24).required(),
-        block: Joi147.string().hex().length(24).required()
+      const schema2 = Joi149.object({
+        site: Joi149.string().hex().length(24).required(),
+        block: Joi149.string().hex().length(24).required()
       });
       const { error, value } = schema2.validate({
         site: req.params.siteId,
@@ -67756,8 +67980,8 @@ function useBuildingLevelController() {
       });
       if (error) {
         const messages = error.details.map((d) => d.message).join(", ");
-        logger196.log({ level: "error", message: messages });
-        next(new BadRequestError226(messages));
+        logger197.log({ level: "error", message: messages });
+        next(new BadRequestError227(messages));
         return;
       }
       const { site, block } = value;
@@ -67778,10 +68002,1363 @@ function useBuildingLevelController() {
     getBuildingLevelList
   };
 }
+
+// src/models/hid-amico.model.ts
+import { BadRequestError as BadRequestError228, logger as logger198 } from "@7365admin1/node-server-utils";
+import { ObjectId as ObjectId153 } from "mongodb";
+import Joi150 from "joi";
+function canReadObjectId(value) {
+  if (value instanceof ObjectId153)
+    return true;
+  if (typeof value === "string")
+    return ObjectId153.isValid(value);
+  if (value && typeof value === "object") {
+    const candidate = value;
+    if (canReadObjectId(candidate._id) || canReadObjectId(candidate.$oid))
+      return true;
+    if (typeof candidate.toHexString === "function" && ObjectId153.isValid(candidate.toHexString()))
+      return true;
+    if (typeof candidate.toString === "function") {
+      const text = candidate.toString();
+      return text !== "[object Object]" && ObjectId153.isValid(text);
+    }
+  }
+  return false;
+}
+function toObjectId23(value, label = "ID") {
+  if (value instanceof ObjectId153)
+    return value;
+  if (typeof value === "string" && ObjectId153.isValid(value))
+    return new ObjectId153(value);
+  if (value && typeof value === "object") {
+    const candidate = value;
+    if (candidate._id)
+      return toObjectId23(candidate._id, label);
+    if (candidate.$oid)
+      return toObjectId23(candidate.$oid, label);
+    if (typeof candidate.toHexString === "function")
+      return toObjectId23(candidate.toHexString(), label);
+    if (typeof candidate.toString === "function") {
+      const text = candidate.toString();
+      if (text !== "[object Object]")
+        return toObjectId23(text, label);
+    }
+  }
+  throw new BadRequestError228(`Invalid ${label} format`);
+}
+var objectIdSchema2 = Joi150.custom((value, helpers) => canReadObjectId(value) ? value : helpers.error("any.invalid"), "ObjectId").messages({
+  "any.invalid": "{{#label}} must be a valid ObjectId"
+});
+var schemaHidAmicoReader = Joi150.object({
+  _id: objectIdSchema2.optional(),
+  site: objectIdSchema2.required(),
+  name: Joi150.string().trim().required(),
+  baseUrl: Joi150.string().uri({ scheme: ["http", "https"] }).required(),
+  username: Joi150.string().trim().required(),
+  password: Joi150.string().required(),
+  location: Joi150.string().allow(null, "").optional(),
+  deviceId: Joi150.string().allow(null, "").optional(),
+  monitorPath: Joi150.string().allow(null, "").optional(),
+  enabled: Joi150.boolean().optional(),
+  status: Joi150.string().valid("active", "inactive", "deleted", "offline").optional(),
+  lastSeenAt: Joi150.date().optional(),
+  lastSyncAt: Joi150.date().optional(),
+  lastSyncStatus: Joi150.string().valid("idle", "running", "completed", "failed").optional(),
+  lastSyncMessage: Joi150.string().allow(null, "").optional(),
+  createdAt: Joi150.date().optional(),
+  updatedAt: Joi150.date().optional(),
+  deletedAt: Joi150.date().optional()
+});
+var schemaUpdateHidAmicoReader = Joi150.object({
+  site: objectIdSchema2.optional(),
+  name: Joi150.string().trim().optional(),
+  baseUrl: Joi150.string().uri({ scheme: ["http", "https"] }).optional(),
+  username: Joi150.string().trim().optional(),
+  password: Joi150.string().allow(null, "").optional(),
+  location: Joi150.string().allow(null, "").optional(),
+  deviceId: Joi150.string().allow(null, "").optional(),
+  monitorPath: Joi150.string().allow(null, "").optional(),
+  enabled: Joi150.boolean().optional(),
+  status: Joi150.string().valid("active", "inactive", "deleted", "offline").optional(),
+  lastSeenAt: Joi150.date().optional(),
+  lastSyncAt: Joi150.date().optional(),
+  lastSyncStatus: Joi150.string().valid("idle", "running", "completed", "failed").optional(),
+  lastSyncMessage: Joi150.string().allow(null, "").optional(),
+  deletedAt: Joi150.date().optional()
+});
+var schemaHidAmicoEvent = Joi150.object({
+  _id: objectIdSchema2.optional(),
+  reader: objectIdSchema2.required(),
+  site: objectIdSchema2.optional(),
+  type: Joi150.string().required(),
+  payload: Joi150.object().unknown(true).required(),
+  status: Joi150.string().valid("received", "processed", "failed").optional(),
+  createdAt: Joi150.date().optional()
+});
+var schemaHidAmicoIdentity = Joi150.object({
+  _id: objectIdSchema2.optional(),
+  reader: objectIdSchema2.required(),
+  site: objectIdSchema2.required(),
+  hidUserId: Joi150.alternatives(Joi150.string(), Joi150.number()).optional().allow(null, ""),
+  registration: Joi150.string().optional().allow(null, ""),
+  cardNo: Joi150.string().optional().allow(null, ""),
+  person: objectIdSchema2.optional().allow(null, ""),
+  user: objectIdSchema2.optional().allow(null, ""),
+  member: objectIdSchema2.optional().allow(null, ""),
+  visitor: objectIdSchema2.optional().allow(null, ""),
+  type: Joi150.string().valid("resident", "staff", "contractor", "visitor", "admin", "unknown").required(),
+  status: Joi150.string().valid("active", "inactive", "deleted").optional(),
+  metadata: Joi150.object().unknown(true).optional(),
+  createdAt: Joi150.date().optional(),
+  updatedAt: Joi150.date().optional(),
+  deletedAt: Joi150.date().optional()
+}).or("hidUserId", "registration", "cardNo");
+var schemaCreateHidAmicoIdentity = Joi150.object({
+  site: objectIdSchema2.optional(),
+  hidUserId: Joi150.alternatives(Joi150.string(), Joi150.number()).optional().allow(null, ""),
+  registration: Joi150.string().optional().allow(null, ""),
+  cardNo: Joi150.string().optional().allow(null, ""),
+  person: objectIdSchema2.optional().allow(null, ""),
