YARA-1133

YARA-1165
YARA-1164
2026-07-27 14:00:54 +03:30 · 2026-07-27 11:46:03 +03:30 · 2026-07-27 11:38:54 +03:30 · 2026-07-27 10:15:46 +03:30 · 2026-07-27 09:31:07 +03:30 · 2026-07-26 11:35:21 +03:30
34 changed files with 1769 additions and 46 deletions
--- a/docs/external-api-curls.md
+++ b/docs/external-api-curls.md
@@ -274,6 +274,20 @@ curl -X GET "$FANAVARAN_BIME_URL/car/code-list/accident-culprit-type" \
  -H "ContractId: $CONTRACT_ID" \
  -H "Location: $LOCATION" \
  -H "Content-Type: application/json"
+
+curl -X GET "$FANAVARAN_BIME_URL/car/base-info/vehicle-kinds" \
+  -H "authenticationToken: $AUTHENTICATION_TOKEN" \
+  -H "CorpId: $CORP_ID" \
+  -H "ContractId: $CONTRACT_ID" \
+  -H "Location: $LOCATION" \
+  -H "Content-Type: application/json"
+
+curl -X GET "$FANAVARAN_BIME_URL/car/vehicles/inquiry-by-vin?vin=IRNKAEK4150012345" \
+  -H "authenticationToken: $AUTHENTICATION_TOKEN" \
+  -H "CorpId: $CORP_ID" \
+  -H "ContractId: $CONTRACT_ID" \
+  -H "Location: $LOCATION" \
+  -H "Content-Type: application/json"
 ```

 ### 3B. Policy Inquiry By National Code
--- a/src/Types&Enums/role.enum.ts
+++ b/src/Types&Enums/role.enum.ts
@@ -9,4 +9,5 @@ export enum RoleEnum {
  FILE_MAKER = "file_maker",
  FILE_REVIEWER = "file_reviewer",
  SUPER_ADMIN = "super_admin",
+  CALL_CENTER = "call_center",
 }
--- a/src/auth/auth-services/actor.auth.service.ts
+++ b/src/auth/auth-services/actor.auth.service.ts
@@ -29,6 +29,7 @@ import { FieldExpertDbService } from "src/users/entities/db-service/field-expert
 import { RegistrarDbService } from "src/users/entities/db-service/registrar.db.service";
 import { FileMakerDbService } from "src/users/entities/db-service/file-maker.db.service";
 import { FileReviewerDbService } from "src/users/entities/db-service/file-reviewer.db.service";
+import { CallCenterAgentDbService } from "src/users/entities/db-service/call-center-agent.db.service";
 import { HashService } from "src/utils/hash/hash.service";
 import { OtpGeneratorService } from "src/sms-orchestration/otp-generator.service";
 import { SuperAdminDbService } from "src/super-admin/entities/db-service/super-admin.db.service";
@@ -58,6 +59,7 @@ export class ActorAuthService {
    private readonly fileMakerDbService: FileMakerDbService,
    private readonly fileReviewerDbService: FileReviewerDbService,
    private readonly superAdminDbService: SuperAdminDbService,
+    private readonly callCenterAgentDbService: CallCenterAgentDbService,
  ) {}

  // TODO convrt to class for dynamic controller
@@ -123,6 +125,14 @@ export class ActorAuthService {
          });
        else res = await this.superAdminDbService.findByLoginIdentifier(username);
        break;
+      case RoleEnum.CALL_CENTER:
+        if (username == null && userId)
+          res = await this.callCenterAgentDbService.findOne({
+            _id: new Types.ObjectId(userId),
+          });
+        else
+          res = await this.callCenterAgentDbService.findByLoginIdentifier(username);
+        break;
      default:
        return null;
    }
--- a/src/claim-request-management/claim-request-management.service.ts
+++ b/src/claim-request-management/claim-request-management.service.ts
@@ -10817,11 +10817,6 @@ export class ClaimRequestManagementService {

    const shebaNumber = claimCase.money?.sheba;
    const nationalCode = claimCase.money?.nationalCodeOfInsurer;
-    if (!shebaNumber || !nationalCode) {
-      throw new BadRequestException(
-        "Bank information is missing on the claim. Complete run-inquiries for both parties first.",
-      );
-    }

    const updatePayload: any = {
      "damage.otherParts": otherParts.length > 0 ? otherParts : undefined,
@@ -10860,14 +10855,22 @@ export class ClaimRequestManagementService {
      claimRequestId: updatedClaim._id.toString(),
      publicId: updatedClaim.publicId,
      otherParts,
-      shebaNumber: String(shebaNumber).replace(
-        /^(.{4})(.*)(.{4})$/,
-        "IR$1************$3",
-      ),
-      nationalCodeOfOwner: String(nationalCode).replace(
-        /^(.{2})(.*)(.{2})$/,
-        "$1******$3",
-      ),
+      ...(shebaNumber
+        ? {
+            shebaNumber: String(shebaNumber).replace(
+              /^(.{4})(.*)(.{4})$/,
+              "IR$1************$3",
+            ),
+          }
+        : {}),
+      ...(nationalCode
+        ? {
+            nationalCodeOfOwner: String(nationalCode).replace(
+              /^(.{2})(.*)(.{2})$/,
+              "$1******$3",
+            ),
+          }
+        : {}),
      currentStep: ClaimWorkflowStep.CAPTURE_PART_DAMAGES,
      nextStep: ClaimWorkflowStep.UPLOAD_REQUIRED_DOCUMENTS,
      message:
--- a/src/claim-request-management/dto/select-other-parts-v2.dto.ts
+++ b/src/claim-request-management/dto/select-other-parts-v2.dto.ts
@@ -106,14 +106,16 @@ export class SelectOtherPartsV2ResponseDto {
  @ApiProperty({
    description: 'Sheba number (masked for security)',
    example: 'IR12************1234',
+    required: false,
  })
-  shebaNumber: string;
+  shebaNumber?: string;

  @ApiProperty({
    description: 'National code of owner (masked)',
    example: '12******90',
+    required: false,
  })
-  nationalCodeOfOwner: string;
+  nationalCodeOfOwner?: string;

  @ApiProperty({
    description: 'Current workflow step',
--- a/src/claim-request-management/expert-initiated-claim.mirror.controller.ts
+++ b/src/claim-request-management/expert-initiated-claim.mirror.controller.ts
@@ -4,9 +4,12 @@ import {
  Body,
  Controller,
  Get,
+  HttpException,
+  InternalServerErrorException,
  Param,
  Patch,
  Post,
+  Put,
  Query,
  UploadedFile,
  UseGuards,
@@ -516,6 +519,73 @@ Returns status of each item (uploaded/captured or not).
    );
  }

+  // ─── Owner signature on expert pricing ───────────────────────────────────────
+
+  @Put("claim-sign/:claimRequestId")
+  @ApiParam({ name: "claimRequestId" })
+  @ApiConsumes("multipart/form-data")
+  @ApiBody({
+    description: "Signature file, agreement, and branch",
+    schema: {
+      type: "object",
+      required: ["sign", "agree", "branchId"],
+      properties: {
+        sign: { type: "string", format: "binary", description: "Signature image" },
+        agree: { type: "boolean", description: "true to accept, false to reject" },
+        branchId: { type: "string", description: "Insurer branch ID" },
+      },
+    },
+  })
+  @ApiOperation({
+    summary: "Owner signature on expert pricing (Flow 3 — expert acts on behalf of user)",
+    description:
+      "Field expert submits the damaged party's signature during the final approval stage. " +
+      "Delegates to the same service method as the user sign endpoint; the expert's " +
+      "identity is resolved to the claim owner via `resolveClaimEffectiveUserId`.",
+  })
+  @UseInterceptors(
+    FileInterceptor("sign", {
+      limits: { fileSize: DEFAULT_MEDIA_MAX_BYTES },
+      storage: diskStorage({
+        destination: "./files/claim-sign",
+        filename: (req, file, callback) => {
+          const unique = Date.now();
+          const ex = extname(file.originalname);
+          const base = file.originalname.split(/[.,\s-]/)[0] || "sign";
+          callback(null, `${base}-${unique}${ex}`);
+        },
+      }),
+    }),
+  )
+  async submitOwnerSign(
+    @Param("claimRequestId") claimRequestId: string,
+    @Body("agree") agree: string | boolean,
+    @Body("branchId") branchId: string,
+    @CurrentUser() expert: any,
+    @UploadedFile() sign: Express.Multer.File,
+  ) {
+    await this.mediaPolicyService.assertForClaim(sign, claimRequestId, "image");
+    const agreed =
+      typeof agree === "string"
+        ? agree === "true" || agree === "1"
+        : Boolean(agree);
+    try {
+      return await this.claimRequestManagementService.submitOwnerInsurerApprovalSignV2(
+        claimRequestId,
+        agreed,
+        typeof branchId === "string" ? branchId : "",
+        sign,
+        expert.sub,
+        expert,
+      );
+    } catch (error) {
+      if (error instanceof HttpException) throw error;
+      throw new InternalServerErrorException(
+        error instanceof Error ? error.message : "Failed to submit signature",
+      );
+    }
+  }
+
  @Patch("car-capture/:claimRequestId")
  @ApiConsumes("multipart/form-data")
  @UseInterceptors(
--- a/src/expert-blame/expert-blame.service.ts
+++ b/src/expert-blame/expert-blame.service.ts
@@ -1871,6 +1871,7 @@ export class ExpertBlameService {
            link: this.smsOrchestrationService.buildBlamePartyLink(
              requestIdToken,
              role,
+              "v1",
            ),
          });
        }
@@ -2065,6 +2066,7 @@ export class ExpertBlameService {
            link: this.smsOrchestrationService.buildBlamePartyLink(
              requestIdToken,
              linkRole,
+              "v1",
            ),
          });
        }
--- a/src/expert-claim/expert-claim.service.ts
+++ b/src/expert-claim/expert-claim.service.ts
@@ -3164,7 +3164,7 @@ export class ExpertClaimService {
        receptor: ownerPhoneResend,
        fileKind: "claim",
        publicId: claim.publicId,
-        link: this.smsOrchestrationService.buildClaimLink(String(claim._id)),
+        link: this.smsOrchestrationService.buildClaimLink(String(claim._id), "v1"),
      });
    }

@@ -3462,7 +3462,7 @@ export class ExpertClaimService {
        fileKind: "claim",
        publicId: claim.publicId,
        expertLastName,
-        link: this.smsOrchestrationService.buildClaimLink(String(claim._id)),
+        link: this.smsOrchestrationService.buildClaimLink(String(claim._id), "v1"),
      });
    }

@@ -3716,14 +3716,19 @@ export class ExpertClaimService {
    let claims: any[] = [];
    if (actor.role === RoleEnum.FIELD_EXPERT) {
      const expertOid = new Types.ObjectId(actor.sub);
+      // Exclude V4/V5 blame files — same rule as getFieldExpertClaimListV2.
      const expertBlameIds = await this.blameRequestDbService
        .find(
-          { expertInitiated: true, initiatedByFieldExpertId: expertOid },
+          {
+            expertInitiated: true,
+            initiatedByFieldExpertId: expertOid,
+            isMadeByFileMaker: { $ne: true },
+          },
          { select: "_id", lean: true },
        )
        .then((docs) => docs.map((d) => (d as { _id: unknown })._id));
      const claimOr: Record<string, unknown>[] = [
-        { initiatedByFieldExpertId: expertOid },
+        { initiatedByFieldExpertId: expertOid, requiresFileMakerApproval: { $ne: true } },
      ];
      if (expertBlameIds.length > 0) {
        claimOr.push({ blameRequestId: { $in: expertBlameIds } });
@@ -4052,15 +4057,22 @@ export class ExpertClaimService {
    query: ListQueryV2Dto = {},
  ): Promise<GetClaimListV2ResponseDto> {
    const expertOid = new Types.ObjectId(actor.sub);
+    // Exclude V4/V5 blame files (isMadeByFileMaker=true) — those belong to
+    // the FILE_MAKER/FILE_REVIEWER flows, not the V3 field-expert flow.
    const expertBlameIds = await this.blameRequestDbService
      .find(
-        { expertInitiated: true, initiatedByFieldExpertId: expertOid },
+        {
+          expertInitiated: true,
+          initiatedByFieldExpertId: expertOid,
+          isMadeByFileMaker: { $ne: true },
+        },
        { select: "_id", lean: true },
      )
      .then((docs) => docs.map((d) => (d as { _id: unknown })._id));

    const claimOr: Record<string, unknown>[] = [
-      { initiatedByFieldExpertId: expertOid },
+      // Direct claim link: exclude V5 claims that require FileMaker approval
+      { initiatedByFieldExpertId: expertOid, requiresFileMakerApproval: { $ne: true } },
    ];
    if (expertBlameIds.length > 0) {
      claimOr.push({ blameRequestId: { $in: expertBlameIds } });
@@ -4738,8 +4750,19 @@ export class ExpertClaimService {
            "This file has been taken by another reviewer.",
          );
        }
-      } else if (!claimCaseInitiatedByFieldExpert(claim, actor, linkedBlame)) {
-        throw new ForbiddenException("This claim is not accessible to you.");
+      } else {
+        // FIELD_EXPERT: V3 flow only. Reject V4/V5 files (isMadeByFileMaker)
+        // even if their ID matches initiatedByFieldExpertId on the blame —
+        // those are FILE_MAKER files, accessible via the FILE_MAKER role only.
