@7365admin1/core 3.72.1-staging.318 → 3.72.1-staging.319

package/.changeset/cctv-recorded-footage.md

@@ -0,0 +1,5 @@
+---
+"@7365admin1/core": minor
+---
+
+Recorded footage for CCTV cameras: `RELAY_PLAYBACK` capability (`CAMERA_PLAYBACK_RELAYS` + referenced signing key), `getPlayback` signs a 120-second link to the camera relay's recorder playback for a past window of up to 30 minutes, gated by site reach and the new `cctv-mgmt:view-recordings` permission.

package/dist/index.d.ts

@@ -4890,6 +4890,7 @@ type CameraCapabilityState = "supported" | "unsupported" | "unknown";
 declare const TRANSPORT_RELAY_PLAYER = "RELAY_PLAYER";
 declare const TRANSPORT_RTSP_FRAME = "RTSP_FRAME";
 declare const TRANSPORT_DEVICE_HTTP = "DEVICE_HTTP";
+declare const TRANSPORT_RELAY_PLAYBACK = "RELAY_PLAYBACK";
 /**
  * Machine-readable reasons, each with the one sentence a UI may show.
  *
@@ -4911,6 +4912,7 @@ declare const CAMERA_CAPABILITY_REASONS: {
     readonly "not-a-relay-player-url": "This camera's address is not a live-video page address.";
     readonly "no-recorder-configured": "No recorder is configured for this camera's relay.";
     readonly "no-channel-in-address": "This camera's address has no channel, so we cannot tell which stream it is.";
+    readonly "relay-playback-not-configured": "Recorded footage is not set up for this camera's video service yet.";
     readonly "device-http-not-configured": "No direct connection to this camera's recorder is configured on this server.";
     readonly "device-http-disabled": "Direct camera access is switched off on this server.";
     readonly "device-http-unreachable": "The camera's own control interface did not answer.";
@@ -4957,9 +4959,9 @@ type DeviceHttpTarget = {
     timeoutMs: number;
     probeTtlSeconds: number;
 };
-type Env = Record<string, string | undefined>;
+type Env$1 = Record<string, string | undefined>;
 /** Both flags are opt-IN. An unset or misspelt value is OFF, never on. */
-declare function deviceHttpEnabled(source?: Env): boolean;
+declare function deviceHttpEnabled(source?: Env$1): boolean;
 /**
  * The mutating switch, and it is deliberately separate from the one above.
  *
@@ -4969,8 +4971,8 @@ declare function deviceHttpEnabled(source?: Env): boolean;
  *
  * It also cannot be on by itself: control requires device access as well.
  */
-declare function deviceControlEnabled(source?: Env): boolean;
-declare function deviceHttpTimeoutMs(source?: Env): number;
+declare function deviceControlEnabled(source?: Env$1): boolean;
+declare function deviceHttpTimeoutMs(source?: Env$1): number;
 /**
  * How long a capability probe is trusted for.
  *
@@ -4979,7 +4981,7 @@ declare function deviceHttpTimeoutMs(source?: Env): number;
  * installer visits, not when a guard looks at a screen. A short TTL here buys
  * nothing and spends requests against a device with a 3-failures lockout.
  */
-declare function deviceProbeTtlSeconds(source?: Env): number;
+declare function deviceProbeTtlSeconds(source?: Env$1): number;
 /**
  * `CAMERA_DEVICE_HTTP` — a JSON object keyed by relay authority:
  *
@@ -4998,7 +5000,7 @@ declare function deviceProbeTtlSeconds(source?: Env): number;
  * A malformed variable yields no targets at all — the same posture as
  * `cameraDevices()`, and far better than a half-parsed device map.
  */
-declare function deviceHttpTargets(source?: Env): {
+declare function deviceHttpTargets(source?: Env$1): {
     targets: Record<string, DeviceHttpTarget>;
     errors: Array<string>;
 };
@@ -5033,6 +5035,8 @@ type CameraCapabilityContext = {
     deviceHttp?: DeviceHttpTarget | null;
     /** A CACHED probe. `null`/absent means "never asked" → `unknown`, not `no`. */
     probe?: DeviceProbeResult | null;
+    /** Relays set up for recorded footage (`playbackRelays()`): authority → key. */
+    playbackRelays?: Record<string, string>;
 };
 type Decision = {
     state: CameraCapabilityState;
@@ -5119,6 +5123,7 @@ declare function cameraCapabilitiesFor(params: {
     probe?: DeviceProbeResult | null;
     rtspDevices?: Record<string, CameraDevice>;
     deviceHttpTargets?: Record<string, DeviceHttpTarget>;
+    playbackRelays?: Record<string, string>;
 }): {
     capabilities: CameraCapabilityDescriptor;
     trace: CameraCapabilityTrace;
@@ -5128,6 +5133,54 @@ declare function hasAnyCapability(descriptor: CameraCapabilityDescriptor): boole
 /** Kept for the wall's log line: `liveVideo=RELAY_PLAYER stillFrame=RTSP_FRAME …`. */
 declare function formatCapabilityTrace(trace: CameraCapabilityTrace): string;
 
+/**
+ * Recorded footage through the camera's own video relay.
+ *
+ * The recorders' web interfaces are closed (only RTSP 554 answers), so the
+ * recordings path in `camera-device-http.service.ts` cannot run. The relay can:
+ * it already holds the recorder connection for live view, and plays the
+ * recorder's own RTSP playback for a link this server signs. This file decides
+ * whether a relay is set up for that and signs the link; it contacts nothing.
+ *
+ * Configuration, keyed by relay authority like `CAMERA_DEVICE_HTTP`:
+ *
+ * ```
+ * CAMERA_PLAYBACK_RELAYS={"the-loft.iservice365.org":{"keyRef":"PLAYBACK_SIGNING_KEY"}}
+ * PLAYBACK_SIGNING_KEY=<random, 32+ characters; the SAME value is set on that relay>
+ * ```
+ *
+ * The key is referenced by name, never embedded, so the JSON can be reviewed.
+ */
+/** Who may watch recorded footage. `*` (full access) passes too. */
+declare const CAMERA_RECORDINGS_PERMISSIONS: string[];
+declare const PLAYBACK_MAX_WINDOW_SECONDS: number;
+declare const PLAYBACK_LINK_SECONDS = 120;
+type Env = Record<string, string | undefined>;
+/** Relay authority → signing key, for the relays that are fully set up. */
+declare function playbackRelays(source?: Env): Record<string, string>;
+/** Why this window cannot be played, or `null`. */
+declare function playbackWindowRefusal(start: Date, end: Date, now?: Date): string | null;
+/**
+ * The signed player link for one camera and window, or `null` when the
+ * camera's address is not a relay page with a channel.
+ *
+ * Signature: HMAC-SHA256(key, `channel|start|end|exp`), unix seconds, hex —
+ * checked by the relay's `playback.js`.
+ */
+declare function signPlaybackLink(params: {
+    host: string;
+    key: string;
+    start: Date;
+    end: Date;
+    now?: Date;
+}): {
+    playerUrl: string;
+    streamUrl: string;
+    start: string;
+    end: string;
+    expiresAt: string;
+} | null;
+
 /**
  * A client with ~150 cameras cannot be onboarded one two-field modal at a time,
  * and this is the whole reason this file exists.
@@ -5283,6 +5336,18 @@ declare function useCameraViewService(): {
         userId?: string;
         permissions: Array<string>;
     }) => Promise<bson.Document>;
+    getPlayback: (params: {
+        cameraId: string;
+        userId?: string;
+        start: Date;
+        end: Date;
+    }) => Promise<{
+        playerUrl: string;
+        streamUrl: string;
+        start: string;
+        end: string;
+        expiresAt: string;
+    }>;
     entitleSite: (params: {
         siteId: string;
         userId?: string;
@@ -5465,6 +5530,7 @@ declare function useCameraViewController(): {
     snapshot: (req: Request, res: Response, next: NextFunction) => Promise<void>;
     capture: (req: Request, res: Response, next: NextFunction) => Promise<void>;
     status: (req: Request, res: Response, next: NextFunction) => Promise<void>;
+    playback: (req: Request, res: Response, next: NextFunction) => Promise<void>;
     ptz: (req: Request, res: Response, next: NextFunction) => Promise<void>;
     capabilities: (_req: Request, res: Response) => Promise<void>;
     wall: (req: Request, res: Response, next: NextFunction) => Promise<void>;
@@ -15265,4 +15331,4 @@ declare function usePersonalEmergencyChainController(): {
     update: (req: Request, res: Response, next: NextFunction) => Promise<void>;
 };
 
