qubopy 0.2.0__tar.gz → 0.2.2__tar.gz

{qubopy-0.2.0/qubopy.egg-info → qubopy-0.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: qubopy
-Version: 0.2.0
+Version: 0.2.2
 Summary: Asynchronous Python client library and local BLE enabler for Qubo smart home devices
 Author-email: Selva Kumaran K <selvakk2k@users.noreply.github.com>
 License: MIT
@@ -156,12 +156,12 @@ python -m qubopy --help
 
 > [!IMPORTANT]
 > **Email Account Registration Guidelines & Constraints**:
-> - **Brand-New Email Address Required**: You **cannot** use an email address that was ever previously added or linked to any mobile phone account. It must be an email address that has **never been associated with any Qubo app or account**.
-> - **Phone Number Re-use is Permitted**: When registering a new email account, the Qubo app will still prompt for a phone number for SMS verification during onboarding. You **can** safely provide the exact same mobile phone number that was used for your mobile account. Login will continue to work seamlessly with your email ID and password!
 > - **Account Type Separation**: Qubo strictly routes authentication based on the registration method:
 >   - Accounts created via **email** authenticate using `qubopy login --email <email>` (continuous session with automatic refresh tokens).
 >   - Accounts created via **phone number** authenticate using `qubopy login-phone --phone <number>` (1-hour session without refresh tokens).
->   - Attempting to use email and password credentials on an account registered with a phone number will be rejected by the cloud.
+>   - Attempting to use email and password credentials on an account registered with a phone number will be rejected by Qubo with `HTTP 400: ERR_SM_002 - Invalid user`.
+> - **Reusing an Email Linked to a Phone Account**: If your email address was previously added as a contact field under your phone account, Qubo will reject it during email registration. You can resolve this by removing/deleting the email from your profile in the Qubo mobile app, logging out, and then registering a fresh account using that email address.
+> - **Phone Number Re-use is Permitted**: When registering a new email account, the Qubo app will prompt for a phone number for SMS verification during onboarding. You **can** safely provide the exact same mobile phone number that was used for your mobile account. Login will continue to work seamlessly with your email ID and password.
 
 > [!WARNING]
 > **Mobile App Session Revocation**: When you sign in via `qubopy`, the active session is visible in the official Qubo mobile app under **Account -> Logged In Devices** with the label `Qubopy` (or your custom `--device-name`).
@@ -411,7 +411,16 @@ await camera.stop_stream()
 ```
 
 > [!NOTE]
-> Cloud Wowza URLs are single-consumer sessions. Opening the stream in a media player or restreaming software terminates any active stream session using the same token. Invoke `await camera.stop_stream()` when playback ends to release server-side stream session resources.
+> **Stream Playback & Transport Requirements**:
+> - **VLC / ffplay (TCP Transport Required)**: Qubo's cloud Wowza relay on port 443 requires TCP interleaved transport. VLC defaults to UDP for RTSP, which fails to connect. Pass `--rtsp-tcp` when opening the stream:
+>   ```bash
+>   vlc --rtsp-tcp "<stream_url>"
+>   ffplay -rtsp_transport tcp "<stream_url>"
+>   ```
+> - **Web Browsers**: Browsers and HTML5 video players do not natively support `rtsps://` streams. To view the stream in a browser or dashboard, use a translation proxy like [go2rtc](https://github.com/AlexxIT/go2rtc) or WebRTC.
+> - **Paired Mobile Device Authorization**: The cloud stream manager requires a registered mobile app device ID (`userAppID`) attached to the account. `camera.start_stream()` and `qubopy stream` automatically detect and supply the account's registered mobile device ID, which can also be overridden via `user_app_id`.
+> - **Single-Consumer Sessions**: Cloud Wowza URLs are single-consumer sessions. Opening the stream in another player terminates any active session using the same token. Invoke `await camera.stop_stream()` when playback ends to release server-side resources.
+> - **Video Doorbells (`HCD` series)**: Doorbells support cloud Wowza RTSPS identical to cameras, but operate on a duty cycle—the doorbell stops transmitting video when idle, which causes players to disconnect when there is no active event. For direct local media transport over P2P UDP, an alternative pathway is also available (see Method 2 below and `ha-qubo`'s go2rtc client), which negotiates initial session signaling via the cloud before streaming media directly over local UDP.
 
 ##### 2. Local Peer-to-Peer (P2P) UDP Streaming (`camera.initiate_p2p_call()`) (`⚠️ Experimental`)
 
@@ -693,9 +702,13 @@ python -m qubopy tokens --json
 python -m qubopy devices
 python -m qubopy list-devices
 
-# Mint live Wowza RTSPS stream URL for cameras (can open in VLC or go2rtc)
+# Mint live Wowza RTSPS stream URL for cameras & doorbells (auto-resolves paired mobile userAppID)
 python -m qubopy stream
-python -m qubopy stream --device-id <camera_uuid> --quality high
+python -m qubopy stream --device-id <camera_uuid> --quality high --user-app-id <mobile_id>
+
+# Play the stream in VLC (TCP transport required) or ffplay
+vlc --rtsp-tcp "<rtsps_url>"
+ffplay -rtsp_transport tcp "<rtsps_url>"
 
 # Fetch in-car Wi-Fi AP credentials (SSID and WPA2 password) for dashcam
 python -m qubopy dashcam-wifi
@@ -707,7 +720,9 @@ python -m qubopy export-ble-keys --device-id <lock_uuid>
 # Cloud unlock smart lock via paired in-home gateway
 python -m qubopy unlock --device-id <lock_uuid>
 
-# Enable verbose debug logging for troubleshooting (place -v or --debug before any command)
+# Enable verbose debug logging for troubleshooting (prints server error codes and bodies)
+python -m qubopy --debug login --email <email>
+python -m qubopy --debug stream
 python -m qubopy --debug devices
 ```
 
