orbitx-core-models 11.174.0 → 11.176.0

package/dist/helpers/contactDecrypt.js

@@ -0,0 +1,95 @@
+"use strict";
+/**
+ * Turns encrypted lead contact details (email/phone tokens) back into real values. Used by the Ops and Client
+ * backends; each one only says how it reaches chat-service's decryption:
+ *   const { decryptLeadContactInfo, decryptTokensInTexts } = createContactDecryptor({
+ *     requestDecrypt: async (field, value) => <the JSON reply of the decrypt route for { [field]: value }>,
+ *   });
+ * Best-effort: a value that can't be decrypted shows as "Encrypted" (never ciphertext) and never breaks the caller.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.looksEncrypted = exports.unwrapPlainEmail = void 0;
+exports.createContactDecryptor = createContactDecryptor;
+const ENCRYPTED_TOKEN_RE = /^\{.*\}$|__enc|^[a-f0-9]{16}$/i;
+// A lead can hold a plain address wrapped in braces ("{name@example.com}"), which is not a token.
+const PLAIN_BRACED_EMAIL = /^\{([^\s@{}]+@[^\s@{}]+\.[^\s@{}]+)\}$/;
+const unwrapPlainEmail = (value) => {
+    const m = typeof value === "string" && value.match(PLAIN_BRACED_EMAIL);
+    return m ? m[1] : value;
+};
+exports.unwrapPlainEmail = unwrapPlainEmail;
+const looksEncrypted = (value) => typeof value === "string" && ENCRYPTED_TOKEN_RE.test((0, exports.unwrapPlainEmail)(value));
+exports.looksEncrypted = looksEncrypted;
+// Leads saved before the Employee Dashboard fix lost their "__enc__" / "__encphone__" markers
+// ("{local@<16-hex>}" and a bare 16-hex phone). chat-service only accepts the marked form, so restore the
+// markers before asking it to decrypt.
+const restoreEmailMarkers = (value) => {
+    const m = typeof value === "string" && value.match(/^\{([^\s@{}]+)@([a-f0-9]{16})\}$/i);
+    return m ? `{${m[1]}@__enc__${m[2]}}` : value;
+};
+const restorePhoneMarkers = (value) => typeof value === "string" && /^[a-f0-9]{16}$/i.test(value) ? `__encphone__{${value}}` : value;
+const EMAIL_TOKENS = /\{[^\s@{}]+@__enc__[a-f0-9]{16}\}/gi;
+const PHONE_TOKENS = /__encphone__\{[a-f0-9]{16}\}/gi;
+function createContactDecryptor({ requestDecrypt }) {
+    // Decrypts one field. Email and phone are sent separately so a value that cannot be decrypted never stops the
+    // other one from being shown.
+    async function decryptField(field, value) {
+        var _a;
+        try {
+            const json = await requestDecrypt(field, value);
+            if ((json === null || json === void 0 ? void 0 : json.success) && ((_a = json.data) === null || _a === void 0 ? void 0 : _a[field]))
+                return json.data[field];
+        }
+        catch (err) {
+            console.error(`Failed to decrypt lead ${field}:`, err === null || err === void 0 ? void 0 : err.message);
+        }
+        return null;
+    }
+    /** The lead's email/phone as they should be shown: real values, plain values as they are, else "Encrypted". */
+    async function decryptLeadContactInfo(raw) {
+        const result = {
+            email: (0, exports.looksEncrypted)(raw === null || raw === void 0 ? void 0 : raw.email) ? "Encrypted" : (0, exports.unwrapPlainEmail)(raw === null || raw === void 0 ? void 0 : raw.email),
+            phone: (0, exports.looksEncrypted)(raw === null || raw === void 0 ? void 0 : raw.phone) ? "Encrypted" : raw === null || raw === void 0 ? void 0 : raw.phone,
+        };
+        const [email, phone] = await Promise.all([
+            (0, exports.looksEncrypted)(raw === null || raw === void 0 ? void 0 : raw.email) ? decryptField("email", restoreEmailMarkers(raw.email)) : null,
+            (0, exports.looksEncrypted)(raw === null || raw === void 0 ? void 0 : raw.phone) ? decryptField("phone", restorePhoneMarkers(raw.phone)) : null,
+        ]);
+        if (email)
+            result.email = email;
+        if (phone)
+            result.phone = phone;
+        return result;
+    }
+    /**
+     * Replaces the encrypted email/phone tokens inside each text with their real values (a transcript, for example).
+     * Each distinct token is looked up once; a token that cannot be decrypted is left as it is.
+     */
+    async function decryptTokensInTexts(texts) {
+        const joined = texts.join("\n");
+        const emails = [...new Set(joined.match(EMAIL_TOKENS) || [])];
+        const phones = [...new Set(joined.match(PHONE_TOKENS) || [])];
+        if (emails.length === 0 && phones.length === 0)
+            return texts;
+        const plain = new Map();
+        await Promise.all([
+            ...emails.map(async (token) => {
+                const value = await decryptField("email", token);
+                if (value)
+                    plain.set(token, value);
+            }),
+            ...phones.map(async (token) => {
+                const value = await decryptField("phone", token);
+                if (value)
+                    plain.set(token, value);
+            }),
+        ]);
+        return texts.map((text) => {
+            let out = text;
+            for (const [token, value] of plain)
+                out = out.split(token).join(value);
+            return out;
+        });
+    }
+    return { decryptLeadContactInfo, decryptTokensInTexts, looksEncrypted: exports.looksEncrypted, unwrapPlainEmail: exports.unwrapPlainEmail };
+}

