trovesuite 1.0.14__py3-none-any.whl → 1.0.17__py3-none-any.whl

trovesuite/__init__.py

@@ -3,19 +3,21 @@ TroveSuite Package
 
 A comprehensive authentication, authorization, notification, and storage service for ERP systems.
 Provides JWT token validation, user authorization, permission checking, notification capabilities,
-and Azure Storage blob management.
+Azure Storage blob management, and utility functions for multi-tenant applications.
 """
 
 from .auth import AuthService
 from .notification import NotificationService
 from .storage import StorageService
+from .utils import Helper
 
-__version__ = "1.0.7"
+__version__ = "1.0.16"
 __author__ = "Bright Debrah Owusu"
 __email__ = "owusu.debrah@deladetech.com"
 
 __all__ = [
     "AuthService",
     "NotificationService",
-    "StorageService"
+    "StorageService",
+    "Helper",
 ]

trovesuite/auth/auth_service.py

@@ -229,10 +229,10 @@ class AuthService:
             logger.info(f"Fetching system-level roles for user: {user_id}")
 
             system_roles = DatabaseManager.execute_query(
-                """
+                f"""
                     SELECT DISTINCT sug.group_id, sug.user_id, sar.role_id, sar.resource_type
-                    FROM main.system_user_groups sug
-                    INNER JOIN main.system_assign_roles sar ON sug.group_id = sar.group_id
+                    FROM {db_settings.MAIN_SYSTEM_USER_GROUPS_TABLE} sug
+                    INNER JOIN {db_settings.MAIN_SYSTEM_ASSIGN_ROLES_TABLE} sar ON sug.group_id = sar.group_id
                     WHERE sug.user_id = %s
                     AND sar.is_active = true
                     AND sar.delete_status = 'NOT_DELETED'
@@ -247,9 +247,9 @@ class AuthService:
 
             # ✅ NEW: Also check for direct system role assignments (user_id in system_assign_roles)
             direct_system_roles = DatabaseManager.execute_query(
-                """
+                f"""
                     SELECT DISTINCT NULL as group_id, sar.user_id, sar.role_id, sar.resource_type
-                    FROM main.system_assign_roles sar
+                    FROM {db_settings.MAIN_SYSTEM_ASSIGN_ROLES_TABLE} sar
                     WHERE sar.user_id = %s
                     AND sar.is_active = true
                     AND sar.delete_status = 'NOT_DELETED'

trovesuite/configs/settings.py

@@ -9,10 +9,10 @@ class Settings:
     DB_NAME: str = os.getenv("DB_NAME")
     DB_PORT: str = os.getenv("DB_PORT")
     DB_PASSWORD: str = os.getenv("DB_PASSWORD")
-
+    
     # Application settings
-    APP_NAME: str = os.getenv("APP_NAME", "Python Template API")
     DEBUG: bool = os.getenv("DEBUG", "True").lower() in ("true",1)
+    APP_NAME: str = os.getenv("APP_NAME", "Python Template API")
     APP_VERSION: str = os.getenv("APP_VERSION", "1.0.0")
     
     # Logging settings
@@ -24,26 +24,67 @@ class Settings:
     LOG_DIR: str = os.getenv("LOG_DIR", "logs")
         
    # Security settings
-    ENVIRONMENT: str = os.getenv("ENVIRONMENT")
     ALGORITHM: str = os.getenv("ALGORITHM")
     SECRET_KEY: str = os.getenv("SECRET_KEY")
+    ENVIRONMENT: str = os.getenv("ENVIRONMENT")
     ACCESS_TOKEN_EXPIRE_MINUTES: int = int(os.getenv("ACCESS_TOKEN_EXPIRE_MINUTES", "120"))
     
     # =============================================================================
     # SHARED TABLES (main schema)
     # =============================================================================
-    MAIN_TENANTS_TABLE = os.getenv("MAIN_TENANTS_TABLE")
-    MAIN_ROLE_PERMISSIONS_TABLE = os.getenv("MAIN_ROLE_PERMISSIONS_TABLE")
-    MAIN_USER_SUBSCRIPTIONS_TABLE = os.getenv("MAIN_USER_SUBSCRIPTIONS_TABLE")
-    MAIN_USER_SUBSCRIPTION_HISTORY_TABLE = os.getenv("MAIN_USER_SUBSCRIPTION_HISTORY_TABLE")
-    MAIN_SUBSCRIPTIONS_TABLE = os.getenv("MAIN_SUBSCRIPTIONS_TABLE")
+    MAIN_TENANTS_TABLE = os.getenv("MAIN_TENANTS_TABLE", "main.tenants")
+    MAIN_TENANT_RESOURCE_ID_TABLE = os.getenv("MAIN_TENANT_RESOURCE_ID_TABLE", "main.tenant_resource_ids")
+    MAIN_SUBSCRIPTIONS_TABLE = os.getenv("MAIN_SUBSCRIPTIONS_TABLE", "main.subscriptions")
+    MAIN_APPS_TABLE = os.getenv("MAIN_APPS_TABLE", "main.apps")
+    MAIN_USERS_TABLE = os.getenv("MAIN_USERS_TABLE", "main.users")
+    MAIN_RESOURCE_TYPES_TABLE = os.getenv("MAIN_RESOURCE_TYPES_TABLE", "main.resource_types")
+    MAIN_RESOURCE_ID_TABLE = os.getenv("MAIN_RESOURCE_ID_TABLE", "main.resource_ids")
+    MAIN_RESOURCES_TABLE = os.getenv("MAIN_RESOURCES_TABLE", "main.resources")
+    MAIN_PERMISSIONS_TABLE = os.getenv("MAIN_PERMISSIONS_TABLE", "main.permissions")
+    MAIN_ROLES_TABLE = os.getenv("MAIN_ROLES_TABLE", "main.roles")
+    MAIN_ROLE_PERMISSIONS_TABLE = os.getenv("MAIN_ROLE_PERMISSIONS_TABLE", "main.role_permissions")
+    MAIN_USER_SUBSCRIPTIONS_TABLE = os.getenv("MAIN_USER_SUBSCRIPTIONS_TABLE", "main.user_subscriptions")
+    MAIN_USER_SUBSCRIPTION_HISTORY_TABLE = os.getenv("MAIN_USER_SUBSCRIPTION_HISTORY_TABLE", "main.user_subscription_history")
+    MAIN_OTP = os.getenv("MAIN_OTP", "main.otps")
+    MAIN_PASSWORD_POLICY = os.getenv("MAIN_PASSWORD_POLICY", "main.password_policies")
+    MAIN_MULTI_FACTOR_SETTINGS = os.getenv("MAIN_MULTI_FACTOR_SETTINGS", "main.multi_factor_settings")
+    MAIN_USER_LOGIN_TRACKING = os.getenv("MAIN_USER_LOGIN_TRACKING", "main.user_login_tracking")
+    MAIN_ENTERPRISE_SUBSCRIPTIONS_TABLE = os.getenv("MAIN_ENTERPRISE_SUBSCRIPTIONS_TABLE", "main.enterprise_subscriptions")
+    MAIN_CHANGE_PASSWORD_POLICY_TABLE = os.getenv("MAIN_CHANGE_PASSWORD_POLICY_TABLE", "main.change_password_policy")
 
