@ozdao/martyrs 0.2.477 → 0.2.479

package/dist/organizations.server.js

@@ -1,1155 +1,289 @@
-"use strict";
-const _commonjsHelpers = require("./_commonjsHelpers-DHfMLFPC.js");
-const require$$0$1 = require("jsonwebtoken");
-const globals_cache = require("./globals.cache-CwWvNGFQ.js");
-const queryProcessor = require("./queryProcessor-DSUqSk3I.js");
-const require$$0 = require("mongoose");
-const require$$1 = require("@googlemaps/google-maps-services-js");
-const addMembersQuantity = require("./addMembersQuantity-DxWjHK1K.js");
-const require$$0$2 = require("uuidv4");
-const mailing = require("./mailing-D4kWlk3_.js");
-const index = require("./index-BOmxJQ5W.js");
-const globals_abac = require("./globals.abac-Bn-4tbX8.js");
-const engagement_schema = require("./engagement.schema-DAiXsvh1.js");
-const ownership_schema = require("./ownership.schema-MxfJlPtq.js");
-const credentials_schema = require("./credentials.schema-BmOPv6FD.js");
-const globals_verifier = require("./globals.verifier-CKYpYfQl.js");
-var departments_controller;
-var hasRequiredDepartments_controller;
-function requireDepartments_controller() {
-  if (hasRequiredDepartments_controller) return departments_controller;
-  hasRequiredDepartments_controller = 1;
-  const controllerFactory = (db) => {
-    const Department = db.department;
-    const readOne = (req, res) => {
-      Department.findOne({ _id: req.params._id }).populate("members.user").populate("subdepartments").then((department) => {
-        if (!department) {
-          return res.status(404).send({ message: "Отдел не найден" });
-        }
-        res.send(department);
-      }).catch((err) => {
-        res.status(500).send({ message: err.message });
-      });
-    };
-    const read = (req, res) => {
-      let query = {};
-      let options = {};
-      if (req.query.organization) {
-        query.organization = new db.mongoose.Types.ObjectId(req.query.organization);
+import { A as ABAC } from "./abac-BuL5pUZ4.js";
+import { a as applyCredentialsSchema } from "./credentials.schema-C9FB2EyY.js";
+import { a as applyOwnershipSchema } from "./ownership.schema-CCZX5vfw.js";
+import { a as applyEngagementSchema } from "./engagement.schema-Dh1adRsn.js";
+import { m as middlewareIndexFactory } from "./index-CsJwdsBW.js";
+import { m as mailing } from "./mailing-C11EYWm-.js";
+import { uuid } from "uuidv4";
+import { q as queryProcessorGlobals } from "./queryProcessor-CVcLPEnv.js";
+import { Types } from "mongoose";
+import { g as globalsabac } from "./globals.abac-DBV_kaOq.js";
+import { C as Cache } from "./globals.logger-Bf6rRU7j.js";
+import { a as addUserStatusFields, b as addMembersQuantity } from "./addUserStatusFields-B8g3DAuZ.js";
+import jwt from "jsonwebtoken";
+import * as googleMapsServicesJs from "@googlemaps/google-maps-services-js";
+import { V as Verifier, a as Validator } from "./globals.verifier-CWFz5Gh2.js";
+const controllerFactory$2 = (db) => {
+  const Department = db.department;
+  const readOne = (req, res) => {
+    Department.findOne({ _id: req.params._id }).populate("members.user").populate("subdepartments").then((department) => {
+      if (!department) {
+        return res.status(404).send({ message: "Отдел не найден" });
       }
-      if (req.query.hidden) {
-        query.hidden = req.query.hidden;
-      }
-      Department.find(query, null, options).populate("members.user").populate("subdepartments").then((departments) => {
-        if (!departments) {
-          return res.status(404).send({ message: "Departments not found" });
-        }
-        res.send(departments);
-      }).catch((err) => {
-        res.status(500).send({ message: err.message });
-      });
-    };
-    const create = async (req, res) => {
-      try {
-        const newDepartment = new Department({
-          ...req.body,
-          organization: req.params._id
-        });
-        const data = await newDepartment.save();
-        res.send(data);
-      } catch (err) {
-        res.status(500).send({ message: err.message });
-      }
-    };
-    const update = (req, res) => {
-      Department.findOneAndUpdate({ _id: req.body._id }, req.body, { new: true }).then((department) => {
-        if (!department) {
-          return res.status(404).send({ message: "Department not found" });
-        }
-        res.send(department);
-      }).catch((err) => {
-        res.status(500).send({ message: err.message });
-      });
-    };
-    const deleteDepartment = (req, res) => {
-      Department.findOneAndRemove({ _id: req.body._id, organization: req.params._id }).then((department) => {
-        if (!department) {
-          return res.status(404).send({ message: "Department not found" });
-        }
-        res.send({ message: "Department deleted successfully" });
-      }).catch((err) => {
-        res.status(500).send({ message: err.message });
-      });
-    };
-    return {
-      readOne,
-      read,
-      create,
-      update,
-      delete: deleteDepartment
-    };
-  };
-  departments_controller = controllerFactory;
-  return departments_controller;
-}
-var queryProcessorOrganizations;
-var hasRequiredQueryProcessorOrganizations;
-function requireQueryProcessorOrganizations() {
-  if (hasRequiredQueryProcessorOrganizations) return queryProcessorOrganizations;
-  hasRequiredQueryProcessorOrganizations = 1;
-  const ObjectId = require$$0.Types.ObjectId;
-  const { Client } = require$$1;
-  const client = new Client({});
-  const getRequestedLookups = (query) => query.lookup ? Array.isArray(query.lookup) ? query.lookup : [query.lookup] : [];
-  const getLookupStages = (requestedLookups, configs) => {
-    if (!requestedLookups) return [];
-    const lookupsArray = Array.isArray(requestedLookups) ? requestedLookups : requestedLookups.split(",");
-    return lookupsArray.map((lookup) => configs[lookup]).filter(Boolean).flatMap((config) => [
-      { $lookup: config.lookup },
-      // Оберните lookup в объект с $lookup
-      ...config.additionalStages || []
-    ]);
+      res.send(department);
+    }).catch((err) => {
+      res.status(500).send({ message: err.message });
+    });
   };
-  const getLocationStages = async (query) => {
-    if (!hasLocationParams(query)) {
-      return { stages: [], userLocation: null };
+  const read = (req, res) => {
+    let query = {};
+    let options = {};
+    if (req.query.organization) {
+      query.organization = new db.mongoose.Types.ObjectId(req.query.organization);
     }
-    const location = await resolveLocation(query);
-    const radius = getRadius(query);
-    const geoStages = radius ? [
-      {
-        $match: {
-          "spots.location.coordinates": {
-            $geoWithin: {
-              $centerSphere: [[location.coordinates[0], location.coordinates[1]], radius]
-            }
-          }
-        }
+    if (req.query.hidden) {
+      query.hidden = req.query.hidden;
+    }
+    Department.find(query, null, options).populate("members.user").populate("subdepartments").then((departments) => {
+      if (!departments) {
+        return res.status(404).send({ message: "Departments not found" });
       }
-    ] : [];
-    return {
-      stages: [...geoStages, ...getDistanceStages(location)],
-      userLocation: location
-    };
-  };
-  const getRadius = (query) => {
-    if (query.locationRadius) return parseFloat(query.locationRadius) / 6378.1;
-    if (query.city) return 25 / 6378.1;
-    if (query.state) return 50 / 6378.1;
-    return null;
+      res.send(departments);
+    }).catch((err) => {
+      res.status(500).send({ message: err.message });
+    });
   };
-  const hasLocationParams = (query) => query.location || query.address || query.city || query.state || query.country;
-  const resolveLocation = async (query) => {
-    if (query.location) {
-      const parsedLocation = typeof query.location === "string" ? JSON.parse(query.location) : query.location;
-      const coordinates = parsedLocation.lng ? [parsedLocation.lng, parsedLocation.lat] : parsedLocation.coordinates;
-      return { coordinates: coordinates.map((coord) => parseFloat(coord)) };
-    }
-    const searchString = [query.address, query.city, query.state, query.country].filter(Boolean).join(", ");
+  const create = async (req, res) => {
     try {
-      const geoResponse = await client.geocode({
-        params: {
-          address: searchString,
-          key: process.env.GOOGLE_MAPS_API_KEY
-        }
+      const newDepartment = new Department({
+        ...req.body,
+        organization: req.params._id
       });
-      if (!geoResponse.data.results?.length) {
-        throw new Error("Unable to geocode the provided location.");
-      }
-      const { lng, lat } = geoResponse.data.results[0].geometry.location;
-      return { coordinates: [lng, lat] };
+      const data = await newDepartment.save();
+      res.send(data);
     } catch (err) {
-      throw new Error("Error occurred while geocoding.");
+      res.status(500).send({ message: err.message });
     }
   };
-  const getDistanceStages = (location) => [
-    {
-      $addFields: {
-        spots: {
-          $map: {
-            input: "$spots",
-            as: "spot",
-            in: {
-              $mergeObjects: [
-                "$$spot",
-                {
-                  distance: {
-                    $function: {
-                      body: `function(spotCoords, userCoords, isMiles) {
-                      function toRad(x) {
-                        return x * Math.PI / 180;
-                      }
-                      var lon1 = spotCoords[0];
-                      var lat1 = spotCoords[1];
-                      var lon2 = userCoords[0];
-                      var lat2 = userCoords[1];
-                      var R = 6371;
-                      if (isMiles) R = 3959;
-                      var x1 = lat2 - lat1;
-                      var dLat = toRad(x1);
-                      var x2 = lon2 - lon1;
-                      var dLon = toRad(x2);
-                      var a = Math.sin(dLat / 2) * Math.sin(dLat / 2) +
-                              Math.cos(toRad(lat1)) * Math.cos(toRad(lat2)) *
-                              Math.sin(dLon / 2) * Math.sin(dLon / 2);
-                      var c = 2 * Math.atan2(Math.sqrt(a), Math.sqrt(1 - a));
-                      var d = R * c;
-                      return d;
-                    }`,
-                      args: ["$$spot.location.coordinates", location.coordinates, false],
-                      lang: "js"
-                    }
-                  }
-                }
-              ]
-            }
-          }
-        }
+  const update = (req, res) => {
+    Department.findOneAndUpdate({ _id: req.body._id }, req.body, { new: true }).then((department) => {
+      if (!department) {
+        return res.status(404).send({ message: "Department not found" });
       }
-    },
-    {
-      $addFields: {
-        distance: { $min: "$spots.distance" },
-        distanceExist: {
-          $cond: {
-            if: { $eq: [{ $type: "$distance" }, "double"] },
-            then: true,
-            else: false
-          }
-        }
-      }
-    }
-  ];
-  const getPriceConditions = (prices) => {
-    if (!prices) return [];
-    const priceRanges = prices.split(",");
-    const priceConditions = priceRanges.map((priceRange) => {
-      if (priceRange.startsWith("<")) return { "products.price": { $lt: parseInt(priceRange.slice(1)) } };
-      if (priceRange.startsWith(">")) return { "products.price": { $gt: parseInt(priceRange.slice(1)) } };