+        const isV4V5Blame = !!(linkedBlame as any)?.isMadeByFileMaker;
+        if (isV4V5Blame) {
+          throw new ForbiddenException(
+            "Field experts can only access V3 expert-initiated files.",
+          );
+        }
+        if (!claimCaseInitiatedByFieldExpert(claim, actor, linkedBlame)) {
+          throw new ForbiddenException("This claim is not accessible to you.");
+        }
      }
      // Fall through to the detail build below (skip the damage-expert gate)
    } else if (actor.role !== RoleEnum.FILE_MAKER) {
--- a/src/fanavaran/fanavaran-lookup.config.ts
+++ b/src/fanavaran/fanavaran-lookup.config.ts
@@ -86,6 +86,27 @@ export const FANAVARAN_REMOTE_LOOKUPS: FanavaranRemoteLookupDefinition[] = [
    url: `${FANAVARAN_LOOKUP_BASE_URL}/common/base-info/file-types`,
    cacheFile: "file-types.json",
  },
+  // NEW LOOKUPS ADDED
+  {
+    name: "cities",
+    url: `${FANAVARAN_LOOKUP_BASE_URL}/common/base-info/cities`,
+    cacheFile: "cities.json",
+  },
+  {
+    name: "dmg-case-type",
+    url: `${FANAVARAN_LOOKUP_BASE_URL}/car/code-list/dmg-case-type`,
+    cacheFile: "dmg-case-type.json",
+  },
+  {
+    name: "dmg-history-status",
+    url: `${FANAVARAN_LOOKUP_BASE_URL}/car/code-list/dmg-case-history-status`,
+    cacheFile: "dmg-history-status.json",
+  },
+  {
+    name: "provinces",
+    url: `${FANAVARAN_LOOKUP_BASE_URL}/common/base-info/Provinces`,
+    cacheFile: "provinces.json",
+  },
 ];

 export const TEJARAT_STATIC_ACCIDENT_FILES = {
--- a/src/fanavaran/fanavaran-lookup.service.ts
+++ b/src/fanavaran/fanavaran-lookup.service.ts
@@ -265,6 +265,23 @@ export class FanavaranLookupService {
    return this.fetchFromFanavaran(clientKey, url);
  }

+  async vehicleById(
+    clientKey: FanavaranClientKey,
+    vehicleId: number,
+    versionNo: number = 1,
+  ): Promise<unknown> {
+    const url = `${FANAVARAN_LOOKUP_BASE_URL}/car/vehicles/${vehicleId}?versionno=${versionNo}`;
+    return this.fetchFromFanavaran(clientKey, url);
+  }
+
+  async customerById(
+    clientKey: FanavaranClientKey,
+    customerId: number,
+  ): Promise<unknown> {
+    const url = `${FANAVARAN_LOOKUP_BASE_URL}/common/customers/${customerId}`;
+    return this.fetchFromFanavaran(clientKey, url);
+  }
+
  async inquiryByUniqueIdentifier(
    clientKey: FanavaranClientKey,
    params: {
--- a/src/lookups/lookups.controller.ts
+++ b/src/lookups/lookups.controller.ts
@@ -238,6 +238,59 @@ export class LookupsController {
    return await this.lookupsService.getFileTypes();
  }

+  @Get("cities")
+  @ApiOperation({
+    summary: "Fanavaran cities lookup",
+    description: "Returns city codes from common/base-info/cities.",
+  })
+  @ApiOkResponse({
+    description: "Returns Fanavaran cities lookup data",
+    schema: { type: "array", items: { type: "object" } },
+  })
+  async cities() {
+    return await this.lookupsService.getCities();
+  }
+
+  @Get("provinces")
+  @ApiOperation({
+    summary: "Fanavaran provinces lookup",
+    description: "Returns province codes from common/base-info/provinces.",
+  })
+  @ApiOkResponse({
+    description: "Returns Fanavaran provinces lookup data",
+    schema: { type: "array", items: { type: "object" } },
+  })
+  async provinces() {
+    return await this.lookupsService.getProvinces();
+  }
+
+  @Get("dmg-case-type")
+  @ApiOperation({
+    summary: "Fanavaran damage case type lookup",
+    description: "Returns damage case type codes from car/code-list/dmg-case-type.",
+  })
+  @ApiOkResponse({
+    description: "Returns Fanavaran damage case type lookup data",
+    schema: { type: "array", items: { type: "object" } },
+  })
+  async dmgCaseType() {
+    return await this.lookupsService.getDmgCaseType();
+  }
+
+  @Get("dmg-history-status")
+  @ApiOperation({
+    summary: "Fanavaran damage history status lookup",
+    description:
+      "Returns damage history status codes from car/code-list/dmg-case-history-status.",
+  })
+  @ApiOkResponse({
+    description: "Returns Fanavaran damage history status lookup data",
+    schema: { type: "array", items: { type: "object" } },
+  })
+  async dmgHistoryStatus() {
+    return await this.lookupsService.getDmgHistoryStatus();
+  }
+
  @Get("inquiry-by-vin")
  @ApiOperation({
    summary: "Fanavaran vehicle inquiry by VIN",
--- a/src/lookups/lookups.service.ts
+++ b/src/lookups/lookups.service.ts
@@ -127,6 +127,22 @@ export class LookupsService {
    return await this.getClientRemoteLookup("file-types");
  }

+  async getCities(): Promise<any> {
+    return await this.getClientRemoteLookup("cities");
+  }
+
+  async getProvinces(): Promise<any> {
+    return await this.getClientRemoteLookup("provinces");
+  }
+
+  async getDmgCaseType(): Promise<any> {
+    return await this.getClientRemoteLookup("dmg-case-type");
+  }
+
+  async getDmgHistoryStatus(): Promise<any> {
+    return await this.getClientRemoteLookup("dmg-history-status");
+  }
+
  async inquiryByVin(vin: string): Promise<unknown> {
    const clientKey = this.activeClientKey();
    return this.fanavaranLookupService.inquiryByVin(clientKey, vin);
@@ -144,14 +160,70 @@ export class LookupsService {
    );
  }

+  async mapPolicyDetails(policy: any): Promise<any> {
+    if (!policy || typeof policy !== "object") {
+      return policy;
+    }
+
+    const mappedPolicy = { ...policy };
+
+    // 1. Map PreviousInsuranceCorpId and TransferorInsuranceCorpId
+    try {
+      const companies = (await this.getClientRemoteLookup("insurance-corp")) as any[];
+      if (Array.isArray(companies)) {
+        if (typeof policy.PreviousInsuranceCorpId === "number") {
+          const match = companies.find((c) => c.Id === policy.PreviousInsuranceCorpId);
+          if (match) {
+            mappedPolicy.PreviousInsuranceCorpName = match.Caption;
+          }
+        }
+        if (typeof policy.TransferorInsuranceCorpId === "number") {
+          const match = companies.find((c) => c.Id === policy.TransferorInsuranceCorpId);
+          if (match) {
+            mappedPolicy.TransferorInsuranceCorpName = match.Caption;
+          }
+        }
+      }
+    } catch (e) {
+      this.logger.warn(`Failed to map insurance-corp lookups: ${e.message}`);
+    }
+
+    // 2. Map PolicyUsageTypeId
+    try {
+      const useTypes = (await this.getClientRemoteLookup("vehicle-use-types")) as any[];
+      if (Array.isArray(useTypes) && typeof policy.PolicyUsageTypeId === "number") {
+        const match = useTypes.find((t) => t.Id === policy.PolicyUsageTypeId);
+        if (match) {
+          mappedPolicy.PolicyUsageTypeName = match.Caption;
+        }
+      }
+    } catch (e) {
+      this.logger.warn(`Failed to map vehicle-use-types lookups: ${e.message}`);
+    }
+
+    return mappedPolicy;
+  }
+
  async thirdPartyPolicyById(policyId: number): Promise<unknown> {
    const clientKey = this.activeClientKey();
-    return this.fanavaranLookupService.thirdPartyPolicyById(clientKey, policyId);
+    const policy = await this.fanavaranLookupService.thirdPartyPolicyById(clientKey, policyId);
+    return this.mapPolicyDetails(policy);
  }

  async bodyPolicyById(policyId: number): Promise<unknown> {
    const clientKey = this.activeClientKey();
-    return this.fanavaranLookupService.bodyPolicyById(clientKey, policyId);
+    const policy = await this.fanavaranLookupService.bodyPolicyById(clientKey, policyId);
+    return this.mapPolicyDetails(policy);
+  }
+
+  async vehicleById(vehicleId: number, versionNo: number = 1): Promise<unknown> {
+    const clientKey = this.activeClientKey();
+    return this.fanavaranLookupService.vehicleById(clientKey, vehicleId, versionNo);
+  }
+
+  async customerById(customerId: number): Promise<unknown> {
+    const clientKey = this.activeClientKey();
+    return this.fanavaranLookupService.customerById(clientKey, customerId);
  }

  async getAccidentWay(): Promise<{ id: number; label: string }[]> {
--- a/src/request-management/call-center-blame-v6.controller.ts
+++ b/src/request-management/call-center-blame-v6.controller.ts
@@ -0,0 +1,154 @@
+import {
+  Body,
+  Controller,
+  Get,
+  Param,
+  Post,
+  UseGuards,
+} from "@nestjs/common";
+import {
+  ApiBearerAuth,
+  ApiBody,
+  ApiOperation,
+  ApiParam,
+  ApiResponse,
+  ApiTags,
+} from "@nestjs/swagger";
+import { LocalActorAuthGuard } from "src/auth/guards/actor-local.guard";
+import { RolesGuard } from "src/auth/guards/role.guard";
+import { Roles } from "src/decorators/roles.decorator";
+import { CurrentUser } from "src/decorators/user.decorator";
+import { RoleEnum } from "src/Types&Enums/role.enum";
+import { RequestManagementService } from "./request-management.service";
+import { RunCallCenterInquiryV6Dto } from "./dto/run-call-center-inquiry-v6.dto";
+
+/**
+ * V6 call-center blame API.
+ *
+ * A call-center agent takes the guilty party's details over the phone
+ * (plate, national code, birthday), runs the insurance inquiry, then sends
+ * the blame link via SMS.  The user (guilty party) opens the link and
+ * completes the form through the standard v2 user flow — except the
+ * initial-form / inquiry step is skipped (`skipInitialFormStep=true`) because
+ * the agent already did it.
+ *
+ * For THIRD_PARTY files: only the guilty party's data is collected here.
+ * The damaged party sees their own portion of the page and fills their info
+ * as normal after the blame link is opened.
