diff --git a/apps/admin-desktop/src/pages/MassAlertModal.tsx b/apps/admin-desktop/src/pages/MassAlertModal.tsx
index 53511bef..6d11eda1 100644
--- a/apps/admin-desktop/src/pages/MassAlertModal.tsx
+++ b/apps/admin-desktop/src/pages/MassAlertModal.tsx
@@ -1,4 +1,4 @@
-import { useRef, useState } from 'react'
+import { useState } from 'react'
 import { detectEncoding } from '@bantayog/shared-validators'
 import { callables } from '../services/callables'
 
@@ -16,33 +16,21 @@ interface Props {
 }
 
 export function MassAlertModal({ municipalityId, onClose }: Props) {
-  const sendKeyRef = useRef<string>(crypto.randomUUID())
-  const escalateKeyRef = useRef<string>(crypto.randomUUID())
   const [message, setMessage] = useState('')
   const [reachPlan, setReachPlan] = useState<ReachPlan | null>(null)
   const [loading, setLoading] = useState(false)
   const [error, setError] = useState<string | null>(null)
-  const [pagasaSignalRef, setPagasaSignalRef] = useState('')
-  const [notes, setNotes] = useState('')
-
-  const normalizedMessage = message.trim()
-  const normalizedPagasaSignalRef = pagasaSignalRef.trim()
-  const normalizedNotes = notes.trim()
 
   const encoding = message ? detectEncoding(message).encoding : 'GSM-7'
 
   const handlePreview = () => {
-    if (!normalizedMessage) {
-      setError('Message cannot be empty')
-      return
-    }
-    setError(null)
     setLoading(true)
+    setError(null)
     void (async () => {
       try {
         const plan = await callables.massAlertReachPlanPreview({
           targetScope: { municipalityIds: [municipalityId] },
-          message: normalizedMessage,
+          message,
         })
         setReachPlan(plan)
       } catch (err: unknown) {
@@ -58,15 +46,14 @@ export function MassAlertModal({ municipalityId, onClose }: Props) {
       setError('Direct send is not available for this alert scope')
       return
     }
-    setError(null)
     setLoading(true)
     void (async () => {
       try {
         await callables.sendMassAlert({
           reachPlan,
-          message: normalizedMessage,
+          message,
           targetScope: { municipalityIds: [municipalityId] },
-          idempotencyKey: sendKeyRef.current,
+          idempotencyKey: crypto.randomUUID(),
         })
         onClose()
       } catch (err: unknown) {
@@ -78,23 +65,14 @@ export function MassAlertModal({ municipalityId, onClose }: Props) {
   }
 
   const handleEscalate = () => {
-    if (normalizedNotes.length > 2000) {
-      setError('Notes must be 2000 characters or fewer')
-      return
-    }
-    setError(null)
     setLoading(true)
     void (async () => {
       try {
         await callables.requestMassAlertEscalation({
-          message: normalizedMessage,
+          message,
           targetScope: { municipalityIds: [municipalityId] },
-          evidencePack: {
-            linkedReportIds: [],
-            ...(normalizedPagasaSignalRef ? { pagasaSignalRef: normalizedPagasaSignalRef } : {}),
-            ...(normalizedNotes ? { notes: normalizedNotes } : {}),
-          },
-          idempotencyKey: escalateKeyRef.current,
+          evidencePack: { linkedReportIds: [] },
+          idempotencyKey: crypto.randomUUID(),
         })
         onClose()
       } catch (err: unknown) {
@@ -120,8 +98,6 @@ export function MassAlertModal({ municipalityId, onClose }: Props) {
         onChange={(e) => {
           setMessage(e.target.value)
           setReachPlan(null)
-          sendKeyRef.current = crypto.randomUUID()
-          escalateKeyRef.current = crypto.randomUUID()
         }}
         rows={4}
       />
@@ -130,7 +106,7 @@ export function MassAlertModal({ municipalityId, onClose }: Props) {
         {reachPlan?.unicodeWarning && <span> ⚠ UCS-2 (multi-byte)</span>}
         {reachPlan && <> · Segments: {reachPlan.segmentCount}</>}
       </p>
-      <button onClick={handlePreview} disabled={!normalizedMessage || loading}>
+      <button onClick={handlePreview} disabled={!message || loading}>
         Preview Reach
       </button>
       {reachPlan && (
@@ -153,32 +129,9 @@ export function MassAlertModal({ municipalityId, onClose }: Props) {
         Send Alert
       </button>
       {reachPlan?.route === 'ndrrmc_escalation' && (
-        <>
-          <label htmlFor="pagasa-signal-ref">PAGASA Signal Ref (optional)</label>
-          <input
-            id="pagasa-signal-ref"
-            type="text"
-            value={pagasaSignalRef}
-            onChange={(e) => {
-              setPagasaSignalRef(e.target.value)
-              escalateKeyRef.current = crypto.randomUUID()
-            }}
-          />
-          <label htmlFor="escalation-notes">Notes (optional)</label>
-          <textarea
-            id="escalation-notes"
-            value={notes}
-            maxLength={2000}
-            onChange={(e) => {
-              setNotes(e.target.value)
-              escalateKeyRef.current = crypto.randomUUID()
-            }}
-            rows={2}
-          />
-          <button onClick={handleEscalate} disabled={loading}>
-            Request NDRRMC Escalation
-          </button>
-        </>
+        <button onClick={handleEscalate} disabled={loading}>
+          Request NDRRMC Escalation
+        </button>
       )}
       <button onClick={onClose}>Cancel</button>
     </dialog>
diff --git a/apps/admin-desktop/src/pages/TotpEnrollmentPage.tsx b/apps/admin-desktop/src/pages/TotpEnrollmentPage.tsx
new file mode 100644
index 00000000..c008c7ea
--- /dev/null
+++ b/apps/admin-desktop/src/pages/TotpEnrollmentPage.tsx
@@ -0,0 +1,75 @@
+import { useState } from 'react'
+import { getAuth, multiFactor, TotpMultiFactorGenerator } from 'firebase/auth'
+import type { TotpSecret } from 'firebase/auth'
+
+export function TotpEnrollmentPage() {
+  const auth = getAuth()
+  const [totpSecret, setTotpSecret] = useState<TotpSecret | null>(null)
+  const [verificationCode, setVerificationCode] = useState('')
+  const [enrolled, setEnrolled] = useState(false)
+  const [error, setError] = useState<string | null>(null)
+
+  async function handleGenerate() {
+    setError(null)
+    const user = auth.currentUser
+    if (!user) {
+      setError('You must be logged in to enroll TOTP.')
+      return
+    }
+    try {
+      const session = await multiFactor(user).getSession()
+      const secret = await TotpMultiFactorGenerator.generateSecret(session)
+      setTotpSecret(secret)
+    } catch (err) {
+      setError(err instanceof Error ? err.message : 'Failed to generate secret')
+    }
+  }
+
+  async function handleEnroll() {
+    setError(null)
+    const user = auth.currentUser
+    if (!user || !totpSecret) return
+    try {
+      const assertion = TotpMultiFactorGenerator.assertionForEnrollment(
+        totpSecret,
+        verificationCode,
+      )
+      await multiFactor(user).enroll(assertion, 'Authenticator')
+      setEnrolled(true)
+    } catch (err) {
+      setError(err instanceof Error ? err.message : 'Enrollment failed')
+    }
+  }
+
+  if (enrolled) return <p>TOTP enrolled successfully.</p>
+
+  return (
+    <div>
+      <h1>Enroll TOTP Authenticator</h1>
+      {!totpSecret ? (
+        <button onClick={() => void handleGenerate()}>Generate Secret</button>
+      ) : (
+        <>
+          <p>
+            Secret key: <code>{totpSecret.secretKey}</code>
+          </p>
+          <p>
+            QR URI:{' '}
+            <code>
+              {totpSecret.generateQrCodeUrl('Bantayog Alert', auth.currentUser?.email ?? 'admin')}
+            </code>
+          </p>
+          <input
+            placeholder="6-digit code"
+            value={verificationCode}
+            onChange={(e) => {
+              setVerificationCode(e.target.value)
+            }}
+          />
+          <button onClick={() => void handleEnroll()}>Verify and Enroll</button>
+        </>
+      )}
+      {error && <p role="alert">{error}</p>}
+    </div>
+  )
+}
diff --git a/apps/admin-desktop/src/routes.tsx b/apps/admin-desktop/src/routes.tsx
index 938db11a..21e5cc6f 100644
--- a/apps/admin-desktop/src/routes.tsx
+++ b/apps/admin-desktop/src/routes.tsx
@@ -1,6 +1,7 @@
 import { createBrowserRouter } from 'react-router-dom'
 import { ProtectedRoute } from '@bantayog/shared-ui'
 import { LoginPage } from './pages/LoginPage'
+import { TotpEnrollmentPage } from './pages/TotpEnrollmentPage'
 import { TriageQueuePage } from './pages/TriageQueuePage'
 import { AgencyAssistanceQueuePage } from './pages/AgencyAssistanceQueuePage'
 import { AnalyticsDashboardPage } from './pages/AnalyticsDashboardPage'
@@ -8,6 +9,7 @@ import { RosterPage } from './pages/RosterPage'
 
 export const router = createBrowserRouter([
   { path: '/login', element: <LoginPage /> },
+  { path: '/totp-enroll', element: <TotpEnrollmentPage /> },
   {
     path: '/',
     element: (
diff --git a/apps/admin-desktop/src/services/callables.ts b/apps/admin-desktop/src/services/callables.ts
index b9e02967..d7c8ca80 100644
--- a/apps/admin-desktop/src/services/callables.ts
+++ b/apps/admin-desktop/src/services/callables.ts
@@ -143,4 +143,72 @@ export const callables = {
       functions,
       'bulkAvailabilityOverride',
     )(payload).then((r) => r.data),
+  initiateBreakGlass: (payload: { codeA: string; codeB: string; reason: string }) =>
+    httpsCallable<typeof payload, { sessionId: string }>(
+      functions,
+      'initiateBreakGlass',
+    )(payload).then((r) => r.data),
+  deactivateBreakGlass: () =>
+    httpsCallable<Record<string, never>>(functions, 'deactivateBreakGlass')({}).then((r) => r.data),
+  declareEmergency: (payload: {
+    hazardType: string
+    affectedMunicipalityIds: string[]
+    message: string
+  }) =>
+    httpsCallable<typeof payload, { alertId: string }>(
+      functions,
+      'declareEmergency',
+    )(payload).then((r) => r.data),
+  declareDataIncident: (payload: {
+    incidentType: string
+    severity: string
+    affectedCollections: string[]
+    affectedDataClasses: string[]
+    estimatedAffectedSubjects?: number
+    summary: string
+  }) =>
+    httpsCallable<typeof payload, { incidentId: string }>(
+      functions,
+      'declareDataIncident',
+    )(payload).then((r) => r.data),
+  recordIncidentResponseEvent: (payload: { incidentId: string; phase: string; notes?: string }) =>
+    httpsCallable<typeof payload, { eventId: string }>(
+      functions,
+      'recordIncidentResponseEvent',
+    )(payload).then((r) => r.data),
+  setRetentionExempt: (payload: {
+    collection: string
+    documentId: string
+    exempt: boolean
+    reason: string
+  }) => httpsCallable<typeof payload>(functions, 'setRetentionExempt')(payload).then((r) => r.data),
+  approveErasureRequest: (payload: {
+    erasureRequestId: string
+    approved: boolean
+    reason?: string
+  }) =>
+    httpsCallable<typeof payload>(functions, 'approveErasureRequest')(payload).then((r) => r.data),
+  toggleMutualAidVisibility: (payload: { agencyId: string; visible: boolean }) =>
+    httpsCallable<typeof payload>(
+      functions,
+      'toggleMutualAidVisibility',
+    )(payload).then((r) => r.data),
+  upsertProvincialResource: (payload: {
+    id?: string
+    name: string
+    type: string
+    quantity: number
+    unit: string
+    location: string
+    available: boolean
+  }) =>
+    httpsCallable<typeof payload, { id: string }>(
+      functions,
+      'upsertProvincialResource',
+    )(payload).then((r) => r.data),
+  archiveProvincialResource: (payload: { id: string }) =>
+    httpsCallable<typeof payload>(
+      functions,
+      'archiveProvincialResource',
+    )(payload).then((r) => r.data),
 }
diff --git a/docs/learnings.md b/docs/learnings.md
index a21df7ea..c2299649 100644
--- a/docs/learnings.md
+++ b/docs/learnings.md
@@ -96,6 +96,16 @@
 - Capacitor void-return callbacks need braces: `return () => { clearInterval(id) }`.
 - When refactoring from `refCount` to `Set<subscribers>`, remove ALL stale `refCount` references.
 
+## Phase 7 — Provincial Superadmin
+
+- `@google-cloud/bigquery` `.table.query()` doesn't exist; use `bq.query()` directly for SQL queries.
+- BigQuery query results are untyped; extract into typed helpers with `as unknown as RowType[]` to satisfy strict ESLint rules (`no-unsafe-member-access`, `no-unsafe-argument`).
+- `@typescript-eslint/no-unnecessary-condition` flags `?.` on non-optional fields in function parameter types — use `.` when the type declares the field as required.
+- Firestore path template literals (`db.doc(\`...\`)`) trigger `no-restricted-syntax`lint; use chained`.collection().doc()` instead.
+- `@typescript-eslint/no-misused-promises` flags async onClick handlers; wrap with `() => void asyncFn()`.
+- `bcryptjs` preferred over `bcrypt` in this repo — pure JS, no native compilation.
+- `@google-cloud/logging` must be added as explicit dependency when using Cloud Logging API in triggers.
+
 ## Misc
 
 - `navigator.clipboard` in happy-dom often needs to be defined as an own property before spying.
diff --git a/docs/progress.md b/docs/progress.md
index 37102689..47097ade 100644
--- a/docs/progress.md
+++ b/docs/progress.md
@@ -1,6 +1,30 @@
 # Progress
 
-## Current — Phase 6 Responder App (branch: `phase6/responder-app`)
+## Current — Phase 7 Provincial Superadmin + NDRRMC + Break-Glass
+
+### PRE-7 — Audit & Auth Foundation (branch: `feature/phase7-pre`)
+
+| Task                                    | Status  | Notes                                                                                             |
+| --------------------------------------- | ------- | ------------------------------------------------------------------------------------------------- |
+| 1. Schema additions (shared-validators) | ✅ DONE | `dataIncidentDocSchema`, extended `breakglassEventDocSchema` + `agencyDocSchema`. 229 tests pass. |
+| 2. `requireMfaAuth()` + tests           | ✅ DONE | 6 test cases including edge cases (null auth, missing firebase, non-string factor). 14/14 pass.   |
+| 3. `audit-stream.ts` service            | ✅ DONE | Fire-and-forget BigQuery streaming. `@google-cloud/bigquery@^7.9.2` added.                        |
+| 4. Audit export batch + health check    | ✅ DONE | 5min batch, 10min health check with FCM alert. `@google-cloud/logging` added.                     |
+| 5. Analytics snapshot extension         | ✅ DONE | `resolvedToday` + `avgResponseTimeMinutes` on province summary. 7/7 tests.                        |
+| 6. Bare-bones TOTP enrollment page      | ✅ DONE | `/totp-enroll` route, unprotected. Firebase v12 TOTP MFA.                                         |
+| 7. Seed break-glass config script       | ✅ DONE | `bcryptjs`, idempotent, `system_config/break_glass_config`.                                       |
+
+**Staging gate:** Pending — needs 24h soak before 7.A can deploy.
+
+### 7.A — Security Callables (branch: `feature/phase7-a`) — IN PROGRESS
+
+### 7.B — Superadmin UI (branch: `feature/phase7-b`) — BLOCKED by 7.A
+
+### 7.C — Drill & Verification — BLOCKED by 7.B
+
+---
+
+## Phase 6 — Responder App (branch: `phase6/responder-app`) — COMPLETE
 
