@codenkay/video-nsgplayer-core 0.1.2 → 0.1.5

package/dist/index.d.ts

@@ -1,3 +1,5 @@
+import Hls, { LoaderContext, LoaderConfiguration, LoaderCallbacks } from 'hls.js';
+
 /** Player lifecycle states. */
 type PlayerState = "idle" | "loading" | "ready" | "playing" | "paused" | "buffering" | "renewing" | "ended" | "error" | "destroyed";
 type HlsSupportMode = "hls.js" | "native" | "unsupported";
@@ -115,12 +117,24 @@ type StreamingConfig = {
         backBufferLength?: number;
         fatalRecoveryLimit?: number;
     };
+    /**
+     * Same-origin BFF proxy for `enc.key` (preferred in production when the
+     * server IP is allowlisted by the CDN / Cloudflare).
+     */
     keyProxyUrlBuilder?: (ctx: {
         videoId: string;
         keyUrl: string;
         token?: string;
         expires?: string;
+        username?: string;
+        mobile?: string;
     }) => string;
+    /**
+     * Browser-direct AES key auth: returns the Video API access token so hls.js
+     * can send `Authorization: Bearer …` on `enc.key` requests.
+     * Use when the BFF cannot reach Appextech (Cloudflare challenge on server IP).
+     */
+    getKeyAccessToken?: () => string | null | undefined;
 };
 type LoggingConfig = {
     enabled?: boolean;
@@ -166,6 +180,8 @@ type PlayerConfig = Required<{
     streaming: {
         engine: "hls";
         hls: Required<NonNullable<StreamingConfig["hls"]>>;
+        keyProxyUrlBuilder?: StreamingConfig["keyProxyUrlBuilder"];
+        getKeyAccessToken?: StreamingConfig["getKeyAccessToken"];
     };
     logging: Required<LoggingConfig>;
     debug: Required<DebugConfig>;
@@ -239,7 +255,7 @@ type PlayerEventMap = {
 };
 
 declare const PLAYBACK_RATES: readonly [0.5, 0.75, 1, 1.25, 1.5, 2];
-declare const PACKAGE_VERSION = "0.1.2";
+declare const PACKAGE_VERSION = "0.1.5";
 declare const DEFAULT_PLAYER_BEHAVIOR: Required<PlayerBehaviorConfig>;
 declare const DEFAULT_CONTROLS: Required<ControlsConfig>;
 declare const DEFAULT_THEME: Required<ThemeConfig>;
@@ -270,7 +286,8 @@ type PlayerConfigPartial = Partial<{
     streaming: {
         engine?: "hls";
         hls?: Partial<PlayerConfig["streaming"]["hls"]>;
-        keyProxyUrlBuilder?: unknown;
+        keyProxyUrlBuilder?: PlayerConfig["streaming"]["keyProxyUrlBuilder"];
+        getKeyAccessToken?: PlayerConfig["streaming"]["getKeyAccessToken"];
     };
     logging: Partial<PlayerConfig["logging"]>;
     debug: Partial<PlayerConfig["debug"]>;
@@ -343,7 +360,14 @@ declare class AuthParamsStore {
     constructor(initial?: URLSearchParams | Record<string, string>);
     getSnapshot(): URLSearchParams;
     toRecord(): Record<string, string>;
+    /** True when at least one auth query param is stored. */
+    hasParams(): boolean;
+    toString(): string;
     update(next: URLSearchParams | Record<string, string>): void;
+    /**
+     * Merges current auth params onto a target URL, preserving unrelated query keys.
+     * Critical for child HLS playlists/segments that omit signed query params.
+     */
     applyToUrl(rawUrl: string, baseOrigin?: string): string;
 }
 
@@ -376,6 +400,9 @@ type HlsEngineOptions = {
     startMuted: boolean;
     startPosition?: number;
     volume?: number;
+    videoId?: string;
+    keyProxyUrlBuilder?: StreamingConfig["keyProxyUrlBuilder"];
+    getKeyAccessToken?: StreamingConfig["getKeyAccessToken"];
     hlsConfig: {
         enableWorker: boolean;
         lowLatencyMode: boolean;
@@ -387,6 +414,10 @@ type HlsEngineOptions = {
 };
 /**
  * Dual-path HLS engine: hls.js when supported, otherwise native Safari HLS.
+ *
+ * Signed CDN playback requires auth query params on every HLS request.
