camstack 1.2.160 → 1.2.162

package/dist/{chunk-VJIT6AOW.js → chunk-QT7LGBTP.js}

@@ -19746,7 +19746,23 @@ var PickStreamRequirementsSchema = external_exports.object({
   * This is what lets one picker serve both the bypass and the full source
   * choice, instead of a consumer scoring privately when the bypass misses.
   */
-  allowTranscode: external_exports.boolean().optional()
+  allowTranscode: external_exports.boolean().optional(),
+  /**
+  * Consider ONLY streams the broker has bound to a profile slot.
+  *
+  * A consumer that dials the broker — which is every exporter, since none
+  * of them may open the camera's own URL — can do nothing with a source
+  * that has no slot: there is no restream to dial. Without this the picker
+  * can name such a stream, and each consumer discovers the dead end for
+  * itself: Alexa's `profileForCamStream` returns `null` and it quietly
+  * falls back, and HomeKit would have had to grow the same function again.
+  *
+  * Default `false`, and deliberately so: the BROKER itself picks through
+  * here when it decides which source to BIND to a slot
+  * (`computeInitialAssignment`), and it must see the unbound ones or it
+  * could never bind them.
+  */
+  requireProfileBound: external_exports.boolean().optional()
 }).readonly();
 var PickStreamPreferencesSchema = external_exports.object({
   /**
@@ -19787,7 +19803,43 @@ var PickedCamStreamSchema = external_exports.object({
   */
   transcodes: external_exports.boolean(),
   /** One-line explanation of why this stream won — for logs / debug UI. */
-  reason: external_exports.string()
+  reason: external_exports.string(),
+  /**
+  * The broker profile slot this source is bound to, when it is bound.
+  *
+  * Answered HERE because every consumer needs it and none of them can get it
+  * from the `camStreamId` alone. Alexa wrote `profileForCamStream` for it —
+  * a second cap read plus a `null` branch — and HomeKit was about to write
+  * the same function a second time.
+  *
+  * Absent when the source has no slot, which a caller passing
+  * `requireProfileBound` can never see.
+  */
+  profile: CamProfileSchema.optional(),
+  /** The broker id of that slot, for logs that must name what was dialled. */
+  brokerId: external_exports.string().optional(),
+  /**
+  * The broker restream URL to dial for this stream.
+  *
+  * An exporter must never open the camera's own URL — the broker is the one
+  * that dials the camera, and every consumer goes through its restream. So
+  * the picker answers with the thing a consumer may actually use, instead of
+  * naming a source and leaving each caller to look the URL up.
+  */
+  url: external_exports.string().optional(),
+  /**
+  * Frames per second this stream really delivers, and where the number came
+  * from.
+  *
+  * It is here because getting it wrong is expensive and silent: a HomeKit
+  * accessory advertised 720p at 24 fps while the slot serving it ran at 9,
+  * and the controller rendered nothing at all. The source is carried with the
+  * value for the same reason the bitrate evidence is: `published` is what the
+  * publisher declares and `measured` is what the broker observed, and they
+  * are not interchangeable.
+  */
+  fps: external_exports.number().positive().optional(),
+  fpsSource: external_exports.enum(["published", "measured"]).optional()
 });
 var cameraStreamsCapability = {
   name: "camera-streams",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-VJIT6AOW.js";
+} from "./chunk-QT7LGBTP.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-HOXPTYJH.js");
+  await import("./launcher-3GIYBFMQ.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-HOXPTYJH.js");
+  await import("./launcher-3GIYBFMQ.js");
 }
 
 // src/commands/setup.ts
@@ -1140,7 +1140,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-N63N6OOD.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-NGNF47ZY.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-N63N6OOD.js → discover-NGNF47ZY.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-VJIT6AOW.js";
+} from "./chunk-QT7LGBTP.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,

package/dist/{launcher-HOXPTYJH.js → launcher-3GIYBFMQ.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-Cz6h6Nc3.js
-var require_dist_Cz6h6Nc3 = __commonJS({
-  "../system/dist/dist-Cz6h6Nc3.js"(exports) {
+// ../system/dist/dist-CpXBoZOv.js
+var require_dist_CpXBoZOv = __commonJS({
+  "../system/dist/dist-CpXBoZOv.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -30405,7 +30405,23 @@ var require_dist_Cz6h6Nc3 = __commonJS({
       * This is what lets one picker serve both the bypass and the full source
       * choice, instead of a consumer scoring privately when the bypass misses.
       */
-      allowTranscode: zod.z.boolean().optional()
+      allowTranscode: zod.z.boolean().optional(),
+      /**
+      * Consider ONLY streams the broker has bound to a profile slot.
+      *
+      * A consumer that dials the broker — which is every exporter, since none
+      * of them may open the camera's own URL — can do nothing with a source
+      * that has no slot: there is no restream to dial. Without this the picker
+      * can name such a stream, and each consumer discovers the dead end for
+      * itself: Alexa's `profileForCamStream` returns `null` and it quietly
+      * falls back, and HomeKit would have had to grow the same function again.