-export { ANPRMode, APP_BASE_URLS, AUDIT_VALUE_MAX_LENGTH, AccessTypeProps, AppKey, AppServiceType, AssignCardConfig, BULK_CAMERA_COLUMNS, BidStatus, BidType, BuildingLevelStatus, BuildingStatus, BulkCameraAccepted, BulkCameraOutcome, BulkCameraPlan, BulkCameraResult, BulkCardUpdate, BulletinOrder, BulletinRecipient, BulletinSort, BulletinStatus, BulletinVideoOrder, BulletinVideoSort, CAMERA_ANPR_PERMISSIONS, CAMERA_CAPABILITIES, CAMERA_CAPABILITY_REASONS, CAMERA_MANAGE_ANY_PERMISSIONS, CAMERA_NOT_PATROL_OR_CCTV, CAMERA_NO_SUB_STREAM_TTL_SECONDS, CAMERA_PTZ_PERMISSIONS, CAMERA_REQUEST_TIMEOUT_MS, CAMERA_RTSP_TIMEOUT_MS, CAMERA_SETUP_PERMISSIONS, CAMERA_SNAPSHOT_CACHE_SECONDS, CAMERA_SNAPSHOT_MAX_BYTES, CAMERA_TEST_MIN_INTERVAL_SECONDS, CAMERA_TEST_ROUND_LIMIT, CAMERA_TEST_ROUND_SECONDS, CAMERA_TYPE_ANPR, CAMERA_TYPE_IP, CAMERA_VIEW_PERMISSIONS, CLIENT_ACTIONS, CLOCK_DRIFT_WARN_SECONDS, CONSOLE_AUDIT_LABELS, CONSOLE_PERMISSIONS, CONTRACTOR_TYPE_LABELS, CROSS_CLIENT_GRANT, CURRENT_TIME_ENDPOINT, Camera, CameraAddressInput, CameraCapability, CameraCapabilityContext, CameraCapabilityDescriptor, CameraCapabilityEntry, CameraCapabilityReason, CameraCapabilityState, CameraCapabilityTrace, CameraDevice, CameraFrame, CameraMembership, CameraStream, CameraTestStatus, CameraTransport, CameraType, ConsoleAuditAction, ConsoleAuditTarget, ConsoleGrant, DEFAULT_RING_SECONDS, DEFAULT_SITE_TIMEZONE, DEVICE_STATUS, DOBStatus, DUPLICATE_TERMS_VERSION_MESSAGE, DayOfWeek, DeviceHttpTarget, DeviceProbeResult, DynamicFormFields, E164, EAccessCardTypes, EAccessCardUserTypes, EmailSender, EntryOrder, EntrySort, EventOrder, EventSort, EventStatus, EventType, FacilitySort, FacilityStatus, FormEntryStatus, GOVERNED_MODULES, GuestSort, GuestStatus, HID_CARD_VALUE_FACTOR, HID_PERMISSION_CATEGORIES, HID_UINT32_MAX, HID_UINT64_MAX, HidRawUint64, IAccessCard, IAccessCardTransaction, InviteActor, LIVE_ROLE, MANAGE_SITE_MODULES, MAX_BULK_CAMERA_ROWS, MAX_CAMERA_CHANNEL, MAX_CAMERA_NAME_LENGTH, MAX_PERSONAL_EMERGENCY_CONTACTS, MAX_RING_SECONDS, MAccessCard, MAccessCardTransaction, MAddress, MAttendance, MAttendanceSettings, MBidPreloved, MBillingConfiguration, MBillingItem, MBuilding, MBuildingLevel, MBuildingUnit, MBulletinBoard, MBulletinVideo, MCategoryPreloved, MChannelPreloved, MChat, MChatPreloved, MConsoleAudit, MCustomer, MCustomerSite, MDocumentManagement, MEMBER_TYPES, MEntryPassSettings, MEventManagement, MFeedback, MFile, MFormEntry, MGuestManagement, MHidAmicoEvent, MHidAmicoIdentity, MHidAmicoReader, MHidSipAccount, MHidSitePermissions, MIN_RING_SECONDS, MIncidentReport, MManpowerDesignations, MManpowerMonitoring, MManpowerRemarks, MManpowerSites, MMember, MNfcPatrolLog, MNfcPatrolRoute, MNfcPatrolSettings, MNfcPatrolSettingsUpdate, MNfcPatrolTag, MNotification, MNotificationPreference, MODULE_GATE_MODE_DEFAULT, MODULE_LIST_GATE_DEFAULT, MOccurrenceBook, MOccurrenceEntry, MOccurrenceSubject, MOnlineForm, MOrg, MOvernightParkingApprovalHours, MOvernightParkingRequest, MPatrolEmail, MPatrolLog, MPatrolQuestion, MPatrolRoute, MPerson, MPersonalEmergencyChain, MPlatformTerms, MPost, MPostFavorite, MPromoCode, MRobot, MRole, MRoleV2, MServiceProvider, MServiceProviderBilling, MSession, MSite, MSiteCamera, MSiteFacility, MSiteFacilityBooking, MStatementOfAccount, MSubcategoryPreloved, MSubscription, MSubscriptionPlan, MUnitBilling, MUser, MVehicle, MVehicleTransaction, MVerification, MVerificationV2, MVisitorTransaction, MWorkOrder, NOTIFICATION_CATEGORIES, NOTIFICATION_CHANNELS, NOTIFICATION_CHANNEL_LABELS, NOTIFICATION_NAMESPACE, NOTIFY_ACCESS_FILTER_DEFAULT, NotificationAppSlug, NotificationCategory, NotificationChannel, NotificationModule, NotificationPreferenceView, NotificationService, ORG_MARKETPLACE_VENDOR_FIELD, ORG_OWNER_REPAIR_CLAIM_STALE_MS, ORG_OWNER_REPAIR_CLAIM_TAKEN_REASON, ORG_OWNER_REPAIR_DEFAULT, ORG_OWNER_REPAIR_OFF_REASON, OrgNature, OvernightParkingRequestSort, OvernightParkingRequestStatus, PATROL_CCTV_CAMERA_FILTER, PATROL_EMAIL_MAX_LOGS, PATROL_EMAIL_MAX_PER_HOUR, PATROL_EMAIL_MAX_RECIPIENTS, PERSON_TYPES, PLATFORM_STAFF_MEMBER_TYPE, PLATFORM_STAFF_ROLE_TYPE, PROPERTY_MANAGEMENT_MEMBER_TYPES, PStatus, PTZ_ALLOWED_ACTIONS, PTZ_ALLOWED_CODES, Period, PersonStatus, PersonType, PersonTypes, PlatformTermsStatus, PostOrder, PostSort, PostStatus, QrTagProps, REALTIME_MAX_FANOUT, ResidentAppModuleKey, SELF_SERVICE_RESEND_COOLDOWN_MS, SELF_SIGNUP_PLATFORM, SELF_SIGNUP_STATUS, SELF_SIGNUP_TYPES, SERVICE_PROVIDER_INVITE_LABELS, SERVICE_PROVIDER_INVITE_TRANSITIONS, SERVICE_PROVIDER_SIGN_IN_SUBJECT, SERVICE_PROVIDER_SIGN_IN_TYPE, SERVICE_PROVIDER_SIGN_UP_SUBJECT, SERVICE_PROVIDER_SIGN_UP_TYPE, SOFTWARE_VERSION_ENDPOINT, ServiceProviderInviteAction, ServiceProviderInviteDecision, ServiceProviderInviteFacts, SiteAddress, SiteCategories, SiteStatus, SortFields, SortOrder, Status, SubjectOrder, SubjectSort, SubscriptionBillingMode, SubscriptionType, TAccessMngmntSettings, TActionStatus, TAddress, TAffectedEntities, TAffectedInjured, TAppServiceType, TApprovedBy, TApprover, TAttendance, TAttendanceCheckIn, TAttendanceCheckOut, TAttendanceCheckTime, TAttendanceLocation, TAttendanceSettings, TAttendanceSettingsGetBySite, TAuthorities, TAuthoritiesCalled, TBidPreloved, TBilling, TBillingConfiguration, TBillingItem, TBuilding, TBuildingLevel, TBuildingUnit, TBulletinBoard, TBulletinVideo, TCamera, TCameraHealthClaim, TCategoryPreloved, TChannelPreloved, TChat, TChatPreloved, TCheckPoint$1 as TCheckPoint, TComplaintInfo, TComplaintReceivedTo, TConsoleAudit, TConsoleAuditQuery, TCounter, TCreateNfcPatrolLog, TCustomer, TCustomerSite, TCustomerSitePropertyField, TDayNumber, TDaySchedule, TDefaultAccessCard, TDesignations, TDocs, TDocumentCreate, TDocumentManagement, TEntryPassSettings, TEventManagement, TFeedback, TFeedbackMetadata, TFeedbackUpdate, TFeedbackUpdateCategory, TFeedbackUpdateServiceProvider, TFeedbackUpdateStatus, TFeedbackUpdateToCompleted, TFile, TFiles, TFolderUpdate, TFormEntry, TGetAttendancesByUserQuery, TGetAttendancesQuery, TGuestManagement, THidAmicoEvent, THidAmicoGatewayJob, THidAmicoIdentity, THidAmicoPhysicalCard, THidAmicoReader, THidPermissionAssignment, THidPermissionCategory, THidPermissionUserBinding, THidPhysicalCardInput, THidPhysicalCardType$1 as THidPhysicalCardType, THidSipAccount, THidSitePermissions, TIncidentInformation, TIncidentReport, TIncidentTypeAndTime, TInvoice, TKeyRef, TManpowerDesignations, TManpowerDesignationsUpdate, TManpowerMonitoring, TManpowerMonitoringUpdate, TManpowerRemarks, TManpowerRemarksStatusUpdate, TManpowerRemarksUpdate, TManpowerSearchFilter, TManpowerSites, TMember, TMemberModulesDeps, TMemberUpdateStatus, TMessagePreloved, TMiniRole, TModuleAccess, TModuleGateMode, TModuleImpact, TNfcPatrolLog, TNfcPatrolRoute, TNfcPatrolRouteEdit, TNfcPatrolSettings, TNfcPatrolSettingsGetBySite, TNfcPatrolSettingsUpdate, TNfcPatrolTag, TNfcPatrolTagConfigureReset, TNfcPatrolTagEdit, TNfcPatrolTagUpdateData, TNotification, TNotificationPreference, TNotificationPreferenceOff, TNotifyAccessContext, TNotifyAccessMode, TNotifyAccessReport, TOccurrenceBook, TOccurrenceEntry, TOccurrenceSubject, TOnlineForm, TOrg, TOrgModulesDeps, TOrgOwnerRepairClaim, TOrgOwnerRepairDeps, TOrgOwnerRepairInput, TOrgOwnerRepairPayload, TOrgOwnerRepairPlan, TOvernightParkingApprovalHours, TOvernightParkingRequest, TPatrolEmail, TPatrolEmailCreatedBy, TPatrolEmailLogRef, TPatrolLog, TPatrolQuestion, TPatrolRoute, TPerson, TPersonalEmergencyChain, TPersonalEmergencyContact, TPlaceOfIncident, TPlates, TPlatformTerms, TPost, TPostFavorite, TPrice, TPriceType, TPromoCode, TPromoCurrencyInput, TPromoTier, TRANSPORT_DEVICE_HTTP, TRANSPORT_RELAY_PLAYER, TRANSPORT_RTSP_FRAME, TRecipientOfComplaint, TRemarks, TResident, TResidentAppModules, TRobot, TRobotMetadata, TRole, TRolePermissionHistoryEntry, TRoleV2, TRoute, TSOABillingItem, TSOAStatus, TSelfServiceEmailOccasion, TSelfServiceEmailRecord, TSelfServiceResendDecision, TSelfServiceResendFacts, TServiceProvider, TServiceProviderBilling, TSession, TSessionCreate, TShifts, TSignNfcPatrolLog, TSite, TSiteCamera, TSiteDayBounds, TSiteFacility, TSiteFacilityBooking, TSiteInfo, TSiteInformation, TSiteMetadata, TSiteModulesDeps, TSiteUpdateBlock, TStatementOfAccount, TSubcategoryPreloved, TSubmissionForm, TSubscription, TSubscriptionPlan, TSubscriptionPlanApplication, TUnitBilling, TUnits, TUpdateFormEntry, TUpdateName, TUser, TUserCreate, TVehicle, TVehicleTransaction, TVehicleUpdate, TVerification, TVerificationCode, TVerificationEvent, TVerificationMetadata, TVerificationMetadataV2, TVerificationOnboarding, TVerificationV2, TVisitorTransaction, TWorkOrder, TWorkOrderMetadata, TWorkOrderUpdate, TWorkOrderUpdateStatus, TWorkOrderUpdateToCompleted, TanyoneDamageToProperty, UNSTORED_COLUMNS, UseAccessManagementRepo, UserStatus, VERIFICATION_OPEN_STATUSES, VehicleCategory, VehicleOrder, VehicleSort, VehicleStatus, VehicleType, VerificationLinkType, VerificationStatus, VerificationSubjectType, VerificationType, VisitorSort, VisitorStatus, addressSchema, allowedFieldsSite, allowedNatures, allowedPlanApplications, attendanceSchema, attendanceSettingsSchema, buildSelfServiceEmailContext, building_level_namespace_collection, building_units_namespace_collection, buildings_namespace_collection, bulletin_boards_namespace_collection, callerAccountApproved, callerId, cameraBaseUrl, cameraCapabilitiesFor, cameraDevices, cameraGrant, cameraHealthClaim, cameraHealthSummary, cameraListClearConfirmation, cameraManagePermissions, cameraProbeCacheKey, cameraTransports, canManageSiteModules, canRevokeRefreshTokenFamily, categoriesForPermissions, categorySupportsChannel, chatPrelovedEvents, chatSchema, claimReadsAsStale, clampPtzSpeed, clockDriftSeconds, consoleRoleAllows, consoleRoleAllowsAll, consoleSpellings, console_audit_namespace_collection, createManpowerRemarksDaily, customerSchema, customerSitePropertyFields, decideSelfServiceResend, decideServiceProviderInvite, decodeHidPacsCard, deniedModules, deriveBulletinStatus, deriveCameraHost, describeCameraCapabilities, designationsSchema, deviceControlEnabled, deviceHttpEnabled, deviceHttpTargets, deviceHttpTimeoutMs, deviceProbeTtlSeconds, documentExpiryFilter, documents_namespace_collection, emitNotificationCreated, emptyPersonalEmergencyChain, encodeHidPacsCard, entitledSiteScope, events_namespace_collection, expandModules, expiredBulletinSweepFilter, expiredVehicleSweepFilter, facility_bookings_namespace_collection, feedbackSchema, feedbacks2_namespace_collection, feedbacks_namespace_collection, ffmpegFrameArgs, ffmpegPath, filterByAccess, formatCapabilityTrace, formatDahuaDate, getIO, getSessionIdFromRequest, grabWithSubStreamFallback, guests_namespace_collection, hasAnyCapability, hasAnyPermission, hasOrgInvitation, hasOrgOwnership, hasOrgSiteReach, hidRawUint64, holdsRole, incidentReport, incidentReportLog, incidents_namespace_collection, invitationOffersRole, isCameraEntitled, isDuplicateMemberError, isDuplicateVersionError, isLikelySelfServiceEmail, isPatrolCctvCamera, isPlatformOwner, isPromoCodeExpired, isRelayPlayerUrl, isSafeRelativePath, isSuperAdmin, isTermsCurrent, isValidTimezone, logCamera, manpowerDesignationsSchema, manpowerEvents, manpowerMonitoringSchema, manpowerRemarksSchema, manpowerSitesSchema, mapWithLimit, maskNric, memberModulesHandlers, moduleDeniedForCaller, moduleGateEnforceKeys, moduleGateMode, moduleImpact, moduleListGateOn, nfcPatrolSettingsSchema, nfcPatrolSettingsSchemaUpdate, normalizeAcceptedTerms, normalizeHidCardValue, notificationAccessReport, notificationCategory, notificationCategoryLabel, notificationEvents, notificationRoom, notifyAccessMode, occasionForStatus, occurrence_book_namespace_collection, online_forms_namespace_collection, orgLevelRoles, orgModulesHandlers, orgOwnerRepairHandlers, orgOwnerRepairOn, orgQualifiesForOwnerRepair, orgSchema, overnight_parking_requests_namespace_collection, parseCameraChannel, parseCameraHost, parseDahuaFind, parseDeviceTime, parseHidJsonLossless, parsePromoExpiry, parseSoftwareVersion, pickAuditFields, pickCustomerSiteProperties, planBulkCameraImport, planOrgOwnerRepair, platform_terms_namespace_collection, promoCodeRefusal, promoCodeSchema, promoCodeStatusSchema, promoCodeUpdate, promoCodeUpdateSchema, ptzEndpoint, publicCameraFields, readsAsApprovedAccount, recordConsoleAction, refuseServiceProviderInviteAction, registerCameraTransport, relayForRecorder, remarksSchema, renderPagePdf, requireConsolePermission, requirePlatformStaff, resetCameraTransports, residentAppModuleKeys, residentAppModulesSchema, residentFormEntry, resolutionRefusalReason, resolveCamera, resolveDeviceHttp, resolveHidPhysicalCardValue, resolveInviteActor, resolveSiteTimezone, resolveStaffRole, robotSchema, rtspUrl, schema, schemaAppSlugNotification, schemaApprovedBy, schemaApprover, schemaBidPreloved, schemaBilling, schemaBillingConfiguration, schemaBillingItem, schemaBuilding, schemaBuildingLevel, schemaBuildingUnit, schemaBuildingUpdateOptions, schemaBulletinBoard, schemaBulletinVideo, schemaCategoryPreloved, schemaChannelPreloved, schemaChatPreloved, schemaConsoleAudit, schemaCreateHidAmicoIdentity, schemaCreateNfcPatrolLog, schemaCreateNotification, schemaCustomerSite, schemaDiscoverHidAmicoReader, schemaDocumentManagement, schemaEntryPassSettings, schemaEventManagement, schemaFiles, schemaFormEntry, schemaGuestManagement, schemaHidAmicoAccessLogQuery, schemaHidAmicoAssignUserCard, schemaHidAmicoConfiguration, schemaHidAmicoEnrollUserCard, schemaHidAmicoEvent, schemaHidAmicoExecuteActions, schemaHidAmicoIdentity, schemaHidAmicoIdentityIdParams, schemaHidAmicoIdentityQuery, schemaHidAmicoIntercomCall, schemaHidAmicoLogQuery, schemaHidAmicoMonitor, schemaHidAmicoNotificationParams, schemaHidAmicoObjectOperation, schemaHidAmicoOperatingMode, schemaHidAmicoReader, schemaHidAmicoReaderIdParams, schemaHidAmicoReaderListQuery, schemaHidAmicoReaderUserQuery, schemaHidAmicoSetConfiguration, schemaHidAmicoSiteIdParams, schemaHidAmicoSync, schemaHidAmicoUserCardIdParams, schemaHidAmicoUserCardParams, schemaHidAmicoUserImageParams, schemaHidAmicoUserImageUploadQuery, schemaHidAmicoUserPassword, schemaHidAmicoUserPasswordParams, schemaHidAmicoUserPin, schemaHidAmicoUserPinParams, schemaHidAmicoVisitorImageParams, schemaHidAmicoVisitorImageUploadQuery, schemaHidAmicoVisitorQr, schemaHidPermissionCandidateQuery, schemaHidPermissionScopeQuery, schemaHidSipAccountRequest, schemaIncidentReport, schemaListNotification, schemaMultipleDocumentManagement, schemaNfcPatrolLog, schemaNfcPatrolRoute, schemaNfcPatrolTag, schemaNfcPatrolTagUpdateData, schemaNotification, schemaNotificationPreference, schemaNotificationPreferenceOff, schemaOccurrenceBook, schemaOccurrenceEntry, schemaOccurrenceSubject, schemaOnlineForm, schemaOvernightParkingApprovalHours, schemaOvernightParkingRequest, schemaPatrolEmail, schemaPatrolEmailCreatedBy, schemaPatrolEmailLogRef, schemaPatrolEmailQuery, schemaPatrolLog, schemaPatrolQuestion, schemaPatrolRoute, schemaPerson, schemaPersonalEmergencyContact, schemaPlate, schemaPlatformTerms, schemaPost, schemaPostFavorite, schemaResendPatrolEmail, schemaResidentSelfSignUp, schemaSelfServiceVisitor, schemaSendPatrolEmail, schemaServiceProvider, schemaServiceProviderBilling, schemaSignNfcPatrolLog, schemaSiteCamera, schemaSiteFacility, schemaSiteFacilityBooking, schemaStatementOfAccount, schemaSubcategoryPreloved, schemaUnitBilling, schemaUpdateBidPreloved, schemaUpdateBuildingLevel, schemaUpdateBulletinBoard, schemaUpdateBulletinVideo, schemaUpdateCategoryPreloved, schemaUpdateChatPreloved, schemaUpdateDocumentManagement, schemaUpdateEntryPassSettings, schemaUpdateEventManagement, schemaUpdateFolderManagement, schemaUpdateFormEntry, schemaUpdateGuestManagement, schemaUpdateHidAmicoIdentity, schemaUpdateHidAmicoReader, schemaUpdateHidSitePermissions, schemaUpdateIncidentReport, schemaUpdateNotification, schemaUpdateNotificationPreference, schemaUpdateOccurrenceBook, schemaUpdateOccurrenceEntry, schemaUpdateOccurrenceSubject, schemaUpdateOnlineForm, schemaUpdateOptions, schemaUpdateOvernightParkingRequest, schemaUpdatePatrolLog, schemaUpdatePatrolQuestion, schemaUpdatePatrolRoute, schemaUpdatePerson, schemaUpdatePersonalEmergencyChain, schemaUpdatePost, schemaUpdatePostFavorite, schemaUpdateServiceProviderBilling, schemaUpdateSiteBillingConfiguration, schemaUpdateSiteBillingItem, schemaUpdateSiteCamera, schemaUpdateSiteFacility, schemaUpdateSiteFacilityBooking, schemaUpdateSiteUnitBilling, schemaUpdateStatementOfAccount, schemaUpdateSubcategoryPreloved, schemaUpdateVisTrans, schemaVehicleTransaction, schemaVisitorTransaction, schemeCamera, schemeLogCamera, selectHealthTargets, selfServiceEmailSubject, serviceProviderInviteLabel, sessionSchema, setIO, shiftSchema, siteDayBounds, siteModulesHandlers, siteSchema, site_people_namespace_collection, snapshotEndpoint, snapshotRefusalReason, staffMayBypass, stringifyHidJson, stripFacialImageMetadata, subscriptionPlanSchema, summariseBulkCameraPlan, toExpiryDate, updateRemarksStatusEod, updateRemarksisAcknowledged, updateSiteSchema, useAccessManagementController, useAddressRepo, useAttendanceController, useAttendanceRepository, useAttendanceSettingsController, useAttendanceSettingsRepository, useAttendanceSettingsService, useAuthController, useAuthControllerV2, useAuthService, useAuthServiceV2, useBidPrelovedController, useBidPrelovedRepo, useBidPrelovedService, useBuildingController, useBuildingLevelController, useBuildingLevelRepo, useBuildingLevelService, useBuildingRepo, useBuildingService, useBuildingUnitController, useBuildingUnitRepo, useBuildingUnitService, useBulletinBoardController, useBulletinBoardRepo, useBulletinBoardService, useBulletinVideoController, useBulletinVideoRepo, useBulletinVideoService, useCameraViewController, useCameraViewService, useCategoryPrelovedController, useCategoryPrelovedRepo, useChannelPrelovedController, useChannelPrelovedRepo, useChatController, useChatPrelovedController, useChatPrelovedRepo, useChatPrelovedService, useChatRepo, useConsoleAuditController, useConsoleAuditRepo, useCounterModel, useCounterRepo, useCustomerController, useCustomerRepo, useCustomerSiteController, useCustomerSiteRepo, useCustomerSiteService, useDahuaService, useDashboardController, useDashboardRepo, useDocumentManagementController, useDocumentManagementRepo, useDocumentManagementService, useEntryPassSettingsController, useEntryPassSettingsRepo, useEventManagementController, useEventManagementRepo, useEventManagementService, useFeedbackController, useFeedbackRepo, useFeedbackService, useFileController, useFileRepo, useFileService, useFormEntryController, useFormEntryRepo, useGuestManagementController, useGuestManagementRepo, useGuestManagementService, useHidAmicoController, useHidAmicoRepo, useHidAmicoService, useHrmLabsAttendanceCtrl, useHrmLabsAttendanceSrvc, useIncidentReportController, useIncidentReportRepo, useIncidentReportService, useInvoiceController, useInvoiceModel, useInvoiceRepo, useManpowerDesignationCtrl, useManpowerDesignationRepo, useManpowerMonitoringCtrl, useManpowerMonitoringRepo, useManpowerMonitoringSrvc, useManpowerRemarkCtrl, useManpowerRemarksRepo, useManpowerSitesCtrl, useManpowerSitesRepo, useManpowerSitesSrvc, useMemberController, useMemberRepo, useMemberService, useNewDashboardController, useNewDashboardRepo, useNfcPatrolLogController, useNfcPatrolLogRepo, useNfcPatrolLogService, useNfcPatrolRouteController, useNfcPatrolRouteRepo, useNfcPatrolRouteService, useNfcPatrolSettingsController, useNfcPatrolSettingsRepository, useNfcPatrolSettingsService, useNfcPatrolTagController, useNfcPatrolTagRepo, useNfcPatrolTagService, useNotificationController, useNotificationPreferenceController, useNotificationPreferenceRepo, useNotificationPreferenceService, useNotificationRepo, useOccurrenceBookController, useOccurrenceBookRepo, useOccurrenceBookService, useOccurrenceEntryController, useOccurrenceEntryRepo, useOccurrenceEntryService, useOccurrenceSubjectController, useOccurrenceSubjectRepo, useOccurrenceSubjectService, useOnlineFormController, useOnlineFormRepo, useOrgController, useOrgControllerV2, useOrgOwnerRepairRepo, useOrgRepo, useOvernightParkingController, useOvernightParkingRepo, useOvernightParkingRequestController, useOvernightParkingRequestRepo, useOvernightParkingRequestService, usePatrolEmailController, usePatrolEmailRepo, usePatrolEmailService, usePatrolLogController, usePatrolLogRepo, usePatrolLogService, usePatrolQuestionController, usePatrolQuestionRepo, usePatrolRouteController, usePatrolRouteRepo, usePersonController, usePersonRepo, usePersonalEmergencyChainController, usePersonalEmergencyChainRepo, usePersonalEmergencyChainService, usePlatformTermsController, usePlatformTermsRepo, usePlatformTermsService, usePostFavoriteController, usePostFavoriteRepo, usePostFavoriteService, usePostPrelovedController, usePostPrelovedRepo, usePriceController, usePriceModel, usePriceRepo, usePromoCodeController, usePromoCodeRepo, useRedDotPaymentController, useRedDotPaymentRepo, useRedDotPaymentSvc, useRobotController, useRobotRepo, useRobotService, useRoleController, useRoleControllerV2, useRoleRepo, useRoleRepoV2, useRoleServiceV2, useServiceProviderBillingController, useServiceProviderBillingRepo, useServiceProviderBillingService, useServiceProviderController, useServiceProviderInviteController, useServiceProviderInviteService, useServiceProviderRepo, useSessionRepo, useSiteBillingConfigurationController, useSiteBillingConfigurationRepo, useSiteBillingItemController, useSiteBillingItemRepo, useSiteCameraController, useSiteCameraRepo, useSiteCameraService, useSiteController, useSiteFacilityBookingController, useSiteFacilityBookingRepo, useSiteFacilityBookingService, useSiteFacilityController, useSiteFacilityRepo, useSiteFacilityService, useSiteRepo, useSiteService, useSiteUnitBillingController, useSiteUnitBillingRepo, useSiteUnitBillingService, useStatementOfAccountController, useStatementOfAccountRepo, useSubcategoryPrelovedController, useSubcategoryPrelovedRepo, useSubscriptionController, useSubscriptionPlanController, useSubscriptionPlanRepo, useSubscriptionRepo, useSubscriptionService, useUserController, useUserControllerV2, useUserRepo, useUserRepoV2, useUserService, useUserServiceV2, useVehicleController, useVehicleRepo, useVehicleService, useVerificationController, useVerificationControllerV2, useVerificationRepo, useVerificationRepoV2, useVerificationService, useVerificationServiceV2, useVisitorTransactionController, useVisitorTransactionRepo, useVisitorTransactionService, useWorkOrderController, useWorkOrderRepo, useWorkOrderService, userSchema, vehicleSchema, vehicles_namespace_collection, visitorPersonRepo, visitorPersonService, visitorType, visitors_namespace_collection, wallConfig, workOrderSchema, work_orders2_namespace_collection, work_orders_namespace_collection };
+export { ANPRMode, APP_BASE_URLS, AUDIT_VALUE_MAX_LENGTH, AccessTypeProps, AppKey, AppServiceType, AssignCardConfig, BULK_CAMERA_COLUMNS, BidStatus, BidType, BuildingLevelStatus, BuildingStatus, BulkCameraAccepted, BulkCameraOutcome, BulkCameraPlan, BulkCameraResult, BulkCardUpdate, BulletinOrder, BulletinRecipient, BulletinSort, BulletinStatus, BulletinVideoOrder, BulletinVideoSort, CAMERA_ANPR_PERMISSIONS, CAMERA_CAPABILITIES, CAMERA_CAPABILITY_REASONS, CAMERA_MANAGE_ANY_PERMISSIONS, CAMERA_NOT_PATROL_OR_CCTV, CAMERA_NO_SUB_STREAM_TTL_SECONDS, CAMERA_PTZ_PERMISSIONS, CAMERA_RECORDINGS_PERMISSIONS, CAMERA_REQUEST_TIMEOUT_MS, CAMERA_RTSP_TIMEOUT_MS, CAMERA_SETUP_PERMISSIONS, CAMERA_SNAPSHOT_CACHE_SECONDS, CAMERA_SNAPSHOT_MAX_BYTES, CAMERA_TEST_MIN_INTERVAL_SECONDS, CAMERA_TEST_ROUND_LIMIT, CAMERA_TEST_ROUND_SECONDS, CAMERA_TYPE_ANPR, CAMERA_TYPE_IP, CAMERA_VIEW_PERMISSIONS, CLIENT_ACTIONS, CLOCK_DRIFT_WARN_SECONDS, CONSOLE_AUDIT_LABELS, CONSOLE_PERMISSIONS, CONTRACTOR_TYPE_LABELS, CROSS_CLIENT_GRANT, CURRENT_TIME_ENDPOINT, Camera, CameraAddressInput, CameraCapability, CameraCapabilityContext, CameraCapabilityDescriptor, CameraCapabilityEntry, CameraCapabilityReason, CameraCapabilityState, CameraCapabilityTrace, CameraDevice, CameraFrame, CameraMembership, CameraStream, CameraTestStatus, CameraTransport, CameraType, ConsoleAuditAction, ConsoleAuditTarget, ConsoleGrant, DEFAULT_RING_SECONDS, DEFAULT_SITE_TIMEZONE, DEVICE_STATUS, DOBStatus, DUPLICATE_TERMS_VERSION_MESSAGE, DayOfWeek, DeviceHttpTarget, DeviceProbeResult, DynamicFormFields, E164, EAccessCardTypes, EAccessCardUserTypes, EmailSender, EntryOrder, EntrySort, EventOrder, EventSort, EventStatus, EventType, FacilitySort, FacilityStatus, FormEntryStatus, GOVERNED_MODULES, GuestSort, GuestStatus, HID_CARD_VALUE_FACTOR, HID_PERMISSION_CATEGORIES, HID_UINT32_MAX, HID_UINT64_MAX, HidRawUint64, IAccessCard, IAccessCardTransaction, InviteActor, LIVE_ROLE, MANAGE_SITE_MODULES, MAX_BULK_CAMERA_ROWS, MAX_CAMERA_CHANNEL, MAX_CAMERA_NAME_LENGTH, MAX_PERSONAL_EMERGENCY_CONTACTS, MAX_RING_SECONDS, MAccessCard, MAccessCardTransaction, MAddress, MAttendance, MAttendanceSettings, MBidPreloved, MBillingConfiguration, MBillingItem, MBuilding, MBuildingLevel, MBuildingUnit, MBulletinBoard, MBulletinVideo, MCategoryPreloved, MChannelPreloved, MChat, MChatPreloved, MConsoleAudit, MCustomer, MCustomerSite, MDocumentManagement, MEMBER_TYPES, MEntryPassSettings, MEventManagement, MFeedback, MFile, MFormEntry, MGuestManagement, MHidAmicoEvent, MHidAmicoIdentity, MHidAmicoReader, MHidSipAccount, MHidSitePermissions, MIN_RING_SECONDS, MIncidentReport, MManpowerDesignations, MManpowerMonitoring, MManpowerRemarks, MManpowerSites, MMember, MNfcPatrolLog, MNfcPatrolRoute, MNfcPatrolSettings, MNfcPatrolSettingsUpdate, MNfcPatrolTag, MNotification, MNotificationPreference, MODULE_GATE_MODE_DEFAULT, MODULE_LIST_GATE_DEFAULT, MOccurrenceBook, MOccurrenceEntry, MOccurrenceSubject, MOnlineForm, MOrg, MOvernightParkingApprovalHours, MOvernightParkingRequest, MPatrolEmail, MPatrolLog, MPatrolQuestion, MPatrolRoute, MPerson, MPersonalEmergencyChain, MPlatformTerms, MPost, MPostFavorite, MPromoCode, MRobot, MRole, MRoleV2, MServiceProvider, MServiceProviderBilling, MSession, MSite, MSiteCamera, MSiteFacility, MSiteFacilityBooking, MStatementOfAccount, MSubcategoryPreloved, MSubscription, MSubscriptionPlan, MUnitBilling, MUser, MVehicle, MVehicleTransaction, MVerification, MVerificationV2, MVisitorTransaction, MWorkOrder, NOTIFICATION_CATEGORIES, NOTIFICATION_CHANNELS, NOTIFICATION_CHANNEL_LABELS, NOTIFICATION_NAMESPACE, NOTIFY_ACCESS_FILTER_DEFAULT, NotificationAppSlug, NotificationCategory, NotificationChannel, NotificationModule, NotificationPreferenceView, NotificationService, ORG_MARKETPLACE_VENDOR_FIELD, ORG_OWNER_REPAIR_CLAIM_STALE_MS, ORG_OWNER_REPAIR_CLAIM_TAKEN_REASON, ORG_OWNER_REPAIR_DEFAULT, ORG_OWNER_REPAIR_OFF_REASON, OrgNature, OvernightParkingRequestSort, OvernightParkingRequestStatus, PATROL_CCTV_CAMERA_FILTER, PATROL_EMAIL_MAX_LOGS, PATROL_EMAIL_MAX_PER_HOUR, PATROL_EMAIL_MAX_RECIPIENTS, PERSON_TYPES, PLATFORM_STAFF_MEMBER_TYPE, PLATFORM_STAFF_ROLE_