orbitx-core-models 11.174.0 → 11.176.0

package/dist/helpers/_http.d.ts

@@ -0,0 +1,10 @@
+/** Runs an async route handler and hands any error to Express's error handler. */
+export declare const catchAsync: (fn: (req: any, res: any, next: any) => Promise<any>) => (req: any, res: any, next: any) => void;
+export declare const HTTP: {
+    readonly OK: 200;
+    readonly CREATED: 201;
+    readonly BAD_REQUEST: 400;
+    readonly FORBIDDEN: 403;
+    readonly NOT_FOUND: 404;
+};
+//# sourceMappingURL=_http.d.ts.map

package/dist/helpers/_http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_http.d.ts","sourceRoot":"","sources":["../../src/helpers/_http.ts"],"names":[],"mappings":"AAEA,kFAAkF;AAClF,eAAO,MAAM,UAAU,GACpB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,MACnD,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG,SAE7B,CAAC;AAEJ,eAAO,MAAM,IAAI;;;;;;CAMP,CAAC"}

package/dist/helpers/_http.js

@@ -0,0 +1,16 @@
+"use strict";
+// Internal to the helpers (not exported from the package): Express plumbing the shared controllers use.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HTTP = exports.catchAsync = void 0;
+/** Runs an async route handler and hands any error to Express's error handler. */
+const catchAsync = (fn) => (req, res, next) => {
+    fn(req, res, next).catch(next);
+};
+exports.catchAsync = catchAsync;
+exports.HTTP = {
+    OK: 200,
+    CREATED: 201,
+    BAD_REQUEST: 400,
+    FORBIDDEN: 403,
+    NOT_FOUND: 404,
+};

package/dist/helpers/addonState.d.ts

@@ -0,0 +1,20 @@
+export declare const normalizeAddonSlug: (s: unknown) => string;
+/**
+ * Which add-ons a company owns and which of those Ops has paused. Paused add-ons stay visible in every dashboard
+ * but their runtime behaviour must stop. Returns { owned, paused } as sets of normalised slugs/names.
+ */
+export declare function getAddonState(companyId: unknown): Promise<{
+    owned: Set<string>;
+    paused: Set<string>;
+}>;
+/**
+ * True when the company owns at least one of `slugs` and every owned one is paused. Fails open (false) on any
+ * error so a lookup problem can never break live chats.
+ */
+export declare function isAddonPaused(companyId: unknown, slugs: string[]): Promise<boolean>;
+/**
+ * True when the company has NOT bought any of `slugs`, or every one it bought is paused, i.e. the feature must not
+ * run. Fails open (false) on error so a lookup problem never silently stops leads reaching a client's CRM.
+ */
+export declare function isAddonUnavailable(companyId: unknown, slugs: string[]): Promise<boolean>;
+//# sourceMappingURL=addonState.d.ts.map

package/dist/helpers/addonState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"addonState.d.ts","sourceRoot":"","sources":["../../src/helpers/addonState.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,kBAAkB,GAAI,GAAG,OAAO,KAAG,MAKtB,CAAC;AAI3B;;;GAGG;AACH,wBAAsB,aAAa,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAE,CAAC,CAuB5G;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAUzF;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAS9F"}

