@camstack/server 1.1.58 → 1.1.60

package/dist/api/core/auth.router.js

@@ -179,11 +179,15 @@ async function passkeySecondFactorOptedIn(userId, provider) {
 // `redirect` buttons (OIDC / magic-link) + pre-auth `widget`s (passkey).
 // The widget arm is enriched server-side with a public `bundleUrl` from
 // `addonId` + `bundle`, so the addon never encodes the static-route
-// scheme. `?v=<now>` guards against a stale cached bundle after an addon
-// update (the login page loads rarely, so cache-busting is free here).
+// scheme. The version is a PATH prefix (`v<…>/`), not a `?v=` query, so the
+// bundle's relative sibling imports inherit it and a CDN busts the WHOLE
+// bundle atomically on deploy (see the stamping site below).
 const PublicWidgetLoginMethodSchema = types_1.WidgetLoginMethodSchema.extend({
     bundleUrl: zod_1.z.string(),
 });
+/** Stable per hub PROCESS — busts the login widget bundle URL on each
+ *  restart/deploy while caching cleanly within the process's uptime. */
+const AUTH_BUNDLE_VERSION = String(Date.now());
 const PublicLoginMethodSchema = zod_1.z.discriminatedUnion('kind', [
     types_1.RedirectLoginMethodSchema,
     PublicWidgetLoginMethodSchema,
@@ -961,10 +965,18 @@ function createAuthRouter(auth, registry, moleculer = null, shareTokens = null,
                         }
                         continue;
                     }
-                    // Widget arm — stamp a public bundleUrl from addonId + bundle.
+                    // Widget arm — stamp a public bundleUrl with the version in the
+                    // PATH, not a `?v=` query. Module-Federation bundles import their
+                    // fixed-name siblings (`./_stub.js`) by RELATIVE url, which never
+                    // inherit a query — so a `?v=` busts only the entry and a CDN edge
+                    // keeps serving a stale `_stub.js` (missing the newest widget). A
+                    // path prefix makes every relative import inherit it → one atomic
+                    // whole-bundle cache miss per deploy, on any CDN. `AUTH_BUNDLE_VERSION`
+                    // is stable per hub process (busts on restart/deploy, caches within
+                    // uptime). The `/api/addon-widgets` route strips the `v<…>/` segment.
                     const parsed = PublicWidgetLoginMethodSchema.safeParse({
                         ...raw,
-                        bundleUrl: `/api/addon-widgets/${raw.addonId}/${raw.bundle}?v=${Date.now()}`,
+                        bundleUrl: `/api/addon-widgets/${raw.addonId}/v${AUTH_BUNDLE_VERSION}/${raw.bundle}`,
                     });
                     if (parsed.success) {
                         out.push(parsed.data);

package/dist/api/trpc/generated-cap-routers.js

@@ -4919,6 +4919,15 @@ function createCapRouter_pipelineAnalytics(getProvider, createRemoteProxy) {
             // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-argument
             return p.getAudioEvents(methodInput);
         }),
+        getKeyEvents: trpc_middleware_js_1.protectedProcedure
+            .input(types_76.pipelineAnalyticsCapability.methods.getKeyEvents.input.loose())
+            .output(types_76.pipelineAnalyticsCapability.methods.getKeyEvents.output)
+            .query(async ({ input, ctx }) => {
+            const { nodeId, ...methodInput } = input;
+            const p = resolveProvider('pipeline-analytics', nodeId, () => getProvider(ctx), createRemoteProxy);
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-argument
+            return p.getKeyEvents(methodInput);
+        }),
         getEventDensity: trpc_middleware_js_1.protectedProcedure
             .input(types_76.pipelineAnalyticsCapability.methods.getEventDensity.input.loose())
             .output(types_76.pipelineAnalyticsCapability.methods.getEventDensity.output)
@@ -5661,6 +5670,15 @@ function createCapRouter_pipelineRunner(getProvider, createRemoteProxy) {
             const p = resolveProvider('pipeline-runner', input?.nodeId, () => getProvider(ctx), createRemoteProxy);
             return p.getLocalCameras();
         }),
+        getNativeCrop: trpc_middleware_js_1.protectedProcedure
+            .input(types_79.pipelineRunnerCapability.methods.getNativeCrop.input.loose())
+            .output(types_79.pipelineRunnerCapability.methods.getNativeCrop.output)
+            .query(async ({ input, ctx }) => {
+            const { nodeId, ...methodInput } = input;
+            const p = resolveProvider('pipeline-runner', nodeId, () => getProvider(ctx), createRemoteProxy);
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-argument
+            return p.getNativeCrop(methodInput);
+        }),
     });
 }
 function createCapRouter_plateGallery(getProvider, createRemoteProxy) {

package/dist/core/moleculer/moleculer.service.js

@@ -308,6 +308,10 @@ class MoleculerService {
             this.brokerSafe.createService((0, system_1.createHubCapForwardService)(onUnownedCall));
             const registry = new system_1.LocalChildRegistry({
                 server: (0, system_1.createLocalTransport)().createServer(nodeId),
+                // This node's own id — lets the cap-call-out router serve a pin-to-self
+                // from the co-resident sibling instead of bouncing it through
+                // onUnownedCall (a pin to ANOTHER node still bypasses the sibling).
+                ownNodeId: nodeId,
                 onUnownedCall,
                 logger: {
                     info: (msg, meta) => logger.info(msg, meta !== null && meta !== undefined

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.1.58",
+  "version": "1.1.60",
   "private": false,
   "files": [
     "dist",
@@ -23,19 +23,19 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.1.47",
-    "@camstack/addon-advanced-notifier": "1.1.21",
-    "@camstack/addon-auth": "1.1.6",
-    "@camstack/addon-decoder-nodeav": "1.1.9",
-    "@camstack/addon-notifiers": "1.1.21",
-    "@camstack/addon-pipeline": "1.1.52",
-    "@camstack/addon-pipeline-orchestrator": "1.1.42",
-    "@camstack/addon-post-analysis": "1.1.24",
-    "@camstack/sdk": "1.1.22",
-    "@camstack/shm-ring": "1.0.21",
-    "@camstack/system": "1.1.45",
-    "@camstack/types": "1.1.40",
-    "@camstack/ui-library": "1.1.32",
+    "@camstack/addon-admin-ui": "1.1.49",
+    "@camstack/addon-advanced-notifier": "1.1.22",
+    "@camstack/addon-auth": "1.1.7",
+    "@camstack/addon-decoder-nodeav": "1.1.10",
+    "@camstack/addon-notifiers": "1.1.22",
+    "@camstack/addon-pipeline": "1.1.54",
+    "@camstack/addon-pipeline-orchestrator": "1.1.44",
+    "@camstack/addon-post-analysis": "1.1.26",
+    "@camstack/sdk": "1.1.23",
+    "@camstack/shm-ring": "1.0.22",
+    "@camstack/system": "1.1.47",
+    "@camstack/types": "1.1.42",
+    "@camstack/ui-library": "1.1.34",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",
     "@fastify/multipart": "^10.0.0",