@7365admin1/core 3.53.8 → 3.54.0

package/dist/index.js

@@ -536,13 +536,13 @@ var require_logger = __commonJS({
     "use strict";
     exports.__esModule = true;
     var _utils = require_utils();
-    var logger220 = {
+    var logger222 = {
       methodMap: ["debug", "info", "warn", "error"],
       level: "info",
       // Maps a given level value to the `methodMap` indexes above.
       lookupLevel: function lookupLevel(level) {
         if (typeof level === "string") {
-          var levelMap = _utils.indexOf(logger220.methodMap, level.toLowerCase());
+          var levelMap = _utils.indexOf(logger222.methodMap, level.toLowerCase());
           if (levelMap >= 0) {
             level = levelMap;
           } else {
@@ -553,9 +553,9 @@ var require_logger = __commonJS({
       },
       // Can be overridden in the host environment
       log: function log(level) {
-        level = logger220.lookupLevel(level);
-        if (typeof console !== "undefined" && logger220.lookupLevel(logger220.level) <= level) {
-          var method = logger220.methodMap[level];
+        level = logger222.lookupLevel(level);
+        if (typeof console !== "undefined" && logger222.lookupLevel(logger222.level) <= level) {
+          var method = logger222.methodMap[level];
           if (!console[method]) {
             method = "log";
           }
@@ -566,7 +566,7 @@ var require_logger = __commonJS({
         }
       }
     };
-    exports["default"] = logger220;
+    exports["default"] = logger222;
     module2.exports = exports["default"];
   }
 });
@@ -5933,11 +5933,13 @@ __export(src_exports, {
   CameraType: () => CameraType,
   ConsoleAuditAction: () => ConsoleAuditAction,
   ConsoleAuditTarget: () => ConsoleAuditTarget,
+  DEFAULT_RING_SECONDS: () => DEFAULT_RING_SECONDS,
   DEFAULT_SITE_TIMEZONE: () => DEFAULT_SITE_TIMEZONE,
   DEVICE_STATUS: () => DEVICE_STATUS,
   DOBStatus: () => DOBStatus,
   DUPLICATE_TERMS_VERSION_MESSAGE: () => DUPLICATE_TERMS_VERSION_MESSAGE,
   DayOfWeek: () => DayOfWeek,
+  E164: () => E164,
   EAccessCardTypes: () => EAccessCardTypes,
   EAccessCardUserTypes: () => EAccessCardUserTypes,
   EmailSender: () => EmailSender,
@@ -5960,6 +5962,8 @@ __export(src_exports, {
   MAX_BULK_CAMERA_ROWS: () => MAX_BULK_CAMERA_ROWS,
   MAX_CAMERA_CHANNEL: () => MAX_CAMERA_CHANNEL,
   MAX_CAMERA_NAME_LENGTH: () => MAX_CAMERA_NAME_LENGTH,
+  MAX_PERSONAL_EMERGENCY_CONTACTS: () => MAX_PERSONAL_EMERGENCY_CONTACTS,
+  MAX_RING_SECONDS: () => MAX_RING_SECONDS,
   MAccessCard: () => MAccessCard,
   MAccessCardTransaction: () => MAccessCardTransaction,
   MAddress: () => MAddress,
@@ -5993,6 +5997,7 @@ __export(src_exports, {
   MHidAmicoReader: () => MHidAmicoReader,
   MHidSipAccount: () => MHidSipAccount,
   MHidSitePermissions: () => MHidSitePermissions,
+  MIN_RING_SECONDS: () => MIN_RING_SECONDS,
   MIncidentReport: () => MIncidentReport,
   MManpowerDesignations: () => MManpowerDesignations,
   MManpowerMonitoring: () => MManpowerMonitoring,
@@ -6018,6 +6023,7 @@ __export(src_exports, {
   MPatrolQuestion: () => MPatrolQuestion,
   MPatrolRoute: () => MPatrolRoute,
   MPerson: () => MPerson,
+  MPersonalEmergencyChain: () => MPersonalEmergencyChain,
   MPlatformTerms: () => MPlatformTerms,
   MPost: () => MPost,
   MPostFavorite: () => MPostFavorite,
@@ -6160,6 +6166,7 @@ __export(src_exports, {
   deviceHttpTimeoutMs: () => deviceHttpTimeoutMs,