package/dist/helpers/addonState.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeAddonSlug = void 0;
+exports.getAddonState = getAddonState;
+exports.isAddonPaused = isAddonPaused;
+exports.isAddonUnavailable = isAddonUnavailable;
+const subscription_model_1 = require("../models/subscription.model");
+// Slugs are typed by hand in Ops (some use hyphens, some underscores), so compare a normalised form of both the
+// slug and the name.
+const normalizeAddonSlug = (s) => String(s || "")
+    .trim()
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, "-")
+    .replace(/^-|-$/g, "");
+exports.normalizeAddonSlug = normalizeAddonSlug;
+const norm = exports.normalizeAddonSlug;
+/**
+ * Which add-ons a company owns and which of those Ops has paused. Paused add-ons stay visible in every dashboard
+ * but their runtime behaviour must stop. Returns { owned, paused } as sets of normalised slugs/names.
+ */
+async function getAddonState(companyId) {
+    const owned = new Set();
+    const paused = new Set();
+    if (!companyId)
+        return { owned, paused };
+    const sub = await subscription_model_1.Subscription.findOne({ company: companyId })
+        .select("addons disabledAddons")
+        .populate("addons.addon", "slug name")
+        .lean();
+    if (!sub)
+        return { owned, paused };
+    const disabled = new Set((sub.disabledAddons || []).map(String));
+    for (const row of sub.addons || []) {
+        const addon = row.addon;
+        if (!addon)
+            continue;
+        const keys = [norm(addon.slug), norm(addon.name)].filter(Boolean);
+        const isPaused = disabled.has(String(addon._id));
+        for (const k of keys) {
+            owned.add(k);
+            if (isPaused)
+                paused.add(k);
+        }
+    }
+    return { owned, paused };
+}
+/**
+ * True when the company owns at least one of `slugs` and every owned one is paused. Fails open (false) on any
+ * error so a lookup problem can never break live chats.
+ */
+async function isAddonPaused(companyId, slugs) {
+    try {
+        const { owned, paused } = await getAddonState(companyId);
+        const wanted = slugs.map(norm);
+        const ownedWanted = wanted.filter((s) => owned.has(s));
+        return ownedWanted.length > 0 && ownedWanted.every((s) => paused.has(s));
+    }
+    catch (err) {
+        console.error("[addonState] lookup failed, treating add-on as active:", err === null || err === void 0 ? void 0 : err.message);
+        return false;
+    }
+}
+/**
+ * True when the company has NOT bought any of `slugs`, or every one it bought is paused, i.e. the feature must not
+ * run. Fails open (false) on error so a lookup problem never silently stops leads reaching a client's CRM.
+ */
+async function isAddonUnavailable(companyId, slugs) {
+    try {
+        const { owned, paused } = await getAddonState(companyId);
+        const active = slugs.map(norm).filter((s) => owned.has(s) && !paused.has(s));
+        return active.length === 0;
+    }
+    catch (err) {
+        console.error("[addonState] lookup failed, treating add-on as available:", err === null || err === void 0 ? void 0 : err.message);
+        return false;
+    }
+}

package/dist/helpers/analyticsBuckets.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Time buckets for the analytics charts (Ops and Client). The bucket size follows the selected date range (hourly
+ * for a day, daily for a week or month, weekly for a few months, monthly for a year) unless the caller asks for a
+ * specific one. Every bucket in the range is returned, so quiet periods show as zero instead of disappearing, and
+ * the keys built here match the keys MongoDB builds in groupKeyExpr.
+ */
+export declare const UNITS: readonly ["hour", "day", "week", "month"];
+export type BucketUnit = (typeof UNITS)[number];
+type Range = {
+    $gte?: unknown;
+    $lte?: unknown;
+} | null | undefined;
+export declare const safeTimezone: (tz: unknown) => string;
+/** The bucket size to use: the requested one when it fits the range, otherwise one that does. */
+export declare const pickUnit: (range: Range, requested?: unknown, now?: Date) => BucketUnit;
+/** The bucket a moment falls in, as a string key. */
+export declare const keyOf: (date: Date, unit: BucketUnit, tz: string) => string;
+/** Every bucket key between the range's start and end, in order. */
+export declare const bucketKeys: (range: Range, unit: BucketUnit, tz: string, now?: Date) => string[];
+/** A short axis label for a bucket key. */
+export declare const labelOf: (key: string, unit: BucketUnit, multiYear?: boolean) => string;
+/** A MongoDB expression that yields the same bucket key keyOf produces, for a date field. */
+export declare const groupKeyExpr: (unit: BucketUnit, tz: string, field?: string) => Record<string, unknown>;
+/** Bucket keys, labels and the unit used, for a range. */
+export declare const buildAxis: (range: Range, requested?: unknown, tzInput?: unknown, now?: Date) => {
+    tz: string;
+    unit: "day" | "month" | "hour" | "week";
+    keys: string[];
+    labels: string[];
+};
+export {};
+//# sourceMappingURL=analyticsBuckets.d.ts.map

