grm-shared-library 1.1.212 → 1.1.214

package/README.md

@@ -175,6 +175,22 @@ clarion-authentication (emitter):
 - Every send result records `sender` and `senderSource`
   (`ORGANIZATION` | `PLATFORM_DEFAULT`), so "why was this Upesy-branded?" is a query.
 
+### clarion-billing → clarion-notification (HTTP)
+
+`BillingEmailNotificationDto`, `BillingSmsNotificationDto`, `BillingPushNotificationDto`
+and their result types are the contract for `POST /billing/notifications/email | sms |
+push` — the synchronous path clarion-billing uses when it wants to know a message left.
+clarion-billing's `NotificationClientService` types its requests from these; do not
+redeclare the fields there.
+
+- `BillingEmailTemplate` is a **closed set**. The route renders a template by name on
+  another service's say-so, so an open string would let a caller render any template.
+  A new value needs copy defaults in clarion-notification (`api/billing`).
+- Attachments go **by reference** (`documents[].signedUrl`), because billing PDFs are
+  private and their signed URLs expire within the hour. `signedUrl` must be `https`,
+  file names must be bare names, and a subject may not contain a line break.
+- Every list and string is bounded; `billing-notification.spec.ts` pins the limits.
+
 Values that end up inside email CSS or headers are validated as such: colours are
 `#RRGGBB` only, logos are `https` only, and a sender display name may not contain a
 line break. `notification-sender.spec.ts` pins each of those.

package/dist/cjs/index.js

@@ -41,6 +41,7 @@ __exportStar(require("./modules/alert-dispatch/index"), exports);
 __exportStar(require("./modules/system-user/index"), exports);
 __exportStar(require("./modules/partner/index"), exports);
 __exportStar(require("./modules/support/index"), exports);
+__exportStar(require("./modules/alert-intake/index"), exports);
 // Interfaces
 __exportStar(require("./interfaces/server-message"), exports);
 __exportStar(require("./interfaces/i-request-with-user"), exports);

package/dist/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,UAAU;AACV,uDAAqC;AACrC,+DAA6C;AAC7C,yDAAuC;AACvC,6DAA2C;AAC3C,uDAAqC;AACrC,uDAAqC;AACrC,iEAA+C;AAC/C,wDAAsC;AACtC,gEAA8C;AAC9C,2DAAyC;AACzC,2DAAyC;AACzC,sDAAoC;AACpC,sDAAoC;AACpC,sDAAoC;AACpC,yDAAuC;AACvC,mEAAiD;AACjD,+DAA6C;AAC7C,uDAAqC;AACrC,0DAAwC;AACxC,wDAAsC;AACtC,2DAAyC;AACzC,8DAA4C;AAC5C,iEAA+C;AAC/C,8DAA4C;AAC5C,0DAAwC;AACxC,0DAAwC;AAExC,aAAa;AACb,8DAA4C;AAC5C,mEAAiD;AACjD,8DAA4C;AAC5C,2DAAyC;AACzC,0DAAwC;AAExC,YAAY;AACZ,2DAAyC;AAEzC,QAAQ;AACR,gDAA8B;AAE9B,YAAY;AACZ,+DAA6C;AAC7C,wFAAsE;AAEtE,aAAa;AACb,qDAAmC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,UAAU;AACV,uDAAqC;AACrC,+DAA6C;AAC7C,yDAAuC;AACvC,6DAA2C;AAC3C,uDAAqC;AACrC,uDAAqC;AACrC,iEAA+C;AAC/C,wDAAsC;AACtC,gEAA8C;AAC9C,2DAAyC;AACzC,2DAAyC;AACzC,sDAAoC;AACpC,sDAAoC;AACpC,sDAAoC;AACpC,yDAAuC;AACvC,mEAAiD;AACjD,+DAA6C;AAC7C,uDAAqC;AACrC,0DAAwC;AACxC,wDAAsC;AACtC,2DAAyC;AACzC,8DAA4C;AAC5C,iEAA+C;AAC/C,8DAA4C;AAC5C,0DAAwC;AACxC,0DAAwC;AACxC,+DAA6C;AAE7C,aAAa;AACb,8DAA4C;AAC5C,mEAAiD;AACjD,8DAA4C;AAC5C,2DAAyC;AACzC,0DAAwC;AAExC,YAAY;AACZ,2DAAyC;AAEzC,QAAQ;AACR,gDAA8B;AAE9B,YAAY;AACZ,+DAA6C;AAC7C,wFAAsE;AAEtE,aAAa;AACb,qDAAmC"}