TYPE, PLAYBACK_LINK_SECONDS, PLAYBACK_MAX_WINDOW_SECONDS, PROPERTY_MANAGEMENT_MEMBER_TYPES, PStatus, PTZ_ALLOWED_ACTIONS, PTZ_ALLOWED_CODES, Period, PersonStatus, PersonType, PersonTypes, PlatformTermsStatus, PostOrder, PostSort, PostStatus, QrTagProps, REALTIME_MAX_FANOUT, ResidentAppModuleKey, SELF_SERVICE_RESEND_COOLDOWN_MS, SELF_SIGNUP_PLATFORM, SELF_SIGNUP_STATUS, SELF_SIGNUP_TYPES, SERVICE_PROVIDER_INVITE_LABELS, SERVICE_PROVIDER_INVITE_TRANSITIONS, SERVICE_PROVIDER_SIGN_IN_SUBJECT, SERVICE_PROVIDER_SIGN_IN_TYPE, SERVICE_PROVIDER_SIGN_UP_SUBJECT, SERVICE_PROVIDER_SIGN_UP_TYPE, SOFTWARE_VERSION_ENDPOINT, ServiceProviderInviteAction, ServiceProviderInviteDecision, ServiceProviderInviteFacts, SiteAddress, SiteCategories, SiteStatus, SortFields, SortOrder, Status, SubjectOrder, SubjectSort, SubscriptionBillingMode, SubscriptionType, TAccessMngmntSettings, TActionStatus, TAddress, TAffectedEntities, TAffectedInjured, TAppServiceType, TApprovedBy, TApprover, TAttendance, TAttendanceCheckIn, TAttendanceCheckOut, TAttendanceCheckTime, TAttendanceLocation, TAttendanceSettings, TAttendanceSettingsGetBySite, TAuthorities, TAuthoritiesCalled, TBidPreloved, TBilling, TBillingConfiguration, TBillingItem, TBuilding, TBuildingLevel, TBuildingUnit, TBulletinBoard, TBulletinVideo, TCamera, TCameraHealthClaim, TCategoryPreloved, TChannelPreloved, TChat, TChatPreloved, TCheckPoint$1 as TCheckPoint, TComplaintInfo, TComplaintReceivedTo, TConsoleAudit, TConsoleAuditQuery, TCounter, TCreateNfcPatrolLog, TCustomer, TCustomerSite, TCustomerSitePropertyField, TDayNumber, TDaySchedule, TDefaultAccessCard, TDesignations, TDocs, TDocumentCreate, TDocumentManagement, TEntryPassSettings, TEventManagement, TFeedback, TFeedbackMetadata, TFeedbackUpdate, TFeedbackUpdateCategory, TFeedbackUpdateServiceProvider, TFeedbackUpdateStatus, TFeedbackUpdateToCompleted, TFile, TFiles, TFolderUpdate, TFormEntry, TGetAttendancesByUserQuery, TGetAttendancesQuery, TGuestManagement, THidAmicoEvent, THidAmicoGatewayJob, THidAmicoIdentity, THidAmicoPhysicalCard, THidAmicoReader, THidPermissionAssignment, THidPermissionCategory, THidPermissionUserBinding, THidPhysicalCardInput, THidPhysicalCardType$1 as THidPhysicalCardType, THidSipAccount, THidSitePermissions, TIncidentInformation, TIncidentReport, TIncidentTypeAndTime, TInvoice, TKeyRef, TManpowerDesignations, TManpowerDesignationsUpdate, TManpowerMonitoring, TManpowerMonitoringUpdate, TManpowerRemarks, TManpowerRemarksStatusUpdate, TManpowerRemarksUpdate, TManpowerSearchFilter, TManpowerSites, TMember, TMemberModulesDeps, TMemberUpdateStatus, TMessagePreloved, TMiniRole, TModuleAccess, TModuleGateMode, TModuleImpact, TNfcPatrolLog, TNfcPatrolRoute, TNfcPatrolRouteEdit, TNfcPatrolSettings, TNfcPatrolSettingsGetBySite, TNfcPatrolSettingsUpdate, TNfcPatrolTag, TNfcPatrolTagConfigureReset, TNfcPatrolTagEdit, TNfcPatrolTagUpdateData, TNotification, TNotificationPreference, TNotificationPreferenceOff, TNotifyAccessContext, TNotifyAccessMode, TNotifyAccessReport, TOccurrenceBook, TOccurrenceEntry, TOccurrenceSubject, TOnlineForm, TOrg, TOrgModulesDeps, TOrgOwnerRepairClaim, TOrgOwnerRepairDeps, TOrgOwnerRepairInput, TOrgOwnerRepairPayload, TOrgOwnerRepairPlan, TOvernightParkingApprovalHours, TOvernightParkingRequest, TPatrolEmail, TPatrolEmailCreatedBy, TPatrolEmailLogRef, TPatrolLog, TPatrolQuestion, TPatrolRoute, TPerson, TPersonalEmergencyChain, TPersonalEmergencyContact, TPlaceOfIncident, TPlates, TPlatformTerms, TPost, TPostFavorite, TPrice, TPriceType, TPromoCode, TPromoCurrencyInput, TPromoTier, TRANSPORT_DEVICE_HTTP, TRANSPORT_RELAY_PLAYBACK, TRANSPORT_RELAY_PLAYER, TRANSPORT_RTSP_FRAME, TRecipientOfComplaint, TRemarks, TResident, TResidentAppModules, TRobot, TRobotMetadata, TRole, TRolePermissionHistoryEntry, TRoleV2, TRoute, TSOABillingItem, TSOAStatus, TSelfServiceEmailOccasion, TSelfServiceEmailRecord, TSelfServiceResendDecision, TSelfServiceResendFacts, TServiceProvider, TServiceProviderBilling, TSession, TSessionCreate, TShifts, TSignNfcPatrolLog, TSite, TSiteCamera, TSiteDayBounds, TSiteFacility, TSiteFacilityBooking, TSiteInfo, TSiteInformation, TSiteMetadata, TSiteModulesDeps, TSiteUpdateBlock, TStatementOfAccount, TSubcategoryPreloved, TSubmissionForm, TSubscription, TSubscriptionPlan, TSubscriptionPlanApplication, TUnitBilling, TUnits, TUpdateFormEntry, TUpdateName, TUser, TUserCreate, TVehicle, TVehicleTransaction, TVehicleUpdate, TVerification, TVerificationCode, TVerificationEvent, TVerificationMetadata, TVerificationMetadataV2, TVerificationOnboarding, TVerificationV2, TVisitorTransaction, TWorkOrder, TWorkOrderMetadata, TWorkOrderUpdate, TWorkOrderUpdateStatus, TWorkOrderUpdateToCompleted, TanyoneDamageToProperty, UNSTORED_COLUMNS, UseAccessManagementRepo, UserStatus, VERIFICATION_OPEN_STATUSES, VehicleCategory, VehicleOrder, VehicleSort, VehicleStatus, VehicleType, VerificationLinkType, VerificationStatus, VerificationSubjectType, VerificationType, VisitorSort, VisitorStatus, addressSchema, allowedFieldsSite, allowedNatures, allowedPlanApplications, attendanceSchema, attendanceSettingsSchema, buildSelfServiceEmailContext, building_level_namespace_collection, building_units_namespace_collection, buildings_namespace_collection, bulletin_boards_namespace_collection, callerAccountApproved, callerId, cameraBaseUrl, cameraCapabilitiesFor, cameraDevices, cameraGrant, cameraHealthClaim, cameraHealthSummary, cameraListClearConfirmation, cameraManagePermissions, cameraProbeCacheKey, cameraTransports, canManageSiteModules, canRevokeRefreshTokenFamily, categoriesForPermissions, categorySupportsChannel, chatPrelovedEvents, chatSchema, claimReadsAsStale, clampPtzSpeed, clockDriftSeconds, consoleRoleAllows, consoleRoleAllowsAll, consoleSpellings, console_audit_namespace_collection, createManpowerRemarksDaily, customerSchema, customerSitePropertyFields, decideSelfServiceResend, decideServiceProviderInvite, decodeHidPacsCard, deniedModules, deriveBulletinStatus, deriveCameraHost, describeCameraCapabilities, designationsSchema, deviceControlEnabled, deviceHttpEnabled, deviceHttpTargets, deviceHttpTimeoutMs, deviceProbeTtlSeconds, documentExpiryFilter, documents_namespace_collection, emitNotificationCreated, emptyPersonalEmergencyChain, encodeHidPacsCard, entitledSiteScope, events_namespace_collection, expandModules, expiredBulletinSweepFilter, expiredVehicleSweepFilter, facility_bookings_namespace_collection, feedbackSchema, feedbacks2_namespace_collection, feedbacks_namespace_collection, ffmpegFrameArgs, ffmpegPath, filterByAccess, formatCapabilityTrace, formatDahuaDate, getIO, getSessionIdFromRequest, grabWithSubStreamFallback, guests_namespace_collection, hasAnyCapability, hasAnyPermission, hasOrgInvitation, hasOrgOwnership, hasOrgSiteReach, hidRawUint64, holdsRole, incidentReport, incidentReportLog, incidents_namespace_collection, invitationOffersRole, isCameraEntitled, isDuplicateMemberError, isDuplicateVersionError, isLikelySelfServiceEmail, isPatrolCctvCamera, isPlatformOwner, isPromoCodeExpired, isRelayPlayerUrl, isSafeRelativePath, isSuperAdmin, isTermsCurrent, isValidTimezone, logCamera, manpowerDesignationsSchema, manpowerEvents, manpowerMonitoringSchema, manpowerRemarksSchema, manpowerSitesSchema, mapWithLimit, maskNric, memberModulesHandlers, moduleDeniedForCaller, moduleGateEnforceKeys, moduleGateMode, moduleImpact, moduleListGateOn, nfcPatrolSettingsSchema, nfcPatrolSettingsSchemaUpdate, normalizeAcceptedTerms, normalizeHidCardValue, notificationAccessReport, notificationCategory, notificationCategoryLabel, notificationEvents, notificationRoom, notifyAccessMode, occasionForStatus, occurrence_book_namespace_collection, online_forms_namespace_collection, orgLevelRoles, orgModulesHandlers, orgOwnerRepairHandlers, orgOwnerRepairOn, orgQualifiesForOwnerRepair, orgSchema, overnight_parking_requests_namespace_collection, parseCameraChannel, parseCameraHost, parseDahuaFind, parseDeviceTime, parseHidJsonLossless, parsePromoExpiry, parseSoftwareVersion, pickAuditFields, pickCustomerSiteProperties, planBulkCameraImport, planOrgOwnerRepair, platform_terms_namespace_collection, playbackRelays, playbackWindowRefusal, promoCodeRefusal, promoCodeSchema, promoCodeStatusSchema, promoCodeUpdate, promoCodeUpdateSchema, ptzEndpoint, publicCameraFields, readsAsApprovedAccount, recordConsoleAction, refuseServiceProviderInviteAction, registerCameraTransport, relayForRecorder, remarksSchema, renderPagePdf, requireConsolePermission, requirePlatformStaff, resetCameraTransports, residentAppModuleKeys, residentAppModulesSchema, residentFormEntry, resolutionRefusalReason, resolveCamera, resolveDeviceHttp, resolveHidPhysicalCardValue, resolveInviteActor, resolveSiteTimezone, resolveStaffRole, robotSchema, rtspUrl, schema, schemaAppSlugNotification, schemaApprovedBy, schemaApprover, schemaBidPreloved, schemaBilling, schemaBillingConfiguration, schemaBillingItem, schemaBuilding, schemaBuildingLevel, schemaBuildingUnit, schemaBuildingUpdateOptions, schemaBulletinBoard, schemaBulletinVideo, schemaCategoryPreloved, schemaChannelPreloved, schemaChatPreloved, schemaConsoleAudit, schemaCreateHidAmicoIdentity, schemaCreateNfcPatrolLog, schemaCreateNotification, schemaCustomerSite, schemaDiscoverHidAmicoReader, schemaDocumentManagement, schemaEntryPassSettings, schemaEventManagement, schemaFiles, schemaFormEntry, schemaGuestManagement, schemaHidAmicoAccessLogQuery, schemaHidAmicoAssignUserCard, schemaHidAmicoConfiguration, schemaHidAmicoEnrollUserCard, schemaHidAmicoEvent, schemaHidAmicoExecuteActions, schemaHidAmicoIdentity, schemaHidAmicoIdentityIdParams, schemaHidAmicoIdentityQuery, schemaHidAmicoIntercomCall, schemaHidAmicoLogQuery, schemaHidAmicoMonitor, schemaHidAmicoNotificationParams, schemaHidAmicoObjectOperation, schemaHidAmicoOperatingMode, schemaHidAmicoReader, schemaHidAmicoReaderIdParams, schemaHidAmicoReaderListQuery, schemaHidAmicoReaderUserQuery, schemaHidAmicoSetConfiguration, schemaHidAmicoSiteIdParams, schemaHidAmicoSync, schemaHidAmicoUserCardIdParams, schemaHidAmicoUserCardParams, schemaHidAmicoUserImageParams, schemaHidAmicoUserImageUploadQuery, schemaHidAmicoUserPassword, schemaHidAmicoUserPasswordParams, schemaHidAmicoUserPin, schemaHidAmicoUserPinParams, schemaHidAmicoVisitorImageParams, schemaHidAmicoVisitorImageUploadQuery, schemaHidAmicoVisitorQr, schemaHidPermissionCandidateQuery, schemaHidPermissionScopeQuery, schemaHidSipAccountRequest, schemaIncidentReport, schemaListNotification, schemaMultipleDocumentManagement, schemaNfcPatrolLog, schemaNfcPatrolRoute, schemaNfcPatrolTag, schemaNfcPatrolTagUpdateData, schemaNotification, schemaNotificationPreference, schemaNotificationPreferenceOff, schemaOccurrenceBook, schemaOccurrenceEntry, schemaOccurrenceSubject, schemaOnlineForm, schemaOvernightParkingApprovalHours, schemaOvernightParkingRequest, schemaPatrolEmail, schemaPatrolEmailCreatedBy, schemaPatrolEmailLogRef, schemaPatrolEmailQuery, schemaPatrolLog, schemaPatrolQuestion, schemaPatrolRoute, schemaPerson, schemaPersonalEmergencyContact, schemaPlate, schemaPlatformTerms, schemaPost, schemaPostFavorite, schemaResendPatrolEmail, schemaResidentSelfSignUp, schemaSelfServiceVisitor, schemaSendPatrolEmail, schemaServiceProvider, schemaServiceProviderBilling, schemaSignNfcPatrolLog, schemaSiteCamera, schemaSiteFacility, schemaSiteFacilityBooking, schemaStatementOfAccount, schemaSubcategoryPreloved, schemaUnitBilling, schemaUpdateBidPreloved, schemaUpdateBuildingLevel, schemaUpdateBulletinBoard, schemaUpdateBulletinVideo, schemaUpdateCategoryPreloved, schemaUpdateChatPreloved, schemaUpdateDocumentManagement, schemaUpdateEntryPassSettings, schemaUpdateEventManagement, schemaUpdateFolderManagement, schemaUpdateFormEntry, schemaUpdateGuestManagement, schemaUpdateHidAmicoIdentity, schemaUpdateHidAmicoReader, schemaUpdateHidSitePermissions, schemaUpdateIncidentReport, schemaUpdateNotification, schemaUpdateNotificationPreference, schemaUpdateOccurrenceBook, schemaUpdateOccurrenceEntry, schemaUpdateOccurrenceSubject, schemaUpdateOnlineForm, schemaUpdateOptions, schemaUpdateOvernightParkingRequest, schemaUpdatePatrolLog, schemaUpdatePatrolQuestion, schemaUpdatePatrolRoute, schemaUpdatePerson, schemaUpdatePersonalEmergencyChain, schemaUpdatePost, schemaUpdatePostFavorite, schemaUpdateServiceProviderBilling, schemaUpdateSiteBillingConfiguration, schemaUpdateSiteBillingItem, schemaUpdateSiteCamera, schemaUpdateSiteFacility, schemaUpdateSiteFacilityBooking, schemaUpdateSiteUnitBilling, schemaUpdateStatementOfAccount, schemaUpdateSubcategoryPreloved, schemaUpdateVisTrans, schemaVehicleTransaction, schemaVisitorTransaction, schemeCamera, schemeLogCamera, selectHealthTargets, selfServiceEmailSubject, serviceProviderInviteLabel, sessionSchema, setIO, shiftSchema, signPlaybackLink, siteDayBounds, siteModulesHandlers, siteSchema, site_people_namespace_collection, snapshotEndpoint, snapshotRefusalReason, staffMayBypass, stringifyHidJson, stripFacialImageMetadata, subscriptionPlanSchema, summariseBulkCameraPlan, toExpiryDate, updateRemarksStatusEod, updateRemarksisAcknowledged, updateSiteSchema, useAccessManagementController, useAddressRepo, useAttendanceController, useAttendanceRepository, useAttendanceSettingsController, useAttendanceSettingsRepository, useAttendanceSettingsService, useAuthController, useAuthControllerV2, useAuthService, useAuthServiceV2, useBidPrelovedController, useBidPrelovedRepo, useBidPrelovedService, useBuildingController, useBuildingLevelController, useBuildingLevelRepo, useBuildingLevelService, useBuildingRepo, useBuildingService, useBuildingUnitController, useBuildingUnitRepo, useBuildingUnitService, useBulletinBoardController, useBulletinBoardRepo, useBulletinBoardService, useBulletinVideoController, useBulletinVideoRepo, useBulletinVideoService, useCameraViewController, useCameraViewService, useCategoryPrelovedController, useCategoryPrelovedRepo, useChannelPrelovedController, useChannelPrelovedRepo, useChatController, useChatPrelovedController, useChatPrelovedRepo, useChatPrelovedService, useChatRepo, useConsoleAuditController, useConsoleAuditRepo, useCounterModel, useCounterRepo, useCustomerController, useCustomerRepo, useCustomerSiteController, useCustomerSiteRepo, useCustomerSiteService, useDahuaService, useDashboardController, useDashboardRepo, useDocumentManagementController, useDocumentManagementRepo, useDocumentManagementService, useEntryPassSettingsController, useEntryPassSettingsRepo, useEventManagementController, useEventManagementRepo, useEventManagementService, useFeedbackController, useFeedbackRepo, useFeedbackService, useFileController, useFileRepo, useFileService, useFormEntryController, useFormEntryRepo, useGuestManagementController, useGuestManagementRepo, useGuestManagementService, useHidAmicoController, useHidAmicoRepo, useHidAmicoService, useHrmLabsAttendanceCtrl, useHrmLabsAttendanceSrvc, useIncidentReportController, useIncidentReportRepo, useIncidentReportService, useInvoiceController, useInvoiceModel, useInvoiceRepo, useManpowerDesignationCtrl, useManpowerDesignationRepo, useManpowerMonitoringCtrl, useManpowerMonitoringRepo, useManpowerMonitoringSrvc, useManpowerRemarkCtrl, useManpowerRemarksRepo, useManpowerSitesCtrl, useManpowerSitesRepo, useManpowerSitesSrvc, useMemberController, useMemberRepo, useMemberService, useNewDashboardController, useNewDashboardRepo, useNfcPatrolLogController, useNfcPatrolLogRepo, useNfcPatrolLogService, useNfcPatrolRouteController, useNfcPatrolRouteRepo, useNfcPatrolRouteService, useNfcPatrolSettingsController, useNfcPatrolSettingsRepository, useNfcPatrolSettingsService, useNfcPatrolTagController, useNfcPatrolTagRepo, useNfcPatrolTagService, useNotificationController, useNotificationPreferenceController, useNotificationPreferenceRepo, useNotificationPreferenceService, useNotificationRepo, useOccurrenceBookController, useOccurrenceBookRepo, useOccurrenceBookService, useOccurrenceEntryController, useOccurrenceEntryRepo, useOccurrenceEntryService, useOccurrenceSubjectController, useOccurrenceSubjectRepo, useOccurrenceSubjectService, useOnlineFormController, useOnlineFormRepo, useOrgController, useOrgControllerV2, useOrgOwnerRepairRepo, useOrgRepo, useOvernightParkingController, useOvernightParkingRepo, useOvernightParkingRequestController, useOvernightParkingRequestRepo, useOvernightParkingRequestService, usePatrolEmailController, usePatrolEmailRepo, usePatrolEmailService, usePatrolLogController, usePatrolLogRepo, usePatrolLogService, usePatrolQuestionController, usePatrolQuestionRepo, usePatrolRouteController, usePatrolRouteRepo, usePersonController, usePersonRepo, usePersonalEmergencyChainController, usePersonalEmergencyChainRepo, usePersonalEmergencyChainService, usePlatformTermsController, usePlatformTermsRepo, usePlatformTermsService, usePostFavoriteController, usePostFavoriteRepo, usePostFavoriteService, usePostPrelovedController, usePostPrelovedRepo, usePriceController, usePriceModel, usePriceRepo, usePromoCodeController, usePromoCodeRepo, useRedDotPaymentController, useRedDotPaymentRepo, useRedDotPaymentSvc, useRobotController, useRobotRepo, useRobotService, useRoleController, useRoleControllerV2, useRoleRepo, useRoleRepoV2, useRoleServiceV2, useServiceProviderBillingController, useServiceProviderBillingRepo, useServiceProviderBillingService, useServiceProviderController, useServiceProviderInviteController, useServiceProviderInviteService, useServiceProviderRepo, useSessionRepo, useSiteBillingConfigurationController, useSiteBillingConfigurationRepo, useSiteBillingItemController, useSiteBillingItemRepo, useSiteCameraController, useSiteCameraRepo, useSiteCameraService, useSiteController, useSiteFacilityBookingController, useSiteFacilityBookingRepo, useSiteFacilityBookingService, useSiteFacilityController, useSiteFacilityRepo, useSiteFacilityService, useSiteRepo, useSiteService, useSiteUnitBillingController, useSiteUnitBillingRepo, useSiteUnitBillingService, useStatementOfAccountController, useStatementOfAccountRepo, useSubcategoryPrelovedController, useSubcategoryPrelovedRepo, useSubscriptionController, useSubscriptionPlanController, useSubscriptionPlanRepo, useSubscriptionRepo, useSubscriptionService, useUserController, useUserControllerV2, useUserRepo, useUserRepoV2, useUserService, useUserServiceV2, useVehicleController, useVehicleRepo, useVehicleService, useVerificationController, useVerificationControllerV2, useVerificationRepo, useVerificationRepoV2, useVerificationService, useVerificationServiceV2, useVisitorTransactionController, useVisitorTransactionRepo, useVisitorTransactionService, useWorkOrderController, useWorkOrderRepo, useWorkOrderService, userSchema, vehicleSchema, vehicles_namespace_collection, visitorPersonRepo, visitorPersonService, visitorType, visitors_namespace_collection, wallConfig, workOrderSchema, work_orders2_namespace_collection, work_orders_namespace_collection };

package/dist/index.js

@@ -53,6 +53,7 @@ __export(src_exports, {
   CAMERA_NOT_PATROL_OR_CCTV: () => CAMERA_NOT_PATROL_OR_CCTV,
   CAMERA_NO_SUB_STREAM_TTL_SECONDS: () => CAMERA_NO_SUB_STREAM_TTL_SECONDS,
   CAMERA_PTZ_PERMISSIONS: () => CAMERA_PTZ_PERMISSIONS,
+  CAMERA_RECORDINGS_PERMISSIONS: () => CAMERA_RECORDINGS_PERMISSIONS,
   CAMERA_REQUEST_TIMEOUT_MS: () => CAMERA_REQUEST_TIMEOUT_MS,
   CAMERA_RTSP_TIMEOUT_MS: () => CAMERA_RTSP_TIMEOUT_MS,
   CAMERA_SETUP_PERMISSIONS: () => CAMERA_SETUP_PERMISSIONS,
@@ -218,6 +219,8 @@ __export(src_exports, {
   PERSON_TYPES: () => PERSON_TYPES,
   PLATFORM_STAFF_MEMBER_TYPE: () => PLATFORM_STAFF_MEMBER_TYPE,
   PLATFORM_STAFF_ROLE_TYPE: () => PLATFORM_STAFF_ROLE_TYPE,
+  PLAYBACK_LINK_SECONDS: () => PLAYBACK_LINK_SECONDS,
+  PLAYBACK_MAX_WINDOW_SECONDS: () => PLAYBACK_MAX_WINDOW_SECONDS,
   PROPERTY_MANAGEMENT_MEMBER_TYPES: () => PROPERTY_MANAGEMENT_MEMBER_TYPES,
   PStatus: () => PStatus,
   PTZ_ALLOWED_ACTIONS: () => PTZ_ALLOWED_ACTIONS,
@@ -251,6 +254,7 @@ __export(src_exports, {
   SubscriptionBillingMode: () => SubscriptionBillingMode,
   SubscriptionType: () => SubscriptionType,
   TRANSPORT_DEVICE_HTTP: () => TRANSPORT_DEVICE_HTTP,
+  TRANSPORT_RELAY_PLAYBACK: () => TRANSPORT_RELAY_PLAYBACK,
   TRANSPORT_RELAY_PLAYER: () => TRANSPORT_RELAY_PLAYER,
   TRANSPORT_RTSP_FRAME: () => TRANSPORT_RTSP_FRAME,
   UNSTORED_COLUMNS: () => UNSTORED_COLUMNS,
@@ -410,6 +414,8 @@ __export(src_exports, {
   planBulkCameraImport: () => planBulkCameraImport,
   planOrgOwnerRepair: () => planOrgOwnerRepair,
   platform_terms_namespace_collection: () => platform_terms_namespace_collection,
+  playbackRelays: () => playbackRelays,
+  playbackWindowRefusal: () => playbackWindowRefusal,
   promoCodeRefusal: () => promoCodeRefusal,
   promoCodeSchema: () => promoCodeSchema,
   promoCodeStatusSchema: () => promoCodeStatusSchema,
@@ -597,6 +603,7 @@ __export(src_exports, {
   sessionSchema: () => sessionSchema,
   setIO: () => setIO,
   shiftSchema: () => shiftSchema,
+  signPlaybackLink: () => signPlaybackLink,
   siteDayBounds: () => siteDayBounds,
   siteModulesHandlers: () => siteModulesHandlers,
   siteSchema: () => siteSchema,
@@ -22023,6 +22030,69 @@ function entitledSiteScope(params) {
   return Array.from(sites);
 }
 
+// src/utils/camera-playback.util.ts
+var import_node_crypto2 = require("crypto");
+var CAMERA_RECORDINGS_PERMISSIONS = ["cctv-mgmt:view-recordings"];
+var PLAYBACK_MAX_WINDOW_SECONDS = 30 * 60;
+var PLAYBACK_LINK_SECONDS = 120;
+function playbackRelays(source = process.env) {
+  let parsed;
+  try {
+    parsed = JSON.parse(source.CAMERA_PLAYBACK_RELAYS || "{}");
+  } catch {
+    return {};
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+    return {};
+  const relays = {};
+  for (const [authority, value] of Object.entries(parsed)) {
+    const ref = String(value?.keyRef ?? "").trim();
+    if (!/^[A-Z][A-Z0-9_]*$/.test(ref))
+      continue;
+    const key = source[ref] ?? "";
+    if (key.length < 32)
+      continue;
+    relays[authority.trim().toLowerCase()] = key;
+  }
+  return relays;
+}
+function playbackWindowRefusal(start, end, now = /* @__PURE__ */ new Date()) {
+  const s = start.getTime();
+  const e = end.getTime();
+  if (!Number.isFinite(s) || !Number.isFinite(e))
+    return "Choose a start and end time.";
+  if (e <= s)
+    return "The end time must be after the start time.";
+  if (e - s > PLAYBACK_MAX_WINDOW_SECONDS * 1e3)
+    return "A recording can be up to 30 minutes long.";
+  if (e > now.getTime())
+    return "Recorded footage can only be played for a time that has already passed.";
+  return null;
+}
+function signPlaybackLink(params) {
+  const parsed = parseCameraHost(params.host);
+  if (!parsed || parsed.channel === null)
+    return null;
+  const start = Math.floor(params.start.getTime() / 1e3);
+  const end = Math.floor(params.end.getTime() / 1e3);
+  const exp = Math.floor((params.now ?? /* @__PURE__ */ new Date()).getTime() / 1e3) + PLAYBACK_LINK_SECONDS;
+  const channel = String(parsed.channel);
+  const sig = (0, import_node_crypto2.createHmac)("sha256", params.key).update(`${channel}|${start}|${end}|${exp}`).digest("hex");
+  const query2 = new URLSearchParams({
+    start: String(start),
+    end: String(end),
+    exp: String(exp),
+    sig
+  }).toString();
+  return {
+    playerUrl: `https://${parsed.authority}/playback/${channel}?${query2}`,
+    streamUrl: `wss://${parsed.authority}/api/playback/${channel}?${query2}`,
+    start: new Date(start * 1e3).toISOString(),
+    end: new Date(end * 1e3).toISOString(),
+    expiresAt: new Date(exp * 1e3).toISOString()
+  };
+}
+
 // src/utils/camera-capability.util.ts
 var CAMERA_CAPABILITIES = [
   "liveVideo",
@@ -22038,6 +22108,7 @@ var CAMERA_CAPABILITIES = [
 var TRANSPORT_RELAY_PLAYER = "RELAY_PLAYER";
 var TRANSPORT_RTSP_FRAME = "RTSP_FRAME";
 var TRANSPORT_DEVICE_HTTP = "DEVICE_HTTP";
+var TRANSPORT_RELAY_PLAYBACK = "RELAY_PLAYBACK";
 var CAMERA_CAPABILITY_REASONS = {
   /* The record itself */
   "not-patrol-cctv-camera": CAMERA_NOT_PATROL_OR_CCTV,
@@ -22049,6 +22120,8 @@ var CAMERA_CAPABILITY_REASONS = {
   /* RTSP_FRAME */
   "no-recorder-configured": "No recorder is configured for this camera's relay.",
   "no-channel-in-address": "This camera's address has no channel, so we cannot tell which stream it is.",
+  /* RELAY_PLAYBACK */
+  "relay-playback-not-configured": "Recorded footage is not set up for this camera's video service yet.",
   /* DEVICE_HTTP */
   "device-http-not-configured": "No direct connection to this camera's recorder is configured on this server.",
   "device-http-disabled": "Direct camera access is switched off on this server.",
@@ -22241,6 +22314,23 @@ var rtspFrameTransport = {
     return YES;
   }
 };
+var relayPlaybackTransport = {
+  id: TRANSPORT_RELAY_PLAYBACK,
+  provides: ["playback"],
+  evaluate(_capability, ctx) {
+    const refusal = recordRefusal(ctx.camera);
+    if (refusal)
+      return no(refusal);
+    if (!isRelayPlayerUrl(ctx.camera?.host))
+      return no("not-a-relay-player-url");
+    const parsed = parseCameraHost(ctx.camera?.host ?? "");
+    if (!parsed || parsed.channel === null)
+      return no("no-channel-in-address");
+    if (!ctx.playbackRelays?.[parsed.authority])
+      return no("relay-playback-not-configured");
+    return YES;
+  }
+};
 var deviceHttpTransport = {
   id: TRANSPORT_DEVICE_HTTP,
   provides: [
@@ -22283,6 +22373,7 @@ var deviceHttpTransport = {
 var transports2 = [
   relayPlayerTransport,
   rtspFrameTransport,
+  relayPlaybackTransport,
   deviceHttpTransport
 ];
 function cameraTransports() {
@@ -22297,7 +22388,12 @@ function registerCameraTransport(transport) {
 }
 function resetCameraTransports() {
   transports2.length = 0;
-  transports2.push(relayPlayerTransport, rtspFrameTransport, deviceHttpTransport);
+  transports2.push(
+    relayPlayerTransport,
+    rtspFrameTransport,
+    relayPlaybackTransport,
+    deviceHttpTransport
+  );
 }
 function describeCameraCapabilities(ctx, registry = cameraTransports()) {
   const capabilities = {};
@@ -22350,7 +22446,8 @@ function cameraCapabilitiesFor(params) {
     camera: params.camera,
     rtspDevices,
     deviceHttp: resolveDeviceHttp(params.camera?.host, targets),
-    probe: params.probe ?? null
