flexbiz-server 12.5.25 → 12.5.26

package/package.json

@@ -2,7 +2,7 @@
 	"name": "flexbiz-server",
 	"main": "./server/app.js",
 	"description": "Flexible Server",
-	"version": "12.5.25",
+	"version": "12.5.26",
 	"author": {
 		"name": "Van Truong Pham",
 		"email": "invncur@gmail.com"

package/server/controllers/controller.js

@@ -10,9 +10,9 @@ fields:["tg_tk","kg_kiem_tra_ton_kho","kg_kiem_tra_ton_kho_tt",{cb:"combo"},"ten
 return $c$$}):[$detail$$]).reduce(($a$$,$b$$)=>$a$$.concat($b$$),[]);await $details$$.asyncJoinModel2($appInfo$$._id,dmqddvt,{where:{ma_vt:"ma_vt",ma_dvt:"ma_dvt"},fields:"ty_le_qd"});let $data_sokho$$=[];$data$$._id&&($data_sokho$$=await global.getModel("sokho").find({id_ct:$data$$._id.toString()}).lean());$details$$.forEach($d$$=>{$d$$.he_so_qd=$d$$.ty_le_qd||1;$d$$.sl_xuat_qd=$d$$.he_so_qd*$d$$.sl_xuat});$details$$=await $details$$.asyncGroupBy(["ma_vt","ma_kho","ten_vt"],["sl_xuat_qd"]);async.map($details$$,
 ($d$$,$callback$$)=>{let $ma_kho$$=$d$$.ma_kho||$data$$.ma_kho||$data$$.ma_kho_x,$query$$={ma_vt:$d$$.ma_vt,ma_kho:$ma_kho$$,ngay:new Date,id_app:$appInfo$$._id};$d$$.kg_kiem_tra_ton_kho_tt||($d$$.ma_lo&&($query$$.ma_lo=$d$$.ma_lo),$d$$.han_sd&&($query$$.han_sd=$d$$.han_sd),$d$$.ma_tt1&&($query$$.ma_tt1=$d$$.ma_tt1),$d$$.ma_tt2&&($query$$.ma_tt2=$d$$.ma_tt2),$d$$.ma_tt3&&($query$$.ma_tt3=$d$$.ma_tt3));ckvt($query$$,function($e$$,$rs$$){if($e$$)return $callback$$($e$$);$rs$$?($e$$=$rs$$.csum("ton"),
 $rs$$=$data_sokho$$.filter($s$$=>$s$$.ma_vt===$d$$.ma_vt&&$s$$.ma_kho===$ma_kho$$).reduce(($a$$,$b$$)=>($a$$.sl_xuat_qd||0)+($b$$.sl_xuat_qd||0),0),$d$$.sl_xuat_qd>utils.round($e$$+$rs$$,2)?$callback$$(`S\u1ea3n ph\u1ea9m ${$d$$.ma_vt} - ${$d$$.ten_vt} c\u00f3 s\u1ed1 l\u01b0\u1ee3ng xu\u1ea5t quy \u0111\u1ed5i (${$d$$.sl_xuat_qd}) l\u1edbn h\u01a1n s\u1ed1 l\u01b0\u1ee3ng t\u1ed3n quy \u0111\u1ed5i (${$e$$+$rs$$})`):$callback$$()):$callback$$()})},$e$$=>{$callback$$($e$$)})})():$callback$$()}},$e$$=>
-{$fn$$($e$$)})}async cacheData($obj$$,$callback$$){$obj$$&&$obj$$.toObject&&($obj$$=utils.convertObjectIdsToStrings($obj$$.toObject()));await redisCache.set(this.model_name,$obj$$,$callback$$)}async deleteData($obj$$,$callback$$){$obj$$&&$obj$$.toObject&&($obj$$=utils.convertObjectIdsToStrings($obj$$.toObject()));await redisCache.remove(this.model_name,$obj$$,$callback$$)}createRoute($routeName$$,$handler_routeAction$$,$_options$$={method:"GET",not_use_worker:!1}){const $self$$=this;$_options$$.method=
-$_options$$.method?$_options$$.method.toUpperCase():"GET";const $route_action_key$$=`route_action_${$self$$.name}_${$routeName$$}_${$_options$$.method}`;$self$$[$route_action_key$$]=$handler_routeAction$$;$handler_routeAction$$=async function($req$$,$res$$){const {query:$query$$,body:$body$$,user:$user$$,params:$params$$,headers:$headers$$,files:$files$$}=$req$$,$user_agent$$=$req$$.header("user-agent"),$ip$$=$req$$.ip||$req$$.headers["x-forwarded-for"]||$req$$.connection.remoteAddress;try{const $_req$$=
-{handler:"createRouteHandler",routeName:$routeName$$,_options:$_options$$,route_action_key:$route_action_key$$,query:$query$$,body:$body$$,user:$user$$,params:$params$$,headers:$headers$$,user_agent:$user_agent$$,ip:$ip$$,files:$files$$,originalUrl:$req$$.originalUrl};global.inputMainPool&&!$_options$$.not_use_worker?global.inputMainPool.exec({req:$_req$$,module:$self$$.name.toUpperCase(),configs:JSON.stringify(configs)},$response$$=>{if($response$$.error)return $res$$.status(400).send({error:$response$$.error.error||
+{$fn$$($e$$)})}async cacheData($obj$$,$callback$$){$obj$$&&$obj$$.toObject&&($obj$$=utils.convertObjectIdsToStrings($obj$$.toObject()));await redisCache.set(this.model_name,$obj$$,$callback$$)}async deleteData($obj$$,$callback$$){$obj$$&&$obj$$.toObject&&($obj$$=utils.convertObjectIdsToStrings($obj$$.toObject()));await redisCache.remove(this.model_name,$obj$$,$callback$$)}createRoute($routeName$$,$handler_routeAction$$,$_options$$={method:"GET",not_use_worker:!1,right_code:"view"}){const $self$$=
+this;$_options$$.method=$_options$$.method?$_options$$.method.toUpperCase():"GET";const $route_action_key$$=`route_action_${$self$$.name}_${$routeName$$}_${$_options$$.method}`;$self$$[$route_action_key$$]=$handler_routeAction$$;$handler_routeAction$$=async function($req$$,$res$$){const {query:$query$$,body:$body$$,user:$user$$,params:$params$$,headers:$headers$$,files:$files$$}=$req$$,$user_agent$$=$req$$.header("user-agent"),$ip$$=$req$$.ip||$req$$.headers["x-forwarded-for"]||$req$$.connection.remoteAddress;
+try{const $_req$$={handler:"createRouteHandler",routeName:$routeName$$,_options:$_options$$,route_action_key:$route_action_key$$,query:$query$$,body:$body$$,user:$user$$,params:$params$$,headers:$headers$$,user_agent:$user_agent$$,ip:$ip$$,files:$files$$,originalUrl:$req$$.originalUrl};global.inputMainPool&&!$_options$$.not_use_worker?global.inputMainPool.exec({req:$_req$$,module:$self$$.name.toUpperCase(),configs:JSON.stringify(configs)},$response$$=>{if($response$$.error)return $res$$.status(400).send({error:$response$$.error.error||
 $response$$.error.message||$response$$.error,message:$response$$.message||$response$$.error.error||$response$$.error.message||$response$$.error});$res$$.send($response$$.result)}):handlers.createRouteHandler($self$$,$_req$$,($e$$,$rs$$)=>{if($e$$)return $res$$.status(400).send($e$$);$res$$.send($rs$$)})}catch($e$$){$res$$.status(400).send($e$$)}};let $url$$=`${this.route_name}/${$routeName$$}`,$router$$=this.router;$_options$$.method=="DELETE"?$router$$.route($url$$).delete($handler_routeAction$$):
 $_options$$.method=="POST"?$router$$.route($url$$).post($handler_routeAction$$):$_options$$.method=="PUT"?$router$$.route($url$$).put($handler_routeAction$$):$router$$.route($url$$).get($handler_routeAction$$)}async requestApprove($app_info_listinfo_code$$,$user_request$$,$obj_request$$,$next$$,$str_func$jscomp$2_str_func$$,$preRequest$$){let $ctrl$$=this;if(!$app_info_listinfo_code$$)return $next$$(null,$obj_request$$);let $obj$$;$obj$$=$obj_request$$.toObject?utils.convertObjectIdsToStrings($obj_request$$.toObject()):
 _.cloneDeep($obj_request$$);$obj$$.ma_ct=$obj$$.ma_ct||$ctrl$$.name;let $approveDatas$$=[];$app_info_listinfo_code$$=$obj$$.listinfo_code||$ctrl$$.name;$str_func$jscomp$2_str_func$$||($str_func$jscomp$2_str_func$$=(await OptionsModel.findOne({id_app:$obj$$.id_app,id_func:$app_info_listinfo_code$$},{option:1}).lean()||{}).option);$str_func$jscomp$2_str_func$$&&$str_func$jscomp$2_str_func$$.custom_approve_user&&$str_func$jscomp$2_str_func$$.custom_approve_user.forEach($trang_thai_approve$$=>{let $update_after_approve$$,