 | Task                                             | Status  | Notes                                                                                                                                                                          |
 | ------------------------------------------------ | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
diff --git a/docs/superpowers/plans/2026-04-27-phase7.md b/docs/superpowers/plans/2026-04-27-phase7.md
index 28be0428..2f5f246f 100644
--- a/docs/superpowers/plans/2026-04-27-phase7.md
+++ b/docs/superpowers/plans/2026-04-27-phase7.md
@@ -1116,7 +1116,6 @@ import { UserManagementPage } from './pages/UserManagementPage'
 import { ProvincialResourcesPage } from './pages/ProvincialResourcesPage'
 import { SystemHealthPage } from './pages/SystemHealthPage'
 import { BreakGlassPage } from './pages/BreakGlassPage'
-
 ;<Route path="/province" element={<ProtectedRoute allowedRoles={['provincial_superadmin']} />}>
   <Route index element={<Navigate to="/province/dashboard" replace />} />
   <Route path="dashboard" element={<ProvinceDashboardPage />} />
diff --git a/functions/lib/__tests__/callables/mark-dispatch-unable-to-complete.test.d.ts b/functions/lib/__tests__/callables/mark-dispatch-unable-to-complete.test.d.ts
new file mode 100644
index 00000000..9820c586
--- /dev/null
+++ b/functions/lib/__tests__/callables/mark-dispatch-unable-to-complete.test.d.ts
@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mark-dispatch-unable-to-complete.test.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/mark-dispatch-unable-to-complete.test.d.ts.map b/functions/lib/__tests__/callables/mark-dispatch-unable-to-complete.test.d.ts.map
new file mode 100644
index 00000000..78b41a7a
--- /dev/null
+++ b/functions/lib/__tests__/callables/mark-dispatch-unable-to-complete.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"mark-dispatch-unable-to-complete.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/callables/mark-dispatch-unable-to-complete.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/mark-dispatch-unable-to-complete.test.js b/functions/lib/__tests__/callables/mark-dispatch-unable-to-complete.test.js
new file mode 100644
index 00000000..8b4677bf
--- /dev/null
+++ b/functions/lib/__tests__/callables/mark-dispatch-unable-to-complete.test.js
@@ -0,0 +1,225 @@
+import { describe, it, expect, beforeEach, beforeAll, afterAll, vi } from 'vitest';
+import { initializeTestEnvironment } from '@firebase/rules-unit-testing';
+import { Timestamp } from 'firebase-admin/firestore';
+vi.mock('firebase-admin/database', () => ({
+    getDatabase: vi.fn(() => ({})),
+}));
+const { onCallMock } = vi.hoisted(() => ({
+    onCallMock: vi.fn((_config, handler) => handler),
+}));
+vi.mock('firebase-functions/v2/https', async () => {
+    const actual = await vi.importActual('firebase-functions/v2/https');
+    return {
+        ...actual,
+        onCall: onCallMock,
+    };
+});
+let adminDb;
+vi.mock('../../admin-init.js', () => ({
+    get adminDb() {
+        return adminDb;
+    },
+}));
+import { markDispatchUnableToComplete, markDispatchUnableToCompleteCore, } from '../../callables/mark-dispatch-unable-to-complete.js';
+import { seedActiveAccount } from '../helpers/seed-factories.js';
+let testEnv;
+beforeAll(async () => {
+    testEnv = await initializeTestEnvironment({
+        projectId: 'mark-dispatch-unable-to-complete-test',
+        firestore: {
+            host: 'localhost',
+            port: 8081,
+            rules: 'rules_version = "2"; service cloud.firestore { match /{d=**} { allow read, write: if true; } }',
+        },
+    });
+    adminDb = testEnv.unauthenticatedContext().firestore();
+});
+beforeEach(async () => {
+    await testEnv.clearFirestore();
+});
+afterAll(async () => {
+    await testEnv.cleanup();
+});
+async function seedDispatchActive({ env, dispatchId, reportId, responderUid, status, }) {
+    await env.withSecurityRulesDisabled(async (ctx) => {
+        const db = ctx.firestore();
+        await db
+            .collection('dispatches')
+            .doc(dispatchId)
+            .set({
+            dispatchId,
+            reportId,
+            status,
+            assignedTo: {
+                uid: responderUid,
+                agencyId: 'bfp-daet',
+                municipalityId: 'daet',
+            },
+            dispatchedAt: Date.now(),
+            lastStatusAt: Date.now(),
+            schemaVersion: 1,
+        });
+    });
+}
+async function seedReport(env, reportId, status) {
+    await env.withSecurityRulesDisabled(async (ctx) => {
+        const db = ctx.firestore();
+        await db.collection('reports').doc(reportId).set({
+            reportId,
+            status,
+            municipalityId: 'daet',
+            schemaVersion: 1,
+            createdAt: Date.now(),
+            lastStatusAt: Date.now(),
+        });
+    });
+}
+describe('markDispatchUnableToCompleteCore', () => {
+    it('marks an active dispatch unable_to_complete and resets report to verified', async () => {
+        await seedReport(testEnv, 'report-1', 'assigned');
+        await seedDispatchActive({
+            env: testEnv,
+            dispatchId: 'dispatch-1',
+            reportId: 'report-1',
+            responderUid: 'r1',
+            status: 'on_scene',
+        });
+        await seedActiveAccount(testEnv, {
+            uid: 'r1',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            const result = await markDispatchUnableToCompleteCore(db, {
+                dispatchId: 'dispatch-1',
+                reason: 'Equipment failure',
+                idempotencyKey: crypto.randomUUID(),
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            });
+            expect(result.status).toBe('unable_to_complete');
+            expect(result.dispatchId).toBe('dispatch-1');
+            const dispatch = (await db.collection('dispatches').doc('dispatch-1').get()).data();
+            expect(dispatch?.status).toBe('unable_to_complete');
+            expect(dispatch?.unableToCompleteReason).toBe('Equipment failure');
+            const report = (await db.collection('reports').doc('report-1').get()).data();
+            expect(report?.status).toBe('verified');
+        });
+    });
+    it('rejects when dispatch is not active', async () => {
+        await seedReport(testEnv, 'report-2', 'assigned');
+        await seedDispatchActive({
+            env: testEnv,
+            dispatchId: 'dispatch-2',
+            reportId: 'report-2',
+            responderUid: 'r1',
+            status: 'pending',
+        });
+        await seedActiveAccount(testEnv, {
+            uid: 'r1',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            await expect(markDispatchUnableToCompleteCore(db, {
+                dispatchId: 'dispatch-2',
+                reason: 'Cannot reach',
+                idempotencyKey: crypto.randomUUID(),
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            })).rejects.toMatchObject({ code: 'FAILED_PRECONDITION' });
+        });
+    });
+    it('is idempotent on same key', async () => {
+        await seedReport(testEnv, 'report-3', 'assigned');
+        await seedDispatchActive({
+            env: testEnv,
+            dispatchId: 'dispatch-3',
+            reportId: 'report-3',
+            responderUid: 'r1',
+            status: 'en_route',
+        });
+        await seedActiveAccount(testEnv, {
+            uid: 'r1',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            const key = crypto.randomUUID();
+            const first = await markDispatchUnableToCompleteCore(db, {
+                dispatchId: 'dispatch-3',
+                reason: 'Road blocked',
+                idempotencyKey: key,
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            });
+            const second = await markDispatchUnableToCompleteCore(db, {
+                dispatchId: 'dispatch-3',
+                reason: 'Road blocked',
+                idempotencyKey: key,
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            });
+            expect(second.status).toBe(first.status);
+            const dispatches = await db
+                .collection('dispatch_events')
+                .where('dispatchId', '==', 'dispatch-3')
+                .get();
+            expect(dispatches.docs).toHaveLength(1);
+        });
+    });
+    it('rejects when caller is not the assigned responder', async () => {
+        await seedReport(testEnv, 'report-4', 'assigned');
+        await seedDispatchActive({
+            env: testEnv,
+            dispatchId: 'dispatch-4',
+            reportId: 'report-4',
+            responderUid: 'r1',
+            status: 'on_scene',
+        });
+        await seedActiveAccount(testEnv, {
+            uid: 'r2',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            await expect(markDispatchUnableToCompleteCore(db, {
+                dispatchId: 'dispatch-4',
+                reason: 'Not mine',
+                idempotencyKey: crypto.randomUUID(),
+                actor: { uid: 'r2', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            })).rejects.toMatchObject({ code: 'FORBIDDEN' });
+        });
+    });
+});
+describe('markDispatchUnableToComplete callable', () => {
+    const callCallable = markDispatchUnableToComplete;
+    it('rejects unauthenticated request', async () => {
+        await expect(callCallable({
+            data: {
+                dispatchId: 'dispatch-x',
+                reason: 'No gear',
+                idempotencyKey: crypto.randomUUID(),
+            },
+        })).rejects.toMatchObject({ code: 'unauthenticated' });
+    });
+    it('rejects wrong-role request', async () => {
+        await expect(callCallable({
+            auth: {
+                uid: 'admin-1',
+                token: { role: 'municipal_admin', accountStatus: 'active' },
+            },
+            data: {
+                dispatchId: 'dispatch-x',
+                reason: 'No gear',
+                idempotencyKey: crypto.randomUUID(),
+            },
+        })).rejects.toMatchObject({ code: 'permission-denied' });
+    });
+});
+//# sourceMappingURL=mark-dispatch-unable-to-complete.test.js.map
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/mark-dispatch-unable-to-complete.test.js.map b/functions/lib/__tests__/callables/mark-dispatch-unable-to-complete.test.js.map
new file mode 100644
index 00000000..971c9636
--- /dev/null
+++ b/functions/lib/__tests__/callables/mark-dispatch-unable-to-complete.test.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"mark-dispatch-unable-to-complete.test.js","sourceRoot":"","sources":["../../../src/__tests__/callables/mark-dispatch-unable-to-complete.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAClF,OAAO,EAAE,yBAAyB,EAA6B,MAAM,8BAA8B,CAAA;AACnG,OAAO,EAAE,SAAS,EAAkB,MAAM,0BAA0B,CAAA;AAEpE,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CAC/B,CAAC,CAAC,CAAA;AAEH,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,OAAgB,EAAE,OAAgB,EAAE,EAAE,CAAC,OAAO,CAAC;CACnE,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;IAChD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAClC,6BAA6B,CAC9B,CAAA;IACD,OAAO;QACL,GAAG,MAAM;QACT,MAAM,EAAE,UAAU;KACnB,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,OAAkB,CAAA;AACtB,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,OAAO;QACT,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAC,CAAC,CAAA;AAEH,OAAO,EACL,4BAA4B,EAC5B,gCAAgC,GACjC,MAAM,qDAAqD,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAEhE,IAAI,OAA6B,CAAA;AAEjC,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,OAAO,GAAG,MAAM,yBAAyB,CAAC;QACxC,SAAS,EAAE,uCAAuC;QAClD,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,KAAK,EACH,gGAAgG;SACnG;KACF,CAAC,CAAA;IACF,OAAO,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,SAAS,EAA0B,CAAA;AAChF,CAAC,CAAC,CAAA;AAEF,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,OAAO,CAAC,cAAc,EAAE,CAAA;AAChC,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;AACzB,CAAC,CAAC,CAAA;AAUF,KAAK,UAAU,kBAAkB,CAAC,EAChC,GAAG,EACH,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,MAAM,GACiB;IACvB,MAAM,GAAG,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,CAAA;QAC1B,MAAM,EAAE;aACL,UAAU,CAAC,YAAY,CAAC;aACxB,GAAG,CAAC,UAAU,CAAC;aACf,GAAG,CAAC;YACH,UAAU;YACV,QAAQ;YACR,MAAM;YACN,UAAU,EAAE;gBACV,GAAG,EAAE,YAAY;gBACjB,QAAQ,EAAE,UAAU;gBACpB,cAAc,EAAE,MAAM;aACvB;YACD,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAyB,EACzB,QAAgB,EAChB,MAAc;IAEd,MAAM,GAAG,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,CAAA;QAC1B,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC;YAC/C,QAAQ;YACR,MAAM;YACN,cAAc,EAAE,MAAM;YACtB,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;SACzB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;QACjD,MAAM,kBAAkB,CAAC;YACvB,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,EAAE,EAAE;gBACxD,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,mBAAmB;gBAC3B,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;gBACnC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;YAChD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAE5C,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YACnF,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;YACnD,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;YAElE,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YAC5E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACzC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;QACjD,MAAM,kBAAkB,CAAC;YACvB,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,SAAS;SAClB,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,MAAM,CACV,gCAAgC,CAAC,EAAE,EAAE;gBACnC,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,cAAc;gBACtB,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;gBACnC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;QACjD,MAAM,kBAAkB,CAAC;YACvB,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;YAC/B,MAAM,KAAK,GAAG,MAAM,gCAAgC,CAAC,EAAE,EAAE;gBACvD,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,cAAc;gBACtB,cAAc,EAAE,GAAG;gBACnB,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,EAAE,EAAE;gBACxD,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,cAAc;gBACtB,cAAc,EAAE,GAAG;gBACnB,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YAExC,MAAM,UAAU,GAAG,MAAM,EAAE;iBACxB,UAAU,CAAC,iBAAiB,CAAC;iBAC7B,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,YAAY,CAAC;iBACvC,GAAG,EAAE,CAAA;YACR,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACzC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;QACjD,MAAM,kBAAkB,CAAC;YACvB,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,MAAM,CACV,gCAAgC,CAAC,EAAE,EAAE;gBACnC,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,UAAU;gBAClB,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;gBACnC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,MAAM,YAAY,GAAG,4BAG8C,CAAA;IAEnE,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,MAAM,CACV,YAAY,CAAC;YACX,IAAI,EAAE;gBACJ,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,SAAS;gBACjB,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;aACpC;SACF,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,MAAM,CACV,YAAY,CAAC;YACX,IAAI,EAAE;gBACJ,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE;aAC5D;YACD,IAAI,EAAE;gBACJ,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,SAAS;gBACjB,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;aACpC;SACF,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/request-backup.test.d.ts b/functions/lib/__tests__/callables/request-backup.test.d.ts
new file mode 100644
index 00000000..f5f38f62
--- /dev/null
+++ b/functions/lib/__tests__/callables/request-backup.test.d.ts
@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=request-backup.test.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/request-backup.test.d.ts.map b/functions/lib/__tests__/callables/request-backup.test.d.ts.map
new file mode 100644
index 00000000..45160c84
--- /dev/null
+++ b/functions/lib/__tests__/callables/request-backup.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"request-backup.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/callables/request-backup.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/request-backup.test.js b/functions/lib/__tests__/callables/request-backup.test.js
new file mode 100644
index 00000000..6e73a837
--- /dev/null
+++ b/functions/lib/__tests__/callables/request-backup.test.js
@@ -0,0 +1,212 @@
+import { describe, it, expect, beforeEach, beforeAll, afterAll, vi } from 'vitest';
+import { initializeTestEnvironment } from '@firebase/rules-unit-testing';
+import { Timestamp } from 'firebase-admin/firestore';
+vi.mock('firebase-admin/database', () => ({
+    getDatabase: vi.fn(() => ({})),
+}));
+const { onCallMock } = vi.hoisted(() => ({
+    onCallMock: vi.fn((_config, handler) => handler),
+}));
+vi.mock('firebase-functions/v2/https', async () => {
+    const actual = await vi.importActual('firebase-functions/v2/https');
+    return {
+        ...actual,
+        onCall: onCallMock,
+    };
+});
+let adminDb;
+vi.mock('../../admin-init.js', () => ({
+    get adminDb() {
+        return adminDb;
+    },
+}));
+import { requestBackup, requestBackupCore } from '../../callables/request-backup.js';
+import { seedActiveAccount } from '../helpers/seed-factories.js';
+let testEnv;
+beforeAll(async () => {
+    testEnv = await initializeTestEnvironment({
+        projectId: 'request-backup-test',
+        firestore: {
+            host: 'localhost',
+            port: 8081,
+            rules: 'rules_version = "2"; service cloud.firestore { match /{d=**} { allow read, write: if true; } }',
+        },
+    });
+    adminDb = testEnv.unauthenticatedContext().firestore();
+});
+beforeEach(async () => {
+    await testEnv.clearFirestore();
+});
+afterAll(async () => {
+    await testEnv.cleanup();
+});
+async function seedDispatchActive({ env, dispatchId, reportId, responderUid, status, }) {
+    await env.withSecurityRulesDisabled(async (ctx) => {
+        const db = ctx.firestore();
+        await db
+            .collection('dispatches')
+            .doc(dispatchId)
+            .set({
+            dispatchId,
+            reportId,
+            status,
+            assignedTo: {
+                uid: responderUid,
+                agencyId: 'bfp-daet',
+                municipalityId: 'daet',
+            },
+            dispatchedAt: Date.now(),
+            lastStatusAt: Date.now(),
+            schemaVersion: 1,
+        });
+    });
+}
+describe('requestBackupCore', () => {
+    it('creates a backup request for an active dispatch', async () => {
+        await seedDispatchActive({
+            env: testEnv,
+            dispatchId: 'dispatch-1',
+            reportId: 'report-1',
+            responderUid: 'r1',
+            status: 'on_scene',
+        });
+        await seedActiveAccount(testEnv, {
+            uid: 'r1',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            const result = await requestBackupCore(db, {
+                dispatchId: 'dispatch-1',
+                reason: 'Need additional units',
+                idempotencyKey: crypto.randomUUID(),
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            });
+            expect(result.status).toBe('requested');
+            expect(result.backupRequestId).toBeDefined();
+            const backup = (await db.collection('backup_requests').doc(result.backupRequestId).get()).data();
+            expect(backup).toMatchObject({
+                dispatchId: 'dispatch-1',
+                reportId: 'report-1',
+                reason: 'Need additional units',
+                status: 'pending',
+            });
+            const notifications = await db
+                .collection('admin_notifications')
+                .where('type', '==', 'backup_requested')
+                .get();
+            expect(notifications.docs).toHaveLength(1);
+        });
+    });
+    it('rejects when dispatch is not active', async () => {
+        await seedDispatchActive({
+            env: testEnv,
+            dispatchId: 'dispatch-2',
+            reportId: 'report-2',
+            responderUid: 'r1',
+            status: 'pending',
+        });
+        await seedActiveAccount(testEnv, {
+            uid: 'r1',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            await expect(requestBackupCore(db, {
+                dispatchId: 'dispatch-2',
+                reason: 'Need help',
+                idempotencyKey: crypto.randomUUID(),
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            })).rejects.toMatchObject({ code: 'FAILED_PRECONDITION' });
+        });
+    });
+    it('is idempotent on same key', async () => {
+        await seedDispatchActive({
+            env: testEnv,
+            dispatchId: 'dispatch-3',
+            reportId: 'report-3',
+            responderUid: 'r1',
+            status: 'en_route',
+        });
+        await seedActiveAccount(testEnv, {
+            uid: 'r1',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            const key = crypto.randomUUID();
+            const first = await requestBackupCore(db, {
+                dispatchId: 'dispatch-3',
+                reason: 'Need more units',
+                idempotencyKey: key,
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            });
+            const second = await requestBackupCore(db, {
+                dispatchId: 'dispatch-3',
+                reason: 'Need more units',
+                idempotencyKey: key,
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            });
+            expect(second.backupRequestId).toBe(first.backupRequestId);
+            const backups = await db.collection('backup_requests').get();
+            expect(backups.docs).toHaveLength(1);
+        });
+    });
+    it('rejects when caller is not the assigned responder', async () => {
+        await seedDispatchActive({
+            env: testEnv,
+            dispatchId: 'dispatch-4',
+            reportId: 'report-4',
+            responderUid: 'r1',
+            status: 'on_scene',
+        });
+        await seedActiveAccount(testEnv, {
+            uid: 'r2',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            await expect(requestBackupCore(db, {
+                dispatchId: 'dispatch-4',
+                reason: 'Need help',
+                idempotencyKey: crypto.randomUUID(),
+                actor: { uid: 'r2', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            })).rejects.toMatchObject({ code: 'FORBIDDEN' });
+        });
+    });
+});
+describe('requestBackup callable', () => {
+    const callCallable = requestBackup;
+    it('rejects unauthenticated request', async () => {
+        await expect(callCallable({
+            data: {
+                dispatchId: 'dispatch-x',
+                reason: 'Need help',
+                idempotencyKey: crypto.randomUUID(),
+            },
+        })).rejects.toMatchObject({ code: 'unauthenticated' });
+    });
+    it('rejects wrong-role request', async () => {
+        await expect(callCallable({
+            auth: {
+                uid: 'admin-1',
+                token: { role: 'municipal_admin', accountStatus: 'active' },
+            },
+            data: {
+                dispatchId: 'dispatch-x',
+                reason: 'Need help',
+                idempotencyKey: crypto.randomUUID(),
+            },
+        })).rejects.toMatchObject({ code: 'permission-denied' });
+    });
+});
+//# sourceMappingURL=request-backup.test.js.map
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/request-backup.test.js.map b/functions/lib/__tests__/callables/request-backup.test.js.map
new file mode 100644
index 00000000..a9f3e666
--- /dev/null
+++ b/functions/lib/__tests__/callables/request-backup.test.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"request-backup.test.js","sourceRoot":"","sources":["../../../src/__tests__/callables/request-backup.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAClF,OAAO,EAAE,yBAAyB,EAA6B,MAAM,8BAA8B,CAAA;AACnG,OAAO,EAAE,SAAS,EAAkB,MAAM,0BAA0B,CAAA;AAEpE,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CAC/B,CAAC,CAAC,CAAA;AAEH,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,OAAgB,EAAE,OAAgB,EAAE,EAAE,CAAC,OAAO,CAAC;CACnE,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;IAChD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAClC,6BAA6B,CAC9B,CAAA;IACD,OAAO;QACL,GAAG,MAAM;QACT,MAAM,EAAE,UAAU;KACnB,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,OAAkB,CAAA;AACtB,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,OAAO;QACT,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAC,CAAC,CAAA;AAEH,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAEhE,IAAI,OAA6B,CAAA;AAEjC,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,OAAO,GAAG,MAAM,yBAAyB,CAAC;QACxC,SAAS,EAAE,qBAAqB;QAChC,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,KAAK,EACH,gGAAgG;SACnG;KACF,CAAC,CAAA;IACF,OAAO,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,SAAS,EAA0B,CAAA;AAChF,CAAC,CAAC,CAAA;AAEF,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,OAAO,CAAC,cAAc,EAAE,CAAA;AAChC,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;AACzB,CAAC,CAAC,CAAA;AAUF,KAAK,UAAU,kBAAkB,CAAC,EAChC,GAAG,EACH,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,MAAM,GACiB;IACvB,MAAM,GAAG,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,CAAA;QAC1B,MAAM,EAAE;aACL,UAAU,CAAC,YAAY,CAAC;aACxB,GAAG,CAAC,UAAU,CAAC;aACf,GAAG,CAAC;YACH,UAAU;YACV,QAAQ;YACR,MAAM;YACN,UAAU,EAAE;gBACV,GAAG,EAAE,YAAY;gBACjB,QAAQ,EAAE,UAAU;gBACpB,cAAc,EAAE,MAAM;aACvB;YACD,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,kBAAkB,CAAC;YACvB,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE;gBACzC,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,uBAAuB;gBAC/B,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;gBACnC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YACvC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAA;YAE5C,MAAM,MAAM,GAAG,CACb,MAAM,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,EAAE,CACzE,CAAC,IAAI,EAAE,CAAA;YACR,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;gBAC3B,UAAU,EAAE,YAAY;gBACxB,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,uBAAuB;gBAC/B,MAAM,EAAE,SAAS;aAClB,CAAC,CAAA;YAEF,MAAM,aAAa,GAAG,MAAM,EAAE;iBAC3B,UAAU,CAAC,qBAAqB,CAAC;iBACjC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC;iBACvC,GAAG,EAAE,CAAA;YACR,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,kBAAkB,CAAC;YACvB,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,SAAS;SAClB,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,MAAM,CACV,iBAAiB,CAAC,EAAE,EAAE;gBACpB,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,WAAW;gBACnB,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;gBACnC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,kBAAkB,CAAC;YACvB,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;YAC/B,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE;gBACxC,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,iBAAiB;gBACzB,cAAc,EAAE,GAAG;gBACnB,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE;gBACzC,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,iBAAiB;gBACzB,cAAc,EAAE,GAAG;gBACnB,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;YAE1D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,GAAG,EAAE,CAAA;YAC5D,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACtC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,kBAAkB,CAAC;YACvB,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,MAAM,CACV,iBAAiB,CAAC,EAAE,EAAE;gBACpB,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,WAAW;gBACnB,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;gBACnC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,YAAY,GAAG,aAG0C,CAAA;IAE/D,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,MAAM,CACV,YAAY,CAAC;YACX,IAAI,EAAE;gBACJ,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,WAAW;gBACnB,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;aACpC;SACF,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,MAAM,CACV,YAAY,CAAC;YACX,IAAI,EAAE;gBACJ,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE;aAC5D;YACD,IAAI,EAAE;gBACJ,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,WAAW;gBACnB,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;aACpC;SACF,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/responder-shift-handoff.test.d.ts b/functions/lib/__tests__/callables/responder-shift-handoff.test.d.ts
new file mode 100644
index 00000000..73240358
--- /dev/null
+++ b/functions/lib/__tests__/callables/responder-shift-handoff.test.d.ts
@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=responder-shift-handoff.test.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/responder-shift-handoff.test.d.ts.map b/functions/lib/__tests__/callables/responder-shift-handoff.test.d.ts.map
new file mode 100644
index 00000000..cc15fbf2
--- /dev/null
+++ b/functions/lib/__tests__/callables/responder-shift-handoff.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"responder-shift-handoff.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/callables/responder-shift-handoff.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/responder-shift-handoff.test.js b/functions/lib/__tests__/callables/responder-shift-handoff.test.js
new file mode 100644
index 00000000..57b51ef9
--- /dev/null
+++ b/functions/lib/__tests__/callables/responder-shift-handoff.test.js
@@ -0,0 +1,171 @@
+import { describe, it, expect, beforeAll, afterAll, beforeEach, vi } from 'vitest';
+import { initializeTestEnvironment } from '@firebase/rules-unit-testing';
+import { setDoc, doc, Timestamp } from 'firebase/firestore';
+import { getFirestore } from 'firebase-admin/firestore';
+import { initializeApp, deleteApp } from 'firebase-admin/app';
+const onCallMock = vi.hoisted(() => vi.fn());
+vi.mock('firebase-functions/v2/https', () => ({
+    onCall: onCallMock,
+    HttpsError: class HttpsError extends Error {
+        code;
+        constructor(code, message) {
+            super(message);
+            this.code = code;
+        }
+    },
+}));
+vi.mock('firebase-admin/database', () => ({ getDatabase: vi.fn(() => ({})) }));
+let adminApp;
+let adminDb;
+vi.mock('../../admin-init.js', () => ({
+    get adminDb() {
+        return adminDb;
+    },
+}));
+import { initiateResponderHandoffCore, acceptResponderHandoffCore, } from '../../callables/responder-shift-handoff.js';
+const uuid = (n) => `00000000-0000-0000-0000-${String(n).padStart(12, '0')}`;
+const ts = 1713350400000;
+let testEnv;
+const _origEmulatorHost = process.env.FIRESTORE_EMULATOR_HOST;
+beforeAll(async () => {
+    process.env.FIRESTORE_EMULATOR_HOST = 'localhost:8081';
+    testEnv = await initializeTestEnvironment({
+        projectId: 'responder-handoff-test',
+        firestore: {
+            host: 'localhost',
+            port: 8081,
+            rules: 'rules_version = "2"; service cloud.firestore { match /{d=**} { allow read, write: if true; } }',
+        },
+    });
+    adminApp = initializeApp({ projectId: 'responder-handoff-test' }, 'responder-handoff-test');
+    adminDb = getFirestore(adminApp);
+});
+beforeEach(async () => {
+    await testEnv.clearFirestore();
+});
+afterAll(async () => {
+    await testEnv.cleanup();
+    await deleteApp(adminApp);
+    if (_origEmulatorHost === undefined) {
+        delete process.env.FIRESTORE_EMULATOR_HOST;
+    }
+    else {
+        process.env.FIRESTORE_EMULATOR_HOST = _origEmulatorHost;
+    }
+});
+function makeActor(uid, overrides = {}) {
+    return {
+        uid,
+        claims: {
+            role: 'responder',
+            accountStatus: 'active',
+            agencyId: 'agency-1',
+            municipalityId: 'muni-1',
+            ...overrides,
+        },
+    };
+}
+async function seedResponder(responderId, overrides = {}) {
+    await testEnv.withSecurityRulesDisabled(async (ctx) => {
+        await setDoc(doc(ctx.firestore(), 'responders', responderId), {
+            uid: responderId,
+            municipalityId: 'muni-1',
+            name: 'Test Responder',
+            phoneNumber: '+1234567890',
+            isActive: true,
+            agencyId: 'agency-1',
+            currentStatus: 'available',
+            lastLocationUpdate: ts,
+            createdAt: ts,
+            schemaVersion: 1,
+            ...overrides,
+        });
+    });
+}
+async function createHandoff(id, overrides = {}) {
+    await testEnv.withSecurityRulesDisabled(async (ctx) => {
+        await setDoc(doc(ctx.firestore(), 'responder_shift_handoffs', id), {
+            fromUid: 'from-responder',
+            toUid: 'to-responder',
+            agencyId: 'agency-1',
+            municipalityId: 'muni-1',
+            reason: 'shift ended',
+            status: 'pending',
+            createdAt: Timestamp.fromMillis(ts),
+            expiresAt: Timestamp.fromMillis(Date.now() + 1800000),
+            schemaVersion: 1,
+            ...overrides,
+        });
+    });
+}
+describe('initiateResponderHandoffCore', () => {
+    it('should reject when actor account status is not active', async () => {
+        const result = await initiateResponderHandoffCore(adminDb, { toUid: 'responder-b', reason: 'shift ended', idempotencyKey: uuid(1) }, makeActor('responder-a', { accountStatus: 'inactive' }), 'corr-1');
+        expect(result.success).toBe(false);
+        if (!result.success) {
+            expect(result.errorCode).toBe('permission-denied');
+        }
+    });
+    it('should reject when toUid equals actor uid', async () => {
+        const result = await initiateResponderHandoffCore(adminDb, { toUid: 'responder-a', reason: 'shift ended', idempotencyKey: uuid(2) }, makeActor('responder-a'), 'corr-2');
+        expect(result.success).toBe(false);
+        if (!result.success) {
+            expect(result.errorCode).toBe('invalid-argument');
+        }
+    });
+    it('should reject when toUid responder is not found', async () => {
+        await seedResponder('responder-a');
+        const result = await initiateResponderHandoffCore(adminDb, { toUid: 'responder-b', reason: 'shift ended', idempotencyKey: uuid(3) }, makeActor('responder-a'), 'corr-3');
+        expect(result.success).toBe(false);
+        if (!result.success) {
+            expect(result.errorCode).toBe('not-found');
+        }
+    });
+    it('should create handoff document when valid', async () => {
+        await seedResponder('responder-a');
+        await seedResponder('responder-b');
+        const result = await initiateResponderHandoffCore(adminDb, { toUid: 'responder-b', reason: 'shift ended', idempotencyKey: uuid(4) }, makeActor('responder-a'), 'corr-4');
+        expect(result.success).toBe(true);
+        if (result.success) {
+            expect(typeof result.handoffId).toBe('string');
+            expect(result.handoffId.length).toBeGreaterThan(0);
+        }
+    });
+    it('should be idempotent when called twice with the same idempotencyKey', async () => {
+        await seedResponder('responder-a');
+        await seedResponder('responder-b');
+        const input = { toUid: 'responder-b', reason: 'shift ended', idempotencyKey: uuid(5) };
+        const result1 = await initiateResponderHandoffCore(adminDb, input, makeActor('responder-a'), 'corr-5a');
+        const result2 = await initiateResponderHandoffCore(adminDb, input, makeActor('responder-a'), 'corr-5b');
+        expect(result1.success).toBe(true);
+        expect(result2.success).toBe(true);
+        if (result1.success && result2.success) {
+            expect(result1.handoffId).toBe(result2.handoffId);
+        }
+    });
+});
+describe('acceptResponderHandoffCore', () => {
+    it('should reject when handoff is not found', async () => {
+        const result = await acceptResponderHandoffCore(adminDb, { handoffId: 'missing-handoff', idempotencyKey: uuid(6) }, makeActor('responder-b'), 'corr-6');
+        expect(result.success).toBe(false);
+        if (!result.success) {
+            expect(result.errorCode).toBe('not-found');
+        }
+    });
+    it('should reject when accepting uid is not the toUid', async () => {
+        await createHandoff('handoff-1', { toUid: 'other-responder' });
+        const result = await acceptResponderHandoffCore(adminDb, { handoffId: 'handoff-1', idempotencyKey: uuid(7) }, makeActor('responder-b'), 'corr-7');
+        expect(result.success).toBe(false);
+        if (!result.success) {
+            expect(result.errorCode).toBe('permission-denied');
+        }
+    });
+    it('should mark handoff as accepted', async () => {
+        await createHandoff('handoff-2', { toUid: 'responder-b' });
+        const result = await acceptResponderHandoffCore(adminDb, { handoffId: 'handoff-2', idempotencyKey: uuid(8) }, makeActor('responder-b'), 'corr-8');
+        expect(result.success).toBe(true);
+        const updated = await adminDb.collection('responder_shift_handoffs').doc('handoff-2').get();
+        expect(updated.data()?.status).toBe('accepted');
+    });
+});
+//# sourceMappingURL=responder-shift-handoff.test.js.map
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/responder-shift-handoff.test.js.map b/functions/lib/__tests__/callables/responder-shift-handoff.test.js.map
new file mode 100644
index 00000000..a014e842
--- /dev/null
+++ b/functions/lib/__tests__/callables/responder-shift-handoff.test.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"responder-shift-handoff.test.js","sourceRoot":"","sources":["../../../src/__tests__/callables/responder-shift-handoff.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAClF,OAAO,EAAE,yBAAyB,EAA6B,MAAM,8BAA8B,CAAA;AACnG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAkB,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAY,MAAM,oBAAoB,CAAA;AAEvE,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;AAC5C,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,UAAU;IAClB,UAAU,EAAE,MAAM,UAAW,SAAQ,KAAK;QACxC,IAAI,CAAQ;QACZ,YAAY,IAAY,EAAE,OAAe;YACvC,KAAK,CAAC,OAAO,CAAC,CAAA;YACd,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAClB,CAAC;KACF;CACF,CAAC,CAAC,CAAA;AACH,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC9E,IAAI,QAAa,CAAA;AACjB,IAAI,OAAkB,CAAA;AACtB,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,OAAO;QACT,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAC,CAAC,CAAA;AAEH,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,4CAA4C,CAAA;AAEnD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,2BAA2B,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAA;AACpF,MAAM,EAAE,GAAG,aAAa,CAAA;AACxB,IAAI,OAA6B,CAAA;AACjC,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA;AAE7D,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,gBAAgB,CAAA;IACtD,OAAO,GAAG,MAAM,yBAAyB,CAAC;QACxC,SAAS,EAAE,wBAAwB;QACnC,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,KAAK,EACH,gGAAgG;SACnG;KACF,CAAC,CAAA;IACF,QAAQ,GAAG,aAAa,CAAC,EAAE,SAAS,EAAE,wBAAwB,EAAE,EAAE,wBAAwB,CAAC,CAAA;IAC3F,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;AAClC,CAAC,CAAC,CAAA;AAEF,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,OAAO,CAAC,cAAc,EAAE,CAAA;AAChC,CAAC,CAAC,CAAA;AACF,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;IACvB,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAA;IACzB,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA;IAC5C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,iBAAiB,CAAA;IACzD,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,SAAS,SAAS,CAAC,GAAW,EAAE,YAAqC,EAAE;IACrE,OAAO;QACL,GAAG;QACH,MAAM,EAAE;YACN,IAAI,EAAE,WAAW;YACjB,aAAa,EAAE,QAAQ;YACvB,QAAQ,EAAE,UAAU;YACpB,cAAc,EAAE,QAAQ;YACxB,GAAG,SAAS;SACb;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,WAAmB,EAAE,YAAqC,EAAE;IACvF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACpD,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE;YAC5D,GAAG,EAAE,WAAW;YAChB,cAAc,EAAE,QAAQ;YACxB,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,aAAa;YAC1B,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,UAAU;YACpB,aAAa,EAAE,WAAW;YAC1B,kBAAkB,EAAE,EAAE;YACtB,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;YAChB,GAAG,SAAS;SACb,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,EAAU,EAAE,YAAqC,EAAE;IAC9E,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACpD,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,0BAA0B,EAAE,EAAE,CAAC,EAAE;YACjE,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,cAAc;YACrB,QAAQ,EAAE,UAAU;YACpB,cAAc,EAAE,QAAQ;YACxB,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACrD,aAAa,EAAE,CAAC;YAChB,GAAG,SAAS;SACb,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC/C,OAAO,EACP,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EACxE,SAAS,CAAC,aAAa,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,EACvD,QAAQ,CACT,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QACpD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC/C,OAAO,EACP,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EACxE,SAAS,CAAC,aAAa,CAAC,EACxB,QAAQ,CACT,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACnD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,aAAa,CAAC,aAAa,CAAC,CAAA;QAClC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC/C,OAAO,EACP,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EACxE,SAAS,CAAC,aAAa,CAAC,EACxB,QAAQ,CACT,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,aAAa,CAAC,aAAa,CAAC,CAAA;QAClC,MAAM,aAAa,CAAC,aAAa,CAAC,CAAA;QAClC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC/C,OAAO,EACP,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EACxE,SAAS,CAAC,aAAa,CAAC,EACxB,QAAQ,CACT,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,CAAC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAC9C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACpD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,aAAa,CAAC,aAAa,CAAC,CAAA;QAClC,MAAM,aAAa,CAAC,aAAa,CAAC,CAAA;QAClC,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;QACtF,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAChD,OAAO,EACP,KAAK,EACL,SAAS,CAAC,aAAa,CAAC,EACxB,SAAS,CACV,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAChD,OAAO,EACP,KAAK,EACL,SAAS,CAAC,aAAa,CAAC,EACxB,SAAS,CACV,CAAA;QACD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACnD,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAC7C,OAAO,EACP,EAAE,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EACzD,SAAS,CAAC,aAAa,CAAC,EACxB,QAAQ,CACT,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,aAAa,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAA;QAC9D,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAC7C,OAAO,EACP,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EACnD,SAAS,CAAC,aAAa,CAAC,EACxB,QAAQ,CACT,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QACpD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,aAAa,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAC7C,OAAO,EACP,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EACnD,SAAS,CAAC,aAAa,CAAC,EACxB,QAAQ,CACT,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,CAAA;QAC3F,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/submit-responder-witnessed-report.test.d.ts b/functions/lib/__tests__/callables/submit-responder-witnessed-report.test.d.ts
new file mode 100644
index 00000000..a6f937d2
--- /dev/null
+++ b/functions/lib/__tests__/callables/submit-responder-witnessed-report.test.d.ts
@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=submit-responder-witnessed-report.test.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/submit-responder-witnessed-report.test.d.ts.map b/functions/lib/__tests__/callables/submit-responder-witnessed-report.test.d.ts.map
new file mode 100644
index 00000000..970e8f85
--- /dev/null
+++ b/functions/lib/__tests__/callables/submit-responder-witnessed-report.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"submit-responder-witnessed-report.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/callables/submit-responder-witnessed-report.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/submit-responder-witnessed-report.test.js b/functions/lib/__tests__/callables/submit-responder-witnessed-report.test.js
new file mode 100644
index 00000000..a1a17a32
--- /dev/null
+++ b/functions/lib/__tests__/callables/submit-responder-witnessed-report.test.js
@@ -0,0 +1,240 @@
+import { describe, it, expect, beforeEach, beforeAll, afterAll, vi } from 'vitest';
+import { initializeTestEnvironment } from '@firebase/rules-unit-testing';
+import { Timestamp } from 'firebase-admin/firestore';
+vi.mock('firebase-admin/database', () => ({
+    getDatabase: vi.fn(() => ({})),
+}));
+const { onCallMock } = vi.hoisted(() => ({
+    onCallMock: vi.fn((_config, handler) => handler),
+}));
+vi.mock('firebase-functions/v2/https', async () => {
+    const actual = await vi.importActual('firebase-functions/v2/https');
+    return {
+        ...actual,
+        onCall: onCallMock,
+    };
+});
+let adminDb;
+vi.mock('../../admin-init.js', () => ({
+    get adminDb() {
+        return adminDb;
+    },
+}));
+import { submitResponderWitnessedReport, submitResponderWitnessedReportCore, } from '../../callables/submit-responder-witnessed-report.js';
+import { seedActiveAccount } from '../helpers/seed-factories.js';
+let testEnv;
+beforeAll(async () => {
+    testEnv = await initializeTestEnvironment({
+        projectId: 'submit-responder-witnessed-report-test',
+        firestore: {
+            host: 'localhost',
+            port: 8081,
+            rules: 'rules_version = "2"; service cloud.firestore { match /{d=**} { allow read, write: if true; } }',
+        },
+    });
+    adminDb = testEnv.unauthenticatedContext().firestore();
+});
+beforeEach(async () => {
+    await testEnv.clearFirestore();
+});
+afterAll(async () => {
+    await testEnv.cleanup();
+});
+async function seedDispatchActive({ env, dispatchId, reportId, responderUid, status, }) {
+    await env.withSecurityRulesDisabled(async (ctx) => {
+        const db = ctx.firestore();
+        await db
+            .collection('dispatches')
+            .doc(dispatchId)
+            .set({
+            dispatchId,
+            reportId,
+            status,
+            assignedTo: {
+                uid: responderUid,
+                agencyId: 'bfp-daet',
+                municipalityId: 'daet',
+            },
+            dispatchedAt: Date.now(),
+            lastStatusAt: Date.now(),
+            schemaVersion: 1,
+        });
+    });
+}
+describe('submitResponderWitnessedReportCore', () => {
+    it('creates a responder-witnessed report for an active dispatch', async () => {
+        await seedDispatchActive({
+            env: testEnv,
+            dispatchId: 'dispatch-1',
+            reportId: 'report-1',
+            responderUid: 'r1',
+            status: 'on_scene',
+        });
+        await seedActiveAccount(testEnv, {
+            uid: 'r1',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            const result = await submitResponderWitnessedReportCore(db, {
+                dispatchId: 'dispatch-1',
+                reportType: 'flood',
+                description: 'Water rising fast',
+                severity: 'high',
+                publicLocation: { lat: 14.1134, lng: 122.9554 },
+                idempotencyKey: crypto.randomUUID(),
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            });
+            expect(result.reportId).toBeDefined();
+            expect(result.publicTrackingRef).toBeDefined();
+            const report = (await db.collection('reports').doc(result.reportId).get()).data();
+            expect(report).toMatchObject({
+                source: 'responder_witness',
+                witnessPriorityFlag: true,
+                reporterRole: 'responder',
+                status: 'new',
+                reportType: 'flood',
+                severity: 'high',
+            });
+            const ops = (await db.collection('report_ops').doc(result.reportId).get()).data();
+            expect(ops?.witnessPriorityFlag).toBe(true);
+            const notifications = await db
+                .collection('admin_notifications')
+                .where('type', '==', 'responder_witness_report')
+                .get();
+            expect(notifications.docs).toHaveLength(1);
+        });
+    });
+    it('rejects when dispatch is not active', async () => {
+        await seedDispatchActive({
+            env: testEnv,
+            dispatchId: 'dispatch-2',
+            reportId: 'report-2',
+            responderUid: 'r1',
+            status: 'pending',
+        });
+        await seedActiveAccount(testEnv, {
+            uid: 'r1',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            await expect(submitResponderWitnessedReportCore(db, {
+                dispatchId: 'dispatch-2',
+                reportType: 'flood',
+                description: 'Water rising',
+                severity: 'high',
+                publicLocation: { lat: 14.1134, lng: 122.9554 },
+                idempotencyKey: crypto.randomUUID(),
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            })).rejects.toMatchObject({ code: 'FAILED_PRECONDITION' });
+        });
+    });
+    it('is idempotent on same key', async () => {
+        await seedDispatchActive({
+            env: testEnv,
+            dispatchId: 'dispatch-3',
+            reportId: 'report-3',
+            responderUid: 'r1',
+            status: 'en_route',
+        });
+        await seedActiveAccount(testEnv, {
+            uid: 'r1',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            const key = crypto.randomUUID();
+            const first = await submitResponderWitnessedReportCore(db, {
+                dispatchId: 'dispatch-3',
+                reportType: 'fire',
+                description: 'Smoke visible',
+                severity: 'medium',
+                publicLocation: { lat: 14.1134, lng: 122.9554 },
+                idempotencyKey: key,
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            });
+            const second = await submitResponderWitnessedReportCore(db, {
+                dispatchId: 'dispatch-3',
+                reportType: 'fire',
+                description: 'Smoke visible',
+                severity: 'medium',
+                publicLocation: { lat: 14.1134, lng: 122.9554 },
+                idempotencyKey: key,
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            });
+            expect(second.reportId).toBe(first.reportId);
+            const reports = await db
+                .collection('reports')
+                .where('source', '==', 'responder_witness')
+                .get();
+            expect(reports.docs).toHaveLength(1);
+        });
+    });
+    it('rejects when caller is not the assigned responder', async () => {
+        await seedDispatchActive({
+            env: testEnv,
+            dispatchId: 'dispatch-4',
+            reportId: 'report-4',
+            responderUid: 'r1',
+            status: 'on_scene',
+        });
+        await seedActiveAccount(testEnv, {
+            uid: 'r2',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            await expect(submitResponderWitnessedReportCore(db, {
+                dispatchId: 'dispatch-4',
+                reportType: 'flood',
+                description: 'Water rising',
+                severity: 'high',
+                publicLocation: { lat: 14.1134, lng: 122.9554 },
+                idempotencyKey: crypto.randomUUID(),
+                actor: { uid: 'r2', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            })).rejects.toMatchObject({ code: 'FORBIDDEN' });
+        });
+    });
+});
+describe('submitResponderWitnessedReport callable', () => {
+    const callCallable = submitResponderWitnessedReport;
+    it('rejects unauthenticated request', async () => {
+        await expect(callCallable({
+            data: {
+                dispatchId: 'dispatch-x',
+                reportType: 'flood',
+                description: 'Water rising',
+                severity: 'high',
+                publicLocation: { lat: 14.1134, lng: 122.9554 },
+                idempotencyKey: crypto.randomUUID(),
+            },
+        })).rejects.toMatchObject({ code: 'unauthenticated' });
+    });
+    it('rejects wrong-role request', async () => {
+        await expect(callCallable({
+            auth: {
+                uid: 'admin-1',
+                token: { role: 'municipal_admin', accountStatus: 'active' },
+            },
+            data: {
+                dispatchId: 'dispatch-x',
+                reportType: 'flood',
+                description: 'Water rising',
+                severity: 'high',
+                publicLocation: { lat: 14.1134, lng: 122.9554 },
+                idempotencyKey: crypto.randomUUID(),
+            },
+        })).rejects.toMatchObject({ code: 'permission-denied' });
+    });
+});
+//# sourceMappingURL=submit-responder-witnessed-report.test.js.map
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/submit-responder-witnessed-report.test.js.map b/functions/lib/__tests__/callables/submit-responder-witnessed-report.test.js.map
new file mode 100644
index 00000000..6a5575e1
--- /dev/null
+++ b/functions/lib/__tests__/callables/submit-responder-witnessed-report.test.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"submit-responder-witnessed-report.test.js","sourceRoot":"","sources":["../../../src/__tests__/callables/submit-responder-witnessed-report.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAClF,OAAO,EAAE,yBAAyB,EAA6B,MAAM,8BAA8B,CAAA;AACnG,OAAO,EAAE,SAAS,EAAkB,MAAM,0BAA0B,CAAA;AAEpE,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CAC/B,CAAC,CAAC,CAAA;AAEH,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,OAAgB,EAAE,OAAgB,EAAE,EAAE,CAAC,OAAO,CAAC;CACnE,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;IAChD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAClC,6BAA6B,CAC9B,CAAA;IACD,OAAO;QACL,GAAG,MAAM;QACT,MAAM,EAAE,UAAU;KACnB,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,OAAkB,CAAA;AACtB,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,OAAO;QACT,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAC,CAAC,CAAA;AAEH,OAAO,EACL,8BAA8B,EAC9B,kCAAkC,GACnC,MAAM,sDAAsD,CAAA;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAEhE,IAAI,OAA6B,CAAA;AAEjC,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,OAAO,GAAG,MAAM,yBAAyB,CAAC;QACxC,SAAS,EAAE,wCAAwC;QACnD,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,KAAK,EACH,gGAAgG;SACnG;KACF,CAAC,CAAA;IACF,OAAO,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,SAAS,EAA0B,CAAA;AAChF,CAAC,CAAC,CAAA;AAEF,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,OAAO,CAAC,cAAc,EAAE,CAAA;AAChC,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;AACzB,CAAC,CAAC,CAAA;AAUF,KAAK,UAAU,kBAAkB,CAAC,EAChC,GAAG,EACH,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,MAAM,GACiB;IACvB,MAAM,GAAG,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,CAAA;QAC1B,MAAM,EAAE;aACL,UAAU,CAAC,YAAY,CAAC;aACxB,GAAG,CAAC,UAAU,CAAC;aACf,GAAG,CAAC;YACH,UAAU;YACV,QAAQ;YACR,MAAM;YACN,UAAU,EAAE;gBACV,GAAG,EAAE,YAAY;gBACjB,QAAQ,EAAE,UAAU;gBACpB,cAAc,EAAE,MAAM;aACvB;YACD,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,kBAAkB,CAAC;YACvB,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC,EAAE,EAAE;gBAC1D,UAAU,EAAE,YAAY;gBACxB,UAAU,EAAE,OAAO;gBACnB,WAAW,EAAE,mBAAmB;gBAChC,QAAQ,EAAE,MAAM;gBAChB,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE;gBAC/C,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;gBACnC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAA;YACrC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAA;YAE9C,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YACjF,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;gBAC3B,MAAM,EAAE,mBAAmB;gBAC3B,mBAAmB,EAAE,IAAI;gBACzB,YAAY,EAAE,WAAW;gBACzB,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,OAAO;gBACnB,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAA;YAEF,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YACjF,MAAM,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAE3C,MAAM,aAAa,GAAG,MAAM,EAAE;iBAC3B,UAAU,CAAC,qBAAqB,CAAC;iBACjC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,0BAA0B,CAAC;iBAC/C,GAAG,EAAE,CAAA;YACR,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,kBAAkB,CAAC;YACvB,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,SAAS;SAClB,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,MAAM,CACV,kCAAkC,CAAC,EAAE,EAAE;gBACrC,UAAU,EAAE,YAAY;gBACxB,UAAU,EAAE,OAAO;gBACnB,WAAW,EAAE,cAAc;gBAC3B,QAAQ,EAAE,MAAM;gBAChB,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE;gBAC/C,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;gBACnC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,kBAAkB,CAAC;YACvB,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;YAC/B,MAAM,KAAK,GAAG,MAAM,kCAAkC,CAAC,EAAE,EAAE;gBACzD,UAAU,EAAE,YAAY;gBACxB,UAAU,EAAE,MAAM;gBAClB,WAAW,EAAE,eAAe;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE;gBAC/C,cAAc,EAAE,GAAG;gBACnB,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC,EAAE,EAAE;gBAC1D,UAAU,EAAE,YAAY;gBACxB,UAAU,EAAE,MAAM;gBAClB,WAAW,EAAE,eAAe;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE;gBAC/C,cAAc,EAAE,GAAG;gBACnB,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YAE5C,MAAM,OAAO,GAAG,MAAM,EAAE;iBACrB,UAAU,CAAC,SAAS,CAAC;iBACrB,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,mBAAmB,CAAC;iBAC1C,GAAG,EAAE,CAAA;YACR,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACtC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,kBAAkB,CAAC;YACvB,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,MAAM,CACV,kCAAkC,CAAC,EAAE,EAAE;gBACrC,UAAU,EAAE,YAAY;gBACxB,UAAU,EAAE,OAAO;gBACnB,WAAW,EAAE,cAAc;gBAC3B,QAAQ,EAAE,MAAM;gBAChB,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE;gBAC/C,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;gBACnC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,MAAM,YAAY,GAAG,8BAGyC,CAAA;IAE9D,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,MAAM,CACV,YAAY,CAAC;YACX,IAAI,EAAE;gBACJ,UAAU,EAAE,YAAY;gBACxB,UAAU,EAAE,OAAO;gBACnB,WAAW,EAAE,cAAc;gBAC3B,QAAQ,EAAE,MAAM;gBAChB,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE;gBAC/C,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;aACpC;SACF,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,MAAM,CACV,YAAY,CAAC;YACX,IAAI,EAAE;gBACJ,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE;aAC5D;YACD,IAAI,EAAE;gBACJ,UAAU,EAAE,YAAY;gBACxB,UAAU,EAAE,OAAO;gBACnB,WAAW,EAAE,cAAc;gBAC3B,QAAQ,EAAE,MAAM;gBAChB,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE;gBAC/C,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;aACpC;SACF,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/trigger-sos.test.d.ts b/functions/lib/__tests__/callables/trigger-sos.test.d.ts
new file mode 100644
index 00000000..eec514aa
--- /dev/null
+++ b/functions/lib/__tests__/callables/trigger-sos.test.d.ts
@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=trigger-sos.test.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/trigger-sos.test.d.ts.map b/functions/lib/__tests__/callables/trigger-sos.test.d.ts.map
new file mode 100644
index 00000000..0fa94f23
--- /dev/null
+++ b/functions/lib/__tests__/callables/trigger-sos.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"trigger-sos.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/callables/trigger-sos.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/trigger-sos.test.js b/functions/lib/__tests__/callables/trigger-sos.test.js
new file mode 100644
index 00000000..23cdd623
--- /dev/null
+++ b/functions/lib/__tests__/callables/trigger-sos.test.js
@@ -0,0 +1,158 @@
+import { describe, it, expect, beforeEach, beforeAll, afterAll, vi } from 'vitest';
+import { initializeTestEnvironment } from '@firebase/rules-unit-testing';
+import { Timestamp } from 'firebase-admin/firestore';
+vi.mock('firebase-admin/database', () => ({
+    getDatabase: vi.fn(() => ({})),
+}));
+const { onCallMock } = vi.hoisted(() => ({
+    onCallMock: vi.fn((_config, handler) => handler),
+}));
+vi.mock('firebase-functions/v2/https', async () => {
+    const actual = await vi.importActual('firebase-functions/v2/https');
+    return {
+        ...actual,
+        onCall: onCallMock,
+    };
+});
+let adminDb;
+vi.mock('../../admin-init.js', () => ({
+    get adminDb() {
+        return adminDb;
+    },
+}));
+import { triggerSOS, triggerSosCore } from '../../callables/trigger-sos.js';
+import { seedActiveAccount } from '../helpers/seed-factories.js';
+let testEnv;
+beforeAll(async () => {
+    testEnv = await initializeTestEnvironment({
+        projectId: 'trigger-sos-test',
+        firestore: {
+            host: 'localhost',
+            port: 8081,
+            rules: 'rules_version = "2"; service cloud.firestore { match /{d=**} { allow read, write: if true; } }',
+        },
+    });
+    adminDb = testEnv.unauthenticatedContext().firestore();
+});
+beforeEach(async () => {
+    await testEnv.clearFirestore();
+});
+afterAll(async () => {
+    await testEnv.cleanup();
+});
+async function seedDispatchActive(env, dispatchId, reportId, responderUid, status, overrides = {}) {
+    await env.withSecurityRulesDisabled(async (ctx) => {
+        const db = ctx.firestore();
+        await db
+            .collection('dispatches')
+            .doc(dispatchId)
+            .set({
+            dispatchId,
+            reportId,
+            status,
+            assignedTo: {
+                uid: responderUid,
+                agencyId: 'bfp-daet',
+                municipalityId: 'daet',
+            },
+            dispatchedAt: Date.now(),
+            lastStatusAt: Date.now(),
+            schemaVersion: 1,
+            ...overrides,
+        });
+    });
+}
+describe('triggerSosCore', () => {
+    it('sets sosTriggeredAt for an active dispatch', async () => {
+        await seedDispatchActive(testEnv, 'dispatch-1', 'report-1', 'r1', 'on_scene');
+        await seedActiveAccount(testEnv, {
+            uid: 'r1',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            const result = await triggerSosCore(db, {
+                dispatchId: 'dispatch-1',
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            });
+            expect(result.status).toBe('sos_triggered');
+            const dispatch = (await db.collection('dispatches').doc('dispatch-1').get()).data();
+            expect(dispatch?.sosTriggeredAt).toBeDefined();
+            const notifications = await db
+                .collection('admin_notifications')
+                .where('type', '==', 'sos_triggered')
+                .get();
+            expect(notifications.docs).toHaveLength(1);
+        });
+    });
+    it('rejects when SOS already triggered (rate limit)', async () => {
+        await seedDispatchActive(testEnv, 'dispatch-2', 'report-2', 'r1', 'on_scene', {
+            sosTriggeredAt: Date.now(),
+        });
+        await seedActiveAccount(testEnv, {
+            uid: 'r1',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            await expect(triggerSosCore(db, {
+                dispatchId: 'dispatch-2',
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            })).rejects.toMatchObject({ code: 'FAILED_PRECONDITION' });
+        });
+    });
+    it('rejects when dispatch is not active', async () => {
+        await seedDispatchActive(testEnv, 'dispatch-3', 'report-3', 'r1', 'pending');
+        await seedActiveAccount(testEnv, {
+            uid: 'r1',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            await expect(triggerSosCore(db, {
+                dispatchId: 'dispatch-3',
+                actor: { uid: 'r1', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            })).rejects.toMatchObject({ code: 'FAILED_PRECONDITION' });
+        });
+    });
+    it('rejects when caller is not the assigned responder', async () => {
+        await seedDispatchActive(testEnv, 'dispatch-4', 'report-4', 'r1', 'on_scene');
+        await seedActiveAccount(testEnv, {
+            uid: 'r2',
+            role: 'responder',
+            municipalityId: 'daet',
+        });
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const db = ctx.firestore();
+            await expect(triggerSosCore(db, {
+                dispatchId: 'dispatch-4',
+                actor: { uid: 'r2', claims: { role: 'responder', municipalityId: 'daet' } },
+                now: Timestamp.now(),
+            })).rejects.toMatchObject({ code: 'FORBIDDEN' });
+        });
+    });
+});
+describe('triggerSOS callable', () => {
+    const callCallable = triggerSOS;
+    it('rejects unauthenticated request', async () => {
+        await expect(callCallable({
+            data: { dispatchId: 'dispatch-x' },
+        })).rejects.toMatchObject({ code: 'unauthenticated' });
+    });
+    it('rejects wrong-role request', async () => {
+        await expect(callCallable({
+            auth: {
+                uid: 'admin-1',
+                token: { role: 'municipal_admin', accountStatus: 'active' },
+            },
+            data: { dispatchId: 'dispatch-x' },
+        })).rejects.toMatchObject({ code: 'permission-denied' });
+    });
+});
+//# sourceMappingURL=trigger-sos.test.js.map
\ No newline at end of file
diff --git a/functions/lib/__tests__/callables/trigger-sos.test.js.map b/functions/lib/__tests__/callables/trigger-sos.test.js.map
new file mode 100644
index 00000000..bf1462f5
--- /dev/null
+++ b/functions/lib/__tests__/callables/trigger-sos.test.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"trigger-sos.test.js","sourceRoot":"","sources":["../../../src/__tests__/callables/trigger-sos.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAClF,OAAO,EAAE,yBAAyB,EAA6B,MAAM,8BAA8B,CAAA;AACnG,OAAO,EAAE,SAAS,EAAkB,MAAM,0BAA0B,CAAA;AAEpE,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CAC/B,CAAC,CAAC,CAAA;AAEH,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,OAAgB,EAAE,OAAgB,EAAE,EAAE,CAAC,OAAO,CAAC;CACnE,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;IAChD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAClC,6BAA6B,CAC9B,CAAA;IACD,OAAO;QACL,GAAG,MAAM;QACT,MAAM,EAAE,UAAU;KACnB,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,OAAkB,CAAA;AACtB,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,OAAO;QACT,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAC,CAAC,CAAA;AAEH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAEhE,IAAI,OAA6B,CAAA;AAEjC,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,OAAO,GAAG,MAAM,yBAAyB,CAAC;QACxC,SAAS,EAAE,kBAAkB;QAC7B,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,KAAK,EACH,gGAAgG;SACnG;KACF,CAAC,CAAA;IACF,OAAO,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,SAAS,EAA0B,CAAA;AAChF,CAAC,CAAC,CAAA;AAEF,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,OAAO,CAAC,cAAc,EAAE,CAAA;AAChC,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;AACzB,CAAC,CAAC,CAAA;AAEF,KAAK,UAAU,kBAAkB,CAC/B,GAAyB,EACzB,UAAkB,EAClB,QAAgB,EAChB,YAAoB,EACpB,MAAc,EACd,YAAqC,EAAE;IAEvC,MAAM,GAAG,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,CAAA;QAC1B,MAAM,EAAE;aACL,UAAU,CAAC,YAAY,CAAC;aACxB,GAAG,CAAC,UAAU,CAAC;aACf,GAAG,CAAC;YACH,UAAU;YACV,QAAQ;YACR,MAAM;YACN,UAAU,EAAE;gBACV,GAAG,EAAE,YAAY;gBACjB,QAAQ,EAAE,UAAU;gBACpB,cAAc,EAAE,MAAM;aACvB;YACD,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,aAAa,EAAE,CAAC;YAChB,GAAG,SAAS;SACb,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;QAC7E,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE;gBACtC,UAAU,EAAE,YAAY;gBACxB,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;YAE3C,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YACnF,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,WAAW,EAAE,CAAA;YAE9C,MAAM,aAAa,GAAG,MAAM,EAAE;iBAC3B,UAAU,CAAC,qBAAqB,CAAC;iBACjC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC;iBACpC,GAAG,EAAE,CAAA;YACR,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE;YAC5E,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;SAC3B,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,MAAM,CACV,cAAc,CAAC,EAAE,EAAE;gBACjB,UAAU,EAAE,YAAY;gBACxB,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;QAC5E,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,MAAM,CACV,cAAc,CAAC,EAAE,EAAE;gBACjB,UAAU,EAAE,YAAY;gBACxB,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;QAC7E,MAAM,iBAAiB,CAAC,OAAO,EAAE;YAC/B,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,EAA0B,CAAA;YAClD,MAAM,MAAM,CACV,cAAc,CAAC,EAAE,EAAE;gBACjB,UAAU,EAAE,YAAY;gBACxB,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC3E,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;aACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,MAAM,YAAY,GAAG,UAGyC,CAAA;IAE9D,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,MAAM,CACV,YAAY,CAAC;YACX,IAAI,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;SACnC,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,MAAM,CACV,YAAY,CAAC;YACX,IAAI,EAAE;gBACJ,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE;aAC5D;YACD,IAAI,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;SACnC,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/__tests__/scheduled/project-responder-locations.test.d.ts b/functions/lib/__tests__/scheduled/project-responder-locations.test.d.ts
new file mode 100644
index 00000000..c8009552
--- /dev/null
+++ b/functions/lib/__tests__/scheduled/project-responder-locations.test.d.ts
@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=project-responder-locations.test.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/__tests__/scheduled/project-responder-locations.test.d.ts.map b/functions/lib/__tests__/scheduled/project-responder-locations.test.d.ts.map
new file mode 100644
index 00000000..57f13f53
--- /dev/null
+++ b/functions/lib/__tests__/scheduled/project-responder-locations.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"project-responder-locations.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/scheduled/project-responder-locations.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/functions/lib/__tests__/scheduled/project-responder-locations.test.js b/functions/lib/__tests__/scheduled/project-responder-locations.test.js
new file mode 100644
index 00000000..86b08968
--- /dev/null
+++ b/functions/lib/__tests__/scheduled/project-responder-locations.test.js
@@ -0,0 +1,143 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { initializeTestEnvironment } from '@firebase/rules-unit-testing';
+import { projectResponderLocationsCore, roundToGrid, computeFreshness, } from '../../scheduled/project-responder-locations.js';
+let testEnv;
+beforeEach(async () => {
+    testEnv = await initializeTestEnvironment({
+        projectId: 'projection-test',
+        database: { host: 'localhost', port: 9000 },
+    });
+    await testEnv.clearDatabase();
+});
+afterEach(async () => {
+    await testEnv.cleanup();
+});
+describe('roundToGrid', () => {
+    it('rounds to 3 decimal places (~100m)', () => {
+        expect(roundToGrid(14.09315)).toBe(14.093);
+        expect(roundToGrid(122.95455)).toBe(122.955);
+        expect(roundToGrid(-33.456789)).toBe(-33.457);
+        expect(roundToGrid(0)).toBe(0);
+        expect(roundToGrid(14.093149)).toBe(14.093);
+    });
+});
+describe('computeFreshness', () => {
+    it('returns fresh for <30s', () => {
+        expect(computeFreshness(0)).toBe('fresh');
+        expect(computeFreshness(29_999)).toBe('fresh');
+    });
+    it('returns degraded for 30–90s', () => {
+        expect(computeFreshness(30_000)).toBe('degraded');
+        expect(computeFreshness(89_999)).toBe('degraded');
+    });
+    it('returns stale for 90–300s', () => {
+        expect(computeFreshness(90_000)).toBe('stale');
+        expect(computeFreshness(299_999)).toBe('stale');
+    });
+    it('returns offline for ≥300s', () => {
+        expect(computeFreshness(300_000)).toBe('offline');
+        expect(computeFreshness(301_000)).toBe('offline');
+    });
+});
+describe('projectResponderLocationsCore', () => {
+    it('projects active responders with rounded coordinates and correct freshness', async () => {
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const rtdb = ctx.database();
+            const now = 1_000_000;
+            await rtdb.ref('responder_index/r1').set({ municipalityId: 'daet', agencyId: 'bfp' });
+            await rtdb.ref('responder_locations/r1').set({
+                capturedAt: now - 10_000,
+                lat: 14.09315,
+                lng: 122.95455,
+                accuracy: 5,
+                batteryPct: 80,
+                motionState: 'moving',
+                appVersion: '1.0.0',
+                telemetryStatus: 'active',
+            });
+            await projectResponderLocationsCore(rtdb, { now });
+            const snap = await rtdb.ref('shared_projection/daet/r1').get();
+            expect(snap.val()).toEqual({
+                lat: 14.093,
+                lng: 122.955,
+                freshness: 'fresh',
+                lastSeenAt: now,
+            });
+        });
+    });
+    it('deletes offline responders from projection', async () => {
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const rtdb = ctx.database();
+            const now = 1_000_000;
+            await rtdb.ref('responder_index/r1').set({ municipalityId: 'daet', agencyId: 'bfp' });
+            await rtdb.ref('responder_locations/r1').set({
+                capturedAt: now - 400_000,
+                lat: 14.0931,
+                lng: 122.9544,
+                accuracy: 5,
+                batteryPct: 80,
+                motionState: 'still',
+                appVersion: '1.0.0',
+                telemetryStatus: 'active',
+            });
+            await rtdb.ref('shared_projection/daet/r1').set({
+                lat: 14.093,
+                lng: 122.955,
+                freshness: 'fresh',
+                lastSeenAt: now - 500_000,
+            });
+            await projectResponderLocationsCore(rtdb, { now });
+            const snap = await rtdb.ref('shared_projection/daet/r1').get();
+            expect(snap.val()).toBeNull();
+        });
+    });
+    it('cleans up stale projection entries via TTL', async () => {
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const rtdb = ctx.database();
+            const now = 1_000_000;
+            await rtdb.ref('shared_projection/daet/r1').set({
+                lat: 14.093,
+                lng: 122.955,
+                freshness: 'fresh',
+                lastSeenAt: now - 100_000,
+            });
+            await projectResponderLocationsCore(rtdb, { now });
+            const snap = await rtdb.ref('shared_projection/daet/r1').get();
+            expect(snap.val()).toBeNull();
+        });
+    });
+    it('groups responders by municipalityId', async () => {
+        await testEnv.withSecurityRulesDisabled(async (ctx) => {
+            const rtdb = ctx.database();
+            const now = 1_000_000;
+            await rtdb.ref('responder_index/r1').set({ municipalityId: 'daet', agencyId: 'bfp' });
+            await rtdb.ref('responder_index/r2').set({ municipalityId: 'mercedes', agencyId: 'bfp' });
+            await rtdb.ref('responder_locations/r1').set({
+                capturedAt: now - 5_000,
+                lat: 14.0931,
+                lng: 122.9544,
+                accuracy: 5,
+                batteryPct: 80,
+                motionState: 'moving',
+                appVersion: '1.0.0',
+                telemetryStatus: 'active',
+            });
+            await rtdb.ref('responder_locations/r2').set({
+                capturedAt: now - 5_000,
+                lat: 14.1234,
+                lng: 123.0,
+                accuracy: 5,
+                batteryPct: 90,
+                motionState: 'still',
+                appVersion: '1.0.0',
+                telemetryStatus: 'active',
+            });
+            await projectResponderLocationsCore(rtdb, { now });
+            const daet = (await rtdb.ref('shared_projection/daet/r1').get()).val();
+            const mercedes = (await rtdb.ref('shared_projection/mercedes/r2').get()).val();
+            expect(daet?.freshness).toBe('fresh');
+            expect(mercedes?.freshness).toBe('fresh');
+        });
+    });
+});
+//# sourceMappingURL=project-responder-locations.test.js.map
\ No newline at end of file
diff --git a/functions/lib/__tests__/scheduled/project-responder-locations.test.js.map b/functions/lib/__tests__/scheduled/project-responder-locations.test.js.map
new file mode 100644
index 00000000..13c0491e
--- /dev/null
+++ b/functions/lib/__tests__/scheduled/project-responder-locations.test.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"project-responder-locations.test.js","sourceRoot":"","sources":["../../../src/__tests__/scheduled/project-responder-locations.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,EAAE,yBAAyB,EAA6B,MAAM,8BAA8B,CAAA;AAEnG,OAAO,EACL,6BAA6B,EAC7B,WAAW,EACX,gBAAgB,GACjB,MAAM,gDAAgD,CAAA;AAEvD,IAAI,OAA6B,CAAA;AAEjC,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,OAAO,GAAG,MAAM,yBAAyB,CAAC;QACxC,SAAS,EAAE,iBAAiB;QAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE;KAC5C,CAAC,CAAA;IACF,MAAM,OAAO,CAAC,aAAa,EAAE,CAAA;AAC/B,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;AACzB,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1C,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC5C,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAA;QAC7C,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACzC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACjD,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9C,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjD,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAyB,CAAA;YAClD,MAAM,GAAG,GAAG,SAAS,CAAA;YAErB,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;YACrF,MAAM,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC;gBAC3C,UAAU,EAAE,GAAG,GAAG,MAAM;gBACxB,GAAG,EAAE,QAAQ;gBACb,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,OAAO;gBACnB,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAA;YAEF,MAAM,6BAA6B,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAElD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,GAAG,EAAE,CAAA;YAC9D,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC;gBACzB,GAAG,EAAE,MAAM;gBACX,GAAG,EAAE,OAAO;gBACZ,SAAS,EAAE,OAAO;gBAClB,UAAU,EAAE,GAAG;aAChB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAyB,CAAA;YAClD,MAAM,GAAG,GAAG,SAAS,CAAA;YAErB,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;YACrF,MAAM,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC;gBAC3C,UAAU,EAAE,GAAG,GAAG,OAAO;gBACzB,GAAG,EAAE,OAAO;gBACZ,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,OAAO;gBACpB,UAAU,EAAE,OAAO;gBACnB,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAA;YACF,MAAM,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC;gBAC9C,GAAG,EAAE,MAAM;gBACX,GAAG,EAAE,OAAO;gBACZ,SAAS,EAAE,OAAO;gBAClB,UAAU,EAAE,GAAG,GAAG,OAAO;aAC1B,CAAC,CAAA;YAEF,MAAM,6BAA6B,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAElD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,GAAG,EAAE,CAAA;YAC9D,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC/B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAyB,CAAA;YAClD,MAAM,GAAG,GAAG,SAAS,CAAA;YAErB,MAAM,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC;gBAC9C,GAAG,EAAE,MAAM;gBACX,GAAG,EAAE,OAAO;gBACZ,SAAS,EAAE,OAAO;gBAClB,UAAU,EAAE,GAAG,GAAG,OAAO;aAC1B,CAAC,CAAA;YAEF,MAAM,6BAA6B,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAElD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,GAAG,EAAE,CAAA;YAC9D,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC/B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,OAAO,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAyB,CAAA;YAClD,MAAM,GAAG,GAAG,SAAS,CAAA;YAErB,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;YACrF,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;YAEzF,MAAM,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC;gBAC3C,UAAU,EAAE,GAAG,GAAG,KAAK;gBACvB,GAAG,EAAE,OAAO;gBACZ,GAAG,EAAE,QAAQ;gBACb,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,QAAQ;gBACrB,UAAU,EAAE,OAAO;gBACnB,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAA;YACF,MAAM,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC;gBAC3C,UAAU,EAAE,GAAG,GAAG,KAAK;gBACvB,GAAG,EAAE,OAAO;gBACZ,GAAG,EAAE,KAAK;gBACV,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,OAAO;gBACpB,UAAU,EAAE,OAAO;gBACnB,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAA;YAEF,MAAM,6BAA6B,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAElD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAE5D,CAAA;YACR,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAEpE,CAAA;YACR,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACrC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/approve-erasure-request.d.ts b/functions/lib/callables/approve-erasure-request.d.ts
new file mode 100644
index 00000000..a79fa88b
--- /dev/null
+++ b/functions/lib/callables/approve-erasure-request.d.ts
@@ -0,0 +1,10 @@
+import { type Firestore } from 'firebase-admin/firestore';
+export declare function approveErasureRequestCore(db: Firestore, input: {
+    erasureRequestId: string;
+    approved: boolean;
+    reason?: string;
+}, actor: {
+    uid: string;
+}): Promise<void>;
+export declare const approveErasureRequest: import("firebase-functions/https").CallableFunction<any, Promise<void>, unknown>;
+//# sourceMappingURL=approve-erasure-request.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/approve-erasure-request.d.ts.map b/functions/lib/callables/approve-erasure-request.d.ts.map
new file mode 100644
index 00000000..7cdc7bb7
--- /dev/null
+++ b/functions/lib/callables/approve-erasure-request.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"approve-erasure-request.d.ts","sourceRoot":"","sources":["../../src/callables/approve-erasure-request.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAIvE,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,SAAS,EACb,KAAK,EAAE;IAAE,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EACvE,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACrB,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,eAAO,MAAM,qBAAqB,kFAWjC,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/approve-erasure-request.js b/functions/lib/callables/approve-erasure-request.js
new file mode 100644
index 00000000..c5918143
--- /dev/null
+++ b/functions/lib/callables/approve-erasure-request.js
@@ -0,0 +1,30 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https';
+import { getFirestore } from 'firebase-admin/firestore';
+import { requireAuth, requireMfaAuth } from './https-error.js';
+import { streamAuditEvent } from '../services/audit-stream.js';
+export async function approveErasureRequestCore(db, input, actor) {
+    const doc = await db.collection('erasure_requests').doc(input.erasureRequestId).get();
+    if (!doc.exists) {
+        throw new HttpsError('not-found', 'erasure_request_not_found');
+    }
+    const status = input.approved ? 'approved_pending_anonymization' : 'denied';
+    await doc.ref.update({
+        status,
+        reviewedBy: actor.uid,
+        reviewedAt: Date.now(),
+        ...(input.reason ? { reviewReason: input.reason } : {}),
+    });
+    void streamAuditEvent({
+        eventType: 'erasure_request_reviewed',
+        actorUid: actor.uid,
+        targetDocumentId: input.erasureRequestId,
+        metadata: { approved: input.approved },
+        occurredAt: Date.now(),
+    });
+}
+export const approveErasureRequest = onCall({ region: 'asia-southeast1', enforceAppCheck: true }, async (request) => {
+    const { uid } = requireAuth(request, ['superadmin']);
+    requireMfaAuth(request);
+    await approveErasureRequestCore(getFirestore(), request.data, { uid });
+});
+//# sourceMappingURL=approve-erasure-request.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/approve-erasure-request.js.map b/functions/lib/callables/approve-erasure-request.js.map
new file mode 100644
index 00000000..e0438390
--- /dev/null
+++ b/functions/lib/callables/approve-erasure-request.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"approve-erasure-request.js","sourceRoot":"","sources":["../../src/callables/approve-erasure-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EAAE,YAAY,EAAkB,MAAM,0BAA0B,CAAA;AACvE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAE9D,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAa,EACb,KAAuE,EACvE,KAAsB;IAEtB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,EAAE,CAAA;IACrF,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,CAAA;IAC3E,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;QACnB,MAAM;QACN,UAAU,EAAE,KAAK,CAAC,GAAG;QACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;QACtB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAA;IACF,KAAK,gBAAgB,CAAC;QACpB,SAAS,EAAE,0BAA0B;QACrC,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;QACtC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CACzC,EAAE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,EAAE;IAChB,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;IACpD,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,MAAM,yBAAyB,CAC7B,YAAY,EAAE,EACd,OAAO,CAAC,IAAwE,EAChF,EAAE,GAAG,EAAE,CACR,CAAA;AACH,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/break-glass.d.ts b/functions/lib/callables/break-glass.d.ts
new file mode 100644
index 00000000..b4310b56
--- /dev/null
+++ b/functions/lib/callables/break-glass.d.ts
@@ -0,0 +1,22 @@
+import { type Firestore } from 'firebase-admin/firestore';
+import { type Auth } from 'firebase-admin/auth';
+interface BreakGlassInput {
+    codeA: string;
+    codeB: string;
+    reason: string;
+}
+export declare function initiateBreakGlassCore(db: Firestore, adminAuth: Auth, input: BreakGlassInput, actor: {
+    uid: string;
+}): Promise<{
+    sessionId: string;
+}>;
+export declare const initiateBreakGlass: import("firebase-functions/https").CallableFunction<any, Promise<{
+    sessionId: string;
+}>, unknown>;
+export declare function deactivateBreakGlassCore(db: Firestore, adminAuth: Auth, actor: {
+    uid: string;
+    claims: Record<string, unknown>;
+}): Promise<void>;
+export declare const deactivateBreakGlass: import("firebase-functions/https").CallableFunction<any, Promise<void>, unknown>;
+export {};
+//# sourceMappingURL=break-glass.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/break-glass.d.ts.map b/functions/lib/callables/break-glass.d.ts.map
new file mode 100644
index 00000000..bdddd62a
--- /dev/null
+++ b/functions/lib/callables/break-glass.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"break-glass.d.ts","sourceRoot":"","sources":["../../src/callables/break-glass.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACvE,OAAO,EAAW,KAAK,IAAI,EAAE,MAAM,qBAAqB,CAAA;AAQxD,UAAU,eAAe;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,SAAS,EACb,SAAS,EAAE,IAAI,EACf,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACrB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CA0DhC;AAED,eAAO,MAAM,kBAAkB;eA5DP,MAAM;YAoE7B,CAAA;AAED,wBAAsB,wBAAwB,CAC5C,EAAE,EAAE,SAAS,EACb,SAAS,EAAE,IAAI,EACf,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACtD,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED,eAAO,MAAM,oBAAoB,kFAMhC,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/break-glass.js b/functions/lib/callables/break-glass.js
new file mode 100644
index 00000000..6573efc5
--- /dev/null
+++ b/functions/lib/callables/break-glass.js
@@ -0,0 +1,99 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https';
+import { getFirestore } from 'firebase-admin/firestore';
+import { getAuth } from 'firebase-admin/auth';
+import * as bcrypt from 'bcryptjs';
+import { randomUUID } from 'node:crypto';
+import { requireAuth, requireMfaAuth } from './https-error.js';
+import { streamAuditEvent } from '../services/audit-stream.js';
+const FOUR_HOURS_MS = 4 * 60 * 60 * 1000;
+export async function initiateBreakGlassCore(db, adminAuth, input, actor) {
+    const configDoc = await db.doc('system_config/break_glass_config').get();
+    if (!configDoc.exists) {
+        throw new HttpsError('not-found', 'break_glass_config_missing');
+    }
+    const { hashedCodes } = configDoc.data();
+    if (!Array.isArray(hashedCodes) || hashedCodes.length < 2) {
+        throw new HttpsError('failed-precondition', 'break_glass_config_invalid');
+    }
+    let matchedA = -1;
+    for (let i = 0; i < hashedCodes.length; i++) {
+        const hash = hashedCodes[i];
+        if (hash && (await bcrypt.compare(input.codeA, hash))) {