-      const [min, max] = priceRange.split("-").map(Number);
-      return { "products.price": { $gte: min, $lte: max } };
+      res.send(department);
+    }).catch((err) => {
+      res.status(500).send({ message: err.message });
     });
-    return priceConditions.length > 0 ? [{ $match: { $or: priceConditions } }] : [];
-  };
-  const getContainConditions = (contain) => {
-    if (!contain) return [];
-    const conditions = contain.map((property) => ({
-      [property]: { $exists: true, $not: { $size: 0 } }
-    }));
-    return conditions.length > 0 ? [{ $match: { $and: conditions } }] : [];
   };
-  const getBasicMatchConditions = (query) => [
-    ...query._id ? [{ _id: new ObjectId(query._id) }] : [],
-    ...query.owner ? [{ owner: new ObjectId(query.owner) }] : [],
-    ...query.types ? [{ types: { $in: query.types } }] : [],
-    ...query.member ? [{
-      memberships: {
-        $elemMatch: {
-          user: new ObjectId(query.member),
-          role: "member"
-        }
-      }
-    }] : [],
-    ...query.subscriber ? [{
-      memberships: {
-        $elemMatch: {
-          user: new ObjectId(query.subscriber),
-          role: "subscriber"
-        }
+  const deleteDepartment = (req, res) => {
+    Department.findOneAndRemove({ _id: req.body._id, organization: req.params._id }).then((department) => {
+      if (!department) {
+        return res.status(404).send({ message: "Department not found" });
       }
-    }] : [],
-    ...query.categories?.split(",").length > 0 ? [{ "products.category": { $in: query.categories?.split(",") } }] : [],
-    ...query.delivery?.split(",").length > 0 ? [{ "spots.delivery": { $all: query.delivery?.split(",") } }] : []
-  ];
-  const getPostableConditions = (postableId) => {
-    if (!postableId) return [];
-    return [{
-      $match: {
-        $or: [
-          { owner: new ObjectId(postableId) },
-          {
-            $and: [
-              { types: { $elemMatch: { $eq: "public" } } },
-              {
-                memberships: {
-                  $elemMatch: {
-                    user: new ObjectId(postableId)
-                  }
-                }
-              }
-            ]
-          },
-          {
-            $and: [
-              { types: { $elemMatch: { $in: ["exclusive", "hidden"] } } },
-              {
-                memberships: {
-                  $elemMatch: {
-                    user: new ObjectId(postableId),
-                    role: { $ne: "subscriber" }
-                  }
-                }
-              }
-            ]
-          }
-        ]
-      }
-    }];
+      res.send({ message: "Department deleted successfully" });
+    }).catch((err) => {
+      res.status(500).send({ message: err.message });
+    });
   };
-  queryProcessorOrganizations = {
-    getRequestedLookups,
-    getLookupStages,
-    // 
-    getPriceConditions,
-    getContainConditions,
-    getLocationStages,
-    getDistanceStages,
-    getBasicMatchConditions,
-    getPostableConditions
+  return {
+    readOne,
+    read,
+    create,
+    update,
+    delete: deleteDepartment
   };
-  return queryProcessorOrganizations;
-}
-var lookupConfigs_1;
-var hasRequiredLookupConfigs;
-function requireLookupConfigs() {
-  if (hasRequiredLookupConfigs) return lookupConfigs_1;
-  hasRequiredLookupConfigs = 1;
-  const lookupConfigs = {
-    products: {
-      lookup: {
-        from: "products",
-        localField: "_id",
-        foreignField: "owner.target",
-        as: "products"
-      },
-      additionalStages: [{
-        $addFields: { numberOfProducts: { $size: "$products" } }
-      }]
+};
+const accessesSchema = {
+  categories: {
+    create: {
+      type: Boolean,
+      default: false
     },
-    blogposts: {
-      lookup: {
-        from: "blogposts",
-        localField: "_id",
-        foreignField: "owner.target",
-        as: "blogposts"
-      }
+    read: {
+      type: Boolean,
+      default: false
     },
-    departments: {
-      lookup: {
-        from: "departments",
-        localField: "_id",
-        foreignField: "organization",
-        as: "departments"
-      }
+    edit: {
+      type: Boolean,
+      default: false
     },
-    spots: {
-      lookup: {
-        from: "spots",
-        localField: "_id",
-        foreignField: "organization",
-        as: "spots"
-      }
+    delete: {
+      type: Boolean,
+      default: false
+    }
+  },
+  rents: {
+    create: {
+      type: Boolean,
+      default: false
     },
-    memberships: {
-      lookup: {
-        from: "memberships",
-        localField: "_id",
-        foreignField: "target",
-        as: "memberships"
-      }
+    read: {
+      type: Boolean,
+      default: false
+    },
+    edit: {
+      type: Boolean,
+      default: false
+    },
+    delete: {
+      type: Boolean,
+      default: false
     }
-  };
-  lookupConfigs_1 = lookupConfigs;
-  return lookupConfigs_1;
-}
-var organizations_controller;
-var hasRequiredOrganizations_controller;
-function requireOrganizations_controller() {
-  if (hasRequiredOrganizations_controller) return organizations_controller;
-  hasRequiredOrganizations_controller = 1;
-  const jwt = require$$0$1;
-  const Cache = globals_cache.requireGlobals_cache();
-  const queryProcessorGlobals = queryProcessor.requireQueryProcessor();
-  const {
-    getRequestedLookups,
-    getLookupStages,
-    getPostableConditions,
-    getPriceConditions,
-    getContainConditions,
-    getLocationStages,
-    getDistanceStages,
-    getBasicMatchConditions
-  } = requireQueryProcessorOrganizations();
-  const lookupConfigs = requireLookupConfigs();
-  const addUserStatusFields = addMembersQuantity.requireAddUserStatusFields();
-  const addMembersQuantity$1 = addMembersQuantity.requireAddMembersQuantity();
-  const controllerFactory = (db) => {
-    const Organization = db.organization;
-    const Department = db.department;
-    const Membership = db.membership;
-    const cache = new Cache({ ttlSeconds: 60 * 5 });
-    const read = async (req, res) => {
-      console.log("controller query", req.query);
-      try {
-        const cacheKey = JSON.stringify(req.query);
-        let cachedResult = await cache.get(cacheKey);
-        if (cachedResult) {
-          return res.status(200).send(cachedResult);
-        }
-        const requestedLookups = getRequestedLookups(req.query);
-        const matchConditions = getBasicMatchConditions(req.query);
-        const stages = [
-          ...getLookupStages(requestedLookups, lookupConfigs),
-          ...getPostableConditions(req.query.postable),
-          ...getContainConditions(req.query.contain),
-          ...queryProcessorGlobals.getSearchOptions(
-            req.query.search,
-            { fields: requestedLookups.includes("products") ? ["profile.name", "products.name"] : ["profile.name"] }
-          ),
-          ...requestedLookups.includes("products") && req.query.prices ? getPriceConditions(req.query.prices) : [],
-          ...requestedLookups.includes("spots") ? (await getLocationStages(req.query)).stages : [],
-          ...requestedLookups.includes("memberships") ? [
-            addUserStatusFields(req.query.user),
-            addMembersQuantity$1(req.query.user)
-          ] : [],
-          ...matchConditions.length > 0 ? [{ $match: { $and: matchConditions } }] : [],
-          ...queryProcessorGlobals.getSortingOptions(req.query.sortParam, req.query.sortOrder),
-          ...queryProcessorGlobals.getPaginationOptions(req.query.skip, req.query.limit)
-        ].filter(Boolean);
-        console.log(JSON.stringify(stages, null, 2));
-        const organizations = await Organization.aggregate(stages);
-        for (const org of organizations) {
-          const orgTag = `organization_${org._id}`;
-          await cache.setWithTags(cacheKey, organizations, [orgTag, "organizations"]);
-        }
-        res.status(200).send(organizations);
-      } catch (err) {
-        console.error(err);
-        res.status(500).send({ message: err.message });
-      }
-    };
-    const create = async (req, res) => {
-      if (req.body._id === null) {
-        delete req.body._id;
-      }
-      try {
-        const organization = new Organization(req.body);
-        const savedOrganization = await organization.save();
-        const membership = new Membership({
-          user: savedOrganization.owner,
-          type: "organization",
-          target: savedOrganization._id,
-          role: "owner",
-          label: "owner"
-        });
-        const savedMembership = await membership.save();
-        const orgTag = `organization_${savedOrganization._id}`;
-        await cache.delByTag(orgTag);
-        const organizationObject = savedOrganization.toObject();
-        const newCacheKey = JSON.stringify({ id: organizationObject._id });
-        await cache.setWithTags(newCacheKey, [organizationObject], [orgTag, "organizations"]);
-        res.status(201).json(savedOrganization);
-      } catch (error) {
-        console.error("Error:", error);
-        res.status(500).send(error);
-      }
-    };
-    const update = async (req, res) => {
-      try {
-        const organizationId = req.params._id;
-        const updatedData = req.body;
-        const organization = await Organization.findByIdAndUpdate(organizationId, updatedData, {
-          new: true,
-          runValidators: true
-        });
-        if (!organization) {
-          return res.status(404).json({ message: "Organization not found" });
-        }
-        const orgTag = `organization_${organizationId}`;
-        await cache.delByTag(orgTag);
-        const organizationObject = organization.toObject();
-        const updateCacheKey = JSON.stringify({ _id: organizationId });
-        await cache.setWithTags(updateCacheKey, [organizationObject], [orgTag, "organizations"]);
-        res.status(200).json({ message: "Organization updated successfully", organization });
-      } catch (error) {
-        res.status(500).json({ error: error.message });
-      }
-    };
-    const deleteOrganization = async (req, res) => {
-      try {
-        const organization = await Organization.findOneAndRemove({ _id: req.params._id });
-        if (!organization) {
-          return res.status(404).send({ message: "Organization not found" });
-        }
-        await Membership.deleteMany({ target: req.params._id });
-        const newToken = jwt.sign({
-          _id: req.userId,
-          // Предполагаю, что req.userId доступен
-          organization: null
-        }, process.env.SECRET_KEY, {
-          expiresIn: 86400
-          // 24 hours
-        });
-        const orgTag = `organization_${req.params._id}`;
-        await cache.delByTag(orgTag);
-        res.send({ newToken });
-      } catch (err) {
-        res.status(500).send({ message: err.message });
-      }
-    };
-    const checkAccesses = async (req, res) => {
-      try {
-        const uid = new db.mongoose.Types.ObjectId(req.userId);
-        const cacheKey = `accesses_${uid.toString()}`;
-        const cachedResult = await cache.get(cacheKey);
-        if (cachedResult) {
-          return res.status(200).json(cachedResult);
-        }
-        const depts = await Department.find({ "members.user": uid }).lean();
-        const ownedOrgs = await Organization.find({ owner: uid }).lean();
-        const ownedOrgIds = ownedOrgs.map((org) => org._id.toString());
-        const accesses = {};