package/server/controllers/controllerRPT.js

@@ -24,8 +24,8 @@ $res$$.setHeader("Content-Length",$data$jscomp$2_data$jscomp$3_response$jscomp$3
 $res$$.end($data$jscomp$4_data$jscomp$5_returnvalue$$);break;case "docx":$res$$.setHeader("Content-Type","application/vnd.openxmlformats-officedocument.wordprocessingml.document");$res$$.setHeader("Content-Disposition",'attachment; filename="'+$rptId$$+'".docx');$data$jscomp$4_data$jscomp$5_returnvalue$$=$e$jscomp$7_result$$;$data$jscomp$4_data$jscomp$5_returnvalue$$?.type==="Buffer"&&Array.isArray($data$jscomp$4_data$jscomp$5_returnvalue$$.data)&&($data$jscomp$4_data$jscomp$5_returnvalue$$=Buffer.from($data$jscomp$4_data$jscomp$5_returnvalue$$.data));
 $res$$.setHeader("Content-Length",$data$jscomp$4_data$jscomp$5_returnvalue$$.length);$res$$.end($data$jscomp$4_data$jscomp$5_returnvalue$$);break;default:$res$$.send($e$jscomp$7_result$$)}})}catch($e$$){$res$$.status(400).send($e$$)}};$router$$.route(`${this.base_path+this.module}`).get($mainRoute$$);$router$$.route(`${this.base_path+this.module}`).post($mainRoute$$);$router$$.route(`${this.base_path+this.module}/excel`).get($excelRoute$$);$router$$.route(`${this.base_path+this.module}/excel`).post($excelRoute$$)}getData($req$$,
 $callback$$){const $ctrl$$=this;let $callback_run$$=!1;setImmediate(()=>{try{$ctrl$$.fecthDataFunc($req$$,($err$$,$data$$,$event$$)=>{if($ctrl$$.options?.stream){if($err$$)return $callback$$($err$$);$event$$!="data"||$callback_run$$||($callback_run$$=!0,this.handleResult($req$$,{error:$err$$,result:$data$$},($e$$,$rs$$)=>{$callback$$($e$$,$rs$$)}))}else $callback_run$$=!0,this.handleResult($req$$,{error:$err$$,result:$data$$},($e$$,$rs$$)=>{$callback$$($e$$,$rs$$)})})}catch($e$$){console.error("[report controller] [getData]",
-$e$$),$callback$$($e$$.message)}})}createRoute($routeName$$,$callbackRoute_handler$$,$_options$$={method:"GET",not_use_worker:!1}){const $self$$=this;$_options$$.method=$_options$$.method?$_options$$.method.toUpperCase():"GET";const $route_action_key$$=`rpt_route_action_${$self$$.module}_${$routeName$$}_${$_options$$.method}`;$self$$[$route_action_key$$]=$callbackRoute_handler$$;$callbackRoute_handler$$=async function($ip$jscomp$2_req$$,$res$$){const {query:$query$$,body:$body$$,user:$user$$,params:$params$$,
-files:$files$$}=$ip$jscomp$2_req$$;var $_req$jscomp$2_user_agent$$=$ip$jscomp$2_req$$.header("user-agent");$ip$jscomp$2_req$$=$ip$jscomp$2_req$$.ip||$ip$jscomp$2_req$$.headers["x-forwarded-for"]||$ip$jscomp$2_req$$.connection.remoteAddress;try{if($_req$jscomp$2_user_agent$$={handler:"rptCreateRouteHandler",routeName:$routeName$$,_options:$_options$$,route_action_key:$route_action_key$$,query:$query$$,body:$body$$,user:$user$$,params:$params$$,user_agent:$_req$jscomp$2_user_agent$$,ip:$ip$jscomp$2_req$$,
-files:$files$$},!global.reportMainPool||global.reportMainPool.fullQueue()||$_options$$.not_use_worker)handlers.rptCreateRouteHandler(this,$_req$jscomp$2_user_agent$$,($e$$,$returnvalue$$)=>{if($e$$)return $res$$.status(400).send($e$$);$res$$.send($returnvalue$$)});else{const $id_task$$=`report-create-route-${crypto.randomBytes(20).toString("hex")}`;global.reportMainPool.exec({id_task:$id_task$$,req:$_req$jscomp$2_user_agent$$,module:$self$$.module.toUpperCase(),configs:JSON.stringify(configs)},$response$jscomp$6_result$$=>
-{if($response$jscomp$6_result$$.error)return $res$$.status(400).send($response$jscomp$6_result$$.error);({result:$response$jscomp$6_result$$}=$response$jscomp$6_result$$);$res$$.send($response$jscomp$6_result$$)})}}catch($e$$){$res$$.status(400).send($e$$)}};$_options$$.method=="DELETE"?this.router.route(`${this.base_path+this.module}/${$routeName$$}`).delete($callbackRoute_handler$$):$_options$$.method=="POST"?this.router.route(`${this.base_path+this.module}/${$routeName$$}`).post($callbackRoute_handler$$):
+$e$$),$callback$$($e$$.message)}})}createRoute($routeName$$,$callbackRoute_handler$$,$_options$$={method:"GET",not_use_worker:!1,right_code:"view"}){const $self$$=this;$_options$$.method=$_options$$.method?$_options$$.method.toUpperCase():"GET";const $route_action_key$$=`rpt_route_action_${$self$$.module}_${$routeName$$}_${$_options$$.method}`;$self$$[$route_action_key$$]=$callbackRoute_handler$$;$callbackRoute_handler$$=async function($ip$jscomp$2_req$$,$res$$){const {query:$query$$,body:$body$$,
+user:$user$$,params:$params$$,files:$files$$}=$ip$jscomp$2_req$$;var $_req$jscomp$2_user_agent$$=$ip$jscomp$2_req$$.header("user-agent");$ip$jscomp$2_req$$=$ip$jscomp$2_req$$.ip||$ip$jscomp$2_req$$.headers["x-forwarded-for"]||$ip$jscomp$2_req$$.connection.remoteAddress;try{if($_req$jscomp$2_user_agent$$={handler:"rptCreateRouteHandler",routeName:$routeName$$,_options:$_options$$,route_action_key:$route_action_key$$,query:$query$$,body:$body$$,user:$user$$,params:$params$$,user_agent:$_req$jscomp$2_user_agent$$,
+ip:$ip$jscomp$2_req$$,files:$files$$},!global.reportMainPool||global.reportMainPool.fullQueue()||$_options$$.not_use_worker)handlers.rptCreateRouteHandler(this,$_req$jscomp$2_user_agent$$,($e$$,$returnvalue$$)=>{if($e$$)return $res$$.status(400).send($e$$);$res$$.send($returnvalue$$)});else{const $id_task$$=`report-create-route-${crypto.randomBytes(20).toString("hex")}`;global.reportMainPool.exec({id_task:$id_task$$,req:$_req$jscomp$2_user_agent$$,module:$self$$.module.toUpperCase(),configs:JSON.stringify(configs)},
+$response$jscomp$6_result$$=>{if($response$jscomp$6_result$$.error)return $res$$.status(400).send($response$jscomp$6_result$$.error);({result:$response$jscomp$6_result$$}=$response$jscomp$6_result$$);$res$$.send($response$jscomp$6_result$$)})}}catch($e$$){$res$$.status(400).send($e$$)}};$_options$$.method=="DELETE"?this.router.route(`${this.base_path+this.module}/${$routeName$$}`).delete($callbackRoute_handler$$):$_options$$.method=="POST"?this.router.route(`${this.base_path+this.module}/${$routeName$$}`).post($callbackRoute_handler$$):
 $_options$$.method=="PUT"?this.router.route(`${this.base_path+this.module}/${$routeName$$}`).put($callbackRoute_handler$$):this.router.route(`${this.base_path+this.module}/${$routeName$$}`).get($callbackRoute_handler$$)}}module.exports=controllerRPT;

