@7365admin1/core 3.32.2-staging.73 → 3.32.2-staging.74

package/dist/index.js

@@ -75089,6 +75089,91 @@ async function configureVisitorQrReader(client, qrFormat) {
     identifier: { qrcode_identification_enabled: "1" }
   });
 }
+async function ensureVisitorAccessAuthorization(client, readerId, readerLocation, hidUserId) {
+  const accessRuleId = createStableHidId(`visitor-access-rule:${readerId}`);
+  const existingRuleResponse = await client.loadObjects({
+    object: "access_rules",
+    where: { access_rules: { id: accessRuleId } },
+    limit: 1,
+    offset: 0
+  });
+  if (getHidObjectRows(existingRuleResponse, "access_rules").length) {
+    await client.modifyObjects({
+      object: "access_rules",
+      where: { access_rules: { id: accessRuleId } },
+      values: {
+        name: "iService365 Visitor Access",
+        type: 1,
+        priority: 0
+      }
+    });
+  } else {
+    await client.createObjects({
+      object: "access_rules",
+      values: [{
+        id: accessRuleId,
+        name: "iService365 Visitor Access",
+        type: 1,
+        priority: 0
+      }]
+    });
+  }
+  const portalsResponse = await client.loadObjects({
+    object: "portals",
+    limit: 100,
+    offset: 0
+  });
+  const portals = getHidObjectRows(portalsResponse, "portals").map((portal) => ({
+    id: Number(portal.id),
+    name: String(portal.name || "").trim()
+  })).filter((portal) => Number.isSafeInteger(portal.id) && portal.id > 0);
+  if (!portals.length) {
+    throw new import_node_server_utils266.BadRequestError(
+      "The HID reader has no portal configured for visitor access."
+    );
+  }
+  const normalizedLocation = String(readerLocation || "").trim().toLowerCase();
+  const locationMatches = normalizedLocation ? portals.filter((portal) => {
+    const portalName = portal.name.toLowerCase();
+    return portalName === normalizedLocation || portalName.includes(normalizedLocation) || normalizedLocation.includes(portalName);
+  }) : [];
+  const selectedPortals = locationMatches.length === 1 ? locationMatches : portals.length === 1 ? portals : [];
+  if (!selectedPortals.length) {
+    throw new import_node_server_utils266.BadRequestError(
+      "The HID reader has multiple portals. Match the reader location to one portal before issuing visitor access."
+    );
+  }
+  const portalIds = selectedPortals.map((portal) => portal.id);
+  const userAccessRulesResponse = await client.loadObjects({
+    object: "user_access_rules",
+    where: { user_access_rules: { user_id: hidUserId, access_rule_id: accessRuleId } },
+    limit: 1,
+    offset: 0
+  });
+  if (!getHidObjectRows(userAccessRulesResponse, "user_access_rules").length) {
+    await client.createObjects({
+      object: "user_access_rules",
+      values: [{ user_id: hidUserId, access_rule_id: accessRuleId }]
+    });
+  }
+  const portalAccessRulesResponse = await client.loadObjects({
+    object: "portal_access_rules",
+    where: { portal_access_rules: { access_rule_id: accessRuleId } },
+    limit: 100,
+    offset: 0
+  });
+  const linkedPortalIds = new Set(
+    getHidObjectRows(portalAccessRulesResponse, "portal_access_rules").map((relation) => Number(relation.portal_id)).filter((portalId) => Number.isSafeInteger(portalId) && portalId > 0)
+  );
+  const missingPortalLinks = portalIds.filter((portalId) => !linkedPortalIds.has(portalId)).map((portalId) => ({ portal_id: portalId, access_rule_id: accessRuleId }));
+  if (missingPortalLinks.length) {
+    await client.createObjects({
+      object: "portal_access_rules",
+      values: missingPortalLinks
+    });
+  }
+  return { accessRuleId, portalIds };
+}
 function getRelayAuth() {
   const username = process.env.HID_AMICO_RELAY_USERNAME;
   const password = process.env.HID_AMICO_RELAY_PASSWORD;
@@ -75712,6 +75797,12 @@ function useHidAmicoService() {
           values: [{ id: hidUserId, ...user }]
         });
       }
+      const authorization = await ensureVisitorAccessAuthorization(
+        client,
+        readerId,
+        reader.location,
+        hidUserId
+      );
       for (const object of ["qrcodes", "cards"]) {
         const existingCredentialResponse = await client.loadObjects({
           object,
@@ -75761,6 +75852,8 @@ function useHidAmicoService() {
           qrFormat: value.qrFormat,
           credentialObject: credential.object,
           credentialId: credential.credentialId,
+          accessRuleId: authorization.accessRuleId,
+          portalIds: authorization.portalIds,
           issuedAt: issuedAt.toISOString(),
           expiresAt: expiresAt.toISOString()
         }
@@ -75784,6 +75877,8 @@ function useHidAmicoService() {
           visitor: value.visitorId,
           hidUserId,
           credentialObject: credential.object,
+          accessRuleId: authorization.accessRuleId,
+          portalIds: authorization.portalIds,
           issuedAt: issuedAt.toISOString(),
           expiresAt: expiresAt.toISOString()
         }
@@ -75975,6 +76070,12 @@ function useHidAmicoService() {
           values: [{ id: hidUserId, ...user }]
         });
       }
+      const authorization = await ensureVisitorAccessAuthorization(
+        client,
+        readerId,
+        reader.location,
+        hidUserId
+      );
       const result = await client.setUserImage(hidUserId, image, timestamp, match);
       const existingIdentity = await repo.findExistingIdentity({ reader: readerId, hidUserId });
       const existingMetadata = existingIdentity && isUnknownRecord(existingIdentity.metadata) ? existingIdentity.metadata : {};
@@ -75990,6 +76091,8 @@ function useHidAmicoService() {
           temporary: true,
           facialEnrolled: true,
           facialEnrolledAt: issuedAt.toISOString(),
+          accessRuleId: authorization.accessRuleId,
+          portalIds: authorization.portalIds,
           expiresAt: expiresAt.toISOString()
         }
       };
@@ -76011,6 +76114,8 @@ function useHidAmicoService() {
           visitor: visitorId,
           hidUserId,
           imageBytes: image.length,
+          accessRuleId: authorization.accessRuleId,
+          portalIds: authorization.portalIds,
           issuedAt: issuedAt.toISOString(),
           expiresAt: expiresAt.toISOString(),
           result: summarizeUserImageResult(result)