package/dist/cjs/modules/alert-intake/dtos/alert-intake.dto.js

@@ -0,0 +1,229 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateAlertIntakeRouteDto = exports.CreateAlertIntakeRouteDto = exports.UpdateAlertIntakeConnectionDto = exports.CreateAlertIntakeConnectionDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const alert_intake_enum_1 = require("../enums/alert-intake.enum");
+const alert_intake_util_1 = require("../utils/alert-intake.util");
+const trim = ({ value }) => (typeof value === 'string' ? value.trim() : value);
+const SINGLE_LINE = /^[^\r\n]*$/;
+const MAX_SETTINGS = 40;
+/**
+ * A flat bag of provider settings: a handful of short primitive values, keyed by the
+ * names the provider's descriptor declares. WHICH keys are allowed is the service's
+ * job (it has the descriptor); this only guarantees the bag cannot be a way to post
+ * a megabyte of nested JSON at a settings table.
+ */
+function IsFlatSettings(options = {}, validationOptions) {
+    return (object, propertyName) => (0, class_validator_1.registerDecorator)({
+        name: 'isFlatSettings',
+        target: object.constructor,
+        propertyName,
+        options: validationOptions,
+        validator: {
+            validate(value) {
+                if (value === null || typeof value !== 'object' || Array.isArray(value))
+                    return false;
+                const entries = Object.entries(value);
+                if (entries.length > MAX_SETTINGS)
+                    return false;
+                return entries.every(([key, item]) => {
+                    if (!/^[A-Za-z][A-Za-z0-9_]{0,59}$/.test(key))
+                        return false;
+                    if (typeof item === 'string')
+                        return item.length <= alert_intake_util_1.MAX_ALERT_INTAKE_SETTING_LENGTH;
+                    if (options.stringsOnly)
+                        return false;
+                    return typeof item === 'boolean' || (typeof item === 'number' && Number.isFinite(item));
+                });
+            },
+            defaultMessage(args) {
+                return `${args.property} must be a flat object of at most ${MAX_SETTINGS} short ${options.stringsOnly ? 'string' : 'string, number or boolean'} values`;
+            },
+        },
+    });
+}
+class CreateAlertIntakeConnectionDto {
+}
+exports.CreateAlertIntakeConnectionDto = CreateAlertIntakeConnectionDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: alert_intake_enum_1.AlertIntakeChannel }),
+    (0, class_validator_1.IsEnum)(alert_intake_enum_1.AlertIntakeChannel),
+    __metadata("design:type", String)
+], CreateAlertIntakeConnectionDto.prototype, "channel", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: alert_intake_enum_1.AlertIntakeProvider }),
+    (0, class_validator_1.IsEnum)(alert_intake_enum_1.AlertIntakeProvider),
+    __metadata("design:type", String)
+], CreateAlertIntakeConnectionDto.prototype, "provider", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: 'G4S emergency short code' }),
+    (0, class_transformer_1.Transform)(trim),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(2),
+    (0, class_validator_1.MaxLength)(100),
+    (0, class_validator_1.Matches)(SINGLE_LINE),
+    __metadata("design:type", String)
+], CreateAlertIntakeConnectionDto.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: '22384',
+        description: 'What people send to: the short code or number, the WhatsApp phone-number id, the mailbox address.',
+    }),
+    (0, class_transformer_1.Transform)(trim),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(254),
+    (0, class_validator_1.Matches)(SINGLE_LINE),
+    __metadata("design:type", String)
+], CreateAlertIntakeConnectionDto.prototype, "address", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ default: true }),
+    (0, class_validator_1.IsBoolean)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", Boolean)
+], CreateAlertIntakeConnectionDto.prototype, "enabled", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Non-secret provider settings, as the provider descriptor declares them.' }),
+    IsFlatSettings(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", Object)
+], CreateAlertIntakeConnectionDto.prototype, "config", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Credentials. WRITE-ONLY: encrypted at rest and never returned. Keys are the descriptor\'s secret fields.',
+    }),
+    IsFlatSettings({ stringsOnly: true }),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", Object)
+], CreateAlertIntakeConnectionDto.prototype, "secrets", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Platform operators only. NAMES of provisioned secrets, used instead of `secrets`. ' +
+            'A connection uses one or the other, never both.',
+    }),
+    IsFlatSettings({ stringsOnly: true }),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", Object)
