@camstack/server 1.2.581 → 1.2.583

package/dist/api/trpc/localized-schema-paths.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LOCALIZED_SCHEMA_PATHS = void 0;
+/**
+ * The tRPC methods whose answer carries a settings schema (`ConfigUISchema`
+ * or `ConfigUISchemaWithValues`) - the ONLY places the hub swaps a `labelKey`
+ * for the catalog text (D863). Walking every answer would charge every call
+ * for a feature one in a hundred uses; an explicit list keeps the cost where
+ * the schemas are.
+ *
+ * A new cap method that returns a schema is added HERE (and nowhere else): a
+ * schema served from a path not listed simply stays English.
+ */
+exports.LOCALIZED_SCHEMA_PATHS = new Set([
+    'addonSettings.getGlobalSettings',
+    'addonSettings.getIntegrationSettings',
+    'addonSettings.getDeviceSettings',
+    'deviceManager.getDeviceSettingsAggregate',
+    'deviceManager.getDeviceLiveInfoAggregate',
+    'deviceManager.getSettingsSchema',
+    'deviceManager.getConfigSchema',
+    'deviceManager.getCreationSchema',
+    'deviceManager.providerDiscoveryParamsSchema',
+    'storage.listProviders',
+    'notificationOutput.listTargetKinds',
+]);

package/dist/api/trpc/trpc.context.js

@@ -7,6 +7,7 @@ const system_1 = require("@camstack/system");
 const types_1 = require("@camstack/types");
 const auth_network_policy_js_1 = require("../../auth/auth-network-policy.js");
 const share_token_service_js_1 = require("../../core/auth/share-token.service.js");
+const request_lang_js_1 = require("../../i18n/request-lang.js");
 const trpc_error_principal_js_1 = require("./trpc-error-principal.js");
 /**
  * Live-scope refresh memo (see the JWT branch of `resolveUser`).
@@ -346,6 +347,7 @@ async function createTrpcContext(req, authService, addonRegistry, shareTokens =
     return {
         user: await resolveUser(token, authService, addonRegistry, shareTokens, logger, requestFacts(req)),
         req,
+        lang: (0, request_lang_js_1.resolveRequestLang)((0, request_lang_js_1.requestLangInputFrom)(req.headers, readQuery(req))),
         deviceScopeLookup: makeDeviceScopeLookup(addonRegistry),
         deviceFleet: () => addonRegistry.getPersistedDeviceList(),
     };
@@ -364,6 +366,7 @@ async function createWsTrpcContext(opts, authService, addonRegistry, shareTokens
     return {
         user,
         req: opts.req,
+        lang: (0, request_lang_js_1.resolveRequestLang)((0, request_lang_js_1.requestLangInputFrom)(opts.req.headers, readQuery(opts.req), opts.info.connectionParams?.['lang'])),
         ...(user === null && token !== null && token !== '' ? { credentialRejected: true } : {}),
         ...(user !== null && sessionId !== undefined
             ? {

