@7365admin1/core 3.53.9 → 3.55.0

package/dist/index.js

@@ -536,13 +536,13 @@ var require_logger = __commonJS({
     "use strict";
     exports.__esModule = true;
     var _utils = require_utils();
-    var logger220 = {
+    var logger222 = {
       methodMap: ["debug", "info", "warn", "error"],
       level: "info",
       // Maps a given level value to the `methodMap` indexes above.
       lookupLevel: function lookupLevel(level) {
         if (typeof level === "string") {
-          var levelMap = _utils.indexOf(logger220.methodMap, level.toLowerCase());
+          var levelMap = _utils.indexOf(logger222.methodMap, level.toLowerCase());
           if (levelMap >= 0) {
             level = levelMap;
           } else {
@@ -553,9 +553,9 @@ var require_logger = __commonJS({
       },
       // Can be overridden in the host environment
       log: function log(level) {
-        level = logger220.lookupLevel(level);
-        if (typeof console !== "undefined" && logger220.lookupLevel(logger220.level) <= level) {
-          var method = logger220.methodMap[level];
+        level = logger222.lookupLevel(level);
+        if (typeof console !== "undefined" && logger222.lookupLevel(logger222.level) <= level) {
+          var method = logger222.methodMap[level];
           if (!console[method]) {
             method = "log";
           }
@@ -566,7 +566,7 @@ var require_logger = __commonJS({
         }
       }
     };
-    exports["default"] = logger220;
+    exports["default"] = logger222;
     module2.exports = exports["default"];
   }
 });
@@ -5933,11 +5933,13 @@ __export(src_exports, {
   CameraType: () => CameraType,
   ConsoleAuditAction: () => ConsoleAuditAction,
   ConsoleAuditTarget: () => ConsoleAuditTarget,
+  DEFAULT_RING_SECONDS: () => DEFAULT_RING_SECONDS,
   DEFAULT_SITE_TIMEZONE: () => DEFAULT_SITE_TIMEZONE,
   DEVICE_STATUS: () => DEVICE_STATUS,
   DOBStatus: () => DOBStatus,
   DUPLICATE_TERMS_VERSION_MESSAGE: () => DUPLICATE_TERMS_VERSION_MESSAGE,
   DayOfWeek: () => DayOfWeek,
+  E164: () => E164,
   EAccessCardTypes: () => EAccessCardTypes,
   EAccessCardUserTypes: () => EAccessCardUserTypes,
   EmailSender: () => EmailSender,
@@ -5960,6 +5962,8 @@ __export(src_exports, {
   MAX_BULK_CAMERA_ROWS: () => MAX_BULK_CAMERA_ROWS,
   MAX_CAMERA_CHANNEL: () => MAX_CAMERA_CHANNEL,
   MAX_CAMERA_NAME_LENGTH: () => MAX_CAMERA_NAME_LENGTH,
+  MAX_PERSONAL_EMERGENCY_CONTACTS: () => MAX_PERSONAL_EMERGENCY_CONTACTS,
+  MAX_RING_SECONDS: () => MAX_RING_SECONDS,
   MAccessCard: () => MAccessCard,
   MAccessCardTransaction: () => MAccessCardTransaction,
   MAddress: () => MAddress,
@@ -5993,6 +5997,7 @@ __export(src_exports, {
   MHidAmicoReader: () => MHidAmicoReader,
   MHidSipAccount: () => MHidSipAccount,
   MHidSitePermissions: () => MHidSitePermissions,
+  MIN_RING_SECONDS: () => MIN_RING_SECONDS,
   MIncidentReport: () => MIncidentReport,
   MManpowerDesignations: () => MManpowerDesignations,
   MManpowerMonitoring: () => MManpowerMonitoring,
@@ -6018,6 +6023,7 @@ __export(src_exports, {
   MPatrolQuestion: () => MPatrolQuestion,
   MPatrolRoute: () => MPatrolRoute,
   MPerson: () => MPerson,
+  MPersonalEmergencyChain: () => MPersonalEmergencyChain,
   MPlatformTerms: () => MPlatformTerms,
   MPost: () => MPost,
   MPostFavorite: () => MPostFavorite,
@@ -6160,6 +6166,7 @@ __export(src_exports, {
   deviceHttpTimeoutMs: () => deviceHttpTimeoutMs,
   deviceProbeTtlSeconds: () => deviceProbeTtlSeconds,
   emitNotificationCreated: () => emitNotificationCreated,