-        const processAccesses = (orgId, isOwner, deptAccesses) => {
-          if (!accesses[orgId]) {
-            accesses[orgId] = { organization: orgId, rights: {} };
-          }
-          const rights = accesses[orgId].rights;
-          const defaultAccesses = new Department().accesses;
-          const accessData = isOwner ? defaultAccesses : deptAccesses;
-          Object.keys(accessData).forEach((key) => {
-            if (!rights[key]) {
-              rights[key] = {};
-            }
-            const accessRights = accessData[key];
-            Object.entries(accessRights).forEach(([right, value]) => {
-              rights[key][right] = isOwner || rights[key][right] || value;
-            });
-          });
-        };
-        const orgDepts = depts.reduce((acc, dept) => {
-          const orgId = dept.organization.toString();
-          if (!acc[orgId]) {
-            acc[orgId] = [];
-          }
-          acc[orgId].push(dept);
-          return acc;
-        }, {});
-        Object.entries(orgDepts).forEach(([orgId, departments]) => {
-          const combinedAccesses = departments.reduce((acc, dept) => {
-            Object.entries(dept.accesses).forEach(([key, rights]) => {
-              if (!acc[key]) {
-                acc[key] = {};
-              }
-              Object.entries(rights).forEach(([right, value]) => {
-                acc[key][right] = acc[key][right] || value;
-              });
-            });
-            return acc;
-          }, {});
-          processAccesses(orgId, false, combinedAccesses);
-        });
-        ownedOrgIds.forEach((orgId) => {
-          processAccesses(orgId, true, {});
-        });
-        const accessArray = Object.values(accesses);
-        const userTag = `access_${uid.toString()}`;
-        await cache.setWithTags(cacheKey, accessArray, [userTag, "accesses"]);
-        res.status(200).json(accessArray);
-      } catch (err) {
-        console.error("Error getting accesses:", err);
-        res.status(500).json({ message: "Internal server error" });
-      }
-    };
-    return {
-      fetch,
-      read,
-      create,
-      update,
-      delete: deleteOrganization,
-      // Map the method to 'delete' key
-      checkAccesses
-    };
-  };
-  organizations_controller = controllerFactory;
-  return organizations_controller;
-}
-var memberships_controller;
-var hasRequiredMemberships_controller;
-function requireMemberships_controller() {
-  if (hasRequiredMemberships_controller) return memberships_controller;
-  hasRequiredMemberships_controller = 1;
-  const ObjectId = require$$0.Types.ObjectId;
-  const queryProcessorGlobals = queryProcessor.requireQueryProcessor();
-  const controllerFactory = (db) => {
-    const Membership = db.membership;
-    const Department = db.department;
-    const read = async (req, res) => {
-      try {
-        let search = req.query.search;
-        let regexPattern = "";
-        if (search) {
-          search = search.replace(/[-\/\\^$*+?.()|[\]{}]/g, "\\$&");
-          const parts = search.split(".");
-          if (parts.length === 2) {
-            regexPattern = parts.join("\\.");
-          } else {
-            regexPattern = search;
-          }
-        }
-        const memberships = await Membership.aggregate([
-          {
-            $lookup: {
-              from: "users",
-              localField: "user",
-              foreignField: "_id",
-              as: "user"
-            }
-          },
-          {
-            $match: {
-              ...req.query.user && { user: new ObjectId(req.query.user) },
-              ...req.query.type && { type: req.query.type },
-              ...req.query.target && { target: new ObjectId(req.query.target) },
-              ...req.query.role && { role: { $in: req.query.role } },
-              ...req.query.search && {
-                $or: [
-                  { "user.profile.name": { $regex: regexPattern, $options: "i" } },
-                  { "user.email": { $regex: regexPattern, $options: "i" } },
-                  { "user.phone": { $regex: regexPattern, $options: "i" } }
-                ]
-              }
-            }
-          },
-          {
-            $unwind: "$user"
-          },
-          // Pagination
-          ...queryProcessorGlobals.getSortingOptions(
-            req.query.sortParam,
-            req.query.sortOrder
-          ),
-          ...queryProcessorGlobals.getPaginationOptions(
-            req.query.skip,
-            req.query.limit
-          )
-        ]);
-        if (!memberships) {
-          return res.status(404).send({ errorCode: "MEMBERSHIPS_NOT_FOUND" });
-        }
-        res.send(memberships);
-      } catch (err) {
-        console.log(err);
-        res.status(500).send({ errorCode: "SERVER_ERROR" });
-      }
-    };
-    const create = async (req, res) => {
-      const newMembership = new Membership({
-        user: req.body.user,
-        type: req.body.type,
-        target: req.body.target,
-        role: req.body.role
-      });
-      try {
-        const data = await newMembership.save();
-        res.send(data);
-      } catch (err) {
-        console.log(err);
-        res.status(500).send({ errorCode: "SERVER_ERROR" });
-      }
-    };
-    const update = async (req, res) => {
-      try {
-        const membership = await Membership.findByIdAndUpdate(req.body._id, req.body, { new: true });
-        if (!membership) {
-          return res.status(404).send({ errorCode: "MEMBERSHIP_NOT_FOUND" });
-        }
-        res.send(membership);
-      } catch (err) {
-        res.status(500).send({ errorCode: "SERVER_ERROR" });
-      }
-    };
-    const deleteMembership = async (req, res) => {
-      const { _id, type, target, user, role } = req.body;
-      try {
-        const membership = _id ? await Membership.findOneAndDelete({ _id: new ObjectId(_id) }) : await Membership.findOneAndDelete({ type, target, user, role });
-        if (!membership) {
-          return res.status(404).send({ errorCode: "MEMBERSHIP_NOT_FOUND" });
-        }
-        if (membership.type === "organization") {
-          await Department.updateMany(
-            { organization: target },
-            { $pull: { members: { user } } }
-          );
-        }
-        res.status(200).send(membership);
-      } catch (error) {
-        console.log(error);
-        res.status(500).send({ errorCode: "SERVER_ERROR" });
-      }
-    };
-    return {
-      read,
-      create,
-      update,
-      deleteMembership
-    };
-  };
-  memberships_controller = controllerFactory;
-  return memberships_controller;
-}
-var invites_controller;
-var hasRequiredInvites_controller;
-function requireInvites_controller() {
-  if (hasRequiredInvites_controller) return invites_controller;
-  hasRequiredInvites_controller = 1;
-  const { uuid } = require$$0$2;
-  const { sendEmail, sendSms } = mailing.requireMailing();
-  const сontrollerFactory = (db) => {
-    const User = db.user;
-    const Invite = db.invite;
-    const Membership = db.membership;
-    const getOneByCode = async (req, res) => {
-      try {
-        const invite = await Invite.findOne({ code: req.params._id });
-        if (!invite) {
-          return res.status(404).send({ message: "Приглашение не найдено" });
-        }
-        res.send(invite);
-      } catch (err) {
-        res.status(500).send({ message: err.message });
-      }
-    };
-    const read = async (req, res) => {
-      try {
-        const invites = await Invite.find({ "owner.target": req.params._id });
-        if (!invites || invites.length === 0) {
-          return res.status(200).send([]);
-        }
-        res.send(invites);
-      } catch (err) {
-        res.status(500).send({ message: err.message });
-      }
-    };
-    const create = async (req, res) => {
-      const creator = req.body.creator;
-      const owner = req.body.owner;
-      const list = req.body.invites;
-      const createdInvites = [];
-      const createdMemberships = [];
-      try {
-        for (let invite of list) {
-          let user = null;
-          if (!invite || !invite.contact) {
-            continue;
-          }
-          if (invite.contact.includes("@")) {
-            user = await User.findOne({ email: invite.contact });
-          } else {
-            user = await User.findOne({ phone: invite.contact });
-          }
-          if (user) {
-            const membership = new Membership({
-              user: user._id,
-              type: "organization",
-              target: req.body.owner.target,
-              role: "member",
-              label: "member"
-            });
-            const savedMembership = await membership.save();
-            createdMemberships.push(savedMembership);
-          } else {
-            const newInvite = new Invite({
-              code: uuid(),
-              creator,
-              owner,
-              role: "member",
-              email: invite.contact.includes("@") ? invite.contact : null,
-              phone: !invite.contact.includes("@") ? invite.contact : null
-            });
-            const savedInvite = await newInvite.save();
-            createdInvites.push(savedInvite);
-            if (savedInvite.email !== null) {
-              const to = savedInvite.email;
-              const subject = "You have been added to the organization";
-              const text = `You have been invited to join an organization on ${process.env.APP_NAME}! Use this link to register: ${process.env.API_URL}/auth/invite?inviteCode=${newInvite.code}&type=email`;
-              await sendEmail(to, subject, text);
-            }
-            if (savedInvite.phone !== null) {
-              const phone = savedInvite.phone;
-              const message = `You have been invited to join an organization on ${process.env.APP_NAME}! Use this link to register: ${process.env.API_URL}/auth/invite?inviteCode=${newInvite.code}&type=phone`;
-              await sendSms(phone, message);
-            }
-          }
-        }
-        res.status(200).json({
-          message: "Invites sent successfully!",
-          createdInvites,
-          createdMemberships
-        });
-      } catch (error) {
-        console.error(error);
-        res.status(500).json({ message: "Something went wrong" });
-      }
-    };
-    const deleteInvite = async (req, res) => {
-      try {
-        const invite = await Invite.findOneAndDelete({ _id: req.params._id });
-        if (!invite) {
-          return res.status(404).send({ message: "Invite not found" });
-        }
-        res.send({ message: "Invite deleted successfully" });
-      } catch (err) {
-        res.status(500).send({ message: err.message });
-      }
-    };
-    return {
-      getOneByCode,
-      read,
-      create,
-      delete: deleteInvite
-    };
-  };
-  invites_controller = сontrollerFactory;
-  return invites_controller;
-}
-var departments_routes;
-var hasRequiredDepartments_routes;
-function requireDepartments_routes() {
-  if (hasRequiredDepartments_routes) return departments_routes;
-  hasRequiredDepartments_routes = 1;
-  const controllerFactory = requireDepartments_controller();
-  departments_routes = function(app, db) {
-    const controller = controllerFactory(db);
-    app.get(
-      "/api/departments/read",
-      controller.read
-    );
-    app.get("/api/departments/get/:_id", controller.readOne);
-    app.post("/api/departments/:_id/create", controller.create);
-    app.post("/api/departments/:_id/update", controller.update);