+ */
+@ApiTags("call-center-blame (v6)")
+@Controller("v6/call-center-blame")
+@ApiBearerAuth()
+@UseGuards(LocalActorAuthGuard, RolesGuard)
+@Roles(RoleEnum.CALL_CENTER)
+export class CallCenterBlameV6Controller {
+  constructor(
+    private readonly requestManagementService: RequestManagementService,
+  ) {}
+
+  @Get("my-files")
+  @ApiOperation({ summary: "[V6] List blame files created by this call-center agent" })
+  @ApiResponse({ status: 200, description: "List of blame files started by this agent" })
+  getMyFiles(@CurrentUser() agent: any) {
+    return this.requestManagementService.getMyCallCenterFilesV6(agent);
+  }
+
+  @Post("create")
+  @ApiOperation({
+    summary: "[V6] Create a call-center–initiated blame file",
+    description:
+      "Creates a LINK blame file.  The call-center agent collects the guilty " +
+      "party's plate + national-code over the phone, calls run-inquiry to store " +
+      "the results, then calls send-link to SMS the blame URL to the user.  " +
+      "The user opens the link and fills the form via the normal v2 flow; the " +
+      "initial-form/inquiry step is automatically skipped because the agent " +
+      "already ran it.",
+  })
+  @ApiBody({
+    schema: {
+      type: "object",
+      required: ["type"],
+      properties: {
+        type: {
+          type: "string",
+          enum: ["THIRD_PARTY", "CAR_BODY"],
+          example: "THIRD_PARTY",
+        },
+      },
+    },
+  })
+  createFile(
+    @CurrentUser() agent: any,
+    @Body("type") type: "THIRD_PARTY" | "CAR_BODY",
+  ) {
+    return this.requestManagementService.createCallCenterInitiatedBlameV6(agent, { type });
+  }
+
+  @Post("run-inquiry/:requestId")
+  @ApiOperation({
+    summary: "[V6] Run plate + insurance inquiry for the guilty party",
+    description:
+      "Call after `create`.  The agent supplies the plate and national-code data " +
+      "collected from the caller.  Plate + third-party block inquiry is executed " +
+      "and the results are stored on the blame document.  " +
+      "For THIRD_PARTY files only the guilty party (first party) is inquired here; " +
+      "the damaged party's inquiry is handled later by the user via the link.  " +
+      "Sheba (IBAN) is not collected here — the user adds it themselves.",
+  })
+  @ApiParam({ name: "requestId", description: "Blame request ID from `create`" })
+  @ApiBody({ type: RunCallCenterInquiryV6Dto })
+  runInquiry(
+    @CurrentUser() agent: any,
+    @Param("requestId") requestId: string,
+    @Body() dto: RunCallCenterInquiryV6Dto,
+  ) {
+    return this.requestManagementService.runCallCenterInquiryV6(agent, requestId, dto);
+  }
+
+  @Post("send-link/:requestId")
+  @ApiOperation({
+    summary: "[V6] Send blame link to the guilty party via SMS",
+    description:
+      "Call after `run-inquiry`.  Provide the guilty party's phone number; " +
+      "the service registers the user if needed, stores them as the first party, " +
+      "and sends the blame invite link via SMS.  The user opens the link and " +
+      "completes the blame form via the standard v2 user flow (initial-form step skipped).",
+  })
+  @ApiParam({ name: "requestId", description: "Blame request ID" })
+  @ApiBody({
+    schema: {
+      type: "object",
+      required: ["phoneNumber"],
+      properties: {
+        phoneNumber: {
+          type: "string",
+          example: "09121234567",
+          description: "Mobile number of the guilty party",
+        },
+      },
+    },
+  })
+  sendLink(
+    @CurrentUser() agent: any,
+    @Param("requestId") requestId: string,
+    @Body("phoneNumber") phoneNumber: string,
+  ) {
+    return this.requestManagementService.sendCallCenterLinkV6(agent, requestId, { phoneNumber });
+  }
+
+  @Get("blame/:requestId")
+  @ApiOperation({
+    summary: "[V6] Get a single blame file created by this agent",
+    description:
+      "Returns the current status, workflow step, and party data for one blame " +
+      "file started by this call-center agent.  Useful for checking whether the " +
+      "user has opened the link and progressed through the form.",
+  })
+  @ApiParam({ name: "requestId", description: "Blame request ID" })
+  getBlame(
+    @CurrentUser() agent: any,
+    @Param("requestId") requestId: string,
+  ) {
+    return this.requestManagementService.getCallCenterBlameDetailV6(agent, requestId);
+  }
+}
--- a/src/request-management/dto/run-call-center-inquiry-v6.dto.ts
+++ b/src/request-management/dto/run-call-center-inquiry-v6.dto.ts
@@ -0,0 +1,85 @@
+import { ApiProperty, ApiPropertyOptional } from "@nestjs/swagger";
+import {
+  IsBoolean,
+  IsNotEmpty,
+  IsOptional,
+  IsString,
+  ValidateNested,
+} from "class-validator";
+import { Type } from "class-transformer";
+
+class PlateV6Dto {
+  @ApiProperty({ example: "44", description: "Left two digits" })
+  @IsString()
+  @IsNotEmpty()
+  leftDigits: string;
+
+  @ApiProperty({ example: "ب", description: "Center alphabet letter" })
+  @IsString()
+  @IsNotEmpty()
+  centerAlphabet: string;
+
+  @ApiProperty({ example: "111", description: "Center three digits" })
+  @IsString()
+  @IsNotEmpty()
+  centerDigits: string;
+
+  @ApiProperty({ example: "22", description: "Right two digits (Iran region code)" })
+  @IsString()
+  @IsNotEmpty()
+  ir: string;
+}
+
+/**
+ * Inquiry body for the V6 call-center flow.
+ * Same as V3 but without `sheba` — the user adds their own IBAN later via the link.
+ */
+export class RunCallCenterInquiryV6Dto {
+  @ApiProperty({
+    type: PlateV6Dto,
+    description: "Plate segments — Tejarat block / third-party inquiry.",
+  })
+  @ValidateNested()
+  @Type(() => PlateV6Dto)
+  plate: PlateV6Dto;
+
+  @ApiProperty({ example: "1234567890", description: "National code of the policyholder (insurer)" })
+  @IsString()
+  @IsNotEmpty()
+  nationalCodeOfInsurer: string;
+
+  @ApiProperty({ example: "1234567890", description: "National code of the driver" })
+  @IsString()
+  @IsNotEmpty()
+  nationalCodeOfDriver: string;
+
+  @ApiProperty({ example: true, description: "Whether the driver is the same person as the insurer" })
+  @IsBoolean()
+  driverIsInsurer: boolean;
+
+  @ApiProperty({ example: 13780624, description: "Insurer birth date (Jalali)" })
+  insurerBirthday: number | string;
+
+  @ApiPropertyOptional({
+    example: 13780624,
+    description: "Driver birth date (Jalali). Required when driverIsInsurer is false.",
+  })
+  @IsOptional()
+  driverBirthday?: number | string | null;
+
+  @ApiPropertyOptional({
+    example: "123456789",
+    description: "Driver license (required when driverIsInsurer is false).",
+  })
+  @IsOptional()
+  @IsString()
+  driverLicense?: string;
+
+  @ApiPropertyOptional({
+    example: "123456789",
+    description: "Insurer license (required when driverIsInsurer is true).",
+  })
+  @IsOptional()
+  @IsString()
+  insurerLicense?: string;
+}
--- a/src/request-management/dto/run-inquiries-v3.dto.ts
+++ b/src/request-management/dto/run-inquiries-v3.dto.ts
@@ -4,6 +4,7 @@ import {
  IsNotEmpty,
  IsOptional,
  IsString,
+  MaxLength,
  ValidateNested,
 } from "class-validator";
 import { Type } from "class-transformer";
@@ -89,3 +90,66 @@ export class RunInquiriesV3Dto {
  @IsString()
  insurerLicense?: string;
 }
+
+/**
+ * Body for `POST run-inquiries-vin/:requestId`.
+ * Identical to RunInquiriesV3Dto but uses `vin` (17-char chassis number) instead of `plate`.
+ * First call = guilty party (+ auto claim). Second call = damaged party (THIRD_PARTY only).
+ */
+export class RunInquiriesVinV3Dto {
+  @ApiProperty({
+    example: "NAAM01E15HK123456",
+    description: "17-character VIN / chassis number (شماره شاسی)",
+    maxLength: 17,
+  })
+  @IsString()
+  @IsNotEmpty()
+  @MaxLength(17)
+  vin: string;
+
+  @ApiProperty({ example: "1234567890", description: "National code of the policyholder (insurer)" })
+  @IsString()
+  @IsNotEmpty()
+  nationalCodeOfInsurer: string;
+
+  @ApiProperty({ example: "1234567890", description: "National code of the driver" })
+  @IsString()
+  @IsNotEmpty()
+  nationalCodeOfDriver: string;
+
+  @ApiProperty({ example: true, description: "Whether the driver is the same person as the insurer" })
+  @IsBoolean()
+  driverIsInsurer: boolean;
+
+  @ApiProperty({ example: 13780624, description: "Insurer birth date (Jalali)" })
+  insurerBirthday: number | string;
+
+  @ApiPropertyOptional({ example: 13780624, description: "Driver birth date (Jalali). Required when driverIsInsurer is false." })
+  @IsOptional()
+  driverBirthday?: number | string | null;
+
+  @ApiPropertyOptional({
+    example: "IR123456789012345678901234",
+    description:
+      "Sheba (IBAN). Required on the damaged party call (CAR_BODY first call; THIRD_PARTY second call).",
+  })
+  @IsOptional()
+  @IsString()
+  sheba?: string;
+
+  @ApiPropertyOptional({
+    example: "123456789",
+    description: "Driver license (required when driverIsInsurer is false).",
+  })
+  @IsOptional()
+  @IsString()
+  driverLicense?: string;
+
+  @ApiPropertyOptional({
+    example: "123456789",
+    description: "Insurer license (required when driverIsInsurer is true).",
+  })
+  @IsOptional()
+  @IsString()
+  insurerLicense?: string;
+}
--- a/src/request-management/entities/schema/blame-cases.schema.ts
+++ b/src/request-management/entities/schema/blame-cases.schema.ts
@@ -131,6 +131,26 @@ export class BlameRequest {
   */
  @Prop({ type: Types.ObjectId })
  assignedFileReviewerId?: Types.ObjectId;
+
+  /**
+   * V6 call-center flow: true when this blame was started by a call-center agent
+   * on behalf of the guilty party who called in.
+   */
+  @Prop({ default: false })
+  callCenterInitiated?: boolean;
+
+  /**
+   * V6 call-center flow: the call-center agent who created this file.
+   */
+  @Prop({ type: Types.ObjectId })
+  initiatedByCallCenterId?: Types.ObjectId;
+
+  /**
+   * V6 call-center flow: when true the user-side blame page should skip the
+   * inquiry / initial-form step (the call-center agent already ran the inquiry).
