@app-connect/core 1.7.36 → 1.7.38

package/docs/libraries.md

@@ -1,98 +0,0 @@
-# Libraries
-
-The `lib/` directory contains cross-cutting helpers used by routes, handlers, and connectors.
-
-## Infrastructure And Security
-
-| File | Responsibility |
-| --- | --- |
-| `lib/jwt.js` | Signs and verifies long-lived JWTs with `APP_SERVER_SECRET_KEY` |
-| `lib/oauth.js` | Builds OAuth clients and refreshes access tokens with lock protection |
-| `lib/authSession.js` | Stores and updates auth-session records used by auth flows |
-| `lib/encode.js` | Small encoding and decoding helpers for encrypted values |
-| `lib/errorHandler.js` | Normalizes API and database errors and exports Express error middleware |
-| `lib/logger.js` | Structured logger plus exported `Logger` class and log-level constants |
-| `lib/debugTracer.js` | Request-scoped trace collector used when debug mode is enabled |
-| `lib/s3ErrorLogReport.js` | S3 bucket setup and presigned upload URL generation for debug reports |
-
-## RingCentral And Analytics Helpers
-
-| File | Responsibility |
-| --- | --- |
-| `lib/ringcentral.js` | RingCentral API wrapper plus token-validity helpers |
-| `lib/analytics.js` | Mixpanel initialization and event tracking |
-| `lib/generalErrorMessage.js` | Shared user-facing warning messages for auth and rate-limit cases |
-
-## Formatting And Utility Helpers
-
-| File | Responsibility |
-| --- | --- |
-| `lib/callLogComposer.js` | Builds plain text, HTML, or Markdown call-log bodies |
-| `lib/sharedSMSComposer.js` | Builds shared-SMS conversation log content |
-| `lib/constants.js` | Defines `LOG_DETAILS_FORMAT_TYPE` values |
-| `lib/util.js` | Hashing, timezone lookup, media-reader links, plugin setting extraction, and date helpers |
-
-## Notes By File
-
-### `lib/analytics.js`
-
-- no-op unless `MIXPANEL_TOKEN` is present
-- attaches package version, app name, connector name, browser, OS, device, and caller metadata to events
-- requires `extensionId` to emit an event
-
-### `lib/jwt.js`
-
-- `generateJwt()` signs with a very long expiration window
-- `decodeJwt()` logs and returns `null` on verification failure instead of throwing
-
-### `lib/errorHandler.js`
-
-Exports:
-
-- `handleApiError()`
-- `handleDatabaseError()`
-- `asyncHandler()`
-- `errorMiddleware()`
-- `getOperationErrorMessage()`
-
-Notable behavior:
-
-- HTTP 429 becomes a rate-limit warning
-- HTTP 4xx up to 409 becomes an authorization-style warning
-- everything else becomes an operation-specific warning response
-
-### `lib/callLogComposer.js`
-
-This module centralizes log-body generation for call logs.
-
-It supports:
-
-- plain text
-- HTML
-- Markdown
-- note insertion
-- session id, subject, duration, result, recording, and timestamp formatting
-- transcript and AI note insertion
-- leg journey formatting
-- ACE transcript, summary, score, bullet summary, and deep link sections
-
-### `lib/sharedSMSComposer.js`
-
-This module formats shared SMS conversations for CRM logging.
-
-It handles:
-
-- message, note, and assignment entities
-- owner and assignee metadata
-- per-format output generation
-- summary counts and formatted timeline entries
-
-### `lib/util.js`
-
-Exports:
-
-- `getTimeZone()`
-- `getHashValue()`
-- `secondsToHoursMinutesSeconds()`
-- `getMostRecentDate()`
-- `getMediaReaderLinkByPlatformMediaLink()`

