camstack 1.2.160 → 1.2.161

package/dist/cli.js

@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-HOXPTYJH.js");
+  await import("./launcher-UIR2WFGG.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-HOXPTYJH.js");
+  await import("./launcher-UIR2WFGG.js");
 }
 
 // src/commands/setup.ts

package/dist/{launcher-HOXPTYJH.js → launcher-UIR2WFGG.js}

@@ -425770,7 +425770,23 @@ var require_share_token_service = __commonJS({
     exports.SHARE_TOKEN_MAX_DEVICES = 64;
     exports.ShareTokenScopeSchema = zod_1.z.object({
       kind: zod_1.z.enum(types_1.SHARE_VIEW_KINDS),
-      deviceIds: zod_1.z.array(zod_1.z.number().int().nonnegative()).min(1).max(exports.SHARE_TOKEN_MAX_DEVICES)
+      deviceIds: zod_1.z.array(zod_1.z.number().int().nonnegative()).min(1).max(exports.SHARE_TOKEN_MAX_DEVICES),
+      /**
+       * TALK-BACK, opt-in at mint time. Absent means OFF, and that is the whole
+       * point: a share link is handed to third parties, so the difference between
+       * "can watch the kitchen" and "can speak into the kitchen" must be a choice
+       * somebody made for THAT link, on the day they made it.
+       *
+       * It rides on the scope rather than widening the grid enumeration because
+       * the enumeration is retroactive: a method added there is granted to every
+       * token ever minted, including the one handed to a neighbour last week.
+       * `share-view-access.ts` says so about event history; the same rule with
+       * actuation into the home on the other end of it is not a smaller matter.
+       *
+       * It widens WHAT may be called, never WHICH cameras — `deviceIds` still
+       * gates every talk call.
+       */
+      talk: zod_1.z.boolean().optional()
     });
     exports.ShareTokenRecordSchema = zod_1.z.object({
       id: zod_1.z.string(),
@@ -427374,6 +427390,11 @@ var require_share_view_access = __commonJS({
       "turnProvider.getTurnServers",
       "live.onEvent"
     ]);
+    var GRID_VIEW_TALK_METHODS = /* @__PURE__ */ new Set([
+      "intercom.startSession",
+      "intercom.handleAnswer",
+      "intercom.stopSession"
+    ]);
     var GRID_VIEW_DEVICE_METHODS = /* @__PURE__ */ new Set([
       "snapshot.getSnapshot",
       "pipelineOrchestrator.getCameraMetrics",
@@ -427448,7 +427469,12 @@ var require_share_view_access = __commonJS({
       if (GRID_VIEW_OPEN_METHODS.has(path)) {
         return { ok: true };
       }
-      if (GRID_VIEW_DEVICE_METHODS.has(path)) {
+      if (GRID_VIEW_TALK_METHODS.has(path)) {
+        if (scope.talk !== true) {
+          return { ok: false, reason: `'${path}' needs a share link minted with talk-back` };
+        }
+      }
+      if (GRID_VIEW_TALK_METHODS.has(path) || GRID_VIEW_DEVICE_METHODS.has(path)) {
         const deviceId = extractDeviceId(input);
         if (deviceId === null) {
           return { ok: false, reason: `'${path}' requires a numeric deviceId for share-view access` };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.160",
+  "version": "1.2.161",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",