@@ -1002,6 +1017,7 @@ mypy qubopy
 ### Author & Contributors
 * **Architecture & Lead Engineering**: [@selvakk2k](https://github.com/selvakk2k)
 * **Code Implementation & Engineering**: **Antigravity** (Google DeepMind)
+* **Automated Code Review & Auditing**: **CodeRabbit** ([@coderabbitai](https://github.com/coderabbitai))
 * **Code Review & Pre-Release Auditing**: **Claude** (Anthropic)
 
 Licensed under the **MIT License**. See the [LICENSE](LICENSE) file for details.

{qubopy-0.2.0 → qubopy-0.2.2}/README.md

@@ -125,12 +125,12 @@ python -m qubopy --help
 
 > [!IMPORTANT]
 > **Email Account Registration Guidelines & Constraints**:
-> - **Brand-New Email Address Required**: You **cannot** use an email address that was ever previously added or linked to any mobile phone account. It must be an email address that has **never been associated with any Qubo app or account**.
-> - **Phone Number Re-use is Permitted**: When registering a new email account, the Qubo app will still prompt for a phone number for SMS verification during onboarding. You **can** safely provide the exact same mobile phone number that was used for your mobile account. Login will continue to work seamlessly with your email ID and password!
 > - **Account Type Separation**: Qubo strictly routes authentication based on the registration method:
 >   - Accounts created via **email** authenticate using `qubopy login --email <email>` (continuous session with automatic refresh tokens).
 >   - Accounts created via **phone number** authenticate using `qubopy login-phone --phone <number>` (1-hour session without refresh tokens).
->   - Attempting to use email and password credentials on an account registered with a phone number will be rejected by the cloud.
+>   - Attempting to use email and password credentials on an account registered with a phone number will be rejected by Qubo with `HTTP 400: ERR_SM_002 - Invalid user`.
+> - **Reusing an Email Linked to a Phone Account**: If your email address was previously added as a contact field under your phone account, Qubo will reject it during email registration. You can resolve this by removing/deleting the email from your profile in the Qubo mobile app, logging out, and then registering a fresh account using that email address.
+> - **Phone Number Re-use is Permitted**: When registering a new email account, the Qubo app will prompt for a phone number for SMS verification during onboarding. You **can** safely provide the exact same mobile phone number that was used for your mobile account. Login will continue to work seamlessly with your email ID and password.
 