package/server/controllers/createRouteHandler.js

@@ -1,4 +1,4 @@
 const permission=require("../libs/permission"),{ERRORS}=require("./controllerUtils"),createRouteHandler=async($ctrl$$,$req$$,$callback$$)=>{let $res_send$$=!1;const {routeName:$routeName$$,route_action_key:$route_action_key$$,_options:$_options$$}=$req$$;if($ctrl$$.require_id_app===!1)try{$ctrl$$[$route_action_key$$]($req$$,function($e$$,$rs$$){if($res_send$$)return console.error("route",$routeName$$,"sent header. callback had call");if($e$$){console.error("create route",$routeName$$,$e$$);if($e$$.error)return $res_send$$=
-!0,$callback$$($e$$);$res_send$$=!0;return $callback$$({error:$e$$.message||$e$$})}$res_send$$=!0;return $callback$$(null,$rs$$)})}catch($e$$){return console.error("route",$routeName$$,$e$$),$res_send$$=!0,$callback$$({error:$e$$.message||$e$$})}else{let $id_app$$=$req$$.params.id_app,$notNeedRight$$=$_options$$.notNeedRight||await $ctrl$$.notNeedRight($req$$.user);permission.hasRight($id_app$$,$req$$.user.email,$ctrl$$.module,"view",function($error$$,$hr$$){if($res_send$$)return console.error("route",
+!0,$callback$$($e$$);$res_send$$=!0;return $callback$$({error:$e$$.message||$e$$})}$res_send$$=!0;return $callback$$(null,$rs$$)})}catch($e$$){return console.error("route",$routeName$$,$e$$),$res_send$$=!0,$callback$$({error:$e$$.message||$e$$})}else{let $id_app$$=$req$$.params.id_app,$notNeedRight$$=$_options$$.notNeedRight||await $ctrl$$.notNeedRight($req$$.user);permission.hasRight($id_app$$,$req$$.user.email,$ctrl$$.module,$_options$$?.right_code||"view",function($error$$,$hr$$){if($res_send$$)return console.error("route",
 $routeName$$,"sent header. hasRight had call");if($hr$$)try{$ctrl$$[$route_action_key$$]($req$$,function($e$$,$rs$$){$res_send$$&&console.error("route",$routeName$$,"sent header. callback had call");if($e$$){if($e$$.error)return $res_send$$=!0,$callback$$($e$$);$res_send$$=!0;return $callback$$({error:$e$$.message||$e$$})}$res_send$$=!0;return $callback$$(null,$rs$$)})}catch($e$$){return $res_send$$=!0,console.error("route",$routeName$$,$e$$),$callback$$({error:$e$$.message||$e$$})}else return $res_send$$=
 !0,$callback$$({error:$error$$.error||$error$$||ERRORS.ERR_NOT_PERMIT,code:$error$$.code||ERRORS.ERR_NOT_PERMIT_CODE})},{notNeedRight:$notNeedRight$$})}};module.exports=createRouteHandler;

package/server/controllers/rptCreateRouteHandler.js

@@ -1,4 +1,4 @@
 const permission=require("../libs/permission"),createRouteHandler=async($ctrl$$,$req$$,$callback$$)=>{const {routeName:$routeName$$,route_action_key:$route_action_key$$,_options:$_options$$}=$req$$;let $notNeedRight$$=$_options$$.notNeedRight||await $ctrl$$.notNeedRight($req$$.user),$res_send$$=!1;if($ctrl$$.options.require_id_app===!1)try{$ctrl$$[$route_action_key$$]($req$$,function($e$$,$rs$$){if($res_send$$)return console.error("no id_app route",$routeName$$,"sent header. calback had call");if($e$$){console.error("handle create route ",
-$routeName$$,$e$$);if($e$$.error)return $res_send$$=!0,$callback$$($e$$);$res_send$$=!0;return $callback$$({error:$e$$.message||$e$$})}$res_send$$=!0;return $callback$$(null,$rs$$)})}catch($e$$){return $res_send$$=!0,$callback$$({error:$e$$.message||$e$$})}else permission.hasRight($req$$.params.id_app,$req$$.user.email,$ctrl$$.module,"view",function($error$$,$hr$$){if($res_send$$)return console.error("route",$routeName$$,"sent header. hasRight had call");if($hr$$)try{$ctrl$$[$route_action_key$$]($req$$,
+$routeName$$,$e$$);if($e$$.error)return $res_send$$=!0,$callback$$($e$$);$res_send$$=!0;return $callback$$({error:$e$$.message||$e$$})}$res_send$$=!0;return $callback$$(null,$rs$$)})}catch($e$$){return $res_send$$=!0,$callback$$({error:$e$$.message||$e$$})}else permission.hasRight($req$$.params.id_app,$req$$.user.email,$ctrl$$.module,$_options$$?.right_code||"view",function($error$$,$hr$$){if($res_send$$)return console.error("route",$routeName$$,"sent header. hasRight had call");if($hr$$)try{$ctrl$$[$route_action_key$$]($req$$,
 function($e$$,$rs$$){if($res_send$$)return console.error("route",$routeName$$,"sent header. calback had call");if($e$$){console.error("handle create route ",$routeName$$,$e$$);if($e$$.error)return $res_send$$=!0,$callback$$($e$$);$res_send$$=!0;return $callback$$({error:$e$$.message||$e$$})}$res_send$$=!0;return $callback$$(null,$rs$$)})}catch($e$$){return $callback$$({error:$e$$.message||$e$$})}else $res_send$$=!0,$callback$$({error:"B\u1ea1n kh\u00f4ng c\u00f3 quy\u1ec1n xem b\u00e1o c\u00e1o n\u00e0y"})},
 {notNeedRight:$notNeedRight$$})};module.exports=createRouteHandler;