package/dist/helpers/analyticsBuckets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyticsBuckets.d.ts","sourceRoot":"","sources":["../../src/helpers/analyticsBuckets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,KAAK,2CAA4C,CAAC;AAC/D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;AAChD,KAAK,KAAK,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,CAAC;AAOnE,eAAO,MAAM,YAAY,GAAI,IAAI,OAAO,KAAG,MAQ1C,CAAC;AAQF,iGAAiG;AACjG,eAAO,MAAM,QAAQ,GAAI,OAAO,KAAK,EAAE,YAAY,OAAO,EAAE,UAAgB,KAAG,UAgB9E,CAAC;AAiBF,qDAAqD;AACrD,eAAO,MAAM,KAAK,GAAI,MAAM,IAAI,EAAE,MAAM,UAAU,EAAE,IAAI,MAAM,KAAG,MAUhE,CAAC;AAEF,oEAAoE;AACpE,eAAO,MAAM,UAAU,GAAI,OAAO,KAAK,EAAE,MAAM,UAAU,EAAE,IAAI,MAAM,EAAE,UAAgB,KAAG,MAAM,EAgB/F,CAAC;AAIF,2CAA2C;AAC3C,eAAO,MAAM,OAAO,GAAI,KAAK,MAAM,EAAE,MAAM,UAAU,EAAE,mBAAiB,KAAG,MAK1E,CAAC;AAEF,6FAA6F;AAC7F,eAAO,MAAM,YAAY,GAAI,MAAM,UAAU,EAAE,IAAI,MAAM,EAAE,cAAoB,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAavG,CAAC;AAEF,0DAA0D;AAC1D,eAAO,MAAM,SAAS,GAAI,OAAO,KAAK,EAAE,YAAY,OAAO,EAAE,UAAU,OAAO,EAAE,UAAgB;;;;;CAM/F,CAAC"}