 > [!WARNING]
 > **Mobile App Session Revocation**: When you sign in via `qubopy`, the active session is visible in the official Qubo mobile app under **Account -> Logged In Devices** with the label `Qubopy` (or your custom `--device-name`).
@@ -380,7 +380,16 @@ await camera.stop_stream()
 ```
 
 > [!NOTE]
-> Cloud Wowza URLs are single-consumer sessions. Opening the stream in a media player or restreaming software terminates any active stream session using the same token. Invoke `await camera.stop_stream()` when playback ends to release server-side stream session resources.
+> **Stream Playback & Transport Requirements**:
+> - **VLC / ffplay (TCP Transport Required)**: Qubo's cloud Wowza relay on port 443 requires TCP interleaved transport. VLC defaults to UDP for RTSP, which fails to connect. Pass `--rtsp-tcp` when opening the stream:
+>   ```bash
+>   vlc --rtsp-tcp "<stream_url>"
+>   ffplay -rtsp_transport tcp "<stream_url>"
+>   ```
+> - **Web Browsers**: Browsers and HTML5 video players do not natively support `rtsps://` streams. To view the stream in a browser or dashboard, use a translation proxy like [go2rtc](https://github.com/AlexxIT/go2rtc) or WebRTC.
+> - **Paired Mobile Device Authorization**: The cloud stream manager requires a registered mobile app device ID (`userAppID`) attached to the account. `camera.start_stream()` and `qubopy stream` automatically detect and supply the account's registered mobile device ID, which can also be overridden via `user_app_id`.
+> - **Single-Consumer Sessions**: Cloud Wowza URLs are single-consumer sessions. Opening the stream in another player terminates any active session using the same token. Invoke `await camera.stop_stream()` when playback ends to release server-side resources.
+> - **Video Doorbells (`HCD` series)**: Doorbells support cloud Wowza RTSPS identical to cameras, but operate on a duty cycle—the doorbell stops transmitting video when idle, which causes players to disconnect when there is no active event. For direct local media transport over P2P UDP, an alternative pathway is also available (see Method 2 below and `ha-qubo`'s go2rtc client), which negotiates initial session signaling via the cloud before streaming media directly over local UDP.
 
 ##### 2. Local Peer-to-Peer (P2P) UDP Streaming (`camera.initiate_p2p_call()`) (`⚠️ Experimental`)
 
@@ -662,9 +671,13 @@ python -m qubopy tokens --json
 python -m qubopy devices
 python -m qubopy list-devices
 
-# Mint live Wowza RTSPS stream URL for cameras (can open in VLC or go2rtc)
+# Mint live Wowza RTSPS stream URL for cameras & doorbells (auto-resolves paired mobile userAppID)
 python -m qubopy stream
-python -m qubopy stream --device-id <camera_uuid> --quality high
+python -m qubopy stream --device-id <camera_uuid> --quality high --user-app-id <mobile_id>
+
+# Play the stream in VLC (TCP transport required) or ffplay
+vlc --rtsp-tcp "<rtsps_url>"
+ffplay -rtsp_transport tcp "<rtsps_url>"
 
 # Fetch in-car Wi-Fi AP credentials (SSID and WPA2 password) for dashcam
 python -m qubopy dashcam-wifi
@@ -676,7 +689,9 @@ python -m qubopy export-ble-keys --device-id <lock_uuid>
 # Cloud unlock smart lock via paired in-home gateway
 python -m qubopy unlock --device-id <lock_uuid>
 
-# Enable verbose debug logging for troubleshooting (place -v or --debug before any command)
+# Enable verbose debug logging for troubleshooting (prints server error codes and bodies)
+python -m qubopy --debug login --email <email>
+python -m qubopy --debug stream
 python -m qubopy --debug devices
 ```
 
@@ -971,6 +986,7 @@ mypy qubopy
 ### Author & Contributors
 * **Architecture & Lead Engineering**: [@selvakk2k](https://github.com/selvakk2k)
 * **Code Implementation & Engineering**: **Antigravity** (Google DeepMind)
+* **Automated Code Review & Auditing**: **CodeRabbit** ([@coderabbitai](https://github.com/coderabbitai))
 * **Code Review & Pre-Release Auditing**: **Claude** (Anthropic)
 
 Licensed under the **MIT License**. See the [LICENSE](LICENSE) file for details.

{qubopy-0.2.0 → qubopy-0.2.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "qubopy"
-version = "0.2.0"
+version = "0.2.2"
 description = "Asynchronous Python client library and local BLE enabler for Qubo smart home devices"
 readme = "README.md"
 authors = [

{qubopy-0.2.0 → qubopy-0.2.2}/qubopy/auth.py

@@ -71,6 +71,29 @@ def _decode_jwt_expiry(token: str) -> float | None:
     return None
 
