camstack 1.2.97 → 1.2.99

package/dist/{chunk-MKOPVONP.js → chunk-MVI45IY3.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-CbBk_3GJ.mjs
+// ../types/dist/sleep-BQJlnUOJ.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -28593,6 +28593,14 @@ var AgentPipelineSettingsSchema = external_exports.object({
   /** Node is eligible to be the ingest / source-owner (serve the restream). */
   ingest: external_exports.boolean().optional(),
   /**
+  * This node's decode RAM budget, MB. Wins over the cluster
+  * `nodeDecodeBudgetMb`; absent, the runner derives a share of the node's
+  * own RAM unless the operator moved the cluster value (D365).
+  */
+  decodeBudgetMb: external_exports.number().int().min(1024).max(65536).optional(),
+  /** This node's live decode-worker cap. Wins over the cluster `maxLiveDecodeWorkers`. */
+  maxLiveDecodeWorkers: external_exports.number().int().min(1).max(32).optional(),
+  /**
   * Operator override for the LAN host a cross-node decoder dials to reach
   * THIS node's restream (Cluster UI). Absent → auto-detect: a remote runner
   * falls back to its `CAMSTACK_HUB_URL`-derived host (the Moleculer address
@@ -29156,6 +29164,20 @@ var pipelineOrchestratorCapability = {
       auth: "admin"
     }),
     /**
+    * Size ONE node's decode admission: its RAM budget and live-worker cap.
+    * `null` clears a limit (back to the cluster setting or the RAM-derived
+    * default); an omitted key leaves it alone. Read by the node's runner on
+    * its next lease refresh (D365).
+    */
+    setAgentDecodeLimits: method(external_exports.object({
+      agentNodeId: external_exports.string(),
+      decodeBudgetMb: external_exports.number().int().min(1024).max(65536).nullable().optional(),
+      maxLiveDecodeWorkers: external_exports.number().int().min(1).max(32).nullable().optional()
+    }), external_exports.object({ success: external_exports.literal(true) }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
     * Set (or clear) the operator override for the LAN host a cross-node
     * decoder dials to reach this node's restream. Pass a non-empty string to
     * override the auto-detected address (the runner's `CAMSTACK_HUB_URL`
@@ -43423,6 +43445,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "pipelineOrchestrator.setAgentDecodeLimits": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "pipelineOrchestrator.setAgentDetectWeight": {
     capName: "pipeline-orchestrator",
     capScope: "system",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-MKOPVONP.js";
+} from "./chunk-MVI45IY3.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-PPFRDC5W.js");
+  await import("./launcher-F62YE57J.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-PPFRDC5W.js");
+  await import("./launcher-F62YE57J.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-BRZ4GUUB.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-F3GZOIXQ.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-BRZ4GUUB.js → discover-F3GZOIXQ.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-MKOPVONP.js";
+} from "./chunk-MVI45IY3.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,

package/dist/{launcher-PPFRDC5W.js → launcher-F62YE57J.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-DlL8iWQo.js
-var require_dist_DlL8iWQo = __commonJS({
-  "../system/dist/dist-DlL8iWQo.js"(exports) {
+// ../system/dist/dist-2wpm3tOu.js
+var require_dist_2wpm3tOu = __commonJS({
+  "../system/dist/dist-2wpm3tOu.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -39155,6 +39155,14 @@ var require_dist_DlL8iWQo = __commonJS({
       /** Node is eligible to be the ingest / source-owner (serve the restream). */
       ingest: zod.z.boolean().optional(),
       /**
+      * This node's decode RAM budget, MB. Wins over the cluster
+      * `nodeDecodeBudgetMb`; absent, the runner derives a share of the node's
+      * own RAM unless the operator moved the cluster value (D365).