+  user: objectIdSchema2.optional().allow(null, ""),
+  member: objectIdSchema2.optional().allow(null, ""),
+  visitor: objectIdSchema2.optional().allow(null, ""),
+  type: Joi150.string().valid("resident", "staff", "contractor", "visitor", "admin", "unknown").required(),
+  status: Joi150.string().valid("active", "inactive", "deleted").optional(),
+  metadata: Joi150.object().unknown(true).optional()
+}).or("hidUserId", "registration", "cardNo");
+var schemaUpdateHidAmicoIdentity = Joi150.object({
+  hidUserId: Joi150.alternatives(Joi150.string(), Joi150.number()).optional().allow(null, ""),
+  registration: Joi150.string().optional().allow(null, ""),
+  cardNo: Joi150.string().optional().allow(null, ""),
+  person: objectIdSchema2.optional().allow(null, ""),
+  user: objectIdSchema2.optional().allow(null, ""),
+  member: objectIdSchema2.optional().allow(null, ""),
+  visitor: objectIdSchema2.optional().allow(null, ""),
+  type: Joi150.string().valid("resident", "staff", "contractor", "visitor", "admin", "unknown").optional(),
+  status: Joi150.string().valid("active", "inactive", "deleted").optional(),
+  metadata: Joi150.object().unknown(true).optional(),
+  deletedAt: Joi150.date().optional()
+});
+var schemaHidAmicoReaderIdParams = Joi150.object({
+  readerId: Joi150.string().hex().length(24).required()
+});
+var schemaHidAmicoUserImageParams = Joi150.object({
+  readerId: Joi150.string().hex().length(24).required(),
+  hidUserId: Joi150.alternatives().try(Joi150.string(), Joi150.number()).required()
+});
+var schemaHidAmicoIdentityIdParams = Joi150.object({
+  identityId: Joi150.string().hex().length(24).required()
+});
+var schemaHidAmicoReaderListQuery = Joi150.object({
+  site: Joi150.string().hex().length(24).optional(),
+  page: Joi150.number().min(1).optional(),
+  limit: Joi150.number().min(1).optional()
+});
+var schemaHidAmicoLogQuery = Joi150.object({
+  page: Joi150.number().min(1).optional(),
+  limit: Joi150.number().min(1).optional(),
+  type: Joi150.string().optional()
+});
+var schemaHidAmicoIdentityQuery = Joi150.object({
+  page: Joi150.number().min(1).optional(),
+  limit: Joi150.number().min(1).optional(),
+  type: Joi150.string().valid("resident", "staff", "contractor", "visitor", "admin", "unknown").optional(),
+  status: Joi150.string().valid("active", "inactive", "deleted").optional(),
+  search: Joi150.string().allow("").optional()
+});
+var schemaHidAmicoSync = Joi150.object({
+  objects: Joi150.array().items(
+    Joi150.object({
+      object: Joi150.string().required(),
+      values: Joi150.array().items(Joi150.object().unknown(true)).required()
+    }).unknown(true)
+  ).optional(),
+  users: Joi150.array().items(Joi150.object().unknown(true)).optional(),
+  cards: Joi150.array().items(Joi150.object().unknown(true)).optional(),
+  qrcodes: Joi150.array().items(Joi150.object().unknown(true)).optional(),
+  pins: Joi150.array().items(Joi150.object().unknown(true)).optional()
+}).unknown(true);
+var schemaHidAmicoExecuteActions = Joi150.object({
+  actions: Joi150.array().items(Joi150.object().unknown(true)).min(1).required()
+}).unknown(true);
+var schemaHidAmicoConfiguration = Joi150.object().pattern(Joi150.string(), Joi150.array().items(Joi150.string())).min(1).unknown(true);
+var schemaHidAmicoSetConfiguration = Joi150.object().unknown(true);
+var schemaHidAmicoObjectOperation = Joi150.object({
+  operation: Joi150.string().valid("load", "create", "modify", "destroy").required(),
+  object: Joi150.string().required(),
+  values: Joi150.alternatives().try(
+    Joi150.array().items(Joi150.object().unknown(true)),
+    Joi150.object().unknown(true)
+  ).optional(),
+  where: Joi150.object().unknown(true).optional(),
+  fields: Joi150.array().items(Joi150.string()).optional(),
+  order: Joi150.array().items(Joi150.string()).optional(),
+  limit: Joi150.number().integer().min(1).optional(),
+  offset: Joi150.number().integer().min(0).optional()
+}).unknown(true);
+var schemaHidAmicoNotificationParams = Joi150.object({
+  readerId: Joi150.string().hex().length(24).required(),
+  type: Joi150.string().valid(
+    "dao",
+    "template",
+    "user_image",
+    "card",
+    "pin",
+    "password",
+    "operation_mode",
+    "door",
+    "secbox",
+    "access_photo",
+    "new_user_identified",
+    "push_result"
+  ).required()
+});
+function MHidAmicoReader(value) {
+  const { error } = schemaHidAmicoReader.validate(value);
+  if (error) {
+    logger198.info(`HID Amico reader: ${error.message}`);
+    throw new BadRequestError228(error.message);
+  }
+  return {
+    _id: value._id ? toObjectId23(value._id, "reader ID") : new ObjectId153(),
+    site: toObjectId23(value.site, "site ID"),
+    name: value.name,
+    baseUrl: value.baseUrl.replace(/\/+$/, ""),
+    username: value.username,
+    password: value.password,
+    location: value.location ?? "",
+    deviceId: value.deviceId ?? "",
+    monitorPath: value.monitorPath ?? "api/notifications",
+    enabled: value.enabled ?? true,
+    status: value.status ?? "active",
+    lastSeenAt: value.lastSeenAt ?? "",
+    lastSyncAt: value.lastSyncAt ?? "",
+    lastSyncStatus: value.lastSyncStatus ?? "idle",
+    lastSyncMessage: value.lastSyncMessage ?? "",
+    createdAt: value.createdAt ?? /* @__PURE__ */ new Date(),
+    updatedAt: value.updatedAt ?? /* @__PURE__ */ new Date(),
+    deletedAt: value.deletedAt ?? ""
+  };
+}
+function MHidAmicoEvent(value) {
+  const { error } = schemaHidAmicoEvent.validate(value);
+  if (error) {
+    logger198.info(`HID Amico event: ${error.message}`);
+    throw new BadRequestError228(error.message);
+  }
+  return {
+    _id: value._id ? toObjectId23(value._id, "event ID") : new ObjectId153(),
+    reader: toObjectId23(value.reader, "reader ID"),
+    site: value.site ? toObjectId23(value.site, "site ID") : void 0,
+    type: value.type,
+    payload: value.payload,
+    status: value.status ?? "received",
+    createdAt: value.createdAt ?? /* @__PURE__ */ new Date()
+  };
+}
+function optionalObjectId(value) {
+  return value ? toObjectId23(value) : void 0;
+}
+function MHidAmicoIdentity(value) {
+  const { error } = schemaHidAmicoIdentity.validate(value);
+  if (error) {
+    logger198.info(`HID Amico identity: ${error.message}`);
+    throw new BadRequestError228(error.message);
+  }
+  return {
+    _id: value._id ? toObjectId23(value._id, "identity ID") : new ObjectId153(),
