@7365admin1/core 3.47.1-staging.131 → 3.47.1-staging.133

package/.changeset/member-type-platform-staff-gate.md

@@ -0,0 +1,71 @@
+---
+"@7365admin1/core": minor
+---
+
+Only Seven365 staff can create a Seven365 staff membership.
+
+`members.type` decides who is platform staff. `isSuperAdmin` answers true for a
+live `members` row of type `"admin"` whose role is also of type `"admin"`, and
+that field was validated as `Joi.string().required()` — a free-form string with
+no allow-list. Every request path that writes a membership takes the value
+straight from the caller:
+
+- `POST /api/members/direct` writes the body's `app` verbatim as `type`
+  (`member.service.ts:137`);
+- `POST /api/auth/invite` stores the body's `app` on the invitation, and
+  accepting it writes that value as `type` (`member.service.ts:73`);
+- `PUT /api/members/id/:id/role/:role/type/:type/org/:org` re-pointed a
+  membership at any role, including the seeded platform one, checking only that
+  an owner role existed and that the target was not the last owner — never who
+  was asking.
+
+All three are `requireAuth`-only. So any signed-in account — a resident, a
+cleaner, a guard — could post `{ app: "admin" }`, or invite itself as `admin`
+and accept its own invitation, and be Seven365 platform staff on the next
+request. That defeats every gate built on `isSuperAdmin`: the staff console,
+service-provider approvals, the notification broadcast and client suspension.
+Executed end to end against a throwaway in-memory database, the chain succeeded
+at every step.
+
+Three changes, all fail-closed:
+
+- `members.type` now validates against `MEMBER_TYPES`, enumerated from the
+  values this package actually writes — `admin` (`user.service.ts`
+  `createDefaultUser` and the console's own invitations), `organization` (the
+  default in `member.service.ts`, `user.service.ts`, `user-v2.service.ts` and
+  `subscription.service.ts`), `resident` (`person.service.ts`), and the eight
+  `AppServiceType` service memberships, the same list `organization.model.ts`
+  already accepts as an organisation's `nature`.
+- `createMemberDirect` refuses `app: "admin"`, and refuses a role of type
+  `"admin"`, unless the caller is already platform staff. The caller is resolved
+  from the session by the controller and passed in; it is never read from a body
+  or a URL.
+- `createUserInvite` refuses `app: "admin"` unless the caller is already
+  platform staff, so the invitation road to the same place is shut too.
+
+`updateRoleById` refuses to move a membership onto a role of type `"admin"` for
+the same reason — that was step 6 of the chain, the one that turned
+`isPlatformOwner` true by pointing a membership at the seeded owner role.
+
+The seeded role marker `default: true` was re-checked rather than assumed and is
+still not forgeable: Joi rejects unknown keys on all three role schemas.
+
+Every legitimate caller across the sibling repos was checked and still works.
+`web-app-main pages/sign-in.vue` and `pages/verify/email/index.vue`, and
+`web-app-org pages/onboarding/getting-started/index.vue`, all pass
+`app: "organization"` or a service type — none reaches a gate. The one caller
+that does send `"admin"` is the staff console itself
+(`web-app-org pages/super-admin/invitations/index.vue:403`), operated by an
+account that already is staff.
+
+One transitional case is kept deliberately. `web-app-org
+pages/org/[organization]/invitations/invite.vue:122` and `web-app-hygiene
+pages/[org]/[site]/invitations/invite.vue:135` send the ORGANISATION ID as the
+invitation's `app`, so accepting one of those invitations writes an org id into
+`members.type`. That is a defect in those two screens, but it is live: the
+validator therefore also accepts a 24-character hex string, with the two file
+references named at the line, to be removed once both screens send a real
+membership type. It cannot be used to escalate — `"admin"` is not 24 hex
+characters, so the allow-list still decides that.
+
+No response shape, status code or field changed for a permitted caller.

package/.changeset/role-scope-and-admin-type.md

@@ -0,0 +1,58 @@
+---
+"@7365admin1/core": minor
+---
+
+Scope role writes to the role's own organisation, and reserve platform roles for Seven365 staff.
+
+Every write on `role.controller.ts` carried `requireAuth` and nothing more, and
+the role id comes from the URL. So any signed-in account on the platform — a
+resident, a cleaner, a guard — could reach any organisation's roles:
+
+- `PATCH /api/roles/permissions/id/:id` rewrote another client's role, including
+  its owner role. Executed against a throwaway database during the audit, an
+  outsider rewrote a second organisation's owner role and got a 200.
+- `PATCH /api/roles/id/:id` renamed it and replaced its permissions.
+- `PUT /api/roles/deleted/role` and `PUT /api/roles/:id/delete-with-reassignments`
+  deleted it, the second one moving its members onto other roles on the way.
+- `GET /api/roles/:id/deletion-preview` listed the members holding it — another
+  client's staff list by another name.
+- `POST /api/roles` and `POST /api/roles/v2` minted a role of `type: "admin"` —
+  the half of `isSuperAdmin` that lives in the roles collection.
+
+Each of the five writes now loads the role first and authorises on the
+organisation stored ON THAT ROLE, never on one the caller supplied:
+
+- a role carrying an `org` is a tenant's, and goes through `requireOrgAccess` —
+  Seven365 staff, or a live member of that organisation. That is the rule the
+  invitation and subscription paths already use; no new mechanism is introduced.
+- a role with NO `org` is a platform role — the staff console's own, and the one
+  `createDefaultUser` seeds — and only Seven365 staff may touch it. A missing org
+  is refused, not waved through.
+
+`createRole` on both `/api/roles` and `/api/roles/v2` requires the caller to be
+platform staff before it will accept `type: "admin"`. `/api/roles/v2` is a
+separate mount onto a separate controller, so gating one and not the other would
+have left the hole reachable by adding `/v2` to the URL.
+
+A role the caller may not reach is reported the same as a role that does not
+exist, so role ids cannot be enumerated by watching the difference.
+
+Two things are deliberately NOT changed, and are asserted in the tests so they
+read as decisions rather than oversights. `createRole` is not scoped to the
+caller's own organisation, and neither are the role reads: `web-app-main
+pages/sign-in.vue:311,439` and `pages/verify/email/index.vue:474` look up and
+create the "Admin Service Provider" role in the INVITING organisation, which the
+caller has not joined yet — that is what accepting a service-provider invitation
+is, and an org-membership check there would break sign-in for every invited
+provider. Scoping those needs the invitation to be consulted as well as the
+membership, and is a separate change.
+
+Every legitimate caller was checked and still works: the tenant screens
+(`web-app-org pages/org/[organization]/roles-permissions.vue`, and the
+`[org]/[site]/roles-permissions` screens in hygiene, security and
+property-management, all through `layer-common RolePermissionMain.vue` and
+`RolePermissionFormPreviewUpdate.vue`) edit roles in an organisation the operator
+is a member of; the staff console (`web-app-org pages/super-admin/*` and the
+retired admin app) is operated by staff and keeps cross-tenant reach.
+
+No response shape or field changed for a permitted caller.

package/dist/index.d.ts

@@ -250,6 +250,17 @@ declare function useUserService(): {
     updatePasswordById: (id: string, currentPassword: string, newPassword: string, passwordConfirmation: string) => Promise<mongodb.UpdateResult<bson.Document>>;
 };
 
+/**
+ * The role type that makes its holder Seven365 platform staff.
+ *
+ * `isSuperAdmin` (`utils/super-admin.util.ts`) requires BOTH a `members` row of
+ * type "admin" AND a role of this type; `isPlatformOwner` additionally requires
+ * `default: true` on it. So this is the most privileged value in the roles
+ * collection, and `createRole` accepted it from any signed-in caller. Named once
+ * here rather than typed as a literal in each gate, because a second spelling is
+ * how a check drifts out of agreement with the thing it is defending.
+ */
+declare const PLATFORM_STAFF_ROLE_TYPE = "admin";
 type TRole = {
     _id?: ObjectId;
     name?: string;
@@ -320,6 +331,41 @@ declare function useRoleController(): {
     deleteWithReassignments: (req: Request, res: Response, next: NextFunction) => Promise<void>;
 };
 
+/**
+ * The membership type that makes somebody Seven365 platform staff.
+ *
+ * `isSuperAdmin` (`utils/super-admin.util.ts`) answers true for a live
+ * `members` row of this type whose role is also of type "admin". That makes
+ * this string the most privileged value in the collection, so it is named once
+ * and gated on the caller wherever a request can supply it — see
+ * `member.service.ts` and `verification-v2.controller.ts`.
+ */
+declare const PLATFORM_STAFF_MEMBER_TYPE = "admin";
+/**
+ * Every membership type this package actually writes.
+ *
+ * `type` used to be `Joi.string().required()` with no allow-list at all, and it
+ * is the field the platform-staff test reads. Any signed-in account could post
+ * `{ app: "admin" }` to `POST /api/members/direct`, or invite itself with
+ * `app: "admin"`, and be Seven365 staff on the next request.
+ *
+ * Nothing here is invented. Each value is one this package writes today:
+ *
+ * - `admin` — `user.service.ts createDefaultUser` seeds it, and the staff
+ *   console's own invitations send `app: "admin"`.
