grm-shared-library 1.1.247 → 1.1.249

package/dist/cjs/kafka/dtos/user/guardians-changed-payload.dto.js

@@ -0,0 +1,66 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GuardiansChangedPayloadDto = exports.GuardiansChangedReason = void 0;
+const class_validator_1 = require("class-validator");
+/** What changed about somebody's guardians - for logs and analytics; every reason means "refresh". */
+var GuardiansChangedReason;
+(function (GuardiansChangedReason) {
+    /** A guardian was added. */
+    GuardiansChangedReason["ADDED"] = "ADDED";
+    /** A guardian was removed by the person they guard. */
+    GuardiansChangedReason["REMOVED"] = "REMOVED";
+    /** Another guardian became the primary one. */
+    GuardiansChangedReason["PRIMARY_CHANGED"] = "PRIMARY_CHANGED";
+    /** A guardian on the list by phone number proved that number in the same organization's app, and is now an app guardian. */
+    GuardiansChangedReason["PROMOTED"] = "PROMOTED";
+    /** An app guardian's account was deleted; they stay on the list by phone number. */
+    GuardiansChangedReason["DEMOTED"] = "DEMOTED";
+    /** A guardian stopped looking after one of their dependents. */
+    GuardiansChangedReason["DEPENDENT_REMOVED"] = "DEPENDENT_REMOVED";
+})(GuardiansChangedReason || (exports.GuardiansChangedReason = GuardiansChangedReason = {}));
+/**
+ * Payload of `KAFKA_TOPICS.GUARDIANS_CHANGED`: somebody's guardian list changed,
+ * and these people's apps should read their guardians and dependents again.
+ *
+ * Ids only - no names, numbers or relationships. The apps read the lists through
+ * the guardian API, which applies its own access rules.
+ */
+class GuardiansChangedPayloadDto {
+}
+exports.GuardiansChangedPayloadDto = GuardiansChangedPayloadDto;
+__decorate([
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.IsPositive)(),
+    __metadata("design:type", Number)
+], GuardiansChangedPayloadDto.prototype, "organizationId", void 0);
+__decorate([
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.IsPositive)(),
+    __metadata("design:type", Number)
+], GuardiansChangedPayloadDto.prototype, "dependentId", void 0);
+__decorate([
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMinSize)(1),
+    (0, class_validator_1.ArrayMaxSize)(100),
+    (0, class_validator_1.IsInt)({ each: true }),
+    (0, class_validator_1.IsPositive)({ each: true }),
+    __metadata("design:type", Array)
+], GuardiansChangedPayloadDto.prototype, "userIds", void 0);
+__decorate([
+    (0, class_validator_1.IsEnum)(GuardiansChangedReason),
+    __metadata("design:type", String)
+], GuardiansChangedPayloadDto.prototype, "reason", void 0);
+__decorate([
+    (0, class_validator_1.IsISO8601)(),
+    __metadata("design:type", String)
+], GuardiansChangedPayloadDto.prototype, "occurredAt", void 0);
+//# sourceMappingURL=guardians-changed-payload.dto.js.map

package/dist/cjs/kafka/dtos/user/guardians-changed-payload.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardians-changed-payload.dto.js","sourceRoot":"","sources":["../../../../../src/kafka/dtos/user/guardians-changed-payload.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAA4G;AAE5G,sGAAsG;AACtG,IAAY,sBAaX;AAbD,WAAY,sBAAsB;IAC9B,4BAA4B;IAC5B,yCAAe,CAAA;IACf,uDAAuD;IACvD,6CAAmB,CAAA;IACnB,+CAA+C;IAC/C,6DAAmC,CAAA;IACnC,4HAA4H;IAC5H,+CAAqB,CAAA;IACrB,oFAAoF;IACpF,6CAAmB,CAAA;IACnB,gEAAgE;IAChE,iEAAuC,CAAA;AAC3C,CAAC,EAbW,sBAAsB,sCAAtB,sBAAsB,QAajC;AAED;;;;;;GAMG;AACH,MAAa,0BAA0B;CAwBtC;AAxBD,gEAwBC;AApBG;IAFC,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;kEACW;AAKxB;IAFC,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;+DACQ;AAQrB;IALC,IAAA,yBAAO,GAAE;IACT,IAAA,8BAAY,EAAC,CAAC,CAAC;IACf,IAAA,8BAAY,EAAC,GAAG,CAAC;IACjB,IAAA,uBAAK,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrB,IAAA,4BAAU,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;2DACR;AAGnB;IADC,IAAA,wBAAM,EAAC,sBAAsB,CAAC;;0DACC;AAGhC;IADC,IAAA,2BAAS,GAAE;;8DACQ"}

package/dist/cjs/kafka/index.js

@@ -24,4 +24,5 @@ __exportStar(require("./dtos/otp/create-otp-payload.dto"), exports);
 __exportStar(require("./dtos/otp/otp-payload.dto"), exports);
 __exportStar(require("./dtos/password/password-reset-payload.dto"), exports);
 __exportStar(require("./dtos/account-deletion/account-deletion-request-payload.dto"), exports);
+__exportStar(require("./dtos/user/guardians-changed-payload.dto"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/kafka/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/kafka/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,mDAAiC;AACjC,8EAA4D;AAC5D,uEAAqD;AACrD,iFAA+D;AAC/D,0EAAwD;AACxD,oEAAkD;AAClD,6DAA2C;AAC3C,6EAA2D;AAC3D,+FAA6E"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/kafka/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,mDAAiC;AACjC,8EAA4D;AAC5D,uEAAqD;AACrD,iFAA+D;AAC/D,0EAAwD;AACxD,oEAAkD;AAClD,6DAA2C;AAC3C,6EAA2D;AAC3D,+FAA6E;AAC7E,4EAA0D"}

package/dist/cjs/kafka/topics.js

@@ -12,6 +12,10 @@ exports.KAFKA_TOPICS = {
     USER_CREATED: 'user.created',
     USER_UPDATED: 'user.updated',
     USER_DELETED: 'user.deleted',
+    // Somebody's guardians or dependents changed (producer: clarion-authentication;
+    // payload GuardiansChangedPayloadDto; consumer: clarion-notification, which
+    // sends each affected person a silent push so their app refreshes). Ids only.
+    GUARDIANS_CHANGED: 'user.guardians.changed.v1',
     // Org. ORG_CREATED is published by clarion-organization after commit
     // (payload OrganizationCreatedEvent); clarion-incident provisions the Safety
     // Alerts category from it.