package/docs/models.md

@@ -1,146 +0,0 @@
-# Models
-
-The package uses Sequelize for durable application data and Dynamoose for selected config and cache workflows.
-
-## Sequelize Models
-
-### `models/sequelize.js`
-
-Creates the shared Sequelize instance from `DATABASE_URL`.
-
-### `models/userModel.js`
-
-Stores CRM-authenticated users.
-
-| Field | Notes |
-| --- | --- |
-| `id` | Primary key; effectively `{crmUserId}-{platform}` |
-| `rcAccountId` | RingCentral account id |
-| `hostname` | CRM hostname or tenant host |
-| `timezoneName` | User timezone name when available |
-| `timezoneOffset` | Offset stored as a string |
-| `platform` | Connector platform name |
-| `accessToken` | OAuth access token or API key |
-| `refreshToken` | OAuth refresh token |
-| `tokenExpiry` | Access token expiry |
-| `platformAdditionalInfo` | Connector-specific metadata such as `proxyId` or token URL |
-| `hashedRcExtensionId` | Hashed RingCentral extension id |
-| `userSettings` | Per-user settings JSON |
-
-### `models/callLogModel.js`
-
-Stores the mapping between telephony sessions and CRM call logs.
-
-| Field | Notes |
-| --- | --- |
-| `id` | Telephony call id |
-| `sessionId` | Session id; also part of the composite primary key |
-| `extensionNumber` | Legacy RingCentral extension number identity; part of the composite primary key |
-| `hashedExtensionId` | Hashed RingCentral extension id used for current call-log identity; part of the composite primary key |
-| `platform` | Connector platform |
-| `thirdPartyLogId` | CRM log id |
-| `userId` | App Connect user id |
-| `contactId` | CRM contact id used for the log |
-
-### `models/messageLogModel.js`
-
-Stores message-log linkage records.
-
-| Field | Notes |
-| --- | --- |
-| `id` | Message id or conversation log id |
-| `platform` | Connector platform |
-| `conversationId` | Conversation identifier |
-| `conversationLogId` | Shared key used to group related message logs |
-| `thirdPartyLogId` | CRM log id |
-| `userId` | App Connect user id |
-
-### `models/adminConfigModel.js`
-
-Stores account-level admin configuration.
-
-| Field | Notes |
-| --- | --- |
-| `id` | Hashed RingCentral account id |
-| `userSettings` | Account-level settings policy |
-| `customAdapter` | Obsolete field kept for compatibility |
-| `adminAccessToken` | RingCentral admin access token |
-| `adminRefreshToken` | RingCentral admin refresh token |
-| `adminTokenExpiry` | Admin token expiry |
-| `userMappings` | JSON mapping between CRM users and RingCentral extensions |
-
-### `models/cacheModel.js`
-
-Stores temporary task state, mainly for async plugin work.
-
-| Field | Notes |
-| --- | --- |
-| `id` | Task id. Async plugin callback tasks use the UUID sent to the plugin as `asyncTaskId`. |
-| `status` | Task status such as `pending`, `initialized`, `completed`, or `failed` |
-| `userId` | Owning user |
-| `cacheKey` | Logical task family. Async plugin tasks use `asyncPluginTask-<pluginId>`. |
-| `data` | Optional task payload. Async plugin tasks keep callback URL, plugin id, call-log lookup fields, original plugin input, and failure `message` when a callback fails. |
-| `expiry` | Cleanup cutoff. Async plugin callback tasks expire after one week. |
-
-### `models/accountDataModel.js`
-
-Stores account-scoped cached data.
-
-Composite primary key:
-
-- `rcAccountId`
-- `platformName`
-- `dataKey`
-
-Main usage in current code:
-
-- cached contact lookups keyed as `contact-${phoneNumber}`
-
-Helper export:
-
-- `getOrRefreshAccountData()` which returns cached data unless `forceRefresh` is set
-
-### `models/callDownListModel.js`
-
-Stores user-owned call-down queue items.
-
-| Field | Notes |
-| --- | --- |
-| `id` | Primary key |
-| `userId` | Owning user |
-| `contactId` | CRM contact id |
-| `contactType` | Contact entity type |
-| `status` | Queue state such as `scheduled` or `called` |
-| `scheduledAt` | Requested follow-up time |
-| `lastCallAt` | Last call timestamp |
-
-This model enables timestamps and indexes on `userId`, `status`, `scheduledAt`, and `userId + status`.
-
-### `models/llmSessionModel.js`
-
-Stores a lightweight mapping from an LLM session id to a JWT token.
-
-## Dynamoose Models
-
-### `models/dynamo/connectorSchema.js`
-
-Stores connector metadata used by proxy integrations.
-
-Important role:
-
-- source of truth for `Connector.getProxyConfig(proxyId)`
-
-This schema is a dependency of auth, contact, log, admin, and proxy connector flows.
-
-### `models/dynamo/lockSchema.js`
-
-Stores distributed lock state used by token refresh and similar coordination logic.
-
-### `models/dynamo/noteCacheSchema.js`
-
-Stores note cache entries keyed by `sessionId`.
-
-Main usage:
-
-- `handlers/log.js` can read cached notes during server-side call logging
-- `saveNoteCache()` writes entries with a TTL

