@7365admin1/core 3.53.9 → 3.55.0

package/dist/index.mjs

@@ -537,13 +537,13 @@ var require_logger = __commonJS({
     "use strict";
     exports.__esModule = true;
     var _utils = require_utils();
-    var logger220 = {
+    var logger222 = {
       methodMap: ["debug", "info", "warn", "error"],
       level: "info",
       // Maps a given level value to the `methodMap` indexes above.
       lookupLevel: function lookupLevel(level) {
         if (typeof level === "string") {
-          var levelMap = _utils.indexOf(logger220.methodMap, level.toLowerCase());
+          var levelMap = _utils.indexOf(logger222.methodMap, level.toLowerCase());
           if (levelMap >= 0) {
             level = levelMap;
           } else {
@@ -554,9 +554,9 @@ var require_logger = __commonJS({
       },
       // Can be overridden in the host environment
       log: function log(level) {
-        level = logger220.lookupLevel(level);
-        if (typeof console !== "undefined" && logger220.lookupLevel(logger220.level) <= level) {
-          var method = logger220.methodMap[level];
+        level = logger222.lookupLevel(level);
+        if (typeof console !== "undefined" && logger222.lookupLevel(logger222.level) <= level) {
+          var method = logger222.methodMap[level];
           if (!console[method]) {
             method = "log";
           }
@@ -567,7 +567,7 @@ var require_logger = __commonJS({
         }
       }
     };
-    exports["default"] = logger220;
+    exports["default"] = logger222;
     module.exports = exports["default"];
   }
 });
@@ -13658,6 +13658,8 @@ var NotificationModule = /* @__PURE__ */ ((NotificationModule2) => {
   NotificationModule2["FACILITY_BOOKING"] = "facilityBooking";
   NotificationModule2["ONLINE_FORM"] = "onlineForm";
   NotificationModule2["PRELOVED_MARKETPLACE"] = "prelovedMarketplace";
+  NotificationModule2["MARKETPLACE_ORDER"] = "marketplace-order";
+  NotificationModule2["MARKETPLACE_VENDOR_ORDER"] = "marketplace-vendor-order";
   NotificationModule2["INCIDENT_REPORT"] = "incidentReport";
   NotificationModule2["EMERGENCY_CONTACT"] = "emergencyContact";
   NotificationModule2["VIRTUAL_PATROL"] = "virtualPatrol";
@@ -14126,7 +14128,7 @@ var NOTIFICATION_CATEGORIES = [
   {
     key: "facilityBooking",
     label: "Facility Bookings",
-    description: "When a facility booking is made or its status changes.",
+    description: "When a facility booking is made or its status changes. The confirmation email goes to the address entered on the booking form itself.",
     channels: { inApp: true, push: true, email: false },
     channelNote: {
       email: "Booking confirmations go to the email address entered on the booking form itself. To change where a confirmation lands, change that address when the booking is made."
@@ -14138,7 +14140,7 @@ var NOTIFICATION_CATEGORIES = [
   {
     key: "visitors",
     label: "Visitors",
-    description: "When a visitor you invited checks in or checks out.",
+    description: "When a visitor you invited checks in or checks out. The invitation email goes to the address entered for the visitor.",
     channels: { inApp: true, push: true, email: false },
     channelNote: {
       email: "Visitor invitations go to the email address entered for the visitor when they are invited. To change where one lands, change that address on the invitation."
@@ -14212,7 +14214,7 @@ var NOTIFICATION_CATEGORIES = [
   {
     key: "serviceProviderInvite",
     label: "Service Provider Invitations",
-    description: "When a property manager invites your company to provide services at a site.",
+    description: "When a property manager invites your company to provide services at a site. The invitation email is the invitation itself and is always sent to the address it was addressed to; these settings control the copy that reaches you inside the app.",
     channels: { inApp: true, push: true, email: false },
     channelNote: {
       email: "The invitation email is the invitation itself \u2014 for a company that has no account here yet it is the only copy, so it is always sent to the address the invitation was addressed to. The switches above control the copy that reaches you inside the app."