package/dist/cjs/kafka/topics.js.map

@@ -1 +1 @@
-{"version":3,"file":"topics.js","sourceRoot":"","sources":["../../../src/kafka/topics.ts"],"names":[],"mappings":";;;AAAa,QAAA,YAAY,GAAG;IACxB,OAAO;IACP,eAAe,EAAE,iBAAiB;IAClC,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;IAClC,6BAA6B,EAAE,+BAA+B;IAC9D,6BAA6B,EAAE,+BAA+B;IAC9D,OAAO;IACP,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,qEAAqE;IACrE,6EAA6E;IAC7E,2BAA2B;IAC3B,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,MAAM;IACN,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,eAAe;IAC9B,WAAW;IACX,cAAc,EAAE,gBAAgB;IAChC,WAAW;IACX,gBAAgB,EAAE,kBAAkB;IACpC,gBAAgB,EAAE,kBAAkB;IACpC,uBAAuB,EAAE,yBAAyB;IAClD,sBAAsB,EAAE,wBAAwB;IAChD,yBAAyB,EAAE,2BAA2B;IACtD,wBAAwB,EAAE,0BAA0B;IACpD,0BAA0B,EAAE,4BAA4B;IACxD,sBAAsB,EAAE,wBAAwB;IAChD,iBAAiB,EAAE,mBAAmB;IACtC,2BAA2B,EAAE,6BAA6B;IAC1D,yCAAyC,EAAE,2CAA2C;IACtF,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,uCAAuC,EAAE,4CAA4C;IACrF,8CAA8C,EAAE,mDAAmD;IACnG,sDAAsD,EAClD,2DAA2D;IAC/D,qEAAqE;IACrE,+BAA+B;IAC/B,0CAA0C,EAAE,4DAA4D;IACxG,OAAO;IACP,oBAAoB,EAAE,sBAAsB;IAC5C,yBAAyB,EAAE,2BAA2B;IACtD,qBAAqB,EAAE,uBAAuB;IAC9C,OAAO;IACP,YAAY,EAAE,cAAc;IAC5B,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,aAAa;IAC1B,OAAO;IACP,iBAAiB,EAAE,mBAAmB;IACtC,oBAAoB,EAAE,sBAAsB;IAC5C,WAAW;IACX,qBAAqB,EAAE,uBAAuB;IAC9C,uBAAuB,EAAE,yBAAyB;IAClD,qBAAqB,EAAE,uBAAuB;IAC9C,sBAAsB,EAAE,wBAAwB;IAChD,qBAAqB,EAAE,uBAAuB;IAC9C,mBAAmB,EAAE,qBAAqB;IAC1C,qBAAqB,EAAE,uBAAuB;IAC9C,oBAAoB,EAAE,sBAAsB;IAC5C,wBAAwB,EAAE,0BAA0B;IACpD,wBAAwB,EAAE,0BAA0B;IACpD,wBAAwB,EAAE,0BAA0B;IACpD,iEAAiE;IACjE,iBAAiB,EAAE,oCAAoC;IACvD,eAAe,EAAE,kCAAkC;IACnD,wBAAwB,EAAE,6BAA6B;IACvD,wBAAwB,EAAE,6BAA6B;IACvD,wBAAwB,EAAE,6BAA6B;IACvD,wEAAwE;IACxE,+DAA+D;IAC/D,yBAAyB,EAAE,uCAAuC;IAClE,yBAAyB,EAAE,uCAAuC;IAClE,yBAAyB,EAAE,uCAAuC;IAClE,wCAAwC,EACpC,sDAAsD;IAC1D,gCAAgC,EAAE,8CAA8C;IAChF,iFAAiF;IACjF,wBAAwB,EAAE,6BAA6B;IACvD,+BAA+B,EAAE,oCAAoC;IACrE,iFAAiF;IACjF,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,iEAAiE;IACjE,sBAAsB,EAAE,2BAA2B;IACnD,sBAAsB,EAAE,2BAA2B;IACnD,uBAAuB,EAAE,4BAA4B;IACrD,6BAA6B,EAAE,kCAAkC;IACjE,+BAA+B,EAAE,oCAAoC;IACrE,8BAA8B,EAAE,mCAAmC;IACnE,+BAA+B,EAAE,oCAAoC;IACrE,4BAA4B,EAAE,iCAAiC;IAC/D,uBAAuB,EAAE,4BAA4B;IACrD,qBAAqB,EAAE,0BAA0B;IACjD,uBAAuB,EAAE,4BAA4B;IACrD,0BAA0B,EAAE,+BAA+B;IAC3D,2BAA2B,EAAE,gCAAgC;IAC7D,wBAAwB,EAAE,6BAA6B;IACvD,wBAAwB,EAAE,6BAA6B;IACvD,yBAAyB,EAAE,8BAA8B;IACzD,0BAA0B,EAAE,+BAA+B;IAC3D,oCAAoC,EAAE,yCAAyC;IAC/E,iCAAiC,EAAE,sCAAsC;IACzE,4BAA4B,EAAE,iCAAiC;IAC/D,+BAA+B,EAAE,oCAAoC;IACrE,wEAAwE;IACxE,8EAA8E;IAC9E,mDAAmD;IACnD,oBAAoB,EAAE,yBAAyB;IAC/C,sBAAsB,EAAE,2BAA2B;IACnD,kBAAkB,EAAE,uBAAuB;IAC3C,0BAA0B,EAAE,+BAA+B;IAC3D,+EAA+E;IAC/E,8DAA8D;IAC9D,iBAAiB,EAAE,6BAA6B;IAChD,4BAA4B,EAAE,wCAAwC;IACtE,mBAAmB,EAAE,+BAA+B;IACpD,uBAAuB,EAAE,mCAAmC;IAC5D,eAAe,EAAE,2BAA2B;IAC5C,2EAA2E;IAC3E,uEAAuE;IACvE,6EAA6E;IAC7E,+BAA+B;IAC/B,qCAAqC,EAAE,0CAA0C;IACjF,oBAAoB,EAAE,yBAAyB;IAC/C,8BAA8B,EAAE,mCAAmC;IACnE,0EAA0E;IAC1E,0EAA0E;IAC1E,yCAAyC,EAAE,8CAA8C;IACzF,sCAAsC,EAAE,wDAAwD;CACnG,CAAC"}
+{"version":3,"file":"topics.js","sourceRoot":"","sources":["../../../src/kafka/topics.ts"],"names":[],"mappings":";;;AAAa,QAAA,YAAY,GAAG;IACxB,OAAO;IACP,eAAe,EAAE,iBAAiB;IAClC,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;IAClC,6BAA6B,EAAE,+BAA+B;IAC9D,6BAA6B,EAAE,+BAA+B;IAC9D,OAAO;IACP,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,gFAAgF;IAChF,4EAA4E;IAC5E,8EAA8E;IAC9E,iBAAiB,EAAE,2BAA2B;IAC9C,qEAAqE;IACrE,6EAA6E;IAC7E,2BAA2B;IAC3B,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,MAAM;IACN,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,eAAe;IAC9B,WAAW;IACX,cAAc,EAAE,gBAAgB;IAChC,WAAW;IACX,gBAAgB,EAAE,kBAAkB;IACpC,gBAAgB,EAAE,kBAAkB;IACpC,uBAAuB,EAAE,yBAAyB;IAClD,sBAAsB,EAAE,wBAAwB;IAChD,yBAAyB,EAAE,2BAA2B;IACtD,wBAAwB,EAAE,0BAA0B;IACpD,0BAA0B,EAAE,4BAA4B;IACxD,sBAAsB,EAAE,wBAAwB;IAChD,iBAAiB,EAAE,mBAAmB;IACtC,2BAA2B,EAAE,6BAA6B;IAC1D,yCAAyC,EAAE,2CAA2C;IACtF,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,uCAAuC,EAAE,4CAA4C;IACrF,8CAA8C,EAAE,mDAAmD;IACnG,sDAAsD,EAClD,2DAA2D;IAC/D,qEAAqE;IACrE,+BAA+B;IAC/B,0CAA0C,EAAE,4DAA4D;IACxG,OAAO;IACP,oBAAoB,EAAE,sBAAsB;IAC5C,yBAAyB,EAAE,2BAA2B;IACtD,qBAAqB,EAAE,uBAAuB;IAC9C,OAAO;IACP,YAAY,EAAE,cAAc;IAC5B,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,aAAa;IAC1B,OAAO;IACP,iBAAiB,EAAE,mBAAmB;IACtC,oBAAoB,EAAE,sBAAsB;IAC5C,WAAW;IACX,qBAAqB,EAAE,uBAAuB;IAC9C,uBAAuB,EAAE,yBAAyB;IAClD,qBAAqB,EAAE,uBAAuB;IAC9C,sBAAsB,EAAE,wBAAwB;IAChD,qBAAqB,EAAE,uBAAuB;IAC9C,mBAAmB,EAAE,qBAAqB;IAC1C,qBAAqB,EAAE,uBAAuB;IAC9C,oBAAoB,EAAE,sBAAsB;IAC5C,wBAAwB,EAAE,0BAA0B;IACpD,wBAAwB,EAAE,0BAA0B;IACpD,wBAAwB,EAAE,0BAA0B;IACpD,iEAAiE;IACjE,iBAAiB,EAAE,oCAAoC;IACvD,eAAe,EAAE,kCAAkC;IACnD,wBAAwB,EAAE,6BAA6B;IACvD,wBAAwB,EAAE,6BAA6B;IACvD,wBAAwB,EAAE,6BAA6B;IACvD,wEAAwE;IACxE,+DAA+D;IAC/D,yBAAyB,EAAE,uCAAuC;IAClE,yBAAyB,EAAE,uCAAuC;IAClE,yBAAyB,EAAE,uCAAuC;IAClE,wCAAwC,EACpC,sDAAsD;IAC1D,gCAAgC,EAAE,8CAA8C;IAChF,iFAAiF;IACjF,wBAAwB,EAAE,6BAA6B;IACvD,+BAA+B,EAAE,oCAAoC;IACrE,iFAAiF;IACjF,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,iEAAiE;IACjE,sBAAsB,EAAE,2BAA2B;IACnD,sBAAsB,EAAE,2BAA2B;IACnD,uBAAuB,EAAE,4BAA4B;IACrD,6BAA6B,EAAE,kCAAkC;IACjE,+BAA+B,EAAE,oCAAoC;IACrE,8BAA8B,EAAE,mCAAmC;IACnE,+BAA+B,EAAE,oCAAoC;IACrE,4BAA4B,EAAE,iCAAiC;IAC/D,uBAAuB,EAAE,4BAA4B;IACrD,qBAAqB,EAAE,0BAA0B;IACjD,uBAAuB,EAAE,4BAA4B;IACrD,0BAA0B,EAAE,+BAA+B;IAC3D,2BAA2B,EAAE,gCAAgC;IAC7D,wBAAwB,EAAE,6BAA6B;IACvD,wBAAwB,EAAE,6BAA6B;IACvD,yBAAyB,EAAE,8BAA8B;IACzD,0BAA0B,EAAE,+BAA+B;IAC3D,oCAAoC,EAAE,yCAAyC;IAC/E,iCAAiC,EAAE,sCAAsC;IACzE,4BAA4B,EAAE,iCAAiC;IAC/D,+BAA+B,EAAE,oCAAoC;IACrE,wEAAwE;IACxE,8EAA8E;IAC9E,mDAAmD;IACnD,oBAAoB,EAAE,yBAAyB;IAC/C,sBAAsB,EAAE,2BAA2B;IACnD,kBAAkB,EAAE,uBAAuB;IAC3C,0BAA0B,EAAE,+BAA+B;IAC3D,+EAA+E;IAC/E,8DAA8D;IAC9D,iBAAiB,EAAE,6BAA6B;IAChD,4BAA4B,EAAE,wCAAwC;IACtE,mBAAmB,EAAE,+BAA+B;IACpD,uBAAuB,EAAE,mCAAmC;IAC5D,eAAe,EAAE,2BAA2B;IAC5C,2EAA2E;IAC3E,uEAAuE;IACvE,6EAA6E;IAC7E,+BAA+B;IAC/B,qCAAqC,EAAE,0CAA0C;IACjF,oBAAoB,EAAE,yBAAyB;IAC/C,8BAA8B,EAAE,mCAAmC;IACnE,0EAA0E;IAC1E,0EAA0E;IAC1E,yCAAyC,EAAE,8CAA8C;IACzF,sCAAsC,EAAE,wDAAwD;CACnG,CAAC"}

