@xuda.io/account_module 1.2.2316 → 1.2.2317

package/index.mjs

@@ -36,6 +36,11 @@ const account_info_properties = [
   'active_account_profile_id',
   'profile_avatar',
   'profile_avatar_obj',
+  // How large the avatar DRAWS, as a multiplier. A display setting rather than
+  // anything about the file: the picture window's Smaller / Larger buttons write
+  // it and every surface that renders the avatar reads it, so one adjustment
+  // moves the face in the card, the menu and the sidebar at once.
+  'profile_avatar_zoom',
   'is_xuda_network_ambassador',
   'network_profile_url',
   'network_lang',
@@ -172,10 +177,24 @@ const can_generate_avatar = (account_obj) => account_obj?.stat !== 1 && Number(a
 // That is what makes this safe to evaluate on every save: replacing the photo
 // makes an avatar due exactly once, and nothing the client writes into
 // profile_avatar can make it due a second time.
+// How long a generation may claim to be running before the claim is treated as
+// abandoned. A real one takes seconds, and the worker cannot clear its own stat
+// when the process dies under it (a deploy, an OOM, a restart), so without an
+// expiry the flag is permanent. The same five minutes the contact avatar states
+// already use for exactly this.
+const AVATAR_STAT_STALE_MS = 1000 * 60 * 5;
+const avatar_is_running = (info) => info?.profile_avatar_stat === 2 && !!info.profile_avatar_stat_ts && Date.now() - info.profile_avatar_stat_ts < AVATAR_STAT_STALE_MS;
+
 const avatar_is_due = (account_info) => {
   const info = account_info || {};
   if (!info.profile_picture) return false;
-  if (info.profile_avatar_stat === 2) return false; // one is already generating
+  // One is already generating. Only counts while it is plausibly still alive:
+  // a stat 2 that has not moved in five minutes is a run that died, and
+  // refusing on its behalf wedges the account permanently. Found on a real
+  // account 2026-08-13, stuck at stat 2 for three days, where every request for
+  // an avatar (the server's own trigger AND the picture window) was declined by
+  // this line on behalf of a run that ended days earlier.
+  if (avatar_is_running(info)) return false;
   return info.profile_avatar_from !== info.profile_picture;
 };
 
@@ -455,14 +474,39 @@ export const update_account_info = async function (req, job_id, headers) {
   return save_ret;
 };
 export const update_account_preferences = async function (req) {
-  const { uid, hide_create_button, default_dashboard, sidebar_style, enable_thumbnail_avatar_generation, sidenav_mode, newsletter_opt_in, dashboard_sort } = req;
+  const { uid, hide_create_button, default_dashboard, sidebar_style, enable_thumbnail_avatar_generation, sidenav_mode, newsletter_opt_in, dashboard_sort, locale } = req;
   try {
     let account_doc = await db_module.get_couch_doc_native('xuda_accounts', uid);
     account_doc.ts = Date.now();
 
     // Merge over the existing prefs so a save from a screen that doesn't
     // know about newer keys (e.g. sidenav_mode) can't silently wipe them.
-    account_doc.preferences = { ...(account_doc.preferences || {}), hide_create_button, default_dashboard, sidebar_style, enable_thumbnail_avatar_generation };
+    //
+    // UI-234: these four USED to be written unconditionally, which made the merge above
+    // a lie for exactly the keys it was supposed to protect: a caller sending
+    // one key (the newsletter switch, the onboarding checkbox, the dashboard
+    // sort) also sent `undefined` for the other four, and undefined does not
+    // survive JSON, so the keys were dropped from the saved doc. Toggling the
+    // newsletter really did reset hide_create_button, default_dashboard,
+    // sidebar_style and enable_thumbnail_avatar_generation. Every key is
+    // surgical now, on the same `!== undefined` rule as the ones below.
+    account_doc.preferences = { ...(account_doc.preferences || {}) };
+    if (hide_create_button !== undefined) account_doc.preferences.hide_create_button = hide_create_button;
+    if (default_dashboard !== undefined) account_doc.preferences.default_dashboard = default_dashboard;
+    if (sidebar_style !== undefined) account_doc.preferences.sidebar_style = sidebar_style;
+    if (enable_thumbnail_avatar_generation !== undefined) account_doc.preferences.enable_thumbnail_avatar_generation = enable_thumbnail_avatar_generation;
+
+    // Display language, as a BCP-47 style tag ('en', 'he', 'ar', 'pt-BR').
+    // Validated on SHAPE only, deliberately: the list of languages the product
+    // actually speaks lives in shared/i18n/locales.js and the client resolves an
+    // unknown tag down to English there. Checking the list here as well would
+    // mean redeploying this module every time a language is added, to reject a
+    // value the client already handles. Sending null clears it back to the
+    // browser's own choice.
+    if (locale !== undefined) {
+      if (locale === null || locale === '') delete account_doc.preferences.locale;
+      else if (typeof locale === 'string' && /^[a-z]{2,3}(-[A-Za-z0-9]{2,8})?$/.test(locale)) account_doc.preferences.locale = locale;
+    }
     // 'static' (curated groups, today's behavior) | 'recent' (auto-reorder
     // by last activity). Only touched when the caller sends it.
     if (sidenav_mode !== undefined) account_doc.preferences.sidenav_mode = sidenav_mode;
@@ -791,6 +835,13 @@ const _MODULE_SUBSCRIPTIONS = [
   // today and owes nothing new. Judged on price, so Free reads as not active, because
   // here that is the truth: Free adds nothing and holds no line on the invoice.
   { key: 'drive', scope: 'account', field: 'drive_plan', default_plan: 'drive_free' },
+  // UI-228: Xudex is sold on its own xudex_* ladder, and unlike every other row here it
+  // is not available at all below a membership floor (Pro), because a product that runs
+  // arbitrary customer code is the classic mining target and identity is the cheapest
+  // defence against that. The floor is NOT enforced here on purpose: this array answers
+  // "what is on the invoice", and the entitlement question belongs in one place, next to
+  // the thing that hands out a machine (deploy_module `_xudex_entitlement`).
+  { key: 'xudex', scope: 'account', field: 'xudex_plan', default_plan: 'xudex_free', is_activated: (a) => !!a.xudex_plan },
 ];
 