+   */
+  @Prop({ default: false })
+  skipInitialFormStep?: boolean;
 }

 export type BlameRequestDocument = HydratedDocument<BlameRequest>;
--- a/src/request-management/expert-initiated-blame-v3.mirror.controller.ts
+++ b/src/request-management/expert-initiated-blame-v3.mirror.controller.ts
@@ -31,7 +31,7 @@ import { RoleEnum } from "src/Types&Enums/role.enum";
 import { CreationMethod } from "./entities/schema/request-management.schema";
 import { CreateExpertInitiatedFileDto } from "./dto/expert-initiated.dto";
 import { SendPartyOtpDto, VerifyPartyOtpDto } from "./dto/party-otp.dto";
-import { RunInquiriesV3Dto } from "./dto/run-inquiries-v3.dto";
+import { RunInquiriesV3Dto, RunInquiriesVinV3Dto } from "./dto/run-inquiries-v3.dto";
 import {
  CarBodyFormDto,
  DescriptionDto,
@@ -181,6 +181,23 @@ export class ExpertInitiatedBlameV3MirrorController {
    return this.requestManagementService.runInquiriesV3(requestId, expert, dto);
  }

+  @Post("run-inquiries-vin/:requestId")
+  @ApiParam({ name: "requestId" })
+  @ApiBody({ type: RunInquiriesVinV3Dto })
+  @ApiOperation({
+    summary: "Run VIN/chassis inquiries for the current party (V3)",
+    description:
+      "VIN alternative to run-inquiries. Uses ESG chassis lookup instead of plate-based inquiry. " +
+      "1st call = guilty party (+ auto claim). 2nd call = damaged party (THIRD_PARTY, after guilty sign).",
+  })
+  async runInquiriesVin(
+    @CurrentUser() expert: any,
+    @Param("requestId") requestId: string,
+    @Body() dto: RunInquiriesVinV3Dto,
+  ) {
+    return this.requestManagementService.runInquiriesVinV3(requestId, expert, dto);
+  }
+
  @Post("add-detail-location/:requestId")
  @ApiParam({ name: "requestId" })
  @ApiBody({ type: LocationDto })
--- a/src/request-management/expert-initiated-blame.mirror.controller.ts
+++ b/src/request-management/expert-initiated-blame.mirror.controller.ts
@@ -27,6 +27,7 @@ import { MediaPolicyService } from "src/media-policy/media-policy.service";
 import { DEFAULT_MEDIA_MAX_BYTES } from "src/client/client.service";
 import { RoleEnum } from "src/Types&Enums/role.enum";
 import { AddPlateDto } from "src/profile/dto/user/AddPlateDto";
+import { InitialFormVinDto } from "./dto/create-request-management.dto";
 import {
  BlameConfessionDtoV2,
  CarBodyFormDto,
@@ -181,6 +182,29 @@ export class ExpertInitiatedBlameMirrorController {
    );
  }

+  @Post("/run-inquiries-vin/:requestId")
+  @ApiParam({ name: "requestId" })
+  @ApiBody({ type: InitialFormVinDto })
+  @ApiOperation({
+    summary: "[Expert mirror] Initial form via VIN/chassis inquiry for current party",
+    description:
+      "VIN alternative to run-inquiries. Uses ESG chassis lookup instead of plate-based inquiry. " +
+      "Fills the FIRST or SECOND party insurance/vehicle data depending on the current workflow step.",
+  })
+  async initialFormVin(
+    @Param("requestId") requestId: string,
+    @Body() body: InitialFormVinDto,
+    @CurrentUser() expert: any,
+    @Body("partyRole") partyRole?: string,
+  ) {
+    return this.requestManagementService.initialFormVinV2(
+      requestId,
+      body,
+      expert,
+      partyRole,
+    );
+  }
+
  @ApiBody({
    schema: {
      type: "object",
--- a/src/request-management/file-maker-blame-v4.controller.ts
+++ b/src/request-management/file-maker-blame-v4.controller.ts
@@ -30,7 +30,7 @@ import { RoleEnum } from "src/Types&Enums/role.enum";
 import { CreationMethod } from "./entities/schema/request-management.schema";
 import { CreateExpertInitiatedFileDto } from "./dto/expert-initiated.dto";
 import { SendPartyOtpDto, VerifyPartyOtpDto } from "./dto/party-otp.dto";
-import { RunInquiriesV3Dto } from "./dto/run-inquiries-v3.dto";
+import { RunInquiriesV3Dto, RunInquiriesVinV3Dto } from "./dto/run-inquiries-v3.dto";
 import {
  CarBodyFormDto,
  DescriptionDto,
@@ -193,6 +193,27 @@ export class FileMakerBlameV4Controller {
    );
  }

+  @Post("run-inquiries-vin/:requestId")
+  @ApiParam({ name: "requestId" })
+  @ApiBody({ type: RunInquiriesVinV3Dto })
+  @ApiOperation({
+    summary: "Run VIN/chassis inquiries for the current party (V4)",
+    description:
+      "VIN alternative to run-inquiries. Uses ESG chassis lookup instead of plate-based inquiry. " +
+      "1st call = guilty party (+ auto claim). 2nd call = damaged party (THIRD_PARTY, after guilty sign).",
+  })
+  async runInquiriesVin(
+    @CurrentUser() fileMaker: any,
+    @Param("requestId") requestId: string,
+    @Body() dto: RunInquiriesVinV3Dto,
+  ) {
+    return this.requestManagementService.runInquiriesVinV3(
+      requestId,
+      fileMaker,
+      dto,
+    );
+  }
+
  // ─── Party details ────────────────────────────────────────────────────────────

  @Post("add-detail-location/:requestId")
--- a/src/request-management/file-maker-blame-v5.controller.ts
+++ b/src/request-management/file-maker-blame-v5.controller.ts
@@ -30,7 +30,7 @@ import { RoleEnum } from "src/Types&Enums/role.enum";
 import { CreationMethod } from "./entities/schema/request-management.schema";
 import { CreateExpertInitiatedFileDto } from "./dto/expert-initiated.dto";
 import { SendPartyOtpDto, VerifyPartyOtpDto } from "./dto/party-otp.dto";
-import { RunInquiriesV3Dto } from "./dto/run-inquiries-v3.dto";
+import { RunInquiriesV3Dto, RunInquiriesVinV3Dto } from "./dto/run-inquiries-v3.dto";
 import {
  CarBodyFormDto,
  DescriptionDto,
@@ -192,6 +192,27 @@ export class FileMakerBlameV5Controller {
    );
  }

+  @Post("run-inquiries-vin/:requestId")
+  @ApiParam({ name: "requestId" })
+  @ApiBody({ type: RunInquiriesVinV3Dto })
+  @ApiOperation({
+    summary: "Run VIN/chassis inquiries for the current party (V5)",
+    description:
+      "VIN alternative to run-inquiries. Uses ESG chassis lookup instead of plate-based inquiry. " +
+      "1st call = guilty party (+ auto claim). 2nd call = damaged party (THIRD_PARTY, after guilty sign).",
+  })
+  async runInquiriesVin(
+    @CurrentUser() fileMaker: any,
+    @Param("requestId") requestId: string,
+    @Body() dto: RunInquiriesVinV3Dto,
+  ) {
+    return this.requestManagementService.runInquiriesVinV3(
+      requestId,
+      fileMaker,
+      dto,
+    );
+  }
+
  // ─── Party details ────────────────────────────────────────────────────────────

  @Post("add-detail-location/:requestId")
--- a/src/request-management/file-reviewer-blame-v4.controller.ts
+++ b/src/request-management/file-reviewer-blame-v4.controller.ts
@@ -1,11 +1,15 @@
 import { extname } from "node:path";
 import {
+  BadRequestException,
  Body,
  Controller,
  Get,
+  HttpException,
+  InternalServerErrorException,
  Param,
  Patch,
  Post,
+  Put,
  UploadedFile,
  UseGuards,
  UseInterceptors,
@@ -316,6 +320,73 @@ export class FileReviewerBlameV4Controller {
    );
  }

+  // ─── Owner signature on expert pricing ───────────────────────────────────────
+
+  @Put("claim-sign/:claimRequestId")
+  @ApiParam({ name: "claimRequestId" })
+  @ApiConsumes("multipart/form-data")
+  @ApiBody({
+    description: "Signature file, agreement, and branch",
+    schema: {
+      type: "object",
+      required: ["sign", "agree", "branchId"],
+      properties: {
+        sign: { type: "string", format: "binary", description: "Signature image" },
+        agree: { type: "boolean", description: "true to accept, false to reject" },
+        branchId: { type: "string", description: "Insurer branch ID" },
+      },
+    },
+  })
+  @ApiOperation({
+    summary: "Owner signature on expert pricing (V4 — FileReviewer acts on behalf of user)",
+    description:
+      "FileReviewer submits the damaged party's signature during the final approval stage. " +
+      "Delegates to the same service method as the user sign endpoint; the FileReviewer's " +
+      "identity is resolved to the claim owner via `resolveClaimEffectiveUserId`.",
+  })
+  @UseInterceptors(
+    FileInterceptor("sign", {
+      limits: { fileSize: DEFAULT_MEDIA_MAX_BYTES },
+      storage: diskStorage({
+        destination: "./files/claim-sign",
+        filename: (req, file, callback) => {
+          const unique = Date.now();
+          const ex = extname(file.originalname);
+          const base = file.originalname.split(/[.,\s-]/)[0] || "sign";
+          callback(null, `${base}-${unique}${ex}`);
+        },
+      }),
+    }),
+  )
+  async submitOwnerSign(
+    @Param("claimRequestId") claimRequestId: string,
+    @Body("agree") agree: string | boolean,
+    @Body("branchId") branchId: string,
+    @CurrentUser() fileReviewer: any,
+    @UploadedFile() sign: Express.Multer.File,
+  ) {
+    await this.mediaPolicyService.assertForClaim(sign, claimRequestId, "image");
+    const agreed =
+      typeof agree === "string"
+        ? agree === "true" || agree === "1"
+        : Boolean(agree);
+    try {
+      return await this.claimRequestManagementService.submitOwnerInsurerApprovalSignV2(
+        claimRequestId,
+        agreed,
+        typeof branchId === "string" ? branchId : "",
+        sign,
+        fileReviewer.sub,
+        fileReviewer,
+      );
+    } catch (error) {
+      if (error instanceof HttpException) throw error;
+      throw new InternalServerErrorException(
+        error instanceof Error ? error.message : "Failed to submit signature",
+      );
+    }
+  }
+
  // ─── Walk-around video ────────────────────────────────────────────────────────

  @Patch("car-capture/:claimRequestId")
--- a/src/request-management/file-reviewer-blame-v5.controller.ts
+++ b/src/request-management/file-reviewer-blame-v5.controller.ts
@@ -3,9 +3,12 @@ import {
  Body,
  Controller,
  Get,
+  HttpException,
+  InternalServerErrorException,
  Param,
  Patch,
  Post,
+  Put,
  UploadedFile,
  UseGuards,
  UseInterceptors,
@@ -315,6 +318,73 @@ export class FileReviewerBlameV5Controller {
    );
  }

+  // ─── Owner signature on expert pricing ───────────────────────────────────────
+
+  @Put("claim-sign/:claimRequestId")
+  @ApiParam({ name: "claimRequestId" })
+  @ApiConsumes("multipart/form-data")
+  @ApiBody({
+    description: "Signature file, agreement, and branch",
+    schema: {
+      type: "object",
+      required: ["sign", "agree", "branchId"],
+      properties: {
+        sign: { type: "string", format: "binary", description: "Signature image" },
+        agree: { type: "boolean", description: "true to accept, false to reject" },
+        branchId: { type: "string", description: "Insurer branch ID" },
+      },
+    },
+  })
+  @ApiOperation({
+    summary: "Owner signature on expert pricing (V5 — FileReviewer acts on behalf of user)",
+    description:
+      "FileReviewer submits the damaged party's signature during the final approval stage. " +
+      "Delegates to the same service method as the user sign endpoint; the FileReviewer's " +
+      "identity is resolved to the claim owner via `resolveClaimEffectiveUserId`.",
+  })
+  @UseInterceptors(
+    FileInterceptor("sign", {
+      limits: { fileSize: DEFAULT_MEDIA_MAX_BYTES },
+      storage: diskStorage({
+        destination: "./files/claim-sign",