package/dist/cjs/modules/notification/dtos/unregister-device-token.dto.js

@@ -0,0 +1,43 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UnregisterDeviceTokenRequestDto = exports.UnregisterDeviceTokenDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+/**
+ * Signing out of the app: this device stops receiving the signed-out account's
+ * pushes (`POST /api/push-notifications/device-tokens/unregister`). Before this a
+ * signed-out phone kept receiving that person's SOS alerts and guardian pushes
+ * until somebody else signed in on it.
+ */
+class UnregisterDeviceTokenDto {
+}
+exports.UnregisterDeviceTokenDto = UnregisterDeviceTokenDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'The FCM/APNs registration token of this device', maxLength: 4096 }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.MaxLength)(4096),
+    __metadata("design:type", String)
+], UnregisterDeviceTokenDto.prototype, "deviceToken", void 0);
+/**
+ * The gateway's request to clarion-notification: the token, and the SIGNED-IN caller
+ * it must belong to. A token registered to anybody else is left alone.
+ */
+class UnregisterDeviceTokenRequestDto extends UnregisterDeviceTokenDto {
+}
+exports.UnregisterDeviceTokenRequestDto = UnregisterDeviceTokenRequestDto;
+__decorate([
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.IsPositive)(),
+    __metadata("design:type", Number)
+], UnregisterDeviceTokenRequestDto.prototype, "userId", void 0);
+//# sourceMappingURL=unregister-device-token.dto.js.map

package/dist/cjs/modules/notification/dtos/unregister-device-token.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unregister-device-token.dto.js","sourceRoot":"","sources":["../../../../../src/modules/notification/dtos/unregister-device-token.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAqF;AAErF;;;;;GAKG;AACH,MAAa,wBAAwB;CAMpC;AAND,4DAMC;AADG;IAJC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,gDAAgD,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC/F,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,IAAI,CAAC;;6DACK;AAGzB;;;GAGG;AACH,MAAa,+BAAgC,SAAQ,wBAAwB;CAI5E;AAJD,0EAIC;AADG;IAFC,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;+DACG"}

package/dist/cjs/modules/notification/index.js

@@ -48,4 +48,6 @@ __exportStar(require("./dtos/alert-acknowledgement.dto"), exports);
 // Notification Analytics (GET /admin/analytics, through the gateway's /notifications/admin/analytics)
 __exportStar(require("./interfaces/notification-analytics"), exports);
 __exportStar(require("./dtos/notification-analytics-query.dto"), exports);
+// Signing out: the device stops receiving the account's pushes
+__exportStar(require("./dtos/unregister-device-token.dto"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/modules/notification/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/notification/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,QAAQ;AACR,oEAAkD;AAClD,iEAA+C;AAC/C,mEAAiD;AACjD,2EAAyD;AACzD,uEAAqD;AACrD,+DAA6C;AAC7C,0EAAwD;AACxD,yEAAuD;AACvD,0EAAwD;AACxD,4EAA0D;AAE1D,4CAA4C;AAC5C,gEAA8C;AAC9C,kEAAgD;AAChD,+DAA6C;AAC7C,iEAA+C;AAC/C,4EAA0D;AAE1D,0CAA0C;AAC1C,gEAA8C;AAC9C,kEAAgD;AAEhD,kEAAkE;AAClE,kFAAgE;AAChE,gFAA8D;AAC9D,wEAAsD;AACtD,mEAAiD;AAEjD,wFAAwF;AACxF,oEAAkD;AAClD,kEAAgD;AAChD,2EAAyD;AAEzD,oHAAoH;AACpH,mEAAiD;AAEjD,sGAAsG;AACtG,sEAAoD;AACpD,0EAAwD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/notification/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,QAAQ;AACR,oEAAkD;AAClD,iEAA+C;AAC/C,mEAAiD;AACjD,2EAAyD;AACzD,uEAAqD;AACrD,+DAA6C;AAC7C,0EAAwD;AACxD,yEAAuD;AACvD,0EAAwD;AACxD,4EAA0D;AAE1D,4CAA4C;AAC5C,gEAA8C;AAC9C,kEAAgD;AAChD,+DAA6C;AAC7C,iEAA+C;AAC/C,4EAA0D;AAE1D,0CAA0C;AAC1C,gEAA8C;AAC9C,kEAAgD;AAEhD,kEAAkE;AAClE,kFAAgE;AAChE,gFAA8D;AAC9D,wEAAsD;AACtD,mEAAiD;AAEjD,wFAAwF;AACxF,oEAAkD;AAClD,kEAAgD;AAChD,2EAAyD;AAEzD,oHAAoH;AACpH,mEAAiD;AAEjD,sGAAsG;AACtG,sEAAoD;AACpD,0EAAwD;AAExD,+DAA+D;AAC/D,qEAAmD"}

package/dist/cjs/modules/user/dtos/guardian-identifier.dto.js

@@ -17,7 +17,7 @@ class GuardianIdentifierDto {
 exports.GuardianIdentifierDto = GuardianIdentifierDto;
 __decorate([
     (0, swagger_1.ApiProperty)({
-        description: 'Phone number for external guardian',
+        description: 'Phone number of an external guardian (older apps). Prefer relationshipId, which names either kind.',
         example: '+1234567890',
         required: false,
         type: 'string'
@@ -28,7 +28,7 @@ __decorate([
 ], GuardianIdentifierDto.prototype, "phoneNumber", void 0);
 __decorate([
     (0, swagger_1.ApiProperty)({
-        description: 'Relationship ID for system guardian',
+        description: 'The guardian entry id - `id` of an app-user guardian relation or of an external guardian (since grm-shared-library 1.1.248)',
         example: 789,
         required: false,
         type: 'number'

package/dist/cjs/modules/user/dtos/guardian-identifier.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"guardian-identifier.dto.js","sourceRoot":"","sources":["../../../../../src/modules/user/dtos/guardian-identifier.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAA6E;AAE7E,MAAa,qBAAqB;CAoBjC;AApBD,sDAoBC;AAXG;IARC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,QAAQ;KACjB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;0DACQ;AAUrB;IARC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,qCAAqC;QAClD,OAAO,EAAE,GAAG;QACZ,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,QAAQ;KACjB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;6DACW"}
+{"version":3,"file":"guardian-identifier.dto.js","sourceRoot":"","sources":["../../../../../src/modules/user/dtos/guardian-identifier.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAA6E;AAE7E,MAAa,qBAAqB;CAoBjC;AApBD,sDAoBC;AAXG;IARC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,oGAAoG;QACjH,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,QAAQ;KACjB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;0DACQ;AAUrB;IARC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,6HAA6H;QAC1I,OAAO,EAAE,GAAG;QACZ,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,QAAQ;KACjB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;6DACW"}

package/dist/cjs/modules/user/index.js

@@ -32,4 +32,5 @@ __exportStar(require("./interfaces/guardian"), exports);
 __exportStar(require("./interfaces/guardian-relation"), exports);
 __exportStar(require("./interfaces/guardians-response"), exports);
 __exportStar(require("./interfaces/account-analytics"), exports);
+__exportStar(require("./utils/app-account.util"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/modules/user/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/user/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,yDAAuC;AACvC,sDAAoC;AACpC,iEAA+C;AAC/C,sEAAoD;AACpD,6EAA2D;AAC3D,+EAA6D;AAC7D,yEAAuD;AAEvD,2DAAyC;AACzC,qEAAmD;AACnD,wEAAsD;AAEtD,oDAAkC;AAClC,4DAA0C;AAC1C,4DAA0C;AAC1C,wDAAsC;AACtC,iEAA+C;AAC/C,kEAAgD;AAChD,iEAA+C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/user/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,yDAAuC;AACvC,sDAAoC;AACpC,iEAA+C;AAC/C,sEAAoD;AACpD,6EAA2D;AAC3D,+EAA6D;AAC7D,yEAAuD;AAEvD,2DAAyC;AACzC,qEAAmD;AACnD,wEAAsD;AAEtD,oDAAkC;AAClC,4DAA0C;AAC1C,4DAA0C;AAC1C,wDAAsC;AACtC,iEAA+C;AAC/C,kEAAgD;AAChD,iEAA+C;AAE/C,2DAAyC"}

