orbitx-core-models 11.175.0 → 11.176.0

package/dist/helpers/_http.d.ts

@@ -0,0 +1,10 @@
+/** Runs an async route handler and hands any error to Express's error handler. */
+export declare const catchAsync: (fn: (req: any, res: any, next: any) => Promise<any>) => (req: any, res: any, next: any) => void;
+export declare const HTTP: {
+    readonly OK: 200;
+    readonly CREATED: 201;
+    readonly BAD_REQUEST: 400;
+    readonly FORBIDDEN: 403;
+    readonly NOT_FOUND: 404;
+};
+//# sourceMappingURL=_http.d.ts.map

package/dist/helpers/_http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_http.d.ts","sourceRoot":"","sources":["../../src/helpers/_http.ts"],"names":[],"mappings":"AAEA,kFAAkF;AAClF,eAAO,MAAM,UAAU,GACpB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,MACnD,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG,SAE7B,CAAC;AAEJ,eAAO,MAAM,IAAI;;;;;;CAMP,CAAC"}

package/dist/helpers/_http.js

@@ -0,0 +1,16 @@
+"use strict";
+// Internal to the helpers (not exported from the package): Express plumbing the shared controllers use.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HTTP = exports.catchAsync = void 0;
+/** Runs an async route handler and hands any error to Express's error handler. */
+const catchAsync = (fn) => (req, res, next) => {
+    fn(req, res, next).catch(next);
+};
+exports.catchAsync = catchAsync;
+exports.HTTP = {
+    OK: 200,
+    CREATED: 201,
+    BAD_REQUEST: 400,
+    FORBIDDEN: 403,
+    NOT_FOUND: 404,
+};

package/dist/helpers/avatars.d.ts

@@ -0,0 +1,15 @@
+export declare function createAvatarController({ companyIdOf, upload, remove }: {
+    companyIdOf: (req: any) => any;
+    upload: (file: any, folder: string) => Promise<{
+        publicUrl: string;
+        s3Key: string;
+    }>;
+    remove: (s3Key: string) => Promise<void>;
+}): {
+    getAvatars: (req: any, res: any, next: any) => void;
+    createAvatar: (req: any, res: any, next: any) => void;
+    updateAvatar: (req: any, res: any, next: any) => void;
+    deleteAvatar: (req: any, res: any, next: any) => void;
+    setDefaultAvatar: (req: any, res: any, next: any) => void;
+};
+//# sourceMappingURL=avatars.d.ts.map

package/dist/helpers/avatars.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"avatars.d.ts","sourceRoot":"","sources":["../../src/helpers/avatars.ts"],"names":[],"mappings":"AAcA,wBAAgB,sBAAsB,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;IACtE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,CAAC;IAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;;;;;;EAiHA"}