+ * Encrypted VOD also requires a same-origin `enc.key` proxy (Bearer + query)
+ * via `streaming.keyProxyUrlBuilder` — browser CORS cannot fetch Video API keys.
  */
 declare class HlsEngine {
     private readonly options;
@@ -400,6 +431,8 @@ declare class HlsEngine {
     constructor(options: HlsEngineOptions);
     start(): Promise<void>;
     private startWithHlsJs;
+    private handleHlsError;
+    private applyStartPositionAndAutoplay;
     private bindMediaEvents;
     updateAuthParams(): void;
     resumeAfterAuthRenew(): void;
@@ -558,7 +591,32 @@ declare class RefreshManager {
     private renew;
 }
 
+type HlsLoader = new (config: object) => {
+    load(context: LoaderContext, config: LoaderConfiguration, callbacks: LoaderCallbacks<LoaderContext>): void;
+    destroy(): void;
+};
+type AuthParamsLoaderOptions = {
+    videoId?: string;
+    keyProxyUrlBuilder?: StreamingConfig["keyProxyUrlBuilder"];
+    getKeyAccessToken?: StreamingConfig["getKeyAccessToken"];
+};
+/**
+ * Rewrites an HLS request URL so signed auth query params are present.
+ * Master playlists are signed on loadSource; child playlists / segments / keys
+ * are relative and would otherwise be fetched unsigned → CDN 403.
+ *
+ * AES `enc.key` handling (pick one):
+ * 1. `keyProxyUrlBuilder` — same-origin BFF (needs Cloudflare-allowlisted server IP)
+ * 2. `getKeyAccessToken` — browser-direct CDN fetch with API Bearer header
+ */
+declare function rewriteHlsRequestUrl(rawUrl: string, store: AuthParamsStore, options?: AuthParamsLoaderOptions, baseOrigin?: string): string;
+/**
+ * hls.js loader that re-applies live AuthParamsStore credentials on every
+ * manifest / level / fragment / key request.
+ */
+declare function createAuthParamsLoader(HlsClass: typeof Hls, store: AuthParamsStore, options?: AuthParamsLoaderOptions): HlsLoader;
+
 declare function redactValue(key: string, value: unknown, seen?: WeakSet<object>, depth?: number): unknown;
 declare function redactObject(obj: Record<string, unknown>, seen?: WeakSet<object>, depth?: number): Record<string, unknown>;
 
-export { type AccessibilityConfig, type AnalyticsConfig, type AuthConfig, AuthManager, AuthParamsStore, type AuthToken, type AuthTokenProviderContext, type BufferedRange, type ControlsConfig, type CreateVideoPlayerOptions, DEFAULT_CONTROLS, DEFAULT_LIVE_EDGE_TOLERANCE_SECONDS, DEFAULT_PLAYER_BEHAVIOR, DEFAULT_PLAYER_CONFIG, DEFAULT_THEME, DEFAULT_WATERMARK, type DebugConfig, EventEmitter, type HlsQualityLevel, type HlsSupportMode, type LiveMediaSnapshot, type LoggingConfig, PACKAGE_VERSION, PLAYBACK_RATES, type PlayIconPreset, type PlaybackCredentialConfig, type PlaybackRate, type PlaybackSource, type PlaybackSourceContext, PlaybackSourceManager, type PlayerBehaviorConfig, type PlayerConfig, type PlayerDiagnostics, type PlayerError, PlayerErrorCode, type PlayerEventMap, type PlayerSkipSeconds, type PlayerState, type PlayerZoomLevel, type QualitySelection, RefreshManager, SECRET_SCAN_MAX_DEPTH, type SeekToLiveResult, type StreamingConfig, type ThemeConfig, type VideoPlayer, type WatermarkConfig, assertNoSecretsInConfig, createPlayerError, createVideoPlayer, getLiveEdgeTime, isAtLiveEdge, isPlainObject, mergePlayerConfig, redactObject, redactSensitive, redactValue, seekToLiveEdge, themeToCssVars };