package/dist/helpers/analyticsBuckets.js

@@ -0,0 +1,143 @@
+"use strict";
+/**
+ * Time buckets for the analytics charts (Ops and Client). The bucket size follows the selected date range (hourly
+ * for a day, daily for a week or month, weekly for a few months, monthly for a year) unless the caller asks for a
+ * specific one. Every bucket in the range is returned, so quiet periods show as zero instead of disappearing, and
+ * the keys built here match the keys MongoDB builds in groupKeyExpr.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildAxis = exports.groupKeyExpr = exports.labelOf = exports.bucketKeys = exports.keyOf = exports.pickUnit = exports.safeTimezone = exports.UNITS = void 0;
+exports.UNITS = ["hour", "day", "week", "month"];
+const MONTH_NAMES = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];
+const HOUR_MS = 3600 * 1000;
+const DAY_MS = 24 * HOUR_MS;
+const MAX_BUCKETS = 400;
+const safeTimezone = (tz) => {
+    if (!tz || typeof tz !== "string")
+        return "UTC";
+    try {
+        new Intl.DateTimeFormat("en-US", { timeZone: tz });
+        return tz;
+    }
+    catch {
+        return "UTC";
+    }
+};
+exports.safeTimezone = safeTimezone;
+const rangeBounds = (range, now = new Date()) => {
+    const end = range && range.$lte ? new Date(range.$lte) : now;
+    const start = range && range.$gte ? new Date(range.$gte) : new Date(end.getTime() - 30 * DAY_MS);
+    return { start, end };
+};
+/** The bucket size to use: the requested one when it fits the range, otherwise one that does. */
+const pickUnit = (range, requested, now = new Date()) => {
+    const { start, end } = rangeBounds(range, now);
+    const spanDays = Math.max(0, (end.getTime() - start.getTime()) / DAY_MS);
+    let unit = exports.UNITS.includes(requested) ? requested : null;
+    if (!unit) {
+        if (spanDays <= 1.5)
+            unit = "hour";
+        else if (spanDays <= 62)
+            unit = "day";
+        else if (spanDays <= 190)
+            unit = "week";
+        else
+            unit = "month";
+    }
+    // Never return so many buckets that the chart becomes unreadable.
+    if (unit === "hour" && spanDays > 4)
+        unit = "day";
+    if (unit === "day" && spanDays > 200)
+        unit = "week";
+    if (unit === "week" && spanDays > 1100)
+        unit = "month";
+    return unit;
+};
+exports.pickUnit = pickUnit;
+const pad = (n) => String(n).padStart(2, "0");
+const localParts = (date, tz) => {
+    const parts = new Intl.DateTimeFormat("en-CA", {
+        timeZone: tz,
+        hourCycle: "h23",
+        year: "numeric",
+        month: "2-digit",
+        day: "2-digit",
+        hour: "2-digit",
+    }).formatToParts(date);
+    const get = (type) => Number(parts.find((p) => p.type === type).value);
+    return { y: get("year"), m: get("month"), d: get("day"), h: get("hour") % 24 };
+};
+/** The bucket a moment falls in, as a string key. */
+const keyOf = (date, unit, tz) => {
+    const { y, m, d, h } = localParts(date, tz);
+    if (unit === "hour")
+        return `${y}-${pad(m)}-${pad(d)} ${pad(h)}`;
+    if (unit === "month")
+        return `${y}-${pad(m)}`;
+    if (unit === "week") {
+        const weekday = new Date(Date.UTC(y, m - 1, d)).getUTCDay(); // 0 = Sunday
+        const monday = new Date(Date.UTC(y, m - 1, d - ((weekday + 6) % 7)));
+        return `${monday.getUTCFullYear()}-${pad(monday.getUTCMonth() + 1)}-${pad(monday.getUTCDate())}`;
+    }
+    return `${y}-${pad(m)}-${pad(d)}`;
+};
+exports.keyOf = keyOf;
+/** Every bucket key between the range's start and end, in order. */
+const bucketKeys = (range, unit, tz, now = new Date()) => {
+    const { start, end } = rangeBounds(range, now);
+    const step = unit === "hour" ? HOUR_MS : unit === "month" ? DAY_MS : 12 * HOUR_MS;
+    const keys = [];
+    const seen = new Set();
+    for (let t = start.getTime(); t <= end.getTime() + step; t += step) {
+        const at = new Date(Math.min(t, end.getTime()));
+        const key = (0, exports.keyOf)(at, unit, tz);
+        if (!seen.has(key)) {
+            seen.add(key);
+            keys.push(key);
+            if (keys.length >= MAX_BUCKETS)
+                break;
+        }
+        if (t >= end.getTime())
+            break;
+    }
+    return keys;
+};
+exports.bucketKeys = bucketKeys;
+const hourLabel = (h) => `${h % 12 === 0 ? 12 : h % 12} ${h < 12 ? "AM" : "PM"}`;
+/** A short axis label for a bucket key. */
+const labelOf = (key, unit, multiYear = false) => {
+    if (unit === "hour")
+        return hourLabel(Number(key.slice(11, 13)));
+    const [y, m, d] = key.split("-");
+    if (unit === "month")
+        return multiYear ? `${MONTH_NAMES[Number(m) - 1]} '${y.slice(2)}` : MONTH_NAMES[Number(m) - 1];
+    return `${MONTH_NAMES[Number(m) - 1]} ${Number(d)}`;
+};
+exports.labelOf = labelOf;
+/** A MongoDB expression that yields the same bucket key keyOf produces, for a date field. */
+const groupKeyExpr = (unit, tz, field = "$createdAt") => {
+    if (unit === "hour")
+        return { $dateToString: { format: "%Y-%m-%d %H", date: field, timezone: tz } };
+    if (unit === "month")
+        return { $dateToString: { format: "%Y-%m", date: field, timezone: tz } };
+    if (unit === "week") {
+        return {
+            $dateToString: {
+                format: "%Y-%m-%d",
+                date: { $dateTrunc: { date: field, unit: "week", startOfWeek: "monday", timezone: tz } },
+                timezone: tz,
+            },
+        };
+    }
+    return { $dateToString: { format: "%Y-%m-%d", date: field, timezone: tz } };
+};
+exports.groupKeyExpr = groupKeyExpr;
+/** Bucket keys, labels and the unit used, for a range. */
+const buildAxis = (range, requested, tzInput, now = new Date()) => {
+    const tz = (0, exports.safeTimezone)(tzInput);
+    const unit = (0, exports.pickUnit)(range, requested, now);
+    const keys = (0, exports.bucketKeys)(range, unit, tz, now);
+    const multiYear = keys.length > 1 && keys[0].slice(0, 4) !== keys[keys.length - 1].slice(0, 4);
+    return { tz, unit, keys, labels: keys.map((k) => (0, exports.labelOf)(k, unit, multiYear)) };
+};
+exports.buildAxis = buildAxis;

