camstack 1.2.185 → 1.2.186

package/dist/cli.js

@@ -37,7 +37,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-6Q2JLZCB.js");
+  await import("./launcher-3LWROJEJ.js");
 }
 
 // src/commands/agent.ts
@@ -82,7 +82,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-6Q2JLZCB.js");
+  await import("./launcher-3LWROJEJ.js");
 }
 
 // src/commands/setup.ts
@@ -14769,7 +14769,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-Tkp9dHXv.mjs
+// ../types/dist/sleep-BjDbnx6-.mjs
 var AUDIO_CHUNK_FORMATS = [
   "f32le",
   "pcmu",
@@ -24841,14 +24841,6 @@ var HUB_ADDRESS_ROLES = [
   "internal",
   "publicEndpoint"
 ];
-var HUB_MDNS_QUERY_NAME = "_camstack._tcp.local";
-var HUB_MDNS_TXT_KEYS = {
-  nodeId: "nodeId",
-  version: "version",
-  role: "role",
-  url: "url"
-};
-var HUB_MDNS_ROLE = "hub";
 var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
 var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
 var LlmUsageSchema = external_exports.object({
@@ -63958,12 +63950,31 @@ async function createAndStoreAdminToken(req) {
   }
 }
 
+// src/commands/login-server.ts
+import { normalizeHubAddress } from "@camstack/develop";
+function resolveLoginServer(flag, positionals, env) {
+  if (positionals.length > 1) {
+    throw new Error(`login takes one hub address, got: ${positionals.join(" ")}`);
+  }
+  const flagged = flag === void 0 ? void 0 : normalizeHubAddress(flag);
+  const positional = positionals[0] === void 0 ? void 0 : normalizeHubAddress(positionals[0]);
+  if (flagged && positional && flagged !== positional) {
+    throw new Error(
+      `login got two different hubs: ${positional} (argument) and ${flagged} (--server).`
+    );
+  }
+  const fromEnv = env["CAMSTACK_SERVER"]?.trim() || env["CAMSTACK_HUB_URL"]?.trim();
+  return flagged ?? positional ?? (fromEnv ? normalizeHubAddress(fromEnv) : void 0);
+}
+
 // src/commands/auth.ts
 import * as os4 from "os";
 import * as clack from "@clack/prompts";
 import {
   adminTokenStatus,
   clearSession,
+  defaultSession,
+  listSessions,
   loadSession,
   saveSession
 } from "@camstack/develop";
@@ -63971,125 +63982,19 @@ import {
 // src/discovery/hub-finder.ts
 import * as fs5 from "fs";
 import * as path5 from "path";
-import { defaultSessionDir, isSessionFile, resolveHubUrl } from "@camstack/develop";
-
-// src/discovery/mdns-browse.ts
-import makeMdns from "multicast-dns";
-function createRealMdnsSocket() {
-  const socket = makeMdns();
-  return {
-    onResponse: (listener) => {
-      socket.on("response", (packet, rinfo) => {
-        const records = [];
-        for (const a of [...packet.answers, ...packet.additionals]) {
-          if (a.type === "PTR") records.push({ kind: "ptr", name: a.name, target: a.data });
-          else if (a.type === "A") records.push({ kind: "a", name: a.name, address: a.data });
-          else if (a.type === "SRV")
-            records.push({ kind: "srv", name: a.name, port: a.data.port, target: a.data.target });
-          else if (a.type === "TXT") {
-            const raw = Array.isArray(a.data) ? a.data : [a.data];
-            records.push({ kind: "txt", name: a.name, entries: raw.map((e) => e.toString()) });
-          }
-        }
-        listener({ records, from: rinfo.address });
-      });
-    },
-    onError: (listener) => {
-      socket.on("error", listener);
-    },
-    query: (name) => socket.query({ questions: [{ name, type: "PTR" }] }),
-    destroy: () => socket.destroy()
-  };
-}
-function parseTxt(entries2) {
-  const out = /* @__PURE__ */ new Map();
-  for (const entry of entries2) {
-    const at = entry.indexOf("=");
-    if (at > 0) out.set(entry.slice(0, at), entry.slice(at + 1));
-  }
-  return out;
-}
-function originOf(value) {
-  if (value === void 0) return null;
-  try {
-    const u = new URL(value);
-    return u.protocol === "https:" ? u.origin : null;
