grm-shared-library 1.1.221 → 1.1.222

package/dist/esm/modules/safety/utils/safety-check-timing.util.js

@@ -0,0 +1,59 @@
+import { SAFETY_CHECK_LIMITS } from '../constants/safety-check-limits.const';
+const MINUTE_MS = 60000;
+/** Validates a requested duration against the platform limits. */
+export function validateSafetyCheckDuration(minutes) {
+    if (typeof minutes !== 'number' || !Number.isInteger(minutes))
+        return { valid: false, reason: 'NOT_AN_INTEGER' };
+    if (minutes < SAFETY_CHECK_LIMITS.minDurationMinutes)
+        return { valid: false, reason: 'TOO_SHORT' };
+    if (minutes > SAFETY_CHECK_LIMITS.maxDurationMinutes)
+        return { valid: false, reason: 'TOO_LONG' };
+    return { valid: true };
+}
+/** Whether a prompt countdown (seconds) is within the configurable range. */
+export function isValidPromptCountdownSeconds(seconds) {
+    return (typeof seconds === 'number' &&
+        Number.isInteger(seconds) &&
+        seconds >= SAFETY_CHECK_LIMITS.minPromptCountdownSeconds &&
+        seconds <= SAFETY_CHECK_LIMITS.maxPromptCountdownSeconds);
+}
+/** The latest moment a check started at `startedAt` may be scheduled to check in. */
+export function latestAllowedCheckInAt(startedAt) {
+    return new Date(startedAt.getTime() + SAFETY_CHECK_LIMITS.maxDurationMinutes * MINUTE_MS);
+}
+/**
+ * Plans an extension. While the check-in time is still ahead the extension is
+ * added to it; once it has passed (the user is being prompted) it counts from
+ * now. Either way the result may not end more than maxDurationMinutes after the
+ * check started - an extension never lets a check outlive the 24 hour cap.
+ */
+export function planSafetyCheckExtension(input) {
+    const cap = latestAllowedCheckInAt(input.startedAt).getTime();
+    const base = Math.max(input.scheduledCheckInAt.getTime(), input.now.getTime());
+    const maxAdditionalMinutes = Math.max(0, Math.floor((cap - base) / MINUTE_MS));
+    if (!Number.isInteger(input.additionalMinutes) || input.additionalMinutes < 1) {
+        return { allowed: false, maxAdditionalMinutes };
+    }
+    const next = base + input.additionalMinutes * MINUTE_MS;
+    if (next > cap)
+        return { allowed: false, maxAdditionalMinutes };
+    return {
+        allowed: true,
+        scheduledCheckInAt: new Date(next),
+        totalDurationMinutes: Math.round((next - input.startedAt.getTime()) / MINUTE_MS),
+        maxAdditionalMinutes,
+    };
+}
+/** When the prompt shown at `promptStartedAt` runs out (what the user sees). */
+export function promptDeadlineFrom(promptStartedAt, promptCountdownSeconds) {
+    return new Date(promptStartedAt.getTime() + promptCountdownSeconds * 1000);
+}
+/** When the server actually raises the SOS: the visible deadline plus the grace. */
+export function sosDueAt(promptDeadlineAt) {
+    return new Date(promptDeadlineAt.getTime() + SAFETY_CHECK_LIMITS.checkInGraceSeconds * 1000);
+}
+/** Whether an SOS that fell due at `dueAt` is too stale to raise at `now`. */
+export function isSosTooStale(dueAt, now) {
+    return now.getTime() - dueAt.getTime() > SAFETY_CHECK_LIMITS.staleSosWindowMinutes * MINUTE_MS;
+}
+//# sourceMappingURL=safety-check-timing.util.js.map

package/dist/esm/modules/safety/utils/safety-check-timing.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-check-timing.util.js","sourceRoot":"","sources":["../../../../../src/modules/safety/utils/safety-check-timing.util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAE7E,MAAM,SAAS,GAAG,KAAM,CAAC;AAOzB,kEAAkE;AAClE,MAAM,UAAU,2BAA2B,CAAC,OAAgB;IACxD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjH,IAAI,OAAO,GAAG,mBAAmB,CAAC,kBAAkB;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACnG,IAAI,OAAO,GAAG,mBAAmB,CAAC,kBAAkB;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAClG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,6BAA6B,CAAC,OAAgB;IAC1D,OAAO,CACH,OAAO,OAAO,KAAK,QAAQ;QAC3B,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;QACzB,OAAO,IAAI,mBAAmB,CAAC,yBAAyB;QACxD,OAAO,IAAI,mBAAmB,CAAC,yBAAyB,CAC3D,CAAC;AACN,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,sBAAsB,CAAC,SAAe;IAClD,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,mBAAmB,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;AAC9F,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAKxC;IACG,MAAM,GAAG,GAAG,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/E,MAAM,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;IAE/E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,KAAK,CAAC,iBAAiB,GAAG,SAAS,CAAC;IACxD,IAAI,IAAI,GAAG,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAEhE,OAAO;QACH,OAAO,EAAE,IAAI;QACb,kBAAkB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC;QAClC,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,SAAS,CAAC;QAChF,oBAAoB;KACvB,CAAC;AACN,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,eAAqB,EAAE,sBAA8B;IACpF,OAAO,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,sBAAsB,GAAG,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,QAAQ,CAAC,gBAAsB;IAC3C,OAAO,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,mBAAmB,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;AACjG,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAAC,KAAW,EAAE,GAAS;IAChD,OAAO,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,mBAAmB,CAAC,qBAAqB,GAAG,SAAS,CAAC;AACnG,CAAC"}

