- Shipped
- October 13, 2026 at 10:11 PM UTC
- Author
- Kamo
- Commit
- bb1197e
CameraController is the trust boundary for KamoCameraService: it resolves the session, checks VIEW_CAMERAS / MANAGE_CAMERAS / MANAGE_CAMERA_SITES (now 334-336; ACCESS_ALL_CAMERAS 337 is sent as the viewer's accessAll), and stamps the caller's org and member id onto every relayed path. CameraPrincipals resolves the viewer's departments (with ancestors), job titles and teams; SiteRoutes allowlists what may be relayed under a site. AppAvailabilityInterceptor gates the prefix on ServiceType.KAMO_CAMERAS; camera.service.url in the configmap. Suite: 5302 tests, 3 failures, all also failing on origin/main and unrelated (OrgGraphPublisherCoverageTest on DisclosureLedgerQueryService; two charter-stamp goldens).