package/dist/api/trpc/trpc.middleware.js

@@ -7,13 +7,16 @@ exports.adminProcedure = exports.protectedProcedure = exports.createCallerFactor
 exports.iterableSubscription = iterableSubscription;
 exports.iterableInterval = iterableInterval;
 const system_1 = require("@camstack/system");
+const types_1 = require("@camstack/types");
 const server_1 = require("@trpc/server");
 const superjson_1 = __importDefault(require("superjson"));
 const cap_route_error_formatter_js_1 = require("./cap-route-error-formatter.js");
 const device_config_secret_redaction_js_1 = require("./device-config-secret-redaction.js");
 const principal_visibility_js_1 = require("./principal-visibility.js");
+const localized_schema_paths_js_1 = require("./localized-schema-paths.js");
 const scope_access_js_1 = require("./scope-access.js");
 const share_view_access_js_1 = require("./share-view-access.js");
+const user_error_js_1 = require("./user-error.js");
 const t = server_1.initTRPC.context().create({
     transformer: superjson_1.default,
     errorFormatter: cap_route_error_formatter_js_1.formatTrpcError,
@@ -63,6 +66,21 @@ async function* iterableInterval(intervalMs, getValue) {
         // cleanup handled by generator return
     }
 }
+/**
+ * Outermost middleware (D863): on the methods that serialise a settings schema
+ * for the UI, substitute `labelKey` / `descriptionKey` / `titleKey` with the
+ * catalog text in the request language. English (and an unknown key) leave the
+ * English text the field carries untouched.
+ */
+const localizeSchemaOutput = t.middleware(async ({ ctx, path, next }) => {
+    const out = await next();
+    const lang = ctx.lang ?? types_1.DEFAULT_CATALOG_LANG;
+    if (!out.ok || lang === types_1.DEFAULT_CATALOG_LANG || !localized_schema_paths_js_1.LOCALIZED_SCHEMA_PATHS.has(path))
+        return out;
+    return { ...out, data: (0, types_1.localizeConfigTree)(out.data, (0, system_1.getCatalogRegistry)().lookupFor(lang)) };
+});
+/** Every authenticated procedure starts from here, so the localizing middleware is the outermost. */
+const localized = t.procedure.use(localizeSchemaOutput);
 exports.trpcRouter = t.router;
 exports.publicProcedure = t.procedure;
 /**
@@ -92,7 +110,7 @@ exports.createCallerFactory = t.createCallerFactory;
  * Single source of authority for caps: `isAdmin`. The legacy role enum
  * collapsed onto this boolean in v2.
  */
-exports.protectedProcedure = t.procedure.use(async ({ ctx, next, path, getRawInput }) => {
+exports.protectedProcedure = localized.use(async ({ ctx, next, path, getRawInput }) => {
     if (!ctx.user) {
         throw new server_1.TRPCError({ code: 'UNAUTHORIZED' });
     }
@@ -100,7 +118,7 @@ exports.protectedProcedure = t.procedure.use(async ({ ctx, next, path, getRawInp
     // re-checked on every call, so a logout or revocation ends a socket that is
     // already open — not only the next one.
     if (ctx.sessionLive !== undefined && !ctx.sessionLive()) {
-        throw new server_1.TRPCError({ code: 'UNAUTHORIZED', message: 'Session ended — sign in again' });
+        throw (0, user_error_js_1.trpcUserError)('UNAUTHORIZED', 'auth.session-ended', undefined, 'Session ended — sign in again');
     }
     // Share-view principals (`csv_*` tokens) NEVER reach the admin bypass,
     // the hand-written-route pass-through, or the scope matcher below —
@@ -201,7 +219,7 @@ exports.protectedProcedure = t.procedure.use(async ({ ctx, next, path, getRawInp
  */
 exports.adminProcedure = exports.protectedProcedure.use(({ ctx, next }) => {
     if (!ctx.user.isAdmin) {
-        throw new server_1.TRPCError({ code: 'FORBIDDEN', message: 'Admin required' });
+        throw (0, user_error_js_1.trpcUserError)('FORBIDDEN', 'auth.admin-required', undefined, 'Admin required');
     }
     return next({ ctx });
 });

package/dist/api/trpc/user-error.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.trpcUserError = trpcUserError;
+const server_1 = require("@trpc/server");
+const types_1 = require("@camstack/types");
+/**
+ * A `TRPCError` that carries a stable i18n code (D863). `message` stays the
+ * English text; the error formatter swaps it for the `server` catalog text in
+ * the request language and keeps `{ code, params }` in `data.i18n`.
+ */
+function trpcUserError(trpcCode, i18nCode, params, englishFallback) {
+    return new server_1.TRPCError({
+        code: trpcCode,
+        message: englishFallback,
+        cause: (0, types_1.userError)(i18nCode, params, englishFallback),
+    });
+}

