orbitx-core-models 11.174.0 → 11.176.0

package/dist/helpers/invoiceDocument.js

@@ -0,0 +1,148 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CLIENT_VISIBLE_INVOICE_STATUSES = exports.INVOICE_ISSUER = void 0;
+exports.nextInvoiceChargeDate = nextInvoiceChargeDate;
+exports.createInvoiceDocuments = createInvoiceDocuments;
+/**
+ * The invoice as a document: what the invoice page in Ops and the Client dashboard shows (and what prints as the
+ * PDF), plus invoice numbers. Shared by the Ops and Client backends; each passes its Stripe client:
+ *   const invoices = createInvoiceDocuments({ stripe });
+ *   invoices.buildInvoiceDocument(invoiceId)                                   // Ops: any invoice
+ *   invoices.buildInvoiceDocument(invoiceId, { companyId, clientView: true })  // Client: its own, past approval
+ */
+const company_model_1 = require("../models/company.model");
+const counter_model_1 = require("../models/counter.model");
+const invoice_model_1 = require("../models/invoice.model");
+const leadLedger_model_1 = require("../models/leadLedger.model");
+const errors_1 = require("./errors");
+/** Who the invoice is from (owner, 2026-09-29). */
+exports.INVOICE_ISSUER = {
+    name: "ORBITXPRO LLC",
+    addressLines: ["4926 Winding View Ln", "Humble, TX 77346"],
+    email: "billing@orbitxpro.com",
+};
+/** The statuses a client can see; drafts and invoices waiting for approval stay inside Ops. */
+exports.CLIENT_VISIBLE_INVOICE_STATUSES = ["approved", "pending_payment", "paid", "void", "disputed"];
+/** Approved invoices are charged together on the 5th of the month. */
+function nextInvoiceChargeDate(from = new Date()) {
+    const date = new Date(from.getFullYear(), from.getMonth(), 5, 12, 0, 0);
+    if (from.getDate() > 5)
+        date.setMonth(date.getMonth() + 1);
+    return date;
+}
+function createInvoiceDocuments({ stripe }) {
+    const InvoiceModel = invoice_model_1.Invoice;
+    const CompanyModel = company_model_1.Company;
+    const CounterModel = counter_model_1.Counter;
+    const LeadLedgerModel = leadLedger_model_1.LeadLedger;
+    /** "INV-2026-0001": sequential across OrbitXPro, starting again each year. */
+    async function nextInvoiceNumber(at = new Date()) {
+        const year = at.getFullYear();
+        const counter = await CounterModel.findByIdAndUpdate(`invoiceNumber_${year}`, { $inc: { seq: 1 } }, { new: true, upsert: true });
+        return `INV-${year}-${String(counter.seq).padStart(4, "0")}`;
+    }
+    /** Invoices made before numbering get theirs the first time they're shown. */
+    async function ensureInvoiceNumber(invoice) {
+        if (invoice.invoiceNumber)
+            return invoice.invoiceNumber;
+        const number = await nextInvoiceNumber(new Date(invoice.createdAt || Date.now()));
+        const updated = await InvoiceModel.findOneAndUpdate({ _id: invoice._id, invoiceNumber: { $exists: false } }, { $set: { invoiceNumber: number } }, { new: true }).lean();
+        if (updated === null || updated === void 0 ? void 0 : updated.invoiceNumber)
+            return updated.invoiceNumber;
+        const current = await InvoiceModel.findById(invoice._id).select("invoiceNumber").lean();
+        return (current === null || current === void 0 ? void 0 : current.invoiceNumber) || number;
+    }
+    async function cardFor(invoice, company) {
+        var _a, _b, _c, _d;
+        try {
+            if (invoice.stripeInvoiceId) {
+                const si = await stripe.invoices.retrieve(invoice.stripeInvoiceId, { expand: ["payment_intent.payment_method"] });
+                const card = (_b = (_a = si === null || si === void 0 ? void 0 : si.payment_intent) === null || _a === void 0 ? void 0 : _a.payment_method) === null || _b === void 0 ? void 0 : _b.card;
+                if (card)
+                    return { brand: card.brand, last4: card.last4 };
+            }
+            if (company === null || company === void 0 ? void 0 : company.stripeCustomerId) {
+                const customer = await stripe.customers.retrieve(company.stripeCustomerId, { expand: ["invoice_settings.default_payment_method"] });
+                const card = (_d = (_c = customer === null || customer === void 0 ? void 0 : customer.invoice_settings) === null || _c === void 0 ? void 0 : _c.default_payment_method) === null || _d === void 0 ? void 0 : _d.card;
+                if (card)
+                    return { brand: card.brand, last4: card.last4 };
+            }
+        }
+        catch (err) {