package/server/libs/joinData.js

@@ -27,11 +27,12 @@ $newBatchCacheKey_val$$}else $remainingManualQueries$$.push($mq$$)});$manualQuer
 function mergeFields($plan$$,$newFields$$){$plan$$.fields!==null&&($newFields$$===void 0?$plan$$.fields=null:($plan$$.fields?Object.assign($plan$$.fields,$newFields$$):$plan$$.fields={...$newFields$$},$plan$$.dynamicKey&&($plan$$.fields[$plan$$.dynamicKey]=1)))}
 async function executeQueries($batchPlan$$,$manualQueries$$,$options$$,$id_app$$){const $fetchedCache$$={};await runWithoutSession(async()=>{const $promises$$=[];Object.values($batchPlan$$).forEach($plan$$=>{const $values$$=Array.from($plan$$.values).filter($v$$=>$v$$!=null);$values$$.length&&$promises$$.push((async()=>{try{const $modelName$$=$plan$$.model.modelName,$isCacheEnabled$$=$options$$.cache&&cachedKeys&&cachedKeys[$modelName$$];let $missingValues$$=[...$values$$];if($isCacheEnabled$$&&global.clientRedis){const $redisMap$$=
 $values$$.map($val$$=>{var $rKey_tempQ$$={...$plan$$.staticQuery};$rKey_tempQ$$[$plan$$.dynamicKey]=$val$$;$rKey_tempQ$$=generateRedisKey($modelName$$,$rKey_tempQ$$,$id_app$$);return{val:$val$$,rKey:$rKey_tempQ$$}}),$keysToGet$$=$redisMap$$.map($i$$=>$i$$.rKey),$results$$=await redisMGet($keysToGet$$)||[];$missingValues$$=[];$results$$.forEach(($jsonStr$$,$i$$)=>{$i$$=$redisMap$$[$i$$].val;if($jsonStr$$)try{const $data$$=JSON.parse($jsonStr$$);$data$$._id&&($data$$._id=$data$$._id.toString());const $cacheKey$$=
-`${$plan$$.signature}_VAL_${$i$$==null?"__NULL__":$plan$$.dynamicKey==="_id"?$i$$.toString():$i$$}`.replace(/\./g,"_");$fetchedCache$$[$cacheKey$$]=$data$$}catch($e$$){console.error("[joinData] parse d\u1eef li\u1ec7u t\u1eeb redis",$e$$),$missingValues$$.push($i$$)}else $missingValues$$.push($i$$)})}$plan$$.dynamicKey==="_id"&&($missingValues$$=$missingValues$$.filter($m$$=>isValidObjectId($m$$)));if($missingValues$$.length){const $query$$={...$plan$$.staticQuery,[$plan$$.dynamicKey]:{$in:$missingValues$$}};
-$id_app$$&&$plan$$.model.schema.paths.id_app&&($query$$.id_app=$id_app$$);let $mq$$=$plan$$.model.find($query$$);$plan$$.fields&&($mq$$=$mq$$.select($plan$$.fields));let $dbResults$$;try{$dbResults$$=await $mq$$.lean()}catch($e$$){throw console.error("[joinData] Batch Error with query:",JSON.stringify($query$$,null,2)),$e$$;}$dbResults$$.forEach($row$$=>{$row$$._id&&($row$$._id=$row$$._id.toString());var $cacheKey$jscomp$4_val$$=$row$$[$plan$$.dynamicKey];$cacheKey$jscomp$4_val$$=`${$plan$$.signature}_VAL_${$cacheKey$jscomp$4_val$$==
-null?"__NULL__":$plan$$.dynamicKey==="_id"?$cacheKey$jscomp$4_val$$.toString():$cacheKey$jscomp$4_val$$}`.replace(/\./g,"_");$fetchedCache$$[$cacheKey$jscomp$4_val$$]=$row$$})}}catch($e$$){console.error("[joinData] Batch Error:",$e$$.message)}})())});const $pendingRequests$$=new Map;$manualQueries$$.forEach($mq$$=>{const $key$$=$mq$$.cacheKey;if($pendingRequests$$.has($key$$))$promises$$.push($pendingRequests$$.get($key$$));else{var $executionPromise$$=(async()=>{try{let $data$$=null;if($options$$.cache&&
-cachedKeys&&cachedKeys[$mq$$.modelName]&&global.clientRedis){const $jsonStr$$=await redisGet($mq$$.cacheKey);if($jsonStr$$)try{$data$$=JSON.parse($jsonStr$$)}catch($e$$){console.warn("JSON parse error from Redis:",$mq$$.cacheKey)}}if(!$data$$){console.log("[joinData][manualQueries]",$mq$$.model.modelName,$mq$$.query);let $query$$=$mq$$.model.findOne($mq$$.query);$mq$$.fields&&($query$$=$query$$.select($mq$$.fields));$data$$=await $query$$.lean()}$data$$?($data$$._id&&($data$$._id=$data$$._id.toString()),
-$fetchedCache$$[$mq$$.cacheKey]=$data$$):$fetchedCache$$[$mq$$.cacheKey]=null}catch($e$$){console.error("[joinData][executeQueries] Manual Query Error:",$e$$),$fetchedCache$$[$mq$$.cacheKey]=null}finally{$pendingRequests$$.delete($key$$)}})();$pendingRequests$$.set($key$$,$executionPromise$$);$promises$$.push($executionPromise$$)}});await Promise.all($promises$$)});return $fetchedCache$$}
+`${$plan$$.signature}_VAL_${$i$$==null?"__NULL__":$plan$$.dynamicKey==="_id"?$i$$.toString():$i$$}`.replace(/\./g,"_");$fetchedCache$$[$cacheKey$$]=$data$$}catch($e$$){console.warn("\u26a0\ufe0f [joinData] parse d\u1eef li\u1ec7u t\u1eeb redis",$e$$),$missingValues$$.push($i$$)}else $missingValues$$.push($i$$)})}$plan$$.dynamicKey==="_id"&&($missingValues$$=$missingValues$$.filter($m$$=>isValidObjectId($m$$)));if($missingValues$$.length){const $query$$={...$plan$$.staticQuery,[$plan$$.dynamicKey]:{$in:$missingValues$$}};
+$id_app$$&&$plan$$.model.schema.paths.id_app&&($query$$.id_app=$id_app$$);let $mq$$=$plan$$.model.find($query$$);$plan$$.fields&&($mq$$=$mq$$.select($plan$$.fields));let $dbResults$$;try{$dbResults$$=await $mq$$.lean()}catch($e$$){throw console.error("\u274c[joinData] Batch Error with query:",JSON.stringify($query$$,null,2)),$e$$;}$dbResults$$.forEach($row$$=>{$row$$._id&&($row$$._id=$row$$._id.toString());var $cacheKey$jscomp$4_val$$=$row$$[$plan$$.dynamicKey];$cacheKey$jscomp$4_val$$=`${$plan$$.signature}_VAL_${$cacheKey$jscomp$4_val$$==
+null?"__NULL__":$plan$$.dynamicKey==="_id"?$cacheKey$jscomp$4_val$$.toString():$cacheKey$jscomp$4_val$$}`.replace(/\./g,"_");$fetchedCache$$[$cacheKey$jscomp$4_val$$]=$row$$})}}catch($e$$){console.error("\u274c[joinData] Batch Error:",$e$$.message)}})())});const $pendingRequests$$=new Map;$manualQueries$$.forEach($mq$$=>{const $key$$=$mq$$.cacheKey;if($pendingRequests$$.has($key$$))$promises$$.push($pendingRequests$$.get($key$$));else{var $executionPromise$$=(async()=>{try{let $data$$=null;if($options$$.cache&&
+cachedKeys&&cachedKeys[$mq$$.modelName]&&global.clientRedis){const $jsonStr$$=await redisGet($mq$$.cacheKey);if($jsonStr$$)try{$data$$=JSON.parse($jsonStr$$)}catch($e$$){console.warn("\u26a0\ufe0f [joinData][executeQueries][manualQueries] JSON parse error from Redis:",$mq$$.cacheKey)}}if(!$data$$)if(Object.values($mq$$.query).filter($v$$=>$v$$===void 0||$v$$===null).length>0)console.warn("\u26a0\ufe0f [joinData][executeQueries][manualQueries]",$mq$$.model.modelName,": query kh\u00f4ng h\u1ee3p l\u1ec7 do c\u00f3 tr\u01b0\u1eddng c\u00f3 gi\u00e1 tr\u1ecb ==null or undefined",
+$mq$$.query);else{console.log("[joinData][manualQueries]",$mq$$.model.modelName,$mq$$.query);let $query$$=$mq$$.model.findOne($mq$$.query);$mq$$.fields&&($query$$=$query$$.select($mq$$.fields));$data$$=await $query$$.lean()}$data$$?($data$$._id&&($data$$._id=$data$$._id.toString()),$fetchedCache$$[$mq$$.cacheKey]=$data$$):$fetchedCache$$[$mq$$.cacheKey]=null}catch($e$$){console.error("\u274c[joinData][executeQueries] Manual Query Error:",$e$$),$fetchedCache$$[$mq$$.cacheKey]=null}finally{$pendingRequests$$.delete($key$$)}})();
+$pendingRequests$$.set($key$$,$executionPromise$$);$promises$$.push($executionPromise$$)}});await Promise.all($promises$$)});return $fetchedCache$$}
 async function mapResultsToItems($data$jscomp$2_items$$,$metaMap$$,$dataCache$$){for(let $item$$ of $data$jscomp$2_items$$){$data$jscomp$2_items$$=$metaMap$$.get($item$$)||[];for(let $meta$$ of $data$jscomp$2_items$$){const {join:$join$$,cacheKey:$cacheKey$$}=$meta$$;$data$jscomp$2_items$$=($data$jscomp$2_items$$=$dataCache$$[$cacheKey$$])||null;await applyFields($item$$,$data$jscomp$2_items$$||{},$join$$)}}}
 async function applyFields($item$$,$data$$,$join$$){if($data$$)try{$join$$.fields&&(lodash.isFunction($join$$.fields)?$join$$.fields($item$$,$data$$):(Array.isArray($join$$.fields)?$join$$.fields:[$join$$.fields]).forEach($map$$=>{if(lodash.isObject($map$$))if($map$$.name&&$map$$.value)$item$$[$map$$.name]=$data$$[$map$$.value];else for(let $key_map$$ in $map$$)$item$$[$key_map$$]=$data$$[$map$$[$key_map$$]];else $item$$[$map$$]=$data$$[$map$$]})),$join$$.setFields&&$join$$.setFields($item$$,$data$$),
 $join$$.asyncSetFields&&await $join$$.asyncSetFields($item$$,$data$$,()=>{}).catch(console.error)}catch($e$$){console.error("[joinData] [applyFields]",$e$$.message,JSON.stringify({item:$item$$,data:$data$$,join:$join$$},null,2))}}