package/dist/cjs/modules/user/utils/app-account.util.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.APP_ACCOUNT_ERROR_CODES = exports.APP_ACCOUNT_ROLE = void 0;
+exports.isAppAccount = isAppAccount;
+exports.hasAppRole = hasAppRole;
+exports.parseAppOrganizations = parseAppOrganizations;
+exports.isAccountFromAnotherApp = isAccountFromAnotherApp;
+const role_enum_1 = require("../../role/enums/role.enum");
+/**
+ * App accounts and staff accounts.
+ *
+ * Each brand's mobile app (G4S Kenya, GeoSHIELD, SGA Security, ...) is its own
+ * product for one organization's customers, so an account made in one app is an
+ * account with that organization only. Signing in to another brand's app means
+ * registering with that brand. One person may therefore hold several app
+ * accounts - one per organization - with the same phone number and e-mail.
+ *
+ * Staff (Super-Admin, organization and control-centre staff, responders,
+ * corporate-client admins) keep one platform-wide account each: their e-mail and
+ * phone number stay unique across the whole platform.
+ *
+ * An APP ACCOUNT is one whose only role is Mobile-User. That is the same rule the
+ * database's unique indexes use (`roles = '{Mobile-User}'`), so code and schema
+ * can never disagree about which kind an account is. An account holding
+ * Mobile-User beside a staff role is a staff account that also uses an app.
+ */
+exports.APP_ACCOUNT_ROLE = role_enum_1.Roles.MOBILE_USER;
+/** An account whose only role is Mobile-User: unique within its organization, not platform-wide. */
+function isAppAccount(roles) {
+    return Array.isArray(roles) && roles.length === 1 && roles[0] === exports.APP_ACCOUNT_ROLE;
+}
+/** Holds the Mobile-User role, alone or beside staff roles: someone who can use a brand's app. */
+function hasAppRole(roles) {
+    return Array.isArray(roles) && roles.includes(exports.APP_ACCOUNT_ROLE);
+}
+/**
+ * Parses `APP_ORGANIZATIONS`. Blank means "none configured". A malformed entry
+ * throws: a typo here would let an app sign people in to the wrong organization,
+ * so it must stop the service at boot rather than be skipped.
+ */
+function parseAppOrganizations(raw) {
+    const map = new Map();
+    for (const entry of String(raw !== null && raw !== void 0 ? raw : '').split(',')) {
+        const trimmed = entry.trim();
+        if (!trimmed)
+            continue;
+        const match = /^([A-Za-z0-9_-]+)\s*:\s*(\d+)$/.exec(trimmed);
+        if (!match)
+            throw new Error(`APP_ORGANIZATIONS: "${trimmed}" is not <appId>:<organizationId>`);
+        const [, appId, id] = match;
+        const organizationId = Number(id);
+        if (!Number.isSafeInteger(organizationId) || organizationId <= 0) {
+            throw new Error(`APP_ORGANIZATIONS: "${trimmed}" names no valid organization`);
+        }
+        const existing = map.get(appId);
+        if (existing !== undefined && existing !== organizationId) {
+            throw new Error(`APP_ORGANIZATIONS: ${appId} is given two organizations (${existing} and ${organizationId})`);
+        }
+        map.set(appId, organizationId);
+    }
+    return map;
+}
+/**
+ * Whether a signed-in account is being used from another organization's app: the
+ * request names an app (`X-App-Id`) that belongs to organization A, and the account
+ * is an app user of organization B.
+ *
+ * Unknown here means "not a mismatch": no app named, an app with no configured
+ * organization, or an account that is staff only. Those keep working as before.
+ */
+function isAccountFromAnotherApp(appOrganizations, appId, account) {
+    if (!appId)
+        return false;
+    const expected = appOrganizations.get(appId);
+    if (expected === undefined)
+        return false;
+    if (!hasAppRole(account.roles))
+        return false;
+    return Number(account.organizationId) !== expected;
+}
+/** Error codes a client can act on, for the account rules above. */
+exports.APP_ACCOUNT_ERROR_CODES = {
+    /** A token or session belongs to another organization's app: sign out and sign in again here. */
+    APP_ACCOUNT_MISMATCH: 'APP_ACCOUNT_MISMATCH',
+    /** A sign-in names an app and an organization that do not belong together. */
+    APP_ORGANIZATION_MISMATCH: 'APP_ORGANIZATION_MISMATCH',
+    /** An older app asked for "the" account of a number that has accounts with several organizations. */
+    ACCOUNT_AMBIGUOUS: 'ACCOUNT_AMBIGUOUS',
+};
+//# sourceMappingURL=app-account.util.js.map

package/dist/cjs/modules/user/utils/app-account.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-account.util.js","sourceRoot":"","sources":["../../../../../src/modules/user/utils/app-account.util.ts"],"names":[],"mappings":";;;AAuBA,oCAEC;AAGD,gCAEC;AAeD,sDAmBC;AAUD,0DAUC;AApFD,0DAAmD;AAEnD;;;;;;;;;;;;;;;;;GAiBG;AACU,QAAA,gBAAgB,GAAG,iBAAK,CAAC,WAAW,CAAC;AAElD,oGAAoG;AACpG,SAAgB,YAAY,CAAC,KAA2C;IACpE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,wBAAgB,CAAC;AACvF,CAAC;AAED,kGAAkG;AAClG,SAAgB,UAAU,CAAC,KAA2C;IAClE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,wBAAgB,CAAC,CAAC;AACpE,CAAC;AAUD;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,GAA8B;IAChE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,GAAG,aAAH,GAAG,cAAH,GAAG,GAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,mCAAmC,CAAC,CAAC;QAC/F,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;QAC5B,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,+BAA+B,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,gCAAgC,QAAQ,QAAQ,cAAc,GAAG,CAAC,CAAC;QAClH,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,uBAAuB,CACnC,gBAAkC,EAClC,KAAgC,EAChC,OAAsF;IAEtF,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC;AACvD,CAAC;AAED,oEAAoE;AACvD,QAAA,uBAAuB,GAAG;IACnC,iGAAiG;IACjG,oBAAoB,EAAE,sBAAsB;IAC5C,8EAA8E;IAC9E,yBAAyB,EAAE,2BAA2B;IACtD,qGAAqG;IACrG,iBAAiB,EAAE,mBAAmB;CAChC,CAAC"}

package/dist/esm/kafka/dtos/user/guardians-changed-payload.dto.js

@@ -0,0 +1,62 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { ArrayMaxSize, ArrayMinSize, IsArray, IsEnum, IsInt, IsISO8601, IsPositive } from "class-validator";
+/** What changed about somebody's guardians - for logs and analytics; every reason means "refresh". */
+export var GuardiansChangedReason;
+(function (GuardiansChangedReason) {
+    /** A guardian was added. */
+    GuardiansChangedReason["ADDED"] = "ADDED";
+    /** A guardian was removed by the person they guard. */
+    GuardiansChangedReason["REMOVED"] = "REMOVED";
+    /** Another guardian became the primary one. */
+    GuardiansChangedReason["PRIMARY_CHANGED"] = "PRIMARY_CHANGED";
+    /** A guardian on the list by phone number proved that number in the same organization's app, and is now an app guardian. */
+    GuardiansChangedReason["PROMOTED"] = "PROMOTED";
+    /** An app guardian's account was deleted; they stay on the list by phone number. */
+    GuardiansChangedReason["DEMOTED"] = "DEMOTED";
+    /** A guardian stopped looking after one of their dependents. */
+    GuardiansChangedReason["DEPENDENT_REMOVED"] = "DEPENDENT_REMOVED";
+})(GuardiansChangedReason || (GuardiansChangedReason = {}));
+/**
+ * Payload of `KAFKA_TOPICS.GUARDIANS_CHANGED`: somebody's guardian list changed,
+ * and these people's apps should read their guardians and dependents again.
+ *
+ * Ids only - no names, numbers or relationships. The apps read the lists through
+ * the guardian API, which applies its own access rules.
+ */
+export class GuardiansChangedPayloadDto {
+}
+__decorate([
+    IsInt(),
+    IsPositive(),
+    __metadata("design:type", Number)
+], GuardiansChangedPayloadDto.prototype, "organizationId", void 0);
+__decorate([
+    IsInt(),
+    IsPositive(),
+    __metadata("design:type", Number)
+], GuardiansChangedPayloadDto.prototype, "dependentId", void 0);
+__decorate([
+    IsArray(),
+    ArrayMinSize(1),
+    ArrayMaxSize(100),
+    IsInt({ each: true }),
+    IsPositive({ each: true }),
+    __metadata("design:type", Array)
+], GuardiansChangedPayloadDto.prototype, "userIds", void 0);
+__decorate([
+    IsEnum(GuardiansChangedReason),
+    __metadata("design:type", String)
+], GuardiansChangedPayloadDto.prototype, "reason", void 0);
+__decorate([
+    IsISO8601(),
+    __metadata("design:type", String)
+], GuardiansChangedPayloadDto.prototype, "occurredAt", void 0);
+//# sourceMappingURL=guardians-changed-payload.dto.js.map

package/dist/esm/kafka/dtos/user/guardians-changed-payload.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardians-changed-payload.dto.js","sourceRoot":"","sources":["../../../../../src/kafka/dtos/user/guardians-changed-payload.dto.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE5G,sGAAsG;AACtG,MAAM,CAAN,IAAY,sBAaX;AAbD,WAAY,sBAAsB;IAC9B,4BAA4B;IAC5B,yCAAe,CAAA;IACf,uDAAuD;IACvD,6CAAmB,CAAA;IACnB,+CAA+C;IAC/C,6DAAmC,CAAA;IACnC,4HAA4H;IAC5H,+CAAqB,CAAA;IACrB,oFAAoF;IACpF,6CAAmB,CAAA;IACnB,gEAAgE;IAChE,iEAAuC,CAAA;AAC3C,CAAC,EAbW,sBAAsB,KAAtB,sBAAsB,QAajC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,0BAA0B;CAwBtC;AApBG;IAFC,KAAK,EAAE;IACP,UAAU,EAAE;;kEACW;AAKxB;IAFC,KAAK,EAAE;IACP,UAAU,EAAE;;+DACQ;AAQrB;IALC,OAAO,EAAE;IACT,YAAY,CAAC,CAAC,CAAC;IACf,YAAY,CAAC,GAAG,CAAC;IACjB,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;2DACR;AAGnB;IADC,MAAM,CAAC,sBAAsB,CAAC;;0DACC;AAGhC;IADC,SAAS,EAAE;;8DACQ"}