+            console.error(`[invoice] card for ${invoice._id} not read:`, err.message);
+        }
+        return null;
+    }
+    /**
+     * Everything the invoice page shows. `companyId` limits it to that company's own invoices; `clientView` also
+     * hides drafts/unapproved invoices and the Stripe link (Client dashboard).
+     */
+    async function buildInvoiceDocument(invoiceId, { companyId, clientView = false } = {}) {
+        var _a, _b;
+        const invoice = clientView
+            ? await InvoiceModel.findOne({ _id: invoiceId, companyId, status: { $in: exports.CLIENT_VISIBLE_INVOICE_STATUSES } }).lean().catch(() => null)
+            : await InvoiceModel.findById(invoiceId).lean().catch(() => null);
+        if (!invoice || (companyId && String(invoice.companyId) !== String(companyId)))
+            throw new errors_1.AppError("Invoice not found", 404);
+        const [company, number, entries] = await Promise.all([
+            CompanyModel.findById(invoice.companyId).select("contactInfo basicInfo.companyId stripeCustomerId").lean(),
+            ensureInvoiceNumber(invoice),
+            LeadLedgerModel.find({ invoiceId: invoice._id, status: { $ne: "discarded" } })
+                .sort({ createdAt: 1 })
+                .populate({ path: "leadId", select: "chatId data.name", populate: { path: "chatId", select: "chatId chatNumber" } })
+                .lean(),
+        ]);
+        const card = await cardFor(invoice, company);
+        const contact = (company === null || company === void 0 ? void 0 : company.contactInfo) || {};
+        const items = entries.map((e) => {
+            var _a, _b, _c;
+            const quantity = e.quantity || 1;
+            const sign = e.type === "deduct" ? -1 : 1;
+            let description;
+            if (e.type === "lead") {
+                const chat = (_a = e.leadId) === null || _a === void 0 ? void 0 : _a.chatId;
+                const ref = (chat === null || chat === void 0 ? void 0 : chat.chatId) || ((chat === null || chat === void 0 ? void 0 : chat.chatNumber) != null ? String(chat.chatNumber) : "");
+                const name = (_c = (_b = e.leadId) === null || _b === void 0 ? void 0 : _b.data) === null || _c === void 0 ? void 0 : _c.name;
+                description = `Lead${ref ? ` ${ref}` : ""}${name ? ` · ${name}` : ""}`;
+            }
+            else {
+                description = e.note || (e.type === "add" ? "Additional charge" : "Credit");
+            }
+            return { date: e.createdAt, type: e.type, description, quantity, unitPrice: e.unitPrice, amount: sign * e.unitPrice * quantity };
+        });
+        const chargeStatuses = clientView ? ["approved"] : ["draft", "pending_approval", "approved"];
+        return {
+            invoice: {
+                _id: invoice._id,
+                number,
+                status: invoice.status,
+                issueDate: invoice.createdAt,
+                periodStart: invoice.billingPeriodStart,
+                periodEnd: invoice.billingPeriodEnd,
+                subtotal: invoice.subtotal,
+                adjustments: invoice.adjustments,
+                totalDue: invoice.totalDue,
+                approvedAt: invoice.approvedAt || null,
+                paidAt: invoice.paidAt || null,
+                chargeDate: chargeStatuses.includes(invoice.status)
+                    ? nextInvoiceChargeDate(invoice.approvedAt ? new Date(invoice.approvedAt) : new Date())
+                    : null,
+                stripeInvoiceUrl: clientView ? null : invoice.stripeInvoiceUrl || null,
+            },
+            from: exports.INVOICE_ISSUER,
+            billTo: {
+                name: contact.officialBusinessName || ((_a = company === null || company === void 0 ? void 0 : company.basicInfo) === null || _a === void 0 ? void 0 : _a.companyId) || "",
+                companyId: ((_b = company === null || company === void 0 ? void 0 : company.basicInfo) === null || _b === void 0 ? void 0 : _b.companyId) || "",
+                address: contact.address || "",
+                city: contact.city || "",
+                state: contact.state || "",
+                zip: contact.zipcode || "",
+                country: contact.country || "",
+                email: contact.email || "",
+            },
+            items,
+            card,
+        };
+    }
+    return { ISSUER: exports.INVOICE_ISSUER, nextInvoiceNumber, ensureInvoiceNumber, nextChargeDate: nextInvoiceChargeDate, buildInvoiceDocument };
+}

