camstack 1.2.96 → 1.2.98

package/dist/{chunk-KFUPFPP3.js → chunk-GW5K6RH3.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-CbBk_3GJ.mjs
+// ../types/dist/sleep-BQJlnUOJ.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -15537,7 +15537,8 @@ var CameraSwitchAuthoritySchema = external_exports.discriminatedUnion("kind", [
 var CameraSwitchUnavailableReasonSchema = external_exports.enum([
   "no-provider",
   "source-unreachable",
-  "not-configured"
+  "not-configured",
+  "device-disabled"
 ]);
 var CameraSwitchSchema = external_exports.object({
   id: CameraSwitchIdSchema,
@@ -31971,12 +31972,20 @@ var BatteryStatusSchema = external_exports.object({
   * Charging source. `'dc'` covers wall/USB adapters; `'solar'` is
   * Reolink-specific for the Solar Panel 2 accessory (will become
   * common on other battery cams). `'none'` means running on battery
-  * alone.
+  * alone — a NEGATIVE the firmware actually reported.
+  *
+  * `'unknown'` is the absence of an answer: the provider has not read the
+  * power fields yet, or the firmware reported neither. Before it existed,
+  * two unreadable fields produced `'none'`, and a camera nobody had reached
+  * was drawn "on battery alone" — the same D315 defect `percentage` closed
+  * by going nullable. Consumers SKIP it (no charger state published, no
+  * glyph, no HomeKit ChargingState) rather than coerce it either way.
   */
   charging: external_exports.enum([
     "dc",
     "solar",
-    "none"
+    "none",
+    "unknown"
   ]),
   /**
   * True when the camera firmware has gone into low-power mode. Battery
@@ -32068,7 +32077,7 @@ var batteryCapability = {
     kind: "push",
     empty: {
       percentage: 0,
-      charging: "none",
+      charging: "unknown",
       sleeping: false,
       lastUpdated: 0
     }

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-KFUPFPP3.js";
+} from "./chunk-GW5K6RH3.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-7Z35E2WM.js");
+  await import("./launcher-VHGRUBGI.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-7Z35E2WM.js");
+  await import("./launcher-VHGRUBGI.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-5KWSHFNI.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-EV3TAGEL.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-5KWSHFNI.js → discover-EV3TAGEL.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-KFUPFPP3.js";
+} from "./chunk-GW5K6RH3.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,

package/dist/{launcher-7Z35E2WM.js → launcher-VHGRUBGI.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-DNwhsXWi.js
-var require_dist_DNwhsXWi = __commonJS({
-  "../system/dist/dist-DNwhsXWi.js"(exports) {
+// ../system/dist/dist-DlL8iWQo.js
+var require_dist_DlL8iWQo = __commonJS({
+  "../system/dist/dist-DlL8iWQo.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -25984,7 +25984,8 @@ var require_dist_DNwhsXWi = __commonJS({
     var CameraSwitchUnavailableReasonSchema = zod.z.enum([
       "no-provider",
       "source-unreachable",
-      "not-configured"
+      "not-configured",
+      "device-disabled"
     ]);
     var CameraSwitchSchema = zod.z.object({
       id: CameraSwitchIdSchema,
@@ -42531,12 +42532,20 @@ var require_dist_DNwhsXWi = __commonJS({
       * Charging source. `'dc'` covers wall/USB adapters; `'solar'` is
       * Reolink-specific for the Solar Panel 2 accessory (will become
       * common on other battery cams). `'none'` means running on battery
-      * alone.
+      * alone — a NEGATIVE the firmware actually reported.
+      *
+      * `'unknown'` is the absence of an answer: the provider has not read the
+      * power fields yet, or the firmware reported neither. Before it existed,
+      * two unreadable fields produced `'none'`, and a camera nobody had reached
+      * was drawn "on battery alone" — the same D315 defect `percentage` closed
+      * by going nullable. Consumers SKIP it (no charger state published, no
+      * glyph, no HomeKit ChargingState) rather than coerce it either way.
       */
       charging: zod.z.enum([
         "dc",
         "solar",
-        "none"
+        "none",
+        "unknown"
       ]),
       /**
       * True when the camera firmware has gone into low-power mode. Battery
@@ -42628,7 +42637,7 @@ var require_dist_DNwhsXWi = __commonJS({
         kind: "push",
         empty: {
           percentage: 0,
-          charging: "none",
+          charging: "unknown",
           sleeping: false,
           lastUpdated: 0
         }
@@ -60109,7 +60118,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -60928,7 +60937,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -61022,7 +61031,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -61919,11 +61928,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-CUXClAIQ.js
-var require_retired_settings_keys_CUXClAIQ = __commonJS({
-  "../system/dist/retired-settings-keys-CUXClAIQ.js"(exports) {
+// ../system/dist/retired-settings-keys-B5wVSU65.js
+var require_retired_settings_keys_B5wVSU65 = __commonJS({
+  "../system/dist/retired-settings-keys-B5wVSU65.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -64137,8 +64146,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
-    var require_retired_settings_keys = require_retired_settings_keys_CUXClAIQ();
+    var require_dist10 = require_dist_DlL8iWQo();
+    var require_retired_settings_keys = require_retired_settings_keys_B5wVSU65();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -69653,7 +69662,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -69790,7 +69799,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -69980,7 +69989,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -77793,7 +77802,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -78358,7 +78367,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -80942,7 +80951,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -82058,8 +82067,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
-    var require_retired_settings_keys = require_retired_settings_keys_CUXClAIQ();
+    var require_dist10 = require_dist_DlL8iWQo();
+    var require_retired_settings_keys = require_retired_settings_keys_B5wVSU65();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -84549,7 +84558,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -87500,7 +87509,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -105561,7 +105570,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -107504,9 +107513,9 @@ var require_event_category_BaEgqJNv = __commonJS({
   }
 });
 
-// ../types/dist/sleep-BtIF8lWc.js
-var require_sleep_BtIF8lWc = __commonJS({
-  "../types/dist/sleep-BtIF8lWc.js"(exports) {
+// ../types/dist/sleep-BCUreN6s.js
+var require_sleep_BCUreN6s = __commonJS({
+  "../types/dist/sleep-BCUreN6s.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_BaEgqJNv();
     var zod = require_zod();
@@ -108498,6 +108507,7 @@ var require_sleep_BtIF8lWc = __commonJS({
       }
     };
     var DATAPLANE_SECRET_HEADER = "x-camstack-dataplane-secret";
+    var SHARE_VIEW_KINDS = ["grid-view", "events-view"];
     var CamProfileSchema = zod.z.enum([
       "high",
       "mid",
@@ -110866,6 +110876,12 @@ var require_sleep_BtIF8lWc = __commonJS({
         return ReadinessTimeoutError;
       }
     });
+    Object.defineProperty(exports, "SHARE_VIEW_KINDS", {
+      enumerable: true,
+      get: function() {
+        return SHARE_VIEW_KINDS;
+      }
+    });
     Object.defineProperty(exports, "StreamSourceEntrySchema", {
       enumerable: true,
       get: function() {
@@ -111187,7 +111203,7 @@ var require_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_BtIF8lWc();
+    var require_sleep = require_sleep_BCUreN6s();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -118071,9 +118087,9 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-KBuTXH-y.js
-var require_manifest_system_deps_KBuTXH_y = __commonJS({
-  "../system/dist/manifest-system-deps-KBuTXH-y.js"(exports) {
+// ../system/dist/manifest-system-deps-DvY1bY_n.js
+var require_manifest_system_deps_DvY1bY_n = __commonJS({
+  "../system/dist/manifest-system-deps-DvY1bY_n.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
     require_hub_cap_forward_DmHNjbB0();
@@ -118721,7 +118737,8 @@ var require_manifest_system_deps_KBuTXH_y = __commonJS({
           prefix,
           access: entry.access,
           baseUrl,
-          secret