+    reader: toObjectId23(value.reader, "reader ID"),
+    site: toObjectId23(value.site, "site ID"),
+    hidUserId: value.hidUserId === void 0 || value.hidUserId === null ? "" : String(value.hidUserId),
+    registration: value.registration ?? "",
+    cardNo: value.cardNo ?? "",
+    person: optionalObjectId(value.person),
+    user: optionalObjectId(value.user),
+    member: optionalObjectId(value.member),
+    visitor: optionalObjectId(value.visitor),
+    type: value.type,
+    status: value.status ?? "active",
+    metadata: value.metadata ?? {},
+    createdAt: value.createdAt ?? /* @__PURE__ */ new Date(),
+    updatedAt: value.updatedAt ?? /* @__PURE__ */ new Date(),
+    deletedAt: value.deletedAt ?? ""
+  };
+}
+
+// src/repositories/hid-amico.repo.ts
+import {
+  BadRequestError as BadRequestError229,
+  InternalServerError as InternalServerError84,
+  logger as logger199,
+  paginate as paginate65,
+  useAtlas as useAtlas130
+} from "@7365admin1/node-server-utils";
+import { ObjectId as ObjectId154 } from "mongodb";
+function useHidAmicoRepo() {
+  function db() {
+    const instance = useAtlas130.getDb();
+    if (!instance) {
+      throw new InternalServerError84("Unable to connect to server.");
+    }
+    return instance;
+  }
+  function readers() {
+    return db().collection("hid-amico-readers");
+  }
+  function events() {
+    return db().collection("hid-amico-events");
+  }
+  function identities() {
+    return db().collection("hid-amico-identities");
+  }
+  function toId(id, label = "ID") {
+    try {
+      return new ObjectId154(id);
+    } catch {
+      throw new BadRequestError229(`Invalid ${label} format`);
+    }
+  }
+  function hideSecret(reader) {
+    if (!reader) {
+      return reader;
+    }
+    const { password, ...safeReader } = reader;
+    const status = safeReader.lastSyncStatus === "failed" && safeReader.status === "active" ? "offline" : safeReader.status;
+    return {
+      ...safeReader,
+      status,
+      passwordSet: Boolean(password)
+    };
+  }
+  function escapeRegex(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  }
+  function buildIdentityKeyQuery(value) {
+    const or = [];
+    if (value.hidUserId !== void 0 && value.hidUserId !== null && String(value.hidUserId) !== "") {
+      or.push({ hidUserId: String(value.hidUserId) });
+    }
+    if (value.registration) {
+      or.push({ registration: value.registration });
+    }
+    if (value.cardNo) {
+      or.push({ cardNo: value.cardNo });
+    }
+    return or;
+  }
+  async function createIndexes() {
+    try {
+      await Promise.all([
+        readers().createIndex({ site: 1, status: 1 }),
+        readers().createIndex(
+          { site: 1, baseUrl: 1 },
+          { unique: true, partialFilterExpression: { status: "active" } }
+        ),
+        readers().createIndex({ deviceId: 1 }),
+        events().createIndex({ reader: 1, createdAt: -1 }),
+        events().createIndex({ site: 1, createdAt: -1 }),
+        events().createIndex({ type: 1, createdAt: -1 }),
+        identities().createIndex({ reader: 1, status: 1 }),
+        identities().createIndex({ site: 1, status: 1 }),
+        identities().createIndex({ reader: 1, hidUserId: 1 }),
+        identities().createIndex({ reader: 1, registration: 1 }),
+        identities().createIndex({ reader: 1, cardNo: 1 })
+      ]);
+      return "HID Amico indexes created.";
+    } catch (error) {
+      logger199.error(error.message);
+      throw new Error("Failed to create HID Amico indexes.");
+    }
+  }
+  async function add(value, session) {
+    try {
+      const doc = MHidAmicoReader(value);
+      await readers().insertOne(doc, { session });
+      return hideSecret(doc);
+    } catch (error) {
+      if (error.message?.includes("duplicate")) {
+        throw new BadRequestError229("HID Amico reader already exists for this site and URL.");
+      }
+      throw error;
+    }
+  }
+  async function list(value) {
+    const page = value.page ? value.page - 1 : 0;
+    const limit = value.limit || 10;
+    const query = { status: { $ne: "deleted" } };
+    if (value.site) {
+      query.site = toId(value.site, "site ID");
+    }
+    const items = await readers().find(query).sort({ createdAt: -1 }).skip(page * limit).limit(limit).toArray();
+    const total = await readers().countDocuments(query);
+    return paginate65(items.map(hideSecret), page, limit, total);
+  }
+  async function getById(id, options = {}) {
+    const _id = toId(id, "reader ID");
+    const reader = await readers().findOne(
+      { _id, status: { $ne: "deleted" } }
+    );
+    if (!reader) {
+      throw new BadRequestError229("HID Amico reader not found.");
+    }
+    return options.includePassword ? reader : hideSecret(reader);
+  }
+  async function updateById(id, value, session) {
+    const { error } = schemaUpdateHidAmicoReader.validate(value);
+    if (error) {
+      throw new BadRequestError229(error.message);
+    }
+    const _id = toId(id, "reader ID");
+    const payload = {
+      ...value,
+      updatedAt: /* @__PURE__ */ new Date()
+    };
+    if (payload.site) {
+      payload.site = toId(payload.site, "site ID");
+    }
+    if (payload.baseUrl) {
+      payload.baseUrl = payload.baseUrl.replace(/\/+$/, "");
+    }
+    const updated = await readers().findOneAndUpdate(
+      { _id, status: { $ne: "deleted" } },
+      { $set: payload },
+      { returnDocument: "after", session }
+    );
+    if (!updated) {
+      throw new BadRequestError229("HID Amico reader not found.");
+    }
+    return hideSecret(updated);
+  }
+  async function markDeleted(id, session) {
+    return updateById(
+      id,
+      {
+        status: "deleted",
+        enabled: false,
+        deletedAt: /* @__PURE__ */ new Date()
+      },
+      session
+    );
+  }
+  async function addEvent(value, session) {
+    const event = MHidAmicoEvent(value);
+    await events().insertOne(event, { session });
+    return event;
+  }
+  async function listEvents(value) {
+    const page = value.page ? value.page - 1 : 0;
+    const limit = value.limit || 20;
+    const query = { reader: toId(value.reader, "reader ID") };
+    if (value.type) {
+      query.type = value.type;
+    }
+    const items = await events().find(query).sort({ createdAt: -1 }).skip(page * limit).limit(limit).toArray();
+    const total = await events().countDocuments(query);