package/dist/helpers/listQuery.d.ts

@@ -0,0 +1,35 @@
+/**
+ * List endpoints' ?filter / ?sort / ?fields / ?page&limit handling, for every backend. Two styles, because the
+ * dashboards send different kinds of filters:
+ *  - "search" (Ops, Employee): text fields match case-insensitively ("a,b" = either), numbers take "gte:5",
+ *    id fields must be valid ids, and it also works on aggregation pipelines.
+ *  - "exact" (Client, Partner): exact matches, "field[gte]=..." ranges and createdAt dates.
+ * A backend's utils/api-features.js is `module.exports = createListQuery({ style, ... })`, so its routes keep
+ * calling `new APIFeatures(query, req.query).filter().sort().limitFields().paginate(total)`.
+ */
+export type ListQueryStyle = "search" | "exact";
+export interface ListQueryOptions {
+    style: ListQueryStyle;
+    /** A filter from the query string may narrow a list but never replace a condition the route already set
+     *  (Mongoose's find() overwrites same-named keys, so ?companyId=<another id> would swap in someone else's). Top-level
+     *  $ operators are never taken from the URL either. Only applies to find() queries. */
+    lockBaseFilter: boolean;
+    /** Page size when ?limit isn't given. */
+    defaultLimit: number;
+}
+export declare function createListQuery(options: ListQueryOptions): {
+    new (query: any, queryString: any): {
+        query: any;
+        queryString: any;
+        paginationResult?: {
+            total: number;
+            currentPage: number;
+            totalPages: number;
+        };
+        filter(): /*elided*/ any;
+        sort(): /*elided*/ any;
+        limitFields(): /*elided*/ any;
+        paginate(totalDocuments: number): /*elided*/ any;
+    };
+};
+//# sourceMappingURL=listQuery.d.ts.map

package/dist/helpers/listQuery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listQuery.d.ts","sourceRoot":"","sources":["../../src/helpers/listQuery.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEhD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,cAAc,CAAC;IACtB;;2FAEuF;IACvF,cAAc,EAAE,OAAO,CAAC;IACxB,yCAAyC;IACzC,YAAY,EAAE,MAAM,CAAC;CACtB;AAsGD,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB;gBAQlC,GAAG,eAAe,GAAG;eAJjC,GAAG;qBACG,GAAG;2BACG;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE;;;;iCAqDpD,MAAM;;EAmBlC"}