+], CreateAlertIntakeConnectionDto.prototype, "secretReferences", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ enum: alert_intake_enum_1.AlertIntakeEmergencyPolicy, default: alert_intake_enum_1.AlertIntakeEmergencyPolicy.AUTO }),
+    (0, class_validator_1.IsEnum)(alert_intake_enum_1.AlertIntakeEmergencyPolicy),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], CreateAlertIntakeConnectionDto.prototype, "emergencyPolicy", void 0);
+/**
+ * Channel and provider cannot change: a connection IS its provider link, and the
+ * webhook URL registered with that provider would silently start meaning something
+ * else. Create a new connection instead.
+ */
+class UpdateAlertIntakeConnectionDto {
+}
+exports.UpdateAlertIntakeConnectionDto = UpdateAlertIntakeConnectionDto;
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)(),
+    (0, class_transformer_1.Transform)(trim),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(2),
+    (0, class_validator_1.MaxLength)(100),
+    (0, class_validator_1.Matches)(SINGLE_LINE),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], UpdateAlertIntakeConnectionDto.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)(),
+    (0, class_transformer_1.Transform)(trim),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(254),
+    (0, class_validator_1.Matches)(SINGLE_LINE),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], UpdateAlertIntakeConnectionDto.prototype, "address", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", Boolean)
+], UpdateAlertIntakeConnectionDto.prototype, "enabled", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Merged over the stored settings. A key sent as "" is removed.' }),
+    IsFlatSettings(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", Object)
+], UpdateAlertIntakeConnectionDto.prototype, "config", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Only the secrets sent are replaced; the rest are kept. A key sent as "" is removed.' }),
+    IsFlatSettings({ stringsOnly: true }),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", Object)
+], UpdateAlertIntakeConnectionDto.prototype, "secrets", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Platform operators only.' }),
+    IsFlatSettings({ stringsOnly: true }),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", Object)
+], UpdateAlertIntakeConnectionDto.prototype, "secretReferences", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ enum: alert_intake_enum_1.AlertIntakeEmergencyPolicy }),
+    (0, class_validator_1.IsEnum)(alert_intake_enum_1.AlertIntakeEmergencyPolicy),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], UpdateAlertIntakeConnectionDto.prototype, "emergencyPolicy", void 0);
+/** Platform operators only: sends a PLATFORM connection's messages to an organization. */
+class CreateAlertIntakeRouteDto {
+}
+exports.CreateAlertIntakeRouteDto = CreateAlertIntakeRouteDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: alert_intake_enum_1.AlertIntakeRouteMatch }),
+    (0, class_validator_1.IsEnum)(alert_intake_enum_1.AlertIntakeRouteMatch),
+    __metadata("design:type", String)
+], CreateAlertIntakeRouteDto.prototype, "match", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ example: 'G4S', description: 'Required for KEYWORD; must be absent for DEFAULT.' }),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim().toUpperCase() : value)),
+    (0, class_validator_1.ValidateIf)((dto) => dto.match === alert_intake_enum_1.AlertIntakeRouteMatch.KEYWORD || dto.keyword !== undefined),
+    (0, class_validator_1.Matches)(alert_intake_util_1.ALERT_INTAKE_KEYWORD_PATTERN, { message: 'keyword must be 2-20 letters or digits' }),
+    __metadata("design:type", String)
+], CreateAlertIntakeRouteDto.prototype, "keyword", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    (0, class_transformer_1.Type)(() => Number),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.IsPositive)(),
+    __metadata("design:type", Number)
+], CreateAlertIntakeRouteDto.prototype, "organizationId", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ default: true }),
+    (0, class_validator_1.IsBoolean)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", Boolean)
+], CreateAlertIntakeRouteDto.prototype, "enabled", void 0);
+class UpdateAlertIntakeRouteDto {
+}
+exports.UpdateAlertIntakeRouteDto = UpdateAlertIntakeRouteDto;
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)(),
+    (0, class_transformer_1.Type)(() => Number),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.IsPositive)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", Number)
+], UpdateAlertIntakeRouteDto.prototype, "organizationId", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", Boolean)
+], UpdateAlertIntakeRouteDto.prototype, "enabled", void 0);
+//# sourceMappingURL=alert-intake.dto.js.map