package/dist/auth/app-confirmations.js

@@ -34,6 +34,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AppConfirmations = exports.APP_CONFIRM_COOKIE = exports.APP_CONFIRM_TTL_MS = void 0;
+const types_1 = require("@camstack/types");
 /**
  * Pending "Sign in the CamStack app as <user>?" confirmations (D858).
  *
@@ -73,7 +74,7 @@ class AppConfirmations {
     create(confirmation) {
         this.prune();
         if (this.pending.size >= MAX_PENDING)
-            throw new Error('Too many pending app confirmations');
+            throw (0, types_1.userError)('server.app-confirmations-busy', undefined, 'Too many pending app confirmations');
         const token = crypto.randomBytes(32).toString('base64url');
         const cookie = crypto.randomBytes(32).toString('base64url');
         this.pending.set(sha256(token), {

package/dist/auth/device-enroll-proofs.js

@@ -34,6 +34,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DeviceEnrollProofs = exports.DEVICE_ENROLL_PROOF_TTL_MS = void 0;
+const types_1 = require("@camstack/types");
 /**
  * Step-up proofs for `auth.enrollSelf` (D855).
  *
@@ -74,7 +75,7 @@ class DeviceEnrollProofs {
     mint(userId) {
         this.prune();
         if (this.pending.size >= MAX_PENDING)
-            throw new Error('Too many pending step-up proofs');
+            throw (0, types_1.userError)('server.step-up-busy', undefined, 'Too many pending step-up proofs');
         const proof = `cdp_${crypto.randomBytes(32).toString('base64url')}`;
         const expiresAt = this.now() + exports.DEVICE_ENROLL_PROOF_TTL_MS;
         this.pending.set(hash(proof), { userId, expiresAt });

package/dist/auth/sso-finish-deps.js

@@ -4,13 +4,14 @@ exports.sessionUserIdFromCookie = sessionUserIdFromCookie;
 exports.readCookie = readCookie;
 exports.ssoBrowserBinding = ssoBrowserBinding;
 exports.createSsoFinishDeps = createSsoFinishDeps;
+const types_1 = require("@camstack/types");
 /**
  * The live wiring of `finishSsoLogin`'s deps (D777, D782) — kept out of
  * `main.ts` so the route there stays a three-line mapping.
  */
 const node_crypto_1 = require("node:crypto");
 const system_1 = require("@camstack/system");
-const types_1 = require("@camstack/types");
+const types_2 = require("@camstack/types");
 const auth_provider_gate_js_1 = require("./auth-provider-gate.js");
 const passkey_provider_js_1 = require("./passkey-provider.js");
 const second_factors_js_1 = require("./second-factors.js");
@@ -54,7 +55,7 @@ function readCookie(header, name) {
 }
 /** SHA-256 (hex) of the request's SSO state cookie, or `null` without one. */
 function ssoBrowserBinding(cookieHeader) {
-    const value = readCookie(cookieHeader, types_1.SSO_STATE_COOKIE);
+    const value = readCookie(cookieHeader, types_2.SSO_STATE_COOKIE);
     return value === null ? null : (0, node_crypto_1.createHash)('sha256').update(value).digest('hex');
 }
 function createSsoFinishDeps(wiring, cookieHeader) {
@@ -62,7 +63,7 @@ function createSsoFinishDeps(wiring, cookieHeader) {
     const userManagement = () => {
         const um = registry.getSingleton('user-management');
         if (!um)
-            throw new Error('Login unavailable — `user-management` capability not registered');
+            throw (0, types_1.userError)('server.login-unavailable', undefined, 'Login unavailable — `user-management` capability not registered');
         return um;
     };
     return {