package/dist/helpers/listQuery.js

@@ -0,0 +1,180 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createListQuery = createListQuery;
+const mongoose_1 = require("mongoose");
+const PAGING_KEYS = ["page", "sort", "limit", "fields"];
+// "a,b" -> any of them, case-insensitive; one value -> contains, case-insensitive. Empty -> drop the filter.
+const textMatch = (value) => {
+    if (!value.includes(","))
+        return new RegExp(value, "i");
+    const values = value.split(",").map((v) => v.trim()).filter(Boolean);
+    return values.length ? { $in: values.map((v) => new RegExp(v, "i")) } : undefined;
+};
+function searchFilter(query, queryObj) {
+    var _a, _b;
+    for (const key in queryObj) {
+        const fieldType = (_b = (_a = query === null || query === void 0 ? void 0 : query.schema) === null || _a === void 0 ? void 0 : _a.paths[key]) === null || _b === void 0 ? void 0 : _b.instance;
+        let value = queryObj[key];
+        if (typeof value !== "string") {
+            delete queryObj[key];
+            continue;
+        }
+        if (value === "true")
+            value = true;
+        else if (value === "false")
+            value = false;
+        if (fieldType === "Boolean") {
+            queryObj[key] = value;
+        }
+        else if (fieldType === "ObjectId") {
+            if (mongoose_1.Types.ObjectId.isValid(value))
+                queryObj[key] = new mongoose_1.Types.ObjectId(value);
+            else
+                delete queryObj[key];
+        }
+        else if (fieldType === "Number") {
+            if (typeof value !== "string") {
+                delete queryObj[key]; // "true"/"false" on a number field (it used to crash the request)
+            }
+            else if (value.includes(":")) {
+                const [operator, val] = value.split(":");
+                if (["gte", "gt", "lte", "lt"].includes(operator) && !isNaN(val)) {
+                    queryObj[key] = { [`$${operator}`]: parseFloat(val) };
+                }
+                else {
+                    delete queryObj[key];
+                }
+            }
+            else if (!isNaN(value)) {
+                queryObj[key] = parseFloat(value);
+            }
+            else {
+                delete queryObj[key];
+            }
+        }
+        else {
+            // String fields and anything the schema doesn't describe (e.g. aggregation pipelines).
+            if (typeof value !== "string") {
+                queryObj[key] = value; // "true"/"false" on a non-Boolean field
+                continue;
+            }
+            const m = textMatch(value);
+            if (m)
+                queryObj[key] = m;
+            else
+                delete queryObj[key];
+        }
+    }
+}
+function exactFilter(query, queryObj) {
+    const schema = query.model.schema;
+    Object.keys(queryObj).forEach((key) => {
+        var _a;
+        const value = queryObj[key];
+        if (value === "true") {
+            queryObj[key] = true;
+            return;
+        }
+        if (value === "false") {
+            queryObj[key] = false;
+            return;
+        }
+        const match = key.match(/^(.+)\[(gte|gt|lte|lt)\]$/);
+        if (match) {
+            const field = match[1];
+            const operator = match[2];
+            let val = queryObj[key];
+            if (field === "createdAt" && typeof val === "string") {
+                if (val.match(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}\s00:00$/)) {
+                    val = val.replace(/\s00:00$/, "Z");
+                }
+                val = new Date(val);
+            }
+            if (!queryObj[field])
+                queryObj[field] = {};
+            queryObj[field][`$${operator}`] = val;
+            delete queryObj[key];
+            return;
+        }
+        const fieldType = (_a = schema.paths[key]) === null || _a === void 0 ? void 0 : _a.instance;
+        if (typeof value !== "string" || key.startsWith("$"))
+            return;
+        if (fieldType === "Number") {
+            if (!/^(gte|gt|lte|lt):/.test(value) && isNaN(value))
+                delete queryObj[key];
+        }
+    });
+}
+function createListQuery(options) {
+    const { style, lockBaseFilter, defaultLimit } = options;
+    return class APIFeatures {
+        constructor(query, queryString) {
+            this.query = query;
+            this.queryString = queryString;
+        }
+        filter() {
+            const queryObj = { ...this.queryString };
+            PAGING_KEYS.forEach((el) => delete queryObj[el]);
+            if (style === "search")
+                searchFilter(this.query, queryObj);
+            else
+                exactFilter(this.query, queryObj);
+            if (lockBaseFilter && typeof this.query.getFilter === "function") {
+                const fixed = this.query.getFilter();
+                Object.keys(queryObj).forEach((key) => {
+                    if (key.startsWith("$") || Object.prototype.hasOwnProperty.call(fixed, key))
+                        delete queryObj[key];
+                });
+            }
+            if (typeof this.query.find === "function") {
+                this.query = this.query.find(queryObj);
+            }
+            else if (typeof this.query.match === "function") {
+                this.query.match(queryObj);
+            }
+            return this;
+        }
+        sort() {
+            const sortBy = this.queryString.sort ? String(this.queryString.sort).split(",").join(" ") : "-createdAt";
+            this.query = this.query.sort(sortBy);
+            return this;
+        }
+        limitFields() {
+            if (this.queryString.fields) {
+                const fields = String(this.queryString.fields).split(",").join(" ");
+                if (typeof this.query.select === "function") {
+                    this.query = this.query.select(fields);
+                }
+                else if (typeof this.query.project === "function") {
+                    const projection = {};
+                    fields.split(" ").forEach((f) => (projection[f] = 1));
+                    this.query.project(projection);
+                }
+            }
+            else if (typeof this.query.select === "function") {
+                this.query = this.query.select("-__v");
+            }
+            else if (typeof this.query.project === "function") {
+                this.query.project({ __v: 0 });
+            }
+            return this;
+        }
+        paginate(totalDocuments) {
+            const page = this.queryString.page * 1 || 1;
+            const limit = this.queryString.limit * 1 || defaultLimit;
+            const skip = (page - 1) * limit;
+            if (typeof this.query.skip === "function") {
+                this.query = this.query.skip(skip).limit(limit);
+            }
+            else if (typeof this.query.append === "function") {
+                this.query.append([{ $skip: skip }, { $limit: limit }]);
+            }
+            this.paginationResult = {
+                total: totalDocuments,
+                currentPage: page,
+                totalPages: Math.ceil(totalDocuments / limit),
+            };
+            return this;
+        }
+    };
+}