-    app.delete("/api/departments/:_id/delete", controller.delete);
-  };
-  return departments_routes;
-}
-var organizations_routes;
-var hasRequiredOrganizations_routes;
-function requireOrganizations_routes() {
-  if (hasRequiredOrganizations_routes) return organizations_routes;
-  hasRequiredOrganizations_routes = 1;
-  const controllerFactory = requireOrganizations_controller();
-  const middlewareFactoryAuth = index.requireMiddlewares();
-  const { getInstance } = globals_abac.requireGlobals_abac();
-  organizations_routes = function(app, db) {
-    const controller = controllerFactory(db);
-    const { authJwt } = middlewareFactoryAuth(db);
-    getInstance(db);
-    app.get(
-      "/api/organizations",
-      [
-        authJwt.verifyToken(true)
-        // abac.middleware('organizations', 'read', { 
-        //   allowPublished: true, 
-        //   allowUnauthenticated: true 
-        // })
-      ],
-      controller.read
-    );
-    app.post(
-      "/api/organizations/create",
-      controller.create
-    );
-    app.post(
-      "/api/organizations/:_id/update",
-      controller.update
-    );
-    app.delete(
-      "/api/organizations/:_id/delete",
-      controller.delete
-    );
-    app.get(
-      "/api/auth/check-accesses",
-      [
-        authJwt.verifyToken()
-      ],
-      controller.checkAccesses
-    );
-  };
-  return organizations_routes;
-}
-var memberships_routes;
-var hasRequiredMemberships_routes;
-function requireMemberships_routes() {
-  if (hasRequiredMemberships_routes) return memberships_routes;
-  hasRequiredMemberships_routes = 1;
-  const controllerFactory = requireMemberships_controller();
-  memberships_routes = function(app, db) {
-    const controller = controllerFactory(db);
-    app.get(
-      "/api/memberships",
-      controller.read
-    );
-    app.post(
-      "/api/memberships/create",
-      controller.create
-    );
-    app.post(
-      "/api/memberships/update",
-      controller.update
-    );
-    app.post(
-      "/api/memberships/delete",
-      controller.deleteMembership
-    );
-  };
-  return memberships_routes;
-}
-var invites_routes;
-var hasRequiredInvites_routes;
-function requireInvites_routes() {
-  if (hasRequiredInvites_routes) return invites_routes;
-  hasRequiredInvites_routes = 1;
-  const controllerFactory = requireInvites_controller();
-  const middlewareFactoryAuth = index.requireMiddlewares();
-  invites_routes = function(app, db) {
-    const controller = controllerFactory(db);
-    const { verifyInvites } = middlewareFactoryAuth(db);
-    app.get(
-      "/api/invites/get/:_id",
-      controller.getOneByCode
-    );
-    app.get(
-      "/api/invites/:_id",
-      controller.read
-    );
-    app.post(
-      "/api/invites/create",
-      [
-        verifyInvites.checkInviteExist,
-        verifyInvites.checkUsersExist
-      ],
-      controller.create
-    );
-    app.delete(
-      "/api/invites/delete/:_id",
-      controller.delete
-    );
-  };
-  return invites_routes;
-}
-var accesses_schema;
-var hasRequiredAccesses_schema;
-function requireAccesses_schema() {
-  if (hasRequiredAccesses_schema) return accesses_schema;
-  hasRequiredAccesses_schema = 1;
-  const accessesSchema = {
-    categories: {
-      create: {
-        type: Boolean,
-        default: false
-      },
-      read: {
-        type: Boolean,
-        default: false
-      },
-      edit: {
-        type: Boolean,
-        default: false
-      },
-      delete: {
-        type: Boolean,
-        default: false
-      }
+  },
+  spots: {
+    create: {
+      type: Boolean,
+      default: false
     },
-    rents: {
-      create: {
-        type: Boolean,
-        default: false
-      },
-      read: {
-        type: Boolean,
-        default: false
-      },
-      edit: {
-        type: Boolean,
-        default: false
-      },
-      delete: {
-        type: Boolean,
-        default: false
-      }
+    read: {
+      type: Boolean,
+      default: false
     },
-    spots: {
-      create: {
-        type: Boolean,
-        default: false
-      },
-      read: {
-        type: Boolean,
-        default: false
-      },
-      edit: {
-        type: Boolean,
-        default: false
-      },
-      delete: {
-        type: Boolean,
-        default: false
-      }
+    edit: {
+      type: Boolean,
+      default: false
     },
-    members: {
-      read: {
-        type: Boolean,
-        default: false
-      },
-      edit: {
-        type: Boolean,
-        default: false
-      },
-      delete: {
-        type: Boolean,
-        default: false
-      }
+    delete: {
+      type: Boolean,
+      default: false
+    }
+  },
+  members: {
+    read: {
+      type: Boolean,
+      default: false
     },
-    posts: {
-      create: {
-        type: Boolean,
-        default: false
-      },
-      read: {
-        type: Boolean,
-        default: false
-      },
-      edit: {
-        type: Boolean,
-        default: false
-      },
-      delete: {
-        type: Boolean,
-        default: false
-      }
+    edit: {
+      type: Boolean,
+      default: false
+    },
+    delete: {
+      type: Boolean,
+      default: false
+    }
+  },
+  posts: {
+    create: {
+      type: Boolean,
+      default: false
+    },
+    read: {
+      type: Boolean,
+      default: false
+    },
+    edit: {
+      type: Boolean,
+      default: false
+    },
+    delete: {
+      type: Boolean,
+      default: false
+    }
+  },
+  events: {
+    create: {
+      type: Boolean,
+      default: false
+    },
+    read: {
+      type: Boolean,
+      default: false
+    },
+    edit: {
+      type: Boolean,
+      default: false
+    },
+    delete: {
+      type: Boolean,
+      default: false
+    }
+  },
+  tickets: {
+    create: {
+      type: Boolean,
+      default: false
+    },
+    read: {
+      type: Boolean,
+      default: false
+    },
+    edit: {
+      type: Boolean,
+      default: false
+    },
+    delete: {
+      type: Boolean,
+      default: false
+    }
+  },
+  gallery: {
+    read: {
+      type: Boolean,
+      default: false
+    },
+    create: {
+      type: Boolean,
+      default: false
+    },
+    edit: {
+      type: Boolean,
+      default: false
+    },
+    delete: {
+      type: Boolean,
+      default: false
+    }
+  },
+  leftovers: {
+    read: {
+      type: Boolean,
+      default: false
+    },
+    edit: {
+      type: Boolean,
+      default: false
     },
-    events: {
-      create: {
-        type: Boolean,
-        default: false
-      },
-      read: {
-        type: Boolean,
-        default: false
-      },
-      edit: {
-        type: Boolean,
-        default: false
-      },
-      delete: {
-        type: Boolean,
-        default: false
-      }
+    delete: {
+      type: Boolean,
+      default: false
+    }
+  },
+  products: {
+    read: {
+      type: Boolean,
+      default: false
     },
-    tickets: {
-      create: {
-        type: Boolean,
-        default: false
-      },
-      read: {
-        type: Boolean,
-        default: false
-      },
-      edit: {
-        type: Boolean,
-        default: false
-      },
-      delete: {
-        type: Boolean,
-        default: false
-      }
+    edit: {
+      type: Boolean,
+      default: false
     },
-    gallery: {
-      read: {
-        type: Boolean,
-        default: false
-      },
-      create: {
-        type: Boolean,
-        default: false
-      },
-      edit: {
-        type: Boolean,
-        default: false
-      },
-      delete: {
-        type: Boolean,
-        default: false
-      }
+    delete: {
+      type: Boolean,
+      default: false
+    }
+  },
+  orders: {
+    read: {
+      type: Boolean,
+      default: false
     },
-    leftovers: {
-      read: {
-        type: Boolean,
-        default: false
-      },
-      edit: {
-        type: Boolean,
-        default: false
-      },
-      delete: {
-        type: Boolean,
-        default: false
-      }
+    confirm: {
+      type: Boolean,
+      default: false
     },
-    products: {
-      read: {
-        type: Boolean,
-        default: false
-      },
-      edit: {
-        type: Boolean,
-        default: false
-      },
-      delete: {
-        type: Boolean,
-        default: false
-      }
+    delete: {
+      type: Boolean,
+      default: false
+    }
+  },
+  departments: {
+    read: {
+      type: Boolean,
+      default: false
     },
-    orders: {
-      read: {
-        type: Boolean,
-        default: false
-      },
-      confirm: {
-        type: Boolean,
-        default: false
-      },
-      delete: {
-        type: Boolean,
-        default: false
-      }
+    edit: {
+      type: Boolean,
+      default: false
     },
-    departments: {
-      read: {
-        type: Boolean,
-        default: false
-      },
-      edit: {
-        type: Boolean,
-        default: false
-      },
-      delete: {
-        type: Boolean,
-        default: false
-      }
+    delete: {
+      type: Boolean,
+      default: false
     }
-  };
-  accesses_schema = accessesSchema;
-  return accesses_schema;
-}
-var department_model;
-var hasRequiredDepartment_model;
-function requireDepartment_model() {
-  if (hasRequiredDepartment_model) return department_model;
-  hasRequiredDepartment_model = 1;
-  const accessesSchema = requireAccesses_schema();
-  department_model = (db) => {
-    const departmentSchema = new db.mongoose.Schema({
+  }
+};
+const DepartmentModel = (db) => {
+  const departmentSchema = new db.mongoose.Schema(
+    {
       owner: {
         type: db.mongoose.Schema.Types.ObjectId,
         ref: "User"
@@ -1164,13 +298,15 @@ function requireDepartment_model() {
         description: { type: String },
         categories: [String]
       },
-      worktime: [{
-        day: String,
-        time: {
-          start: String,
-          end: String
+      worktime: [
+        {
+          day: String,
+          time: {
+            start: String,
+            end: String
+          }
         }
-      }],
+      ],
       hidden: {
         type: Boolean,
         default: false
@@ -1197,24 +333,108 @@ function requireDepartment_model() {
           ref: "Department"
         }
       ]
-    }, {
+    },
+    {
       timestamps: true
-    });
-    departmentSchema.index({ organization: 1 });
-    const Department = db.mongoose.model("Department", departmentSchema);
-    return Department;
-  };
-  return department_model;
-}
-var organization_model;
-var hasRequiredOrganization_model;
-function requireOrganization_model() {
-  if (hasRequiredOrganization_model) return organization_model;
-  hasRequiredOrganization_model = 1;
-  const applyEngagementSchema = engagement_schema.requireEngagement_schema();
-  const accessesSchema = requireAccesses_schema();
-  organization_model = (db) => {
-    const OrganizationSchema = new db.mongoose.Schema({
+    }
+  );
+  departmentSchema.index({ organization: 1 });
+  const Department = db.mongoose.model("Department", departmentSchema);
+  return Department;
+};
+const InviteModel = (db) => {
+  const InviteSchema = new db.mongoose.Schema(
+    {
+      code: {
+        type: String,
+        required: true,
+        unique: true
+      },
+      status: {
+        type: String,
+        enum: ["active", "used", "deactivated"],
+        default: "active"
+      },
+      role: {
+        type: String,
+        default: "member"
+      }
+    },
+    {
+      timestamps: true
+    }
+  );