+      */
+      decodeBudgetMb: zod.z.number().int().min(1024).max(65536).optional(),
+      /** This node's live decode-worker cap. Wins over the cluster `maxLiveDecodeWorkers`. */
+      maxLiveDecodeWorkers: zod.z.number().int().min(1).max(32).optional(),
+      /**
       * Operator override for the LAN host a cross-node decoder dials to reach
       * THIS node's restream (Cluster UI). Absent → auto-detect: a remote runner
       * falls back to its `CAMSTACK_HUB_URL`-derived host (the Moleculer address
@@ -39717,6 +39725,20 @@ var require_dist_DlL8iWQo = __commonJS({
           auth: "admin"
         }),
         /**
+        * Size ONE node's decode admission: its RAM budget and live-worker cap.
+        * `null` clears a limit (back to the cluster setting or the RAM-derived
+        * default); an omitted key leaves it alone. Read by the node's runner on
+        * its next lease refresh (D365).
+        */
+        setAgentDecodeLimits: method(zod.z.object({
+          agentNodeId: zod.z.string(),
+          decodeBudgetMb: zod.z.number().int().min(1024).max(65536).nullable().optional(),
+          maxLiveDecodeWorkers: zod.z.number().int().min(1).max(32).nullable().optional()
+        }), zod.z.object({ success: zod.z.literal(true) }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        /**
         * Set (or clear) the operator override for the LAN host a cross-node
         * decoder dials to reach this node's restream. Pass a non-empty string to
         * override the auto-detected address (the runner's `CAMSTACK_HUB_URL`
@@ -54805,6 +54827,12 @@ var require_dist_DlL8iWQo = __commonJS({
         addonId: null,
         access: "create"
       },
+      "pipelineOrchestrator.setAgentDecodeLimits": {
+        capName: "pipeline-orchestrator",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "pipelineOrchestrator.setAgentDetectWeight": {
         capName: "pipeline-orchestrator",
         capScope: "system",
@@ -60118,7 +60146,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -60937,7 +60965,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -61031,7 +61059,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -61928,11 +61956,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-B5wVSU65.js
-var require_retired_settings_keys_B5wVSU65 = __commonJS({
-  "../system/dist/retired-settings-keys-B5wVSU65.js"(exports) {
+// ../system/dist/retired-settings-keys-D6gkOkcN.js
+var require_retired_settings_keys_D6gkOkcN = __commonJS({
+  "../system/dist/retired-settings-keys-D6gkOkcN.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -64146,8 +64174,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
-    var require_retired_settings_keys = require_retired_settings_keys_B5wVSU65();
+    var require_dist10 = require_dist_2wpm3tOu();
+    var require_retired_settings_keys = require_retired_settings_keys_D6gkOkcN();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -69662,7 +69690,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -69799,7 +69827,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -69989,7 +70017,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -77802,7 +77830,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -78367,7 +78395,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -80951,7 +80979,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -82067,8 +82095,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
-    var require_retired_settings_keys = require_retired_settings_keys_B5wVSU65();
+    var require_dist10 = require_dist_2wpm3tOu();
+    var require_retired_settings_keys = require_retired_settings_keys_D6gkOkcN();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -84558,7 +84586,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -87509,7 +87537,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -105570,7 +105598,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -107513,9 +107541,9 @@ var require_event_category_BaEgqJNv = __commonJS({
   }
 });
 
-// ../types/dist/sleep-BtIF8lWc.js
-var require_sleep_BtIF8lWc = __commonJS({
-  "../types/dist/sleep-BtIF8lWc.js"(exports) {
+// ../types/dist/sleep-BCUreN6s.js
+var require_sleep_BCUreN6s = __commonJS({
+  "../types/dist/sleep-BCUreN6s.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_BaEgqJNv();
