@camstack/addon-provider-hikvision 1.2.124 → 1.2.125

package/dist/addon.js

@@ -25023,6 +25023,39 @@ _enum([
 _enum(["deferred", "final"]);
 /** The camera's / provider's own words. Kept verbatim, never parsed. */
 var CLIP_STILL_REASON_HEADER = "x-camstack-reason";
+/**
+* Make a refusal sentence safe to put in an HTTP header.
+*
+* **An HTTP header value is Latin-1.** Node throws `Invalid character in
+* header content` on anything above U+00FF, the handler dies mid-response,
+* and the client gets a socket hang up — no status, no reason, nothing. The
+* mechanism that exists to EXPLAIN a refusal is then the thing that silences
+* it, and the surface shows "nothing happened".
+*
+* That is not hypothetical: measured 2026-09-23 on 1436, a Hikvision replay
+* refusal read `SETUP of the video track answered 500 — the camera refused
+* this replay`, and the EM DASH in it threw on every clip the operator
+* opened. This repository writes its refusals in prose, and its prose uses
+* `—`, `’` and `…` everywhere, so every reason string is a candidate.
+*
+* Substitutes rather than strips: an operator reading a log or a response
+* should get a readable sentence, not one with holes in it. The typographic
+* characters this repo actually writes have exact ASCII equivalents; anything
+* else non-Latin-1 becomes `?`, which is visible rather than silent. Control
+* characters go too — a newline in a header value is a response-splitting
+* bug, not a formatting one.
+*/
+function clipReasonHeaderValue(reason) {
+	const folded = reason.replace(/[\u2013\u2014\u2212]/g, "-").replace(/[\u2018\u2019\u201b]/g, "'").replace(/[\u201c\u201d]/g, "\"").replace(/\u2026/g, "...").replace(/[\u00a0\u2007\u202f]/g, " ");
+	let out = "";
+	for (const ch of folded) {
+		const code = ch.codePointAt(0) ?? 0;
+		if (code < 32 || code === 127) out += " ";
+		else if (code > 255) out += "?";
+		else out += ch;
+	}
+	return out.slice(0, 500).trim();
+}
 /** One {@link ClipStillRefusalCodeSchema} token, alone. */
 var CLIP_STILL_REASON_CODE_HEADER = "x-camstack-reason-code";
 /**
@@ -50289,7 +50322,7 @@ function createClipStreamHandler(deps) {
 				status: resolved.status
 			} });
 			res.writeHead(resolved.status, {
-				[CLIP_STILL_REASON_HEADER]: resolved.detail.slice(0, 500),
+				[CLIP_STILL_REASON_HEADER]: clipReasonHeaderValue(resolved.detail),
 				[CLIP_STILL_REASON_CODE_HEADER]: resolved.code
 			});
 			res.end();
@@ -50362,7 +50395,7 @@ function createClipStreamHandler(deps) {
 			}
 		});
 		res.writeHead(streamRefusalStatus(outcome.code), {
-			[CLIP_STILL_REASON_HEADER]: outcome.detail.slice(0, 500),
+			[CLIP_STILL_REASON_HEADER]: clipReasonHeaderValue(outcome.detail),
 			[CLIP_STILL_REASON_CODE_HEADER]: outcome.code
 		});
 		res.end();
@@ -53126,7 +53159,16 @@ function createClipService(deps) {
 			logger,
 			resolvePath: async (deviceId, clipKey) => {
 				const file = await fileFor(deviceId, clipKey);
-				return file.kind === "ok" ? file.path : null;
+				if (file.kind === "ok") return file.path;
+				deps.logger.warn("videoclips: a clip file was refused", {
+					tags: { deviceId },
+					meta: {
+						clipKey,
+						branch: file.code,
+						reason: file.detail
+					}
+				});
+				return null;
 			}
 		}),
 		streamHandler: createClipStreamHandler({