+      *
+      * Default `false`, and deliberately so: the BROKER itself picks through
+      * here when it decides which source to BIND to a slot
+      * (`computeInitialAssignment`), and it must see the unbound ones or it
+      * could never bind them.
+      */
+      requireProfileBound: zod.z.boolean().optional()
     }).readonly();
     var PickStreamPreferencesSchema = zod.z.object({
       /**
@@ -30446,7 +30462,43 @@ var require_dist_Cz6h6Nc3 = __commonJS({
       */
       transcodes: zod.z.boolean(),
       /** One-line explanation of why this stream won — for logs / debug UI. */
-      reason: zod.z.string()
+      reason: zod.z.string(),
+      /**
+      * The broker profile slot this source is bound to, when it is bound.
+      *
+      * Answered HERE because every consumer needs it and none of them can get it
+      * from the `camStreamId` alone. Alexa wrote `profileForCamStream` for it —
+      * a second cap read plus a `null` branch — and HomeKit was about to write
+      * the same function a second time.
+      *
+      * Absent when the source has no slot, which a caller passing
+      * `requireProfileBound` can never see.
+      */
+      profile: CamProfileSchema.optional(),
+      /** The broker id of that slot, for logs that must name what was dialled. */
+      brokerId: zod.z.string().optional(),
+      /**
+      * The broker restream URL to dial for this stream.
+      *
+      * An exporter must never open the camera's own URL — the broker is the one
+      * that dials the camera, and every consumer goes through its restream. So
+      * the picker answers with the thing a consumer may actually use, instead of
+      * naming a source and leaving each caller to look the URL up.
+      */
+      url: zod.z.string().optional(),
+      /**
+      * Frames per second this stream really delivers, and where the number came
+      * from.
+      *
+      * It is here because getting it wrong is expensive and silent: a HomeKit
+      * accessory advertised 720p at 24 fps while the slot serving it ran at 9,
+      * and the controller rendered nothing at all. The source is carried with the
+      * value for the same reason the bitrate evidence is: `published` is what the
+      * publisher declares and `measured` is what the broker observed, and they
+      * are not interchangeable.
+      */
+      fps: zod.z.number().positive().optional(),
+      fpsSource: zod.z.enum(["published", "measured"]).optional()
     });
     var cameraStreamsCapability = {
       name: "camera-streams",
@@ -62805,7 +62857,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -63624,7 +63676,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -63718,7 +63770,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -64615,11 +64667,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-DBrIdOQp.js
-var require_retired_settings_keys_DBrIdOQp = __commonJS({
-  "../system/dist/retired-settings-keys-DBrIdOQp.js"(exports) {
+// ../system/dist/retired-settings-keys-1sEBolVU.js
+var require_retired_settings_keys_1sEBolVU = __commonJS({
+  "../system/dist/retired-settings-keys-1sEBolVU.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -66856,8 +66908,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
-    var require_retired_settings_keys = require_retired_settings_keys_DBrIdOQp();
+    var require_dist10 = require_dist_CpXBoZOv();
+    var require_retired_settings_keys = require_retired_settings_keys_1sEBolVU();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -72865,7 +72917,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -73002,7 +73054,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -73198,7 +73250,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -81011,7 +81063,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -81598,7 +81650,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     var node_fs_promises = __require("fs/promises");
     var node_fs = __require("fs");
     node_fs = require_chunk.__toESM(node_fs);
@@ -84351,7 +84403,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -85578,8 +85630,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
-    var require_retired_settings_keys = require_retired_settings_keys_DBrIdOQp();
+    var require_dist10 = require_dist_CpXBoZOv();
+    var require_retired_settings_keys = require_retired_settings_keys_1sEBolVU();
     var require_wal_checkpoint_policy = require_wal_checkpoint_policy_CCJZngds();
     var node_crypto = __require("crypto");
     var node_path = __require("path");
@@ -88366,7 +88418,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -92093,7 +92145,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -110154,7 +110206,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -136421,7 +136473,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Cz6h6Nc3();
+    var require_dist10 = require_dist_CpXBoZOv();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -224230,7 +224282,23 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * This is what lets one picker serve both the bypass and the full source
       * choice, instead of a consumer scoring privately when the bypass misses.
       */
-      allowTranscode: zod.z.boolean().optional()
+      allowTranscode: zod.z.boolean().optional(),
+      /**
+      * Consider ONLY streams the broker has bound to a profile slot.
+      *
+      * A consumer that dials the broker — which is every exporter, since none
+      * of them may open the camera's own URL — can do nothing with a source
+      * that has no slot: there is no restream to dial. Without this the picker
+      * can name such a stream, and each consumer discovers the dead end for
+      * itself: Alexa's `profileForCamStream` returns `null` and it quietly
+      * falls back, and HomeKit would have had to grow the same function again.
+      *
+      * Default `false`, and deliberately so: the BROKER itself picks through
+      * here when it decides which source to BIND to a slot
+      * (`computeInitialAssignment`), and it must see the unbound ones or it
+      * could never bind them.