+        filename: (req, file, callback) => {
+          const unique = Date.now();
+          const ex = extname(file.originalname);
+          const base = file.originalname.split(/[.,\s-]/)[0] || "sign";
+          callback(null, `${base}-${unique}${ex}`);
+        },
+      }),
+    }),
+  )
+  async submitOwnerSign(
+    @Param("claimRequestId") claimRequestId: string,
+    @Body("agree") agree: string | boolean,
+    @Body("branchId") branchId: string,
+    @CurrentUser() fileReviewer: any,
+    @UploadedFile() sign: Express.Multer.File,
+  ) {
+    await this.mediaPolicyService.assertForClaim(sign, claimRequestId, "image");
+    const agreed =
+      typeof agree === "string"
+        ? agree === "true" || agree === "1"
+        : Boolean(agree);
+    try {
+      return await this.claimRequestManagementService.submitOwnerInsurerApprovalSignV2(
+        claimRequestId,
+        agreed,
+        typeof branchId === "string" ? branchId : "",
+        sign,
+        fileReviewer.sub,
+        fileReviewer,
+      );
+    } catch (error) {
+      if (error instanceof HttpException) throw error;
+      throw new InternalServerErrorException(
+        error instanceof Error ? error.message : "Failed to submit signature",
+      );
+    }
+  }
+
  // ─── Walk-around video ────────────────────────────────────────────────────────

  @Patch("car-capture/:claimRequestId")
--- a/src/request-management/registrar-blame.mirror.controller.ts
+++ b/src/request-management/registrar-blame.mirror.controller.ts
@@ -28,6 +28,7 @@ import { MediaPolicyService } from "src/media-policy/media-policy.service";
 import { DEFAULT_MEDIA_MAX_BYTES } from "src/client/client.service";
 import { RoleEnum } from "src/Types&Enums/role.enum";
 import { AddPlateDto } from "src/profile/dto/user/AddPlateDto";
+import { InitialFormVinDto } from "./dto/create-request-management.dto";
 import {
  CarBodyFormDto,
  DescriptionDto,
@@ -165,6 +166,29 @@ export class RegistrarBlameMirrorController {
    );
  }

+  @Post("/initial-form-vin/:requestId")
+  @ApiParam({ name: "requestId" })
+  @ApiBody({ type: InitialFormVinDto })
+  @ApiOperation({
+    summary: "[Registrar mirror] Initial form via VIN/chassis inquiry for current party",
+    description:
+      "VIN alternative to initial-form. Uses ESG chassis lookup instead of plate-based inquiry. " +
+      "Fills the FIRST or SECOND party insurance/vehicle data depending on the current workflow step.",
+  })
+  async initialFormVin(
+    @Param("requestId") requestId: string,
+    @Body() body: InitialFormVinDto,
+    @CurrentUser() registrar: any,
+    @Body("partyRole") partyRole?: string,
+  ) {
+    return this.requestManagementService.initialFormVinV2(
+      requestId,
+      body,
+      registrar,
+      partyRole,
+    );
+  }
+
  @ApiBody({
    schema: {
      type: "object",
--- a/src/request-management/request-management.module.ts
+++ b/src/request-management/request-management.module.ts
@@ -50,6 +50,7 @@ import { FileReviewerBlameV5Controller } from "./file-reviewer-blame-v5.controll
 import { FileMakerClaimApprovalV5Controller } from "./file-maker-claim-approval-v5.controller";
 import { InquiryRefreshController } from "./inquiry-refresh.controller";
 import { InquiryRefreshService } from "./inquiry-refresh.service";
+import { CallCenterBlameV6Controller } from "./call-center-blame-v6.controller";

@Module({
  imports: [
@@ -92,6 +93,7 @@ import { InquiryRefreshService } from "./inquiry-refresh.service";
    FileReviewerBlameV5Controller,
    FileMakerClaimApprovalV5Controller,
    InquiryRefreshController,
+    CallCenterBlameV6Controller,
  ],
  providers: [
    RequestManagementService,
--- a/src/request-management/request-management.service.ts
+++ b/src/request-management/request-management.service.ts
@@ -42,7 +42,7 @@ import { ClaimStatus } from "src/Types&Enums/claim-request-management/claimStatu
 import { ClaimWorkflowStep } from "src/Types&Enums/claim-request-management/claim-workflow-steps.enum";
 import { resolveClaimOwnerFieldsFromBlame } from "src/helpers/blame-damaged-party";
 import { ExpertAccidentFieldsDto } from "./dto/expert-accident-fields.dto";
-import { RunInquiriesV3Dto } from "./dto/run-inquiries-v3.dto";
+import { RunInquiriesV3Dto, RunInquiriesVinV3Dto } from "./dto/run-inquiries-v3.dto";
 import { SandHubService } from "src/sand-hub/sand-hub.service";
 import { ReqBlameStatus } from "src/Types&Enums/blame-request-management/status.enum";
 import { StepsEnum } from "src/Types&Enums/blame-request-management/steps.enum";
@@ -2319,6 +2319,7 @@ export class RequestManagementService {
          const url = this.smsOrchestrationService.buildInviteLink(
            frontendRoute,
            requestId,
+            "v1",
          );
          await this.smsOrchestrationService.sendInviteLink(
            secondPartyPhone,
@@ -2372,6 +2373,7 @@ export class RequestManagementService {
      const url = this.smsOrchestrationService.buildInviteLink(
        frontendRoute,
        requestId,
+        "v1",
      );
      await this.smsOrchestrationService.sendInviteLink(
        phoneNumber,
@@ -3485,6 +3487,7 @@ export class RequestManagementService {
    const URL = this.smsOrchestrationService.buildInviteLink(
      frontendRoutes,
      requestId,
+      "v1",
    );
    await this.smsOrchestrationService.sendInviteLink(
      phoneNumber,
@@ -4927,6 +4930,7 @@ export class RequestManagementService {
    const firstLink = this.smsOrchestrationService.buildBlamePartyLink(
      requestId,
      "FIRST",
+      "v2",
    );
    const smsSent = await this.smsOrchestrationService.sendFieldExpertLink({
      receptor: phone,
@@ -8365,6 +8369,7 @@ export class RequestManagementService {
              targetPhone === request?.parties[0]?.person.phoneNumber
                ? "FIRST"
                : "SECOND",
+              "v1",
            );
            await this.smsOrchestrationService.sendThirdPartyDamagedPartyClaimLinkNotice(
              {
@@ -9148,6 +9153,399 @@ export class RequestManagementService {
    };
  }

+  /**
+   * VIN variant of `runInquiriesV3`.
+   * Identical flow, but calls `getPolicyByChassisInquiry` instead of
+   * `getTejaratBlockInquiry` for the primary policy lookup.
+   */
+  async runInquiriesVinV3(
+    requestId: string,
+    actor: any,
+    dto: RunInquiriesVinV3Dto,
+  ): Promise<{
+    blameRequestId: string;
+    partyRole: PartyRole;
+    claimRequestId?: string;
+    claimPublicId?: string;
+    message: string;
+  }> {
+    const req = await this.blameRequestDbService.findById(requestId);
+    if (!req) throw new NotFoundException("Blame request not found");
+    this.assertBlameV3ExpertInPerson(req);
+    await this.verifyExpertAccessForBlameV2(req, actor);
+
+    const partyRole = this.resolveV3InquiryPartyRole(req);
+    if (!partyRole) {
+      throw new ConflictException("All party inquiries are already complete.");
+    }
+
+    if (partyRole === PartyRole.FIRST) {
+      const firstIdx = this.getPartyIndex(req, PartyRole.FIRST);
+      if (firstIdx === -1)
+        throw new BadRequestException("First party not found");
+      const firstParty = req.parties[firstIdx];
+      if (!firstParty?.person?.userId) {
+        throw new BadRequestException(
+          "Guilty party OTP must be verified before running inquiries.",
+        );
+      }
+      if (req.type === BlameRequestType.CAR_BODY) {
+        const form = firstParty.carBodyFirstForm as any;
+        if (form?.car == null && form?.object == null) {
+          throw new BadRequestException(
+            "Submit car-body-form before running inquiries (CAR_BODY).",
+          );
+        }
+      }
+
+      await this.runPartyInquiriesVinV3Internal(
+        req,
+        dto,
+        PartyRole.FIRST,
+        firstParty,
+      );
+      if (req.type === BlameRequestType.CAR_BODY) {
+        await this.validateShebaV3(
+          dto as any,
+          firstParty.person?.clientId?.toString(),
+        );
+      }
+
+      this.markPartyInquiriesCompleteOnBlame(req, PartyRole.FIRST, actor);
+      await (req as any).save();
+
+      const nationalCode =
+        dto.nationalCodeOfInsurer || dto.nationalCodeOfDriver || "";
+      const newClaim = await this.createV3ClaimFromBlame(req, actor, {
+        sheba: req.type === BlameRequestType.CAR_BODY ? dto.sheba : undefined,
+        nationalCode:
+          req.type === BlameRequestType.CAR_BODY ? nationalCode : undefined,
+        interimThirdParty: req.type === BlameRequestType.THIRD_PARTY,
+      });
+
+      return {
+        blameRequestId: requestId,
+        partyRole: PartyRole.FIRST,
+        claimRequestId: String(newClaim._id),
+        claimPublicId: req.publicId,
+        message:
+          "Guilty-party inquiries complete and claim created. Proceed with location, description, voice, and signature.",
+      };
+    }
+
+    // Damaged party (THIRD_PARTY only)
+    if (!this.partyHasSigned(req, PartyRole.FIRST)) {
+      throw new BadRequestException(
+        "Guilty party must sign before running damaged-party inquiries.",
+      );
+    }
+    const secondIdx = this.getPartyIndex(req, PartyRole.SECOND);
+    if (secondIdx === -1 || !req.parties[secondIdx]?.person?.userId) {
+      throw new BadRequestException(
+        "Damaged party OTP must be verified before running inquiries.",
+      );
+    }
+
+    const secondParty = req.parties[secondIdx];
+    const firstIdx = this.getPartyIndex(req, PartyRole.FIRST);
+    const firstUserId =
+      firstIdx !== -1 ? req.parties[firstIdx]?.person?.userId : null;
+    const secondUserId = secondParty.person?.userId;
+    if (
+      firstUserId &&
+      secondUserId &&
+      String(firstUserId) === String(secondUserId)
+    ) {
+      throw new BadRequestException(
+        "Guilty and damaged parties are bound to the same user account. " +
+          "Re-verify the second party OTP using a different phone number.",
+      );
+    }
+
+    await this.runPartyInquiriesVinV3Internal(
+      req,
+      dto,
+      PartyRole.SECOND,
+      secondParty,
+    );
+    await this.validateShebaV3(
+      dto as any,
+      secondParty.person?.clientId?.toString(),
+    );
+
+    this.ensureV3GuiltyPartyDecision(req);
+    if (typeof (req as any).markModified === "function") {
+      (req as any).markModified("parties");
+    }
+    await (req as any).save();
+
+    await this.syncV3ClaimDamagedPartyFromBlame(req, dto as any);
+
+    this.markPartyInquiriesCompleteOnBlame(req, PartyRole.SECOND, actor);
+    await (req as any).save();
+
+    return {
+      blameRequestId: requestId,
+      partyRole: PartyRole.SECOND,
+      message:
+        "Damaged-party inquiries complete. Proceed with location, description, voice, and signature.",
+    };
+  }
+
+  /**
+   * VIN variant of `runPartyInquiriesV3Internal`.
+   * Calls `getPolicyByChassisInquiry` (ESG chassis lookup) instead of
+   * `getTejaratBlockInquiry` (plate-based). All other inquiries (personal,
+   * driving licence, car-body for CAR_BODY) are unchanged.