+    # System-level tables
+    MAIN_SYSTEM_GROUPS_TABLE = os.getenv("MAIN_SYSTEM_GROUPS_TABLE", "main.system_groups")
+    MAIN_SYSTEM_USER_GROUPS_TABLE = os.getenv("MAIN_SYSTEM_USER_GROUPS_TABLE", "main.system_user_groups")
+    MAIN_SYSTEM_ASSIGN_ROLES_TABLE = os.getenv("MAIN_SYSTEM_ASSIGN_ROLES_TABLE", "main.system_assign_roles")
+    
     # =============================================================================
     # TENANT-SPECIFIC TABLES (tenant schemas)
     # =============================================================================
+    TENANT_SUBSCRIPTIONS_TABLE = os.getenv("TENANT_SUBSCRIPTIONS_TABLE")
+    TENANT_GROUPS_TABLE = os.getenv("TENANT_GROUPS_TABLE")
     TENANT_LOGIN_SETTINGS_TABLE = os.getenv("TENANT_LOGIN_SETTINGS_TABLE")
+    TENANT_RESOURCES_TABLE = os.getenv("TENANT_RESOURCES_TABLE")
     TENANT_ASSIGN_ROLES_TABLE = os.getenv("TENANT_ASSIGN_ROLES_TABLE")
+    TENANT_RESOURCE_ID_TABLE = os.getenv("TENANT_RESOURCE_ID_TABLE")
+    TENANT_SUBSCRIPTION_HISTORY_TABLE = os.getenv("TENANT_SUBSCRIPTION_HISTORY_TABLE")
+    TENANT_RESOURCE_DELETION_CHAT_HISTORY_TABLE = os.getenv("TENANT_RESOURCE_DELETION_CHAT_HISTORY_TABLE")
     TENANT_USER_GROUPS_TABLE = os.getenv("TENANT_USER_GROUPS_TABLE")
+    TENANT_ACTIVITY_LOGS_TABLE = os.getenv("TENANT_ACTIVITY_LOGS_TABLE")
+    TENANT_ORGANIZATIONS_TABLE = os.getenv("TENANT_ORGANIZATIONS_TABLE", "organizations")
+    TENANT_BUSINESSES_TABLE = os.getenv("TENANT_BUSINESSES_TABLE", "businesses")
+    TENANT_BUSINESS_APPS_TABLE = os.getenv("TENANT_BUSINESS_APPS_TABLE", "business_apps")
+    TENANT_LOCATIONS_TABLE = os.getenv("TENANT_LOCATIONS_TABLE", "locations")
+    TENANT_ASSIGN_LOCATIONS_TABLE = os.getenv("TENANT_ASSIGN_LOCATIONS_TABLE", "assign_locations")
+    TENANT_UNIT_OF_MEASURE_TABLE = os.getenv("TENANT_UNIT_OF_MEASURE_TABLE")
+    TENANT_CURRENCY=os.getenv("TENANT_CURRENCY")
+
+    # Mail Configurations
+    MAIL_SENDER_EMAIL=os.getenv("MAIL_SENDER_EMAIL")
+    MAIL_SENDER_PWD=os.getenv("MAIL_SENDER_PWD")
+
+    # Application Configurations
+    APP_URL=os.getenv("APP_URL", "https://trovesuite.com")
+    USER_ASSIGNED_MANAGED_IDENTITY=os.getenv("USER_ASSIGNED_MANAGED_IDENTITY")
 
     @property
     def database_url(self) -> str:

trovesuite/utils/__init__.py

@@ -5,7 +5,9 @@ Utility functions and helpers for TroveSuite services.
 """
 
 from .helper import Helper
+from . import templates
 
 __all__ = [
-    "Helper"
+    "Helper",
+    "templates",
 ]

trovesuite/utils/helper.py

@@ -1,13 +1,156 @@
-import logging
-from typing import List
+from datetime import datetime, timedelta, timezone, date, time
+from typing import Dict, List, Optional, Callable
+from ..configs.database import DatabaseManager
+from ..configs.settings import db_settings
+from ..configs.logging import get_logger
 from typing import TypeVar
-
-logger = logging.getLogger(__name__)
+import hashlib
+import uuid
+import jwt
+import json
+from decimal import Decimal
+from .templates import (
+    RESOURCE_STATUS_CHANGE_HTML_TEMPLATE,
+    RESOURCE_STATUS_CHANGE_TEXT_TEMPLATE,
+)
+import random
+from ..notification import NotificationService
+from ..notification import NotificationEmailServiceWriteDto
 
 T = TypeVar("T")
 
+logger = get_logger("helper")
+ACCESS_TOKEN_EXPIRE_MINUTES = 60
+
 class Helper:
 