package/dist/esm/kafka/index.js

@@ -8,4 +8,5 @@ export * from './dtos/otp/create-otp-payload.dto';
 export * from './dtos/otp/otp-payload.dto';
 export * from './dtos/password/password-reset-payload.dto';
 export * from './dtos/account-deletion/account-deletion-request-payload.dto';
+export * from './dtos/user/guardians-changed-payload.dto';
 //# sourceMappingURL=index.js.map

package/dist/esm/kafka/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/kafka/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,6CAA6C,CAAC;AAC5D,cAAc,sCAAsC,CAAC;AACrD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,yCAAyC,CAAC;AACxD,cAAc,mCAAmC,CAAC;AAClD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4CAA4C,CAAC;AAC3D,cAAc,8DAA8D,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/kafka/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,6CAA6C,CAAC;AAC5D,cAAc,sCAAsC,CAAC;AACrD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,yCAAyC,CAAC;AACxD,cAAc,mCAAmC,CAAC;AAClD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4CAA4C,CAAC;AAC3D,cAAc,8DAA8D,CAAC;AAC7E,cAAc,2CAA2C,CAAC"}

package/dist/esm/kafka/topics.js

@@ -9,6 +9,10 @@ export const KAFKA_TOPICS = {
     USER_CREATED: 'user.created',
     USER_UPDATED: 'user.updated',
     USER_DELETED: 'user.deleted',
+    // Somebody's guardians or dependents changed (producer: clarion-authentication;
+    // payload GuardiansChangedPayloadDto; consumer: clarion-notification, which
+    // sends each affected person a silent push so their app refreshes). Ids only.
+    GUARDIANS_CHANGED: 'user.guardians.changed.v1',
     // Org. ORG_CREATED is published by clarion-organization after commit
     // (payload OrganizationCreatedEvent); clarion-incident provisions the Safety
     // Alerts category from it.

package/dist/esm/kafka/topics.js.map

@@ -1 +1 @@
-{"version":3,"file":"topics.js","sourceRoot":"","sources":["../../../src/kafka/topics.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG;IACxB,OAAO;IACP,eAAe,EAAE,iBAAiB;IAClC,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;IAClC,6BAA6B,EAAE,+BAA+B;IAC9D,6BAA6B,EAAE,+BAA+B;IAC9D,OAAO;IACP,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,qEAAqE;IACrE,6EAA6E;IAC7E,2BAA2B;IAC3B,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,MAAM;IACN,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,eAAe;IAC9B,WAAW;IACX,cAAc,EAAE,gBAAgB;IAChC,WAAW;IACX,gBAAgB,EAAE,kBAAkB;IACpC,gBAAgB,EAAE,kBAAkB;IACpC,uBAAuB,EAAE,yBAAyB;IAClD,sBAAsB,EAAE,wBAAwB;IAChD,yBAAyB,EAAE,2BAA2B;IACtD,wBAAwB,EAAE,0BAA0B;IACpD,0BAA0B,EAAE,4BAA4B;IACxD,sBAAsB,EAAE,wBAAwB;IAChD,iBAAiB,EAAE,mBAAmB;IACtC,2BAA2B,EAAE,6BAA6B;IAC1D,yCAAyC,EAAE,2CAA2C;IACtF,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,uCAAuC,EAAE,4CAA4C;IACrF,8CAA8C,EAAE,mDAAmD;IACnG,sDAAsD,EAClD,2DAA2D;IAC/D,qEAAqE;IACrE,+BAA+B;IAC/B,0CAA0C,EAAE,4DAA4D;IACxG,OAAO;IACP,oBAAoB,EAAE,sBAAsB;IAC5C,yBAAyB,EAAE,2BAA2B;IACtD,qBAAqB,EAAE,uBAAuB;IAC9C,OAAO;IACP,YAAY,EAAE,cAAc;IAC5B,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,aAAa;IAC1B,OAAO;IACP,iBAAiB,EAAE,mBAAmB;IACtC,oBAAoB,EAAE,sBAAsB;IAC5C,WAAW;IACX,qBAAqB,EAAE,uBAAuB;IAC9C,uBAAuB,EAAE,yBAAyB;IAClD,qBAAqB,EAAE,uBAAuB;IAC9C,sBAAsB,EAAE,wBAAwB;IAChD,qBAAqB,EAAE,uBAAuB;IAC9C,mBAAmB,EAAE,qBAAqB;IAC1C,qBAAqB,EAAE,uBAAuB;IAC9C,oBAAoB,EAAE,sBAAsB;IAC5C,wBAAwB,EAAE,0BAA0B;IACpD,wBAAwB,EAAE,0BAA0B;IACpD,wBAAwB,EAAE,0BAA0B;IACpD,iEAAiE;IACjE,iBAAiB,EAAE,oCAAoC;IACvD,eAAe,EAAE,kCAAkC;IACnD,wBAAwB,EAAE,6BAA6B;IACvD,wBAAwB,EAAE,6BAA6B;IACvD,wBAAwB,EAAE,6BAA6B;IACvD,wEAAwE;IACxE,+DAA+D;IAC/D,yBAAyB,EAAE,uCAAuC;IAClE,yBAAyB,EAAE,uCAAuC;IAClE,yBAAyB,EAAE,uCAAuC;IAClE,wCAAwC,EACpC,sDAAsD;IAC1D,gCAAgC,EAAE,8CAA8C;IAChF,iFAAiF;IACjF,wBAAwB,EAAE,6BAA6B;IACvD,+BAA+B,EAAE,oCAAoC;IACrE,iFAAiF;IACjF,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,iEAAiE;IACjE,sBAAsB,EAAE,2BAA2B;IACnD,sBAAsB,EAAE,2BAA2B;IACnD,uBAAuB,EAAE,4BAA4B;IACrD,6BAA6B,EAAE,kCAAkC;IACjE,+BAA+B,EAAE,oCAAoC;IACrE,8BAA8B,EAAE,mCAAmC;IACnE,+BAA+B,EAAE,oCAAoC;IACrE,4BAA4B,EAAE,iCAAiC;IAC/D,uBAAuB,EAAE,4BAA4B;IACrD,qBAAqB,EAAE,0BAA0B;IACjD,uBAAuB,EAAE,4BAA4B;IACrD,0BAA0B,EAAE,+BAA+B;IAC3D,2BAA2B,EAAE,gCAAgC;IAC7D,wBAAwB,EAAE,6BAA6B;IACvD,wBAAwB,EAAE,6BAA6B;IACvD,yBAAyB,EAAE,8BAA8B;IACzD,0BAA0B,EAAE,+BAA+B;IAC3D,oCAAoC,EAAE,yCAAyC;IAC/E,iCAAiC,EAAE,sCAAsC;IACzE,4BAA4B,EAAE,iCAAiC;IAC/D,+BAA+B,EAAE,oCAAoC;IACrE,wEAAwE;IACxE,8EAA8E;IAC9E,mDAAmD;IACnD,oBAAoB,EAAE,yBAAyB;IAC/C,sBAAsB,EAAE,2BAA2B;IACnD,kBAAkB,EAAE,uBAAuB;IAC3C,0BAA0B,EAAE,+BAA+B;IAC3D,+EAA+E;IAC/E,8DAA8D;IAC9D,iBAAiB,EAAE,6BAA6B;IAChD,4BAA4B,EAAE,wCAAwC;IACtE,mBAAmB,EAAE,+BAA+B;IACpD,uBAAuB,EAAE,mCAAmC;IAC5D,eAAe,EAAE,2BAA2B;IAC5C,2EAA2E;IAC3E,uEAAuE;IACvE,6EAA6E;IAC7E,+BAA+B;IAC/B,qCAAqC,EAAE,0CAA0C;IACjF,oBAAoB,EAAE,yBAAyB;IAC/C,8BAA8B,EAAE,mCAAmC;IACnE,0EAA0E;IAC1E,0EAA0E;IAC1E,yCAAyC,EAAE,8CAA8C;IACzF,sCAAsC,EAAE,wDAAwD;CACnG,CAAC"}
+{"version":3,"file":"topics.js","sourceRoot":"","sources":["../../../src/kafka/topics.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG;IACxB,OAAO;IACP,eAAe,EAAE,iBAAiB;IAClC,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;IAClC,6BAA6B,EAAE,+BAA+B;IAC9D,6BAA6B,EAAE,+BAA+B;IAC9D,OAAO;IACP,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,gFAAgF;IAChF,4EAA4E;IAC5E,8EAA8E;IAC9E,iBAAiB,EAAE,2BAA2B;IAC9C,qEAAqE;IACrE,6EAA6E;IAC7E,2BAA2B;IAC3B,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,MAAM;IACN,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,eAAe;IAC9B,WAAW;IACX,cAAc,EAAE,gBAAgB;IAChC,WAAW;IACX,gBAAgB,EAAE,kBAAkB;IACpC,gBAAgB,EAAE,kBAAkB;IACpC,uBAAuB,EAAE,yBAAyB;IAClD,sBAAsB,EAAE,wBAAwB;IAChD,yBAAyB,EAAE,2BAA2B;IACtD,wBAAwB,EAAE,0BAA0B;IACpD,0BAA0B,EAAE,4BAA4B;IACxD,sBAAsB,EAAE,wBAAwB;IAChD,iBAAiB,EAAE,mBAAmB;IACtC,2BAA2B,EAAE,6BAA6B;IAC1D,yCAAyC,EAAE,2CAA2C;IACtF,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,uCAAuC,EAAE,4CAA4C;IACrF,8CAA8C,EAAE,mDAAmD;IACnG,sDAAsD,EAClD,2DAA2D;IAC/D,qEAAqE;IACrE,+BAA+B;IAC/B,0CAA0C,EAAE,4DAA4D;IACxG,OAAO;IACP,oBAAoB,EAAE,sBAAsB;IAC5C,yBAAyB,EAAE,2BAA2B;IACtD,qBAAqB,EAAE,uBAAuB;IAC9C,OAAO;IACP,YAAY,EAAE,cAAc;IAC5B,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,aAAa;IAC1B,OAAO;IACP,iBAAiB,EAAE,mBAAmB;IACtC,oBAAoB,EAAE,sBAAsB;IAC5C,WAAW;IACX,qBAAqB,EAAE,uBAAuB;IAC9C,uBAAuB,EAAE,yBAAyB;IAClD,qBAAqB,EAAE,uBAAuB;IAC9C,sBAAsB,EAAE,wBAAwB;IAChD,qBAAqB,EAAE,uBAAuB;IAC9C,mBAAmB,EAAE,qBAAqB;IAC1C,qBAAqB,EAAE,uBAAuB;IAC9C,oBAAoB,EAAE,sBAAsB;IAC5C,wBAAwB,EAAE,0BAA0B;IACpD,wBAAwB,EAAE,0BAA0B;IACpD,wBAAwB,EAAE,0BAA0B;IACpD,iEAAiE;IACjE,iBAAiB,EAAE,oCAAoC;IACvD,eAAe,EAAE,kCAAkC;IACnD,wBAAwB,EAAE,6BAA6B;IACvD,wBAAwB,EAAE,6BAA6B;IACvD,wBAAwB,EAAE,6BAA6B;IACvD,wEAAwE;IACxE,+DAA+D;IAC/D,yBAAyB,EAAE,uCAAuC;IAClE,yBAAyB,EAAE,uCAAuC;IAClE,yBAAyB,EAAE,uCAAuC;IAClE,wCAAwC,EACpC,sDAAsD;IAC1D,gCAAgC,EAAE,8CAA8C;IAChF,iFAAiF;IACjF,wBAAwB,EAAE,6BAA6B;IACvD,+BAA+B,EAAE,oCAAoC;IACrE,iFAAiF;IACjF,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,iEAAiE;IACjE,sBAAsB,EAAE,2BAA2B;IACnD,sBAAsB,EAAE,2BAA2B;IACnD,uBAAuB,EAAE,4BAA4B;IACrD,6BAA6B,EAAE,kCAAkC;IACjE,+BAA+B,EAAE,oCAAoC;IACrE,8BAA8B,EAAE,mCAAmC;IACnE,+BAA+B,EAAE,oCAAoC;IACrE,4BAA4B,EAAE,iCAAiC;IAC/D,uBAAuB,EAAE,4BAA4B;IACrD,qBAAqB,EAAE,0BAA0B;IACjD,uBAAuB,EAAE,4BAA4B;IACrD,0BAA0B,EAAE,+BAA+B;IAC3D,2BAA2B,EAAE,gCAAgC;IAC7D,wBAAwB,EAAE,6BAA6B;IACvD,wBAAwB,EAAE,6BAA6B;IACvD,yBAAyB,EAAE,8BAA8B;IACzD,0BAA0B,EAAE,+BAA+B;IAC3D,oCAAoC,EAAE,yCAAyC;IAC/E,iCAAiC,EAAE,sCAAsC;IACzE,4BAA4B,EAAE,iCAAiC;IAC/D,+BAA+B,EAAE,oCAAoC;IACrE,wEAAwE;IACxE,8EAA8E;IAC9E,mDAAmD;IACnD,oBAAoB,EAAE,yBAAyB;IAC/C,sBAAsB,EAAE,2BAA2B;IACnD,kBAAkB,EAAE,uBAAuB;IAC3C,0BAA0B,EAAE,+BAA+B;IAC3D,+EAA+E;IAC/E,8DAA8D;IAC9D,iBAAiB,EAAE,6BAA6B;IAChD,4BAA4B,EAAE,wCAAwC;IACtE,mBAAmB,EAAE,+BAA+B;IACpD,uBAAuB,EAAE,mCAAmC;IAC5D,eAAe,EAAE,2BAA2B;IAC5C,2EAA2E;IAC3E,uEAAuE;IACvE,6EAA6E;IAC7E,+BAA+B;IAC/B,qCAAqC,EAAE,0CAA0C;IACjF,oBAAoB,EAAE,yBAAyB;IAC/C,8BAA8B,EAAE,mCAAmC;IACnE,0EAA0E;IAC1E,0EAA0E;IAC1E,yCAAyC,EAAE,8CAA8C;IACzF,sCAAsC,EAAE,wDAAwD;CACnG,CAAC"}