package/docs/routes.md

@@ -1,119 +0,0 @@
-# Core Routes
-
-This page documents the non-MCP HTTP routes defined in `index.js`.
-
-## Route Design Notes
-
-- Most routes accept a `jwtToken` query parameter and resolve the current user from it.
-- Many routes emit analytics using request headers such as `rc-extension-id`, `rc-account-id`, `user-agent`, `developer-author-name`, and `eventAddedVia`.
-- When the request header `is-debug` is set to `'true'`, route handlers can return `DebugTracer` output wrappers.
-- Several routes are marked obsolete in code but still present for compatibility.
-
-## System And Metadata Routes
-
-| Method | Path | Purpose |
-| --- | --- | --- |
-| `GET` | `/releaseNotes` | Merges package release notes with connector release notes |
-| `GET` | `/crmManifest` | Returns a platform manifest, with optional server URL overrides |
-| `GET` | `/isAlive` | Simple health check returning `OK` |
-| `GET` | `/implementedInterfaces` | Reports which connector methods exist for a platform |
-| `GET` | `/serverVersionInfo` | Returns manifest version data; marked obsolete in code |
-| `GET` | `/.well-known/openai-apps-challenge` | Returns the ChatGPT verification code |
-| `GET` | `/.well-known/oauth-protected-resource` | OAuth protected-resource metadata |
-| `GET` | `/.well-known/oauth-authorization-server` | OAuth authorization-server metadata |
-| `GET` | `/oauth/authorize_shim` | Rebuilds OAuth params and redirects to RingCentral |
-| `POST` | `/oauth/register` | Returns RingCentral client credentials for the shim flow |
-
-## Authentication Routes
-
-| Method | Path | Purpose |
-| --- | --- | --- |
-| `GET` | `/licenseStatus` | Checks connector-specific license status for the current user |
-| `GET` | `/authValidation` | Verifies the current CRM auth session |
-| `GET` | `/hostname` | Returns host-related info used during auth flows |
-| `GET` | `/oauth-callback` | Completes connector OAuth and persists the user |
-| `POST` | `/apiKeyLogin` | Handles API-key based login flows |
-| `GET` | `/apiKeyManagedAuthState` | Returns required-field readiness for shared API-key auth |
-| `POST` | `/unAuthorize` | Logs the user out of the CRM |
-| `GET` | `/userInfoHash` | Returns a hash derived from user information |
-| `GET` | `/ringcentral/oauth/callback` | Completes the admin RingCentral OAuth callback |
-
-## Admin Routes
-
-| Method | Path | Purpose |
-| --- | --- | --- |
-| `POST` | `/admin/settings` | Validates RingCentral admin role and saves admin settings |
-| `GET` | `/admin/settings` | Returns admin settings for the current account |
-| `POST` | `/admin/userMapping` | Builds a mapping between CRM users and RingCentral extensions |
-| `POST` | `/admin/reinitializeUserMapping` | Rebuilds user mappings from scratch |
-| `GET` | `/admin/serverLoggingSettings` | Loads connector-specific server logging settings |
-| `POST` | `/admin/serverLoggingSettings` | Updates connector-specific server logging settings |
-| `GET` | `/admin/managedAuth` | Returns admin-facing managed-auth field definitions and masked stored values |
-| `POST` | `/admin/managedAuth` | Upserts org-level or extension-level managed auth values |
-| `GET` | `/ringcentral/admin/report` | Returns aggregated RingCentral call activity metrics |
-| `GET` | `/ringcentral/admin/userReport` | Returns per-extension call and SMS metrics |
-
-## User Settings Routes
-
-| Method | Path | Purpose |
-| --- | --- | --- |
-| `GET` | `/user/preloadSettings` | Loads settings used to bootstrap client-side configuration |
-| `POST` | `/user/refreshInfo` | Refreshes connector-owned CRM user information for the current user |
-| `GET` | `/user/settings` | Returns merged user and admin settings |
-| `POST` | `/user/settings` | Updates per-user settings, with connector hooks when present |
-
-## Contact Routes
-
-| Method | Path | Purpose |
-| --- | --- | --- |
-| `GET` | `/contact` | Finds contacts by phone number |
-| `POST` | `/contact` | Creates a new contact |
-| `GET` | `/custom/contact/search` | Finds contacts by name |
-
-## Logging And Disposition Routes
-
-| Method | Path | Purpose |
-| --- | --- | --- |
-| `POST` | `/callLog/cacheNote` | Stores a temporary note for server-side call logging |
-| `GET` | `/callLog` | Looks up existing call logs by session id plus extension identity |
-| `POST` | `/callLog` | Creates a CRM call log and stores the local linkage record |
-| `PATCH` | `/callLog` | Updates an existing CRM call log |
-| `PUT` | `/callDisposition` | Upserts call disposition data through the connector |
-| `POST` | `/messageLog` | Creates or updates CRM logs for SMS, fax, and shared SMS |
-
-## Call-Down Routes
-
-| Method | Path | Purpose |
-| --- | --- | --- |
-| `POST` | `/calldown` | Schedules a call-down item |
-| `GET` | `/calldown` | Lists the current user's call-down items |
-| `DELETE` | `/calldown/:id` | Removes a call-down item |
-| `PATCH` | `/calldown/:id` | Updates or marks a call-down item |
-
-## Plugin And Debug Routes
-
-| Method | Path | Purpose |
-| --- | --- | --- |
-| `GET` | `/debug/report/url` | Returns a presigned URL for error log upload |
-| `POST` | `/plugin/async-callback/:taskId` | Receives async plugin completion callbacks for call-log tasks |
-| `POST` | `/plugin/register` | Registers an account-level plugin and stores returned plugin auth data |
-| `DELETE` | `/plugin/unregister` | Removes account-level plugin auth and settings |
-| `GET` | `/plugin/licenseStatus` | Reads license status for an installed plugin |
-
-## Development-Only Mock Routes
-
-These routes are only mounted when `IS_PROD === 'false'`.
-
-| Method | Path | Purpose |
-| --- | --- | --- |
-| `POST` | `/registerMockUser` | Creates a mock user |
-| `DELETE` | `/deleteMockUser` | Removes a mock user |
-| `GET` | `/mockCallLog` | Reads mock call logs |
-| `POST` | `/mockCallLog` | Creates a mock call log |
-| `DELETE` | `/mockCallLog` | Clears mock call logs |
-
-## Operational Notes
-
-- `createCoreRouter()` currently contains a large amount of orchestration logic in addition to route registration.
-- Most route handlers duplicate a common pattern: decode JWT, load user, resolve connector, refresh auth, call handler, then track analytics.
-- If route count continues growing, this file is a strong candidate for modular route extraction by feature area.

