@camstack/server 1.2.376 → 1.2.378

package/dist/api/static/precompressed-asset.js

@@ -56,6 +56,7 @@ exports.isCompressibleAsset = isCompressibleAsset;
 exports.resolvePrecompressedAsset = resolvePrecompressedAsset;
 exports.warmPrecompressedAssets = warmPrecompressedAssets;
 exports.resetPrecompressedWarning = resetPrecompressedWarning;
+exports.precompressedTempPath = precompressedTempPath;
 exports.precompressedSiblingExists = precompressedSiblingExists;
 const fs = __importStar(require("node:fs"));
 const fsp = __importStar(require("node:fs/promises"));
@@ -113,7 +114,7 @@ async function compressToDisk(filePath, brPath, log) {
         });
         // Write via a temp file + rename so a concurrent reader never sees a
         // half-written body.
-        const tmp = `${brPath}.${String(process.pid)}.tmp`;
+        const tmp = precompressedTempPath(brPath);
         await fsp.writeFile(tmp, out);
         await fsp.rename(tmp, brPath);
         log?.('precompressed a static asset', {
@@ -215,6 +216,15 @@ async function listCompressible(dir, out = []) {
 function resetPrecompressedWarning() {
     warnedUnwritable = false;
 }
+/**
+ * Where a compression is staged before the rename. Exported so the test can
+ * make THIS write fail for any uid: a `chmod 555` on the dist does nothing to
+ * root, which is what CI runs as, and the test that relied on it produced a
+ * `.br` in a "read-only" directory (2026-09-23).
+ */
+function precompressedTempPath(brPath) {
+    return `${brPath}.${String(process.pid)}.tmp`;
+}
 /** Synchronous existence probe used by the callers' own guards. */
 function precompressedSiblingExists(filePath) {
     return fs.existsSync(`${filePath}.br`);

package/dist/api/trpc/device-collection-dispatch.js

@@ -63,6 +63,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SOURCE_LISTING_METHOD = void 0;
 exports.requireDeviceCollection = requireDeviceCollection;
+const system_1 = require("@camstack/system");
 const types_1 = require("@camstack/types");
 const server_1 = require("@trpc/server");
 /**
@@ -232,10 +233,32 @@ async function callSource(source, method, input, capName, deviceId) {
     if (typeof fn !== 'function') {
         throw new server_1.TRPCError({
             code: 'NOT_IMPLEMENTED',
-            message: `Capability "${capName}" source "${source.addonId}" for device ${deviceId} does not implement "${method}"`,
+            message: notImplementedMessage(capName, source.addonId, deviceId, method),
         });
     }
-    return await fn.call(source.provider, input);
+    // …and that check is VACUOUS for a forked provider: the UDS proxy fabricates
+    // a callable for every property, so the absence is only observable on the
+    // child. `child-cap-dispatch` answers a method declared `optionalMethod`
+    // with a prefixed message, which becomes the SAME refusal here — otherwise
+    // an honest "this source has no file behind it" arrives as
+    // INTERNAL_SERVER_ERROR and reads as a method somebody forgot.
+    try {
+        return await fn.call(source.provider, input);
+    }
+    catch (err) {
+        if (errMessage(err).includes(system_1.CAP_METHOD_NOT_IMPLEMENTED)) {
+            throw new server_1.TRPCError({
+                code: 'NOT_IMPLEMENTED',
+                message: notImplementedMessage(capName, source.addonId, deviceId, method),
+            });
+        }
+        throw err;
+    }
+}
+/** One sentence for both arms, so the two paths cannot describe the same fact
+ *  differently. */
+function notImplementedMessage(capName, addonId, deviceId, method) {
+    return `Capability "${capName}" source "${addonId}" for device ${deviceId} does not implement "${method}"`;
 }
 /**
  * The `startMs` a row is ordered by, or null when the row does not declare a
@@ -323,7 +346,7 @@ async function fanOut(sources, method, input, capName, deviceId, logger) {
             });
             continue;
         }
-        rows.push(...finishRows(source, result.value, isSourceListing));
+        rows.push(...finishRows(source, result.value, isSourceListing, capName, deviceId, logger));
     }
     return mergeRows(rows);
 }
@@ -345,7 +368,7 @@ async function fanOut(sources, method, input, capName, deviceId, logger) {
  * filters any more; the filtering happened when {@link sourcesForDevice} read
  * the bindings.
  */
-function finishRows(source, rows, isSourceListing) {
+function finishRows(source, rows, isSourceListing, capName, deviceId, logger) {
     if (!isSourceListing)
         return rows;
     const out = [];
@@ -354,6 +377,25 @@ function finishRows(source, rows, isSourceListing) {
             out.push(row);
             continue;
         }
+        const id = Reflect.get(row, SOURCE_ID_FIELD);
+        if (typeof id === 'string') {
+            const owner = (0, types_1.reservedSourceOwner)(capName, id);
+            if (owner !== null && owner !== source.addonId) {
+                // A RESERVED id (D625) is the DEFAULT of a picker, expressed as a
+                // value rather than as a sort order. A second row spelling it would
+                // put that default back behind the fan-out order — the
+                // `?? sources[0]` accident the reservation exists to remove. The row
+                // goes and the addon's own rows stay: it may well have real sources,
+                // and emptying a camera's picker over one bad row is worse than the
+                // bad row. The guard in `scripts/` refuses the same spelling at build
+                // time; this is what happens when an old build reaches a new hub.
+                logger?.warn(`${capName}.${exports.SOURCE_LISTING_METHOD}: source id "${id}" is RESERVED for "${owner}" — this addon's row is dropped`, {
+                    tags: { deviceId, addonId: source.addonId },
+                    meta: { capability: capName, sourceId: id, reservedFor: owner },
+                });
+                continue;
+            }
+        }
         out.push({ ...row, [SOURCE_ADDON_FIELD]: source.addonId });
     }
     return out;
@@ -508,7 +550,7 @@ function requireDeviceCollection(registry, capName, logger) {
                         const answered = await callSource(first, prop, input, capName, deviceId);
                         if (!Array.isArray(answered))
                             return answered;
-                        return finishRows(first, answered, prop === exports.SOURCE_LISTING_METHOD);
+                        return finishRows(first, answered, prop === exports.SOURCE_LISTING_METHOD, capName, deviceId, logger);
                     }
                     return await fanOut(sources, prop, input, capName, deviceId, logger);
                 }