+export { type AccessibilityConfig, type AnalyticsConfig, type AuthConfig, AuthManager, AuthParamsStore, type AuthToken, type AuthTokenProviderContext, type BufferedRange, type ControlsConfig, type CreateVideoPlayerOptions, DEFAULT_CONTROLS, DEFAULT_LIVE_EDGE_TOLERANCE_SECONDS, DEFAULT_PLAYER_BEHAVIOR, DEFAULT_PLAYER_CONFIG, DEFAULT_THEME, DEFAULT_WATERMARK, type DebugConfig, EventEmitter, type HlsQualityLevel, type HlsSupportMode, type LiveMediaSnapshot, type LoggingConfig, PACKAGE_VERSION, PLAYBACK_RATES, type PlayIconPreset, type PlaybackCredentialConfig, type PlaybackRate, type PlaybackSource, type PlaybackSourceContext, PlaybackSourceManager, type PlayerBehaviorConfig, type PlayerConfig, type PlayerDiagnostics, type PlayerError, PlayerErrorCode, type PlayerEventMap, type PlayerSkipSeconds, type PlayerState, type PlayerZoomLevel, type QualitySelection, RefreshManager, SECRET_SCAN_MAX_DEPTH, type SeekToLiveResult, type StreamingConfig, type ThemeConfig, type VideoPlayer, type WatermarkConfig, assertNoSecretsInConfig, createAuthParamsLoader, createPlayerError, createVideoPlayer, getLiveEdgeTime, isAtLiveEdge, isPlainObject, mergePlayerConfig, redactObject, redactSensitive, redactValue, rewriteHlsRequestUrl, seekToLiveEdge, themeToCssVars };

package/dist/index.js

@@ -146,7 +146,7 @@ var AuthManager = class {
 
 // src/config/defaults.ts
 var PLAYBACK_RATES = [0.5, 0.75, 1, 1.25, 1.5, 2];
-var PACKAGE_VERSION = "0.1.2";
+var PACKAGE_VERSION = "0.1.5";
 var DEFAULT_PLAYER_BEHAVIOR = {
   autoplay: true,
   startMuted: true,
@@ -239,7 +239,8 @@ var SKIP_DEEP_SCAN_KEYS = /* @__PURE__ */ new Set([
   "gettoken",
   "getsource",
   "refreshsource",
-  "keyproxyurlbuilder"
+  "keyproxyurlbuilder",
+  "getkeyaccesstoken"
 ]);
 var SECRET_SCAN_MAX_DEPTH = 32;
 function isPlainObject(value) {
@@ -322,7 +323,9 @@ function mergePlayerConfig(partial) {
       hls: {
         ...DEFAULT_PLAYER_CONFIG.streaming.hls,
         ...partial?.streaming?.hls
-      }
+      },
+      keyProxyUrlBuilder: partial?.streaming?.keyProxyUrlBuilder,
+      getKeyAccessToken: partial?.streaming?.getKeyAccessToken
     },
     logging: { ...DEFAULT_PLAYER_CONFIG.logging, ...partial?.logging },
     debug: { ...DEFAULT_PLAYER_CONFIG.debug, ...partial?.debug },
@@ -498,11 +501,25 @@ var AuthParamsStore = class {
     });
     return out;
   }
+  /** True when at least one auth query param is stored. */
+  hasParams() {
+    return [...this.params.keys()].length > 0;
+  }
+  toString() {
+    return this.params.toString();
+  }
   update(next) {
     this.params = next instanceof URLSearchParams ? new URLSearchParams(next) : new URLSearchParams(next);
   }
+  /**
+   * Merges current auth params onto a target URL, preserving unrelated query keys.
+   * Critical for child HLS playlists/segments that omit signed query params.