package/dist/helpers/avatars.d.ts

@@ -0,0 +1,15 @@
+export declare function createAvatarController({ companyIdOf, upload, remove }: {
+    companyIdOf: (req: any) => any;
+    upload: (file: any, folder: string) => Promise<{
+        publicUrl: string;
+        s3Key: string;
+    }>;
+    remove: (s3Key: string) => Promise<void>;
+}): {
+    getAvatars: (req: any, res: any, next: any) => void;
+    createAvatar: (req: any, res: any, next: any) => void;
+    updateAvatar: (req: any, res: any, next: any) => void;
+    deleteAvatar: (req: any, res: any, next: any) => void;
+    setDefaultAvatar: (req: any, res: any, next: any) => void;
+};
+//# sourceMappingURL=avatars.d.ts.map

package/dist/helpers/avatars.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"avatars.d.ts","sourceRoot":"","sources":["../../src/helpers/avatars.ts"],"names":[],"mappings":"AAcA,wBAAgB,sBAAsB,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;IACtE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,CAAC;IAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;;;;;;EAiHA"}

package/dist/helpers/avatars.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAvatarController = createAvatarController;
+/**
+ * The chat avatars a company keeps (Company.avatars): list, add, rename/replace, delete, set default. Shared by the
+ * Ops backend (any company, from the URL) and the Client backend (the signed-in company):
+ *   module.exports = createAvatarController({
+ *     companyIdOf: (req) => req.user.owner,          // or req.params.companyId
+ *     upload: (file, folder) => <store it; resolves { publicUrl, s3Key }>,
+ *     remove: (s3Key) => <delete it>,
+ *   });
+ */
+const mongoose_1 = require("mongoose");
+const company_model_1 = require("../models/company.model");
+const errors_1 = require("./errors");
+const _http_1 = require("./_http");
+function createAvatarController({ companyIdOf, upload, remove }) {
+    const CompanyModel = company_model_1.Company;
+    const getAvatars = (0, _http_1.catchAsync)(async (req, res, next) => {
+        var _a, _b, _c;
+        const company = await CompanyModel.findById(companyIdOf(req)).select("avatars").lean();
+        if (!company)
+            return next(new errors_1.AppError("Company not found", _http_1.HTTP.NOT_FOUND));
+        res.status(_http_1.HTTP.OK).json({
+            success: true,
+            results: (_b = (_a = company.avatars) === null || _a === void 0 ? void 0 : _a.length) !== null && _b !== void 0 ? _b : 0,
+            data: { avatars: (_c = company.avatars) !== null && _c !== void 0 ? _c : [] },
+        });
+    });
+    // Body fields: name (text), avatar (file)
+    const createAvatar = (0, _http_1.catchAsync)(async (req, res, next) => {
+        var _a;
+        const { name } = req.body;
+        const file = req.file;
+        if (!name || !name.trim())
+            return next(new errors_1.AppError("Please provide a name for the avatar", _http_1.HTTP.BAD_REQUEST));
+        if (!file)
+            return next(new errors_1.AppError("Please upload an image file", _http_1.HTTP.BAD_REQUEST));
+        const company = await CompanyModel.findById(companyIdOf(req));
+        if (!company)
+            return next(new errors_1.AppError("Company not found", _http_1.HTTP.NOT_FOUND));
+        const { publicUrl, s3Key } = await upload(file, `avatars/${company._id}`);
+        // Never the default on creation.
+        company.avatars = (_a = company.avatars) !== null && _a !== void 0 ? _a : [];
+        company.avatars.push({ name: name.trim(), url: publicUrl, s3Key, isDefault: false });