@@ -14243,12 +14245,15 @@ var NOTIFICATION_CATEGORIES = [
     channelNote: { email: NO_EMAIL_RECIPIENT },
     permissionResources: ["emergency-contact"],
     safety: true,
-    // Nothing sends this. The sender below exists, but the only place emergency
-    // contacts are written is `iservice365-API-core`, and the change that would
-    // have called it from there (API-core #997) was closed, not merged. Until a
-    // caller exists this stays out of the screen rather than offering a switch
-    // over a message that never arrives.
-    rendered: false
+    // A caller exists again. `iservice365-API-core` is still the only place a
+    // site's emergency contacts are written, and its `emergency.service.ts`
+    // now calls the sender below on each of the three writes. That caller
+    // reads THIS flag before it sends (`notificationCategory("emergencyContact")
+    // ?.rendered`), so the two halves cannot land out of order and leave a
+    // safety alert arriving with no switch to turn it off: whichever repository
+    // merges first, the alert only starts once a published core carrying this
+    // line is installed there.
+    rendered: true
   },
   {
     key: "virtualPatrol",
@@ -29392,7 +29397,7 @@ function usePromoCodeRepo() {
     }
   }
   async function updateById(_id, value) {
-    const objectId2 = toObjectId25(_id);
+    const objectId2 = toObjectId26(_id);
     const changes = promoCodeUpdate(value);
     const res = await collection.updateOne(
       { _id: objectId2, deletedAt: null },
@@ -29405,7 +29410,7 @@ function usePromoCodeRepo() {
     return res;
   }
   async function updateStatusById(_id, status) {
-    const objectId2 = toObjectId25(_id);
+    const objectId2 = toObjectId26(_id);
     const res = await collection.updateOne(
       { _id: objectId2, deletedAt: null },
       { $set: { status } }
@@ -29417,7 +29422,7 @@ function usePromoCodeRepo() {
     return res;
   }
   async function softDeleteById(_id, deletedBy) {
-    const objectId2 = toObjectId25(_id);
+    const objectId2 = toObjectId26(_id);
     const res = await collection.updateOne(
       { _id: objectId2, deletedAt: null },
       {
@@ -29434,7 +29439,7 @@ function usePromoCodeRepo() {
     await invalidate(`delete ${objectId2}`);
     return res;
   }
-  function toObjectId25(_id) {
+  function toObjectId26(_id) {
     const { error } = Joi34.object({
       _id: Joi34.string().hex().length(24).required()
     }).validate({ _id: String(_id) });
@@ -92179,8 +92184,10 @@ function useNotificationPreferenceService() {
       categoriesForUser(id)
     ]);
     const isOff = (category, channel) => off.some((o) => o.category === category && o.channel === channel);
+    const supportedIn = (category) => NOTIFICATION_CHANNELS.filter((channel) => category.channels[channel]);
+    const offered = new Set(categories.flatMap((c) => supportedIn(c)));
     return {
-      channels: NOTIFICATION_CHANNELS.map((c) => ({
+      channels: NOTIFICATION_CHANNELS.filter((c) => offered.has(c)).map((c) => ({
         key: c,
         label: NOTIFICATION_CHANNEL_LABELS[c]
       })),
@@ -92189,16 +92196,14 @@ function useNotificationPreferenceService() {
         label: category.label,
         description: category.description,
         safety: Boolean(category.safety),
-        channels: NOTIFICATION_CHANNELS.map((channel) => {
-          const supported = category.channels[channel];
-          return {
-            key: channel,
-            label: NOTIFICATION_CHANNEL_LABELS[channel],
-            supported,
-            note: supported ? void 0 : category.channelNote?.[channel],
-            enabled: supported && !isOff(category.key, channel)
-          };
-        })
+        channels: supportedIn(category).map((channel) => ({
+          key: channel,
+          label: NOTIFICATION_CHANNEL_LABELS[channel],
+          // kept so a client written against the old shape still filters
+          // correctly; every channel sent is now a supported one.
