@xuda.io/account_module 1.2.2281 → 1.2.2283

package/index.mjs

@@ -225,6 +225,7 @@ export const update_account_info = async function (req, job_id, headers) {
       eb.status = 'cleared';
       eb.cleared_ts = Date.now();
       account_obj.account_email_bounce_suspended = 0;
+      _clear_bounce_suspension_banner(uid); // retire the suspension banner
     }
   }
 
@@ -1227,6 +1228,11 @@ export const get_account_data = async function (req) {
       login_screen: await resolve_effective_login_screen(acc_obj),
     };
 
+    // A bounce-suspended account must always see the suspension banner (the
+    // one-shot notice at suspension time can be missed or predate this). Best-
+    // effort + fire-and-forget; only touches the DB for the rare suspended account.
+    if (acc_obj.account_email_bounce_suspended) _ensure_bounce_suspension_banner(acc_obj);
+
     return ret;
   } catch (err) {
     console.error(err);
@@ -1413,6 +1419,71 @@ export const get_account_external_apps = async function (req) {
   }
 };
 
+// Eligible backends for a load balancer's pool: the user's ACTIVE apps of one
+// chosen deploy_type. full_stack_vps is stored as app_type:'vps' + is_full_stack,
+// so it's split out here. Balancers themselves are never selectable. Each row
+// carries the origin (ip/region) the balancer needs, plus a `reachable` flag —
+// farm/mesh-hosted backends (private IP) are shown but can't be pooled by a v1
+// DO balancer. req: { uid, data:{ backend_deploy_type } }
+export const get_load_balancer_candidates = async function (req) {
+  try {
+    const uid = req.uid;
+    const bt = req.data?.backend_deploy_type || req.backend_deploy_type;
+    if (!bt) return { code: -2, data: 'backend_deploy_type required' };
+    const excluded = _conf.balancer?.excluded_backend_types || ['cron', 'emitter'];
+    if (excluded.includes(bt)) return { code: -2, data: `${bt} is not balanceable` };
+
+    const isSuper = _conf.superuser_account_ids?.includes(uid);
+    const app_type = bt === 'full_stack_vps' ? 'vps' : bt;
+    const selector = isSuper ? { app_type, docType: 'app', app_status_code: 3 } : { app_uId: uid, app_type, docType: 'app', app_status_code: 3 };
+    const ret = await db_module.find_couch_query('xuda_master', { selector, limit: 1000 });
+    let docs = ret?.docs || [];
+
+    // Split the shared app_type:'vps' bucket into vps vs full_stack_vps.
+    if (bt === 'full_stack_vps') docs = docs.filter((d) => d.is_full_stack);
+    else if (bt === 'vps') docs = docs.filter((d) => !d.is_full_stack);
+    docs = docs.filter((d) => !d.is_load_balancer && d.app_type !== 'balancer');
+
+    const is_private = (ip) => !ip || /^(10\.|127\.|192\.168\.|172\.(1[6-9]|2\d|3[01])\.)/.test(String(ip));
+    const rows = docs.map((d) => {
+      const ip = d.app_hosting_server?.ip || null;
+      const farm_hosted = is_private(ip) || d.app_hosting_server?.provider === 'proxmox';
+      return {
+        app_id: d._id,
+        name: d.app_name,
+        app_type: bt,
+        region_code: d.app_hosting_server?.region_slug || d.app_hosting?.app_region || null,
+        ip,
+        public_url: `https://${d.app_access_url || `${d._id}.${_conf.app_domain}`}`,
+        farm_hosted,
+        reachable: !!ip && !farm_hosted,
+        status: d.app_status_code,
+      };
+    });
+    return { code: 1, data: { rows } };
+  } catch (err) {
+    return { code: -1, data: err.message };
+  }
+};
+
+// Load balancers are apps (app_type:'balancer') not emitted by any user_* view,
+// so — like get_account_external_apps — a Mango query surfaces them for the
+// sidenav bucket (DATA.balancer) right after create. req: { uid }
+export const get_account_balancers = async function (req) {
+  try {
+    const isSuper = _conf.superuser_account_ids?.includes(req.uid);
+    const selector = isSuper ? { app_type: 'balancer', docType: 'app' } : { app_uId: req.uid, app_type: 'balancer', docType: 'app' };
+    const ret = await db_module.find_couch_query('xuda_master', {
+      selector,
+      limit: 1000,
+    });
+    const rows = (ret?.docs || []).map((d) => ({ id: d._id, value: d }));
+    return { code: 1, data: { rows } };
+  } catch (err) {
+    return { code: -1, data: err.message };
+  }
+};
+
 export const get_account_info = async function (req) {
   return await get_account_data({
     uid: req.uid,
@@ -1432,6 +1503,23 @@ export const get_account_info = async function (req) {
 // ===================================================================
 const _OPS_SERVER_TYPES = ['datacenter', 'deployment', 'vps', 'managed_vps', 'instance', 'master'];
 const _ops_is_super = (req) => !!(req && req.uid && Array.isArray(_conf.superuser_account_ids) && _conf.superuser_account_ids.includes(req.uid));
+
+// info@xuda.ai (platform owner) + any superuser account are permanently exempt
+// from billing hold / suspension / termination — manual OR automated. A held or
+// suspended owner account would lock the operator out. Email-keyed so it holds
+// across the dev/master account-id divergence. Mirrors the same guard in
+// stripe_module's webhook paths. Extend via _conf.billing_hold_exempt_emails.
+const _HOLD_EXEMPT_EMAILS = new Set(
+  ['info@xuda.ai', ...(Array.isArray(_conf.billing_hold_exempt_emails) ? _conf.billing_hold_exempt_emails : [])]
+    .map((e) => String(e).trim().toLowerCase()).filter(Boolean)
+);
+const _is_billing_restriction_exempt = (account_obj) => {
+  if (!account_obj) return false;
+  const email = String(account_obj.account_info?.email || '').trim().toLowerCase();
+  if (email && _HOLD_EXEMPT_EMAILS.has(email)) return true;
+  const supers = _conf.superuser_account_ids;
+  return !!(Array.isArray(supers) && account_obj._id && supers.includes(account_obj._id));
+};
 const _ops_host = () => (_conf.is_debug ? process.env.XUDA_HOSTNAME || _conf.domain : _conf.domain) || 'xuda.ai';
 const _ops_appeal_days = () => Number(_conf.termination?.appeal_days) || 14;
 
