@7365admin1/core 3.32.2-staging.73 → 3.32.2-staging.75

package/dist/index.js

@@ -24737,6 +24737,47 @@ var loggerDahua = winston.createLogger({
   ]
 });
 
+// src/utils/camera-alert.util.ts
+var DIRECTION_WORDS = {
+  entry: "entry",
+  exit: "exit",
+  both: "entry and exit",
+  visitors: "visitor",
+  residents: "resident"
+};
+function describeCamera(camera) {
+  const site = String(camera?.siteName ?? "").trim();
+  const name = String(camera?.name ?? "").trim();
+  const at = site ? ` at ${site}` : "";
+  if (name)
+    return `Camera "${name}"${at}`;
+  const words = DIRECTION_WORDS[String(camera?.direction ?? "").trim().toLowerCase()];
+  return words ? `The ${words} ANPR camera${at}` : `The ANPR camera${at}`;
+}
+function cameraUnreachableMessage(camera) {
+  return `${describeCamera(camera)} is not responding. Plate reads and automatic barrier opening are stopped while it is down. The server keeps trying to reconnect on its own. If it does not come back, ask your site technician or the security-system installer to check the camera's power and network.`;
+}
+function cameraRecoveredMessage(camera) {
+  return `${describeCamera(camera)} is responding again. Plate reads have resumed.`;
+}
+function cameraCredentialsMessage(camera) {
+  return `${describeCamera(camera)} refused the login, so it cannot read plates. The username or password saved for it is wrong. An administrator can correct them in Site Settings > Cameras; if they are already correct, the camera's own account needs checking by your site technician.`;
+}
+function cameraNotAuthorisedMessage(camera) {
+  return `${describeCamera(camera)} rejected our connection, so it cannot read plates. This usually means its account is not allowed to use the plate-reading feed. Please ask your site technician or the security-system installer to check the camera's account permissions.`;
+}
+var CAMERA_ALERT_AT_ATTEMPT = [1, 6, 30, 90];
+var CAMERA_ALERT_EVERY_AFTER = 90;
+function shouldAlertOnFailure(consecutiveFailures) {
+  if (!Number.isInteger(consecutiveFailures) || consecutiveFailures < 1)
+    return false;
+  if (CAMERA_ALERT_AT_ATTEMPT.includes(consecutiveFailures))
+    return true;
+  if (consecutiveFailures < CAMERA_ALERT_EVERY_AFTER)
+    return false;
+  return (consecutiveFailures - CAMERA_ALERT_EVERY_AFTER) % CAMERA_ALERT_EVERY_AFTER === 0;
+}
+
 // src/services/dahua.service.ts
 var cameraRegistry = /* @__PURE__ */ new Map();
 var _savedOnDetected;
@@ -25230,6 +25271,8 @@ function useDahuaService() {
   async function getTrafficJunction(camera, signal, onDetected) {
     console.log(`getTrafficJunction camera object`, camera);
     let authFailureCount = 0;
+    let connectionFailureCount = 0;
+    let alertedFailureCount = 0;
     const MAX_AUTH_RETRIES = 10;
     while (!signal.aborted) {
       let bufferQueue = null;
@@ -25257,19 +25300,33 @@ function useDahuaService() {
             onDetected({
               site: camera?.site,
               direction: camera?.direction,
-              messagePermanent: `Camera [${camera?.siteName}-${camera?.direction}]. Connection Error. Check username and password and try after 10 minutes.`
+              messagePermanent: cameraCredentialsMessage(camera)
             });
           }
           return;
         } else if ([400, 500].includes(statusCode)) {
           loggerDahua.error(`[${camera?.siteName}-${camera?.direction}] Connection error: ${statusCode}`);
           if (onDetected) {
-            onDetected({ site: camera?.site, messagePermanent: `Camera [${camera?.siteName}-${camera?.direction}]. Connection Error. Possible Not Authorized.` });
+            onDetected({ site: camera?.site, messagePermanent: cameraNotAuthorisedMessage(camera) });
           }
           return;
         }
         authFailureCount = 0;
         isAuthFailure = false;
+        if (alertedFailureCount > 0 && onDetected) {
+          onDetected({
+            site: camera?.site,
+            direction: camera?.direction,
+            // `event` and `camera` let a client group or clear an alert per
+            // camera instead of matching on the message text. Older clients
+            // ignore them and just render `message`, as they always have.
