@7365admin1/core 3.53.8 → 3.54.0

package/dist/index.mjs

@@ -537,13 +537,13 @@ var require_logger = __commonJS({
     "use strict";
     exports.__esModule = true;
     var _utils = require_utils();
-    var logger220 = {
+    var logger222 = {
       methodMap: ["debug", "info", "warn", "error"],
       level: "info",
       // Maps a given level value to the `methodMap` indexes above.
       lookupLevel: function lookupLevel(level) {
         if (typeof level === "string") {
-          var levelMap = _utils.indexOf(logger220.methodMap, level.toLowerCase());
+          var levelMap = _utils.indexOf(logger222.methodMap, level.toLowerCase());
           if (levelMap >= 0) {
             level = levelMap;
           } else {
@@ -554,9 +554,9 @@ var require_logger = __commonJS({
       },
       // Can be overridden in the host environment
       log: function log(level) {
-        level = logger220.lookupLevel(level);
-        if (typeof console !== "undefined" && logger220.lookupLevel(logger220.level) <= level) {
-          var method = logger220.methodMap[level];
+        level = logger222.lookupLevel(level);
+        if (typeof console !== "undefined" && logger222.lookupLevel(logger222.level) <= level) {
+          var method = logger222.methodMap[level];
           if (!console[method]) {
             method = "log";
           }
@@ -567,7 +567,7 @@ var require_logger = __commonJS({
         }
       }
     };
-    exports["default"] = logger220;
+    exports["default"] = logger222;
     module.exports = exports["default"];
   }
 });
@@ -14243,12 +14243,15 @@ var NOTIFICATION_CATEGORIES = [
     channelNote: { email: NO_EMAIL_RECIPIENT },
     permissionResources: ["emergency-contact"],
     safety: true,
-    // Nothing sends this. The sender below exists, but the only place emergency
-    // contacts are written is `iservice365-API-core`, and the change that would
-    // have called it from there (API-core #997) was closed, not merged. Until a
-    // caller exists this stays out of the screen rather than offering a switch
-    // over a message that never arrives.
-    rendered: false
+    // A caller exists again. `iservice365-API-core` is still the only place a
+    // site's emergency contacts are written, and its `emergency.service.ts`
+    // now calls the sender below on each of the three writes. That caller
+    // reads THIS flag before it sends (`notificationCategory("emergencyContact")
+    // ?.rendered`), so the two halves cannot land out of order and leave a
+    // safety alert arriving with no switch to turn it off: whichever repository
+    // merges first, the alert only starts once a published core carrying this
+    // line is installed there.
+    rendered: true
   },
   {
     key: "virtualPatrol",
@@ -24520,22 +24523,6 @@ function selectHealthTargets(cameraIds, cap, isValidId) {
     truncated: unique.length > limit
   };
 }
-function orgSiteScope(params) {
-  const org = idOf(params.org);
-  if (!org)
-    return null;
-  const inOrg = params.memberships.filter(
-    (membership) => idOf(membership.org) === org
-  );
-  if (inOrg.some(
-    (membership) => !idOf(membership.siteId) || membership.orgLevelRole === true
-  )) {
-    return null;
-  }
-  return Array.from(
-    new Set(inOrg.map((membership) => idOf(membership.siteId)).filter(Boolean))
-  );
-}
 function entitledSiteScope(params) {
   const sites = /* @__PURE__ */ new Set();
   for (const membership of params.memberships) {
@@ -29408,7 +29395,7 @@ function usePromoCodeRepo() {
     }
   }
   async function updateById(_id, value) {
-    const objectId2 = toObjectId25(_id);
+    const objectId2 = toObjectId26(_id);
     const changes = promoCodeUpdate(value);
     const res = await collection.updateOne(
       { _id: objectId2, deletedAt: null },
@@ -29421,7 +29408,7 @@ function usePromoCodeRepo() {