+          secret,
+          ...entry.share !== void 0 ? { share: entry.share } : {}
         }));
         args.sink?.set(args.addonId, endpoints);
       };
@@ -118731,7 +118748,8 @@ var require_manifest_system_deps_KBuTXH_y = __commonJS({
         await ensureServer();
         served.set(prefix, {
           access: options.access,
-          handler: options.handler
+          handler: options.handler,
+          ...options.share !== void 0 ? { share: options.share } : {}
         });
         publish();
         args.logger.info("data-plane endpoint served", { meta: {
@@ -123925,9 +123943,11 @@ var require_manifest_system_deps_KBuTXH_y = __commonJS({
             }
             throw new Error(`no provider registered for cap "${input.capName}" (resolver miss after boot-window retry; forked-addon provider not yet registered \u2014 ${input.method})`);
           }
-          deps.logger?.warn?.("routing child unowned cap call via broker fallback", {
+          deps.logger?.debug?.("routing child unowned cap call via the hub-core `$core-caps` bridge", {
             capName: input.capName,
-            method: input.method
+            method: input.method,
+            callerAddonId: input.callerAddonId,
+            route: "$core-caps"
           });
           return await brokerCallForCap(deps.broker, input.capName, input.method, input.args);
         } catch (cause) {
@@ -130142,7 +130162,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DNwhsXWi();
+    var require_dist10 = require_dist_DlL8iWQo();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -130169,7 +130189,7 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_file_data_plane = require_file_data_plane_DO8KbxCe();
     var require_tls$1 = require_tls_BxQlomxd();
-    var require_manifest_system_deps = require_manifest_system_deps_KBuTXH_y();
+    var require_manifest_system_deps = require_manifest_system_deps_DvY1bY_n();
     var require_resource_monitor = require_resource_monitor_CdnzxBLP();
     var require_custom_action_registry = require_custom_action_registry_jY0NOZK8();
     var zod = require_zod();
@@ -211259,7 +211279,7 @@ var require_dist4 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_BtIF8lWc();
+    var require_sleep = require_sleep_BCUreN6s();
     var require_canonical_hash = require_canonical_hash_DNV8S5ET();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
@@ -211733,7 +211753,8 @@ var require_dist4 = __commonJS({
     var CameraSwitchUnavailableReasonSchema = zod.z.enum([
       "no-provider",
       "source-unreachable",
-      "not-configured"
+      "not-configured",
+      "device-disabled"
     ]);
     var CameraSwitchSchema = zod.z.object({
       id: CameraSwitchIdSchema,
@@ -211878,7 +211899,7 @@ var require_dist4 = __commonJS({
           if (audio === null) return {
             available: false,
             enabled: true,
-            unavailableReason: "source-unreachable"
+            unavailableReason: input.deviceDisabled ? "device-disabled" : "source-unreachable"
           };
           if (!audio.supported) return {
             available: false,
@@ -211900,7 +211921,7 @@ var require_dist4 = __commonJS({
           if (mask === null) return {
             available: false,
             enabled: false,
-            unavailableReason: "source-unreachable"
+            unavailableReason: input.deviceDisabled ? "device-disabled" : "source-unreachable"
           };
           if (!mask.supported) return {
             available: false,
@@ -231002,12 +231023,20 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * Charging source. `'dc'` covers wall/USB adapters; `'solar'` is
       * Reolink-specific for the Solar Panel 2 accessory (will become
       * common on other battery cams). `'none'` means running on battery
-      * alone.
+      * alone — a NEGATIVE the firmware actually reported.
+      *
+      * `'unknown'` is the absence of an answer: the provider has not read the
+      * power fields yet, or the firmware reported neither. Before it existed,
+      * two unreadable fields produced `'none'`, and a camera nobody had reached
+      * was drawn "on battery alone" — the same D315 defect `percentage` closed
+      * by going nullable. Consumers SKIP it (no charger state published, no
+      * glyph, no HomeKit ChargingState) rather than coerce it either way.