-  } catch {
-    return null;
-  }
-}
-function hubsFromResponses(responses) {
-  const found = /* @__PURE__ */ new Map();
-  for (const { records, from } of responses) {
-    for (const ptr of records) {
-      if (ptr.kind !== "ptr") continue;
-      const srv = records.find((r) => r.kind === "srv" && r.name === ptr.target);
-      if (srv?.kind !== "srv") continue;
-      const txtRecord = records.find((r) => r.kind === "txt" && r.name === ptr.target);
-      const txt = txtRecord?.kind === "txt" ? parseTxt(txtRecord.entries) : /* @__PURE__ */ new Map();
-      const role = txt.get(HUB_MDNS_TXT_KEYS.role);
-      if (role !== void 0 && role !== HUB_MDNS_ROLE) continue;
-      const a = records.find((r) => r.kind === "a" && r.name === srv.target);
-      const host = a?.kind === "a" ? a.address : from;
-      const url2 = originOf(txt.get(HUB_MDNS_TXT_KEYS.url)) ?? `https://${host}:${srv.port}`;
-      found.set(url2, {
-        url: url2,
-        nodeId: txt.get(HUB_MDNS_TXT_KEYS.nodeId) ?? null,
-        version: txt.get(HUB_MDNS_TXT_KEYS.version) ?? null
-      });
-    }
-  }
-  return [...found.values()];
-}
-async function browseHubsMdns(options) {
-  const responses = [];
-  const problem = (error51) => options.onProblem?.(error51 instanceof Error ? error51.message : String(error51));
-  let socket;
-  try {
-    socket = (options.createSocket ?? createRealMdnsSocket)();
-  } catch (err) {
-    problem(err);
-    return [];
-  }
-  let requery = null;
-  try {
-    socket.onResponse((r) => responses.push(r));
-    socket.onError(problem);
-    socket.query(HUB_MDNS_QUERY_NAME);
-    requery = setInterval(() => socket.query(HUB_MDNS_QUERY_NAME), options.requeryMs ?? 1e3);
-    await new Promise((resolve6) => setTimeout(resolve6, options.timeoutMs));
-  } catch (err) {
-    problem(err);
-  } finally {
-    if (requery !== null) clearInterval(requery);
-    socket.destroy();
-  }
-  return hubsFromResponses(responses);
-}
-
-// src/discovery/hub-finder.ts
+import {
+  defaultSessionDir,
+  isSessionFile,
+  resolveHubUrl,
+  validateHubAddress
+} from "@camstack/develop";
+import {
+  discoverHubs,
+  normalizeHubUrl
+} from "@camstack/develop/hub-discovery";
 var ADMIN_TOKEN_SUFFIX = ".admin-token";
-var DEFAULT_HTTPS_PORT = 443;
-var MDNS_LABEL = "LAN (mDNS)";
-function normalizeHubUrl(value) {
-  let parsed;
-  try {
-    parsed = new URL(value.trim());
-  } catch {
-    return null;
-  }
-  if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
-  if (parsed.hostname === "") return null;
-  const port = parsed.port === "" ? DEFAULT_HTTPS_PORT : Number.parseInt(parsed.port, 10);
-  const host = parsed.hostname.replace(/^\[|\]$/g, "");
-  const shown = host.includes(":") ? `[${host}]` : host;
-  return { url: `https://${shown}:${port}`, host, port };
-}
 function validateManualHubUrl(value) {
-  const trimmed = value.trim();
-  if (!trimmed.startsWith("https://"))
-    return "Enter an https:// address, e.g. https://192.168.1.9:4443";
-  return normalizeHubUrl(trimmed) === null ? "That is not a valid URL." : void 0;
+  return validateHubAddress(value);
 }
 function hubUrlFromAdminTokenFile(fileName) {
   if (!fileName.endsWith(ADMIN_TOKEN_SUFFIX)) return null;
@@ -64113,7 +64018,10 @@ function knownHubCandidates(deps) {
       try {
         const parsed = JSON.parse(fs5.readFileSync(path5.join(dir, file2), "utf8"));
         if (isSessionFile(parsed)) {
-          out.push({ url: parsed.server, source: `saved session ${parsed.username}` });
+          out.push({
+            url: parsed.server,
+            source: `saved session ${parsed.username}`
+          });
         }
       } catch {
       }
@@ -64128,94 +64036,46 @@ function knownHubCandidates(deps) {
     out.push({ url: fromEnv.url, source: name });
   }
   if (deps.workspaceRoot !== void 0) {