package/dist/esm/modules/notification/dtos/unregister-device-token.dto.js

@@ -0,0 +1,38 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { ApiProperty } from '@nestjs/swagger';
+import { IsInt, IsNotEmpty, IsPositive, IsString, MaxLength } from 'class-validator';
+/**
+ * Signing out of the app: this device stops receiving the signed-out account's
+ * pushes (`POST /api/push-notifications/device-tokens/unregister`). Before this a
+ * signed-out phone kept receiving that person's SOS alerts and guardian pushes
+ * until somebody else signed in on it.
+ */
+export class UnregisterDeviceTokenDto {
+}
+__decorate([
+    ApiProperty({ description: 'The FCM/APNs registration token of this device', maxLength: 4096 }),
+    IsString(),
+    IsNotEmpty(),
+    MaxLength(4096),
+    __metadata("design:type", String)
+], UnregisterDeviceTokenDto.prototype, "deviceToken", void 0);
+/**
+ * The gateway's request to clarion-notification: the token, and the SIGNED-IN caller
+ * it must belong to. A token registered to anybody else is left alone.
+ */
+export class UnregisterDeviceTokenRequestDto extends UnregisterDeviceTokenDto {
+}
+__decorate([
+    IsInt(),
+    IsPositive(),
+    __metadata("design:type", Number)
+], UnregisterDeviceTokenRequestDto.prototype, "userId", void 0);
+//# sourceMappingURL=unregister-device-token.dto.js.map

package/dist/esm/modules/notification/dtos/unregister-device-token.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unregister-device-token.dto.js","sourceRoot":"","sources":["../../../../../src/modules/notification/dtos/unregister-device-token.dto.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAErF;;;;;GAKG;AACH,MAAM,OAAO,wBAAwB;CAMpC;AADG;IAJC,WAAW,CAAC,EAAE,WAAW,EAAE,gDAAgD,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC/F,QAAQ,EAAE;IACV,UAAU,EAAE;IACZ,SAAS,CAAC,IAAI,CAAC;;6DACK;AAGzB;;;GAGG;AACH,MAAM,OAAO,+BAAgC,SAAQ,wBAAwB;CAI5E;AADG;IAFC,KAAK,EAAE;IACP,UAAU,EAAE;;+DACG"}

package/dist/esm/modules/notification/index.js

@@ -32,4 +32,6 @@ export * from './dtos/alert-acknowledgement.dto';
 // Notification Analytics (GET /admin/analytics, through the gateway's /notifications/admin/analytics)
 export * from './interfaces/notification-analytics';
 export * from './dtos/notification-analytics-query.dto';
+// Signing out: the device stops receiving the account's pushes
+export * from './dtos/unregister-device-token.dto';
 //# sourceMappingURL=index.js.map

package/dist/esm/modules/notification/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/notification/index.ts"],"names":[],"mappings":"AAAA,QAAQ;AACR,cAAc,mCAAmC,CAAC;AAClD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yCAAyC,CAAC;AACxD,cAAc,wCAAwC,CAAC;AACvD,cAAc,yCAAyC,CAAC;AACxD,cAAc,2CAA2C,CAAC;AAE1D,4CAA4C;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2CAA2C,CAAC;AAE1D,0CAA0C;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAEhD,kEAAkE;AAClE,cAAc,iDAAiD,CAAC;AAChE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,uCAAuC,CAAC;AACtD,cAAc,kCAAkC,CAAC;AAEjD,wFAAwF;AACxF,cAAc,mCAAmC,CAAC;AAClD,cAAc,iCAAiC,CAAC;AAChD,cAAc,0CAA0C,CAAC;AAEzD,oHAAoH;AACpH,cAAc,kCAAkC,CAAC;AAEjD,sGAAsG;AACtG,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/notification/index.ts"],"names":[],"mappings":"AAAA,QAAQ;AACR,cAAc,mCAAmC,CAAC;AAClD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yCAAyC,CAAC;AACxD,cAAc,wCAAwC,CAAC;AACvD,cAAc,yCAAyC,CAAC;AACxD,cAAc,2CAA2C,CAAC;AAE1D,4CAA4C;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2CAA2C,CAAC;AAE1D,0CAA0C;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAEhD,kEAAkE;AAClE,cAAc,iDAAiD,CAAC;AAChE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,uCAAuC,CAAC;AACtD,cAAc,kCAAkC,CAAC;AAEjD,wFAAwF;AACxF,cAAc,mCAAmC,CAAC;AAClD,cAAc,iCAAiC,CAAC;AAChD,cAAc,0CAA0C,CAAC;AAEzD,oHAAoH;AACpH,cAAc,kCAAkC,CAAC;AAEjD,sGAAsG;AACtG,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC;AAExD,+DAA+D;AAC/D,cAAc,oCAAoC,CAAC"}