@@ -1477,6 +1565,7 @@ export const ops_suspend_account = async function (req = {}) {
     const ar = await db_module.get_couch_doc('xuda_accounts', account_uid);
     if (ar.code < 0 || !ar.data) return { code: -1, data: 'account not found' };
     const account = ar.data;
+    if (_is_billing_restriction_exempt(account)) return { code: -1, data: 'account is on the permanent allowlist (info@ / superuser); suspension refused' };
     account.account_suspension_status = 1;
     account.account_suspension_date = Date.now();
     account.suspension_reason = req.reason || '';
@@ -1501,6 +1590,7 @@ export const ops_terminate_account = async function (req = {}) {
     const ar = await db_module.get_couch_doc('xuda_accounts', account_uid);
     if (ar.code < 0 || !ar.data) return { code: -1, data: 'account not found' };
     const account = ar.data;
+    if (_is_billing_restriction_exempt(account)) return { code: -1, data: 'account is on the permanent allowlist (info@ / superuser); termination refused' };
     const appeal_days = _ops_appeal_days();
     account.account_termination_status = 1;
     account.account_termination_date = Date.now();
@@ -1573,6 +1663,20 @@ export const ops_reinstate_account = async function (req = {}) {
     account.appeal_status = 'accepted';
     account.reinstated_ts = Date.now();
     account.reinstated_by_uid = req.uid;
+    // Reinstate means "reactivate", regardless of which suspension type is in
+    // effect — so also lift an email-bounce suspension if present. This mirrors
+    // the clear branch of sweep_email_bounces (:3630) so the two paths agree.
+    const _eb = account.account_email_bounce;
+    const _was_bounce_suspended = account.account_email_bounce_suspended || (_eb && (_eb.status === 'suspended' || _eb.status === 'flagged'));
+    if (_was_bounce_suspended) {
+      if (_eb) {
+        _eb.status = 'cleared';
+        _eb.cleared_ts = Date.now();
+        account.account_email_bounce = _eb;
+      }
+      account.account_email_bounce_suspended = 0;
+    }
+    if (account.stat === 5) account.stat = 3; // defensive: clear a hard suspended stat if one was set
     const sr = await db_module.save_couch_doc('xuda_accounts', account);
     if (sr.code < 0) return { code: -1, data: sr.data };
     const power = await _ops_services_power(account_uid, true);
@@ -1680,6 +1784,19 @@ export const ops_account_snapshot = async function (req = {}) {
         billing_hold_date: a.account_billing_hold_date || null,
         billing_hold_reason: a.billing_hold_reason || '',
         reinstated_ts: a.reinstated_ts || null,
+        // Email-bounce suspension (a distinct suspension type — an outbound
+        // platform email to the account hard-bounced). Surfaced so the admin
+        // can see it's the reason an account reads as inactive.
+        email_bounce: a.account_email_bounce_suspended
+          ? {
+              suspended: true,
+              recipient: a.account_email_bounce?.recipient || '',
+              reason: a.account_email_bounce?.reason || '',
+              status: a.account_email_bounce?.status || '',
+              bounce_count: a.account_email_bounce?.bounce_count || 0,
+              suspended_ts: a.account_email_bounce?.suspended_ts || null,
+            }
+          : null,
         entitlements: get_effective_entitlements(a),
         credits,
       },
@@ -1696,6 +1813,7 @@ export const ops_set_billing_hold = async function (req = {}) {
     const ar = await db_module.get_couch_doc('xuda_accounts', account_uid);
     if (ar.code < 0 || !ar.data) return { code: -1, data: 'account not found' };
     const account = ar.data;
+    if (_is_billing_restriction_exempt(account)) return { code: -1, data: 'account is on the permanent allowlist (info@ / superuser); billing hold refused' };
     account.account_billing_hold_status = 1;
     account.account_billing_hold_date = Date.now();
     account.billing_hold_reason = req.reason || '';
@@ -3412,12 +3530,18 @@ const _notify_bounce_suspended = async (account) => {
     await notification_msa.submit_notification({
       type: 'account',
       app_id: null,
+      // Account-level banner: tag with an empty app_id so get_system_notifications
+      // (which scopes to app_id: '') returns it on every reload, not just the
+      // one live WebSocket push at suspension time.
+      to_app_id: '',
       uid_arr: [account._id],
       topic: 'email_bounce_update_required',
       params: {
         recipient_email: eb.recipient || account.account_info?.email || '',
         settings_url: _bounce_settings_url(),
         support_url: `https://${host}/dashboard/support`,
+        action_label: 'Update email',
+        action_href: _bounce_settings_url(),
       },
     });
   } catch (e) { console.error('bounce user notice failed:', e.message); }
@@ -3444,6 +3568,79 @@ const _notify_bounce_suspended = async (account) => {
   }
 };
 