+    @staticmethod
+    def generate_otp(length: int = 6) -> str:
+        """Generate a random numeric OTP of a given length."""
+        return ''.join([str(random.randint(0, 9)) for _ in range(length)])
+
+    @staticmethod
+    def current_date_time():
+
+        if 11 <= int(datetime.now().day) <= 13:
+            suffix = "th"
+
+        last_digit = int(datetime.now().day) % 10
+
+        if last_digit == 1:
+            suffix = "st"
+
+        elif last_digit == 2:
+            suffix = "nd"
+
+        elif last_digit == 3:
+            suffix = "rd"
+
+        else:
+            suffix = "th"
+
+        now = datetime.now()
+        day = now.day
+
+        # In helper.py
+        cdatetime = datetime.now().replace(microsecond=0, second=0)
+        cdate = now.strftime(f"%A {day}{suffix} %B, %Y")
+        ctime = now.strftime("%I:%M %p")
+
+        return {"cdate": cdate, "ctime": ctime, "cdatetime": cdatetime}
+
+    @staticmethod
+    def generate_unique_identifier(prefix: str):
+
+        max_length = 63
+        reserved = len(prefix) + len("_")
+
+        _uuid = f"{uuid.uuid4()}-{uuid.uuid1()}"
+        hash_digest = hashlib.sha256(_uuid.encode()).hexdigest()
+
+        return f"{prefix}_{hash_digest[:max_length - reserved]}"
+
+    @staticmethod
+    def generate_unique_resource_identifier(
+        prefix: str,
+        tenant_id: Optional[str],
+        extra_check_functions: Optional[List[Callable[[str], Optional[int]]]] = None,
+    ) -> str:
+        """Generate a unique identifier that does not already exist in the resource_ids table.
+
+        Args:
+            prefix: Prefix for the identifier (e.g., 'grp', 'uid').
+            tenant_id: Tenant schema name. If None, the main resource_ids table is checked.
+            extra_check_functions: Optional list of callables that receive the candidate
+                identifier and return a truthy value if the identifier already exists in
+                another table that should be considered.
+
+        Returns:
+            A unique identifier that does not exist in the resource_ids table (and passes
+            any additional uniqueness checks).
+        """
+        extra_checks = extra_check_functions or []
+
+        while True:
+            candidate = Helper.generate_unique_identifier(prefix=prefix)
+
+            try:
+                if tenant_id:
+                    # For tenant-specific resource IDs, check tenant schema
+                    # Note: TENANT_RESOURCE_ID_TABLE needs to be defined in settings
+                    tenant_resource_table = getattr(db_settings, 'TENANT_RESOURCE_ID_TABLE', None)
+                    if tenant_resource_table:
+                        resource_exists = DatabaseManager.execute_scalar(
+                            f"""SELECT COUNT(1) FROM "{tenant_id}".{tenant_resource_table}
+                            WHERE id = %s""",
+                            (candidate,),
+                        )
+                    else:
+                        # Fallback: assume no conflict if table not configured
+                        resource_exists = 0
+                else:
+                    # For main schema resource IDs
+                    main_resource_table = getattr(db_settings, 'MAIN_RESOURCE_ID_TABLE', None)
+                    if main_resource_table:
+                        resource_exists = DatabaseManager.execute_scalar(
+                            f"""SELECT COUNT(1) FROM {main_resource_table}
+                            WHERE id = %s""",
+                            (candidate,),
+                        )
+                    else:
+                        # Fallback: assume no conflict if table not configured
+                        resource_exists = 0
+            except Exception as e:
+                logger.error(
+                    f"Failed to validate uniqueness for resource identifier {candidate}: {str(e)}",
+                    exc_info=True,
+                )
+                raise
+
+            if resource_exists and int(resource_exists or 0) > 0:
+                continue
+
+            duplicate_found = False
+            for check in extra_checks:
+                try:
+                    result = check(candidate)
+                except Exception as e:
+                    logger.error(
+                        f"Error while executing additional uniqueness check for {candidate}: {str(e)}",
+                        exc_info=True,
+                    )
+                    duplicate_found = True
+                    break
+
+                if result and int(result or 0) > 0:
+                    duplicate_found = True
+                    break
+
+            if duplicate_found:
+                continue
+
+            return candidate
+
     @staticmethod
     def map_to_dto(data: list, dto_class: T) -> List[T]:
         """
@@ -20,7 +163,7 @@ class Helper:
         """
         if not data:
             return []
-        
+
         try:
             result = []
             for row in data:
@@ -34,3 +177,477 @@ class Helper:
         except Exception as e:
             logger.error(f"Error mapping data to DTO: {str(e)}")
             raise
+
+    @staticmethod
+    def generate_jwt_token(data: dict, expires_delta: timedelta | None = None):
+
+        to_encode = data.copy()
+        if expires_delta:
+            expire = datetime.now(timezone.utc) + expires_delta
+        else:
+            expire = datetime.now(timezone.utc) + timedelta(minutes=15)
+        to_encode.update({"exp": expire})
+        encoded_jwt = jwt.encode(to_encode, db_settings.SECRET_KEY, algorithm=db_settings.ALGORITHM)
+        return encoded_jwt
+
+    @staticmethod
+    def log_activity(
+        tenant_id: str,
+        action: str,
+        resource_type: str,
+        old_data: dict | None = None,
+        new_data: dict | None = None,
+        description: str | None = None,
+        user_id: Optional[str] = None,
+    ):
+        """
+        Log an activity to the activity_logs table
+        Args:
+            tenant_id: The tenant ID
+            action: The action performed (e.g., 'create', 'update', 'delete')
+            resource_type: The type of resource (e.g., 'rt-user', 'rt-group')
+            old_data: The old data before the change (optional)
+            new_data: The new data after the change (optional)
+            description: Additional description (optional)
+            user_id: The ID of the user performing the action (optional)
+        """
+
+        def serialize_for_json(obj):
+            """
+            Convert objects to JSON-serializable format
+            """
+            if isinstance(obj, datetime):
+                return obj.isoformat()
+            elif isinstance(obj, date):
+                return obj.isoformat()
+            elif isinstance(obj, time):
+                return obj.isoformat()
+            elif isinstance(obj, Decimal):
+                return float(obj)
+            elif hasattr(obj, '__dict__'):
+                # Handle custom objects by converting to dict
+                return {k: serialize_for_json(v) for k, v in obj.__dict__.items()}
+            elif isinstance(obj, dict):
+                return {k: serialize_for_json(v) for k, v in obj.items()}
+            elif isinstance(obj, (list, tuple)):
+                return [serialize_for_json(item) for item in obj]
+            else:
+                return obj
+
+        try:
+            # Check if table name is set
+            tenant_activity_logs_table = getattr(db_settings, 'TENANT_ACTIVITY_LOGS_TABLE', None)
+            if not tenant_activity_logs_table:
+                logger.error("TENANT_ACTIVITY_LOGS_TABLE is not configured in settings")
+                return
+
+            log_id = Helper.generate_unique_identifier(prefix="alog")
+            time_info = Helper.current_date_time()
+            cdate = time_info["cdate"]
+            ctime = time_info["ctime"]
+            cdatetime = time_info["cdatetime"]
+
+            # Serialize data to handle datetime and other non-JSON serializable objects
+            serialized_old_data = serialize_for_json(old_data) if old_data else None
+            serialized_new_data = serialize_for_json(new_data) if new_data else None
+
+            # Convert to JSONB-compatible format
+            old_json = json.dumps(serialized_old_data) if serialized_old_data else None
+            new_json = json.dumps(serialized_new_data) if serialized_new_data else None
+
+            # Fetch user information if user_id is provided
+            performed_by_email = None
+            performed_by_contact = None
