@camstack/server 1.2.29 → 1.2.30

package/dist/api/core/cap-providers.js

@@ -1,4 +1,29 @@
 "use strict";
+/* eslint-disable @typescript-eslint/no-unsafe-return, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-member-access -- pre-existing lint debt across this 800-line provider-factory module. The flagged sites delegate into Moleculer/EventBus/IntegrationRegistry surfaces typed as `unknown` to break circular dependencies; runtime contracts are validated by the cap-mount-helper layer above. Tracked separately. */
+/**
+ * Capability provider factories for the Phase E core caps —
+ * `system`, `network-quality`, `toast`, `nodes`, `integrations`,
+ * `addons`. Each factory builds a fresh provider object that
+ * fulfils the cap's `InferProvider<...>` contract by delegating
+ * to the existing backend services.
+ *
+ * Why factories instead of static singletons?
+ *   - `addons.custom` needs per-request `ctx.user` for per-action
+ *     auth checks. The cap-router codegen already passes `ctx`
+ *     into `getProvider(ctx)`, so closing over it is cheap and
+ *     keeps the auth surface tight.
+ *   - The other caps don't need ctx, but we keep the signature
+ *     uniform for symmetry.
+ *
+ * No addon "owns" these surfaces — they manage cluster state
+ * (cluster topology, integrations, addon packages) or expose
+ * server-level singletons (toast bus, network-quality tracker,
+ * feature flags + retention controls).
+ *
+ * Phase E (2026-05-06): replaces the hand-written core routers in
+ * `server/backend/src/api/core/{system,network-quality,toast,
+ * nodes,integrations,addons}.router.ts`.
+ */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -43,42 +68,17 @@ exports.buildNodesProvider = buildNodesProvider;
 exports.buildIntegrationsProvider = buildIntegrationsProvider;
 exports.dispatchCustomAction = dispatchCustomAction;
 exports.buildAddonsProvider = buildAddonsProvider;
-/* eslint-disable @typescript-eslint/no-unsafe-return, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-member-access -- pre-existing lint debt across this 800-line provider-factory module. The flagged sites delegate into Moleculer/EventBus/IntegrationRegistry surfaces typed as `unknown` to break circular dependencies; runtime contracts are validated by the cap-mount-helper layer above. Tracked separately. */
-/**
- * Capability provider factories for the Phase E core caps —
- * `system`, `network-quality`, `toast`, `nodes`, `integrations`,
- * `addons`. Each factory builds a fresh provider object that
- * fulfils the cap's `InferProvider<...>` contract by delegating
- * to the existing backend services.
- *
- * Why factories instead of static singletons?
- *   - `addons.custom` needs per-request `ctx.user` for per-action
- *     auth checks. The cap-router codegen already passes `ctx`
- *     into `getProvider(ctx)`, so closing over it is cheap and
- *     keeps the auth surface tight.
- *   - The other caps don't need ctx, but we keep the signature
- *     uniform for symmetry.
- *
- * No addon "owns" these surfaces — they manage cluster state
- * (cluster topology, integrations, addon packages) or expose
- * server-level singletons (toast bus, network-quality tracker,
- * feature flags + retention controls).
- *
- * Phase E (2026-05-06): replaces the hand-written core routers in
- * `server/backend/src/api/core/{system,network-quality,toast,
- * nodes,integrations,addons}.router.ts`.
- */
-const os = __importStar(require("node:os"));
 const node_child_process_1 = require("node:child_process");
-const node_util_1 = require("node:util");
 const node_crypto_1 = require("node:crypto");
-const server_1 = require("@trpc/server");
-const types_1 = require("@camstack/types");
+const os = __importStar(require("node:os"));
+const node_util_1 = require("node:util");
 const system_1 = require("@camstack/system");
+const types_1 = require("@camstack/types");
+const server_1 = require("@trpc/server");
 const integration_id_backfill_1 = require("../../boot/integration-id-backfill");
-const collection_preference_js_1 = require("./collection-preference.js");
 const addon_package_service_js_1 = require("../../core/addon/addon-package.service.js");
 const lifecycle_runner_singleton_js_1 = require("../../core/lifecycle/lifecycle-runner.singleton.js");
+const collection_preference_js_1 = require("./collection-preference.js");
 const execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
 // ── system ──────────────────────────────────────────────────────────
 function getRetention(registry) {
@@ -358,7 +358,7 @@ function createNodeRootPackageLookup(moleculer, serverUpdate) {
         return moleculer.getNodeRootPackage(nodeId);
     };
 }
-function buildNodesProvider(agentRegistry, moleculer, addonRegistry, getNodeRootPackage) {
+function buildNodesProvider(agentRegistry, moleculer, addonRegistry, getNodeRootPackage, logger) {
     const broker = moleculer.broker;
     return {
         topology: async () => computeTopology(agentRegistry, addonRegistry, getNodeRootPackage),
@@ -414,6 +414,15 @@ function buildNodesProvider(agentRegistry, moleculer, addonRegistry, getNodeRoot
         },
         shutdownNode: async (input) => {
             if (input.nodeId === 'hub') {
+                // A whole-hub shutdown used to be COMPLETELY silent — process.exit(0)
+                // with not one log line. On 2026-08-01 the hub container went down
+                // cleanly at 15:02:55Z (docker restart policy brought it back 9s
+                // later, viewer stalled through the boot) and the initiator was
+                // unrecoverable from the logs precisely because this branch said
+                // nothing. An operator-facing kill switch logs before it fires.
+                logger?.warn('shutdownNode: HUB shutdown requested via API — exiting in 500ms', {
+                    meta: { nodeId: input.nodeId },
+                });
                 setTimeout(() => process.exit(0), 500);
                 return { success: true };
             }