+    return paginate65(items, page, limit, total);
+  }
+  async function addIdentity(value, session) {
+    try {
+      const identity = MHidAmicoIdentity(value);
+      const existing = await findExistingIdentity({
+        reader: identity.reader,
+        hidUserId: identity.hidUserId,
+        registration: identity.registration,
+        cardNo: identity.cardNo
+      });
+      if (existing) {
+        throw new BadRequestError229("HID Amico identity already exists for this reader.");
+      }
+      await identities().insertOne(identity, { session });
+      return identity;
+    } catch (error) {
+      if (error instanceof BadRequestError229) {
+        throw error;
+      }
+      if (error.message?.includes("duplicate")) {
+        throw new BadRequestError229("HID Amico identity already exists for this reader.");
+      }
+      throw error;
+    }
+  }
+  async function listIdentities(value) {
+    const page = value.page ? value.page - 1 : 0;
+    const limit = value.limit || 20;
+    const query = {
+      reader: toId(value.reader, "reader ID"),
+      status: value.status || { $ne: "deleted" }
+    };
+    if (value.type) {
+      query.type = value.type;
+    }
+    if (value.search) {
+      const search = escapeRegex(value.search);
+      query.$or = [
+        { hidUserId: { $regex: search, $options: "i" } },
+        { registration: { $regex: search, $options: "i" } },
+        { cardNo: { $regex: search, $options: "i" } }
+      ];
+    }
+    const items = await identities().find(query).sort({ createdAt: -1 }).skip(page * limit).limit(limit).toArray();
+    const total = await identities().countDocuments(query);
+    return paginate65(items, page, limit, total);
+  }
+  async function updateIdentity(id, value, session) {
+    const { error } = schemaUpdateHidAmicoIdentity.validate(value);
+    if (error) {
+      throw new BadRequestError229(error.message);
+    }
+    const payload = {
+      ...value,
+      updatedAt: /* @__PURE__ */ new Date()
+    };
+    const unsetPayload = {};
+    ["person", "user", "member", "visitor"].forEach((field) => {
+      if (payload[field]) {
+        payload[field] = toId(payload[field], `${field} ID`);
+      }
+      if (payload[field] === "" || payload[field] === null) {
+        delete payload[field];
+        unsetPayload[field] = "";
+      }
+    });
+    if (payload.hidUserId !== void 0 && payload.hidUserId !== null) {
+      payload.hidUserId = String(payload.hidUserId);
+    }
+    const updated = await identities().findOneAndUpdate(
+      { _id: toId(id, "identity ID"), status: { $ne: "deleted" } },
+      {
+        $set: payload,
+        ...Object.keys(unsetPayload).length ? { $unset: unsetPayload } : {}
+      },
+      { returnDocument: "after", session }
+    );
+    if (!updated) {
+      throw new BadRequestError229("HID Amico identity not found.");
+    }
+    return updated;
+  }
+  async function deleteIdentity(id, session) {
+    return updateIdentity(
+      id,
+      {
+        status: "deleted",
+        deletedAt: /* @__PURE__ */ new Date()
+      },
+      session
+    );
+  }
+  async function findIdentity(value) {
+    const or = buildIdentityKeyQuery(value);
+    if (!or.length) {
+      return null;
+    }
+    return identities().findOne({
+      reader: toId(value.reader, "reader ID"),
+      status: "active",
+      $or: or
+    });
+  }
+  async function findExistingIdentity(value) {
+    const or = buildIdentityKeyQuery(value);
+    if (!or.length) {
+      return null;
+    }
+    return identities().findOne({
+      reader: toId(value.reader, "reader ID"),
+      status: { $ne: "deleted" },
+      $or: or
+    });
+  }
+  return {
+    createIndexes,
+    add,
+    list,
+    getById,
+    updateById,
+    markDeleted,
+    addEvent,
+    listEvents,
+    addIdentity,
+    listIdentities,
+    updateIdentity,
+    deleteIdentity,
+    findIdentity,
+    findExistingIdentity
+  };
+}
+
+// src/services/hid-amico.service.ts
+import crypto5 from "crypto";
+import axios4 from "axios";
+import { BadRequestError as BadRequestError230 } from "@7365admin1/node-server-utils";
+var PASSWORD_PREFIX = "v1";
+function getSecretKey() {
+  const secret = process.env.HID_AMICO_SECRET || process.env.ACCESS_TOKEN_SECRET || "iservice365-hid-amico";
+  return crypto5.createHash("sha256").update(secret).digest();
+}
+function encryptSecret(value) {
+  const iv = crypto5.randomBytes(12);
+  const cipher = crypto5.createCipheriv("aes-256-gcm", getSecretKey(), iv);
+  const encrypted = Buffer.concat([cipher.update(value, "utf8"), cipher.final()]);
+  const tag = cipher.getAuthTag();
+  return [PASSWORD_PREFIX, iv.toString("hex"), tag.toString("hex"), encrypted.toString("hex")].join(":");
+}
+function decryptSecret(value) {
+  if (!value?.startsWith(`${PASSWORD_PREFIX}:`)) {
+    return value;
+  }
+  const [, ivHex, tagHex, encryptedHex] = value.split(":");
+  const decipher = crypto5.createDecipheriv("aes-256-gcm", getSecretKey(), Buffer.from(ivHex, "hex"));
+  decipher.setAuthTag(Buffer.from(tagHex, "hex"));
+  return Buffer.concat([
+    decipher.update(Buffer.from(encryptedHex, "hex")),
+    decipher.final()
+  ]).toString("utf8");
+}
+function formatHidResponse(data) {
+  if (data === void 0 || data === null) {
+    return "";
+  }
+  const text = typeof data === "string" ? data : JSON.stringify(data);
+  return text.length > 300 ? `${text.slice(0, 300)}...` : text;
+}
+function sanitizeHidPath(path5) {
+  return path5.replace(/([?&]session=)[^&]+/i, "$1<redacted>");
+}
+function toHidRequestError(error, path5) {
+  if (axios4.isAxiosError(error)) {
+    const status = error.response?.status;
+    const payload = formatHidResponse(error.response?.data);
+    const detail = [
+      `HID Amico request failed: ${sanitizeHidPath(path5)}`,
+      status ? `status ${status}` : "",
+      payload ? `response ${payload}` : error.message
+    ].filter(Boolean).join(" - ");
+    return new BadRequestError230(detail);
+  }
+  return error;
+}
+var HidAmicoClient = class {
+  constructor(reader) {
+    this.reader = reader;
+    this.session = "";
+    this.http = axios4.create({
+      baseURL: reader.baseUrl.replace(/\/+$/, ""),
+      timeout: 15e3,
+      headers: { "Content-Type": "application/json" }
+    });
+  }
+  async post(path5, body) {
+    try {
+      return await this.http.post(path5, body);