+   */
+  private async runPartyInquiriesVinV3Internal(
+    req: any,
+    partyData: RunInquiriesVinV3Dto,
+    partyRole: PartyRole,
+    party: any,
+  ): Promise<{ clientId?: string }> {
+    const roleLabel = partyRole === PartyRole.FIRST ? "FIRST" : "SECOND";
+    let clientId: string | undefined;
+    const inquiryOptions = (cid?: string) =>
+      cid ? { clientId: cid } : undefined;
+
+    let inquiryRaw: any;
+    let inquiryMapped: any;
+    try {
+      const inquiry = await this.sandHubService.getPolicyByChassisInquiry(
+        partyData.vin,
+        inquiryOptions(party?.person?.clientId?.toString()),
+      );
+      inquiryRaw = inquiry.raw;
+      inquiryMapped = inquiry.mapped;
+      this.recordPartyCaseInquiryStatus(req, "thirdParty", partyRole, true, {
+        source: "ESG_VIN_INQUIRY",
+        raw: inquiryRaw,
+        mapped: inquiryMapped,
+      });
+    } catch (err: any) {
+      this.logger.error(
+        `[V3-VIN] vin inquiry failed for ${roleLabel} party (request=${req._id}): ${err?.message || err}`,
+      );
+      this.recordPartyCaseInquiryStatus(
+        req,
+        "thirdParty",
+        partyRole,
+        false,
+        {},
+        err,
+      );
+      throw new BadRequestException(
+        `${roleLabel} party VIN inquiry failed: ${err?.message || "استعلام در دسترس نیست"}`,
+      );
+    }
+
+    if (inquiryMapped?.Error) {
+      throw new BadRequestException(
+        inquiryMapped.Error.Message ||
+          `${roleLabel} party VIN inquiry returned an error`,
+      );
+    }
+
+    const clientName = inquiryMapped?.CompanyName;
+    const companyCode = inquiryMapped?.CompanyCode;
+    if (!clientName) {
+      throw new BadRequestException(
+        `CompanyName missing from ${roleLabel} party VIN inquiry response`,
+      );
+    }
+    const client = await this.clientService.findOrCreateClientByCompanyCode(
+      companyCode,
+      clientName,
+    );
+    if (!client) {
+      throw new BadRequestException(
+        `CompanyCode missing or invalid in ${roleLabel} party VIN inquiry response`,
+      );
+    }
+    const resolvedClientId = (client as any)?._id ?? (client as any)?._doc?._id;
+    clientId = resolvedClientId ? String(resolvedClientId) : undefined;
+
+    if (!party.person) party.person = {} as any;
+    party.person.clientId = resolvedClientId;
+    party.person.nationalCodeOfInsurer = partyData.nationalCodeOfInsurer;
+    party.person.nationalCodeOfDriver = partyData.nationalCodeOfDriver;
+    party.person.driverIsInsurer = partyData.driverIsInsurer;
+    party.person.insurerBirthday = partyData.insurerBirthday;
+    party.person.driverBirthday =
+      partyData.driverBirthday ??
+      (partyData.driverIsInsurer ? String(partyData.insurerBirthday) : null);
+    if (partyData.insurerLicense)
+      party.person.insurerLicense = partyData.insurerLicense;
+    if (partyData.driverLicense)
+      party.person.driverLicense = partyData.driverLicense;
+
+    if (!party.vehicle) party.vehicle = {} as any;
+    party.vehicle.plateId = partyData.vin; // store VIN as vehicle identifier
+    party.vehicle.name = inquiryMapped?.MapTypNam;
+    party.vehicle.type = `${inquiryMapped?.UsageField ?? ""} / ${inquiryMapped?.UsageName ?? inquiryMapped?.MapUsageName ?? "-"}`;
+    party.vehicle.inquiry = {
+      source: "ESG_VIN_INQUIRY",
+      raw: inquiryRaw,
+      mapped: inquiryMapped,
+    };
+
+    if (!party.insurance) party.insurance = {} as any;
+    party.insurance.policyNumber = inquiryMapped?.PrntPlcyCmpDocNo;
+    party.insurance.company = clientName;
+    party.insurance.financialCeiling = inquiryMapped?.FinancialCvrCptl;
+    party.insurance.startDate = inquiryMapped?.IssueDate;
+    party.insurance.endDate = inquiryMapped?.EndDate;
+
+    if (
+      req.type === BlameRequestType.CAR_BODY &&
+      partyRole === PartyRole.FIRST
+    ) {
+      try {
+        const carBodyInfo = await this.sandHubService.getTejaratCarBodyInquiry(
+          {
+            nationalCodeOfInsurer: partyData.nationalCodeOfInsurer,
+            plate: partyData.vin as any, // VIN used as identifier for CAR_BODY
+          },
+          clientId ? { clientId } : undefined,
+        );
+        this.recordPartyCaseInquiryStatus(req, "carBody", partyRole, true, {
+          source: "TEJARAT_CAR_BODY_VIN_INQUIRY",
+          raw: carBodyInfo.raw,
+          mapped: carBodyInfo.mapped,
+        });
+        party.vehicle.inquiry = {
+          ...party.vehicle.inquiry,
+          carBody: {
+            source: "TEJARAT_CAR_BODY_VIN_INQUIRY",
+            raw: carBodyInfo.raw,
+            mapped: carBodyInfo.mapped,
+          },
+        };
+        const m = carBodyInfo.mapped;
+        (party.insurance as any).carBodyInsurance = {
+          policyNumber: m.policyNumber ?? null,
+          companyId: m.companyId ?? null,
+          companyName: m.CompanyName ?? null,
+        };
+        const cbCompanyCode = m.companyId ?? m.CompanyCode;
+        const cbCompanyName = m.CompanyName ?? m.companyPersianName;
+        if (cbCompanyCode && cbCompanyName) {
+          const cbClient =
+            await this.clientService.findOrCreateClientByCompanyCode(
+              Number(cbCompanyCode),
+              String(cbCompanyName),
+            );
+          const cbClientId =
+            (cbClient as any)?._id ?? (cbClient as any)?._doc?._id;
+          if (cbClientId) {
+            party.person.clientId = cbClientId;
+            clientId = String(cbClientId);
+          }
+        }
+      } catch (err: any) {
+        this.logger.error(
+          `[V3-VIN] car body inquiry failed for request=${req._id}: ${err?.message || err}`,
+        );
+        this.recordPartyCaseInquiryStatus(
+          req,
+          "carBody",
+          partyRole,
+          false,
+          {},
+          err,
+        );
+        throw new BadRequestException(
+          `CAR_BODY VIN inquiry failed: ${err?.message || "استعلام در دسترس نیست"}`,
+        );
+      }
+    }
+
+    const nationalCode =
+      partyData.nationalCodeOfInsurer || partyData.nationalCodeOfDriver;
+    const birthDate = partyData.insurerBirthday ?? partyData.driverBirthday;
+    if (nationalCode && birthDate != null) {
+      try {
+        const personalInquiry = await this.sandHubService.getPersonalInquiry(
+          nationalCode,
+          birthDate as string | number,
+          clientId ? { clientId } : undefined,
+        );
+        this.recordPartyCaseInquiryStatus(
+          req,
+          "person",
+          partyRole,
+          true,
+          personalInquiry,
+        );
+      } catch (err: any) {
+        this.logger.error(
+          `[V3-VIN] personal inquiry failed for ${roleLabel} party request=${req._id}: ${err?.message || err}`,
+        );
+        this.recordPartyCaseInquiryStatus(
+          req,
+          "person",
+          partyRole,
+          false,
+          {},
+          err,
+        );
+        throw new BadRequestException(
+          `${roleLabel} party personal identity inquiry failed: ${err?.message || "استعلام در دسترس نیست"}`,
+        );
+      }
+    }
+
+    const licenseNationalCode = partyData.driverIsInsurer
+      ? partyData.nationalCodeOfInsurer
+      : partyData.nationalCodeOfDriver;
+    const licenseNumber = partyData.driverIsInsurer
+      ? partyData.insurerLicense
+      : partyData.driverLicense;
+
+    if (!licenseNumber) {
+      this.recordPartyCaseInquiryStatus(
+        req,
+        "drivingLicence",
+        partyRole,
+        false,
+        { skipped: true, reason: "No license number provided" },
+      );
+    } else {
+      try {
+        const licenseInquiry = await this.sandHubService.getDrivingLicenseInfo(
+          licenseNationalCode,
+          licenseNumber,
+          clientId ? { clientId } : undefined,
+        );
+        this.recordPartyCaseInquiryStatus(
+          req,
+          "drivingLicence",
+          partyRole,
+          true,
+          licenseInquiry,
+        );
+      } catch (err: any) {
+        this.logger.error(
+          `[V3-VIN] driving license inquiry failed for ${roleLabel} party request=${req._id}: ${err?.message || err}`,
+        );
+        this.recordPartyCaseInquiryStatus(
+          req,
+          "drivingLicence",
+          partyRole,
+          false,
+          {},
+          err,
+        );
+        throw new BadRequestException(
+          `${roleLabel} party driving license inquiry failed: ${err?.message || "استعلام در دسترس نیست"}`,
+        );
+      }
+    }
+
+    return { clientId };
+  }
+
  private assertBlameV3PartyDetailPhase(req: any, partyRole: PartyRole): void {
    this.assertBlameV3ExpertInPerson(req);
    if (partyRole === PartyRole.FIRST) {
@@ -9368,16 +9766,26 @@ export class RequestManagementService {
      },
    };

+    if (typeof (req as any).markModified === "function") {
+      (req as any).markModified("expert");
+    }
+
    if (!Array.isArray(req.history)) req.history = [];
-    req.history.push({
-      type: "V3_ACCIDENT_FIELDS_SAVED",
-      actor: {
-        actorId: new Types.ObjectId(String(expert.sub)),
-        actorName: `${expert.firstName || ""} ${expert.lastName || ""}`.trim(),
-        actorType: "field_expert",
-      },
-      metadata: { accidentWay: fields.accidentWay },
-    } as any);
+    // Avoid duplicate history entries on idempotent retries.
+    const alreadyRecorded = (req.history as any[]).some(
+      (e: any) => e?.type === "V3_ACCIDENT_FIELDS_SAVED",
+    );
+    if (!alreadyRecorded) {
+      req.history.push({
+        type: "V3_ACCIDENT_FIELDS_SAVED",
+        actor: {
+          actorId: new Types.ObjectId(String(expert.sub)),
+          actorName: `${expert.firstName || ""} ${expert.lastName || ""}`.trim(),
+          actorType: "field_expert",
+        },
+        metadata: { accidentWay: fields.accidentWay },
+      } as any);
+    }

    await (req as any).save();

@@ -10075,4 +10483,251 @@ export class RequestManagementService {
      );
    }
  }
+
+  // ── V6 call-center flow ────────────────────────────────────────────────
+
+  /**
+   * V6: Create a LINK blame file initiated by a call-center agent.
+   * Always LINK + CUSTOMER-filled (user fills the form after receiving the SMS).
+   * `skipInitialFormStep` is set so the user-side page skips the inquiry step
+   * (the agent already ran it via runCallCenterInquiryV6).
+   */
+  async createCallCenterInitiatedBlameV6(
+    agent: any,
+    dto: { type: "THIRD_PARTY" | "CAR_BODY" },
+  ): Promise<{ requestId: string; publicId: string }> {
+    if (agent?.role !== RoleEnum.CALL_CENTER) {
+      throw new ForbiddenException("Only call-center agents can use this endpoint.");
+    }
+    const agentId = new Types.ObjectId(agent.sub);
+    const type =
+      dto.type === "CAR_BODY"
+        ? BlameRequestType.CAR_BODY
+        : BlameRequestType.THIRD_PARTY;
+
+    const firstStep = await this.getWorkflowStep({ stepNumber: 1 });
+    if (!firstStep?.stepKey) {
+      throw new InternalServerErrorException(
+        "Workflow stepNumber=1 not configured in step manager",
+      );
+    }
+    const nextStepFromManager = firstStep.nextPossibleSteps?.[0];
+    const nextStep =
+      type === BlameRequestType.CAR_BODY
+        ? (WorkflowStep.CAR_BODY_ACCIDENT_TYPE as WorkflowStep)
+        : (nextStepFromManager as WorkflowStep);
+    if (!nextStep) {
+      throw new InternalServerErrorException(
+        "Workflow stepNumber=1 has no nextPossibleSteps configured",
+      );
+    }
+
+    const publicId = await this.publicIdService.generateRequestPublicId();
+
+    const created = await this.blameRequestDbService.create({
+      publicId,
+      requestNo: publicId,
+      type,
+      parties: [{ role: PartyRole.FIRST, person: {} }],
+      workflow: {
+        currentStep: firstStep.stepKey as WorkflowStep,
+        nextStep,
+        completedSteps: [firstStep.stepKey as WorkflowStep],
+        locked: false,
+      },
+      history: [],
+      callCenterInitiated: true,
+      initiatedByCallCenterId: agentId,
+      creationMethod: CreationMethod.LINK,
+      filledBy: FilledBy.CUSTOMER,
+      // User-side page should skip the inquiry/initial-form step
+      skipInitialFormStep: true,
+    });
+
+    const requestId = String((created as any)._id);
+    if (!Array.isArray((created as any).history)) (created as any).history = [];
+    (created as any).history.push({
+      type: "FILE_CREATED_BY_CALL_CENTER",
+      actor: {
+        actorId: agentId,
+        actorName: `${agent.firstName || ""} ${agent.lastName || ""}`.trim(),
+        actorType: RoleEnum.CALL_CENTER,
+      },
+      metadata: { creationMethod: CreationMethod.LINK, type: dto.type },
+    });
+    await (created as any).save();
+
+    return { requestId, publicId: (created as any).publicId };
+  }
+
+  /**
+   * V6: Run plate + personal inquiry for the guilty party on behalf of the caller.