 
+def _format_error_detail(status: int, text: str) -> str:
+    """Format server error response into a human-readable detail string."""
+    try:
+        data = json.loads(text)
+        if isinstance(data, dict):
+            code = data.get("code") or data.get("error")
+            msg = data.get("message") or data.get("errorMessage") or data.get("error_description")
+            if isinstance(msg, list):
+                msg = ", ".join(str(m) for m in msg)
+            if code and msg:
+                return f" (HTTP {status}: {code} - {msg})"
+            if msg:
+                return f" (HTTP {status}: {msg})"
+            if code:
+                return f" (HTTP {status}: {code})"
+    except Exception:
+        pass
+    cleaned = text.strip()
+    if cleaned and len(cleaned) < 120 and "\n" not in cleaned and not cleaned.startswith("<"):
+        return f" (HTTP {status}: {cleaned})"
+    return f" (HTTP {status})"
+
+
 class QuboAuth:
     """Manages credentials, JWT token lifecycle, and session headers."""
 
@@ -191,7 +214,8 @@ class QuboAuth:
                     _LOGGER.debug(
                         "Email login error response (HTTP %s): %s", response.status, text[:200]
                     )
-                    raise QuboAuthError(f"Email login failed (HTTP {response.status})")
+                    detail = _format_error_detail(response.status, text)
+                    raise QuboAuthError(f"Email login failed{detail}")
                 data = json.loads(text)
                 if isinstance(data, list) and data:
                     data = data[0]
@@ -251,7 +275,8 @@ class QuboAuth:
                     _LOGGER.debug(
                         "OTP request error response (HTTP %s): %s", response.status, text[:200]
                     )
-                    raise QuboAuthError(f"OTP request failed (HTTP {response.status})")
+                    detail = _format_error_detail(response.status, text)
+                    raise QuboAuthError(f"OTP request failed{detail}")
                 data = json.loads(text)
                 self._login_uuid = data.get("uuid")
                 return data
@@ -297,7 +322,8 @@ class QuboAuth:
                     _LOGGER.debug(
                         "OTP verification error response (HTTP %s): %s", response.status, text[:200]
                     )
-                    raise QuboAuthError(f"OTP verification failed (HTTP {response.status})")
+                    detail = _format_error_detail(response.status, text)
+                    raise QuboAuthError(f"OTP verification failed{detail}")
                 data = json.loads(text)
                 if isinstance(data, dict):
                     return [data]
@@ -438,13 +464,14 @@ class QuboAuth:
                             response.status,
                             text[:200],
                         )
+                        detail = _format_error_detail(response.status, text)
                         if response.status in (400, 401, 403):
                             self._tokens = None
                             raise QuboAuthError(
-                                f"Session refresh rejected (HTTP {response.status}): "
+                                f"Session refresh rejected{detail}: "
                                 "refresh token expired or invalid; re-login required"
                             )
-                        raise QuboAuthError(f"Session refresh failed (HTTP {response.status})")
+                        raise QuboAuthError(f"Session refresh failed{detail}")
                     data = json.loads(text)
             except aiohttp.ClientError as err:
                 raise QuboConnectionError(f"Network error during token refresh: {err}") from err

{qubopy-0.2.0 → qubopy-0.2.2}/qubopy/cli.py

@@ -550,6 +550,7 @@ async def _cmd_stream(args: argparse.Namespace) -> int:
 
     device_id = getattr(args, "device_id", None)
     quality = getattr(args, "quality", "high") or "high"
+    user_app_id = getattr(args, "user_app_id", None)
     try:
         async with client:
             devices = await client.get_all_devices()
@@ -566,11 +567,31 @@ async def _cmd_stream(args: argparse.Namespace) -> int:
                 print(f"Error: Device {target.name} is not a camera.", file=sys.stderr)
                 return 1
 