+    } catch (error) {
+      throw toHidRequestError(error, path5);
+    }
+  }
+  async get(path5, responseType = "json") {
+    try {
+      return await this.http.get(path5, { responseType });
+    } catch (error) {
+      throw toHidRequestError(error, path5);
+    }
+  }
+  url(path5) {
+    const normalizedPath = path5.startsWith("/") ? path5 : `/${path5}`;
+    if (!this.session) {
+      return normalizedPath;
+    }
+    const separator = normalizedPath.includes("?") ? "&" : "?";
+    return `${normalizedPath}${separator}session=${encodeURIComponent(this.session)}`;
+  }
+  async login() {
+    const res = await this.post("/hidlogin.fcgi", {
+      login: this.reader.username,
+      password: decryptSecret(this.reader.password)
+    });
+    if (!res.data?.session) {
+      throw new BadRequestError230("HID Amico login failed: missing session.");
+    }
+    this.session = res.data.session;
+    return this.session;
+  }
+  async sessionIsValid() {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/session_is_valid.fcgi"), {});
+    return Boolean(res.data?.session_is_valid ?? res.data?.valid ?? true);
+  }
+  async getUserImage(hidUserId) {
+    if (!this.session) {
+      await this.login();
+    }
+    const path5 = this.url(`/user_get_image.fcgi?user_id=${encodeURIComponent(String(hidUserId))}`);
+    const res = await this.get(path5, "arraybuffer");
+    const contentType = String(res.headers?.["content-type"] || "");
+    const buffer = Buffer.from(res.data);
+    if (contentType.includes("application/json")) {
+      const payload = JSON.parse(buffer.toString("utf8"));
+      const image = payload.image || payload.photo || payload.data?.image || payload.data?.photo;
+      if (!image) {
+        throw new BadRequestError230("HID Amico user image response did not include an image.");
+      }
+      return {
+        contentType: payload.contentType || payload.mimeType || "image/jpeg",
+        base64: String(image).replace(/^data:image\/[a-zA-Z0-9.+-]+;base64,/, "")
+      };
+    }
+    return {
+      contentType: contentType || "image/jpeg",
+      base64: buffer.toString("base64")
+    };
+  }
+  async logout() {
+    if (!this.session) {
+      return;
+    }
+    const logoutUrl = this.url("/logout.fcgi");
+    try {
+      this.session = "";
+      await this.post(logoutUrl, {});
+    } catch {
+      this.session = "";
+    }
+  }
+  async createObjects(batch) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/create_objects.fcgi"), {
+      object: batch.object,
+      values: batch.values
+    });
+    return res.data;
+  }
+  async loadObjects(query) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/load_objects.fcgi"), query);
+    return res.data;
+  }
+  async modifyObjects(payload) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/modify_objects.fcgi"), payload);
+    return res.data;
+  }
+  async destroyObjects(payload) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/destroy_objects.fcgi"), payload);
+    return res.data;
+  }
+  async doorState() {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/door_state.fcgi"), {});
+    return res.data;
+  }
+  async executeActions(actions) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/execute_actions.fcgi"), { actions });
+    return res.data;
+  }
+  async getConfiguration(payload) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/get_configuration.fcgi"), payload);
+    return res.data;
+  }
+  async setConfiguration(payload) {
+    if (!this.session) {
+      await this.login();
+    }
+    const res = await this.post(this.url("/set_configuration.fcgi"), payload);
+    return res.data;
+  }
+};
+function normalizeBatches(payload) {
+  if (Array.isArray(payload?.objects)) {
+    return payload.objects.filter((batch) => batch?.object && Array.isArray(batch?.values));
+  }
+  const batches = [];
+  const mappings = [
+    ["users", "users"],
+    ["cards", "cards"],
+    ["qrcodes", "qrcodes"],
+    ["pins", "pins"]
+  ];
+  mappings.forEach(([key, object]) => {
+    if (Array.isArray(payload?.[key]) && payload[key].length) {
+      batches.push({ object, values: payload[key] });
+    }
+  });
+  return batches;
+}
+function firstValue(payload, keys) {
+  for (const key of keys) {
+    const value = payload?.[key];
+    if (value !== void 0 && value !== null && value !== "") {
+      return value;
+    }
+  }
+  return void 0;
+}
+function extractIdentityKeys(payload) {
+  const nested = payload?.user || payload?.person || payload?.data || {};
+  const merged = { ...payload, ...nested };
+  return {
+    hidUserId: firstValue(merged, ["hidUserId", "hid_user_id", "user_id", "userId", "id", "user"]),
+    registration: firstValue(merged, ["registration", "register", "employeeNo", "staffNo", "memberNo"]),
+    cardNo: firstValue(merged, ["cardNo", "card_no", "card", "cardNumber", "value"])
+  };
+}
+function useHidAmicoService() {
+  const repo = useHidAmicoRepo();
+  async function getActiveReader(id) {
+    const reader = await repo.getById(id, { includePassword: true });
+    if (reader.enabled === false || reader.status === "inactive" || reader.status === "deleted") {
+      throw new BadRequestError230("HID Amico reader is not active.");
+    }
+    return reader;
+  }
+  async function createReader(value) {
+    return repo.add({
+      ...value,
+      baseUrl: value.baseUrl.replace(/\/+$/, ""),
+      password: encryptSecret(value.password)
+    });
+  }
+  async function updateReader(id, value) {
+    const payload = { ...value };
+    if (payload.password) {
+      payload.password = encryptSecret(payload.password);
+    } else {
+      delete payload.password;
+    }
+    return repo.updateById(id, payload);
+  }
+  async function listReaders(value) {
+    return repo.list(value);
+  }
+  async function deleteReader(id) {
+    return repo.markDeleted(id);
+  }
+  async function testReader(id) {
+    const reader = await repo.getById(id, { includePassword: true });
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      const valid = await client.sessionIsValid();
+      await repo.updateById(id, { lastSeenAt: /* @__PURE__ */ new Date(), lastSyncMessage: "Connection test succeeded." });
+      await repo.addEvent({ reader: id, site: reader.site, type: "test", payload: { valid } });
+      return { valid, message: "HID Amico connection test succeeded." };