package/dist/cjs/modules/alert-intake/dtos/alert-intake.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alert-intake.dto.js","sourceRoot":"","sources":["../../../../../src/modules/alert-intake/dtos/alert-intake.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,yDAAoD;AACpD,qDAeyB;AACzB,kEAKoC;AACpC,kEAA2G;AAE3G,MAAM,IAAI,GAAG,CAAC,EAAE,KAAK,EAAsB,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACnG,MAAM,WAAW,GAAG,YAAY,CAAC;AACjC,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB;;;;;GAKG;AACH,SAAS,cAAc,CAAC,UAAqC,EAAE,EAAE,iBAAqC;IAClG,OAAO,CAAC,MAAc,EAAE,YAAoB,EAAE,EAAE,CAC5C,IAAA,mCAAiB,EAAC;QACd,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,MAAM,CAAC,WAAW;QAC1B,YAAY;QACZ,OAAO,EAAE,iBAAiB;QAC1B,SAAS,EAAE;YACP,QAAQ,CAAC,KAAc;gBACnB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACtF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC;gBACjE,IAAI,OAAO,CAAC,MAAM,GAAG,YAAY;oBAAE,OAAO,KAAK,CAAC;gBAChD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;oBACjC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC;wBAAE,OAAO,KAAK,CAAC;oBAC5D,IAAI,OAAO,IAAI,KAAK,QAAQ;wBAAE,OAAO,IAAI,CAAC,MAAM,IAAI,mDAA+B,CAAC;oBACpF,IAAI,OAAO,CAAC,WAAW;wBAAE,OAAO,KAAK,CAAC;oBACtC,OAAO,OAAO,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5F,CAAC,CAAC,CAAC;YACP,CAAC;YACD,cAAc,CAAC,IAAyB;gBACpC,OAAO,GAAG,IAAI,CAAC,QAAQ,qCAAqC,YAAY,UAAU,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,2BAA2B,SAAS,CAAC;YAC5J,CAAC;SACJ;KACJ,CAAC,CAAC;AACX,CAAC;AAED,MAAa,8BAA8B;CA6C1C;AA7CD,wEA6CC;AA1CG;IAFC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,sCAAkB,EAAE,CAAC;IACzC,IAAA,wBAAM,EAAC,sCAAkB,CAAC;;+DACE;AAI7B;IAFC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,uCAAmB,EAAE,CAAC;IAC1C,IAAA,wBAAM,EAAC,uCAAmB,CAAC;;gEACG;AAI/B;IAFC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IACpD,IAAA,6BAAS,EAAC,IAAI,CAAC;IAAE,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,CAAC,CAAC;IAAE,IAAA,2BAAS,EAAC,GAAG,CAAC;IAAE,IAAA,yBAAO,EAAC,WAAW,CAAC;;4DAClE;AAOd;IALC,IAAA,qBAAW,EAAC;QACT,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,mGAAmG;KACnH,CAAC;IACD,IAAA,6BAAS,EAAC,IAAI,CAAC;IAAE,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,CAAC,CAAC;IAAE,IAAA,2BAAS,EAAC,GAAG,CAAC;IAAE,IAAA,yBAAO,EAAC,WAAW,CAAC;;+DAC/D;AAIjB;IAFC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,2BAAS,GAAE;IAAE,IAAA,4BAAU,GAAE;;+DACR;AAIlB;IAFC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,yEAAyE,EAAE,CAAC;IAC/G,cAAc,EAAE;IAAE,IAAA,4BAAU,GAAE;;8DACoB;AAMnD;IAJC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EAAE,0GAA0G;KAC1H,CAAC;IACD,