     return res;
   }
   async function updateStatusById(_id, status) {
-    const objectId2 = toObjectId25(_id);
+    const objectId2 = toObjectId26(_id);
     const res = await collection.updateOne(
       { _id: objectId2, deletedAt: null },
       { $set: { status } }
@@ -29433,7 +29420,7 @@ function usePromoCodeRepo() {
     return res;
   }
   async function softDeleteById(_id, deletedBy) {
-    const objectId2 = toObjectId25(_id);
+    const objectId2 = toObjectId26(_id);
     const res = await collection.updateOne(
       { _id: objectId2, deletedAt: null },
       {
@@ -29450,7 +29437,7 @@ function usePromoCodeRepo() {
     await invalidate(`delete ${objectId2}`);
     return res;
   }
-  function toObjectId25(_id) {
+  function toObjectId26(_id) {
     const { error } = Joi34.object({
       _id: Joi34.string().hex().length(24).required()
     }).validate({ _id: String(_id) });
@@ -41987,8 +41974,7 @@ function useCustomerSiteController() {
     });
     try {
       await requireOrgAccess(req, org);
-      const actor = await resolveInviteActor(callerId(req));
-      const siteScope = staffMayBypass(actor) ? null : orgSiteScope({ memberships: actor.memberships, org });
+      const siteScope = await entitledSites(req);
       const data = await _getAll({
         search,
         page,
@@ -92278,6 +92264,228 @@ function useNotificationPreferenceController() {
   }
   return { get, update };
 }
+
+// src/models/personal-emergency-chain.model.ts
+import { BadRequestError as BadRequestError262 } from "@7365admin1/node-server-utils";
+import { ObjectId as ObjectId184 } from "mongodb";
+import Joi167 from "joi";
+var MAX_PERSONAL_EMERGENCY_CONTACTS = 10;
+var MIN_RING_SECONDS = 5;
+var MAX_RING_SECONDS = 120;
+var DEFAULT_RING_SECONDS = 20;
+var E164 = /^\+[1-9]\d{1,14}$/;
+var schemaPersonalEmergencyContact = Joi167.object({
+  name: Joi167.string().trim().min(1).max(120).required(),
+  phone: Joi167.string().trim().pattern(E164).required().messages({
+    "string.pattern.base": "Phone number must be in international format, e.g. +6591234567."
+  }),
+  relationship: Joi167.string().trim().max(60).allow("", null).default(""),
+  order: Joi167.number().integer().min(1).max(MAX_PERSONAL_EMERGENCY_CONTACTS).required(),
+  active: Joi167.boolean().default(true)
+});
+var schemaUpdatePersonalEmergencyChain = Joi167.object({
+  contacts: Joi167.array().items(schemaPersonalEmergencyContact).unique("order").max(MAX_PERSONAL_EMERGENCY_CONTACTS).required().messages({
+    "array.unique": "Two contacts cannot share the same position in the chain."
+  }),
+  ringSeconds: Joi167.number().integer().min(MIN_RING_SECONDS).max(MAX_RING_SECONDS).default(DEFAULT_RING_SECONDS),
+  siteDirectoryFallback: Joi167.boolean().default(true),
+  org: Joi167.string().hex().length(24).allow("", null).default(null),
+  site: Joi167.string().hex().length(24).allow("", null).default(null)
+});
+var toObjectId25 = (value, what) => {
+  if (value === null || value === void 0 || value === "")
+    return null;
+  const id = value.toString();
+  if (!ObjectId184.isValid(id))
+    throw new BadRequestError262(`Invalid ${what}.`);
+  return new ObjectId184(id);
+};
+function MPersonalEmergencyChain(value) {
+  const user = toObjectId25(value.user, "user ID");
+  if (!user)
+    throw new BadRequestError262("Invalid user ID.");
+  const contacts = [...value.contacts ?? []].map((c) => ({
+    name: c.name.trim(),
+    phone: c.phone.trim(),
+    relationship: (c.relationship ?? "").trim(),
+    order: c.order,
+    active: c.active ?? true
+  })).sort((a, b) => a.order - b.order);
+  const seen = /* @__PURE__ */ new Set();
+  for (const contact of contacts) {
+    if (seen.has(contact.order)) {
+      throw new BadRequestError262(
+        "Two contacts cannot share the same position in the chain."