package/dist/addon.mjs

@@ -25024,6 +25024,39 @@ _enum([
 _enum(["deferred", "final"]);
 /** The camera's / provider's own words. Kept verbatim, never parsed. */
 var CLIP_STILL_REASON_HEADER = "x-camstack-reason";
+/**
+* Make a refusal sentence safe to put in an HTTP header.
+*
+* **An HTTP header value is Latin-1.** Node throws `Invalid character in
+* header content` on anything above U+00FF, the handler dies mid-response,
+* and the client gets a socket hang up — no status, no reason, nothing. The
+* mechanism that exists to EXPLAIN a refusal is then the thing that silences
+* it, and the surface shows "nothing happened".
+*
+* That is not hypothetical: measured 2026-09-23 on 1436, a Hikvision replay
+* refusal read `SETUP of the video track answered 500 — the camera refused
+* this replay`, and the EM DASH in it threw on every clip the operator
+* opened. This repository writes its refusals in prose, and its prose uses
+* `—`, `’` and `…` everywhere, so every reason string is a candidate.
+*
+* Substitutes rather than strips: an operator reading a log or a response
+* should get a readable sentence, not one with holes in it. The typographic
+* characters this repo actually writes have exact ASCII equivalents; anything
+* else non-Latin-1 becomes `?`, which is visible rather than silent. Control
+* characters go too — a newline in a header value is a response-splitting
+* bug, not a formatting one.
+*/
+function clipReasonHeaderValue(reason) {
+	const folded = reason.replace(/[\u2013\u2014\u2212]/g, "-").replace(/[\u2018\u2019\u201b]/g, "'").replace(/[\u201c\u201d]/g, "\"").replace(/\u2026/g, "...").replace(/[\u00a0\u2007\u202f]/g, " ");
+	let out = "";
+	for (const ch of folded) {
+		const code = ch.codePointAt(0) ?? 0;
+		if (code < 32 || code === 127) out += " ";
+		else if (code > 255) out += "?";
+		else out += ch;
+	}
+	return out.slice(0, 500).trim();
+}
 /** One {@link ClipStillRefusalCodeSchema} token, alone. */
 var CLIP_STILL_REASON_CODE_HEADER = "x-camstack-reason-code";
 /**
@@ -50290,7 +50323,7 @@ function createClipStreamHandler(deps) {
 				status: resolved.status
 			} });
 			res.writeHead(resolved.status, {
-				[CLIP_STILL_REASON_HEADER]: resolved.detail.slice(0, 500),
+				[CLIP_STILL_REASON_HEADER]: clipReasonHeaderValue(resolved.detail),
 				[CLIP_STILL_REASON_CODE_HEADER]: resolved.code
 			});
 			res.end();
@@ -50363,7 +50396,7 @@ function createClipStreamHandler(deps) {
 			}
 		});
 		res.writeHead(streamRefusalStatus(outcome.code), {
-			[CLIP_STILL_REASON_HEADER]: outcome.detail.slice(0, 500),
+			[CLIP_STILL_REASON_HEADER]: clipReasonHeaderValue(outcome.detail),
 			[CLIP_STILL_REASON_CODE_HEADER]: outcome.code
 		});
 		res.end();
@@ -53127,7 +53160,16 @@ function createClipService(deps) {
 			logger,
 			resolvePath: async (deviceId, clipKey) => {
 				const file = await fileFor(deviceId, clipKey);
-				return file.kind === "ok" ? file.path : null;
+				if (file.kind === "ok") return file.path;
+				deps.logger.warn("videoclips: a clip file was refused", {
+					tags: { deviceId },
+					meta: {
+						clipKey,
+						branch: file.code,
+						reason: file.detail
+					}
+				});
+				return null;
 			}
 		}),
 		streamHandler: createClipStreamHandler({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-hikvision",
-  "version": "1.2.124",
+  "version": "1.2.125",
   "description": "Hikvision camera device provider addon for CamStack — ISAPI over HTTP(S) with digest auth (snapshot, alarm stream, RTSP discovery)",
   "keywords": [
     "camstack",