+    probe: params.probe ?? null,
+    playbackRelays: params.playbackRelays ?? playbackRelays()
   });
 }
 function hasAnyCapability(descriptor) {
@@ -22365,7 +22462,7 @@ function formatCapabilityTrace(trace) {
 }
 
 // src/services/camera-device-http.service.ts
-var import_node_crypto2 = require("crypto");
+var import_node_crypto3 = require("crypto");
 var DIGEST_UNAUTHORIZED = 401;
 var DIGEST_FORBIDDEN = 403;
 function parseDigestChallenge(header) {
@@ -22381,7 +22478,7 @@ function parseDigestChallenge(header) {
   return out;
 }
 function md5(input) {
-  return (0, import_node_crypto2.createHash)("md5").update(input, "utf8").digest("hex");
+  return (0, import_node_crypto3.createHash)("md5").update(input, "utf8").digest("hex");
 }
 function buildDigestAuthorization(params) {
   const realm = params.challenge.realm ?? "";
@@ -22390,7 +22487,7 @@ function buildDigestAuthorization(params) {
   const algorithm = (params.challenge.algorithm ?? "MD5").toUpperCase();
   const qop = pickQop(params.challenge.qop);
   const nc = params.nc ?? "00000001";
-  const cnonce = params.cnonce ?? (0, import_node_crypto2.randomBytes)(8).toString("hex");
+  const cnonce = params.cnonce ?? (0, import_node_crypto3.randomBytes)(8).toString("hex");
   let ha1 = md5(`${params.username}:${realm}:${params.password}`);
   if (algorithm === "MD5-SESS")
     ha1 = md5(`${ha1}:${nonce}:${cnonce}`);
@@ -23047,6 +23144,7 @@ function useCameraViewService() {
   });
   const ptzEnabled = process.env.CAMERA_PTZ_ENABLED === "true";
   const httpTargets = deviceHttpTargets();
+  const playbackKeys = playbackRelays();
   for (const problem of httpTargets.errors) {
     import_node_server_utils64.logger.info(`Camera device configuration ignored: ${problem}`);
   }
@@ -23083,7 +23181,8 @@ function useCameraViewService() {
     return cameraCapabilitiesFor({
       camera,
       probe,
-      deviceHttpTargets: httpTargets.targets
+      deviceHttpTargets: httpTargets.targets,
+      playbackRelays: playbackKeys
     });
   }
   function logCapabilitySelection(label, traces) {
@@ -23692,8 +23791,41 @@ function useCameraViewService() {
       return cannot(grabFailureMessage(error));
     }
   }
+  async function getPlayback(params) {
+    let camera;
+    try {
+      camera = await authorizeCamera({
+        cameraId: params.cameraId,
+        userId: params.userId,
+        permissions: CAMERA_RECORDINGS_PERMISSIONS
+      });
+    } catch (error) {
+      if (error instanceof import_node_server_utils64.UnauthorizedError && params.userId && import_mongodb50.ObjectId.isValid(params.userId)) {
+        throw new import_node_server_utils64.AppError("You do not have permission to watch recorded footage.", 403);
+      }
+      throw error;
+    }
+    const refusal = playbackWindowRefusal(params.start, params.end);
+    if (refusal)
+      throw new import_node_server_utils64.BadRequestError(refusal);
+    const { capabilities } = capabilitiesOf(camera, null);
+    const authority = parseCameraHost(camera.host ?? "")?.authority ?? "";
+    const key = playbackKeys[authority];
+    const link = capabilities.playback.state === "supported" && key ? signPlaybackLink({ host: camera.host, key, start: params.start, end: params.end }) : null;
+    if (!link) {
+      throw new import_node_server_utils64.AppError(
+        capabilities.playback.detail ?? "Recorded footage is not set up for this camera yet.",
+        409
+      );
+    }
+    import_node_server_utils64.logger.info(
+      `Camera playback issued: user=${params.userId} camera=${params.cameraId} start=${link.start} end=${link.end}`
+    );
+    return link;
+  }
   return {
     authorizeCamera,
+    getPlayback,
     entitleSite,
     authorizeSite,
     testCameraAddress,
@@ -40008,6 +40140,7 @@ function useCameraViewController() {
     getSnapshot,
     captureSnapshot,
     getStatus,
+    getPlayback,
     getSiteWall,
     getSiteHealth,
     movePtz,
@@ -40047,6 +40180,28 @@ function useCameraViewController() {
       next(error);
     }
   }
+  async function playback(req, res, next) {
+    const { error, value } = import_joi59.default.object({
+      start: import_joi59.default.date().iso().required(),
+      end: import_joi59.default.date().iso().required()
+    }).unknown(false).validate(req.query ?? {});
+    if (error) {
+      next(new import_node_server_utils124.BadRequestError("Choose a start and end time for the recording."));
+      return;
+    }
+    try {
+      const link = await getPlayback({
+        cameraId: String(req.params.id ?? ""),
+        userId: callerId5(req),
+        start: value.start,
+        end: value.end
+      });
+      res.setHeader("Cache-Control", "no-store");
+      res.json(link);
+    } catch (err) {
+      next(err);
+    }
+  }
   async function status(req, res, next) {
     try {
       const result = await getStatus({
@@ -40154,7 +40309,7 @@ function useCameraViewController() {
       }
     });
   }
-  return { snapshot, capture, status, ptz, capabilities, wall, health, test };
+  return { snapshot, capture, status, playback, ptz, capabilities, wall, health, test };
 }
 
 // src/services/customer-site.service.ts
@@ -44209,7 +44364,7 @@ function MHidSipAccount(value) {
 }
 
 // src/utils/hid-access.util.ts
-var import_node_crypto3 = __toESM(require("crypto"));
+var import_node_crypto4 = __toESM(require("crypto"));
 var HID_MAX_FACIAL_IMAGE_BYTES = 1024 * 1024;
 function isSupportedHidFacialImage(image) {
   if (!image.length || image.length >= HID_MAX_FACIAL_IMAGE_BYTES)
@@ -44317,15 +44472,15 @@ function sanitizeHidPayload(value) {
   );
 }
 function hashHidCallbackToken(token) {
-  return import_node_crypto3.default.createHash("sha256").update(token).digest("hex");
+  return import_node_crypto4.default.createHash("sha256").update(token).digest("hex");
 }
 function createHidCallbackToken() {
-  return import_node_crypto3.default.randomBytes(24).toString("base64url");
+  return import_node_crypto4.default.randomBytes(24).toString("base64url");
 }
 function verifyHidCallbackToken(token, expectedHash) {
   const actual = Buffer.from(hashHidCallbackToken(token), "hex");
   const expected = Buffer.from(String(expectedHash || ""), "hex");
-  return actual.length === expected.length && actual.length > 0 && import_node_crypto3.default.timingSafeEqual(actual, expected);
+  return actual.length === expected.length && actual.length > 0 && import_node_crypto4.default.timingSafeEqual(actual, expected);
 }
 function hidCallbackAllowsMissingDeviceId(type) {
   return type === "device_is_alive" || type === "secbox";
@@ -45568,7 +45723,7 @@ function resolveHidPhysicalCardValue(input) {
 }
 
 // src/utils/hid-json.util.ts
-var import_node_crypto4 = __toESM(require("crypto"));
+var import_node_crypto5 = __toESM(require("crypto"));
 var UINT64_MAX = 2n ** 64n - 1n;
 var RAW_UINT64_KEY = "__hidRawUint64";
 function hidRawUint64(value) {
@@ -45622,7 +45777,7 @@ function parseHidJsonLossless(value) {
   return JSON.parse(output);
 }
 function stringifyHidJson(value) {
-  const marker = `__HID_UINT64_${import_node_crypto4.default.randomBytes(16).toString("hex")}_`;
+  const marker = `__HID_UINT64_${import_node_crypto5.default.randomBytes(16).toString("hex")}_`;
   const rawValues = [];
   const serialized = JSON.stringify(value, (_key, nested) => {
     if (nested && typeof nested === "object" && Object.keys(nested).length === 1 && typeof nested[RAW_UINT64_KEY] === "string") {
@@ -92259,6 +92414,7 @@ function usePersonalEmergencyChainController() {
   CAMERA_NOT_PATROL_OR_CCTV,
   CAMERA_NO_SUB_STREAM_TTL_SECONDS,
   CAMERA_PTZ_PERMISSIONS,
+  CAMERA_RECORDINGS_PERMISSIONS,
   CAMERA_REQUEST_TIMEOUT_MS,
   CAMERA_RTSP_TIMEOUT_MS,
   CAMERA_SETUP_PERMISSIONS,
@@ -92424,6 +92580,8 @@ function usePersonalEmergencyChainController() {
   PERSON_TYPES,
   PLATFORM_STAFF_MEMBER_TYPE,
   PLATFORM_STAFF_ROLE_TYPE,
+  PLAYBACK_LINK_SECONDS,
+  PLAYBACK_MAX_WINDOW_SECONDS,
   PROPERTY_MANAGEMENT_MEMBER_TYPES,
   PStatus,
   PTZ_ALLOWED_ACTIONS,
@@ -92457,6 +92615,7 @@ function usePersonalEmergencyChainController() {
   SubscriptionBillingMode,
   SubscriptionType,
   TRANSPORT_DEVICE_HTTP,
+  TRANSPORT_RELAY_PLAYBACK,
   TRANSPORT_RELAY_PLAYER,
   TRANSPORT_RTSP_FRAME,
   UNSTORED_COLUMNS,
@@ -92616,6 +92775,8 @@ function usePersonalEmergencyChainController() {
   planBulkCameraImport,
   planOrgOwnerRepair,
   platform_terms_namespace_collection,
+  playbackRelays,
+  playbackWindowRefusal,
   promoCodeRefusal,
   promoCodeSchema,
   promoCodeStatusSchema,
@@ -92803,6 +92964,7 @@ function usePersonalEmergencyChainController() {
   sessionSchema,
   setIO,
   shiftSchema,
+  signPlaybackLink,
   siteDayBounds,
   siteModulesHandlers,
   siteSchema,