feat: Multi-feature CRM update

- Add team_leader role with appropriate permissions
- Add lastSeen timestamp for chat online indicator
- Add needsFollowup flag to ucastnici table
- Add getTodayCalendarCount endpoint for calendar badge
- Add company reminders to calendar data
- Enhance company search to include phone and contacts
- Update routes to allow team_leader access to kurzy, services, timesheets

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

src/routes/service.routes.js

@@ -3,7 +3,7 @@ import * as serviceController from '../controllers/service.controller.js';
 import * as serviceFolderController from '../controllers/service-folder.controller.js';
 import * as serviceDocumentController from '../controllers/service-document.controller.js';
 import { authenticate } from '../middlewares/auth/authMiddleware.js';
-import { requireAdmin } from '../middlewares/auth/roleMiddleware.js';
+import { requireAdmin, requireTeamLeaderOrAdmin } from '../middlewares/auth/roleMiddleware.js';
 import { validateBody, validateParams } from '../middlewares/security/validateInput.js';
 import { createServiceSchema, updateServiceSchema } from '../validators/crm.validators.js';
 import { createUpload } from '../config/upload.js';
@@ -30,11 +30,11 @@ router.use(authenticate);
 router.get('/folders', serviceFolderController.getAllFolders);
 
 /**
- * POST /api/services/folders - Create new folder (admin only)
+ * POST /api/services/folders - Create new folder (admin/team_leader)
  */
 router.post(
   '/folders',
-  requireAdmin,
+  requireTeamLeaderOrAdmin,
   validateBody(createFolderSchema),
   serviceFolderController.createFolder
 );
@@ -49,22 +49,22 @@ router.get(
 );
 
 /**
- * PUT /api/services/folders/:folderId - Update folder (admin only)
+ * PUT /api/services/folders/:folderId - Update folder (admin/team_leader)
  */
 router.put(
   '/folders/:folderId',
-  requireAdmin,
+  requireTeamLeaderOrAdmin,
   validateParams(folderIdSchema),
   validateBody(updateFolderSchema),
   serviceFolderController.updateFolder
 );
 
 /**
- * DELETE /api/services/folders/:folderId - Delete folder (admin only)
+ * DELETE /api/services/folders/:folderId - Delete folder (admin/team_leader)
  */
 router.delete(
   '/folders/:folderId',
-  requireAdmin,
+  requireTeamLeaderOrAdmin,
   validateParams(folderIdSchema),
   serviceFolderController.deleteFolder
 );
@@ -100,11 +100,11 @@ router.get(
 );
 
 /**
- * DELETE /api/services/folders/:folderId/documents/:documentId - Delete document (admin only)
+ * DELETE /api/services/folders/:folderId/documents/:documentId - Delete document (admin/team_leader)
  */
 router.delete(
   '/folders/:folderId/documents/:documentId',
-  requireAdmin,
+  requireTeamLeaderOrAdmin,
   validateParams(folderDocumentIdSchema),
   serviceDocumentController.deleteDocument
 );
@@ -117,11 +117,11 @@ router.delete(
 router.get('/', serviceController.getAllServices);
 
 /**
- * POST /api/services - Create new service (admin only)
+ * POST /api/services - Create new service (admin/team_leader)
  */
 router.post(
   '/',
-  requireAdmin,
+  requireTeamLeaderOrAdmin,
   validateBody(createServiceSchema),
   serviceController.createService
 );
@@ -136,22 +136,22 @@ router.get(
 );
 
 /**
- * PUT /api/services/:serviceId - Update service (admin only)
+ * PUT /api/services/:serviceId - Update service (admin/team_leader)
  */
 router.put(
   '/:serviceId',
-  requireAdmin,
+  requireTeamLeaderOrAdmin,
   validateParams(serviceIdSchema),
   validateBody(updateServiceSchema),
   serviceController.updateService
 );
 
 /**
- * DELETE /api/services/:serviceId - Delete service (admin only)
+ * DELETE /api/services/:serviceId - Delete service (admin/team_leader)
  */
 router.delete(
   '/:serviceId',
-  requireAdmin,
+  requireTeamLeaderOrAdmin,
   validateParams(serviceIdSchema),
   serviceController.deleteService
 );