package/server/models/mailaccount.js

@@ -1,3 +1,3 @@
-const mailaccountSchema=new Schema({id_app:{type:String,required:!0,maxlength:1024},id_link:{type:String},fullname:{type:String,required:!0},username:{type:String,required:!0},password:{type:String,required:!0},imap:{host:{type:String},port:{type:Number,default:993},secure:{type:Boolean,default:!0},mailbox:{type:String,default:"INBOX"},fetchsenders:{type:String,default:"invoice,hoadon"}},smtp:{host:{type:String,required:!0},port:{type:Number,default:465,required:!0},ssl:{type:Boolean,default:!0}},
-error:{},status_string:{type:String},status_code:Number,provider:{type:String,default:"generic"},last_checked:{type:Date,default:null},status:{type:Boolean,default:!0},date_created:{type:Date,default:Date.now},date_updated:{type:Date,default:Date.now},user_created:{type:String,default:""},user_updated:{type:String,default:""}});
+const imapSchema=new Schema({host:{type:String},port:{type:Number,default:993},secure:{type:Boolean,default:!0},mailbox:{type:String,default:"INBOX"},fetchsenders:{type:String,default:"invoice,hoadon"}},{_id:!1}),smtpSchema=new Schema({host:{type:String},port:{type:Number,default:465},ssl:{type:Boolean,default:!0}},{_id:!1}),mailaccountSchema=new Schema({id_app:{type:String,required:!0,maxlength:1024},id_link:{type:String},fullname:{type:String,required:!0},username:{type:String,required:!0},password:{type:String,
+required:!0},imap:imapSchema,smtp:smtpSchema,error:{},status_string:{type:String},status_code:Number,provider:{type:String,default:"generic"},last_checked:{type:Date,default:null},status:{type:Boolean,default:!0},date_created:{type:Date,default:Date.now},date_updated:{type:Date,default:Date.now},user_created:{type:String,default:""},user_updated:{type:String,default:""}});
 (global.configs||{}).createIndexes&&(mailaccountSchema.index({id_app:1,username:"text",fullname:"text"}),mailaccountSchema.index({id_app:1,username:1}),mailaccountSchema.index({id_app:1,fullname:1}),mailaccountSchema.index({id_app:1,id_link:1}),mailaccountSchema.index({id_app:1,status:1}),mailaccountSchema.index({id_app:1,user_created:1,visible_to:1,visible_to_users:1}));const model=mongoose.models.mailaccount||mongoose.model("mailaccount",mailaccountSchema);module.exports=model;

package/server/models/productcode.js

@@ -0,0 +1,2 @@
+const productCodeSchema=new Schema({id_app:{type:String,required:!0,maxlength:1024},code:{type:String,required:!0},dmvt:{type:Schema.Types.ObjectId,ref:"dmvt",required:!0},is_scanned:{type:Boolean,default:!1},scan_count:{type:Number,default:0},scan_history:[{scanned_at:{type:Date,default:Date.now},ip:String,user_agent:String}],qr_image:String,status:{type:Boolean,default:!0},date_created:{type:Date,default:Date.now},date_updated:{type:Date,default:Date.now},user_created:{type:String,default:""},user_updated:{type:String,
+default:""}});module.exports=mongoose.model("productcode",productCodeSchema);(global.configs||{}).createIndexes&&(productCodeSchema.index({id_app:1,code:1},{unique:!0}),productCodeSchema.index({id_app:1,dmvt:1}),productCodeSchema.index({id_app:1,dmvt:1,code:1}),productCodeSchema.index({id_app:1,user_created:1,visible_to:1,visible_to_users:1}));