package/dist/esm/modules/sms/constants/sms-templates.config.js

@@ -43,6 +43,18 @@ export const SMS_TEMPLATES = {
             variables: ['REPORTER_FIRSTNAME', 'GUARDIAN_FIRSTNAME', 'APP_NAME', 'LOCATION_LINK'],
             description: 'Template for incident guardian notifications'
         },
+        [SmsTemplateType.SAFETY_CHECK_GUARDIAN_STARTED]: {
+            name: 'Safety Check Started (Guardian)',
+            content: '{{GUARDIAN_FIRSTNAME}}, {{USER_FIRSTNAME}} has started a Safety Check on {{APP_NAME}} ({{REASON}}) and expects to check in by {{CHECK_IN_TIME}}. If they do not, you will be alerted. Nothing to do for now.',
+            variables: ['GUARDIAN_FIRSTNAME', 'USER_FIRSTNAME', 'APP_NAME', 'REASON', 'CHECK_IN_TIME'],
+            description: 'Tells an external guardian that someone who chose them started a Safety Check'
+        },
+        [SmsTemplateType.SAFETY_CHECK_GUARDIAN_ENDED]: {
+            name: 'Safety Check Ended (Guardian)',
+            content: '{{GUARDIAN_FIRSTNAME}}, {{USER_FIRSTNAME}} {{OUTCOME}} on {{APP_NAME}}. Nothing to do.',
+            variables: ['GUARDIAN_FIRSTNAME', 'USER_FIRSTNAME', 'OUTCOME', 'APP_NAME'],
+            description: 'Tells an external guardian that a Safety Check ended without an SOS'
+        },
         [SmsTemplateType.APPOINTMENT_REMINDER]: {
             name: 'Appointment Reminder',
             content: 'Reminder: You have an appointment on {{DATE}} at {{TIME}} for {{PURPOSE}}. Location: {{LOCATION}}. Contact us if you need to reschedule.',