+      );
+    }
+    seen.add(contact.order);
+  }
+  const now = /* @__PURE__ */ new Date();
+  return {
+    user,
+    org: toObjectId25(value.org, "organization ID"),
+    site: toObjectId25(value.site, "site ID"),
+    contacts,
+    ringSeconds: value.ringSeconds ?? DEFAULT_RING_SECONDS,
+    siteDirectoryFallback: value.siteDirectoryFallback ?? true,
+    createdAt: value.createdAt ?? now,
+    updatedAt: now
+  };
+}
+function emptyPersonalEmergencyChain(user) {
+  return {
+    user,
+    org: null,
+    site: null,
+    contacts: [],
+    ringSeconds: DEFAULT_RING_SECONDS,
+    siteDirectoryFallback: true
+  };
+}
+
+// src/repositories/personal-emergency-chain.repo.ts
+import { ObjectId as ObjectId185 } from "mongodb";
+import {
+  AppError as AppError34,
+  BadRequestError as BadRequestError263,
+  InternalServerError as InternalServerError97,
+  logger as logger220,
+  useAtlas as useAtlas152
+} from "@7365admin1/node-server-utils";
+function usePersonalEmergencyChainRepo() {
+  const namespace_collection = "personal-emergency-contacts";
+  const getDB2 = () => {
+    const db2 = useAtlas152.getDb();
+    if (!db2) {
+      throw new InternalServerError97("Unable to connect to server.");
+    }
+    return db2;
+  };
+  const collection = () => getDB2().collection(namespace_collection);
+  async function createIndexes() {
+    try {
+      await collection().createIndexes([
+        { key: { user: 1 }, name: "one_chain_per_user", unique: true }
+      ]);
+      return `Successfully created indexes for ${namespace_collection}.`;
+    } catch (error) {
+      logger220.log({ level: "error", message: error.message });
+      throw new InternalServerError97(
+        `Failed to create indexes for ${namespace_collection}.`
+      );
+    }
+  }
+  async function getByUser(user) {
+    if (!ObjectId185.isValid(user)) {
+      throw new BadRequestError263("Invalid user ID format.");
+    }
+    try {
+      const doc = await collection().findOne({ user: new ObjectId185(user) });
+      return doc ?? emptyPersonalEmergencyChain(user);
+    } catch (error) {
+      if (error instanceof AppError34)
+        throw error;
+      logger220.log({ level: "error", message: error.message });
+      throw new InternalServerError97("Failed to retrieve emergency contacts.");
+    }
+  }
+  async function replaceForUser(user, value) {
+    const doc = MPersonalEmergencyChain({ ...value, user });
+    try {
+      await collection().updateOne(
+        { user: doc.user },
+        {
+          $set: {
+            contacts: doc.contacts,
+            ringSeconds: doc.ringSeconds,
+            siteDirectoryFallback: doc.siteDirectoryFallback,
+            org: doc.org,
+            site: doc.site,
+            updatedAt: doc.updatedAt
+          },
+          $setOnInsert: { user: doc.user, createdAt: doc.createdAt }
+        },
+        { upsert: true }
+      );
+      return doc;
+    } catch (error) {
+      if (error instanceof AppError34)
+        throw error;
+      logger220.log({ level: "error", message: error.message });
+      throw new InternalServerError97("Failed to save emergency contacts.");
+    }
+  }
+  return { createIndexes, getByUser, replaceForUser };
+}
+
+// src/services/personal-emergency-chain.service.ts
+import { BadRequestError as BadRequestError264 } from "@7365admin1/node-server-utils";
+function usePersonalEmergencyChainService() {
+  async function getForUser(user) {
+    if (!user)
+      throw new BadRequestError264("No user in session.");
+    return await usePersonalEmergencyChainRepo().getByUser(user);
+  }
+  async function updateForUser(user, value) {
+    if (!user)
+      throw new BadRequestError264("No user in session.");