package/dist/core/addon/addon-package.service.js

@@ -37,6 +37,7 @@ exports.AddonPackageService = exports.FRAMEWORK_PACKAGES = exports.AUTO_UPDATE_E
 exports.isVersionNewer = isVersionNewer;
 exports.isFrameworkPackage = isFrameworkPackage;
 exports.extractTgzStripped = extractTgzStripped;
+const types_1 = require("@camstack/types");
 const node_child_process_1 = require("node:child_process");
 const node_crypto_1 = require("node:crypto");
 const fs = __importStar(require("node:fs"));
@@ -44,7 +45,7 @@ const os = __importStar(require("node:os"));
 const path = __importStar(require("node:path"));
 const node_util_1 = require("node:util");
 const system_1 = require("@camstack/system");
-const types_1 = require("@camstack/types");
+const types_2 = require("@camstack/types");
 const update_availability_emitter_js_1 = require("../update-availability-emitter.js");
 const update_check_scheduler_js_1 = require("../updates/update-check-scheduler.js");
 const restart_marker_js_1 = require("../updates/restart-marker.js");
@@ -257,7 +258,7 @@ class AddonPackageService {
             (0, system_1.ensureDir)(addonsDir);
         }
         catch (error) {
-            const msg = (0, types_1.errMsg)(error);
+            const msg = (0, types_2.errMsg)(error);
             this.logger.warn('Installer init failed', { meta: { error: msg } });
         }
         // Load auto-update config from disk
@@ -301,7 +302,7 @@ class AddonPackageService {
         }
         catch (err) {
             this.logger.debug('Non-fatal: failed to write .install-source marker', {
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: (0, types_2.errMsg)(err) },
             });
         }
         this.installer.manifest.upsert(result.name, {
@@ -326,7 +327,7 @@ class AddonPackageService {
     async rollbackPackage(name) {
         this.requireInstaller();
         if (!this.isAllowedPackage(name)) {
-            throw new Error(`Package "${name}" is not an allowed @camstack/* package`);
+            throw (0, types_1.userError)('server.package-not-allowed', { name: String(name) }, `Package "${name}" is not an allowed @camstack/* package`);
         }
         if (exports.AUTO_UPDATE_EXCLUDED_PACKAGES.has(name)) {
             throw new Error(`"${name}" is a framework package — roll it back via serverManagement, not the addon-package path`);
@@ -357,7 +358,7 @@ class AddonPackageService {
         }
         catch (reloadError) {
             this.logger.warn('Restart failed after rollback', {
-                meta: { name, error: (0, types_1.errMsg)(reloadError) },
+                meta: { name, error: (0, types_2.errMsg)(reloadError) },
             });
         }
         // Clear update cache so the UI reflects the new state.
@@ -368,7 +369,7 @@ class AddonPackageService {
     async uninstall(name) {
         this.requireInstaller();
         if (this.isProtected(name)) {
-            throw new Error(`Cannot uninstall protected package "${name}"`);
+            throw (0, types_1.userError)('server.package-protected', { name: String(name) }, `Cannot uninstall protected package "${name}"`);
         }
         await this.installer.uninstall(name);
         this.logger.info('Uninstalled', { meta: { name } });
@@ -395,7 +396,7 @@ class AddonPackageService {
             });
         }
         catch (err) {
-            const msg = (0, types_1.errMsg)(err);
+            const msg = (0, types_2.errMsg)(err);
             this.logger.error('npm install failed', { meta: { packageName, error: msg } });
             this.toastService.broadcast({
                 title: 'Install Failed',
@@ -408,7 +409,7 @@ class AddonPackageService {
             await this.reloadPackages();
         }
         catch (err) {
-            const msg = (0, types_1.errMsg)(err);
+            const msg = (0, types_2.errMsg)(err);
             this.logger.error('reloadPackages failed', { meta: { error: msg } });
         }
         let loaded = [];
@@ -419,7 +420,7 @@ class AddonPackageService {
             failed = result.failed;
         }
         catch (err) {
-            const msg = (0, types_1.errMsg)(err);
+            const msg = (0, types_2.errMsg)(err);
             this.logger.error('loadNewAddons failed', { meta: { error: msg } });
             failed.push(packageName);
         }
@@ -446,7 +447,7 @@ class AddonPackageService {
             });
         }
         catch (err) {
-            const msg = (0, types_1.errMsg)(err);
+            const msg = (0, types_2.errMsg)(err);
             this.logger.error('Workspace install failed', { meta: { error: msg } });
             this.toastService.broadcast({ title: 'Install Failed', message: msg, severity: 'warning' });
             throw new Error(`Workspace install failed: ${msg}`, { cause: err });
@@ -456,7 +457,7 @@ class AddonPackageService {
         }
         catch (err) {
             this.logger.warn('Non-fatal: failed to reload packages after workspace install', {
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: (0, types_2.errMsg)(err) },