package/dist/api/trpc/generated-cap-mounts.js

@@ -218,7 +218,6 @@ function mountAllCaps(services) {
         }, remoteCapProxy),
         enumSensor: (0, generated_cap_routers_js_1.createCapRouter_enumSensor)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'enum-sensor'), remoteCapProxy),
         eventEmitter: (0, generated_cap_routers_js_1.createCapRouter_eventEmitter)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'event-emitter'), remoteCapProxy),
-        events: (0, generated_cap_routers_js_1.createCapRouter_events)((_ctx) => reg?.getSingleton('events') ?? null, remoteCapProxy),
         faceGallery: (0, generated_cap_routers_js_1.createCapRouter_faceGallery)((_ctx) => reg?.getSingleton('face-gallery') ?? null, remoteCapProxy),
         failureContribution: (0, generated_cap_routers_js_1.createCapRouter_failureContribution)((_ctx, addonId) => {
             if (!reg)
@@ -428,7 +427,9 @@ function mountAllCaps(services) {
         ptz: (0, generated_cap_routers_js_1.createCapRouter_ptz)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'ptz'), remoteCapProxy),
         ptzAutotrack: (0, generated_cap_routers_js_1.createCapRouter_ptzAutotrack)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'ptz-autotrack'), remoteCapProxy),
         reboot: (0, generated_cap_routers_js_1.createCapRouter_reboot)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'reboot'), remoteCapProxy),
-        recording: (0, generated_cap_routers_js_1.createCapRouter_recording)((_ctx) => reg?.getSingleton('recording') ?? null, remoteCapProxy),
+        recording: (0, generated_cap_routers_js_1.createCapRouter_recording)((_ctx) => (0, device_collection_dispatch_js_1.requireDeviceCollection)(reg, 'recording'), remoteCapProxy),
+        recordingArchive: (0, generated_cap_routers_js_1.createCapRouter_recordingArchive)((_ctx) => reg?.getSingleton('recording-archive') ??
+            null, remoteCapProxy),
         recordingExport: (0, generated_cap_routers_js_1.createCapRouter_recordingExport)((_ctx) => reg?.getSingleton('recording-export') ??
             null, remoteCapProxy),
         recordingOnboard: (0, generated_cap_routers_js_1.createCapRouter_recordingOnboard)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'recording-onboard'), remoteCapProxy),