+   */
   applyToUrl(rawUrl, baseOrigin) {
-    const target = new URL(rawUrl, baseOrigin ?? (typeof location !== "undefined" ? location.origin : "http://localhost"));
+    const target = new URL(
+      rawUrl,
+      baseOrigin ?? (typeof location !== "undefined" ? location.origin : "http://localhost")
+    );
     this.params.forEach((value, key) => {
       target.searchParams.set(key, value);
     });
@@ -737,7 +754,63 @@ function seekToLiveEdge(media, options) {
   return { moved: true, edge };
 }
 
+// src/streaming/authParamsLoader.ts
+var ENC_KEY_PATH_RE = /enc\.key$/i;
+function isEncryptionKeyUrl(rawUrl, baseOrigin = typeof location !== "undefined" ? location.origin : "http://localhost") {
+  try {
+    return ENC_KEY_PATH_RE.test(new URL(rawUrl, baseOrigin).pathname);
+  } catch {
+    return /enc\.key/i.test(rawUrl);
+  }
+}
+function rewriteHlsRequestUrl(rawUrl, store, options = {}, baseOrigin = typeof location !== "undefined" ? location.origin : "http://localhost") {
+  if (!rawUrl) return rawUrl;
+  const parsed = new URL(rawUrl, baseOrigin);
+  const isKey = ENC_KEY_PATH_RE.test(parsed.pathname);
+  if (isKey && options.keyProxyUrlBuilder && options.videoId) {
+    const snapshot = store.toRecord();
+    return options.keyProxyUrlBuilder({
+      videoId: options.videoId,
+      keyUrl: parsed.toString(),
+      token: snapshot.token,
+      expires: snapshot.expires,
+      username: snapshot.username,
+      mobile: snapshot.mobile
+    });
+  }
+  if (!store.hasParams()) return parsed.toString();
+  return store.applyToUrl(rawUrl, baseOrigin);
+}
+function createAuthParamsLoader(HlsClass, store, options = {}) {
+  const BaseLoader = HlsClass.DefaultConfig.loader;
+  return class AuthParamsLoader extends BaseLoader {
+    load(context, config, callbacks) {
+      if (context.url) {
+        try {
+          const originalUrl = context.url;
+          const isKey = isEncryptionKeyUrl(originalUrl);
+          context.url = rewriteHlsRequestUrl(originalUrl, store, options);
+          if (isKey && !options.keyProxyUrlBuilder && options.getKeyAccessToken) {
+            const accessToken = options.getKeyAccessToken();
+            if (accessToken) {
+              context.headers = {
+                ...context.headers ?? {},
+                Authorization: `Bearer ${accessToken}`
+              };
+            }
+          }
+        } catch {
+        }
+      }
+      super.load(context, config, callbacks);
+    }
+  };
+}
+
 // src/streaming/HlsEngine.ts
+function isAuthHttpStatus(code) {
+  return code === 401 || code === 403;
+}
 var HlsEngine = class {
   constructor(options) {
     this.options = options;
@@ -750,58 +823,58 @@ var HlsEngine = class {
     this.qualitySelection = "auto";
   }
   async start() {
-    const { videoEl, playbackUrl, autoplay, startMuted, volume, startPosition } = this.options;
+    const { videoEl, playbackUrl, startMuted, volume } = this.options;
     videoEl.muted = startMuted;
-    if (typeof volume === "number") videoEl.volume = Math.min(1, Math.max(0, volume));
+    if (typeof volume === "number") {
+      videoEl.volume = Math.min(1, Math.max(0, volume));
+    }
     const Hls = (await import("hls.js")).default;
     if (Hls.isSupported()) {
       this.supportMode = "hls.js";
       this.options.callbacks.onSupportMode?.("hls.js");
       await this.startWithHlsJs(Hls, playbackUrl);
-    } else if (videoEl.canPlayType("application/vnd.apple.mpegurl")) {
+      return;
+    }
+    if (videoEl.canPlayType("application/vnd.apple.mpegurl")) {
       this.supportMode = "native";
       this.options.callbacks.onSupportMode?.("native");
       videoEl.src = this.options.authParams.applyToUrl(playbackUrl);
       this.bindMediaEvents();
       this.options.callbacks.onStateChange?.("ready");
-    } else {
-      this.supportMode = "unsupported";
-      this.options.callbacks.onSupportMode?.("unsupported");
-      this.options.callbacks.onFatalError?.("HLS is not supported in this browser");
+      await this.applyStartPositionAndAutoplay();
       return;
     }
-    if (typeof startPosition === "number" && startPosition > 0) {
-      videoEl.currentTime = startPosition;
-    }
-    if (autoplay) {
-      try {
-        await videoEl.play();
-      } catch {