package/dist/helpers/myUpdates.d.ts

@@ -0,0 +1,16 @@
+export declare function createMyUpdatesController({ dashboard, audience, ownerKey, sse }: {
+    dashboard: string;
+    audience: string;
+    ownerKey: string;
+    sse: {
+        addClient: (res: any) => void;
+        removeClient: (res: any) => void;
+    };
+}): {
+    getMyUpdates: (req: any, res: any, next: any) => void;
+    markRead: (req: any, res: any, next: any) => void;
+    markAllRead: (req: any, res: any, next: any) => void;
+    markReadByLink: (req: any, res: any, next: any) => void;
+    streamUpdates: (req: any, res: any) => void;
+};
+//# sourceMappingURL=myUpdates.d.ts.map

package/dist/helpers/myUpdates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"myUpdates.d.ts","sourceRoot":"","sources":["../../src/helpers/myUpdates.ts"],"names":[],"mappings":"AAYA,wBAAgB,yBAAyB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE;QAAE,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;QAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAA;KAAE,CAAC;CAC1E;;;;;yBA2D6B,GAAG,OAAO,GAAG;EAyB1C"}

package/dist/helpers/myUpdates.js

@@ -0,0 +1,94 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMyUpdatesController = createMyUpdatesController;
+/**
+ * A portal user's Updates feed (the bell/Updates page): list with unread counts, mark read, mark all read, mark
+ * read by link, and the live "something changed" stream. Shared by the Client and Partner backends:
+ *   module.exports = createMyUpdatesController({ dashboard: "client", audience: "company", ownerKey: "companyId", sse });
+ *   module.exports = createMyUpdatesController({ dashboard: "partner", audience: "partner", ownerKey: "partnerId", sse });
+ * `sse` is the backend's own stream service ({ addClient(res), removeClient(res) }).
+ */
+const mongoose_1 = __importDefault(require("mongoose"));
+const update_model_1 = require("../models/update.model");
+const errors_1 = require("./errors");
+const _http_1 = require("./_http");
+function createMyUpdatesController({ dashboard, audience, ownerKey, sse }) {
+    const UpdateModel = update_model_1.Update;
+    // Mine: a broadcast to every user of this dashboard, something aimed at my whole account (company or partner),
+    // or aimed at me.
+    const myUpdatesQuery = (userId, ownerId) => ({
+        dashboard,
+        $or: [{ audience: "broadcast" }, { audience, [ownerKey]: ownerId }, { audience: "user", userId }],
+    });
+    const getMyUpdates = (0, _http_1.catchAsync)(async (req, res) => {
+        const query = myUpdatesQuery(req.user._id, req.user.owner);
+        const unreadQuery = { ...query, readBy: { $ne: req.user._id } };
+        const [updates, unreadCount, unreadGroups] = await Promise.all([
+            UpdateModel.find(query).sort({ createdAt: -1 }).limit(100).lean(),
+            UpdateModel.countDocuments(unreadQuery),
+            // Unread count per type, so the sidebar can badge Tickets and Requests separately from Updates.
+            UpdateModel.aggregate([{ $match: unreadQuery }, { $group: { _id: "$type", count: { $sum: 1 } } }]),
+        ]);
+        const unreadByType = Object.fromEntries(unreadGroups.map((g) => [g._id, g.count]));
+        res.status(_http_1.HTTP.OK).json({
+            success: true,