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAAE,IAAA,4BAAU,GAAE;;+DACnB;AAQjC;IANC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EACP,oFAAoF;YACpF,iDAAiD;KACxD,CAAC;IACD,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAAE,IAAA,4BAAU,GAAE;;wEACV;AAI1C;IAFC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,8CAA0B,EAAE,OAAO,EAAE,8CAA0B,CAAC,IAAI,EAAE,CAAC;IACnG,IAAA,wBAAM,EAAC,8CAA0B,CAAC;IAAE,IAAA,4BAAU,GAAE;;uEACJ;AAGjD;;;;GAIG;AACH,MAAa,8BAA8B;CA2B1C;AA3BD,wEA2BC;AAxBG;IAFC,IAAA,6BAAmB,GAAE;IACrB,IAAA,6BAAS,EAAC,IAAI,CAAC;IAAE,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,CAAC,CAAC;IAAE,IAAA,2BAAS,EAAC,GAAG,CAAC;IAAE,IAAA,yBAAO,EAAC,WAAW,CAAC;IAAE,IAAA,4BAAU,GAAE;;4DAChF;AAId;IAFC,IAAA,6BAAmB,GAAE;IACrB,IAAA,6BAAS,EAAC,IAAI,CAAC;IAAE,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,CAAC,CAAC;IAAE,IAAA,2BAAS,EAAC,GAAG,CAAC;IAAE,IAAA,yBAAO,EAAC,WAAW,CAAC;IAAE,IAAA,4BAAU,GAAE;;+DAC7E;AAGjB;IADC,IAAA,6BAAmB,GAAE;IAAE,IAAA,2BAAS,GAAE;IAAE,IAAA,4BAAU,GAAE;;+DAC/B;AAIlB;IAFC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,+DAA+D,EAAE,CAAC;IACrG,cAAc,EAAE;IAAE,IAAA,4BAAU,GAAE;;8DACoB;AAInD;IAFC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,qFAAqF,EAAE,CAAC;IAC3H,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAAE,IAAA,4BAAU,GAAE;;+DACnB;AAIjC;IAFC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IAChE,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAAE,IAAA,4BAAU,GAAE;;wEACV;AAI1C;IAFC,IAAA,6BAAmB,EAAC,EAAE,IAAI,EAAE,8CAA0B,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,8CAA0B,CAAC;IAAE,IAAA,4BAAU,GAAE;;uEACJ;AAGjD,0FAA0F;AAC1F,MAAa,yBAAyB;CAkBrC;AAlBD,8DAkBC;AAfG;IAFC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,yCAAqB,EAAE,CAAC;IAC5C,IAAA,wBAAM,EAAC,yCAAqB,CAAC;;wDACA;AAM9B;IAJC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,mDAAmD,EAAE,CAAC;IACzG,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1F,IAAA,4BAAU,EAAC,CAAC,GAA8B,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,yCAAqB,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC;IACxH,IAAA,yBAAO,EAAC,gDAA4B,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;;0DAC5E;AAIjB;IAFC,IAAA,qBAAW,GAAE;IACb,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,4BAAU,GAAE;;iEAClB;AAIxB;IAFC,IAAA,6BAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,IAAA,2BAAS,GAAE;IAAE,IAAA,4BAAU,GAAE;;0DACR;AAGtB,MAAa,yBAAyB;CAOrC;AAPD,8DAOC;AAJG;IAFC,IAAA,6BAAmB,GAAE;IACrB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,4BAAU,GAAE;IAAE,IAAA,4BAAU,GAAE;;iEAChC;AAGxB;IADC,IAAA,6BAAmB,GAAE;IAAE,IAAA,2BAAS,GAAE;IAAE,IAAA,4BAAU,GAAE;;0DAC/B"}