package/dist/esm/modules/sms/constants/sms-templates.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"sms-templates.config.js","sourceRoot":"","sources":["../../../../../src/modules/sms/constants/sms-templates.config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,MAAM,CAAC,MAAM,aAAa,GAAsB;IAC5C,SAAS,EAAE;QACP,CAAC,eAAe,CAAC,gBAAgB,CAAC,EAAE;YAChC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,qIAAqI;YAC9I,SAAS,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC;YACpC,WAAW,EAAE,6CAA6C;SAC7D;QACD,CAAC,eAAe,CAAC,cAAc,CAAC,EAAE;YAC9B,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,oKAAoK;YAC7K,SAAS,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC;YACpC,WAAW,EAAE,gDAAgD;SAChE;QACD,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE;YACvB,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,6HAA6H;YACtI,SAAS,EAAE,CAAC,mBAAmB,EAAE,MAAM,CAAC;YACxC,WAAW,EAAE,+BAA+B;SAC/C;QACD,CAAC,eAAe,CAAC,kBAAkB,CAAC,EAAE;YAClC,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,2IAA2I;YACpJ,SAAS,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,gBAAgB,CAAC;YAC5C,WAAW,EAAE,uCAAuC;SACvD;QACD,CAAC,eAAe,CAAC,cAAc,CAAC,EAAE;YAC9B,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,iHAAiH;YAC1H,SAAS,EAAE,CAAC,eAAe,EAAE,WAAW,CAAC;YACzC,WAAW,EAAE,gDAAgD;SAChE;QACD,CAAC,eAAe,CAAC,qBAAqB,CAAC,EAAE;YACrC,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,yHAAyH;YAClI,SAAS,EAAE,CAAC,gBAAgB,EAAE,aAAa,CAAC;YAC5C,WAAW,EAAE,qCAAqC;SACrD;QACD,CAAC,eAAe,CAAC,8BAA8B,CAAC,EAAE;YAC9C,IAAI,EAAE,gCAAgC;YACtC,OAAO,EAAE,oPAAoP;YAC7P,SAAS,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,UAAU,EAAE,eAAe,CAAC;YACpF,WAAW,EAAE,8CAA8C;SAC9D;QACD,CAAC,eAAe,CAAC,oBAAoB,CAAC,EAAE;YACpC,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,0IAA0I;YACnJ,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;YAClD,WAAW,EAAE,oCAAoC;SACpD;QACD,CAAC,eAAe,CAAC,oBAAoB,CAAC,EAAE;YACpC,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE,CAAC,SAAS,CAAC;YACtB,WAAW,EAAE,uCAAuC;SACvD;KACJ;CACJ,CAAC"}
+{"version":3,"file":"sms-templates.config.js","sourceRoot":"","sources":["../../../../../src/modules/sms/constants/sms-templates.config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,MAAM,CAAC,MAAM,aAAa,GAAsB;IAC5C,SAAS,EAAE;QACP,CAAC,eAAe,CAAC,gBAAgB,CAAC,EAAE;YAChC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,qIAAqI;YAC9I,SAAS,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC;YACpC,WAAW,EAAE,6CAA6C;SAC7D;QACD,CAAC,eAAe,CAAC,cAAc,CAAC,EAAE;YAC9B,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,oKAAoK;YAC7K,SAAS,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC;YACpC,WAAW,EAAE,gDAAgD;SAChE;QACD,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE;YACvB,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,6HAA6H;YACtI,SAAS,EAAE,CAAC,mBAAmB,EAAE,MAAM,CAAC;YACxC,WAAW,EAAE,+BAA+B;SAC/C;QACD,CAAC,eAAe,CAAC,kBAAkB,CAAC,EAAE;YAClC,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,2IAA2I;YACpJ,SAAS,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,gBAAgB,CAAC;YAC5C,WAAW,EAAE,uCAAuC;SACvD;QACD,CAAC,eAAe,CAAC,cAAc,CAAC,EAAE;YAC9B,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,iHAAiH;YAC1H,SAAS,EAAE,CAAC,eAAe,EAAE,WAAW,CAAC;YACzC,WAAW,EAAE,gDAAgD;SAChE;QACD,CAAC,eAAe,CAAC,qBAAqB,CAAC,EAAE;YACrC,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,yHAAyH;YAClI,SAAS,EAAE,CAAC,gBAAgB,EAAE,aAAa,CAAC;YAC5C,WAAW,EAAE,qCAAqC;SACrD;QACD,CAAC,eAAe,CAAC,8BAA8B,CAAC,EAAE;YAC9C,IAAI,EAAE,gCAAgC;YACtC,OAAO,EAAE,oPAAoP;YAC7P,SAAS,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,UAAU,EAAE,eAAe,CAAC;YACpF,WAAW,EAAE,8CAA8C;SAC9D;QACD,CAAC,eAAe,CAAC,6BAA6B,CAAC,EAAE;YAC7C,IAAI,EAAE,iCAAiC;YACvC,OAAO,EAAE,8MAA8M;YACvN,SAAS,EAAE,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,CAAC;YAC1F,WAAW,EAAE,+EAA+E;SAC/F;QACD,CAAC,eAAe,CAAC,2BAA2B,CAAC,EAAE;YAC3C,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,wFAAwF;YACjG,SAAS,EAAE,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,SAAS,EAAE,UAAU,CAAC;YAC1E,WAAW,EAAE,qEAAqE;SACrF;QACD,CAAC,eAAe,CAAC,oBAAoB,CAAC,EAAE;YACpC,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,0IAA0I;YACnJ,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;YAClD,WAAW,EAAE,oCAAoC;SACpD;QACD,CAAC,eAAe,CAAC,oBAAoB,CAAC,EAAE;YACpC,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE,CAAC,SAAS,CAAC;YACtB,WAAW,EAAE,uCAAuC;SACvD;KACJ;CACJ,CAAC"}

package/dist/esm/modules/sms/enums/sms-template.enum.js

@@ -7,6 +7,8 @@ export var SmsTemplateType;
     SmsTemplateType["SECURITY_ALERT"] = "security_alert";
     SmsTemplateType["INCIDENT_NOTIFICATION"] = "incident_notification";
     SmsTemplateType["INCIDENT_GUARDIAN_NOTIFICATION"] = "incident_guardian_notification";
+    SmsTemplateType["SAFETY_CHECK_GUARDIAN_STARTED"] = "safety_check_guardian_started";
+    SmsTemplateType["SAFETY_CHECK_GUARDIAN_ENDED"] = "safety_check_guardian_ended";
     SmsTemplateType["APPOINTMENT_REMINDER"] = "appointment_reminder";
     SmsTemplateType["GENERAL_NOTIFICATION"] = "general_notification";
 })(SmsTemplateType || (SmsTemplateType = {}));

package/dist/esm/modules/sms/enums/sms-template.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"sms-template.enum.js","sourceRoot":"","sources":["../../../../../src/modules/sms/enums/sms-template.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,eAUX;AAVD,WAAY,eAAe;IACvB,wDAAqC,CAAA;IACrC,oDAAiC,CAAA;IACjC,sCAAmB,CAAA;IACnB,4DAAyC,CAAA;IACzC,oDAAiC,CAAA;IACjC,kEAA+C,CAAA;IAC/C,oFAAiE,CAAA;IACjE,gEAA6C,CAAA;IAC7C,gEAA6C,CAAA;AACjD,CAAC,EAVW,eAAe,KAAf,eAAe,QAU1B"}
+{"version":3,"file":"sms-template.enum.js","sourceRoot":"","sources":["../../../../../src/modules/sms/enums/sms-template.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,eAYX;AAZD,WAAY,eAAe;IACvB,wDAAqC,CAAA;IACrC,oDAAiC,CAAA;IACjC,sCAAmB,CAAA;IACnB,4DAAyC,CAAA;IACzC,oDAAiC,CAAA;IACjC,kEAA+C,CAAA;IAC/C,oFAAiE,CAAA;IACjE,kFAA+D,CAAA;IAC/D,8EAA2D,CAAA;IAC3D,gEAA6C,CAAA;IAC7C,gEAA6C,CAAA;AACjD,CAAC,EAZW,eAAe,KAAf,eAAe,QAY1B"}

