camstack 1.2.97 → 1.2.98

package/dist/{chunk-MKOPVONP.js → chunk-GW5K6RH3.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-CbBk_3GJ.mjs
+// ../types/dist/sleep-BQJlnUOJ.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-MKOPVONP.js";
+} from "./chunk-GW5K6RH3.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-PPFRDC5W.js");
+  await import("./launcher-VHGRUBGI.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-PPFRDC5W.js");
+  await import("./launcher-VHGRUBGI.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-BRZ4GUUB.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-EV3TAGEL.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-BRZ4GUUB.js → discover-EV3TAGEL.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-MKOPVONP.js";
+} from "./chunk-GW5K6RH3.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,

package/dist/{launcher-PPFRDC5W.js → launcher-VHGRUBGI.js}

@@ -107513,9 +107513,9 @@ var require_event_category_BaEgqJNv = __commonJS({
   }
 });
 
-// ../types/dist/sleep-BtIF8lWc.js
-var require_sleep_BtIF8lWc = __commonJS({
-  "../types/dist/sleep-BtIF8lWc.js"(exports) {
+// ../types/dist/sleep-BCUreN6s.js
+var require_sleep_BCUreN6s = __commonJS({
+  "../types/dist/sleep-BCUreN6s.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_BaEgqJNv();
     var zod = require_zod();
@@ -108507,6 +108507,7 @@ var require_sleep_BtIF8lWc = __commonJS({
       }
     };
     var DATAPLANE_SECRET_HEADER = "x-camstack-dataplane-secret";
+    var SHARE_VIEW_KINDS = ["grid-view", "events-view"];
     var CamProfileSchema = zod.z.enum([
       "high",
       "mid",
@@ -110875,6 +110876,12 @@ var require_sleep_BtIF8lWc = __commonJS({
         return ReadinessTimeoutError;
       }
     });
+    Object.defineProperty(exports, "SHARE_VIEW_KINDS", {
+      enumerable: true,
+      get: function() {
+        return SHARE_VIEW_KINDS;
+      }
+    });
     Object.defineProperty(exports, "StreamSourceEntrySchema", {
       enumerable: true,
       get: function() {
@@ -111196,7 +111203,7 @@ var require_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_BtIF8lWc();
+    var require_sleep = require_sleep_BCUreN6s();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -118080,9 +118087,9 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-CdIVy85V.js
-var require_manifest_system_deps_CdIVy85V = __commonJS({
-  "../system/dist/manifest-system-deps-CdIVy85V.js"(exports) {
+// ../system/dist/manifest-system-deps-DvY1bY_n.js
+var require_manifest_system_deps_DvY1bY_n = __commonJS({
+  "../system/dist/manifest-system-deps-DvY1bY_n.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
     require_hub_cap_forward_DmHNjbB0();
@@ -118730,7 +118737,8 @@ var require_manifest_system_deps_CdIVy85V = __commonJS({
           prefix,
           access: entry.access,
           baseUrl,
-          secret
+          secret,
+          ...entry.share !== void 0 ? { share: entry.share } : {}
         }));
         args.sink?.set(args.addonId, endpoints);
       };
@@ -118740,7 +118748,8 @@ var require_manifest_system_deps_CdIVy85V = __commonJS({
         await ensureServer();
         served.set(prefix, {
           access: options.access,
-          handler: options.handler
+          handler: options.handler,
+          ...options.share !== void 0 ? { share: options.share } : {}
         });
         publish();
         args.logger.info("data-plane endpoint served", { meta: {