+ * - `organization` — the default in `member.service.ts:73`,
+ *   `user.service.ts:197` and `user-v2.service.ts:114`, and what
+ *   `subscription.service.ts:167` writes for a new client's first member.
+ * - `resident` — `person.service.ts:163`, when a resident record gets a login.
+ * - the eight `AppServiceType` values — the service-provider memberships, the
+ *   same list `organization.model.ts allowedNatures` already accepts for an
+ *   organisation's nature.
+ *
+ * Being on this list is not permission to BE that type. `admin` is allowed here
+ * because the seed and the console legitimately write it; who may ask for it is
+ * decided separately, on the caller, in `member.service.ts`.
+ */
+declare const MEMBER_TYPES: string[];
 type TMember = {
     _id?: ObjectId;
     name: string;
@@ -434,7 +480,7 @@ declare function useMemberService(): {
     createMember: (id: string) => Promise<{
         member: string;
     }>;
-    createMemberDirect: ({ userId, orgId, roleId, app, siteId, siteName, onboardingRequired, }: {
+    createMemberDirect: ({ userId, orgId, roleId, app, siteId, siteName, onboardingRequired, callerId, }: {
         userId: string;
         orgId: string;
         roleId: string;
@@ -442,10 +488,12 @@ declare function useMemberService(): {
         siteId?: string | undefined;
         siteName?: string | undefined;
         onboardingRequired?: boolean | undefined;
+        /** the session's user id, from the controller — never from the body */
+        callerId?: string | undefined;
     }) => Promise<{
         member: string;
     }>;
-    updateRoleById: (id: string, role: string, type: string, org: string) => Promise<{
+    updateRoleById: (id: string, role: string, type: string, org: string, callerId?: string) => Promise<{
         message: string;
     }>;
     updateSiteById: (id: string, siteId: string, siteName: string) => Promise<{
@@ -4192,7 +4240,7 @@ declare function MPerson(value: TPerson): {
     unit: string | ObjectId | null;
     start: string | Date | undefined;
     end: string | Date | undefined;
-    type: "walk-in" | "drop-off" | "contractor" | "delivery" | "pick-up" | "guest" | "tenant" | "resident" | undefined;
+    type: "resident" | "walk-in" | "drop-off" | "contractor" | "delivery" | "pick-up" | "guest" | "tenant" | undefined;
     email: string | undefined;
     password: string;
     status: string;
@@ -4554,7 +4602,7 @@ declare function usePersonRepo(): {
     getPersonByPhoneNumber: (value: string) => Promise<TPerson | null>;
     getPeopleByUnit: ({ status, type, unit, }: {
         status: string;
-        type?: ("walk-in" | "drop-off" | "contractor" | "delivery" | "pick-up" | "guest" | "tenant" | "resident")[] | undefined;
+        type?: ("resident" | "walk-in" | "drop-off" | "contractor" | "delivery" | "pick-up" | "guest" | "tenant")[] | undefined;
         unit?: string | undefined;
     }, session?: ClientSession) => Promise<TPerson[]>;
     getCompany: (search?: string) => Promise<any[]>;
@@ -9790,7 +9838,7 @@ declare function MHidAmicoIdentity(value: THidAmicoIdentity): {
     member: ObjectId | undefined;
     serviceProvider: ObjectId | undefined;
     visitor: ObjectId | undefined;
-    type: "admin" | "contractor" | "resident" | "unknown" | "visitor" | "staff";
+    type: "admin" | "resident" | "contractor" | "unknown" | "visitor" | "staff";
     status: "deleted" | "active" | "inactive";
     metadata: Record<string, unknown>;
     createdAt: string | Date;
@@ -9894,7 +9942,7 @@ declare function useHidAmicoRepo(): {
         member: ObjectId | undefined;
         serviceProvider: ObjectId | undefined;
         visitor: ObjectId | undefined;
-        type: "admin" | "contractor" | "resident" | "unknown" | "visitor" | "staff";
+        type: "admin" | "resident" | "contractor" | "unknown" | "visitor" | "staff";
         status: "deleted" | "active" | "inactive";
         metadata: Record<string, unknown>;
         createdAt: string | Date;
@@ -10251,7 +10299,7 @@ declare function useHidAmicoService(): {
         member: bson.ObjectId | undefined;
         serviceProvider: bson.ObjectId | undefined;
         visitor: bson.ObjectId | undefined;
-        type: "admin" | "contractor" | "resident" | "unknown" | "visitor" | "staff";
+        type: "admin" | "resident" | "contractor" | "unknown" | "visitor" | "staff";
         status: "deleted" | "active" | "inactive";
         metadata: Record<string, unknown>;
         createdAt: string | Date;
@@ -11410,4 +11458,4 @@ declare function useNotificationPreferenceController(): {
     update: (req: Request, res: Response, next: NextFunction) => Promise<void>;
 };
 
-export { ANPRMode, AUDIT_VALUE_MAX_LENGTH, AccessTypeProps, AppServiceType, AssignCardConfig, BidStatus, BidType, BuildingLevelStatus, BuildingStatus, BulkCardUpdate, BulletinOrder, BulletinRecipient, BulletinSort, BulletinStatus, BulletinVideoOrder, BulletinVideoSort, CAMERA_ANPR_PERMISSIONS, CAMERA_CAPABILITIES, CAMERA_CAPABILITY_REASONS, CAMERA_NOT_PATROL_OR_CCTV, CAMERA_NO_SUB_STREAM_TTL_SECONDS, CAMERA_PTZ_PERMISSIONS, CAMERA_REQUEST_TIMEOUT_MS, CAMERA_RTSP_TIMEOUT_MS, CAMERA_SETUP_PERMISSIONS, CAMERA_SNAPSHOT_CACHE_SECONDS, CAMERA_SNAPSHOT_MAX_BYTES, CAMERA_TEST_MIN_INTERVAL_SECONDS, CAMERA_TEST_ROUND_LIMIT, CAMERA_TEST_ROUND_SECONDS, CAMERA_TYPE_ANPR, CAMERA_TYPE_IP, CAMERA_VIEW_PERMISSIONS, CLIENT_ACTIONS, CLOCK_DRIFT_WARN_SECONDS, CONSOLE_AUDIT_LABELS, CURRENT_TIME_ENDPOINT, Camera, CameraAddressInput, CameraCapability, CameraCapabilityContext, CameraCapabilityDescriptor, CameraCapabilityEntry, CameraCapabilityReason, CameraCapabilityState, CameraCapabilityTrace, CameraDevice, CameraFrame, CameraMembership, CameraStream, CameraTestStatus, CameraTransport, CameraType, ConsoleAuditAction, ConsoleAuditTarget, DEVICE_STATUS, DOBStatus, DUPLICATE_TERMS_VERSION_MESSAGE, DayOfWeek, DeviceHttpTarget, DeviceProbeResult, DynamicFormFields, EAccessCardTypes, EAccessCardUserTypes, EmailSender, EntryOrder, EntrySort, EventOrder, EventSort, EventStatus, EventType, FacilitySort, FacilityStatus, FormEntryStatus, GuestSort, GuestStatus, HID_CARD_VALUE_FACTOR, HID_PERMISSION_CATEGORIES, HID_UINT32_MAX, HID_UINT64_MAX, HidRawUint64, IAccessCard, IAccessCardTransaction, InviteActor, MAX_CAMERA_CHANNEL, MAccessCard, MAccessCardTransaction, MAddress, MAttendance, MAttendanceSettings, MBidPreloved, MBillingConfiguration, MBillingItem, MBuilding, MBuildingLevel, MBuildingUnit, MBulletinBoard, MBulletinVideo, MCategoryPreloved, MChannelPreloved, MChat, MChatPreloved, MConsoleAudit, MCustomer, MCustomerSite, MDocumentManagement, MEntryPassSettings, MEventManagement, MFeedback, MFile, MFormEntry, MGuestManagement, MHidAmicoEvent, MHidAmicoIdentity, MHidAmicoReader, MHidSipAccount, MHidSitePermissions, MIncidentReport, MManpowerDesignations, MManpowerMonitoring, MManpowerRemarks, MManpowerSites, MMember, MNfcPatrolLog, MNfcPatrolRoute, MNfcPatrolSettings, MNfcPatrolSettingsUpdate, MNfcPatrolTag, MNotification, MNotificationPreference, MOccurrenceBook, MOccurrenceEntry, MOccurrenceSubject, MOnlineForm, MOrg, MOvernightParkingApprovalHours, MOvernightParkingRequest, MPatrolLog, MPatrolQuestion, MPatrolRoute, MPerson, MPlatformTerms, MPost, MPostFavorite, MPromoCode, MRobot, MRole, MRoleV2, MServiceProvider, MServiceProviderBilling, MSession, MSite, MSiteCamera, MSiteFacility, MSiteFacilityBooking, MStatementOfAccount, MSubcategoryPreloved, MSubscription, MSubscriptionPlan, MUnitBilling, MUser, MVehicle, MVehicleTransaction, MVerification, MVerificationV2, MVisitorTransaction, MWorkOrder, NOTIFICATION_CATEGORIES