@7365admin1/core 3.48.1-staging.172 → 3.48.1-staging.173

package/.changeset/staff-camera-status.md

@@ -0,0 +1,10 @@
+---
+"@7365admin1/core": patch
+---
+
+Let Seven365 staff switch a client's faulty camera off, and record it
+
+`PATCH /api/site-cameras/id/:id` now falls back to a Seven365 staff check when
+the ordinary site rule refuses. The fallback writes `status` only and is
+recorded in the console audit trail. Reads, `add` and `deleteById` are
+unchanged, so staff have gained no access to any organisation's camera list.

package/dist/index.d.ts

@@ -11598,7 +11598,16 @@ declare enum ConsoleAuditAction {
     PLAN_CREATED = "plan.created",
     PLAN_UPDATED = "plan.updated",
     PLAN_STATUS_CHANGED = "plan.status-changed",
-    TERMS_PUBLISHED = "terms.published"
+    TERMS_PUBLISHED = "terms.published",
+    /**
+     * Seven365 staff switching a client's camera on or off.
+     *
+     * The only tenant-owned object on this list, and it is here because it is the
+     * only one staff may touch: a faulty camera at a client's site has to be
+     * switchable off by us. See `updateById` in `site-camera.controller.ts` for
+     * the boundary that allows it and nothing else.
+     */
+    CAMERA_STATUS_CHANGED = "camera.status-changed"
 }
 /**
  * The three actions that live in `organization.controller.ts`.
@@ -11618,7 +11627,8 @@ declare enum ConsoleAuditTarget {
     SUBSCRIPTION = "subscription",
     PROMO_CODE = "promo-code",
     PLAN = "plan",
-    TERMS = "terms"
+    TERMS = "terms",
+    CAMERA = "camera"
 }
 /** A stored value is a primitive or it is not stored. */
 declare const AUDIT_VALUE_MAX_LENGTH = 120;

package/dist/index.js

@@ -27289,6 +27289,7 @@ var ConsoleAuditAction = /* @__PURE__ */ ((ConsoleAuditAction3) => {
   ConsoleAuditAction3["PLAN_UPDATED"] = "plan.updated";
   ConsoleAuditAction3["PLAN_STATUS_CHANGED"] = "plan.status-changed";
   ConsoleAuditAction3["TERMS_PUBLISHED"] = "terms.published";
+  ConsoleAuditAction3["CAMERA_STATUS_CHANGED"] = "camera.status-changed";
   return ConsoleAuditAction3;
 })(ConsoleAuditAction || {});
 var CLIENT_ACTIONS = [
@@ -27309,7 +27310,8 @@ var CONSOLE_AUDIT_LABELS = {
   ["plan.created" /* PLAN_CREATED */]: "Plan created",
   ["plan.updated" /* PLAN_UPDATED */]: "Plan edited",
   ["plan.status-changed" /* PLAN_STATUS_CHANGED */]: "Plan enabled or disabled",
-  ["terms.published" /* TERMS_PUBLISHED */]: "Platform Terms published"
+  ["terms.published" /* TERMS_PUBLISHED */]: "Platform Terms published",
+  ["camera.status-changed" /* CAMERA_STATUS_CHANGED */]: "Camera switched on or off by Seven365 staff"
 };
 var ConsoleAuditTarget = /* @__PURE__ */ ((ConsoleAuditTarget2) => {
   ConsoleAuditTarget2["ORGANIZATION"] = "organization";
@@ -27317,6 +27319,7 @@ var ConsoleAuditTarget = /* @__PURE__ */ ((ConsoleAuditTarget2) => {
   ConsoleAuditTarget2["PROMO_CODE"] = "promo-code";
   ConsoleAuditTarget2["PLAN"] = "plan";
   ConsoleAuditTarget2["TERMS"] = "terms";
+  ConsoleAuditTarget2["CAMERA"] = "camera";
   return ConsoleAuditTarget2;
 })(ConsoleAuditTarget || {});
 var AUDIT_FIELDS = {
@@ -27380,7 +27383,11 @@ var AUDIT_FIELDS = {
     "status"
   ],
   ["plan.status-changed" /* PLAN_STATUS_CHANGED */]: ["status"],
-  ["terms.published" /* TERMS_PUBLISHED */]: ["version"]
+  ["terms.published" /* TERMS_PUBLISHED */]: ["version"],
+  // `status` only. Not the host, not the username, not the password - the whole
+  // point of the staff camera path is that it may change nothing else, and the
+  // audit row must not become the place a device credential is copied to.
+  ["camera.status-changed" /* CAMERA_STATUS_CHANGED */]: ["status"]
 };
 var AUDIT_VALUE_MAX_LENGTH = 120;
 function auditValue(value) {
@@ -39302,10 +39309,29 @@ function useSiteCameraController() {
       throw error;
     }
   }
+  async function staffStatusChange(params) {
+    const status = params.value?.status;
+    if (typeof status !== "string" || !status.trim())
+      return null;
+    const id = callerId4(params.req);
+    if (!id || !await isSuperAdmin(id))
+      return null;
+    return id;
+  }
   async function loadForWrite(id) {
     if (!import_mongodb72.ObjectId.isValid(id))
       return null;
-    return await _findOne({ _id: new import_mongodb72.ObjectId(id) }, { site: 1, type: 1 });
+    return await _findOne(
+      { _id: new import_mongodb72.ObjectId(id) },
+      { site: 1, type: 1, host: 1, category: 1 }
+    );
+  }
+  function staffUpdate(camera, status) {
+    return {
+      host: camera.host ?? "",
+      category: camera.category ?? "standard",
+      status
+    };
   }
   function applyDerivedHost(body) {
     const { recorderHost, recorderPort, channel, ...rest } = body ?? {};
@@ -39406,13 +39432,32 @@ function useSiteCameraController() {
       const camera = await loadForWrite(id);
       if (!camera)
         throw new import_node_server_utils114.NotFoundError("Camera not found.");
-      await authorizeWrite({
-        req,
-        site: camera.site,
-        type: camera.type,
-        notFound: "Camera not found."
-      });
-      const message = await _updateById(id, value);
+      let staffId = null;
+      try {
+        await authorizeWrite({
+          req,
+          site: camera.site,
+          type: camera.type,
+          notFound: "Camera not found."
+        });
+      } catch (error2) {
+        staffId = await staffStatusChange({ req, value });
+        if (!staffId)
+          throw error2;
+      }
+      const update = staffId ? staffUpdate(camera, value.status) : value;
+      const message = await _updateById(id, update);
+      if (staffId) {
+        await recordConsoleAction({
+          action: "camera.status-changed" /* CAMERA_STATUS_CHANGED */,
+          actor: staffId,
+          target: id,
+          targetType: "camera" /* CAMERA */,
+          after: pickAuditFields("camera.status-changed" /* CAMERA_STATUS_CHANGED */, {
+            status: value.status
+          })
+        });
+      }
       res.json({
         message
       });