@@ -130180,7 +130189,7 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_file_data_plane = require_file_data_plane_DO8KbxCe();
     var require_tls$1 = require_tls_BxQlomxd();
-    var require_manifest_system_deps = require_manifest_system_deps_CdIVy85V();
+    var require_manifest_system_deps = require_manifest_system_deps_DvY1bY_n();
     var require_resource_monitor = require_resource_monitor_CdnzxBLP();
     var require_custom_action_registry = require_custom_action_registry_jY0NOZK8();
     var zod = require_zod();
@@ -211270,7 +211279,7 @@ var require_dist4 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_BtIF8lWc();
+    var require_sleep = require_sleep_BCUreN6s();
     var require_canonical_hash = require_canonical_hash_DNV8S5ET();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
@@ -240214,7 +240223,15 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           if (!Class) throw new Error(`no device class registered for type "${saved.type}"`);
           if (saved.parentDeviceId !== null && !restored.has(saved.parentDeviceId)) throw new Error(`parent device ${saved.parentDeviceId} not restored`);
           await this.healSavedConfig(saved, savedDevices);
-          await this.ctx.kernel.devices.create(saved.stableId, Class, {}, saved.parentDeviceId);
+          try {
+            await this.ctx.kernel.devices.create(saved.stableId, Class, {}, saved.parentDeviceId);
+          } catch (err) {
+            if (!(await this.ctx.kernel.devices.getAll()).some((device2) => device2.stableId === saved.stableId)) throw err;
+            this.ctx.logger.debug("Restore row came to life during its own dial \u2014 kept", { tags: {
+              deviceId: saved.id,
+              stableId: saved.stableId
+            } });
+          }
           restored.add(saved.id);
         };
         const topLevel = savedDevices.filter((saved) => saved.parentDeviceId === null);
@@ -255389,6 +255406,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.SCOPE_PRESETS = SCOPE_PRESETS;
     exports.SENSOR_FEATURES = SENSOR_FEATURES;
     exports.SENSOR_MAP = SENSOR_MAP;
+    exports.SHARE_VIEW_KINDS = require_sleep.SHARE_VIEW_KINDS;
     exports.SOURCE_CAPS = SOURCE_CAPS;
     exports.SOURCE_CAP_ACTIVE_FIELD = SOURCE_CAP_ACTIVE_FIELD;
     exports.SOURCE_CAP_CHANGED_AT_FIELD = SOURCE_CAP_CHANGED_AT_FIELD;
@@ -415493,6 +415511,7 @@ var require_share_token_service = __commonJS({
     })();
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.ShareTokenService = exports.ShareTokenRecordSchema = exports.ShareTokenScopeSchema = exports.SHARE_TOKEN_MAX_DEVICES = exports.SHARE_TOKEN_TTL_DEFAULT_SEC = exports.SHARE_TOKEN_TTL_MAX_SEC = exports.SHARE_TOKEN_TTL_MIN_SEC = exports.SHARE_TOKEN_PREFIX = void 0;
+    var types_1 = require_dist4();
     var crypto2 = __importStar(__require("crypto"));
     var zod_1 = require_zod();
     var SHARE_TOKENS_COLLECTION = "share_view_tokens";
@@ -415506,7 +415525,7 @@ var require_share_token_service = __commonJS({
     exports.SHARE_TOKEN_TTL_DEFAULT_SEC = 7 * 24 * 60 * 60;
     exports.SHARE_TOKEN_MAX_DEVICES = 64;
     exports.ShareTokenScopeSchema = zod_1.z.object({
-      kind: zod_1.z.enum(["grid-view", "events-view"]),
+      kind: zod_1.z.enum(types_1.SHARE_VIEW_KINDS),
       deviceIds: zod_1.z.array(zod_1.z.number().int().nonnegative()).min(1).max(exports.SHARE_TOKEN_MAX_DEVICES)
     });
     exports.ShareTokenRecordSchema = zod_1.z.object({
@@ -420202,6 +420221,44 @@ var require_addon_route_jwt_gate = __commonJS({
   }
 });
 