package/dist/cjs/modules/alert-intake/enums/alert-intake.enum.js

@@ -0,0 +1,97 @@
+"use strict";
+/**
+ * Alert intake: how a member of the public reaches an organization WITHOUT the app -
+ * an SMS, a WhatsApp message or an email that clarion-alerts turns into an incident.
+ *
+ * Not to be confused with `alert-dispatch`, which is about who an SOS raised IN the
+ * app is sent to.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AlertIntakeRejectionReason = exports.AlertIntakeWebhookVerification = exports.AlertIntakeRouteMatch = exports.AlertIntakeEmergencyPolicy = exports.AlertIntakeSecretSource = exports.AlertIntakeProvider = exports.AlertIntakeChannel = void 0;
+/** The channel a message arrived on. */
+var AlertIntakeChannel;
+(function (AlertIntakeChannel) {
+    AlertIntakeChannel["SMS"] = "SMS";
+    AlertIntakeChannel["WHATSAPP"] = "WHATSAPP";
+    AlertIntakeChannel["EMAIL"] = "EMAIL";
+})(AlertIntakeChannel || (exports.AlertIntakeChannel = AlertIntakeChannel = {}));
+/**
+ * The provider a connection talks to.
+ *
+ * A code here only RESERVES the name. Whether a provider can be connected is
+ * answered by clarion-alerts' provider catalogue (`AlertIntakeProviderDescriptor`),
+ * which lists only providers with a registered adapter. UWAZII and CELCOM are
+ * reserved without an adapter on purpose: their inbound callback formats have not
+ * been confirmed, and until they are, GENERIC_SMS connects them by configuration.
+ */
+var AlertIntakeProvider;
+(function (AlertIntakeProvider) {
+    // SMS
+    AlertIntakeProvider["AFRICASTALKING"] = "africastalking";
+    AlertIntakeProvider["UWAZII"] = "uwazii";
+    AlertIntakeProvider["CELCOM"] = "celcom";
+    /** Any gateway that POSTs flat JSON or form fields; the field names are configured. */
+    AlertIntakeProvider["GENERIC_SMS"] = "generic_sms";
+    // WhatsApp
+    AlertIntakeProvider["WHATSAPP_CLOUD"] = "whatsapp_cloud";
+    // Email
+    AlertIntakeProvider["IMAP"] = "imap";
+    /** An inbound-parse webhook (Mailgun routes, SendGrid Inbound Parse, or a generic JSON post). */
+    AlertIntakeProvider["EMAIL_WEBHOOK"] = "email_webhook";
+})(AlertIntakeProvider || (exports.AlertIntakeProvider = AlertIntakeProvider = {}));
+/**
+ * Where a connection's credentials live. Never in a plaintext column.
+ *
+ *   ENCRYPTED         entered by the organization, encrypted at rest by clarion-alerts
+ *                     (AES-256-GCM, bound to the connection and the field). Write-only:
+ *                     the API never returns them.
+ *   SECRET_REFERENCE  the NAME of a secret the platform operator provisioned (Secret
+ *                     Manager / environment). How the legacy per-tenant credentials
+ *                     keep working, and the option for an operator who does not want
+ *                     a credential in the database at all.
+ */
+var AlertIntakeSecretSource;
+(function (AlertIntakeSecretSource) {
+    AlertIntakeSecretSource["ENCRYPTED"] = "ENCRYPTED";
+    AlertIntakeSecretSource["SECRET_REFERENCE"] = "SECRET_REFERENCE";
+})(AlertIntakeSecretSource || (exports.AlertIntakeSecretSource = AlertIntakeSecretSource = {}));
+/**
+ * How the emergency type of an incident raised from a message is decided.
+ * AUTO derives it from the organization: a grievance desk never raises an
+ * emergency; an incident desk decides from the message's category and priority.
+ */
+var AlertIntakeEmergencyPolicy;
+(function (AlertIntakeEmergencyPolicy) {
+    AlertIntakeEmergencyPolicy["AUTO"] = "AUTO";
+    AlertIntakeEmergencyPolicy["ALWAYS_EMERGENCY"] = "ALWAYS_EMERGENCY";
+    AlertIntakeEmergencyPolicy["ALWAYS_NON_EMERGENCY"] = "ALWAYS_NON_EMERGENCY";
+})(AlertIntakeEmergencyPolicy || (exports.AlertIntakeEmergencyPolicy = AlertIntakeEmergencyPolicy = {}));
+/** How a message on a PLATFORM connection finds its organization. */
+var AlertIntakeRouteMatch;
+(function (AlertIntakeRouteMatch) {
+    /** The first word of the message, e.g. `G4S fire at ...` on a shared short code. */
+    AlertIntakeRouteMatch["KEYWORD"] = "KEYWORD";
+    /** Everything no other route claimed. At most one per connection. */
+    AlertIntakeRouteMatch["DEFAULT"] = "DEFAULT";
+})(AlertIntakeRouteMatch || (exports.AlertIntakeRouteMatch = AlertIntakeRouteMatch = {}));
+/** How a provider proves a webhook call really came from it. */
+var AlertIntakeWebhookVerification;
+(function (AlertIntakeWebhookVerification) {
+    /** The unguessable URL is the only proof (Africa's Talking signs nothing). */
+    AlertIntakeWebhookVerification["SECRET_URL"] = "SECRET_URL";
+    /** A shared secret the gateway sends in a header, compared in constant time. */
+    AlertIntakeWebhookVerification["SHARED_SECRET_HEADER"] = "SHARED_SECRET_HEADER";
+    /** `X-Hub-Signature-256`: HMAC-SHA256 of the raw body with the Meta app secret. */
+    AlertIntakeWebhookVerification["META_SIGNATURE"] = "META_SIGNATURE";
+})(AlertIntakeWebhookVerification || (exports.AlertIntakeWebhookVerification = AlertIntakeWebhookVerification = {}));
+/** Why a message that arrived did not become an incident. Stored; shown to operators. */
+var AlertIntakeRejectionReason;
+(function (AlertIntakeRejectionReason) {
+    AlertIntakeRejectionReason["UNKNOWN_CONNECTION"] = "UNKNOWN_CONNECTION";
+    AlertIntakeRejectionReason["CONNECTION_DISABLED"] = "CONNECTION_DISABLED";
+    AlertIntakeRejectionReason["VERIFICATION_FAILED"] = "VERIFICATION_FAILED";
+    AlertIntakeRejectionReason["NO_ORGANIZATION"] = "NO_ORGANIZATION";
+    AlertIntakeRejectionReason["ORGANIZATION_INACTIVE"] = "ORGANIZATION_INACTIVE";
+    AlertIntakeRejectionReason["RATE_LIMITED"] = "RATE_LIMITED";
+})(AlertIntakeRejectionReason || (exports.AlertIntakeRejectionReason = AlertIntakeRejectionReason = {}));
+//# sourceMappingURL=alert-intake.enum.js.map