     var zod = require_zod();
@@ -108507,6 +108535,7 @@ var require_sleep_BtIF8lWc = __commonJS({
       }
     };
     var DATAPLANE_SECRET_HEADER = "x-camstack-dataplane-secret";
+    var SHARE_VIEW_KINDS = ["grid-view", "events-view"];
     var CamProfileSchema = zod.z.enum([
       "high",
       "mid",
@@ -110875,6 +110904,12 @@ var require_sleep_BtIF8lWc = __commonJS({
         return ReadinessTimeoutError;
       }
     });
+    Object.defineProperty(exports, "SHARE_VIEW_KINDS", {
+      enumerable: true,
+      get: function() {
+        return SHARE_VIEW_KINDS;
+      }
+    });
     Object.defineProperty(exports, "StreamSourceEntrySchema", {
       enumerable: true,
       get: function() {
@@ -111196,7 +111231,7 @@ var require_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_BtIF8lWc();
+    var require_sleep = require_sleep_BCUreN6s();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -118080,9 +118115,9 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-CdIVy85V.js
-var require_manifest_system_deps_CdIVy85V = __commonJS({
-  "../system/dist/manifest-system-deps-CdIVy85V.js"(exports) {
+// ../system/dist/manifest-system-deps-DvY1bY_n.js
+var require_manifest_system_deps_DvY1bY_n = __commonJS({
+  "../system/dist/manifest-system-deps-DvY1bY_n.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
     require_hub_cap_forward_DmHNjbB0();
@@ -118730,7 +118765,8 @@ var require_manifest_system_deps_CdIVy85V = __commonJS({
           prefix,
           access: entry.access,
           baseUrl,
-          secret
+          secret,
+          ...entry.share !== void 0 ? { share: entry.share } : {}
         }));
         args.sink?.set(args.addonId, endpoints);
       };
@@ -118740,7 +118776,8 @@ var require_manifest_system_deps_CdIVy85V = __commonJS({
         await ensureServer();
         served.set(prefix, {
           access: options.access,
-          handler: options.handler
+          handler: options.handler,
+          ...options.share !== void 0 ? { share: options.share } : {}
         });
         publish();
         args.logger.info("data-plane endpoint served", { meta: {
@@ -130153,7 +130190,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DlL8iWQo();
+    var require_dist10 = require_dist_2wpm3tOu();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -130180,7 +130217,7 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_file_data_plane = require_file_data_plane_DO8KbxCe();
     var require_tls$1 = require_tls_BxQlomxd();
-    var require_manifest_system_deps = require_manifest_system_deps_CdIVy85V();
+    var require_manifest_system_deps = require_manifest_system_deps_DvY1bY_n();
     var require_resource_monitor = require_resource_monitor_CdnzxBLP();
     var require_custom_action_registry = require_custom_action_registry_jY0NOZK8();
     var zod = require_zod();
@@ -211270,7 +211307,7 @@ var require_dist4 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_BtIF8lWc();
+    var require_sleep = require_sleep_BCUreN6s();
     var require_canonical_hash = require_canonical_hash_DNV8S5ET();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
@@ -227614,6 +227651,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** Node is eligible to be the ingest / source-owner (serve the restream). */
       ingest: zod.z.boolean().optional(),
       /**
+      * This node's decode RAM budget, MB. Wins over the cluster
+      * `nodeDecodeBudgetMb`; absent, the runner derives a share of the node's
+      * own RAM unless the operator moved the cluster value (D365).
+      */
+      decodeBudgetMb: zod.z.number().int().min(1024).max(65536).optional(),
+      /** This node's live decode-worker cap. Wins over the cluster `maxLiveDecodeWorkers`. */
+      maxLiveDecodeWorkers: zod.z.number().int().min(1).max(32).optional(),
+      /**
       * Operator override for the LAN host a cross-node decoder dials to reach
       * THIS node's restream (Cluster UI). Absent → auto-detect: a remote runner
       * falls back to its `CAMSTACK_HUB_URL`-derived host (the Moleculer address
@@ -228177,6 +228222,20 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           auth: "admin"
         }),
         /**
+        * Size ONE node's decode admission: its RAM budget and live-worker cap.