+  applyOwnershipSchema(InviteSchema, db);
+  applyCredentialsSchema(InviteSchema);
+  InviteSchema.index(
+    {
+      owner: 1,
+      email: 1
+    },
+    {
+      unique: true,
+      partialFilterExpression: {
+        email: { $exists: true, $ne: "" }
+      }
+    }
+  );
+  InviteSchema.index(
+    {
+      owner: 1,
+      phone: 1
+    },
+    {
+      unique: true,
+      partialFilterExpression: {
+        phone: { $exists: true, $ne: "" }
+      }
+    }
+  );
+  const Invite = db.mongoose.model("Invite", InviteSchema);
+  return Invite;
+};
+const MembershipModel = (db) => {
+  const MembershipSchema = new db.mongoose.Schema(
+    {
+      user: {
+        type: db.mongoose.Schema.Types.ObjectId,
+        ref: "User",
+        required: true
+      },
+      type: {
+        type: String,
+        enum: ["organization", "department", "user"],
+        default: "organization",
+        required: true
+      },
+      role: {
+        type: String,
+        default: "subscriber"
+      },
+      label: {
+        type: String,
+        default: "subscriber"
+      },
+      target: {
+        type: db.mongoose.Schema.Types.ObjectId,
+        ref: function(value) {
+          if (this.type === "user") return "User";
+          if (this.type === "organization") return "Organization";
+        },
+        required: true
+      }
+    },
+    {
+      timestamps: true
+    }
+  );
+  MembershipSchema.index({ user: 1, target: 1, role: 1 });
+  const Membership = db.mongoose.model("Membership", MembershipSchema);
+  return Membership;
+};
+const OrganizationModel = (db) => {
+  const OrganizationSchema = new db.mongoose.Schema(
+    {
       // Creator and owner of organizations
       owner: {
         type: db.mongoose.Schema.Types.ObjectId,
@@ -1272,318 +492,985 @@ function requireOrganization_model() {
         },
         amount: Number
       }
-    }, {
+    },
+    {
       timestamps: true
-    });
-    applyEngagementSchema(OrganizationSchema, db);
-    OrganizationSchema.index({ _id: 1, owner: 1 });
-    const Organization = db.mongoose.model("Organization", OrganizationSchema);
-    return Organization;
+    }
+  );
+  applyEngagementSchema(OrganizationSchema);
+  OrganizationSchema.index({ _id: 1, owner: 1 });
+  const Organization = db.mongoose.model("Organization", OrganizationSchema);
+  return Organization;
+};
+const departmentsRoutes = function(app, db) {
+  const controller = controllerFactory$2(db);
+  app.get("/api/departments/read", controller.read);
+  app.get("/api/departments/get/:_id", controller.readOne);
+  app.post("/api/departments/:_id/create", controller.create);
+  app.post("/api/departments/:_id/update", controller.update);
+  app.delete("/api/departments/:_id/delete", controller.delete);
+};
+const { sendEmail, sendSms } = mailing;
+const сontrollerFactory = (db) => {
+  const User = db.user;
+  const Invite = db.invite;
+  const Membership = db.membership;
+  const getOneByCode = async (req, res) => {
+    try {
+      const invite = await Invite.findOne({ code: req.params._id });
+      if (!invite) {
+        return res.status(404).send({ message: "Приглашение не найдено" });
+      }
+      res.send(invite);
+    } catch (err) {
+      res.status(500).send({ message: err.message });
+    }
   };
-  return organization_model;
-}
-var membership_model;
-var hasRequiredMembership_model;
-function requireMembership_model() {
-  if (hasRequiredMembership_model) return membership_model;
-  hasRequiredMembership_model = 1;
-  membership_model = (db) => {
-    const MembershipSchema = new db.mongoose.Schema({
-      user: {
-        type: db.mongoose.Schema.Types.ObjectId,
-        ref: "User",
-        required: true
-      },
-      type: {
-        type: String,
-        enum: ["organization", "department", "user"],
-        default: "organization",
-        required: true
-      },
-      role: {
-        type: String,
-        default: "subscriber"
-      },
-      label: {
-        type: String,
-        default: "subscriber"
-      },
-      target: {
-        // заменяем 'organization' на 'target', так как это может быть или User, или Organization
-        type: db.mongoose.Schema.Types.ObjectId,
-        ref: function(value) {
-          if (this.type === "user") return "User";
-          if (this.type === "organization") return "Organization";
+  const read = async (req, res) => {
+    try {
+      const invites = await Invite.find({ "owner.target": req.params._id });
+      if (!invites || invites.length === 0) {
+        return res.status(200).send([]);
+      }
+      res.send(invites);
+    } catch (err) {
+      res.status(500).send({ message: err.message });
+    }
+  };
+  const create = async (req, res) => {
+    const creator = req.body.creator;
+    const owner = req.body.owner;
+    const list = req.body.invites;
+    const createdInvites = [];
+    const createdMemberships = [];
+    try {
+      for (let invite of list) {
+        let user = null;
+        if (!invite || !invite.contact) {
+          continue;
+        }
+        if (invite.contact.includes("@")) {
+          user = await User.findOne({ email: invite.contact });
+        } else {
+          user = await User.findOne({ phone: invite.contact });
+        }
+        if (user) {
+          const membership = new Membership({
+            user: user._id,
+            type: "organization",
+            target: req.body.owner.target,
+            role: "member",
+            label: "member"
+          });
+          const savedMembership = await membership.save();
+          createdMemberships.push(savedMembership);
+        } else {
+          const newInvite = new Invite({
+            code: uuid(),
+            creator,
+            owner,
+            role: "member",
+            email: invite.contact.includes("@") ? invite.contact : null,
+            phone: !invite.contact.includes("@") ? invite.contact : null
+          });
+          const savedInvite = await newInvite.save();
+          createdInvites.push(savedInvite);
+          if (savedInvite.email !== null) {
+            const to = savedInvite.email;
+            const subject = "You have been added to the organization";
+            const text = `You have been invited to join an organization on ${process.env.APP_NAME}! Use this link to register: ${process.env.API_URL}/auth/invite?inviteCode=${newInvite.code}&type=email`;
+            await sendEmail(to, subject, text);
+          }
+          if (savedInvite.phone !== null) {
+            const phone = savedInvite.phone;
+            const message = `You have been invited to join an organization on ${process.env.APP_NAME}! Use this link to register: ${process.env.API_URL}/auth/invite?inviteCode=${newInvite.code}&type=phone`;
+            await sendSms(phone, message);
+          }
+        }
+      }
+      res.status(200).json({
+        message: "Invites sent successfully!",
+        createdInvites,
+        createdMemberships
+      });
+    } catch (error) {
+      console.error(error);
+      res.status(500).json({ message: "Something went wrong" });
+    }
+  };
+  const deleteInvite = async (req, res) => {
+    try {
+      const invite = await Invite.findOneAndDelete({ _id: req.params._id });
+      if (!invite) {
+        return res.status(404).send({ message: "Invite not found" });
+      }
+      res.send({ message: "Invite deleted successfully" });
+    } catch (err) {
+      res.status(500).send({ message: err.message });
+    }
+  };
+  return {
+    getOneByCode,
+    read,
+    create,
+    delete: deleteInvite
+  };
+};
+const invitesRoutes = function(app, db) {
+  const controller = сontrollerFactory(db);
+  const { verifyInvites } = middlewareIndexFactory(db);
+  app.get("/api/invites/get/:_id", controller.getOneByCode);
+  app.get("/api/invites/:_id", controller.read);
+  app.post("/api/invites/create", [verifyInvites.checkInviteExist, verifyInvites.checkUsersExist], controller.create);
+  app.delete("/api/invites/delete/:_id", controller.delete);
+};
+const ObjectId$1 = { Types }.Types.ObjectId;
+const controllerFactory$1 = (db) => {
+  const Membership = db.membership;
+  const Department = db.department;
+  const read = async (req, res) => {
+    try {
+      let search = req.query.search;
+      let regexPattern = "";
+      if (search) {
+        search = search.replace(/[-/\\^$*+?.()|[\]{}]/g, "\\$&");
+        const parts = search.split(".");
+        if (parts.length === 2) {
+          regexPattern = parts.join("\\.");
+        } else {
+          regexPattern = search;
+        }
+      }
+      const memberships = await Membership.aggregate([
+        {
+          $lookup: {
+            from: "users",
+            localField: "user",
+            foreignField: "_id",
+            as: "user"
+          }
         },
-        required: true
+        {
+          $match: {
+            ...req.query.user && { user: new ObjectId$1(req.query.user) },
+            ...req.query.type && { type: req.query.type },
+            ...req.query.target && { target: new ObjectId$1(req.query.target) },
+            ...req.query.role && { role: { $in: req.query.role } },
+            ...req.query.search && {
+              $or: [
+                { "user.profile.name": { $regex: regexPattern, $options: "i" } },
+                { "user.email": { $regex: regexPattern, $options: "i" } },
+                { "user.phone": { $regex: regexPattern, $options: "i" } }
+              ]
+            }
+          }
+        },
+        {
+          $unwind: "$user"
+        },
+        // Pagination
+        ...queryProcessorGlobals.getSortingOptions(req.query.sortParam, req.query.sortOrder),
+        ...queryProcessorGlobals.getPaginationOptions(req.query.skip, req.query.limit)
+      ]);
+      if (!memberships) {
+        return res.status(404).send({ errorCode: "MEMBERSHIPS_NOT_FOUND" });
+      }
+      res.send(memberships);
+    } catch (err) {
+      console.log(err);
+      res.status(500).send({ errorCode: "SERVER_ERROR" });
+    }
+  };
+  const create = async (req, res) => {
+    const newMembership = new Membership({
+      user: req.body.user,
+      type: req.body.type,
+      target: req.body.target,
+      role: req.body.role
+    });
+    try {
+      const data = await newMembership.save();
+      res.send(data);
+    } catch (err) {
+      console.log(err);
+      res.status(500).send({ errorCode: "SERVER_ERROR" });
+    }
+  };
+  const update = async (req, res) => {
+    try {
+      const membership = await Membership.findByIdAndUpdate(req.body._id, req.body, { new: true });
+      if (!membership) {
+        return res.status(404).send({ errorCode: "MEMBERSHIP_NOT_FOUND" });
+      }
+      res.send(membership);
+    } catch (err) {
+      res.status(500).send({ errorCode: "SERVER_ERROR" });
+    }
+  };
+  const deleteMembership = async (req, res) => {
+    const { _id, type, target, user, role } = req.body;
+    try {
+      const membership = _id ? await Membership.findOneAndDelete({ _id: new ObjectId$1(_id) }) : await Membership.findOneAndDelete({ type, target, user, role });
+      if (!membership) {
+        return res.status(404).send({ errorCode: "MEMBERSHIP_NOT_FOUND" });
+      }
+      if (membership.type === "organization") {
+        await Department.updateMany({ organization: target }, { $pull: { members: { user } } });
+      }
+      res.status(200).send(membership);
+    } catch (error) {
+      console.log(error);
+      res.status(500).send({ errorCode: "SERVER_ERROR" });