+        await company.save();
+        res.status(_http_1.HTTP.CREATED).json({
+            success: true,
+            message: "Avatar uploaded successfully",
+            data: { avatar: company.avatars[company.avatars.length - 1] },
+        });
+    });
+    // Loads the company and one of its avatars, or answers the error.
+    async function findAvatar(req, next) {
+        var _a;
+        const { avatarId } = req.params;
+        if (!mongoose_1.Types.ObjectId.isValid(avatarId)) {
+            next(new errors_1.AppError("Invalid avatar ID", _http_1.HTTP.BAD_REQUEST));
+            return null;
+        }
+        const company = await CompanyModel.findById(companyIdOf(req));
+        if (!company) {
+            next(new errors_1.AppError("Company not found", _http_1.HTTP.NOT_FOUND));
+            return null;
+        }
+        const avatar = ((_a = company.avatars) !== null && _a !== void 0 ? _a : []).id(avatarId);
+        if (!avatar) {
+            next(new errors_1.AppError("Avatar not found", _http_1.HTTP.NOT_FOUND));
+            return null;
+        }
+        return { company, avatar, avatarId };
+    }
+    // Body fields (all optional): name (text), avatar (file)
+    const updateAvatar = (0, _http_1.catchAsync)(async (req, res, next) => {
+        const found = await findAvatar(req, next);
+        if (!found)
+            return;
+        const { company, avatar } = found;
+        const { name } = req.body;
+        const file = req.file;
+        if (!name && !file)
+            return next(new errors_1.AppError("Please provide a name or a new image to update", _http_1.HTTP.BAD_REQUEST));
+        if (name && name.trim())
+            avatar.name = name.trim();
+        if (file) {
+            const oldS3Key = avatar.s3Key;
+            const { publicUrl, s3Key } = await upload(file, `avatars/${company._id}`);
+            avatar.url = publicUrl;
+            avatar.s3Key = s3Key;
+            // The old file goes only after the new one is stored.
+            await remove(oldS3Key);
+        }
+        await company.save();
+        res.status(_http_1.HTTP.OK).json({ success: true, message: "Avatar updated successfully", data: { avatar } });
+    });
+    const deleteAvatar = (0, _http_1.catchAsync)(async (req, res, next) => {
+        const found = await findAvatar(req, next);
+        if (!found)
+            return;
+        const { company, avatar } = found;
+        const s3KeyToDelete = avatar.s3Key;
+        avatar.deleteOne();
+        await company.save();
+        // A file that fails to delete is logged, never an error for the user.
+        remove(s3KeyToDelete).catch((err) => console.warn(`Failed to delete S3 object '${s3KeyToDelete}': ${err.message}`));
+        res.status(_http_1.HTTP.OK).json({ success: true, message: "Avatar deleted successfully" });
+    });
+    // Only one avatar can be the default.
+    const setDefaultAvatar = (0, _http_1.catchAsync)(async (req, res, next) => {
+        var _a;
+        const found = await findAvatar(req, next);
+        if (!found)
+            return;
+        const { company, avatar, avatarId } = found;
+        ((_a = company.avatars) !== null && _a !== void 0 ? _a : []).forEach((a) => {
+            a.isDefault = a._id.toString() === avatarId;
+        });
+        await company.save();
+        res.status(_http_1.HTTP.OK).json({ success: true, message: "Default avatar set successfully", data: { avatar } });
+    });
+    return { getAvatars, createAvatar, updateAvatar, deleteAvatar, setDefaultAvatar };
+}

