@cocreate/users 1.39.3 → 1.40.0

package/src/server.js

@@ -1,244 +1,340 @@
-class CoCreateUser {
-	constructor(crud) {
-		this.wsManager = crud.wsManager;
-		this.crud = crud;
-		this.init();
-	}
-
-	init() {
-		if (this.wsManager) {
-			this.wsManager.on("signUp", (data) => this.signUp(data));
-			this.wsManager.on("signIn", (data) => this.signIn(data));
-			this.wsManager.on("userStatus", (data) => this.userStatus(data));
-			this.wsManager.on("checkSession", (data) =>
-				this.checkSession(data)
-			);
-			this.wsManager.on("inviteUser", (data) => this.inviteUser(data));
-			this.wsManager.on("acceptInvite", (data) =>
-				this.acceptInvite(data)
-			);
-			this.wsManager.on("forgotPassword", (data) =>
-				this.forgotPassword(data)
-			);
-			this.wsManager.on("resetPassword", (data) =>
-				this.resetPassword(data)
-			);
-		}
-	}
-
-	async signUp(data) {
-		try {
-			let response = {
-				socket: data.socket,
-				host: data.host,
-				method: "signUp",
-				success: false,
-				message: "signUp failed",
-				organization_id: data.organization_id,
-				uid: data.uid
-			};
-
-			if (data.user) {
-				data.user.method = "object.create";
-				data.user.host = data.host;
-				if (!data.user.organization_id) {
-					data.user.organization_id = data.organization_id;
-					data.userKey.organization_id = data.organization_id;
-				}
-				let createdUser = await this.crud.send(data.user);
-				if (data.userKey && createdUser.object[0] && createdUser.object[0]._id) {
-					data.userKey.object.key = createdUser.object[0]._id;
-				}
-			}
-
-			if (data.userKey) {
-				data.userKey.method = "object.create";
-				data.userKey.host = data.host;
-				if (!data.userKey.organization_id) {
-					data.userKey.organization_id = data.organization_id;
-				}
-				await this.crud.send(data.userKey);
-			}
-
-			response.success = true;
-			response.message = "signUp successful";
-
-			this.wsManager.send(response);
-		} catch (error) {
-			console.log("signup error", error);
-		}
-	}
-
-	/**
-        data = {
-            namespace: string,	
-            array:	string,
-            data: object,
-            eId: string,
-            key: string,
-            organization_id: string
+/********************************************************************************
+ * Copyright (C) 2023 CoCreate and Contributors.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published
+ * by the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ *
+ ********************************************************************************/
+
+// Commercial Licensing Information:
+// For commercial use of this software without the copyleft provisions of the AGPLv3,
+// you must obtain a commercial license from CoCreate LLC.
+// For details, visit <https://cocreate.app/licenses/> or contact us at sales@cocreate.app.
+
+import server from '@cocreate/server';
+
+/**
+ * Handles the user sign-up process by performing identity validation, 
+ * contact record synchronization, and credential attachment.
+ */
+async function signUp(data) {
+    try {
+        let response = {
+            socket: data.socket,
+            host: data.host,
+            method: "signUp",
+            success: false,
+            message: "signUp failed",
+            organization_id: data.organization_id,
+            uid: data.uid
+        };
+
+        const targetEmail = data.user?.object?.email;
+        const targetId = data.user?.object?._id;
+
+        // --- STEP 1: The Ultimate Gatekeeper Check ---
+        // We look in the 'keys' array to see if this email OR this ID is already registered.
+        if (!server || !server.crud) return;
+
+        const keyCheck = await server.crud.send({
+            method: "object.read",
+            array: "keys",
+            $filter: { 
+                limit: 1,
+                query: {
+                    $or: [
+                        { "email": targetEmail },
+                        { "key": targetId }
+                    ]
+                }
+            }
+        });
+
+        // Detailed error messaging for the user
+        if (keyCheck?.object?.length > 0) {
+            const match = keyCheck.object[0];
+
+            if (match.email === targetEmail && match.key !== targetId) {
+                response.message = "Email is already in use with another account";
+            } else if (match.key === targetId) {
+                response.message = "You already have an account, try signing in instead";
+            } else {
+                response.message = "An account with these details already exists";
+            }
+
+            if (server.wsManager) {
+                server.wsManager.send(response);
+            }
+            return; // Exit early: Gatekeeper blocked the sign-up.
         }
-    **/
-	async signIn(data) {
-		const self = this;
-		try {
-			data.method = "object.read";
-			data.array = "keys";
-			let socket = data.socket;
-			delete data.socket;
-
-			// TODO: Enforce query from array keys $filter.query = {email, phone, username, password, key }
-			// Get crud properties from returned key and enforce query $filter.query = {database, array, email, phone, username, password, key }
-			// or use webhook to update keys credintials when user updates ther user
-			// Also enforce roles by webhook else role could be spoofed,
-			// Also enforce admin privlige
-
-			this.crud.send(data).then(async (data) => {
-				let response = {
-					socket,
-					host: data.host,
-					method: "signIn",
-					success: false,
-					message: "signIn failed",
-					userStatus: "offline",
-					organization_id: data.organization_id,
-					uid: data.uid
-				};
-
-				if (
-					data.object[0] &&
-					data.object[0]._id &&
-					self.wsManager.authenticate
-				) {
-					const user_id = data.object[0].key;
-					// TODO: get key to then get crud properties from key to intiate signin