, NOTIFICATION_CHANNELS, NOTIFICATION_CHANNEL_LABELS, NOTIFICATION_NAMESPACE, NotificationAppSlug, NotificationCategory, NotificationChannel, NotificationModule, NotificationPreferenceView, NotificationService, ORG_MARKETPLACE_VENDOR_FIELD, OrgNature, OvernightParkingRequestSort, OvernightParkingRequestStatus, PATROL_CCTV_CAMERA_FILTER, PERSON_TYPES, PROPERTY_MANAGEMENT_MEMBER_TYPES, PStatus, PTZ_ALLOWED_ACTIONS, PTZ_ALLOWED_CODES, Period, PersonStatus, PersonType, PersonTypes, PlatformTermsStatus, PostOrder, PostSort, PostStatus, QrTagProps, REALTIME_MAX_FANOUT, ResidentAppModuleKey, SERVICE_PROVIDER_INVITE_LABELS, SERVICE_PROVIDER_INVITE_TRANSITIONS, SERVICE_PROVIDER_SIGN_IN_SUBJECT, SERVICE_PROVIDER_SIGN_IN_TYPE, SERVICE_PROVIDER_SIGN_UP_SUBJECT, SERVICE_PROVIDER_SIGN_UP_TYPE, SOFTWARE_VERSION_ENDPOINT, ServiceProviderInviteAction, ServiceProviderInviteDecision, ServiceProviderInviteFacts, SiteAddress, SiteCategories, SiteStatus, SortFields, SortOrder, Status, SubjectOrder, SubjectSort, SubscriptionBillingMode, SubscriptionType, TAccessMngmntSettings, TActionStatus, TAddress, TAffectedEntities, TAffectedInjured, TAppServiceType, TApprovedBy, TApprover, TAttendance, TAttendanceCheckIn, TAttendanceCheckOut, TAttendanceCheckTime, TAttendanceLocation, TAttendanceSettings, TAttendanceSettingsGetBySite, TAuthorities, TAuthoritiesCalled, TBidPreloved, TBilling, TBillingConfiguration, TBillingItem, TBuilding, TBuildingLevel, TBuildingUnit, TBulletinBoard, TBulletinVideo, TCamera, TCameraHealthClaim, TCategoryPreloved, TChannelPreloved, TChat, TChatPreloved, TCheckPoint$1 as TCheckPoint, TComplaintInfo, TComplaintReceivedTo, TConsoleAudit, TConsoleAuditQuery, TCounter, TCreateNfcPatrolLog, TCustomer, TCustomerSite, TCustomerSitePropertyField, TDayNumber, TDaySchedule, TDefaultAccessCard, TDesignations, TDocs, TDocumentCreate, TDocumentManagement, TEntryPassSettings, TEventManagement, TFeedback, TFeedbackMetadata, TFeedbackUpdate, TFeedbackUpdateCategory, TFeedbackUpdateServiceProvider, TFeedbackUpdateStatus, TFeedbackUpdateToCompleted, TFile, TFiles, TFolderUpdate, TFormEntry, TGetAttendancesByUserQuery, TGetAttendancesQuery, TGuestManagement, THidAmicoEvent, THidAmicoGatewayJob, THidAmicoIdentity, THidAmicoPhysicalCard, THidAmicoReader, THidPermissionAssignment, THidPermissionCategory, THidPhysicalCardInput, THidPhysicalCardType$1 as THidPhysicalCardType, THidSipAccount, THidSitePermissions, TIncidentInformation, TIncidentReport, TIncidentTypeAndTime, TInvoice, TKeyRef, TManpowerDesignations, TManpowerDesignationsUpdate, TManpowerMonitoring, TManpowerMonitoringUpdate, TManpowerRemarks, TManpowerRemarksStatusUpdate, TManpowerRemarksUpdate, TManpowerSearchFilter, TManpowerSites, TMember, TMemberUpdateStatus, TMessagePreloved, TMiniRole, TNfcPatrolLog, TNfcPatrolRoute, TNfcPatrolRouteEdit, TNfcPatrolSettings, TNfcPatrolSettingsGetBySite, TNfcPatrolSettingsUpdate, TNfcPatrolTag, TNfcPatrolTagConfigureReset, TNfcPatrolTagEdit, TNfcPatrolTagUpdateData, TNotification, TNotificationPreference, TNotificationPreferenceOff, TOccurrenceBook, TOccurrenceEntry, TOccurrenceSubject, TOnlineForm, TOrg, TOvernightParkingApprovalHours, TOvernightParkingRequest, TPatrolLog, TPatrolQuestion, TPatrolRoute, TPerson, TPlaceOfIncident, TPlates, TPlatformTerms, TPost, TPostFavorite, TPrice, TPriceType, TPromoCode, TPromoCurrencyInput, TPromoTier, TRANSPORT_DEVICE_HTTP, TRANSPORT_RELAY_PLAYER, TRANSPORT_RTSP_FRAME, TRecipientOfComplaint, TRemarks, TResident, TResidentAppModules, TRobot, TRobotMetadata, TRole, TRoleV2, TRoute, TSOABillingItem, TSOAStatus, TServiceProvider, TServiceProviderBilling, TSession, TSessionCreate, TShifts, TSignNfcPatrolLog, TSite, TSiteCamera, TSiteFacility, TSiteFacilityBooking, TSiteInfo, TSiteInformation, TSiteMetadata, TSiteUpdateBlock, TStatementOfAccount, TSubcategoryPreloved, TSubmissionForm, TSubscription, TSubscriptionPlan, TSubscriptionPlanApplication, TUnitBilling, TUnits, TUpdateFormEntry, TUpdateName, TUser, TUserCreate, TVehicle, TVehicleTransaction, TVehicleUpdate, TVerification, TVerificationEvent, TVerificationMetadata, TVerificationMetadataV2, TVerificationV2, TVisitorTransaction, TWorkOrder, TWorkOrderMetadata, TWorkOrderUpdate, TWorkOrderUpdateStatus, TWorkOrderUpdateToCompleted, TanyoneDamageToProperty, UseAccessManagementRepo, UserStatus, VERIFICATION_OPEN_STATUSES, VehicleCategory, VehicleOrder, VehicleSort, VehicleStatus, VehicleType, VerificationLinkType, VerificationStatus, VerificationSubjectType, VerificationType, VisitorSort, VisitorStatus, addressSchema, allowedFieldsSite, allowedNatures, allowedPlanApplications, attendanceSchema, attendanceSettingsSchema, building_level_namespace_collection, building_units_namespace_collection, buildings_namespace_collection, bulletin_boards_namespace_collection, cameraBaseUrl, cameraCapabilitiesFor, cameraDevices, cameraGrant, cameraHealthClaim, cameraHealthSummary, cameraManagePermissions, cameraProbeCacheKey, cameraTransports, canRevokeRefreshTokenFamily, categoriesForPermissions, categorySupportsChannel, chatPrelovedEvents, chatSchema, clampPtzSpeed, clockDriftSeconds, console_audit_namespace_collection, createManpowerRemarksDaily, customerSchema, customerSitePropertyFields, decideServiceProviderInvite, decodeHidPacsCard, deriveCameraHost, describeCameraCapabilities, designationsSchema, deviceControlEnabled, deviceHttpEnabled, deviceHttpTargets, deviceHttpTimeoutMs, deviceProbeTtlSeconds, emitNotificationCreated, encodeHidPacsCard, events_namespace_collection, facility_bookings_namespace_collection, feedbackSchema, feedbacks2_namespace_collection, feedbacks_namespace_collection, ffmpegFrameArgs, ffmpegPath, formatCapabilityTrace, formatDahuaDate, getIO, getSessionIdFromRequest, grabWithSubStreamFallback, guests_namespace_collection, hasAnyCapability, hasAnyPermission, hidRawUint64, incidentReport, incidentReportLog, incidents_namespace_collection, isCameraEntitled, isDuplicateVersionError, isPatrolCctvCamera, isPlatformOwner, isPromoCodeExpired, isRelayPlayerUrl, isSuperAdmin, isTermsCurrent, logCamera, manpowerDesignationsSchema, manpowerEvents, manpowerMonitoringSchema, manpowerRemarksSchema, manpowerSitesSchema, mapWithLimit, nfcPatrolSettingsSchema, nfcPatrolSettingsSchemaUpdate, normalizeAcceptedTerms, normalizeHidCardValue, notificationCategory, notificationCategoryLabel, notificationEvents, notificationRoom, occurrence_book_namespace_collection, online_forms_namespace_collection, orgSchema, overnight_parking_requests_namespace_collection, parseCameraChannel, parseCameraHost, parseDahuaFind, parseDeviceTime, parseHidJsonLossless, parsePromoExpiry, parseSoftwareVersion, pickAuditFields, pickCustomerSiteProperties, platform_terms_namespace_collection, promoCodeRefusal, promoCodeSchema, promoCodeStatusSchema, promoCodeUpdate, promoCodeUpdateSchema, ptzEndpoint, publicCameraFields, recordConsoleAction, refuseServiceProviderInviteAction, registerCameraTransport, relayForRecorder, remarksSchema, resetCameraTransports, residentAppModuleKeys, residentFormEntry, resolutionRefusalReason, resolveCamera, resolveDeviceHttp, resolveHidPhysicalCardValue, resolveInviteActor, robotSchema, rtspUrl, schema, schemaAppSlugNotification, schemaApprovedBy, schemaApprover, schemaBidPreloved, schemaBilling, schemaBillingConfiguration, schemaBillingItem, schemaBuilding, schemaBuildingLevel, schemaBuildingUnit, schemaBuildingUpdateOptions, schemaBulletinBoard, schemaBulletinVideo, schemaCategoryPreloved, schemaChannelPreloved, schemaChatPreloved, schemaConsoleAudit, schemaCreateHidAmicoIdentity, schemaCreateNfcPatrolLog, schemaCreateNotification, schemaCustomerSite, schemaDiscoverHidAmicoReader, schemaDocumentManagement, schemaEntryPassSettings, schemaEventManagement, schemaFiles, schemaFormEntry, schemaGuestManagement, schemaHidAmicoAccessLogQuery, schemaHidAmicoAssignUserCard, schemaHidAmicoConfiguration, schemaHidAmicoEnrollUserCard, schemaHidAmicoEvent, schemaHidAmicoExecuteActions, schemaHidAmicoIdentity, schemaHidAmicoIdentityIdParams, schemaHidAmicoIdentityQuery, schemaHidAmicoIntercomCall, schemaHidAmicoLogQuery, schemaHidAmicoMonitor, schemaHidAmicoNotificationParams, schemaHidAmicoObjectOperation, schemaHidAmicoOperatingMode, schemaHidAmicoReader, schemaHidAmicoReaderIdParams, schemaHidAmicoReaderListQuery, schemaHidAmicoReaderUserQuery, schemaHidAmicoSetConfiguration, schemaHidAmicoSiteIdParams, schemaHidAmicoSync, schemaHidAmicoUserCardIdParams, schemaHidAmicoUserCardParams, schemaHidAmicoUserImageParams, schemaHidAmicoUserImageUploadQuery, schemaHidAmicoUserPin, schemaHidAmicoUserPinParams, schemaHidAmicoVisitorImageParams, schemaHidAmicoVisitorImageUploadQuery, schemaHidAmicoVisitorQr, schemaHidPermissionCandidateQuery, schemaHidPermissionScopeQuery, schemaHidSipAccountRequest, schemaIncidentReport, schemaListNotification, schemaMultipleDocumentManagement, schemaNfcPatrolLog, schemaNfcPatrolRoute, schemaNfcPatrolTag, schemaNfcPatrolTagUpdateData, schemaNotification, schemaNotificationPreference, schemaNotificationPreferenceOff, schemaOccurrenceBook, schemaOccurrenceEntry, schemaOccurrenceSubject, schemaOnlineForm, schemaOvernightParkingApprovalHours, schemaOvernightParkingRequest, schemaPatrolLog, schemaPatrolQuestion, schemaPatrolRoute, schemaPerson, schemaPlate, schemaPlatformTerms, schemaPost, schemaPostFavorite, schemaServiceProvider, schemaServiceProviderBilling, schemaSignNfcPatrolLog, schemaSiteCamera, schemaSiteFacility, schemaSiteFacilityBooking, schemaStatementOfAccount, schemaSubcategoryPreloved, schemaUnitBilling, schemaUpdateBidPreloved, schemaUpdateBuildingLevel, schemaUpdateBulletinBoard, schemaUpdateBulletinVideo, schemaUpdateCategoryPreloved, schemaUpdateChatPreloved, schemaUpdateDocumentManagement, schemaUpdateEntryPassSettings, schemaUpdateEventManagement, schemaUpdateFolderManagement, schemaUpdateFormEntry, schemaUpdateGuestManagement, schemaUpdateHidAmicoIdentity, schemaUpdateHidAmicoReader, schemaUpdateHidSitePermissions, schemaUpdateIncidentReport, schemaUpdateNotification, schemaUpdateNotificationPreference, schemaUpdateOccurrenceBook, schemaUpdateOccurrenceEntry, schemaUpdateOccurrenceSubject, schemaUpdateOnlineForm, schemaUpdateOptions, schemaUpdateOvernightParkingRequest, schemaUpdatePatrolLog, schemaUpdatePatrolQuestion, schemaUpdatePatrolRoute, schemaUpdatePerson, schemaUpdatePost, schemaUpdatePostFavorite, schemaUpdateServiceProviderBilling, schemaUpdateSiteBillingConfiguration, schemaUpdateSiteBillingItem, schemaUpdateSiteCamera, schemaUpdateSiteFacility, schemaUpdateSiteFacilityBooking, schemaUpdateSiteUnitBilling, schemaUpdateStatementOfAccount, schemaUpdateSubcategoryPreloved, schemaUpdateVisTrans, schemaVehicleTransaction, schemaVisitorTransaction, schemeCamera, schemeLogCamera, serviceProviderInviteLabel, sessionSchema, setIO, shiftSchema, siteSchema, site_people_namespace_collection, snapshotEndpoint, snapshotRefusalReason, stringifyHidJson, subscriptionPlanSchema, updateRemarksStatusEod, updateRemarksisAcknowledged, updateSiteSchema, useAccessManagementController, useAddressRepo, useAttendanceController, useAttendanceRepository, useAttendanceSettingsController, useAttendanceSettingsRepository, useAttendanceSettingsService, useAuthController, useAuthControllerV2, useAuthService, useAuthServiceV2, useBidPrelovedController, useBidPrelovedRepo, useBidPrelovedService, useBuildingController, useBuildingLevelController, useBuildingLevelRepo, useBuildingLevelService, useBuildingRepo, useBuildingService, useBuildingUnitController, useBuildingUnitRepo, useBuildingUnitService, useBulletinBoardController, useBulletinBoardRepo, useBulletinBoardService, useBulletinVideoController, useBulletinVideoRepo, useBulletinVideoService, useCameraViewController, useCameraViewService, useCategoryPrelovedController, useCategoryPrelovedRepo, useChannelPrelovedController, useChannelPrelovedRepo, useChatController, useChatPrelovedController, useChatPrelovedRepo, useChatPrelovedService, useChatRepo, useConsoleAuditController, useConsoleAuditRepo, useCounterModel, useCounterRepo, useCustomerController, useCustomerRepo, useCustomerSiteController, useCustomerSiteRepo, useCustomerSiteService, useDahuaService, useDashboardController, useDashboardRepo, useDocumentManagementController, useDocumentManagementRepo, useDocumentManagementService, useEntryPassSettingsController, useEntryPassSettingsRepo, useEventManagementController, useEventManagementRepo, useEventManagementService, useFeedbackController, useFeedbackRepo, useFeedbackService, useFileController, useFileRepo, useFileService, useFormEntryController, useFormEntryRepo, useGuestManagementController, useGuestManagementRepo, useGuestManagementService, useHidAmicoController, useHidAmicoRepo, useHidAmicoService, useHrmLabsAttendanceCtrl, useHrmLabsAttendanceSrvc, useIncidentReportController, useIncidentReportRepo, useIncidentReportService, useInvoiceController, useInvoiceModel, useInvoiceRepo, useManpowerDesignationCtrl, useManpowerDesignationRepo, useManpowerMonitoringCtrl, useManpowerMonitoringRepo, useManpowerMonitoringSrvc, useManpowerRemarkCtrl, useManpowerRemarksRepo, useManpowerSitesCtrl, useManpowerSitesRepo, useManpowerSitesSrvc, useMemberController, useMemberRepo, useMemberService, useNewDashboardController, useNewDashboardRepo, useNfcPatrolLogController, useNfcPatrolLogRepo, useNfcPatrolLogService, useNfcPatrolRouteController, useNfcPatrolRouteRepo, useNfcPatrolRouteService, useNfcPatrolSettingsController, useNfcPatrolSettingsRepository, useNfcPatrolSettingsService, useNfcPatrolTagController, useNfcPatrolTagRepo, useNfcPatrolTagService, useNotificationController, useNotificationPreferenceController, useNotificationPreferenceRepo, useNotificationPreferenceService, useNotificationRepo, useOccurrenceBookController, useOccurrenceBookRepo, useOccurrenceBookService, useOccurrenceEntryController, useOccurrenceEntryRepo, useOccurrenceEntryService, useOccurrenceSubjectController, useOccurrenceSubjectRepo, useOccurrenceSubjectService, useOnlineFormController, useOnlineFormRepo, useOrgController, useOrgControllerV2, useOrgRepo, useOvernightParkingController, useOvernightParkingRepo, useOvernightParkingRequestController, useOvernightParkingRequestRepo, useOvernightParkingRequestService, usePatrolLogController, usePatrolLogRepo, usePatrolLogService, usePatrolQuestionController, usePatrolQuestionRepo, usePatrolRouteController, usePatrolRouteRepo, usePersonController, usePersonRepo, usePlatformTermsController, usePlatformTermsRepo, usePlatformTermsService, usePostFavoriteController, usePostFavoriteRepo, usePostFavoriteService, usePostPrelovedController, usePostPrelovedRepo, usePriceController, usePriceModel, usePriceRepo, usePromoCodeController, usePromoCodeRepo, useRedDotPaymentController, useRedDotPaymentRepo, useRedDotPaymentSvc, useRobotController, useRobotRepo, useRobotService, useRoleController, useRoleControllerV2, useRoleRepo, useRoleRepoV2, useRoleServiceV2, useServiceProviderBillingController, useServiceProviderBillingRepo, useServiceProviderBillingService, useServiceProviderController, useServiceProviderInviteController, useServiceProviderInviteService, useServiceProviderRepo, useSessionRepo, useSiteBillingConfigurationController, useSiteBillingConfigurationRepo, useSiteBillingItemController, useSiteBillingItemRepo, useSiteCameraController, useSiteCameraRepo, useSiteCameraService, useSiteController, useSiteFacilityBookingController, useSiteFacilityBookingRepo, useSiteFacilityBookingService, useSiteFacilityController, useSiteFacilityRepo, useSiteFacilityService, useSiteRepo, useSiteService, useSiteUnitBillingController, useSiteUnitBillingRepo, useSiteUnitBillingService, useStatementOfAccountController, useStatementOfAccountRepo, useSubcategoryPrelovedController, useSubcategoryPrelovedRepo, useSubscriptionController, useSubscriptionPlanController, useSubscriptionPlanRepo, useSubscriptionRepo, useSubscriptionService, useUserController, useUserControllerV2, useUserRepo, useUserRepoV2, useUserService, useUserServiceV2, useVehicleController, useVehicleRepo, useVehicleService, useVerificationController, useVerificationControllerV2, useVerificationRepo, useVerificationRepoV2, useVerificationService, useVerificationServiceV2, useVisitorTransactionController, useVisitorTransactionRepo, useVisitorTransactionService, useWorkOrderController, useWorkOrderRepo, useWorkOrderService, userSchema, vehicleSchema, vehicles_namespace_collection, visitorPersonRepo, visitorPersonService, visitorType, visitors_namespace_collection, wallConfig, workOrderSchema, work_orders2_namespace_collection, work_orders_namespace_collection };
+export { ANPRMode, AUDIT_VALUE_MAX_LENGTH, AccessTypeProps, AppServiceType, AssignCardConfig, BidStatus, BidType, BuildingLevelStatus, BuildingStatus, BulkCardUpdate, BulletinOrder, BulletinRecipient, BulletinSort, BulletinStatus, BulletinVideoOrder, BulletinVideoSort, CAMERA_ANPR_PERMISSIONS, CAMERA_CAPABILITIES, CAMERA_CAPABILITY_REASONS, CAMERA_NOT_PATROL_OR_CCTV, CAMERA_NO_SUB_STREAM_TTL_SECONDS, CAMERA_PTZ_PERMISSIONS, CAMERA_REQUEST_TIMEOUT_MS, CAMERA_RTSP_TIMEOUT_MS, CAMERA_SETUP_PERMISSIONS, CAMERA_SNAPSHOT_CACHE_SECONDS, CAMERA_SNAPSHOT_MAX_BYTES, CAMERA_TEST_MIN_INTERVAL_SECONDS, CAMERA_TEST_ROUND_LIMIT, CAMERA_TEST_ROUND_SECONDS, CAMERA_TYPE_ANPR, CAMERA_TYPE_IP, CAMERA_VIEW_PERMISSIONS, CLIENT_ACTIONS, CLOCK_DRIFT_WARN_SECONDS, CONSOLE_AUDIT_LABELS, CURRENT_TIME_ENDPOINT, Camera, CameraAddressInput, CameraCapability, CameraCapabilityContext, CameraCapabilityDescriptor, CameraCapabilityEntry, CameraCapabilityReason, CameraCapabilityState, CameraCapabilityTrace, CameraDevice, CameraFrame, CameraMembership, CameraStream, CameraTestStatus, CameraTransport, CameraType, ConsoleAuditAction, ConsoleAuditTarget, DEVICE_STATUS, DOBStatus, DUPLICATE_TERMS_VERSION_MESSAGE, DayOfWeek, DeviceHttpTarget, DeviceProbeResult, DynamicFormFields, EAccessCardTypes, EAccessCardUserTypes, EmailSender, EntryOrder, EntrySort, EventOrder, EventSort, EventStatus, EventType, FacilitySort, FacilityStatus, FormEntryStatus, GuestSort, GuestStatus, HID_CARD_VALUE_FACTOR, HID_PERMISSION_CATEGORIES, HID_UINT32_MAX, HID_UINT64_MAX, HidRawUint64, IAccessCard, IAccessCardTransaction, InviteActor, MAX_CAMERA_CHANNEL, MAccessCard, MAccessCardTransaction, MAddress, MAttendance, MAttendanceSettings, MBidPreloved, MBillingConfiguration, MBillingItem, MBuilding, MBuildingLevel, MBuildingUnit, MBulletinBoard, MBulletinVideo, MCategoryPreloved, MChannelPreloved, MChat, MChatPreloved, MConsoleAudit, MCustomer, MCustomerSite, MDocumentManagement, MEMBER_TYPES, MEntryPassSettings, MEventManagement, MFeedback, MFile, MFormEntry, MGuestManagement, MHidAmicoEvent, MHidAmicoIdentity, MHidAmicoReader, MHidSipAccount, MHidSitePermissions, MIncidentReport, MManpowerDesignations, MManpowerMonitoring, MManpowerRemarks, MManpowerSites, MMember, MNfcPatrolLog, MNfcPatrolRoute, MNfcPatrolSettings, MNfcPatrolSettingsUpdate, MNfcPatrolTag, MNotification, MNotificationPreference, MOccurrenceBook, MOccurrenceEntry, MOccurrenceSubject, MOnlineForm, MOrg, MOvernightParkingApprovalHours, MOvernightParkingRequest, MPatrolLog, MPatrolQuestion, MPatrolRoute, MPerson, MPlatformTerms, MPost, MPostFavorite, MPromoCode, MRobot, MRole, MRoleV2, MServiceProvider, MServiceProviderBilling, MSession, MSite, MSiteCamera, MSiteFacility, MSiteFacilityBooking, MStatementOfAccount, MSubcategoryPreloved, MSubscription, MSubscriptionPlan, MUnitBilling, MUser, MVehicle, MVehicleTransaction, MVerification, MVerificationV2, MVisitorTransaction, MWorkOrder, NOTIFICATION_CATEGORIES, NOTIFICATION_CHANNELS, NOTIFICATION_CHANNEL_LABELS, NOTIFICATION_NAMESPACE, NotificationAppSlug, NotificationCategory, NotificationChannel, NotificationModule, NotificationPreferenceView, NotificationService, ORG_MARKETPLACE_VENDOR_FIELD, OrgNature, OvernightParkingRequestSort, OvernightParkingRequestStatus, PATROL_CCTV_CAMERA_FILTER, PERSON_TYPES, PLATFORM_STAFF_MEMBER_TYPE, PLATFORM_STAFF_ROLE_TYPE, PROPERTY_MANAGEMENT_MEMBER_TYPES, PStatus, PTZ_ALLOWED_ACTIONS, PTZ_ALLOWED_CODES, Period, PersonStatus, PersonType, PersonTypes, PlatformTermsStatus, PostOrder, PostSort, PostStatus, QrTagProps, REALTIME_MAX_FANOUT, ResidentAppModuleKey, SERVICE_PROVIDER_INVITE_LABELS, SERVICE_PROVIDER_INVITE_TRANSITIONS, SERVICE_PROVIDER_SIGN_IN_SUBJECT, SERVICE_PROVIDER_SIGN_IN_TYPE, SERVICE_PROVIDER_SIGN_UP_SUBJECT, SERVICE_PROVIDER_SIGN_UP_TYPE, SOFTWARE_VERSION_ENDPOINT, ServiceProviderInviteAction, ServiceProviderInviteDecision, ServiceProviderInviteFacts, SiteAddress, SiteCategories, SiteStatus, SortFields, SortOrder, Status, SubjectOrder, SubjectSort, SubscriptionBillingMode, SubscriptionType, TAccessMngmntSettings, TActionStatus, TAddress, TAffectedEntities, TAffectedInjured, TAppServiceType, TApprovedBy, TApprover, TAttendance, TAttendanceCheckIn, TAttendanceCheckOut, TAttendanceCheckTime, TAttendanceLocation, TAttendanceSettings, TAttendanceSettingsGetBySite, TAuthorities, TAuthoritiesCalled, TBidPreloved, TBilling, TBillingConfiguration, TBillingItem, TBuilding, TBuildingLevel, TBuildingUnit, TBulletinBoard, TBulletinVideo, TCamera, TCameraHealthClaim, TCategoryPreloved, TChannelPreloved, TChat, TChatPreloved, TCheckPoint$1 as TCheckPoint, TComplaintInfo, TComplaintReceivedTo, TConsoleAudit, TConsoleAuditQuery, TCounter, TCreateNfcPatrolLog, TCustomer, TCustomerSite, TCustomerSitePropertyField, TDayNumber, TDaySchedule, TDefaultAccessCard, TDesignations, TDocs, TDocumentCreate, TDocumentManagement, TEntryPassSettings, TEventManagement, TFeedback, TFeedbackMetadata, TFeedbackUpdate, TFeedbackUpdateCategory, TFeedbackUpdateServiceProvider, TFeedbackUpdateStatus, TFeedbackUpdateToCompleted, TFile, TFiles, TFolderUpdate, TFormEntry, TGetAttendancesByUserQuery, TGetAttendancesQuery, TGuestManagement, THidAmicoEvent, THidAmicoGatewayJob, THidAmicoIdentity, THidAmicoPhysicalCard, THidAmicoReader, THidPermissionAssignment, THidPermissionCategory, THidPhysicalCardInput, THidPhysicalCardType$1 as