+            performed_by_fullname = None
+
+            if user_id:
+                try:
+                    logger.debug(f"Fetching user information for user_id={user_id}")
+                    main_users_table = getattr(db_settings, 'MAIN_USERS_TABLE', 'main.users')
+                    user_data = DatabaseManager.execute_query(
+                        f"""SELECT email, contact, fullname
+                        FROM {main_users_table}
+                        WHERE id = %s""",
+                        (user_id,)
+                    )
+                    logger.debug(f"User data query returned: {user_data}")
+
+                    if user_data and len(user_data) > 0:
+                        # RealDictRow result - all cursors now use RealDictCursor
+                        user_record = user_data[0]
+                        performed_by_email = user_record.get("email")
+                        performed_by_contact = user_record.get("contact")
+                        performed_by_fullname = user_record.get("fullname")
+
+                        logger.debug(f"Fetched user info - email: {performed_by_email}, contact: {performed_by_contact}, fullname: {performed_by_fullname}")
+                    else:
+                        logger.warning(f"No user found with user_id={user_id}")
+                except Exception as e:
+                    logger.warning(f"Failed to fetch user information for user_id={user_id}: {str(e)}", exc_info=True)
+
+            logger.info(f"Attempting to log activity: tenant_id={tenant_id}, action={action}, resource_type={resource_type}")
+            logger.debug(f"Activity log values - performed_by_email: {performed_by_email}, performed_by_contact: {performed_by_contact}, performed_by_fullname: {performed_by_fullname}")
+
+            result = DatabaseManager.execute_update(
+                f"""INSERT INTO "{tenant_id}".{tenant_activity_logs_table}
+                    (id, action, resource_type, old_data, new_data, description, performed_by_email, performed_by_contact, performed_by_fullname, cdate, ctime, cdatetime)
+                    VALUES (%s, %s, NULLIF(%s, '')::text, %s::jsonb, %s::jsonb, %s, %s, %s, %s, %s, %s, %s)""",
+                (log_id, action, resource_type, old_json, new_json, description, performed_by_email, performed_by_contact, performed_by_fullname, cdate, ctime, cdatetime),
+            )
+
+            logger.info(f"Activity logged successfully. Rows affected: {result}")
+
+            # Verify the inserted data
+            if result > 0:
+                verify_data = DatabaseManager.execute_query(
+                    f"""SELECT performed_by_email, performed_by_contact, performed_by_fullname
+                    FROM "{tenant_id}".{tenant_activity_logs_table}
+                    WHERE id = %s""",
+                    (log_id,)
+                )
+                if verify_data:
+                    logger.debug(f"Verification - Inserted activity log data: {verify_data[0]}")
+                else:
+                    logger.warning(f"Could not verify inserted activity log with id={log_id}")
+
+        except Exception as e:
+            # Log the error but don't fail the main operation
+            logger.error(f"Failed to log activity: {str(e)}", exc_info=True)
+
+    @staticmethod
+    def send_notification(
+        email: str,
+        subject: str,
+        text_template: str,
+        html_template: str,
+        variables: Optional[Dict[str, str]] = None,
+    ):
+        """Send a dynamic notification email."""
+        current_time = Helper.current_date_time()
+        cdate = current_time["cdate"]
+        ctime = current_time["ctime"]
+
+        # Add defaults if not provided
+        if variables is None:
+            variables = {}
+
+        # Include date/time automatically
+        variables.update({"cdate": cdate, "ctime": ctime})
+
+        def _escape(value):
+            if isinstance(value, str):
+                return value.replace("{", "{{").replace("}", "}}")
+            return value
+
+        safe_variables = {key: _escape(value) for key, value in variables.items()}
+
+        # Format templates dynamically using placeholders
+        text_message = text_template.format(**safe_variables)
+        html_message = html_template.format(**safe_variables)
+
+        # Build email data
+        mail_sender_email = getattr(db_settings, 'MAIL_SENDER_EMAIL', None)
+        mail_sender_pwd = getattr(db_settings, 'MAIL_SENDER_PWD', None)
+
+        if not mail_sender_email or not mail_sender_pwd:
+            logger.error("MAIL_SENDER_EMAIL or MAIL_SENDER_PWD not configured in settings")
+            return
+
+        notification_data = NotificationEmailServiceWriteDto(
+            sender_email=mail_sender_email,
+            receiver_email=email,
+            password=mail_sender_pwd,
+            text_message=text_message,
+            html_message=html_message,
+            subject=subject,
+        )
+
+        # Send email
+        NotificationService.send_email(data=notification_data)
+
+    @staticmethod
+    def format_login_type_text(
+        login_type: str,
+        specific_days: Optional[List[str]] = None,
+        custom_start: Optional[str] = None,
+        custom_end: Optional[str] = None
+    ) -> str:
+        """
+        Format login type information into human-readable text.
+
+        Args:
+            login_type: The type of login access (always_login, specific_days, custom)
+            specific_days: List of days when user can login (for specific_days type)
+            custom_start: Start datetime for custom login period
+            custom_end: End datetime for custom login period
+
+        Returns:
+            Formatted login type description
+        """
+        if login_type == "always_login":
+            return "Anytime - You can login at any time"
+        elif login_type == "specific_days":
+            if specific_days:
+                days_str = ", ".join(specific_days)
+                return f"Specific Days - You can login on: {days_str}"
+            return "Specific Days"
+        elif login_type == "custom":
+            if custom_start and custom_end:
+                return f"Custom Period - From {custom_start} to {custom_end}"
+            elif custom_start:
+                return f"Custom Period - Starting from {custom_start}"
+            return "Custom Period"
+        else:
+            return "Login access granted"
+
+    @staticmethod
+    def get_users_with_admin_roles(tenant_id: str) -> List[Dict[str, str]]:
+        """
+        Get all users with role-owner or role-admin roles in a tenant.
+        Checks both direct role assignments and group-based role assignments.
+
+        Args:
+            tenant_id: The tenant ID to search within
+
+        Returns:
+            List of dictionaries containing user_id, email, and name
+        """
+        try:
+            # Get table names from settings with fallbacks
+            main_users_table = getattr(db_settings, 'MAIN_USERS_TABLE', 'main.users')
+            main_roles_table = getattr(db_settings, 'MAIN_ROLES_TABLE', 'main.roles')
+            tenant_assign_roles_table = getattr(db_settings, 'TENANT_ASSIGN_ROLES_TABLE', 'assign_roles')
+            tenant_user_groups_table = getattr(db_settings, 'TENANT_USER_GROUPS_TABLE', 'user_groups')
+
+            # Query to get users with admin roles - both direct and through groups
+            query = f"""
+                SELECT DISTINCT u.id as user_id, u.email, u.fullname
+                FROM {main_users_table} u
+                WHERE u.delete_status = 'NOT_DELETED'
+                AND u.is_active = true
+                AND u.can_login = true
+                AND (
+                    -- Direct role assignment
+                    u.id IN (
+                        SELECT ar.user_id
+                        FROM "{tenant_id}".{tenant_assign_roles_table} ar
+                        INNER JOIN {main_roles_table} r ON ar.role_id = r.id
+                        WHERE ar.delete_status = 'NOT_DELETED'
+                        AND ar.is_active = true
+                        AND r.delete_status = 'NOT_DELETED'
+                        AND r.is_active = true
+                        AND r.role_name IN ('role-owner', 'role-admin')
+                        AND ar.user_id IS NOT NULL
+                    )
+                    OR
+                    -- Group-based role assignment
+                    u.id IN (
+                        SELECT ug.user_id
+                        FROM "{tenant_id}".{tenant_user_groups_table} ug