   deviceProbeTtlSeconds: () => deviceProbeTtlSeconds,
   emitNotificationCreated: () => emitNotificationCreated,
+  emptyPersonalEmergencyChain: () => emptyPersonalEmergencyChain,
   encodeHidPacsCard: () => encodeHidPacsCard,
   entitledSiteScope: () => entitledSiteScope,
   events_namespace_collection: () => events_namespace_collection,
@@ -6216,7 +6223,6 @@ __export(src_exports, {
   online_forms_namespace_collection: () => online_forms_namespace_collection,
   orgLevelRoles: () => orgLevelRoles,
   orgSchema: () => orgSchema,
-  orgSiteScope: () => orgSiteScope,
   overnight_parking_requests_namespace_collection: () => overnight_parking_requests_namespace_collection,
   parseCameraChannel: () => parseCameraChannel,
   parseCameraHost: () => parseCameraHost,
@@ -6343,6 +6349,7 @@ __export(src_exports, {
   schemaPatrolQuestion: () => schemaPatrolQuestion,
   schemaPatrolRoute: () => schemaPatrolRoute,
   schemaPerson: () => schemaPerson,
+  schemaPersonalEmergencyContact: () => schemaPersonalEmergencyContact,
   schemaPlate: () => schemaPlate,
   schemaPlatformTerms: () => schemaPlatformTerms,
   schemaPost: () => schemaPost,
@@ -6388,6 +6395,7 @@ __export(src_exports, {
   schemaUpdatePatrolQuestion: () => schemaUpdatePatrolQuestion,
   schemaUpdatePatrolRoute: () => schemaUpdatePatrolRoute,
   schemaUpdatePerson: () => schemaUpdatePerson,
+  schemaUpdatePersonalEmergencyChain: () => schemaUpdatePersonalEmergencyChain,
   schemaUpdatePost: () => schemaUpdatePost,
   schemaUpdatePostFavorite: () => schemaUpdatePostFavorite,
   schemaUpdateServiceProviderBilling: () => schemaUpdateServiceProviderBilling,
@@ -6568,6 +6576,9 @@ __export(src_exports, {
   usePatrolRouteRepo: () => usePatrolRouteRepo,
   usePersonController: () => usePersonController,
   usePersonRepo: () => usePersonRepo,
+  usePersonalEmergencyChainController: () => usePersonalEmergencyChainController,
+  usePersonalEmergencyChainRepo: () => usePersonalEmergencyChainRepo,
+  usePersonalEmergencyChainService: () => usePersonalEmergencyChainService,
   usePlatformTermsController: () => usePlatformTermsController,
   usePlatformTermsRepo: () => usePlatformTermsRepo,
   usePlatformTermsService: () => usePlatformTermsService,
@@ -14876,12 +14887,15 @@ var NOTIFICATION_CATEGORIES = [
     channelNote: { email: NO_EMAIL_RECIPIENT },
     permissionResources: ["emergency-contact"],
     safety: true,
-    // Nothing sends this. The sender below exists, but the only place emergency
-    // contacts are written is `iservice365-API-core`, and the change that would
-    // have called it from there (API-core #997) was closed, not merged. Until a
-    // caller exists this stays out of the screen rather than offering a switch
-    // over a message that never arrives.
-    rendered: false
+    // A caller exists again. `iservice365-API-core` is still the only place a
+    // site's emergency contacts are written, and its `emergency.service.ts`
+    // now calls the sender below on each of the three writes. That caller
+    // reads THIS flag before it sends (`notificationCategory("emergencyContact")
+    // ?.rendered`), so the two halves cannot land out of order and leave a
+    // safety alert arriving with no switch to turn it off: whichever repository
+    // merges first, the alert only starts once a published core carrying this
+    // line is installed there.