+  emptyPersonalEmergencyChain: () => emptyPersonalEmergencyChain,
   encodeHidPacsCard: () => encodeHidPacsCard,
   entitledSiteScope: () => entitledSiteScope,
   events_namespace_collection: () => events_namespace_collection,
@@ -6342,6 +6349,7 @@ __export(src_exports, {
   schemaPatrolQuestion: () => schemaPatrolQuestion,
   schemaPatrolRoute: () => schemaPatrolRoute,
   schemaPerson: () => schemaPerson,
+  schemaPersonalEmergencyContact: () => schemaPersonalEmergencyContact,
   schemaPlate: () => schemaPlate,
   schemaPlatformTerms: () => schemaPlatformTerms,
   schemaPost: () => schemaPost,
@@ -6387,6 +6395,7 @@ __export(src_exports, {
   schemaUpdatePatrolQuestion: () => schemaUpdatePatrolQuestion,
   schemaUpdatePatrolRoute: () => schemaUpdatePatrolRoute,
   schemaUpdatePerson: () => schemaUpdatePerson,
+  schemaUpdatePersonalEmergencyChain: () => schemaUpdatePersonalEmergencyChain,
   schemaUpdatePost: () => schemaUpdatePost,
   schemaUpdatePostFavorite: () => schemaUpdatePostFavorite,
   schemaUpdateServiceProviderBilling: () => schemaUpdateServiceProviderBilling,
@@ -6567,6 +6576,9 @@ __export(src_exports, {
   usePatrolRouteRepo: () => usePatrolRouteRepo,
   usePersonController: () => usePersonController,
   usePersonRepo: () => usePersonRepo,
+  usePersonalEmergencyChainController: () => usePersonalEmergencyChainController,
+  usePersonalEmergencyChainRepo: () => usePersonalEmergencyChainRepo,
+  usePersonalEmergencyChainService: () => usePersonalEmergencyChainService,
   usePlatformTermsController: () => usePlatformTermsController,
   usePlatformTermsRepo: () => usePlatformTermsRepo,
   usePlatformTermsService: () => usePlatformTermsService,
@@ -14304,6 +14316,8 @@ var NotificationModule = /* @__PURE__ */ ((NotificationModule2) => {
   NotificationModule2["FACILITY_BOOKING"] = "facilityBooking";
   NotificationModule2["ONLINE_FORM"] = "onlineForm";
   NotificationModule2["PRELOVED_MARKETPLACE"] = "prelovedMarketplace";
+  NotificationModule2["MARKETPLACE_ORDER"] = "marketplace-order";
+  NotificationModule2["MARKETPLACE_VENDOR_ORDER"] = "marketplace-vendor-order";
   NotificationModule2["INCIDENT_REPORT"] = "incidentReport";
   NotificationModule2["EMERGENCY_CONTACT"] = "emergencyContact";
   NotificationModule2["VIRTUAL_PATROL"] = "virtualPatrol";
@@ -14758,7 +14772,7 @@ var NOTIFICATION_CATEGORIES = [
   {
     key: "facilityBooking",
     label: "Facility Bookings",
-    description: "When a facility booking is made or its status changes.",
+    description: "When a facility booking is made or its status changes. The confirmation email goes to the address entered on the booking form itself.",
     channels: { inApp: true, push: true, email: false },
     channelNote: {
       email: "Booking confirmations go to the email address entered on the booking form itself. To change where a confirmation lands, change that address when the booking is made."
@@ -14770,7 +14784,7 @@ var NOTIFICATION_CATEGORIES = [
   {
     key: "visitors",
     label: "Visitors",
-    description: "When a visitor you invited checks in or checks out.",
+    description: "When a visitor you invited checks in or checks out. The invitation email goes to the address entered for the visitor.",
     channels: { inApp: true, push: true, email: false },
     channelNote: {
       email: "Visitor invitations go to the email address entered for the visitor when they are invited. To change where one lands, change that address on the invitation."