+                        INNER JOIN "{tenant_id}".{tenant_assign_roles_table} ar ON ug.group_id = ar.group_id
+                        INNER JOIN {main_roles_table} r ON ar.role_id = r.id
+                        WHERE ug.delete_status = 'NOT_DELETED'
+                        AND ug.is_active = true
+                        AND ar.delete_status = 'NOT_DELETED'
+                        AND ar.is_active = true
+                        AND r.delete_status = 'NOT_DELETED'
+                        AND r.is_active = true
+                        AND r.role_name IN ('role-owner', 'role-admin')
+                        AND ar.group_id IS NOT NULL
+                    )
+                )
+            """
+
+            results = DatabaseManager.execute_query(query)
+
+            admin_users = []
+            if results:
+                for row in results:
+                    row_dict = dict(row)
+                    admin_users.append(
+                        {
+                            "user_id": row_dict.get("user_id"),
+                            "email": row_dict.get("email"),
+                            "name": (row_dict.get("fullname") or "").strip() or "Admin",
+                        }
+                    )
+
+            logger.info(
+                f"Found {len(admin_users)} admin users for tenant {tenant_id}",
+                extra={"extra_fields": {"tenant_id": tenant_id, "admin_count": len(admin_users)}}
+            )
+
+            return admin_users
+
+        except Exception as e:
+            logger.error(
+                f"Failed to get admin users for tenant {tenant_id}: {str(e)}",
+                extra={"extra_fields": {"tenant_id": tenant_id, "error": str(e)}},
+                exc_info=True
+            )
+            return []
+
+    @staticmethod
+    def notify_admins_of_delete_status_change(
+        tenant_id: str,
+        resource_type: str,
+        resource_name: str,
+        status: str,
+        actor_user_id: Optional[str] = None,
+        message: Optional[str] = None,
+    ) -> None:
+        """
+        Notify all owner/admin users when a resource delete_status changes.
+
+        Args:
+            tenant_id: Tenant identifier
+            resource_type: Human-readable resource type (e.g., "User", "Group")
+            resource_name: Human-readable resource name for context
+            status: New delete_status value ('PENDING', 'DELETED', 'NOT_DELETED')
+            actor_user_id: User ID who performed the action
+            message: Optional additional message supplied by the actor
+        """
+        status_key = (status or "").upper()
+        status_config = {
+            "PENDING": {
+                "title": "Deletion Pending Approval",
+                "subject": "Pending deletion request for {resource_name}",
+                "description": (
+                    "A deletion request has been submitted for the {resource_type} "
+                    "\"{resource_name}\" and is awaiting approval."
+                ),
+                "display": "Pending Deletion",
+                "color": "#ffc107",
+                "icon": "⏳",
+            },
+            "DELETED": {
+                "title": "Resource Deleted",
+                "subject": "Resource deleted: {resource_name}",
+                "description": (
+                    "The {resource_type} \"{resource_name}\" has been deleted."
+                ),
+                "display": "Deleted",
+                "color": "#dc3545",
+                "icon": "🗑️",
+            },
+            "NOT_DELETED": {
+                "title": "Resource Restored",
+                "subject": "Resource restored: {resource_name}",
+                "description": (
+                    "The {resource_type} \"{resource_name}\" has been restored."
+                ),
+                "display": "Restored",
+                "color": "#28a745",
+                "icon": "♻️",
+            },
+        }
+
+        config = status_config.get(status_key, status_config["DELETED"])
+
+        try:
+            admin_users = Helper.get_users_with_admin_roles(tenant_id)
+            if not admin_users:
+                logger.info(
+                    "No admin users found to notify for status change",
+                    extra={
+                        "extra_fields": {
+                            "tenant_id": tenant_id,
+                            "resource_type": resource_type,
+                            "resource_name": resource_name,
+                            "status": status_key,
+                        }
+                    },
+                )
+                return
+
+            actor_name = "System"
+            actor_email = "no-reply@trovesuite.com"
+
+            if actor_user_id:
+                main_users_table = getattr(db_settings, 'MAIN_USERS_TABLE', 'main.users')
+                actor_details = DatabaseManager.execute_query(
+                    f"""SELECT fullname, email
+                        FROM {main_users_table}
+                        WHERE id = %s""",
+                    (actor_user_id,),
+                )
+
+                if actor_details:
+                    actor_data = dict(actor_details[0])
+                    actor_name_candidate = (actor_data.get("fullname") or "").strip()
+                    actor_name = actor_name_candidate or actor_data.get("email") or actor_name
+                    actor_email = actor_data.get("email") or actor_email
+
+            resource_name_display = resource_name or "Unknown resource"
+            resource_type_display = resource_type or "Resource"
+
+            message_text = f"Message: {message}\n" if message else ""
+            message_row_style = "" if message else "display: none;"
+            message_value = message or "No additional message provided."
+
+            subject = config["subject"].format(
+                resource_name=resource_name_display,
+                resource_type=resource_type_display,
+            )
+
+            status_description = config["description"].format(
+                resource_name=resource_name_display,
+                resource_type=resource_type_display,
+            )
+
+            status_title = config["title"]
+
+            app_url = getattr(db_settings, 'APP_URL', 'https://app.trovesuite.com')
+
+            for admin in admin_users:
+                admin_name = admin.get("name") or "Admin"
+                Helper.send_notification(
+                    email=admin["email"],
+                    subject=subject,
+                    text_template=RESOURCE_STATUS_CHANGE_TEXT_TEMPLATE,
+                    html_template=RESOURCE_STATUS_CHANGE_HTML_TEMPLATE,
+                    variables={
+                        "admin_name": admin_name,
+                        "resource_type": resource_type_display,
+                        "resource_name": resource_name_display,
+                        "status_display": config["display"],
+                        "status_description": status_description,
+                        "status_title": status_title,
+                        "status_color": config["color"],
+                        "status_icon": config["icon"],
+                        "actor_name": actor_name,
+                        "actor_email": actor_email,
+                        "message": message_value,
+                        "message_text": message_text,
+                        "message_row_style": message_row_style,
+                        "app_url": app_url,
+                    },
+                )
+
+            logger.info(
+                "Delete status change notifications sent",
+                extra={
+                    "extra_fields": {
+                        "tenant_id": tenant_id,
+                        "resource_type": resource_type_display,
+                        "resource_name": resource_name_display,
+                        "status": status_key,
+                        "admin_count": len(admin_users),
+                    }
+                },
+            )
+
+        except Exception as e:
+            logger.error(
+                f"Failed to send delete status change notifications: {str(e)}",
+                extra={
+                    "extra_fields": {
+                        "tenant_id": tenant_id,
+                        "resource_type": resource_type,
+                        "resource_name": resource_name,
+                        "status": status_key,
+                        "error": str(e),
+                    }
+                },
+                exc_info=True,
+            )

