@camstack/server 1.2.375 → 1.2.377

package/dist/api/static/precompressed-asset.js

@@ -56,6 +56,7 @@ exports.isCompressibleAsset = isCompressibleAsset;
 exports.resolvePrecompressedAsset = resolvePrecompressedAsset;
 exports.warmPrecompressedAssets = warmPrecompressedAssets;
 exports.resetPrecompressedWarning = resetPrecompressedWarning;
+exports.precompressedTempPath = precompressedTempPath;
 exports.precompressedSiblingExists = precompressedSiblingExists;
 const fs = __importStar(require("node:fs"));
 const fsp = __importStar(require("node:fs/promises"));
@@ -113,7 +114,7 @@ async function compressToDisk(filePath, brPath, log) {
         });
         // Write via a temp file + rename so a concurrent reader never sees a
         // half-written body.
-        const tmp = `${brPath}.${String(process.pid)}.tmp`;
+        const tmp = precompressedTempPath(brPath);
         await fsp.writeFile(tmp, out);
         await fsp.rename(tmp, brPath);
         log?.('precompressed a static asset', {
@@ -215,6 +216,15 @@ async function listCompressible(dir, out = []) {
 function resetPrecompressedWarning() {
     warnedUnwritable = false;
 }
+/**
+ * Where a compression is staged before the rename. Exported so the test can
+ * make THIS write fail for any uid: a `chmod 555` on the dist does nothing to
+ * root, which is what CI runs as, and the test that relied on it produced a
+ * `.br` in a "read-only" directory (2026-09-23).
+ */
+function precompressedTempPath(brPath) {
+    return `${brPath}.${String(process.pid)}.tmp`;
+}
 /** Synchronous existence probe used by the callers' own guards. */
 function precompressedSiblingExists(filePath) {
     return fs.existsSync(`${filePath}.br`);

package/dist/api/trpc/device-collection-dispatch.js

@@ -323,7 +323,7 @@ async function fanOut(sources, method, input, capName, deviceId, logger) {
             });
             continue;
         }
-        rows.push(...finishRows(source, result.value, isSourceListing));
+        rows.push(...finishRows(source, result.value, isSourceListing, capName, deviceId, logger));
     }
     return mergeRows(rows);
 }
@@ -345,7 +345,7 @@ async function fanOut(sources, method, input, capName, deviceId, logger) {
  * filters any more; the filtering happened when {@link sourcesForDevice} read
  * the bindings.
  */
-function finishRows(source, rows, isSourceListing) {
+function finishRows(source, rows, isSourceListing, capName, deviceId, logger) {
     if (!isSourceListing)
         return rows;
     const out = [];
@@ -354,6 +354,25 @@ function finishRows(source, rows, isSourceListing) {
             out.push(row);
             continue;
         }
+        const id = Reflect.get(row, SOURCE_ID_FIELD);
+        if (typeof id === 'string') {
+            const owner = (0, types_1.reservedSourceOwner)(capName, id);
+            if (owner !== null && owner !== source.addonId) {
+                // A RESERVED id (D625) is the DEFAULT of a picker, expressed as a
+                // value rather than as a sort order. A second row spelling it would
+                // put that default back behind the fan-out order — the
+                // `?? sources[0]` accident the reservation exists to remove. The row
+                // goes and the addon's own rows stay: it may well have real sources,
+                // and emptying a camera's picker over one bad row is worse than the
+                // bad row. The guard in `scripts/` refuses the same spelling at build
+                // time; this is what happens when an old build reaches a new hub.
+                logger?.warn(`${capName}.${exports.SOURCE_LISTING_METHOD}: source id "${id}" is RESERVED for "${owner}" — this addon's row is dropped`, {
+                    tags: { deviceId, addonId: source.addonId },
+                    meta: { capability: capName, sourceId: id, reservedFor: owner },
+                });
+                continue;
+            }
+        }
         out.push({ ...row, [SOURCE_ADDON_FIELD]: source.addonId });
     }
     return out;
@@ -508,7 +527,7 @@ function requireDeviceCollection(registry, capName, logger) {
                         const answered = await callSource(first, prop, input, capName, deviceId);
                         if (!Array.isArray(answered))
                             return answered;
-                        return finishRows(first, answered, prop === exports.SOURCE_LISTING_METHOD);
+                        return finishRows(first, answered, prop === exports.SOURCE_LISTING_METHOD, capName, deviceId, logger);
                     }
                     return await fanOut(sources, prop, input, capName, deviceId, logger);
                 }

package/dist/api/trpc/generated-cap-mounts.js

@@ -218,7 +218,6 @@ function mountAllCaps(services) {
         }, remoteCapProxy),
         enumSensor: (0, generated_cap_routers_js_1.createCapRouter_enumSensor)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'enum-sensor'), remoteCapProxy),
         eventEmitter: (0, generated_cap_routers_js_1.createCapRouter_eventEmitter)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'event-emitter'), remoteCapProxy),
-        events: (0, generated_cap_routers_js_1.createCapRouter_events)((_ctx) => reg?.getSingleton('events') ?? null, remoteCapProxy),
         faceGallery: (0, generated_cap_routers_js_1.createCapRouter_faceGallery)((_ctx) => reg?.getSingleton('face-gallery') ?? null, remoteCapProxy),
         failureContribution: (0, generated_cap_routers_js_1.createCapRouter_failureContribution)((_ctx, addonId) => {
             if (!reg)
@@ -428,7 +427,9 @@ function mountAllCaps(services) {
         ptz: (0, generated_cap_routers_js_1.createCapRouter_ptz)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'ptz'), remoteCapProxy),
         ptzAutotrack: (0, generated_cap_routers_js_1.createCapRouter_ptzAutotrack)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'ptz-autotrack'), remoteCapProxy),
         reboot: (0, generated_cap_routers_js_1.createCapRouter_reboot)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'reboot'), remoteCapProxy),
-        recording: (0, generated_cap_routers_js_1.createCapRouter_recording)((_ctx) => reg?.getSingleton('recording') ?? null, remoteCapProxy),
+        recording: (0, generated_cap_routers_js_1.createCapRouter_recording)((_ctx) => (0, device_collection_dispatch_js_1.requireDeviceCollection)(reg, 'recording'), remoteCapProxy),
+        recordingArchive: (0, generated_cap_routers_js_1.createCapRouter_recordingArchive)((_ctx) => reg?.getSingleton('recording-archive') ??
+            null, remoteCapProxy),
         recordingExport: (0, generated_cap_routers_js_1.createCapRouter_recordingExport)((_ctx) => reg?.getSingleton('recording-export') ??
             null, remoteCapProxy),
         recordingOnboard: (0, generated_cap_routers_js_1.createCapRouter_recordingOnboard)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'recording-onboard'), remoteCapProxy),