@@ -14844,7 +14858,7 @@ var NOTIFICATION_CATEGORIES = [
   {
     key: "serviceProviderInvite",
     label: "Service Provider Invitations",
-    description: "When a property manager invites your company to provide services at a site.",
+    description: "When a property manager invites your company to provide services at a site. The invitation email is the invitation itself and is always sent to the address it was addressed to; these settings control the copy that reaches you inside the app.",
     channels: { inApp: true, push: true, email: false },
     channelNote: {
       email: "The invitation email is the invitation itself \u2014 for a company that has no account here yet it is the only copy, so it is always sent to the address the invitation was addressed to. The switches above control the copy that reaches you inside the app."
@@ -14875,12 +14889,15 @@ var NOTIFICATION_CATEGORIES = [
     channelNote: { email: NO_EMAIL_RECIPIENT },
     permissionResources: ["emergency-contact"],
     safety: true,
-    // Nothing sends this. The sender below exists, but the only place emergency
-    // contacts are written is `iservice365-API-core`, and the change that would
-    // have called it from there (API-core #997) was closed, not merged. Until a
-    // caller exists this stays out of the screen rather than offering a switch
-    // over a message that never arrives.
-    rendered: false
+    // A caller exists again. `iservice365-API-core` is still the only place a
+    // site's emergency contacts are written, and its `emergency.service.ts`
+    // now calls the sender below on each of the three writes. That caller
+    // reads THIS flag before it sends (`notificationCategory("emergencyContact")
+    // ?.rendered`), so the two halves cannot land out of order and leave a
+    // safety alert arriving with no switch to turn it off: whichever repository
+    // merges first, the alert only starts once a published core carrying this
+    // line is installed there.
+    rendered: true
   },
   {
     key: "virtualPatrol",
@@ -29898,7 +29915,7 @@ function usePromoCodeRepo() {
     }
   }
   async function updateById(_id, value) {
-    const objectId2 = toObjectId25(_id);
+    const objectId2 = toObjectId26(_id);
     const changes = promoCodeUpdate(value);
     const res = await collection.updateOne(
       { _id: objectId2, deletedAt: null },
@@ -29911,7 +29928,7 @@ function usePromoCodeRepo() {
     return res;
   }
   async function updateStatusById(_id, status) {
-    const objectId2 = toObjectId25(_id);
+    const objectId2 = toObjectId26(_id);
     const res = await collection.updateOne(
       { _id: objectId2, deletedAt: null },
       { $set: { status } }
@@ -29923,7 +29940,7 @@ function usePromoCodeRepo() {
     return res;
   }
   async function softDeleteById(_id, deletedBy) {
-    const objectId2 = toObjectId25(_id);
+    const objectId2 = toObjectId26(_id);
     const res = await collection.updateOne(
       { _id: objectId2, deletedAt: null },
       {
@@ -29940,7 +29957,7 @@ function usePromoCodeRepo() {
     await invalidate(`delete ${objectId2}`);
     return res;
   }
-  function toObjectId25(_id) {
+  function toObjectId26(_id) {
     const { error } = import_joi34.default.object({
       _id: import_joi34.default.string().hex().length(24).required()
     }).validate({ _id: String(_id) });
@@ -91988,8 +92005,10 @@ function useNotificationPreferenceService() {
       categoriesForUser(id)
     ]);
     const isOff = (category, channel) => off.some((o) => o.category === category && o.channel === channel);
+    const supportedIn = (category) => NOTIFICATION_CHANNELS.filter((channel) => category.channels[channel]);
+    const offered = new Set(categories.flatMap((c) => supportedIn(c)));
     return {
-      channels: NOTIFICATION_CHANNELS.map((c) => ({
+      channels: NOTIFICATION_CHANNELS.filter((c) => offered.has(c)).map((c) => ({
         key: c,
         label: NOTIFICATION_CHANNEL_LABELS[c]
       })),
@@ -91998,16 +92017,14 @@ function useNotificationPreferenceService() {
         label: category.label,
         description: category.description,
         safety: Boolean(category.safety),
-        channels: NOTIFICATION_CHANNELS.map((channel) => {
-          const supported = category.channels[channel];
-          return {
-            key: channel,
-            label: NOTIFICATION_CHANNEL_LABELS[channel],
-            supported,
-            note: supported ? void 0 : category.channelNote?.[channel],
-            enabled: supported && !isOff(category.key, channel)
-          };
-        })
+        channels: supportedIn(category).map((channel) => ({
+          key: channel,
+          label: NOTIFICATION_CHANNEL_LABELS[channel],
+          // kept so a client written against the old shape still filters
+          // correctly; every channel sent is now a supported one.