package/docs/tests.md

@@ -1,73 +0,0 @@
-# Tests
-
-This page maps the non-MCP test suite under `packages/core/test`.
-
-## Test Setup
-
-| File | Purpose |
-| --- | --- |
-| `test/setup.js` | Shared test bootstrapping for Jest |
-| `jest.config.js` | Package-local Jest configuration |
-
-## Connector Tests
-
-| File | Coverage |
-| --- | --- |
-| `test/connector/registry.test.js` | Registry behavior, connector registration, and interface composition |
-| `test/connector/proxy/engine.test.js` | Proxy request rendering, auth header building, and response mapping |
-| `test/connector/proxy/index.test.js` | Proxy connector behavior across connector operations |
-| `test/connector/proxy/sample.json` | Sample proxy config fixture used by tests |
-
-## Handler Tests
-
-| File | Coverage |
-| --- | --- |
-| `test/handlers/admin.test.js` | Admin settings and reporting behavior |
-| `test/handlers/auth.test.js` | OAuth, API-key login, and auth validation behavior |
-| `test/handlers/contact.test.js` | Contact lookup and creation flows |
-| `test/handlers/log.test.js` | Call-log and message-log workflows |
-| `test/handlers/plugin.test.js` | Async plugin task polling and cleanup |
-| `test/handlers/managedAuth.test.js` | Shared-auth field loading, encryption, masking, and login-time field resolution |
-
-## Route Tests
-
-| File | Coverage |
-| --- | --- |
-| `test/routes/managedAuthRoutes.test.js` | Shared-auth API route behavior and validation paths |
-
-## Library Tests
-
-| File | Coverage |
-| --- | --- |
-| `test/lib/callLogComposer.test.js` | Call-log formatting |
-| `test/lib/debugTracer.test.js` | Debug trace capture and serialization |
-| `test/lib/jwt.test.js` | JWT sign and verify helpers |
-| `test/lib/logger.test.js` | Logger behavior |
-| `test/lib/oauth.test.js` | OAuth client and token-refresh behavior |
-| `test/lib/ringcentral.test.js` | RingCentral API wrapper helpers |
-| `test/lib/sharedSMSComposer.test.js` | Shared-SMS formatting |
-| `test/lib/util.test.js` | Hashing, formatting, and utility helpers |
-
-## Model Tests
-
-| File | Coverage |
-| --- | --- |
-| `test/models/models.test.js` | General Sequelize model behavior |
-| `test/models/accountDataModel.test.js` | Account-data cache behavior |
-| `test/models/dynamo/connectorSchema.test.js` | Dynamo-backed connector schema behavior |
-
-## Coverage Gaps To Be Aware Of
-
-The current non-MCP test suite does not appear to have direct dedicated files for:
-
-- `handlers/calldown.js`
-- `handlers/disposition.js`
-- `lib/authSession.js`
-- `lib/encode.js`
-- `lib/errorHandler.js`
-- `lib/generalErrorMessage.js`
-- `lib/s3ErrorLogReport.js`
-- `models/callDownListModel.js`
-- `models/llmSessionModel.js`
-- `models/dynamo/lockSchema.js`
-- `models/dynamo/noteCacheSchema.js`