package/dist/helpers/avatars.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAvatarController = createAvatarController;
+/**
+ * The chat avatars a company keeps (Company.avatars): list, add, rename/replace, delete, set default. Shared by the
+ * Ops backend (any company, from the URL) and the Client backend (the signed-in company):
+ *   module.exports = createAvatarController({
+ *     companyIdOf: (req) => req.user.owner,          // or req.params.companyId
+ *     upload: (file, folder) => <store it; resolves { publicUrl, s3Key }>,
+ *     remove: (s3Key) => <delete it>,
+ *   });
+ */
+const mongoose_1 = require("mongoose");
+const company_model_1 = require("../models/company.model");
+const errors_1 = require("./errors");
+const _http_1 = require("./_http");
+function createAvatarController({ companyIdOf, upload, remove }) {
+    const CompanyModel = company_model_1.Company;
+    const getAvatars = (0, _http_1.catchAsync)(async (req, res, next) => {
+        var _a, _b, _c;
+        const company = await CompanyModel.findById(companyIdOf(req)).select("avatars").lean();
+        if (!company)
+            return next(new errors_1.AppError("Company not found", _http_1.HTTP.NOT_FOUND));
+        res.status(_http_1.HTTP.OK).json({
+            success: true,
+            results: (_b = (_a = company.avatars) === null || _a === void 0 ? void 0 : _a.length) !== null && _b !== void 0 ? _b : 0,
+            data: { avatars: (_c = company.avatars) !== null && _c !== void 0 ? _c : [] },
+        });
+    });
+    // Body fields: name (text), avatar (file)
+    const createAvatar = (0, _http_1.catchAsync)(async (req, res, next) => {
+        var _a;
+        const { name } = req.body;
+        const file = req.file;
+        if (!name || !name.trim())
+            return next(new errors_1.AppError("Please provide a name for the avatar", _http_1.HTTP.BAD_REQUEST));
+        if (!file)
+            return next(new errors_1.AppError("Please upload an image file", _http_1.HTTP.BAD_REQUEST));
+        const company = await CompanyModel.findById(companyIdOf(req));
+        if (!company)
+            return next(new errors_1.AppError("Company not found", _http_1.HTTP.NOT_FOUND));
+        const { publicUrl, s3Key } = await upload(file, `avatars/${company._id}`);
+        // Never the default on creation.
+        company.avatars = (_a = company.avatars) !== null && _a !== void 0 ? _a : [];
+        company.avatars.push({ name: name.trim(), url: publicUrl, s3Key, isDefault: false });
+        await company.save();
+        res.status(_http_1.HTTP.CREATED).json({
+            success: true,
+            message: "Avatar uploaded successfully",
+            data: { avatar: company.avatars[company.avatars.length - 1] },
+        });
+    });
+    // Loads the company and one of its avatars, or answers the error.
+    async function findAvatar(req, next) {
+        var _a;
+        const { avatarId } = req.params;
+        if (!mongoose_1.Types.ObjectId.isValid(avatarId)) {
+            next(new errors_1.AppError("Invalid avatar ID", _http_1.HTTP.BAD_REQUEST));
+            return null;
+        }
+        const company = await CompanyModel.findById(companyIdOf(req));
+        if (!company) {
+            next(new errors_1.AppError("Company not found", _http_1.HTTP.NOT_FOUND));
+            return null;
+        }
+        const avatar = ((_a = company.avatars) !== null && _a !== void 0 ? _a : []).id(avatarId);
+        if (!avatar) {
+            next(new errors_1.AppError("Avatar not found", _http_1.HTTP.NOT_FOUND));
+            return null;
+        }
+        return { company, avatar, avatarId };
+    }
+    // Body fields (all optional): name (text), avatar (file)
+    const updateAvatar = (0, _http_1.catchAsync)(async (req, res, next) => {
+        const found = await findAvatar(req, next);
+        if (!found)
+            return;
+        const { company, avatar } = found;
+        const { name } = req.body;
+        const file = req.file;
+        if (!name && !file)
+            return next(new errors_1.AppError("Please provide a name or a new image to update", _http_1.HTTP.BAD_REQUEST));
+        if (name && name.trim())
+            avatar.name = name.trim();
+        if (file) {
+            const oldS3Key = avatar.s3Key;
+            const { publicUrl, s3Key } = await upload(file, `avatars/${company._id}`);
+            avatar.url = publicUrl;
+            avatar.s3Key = s3Key;
+            // The old file goes only after the new one is stored.
+            await remove(oldS3Key);
+        }
+        await company.save();
+        res.status(_http_1.HTTP.OK).json({ success: true, message: "Avatar updated successfully", data: { avatar } });
+    });
+    const deleteAvatar = (0, _http_1.catchAsync)(async (req, res, next) => {
+        const found = await findAvatar(req, next);
+        if (!found)
+            return;
+        const { company, avatar } = found;
+        const s3KeyToDelete = avatar.s3Key;
+        avatar.deleteOne();
+        await company.save();
+        // A file that fails to delete is logged, never an error for the user.
+        remove(s3KeyToDelete).catch((err) => console.warn(`Failed to delete S3 object '${s3KeyToDelete}': ${err.message}`));
+        res.status(_http_1.HTTP.OK).json({ success: true, message: "Avatar deleted successfully" });
+    });
+    // Only one avatar can be the default.
+    const setDefaultAvatar = (0, _http_1.catchAsync)(async (req, res, next) => {
+        var _a;
+        const found = await findAvatar(req, next);
+        if (!found)
+            return;
+        const { company, avatar, avatarId } = found;
+        ((_a = company.avatars) !== null && _a !== void 0 ? _a : []).forEach((a) => {
+            a.isDefault = a._id.toString() === avatarId;
+        });
+        await company.save();
+        res.status(_http_1.HTTP.OK).json({ success: true, message: "Default avatar set successfully", data: { avatar } });
+    });
+    return { getAvatars, createAvatar, updateAvatar, deleteAvatar, setDefaultAvatar };
+}