-    const scratch = resolveHubUrl({ env: {}, workspaceRoot: deps.workspaceRoot, session: null });
+    const scratch = resolveHubUrl({
+      env: {},
+      workspaceRoot: deps.workspaceRoot,
+      session: null
+    });
     if (scratch) out.push({ url: scratch.url, source: "scratchpad/.hub-url" });
   }
   return out;
 }
-function mergeCandidates(raw) {
-  const merged = /* @__PURE__ */ new Map();
-  for (const r of raw) {
-    const n = normalizeHubUrl(r.url);
-    if (n === null) continue;
-    const key = `${n.host}:${n.port}`;
-    const prev = merged.get(key);
-    merged.set(key, {
-      url: n.url,
-      host: n.host,
-      port: n.port,
-      nodeId: prev?.nodeId ?? r.nodeId ?? null,
-      version: prev?.version ?? r.version ?? null,
-      sources: prev?.sources.includes(r.source) ? prev.sources : [...prev?.sources ?? [], r.source]
-    });
-  }
-  return [...merged.values()];
-}
 async function findHubs(deps = {}) {
-  const browse = deps.browse ?? browseHubsMdns;
-  const probe = deps.probe ?? probeHttps;
-  const announced = await browse({
-    timeoutMs: deps.mdnsTimeoutMs ?? 3e3,
+  return discoverHubs({
+    known: knownHubCandidates(deps),
+    ...deps.browse ? { browse: deps.browse } : {},
+    ...deps.probe ? { probe: deps.probe } : {},
+    ...deps.mdnsTimeoutMs !== void 0 ? { mdnsTimeoutMs: deps.mdnsTimeoutMs } : {},
     ...deps.onProblem ? { onProblem: deps.onProblem } : {}
   });
-  const raw = [
-    ...announced.map((h) => ({
-      url: h.url,
-      source: MDNS_LABEL,
-      nodeId: h.nodeId,
-      version: h.version
-    })),
-    ...knownHubCandidates(deps)
-  ];
-  const candidates = mergeCandidates(raw);
-  const verdicts = await Promise.all(candidates.map((c) => probe(c.host, c.port)));
-  return candidates.filter((_, i) => verdicts[i] === true);
 }
 function describeHub(hub) {
   const identity = [hub.nodeId, hub.version === null ? null : `v${hub.version}`].filter((p) => p !== null).join(" ");
   return `${hub.url}${identity === "" ? "" : `  ${identity}`}  (${hub.sources.join(", ")})`;
 }
-async function probeHttps(host, port) {
-  const { request: request3 } = await import("https");
-  return new Promise((resolve6) => {
-    const req = request3(
-      {
-        host,
-        port,
-        method: "HEAD",
-        path: "/trpc/health",
-        timeout: 1500,
-        rejectUnauthorized: false
-      },
-      (res) => {
-        resolve6(typeof res.statusCode === "number");
-        res.resume();
-      }
-    );
-    req.on("error", () => resolve6(false));
-    req.on("timeout", () => {
-      req.destroy();
-      resolve6(false);
-    });
-    req.end();
-  });
-}
 
 // src/discovery/hub-picker.ts
+import { normalizeHubAddress as normalizeHubAddress2 } from "@camstack/develop";
 var MANUAL_ENTRY_VALUE = "__manual__";
 var MANUAL_ENTRY_LABEL = "Enter an address\u2026";
 var NO_HUB_MESSAGE = "No camstack hub found on this network (mDNS) or among the hubs this machine knows. Pass --server https://<host>:<port>, and check the hub is reachable from here.";
 async function pickHub(hubs, prompts) {
-  const [only, ...rest] = hubs;
-  if (only === void 0) throw new Error(NO_HUB_MESSAGE);
-  if (rest.length === 0) return only.url;
+  if (hubs.length === 0) throw new Error(NO_HUB_MESSAGE);
   const chosen = await prompts.select("Select a hub to log into", [
     ...hubs.map((h) => ({ value: h.url, label: describeHub(h) })),
     { value: MANUAL_ENTRY_VALUE, label: MANUAL_ENTRY_LABEL }
   ]);
   if (chosen !== MANUAL_ENTRY_VALUE) return chosen;
-  const typed = await prompts.text("Hub address (https://host:port)", validateManualHubUrl);
-  return typed.trim().replace(/\/+$/, "");
+  const typed = await prompts.text(
+    "Hub address (host, host:port or https://host:port)",
+    validateManualHubUrl
+  );
+  return normalizeHubAddress2(typed);
 }
 
 // src/commands/auth.ts