package/dist/helpers/chatAttachments.d.ts

@@ -0,0 +1,33 @@
+/**
+ * What a chat carries besides text: the files the visitor shared, and the delivery status of every SMS an agent
+ * sent. Used by the Employee, Ops and Client backends, so all three dashboards show the same thing.
+ */
+export declare const fileNameFromUrl: (url: string) => string;
+export interface VisitorDocument {
+    id: string;
+    url: string;
+    name: string;
+    kind: string;
+    sharedAt: Date;
+}
+export interface SmsStatusRow {
+    id: number;
+    sid: string | null;
+    status: string;
+    from: string | null;
+    to: string | null;
+    sentAt: Date;
+    statusUpdatedAt: Date;
+    errorCode: string | number | null;
+    errorMessage: string | null;
+    preview: string;
+}
+/** Files the visitor shared in the chat, oldest first. */
+export declare function getVisitorDocuments(chatId: unknown): Promise<VisitorDocument[]>;
+/** Every SMS an agent sent in the chat, oldest first, each with its own running number. */
+export declare function getSmsStatus(chatId: unknown): Promise<SmsStatusRow[]>;
+export declare function getChatAttachments(chatId: unknown): Promise<{
+    documents: VisitorDocument[];
+    sms: SmsStatusRow[];
+}>;
+//# sourceMappingURL=chatAttachments.d.ts.map

package/dist/helpers/chatAttachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatAttachments.d.ts","sourceRoot":"","sources":["../../src/helpers/chatAttachments.ts"],"names":[],"mappings":"AAGA;;;GAGG;AAGH,eAAO,MAAM,eAAe,GAAI,KAAK,MAAM,KAAG,MAQ7C,CAAC;AAWF,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,IAAI,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,EAAE,IAAI,CAAC;IACb,eAAe,EAAE,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAClC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,0DAA0D;AAC1D,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAkBrF;AAED,2FAA2F;AAC3F,wBAAsB,YAAY,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAoB3E;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,eAAe,EAAE,CAAC;IAAC,GAAG,EAAE,YAAY,EAAE,CAAA;CAAE,CAAC,CAGxH"}