package/dist/helpers/emailTemplates.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Email bodies more than one backend sends, kept here so they look the same everywhere.
+ *   leadForwardedEmail: Ops "Forward" and the Client dashboard "Forward" (was services/email/templates/lead-forwarded.js).
+ *   resetPasswordEmail: the password-reset code (Employee and Client; was templates/reset-password.js).
+ */
+export type LeadForwardedEmailInput = {
+    forwardedBy: string;
+    companyName: string;
+    fromOrbitxpro?: boolean;
+    rows: {
+        label: string;
+        value: unknown;
+    }[];
+    note?: string;
+    leadUrl?: string;
+};
+export declare const leadForwardedEmail: ({ forwardedBy, companyName, fromOrbitxpro, rows, note, leadUrl }: LeadForwardedEmailInput) => string;
+export declare const resetPasswordEmail: (code: string | number) => string;
+//# sourceMappingURL=emailTemplates.d.ts.map

package/dist/helpers/emailTemplates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emailTemplates.d.ts","sourceRoot":"","sources":["../../src/helpers/emailTemplates.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAYH,MAAM,MAAM,uBAAuB,GAAG;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,kEAAkE,uBAAuB,KAAG,MA4H9H,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,GAAG,MAAM,KAAG,MA2I1D,CAAC"}