       */
       charging: zod.z.enum([
         "dc",
         "solar",
-        "none"
+        "none",
+        "unknown"
       ]),
       /**
       * True when the camera firmware has gone into low-power mode. Battery
@@ -231099,7 +231128,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         kind: "push",
         empty: {
           percentage: 0,
-          charging: "none",
+          charging: "unknown",
           sleeping: false,
           lastUpdated: 0
         }
@@ -240179,13 +240208,30 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       async onRestoreDevices(savedDevices) {
         const restored = /* @__PURE__ */ new Set();
         const failures = [];
+        const liveStableIds = new Set((await this.ctx.kernel.devices.getAll()).map((device2) => device2.stableId));
         const attemptRestore = async (saved) => {
           if (restored.has(saved.id)) return;
+          if (liveStableIds.has(saved.stableId)) {
+            this.ctx.logger.debug("Restore row already live \u2014 not dialled again", { tags: {
+              deviceId: saved.id,
+              stableId: saved.stableId
+            } });
+            restored.add(saved.id);
+            return;
+          }
           const Class = this.deviceClasses[saved.type];
           if (!Class) throw new Error(`no device class registered for type "${saved.type}"`);
           if (saved.parentDeviceId !== null && !restored.has(saved.parentDeviceId)) throw new Error(`parent device ${saved.parentDeviceId} not restored`);
           await this.healSavedConfig(saved, savedDevices);
-          await this.ctx.kernel.devices.create(saved.stableId, Class, {}, saved.parentDeviceId);
+          try {
+            await this.ctx.kernel.devices.create(saved.stableId, Class, {}, saved.parentDeviceId);
+          } catch (err) {
+            if (!(await this.ctx.kernel.devices.getAll()).some((device2) => device2.stableId === saved.stableId)) throw err;
+            this.ctx.logger.debug("Restore row came to life during its own dial \u2014 kept", { tags: {
+              deviceId: saved.id,
+              stableId: saved.stableId
+            } });
+          }
           restored.add(saved.id);
         };
         const topLevel = savedDevices.filter((saved) => saved.parentDeviceId === null);
@@ -255360,6 +255406,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.SCOPE_PRESETS = SCOPE_PRESETS;
     exports.SENSOR_FEATURES = SENSOR_FEATURES;
     exports.SENSOR_MAP = SENSOR_MAP;
+    exports.SHARE_VIEW_KINDS = require_sleep.SHARE_VIEW_KINDS;
     exports.SOURCE_CAPS = SOURCE_CAPS;
     exports.SOURCE_CAP_ACTIVE_FIELD = SOURCE_CAP_ACTIVE_FIELD;
     exports.SOURCE_CAP_CHANGED_AT_FIELD = SOURCE_CAP_CHANGED_AT_FIELD;
@@ -415398,6 +415445,29 @@ var require_cap_providers = __commonJS({
   }
 });
 
+// ../../server/backend/dist/api/trpc/server-provided-caps.js
+var require_server_provided_caps = __commonJS({
+  "../../server/backend/dist/api/trpc/server-provided-caps.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.ADDON_BACKED_SERVER_CAP_NAMES = exports.HUB_SERVICE_CAP_NAMES = void 0;
+    exports.capNameToNamespace = capNameToNamespace;
+    exports.HUB_SERVICE_CAP_NAMES = [
+      "network-quality",
+      "system",
+      "toast",
+      "integrations",
+      "nodes",
+      "server-management",
+      "addons"
+    ];
+    exports.ADDON_BACKED_SERVER_CAP_NAMES = ["webrtc-session"];
+    function capNameToNamespace(capName) {
+      return capName.replace(/-([a-z])/g, (_m, c) => c.toUpperCase());
+    }
+  }
+});
+
 // ../../server/backend/dist/core/auth/share-token.service.js
 var require_share_token_service = __commonJS({
   "../../server/backend/dist/core/auth/share-token.service.js"(exports) {
@@ -415441,6 +415511,7 @@ var require_share_token_service = __commonJS({
     })();
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.ShareTokenService = exports.ShareTokenRecordSchema = exports.ShareTokenScopeSchema = exports.SHARE_TOKEN_MAX_DEVICES = exports.SHARE_TOKEN_TTL_DEFAULT_SEC = exports.SHARE_TOKEN_TTL_MAX_SEC = exports.SHARE_TOKEN_TTL_MIN_SEC = exports.SHARE_TOKEN_PREFIX = void 0;
+    var types_1 = require_dist4();
     var crypto2 = __importStar(__require("crypto"));
     var zod_1 = require_zod();
     var SHARE_TOKENS_COLLECTION = "share_view_tokens";
@@ -415454,7 +415525,7 @@ var require_share_token_service = __commonJS({
     exports.SHARE_TOKEN_TTL_DEFAULT_SEC = 7 * 24 * 60 * 60;
     exports.SHARE_TOKEN_MAX_DEVICES = 64;
     exports.ShareTokenScopeSchema = zod_1.z.object({
-      kind: zod_1.z.enum(["grid-view", "events-view"]),
+      kind: zod_1.z.enum(types_1.SHARE_VIEW_KINDS),
       deviceIds: zod_1.z.array(zod_1.z.number().int().nonnegative()).min(1).max(exports.SHARE_TOKEN_MAX_DEVICES)
     });
     exports.ShareTokenRecordSchema = zod_1.z.object({
@@ -417418,15 +417489,12 @@ var require_core_cap_bridge = __commonJS({
     exports.buildCoreCapService = buildCoreCapService;
     var system_1 = require_dist3();
     var http_request_census_singleton_js_1 = require_http_request_census_singleton();
+    var server_provided_caps_js_1 = require_server_provided_caps();
     var trpc_context_js_1 = require_trpc_context();
     var trpc_middleware_js_1 = require_trpc_middleware();
     var CORE_NAMESPACES = /* @__PURE__ */ new Set([
-      // Service-backed cap routers (no addon provider).