+// ../../server/backend/dist/auth/addon-route-share-gate.js
+var require_addon_route_share_gate = __commonJS({
+  "../../server/backend/dist/auth/addon-route-share-gate.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.SHARE_DEVICES_HEADER = exports.SHARE_KIND_HEADER = void 0;
+    exports.gateAddonShareToken = gateAddonShareToken;
+    exports.stripShareHeaders = stripShareHeaders;
+    exports.SHARE_KIND_HEADER = "x-camstack-share-kind";
+    exports.SHARE_DEVICES_HEADER = "x-camstack-share-devices";
+    function gateAddonShareToken(input) {
+      if (input.record === null)
+        return { ok: false, status: 401, error: "Invalid token" };
+      const kind = input.record.scope.kind;
+      if (!(input.endpoint.share ?? []).includes(kind)) {
+        return { ok: false, status: 403, error: "Share token not accepted here" };
+      }
+      return {
+        ok: true,
+        headers: {
+          [exports.SHARE_KIND_HEADER]: kind,
+          [exports.SHARE_DEVICES_HEADER]: input.record.scope.deviceIds.join(",")
+        }
+      };
+    }
+    function stripShareHeaders(headers) {
+      const out = {};
+      for (const [key, value] of Object.entries(headers)) {
+        const lower = key.toLowerCase();
+        if (lower === exports.SHARE_KIND_HEADER || lower === exports.SHARE_DEVICES_HEADER)
+          continue;
+        out[key] = value;
+      }
+      return out;
+    }
+  }
+});
+
 // ../../server/backend/dist/core/config/config.schema.js
 var require_config_schema = __commonJS({
   "../../server/backend/dist/core/config/config.schema.js"(exports) {
@@ -421239,6 +421296,7 @@ var require_addon_registry_service = __commonJS({
     exports.AddonRegistryService = void 0;
     exports.shouldEvictMissingOnDisk = shouldEvictMissingOnDisk;
     exports.addonUpdatePayload = addonUpdatePayload;
+    exports.parseDataPlaneEndpoints = parseDataPlaneEndpoints;
     exports.shouldEmitProviderRegisteredReady = shouldEmitProviderRegisteredReady;
     var node_crypto_1 = __require("crypto");
     var fs = __importStar(__require("fs"));
@@ -421357,9 +421415,30 @@ var require_addon_registry_service = __commonJS({
         if (typeof prefix !== "string" || typeof baseUrl !== "string" || typeof secret !== "string") {
           throw new Error("data-planes: endpoint descriptor missing prefix/baseUrl/secret");
         }
-        return { prefix, access: asRouteAccess(Reflect.get(entry, "access")), baseUrl, secret };
+        const share = parseDataPlaneShare(Reflect.get(entry, "share"));
+        return {
+          prefix,
+          access: asRouteAccess(Reflect.get(entry, "access")),
+          baseUrl,
+          secret,
+          ...share !== void 0 ? { share } : {}
+        };
       });
     }
+    function parseDataPlaneShare(value) {
+      if (value === void 0)
+        return void 0;
+      if (!Array.isArray(value))
+        throw new Error("data-planes: `share` is not an array");
+      return value.map((kind) => {
+        if (!isShareViewKind(kind))
+          throw new Error(`data-planes: unknown share kind ${String(kind)}`);
+        return kind;
+      });
+    }
+    function isShareViewKind(value) {
+      return typeof value === "string" && types_1.SHARE_VIEW_KINDS.includes(value);
+    }
     function shouldEmitProviderRegisteredReady(capability) {
       return capability !== "platform-probe";
     }
@@ -428219,6 +428298,7 @@ var require_main4 = __commonJS({
     var trpc_error_device_tags_1 = require_trpc_error_device_tags();
     var ws_request_census_1 = require_ws_request_census();
     var addon_route_jwt_gate_js_1 = require_addon_route_jwt_gate();
+    var addon_route_share_gate_js_1 = require_addon_route_share_gate();
     var session_cookie_js_1 = require_session_cookie();
     var boot_config_1 = require_boot_config();
     var integration_id_backfill_1 = require_integration_id_backfill();
@@ -428770,6 +428850,7 @@ var require_main4 = __commonJS({
           const dpMatch = dataPlaneRegistry.match(addonId, subPath);
           if (dpMatch) {
             const access = dpMatch.endpoint.access;
+            let shareHeaders = null;
             if (access !== "public") {
               const authHeader = request.headers.authorization;
               const cookieToken = request.cookies?.[session_cookie_js_1.SESSION_COOKIE];
@@ -428777,7 +428858,13 @@ var require_main4 = __commonJS({
                 return reply.status(401).send({ error: "Unauthorized" });
               }
               const token2 = authHeader ? authHeader.replace("Bearer ", "") : cookieToken;
-              if (token2.startsWith("cst_")) {
+              if (token2.startsWith("csv_")) {
+                const record = await shareTokenService.validate(token2);
+                const gate = (0, addon_route_share_gate_js_1.gateAddonShareToken)({ record, endpoint: dpMatch.endpoint });
+                if (!gate.ok)
+                  return reply.status(gate.status).send({ error: gate.error });
+                shareHeaders = gate.headers;
+              } else if (token2.startsWith("cst_")) {
                 const userMgmt = capabilityRegistry?.getSingleton("user-management");
                 if (!userMgmt)
                   return reply.status(503).send({ error: "User management not available" });
@@ -428802,6 +428889,12 @@ var require_main4 = __commonJS({
             const qIdx = request.url.indexOf("?");
             const queryString = qIdx >= 0 ? request.url.slice(qIdx) : "";
             const upstreamPath = `/${subPath}${queryString}`;
+            for (const name of Object.keys(request.raw.headers)) {
+              if (name.toLowerCase() === addon_route_share_gate_js_1.SHARE_KIND_HEADER || name.toLowerCase() === addon_route_share_gate_js_1.SHARE_DEVICES_HEADER)
+                delete request.raw.headers[name];
+            }
+            if (shareHeaders !== null)
+              Object.assign(request.raw.headers, shareHeaders);
             reply.hijack();
             const replayBody = request.body === void 0 ? void 0 : Buffer.isBuffer(request.body) ? request.body : Buffer.from(typeof request.body === "string" ? request.body : JSON.stringify(request.body));
             (0, system_1.proxyToUpstream)({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.97",
+  "version": "1.2.98",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",