-					// const { storage, database, array, key } = data.object[0];
-					// data = await this.crud.send(data);
-					const token = self.wsManager.authenticate.encodeToken(
-						data.organization_id,
-						user_id,
-						data.clientId
-					);
-
-					if (token && token != "null") {
-						socket.user_id = user_id;
-						response.success = true;
-						response.message = "signIn successful";
-						response.userStatus = "online";
-						response.user_id = user_id;
-						response.token = token;
-					}
-				}
-				self.wsManager.send(response);
-				self.wsManager.send({
-					socket,
-					host: data.host,
-					method: "updateUserStatus",
-					user_id: response.user_id,
-					userStatus: response.userStatus,
-					organization_id: response.organization_id
-				});
-			});
-		} catch (error) {
-			console.log("signIn failed", error);
-		}
-	}
-
-	/**
-	 * status: 'online/offline/idle'
-	 */
-	async userStatus(data) {
-		const self = this;
-		try {
-			if (data.user_id && data.userStatus) {
-				data.array = "users";
-				data["object"] = {
-					_id: data.user_id,
-					userStatus: data.userStatus
-				};
-
-				data.method = "object.update";
-				data = await this.crud.send(data);
-
-				if (data.socket)
-					self.wsManager.send({
-						socket: data.socket,
-						method: "updateUserStatus",
-						host: data.host,
-						user_id: data.user_id,
-						clientId: data.clientId,
-						userStatus: data.userStatus,
-						token: data.token,
-						organization_id:
-							data.organization_id || socket.organization_id
-					});
-			} else if (data.socket)
-				data.socket.send(
-					JSON.stringify({
-						method: "updateUserStatus",
-						host: data.host,
-						user_id: data.user_id,
-						userStatus: data.userStatus,
-						clientId: data.clientId,
-						token: data.token,
-						organization_id:
-							data.organization_id || socket.organization_id
-					})
-				);
-		} catch (error) {
-			console.log("userStatus error");
-		}
-	}
-
-	async checkSession(data) {
-		try {
-			data.method = "updateUserStatus";
-
-			if (!data.socket.user_id) data.userStatus = "offline";
-			else data.userStatus = "online";
-
-			this.wsManager.send(data);
-		} catch (error) {
-			console.log("checkSession error");
-		}
-	}
-
-	// TODO: email or phone param refrencing the object to execute via api
-	async inviteUser(data) {
-		try {
-			const inviteId = this.crud.ObjectId().toString();
-			let uid = data.uid;
-			delete data.uid;
-
-			data.method = "object.update";
-			data.array = "users";
-			data.object = {
-				_id: data.user_id,
-				"$push.invitations": inviteId,
-				"$addToSet.members": data.email
-			};
-
-			// TODO: upodateDB is a temp solution to by pass crud.sync clientId as all crud methods are ignored fro same clientid except for read
-			data.updateDB = true;
-
-			data = await this.crud.send(data);
-
-			let invitee = await this.crud.send({
-				method: "object.read",
-				host: data.host,
-				array: "users",
-				$filter: {
-					query: { email: data.email },
-					limit: 1
-				},
-				organization_id: data.organization_id
-			});
-
-			if (invitee.object[0]) {
-				invitee = invitee.object[0]._id;
-			} else invitee = "";
-
-			let htmlBody = `
+
+        // --- STEP 2: Resolve or Create the Contact ---
+        if (data.user) {
+            data.user.method = "object.create";
+            data.user.host = data.host;
+
+            if (!data.user.organization_id) {
+                data.user.organization_id = data.organization_id;
+            }
+
+            if (data.user.object) {
+                delete data.user.object.password; // Remove password attribute to avoid plain text database leakage
+            }
+
+            let userResult = await server.crud.send(data.user);
+
+            // --- STEP 3: Create the Key ---
+            if (data.userKey && userResult.object?.[0]?._id) {
+                const resolvedUserId = userResult.object[0]._id;
+
+                data.userKey.method = "object.create";
+                data.userKey.host = data.host;
+                data.userKey.object.key = resolvedUserId;
+                data.userKey.object.email = targetEmail;
+
+                if (!data.userKey.organization_id) {
+                    data.userKey.organization_id = data.organization_id;
+                }
+
+                // Get the result and check for an ID to confirm success
+                let createdKey = await server.crud.send(data.userKey);
+                
+                if (createdKey.object?.[0]?._id) {
+                    response.success = true;
+                    response.message = "signUp successful";
+                } else {
+                    response.message = "Account creation failed at credential stage";
+                }
+            } else {
+                response.message = "Account creation failed at user stage";
+            }
+        }
+
+        if (server.wsManager) {
+            server.wsManager.send(response);
+        }
+
+    } catch (error) {
+        console.error("signup error", error);
+    }
+}
+
+/**
+ * Executes credential matching queries, assigns socket-level identifiers,
+ * and encodes secure session web tokens.
+ */
+async function signIn(data) {
+    try {
+        if (!server || !server.crud) return;
+
+        data.method = "object.read";
+        data.array = "keys";
+        let socket = data.socket;
+        delete data.socket;
+
+        const result = await server.crud.send(data);
+
+        let response = {
+            socket,
+            host: result.host,
+            method: "signIn",
+            success: false,
+            message: "signIn failed",
+            userStatus: "offline",
+            organization_id: result.organization_id,
+            uid: result.uid
+        };
+
+        if (
+            result.object[0] &&
+            result.object[0]._id &&
+            server.wsManager &&
+            server.authenticate
+        ) {