THidPhysicalCardType, THidSipAccount, THidSitePermissions, TIncidentInformation, TIncidentReport, TIncidentTypeAndTime, TInvoice, TKeyRef, TManpowerDesignations, TManpowerDesignationsUpdate, TManpowerMonitoring, TManpowerMonitoringUpdate, TManpowerRemarks, TManpowerRemarksStatusUpdate, TManpowerRemarksUpdate, TManpowerSearchFilter, TManpowerSites, TMember, TMemberUpdateStatus, TMessagePreloved, TMiniRole, TNfcPatrolLog, TNfcPatrolRoute, TNfcPatrolRouteEdit, TNfcPatrolSettings, TNfcPatrolSettingsGetBySite, TNfcPatrolSettingsUpdate, TNfcPatrolTag, TNfcPatrolTagConfigureReset, TNfcPatrolTagEdit, TNfcPatrolTagUpdateData, TNotification, TNotificationPreference, TNotificationPreferenceOff, TOccurrenceBook, TOccurrenceEntry, TOccurrenceSubject, TOnlineForm, TOrg, TOvernightParkingApprovalHours, TOvernightParkingRequest, TPatrolLog, TPatrolQuestion, TPatrolRoute, TPerson, TPlaceOfIncident, TPlates, TPlatformTerms, TPost, TPostFavorite, TPrice, TPriceType, TPromoCode, TPromoCurrencyInput, TPromoTier, TRANSPORT_DEVICE_HTTP, TRANSPORT_RELAY_PLAYER, TRANSPORT_RTSP_FRAME, TRecipientOfComplaint, TRemarks, TResident, TResidentAppModules, TRobot, TRobotMetadata, TRole, TRoleV2, TRoute, TSOABillingItem, TSOAStatus, TServiceProvider, TServiceProviderBilling, TSession, TSessionCreate, TShifts, TSignNfcPatrolLog, TSite, TSiteCamera, TSiteFacility, TSiteFacilityBooking, TSiteInfo, TSiteInformation, TSiteMetadata, TSiteUpdateBlock, TStatementOfAccount, TSubcategoryPreloved, TSubmissionForm, TSubscription, TSubscriptionPlan, TSubscriptionPlanApplication, TUnitBilling, TUnits, TUpdateFormEntry, TUpdateName, TUser, TUserCreate, TVehicle, TVehicleTransaction, TVehicleUpdate, TVerification, TVerificationEvent, TVerificationMetadata, TVerificationMetadataV2, TVerificationV2, TVisitorTransaction, TWorkOrder, TWorkOrderMetadata, TWorkOrderUpdate, TWorkOrderUpdateStatus, TWorkOrderUpdateToCompleted, TanyoneDamageToProperty, UseAccessManagementRepo, UserStatus, VERIFICATION_OPEN_STATUSES, VehicleCategory, VehicleOrder, VehicleSort, VehicleStatus, VehicleType, VerificationLinkType, VerificationStatus, VerificationSubjectType, VerificationType, VisitorSort, VisitorStatus, addressSchema, allowedFieldsSite, allowedNatures, allowedPlanApplications, attendanceSchema, attendanceSettingsSchema, building_level_namespace_collection, building_units_namespace_collection, buildings_namespace_collection, bulletin_boards_namespace_collection, cameraBaseUrl, cameraCapabilitiesFor, cameraDevices, cameraGrant, cameraHealthClaim, cameraHealthSummary, cameraManagePermissions, cameraProbeCacheKey, cameraTransports, canRevokeRefreshTokenFamily, categoriesForPermissions, categorySupportsChannel, chatPrelovedEvents, chatSchema, clampPtzSpeed, clockDriftSeconds, console_audit_namespace_collection, createManpowerRemarksDaily, customerSchema, customerSitePropertyFields, decideServiceProviderInvite, decodeHidPacsCard, deriveCameraHost, describeCameraCapabilities, designationsSchema, deviceControlEnabled, deviceHttpEnabled, deviceHttpTargets, deviceHttpTimeoutMs, deviceProbeTtlSeconds, emitNotificationCreated, encodeHidPacsCard, events_namespace_collection, facility_bookings_namespace_collection, feedbackSchema, feedbacks2_namespace_collection, feedbacks_namespace_collection, ffmpegFrameArgs, ffmpegPath, formatCapabilityTrace, formatDahuaDate, getIO, getSessionIdFromRequest, grabWithSubStreamFallback, guests_namespace_collection, hasAnyCapability, hasAnyPermission, hidRawUint64, incidentReport, incidentReportLog, incidents_namespace_collection, isCameraEntitled, isDuplicateVersionError, isPatrolCctvCamera, isPlatformOwner, isPromoCodeExpired, isRelayPlayerUrl, isSuperAdmin, isTermsCurrent, logCamera, manpowerDesignationsSchema, manpowerEvents, manpowerMonitoringSchema, manpowerRemarksSchema, manpowerSitesSchema, mapWithLimit, nfcPatrolSettingsSchema, nfcPatrolSettingsSchemaUpdate, normalizeAcceptedTerms, normalizeHidCardValue, notificationCategory, notificationCategoryLabel, notificationEvents, notificationRoom, occurrence_book_namespace_collection, online_forms_namespace_collection, orgSchema, overnight_parking_requests_namespace_collection, parseCameraChannel, parseCameraHost, parseDahuaFind, parseDeviceTime, parseHidJsonLossless, parsePromoExpiry, parseSoftwareVersion, pickAuditFields, pickCustomerSiteProperties, platform_terms_namespace_collection, promoCodeRefusal, promoCodeSchema, promoCodeStatusSchema, promoCodeUpdate, promoCodeUpdateSchema, ptzEndpoint, publicCameraFields, recordConsoleAction, refuseServiceProviderInviteAction, registerCameraTransport, relayForRecorder, remarksSchema, resetCameraTransports, residentAppModuleKeys, residentFormEntry, resolutionRefusalReason, resolveCamera, resolveDeviceHttp, resolveHidPhysicalCardValue, resolveInviteActor, robotSchema, rtspUrl, schema, schemaAppSlugNotification, schemaApprovedBy, schemaApprover, schemaBidPreloved, schemaBilling, schemaBillingConfiguration, schemaBillingItem, schemaBuilding, schemaBuildingLevel, schemaBuildingUnit, schemaBuildingUpdateOptions, schemaBulletinBoard, schemaBulletinVideo, schemaCategoryPreloved, schemaChannelPreloved, schemaChatPreloved, schemaConsoleAudit, schemaCreateHidAmicoIdentity, schemaCreateNfcPatrolLog, schemaCreateNotification, schemaCustomerSite, schemaDiscoverHidAmicoReader, schemaDocumentManagement, schemaEntryPassSettings, schemaEventManagement, schemaFiles, schemaFormEntry, schemaGuestManagement, schemaHidAmicoAccessLogQuery, schemaHidAmicoAssignUserCard, schemaHidAmicoConfiguration, schemaHidAmicoEnrollUserCard, schemaHidAmicoEvent, schemaHidAmicoExecuteActions, schemaHidAmicoIdentity, schemaHidAmicoIdentityIdParams, schemaHidAmicoIdentityQuery, schemaHidAmicoIntercomCall, schemaHidAmicoLogQuery, schemaHidAmicoMonitor, schemaHidAmicoNotificationParams, schemaHidAmicoObjectOperation, schemaHidAmicoOperatingMode, schemaHidAmicoReader, schemaHidAmicoReaderIdParams, schemaHidAmicoReaderListQuery, schemaHidAmicoReaderUserQuery, schemaHidAmicoSetConfiguration, schemaHidAmicoSiteIdParams, schemaHidAmicoSync, schemaHidAmicoUserCardIdParams, schemaHidAmicoUserCardParams, schemaHidAmicoUserImageParams, schemaHidAmicoUserImageUploadQuery, schemaHidAmicoUserPin, schemaHidAmicoUserPinParams, schemaHidAmicoVisitorImageParams, schemaHidAmicoVisitorImageUploadQuery, schemaHidAmicoVisitorQr, schemaHidPermissionCandidateQuery, schemaHidPermissionScopeQuery, schemaHidSipAccountRequest, schemaIncidentReport, schemaListNotification, schemaMultipleDocumentManagement, schemaNfcPatrolLog, schemaNfcPatrolRoute, schemaNfcPatrolTag, schemaNfcPatrolTagUpdateData, schemaNotification, schemaNotificationPreference, schemaNotificationPreferenceOff, schemaOccurrenceBook, schemaOccurrenceEntry, schemaOccurrenceSubject, schemaOnlineForm, schemaOvernightParkingApprovalHours, schemaOvernightParkingRequest, schemaPatrolLog, schemaPatrolQuestion, schemaPatrolRoute, schemaPerson, schemaPlate, schemaPlatformTerms, schemaPost, schemaPostFavorite, schemaServiceProvider, schemaServiceProviderBilling, schemaSignNfcPatrolLog, schemaSiteCamera, schemaSiteFacility, schemaSiteFacilityBooking, schemaStatementOfAccount, schemaSubcategoryPreloved, schemaUnitBilling, schemaUpdateBidPreloved, schemaUpdateBuildingLevel, schemaUpdateBulletinBoard, schemaUpdateBulletinVideo, schemaUpdateCategoryPreloved, schemaUpdateChatPreloved, schemaUpdateDocumentManagement, schemaUpdateEntryPassSettings, schemaUpdateEventManagement, schemaUpdateFolderManagement, schemaUpdateFormEntry, schemaUpdateGuestManagement, schemaUpdateHidAmicoIdentity, schemaUpdateHidAmicoReader, schemaUpdateHidSitePermissions, schemaUpdateIncidentReport, schemaUpdateNotification, schemaUpdateNotificationPreference, schemaUpdateOccurrenceBook, schemaUpdateOccurrenceEntry, schemaUpdateOccurrenceSubject, schemaUpdateOnlineForm, schemaUpdateOptions, schemaUpdateOvernightParkingRequest, schemaUpdatePatrolLog, schemaUpdatePatrolQuestion, schemaUpdatePatrolRoute, schemaUpdatePerson, schemaUpdatePost, schemaUpdatePostFavorite, schemaUpdateServiceProviderBilling, schemaUpdateSiteBillingConfiguration, schemaUpdateSiteBillingItem, schemaUpdateSiteCamera, schemaUpdateSiteFacility, schemaUpdateSiteFacilityBooking, schemaUpdateSiteUnitBilling, schemaUpdateStatementOfAccount, schemaUpdateSubcategoryPreloved, schemaUpdateVisTrans, schemaVehicleTransaction, schemaVisitorTransaction, schemeCamera, schemeLogCamera, serviceProviderInviteLabel, sessionSchema, setIO, shiftSchema, siteSchema, site_people_namespace_collection, snapshotEndpoint, snapshotRefusalReason, stringifyHidJson, subscriptionPlanSchema, updateRemarksStatusEod, updateRemarksisAcknowledged, updateSiteSchema, useAccessManagementController, useAddressRepo, useAttendanceController, useAttendanceRepository, useAttendanceSettingsController, useAttendanceSettingsRepository, useAttendanceSettingsService, useAuthController, useAuthControllerV2, useAuthService, useAuthServiceV2, useBidPrelovedController, useBidPrelovedRepo, useBidPrelovedService, useBuildingController, useBuildingLevelController, useBuildingLevelRepo, useBuildingLevelService, useBuildingRepo, useBuildingService, useBuildingUnitController, useBuildingUnitRepo, useBuildingUnitService, useBulletinBoardController, useBulletinBoardRepo, useBulletinBoardService, useBulletinVideoController, useBulletinVideoRepo, useBulletinVideoService, useCameraViewController, useCameraViewService, useCategoryPrelovedController, useCategoryPrelovedRepo, useChannelPrelovedController, useChannelPrelovedRepo, useChatController, useChatPrelovedController, useChatPrelovedRepo, useChatPrelovedService, useChatRepo, useConsoleAuditController, useConsoleAuditRepo, useCounterModel, useCounterRepo, useCustomerController, useCustomerRepo, useCustomerSiteController, useCustomerSiteRepo, useCustomerSiteService, useDahuaService, useDashboardController, useDashboardRepo, useDocumentManagementController, useDocumentManagementRepo, useDocumentManagementService, useEntryPassSettingsController, useEntryPassSettingsRepo, useEventManagementController, useEventManagementRepo, useEventManagementService, useFeedbackController, useFeedbackRepo, useFeedbackService, useFileController, useFileRepo, useFileService, useFormEntryController, useFormEntryRepo, useGuestManagementController, useGuestManagementRepo, useGuestManagementService, useHidAmicoController, useHidAmicoRepo, useHidAmicoService, useHrmLabsAttendanceCtrl, useHrmLabsAttendanceSrvc, useIncidentReportController, useIncidentReportRepo, useIncidentReportService, useInvoiceController, useInvoiceModel, useInvoiceRepo, useManpowerDesignationCtrl, useManpowerDesignationRepo, useManpowerMonitoringCtrl, useManpowerMonitoringRepo, useManpowerMonitoringSrvc, useManpowerRemarkCtrl, useManpowerRemarksRepo, useManpowerSitesCtrl, useManpowerSitesRepo, useManpowerSitesSrvc, useMemberController, useMemberRepo, useMemberService, useNewDashboardController, useNewDashboardRepo, useNfcPatrolLogController, useNfcPatrolLogRepo, useNfcPatrolLogService, useNfcPatrolRouteController, useNfcPatrolRouteRepo, useNfcPatrolRouteService, useNfcPatrolSettingsController, useNfcPatrolSettingsRepository, useNfcPatrolSettingsService, useNfcPatrolTagController, useNfcPatrolTagRepo, useNfcPatrolTagService, useNotificationController, useNotificationPreferenceController, useNotificationPreferenceRepo, useNotificationPreferenceService, useNotificationRepo, useOccurrenceBookController, useOccurrenceBookRepo, useOccurrenceBookService, useOccurrenceEntryController, useOccurrenceEntryRepo, useOccurrenceEntryService, useOccurrenceSubjectController, useOccurrenceSubjectRepo, useOccurrenceSubjectService, useOnlineFormController, useOnlineFormRepo, useOrgController, useOrgControllerV2, useOrgRepo, useOvernightParkingController, useOvernightParkingRepo, useOvernightParkingRequestController, useOvernightParkingRequestRepo, useOvernightParkingRequestService, usePatrolLogController, usePatrolLogRepo, usePatrolLogService, usePatrolQuestionController, usePatrolQuestionRepo, usePatrolRouteController, usePatrolRouteRepo, usePersonController, usePersonRepo, usePlatformTermsController, usePlatformTermsRepo, usePlatformTermsService, usePostFavoriteController, usePostFavoriteRepo, usePostFavoriteService, usePostPrelovedController, usePostPrelovedRepo, usePriceController, usePriceModel, usePriceRepo, usePromoCodeController, usePromoCodeRepo, useRedDotPaymentController, useRedDotPaymentRepo, useRedDotPaymentSvc, useRobotController, useRobotRepo, useRobotService, useRoleController, useRoleControllerV2, useRoleRepo, useRoleRepoV2, useRoleServiceV2, useServiceProviderBillingController, useServiceProviderBillingRepo, useServiceProviderBillingService, useServiceProviderController, useServiceProviderInviteController, useServiceProviderInviteService, useServiceProviderRepo, useSessionRepo, useSiteBillingConfigurationController, useSiteBillingConfigurationRepo, useSiteBillingItemController, useSiteBillingItemRepo, useSiteCameraController, useSiteCameraRepo, useSiteCameraService, useSiteController, useSiteFacilityBookingController, useSiteFacilityBookingRepo, useSiteFacilityBookingService, useSiteFacilityController, useSiteFacilityRepo, useSiteFacilityService, useSiteRepo, useSiteService, useSiteUnitBillingController, useSiteUnitBillingRepo, useSiteUnitBillingService, useStatementOfAccountController, useStatementOfAccountRepo, useSubcategoryPrelovedController, useSubcategoryPrelovedRepo, useSubscriptionController, useSubscriptionPlanController, useSubscriptionPlanRepo, useSubscriptionRepo, useSubscriptionService, useUserController, useUserControllerV2, useUserRepo, useUserRepoV2, useUserService, useUserServiceV2, useVehicleController, useVehicleRepo, useVehicleService, useVerificationController, useVerificationControllerV2, useVerificationRepo, useVerificationRepoV2, useVerificationService, useVerificationServiceV2, useVisitorTransactionController, useVisitorTransactionRepo, useVisitorTransactionService, useWorkOrderController, useWorkOrderRepo, useWorkOrderService, userSchema, vehicleSchema, vehicles_namespace_collection, visitorPersonRepo, visitorPersonService, visitorType, visitors_namespace_collection, wallConfig, workOrderSchema, work_orders2_namespace_collection, work_orders_namespace_collection };

package/dist/index.js

@@ -5971,6 +5971,7 @@ __export(src_exports, {
   MCustomer: () => MCustomer,
   MCustomerSite: () => MCustomerSite,
   MDocumentManagement: () => MDocumentManagement,
+  MEMBER_TYPES: () => MEMBER_TYPES,
   MEntryPassSettings: () => MEntryPassSettings,
   MEventManagement: () => MEventManagement,
   MFeedback: () => MFeedback,
@@ -6045,6 +6046,8 @@ __export(src_exports, {
   OvernightParkingRequestStatus: () => OvernightParkingRequestStatus,
   PATROL_CCTV_CAMERA_FILTER: () => PATROL_CCTV_CAMERA_FILTER,
   PERSON_TYPES: () => PERSON_TYPES,
+  PLATFORM_STAFF_MEMBER_TYPE: () => PLATFORM_STAFF_MEMBER_TYPE,
+  PLATFORM_STAFF_ROLE_TYPE: () => PLATFORM_STAFF_ROLE_TYPE,
   PROPERTY_MANAGEMENT_MEMBER_TYPES: () => PROPERTY_MANAGEMENT_MEMBER_TYPES,
   PStatus: () => PStatus,
   PTZ_ALLOWED_ACTIONS: () => PTZ_ALLOWED_ACTIONS,
@@ -9590,13 +9593,32 @@ var import_node_server_utils13 = require("@7365admin1/node-server-utils");
 var import_node_server_utils12 = require("@7365admin1/node-server-utils");
 var import_joi7 = __toESM(require("joi"));
 var import_mongodb11 = require("mongodb");
+var PLATFORM_STAFF_MEMBER_TYPE = "admin";
+var MEMBER_TYPES = [
+  PLATFORM_STAFF_MEMBER_TYPE,
+  "organization",
+  "resident",
+  ...Object.values(AppServiceType)
+];
 function MMember(value) {
   const schema2 = import_joi7.default.object({
     _id: import_joi7.default.string().hex().optional().allow("", null),
     name: import_joi7.default.string().required(),
     email: import_joi7.default.string().email().optional().allow("", null),
     user: import_joi7.default.string().hex().required(),
-    type: import_joi7.default.string().required(),
+    // TRANSITIONAL — the second branch is a 24-character hex id, not a type.