package/dist/helpers/chatAttachments.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fileNameFromUrl = void 0;
+exports.getVisitorDocuments = getVisitorDocuments;
+exports.getSmsStatus = getSmsStatus;
+exports.getChatAttachments = getChatAttachments;
+const mongoose_1 = require("mongoose");
+const message_model_1 = require("../models/message.model");
+/**
+ * What a chat carries besides text: the files the visitor shared, and the delivery status of every SMS an agent
+ * sent. Used by the Employee, Ops and Client backends, so all three dashboards show the same thing.
+ */
+// Files are stored as <folder>/<uuid>-<original name>; the uuid has five dash-separated parts.
+const fileNameFromUrl = (url) => {
+    try {
+        const last = decodeURIComponent(new URL(url).pathname.split("/").pop() || "");
+        const parts = last.split("-");
+        return (parts.length > 5 ? parts.slice(5).join("-") : last) || "File";
+    }
+    catch {
+        return "File";
+    }
+};
+exports.fileNameFromUrl = fileNameFromUrl;
+const kindOf = (mediaType, url) => {
+    if (mediaType)
+        return mediaType;
+    if (/\.(png|jpe?g|gif|webp|svg)(\?|$)/i.test(url))
+        return "image";
+    if (/\.pdf(\?|$)/i.test(url))
+        return "pdf";
+    if (/\.(mp4|webm|mov)(\?|$)/i.test(url))
+        return "video";
+    if (/\.(mp3|wav|ogg)(\?|$)/i.test(url))
+        return "audio";
+    return "file";
+};
+/** Files the visitor shared in the chat, oldest first. */
+async function getVisitorDocuments(chatId) {
+    const rows = await message_model_1.Message.find({
+        chatId,
+        isDeleted: { $ne: true },
+        senderType: "VISITOR",
+        mediaUrl: { $exists: true, $nin: [null, ""] },
+    })
+        .sort({ createdAt: 1 })
+        .select("mediaUrl mediaType createdAt")
+        .lean();
+    return rows.map((m) => ({
+        id: String(m._id),
+        url: m.mediaUrl,
+        name: (0, exports.fileNameFromUrl)(m.mediaUrl),
+        kind: kindOf(m.mediaType, m.mediaUrl),
+        sharedAt: m.createdAt,
+    }));
+}
+/** Every SMS an agent sent in the chat, oldest first, each with its own running number. */
+async function getSmsStatus(chatId) {
+    // `sms` is written by chat-service with the native driver, so it is read the same way.
+    const rows = await message_model_1.Message.collection
+        .find({ chatId: new mongoose_1.Types.ObjectId(String(chatId)), isDeleted: { $ne: true }, "sms.seq": { $exists: true } })
+        .sort({ createdAt: 1 })
+        .project({ sms: 1, content: 1, createdAt: 1 })
+        .toArray();
+    return rows.map((m) => ({
+        id: m.sms.seq,
+        sid: m.sms.sid || null,
+        status: m.sms.status || "queued",
+        from: m.sms.from || null,
+        to: m.sms.to || null,
+        sentAt: m.createdAt,
+        statusUpdatedAt: m.sms.statusUpdatedAt || m.createdAt,
+        errorCode: m.sms.errorCode || null,
+        errorMessage: m.sms.errorMessage || null,
+        preview: String(m.content || "").replace(/<[^>]*>/g, " ").replace(/\s+/g, " ").trim().slice(0, 120),
+    }));
+}
+async function getChatAttachments(chatId) {
+    const [documents, sms] = await Promise.all([getVisitorDocuments(chatId), getSmsStatus(chatId)]);
+    return { documents, sms };
+}

package/dist/helpers/contactDecrypt.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Turns encrypted lead contact details (email/phone tokens) back into real values. Used by the Ops and Client
+ * backends; each one only says how it reaches chat-service's decryption:
+ *   const { decryptLeadContactInfo, decryptTokensInTexts } = createContactDecryptor({
+ *     requestDecrypt: async (field, value) => <the JSON reply of the decrypt route for { [field]: value }>,
+ *   });
+ * Best-effort: a value that can't be decrypted shows as "Encrypted" (never ciphertext) and never breaks the caller.
+ */
+export declare const unwrapPlainEmail: (value: any) => any;
+export declare const looksEncrypted: (value: any) => boolean;
+export type ContactField = "email" | "phone";
+export declare function createContactDecryptor({ requestDecrypt }: {
+    requestDecrypt: (field: ContactField, value: string) => Promise<any>;
+}): {
+    decryptLeadContactInfo: (raw: {
+        email?: string;
+        phone?: string;
+    } | null | undefined) => Promise<{
+        email?: string;
+        phone?: string;
+    }>;
+    decryptTokensInTexts: (texts: string[]) => Promise<string[]>;
+    looksEncrypted: (value: any) => boolean;
+    unwrapPlainEmail: (value: any) => any;
+};
+//# sourceMappingURL=contactDecrypt.d.ts.map

package/dist/helpers/contactDecrypt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contactDecrypt.d.ts","sourceRoot":"","sources":["../../src/helpers/contactDecrypt.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,eAAO,MAAM,gBAAgB,GAAI,OAAO,GAAG,KAAG,GAG7C,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,OAAO,GAAG,KAAG,OACmC,CAAC;AAehF,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,CAAC;AAE7C,wBAAgB,sBAAsB,CAAC,EAAE,cAAc,EAAE,EAAE;IAAE,cAAc,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;CAAE;kCActF;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS;gBACtE,MAAM;gBAAU,MAAM;;kCAmBL,MAAM,EAAE,KAAG,OAAO,CAAC,MAAM,EAAE,CAAC;4BApDnC,GAAG,KAAG,OAAO;8BALX,GAAG,KAAG,GAAG;EAmFhD"}