-        if (!videoEl.muted) {
-          videoEl.muted = true;
-          try {
-            await videoEl.play();
-          } catch {
-            this.options.logger.warn("Autoplay blocked");
-          }
-        }
-      }
-    }
+    this.supportMode = "unsupported";
+    this.options.callbacks.onSupportMode?.("unsupported");
+    this.options.callbacks.onFatalError?.(
+      "HLS is not supported in this browser"
+    );
   }
   async startWithHlsJs(Hls, playbackUrl) {
-    const { videoEl, authParams, hlsConfig, callbacks } = this.options;
+    const {
+      videoEl,
+      authParams,
+      hlsConfig,
+      callbacks,
+      videoId,
+      keyProxyUrlBuilder,
+      getKeyAccessToken
+    } = this.options;
+    const loader = createAuthParamsLoader(Hls, authParams, {
+      videoId,
+      keyProxyUrlBuilder,
+      getKeyAccessToken
+    });
     this.hls = new Hls({
       enableWorker: hlsConfig.enableWorker,
       lowLatencyMode: hlsConfig.lowLatencyMode,
       backBufferLength: hlsConfig.backBufferLength,
-      xhrSetup: (xhr, url) => {
-        void xhr;
-        void url;
-      }
+      loader
     });
     this.hls.attachMedia(videoEl);
     this.hls.loadSource(authParams.applyToUrl(playbackUrl));
     this.hls.on(Hls.Events.MANIFEST_PARSED, (_event, data) => {
+      if (this.destroyed) return;
       this.qualities = (data.levels ?? []).map((level, index) => ({
         index,
         height: level.height ?? 0,
@@ -811,42 +884,95 @@ var HlsEngine = class {
       }));
       callbacks.onQualitiesChange?.(this.qualities);
       callbacks.onStateChange?.("ready");
+      void this.applyStartPositionAndAutoplay();
     });
     this.hls.on(Hls.Events.ERROR, (_event, data) => {
-      if (!data.fatal) {
-        if (data.type === Hls.ErrorTypes.NETWORK_ERROR && (data.details === Hls.ErrorDetails.FRAG_LOAD_ERROR || data.details === Hls.ErrorDetails.LEVEL_LOAD_ERROR || data.details === Hls.ErrorDetails.KEY_LOAD_ERROR)) {
-          callbacks.onAuthRecoveryNeeded?.(
-            data.details === Hls.ErrorDetails.KEY_LOAD_ERROR ? "key_error" : data.details === Hls.ErrorDetails.LEVEL_LOAD_ERROR ? "level_error" : "frag_error"
-          );
+      this.handleHlsError(Hls, data);
+    });
+    this.bindMediaEvents();
+  }
+  handleHlsError(Hls, data) {
+    if (this.destroyed) return;
+    const { callbacks, hlsConfig, keyProxyUrlBuilder, getKeyAccessToken } = this.options;
+    const status = data.response?.code;
+    if (data.details === Hls.ErrorDetails.KEY_LOAD_ERROR && !keyProxyUrlBuilder && !getKeyAccessToken) {
+      callbacks.onFatalError?.(
+        "Encryption key load failed. Configure streaming.getKeyAccessToken (browser Bearer) or streaming.keyProxyUrlBuilder (Cloudflare-allowlisted BFF) for Appextech AES-encrypted HLS."
+      );
+      return;
+    }
+    const authFailure = isAuthHttpStatus(status) || data.details === Hls.ErrorDetails.KEY_LOAD_ERROR && (status === void 0 || status === 0 || isAuthHttpStatus(status));
+    if (!data.fatal) {
+      if (authFailure && data.type === Hls.ErrorTypes.NETWORK_ERROR && (data.details === Hls.ErrorDetails.FRAG_LOAD_ERROR || data.details === Hls.ErrorDetails.LEVEL_LOAD_ERROR || data.details === Hls.ErrorDetails.KEY_LOAD_ERROR)) {
+        callbacks.onAuthRecoveryNeeded?.(
+          data.details === Hls.ErrorDetails.KEY_LOAD_ERROR ? "key_error" : data.details === Hls.ErrorDetails.LEVEL_LOAD_ERROR ? "level_error" : "frag_error"
+        );
+      }
+      return;
+    }
+    if (data.type === Hls.ErrorTypes.NETWORK_ERROR) {
+      this.networkRecoveryCount += 1;
+      if (this.networkRecoveryCount <= hlsConfig.fatalRecoveryLimit) {
+        if (authFailure) {
+          callbacks.onAuthRecoveryNeeded?.("fatal_network");
         }
+        this.hls?.startLoad();
         return;
       }
-      if (data.type === Hls.ErrorTypes.NETWORK_ERROR) {
-        this.networkRecoveryCount += 1;
-        if (this.networkRecoveryCount <= hlsConfig.fatalRecoveryLimit) {
-          callbacks.onAuthRecoveryNeeded?.("fatal_network");
-          this.hls?.startLoad();
-          return;
+    }
+    if (data.type === Hls.ErrorTypes.MEDIA_ERROR) {
+      this.mediaRecoveryCount += 1;
+      if (this.mediaRecoveryCount <= hlsConfig.fatalRecoveryLimit) {