-      "system",
-      "toast",
-      "integrations",
-      "nodes",
-      "addons",
+      // Service-backed cap routers (no addon provider) — derived, never copied.
+      ...server_provided_caps_js_1.HUB_SERVICE_CAP_NAMES.map(server_provided_caps_js_1.capNameToNamespace),
       // Hand-written single-impl core routers.
       "capabilities",
       "notifications",
@@ -420153,6 +420221,44 @@ var require_addon_route_jwt_gate = __commonJS({
   }
 });
 
+// ../../server/backend/dist/auth/addon-route-share-gate.js
+var require_addon_route_share_gate = __commonJS({
+  "../../server/backend/dist/auth/addon-route-share-gate.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.SHARE_DEVICES_HEADER = exports.SHARE_KIND_HEADER = void 0;
+    exports.gateAddonShareToken = gateAddonShareToken;
+    exports.stripShareHeaders = stripShareHeaders;
+    exports.SHARE_KIND_HEADER = "x-camstack-share-kind";
+    exports.SHARE_DEVICES_HEADER = "x-camstack-share-devices";
+    function gateAddonShareToken(input) {
+      if (input.record === null)
+        return { ok: false, status: 401, error: "Invalid token" };
+      const kind = input.record.scope.kind;
+      if (!(input.endpoint.share ?? []).includes(kind)) {
+        return { ok: false, status: 403, error: "Share token not accepted here" };
+      }
+      return {
+        ok: true,
+        headers: {
+          [exports.SHARE_KIND_HEADER]: kind,
+          [exports.SHARE_DEVICES_HEADER]: input.record.scope.deviceIds.join(",")
+        }
+      };
+    }
+    function stripShareHeaders(headers) {
+      const out = {};
+      for (const [key, value] of Object.entries(headers)) {
+        const lower = key.toLowerCase();
+        if (lower === exports.SHARE_KIND_HEADER || lower === exports.SHARE_DEVICES_HEADER)
+          continue;
+        out[key] = value;
+      }
+      return out;
+    }
+  }
+});
+
 // ../../server/backend/dist/core/config/config.schema.js
 var require_config_schema = __commonJS({
   "../../server/backend/dist/core/config/config.schema.js"(exports) {
@@ -421190,6 +421296,7 @@ var require_addon_registry_service = __commonJS({
     exports.AddonRegistryService = void 0;
     exports.shouldEvictMissingOnDisk = shouldEvictMissingOnDisk;
     exports.addonUpdatePayload = addonUpdatePayload;
+    exports.parseDataPlaneEndpoints = parseDataPlaneEndpoints;
     exports.shouldEmitProviderRegisteredReady = shouldEmitProviderRegisteredReady;
     var node_crypto_1 = __require("crypto");
     var fs = __importStar(__require("fs"));
@@ -421308,9 +421415,30 @@ var require_addon_registry_service = __commonJS({
         if (typeof prefix !== "string" || typeof baseUrl !== "string" || typeof secret !== "string") {
           throw new Error("data-planes: endpoint descriptor missing prefix/baseUrl/secret");
         }
-        return { prefix, access: asRouteAccess(Reflect.get(entry, "access")), baseUrl, secret };
+        const share = parseDataPlaneShare(Reflect.get(entry, "share"));
+        return {
+          prefix,
+          access: asRouteAccess(Reflect.get(entry, "access")),
+          baseUrl,
+          secret,
+          ...share !== void 0 ? { share } : {}
+        };
       });
     }
+    function parseDataPlaneShare(value) {
+      if (value === void 0)
+        return void 0;
+      if (!Array.isArray(value))
+        throw new Error("data-planes: `share` is not an array");
+      return value.map((kind) => {
+        if (!isShareViewKind(kind))
+          throw new Error(`data-planes: unknown share kind ${String(kind)}`);
+        return kind;
+      });
+    }
+    function isShareViewKind(value) {
+      return typeof value === "string" && types_1.SHARE_VIEW_KINDS.includes(value);
+    }
     function shouldEmitProviderRegisteredReady(capability) {
       return capability !== "platform-probe";
     }
@@ -425893,6 +426021,7 @@ var require_moleculer_service = __commonJS({
             // multi-node addon cap is covered with no change here.
             isCoreServiceCap: (capName) => (0, core_cap_bridge_js_1.isCoreServiceCapName)(capName),
             logger: {
+              debug: (msg, meta) => logger.debug(msg, meta !== null && meta !== void 0 ? { meta } : void 0),
               warn: (msg, meta) => logger.warn(msg, meta !== null && meta !== void 0 ? { meta } : void 0)
             }
           });
@@ -428169,6 +428298,7 @@ var require_main4 = __commonJS({
     var trpc_error_device_tags_1 = require_trpc_error_device_tags();
     var ws_request_census_1 = require_ws_request_census();
     var addon_route_jwt_gate_js_1 = require_addon_route_jwt_gate();
+    var addon_route_share_gate_js_1 = require_addon_route_share_gate();
     var session_cookie_js_1 = require_session_cookie();
     var boot_config_1 = require_boot_config();
     var integration_id_backfill_1 = require_integration_id_backfill();
@@ -428720,6 +428850,7 @@ var require_main4 = __commonJS({
           const dpMatch = dataPlaneRegistry.match(addonId, subPath);
           if (dpMatch) {
             const access = dpMatch.endpoint.access;
+            let shareHeaders = null;
             if (access !== "public") {
               const authHeader = request.headers.authorization;
               const cookieToken = request.cookies?.[session_cookie_js_1.SESSION_COOKIE];
@@ -428727,7 +428858,13 @@ var require_main4 = __commonJS({
                 return reply.status(401).send({ error: "Unauthorized" });
               }
               const token2 = authHeader ? authHeader.replace("Bearer ", "") : cookieToken;
-              if (token2.startsWith("cst_")) {
+              if (token2.startsWith("csv_")) {
+                const record = await shareTokenService.validate(token2);
+                const gate = (0, addon_route_share_gate_js_1.gateAddonShareToken)({ record, endpoint: dpMatch.endpoint });
+                if (!gate.ok)
+                  return reply.status(gate.status).send({ error: gate.error });
+                shareHeaders = gate.headers;
+              } else if (token2.startsWith("cst_")) {
                 const userMgmt = capabilityRegistry?.getSingleton("user-management");
                 if (!userMgmt)
                   return reply.status(503).send({ error: "User management not available" });
@@ -428752,6 +428889,12 @@ var require_main4 = __commonJS({
             const qIdx = request.url.indexOf("?");
             const queryString = qIdx >= 0 ? request.url.slice(qIdx) : "";
             const upstreamPath = `/${subPath}${queryString}`;
+            for (const name of Object.keys(request.raw.headers)) {
+              if (name.toLowerCase() === addon_route_share_gate_js_1.SHARE_KIND_HEADER || name.toLowerCase() === addon_route_share_gate_js_1.SHARE_DEVICES_HEADER)
+                delete request.raw.headers[name];
+            }
+            if (shareHeaders !== null)
+              Object.assign(request.raw.headers, shareHeaders);
             reply.hijack();
             const replayBody = request.body === void 0 ? void 0 : Buffer.isBuffer(request.body) ? request.body : Buffer.from(typeof request.body === "string" ? request.body : JSON.stringify(request.body));
             (0, system_1.proxyToUpstream)({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.96",
+  "version": "1.2.98",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",