@camstack/server 1.2.75 → 1.2.76

package/dist/agent/builtins-seed.js

@@ -72,13 +72,18 @@ function seedBuiltinsFromClosure(addonsDir, log = console.log, resolveClosurePkg
         log(`[Agent] builtins seed: closure copy at ${closureRoot} has no dist — cannot self-heal`);
         return 'unavailable';
     }
-    fs.mkdirSync(target, { recursive: true });
-    fs.copyFileSync(closurePkgJson, path.join(target, 'package.json'));
-    fs.cpSync(closureDist, path.join(target, 'dist'), {
-        recursive: true,
-        filter: (src) => !src.split(path.sep).includes('node_modules'),
-    });
+    // The WHOLE package, node_modules included. A deps-free copy was tried
+    // first and failed live (2026-08-08): the builtins' dist requires native
+    // deps (better-sqlite3) that resolve relative to the COPY, so the addon
+    // scan logged "Failed to scan" and the guard aborted with "no addon
+    // under /data/addons" — while the log right above it said the seed had
+    // run. Nested `node_modules` are safe: the scan reads one level of
+    // `addonsDir/@scope/*`, never inside a package. (The double-registration
+    // the deps-free copy was guarding against was actually the per-capability
+    // init loop — fixed by `planInfraBoot` — not nested discovery.)
+    fs.mkdirSync(path.dirname(target), { recursive: true });
+    fs.cpSync(closureRoot, target, { recursive: true });
     log(`[Agent] builtins seed: @camstack/system was missing under ${addonsDir} — ` +
-        `seeded package.json + dist from the running closure (${closureRoot})`);
+        `seeded the full package from the running closure (${closureRoot})`);
     return 'seeded';
 }

package/dist/api/trpc/generated-cap-routers.js

@@ -8258,6 +8258,24 @@ function createCapRouter_streamBroker(getProvider, createRemoteProxy) {
             // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-argument
             return p.renderPreBufferClip(methodInput);
         }),
+        produceEventMedia: trpc_middleware_js_1.adminProcedure
+            .input(types_103.streamBrokerCapability.methods.produceEventMedia.input.loose())
+            .output(types_103.streamBrokerCapability.methods.produceEventMedia.output)
+            .mutation(async ({ input, ctx }) => {
+            const { nodeId, ...methodInput } = input;
+            const p = resolveProvider('stream-broker', nodeId, () => getProvider(ctx), createRemoteProxy);
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-argument
+            return p.produceEventMedia(methodInput);
+        }),
+        fetchEventMedia: trpc_middleware_js_1.adminProcedure
+            .input(types_103.streamBrokerCapability.methods.fetchEventMedia.input.loose())
+            .output(types_103.streamBrokerCapability.methods.fetchEventMedia.output)
+            .mutation(async ({ input, ctx }) => {
+            const { nodeId, ...methodInput } = input;
+            const p = resolveProvider('stream-broker', nodeId, () => getProvider(ctx), createRemoteProxy);
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-argument
+            return p.fetchEventMedia(methodInput);
+        }),
         listAllCameraStreams: trpc_middleware_js_1.protectedProcedure
             .input(zod_1.z.object({ nodeId: zod_1.z.string().optional() }).optional())
             .output(types_103.streamBrokerCapability.methods.listAllCameraStreams.output)

package/dist/core/addon/addon-registry.service.js

@@ -3081,8 +3081,29 @@ class AddonRegistryService {
             return;
         let catalog;
         try {
-            // Cache-bust so a hot-updated bundle is re-read instead of served
-            // from Node's ESM module cache.
+            // ── The query string does NOT bust a CommonJS bundle ──────────────
+            //
+            // Every addon here builds to CJS, and Node's ESM loader serves a CJS
+            // module out of the REQUIRE cache, which is keyed by the resolved
+            // filename with the query stripped. So `?t=<now>` below busts nothing
+            // for them: this function re-registered the catalog captured at hub boot
+            // on every restart, forever.
+            //
+            // The consequence was invisible and total: an EXISTING action kept
+            // working, so nothing looked broken, while a NEWLY added one could never
+            // become reachable without restarting the whole hub process — which
+            // quietly falsifies the reason bridge actions exist ("no codegen, no
+            // republish, no train"). Found 2026-08-08, deploying `nc.injectTestEvent`:
+            // the deploy succeeded, the restart logged "custom actions registered",
+            // and the action 404'd.
+            //
+            // Dropping the addon's own modules from the require cache is what
+            // actually re-reads the bundle. Scoped to the addon directory so no other
+            // addon's (or the hub's own) modules are evicted, and best-effort: a
+            // cache that cannot be walked leaves the previous behaviour rather than
+            // failing the registration.
+            purgeRequireCacheUnder(path.dirname(entryPath));
+            // Kept for a genuinely ESM addon entry, where it IS the mechanism.
             const cacheBustedUrl = `${(0, node_url_1.pathToFileURL)(entryPath).href}?t=${Date.now()}`;
             // A plain `await import()` here is downleveled by tsc (the backend builds
             // with `module: CommonJS`) into a `require()`-based shim. `require()` then
@@ -3136,3 +3157,32 @@ class AddonRegistryService {
     }
 }
 exports.AddonRegistryService = AddonRegistryService;
+/**
+ * Drop every `require`-cached module that lives under `dir`.
+ *
+ * Node's ESM loader serves a CommonJS module from the require cache, keyed by
+ * the resolved filename — the `?t=` query an ESM import uses to force a re-read
+ * is stripped before that lookup and therefore does nothing. Since every addon
+ * bundle here is CJS, evicting the addon's own entries is what makes a
+ * hot-updated bundle actually load.
+ *
+ * Scoped to one directory on purpose: a blanket cache clear would evict the
+ * hub's own modules and every other addon's, turning a catalog refresh into a
+ * process-wide reload. Best-effort — a cache that cannot be walked leaves the
+ * previous (stale) behaviour rather than failing the caller.
+ */
+function purgeRequireCacheUnder(dir) {
+    try {
+        const cache = require.cache;
+        if (cache === undefined)
+            return;
+        const prefix = dir.endsWith(path.sep) ? dir : `${dir}${path.sep}`;
+        for (const key of Object.keys(cache)) {
+            if (key.startsWith(prefix))
+                delete cache[key];
+        }
+    }
+    catch {
+        // Non-CJS host, or a frozen cache. The import below still runs.
+    }
+}