+    } catch (error) {
+      await repo.updateById(id, {
+        status: "offline",
+        lastSyncAt: /* @__PURE__ */ new Date(),
+        lastSyncStatus: "failed",
+        lastSyncMessage: error.message
+      });
+      await repo.addEvent({ reader: id, site: reader.site, type: "test_failed", payload: { message: error.message } });
+      throw error;
+    } finally {
+      await client.logout();
+    }
+  }
+  async function syncReader(id, payload) {
+    const reader = await getActiveReader(id);
+    const batches = normalizeBatches(payload);
+    const client = new HidAmicoClient(reader);
+    const results = [];
+    await repo.updateById(id, { lastSyncStatus: "running", lastSyncMessage: "Sync started." });
+    try {
+      await client.login();
+      for (const batch of batches) {
+        const result = await client.createObjects(batch);
+        results.push({ object: batch.object, count: batch.values.length, result });
+      }
+      const message = batches.length ? `Synced ${batches.length} HID object batch(es).` : "HID reader session verified. No sync payload was supplied.";
+      await repo.updateById(id, {
+        lastSeenAt: /* @__PURE__ */ new Date(),
+        lastSyncAt: /* @__PURE__ */ new Date(),
+        lastSyncStatus: "completed",
+        lastSyncMessage: message
+      });
+      await repo.addEvent({ reader: id, site: reader.site, type: "sync", payload: { message, results } });
+      return { message, results };
+    } catch (error) {
+      await repo.updateById(id, {
+        status: "offline",
+        lastSyncAt: /* @__PURE__ */ new Date(),
+        lastSyncStatus: "failed",
+        lastSyncMessage: error.message
+      });
+      await repo.addEvent({ reader: id, site: reader.site, type: "sync_failed", payload: { message: error.message } });
+      throw error;
+    } finally {
+      await client.logout();
+    }
+  }
+  async function receiveNotification(readerId, type, payload) {
+    const reader = await repo.getById(readerId);
+    const identityKeys = extractIdentityKeys(payload);
+    const identity = await repo.findIdentity({
+      reader: readerId,
+      ...identityKeys
+    });
+    const enrichedPayload = identity ? {
+      ...payload,
+      identity: {
+        _id: identity._id,
+        type: identity.type,
+        hidUserId: identity.hidUserId,
+        registration: identity.registration,
+        cardNo: identity.cardNo,
+        person: identity.person,
+        user: identity.user,
+        member: identity.member,
+        visitor: identity.visitor
+      }
+    } : {
+      ...payload,
+      identity: null,
+      identityLookup: identityKeys
+    };
+    await repo.updateById(readerId, { lastSeenAt: /* @__PURE__ */ new Date() });
+    return repo.addEvent({
+      reader: readerId,
+      site: reader.site,
+      type,
+      payload: enrichedPayload,
+      status: identity ? "processed" : "received"
+    });
+  }
+  async function listLogs(value) {
+    return repo.listEvents(value);
+  }
+  async function listIdentities(value) {
+    return repo.listIdentities(value);
+  }
+  async function createIdentity(readerId, value) {
+    const reader = await repo.getById(readerId);
+    return repo.addIdentity({
+      ...value,
+      reader: readerId,
+      site: value.site || reader?.site?.toString()
+    });
+  }
+  async function updateIdentity(identityId, value) {
+    return repo.updateIdentity(identityId, value);
+  }
+  async function deleteIdentity(identityId) {
+    return repo.deleteIdentity(identityId);
+  }
+  async function runObjectOperation(id, operation, payload) {
+    const reader = await getActiveReader(id);
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      let result;
+      if (operation === "load") {
+        result = await client.loadObjects(payload);
+      } else if (operation === "create") {
+        result = await client.createObjects(payload);
+      } else if (operation === "modify") {
+        result = await client.modifyObjects(payload);
+      } else {
+        result = await client.destroyObjects(payload);
+      }
+      await repo.updateById(id, { lastSeenAt: /* @__PURE__ */ new Date() });
+      await repo.addEvent({ reader: id, site: reader.site, type: `objects_${operation}`, payload: { request: payload, result } });
+      return result;
+    } catch (error) {
+      await repo.addEvent({ reader: id, site: reader.site, type: `objects_${operation}_failed`, payload: { request: payload, message: error.message } });
+      throw error;
+    } finally {
+      await client.logout();
+    }
+  }
+  async function getUserImage(readerId, hidUserId) {
+    const reader = await getActiveReader(readerId);
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      return await client.getUserImage(hidUserId);
+    } finally {
+      await client.logout();
+    }
+  }
+  async function getDoorState(id) {
+    const reader = await getActiveReader(id);
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      const state = await client.doorState();
+      await repo.updateById(id, { lastSeenAt: /* @__PURE__ */ new Date() });
+      await repo.addEvent({ reader: id, site: reader.site, type: "door_state", payload: state });
+      return state;
+    } finally {
+      await client.logout();
+    }
+  }
+  async function executeActions(id, actions) {
+    const reader = await getActiveReader(id);
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      const result = await client.executeActions(actions);
+      await repo.updateById(id, { lastSeenAt: /* @__PURE__ */ new Date() });
+      await repo.addEvent({ reader: id, site: reader.site, type: "execute_actions", payload: { actions, result } });
+      return result;
+    } catch (error) {
+      await repo.addEvent({ reader: id, site: reader.site, type: "execute_actions_failed", payload: { actions, message: error.message } });
+      throw error;
+    } finally {
+      await client.logout();
+    }
+  }
+  async function getConfiguration(id, payload) {
+    const reader = await getActiveReader(id);
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      const result = await client.getConfiguration(payload);
+      await repo.updateById(id, { lastSeenAt: /* @__PURE__ */ new Date() });
+      await repo.addEvent({ reader: id, site: reader.site, type: "configuration", payload: { request: payload, result } });