package/server/modules/lists/ls-productcode.js

@@ -0,0 +1,7 @@
+const model=global.getModel("productcode"),controller=require("../../controllers/controller"),crypto=require("crypto"),qr=require("qr-image"),ejs=require("ejs"),path=require("path"),viewsDir=path.join(__dirname,"../../templates"),renderView=($data$$,$templateName$$="product-verify-result.ejs")=>new Promise(($resolve$$,$reject$$)=>{const $filePath$$=path.join(viewsDir,$templateName$$);ejs.renderFile($filePath$$,$data$$,($err$$,$str$$)=>{if($err$$)return $reject$$($err$$);$resolve$$($str$$)})});
+module.exports=function($contr_router$$){$contr_router$$=new controller($contr_router$$,model,"productcode",{unique:["code"],notNeedRight:($user$$,$options$$={})=>($options$$.action||"").toLowerCase()=="view"?!0:!1,onView:async($user$$,$items$$,$next$$)=>{await $items$$.asyncJoinModel2($user$$.current_id_app,"dmvt",{where:{dmvt:"_id"},fields:["ma_vt","ten_vt","picture"]});$next$$(null,$items$$)}});$contr_router$$.createRoute("create-codes/:ma_vt/:quantity",async($req$$,$next$$)=>{try{var $createdCodes_ma_vt$$=
+$req$$.params.ma_vt;const $quantity$$=Number($req$$.params.quantity||1),$product$$=await mongoose.model("dmvt").findOne({ma_vt:$createdCodes_ma_vt$$,id_app:$req$$.user.current_id_app}).lean();if(!$product$$)return $next$$({error:"S\u1ea3n ph\u1ea9m kh\u00f4ng t\u1ed3n t\u1ea1i"});$createdCodes_ma_vt$$=[];for(let $i$$=0;$i$$<($quantity$$||1);$i$$++){const $uniqueString$$=crypto.randomBytes(6).toString("hex"),$qrImage$$=`data:image/png;base64,${qr.imageSync(`${configs.api_url||configs.domain}/api/${$req$$.user.current_id_app}/productcode/verify/${$uniqueString$$}?access_token=${configs.public_token}`,
+{type:"png",margin:2}).toString("base64")}`;await model.create({id_app:$req$$.user.current_id_app,code:$uniqueString$$,dmvt:$product$$._id,qr_image:$qrImage$$});$createdCodes_ma_vt$$.push({uniqueString:$uniqueString$$,qrImage:$qrImage$$})}$next$$(null,{success:!0,count:$createdCodes_ma_vt$$.length})}catch($error$$){$next$$({error:$error$$.message})}},{right_code:"add"});$contr_router$$.createRoute("verify/:code",async($req$$,$next$$)=>{const {code:$code$$}=$req$$.params,$clientIp$$=$req$$.headers["x-forwarded-for"]||
+$req$$.socket.remoteAddress,$userAgent$$=$req$$.headers["user-agent"];try{const $codeInfo$$=await model.findOne({code:$code$$,id_app:$req$$.user.current_id_app}).populate("dmvt");let $renderData$$;$codeInfo$$?($codeInfo$$.scan_history.push({ip:$clientIp$$,user_agent:$userAgent$$}),$codeInfo$$.scan_count+=1,$codeInfo$$.is_scanned?(await $codeInfo$$.save(),$renderData$$={status:"WARNING",code:$code$$,company:$req$$.user.current_app_info||{},scanCount:$codeInfo$$.scan_count,product:$codeInfo$$.dmvt,
+message:`C\u1ea3nh b\u00e1o: S\u1ea3n ph\u1ea9m n\u00e0y \u0111\u00e3 \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t tr\u01b0\u1edbc \u0111\u00f3 v\u00e0o ng\u00e0y ${$codeInfo$$.scan_history[0].scanned_at.toLocaleString()}. N\u1ebfu b\u1ea1n v\u1eeba m\u1edbi b\u00f3c tem, c\u00f3 th\u1ec3 \u0111\u00e2y l\u00e0 h\u00e0ng gi\u1ea3.`}):($codeInfo$$.is_scanned=!0,await $codeInfo$$.save(),$renderData$$={status:"GENUINE",code:$code$$,company:$req$$.user.current_app_info||{},product:$codeInfo$$.dmvt,scanCount:$codeInfo$$.scan_count,
+message:"Ch\u00fac m\u1eebng! S\u1ea3n ph\u1ea9m ch\u00ednh h\u00e3ng v\u00e0 \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t l\u1ea7n \u0111\u1ea7u ti\u00ean."})):$renderData$$={status:"FAKE",code:$code$$,company:$req$$.user.current_app_info||{},scanCount:0,message:"M\u00e3 s\u1ea3n ph\u1ea9m kh\u00f4ng t\u1ed3n t\u1ea1i tr\u00ean h\u1ec7 th\u1ed1ng."};const $html$$=await renderView($renderData$$);$next$$(null,$html$$)}catch($error$$){console.error("[productcode]",$error$$),$next$$("System Error")}});$contr_router$$.route()};

package/server/templates/add-file.html

@@ -0,0 +1,8 @@
+<html>
+  <head>
+    <title>{{program}}</title>
+  </head>
+  <body>
+    <h3>{{user.name}}<{{user.email}}> đã thêm một file tại <a href='{{file.url_topic}}'>'{{file.url_topic}}'</a></h3>
+  </body>
+</html>

package/server/templates/add-file.pug

@@ -0,0 +1,9 @@
+<html>
+  <head>
+    title=program
+  </head>
+  <body>
+    h3=user.name+'<'+user.email+'> đã thêm một file tại '
+        a(href=file.url_topic)=file.url_topic
+  </body>
+</html>

package/server/templates/alert task.html

@@ -0,0 +1,11 @@
+<html>
+  <head>
+    <title>{{ten_cv}}</title>
+  </head>
+  <body>
+	<h3>{{ten_cv}}</h3>
+    <p>Nội dung công việc: {{mieu_ta}}</p>
+    <p>Ngày bắt đầu: {{start_date}}</p>
+	<p>Khách hàng: {{ten_kh}}</p>
+  </body>
+</html>

package/server/templates/alert task.pug

@@ -0,0 +1,12 @@
+<html>
+  <head>
+    title=ten_cv
+  </head>
+  <body>
+    h3=ten_cv
+    p
+        !='Nội dung công việc: ' + mieu_ta
+    p='Ngày bắt đầu: ' + moment(start_date).format("DD/MM/YYYY")
+    p='Khách hàng: ' + ten_kh
+  </body>
+</html>

package/server/templates/alert warranty.html

@@ -0,0 +1,15 @@
+<html>
+  <head>
+    <title>Thông báo hợp đồng hết hạn bảo hành</title>
+  </head>
+  <body>
+	<h3>{{company.name}} thông báo hợp đồng sau đã hết hạn bảo hành</h3>
+    <p><b>Hợp đồng:</b> {{contract.ten_hd}}, số: {{contract.so_hd}}</p>
+    <p><b>Ngày ký:</b> {{contract.ngay_hd###}}</p>
+	<p><b>Khách hàng:</b> {{customer.ten_kh}}</p>
+	<p><b>Địa chỉ:</b> {{customer.dia_chi}}</p>
+	<p><b>Điện thoại:</b> {{customer.dien_thoai}}</p>
+	<p><b>Ngày bảo hành:</b> {{start_date###}}</p>
+	<p><b>Thời gian bảo hành:</b> {{warranty_time}} {{unit_time_name}}</p>
+  </body>
+</html>

package/server/templates/alert warranty.pug

@@ -0,0 +1,28 @@
+<html>
+    <head>
+        <title>Thông báo hợp đồng hết hạn bảo hành</title>
+    </head>
+    body
+        h3=company.name+' thông báo hợp đồng sau đã hết hạn bảo hành'
+        p
+            b Hợp đồng:
+            !=contract.ten_hd+', số: ' + contract.so_hd
+        p
+            b Ngày ký:
+            !=moment(contract.ngay_hd).format("DD/MM/YYYY")
+        p
+            b Khách hàng:
+            !=customer.ten_kh
+        p
+            b Địa chỉ:
+            !=customer.dia_chi
+        p
+            b Điện thoại:
+            !=customer.dien_thoai
+        p
+            b Ngày bảo hành:
+            !=moment(start_date).format("DD/MM/YYYY")
+        p
+            b Thời gian bảo hành:
+            !=warranty_time.toString() + ' ' +  unit_time_name
+</html>

package/server/templates/order.html

@@ -0,0 +1,42 @@
+<html>
+  <head>
+    <title>Đơn đặt hàng</title>
+  </head>
+  <body>
+    <p>Đơn hàng được gửi tới từ <a href='{{app.site_name}}'>{{app.site_name}}</a>.</p>
+    <hr/>
+    <div>
+      <h1>ĐƠN ĐẶT HÀNG</h1>
+      <p>Số: <strong>{{order.so_ct}}</strong> - Ngày: <strong>{{order.ngay_ct}}</strong></p>
+      <p>Người nhận hàng: <strong>{{order.ten_nguoi_nhan}}</strong></p>
+      <p>Điện thoại: <strong>{{order.dien_thoai}}</strong></p>
+      <p>Email: <strong>{{order.email}}</strong></p>
+      <p>Địa chỉ: <strong>{{order.dia_chi}}, {{order.xa_phuong}}, {{order.quan_huyen}}, {{order.tinh_thanh}}</strong></p>
+
+      <p style='color:red'>Phương thức thanh toán: <strong>{{order.ten_pt_thanh_toan}}</strong></p>
+      <p>
+        <table style="border-collapse: collapse;border:1px solid gray;width:100%">
+          <tr>
+            <th style="border:1px solid gray;width:100px">Mã sản phẩm</th>
+            <th style="border:1px solid gray;width:250px">Tên sản phẩm</th>
+            <th style="border:1px solid gray;width:100px">Đơn vị tính</th>
+            <th style="border:1px solid gray;width:100px">Số lượng</th>
+            <th style="border:1px solid gray;width:100px">Giá</th>
+            <th style="border:1px solid gray;width:100px">Thành tiền</th>
+          </tr>
+          {{order.rows}}
+          <tr>
+            <td style="border:1px solid gray"></td>
+            <td style="border:1px solid gray"></td>
+            <td style="border:1px solid gray"><b>Tổng cộng</b></td>
+            <td style="border:1px solid gray"><b>{{order.t_sl}}</b></td>
+            <td style="border:1px solid gray"></td>
+            <td style="border:1px solid gray"><b>{{order.t_tt}}</b></td>
+          </tr>
+        </table>
+      </p>
+
+
+    </div>
+  </body>
+</html>