package/dist/helpers/emailTemplates.js

@@ -0,0 +1,276 @@
+"use strict";
+/**
+ * Email bodies more than one backend sends, kept here so they look the same everywhere.
+ *   leadForwardedEmail: Ops "Forward" and the Client dashboard "Forward" (was services/email/templates/lead-forwarded.js).
+ *   resetPasswordEmail: the password-reset code (Employee and Client; was templates/reset-password.js).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetPasswordEmail = exports.leadForwardedEmail = void 0;
+// A lead forwarded by hand to any address someone types in (Ops "Forward" or the Client
+// Dashboard's "Forward"). Same visual system as ticket-update.js. Every value is escaped here,
+// since lead names, notes and contact details are free text that must never render as markup.
+const esc = (value) => value === null || value === undefined || value === ""
+    ? "-"
+    : String(value).replace(/[&<>"']/g, (ch) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[ch]);
+const FONT = "font-family:'Century Gothic','Trebuchet MS',Arial,sans-serif;";
+const leadForwardedEmail = ({ forwardedBy, companyName, fromOrbitxpro, rows, note, leadUrl }) => {
+    const who = `<strong>${esc(forwardedBy)}</strong>`;
+    const intro = fromOrbitxpro
+        ? `${who} from ORBITXPRO forwarded you a lead for <strong>${esc(companyName)}</strong>.`
+        : `${who} at <strong>${esc(companyName)}</strong> forwarded you this lead.`;
+    const rowHtml = rows
+        .map(({ label, value }) => `
+                                <tr>
+                                    <td style="padding:7px 0;font-size:13px;color:#888888;font-weight:700;width:130px;vertical-align:top;${FONT}">${esc(label)}</td>
+                                    <td style="padding:7px 0;font-size:14px;color:#1a1a1a;${FONT}">${esc(value)}</td>
+                                </tr>`)
+        .join("");
+    const noteHtml = note
+        ? `
+                            <table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin:0 0 24px 0;background-color:#fafafa;border:1px solid #e8e8e8;border-left:4px solid #FE5E17;border-radius:0 8px 8px 0;">
+                                <tr>
+                                    <td style="padding:14px 20px;">
+                                        <div style="font-size:13px;color:#888888;font-weight:700;margin-bottom:4px;${FONT}">Note</div>
+                                        <div style="font-size:14px;color:#1a1a1a;line-height:1.6;${FONT}">${esc(note).replace(/\n/g, "<br>")}</div>
+                                    </td>
+                                </tr>
+                            </table>`
+        : "";
+    const buttonHtml = leadUrl
+        ? `
+                            <table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin:0 0 8px 0;">
+                                <tr>
+                                    <td align="center">
+                                        <a href="${esc(leadUrl)}" style="display:inline-block;background-color:#FE5E17;color:#ffffff;text-decoration:none;font-weight:700;font-size:14px;padding:12px 28px;border-radius:6px;${FONT}">View Lead</a>
+                                    </td>
+                                </tr>
+                            </table>`
+        : "";
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Lead Forwarded - ORBITXPRO</title>
+    <style>
+        * { box-sizing: border-box; }
+        body, table, td, a { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; }
+        table, td { mso-table-lspace: 0pt; mso-table-rspace: 0pt; }
+        body { margin: 0; padding: 0; background-color: #f9f9f9; ${FONT} -webkit-font-smoothing: antialiased; }
+        @media only screen and (max-width: 620px) {
+            .wrapper-td { padding: 12px 12px 30px 12px !important; }
+            .logo-table, .main-card { width: 100% !important; }
+            .body-td { padding: 24px 20px !important; }
+            .card-h2 { font-size: 19px !important; }
+            .card-p { font-size: 14px !important; }
+        }
+    </style>
+</head>
+<body style="margin:0;padding:0;background-color:#f9f9f9;${FONT}">
+    <table width="100%" cellpadding="0" cellspacing="0" border="0">
+        <tr>
+            <td align="center" class="wrapper-td" style="background-color:#f9f9f9;padding:20px 16px 40px 16px;">
+
+                <table class="logo-table" width="600" cellpadding="0" cellspacing="0" border="0">
+                    <tr>
+                        <td align="center" style="padding:24px 0 20px 0;">
+                            <span style="font-size:28px;font-weight:300;letter-spacing:12px;color:#FE5E17;text-transform:uppercase;${FONT}">ORBITXPRO</span>
+                        </td>
+                    </tr>
+                </table>
+
+                <table class="main-card" width="600" cellpadding="0" cellspacing="0" border="0" style="background-color:#ffffff;border:1px solid #e0e0e0;border-radius:12px;overflow:hidden;">
+                    <tr>