+    rendered: true
   },
   {
     key: "virtualPatrol",
@@ -25069,22 +25083,6 @@ function selectHealthTargets(cameraIds, cap, isValidId) {
     truncated: unique.length > limit
   };
 }
-function orgSiteScope(params) {
-  const org = idOf(params.org);
-  if (!org)
-    return null;
-  const inOrg = params.memberships.filter(
-    (membership) => idOf(membership.org) === org
-  );
-  if (inOrg.some(
-    (membership) => !idOf(membership.siteId) || membership.orgLevelRole === true
-  )) {
-    return null;
-  }
-  return Array.from(
-    new Set(inOrg.map((membership) => idOf(membership.siteId)).filter(Boolean))
-  );
-}
 function entitledSiteScope(params) {
   const sites = /* @__PURE__ */ new Set();
   for (const membership of params.memberships) {
@@ -29915,7 +29913,7 @@ function usePromoCodeRepo() {
     }
   }
   async function updateById(_id, value) {
-    const objectId2 = toObjectId25(_id);
+    const objectId2 = toObjectId26(_id);
     const changes = promoCodeUpdate(value);
     const res = await collection.updateOne(
       { _id: objectId2, deletedAt: null },
@@ -29928,7 +29926,7 @@ function usePromoCodeRepo() {
     return res;
   }
   async function updateStatusById(_id, status) {
-    const objectId2 = toObjectId25(_id);
+    const objectId2 = toObjectId26(_id);
     const res = await collection.updateOne(
       { _id: objectId2, deletedAt: null },
       { $set: { status } }
@@ -29940,7 +29938,7 @@ function usePromoCodeRepo() {
     return res;
   }
   async function softDeleteById(_id, deletedBy) {
-    const objectId2 = toObjectId25(_id);
+    const objectId2 = toObjectId26(_id);
     const res = await collection.updateOne(
       { _id: objectId2, deletedAt: null },
       {
@@ -29957,7 +29955,7 @@ function usePromoCodeRepo() {
     await invalidate(`delete ${objectId2}`);
     return res;
   }
-  function toObjectId25(_id) {
+  function toObjectId26(_id) {
     const { error } = import_joi34.default.object({
       _id: import_joi34.default.string().hex().length(24).required()
     }).validate({ _id: String(_id) });
@@ -42355,8 +42353,7 @@ function useCustomerSiteController() {
     });
     try {
       await requireOrgAccess(req, org);
-      const actor = await resolveInviteActor(callerId(req));
-      const siteScope = staffMayBypass(actor) ? null : orgSiteScope({ memberships: actor.memberships, org });
+      const siteScope = await entitledSites(req);
       const data = await _getAll({
         search,
         page,
@@ -92088,6 +92085,222 @@ function useNotificationPreferenceController() {
   }
   return { get, update };
 }
+
+// src/models/personal-emergency-chain.model.ts
+var import_node_server_utils303 = require("@7365admin1/node-server-utils");
+var import_mongodb184 = require("mongodb");
+var import_joi167 = __toESM(require("joi"));
+var MAX_PERSONAL_EMERGENCY_CONTACTS = 10;
+var MIN_RING_SECONDS = 5;
+var MAX_RING_SECONDS = 120;
+var DEFAULT_RING_SECONDS = 20;
+var E164 = /^\+[1-9]\d{1,14}$/;
+var schemaPersonalEmergencyContact = import_joi167.default.object({
+  name: import_joi167.default.string().trim().min(1).max(120).required(),
+  phone: import_joi167.default.string().trim().pattern(E164).required().messages({
+    "string.pattern.base": "Phone number must be in international format, e.g. +6591234567."
+  }),
+  relationship: import_joi167.default.string().trim().max(60).allow("", null).default(""),
+  order: import_joi167.default.number().integer().min(1).max(MAX_PERSONAL_EMERGENCY_CONTACTS).required(),
+  active: import_joi167.default.boolean().default(true)
+});
+var schemaUpdatePersonalEmergencyChain = import_joi167.default.object({
+  contacts: import_joi167.default.array().items(schemaPersonalEmergencyContact).unique("order").max(MAX_PERSONAL_EMERGENCY_CONTACTS).required().messages({
+    "array.unique": "Two contacts cannot share the same position in the chain."
+  }),
+  ringSeconds: import_joi167.default.number().integer().min(MIN_RING_SECONDS).max(MAX_RING_SECONDS).default(DEFAULT_RING_SECONDS),
+  siteDirectoryFallback: import_joi167.default.boolean().default(true),
+  org: import_joi167.default.string().hex().length(24).allow("", null).default(null),
+  site: import_joi167.default.string().hex().length(24).allow("", null).default(null)
+});
+var toObjectId25 = (value, what) => {
+  if (value === null || value === void 0 || value === "")
+    return null;
+  const id = value.toString();
+  if (!import_mongodb184.ObjectId.isValid(id))
+    throw new import_node_server_utils303.BadRequestError(`Invalid ${what}.`);
+  return new import_mongodb184.ObjectId(id);
+};
+function MPersonalEmergencyChain(value) {
+  const user = toObjectId25(value.user, "user ID");
+  if (!user)
+    throw new import_node_server_utils303.BadRequestError("Invalid user ID.");
+  const contacts = [...value.contacts ?? []].map((c) => ({
+    name: c.name.trim(),
+    phone: c.phone.trim(),
+    relationship: (c.relationship ?? "").trim(),
+    order: c.order,
+    active: c.active ?? true
+  })).sort((a, b) => a.order - b.order);
+  const seen = /* @__PURE__ */ new Set();
+  for (const contact of contacts) {
+    if (seen.has(contact.order)) {
+      throw new import_node_server_utils303.BadRequestError(
+        "Two contacts cannot share the same position in the chain."