package/server/templates/order.pug

@@ -0,0 +1,57 @@
+<html>
+  <head>
+    <title>Đơn đặt hàng</title>
+  </head>
+  <body>
+    p='Đơn hàng được gửi tới từ '
+        a(href=app.site_name)=app.site_name
+    <hr/>
+    div
+        h1 ĐƠN ĐẶT HÀNG
+        p
+            !='Số: <strong>'+order.so_ct+'</strong> - Ngày: <strong>'+moment(order.ngay_ct).format('DD/MM/YYYY')+'</strong>'
+        p
+            !='Người nhận hàng: <strong>'+order.ten_nguoi_nhan+'</strong>'
+        p
+            !='Điện thoại: <strong>'+ order.dien_thoai+'</strong>'
+        p
+            !='Email: <strong>'+order.email+'</strong>'
+        p
+            !='Địa chỉ: <strong>' + order.dia_chi+', ' + order.xa_phuong + ', ' + order.quan_huyen + ', ' + order.tinh_thanh + '</strong>'
+
+        p(style='color:red')
+            !='Phương thức thanh toán: <strong>' + order.ten_pt_thanh_toan + '</strong>'
+        table(style="border-collapse: collapse;border:1px solid gray;width:100%")
+            tr
+                th(style="border:1px solid gray;width:100px") Mã sản phẩm
+                th(style="border:1px solid gray;width:250px") Tên sản phẩm
+                th(style="border:1px solid gray;width:100px") Đơn vị tính
+                th(style="border:1px solid gray;width:100px") Số lượng
+                th(style="border:1px solid gray;width:100px") Giá
+                th(style="border:1px solid gray;width:100px") Thành tiền
+            each row in order.details
+                tr
+                    td(style='border:1px solid gray')=row.ma_vt
+                    td(style='border:1px solid gray')=row.ten_vt
+                    td(style='border:1px solid gray')=row.ma_dvt
+                    td(style='border:1px solid gray')=numeral(row.sl_xuat).format("0,0.0")
+                    td(style='border:1px solid gray')=numeral(row.gia_ban_thuc).format("0,0")
+                    td(style='border:1px solid gray')=numeral(row.tien).format("0,0")
+            tr
+                td(style="border:1px solid gray")
+                td(style="border:1px solid gray")
+                td(style="border:1px solid gray")
+                    b Tổng cộng
+                td(style="border:1px solid gray")
+                    b=numeral(order.t_sl).format("0,0.0")
+                td(style="border:1px solid gray")
+                td(style="border:1px solid gray")
+                    b=numeral(order.t_tt).format("0,0")
+             
+        
+    
+
+
+    
+  </body>
+</html>

package/server/templates/product-verify-result.ejs

@@ -0,0 +1,230 @@
+<!DOCTYPE html>
+<html lang="vi">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
+    <title>Kết quả xác thực sản phẩm</title>
+    <style>
+        :root {
+            --color-success: #2ecc71;
+            --color-warning: #f39c12;
+            --color-danger: #e74c3c;
+            --color-text: #2c3e50;
+            --color-bg: #f4f6f8;
+            --font-main: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+        }
+
+        * { box-sizing: border-box; margin: 0; padding: 0; }
+
+        body {
+            font-family: var(--font-main);
+            background-color: var(--color-bg);
+            color: var(--color-text);
+            line-height: 1.6;
+            display: flex;
+            justify-content: center;
+            min-height: 100vh;
+        }
+
+        .container {
+            width: 100%;
+            max-width: 480px; /* Giới hạn chiều rộng như app mobile */
+            background: white;
+            display: flex;
+            flex-direction: column;
+            box-shadow: 0 0 20px rgba(0,0,0,0.05);
+            position: relative;
+        }
+
+        /* HEADER TRẠNG THÁI */
+        .status-header {
+            padding: 40px 20px;
+            text-align: center;
+            color: white;
+            border-bottom-left-radius: 30px;
+            border-bottom-right-radius: 30px;
+            margin-bottom: 20px;
+        }
+
+        .status-icon {
+            font-size: 80px;
+            margin-bottom: 15px;
+            display: block;
+        }
+
+        .status-title {
+            font-size: 24px;
+            font-weight: 800;
+            text-transform: uppercase;
+            letter-spacing: 1px;
+            margin-bottom: 5px;
+        }
+
+        .status-desc {
+            font-size: 16px;
+            opacity: 0.9;
+        }
+
+        /* PRODUCT INFO */
+        .product-card {
+            padding: 0 25px;
+            text-align: center;
+        }
+
+        .product-image-wrapper {
+            width: 200px;
+            height: 200px;
+            margin: -60px auto 20px; /* Kéo ảnh lên đè lên header */
+            background: white;
+            border-radius: 20px;
+            padding: 10px;
+            box-shadow: 0 10px 25px rgba(0,0,0,0.1);
+            display: flex;
+            align-items: center;
+            justify-content: center;
+        }
+
+        .product-image {
+            max-width: 100%;
+            max-height: 100%;
+            object-fit: contain;
+            border-radius: 10px;
+        }
+
+        .product-name {
+            font-size: 20px;
+            font-weight: 700;
+            margin-bottom: 5px;
+            color: #333;
+        }
+
+        .product-code {
+            color: #7f8c8d;
+            font-size: 14px;
+            background: #eee;
+            padding: 4px 12px;
+            border-radius: 15px;
+            display: inline-block;
+            margin-bottom: 20px;
+        }
+
+        /* DETAILS BOX */
+        .detail-box {
+            margin: 20px;
+            padding: 20px;
+            background: #fff;
+            border: 1px solid #eee;
+            border-radius: 15px;
+        }
+
+        .detail-row {
+            display: flex;
+            justify-content: space-between;
+            margin-bottom: 12px;
+            padding-bottom: 12px;
+            border-bottom: 1px solid #f5f5f5;
+        }
+
+        .detail-row:last-child {
+            border-bottom: none;
+            margin-bottom: 0;
+            padding-bottom: 0;
+        }
+
+        .label { color: #95a5a6; font-size: 14px; }
+        .value { font-weight: 600; font-size: 15px; text-align: right; }
+
+        /* BUTTON ACTION */
+        .action-area {
+            margin-top: auto;
+            padding: 20px;
+            text-align: center;
+        }
+        
+        .btn {
+            display: block;
+            width: 100%;
+            padding: 15px;
+            border-radius: 12px;
+            text-decoration: none;
+            font-weight: bold;
+            font-size: 16px;
+            transition: opacity 0.2s;
+        }
+        
+        .btn-support {
+            background-color: #f1f2f6;
+            color: #333;
+        }
+
+        /* LOGIC MÀU SẮC */
+        /* Class động dựa trên biến status truyền vào */
+        .theme-GENUINE .status-header { background-color: var(--color-success); }
+        .theme-WARNING .status-header { background-color: var(--color-warning); }
+        .theme-FAKE .status-header { background-color: var(--color-danger); }
+
+    </style>
+</head>
+<body class="theme-<%= status %>">
+
+    <div class="container">
+        
+        <div class="status-header">
+            <span class="status-icon">
+                <% if (status === 'GENUINE') { %>
+                    <svg width="80" height="80" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M22 11.08V12a10 10 0 1 1-5.93-9.14"></path><polyline points="22 4 12 14.01 9 11.01"></polyline></svg>
+                <% } else if (status === 'WARNING') { %>
+                    <svg width="80" height="80" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M10.29 3.86L1.82 18a2 2 0 0 0 1.71 3h16.94a2 2 0 0 0 1.71-3L13.71 3.86a2 2 0 0 0-3.42 0z"></path><line x1="12" y1="9" x2="12" y2="13"></line><line x1="12" y1="17" x2="12.01" y2="17"></line></svg>
+                <% } else { %>
+                    <svg width="80" height="80" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"></circle><line x1="15" y1="9" x2="9" y2="15"></line><line x1="9" y1="9" x2="15" y2="15"></line></svg>
+                <% } %>
+            </span>
+            
+            <div class="status-title">
+                <% if (status === 'GENUINE') { %> CHÍNH HÃNG <% } %>
+                <% if (status === 'WARNING') { %> CẢNH BÁO <% } %>
+                <% if (status === 'FAKE') { %> KHÔNG RÕ NGUỒN GỐC <% } %>
+            </div>
+            <div class="status-desc"><%= message %></div>
+        </div>
+
+        <% if (status !== 'FAKE' && typeof product !== 'undefined') { %>
+            <div class="product-card">
+                <div class="product-image-wrapper">
+                    <img src="<%= product.picture %>" alt="Product" class="product-image" onerror="this.src='https://via.placeholder.com/200?text=No+Image'">
+                </div>
+                <h2 class="product-name"><%= product.ten_vt %></h2>
+                <span class="product-code">Mã SP: <%= product.ma_vt %></span>
+            </div>
+
+            <div class="detail-box">
+                <% if (status === 'WARNING') { %>
+                    <div class="detail-row" style="color: var(--color-danger)">
+                        <span class="label" style="color: inherit">Số lần quét:</span>
+                        <span class="value"><%= scanCount %> lần</span>
+                    </div>
+                <% } %>
+                
+                <div class="detail-row">
+                    <span class="label">Ngày xác thực:</span>
+                    <span class="value"><%= new Date().toLocaleDateString('vi-VN') %></span>
+                </div>
+                <div class="detail-row">
+                    <span class="label">Serial:</span>
+                    <span class="value">...</span> 
+                </div>
+            </div>
+        <% } %>
+
+        <div class="action-area">
+            <% if (status === 'GENUINE') { %>
+                <a href="#" class="btn" style="background: var(--color-success); color: white;">Xem chi tiết sản phẩm</a>
+            <% } else { %>
+                <a href="tel:1900xxxx" class="btn btn-support">Liên hệ hỗ trợ: 1900 xxxx</a>
+            <% } %>
+            <p style="margin-top: 15px; font-size: 12px; color: #999;">Hệ thống xác thực chống hàng giả</p>
+        </div>
+
+    </div>
+</body>
+</html>