package/dist/types/index.d.ts

@@ -25,6 +25,7 @@ export * from './modules/system-user/index';
 export * from './modules/partner/index';
 export * from './modules/support/index';
 export * from './modules/alert-intake/index';
+export * from './modules/safety/index';
 export * from './interfaces/server-message';
 export * from './interfaces/i-request-with-user';
 export * from './interfaces/validated-user';

package/dist/types/kafka/topics.d.ts

@@ -76,4 +76,8 @@ export declare const KAFKA_TOPICS: {
     SUPPORT_FEEDBACK_RATING_SUBMITTED: string;
     SUPPORT_PROVIDER_SYNC_FAILED: string;
     SUPPORT_PROVIDER_SYNC_RECOVERED: string;
+    SAFETY_CHECK_STARTED: string;
+    SAFETY_CHECK_PROMPTING: string;
+    SAFETY_CHECK_ENDED: string;
+    SAFETY_CHECK_SOS_TRIGGERED: string;
 };

package/dist/types/modules/alert-dispatch/dtos/guardian-audience.dto.d.ts

@@ -0,0 +1,6 @@
+import { GuardianAudience } from '../interfaces/guardian-audience';
+/** Validated GuardianAudience - see the interface for what absent vs present means. */
+export declare class GuardianAudienceDto implements GuardianAudience {
+    systemGuardianUserIds: number[];
+    externalGuardianPhoneNumbers: string[];
+}

package/dist/types/modules/alert-dispatch/index.d.ts

@@ -1,3 +1,6 @@
 export * from './enums/incident-dispatch-scope.enum';
 export * from './interfaces/alert-dispatch';
+export * from './interfaces/guardian-audience';
+export * from './dtos/guardian-audience.dto';
 export * from './utils/alert-dispatch.util';
+export * from './utils/guardian-audience.util';

package/dist/types/modules/alert-dispatch/interfaces/guardian-audience.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Which of a reporter's guardians an alert is for.
+ *
+ * Absent (null/undefined) means EVERY guardian - the behaviour every incident had
+ * before audiences existed, and still the behaviour of a plain SOS. Present means
+ * exactly these guardians and nobody else: a Safety Check's SOS goes only to the
+ * guardians the user ticked when they started it.
+ *
+ * Guardians are identified the way clarion-authentication identifies them:
+ * app-user guardians by their user id, external contacts by their E.164 phone
+ * number (they have no other id).
+ */
+export interface GuardianAudience {
+    systemGuardianUserIds: number[];
+    externalGuardianPhoneNumbers: string[];
+}
+/** The two guardian shapes clarion-authentication's alert-contacts endpoint returns. */
+export interface GuardianAudienceCandidate {
+    /** Set for an app-user guardian. */
+    userId?: number | null;
+    /** Also the identity of an external guardian. */
+    phoneNumber?: string | null;
+}

package/dist/types/modules/alert-dispatch/utils/guardian-audience.util.d.ts

@@ -0,0 +1,18 @@
+import { GuardianAudience, GuardianAudienceCandidate } from '../interfaces/guardian-audience';
+/** Canonical form used to compare guardian phone numbers. */
+export declare function canonicalGuardianPhone(value: string | null | undefined): string | null;
+/** An audience with duplicates removed and phone numbers canonicalised. */
+export declare function normalizeGuardianAudience(audience: GuardianAudience): GuardianAudience;
+/** True when an audience names nobody at all. */
+export declare function isEmptyGuardianAudience(audience: GuardianAudience | null | undefined): boolean;
+/**
+ * Whether one guardian is in the audience. A missing audience includes everyone.
+ *
+ * An app-user guardian matches on user id first. A guardian that arrives without a
+ * user id (an external contact) matches on phone number - and so does an app user
+ * the audience listed by phone, because a contact who installed the app after
+ * being added keeps the number they were chosen by.
+ */
+export declare function isInGuardianAudience(candidate: GuardianAudienceCandidate, audience: GuardianAudience | null | undefined): boolean;
+/** Keeps only the guardians in the audience. A missing audience keeps everyone. */
+export declare function filterByGuardianAudience<T>(guardians: readonly T[], audience: GuardianAudience | null | undefined, identify: (guardian: T) => GuardianAudienceCandidate): T[];

package/dist/types/modules/common/constants/service.const.d.ts

@@ -67,4 +67,8 @@ export declare const SERVICE_CONSTS: {
         name: string;
         port: number;
     };
+    SAFETY_SERVICE: {
+        name: string;
+        port: number;
+    };
 };