+    return await usePersonalEmergencyChainRepo().replaceForUser(
+      user,
+      value
+    );
+  }
+  return { getForUser, updateForUser };
+}
+
+// src/controllers/personal-emergency-chain.controller.ts
+import { BadRequestError as BadRequestError265, logger as logger221 } from "@7365admin1/node-server-utils";
+function usePersonalEmergencyChainController() {
+  const { getForUser, updateForUser } = usePersonalEmergencyChainService();
+  async function get(req, res, next) {
+    const userId = req.params.userId;
+    try {
+      await requireSelfOrPlatformStaff(req, userId, {
+        resource: "users",
+        action: "see-user-details"
+      });
+      res.status(200).json({ data: await getForUser(userId) });
+    } catch (error) {
+      logger221.log({ level: "error", message: error.message });
+      next(error);
+    }
+  }
+  async function update(req, res, next) {
+    const userId = req.params.userId;
+    try {
+      await requireSelfOrPlatformStaff(req, userId, {
+        resource: "users",
+        action: "see-user-details"
+      });
+    } catch (error2) {
+      logger221.log({ level: "error", message: error2.message });
+      next(error2);
+      return;
+    }
+    const { error, value } = schemaUpdatePersonalEmergencyChain.validate(
+      req.body,
+      { convert: true }
+    );
+    if (error) {
+      next(new BadRequestError265(error.details[0].message));
+      return;
+    }
+    try {
+      res.status(200).json({
+        message: "success",
+        data: await updateForUser(userId, value)
+      });
+    } catch (err) {
+      logger221.log({ level: "error", message: err.message });
+      next(err);
+    }
+  }
+  return { get, update };
+}
 export {
   ANPRMode,
   APP_BASE_URLS,
@@ -92323,11 +92531,13 @@ export {
   CameraType,
   ConsoleAuditAction,
   ConsoleAuditTarget,
+  DEFAULT_RING_SECONDS,
   DEFAULT_SITE_TIMEZONE,
   DEVICE_STATUS,
   DOBStatus,
   DUPLICATE_TERMS_VERSION_MESSAGE,
   DayOfWeek,
+  E164,
   EAccessCardTypes,
   EAccessCardUserTypes,
   EmailSender,
@@ -92350,6 +92560,8 @@ export {
   MAX_BULK_CAMERA_ROWS,
   MAX_CAMERA_CHANNEL,
   MAX_CAMERA_NAME_LENGTH,
+  MAX_PERSONAL_EMERGENCY_CONTACTS,
+  MAX_RING_SECONDS,
   MAccessCard,
   MAccessCardTransaction,
   MAddress,
@@ -92383,6 +92595,7 @@ export {
   MHidAmicoReader,
   MHidSipAccount,
   MHidSitePermissions,
+  MIN_RING_SECONDS,
   MIncidentReport,
   MManpowerDesignations,
   MManpowerMonitoring,
@@ -92408,6 +92621,7 @@ export {
   MPatrolQuestion,
   MPatrolRoute,
   MPerson,
+  MPersonalEmergencyChain,
   MPlatformTerms,
   MPost,
   MPostFavorite,
@@ -92550,6 +92764,7 @@ export {
   deviceHttpTimeoutMs,
   deviceProbeTtlSeconds,
   emitNotificationCreated,
+  emptyPersonalEmergencyChain,
   encodeHidPacsCard,
   entitledSiteScope,
   events_namespace_collection,
@@ -92606,7 +92821,6 @@ export {
   online_forms_namespace_collection,
   orgLevelRoles,
   orgSchema,
-  orgSiteScope,
   overnight_parking_requests_namespace_collection,
   parseCameraChannel,
   parseCameraHost,
@@ -92733,6 +92947,7 @@ export {
   schemaPatrolQuestion,
   schemaPatrolRoute,
   schemaPerson,
+  schemaPersonalEmergencyContact,
   schemaPlate,
   schemaPlatformTerms,
   schemaPost,
@@ -92778,6 +92993,7 @@ export {
   schemaUpdatePatrolQuestion,
   schemaUpdatePatrolRoute,
   schemaUpdatePerson,
+  schemaUpdatePersonalEmergencyChain,
   schemaUpdatePost,
   schemaUpdatePostFavorite,
   schemaUpdateServiceProviderBilling,
@@ -92958,6 +93174,9 @@ export {
   usePatrolRouteRepo,
   usePersonController,
   usePersonRepo,
+  usePersonalEmergencyChainController,
+  usePersonalEmergencyChainRepo,
+  usePersonalEmergencyChainService,
   usePlatformTermsController,
   usePlatformTermsRepo,
   usePlatformTermsService,