             });
         }
         let loaded = [];
@@ -467,7 +468,7 @@ class AddonPackageService {
             failed = result.failed;
         }
         catch (err) {
-            this.logger.warn('Failed to load new addons after install', { meta: { error: (0, types_1.errMsg)(err) } });
+            this.logger.warn('Failed to load new addons after install', { meta: { error: (0, types_2.errMsg)(err) } });
             failed.push(packageName);
         }
         this.toastService.broadcast({
@@ -487,7 +488,7 @@ class AddonPackageService {
      */
     async uninstallAndReload(packageName) {
         if (this.isProtected(packageName)) {
-            throw new Error(`Package ${packageName} is required and cannot be uninstalled`);
+            throw (0, types_1.userError)('server.package-required', { packageName: String(packageName) }, `Package ${packageName} is required and cannot be uninstalled`);
         }
         try {
             this.addonRegistry.emitUninstallEvent(packageName);
@@ -496,19 +497,19 @@ class AddonPackageService {
             this.logger.info('Uninstall complete', { meta: { packageName } });
         }
         catch (err) {
-            const msg = (0, types_1.errMsg)(err);
+            const msg = (0, types_2.errMsg)(err);
             this.logger.error('Uninstall failed', { meta: { packageName, error: msg } });
             this.toastService.broadcast({ title: 'Uninstall Failed', message: msg, severity: 'warning' });
             throw new Error(`Uninstall failed: ${msg}`, { cause: err });
         }
         await this.reloadPackages().catch((err) => {
             this.logger.warn('Non-fatal: failed to reload packages after uninstall', {
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: (0, types_2.errMsg)(err) },
             });
         });
         await this.addonRegistry.loadNewAddons().catch((err) => {
             this.logger.warn('Non-fatal: failed to load new addons after uninstall', {
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: (0, types_2.errMsg)(err) },
             });
         });
         this.toastService.broadcast({
@@ -558,7 +559,7 @@ class AddonPackageService {
             }
         }
         catch (err) {
-            this.logger.warn('Failed to read workspace directory', { meta: { error: (0, types_1.errMsg)(err) } });
+            this.logger.warn('Failed to read workspace directory', { meta: { error: (0, types_2.errMsg)(err) } });
         }
         return results;
     }
@@ -945,7 +946,7 @@ class AddonPackageService {
             return result;
         }
         catch (error) {
-            const msg = (0, types_1.errMsg)(error);
+            const msg = (0, types_2.errMsg)(error);
             this.logger.warn('Failed to fetch versions', { meta: { name, error: msg } });
             return cached?.versions ?? [];
         }
@@ -984,7 +985,7 @@ class AddonPackageService {
         }
         catch (err) {
             this.logger.warn('Post-update confirmation failed — backup retained for rollback', {
-                meta: { name, backupDir, error: (0, types_1.errMsg)(err) },
+                meta: { name, backupDir, error: (0, types_2.errMsg)(err) },
             });
         }
     }
@@ -1079,7 +1080,7 @@ class AddonPackageService {
             return { success: true, version: updatedVersion, requiresRestart: true };
         }
         catch (error) {
-            const msg = (0, types_1.errMsg)(error);
+            const msg = (0, types_2.errMsg)(error);
             this.logger.error('Failed to update package', { meta: { name, error: msg } });
             return { success: false, version: '', requiresRestart: false, error: msg };
         }
@@ -1137,7 +1138,7 @@ class AddonPackageService {
             return { success: true, version: updatedVersion, requiresRestart: false };
         }
         catch (error) {
-            const msg = (0, types_1.errMsg)(error);
+            const msg = (0, types_2.errMsg)(error);
             this.logger.error('Failed to apply staged addon update', { meta: { name, error: msg } });
             return { success: false, version: '', requiresRestart: false, error: msg };
         }
@@ -1221,14 +1222,14 @@ class AddonPackageService {
         catch (err) {
             // Marker write failure shouldn't block the restart — log + continue.
             this.logger.warn('Failed to write restart marker; restart will proceed without completion toast', {
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: (0, types_2.errMsg)(err) },
             });
         }
         this.eventBusService.emit({
             id: (0, node_crypto_1.randomUUID)(),
             timestamp: new Date(),
             source: { type: 'core', id: 'addon-package-service' },
-            category: types_1.EventCategory.SystemRestarting,
+            category: types_2.EventCategory.SystemRestarting,
             // The node, as `system.restart-completed` names it after the boot
             // (`post-boot.service.ts`): the announcement and the landing of one