trovesuite/utils/templates.py

@@ -0,0 +1,487 @@
+OTP_TEXT_TEMPLATE = (
+    "Your Trovesuite OTP code is: {otp_code}\n"
+    "Please do not share this code with anyone.\n"
+    "This code will expire in 5 minutes.\n"
+    "Sent at: {cdate}, {ctime}"
+)
+
+OTP_HTML_TEMPLATE = """
+<html>
+  <body style="font-family: Arial, sans-serif; background-color: #f8f9fa; padding: 20px;">
+    <div style="max-width: 500px; margin: auto; background: white; border-radius: 12px; padding: 25px; box-shadow: 0 2px 6px rgba(0,0,0,0.1);">
+      <h2 style="color: #2e86de; text-align: center;">🔐 {message_header}</h2>
+      <p style="font-size: 16px; color: #333;">Dear {user_name},</p>
+      <p style="font-size: 15px; color: #333;">
+        Please use the following <b>One-Time Password (OTP)</b> to complete your verification:
+      </p>
+      <div style="text-align: center; margin: 30px 0;">
+        <div style="display: inline-block; background-color: #2e86de; color: white; padding: 15px 30px; border-radius: 8px; font-size: 28px; letter-spacing: 4px;">
+          {otp_code}
+        </div>
+      </div>
+      <p style="font-size: 14px; color: #555;">
+        This code will expire in <b>5 minutes</b>. Please do not share this code with anyone.
+      </p>
+      <hr style="border: none; border-top: 1px solid #eee; margin: 25px 0;">
+      <p style="font-size: 12px; color: #888; text-align: center;">
+        Trovesuite Security System<br>
+        Sent at: {cdate}, {ctime}
+      </p>
+    </div>
+  </body>
+</html>
+"""
+
+PASSWORD_CHANGE_HTML_TEMPLATE = """
+<html>
+  <body style="font-family: Arial, sans-serif; background-color: #f8f9fa; padding: 20px;">
+    <div style="max-width: 500px; margin: auto; background: white; border-radius: 12px; padding: 25px; box-shadow: 0 2px 6px rgba(0,0,0,0.1);">
+      <h2 style="color: #2e86de; text-align: center;">🔒 Password Change Alert</h2>
+      <p style="font-size: 16px; color: #333;">Hello {user_name},</p>
+      <p style="font-size: 15px; color: #333;">
+        We noticed that the password for your <b>Trovesuite</b> account was recently changed.
+      </p>
+      <p style="font-size: 15px; color: #333;">
+        If you made this change, you can safely ignore this message.
+      </p>
+      <p style="font-size: 15px; color: #333;">
+        However, if you did <b>not</b> make this change, please take immediate action to secure your account.
+      </p>
+      <div style="margin-top: 30px; padding: 15px; background-color: #f1f3f6; border-radius: 8px;">
+        <p style="font-size: 13px; color: #555; margin: 0;">
+          Date: <b>{cdate}</b><br>
+          Time: <b>{ctime}</b>
+        </p>
+      </div>
+      <hr style="border: none; border-top: 1px solid #eee; margin: 25px 0;">
+      <p style="font-size: 12px; color: #888; text-align: center;">
+        Trovesuite Security System<br>
+        Ensuring your data safety always.<br>
+        Sent at: {cdate}, {ctime}
+      </p>
+    </div>
+  </body>
+</html>
+"""
+
+PASSWORD_CHANGE_TEXT_TEMPLATE = (
+    "Hello {user_name},\n\n"
+    "We wanted to let you know that the password for your Trovesuite account was just changed.\n\n"
+    "If you made this change, you can safely ignore this message.\n"
+    "If you did NOT make this change, please take immediate action to secure your account.\n\n"
+    "Date: {cdate}\n"
+    "Time: {ctime}\n"
+    "— The Trovesuite Security Team"
+)
+
+ACCESS_GRANTED_HTML_TEMPLATE = """
+<html>
+  <body style="font-family: Arial, sans-serif; background-color: #f8f9fa; padding: 20px; margin: 0;">
+    <div style="max-width: 600px; margin: auto; background: white; border-radius: 12px; padding: 30px; box-shadow: 0 2px 8px rgba(0,0,0,0.1);">
+      <!-- Header -->
+      <div style="text-align: center; padding-bottom: 25px; border-bottom: 2px solid #2e86de;">
+        <h1 style="color: #2e86de; margin: 0; font-size: 28px;">🎉 Welcome to Trovesuite!</h1>
+      </div>
+
+      <!-- Greeting -->
+      <div style="padding: 25px 0;">
+        <p style="font-size: 16px; color: #333; margin-bottom: 15px;">Dear <strong>{user_name}</strong>,</p>
+        <p style="font-size: 15px; color: #333; line-height: 1.6;">
+          Great news! You have been granted access to <strong>Trovesuite</strong>.
+          You can now log in and start exploring all the features available to you.
+        </p>
+      </div>
+
+      <!-- Login Details -->
+      <div style="background-color: #f8f9fa; border-radius: 8px; padding: 20px; margin: 20px 0;">
+        <h3 style="color: #2e86de; margin-top: 0; font-size: 18px; margin-bottom: 15px;">📋 Your Login Details</h3>
+
+        <table style="width: 100%; border-collapse: collapse;">
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px; width: 40%;">
+              <strong>App URL:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              <a href="{app_url}" style="color: #2e86de; text-decoration: none; font-weight: 500;">{app_url}</a>
+            </td>
+          </tr>
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px;">
+              <strong>Email:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              {user_email}
+            </td>
+          </tr>
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px;">
+              <strong>Password:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px; font-family: 'Courier New', monospace; background-color: #fff; padding: 5px 10px; border-radius: 4px; display: inline-block;">
+              {password}
+            </td>
+          </tr>
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px;">
+              <strong>Login Access:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              {login_type_text}
+            </td>
+          </tr>
+        </table>
+      </div>
+
+      <!-- CTA Button -->
+      <div style="text-align: center; margin: 30px 0;">
+        <a href="{app_url}" style="display: inline-block; background-color: #2e86de; color: white; padding: 14px 35px; text-decoration: none; border-radius: 8px; font-size: 16px; font-weight: 600; box-shadow: 0 2px 4px rgba(46, 134, 222, 0.3);">
+          Login Now →
+        </a>
+      </div>
+
+      <!-- Security Note -->
+      <div style="background-color: #fff3cd; border-left: 4px solid #ffc107; padding: 15px; margin: 25px 0; border-radius: 4px;">
+        <p style="font-size: 13px; color: #856404; margin: 0; line-height: 1.5;">
+          <strong>⚠️ Security Reminder:</strong> For your security, we recommend changing your password upon your first login.
+          Please do not share your credentials with anyone.
+        </p>
+      </div>
+
+      <!-- Footer -->
+      <hr style="border: none; border-top: 1px solid #eee; margin: 25px 0;">
+      <div style="text-align: center;">
+        <p style="font-size: 12px; color: #888; margin: 5px 0;">
+          Trovesuite - Empowering Your Business<br>
+          Sent on: {cdate} at {ctime}
+        </p>
+      </div>
+    </div>
+  </body>
+</html>
+"""
+
+ACCESS_GRANTED_TEXT_TEMPLATE = (
+    "Welcome to Trovesuite!\n\n"
+    "Dear {user_name},\n\n"
+    "Great news! You have been granted access to Trovesuite.\n"
+    "You can now log in and start exploring all the features available to you.\n\n"
+    "YOUR LOGIN DETAILS:\n"
+    "==================\n"
+    "App URL: {app_url}\n"
+    "Email: {user_email}\n"
+    "Password: {password}\n"
+    "Login Access: {login_type_text}\n\n"
+    "SECURITY REMINDER:\n"
+    "For your security, we recommend changing your password upon your first login.\n"
+    "Please do not share your credentials with anyone.\n\n"
+    "— The Trovesuite Team\n"
+    "Sent on: {cdate} at {ctime}"
+)
+
+RESET_PASSWORD_TEXT_TEMPLATE = (
+    "Trovesuite Password Reset\n\n"
+    "Dear {user_name},\n\n"
+    "Your Trovesuite account password has been reset by an administrator.\n\n"
+    "NEW LOGIN DETAILS:\n"
+    "==================\n"
+    "App URL: {app_url}\n"
+    "Email: {user_email}\n"
+    "Temporary Password: {password}\n\n"
+    "SECURITY REMINDER:\n"
+    "Please sign in and change this temporary password immediately. "
+    "Do not share your credentials with anyone.\n\n"
+    "— The Trovesuite Team\n"
+    "Sent on: {cdate} at {ctime}"
+)
+
+RESET_PASSWORD_HTML_TEMPLATE = """
+<html>
+  <body style="font-family: Arial, sans-serif; background-color: #f8f9fa; padding: 20px; margin: 0;">
+    <div style="max-width: 600px; margin: auto; background: white; border-radius: 12px; padding: 30px; box-shadow: 0 2px 8px rgba(0,0,0,0.1);">
+      <!-- Header -->
+      <div style="text-align: center; padding-bottom: 25px; border-bottom: 2px solid #2e86de;">
+        <h1 style="color: #2e86de; margin: 0; font-size: 26px;">🔑 Password Reset</h1>
+      </div>
+
+      <!-- Greeting -->
+      <div style="padding: 25px 0;">
+        <p style="font-size: 16px; color: #333; margin-bottom: 15px;">Dear <strong>{user_name}</strong>,</p>
+        <p style="font-size: 15px; color: #333; line-height: 1.6;">
+          Your Trovesuite account password has been reset by an administrator. Use the credentials below to sign in.
+        </p>
+      </div>
+
+      <!-- Login Details -->
+      <div style="background-color: #f8f9fa; border-radius: 8px; padding: 20px; margin: 20px 0;">
+        <h3 style="color: #2e86de; margin-top: 0; font-size: 18px; margin-bottom: 15px;">📋 New Login Details</h3>
+
+        <table style="width: 100%; border-collapse: collapse;">
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px; width: 35%;">
+              <strong>App URL:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              <a href="{app_url}" style="color: #2e86de; text-decoration: none; font-weight: 500;">{app_url}</a>
+            </td>
+          </tr>
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px;">