+          supported: true,
+          enabled: !isOff(category.key, channel)
+        }))
       }))
     };
   }
@@ -92070,6 +92087,222 @@ function useNotificationPreferenceController() {
   }
   return { get, update };
 }
+
+// src/models/personal-emergency-chain.model.ts
+var import_node_server_utils303 = require("@7365admin1/node-server-utils");
+var import_mongodb184 = require("mongodb");
+var import_joi167 = __toESM(require("joi"));
+var MAX_PERSONAL_EMERGENCY_CONTACTS = 10;
+var MIN_RING_SECONDS = 5;
+var MAX_RING_SECONDS = 120;
+var DEFAULT_RING_SECONDS = 20;
+var E164 = /^\+[1-9]\d{1,14}$/;
+var schemaPersonalEmergencyContact = import_joi167.default.object({
+  name: import_joi167.default.string().trim().min(1).max(120).required(),
+  phone: import_joi167.default.string().trim().pattern(E164).required().messages({
+    "string.pattern.base": "Phone number must be in international format, e.g. +6591234567."
+  }),
+  relationship: import_joi167.default.string().trim().max(60).allow("", null).default(""),
+  order: import_joi167.default.number().integer().min(1).max(MAX_PERSONAL_EMERGENCY_CONTACTS).required(),
+  active: import_joi167.default.boolean().default(true)
+});
+var schemaUpdatePersonalEmergencyChain = import_joi167.default.object({
+  contacts: import_joi167.default.array().items(schemaPersonalEmergencyContact).unique("order").max(MAX_PERSONAL_EMERGENCY_CONTACTS).required().messages({
+    "array.unique": "Two contacts cannot share the same position in the chain."
+  }),
+  ringSeconds: import_joi167.default.number().integer().min(MIN_RING_SECONDS).max(MAX_RING_SECONDS).default(DEFAULT_RING_SECONDS),
+  siteDirectoryFallback: import_joi167.default.boolean().default(true),
+  org: import_joi167.default.string().hex().length(24).allow("", null).default(null),
+  site: import_joi167.default.string().hex().length(24).allow("", null).default(null)
+});
+var toObjectId25 = (value, what) => {
+  if (value === null || value === void 0 || value === "")
+    return null;
+  const id = value.toString();
+  if (!import_mongodb184.ObjectId.isValid(id))
+    throw new import_node_server_utils303.BadRequestError(`Invalid ${what}.`);
+  return new import_mongodb184.ObjectId(id);
+};
+function MPersonalEmergencyChain(value) {
+  const user = toObjectId25(value.user, "user ID");
+  if (!user)
+    throw new import_node_server_utils303.BadRequestError("Invalid user ID.");
+  const contacts = [...value.contacts ?? []].map((c) => ({
+    name: c.name.trim(),
+    phone: c.phone.trim(),
+    relationship: (c.relationship ?? "").trim(),
+    order: c.order,
+    active: c.active ?? true
+  })).sort((a, b) => a.order - b.order);
+  const seen = /* @__PURE__ */ new Set();
+  for (const contact of contacts) {
+    if (seen.has(contact.order)) {
+      throw new import_node_server_utils303.BadRequestError(
+        "Two contacts cannot share the same position in the chain."