+   * Stores the inquiry results on the blame's first party (same as V3 guilty-party path)
+   * but does NOT create a claim — the user will do that after filling the form via the link.
+   * Note: sheba is intentionally absent — the user provides their own IBAN later.
+   */
+  async runCallCenterInquiryV6(
+    agent: any,
+    requestId: string,
+    dto: Omit<RunInquiriesV3Dto, "sheba">,
+  ): Promise<{ blameRequestId: string; message: string }> {
+    if (agent?.role !== RoleEnum.CALL_CENTER) {
+      throw new ForbiddenException("Only call-center agents can use this endpoint.");
+    }
+    const req = await this.blameRequestDbService.findById(requestId);
+    if (!req) throw new NotFoundException("Blame request not found");
+    if (!req.callCenterInitiated || String(req.initiatedByCallCenterId) !== String(agent.sub)) {
+      throw new ForbiddenException("You can only access files that you have initiated.");
+    }
+
+    const firstIdx = this.getPartyIndex(req, PartyRole.FIRST);
+    if (firstIdx === -1) throw new BadRequestException("First party not found");
+    const firstParty = req.parties[firstIdx];
+
+    await this.runPartyInquiriesV3Internal(req, dto, PartyRole.FIRST, firstParty);
+    this.markPartyInquiriesCompleteOnBlame(req, PartyRole.FIRST, agent);
+    if (!Array.isArray((req as any).history)) (req as any).history = [];
+    (req as any).history.push({
+      type: "CALL_CENTER_INQUIRY_COMPLETED",
+      actor: {
+        actorId: new Types.ObjectId(agent.sub),
+        actorName: `${agent.firstName || ""} ${agent.lastName || ""}`.trim(),
+        actorType: RoleEnum.CALL_CENTER,
+      },
+      metadata: { partyRole: PartyRole.FIRST },
+    });
+    await (req as any).save();
+
+    return {
+      blameRequestId: requestId,
+      message: "Guilty-party inquiry complete. You can now send the blame link to the user.",
+    };
+  }
+
+  /**
+   * V6: Send the blame link to the guilty party's phone number.
+   * Registers/looks up the user by phone and stores them as the first party, then
+   * sends the SMS link so the user can fill in the rest of the form via the v2 flow.
+   */
+  async sendCallCenterLinkV6(
+    agent: any,
+    requestId: string,
+    dto: { phoneNumber: string },
+  ): Promise<{ sent: boolean; sentTo: { role: string; phoneNumber: string; smsSent: boolean; linkUrl: string }[] }> {
+    if (agent?.role !== RoleEnum.CALL_CENTER) {
+      throw new ForbiddenException("Only call-center agents can use this endpoint.");
+    }
+    const req = await this.blameRequestDbService.findById(requestId);
+    if (!req) throw new NotFoundException("Request not found");
+    if (!req.callCenterInitiated || String(req.initiatedByCallCenterId) !== String(agent.sub)) {
+      throw new ForbiddenException("You can only access files that you have initiated.");
+    }
+    if (!process.env.URL) {
+      throw new InternalServerErrorException("URL environment variable is not configured");
+    }
+
+    const phone = (dto?.phoneNumber || "").trim();
+    if (!phone) throw new BadRequestException("phoneNumber is required");
+
+    const firstIdx = this.getPartyIndex(req, PartyRole.FIRST);
+    if (firstIdx === -1) throw new BadRequestException("First party not found on request");
+    const userId = await this.getOrCreateUserByPhoneNumber(phone);
+    if (!req.parties[firstIdx].person) req.parties[firstIdx].person = {} as any;
+    req.parties[firstIdx].person.phoneNumber = normalizeIranMobile(phone) ?? phone;
+    req.parties[firstIdx].person.userId = userId;
+
+    const expertName = `${agent?.lastName || ""}`.trim() || "اپراتور";
+    const firstLink = this.smsOrchestrationService.buildBlamePartyLink(requestId, "FIRST", "v6");
+    const smsSent = await this.smsOrchestrationService.sendFieldExpertLink({
+      receptor: phone,
+      type: req.type,
+      expertLastName: expertName,
+      link: firstLink,
+    });
+
+    const sentTo = [{ role: PartyRole.FIRST, phoneNumber: phone, smsSent, linkUrl: firstLink }];
+
+    if (!Array.isArray((req as any).history)) (req as any).history = [];
+    (req as any).history.push({
+      type: "CALL_CENTER_LINK_SENT",
+      actor: {
+        actorId: new Types.ObjectId(agent.sub),
+        actorName: `${agent.firstName || ""} ${agent.lastName || ""}`.trim(),
+        actorType: RoleEnum.CALL_CENTER,
+      },
+      metadata: { sentTo },
+    });
+    await (req as any).save();
+
+    return { sent: smsSent, sentTo };
+  }
+
+  /**
+   * V6: Get a single blame file detail for the call-center agent who created it.
+   */
+  async getCallCenterBlameDetailV6(agent: any, requestId: string): Promise<any> {
+    if (agent?.role !== RoleEnum.CALL_CENTER) {
+      throw new ForbiddenException("Only call-center agents can use this endpoint.");
+    }
+    const req = await this.blameRequestDbService.findById(requestId);
+    if (!req) throw new NotFoundException("Blame request not found");
+    if (!req.callCenterInitiated || String(req.initiatedByCallCenterId) !== String(agent.sub)) {
+      throw new ForbiddenException("You can only access files that you have initiated.");
+    }
+    return {
+      _id: (req as any)._id,
+      publicId: (req as any).publicId,
+      requestNo: (req as any).requestNo,
+      type: (req as any).type,
+      status: (req as any).status,
+      blameStatus: (req as any).blameStatus,
+      workflow: (req as any).workflow,
+      skipInitialFormStep: (req as any).skipInitialFormStep,
+      parties: ((req as any).parties ?? []).map((p: any) => ({
+        role: p.role,
+        person: {
+          phoneNumber: p.person?.phoneNumber,
+          nationalCodeOfInsurer: p.person?.nationalCodeOfInsurer,
+          clientId: p.person?.clientId,
+        },
+        insurance: p.insurance
+          ? {
+              company: p.insurance.company,
+              policyNumber: p.insurance.policyNumber,
+              startDate: p.insurance.startDate,
+              endDate: p.insurance.endDate,
+            }
+          : undefined,
+        vehicle: p.vehicle
+          ? { plateId: p.vehicle.plateId, name: p.vehicle.name }
+          : undefined,
+      })),
+      createdAt: (req as any).createdAt,
+    };
+  }
+
+  /**
+   * V6: List blame files created by this call-center agent.
+   */
+  async getMyCallCenterFilesV6(agent: any): Promise<any[]> {
+    if (agent?.role !== RoleEnum.CALL_CENTER) {
+      throw new ForbiddenException("Only call-center agents can use this endpoint.");
+    }
+    const agentId = new Types.ObjectId(agent.sub);
+    const files = await this.blameRequestDbService.find({
+      callCenterInitiated: true,
+      initiatedByCallCenterId: agentId,
+    });
+    return (files || []).map((f: any) => ({
+      _id: f._id,
+      publicId: f.publicId,
+      requestNo: f.requestNo,
+      type: f.type,
+      status: f.status,
+      blameStatus: f.blameStatus,
+      workflow: f.workflow,
+      skipInitialFormStep: f.skipInitialFormStep,
+      createdAt: f.createdAt,
+    }));
+  }
 }
--- a/src/sms-orchestration/provider/sms-gateway.module.ts
+++ b/src/sms-orchestration/provider/sms-gateway.module.ts
@@ -1,6 +1,7 @@
 import { HttpModule } from "@nestjs/axios";
 import { Module } from "@nestjs/common";
-import { ConfigModule } from "@nestjs/config";
+import { ConfigModule, ConfigService } from "@nestjs/config";
+import { createHttpModuleOptions } from "src/core/config/http-proxy.factory";

 import { KavenegarService } from "./kavenegar.service";
 import { KavenegarSmsGateway } from "./kavenegar-sms.gateway";
@@ -8,7 +9,14 @@ import { ParsianSmsGateway } from "./parsian-sms.gateway";
 import { SmsGatewayService } from "./sms-gateway.service";

@Module({
-  imports: [HttpModule, ConfigModule],
+  imports: [
+    HttpModule.registerAsync({
+      imports: [ConfigModule],
+      inject: [ConfigService],
+      useFactory: createHttpModuleOptions,
+    }),
+    ConfigModule,
+  ],
  providers: [
    KavenegarService,
    KavenegarSmsGateway,
--- a/src/sms-orchestration/sms-orchestration.module.ts
+++ b/src/sms-orchestration/sms-orchestration.module.ts
@@ -6,10 +6,16 @@ import { SmsGatewayModule } from "./provider/sms-gateway.module";
 import { OtpGeneratorService } from "./otp-generator.service";
 import { SmsOrchestrationService } from "./sms-orchestration.service";
 import { HttpModule } from "@nestjs/axios";
+import { ConfigModule, ConfigService } from "@nestjs/config";
+import { createHttpModuleOptions } from "src/core/config/http-proxy.factory";

@Module({
  imports: [
-    HttpModule,
+    HttpModule.registerAsync({
+      imports: [ConfigModule],
+      inject: [ConfigService],
+      useFactory: createHttpModuleOptions,
+    }),
    SmsGatewayModule,
    MongooseModule.forFeature([{ name: SmsText.name, schema: SmsTextSchema }]),
  ],
--- a/src/sms-orchestration/sms-orchestration.service.ts
+++ b/src/sms-orchestration/sms-orchestration.service.ts
@@ -37,20 +37,25 @@ export class SmsOrchestrationService implements OnModuleInit {
    );
  }

-  buildInviteLink(frontendRoute: string, requestId: string): string {
-    return `${process.env.URL}/${process.env.USER_BASE_PATH}/${frontendRoute}?token=${requestId}`;
+  buildInviteLink(
+    frontendRoute: string,
+    requestId: string,
+    versionPrefix: string,
+  ): string {
+    return `${process.env.URL}/${versionPrefix}/${frontendRoute}?token=${requestId}`;
  }

  buildBlamePartyLink(
    requestId: string,
    partyRole: "FIRST" | "SECOND",
+    versionPrefix: string,
  ): string {
    const route = partyRole === "SECOND" ? "user2" : "user";
-    return `${process.env.URL}/${process.env.USER_BASE_PATH}/${route}?token=${requestId}`;
+    return `${process.env.URL}/${versionPrefix}/${route}?token=${requestId}`;
  }

-  buildClaimLink(claimRequestId: string): string {
-    return `${process.env.URL}/${process.env.USER_BASE_PATH}/caseClaim?token=${claimRequestId}`;
+  buildClaimLink(claimRequestId: string, versionPrefix: string): string {
+    return `${process.env.URL}/${versionPrefix}/caseClaim?token=${claimRequestId}`;
  }

  async sendInviteLink(
--- a/src/super-admin/dto/super-admin.dto.ts
+++ b/src/super-admin/dto/super-admin.dto.ts
@@ -74,3 +74,37 @@ export class CreateRegistrarAdminDto {
  @IsNotEmpty()
  clientId: string;