+// Ensure a bounce-suspended account has a LIVE suspension banner on the
+// dashboard. The suspend-time notice (_notify_bounce_suspended) fires once and
+// can be missed or predate this; get_account_data calls this on every load.
+// Idempotent + banner-only: bails if a persistent (app_id '') banner already
+// exists, so it never duplicates the doc or re-sends the SMS.
+const _ensure_bounce_suspension_banner = async (account) => {
+  try {
+    const uid = account._id;
+    const ret = await db_module.find_couch_query('xuda_notification', {
+      selector: { docType: 'notification', uid, topic: 'email_bounce_update_required', delivery_method: 'banner', read: false },
+    });
+    const docs = ret?.docs || [];
+    if (docs.length) {
+      // Self-heal: concurrent get_account_data calls on boot can race the create
+      // (find-then-create isn't atomic + CouchDB's index lags the fresh doc), so
+      // more than one can slip through. Keep the newest, retire the rest.
+      docs.sort((a, b) => (b.date_created_ts || 0) - (a.date_created_ts || 0));
+      for (let i = 1; i < docs.length; i++) {
+        docs[i].read = true;
+        docs[i].stat = 4;
+        docs[i].stat_ts = Date.now();
+        await db_module.save_couch_doc('xuda_notification', docs[i]).catch(() => {});
+      }
+      // Upgrade an older-format banner in place (created before locked / the
+      // Update-email action existed) so it picks up the current fields.
+      const keep = docs[0];
+      if (!keep.locked || !keep.params?.action_href) {
+        keep.locked = true;
+        keep.params = { ...(keep.params || {}), action_label: 'Update email', action_href: _bounce_settings_url() };
+        await db_module.save_couch_doc('xuda_notification', keep).catch(() => {});
+      }
+      return;
+    }
+    const eb = account.account_email_bounce || {};
+    const host = _conf.is_debug ? process.env.XUDA_HOSTNAME || _conf.domain : _conf.domain;
+    await notification_msa.submit_notification({
+      type: 'account',
+      app_id: null,
+      to_app_id: '',
+      uid_arr: [uid],
+      topic: 'email_bounce_update_required',
+      delivery_filter: ['banner'], // banner only — the SMS already went out at suspension time
+      params: {
+        recipient_email: eb.recipient || account.account_info?.email || '',
+        settings_url: _bounce_settings_url(),
+        support_url: `https://${host}/dashboard/support`,
+        action_label: 'Update email',
+        action_href: _bounce_settings_url(),
+      },
+    });
+  } catch (e) {
+    console.error('ensure bounce banner failed:', e.message);
+  }
+};
+
+// Retire the suspension banner once the bounce is resolved (email changed).
+// Marks it read so get_system_notifications stops returning it next load.
+const _clear_bounce_suspension_banner = async (uid) => {
+  try {
+    const ret = await db_module.find_couch_query('xuda_notification', {
+      selector: { docType: 'notification', uid, topic: 'email_bounce_update_required', read: false },
+    });
+    for (const doc of ret?.docs || []) {
+      doc.read = true;
+      doc.stat = 4;
+      doc.stat_ts = Date.now();
+      await db_module.save_couch_doc('xuda_notification', doc);
+    }
+  } catch (e) {
+    console.error('clear bounce banner failed:', e.message);
+  }
+};
+
 // Hard-email-bounce handler. Called (via account_ms RPC) by email_module's
 // scan_platform_bounces when a platform email to this account's address bounces
 // permanently (5.x.x). Policy: suspend IMMEDIATELY (account_email_bounce_suspended,
@@ -5921,15 +6118,23 @@ const _nl_avatar_url = (host, pic) => {
   return '';
 };
 