+          supported: true,
+          enabled: !isOff(category.key, channel)
+        }))
       }))
     };
   }
@@ -92261,6 +92266,228 @@ function useNotificationPreferenceController() {
   }
   return { get, update };
 }
+
+// src/models/personal-emergency-chain.model.ts
+import { BadRequestError as BadRequestError262 } from "@7365admin1/node-server-utils";
+import { ObjectId as ObjectId184 } from "mongodb";
+import Joi167 from "joi";
+var MAX_PERSONAL_EMERGENCY_CONTACTS = 10;
+var MIN_RING_SECONDS = 5;
+var MAX_RING_SECONDS = 120;
+var DEFAULT_RING_SECONDS = 20;
+var E164 = /^\+[1-9]\d{1,14}$/;
+var schemaPersonalEmergencyContact = Joi167.object({
+  name: Joi167.string().trim().min(1).max(120).required(),
+  phone: Joi167.string().trim().pattern(E164).required().messages({
+    "string.pattern.base": "Phone number must be in international format, e.g. +6591234567."
+  }),
+  relationship: Joi167.string().trim().max(60).allow("", null).default(""),
+  order: Joi167.number().integer().min(1).max(MAX_PERSONAL_EMERGENCY_CONTACTS).required(),
+  active: Joi167.boolean().default(true)
+});
+var schemaUpdatePersonalEmergencyChain = Joi167.object({
+  contacts: Joi167.array().items(schemaPersonalEmergencyContact).unique("order").max(MAX_PERSONAL_EMERGENCY_CONTACTS).required().messages({
+    "array.unique": "Two contacts cannot share the same position in the chain."
+  }),
+  ringSeconds: Joi167.number().integer().min(MIN_RING_SECONDS).max(MAX_RING_SECONDS).default(DEFAULT_RING_SECONDS),
+  siteDirectoryFallback: Joi167.boolean().default(true),
+  org: Joi167.string().hex().length(24).allow("", null).default(null),
+  site: Joi167.string().hex().length(24).allow("", null).default(null)
+});
+var toObjectId25 = (value, what) => {
+  if (value === null || value === void 0 || value === "")
+    return null;
+  const id = value.toString();
+  if (!ObjectId184.isValid(id))
+    throw new BadRequestError262(`Invalid ${what}.`);
+  return new ObjectId184(id);
+};
+function MPersonalEmergencyChain(value) {
+  const user = toObjectId25(value.user, "user ID");
+  if (!user)
+    throw new BadRequestError262("Invalid user ID.");
+  const contacts = [...value.contacts ?? []].map((c) => ({
+    name: c.name.trim(),
+    phone: c.phone.trim(),
+    relationship: (c.relationship ?? "").trim(),
+    order: c.order,
+    active: c.active ?? true
+  })).sort((a, b) => a.order - b.order);
+  const seen = /* @__PURE__ */ new Set();
+  for (const contact of contacts) {
+    if (seen.has(contact.order)) {
+      throw new BadRequestError262(
+        "Two contacts cannot share the same position in the chain."