+            const user_id = result.object[0].key;
+            const token = server.authenticate.encodeToken(
+                result.organization_id,
+                user_id,
+                result.clientId
+            );
+
+            if (token && token !== "null") {
+                socket.user_id = user_id;
+                response.success = true;
+                response.message = "signIn successful";
+                response.userStatus = "online";
+                response.user_id = user_id;
+                response.token = token;
+            }
+        }
+        
+        if (server.wsManager) {
+            server.wsManager.send(response);
+            server.wsManager.send({
+                socket,
+                host: result.host,
+                method: "updateUserStatus",
+                user_id: response.user_id,
+                userStatus: response.userStatus,
+                organization_id: response.organization_id
+            });
+        }
+    } catch (error) {
+        console.error("signIn failed", error);
+    }
+}
+
+/**
+ * Updates dynamic user activity indicators ('online', 'offline', 'idle').
+ */
+async function userStatus(data) {
+    try {
+        if (!server || !server.crud) return;
+
+        if (data.user_id && data.userStatus) {
+            let targetArray = "users"; // default fallback
+            let keyData = await server.crud.send({
+                method: "object.read",
+                host: data.host,
+                array: "keys",
+                $filter: {
+                    query: { key: data.user_id },
+                    limit: 1
+                },
+                organization_id: data.organization_id || (data.socket && data.socket.organization_id)
+            });
+
+            if (keyData && keyData.object && keyData.object.length > 0 && keyData.object[0].array) {
+                targetArray = keyData.object[0].array;
+            }
+
+            data.array = targetArray;
+            data["object"] = {
+                _id: data.user_id,
+                userStatus: data.userStatus
+            };
+
+            data.method = "object.update";
+            const updatedData = await server.crud.send(data);
+
+            if (updatedData.socket && server.wsManager) {
+                server.wsManager.send({
+                    socket: updatedData.socket,
+                    method: "updateUserStatus",
+                    host: updatedData.host,
+                    user_id: updatedData.user_id,
+                    clientId: updatedData.clientId,
+                    userStatus: updatedData.userStatus,
+                    token: updatedData.token,
+                    organization_id:
+                        updatedData.organization_id || (updatedData.socket && updatedData.socket.organization_id)
+                });
+            }
+        } else if (data.socket) {
+            data.socket.send(
+                JSON.stringify({
+                    method: "updateUserStatus",
+                    host: data.host,
+                    user_id: data.user_id,
+                    userStatus: data.userStatus,
+                    clientId: data.clientId,
+                    token: data.token,
+                    organization_id:
+                        data.organization_id || (data.socket && data.socket.organization_id)
+                })
+            );
+        }
+    } catch (error) {
+        console.error("userStatus error", error);
+    }
+}
+
+/**
+ * Quickly checks for valid runtime credentials assigned to active client connections.
+ */
+async function checkSession(data) {
+    try {
+        data.method = "updateUserStatus";
+
+        if (!data.socket.user_id) data.userStatus = "offline";
+        else data.userStatus = "online";
+
+        if (server && server.wsManager) {
+            server.wsManager.send(data);
+        }
+    } catch (error) {
+        console.error("checkSession error", error);
+    }
+}
+
+/**
+ * Creates, formats, and dispatches email invitations to new team collaborators.
+ */
+async function inviteUser(data) {
+    try {
+        if (!server || !server.crud) return;
+
+        const inviteId = server.crud.ObjectId().toString();
+        let uid = data.uid;
+        delete data.uid;
+
+        let targetArray = "users"; // default fallback
+        let keyData = await server.crud.send({
+            method: "object.read",
+            host: data.host,
+            array: "keys",
+            $filter: {
+                query: { key: data.user_id },
+                limit: 1
+            },
+            organization_id: data.organization_id || (data.socket && data.socket.organization_id)
+        });
+
+        if (keyData && keyData.object && keyData.object.length > 0 && keyData.object[0].array) {
+            targetArray = keyData.object[0].array;
+        }
+
+        data.method = "object.update";
+        data.array = targetArray;
+        data.object = {
+            _id: data.user_id,
+            "$push.invitations": inviteId,
+            "$addToSet.members": data.email
+        };
+
+        // Bypass crud.sync check to update across local clients simultaneously
+        data.updateDB = true;
+
+        const updatedData = await server.crud.send(data);
+
+        let invitee = await server.crud.send({
+            method: "object.read",
+            host: updatedData.host,
+            array: "users",
+            $filter: {
+                query: { email: updatedData.email },
+                limit: 1
+            },
+            organization_id: updatedData.organization_id
+        });
+
+        if (invitee.object && invitee.object[0]) {
+            invitee = invitee.object[0]._id;
+        } else {
+            invitee = "";
+        }
+
+        let htmlBody = `
 <html>
 <head>
   <title>Welcome to Yellow Oracle!</title>
@@ -246,164 +342,174 @@ class CoCreateUser {
 <body>
   <p>Hello,</p>
 