+        * `null` clears a limit (back to the cluster setting or the RAM-derived
+        * default); an omitted key leaves it alone. Read by the node's runner on
+        * its next lease refresh (D365).
+        */
+        setAgentDecodeLimits: require_sleep.method(zod.z.object({
+          agentNodeId: zod.z.string(),
+          decodeBudgetMb: zod.z.number().int().min(1024).max(65536).nullable().optional(),
+          maxLiveDecodeWorkers: zod.z.number().int().min(1).max(32).nullable().optional()
+        }), zod.z.object({ success: zod.z.literal(true) }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        /**
         * Set (or clear) the operator override for the LAN host a cross-node
         * decoder dials to reach this node's restream. Pass a non-empty string to
         * override the auto-detected address (the runner's `CAMSTACK_HUB_URL`
@@ -240214,7 +240273,15 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           if (!Class) throw new Error(`no device class registered for type "${saved.type}"`);
           if (saved.parentDeviceId !== null && !restored.has(saved.parentDeviceId)) throw new Error(`parent device ${saved.parentDeviceId} not restored`);
           await this.healSavedConfig(saved, savedDevices);
-          await this.ctx.kernel.devices.create(saved.stableId, Class, {}, saved.parentDeviceId);
+          try {
+            await this.ctx.kernel.devices.create(saved.stableId, Class, {}, saved.parentDeviceId);
+          } catch (err) {
+            if (!(await this.ctx.kernel.devices.getAll()).some((device2) => device2.stableId === saved.stableId)) throw err;
+            this.ctx.logger.debug("Restore row came to life during its own dial \u2014 kept", { tags: {
+              deviceId: saved.id,
+              stableId: saved.stableId
+            } });
+          }
           restored.add(saved.id);
         };
         const topLevel = savedDevices.filter((saved) => saved.parentDeviceId === null);
@@ -246580,6 +246647,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "pipelineOrchestrator.setAgentDecodeLimits": {
+        capName: "pipeline-orchestrator",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "pipelineOrchestrator.setAgentDetectWeight": {
         capName: "pipeline-orchestrator",
         capScope: "system",
@@ -251694,6 +251767,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           setAgentMaxCameras: (input) => dispatch("pipelineOrchestrator", "setAgentMaxCameras", "mutation", input),
           setAgentDetectWeight: (input) => dispatch("pipelineOrchestrator", "setAgentDetectWeight", "mutation", input),
           setAgentCapabilities: (input) => dispatch("pipelineOrchestrator", "setAgentCapabilities", "mutation", input),
+          setAgentDecodeLimits: (input) => dispatch("pipelineOrchestrator", "setAgentDecodeLimits", "mutation", input),
           setAgentReachableHost: (input) => dispatch("pipelineOrchestrator", "setAgentReachableHost", "mutation", input),
           setAgentInferenceDevices: (input) => dispatch("pipelineOrchestrator", "setAgentInferenceDevices", "mutation", input),
           getNodeInferenceDevices: (input) => dispatch("pipelineOrchestrator", "getNodeInferenceDevices", "query", input),
@@ -255389,6 +255463,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.SCOPE_PRESETS = SCOPE_PRESETS;
     exports.SENSOR_FEATURES = SENSOR_FEATURES;
     exports.SENSOR_MAP = SENSOR_MAP;
+    exports.SHARE_VIEW_KINDS = require_sleep.SHARE_VIEW_KINDS;
     exports.SOURCE_CAPS = SOURCE_CAPS;
     exports.SOURCE_CAP_ACTIVE_FIELD = SOURCE_CAP_ACTIVE_FIELD;
     exports.SOURCE_CAP_CHANGED_AT_FIELD = SOURCE_CAP_CHANGED_AT_FIELD;
@@ -415493,6 +415568,7 @@ var require_share_token_service = __commonJS({