+      );
+    }
+    seen.add(contact.order);
+  }
+  const now = /* @__PURE__ */ new Date();
+  return {
+    user,
+    org: toObjectId25(value.org, "organization ID"),
+    site: toObjectId25(value.site, "site ID"),
+    contacts,
+    ringSeconds: value.ringSeconds ?? DEFAULT_RING_SECONDS,
+    siteDirectoryFallback: value.siteDirectoryFallback ?? true,
+    createdAt: value.createdAt ?? now,
+    updatedAt: now
+  };
+}
+function emptyPersonalEmergencyChain(user) {
+  return {
+    user,
+    org: null,
+    site: null,
+    contacts: [],
+    ringSeconds: DEFAULT_RING_SECONDS,
+    siteDirectoryFallback: true
+  };
+}
+
+// src/repositories/personal-emergency-chain.repo.ts
+var import_mongodb185 = require("mongodb");
+var import_node_server_utils304 = require("@7365admin1/node-server-utils");
+function usePersonalEmergencyChainRepo() {
+  const namespace_collection = "personal-emergency-contacts";
+  const getDB2 = () => {
+    const db2 = import_node_server_utils304.useAtlas.getDb();
+    if (!db2) {
+      throw new import_node_server_utils304.InternalServerError("Unable to connect to server.");
+    }
+    return db2;
+  };
+  const collection = () => getDB2().collection(namespace_collection);
+  async function createIndexes() {
+    try {
+      await collection().createIndexes([
+        { key: { user: 1 }, name: "one_chain_per_user", unique: true }
+      ]);
+      return `Successfully created indexes for ${namespace_collection}.`;
+    } catch (error) {
+      import_node_server_utils304.logger.log({ level: "error", message: error.message });
+      throw new import_node_server_utils304.InternalServerError(
+        `Failed to create indexes for ${namespace_collection}.`
+      );
+    }
+  }
+  async function getByUser(user) {
+    if (!import_mongodb185.ObjectId.isValid(user)) {
+      throw new import_node_server_utils304.BadRequestError("Invalid user ID format.");
+    }
+    try {
+      const doc = await collection().findOne({ user: new import_mongodb185.ObjectId(user) });
+      return doc ?? emptyPersonalEmergencyChain(user);
+    } catch (error) {
+      if (error instanceof import_node_server_utils304.AppError)
+        throw error;
+      import_node_server_utils304.logger.log({ level: "error", message: error.message });
+      throw new import_node_server_utils304.InternalServerError("Failed to retrieve emergency contacts.");
+    }
+  }
+  async function replaceForUser(user, value) {
+    const doc = MPersonalEmergencyChain({ ...value, user });
+    try {
+      await collection().updateOne(
+        { user: doc.user },
+        {
+          $set: {
+            contacts: doc.contacts,
+            ringSeconds: doc.ringSeconds,
+            siteDirectoryFallback: doc.siteDirectoryFallback,
+            org: doc.org,
+            site: doc.site,
+            updatedAt: doc.updatedAt
+          },
+          $setOnInsert: { user: doc.user, createdAt: doc.createdAt }
+        },
+        { upsert: true }
+      );
+      return doc;
+    } catch (error) {
+      if (error instanceof import_node_server_utils304.AppError)
+        throw error;
+      import_node_server_utils304.logger.log({ level: "error", message: error.message });
+      throw new import_node_server_utils304.InternalServerError("Failed to save emergency contacts.");
+    }
+  }
+  return { createIndexes, getByUser, replaceForUser };
+}
+
+// src/services/personal-emergency-chain.service.ts
+var import_node_server_utils305 = require("@7365admin1/node-server-utils");
+function usePersonalEmergencyChainService() {
+  async function getForUser(user) {
+    if (!user)
+      throw new import_node_server_utils305.BadRequestError("No user in session.");
+    return await usePersonalEmergencyChainRepo().getByUser(user);
+  }
+  async function updateForUser(user, value) {
+    if (!user)
+      throw new import_node_server_utils305.BadRequestError("No user in session.");