package/dist/types/modules/gis/dtos/private-trip.dto.d.ts

@@ -0,0 +1,42 @@
+import { TripPurpose } from '../enums/trip-privacy.enum';
+/** One recorded fix. Same shape as the SOS track points clarion-gis already stores. */
+export declare class TripTrackPointDto {
+    lat: number;
+    lng: number;
+    accuracy?: number;
+    timestamp: string;
+}
+export declare class TripStartLocationDto {
+    lat: number;
+    lng: number;
+}
+/**
+ * clarion-safety -> clarion-gis (internal): open a PRIVATE trip for a safety
+ * record. Idempotent on (purpose, sourceReferenceId).
+ */
+export declare class CreatePrivateTripDto {
+    purpose: TripPurpose;
+    sourceReferenceId: string;
+    userId: number;
+    organizationId: number;
+    controlCentreId?: number;
+    startLocation?: TripStartLocationDto;
+}
+/** Append fixes to a trip by id. `userId` must be the trip's owner. */
+export declare class AddTripTrackPointsDto {
+    userId: number;
+    points: TripTrackPointDto[];
+}
+/**
+ * Turn a PRIVATE trip into the trip of an SOS incident. Idempotent for the same
+ * incident; refused (409) for a different one.
+ */
+export declare class ShareTripDto {
+    incidentId: number;
+    targetUserIds?: number[];
+}
+/** End a PRIVATE trip without telling anyone (no realtime, no Kafka). */
+export declare class StopPrivateTripDto {
+    endLat?: number;
+    endLng?: number;
+}

package/dist/types/modules/gis/enums/trip-privacy.enum.d.ts

@@ -0,0 +1,22 @@
+/** Why a trip is being recorded. */
+export declare enum TripPurpose {
+    /** The trip of an SOS incident - every trip before safety features existed. */
+    SOS = "SOS",
+    /** Recorded during a Safety Check. */
+    SAFETY_CHECK = "SAFETY_CHECK"
+}
+/**
+ * Who a trip is visible to.
+ *
+ * PRIVATE: only its owner. clarion-gis publishes nothing about it - no realtime
+ * event, no Kafka event - and it has no incident, so no incident-scoped route can
+ * reach it. A Safety Check trip is PRIVATE while the check runs.
+ *
+ * SHARED: an incident trip, visible under the existing SOS rules. A PRIVATE trip
+ * becomes SHARED exactly once, when an SOS is raised for it; its whole recorded
+ * history is shared at that moment.
+ */
+export declare enum TripVisibility {
+    PRIVATE = "PRIVATE",
+    SHARED = "SHARED"
+}

package/dist/types/modules/gis/index.d.ts

@@ -13,6 +13,7 @@ export * from './dtos/find-zones-near-point.dto';
 export * from './dtos/geo-json-polygon.dto';
 export * from './dtos/point-containment-result.dto';
 export * from './dtos/point-location.dto';
+export * from './dtos/private-trip.dto';
 export * from './dtos/post-gis-geometry.dto';
 export * from './dtos/route-incident.dto';
 export * from './dtos/routing-coverage-result.dto';
@@ -25,6 +26,7 @@ export * from './dtos/zone-statistics-result.dto';
 export * from './dtos/zone-with-distance-result.dto';
 export * from './enums/incident-routing-result-match-type.enum';
 export * from './enums/trip-actions.enum';
+export * from './enums/trip-privacy.enum';
 export * from './enums/zone.enums';
 export * from './interfaces/client-safe-trip';
 export * from './interfaces/control-centre-routing-result';
@@ -32,6 +34,7 @@ export * from './interfaces/incident-routing-result';
 export * from './interfaces/point-containment';
 export * from './interfaces/point-location';
 export * from './interfaces/polygon-validation-result';
+export * from './interfaces/trip-summary';
 export * from './interfaces/zone';
 export * from './interfaces/zone-for-point';
 export * from './interfaces/zone-match-result';

package/dist/types/modules/gis/interfaces/client-safe-trip.d.ts

@@ -1,3 +1,4 @@
+import { TripPurpose, TripVisibility } from '../enums/trip-privacy.enum';
 export interface ClientSafeTrip {
     id: string;
     incidentId: number;
@@ -22,4 +23,11 @@ export interface ClientSafeTrip {
     startedAt: string;
     endedAt: string | null;
     distanceMeters: number | null;
+    /**
+     * Absent on events from a clarion-gis that predates private trips (all SOS).
+     * clarion-socket refuses to deliver any trip event marked PRIVATE - a private
+     * trip must never reach a room, whatever published it.
+     */
+    purpose?: TripPurpose;
+    visibility?: TripVisibility;
 }