-const _nl_render_email = (issue, { host, first_name, fashion, partners, unsub_url }) => {
+const _nl_render_email = (issue, { host, first_name, fashion, partners, unsub_url, theme }) => {
   const c = issue.content || {};
   const esc = _nl_esc;
+  const dark = theme === 'dark';
+  // Palette: light (default/production) vs dark (the "whole box dark" variant).
+  const pal = dark
+    ? { pageBg: '#0b1020', card: '#151c30', cardBorder: '#28324e', ink: '#ffffff', body: '#c3cbdb', muted: '#8b93a8', accentCard: '#13233c', accentInk: '#66BDFF', accentBody: '#c3cbdb', pill: '#152036', pillInk: '#8ecbff', imgBg: '#0e1424', footBorder: '#28324e' }
+    : { pageBg: '#ffffff', card: '#ffffff', cardBorder: '#e9edf3', ink: '#0b1220', body: '#475569', muted: '#94a3b8', accentCard: '#eff6ff', accentInk: '#0b66c2', accentBody: '#334155', pill: '#eff6ff', pillInk: '#0b66c2', imgBg: '#f4f6fa', footBorder: '#e9edf3' };
+  // A subtle border so the already-dark cards (news/feature/fashion) separate from
+  // the dark page background instead of merging into it.
+  const sep = dark ? ';border:1px solid #28324e' : '';
   const btn = (href, txt, bg = '#0091FF', fg = '#fff') =>
     `<a href="${esc(href)}" style="display:inline-block;background:${bg};color:${fg};text-decoration:none;padding:11px 24px;border-radius:9px;font-weight:700;font-size:14px">${esc(txt)} &rarr;</a>`;
 