+        this.hls?.recoverMediaError();
+        return;
+      }
+    }
+    callbacks.onFatalError?.(data.details || "Fatal HLS error");
+  }
+  async applyStartPositionAndAutoplay() {
+    if (this.destroyed) return;
+    const { videoEl, autoplay, startPosition } = this.options;
+    if (typeof startPosition === "number" && startPosition > 0) {
+      const seek = () => {
+        if (this.destroyed) return;
+        try {
+          videoEl.currentTime = startPosition;
+        } catch {
         }
+      };
+      if (videoEl.seekable.length > 0) {
+        seek();
+      } else {
+        videoEl.addEventListener("loadedmetadata", seek, { once: true });
       }
-      if (data.type === Hls.ErrorTypes.MEDIA_ERROR) {
-        this.mediaRecoveryCount += 1;
-        if (this.mediaRecoveryCount <= hlsConfig.fatalRecoveryLimit) {
-          this.hls?.recoverMediaError();
-          return;
+    }
+    if (!autoplay) return;
+    try {
+      await videoEl.play();
+    } catch {
+      if (!videoEl.muted) {
+        videoEl.muted = true;
+        try {
+          await videoEl.play();
+        } catch {
+          this.options.logger.warn("Autoplay blocked");
         }
       }
-      callbacks.onFatalError?.(data.details || "Fatal HLS error");
-    });
-    this.bindMediaEvents();
+    }
   }
   bindMediaEvents() {
     const { videoEl, callbacks } = this.options;
-    videoEl.addEventListener("playing", () => callbacks.onStateChange?.("playing"));
+    videoEl.addEventListener(
+      "playing",
+      () => callbacks.onStateChange?.("playing")
+    );
     videoEl.addEventListener("pause", () => {
       if (!videoEl.ended) callbacks.onStateChange?.("paused");
     });
-    videoEl.addEventListener("waiting", () => callbacks.onStateChange?.("buffering"));
+    videoEl.addEventListener(
+      "waiting",
+      () => callbacks.onStateChange?.("buffering")
+    );
     videoEl.addEventListener("ended", () => {
       callbacks.onStateChange?.("ended");
       callbacks.onEnded?.();
@@ -864,6 +990,7 @@ var HlsEngine = class {
     }
   }
   resumeAfterAuthRenew() {
+    this.networkRecoveryCount = 0;
     this.hls?.startLoad();
     this.updateAuthParams();
   }
@@ -1005,6 +1132,9 @@ function createVideoPlayer(options) {
         startMuted: config.player.startMuted,
         startPosition: config.player.startPosition,
         volume: config.player.volume,
+        videoId: options.videoId,
+        keyProxyUrlBuilder: config.streaming.keyProxyUrlBuilder,
+        getKeyAccessToken: config.streaming.getKeyAccessToken,
         hlsConfig: config.streaming.hls,
         logger,
         callbacks: {
@@ -1065,6 +1195,14 @@ function createVideoPlayer(options) {
           onRenewing: () => setState("renewing"),
           onRenewed: (nextExpiresAt) => {
             engine?.resumeAfterAuthRenew();
+            if (!destroyed) {
+              const el2 = videoEl;
+              if (el2 && !el2.paused && !el2.ended) {
+                setState("playing");
+              } else {
+                setState("ready");
+              }
+            }
             events.emit("tokenrefresh", { expiresAt: nextExpiresAt });
             events.emit("sourcechange", { expiresAt: nextExpiresAt });
           },
@@ -1265,7 +1403,9 @@ function createVideoPlayer(options) {
         watermark: { ...config.watermark, ...partial?.watermark },
         streaming: {
           engine: "hls",
-          hls: { ...config.streaming.hls, ...partial?.streaming?.hls }
+          hls: { ...config.streaming.hls, ...partial?.streaming?.hls },
+          keyProxyUrlBuilder: partial?.streaming?.keyProxyUrlBuilder ?? config.streaming.keyProxyUrlBuilder,
+          getKeyAccessToken: partial?.streaming?.getKeyAccessToken ?? config.streaming.getKeyAccessToken
         },
         logging: { ...config.logging, ...partial?.logging },
         debug: { ...config.debug, ...partial?.debug },
@@ -1303,6 +1443,7 @@ export {
   RefreshManager,
   SECRET_SCAN_MAX_DEPTH,
   assertNoSecretsInConfig,
+  createAuthParamsLoader,
   createPlayerError,
   createVideoPlayer,
   getLiveEdgeTime,
@@ -1312,6 +1453,7 @@ export {
   redactObject,
   redactSensitive,
   redactValue,
+  rewriteHlsRequestUrl,
   seekToLiveEdge,
   themeToCssVars
 };