package/dist/api/trpc/generated-cap-mounts.js

@@ -260,7 +260,7 @@ function mountAllCaps(services) {
         modelConvert: (0, generated_cap_routers_js_1.createCapRouter_modelConvert)((_ctx) => reg?.getSingleton('model-convert') ?? null, remoteCapProxy),
         modelDistributor: (0, generated_cap_routers_js_1.createCapRouter_modelDistributor)((_ctx) => reg?.getSingleton('model-distributor') ??
             null, remoteCapProxy),
-        motion: (0, generated_cap_routers_js_1.createCapRouter_motion)((_ctx) => reg?.getSingleton('motion') ?? null, remoteCapProxy),
+        motion: (0, generated_cap_routers_js_1.createCapRouter_motion)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'motion'), remoteCapProxy),
         motionDetection: (0, generated_cap_routers_js_1.createCapRouter_motionDetection)((_ctx) => reg?.getSingleton('motion-detection') ??
             null, remoteCapProxy),
         motionTrigger: (0, generated_cap_routers_js_1.createCapRouter_motionTrigger)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'motion-trigger'), remoteCapProxy),

package/dist/api/trpc/trpc.router.js

@@ -8,15 +8,15 @@ exports.buildAppRouter = buildAppRouter;
 const addon_settings_router_js_1 = require("../core/addon-settings.router.js");
 const auth_router_js_1 = require("../core/auth.router.js");
 const cap_providers_js_1 = require("../core/cap-providers.js");
-const server_management_provider_js_1 = require("../core/server-management.provider.js");
 const capabilities_router_js_1 = require("../core/capabilities.router.js");
+const cluster_nodes_router_js_1 = require("../core/cluster-nodes.router.js");
 const event_bus_proxy_router_js_1 = require("../core/event-bus-proxy.router.js");
 const hwaccel_router_js_1 = require("../core/hwaccel.router.js");
 const live_events_router_js_1 = require("../core/live-events.router.js");
 const logs_router_js_1 = require("../core/logs.router.js");
 const notifications_router_js_1 = require("../core/notifications.router.js");
-const cluster_nodes_router_js_1 = require("../core/cluster-nodes.router.js");
 const repl_router_js_1 = require("../core/repl.router.js");
+const server_management_provider_js_1 = require("../core/server-management.provider.js");
 const settings_backend_router_js_1 = require("../core/settings-backend.router.js");
 const stream_probe_router_js_1 = require("../core/stream-probe.router.js");
 const system_events_router_js_1 = require("../core/system-events.router.js");
@@ -195,7 +195,7 @@ function buildServerProviders(services) {
         system: wrap(() => (0, cap_providers_js_1.buildSystemProvider)(services.featureService, services.capabilityRegistry)),
         toast: wrap((ctx) => (0, cap_providers_js_1.buildToastProvider)(services.toastService, ctx)),
         integrations: wrap(() => (0, cap_providers_js_1.buildIntegrationsProvider)(services.addonRegistry, services.eventBus, services.loggingService, services.capabilityRegistry)),
-        nodes: wrap(() => (0, cap_providers_js_1.buildNodesProvider)(services.agentRegistry, services.moleculer, services.addonRegistry, (0, cap_providers_js_1.createNodeRootPackageLookup)(services.moleculer, services.serverUpdateService))),
+        nodes: wrap(() => (0, cap_providers_js_1.buildNodesProvider)(services.agentRegistry, services.moleculer, services.addonRegistry, (0, cap_providers_js_1.createNodeRootPackageLookup)(services.moleculer, services.serverUpdateService), services.loggingService.createLogger('nodes'))),
         // server-management — runtime-updatable root package (phase 1: hub only).
         'server-management': wrap(() => (0, server_management_provider_js_1.buildServerManagementProvider)(services.serverUpdateService)),
         addons: wrap((ctx) => (0, cap_providers_js_1.buildAddonsProvider)(services.addonRegistry, services.addonPackageService, services.loggingService, services.moleculer, services.configService, ctx)),