+            matchedA = i;
+            break;
+        }
+    }
+    let matchedB = -1;
+    for (let i = 0; i < hashedCodes.length; i++) {
+        const hash = hashedCodes[i];
+        if (hash && (await bcrypt.compare(input.codeB, hash))) {
+            matchedB = i;
+            break;
+        }
+    }
+    if (matchedA === -1 || matchedB === -1 || matchedA === matchedB) {
+        throw new HttpsError('unauthenticated', 'break_glass_codes_invalid');
+    }
+    const sessionId = randomUUID();
+    const now = Date.now();
+    const expiresAt = now + FOUR_HOURS_MS;
+    await adminAuth.setCustomUserClaims(actor.uid, {
+        breakGlassSession: true,
+        breakGlassSessionId: sessionId,
+        breakGlassExpiresAt: expiresAt,
+    });
+    await db.collection('breakglass_events').doc(sessionId).set({
+        sessionId,
+        actorUid: actor.uid,
+        action: 'initiated',
+        reason: input.reason,
+        sessionStartedAt: now,
+        expiresAt,
+        schemaVersion: 1,
+    });
+    void streamAuditEvent({
+        eventType: 'break_glass_initiated',
+        actorUid: actor.uid,
+        sessionId,
+        occurredAt: now,
+    });
+    return { sessionId };
+}
+export const initiateBreakGlass = onCall({ region: 'asia-southeast1', enforceAppCheck: true }, async (request) => {
+    const { uid } = requireAuth(request, ['superadmin']);
+    requireMfaAuth(request);
+    const data = request.data;
+    return initiateBreakGlassCore(getFirestore(), getAuth(), data, { uid });
+});
+export async function deactivateBreakGlassCore(db, adminAuth, actor) {
+    const sessionId = actor.claims.breakGlassSessionId;
+    if (!sessionId) {
+        throw new HttpsError('failed-precondition', 'no_active_break_glass_session');
+    }
+    const userRecord = await adminAuth.getUser(actor.uid);
+    const currentClaims = userRecord.customClaims ?? {};
+    const remainingClaims = {};
+    for (const [key, value] of Object.entries(currentClaims)) {
+        if (key !== 'breakGlassSession' &&
+            key !== 'breakGlassSessionId' &&
+            key !== 'breakGlassExpiresAt') {
+            remainingClaims[key] = value;
+        }
+    }
+    await adminAuth.setCustomUserClaims(actor.uid, remainingClaims);
+    await db.collection('breakglass_events').doc(sessionId).update({
+        action: 'deactivated',
+        deactivatedAt: Date.now(),
+    });
+    void streamAuditEvent({
+        eventType: 'break_glass_deactivated',
+        actorUid: actor.uid,
+        sessionId,
+        occurredAt: Date.now(),
+    });
+}
+export const deactivateBreakGlass = onCall({ region: 'asia-southeast1', enforceAppCheck: true }, async (request) => {
+    const { uid, claims } = requireAuth(request, ['superadmin']);
+    await deactivateBreakGlassCore(getFirestore(), getAuth(), { uid, claims });
+});
+//# sourceMappingURL=break-glass.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/break-glass.js.map b/functions/lib/callables/break-glass.js.map
new file mode 100644
index 00000000..63cde94e
--- /dev/null
+++ b/functions/lib/callables/break-glass.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"break-glass.js","sourceRoot":"","sources":["../../src/callables/break-glass.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EAAE,YAAY,EAAkB,MAAM,0BAA0B,CAAA;AACvE,OAAO,EAAE,OAAO,EAAa,MAAM,qBAAqB,CAAA;AACxD,OAAO,KAAK,MAAM,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAE9D,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAQxC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAa,EACb,SAAe,EACf,KAAsB,EACtB,KAAsB;IAEtB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,GAAG,EAAE,CAAA;IACxE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAA;IACjE,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC,IAAI,EAA+B,CAAA;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,4BAA4B,CAAC,CAAA;IAC3E,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAA;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QAC3B,IAAI,IAAI,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YACtD,QAAQ,GAAG,CAAC,CAAA;YACZ,MAAK;QACP,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAA;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QAC3B,IAAI,IAAI,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YACtD,QAAQ,GAAG,CAAC,CAAA;YACZ,MAAK;QACP,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAA;IACtE,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,EAAE,CAAA;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,SAAS,GAAG,GAAG,GAAG,aAAa,CAAA;IAErC,MAAM,SAAS,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,EAAE;QAC7C,iBAAiB,EAAE,IAAI;QACvB,mBAAmB,EAAE,SAAS;QAC9B,mBAAmB,EAAE,SAAS;KAC/B,CAAC,CAAA;IAEF,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC;QAC1D,SAAS;QACT,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB,EAAE,GAAG;QACrB,SAAS;QACT,aAAa,EAAE,CAAC;KACjB,CAAC,CAAA;IAEF,KAAK,gBAAgB,CAAC;QACpB,SAAS,EAAE,uBAAuB;QAClC,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,SAAS;QACT,UAAU,EAAE,GAAG;KAChB,CAAC,CAAA;IAEF,OAAO,EAAE,SAAS,EAAE,CAAA;AACtB,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CACtC,EAAE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,EAAE;IAChB,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;IACpD,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAuB,CAAA;IAC5C,OAAO,sBAAsB,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;AACzE,CAAC,CACF,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,EAAa,EACb,SAAe,EACf,KAAuD;IAEvD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,mBAAyC,CAAA;IACxE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,CAAA;IAC9E,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACrD,MAAM,aAAa,GAAG,UAAU,CAAC,YAAY,IAAI,EAAE,CAAA;IACnD,MAAM,eAAe,GAA4B,EAAE,CAAA;IACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACzD,IACE,GAAG,KAAK,mBAAmB;YAC3B,GAAG,KAAK,qBAAqB;YAC7B,GAAG,KAAK,qBAAqB,EAC7B,CAAC;YACD,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,SAAS,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;IAC/D,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;QAC7D,MAAM,EAAE,aAAa;QACrB,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;KAC1B,CAAC,CAAA;IAEF,KAAK,gBAAgB,CAAC;QACpB,SAAS,EAAE,yBAAyB;QACpC,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CACxC,EAAE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,EAAE;IAChB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;IAC5D,MAAM,wBAAwB,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;AAC5E,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/declare-data-incident.d.ts b/functions/lib/callables/declare-data-incident.d.ts
new file mode 100644
index 00000000..779741af
--- /dev/null
+++ b/functions/lib/callables/declare-data-incident.d.ts
@@ -0,0 +1,10 @@
+import { type Firestore } from 'firebase-admin/firestore';
+export declare function declareDataIncidentCore(db: Firestore, input: unknown, actor: {
+    uid: string;
+}): Promise<{
+    incidentId: string;
+}>;
+export declare const declareDataIncident: import("firebase-functions/https").CallableFunction<any, Promise<{
+    incidentId: string;
+}>, unknown>;
+//# sourceMappingURL=declare-data-incident.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/declare-data-incident.d.ts.map b/functions/lib/callables/declare-data-incident.d.ts.map
new file mode 100644
index 00000000..31dae6ec
--- /dev/null
+++ b/functions/lib/callables/declare-data-incident.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"declare-data-incident.d.ts","sourceRoot":"","sources":["../../src/callables/declare-data-incident.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAqBvE,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,SAAS,EACb,KAAK,EAAE,OAAO,EACd,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACrB,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAmCjC;AAED,eAAO,MAAM,mBAAmB;gBArCP,MAAM;YA4C9B,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/declare-data-incident.js b/functions/lib/callables/declare-data-incident.js
new file mode 100644
index 00000000..4bf2f576
--- /dev/null
+++ b/functions/lib/callables/declare-data-incident.js
@@ -0,0 +1,59 @@
+import { onCall } from 'firebase-functions/v2/https';
+import { getFirestore } from 'firebase-admin/firestore';
+import { randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { requireAuth, requireMfaAuth } from './https-error.js';
+import { streamAuditEvent } from '../services/audit-stream.js';
+const dataIncidentInputSchema = z.object({
+    incidentType: z.enum([
+        'unauthorized_access',
+        'data_loss',
+        'data_corruption',
+        'system_breach',
+        'accidental_disclosure',
+    ]),
+    severity: z.enum(['critical', 'high', 'medium', 'low']),
+    affectedCollections: z.array(z.string().min(1)),
+    affectedDataClasses: z.array(z.string().min(1)),
+    estimatedAffectedSubjects: z.number().int().optional(),
+    summary: z.string().min(1).max(2000),
+});
+export async function declareDataIncidentCore(db, input, actor) {
+    const validated = dataIncidentInputSchema.parse(input);
+    const incidentId = randomUUID();
+    const eventId = randomUUID();
+    const now = Date.now();
+    await db.runTransaction(async (tx) => {
+        await Promise.resolve(); // Firestore transaction callback requires async
+        tx.set(db.collection('data_incidents').doc(incidentId), {
+            ...validated,
+            incidentId,
+            status: 'declared',
+            declaredAt: now,
+            declaredBy: actor.uid,
+            retentionExempt: false,
+            schemaVersion: 1,
+        });
+        tx.set(db.collection('incident_response_events').doc(eventId), {
+            eventId,
+            incidentId,
+            phase: 'declared',
+            recordedBy: actor.uid,
+            recordedAt: now,
+            schemaVersion: 1,
+        });
+    });
+    void streamAuditEvent({
+        eventType: 'data_incident_declared',
+        actorUid: actor.uid,
+        sessionId: incidentId,
+        occurredAt: now,
+    });
+    return { incidentId };
+}
+export const declareDataIncident = onCall({ region: 'asia-southeast1', enforceAppCheck: true }, async (request) => {
+    const { uid } = requireAuth(request, ['superadmin']);
+    requireMfaAuth(request);
+    return declareDataIncidentCore(getFirestore(), request.data, { uid });
+});
+//# sourceMappingURL=declare-data-incident.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/declare-data-incident.js.map b/functions/lib/callables/declare-data-incident.js.map
new file mode 100644
index 00000000..3c14d50c
--- /dev/null
+++ b/functions/lib/callables/declare-data-incident.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"declare-data-incident.js","sourceRoot":"","sources":["../../src/callables/declare-data-incident.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AACpD,OAAO,EAAE,YAAY,EAAkB,MAAM,0BAA0B,CAAA;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAE9D,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC;QACnB,qBAAqB;QACrB,WAAW;QACX,iBAAiB;QACjB,eAAe;QACf,uBAAuB;KACxB,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvD,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/C,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/C,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CACrC,CAAC,CAAA;AAEF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,EAAa,EACb,KAAc,EACd,KAAsB;IAEtB,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACtD,MAAM,UAAU,GAAG,UAAU,EAAE,CAAA;IAC/B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,MAAM,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACnC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA,CAAC,gDAAgD;QACxE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE;YACtD,GAAG,SAAS;YACZ,UAAU;YACV,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,KAAK,CAAC,GAAG;YACrB,eAAe,EAAE,KAAK;YACtB,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;QACF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;YAC7D,OAAO;YACP,UAAU;YACV,KAAK,EAAE,UAAU;YACjB,UAAU,EAAE,KAAK,CAAC,GAAG;YACrB,UAAU,EAAE,GAAG;YACf,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,KAAK,gBAAgB,CAAC;QACpB,SAAS,EAAE,wBAAwB;QACnC,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,SAAS,EAAE,UAAU;QACrB,UAAU,EAAE,GAAG;KAChB,CAAC,CAAA;IAEF,OAAO,EAAE,UAAU,EAAE,CAAA;AACvB,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CACvC,EAAE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,EAAE;IAChB,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;IACpD,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,OAAO,uBAAuB,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;AACvE,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/declare-emergency.d.ts b/functions/lib/callables/declare-emergency.d.ts
new file mode 100644
index 00000000..d8be79a4
--- /dev/null
+++ b/functions/lib/callables/declare-emergency.d.ts
@@ -0,0 +1,10 @@
+import { type Firestore } from 'firebase-admin/firestore';
+export declare function declareEmergencyCore(db: Firestore, input: unknown, actor: {
+    uid: string;
+}): Promise<{
+    alertId: string;
+}>;
+export declare const declareEmergency: import("firebase-functions/https").CallableFunction<any, Promise<{
+    alertId: string;
+}>, unknown>;
+//# sourceMappingURL=declare-emergency.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/declare-emergency.d.ts.map b/functions/lib/callables/declare-emergency.d.ts.map
new file mode 100644
index 00000000..b71359f1
--- /dev/null
+++ b/functions/lib/callables/declare-emergency.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"declare-emergency.d.ts","sourceRoot":"","sources":["../../src/callables/declare-emergency.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAavE,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,SAAS,EACb,KAAK,EAAE,OAAO,EACd,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACrB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CA+B9B;AAED,eAAO,MAAM,gBAAgB;aAjCP,MAAM;YAwC3B,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/declare-emergency.js b/functions/lib/callables/declare-emergency.js
new file mode 100644
index 00000000..940d1d2c
--- /dev/null
+++ b/functions/lib/callables/declare-emergency.js
@@ -0,0 +1,46 @@
+import { onCall } from 'firebase-functions/v2/https';
+import { getFirestore } from 'firebase-admin/firestore';
+import { randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { requireAuth, requireMfaAuth } from './https-error.js';
+import { streamAuditEvent } from '../services/audit-stream.js';
+import { sendMassAlertFcm } from '../services/fcm-mass-send.js';
+const declareEmergencyInputSchema = z.object({
+    hazardType: z.string().min(1).max(100),
+    affectedMunicipalityIds: z.array(z.string().min(1)).min(1),
+    message: z.string().min(1).max(500),
+});
+export async function declareEmergencyCore(db, input, actor) {
+    const validated = declareEmergencyInputSchema.parse(input);
+    const alertId = randomUUID();
+    const now = Date.now();
+    await db.collection('alerts').doc(alertId).set({
+        alertId,
+        alertType: 'emergency',
+        hazardType: validated.hazardType,
+        affectedMunicipalityIds: validated.affectedMunicipalityIds,
+        message: validated.message,
+        declaredBy: actor.uid,
+        declaredAt: now,
+        schemaVersion: 1,
+    });
+    void sendMassAlertFcm(db, {
+        municipalityIds: validated.affectedMunicipalityIds,
+        title: `Emergency: ${validated.hazardType}`,
+        body: validated.message,
+    });
+    void streamAuditEvent({
+        eventType: 'emergency_declared',
+        actorUid: actor.uid,
+        targetDocumentId: alertId,
+        metadata: { hazardType: validated.hazardType },
+        occurredAt: now,
+    });
+    return { alertId };
+}
+export const declareEmergency = onCall({ region: 'asia-southeast1', enforceAppCheck: true }, async (request) => {
+    const { uid } = requireAuth(request, ['superadmin']);
+    requireMfaAuth(request);
+    return declareEmergencyCore(getFirestore(), request.data, { uid });
+});
+//# sourceMappingURL=declare-emergency.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/declare-emergency.js.map b/functions/lib/callables/declare-emergency.js.map
new file mode 100644
index 00000000..dbfa9890
--- /dev/null
+++ b/functions/lib/callables/declare-emergency.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"declare-emergency.js","sourceRoot":"","sources":["../../src/callables/declare-emergency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AACpD,OAAO,EAAE,YAAY,EAAkB,MAAM,0BAA0B,CAAA;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAE/D,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,uBAAuB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACpC,CAAC,CAAA;AAEF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAa,EACb,KAAc,EACd,KAAsB;IAEtB,MAAM,SAAS,GAAG,2BAA2B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1D,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC;QAC7C,OAAO;QACP,SAAS,EAAE,WAAW;QACtB,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,uBAAuB,EAAE,SAAS,CAAC,uBAAuB;QAC1D,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,UAAU,EAAE,KAAK,CAAC,GAAG;QACrB,UAAU,EAAE,GAAG;QACf,aAAa,EAAE,CAAC;KACjB,CAAC,CAAA;IAEF,KAAK,gBAAgB,CAAC,EAAE,EAAE;QACxB,eAAe,EAAE,SAAS,CAAC,uBAAuB;QAClD,KAAK,EAAE,cAAc,SAAS,CAAC,UAAU,EAAE;QAC3C,IAAI,EAAE,SAAS,CAAC,OAAO;KACxB,CAAC,CAAA;IAEF,KAAK,gBAAgB,CAAC;QACpB,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,gBAAgB,EAAE,OAAO;QACzB,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE;QAC9C,UAAU,EAAE,GAAG;KAChB,CAAC,CAAA;IAEF,OAAO,EAAE,OAAO,EAAE,CAAA;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CACpC,EAAE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,EAAE;IAChB,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;IACpD,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,OAAO,oBAAoB,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;AACpE,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/mark-dispatch-unable-to-complete.d.ts b/functions/lib/callables/mark-dispatch-unable-to-complete.d.ts
new file mode 100644
index 00000000..bc7d566e
--- /dev/null
+++ b/functions/lib/callables/mark-dispatch-unable-to-complete.d.ts
@@ -0,0 +1,29 @@
+import { Firestore, Timestamp } from 'firebase-admin/firestore';
+import { z } from 'zod';
+export declare const markDispatchUnableToCompleteSchema: z.ZodObject<{
+    dispatchId: z.ZodString;
+    reason: z.ZodString;
+    idempotencyKey: z.ZodUUID;
+}, z.core.$strict>;
+export interface MarkDispatchUnableToCompleteCoreDeps {
+    dispatchId: string;
+    reason: string;
+    idempotencyKey: string;
+    actor: {
+        uid: string;
+        claims: {
+            role: string;
+            municipalityId?: string;
+        };
+    };
+    now: Timestamp;
+}
+export declare function markDispatchUnableToCompleteCore(db: Firestore, deps: MarkDispatchUnableToCompleteCoreDeps): Promise<{
+    status: 'unable_to_complete';
+    dispatchId: string;
+}>;
+export declare const markDispatchUnableToComplete: import("firebase-functions/https").CallableFunction<unknown, Promise<{
+    status: "unable_to_complete";
+    dispatchId: string;
+}>, unknown>;
+//# sourceMappingURL=mark-dispatch-unable-to-complete.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/mark-dispatch-unable-to-complete.d.ts.map b/functions/lib/callables/mark-dispatch-unable-to-complete.d.ts.map
new file mode 100644
index 00000000..444f7ca0
--- /dev/null
+++ b/functions/lib/callables/mark-dispatch-unable-to-complete.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"mark-dispatch-unable-to-complete.d.ts","sourceRoot":"","sources":["../../src/callables/mark-dispatch-unable-to-complete.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAOvB,eAAO,MAAM,kCAAkC;;;;kBAMpC,CAAA;AAEX,MAAM,WAAW,oCAAoC;IACnD,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;IACzE,GAAG,EAAE,SAAS,CAAA;CACf;AAED,wBAAsB,gCAAgC,CACpD,EAAE,EAAE,SAAS,EACb,IAAI,EAAE,oCAAoC,GACzC,OAAO,CAAC;IAAE,MAAM,EAAE,oBAAoB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CA4G/D;AAED,eAAO,MAAM,4BAA4B;YA9GpB,oBAAoB;gBAAc,MAAM;YA8I5D,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/mark-dispatch-unable-to-complete.js b/functions/lib/callables/mark-dispatch-unable-to-complete.js
new file mode 100644
index 00000000..a6eaf95f
--- /dev/null
+++ b/functions/lib/callables/mark-dispatch-unable-to-complete.js
@@ -0,0 +1,127 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https';
+import { Firestore, Timestamp } from 'firebase-admin/firestore';
+import { z } from 'zod';
+import { BantayogError, BantayogErrorCode } from '@bantayog/shared-validators';
+import { adminDb } from '../admin-init.js';
+import { withIdempotency } from '../idempotency/guard.js';
+import { bantayogErrorToHttps, requireAuth } from './https-error.js';
+import { checkRateLimit } from '../services/rate-limit.js';
+export const markDispatchUnableToCompleteSchema = z
+    .object({
+    dispatchId: z.string().min(1).max(128),
+    reason: z.string().trim().min(1).max(500),
+    idempotencyKey: z.uuid(),
+})
+    .strict();
+export async function markDispatchUnableToCompleteCore(db, deps) {
+    const { dispatchId, reason, idempotencyKey, actor, now } = deps;
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    const { now: _now, ...idempotentPayload } = deps;
+    const { result } = await withIdempotency(db, {
+        key: `markDispatchUnableToComplete:${actor.uid}:${idempotencyKey}`,
+        payload: idempotentPayload,
+        now: () => now.toMillis(),
+    }, async () => {
+        const rl = await checkRateLimit(db, {
+            key: `markDispatchUnableToComplete:${actor.uid}`,
+            limit: 30,
+            windowSeconds: 60,
+            now,
+        });
+        if (!rl.allowed) {
+            throw new BantayogError(BantayogErrorCode.RATE_LIMITED, 'rate limit exceeded', {
+                retryAfterSeconds: rl.retryAfterSeconds,
+            });
+        }
+        return db.runTransaction(async (tx) => {
+            const dispatchRef = db.collection('dispatches').doc(dispatchId);
+            const dispatchSnap = await tx.get(dispatchRef);
+            if (!dispatchSnap.exists) {
+                throw new BantayogError(BantayogErrorCode.NOT_FOUND, 'Dispatch not found');
+            }
+            const dispatch = dispatchSnap.data();
+            if (dispatch.assignedTo?.uid !== actor.uid) {
+                throw new BantayogError(BantayogErrorCode.FORBIDDEN, 'Not assigned to this dispatch');
+            }
+            const activeStates = ['accepted', 'acknowledged', 'en_route', 'on_scene'];
+            if (!activeStates.includes(dispatch.status)) {
+                throw new BantayogError(BantayogErrorCode.FAILED_PRECONDITION, `Dispatch must be active (current: ${dispatch.status})`);
+            }
+            const reportRef = db.collection('reports').doc(dispatch.reportId);
+            const reportSnap = await tx.get(reportRef);
+            if (!reportSnap.exists) {
+                throw new BantayogError(BantayogErrorCode.NOT_FOUND, `Report "${dispatch.reportId}" not found`);
+            }
+            const currentReportStatus = reportSnap.data().status;
+            tx.update(dispatchRef, {
+                status: 'unable_to_complete',
+                unableToCompleteReason: reason,
+                statusUpdatedAt: now.toMillis(),
+                lastStatusAt: now.toMillis(),
+            });
+            tx.update(reportRef, {
+                status: 'verified',
+                currentDispatchId: null,
+                lastStatusAt: now.toMillis(),
+            });
+            const nowMs = now.toMillis();
+            const correlationId = crypto.randomUUID();
+            tx.set(db.collection('dispatch_events').doc(), {
+                dispatchId,
+                reportId: dispatch.reportId,
+                actor: actor.uid,
+                actorRole: 'responder',
+                fromStatus: dispatch.status,
+                toStatus: 'unable_to_complete',
+                reason,
+                createdAt: nowMs,
+                correlationId,
+                schemaVersion: 1,
+            });
+            tx.set(db.collection('report_events').doc(), {
+                reportId: dispatch.reportId,
+                from: currentReportStatus ?? 'assigned',
+                to: 'verified',
+                actor: actor.uid,
+                actorRole: 'responder',
+                at: nowMs,
+                correlationId,
+                schemaVersion: 1,
+            });
+            return { status: 'unable_to_complete', dispatchId };
+        });
+    });
+    return result;
+}
+export const markDispatchUnableToComplete = onCall({
+    region: 'asia-southeast1',
+    enforceAppCheck: process.env.NODE_ENV === 'production',
+    timeoutSeconds: 10,
+    minInstances: 1,
+}, async (request) => {
+    const actor = requireAuth(request, ['responder']);
+    if (actor.claims.accountStatus !== 'active') {
+        throw new HttpsError('permission-denied', 'account is not active');
+    }
+    const parsed = markDispatchUnableToCompleteSchema.safeParse(request.data);
+    if (!parsed.success)
+        throw new HttpsError('invalid-argument', 'malformed payload');
+    try {
+        return await markDispatchUnableToCompleteCore(adminDb, {
+            dispatchId: parsed.data.dispatchId,
+            reason: parsed.data.reason,
+            idempotencyKey: parsed.data.idempotencyKey,
+            actor: {
+                uid: actor.uid,
+                claims: actor.claims,
+            },
+            now: Timestamp.now(),
+        });
+    }
+    catch (err) {
+        if (err instanceof BantayogError)
+            throw bantayogErrorToHttps(err);
+        throw err;
+    }
+});
+//# sourceMappingURL=mark-dispatch-unable-to-complete.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/mark-dispatch-unable-to-complete.js.map b/functions/lib/callables/mark-dispatch-unable-to-complete.js.map
new file mode 100644
index 00000000..11e8a744
--- /dev/null
+++ b/functions/lib/callables/mark-dispatch-unable-to-complete.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"mark-dispatch-unable-to-complete.js","sourceRoot":"","sources":["../../src/callables/mark-dispatch-unable-to-complete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAwB,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACtF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAE1D,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC;KAChD,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE;CACzB,CAAC;KACD,MAAM,EAAE,CAAA;AAUX,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,EAAa,EACb,IAA0C;IAE1C,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAE/D,6DAA6D;IAC7D,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAA;IAEhD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CACtC,EAAE,EACF;QACE,GAAG,EAAE,gCAAgC,KAAK,CAAC,GAAG,IAAI,cAAc,EAAE;QAClE,OAAO,EAAE,iBAAiB;QAC1B,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE;KAC1B,EACD,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE;YAClC,GAAG,EAAE,gCAAgC,KAAK,CAAC,GAAG,EAAE;YAChD,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,EAAE;YACjB,GAAG;SACJ,CAAC,CAAA;QACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,YAAY,EAAE,qBAAqB,EAAE;gBAC7E,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;aACxC,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACpC,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAC/D,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAE9C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;gBACzB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;YAC5E,CAAC;YAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAIjC,CAAA;YAED,IAAI,QAAQ,CAAC,UAAU,EAAE,GAAG,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC3C,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAA;YACvF,CAAC;YAED,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;YACzE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,mBAAmB,EACrC,qCAAqC,QAAQ,CAAC,MAAM,GAAG,CACxD,CAAA;YACH,CAAC;YAED,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;YACjE,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAC1C,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACvB,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,SAAS,EAC3B,WAAW,QAAQ,CAAC,QAAQ,aAAa,CAC1C,CAAA;YACH,CAAC;YACD,MAAM,mBAAmB,GAAI,UAAU,CAAC,IAAI,EAA0B,CAAC,MAAM,CAAA;YAE7E,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE;gBACrB,MAAM,EAAE,oBAAoB;gBAC5B,sBAAsB,EAAE,MAAM;gBAC9B,eAAe,EAAE,GAAG,CAAC,QAAQ,EAAE;gBAC/B,YAAY,EAAE,GAAG,CAAC,QAAQ,EAAE;aAC7B,CAAC,CAAA;YAEF,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE;gBACnB,MAAM,EAAE,UAAU;gBAClB,iBAAiB,EAAE,IAAI;gBACvB,YAAY,EAAE,GAAG,CAAC,QAAQ,EAAE;aAC7B,CAAC,CAAA;YAEF,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC5B,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;YAEzC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC7C,UAAU;gBACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,KAAK,EAAE,KAAK,CAAC,GAAG;gBAChB,SAAS,EAAE,WAAW;gBACtB,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,QAAQ,EAAE,oBAAoB;gBAC9B,MAAM;gBACN,SAAS,EAAE,KAAK;gBAChB,aAAa;gBACb,aAAa,EAAE,CAAC;aACjB,CAAC,CAAA;YAEF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC3C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,mBAAmB,IAAI,UAAU;gBACvC,EAAE,EAAE,UAAU;gBACd,KAAK,EAAE,KAAK,CAAC,GAAG;gBAChB,SAAS,EAAE,WAAW;gBACtB,EAAE,EAAE,KAAK;gBACT,aAAa;gBACb,aAAa,EAAE,CAAC;aACjB,CAAC,CAAA;YAEF,OAAO,EAAE,MAAM,EAAE,oBAA6B,EAAE,UAAU,EAAE,CAAA;QAC9D,CAAC,CAAC,CAAA;IACJ,CAAC,CACF,CAAA;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAChD;IACE,MAAM,EAAE,iBAAiB;IACzB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IACtD,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,CAAC;CAChB,EACD,KAAK,EAAE,OAAiC,EAAE,EAAE;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,CAAA;IACjD,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,CAAA;IACpE,CAAC;IAED,MAAM,MAAM,GAAG,kCAAkC,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAA;IAElF,IAAI,CAAC;QACH,OAAO,MAAM,gCAAgC,CAAC,OAAO,EAAE;YACrD,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;YAClC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;YAC1B,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;YAC1C,KAAK,EAAE;gBACL,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,MAAM,EAAE,KAAK,CAAC,MAAmD;aAClE;YACD,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;SACrB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,YAAY,aAAa;YAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAA;QACjE,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/provincial-resources.d.ts b/functions/lib/callables/provincial-resources.d.ts
new file mode 100644
index 00000000..c0bd935c
--- /dev/null
+++ b/functions/lib/callables/provincial-resources.d.ts
@@ -0,0 +1,16 @@
+import { type Firestore } from 'firebase-admin/firestore';
+export declare function upsertProvincialResourceCore(db: Firestore, input: unknown, actor: {
+    uid: string;
+}): Promise<{
+    id: string;
+}>;
+export declare const upsertProvincialResource: import("firebase-functions/https").CallableFunction<any, Promise<{
+    id: string;
+}>, unknown>;
+export declare function archiveProvincialResourceCore(db: Firestore, input: {
+    id: string;
+}, actor: {
+    uid: string;
+}): Promise<void>;
+export declare const archiveProvincialResource: import("firebase-functions/https").CallableFunction<any, Promise<void>, unknown>;
+//# sourceMappingURL=provincial-resources.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/provincial-resources.d.ts.map b/functions/lib/callables/provincial-resources.d.ts.map
new file mode 100644
index 00000000..5fa7a66c
--- /dev/null
+++ b/functions/lib/callables/provincial-resources.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"provincial-resources.d.ts","sourceRoot":"","sources":["../../src/callables/provincial-resources.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAgBvE,wBAAsB,4BAA4B,CAChD,EAAE,EAAE,SAAS,EACb,KAAK,EAAE,OAAO,EACd,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACrB,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CA4BzB;AAED,eAAO,MAAM,wBAAwB;QA9BpB,MAAM;YAoCtB,CAAA;AAED,wBAAsB,6BAA6B,CACjD,EAAE,EAAE,SAAS,EACb,KAAK,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACrB,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACrB,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,eAAO,MAAM,yBAAyB,kFAMrC,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/provincial-resources.js b/functions/lib/callables/provincial-resources.js
new file mode 100644
index 00000000..d6f55883
--- /dev/null
+++ b/functions/lib/callables/provincial-resources.js
@@ -0,0 +1,64 @@
+import { onCall } from 'firebase-functions/v2/https';
+import { getFirestore } from 'firebase-admin/firestore';
+import { randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { requireAuth } from './https-error.js';
+import { streamAuditEvent } from '../services/audit-stream.js';
+const upsertSchema = z.object({
+    id: z.string().min(1).optional(),
+    name: z.string().min(1).max(200),
+    type: z.string().min(1).max(100),
+    quantity: z.number().int().nonnegative(),
+    unit: z.string().min(1).max(50),
+    location: z.string().min(1).max(300),
+    available: z.boolean(),
+});
+export async function upsertProvincialResourceCore(db, input, actor) {
+    const validated = upsertSchema.parse(input);
+    const id = validated.id ?? randomUUID();
+    const now = Date.now();
+    await db.collection('provincial_resources').doc(id).set({
+        id,
+        name: validated.name,
+        type: validated.type,
+        quantity: validated.quantity,
+        unit: validated.unit,
+        location: validated.location,
+        available: validated.available,
+        archived: false,
+        lastUpdatedBy: actor.uid,
+        lastUpdatedAt: now,
+        schemaVersion: 1,
+    });
+    void streamAuditEvent({
+        eventType: 'provincial_resource_upserted',
+        actorUid: actor.uid,
+        targetCollection: 'provincial_resources',
+        targetDocumentId: id,
+        occurredAt: now,
+    });
+    return { id };
+}
+export const upsertProvincialResource = onCall({ region: 'asia-southeast1', enforceAppCheck: true }, async (request) => {
+    const { uid } = requireAuth(request, ['superadmin', 'pdrrmo']);
+    return upsertProvincialResourceCore(getFirestore(), request.data, { uid });
+});
+export async function archiveProvincialResourceCore(db, input, actor) {
+    await db.collection('provincial_resources').doc(input.id).update({
+        archived: true,
+        archivedBy: actor.uid,
+        archivedAt: Date.now(),
+    });
+    void streamAuditEvent({
+        eventType: 'provincial_resource_archived',
+        actorUid: actor.uid,
+        targetCollection: 'provincial_resources',
+        targetDocumentId: input.id,
+        occurredAt: Date.now(),
+    });
+}
+export const archiveProvincialResource = onCall({ region: 'asia-southeast1', enforceAppCheck: true }, async (request) => {
+    const { uid } = requireAuth(request, ['superadmin', 'pdrrmo']);
+    return archiveProvincialResourceCore(getFirestore(), request.data, { uid });
+});
+//# sourceMappingURL=provincial-resources.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/provincial-resources.js.map b/functions/lib/callables/provincial-resources.js.map
new file mode 100644
index 00000000..28259b21
--- /dev/null
+++ b/functions/lib/callables/provincial-resources.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"provincial-resources.js","sourceRoot":"","sources":["../../src/callables/provincial-resources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AACpD,OAAO,EAAE,YAAY,EAAkB,MAAM,0BAA0B,CAAA;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAE9D,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAA;AAEF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,EAAa,EACb,KAAc,EACd,KAAsB;IAEtB,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3C,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,IAAI,UAAU,EAAE,CAAA;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,MAAM,EAAE,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;QACtD,EAAE;QACF,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,KAAK,CAAC,GAAG;QACxB,aAAa,EAAE,GAAG;QAClB,aAAa,EAAE,CAAC;KACjB,CAAC,CAAA;IAEF,KAAK,gBAAgB,CAAC;QACpB,SAAS,EAAE,8BAA8B;QACzC,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,gBAAgB,EAAE,sBAAsB;QACxC,gBAAgB,EAAE,EAAE;QACpB,UAAU,EAAE,GAAG;KAChB,CAAC,CAAA;IAEF,OAAO,EAAE,EAAE,EAAE,CAAA;AACf,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAC5C,EAAE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,EAAE;IAChB,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC9D,OAAO,4BAA4B,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;AAC5E,CAAC,CACF,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,EAAa,EACb,KAAqB,EACrB,KAAsB;IAEtB,MAAM,EAAE,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QAC/D,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,KAAK,CAAC,GAAG;QACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC,CAAA;IACF,KAAK,gBAAgB,CAAC;QACpB,SAAS,EAAE,8BAA8B;QACzC,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,gBAAgB,EAAE,sBAAsB;QACxC,gBAAgB,EAAE,KAAK,CAAC,EAAE;QAC1B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAC7C,EAAE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,EAAE;IAChB,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC9D,OAAO,6BAA6B,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,IAAsB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;AAC/F,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/record-incident-response-event.d.ts b/functions/lib/callables/record-incident-response-event.d.ts
new file mode 100644
index 00000000..9b0dea1d
--- /dev/null
+++ b/functions/lib/callables/record-incident-response-event.d.ts
@@ -0,0 +1,10 @@
+import { type Firestore } from 'firebase-admin/firestore';
+export declare function recordIncidentResponseEventCore(db: Firestore, input: unknown, actor: {
+    uid: string;
+}): Promise<{
+    eventId: string;
+}>;
+export declare const recordIncidentResponseEvent: import("firebase-functions/https").CallableFunction<any, Promise<{
+    eventId: string;
+}>, unknown>;
+//# sourceMappingURL=record-incident-response-event.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/record-incident-response-event.d.ts.map b/functions/lib/callables/record-incident-response-event.d.ts.map
new file mode 100644
index 00000000..4aafbeff
--- /dev/null
+++ b/functions/lib/callables/record-incident-response-event.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"record-incident-response-event.d.ts","sourceRoot":"","sources":["../../src/callables/record-incident-response-event.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAuBvE,wBAAsB,+BAA+B,CACnD,EAAE,EAAE,SAAS,EACb,KAAK,EAAE,OAAO,EACd,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACrB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CA0C9B;AAED,eAAO,MAAM,2BAA2B;aA5ClB,MAAM;YAqD3B,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/record-incident-response-event.js b/functions/lib/callables/record-incident-response-event.js
new file mode 100644
index 00000000..5178fa65
--- /dev/null
+++ b/functions/lib/callables/record-incident-response-event.js
@@ -0,0 +1,65 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https';
+import { getFirestore } from 'firebase-admin/firestore';
+import { randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { requireAuth, requireMfaAuth } from './https-error.js';
+import { streamAuditEvent } from '../services/audit-stream.js';
+const PHASE_ORDER = [
+    'declared',
+    'contained',
+    'preserved',
+    'assessed',
+    'notified_npc',
+    'notified_subjects',
+    'post_report',
+    'closed',
+];
+const recordEventInputSchema = z.object({
+    incidentId: z.string().min(1),
+    phase: z.enum(PHASE_ORDER),
+    notes: z.string().max(4000).optional(),
+});
+export async function recordIncidentResponseEventCore(db, input, actor) {
+    const validated = recordEventInputSchema.parse(input);
+    const eventId = randomUUID();
+    const now = Date.now();
+    await db.runTransaction(async (tx) => {
+        const incidentRef = db.collection('data_incidents').doc(validated.incidentId);
+        const incidentSnap = await tx.get(incidentRef);
+        if (!incidentSnap.exists) {
+            throw new HttpsError('not-found', 'incident_not_found');
+        }
+        const incidentData = incidentSnap.data();
+        const currentIndex = PHASE_ORDER.indexOf(incidentData.status);
+        const nextIndex = PHASE_ORDER.indexOf(validated.phase);
+        if (nextIndex !== currentIndex + 1) {
+            throw new HttpsError('failed-precondition', 'invalid_phase_transition');
+        }
+        tx.update(incidentRef, { status: validated.phase });
+        tx.set(db.collection('incident_response_events').doc(eventId), {
+            eventId,
+            incidentId: validated.incidentId,
+            phase: validated.phase,
+            notes: validated.notes,
+            recordedBy: actor.uid,
+            recordedAt: now,
+            schemaVersion: 1,
+        });
+    });
+    void streamAuditEvent({
+        eventType: 'incident_response_event_recorded',
+        actorUid: actor.uid,
+        sessionId: validated.incidentId,
+        metadata: { phase: validated.phase },
+        occurredAt: now,
+    });
+    return { eventId };
+}
+export const recordIncidentResponseEvent = onCall({ region: 'asia-southeast1', enforceAppCheck: true }, async (request) => {
+    const { uid } = requireAuth(request, ['superadmin']);
+    requireMfaAuth(request);
+    return recordIncidentResponseEventCore(getFirestore(), request.data, {
+        uid,
+    });
+});
+//# sourceMappingURL=record-incident-response-event.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/record-incident-response-event.js.map b/functions/lib/callables/record-incident-response-event.js.map
new file mode 100644
index 00000000..6d1ac8b9
--- /dev/null
+++ b/functions/lib/callables/record-incident-response-event.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"record-incident-response-event.js","sourceRoot":"","sources":["../../src/callables/record-incident-response-event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EAAE,YAAY,EAAkB,MAAM,0BAA0B,CAAA;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAE9D,MAAM,WAAW,GAAG;IAClB,UAAU;IACV,WAAW;IACX,WAAW;IACX,UAAU;IACV,cAAc;IACd,mBAAmB;IACnB,aAAa;IACb,QAAQ;CACA,CAAA;AAEV,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAA;AAEF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,EAAa,EACb,KAAc,EACd,KAAsB;IAEtB,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACrD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,MAAM,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACnC,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAC7E,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAE9C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAA;QACzD,CAAC;QAED,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,EAAwB,CAAA;QAC9D,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,MAAsC,CAAC,CAAA;QAC7F,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAEtD,IAAI,SAAS,KAAK,YAAY,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,0BAA0B,CAAC,CAAA;QACzE,CAAC;QAED,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAA;QACnD,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;YAC7D,OAAO;YACP,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,UAAU,EAAE,KAAK,CAAC,GAAG;YACrB,UAAU,EAAE,GAAG;YACf,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,KAAK,gBAAgB,CAAC;QACpB,SAAS,EAAE,kCAAkC;QAC7C,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,SAAS,EAAE,SAAS,CAAC,UAAU;QAC/B,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE;QACpC,UAAU,EAAE,GAAG;KAChB,CAAC,CAAA;IAEF,OAAO,EAAE,OAAO,EAAE,CAAA;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAC/C,EAAE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,EAAE;IAChB,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;IACpD,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,OAAO,+BAA+B,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE;QACnE,GAAG;KACJ,CAAC,CAAA;AACJ,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/request-backup.d.ts b/functions/lib/callables/request-backup.d.ts
new file mode 100644
index 00000000..99537fc4
--- /dev/null
+++ b/functions/lib/callables/request-backup.d.ts
@@ -0,0 +1,29 @@
+import { Firestore, Timestamp } from 'firebase-admin/firestore';
+import { z } from 'zod';
+export declare const requestBackupSchema: z.ZodObject<{
+    dispatchId: z.ZodString;
+    reason: z.ZodString;
+    idempotencyKey: z.ZodUUID;
+}, z.core.$strict>;
+export interface RequestBackupCoreDeps {
+    dispatchId: string;
+    reason: string;
+    idempotencyKey: string;
+    actor: {
+        uid: string;
+        claims: {
+            role: string;
+            municipalityId?: string;
+        };
+    };
+    now: Timestamp;
+}
+export declare function requestBackupCore(db: Firestore, deps: RequestBackupCoreDeps): Promise<{
+    status: 'requested';
+    backupRequestId: string;
+}>;
+export declare const requestBackup: import("firebase-functions/https").CallableFunction<unknown, Promise<{
+    status: "requested";
+    backupRequestId: string;
+}>, unknown>;
+//# sourceMappingURL=request-backup.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/request-backup.d.ts.map b/functions/lib/callables/request-backup.d.ts.map
new file mode 100644
index 00000000..89ced50b
--- /dev/null
+++ b/functions/lib/callables/request-backup.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"request-backup.d.ts","sourceRoot":"","sources":["../../src/callables/request-backup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAOvB,eAAO,MAAM,mBAAmB;;;;kBAMrB,CAAA;AAEX,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;IACzE,GAAG,EAAE,SAAS,CAAA;CACf;AAED,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,SAAS,EACb,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CAuF3D;AAED,eAAO,MAAM,aAAa;YAzFL,WAAW;qBAAmB,MAAM;YAyHxD,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/request-backup.js b/functions/lib/callables/request-backup.js
new file mode 100644
index 00000000..b1c29cce
--- /dev/null
+++ b/functions/lib/callables/request-backup.js
@@ -0,0 +1,112 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https';
+import { Firestore, Timestamp } from 'firebase-admin/firestore';
+import { z } from 'zod';
+import { BantayogError, BantayogErrorCode } from '@bantayog/shared-validators';
+import { adminDb } from '../admin-init.js';
+import { withIdempotency } from '../idempotency/guard.js';
+import { bantayogErrorToHttps, requireAuth } from './https-error.js';
+import { checkRateLimit } from '../services/rate-limit.js';
+export const requestBackupSchema = z
+    .object({
+    dispatchId: z.string().min(1).max(128),
+    reason: z.string().trim().min(1).max(500),
+    idempotencyKey: z.uuid(),
+})
+    .strict();
+export async function requestBackupCore(db, deps) {
+    const { dispatchId, reason, idempotencyKey, actor, now } = deps;
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    const { now: _now, ...idempotentPayload } = deps;
+    const { result } = await withIdempotency(db, {
+        key: `requestBackup:${actor.uid}:${idempotencyKey}`,
+        payload: idempotentPayload,
+        now: () => now.toMillis(),
+    }, async () => {
+        const rl = await checkRateLimit(db, {
+            key: `requestBackup:${actor.uid}`,
+            limit: 30,
+            windowSeconds: 60,
+            now,
+        });
+        if (!rl.allowed) {
+            throw new BantayogError(BantayogErrorCode.RATE_LIMITED, 'rate limit exceeded', {
+                retryAfterSeconds: rl.retryAfterSeconds,
+            });
+        }
+        return db.runTransaction(async (tx) => {
+            const dispatchRef = db.collection('dispatches').doc(dispatchId);
+            const dispatchSnap = await tx.get(dispatchRef);
+            if (!dispatchSnap.exists) {
+                throw new BantayogError(BantayogErrorCode.NOT_FOUND, 'Dispatch not found');
+            }
+            const dispatch = dispatchSnap.data();
+            if (dispatch.assignedTo?.uid !== actor.uid) {
+                throw new BantayogError(BantayogErrorCode.FORBIDDEN, 'Not assigned to this dispatch');
+            }
+            const activeStates = ['accepted', 'acknowledged', 'en_route', 'on_scene'];
+            if (!activeStates.includes(dispatch.status)) {
+                throw new BantayogError(BantayogErrorCode.FAILED_PRECONDITION, `Dispatch must be active (current: ${dispatch.status})`);
+            }
+            const backupRequestRef = db.collection('backup_requests').doc();
+            const backupRequestId = backupRequestRef.id;
+            const nowMs = now.toMillis();
+            tx.set(backupRequestRef, {
+                backupRequestId,
+                dispatchId,
+                reportId: dispatch.reportId,
+                requesterUid: actor.uid,
+                agencyId: dispatch.assignedTo.agencyId,
+                municipalityId: dispatch.assignedTo.municipalityId,
+                reason,
+                status: 'pending',
+                createdAt: nowMs,
+                schemaVersion: 1,
+            });
+            tx.set(db.collection('admin_notifications').doc(), {
+                type: 'backup_requested',
+                dispatchId,
+                backupRequestId,
+                responderUid: actor.uid,
+                agencyId: dispatch.assignedTo.agencyId,
+                municipalityId: dispatch.assignedTo.municipalityId,
+                createdAt: nowMs,
+                read: false,
+                schemaVersion: 1,
+            });
+            return { status: 'requested', backupRequestId };
+        });
+    });
+    return result;
+}
+export const requestBackup = onCall({
+    region: 'asia-southeast1',
+    enforceAppCheck: process.env.NODE_ENV === 'production',
+    timeoutSeconds: 10,
+    minInstances: 1,
+}, async (request) => {
+    const actor = requireAuth(request, ['responder']);
+    if (actor.claims.accountStatus !== 'active') {
+        throw new HttpsError('permission-denied', 'account is not active');
+    }
+    const parsed = requestBackupSchema.safeParse(request.data);
+    if (!parsed.success)
+        throw new HttpsError('invalid-argument', 'malformed payload');
+    try {
+        return await requestBackupCore(adminDb, {
+            dispatchId: parsed.data.dispatchId,
+            reason: parsed.data.reason,
+            idempotencyKey: parsed.data.idempotencyKey,
+            actor: {
+                uid: actor.uid,
+                claims: actor.claims,
+            },
+            now: Timestamp.now(),
+        });
+    }
+    catch (err) {
+        if (err instanceof BantayogError)
+            throw bantayogErrorToHttps(err);
+        throw err;
+    }
+});
+//# sourceMappingURL=request-backup.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/request-backup.js.map b/functions/lib/callables/request-backup.js.map
new file mode 100644
index 00000000..3eae0692
--- /dev/null
+++ b/functions/lib/callables/request-backup.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"request-backup.js","sourceRoot":"","sources":["../../src/callables/request-backup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAwB,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACtF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAE1D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE;CACzB,CAAC;KACD,MAAM,EAAE,CAAA;AAUX,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAa,EACb,IAA2B;IAE3B,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAE/D,6DAA6D;IAC7D,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAA;IAEhD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CACtC,EAAE,EACF;QACE,GAAG,EAAE,iBAAiB,KAAK,CAAC,GAAG,IAAI,cAAc,EAAE;QACnD,OAAO,EAAE,iBAAiB;QAC1B,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE;KAC1B,EACD,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE;YAClC,GAAG,EAAE,iBAAiB,KAAK,CAAC,GAAG,EAAE;YACjC,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,EAAE;YACjB,GAAG;SACJ,CAAC,CAAA;QACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,YAAY,EAAE,qBAAqB,EAAE;gBAC7E,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;aACxC,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACpC,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAC/D,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAE9C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;gBACzB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;YAC5E,CAAC;YAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAIjC,CAAA;YAED,IAAI,QAAQ,CAAC,UAAU,EAAE,GAAG,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC3C,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAA;YACvF,CAAC;YAED,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;YACzE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,mBAAmB,EACrC,qCAAqC,QAAQ,CAAC,MAAM,GAAG,CACxD,CAAA;YACH,CAAC;YAED,MAAM,gBAAgB,GAAG,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,GAAG,EAAE,CAAA;YAC/D,MAAM,eAAe,GAAG,gBAAgB,CAAC,EAAE,CAAA;YAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;YAE5B,EAAE,CAAC,GAAG,CAAC,gBAAgB,EAAE;gBACvB,eAAe;gBACf,UAAU;gBACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,YAAY,EAAE,KAAK,CAAC,GAAG;gBACvB,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ;gBACtC,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC,cAAc;gBAClD,MAAM;gBACN,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,KAAK;gBAChB,aAAa,EAAE,CAAC;aACjB,CAAC,CAAA;YAEF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE;gBACjD,IAAI,EAAE,kBAAkB;gBACxB,UAAU;gBACV,eAAe;gBACf,YAAY,EAAE,KAAK,CAAC,GAAG;gBACvB,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ;gBACtC,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC,cAAc;gBAClD,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,KAAK;gBACX,aAAa,EAAE,CAAC;aACjB,CAAC,CAAA;YAEF,OAAO,EAAE,MAAM,EAAE,WAAoB,EAAE,eAAe,EAAE,CAAA;QAC1D,CAAC,CAAC,CAAA;IACJ,CAAC,CACF,CAAA;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CACjC;IACE,MAAM,EAAE,iBAAiB;IACzB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IACtD,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,CAAC;CAChB,EACD,KAAK,EAAE,OAAiC,EAAE,EAAE;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,CAAA;IACjD,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,CAAA;IACpE,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAA;IAElF,IAAI,CAAC;QACH,OAAO,MAAM,iBAAiB,CAAC,OAAO,EAAE;YACtC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;YAClC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;YAC1B,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;YAC1C,KAAK,EAAE;gBACL,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,MAAM,EAAE,KAAK,CAAC,MAAmD;aAClE;YACD,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;SACrB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,YAAY,aAAa;YAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAA;QACjE,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/responder-roster.d.ts b/functions/lib/callables/responder-roster.d.ts
new file mode 100644
index 00000000..41f70b17
--- /dev/null
+++ b/functions/lib/callables/responder-roster.d.ts
@@ -0,0 +1,31 @@
+import { Firestore, Timestamp } from 'firebase-admin/firestore';
+export declare const suspendResponder: import("firebase-functions/https").CallableFunction<unknown, Promise<{
+    uid: string;
+    status: "suspended" | "revoked";
+}>, unknown>;
+export declare const revokeResponder: import("firebase-functions/https").CallableFunction<unknown, Promise<{
+    uid: string;
+    status: "suspended" | "revoked";
+}>, unknown>;
+interface BulkAvailabilityOverrideDeps {
+    uids: string[];
+    status: string;
+    idempotencyKey: string;
+    actor: {
+        uid: string;
+        claims: {
+            role: string;
+            agencyId?: string;
+            accountStatus?: string;
+        };
+    };
+    now: Timestamp;
+}
+export declare function bulkAvailabilityOverrideCore(db: Firestore, deps: BulkAvailabilityOverrideDeps): Promise<{
+    updated: number;
+}>;
+export declare const bulkAvailabilityOverride: import("firebase-functions/https").CallableFunction<unknown, Promise<{
+    updated: number;
+}>, unknown>;
+export {};
+//# sourceMappingURL=responder-roster.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/responder-roster.d.ts.map b/functions/lib/callables/responder-roster.d.ts.map
new file mode 100644
index 00000000..8d39257d
--- /dev/null
+++ b/functions/lib/callables/responder-roster.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"responder-roster.d.ts","sourceRoot":"","sources":["../../src/callables/responder-roster.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAa,MAAM,0BAA0B,CAAA;AAyH1E,eAAO,MAAM,gBAAgB;SA5EX,MAAM;YAAU,WAAW,GAAG,SAAS;YA8GxD,CAAA;AAED,eAAO,MAAM,eAAe;SAhHV,MAAM;YAAU,WAAW,GAAG,SAAS;YAkJxD,CAAA;AAED,UAAU,4BAA4B;IACpC,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;IAC3F,GAAG,EAAE,SAAS,CAAA;CACf;AAED,wBAAsB,4BAA4B,CAChD,EAAE,EAAE,SAAS,EACb,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAqE9B;AAED,eAAO,MAAM,wBAAwB;aAvEf,MAAM;YAyG3B,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/responder-roster.js b/functions/lib/callables/responder-roster.js
new file mode 100644
index 00000000..3b19c0d7
--- /dev/null
+++ b/functions/lib/callables/responder-roster.js
@@ -0,0 +1,237 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https';
+import { Firestore, Timestamp, FieldPath } from 'firebase-admin/firestore';
+import { z } from 'zod';
+import { BantayogError, BantayogErrorCode, logDimension } from '@bantayog/shared-validators';
+import { adminDb } from '../admin-init.js';
+import { withIdempotency } from '../idempotency/guard.js';
+import { bantayogErrorToHttps, requireAuth } from './https-error.js';
+import { checkRateLimit } from '../services/rate-limit.js';
+const log = logDimension('responderRoster');
+const suspendResponderSchema = z
+    .object({
+    uid: z.string().min(1).max(128),
+    idempotencyKey: z.uuid(),
+})
+    .strict();
+const revokeResponderSchema = z
+    .object({
+    uid: z.string().min(1).max(128),
+    idempotencyKey: z.uuid(),
+})
+    .strict();
+const AVAILABILITY_STATUSES = ['available', 'unavailable', 'off_duty'];
+const bulkAvailabilityOverrideSchema = z
+    .object({
+    uids: z.array(z.string().min(1).max(128)).min(1).max(50),
+    status: z.enum(AVAILABILITY_STATUSES),
+    idempotencyKey: z.uuid(),
+})
+    .strict();
+async function suspendOrRevokeResponderCore(db, deps) {
+    const { uid, idempotencyKey, actor, now, targetStatus } = deps;
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    const { now: _now, targetStatus: _targetStatus, ...idempotentPayload } = deps;
+    const { result } = await withIdempotency(db, {
+        key: `${targetStatus}Responder:${actor.uid}:${idempotencyKey}`,
+        payload: idempotentPayload,
+        now: () => now.toMillis(),
+    }, async () => {
+        const rl = await checkRateLimit(db, {
+            key: `${targetStatus}Responder:${actor.uid}`,
+            limit: 60,
+            windowSeconds: 60,
+            now,
+        });
+        if (!rl.allowed) {
+            throw new BantayogError(BantayogErrorCode.RATE_LIMITED, 'rate limit exceeded', {
+                retryAfterSeconds: rl.retryAfterSeconds,
+            });
+        }
+        return db.runTransaction(async (tx) => {
+            const responderRef = db.collection('responders').doc(uid);
+            const responderSnap = await tx.get(responderRef);
+            if (!responderSnap.exists) {
+                throw new BantayogError(BantayogErrorCode.NOT_FOUND, `Responder '${uid}' not found`);
+            }
+            const responder = responderSnap.data();
+            if (responder.agencyId !== actor.claims.agencyId) {
+                throw new BantayogError(BantayogErrorCode.FORBIDDEN, 'Responder belongs to a different agency');
+            }
+            if (responder.accountStatus === targetStatus) {
+                return { uid, status: targetStatus };
+            }
+            tx.update(responderRef, {
+                accountStatus: targetStatus,
+                availabilityStatus: 'off_duty',
+                updatedAt: now.toMillis(),
+            });
+            log({
+                severity: 'INFO',
+                code: 'responder.status_changed',
+                message: `Responder ${uid} status changed to ${targetStatus}`,
+                data: {
+                    uid,
+                    fromStatus: responder.accountStatus,
+                    toStatus: targetStatus,
+                    actorUid: actor.uid,
+                },
+            });
+            return { uid, status: targetStatus };
+        });
+    });
+    return result;
+}
+export const suspendResponder = onCall({
+    region: 'asia-southeast1',
+    enforceAppCheck: process.env.NODE_ENV === 'production',
+    timeoutSeconds: 10,
+    minInstances: 1,
+}, async (request) => {
+    const actor = requireAuth(request, ['agency_admin']);
+    const actorClaims = actor.claims;
+    if (actorClaims.accountStatus !== 'active') {
+        throw new HttpsError('permission-denied', 'admin account not active');
+    }
+    const parsed = suspendResponderSchema.safeParse(request.data);
+    if (!parsed.success)
+        throw new HttpsError('invalid-argument', 'malformed payload');
+    try {
+        return await suspendOrRevokeResponderCore(adminDb, {
+            uid: parsed.data.uid,
+            idempotencyKey: parsed.data.idempotencyKey,
+            actor: {
+                uid: actor.uid,
+                claims: actorClaims,
+            },
+            now: Timestamp.now(),
+            targetStatus: 'suspended',
+        });
+    }
+    catch (err) {
+        if (err instanceof BantayogError)
+            throw bantayogErrorToHttps(err);
+        throw err;
+    }
+});
+export const revokeResponder = onCall({
+    region: 'asia-southeast1',
+    enforceAppCheck: process.env.NODE_ENV === 'production',
+    timeoutSeconds: 10,
+    minInstances: 1,
+}, async (request) => {
+    const actor = requireAuth(request, ['agency_admin']);
+    const actorClaims = actor.claims;
+    if (actorClaims.accountStatus !== 'active') {
+        throw new HttpsError('permission-denied', 'admin account not active');
+    }
+    const parsed = revokeResponderSchema.safeParse(request.data);
+    if (!parsed.success)
+        throw new HttpsError('invalid-argument', 'malformed payload');
+    try {
+        return await suspendOrRevokeResponderCore(adminDb, {
+            uid: parsed.data.uid,
+            idempotencyKey: parsed.data.idempotencyKey,
+            actor: {
+                uid: actor.uid,
+                claims: actorClaims,
+            },
+            now: Timestamp.now(),
+            targetStatus: 'revoked',
+        });
+    }
+    catch (err) {
+        if (err instanceof BantayogError)
+            throw bantayogErrorToHttps(err);
+        throw err;
+    }
+});
+export async function bulkAvailabilityOverrideCore(db, deps) {
+    const { uids, status, idempotencyKey, actor, now } = deps;
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    const { now: _now, ...idempotentPayload } = deps;
+    const { result } = await withIdempotency(db, {
+        key: `bulkAvailabilityOverride:${actor.uid}:${idempotencyKey}`,
+        payload: idempotentPayload,
+        now: () => now.toMillis(),
+    }, async () => {
+        const rl = await checkRateLimit(db, {
+            key: `bulkAvailabilityOverride:${actor.uid}`,
+            limit: 5,
+            windowSeconds: 60,
+            now,
+        });
+        if (!rl.allowed) {
+            throw new BantayogError(BantayogErrorCode.RATE_LIMITED, 'rate limit exceeded', {
+                retryAfterSeconds: rl.retryAfterSeconds,
+            });
+        }
+        const batch = db.batch();
+        let updated = 0;
+        // Firestore 'in' queries support up to 10 values per chunk
+        const CHUNK_SIZE = 10;
+        for (let i = 0; i < uids.length; i += CHUNK_SIZE) {
+            const chunk = uids.slice(i, i + CHUNK_SIZE);
+            const chunkSnap = await db
+                .collection('responders')
+                .where(FieldPath.documentId(), 'in', chunk)
+                .get();
+            for (const doc of chunkSnap.docs) {
+                const data = doc.data();
+                if (data.agencyId !== actor.claims.agencyId)
+                    continue;
+                batch.update(doc.ref, {
+                    availabilityStatus: status,
+                    updatedAt: now.toMillis(),
+                });
+                updated++;
+            }
+        }
+        await batch.commit();
+        log({
+            severity: 'INFO',
+            code: 'responder.bulk_availability_override',
+            message: `Bulk availability override updated ${String(updated)} responders`,
+            data: {
+                requested: uids.length,
+                updated,
+                status,
+                actorUid: actor.uid,
+            },
+        });
+        return { updated };
+    });
+    return result;
+}
+export const bulkAvailabilityOverride = onCall({
+    region: 'asia-southeast1',
+    enforceAppCheck: process.env.NODE_ENV === 'production',
+    timeoutSeconds: 10,
+    minInstances: 1,
+}, async (request) => {
+    const actor = requireAuth(request, ['agency_admin']);
+    const actorClaims = actor.claims;
+    if (actorClaims.accountStatus !== 'active') {
+        throw new HttpsError('permission-denied', 'admin account not active');
+    }
+    const parsed = bulkAvailabilityOverrideSchema.safeParse(request.data);
+    if (!parsed.success)
+        throw new HttpsError('invalid-argument', 'malformed payload');
+    try {
+        return await bulkAvailabilityOverrideCore(adminDb, {
+            uids: parsed.data.uids,
+            status: parsed.data.status,
+            idempotencyKey: parsed.data.idempotencyKey,
+            actor: {
+                uid: actor.uid,
+                claims: actorClaims,
+            },
+            now: Timestamp.now(),
+        });
+    }
+    catch (err) {
+        if (err instanceof BantayogError)
+            throw bantayogErrorToHttps(err);
+        throw err;
+    }
+});
+//# sourceMappingURL=responder-roster.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/responder-roster.js.map b/functions/lib/callables/responder-roster.js.map
new file mode 100644
index 00000000..485500da
--- /dev/null
+++ b/functions/lib/callables/responder-roster.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"responder-roster.js","sourceRoot":"","sources":["../../src/callables/responder-roster.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAwB,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACtF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC5F,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAE1D,MAAM,GAAG,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAA;AAE3C,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/B,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE;CACzB,CAAC;KACD,MAAM,EAAE,CAAA;AAEX,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/B,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE;CACzB,CAAC;KACD,MAAM,EAAE,CAAA;AAEX,MAAM,qBAAqB,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,CAAU,CAAA;AAE/E,MAAM,8BAA8B,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;IACrC,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE;CACzB,CAAC;KACD,MAAM,EAAE,CAAA;AAUX,KAAK,UAAU,4BAA4B,CACzC,EAAa,EACb,IAAuB;IAEvB,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,IAAI,CAAA;IAE9D,6DAA6D;IAC7D,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAA;IAE7E,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CACtC,EAAE,EACF;QACE,GAAG,EAAE,GAAG,YAAY,aAAa,KAAK,CAAC,GAAG,IAAI,cAAc,EAAE;QAC9D,OAAO,EAAE,iBAAiB;QAC1B,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE;KAC1B,EACD,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE;YAClC,GAAG,EAAE,GAAG,YAAY,aAAa,KAAK,CAAC,GAAG,EAAE;YAC5C,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,EAAE;YACjB,GAAG;SACJ,CAAC,CAAA;QACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,YAAY,EAAE,qBAAqB,EAAE;gBAC7E,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;aACxC,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACpC,MAAM,YAAY,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACzD,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;YAEhD,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;gBAC1B,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,cAAc,GAAG,aAAa,CAAC,CAAA;YACtF,CAAC;YAED,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,EAGnC,CAAA;YAED,IAAI,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACjD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,SAAS,EAC3B,yCAAyC,CAC1C,CAAA;YACH,CAAC;YAED,IAAI,SAAS,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;gBAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAA;YACtC,CAAC;YAED,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE;gBACtB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,UAAU;gBAC9B,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE;aAC1B,CAAC,CAAA;YAEF,GAAG,CAAC;gBACF,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,aAAa,GAAG,sBAAsB,YAAY,EAAE;gBAC7D,IAAI,EAAE;oBACJ,GAAG;oBACH,UAAU,EAAE,SAAS,CAAC,aAAa;oBACnC,QAAQ,EAAE,YAAY;oBACtB,QAAQ,EAAE,KAAK,CAAC,GAAG;iBACpB;aACF,CAAC,CAAA;YAEF,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAA;QACtC,CAAC,CAAC,CAAA;IACJ,CAAC,CACF,CAAA;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CACpC;IACE,MAAM,EAAE,iBAAiB;IACzB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IACtD,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,CAAC;CAChB,EACD,KAAK,EAAE,OAAiC,EAAE,EAAE;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC,CAAA;IAEpD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAqE,CAAA;IAC/F,IAAI,WAAW,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,0BAA0B,CAAC,CAAA;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAA;IAElF,IAAI,CAAC;QACH,OAAO,MAAM,4BAA4B,CAAC,OAAO,EAAE;YACjD,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;YACpB,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;YAC1C,KAAK,EAAE;gBACL,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,MAAM,EAAE,WAAW;aACpB;YACD,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;YACpB,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,YAAY,aAAa;YAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAA;QACjE,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CACF,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CACnC;IACE,MAAM,EAAE,iBAAiB;IACzB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IACtD,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,CAAC;CAChB,EACD,KAAK,EAAE,OAAiC,EAAE,EAAE;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC,CAAA;IAEpD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAqE,CAAA;IAC/F,IAAI,WAAW,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,0BAA0B,CAAC,CAAA;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAA;IAElF,IAAI,CAAC;QACH,OAAO,MAAM,4BAA4B,CAAC,OAAO,EAAE;YACjD,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;YACpB,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;YAC1C,KAAK,EAAE;gBACL,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,MAAM,EAAE,WAAW;aACpB;YACD,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;YACpB,YAAY,EAAE,SAAS;SACxB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,YAAY,aAAa;YAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAA;QACjE,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CACF,CAAA;AAUD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,EAAa,EACb,IAAkC;IAElC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAEzD,6DAA6D;IAC7D,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAA;IAEhD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CACtC,EAAE,EACF;QACE,GAAG,EAAE,4BAA4B,KAAK,CAAC,GAAG,IAAI,cAAc,EAAE;QAC9D,OAAO,EAAE,iBAAiB;QAC1B,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE;KAC1B,EACD,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE;YAClC,GAAG,EAAE,4BAA4B,KAAK,CAAC,GAAG,EAAE;YAC5C,KAAK,EAAE,CAAC;YACR,aAAa,EAAE,EAAE;YACjB,GAAG;SACJ,CAAC,CAAA;QACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,YAAY,EAAE,qBAAqB,EAAE;gBAC7E,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;aACxC,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,CAAA;QACxB,IAAI,OAAO,GAAG,CAAC,CAAA;QAEf,2DAA2D;QAC3D,MAAM,UAAU,GAAG,EAAE,CAAA;QACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAA;YAC3C,MAAM,SAAS,GAAG,MAAM,EAAE;iBACvB,UAAU,CAAC,YAAY,CAAC;iBACxB,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC;iBAC1C,GAAG,EAAE,CAAA;YAER,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAA2B,CAAA;gBAChD,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ;oBAAE,SAAQ;gBAErD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;oBACpB,kBAAkB,EAAE,MAAM;oBAC1B,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE;iBAC1B,CAAC,CAAA;gBACF,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC;QAED,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;QAEpB,GAAG,CAAC;YACF,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,sCAAsC;YAC5C,OAAO,EAAE,sCAAsC,MAAM,CAAC,OAAO,CAAC,aAAa;YAC3E,IAAI,EAAE;gBACJ,SAAS,EAAE,IAAI,CAAC,MAAM;gBACtB,OAAO;gBACP,MAAM;gBACN,QAAQ,EAAE,KAAK,CAAC,GAAG;aACpB;SACF,CAAC,CAAA;QAEF,OAAO,EAAE,OAAO,EAAE,CAAA;IACpB,CAAC,CACF,CAAA;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAC5C;IACE,MAAM,EAAE,iBAAiB;IACzB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IACtD,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,CAAC;CAChB,EACD,KAAK,EAAE,OAAiC,EAAE,EAAE;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC,CAAA;IAEpD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAqE,CAAA;IAC/F,IAAI,WAAW,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,0BAA0B,CAAC,CAAA;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,8BAA8B,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACrE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAA;IAElF,IAAI,CAAC;QACH,OAAO,MAAM,4BAA4B,CAAC,OAAO,EAAE;YACjD,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;YAC1B,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;YAC1C,KAAK,EAAE;gBACL,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,MAAM,EAAE,WAAW;aACpB;YACD,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;SACrB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,YAAY,aAAa;YAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAA;QACjE,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/responder-shift-handoff.d.ts b/functions/lib/callables/responder-shift-handoff.d.ts
new file mode 100644
index 00000000..6a816660
--- /dev/null
+++ b/functions/lib/callables/responder-shift-handoff.d.ts
@@ -0,0 +1,38 @@
+import { z } from 'zod';
+declare const initiateSchema: z.ZodObject<{
+    toUid: z.ZodString;
+    reason: z.ZodString;
+    idempotencyKey: z.ZodUUID;
+}, z.core.$strict>;
+declare const acceptSchema: z.ZodObject<{
+    handoffId: z.ZodString;
+    idempotencyKey: z.ZodUUID;
+}, z.core.$strict>;
+export interface ResponderHandoffActor {
+    uid: string;
+    claims: Record<string, unknown>;
+}
+export type InitiateResult = {
+    success: true;
+    handoffId: string;
+} | {
+    success: false;
+    errorCode: string;
+};
+export type AcceptResult = {
+    success: true;
+} | {
+    success: false;
+    errorCode: string;
+};
+export declare function initiateResponderHandoffCore(db: FirebaseFirestore.Firestore, input: z.infer<typeof initiateSchema>, actor: ResponderHandoffActor, correlationId: string): Promise<InitiateResult>;
+export declare function acceptResponderHandoffCore(db: FirebaseFirestore.Firestore, input: z.infer<typeof acceptSchema>, actor: ResponderHandoffActor, correlationId: string): Promise<AcceptResult>;
+export declare const initiateResponderHandoff: import("firebase-functions/https").CallableFunction<unknown, Promise<{
+    success: true;
+    handoffId: string;
+}>, unknown>;
+export declare const acceptResponderHandoff: import("firebase-functions/https").CallableFunction<unknown, Promise<{
+    success: true;
+}>, unknown>;
+export {};
+//# sourceMappingURL=responder-shift-handoff.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/responder-shift-handoff.d.ts.map b/functions/lib/callables/responder-shift-handoff.d.ts.map
new file mode 100644
index 00000000..53e1d1c8
--- /dev/null
+++ b/functions/lib/callables/responder-shift-handoff.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"responder-shift-handoff.d.ts","sourceRoot":"","sources":["../../src/callables/responder-shift-handoff.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAiBvB,QAAA,MAAM,cAAc;;;;kBAST,CAAA;AAEX,QAAA,MAAM,YAAY;;;kBAOP,CAAA;AAEX,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzC,MAAM,MAAM,YAAY,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpF,wBAAsB,4BAA4B,CAChD,EAAE,EAAE,iBAAiB,CAAC,SAAS,EAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,EACrC,KAAK,EAAE,qBAAqB,EAC5B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,cAAc,CAAC,CA+FzB;AAED,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,iBAAiB,CAAC,SAAS,EAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,EACnC,KAAK,EAAE,qBAAqB,EAC5B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,YAAY,CAAC,CAqEvB;AAED,eAAO,MAAM,wBAAwB;aAvLtB,IAAI;eAAa,MAAM;YAwOrC,CAAA;AAED,eAAO,MAAM,sBAAsB;aAvOG,IAAI;YAwRzC,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/responder-shift-handoff.js b/functions/lib/callables/responder-shift-handoff.js
new file mode 100644
index 00000000..348e32c3
--- /dev/null
+++ b/functions/lib/callables/responder-shift-handoff.js
@@ -0,0 +1,261 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { Timestamp } from 'firebase-admin/firestore';
+import { onCall, HttpsError, } from 'firebase-functions/v2/https';
+import { z } from 'zod';
+import { adminDb } from '../admin-init.js';
+import { bantayogErrorToHttps } from './https-error.js';
+import { withIdempotency, IdempotencyInProgressError, IdempotencyMismatchError, } from '../idempotency/guard.js';
+import { checkRateLimit } from '../services/rate-limit.js';
+import { BantayogError, logDimension, responderShiftHandoffDocSchema, } from '@bantayog/shared-validators';
+const log = logDimension('responderShiftHandoff');
+const initiateSchema = z
+    .object({
+    toUid: z
+        .string()
+        .min(1)
+        .refine((v) => !v.includes('/'), { message: 'toUid must not contain slashes' }),
+    reason: z.string().trim().min(1).max(1000),
+    idempotencyKey: z.uuid(),
+})
+    .strict();
+const acceptSchema = z
+    .object({
+    handoffId: z.string().regex(/^[0-9a-fA-F]{20}$/, {
+        message: 'handoffId must be a 20-character hex string',
+    }),
+    idempotencyKey: z.uuid(),
+})
+    .strict();
+export async function initiateResponderHandoffCore(db, input, actor, correlationId) {
+    if (actor.claims.accountStatus !== 'active') {
+        log({
+            severity: 'ERROR',
+            code: 'responderHandoff.initiate.inactive',
+            message: 'Caller account status is not active',
+            data: { uid: actor.uid, correlationId },
+        });
+        return { success: false, errorCode: 'permission-denied' };
+    }
+    if (actor.uid === input.toUid) {
+        return { success: false, errorCode: 'invalid-argument' };
+    }
+    const handoffId = createHash('sha256')
+        .update(`${actor.uid}:${input.toUid}:${input.idempotencyKey}`)
+        .digest('hex')
+        .slice(0, 20);
+    const result = await db.runTransaction(async (tx) => {
+        const existingRef = db.collection('responder_shift_handoffs').doc(handoffId);
+        const existing = await tx.get(existingRef);
+        if (existing.exists) {
+            const existingData = existing.data();
+            if (existingData?.fromUid === actor.uid &&
+                existingData.toUid === input.toUid &&
+                existingData.reason === input.reason) {
+                return { success: true, handoffId };
+            }
+            return { success: false, errorCode: 'already-exists' };
+        }
+        const [fromSnap, toSnap] = await Promise.all([
+            tx.get(db.collection('responders').doc(actor.uid)),
+            tx.get(db.collection('responders').doc(input.toUid)),
+        ]);
+        if (!fromSnap.exists || !toSnap.exists) {
+            return { success: false, errorCode: 'not-found' };
+        }
+        const fromData = fromSnap.data();
+        const toData = toSnap.data();
+        if (!fromData || !toData) {
+            return { success: false, errorCode: 'not-found' };
+        }
+        if (fromData.accountStatus !== 'active' || toData.accountStatus !== 'active') {
+            return { success: false, errorCode: 'failed-precondition' };
+        }
+        if (fromData.agencyId !== toData.agencyId) {
+            log({
+                severity: 'ERROR',
+                code: 'responderHandoff.initiate.agency_mismatch',
+                message: `Agency mismatch: ${String(fromData.agencyId)} vs ${String(toData.agencyId)}`,
+                data: { uid: actor.uid, toUid: input.toUid, correlationId },
+            });
+            return { success: false, errorCode: 'failed-precondition' };
+        }
+        const now = Timestamp.now();
+        const handoffDoc = responderShiftHandoffDocSchema.parse({
+            fromUid: actor.uid,
+            toUid: input.toUid,
+            agencyId: fromData.agencyId,
+            municipalityId: fromData.municipalityId,
+            reason: input.reason,
+            status: 'pending',
+            createdAt: now.toMillis(),
+            expiresAt: now.toMillis() + 30 * 60 * 1000,
+            schemaVersion: 1,
+        });
+        tx.set(existingRef, handoffDoc);
+        log({
+            severity: 'INFO',
+            code: 'responderHandoff.initiated',
+            message: `Responder shift handoff ${handoffId} created by ${actor.uid} to ${input.toUid}`,
+            data: { handoffId, uid: actor.uid, toUid: input.toUid, correlationId },
+        });
+        return { success: true, handoffId };
+    });
+    return result;
+}
+export async function acceptResponderHandoffCore(db, input, actor, correlationId) {
+    if (actor.claims.accountStatus !== 'active') {
+        log({
+            severity: 'ERROR',
+            code: 'responderHandoff.accept.inactive',
+            message: 'Caller account status is not active',
+            data: { uid: actor.uid, correlationId },
+        });
+        return { success: false, errorCode: 'permission-denied' };
+    }
+    const { result: cached } = await withIdempotency(db, { key: `acceptResponderHandoff:${actor.uid}:${input.idempotencyKey}`, payload: input }, async () => {
+        return db.runTransaction(async (tx) => {
+            const snap = await tx.get(db.collection('responder_shift_handoffs').doc(input.handoffId));
+            if (!snap.exists)
+                return { success: false, errorCode: 'not-found' };
+            const parsedHandoff = responderShiftHandoffDocSchema.safeParse(snap.data());
+            if (!parsedHandoff.success) {
+                return { success: false, errorCode: 'failed-precondition' };
+            }
+            const handoff = parsedHandoff.data;
+            if (handoff.toUid !== actor.uid) {
+                log({
+                    severity: 'ERROR',
+                    code: 'responderHandoff.accept.wrong_target',
+                    message: `Acceptor ${actor.uid} is not the target responder ${handoff.toUid}`,
+                    data: { handoffId: input.handoffId, uid: actor.uid, correlationId },
+                });
+                return { success: false, errorCode: 'permission-denied' };
+            }
+            if (handoff.expiresAt < Date.now()) {
+                return { success: false, errorCode: 'failed-precondition' };
+            }
+            if (handoff.status === 'accepted') {
+                return { success: true };
+            }
+            if (handoff.status !== 'pending') {
+                return { success: false, errorCode: 'failed-precondition' };
+            }
+            tx.update(snap.ref, { status: 'accepted' });
+            log({
+                severity: 'INFO',
+                code: 'responderHandoff.accepted',
+                message: `Responder handoff ${input.handoffId} accepted by ${actor.uid}`,
+                data: { handoffId: input.handoffId, uid: actor.uid, correlationId },
+            });
+            return { success: true };
+        });
+    }).catch((err) => {
+        if (err instanceof IdempotencyInProgressError) {
+            return { result: { success: false, errorCode: 'resource-exhausted' }, fromCache: false };
+        }
+        if (err instanceof IdempotencyMismatchError) {
+            return { result: { success: false, errorCode: 'already-exists' }, fromCache: false };
+        }
+        throw err;
+    });
+    return cached;
+}
+export const initiateResponderHandoff = onCall({
+    region: 'asia-southeast1',
+    enforceAppCheck: process.env.NODE_ENV === 'production',
+    maxInstances: 100,
+}, async (req) => {
+    if (!req.auth)
+        throw new HttpsError('unauthenticated', 'sign-in required');
+    const claims = req.auth.token;
+    if (!claims)
+        throw new HttpsError('unauthenticated', 'token required');
+    if (claims.role !== 'responder') {
+        throw new HttpsError('permission-denied', 'responder role required');
+    }
+    if (claims.accountStatus !== 'active') {
+        throw new HttpsError('permission-denied', 'account status is not active');
+    }
+    const parsed = initiateSchema.safeParse(req.data);
+    if (!parsed.success)
+        throw new HttpsError('invalid-argument', parsed.error.message);
+    const rl = await checkRateLimit(adminDb, {
+        key: `initiateResponderHandoff:${req.auth.uid}`,
+        limit: 60,
+        windowSeconds: 60,
+        now: Timestamp.now(),
+    });
+    if (!rl.allowed) {
+        throw new HttpsError('resource-exhausted', 'rate limit', {
+            retryAfterSeconds: rl.retryAfterSeconds,
+        });
+    }
+    const correlationId = randomUUID();
+    const actor = {
+        uid: req.auth.uid,
+        claims,
+    };
+    try {
+        const result = await initiateResponderHandoffCore(adminDb, parsed.data, actor, correlationId);
+        if (!result.success)
+            throw new HttpsError(result.errorCode, 'initiate failed');
+        return result;
+    }
+    catch (err) {
+        if (err instanceof HttpsError)
+            throw err;
+        if (err instanceof BantayogError)
+            throw bantayogErrorToHttps(err);
+        throw err;
+    }
+});
+export const acceptResponderHandoff = onCall({
+    region: 'asia-southeast1',
+    enforceAppCheck: process.env.NODE_ENV === 'production',
+    maxInstances: 100,
+}, async (req) => {
+    if (!req.auth)
+        throw new HttpsError('unauthenticated', 'sign-in required');
+    const claims = req.auth.token;
+    if (!claims)
+        throw new HttpsError('unauthenticated', 'token required');
+    if (claims.role !== 'responder') {
+        throw new HttpsError('permission-denied', 'responder role required');
+    }
+    if (claims.accountStatus !== 'active') {
+        throw new HttpsError('permission-denied', 'account status is not active');
+    }
+    const parsed = acceptSchema.safeParse(req.data);
+    if (!parsed.success)
+        throw new HttpsError('invalid-argument', parsed.error.message);
+    const rl = await checkRateLimit(adminDb, {
+        key: `acceptResponderHandoff:${req.auth.uid}`,
+        limit: 60,
+        windowSeconds: 60,
+        now: Timestamp.now(),
+    });
+    if (!rl.allowed) {
+        throw new HttpsError('resource-exhausted', 'rate limit', {
+            retryAfterSeconds: rl.retryAfterSeconds,
+        });
+    }
+    const correlationId = randomUUID();
+    const actor = {
+        uid: req.auth.uid,
+        claims,
+    };
+    try {
+        const result = await acceptResponderHandoffCore(adminDb, parsed.data, actor, correlationId);
+        if (!result.success)
+            throw new HttpsError(result.errorCode, 'accept failed');
+        return result;
+    }
+    catch (err) {
+        if (err instanceof HttpsError)
+            throw err;
+        if (err instanceof BantayogError)
+            throw bantayogErrorToHttps(err);