+    }
+  };
+  return {
+    read,
+    create,
+    update,
+    deleteMembership
+  };
+};
+const membershipsRoutes = function(app, db) {
+  const controller = controllerFactory$1(db);
+  app.get("/api/memberships", controller.read);
+  app.post("/api/memberships/create", controller.create);
+  app.post("/api/memberships/update", controller.update);
+  app.post("/api/memberships/delete", controller.deleteMembership);
+};
+const lookupConfigs = {
+  products: {
+    lookup: {
+      from: "products",
+      localField: "_id",
+      foreignField: "owner.target",
+      as: "products"
+    },
+    additionalStages: [
+      {
+        $addFields: { numberOfProducts: { $size: "$products" } }
+      }
+    ]
+  },
+  blogposts: {
+    lookup: {
+      from: "blogposts",
+      localField: "_id",
+      foreignField: "owner.target",
+      as: "blogposts"
+    }
+  },
+  departments: {
+    lookup: {
+      from: "departments",
+      localField: "_id",
+      foreignField: "organization",
+      as: "departments"
+    }
+  },
+  spots: {
+    lookup: {
+      from: "spots",
+      localField: "_id",
+      foreignField: "organization",
+      as: "spots"
+    }
+  },
+  memberships: {
+    lookup: {
+      from: "memberships",
+      localField: "_id",
+      foreignField: "target",
+      as: "memberships"
+    }
+  }
+};
+const ObjectId = { Types }.Types.ObjectId;
+const { Client } = googleMapsServicesJs;
+const client = new Client({});
+const getRequestedLookups = (query) => query.lookup ? Array.isArray(query.lookup) ? query.lookup : [query.lookup] : [];
+const getLookupStages = (requestedLookups, configs) => {
+  if (!requestedLookups) return [];
+  const lookupsArray = Array.isArray(requestedLookups) ? requestedLookups : requestedLookups.split(",");
+  return lookupsArray.map((lookup) => configs[lookup]).filter(Boolean).flatMap((config) => [
+    { $lookup: config.lookup },
+    // Оберните lookup в объект с $lookup
+    ...config.additionalStages || []
+  ]);
+};
+const getLocationStages = async (query) => {
+  if (!hasLocationParams(query)) {
+    return { stages: [], userLocation: null };
+  }
+  const location = await resolveLocation(query);
+  const radius = getRadius(query);
+  const geoStages = radius ? [
+    {
+      $match: {
+        "spots.location.coordinates": {
+          $geoWithin: {
+            $centerSphere: [[location.coordinates[0], location.coordinates[1]], radius]
+          }
+        }
       }
-    }, {
-      timestamps: true
-    });
-    MembershipSchema.index({ user: 1, target: 1, role: 1 });
-    const Membership = db.mongoose.model("Membership", MembershipSchema);
-    return Membership;
+    }
+  ] : [];
+  return {
+    stages: [...geoStages, ...getDistanceStages(location)],
+    userLocation: location
   };
-  return membership_model;
-}
-var invite_model;
-var hasRequiredInvite_model;
-function requireInvite_model() {
-  if (hasRequiredInvite_model) return invite_model;
-  hasRequiredInvite_model = 1;
-  const applyOwnershipSchema = ownership_schema.requireOwnership_schema();
-  const applyCredentialsSchema = credentials_schema.requireCredentials_schema();
-  invite_model = (db) => {
-    const InviteSchema = new db.mongoose.Schema({
-      code: {
-        type: String,
-        required: true,
-        unique: true
-      },
-      status: {
-        type: String,
-        enum: ["active", "used", "deactivated"],
-        default: "active"
-      },
-      role: {
-        type: String,
-        default: "member"
+};
+const getRadius = (query) => {
+  if (query.locationRadius) return parseFloat(query.locationRadius) / 6378.1;
+  if (query.city) return 25 / 6378.1;
+  if (query.state) return 50 / 6378.1;
+  return null;
+};
+const hasLocationParams = (query) => query.location || query.address || query.city || query.state || query.country;
+const resolveLocation = async (query) => {
+  if (query.location) {
+    const parsedLocation = typeof query.location === "string" ? JSON.parse(query.location) : query.location;
+    const coordinates = parsedLocation.lng ? [parsedLocation.lng, parsedLocation.lat] : parsedLocation.coordinates;
+    return { coordinates: coordinates.map((coord) => parseFloat(coord)) };
+  }
+  const searchString = [query.address, query.city, query.state, query.country].filter(Boolean).join(", ");
+  try {
+    const geoResponse = await client.geocode({
+      params: {
+        address: searchString,
+        key: process.env.GOOGLE_MAPS_API_KEY
       }
-    }, {
-      timestamps: true
     });
-    applyOwnershipSchema(InviteSchema, db);
-    applyCredentialsSchema(InviteSchema, db);
-    InviteSchema.index({
-      owner: 1,
-      email: 1
-    }, {
-      unique: true,
-      partialFilterExpression: {
-        email: { $exists: true, $ne: "" }
+    if (!geoResponse.data.results?.length) {
+      throw new Error("Unable to geocode the provided location.");
+    }
+    const { lng, lat } = geoResponse.data.results[0].geometry.location;
+    return { coordinates: [lng, lat] };
+  } catch (err) {
+    throw new Error("Error occurred while geocoding.");
+  }
+};
+const getDistanceStages = (location) => [
+  {
+    $addFields: {
+      spots: {
+        $map: {
+          input: "$spots",
+          as: "spot",
+          in: {
+            $mergeObjects: [
+              "$$spot",
+              {
+                distance: {
+                  $function: {
+                    body: `function(spotCoords, userCoords, isMiles) {
+                      function toRad(x) {
+                        return x * Math.PI / 180;
+                      }
+                      var lon1 = spotCoords[0];
+                      var lat1 = spotCoords[1];
+                      var lon2 = userCoords[0];
+                      var lat2 = userCoords[1];
+                      var R = 6371;
+                      if (isMiles) R = 3959;
+                      var x1 = lat2 - lat1;
+                      var dLat = toRad(x1);
+                      var x2 = lon2 - lon1;
+                      var dLon = toRad(x2);
+                      var a = Math.sin(dLat / 2) * Math.sin(dLat / 2) +
+                              Math.cos(toRad(lat1)) * Math.cos(toRad(lat2)) *
+                              Math.sin(dLon / 2) * Math.sin(dLon / 2);
+                      var c = 2 * Math.atan2(Math.sqrt(a), Math.sqrt(1 - a));
+                      var d = R * c;
+                      return d;
+                    }`,
+                    args: ["$$spot.location.coordinates", location.coordinates, false],
+                    lang: "js"
+                  }
+                }
+              }
+            ]
+          }
+        }
       }
-    });
-    InviteSchema.index({
-      owner: 1,
-      phone: 1
-    }, {
-      unique: true,
-      partialFilterExpression: {
-        phone: { $exists: true, $ne: "" }
+    }
+  },
+  {
+    $addFields: {
+      distance: { $min: "$spots.distance" },
+      distanceExist: {
+        $cond: {
+          if: { $eq: [{ $type: "$distance" }, "double"] },
+          then: true,
+          else: false
+        }
       }
-    });
-    const Invite = db.mongoose.model("Invite", InviteSchema);
-    return Invite;
-  };
-  return invite_model;
-}
-var organizations_policies;
-var hasRequiredOrganizations_policies;
-function requireOrganizations_policies() {
-  if (hasRequiredOrganizations_policies) return organizations_policies;
-  hasRequiredOrganizations_policies = 1;
-  organizations_policies = function initializeOrganizationPolicies(abacAccessControl, db) {
-    const Organization = db.organization;
-    const Department = db.department;
-    const Validator = globals_verifier.requireGlobals_validator();
-    const Verifier = globals_verifier.requireGlobals_verifier();
-    const publicAccessVerifier = new Verifier({
-      status: {
-        allowed: true,
-        validator: Validator.schema({ context: "Status" }).string().required().oneOf(["published", "active", "featured"])
+    }
+  }
+];
+const getPriceConditions = (prices) => {
+  if (!prices) return [];
+  const priceRanges = prices.split(",");
+  const priceConditions = priceRanges.map((priceRange) => {
+    if (priceRange.startsWith("<")) return { "products.price": { $lt: parseInt(priceRange.slice(1)) } };
+    if (priceRange.startsWith(">")) return { "products.price": { $gt: parseInt(priceRange.slice(1)) } };
+    const [min, max] = priceRange.split("-").map(Number);
+    return { "products.price": { $gte: min, $lte: max } };
+  });
+  return priceConditions.length > 0 ? [{ $match: { $or: priceConditions } }] : [];
+};
+const getContainConditions = (contain) => {
+  if (!contain) return [];
+  const conditions = contain.map((property) => ({
+    [property]: { $exists: true, $not: { $size: 0 } }
+  }));
+  return conditions.length > 0 ? [{ $match: { $and: conditions } }] : [];
+};
+const getBasicMatchConditions = (query) => [
+  ...query._id ? [{ _id: new ObjectId(query._id) }] : [],
+  ...query.owner ? [{ owner: new ObjectId(query.owner) }] : [],
+  ...query.types ? [{ types: { $in: query.types } }] : [],
+  ...query.member ? [
+    {
+      memberships: {
+        $elemMatch: {
+          user: new ObjectId(query.member),
+          role: "member"
+        }
       }
-    });
-    abacAccessControl.registerGlobalPolicy("OrganizationAccessPolicy", async (context) => {
-      const { user, resource, data, action, currentResource, req } = context;
-      if (!resource || !action) {
-        return {
-          allow: false,
-          force: false,
-          reason: "MISSING_REQUIRED_PARAMETERS"
-        };
+    }
+  ] : [],
+  ...query.subscriber ? [
+    {
+      memberships: {
+        $elemMatch: {
+          user: new ObjectId(query.subscriber),
+          role: "subscriber"
+        }
       }
-      const findOrgId = () => {
-        try {
-          if (currentResource?.owner?.type === "organization") {
-            return String(currentResource.owner.target);
+    }
+  ] : [],
+  ...query.categories?.split(",").length > 0 ? [{ "products.category": { $in: query.categories?.split(",") } }] : [],
+  ...query.delivery?.split(",").length > 0 ? [{ "spots.delivery": { $all: query.delivery?.split(",") } }] : []
+];
+const getPostableConditions = (postableId) => {
+  if (!postableId) return [];
+  return [
+    {
+      $match: {
+        $or: [
+          { owner: new ObjectId(postableId) },
+          {
+            $and: [
+              { types: { $elemMatch: { $eq: "public" } } },
+              {
+                memberships: {
+                  $elemMatch: {
+                    user: new ObjectId(postableId)
+                  }
+                }
+              }
+            ]
+          },
+          {
+            $and: [
+              { types: { $elemMatch: { $in: ["exclusive", "hidden"] } } },
+              {
+                memberships: {
+                  $elemMatch: {
+                    user: new ObjectId(postableId),
+                    role: { $ne: "subscriber" }
+                  }
+                }
+              }
+            ]
           }
-          if (data?.owner?.type === "organization") {
-            return String(data.owner.target);
+        ]
+      }
+    }
+  ];
+};
+const controllerFactory = (db) => {
+  const Organization = db.organization;
+  const Department = db.department;
+  const Membership = db.membership;
+  const cache = new Cache({ ttlSeconds: 60 * 5 });
+  const read = async (req, res) => {
+    console.log("controller query", req.query);