   // A white content card with an optional top image. imgFit 'cover' crops to a
   // banner; 'contain' shows the WHOLE image (used for the t-shirt) on imgBg.
-  const card = ({ img, imgAlt, emoji, label, title, href, text, btnText, btnHref, imgFit = 'cover', imgBg = '#f4f6fa', imgMaxH = '210px' }) => {
+  const card = ({ img, imgAlt, emoji, label, title, href, text, btnText, btnHref, imgFit = 'cover', imgBg = pal.imgBg, imgMaxH = '210px' }) => {
     let image = '';
     if (img) {
       const inner = imgFit === 'contain'
@@ -5937,15 +6142,15 @@ const _nl_render_email = (issue, { host, first_name, fashion, partners, unsub_ur
         : `<img src="${esc(img)}" alt="${esc(imgAlt || '')}" width="100%" style="display:block;width:100%;max-height:${imgMaxH};object-fit:cover">`;
       image = `<a href="${esc(href || btnHref || '#')}" style="text-decoration:none">${inner}</a>`;
     }
-    const titleHtml = href ? `<a href="${esc(href)}" style="color:#0b1220;text-decoration:none">${esc(title)}</a>` : esc(title);
+    const titleHtml = href ? `<a href="${esc(href)}" style="color:${pal.ink};text-decoration:none">${esc(title)}</a>` : esc(title);
     return `
 <table cellpadding="0" cellspacing="0" width="100%" style="border-collapse:separate;margin:0 0 16px">
-  <tr><td style="background:#ffffff;border:1px solid #e9edf3;border-radius:14px;overflow:hidden">
+  <tr><td style="background:${pal.card};border:1px solid ${pal.cardBorder};border-radius:14px;overflow:hidden">
     ${image}
     <div style="padding:18px 20px">
       <div style="font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:#0091FF;font-weight:700;margin-bottom:7px">${emoji} ${esc(label)}</div>
-      <div style="font-size:18px;font-weight:700;line-height:1.28;color:#0b1220;margin-bottom:7px">${titleHtml}</div>
-      <p style="color:#475569;font-size:14px;line-height:1.55;margin:0 0 15px">${esc(text)}</p>
+      <div style="font-size:18px;font-weight:700;line-height:1.28;color:${pal.ink};margin-bottom:7px">${titleHtml}</div>
+      <p style="color:${pal.body};font-size:14px;line-height:1.55;margin:0 0 15px">${esc(text)}</p>
       ${btn(btnHref, btnText)}
     </div>
   </td></tr>
@@ -5982,10 +6187,10 @@ const _nl_render_email = (issue, { host, first_name, fashion, partners, unsub_ur
   if (c.tip2) {
     parts.push(`
 <table cellpadding="0" cellspacing="0" width="100%" style="border-collapse:separate;margin:0 0 16px">
-  <tr><td style="background:#eff6ff;border-left:4px solid #0091FF;border-radius:10px;padding:16px 18px">
-    <div style="font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:#0b66c2;font-weight:700;margin-bottom:5px">⭐ Tip of the week</div>
-    <div style="font-size:16px;font-weight:700;color:#0b1220;margin:0 0 5px">${esc(c.tip2.title)}</div>
-    <p style="color:#334155;font-size:14px;line-height:1.55;margin:0 0 ${c.tip2.url ? '12px' : '0'}">${esc(c.tip2.text)}</p>
+  <tr><td style="background:${pal.accentCard};border-left:4px solid #0091FF;border-radius:10px;padding:16px 18px">
+    <div style="font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:${pal.accentInk};font-weight:700;margin-bottom:5px">⭐ Tip of the week</div>
+    <div style="font-size:16px;font-weight:700;color:${pal.ink};margin:0 0 5px">${esc(c.tip2.title)}</div>
+    <p style="color:${pal.accentBody};font-size:14px;line-height:1.55;margin:0 0 ${c.tip2.url ? '12px' : '0'}">${esc(c.tip2.text)}</p>
     ${c.tip2.url ? btn(c.tip2.url, 'See how') : ''}
   </td></tr>
 </table>`);
@@ -5996,7 +6201,7 @@ const _nl_render_email = (issue, { host, first_name, fashion, partners, unsub_ur
     const nurl = `https://${host}/news/${c.news.slug}`;
     parts.push(`
 <table cellpadding="0" cellspacing="0" width="100%" style="border-collapse:separate;margin:0 0 16px">
-  <tr><td style="background:linear-gradient(160deg,#0b1220,#10213b);border-radius:14px;overflow:hidden">
+  <tr><td style="background:linear-gradient(160deg,#0b1220,#10213b);border-radius:14px;overflow:hidden${sep}">
     <a href="${esc(nurl)}" style="text-decoration:none"><img src="https://${esc(host)}/news/${encodeURIComponent(c.news.slug)}/hero.png" alt="${esc(c.news.headline)}" width="100%" style="display:block;width:100%;max-height:230px;object-fit:cover"></a>
     <div style="padding:18px 20px">
       <div style="font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:#66BDFF;font-weight:700;margin-bottom:7px">📰 News</div>
@@ -6023,7 +6228,7 @@ const _nl_render_email = (issue, { host, first_name, fashion, partners, unsub_ur
     const gif = c.feature.gif ? _nl_gif_url(c.feature.gif) : '';
     parts.push(`
 <table cellpadding="0" cellspacing="0" width="100%" style="border-collapse:separate;margin:0 0 16px">