+        throw err;
+    }
+});
+//# sourceMappingURL=responder-shift-handoff.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/responder-shift-handoff.js.map b/functions/lib/callables/responder-shift-handoff.js.map
new file mode 100644
index 00000000..b41decea
--- /dev/null
+++ b/functions/lib/callables/responder-shift-handoff.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"responder-shift-handoff.js","sourceRoot":"","sources":["../../src/callables/responder-shift-handoff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACpD,OAAO,EACL,MAAM,EAEN,UAAU,GAEX,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EACL,eAAe,EACf,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,EACL,aAAa,EACb,YAAY,EACZ,8BAA8B,GAC/B,MAAM,6BAA6B,CAAA;AAEpC,MAAM,GAAG,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAA;AAEjD,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACjF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAC1C,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE;CACzB,CAAC;KACD,MAAM,EAAE,CAAA;AAEX,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE;QAC/C,OAAO,EAAE,6CAA6C;KACvD,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE;CACzB,CAAC;KACD,MAAM,EAAE,CAAA;AAaX,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,EAA+B,EAC/B,KAAqC,EACrC,KAA4B,EAC5B,aAAqB;IAErB,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC5C,GAAG,CAAC;YACF,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,oCAAoC;YAC1C,OAAO,EAAE,qCAAqC;YAC9C,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE;SACxC,CAAC,CAAA;QACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAA;IAC3D,CAAC;IAED,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAA;IAC1D,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;SACnC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;SAC7D,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAEf,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QAClD,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC5E,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAC1C,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAMrB,CAAA;YACb,IACE,YAAY,EAAE,OAAO,KAAK,KAAK,CAAC,GAAG;gBACnC,YAAY,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;gBAClC,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EACpC,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,SAAS,EAAE,CAAA;YAC9C,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAc,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAA;QACjE,CAAC;QAED,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SACrD,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,KAAc,EAAE,SAAS,EAAE,WAAW,EAAE,CAAA;QAC5D,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAA;QAChC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;QAC5B,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,KAAc,EAAE,SAAS,EAAE,WAAW,EAAE,CAAA;QAC5D,CAAC;QAED,IAAI,QAAQ,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC7E,OAAO,EAAE,OAAO,EAAE,KAAc,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAA;QACtE,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC1C,GAAG,CAAC;gBACF,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,2CAA2C;gBACjD,OAAO,EAAE,oBAAoB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;gBACtF,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE;aAC5D,CAAC,CAAA;YACF,OAAO,EAAE,OAAO,EAAE,KAAc,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAA;QACtE,CAAC;QAED,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,CAAA;QAE3B,MAAM,UAAU,GAAG,8BAA8B,CAAC,KAAK,CAAC;YACtD,OAAO,EAAE,KAAK,CAAC,GAAG;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE;YACzB,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;YAC1C,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;QACF,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;QAE/B,GAAG,CAAC;YACF,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,2BAA2B,SAAS,eAAe,KAAK,CAAC,GAAG,OAAO,KAAK,CAAC,KAAK,EAAE;YACzF,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE;SACvE,CAAC,CAAA;QACF,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,SAAS,EAAE,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,EAA+B,EAC/B,KAAmC,EACnC,KAA4B,EAC5B,aAAqB;IAErB,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC5C,GAAG,CAAC;YACF,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,kCAAkC;YACxC,OAAO,EAAE,qCAAqC;YAC9C,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE;SACxC,CAAC,CAAA;QACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAA;IAC3D,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CAC9C,EAAE,EACF,EAAE,GAAG,EAAE,0BAA0B,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EACtF,KAAK,IAAI,EAAE;QACT,OAAO,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;YACzF,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAA;YAEnE,MAAM,aAAa,GAAG,8BAA8B,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;YAC3E,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAA;YAC7D,CAAC;YACD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAA;YAElC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;gBAChC,GAAG,CAAC;oBACF,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,sCAAsC;oBAC5C,OAAO,EAAE,YAAY,KAAK,CAAC,GAAG,gCAAgC,OAAO,CAAC,KAAK,EAAE;oBAC7E,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE;iBACpE,CAAC,CAAA;gBACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAA;YAC3D,CAAC;YAED,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAA;YAC7D,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAClC,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,CAAA;YACnC,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAA;YAC7D,CAAC;YAED,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;YAE3C,GAAG,CAAC;gBACF,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,qBAAqB,KAAK,CAAC,SAAS,gBAAgB,KAAK,CAAC,GAAG,EAAE;gBACxE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE;aACpE,CAAC,CAAA;YACF,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,CAAA;QACnC,CAAC,CAAC,CAAA;IACJ,CAAC,CACF,CAAC,KAAK,CAAC,CAAC,GAAY,EAAgD,EAAE;QACrE,IAAI,GAAG,YAAY,0BAA0B,EAAE,CAAC;YAC9C,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAC1F,CAAC;QACD,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QACtF,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAC5C;IACE,MAAM,EAAE,iBAAiB;IACzB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IACtD,YAAY,EAAE,GAAG;CAClB,EACD,KAAK,EAAE,GAA6B,EAAE,EAAE;IACtC,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAA;IAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAuC,CAAA;IAC/D,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAA;IACtE,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,8BAA8B,CAAC,CAAA;IAC3E,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAEnF,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE;QACvC,GAAG,EAAE,4BAA4B,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE;QAC/C,KAAK,EAAE,EAAE;QACT,aAAa,EAAE,EAAE;QACjB,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;KACrB,CAAC,CAAA;IACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,YAAY,EAAE;YACvD,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;SACxC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,EAAE,CAAA;IAClC,MAAM,KAAK,GAA0B;QACnC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;QACjB,MAAM;KACP,CAAA;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;QAC7F,IAAI,CAAC,MAAM,CAAC,OAAO;YACjB,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,SAA+B,EAAE,iBAAiB,CAAC,CAAA;QACjF,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,YAAY,UAAU;YAAE,MAAM,GAAG,CAAA;QACxC,IAAI,GAAG,YAAY,aAAa;YAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAA;QACjE,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CACF,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAC1C;IACE,MAAM,EAAE,iBAAiB;IACzB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IACtD,YAAY,EAAE,GAAG;CAClB,EACD,KAAK,EAAE,GAA6B,EAAE,EAAE;IACtC,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAA;IAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAuC,CAAA;IAC/D,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAA;IACtE,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,8BAA8B,CAAC,CAAA;IAC3E,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAEnF,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE;QACvC,GAAG,EAAE,0BAA0B,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE;QAC7C,KAAK,EAAE,EAAE;QACT,aAAa,EAAE,EAAE;QACjB,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;KACrB,CAAC,CAAA;IACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,YAAY,EAAE;YACvD,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;SACxC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,EAAE,CAAA;IAClC,MAAM,KAAK,GAA0B;QACnC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;QACjB,MAAM;KACP,CAAA;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;QAC3F,IAAI,CAAC,MAAM,CAAC,OAAO;YACjB,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,SAA+B,EAAE,eAAe,CAAC,CAAA;QAC/E,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,YAAY,UAAU;YAAE,MAAM,GAAG,CAAA;QACxC,IAAI,GAAG,YAAY,aAAa;YAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAA;QACjE,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/set-retention-exempt.d.ts b/functions/lib/callables/set-retention-exempt.d.ts
new file mode 100644
index 00000000..7a33bd65
--- /dev/null
+++ b/functions/lib/callables/set-retention-exempt.d.ts
@@ -0,0 +1,11 @@
+import { type Firestore } from 'firebase-admin/firestore';
+export declare function setRetentionExemptCore(db: Firestore, input: {
+    collection: string;
+    documentId: string;
+    exempt: boolean;
+    reason: string;
+}, actor: {
+    uid: string;
+}): Promise<void>;
+export declare const setRetentionExempt: import("firebase-functions/https").CallableFunction<any, Promise<void>, unknown>;
+//# sourceMappingURL=set-retention-exempt.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/set-retention-exempt.d.ts.map b/functions/lib/callables/set-retention-exempt.d.ts.map
new file mode 100644
index 00000000..0bdbe9f2
--- /dev/null
+++ b/functions/lib/callables/set-retention-exempt.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"set-retention-exempt.d.ts","sourceRoot":"","sources":["../../src/callables/set-retention-exempt.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAMvE,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,SAAS,EACb,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAClF,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACrB,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED,eAAO,MAAM,kBAAkB,kFAW9B,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/set-retention-exempt.js b/functions/lib/callables/set-retention-exempt.js
new file mode 100644
index 00000000..798dd5b1
--- /dev/null
+++ b/functions/lib/callables/set-retention-exempt.js
@@ -0,0 +1,30 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https';
+import { getFirestore } from 'firebase-admin/firestore';
+import { requireAuth, requireMfaAuth } from './https-error.js';
+import { streamAuditEvent } from '../services/audit-stream.js';
+const ALLOWED_COLLECTIONS = ['reports', 'report_private', 'report_ops', 'sms_inbox'];
+export async function setRetentionExemptCore(db, input, actor) {
+    if (!ALLOWED_COLLECTIONS.includes(input.collection)) {
+        throw new HttpsError('invalid-argument', 'collection_not_allowed');
+    }
+    await db.collection(input.collection).doc(input.documentId).update({
+        retentionExempt: input.exempt,
+        retentionExemptReason: input.reason,
+        retentionExemptSetBy: actor.uid,
+        retentionExemptSetAt: Date.now(),
+    });
+    void streamAuditEvent({
+        eventType: 'retention_exempt_set',
+        actorUid: actor.uid,
+        targetCollection: input.collection,
+        targetDocumentId: input.documentId,
+        metadata: { exempt: input.exempt },
+        occurredAt: Date.now(),
+    });
+}
+export const setRetentionExempt = onCall({ region: 'asia-southeast1', enforceAppCheck: true }, async (request) => {
+    const { uid } = requireAuth(request, ['superadmin']);
+    requireMfaAuth(request);
+    await setRetentionExemptCore(getFirestore(), request.data, { uid });
+});
+//# sourceMappingURL=set-retention-exempt.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/set-retention-exempt.js.map b/functions/lib/callables/set-retention-exempt.js.map
new file mode 100644
index 00000000..aa274445
--- /dev/null
+++ b/functions/lib/callables/set-retention-exempt.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"set-retention-exempt.js","sourceRoot":"","sources":["../../src/callables/set-retention-exempt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EAAE,YAAY,EAAkB,MAAM,0BAA0B,CAAA;AACvE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAE9D,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,WAAW,CAAU,CAAA;AAE7F,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAa,EACb,KAAkF,EAClF,KAAsB;IAEtB,IAAI,CAAE,mBAAyC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;QACjE,eAAe,EAAE,KAAK,CAAC,MAAM;QAC7B,qBAAqB,EAAE,KAAK,CAAC,MAAM;QACnC,oBAAoB,EAAE,KAAK,CAAC,GAAG;QAC/B,oBAAoB,EAAE,IAAI,CAAC,GAAG,EAAE;KACjC,CAAC,CAAA;IACF,KAAK,gBAAgB,CAAC;QACpB,SAAS,EAAE,sBAAsB;QACjC,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,gBAAgB,EAAE,KAAK,CAAC,UAAU;QAClC,gBAAgB,EAAE,KAAK,CAAC,UAAU;QAClC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;QAClC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CACtC,EAAE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,EAAE;IAChB,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;IACpD,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,MAAM,sBAAsB,CAC1B,YAAY,EAAE,EACd,OAAO,CAAC,IAAmF,EAC3F,EAAE,GAAG,EAAE,CACR,CAAA;AACH,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/submit-responder-witnessed-report.d.ts b/functions/lib/callables/submit-responder-witnessed-report.d.ts
new file mode 100644
index 00000000..c0b2d1c6
--- /dev/null
+++ b/functions/lib/callables/submit-responder-witnessed-report.d.ts
@@ -0,0 +1,59 @@
+import { Firestore, Timestamp } from 'firebase-admin/firestore';
+import { z } from 'zod';
+export declare const submitResponderWitnessedReportSchema: z.ZodObject<{
+    dispatchId: z.ZodString;
+    reportType: z.ZodEnum<{
+        flood: "flood";
+        fire: "fire";
+        earthquake: "earthquake";
+        typhoon: "typhoon";
+        landslide: "landslide";
+        storm_surge: "storm_surge";
+        medical: "medical";
+        accident: "accident";
+        structural: "structural";
+        security: "security";
+        other: "other";
+    }>;
+    description: z.ZodString;
+    severity: z.ZodEnum<{
+        high: "high";
+        low: "low";
+        medium: "medium";
+    }>;
+    publicLocation: z.ZodObject<{
+        lat: z.ZodNumber;
+        lng: z.ZodNumber;
+    }, z.core.$strict>;
+    photoUrl: z.ZodOptional<z.ZodURL>;
+    idempotencyKey: z.ZodUUID;
+}, z.core.$strict>;
+export interface SubmitResponderWitnessedReportCoreDeps {
+    dispatchId: string;
+    reportType: string;
+    description: string;
+    severity: 'low' | 'medium' | 'high';
+    publicLocation: {
+        lat: number;
+        lng: number;
+    };
+    photoUrl?: string;
+    idempotencyKey: string;
+    actor: {
+        uid: string;
+        claims: {
+            role: string;
+            municipalityId?: string;
+        };
+    };
+    now: Timestamp;
+}
+export declare function submitResponderWitnessedReportCore(db: Firestore, deps: SubmitResponderWitnessedReportCoreDeps): Promise<{
+    reportId: string;
+    publicTrackingRef: string;
+}>;
+export declare const submitResponderWitnessedReport: import("firebase-functions/https").CallableFunction<unknown, Promise<{
+    reportId: string;
+    publicTrackingRef: string;
+}>, unknown>;
+//# sourceMappingURL=submit-responder-witnessed-report.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/submit-responder-witnessed-report.d.ts.map b/functions/lib/callables/submit-responder-witnessed-report.d.ts.map
new file mode 100644
index 00000000..15357783
--- /dev/null
+++ b/functions/lib/callables/submit-responder-witnessed-report.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"submit-responder-witnessed-report.d.ts","sourceRoot":"","sources":["../../src/callables/submit-responder-witnessed-report.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAQvB,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA2BtC,CAAA;AAEX,MAAM,WAAW,sCAAsC;IACrD,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;IACnC,cAAc,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;IACzE,GAAG,EAAE,SAAS,CAAA;CACf;AAOD,wBAAsB,kCAAkC,CACtD,EAAE,EAAE,SAAS,EACb,IAAI,EAAE,sCAAsC,GAC3C,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC,CAuJ1D;AAED,eAAO,MAAM,8BAA8B;cAzJpB,MAAM;uBAAqB,MAAM;YA6LvD,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/submit-responder-witnessed-report.js b/functions/lib/callables/submit-responder-witnessed-report.js
new file mode 100644
index 00000000..394ecabe
--- /dev/null
+++ b/functions/lib/callables/submit-responder-witnessed-report.js
@@ -0,0 +1,192 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https';
+import { Firestore, Timestamp } from 'firebase-admin/firestore';
+import { z } from 'zod';
+import { BantayogError, BantayogErrorCode } from '@bantayog/shared-validators';
+import { adminDb } from '../admin-init.js';
+import { withIdempotency } from '../idempotency/guard.js';
+import { bantayogErrorToHttps, requireAuth } from './https-error.js';
+import { checkRateLimit } from '../services/rate-limit.js';
+import { randomBytes, createHash, randomInt } from 'node:crypto';
+export const submitResponderWitnessedReportSchema = z
+    .object({
+    dispatchId: z.string().min(1).max(128),
+    reportType: z.enum([
+        'flood',
+        'fire',
+        'earthquake',
+        'typhoon',
+        'landslide',
+        'storm_surge',
+        'medical',
+        'accident',
+        'structural',
+        'security',
+        'other',
+    ]),
+    description: z.string().min(1).max(5000),
+    severity: z.enum(['low', 'medium', 'high']),
+    publicLocation: z
+        .object({
+        lat: z.number().min(-90).max(90),
+        lng: z.number().min(-180).max(180),
+    })
+        .strict(),
+    photoUrl: z.url().optional(),
+    idempotencyKey: z.uuid(),
+})
+    .strict();
+function generatePublicRef() {
+    const chars = 'abcdefghijklmnopqrstuvwxyz0123456789';
+    return Array.from({ length: 8 }, () => chars[randomInt(chars.length)]).join('');
+}
+export async function submitResponderWitnessedReportCore(db, deps) {
+    const { dispatchId, reportType, description, severity, publicLocation, photoUrl, idempotencyKey, actor, now, } = deps;
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    const { now: _now, ...idempotentPayload } = deps;
+    const { result } = await withIdempotency(db, {
+        key: `submitResponderWitnessedReport:${actor.uid}:${idempotencyKey}`,
+        payload: idempotentPayload,
+        now: () => now.toMillis(),
+    }, async () => {
+        const rl = await checkRateLimit(db, {
+            key: `submitResponderWitnessedReport:${actor.uid}`,
+            limit: 30,
+            windowSeconds: 60,
+            now,
+        });
+        if (!rl.allowed) {
+            throw new BantayogError(BantayogErrorCode.RATE_LIMITED, 'rate limit exceeded', {
+                retryAfterSeconds: rl.retryAfterSeconds,
+            });
+        }
+        return db.runTransaction(async (tx) => {
+            const dispatchRef = db.collection('dispatches').doc(dispatchId);
+            const dispatchSnap = await tx.get(dispatchRef);
+            if (!dispatchSnap.exists) {
+                throw new BantayogError(BantayogErrorCode.NOT_FOUND, 'Dispatch not found');
+            }
+            const dispatch = dispatchSnap.data();
+            if (dispatch.assignedTo?.uid !== actor.uid) {
+                throw new BantayogError(BantayogErrorCode.FORBIDDEN, 'Not assigned to this dispatch');
+            }
+            const activeStates = ['accepted', 'acknowledged', 'en_route', 'on_scene'];
+            if (!activeStates.includes(dispatch.status)) {
+                throw new BantayogError(BantayogErrorCode.FAILED_PRECONDITION, `Dispatch must be active (current: ${dispatch.status})`);
+            }
+            const reportId = db.collection('reports').doc().id;
+            const publicRef = generatePublicRef();
+            const nowMs = now.toMillis();
+            const municipalityId = dispatch.assignedTo.municipalityId;
+            const correlationId = crypto.randomUUID();
+            tx.set(db.collection('reports').doc(reportId), {
+                reportId,
+                municipalityId,
+                barangayId: 'unknown',
+                reporterRole: 'responder',
+                reportType,
+                severity,
+                status: 'new',
+                publicLocation,
+                mediaRefs: photoUrl ? [photoUrl] : [],
+                description,
+                submittedAt: nowMs,
+                retentionExempt: false,
+                visibilityClass: 'internal',
+                visibility: { scope: 'municipality', sharedWith: [] },
+                source: 'responder_witness',
+                hasPhotoAndGPS: !!photoUrl,
+                witnessPriorityFlag: true,
+                schemaVersion: 1,
+                municipalityLabel: municipalityId,
+                correlationId,
+            });
+            tx.set(db.collection('report_private').doc(reportId), {
+                municipalityId,
+                reporterUid: actor.uid,
+                isPseudonymous: false,
+                publicTrackingRef: publicRef,
+                createdAt: nowMs,
+                schemaVersion: 1,
+            });
+            tx.set(db.collection('report_ops').doc(reportId), {
+                municipalityId,
+                status: 'new',
+                severity,
+                createdAt: nowMs,
+                agencyIds: [dispatch.assignedTo.agencyId],
+                activeResponderCount: 0,
+                requiresLocationFollowUp: false,
+                witnessPriorityFlag: true,
+                visibility: { scope: 'municipality', sharedWith: [] },
+                updatedAt: nowMs,
+                schemaVersion: 1,
+            });
+            tx.set(db.collection('report_lookup').doc(publicRef), {
+                publicTrackingRef: publicRef,
+                reportId,
+                tokenHash: createHash('sha256').update(randomBytes(32)).digest('hex'),
+                expiresAt: nowMs + 365 * 24 * 60 * 60 * 1000,
+                createdAt: nowMs,
+                schemaVersion: 1,
+            });
+            tx.set(db.collection('report_events').doc(), {
+                reportId,
+                from: null,
+                to: 'new',
+                actor: actor.uid,
+                actorRole: 'responder',
+                at: nowMs,
+                correlationId,
+                schemaVersion: 1,
+            });
+            tx.set(db.collection('admin_notifications').doc(), {
+                type: 'responder_witness_report',
+                reportId,
+                responderUid: actor.uid,
+                agencyId: dispatch.assignedTo.agencyId,
+                municipalityId,
+                createdAt: nowMs,
+                read: false,
+                schemaVersion: 1,
+            });
+            return { reportId, publicTrackingRef: publicRef };
+        });
+    });
+    return result;
+}
+export const submitResponderWitnessedReport = onCall({
+    region: 'asia-southeast1',
+    enforceAppCheck: process.env.NODE_ENV === 'production',
+    timeoutSeconds: 10,
+    minInstances: 1,
+}, async (request) => {
+    const actor = requireAuth(request, ['responder']);
+    if (actor.claims.accountStatus !== 'active') {
+        throw new HttpsError('permission-denied', 'account is not active');
+    }
+    const parsed = submitResponderWitnessedReportSchema.safeParse(request.data);
+    if (!parsed.success)
+        throw new HttpsError('invalid-argument', 'malformed payload');
+    try {
+        return await submitResponderWitnessedReportCore(adminDb, {
+            dispatchId: parsed.data.dispatchId,
+            reportType: parsed.data.reportType,
+            description: parsed.data.description,
+            severity: parsed.data.severity,
+            publicLocation: parsed.data.publicLocation,
+            ...(parsed.data.photoUrl !== undefined ? { photoUrl: parsed.data.photoUrl } : {}),
+            idempotencyKey: parsed.data.idempotencyKey,
+            actor: {
+                uid: actor.uid,
+                claims: actor.claims,
+            },
+            now: Timestamp.now(),
+        });
+    }
+    catch (err) {
+        if (err instanceof BantayogError)
+            throw bantayogErrorToHttps(err);
+        throw err;
+    }
+});
+//# sourceMappingURL=submit-responder-witnessed-report.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/submit-responder-witnessed-report.js.map b/functions/lib/callables/submit-responder-witnessed-report.js.map
new file mode 100644
index 00000000..54113a0e
--- /dev/null
+++ b/functions/lib/callables/submit-responder-witnessed-report.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"submit-responder-witnessed-report.js","sourceRoot":"","sources":["../../src/callables/submit-responder-witnessed-report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAwB,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACtF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEhE,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC;KAClD,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC;QACjB,OAAO;QACP,MAAM;QACN,YAAY;QACZ,SAAS;QACT,WAAW;QACX,aAAa;QACb,SAAS;QACT,UAAU;QACV,YAAY;QACZ,UAAU;QACV,OAAO;KACR,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,cAAc,EAAE,CAAC;SACd,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACnC,CAAC;SACD,MAAM,EAAE;IACX,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5B,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE;CACzB,CAAC;KACD,MAAM,EAAE,CAAA;AAcX,SAAS,iBAAiB;IACxB,MAAM,KAAK,GAAG,sCAAsC,CAAA;IACpD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,EAAa,EACb,IAA4C;IAE5C,MAAM,EACJ,UAAU,EACV,UAAU,EACV,WAAW,EACX,QAAQ,EACR,cAAc,EACd,QAAQ,EACR,cAAc,EACd,KAAK,EACL,GAAG,GACJ,GAAG,IAAI,CAAA;IAER,6DAA6D;IAC7D,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAA;IAEhD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CACtC,EAAE,EACF;QACE,GAAG,EAAE,kCAAkC,KAAK,CAAC,GAAG,IAAI,cAAc,EAAE;QACpE,OAAO,EAAE,iBAAiB;QAC1B,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE;KAC1B,EACD,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE;YAClC,GAAG,EAAE,kCAAkC,KAAK,CAAC,GAAG,EAAE;YAClD,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,EAAE;YACjB,GAAG;SACJ,CAAC,CAAA;QACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,YAAY,EAAE,qBAAqB,EAAE;gBAC7E,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;aACxC,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACpC,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAC/D,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAE9C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;gBACzB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;YAC5E,CAAC;YAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAIjC,CAAA;YAED,IAAI,QAAQ,CAAC,UAAU,EAAE,GAAG,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC3C,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAA;YACvF,CAAC;YAED,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;YACzE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,mBAAmB,EACrC,qCAAqC,QAAQ,CAAC,MAAM,GAAG,CACxD,CAAA;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAA;YAClD,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAA;YACrC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC5B,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAA;YACzD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;YAEzC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;gBAC7C,QAAQ;gBACR,cAAc;gBACd,UAAU,EAAE,SAAS;gBACrB,YAAY,EAAE,WAAW;gBACzB,UAAU;gBACV,QAAQ;gBACR,MAAM,EAAE,KAAK;gBACb,cAAc;gBACd,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;gBACrC,WAAW;gBACX,WAAW,EAAE,KAAK;gBAClB,eAAe,EAAE,KAAK;gBACtB,eAAe,EAAE,UAAU;gBAC3B,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;gBACrD,MAAM,EAAE,mBAAmB;gBAC3B,cAAc,EAAE,CAAC,CAAC,QAAQ;gBAC1B,mBAAmB,EAAE,IAAI;gBACzB,aAAa,EAAE,CAAC;gBAChB,iBAAiB,EAAE,cAAc;gBACjC,aAAa;aACd,CAAC,CAAA;YAEF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;gBACpD,cAAc;gBACd,WAAW,EAAE,KAAK,CAAC,GAAG;gBACtB,cAAc,EAAE,KAAK;gBACrB,iBAAiB,EAAE,SAAS;gBAC5B,SAAS,EAAE,KAAK;gBAChB,aAAa,EAAE,CAAC;aACjB,CAAC,CAAA;YAEF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;gBAChD,cAAc;gBACd,MAAM,EAAE,KAAK;gBACb,QAAQ;gBACR,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACzC,oBAAoB,EAAE,CAAC;gBACvB,wBAAwB,EAAE,KAAK;gBAC/B,mBAAmB,EAAE,IAAI;gBACzB,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;gBACrD,SAAS,EAAE,KAAK;gBAChB,aAAa,EAAE,CAAC;aACjB,CAAC,CAAA;YAEF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;gBACpD,iBAAiB,EAAE,SAAS;gBAC5B,QAAQ;gBACR,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACrE,SAAS,EAAE,KAAK,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;gBAC5C,SAAS,EAAE,KAAK;gBAChB,aAAa,EAAE,CAAC;aACjB,CAAC,CAAA;YAEF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC3C,QAAQ;gBACR,IAAI,EAAE,IAAI;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,KAAK,CAAC,GAAG;gBAChB,SAAS,EAAE,WAAW;gBACtB,EAAE,EAAE,KAAK;gBACT,aAAa;gBACb,aAAa,EAAE,CAAC;aACjB,CAAC,CAAA;YAEF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE;gBACjD,IAAI,EAAE,0BAA0B;gBAChC,QAAQ;gBACR,YAAY,EAAE,KAAK,CAAC,GAAG;gBACvB,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ;gBACtC,cAAc;gBACd,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,KAAK;gBACX,aAAa,EAAE,CAAC;aACjB,CAAC,CAAA;YAEF,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAA;QACnD,CAAC,CAAC,CAAA;IACJ,CAAC,CACF,CAAA;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAClD;IACE,MAAM,EAAE,iBAAiB;IACzB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IACtD,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,CAAC;CAChB,EACD,KAAK,EAAE,OAAiC,EAAE,EAAE;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,CAAA;IACjD,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,CAAA;IACpE,CAAC;IAED,MAAM,MAAM,GAAG,oCAAoC,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3E,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAA;IAElF,IAAI,CAAC;QACH,OAAO,MAAM,kCAAkC,CAAC,OAAO,EAAE;YACvD,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;YAClC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;YAClC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;YACpC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;YAC9B,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;YAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;YAC1C,KAAK,EAAE;gBACL,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,MAAM,EAAE,KAAK,CAAC,MAAmD;aAClE;YACD,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;SACrB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,YAAY,aAAa;YAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAA;QACjE,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/toggle-mutual-aid-visibility.d.ts b/functions/lib/callables/toggle-mutual-aid-visibility.d.ts
new file mode 100644
index 00000000..4477680f
--- /dev/null
+++ b/functions/lib/callables/toggle-mutual-aid-visibility.d.ts
@@ -0,0 +1,9 @@
+import { type Firestore } from 'firebase-admin/firestore';
+export declare function toggleMutualAidVisibilityCore(db: Firestore, input: {
+    agencyId: string;
+    visible: boolean;
+}, actor: {
+    uid: string;
+}): Promise<void>;
+export declare const toggleMutualAidVisibility: import("firebase-functions/https").CallableFunction<any, Promise<void>, unknown>;
+//# sourceMappingURL=toggle-mutual-aid-visibility.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/toggle-mutual-aid-visibility.d.ts.map b/functions/lib/callables/toggle-mutual-aid-visibility.d.ts.map
new file mode 100644
index 00000000..a2148b1b
--- /dev/null
+++ b/functions/lib/callables/toggle-mutual-aid-visibility.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"toggle-mutual-aid-visibility.d.ts","sourceRoot":"","sources":["../../src/callables/toggle-mutual-aid-visibility.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAIvE,wBAAsB,6BAA6B,CACjD,EAAE,EAAE,SAAS,EACb,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,EAC7C,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACrB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,eAAO,MAAM,yBAAyB,kFAUrC,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/toggle-mutual-aid-visibility.js b/functions/lib/callables/toggle-mutual-aid-visibility.js
new file mode 100644
index 00000000..0f6267ed
--- /dev/null
+++ b/functions/lib/callables/toggle-mutual-aid-visibility.js
@@ -0,0 +1,22 @@
+import { onCall } from 'firebase-functions/v2/https';
+import { getFirestore } from 'firebase-admin/firestore';
+import { requireAuth } from './https-error.js';
+import { streamAuditEvent } from '../services/audit-stream.js';
+export async function toggleMutualAidVisibilityCore(db, input, actor) {
+    await db.collection('agencies').doc(input.agencyId).update({
+        mutualAidVisible: input.visible,
+    });
+    void streamAuditEvent({
+        eventType: 'mutual_aid_visibility_toggled',
+        actorUid: actor.uid,
+        targetCollection: 'agencies',
+        targetDocumentId: input.agencyId,
+        metadata: { visible: input.visible },
+        occurredAt: Date.now(),
+    });
+}
+export const toggleMutualAidVisibility = onCall({ region: 'asia-southeast1', enforceAppCheck: true }, async (request) => {
+    const { uid } = requireAuth(request, ['superadmin', 'pdrrmo']);
+    await toggleMutualAidVisibilityCore(getFirestore(), request.data, { uid });
+});
+//# sourceMappingURL=toggle-mutual-aid-visibility.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/toggle-mutual-aid-visibility.js.map b/functions/lib/callables/toggle-mutual-aid-visibility.js.map
new file mode 100644
index 00000000..51b18797
--- /dev/null
+++ b/functions/lib/callables/toggle-mutual-aid-visibility.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"toggle-mutual-aid-visibility.js","sourceRoot":"","sources":["../../src/callables/toggle-mutual-aid-visibility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AACpD,OAAO,EAAE,YAAY,EAAkB,MAAM,0BAA0B,CAAA;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAE9D,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,EAAa,EACb,KAA6C,EAC7C,KAAsB;IAEtB,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;QACzD,gBAAgB,EAAE,KAAK,CAAC,OAAO;KAChC,CAAC,CAAA;IACF,KAAK,gBAAgB,CAAC;QACpB,SAAS,EAAE,+BAA+B;QAC1C,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,gBAAgB,EAAE,UAAU;QAC5B,gBAAgB,EAAE,KAAK,CAAC,QAAQ;QAChC,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;QACpC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAC7C,EAAE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,IAAI,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,EAAE;IAChB,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC9D,MAAM,6BAA6B,CACjC,YAAY,EAAE,EACd,OAAO,CAAC,IAA8C,EACtD,EAAE,GAAG,EAAE,CACR,CAAA;AACH,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/trigger-sos.d.ts b/functions/lib/callables/trigger-sos.d.ts
new file mode 100644
index 00000000..f5e7da93
--- /dev/null
+++ b/functions/lib/callables/trigger-sos.d.ts
@@ -0,0 +1,25 @@
+import { Firestore, Timestamp } from 'firebase-admin/firestore';
+import { z } from 'zod';
+export declare const triggerSosSchema: z.ZodObject<{
+    dispatchId: z.ZodString;
+}, z.core.$strict>;
+export interface TriggerSosCoreDeps {
+    dispatchId: string;
+    actor: {
+        uid: string;
+        claims: {
+            role: string;
+            municipalityId?: string;
+        };
+    };
+    now: Timestamp;
+}
+export declare function triggerSosCore(db: Firestore, deps: TriggerSosCoreDeps): Promise<{
+    status: 'sos_triggered';
+    dispatchId: string;
+}>;
+export declare const triggerSOS: import("firebase-functions/https").CallableFunction<unknown, Promise<{
+    status: "sos_triggered";
+    dispatchId: string;
+}>, unknown>;
+//# sourceMappingURL=trigger-sos.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/callables/trigger-sos.d.ts.map b/functions/lib/callables/trigger-sos.d.ts.map
new file mode 100644
index 00000000..20ae14cf
--- /dev/null
+++ b/functions/lib/callables/trigger-sos.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"trigger-sos.d.ts","sourceRoot":"","sources":["../../src/callables/trigger-sos.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB,eAAO,MAAM,gBAAgB;;kBAIlB,CAAA;AAEX,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;IACzE,GAAG,EAAE,SAAS,CAAA;CACf;AAED,wBAAsB,cAAc,CAClC,EAAE,EAAE,SAAS,EACb,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAmE1D;AAED,eAAO,MAAM,UAAU;YArEF,eAAe;gBAAc,MAAM;YAmGvD,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/callables/trigger-sos.js b/functions/lib/callables/trigger-sos.js
new file mode 100644
index 00000000..cbb102c7
--- /dev/null
+++ b/functions/lib/callables/trigger-sos.js
@@ -0,0 +1,90 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https';
+import { Firestore, Timestamp } from 'firebase-admin/firestore';
+import { z } from 'zod';
+import { BantayogError, BantayogErrorCode } from '@bantayog/shared-validators';
+import { adminDb } from '../admin-init.js';
+import { bantayogErrorToHttps, requireAuth } from './https-error.js';
+import { checkRateLimit } from '../services/rate-limit.js';
+export const triggerSosSchema = z
+    .object({
+    dispatchId: z.string().min(1).max(128),
+})
+    .strict();
+export async function triggerSosCore(db, deps) {
+    const { dispatchId, actor, now } = deps;
+    const rl = await checkRateLimit(db, {
+        key: `triggerSOS:${actor.uid}`,
+        limit: 5,
+        windowSeconds: 300,
+        now,
+    });
+    if (!rl.allowed) {
+        throw new BantayogError(BantayogErrorCode.RATE_LIMITED, 'rate limit exceeded', {
+            retryAfterSeconds: rl.retryAfterSeconds,
+        });
+    }
+    return db.runTransaction(async (tx) => {
+        const dispatchRef = db.collection('dispatches').doc(dispatchId);
+        const dispatchSnap = await tx.get(dispatchRef);
+        if (!dispatchSnap.exists) {
+            throw new BantayogError(BantayogErrorCode.NOT_FOUND, 'Dispatch not found');
+        }
+        const dispatch = dispatchSnap.data();
+        if (dispatch.assignedTo?.uid !== actor.uid) {
+            throw new BantayogError(BantayogErrorCode.FORBIDDEN, 'Not assigned to this dispatch');
+        }
+        const activeStates = ['accepted', 'acknowledged', 'en_route', 'on_scene'];
+        if (!activeStates.includes(dispatch.status)) {
+            throw new BantayogError(BantayogErrorCode.FAILED_PRECONDITION, `Dispatch must be active (current: ${dispatch.status})`);
+        }
+        if (dispatch.sosTriggeredAt != null) {
+            throw new BantayogError(BantayogErrorCode.FAILED_PRECONDITION, 'SOS already triggered for this dispatch');
+        }
+        tx.update(dispatchRef, {
+            sosTriggeredAt: now.toMillis(),
+            lastStatusAt: now.toMillis(),
+        });
+        const nowMs = now.toMillis();
+        tx.set(db.collection('admin_notifications').doc(), {
+            type: 'sos_triggered',
+            dispatchId,
+            responderUid: actor.uid,
+            agencyId: dispatch.assignedTo.agencyId,
+            municipalityId: dispatch.assignedTo.municipalityId,
+            createdAt: nowMs,
+            read: false,
+            schemaVersion: 1,
+        });
+        return { status: 'sos_triggered', dispatchId };
+    });
+}
+export const triggerSOS = onCall({
+    region: 'asia-southeast1',
+    enforceAppCheck: process.env.NODE_ENV === 'production',
+    timeoutSeconds: 10,
+    minInstances: 1,
+}, async (request) => {
+    const actor = requireAuth(request, ['responder']);
+    if (actor.claims.accountStatus !== 'active') {
+        throw new HttpsError('permission-denied', 'account is not active');
+    }
+    const parsed = triggerSosSchema.safeParse(request.data);
+    if (!parsed.success)
+        throw new HttpsError('invalid-argument', 'malformed payload');
+    try {
+        return await triggerSosCore(adminDb, {
+            dispatchId: parsed.data.dispatchId,
+            actor: {
+                uid: actor.uid,
+                claims: actor.claims,
+            },
+            now: Timestamp.now(),
+        });
+    }
+    catch (err) {
+        if (err instanceof BantayogError)
+            throw bantayogErrorToHttps(err);
+        throw err;
+    }
+});
+//# sourceMappingURL=trigger-sos.js.map
\ No newline at end of file
diff --git a/functions/lib/callables/trigger-sos.js.map b/functions/lib/callables/trigger-sos.js.map
new file mode 100644
index 00000000..c0acf8c9
--- /dev/null
+++ b/functions/lib/callables/trigger-sos.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"trigger-sos.js","sourceRoot":"","sources":["../../src/callables/trigger-sos.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAwB,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACtF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACvC,CAAC;KACD,MAAM,EAAE,CAAA;AAQX,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAa,EACb,IAAwB;IAExB,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAEvC,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE;QAClC,GAAG,EAAE,cAAc,KAAK,CAAC,GAAG,EAAE;QAC9B,KAAK,EAAE,CAAC;QACR,aAAa,EAAE,GAAG;QAClB,GAAG;KACJ,CAAC,CAAA;IACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,YAAY,EAAE,qBAAqB,EAAE;YAC7E,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;SACxC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACpC,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC/D,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAE9C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;QAC5E,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAIjC,CAAA;QAED,IAAI,QAAQ,CAAC,UAAU,EAAE,GAAG,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;YAC3C,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAA;QACvF,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;QACzE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,mBAAmB,EACrC,qCAAqC,QAAQ,CAAC,MAAM,GAAG,CACxD,CAAA;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,mBAAmB,EACrC,yCAAyC,CAC1C,CAAA;QACH,CAAC;QAED,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE;YACrB,cAAc,EAAE,GAAG,CAAC,QAAQ,EAAE;YAC9B,YAAY,EAAE,GAAG,CAAC,QAAQ,EAAE;SAC7B,CAAC,CAAA;QAEF,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC5B,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE;YACjD,IAAI,EAAE,eAAe;YACrB,UAAU;YACV,YAAY,EAAE,KAAK,CAAC,GAAG;YACvB,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ;YACtC,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC,cAAc;YAClD,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,KAAK;YACX,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;QAEF,OAAO,EAAE,MAAM,EAAE,eAAwB,EAAE,UAAU,EAAE,CAAA;IACzD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAC9B;IACE,MAAM,EAAE,iBAAiB;IACzB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IACtD,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,CAAC;CAChB,EACD,KAAK,EAAE,OAAiC,EAAE,EAAE;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,CAAA;IACjD,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,CAAA;IACpE,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAA;IAElF,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,CAAC,OAAO,EAAE;YACnC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;YAClC,KAAK,EAAE;gBACL,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,MAAM,EAAE,KAAK,CAAC,MAAmD;aAClE;YACD,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;SACrB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,YAAY,aAAa;YAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAA;QACjE,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/scheduled/project-responder-locations.d.ts b/functions/lib/scheduled/project-responder-locations.d.ts
new file mode 100644
index 00000000..05c44a92
--- /dev/null
+++ b/functions/lib/scheduled/project-responder-locations.d.ts
@@ -0,0 +1,16 @@
+import type { Database } from 'firebase-admin/database';
+export type Freshness = 'fresh' | 'degraded' | 'stale' | 'offline';
+export interface ProjectionEntry {
+    lat: number;
+    lng: number;
+    freshness: Freshness;
+    lastSeenAt: number;
+}
+export declare function roundToGrid(value: number): number;
+export declare function computeFreshness(telemetryAgeMs: number): Freshness;
+export interface ProjectResponderLocationsDeps {
+    now: number;
+}
+export declare function projectResponderLocationsCore(database: Database, deps: ProjectResponderLocationsDeps): Promise<void>;
+export declare const projectResponderLocations: import("firebase-functions/scheduler").ScheduleFunction;
+//# sourceMappingURL=project-responder-locations.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/scheduled/project-responder-locations.d.ts.map b/functions/lib/scheduled/project-responder-locations.d.ts.map
new file mode 100644
index 00000000..ff8ad0df
--- /dev/null
+++ b/functions/lib/scheduled/project-responder-locations.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"project-responder-locations.d.ts","sourceRoot":"","sources":["../../src/scheduled/project-responder-locations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAYvD,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,CAAA;AAElE,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAgB,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAKlE;AAED,MAAM,WAAW,6BAA6B;IAC5C,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC,CAwFf;AAED,eAAO,MAAM,yBAAyB,yDAgBrC,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/scheduled/project-responder-locations.js b/functions/lib/scheduled/project-responder-locations.js
new file mode 100644
index 00000000..1ad3e763
--- /dev/null
+++ b/functions/lib/scheduled/project-responder-locations.js
@@ -0,0 +1,102 @@
+import { onSchedule } from 'firebase-functions/v2/scheduler';
+import { rtdb } from '../admin-init.js';
+import { logDimension } from '@bantayog/shared-validators';
+const log = logDimension('projectResponderLocations');
+const GRID_PRECISION = 3; // 0.001 degrees ≈ 111m
+const FRESH_MS = 30_000;
+const DEGRADED_MS = 90_000;
+const STALE_MS = 300_000;
+const TTL_MS = 90_000;
+export function roundToGrid(value) {
+    return Number(value.toFixed(GRID_PRECISION));
+}
+export function computeFreshness(telemetryAgeMs) {
+    if (telemetryAgeMs < FRESH_MS)
+        return 'fresh';
+    if (telemetryAgeMs < DEGRADED_MS)
+        return 'degraded';
+    if (telemetryAgeMs < STALE_MS)
+        return 'stale';
+    return 'offline';
+}
+export async function projectResponderLocationsCore(database, deps) {
+    const now = deps.now;
+    const [locationsSnap, indexSnap] = await Promise.all([
+        database.ref('responder_locations').get(),
+        database.ref('responder_index').get(),
+    ]);
+    const locations = (locationsSnap.val() ?? {});
+    const index = (indexSnap.val() ?? {});
+    const byMunicipality = {};
+    const offlineUids = [];
+    for (const [uid, loc] of Object.entries(locations)) {
+        if (typeof loc.capturedAt !== 'number' ||
+            typeof loc.lat !== 'number' ||
+            typeof loc.lng !== 'number') {
+            continue;
+        }
+        const telemetryAgeMs = now - loc.capturedAt;
+        const freshness = computeFreshness(telemetryAgeMs);
+        const muniId = index[uid]?.municipalityId;
+        if (freshness === 'offline') {
+            if (muniId) {
+                offlineUids.push({ municipalityId: muniId, uid });
+            }
+            continue;
+        }
+        if (!muniId) {
+            log({
+                severity: 'WARNING',
+                code: 'projection.missing_municipality',
+                message: `No municipalityId found for responder ${uid}`,
+            });
+            continue;
+        }
+        byMunicipality[muniId] ??= {};
+        const telemetryTs = typeof loc.capturedAt === 'number' ? loc.capturedAt : now;
+        byMunicipality[muniId][uid] = {
+            lat: roundToGrid(loc.lat),
+            lng: roundToGrid(loc.lng),
+            freshness,
+            lastSeenAt: telemetryTs,
+        };
+    }
+    const writeOps = [];
+    // Write/update projection entries
+    for (const [muniId, entries] of Object.entries(byMunicipality)) {
+        for (const [uid, entry] of Object.entries(entries)) {
+            writeOps.push(database.ref(`shared_projection/${muniId}/${uid}`).set(entry));
+        }
+    }
+    // Delete offline responders from projection
+    for (const { municipalityId, uid } of offlineUids) {
+        writeOps.push(database.ref(`shared_projection/${municipalityId}/${uid}`).remove());
+    }
+    // TTL cleanup: delete projection entries not updated in 90s
+    const projectionSnap = await database.ref('shared_projection').get();
+    const projections = (projectionSnap.val() ?? {});
+    for (const [muniId, entries] of Object.entries(projections)) {
+        for (const [uid, entry] of Object.entries(entries)) {
+            if (typeof entry.lastSeenAt === 'number' && now - entry.lastSeenAt > TTL_MS) {
+                writeOps.push(database.ref(`shared_projection/${muniId}/${uid}`).remove());
+            }
+        }
+    }
+    await Promise.all(writeOps);
+}
+export const projectResponderLocations = onSchedule({ schedule: 'every 30 seconds', region: 'asia-southeast1', timeoutSeconds: 60 }, async () => {
+    try {
+        await projectResponderLocationsCore(rtdb, { now: Date.now() });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        log({
+            severity: 'ERROR',
+            code: 'projection.failed',
+            message: `Responder location projection failed: ${message}`,
+            data: { error: message },
+        });
+        throw err;
+    }
+});
+//# sourceMappingURL=project-responder-locations.js.map
\ No newline at end of file
diff --git a/functions/lib/scheduled/project-responder-locations.js.map b/functions/lib/scheduled/project-responder-locations.js.map
new file mode 100644
index 00000000..c44896c3
--- /dev/null
+++ b/functions/lib/scheduled/project-responder-locations.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"project-responder-locations.js","sourceRoot":"","sources":["../../src/scheduled/project-responder-locations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;AAE5D,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAE1D,MAAM,GAAG,GAAG,YAAY,CAAC,2BAA2B,CAAC,CAAA;AAErD,MAAM,cAAc,GAAG,CAAC,CAAA,CAAC,uBAAuB;AAChD,MAAM,QAAQ,GAAG,MAAM,CAAA;AACvB,MAAM,WAAW,GAAG,MAAM,CAAA;AAC1B,MAAM,QAAQ,GAAG,OAAO,CAAA;AACxB,MAAM,MAAM,GAAG,MAAM,CAAA;AAWrB,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,cAAsB;IACrD,IAAI,cAAc,GAAG,QAAQ;QAAE,OAAO,OAAO,CAAA;IAC7C,IAAI,cAAc,GAAG,WAAW;QAAE,OAAO,UAAU,CAAA;IACnD,IAAI,cAAc,GAAG,QAAQ;QAAE,OAAO,OAAO,CAAA;IAC7C,OAAO,SAAS,CAAA;AAClB,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,QAAkB,EAClB,IAAmC;IAEnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;IAEpB,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAE;QACzC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,EAAE;KACtC,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,CAG3C,CAAA;IACD,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAgD,CAAA;IAEpF,MAAM,cAAc,GAAoD,EAAE,CAAA;IAC1E,MAAM,WAAW,GAA8C,EAAE,CAAA;IAEjE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,IACE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;YAClC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;YAC3B,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAC3B,CAAC;YACD,SAAQ;QACV,CAAC;QAED,MAAM,cAAc,GAAG,GAAG,GAAG,GAAG,CAAC,UAAU,CAAA;QAC3C,MAAM,SAAS,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAA;QAClD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,cAAc,CAAA;QAEzC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,MAAM,EAAE,CAAC;gBACX,WAAW,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YACnD,CAAC;YACD,SAAQ;QACV,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC;gBACF,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,iCAAiC;gBACvC,OAAO,EAAE,yCAAyC,GAAG,EAAE;aACxD,CAAC,CAAA;YACF,SAAQ;QACV,CAAC;QAED,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAE7B,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAA;QAE7E,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG;YAC5B,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YACzB,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YACzB,SAAS;YACT,UAAU,EAAE,WAAW;SACxB,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAuB,EAAE,CAAA;IAEvC,kCAAkC;IAClC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,KAAK,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,WAAW,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,cAAc,IAAI,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IACpF,CAAC;IAED,4DAA4D;IAC5D,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,GAAG,EAAE,CAAA;IACpE,MAAM,WAAW,GAAG,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,CAG9C,CAAA;IAED,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,MAAM,EAAE,CAAC;gBAC5E,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;YAC5E,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;AAC7B,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,UAAU,CACjD,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,EAAE,EAAE,EAC/E,KAAK,IAAI,EAAE;IACT,IAAI,CAAC;QACH,MAAM,6BAA6B,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAChE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChE,GAAG,CAAC;YACF,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,yCAAyC,OAAO,EAAE;YAC3D,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;SACzB,CAAC,CAAA;QACF,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/services/audit-stream.d.ts b/functions/lib/services/audit-stream.d.ts
new file mode 100644
index 00000000..86de4f7b
--- /dev/null
+++ b/functions/lib/services/audit-stream.d.ts
@@ -0,0 +1,18 @@
+/**
+ * audit-stream.ts
+ *
+ * Fire-and-forget audit event streaming to BigQuery.
+ * All PRE-7 callables call streamAuditEvent() — never throws.
+ * Requires infra: bantayog_audit.streaming_events table — see infra/bigquery/
+ */
+export interface AuditStreamEvent {
+    eventType: string;
+    actorUid: string;
+    sessionId?: string;
+    targetCollection?: string;
+    targetDocumentId?: string;
+    metadata?: Record<string, unknown>;
+    occurredAt: number;
+}
+export declare function streamAuditEvent(event: AuditStreamEvent): Promise<void>;
+//# sourceMappingURL=audit-stream.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/services/audit-stream.d.ts.map b/functions/lib/services/audit-stream.d.ts.map
new file mode 100644
index 00000000..826c48e0
--- /dev/null
+++ b/functions/lib/services/audit-stream.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"audit-stream.d.ts","sourceRoot":"","sources":["../../src/services/audit-stream.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,UAAU,EAAE,MAAM,CAAA;CACnB;AAKD,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAM7E"}
\ No newline at end of file
diff --git a/functions/lib/services/audit-stream.js b/functions/lib/services/audit-stream.js
new file mode 100644
index 00000000..31050dd7
--- /dev/null
+++ b/functions/lib/services/audit-stream.js
@@ -0,0 +1,19 @@
+/**
+ * audit-stream.ts
+ *
+ * Fire-and-forget audit event streaming to BigQuery.
+ * All PRE-7 callables call streamAuditEvent() — never throws.
+ * Requires infra: bantayog_audit.streaming_events table — see infra/bigquery/
+ */
+import { BigQuery } from '@google-cloud/bigquery';
+const bq = new BigQuery();
+const table = bq.dataset('bantayog_audit').table('streaming_events');
+export async function streamAuditEvent(event) {
+    try {
+        await table.insert([event]);
+    }
+    catch (err) {
+        console.warn('[audit-stream] failed to stream event', event.eventType, err);
+    }
+}
+//# sourceMappingURL=audit-stream.js.map
\ No newline at end of file
diff --git a/functions/lib/services/audit-stream.js.map b/functions/lib/services/audit-stream.js.map
new file mode 100644
index 00000000..f1c34f30
--- /dev/null
+++ b/functions/lib/services/audit-stream.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"audit-stream.js","sourceRoot":"","sources":["../../src/services/audit-stream.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAYjD,MAAM,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAA;AACzB,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;AAEpE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAuB;IAC5D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IAC7E,CAAC;AACH,CAAC"}
\ No newline at end of file
diff --git a/functions/lib/triggers/audit-export-batch.d.ts b/functions/lib/triggers/audit-export-batch.d.ts
new file mode 100644
index 00000000..90ebf112
--- /dev/null
+++ b/functions/lib/triggers/audit-export-batch.d.ts
@@ -0,0 +1,2 @@
+export declare const auditExportBatch: import("firebase-functions/scheduler").ScheduleFunction;
+//# sourceMappingURL=audit-export-batch.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/triggers/audit-export-batch.d.ts.map b/functions/lib/triggers/audit-export-batch.d.ts.map
new file mode 100644
index 00000000..659d27e0
--- /dev/null
+++ b/functions/lib/triggers/audit-export-batch.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"audit-export-batch.d.ts","sourceRoot":"","sources":["../../src/triggers/audit-export-batch.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,gBAAgB,yDAmB5B,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/triggers/audit-export-batch.js b/functions/lib/triggers/audit-export-batch.js
new file mode 100644
index 00000000..412a168a
--- /dev/null
+++ b/functions/lib/triggers/audit-export-batch.js
@@ -0,0 +1,25 @@
+import { onSchedule } from 'firebase-functions/v2/scheduler';
+import { BigQuery } from '@google-cloud/bigquery';
+import { Logging } from '@google-cloud/logging';
+const bq = new BigQuery();
+const logging = new Logging();
+export const auditExportBatch = onSchedule({ schedule: 'every 5 minutes', region: 'asia-southeast1', timeZone: 'UTC' }, async () => {
+    const table = bq.dataset('bantayog_audit').table('batch_events');
+    const log = logging.log('cloudaudit.googleapis.com%2Factivity');
+    const [entries] = await log.getEntries({ pageSize: 500 });
+    if (entries.length === 0)
+        return;
+    const rows = entries.map((e) => ({
+        logName: e.metadata.logName,
+        resource: JSON.stringify(e.metadata.resource),
+        payload: JSON.stringify(e.data),
+        timestamp: e.metadata.timestamp,
+    }));
+    try {
+        await table.insert(rows);
+    }
+    catch (err) {
+        console.warn('[audit-export-batch] insert failed', err);
+    }
+});
+//# sourceMappingURL=audit-export-batch.js.map
\ No newline at end of file
diff --git a/functions/lib/triggers/audit-export-batch.js.map b/functions/lib/triggers/audit-export-batch.js.map
new file mode 100644
index 00000000..9f646b3c
--- /dev/null
+++ b/functions/lib/triggers/audit-export-batch.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"audit-export-batch.js","sourceRoot":"","sources":["../../src/triggers/audit-export-batch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAE/C,MAAM,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAA;AACzB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAA;AAE7B,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CACxC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,EAC3E,KAAK,IAAI,EAAE;IACT,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IAChE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAA;IAC/D,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAA;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO;QAC3B,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7C,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/B,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS;KAChC,CAAC,CAAC,CAAA;IACH,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAA;IACzD,CAAC;AACH,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/triggers/audit-export-health-check.d.ts b/functions/lib/triggers/audit-export-health-check.d.ts
new file mode 100644
index 00000000..6f7b8384
--- /dev/null
+++ b/functions/lib/triggers/audit-export-health-check.d.ts
@@ -0,0 +1,2 @@
+export declare const auditExportHealthCheck: import("firebase-functions/scheduler").ScheduleFunction;
+//# sourceMappingURL=audit-export-health-check.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/triggers/audit-export-health-check.d.ts.map b/functions/lib/triggers/audit-export-health-check.d.ts.map
new file mode 100644
index 00000000..fd1b0eec
--- /dev/null
+++ b/functions/lib/triggers/audit-export-health-check.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"audit-export-health-check.d.ts","sourceRoot":"","sources":["../../src/triggers/audit-export-health-check.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,sBAAsB,yDAwClC,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/triggers/audit-export-health-check.js b/functions/lib/triggers/audit-export-health-check.js
new file mode 100644
index 00000000..04bb3151
--- /dev/null
+++ b/functions/lib/triggers/audit-export-health-check.js
@@ -0,0 +1,49 @@
+import { onSchedule } from 'firebase-functions/v2/scheduler';
+import { getFirestore, FieldValue } from 'firebase-admin/firestore';
+import { getMessaging } from 'firebase-admin/messaging';
+import { BigQuery } from '@google-cloud/bigquery';
+const bq = new BigQuery();
+function extractLastMs(rows) {
+    const row = rows[0];
+    if (!row?.lastAt?.value)
+        return 0;
+    return Number(row.lastAt.value);
+}
+function extractLastDateMs(rows) {
+    const row = rows[0];
+    if (!row?.lastAt?.value)
+        return 0;
+    return new Date(row.lastAt.value).getTime();
+}
+export const auditExportHealthCheck = onSchedule({ schedule: 'every 10 minutes', region: 'asia-southeast1', timeZone: 'UTC' }, async () => {
+    const db = getFirestore();
+    const now = Date.now();
+    const [streamRows] = await bq.query('SELECT MAX(occurredAt) as lastAt FROM bantayog_audit.streaming_events');
+    const lastStreamMs = extractLastMs(streamRows);
+    const streamingGapSeconds = Math.floor((now - lastStreamMs) / 1000);
+    const [batchRows] = await bq.query('SELECT MAX(timestamp) as lastAt FROM bantayog_audit.batch_events');
+    const lastBatchMs = extractLastDateMs(batchRows);
+    const batchGapSeconds = Math.floor((now - lastBatchMs) / 1000);
+    const healthy = streamingGapSeconds < 60 && batchGapSeconds < 900;
+    await db.doc('system_health/latest').set({
+        streamingGapSeconds,
+        batchGapSeconds,
+        healthy,
+        checkedAt: FieldValue.serverTimestamp(),
+    });
+    if (!healthy) {
+        try {
+            await getMessaging().send({
+                topic: 'superadmin-alerts',
+                notification: {
+                    title: 'Audit pipeline health alert',
+                    body: `Streaming gap: ${String(streamingGapSeconds)}s · Batch gap: ${String(batchGapSeconds)}s`,
+                },
+            });
+        }
+        catch {
+            /* non-critical */
+        }
+    }
+});
+//# sourceMappingURL=audit-export-health-check.js.map
\ No newline at end of file
diff --git a/functions/lib/triggers/audit-export-health-check.js.map b/functions/lib/triggers/audit-export-health-check.js.map
new file mode 100644
index 00000000..12abc3d1
--- /dev/null
+++ b/functions/lib/triggers/audit-export-health-check.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"audit-export-health-check.js","sourceRoot":"","sources":["../../src/triggers/audit-export-health-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAEjD,MAAM,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAA;AAMzB,SAAS,aAAa,CAAC,IAAiB;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK;QAAE,OAAO,CAAC,CAAA;IACjC,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACjC,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAiB;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK;QAAE,OAAO,CAAC,CAAA;IACjC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAA;AAC7C,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAC9C,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,EAC5E,KAAK,IAAI,EAAE;IACT,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CACjC,uEAAuE,CACxE,CAAA;IACD,MAAM,YAAY,GAAG,aAAa,CAAC,UAAoC,CAAC,CAAA;IACxE,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC,CAAA;IAEnE,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAChC,kEAAkE,CACnE,CAAA;IACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,SAAmC,CAAC,CAAA;IAC1E,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,WAAW,CAAC,GAAG,IAAI,CAAC,CAAA;IAE9D,MAAM,OAAO,GAAG,mBAAmB,GAAG,EAAE,IAAI,eAAe,GAAG,GAAG,CAAA;IACjE,MAAM,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC;QACvC,mBAAmB;QACnB,eAAe;QACf,OAAO;QACP,SAAS,EAAE,UAAU,CAAC,eAAe,EAAE;KACxC,CAAC,CAAA;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,YAAY,EAAE,CAAC,IAAI,CAAC;gBACxB,KAAK,EAAE,mBAAmB;gBAC1B,YAAY,EAAE;oBACZ,KAAK,EAAE,6BAA6B;oBACpC,IAAI,EAAE,kBAAkB,MAAM,CAAC,mBAAmB,CAAC,kBAAkB,MAAM,CAAC,eAAe,CAAC,GAAG;iBAChG;aACF,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;AACH,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/triggers/sweep-expired-break-glass-sessions.d.ts b/functions/lib/triggers/sweep-expired-break-glass-sessions.d.ts
new file mode 100644
index 00000000..43f05e98
--- /dev/null
+++ b/functions/lib/triggers/sweep-expired-break-glass-sessions.d.ts
@@ -0,0 +1,2 @@
+export declare const sweepExpiredBreakGlassSessions: import("firebase-functions/scheduler").ScheduleFunction;
+//# sourceMappingURL=sweep-expired-break-glass-sessions.d.ts.map
\ No newline at end of file
diff --git a/functions/lib/triggers/sweep-expired-break-glass-sessions.d.ts.map b/functions/lib/triggers/sweep-expired-break-glass-sessions.d.ts.map
new file mode 100644
index 00000000..17a9942c
--- /dev/null
+++ b/functions/lib/triggers/sweep-expired-break-glass-sessions.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"sweep-expired-break-glass-sessions.d.ts","sourceRoot":"","sources":["../../src/triggers/sweep-expired-break-glass-sessions.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,8BAA8B,yDAyC1C,CAAA"}
\ No newline at end of file
diff --git a/functions/lib/triggers/sweep-expired-break-glass-sessions.js b/functions/lib/triggers/sweep-expired-break-glass-sessions.js
new file mode 100644
index 00000000..7df617bf
--- /dev/null
+++ b/functions/lib/triggers/sweep-expired-break-glass-sessions.js
@@ -0,0 +1,41 @@
+import { onSchedule } from 'firebase-functions/v2/scheduler';
+import { getFirestore } from 'firebase-admin/firestore';
+import { getAuth } from 'firebase-admin/auth';
+import { streamAuditEvent } from '../services/audit-stream.js';
+export const sweepExpiredBreakGlassSessions = onSchedule({ schedule: 'every 5 minutes', region: 'asia-southeast1', timeZone: 'UTC' }, async () => {
+    const db = getFirestore();
+    const adminAuth = getAuth();
+    const now = Date.now();
+    const snap = await db
+        .collection('breakglass_events')
+        .where('action', '==', 'initiated')
+        .where('expiresAt', '<', now)
+        .get();
+    for (const doc of snap.docs) {
+        const { actorUid, sessionId } = doc.data();
+        try {
+            const userRecord = await adminAuth.getUser(actorUid);
+            const currentClaims = userRecord.customClaims ?? {};
+            const remaining = {};
+            for (const [key, value] of Object.entries(currentClaims)) {
+                if (key !== 'breakGlassSession' &&
+                    key !== 'breakGlassSessionId' &&
+                    key !== 'breakGlassExpiresAt') {
+                    remaining[key] = value;
+                }
+            }
+            await adminAuth.setCustomUserClaims(actorUid, remaining);
+            await doc.ref.update({ action: 'auto_expired', expiredAt: now });
+            void streamAuditEvent({
+                eventType: 'break_glass_auto_expired',
+                actorUid,
+                sessionId,
+                occurredAt: now,
+            });
+        }
+        catch (err) {
+            console.error('[sweep-break-glass] failed for session', sessionId, err);
+        }
+    }
+});
+//# sourceMappingURL=sweep-expired-break-glass-sessions.js.map
\ No newline at end of file
diff --git a/functions/lib/triggers/sweep-expired-break-glass-sessions.js.map b/functions/lib/triggers/sweep-expired-break-glass-sessions.js.map
new file mode 100644
index 00000000..312fc68a
--- /dev/null
+++ b/functions/lib/triggers/sweep-expired-break-glass-sessions.js.map
@@ -0,0 +1 @@
+{"version":3,"file":"sweep-expired-break-glass-sessions.js","sourceRoot":"","sources":["../../src/triggers/sweep-expired-break-glass-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAE9D,MAAM,CAAC,MAAM,8BAA8B,GAAG,UAAU,CACtD,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,EAC3E,KAAK,IAAI,EAAE;IACT,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;IACzB,MAAM,SAAS,GAAG,OAAO,EAAE,CAAA;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,UAAU,CAAC,mBAAmB,CAAC;SAC/B,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC;SAClC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC;SAC5B,GAAG,EAAE,CAAA;IAER,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAAI,EAA6C,CAAA;QACrF,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YACpD,MAAM,aAAa,GAAG,UAAU,CAAC,YAAY,IAAI,EAAE,CAAA;YACnD,MAAM,SAAS,GAA4B,EAAE,CAAA;YAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;gBACzD,IACE,GAAG,KAAK,mBAAmB;oBAC3B,GAAG,KAAK,qBAAqB;oBAC7B,GAAG,KAAK,qBAAqB,EAC7B,CAAC;oBACD,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBACxB,CAAC;YACH,CAAC;YACD,MAAM,SAAS,CAAC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;YACxD,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAA;YAChE,KAAK,gBAAgB,CAAC;gBACpB,SAAS,EAAE,0BAA0B;gBACrC,QAAQ;gBACR,SAAS;gBACT,UAAU,EAAE,GAAG;aAChB,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;QACzE,CAAC;IACH,CAAC;AACH,CAAC,CACF,CAAA"}
\ No newline at end of file
diff --git a/functions/package.json b/functions/package.json
index ae731c2f..d008157d 100644
--- a/functions/package.json
+++ b/functions/package.json
@@ -29,6 +29,8 @@
   },
   "dependencies": {
     "@bantayog/shared-data": "workspace:*",
+    "@google-cloud/bigquery": "^7.9.2",
+    "@google-cloud/logging": "^7.0.0",
     "@bantayog/shared-sms-parser": "workspace:*",
     "@bantayog/shared-types": "workspace:*",
     "@bantayog/shared-validators": "workspace:*",
@@ -41,10 +43,12 @@
     "geojson": "^0.5.0",
     "ngeohash": "^0.6.3",
     "sharp": "^0.34.5",
+    "bcryptjs": "^2.4.3",
     "zod": "^4.3.6"
   },
   "devDependencies": {
     "@firebase/rules-unit-testing": "^5.0.0",
+    "@types/bcryptjs": "^2.4.6",
     "@types/ngeohash": "^0.6.8",
     "@types/node": "^20.12.0",
     "firebase": "^12.0.0",
diff --git a/functions/src/__tests__/callables/break-glass.test.ts b/functions/src/__tests__/callables/break-glass.test.ts
new file mode 100644
index 00000000..dccbfb0d
--- /dev/null
+++ b/functions/src/__tests__/callables/break-glass.test.ts
@@ -0,0 +1,387 @@
+import { describe, it, expect, vi, beforeEach, beforeAll } from 'vitest'
+import * as bcrypt from 'bcryptjs'
+import { initiateBreakGlassCore, deactivateBreakGlassCore } from '../../callables/break-glass.js'
+
+const mockStreamAuditEvent = vi.hoisted(() => vi.fn())
+vi.mock('../../services/audit-stream.js', () => ({
+  streamAuditEvent: mockStreamAuditEvent,
+}))
+
+vi.mock('firebase-functions/v2/https', () => ({
+  onCall: vi.fn((_opts: unknown, fn: unknown) => fn),
+  HttpsError: class HttpsError extends Error {
+    code: string
+    constructor(code: string, message: string) {
+      super(message)
+      this.code = code
+    }
+  },
+}))
+
+const CODE_A = 'alpha-bravo-123'
+const CODE_B = 'charlie-delta-456'
+const CODE_WRONG = 'wrong-code-999'
+
+let hashedA: string
+let hashedB: string
+
+beforeAll(async () => {
+  hashedA = await bcrypt.hash(CODE_A, 10)
+  hashedB = await bcrypt.hash(CODE_B, 10)
+})
+
+interface MockDb {
+  doc: ReturnType<typeof vi.fn>
+  collection: ReturnType<typeof vi.fn>
+  eventSetFn: ReturnType<typeof vi.fn>
+  eventUpdateFn: ReturnType<typeof vi.fn>
+}
+
+function makeDb(configData: Record<string, unknown> | null): MockDb {
+  const configDoc = {
+    exists: configData !== null,
+    data: () => configData,
+  }
+  const eventSetFn = vi.fn().mockResolvedValue(undefined)
+  const eventUpdateFn = vi.fn().mockResolvedValue(undefined)
+  return {
+    doc: vi.fn((path: string) => {
+      if (path === 'system_config/break_glass_config') {
+        return { get: vi.fn().mockResolvedValue(configDoc) }
+      }
+      throw new Error(`unexpected db.doc path: ${path}`)
+    }),
+    collection: vi.fn(() => ({
+      doc: vi.fn(() => ({
+        set: eventSetFn,
+        update: eventUpdateFn,
+      })),
+    })),
+    eventSetFn,
+    eventUpdateFn,
+  }
+}
+
+function makeAuth(existingClaims?: Record<string, unknown>) {
+  const setCustomUserClaims = vi.fn().mockResolvedValue(undefined)
+  const getUser = vi.fn().mockResolvedValue({
+    customClaims: existingClaims ?? {
+      role: 'superadmin',
+      municipalityId: 'daet',
+    },
+  })
+  return { setCustomUserClaims, getUser }
+}
+
+describe('initiateBreakGlassCore', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('rejects when config doc is missing', async () => {
+    const db = makeDb(null) as unknown as Parameters<typeof initiateBreakGlassCore>[0]
+    const auth = makeAuth() as unknown as Parameters<typeof initiateBreakGlassCore>[1]
+
+    await expect(
+      initiateBreakGlassCore(
+        db,
+        auth,
+        { codeA: CODE_A, codeB: CODE_B, reason: 'emergency' },
+        { uid: 'u1' },
+      ),
+    ).rejects.toThrow('break_glass_config_missing')
+
+    const err = await initiateBreakGlassCore(
+      db,
+      auth,
+      { codeA: CODE_A, codeB: CODE_B, reason: 'emergency' },
+      { uid: 'u1' },
+    ).catch((e: unknown) => e)
+    expect((err as { code: string }).code).toBe('not-found')
+  })
+
+  it('rejects when config has invalid hashedCodes', async () => {
+    const db = makeDb({ hashedCodes: ['only-one'] }) as unknown as Parameters<
+      typeof initiateBreakGlassCore
+    >[0]
+    const auth = makeAuth() as unknown as Parameters<typeof initiateBreakGlassCore>[1]
+
+    await expect(
+      initiateBreakGlassCore(
+        db,
+        auth,
+        { codeA: CODE_A, codeB: CODE_B, reason: 'emergency' },
+        { uid: 'u1' },
+      ),
+    ).rejects.toThrow('break_glass_config_invalid')
+
+    const err = await initiateBreakGlassCore(
+      db,
+      auth,
+      { codeA: CODE_A, codeB: CODE_B, reason: 'emergency' },
+      { uid: 'u1' },
+    ).catch((e: unknown) => e)
+    expect((err as { code: string }).code).toBe('failed-precondition')
+  })
+
+  it('rejects when hashedCodes is not an array', async () => {
+    const db = makeDb({ hashedCodes: 'not-array' }) as unknown as Parameters<
+      typeof initiateBreakGlassCore
+    >[0]
+    const auth = makeAuth() as unknown as Parameters<typeof initiateBreakGlassCore>[1]
+
+    await expect(
+      initiateBreakGlassCore(
+        db,
+        auth,
+        { codeA: CODE_A, codeB: CODE_B, reason: 'emergency' },
+        { uid: 'u1' },
+      ),
+    ).rejects.toThrow('break_glass_config_invalid')
+  })
+
+  it('rejects when both codes match the same hash', async () => {
+    const db = makeDb({ hashedCodes: [hashedA, hashedA] }) as unknown as Parameters<
+      typeof initiateBreakGlassCore
+    >[0]
+    const auth = makeAuth() as unknown as Parameters<typeof initiateBreakGlassCore>[1]
+
+    await expect(
+      initiateBreakGlassCore(
+        db,
+        auth,
+        { codeA: CODE_A, codeB: CODE_A, reason: 'emergency' },
+        { uid: 'u1' },
+      ),
+    ).rejects.toThrow('break_glass_codes_invalid')
+
+    const err = await initiateBreakGlassCore(
+      db,
+      auth,
+      { codeA: CODE_A, codeB: CODE_A, reason: 'emergency' },
+      { uid: 'u1' },
+    ).catch((e: unknown) => e)
+    expect((err as { code: string }).code).toBe('unauthenticated')
+  })
+
+  it('rejects when codes do not match any hash', async () => {
+    const db = makeDb({ hashedCodes: [hashedA, hashedB] }) as unknown as Parameters<
+      typeof initiateBreakGlassCore
+    >[0]
+    const auth = makeAuth() as unknown as Parameters<typeof initiateBreakGlassCore>[1]
+
+    await expect(
+      initiateBreakGlassCore(
+        db,
+        auth,
+        { codeA: CODE_WRONG, codeB: CODE_WRONG, reason: 'emergency' },
+        { uid: 'u1' },
+      ),
+    ).rejects.toThrow('break_glass_codes_invalid')
+  })
+
+  it('rejects when one code is correct but the other is wrong', async () => {
+    const db = makeDb({ hashedCodes: [hashedA, hashedB] }) as unknown as Parameters<
+      typeof initiateBreakGlassCore
+    >[0]
+    const auth = makeAuth() as unknown as Parameters<typeof initiateBreakGlassCore>[1]
+
+    await expect(
+      initiateBreakGlassCore(
+        db,
+        auth,
+        { codeA: CODE_A, codeB: CODE_WRONG, reason: 'emergency' },
+        { uid: 'u1' },
+      ),
+    ).rejects.toThrow('break_glass_codes_invalid')
+  })
+
+  it('preserves existing custom claims when initiating break-glass session', async () => {
+    const db = makeDb({ hashedCodes: [hashedA, hashedB] }) as unknown as Parameters<
+      typeof initiateBreakGlassCore
+    >[0]
+    const auth = makeAuth()
+
+    const result = await initiateBreakGlassCore(
+      db,
+      auth as unknown as Parameters<typeof initiateBreakGlassCore>[1],
+      { codeA: CODE_A, codeB: CODE_B, reason: 'test' },
+      { uid: 'u1' },
+    )
+
+    const calls = auth.setCustomUserClaims.mock.calls
+    expect(calls.length).toBe(1)
+    const claimsArg = calls[0]![1] as Record<string, unknown>
+    expect(claimsArg.role).toBe('superadmin')
+    expect(claimsArg.breakGlassSession).toBe(true)
+    expect(claimsArg.breakGlassSessionId).toBe(result.sessionId)
+    expect(claimsArg.breakGlassExpiresAt).toBeGreaterThan(Date.now())
+  })
+
+  it('rejects when user already has an active break-glass session', async () => {
+    const db = makeDb({ hashedCodes: [hashedA, hashedB] }) as unknown as Parameters<
+      typeof initiateBreakGlassCore
+    >[0]
+    const auth = makeAuth()
+    auth.getUser = vi.fn().mockResolvedValue({
+      customClaims: {
+        breakGlassSession: true,
+        breakGlassSessionId: 'existing-session',
+        breakGlassExpiresAt: Date.now() + 3600000,
+      },
+    })
+
+    await expect(
+      initiateBreakGlassCore(
+        db,
+        auth as unknown as Parameters<typeof initiateBreakGlassCore>[1],
+        { codeA: CODE_A, codeB: CODE_B, reason: 'test' },
+        { uid: 'u1' },
+      ),
+    ).rejects.toThrow('active_break_glass_session_exists')
+  })
+
+  it('succeeds with correct codes, returns sessionId, sets claims, writes event', async () => {
+    const db = makeDb({ hashedCodes: [hashedA, hashedB] }) as unknown as Parameters<
+      typeof initiateBreakGlassCore
+    >[0]
+    const rawDb = db as unknown as MockDb
+    const auth = makeAuth()
+
+    const result = await initiateBreakGlassCore(
+      db,
+      auth as unknown as Parameters<typeof initiateBreakGlassCore>[1],
+      { codeA: CODE_A, codeB: CODE_B, reason: 'system emergency' },
+      { uid: 'u1' },
+    )
+
+    expect(result.sessionId).toBeTruthy()
+    expect(typeof result.sessionId).toBe('string')
+
+    expect(auth.setCustomUserClaims).toHaveBeenCalledWith(
+      'u1',
+      expect.objectContaining({
+        breakGlassSession: true,
+        breakGlassSessionId: result.sessionId,
+        breakGlassExpiresAt: expect.any(Number),
+      }),
+    )
+
+    expect(rawDb.eventSetFn).toHaveBeenCalledWith(
+      expect.objectContaining({
+        sessionId: result.sessionId,
+        actorUid: 'u1',
+        action: 'initiated',
+        reason: 'system emergency',
+        schemaVersion: 1,
+      }),
+    )
+
+    expect(mockStreamAuditEvent).toHaveBeenCalledWith(
+      expect.objectContaining({
+        eventType: 'break_glass_initiated',
+        actorUid: 'u1',
+        sessionId: result.sessionId,
+      }),
+    )
+  })
+
+  it('succeeds with codes in reversed order', async () => {
+    const db = makeDb({ hashedCodes: [hashedA, hashedB] }) as unknown as Parameters<
+      typeof initiateBreakGlassCore
+    >[0]
+    const auth = makeAuth() as unknown as Parameters<typeof initiateBreakGlassCore>[1]
+
+    const result = await initiateBreakGlassCore(
+      db,
+      auth,
+      { codeA: CODE_B, codeB: CODE_A, reason: 'reversed codes' },
+      { uid: 'u1' },
+    )
+
+    expect(result.sessionId).toBeTruthy()
+  })
+
+  it('sets expiresAt to approximately 4 hours from now', async () => {
+    const db = makeDb({ hashedCodes: [hashedA, hashedB] }) as unknown as Parameters<
+      typeof initiateBreakGlassCore
+    >[0]
+    const auth = makeAuth()
+    const before = Date.now()
+
+    await initiateBreakGlassCore(
+      db,
+      auth as unknown as Parameters<typeof initiateBreakGlassCore>[1],
+      { codeA: CODE_A, codeB: CODE_B, reason: 'test' },
+      { uid: 'u1' },
+    )
+
+    const calls = auth.setCustomUserClaims.mock.calls
+    expect(calls.length).toBe(1)
+    const claimsArg = calls[0]![1] as { breakGlassExpiresAt: number }
+    const diff = claimsArg.breakGlassExpiresAt - before
+    expect(diff).toBeGreaterThanOrEqual(4 * 60 * 60 * 1000 - 2000)
+    expect(diff).toBeLessThanOrEqual(4 * 60 * 60 * 1000 + 2000)
+  })
+})
+
+describe('deactivateBreakGlassCore', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('rejects when no active break glass session in claims', async () => {
+    const db = makeDb({ hashedCodes: [hashedA, hashedB] }) as unknown as Parameters<
+      typeof deactivateBreakGlassCore
+    >[0]
+    const auth = makeAuth() as unknown as Parameters<typeof deactivateBreakGlassCore>[1]
+
+    await expect(deactivateBreakGlassCore(db, auth, { uid: 'u1', claims: {} })).rejects.toThrow(
+      'no_active_break_glass_session',
+    )
+
+    const err = await deactivateBreakGlassCore(db, auth, { uid: 'u1', claims: {} }).catch(
+      (e: unknown) => e,
+    )
+    expect((err as { code: string }).code).toBe('failed-precondition')
+  })
+
+  it('removes break glass claims and keeps remaining claims', async () => {
+    const db = makeDb({ hashedCodes: [hashedA, hashedB] }) as unknown as Parameters<
+      typeof deactivateBreakGlassCore
+    >[0]
+    const rawDb = db as unknown as MockDb
+    const auth = makeAuth()
+
+    await deactivateBreakGlassCore(
+      db,
+      auth as unknown as Parameters<typeof deactivateBreakGlassCore>[1],
+      {
+        uid: 'u1',
+        claims: {
+          breakGlassSession: true,
+          breakGlassSessionId: 'existing-session',
+          breakGlassExpiresAt: 9999,
+        },
+      },
+    )
+
+    expect(auth.setCustomUserClaims).toHaveBeenCalledWith('u1', {
+      role: 'superadmin',
+      municipalityId: 'daet',
+    })
+    expect(rawDb.eventUpdateFn).toHaveBeenCalledWith(
+      expect.objectContaining({
+        action: 'deactivated',
+        deactivatedAt: expect.any(Number),
+      }),
+    )
+    expect(mockStreamAuditEvent).toHaveBeenCalledWith(
+      expect.objectContaining({
+        eventType: 'break_glass_deactivated',
+        actorUid: 'u1',
+        sessionId: 'existing-session',
+      }),
+    )
+  })
+})
diff --git a/functions/src/__tests__/callables/declare-emergency.test.ts b/functions/src/__tests__/callables/declare-emergency.test.ts
new file mode 100644
index 00000000..db4b8777
--- /dev/null
+++ b/functions/src/__tests__/callables/declare-emergency.test.ts
@@ -0,0 +1,123 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import type { Firestore } from 'firebase-admin/firestore'
+
+const mockStreamAuditEvent = vi.hoisted(() => vi.fn())
+const mockSendMassAlertFcm = vi.hoisted(() =>
+  vi.fn().mockResolvedValue({ successCount: 0, failureCount: 0, batchCount: 0 }),
+)
+
+vi.mock('../../services/audit-stream.js', () => ({
+  streamAuditEvent: mockStreamAuditEvent,
+}))
+vi.mock('../../services/fcm-mass-send.js', () => ({
+  sendMassAlertFcm: mockSendMassAlertFcm,
+}))
+vi.mock('firebase-functions/v2/https', () => ({
+  onCall: vi.fn((_opts: unknown, fn: unknown) => fn),
+  HttpsError: class HttpsError extends Error {
+    code: string
+    constructor(code: string, message: string) {
+      super(message)
+      this.code = code
+    }
+  },
+}))
+
+import { declareEmergencyCore } from '../../callables/declare-emergency.js'
+import { ZodError } from 'zod'
+
+function createMockDb() {
+  const setFn = vi.fn().mockResolvedValue(undefined)
+  const docFn = vi.fn(() => ({ set: setFn }))
+  const collectionFn = vi.fn(() => ({ doc: docFn }))
+  return {
+    collection: collectionFn,
+    _setFn: setFn,
+    _collectionFn: collectionFn,
+  } as unknown as Firestore & {
+    _setFn: typeof setFn
+    _collectionFn: typeof collectionFn
+  }
+}
+
+const validInput = {
+  hazardType: 'typhoon',
+  affectedMunicipalityIds: ['daet', 'san-vicente'],
+  message: 'Signal no. 3 raised',
+}
+
+describe('declareEmergencyCore', () => {
+  let mockDb: ReturnType<typeof createMockDb>
+
+  beforeEach(() => {
+    mockDb = createMockDb()
+    mockSendMassAlertFcm.mockClear()
+    mockStreamAuditEvent.mockClear()
+  })
+
+  it('writes alert doc with correct fields', async () => {
+    const result = await declareEmergencyCore(mockDb, validInput, { uid: 'admin-1' })
+
+    expect(result.alertId).toBeDefined()
+    expect(typeof result.alertId).toBe('string')
+    expect(mockDb._collectionFn).toHaveBeenCalledWith('alerts')
+    expect(mockDb._setFn).toHaveBeenCalledTimes(1)
+
+    const calls = mockDb._setFn.mock.calls
+    expect(calls.length).toBeGreaterThan(0)
+    const setArg = (calls[0] as [Record<string, unknown>])[0]
+    expect(setArg.alertType).toBe('emergency')
+    expect(setArg.hazardType).toBe('typhoon')
+    expect(setArg.affectedMunicipalityIds).toEqual(['daet', 'san-vicente'])
+    expect(setArg.message).toBe('Signal no. 3 raised')
+    expect(setArg.declaredBy).toBe('admin-1')
+    expect(setArg.declaredAt).toBeDefined()
+    expect(setArg.schemaVersion).toBe(1)
+  })
+
+  it('throws ZodError for empty hazardType', async () => {
+    await expect(
+      declareEmergencyCore(mockDb, { ...validInput, hazardType: '' }, { uid: 'admin-1' }),
+    ).rejects.toThrow(ZodError)
+  })
+
+  it('throws ZodError for empty municipalityIds', async () => {
+    await expect(
+      declareEmergencyCore(
+        mockDb,
+        { ...validInput, affectedMunicipalityIds: [] },
+        { uid: 'admin-1' },
+      ),
+    ).rejects.toThrow(ZodError)
+  })
+
+  it('calls sendMassAlertFcm with correct params', async () => {
+    await declareEmergencyCore(mockDb, validInput, { uid: 'admin-1' })
+
+    expect(mockSendMassAlertFcm).toHaveBeenCalledWith(mockDb, {
+      municipalityIds: ['daet', 'san-vicente'],
+      title: 'Emergency: typhoon',
+      body: 'Signal no. 3 raised',
+    })
+  })
+
+  it('streams audit event', async () => {
+    const before = Date.now()
+    const result = await declareEmergencyCore(mockDb, validInput, { uid: 'admin-1' })
+    const after = Date.now()
+
+    expect(mockStreamAuditEvent).toHaveBeenCalledWith(
+      expect.objectContaining({
+        eventType: 'emergency_declared',
+        actorUid: 'admin-1',
+        targetDocumentId: result.alertId,
+        metadata: { hazardType: 'typhoon' },
+      }),
+    )
+    const calls = mockStreamAuditEvent.mock.calls
+    expect(calls.length).toBeGreaterThan(0)
+    const callArg = (calls[0] as [{ occurredAt: number }])[0]
+    expect(callArg.occurredAt).toBeGreaterThanOrEqual(before)
+    expect(callArg.occurredAt).toBeLessThanOrEqual(after)
+  })
+})
diff --git a/functions/src/__tests__/callables/https-error.test.ts b/functions/src/__tests__/callables/https-error.test.ts
index 4facc5b7..404a2b5d 100644
--- a/functions/src/__tests__/callables/https-error.test.ts
+++ b/functions/src/__tests__/callables/https-error.test.ts
@@ -4,6 +4,7 @@ import {
   BANTAYOG_TO_HTTPS_CODE,
   bantayogErrorToHttps,
   requireAuth,
+  requireMfaAuth,
 } from '../../callables/https-error.js'
 import { BantayogError, BantayogErrorCode } from '@bantayog/shared-validators'
 