+      );
+    }
+    seen.add(contact.order);
+  }
+  const now = /* @__PURE__ */ new Date();
+  return {
+    user,
+    org: toObjectId25(value.org, "organization ID"),
+    site: toObjectId25(value.site, "site ID"),
+    contacts,
+    ringSeconds: value.ringSeconds ?? DEFAULT_RING_SECONDS,
+    siteDirectoryFallback: value.siteDirectoryFallback ?? true,
+    createdAt: value.createdAt ?? now,
+    updatedAt: now
+  };
+}
+function emptyPersonalEmergencyChain(user) {
+  return {
+    user,
+    org: null,
+    site: null,
+    contacts: [],
+    ringSeconds: DEFAULT_RING_SECONDS,
+    siteDirectoryFallback: true
+  };
+}
+
+// src/repositories/personal-emergency-chain.repo.ts
+var import_mongodb185 = require("mongodb");
+var import_node_server_utils304 = require("@7365admin1/node-server-utils");
+function usePersonalEmergencyChainRepo() {
+  const namespace_collection = "personal-emergency-contacts";
+  const getDB2 = () => {
+    const db2 = import_node_server_utils304.useAtlas.getDb();
+    if (!db2) {
+      throw new import_node_server_utils304.InternalServerError("Unable to connect to server.");
+    }
+    return db2;
+  };
+  const collection = () => getDB2().collection(namespace_collection);
+  async function createIndexes() {
+    try {
+      await collection().createIndexes([
+        { key: { user: 1 }, name: "one_chain_per_user", unique: true }
+      ]);
+      return `Successfully created indexes for ${namespace_collection}.`;
+    } catch (error) {
+      import_node_server_utils304.logger.log({ level: "error", message: error.message });
+      throw new import_node_server_utils304.InternalServerError(
+        `Failed to create indexes for ${namespace_collection}.`
+      );
+    }
+  }
+  async function getByUser(user) {
+    if (!import_mongodb185.ObjectId.isValid(user)) {
+      throw new import_node_server_utils304.BadRequestError("Invalid user ID format.");
+    }
+    try {
+      const doc = await collection().findOne({ user: new import_mongodb185.ObjectId(user) });
+      return doc ?? emptyPersonalEmergencyChain(user);
+    } catch (error) {
+      if (error instanceof import_node_server_utils304.AppError)
+        throw error;
+      import_node_server_utils304.logger.log({ level: "error", message: error.message });
+      throw new import_node_server_utils304.InternalServerError("Failed to retrieve emergency contacts.");
+    }
+  }
+  async function replaceForUser(user, value) {
+    const doc = MPersonalEmergencyChain({ ...value, user });
+    try {
+      await collection().updateOne(
+        { user: doc.user },
+        {
+          $set: {
+            contacts: doc.contacts,
+            ringSeconds: doc.ringSeconds,
+            siteDirectoryFallback: doc.siteDirectoryFallback,
+            org: doc.org,
+            site: doc.site,
+            updatedAt: doc.updatedAt
+          },
+          $setOnInsert: { user: doc.user, createdAt: doc.createdAt }
+        },
+        { upsert: true }
+      );
+      return doc;
+    } catch (error) {
+      if (error instanceof import_node_server_utils304.AppError)
+        throw error;
+      import_node_server_utils304.logger.log({ level: "error", message: error.message });
+      throw new import_node_server_utils304.InternalServerError("Failed to save emergency contacts.");
+    }
+  }
+  return { createIndexes, getByUser, replaceForUser };
+}
+
+// src/services/personal-emergency-chain.service.ts
+var import_node_server_utils305 = require("@7365admin1/node-server-utils");
+function usePersonalEmergencyChainService() {
+  async function getForUser(user) {
+    if (!user)
+      throw new import_node_server_utils305.BadRequestError("No user in session.");
+    return await usePersonalEmergencyChainRepo().getByUser(user);
+  }
+  async function updateForUser(user, value) {
+    if (!user)
+      throw new import_node_server_utils305.BadRequestError("No user in session.");
+    return await usePersonalEmergencyChainRepo().replaceForUser(
+      user,
+      value
+    );
+  }
+  return { getForUser, updateForUser };