-  <tr><td style="background:linear-gradient(160deg,#0b1220,#10213b);border-radius:14px;padding:22px">
+  <tr><td style="background:linear-gradient(160deg,#0b1220,#10213b);border-radius:14px;padding:22px${sep}">
     <div style="display:inline-block;background:#0091FF;color:#fff;font-size:11px;font-weight:700;letter-spacing:.5px;text-transform:uppercase;padding:4px 11px;border-radius:20px;margin-bottom:14px">⚡ Explore a feature</div>
     ${gif ? `<a href="https://${esc(host)}/dashboard" style="text-decoration:none"><img src="${esc(gif)}" alt="${esc(c.feature.label)}" width="100%" style="display:block;width:100%;border-radius:10px;border:1px solid #22344f;margin:0 0 14px"></a>` : ''}
     <div style="font-size:20px;font-weight:700;color:#ffffff;margin:0 0 6px">${esc(c.feature.label)}</div>
@@ -6041,7 +6246,7 @@ const _nl_render_email = (issue, { host, first_name, fashion, partners, unsub_ur
       : '';
     parts.push(`
 <table cellpadding="0" cellspacing="0" width="100%" style="border-collapse:separate;margin:0 0 16px">
-  <tr><td style="background:linear-gradient(160deg,#160f2b,#0b1220);border-radius:14px;overflow:hidden">
+  <tr><td style="background:linear-gradient(160deg,#160f2b,#0b1220);border-radius:14px;overflow:hidden${sep}">
     ${teeImg}
     <div style="padding:16px 20px 20px">
       <div style="font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:#66BDFF;font-weight:700;margin-bottom:7px">👕 Wear the brand</div>
@@ -6062,27 +6267,27 @@ const _nl_render_email = (issue, { host, first_name, fashion, partners, unsub_ur
       if (!p) return '';
       const av = _nl_avatar_url(host, p.pic);
       const avatar = av
-        ? `<img src="${esc(av)}" alt="${esc(p.name)}" width="76" height="76" style="border-radius:50%;object-fit:cover;border:2px solid #e9edf3;display:block">`
+        ? `<img src="${esc(av)}" alt="${esc(p.name)}" width="76" height="76" style="border-radius:50%;object-fit:cover;border:2px solid ${pal.cardBorder};display:block">`
         : `<div style="width:76px;height:76px;border-radius:50%;background:#0091FF;color:#fff;font-size:30px;font-weight:800;line-height:76px;text-align:center">${esc((p.name || '?').slice(0, 1))}</div>`;
       const role = _nl_titlecase(p.role || 'Partner');
       const emoji = p.role === 'mentor' ? '🧭' : '📣';
       const where = p.city ? `${role} in ${esc(_nl_titlecase(p.city))}` : role;
       return `
 <table cellpadding="0" cellspacing="0" width="100%" style="border-collapse:separate;margin:0 0 12px">
-  <tr><td style="background:#ffffff;border:1px solid #e9edf3;border-radius:14px;padding:18px 20px">
+  <tr><td style="background:${pal.card};border:1px solid ${pal.cardBorder};border-radius:14px;padding:18px 20px">
     <table cellpadding="0" cellspacing="0" width="100%"><tr>
       <td width="88" style="vertical-align:middle">${avatar}</td>
       <td style="vertical-align:middle;padding-left:16px">
         <div style="font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:#0091FF;font-weight:700;margin-bottom:3px">${emoji} ${esc(where)}</div>
-        <div style="font-size:19px;font-weight:800;color:#0b1220;margin:0 0 10px">${esc(p.name)}</div>
-        <a href="${esc(p.url)}" style="display:inline-block;background:#eff6ff;color:#0b66c2;text-decoration:none;padding:8px 16px;border-radius:8px;font-weight:700;font-size:13px">View profile &rarr;</a>
+        <div style="font-size:19px;font-weight:800;color:${pal.ink};margin:0 0 10px">${esc(p.name)}</div>
+        <a href="${esc(p.url)}" style="display:inline-block;background:${pal.accentCard};color:${pal.accentInk};text-decoration:none;padding:8px 16px;border-radius:8px;font-weight:700;font-size:13px">View profile &rarr;</a>
       </td>
     </tr></table>
   </td></tr>
 </table>`;
     };
     parts.push(`<p style="text-align:center;font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:#0091FF;font-weight:700;margin:6px 0 4px">🤝 Your local Xuda team</p>
-<p style="text-align:center;color:#94a3b8;font-size:13px;margin:0 0 14px">Your regional ambassador and mentor are here to help you build.</p>`);
+<p style="text-align:center;color:${pal.muted};font-size:13px;margin:0 0 14px">Your regional ambassador and mentor are here to help you build.</p>`);
     if (amb) parts.push(person_card(amb));
     if (men) parts.push(person_card(men));
   }
@@ -6091,15 +6296,19 @@ const _nl_render_email = (issue, { host, first_name, fashion, partners, unsub_ur
   let dateStr = '';
   try { dateStr = new Date(issue.created_ts || Date.now()).toLocaleDateString('en-US', { month: 'long', day: 'numeric', year: 'numeric' }); } catch (e) {}
 