@@ -41,11 +42,23 @@ describe('bantayogErrorToHttps', () => {
 describe('requireAuth', () => {
   it('throws unauthenticated when request.auth is null', () => {
     expect(() => requireAuth({ auth: null }, ['municipal_admin'])).toThrow(HttpsError)
+    try {
+      requireAuth({ auth: null }, ['municipal_admin'])
+    } catch (err) {
+      expect(err).toBeInstanceOf(HttpsError)
+      expect((err as HttpsError).code).toBe('unauthenticated')
+    }
     expect(() => requireAuth({ auth: null }, ['municipal_admin'])).toThrow('sign-in required')
   })
 
   it('throws unauthenticated when request.auth is undefined', () => {
     expect(() => requireAuth({}, ['municipal_admin'])).toThrow(HttpsError)
+    try {
+      requireAuth({}, ['municipal_admin'])
+    } catch (err) {
+      expect(err).toBeInstanceOf(HttpsError)
+      expect((err as HttpsError).code).toBe('unauthenticated')
+    }
   })
 
   it('throws permission-denied when role is not in allowed list', () => {
@@ -56,6 +69,12 @@ describe('requireAuth', () => {
       },
     }
     expect(() => requireAuth(request, ['municipal_admin'])).toThrow('role citizen is not allowed')
+    try {
+      requireAuth(request, ['municipal_admin'])
+    } catch (err) {
+      expect(err).toBeInstanceOf(HttpsError)
+      expect((err as HttpsError).code).toBe('permission-denied')
+    }
   })
 
   it('throws permission-denied when role is missing', () => {
@@ -66,6 +85,12 @@ describe('requireAuth', () => {
       },
     }
     expect(() => requireAuth(request, ['municipal_admin'])).toThrow('role undefined is not allowed')
+    try {
+      requireAuth(request, ['municipal_admin'])
+    } catch (err) {
+      expect(err).toBeInstanceOf(HttpsError)
+      expect((err as HttpsError).code).toBe('permission-denied')
+    }
   })
 
   it('returns uid and claims when role is allowed', () => {
@@ -83,3 +108,85 @@ describe('requireAuth', () => {
     })
   })
 })
+
+describe('requireMfaAuth', () => {
+  it('throws mfa_required when sign_in_second_factor is absent', () => {
+    expect(() => {
+      requireMfaAuth({
+        auth: { uid: 'u1', token: { firebase: {} } },
+      })
+    }).toThrow('mfa_required')
+    try {
+      requireMfaAuth({
+        auth: { uid: 'u1', token: { firebase: {} } },
+      })
+    } catch (err) {
+      expect(err).toBeInstanceOf(HttpsError)
+      expect((err as HttpsError).code).toBe('unauthenticated')
+    }
+  })
+
+  it('passes when sign_in_second_factor is a string', () => {
+    expect(() => {
+      requireMfaAuth({
+        auth: { uid: 'u1', token: { firebase: { sign_in_second_factor: 'totp' } } },
+      })
+    }).not.toThrow()
+  })
+
+  it('throws mfa_required when auth is null', () => {
+    expect(() => {
+      requireMfaAuth({ auth: null })
+    }).toThrow('mfa_required')
+    try {
+      requireMfaAuth({ auth: null })
+    } catch (err) {
+      expect(err).toBeInstanceOf(HttpsError)
+      expect((err as HttpsError).code).toBe('unauthenticated')
+    }
+  })
+
+  it('throws mfa_required when auth is undefined', () => {
+    expect(() => {
+      requireMfaAuth({})
+    }).toThrow('mfa_required')
+    try {
+      requireMfaAuth({})
+    } catch (err) {
+      expect(err).toBeInstanceOf(HttpsError)
+      expect((err as HttpsError).code).toBe('unauthenticated')
+    }
+  })
+
+  it('throws mfa_required when firebase claim is undefined', () => {
+    expect(() => {
+      requireMfaAuth({
+        auth: { uid: 'u1', token: { role: 'superadmin' } },
+      })
+    }).toThrow('mfa_required')
+    try {
+      requireMfaAuth({
+        auth: { uid: 'u1', token: { role: 'superadmin' } },
+      })
+    } catch (err) {
+      expect(err).toBeInstanceOf(HttpsError)
+      expect((err as HttpsError).code).toBe('unauthenticated')
+    }
+  })
+
+  it('throws mfa_required when sign_in_second_factor is a number', () => {
+    expect(() => {
+      requireMfaAuth({
+        auth: { uid: 'u1', token: { firebase: { sign_in_second_factor: 42 } } },
+      })
+    }).toThrow('mfa_required')
+    try {
+      requireMfaAuth({
+        auth: { uid: 'u1', token: { firebase: { sign_in_second_factor: 42 } } },
+      })
+    } catch (err) {
+      expect(err).toBeInstanceOf(HttpsError)
+      expect((err as HttpsError).code).toBe('unauthenticated')
+    }
+  })
+})
diff --git a/functions/src/__tests__/rules/public-collections.rules.test.ts b/functions/src/__tests__/rules/public-collections.rules.test.ts
index 7ef076e6..80bf3352 100644
--- a/functions/src/__tests__/rules/public-collections.rules.test.ts
+++ b/functions/src/__tests__/rules/public-collections.rules.test.ts
@@ -1,7 +1,7 @@
 import { assertFails, assertSucceeds } from '@firebase/rules-unit-testing'
 import { collection, getDocs, addDoc, doc, setDoc, getDoc } from 'firebase/firestore'
 import { afterAll, beforeAll, describe, it } from 'vitest'
-import { authed, createTestEnv } from '../helpers/rules-harness.js'
+import { authed, createTestEnv, unauthed } from '../helpers/rules-harness.js'
 import { seedActiveAccount, seedAgency, staffClaims, ts } from '../helpers/seed-factories.js'
 