package/dist/helpers/contactDecrypt.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Turns encrypted lead contact details (email/phone tokens) back into real values. Used by the Ops and Client
+ * backends; each one only says how it reaches chat-service's decryption:
+ *   const { decryptLeadContactInfo, decryptTokensInTexts } = createContactDecryptor({
+ *     requestDecrypt: async (field, value) => <the JSON reply of the decrypt route for { [field]: value }>,
+ *   });
+ * Best-effort: a value that can't be decrypted shows as "Encrypted" (never ciphertext) and never breaks the caller.
+ */
+export declare const unwrapPlainEmail: (value: any) => any;
+export declare const looksEncrypted: (value: any) => boolean;
+export type ContactField = "email" | "phone";
+export declare function createContactDecryptor({ requestDecrypt }: {
+    requestDecrypt: (field: ContactField, value: string) => Promise<any>;
+}): {
+    decryptLeadContactInfo: (raw: {
+        email?: string;
+        phone?: string;
+    } | null | undefined) => Promise<{
+        email?: string;
+        phone?: string;
+    }>;
+    decryptTokensInTexts: (texts: string[]) => Promise<string[]>;
+    looksEncrypted: (value: any) => boolean;
+    unwrapPlainEmail: (value: any) => any;
+};
+//# sourceMappingURL=contactDecrypt.d.ts.map

package/dist/helpers/contactDecrypt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contactDecrypt.d.ts","sourceRoot":"","sources":["../../src/helpers/contactDecrypt.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,eAAO,MAAM,gBAAgB,GAAI,OAAO,GAAG,KAAG,GAG7C,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,OAAO,GAAG,KAAG,OACmC,CAAC;AAehF,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,CAAC;AAE7C,wBAAgB,sBAAsB,CAAC,EAAE,cAAc,EAAE,EAAE;IAAE,cAAc,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;CAAE;kCActF;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS;gBACtE,MAAM;gBAAU,MAAM;;kCAmBL,MAAM,EAAE,KAAG,OAAO,CAAC,MAAM,EAAE,CAAC;4BApDnC,GAAG,KAAG,OAAO;8BALX,GAAG,KAAG,GAAG;EAmFhD"}