-  <p>You have been invited to join ${data.name} on Yellow Oracle.</p>
+  <p>You have been invited to join ${updatedData.name} on Yellow Oracle.</p>
 
-  <p><a href="${data.origin}${data.path}?email=${data.email}&token=${inviteId}&user_id=${invitee}&name=${data.name}" style="color: #ffffff; background-color: #FFD700; padding: 10px 20px; text-decoration: none; border-radius: 5px;">Accept Your Invitation</a></p>
+  <p><a href="${updatedData.origin}${updatedData.path}?email=${updatedData.email}&token=${inviteId}&user_id=${invitee}&name=${updatedData.name}" style="color: #ffffff; background-color: #FFD700; padding: 10px 20px; text-decoration: none; border-radius: 5px;">Accept Your Invitation</a></p>
 
-  <p>Please note, this invitation link will expire in 48 hours. We encourage you to accept it soon to begin your journey with ${data.name} on Yellow Oracle.</p>
+  <p>Please note, this invitation link will expire in 48 hours. We encourage you to accept it soon to begin your journey with ${updatedData.name} on Yellow Oracle.</p>
 
   <p>If the button above doesn't work, you can copy and paste the following URL into your web browser:</p>
-  <p><a href="${data.origin}${data.path}?email=${data.email}&token=${inviteId}&user_id=${invitee}&name=${data.name}">${data.origin}${data.path}?email=${data.email}&token=${inviteId}&user_id=${invitee}&name=${data.name}</a></p>
+  <p><a href="${updatedData.origin}${updatedData.path}?email=${updatedData.email}&token=${inviteId}&user_id=${invitee}&name=${updatedData.name}">${updatedData.origin}${updatedData.path}?email=${updatedData.email}&token=${inviteId}&user_id=${invitee}&name=${updatedData.name}</a></p>
 
-  <p>If you received this invitation by mistake or have any questions, please don't hesitate to get in touch with our support team at <a href="mailto:support@${data.hostname}">support@${data.hostname}</a>.</p>
+  <p>If you received this invitation by mistake or have any questions, please don't hesitate to get in touch with our support team at <a href="mailto:support@${updatedData.hostname}">support@${updatedData.hostname}</a>.</p>
 
-  <p>We look forward to welcoming you to ${data.name}'s Yellow Oracle account!</p>
+  <p>We look forward to welcoming you to ${updatedData.name}'s Yellow Oracle account!</p>
 
 </body>
-</html>                                                                             
+</html>                                                                                                            
 `;
 