+                        <td height="80" style="background-color:#FE5E17;background-image:radial-gradient(rgba(255,255,255,0.18) 1.5px, transparent 1.5px), linear-gradient(135deg, rgba(255,255,255,0.06) 25%, transparent 25%, transparent 50%, rgba(255,255,255,0.06) 50%, rgba(255,255,255,0.06) 75%, transparent 75%, transparent);background-size:30px 30px, 90px 90px;background-repeat:repeat, repeat;">&nbsp;</td>
+                    </tr>
+                    <tr>
+                        <td class="body-td" style="padding:32px 36px 28px 36px;">
+                            <h2 class="card-h2" style="color:#1a1a1a;font-size:22px;margin-top:0;margin-bottom:14px;font-weight:700;${FONT}">A Lead Was Forwarded to You</h2>
+                            <p class="card-p" style="color:#555555;line-height:1.7;font-size:15px;margin-top:0;${FONT}">${intro}</p>
+
+                            <table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin:24px 0;background-color:#fcfcfc;border:1px solid #e8e8e8;border-radius:8px;">
+                                <tr>
+                                    <td style="padding:12px 20px;border-bottom:1px solid #eeeeee;">
+                                        <span style="font-size:13px;font-weight:700;color:#888888;text-transform:uppercase;letter-spacing:1px;${FONT}">Lead Details</span>
+                                    </td>
+                                </tr>
+                                <tr>
+                                    <td style="padding:6px 20px 12px 20px;">
+                                        <table width="100%" cellpadding="0" cellspacing="0" border="0">${rowHtml}
+                                        </table>
+                                    </td>
+                                </tr>
+                            </table>
+${noteHtml}${buttonHtml}
+                            <table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin:24px 0 0 0;">
+                                <tr><td style="border-top:1px solid #eeeeee;font-size:0;">&nbsp;</td></tr>
+                            </table>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td style="padding:28px 30px 30px 30px;text-align:center;">
+                            <p style="margin:0 0 14px 0;font-size:13px;${FONT}">
+                                <a href="https://www.linkedin.com/company/orbitxpro" style="color:#999999;text-decoration:none;margin:0 8px;">LinkedIn</a>
+                                <a href="https://x.com/orbitxpro" style="color:#999999;text-decoration:none;margin:0 8px;">X</a>
+                                <a href="https://www.instagram.com/orbitxpro_" style="color:#999999;text-decoration:none;margin:0 8px;">Instagram</a>
+                                <a href="https://www.facebook.com/people/Orbitxpro/61588888121323/" style="color:#999999;text-decoration:none;margin:0 8px;">Facebook</a>
+                            </p>
+                            <a href="https://www.orbitxpro.com" style="color:#FE5E17;text-decoration:none;font-weight:700;font-size:14px;display:block;margin-bottom:6px;${FONT}">www.orbitxpro.com</a>
+                            <p style="font-size:12px;color:#999999;margin:0 0 20px 0;${FONT}">
+                                Questions? Email <a href="mailto:support@orbitxpro.com" style="color:#999999;font-weight:700;text-decoration:none;">support@orbitxpro.com</a>
+                            </p>
+                            <p style="font-size:11px;color:#999999;line-height:1.6;border-top:1px solid #eeeeee;padding-top:20px;margin:0;${FONT}">
+                                This lead was forwarded through ORBITXPRO. To respond, contact the person who forwarded it; replies to this email aren't monitored.<br>
+                                &copy; 2026 ORBITXPRO Inc. | All rights reserved.
+                            </p>
+                        </td>
+                    </tr>
+                </table>
+            </td>
+        </tr>
+    </table>
+</body>
+</html>`;
+};
+exports.leadForwardedEmail = leadForwardedEmail;
+const resetPasswordEmail = (code) => {
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Password Reset Code - ORBITXPRO</title>
+    <link href="https://fonts.googleapis.com/css2?family=Outfit:wght@300;400;600;700&display=swap" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
+    <style>
+        body { margin: 0; padding: 0; background-color: #f9f9f9; font-family: 'Outfit', sans-serif; -webkit-font-smoothing: antialiased; }
+        .wrapper { width: 100%; background-color: #f9f9f9; padding-bottom: 40px; }
+        .main-container { width: 100%; max-width: 600px; margin: 0 auto; background-color: #ffffff; }
+        
+        /* Logo Header - CONSTANT */
+        .logo-header { padding: 30px 0; text-align: center; background-color: #f9f9f9; }
+        .dune-logo { font-size: 28px; font-weight: 300; letter-spacing: 12px; color: #FE5E17; text-transform: uppercase; margin: 0; display: inline-block; }
+        
+        /* Banner Style - CONSTANT */
+        .banner {
+            background-color: #FE5E17;
+            background-image: radial-gradient(rgba(255, 255, 255, 0.15) 1.5px, transparent 1.5px), linear-gradient(135deg, rgba(255, 255, 255, 0.05) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.05) 50%, rgba(255, 255, 255, 0.05) 75%, transparent 75%, transparent);