package/dist/helpers/contactDecrypt.js

@@ -0,0 +1,95 @@
+"use strict";
+/**
+ * Turns encrypted lead contact details (email/phone tokens) back into real values. Used by the Ops and Client
+ * backends; each one only says how it reaches chat-service's decryption:
+ *   const { decryptLeadContactInfo, decryptTokensInTexts } = createContactDecryptor({
+ *     requestDecrypt: async (field, value) => <the JSON reply of the decrypt route for { [field]: value }>,
+ *   });
+ * Best-effort: a value that can't be decrypted shows as "Encrypted" (never ciphertext) and never breaks the caller.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.looksEncrypted = exports.unwrapPlainEmail = void 0;
+exports.createContactDecryptor = createContactDecryptor;
+const ENCRYPTED_TOKEN_RE = /^\{.*\}$|__enc|^[a-f0-9]{16}$/i;
+// A lead can hold a plain address wrapped in braces ("{name@example.com}"), which is not a token.
+const PLAIN_BRACED_EMAIL = /^\{([^\s@{}]+@[^\s@{}]+\.[^\s@{}]+)\}$/;
+const unwrapPlainEmail = (value) => {
+    const m = typeof value === "string" && value.match(PLAIN_BRACED_EMAIL);
+    return m ? m[1] : value;
+};
+exports.unwrapPlainEmail = unwrapPlainEmail;
+const looksEncrypted = (value) => typeof value === "string" && ENCRYPTED_TOKEN_RE.test((0, exports.unwrapPlainEmail)(value));
+exports.looksEncrypted = looksEncrypted;
+// Leads saved before the Employee Dashboard fix lost their "__enc__" / "__encphone__" markers
+// ("{local@<16-hex>}" and a bare 16-hex phone). chat-service only accepts the marked form, so restore the
+// markers before asking it to decrypt.
+const restoreEmailMarkers = (value) => {
+    const m = typeof value === "string" && value.match(/^\{([^\s@{}]+)@([a-f0-9]{16})\}$/i);
+    return m ? `{${m[1]}@__enc__${m[2]}}` : value;
+};
+const restorePhoneMarkers = (value) => typeof value === "string" && /^[a-f0-9]{16}$/i.test(value) ? `__encphone__{${value}}` : value;
+const EMAIL_TOKENS = /\{[^\s@{}]+@__enc__[a-f0-9]{16}\}/gi;
+const PHONE_TOKENS = /__encphone__\{[a-f0-9]{16}\}/gi;
+function createContactDecryptor({ requestDecrypt }) {
+    // Decrypts one field. Email and phone are sent separately so a value that cannot be decrypted never stops the
+    // other one from being shown.
+    async function decryptField(field, value) {
+        var _a;
+        try {
+            const json = await requestDecrypt(field, value);
+            if ((json === null || json === void 0 ? void 0 : json.success) && ((_a = json.data) === null || _a === void 0 ? void 0 : _a[field]))
+                return json.data[field];
+        }
+        catch (err) {
+            console.error(`Failed to decrypt lead ${field}:`, err === null || err === void 0 ? void 0 : err.message);
+        }
+        return null;
+    }
+    /** The lead's email/phone as they should be shown: real values, plain values as they are, else "Encrypted". */
+    async function decryptLeadContactInfo(raw) {
+        const result = {
+            email: (0, exports.looksEncrypted)(raw === null || raw === void 0 ? void 0 : raw.email) ? "Encrypted" : (0, exports.unwrapPlainEmail)(raw === null || raw === void 0 ? void 0 : raw.email),
+            phone: (0, exports.looksEncrypted)(raw === null || raw === void 0 ? void 0 : raw.phone) ? "Encrypted" : raw === null || raw === void 0 ? void 0 : raw.phone,
+        };
+        const [email, phone] = await Promise.all([
+            (0, exports.looksEncrypted)(raw === null || raw === void 0 ? void 0 : raw.email) ? decryptField("email", restoreEmailMarkers(raw.email)) : null,
+            (0, exports.looksEncrypted)(raw === null || raw === void 0 ? void 0 : raw.phone) ? decryptField("phone", restorePhoneMarkers(raw.phone)) : null,
+        ]);
+        if (email)
+            result.email = email;
+        if (phone)
+            result.phone = phone;
+        return result;
+    }
+    /**
+     * Replaces the encrypted email/phone tokens inside each text with their real values (a transcript, for example).
+     * Each distinct token is looked up once; a token that cannot be decrypted is left as it is.
+     */
+    async function decryptTokensInTexts(texts) {
+        const joined = texts.join("\n");
+        const emails = [...new Set(joined.match(EMAIL_TOKENS) || [])];
+        const phones = [...new Set(joined.match(PHONE_TOKENS) || [])];
+        if (emails.length === 0 && phones.length === 0)
+            return texts;
+        const plain = new Map();
+        await Promise.all([
+            ...emails.map(async (token) => {
+                const value = await decryptField("email", token);
+                if (value)
+                    plain.set(token, value);
+            }),
+            ...phones.map(async (token) => {
+                const value = await decryptField("phone", token);
+                if (value)
+                    plain.set(token, value);
+            }),
+        ]);
+        return texts.map((text) => {
+            let out = text;
+            for (const [token, value] of plain)
+                out = out.split(token).join(value);
+            return out;
+        });
+    }
+    return { decryptLeadContactInfo, decryptTokensInTexts, looksEncrypted: exports.looksEncrypted, unwrapPlainEmail: exports.unwrapPlainEmail };
+}