-			let email = {
-				method: "postmark.sendEmail",
-				host: data.host,
-				postmark: {
-					From: data.from,
-					To: data.email,
-					Subject: `${data.name} has invited you to join them on Yellow Oracle`,
-					HtmlBody: htmlBody,
-					TextBody:
-						"Hello, \n\nWe received a request to reset the password for your account.If you did not make this request, please ignore this email.Otherwise, you can reset your password by copying and pasting the following link into your browser: https://example.com/reset-password\n\nThis link will expire in 24 hours for your security.\n\nNeed more help? Our support team is here for you at support@example.com.\n\nThank you for using our services!\n\nBest regards,\nThe [Your Company] Team",
-					MessageStream: "outbound"
-				},
-				organization_id: data.organization_id
-			};
-
-			// TODO: wsManager.emit('postmark', email) needs to await response
-			this.wsManager.emit("postmark", email);
-
-			let response = {
-				socket: data.socket,
-				host: data.host,
-				method: "inviteUser",
-				success: true,
-				message: "Succesfully sent invite",
-				organization_id: data.organization_id,
-				uid
-			};
-
-			this.wsManager.send(response);
-		} catch (error) {
-			data.error = error;
-			this.wsManager.send(data);
-
-			console.log("Invite User failed", error);
-		}
-	}
-
-	async acceptInvite(data) {
-		const self = this;
-		try {
-			if (!data.token || !data.user_id) {
-				// TODO: handle error
-				return;
-			}
-
-			let uid = data.uid;
-			delete data.uid;
-
-			data.method = "object.update";
-			data.array = "users";
-			data.object = {
-				"$pull.invitations": data.token,
-				"$pull.members": data.email
-			};
-			data.$filter = {
-				query: {
-					invitations: { $in: [data.token] },
-					members: { $in: [data.email] }
-				},
-				limit: 2
-			};
-
-			// TODO: upodateDB is a temp solution to by pass crud.sync clientId as all crud methods are ignored fro same clientid except for read
-			data.updateDB = true;
-
-			data = await this.crud.send(data);
-
-			let response = {
-				socket: data.socket,
-				host: data.host,
-				method: "acceptInvite",
-				success: false,
-				message:
-					"The token is invalid or has expired. However, you can still access your account. Please request a new invite to proceed, and feel free to explore the available features while you wait.",
-				organization_id: data.organization_id,
-				uid
-			};
-
-			for (let object of data.object) {
-				if (object._id) {
-					delete data.$filter;
-					data.object = {
-						_id: object._id,
-						"$addToSet.members": data.user_id
-					};
-					data = await this.crud.send(data);
-					this.crud.send({
-						method: "object.update",
-						host: data.host,
-						array: "users",
-						object: {
-							_id: data.user_id,
-							memberAccount: object._id,
-							subscription: "6571fe530c48ef6970900a82"
-						}
-					});
-					response.success = true;
-					response.message = "Invite Accepted";
-					break;
-				}
-			}
-
-			self.wsManager.send(response);
-		} catch (error) {
-			console.log("Accept invite failed", error);
-		}
-	}
-
-	// TODO: email or phone param refrencing the object to execute via api
-	async forgotPassword(data) {
-		const self = this;
-		try {
-			const recoveryId = this.crud.ObjectId().toString();
-			let socket = data.socket;
-			delete data.socket;
-
-			data.method = "object.update";
-			data.array = "keys";
-			data.object = { recoveryId };
-			data.$filter = {
-				query: { email: data.email },
-				limit: 1
-			};
-
-			this.crud.send(data).then(async (data) => {
-				let response = {
-					socket,
-					host: data.host,
-					method: "forgotPassword",
-					success: false,
-					message: "Email does not exist",
-					organization_id: data.organization_id,
-					uid: data.uid
-				};
-
-				for (let object of data.object) {
-					if (object._id) {
-						// TODO: sendEmail
-						response.success = true;
-						response.message = "Email Sent";
-						let htmlBody = `
+        let email = {
+            method: "postmark.sendEmail",
+            host: updatedData.host,
+            postmark: {
+                From: updatedData.from,
+                To: updatedData.email,
+                Subject: `${updatedData.name} has invited you to join them on Yellow Oracle`,
+                HtmlBody: htmlBody,
+                TextBody:
+                    "Hello, \n\nWe received a request to join Yellow Oracle. Please copy and paste the invitation link directly to proceed.",