package/dist/types/modules/gis/interfaces/trip-summary.d.ts

@@ -0,0 +1,26 @@
+import { TripPurpose, TripVisibility } from '../enums/trip-privacy.enum';
+/**
+ * A trip without its path - what clarion-safety needs to run a check and what an
+ * admin may see of it. `lastPoint` is for clarion-safety alone (the SOS location);
+ * clarion-safety never forwards it to a client before the trip is SHARED.
+ */
+export interface TripSummary {
+    id: string;
+    purpose: TripPurpose;
+    visibility: TripVisibility;
+    status: string;
+    incidentId: number | null;
+    userId: number;
+    organizationId: number;
+    startedAt: string;
+    endedAt: string | null;
+    sharedAt: string | null;
+    distanceMeters: number | null;
+    trackPointCount: number;
+    lastPoint: {
+        lat: number;
+        lng: number;
+        accuracy?: number;
+        timestamp: string;
+    } | null;
+}

package/dist/types/modules/incident/dtos/incident/incident.dto.d.ts

@@ -7,6 +7,8 @@ import { IncidentResponseUnitAssignmentDto } from "../response-unit-assignment/u
 import { IncidentReporterDto } from "../reporter/incident-reporter.dto";
 import { IncidentStatusDetailsDto } from "./incident-status-details.dto";
 import { IncidentEntitlementTier } from "../../../entitlement/enums/incident-entitlement-tier.enum";
+import { IncidentOriginType } from "../../enums/incident-origin-type.enum";
+import { GuardianAudienceDto } from "../../../alert-dispatch/dtos/guardian-audience.dto";
 declare const IncidentDto_base: import("@nestjs/common").Type<Omit<CreateIncidentDto, "reporter" | "statusDetails">>;
 export declare class IncidentDto extends IncidentDto_base {
     id: number;
@@ -26,5 +28,17 @@ export declare class IncidentDto extends IncidentDto_base {
      * alert from an entitled one without calling back into billing.
      */
     entitlementTier?: IncidentEntitlementTier;
+    /**
+     * Set when a safety feature raised the incident. Read-only: CreateIncidentDto
+     * has no such field, so nobody can claim an origin through POST /incidents.
+     */
+    originType?: IncidentOriginType | null;
+    originReferenceId?: string | null;
+    /**
+     * Which guardians the alert is for; absent means all of them. Whitelisted here
+     * because clarion-notification validates this DTO with `whitelist: true` - a
+     * field missing from it would be stripped and every guardian alerted.
+     */
+    guardianAudience?: GuardianAudienceDto | null;
 }
 export {};

package/dist/types/modules/incident/enums/incident-origin-type.enum.d.ts

@@ -0,0 +1,12 @@
+/**
+ * What raised an incident when it was not a person filling in a form. Stored on
+ * the incident with `originReferenceId` (the raising record's id); the pair is
+ * UNIQUE, which is what makes an automatic SOS impossible to raise twice.
+ *
+ * Absent for every incident a person raised - the SOS sheet, the admin, the
+ * public channels.
+ */
+export declare enum IncidentOriginType {
+    /** A Safety Check the user missed or asked for help from. */
+    SAFETY_CHECK = "SAFETY_CHECK"
+}

package/dist/types/modules/incident/index.d.ts

@@ -37,6 +37,7 @@ export * from './enums/incident-status.enum';
 export * from './enums/incident-actions.enum';
 export * from './enums/incident-workflow-queue-name.enum';
 export * from './enums/incident-emergency-type.enum';
+export * from './enums/incident-origin-type.enum';
 export * from './intefaces/incident';
 export * from './intefaces/incident-action';
 export * from './intefaces/incident-attachment';

package/dist/types/modules/incident/intefaces/incident-category.d.ts

@@ -4,5 +4,15 @@ export interface IncidentCategory {
     name: string;
     description?: string;
     organizationId: number;
+    /**
+     * Stable code of a platform-managed row (e.g. SAFETY_CHECK_SOS); null for
+     * everything an organization created itself.
+     */
+    code?: string | null;
+    /**
+     * Platform-managed: provisioned for every organization, hidden from the SOS
+     * sheet and from package configuration, and not editable or deletable.
+     */
+    isSystem?: boolean;
     types?: IncidentType[];
 }

package/dist/types/modules/incident/intefaces/incident-type.d.ts

@@ -5,5 +5,15 @@ export interface IncidentType {
     description?: string;
     categoryId?: number;
     organizationId: number;
+    /**
+     * Stable code of a platform-managed row (e.g. SAFETY_CHECK_SOS); null for
+     * everything an organization created itself.
+     */
+    code?: string | null;
+    /**
+     * Platform-managed: provisioned for every organization, hidden from the SOS
+     * sheet and from package configuration, and not editable or deletable.
+     */
+    isSystem?: boolean;
     category?: IncidentCategory;
 }

