RTSP installer changes

.env.example

@@ -31,10 +31,10 @@ CONNECTOR_BOOTSTRAP_KEY=dev-connector-bootstrap-key
 # Dedicated key for cloud-ai worker (set separately in production)
 CLOUD_AI_SERVICE_KEY=dev-cloud-ai-service-key
 # Must match connector/installer/onevo-connector.iss AppVersion and connector app/config.py version
-CONNECTOR_INSTALLER_VERSION=1.1.5
-CONNECTOR_INSTALLER_URL=https://installer-site-one.vercel.app/ONEVO-Connector-Setup-1.1.5.exe
-CONNECTOR_INSTALLER_SIZE_BYTES=98067717
-CONNECTOR_INSTALLER_SHA256=4612e540532d54ae5940e24e62d207a60e4d3d1cc74bcad14f91c6b5e86cb7c4
+CONNECTOR_INSTALLER_VERSION=1.1.12
+CONNECTOR_INSTALLER_URL=https://gofnzdebgqmelkd8.public.blob.vercel-storage.com/releases/ONEVO-Connector-Setup-1.1.12.exe
+CONNECTOR_INSTALLER_SIZE_BYTES=129692275
+CONNECTOR_INSTALLER_SHA256=1dfbd51a48b8f295ad42b3b26e5f9249205cfa1f73663166025388504c701767
 
 # ---- Pilot behavior ----
 # silent = alerts stored but not surfaced; manager_only = only managers see; all = everyone

backend/Contracts/Dtos.cs

@@ -32,6 +32,7 @@ public record StoreOverviewResponse(
 // ---- Cameras ----
 public record CreateCameraRequest(Guid StoreId, string Name, string RtspUrl, string? OnvifHost, int? OnvifPort);
 public record UpdateCameraRequest(string? Name, string? RtspUrl, string? Status, string? OnvifHost, int? OnvifPort);
+public record BulkDisableCamerasRequest(List<Guid> CameraIds);
 public record UpdateDeviceInfoRequest(
     string? Manufacturer,
     string? Model,

backend/Controllers/CamerasController.cs

@@ -88,6 +88,32 @@ public async Task<IActionResult> Update(Guid id, UpdateCameraRequest req)
         return Ok(cam);
     }
 
+    [HttpDelete("{id:guid}")]
+    [Authorize(Roles = "Admin,Manager,Installer")]
+    public async Task<IActionResult> Disable(Guid id)
+    {
+        var cam = await _db.Cameras.FindAsync(id);
+        if (cam is null) return NotFound();
+        if (!TenantAccess.CanAccessStore(User, cam.StoreId)) return Forbid();
+        cam.Status = CameraStatus.Disabled;
+        await _db.SaveChangesAsync();
+        return Ok(new { ok = true, cameraId = cam.Id });
+    }
+
+    [HttpPost("bulk-disable")]
+    [Authorize(Roles = "Admin,Manager,Installer")]
+    public async Task<IActionResult> BulkDisable(BulkDisableCamerasRequest req)
+    {
+        var ids = (req.CameraIds ?? []).Distinct().ToList();
+        if (ids.Count == 0) return BadRequest(new { error = "Select at least one camera" });
+        var cameras = await TenantAccess.ScopeCameras(_db.Cameras, User)
+            .Where(c => ids.Contains(c.Id))
+            .ToListAsync();
+        foreach (var camera in cameras) camera.Status = CameraStatus.Disabled;
+        await _db.SaveChangesAsync();
+        return Ok(new { ok = true, disabled = cameras.Count });
+    }
+
     // Called by the connector after ONVIF query — stores device identity in the DB.
     [HttpPut("{id:guid}/device-info")]
     [AllowAnonymous]   // authenticated by connector's X-Connector-Key header (checked below)

backend/Controllers/ConnectorsController.cs

@@ -73,6 +73,23 @@ public async Task<ActionResult<ClaimSetupCodeResponse>> Claim(ClaimSetupCodeRequ
         if (row is null)
             return BadRequest(new { error = "Invalid, used, or expired setup code" });
 
+        // A store owns one connector identity. Do not let a second PC claim a
+        // code and rotate the active shop connector's API key. Re-pairing is
+        // allowed only after uninstall/offline timeout.
+        var activeCutoff = DateTimeOffset.UtcNow.AddMinutes(-2);
+        var activeConnector = await _db.Connectors
+            .AsNoTracking()
+            .AnyAsync(c =>
+                c.StoreId == row.StoreId &&
+                c.LastHeartbeat >= activeCutoff &&
+                (c.Status == ConnectorStatus.Healthy ||
+                 c.Status == ConnectorStatus.Degraded),
+                HttpContext.RequestAborted);
+        if (activeConnector)
+            return Conflict(new {
+                error = "This store already has an active connector. Uninstall or stop it before pairing another PC."
+            });
+
         await using var transaction = await _db.Database.BeginTransactionAsync(
             HttpContext.RequestAborted);
 
@@ -144,6 +161,25 @@ public async Task<IActionResult> Heartbeat(HeartbeatRequest req)
         return Ok(new { ok = true });
     }
 
+    // Called by the Windows uninstaller before it removes local credentials.
+    // The connector row is retained so a reinstall can safely re-pair the same
+    // store and cameras, but the dashboard stops treating it as installed.
+    [AllowAnonymous]
+    [HttpPost("uninstall")]
+    public async Task<IActionResult> Uninstall()
+    {
+        var connector = await _connectorAuth.AuthenticateAsync(
+            Request, HttpContext.RequestAborted);
+        if (connector is null) return Unauthorized();
+
+        connector.Status = ConnectorStatus.Offline;
+        connector.LastHeartbeat = null;
+        connector.DegradedReason = "uninstalled";
+        connector.UploadQueueDepth = 0;
+        await _db.SaveChangesAsync(HttpContext.RequestAborted);
+        return Ok(new { ok = true });
+    }
+
     // Health list for the dashboard.
     [Authorize]
     [HttpGet]
@@ -180,7 +216,8 @@ await _cameraProvisioning.EnsureDemoZonesAsync(
 
         var cameras = await _db.Cameras
             .Where(c => c.StoreId == connector.StoreId &&
-                        c.ConnectorId == connector.Id)
+                        c.ConnectorId == connector.Id &&
+                        c.Status != CameraStatus.Disabled)
             .OrderBy(c => c.Name)
             .Select(c => new
             {

backend/Domain/Enums.cs

@@ -23,7 +23,8 @@ public enum CameraStatus
     Pending,
     Active,
     AnalyticsOnly,
-    Offline
+    Offline,
+    Disabled
 }
 
 public enum ConnectorStatus

backend/appsettings.json

@@ -49,7 +49,7 @@
     "BaseUrl": "http://localhost:4200"
   },
   "ConnectorInstaller": {
-    "Version": "1.1.5",
+    "Version": "1.1.12",
     "Path": "../installer-site"
   }
 }