+      return result;
+    } catch (error) {
+      await repo.addEvent({ reader: id, site: reader.site, type: "configuration_failed", payload: { request: payload, message: error.message } });
+      throw error;
+    } finally {
+      await client.logout();
+    }
+  }
+  async function setConfiguration(id, payload) {
+    const reader = await getActiveReader(id);
+    const client = new HidAmicoClient(reader);
+    try {
+      await client.login();
+      const result = await client.setConfiguration(payload);
+      await repo.updateById(id, { lastSeenAt: /* @__PURE__ */ new Date() });
+      await repo.addEvent({ reader: id, site: reader.site, type: "set_configuration", payload: { request: payload, result } });
+      return result;
+    } catch (error) {
+      await repo.addEvent({ reader: id, site: reader.site, type: "set_configuration_failed", payload: { request: payload, message: error.message } });
+      throw error;
+    } finally {
+      await client.logout();
+    }
+  }
+  return {
+    listReaders,
+    createReader,
+    updateReader,
+    deleteReader,
+    testReader,
+    syncReader,
+    receiveNotification,
+    listLogs,
+    listIdentities,
+    createIdentity,
+    updateIdentity,
+    deleteIdentity,
+    runObjectOperation,
+    getUserImage,
+    getDoorState,
+    executeActions,
+    getConfiguration,
+    setConfiguration
+  };
+}
+
+// src/controllers/hid-amico.controller.ts
+import { BadRequestError as BadRequestError231 } from "@7365admin1/node-server-utils";
+function useHidAmicoController() {
+  const service = useHidAmicoService();
+  async function listReaders(req, res, next) {
+    const { error, value } = schemaHidAmicoReaderListQuery.validate(req.query);
+    if (error) {
+      next(new BadRequestError231(error.message));
+      return;
+    }
+    try {
+      res.json(await service.listReaders(value));
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function createReader(req, res, next) {
+    const { error, value } = schemaHidAmicoReader.validate(req.body);
+    if (error) {
+      next(new BadRequestError231(error.message));
+      return;
+    }
+    try {
+      res.status(201).json({ data: await service.createReader(value) });
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function updateReader(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const body = schemaUpdateHidAmicoReader.validate(req.body);
+    if (params.error || body.error) {
+      next(new BadRequestError231(params.error?.message || body.error?.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.updateReader(params.value.readerId, body.value) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function deleteReader(req, res, next) {
+    const { error, value } = schemaHidAmicoReaderIdParams.validate(req.params);
+    if (error) {
+      next(new BadRequestError231(error.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.deleteReader(value.readerId), message: "HID Amico reader deleted." });
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function testReader(req, res, next) {
+    const { error, value } = schemaHidAmicoReaderIdParams.validate(req.params);
+    if (error) {
+      next(new BadRequestError231(error.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.testReader(value.readerId) });
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function syncReader(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const body = schemaHidAmicoSync.validate(req.body ?? {});
+    if (params.error || body.error) {
+      next(new BadRequestError231(params.error?.message || body.error?.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.syncReader(params.value.readerId, body.value) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function listLogs(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const query = schemaHidAmicoLogQuery.validate(req.query);
+    if (params.error || query.error) {
+      next(new BadRequestError231(params.error?.message || query.error?.message));
+      return;
+    }
+    try {
+      res.json(await service.listLogs({ reader: params.value.readerId, ...query.value }));
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function listIdentities(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const query = schemaHidAmicoIdentityQuery.validate(req.query);
+    if (params.error || query.error) {
+      next(new BadRequestError231(params.error?.message || query.error?.message));
+      return;
+    }
+    try {
+      res.json(await service.listIdentities({ reader: params.value.readerId, ...query.value }));
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function createIdentity(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    if (params.error) {
+      next(new BadRequestError231(params.error.message));
+      return;
+    }
+    try {
+      const body = schemaCreateHidAmicoIdentity.validate(req.body);
+      if (body.error) {
+        next(new BadRequestError231(body.error.message));
+        return;
+      }
+      res.status(201).json({ data: await service.createIdentity(params.value.readerId, body.value) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function updateIdentity(req, res, next) {
+    const params = schemaHidAmicoIdentityIdParams.validate(req.params);
+    const body = schemaUpdateHidAmicoIdentity.validate(req.body ?? {});
+    if (params.error || body.error) {
+      next(new BadRequestError231(params.error?.message || body.error?.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.updateIdentity(params.value.identityId, body.value) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function deleteIdentity(req, res, next) {
+    const { error, value } = schemaHidAmicoIdentityIdParams.validate(req.params);
+    if (error) {
+      next(new BadRequestError231(error.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.deleteIdentity(value.identityId), message: "HID Amico identity deleted." });
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function receiveNotification(req, res, next) {
+    const validation = schemaHidAmicoNotificationParams.validate(req.params);
+    if (validation.error) {
+      next(new BadRequestError231(validation.error.message));
+      return;
+    }
+    try {
+      const event = await service.receiveNotification(
+        validation.value.readerId,
+        validation.value.type,
+        req.body ?? {}
+      );