+            results: updates.length,
+            data: {
+                updates: updates.map((u) => ({
+                    ...u,
+                    isRead: (u.readBy || []).some((id) => String(id) === String(req.user._id)),
+                })),
+                unreadCount,
+                unreadByType,
+            },
+        });
+    });
+    const markRead = (0, _http_1.catchAsync)(async (req, res, next) => {
+        if (!mongoose_1.default.Types.ObjectId.isValid(req.params.id))
+            return next(new errors_1.AppError("Invalid update id", _http_1.HTTP.BAD_REQUEST));
+        const update = await UpdateModel.findByIdAndUpdate(req.params.id, { $addToSet: { readBy: req.user._id } }, { new: true });
+        if (!update)
+            return next(new errors_1.AppError("Update not found", _http_1.HTTP.NOT_FOUND));
+        res.status(_http_1.HTTP.OK).json({ success: true, message: "Marked read" });
+    });
+    const markAllRead = (0, _http_1.catchAsync)(async (req, res) => {
+        await UpdateModel.updateMany(myUpdatesQuery(req.user._id, req.user.owner), { $addToSet: { readBy: req.user._id } });
+        res.status(_http_1.HTTP.OK).json({ success: true, message: "All updates marked read" });
+    });
+    // Opening a ticket/request marks its updates read, so its sidebar badge clears. Body: { link: "/tickets/view/<id>" }.
+    const markReadByLink = (0, _http_1.catchAsync)(async (req, res, next) => {
+        var _a;
+        const link = typeof ((_a = req.body) === null || _a === void 0 ? void 0 : _a.link) === "string" ? req.body.link.trim() : "";
+        if (!link || link.length > 300)
+            return next(new errors_1.AppError("A link is required", _http_1.HTTP.BAD_REQUEST));
+        const result = await UpdateModel.updateMany({ ...myUpdatesQuery(req.user._id, req.user.owner), link, readBy: { $ne: req.user._id } }, { $addToSet: { readBy: req.user._id } });
+        res.status(_http_1.HTTP.OK).json({ success: true, data: { marked: result.modifiedCount || 0 } });
+    });
+    // A bare "something changed" ping; the page reacts by reloading its own feed.
+    const streamUpdates = (req, res) => {
+        res.writeHead(_http_1.HTTP.OK, {
+            "Content-Type": "text/event-stream",
+            "Cache-Control": "no-cache",
+            Connection: "keep-alive",
+            "X-Accel-Buffering": "no",
+        });
+        res.write("\n");
+        sse.addClient(res);
+        const heartbeat = setInterval(() => {
+            try {
+                res.write(": ping\n\n");
+            }
+            catch {
+                clearInterval(heartbeat);
+            }
+        }, 25000);
+        req.on("close", () => {
+            clearInterval(heartbeat);
+            sse.removeClient(res);
+        });
+    };
+    return { getMyUpdates, markRead, markAllRead, markReadByLink, streamUpdates };
+}

package/dist/helpers/ownActivity.d.ts

@@ -0,0 +1,8 @@
+export declare function createOwnActivityController({ kind }: {
+    kind: "client" | "partner";
+}): {
+    getAccess: (req: any, res: any, next: any) => void;
+    listActivity: (req: any, res: any, next: any) => void;
+    recordExport: (req: any, res: any, next: any) => void;
+};
+//# sourceMappingURL=ownActivity.d.ts.map