+    return await usePersonalEmergencyChainRepo().replaceForUser(
+      user,
+      value
+    );
+  }
+  return { getForUser, updateForUser };
+}
+
+// src/controllers/personal-emergency-chain.controller.ts
+var import_node_server_utils306 = require("@7365admin1/node-server-utils");
+function usePersonalEmergencyChainController() {
+  const { getForUser, updateForUser } = usePersonalEmergencyChainService();
+  async function get(req, res, next) {
+    const userId = req.params.userId;
+    try {
+      await requireSelfOrPlatformStaff(req, userId, {
+        resource: "users",
+        action: "see-user-details"
+      });
+      res.status(200).json({ data: await getForUser(userId) });
+    } catch (error) {
+      import_node_server_utils306.logger.log({ level: "error", message: error.message });
+      next(error);
+    }
+  }
+  async function update(req, res, next) {
+    const userId = req.params.userId;
+    try {
+      await requireSelfOrPlatformStaff(req, userId, {
+        resource: "users",
+        action: "see-user-details"
+      });
+    } catch (error2) {
+      import_node_server_utils306.logger.log({ level: "error", message: error2.message });
+      next(error2);
+      return;
+    }
+    const { error, value } = schemaUpdatePersonalEmergencyChain.validate(
+      req.body,
+      { convert: true }
+    );
+    if (error) {
+      next(new import_node_server_utils306.BadRequestError(error.details[0].message));
+      return;
+    }
+    try {
+      res.status(200).json({
+        message: "success",
+        data: await updateForUser(userId, value)
+      });
+    } catch (err) {
+      import_node_server_utils306.logger.log({ level: "error", message: err.message });
+      next(err);
+    }
+  }
+  return { get, update };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ANPRMode,
@@ -92116,11 +92349,13 @@ function useNotificationPreferenceController() {
   CameraType,
   ConsoleAuditAction,
   ConsoleAuditTarget,
+  DEFAULT_RING_SECONDS,
   DEFAULT_SITE_TIMEZONE,
   DEVICE_STATUS,
   DOBStatus,
   DUPLICATE_TERMS_VERSION_MESSAGE,
   DayOfWeek,
+  E164,
   EAccessCardTypes,
   EAccessCardUserTypes,
   EmailSender,
@@ -92143,6 +92378,8 @@ function useNotificationPreferenceController() {
   MAX_BULK_CAMERA_ROWS,
   MAX_CAMERA_CHANNEL,
   MAX_CAMERA_NAME_LENGTH,
+  MAX_PERSONAL_EMERGENCY_CONTACTS,
+  MAX_RING_SECONDS,
   MAccessCard,
   MAccessCardTransaction,
   MAddress,
@@ -92176,6 +92413,7 @@ function useNotificationPreferenceController() {
   MHidAmicoReader,
   MHidSipAccount,
   MHidSitePermissions,
+  MIN_RING_SECONDS,
   MIncidentReport,
   MManpowerDesignations,
   MManpowerMonitoring,
@@ -92201,6 +92439,7 @@ function useNotificationPreferenceController() {
   MPatrolQuestion,
   MPatrolRoute,
   MPerson,
+  MPersonalEmergencyChain,
   MPlatformTerms,
   MPost,
   MPostFavorite,
@@ -92343,6 +92582,7 @@ function useNotificationPreferenceController() {
   deviceHttpTimeoutMs,
   deviceProbeTtlSeconds,
   emitNotificationCreated,
+  emptyPersonalEmergencyChain,
   encodeHidPacsCard,
   entitledSiteScope,
   events_namespace_collection,
@@ -92525,6 +92765,7 @@ function useNotificationPreferenceController() {
   schemaPatrolQuestion,
   schemaPatrolRoute,
   schemaPerson,
+  schemaPersonalEmergencyContact,
   schemaPlate,
   schemaPlatformTerms,
   schemaPost,
@@ -92570,6 +92811,7 @@ function useNotificationPreferenceController() {
   schemaUpdatePatrolQuestion,
   schemaUpdatePatrolRoute,
   schemaUpdatePerson,
+  schemaUpdatePersonalEmergencyChain,
   schemaUpdatePost,
   schemaUpdatePostFavorite,
   schemaUpdateServiceProviderBilling,
@@ -92750,6 +92992,9 @@ function useNotificationPreferenceController() {
   usePatrolRouteRepo,
   usePersonController,
   usePersonRepo,
+  usePersonalEmergencyChainController,
+  usePersonalEmergencyChainRepo,
+  usePersonalEmergencyChainService,
   usePlatformTermsController,
   usePlatformTermsRepo,
   usePlatformTermsService,