package/dist/launcher.js

@@ -278,7 +278,30 @@ async function launch() {
     // @camstack/system is imported DYNAMICALLY here — AFTER the active framework
     // dir + NODE_PATH are resolved above — so the correct framework copy is what
     // gets loaded. Never import it at module top.
-    const { AddonInstaller, bootstrapSchema, detectWorkspacePackagesDir } = await Promise.resolve().then(() => __importStar(require('@camstack/system')));
+    const { AddonInstaller, bootstrapSchema, detectWorkspacePackagesDir, quarantineAddonResidue } = await Promise.resolve().then(() => __importStar(require('@camstack/system')));
+    // Residue quarantine — FIRST thing that touches the addon root, before the
+    // bootstrap seed writes into it and long before any loader scans it.
+    //
+    // A directory under `addons/@camstack` whose name is not the package it
+    // declares is not an archive: the loader, the agent's boot scan and the
+    // install manifest all key on the `package.json` inside, so a rename
+    // INSTALLS. On 2026-08-07/08 that shipped `@camstack/system 1.2.3` as the
+    // reported version on a node running a 1.2.61 closure, and kept a 17-day-old
+    // `better_sqlite3.node` mapped into the live process. Moved, never deleted —
+    // the cleanup that deleted one of these gutted an agent the same evening.
+    //
+    // Guarded with a typeof check for the same reason `reconcileManifest` is: a
+    // system-only framework update can swap in a build that predates this.
+    if (typeof quarantineAddonResidue === 'function') {
+        const residue = quarantineAddonResidue(addonsDir, (msg) => console.log(msg));
+        if (residue.quarantined.length > 0 || residue.failed.length > 0) {
+            console.log(`[launcher] Addon residue — quarantined ${residue.quarantined.length}, ` +
+                `failed ${residue.failed.length}`);
+        }
+    }
+    else {
+        console.warn('[launcher] quarantineAddonResidue unavailable — skipping residue quarantine');
+    }
     // Install source resolution:
     //   1. CAMSTACK_BUNDLED_ADDONS_DIR — set by Electron-packaged builds
     //      to <resourcesPath>/addons. Pre-built addons ship with the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.2.75",
+  "version": "1.2.76",
   "private": false,
   "files": [
     "dist",
@@ -33,19 +33,19 @@
     ]
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.2.35",
+    "@camstack/addon-admin-ui": "1.2.36",
     "@camstack/addon-agent-ui": "1.2.10",
     "@camstack/addon-auth": "1.2.11",
     "@camstack/addon-decoder-nodeav": "1.2.9",
     "@camstack/addon-notifiers": "1.2.13",
-    "@camstack/addon-pipeline": "1.2.46",
-    "@camstack/addon-pipeline-orchestrator": "1.2.29",
-    "@camstack/addon-post-analysis": "1.2.51",
+    "@camstack/addon-pipeline": "1.2.47",
+    "@camstack/addon-pipeline-orchestrator": "1.2.30",
+    "@camstack/addon-post-analysis": "1.2.52",
     "@camstack/sdk": "1.2.10",
     "@camstack/shm-ring": "1.1.9",
-    "@camstack/system": "1.2.61",
-    "@camstack/types": "1.2.45",
-    "@camstack/ui-library": "1.2.33",
+    "@camstack/system": "1.2.62",
+    "@camstack/types": "1.2.46",
+    "@camstack/ui-library": "1.2.34",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",
     "@fastify/cors": "^11.2.0",