@@ -64251,7 +64111,9 @@ async function askSelect(message, options) {
   return result;
 }
 async function callTrpcMutation(url2, authorization, payload, isPayload) {
-  const headers = { "Content-Type": "application/json" };
+  const headers = {
+    "Content-Type": "application/json"
+  };
   if (authorization) headers["Authorization"] = authorization;
   const res = await hubRequest(url2, {
     method: "POST",
@@ -64344,7 +64206,10 @@ async function resolveServerInteractive() {
   return pickHub(hubs, {
     select: askSelect,
     text: async (message, validate) => {
-      const result = await clack.text({ message, validate: (value) => validate(value ?? "") });
+      const result = await clack.text({
+        message,
+        validate: (value) => validate(value ?? "")
+      });
       if (clack.isCancel(result)) {
         clack.cancel("Cancelled.");
         process.exit(130);
@@ -64546,7 +64411,30 @@ function describeAdminToken(server) {
   }
   return status.expiresAt === void 0 ? "admin token present (expiry unknown)" : `admin token present, expires ${new Date(status.expiresAt).toISOString()}`;
 }
+function formatSessionList(sessions, defaultServer, describeAdmin) {
+  const lines = [
+    `[camstack] ${sessions.length} saved sessions (* = used when no --server is given):`
+  ];
+  for (const s of sessions) {
+    const mark = s.server === defaultServer ? "*" : " ";
+    const scopes = s.scopes.map((x) => `${x.type}:${x.target}`).join(", ");
+    lines.push(`${mark} ${s.server}`);
+    lines.push(`    user: ${s.username}   scopes: ${scopes}`);
+    lines.push(`    last used: ${new Date(s.lastUsedAt ?? s.createdAt).toISOString()}`);
+    lines.push(`    admin: ${describeAdmin(s.server)}`);
+  }
+  lines.push("Default: $CAMSTACK_SERVER if set, else the most recently used session.");
+  lines.push("Pick another with `camstack whoami --server <host>`.");
+  return lines.join("\n");
+}
 async function whoamiCommand(opts) {
+  if (!opts.server) {
+    const sessions = listSessions();
+    if (sessions.length > 1) {
+      console.log(formatSessionList(sessions, defaultSession(sessions)?.server, describeAdminToken));
+      return;
+    }
+  }
   const session = loadSession(opts.server);
   if (!session) {
     console.log(`[camstack] Not logged in${opts.server ? ` to ${opts.server}` : ""}.`);
@@ -64600,6 +64488,8 @@ async function whoamiCommand(opts) {
 import {
   loadSession as loadSession4,
   MissingCredentialsError,
+  normalizeHubAddress as normalizeHubAddress3,
+  touchSession as touchSession3,
   resolveCredentials as resolveCredentials3
 } from "@camstack/develop";
 
@@ -64847,7 +64737,7 @@ import * as fs7 from "fs";
 import * as path7 from "path";
 import { parseArgs as parseArgs6 } from "util";
 import * as clack3 from "@clack/prompts";
-import { loadSession as loadSession2, resolveCredentials } from "@camstack/develop";
+import { loadSession as loadSession2, resolveCredentials, touchSession } from "@camstack/develop";
 var DEFAULT_DEBOUNCE_MS = 500;
 var DEFAULT_WATCH_SUBDIR = "src";
 function resolveAddonDir(arg) {
@@ -64920,6 +64810,7 @@ async function runDev(args) {
     loadSession: loadSession2
   });
   if (creds.warning) console.error(`[camstack dev] Warning: ${creds.warning}`);
+  if (creds.source === "session" && creds.server) touchSession(creds.server);
   const serverUrl = creds.server;
   const token = creds.token;
   if (!serverUrl) {
@@ -65000,6 +64891,7 @@ import { parseArgs as parseArgs7 } from "util";
 import * as clack4 from "@clack/prompts";
 import {
   loadSession as loadSession3,
+  touchSession as touchSession2,
   resolveCredentials as resolveCredentials2,
   withAuthHint as withAuthHint3
 } from "@camstack/develop";
@@ -65034,7 +64926,9 @@ function printLine(e, addonId) {
 async function fetchLogs(server, token, addonId, limit, authSource) {