             // restart must name the same node, or a stale `node-updating` could not
@@ -1284,7 +1285,7 @@ class AddonPackageService {
             catch (err) {
                 lookupFailed = true;
                 this.logger.debug('listFrameworkPackages: npm view failed', {
-                    meta: { packageName, error: (0, types_1.errMsg)(err) },
+                    meta: { packageName, error: (0, types_2.errMsg)(err) },
                 });
             }
             // STRICTLY newer, never merely different. The hub runs
@@ -1363,7 +1364,7 @@ class AddonPackageService {
             this.logger.info('Reloaded', { meta: { count: this.loader.listAddons().length } });
         }
         catch (error) {
-            const msg = (0, types_1.errMsg)(error);
+            const msg = (0, types_2.errMsg)(error);
             this.logger.warn('reloadPackages failed', { meta: { error: msg } });
         }
     }
@@ -1451,7 +1452,7 @@ class AddonPackageService {
         });
         this.autoUpdateTimer = setInterval(() => {
             this.runAutoUpdate().catch((err) => {
-                this.logger.error('Auto-update check failed', { meta: { error: (0, types_1.errMsg)(err) } });
+                this.logger.error('Auto-update check failed', { meta: { error: (0, types_2.errMsg)(err) } });
             });
         }, intervalMs);
     }
@@ -1529,7 +1530,7 @@ class AddonPackageService {
             }
             catch (err) {
                 this.logger.warn('Auto-update check failed', {
-                    meta: { name: pkg.name, error: (0, types_1.errMsg)(err) },
+                    meta: { name: pkg.name, error: (0, types_2.errMsg)(err) },
                 });
             }
         }
@@ -1554,7 +1555,7 @@ class AddonPackageService {
             });
         }
         catch (err) {
-            this.logger.error('Auto-update job failed to start', { meta: { error: (0, types_1.errMsg)(err) } });
+            this.logger.error('Auto-update job failed to start', { meta: { error: (0, types_2.errMsg)(err) } });
         }
     }
     // =========================================================================
@@ -1590,7 +1591,7 @@ class AddonPackageService {
         }
         catch (err) {
             this.logger.debug('Corrupt auto-update config, falling back to defaults', {
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: (0, types_2.errMsg)(err) },
             });
         }
         return {
@@ -1613,7 +1614,7 @@ class AddonPackageService {
             fs.writeFileSync(configPath, JSON.stringify(this.autoUpdateConfig, null, 2));
         }
         catch (err) {
-            this.logger.warn('Failed to save auto-update config', { meta: { error: (0, types_1.errMsg)(err) } });
+            this.logger.warn('Failed to save auto-update config', { meta: { error: (0, types_2.errMsg)(err) } });
         }
     }
     /** Resolve the top-level data directory */
@@ -1708,7 +1709,7 @@ class AddonPackageService {
                 // The package could not be evaluated at all (unreadable manifest, …).
                 // Counted as a failure for the same reason a registry miss is.
                 failures += 1;
-                const msg = (0, types_1.errMsg)(error);
+                const msg = (0, types_2.errMsg)(error);
                 this.logger.warn('Failed to check updates for addon', {
                     meta: { pkgJsonPath, error: msg },
                 });
@@ -1761,7 +1762,7 @@ class AddonPackageService {
             return { ok: true, latestVersion: version || null };
         }
         catch (error) {
-            return { ok: false, error: (0, types_1.errMsg)(error) };
+            return { ok: false, error: (0, types_2.errMsg)(error) };
         }
     }
     /**
@@ -1834,7 +1835,7 @@ class AddonPackageService {
             return results;
         }
         catch (err) {
-            this.logger.warn('npm search failed', { meta: { error: (0, types_1.errMsg)(err) } });
+            this.logger.warn('npm search failed', { meta: { error: (0, types_2.errMsg)(err) } });
             // Stale cache is better than nothing on transient network failure
             return this.searchCache?.results ?? [];
         }
@@ -1870,7 +1871,7 @@ class AddonPackageService {
         }
         catch (err) {
             this.logger.debug('Installed-version lookup failed', {
-                meta: { packageName, error: (0, types_1.errMsg)(err) },
+                meta: { packageName, error: (0, types_2.errMsg)(err) },
             });
         }
         this.logger.debug('No readable installed copy — previous version is unknown', {
@@ -1953,7 +1954,7 @@ class AddonPackageService {
             timestamp: Date.now(),
         })
             .catch((err) => {
-            const msg = (0, types_1.errMsg)(err);
+            const msg = (0, types_2.errMsg)(err);
             this.logger.debug('Update notification failed', { meta: { error: msg } });
         });
         this.toastService.broadcast({