+            background-size: 40px 40px, 120px 120px;
+            height: 80px; border-top-left-radius: 12px; border-top-right-radius: 12px;
+        }
+
+        .content-card { border: 1px solid #e0e0e0; border-radius: 12px; overflow: hidden; background-color: #ffffff; }
+        .inner-padding { padding: 30px; text-align: left; }
+        h2 { color: #333333; font-size: 22px; margin-top: 0; }
+        p { color: #666666; line-height: 1.6; font-size: 15px; }
+
+        /* Reset Code Box */
+        .code-container {
+            text-align: center;
+            margin: 30px 0;
+            padding: 20px;
+            background-color: #fcfcfc;
+            border: 1px dashed #FE5E17;
+            border-radius: 8px;
+        }
+        .reset-code {
+            font-size: 32px;
+            font-weight: 700;
+            letter-spacing: 8px;
+            color: #333333;
+            display: block;
+        }
+        .expiry-text {
+            font-size: 12px;
+            color: #888888;
+            margin-top: 10px;
+            display: block;
+        }
+
+        /* Security Alert Box */
+        .security-note {
+            background-color: #fffafb;
+            border-left: 4px solid #c0392b;
+            padding: 15px;
+            margin: 25px 0;
+            font-size: 13px;
+            color: #666666;
+        }
+
+        /* Footer - CONSTANT with HOVERS */
+        .footer { padding: 30px; text-align: center; font-size: 12px; color: #999999; }
+        .social-icons { margin-bottom: 15px; }
+        .social-icons a { 
+            color: #999999; 
+            text-decoration: none; 
+            font-size: 18px; 
+            margin: 0 8px; 
+            transition: color 0.3s ease; 
+        }
+        .social-icons a:hover { color: #FE5E17 !important; }
+        .website-link { color: #FE5E17; text-decoration: none; font-weight: 600; font-size: 14px; display: block; margin-bottom: 5px; }
+        .support-container { font-size: 12px; margin-bottom: 20px; }
+        .support-link { 
+            color: #999999; 
+            text-decoration: none; 
+            font-weight: 600; 
+            transition: color 0.3s ease; 
+        }
+        .support-link:hover { color: #FE5E17 !important; text-decoration: underline; }
+        .compliance-text { line-height: 1.5; border-top: 1px solid #eeeeee; padding-top: 20px; }
+    </style>
+</head>
+<body>
+    <div class="wrapper">
+        <div class="logo-header">
+            <div class="dune-logo">ORBITXPRO</div>
+        </div>
+
+        <div class="main-container">
+            <div class="content-card">
+                <div class="banner"></div>
+
+                <div class="inner-padding">
+                    <h2>Password Reset Request</h2>
+                    <p>Hello,</p>
+                    <p>We received a request to reset the password for your ORBITXPRO account. Use the verification code below to proceed with the reset process:</p>
+                    
+                    <div class="code-container">
+                        <span class="reset-code">${code}</span>
+                        <span class="expiry-text">This code will expire in 10 minutes.</span>
+                    </div>
+
+                    <div class="security-note">
+                        <strong>Security Reminder:</strong> If you did not request a password reset, please ignore this email or contact support if you suspect unauthorized access to your account. Your password will not change until you use this code to create a new one.
+                    </div>
+
+                    <p>For security reasons, never share this code with anyone. ORBITXPRO employees will never ask you for your password or verification codes.</p>
+
+                    <hr style="border:0; border-top:1px solid #eeeeee; margin: 25px 0;">
+                </div>
+
+                <div class="footer">
+                    <div class="social-icons">
+                        <a href="https://www.linkedin.com/company/orbitxpro"><i class="fab fa-linkedin"></i></a>
+                        <a href="https://x.com/orbitxpro"><i class="fab fa-twitter"></i></a>
+                        <a href="https://www.instagram.com/orbitxpro_"><i class="fab fa-instagram"></i></a>
+                        <a href="https://www.facebook.com/people/Orbitxpro/61588888121323/"><i class="fab fa-facebook"></i></a>
+                    </div>
+                    <a href="https://www.orbitxpro.com" class="website-link">www.orbitxpro.com</a>
+                    <div class="support-container">
+                        Didn't request this?
+                        <a href="mailto:support@orbitxpro.com" class="support-link">Contact Customer Support</a>
+                    </div>
+                    <div class="compliance-text">
+                        © 2026 ORBITXPRO Inc. | Security Notification <br>
+                        <strong>Please do not reply directly to this email.</strong>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+</body>
+</html>
+`;
+};
+exports.resetPasswordEmail = resetPasswordEmail;