+    try {
+      const cacheKey = JSON.stringify(req.query);
+      let cachedResult = await cache.get(cacheKey);
+      if (cachedResult) {
+        return res.status(200).send(cachedResult);
+      }
+      const requestedLookups = getRequestedLookups(req.query);
+      const matchConditions = getBasicMatchConditions(req.query);
+      const stages = [
+        ...getLookupStages(requestedLookups, lookupConfigs),
+        ...getPostableConditions(req.query.postable),
+        ...getContainConditions(req.query.contain),
+        ...queryProcessorGlobals.getSearchOptions(req.query.search, {
+          fields: requestedLookups.includes("products") ? ["profile.name", "products.name"] : ["profile.name"]
+        }),
+        ...requestedLookups.includes("products") && req.query.prices ? getPriceConditions(req.query.prices) : [],
+        ...requestedLookups.includes("spots") ? (await getLocationStages(req.query)).stages : [],
+        ...requestedLookups.includes("memberships") ? [addUserStatusFields(req.query.user), addMembersQuantity(req.query.user)] : [],
+        ...matchConditions.length > 0 ? [{ $match: { $and: matchConditions } }] : [],
+        ...queryProcessorGlobals.getSortingOptions(req.query.sortParam, req.query.sortOrder),
+        ...queryProcessorGlobals.getPaginationOptions(req.query.skip, req.query.limit)
+      ].filter(Boolean);
+      console.log(JSON.stringify(stages, null, 2));
+      const organizations = await Organization.aggregate(stages);
+      for (const org of organizations) {
+        const orgTag = `organization_${org._id}`;
+        await cache.setWithTags(cacheKey, organizations, [orgTag, "organizations"]);
+      }
+      res.status(200).send(organizations);
+    } catch (err) {
+      console.error(err);
+      res.status(500).send({ message: err.message });
+    }
+  };
+  const create = async (req, res) => {
+    if (req.body._id === null) {
+      delete req.body._id;
+    }
+    try {
+      const organization = new Organization(req.body);
+      const savedOrganization = await organization.save();
+      const membership = new Membership({
+        user: savedOrganization.owner,
+        type: "organization",
+        target: savedOrganization._id,
+        role: "owner",
+        label: "owner"
+      });
+      const savedMembership = await membership.save();
+      const orgTag = `organization_${savedOrganization._id}`;
+      await cache.delByTag(orgTag);
+      const organizationObject = savedOrganization.toObject();
+      const newCacheKey = JSON.stringify({ id: organizationObject._id });
+      await cache.setWithTags(newCacheKey, [organizationObject], [orgTag, "organizations"]);
+      res.status(201).json(savedOrganization);
+    } catch (error) {
+      console.error("Error:", error);
+      res.status(500).send(error);
+    }
+  };
+  const update = async (req, res) => {
+    try {
+      const organizationId = req.params._id;
+      const updatedData = req.body;
+      const organization = await Organization.findByIdAndUpdate(organizationId, updatedData, {
+        new: true,
+        runValidators: true
+      });
+      if (!organization) {
+        return res.status(404).json({ message: "Organization not found" });
+      }
+      const orgTag = `organization_${organizationId}`;
+      await cache.delByTag(orgTag);
+      const organizationObject = organization.toObject();
+      const updateCacheKey = JSON.stringify({ _id: organizationId });
+      await cache.setWithTags(updateCacheKey, [organizationObject], [orgTag, "organizations"]);
+      res.status(200).json({ message: "Organization updated successfully", organization });
+    } catch (error) {
+      res.status(500).json({ error: error.message });
+    }
+  };
+  const deleteOrganization = async (req, res) => {
+    try {
+      const organization = await Organization.findOneAndRemove({ _id: req.params._id });
+      if (!organization) {
+        return res.status(404).send({ message: "Organization not found" });
+      }
+      await Membership.deleteMany({ target: req.params._id });
+      const newToken = jwt.sign(
+        {
+          _id: req.userId,
+          // Предполагаю, что req.userId доступен
+          organization: null
+        },
+        process.env.SECRET_KEY,
+        {
+          expiresIn: 86400
+          // 24 hours
+        }
+      );
+      const orgTag = `organization_${req.params._id}`;
+      await cache.delByTag(orgTag);
+      res.send({ newToken });
+    } catch (err) {
+      res.status(500).send({ message: err.message });
+    }
+  };
+  const checkAccesses = async (req, res) => {
+    try {
+      const uid = new db.mongoose.Types.ObjectId(req.userId);
+      const cacheKey = `accesses_${uid.toString()}`;
+      const cachedResult = await cache.get(cacheKey);
+      if (cachedResult) {
+        return res.status(200).json(cachedResult);
+      }
+      const depts = await Department.find({ "members.user": uid }).lean();
+      const ownedOrgs = await Organization.find({ owner: uid }).lean();
+      const ownedOrgIds = ownedOrgs.map((org) => org._id.toString());
+      const accesses = {};
+      const processAccesses = (orgId, isOwner, deptAccesses) => {
+        if (!accesses[orgId]) {
+          accesses[orgId] = { organization: orgId, rights: {} };
+        }
+        const rights = accesses[orgId].rights;
+        const defaultAccesses = new Department().accesses;
+        const accessData = isOwner ? defaultAccesses : deptAccesses;
+        Object.keys(accessData).forEach((key) => {
+          if (!rights[key]) {
+            rights[key] = {};
           }
-        } catch (error) {
-          console.error("Error finding organization ID:", error);
+          const accessRights = accessData[key];
+          Object.entries(accessRights).forEach(([right, value]) => {
+            rights[key][right] = isOwner || rights[key][right] || value;
+          });
+        });
+      };
+      const orgDepts = depts.reduce((acc, dept) => {
+        const orgId = dept.organization.toString();
+        if (!acc[orgId]) {
+          acc[orgId] = [];
+        }
+        acc[orgId].push(dept);
+        return acc;
+      }, {});
+      Object.entries(orgDepts).forEach(([orgId, departments]) => {
+        const combinedAccesses = departments.reduce((acc, dept) => {
+          Object.entries(dept.accesses).forEach(([key, rights]) => {
+            if (!acc[key]) {
+              acc[key] = {};
+            }
+            Object.entries(rights).forEach(([right, value]) => {
+              acc[key][right] = acc[key][right] || value;
+            });
+          });
+          return acc;
+        }, {});
+        processAccesses(orgId, false, combinedAccesses);
+      });
+      ownedOrgIds.forEach((orgId) => {
+        processAccesses(orgId, true, {});
+      });
+      const accessArray = Object.values(accesses);
+      const userTag = `access_${uid.toString()}`;
+      await cache.setWithTags(cacheKey, accessArray, [userTag, "accesses"]);
+      res.status(200).json(accessArray);
+    } catch (err) {
+      console.error("Error getting accesses:", err);
+      res.status(500).json({ message: "Internal server error" });
+    }
+  };
+  return {
+    fetch,
+    read,
+    create,
+    update,
+    delete: deleteOrganization,
+    // Map the method to 'delete' key
+    checkAccesses
+  };
+};
+const { getInstance: getInstance$1 } = globalsabac;
+const organizationsRoutes = function(app, db) {
+  const controller = controllerFactory(db);
+  const { authJwt } = middlewareIndexFactory(db);
+  getInstance$1(db);
+  app.get(
+    "/api/organizations",
+    [
+      authJwt.verifyToken(true)
+      // abac.middleware('organizations', 'read', {
+      //   allowPublished: true,
+      //   allowUnauthenticated: true
+      // })
+    ],
+    controller.read
+  );
+  app.post("/api/organizations/create", controller.create);
+  app.post("/api/organizations/:_id/update", controller.update);
+  app.delete("/api/organizations/:_id/delete", controller.delete);
+  app.get("/api/auth/check-accesses", [authJwt.verifyToken()], controller.checkAccesses);
+};
+const initOrganizationPolicies = function initializeOrganizationPolicies(abacAccessControl, db) {
+  const Organization = db.organization;
+  const Department = db.department;
+  const publicAccessVerifier = new Verifier({
+    status: {
+      rule: "optional",
+      validator: Validator.schema({ context: "Status" }).string().required().oneOf(["published", "active", "featured"])
+    }
+  });
+  const organizationHelpers = {
+    // Проверка, является ли пользователь владельцем организации
+    async isOrganizationOwner(userId, orgId) {
+      if (!userId || !orgId) return false;
+      try {
+        const objectId = new db.mongoose.Types.ObjectId(orgId);
+        return await Organization.exists({
+          _id: objectId,
+          owner: userId
+        });
+      } catch (error) {
+        console.error("Error checking organization ownership:", error);
+        return false;
+      }
+    },
+    // Получить права пользователя в организации
+    async getUserOrganizationRights(userId, orgId) {
+      if (!userId || !orgId) return null;
+      try {
+        const objectId = new db.mongoose.Types.ObjectId(orgId);
+        const isOwner = await this.isOrganizationOwner(userId, orgId);
+        if (isOwner) {
+          const defaultAccesses = new Department().accesses;
+          return {
+            isOwner: true,
+            rights: defaultAccesses,
+            departments: []
+          };
         }
+        const departments = await Department.find({
+          organization: objectId,
+          "members.user": userId
+        });
+        if (!departments.length) return null;
+        const combinedRights = {};
+        departments.forEach((dept) => {
+          Object.entries(dept.accesses).forEach(([resource, rights]) => {
+            if (!combinedRights[resource]) {
+              combinedRights[resource] = {};
+            }
+            Object.entries(rights).forEach(([action, allowed]) => {
+              combinedRights[resource][action] = combinedRights[resource][action] || allowed;
+            });
+          });
+        });
+        return {
+          isOwner: false,
+          rights: combinedRights,
+          departments: departments.map((d) => ({
+            _id: d._id,
+            name: d.name,
+            accesses: d.accesses,
+            members: d.members
+            // Добавляем members для проверки permissions
+          }))
+        };
+      } catch (error) {
+        console.error("Error getting user organization rights:", error);
         return null;
+      }
+    },
+    // Проверка конкретного права
+    async hasOrganizationRight(userId, orgId, resource, action) {
+      const rights = await this.getUserOrganizationRights(userId, orgId);
+      return rights?.rights?.[resource]?.[action] || false;
+    },
+    // Получить организацию из контекста
+    getOrganizationId(context) {
+      const { currentResource, data } = context;
+      if (currentResource?.owner?.type === "organization") {
+        return String(currentResource.owner.target);
+      }
+      if (data?.owner?.type === "organization") {
+        return String(data.owner.target);
+      }
+      if (data?.organization) {
+        return String(data.organization);
+      }
+      if (currentResource?.organization) {
+        return String(currentResource.organization);
+      }
+      return null;
+    }
+  };
+  const enhanceContext = (context) => {