package/dist/esm/modules/user/dtos/guardian-identifier.dto.js

@@ -13,7 +13,7 @@ export class GuardianIdentifierDto {
 }
 __decorate([
     ApiProperty({
-        description: 'Phone number for external guardian',
+        description: 'Phone number of an external guardian (older apps). Prefer relationshipId, which names either kind.',
         example: '+1234567890',
         required: false,
         type: 'string'
@@ -24,7 +24,7 @@ __decorate([
 ], GuardianIdentifierDto.prototype, "phoneNumber", void 0);
 __decorate([
     ApiProperty({
-        description: 'Relationship ID for system guardian',
+        description: 'The guardian entry id - `id` of an app-user guardian relation or of an external guardian (since grm-shared-library 1.1.248)',
         example: 789,
         required: false,
         type: 'number'

package/dist/esm/modules/user/dtos/guardian-identifier.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"guardian-identifier.dto.js","sourceRoot":"","sources":["../../../../../src/modules/user/dtos/guardian-identifier.dto.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAc,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE7E,MAAM,OAAO,qBAAqB;CAoBjC;AAXG;IARC,WAAW,CAAC;QACT,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,QAAQ;KACjB,CAAC;IACD,QAAQ,EAAE;IACV,UAAU,EAAE;;0DACQ;AAUrB;IARC,WAAW,CAAC;QACT,WAAW,EAAE,qCAAqC;QAClD,OAAO,EAAE,GAAG;QACZ,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,QAAQ;KACjB,CAAC;IACD,QAAQ,EAAE;IACV,UAAU,EAAE;;6DACW"}
+{"version":3,"file":"guardian-identifier.dto.js","sourceRoot":"","sources":["../../../../../src/modules/user/dtos/guardian-identifier.dto.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAc,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE7E,MAAM,OAAO,qBAAqB;CAoBjC;AAXG;IARC,WAAW,CAAC;QACT,WAAW,EAAE,oGAAoG;QACjH,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,QAAQ;KACjB,CAAC;IACD,QAAQ,EAAE;IACV,UAAU,EAAE;;0DACQ;AAUrB;IARC,WAAW,CAAC;QACT,WAAW,EAAE,6HAA6H;QAC1I,OAAO,EAAE,GAAG;QACZ,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,QAAQ;KACjB,CAAC;IACD,QAAQ,EAAE;IACV,UAAU,EAAE;;6DACW"}

package/dist/esm/modules/user/index.js

@@ -16,4 +16,5 @@ export * from './interfaces/guardian';
 export * from './interfaces/guardian-relation';
 export * from './interfaces/guardians-response';
 export * from './interfaces/account-analytics';
+export * from './utils/app-account.util';
 //# sourceMappingURL=index.js.map

package/dist/esm/modules/user/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/user/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qCAAqC,CAAC;AACpD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,wCAAwC,CAAC;AAEvD,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,uCAAuC,CAAC;AAEtD,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/user/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qCAAqC,CAAC;AACpD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,wCAAwC,CAAC;AAEvD,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,uCAAuC,CAAC;AAEtD,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAE/C,cAAc,0BAA0B,CAAC"}

package/dist/esm/modules/user/utils/app-account.util.js

@@ -0,0 +1,83 @@
+import { Roles } from '../../role/enums/role.enum';
+/**
+ * App accounts and staff accounts.
+ *
+ * Each brand's mobile app (G4S Kenya, GeoSHIELD, SGA Security, ...) is its own
+ * product for one organization's customers, so an account made in one app is an
+ * account with that organization only. Signing in to another brand's app means
+ * registering with that brand. One person may therefore hold several app
+ * accounts - one per organization - with the same phone number and e-mail.
+ *
+ * Staff (Super-Admin, organization and control-centre staff, responders,
+ * corporate-client admins) keep one platform-wide account each: their e-mail and
+ * phone number stay unique across the whole platform.
+ *
+ * An APP ACCOUNT is one whose only role is Mobile-User. That is the same rule the
+ * database's unique indexes use (`roles = '{Mobile-User}'`), so code and schema
+ * can never disagree about which kind an account is. An account holding
+ * Mobile-User beside a staff role is a staff account that also uses an app.
+ */
+export const APP_ACCOUNT_ROLE = Roles.MOBILE_USER;
+/** An account whose only role is Mobile-User: unique within its organization, not platform-wide. */
+export function isAppAccount(roles) {
+    return Array.isArray(roles) && roles.length === 1 && roles[0] === APP_ACCOUNT_ROLE;
+}
+/** Holds the Mobile-User role, alone or beside staff roles: someone who can use a brand's app. */
+export function hasAppRole(roles) {
+    return Array.isArray(roles) && roles.includes(APP_ACCOUNT_ROLE);
+}
+/**
+ * Parses `APP_ORGANIZATIONS`. Blank means "none configured". A malformed entry
+ * throws: a typo here would let an app sign people in to the wrong organization,
+ * so it must stop the service at boot rather than be skipped.
+ */
+export function parseAppOrganizations(raw) {
+    const map = new Map();
+    for (const entry of String(raw !== null && raw !== void 0 ? raw : '').split(',')) {
+        const trimmed = entry.trim();
+        if (!trimmed)
+            continue;
+        const match = /^([A-Za-z0-9_-]+)\s*:\s*(\d+)$/.exec(trimmed);
+        if (!match)
+            throw new Error(`APP_ORGANIZATIONS: "${trimmed}" is not <appId>:<organizationId>`);
+        const [, appId, id] = match;
+        const organizationId = Number(id);
+        if (!Number.isSafeInteger(organizationId) || organizationId <= 0) {
+            throw new Error(`APP_ORGANIZATIONS: "${trimmed}" names no valid organization`);
+        }
+        const existing = map.get(appId);
+        if (existing !== undefined && existing !== organizationId) {
+            throw new Error(`APP_ORGANIZATIONS: ${appId} is given two organizations (${existing} and ${organizationId})`);
+        }
+        map.set(appId, organizationId);
+    }
+    return map;
+}
+/**
+ * Whether a signed-in account is being used from another organization's app: the
+ * request names an app (`X-App-Id`) that belongs to organization A, and the account
+ * is an app user of organization B.
+ *
+ * Unknown here means "not a mismatch": no app named, an app with no configured
+ * organization, or an account that is staff only. Those keep working as before.
+ */
+export function isAccountFromAnotherApp(appOrganizations, appId, account) {
+    if (!appId)
+        return false;
+    const expected = appOrganizations.get(appId);
+    if (expected === undefined)
+        return false;
+    if (!hasAppRole(account.roles))
+        return false;
+    return Number(account.organizationId) !== expected;
+}
+/** Error codes a client can act on, for the account rules above. */
+export const APP_ACCOUNT_ERROR_CODES = {
+    /** A token or session belongs to another organization's app: sign out and sign in again here. */
+    APP_ACCOUNT_MISMATCH: 'APP_ACCOUNT_MISMATCH',
+    /** A sign-in names an app and an organization that do not belong together. */
+    APP_ORGANIZATION_MISMATCH: 'APP_ORGANIZATION_MISMATCH',
+    /** An older app asked for "the" account of a number that has accounts with several organizations. */
+    ACCOUNT_AMBIGUOUS: 'ACCOUNT_AMBIGUOUS',
+};
+//# sourceMappingURL=app-account.util.js.map

package/dist/esm/modules/user/utils/app-account.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-account.util.js","sourceRoot":"","sources":["../../../../../src/modules/user/utils/app-account.util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAEnD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,WAAW,CAAC;AAElD,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAAC,KAA2C;IACpE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC;AACvF,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,UAAU,CAAC,KAA2C;IAClE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;AACpE,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAA8B;IAChE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,GAAG,aAAH,GAAG,cAAH,GAAG,GAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,mCAAmC,CAAC,CAAC;QAC/F,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;QAC5B,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,+BAA+B,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,gCAAgC,QAAQ,QAAQ,cAAc,GAAG,CAAC,CAAC;QAClH,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACnC,gBAAkC,EAClC,KAAgC,EAChC,OAAsF;IAEtF,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC;AACvD,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACnC,iGAAiG;IACjG,oBAAoB,EAAE,sBAAsB;IAC5C,8EAA8E;IAC9E,yBAAyB,EAAE,2BAA2B;IACtD,qGAAqG;IACrG,iBAAiB,EAAE,mBAAmB;CAChC,CAAC"}