+}
+
+// src/controllers/personal-emergency-chain.controller.ts
+var import_node_server_utils306 = require("@7365admin1/node-server-utils");
+function usePersonalEmergencyChainController() {
+  const { getForUser, updateForUser } = usePersonalEmergencyChainService();
+  async function get(req, res, next) {
+    const userId = req.params.userId;
+    try {
+      await requireSelfOrPlatformStaff(req, userId, {
+        resource: "users",
+        action: "see-user-details"
+      });
+      res.status(200).json({ data: await getForUser(userId) });
+    } catch (error) {
+      import_node_server_utils306.logger.log({ level: "error", message: error.message });
+      next(error);
+    }
+  }
+  async function update(req, res, next) {
+    const userId = req.params.userId;
+    try {
+      await requireSelfOrPlatformStaff(req, userId, {
+        resource: "users",
+        action: "see-user-details"
+      });
+    } catch (error2) {
+      import_node_server_utils306.logger.log({ level: "error", message: error2.message });
+      next(error2);
+      return;
+    }
+    const { error, value } = schemaUpdatePersonalEmergencyChain.validate(
+      req.body,
+      { convert: true }
+    );
+    if (error) {
+      next(new import_node_server_utils306.BadRequestError(error.details[0].message));
+      return;
+    }
+    try {
+      res.status(200).json({
+        message: "success",
+        data: await updateForUser(userId, value)
+      });
+    } catch (err) {
+      import_node_server_utils306.logger.log({ level: "error", message: err.message });
+      next(err);
+    }
+  }
+  return { get, update };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ANPRMode,
@@ -92134,11 +92347,13 @@ function useNotificationPreferenceController() {
   CameraType,
   ConsoleAuditAction,
   ConsoleAuditTarget,
+  DEFAULT_RING_SECONDS,
   DEFAULT_SITE_TIMEZONE,
   DEVICE_STATUS,
   DOBStatus,
   DUPLICATE_TERMS_VERSION_MESSAGE,
   DayOfWeek,
+  E164,
   EAccessCardTypes,
   EAccessCardUserTypes,
   EmailSender,
@@ -92161,6 +92376,8 @@ function useNotificationPreferenceController() {
   MAX_BULK_CAMERA_ROWS,
   MAX_CAMERA_CHANNEL,
   MAX_CAMERA_NAME_LENGTH,
+  MAX_PERSONAL_EMERGENCY_CONTACTS,
+  MAX_RING_SECONDS,
   MAccessCard,
   MAccessCardTransaction,
   MAddress,
@@ -92194,6 +92411,7 @@ function useNotificationPreferenceController() {
   MHidAmicoReader,
   MHidSipAccount,
   MHidSitePermissions,
+  MIN_RING_SECONDS,
   MIncidentReport,
   MManpowerDesignations,
   MManpowerMonitoring,
@@ -92219,6 +92437,7 @@ function useNotificationPreferenceController() {
   MPatrolQuestion,
   MPatrolRoute,
   MPerson,
+  MPersonalEmergencyChain,
   MPlatformTerms,
   MPost,
   MPostFavorite,
@@ -92361,6 +92580,7 @@ function useNotificationPreferenceController() {
   deviceHttpTimeoutMs,
   deviceProbeTtlSeconds,
   emitNotificationCreated,
+  emptyPersonalEmergencyChain,
   encodeHidPacsCard,
   entitledSiteScope,
   events_namespace_collection,
@@ -92417,7 +92637,6 @@ function useNotificationPreferenceController() {
   online_forms_namespace_collection,
   orgLevelRoles,
   orgSchema,
-  orgSiteScope,
   overnight_parking_requests_namespace_collection,
   parseCameraChannel,
   parseCameraHost,
@@ -92544,6 +92763,7 @@ function useNotificationPreferenceController() {
   schemaPatrolQuestion,
   schemaPatrolRoute,
   schemaPerson,
+  schemaPersonalEmergencyContact,
   schemaPlate,
   schemaPlatformTerms,
   schemaPost,
@@ -92589,6 +92809,7 @@ function useNotificationPreferenceController() {
   schemaUpdatePatrolQuestion,
   schemaUpdatePatrolRoute,
   schemaUpdatePerson,
+  schemaUpdatePersonalEmergencyChain,
   schemaUpdatePost,
   schemaUpdatePostFavorite,
   schemaUpdateServiceProviderBilling,
@@ -92769,6 +92990,9 @@ function useNotificationPreferenceController() {
   usePatrolRouteRepo,
   usePersonController,
   usePersonRepo,
+  usePersonalEmergencyChainController,
+  usePersonalEmergencyChainRepo,
+  usePersonalEmergencyChainService,
   usePlatformTermsController,
   usePlatformTermsRepo,
   usePlatformTermsService,