+                MessageStream: "outbound"
+            },
+            organization_id: updatedData.organization_id
+        };
+
+        if (server.wsManager) {
+            server.wsManager.emit("postmark", email);
+        }
+
+        let response = {
+            socket: updatedData.socket,
+            host: updatedData.host,
+            method: "inviteUser",
+            success: true,
+            message: "Successfully sent invite",
+            organization_id: updatedData.organization_id,
+            uid
+        };
+
+        if (server.wsManager) {
+            server.wsManager.send(response);
+        }
+    } catch (error) {
+        data.error = error;
+        if (server && server.wsManager) {
+            server.wsManager.send(data);
+        }
+        console.error("Invite User failed", error);
+    }
+}
+
+/**
+ * Validates outstanding team tokens and connects user accounts to parent environments.
+ */
+async function acceptInvite(data) {
+    try {
+        if (!server || !server.crud) return;
+        if (!data.token || !data.user_id) {
+            return;
+        }
+
+        let uid = data.uid;
+        delete data.uid;
+
+        data.method = "object.update";
+        data.array = "users";
+        data.object = {
+            "$pull.invitations": data.token,
+            "$pull.members": data.email
+        };
+        data.$filter = {
+            query: {
+                invitations: { $in: [data.token] },
+                members: { $in: [data.email] }
+            },
+            limit: 2
+        };
+
+        data.updateDB = true;
+
+        const updatedData = await server.crud.send(data);
+
+        let response = {
+            socket: updatedData.socket,
+            host: updatedData.host,
+            method: "acceptInvite",
+            success: false,
+            message:
+                "The token is invalid or has expired. However, you can still access your account. Please request a new invite to proceed, and feel free to explore the available features while you wait.",
+            organization_id: updatedData.organization_id,
+            uid
+        };
+
+        for (let object of updatedData.object) {
+            if (object._id) {
+                delete updatedData.$filter;
+                updatedData.object = {
+                    _id: object._id,
+                    "$addToSet.members": updatedData.user_id
+                };
+                const finalData = await server.crud.send(updatedData);
+                await server.crud.send({
+                    method: "object.update",
+                    host: finalData.host,
+                    array: "users",
+                    object: {
+                        _id: finalData.user_id,
+                        memberAccount: object._id,
+                        subscription: "6571fe530c48ef6970900a82"
+                    }
+                });
+                response.success = true;
+                response.message = "Invite Accepted";
+                break;
+            }
+        }
+
+        if (server.wsManager) {
+            server.wsManager.send(response);
+        }
+    } catch (error) {
+        console.error("Accept invite failed", error);
+    }
+}
+
+/**
+ * Constructs recovery parameters and sends secure password-reset tokens to verified accounts.
+ */
+async function forgotPassword(data) {
+    try {
+        if (!server || !server.crud) return;
+
+        const recoveryId = server.crud.ObjectId().toString();
+        let socket = data.socket;
+        delete data.socket;
+
+        data.method = "object.update";
+        data.array = "keys";
+        data.object = { recoveryId };
+        data.$filter = {
+            query: { email: data.email },
+            limit: 1
+        };
+
+        const result = await server.crud.send(data);
+
+        let response = {
+            socket,
+            host: result.host,
+            method: "forgotPassword",
+            success: false,
+            message: "Email does not exist",
+            organization_id: result.organization_id,
+            uid: result.uid
+        };
+
+        for (let object of result.object) {
+            if (object._id) {
+                response.success = true;
+                response.message = "Email Sent";
+                let htmlBody = `
 <html>
 <head>
   <title>Reset Your Password</title>
@@ -413,87 +519,117 @@ class CoCreateUser {
 
