@camstack/server 1.2.381 → 1.2.382

package/dist/api/core/cap-providers.js

@@ -218,6 +218,8 @@ function buildNetworkQualityProvider(nq) {
                 jitterMs: input.jitterMs,
                 estimatedBandwidthKbps: input.estimatedBandwidthKbps,
                 packetLossPercent: input.packetLossPercent,
+                ...(input.downlinkMbps !== undefined ? { downlinkMbps: input.downlinkMbps } : {}),
+                ...(input.downlinkAgeMs !== undefined ? { downlinkAgeMs: input.downlinkAgeMs } : {}),
             });
         },
     };

package/dist/api/health/adaptive-probe.routes.js

@@ -1,12 +1,66 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ADAPTIVE_PROBE_BYTES = void 0;
+exports.ADAPTIVE_PROBE_PER_IP_PER_MINUTE = exports.ADAPTIVE_PROBE_BYTES = void 0;
 exports.registerAdaptiveProbeRoute = registerAdaptiveProbeRoute;
-exports.ADAPTIVE_PROBE_BYTES = 128 * 1024;
-const BODY = Buffer.alloc(exports.ADAPTIVE_PROBE_BYTES, 0x61);
-function registerAdaptiveProbeRoute(fastify) {
-    fastify.get('/adaptive-probe', async (_req, reply) => {
+/**
+ * Burst blob for adaptive-tier downlink measurement (D635).
+ *
+ * Size: 1 MiB. The client times the body from its FIRST byte and decides
+ * against 2.5 Mbps (`mid`) and 8 Mbps (`high`). At 8 Mbps, 1 MiB is ~1.05 s of
+ * transfer, so a 16 ms WebView timer tick is ~1.5 % of the reading and a WAN
+ * slow start (~3 RTTs at 50 ms) is ~15 %; the previous 128 KiB was 131 ms at
+ * the same rate — a single timer tick was 12 % of it, and timed from the
+ * request on a busy hub it measured latency (1.2–1.46 Mbps on a LAN).
+ *
+ * Cost, including cellular: one probe per camera app-wide per 30 s cache
+ * window (the client single-flights it), cut by the client's 2.5 s deadline —
+ * at most ~0.8 MB at 2.5 Mbps, 1 MiB on anything faster. That is about three
+ * minutes of a 41 kbps sub stream per camera OPEN, not per minute of viewing;
+ * renegotiations reuse the cached value and never probe.
+ *
+ * Access (round 3, review I6): a 100-byte request that returns 1 MiB is an
+ * amplifier, and the hub is reachable through relays. The route therefore
+ * requires a SESSION — Bearer JWT or the session cookie, the same session-grade
+ * check the stream data plane applies — and is rate-limited per client IP.
+ * Everything a refusal returns is a few bytes.
+ */
+const node_crypto_1 = require("node:crypto");
+const health_routes_js_1 = require("./health.routes.js");
+const auth_rate_limit_js_1 = require("../../auth/auth-rate-limit.js");
+exports.ADAPTIVE_PROBE_BYTES = 1024 * 1024;
+/**
+ * Probes a client IP may draw per minute: 12. The client probes at most once
+ * per 30 s per app (single-flight + cache), so 12 leaves room for several
+ * apps/devices behind one NAT and caps an abuser at 12 MiB/min.
+ */
+exports.ADAPTIVE_PROBE_PER_IP_PER_MINUTE = 12;
+/**
+ * Random, so it is INCOMPRESSIBLE. The previous body was one repeated byte and
+ * `@fastify/compress` (global in `main.ts`; its default types include
+ * `octet-stream`) gzipped it to a few hundred bytes — the client timed a round
+ * trip and called it bandwidth. `compress: false` below stops our own
+ * compressor; randomness also defeats one in a relay on the way.
+ */
+const BODY = (0, node_crypto_1.randomBytes)(exports.ADAPTIVE_PROBE_BYTES);
+function registerAdaptiveProbeRoute(fastify, deps) {
+    fastify.get('/adaptive-probe', { compress: false }, async (req, reply) => {
         reply.header('cache-control', 'no-store');
+        const authorized = (0, health_routes_js_1.isAuthorizedHealthRequest)({
+            ...(typeof req.headers.authorization === 'string'
+                ? { authorization: req.headers.authorization }
+                : {}),
+            ...(typeof req.headers.cookie === 'string' ? { cookie: req.headers.cookie } : {}),
+        }, deps.verifyToken);
+        if (!authorized)
+            return reply.status(401).send({ ok: false, error: 'unauthorized' });
+        const key = (0, auth_rate_limit_js_1.clientKeyFromRequest)(req);
+        if (key !== null) {
+            const verdict = deps.limiter.check(`adaptive-probe:${key}`);
+            if (!verdict.allowed) {
+                reply.header('retry-after', String(verdict.retryAfterSeconds));
+                return reply.status(429).send({ ok: false, error: 'rate limited' });
+            }
+        }
         reply.header('content-type', 'application/octet-stream');
         return reply.send(BODY);
     });