+      );
+    }
+    seen.add(contact.order);
+  }
+  const now = /* @__PURE__ */ new Date();
+  return {
+    user,
+    org: toObjectId25(value.org, "organization ID"),
+    site: toObjectId25(value.site, "site ID"),
+    contacts,
+    ringSeconds: value.ringSeconds ?? DEFAULT_RING_SECONDS,
+    siteDirectoryFallback: value.siteDirectoryFallback ?? true,
+    createdAt: value.createdAt ?? now,
+    updatedAt: now
+  };
+}
+function emptyPersonalEmergencyChain(user) {
+  return {
+    user,
+    org: null,
+    site: null,
+    contacts: [],
+    ringSeconds: DEFAULT_RING_SECONDS,
+    siteDirectoryFallback: true
+  };
+}
+
+// src/repositories/personal-emergency-chain.repo.ts
+import { ObjectId as ObjectId185 } from "mongodb";
+import {
+  AppError as AppError34,
+  BadRequestError as BadRequestError263,
+  InternalServerError as InternalServerError97,
+  logger as logger220,
+  useAtlas as useAtlas152
+} from "@7365admin1/node-server-utils";
+function usePersonalEmergencyChainRepo() {
+  const namespace_collection = "personal-emergency-contacts";
+  const getDB2 = () => {
+    const db2 = useAtlas152.getDb();
+    if (!db2) {
+      throw new InternalServerError97("Unable to connect to server.");
+    }
+    return db2;
+  };
+  const collection = () => getDB2().collection(namespace_collection);
+  async function createIndexes() {
+    try {
+      await collection().createIndexes([
+        { key: { user: 1 }, name: "one_chain_per_user", unique: true }
+      ]);
+      return `Successfully created indexes for ${namespace_collection}.`;
+    } catch (error) {
+      logger220.log({ level: "error", message: error.message });
+      throw new InternalServerError97(
+        `Failed to create indexes for ${namespace_collection}.`
+      );
+    }
+  }
+  async function getByUser(user) {
+    if (!ObjectId185.isValid(user)) {
+      throw new BadRequestError263("Invalid user ID format.");
+    }
+    try {
+      const doc = await collection().findOne({ user: new ObjectId185(user) });
+      return doc ?? emptyPersonalEmergencyChain(user);
+    } catch (error) {
+      if (error instanceof AppError34)
+        throw error;
+      logger220.log({ level: "error", message: error.message });
+      throw new InternalServerError97("Failed to retrieve emergency contacts.");
+    }
+  }
+  async function replaceForUser(user, value) {
+    const doc = MPersonalEmergencyChain({ ...value, user });
+    try {
+      await collection().updateOne(
+        { user: doc.user },
+        {
+          $set: {
+            contacts: doc.contacts,
+            ringSeconds: doc.ringSeconds,
+            siteDirectoryFallback: doc.siteDirectoryFallback,
+            org: doc.org,
+            site: doc.site,
+            updatedAt: doc.updatedAt
+          },
+          $setOnInsert: { user: doc.user, createdAt: doc.createdAt }
+        },
+        { upsert: true }
+      );
+      return doc;
+    } catch (error) {
+      if (error instanceof AppError34)
+        throw error;
+      logger220.log({ level: "error", message: error.message });
+      throw new InternalServerError97("Failed to save emergency contacts.");
+    }
+  }
+  return { createIndexes, getByUser, replaceForUser };
+}
+
+// src/services/personal-emergency-chain.service.ts
+import { BadRequestError as BadRequestError264 } from "@7365admin1/node-server-utils";
+function usePersonalEmergencyChainService() {
+  async function getForUser(user) {
+    if (!user)
+      throw new BadRequestError264("No user in session.");
+    return await usePersonalEmergencyChainRepo().getByUser(user);
+  }
+  async function updateForUser(user, value) {