package/dist/types/kafka/dtos/user/guardians-changed-payload.dto.d.ts

@@ -0,0 +1,32 @@
+/** What changed about somebody's guardians - for logs and analytics; every reason means "refresh". */
+export declare enum GuardiansChangedReason {
+    /** A guardian was added. */
+    ADDED = "ADDED",
+    /** A guardian was removed by the person they guard. */
+    REMOVED = "REMOVED",
+    /** Another guardian became the primary one. */
+    PRIMARY_CHANGED = "PRIMARY_CHANGED",
+    /** A guardian on the list by phone number proved that number in the same organization's app, and is now an app guardian. */
+    PROMOTED = "PROMOTED",
+    /** An app guardian's account was deleted; they stay on the list by phone number. */
+    DEMOTED = "DEMOTED",
+    /** A guardian stopped looking after one of their dependents. */
+    DEPENDENT_REMOVED = "DEPENDENT_REMOVED"
+}
+/**
+ * Payload of `KAFKA_TOPICS.GUARDIANS_CHANGED`: somebody's guardian list changed,
+ * and these people's apps should read their guardians and dependents again.
+ *
+ * Ids only - no names, numbers or relationships. The apps read the lists through
+ * the guardian API, which applies its own access rules.
+ */
+export declare class GuardiansChangedPayloadDto {
+    /** The organization whose app the people use. Pushes go only to devices of this organization. */
+    organizationId: number;
+    /** Whose guardian list changed. */
+    dependentId: number;
+    /** Every app user whose guardians or dependents changed: the dependent and any app guardian involved. */
+    userIds: number[];
+    reason: GuardiansChangedReason;
+    occurredAt: string;
+}

package/dist/types/kafka/index.d.ts

@@ -8,3 +8,4 @@ export * from './dtos/otp/create-otp-payload.dto';
 export * from './dtos/otp/otp-payload.dto';
 export * from './dtos/password/password-reset-payload.dto';
 export * from './dtos/account-deletion/account-deletion-request-payload.dto';
+export * from './dtos/user/guardians-changed-payload.dto';

package/dist/types/kafka/topics.d.ts

@@ -7,6 +7,7 @@ export declare const KAFKA_TOPICS: {
     USER_CREATED: string;
     USER_UPDATED: string;
     USER_DELETED: string;
+    GUARDIANS_CHANGED: string;
     ORG_CREATED: string;
     ORG_UPDATED: string;
     ORG_DELETED: string;

package/dist/types/modules/notification/dtos/unregister-device-token.dto.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Signing out of the app: this device stops receiving the signed-out account's
+ * pushes (`POST /api/push-notifications/device-tokens/unregister`). Before this a
+ * signed-out phone kept receiving that person's SOS alerts and guardian pushes
+ * until somebody else signed in on it.
+ */
+export declare class UnregisterDeviceTokenDto {
+    deviceToken: string;
+}
+/**
+ * The gateway's request to clarion-notification: the token, and the SIGNED-IN caller
+ * it must belong to. A token registered to anybody else is left alone.
+ */
+export declare class UnregisterDeviceTokenRequestDto extends UnregisterDeviceTokenDto {
+    userId: number;
+}
+export interface UnregisterDeviceTokenResult {
+    /** False when the token is unknown, already inactive, or another account's. */
+    deactivated: boolean;
+}

package/dist/types/modules/notification/index.d.ts

@@ -25,3 +25,4 @@ export * from './interfaces/billing-notification-result';
 export * from './dtos/alert-acknowledgement.dto';
 export * from './interfaces/notification-analytics';
 export * from './dtos/notification-analytics-query.dto';
+export * from './dtos/unregister-device-token.dto';

package/dist/types/modules/user/index.d.ts

@@ -16,3 +16,4 @@ export * from './interfaces/guardian';
 export * from './interfaces/guardian-relation';
 export * from './interfaces/guardians-response';
 export * from './interfaces/account-analytics';
+export * from './utils/app-account.util';

package/dist/types/modules/user/interfaces/guardian.d.ts

@@ -1,5 +1,12 @@
 import { GuardianRelationship } from "../enums/guardian-relationship.enum";
 export interface Guardian {
+    /**
+     * The guardian entry's own id. External and app-user guardians share one table
+     * and one id space, so either kind can be removed or made primary by it
+     * (`GuardianIdentifierDto.relationshipId`). Absent only from responses of
+     * clarion-authentication builds older than grm-shared-library 1.1.248.
+     */
+    id?: number;
     userId?: number;
     name: string;
     phoneNumber: string;

package/dist/types/modules/user/utils/app-account.util.d.ts

@@ -0,0 +1,59 @@
+import { Roles } from '../../role/enums/role.enum';
+/**
+ * App accounts and staff accounts.
+ *
+ * Each brand's mobile app (G4S Kenya, GeoSHIELD, SGA Security, ...) is its own
+ * product for one organization's customers, so an account made in one app is an
+ * account with that organization only. Signing in to another brand's app means
+ * registering with that brand. One person may therefore hold several app
+ * accounts - one per organization - with the same phone number and e-mail.
+ *
+ * Staff (Super-Admin, organization and control-centre staff, responders,
+ * corporate-client admins) keep one platform-wide account each: their e-mail and
+ * phone number stay unique across the whole platform.
+ *
+ * An APP ACCOUNT is one whose only role is Mobile-User. That is the same rule the
+ * database's unique indexes use (`roles = '{Mobile-User}'`), so code and schema
+ * can never disagree about which kind an account is. An account holding
+ * Mobile-User beside a staff role is a staff account that also uses an app.
+ */
+export declare const APP_ACCOUNT_ROLE = Roles.MOBILE_USER;
+/** An account whose only role is Mobile-User: unique within its organization, not platform-wide. */
+export declare function isAppAccount(roles: readonly string[] | null | undefined): boolean;
+/** Holds the Mobile-User role, alone or beside staff roles: someone who can use a brand's app. */
+export declare function hasAppRole(roles: readonly string[] | null | undefined): boolean;
+/**
+ * Which organization each brand's app belongs to, as configured in
+ * `APP_ORGANIZATIONS` - for example `GardaWorld:48,G4S:49,SGA:51`. The ids differ
+ * per environment (Dev has its own organizations), which is why this is
+ * configuration and not code.
+ */
+export type AppOrganizations = ReadonlyMap<string, number>;
+/**
+ * Parses `APP_ORGANIZATIONS`. Blank means "none configured". A malformed entry
+ * throws: a typo here would let an app sign people in to the wrong organization,
+ * so it must stop the service at boot rather than be skipped.
+ */
+export declare function parseAppOrganizations(raw: string | null | undefined): AppOrganizations;
+/**
+ * Whether a signed-in account is being used from another organization's app: the
+ * request names an app (`X-App-Id`) that belongs to organization A, and the account
+ * is an app user of organization B.
+ *
+ * Unknown here means "not a mismatch": no app named, an app with no configured
+ * organization, or an account that is staff only. Those keep working as before.
+ */
+export declare function isAccountFromAnotherApp(appOrganizations: AppOrganizations, appId: string | null | undefined, account: {
+    roles?: readonly string[] | null;
+    organizationId?: number | string | null;
+}): boolean;
+/** Error codes a client can act on, for the account rules above. */
+export declare const APP_ACCOUNT_ERROR_CODES: {
+    /** A token or session belongs to another organization's app: sign out and sign in again here. */
+    readonly APP_ACCOUNT_MISMATCH: "APP_ACCOUNT_MISMATCH";
+    /** A sign-in names an app and an organization that do not belong together. */
+    readonly APP_ORGANIZATION_MISMATCH: "APP_ORGANIZATION_MISMATCH";
+    /** An older app asked for "the" account of a number that has accounts with several organizations. */
+    readonly ACCOUNT_AMBIGUOUS: "ACCOUNT_AMBIGUOUS";
+};
+export type AppAccountErrorCode = typeof APP_ACCOUNT_ERROR_CODES[keyof typeof APP_ACCOUNT_ERROR_CODES];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "grm-shared-library",
-  "version": "1.1.247",
+  "version": "1.1.249",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
   "types": "dist/types/index.d.ts",
@@ -45,6 +45,7 @@
   },
   "dependencies": {
     "@nestjs/common": "^11.0.0",
+    "@nestjs/config": "^4.0.0",
     "@nestjs/core": "^11.0.0",
     "@nestjs/mapped-types": "^2.0.6",
     "@nestjs/microservices": "^11.0.0",
@@ -57,16 +58,15 @@
     "grm-shared-library": "^1.1.101",
     "libphonenumber-js": "^1.13.8",
     "rxjs": "^7.8.2",
-    "swagger-ui-express": "^5.0.1",
-    "@nestjs/config": "^4.0.0"
+    "swagger-ui-express": "^5.0.1"
   },
   "peerDependencies": {
     "@nestjs/common": "^11.0.0",
+    "@nestjs/config": "^4.0.0",
     "@nestjs/core": "^11.0.0",
     "@nestjs/microservices": "^11.0.0",
     "@sentry/node": "^8.0.0",
     "class-transformer": "^0.5.0",
-    "class-validator": "^0.14.0",
-    "@nestjs/config": "^4.0.0"
+    "class-validator": "^0.14.0"
   }
 }