package/dist/cjs/modules/alert-intake/enums/alert-intake.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alert-intake.enum.js","sourceRoot":"","sources":["../../../../../src/modules/alert-intake/enums/alert-intake.enum.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAEH,wCAAwC;AACxC,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC1B,iCAAW,CAAA;IACX,2CAAqB,CAAA;IACrB,qCAAe,CAAA;AACnB,CAAC,EAJW,kBAAkB,kCAAlB,kBAAkB,QAI7B;AAED;;;;;;;;GAQG;AACH,IAAY,mBAaX;AAbD,WAAY,mBAAmB;IAC3B,MAAM;IACN,wDAAiC,CAAA;IACjC,wCAAiB,CAAA;IACjB,wCAAiB,CAAA;IACjB,uFAAuF;IACvF,kDAA2B,CAAA;IAC3B,WAAW;IACX,wDAAiC,CAAA;IACjC,QAAQ;IACR,oCAAa,CAAA;IACb,iGAAiG;IACjG,sDAA+B,CAAA;AACnC,CAAC,EAbW,mBAAmB,mCAAnB,mBAAmB,QAa9B;AAED;;;;;;;;;;GAUG;AACH,IAAY,uBAGX;AAHD,WAAY,uBAAuB;IAC/B,kDAAuB,CAAA;IACvB,gEAAqC,CAAA;AACzC,CAAC,EAHW,uBAAuB,uCAAvB,uBAAuB,QAGlC;AAED;;;;GAIG;AACH,IAAY,0BAIX;AAJD,WAAY,0BAA0B;IAClC,2CAAa,CAAA;IACb,mEAAqC,CAAA;IACrC,2EAA6C,CAAA;AACjD,CAAC,EAJW,0BAA0B,0CAA1B,0BAA0B,QAIrC;AAED,qEAAqE;AACrE,IAAY,qBAKX;AALD,WAAY,qBAAqB;IAC7B,oFAAoF;IACpF,4CAAmB,CAAA;IACnB,qEAAqE;IACrE,4CAAmB,CAAA;AACvB,CAAC,EALW,qBAAqB,qCAArB,qBAAqB,QAKhC;AAED,gEAAgE;AAChE,IAAY,8BAOX;AAPD,WAAY,8BAA8B;IACtC,8EAA8E;IAC9E,2DAAyB,CAAA;IACzB,gFAAgF;IAChF,+EAA6C,CAAA;IAC7C,mFAAmF;IACnF,mEAAiC,CAAA;AACrC,CAAC,EAPW,8BAA8B,8CAA9B,8BAA8B,QAOzC;AAED,yFAAyF;AACzF,IAAY,0BAOX;AAPD,WAAY,0BAA0B;IAClC,uEAAyC,CAAA;IACzC,yEAA2C,CAAA;IAC3C,yEAA2C,CAAA;IAC3C,iEAAmC,CAAA;IACnC,6EAA+C,CAAA;IAC/C,2DAA6B,CAAA;AACjC,CAAC,EAPW,0BAA0B,0CAA1B,0BAA0B,QAOrC"}

package/dist/cjs/modules/alert-intake/index.js

@@ -0,0 +1,25 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Enums
+__exportStar(require("./enums/alert-intake.enum"), exports);
+// Interfaces
+__exportStar(require("./interfaces/alert-intake"), exports);
+// DTOs
+__exportStar(require("./dtos/alert-intake.dto"), exports);
+// Utilities
+__exportStar(require("./utils/alert-intake.util"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/modules/alert-intake/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/alert-intake/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,QAAQ;AACR,4DAA0C;AAE1C,aAAa;AACb,4DAA0C;AAE1C,OAAO;AACP,0DAAwC;AAExC,YAAY;AACZ,4DAA0C"}

package/dist/cjs/modules/alert-intake/interfaces/alert-intake.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=alert-intake.js.map

package/dist/cjs/modules/alert-intake/interfaces/alert-intake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alert-intake.js","sourceRoot":"","sources":["../../../../../src/modules/alert-intake/interfaces/alert-intake.ts"],"names":[],"mappings":""}