package/dist/helpers/emailTemplates.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Email bodies more than one backend sends, kept here so they look the same everywhere.
+ *   leadForwardedEmail: Ops "Forward" and the Client dashboard "Forward" (was services/email/templates/lead-forwarded.js).
+ *   resetPasswordEmail: the password-reset code (Employee and Client; was templates/reset-password.js).
+ */
+export type LeadForwardedEmailInput = {
+    forwardedBy: string;
+    companyName: string;
+    fromOrbitxpro?: boolean;
+    rows: {
+        label: string;
+        value: unknown;
+    }[];
+    note?: string;
+    leadUrl?: string;
+};
+export declare const leadForwardedEmail: ({ forwardedBy, companyName, fromOrbitxpro, rows, note, leadUrl }: LeadForwardedEmailInput) => string;
+export declare const resetPasswordEmail: (code: string | number) => string;
+//# sourceMappingURL=emailTemplates.d.ts.map

package/dist/helpers/emailTemplates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emailTemplates.d.ts","sourceRoot":"","sources":["../../src/helpers/emailTemplates.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAYH,MAAM,MAAM,uBAAuB,GAAG;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,kEAAkE,uBAAuB,KAAG,MA4H9H,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,GAAG,MAAM,KAAG,MA2I1D,CAAC"}