package/dist/bootstrap-packages.js

@@ -0,0 +1,35 @@
+"use strict";
+/**
+ * Hub bootstrap package selection.
+ *
+ * Extracted from `launcher.ts` so it can be unit-tested: the launcher
+ * self-executes `launch()` at import time, so nothing inside it is reachable
+ * from a spec. Same shape as `framework-nodepath.ts`.
+ *
+ * The selection MUST stay in lockstep with
+ * `AddonInstaller.deriveBootstrapList` in `@camstack/system` — that one reads
+ * the same `@camstack/server` manifest through `require.resolve`, this one
+ * reads the launcher's own `package.json` by absolute path (the slim image
+ * strips the `@camstack/*` symlinks, so `require.resolve` yields an empty list
+ * at launcher import time). Two derivations of the same list is exactly how
+ * `@camstack/addon-agent-ui` ended up installed on the hub: the installer's
+ * copy honoured `camstack.agentOnlyBootstrapAddons`, this one did not, and the
+ * hub is the side that actually boots through here.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.selectHubBootstrapPackages = selectHubBootstrapPackages;
+/**
+ * The packages a HUB-role node bootstrap-installs: every `@camstack/addon-*`
+ * runtime dependency plus `@camstack/system` (the carrier of the required
+ * infrastructure builtins — storage-provider / settings / logging — without
+ * which boot aborts).
+ *
+ * `camstack.agentOnlyBootstrapAddons` is subtracted. Those addons are declared
+ * as runtime dependencies so the published `@camstack/server` closure CARRIES
+ * them for agent-role nodes to seed, but they are `execution.placement:
+ * 'agent-only'` and the hub must never install them.
+ */
+function selectHubBootstrapPackages(pkg) {
+    const agentOnly = new Set(pkg.camstack?.agentOnlyBootstrapAddons ?? []);
+    return Object.keys(pkg.dependencies ?? {}).filter((name) => !agentOnly.has(name) && (name.startsWith('@camstack/addon-') || name === '@camstack/system'));
+}