 let env: Awaited<ReturnType<typeof createTestEnv>>
@@ -310,4 +310,114 @@ describe('privileged read tests for callable collections', () => {
     )
     await assertSucceeds(getDocs(collection(db, 'incident_response_events')))
   })
+
+  describe('Phase 7 collections', () => {
+    it('any authed user can read provincial_resources', async () => {
+      const db = authed(env, 'citizen-1', staffClaims({ role: 'citizen' }))
+      await assertSucceeds(getDocs(collection(db, 'provincial_resources')))
+    })
+
+    it('unauthed user cannot read provincial_resources', async () => {
+      const db = unauthed(env)
+      await assertFails(getDocs(collection(db, 'provincial_resources')))
+    })
+
+    it('superadmin with active privileged claim can read data_incidents', async () => {
+      const db = authed(
+        env,
+        'super-1',
+        staffClaims({ role: 'provincial_superadmin', permittedMunicipalityIds: ['daet'] }),
+      )
+      await assertSucceeds(getDocs(collection(db, 'data_incidents')))
+    })
+
+    it('non-superadmin cannot read data_incidents', async () => {
+      const db = authed(env, 'citizen-1', staffClaims({ role: 'citizen' }))
+      await assertFails(getDocs(collection(db, 'data_incidents')))
+    })
+
+    it('superadmin with active privileged claim can read erasure_requests', async () => {
+      const db = authed(
+        env,
+        'super-1',
+        staffClaims({ role: 'provincial_superadmin', permittedMunicipalityIds: ['daet'] }),
+      )
+      await assertSucceeds(getDocs(collection(db, 'erasure_requests')))
+    })
+
+    it('non-superadmin cannot read erasure_requests', async () => {
+      const db = authed(env, 'citizen-1', staffClaims({ role: 'citizen' }))
+      await assertFails(getDocs(collection(db, 'erasure_requests')))
+    })
+
+    it('superadmin can read system_health', async () => {
+      const db = authed(
+        env,
+        'super-1',
+        staffClaims({ role: 'provincial_superadmin', permittedMunicipalityIds: ['daet'] }),
+      )
+      await assertSucceeds(getDocs(collection(db, 'system_health')))
+    })
+
+    it('non-superadmin cannot read system_health', async () => {
+      const db = authed(env, 'citizen-1', staffClaims({ role: 'citizen' }))
+      await assertFails(getDocs(collection(db, 'system_health')))
+    })
+
+    it('suspended superadmin cannot read data_incidents', async () => {
+      const db = authed(
+        env,
+        'super-1',
+        staffClaims({
+          role: 'provincial_superadmin',
+          permittedMunicipalityIds: ['daet'],
+          accountStatus: 'suspended',
+        }),
+      )
+      await assertFails(getDocs(collection(db, 'data_incidents')))
+    })
+
+    it('suspended superadmin cannot write data_incidents', async () => {
+      const db = authed(
+        env,
+        'super-1',
+        staffClaims({
+          role: 'provincial_superadmin',
+          permittedMunicipalityIds: ['daet'],
+          accountStatus: 'suspended',
+        }),
+      )
+      await assertFails(
+        addDoc(collection(db, 'data_incidents'), { schemaVersion: 1, createdAt: ts }),
+      )
+    })
+
+    it('suspended superadmin cannot read erasure_requests', async () => {
+      const db = authed(
+        env,
+        'super-1',
+        staffClaims({
+          role: 'provincial_superadmin',
+          permittedMunicipalityIds: ['daet'],
+          accountStatus: 'suspended',
+        }),
+      )
+      await assertFails(getDocs(collection(db, 'erasure_requests')))
+    })
+
+    it('suspended superadmin cannot write erasure_requests', async () => {
+      const db = authed(
+        env,
+        'super-1',
+        staffClaims({
+          role: 'provincial_superadmin',
+          permittedMunicipalityIds: ['daet'],
+          accountStatus: 'suspended',
+        }),
+      )
+      await assertFails(
+        addDoc(collection(db, 'erasure_requests'), { schemaVersion: 1, createdAt: ts }),
+      )
+    })
+  })
 })
diff --git a/functions/src/__tests__/triggers/analytics-snapshot-writer.test.ts b/functions/src/__tests__/triggers/analytics-snapshot-writer.test.ts
index 1a7964f3..7cc81ff8 100644
--- a/functions/src/__tests__/triggers/analytics-snapshot-writer.test.ts
+++ b/functions/src/__tests__/triggers/analytics-snapshot-writer.test.ts
@@ -203,4 +203,50 @@ describe('analyticsSnapshotWriter', () => {
       analyticsSnapshotWriterCore(adminDb, { date: dateStr, now: Timestamp.fromMillis(ts) }),
     ).resolves.not.toThrow()
   })
+
+  it('computes resolvedToday and avgResponseTimeMinutes for province summary', async () => {
+    const dayStart = new Date(`${dateStr}T00:00:00.000Z`).getTime()
+    await testEnv.withSecurityRulesDisabled(async (ctx) => {
+      await setDoc(doc(ctx.firestore(), 'report_ops', 'resolved-r1'), {
+        municipalityId: 'daet',
+        status: 'resolved',
+        severity: 'high',
+        reportType: 'flood',
+        createdAt: dayStart + 3600000,
+        updatedAt: dayStart + 7200000,
+        resolvedAt: dayStart + 7200000,
+        agencyIds: [],
+        activeResponderCount: 0,
+        requiresLocationFollowUp: false,
+        visibility: { scope: 'municipality', sharedWith: [] },
+        schemaVersion: 1,
+      })
+      await setDoc(doc(ctx.firestore(), 'report_ops', 'resolved-r2'), {
+        municipalityId: 'daet',
+        status: 'resolved',
+        severity: 'medium',
+        reportType: 'flood',
+        createdAt: dayStart + 7200000,
+        updatedAt: dayStart + 18000000,
+        resolvedAt: dayStart + 18000000,
+        agencyIds: [],
+        activeResponderCount: 0,
+        requiresLocationFollowUp: false,
+        visibility: { scope: 'municipality', sharedWith: [] },
+        schemaVersion: 1,
+      })
+    })
+
+    await analyticsSnapshotWriterCore(adminDb, { date: dateStr, now: Timestamp.fromMillis(ts) })
+
+    const provinceSnap = await adminDb
+      .collection('analytics_snapshots')
+      .doc(dateStr)
+      .collection('province')
+      .doc('summary')
+      .get()
+    const data = provinceSnap.data()!
+    expect(data.resolvedToday).toBe(2)
+    expect(data.avgResponseTimeMinutes).toBeCloseTo(120, 0)
+  })
 })
diff --git a/functions/src/callables/approve-erasure-request.ts b/functions/src/callables/approve-erasure-request.ts
new file mode 100644
index 00000000..08a30a08
--- /dev/null
+++ b/functions/src/callables/approve-erasure-request.ts
@@ -0,0 +1,65 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https'
+import { getFirestore, type Firestore } from 'firebase-admin/firestore'
+import { z } from 'zod'
+import { requireAuth, requireMfaAuth } from './https-error.js'
+import { streamAuditEvent } from '../services/audit-stream.js'
+
+const inputSchema = z.object({
+  erasureRequestId: z.string().min(1),
+  approved: z.boolean(),
+  reason: z.string().max(1000).optional(),
+})
+
+export async function approveErasureRequestCore(
+  db: Firestore,
+  input: unknown,
+  actor: { uid: string },
+): Promise<void> {
+  const parsed = inputSchema.safeParse(input)
+  if (!parsed.success) {
+    const issues = parsed.error.issues
+    let msg = 'invalid_input'
+    if (issues.length > 0) {
+      const firstIssue = issues[0]
+      if (firstIssue) {
+        msg = firstIssue.message
+      }
+    }
+    throw new HttpsError('invalid-argument', msg)
+  }
+  const data = parsed.data
+
+  await db.runTransaction(async (tx) => {
+    const doc = await tx.get(db.collection('erasure_requests').doc(data.erasureRequestId))
+    if (!doc.exists) {
+      throw new HttpsError('not-found', 'erasure_request_not_found')
+    }
+    const currentStatus = doc.data()?.status
+    if (currentStatus !== 'pending') {
+      throw new HttpsError('failed-precondition', 'erasure_already_reviewed')
+    }
+    const status = data.approved ? 'approved_pending_anonymization' : 'denied'
+    tx.update(doc.ref, {
+      status,
+      reviewedBy: actor.uid,
+      reviewedAt: Date.now(),
+      ...(data.reason ? { reviewReason: data.reason } : {}),
+    })
+    void streamAuditEvent({
+      eventType: 'erasure_request_reviewed',
+      actorUid: actor.uid,
+      targetDocumentId: data.erasureRequestId,
+      metadata: { approved: data.approved },
+      occurredAt: Date.now(),
+    })
+  })
+}
+
+export const approveErasureRequest = onCall(
+  { region: 'asia-southeast1', enforceAppCheck: true },
+  async (request) => {
+    const { uid } = requireAuth(request, ['superadmin'])
+    requireMfaAuth(request)
+    await approveErasureRequestCore(getFirestore(), request.data, { uid })
+  },
+)
diff --git a/functions/src/callables/break-glass.ts b/functions/src/callables/break-glass.ts
new file mode 100644
index 00000000..5484714a
--- /dev/null
+++ b/functions/src/callables/break-glass.ts
@@ -0,0 +1,148 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https'
+import { getFirestore, type Firestore } from 'firebase-admin/firestore'
+import { getAuth, type Auth } from 'firebase-admin/auth'
+import * as bcrypt from 'bcryptjs'
+import { randomUUID } from 'node:crypto'
+import { z } from 'zod'
+import { requireAuth, requireMfaAuth } from './https-error.js'
+import { streamAuditEvent } from '../services/audit-stream.js'
+
+const FOUR_HOURS_MS = 4 * 60 * 60 * 1000
+
+const breakGlassInputSchema = z.object({
+  codeA: z.string().min(1).max(100),
+  codeB: z.string().min(1).max(100),
+  reason: z.string().min(1).max(500),
+})
+
+type BreakGlassInput = z.infer<typeof breakGlassInputSchema>
+
+export async function initiateBreakGlassCore(
+  db: Firestore,
+  adminAuth: Auth,
+  input: BreakGlassInput,
+  actor: { uid: string },
+): Promise<{ sessionId: string }> {
+  const configDoc = await db.doc('system_config/break_glass_config').get()
+  if (!configDoc.exists) {
+    throw new HttpsError('not-found', 'break_glass_config_missing')
+  }
+  const { hashedCodes } = configDoc.data() as { hashedCodes: string[] }
+  if (!Array.isArray(hashedCodes) || hashedCodes.length < 2) {
+    throw new HttpsError('failed-precondition', 'break_glass_config_invalid')
+  }
+
+  let matchedA = -1
+  for (let i = 0; i < hashedCodes.length; i++) {
+    const hash = hashedCodes[i]
+    if (hash && (await bcrypt.compare(input.codeA, hash))) {
+      matchedA = i
+      break
+    }
+  }
+  let matchedB = -1
+  for (let i = 0; i < hashedCodes.length; i++) {
+    const hash = hashedCodes[i]
+    if (hash && (await bcrypt.compare(input.codeB, hash))) {
+      matchedB = i
+      break
+    }
+  }
+  if (matchedA === -1 || matchedB === -1 || matchedA === matchedB) {
+    throw new HttpsError('unauthenticated', 'break_glass_codes_invalid')
+  }
+
+  const userRecord = await adminAuth.getUser(actor.uid)
+  if (userRecord.customClaims?.breakGlassSession) {
+    throw new HttpsError('failed-precondition', 'active_break_glass_session_exists')
+  }
+
+  const sessionId = randomUUID()
+  const now = Date.now()
+  const expiresAt = now + FOUR_HOURS_MS
+
+  const existingClaims = userRecord.customClaims ?? {}
+  await adminAuth.setCustomUserClaims(actor.uid, {
+    ...existingClaims,
+    breakGlassSession: true,
+    breakGlassSessionId: sessionId,
+    breakGlassExpiresAt: expiresAt,
+  })
+
+  await db.collection('breakglass_events').doc(sessionId).set({
+    sessionId,
+    actor: actor.uid,
+    action: 'initiated',
+    reason: input.reason,
+    correlationId: sessionId,
+    createdAt: now,
+    sessionStartedAt: now,
+    expiresAt,
+    schemaVersion: 1,
+  })
+
+  void streamAuditEvent({
+    eventType: 'break_glass_initiated',
+    actorUid: actor.uid,
+    sessionId,
+    occurredAt: now,
+  })
+
+  return { sessionId }
+}
+
+export const initiateBreakGlass = onCall(
+  { region: 'asia-southeast1', enforceAppCheck: true },
+  async (request) => {
+    const { uid } = requireAuth(request, ['superadmin'])
+    requireMfaAuth(request)
+    const data = breakGlassInputSchema.parse(request.data)
+    return initiateBreakGlassCore(getFirestore(), getAuth(), data, { uid })
+  },
+)
+
+export async function deactivateBreakGlassCore(
+  db: Firestore,
+  adminAuth: Auth,
+  actor: { uid: string; claims: Record<string, unknown> },
+): Promise<void> {
+  const sessionId = actor.claims.breakGlassSessionId as string | undefined
+  if (!sessionId) {
+    throw new HttpsError('failed-precondition', 'no_active_break_glass_session')
+  }
+
+  const userRecord = await adminAuth.getUser(actor.uid)
+  const currentClaims = userRecord.customClaims ?? {}
+  const remainingClaims: Record<string, unknown> = {}
+  for (const [key, value] of Object.entries(currentClaims)) {
+    if (
+      key !== 'breakGlassSession' &&
+      key !== 'breakGlassSessionId' &&
+      key !== 'breakGlassExpiresAt'
+    ) {
+      remainingClaims[key] = value
+    }
+  }
+
+  await adminAuth.setCustomUserClaims(actor.uid, remainingClaims)
+  await db.collection('breakglass_events').doc(sessionId).update({
+    action: 'deactivated',
+    deactivatedAt: Date.now(),
+  })
+
+  void streamAuditEvent({
+    eventType: 'break_glass_deactivated',
+    actorUid: actor.uid,
+    sessionId,
+    occurredAt: Date.now(),
+  })
+}
+
+export const deactivateBreakGlass = onCall(
+  { region: 'asia-southeast1', enforceAppCheck: true },
+  async (request) => {
+    const { uid, claims } = requireAuth(request, ['superadmin'])
+    requireMfaAuth(request)
+    await deactivateBreakGlassCore(getFirestore(), getAuth(), { uid, claims })
+  },
+)
diff --git a/functions/src/callables/declare-data-incident.ts b/functions/src/callables/declare-data-incident.ts
new file mode 100644
index 00000000..bf10e46e
--- /dev/null
+++ b/functions/src/callables/declare-data-incident.ts
@@ -0,0 +1,71 @@
+import { onCall } from 'firebase-functions/v2/https'
+import { getFirestore, type Firestore } from 'firebase-admin/firestore'
+import { randomUUID } from 'node:crypto'
+import { z } from 'zod'
+import { requireAuth, requireMfaAuth } from './https-error.js'
+import { streamAuditEvent } from '../services/audit-stream.js'
+
+const dataIncidentInputSchema = z.object({
+  incidentType: z.enum([
+    'unauthorized_access',
+    'data_loss',
+    'data_corruption',
+    'system_breach',
+    'accidental_disclosure',
+  ]),
+  severity: z.enum(['critical', 'high', 'medium', 'low']),
+  affectedCollections: z.array(z.string().min(1)),
+  affectedDataClasses: z.array(z.string().min(1)),
+  estimatedAffectedSubjects: z.number().int().nonnegative().optional(),
+  summary: z.string().min(1).max(2000),
+})
+
+export async function declareDataIncidentCore(
+  db: Firestore,
+  input: unknown,
+  actor: { uid: string },
+): Promise<{ incidentId: string }> {
+  const validated = dataIncidentInputSchema.parse(input)
+  const incidentId = randomUUID()
+  const eventId = randomUUID()
+  const now = Date.now()
+
+  await db.runTransaction(async (tx) => {
+    await Promise.resolve()
+    tx.set(db.collection('data_incidents').doc(incidentId), {
+      ...validated,
+      incidentId,
+      status: 'declared',
+      declaredAt: now,
+      declaredBy: actor.uid,
+      retentionExempt: false,
+      schemaVersion: 1,
+    })
+    tx.set(db.collection('incident_response_events').doc(eventId), {
+      eventId,
+      incidentId,
+      phase: 'declared',
+      recordedBy: actor.uid,
+      recordedAt: now,
+      schemaVersion: 1,
+    })
+  })
+
+  void streamAuditEvent({
+    eventType: 'data_incident_declared',
+    actorUid: actor.uid,
+    targetDocumentId: incidentId,
+    occurredAt: now,
+  })
+
+  return { incidentId }
+}
+
+export const declareDataIncident = onCall(
+  { region: 'asia-southeast1', enforceAppCheck: true },
+  async (request) => {
+    const { uid } = requireAuth(request, ['superadmin'])
+    requireMfaAuth(request)
+    return declareDataIncidentCore(getFirestore(), request.data, { uid })
+  },
+)
diff --git a/functions/src/callables/declare-emergency.ts b/functions/src/callables/declare-emergency.ts
new file mode 100644
index 00000000..a993674d
--- /dev/null
+++ b/functions/src/callables/declare-emergency.ts
@@ -0,0 +1,59 @@
+import { onCall } from 'firebase-functions/v2/https'
+import { getFirestore, type Firestore } from 'firebase-admin/firestore'
+import { randomUUID } from 'node:crypto'
+import { z } from 'zod'
+import { requireAuth, requireMfaAuth } from './https-error.js'
+import { streamAuditEvent } from '../services/audit-stream.js'
+import { sendMassAlertFcm } from '../services/fcm-mass-send.js'
+
+const declareEmergencyInputSchema = z.object({
+  hazardType: z.string().min(1).max(100),
+  affectedMunicipalityIds: z.array(z.string().min(1)).min(1),
+  message: z.string().min(1).max(500),
+})
+
+export async function declareEmergencyCore(
+  db: Firestore,
+  input: unknown,
+  actor: { uid: string },
+): Promise<{ alertId: string }> {
+  const validated = declareEmergencyInputSchema.parse(input)
+  const alertId = randomUUID()
+  const now = Date.now()
+
+  await db.collection('alerts').doc(alertId).set({
+    alertId,
+    alertType: 'emergency',
+    hazardType: validated.hazardType,
+    affectedMunicipalityIds: validated.affectedMunicipalityIds,
+    message: validated.message,
+    declaredBy: actor.uid,
+    declaredAt: now,
+    schemaVersion: 1,
+  })
+
+  void sendMassAlertFcm(db, {
+    municipalityIds: validated.affectedMunicipalityIds,
+    title: `Emergency: ${validated.hazardType}`,
+    body: validated.message,
+  })
+
+  void streamAuditEvent({
+    eventType: 'emergency_declared',
+    actorUid: actor.uid,
+    targetDocumentId: alertId,
+    metadata: { hazardType: validated.hazardType },
+    occurredAt: now,
+  })
+
+  return { alertId }
+}
+
+export const declareEmergency = onCall(
+  { region: 'asia-southeast1', enforceAppCheck: true },
+  async (request) => {
+    const { uid } = requireAuth(request, ['superadmin'])
+    requireMfaAuth(request)
+    return declareEmergencyCore(getFirestore(), request.data, { uid })
+  },
+)
diff --git a/functions/src/callables/https-error.ts b/functions/src/callables/https-error.ts
index 1b133937..ed6f8b28 100644
--- a/functions/src/callables/https-error.ts
+++ b/functions/src/callables/https-error.ts
@@ -46,3 +46,12 @@ export function requireAuth(
   }
   return { uid: request.auth.uid, claims }
 }
+
+export function requireMfaAuth(request: {
+  auth?: { uid: string; token: Record<string, unknown> } | null
+}): void {
+  const firebase = request.auth?.token.firebase as Record<string, unknown> | undefined
+  if (typeof firebase?.sign_in_second_factor !== 'string') {
+    throw new HttpsError('unauthenticated', 'mfa_required')
+  }
+}
diff --git a/functions/src/callables/provincial-resources.ts b/functions/src/callables/provincial-resources.ts
new file mode 100644
index 00000000..0e4689dd
--- /dev/null
+++ b/functions/src/callables/provincial-resources.ts
@@ -0,0 +1,111 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https'
+import { getFirestore, type Firestore } from 'firebase-admin/firestore'
+import { randomUUID } from 'node:crypto'
+import { z } from 'zod'
+import { requireAuth } from './https-error.js'
+import { streamAuditEvent } from '../services/audit-stream.js'
+
+const upsertSchema = z.object({
+  id: z.string().min(1).optional(),
+  name: z.string().min(1).max(200),
+  type: z.string().min(1).max(100),
+  quantity: z.number().int().nonnegative(),
+  unit: z.string().min(1).max(50),
+  location: z.string().min(1).max(300),
+  available: z.boolean(),
+})
+
+const archiveSchema = z.object({
+  id: z.string().min(1),
+})
+
+export async function upsertProvincialResourceCore(
+  db: Firestore,
+  input: unknown,
+  actor: { uid: string },
+): Promise<{ id: string }> {
+  const validated = upsertSchema.parse(input)
+  const id = validated.id ?? randomUUID()
+  const now = Date.now()
+
+  const existingDoc = await db.collection('provincial_resources').doc(id).get()
+  const existingArchived = existingDoc.exists
+    ? ((existingDoc.data() as { archived?: boolean }).archived ?? false)
+    : false
+  const existingData = existingDoc.exists
+    ? (existingDoc.data() as { archivedBy?: string; archivedAt?: number })
+    : { archivedBy: undefined, archivedAt: undefined }
+
+  await db
+    .collection('provincial_resources')
+    .doc(id)
+    .set({
+      id,
+      name: validated.name,
+      type: validated.type,
+      quantity: validated.quantity,
+      unit: validated.unit,
+      location: validated.location,
+      available: validated.available,
+      archived: existingArchived,
+      ...(existingArchived && existingData.archivedBy
+        ? { archivedBy: existingData.archivedBy }
+        : {}),
+      ...(existingArchived && existingData.archivedAt
+        ? { archivedAt: existingData.archivedAt }
+        : {}),
+      lastUpdatedBy: actor.uid,
+      lastUpdatedAt: now,
+      schemaVersion: 1,
+    })
+
+  void streamAuditEvent({
+    eventType: 'provincial_resource_upserted',
+    actorUid: actor.uid,
+    targetCollection: 'provincial_resources',
+    targetDocumentId: id,
+    occurredAt: now,
+  })
+
+  return { id }
+}
+
+export const upsertProvincialResource = onCall(
+  { region: 'asia-southeast1', enforceAppCheck: true },
+  async (request) => {
+    const { uid } = requireAuth(request, ['superadmin', 'pdrrmo'])
+    return upsertProvincialResourceCore(getFirestore(), request.data, { uid })
+  },
+)
+
+export async function archiveProvincialResourceCore(
+  db: Firestore,
+  input: { id: string },
+  actor: { uid: string },
+): Promise<void> {
+  const docSnap = await db.collection('provincial_resources').doc(input.id).get()
+  if (!docSnap.exists) {
+    throw new HttpsError('not-found', 'provincial_resource_not_found')
+  }
+  await db.collection('provincial_resources').doc(input.id).update({
+    archived: true,
+    archivedBy: actor.uid,
+    archivedAt: Date.now(),
+  })
+  void streamAuditEvent({
+    eventType: 'provincial_resource_archived',
+    actorUid: actor.uid,
+    targetCollection: 'provincial_resources',
+    targetDocumentId: input.id,
+    occurredAt: Date.now(),
+  })
+}
+
+export const archiveProvincialResource = onCall(
+  { region: 'asia-southeast1', enforceAppCheck: true },
+  async (request) => {
+    const { uid } = requireAuth(request, ['superadmin', 'pdrrmo'])
+    const { id } = archiveSchema.parse(request.data)
+    return archiveProvincialResourceCore(getFirestore(), { id }, { uid })
+  },
+)
diff --git a/functions/src/callables/record-incident-response-event.ts b/functions/src/callables/record-incident-response-event.ts
new file mode 100644
index 00000000..ece37000
--- /dev/null
+++ b/functions/src/callables/record-incident-response-event.ts
@@ -0,0 +1,86 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https'
+import { getFirestore, type Firestore } from 'firebase-admin/firestore'
+import { randomUUID } from 'node:crypto'
+import { z } from 'zod'
+import { requireAuth, requireMfaAuth } from './https-error.js'
+import { streamAuditEvent } from '../services/audit-stream.js'
+
+const PHASE_ORDER = [
+  'declared',
+  'contained',
+  'preserved',
+  'assessed',
+  'notified_npc',
+  'notified_subjects',
+  'post_report',
+  'closed',
+] as const
+
+const recordEventInputSchema = z.object({
+  incidentId: z.string().min(1),
+  phase: z.enum(PHASE_ORDER),
+  notes: z.string().max(4000).optional(),
+})
+
+export async function recordIncidentResponseEventCore(
+  db: Firestore,
+  input: unknown,
+  actor: { uid: string },
+): Promise<{ eventId: string }> {
+  const validated = recordEventInputSchema.parse(input)
+  const eventId = randomUUID()
+  const now = Date.now()
+
+  await db.runTransaction(async (tx) => {
+    const incidentRef = db.collection('data_incidents').doc(validated.incidentId)
+    const incidentSnap = await tx.get(incidentRef)
+
+    if (!incidentSnap.exists) {
+      throw new HttpsError('not-found', 'incident_not_found')
+    }
+
+    const incidentData = incidentSnap.data() as { status: string }
+    const currentStatus = incidentData.status
+    const currentIndex = PHASE_ORDER.indexOf(currentStatus as (typeof PHASE_ORDER)[number])
+    if (currentIndex === -1) {
+      throw new HttpsError('failed-precondition', 'incident_has_invalid_status')
+    }
+
+    const nextIndex = PHASE_ORDER.indexOf(validated.phase)
+    if (nextIndex !== currentIndex + 1) {
+      throw new HttpsError('failed-precondition', 'invalid_phase_transition')
+    }
+
+    tx.update(incidentRef, { status: validated.phase })
+    tx.set(db.collection('incident_response_events').doc(eventId), {
+      eventId,
+      incidentId: validated.incidentId,
+      phase: validated.phase,
+      notes: validated.notes,
+      recordedBy: actor.uid,
+      recordedAt: now,
+      schemaVersion: 1,
+    })
+  })
+
+  void streamAuditEvent({
+    eventType: 'incident_response_event_recorded',
+    actorUid: actor.uid,
+    sessionId: validated.incidentId,
+    metadata: { phase: validated.phase },
+    occurredAt: now,
+  })
+
+  return { eventId }
+}
+
+export const recordIncidentResponseEvent = onCall(
+  { region: 'asia-southeast1', enforceAppCheck: true },
+  async (request) => {
+    const { uid } = requireAuth(request, ['superadmin'])
+    requireMfaAuth(request)
+    return recordIncidentResponseEventCore(getFirestore(), request.data, {
+      uid,
+    })
+  },
+)
diff --git a/functions/src/callables/set-retention-exempt.ts b/functions/src/callables/set-retention-exempt.ts
new file mode 100644
index 00000000..7e224dd9
--- /dev/null
+++ b/functions/src/callables/set-retention-exempt.ts
@@ -0,0 +1,52 @@
+import { onCall, HttpsError } from 'firebase-functions/v2/https'
+import { getFirestore, type Firestore } from 'firebase-admin/firestore'
+import { z } from 'zod'
+import { requireAuth, requireMfaAuth } from './https-error.js'
+import { streamAuditEvent } from '../services/audit-stream.js'
+
+const inputSchema = z.object({
+  collection: z.enum(['reports', 'report_private', 'report_ops', 'sms_inbox']),
+  documentId: z.string().min(1),
+  exempt: z.boolean(),
+  reason: z.string().min(1),
+})
+
+export async function setRetentionExemptCore(
+  db: Firestore,
+  input: unknown,
+  actor: { uid: string },
+): Promise<void> {
+  const parsed = inputSchema.safeParse(input)
+  if (!parsed.success) {
+    throw new HttpsError('invalid-argument', 'invalid_retention_exempt_payload')
+  }
+  const data = parsed.data
+  const docRef = db.collection(data.collection).doc(data.documentId)
+  const docSnap = await docRef.get()
+  if (!docSnap.exists) {
+    throw new HttpsError('not-found', 'document_not_found')
+  }
+  await docRef.update({
+    retentionExempt: data.exempt,
+    retentionExemptReason: data.reason,
+    retentionExemptSetBy: actor.uid,
+    retentionExemptSetAt: Date.now(),
+  })
+  void streamAuditEvent({
+    eventType: 'retention_exempt_set',
+    actorUid: actor.uid,
+    targetCollection: data.collection,
+    targetDocumentId: data.documentId,
+    metadata: { exempt: data.exempt },
+    occurredAt: Date.now(),
+  })
+}
+
+export const setRetentionExempt = onCall(
+  { region: 'asia-southeast1', enforceAppCheck: true },
+  async (request) => {
+    const { uid } = requireAuth(request, ['superadmin'])
+    requireMfaAuth(request)
+    await setRetentionExemptCore(getFirestore(), request.data, { uid })
+  },
+)
diff --git a/functions/src/callables/toggle-mutual-aid-visibility.ts b/functions/src/callables/toggle-mutual-aid-visibility.ts
new file mode 100644
index 00000000..efd7f0bf
--- /dev/null
+++ b/functions/src/callables/toggle-mutual-aid-visibility.ts
@@ -0,0 +1,46 @@
+import { HttpsError, onCall } from 'firebase-functions/v2/https'
+import { getFirestore, type Firestore } from 'firebase-admin/firestore'
+import { z } from 'zod'
+import { requireAuth } from './https-error.js'
+import { streamAuditEvent } from '../services/audit-stream.js'
+
+const inputSchema = z.object({
+  agencyId: z.string().min(1),
+  visible: z.boolean(),
+})
+
+export async function toggleMutualAidVisibilityCore(
+  db: Firestore,
+  input: unknown,
+  actor: { uid: string },
+): Promise<void> {
+  const parsed = inputSchema.safeParse(input)
+  if (!parsed.success) {
+    throw new HttpsError('invalid-argument', 'invalid_toggle_mutual_aid_visibility_payload')
+  }
+  const { agencyId, visible } = parsed.data
+  const agencyRef = db.collection('agencies').doc(agencyId)
+  const agencyDoc = await agencyRef.get()
+  if (!agencyDoc.exists) {
+    throw new HttpsError('not-found', 'agency_not_found')
+  }
+  await agencyRef.update({
+    mutualAidVisible: visible,
+  })
+  void streamAuditEvent({
+    eventType: 'mutual_aid_visibility_toggled',
+    actorUid: actor.uid,
+    targetCollection: 'agencies',
+    targetDocumentId: agencyId,
+    metadata: { visible },
+    occurredAt: Date.now(),
+  })
+}
+
+export const toggleMutualAidVisibility = onCall(
+  { region: 'asia-southeast1', enforceAppCheck: true },
+  async (request) => {
+    const { uid } = requireAuth(request, ['superadmin', 'pdrrmo'])
+    await toggleMutualAidVisibilityCore(getFirestore(), request.data, { uid })
+  },
+)
diff --git a/functions/src/index.ts b/functions/src/index.ts
index a3b539e1..2fa4dcb6 100644
--- a/functions/src/index.ts
+++ b/functions/src/index.ts
@@ -138,3 +138,17 @@ export { smsDeliveryReport } from './http/sms-delivery-report.js'
 export { smsInboundWebhook } from './http/sms-inbound.js'
 export { smsInboundProcessor } from './firestore/sms-inbound-processor.js'
 export { analyticsSnapshotWriter } from './scheduled/analytics-snapshot-writer.js'
+export { auditExportBatch } from './triggers/audit-export-batch.js'
+export { auditExportHealthCheck } from './triggers/audit-export-health-check.js'
+export { sweepExpiredBreakGlassSessions } from './triggers/sweep-expired-break-glass-sessions.js'
+export { initiateBreakGlass, deactivateBreakGlass } from './callables/break-glass.js'
+export { declareEmergency } from './callables/declare-emergency.js'
+export { declareDataIncident } from './callables/declare-data-incident.js'
+export { recordIncidentResponseEvent } from './callables/record-incident-response-event.js'
+export { setRetentionExempt } from './callables/set-retention-exempt.js'
+export { approveErasureRequest } from './callables/approve-erasure-request.js'
+export { toggleMutualAidVisibility } from './callables/toggle-mutual-aid-visibility.js'
+export {
+  upsertProvincialResource,
+  archiveProvincialResource,
+} from './callables/provincial-resources.js'
diff --git a/functions/src/scheduled/analytics-snapshot-writer.ts b/functions/src/scheduled/analytics-snapshot-writer.ts
index 2a74c097..0e60113c 100644
--- a/functions/src/scheduled/analytics-snapshot-writer.ts
+++ b/functions/src/scheduled/analytics-snapshot-writer.ts
@@ -92,6 +92,41 @@ export async function analyticsSnapshotWriterCore(
     schemaVersion: 1,
   })
 
+  const startOfDayMs = Date.parse(`${date}T00:00:00.000Z`)
+  if (Number.isNaN(startOfDayMs)) {
+    throw new Error(`Invalid date format: ${date}`)
+  }
+  const endOfDayMs = startOfDayMs + 86400000
+  const resolvedSnap = await db
+    .collection('report_ops')
+    .where('status', '==', 'resolved')
+    .where('resolvedAt', '>=', startOfDayMs)
+    .where('resolvedAt', '<', endOfDayMs)
+    .get()
+  const resolvedToday = resolvedSnap.size
+  const resolvedWithTimes = resolvedSnap.docs.filter((d) => {
+    const data = d.data()
+    return (
+      typeof data.createdAt === 'number' &&
+      typeof data.resolvedAt === 'number' &&
+      data.resolvedAt >= data.createdAt
+    )
+  })
+  const avgResponseTimeMinutes =
+    resolvedWithTimes.length > 0
+      ? resolvedWithTimes.reduce((sum, d) => {
+          const data = d.data()
+          return sum + (data.resolvedAt - data.createdAt) / 60000
+        }, 0) / resolvedWithTimes.length
+      : null
+
+  await db
+    .collection('analytics_snapshots')
+    .doc(date)
+    .collection('province')
+    .doc('summary')
+    .set({ resolvedToday, avgResponseTimeMinutes }, { merge: true })
+
   log({
     severity: 'INFO',
     code: 'analytics.done',
diff --git a/functions/src/services/audit-stream.ts b/functions/src/services/audit-stream.ts
new file mode 100644
index 00000000..9d7bdac4
--- /dev/null
+++ b/functions/src/services/audit-stream.ts
@@ -0,0 +1,30 @@
+/**
+ * audit-stream.ts
+ *
+ * Fire-and-forget audit event streaming to BigQuery.
+ * All PRE-7 callables call streamAuditEvent() — never throws.
+ * Requires infra: bantayog_audit.streaming_events table — see infra/bigquery/
+ */
+
+import { BigQuery } from '@google-cloud/bigquery'
+
+export interface AuditStreamEvent {
+  eventType: string
+  actorUid: string
+  sessionId?: string
+  targetCollection?: string
+  targetDocumentId?: string
+  metadata?: Record<string, unknown>
+  occurredAt: number
+}
+
+const bq = new BigQuery()
+const table = bq.dataset('bantayog_audit').table('streaming_events')
+
+export async function streamAuditEvent(event: AuditStreamEvent): Promise<void> {
+  try {
+    await table.insert([event])
+  } catch (err) {
+    console.warn('[audit-stream] failed to stream event', event.eventType, err)
+  }
+}
diff --git a/functions/src/triggers/audit-export-batch.ts b/functions/src/triggers/audit-export-batch.ts
new file mode 100644
index 00000000..3c38f243
--- /dev/null
+++ b/functions/src/triggers/audit-export-batch.ts
@@ -0,0 +1,27 @@
+import { onSchedule } from 'firebase-functions/v2/scheduler'
+import { BigQuery } from '@google-cloud/bigquery'
+import { Logging } from '@google-cloud/logging'
+
+const bq = new BigQuery()
+const logging = new Logging()
+
+export const auditExportBatch = onSchedule(
+  { schedule: 'every 5 minutes', region: 'asia-southeast1', timeZone: 'UTC' },
+  async () => {
+    const table = bq.dataset('bantayog_audit').table('batch_events')
+    const log = logging.log('cloudaudit.googleapis.com%2Factivity')
+    const [entries] = await log.getEntries({ pageSize: 500 })
+    if (entries.length === 0) return
+    const rows = entries.map((e) => ({
+      logName: e.metadata.logName,
+      resource: JSON.stringify(e.metadata.resource),
+      payload: JSON.stringify(e.data),
+      timestamp: e.metadata.timestamp,
+    }))
+    try {
+      await table.insert(rows)
+    } catch (err) {
+      console.warn('[audit-export-batch] insert failed', err)
+    }
+  },
+)
diff --git a/functions/src/triggers/audit-export-health-check.ts b/functions/src/triggers/audit-export-health-check.ts
new file mode 100644
index 00000000..8b6dc2a5
--- /dev/null
+++ b/functions/src/triggers/audit-export-health-check.ts
@@ -0,0 +1,74 @@
+import { onSchedule } from 'firebase-functions/v2/scheduler'
+import { getFirestore, FieldValue } from 'firebase-admin/firestore'
+import { getMessaging } from 'firebase-admin/messaging'
+import { BigQuery } from '@google-cloud/bigquery'
+
+const bq = new BigQuery()
+
+interface LastAtRow {
+  lastAt: { value: string } | null
+}
+
+// extractLastMs expects INT64 epoch (numeric)
+function extractLastMs(rows: LastAtRow[]): number {
+  const row = rows[0]
+  if (!row?.lastAt?.value) return 0
+  const ms = Number(row.lastAt.value)
+  return Number.isNaN(ms) ? 0 : ms
+}
+
+// extractLastDateMs expects timestamp string (from batch_events.timestamp column)
+function extractLastDateMs(rows: LastAtRow[]): number {
+  const row = rows[0]
+  if (!row?.lastAt?.value) return 0
+  const ms = new Date(row.lastAt.value).getTime()
+  return Number.isNaN(ms) ? 0 : ms
+}
+
+export const auditExportHealthCheck = onSchedule(
+  { schedule: 'every 10 minutes', region: 'asia-southeast1', timeZone: 'UTC' },
+  async () => {
+    const db = getFirestore()
+    const now = Date.now()
+
+    const [streamRows] = await bq.query(
+      'SELECT MAX(occurredAt) as lastAt FROM bantayog_audit.streaming_events',
+      { timeoutMs: 30000 },
+    )
+    const lastStreamMs = extractLastMs(streamRows as unknown as LastAtRow[])
+    const streamingGapSeconds = Math.floor((now - lastStreamMs) / 1000)
+
+    const [batchRows] = await bq.query(
+      'SELECT MAX(timestamp) as lastAt FROM bantayog_audit.batch_events',
+      { timeoutMs: 30000 },
+    )
+    const lastBatchMs = extractLastDateMs(batchRows as unknown as LastAtRow[])
+    const batchGapSeconds = Math.floor((now - lastBatchMs) / 1000)
+
+    const healthy = streamingGapSeconds < 60 && batchGapSeconds < 900
+    await db.doc('system_health/latest').set({
+      streamingGapSeconds,
+      batchGapSeconds,
+      healthy,
+      checkedAt: FieldValue.serverTimestamp(),
+    })
+
+    if (!healthy) {
+      try {
+        await getMessaging().send({
+          topic: 'superadmin-alerts',
+          notification: {
+            title: 'Audit pipeline health alert',
+            body: `Streaming gap: ${String(streamingGapSeconds)}s · Batch gap: ${String(batchGapSeconds)}s`,
+          },
+        })
+      } catch (err) {
+        console.error('[audit-export-health-check] failed to send FCM alert', {
+          streamingGapSeconds,
+          batchGapSeconds,
+          message: err instanceof Error ? err.message : String(err),
+        })
+      }
+    }
+  },
+)
diff --git a/functions/src/triggers/sweep-expired-break-glass-sessions.ts b/functions/src/triggers/sweep-expired-break-glass-sessions.ts
new file mode 100644
index 00000000..ddb03bd7
--- /dev/null
+++ b/functions/src/triggers/sweep-expired-break-glass-sessions.ts
@@ -0,0 +1,52 @@
+import { onSchedule } from 'firebase-functions/v2/scheduler'
+import { getFirestore } from 'firebase-admin/firestore'
+import { getAuth } from 'firebase-admin/auth'
+import { streamAuditEvent } from '../services/audit-stream.js'
+
+export const sweepExpiredBreakGlassSessions = onSchedule(
+  { schedule: 'every 5 minutes', region: 'asia-southeast1', timeZone: 'UTC' },
+  async () => {
+    const db = getFirestore()
+    const adminAuth = getAuth()
+    const now = Date.now()
+
+    const snap = await db
+      .collection('breakglass_events')
+      .where('action', '==', 'initiated')
+      .where('expiresAt', '<', now)
+      .get()
+
+    for (const doc of snap.docs) {
+      const { actorUid, sessionId } = doc.data() as { actorUid: string; sessionId: string }
+      try {
+        const userRecord = await adminAuth.getUser(actorUid)
+        const currentClaims = userRecord.customClaims ?? {}
+        const remaining: Record<string, unknown> = {}
+        for (const [key, value] of Object.entries(currentClaims)) {
+          if (
+            key !== 'breakGlassSession' &&
+            key !== 'breakGlassSessionId' &&
+            key !== 'breakGlassExpiresAt'
+          ) {
+            remaining[key] = value
+          }
+        }
+        await adminAuth.setCustomUserClaims(actorUid, remaining)
+        await doc.ref.update({ action: 'auto_expired', expiredAt: now })
+        void streamAuditEvent({
+          eventType: 'break_glass_auto_expired',
+          actorUid,
+          sessionId,
+          occurredAt: now,
+        })
+      } catch (err: unknown) {
+        const message = err instanceof Error ? err.message : String(err)
+        const stack = err instanceof Error ? err.stack : undefined
+        console.error('[sweep-break-glass] failed for session', sessionId, {
+          message,
+          stack,
+        })
+      }
+    }
+  },
+)
diff --git a/infra/firebase/firestore.rules b/infra/firebase/firestore.rules
index 1ae7539b..2a2eee5f 100644
--- a/infra/firebase/firestore.rules
+++ b/infra/firebase/firestore.rules
@@ -480,6 +480,31 @@ service cloud.firestore {
       }
     }
 
+    // ================================================================
+    // Phase 7: data incidents, provincial resources, erasure requests,
+    // system health.
+    // ================================================================
+
+    match /data_incidents/{id} {
+      allow read: if isSuperadmin() && isActivePrivileged();
+      allow write: if false;
+    }
+
+    match /provincial_resources/{id} {
+      allow read: if isAuthed();
+      allow write: if false;
+    }
+
+    match /erasure_requests/{id} {
+      allow read: if isSuperadmin() && isActivePrivileged();
+      allow write: if false;
+    }
+
+    match /system_health/{id} {
+      allow read: if isSuperadmin();
+      allow write: if false;
+    }
+
     // ================================================================
     // Default deny — every collection not explicitly matched above.
     // Phase 2+ will add specific match blocks for reports, report_private,
diff --git a/infra/firebase/firestore.rules.template b/infra/firebase/firestore.rules.template
index 847bb835..3916e58d 100644
--- a/infra/firebase/firestore.rules.template
+++ b/infra/firebase/firestore.rules.template
@@ -457,6 +457,31 @@ service cloud.firestore {
       }
     }
 