package/handlers/calldown.js

@@ -1,99 +0,0 @@
-const { UserModel } = require('../models/userModel');
-const { CallDownListModel } = require('../models/callDownListModel');
-const { Op } = require('sequelize');
-const jwt = require('../lib/jwt');
-const { handleDatabaseError } = require('../lib/errorHandler');
-
-async function schedule({ jwtToken, body }) {
-    const unAuthData = jwt.decodeJwt(jwtToken);
-    if (!unAuthData?.id) throw new Error('Unauthorized');
-    const user = await UserModel.findByPk(unAuthData.id);
-    if (!user) throw new Error('User not found');
-    const crypto = require('crypto');
-    const recordId = crypto.randomBytes(16).toString('hex');
-    const payload = {
-        id: recordId,
-        userId: user.id,
-        contactId: body.contactId?.toString?.() ?? body.contactId,
-        contactType: body.contactType ?? 'contact',
-        contactName: body.contactName ?? '',
-        phoneNumber: body.phoneNumber ?? '',
-        status: 'scheduled',
-        scheduledAt: body.scheduledAt ? new Date(body.scheduledAt) : null,
-        lastCallAt: null
-    };
-    await CallDownListModel.create(payload);
-    return { id: recordId };
-}
-
-async function list({ jwtToken, status }) {
-    const unAuthData = jwt.decodeJwt(jwtToken);
-    if (!unAuthData?.id) throw new Error('Unauthorized');
-    const statusParam = (status || 'All').toString().toLowerCase();
-    const whereClause = { userId: unAuthData.id };
-    if (statusParam === 'called') whereClause.status = 'called';
-    else if (['not called', 'not_called', 'notcalled'].includes(statusParam)) whereClause.status = { [Op.ne]: 'called' };
-    const items = await CallDownListModel.findAll({ where: whereClause, order: [["scheduledAt", "ASC"]] });
-    return { items };
-}
-
-async function remove({ jwtToken, id }) {
-    const unAuthData = jwt.decodeJwt(jwtToken);
-    if (!unAuthData?.id) throw new Error('Unauthorized');
-    const deleted = await CallDownListModel.destroy({ where: { id, userId: unAuthData.id } });
-    if (!deleted) throw new Error('Not found');
-    return { successful: true };
-}
-
-async function markCalled({ jwtToken, id, lastCallAt }) {
-    const unAuthData = jwt.decodeJwt(jwtToken);
-    if (!unAuthData?.id) throw new Error('Unauthorized');
-    const when = lastCallAt ? new Date(lastCallAt) : new Date();
-    try {
-        const [affected] = await CallDownListModel.update({ status: 'called', lastCallAt: when }, { where: { id, userId: unAuthData.id } });
-        if (!affected) throw new Error('Not found');
-        return { successful: true };
-    }
-    catch (error) {
-        return handleDatabaseError(error, 'Error marking call as called', { id, userId: unAuthData.id });
-    }
-}
-
-async function update({ jwtToken, id, updateData }) {
-    const unAuthData = jwt.decodeJwt(jwtToken);
-    if (!unAuthData?.id) throw new Error('Unauthorized');
-    
-    // Prepare the update object with only valid fields
-    const allowedFields = ['contactId', 'contactType', 'contactName', 'phoneNumber', 'status', 'scheduledAt', 'lastCallAt', 'note'];
-    const updateObject = {};
-    
-    // Filter and prepare update data
-    Object.keys(updateData).forEach(key => {
-        if (allowedFields.includes(key)) {
-            let value = updateData[key];
-            
-            // Handle date fields
-            if ((key === 'scheduledAt' || key === 'lastCallAt') && value) {
-                value = new Date(value);
-            }
-            
-            updateObject[key] = value;
-        }
-    });
-    
-    // If no valid fields to update, throw error
-    if (Object.keys(updateObject).length === 0) {
-        throw new Error('No valid fields to update');
-    }
-    
-    const [affected] = await CallDownListModel.update(updateObject, { where: { id, userId: unAuthData.id } });
-    if (!affected) throw new Error('Not found');
-    return { successful: true };
-}
-
-exports.schedule = schedule;
-exports.list = list;
-exports.remove = remove;
-exports.markCalled = markCalled;
-exports.update = update;
-

