@camstack/server 1.2.683 → 1.2.685

package/CHANGELOG.md

@@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.2.685] - 2026-10-29
+
+### Added
+
+- Generated routers for the new ir-transmitter and remote capabilities
+- The remote and template capabilities are routed, and a bound remote command is honoured on cross-node calls
+
+## [1.2.684] - 2026-10-29
+
+### Changed
+
+- A form posted through an addon's data plane (a vendor sign-in page) reaches the addon unchanged instead of re-encoded as JSON
+
 ## [1.2.683] - 2026-10-28
 
 ### Changed

package/dist/api/data-plane/form-body.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseFormBody = parseFormBody;
+exports.registerFormBodyParser = registerFormBodyParser;
+exports.dataPlaneReplayBody = dataPlaneReplayBody;
+const FORM_CONTENT_TYPE = 'application/x-www-form-urlencoded';
+const rawFormBodies = new WeakMap();
+/** Parse a urlencoded body string into a plain object (duplicate keys collapse). */
+function parseFormBody(raw) {
+    const result = {};
+    for (const [key, value] of new URLSearchParams(raw).entries()) {
+        result[key] = value;
+    }
+    return result;
+}
+/** Register the urlencoded parser: the parsed object for hub routes, the raw bytes on the side. */
+function registerFormBodyParser(fastify) {
+    fastify.addContentTypeParser(FORM_CONTENT_TYPE, { parseAs: 'buffer' }, (req, body, done) => {
+        try {
+            const bytes = Buffer.isBuffer(body) ? body : Buffer.from(body);
+            rawFormBodies.set(req.raw, bytes);
+            done(null, parseFormBody(bytes.toString('utf8')));
+        }
+        catch (err) {
+            done(err instanceof Error ? err : new Error(String(err)), undefined);
+        }
+    });
+}
+/**
+ * The bytes a data-plane upstream receives. Never a re-serialised object: a
+ * parsed body with no recorded raw bytes is a bug path, logged (no values) and
+ * refused with `null`.
+ */
+function dataPlaneReplayBody(raw, body, logger) {
+    if (body === undefined)
+        return undefined;
+    if (Buffer.isBuffer(body))
+        return body;
+    if (typeof body === 'string')
+        return Buffer.from(body);
+    const recorded = rawFormBodies.get(raw);
+    if (recorded !== undefined)
+        return recorded;
+    // A JSON body is re-serialised from its parsed object (Fastify's JSON parser
+    // keeps no bytes); every other parsed object has lost its original encoding.
+    const contentType = String(raw.headers['content-type'] ?? '');
+    if (/^application\/(?:[\w.+-]+\+)?json\b/i.test(contentType)) {
+        return Buffer.from(JSON.stringify(body));
+    }
+    logger.error('data-plane request body was parsed but its raw bytes were not recorded', {
+        tags: { contentType: String(raw.headers['content-type'] ?? ''), url: raw.url ?? '' },
+    });
+    return null;
+}

package/dist/api/oauth2/oauth2-routes.js

@@ -9,6 +9,7 @@ exports.registerOauth2Routes = registerOauth2Routes;
 const types_1 = require("@camstack/types");
 const session_cookie_js_1 = require("../../auth/session-cookie.js");
 const app_page_strings_js_1 = require("../../auth/app-page-strings.js");
+const form_body_js_1 = require("../data-plane/form-body.js");
 const consent_page_js_1 = require("./consent-page.js");
 const private_host_js_1 = require("./private-host.js");
 /**
@@ -328,27 +329,10 @@ async function readIntegrationRegistry(registry) {
         .filter((addonId) => !registry.hasProvider('oauth-integration', addonId));
     return { descriptors, pendingAddons };
 }
-/** Parse an application/x-www-form-urlencoded body string into a plain object. */
-function parseFormBody(raw) {
-    const params = new URLSearchParams(raw);
-    const result = {};
-    for (const [key, value] of params.entries()) {
-        result[key] = value;
-    }
-    return result;
-}
 function registerOauth2Routes(fastify, deps) {
-    // Register a content-type parser for application/x-www-form-urlencoded so that
-    // consent POST and token POST can read form bodies. @fastify/formbody is not in
-    // the project's dependencies; we use URLSearchParams (Node built-in) instead.
-    fastify.addContentTypeParser('application/x-www-form-urlencoded', { parseAs: 'string' }, (_req, body, done) => {
-        try {
-            done(null, parseFormBody(body));
-        }
-        catch (err) {
-            done(err, undefined);
-        }
-    });
+    // Form bodies (consent POST, token POST): parsed object for these routes, raw
+    // bytes recorded for the data plane (api/data-plane/form-body.ts).
+    (0, form_body_js_1.registerFormBodyParser)(fastify);
     // ─── GET /api/oauth2/authorize ────────────────────────────────────────────
     // Mounted under /api/* so it is naturally excluded from the SPA catch-all,
     // the PWA service-worker navigate fallback, and the Vite dev proxy — no