package/dist/helpers/ownActivity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownActivity.d.ts","sourceRoot":"","sources":["../../src/helpers/ownActivity.ts"],"names":[],"mappings":"AA2BA,wBAAgB,2BAA2B,CAAC,EAAE,IAAI,EAAE,EAAE;IAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAA;CAAE;;;;EAmFnF"}

package/dist/helpers/ownActivity.js

@@ -0,0 +1,114 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createOwnActivityController = createOwnActivityController;
+/**
+ * A portal's own Activity log: everything done on its account, by its own users and by OrbitXPro staff (HIPAA: an
+ * account must be able to see everyone who touched its data). Shown only after Ops turns on the account's access
+ * (activityLogAccess). Shared by the Client and Partner backends:
+ *   createOwnActivityController({ kind: "client" })   // Company accounts, logs filed under `company`
+ *   createOwnActivityController({ kind: "partner" })  // Partner accounts, logs filed under `partner`
+ */
+const mongoose_1 = __importDefault(require("mongoose"));
+const company_model_1 = require("../models/company.model");
+const partner_model_1 = require("../models/partner.model");
+const activityLog_model_1 = require("../models/activityLog.model");
+const recorder_1 = require("../activity/recorder");
+const errors_1 = require("./errors");
+const _http_1 = require("./_http");
+const escape = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+const list = (v) => String(v || "")
+    .split(",")
+    .map((s) => s.trim())
+    .filter(Boolean);
+const KINDS = {
+    client: { Account: company_model_1.Company, field: "company", searchFields: ["actor.name", "actor.email", "details", "action", "record.label"] },
+    partner: { Account: partner_model_1.Partner, field: "partner", searchFields: ["actor.name", "actor.email", "details", "action"] },
+};
+function createOwnActivityController({ kind }) {
+    const { field, searchFields } = KINDS[kind];
+    const Account = KINDS[kind].Account;
+    const ActivityLogModel = activityLog_model_1.ActivityLog;
+    const accountIdOf = (req) => { var _a, _b, _c; return ((_b = (_a = req.user) === null || _a === void 0 ? void 0 : _a.owner) === null || _b === void 0 ? void 0 : _b._id) || ((_c = req.user) === null || _c === void 0 ? void 0 : _c.owner); };
+    const getAccess = (0, _http_1.catchAsync)(async (req, res) => {
+        const account = await Account.findById(accountIdOf(req)).select("activityLogAccess").lean();
+        res.status(_http_1.HTTP.OK).json({ success: true, data: { enabled: !!(account === null || account === void 0 ? void 0 : account.activityLogAccess) } });
+    });
+    const listActivity = (0, _http_1.catchAsync)(async (req, res, next) => {
+        const account = await Account.findById(accountIdOf(req)).select("activityLogAccess").lean();
+        if (!(account === null || account === void 0 ? void 0 : account.activityLogAccess)) {
+            return next(new errors_1.AppError("Your Activity log isn't turned on. Please ask OrbitXPro support to turn it on.", _http_1.HTTP.FORBIDDEN));
+        }
+        const q = req.query;
+        const page = Math.max(1, Number(q.page) || 1);
+        const limit = Math.min(200, Math.max(1, Number(q.limit) || 25));
+        const filter = { [field]: new mongoose_1.default.Types.ObjectId(String(account._id)) };
+        const actions = list(q.action);
+        if (actions.length)
+            filter.action = { $in: actions };
+        const outcomes = list(q.outcome).map((o) => o.toLowerCase());
+        if (outcomes.length)
+            filter.outcome = { $in: outcomes };
+        if (q.from || q.to) {
+            filter.at = {};
+            if (q.from)
+                filter.at.$gte = new Date(q.from);
+            if (q.to)
+                filter.at.$lte = new Date(q.to);
+        }
+        const and = [];
+        if (q.user)
+            and.push({ $or: ["actor.name", "actor.email"].map((f) => ({ [f]: { $regex: escape(String(q.user)), $options: "i" } })) });
+        if (q.details)
+            and.push({ details: { $regex: escape(String(q.details)), $options: "i" } });
+        if (q.search) {
+            const re = { $regex: escape(String(q.search)), $options: "i" };
+            and.push({ $or: searchFields.map((f) => ({ [f]: re })) });
+        }
+        if (and.length)
+            filter.$and = and;
+        const [rows, total] = await Promise.all([
+            ActivityLogModel.find(filter)
+                .sort({ at: -1 })
+                .skip((page - 1) * limit)
+                .limit(limit)
+                .select("at actor dashboard action details record outcome sensitive changes ip")
+                .lean(),
+            ActivityLogModel.countDocuments(filter),
+        ]);
+        // OrbitXPro staff show by name and team; their work email and network address stay internal.
+        const items = rows.map((r) => {
+            var _a, _b, _c;
+            return ((_a = r.actor) === null || _a === void 0 ? void 0 : _a.kind) === kind
+                ? r
+                : { ...r, actor: { kind: (_b = r.actor) === null || _b === void 0 ? void 0 : _b.kind, name: ((_c = r.actor) === null || _c === void 0 ? void 0 : _c.name) || "OrbitXPro", team: "OrbitXPro" }, ip: undefined };
+        });
+        res.status(_http_1.HTTP.OK).json({
+            success: true,
+            data: { items },
+            pagination: { page, limit, total, totalPages: Math.max(1, Math.ceil(total / limit)) },
+        });
+    });
+    const recordExport = (0, _http_1.catchAsync)(async (req, res) => {
+        var _a, _b;
+        const what = String(((_a = req.body) === null || _a === void 0 ? void 0 : _a.what) || "a table").slice(0, 120);
+        const rows = Number((_b = req.body) === null || _b === void 0 ? void 0 : _b.rows);
+        (0, recorder_1.recordActivity)({
+            actor: { kind, id: req.user._id, name: req.user.name, email: req.user.email, role: req.user.role },
+            dashboard: kind,
+            action: "Exported",
+            details: `Exported ${what}${Number.isFinite(rows) ? ` (CSV, ${rows} row${rows === 1 ? "" : "s"})` : ""}`,
+            [field]: accountIdOf(req),
+            sensitive: true,
+            ip: (0, recorder_1.clientIp)(req),
+            userAgent: req.headers["user-agent"],
+            method: req.method,
+            path: req.originalUrl.split("?")[0],
+            status: 200,
+        });
+        res.status(_http_1.HTTP.OK).json({ success: true });
+    });
+    return { getAccess, listActivity, recordExport };
+}