package/dist/core/addon/addon-registry.service.js

@@ -645,6 +645,7 @@ class AddonRegistryService {
                         : path.join(addonsDir, registered.packageName),
                     declaration: registered.declaration,
                 });
+                this.loadAddonCatalogs(registered.packageName, this.addonEntries.get(registered.declaration.id)?.addonDir);
             }
             catch (err) {
                 const msg = (0, types_1.errMsg)(err);
@@ -1362,6 +1363,20 @@ class AddonRegistryService {
     // during their own initialize(). The backend no longer loops addons
     // looking for `getModelRequirements` / `configure` — those hooks were
     // removed from the ICamstackAddon contract.
+    /**
+     * Loads a package's optional `i18n/<lang>.json` catalogs (D863). The
+     * namespace is the package's short name (`@camstack/addon-provider-reolink`
+     * -> `provider-reolink`): one package may host several addons, and the
+     * catalog lives with the package. A broken file is logged and ignored.
+     */
+    loadAddonCatalogs(packageName, addonDir) {
+        if (addonDir === undefined)
+            return;
+        const ns = (0, system_1.catalogNamespaceOf)(packageName);
+        const catalogs = (0, system_1.getCatalogRegistry)((message) => this.logger.warn(message, { meta: { ns } }));
+        catalogs.clear(ns);
+        catalogs.loadAddonDir(ns, addonDir);
+    }
     registerAddon(addon, source = 'installed', packageName, packageVersion) {
         const manifest = addon.manifest;
         if (!manifest) {
@@ -2323,6 +2338,7 @@ class AddonRegistryService {
                     addonDir: path.join(addonsDir, registered.packageName),
                     declaration: registered.declaration,
                 });
+                this.loadAddonCatalogs(registered.packageName, path.join(addonsDir, registered.packageName));
                 // Initialize the new addon
                 await this.initializeAddon(registered.declaration.id);
                 this.wireCapabilities(registered.declaration.id);
@@ -3059,6 +3075,10 @@ class AddonRegistryService {
                 return provider().delete(stated);
             },
             getState: () => provider().getState({}),
+            deleteDeviceScope: (input) => {
+                const stated = { deviceId: input.deviceId, callerAddonId };
+                return provider().deleteDeviceScope(stated);
+            },
         };
     }
     /**

package/dist/core/auth/handoff-code.service.js

@@ -35,6 +35,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HandoffCodeService = exports.HANDOFF_CODE_MAX_PENDING = exports.HANDOFF_CODE_TTL_MS = exports.HANDOFF_CODE_PREFIX = void 0;
 exports.pkceChallenge = pkceChallenge;
+const types_1 = require("@camstack/types");
 /**
  * HandoffCodeService — one-time login handoff codes for the native-app
  * auth handoff (viewer "Sign in with CamStack").
@@ -87,7 +88,7 @@ class HandoffCodeService {
     create(userId, options = {}) {
         this.prune();
         if (this.pending.size >= exports.HANDOFF_CODE_MAX_PENDING) {
-            throw new Error('Too many pending handoff codes — try again shortly');
+            throw (0, types_1.userError)('server.handoff-busy', undefined, 'Too many pending handoff codes — try again shortly');
         }
         const code = `${exports.HANDOFF_CODE_PREFIX}${crypto.randomBytes(32).toString('hex')}`;
         const expiresAt = this.now() + this.ttlMs;

