@camstack/server 1.2.8 → 1.2.10

package/dist/api/core/cap-providers.js

@@ -41,6 +41,7 @@ exports.computeTopology = computeTopology;
 exports.createNodeRootPackageLookup = createNodeRootPackageLookup;
 exports.buildNodesProvider = buildNodesProvider;
 exports.buildIntegrationsProvider = buildIntegrationsProvider;
+exports.dispatchCustomAction = dispatchCustomAction;
 exports.buildAddonsProvider = buildAddonsProvider;
 /* eslint-disable @typescript-eslint/no-unsafe-return, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-member-access -- pre-existing lint debt across this 800-line provider-factory module. The flagged sites delegate into Moleculer/EventBus/IntegrationRegistry surfaces typed as `unknown` to break circular dependencies; runtime contracts are validated by the cap-mount-helper layer above. Tracked separately. */
 /**
@@ -972,6 +973,39 @@ function ensureCustomActionAuth(ctx, level) {
         return;
     }
 }
+/**
+ * Resolve + dispatch a single addon custom action. This is the LIVE dispatch
+ * used by the `addons.custom` cap-provider handler below — factored out so it
+ * can be unit-tested directly against the real code path.
+ *
+ * Responsibilities (in order):
+ *   1. Resolve `(addonId, action)` against the process `CustomActionRegistry`.
+ *   2. Enforce the action's declared per-action auth (`ensureCustomActionAuth`).
+ *      NOTE: the OUTER cap mount is `protected`, so unauthenticated callers are
+ *      already rejected before this runs; the generic cap-router auth matrix
+ *      covers that mount-level gate.
+ *   3. Validate input against the action's Zod schema.
+ *   4. Forward the authenticated caller only when the action opts in with
+ *      `caller: 'required'` (derived server-side from the principal, never
+ *      trusted from input).
+ *   5. Validate the addon's output — crash-early on a misbehaving addon.
+ */
+async function dispatchCustomAction(registry, ctx, input) {
+    const entry = registry.resolve(input.addonId, input.action);
+    if (!entry) {
+        throw new server_1.TRPCError({
+            code: 'NOT_FOUND',
+            message: `addon '${input.addonId}' has no custom action '${input.action}'`,
+        });
+    }
+    ensureCustomActionAuth(ctx, entry.spec.auth);
+    const parsedInput = entry.spec.input.parse(input.input);
+    const caller = entry.spec.caller === 'required' && ctx.user
+        ? { userId: ctx.user.id, isAdmin: ctx.user.isAdmin }
+        : undefined;
+    const result = await entry.handler(parsedInput, caller);
+    return entry.spec.output.parse(result);
+}
 /** A node id that refers to the hub itself (top-level or a hub group runner). */
 function isHubNode(nodeId) {
     return nodeId === 'hub' || nodeId.startsWith('hub/');
@@ -1163,20 +1197,7 @@ function buildAddonsProvider(ar, ps, ls, moleculer, configService, ctx) {
         getJob: async (input) => lifecycleRunner.getJob(input.jobId),
         listJobs: async (input) => lifecycleRunner.listJobs({ activeOnly: input.activeOnly }),
         cancelJob: async (input) => lifecycleRunner.cancelJob(input.jobId),
-        custom: async (input) => {
-            const registry = ar.getCustomActionRegistry();
-            const entry = registry.resolve(input.addonId, input.action);
-            if (!entry) {
-                throw new server_1.TRPCError({
-                    code: 'NOT_FOUND',
-                    message: `addon '${input.addonId}' has no custom action '${input.action}'`,
-                });
-            }
-            ensureCustomActionAuth(ctx, entry.spec.auth);
-            const parsedInput = entry.spec.input.parse(input.input);
-            const result = await entry.handler(parsedInput);
-            return entry.spec.output.parse(result);
-        },
+        custom: async (input) => dispatchCustomAction(ar.getCustomActionRegistry(), ctx, input),
         onAddonLogs: (input, push) => {
             const unsubscribe = ls.subscribe({ tags: { addonId: input.addonId }, level: input.level }, (entry) => {
                 push({

package/dist/api/trpc/cap-router-runtime.js

@@ -172,6 +172,12 @@ function createCapRouterServices(deps) {
         badRequest: (message) => {
             throw new server_1.TRPCError({ code: 'BAD_REQUEST', message });
         },
+        // D-1 caller-identity injection: a `caller: 'required'` method whose
+        // context carries no authenticated user fails closed — the builder
+        // never fabricates an identity.
+        unauthorized: (message) => {
+            throw new server_1.TRPCError({ code: 'UNAUTHORIZED', message });
+        },
     };
 }
 /**

package/dist/api/trpc/generated-cap-mounts.js

@@ -74,8 +74,6 @@ function mountAllCaps(services) {
         }, remoteCapProxy),
         addons: (0, generated_cap_routers_js_1.createCapRouter_addons)((_ctx) => reg?.getSingleton('addons') ?? null, remoteCapProxy),
         adminUi: (0, generated_cap_routers_js_1.createCapRouter_adminUi)((_ctx) => reg?.getSingleton('admin-ui') ?? null, remoteCapProxy),
-        advancedNotifier: (0, generated_cap_routers_js_1.createCapRouter_advancedNotifier)((_ctx) => reg?.getSingleton('advanced-notifier') ??
-            null, remoteCapProxy),
         airQualitySensor: (0, generated_cap_routers_js_1.createCapRouter_airQualitySensor)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'air-quality-sensor'), remoteCapProxy),
         alarmPanel: (0, generated_cap_routers_js_1.createCapRouter_alarmPanel)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'alarm-panel'), remoteCapProxy),
         alerts: (0, generated_cap_routers_js_1.createCapRouter_alerts)((_ctx) => reg?.getSingleton('alerts') ?? null, remoteCapProxy),
@@ -321,6 +319,7 @@ function mountAllCaps(services) {
                 discoverTargets: (0, cap_mount_helpers_js_1.concatCollection)(providers, 'discoverTargets'),
             };
         }, remoteCapProxy),
+        notificationRules: (0, generated_cap_routers_js_1.createCapRouter_notificationRules)((_ctx) => reg?.getSingleton('notification-rules') ?? null, remoteCapProxy),
         notifier: (0, generated_cap_routers_js_1.createCapRouter_notifier)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'notifier'), remoteCapProxy),
         numericSensor: (0, generated_cap_routers_js_1.createCapRouter_numericSensor)((_ctx) => (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, 'numeric-sensor'), remoteCapProxy),
         oauthIntegration: (0, generated_cap_routers_js_1.createCapRouter_oauthIntegration)((_ctx, addonId) => {