     })();
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.ShareTokenService = exports.ShareTokenRecordSchema = exports.ShareTokenScopeSchema = exports.SHARE_TOKEN_MAX_DEVICES = exports.SHARE_TOKEN_TTL_DEFAULT_SEC = exports.SHARE_TOKEN_TTL_MAX_SEC = exports.SHARE_TOKEN_TTL_MIN_SEC = exports.SHARE_TOKEN_PREFIX = void 0;
+    var types_1 = require_dist4();
     var crypto2 = __importStar(__require("crypto"));
     var zod_1 = require_zod();
     var SHARE_TOKENS_COLLECTION = "share_view_tokens";
@@ -415506,7 +415582,7 @@ var require_share_token_service = __commonJS({
     exports.SHARE_TOKEN_TTL_DEFAULT_SEC = 7 * 24 * 60 * 60;
     exports.SHARE_TOKEN_MAX_DEVICES = 64;
     exports.ShareTokenScopeSchema = zod_1.z.object({
-      kind: zod_1.z.enum(["grid-view", "events-view"]),
+      kind: zod_1.z.enum(types_1.SHARE_VIEW_KINDS),
       deviceIds: zod_1.z.array(zod_1.z.number().int().nonnegative()).min(1).max(exports.SHARE_TOKEN_MAX_DEVICES)
     });
     exports.ShareTokenRecordSchema = zod_1.z.object({
@@ -420202,6 +420278,44 @@ var require_addon_route_jwt_gate = __commonJS({
   }
 });
 
+// ../../server/backend/dist/auth/addon-route-share-gate.js
+var require_addon_route_share_gate = __commonJS({
+  "../../server/backend/dist/auth/addon-route-share-gate.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.SHARE_DEVICES_HEADER = exports.SHARE_KIND_HEADER = void 0;
+    exports.gateAddonShareToken = gateAddonShareToken;
+    exports.stripShareHeaders = stripShareHeaders;
+    exports.SHARE_KIND_HEADER = "x-camstack-share-kind";
+    exports.SHARE_DEVICES_HEADER = "x-camstack-share-devices";
+    function gateAddonShareToken(input) {
+      if (input.record === null)
+        return { ok: false, status: 401, error: "Invalid token" };
+      const kind = input.record.scope.kind;
+      if (!(input.endpoint.share ?? []).includes(kind)) {
+        return { ok: false, status: 403, error: "Share token not accepted here" };
+      }
+      return {
+        ok: true,
+        headers: {
+          [exports.SHARE_KIND_HEADER]: kind,
+          [exports.SHARE_DEVICES_HEADER]: input.record.scope.deviceIds.join(",")
+        }
+      };
+    }
+    function stripShareHeaders(headers) {
+      const out = {};
+      for (const [key, value] of Object.entries(headers)) {
+        const lower = key.toLowerCase();
+        if (lower === exports.SHARE_KIND_HEADER || lower === exports.SHARE_DEVICES_HEADER)
+          continue;
+        out[key] = value;
+      }
+      return out;
+    }
+  }
+});
+
 // ../../server/backend/dist/core/config/config.schema.js
 var require_config_schema = __commonJS({
   "../../server/backend/dist/core/config/config.schema.js"(exports) {
@@ -421239,6 +421353,7 @@ var require_addon_registry_service = __commonJS({
     exports.AddonRegistryService = void 0;
     exports.shouldEvictMissingOnDisk = shouldEvictMissingOnDisk;
     exports.addonUpdatePayload = addonUpdatePayload;
+    exports.parseDataPlaneEndpoints = parseDataPlaneEndpoints;
     exports.shouldEmitProviderRegisteredReady = shouldEmitProviderRegisteredReady;
     var node_crypto_1 = __require("crypto");
     var fs = __importStar(__require("fs"));
@@ -421357,9 +421472,30 @@ var require_addon_registry_service = __commonJS({
         if (typeof prefix !== "string" || typeof baseUrl !== "string" || typeof secret !== "string") {
           throw new Error("data-planes: endpoint descriptor missing prefix/baseUrl/secret");
         }
-        return { prefix, access: asRouteAccess(Reflect.get(entry, "access")), baseUrl, secret };
+        const share = parseDataPlaneShare(Reflect.get(entry, "share"));
+        return {
+          prefix,
+          access: asRouteAccess(Reflect.get(entry, "access")),