package/dist/core/auth/share-token.service.js

@@ -58,9 +58,9 @@ exports.ShareTokenService = exports.ShareTokenRecordSchema = exports.ShareTokenS
  * live in, reached directly instead of over the settings-store cap since
  * this service is hub-resident). Collection: `share_view_tokens`.
  */
-const types_1 = require("@camstack/types");
 const crypto = __importStar(require("node:crypto"));
 const zod_1 = require("zod");
+const types_1 = require("@camstack/types");
 /**
  * @durable class=config owner=core-auth
  *   write="a user mints a share link; and a best-effort lastUsedAt touch on every successful validation"
@@ -281,21 +281,21 @@ class ShareTokenService {
         });
         const first = results[0];
         if (!first) {
-            throw new Error(`Share token not found: ${input.id}`);
+            throw (0, types_1.userError)('auth.share-token-not-found', { id: input.id }, `Share token not found: ${input.id}`);
         }
         const record = parseShareToken(first.data);
         if (!record) {
-            throw new Error(`Share token not found: ${input.id}`);
+            throw (0, types_1.userError)('auth.share-token-not-found', { id: input.id }, `Share token not found: ${input.id}`);
         }
         if (!input.callerIsAdmin && record.userId !== input.callerUserId) {
-            throw new Error('Only the token owner or an admin can extend a share token');
+            throw (0, types_1.userError)('auth.share-owner-only-extend', undefined, 'Only the token owner or an admin can extend a share token');
         }
         if (record.expiresAt === null) {
-            throw new Error('A never-expiring share token cannot be extended');
+            throw (0, types_1.userError)('auth.share-never-expiring-extend', undefined, 'A never-expiring share token cannot be extended');
         }
         const now = Date.now();
         if (now > record.expiresAt) {
-            throw new Error(`Share token expired: ${input.id}`);
+            throw (0, types_1.userError)('server.share-token-expired', { id: String(input.id) }, `Share token expired: ${input.id}`);
         }
         const updated = {
             ...record,
@@ -335,7 +335,7 @@ class ShareTokenService {
             return true;
         }
         if (!input.callerIsAdmin && record.userId !== input.callerUserId) {
-            throw new Error('Only the token owner or an admin can revoke a share token');
+            throw (0, types_1.userError)('auth.share-owner-only-revoke', undefined, 'Only the token owner or an admin can revoke a share token');
         }
         await (await this.store()).delete({ collection: SHARE_TOKENS_COLLECTION, key: input.id });
         this.logger?.info('Share token revoked', {

package/dist/i18n/request-lang.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveRequestLang = resolveRequestLang;
+exports.requestLangInputFrom = requestLangInputFrom;
+const types_1 = require("@camstack/types");
+const app_page_strings_js_1 = require("../auth/app-page-strings.js");
+function parseLang(value) {
+    const parsed = types_1.CatalogLangSchema.safeParse(typeof value === 'string' ? value.toLowerCase() : value);
+    return parsed.success ? parsed.data : undefined;
+}
+function resolveRequestLang(input) {
+    return (parseLang(input.profileLanguage) ??
+        parseLang(input.explicitLang) ??
+        (0, app_page_strings_js_1.langFromAcceptLanguage)(input.acceptLanguage) ??
+        types_1.DEFAULT_CATALOG_LANG);
+}
+function firstHeader(value) {
+    return Array.isArray(value) ? value[0] : value;
+}
+/** Reads the request-borne inputs; `query` is the parsed query object when there is one. */
+function requestLangInputFrom(headers, query, connectionLang) {
+    const acceptLanguage = headers['accept-language'];
+    return {
+        explicitLang: firstHeader(headers['x-camstack-lang']) ?? query?.['lang'] ?? connectionLang,
+        ...(acceptLanguage !== undefined ? { acceptLanguage } : {}),
+    };
+}