+            event: "camera-recovered",
+            camera: camera?._id?.toString(),
+            message: cameraRecoveredMessage(camera)
+          });
+        }
+        connectionFailureCount = 0;
+        alertedFailureCount = 0;
         loggerDahua.info(`[${camera?.siteName}-${camera?.direction}] Successfully connected to ANPR.`);
         const contentType = response.res.headers["content-type"];
         const boundaryMatch = contentType?.match(/boundary=(.*)$/i);
@@ -25323,7 +25380,7 @@ function useDahuaService() {
             onDetected({
               site: camera?.site,
               direction: camera?.direction,
-              messagePermanent: `Camera [${camera?.siteName}-${camera?.direction}]. Connection Error. Check username and password and try after 10 minutes.`
+              messagePermanent: cameraCredentialsMessage(camera)
             });
           }
           return;
@@ -25343,7 +25400,7 @@ function useDahuaService() {
               onDetected({
                 site: camera?.site,
                 direction: camera?.direction,
-                messagePermanent: `Camera [${camera?.siteName}-${camera?.direction}]. Connection Error. Check username and password.`
+                messagePermanent: cameraCredentialsMessage(camera)
               });
             }
             return;
@@ -25351,14 +25408,18 @@ function useDahuaService() {
         } else {
           authFailureCount = 0;
           isAuthFailure = false;
+          connectionFailureCount++;
           loggerDahua.error(
-            `[${camera?.siteName}-${camera?.direction}] Connection lost or error: ${error.message || error}. Retrying in 10 seconds...`
+            `[${camera?.siteName}-${camera?.direction}] Connection lost or error: ${error.message || error}. Retrying in 10 seconds... (failure ${connectionFailureCount})`
           );
-          if (onDetected) {
+          if (onDetected && shouldAlertOnFailure(connectionFailureCount)) {
+            alertedFailureCount = connectionFailureCount;
             onDetected({
               site: camera?.site,
               direction: camera?.direction,
-              message: `Camera in [${camera?.siteName}-${camera?.direction}] Connection Lost. Retrying in 10 seconds. Check the camera if this issue persists, Or set the camera to Inactive to stop this notification.`
+              event: "camera-fault",
+              camera: camera?._id?.toString(),
+              message: cameraUnreachableMessage(camera)
             });
           }
         }
@@ -75089,6 +75150,91 @@ async function configureVisitorQrReader(client, qrFormat) {
     identifier: { qrcode_identification_enabled: "1" }
   });
 }
+async function ensureVisitorAccessAuthorization(client, readerId, readerLocation, hidUserId) {
+  const accessRuleId = createStableHidId(`visitor-access-rule:${readerId}`);
+  const existingRuleResponse = await client.loadObjects({
+    object: "access_rules",
+    where: { access_rules: { id: accessRuleId } },
+    limit: 1,
+    offset: 0
+  });
+  if (getHidObjectRows(existingRuleResponse, "access_rules").length) {
+    await client.modifyObjects({
+      object: "access_rules",
+      where: { access_rules: { id: accessRuleId } },
+      values: {
+        name: "iService365 Visitor Access",
+        type: 1,
+        priority: 0
+      }
+    });
+  } else {
+    await client.createObjects({
+      object: "access_rules",
+      values: [{
+        id: accessRuleId,
+        name: "iService365 Visitor Access",
+        type: 1,
+        priority: 0
+      }]
+    });
+  }
+  const portalsResponse = await client.loadObjects({
+    object: "portals",
+    limit: 100,
+    offset: 0
+  });
+  const portals = getHidObjectRows(portalsResponse, "portals").map((portal) => ({
+    id: Number(portal.id),
+    name: String(portal.name || "").trim()
+  })).filter((portal) => Number.isSafeInteger(portal.id) && portal.id > 0);
+  if (!portals.length) {
+    throw new import_node_server_utils266.BadRequestError(
+      "The HID reader has no portal configured for visitor access."
+    );
+  }
+  const normalizedLocation = String(readerLocation || "").trim().toLowerCase();
+  const locationMatches = normalizedLocation ? portals.filter((portal) => {
+    const portalName = portal.name.toLowerCase();
+    return portalName === normalizedLocation || portalName.includes(normalizedLocation) || normalizedLocation.includes(portalName);
+  }) : [];
+  const selectedPortals = locationMatches.length === 1 ? locationMatches : portals.length === 1 ? portals : [];
+  if (!selectedPortals.length) {
+    throw new import_node_server_utils266.BadRequestError(
+      "The HID reader has multiple portals. Match the reader location to one portal before issuing visitor access."