 // app_type -> the row it belongs under. An app type that is not here is not a
@@ -5998,6 +6049,77 @@ export const add_contact = async function (req, job_id, headers) {
   }
 };
 
+/**
+ * File a contact that was TYPED rather than received.
+ *
+ * Every other path into the contact book starts from an envelope — a mail
+ * sync, the profile contact form, an accepted friend request — and reads the
+ * person off it. This one starts from a person, so it takes the four fields a
+ * contact actually has and nothing else. A caller holding more than that (the
+ * shipping form holds a whole street address, coordinates included) drops the
+ * rest here: a delivery address belongs to a shipment, not to a person.
+ *
+ * Deliberately a narrow front door onto add_contact rather than exposing that
+ * method to the browser. http_module validates the declared fields but forwards
+ * the request body WHOLE, so an exposed add_contact would also hand a browser
+ * caller contact_uid (links the contact to any account, and fetches that
+ * account's doc), stat (including 4, deleted) and team_req_id. None of those
+ * are reachable through here.
+ */
+export const create_contact = async function (req, job_id, headers) {
+  try {
+    const { uid, profile_id } = req;
+    if (!uid) return { code: -1, data: 'uid missing' };
+
+    // Same limits as the profile contact form, so a contact looks the same
+    // whether it walked in through a website or was typed into the dashboard.
+    const name = typeof req.name === 'string' ? req.name.trim().slice(0, 120) : '';
+    const email = typeof req.email === 'string' ? req.email.trim().toLowerCase().slice(0, 200) : '';
+    const phone = typeof req.phone === 'string' ? req.phone.trim().slice(0, 40) : '';
+    const company = typeof req.company === 'string' ? req.company.trim().slice(0, 120) : '';
+
+    if (!name) return { code: -1, data: 'A name is needed to create a contact.' };
+    // The book is keyed by email: it is the duplicate check, and the only thing
+    // that can match a later message back to this person. Without one there is
+    // nothing to file.
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) return { code: -1, data: 'A valid email address is needed to create a contact.' };
+
+    const ret = await add_contact(
+      {
+        uid,
+        profile_id,
+        name,
+        email,
+        source: typeof req.source === 'string' ? req.source.trim().slice(0, 60) || 'manual' : 'manual',
+        context: typeof req.context === 'string' ? req.context.trim().slice(0, 200) : 'Added by hand',
+        metadata: {
+          // The two fields a contact doc has no column of its own for. This is
+          // where contact_form_submit puts them too, so the contact card and
+          // every reader downstream already know to look here.
+          phone,
+          company,
+          // Skips the spam classifier: the account holder typed this person in
+          // themselves, which is the strongest not-junk signal there is.
+          not_junk: true,
+        },
+      },
+      job_id,
+      headers,
+    );
+
+    // add_contact answers a duplicate with code -1 and the id of the contact
+    // that already exists. To the caller that is not a failure — the person is
+    // in the book, which is what they asked for — so report it as a success
+    // that says which one it was.
+    if (ret?.contact_id) return { code: 1, data: { contact_id: ret.contact_id, name, email, existed: true } };
+    if (!(ret?.code > -1)) return { code: -1, data: typeof ret?.data === 'string' ? ret.data : 'Could not create the contact.' };
+
+    return { code: 1, data: { contact_id: ret.data?.id || ret.data?._id || null, name, email, existed: false } };
+  } catch (err) {
+    return { code: -1, data: err.message };
+  }
+};
+
 const set_contact_profile_picture = async function (uid, contact_id, metadata, job_id, headers, account_profile_info, create_avatar) {
   let contact_obj;
   await update_contact_profile_picture_status(uid, contact_id, 1);

package/index_ms.mjs

@@ -401,6 +401,10 @@ export const add_contact = async function (...args) {
   return await broker.send_to_queue("add_contact", ...args);
 };
 
+export const create_contact = async function (...args) {
+  return await broker.send_to_queue("create_contact", ...args);
+};
+
 export const get_contacts = async function (...args) {
   return await broker.send_to_queue("get_contacts", ...args);
 };

package/index_msa.mjs

@@ -401,6 +401,10 @@ export const add_contact =  function (...args) {
    broker.send_to_queue_async("add_contact", ...args);
 };
 
+export const create_contact =  function (...args) {
+   broker.send_to_queue_async("create_contact", ...args);
+};
+
 export const get_contacts =  function (...args) {
    broker.send_to_queue_async("get_contacts", ...args);
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xuda.io/account_module",
-  "version": "1.2.2316",
+  "version": "1.2.2317",
   "description": "Xuda Account Server Module",
   "main": "index.mjs",
   "dependencies": {