+              <strong>Email:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              {user_email}
+            </td>
+          </tr>
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px;">
+              <strong>Temporary Password:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px; font-family: 'Courier New', monospace; background-color: #fff; padding: 5px 10px; border-radius: 4px; display: inline-block;">
+              {password}
+            </td>
+          </tr>
+        </table>
+      </div>
+
+      <!-- Security Note -->
+      <div style="background-color: #fff3cd; border-left: 4px solid #ffc107; padding: 15px; margin: 25px 0; border-radius: 4px;">
+        <p style="font-size: 13px; color: #856404; margin: 0; line-height: 1.5;">
+          <strong>⚠️ Important:</strong> For security reasons, please change this temporary password immediately after logging in.
+        </p>
+      </div>
+
+      <!-- Footer -->
+      <hr style="border: none; border-top: 1px solid #eee; margin: 25px 0;">
+      <div style="text-align: center;">
+        <p style="font-size: 12px; color: #888; margin: 5px 0;">
+          This is an automated notification from Trovesuite
+        </p>
+        <p style="font-size: 12px; color: #888; margin: 5px 0;">
+          Trovesuite - Empowering Your Business<br>
+          Sent on: {cdate} at {ctime}
+        </p>
+      </div>
+    </div>
+  </body>
+</html>
+"""
+
+RESOURCE_DELETION_HTML_TEMPLATE = """
+<html>
+  <body style="font-family: Arial, sans-serif; background-color: #f8f9fa; padding: 20px; margin: 0;">
+    <div style="max-width: 600px; margin: auto; background: white; border-radius: 12px; padding: 30px; box-shadow: 0 2px 8px rgba(0,0,0,0.1);">
+      <!-- Header -->
+      <div style="text-align: center; padding-bottom: 25px; border-bottom: 2px solid #dc3545;">
+        <h1 style="color: #dc3545; margin: 0; font-size: 28px;">🗑️ Resource Deletion Notice</h1>
+      </div>
+
+      <!-- Greeting -->
+      <div style="padding: 25px 0;">
+        <p style="font-size: 16px; color: #333; margin-bottom: 15px;">Dear <strong>{admin_name}</strong>,</p>
+        <p style="font-size: 15px; color: #333; line-height: 1.6;">
+          This is to notify you that a resource has been deleted in your Trovesuite account.
+        </p>
+      </div>
+
+      <!-- Deletion Details -->
+      <div style="background-color: #fff3cd; border-left: 4px solid #ffc107; padding: 20px; margin: 20px 0; border-radius: 4px;">
+        <h3 style="color: #856404; margin-top: 0; font-size: 18px; margin-bottom: 15px;">📋 Deletion Details</h3>
+
+        <table style="width: 100%; border-collapse: collapse;">
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px; width: 35%;">
+              <strong>Resource Type:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              {resource_type}
+            </td>
+          </tr>
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px;">
+              <strong>Resource Name:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              {resource_name}
+            </td>
+          </tr>
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px;">
+              <strong>Deleted By:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              {deleted_by_name} ({deleted_by_email})
+            </td>
+          </tr>
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px;">
+              <strong>Deletion Time:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              {cdate} at {ctime}
+            </td>
+          </tr>
+          <tr style="{message_row_style}">
+            <td style="padding: 8px 0; color: #666; font-size: 14px; vertical-align: top;">
+              <strong>Message:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              {message}
+            </td>
+          </tr>
+        </table>
+      </div>
+
+      <!-- Action Note -->
+      <div style="background-color: #f8f9fa; padding: 15px; margin: 25px 0; border-radius: 4px; border-left: 4px solid #2e86de;">
+        <p style="font-size: 13px; color: #333; margin: 0; line-height: 1.5;">
+          <strong>ℹ️ Note:</strong> This resource has been soft-deleted and can be restored if needed.
+          Please contact the person who deleted it or log in to your account to review this action.
+        </p>
+      </div>
+
+      <!-- CTA Button -->
+      <div style="text-align: center; margin: 30px 0;">
+        <a href="{app_url}" style="display: inline-block; background-color: #2e86de; color: white; padding: 14px 35px; text-decoration: none; border-radius: 8px; font-size: 16px; font-weight: 600; box-shadow: 0 2px 4px rgba(46, 134, 222, 0.3);">
+          Login to Review →
+        </a>
+      </div>
+
+      <!-- Footer -->
+      <hr style="border: none; border-top: 1px solid #eee; margin: 25px 0;">
+      <div style="text-align: center;">
+        <p style="font-size: 12px; color: #888; margin: 5px 0;">
+          This is an automated notification from Trovesuite
+        </p>
+        <p style="font-size: 12px; color: #888; margin: 5px 0;">
+          Trovesuite - Empowering Your Business<br>
+          Sent on: {cdate} at {ctime}
+        </p>
+      </div>
+    </div>
+  </body>
+</html>
+"""
+
+RESOURCE_DELETION_TEXT_TEMPLATE = (
+    "Resource Deletion Notice\n\n"
+    "Dear {admin_name},\n\n"
+    "This is to notify you that a resource has been deleted in your Trovesuite account.\n\n"
+    "DELETION DETAILS:\n"
+    "==================\n"
+    "Resource Type: {resource_type}\n"
+    "Resource Name: {resource_name}\n"
+    "Deleted By: {deleted_by_name} ({deleted_by_email})\n"
+    "Deletion Time: {cdate} at {ctime}\n"
+    "{message_text}"
+    "\n"
+    "NOTE:\n"
+    "This resource has been soft-deleted and can be restored if needed.\n"
+    "Please contact the person who deleted it or log in to your account to review this action.\n\n"
+    "Login: {app_url}\n\n"
+    "— The Trovesuite Team\n"
+    "Sent on: {cdate} at {ctime}"
+)
+
+RESOURCE_STATUS_CHANGE_HTML_TEMPLATE = """
+<html>
+  <body style="font-family: Arial, sans-serif; background-color: #f8f9fa; padding: 20px; margin: 0;">
+    <div style="max-width: 600px; margin: auto; background: white; border-radius: 12px; padding: 30px; box-shadow: 0 2px 8px rgba(0,0,0,0.1);">
+      <!-- Header -->
+      <div style="text-align: center; padding-bottom: 25px; border-bottom: 2px solid {status_color};">
+        <h1 style="color: {status_color}; margin: 0; font-size: 28px;">{status_icon} {status_title}</h1>
+      </div>
+
+      <!-- Greeting -->
+      <div style="padding: 25px 0;">
+        <p style="font-size: 16px; color: #333; margin-bottom: 15px;">Dear <strong>{admin_name}</strong>,</p>
+        <p style="font-size: 15px; color: #333; line-height: 1.6;">
+          {status_description}
+        </p>
+      </div>
+
+      <!-- Status Details -->
+      <div style="background-color: #f8f9fa; border-radius: 8px; padding: 20px; margin: 20px 0;">
+        <h3 style="color: {status_color}; margin-top: 0; font-size: 18px; margin-bottom: 15px;">📋 Status Details</h3>
+        <table style="width: 100%; border-collapse: collapse;">
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px; width: 35%;">
+              <strong>Resource Type:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              {resource_type}
+            </td>
+          </tr>
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px;">
+              <strong>Resource Name:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              {resource_name}
+            </td>
+          </tr>
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px;">
+              <strong>Status:</strong>
+            </td>
+            <td style="padding: 8px 0; color: {status_color}; font-size: 14px; font-weight: 600;">
+              {status_display}
+            </td>
+          </tr>
+          <tr>
+            <td style="padding: 8px 0; color: #666; font-size: 14px;">
+              <strong>Triggered By:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              {actor_name} ({actor_email})
+            </td>
+          </tr>
+          <tr style="{message_row_style}">
+            <td style="padding: 8px 0; color: #666; font-size: 14px; vertical-align: top;">
+              <strong>Message:</strong>
+            </td>
+            <td style="padding: 8px 0; color: #333; font-size: 14px;">
+              {message}
+            </td>
+          </tr>
+        </table>
+      </div>
+
+      <!-- CTA Button -->
+      <div style="text-align: center; margin: 30px 0;">
+        <a href="{app_url}" style="display: inline-block; background-color: #2e86de; color: white; padding: 14px 35px; text-decoration: none; border-radius: 8px; font-size: 16px; font-weight: 600; box-shadow: 0 2px 4px rgba(46, 134, 222, 0.3);">
+          Login to Review →
+        </a>
+      </div>
+
+      <!-- Footer -->
+      <hr style="border: none; border-top: 1px solid #eee; margin: 25px 0;">
+      <div style="text-align: center;">
+        <p style="font-size: 12px; color: #888; margin: 5px 0;">
+          This is an automated notification from Trovesuite
+        </p>
+        <p style="font-size: 12px; color: #888; margin: 5px 0;">
+          Trovesuite - Empowering Your Business<br>
+          Sent on: {cdate} at {ctime}
+        </p>
+      </div>
+    </div>
+  </body>
+</html>
+"""
+
+RESOURCE_STATUS_CHANGE_TEXT_TEMPLATE = (
+    "Resource Status Update\n\n"
+    "Dear {admin_name},\n\n"
+    "{status_description}\n\n"
+    "DETAILS:\n"
+    "========\n"
+    "Resource Type: {resource_type}\n"
+    "Resource Name: {resource_name}\n"
+    "Status: {status_display}\n"
+    "Triggered By: {actor_name} ({actor_email})\n"
+    "{message_text}"
+    "\n"
+    "Login: {app_url}\n\n"
+    "— The Trovesuite Team\n"
+    "Sent on: {cdate} at {ctime}"
+)