+    context.organizationHelpers = organizationHelpers;
+    context.checkOrganizationOwner = async (orgId = null) => {
+      const organizationId = orgId || organizationHelpers.getOrganizationId(context);
+      if (!organizationId || !context.user) return false;
+      return organizationHelpers.isOrganizationOwner(context.user, organizationId);
+    };
+    context.checkOrganizationRight = async (resource, action, orgId = null) => {
+      const organizationId = orgId || organizationHelpers.getOrganizationId(context);
+      if (!organizationId || !context.user) return false;
+      return organizationHelpers.hasOrganizationRight(context.user, organizationId, resource, action);
+    };
+    context.getOrganizationRights = async (orgId = null) => {
+      const organizationId = orgId || organizationHelpers.getOrganizationId(context);
+      if (!organizationId || !context.user) return null;
+      return organizationHelpers.getUserOrganizationRights(context.user, organizationId);
+    };
+  };
+  abacAccessControl.registerExtension("OrganizationHelpers", async (context) => {
+    enhanceContext(context);
+    return {
+      allow: true,
+      reason: "ORGANIZATION_HELPERS_ADDED"
+    };
+  });
+  abacAccessControl.registerGlobalPolicy("OrganizationAccessPolicy", async (context) => {
+    if (!context.checkOrganizationOwner) {
+      enhanceContext(context);
+    }
+    const { user, resource, data, action, currentResource, req } = context;
+    if (!resource || !action) {
+      return {
+        allow: false,
+        force: false,
+        reason: "MISSING_REQUIRED_PARAMETERS"
+      };
+    }
+    const orgId = organizationHelpers.getOrganizationId(context);
+    if (!orgId) {
+      return {
+        allow: true,
+        force: false,
+        reason: "NOT_ORGANIZATION_RESOURCE"
       };
-      const orgId = findOrgId();
-      if (!orgId) {
+    }
+    if (user) {
+      try {
+        const isOrgOwner = await organizationHelpers.isOrganizationOwner(user, orgId);
+        if (isOrgOwner) {
+          return {
+            allow: true,
+            force: true,
+            // Владелец организации получает принудительный доступ
+            reason: "ORGANIZATION_OWNER_ACCESS"
+          };
+        }
+        const hasAccess = await organizationHelpers.hasOrganizationRight(user, orgId, resource, action);
+        if (hasAccess) {
+          return {
+            allow: true,
+            force: false,
+            // Доступ через департамент не является принудительным
+            reason: "DEPARTMENT_MEMBER_ACCESS"
+          };
+        }
+      } catch (error) {
+        console.error("Error checking user access:", error);
         return {
-          allow: true,
+          allow: false,
           force: false,
-          reason: "NOT_ORGANIZATION_RESOURCE"
+          reason: "ORGANIZATION_ACCESS_CHECK_ERROR"
         };
       }
-      if (user) {
-        try {
-          const objectId = new db.mongoose.Types.ObjectId(orgId);
-          const isOrgOwner = await Organization.exists({
-            _id: objectId,
-            owner: user
-          });
-          if (isOrgOwner) {
-            return {
-              allow: true,
-              force: true,
-              // Владелец организации получает принудительный доступ
-              reason: "ORGANIZATION_OWNER_ACCESS"
-            };
-          }
-          const departments = await Department.find({
-            organization: objectId,
-            "members.user": user
-          });
-          const hasAccess = departments.some((department) => {
-            const accessRights = department.accesses?.[resource];
-            return accessRights && accessRights[action];
-          });
-          if (hasAccess) {
-            return {
-              allow: true,
-              force: false,
-              // Доступ через департамент не является принудительным
-              reason: "DEPARTMENT_MEMBER_ACCESS"
-            };
-          }
-        } catch (error) {
-          console.error("Error checking user access:", error);
+    }
+    if (action === "read" && req && req.query) {
+      try {
+        const validationResult = publicAccessVerifier.verify(req.query, {
+          only: ["status"]
+        });
+        req.query = validationResult.verifiedData;
+        req.queryValidation = validationResult;
+        if (currentResource && !publicAccessVerifier.verifyParam("status", currentResource.status)) {
           return {
             allow: false,
             force: false,
-            reason: "ORGANIZATION_ACCESS_CHECK_ERROR"
+            // Принудительно запрещаем доступ к непубличным ресурсам
+            reason: "INVALID_RESOURCE_STATUS_FOR_PUBLIC_ACCESS"
           };
         }
-      }
-      if (action === "read" && req && req.query) {
-        try {
-          const validationResult = publicAccessVerifier.verify(req.query, {
-            only: ["status"]
-          });
-          req.query = validationResult.verifiedData;
-          req.queryValidation = validationResult;
-          if (currentResource && !publicAccessVerifier.verifyParam("status", currentResource.status)) {
-            return {
-              allow: false,
-              force: false,
-              // Принудительно запрещаем доступ к непубличным ресурсам
-              reason: "INVALID_RESOURCE_STATUS_FOR_PUBLIC_ACCESS"
-            };
-          }
-          if (validationResult.isValid) {
-            return {
-              allow: true,
-              force: false,
-              reason: "PUBLIC_ACCESS_ALLOWED"
-            };
-          } else {
-            return {
-              allow: false,
-              force: false,
-              // Принудительно запрещаем, если невалидные параметры
-              reason: "INVALID_PUBLIC_ACCESS_PARAMETERS"
-            };
-          }
-        } catch (error) {
-          console.error("Error validating query:", error);
+        if (validationResult.isValid) {
+          return {
+            allow: true,
+            force: false,
+            reason: "PUBLIC_ACCESS_ALLOWED"
+          };
+        } else {
           return {
             allow: false,
             force: false,
-            reason: "QUERY_VALIDATION_ERROR"
+            // Принудительно запрещаем, если невалидные параметры
+            reason: "INVALID_PUBLIC_ACCESS_PARAMETERS"
           };
         }
-      }
-      if (action !== "read") {
+      } catch (error) {
+        console.error("Error validating query:", error);
         return {
           allow: false,
           force: false,
-          reason: "ORGANIZATION_RESOURCE_OPERATION_FORBIDDEN"
+          reason: "QUERY_VALIDATION_ERROR"
         };
       }
+    }
+    if (action !== "read") {
       return {
         allow: false,
         force: false,
-        reason: "ORGANIZATION_RESOURCE_ACCESS_DENIED"
+        reason: "ORGANIZATION_RESOURCE_OPERATION_FORBIDDEN"
       };
-    });
-    abacAccessControl.updatePublicAccessConfig = (newConfig) => {
-      if (typeof newConfig !== "object" || newConfig === null) {
-        throw new TypeError("Config must be an object");
-      }
-      publicAccessVerifier.updateConfig(newConfig);
-    };
-    abacAccessControl.getPublicAccessConfig = () => {
-      return publicAccessVerifier.getConfig();
-    };
-    abacAccessControl.publicAccessVerifier = publicAccessVerifier;
-    return abacAccessControl;
-  };
-  return organizations_policies;
-}
-var organizations_server$1;
-var hasRequiredOrganizations_server;
-function requireOrganizations_server() {
-  if (hasRequiredOrganizations_server) return organizations_server$1;
-  hasRequiredOrganizations_server = 1;
-  const DepartmentsController = requireDepartments_controller();
-  const OrganizationsController = requireOrganizations_controller();
-  const MembershipsController = requireMemberships_controller();
-  const InvitesController = requireInvites_controller();
-  const departmentsRoutes = requireDepartments_routes();
-  const organizationsRoutes = requireOrganizations_routes();
-  const membershipsRoutes = requireMemberships_routes();
-  const invitesRoutes = requireInvites_routes();
-  const DepartmentModel = requireDepartment_model();
-  const OrganizationModel = requireOrganization_model();
-  const MembershipModel = requireMembership_model();
-  const InviteModel = requireInvite_model();
-  const { getInstance } = globals_abac.requireGlobals_abac();
-  const initOrganizationPolicies = requireOrganizations_policies();
-  function initializeOrganization(app, db, origins, publicPath) {
-    db.department = DepartmentModel(db);
-    db.organization = OrganizationModel(db);
-    db.membership = MembershipModel(db);
-    db.invite = InviteModel(db);
-    const abac = getInstance(db);
-    initOrganizationPolicies(abac, db);
-    if (app) {
-      departmentsRoutes(app, db, origins, publicPath);
-      organizationsRoutes(app, db, origins, publicPath);
-      membershipsRoutes(app, db, origins, publicPath);
-      invitesRoutes(app, db, origins, publicPath);
     }
-  }
-  organizations_server$1 = {
-    initialize: initializeOrganization,
-    models: {
-      DepartmentModel,
-      OrganizationModel,
-      MembershipModel,
-      InviteModel
-    },
-    routes: {
-      departmentsRoutes,
-      organizationsRoutes,
-      membershipsRoutes,
-      invitesRoutes
-    },
-    controllers: {
-      DepartmentsController,
-      OrganizationsController,
-      MembershipsController,
-      InvitesController
+    return {
+      allow: false,
+      force: false,
+      reason: "ORGANIZATION_RESOURCE_ACCESS_DENIED"
+    };
+  });
+  abacAccessControl.updatePublicAccessConfig = (newConfig) => {
+    if (typeof newConfig !== "object" || newConfig === null) {
+      throw new TypeError("Config must be an object");
     }
+    publicAccessVerifier.updateConfig(newConfig);
   };
-  return organizations_server$1;
+  abacAccessControl.getPublicAccessConfig = () => {
+    return publicAccessVerifier.getConfig();
+  };
+  abacAccessControl.publicAccessVerifier = publicAccessVerifier;
+  abacAccessControl.organizationHelpers = organizationHelpers;
+  return abacAccessControl;
+};
+const { getInstance } = ABAC;
+function initializeOrganization(app, db, origins, publicPath) {
+  db.department = DepartmentModel(db);
+  db.organization = OrganizationModel(db);
+  db.membership = MembershipModel(db);
+  db.invite = InviteModel(db);
+  const abac = getInstance(db);
+  initOrganizationPolicies(abac, db);
+  if (app) {
+    departmentsRoutes(app, db);
+    organizationsRoutes(app, db);
+    membershipsRoutes(app, db);
+    invitesRoutes(app, db);
+  }
 }
-var organizations_serverExports = requireOrganizations_server();
-const organizations_server = /* @__PURE__ */ _commonjsHelpers.getDefaultExportFromCjs(organizations_serverExports);
-module.exports = organizations_server;
+const models = {
+  DepartmentModel,
+  OrganizationModel,
+  MembershipModel,
+  InviteModel
+};
+const routes = {
+  departmentsRoutes,
+  organizationsRoutes,
+  membershipsRoutes,
+  invitesRoutes
+};
+const controllers = {
+  DepartmentsController: controllerFactory$2,
+  OrganizationsController: controllerFactory,
+  MembershipsController: controllerFactory$1,
+  InvitesController: сontrollerFactory
+};
+const organizations_server = {
+  initialize: initializeOrganization,
+  models,
+  routes,
+  controllers
+};
+export {
+  controllers,
+  organizations_server as default,
+  initializeOrganization as initialize,
+  models,
+  routes
+};