package/dist/api/trpc/generated-cap-mounts.js

@@ -2,7 +2,7 @@
 // AUTO-GENERATED by scripts/generate-cap-mounts.ts — DO NOT EDIT
 // Re-run: npx tsx scripts/generate-cap-mounts.ts
 //
-// Mounted: 185    Skipped (legacy): 3
+// Mounted: 187    Skipped (legacy): 3
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LEGACY_SHAPE_SKIP = void 0;
 exports.mountAllCaps = mountAllCaps;
@@ -516,6 +516,7 @@ function mountAllCaps(services) {
         recordingOnboard: (0, generated_cap_routers_js_1.createCapRouter_recordingOnboard)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'recording-onboard'), remoteCapProxy),
         recordingSignal: (0, generated_cap_routers_js_1.createCapRouter_recordingSignal)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'recording-signal'), remoteCapProxy),
         records: (0, generated_cap_routers_js_1.createCapRouter_records)((_ctx) => reg?.getSingleton('records') ?? null, remoteCapProxy),
+        remote: (0, generated_cap_routers_js_1.createCapRouter_remote)((_ctx) => reg?.getSingleton('remote') ?? null, remoteCapProxy),
         runningState: (0, generated_cap_routers_js_1.createCapRouter_runningState)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'running-state'), remoteCapProxy),
         sceneMonitor: (0, generated_cap_routers_js_1.createCapRouter_sceneMonitor)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'scene-monitor'), remoteCapProxy),
         scriptRunner: (0, generated_cap_routers_js_1.createCapRouter_scriptRunner)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'script-runner'), remoteCapProxy),
@@ -587,6 +588,22 @@ function mountAllCaps(services) {
         system: (0, generated_cap_routers_js_1.createCapRouter_system)((_ctx) => reg?.getSingleton('system') ?? null, remoteCapProxy),
         tamper: (0, generated_cap_routers_js_1.createCapRouter_tamper)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'tamper'), remoteCapProxy),
         temperatureSensor: (0, generated_cap_routers_js_1.createCapRouter_temperatureSensor)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'temperature-sensor'), remoteCapProxy),
+        template: (0, generated_cap_routers_js_1.createCapRouter_template)((_ctx, addonId) => {
+            if (!reg)
+                return null;
+            if (addonId !== undefined) {
+                return reg.getProviderByAddonId('template', addonId);
+            }
+            const entries = reg.getCollectionEntries('template');
+            if (entries.length === 0)
+                return null;
+            const providers = entries.map(([, p]) => p);
+            const first = providers[0];
+            return {
+                ...first,
+                list: (0, cap_mount_helpers_js_1.concatCollection)(providers, 'list'),
+            };
+        }, remoteCapProxy),
         terminalSession: (0, generated_cap_routers_js_1.createCapRouter_terminalSession)((_ctx) => reg?.getSingleton('terminal-session') ??
             null, remoteCapProxy),
         toast: (0, generated_cap_routers_js_1.createCapRouter_toast)((_ctx) => reg?.getSingleton('toast') ?? null, remoteCapProxy),