+    if (!user)
+      throw new BadRequestError264("No user in session.");
+    return await usePersonalEmergencyChainRepo().replaceForUser(
+      user,
+      value
+    );
+  }
+  return { getForUser, updateForUser };
+}
+
+// src/controllers/personal-emergency-chain.controller.ts
+import { BadRequestError as BadRequestError265, logger as logger221 } from "@7365admin1/node-server-utils";
+function usePersonalEmergencyChainController() {
+  const { getForUser, updateForUser } = usePersonalEmergencyChainService();
+  async function get(req, res, next) {
+    const userId = req.params.userId;
+    try {
+      await requireSelfOrPlatformStaff(req, userId, {
+        resource: "users",
+        action: "see-user-details"
+      });
+      res.status(200).json({ data: await getForUser(userId) });
+    } catch (error) {
+      logger221.log({ level: "error", message: error.message });
+      next(error);
+    }
+  }
+  async function update(req, res, next) {
+    const userId = req.params.userId;
+    try {
+      await requireSelfOrPlatformStaff(req, userId, {
+        resource: "users",
+        action: "see-user-details"
+      });
+    } catch (error2) {
+      logger221.log({ level: "error", message: error2.message });
+      next(error2);
+      return;
+    }
+    const { error, value } = schemaUpdatePersonalEmergencyChain.validate(
+      req.body,
+      { convert: true }
+    );
+    if (error) {
+      next(new BadRequestError265(error.details[0].message));
+      return;
+    }
+    try {
+      res.status(200).json({
+        message: "success",
+        data: await updateForUser(userId, value)
+      });
+    } catch (err) {
+      logger221.log({ level: "error", message: err.message });
+      next(err);
+    }
+  }
+  return { get, update };
+}
 export {
   ANPRMode,
   APP_BASE_URLS,
@@ -92306,11 +92533,13 @@ export {
   CameraType,
   ConsoleAuditAction,
   ConsoleAuditTarget,
+  DEFAULT_RING_SECONDS,
   DEFAULT_SITE_TIMEZONE,
   DEVICE_STATUS,
   DOBStatus,
   DUPLICATE_TERMS_VERSION_MESSAGE,
   DayOfWeek,
+  E164,
   EAccessCardTypes,
   EAccessCardUserTypes,
   EmailSender,
@@ -92333,6 +92562,8 @@ export {
   MAX_BULK_CAMERA_ROWS,
   MAX_CAMERA_CHANNEL,
   MAX_CAMERA_NAME_LENGTH,
+  MAX_PERSONAL_EMERGENCY_CONTACTS,
+  MAX_RING_SECONDS,
   MAccessCard,
   MAccessCardTransaction,
   MAddress,
@@ -92366,6 +92597,7 @@ export {
   MHidAmicoReader,
   MHidSipAccount,
   MHidSitePermissions,
+  MIN_RING_SECONDS,
   MIncidentReport,
   MManpowerDesignations,
   MManpowerMonitoring,
@@ -92391,6 +92623,7 @@ export {
   MPatrolQuestion,
   MPatrolRoute,
   MPerson,
+  MPersonalEmergencyChain,
   MPlatformTerms,
   MPost,
   MPostFavorite,
@@ -92533,6 +92766,7 @@ export {
   deviceHttpTimeoutMs,
   deviceProbeTtlSeconds,
   emitNotificationCreated,
+  emptyPersonalEmergencyChain,
   encodeHidPacsCard,
   entitledSiteScope,
   events_namespace_collection,
@@ -92715,6 +92949,7 @@ export {
   schemaPatrolQuestion,
   schemaPatrolRoute,
   schemaPerson,
+  schemaPersonalEmergencyContact,
   schemaPlate,
   schemaPlatformTerms,
   schemaPost,
@@ -92760,6 +92995,7 @@ export {
   schemaUpdatePatrolQuestion,
   schemaUpdatePatrolRoute,
   schemaUpdatePerson,
+  schemaUpdatePersonalEmergencyChain,
   schemaUpdatePost,
   schemaUpdatePostFavorite,
   schemaUpdateServiceProviderBilling,
@@ -92940,6 +93176,9 @@ export {
   usePatrolRouteRepo,
   usePersonController,
   usePersonRepo,
+  usePersonalEmergencyChainController,
+  usePersonalEmergencyChainRepo,
+  usePersonalEmergencyChainService,
   usePlatformTermsController,
   usePlatformTermsRepo,
   usePlatformTermsService,