+    // `web-app-org pages/org/[organization]/invitations/invite.vue:122` and
+    // `web-app-hygiene pages/[org]/[site]/invitations/invite.vue:135` send the
+    // ORGANISATION ID as the invitation's `app`, so accepting one of those
+    // invitations writes an org id into this field. That is a defect in those
+    // two screens, but it is live: rejecting it here would 400 every user
+    // accepting an invitation from either screen. Delete the alternation once
+    // both send a real membership type. It cannot be used to escalate — "admin"
+    // is not 24 hex characters, so the allow-list still decides that.
+    type: import_joi7.default.alternatives().try(
+      import_joi7.default.string().valid(...MEMBER_TYPES),
+      import_joi7.default.string().hex().length(24)
+    ).required(),
     role: import_joi7.default.string().hex().optional().allow("", null),
     org: import_joi7.default.string().hex().optional().allow("", null),
     orgName: import_joi7.default.string().optional().allow("", null),
@@ -15987,6 +16009,7 @@ var import_node_server_utils35 = require("@7365admin1/node-server-utils");
 // src/models/role.model.ts
 var import_node_server_utils34 = require("@7365admin1/node-server-utils");
 var import_mongodb31 = require("mongodb");
+var PLATFORM_STAFF_ROLE_TYPE = "admin";
 var MRole = class {
   constructor(value) {
     if (typeof value._id === "string") {
@@ -18518,6 +18541,14 @@ function useRoleService() {
 }
 
 // src/controllers/role.controller.ts
+async function requireRoleOrg(req, org) {
+  const orgId = org?.toString() ?? "";
+  if (!orgId) {
+    await requirePlatformStaff(req);
+    return;
+  }
+  await requireOrgAccess(req, orgId);
+}
 function useRoleController() {
   const {
     addRole: _createRole,
@@ -18549,6 +18580,9 @@ function useRoleController() {
       return;
     }
     try {
+      if (payload.type === PLATFORM_STAFF_ROLE_TYPE) {
+        await requirePlatformStaff(req);
+      }
       const role = await _createRole(payload);
       res.status(201).json({ message: "Successfully created role.", data: { role } });
       return;
@@ -18643,6 +18677,10 @@ function useRoleController() {
     const name = req.body.name ?? "";
     const permissions = req.body.permissions ?? [];
     try {
+      const existing = await _getRoleById(_id);
+      if (!existing)
+        throw new import_node_server_utils44.NotFoundError("Role not found.");
+      await requireRoleOrg(req, existing.org);
       const role = await _updateRole(_id, { name, permissions });
       res.json({ message: "Successfully updated role.", data: { role } });
       return;
@@ -18667,6 +18705,10 @@ function useRoleController() {
     }
     const permissions = req.body.permissions ?? [];
     try {
+      const existing = await _getRoleById(_id);
+      if (!existing)
+        throw new import_node_server_utils44.NotFoundError("Role not found.");
+      await requireRoleOrg(req, existing.org);
       await _updatePermissionsById(_id, permissions);
       res.json({ message: "Successfully updated role permissions." });
       return;
@@ -18686,6 +18728,10 @@ function useRoleController() {
       return;
     }
     try {
+      const existing = await _getRoleById(_id);
+      if (!existing)
+        throw new import_node_server_utils44.NotFoundError("Role not found.");
+      await requireRoleOrg(req, existing.org);
       const message = await _deleteRole(_id);
       res.json({ message });
       return;
@@ -18705,6 +18751,10 @@ function useRoleController() {
       return;
     }
     try {
+      const existing = await _getRoleById(_id);
+      if (!existing)
+        throw new import_node_server_utils44.NotFoundError("Role not found.");
+      await requireRoleOrg(req, existing.org);
       const data = await _getDeletionPreview(_id);
       res.json({ data });
       return;
@@ -18734,6 +18784,10 @@ function useRoleController() {
       return;
     }
     try {
+      const existing = await _getRoleById(req.params.id);
+      if (!existing)
+        throw new import_node_server_utils44.NotFoundError("Role not found.");
+      await requireRoleOrg(req, existing.org);
       const message = await _deleteWithReassignments(
         req.params.id,
         req.body.reassignments
@@ -18765,6 +18819,13 @@ var import_node_server_utils46 = require("@7365admin1/node-server-utils");
 
 // src/services/member.service.ts
 var import_node_server_utils45 = require("@7365admin1/node-server-utils");
+async function requireStaffCaller(callerId4, what) {
+  if (!await isSuperAdmin(callerId4)) {
+    throw new import_node_server_utils45.UnauthorizedError(
+      `Only Seven365 staff can ${what}.`
+    );
+  }
+}
 function useMemberService() {
   const {
     add: addMember,
@@ -18778,7 +18839,7 @@ function useMemberService() {
   const { getUserByEmail, updateDefaultOrgByEmail, getUserById } = useUserRepo();
   const { getById: getOrgById } = useOrgRepo();
   const { getSiteById } = useSiteRepo();
-  const { getOwnerRolesByTypeOrg } = useRoleRepo();
+  const { getOwnerRolesByTypeOrg, getRoleById } = useRoleRepo();
   async function createMember(id) {
     const session = import_node_server_utils45.useAtlas.getClient()?.startSession();
     session?.startTransaction();
@@ -18846,8 +18907,16 @@ function useMemberService() {
     app,
     siteId,
     siteName,
-    onboardingRequired
+    onboardingRequired,
+    callerId: callerId4
   }) {
+    if (app === PLATFORM_STAFF_MEMBER_TYPE) {
+      await requireStaffCaller(callerId4, "create a Seven365 staff membership");
+    }
+    const targetRole = roleId ? await getRoleById(roleId) : null;
+    if (targetRole?.type === PLATFORM_STAFF_MEMBER_TYPE) {
+      await requireStaffCaller(callerId4, "assign a Seven365 staff role");
+    }
     const session = import_node_server_utils45.useAtlas.getClient()?.startSession();
     session?.startTransaction();
     try {
@@ -18898,7 +18967,11 @@ function useMemberService() {
       session?.endSession();
     }
   }
-  async function updateRoleById(id, role, type, org) {
+  async function updateRoleById(id, role, type, org, callerId4) {
+    const newRole = await getRoleById(role);
+    if (newRole?.type === PLATFORM_STAFF_MEMBER_TYPE) {
+      await requireStaffCaller(callerId4, "assign a Seven365 staff role");
+    }
     const owner = await getOwnerRolesByTypeOrg(type, org);
     if (!owner.length) {
       throw new import_node_server_utils45.BadRequestError("No owner role found.");
@@ -19192,7 +19265,7 @@ function useMemberController() {
     const type = req.params.type;
     const org = req.params.org;
     try {
-      await _updateRoleById(_id, role, type, org);
+      await _updateRoleById(_id, role, type, org, callerId(req));
       res.json({ message: "Successfully updated member role." });
       return;
     } catch (error2) {
@@ -19219,7 +19292,7 @@ function useMemberController() {
     }
     const { userId, orgId, roleId, app, siteId, siteName, onboardingRequired } = req.body;
     try {
-      const data = await _createMemberDirect({ userId, orgId, roleId, app, siteId, siteName, onboardingRequired });
+      const data = await _createMemberDirect({ userId, orgId, roleId, app, siteId, siteName, onboardingRequired, callerId: callerId(req) });
       res.status(201).json(data);
       return;
     } catch (error2) {
@@ -79053,6 +79126,9 @@ function useVerificationControllerV2() {
     }
     const { email, app, role, name, org, siteId, siteName } = value;
     try {
+      if (app === PLATFORM_STAFF_MEMBER_TYPE) {
+        await requirePlatformStaff(req);
+      }
       await _createUserInvite({
         email,
         metadata: {
@@ -80857,6 +80933,9 @@ function useRoleControllerV2() {
       return;
     }
     try {
+      if (value.type === PLATFORM_STAFF_ROLE_TYPE) {
+        await requirePlatformStaff(req);
+      }
       const role = await _createRole(value);
       res.status(201).json({ message: "Successfully created role.", data: { role } });
       return;
@@ -85868,6 +85947,7 @@ function useNotificationPreferenceController() {
   MCustomer,
   MCustomerSite,
   MDocumentManagement,
+  MEMBER_TYPES,
   MEntryPassSettings,
   MEventManagement,
   MFeedback,
@@ -85942,6 +86022,8 @@ function useNotificationPreferenceController() {
   OvernightParkingRequestStatus,
   PATROL_CCTV_CAMERA_FILTER,
   PERSON_TYPES,
+  PLATFORM_STAFF_MEMBER_TYPE,
+  PLATFORM_STAFF_ROLE_TYPE,
   PROPERTY_MANAGEMENT_MEMBER_TYPES,
   PStatus,
   PTZ_ALLOWED_ACTIONS,