package/dist/api/trpc/generated-cap-routers.js

@@ -3136,6 +3136,15 @@ function createCapRouter_deviceManager(getProvider, createRemoteProxy) {
             // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-argument
             return p.getAllBindings(methodInput);
         }),
+        listDeviceIdsByCaps: trpc_middleware_js_1.protectedProcedure
+            .input(types_43.deviceManagerCapability.methods.listDeviceIdsByCaps.input.loose())
+            .output(types_43.deviceManagerCapability.methods.listDeviceIdsByCaps.output)
+            .query(async ({ input, ctx }) => {
+            const { nodeId, ...methodInput } = input;
+            const p = resolveProvider('device-manager', nodeId, () => getProvider(ctx), createRemoteProxy);
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-argument
+            return p.listDeviceIdsByCaps(methodInput);
+        }),
         setWrapperActive: trpc_middleware_js_1.adminProcedure
             .input(types_43.deviceManagerCapability.methods.setWrapperActive.input.loose())
             .output(types_43.deviceManagerCapability.methods.setWrapperActive.output)

package/dist/main.js

@@ -60,6 +60,7 @@ const addon_upload_1 = require("./api/addon-upload");
 const auth_whoami_1 = require("./api/auth-whoami");
 const backup_download_js_1 = require("./api/backup-download.js");
 const health_routes_1 = require("./api/health/health.routes");
+const auth_rate_limit_1 = require("./auth/auth-rate-limit");
 const adaptive_probe_routes_1 = require("./api/health/adaptive-probe.routes");
 const model_distributor_js_1 = require("./api/model-distributor.js");
 const oauth2_routes_js_1 = require("./api/oauth2/oauth2-routes.js");
@@ -583,7 +584,10 @@ async function bootstrap() {
             verifyToken: (token) => app.get(auth_service_1.AuthService).verifyToken(token),
         });
         console.log(`[bootstrap] Health routes registered (hub v${hubVersion})`);
-        (0, adaptive_probe_routes_1.registerAdaptiveProbeRoute)(fastify);
+        (0, adaptive_probe_routes_1.registerAdaptiveProbeRoute)(fastify, {
+            verifyToken: (token) => app.get(auth_service_1.AuthService).verifyToken(token),
+            limiter: (0, auth_rate_limit_1.createRateLimiter)({ windowMs: 60_000, max: adaptive_probe_routes_1.ADAPTIVE_PROBE_PER_IP_PER_MINUTE }),
+        });
     }
     catch (err) {
         console.warn('[bootstrap] Failed to register health routes:', err);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.2.381",
+  "version": "1.2.382",
   "private": false,
   "files": [
     "dist",
@@ -35,18 +35,18 @@
     ]
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.2.262",
-    "@camstack/addon-agent-ui": "1.2.143",
+    "@camstack/addon-admin-ui": "1.2.264",
+    "@camstack/addon-agent-ui": "1.2.145",
     "@camstack/addon-auth": "1.2.123",
     "@camstack/addon-decoder-nodeav": "1.2.115",
     "@camstack/addon-notifiers": "1.2.120",
-    "@camstack/addon-pipeline": "1.2.290",
-    "@camstack/addon-pipeline-orchestrator": "1.2.247",
-    "@camstack/addon-post-analysis": "1.2.277",
+    "@camstack/addon-pipeline": "1.2.292",
+    "@camstack/addon-pipeline-orchestrator": "1.2.249",
+    "@camstack/addon-post-analysis": "1.2.279",
     "@camstack/sdk": "1.2.118",
-    "@camstack/system": "1.2.295",
-    "@camstack/types": "1.2.251",
-    "@camstack/ui-library": "1.2.201",
+    "@camstack/system": "1.2.297",
+    "@camstack/types": "1.2.253",
+    "@camstack/ui-library": "1.2.203",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",
     "@fastify/cors": "^11.2.0",