+  // In dark mode the outer div paints a dark panel behind the whole newsletter.
+  const shell = dark
+    ? `font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;background:${pal.pageBg};padding:26px 20px 10px;border-radius:14px`
+    : `font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif`;
   return `
-<div style="font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif">
+<div style="${shell}">
   <div style="text-align:center;margin:0 0 8px">
-    <span style="display:inline-block;background:#eff6ff;color:#0b66c2;font-size:11px;font-weight:700;letter-spacing:.5px;text-transform:uppercase;padding:5px 13px;border-radius:20px">Issue #${esc(issue.issue_number)}${dateStr ? ' &middot; ' + esc(dateStr) : ''}</span>
+    <span style="display:inline-block;background:${pal.pill};color:${pal.pillInk};font-size:11px;font-weight:700;letter-spacing:.5px;text-transform:uppercase;padding:5px 13px;border-radius:20px">Issue #${esc(issue.issue_number)}${dateStr ? ' &middot; ' + esc(dateStr) : ''}</span>
   </div>
-  <h1 style="text-align:center;font-size:28px;font-weight:800;color:#0b1220;margin:0 0 8px">Xuda Weekly</h1>
-  <p style="text-align:center;color:#475569;font-size:15px;line-height:1.55;margin:0 auto 24px;max-width:400px"><strong style="color:#0b1220">${greet}</strong> here's what's new at Xuda this week: a quick tip, fresh reads, a feature to try, and this week's deal.</p>
+  <h1 style="text-align:center;font-size:28px;font-weight:800;color:${pal.ink};margin:0 0 8px">Xuda Weekly</h1>
+  <p style="text-align:center;color:${pal.body};font-size:15px;line-height:1.55;margin:0 auto 24px;max-width:400px"><strong style="color:${pal.ink}">${greet}</strong> here's what's new at Xuda this week: a quick tip, fresh reads, a feature to try, and this week's deal.</p>
   ${parts.join('')}
-  <p style="text-align:center;color:#94a3b8;font-size:12px;line-height:1.7;margin:26px 0 0;border-top:1px solid #e9edf3;padding-top:18px">You're receiving this because you opted in to Xuda updates.<br><a href="${esc(unsub_url)}" style="color:#94a3b8;text-decoration:underline">Unsubscribe</a> &nbsp;&middot;&nbsp; <a href="https://${esc(host)}/dashboard" style="color:#94a3b8;text-decoration:underline">Your account</a></p>
+  <p style="text-align:center;color:${pal.muted};font-size:12px;line-height:1.7;margin:26px 0 0;border-top:1px solid ${pal.footBorder};padding-top:18px">You're receiving this because you opted in to Xuda updates.<br><a href="${esc(unsub_url)}" style="color:${pal.muted};text-decoration:underline">Unsubscribe</a> &nbsp;&middot;&nbsp; <a href="https://${esc(host)}/dashboard" style="color:${pal.muted};text-decoration:underline">Your account</a></p>
 </div>`;
 };
 