+    // ================================================================
+    // Phase 7: data incidents, provincial resources, erasure requests,
+    // system health.
+    // ================================================================
+
+    match /data_incidents/{id} {
+      allow read: if isSuperadmin() && isActivePrivileged();
+      allow write: if false;
+    }
+
+    match /provincial_resources/{id} {
+      allow read: if isAuthed();
+      allow write: if false;
+    }
+
+    match /erasure_requests/{id} {
+      allow read: if isSuperadmin() && isActivePrivileged();
+      allow write: if false;
+    }
+
+    match /system_health/{id} {
+      allow read: if isSuperadmin();
+      allow write: if false;
+    }
+
     // ================================================================
     // Default deny — every collection not explicitly matched above.
     // Phase 2+ will add specific match blocks for reports, report_private,
diff --git a/packages/shared-validators/lib/index.d.ts b/packages/shared-validators/lib/index.d.ts
index 80359259..e8888b20 100644
--- a/packages/shared-validators/lib/index.d.ts
+++ b/packages/shared-validators/lib/index.d.ts
@@ -11,8 +11,8 @@ export { reportEventSchema, dispatchEventSchema } from './events.js';
 export type { ReportEvent, DispatchEvent } from './events.js';
 export { agencyDocSchema } from './agencies.js';
 export type { AgencyDoc } from './agencies.js';
-export { responderDocSchema, responderTelemetryPayloadSchema } from './responders.js';
-export type { ResponderDoc, ResponderTelemetryPayload } from './responders.js';
+export { responderDocSchema } from './responders.js';
+export type { ResponderDoc } from './responders.js';
 export { userDocSchema } from './users.js';
 export { reportSmsConsentDocSchema } from './users.js';
 export type { UserDoc, ReportSmsConsentDoc } from './users.js';
@@ -20,8 +20,8 @@ export { smsInboxDocSchema, smsOutboxDocSchema, smsSessionDocSchema, smsProvider
 export type { SmsInboxDoc, SmsOutboxDoc, SmsSessionDoc, SmsProviderHealthDoc, SmsReportInboxFields, } from './sms.js';
 export { detectEncoding } from './sms-encoding.js';
 export type { SmsEncoding, EncodingResult } from './sms-encoding.js';
-export { agencyAssistanceRequestDocSchema, commandChannelThreadDocSchema, commandChannelMessageDocSchema, massAlertRequestDocSchema, shiftHandoffDocSchema, responderShiftHandoffDocSchema, breakglassEventDocSchema, fieldModeSessionDocSchema, } from './coordination.js';
-export type { AgencyAssistanceRequestDoc, CommandChannelThreadDoc, CommandChannelMessageDoc, MassAlertRequestDoc, ShiftHandoffDoc, ResponderShiftHandoffDoc, BreakglassEventDoc, FieldModeSessionDoc, } from './coordination.js';
+export { agencyAssistanceRequestDocSchema, commandChannelThreadDocSchema, commandChannelMessageDocSchema, massAlertRequestDocSchema, shiftHandoffDocSchema, breakglassEventDocSchema, fieldModeSessionDocSchema, } from './coordination.js';
+export type { AgencyAssistanceRequestDoc, CommandChannelThreadDoc, CommandChannelMessageDoc, MassAlertRequestDoc, ShiftHandoffDoc, BreakglassEventDoc, FieldModeSessionDoc, } from './coordination.js';
 export { hazardZoneDocSchema, hazardZoneHistoryDocSchema, hazardSignalDocSchema } from './hazard.js';
 export type { HazardZoneDoc, HazardZoneHistoryDoc, HazardSignalDoc } from './hazard.js';
 export { incidentResponseEventSchema } from './incident-response.js';
@@ -35,7 +35,7 @@ export type { IdempotencyKeyDoc } from './idempotency-keys.js';
 export { deadLetterDocSchema } from './dead-letters.js';
 export type { DeadLetterDoc } from './dead-letters.js';
 export { renderTemplate, renderBroadcastTemplate, SmsTemplateError } from './sms-templates.js';
-export type { SmsPurpose, SmsLocale, DirectSmsPurpose } from './sms-templates.js';
+export type { SmsPurpose, SmsLocale } from './sms-templates.js';
 export { alertDocSchema, emergencyDocSchema } from './alerts-emergencies.js';
 export type { AlertDoc, EmergencyDoc } from './alerts-emergencies.js';
 export { municipalityDocSchema, CAMARINES_NORTE_MUNICIPALITIES } from './municipalities.js';
diff --git a/packages/shared-validators/lib/index.d.ts.map b/packages/shared-validators/lib/index.d.ts.map
index 85e95d69..900a8371 100644
--- a/packages/shared-validators/lib/index.d.ts.map
+++ b/packages/shared-validators/lib/index.d.ts.map
@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAC7F,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,GAChB,MAAM,cAAc,CAAA;AACrB,YAAY,EACV,SAAS,EACT,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,YAAY,EACZ,SAAS,GACV,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,WAAW,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AACjG,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACpE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,kBAAkB,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAA;AACrF,YAAY,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAA;AACtD,YAAY,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAC9D,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,UAAU,CAAA;AACjB,YAAY,EACV,WAAW,EACX,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACpE,OAAO,EACL,gCAAgC,EAChC,6BAA6B,EAC7B,8BAA8B,EAC9B,yBAAyB,EACzB,qBAAqB,EACrB,8BAA8B,EAC9B,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,wBAAwB,EACxB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACpG,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAA;AACpE,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAA;AAC7D,YAAY,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC9F,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACjF,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5E,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAA;AAC3F,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAA;AAC9E,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,qCAAqC,CAAA;AAC5C,YAAY,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAA;AACrE,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,aAAa,EACb,aAAa,EACb,sBAAsB,GACvB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AACxE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA"}
\ No newline at end of file
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAC7F,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,GAChB,MAAM,cAAc,CAAA;AACrB,YAAY,EACV,SAAS,EACT,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,YAAY,EACZ,SAAS,GACV,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,WAAW,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AACjG,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACpE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAA;AACtD,YAAY,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAC9D,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,UAAU,CAAA;AACjB,YAAY,EACV,WAAW,EACX,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACpE,OAAO,EACL,gCAAgC,EAChC,6BAA6B,EAC7B,8BAA8B,EAC9B,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACpG,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAA;AACpE,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAA;AAC7D,YAAY,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC9F,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5E,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAA;AAC3F,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAA;AAC9E,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,qCAAqC,CAAA;AAC5C,YAAY,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAA;AACrE,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,aAAa,EACb,aAAa,EACb,sBAAsB,GACvB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AACxE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA"}
\ No newline at end of file
diff --git a/packages/shared-validators/lib/index.js.map b/packages/shared-validators/lib/index.js.map
index 66702157..bf9cbc88 100644
--- a/packages/shared-validators/lib/index.js.map
+++ b/packages/shared-validators/lib/index.js.map
@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAC7F,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,GAChB,MAAM,cAAc,CAAA;AAcrB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE/C,OAAO,EAAE,kBAAkB,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAA;AAErF,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAA;AAEtD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,UAAU,CAAA;AAQjB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAElD,OAAO,EACL,gCAAgC,EAChC,6BAA6B,EAC7B,8BAA8B,EAC9B,yBAAyB,EACzB,qBAAqB,EACrB,8BAA8B,EAC9B,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAA;AAW1B,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAEpG,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAA;AAEpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAA;AAE7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAErD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAEvD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAE9F,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5E,OAAO,EAAE,qBAAqB,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAA;AAE3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAA;AAC9E,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,qCAAqC,CAAA;AAG5C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,aAAa,EACb,aAAa,EACb,sBAAsB,GACvB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA"}
\ No newline at end of file
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAC7F,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,GAChB,MAAM,cAAc,CAAA;AAcrB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAA;AAEtD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,UAAU,CAAA;AAQjB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAElD,OAAO,EACL,gCAAgC,EAChC,6BAA6B,EAC7B,8BAA8B,EAC9B,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAA;AAU1B,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAEpG,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAA;AAEpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAA;AAE7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAErD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAEvD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAE9F,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5E,OAAO,EAAE,qBAAqB,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAA;AAE3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAA;AAC9E,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,qCAAqC,CAAA;AAG5C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,aAAa,EACb,aAAa,EACb,sBAAsB,GACvB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA"}
\ No newline at end of file
diff --git a/packages/shared-validators/lib/reports.test.js b/packages/shared-validators/lib/reports.test.js
index d06f4fb1..58ce38f1 100644
--- a/packages/shared-validators/lib/reports.test.js
+++ b/packages/shared-validators/lib/reports.test.js
@@ -365,13 +365,6 @@ describe('inboxPayloadSchema contact extension', () => {
             followUpConsent: true,
         })).not.toThrow();
     });
-    it('accepts followUpConsent=false', () => {
-        expect(() => inboxPayloadSchema.parse({
-            ...basePayload,
-            contact: { phone: '+639171234567', smsConsent: true },
-            followUpConsent: false,
-        })).not.toThrow();
-    });
     it('rejects non-boolean followUpConsent', () => {
         expect(() => inboxPayloadSchema.parse({
             ...basePayload,
diff --git a/packages/shared-validators/lib/reports.test.js.map b/packages/shared-validators/lib/reports.test.js.map
index 2ff2a047..28746f45 100644
--- a/packages/shared-validators/lib/reports.test.js.map
+++ b/packages/shared-validators/lib/reports.test.js.map
@@ -1 +1 @@
-{"version":3,"file":"reports.test.js","sourceRoot":"","sources":["../src/reports.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,2BAA2B,EAC3B,eAAe,EACf,kBAAkB,GACnB,MAAM,cAAc,CAAA;AAErB,MAAM,EAAE,GAAG,aAAa,CAAA;AAExB,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CACJ,eAAe,CAAC,KAAK,CAAC;YACpB,cAAc,EAAE,MAAM;YACtB,iBAAiB,EAAE,MAAM;YACzB,UAAU,EAAE,YAAY;YACxB,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,UAAU;YAClB,cAAc,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;YAC3C,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,iBAAiB;YAC9B,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,kBAAkB;YACnC,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;YACrD,MAAM,EAAE,KAAK;YACb,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,sCAAsC;SACtD,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,KAAK,CAAC;YACpB,cAAc,EAAE,MAAM;YACtB,iBAAiB,EAAE,MAAM;YACzB,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,GAAG;YAChB,WAAW,EAAE,EAAE;YACf,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;YACrD,MAAM,EAAE,KAAK;YACb,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,sCAAsC;SACtD,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,KAAK,CAAC;YACpB,cAAc,EAAE,MAAM;YACtB,iBAAiB,EAAE,MAAM;YACzB,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,GAAG;YAChB,WAAW,EAAE,EAAE;YACf,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;YACrD,MAAM,EAAE,KAAK;YACb,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,sCAAsC;YACrD,YAAY,EAAE,MAAM;SACrB,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CACJ,sBAAsB,CAAC,KAAK,CAAC;YAC3B,cAAc,EAAE,MAAM;YACtB,WAAW,EAAE,SAAS;YACtB,cAAc,EAAE,IAAI;YACpB,iBAAiB,EAAE,aAAa;YAChC,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,GAAG,EAAE,CACV,sBAAsB,CAAC,KAAK,CAAC;YAC3B,cAAc,EAAE,MAAM;YACtB,WAAW,EAAE,SAAS;YACtB,cAAc,EAAE,IAAI;YACpB,iBAAiB,EAAE,aAAa;YAChC,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;YAChB,KAAK,EAAE,KAAK;SACb,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CACJ,kBAAkB,CAAC,KAAK,CAAC;YACvB,cAAc,EAAE,MAAM;YACtB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,MAAM;YAChB,eAAe,EAAE,QAAQ;YACzB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,oBAAoB,EAAE,CAAC;YACvB,wBAAwB,EAAE,KAAK;YAC/B,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;YACrD,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,cAAc,EAAE,MAAM;YACtB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,oBAAoB,EAAE,CAAC;YACvB,wBAAwB,EAAE,KAAK;YAC/B,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;YACrD,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CACJ,kBAAkB,CAAC,KAAK,CAAC;YACvB,cAAc,EAAE,MAAM;YACtB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,oBAAoB,EAAE,CAAC;YACvB,wBAAwB,EAAE,KAAK;YAC/B,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;YACrD,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CACJ,sBAAsB,CAAC,KAAK,CAAC;YAC3B,mBAAmB,EAAE,MAAM;YAC3B,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,CAAC,UAAU,CAAC;YACxB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,CACV,sBAAsB,CAAC,KAAK,CAAC;YAC3B,mBAAmB,EAAE,MAAM;YAC3B,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CACJ,uBAAuB,CAAC,KAAK,CAAC;YAC5B,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,OAAO;YACpB,YAAY,EAAE,MAAM;YACpB,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CACJ,qBAAqB,CAAC,KAAK,CAAC;YAC1B,iBAAiB,EAAE,UAAU;YAC7B,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,SAAS,EAAE,aAAa;YACxB,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;QACrD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CACV,qBAAqB,CAAC,KAAK,CAAC;gBAC1B,iBAAiB,EAAE,UAAU;gBAC7B,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,SAAS,EAAE,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;gBACzC,SAAS,EAAE,EAAE;gBACb,aAAa,EAAE,CAAC;aACjB,CAAC,CACH,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACxB,CAAC;gBAAS,CAAC;YACT,GAAG,CAAC,WAAW,EAAE,CAAA;QACnB,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CACJ,oBAAoB,CAAC,KAAK,CAAC;YACzB,WAAW,EAAE,OAAO;YACpB,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,UAAU;YACrB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,aAAa,EAAE,sCAAsC;YACrD,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE;SAClE,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,EAAE,CACV,oBAAoB,CAAC,KAAK,CAAC;YACzB,WAAW,EAAE,OAAO;YACpB,eAAe,EAAE,EAAE;YACnB,SAAS,EAAE,UAAU;YACrB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,aAAa,EAAE,sCAAsC;YACrD,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;SACjC,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CACJ,eAAe,CAAC,KAAK,CAAC;YACpB,YAAY,EAAE,MAAM;YACpB,OAAO,EAAE,QAAQ;YACjB,UAAU,EAAE,OAAO;SACpB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,KAAK,CAAC;YACpB,YAAY,EAAE,MAAM;YACpB,OAAO,EAAE,QAAQ;YACjB,UAAU,EAAE,MAAM;SACnB,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,MAAM,SAAS,GAAG;QAChB,cAAc,EAAE,MAAM;QACtB,iBAAiB,EAAE,MAAM;QACzB,UAAU,EAAE,QAAQ;QACpB,YAAY,EAAE,SAAkB;QAChC,UAAU,EAAE,OAAgB;QAC5B,QAAQ,EAAE,MAAe;QACzB,MAAM,EAAE,KAAc;QACtB,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE;QACzC,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,aAAa;QAC1B,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,UAAmB;QACpC,UAAU,EAAE,EAAE,KAAK,EAAE,cAAuB,EAAE,UAAU,EAAE,EAAE,EAAE;QAC9D,MAAM,EAAE,KAAc;QACtB,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,CAAC;QAChB,aAAa,EAAE,sCAAsC;KACtD,CAAA;IAED,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,EAAE,iBAAiB,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,CAAA;QAChD,KAAK,iBAAiB,CAAA;QACtB,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,GAAG,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,GAAG,SAAS,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IACxF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,MAAM,KAAK,GAAG;QACZ,iBAAiB,EAAE,UAAU;QAC7B,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,SAAS,EAAE,aAAa;QACxB,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,CAAC;KACjB,CAAA;IAED,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IAC9F,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,MAAM,UAAU,GAAG;QACjB,WAAW,EAAE,WAAW;QACxB,eAAe,EAAE,aAAa;QAC9B,cAAc,EAAE,QAAQ;QACxB,SAAS,EAAE,UAAU;QACrB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,aAAa,EAAE,sCAAsC;QACrD,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE;KACnD,CAAA;IAED,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IACzF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,GAAG,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IAC5F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,GAAG,UAAU,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IAC3F,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,MAAM,WAAW,GAAG;QAClB,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,MAAM;QACnB,QAAQ,EAAE,QAAiB;QAC3B,MAAM,EAAE,KAAc;QACtB,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE;KAC1C,CAAA;IAED,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACnE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE;SACtD,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,aAAa,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE;SACzC,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,EAAE;SACvD,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE;SACpD,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;SACtE,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE;YACrD,eAAe,EAAE,IAAI;SACtB,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE;YACrD,eAAe,EAAE,KAAK;SACvB,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE;YACrD,eAAe,EAAE,KAAK;SACvB,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,MAAM,IAAI,GAAG;QACX,cAAc,EAAE,MAAM;QACtB,MAAM,EAAE,UAAmB;QAC3B,QAAQ,EAAE,MAAe;QACzB,SAAS,EAAE,aAAa;QACxB,SAAS,EAAE,EAAE;QACb,oBAAoB,EAAE,CAAC;QACvB,wBAAwB,EAAE,KAAK;QAC/B,UAAU,EAAE,EAAE,KAAK,EAAE,cAAuB,EAAE,UAAU,EAAE,EAAE,EAAE;QAC9D,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,CAAC;KACjB,CAAA;IAED,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,CACJ,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,IAAI;YACP,UAAU,EAAE,OAAO;YACnB,eAAe,EAAE,QAAQ;YACzB,kBAAkB,EAAE,gBAAgB;YACpC,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;SACnC,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IAC5D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CACJ,mBAAmB,CAAC,KAAK,CAAC;YACxB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,0BAA0B;YAChC,SAAS,EAAE,aAAa;YACxB,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,EAAE,CACV,mBAAmB,CAAC,KAAK,CAAC;YACxB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,SAAS,EAAE,aAAa;YACxB,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CACJ,2BAA2B,CAAC,KAAK,CAAC;YAChC,oBAAoB,EAAE,UAAU;YAChC,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,aAAa;YACvB,YAAY,EAAE,iBAAiB;YAC/B,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CACJ,2BAA2B,CAAC,KAAK,CAAC;YAChC,oBAAoB,EAAE,UAAU;YAChC,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,MAAM;YACd,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
\ No newline at end of file
+{"version":3,"file":"reports.test.js","sourceRoot":"","sources":["../src/reports.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,2BAA2B,EAC3B,eAAe,EACf,kBAAkB,GACnB,MAAM,cAAc,CAAA;AAErB,MAAM,EAAE,GAAG,aAAa,CAAA;AAExB,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CACJ,eAAe,CAAC,KAAK,CAAC;YACpB,cAAc,EAAE,MAAM;YACtB,iBAAiB,EAAE,MAAM;YACzB,UAAU,EAAE,YAAY;YACxB,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,UAAU;YAClB,cAAc,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;YAC3C,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,iBAAiB;YAC9B,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,kBAAkB;YACnC,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;YACrD,MAAM,EAAE,KAAK;YACb,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,sCAAsC;SACtD,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,KAAK,CAAC;YACpB,cAAc,EAAE,MAAM;YACtB,iBAAiB,EAAE,MAAM;YACzB,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,GAAG;YAChB,WAAW,EAAE,EAAE;YACf,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;YACrD,MAAM,EAAE,KAAK;YACb,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,sCAAsC;SACtD,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,KAAK,CAAC;YACpB,cAAc,EAAE,MAAM;YACtB,iBAAiB,EAAE,MAAM;YACzB,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,GAAG;YAChB,WAAW,EAAE,EAAE;YACf,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;YACrD,MAAM,EAAE,KAAK;YACb,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,sCAAsC;YACrD,YAAY,EAAE,MAAM;SACrB,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CACJ,sBAAsB,CAAC,KAAK,CAAC;YAC3B,cAAc,EAAE,MAAM;YACtB,WAAW,EAAE,SAAS;YACtB,cAAc,EAAE,IAAI;YACpB,iBAAiB,EAAE,aAAa;YAChC,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,GAAG,EAAE,CACV,sBAAsB,CAAC,KAAK,CAAC;YAC3B,cAAc,EAAE,MAAM;YACtB,WAAW,EAAE,SAAS;YACtB,cAAc,EAAE,IAAI;YACpB,iBAAiB,EAAE,aAAa;YAChC,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;YAChB,KAAK,EAAE,KAAK;SACb,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CACJ,kBAAkB,CAAC,KAAK,CAAC;YACvB,cAAc,EAAE,MAAM;YACtB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,MAAM;YAChB,eAAe,EAAE,QAAQ;YACzB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,oBAAoB,EAAE,CAAC;YACvB,wBAAwB,EAAE,KAAK;YAC/B,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;YACrD,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,cAAc,EAAE,MAAM;YACtB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,oBAAoB,EAAE,CAAC;YACvB,wBAAwB,EAAE,KAAK;YAC/B,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;YACrD,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CACJ,kBAAkB,CAAC,KAAK,CAAC;YACvB,cAAc,EAAE,MAAM;YACtB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,oBAAoB,EAAE,CAAC;YACvB,wBAAwB,EAAE,KAAK;YAC/B,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE;YACrD,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CACJ,sBAAsB,CAAC,KAAK,CAAC;YAC3B,mBAAmB,EAAE,MAAM;YAC3B,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,CAAC,UAAU,CAAC;YACxB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,CACV,sBAAsB,CAAC,KAAK,CAAC;YAC3B,mBAAmB,EAAE,MAAM;YAC3B,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CACJ,uBAAuB,CAAC,KAAK,CAAC;YAC5B,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,OAAO;YACpB,YAAY,EAAE,MAAM;YACpB,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CACJ,qBAAqB,CAAC,KAAK,CAAC;YAC1B,iBAAiB,EAAE,UAAU;YAC7B,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,SAAS,EAAE,aAAa;YACxB,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;QACrD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CACV,qBAAqB,CAAC,KAAK,CAAC;gBAC1B,iBAAiB,EAAE,UAAU;gBAC7B,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,SAAS,EAAE,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;gBACzC,SAAS,EAAE,EAAE;gBACb,aAAa,EAAE,CAAC;aACjB,CAAC,CACH,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACxB,CAAC;gBAAS,CAAC;YACT,GAAG,CAAC,WAAW,EAAE,CAAA;QACnB,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CACJ,oBAAoB,CAAC,KAAK,CAAC;YACzB,WAAW,EAAE,OAAO;YACpB,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,UAAU;YACrB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,aAAa,EAAE,sCAAsC;YACrD,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE;SAClE,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,EAAE,CACV,oBAAoB,CAAC,KAAK,CAAC;YACzB,WAAW,EAAE,OAAO;YACpB,eAAe,EAAE,EAAE;YACnB,SAAS,EAAE,UAAU;YACrB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,aAAa,EAAE,sCAAsC;YACrD,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;SACjC,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CACJ,eAAe,CAAC,KAAK,CAAC;YACpB,YAAY,EAAE,MAAM;YACpB,OAAO,EAAE,QAAQ;YACjB,UAAU,EAAE,OAAO;SACpB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,KAAK,CAAC;YACpB,YAAY,EAAE,MAAM;YACpB,OAAO,EAAE,QAAQ;YACjB,UAAU,EAAE,MAAM;SACnB,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,MAAM,SAAS,GAAG;QAChB,cAAc,EAAE,MAAM;QACtB,iBAAiB,EAAE,MAAM;QACzB,UAAU,EAAE,QAAQ;QACpB,YAAY,EAAE,SAAkB;QAChC,UAAU,EAAE,OAAgB;QAC5B,QAAQ,EAAE,MAAe;QACzB,MAAM,EAAE,KAAc;QACtB,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE;QACzC,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,aAAa;QAC1B,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,UAAmB;QACpC,UAAU,EAAE,EAAE,KAAK,EAAE,cAAuB,EAAE,UAAU,EAAE,EAAE,EAAE;QAC9D,MAAM,EAAE,KAAc;QACtB,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,CAAC;QAChB,aAAa,EAAE,sCAAsC;KACtD,CAAA;IAED,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,EAAE,iBAAiB,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,CAAA;QAChD,KAAK,iBAAiB,CAAA;QACtB,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,GAAG,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,GAAG,SAAS,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IACxF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,MAAM,KAAK,GAAG;QACZ,iBAAiB,EAAE,UAAU;QAC7B,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,SAAS,EAAE,aAAa;QACxB,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,CAAC;KACjB,CAAA;IAED,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IAC9F,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,MAAM,UAAU,GAAG;QACjB,WAAW,EAAE,WAAW;QACxB,eAAe,EAAE,aAAa;QAC9B,cAAc,EAAE,QAAQ;QACxB,SAAS,EAAE,UAAU;QACrB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,aAAa,EAAE,sCAAsC;QACrD,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE;KACnD,CAAA;IAED,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IACzF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,GAAG,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IAC5F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,GAAG,UAAU,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IAC3F,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,MAAM,WAAW,GAAG;QAClB,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,MAAM;QACnB,QAAQ,EAAE,QAAiB;QAC3B,MAAM,EAAE,KAAc;QACtB,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE;KAC1C,CAAA;IAED,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACnE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE;SACtD,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,aAAa,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE;SACzC,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,EAAE;SACvD,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE;SACpD,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;SACtE,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE;YACrD,eAAe,EAAE,IAAI;SACtB,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,WAAW;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE;YACrD,eAAe,EAAE,KAAK;SACvB,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,MAAM,IAAI,GAAG;QACX,cAAc,EAAE,MAAM;QACtB,MAAM,EAAE,UAAmB;QAC3B,QAAQ,EAAE,MAAe;QACzB,SAAS,EAAE,aAAa;QACxB,SAAS,EAAE,EAAE;QACb,oBAAoB,EAAE,CAAC;QACvB,wBAAwB,EAAE,KAAK;QAC/B,UAAU,EAAE,EAAE,KAAK,EAAE,cAAuB,EAAE,UAAU,EAAE,EAAE,EAAE;QAC9D,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,CAAC;KACjB,CAAA;IAED,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,CACJ,kBAAkB,CAAC,KAAK,CAAC;YACvB,GAAG,IAAI;YACP,UAAU,EAAE,OAAO;YACnB,eAAe,EAAE,QAAQ;YACzB,kBAAkB,EAAE,gBAAgB;YACpC,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;SACnC,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IAC5D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CACJ,mBAAmB,CAAC,KAAK,CAAC;YACxB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,0BAA0B;YAChC,SAAS,EAAE,aAAa;YACxB,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,EAAE,CACV,mBAAmB,CAAC,KAAK,CAAC;YACxB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,SAAS,EAAE,aAAa;YACxB,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,OAAO,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CACJ,2BAA2B,CAAC,KAAK,CAAC;YAChC,oBAAoB,EAAE,UAAU;YAChC,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,aAAa;YACvB,YAAY,EAAE,iBAAiB;YAC/B,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CACJ,2BAA2B,CAAC,KAAK,CAAC;YAChC,oBAAoB,EAAE,UAAU;YAChC,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,MAAM;YACd,aAAa,EAAE,CAAC;SACjB,CAAC,CACH,CAAC,aAAa,CAAC,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
\ No newline at end of file
diff --git a/packages/shared-validators/lib/responders.d.ts b/packages/shared-validators/lib/responders.d.ts
index 94b6c850..f69ec622 100644
--- a/packages/shared-validators/lib/responders.d.ts
+++ b/packages/shared-validators/lib/responders.d.ts
@@ -6,13 +6,11 @@ export declare const responderDocSchema: z.ZodObject<{
     displayCode: z.ZodString;
     specialisations: z.ZodDefault<z.ZodArray<z.ZodString>>;
     availabilityStatus: z.ZodEnum<{
-        available: "available";
         on_duty: "on_duty";
         off_duty: "off_duty";
         on_break: "on_break";
         unavailable: "unavailable";
     }>;
-    availabilityReason: z.ZodOptional<z.ZodString>;
     isActive: z.ZodBoolean;
     fcmTokens: z.ZodDefault<z.ZodArray<z.ZodString>>;
     hasFcmToken: z.ZodDefault<z.ZodBoolean>;
@@ -21,27 +19,5 @@ export declare const responderDocSchema: z.ZodObject<{
     createdAt: z.ZodNumber;
     updatedAt: z.ZodNumber;
 }, z.core.$strict>;
-export declare const responderTelemetryPayloadSchema: z.ZodObject<{
-    capturedAt: z.ZodNumber;
-    receivedAt: z.ZodOptional<z.ZodNumber>;
-    lat: z.ZodNumber;
-    lng: z.ZodNumber;
-    accuracy: z.ZodNumber;
-    batteryPct: z.ZodNumber;
-    motionState: z.ZodEnum<{
-        unknown: "unknown";
-        moving: "moving";
-        walking: "walking";
-        still: "still";
-    }>;
-    appVersion: z.ZodString;
-    telemetryStatus: z.ZodEnum<{
-        active: "active";
-        degraded: "degraded";
-        stale: "stale";
-        offline: "offline";
-    }>;
-}, z.core.$strict>;
-export type ResponderTelemetryPayload = z.infer<typeof responderTelemetryPayloadSchema>;
 export type ResponderDoc = z.infer<typeof responderDocSchema>;
 //# sourceMappingURL=responders.d.ts.map
\ No newline at end of file
diff --git a/packages/shared-validators/lib/responders.d.ts.map b/packages/shared-validators/lib/responders.d.ts.map
index d9b8013a..33464807 100644
--- a/packages/shared-validators/lib/responders.d.ts.map
+++ b/packages/shared-validators/lib/responders.d.ts.map
@@ -1 +1 @@
-{"version":3,"file":"responders.d.ts","sourceRoot":"","sources":["../src/responders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;kBAiBpB,CAAA;AAEX,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;kBAYjC,CAAA;AAEX,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAA;AACvF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA"}
\ No newline at end of file
+{"version":3,"file":"responders.d.ts","sourceRoot":"","sources":["../src/responders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;kBAgBpB,CAAA;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA"}
\ No newline at end of file
diff --git a/packages/shared-validators/lib/responders.js b/packages/shared-validators/lib/responders.js
index eedecbef..48bfc99c 100644
--- a/packages/shared-validators/lib/responders.js
+++ b/packages/shared-validators/lib/responders.js
@@ -6,8 +6,7 @@ export const responderDocSchema = z
     municipalityId: z.string().min(1),
     displayCode: z.string().min(1),
     specialisations: z.array(z.string()).default([]),
-    availabilityStatus: z.enum(['available', 'on_duty', 'off_duty', 'on_break', 'unavailable']),
-    availabilityReason: z.string().max(500).optional(),
+    availabilityStatus: z.enum(['on_duty', 'off_duty', 'on_break', 'unavailable']),
     isActive: z.boolean(),
     fcmTokens: z.array(z.string().trim().min(1)).default([]),
     hasFcmToken: z.boolean().default(false),
@@ -17,17 +16,4 @@ export const responderDocSchema = z
     updatedAt: z.number().int(),
 })
     .strict();
-export const responderTelemetryPayloadSchema = z
-    .object({
-    capturedAt: z.number().int().nonnegative(),
-    receivedAt: z.number().int().nonnegative().optional(),
-    lat: z.number().min(-90).max(90),
-    lng: z.number().min(-180).max(180),
-    accuracy: z.number().nonnegative(),
-    batteryPct: z.number().min(0).max(100),
-    motionState: z.enum(['moving', 'walking', 'still', 'unknown']),
-    appVersion: z.string(),
-    telemetryStatus: z.enum(['active', 'degraded', 'stale', 'offline']),
-})
-    .strict();
 //# sourceMappingURL=responders.js.map
\ No newline at end of file
diff --git a/packages/shared-validators/lib/responders.js.map b/packages/shared-validators/lib/responders.js.map
index ef93b3fa..94b027cc 100644
--- a/packages/shared-validators/lib/responders.js.map
+++ b/packages/shared-validators/lib/responders.js.map
@@ -1 +1 @@
-{"version":3,"file":"responders.js","sourceRoot":"","sources":["../src/responders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IAC3F,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC5B,CAAC;KACD,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACrD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;CACpE,CAAC;KACD,MAAM,EAAE,CAAA"}
\ No newline at end of file
+{"version":3,"file":"responders.js","sourceRoot":"","sources":["../src/responders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IAC9E,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC5B,CAAC;KACD,MAAM,EAAE,CAAA"}
\ No newline at end of file
diff --git a/packages/shared-validators/lib/responders.test.js.map b/packages/shared-validators/lib/responders.test.js.map
index 2d78ed7c..2cad12d7 100644
--- a/packages/shared-validators/lib/responders.test.js.map
+++ b/packages/shared-validators/lib/responders.test.js.map
@@ -1 +1 @@
-{"version":3,"file":"responders.test.js","sourceRoot":"","sources":["../src/responders.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAEjD,MAAM,EAAE,GAAG,aAAa,CAAA;AAExB,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC;YACtC,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,UAAU;YACpB,cAAc,EAAE,MAAM;YACtB,WAAW,EAAE,QAAQ;YACrB,eAAe,EAAE,EAAE;YACnB,kBAAkB,EAAE,WAAW;YAC/B,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,CAAC,WAAW,CAAC;YACxB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC;YACtC,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,UAAU;YACpB,cAAc,EAAE,MAAM;YACtB,WAAW,EAAE,QAAQ;YACrB,eAAe,EAAE,EAAE;YACnB,kBAAkB,EAAE,WAAW;YAC/B,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;SACd,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC;YACtC,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,UAAU;YACpB,cAAc,EAAE,MAAM;YACtB,WAAW,EAAE,QAAQ;YACrB,eAAe,EAAE,EAAE;YACnB,kBAAkB,EAAE,WAAW;YAC/B,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,CAAC,WAAW,CAAC;YACxB,WAAW,EAAE,KAAK;SACnB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
\ No newline at end of file
+{"version":3,"file":"responders.test.js","sourceRoot":"","sources":["../src/responders.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAEjD,MAAM,EAAE,GAAG,aAAa,CAAA;AAExB,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC;YACtC,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,UAAU;YACpB,cAAc,EAAE,MAAM;YACtB,WAAW,EAAE,QAAQ;YACrB,eAAe,EAAE,EAAE;YACnB,kBAAkB,EAAE,SAAS;YAC7B,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,CAAC,WAAW,CAAC;YACxB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC;YACtC,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,UAAU;YACpB,cAAc,EAAE,MAAM;YACtB,WAAW,EAAE,QAAQ;YACrB,eAAe,EAAE,EAAE;YACnB,kBAAkB,EAAE,SAAS;YAC7B,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;SACd,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC;YACtC,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,UAAU;YACpB,cAAc,EAAE,MAAM;YACtB,WAAW,EAAE,QAAQ;YACrB,eAAe,EAAE,EAAE;YACnB,kBAAkB,EAAE,SAAS;YAC7B,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,CAAC,WAAW,CAAC;YACxB,WAAW,EAAE,KAAK;SACnB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
\ No newline at end of file
diff --git a/packages/shared-validators/lib/sms-templates.d.ts.map b/packages/shared-validators/lib/sms-templates.d.ts.map
index 4f9c1de4..7af5b28f 100644
--- a/packages/shared-validators/lib/sms-templates.d.ts.map
+++ b/packages/shared-validators/lib/sms-templates.d.ts.map
@@ -1 +1 @@
-{"version":3,"file":"sms-templates.d.ts","sourceRoot":"","sources":["../src/sms-templates.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,UAAU,GAClB,aAAa,GACb,cAAc,GACd,eAAe,GACf,YAAY,GACZ,gBAAgB,GAChB,YAAY,CAAA;AAChB,MAAM,MAAM,SAAS,GAAG,IAAI,GAAG,IAAI,CAAA;AAEnC,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAGD,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;AAEhE,UAAU,UAAU;IAClB,OAAO,EAAE,gBAAgB,CAAA;IACzB,MAAM,EAAE,SAAS,CAAA;IACjB,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;CAC5B;AA+BD,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAiBvD;AAED,UAAU,mBAAmB;IAC3B,MAAM,EAAE,SAAS,CAAA;IACjB,IAAI,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CACjD;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CA2BzE"}
\ No newline at end of file
+{"version":3,"file":"sms-templates.d.ts","sourceRoot":"","sources":["../src/sms-templates.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,UAAU,GAClB,aAAa,GACb,cAAc,GACd,eAAe,GACf,YAAY,GACZ,gBAAgB,GAChB,YAAY,CAAA;AAChB,MAAM,MAAM,SAAS,GAAG,IAAI,GAAG,IAAI,CAAA;AAEnC,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED,UAAU,UAAU;IAClB,OAAO,EAAE,UAAU,CAAA;IACnB,MAAM,EAAE,SAAS,CAAA;IACjB,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;CAC5B;AA+BD,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAiBvD;AAED,UAAU,mBAAmB;IAC3B,MAAM,EAAE,SAAS,CAAA;IACjB,IAAI,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CACjD;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CASzE"}
\ No newline at end of file
diff --git a/packages/shared-validators/lib/sms-templates.js b/packages/shared-validators/lib/sms-templates.js
index 2626fee4..aea0785f 100644
--- a/packages/shared-validators/lib/sms-templates.js
+++ b/packages/shared-validators/lib/sms-templates.js
@@ -28,8 +28,8 @@ const TEMPLATES = {
         en: 'Your report has been received. Our team will review and follow up with you. Please stay safe.',
     },
     mass_alert: {
-        tl: 'ALERTO: {municipalityName} - {body}',
-        en: 'ALERT: {municipalityName} - {body}',
+        tl: 'ALERTO: {municipalityName} — {body}',
+        en: 'ALERT: {municipalityName} — {body}',
     },
 };
 const PUBLIC_REF_RE = /^[a-z0-9]{8}$/;
@@ -51,29 +51,13 @@ export function renderTemplate(args) {
     return template.replace('{publicRef}', args.vars.publicRef);
 }
 export function renderBroadcastTemplate(args) {
-    // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
-    if (!args?.vars || typeof args.vars !== 'object') {
-        throw new SmsTemplateError('Invalid or missing args.vars');
-    }
-    if (typeof args.vars.municipalityName !== 'string') {
-        throw new SmsTemplateError('Invalid or missing municipalityName');
-    }
-    if (typeof args.vars.body !== 'string') {
-        throw new SmsTemplateError('Invalid or missing body');
-    }
-    const municipalityName = args.vars.municipalityName.trim();
-    const body = args.vars.body.trim();
-    if (!municipalityName) {
-        throw new SmsTemplateError('Missing municipalityName');
-    }
-    if (!body) {
-        throw new SmsTemplateError('Missing body');
-    }
     const purposeMap = TEMPLATES.mass_alert;
     const template = purposeMap[args.locale];
     if (!template) {
         throw new SmsTemplateError(`Unknown locale: ${args.locale}`);
     }
-    return template.replace('{municipalityName}', municipalityName).replace('{body}', body);
+    return template
+        .replace('{municipalityName}', args.vars.municipalityName)
+        .replace('{body}', args.vars.body);
 }
 //# sourceMappingURL=sms-templates.js.map
\ No newline at end of file
diff --git a/packages/shared-validators/lib/sms-templates.js.map b/packages/shared-validators/lib/sms-templates.js.map
index 1c6e2a18..fe80b93d 100644
--- a/packages/shared-validators/lib/sms-templates.js.map
+++ b/packages/shared-validators/lib/sms-templates.js.map
@@ -1 +1 @@
-{"version":3,"file":"sms-templates.js","sourceRoot":"","sources":["../src/sms-templates.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,0FAA0F;AAW1F,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAChC,CAAC;CACF;AAWD,MAAM,SAAS,GAAkD;IAC/D,WAAW,EAAE;QACX,EAAE,EAAE,+FAA+F;QACnG,EAAE,EAAE,gGAAgG;KACrG;IACD,YAAY,EAAE;QACZ,EAAE,EAAE,8FAA8F;QAClG,EAAE,EAAE,gFAAgF;KACrF;IACD,aAAa,EAAE;QACb,EAAE,EAAE,kFAAkF;QACtF,EAAE,EAAE,qFAAqF;KAC1F;IACD,UAAU,EAAE;QACV,EAAE,EAAE,4EAA4E;QAChF,EAAE,EAAE,yEAAyE;KAC9E;IACD,cAAc,EAAE;QACd,EAAE,EAAE,+FAA+F;QACnG,EAAE,EAAE,+FAA+F;KACpG;IACD,UAAU,EAAE;QACV,EAAE,EAAE,qCAAqC;QACzC,EAAE,EAAE,oCAAoC;KACzC;CACF,CAAA;AAED,MAAM,aAAa,GAAG,eAAe,CAAA;AAErC,MAAM,UAAU,cAAc,CAAC,IAAgB;IAC7C,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1C,mFAAmF;IACnF,uEAAuE;IACvE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACxC,mFAAmF;IAEnF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AAC7D,CAAC;AAOD,MAAM,UAAU,uBAAuB,CAAC,IAAyB;IAC/D,uEAAuE;IACvE,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QACnD,MAAM,IAAI,gBAAgB,CAAC,qCAAqC,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,CAAC,CAAA;IACvD,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAA;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;IAElC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,gBAAgB,CAAC,0BAA0B,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAA;IAC5C,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAA;IACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;AACzF,CAAC"}
\ No newline at end of file
+{"version":3,"file":"sms-templates.js","sourceRoot":"","sources":["../src/sms-templates.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,0FAA0F;AAW1F,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAChC,CAAC;CACF;AAQD,MAAM,SAAS,GAAkD;IAC/D,WAAW,EAAE;QACX,EAAE,EAAE,+FAA+F;QACnG,EAAE,EAAE,gGAAgG;KACrG;IACD,YAAY,EAAE;QACZ,EAAE,EAAE,8FAA8F;QAClG,EAAE,EAAE,gFAAgF;KACrF;IACD,aAAa,EAAE;QACb,EAAE,EAAE,kFAAkF;QACtF,EAAE,EAAE,qFAAqF;KAC1F;IACD,UAAU,EAAE;QACV,EAAE,EAAE,4EAA4E;QAChF,EAAE,EAAE,yEAAyE;KAC9E;IACD,cAAc,EAAE;QACd,EAAE,EAAE,+FAA+F;QACnG,EAAE,EAAE,+FAA+F;KACpG;IACD,UAAU,EAAE;QACV,EAAE,EAAE,qCAAqC;QACzC,EAAE,EAAE,oCAAoC;KACzC;CACF,CAAA;AAED,MAAM,aAAa,GAAG,eAAe,CAAA;AAErC,MAAM,UAAU,cAAc,CAAC,IAAgB;IAC7C,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1C,mFAAmF;IACnF,uEAAuE;IACvE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACxC,mFAAmF;IAEnF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AAC7D,CAAC;AAOD,MAAM,UAAU,uBAAuB,CAAC,IAAyB;IAC/D,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAA;IACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,QAAQ;SACZ,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;SACzD,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACtC,CAAC"}
\ No newline at end of file
diff --git a/packages/shared-validators/src/agencies.ts b/packages/shared-validators/src/agencies.ts
index d01a6718..32345b58 100644
--- a/packages/shared-validators/src/agencies.ts
+++ b/packages/shared-validators/src/agencies.ts
@@ -8,6 +8,7 @@ export const agencyDocSchema = z
     jurisdiction: z.enum(['provincial', 'municipal', 'national']),
     contactEmail: z.email().optional(),
     contactPhone: z.string().optional(),
+    mutualAidVisible: z.boolean().optional(),
     dispatchDefaults: z
       .object({
         timeoutHighMs: z.number().int().positive(),
diff --git a/packages/shared-validators/src/coordination.ts b/packages/shared-validators/src/coordination.ts
index 96737d5c..27224b5f 100644
--- a/packages/shared-validators/src/coordination.ts
+++ b/packages/shared-validators/src/coordination.ts
@@ -123,6 +123,8 @@ export const breakglassEventDocSchema = z
     resourceRef: z.string().optional(),
     createdAt: z.number().int(),
     correlationId: z.string().min(1),
+    expiresAt: z.number().int().optional(),
+    sessionStartedAt: z.number().int().optional(),
     schemaVersion: z.number().int().positive(),
   })
   .strict()
diff --git a/packages/shared-validators/src/incident-response.ts b/packages/shared-validators/src/incident-response.ts
index 5f870e0f..497da23a 100644
--- a/packages/shared-validators/src/incident-response.ts
+++ b/packages/shared-validators/src/incident-response.ts
@@ -22,3 +22,40 @@ export const incidentResponseEventSchema = z
   .strict()
 
 export type IncidentResponseEvent = z.infer<typeof incidentResponseEventSchema>
+
+export const dataIncidentDocSchema = z
+  .object({
+    incidentType: z.enum([
+      'unauthorized_access',
+      'data_loss',
+      'data_corruption',
+      'system_breach',
+      'accidental_disclosure',
+    ]),
+    severity: z.enum(['critical', 'high', 'medium', 'low']),
+    affectedCollections: z.array(z.string().min(1)),
+    affectedDataClasses: z.array(z.string().min(1)),
+    estimatedAffectedSubjects: z.number().int().nonnegative().optional(),
+    summary: z.string().min(1).max(2000),
+    status: z.enum([
+      'declared',
+      'contained',
+      'preserved',
+      'assessed',
+      'notified_npc',
+      'notified_subjects',
+      'post_report',
+      'closed',
+    ]),
+    declaredAt: z.number().int(),
+    declaredBy: z.string().min(1),
+    closedAt: z.number().int().optional(),
+    retentionExempt: z.boolean(),
+    schemaVersion: z.number().int().positive(),
+  })
+  .strict()
+  .refine((data) => !data.closedAt || data.closedAt >= data.declaredAt, {
+    message: 'closedAt must be greater than or equal to declaredAt',
+  })
+
+export type DataIncidentDoc = z.infer<typeof dataIncidentDocSchema>
diff --git a/packages/shared-validators/src/index.ts b/packages/shared-validators/src/index.ts
index 99647220..1b038025 100644
--- a/packages/shared-validators/src/index.ts
+++ b/packages/shared-validators/src/index.ts
@@ -88,8 +88,8 @@ export type {
 } from './coordination.js'
 export { hazardZoneDocSchema, hazardZoneHistoryDocSchema, hazardSignalDocSchema } from './hazard.js'
 export type { HazardZoneDoc, HazardZoneHistoryDoc, HazardSignalDoc } from './hazard.js'
-export { incidentResponseEventSchema } from './incident-response.js'
-export type { IncidentResponseEvent } from './incident-response.js'
+export { incidentResponseEventSchema, dataIncidentDocSchema } from './incident-response.js'
+export type { IncidentResponseEvent, DataIncidentDoc } from './incident-response.js'
 export { moderationIncidentDocSchema } from './moderation.js'
 export type { ModerationIncidentDoc } from './moderation.js'
 export { rateLimitDocSchema } from './rate-limits.js'
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index aa237b91..d036f084 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -303,12 +303,21 @@ importers:
       '@bantayog/shared-validators':
         specifier: workspace:*
         version: link:../packages/shared-validators
+      '@google-cloud/bigquery':
+        specifier: ^7.9.2
+        version: 7.9.4
+      '@google-cloud/logging':
+        specifier: ^7.0.0
+        version: 7.3.0
       '@turf/turf':
         specifier: ^7.3.5
         version: 7.3.5
       '@types/geojson':
         specifier: ^7946.0.16
         version: 7946.0.16
+      bcryptjs:
+        specifier: ^2.4.3
+        version: 2.4.3
       exifr:
         specifier: ^7.1.3
         version: 7.1.3
@@ -337,6 +346,9 @@ importers:
       '@firebase/rules-unit-testing':
         specifier: ^5.0.0
         version: 5.0.0(firebase@12.12.0)
+      '@types/bcryptjs':
+        specifier: ^2.4.6
+        version: 2.4.6
       '@types/ngeohash':
         specifier: ^0.6.8
         version: 0.6.8
@@ -1087,18 +1099,50 @@ packages:
   '@firebase/webchannel-wrapper@1.0.5':
     resolution: {integrity: sha512-+uGNN7rkfn41HLO0vekTFhTxk61eKa8mTpRGLO0QSqlQdKvIoGAvLp3ppdVIWbTGYJWM6Kp0iN+PjMIOcnVqTw==}
 
+  '@google-cloud/bigquery@7.9.4':
+    resolution: {integrity: sha512-C7jeI+9lnCDYK3cRDujcBsPgiwshWKn/f0BiaJmClplfyosCLfWE83iGQ0eKH113UZzjR9c9q7aZQg0nU388sw==}
+    engines: {node: '>=14.0.0'}
+
+  '@google-cloud/common@2.4.0':
+    resolution: {integrity: sha512-zWFjBS35eI9leAHhjfeOYlK5Plcuj/77EzstnrJIZbKgF/nkqjcQuGiMCpzCwOfPyUbz8ZaEOYgbHa759AKbjg==}
+    engines: {node: '>=8.10.0'}
+
+  '@google-cloud/common@5.0.2':
+    resolution: {integrity: sha512-V7bmBKYQyu0eVG2BFejuUjlBt+zrya6vtsKdY+JxMM/dNntPF41vZ9+LhOshEUH01zOHEqBSvI7Dad7ZS6aUeA==}
+    engines: {node: '>=14.0.0'}
+
   '@google-cloud/firestore@7.11.6':
     resolution: {integrity: sha512-EW/O8ktzwLfyWBOsNuhRoMi8lrC3clHM5LVFhGvO1HCsLozCOOXRAlHrYBoE6HL42Sc8yYMuCb2XqcnJ4OOEpw==}
     engines: {node: '>=14.0.0'}
 
+  '@google-cloud/logging@7.3.0':
+    resolution: {integrity: sha512-xTW1V4MKpYC0mjSugyuiyUoZ9g6A42IhrrO3z7Tt3SmAb2IRj2Gf4RLoguKKncs340ooZFXrrVN/++t2Aj5zgg==}
+    engines: {node: '>=8.10.0'}
+
+  '@google-cloud/paginator@2.0.3':
+    resolution: {integrity: sha512-kp/pkb2p/p0d8/SKUu4mOq8+HGwF8NPzHWkj+VKrIPQPyMRw8deZtrO/OcSiy9C/7bpfU5Txah5ltUNfPkgEXg==}
+    engines: {node: '>=8.10.0'}
+
   '@google-cloud/paginator@5.0.2':
     resolution: {integrity: sha512-DJS3s0OVH4zFDB1PzjxAsHqJT6sKVbRwwML0ZBP9PbU7Yebtu/7SWMRzvO2J3nUi9pRNITCfu4LJeooM2w4pjg==}
     engines: {node: '>=14.0.0'}
 
+  '@google-cloud/precise-date@4.0.0':
+    resolution: {integrity: sha512-1TUx3KdaU3cN7nfCdNf+UVqA/PSX29Cjcox3fZZBtINlRrXVTmUkQnCKv2MbBUbCopbK4olAT1IHl76uZyCiVA==}
+    engines: {node: '>=14.0.0'}
+
+  '@google-cloud/projectify@1.0.4':
+    resolution: {integrity: sha512-ZdzQUN02eRsmTKfBj9FDL0KNDIFNjBn/d6tHQmA/+FImH5DO6ZV8E7FzxMgAUiVAUq41RFAkb25p1oHOZ8psfg==}
+    engines: {node: '>=8.10.0'}
+
   '@google-cloud/projectify@4.0.0':
     resolution: {integrity: sha512-MmaX6HeSvyPbWGwFq7mXdo0uQZLGBYCwziiLIGq5JVX+/bdI3SAq6bP98trV5eTWfLuvsMcIC1YJOF2vfteLFA==}
     engines: {node: '>=14.0.0'}
 
+  '@google-cloud/promisify@1.0.4':
+    resolution: {integrity: sha512-VccZDcOql77obTnFh0TbNED/6ZbbmHDf8UMNnzO1d5g9V0Htfm4k5cllY8P1tJsRKC3zWYGRLaViiupcgVjBoQ==}
+    engines: {node: '>=8.10.0'}
+
   '@google-cloud/promisify@4.0.0':
     resolution: {integrity: sha512-Orxzlfb9c67A15cq2JQEyVc7wEsmFBmHjZWZYQMUyJ1qivXyMwdyNOs9odi79hze+2zqdTtu1E19IM/FtqZ10g==}
     engines: {node: '>=14'}
@@ -1111,10 +1155,18 @@ packages:
     resolution: {integrity: sha512-Iq8QQQ/7X3Sac15oB6p0FmUg/klxQvXLeileoqrTRGJYLV+/9tubbr9ipz0GKHjmXVsgFPo/+W+2cA8eNcR+XA==}
     engines: {node: '>=12.10.0'}
 
+  '@grpc/grpc-js@1.3.8':
+    resolution: {integrity: sha512-4qJqqn+CU/nBydz9ePJP+oa8dz0U42Ut/GejlbyaQ1xTkynCc+ndNHHnISlNeHawDsv4MOAyP3mV/EnDNUw2zA==}
+    engines: {node: ^8.13.0 || >=10.10.0}
+
   '@grpc/grpc-js@1.9.15':
     resolution: {integrity: sha512-nqE7Hc0AzI+euzUwDAy0aY5hCp10r734gMGRdU+qOPX0XSceI2ULrcXB5U2xSc5VkWwalCj4M7GzCAygZl2KoQ==}
     engines: {node: ^8.13.0 || >=10.10.0}
 
+  '@grpc/proto-loader@0.5.6':
+    resolution: {integrity: sha512-DT14xgw3PSzPxwS13auTEwxhMMOoz33DPUKNtmYK/QYbBSpLXJy78FGGs5yVoxVobEqPm4iW9MOIoz0A3bLTRQ==}
+    engines: {node: '>=6'}
+
   '@grpc/proto-loader@0.7.15':
     resolution: {integrity: sha512-tMXdRCfYVixjuFK+Hk0Q1s38gV9zDiDJfWL3h1rv4Qc39oILCu1TRTDt7+fGUI8K4G1Fj125Hx/ru3azECWTyQ==}
     engines: {node: '>=6'}
@@ -1490,6 +1542,13 @@ packages:
   '@open-draft/until@2.1.0':
     resolution: {integrity: sha512-U69T3ItWHvLwGg5eJ0n3I62nWuE6ilHlmz7zM0npLBRvPRd7e6NYmg54vvRtP5mZG7kZqZCFVdsTWo7BPtBujg==}
 
+  '@opencensus/core@0.0.20':
+    resolution: {integrity: sha512-vqOuTd2yuMpKohp8TNNGUAPjWEGjlnGfB9Rh5e3DKqeyR94YgierNs4LbMqxKtsnwB8Dm2yoEtRuUgoe5vD9DA==}
+    engines: {node: '>=8'}
+
+  '@opencensus/propagation-stackdriver@0.0.20':
+    resolution: {integrity: sha512-P8yuHSLtce+yb+2EZjtTVqG7DQ48laC+IuOWi3X9q78s1Gni5F9+hmbmyP6Nb61jb5BEvXQX1s2rtRI6bayUWA==}
+
   '@opentelemetry/api@1.9.1':
     resolution: {integrity: sha512-gLyJlPHPZYdAk1JENA9LeHejZe1Ti77/pTeFm/nMXmQH/HFZlcS/O2XJB+L8fkbrNSqhdtlvjBVjxwUYanNH5Q==}
     engines: {node: '>=8.0.0'}
@@ -1701,6 +1760,10 @@ packages:
   '@tokenizer/token@0.3.0':
     resolution: {integrity: sha512-OvjF+z51L3ov0OyAU0duzsYuvO01PH7x4t6DJx+guahgTnBHkhJdG7soQeTSFLWN3efnHyibZ4Z8l2EuWwJN3A==}
 
+  '@tootallnate/once@1.1.2':
+    resolution: {integrity: sha512-RbzJvlNzmRq5c3O09UipeuXno4tA1FE6ikOjxZK0tuxVv3412l64l5t1W5pj4+rJq9vpkm/kwiR07aZXnsKPxw==}
+    engines: {node: '>= 6'}
+
   '@tootallnate/once@2.0.0':
     resolution: {integrity: sha512-XCuKFP5PS55gnMVu3dty8KPatLqUoy/ZYzDzAGCQ8JNFCkLXzmI7vNHCR+XpbZaMWQK/vQubr7PkYq8g470J/A==}
     engines: {node: '>= 10'}
@@ -2101,6 +2164,9 @@ packages:
   '@types/babel__traverse@7.28.0':
     resolution: {integrity: sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q==}
 
+  '@types/bcryptjs@2.4.6':
+    resolution: {integrity: sha512-9xlo6R2qDs5uixm0bcIqCeMCE6HiQsIyel9KQySStiyqNl2tnj2mP3DX1Nf56MD6KMenNNlBBsy3LJ7gUEQPXQ==}
+
   '@types/body-parser@1.19.6':
     resolution: {integrity: sha512-HLFeCYgz89uk22N5Qg3dvGvsv46B8GLvKKo1zKG4NybA8U2DiEO3w9lqGg29t/tfLRJpJ6iQxnVw4OnB7MoM9g==}
 
@@ -2579,6 +2645,10 @@ packages:
     resolution: {integrity: sha512-hsU18Ae8CDTR6Kgu9DYf0EbCr/a5iGL0rytQDobUcdpYOKokk8LEjVphnXkDkgpi0wYVsqrXuP0bZxJaTqdgoA==}
     engines: {node: '>= 0.4'}
 
+  async-listener@0.6.10:
+    resolution: {integrity: sha512-gpuo6xOyF4D5DE5WvyqZdPA3NGhiT6Qf07l7DCB0wwDEsLvDIbCr6j9S5aj5Ch96dLace5tXVzWBZkxU/c5ohw==}
+    engines: {node: <=0.11.8 || >0.11.10}
+
   async-retry@1.3.3:
     resolution: {integrity: sha512-wfr/jstw9xNi/0teMHrRW7dsz3Lt5ARhYNZ2ewpadnhaIp5mbALhOAP+EAdsC7t4Z6wqsDVv9+W6gm1Dk9mEyw==}
 
@@ -2641,10 +2711,16 @@ packages:
     engines: {node: '>=6.0.0'}
     hasBin: true
 
+  bcryptjs@2.4.3:
+    resolution: {integrity: sha512-V/Hy/X9Vt7f3BbPJEi8BdVFMByHi+jNXrYkW3huaybV/kQ0KJg0Y6PkEMbn+zeT+i+SiKZ/HMqJGIIt4LZDqNQ==}
+
   big-integer@1.6.52:
     resolution: {integrity: sha512-QxD8cf2eVqJOOz63z6JIN9BzvVs/dlySa5HGSBH5xtR8dPteIRQnBxxKqkNTiT6jbDTF6jAfrd4oMcND9RGbQg==}
     engines: {node: '>=0.6'}
 
+  big.js@6.2.2:
+    resolution: {integrity: sha512-y/ie+Faknx7sZA5MfGA2xKlu0GDv8RWrXGsmlteyJQ2lvoKv9GBK/fpRMc2qlSoBAgNxrixICFCBefIq8WCQpQ==}
+
   bignumber.js@9.3.1:
     resolution: {integrity: sha512-Ko0uX15oIUS7wJ3Rb30Fs6SkVbLmPBAKdlm7q9+ak9bbIeFf0MwuBsQV6z7+X768/cHsfg+WlysDWJcmthjsjQ==}
 
@@ -2799,6 +2875,9 @@ packages:
     resolution: {integrity: sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==}
     engines: {node: '>= 0.6'}
 
+  continuation-local-storage@3.2.1:
+    resolution: {integrity: sha512-jx44cconVqkCEEyLSKWwkvUXwO561jXMa3LPjTPsm5QR22PA0/mhe33FT4Xb5y74JDvt/Cq+5lm8S8rskLv9ZA==}
+
   convert-source-map@2.0.0:
     resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
 
@@ -2813,6 +2892,9 @@ packages:
     resolution: {integrity: sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ==}
     engines: {node: '>=18'}
 
+  core-util-is@1.0.3:
+    resolution: {integrity: sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==}
+
   cors@2.8.6:
     resolution: {integrity: sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==}
     engines: {node: '>= 0.10'}
@@ -2836,6 +2918,9 @@ packages:
   d3-voronoi@1.1.2:
     resolution: {integrity: sha512-RhGS1u2vavcO7ay7ZNAPo4xeDh/VYeGof3x5ZLJBQgYhLegxr3s5IykvWmJ94FTU6mcbtp4sloqZ54mP6R4Utw==}
 
+  d64@1.0.0:
+    resolution: {integrity: sha512-5eNy3WZziVYnrogqgXhcdEmqcDB2IHurTqLcrgssJsfkMVCUoUaZpK6cJjxxvLV2dUm5SuJMNcYfVGoin9UIRw==}
+
   damerau-levenshtein@1.0.8:
     resolution: {integrity: sha512-sdQSFB7+llfUcQHUQO3+B8ERRj0Oa4w9POWMI/puGtuf7gFywGmkaLCElnudfTiKZV+NvHqL0ifzdrI8Ro7ESA==}
 
@@ -2933,10 +3018,17 @@ packages:
   dom-accessibility-api@0.6.3:
     resolution: {integrity: sha512-7ZgogeTnjuHbo+ct10G9Ffp0mif17idi0IyWNVA/wcwcm7NPOD/WEHVP3n7n3MhXqxoIYm8d6MuZohYWIZ4T3w==}
 
+  dot-prop@5.3.0:
+    resolution: {integrity: sha512-QM8q3zDe58hqUqjraQOmzZ1LIH9SWQJTlEKCH4kJ2oQvLZk7RbQXvtDM2XEq3fwkV9CCvvH4LA0AV+ogFsBM2Q==}
+    engines: {node: '>=8'}
+
   dunder-proto@1.0.1:
     resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
     engines: {node: '>= 0.4'}
 
+  duplexify@3.7.1:
+    resolution: {integrity: sha512-07z8uv2wMyS51kKhD1KsdXJg5WQ6t93RneqRxUHnskXVtlYYkLqM0gqStQZ3pj073g687jPCHrqNfCzawLYh5g==}
+
   duplexify@4.1.3:
     resolution: {integrity: sha512-M3BmBhwJRZsSx38lZyhE53Csddgzl5R7xGJNk7CVddZD6CcmwMCH8J+7AprIrQKH7TonKxaCjcv27Qmf+sQ+oA==}
 
@@ -2959,6 +3051,9 @@ packages:
     resolution: {integrity: sha512-wkgGT6kugeQk/P6VZ/f4T+4HB41BVgNBq5CDIZVbQ02nvTVqAiVTbskxxu3eA/X96lMlfYOwnLQpN2v5E1zDEg==}
     engines: {node: '>= 0.4.0'}
 
+  emitter-listener@1.1.2:
+    resolution: {integrity: sha512-Bt1sBAGFHY9DKY+4/2cV6izcKJUf5T7/gkdmkxzX/qv9CcGH8xSwVRW5mtX03SWJtRTWSOpzCuWN9rBFYZepZQ==}
+
   emittery@0.13.1:
     resolution: {integrity: sha512-DeWwawk6r5yR9jFgnDKYt4sLS0LmHJJi3ZOnb5/JdbYwj3nW+FxQnHIjhBKz8YLC7oRNPVM9NQ47I3CVx34eqQ==}
     engines: {node: '>=12'}
@@ -2979,6 +3074,10 @@ packages:
   end-of-stream@1.4.5:
     resolution: {integrity: sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==}
 
+  ent@2.2.2:
+    resolution: {integrity: sha512-kKvD1tO6BM+oK9HzCPpUdRb4vKFQY/FPTFmurMvh6LlN68VMrdj77w8yp51/kDbpkFOS9J8w5W6zIzgM2H8/hw==}
+    engines: {node: '>= 0.4'}
+
   entities@4.5.0:
     resolution: {integrity: sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==}
     engines: {node: '>=0.12'}
@@ -3136,6 +3235,10 @@ packages:
   eventemitter3@5.0.4:
     resolution: {integrity: sha512-mlsTRyGaPBjPedk6Bvw+aqbsXDtoAyAzm5MO7JgU+yVRyMQ5O8bD4Kcci7BS85f93veegeCPkL8R4GLClnjLFw==}
 
+  eventid@1.0.0:
+    resolution: {integrity: sha512-4upSDsvpxhWPsmw4fsJCp0zj8S7I0qh1lCDTmZXP8V3TtryQKDI8CgQPN+e5JakbWwzaAX3lrdp2b3KSoMSUpw==}
+    engines: {node: '>=8'}
+
   execa@5.1.1:
     resolution: {integrity: sha512-8uSpZZocAZRBAPIEINJj3Lo9HyGitllczc27Eh5YYojjMFMn8yHMDMaUHE2Jqfq05D/wucwI4JGURyXt1vchyg==}
     engines: {node: '>=10'}
@@ -3181,6 +3284,9 @@ packages:
   fast-string-width@3.0.2:
     resolution: {integrity: sha512-gX8LrtNEI5hq8DVUfRQMbr5lpaS4nMIWV+7XEbXk2b8kiQIizgnlr12B4dA3ZEx3308ze0O4Q1R+cHts8kyUJg==}
 
+  fast-text-encoding@1.0.6:
+    resolution: {integrity: sha512-VhXlQgj9ioXCqGstD37E/HBeqEGV/qOD/kmbVG8h5xKBYvM1L3lR1Zn4555cQ8GkYbJa8aJSipLPndE1k6zK2w==}
+
   fast-wrap-ansi@0.2.0:
     resolution: {integrity: sha512-rLV8JHxTyhVmFYhBJuMujcrHqOT2cnO5Zxj37qROj23CP39GXubJRBUFF0z8KFK77Uc0SukZUf7JZhsVEQ6n8w==}
 
@@ -3331,6 +3437,10 @@ packages:
   functions-have-names@1.2.3:
     resolution: {integrity: sha512-xckBUXyTIqT97tq2x2AMb+g163b5JFysYk0x4qxNFwbfQkmNZoiRHb6sPzI9/QV33WeuvVYBUIiD4NzNIyqaRQ==}
 
+  gaxios@2.3.4:
+    resolution: {integrity: sha512-US8UMj8C5pRnao3Zykc4AAVr+cffoNKRTg9Rsf2GiuZCW69vgJj38VK2PzlPuQU73FZ/nTk9/Av6/JGcE1N9vA==}
+    engines: {node: '>=8.10.0'}
+
   gaxios@6.7.1:
     resolution: {integrity: sha512-LDODD4TMYx7XXdpwxAVRAIAuB0bzv0s+ywFonY46k126qzQHT9ygyoa9tncmOiQmmDrik65UYsEkv3lbfqQ3yQ==}
     engines: {node: '>=14'}
@@ -3339,6 +3449,10 @@ packages:
     resolution: {integrity: sha512-bTIgTsM2bWn3XklZISBTQX7ZSddGW+IO3bMdGaemHZ3tbqExMENHLx6kKZ/KlejgrMtj8q7wBItt51yegqalrA==}
     engines: {node: '>=18'}
 
+  gcp-metadata@3.5.0:
+    resolution: {integrity: sha512-ZQf+DLZ5aKcRpLzYUyBS3yo3N0JSa82lNDO8rj3nMSlovLcz2riKFBsYgDzeXcv75oo5eqB2lx+B14UvPoCRnA==}
+    engines: {node: '>=8.10.0'}
+
   gcp-metadata@6.1.1:
     resolution: {integrity: sha512-a4tiq7E0/5fTjxPAaH4jpjkSv/uCaU2p5KC6HVGrvl0cDjA8iBZv4vv1gyzlmK0ZUKqwpOyQMKzZQe3lTit77A==}
     engines: {node: '>=14'}
@@ -3429,10 +3543,19 @@ packages:
     resolution: {integrity: sha512-e27Z6EThmVNNvtYASwQxose/G57rkRuaRbQyxM2bvYLLX/GqWZ5chWq2EBoUchJbCc57eC9ArzO5wMsEmWftCw==}
     engines: {node: '>=18'}
 