package/dist/types/modules/incident/intefaces/incident.d.ts

@@ -5,6 +5,8 @@ import { IncidentClass } from "../enums/incident-class.enum";
 import { IncidentPriority } from "../enums/incident-priority.enum";
 import { IncidentStatus } from "../enums/incident-status.enum";
 import { IncidentWorkflowTaskQueueName } from "../enums/incident-workflow-queue-name.enum";
+import { IncidentOriginType } from "../enums/incident-origin-type.enum";
+import { GuardianAudience } from "../../alert-dispatch/interfaces/guardian-audience";
 import { IncidentAction } from "./incident-action";
 import { IncidentAssignment } from "./incident-assignment";
 import { IncidentCategory } from "./incident-category";
@@ -88,6 +90,18 @@ export interface Incident {
      * billing withheld is not an alert somebody chose to withhold.
      */
     notifyServiceProviderRequested?: boolean;
+    /**
+     * Set when a safety feature raised the incident (see IncidentOriginType).
+     * Absent for everything a person raised.
+     */
+    originType?: IncidentOriginType | null;
+    originReferenceId?: string | null;
+    /**
+     * Which guardians the alert is for. Absent (the norm) means all of the
+     * reporter's guardians; a Safety Check SOS carries exactly the ones the user
+     * selected. Honoured by clarion-notification and by the incident chat.
+     */
+    guardianAudience?: GuardianAudience | null;
     createdAt?: string;
     updatedAt?: string;
     category?: IncidentCategory;

package/dist/types/modules/organization/index.d.ts

@@ -3,5 +3,6 @@ export * from './dtos/update-organization.dto';
 export * from './dtos/organization-sla.dto';
 export * from './interfaces/organization';
 export * from './interfaces/organization-sla';
+export * from './interfaces/organization-created-event';
 export * from './enums/org-status.enum';
 export * from './enums/org-type.enum';

package/dist/types/modules/organization/interfaces/organization-created-event.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Payload of KAFKA_TOPICS.ORG_CREATED, published by clarion-organization after
+ * the organization (and its HQ control centre) has been committed. Consumers
+ * provision their per-organization defaults from it - clarion-incident creates
+ * the Safety Alerts category - and must be idempotent: the event is delivered at
+ * least once, and every consumer also reconciles on its own schedule, so a lost
+ * event delays provisioning rather than skipping it.
+ */
+export interface OrganizationCreatedEvent {
+    eventId: string;
+    occurredAt: string;
+    organizationId: number;
+    name: string;
+    countryCode: string | null;
+    incidentClass: string | null;
+    appId: string | null;
+    hqControlCentreId: number | null;
+}

package/dist/types/modules/permission/enums/permission-actions.enum.d.ts

@@ -191,6 +191,9 @@ export declare enum PermissionActions {
     REVIEW_ALERT_INTAKE_SCREENED_MESSAGE = "review:alert-intake-screened-message",
     READ_ALERT_INTAKE_ANALYTICS = "read:alert-intake-analytics",
     MANAGE_ALERT_INTAKE_PLATFORM = "manage:alert-intake-platform",
+    USE_SAFETY_CHECK = "use:safety-check",
+    READ_SAFETY_CHECK = "read:safety-check",
+    MANAGE_SAFETY_CHECK_REASON = "manage:safety-check-reason",
     /**
      * @deprecated Split into the connection / message / screened-message /
      * analytics actions above, which the gateway now requires instead. Still

package/dist/types/modules/permission/enums/permissions-module.enum.d.ts

@@ -12,5 +12,6 @@ export declare enum PermissionsModule {
     NEWSFEED = "Newsfeed",
     SUPPORT = "Support",
     NOTIFICATION = "Notification",
-    ALERT_INTAKE = "Alert Intake"
+    ALERT_INTAKE = "Alert Intake",
+    SAFETY = "Safety"
 }

package/dist/types/modules/role/constants/safety-roles.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The organization roles that curate the Safety Check reasons their app offers.
+ * Each holds manage:safety-check-reason (roles.spec.ts asserts it). Platform-wide
+ * reasons are Super-Admin's alone.
+ *
+ * For the places that decide by role NAME: clarion-safety's own scoping and the
+ * admin deciding whether to offer an edit at all.
+ */
+export declare const SAFETY_MANAGER_ROLES: string[];
+/**
+ * The staff roles that may read Safety Checks: the managers across the whole
+ * organization, and a control-centre admin within their control centre.
+ */
+export declare const SAFETY_VIEWER_ROLES: string[];

package/dist/types/modules/role/index.d.ts

@@ -6,3 +6,4 @@ export * from './interfaces/role';
 export * from './constants/roles-by-scope';
 export * from './constants/billing-roles';
 export * from './constants/newsfeed-roles';
+export * from './constants/safety-roles';