package/dist/helpers/ownTickets.d.ts

@@ -0,0 +1,21 @@
+export declare function createOwnTicketsController({ ownerType, categoryOptions, fallbackAuthorName, uploadAttachments, raiseDispute }: {
+    ownerType: "Company" | "Partner";
+    categoryOptions: any[];
+    fallbackAuthorName: string;
+    uploadAttachments: (files: any[], ownerId: any) => Promise<any[]>;
+    /** Client only: opens the financial dispute behind a lead-dispute ticket. */
+    raiseDispute?: (input: {
+        leadId: any;
+        reason: string;
+        companyId: any;
+        raisedBy: any;
+        ticketId: any;
+    }) => Promise<any>;
+}): {
+    getTicketCategories: (req: any, res: any, next: any) => void;
+    createTicket: (req: any, res: any, next: any) => void;
+    getMyTickets: (req: any, res: any, next: any) => void;
+    getMyTicketById: (req: any, res: any, next: any) => void;
+    addTicketMessage: (req: any, res: any, next: any) => void;
+};
+//# sourceMappingURL=ownTickets.d.ts.map

package/dist/helpers/ownTickets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownTickets.d.ts","sourceRoot":"","sources":["../../src/helpers/ownTickets.ts"],"names":[],"mappings":"AAuBA,wBAAgB,0BAA0B,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,YAAY,EAAE,EAAE;IAC9H,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IACjC,eAAe,EAAE,GAAG,EAAE,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClE,6EAA6E;IAC7E,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAC;QAAC,QAAQ,EAAE,GAAG,CAAC;QAAC,QAAQ,EAAE,GAAG,CAAA;KAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CACvH;;;;;;EAoJA"}