package/dist/helpers/emailTemplates.js

@@ -0,0 +1,276 @@
+"use strict";
+/**
+ * Email bodies more than one backend sends, kept here so they look the same everywhere.
+ *   leadForwardedEmail: Ops "Forward" and the Client dashboard "Forward" (was services/email/templates/lead-forwarded.js).
+ *   resetPasswordEmail: the password-reset code (Employee and Client; was templates/reset-password.js).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetPasswordEmail = exports.leadForwardedEmail = void 0;
+// A lead forwarded by hand to any address someone types in (Ops "Forward" or the Client
+// Dashboard's "Forward"). Same visual system as ticket-update.js. Every value is escaped here,
+// since lead names, notes and contact details are free text that must never render as markup.
+const esc = (value) => value === null || value === undefined || value === ""
+    ? "-"
+    : String(value).replace(/[&<>"']/g, (ch) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[ch]);
+const FONT = "font-family:'Century Gothic','Trebuchet MS',Arial,sans-serif;";
+const leadForwardedEmail = ({ forwardedBy, companyName, fromOrbitxpro, rows, note, leadUrl }) => {
+    const who = `<strong>${esc(forwardedBy)}</strong>`;
+    const intro = fromOrbitxpro
+        ? `${who} from ORBITXPRO forwarded you a lead for <strong>${esc(companyName)}</strong>.`
+        : `${who} at <strong>${esc(companyName)}</strong> forwarded you this lead.`;
+    const rowHtml = rows
+        .map(({ label, value }) => `
+                                <tr>
+                                    <td style="padding:7px 0;font-size:13px;color:#888888;font-weight:700;width:130px;vertical-align:top;${FONT}">${esc(label)}</td>
+                                    <td style="padding:7px 0;font-size:14px;color:#1a1a1a;${FONT}">${esc(value)}</td>
+                                </tr>`)
+        .join("");
+    const noteHtml = note
+        ? `
+                            <table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin:0 0 24px 0;background-color:#fafafa;border:1px solid #e8e8e8;border-left:4px solid #FE5E17;border-radius:0 8px 8px 0;">
+                                <tr>
+                                    <td style="padding:14px 20px;">
+                                        <div style="font-size:13px;color:#888888;font-weight:700;margin-bottom:4px;${FONT}">Note</div>
+                                        <div style="font-size:14px;color:#1a1a1a;line-height:1.6;${FONT}">${esc(note).replace(/\n/g, "<br>")}</div>
+                                    </td>
+                                </tr>
+                            </table>`
+        : "";
+    const buttonHtml = leadUrl
+        ? `
+                            <table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin:0 0 8px 0;">
+                                <tr>
+                                    <td align="center">
+                                        <a href="${esc(leadUrl)}" style="display:inline-block;background-color:#FE5E17;color:#ffffff;text-decoration:none;font-weight:700;font-size:14px;padding:12px 28px;border-radius:6px;${FONT}">View Lead</a>
+                                    </td>
+                                </tr>
+                            </table>`
+        : "";
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Lead Forwarded - ORBITXPRO</title>
+    <style>
+        * { box-sizing: border-box; }
+        body, table, td, a { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; }
+        table, td { mso-table-lspace: 0pt; mso-table-rspace: 0pt; }
+        body { margin: 0; padding: 0; background-color: #f9f9f9; ${FONT} -webkit-font-smoothing: antialiased; }
+        @media only screen and (max-width: 620px) {
+            .wrapper-td { padding: 12px 12px 30px 12px !important; }
+            .logo-table, .main-card { width: 100% !important; }
+            .body-td { padding: 24px 20px !important; }
+            .card-h2 { font-size: 19px !important; }
+            .card-p { font-size: 14px !important; }
+        }
+    </style>
+</head>
+<body style="margin:0;padding:0;background-color:#f9f9f9;${FONT}">
+    <table width="100%" cellpadding="0" cellspacing="0" border="0">
+        <tr>
+            <td align="center" class="wrapper-td" style="background-color:#f9f9f9;padding:20px 16px 40px 16px;">
+
+                <table class="logo-table" width="600" cellpadding="0" cellspacing="0" border="0">
+                    <tr>
+                        <td align="center" style="padding:24px 0 20px 0;">
+                            <span style="font-size:28px;font-weight:300;letter-spacing:12px;color:#FE5E17;text-transform:uppercase;${FONT}">ORBITXPRO</span>
+                        </td>
+                    </tr>
+                </table>
+
+                <table class="main-card" width="600" cellpadding="0" cellspacing="0" border="0" style="background-color:#ffffff;border:1px solid #e0e0e0;border-radius:12px;overflow:hidden;">
+                    <tr>