package/dist/helpers/errors.d.ts

@@ -0,0 +1,27 @@
+/**
+ * One error type and one Express error handler for every backend (Employee, Ops, Client, Partner). A backend's
+ * utils/app-error.js re-exports AppError, and its controllers/error.controller.js is
+ *   module.exports = createErrorHandler({ development: <this backend's env says development> });
+ */
+/** An expected error the caller should see: its message goes back as-is with its HTTP status. */
+export declare class AppError extends Error {
+    statusCode: number;
+    success: boolean;
+    isOperational: boolean;
+    /** Optional machine-readable code and details, sent to the client when set. */
+    code?: string;
+    details?: unknown;
+    constructor(message: string, statusCode: number, extra?: {
+        code?: string;
+        details?: unknown;
+    });
+}
+/**
+ * The global error handler. In development the full error goes back; anywhere else (production, staging, or an
+ * environment name the backend doesn't set) known errors get a clean message and anything unexpected a generic 500.
+ * Before this was shared, a backend whose environment was neither "development" nor "production" never answered.
+ */
+export declare function createErrorHandler({ development }: {
+    development: boolean | (() => boolean);
+}): (err: any, _req: any, res: any, _next: any) => void;
+//# sourceMappingURL=errors.d.ts.map

package/dist/helpers/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/helpers/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,iGAAiG;AACjG,qBAAa,QAAS,SAAQ,KAAK;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,UAAS;IAChB,aAAa,UAAQ;IACrB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;gBAEN,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE;CAO9F;AAyDD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,WAAW,EAAE,EAAE;IAAE,WAAW,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAA;CAAE,IAIpF,KAAK,GAAG,EAAE,MAAM,GAAG,EAAE,KAAK,GAAG,EAAE,OAAO,GAAG,UAelD"}

package/dist/helpers/errors.js

@@ -0,0 +1,101 @@
+"use strict";
+/**
+ * One error type and one Express error handler for every backend (Employee, Ops, Client, Partner). A backend's
+ * utils/app-error.js re-exports AppError, and its controllers/error.controller.js is
+ *   module.exports = createErrorHandler({ development: <this backend's env says development> });
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppError = void 0;
+exports.createErrorHandler = createErrorHandler;
+/** An expected error the caller should see: its message goes back as-is with its HTTP status. */
+class AppError extends Error {
+    constructor(message, statusCode, extra) {
+        super(message);
+        this.success = false;
+        this.isOperational = true;
+        this.statusCode = statusCode;
+        if (extra === null || extra === void 0 ? void 0 : extra.code)
+            this.code = extra.code;
+        if ((extra === null || extra === void 0 ? void 0 : extra.details) !== undefined)
+            this.details = extra.details;
+        Error.captureStackTrace(this, this.constructor);
+    }
+}
+exports.AppError = AppError;
+const BAD_REQUEST = 400;
+const UNAUTHORIZED = 401;
+const CONFLICT = 409;
+const INTERNAL = 500;
+// Invalid field value (e.g. a malformed id)
+const handleCastErrorDB = (err) => new AppError(`Invalid ${err.path} : ${err.value}`, BAD_REQUEST);
+// Duplicate key
+const handleDuplicateFieldsDB = (err) => {
+    const key = Object.keys(err.keyValue || {})[0];
+    return new AppError(`${key} already exists, try another value.`, CONFLICT);
+};
+// Schema validation
+const handleValidationErrorDB = (err) => {
+    const errors = Object.values(err.errors || {}).map((el) => el.message);
+    return new AppError(`Invalid input data. ${errors.join(". ")}`, BAD_REQUEST);
+};
+const handleJWTError = () => new AppError("Invalid token. Login again", UNAUTHORIZED);
+const handleJWTExpireError = () => new AppError("Your token has been expired! please log in again", UNAUTHORIZED);
+// File uploads (multer)
+const handleMulterError = (err) => {
+    if (err.code === "LIMIT_UNEXPECTED_FILE")
+        return new AppError("Upload limit reached or invalid field name.", BAD_REQUEST);
+    if (err.code === "LIMIT_FILE_SIZE") {
+        return new AppError("File size limit exceeded. Maximum allowed size is 10 MB per file.", BAD_REQUEST);
+    }
+    return err;
+};
+const devError = (err, res) => {
+    res.status(err.statusCode).json({
+        success: err.success,
+        error: err,
+        message: err.message,
+        stack: err.stack,
+    });
+};
+const prodError = (err, res) => {
+    if (err.isOperational) {
+        res.status(err.statusCode).json({
+            success: err.success,
+            message: err.message,
+            ...(err.code && { error: { code: err.code, ...(err.details && { details: err.details }) } }),
+        });
+    }
+    else {
+        console.error("ERROR", err);
+        res.status(INTERNAL).json({ success: false, message: "Something went wrong!" });
+    }
+};
+/**
+ * The global error handler. In development the full error goes back; anywhere else (production, staging, or an
+ * environment name the backend doesn't set) known errors get a clean message and anything unexpected a generic 500.
+ * Before this was shared, a backend whose environment was neither "development" nor "production" never answered.
+ */
+function createErrorHandler({ development }) {
+    const isDev = () => (typeof development === "function" ? development() : development);
+    // Express recognises an error handler by its four arguments.
+    return (err, _req, res, _next) => {
+        err.statusCode = err.statusCode || INTERNAL;
+        err.success = err.success || false;
+        if (isDev())
+            return devError(err, res);
+        let error = { ...err, message: err.message };
+        if (err.name === "CastError")
+            error = handleCastErrorDB(error);
+        if (err.code === 11000)
+            error = handleDuplicateFieldsDB(error);
+        if (err.name === "ValidationError")
+            error = handleValidationErrorDB(error);
+        if (err.name === "JsonWebTokenError")
+            error = handleJWTError();
+        if (err.name === "TokenExpiredError")
+            error = handleJWTExpireError();
+        if (err.name === "MulterError")
+            error = handleMulterError(error);
+        prodError(error, res);
+    };
+}

