@camstack/system 1.2.84 → 1.2.86

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Ft as nodePin, Ht as EventCategory, St as DeviceType, bt as DeviceFeature, dt as streamQualityLabel, gt as BaseAddon, ht as errMsg, i as BatteryStatusSchema, st as snapshotCapability, w as bareAddonId } from "../../dist-BAwlOEUy.mjs";
+import { Ft as nodePin, Ht as EventCategory, St as DeviceType, bt as DeviceFeature, dt as streamQualityLabel, gt as BaseAddon, ht as errMsg, i as BatteryStatusSchema, st as snapshotCapability, w as bareAddonId } from "../../dist-B90N7AWO.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { signExpiringUrl, verifyExpiringUrl } from "@camstack/types/node";
@@ -865,6 +865,11 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 	*  currently holding, which is a fleet-wide blank grid after each restart. */
 	linkSecret = null;
 	/**
+	* In-flight `serveLinkDataPlane` attempt, so the retry below cannot start a
+	* second one while the first is still awaiting the settings store.
+	*/
+	linkPlaneAttempt = null;
+	/**
 	* How a full frame becomes a card-sized one. Defaults to the real ffmpeg
 	* resize; injectable so the wrapper's own logic is testable without spawning a
 	* process for every fixture. `JpegResizer` was declared for exactly this and
@@ -893,7 +898,7 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 			if (typeof deviceId === "number") this.evictRemovedDevice(deviceId, "device-unregistered");
 		});
 		await this.serveMediaDataPlane();
-		await this.serveLinkDataPlane();
+		await this.ensureLinkDataPlane();
 		return [{
 			capability: snapshotCapability,
 			provider
@@ -926,6 +931,33 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 		}
 	}
 	/**
+	* Serve the link plane if it is not already served — at init, and again on
+	* the first `getSnapshotLinks` after an attempt that could not finish.
+	*
+	* The retry is not defensive padding, it is the whole reason this wrapper
+	* exists. The plane needs a persisted signing secret, and the secret needs
+	* the settings store; this addon now boots in its OWN process, so "the store
+	* is not answering yet" is a state it can genuinely observe. A one-shot
+	* attempt turns that instant into a permanent condition: `linkDataPlane`
+	* stays null, every `getSnapshotLinks` row answers `url: null`, and every
+	* tile on every grid stays blank until someone restarts the runner. Nothing
+	* in the logs would say why, because nothing failed twice.
+	*
+	* Single-flighted: a burst of link requests joins one attempt.
+	*/
+	async ensureLinkDataPlane() {
+		if (this.linkDataPlane !== null) return;
+		if (this.linkPlaneAttempt !== null) {
+			await this.linkPlaneAttempt;
+			return;
+		}
+		const attempt = this.serveLinkDataPlane().finally(() => {
+			this.linkPlaneAttempt = null;
+		});
+		this.linkPlaneAttempt = attempt;
+		await attempt;
+	}
+	/**
 	* Serve the PUBLIC link plane: `GET /addon/snapshot/link/<deviceId>.jpg?w&v&exp&sig`.
 	*
 	* `access: 'public'` is deliberate and is the only interesting decision here.
@@ -994,20 +1026,42 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 	linkRoutePrefix() {
 		return `/addon/${bareAddonId(this.ctx.id)}/link`;
 	}
-	/** Mint-once-and-persist the signing secret. Null if it cannot be stored — a
-	*  secret held only in memory would break every outstanding link on restart,
-	*  so no plane is better than a plane whose links die unpredictably. */
+	/**
+	* Mint-once-and-persist the signing secret. Null when it cannot be
+	* ESTABLISHED — a secret held only in memory would break every outstanding
+	* link on restart, so no plane is better than a plane whose links die
+	* unpredictably.
+	*
+	* A null is never cached, so the next `getSnapshotLinks` tries again. That
+	* matters now the wrapper runs in its own process: the settings store can be
+	* a moment behind at boot, and this used to be a one-shot.
+	*
+	* The read-back is the gate. `state.get()` cannot distinguish "no secret
+	* yet" from "the store could not be read" — `readAddonStoreWithRetry` gives
+	* up and answers `{}` — so a store that is merely slow reads as empty and
+	* this would mint a SECOND secret over a perfectly good first one, silently
+	* invalidating every link a client is holding. Reading back what we just
+	* wrote is the only evidence available at this layer that the store is
+	* actually answering, and a mismatch means it is not.
+	*/
 	async ensureLinkSecret() {
 		if (this.linkSecret !== null) return this.linkSecret;
 		try {
 			const state = this.state("snapshotLinkSecret", z.string(), "");
-			let secret = await state.get();
-			if (secret === "") {
-				secret = randomUUID().replace(/-/g, "");
-				await state.set(secret);
+			const stored = await state.get();
+			if (stored !== "") {
+				this.linkSecret = stored;
+				return stored;
+			}
+			const minted = randomUUID().replace(/-/g, "");
+			await state.set(minted);
+			const confirmed = await state.get();
+			if (confirmed !== minted) {
+				this.ctx.logger.warn("snapshot: link secret did not persist — deferring the link plane rather than signing with a secret that will not survive", { meta: { confirmedEmpty: confirmed === "" } });
+				return null;
 			}
-			this.linkSecret = secret;
-			return secret;
+			this.linkSecret = minted;
+			return minted;
 		} catch (err) {
 			this.ctx.logger.warn("snapshot: could not establish link signing secret", { meta: { error: errMsg(err) } });
 			return null;
@@ -1038,6 +1092,7 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 	* forward.
 	*/
 	async getSnapshotLinks(input) {
+		await this.ensureLinkDataPlane();
 		const secret = await this.ensureLinkSecret();
 		const expMs = snapshotLinkExpiry(Date.now(), SNAPSHOT_LINK_TTL_MS);
 		const served = this.linkDataPlane !== null && secret !== null;