+  google-auth-library@5.10.1:
+    resolution: {integrity: sha512-rOlaok5vlpV9rSiUu5EpR0vVpc+PhN62oF4RyX/6++DG1VsaulAFEMlDYBLjJDDPI6OcNOCGAKy9UVB/3NIDXg==}
+    engines: {node: '>=8.10.0'}
+
   google-auth-library@9.15.1:
     resolution: {integrity: sha512-Jb6Z0+nvECVz+2lzSMt9u98UsoakXxA2HGHMCxh+so3n90XgYWkq5dur19JAJV7ONiJY22yBTyJB1TSkvPq9Ng==}
     engines: {node: '>=14'}
 
+  google-gax@1.15.4:
+    resolution: {integrity: sha512-Wzl43ueWEKNsLcMJ33sPps179nD7wn6Jcl/P+ZQNS+HxdCJcoQEgJe3AmulsJnatwjBE3pVPIE4HFJNhpRGvUw==}
+    engines: {node: '>=8.10.0'}
+    hasBin: true
+
   google-gax@4.6.1:
     resolution: {integrity: sha512-V6eky/xz2mcKfAd1Ioxyd6nmA61gao3n01C+YeuIwu3vzM9EDR6wcVzMSIbLMDXWeoi9SHYctXuKYC5uJUT3eQ==}
     engines: {node: '>=14'}
@@ -3445,6 +3568,12 @@ packages:
     resolution: {integrity: sha512-eAmLkjDjAFCVXg7A1unxHsLf961m6y17QFqXqAXGj/gVkKFrEICfStRfwUlGNfeCEjNRa32JEWOUTlYXPyyKvA==}
     engines: {node: '>=14'}
 
+  google-p12-pem@2.0.5:
+    resolution: {integrity: sha512-7RLkxwSsMsYh9wQ5Vb2zRtkAHvqPvfoMGag+nugl1noYO7gf0844Yr9TIFA5NEBMAeVt2Z+Imu7CQMp3oNatzQ==}
+    engines: {node: '>=8.10.0'}
+    deprecated: Package is no longer maintained
+    hasBin: true
+
   gopd@1.2.0:
     resolution: {integrity: sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==}
     engines: {node: '>= 0.4'}
@@ -3456,6 +3585,10 @@ packages:
     resolution: {integrity: sha512-5bJ+nf/UCpAjHM8i06fl7eLyVC9iuNAjm9qzkiu2ZGhM0VscSvS6WDPfAwkdkBuoXGM9FJSbKl6wylMwP9Ktig==}
     engines: {node: ^12.22.0 || ^14.16.0 || ^16.0.0 || >=17.0.0}
 
+  gtoken@4.1.4:
+    resolution: {integrity: sha512-VxirzD0SWoFUo5p8RDP8Jt2AGyOmyYcT/pOUgDKJCK+iSw0TMqwrVfY37RXTNmoKwrzmDHSk0GMT9FsgVmnVSA==}
+    engines: {node: '>=8.10.0'}
+
   gtoken@7.1.0:
     resolution: {integrity: sha512-pCcEwRi+TKpMlxAQObHDQ56KawURgyAf6jtIY046fJ5tIv3zDe/LEIubckAO8fj6JnAxLdmWkUfNyulQ2iKdEw==}
     engines: {node: '>=14.0.0'}
@@ -3504,6 +3637,9 @@ packages:
   hermes-parser@0.25.1:
     resolution: {integrity: sha512-6pEjquH3rqaI6cYAXYPcz9MS4rY6R4ngRgrgfDshRptUZIc3lw0MCIJIGDj9++mfySOuPTHB4nrSW99BCvOPIA==}
 
+  hex2dec@1.1.2:
+    resolution: {integrity: sha512-Yu+q/XWr2fFQ11tHxPq4p4EiNkb2y+lAacJNhAdRXVfRIcDH6gi7htWFnnlIzvqHMHoWeIsfXlNAjZInpAOJDA==}
+
   html-entities@2.6.0:
     resolution: {integrity: sha512-kig+rMn/QOVRvr7c86gQ8lWXq+Hkv6CbAH1hLu+RG338StTpE8Z0b44SDVaqVu7HGKf27frdmUYEs9hTUX/cLQ==}
 
@@ -3517,6 +3653,10 @@ packages:
   http-parser-js@0.5.10:
     resolution: {integrity: sha512-Pysuw9XpUq5dVc/2SMHpuTY01RFl8fttgcyunjL7eEMhGM3cI4eOmiCycJDVCo/7O7ClfQD3SaI6ftDzqOXYMA==}
 
+  http-proxy-agent@4.0.1:
+    resolution: {integrity: sha512-k0zdNgqWTGA6aeIRVpvfVob4fL52dTfaehylg0Y4UvSySvOq/Y+BOyPrgpUrA7HylqvU8vIZGsRuXmspskV0Tg==}
+    engines: {node: '>= 6'}
+
   http-proxy-agent@5.0.0:
     resolution: {integrity: sha512-n2hY8YdoRE1i7r6M0w9DIw5GgZN0G25P8zLCRQ8rjXtTU3vsNFBI/vWK/UIeE6g5MUUz6avwAPXmL6Fy9D/90w==}
     engines: {node: '>= 6'}
@@ -3678,6 +3818,10 @@ packages:
     resolution: {integrity: sha512-lZhclumE1G6VYD8VHe35wFaIif+CTy5SJIi5+3y4psDgWu4wPDoBhF8NxUOinEc7pHgiTsT6MaBb92rKhhD+Xw==}
     engines: {node: '>= 0.4'}
 
+  is-obj@2.0.0:
+    resolution: {integrity: sha512-drqDG3cbczxxEJRoOXcOjtdp1J/lyp1mNn0xaznRs8+muBhgQcrnbspox5X5fOw0HnMnbfDzvnEMEtqDEJEo8w==}
+    engines: {node: '>=8'}
+
   is-regex@1.2.1:
     resolution: {integrity: sha512-MjYsKHO5O7mCsmRGxWcLWheFqN9DJ/2TmngvjKXihe6efViPqc274+Fx/4fYj/r03+ESvBdTXK0V6tA3rgez1g==}
     engines: {node: '>= 0.4'}
@@ -3690,6 +3834,9 @@ packages:
     resolution: {integrity: sha512-ISWac8drv4ZGfwKl5slpHG9OwPNty4jOWPRIhBpxOoD+hqITiwuipOQ2bNthAzwA3B4fIjO4Nln74N0S9byq8A==}
     engines: {node: '>= 0.4'}
 
+  is-stream-ended@0.1.4:
+    resolution: {integrity: sha512-xj0XPvmr7bQFTvirqnFr50o0hQIh6ZItDqloxt5aJrR4NQsYeSsyFQERYGCAzfindAcnKjINnwEEgLx4IqVzQw==}
+
   is-stream@2.0.1:
     resolution: {integrity: sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==}
     engines: {node: '>=8'}
@@ -3722,6 +3869,13 @@ packages:
     resolution: {integrity: sha512-fKzAra0rGJUUBwGBgNkHZuToZcn+TtXHpeCgmkMJMMYx1sQDYaCSyjJBSCa2nH1DGm7s3n1oBnohoVTBaN7Lww==}
     engines: {node: '>=8'}
 
+  is@3.3.2:
+    resolution: {integrity: sha512-a2xr4E3s1PjDS8ORcGgXpWx6V+liNs+O3JRD2mb9aeugD7rtkkZ0zgLdYgw0tWsKhsdiezGYptSiMlVazCBTuQ==}
+    engines: {node: '>= 0.4'}
+
+  isarray@1.0.0:
+    resolution: {integrity: sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==}
+
   isarray@2.0.5:
     resolution: {integrity: sha512-xHjhDr3cNBK0BzdUJSPXZntQUx/mwMS5Rw4A7lPJ90XGAO6ISP/ePDNuo0vhqOZU+UD5JoodwCAAoZQd3FeAKw==}
 
@@ -3905,6 +4059,9 @@ packages:
     engines: {node: '>=6'}
     hasBin: true
 
+  json-bigint@0.3.1:
+    resolution: {integrity: sha512-DGWnSzmusIreWlEupsUelHrhwmPPE+FiQvg+drKfk2p+bdEYa5mp4PJ8JsCWqae0M2jQNb0HPvnwvf1qOTThzQ==}
+
   json-bigint@1.0.0:
     resolution: {integrity: sha512-SiPv/8VpZuWbvLSMtTDU8hEfrZWg/mH/nV/b4o0CYbSxu1UIQPLdwKOCIyLQX+VIPO5vrLX3i8qtqFyhdPSUSQ==}
 
@@ -4078,12 +4235,19 @@ packages:
     resolution: {integrity: sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==}
     engines: {node: '>=10'}
 
+  lodash.at@4.6.0:
+    resolution: {integrity: sha512-GOTh0SEp+Yosnlpjic+8cl2WM9MykorogkGA9xyIFkkObQ3H3kNZqZ+ohuq4K3FrSVo7hMcZBMataJemrxC3BA==}
+    deprecated: This package is deprecated. Use {Array|String}.prototype.at instead.
+
   lodash.camelcase@4.3.0:
     resolution: {integrity: sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA==}
 
   lodash.clonedeep@4.5.0:
     resolution: {integrity: sha512-H5ZhCF25riFd9uB5UCkVKo61m3S/xZk1x4wA6yp/L3RFP6Z/eHH1ymQcGLo7J3GMPfm0V/7m1tryHuGVxpqEBQ==}
 
+  lodash.has@4.5.2:
+    resolution: {integrity: sha512-rnYUdIo6xRCJnQmbVFEwcxF144erlD+M3YcJUVesflU9paQaE8p+fJDcIQrlMYbxoANFL+AB9hZrzSBBk5PL+g==}
+
   lodash.includes@4.3.0:
     resolution: {integrity: sha512-W3Bx6mdkRTGtlJISOvVD/lbqjTlPPUDTMnlXZFnVwi9NKJ6tiAk6LVdlhZMm17VZisqhKcgzpO5Wz91PCt5b0w==}
 
@@ -4111,10 +4275,17 @@ packages:
   lodash@4.18.1:
     resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
 
+  log-driver@1.2.7:
+    resolution: {integrity: sha512-U7KCmLdqsGHBLeWqYlFA0V0Sl6P08EE1ZrmA9cxjUE0WVqT9qnyVDPz1kzpFEP0jdJuFnasWIfSd7fsaNXkpbg==}
+    engines: {node: '>=0.8.6'}
+
   log-update@6.1.0:
     resolution: {integrity: sha512-9ie8ItPR6tjY5uYJh8K/Zrv/RMZ5VOlOWvtZdEHYSTFKZfIBPQa9tOAEeAWhd+AnIneLJ22w5fjOYtoutpWq5w==}
     engines: {node: '>=18'}
 
+  long@4.0.0:
+    resolution: {integrity: sha512-XsP+KhQif4bjX1kbuSiySJFNAehNxgLb6hPRGJ9QsUr8ajHkuXGdrHmFUTUUXhDwVX2R5bY4JNZEwbUiMhV+MA==}
+
   long@5.3.2:
     resolution: {integrity: sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==}
 
@@ -4161,6 +4332,10 @@ packages:
   makeerror@1.0.12:
     resolution: {integrity: sha512-JmqCvUhmt43madlpFzG4BQzG2Z3m6tvQDNKdClZnO3VbIudJYmxsT0FNJMeiB2+JTSlTQTSbU8QdesVmwJcmLg==}
 
+  map-obj@4.3.0:
+    resolution: {integrity: sha512-hdN1wVrZbb29eBGiGjJbeP8JbKjq1urkHJ/LIP/NY48MZ1QVXUsQBV1G1zvYFHn1XE06cwjBsOI2K3Ulnj1YXQ==}
+    engines: {node: '>=8'}
+
   math-intrinsics@1.1.0:
     resolution: {integrity: sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==}
     engines: {node: '>= 0.4'}
@@ -4192,6 +4367,11 @@ packages:
     engines: {node: '>=4'}
     hasBin: true
 
+  mime@2.6.0:
+    resolution: {integrity: sha512-USPkMeET31rOMiarsBNIHZKLGgvKc/LrjofAnBlOttf5ajRvqiRA8QsenbcooctK6d6Ts6aqZXBA+XbkKthiQg==}
+    engines: {node: '>=4.0.0'}
+    hasBin: true
+
   mime@3.0.0:
     resolution: {integrity: sha512-jSCU7/VB1loIWBZe14aEYHU/+1UMEHoaO7qxCOVJOw9GgH72VAWppxNcjU+x9a2k3GSIBXNKxXQFqRvvZ7vr3A==}
     engines: {node: '>=10.0.0'}
@@ -4296,6 +4476,10 @@ packages:
     resolution: {integrity: sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
 
+  node-forge@0.10.0:
+    resolution: {integrity: sha512-PPmu8eEeG9saEUvI97fm4OYxXVB6bFvyNTyiUOBichBpFG8A1Ljw3bY62+5oOjDEMHRnd0Y7HQ+x7uzxOzC6JA==}
+    engines: {node: '>= 6.0.0'}
+
   node-forge@1.4.0:
     resolution: {integrity: sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==}
     engines: {node: '>= 6.13.0'}
@@ -4520,6 +4704,9 @@ packages:
     resolution: {integrity: sha512-oG4T3wCbfeuvljnyAzhBvpN45E8iOTXCU/TD3zXW80HA3dQ4ahdqMkWGiPWZvjpQwlbyHrPTWUAqUzGzv4l1JQ==}
     engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
 
+  process-nextick-args@2.0.1:
+    resolution: {integrity: sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==}
+
   prompts@2.4.2:
     resolution: {integrity: sha512-NxNv/kLguCA7p3jE8oL2aEBsrJWgAakBpgmgK6lpPWV+WuOmY6r2/zbAVnP+T8bQlA0nzHXSJSJW0Hq7ylaD2Q==}
     engines: {node: '>= 6'}
@@ -4531,6 +4718,10 @@ packages:
     resolution: {integrity: sha512-SAzp/O4Yh02jGdRc+uIrGoe87dkN/XtwxfZ4ZyafJHymd79ozp5VG5nyZ7ygqPM5+cpLDjjGnYFUkngonyDPOQ==}
     engines: {node: '>=14.0.0'}
 
+  protobufjs@6.11.5:
+    resolution: {integrity: sha512-OKjVH3hDoXdIZ/s5MLv8O2X0s+wOxGfV7ar6WFSKGaSAxi/6gYn3px5POS4vi+mc/0zCOdL7Jkwrj0oT1Yst2A==}
+    hasBin: true
+
   protobufjs@7.5.5:
     resolution: {integrity: sha512-3wY1AxV+VBNW8Yypfd1yQY9pXnqTAN+KwQxL8iYm3/BjKYMNg4i0owhEe26PWDOMaIrzeeF98Lqd5NGz4omiIg==}
     engines: {node: '>=12.0.0'}
@@ -4539,6 +4730,15 @@ packages:
     resolution: {integrity: sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==}
     engines: {node: '>= 0.10'}
 
+  pump@3.0.4:
+    resolution: {integrity: sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==}
+
+  pumpify@2.0.1:
+    resolution: {integrity: sha512-m7KOje7jZxrmutanlkS1daj1dS6z6BgslzOXmcSEpIlCxM3VJH7lG5QLeck/6hgF6F4crFf01UtQmNsJfweTAw==}
+
+  punycode@1.4.1:
+    resolution: {integrity: sha512-jmYNElW7yvO7TV33CjSmvSiE2yco3bV2czu/OzDKdMNVZQWfxCblURLhf+47syQRBntjfLdd/H0egrzIG+oaFQ==}
+
   punycode@2.3.1:
     resolution: {integrity: sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==}
     engines: {node: '>=6'}
@@ -4612,6 +4812,9 @@ packages:
     resolution: {integrity: sha512-llUJLzz1zTUBrskt2pwZgLq59AemifIftw4aB7JxOqf1HY2FDaGDxgwpAPVzHU1kdWabH7FauP4i1oEeer2WCA==}
     engines: {node: '>=0.10.0'}
 
+  readable-stream@2.3.8:
+    resolution: {integrity: sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==}
+
   readable-stream@3.6.2:
     resolution: {integrity: sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==}
     engines: {node: '>= 6'}
@@ -4659,6 +4862,10 @@ packages:
     resolution: {integrity: sha512-oMA2dcrw6u0YfxJQXm342bFKX/E4sG9rbTzO9ptUcR/e8A33cHuvStiYOwH7fszkZlZ1z/ta9AAoPk2F4qIOHA==}
     engines: {node: '>=18'}
 
+  retry-request@4.2.2:
+    resolution: {integrity: sha512-xA93uxUD/rogV7BV59agW/JHPGXeREMWiZc9jhcwY4YdZ7QOtC7qbomYg0n4wyk2lJhggjvKvhNX8wln/Aldhg==}
+    engines: {node: '>=8.10.0'}
+
   retry-request@7.0.2:
     resolution: {integrity: sha512-dUOvLMJ0/JJYEn8NrpOaGNE7X3vpI5XlZS/u0ANjqtcZVKnIxP7IgCFwrKTxENw29emmwug53awKtaMm4i9g5w==}
     engines: {node: '>=14'}
@@ -4693,6 +4900,9 @@ packages:
     resolution: {integrity: sha512-AURm5f0jYEOydBj7VQlVvDrjeFgthDdEF5H1dP+6mNpoXOMo1quQqJ4wvJDyRZ9+pO3kGWoOdmV08cSv2aJV6Q==}
     engines: {node: '>=0.4'}
 
+  safe-buffer@5.1.2:
+    resolution: {integrity: sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==}
+
   safe-buffer@5.2.1:
     resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
 
@@ -4717,6 +4927,10 @@ packages:
   scheduler@0.27.0:
     resolution: {integrity: sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q==}
 
+  semver@5.7.2:
+    resolution: {integrity: sha512-cBznnQ9KjJqU67B52RMC65CMarK2600WFnbkcaiwWq3xy/5haFJlshgnpjovMVJ+Hff49d8GEn0b87C5pDQ10g==}
+    hasBin: true
+
   semver@6.3.1:
     resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==}
     hasBin: true
@@ -4767,6 +4981,9 @@ packages:
     resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==}
     engines: {node: '>=8'}
 
+  shimmer@1.2.1:
+    resolution: {integrity: sha512-sQTKC1Re/rM6XyFM6fIAGHRPVGvyXfgzIDvzoq608vM+jeyVD0Tu1E6Np0Kc2zAIFWIj963V2800iF/9LPieQw==}
+
   side-channel-list@1.0.1:
     resolution: {integrity: sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==}
     engines: {node: '>= 0.4'}
@@ -4815,6 +5032,10 @@ packages:
     resolution: {integrity: sha512-stxByr12oeeOyY2BlviTNQlYV5xOj47GirPr4yA1hE9JCtxfQN0+tVbkxwCtYDQWhEKWFHsEK48ORg5jrouCAg==}
     engines: {node: '>=20'}
 
+  snakecase-keys@3.2.1:
+    resolution: {integrity: sha512-CjU5pyRfwOtaOITYv5C8DzpZ8XA/ieRsDpr93HI2r6e3YInC6moZpSQbmUtg8cTk58tq2x3jcG2gv+p1IZGmMA==}
+    engines: {node: '>=8'}
+
   source-map-js@1.2.1:
     resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
     engines: {node: '>=0.10.0'}
@@ -4910,6 +5131,9 @@ packages:
     resolution: {integrity: sha512-UXSH262CSZY1tfu3G3Secr6uGLCFVPMhIqHjlgCUtCCcgihYc/xKs9djMTMUOb2j1mVSeU8EU6NWc/iQKU6Gfg==}
     engines: {node: '>= 0.4'}
 
+  string_decoder@1.1.1:
+    resolution: {integrity: sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==}
+
   string_decoder@1.3.0:
     resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
 
@@ -4974,6 +5198,9 @@ packages:
     resolution: {integrity: sha512-tOG/7GyXpFevhXVh8jOPJrmtRpOTsYqUIkVdVooZYJS/z8WhfQUX8RJILmeuJNinGAMSu1veBr4asSHFt5/hng==}
     engines: {node: '>=18'}
 
+  teeny-request@6.0.3:
+    resolution: {integrity: sha512-TZG/dfd2r6yeji19es1cUIwAlVD8y+/svB1kAC2Y0bjEyysrfbO8EZvJBRwIE6WkwmUoB7uvWLwTIhJbMXZ1Dw==}
+
   teeny-request@9.0.0:
     resolution: {integrity: sha512-resvxdc6Mgb7YEThw6G6bExlXKkv6+YbuzGg9xuXxSgxJF7Ozs+o8Y9+2R3sArdWdW8nOokoQb1yrpFB0pQK2g==}
     engines: {node: '>=14'}
@@ -4982,6 +5209,9 @@ packages:
     resolution: {integrity: sha512-cAGWPIyOHU6zlmg88jwm7VRyXnMN7iV68OGAbYDk/Mh/xC/pzVPlQtY6ngoIH/5/tciuhGfvESU8GrHrcxD56w==}
     engines: {node: '>=8'}
 
+  through2@3.0.2:
+    resolution: {integrity: sha512-enaDQ4MUyP2W6ZyT6EsMzqBPZaM/avg8iuo+l2d3QCs0J+6RaqkHV/2/lOwDTueBHeJ/2LG9lrLW3d5rWPucuQ==}
+
   through2@4.0.2:
     resolution: {integrity: sha512-iOqSav00cVxEEICeD7TjLB1sueEL+81Wpzp2bY17uZjZN0pWZPuo4suZ/61VujxmqSGFfgOcNuTZ85QJwNZQpw==}
 
@@ -5013,6 +5243,15 @@ packages:
   tmpl@1.0.5:
     resolution: {integrity: sha512-3f0uOEAQwIqGuWW2MVzYg8fV/QNnc/IpuJNG837rLuczAaLVHslWHZQj4IGiEl5Hs3kkbhwL9Ab7Hrsmuj+Smw==}
 
+  to-no-case@1.0.2:
+    resolution: {integrity: sha512-Z3g735FxuZY8rodxV4gH7LxClE4H0hTIyHNIHdk+vpQxjLm0cwnKXq/OFVZ76SOQmto7txVcwSCwkU5kqp+FKg==}
+
+  to-snake-case@1.0.0:
+    resolution: {integrity: sha512-joRpzBAk1Bhi2eGEYBjukEWHOe/IvclOkiJl3DtA91jV6NwQ3MwXA4FHYeqk8BNp/D8bmi9tcNbRu/SozP0jbQ==}
+
+  to-space-case@1.0.0:
+    resolution: {integrity: sha512-rLdvwXZ39VOn1IxGL3V6ZstoTbwLRckQmn/U8ZDLuWwIXNpuZDhQ3AiRUlhTbOXFVE9C+dR51wM0CBDhk31VcA==}
+
   toidentifier@1.0.1:
     resolution: {integrity: sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==}
     engines: {node: '>=0.6'}
@@ -5069,6 +5308,10 @@ packages:
     resolution: {integrity: sha512-0fr/mIH1dlO+x7TlcMy+bIDqKPsw/70tVyeHW787goQjhmqaZe10uwLujubK9q9Lg6Fiho1KUKDYz0Z7k7g5/g==}
     engines: {node: '>=4'}
 
+  type-fest@0.12.0:
+    resolution: {integrity: sha512-53RyidyjvkGpnWPMF9bQgFtWp+Sl8O2Rp13VavmJgfAP9WWG6q6TkrKU8iyJdnwnfgHI6k2hTlgqH4aSdjoTbg==}
+    engines: {node: '>=10'}
+
   type-fest@0.21.3:
     resolution: {integrity: sha512-t0rzBq87m3fVcduHDUFhKmyyX+9eo6WQjZvf51Ea/M0Q7+T374Jp1aUiyUl0GKxp8M/OETVHSDvmkyPgvX+X2w==}
     engines: {node: '>=10'}
@@ -5161,6 +5404,15 @@ packages:
     resolution: {integrity: sha512-0/A9rDy9P7cJ+8w1c9WD9V//9Wj15Ce2MPz8Ri6032usz+NfePxx5AcN3bN+r6ZL6jEo066/yNYB3tn4pQEx+A==}
     hasBin: true
 
+  uuid@3.4.0:
+    resolution: {integrity: sha512-HjSDRw6gZE5JMggctHBcjVak08+KEVhSIiDzFnT9S9aegmp85S/bReBVTb4QTFaRNptJ9kuYaNhnbNEOkbKb/A==}
+    deprecated: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
+    hasBin: true
+
+  uuid@7.0.3:
+    resolution: {integrity: sha512-DPSke0pXhTZgoF/d+WSt2QaKMCFSfx7QegxEWT+JOuHF5aWrKEn0G+ztjuJg/gG8/ItK+rbPCD/yNv8yyih6Cg==}
+    hasBin: true
+
   uuid@8.3.2:
     resolution: {integrity: sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==}
     hasBin: true
@@ -5261,6 +5513,10 @@ packages:
       jsdom:
         optional: true
 
+  walkdir@0.4.1:
+    resolution: {integrity: sha512-3eBwRyEln6E1MSzcxcVpQIhRG8Q1jLvEqRmCZqS3dsfXEDR/AhOF4d+jHg1qvDCpYaVRZjENPQyrVxAkQqxPgQ==}
+    engines: {node: '>=6.0.0'}
+
   walker@1.0.8:
     resolution: {integrity: sha512-ts/8E8l5b7kY0vlWLewOkDXMmPdLcVV4GmOQLyxuSswIJsweeFZtAsMF7k1Nszz+TYBQrlYRmzOnr398y1JemQ==}
 
@@ -6162,6 +6418,53 @@ snapshots:
 
   '@firebase/webchannel-wrapper@1.0.5': {}
 
+  '@google-cloud/bigquery@7.9.4':
+    dependencies:
+      '@google-cloud/common': 5.0.2
+      '@google-cloud/paginator': 5.0.2
+      '@google-cloud/precise-date': 4.0.0
+      '@google-cloud/promisify': 4.0.0
+      arrify: 2.0.1
+      big.js: 6.2.2
+      duplexify: 4.1.3
+      extend: 3.0.2
+      is: 3.3.2
+      stream-events: 1.0.5
+      uuid: 9.0.1
+    transitivePeerDependencies:
+      - encoding
+      - supports-color
+
+  '@google-cloud/common@2.4.0':
+    dependencies:
+      '@google-cloud/projectify': 1.0.4
+      '@google-cloud/promisify': 1.0.4
+      arrify: 2.0.1
+      duplexify: 3.7.1
+      ent: 2.2.2
+      extend: 3.0.2
+      google-auth-library: 5.10.1
+      retry-request: 4.2.2
+      teeny-request: 6.0.3
+    transitivePeerDependencies:
+      - encoding
+      - supports-color
+
+  '@google-cloud/common@5.0.2':
+    dependencies:
+      '@google-cloud/projectify': 4.0.0
+      '@google-cloud/promisify': 4.0.0
+      arrify: 2.0.1
+      duplexify: 4.1.3
+      extend: 3.0.2
+      google-auth-library: 9.15.1
+      html-entities: 2.6.0
+      retry-request: 7.0.2
+      teeny-request: 9.0.0
+    transitivePeerDependencies:
+      - encoding
+      - supports-color
+
   '@google-cloud/firestore@7.11.6':
     dependencies:
       '@opentelemetry/api': 1.9.1
@@ -6174,17 +6477,50 @@ snapshots:
       - supports-color
     optional: true
 
+  '@google-cloud/logging@7.3.0':
+    dependencies:
+      '@google-cloud/common': 2.4.0
+      '@google-cloud/paginator': 2.0.3
+      '@google-cloud/projectify': 1.0.4
+      '@google-cloud/promisify': 1.0.4
+      '@opencensus/propagation-stackdriver': 0.0.20
+      arrify: 2.0.1
+      dot-prop: 5.3.0
+      eventid: 1.0.0
+      extend: 3.0.2
+      gcp-metadata: 3.5.0
+      google-auth-library: 5.10.1
+      google-gax: 1.15.4
+      is: 3.3.2
+      on-finished: 2.4.1
+      pumpify: 2.0.1
+      snakecase-keys: 3.2.1
+      stream-events: 1.0.5
+      through2: 3.0.2
+      type-fest: 0.12.0
+    transitivePeerDependencies:
+      - encoding
+      - supports-color
+
+  '@google-cloud/paginator@2.0.3':
+    dependencies:
+      arrify: 2.0.1
+      extend: 3.0.2
+
   '@google-cloud/paginator@5.0.2':
     dependencies:
       arrify: 2.0.1
       extend: 3.0.2
-    optional: true
 
-  '@google-cloud/projectify@4.0.0':
-    optional: true
+  '@google-cloud/precise-date@4.0.0': {}
 
-  '@google-cloud/promisify@4.0.0':
-    optional: true
+  '@google-cloud/projectify@1.0.4': {}
+
+  '@google-cloud/projectify@4.0.0': {}
+
+  '@google-cloud/promisify@1.0.4': {}
+
+  '@google-cloud/promisify@4.0.0': {}
 
   '@google-cloud/storage@7.19.0':
     dependencies:
@@ -6214,11 +6550,20 @@ snapshots:
       '@js-sdsl/ordered-map': 4.4.2
     optional: true
 
+  '@grpc/grpc-js@1.3.8':
+    dependencies:
+      '@types/node': 20.19.39
+
   '@grpc/grpc-js@1.9.15':
     dependencies:
       '@grpc/proto-loader': 0.7.15
       '@types/node': 20.19.39
 
+  '@grpc/proto-loader@0.5.6':
+    dependencies:
+      lodash.camelcase: 4.3.0
+      protobufjs: 6.11.5
+
   '@grpc/proto-loader@0.7.15':
     dependencies:
       lodash.camelcase: 4.3.0
@@ -6729,6 +7074,20 @@ snapshots:
 
   '@open-draft/until@2.1.0': {}
 
+  '@opencensus/core@0.0.20':
+    dependencies:
+      continuation-local-storage: 3.2.1
+      log-driver: 1.2.7
+      semver: 6.3.1
+      shimmer: 1.2.1
+      uuid: 3.4.0
+
+  '@opencensus/propagation-stackdriver@0.0.20':
+    dependencies:
+      '@opencensus/core': 0.0.20
+      hex2dec: 1.1.2
+      uuid: 3.4.0
+
   '@opentelemetry/api@1.9.1':
     optional: true
 
@@ -6891,8 +7250,9 @@ snapshots:
 
   '@tokenizer/token@0.3.0': {}
 
-  '@tootallnate/once@2.0.0':
-    optional: true
+  '@tootallnate/once@1.1.2': {}
+
+  '@tootallnate/once@2.0.0': {}
 
   '@turbo/darwin-64@2.9.6':
     optional: true
@@ -8076,13 +8436,14 @@ snapshots:
     dependencies:
       '@babel/types': 7.29.0
 
+  '@types/bcryptjs@2.4.6': {}
+
   '@types/body-parser@1.19.6':
     dependencies:
       '@types/connect': 3.4.38
       '@types/node': 20.19.39
 
-  '@types/caseless@0.12.5':
-    optional: true
+  '@types/caseless@0.12.5': {}
 
   '@types/chai@5.2.3':
     dependencies:
@@ -8150,8 +8511,7 @@ snapshots:
 
   '@types/lodash@4.17.24': {}
 
-  '@types/long@4.0.2':
-    optional: true
+  '@types/long@4.0.2': {}
 
   '@types/mime@1.3.5': {}
 
@@ -8186,7 +8546,6 @@ snapshots:
       '@types/node': 20.19.39
       '@types/tough-cookie': 4.0.5
       form-data: 2.5.5
-    optional: true
 
   '@types/send@0.17.6':
     dependencies:
@@ -8213,8 +8572,7 @@ snapshots:
 
   '@types/statuses@2.0.6': {}
 
-  '@types/tough-cookie@4.0.5':
-    optional: true
+  '@types/tough-cookie@4.0.5': {}
 
   '@types/whatwg-mimetype@3.0.2': {}
 
@@ -8455,7 +8813,6 @@ snapshots:
   abort-controller@3.0.0:
     dependencies:
       event-target-shim: 5.0.1
-    optional: true
 
   accepts@1.3.8:
     dependencies:
@@ -8473,7 +8830,6 @@ snapshots:
       debug: 4.4.3
     transitivePeerDependencies:
       - supports-color
-    optional: true
 
   agent-base@7.1.4: {}
 
@@ -8582,8 +8938,7 @@ snapshots:
       get-intrinsic: 1.3.0
       is-array-buffer: 3.0.5
 
-  arrify@2.0.1:
-    optional: true
+  arrify@2.0.1: {}
 
   assertion-error@2.0.1: {}
 
@@ -8599,13 +8954,17 @@ snapshots:
 
   async-function@1.0.0: {}
 
+  async-listener@0.6.10:
+    dependencies:
+      semver: 5.7.2
+      shimmer: 1.2.1
+
   async-retry@1.3.3:
     dependencies:
       retry: 0.13.1
     optional: true
 
-  asynckit@0.4.0:
-    optional: true
+  asynckit@0.4.0: {}
 
   at-least-node@1.0.0: {}
 
@@ -8677,8 +9036,12 @@ snapshots:
 
   baseline-browser-mapping@2.10.20: {}
 
+  bcryptjs@2.4.3: {}
+
   big-integer@1.6.52: {}
 
+  big.js@6.2.2: {}
+
   bignumber.js@9.3.1: {}
 
   body-parser@1.20.4:
@@ -8807,7 +9170,6 @@ snapshots:
   combined-stream@1.0.8:
     dependencies:
       delayed-stream: 1.0.0
-    optional: true
 
   commander@12.1.0: {}
 
@@ -8830,6 +9192,11 @@ snapshots:
 
   content-type@1.0.5: {}
 
+  continuation-local-storage@3.2.1:
+    dependencies:
+      async-listener: 0.6.10
+      emitter-listener: 1.1.2
+
   convert-source-map@2.0.0: {}
 
   cookie-signature@1.0.7: {}
@@ -8838,6 +9205,8 @@ snapshots:
 
   cookie@1.1.1: {}
 
+  core-util-is@1.0.3: {}
+
   cors@2.8.6:
     dependencies:
       object-assign: 4.1.1
@@ -8861,6 +9230,8 @@ snapshots:
 
   d3-voronoi@1.1.2: {}
 
+  d64@1.0.0: {}
+
   damerau-levenshtein@1.0.8: {}
 
   data-uri-to-buffer@4.0.1: {}
@@ -8911,8 +9282,7 @@ snapshots:
       has-property-descriptors: 1.0.2
       object-keys: 1.1.1
 
-  delayed-stream@1.0.0:
-    optional: true
+  delayed-stream@1.0.0: {}
 
   depd@2.0.0: {}
 
@@ -8932,19 +9302,29 @@ snapshots:
 
   dom-accessibility-api@0.6.3: {}
 
+  dot-prop@5.3.0:
+    dependencies:
+      is-obj: 2.0.0
+
   dunder-proto@1.0.1:
     dependencies:
       call-bind-apply-helpers: 1.0.2
       es-errors: 1.3.0
       gopd: 1.2.0
 
+  duplexify@3.7.1:
+    dependencies:
+      end-of-stream: 1.4.5
+      inherits: 2.0.4
+      readable-stream: 2.3.8
+      stream-shift: 1.0.3
+
   duplexify@4.1.3:
     dependencies:
       end-of-stream: 1.4.5
       inherits: 2.0.4
       readable-stream: 3.6.2
       stream-shift: 1.0.3
-    optional: true
 
   earcut@2.2.4: {}
 
@@ -8962,6 +9342,10 @@ snapshots:
     dependencies:
       sax: 1.1.4
 
+  emitter-listener@1.1.2:
+    dependencies:
+      shimmer: 1.2.1
+
   emittery@0.13.1: {}
 
   emoji-regex@10.6.0: {}
@@ -8975,7 +9359,13 @@ snapshots:
   end-of-stream@1.4.5:
     dependencies:
       once: 1.4.0
-    optional: true
+
+  ent@2.2.2:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      punycode: 1.4.1
+      safe-regex-test: 1.1.0
 
   entities@4.5.0: {}
 
@@ -9257,11 +9647,15 @@ snapshots:
 
   etag@1.8.1: {}
 
-  event-target-shim@5.0.1:
-    optional: true
+  event-target-shim@5.0.1: {}
 
   eventemitter3@5.0.4: {}
 
+  eventid@1.0.0:
+    dependencies:
+      d64: 1.0.0
+      uuid: 3.4.0
+
   execa@5.1.1:
     dependencies:
       cross-spawn: 7.0.6
@@ -9341,6 +9735,8 @@ snapshots:
     dependencies:
       fast-string-truncated-width: 3.0.3
 
+  fast-text-encoding@1.0.6: {}
+
   fast-wrap-ansi@0.2.0:
     dependencies:
       fast-string-width: 3.0.2
@@ -9512,7 +9908,6 @@ snapshots:
       hasown: 2.0.2
       mime-types: 2.1.35
       safe-buffer: 5.2.1
-    optional: true
 
   formdata-polyfill@4.0.10:
     dependencies:
@@ -9559,6 +9954,17 @@ snapshots:
 
   functions-have-names@1.2.3: {}
 
+  gaxios@2.3.4:
+    dependencies:
+      abort-controller: 3.0.0
+      extend: 3.0.2
+      https-proxy-agent: 5.0.1
+      is-stream: 2.0.1
+      node-fetch: 2.7.0
+    transitivePeerDependencies:
+      - encoding
+      - supports-color
+
   gaxios@6.7.1:
     dependencies:
       extend: 3.0.2
@@ -9569,7 +9975,6 @@ snapshots:
     transitivePeerDependencies:
       - encoding
       - supports-color
-    optional: true
 
   gaxios@7.1.4:
     dependencies:
@@ -9579,6 +9984,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  gcp-metadata@3.5.0:
+    dependencies:
+      gaxios: 2.3.4
+      json-bigint: 0.3.1
+    transitivePeerDependencies:
+      - encoding
+      - supports-color
+
   gcp-metadata@6.1.1:
     dependencies:
       gaxios: 6.7.1
@@ -9587,7 +10000,6 @@ snapshots:
     transitivePeerDependencies:
       - encoding
       - supports-color
-    optional: true
 
   gcp-metadata@8.1.2:
     dependencies:
@@ -9695,6 +10107,21 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  google-auth-library@5.10.1:
+    dependencies:
+      arrify: 2.0.1
+      base64-js: 1.5.1
+      ecdsa-sig-formatter: 1.0.11
+      fast-text-encoding: 1.0.6
+      gaxios: 2.3.4
+      gcp-metadata: 3.5.0
+      gtoken: 4.1.4
+      jws: 4.0.1
+      lru-cache: 5.1.1
+    transitivePeerDependencies:
+      - encoding
+      - supports-color
+
   google-auth-library@9.15.1:
     dependencies:
       base64-js: 1.5.1
@@ -9706,7 +10133,27 @@ snapshots:
     transitivePeerDependencies:
       - encoding
       - supports-color
-    optional: true
+
+  google-gax@1.15.4:
+    dependencies:
+      '@grpc/grpc-js': 1.3.8
+      '@grpc/proto-loader': 0.5.6
+      '@types/fs-extra': 8.1.5
+      '@types/long': 4.0.2
+      abort-controller: 3.0.0
+      duplexify: 3.7.1
+      google-auth-library: 5.10.1
+      is-stream-ended: 0.1.4
+      lodash.at: 4.6.0
+      lodash.has: 4.5.2
+      node-fetch: 2.7.0
+      protobufjs: 6.11.5
+      retry-request: 4.2.2
+      semver: 6.3.1
+      walkdir: 0.4.1
+    transitivePeerDependencies:
+      - encoding
+      - supports-color
 
   google-gax@4.6.1:
     dependencies:
@@ -9727,17 +10174,30 @@ snapshots:
       - supports-color
     optional: true
 
-  google-logging-utils@0.0.2:
-    optional: true
+  google-logging-utils@0.0.2: {}
 
   google-logging-utils@1.1.3: {}
 
+  google-p12-pem@2.0.5:
+    dependencies:
+      node-forge: 0.10.0
+
   gopd@1.2.0: {}
 
   graceful-fs@4.2.11: {}
 
   graphql@16.13.2: {}
 
+  gtoken@4.1.4:
+    dependencies:
+      gaxios: 2.3.4
+      google-p12-pem: 2.0.5
+      jws: 4.0.1
+      mime: 2.6.0
+    transitivePeerDependencies:
+      - encoding
+      - supports-color
+
   gtoken@7.1.0:
     dependencies:
       gaxios: 6.7.1
@@ -9745,7 +10205,6 @@ snapshots:
     transitivePeerDependencies:
       - encoding
       - supports-color
-    optional: true
 
   happy-dom@15.11.7:
     dependencies:
@@ -9798,8 +10257,9 @@ snapshots:
     dependencies:
       hermes-estree: 0.25.1
 
-  html-entities@2.6.0:
-    optional: true
+  hex2dec@1.1.2: {}
+
+  html-entities@2.6.0: {}
 
   html-escaper@2.0.2: {}
 
@@ -9813,6 +10273,14 @@ snapshots:
 
   http-parser-js@0.5.10: {}
 
+  http-proxy-agent@4.0.1:
+    dependencies:
+      '@tootallnate/once': 1.1.2
+      agent-base: 6.0.2
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
   http-proxy-agent@5.0.0:
     dependencies:
       '@tootallnate/once': 2.0.0
@@ -9820,7 +10288,6 @@ snapshots:
       debug: 4.4.3
     transitivePeerDependencies:
       - supports-color
-    optional: true
 
   https-proxy-agent@5.0.1:
     dependencies:
@@ -9828,7 +10295,6 @@ snapshots:
       debug: 4.4.3
     transitivePeerDependencies:
       - supports-color
-    optional: true
 
   https-proxy-agent@7.0.6:
     dependencies:
@@ -9967,6 +10433,8 @@ snapshots:
       call-bound: 1.0.4
       has-tostringtag: 1.0.2
 
+  is-obj@2.0.0: {}
+
   is-regex@1.2.1:
     dependencies:
       call-bound: 1.0.4
@@ -9980,6 +10448,8 @@ snapshots:
     dependencies:
       call-bound: 1.0.4
 
+  is-stream-ended@0.1.4: {}
+
   is-stream@2.0.1: {}
 
   is-string@1.1.1:
@@ -10012,6 +10482,10 @@ snapshots:
     dependencies:
       is-docker: 2.2.1
 
+  is@3.3.2: {}
+
+  isarray@1.0.0: {}
+
   isarray@2.0.5: {}
 
   isexe@2.0.0: {}
@@ -10389,6 +10863,10 @@ snapshots:
 
   jsesc@3.1.0: {}
 
+  json-bigint@0.3.1:
+    dependencies:
+      bignumber.js: 9.3.1
+
   json-bigint@1.0.0:
     dependencies:
       bignumber.js: 9.3.1
@@ -10562,10 +11040,14 @@ snapshots:
     dependencies:
       p-locate: 5.0.0
 
+  lodash.at@4.6.0: {}
+
   lodash.camelcase@4.3.0: {}
 
   lodash.clonedeep@4.5.0: {}
 
+  lodash.has@4.5.2: {}
+
   lodash.includes@4.3.0: {}
 
   lodash.isboolean@3.0.3: {}
@@ -10584,6 +11066,8 @@ snapshots:
 
   lodash@4.18.1: {}
 
+  log-driver@1.2.7: {}
+
   log-update@6.1.0:
     dependencies:
       ansi-escapes: 7.3.0
@@ -10592,6 +11076,8 @@ snapshots:
       strip-ansi: 7.2.0
       wrap-ansi: 9.0.2
 
+  long@4.0.0: {}
+
   long@5.3.2: {}
 
   loose-envify@1.4.0:
@@ -10639,6 +11125,8 @@ snapshots:
     dependencies:
       tmpl: 1.0.5
 
+  map-obj@4.3.0: {}
+
   math-intrinsics@1.1.0: {}
 
   media-typer@0.3.0: {}
@@ -10657,6 +11145,8 @@ snapshots:
 
   mime@1.6.0: {}
 
+  mime@2.6.0: {}
+
   mime@3.0.0:
     optional: true
 
@@ -10779,7 +11269,6 @@ snapshots:
   node-fetch@2.7.0:
     dependencies:
       whatwg-url: 5.0.0
-    optional: true
 
   node-fetch@3.3.2:
     dependencies:
@@ -10787,6 +11276,8 @@ snapshots:
       fetch-blob: 3.2.0
       formdata-polyfill: 4.0.10
 
+  node-forge@0.10.0: {}
+
   node-forge@1.4.0: {}
 
   node-int64@0.4.0: {}
@@ -11002,6 +11493,8 @@ snapshots:
       ansi-styles: 5.2.0
       react-is: 18.3.1
 
+  process-nextick-args@2.0.1: {}
+
   prompts@2.4.2:
     dependencies:
       kleur: 3.0.3
@@ -11018,6 +11511,22 @@ snapshots:
       protobufjs: 7.5.5
     optional: true
 
+  protobufjs@6.11.5:
+    dependencies:
+      '@protobufjs/aspromise': 1.1.2
+      '@protobufjs/base64': 1.1.2
+      '@protobufjs/codegen': 2.0.4
+      '@protobufjs/eventemitter': 1.1.0
+      '@protobufjs/fetch': 1.1.0
+      '@protobufjs/float': 1.0.2
+      '@protobufjs/inquire': 1.1.0
+      '@protobufjs/path': 1.1.2
+      '@protobufjs/pool': 1.1.0
+      '@protobufjs/utf8': 1.1.0
+      '@types/long': 4.0.2
+      '@types/node': 20.19.39
+      long: 4.0.0
+
   protobufjs@7.5.5:
     dependencies:
       '@protobufjs/aspromise': 1.1.2
@@ -11038,6 +11547,19 @@ snapshots:
       forwarded: 0.2.0
       ipaddr.js: 1.9.1
 
+  pump@3.0.4:
+    dependencies:
+      end-of-stream: 1.4.5
+      once: 1.4.0
+
+  pumpify@2.0.1:
+    dependencies:
+      duplexify: 4.1.3
+      inherits: 2.0.4
+      pump: 3.0.4
+
+  punycode@1.4.1: {}
+
   punycode@2.3.1: {}
 
   pure-rand@7.0.1: {}
@@ -11101,6 +11623,16 @@ snapshots:
 
   react@19.2.5: {}
 
+  readable-stream@2.3.8:
+    dependencies:
+      core-util-is: 1.0.3
+      inherits: 2.0.4
+      isarray: 1.0.0
+      process-nextick-args: 2.0.1
+      safe-buffer: 5.1.2
+      string_decoder: 1.1.1
+      util-deprecate: 1.0.2
+
   readable-stream@3.6.2:
     dependencies:
       inherits: 2.0.4
@@ -11160,6 +11692,13 @@ snapshots:
       onetime: 7.0.0
       signal-exit: 4.1.0
 
+  retry-request@4.2.2:
+    dependencies:
+      debug: 4.4.3
+      extend: 3.0.2
+    transitivePeerDependencies:
+      - supports-color
+
   retry-request@7.0.2:
     dependencies:
       '@types/request': 2.48.13
@@ -11168,7 +11707,6 @@ snapshots:
     transitivePeerDependencies:
       - encoding
       - supports-color
-    optional: true
 
   retry@0.13.1:
     optional: true
@@ -11215,6 +11753,8 @@ snapshots:
       has-symbols: 1.1.0
       isarray: 2.0.5
 
+  safe-buffer@5.1.2: {}
+
   safe-buffer@5.2.1: {}
 
   safe-push-apply@1.0.0:
@@ -11236,6 +11776,8 @@ snapshots:
 
   scheduler@0.27.0: {}
 
+  semver@5.7.2: {}
+
   semver@6.3.1: {}
 
   semver@7.7.4: {}
@@ -11332,6 +11874,8 @@ snapshots:
 
   shebang-regex@3.0.0: {}
 
+  shimmer@1.2.1: {}
+
   side-channel-list@1.0.1:
     dependencies:
       es-errors: 1.3.0
@@ -11388,6 +11932,11 @@ snapshots:
       ansi-styles: 6.2.3
       is-fullwidth-code-point: 5.1.0
 
+  snakecase-keys@3.2.1:
+    dependencies:
+      map-obj: 4.3.0
+      to-snake-case: 1.0.0
+
   source-map-js@1.2.1: {}
 
   source-map-support@0.5.13:
@@ -11421,10 +11970,8 @@ snapshots:
   stream-events@1.0.5:
     dependencies:
       stubs: 3.0.0
-    optional: true
 
-  stream-shift@1.0.3:
-    optional: true
+  stream-shift@1.0.3: {}
 
   strict-event-emitter@0.5.1: {}
 
@@ -11508,6 +12055,10 @@ snapshots:
       define-properties: 1.2.1
       es-object-atoms: 1.1.1
 
+  string_decoder@1.1.1:
+    dependencies:
+      safe-buffer: 5.1.2
+
   string_decoder@1.3.0:
     dependencies:
       safe-buffer: 5.2.1
@@ -11537,8 +12088,7 @@ snapshots:
     dependencies:
       '@tokenizer/token': 0.3.0
 
-  stubs@3.0.0:
-    optional: true
+  stubs@3.0.0: {}
 
   supports-color@7.2.0:
     dependencies:
@@ -11568,6 +12118,17 @@ snapshots:
       minizlib: 3.1.0
       yallist: 5.0.0
 
+  teeny-request@6.0.3:
+    dependencies:
+      http-proxy-agent: 4.0.1
+      https-proxy-agent: 5.0.1
+      node-fetch: 2.7.0
+      stream-events: 1.0.5
+      uuid: 7.0.3
+    transitivePeerDependencies:
+      - encoding
+      - supports-color
+
   teeny-request@9.0.0:
     dependencies:
       http-proxy-agent: 5.0.0
@@ -11578,7 +12139,6 @@ snapshots:
     transitivePeerDependencies:
       - encoding
       - supports-color
-    optional: true
 
   test-exclude@6.0.0:
     dependencies:
@@ -11586,6 +12146,11 @@ snapshots:
       glob: 7.2.3
       minimatch: 3.1.5
 
+  through2@3.0.2:
+    dependencies:
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+
   through2@4.0.2:
     dependencies:
       readable-stream: 3.6.2
@@ -11611,6 +12176,16 @@ snapshots:
 
   tmpl@1.0.5: {}
 
+  to-no-case@1.0.2: {}
+
+  to-snake-case@1.0.0:
+    dependencies:
+      to-space-case: 1.0.0
+
+  to-space-case@1.0.0:
+    dependencies:
+      to-no-case: 1.0.2
+
   toidentifier@1.0.1: {}
 
   token-types@6.1.2:
@@ -11631,8 +12206,7 @@ snapshots:
     dependencies:
       tldts: 7.0.28
 
-  tr46@0.0.3:
-    optional: true
+  tr46@0.0.3: {}
 
   tree-kill@1.2.2: {}
 
@@ -11666,6 +12240,8 @@ snapshots:
 
   type-detect@4.0.8: {}
 
+  type-fest@0.12.0: {}
+
   type-fest@0.21.3: {}
 
   type-fest@5.6.0:
@@ -11785,11 +12361,14 @@ snapshots:
 
   uuid@11.1.0: {}
 
+  uuid@3.4.0: {}
+
+  uuid@7.0.3: {}
+
   uuid@8.3.2:
     optional: true
 
-  uuid@9.0.1:
-    optional: true
+  uuid@9.0.1: {}
 
   v8-to-istanbul@9.3.0:
     dependencies:
@@ -11917,6 +12496,8 @@ snapshots:
     transitivePeerDependencies:
       - msw
 
+  walkdir@0.4.1: {}
+
   walker@1.0.8:
     dependencies:
       makeerror: 1.0.12
@@ -11925,8 +12506,7 @@ snapshots:
 
   web-vitals@4.2.4: {}
 
-  webidl-conversions@3.0.1:
-    optional: true
+  webidl-conversions@3.0.1: {}
 
   webidl-conversions@7.0.0: {}
 
@@ -11944,7 +12524,6 @@ snapshots:
     dependencies:
       tr46: 0.0.3
       webidl-conversions: 3.0.1
-    optional: true
 
   which-boxed-primitive@1.1.1:
     dependencies:
diff --git a/scripts/seed-break-glass-config.ts b/scripts/seed-break-glass-config.ts
new file mode 100644
index 00000000..314acc7c
--- /dev/null
+++ b/scripts/seed-break-glass-config.ts
@@ -0,0 +1,54 @@
+/**
+ * Seed Break-Glass Configuration
+ *
+ * Creates the system_config/break_glass_config document with two
+ * bcrypt-hashed emergency codes. The plaintext codes are printed
+ * once and never stored — record them securely.
+ *
+ * Idempotent: if the document already exists, exits without changes.
+ *
+ * Usage:
+ *   GOOGLE_APPLICATION_CREDENTIALS=path/to/key.json pnpm exec tsx scripts/seed-break-glass-config.ts
+ */
+
+import { randomBytes } from 'node:crypto'
+
+import * as bcrypt from 'bcryptjs'
+import { initializeApp, getApps } from 'firebase-admin/app'
+import { getFirestore } from 'firebase-admin/firestore'
+
+const COST_FACTOR = 12
+const CONFIG_DOC = 'system_config/break_glass_config'
+
+if (getApps().length === 0) {
+  initializeApp()
+}
+
+const db = getFirestore()
+
+async function main() {
+  const existing = await db.doc(CONFIG_DOC).get()
+  if (existing.exists) {
+    console.log('Break-glass config already exists. No changes made.')
+    return
+  }
+
+  const codeA = randomBytes(16).toString('hex')
+  const codeB = randomBytes(16).toString('hex')
+  const [hashA, hashB] = await Promise.all([
+    bcrypt.hash(codeA, COST_FACTOR),
+    bcrypt.hash(codeB, COST_FACTOR),
+  ])
+
+  await db.doc(CONFIG_DOC).set({ hashedCodes: [hashA, hashB] })
+
+  console.log('Break-glass codes seeded. Store these securely:')
+  console.log(`Controller A: ${codeA}`)
+  console.log(`Controller B: ${codeB}`)
+  console.log('These values will NOT be shown again.')
+}
+
+main().catch((err) => {
+  console.error(err)
+  process.exit(1)
+})