+      */
+      requireProfileBound: zod.z.boolean().optional()
     }).readonly();
     var PickStreamPreferencesSchema = zod.z.object({
       /**
@@ -224271,7 +224339,43 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       */
       transcodes: zod.z.boolean(),
       /** One-line explanation of why this stream won — for logs / debug UI. */
-      reason: zod.z.string()
+      reason: zod.z.string(),
+      /**
+      * The broker profile slot this source is bound to, when it is bound.
+      *
+      * Answered HERE because every consumer needs it and none of them can get it
+      * from the `camStreamId` alone. Alexa wrote `profileForCamStream` for it —
+      * a second cap read plus a `null` branch — and HomeKit was about to write
+      * the same function a second time.
+      *
+      * Absent when the source has no slot, which a caller passing
+      * `requireProfileBound` can never see.
+      */
+      profile: require_sleep.CamProfileSchema.optional(),
+      /** The broker id of that slot, for logs that must name what was dialled. */
+      brokerId: zod.z.string().optional(),
+      /**
+      * The broker restream URL to dial for this stream.
+      *
+      * An exporter must never open the camera's own URL — the broker is the one
+      * that dials the camera, and every consumer goes through its restream. So
+      * the picker answers with the thing a consumer may actually use, instead of
+      * naming a source and leaving each caller to look the URL up.
+      */
+      url: zod.z.string().optional(),
+      /**
+      * Frames per second this stream really delivers, and where the number came
+      * from.
+      *
+      * It is here because getting it wrong is expensive and silent: a HomeKit
+      * accessory advertised 720p at 24 fps while the slot serving it ran at 9,
+      * and the controller rendered nothing at all. The source is carried with the
+      * value for the same reason the bitrate evidence is: `published` is what the
+      * publisher declares and `measured` is what the broker observed, and they
+      * are not interchangeable.
+      */
+      fps: zod.z.number().positive().optional(),
+      fpsSource: zod.z.enum(["published", "measured"]).optional()
     });
     var cameraStreamsCapability = {
       name: "camera-streams",
@@ -425770,7 +425874,23 @@ var require_share_token_service = __commonJS({
     exports.SHARE_TOKEN_MAX_DEVICES = 64;
     exports.ShareTokenScopeSchema = zod_1.z.object({
       kind: zod_1.z.enum(types_1.SHARE_VIEW_KINDS),
-      deviceIds: zod_1.z.array(zod_1.z.number().int().nonnegative()).min(1).max(exports.SHARE_TOKEN_MAX_DEVICES)
+      deviceIds: zod_1.z.array(zod_1.z.number().int().nonnegative()).min(1).max(exports.SHARE_TOKEN_MAX_DEVICES),
+      /**
+       * TALK-BACK, opt-in at mint time. Absent means OFF, and that is the whole
+       * point: a share link is handed to third parties, so the difference between
+       * "can watch the kitchen" and "can speak into the kitchen" must be a choice
+       * somebody made for THAT link, on the day they made it.
+       *
+       * It rides on the scope rather than widening the grid enumeration because
+       * the enumeration is retroactive: a method added there is granted to every
+       * token ever minted, including the one handed to a neighbour last week.
+       * `share-view-access.ts` says so about event history; the same rule with
+       * actuation into the home on the other end of it is not a smaller matter.
+       *
+       * It widens WHAT may be called, never WHICH cameras — `deviceIds` still
+       * gates every talk call.
+       */
+      talk: zod_1.z.boolean().optional()
     });
     exports.ShareTokenRecordSchema = zod_1.z.object({
       id: zod_1.z.string(),
@@ -427374,6 +427494,11 @@ var require_share_view_access = __commonJS({
       "turnProvider.getTurnServers",
       "live.onEvent"
     ]);
+    var GRID_VIEW_TALK_METHODS = /* @__PURE__ */ new Set([
+      "intercom.startSession",
+      "intercom.handleAnswer",
+      "intercom.stopSession"
+    ]);
     var GRID_VIEW_DEVICE_METHODS = /* @__PURE__ */ new Set([
       "snapshot.getSnapshot",
       "pipelineOrchestrator.getCameraMetrics",
@@ -427448,7 +427573,12 @@ var require_share_view_access = __commonJS({
       if (GRID_VIEW_OPEN_METHODS.has(path)) {
         return { ok: true };
       }
-      if (GRID_VIEW_DEVICE_METHODS.has(path)) {
+      if (GRID_VIEW_TALK_METHODS.has(path)) {
+        if (scope.talk !== true) {
+          return { ok: false, reason: `'${path}' needs a share link minted with talk-back` };
+        }
+      }
+      if (GRID_VIEW_TALK_METHODS.has(path) || GRID_VIEW_DEVICE_METHODS.has(path)) {
         const deviceId = extractDeviceId(input);
         if (deviceId === null) {
           return { ok: false, reason: `'${path}' requires a numeric deviceId for share-view access` };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.160",
+  "version": "1.2.162",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",