   const input = encodeURIComponent(JSON.stringify({ json: { addonId, limit } }));
   const url2 = `${server}/trpc/addons.getLogs?input=${input}`;
-  const res = await hubRequest(url2, { headers: { Authorization: `Bearer ${token}` } });
+  const res = await hubRequest(url2, {
+    headers: { Authorization: `Bearer ${token}` }
+  });
   if (!res.ok) {
     const text2 = await res.text().catch(() => "");
     throw new Error(
@@ -65069,6 +64963,7 @@ async function runWatch(args) {
     loadSession: loadSession3
   });
   if (creds.warning) console.error(`[camstack watch] Warning: ${creds.warning}`);
+  if (creds.source === "session" && creds.server) touchSession2(creds.server);
   const serverUrl = creds.server;
   const token = creds.token;
   if (!serverUrl) {
@@ -65558,15 +65453,21 @@ function buildCommands() {
       summary: "Authenticate and cache a long-lived upload-only token at ~/.camstack/<host>.json",
       run: runLogin,
       help: () => [
-        "Usage: camstack login [options]",
+        "Usage: camstack login [<host>] [options]",
+        "",
+        "  <host>                 The hub, same as --server: 192.168.1.50, hub.local:4443,",
+        "                         https://hub.local, [fe80::1]:4443. Port defaults to 4443, scheme is",
+        "                         https (http:// is refused). Examples: camstack login 192.168.1.50",
+        "                         camstack login --admin 192.168.1.50",
         "",
         "Default flow (no flags): finds the hub from what the LAN announces over mDNS",
         "  plus the hubs this machine knows (saved sessions, admin tokens, $CAMSTACK_HUB_URL),",
-        "  then prompts for user + password. One reachable hub is used automatically;",
-        '  several show a picker with the source of each and an "Enter an address\u2026" entry.',
+        "  then prompts for user + password. Found hubs show a picker (the first, the default, is",
+        '  one Enter away) with the source of each and an "Enter an address\u2026" entry, so a hub',
+        "  that does not announce is still reachable. A given <host>/--server skips all of it.",
         "",
         "Options (all optional):",
-        "  -s, --server <url>     Skip discovery, use this URL directly ($CAMSTACK_SERVER)",
+        "  -s, --server <host>    Skip discovery, use this hub ($CAMSTACK_SERVER, then $CAMSTACK_HUB_URL)",
         "  -n, --namespace <ns>   Ignored (kept so old scripts do not fail): hubs are found over mDNS",
         "  -u, --username <name>  Username (skips prompt)",
         "  -p, --password <pwd>   Password (skips prompt \u2014 prefer letting the CLI prompt)",
@@ -65602,7 +65503,7 @@ function buildCommands() {
         "Usage: camstack logout [options]",
         "",
         "Options:",
-        "  -s, --server <url>     CamStack server URL (default: $CAMSTACK_SERVER or https://localhost:4443)"
+        "  -s, --server <host>     CamStack server URL (default: $CAMSTACK_SERVER or https://localhost:4443; a bare host or host:port is fine)"
       ].join("\n")
     },
     {
@@ -65612,8 +65513,12 @@ function buildCommands() {
       help: () => [
         "Usage: camstack whoami [options]",
         "",
+        "With one saved session, prints it and checks the token against the hub. With several and",
+        "no --server, lists them all (server, user, scopes, admin token) and marks the default:",
+        "$CAMSTACK_SERVER if set, else the most recently used session.",
+        "",
         "Options:",
-        "  -s, --server <url>     Pick a specific session (default: most recently used)"
+        "  -s, --server <host>    Show one session (192.168.1.50, hub.local:4443, https://host)"
       ].join("\n")
     },
     {
@@ -65643,7 +65548,7 @@ function buildCommands() {
         "      --no-verify         Skip post-deploy verify / promotion poll",