   <p>We received a request to reset the password for your account. If you did not make this request, please ignore this email. Otherwise, you can reset your password using the link below.</p>
 
-  <p><a href="${data.origin}${data.path}?email=${data.email}&token=${recoveryId}&recoveyId=${recoveryId}" style="color: #ffffff; background-color: #007bff; padding: 10px 20px; text-decoration: none; border-radius: 5px;">Reset My Password</a></p>
+  <p><a href="${result.origin}${result.path}?email=${result.email}&token=${recoveryId}&recoveyId=${recoveryId}" style="color: #ffffff; background-color: #007bff; padding: 10px 20px; text-decoration: none; border-radius: 5px;">Reset My Password</a></p>
 
   <p>This link will expire in 24 hours for your security.</p>
 
   <p>If you're having trouble with the button above, copy and paste the URL below into your web browser:</p>
-  <p><a href="${data.origin}${data.path}?email=${data.email}&token=${recoveryId}&recoveyId=${recoveryId}"">${data.origin}${data.path}?email=${data.email}&token=${recoveryId}&recoveyId=${recoveryId}"</a></p>
+  <p><a href="${result.origin}${result.path}?email=${result.email}&token=${recoveryId}&recoveyId=${recoveryId}">${result.origin}${result.path}?email=${result.email}&token=${recoveryId}&recoveyId=${recoveryId}</a></p>
 
-  <p>Need more help? Our support team is here for you. Contact us at <a href="mailto:support@${data.hostname}">support@${data.hostname}</a>.</p>
+  <p>Need more help? Our support team is here for you. Contact us at <a href="mailto:support@${result.hostname}">support@${result.hostname}</a>.</p>
 