package/dist/builtins/snapshot/snapshot.addon.d.ts

@@ -81,6 +81,11 @@ export declare class SnapshotAddon extends BaseAddon<SnapshotAddonConfig> {
      *  secret that rolled on every boot would invalidate every link a client is
      *  currently holding, which is a fleet-wide blank grid after each restart. */
     private linkSecret;
+    /**
+     * In-flight `serveLinkDataPlane` attempt, so the retry below cannot start a
+     * second one while the first is still awaiting the settings store.
+     */
+    private linkPlaneAttempt;
     /**
      * How a full frame becomes a card-sized one. Defaults to the real ffmpeg
      * resize; injectable so the wrapper's own logic is testable without spawning a
@@ -101,6 +106,22 @@ export declare class SnapshotAddon extends BaseAddon<SnapshotAddonConfig> {
      * base64 path.
      */
     private serveMediaDataPlane;
+    /**
+     * Serve the link plane if it is not already served — at init, and again on
+     * the first `getSnapshotLinks` after an attempt that could not finish.
+     *
+     * The retry is not defensive padding, it is the whole reason this wrapper
+     * exists. The plane needs a persisted signing secret, and the secret needs
+     * the settings store; this addon now boots in its OWN process, so "the store
+     * is not answering yet" is a state it can genuinely observe. A one-shot
+     * attempt turns that instant into a permanent condition: `linkDataPlane`
+     * stays null, every `getSnapshotLinks` row answers `url: null`, and every
+     * tile on every grid stays blank until someone restarts the runner. Nothing
+     * in the logs would say why, because nothing failed twice.
+     *
+     * Single-flighted: a burst of link requests joins one attempt.
+     */
+    private ensureLinkDataPlane;
     /**
      * Serve the PUBLIC link plane: `GET /addon/snapshot/link/<deviceId>.jpg?w&v&exp&sig`.
      *
@@ -128,9 +149,24 @@ export declare class SnapshotAddon extends BaseAddon<SnapshotAddonConfig> {
      */
     private handleLinkRequest;
     private linkRoutePrefix;
-    /** Mint-once-and-persist the signing secret. Null if it cannot be stored — a
-     *  secret held only in memory would break every outstanding link on restart,
-     *  so no plane is better than a plane whose links die unpredictably. */
+    /**
+     * Mint-once-and-persist the signing secret. Null when it cannot be
+     * ESTABLISHED — a secret held only in memory would break every outstanding
+     * link on restart, so no plane is better than a plane whose links die
+     * unpredictably.
+     *
+     * A null is never cached, so the next `getSnapshotLinks` tries again. That
+     * matters now the wrapper runs in its own process: the settings store can be
+     * a moment behind at boot, and this used to be a one-shot.
+     *
+     * The read-back is the gate. `state.get()` cannot distinguish "no secret
+     * yet" from "the store could not be read" — `readAddonStoreWithRetry` gives
+     * up and answers `{}` — so a store that is merely slow reads as empty and
+     * this would mint a SECOND secret over a perfectly good first one, silently
+     * invalidating every link a client is holding. Reading back what we just
+     * wrote is the only evidence available at this layer that the store is
+     * actually answering, and a mismatch means it is not.
+     */
     private ensureLinkSecret;
     /**
      * Mint signed links for the tiles a surface is rendering — and, in the same