         "",
         "Target options (addon and --closure):",
-        "  -s, --server <url>      Hub URL (default: $CAMSTACK_SERVER, then the cached session)",
+        "  -s, --server <host>      Hub URL (default: $CAMSTACK_SERVER, then the cached session)",
         "  -t, --token <token>     Auth token override",
         "      --token-file <path> Read the token from a file (bare token or a ~/.camstack session file)",
         "  -n, --node <id>         Target one agent. Mutually exclusive with --cluster",
@@ -65664,7 +65569,7 @@ function buildCommands() {
         "Deprecated alias of `camstack deploy --closure`. Prefer that form.",
         "",
         "Options:",
-        "  -s, --server <url>     Hub URL",
+        "  -s, --server <host>     Hub URL",
         "  -t, --token <token>    Auth token override",
         "      --token-file <path> Read the token from a file",
         "  -n, --node <id>        Propagate+apply on this agent. Mutually exclusive with --cluster/--all",
@@ -65687,7 +65592,7 @@ function buildCommands() {
         "  path                       Addon dir / workspace name / `.` for 5-level scan",
         "",
         "Options:",
-        "  -s, --server <url>         Server URL (default: cached session)",
+        "  -s, --server <host>         Server URL (default: cached session)",
         "  -t, --token <token>        Auth token override",
         "      --token-file <path>    Read the token from a file",
         "  -n, --node <id>            Push to a specific node",
@@ -65723,7 +65628,7 @@ function buildCommands() {
         "      --build-script <n>    Override script name (default: build)",
         "",
         "Target options:",
-        "  -s, --server <url>        Server URL (default: cached session)",
+        "  -s, --server <host>        Server URL (default: cached session)",
         "  -t, --token <token>       Auth token override",
         "      --token-file <path>   Read the token from a file",
         "  -n, --node <id>           Push to a specific node",
@@ -65803,13 +65708,17 @@ async function runLogin(args) {
       // never errors with "Unknown option --no-verify".
       "no-verify": { type: "boolean" }
     },
-    false
+    true
   );
   if (!parsed) {
     console.log(commandHelp("login"));
     return;
   }
-  const explicitServer = stringOpt(parsed.values, "server") ?? process.env.CAMSTACK_SERVER;
+  const explicitServer = resolveLoginServer(
+    stringOpt(parsed.values, "server"),
+    parsed.positionals,
+    process.env
+  );
   if (stringOpt(parsed.values, "namespace") !== void 0) {
     console.warn("--namespace is ignored: hubs are found over mDNS, not the mesh channel.");
   }
@@ -65839,7 +65748,9 @@ async function runLogout(args) {
     console.log(commandHelp("logout"));
     return;
   }
-  const server = stringOpt(parsed.values, "server") ?? process.env.CAMSTACK_SERVER ?? "https://localhost:4443";
+  const server = normalizeHubAddress3(
+    stringOpt(parsed.values, "server") ?? process.env.CAMSTACK_SERVER ?? DEFAULT_SERVER_URL
+  );
   await logoutCommand({ server });
 }
 async function runWhoami(args) {
@@ -65855,7 +65766,7 @@ async function runWhoami(args) {
     return;
   }
   const server = stringOpt(parsed.values, "server");
-  await whoamiCommand(server ? { server } : {});
+  await whoamiCommand(server ? { server: normalizeHubAddress3(server) } : {});
 }
 function resolveClosureDeployOpts(values) {
   const nodeId = stringOpt(values, "node");
@@ -65978,6 +65889,7 @@ function resolveCommandCredentials(values) {
       loadSession: loadSession4
     });
     if (creds.warning) console.error(`[camstack] Warning: ${creds.warning}`);
+    if (creds.source === "session" && creds.server) touchSession3(creds.server);
     return creds;
   } catch (err) {
     if (err instanceof MissingCredentialsError) {