   <p>Thank you for using our services!</p>
 
 </body>
 </html>
 `;
-						let email = {
-							method: "postmark.sendEmail",
-							host: data.host,
-							postmark: {
-								From: data.from,
-								To: data.email,
-								Subject: "Reset Your Password Easily",
-								HtmlBody: htmlBody,
-								TextBody:
-									"Hello, \n\nWe received a request to reset the password for your account. If you did not make this request, please ignore this email. Otherwise, you can reset your password by copying and pasting the following link into your browser: https://example.com/reset-password\n\nThis link will expire in 24 hours for your security.\n\nNeed more help? Our support team is here for you at support@example.com.\n\nThank you for using our services!\n\nBest regards,\nThe [Your Company] Team",
-								MessageStream: "outbound"
-							},
-							organization_id: data.organization_id
-						};
-
-						// TODO: wsManager.emit('postmark', email) needs to await response
-						self.wsManager.emit("postmark", email);
-
-						break;
-					}
-				}
-
-				self.wsManager.send(response);
-			});
-		} catch (error) {
-			console.log("Forgot Password failed", error);
-		}
-	}
-
-	async resetPassword(data) {
-		const self = this;
-		try {
-			if (!data.email || !data.password || !data.token) return;
-
-			data.method = "object.update";
-			data.array = "keys";
-			data.object = { password: data.password, recoveryId: "" };
-			data.$filter = {
-				query: { email: data.email, recoveryId: data.token },
-				limit: 1
-			};
-
-			this.crud.send(data).then(async (data) => {
-				let response = {
-					socket: data.socket,
-					host: data.host,
-					method: "resetPassword",
-					success: false,
-					message: "Token is invalid or has expired",
-					organization_id: data.organization_id,
-					uid: data.uid
-				};
-
-				for (let object of data.object) {
-					if (object._id) {
-						response.success = true;
-						response.message = "Password reset succesfull";
-						break;
-					}
-				}
-
-				self.wsManager.send(response);
-			});
-		} catch (error) {
-			console.log("Password reset failed", error);
-		}
-	}
+                let email = {
+                    method: "postmark.sendEmail",
+                    host: result.host,
+                    postmark: {
+                        From: result.from,
+                        To: result.email,
+                        Subject: "Reset Your Password Easily",
+                        HtmlBody: htmlBody,
+                        TextBody:
+                            "Hello, \n\nWe received a request to reset the password for your account. If you did not make this request, please ignore this email. Otherwise, you can reset your password by accessing your personal recovery link directly.",
+                        MessageStream: "outbound"
+                    },
+                    organization_id: result.organization_id
+                };
+
+                if (server.wsManager) {
+                    server.wsManager.emit("postmark", email);
+                }
+                break;
+            }
+        }
+
+        if (server.wsManager) {
+            server.wsManager.send(response);
+        }
+    } catch (error) {
+        console.error("Forgot Password failed", error);
+    }
 }
 
-module.exports = CoCreateUser;
+/**
+ * Validates individual recovery tokens and writes new user credentials safely.
+ */
+async function resetPassword(data) {
+    try {
+        if (!server || !server.crud) return;
+        if (!data.email || !data.password || !data.token) return;
+
+        data.method = "object.update";
+        data.array = "keys";
+        data.object = { password: data.password, recoveryId: "" };
+        data.$filter = {
+            query: { email: data.email, recoveryId: data.token },
+            limit: 1
+        };
+
+        const result = await server.crud.send(data);
+
+        let response = {
+            socket: result.socket,
+            host: result.host,
+            method: "resetPassword",
+            success: false,
+            message: "Token is invalid or has expired",
+            organization_id: result.organization_id,
+            uid: result.uid
+        };
+
+        for (let object of result.object) {
+            if (object._id) {
+                response.success = true;
+                response.message = "Password reset successful";
+                break;
+            }
+        }
+
+        if (server.wsManager) {
+            server.wsManager.send(response);
+        }
+    } catch (error) {
+        console.error("Password reset failed", error);
+    }
+}
+
+/**
+ * Auto-initialization loop.
+ * Silently polls to verify that the unified server orchestrator is fully loaded,
+ * and that both the database (crud) and socket manager (wsManager) have completed
+ * their initial handshakes, then attaches active user event triggers.
+ */
+function init() {
+    if (server && server.isInitialized && server.crud && server.wsManager) {
+        server.wsManager.on("signUp", (data) => signUp(data));
+        server.wsManager.on("signIn", (data) => signIn(data));
+        server.wsManager.on("userStatus", (data) => userStatus(data));
+        server.wsManager.on("checkSession", (data) => checkSession(data));
+        server.wsManager.on("inviteUser", (data) => inviteUser(data));
+        server.wsManager.on("acceptInvite", (data) => acceptInvite(data));
+        server.wsManager.on("forgotPassword", (data) => forgotPassword(data));
+        server.wsManager.on("resetPassword", (data) => resetPassword(data));
+    } else {
+        // If the shared server orchestrator is not yet ready, check again in 500ms
+        setTimeout(init, 500);
+    }
+}
+
+// Auto-execute initialization instantly upon module load
+init();
+
+export default init;