@@ -6117,16 +6326,18 @@ const _nl_sample_recipient = (host) => ({
   unsub_url: `https://${host}/newsletter/unsubscribe?u=SAMPLE&t=SAMPLE`,
 });
 
-const _newsletter_send_sample_internal = async (issue, to_email) => {
+const _newsletter_send_sample_internal = async (issue, to_email, theme) => {
   const host = _ops_host();
   const [fpool, ppool] = await Promise.all([_nl_fashion_pool(), _nl_partner_pool()]);
   const rcpt = _nl_sample_recipient(host);
   rcpt.fashion = _nl_fashion_for(fpool, rcpt.country, rcpt.city, issue.issue_number);
   rcpt.partners = _nl_partners_for(ppool, rcpt.cc, rcpt.country, rcpt.city);
+  rcpt.theme = theme;
   const html = _nl_render_email(issue, rcpt);
   // email_ms (request/response) so we get a real {code} back — email_msa is
   // fire-and-forget and would report undefined.
-  return email_ms.send_email({ email: to_email, subject: `[SAMPLE] ${issue.subject}`, body: html, display_type: 'info' });
+  const tag = theme === 'dark' ? '[SAMPLE · DARK] ' : '[SAMPLE] ';
+  return email_ms.send_email({ email: to_email, subject: `${tag}${issue.subject}`, body: html, display_type: 'info' });
 };
 
 // Build the weekly draft: content + coupon + numbered issue, then sample to ops.
@@ -6223,6 +6434,7 @@ export const newsletter_preview = async function (req = {}) {
     const rcpt = _nl_sample_recipient(host);
     rcpt.fashion = _nl_fashion_for(fpool, rcpt.country, rcpt.city, ret.data.issue_number);
     rcpt.partners = _nl_partners_for(ppool, rcpt.cc, rcpt.country, rcpt.city);
+    rcpt.theme = req.theme;
     const html = _nl_render_email(ret.data, rcpt);
     return { code: 1, data: { issue_number: ret.data.issue_number, subject: ret.data.subject, status: ret.data.status, html } };
   } catch (err) {
@@ -6237,8 +6449,8 @@ export const newsletter_send_sample = async function (req = {}) {
     const ret = await db_module.get_couch_doc(NEWSLETTER_DB, id);
     if (ret.code < 0 || !ret.data) return { code: -1, data: 'issue not found' };
     const to = req.email || 'info@xuda.ai';
-    const sr = await _newsletter_send_sample_internal(ret.data, to);
-    return { code: 1, data: { sent_to: to, email_code: sr && sr.code } };
+    const sr = await _newsletter_send_sample_internal(ret.data, to, req.theme);
+    return { code: 1, data: { sent_to: to, email_code: sr && sr.code, theme: req.theme || 'light' } };
   } catch (err) {
     return { code: -1, data: err.message };
   }

package/index_ms.mjs

@@ -121,6 +121,14 @@ export const get_account_external_apps = async function (...args) {
   return await broker.send_to_queue("get_account_external_apps", ...args);
 };
 
+export const get_load_balancer_candidates = async function (...args) {
+  return await broker.send_to_queue("get_load_balancer_candidates", ...args);
+};
+
+export const get_account_balancers = async function (...args) {
+  return await broker.send_to_queue("get_account_balancers", ...args);
+};
+
 export const get_account_info = async function (...args) {
   return await broker.send_to_queue("get_account_info", ...args);
 };

package/index_msa.mjs

@@ -121,6 +121,14 @@ export const get_account_external_apps =  function (...args) {
    broker.send_to_queue_async("get_account_external_apps", ...args);
 };
 
+export const get_load_balancer_candidates =  function (...args) {
+   broker.send_to_queue_async("get_load_balancer_candidates", ...args);
+};
+
+export const get_account_balancers =  function (...args) {
+   broker.send_to_queue_async("get_account_balancers", ...args);
+};
+
 export const get_account_info =  function (...args) {
    broker.send_to_queue_async("get_account_info", ...args);
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xuda.io/account_module",
-  "version": "1.2.2281",
+  "version": "1.2.2283",
   "description": "Xuda Account Server Module",
   "main": "index.mjs",
   "dependencies": {