package/dist/helpers/invoiceDocument.d.ts

@@ -0,0 +1,63 @@
+/** Who the invoice is from (owner, 2026-09-29). */
+export declare const INVOICE_ISSUER: {
+    name: string;
+    addressLines: string[];
+    email: string;
+};
+/** The statuses a client can see; drafts and invoices waiting for approval stay inside Ops. */
+export declare const CLIENT_VISIBLE_INVOICE_STATUSES: string[];
+/** Approved invoices are charged together on the 5th of the month. */
+export declare function nextInvoiceChargeDate(from?: Date): Date;
+export declare function createInvoiceDocuments({ stripe }: {
+    stripe: any;
+}): {
+    ISSUER: {
+        name: string;
+        addressLines: string[];
+        email: string;
+    };
+    nextInvoiceNumber: (at?: Date) => Promise<string>;
+    ensureInvoiceNumber: (invoice: any) => Promise<string>;
+    nextChargeDate: typeof nextInvoiceChargeDate;
+    buildInvoiceDocument: (invoiceId: any, { companyId, clientView }?: {
+        companyId?: any;
+        clientView?: boolean;
+    }) => Promise<{
+        invoice: {
+            _id: any;
+            number: string;
+            status: any;
+            issueDate: any;
+            periodStart: any;
+            periodEnd: any;
+            subtotal: any;
+            adjustments: any;
+            totalDue: any;
+            approvedAt: any;
+            paidAt: any;
+            chargeDate: Date | null;
+            stripeInvoiceUrl: any;
+        };
+        from: {
+            name: string;
+            addressLines: string[];
+            email: string;
+        };
+        billTo: {
+            name: any;
+            companyId: any;
+            address: any;
+            city: any;
+            state: any;
+            zip: any;
+            country: any;
+            email: any;
+        };
+        items: any;
+        card: {
+            brand: any;
+            last4: any;
+        } | null;
+    }>;
+};
+//# sourceMappingURL=invoiceDocument.d.ts.map

package/dist/helpers/invoiceDocument.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoiceDocument.d.ts","sourceRoot":"","sources":["../../src/helpers/invoiceDocument.ts"],"names":[],"mappings":"AAaA,mDAAmD;AACnD,eAAO,MAAM,cAAc;;;;CAI1B,CAAC;AAEF,+FAA+F;AAC/F,eAAO,MAAM,+BAA+B,UAA8D,CAAC;AAE3G,sEAAsE;AACtE,wBAAgB,qBAAqB,CAAC,IAAI,OAAa,GAAG,IAAI,CAI7D;AAED,wBAAgB,sBAAsB,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,GAAG,CAAA;CAAE;;;;;;sCAOb,OAAO,CAAC,MAAM,CAAC;mCAOtB,GAAG,KAAG,OAAO,CAAC,MAAM,CAAC;;sCAmClB,GAAG,8BAAqC;QAAE,SAAS,CAAC,EAAE,GAAG,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoEjI"}