package/dist/types/modules/safety/constants/safety-check-limits.const.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The Safety Check limits. The mobile app, the gateway-facing DTOs and the
+ * clarion-safety domain all read THESE numbers, so client-side and server-side
+ * validation cannot drift apart. The app additionally receives them from
+ * GET /safety/checks/start-options rather than hard-coding its own copy.
+ */
+export declare const SAFETY_CHECK_LIMITS: {
+    /** Shortest check the platform accepts. */
+    readonly minDurationMinutes: 1;
+    /** Longest check - including every extension - measured from startedAt. */
+    readonly maxDurationMinutes: number;
+    readonly defaultDurationMinutes: 15;
+    /** The quick picks offered on the setup screen ("Other" is a custom value). */
+    readonly presetDurationsMinutes: readonly number[];
+    /** How long the user has to confirm once prompted. */
+    readonly minPromptCountdownSeconds: 15;
+    readonly maxPromptCountdownSeconds: number;
+    readonly defaultPromptCountdownSeconds: 60;
+    /**
+     * Server-side grace after the visible countdown reaches zero before the SOS is
+     * raised. Covers an "I'm OK" that was sent at the last second and is still in
+     * flight. The app never shows it - the countdown it shows ends at
+     * promptDeadlineAt.
+     */
+    readonly checkInGraceSeconds: 10;
+    /**
+     * A check whose check-in window closed longer ago than this - only possible
+     * after a platform outage - is EXPIRED instead of raising an SOS hours late.
+     */
+    readonly staleSosWindowMinutes: number;
+    /** Free-text reason for "Write my own". */
+    readonly customReasonMaxLength: 120;
+    /** One track-point upload. */
+    readonly maxTrackPointsPerBatch: 200;
+};
+/** Where the setup screen starts. */
+export declare const SAFETY_CHECK_DEFAULTS: {
+    readonly durationMinutes: 15;
+    readonly promptCountdownSeconds: 60;
+    /** Every eligible guardian starts selected. */
+    readonly allGuardiansSelected: true;
+    /** Premium/Trial only - Free users are never offered the option. */
+    readonly notifyServiceProvider: true;
+    readonly notifyGuardiansOnStartEnd: true;
+    readonly vibrate: true;
+    readonly alarmSound: true;
+};

package/dist/types/modules/safety/constants/safety-integration.const.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Cross-service contracts for the Safety domain. Each value is read by more than
+ * one repository - change both sides together.
+ */
+/**
+ * Header carrying the shared internal service token on the calls that can raise
+ * or steer an SOS: workflow-manager -> clarion-safety (advance), clarion-safety
+ * -> workflow-manager (start/signal) and clarion-safety -> clarion-incident
+ * (create the Safety SOS incident). Same header workflow-manager already
+ * requires on its API.
+ */
+export declare const SAFETY_INTERNAL_TOKEN_HEADER = "x-internal-service-token";
+/**
+ * Env vars the token is read from, in order. `SAFETY_INTERNAL_API_TOKEN` may hold
+ * a comma-separated list (rotation); when it is unset every party falls back to
+ * `WORKFLOW_MANAGER_API_TOKEN`, which every pod already receives from
+ * runtime-secrets. Senders use the FIRST value; receivers accept ANY.
+ */
+export declare const SAFETY_INTERNAL_TOKEN_ENV_KEYS: readonly ["SAFETY_INTERNAL_API_TOKEN", "WORKFLOW_MANAGER_API_TOKEN"];
+/** Temporal: the durable Safety Check timer. */
+export declare const SAFETY_CHECK_WORKFLOW: {
+    /** Registered workflow function name in clarion-workflow-manager. */
+    readonly workflowType: "safetyCheckWorkflow";
+    /** Default task queue; overridable with TEMPORAL_SAFETY_TASK_QUEUE. */
+    readonly taskQueue: "safety-check-task-queue";
+    /** Signal that wakes the workflow early (extension, check-in, stop, SOS). */
+    readonly changedSignal: "safetyCheckChanged";
+    /** Query returning the workflow's view of the next wake time. */
+    readonly stateQuery: "safetyCheckWorkflowState";
+};
+/** Workflow id for a Safety Check. One per check, ever - the id IS the idempotency key. */
+export declare function safetyCheckWorkflowId(safetyCheckId: string): string;
+/** Internal HTTP paths (not proxied by the gateway). */
+export declare const SAFETY_INTERNAL_PATHS: {
+    /** clarion-safety: the one domain step the durable timer drives. */
+    readonly advanceCheck: (safetyCheckId: string) => string;
+    /** clarion-workflow-manager: start the timer for a check. */
+    readonly startWorkflow: "/safety-checks/workflows";
+    /** clarion-workflow-manager: wake the timer early. */
+    readonly signalWorkflow: (safetyCheckId: string) => string;
+    /** clarion-incident: raise the Safety SOS incident (idempotent per origin). */
+    readonly createSafetyAlertIncident: "/incidents/safety-alerts";
+    /** clarion-incident: which of these incident type ids are platform-managed system types. */
+    readonly classifyIncidentTypes: "/incident-types/classify";
+    /** clarion-gis private trips (tracked privately until an SOS shares them). */
+    readonly createPrivateTrip: "/trips/private";
+    readonly tripTrackPoints: (tripId: string) => string;
+    readonly shareTrip: (tripId: string) => string;
+    readonly stopPrivateTrip: (tripId: string) => string;
+    readonly tripSummary: (tripId: string) => string;
+};
+/**
+ * go_router locations in clarion_mobile that pushes deep-link to. A push route
+ * is an APP location, never an API path.
+ */
+export declare const SAFETY_MOBILE_ROUTES: {
+    readonly active: "/safety-check/active";
+    readonly prompt: "/safety-check/prompt";
+};
+/** Redis keys clarion-safety owns. */
+export declare const SAFETY_REDIS_KEYS: {
+    readonly sweeperLock: "safety:lock:sweeper";
+    readonly rateLimit: (userId: number, bucket: string) => string;
+};