 }
+
+export class CreateCallCenterAgentDto {
+  @ApiProperty({ example: "agent@insurer.ir" })
+  @IsEmail()
+  email: string;
+
+  @ApiProperty({ example: "CallCenter@724" })
+  @IsString()
+  @IsNotEmpty()
+  password: string;
+
+  @ApiProperty({ example: "Sara" })
+  @IsString()
+  @IsNotEmpty()
+  firstName: string;
+
+  @ApiProperty({ example: "Hosseini" })
+  @IsString()
+  @IsNotEmpty()
+  lastName: string;
+
+  @ApiProperty({
+    example: "664a1b2c3d4e5f6789012345",
+    description: "Mongo ObjectId of the insurer client this agent belongs to.",
+  })
+  @IsString()
+  @IsNotEmpty()
+  clientId: string;
+
+  @ApiPropertyOptional({ example: "09121234567" })
+  @IsOptional()
+  @IsString()
+  mobile?: string;
+}
--- a/src/super-admin/super-admin.controller.ts
+++ b/src/super-admin/super-admin.controller.ts
@@ -26,6 +26,7 @@ import {
  CreateSuperAdminDto,
  CreateFieldExpertAdminDto,
  CreateRegistrarAdminDto,
+  CreateCallCenterAgentDto,
 } from "./dto/super-admin.dto";
 import { ClientDto } from "src/client/dto/create-client.dto";
 import {
@@ -151,6 +152,13 @@ export class SuperAdminController {
    return this.superAdminService.createRegistrar(body);
  }

+  @Post("create-call-center-agent")
+  @ApiOperation({ summary: "Create a call-center agent for a given client" })
+  @ApiBody({ type: CreateCallCenterAgentDto })
+  createCallCenterAgent(@Body() body: CreateCallCenterAgentDto) {
+    return this.superAdminService.createCallCenterAgent(body);
+  }
+
  // ── System settings ──────────────────────────────────────────────────────

  @Get("system-settings")
--- a/src/super-admin/super-admin.service.ts
+++ b/src/super-admin/super-admin.service.ts
@@ -19,10 +19,12 @@ import {
  CreateSuperAdminDto,
  CreateFieldExpertAdminDto,
  CreateRegistrarAdminDto,
+  CreateCallCenterAgentDto,
 } from "./dto/super-admin.dto";
 import { RoleEnum } from "src/Types&Enums/role.enum";
 import { FieldExpertDbService } from "src/users/entities/db-service/field-expert.db.service";
 import { RegistrarDbService } from "src/users/entities/db-service/registrar.db.service";
+import { CallCenterAgentDbService } from "src/users/entities/db-service/call-center-agent.db.service";

@Injectable()
 export class SuperAdminService {
@@ -33,6 +35,7 @@ export class SuperAdminService {
    private readonly actorAuthService: ActorAuthService,
    private readonly fieldExpertDbService: FieldExpertDbService,
    private readonly registrarDbService: RegistrarDbService,
+    private readonly callCenterAgentDbService: CallCenterAgentDbService,
  ) {}

  /** List all super-admin accounts (sans password). */
@@ -99,4 +102,28 @@ export class SuperAdminService {
  async createRegistrar(body: CreateRegistrarAdminDto) {
    return this.actorAuthService.createRegistrarMock(body);
  }
+
+  async createCallCenterAgent(body: CreateCallCenterAgentDto) {
+    const email = body.email.toLowerCase().trim();
+    const existing = await this.callCenterAgentDbService.findOne({ email });
+    if (existing) {
+      throw new ConflictException(
+        "A call-center agent with this email already exists.",
+      );
+    }
+    const password = await this.hashService.hash(body.password);
+    const created = await this.callCenterAgentDbService.create({
+      email,
+      password,
+      firstName: body.firstName,
+      lastName: body.lastName,
+      clientKey: new Types.ObjectId(body.clientId),
+      mobile: body.mobile,
+      role: RoleEnum.CALL_CENTER,
+    });
+    const { password: _pw, ...rest } = (created as any).toObject
+      ? (created as any).toObject()
+      : (created as any);
+    return rest;
+  }
 }
--- a/src/users/entities/db-service/call-center-agent.db.service.ts
+++ b/src/users/entities/db-service/call-center-agent.db.service.ts
@@ -0,0 +1,50 @@
+import { Injectable } from "@nestjs/common";
+import { InjectModel } from "@nestjs/mongoose";
+import { FilterQuery, Model, Types } from "mongoose";
+import { CallCenterAgentModel } from "../schema/call-center-agent.schema";
+
+@Injectable()
+export class CallCenterAgentDbService {
+  constructor(
+    @InjectModel(CallCenterAgentModel.name)
+    private readonly model: Model<CallCenterAgentModel>,
+  ) {}
+
+  async create(
+    data: Partial<CallCenterAgentModel> & { password: string },
+  ): Promise<CallCenterAgentModel> {
+    return this.model.create(data);
+  }
+
+  async findOne(
+    filter: FilterQuery<CallCenterAgentModel>,
+  ): Promise<CallCenterAgentModel | null> {
+    return this.model.findOne(filter);
+  }
+
+  async findById(id: string): Promise<CallCenterAgentModel | null> {
+    return this.model.findOne({ _id: new Types.ObjectId(id) });
+  }
+
+  async findByLoginIdentifier(
+    identifier: string,
+  ): Promise<CallCenterAgentModel | null> {
+    const id = identifier.trim();
+    const or: FilterQuery<CallCenterAgentModel>[] = [
+      { email: id },
+      { username: id },
+    ];
+    if (/^\d{10}$/.test(id)) {
+      or.push({ nationalCode: id });
+    }
+    return this.model.findOne({ $or: or });
+  }
+
+  async findAll(
+    filter: FilterQuery<CallCenterAgentModel>,
+  ): Promise<(CallCenterAgentModel & { _id: Types.ObjectId })[]> {
+    return this.model.find(filter).lean() as Promise<
+      (CallCenterAgentModel & { _id: Types.ObjectId })[]
+    >;
+  }
+}
--- a/src/users/entities/schema/call-center-agent.schema.ts
+++ b/src/users/entities/schema/call-center-agent.schema.ts
@@ -0,0 +1,61 @@
+import { Prop, Schema, SchemaFactory } from "@nestjs/mongoose";
+import { Types } from "mongoose";
+import { RoleEnum } from "src/Types&Enums/role.enum";
+
+/**
+ * Call-center agent actor.  Works under an insurance company (clientKey) and
+ * can start V6 LINK blame files on behalf of callers.
+ */
+@Schema({
+  collection: "call-center-agents",
+  versionKey: false,
+  timestamps: true,
+})
+export class CallCenterAgentModel {
+  _id?: Types.ObjectId;
+
+  @Prop({ required: true })
+  firstName: string;
+
+  @Prop({ required: true })
+  lastName: string;
+
+  @Prop({ type: String, unique: true, sparse: true, required: false })
+  email?: string;
+
+  @Prop({ type: String })
+  username?: string;
+
+  @Prop({ type: String, index: true, sparse: true })
+  nationalCode?: string;
+
+  @Prop({ type: Types.ObjectId, index: true })
+  clientKey?: Types.ObjectId;
+
+  @Prop({ required: true })
+  password: string;
+
+  @Prop({ required: false })
+  mobile?: string;
+
+  @Prop({ required: false })
+  phone?: string;
+
+  @Prop({ default: RoleEnum.CALL_CENTER })
+  role: RoleEnum;
+
+  @Prop({ type: "string", default: "" })
+  otp: string;
+
+  createdAt: Date;
+}
+
+export const CallCenterAgentDbSchema =
+  SchemaFactory.createForClass(CallCenterAgentModel);
+
+CallCenterAgentDbSchema.pre("save", function (next) {
+  if (!this.username) {
+    this.username = (this as any).email || (this as any).nationalCode;
+  }
+  next();
+});
--- a/src/users/users.module.ts
+++ b/src/users/users.module.ts
@@ -11,6 +11,7 @@ import { UserDbService } from "./entities/db-service/user.db.service";
 import { ExpertFileActivityDbService } from "./entities/db-service/expert-file-activity.db.service";
 import { FileMakerDbService } from "./entities/db-service/file-maker.db.service";
 import { FileReviewerDbService } from "./entities/db-service/file-reviewer.db.service";
+import { CallCenterAgentDbService } from "./entities/db-service/call-center-agent.db.service";
 import {
  DamageExpertDbSchema,
  DamageExpertModel,
@@ -41,6 +42,10 @@ import {
  FileReviewerDbSchema,
  FileReviewerModel,
 } from "./entities/schema/file-reviewer.schema";
+import {
+  CallCenterAgentDbSchema,
+  CallCenterAgentModel,
+} from "./entities/schema/call-center-agent.schema";

@Module({
  imports: [
@@ -54,6 +59,7 @@ import {
      { name: ExpertFileActivity.name, schema: ExpertFileActivitySchema },
      { name: FileMakerModel.name, schema: FileMakerDbSchema },
      { name: FileReviewerModel.name, schema: FileReviewerDbSchema },
+      { name: CallCenterAgentModel.name, schema: CallCenterAgentDbSchema },
    ]),
    HashModule,
  ],
@@ -68,6 +74,7 @@ import {
    ExpertFileActivityDbService,
    FileMakerDbService,
    FileReviewerDbService,
+    CallCenterAgentDbService,
  ],
  exports: [
    UserDbService,
@@ -79,6 +86,7 @@ import {
    ExpertFileActivityDbService,
    FileMakerDbService,
    FileReviewerDbService,
+    CallCenterAgentDbService,
  ],
 })
 export class UsersModule {}
Author	SHA1	Message	Date
SepehrYahyaee	61684156c6	YARA-1133	2026-07-27 14:00:54 +03:30
SepehrYahyaee	588a92c4b4	YARA-1165	2026-07-27 11:46:03 +03:30
SepehrYahyaee	c94dd27a96	YARA-1164	2026-07-27 11:38:54 +03:30
SepehrYahyaee	e4c3b7a16a	YARA-1162	2026-07-27 10:15:46 +03:30
SepehrYahyaee	4b9d946bfd	YARA-1154	2026-07-27 09:31:07 +03:30
SepehrYahyaee	9828aee8af	YARA-1136	2026-07-26 11:35:21 +03:30
Sepehr Yahyaee	778544c321	Merge pull request 'YARA-1147' (#217 ) from s.yahyaee/yara724-api:main into main Reviewed-on: Yara724/api#217	2026-07-25 12:32:22 +03:30
SepehrYahyaee	3afff67336	YARA-1147	2026-07-25 12:31:54 +03:30
Sepehr Yahyaee	793ff639ba	Merge pull request 'Added insurer capabilities for super-admin' (#216 ) from s.yahyaee/yara724-api:main into main Reviewed-on: Yara724/api#216	2026-07-25 11:55:42 +03:30
Sepehr Yahyaee	fd42adf9d6	Merge pull request 'Added inner parts to APIs for expert claim' (#215 ) from s.yahyaee/yara724-api:main into main Reviewed-on: Yara724/api#215	2026-07-25 11:10:38 +03:30
Soheil Hajizadeh	ac65cdb77b	Merge pull request 'lookups and inquiries in lookups added' (#214 ) from s.hajizadeh/yara724api:main into main Reviewed-on: Yara724/api#214	2026-07-25 11:04:42 +03:30
s.hajizadeh	8430c68e3a	lookups and inquiries in lookups added	2026-07-25 11:03:58 +03:30
Sepehr Yahyaee	49fe548215	Merge pull request 'Fixed v5 file maker approval field' (#213 ) from s.yahyaee/yara724-api:main into main Reviewed-on: Yara724/api#213	2026-07-25 10:25:10 +03:30
Sepehr Yahyaee	b67dd733cd	Merge pull request 'Fixed upload documents counting for v4' (#212 ) from s.yahyaee/yara724-api:main into main Reviewed-on: Yara724/api#212	2026-07-25 09:53:07 +03:30
Sepehr Yahyaee	cc8a5354c7	Merge pull request 'v4 bug fixed' (#211 ) from s.yahyaee/yara724-api:main into main Reviewed-on: Yara724/api#211	2026-07-25 09:29:42 +03:30