+                        <td height="80" style="background-color:#FE5E17;background-image:radial-gradient(rgba(255,255,255,0.18) 1.5px, transparent 1.5px), linear-gradient(135deg, rgba(255,255,255,0.06) 25%, transparent 25%, transparent 50%, rgba(255,255,255,0.06) 50%, rgba(255,255,255,0.06) 75%, transparent 75%, transparent);background-size:30px 30px, 90px 90px;background-repeat:repeat, repeat;">&nbsp;</td>
+                    </tr>
+                    <tr>
+                        <td class="body-td" style="padding:32px 36px 28px 36px;">
+                            <h2 class="card-h2" style="color:#1a1a1a;font-size:22px;margin-top:0;margin-bottom:14px;font-weight:700;${FONT}">A Lead Was Forwarded to You</h2>
+                            <p class="card-p" style="color:#555555;line-height:1.7;font-size:15px;margin-top:0;${FONT}">${intro}</p>
+
+                            <table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin:24px 0;background-color:#fcfcfc;border:1px solid #e8e8e8;border-radius:8px;">
+                                <tr>
+                                    <td style="padding:12px 20px;border-bottom:1px solid #eeeeee;">
+                                        <span style="font-size:13px;font-weight:700;color:#888888;text-transform:uppercase;letter-spacing:1px;${FONT}">Lead Details</span>
+                                    </td>
+                                </tr>
+                                <tr>
+                                    <td style="padding:6px 20px 12px 20px;">
+                                        <table width="100%" cellpadding="0" cellspacing="0" border="0">${rowHtml}
+                                        </table>
+                                    </td>
+                                </tr>
+                            </table>
+${noteHtml}${buttonHtml}
+                            <table width="100%" cellpadding="0" cellspacing="0" border="0" style="margin:24px 0 0 0;">
+                                <tr><td style="border-top:1px solid #eeeeee;font-size:0;">&nbsp;</td></tr>
+                            </table>
+                        </td>
+                    </tr>
+                    <tr>
+                        <td style="padding:28px 30px 30px 30px;text-align:center;">
+                            <p style="margin:0 0 14px 0;font-size:13px;${FONT}">
+                                <a href="https://www.linkedin.com/company/orbitxpro" style="color:#999999;text-decoration:none;margin:0 8px;">LinkedIn</a>
+                                <a href="https://x.com/orbitxpro" style="color:#999999;text-decoration:none;margin:0 8px;">X</a>
+                                <a href="https://www.instagram.com/orbitxpro_" style="color:#999999;text-decoration:none;margin:0 8px;">Instagram</a>
+                                <a href="https://www.facebook.com/people/Orbitxpro/61588888121323/" style="color:#999999;text-decoration:none;margin:0 8px;">Facebook</a>
+                            </p>
+                            <a href="https://www.orbitxpro.com" style="color:#FE5E17;text-decoration:none;font-weight:700;font-size:14px;display:block;margin-bottom:6px;${FONT}">www.orbitxpro.com</a>
+                            <p style="font-size:12px;color:#999999;margin:0 0 20px 0;${FONT}">
+                                Questions? Email <a href="mailto:support@orbitxpro.com" style="color:#999999;font-weight:700;text-decoration:none;">support@orbitxpro.com</a>
+                            </p>
+                            <p style="font-size:11px;color:#999999;line-height:1.6;border-top:1px solid #eeeeee;padding-top:20px;margin:0;${FONT}">
+                                This lead was forwarded through ORBITXPRO. To respond, contact the person who forwarded it; replies to this email aren't monitored.<br>
+                                &copy; 2026 ORBITXPRO Inc. | All rights reserved.
+                            </p>
+                        </td>
+                    </tr>
+                </table>
+            </td>
+        </tr>
+    </table>
+</body>
+</html>`;
+};
+exports.leadForwardedEmail = leadForwardedEmail;
+const resetPasswordEmail = (code) => {
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Password Reset Code - ORBITXPRO</title>
+    <link href="https://fonts.googleapis.com/css2?family=Outfit:wght@300;400;600;700&display=swap" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
+    <style>
+        body { margin: 0; padding: 0; background-color: #f9f9f9; font-family: 'Outfit', sans-serif; -webkit-font-smoothing: antialiased; }
+        .wrapper { width: 100%; background-color: #f9f9f9; padding-bottom: 40px; }
+        .main-container { width: 100%; max-width: 600px; margin: 0 auto; background-color: #ffffff; }
+        
+        /* Logo Header - CONSTANT */
+        .logo-header { padding: 30px 0; text-align: center; background-color: #f9f9f9; }
+        .dune-logo { font-size: 28px; font-weight: 300; letter-spacing: 12px; color: #FE5E17; text-transform: uppercase; margin: 0; display: inline-block; }
+        
+        /* Banner Style - CONSTANT */
+        .banner {
+            background-color: #FE5E17;
+            background-image: radial-gradient(rgba(255, 255, 255, 0.15) 1.5px, transparent 1.5px), linear-gradient(135deg, rgba(255, 255, 255, 0.05) 25%, transparent 25%, transparent 50%, rgba(255, 255, 255, 0.05) 50%, rgba(255, 255, 255, 0.05) 75%, transparent 75%, transparent);