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQy9KjsL.js");
+const require_dist = require("../../dist-BV5Bug9t.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { gt as BaseAddon, ut as storageProviderCapability, z as filesystemBrowseCapability } from "../../dist-BAwlOEUy.mjs";
+import { gt as BaseAddon, ut as storageProviderCapability, z as filesystemBrowseCapability } from "../../dist-B90N7AWO.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQy9KjsL.js");
+const require_dist = require("../../dist-BV5Bug9t.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 let node_module = require("node:module");

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,4 +1,4 @@
-import { A as decodeVectorBase64, Et as asJsonObject, Lt as parseJsonUnknown, f as RUNTIME_DEFAULTS, gt as BaseAddon, ht as errMsg, k as dataStoreProviderCapability, mt as vectorStoreCapability, pt as vectorDimFromBase64, w as bareAddonId } from "../../dist-BAwlOEUy.mjs";
+import { A as decodeVectorBase64, Et as asJsonObject, Lt as parseJsonUnknown, f as RUNTIME_DEFAULTS, gt as BaseAddon, ht as errMsg, k as dataStoreProviderCapability, mt as vectorStoreCapability, pt as vectorDimFromBase64, w as bareAddonId } from "../../dist-B90N7AWO.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { statSync } from "node:fs";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQy9KjsL.js");
+const require_dist = require("../../dist-BV5Bug9t.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { It as parseJsonObject, ct as storageCapability, g as StorageMigrationJobSchema, gt as BaseAddon, h as StorageLocationTypeSchema, lt as storageMigrationCapability, ot as settingsStoreCapability } from "../../dist-BAwlOEUy.mjs";
+import { It as parseJsonObject, ct as storageCapability, g as StorageMigrationJobSchema, gt as BaseAddon, h as StorageLocationTypeSchema, lt as storageMigrationCapability, ot as settingsStoreCapability } from "../../dist-B90N7AWO.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQy9KjsL.js");
+const require_dist = require("../../dist-BV5Bug9t.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Nt as hydrateSchema, gt as BaseAddon, ht as errMsg } from "../../dist-BAwlOEUy.mjs";
+import { Nt as hydrateSchema, gt as BaseAddon, ht as errMsg } from "../../dist-B90N7AWO.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQy9KjsL.js");
+const require_dist = require("../../dist-BV5Bug9t.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-BAwlOEUy.mjs";
+import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-B90N7AWO.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";