+          baseUrl,
+          secret,
+          ...share !== void 0 ? { share } : {}
+        };
       });
     }
+    function parseDataPlaneShare(value) {
+      if (value === void 0)
+        return void 0;
+      if (!Array.isArray(value))
+        throw new Error("data-planes: `share` is not an array");
+      return value.map((kind) => {
+        if (!isShareViewKind(kind))
+          throw new Error(`data-planes: unknown share kind ${String(kind)}`);
+        return kind;
+      });
+    }
+    function isShareViewKind(value) {
+      return typeof value === "string" && types_1.SHARE_VIEW_KINDS.includes(value);
+    }
     function shouldEmitProviderRegisteredReady(capability) {
       return capability !== "platform-probe";
     }
@@ -428219,6 +428355,7 @@ var require_main4 = __commonJS({
     var trpc_error_device_tags_1 = require_trpc_error_device_tags();
     var ws_request_census_1 = require_ws_request_census();
     var addon_route_jwt_gate_js_1 = require_addon_route_jwt_gate();
+    var addon_route_share_gate_js_1 = require_addon_route_share_gate();
     var session_cookie_js_1 = require_session_cookie();
     var boot_config_1 = require_boot_config();
     var integration_id_backfill_1 = require_integration_id_backfill();
@@ -428770,6 +428907,7 @@ var require_main4 = __commonJS({
           const dpMatch = dataPlaneRegistry.match(addonId, subPath);
           if (dpMatch) {
             const access = dpMatch.endpoint.access;
+            let shareHeaders = null;
             if (access !== "public") {
               const authHeader = request.headers.authorization;
               const cookieToken = request.cookies?.[session_cookie_js_1.SESSION_COOKIE];
@@ -428777,7 +428915,13 @@ var require_main4 = __commonJS({
                 return reply.status(401).send({ error: "Unauthorized" });
               }
               const token2 = authHeader ? authHeader.replace("Bearer ", "") : cookieToken;
-              if (token2.startsWith("cst_")) {
+              if (token2.startsWith("csv_")) {
+                const record = await shareTokenService.validate(token2);
+                const gate = (0, addon_route_share_gate_js_1.gateAddonShareToken)({ record, endpoint: dpMatch.endpoint });
+                if (!gate.ok)
+                  return reply.status(gate.status).send({ error: gate.error });
+                shareHeaders = gate.headers;
+              } else if (token2.startsWith("cst_")) {
                 const userMgmt = capabilityRegistry?.getSingleton("user-management");
                 if (!userMgmt)
                   return reply.status(503).send({ error: "User management not available" });
@@ -428802,6 +428946,12 @@ var require_main4 = __commonJS({
             const qIdx = request.url.indexOf("?");
             const queryString = qIdx >= 0 ? request.url.slice(qIdx) : "";
             const upstreamPath = `/${subPath}${queryString}`;
+            for (const name of Object.keys(request.raw.headers)) {
+              if (name.toLowerCase() === addon_route_share_gate_js_1.SHARE_KIND_HEADER || name.toLowerCase() === addon_route_share_gate_js_1.SHARE_DEVICES_HEADER)
+                delete request.raw.headers[name];
+            }
+            if (shareHeaders !== null)
+              Object.assign(request.raw.headers, shareHeaders);
             reply.hijack();
             const replayBody = request.body === void 0 ? void 0 : Buffer.isBuffer(request.body) ? request.body : Buffer.from(typeof request.body === "string" ? request.body : JSON.stringify(request.body));
             (0, system_1.proxyToUpstream)({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.97",
+  "version": "1.2.99",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",