package/jest.config.js

@@ -1,57 +0,0 @@
-const path = require('path');
-
-module.exports = {
-  // Test environment
-  testEnvironment: 'node',
-  
-  // Test file patterns
-  testMatch: [
-    '<rootDir>/test/**/*.test.js',
-    '<rootDir>/**/*.test.js'
-  ],
-  
-  // Setup files
-  setupFilesAfterEnv: [
-    '<rootDir>/test/setup.js'
-  ],
-  
-  // Coverage configuration
-  collectCoverage: true,
-  coverageDirectory: '<rootDir>/coverage',
-  coverageReporters: ['text', 'lcov', 'html'],
-  coveragePathIgnorePatterns: [
-    '/node_modules/',
-    '/test/',
-    '/coverage/',
-    'jest.config.js',
-    'setup.js'
-  ],
-  
-  // Module resolution
-  moduleDirectories: ['node_modules', '<rootDir>'],
-  moduleNameMapper: {
-    '^@app-connect/core/(.*)$': '<rootDir>/$1'
-  },
-  
-  // Test timeout
-  testTimeout: 30000,
-  
-  // Reporters
-  reporters: ['default'],
-  
-  // Ignore patterns
-  modulePathIgnorePatterns: [
-    '<rootDir>/node_modules/',
-    '<rootDir>/coverage/',
-    '<rootDir>/test-results/'
-  ],
-  
-  // Clear mocks between tests
-  clearMocks: true,
-  
-  // Restore mocks between tests
-  restoreMocks: true,
-  
-  // Verbose output
-  verbose: true
-}; 

package/lib/constants.js

@@ -1,9 +0,0 @@
-const LOG_DETAILS_FORMAT_TYPE = {
-    PLAIN_TEXT: 'text/plain',
-    HTML: 'text/html',
-    MARKDOWN: 'text/markdown'
-};
-
-module.exports = {
-    LOG_DETAILS_FORMAT_TYPE
-};

package/lib/encode.js

@@ -1,30 +0,0 @@
-const crypto = require('crypto');
-
-function getCipherKey() {
-  if (!process.env.APP_SERVER_SECRET_KEY) {
-    throw new Error('APP_SERVER_SECRET_KEY is not defined');
-  }
-  if (process.env.APP_SERVER_SECRET_KEY.length < 32) {
-    // pad secret key with spaces if it is less than 32 bytes
-    return process.env.APP_SERVER_SECRET_KEY.padEnd(32, ' ');
-  }
-  if (process.env.APP_SERVER_SECRET_KEY.length > 32) {
-    // truncate secret key if it is more than 32 bytes
-    return process.env.APP_SERVER_SECRET_KEY.slice(0, 32);
-  }
-  return process.env.APP_SERVER_SECRET_KEY;
-}
-
-function encode(data) {
-  const cipher = crypto.createCipheriv('aes-256-cbc', getCipherKey(), Buffer.alloc(16, 0));
-  return cipher.update(data, 'utf8', 'hex') + cipher.final('hex');
-}
-
-function decoded(encryptedData) {
-  const decipher = crypto.createDecipheriv('aes-256-cbc', getCipherKey(), Buffer.alloc(16, 0));
-  return decipher.update(encryptedData, 'hex', 'utf8') + decipher.final('utf8');
-}
-
-
-exports.encode = encode;
-exports.decoded = decoded;