package/dist/launcher.js

@@ -56,6 +56,7 @@ const path = __importStar(require("node:path"));
 const tar = __importStar(require("tar"));
 const yaml = __importStar(require("js-yaml"));
 const framework_nodepath_js_1 = require("./framework-nodepath.js");
+const bootstrap_packages_js_1 = require("./bootstrap-packages.js");
 /** Path of the manifest file embedded inside every archive. */
 const ARCHIVE_MANIFEST_NAME = '.camstack-backup-manifest.json';
 /** Resolve the data directory from env or default */
@@ -190,39 +191,42 @@ function readBootstrapInstallSource(dataDir, bootstrapSchema) {
         return undefined;
     return parseInstallSource(validation.data.bootstrap.installSource);
 }
-/**
- * Read `bootstrap.requiredAddons` from `<dataDir>/config.yaml` if present.
- * Returns the parsed array, an empty array when explicitly set to `[]`,
- * or `null` when the field is absent (caller should fall back to the
- * kernel's REQUIRED_PACKAGES constant).
- *
- * Inline YAML parse rather than going through ConfigManager: the
- * launcher runs before @camstack/system is imported and must stay free of
- * core dependencies. Just yaml.load + bootstrapSchema (kernel) for
- * shape validation.
- *
- * `bootstrapSchema` is passed in (not imported at module top) so this
- * helper can be called after the dynamic @camstack/system import in launch().
- */
 /**
  * Derive the bootstrap package list from THIS server's own package.json — the
  * `@camstack/addon-*` deps plus `@camstack/system` (which ships the required
- * infrastructure builtins). Read by absolute path (the package.json sits one
- * level up from this launcher's dist dir), so it works in the slim image where
- * the `@camstack/*` node_modules symlinks are stripped. Mirrors
- * `AddonInstaller.deriveBootstrapList`, but without `require.resolve`.
+ * infrastructure builtins), MINUS `camstack.agentOnlyBootstrapAddons`. Read by
+ * absolute path (the package.json sits one level up from this launcher's dist
+ * dir), so it works in the slim image where the `@camstack/*` node_modules
+ * symlinks are stripped. Mirrors `AddonInstaller.deriveBootstrapList`, but
+ * without `require.resolve` — the selection itself lives in
+ * `bootstrap-packages.ts` so it is unit-testable (this module self-executes
+ * `launch()` on import, so nothing declared here can be imported by a spec).
  */
 function deriveBootstrapFromSelf() {
     try {
         const pkgPath = path.resolve(__dirname, '..', 'package.json');
         const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
-        return Object.keys(pkg.dependencies ?? {}).filter((name) => name.startsWith('@camstack/addon-') || name === '@camstack/system');
+        return (0, bootstrap_packages_js_1.selectHubBootstrapPackages)(pkg);
     }
     catch (err) {
         console.warn(`[launcher] could not derive bootstrap list from package.json: ${err instanceof Error ? err.message : String(err)}`);
         return [];
     }
 }
+/**
+ * Read `bootstrap.requiredAddons` from `<dataDir>/config.yaml` if present.
+ * Returns the parsed array, an empty array when explicitly set to `[]`,
+ * or `null` when the field is absent (caller should fall back to the
+ * kernel's REQUIRED_PACKAGES constant).
+ *
+ * Inline YAML parse rather than going through ConfigManager: the
+ * launcher runs before @camstack/system is imported and must stay free of
+ * core dependencies. Just yaml.load + bootstrapSchema (kernel) for
+ * shape validation.
+ *
+ * `bootstrapSchema` is passed in (not imported at module top) so this
+ * helper can be called after the dynamic @camstack/system import in launch().
+ */
 function readBootstrapRequiredAddons(dataDir, bootstrapSchema) {
     const raw = readConfigYaml(dataDir);
     if (raw === null)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.2.29",
+  "version": "1.2.30",
   "private": false,
   "files": [
     "dist",
@@ -33,19 +33,19 @@
     ]
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.2.18",
-    "@camstack/addon-agent-ui": "1.2.7",
-    "@camstack/addon-auth": "1.2.7",
-    "@camstack/addon-decoder-nodeav": "1.2.7",
-    "@camstack/addon-notifiers": "1.2.9",
-    "@camstack/addon-pipeline": "1.2.31",
-    "@camstack/addon-pipeline-orchestrator": "1.2.13",
-    "@camstack/addon-post-analysis": "1.2.20",
-    "@camstack/sdk": "1.2.7",
-    "@camstack/shm-ring": "1.1.7",
-    "@camstack/system": "1.2.26",
-    "@camstack/types": "1.2.18",
-    "@camstack/ui-library": "1.2.14",
+    "@camstack/addon-admin-ui": "1.2.20",
+    "@camstack/addon-agent-ui": "1.2.8",
+    "@camstack/addon-auth": "1.2.8",
+    "@camstack/addon-decoder-nodeav": "1.2.8",
+    "@camstack/addon-notifiers": "1.2.10",
+    "@camstack/addon-pipeline": "1.2.36",
+    "@camstack/addon-pipeline-orchestrator": "1.2.17",
+    "@camstack/addon-post-analysis": "1.2.21",
+    "@camstack/sdk": "1.2.8",
+    "@camstack/shm-ring": "1.1.8",
+    "@camstack/system": "1.2.27",
+    "@camstack/types": "1.2.19",
+    "@camstack/ui-library": "1.2.15",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",
     "@fastify/cors": "^11.2.0",