{trovesuite-1.0.14.dist-info → trovesuite-1.0.17.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: trovesuite
-Version: 1.0.14
+Version: 1.0.17
 Summary: TroveSuite services package providing authentication, authorization, notifications, Azure Storage, and other enterprise services for TroveSuite applications
 Home-page: https://dev.azure.com/brightgclt/trovesuite/_git/packages
 Author: Bright Debrah Owusu

{trovesuite-1.0.14.dist-info → trovesuite-1.0.17.dist-info}/RECORD

@@ -1,14 +1,14 @@
-trovesuite/__init__.py,sha256=QIY7iN7TVyJKjCoB6CBA4pSqm_mL41frcFgFS4maO8k,555
+trovesuite/__init__.py,sha256=_L_7xg3oeOXLmq1MpXPwZvkXiPL0zrw-H3STHUmEMNg,646
 trovesuite/auth/__init__.py,sha256=OjZllVvjul1glDazJ-d5TrNjgHFigFlQQi1G99DYshk,239
 trovesuite/auth/auth_base.py,sha256=rZHQVLeJRBQ8GClgF5UwG-er4_HXVX5-nt8o6_Z29uY,75
 trovesuite/auth/auth_controller.py,sha256=PAgaVlf5TYEfkSfK4vGGsvO84i8zEmeVVXyUF2YBppI,420
 trovesuite/auth/auth_read_dto.py,sha256=e27JqKVPVUM83A_mYF452QCflsvGNo7aKje7q_urwFc,571
-trovesuite/auth/auth_service.py,sha256=_noR3A4Ss7ioP6j--MvlN0EWvcjs5Nljpa3u9zHDooY,18044
+trovesuite/auth/auth_service.py,sha256=G2_lkXdMnuqpBjKFYGlRUrUvVyq8keukXaSyboiWiUM,18106
 trovesuite/auth/auth_write_dto.py,sha256=rdwI7w6-9QZGv1H0PAGrjkLBCzaMHjgPIXeLb9RmNec,234
 trovesuite/configs/__init__.py,sha256=h1mSZOaZ3kUy1ZMO_m9O9KklsxywM0RfMVZLh9h9WvQ,328
 trovesuite/configs/database.py,sha256=IPSu8fXjxyYeJ3bFknJG06Qm2L2ub6Ht19xhKv8g7nA,11731
 trovesuite/configs/logging.py,sha256=mGjR2d4urVNry9l5_aXycMMtcY2RAFIpEL35hw33KZg,9308
-trovesuite/configs/settings.py,sha256=yUbkiFi4QdO9JZG1RRFbP4tYurT47HmN-ohgYcs2SHM,2561
+trovesuite/configs/settings.py,sha256=9kl4f7AOtulUnmoWcrLVa8LKjGirZkPYSWtACoTqr5U,5652
 trovesuite/entities/__init__.py,sha256=Dbl_03Bueyh2vOP2hykd40MmNMrl5nNHSRGP-kqwwNo,160
 trovesuite/entities/health.py,sha256=KaW7yxTQdymIPlnkJJkDqEebBXkD0a7A66i5GgNZLoE,2700
 trovesuite/entities/sh_response.py,sha256=1_sw3PpVaDxWsNiBU0W9YLHZgTFxEj4JJBLBfSY63Ho,1579
@@ -24,10 +24,11 @@ trovesuite/storage/storage_controller.py,sha256=Yzki0L-jmSPbiw8spFm6Z84Bq-WZfih_
 trovesuite/storage/storage_read_dto.py,sha256=o7EVJdwrwVZAaeyGU9O01WMECGVaytkvLRwruA256hQ,1471
 trovesuite/storage/storage_service.py,sha256=V7LIePIV6b_iuhm-9x8r4zwpZHgeRPL1YIe5IBnxhco,19768
 trovesuite/storage/storage_write_dto.py,sha256=vl1iCZ93bpFmpvkCrn587QtMtOA_TPDseXSoTuj9RTQ,1355
-trovesuite/utils/__init__.py,sha256=3UPKTz9cluTgAM-ldNsJxsnoPTZiqacXlAmzUEHy6q8,143
-trovesuite/utils/helper.py,sha256=lvZ1mvaqY84dkIPB5Ov0uwYDOWBziAS8twobEJZh2Ik,1002
-trovesuite-1.0.14.dist-info/licenses/LICENSE,sha256=EJT35ct-Q794JYPdAQy3XNczQGKkU1HzToLeK1YVw2s,1070
-trovesuite-1.0.14.dist-info/METADATA,sha256=3A2HHGAEGEtZ1HTRflqCVmO6nhSewwiSrentaWVQSTQ,21737
-trovesuite-1.0.14.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-trovesuite-1.0.14.dist-info/top_level.txt,sha256=GzKhG_-MTaxeHrIgkGkBH_nof2vroGFBrjeHKWUIwNc,11
-trovesuite-1.0.14.dist-info/RECORD,,
+trovesuite/utils/__init__.py,sha256=mDZuY77BphvQFYLmcWxjP5Tcq9ZZ3WXJWBKB1v6wzHU,185
+trovesuite/utils/helper.py,sha256=k7Meg8sN4aPBdqcjaF1tQcZ32KvuA-IqjpWniQP_Mpk,26438
+trovesuite/utils/templates.py,sha256=_92k4-EkqWs-h0LNJxPgorbspmp24kDngS7O3qWIFyQ,20388
+trovesuite-1.0.17.dist-info/licenses/LICENSE,sha256=EJT35ct-Q794JYPdAQy3XNczQGKkU1HzToLeK1YVw2s,1070
+trovesuite-1.0.17.dist-info/METADATA,sha256=UB2VoJbb7XXl1GUPVjq8BL_zXB_DMQMzSmuYabHBuAo,21737
+trovesuite-1.0.17.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+trovesuite-1.0.17.dist-info/top_level.txt,sha256=GzKhG_-MTaxeHrIgkGkBH_nof2vroGFBrjeHKWUIwNc,11
+trovesuite-1.0.17.dist-info/RECORD,,