+    );
+  }
+  const portalIds = selectedPortals.map((portal) => portal.id);
+  const userAccessRulesResponse = await client.loadObjects({
+    object: "user_access_rules",
+    where: { user_access_rules: { user_id: hidUserId, access_rule_id: accessRuleId } },
+    limit: 1,
+    offset: 0
+  });
+  if (!getHidObjectRows(userAccessRulesResponse, "user_access_rules").length) {
+    await client.createObjects({
+      object: "user_access_rules",
+      values: [{ user_id: hidUserId, access_rule_id: accessRuleId }]
+    });
+  }
+  const portalAccessRulesResponse = await client.loadObjects({
+    object: "portal_access_rules",
+    where: { portal_access_rules: { access_rule_id: accessRuleId } },
+    limit: 100,
+    offset: 0
+  });
+  const linkedPortalIds = new Set(
+    getHidObjectRows(portalAccessRulesResponse, "portal_access_rules").map((relation) => Number(relation.portal_id)).filter((portalId) => Number.isSafeInteger(portalId) && portalId > 0)
+  );
+  const missingPortalLinks = portalIds.filter((portalId) => !linkedPortalIds.has(portalId)).map((portalId) => ({ portal_id: portalId, access_rule_id: accessRuleId }));
+  if (missingPortalLinks.length) {
+    await client.createObjects({
+      object: "portal_access_rules",
+      values: missingPortalLinks
+    });
+  }
+  return { accessRuleId, portalIds };
+}
 function getRelayAuth() {
   const username = process.env.HID_AMICO_RELAY_USERNAME;
   const password = process.env.HID_AMICO_RELAY_PASSWORD;
@@ -75712,6 +75858,12 @@ function useHidAmicoService() {
           values: [{ id: hidUserId, ...user }]
         });
       }
+      const authorization = await ensureVisitorAccessAuthorization(
+        client,
+        readerId,
+        reader.location,
+        hidUserId
+      );
       for (const object of ["qrcodes", "cards"]) {
         const existingCredentialResponse = await client.loadObjects({
           object,
@@ -75761,6 +75913,8 @@ function useHidAmicoService() {
           qrFormat: value.qrFormat,
           credentialObject: credential.object,
           credentialId: credential.credentialId,
+          accessRuleId: authorization.accessRuleId,
+          portalIds: authorization.portalIds,
           issuedAt: issuedAt.toISOString(),
           expiresAt: expiresAt.toISOString()
         }
@@ -75784,6 +75938,8 @@ function useHidAmicoService() {
           visitor: value.visitorId,
           hidUserId,
           credentialObject: credential.object,
+          accessRuleId: authorization.accessRuleId,
+          portalIds: authorization.portalIds,
           issuedAt: issuedAt.toISOString(),
           expiresAt: expiresAt.toISOString()
         }
@@ -75975,6 +76131,12 @@ function useHidAmicoService() {
           values: [{ id: hidUserId, ...user }]
         });
       }
+      const authorization = await ensureVisitorAccessAuthorization(
+        client,
+        readerId,
+        reader.location,
+        hidUserId
+      );
       const result = await client.setUserImage(hidUserId, image, timestamp, match);
       const existingIdentity = await repo.findExistingIdentity({ reader: readerId, hidUserId });
       const existingMetadata = existingIdentity && isUnknownRecord(existingIdentity.metadata) ? existingIdentity.metadata : {};
@@ -75990,6 +76152,8 @@ function useHidAmicoService() {
           temporary: true,
           facialEnrolled: true,
           facialEnrolledAt: issuedAt.toISOString(),
+          accessRuleId: authorization.accessRuleId,
+          portalIds: authorization.portalIds,
           expiresAt: expiresAt.toISOString()
         }
       };
@@ -76011,6 +76175,8 @@ function useHidAmicoService() {
           visitor: visitorId,
           hidUserId,
           imageBytes: image.length,
+          accessRuleId: authorization.accessRuleId,
+          portalIds: authorization.portalIds,
           issuedAt: issuedAt.toISOString(),
           expiresAt: expiresAt.toISOString(),
           result: summarizeUserImageResult(result)