+            background-size: 40px 40px, 120px 120px;
+            height: 80px; border-top-left-radius: 12px; border-top-right-radius: 12px;
+        }
+
+        .content-card { border: 1px solid #e0e0e0; border-radius: 12px; overflow: hidden; background-color: #ffffff; }
+        .inner-padding { padding: 30px; text-align: left; }
+        h2 { color: #333333; font-size: 22px; margin-top: 0; }
+        p { color: #666666; line-height: 1.6; font-size: 15px; }
+
+        /* Reset Code Box */
+        .code-container {
+            text-align: center;
+            margin: 30px 0;
+            padding: 20px;
+            background-color: #fcfcfc;
+            border: 1px dashed #FE5E17;
+            border-radius: 8px;
+        }
+        .reset-code {
+            font-size: 32px;
+            font-weight: 700;
+            letter-spacing: 8px;
+            color: #333333;
+            display: block;
+        }
+        .expiry-text {
+            font-size: 12px;
+            color: #888888;
+            margin-top: 10px;
+            display: block;
+        }
+
+        /* Security Alert Box */
+        .security-note {
+            background-color: #fffafb;
+            border-left: 4px solid #c0392b;
+            padding: 15px;
+            margin: 25px 0;
+            font-size: 13px;
+            color: #666666;
+        }
+
+        /* Footer - CONSTANT with HOVERS */
+        .footer { padding: 30px; text-align: center; font-size: 12px; color: #999999; }
+        .social-icons { margin-bottom: 15px; }
+        .social-icons a { 
+            color: #999999; 
+            text-decoration: none; 
+            font-size: 18px; 
+            margin: 0 8px; 
+            transition: color 0.3s ease; 
+        }
+        .social-icons a:hover { color: #FE5E17 !important; }
+        .website-link { color: #FE5E17; text-decoration: none; font-weight: 600; font-size: 14px; display: block; margin-bottom: 5px; }
+        .support-container { font-size: 12px; margin-bottom: 20px; }
+        .support-link { 
+            color: #999999; 
+            text-decoration: none; 
+            font-weight: 600; 
+            transition: color 0.3s ease; 
+        }
+        .support-link:hover { color: #FE5E17 !important; text-decoration: underline; }
+        .compliance-text { line-height: 1.5; border-top: 1px solid #eeeeee; padding-top: 20px; }
+    </style>
+</head>
+<body>
+    <div class="wrapper">
+        <div class="logo-header">
+            <div class="dune-logo">ORBITXPRO</div>
+        </div>
+
+        <div class="main-container">
+            <div class="content-card">
+                <div class="banner"></div>
+
+                <div class="inner-padding">
+                    <h2>Password Reset Request</h2>
+                    <p>Hello,</p>
+                    <p>We received a request to reset the password for your ORBITXPRO account. Use the verification code below to proceed with the reset process:</p>
+                    
+                    <div class="code-container">
+                        <span class="reset-code">${code}</span>
+                        <span class="expiry-text">This code will expire in 10 minutes.</span>
+                    </div>
+
+                    <div class="security-note">
+                        <strong>Security Reminder:</strong> If you did not request a password reset, please ignore this email or contact support if you suspect unauthorized access to your account. Your password will not change until you use this code to create a new one.
+                    </div>
+
+                    <p>For security reasons, never share this code with anyone. ORBITXPRO employees will never ask you for your password or verification codes.</p>
+
+                    <hr style="border:0; border-top:1px solid #eeeeee; margin: 25px 0;">
+                </div>
+
+                <div class="footer">
+                    <div class="social-icons">
+                        <a href="https://www.linkedin.com/company/orbitxpro"><i class="fab fa-linkedin"></i></a>
+                        <a href="https://x.com/orbitxpro"><i class="fab fa-twitter"></i></a>
+                        <a href="https://www.instagram.com/orbitxpro_"><i class="fab fa-instagram"></i></a>
+                        <a href="https://www.facebook.com/people/Orbitxpro/61588888121323/"><i class="fab fa-facebook"></i></a>
+                    </div>
+                    <a href="https://www.orbitxpro.com" class="website-link">www.orbitxpro.com</a>
+                    <div class="support-container">
+                        Didn't request this?
+                        <a href="mailto:support@orbitxpro.com" class="support-link">Contact Customer Support</a>
+                    </div>
+                    <div class="compliance-text">
+                        © 2026 ORBITXPRO Inc. | Security Notification <br>
+                        <strong>Please do not reply directly to this email.</strong>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+</body>
+</html>
+`;
+};
+exports.resetPasswordEmail = resetPasswordEmail;