package/server/templates/reply-comment.html

@@ -0,0 +1,10 @@
+<html>
+  <head>
+    <title>{{program}}</title>
+  </head>
+  <body>
+    <h3>{{user.name}}<{{user.email}}> đã trả lời vào chủ đề <a href='{{comment.url_topic}}'>'{{comment.title}}'</a></h3>
+	
+    <p>{{comment.content}}</p>
+  </body>
+</html>

package/server/templates/reply-comment.pug

@@ -0,0 +1,12 @@
+<html>
+  <head>
+    title=program
+  </head>
+  <body>
+    h3=user.name+'<'+user.email+'> đã trả lời vào chủ đề '
+        a(href=comment.url_topic)=comment.title
+	
+    p
+        !=comment.content
+  </body>
+</html>

package/server/templates/reset mat khau.html

@@ -0,0 +1,17 @@
+<html>
+  <head>
+    <title>{{program}}</title>
+  </head>
+  <body>
+    <p>Xin chào {{receiver_name}},</p>
+    <p>Đây là thông tin mới dùng để đăng nhập vào tài khoản của bạn</p>
+    <p><b>Tên đăng nhập:</b>{{email}}</p>
+    <p><b>Mật khẩu:</b>{{password}}</p>
+    <p>Sau khi đăng nhập thành công, bạn nên đổi lại mật khẩu trên.</p>
+    <p>Nếu bạn không phải là người đã yêu cầu đổi mật khẩu thì bạn có thể bỏ qua email này, mật khẩu của bạn vẫn giữ nguyên.</p>
+    <p></p>
+    <p>Trân trọng,</p>
+    <p>{{company}}</p>
+
+  </body>
+</html>

package/server/templates/reset mat khau.pug

@@ -0,0 +1,18 @@
+<html>
+  <head>
+    title=program
+  </head>
+  <body>
+    p='Xin chào '+receiver_name
+    p='Đây là thông tin mới dùng để đăng nhập vào tài khoản của bạn'
+    p
+        !='<b>Tên đăng nhập:</b>'+email
+    p
+        !='<b>Mật khẩu:</b>'+password
+    p Sau khi đăng nhập thành công, bạn nên đổi lại mật khẩu trên.
+    p Nếu bạn không phải là người đã yêu cầu đổi mật khẩu thì bạn có thể bỏ qua email này, mật khẩu của bạn vẫn giữ nguyên.
+    p
+    p Trân trọng,
+    p=company
+  </body>
+</html>

package/server/templates/thong tin dang nhap.html

@@ -0,0 +1,15 @@
+<html>
+  <head>
+    <title>{{program}}</title>
+  </head>
+  <body>
+    <p>Xin chào {{receiver_name}},</p>
+    <p>Đây là thông tin dùng để đăng nhập vào tài khoản của bạn trên chương trình <a href='{{domain}}'>{{domain}}</a></p>
+    <p><b>Tên đăng nhập:</b>{{email}}</p>
+    <p><b>Mật khẩu:</b>{{password}}</p>
+    <p>Sau khi đăng nhập thành công, bạn nên đổi lại mật khẩu trên.</p>
+    <p></p>
+    <p>Trân trọng,</p>
+    <p>{{company}}</p>
+  </body>
+</html>

package/server/templates/thong tin dang nhap.pug

@@ -0,0 +1,18 @@
+<html>
+  <head>
+    title=program
+  </head>
+  <body>
+    p='Xin chào '+receiver_name+','
+    p='Đây là thông tin dùng để đăng nhập vào tài khoản của bạn trên chương trình '
+        a(href=domain)=domain
+    p
+        !='<b>Tên đăng nhập:</b>'+email
+    p
+        !='<b>Mật khẩu:</b>'+password
+    p Sau khi đăng nhập thành công, bạn nên đổi lại mật khẩu trên.
+    p
+    p Trân trọng,
+    p=company
+  </body>
+</html>

package/server/templates/thu moi gia nhap nhom.html

@@ -0,0 +1,14 @@
+<html>
+  <head>
+    <title>{{program}}</title>
+  </head>
+  <body>
+    <div>Xin chào, {{receiver_name}}</div>
+    <p><b>{{sender_name}}</b> đã mời bạn tham gia nhóm làm việc tại <a href='{{domain}}'>{{domain}}</a></p>
+    <p>Để chấp nhận tham gia, bạn hãy đăng nhập vào chương trình tại <a href='{{domain}}'>{{domain}}</a></p>
+    <p></p>
+    <p>Trân trọng,</p>
+    <p>{{company}}</p>
+
+  </body>
+</html>

package/server/templates/thu moi gia nhap nhom.pug

@@ -0,0 +1,18 @@
+<html>
+  <head>
+    title=program
+  </head>
+  <body>
+    div='Xin chào, ' + receiver_name
+    p
+        b=sender_name
+        |đã mời bạn tham gia nhóm làm việc tại 
+        a(href=domain)=domain
+    p Để chấp nhận tham gia, bạn hãy đăng nhập vào chương trình tại 
+        a(href=domain)=domain
+    p
+    p Trân trọng,
+    p=company
+
+  </body>
+</html>