package/dist/cjs/modules/alert-intake/utils/alert-intake.util.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_ALERT_INTAKE_SETTING_LENGTH = exports.MAX_ALERT_INTAKE_ROUTES_PER_CONNECTION = exports.MAX_ALERT_INTAKE_CONNECTIONS_PER_ORGANIZATION = exports.ALERT_INTAKE_KEYWORD_PATTERN = void 0;
+exports.normaliseAlertIntakeKeyword = normaliseAlertIntakeKeyword;
+exports.extractAlertIntakeKeyword = extractAlertIntakeKeyword;
+exports.stripAlertIntakeKeyword = stripAlertIntakeKeyword;
+/** A routing keyword: 2-20 letters or digits, stored upper-cased. */
+exports.ALERT_INTAKE_KEYWORD_PATTERN = /^[A-Z0-9]{2,20}$/;
+/** Upper bounds that keep one organization's settings a form rather than a list to page through. */
+exports.MAX_ALERT_INTAKE_CONNECTIONS_PER_ORGANIZATION = 20;
+exports.MAX_ALERT_INTAKE_ROUTES_PER_CONNECTION = 200;
+/** One settings value (config or secret). An access token is the longest thing that goes here. */
+exports.MAX_ALERT_INTAKE_SETTING_LENGTH = 4096;
+/** Normalises what an operator typed into the stored form. Null when it is not a valid keyword. */
+function normaliseAlertIntakeKeyword(value) {
+    const keyword = (value !== null && value !== void 0 ? value : '').trim().toUpperCase();
+    return exports.ALERT_INTAKE_KEYWORD_PATTERN.test(keyword) ? keyword : null;
+}
+/**
+ * The routing keyword of a message: its first word, upper-cased, punctuation
+ * stripped - `g4s, fire at the gate` and `G4S: fire` both give `G4S`.
+ * Null when the first word could not be a keyword.
+ *
+ * Deliberately only the FIRST word. Matching a keyword anywhere in the text would
+ * route "I was robbed near the G4S office" to G4S.
+ */
+function extractAlertIntakeKeyword(text) {
+    var _a;
+    const first = (_a = (text !== null && text !== void 0 ? text : '').trim().split(/\s+/)[0]) !== null && _a !== void 0 ? _a : '';
+    return normaliseAlertIntakeKeyword(first.replace(/^[^A-Za-z0-9]+|[^A-Za-z0-9]+$/g, ''));
+}
+/**
+ * The message with its routing keyword removed, so "G4S fire at the gate" is
+ * analysed as "fire at the gate". Returns the text unchanged when it does not start
+ * with that keyword.
+ */
+function stripAlertIntakeKeyword(text, keyword) {
+    const trimmed = (text !== null && text !== void 0 ? text : '').trim();
+    // Keywords are [A-Z0-9] by construction; escaping keeps this safe for a caller that skipped normalising.
+    const literal = keyword.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    const match = new RegExp(`^[^A-Za-z0-9]*${literal}(?![A-Za-z0-9])[^A-Za-z0-9]*`, 'i').exec(trimmed);
+    if (!match)
+        return text;
+    const rest = trimmed.slice(match[0].length).trim();
+    // A message that was ONLY the keyword is still a message; do not turn it into nothing.
+    return rest.length > 0 ? rest : trimmed;
+}
+//# sourceMappingURL=alert-intake.util.js.map

package/dist/cjs/modules/alert-intake/utils/alert-intake.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alert-intake.util.js","sourceRoot":"","sources":["../../../../../src/modules/alert-intake/utils/alert-intake.util.ts"],"names":[],"mappings":";;;AAUA,kEAGC;AAUD,8DAGC;AAOD,0DASC;AA1CD,qEAAqE;AACxD,QAAA,4BAA4B,GAAG,kBAAkB,CAAC;AAE/D,oGAAoG;AACvF,QAAA,6CAA6C,GAAG,EAAE,CAAC;AACnD,QAAA,sCAAsC,GAAG,GAAG,CAAC;AAC1D,kGAAkG;AACrF,QAAA,+BAA+B,GAAG,IAAI,CAAC;AAEpD,mGAAmG;AACnG,SAAgB,2BAA2B,CAAC,KAAgC;IACxE,MAAM,OAAO,GAAG,CAAC,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnD,OAAO,oCAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,yBAAyB,CAAC,IAA+B;;IACrE,MAAM,KAAK,GAAG,MAAA,CAAC,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,mCAAI,EAAE,CAAC;IACxD,OAAO,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED;;;;GAIG;AACH,SAAgB,uBAAuB,CAAC,IAAY,EAAE,OAAe;IACjE,MAAM,OAAO,GAAG,CAAC,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,yGAAyG;IACzG,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,iBAAiB,OAAO,8BAA8B,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpG,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,uFAAuF;IACvF,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AAC5C,CAAC"}