+      res.status(202).json({ data: event });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function getDoorState(req, res, next) {
+    const { error, value } = schemaHidAmicoReaderIdParams.validate(req.params);
+    if (error) {
+      next(new BadRequestError231(error.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.getDoorState(value.readerId) });
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function getUserImage(req, res, next) {
+    const { error, value } = schemaHidAmicoUserImageParams.validate(req.params);
+    if (error) {
+      next(new BadRequestError231(error.message));
+      return;
+    }
+    try {
+      const image = await service.getUserImage(value.readerId, value.hidUserId);
+      res.json({ data: image });
+    } catch (error2) {
+      next(error2);
+    }
+  }
+  async function executeActions(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const body = schemaHidAmicoExecuteActions.validate(req.body ?? {});
+    if (params.error || body.error) {
+      next(new BadRequestError231(params.error?.message || body.error?.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.executeActions(params.value.readerId, body.value.actions) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function getConfiguration(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const body = schemaHidAmicoConfiguration.validate(req.body ?? {});
+    if (params.error || body.error) {
+      next(new BadRequestError231(params.error?.message || body.error?.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.getConfiguration(params.value.readerId, body.value) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function setConfiguration(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const body = schemaHidAmicoSetConfiguration.validate(req.body ?? {});
+    if (params.error || body.error) {
+      next(new BadRequestError231(params.error?.message || body.error?.message));
+      return;
+    }
+    try {
+      res.json({ data: await service.setConfiguration(params.value.readerId, body.value) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  async function runObjectOperation(req, res, next) {
+    const params = schemaHidAmicoReaderIdParams.validate(req.params);
+    const body = schemaHidAmicoObjectOperation.validate(req.body ?? {});
+    if (params.error || body.error) {
+      next(new BadRequestError231(params.error?.message || body.error?.message));
+      return;
+    }
+    const { operation, ...payload } = body.value;
+    if (operation === "create" && !Array.isArray(payload.values)) {
+      next(new BadRequestError231("values array is required for HID object create operations."));
+      return;
+    }
+    if (operation === "modify" && (!payload.values || Array.isArray(payload.values) || !payload.where)) {
+      next(new BadRequestError231("values object and where are required for HID object modify operations."));
+      return;
+    }
+    if (operation === "destroy" && !payload.where) {
+      next(new BadRequestError231("where is required for HID object destroy operations."));
+      return;
+    }
+    try {
+      res.json({ data: await service.runObjectOperation(params.value.readerId, operation, payload) });
+    } catch (error) {
+      next(error);
+    }
+  }
+  return {
+    listReaders,
+    createReader,
+    updateReader,
+    deleteReader,
+    testReader,
+    syncReader,
+    listLogs,
+    listIdentities,
+    createIdentity,
+    updateIdentity,
+    deleteIdentity,
+    receiveNotification,
+    getUserImage,
+    getDoorState,
+    executeActions,
+    getConfiguration,
+    setConfiguration,
+    runObjectOperation
+  };
+}
 export {
   ANPRMode,
   AccessTypeProps,
   AppServiceType,
+  BidStatus,
+  BidType,
   BuildingLevelStatus,
   BuildingStatus,
   BulletinOrder,
@@ -67813,6 +69390,7 @@ export {
   MAddress,
   MAttendance,
   MAttendanceSettings,
+  MBidPreloved,
   MBillingConfiguration,
   MBillingItem,
   MBuilding,
@@ -67833,6 +69411,9 @@ export {
   MFile,
   MFormEntry,
   MGuestManagement,
+  MHidAmicoEvent,
+  MHidAmicoIdentity,
+  MHidAmicoReader,
   MIncidentReport,
   MManpowerDesignations,
   MManpowerMonitoring,
@@ -67952,6 +69533,7 @@ export {
   schema,
   schemaApprovedBy,
   schemaApprover,
+  schemaBidPreloved,
   schemaBilling,
   schemaBillingConfiguration,
   schemaBillingItem,
@@ -67964,6 +69546,7 @@ export {
   schemaCategoryPreloved,
   schemaChannelPreloved,
   schemaChatPreloved,
+  schemaCreateHidAmicoIdentity,
   schemaCustomerSite,
   schemaDocumentManagement,
   schemaEntryPassSettings,
@@ -67971,6 +69554,21 @@ export {
   schemaFiles,
   schemaFormEntry,
   schemaGuestManagement,
+  schemaHidAmicoConfiguration,
+  schemaHidAmicoEvent,
+  schemaHidAmicoExecuteActions,
+  schemaHidAmicoIdentity,
+  schemaHidAmicoIdentityIdParams,
+  schemaHidAmicoIdentityQuery,
+  schemaHidAmicoLogQuery,
+  schemaHidAmicoNotificationParams,
+  schemaHidAmicoObjectOperation,
+  schemaHidAmicoReader,
+  schemaHidAmicoReaderIdParams,
+  schemaHidAmicoReaderListQuery,
+  schemaHidAmicoSetConfiguration,
+  schemaHidAmicoSync,
+  schemaHidAmicoUserImageParams,
   schemaIncidentReport,
   schemaMultipleDocumentManagement,
   schemaNfcPatrolLog,
@@ -67998,6 +69596,7 @@ export {
   schemaStatementOfAccount,
   schemaSubcategoryPreloved,
   schemaUnitBilling,
+  schemaUpdateBidPreloved,
   schemaUpdateBuildingLevel,
   schemaUpdateBulletinBoard,
   schemaUpdateBulletinVideo,
@@ -68008,6 +69607,8 @@ export {
   schemaUpdateEventManagement,
   schemaUpdateFormEntry,
   schemaUpdateGuestManagement,
+  schemaUpdateHidAmicoIdentity,
+  schemaUpdateHidAmicoReader,
   schemaUpdateIncidentReport,
   schemaUpdateOccurrenceBook,
   schemaUpdateOccurrenceEntry,
@@ -68053,6 +69654,8 @@ export {
   useAuthControllerV2,
   useAuthService,
   useAuthServiceV2,
+  useBidPrelovedController,
+  useBidPrelovedRepo,
   useBuildingController,
   useBuildingLevelController,
   useBuildingLevelRepo,
@@ -68075,6 +69678,7 @@ export {
   useChatController,
   useChatPrelovedController,
   useChatPrelovedRepo,
+  useChatPrelovedService,
   useChatRepo,
   useCounterModel,
   useCounterRepo,
@@ -68105,6 +69709,9 @@ export {
   useGuestManagementController,
   useGuestManagementRepo,
   useGuestManagementService,
+  useHidAmicoController,
+  useHidAmicoRepo,
+  useHidAmicoService,
   useHrmLabsAttendanceCtrl,
   useHrmLabsAttendanceSrvc,
   useIncidentReportController,