+            if not user_app_id:
+                for d in devices:
+                    d_name = d.name or ""
+                    if d_name.startswith("Mobile App - "):
+                        user_app_id = d_name[len("Mobile App - "):]
+                        break
+                    if d_name.startswith("MobileApp_"):
+                        user_app_id = d_name[len("MobileApp_"):]
+                        break
+
             print(f"Requesting live stream for {target.name} ({target.device_id}) ...")
-            stream_url = await target.start_stream(quality=quality)
+            stream_url = await target.start_stream(quality=quality, user_app_id=user_app_id)
             print("\nLive RTSPS Stream URL:")
             print(stream_url)
-            print("\nYou can open this URL directly in VLC, ffplay, go2rtc, or Home Assistant.")
+            print("\nPlayback Instructions:")
+            print("  - VLC / ffplay: Must use TCP interleaved transport:")
+            print(f'      vlc --rtsp-tcp "{stream_url}"')
+            print(f'      ffplay -rtsp_transport tcp "{stream_url}"')
+            print("  - Web Browsers: Browsers do not support RTSP/RTSPS directly.")
+            print(
+                "      Use go2rtc, WebRTC proxy, or Home Assistant Generic Camera / WebRTC card."
+            )
+            print(
+                "  - Note: Video Doorbells (HCD) also support local P2P UDP streaming (see README)."
+            )
             return 0
     except QuboError as err:
         _handle_cli_error(err)
@@ -718,6 +739,7 @@ def main() -> None:
     p_stream.add_argument(
         "--quality", default="high", choices=["high", "low"], help="Stream resolution/quality"
     )
+    p_stream.add_argument("--user-app-id", help="Paired mobile app device ID override")
     p_stream.add_argument("--token", help="Override JWT access token")
     p_stream.add_argument("--user-uuid", help="Override User UUID")
 

{qubopy-0.2.0 → qubopy-0.2.2/qubopy.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: qubopy
-Version: 0.2.0
+Version: 0.2.2
 Summary: Asynchronous Python client library and local BLE enabler for Qubo smart home devices
 Author-email: Selva Kumaran K <selvakk2k@users.noreply.github.com>
 License: MIT
@@ -156,12 +156,12 @@ python -m qubopy --help
 
 > [!IMPORTANT]
 > **Email Account Registration Guidelines & Constraints**:
-> - **Brand-New Email Address Required**: You **cannot** use an email address that was ever previously added or linked to any mobile phone account. It must be an email address that has **never been associated with any Qubo app or account**.
-> - **Phone Number Re-use is Permitted**: When registering a new email account, the Qubo app will still prompt for a phone number for SMS verification during onboarding. You **can** safely provide the exact same mobile phone number that was used for your mobile account. Login will continue to work seamlessly with your email ID and password!
 > - **Account Type Separation**: Qubo strictly routes authentication based on the registration method:
 >   - Accounts created via **email** authenticate using `qubopy login --email <email>` (continuous session with automatic refresh tokens).
 >   - Accounts created via **phone number** authenticate using `qubopy login-phone --phone <number>` (1-hour session without refresh tokens).
->   - Attempting to use email and password credentials on an account registered with a phone number will be rejected by the cloud.
+>   - Attempting to use email and password credentials on an account registered with a phone number will be rejected by Qubo with `HTTP 400: ERR_SM_002 - Invalid user`.
+> - **Reusing an Email Linked to a Phone Account**: If your email address was previously added as a contact field under your phone account, Qubo will reject it during email registration. You can resolve this by removing/deleting the email from your profile in the Qubo mobile app, logging out, and then registering a fresh account using that email address.
+> - **Phone Number Re-use is Permitted**: When registering a new email account, the Qubo app will prompt for a phone number for SMS verification during onboarding. You **can** safely provide the exact same mobile phone number that was used for your mobile account. Login will continue to work seamlessly with your email ID and password.
 
 > [!WARNING]
 > **Mobile App Session Revocation**: When you sign in via `qubopy`, the active session is visible in the official Qubo mobile app under **Account -> Logged In Devices** with the label `Qubopy` (or your custom `--device-name`).
@@ -411,7 +411,16 @@ await camera.stop_stream()
 ```
 
 > [!NOTE]
-> Cloud Wowza URLs are single-consumer sessions. Opening the stream in a media player or restreaming software terminates any active stream session using the same token. Invoke `await camera.stop_stream()` when playback ends to release server-side stream session resources.
+> **Stream Playback & Transport Requirements**:
+> - **VLC / ffplay (TCP Transport Required)**: Qubo's cloud Wowza relay on port 443 requires TCP interleaved transport. VLC defaults to UDP for RTSP, which fails to connect. Pass `--rtsp-tcp` when opening the stream:
+>   ```bash
+>   vlc --rtsp-tcp "<stream_url>"
+>   ffplay -rtsp_transport tcp "<stream_url>"
+>   ```
+> - **Web Browsers**: Browsers and HTML5 video players do not natively support `rtsps://` streams. To view the stream in a browser or dashboard, use a translation proxy like [go2rtc](https://github.com/AlexxIT/go2rtc) or WebRTC.
+> - **Paired Mobile Device Authorization**: The cloud stream manager requires a registered mobile app device ID (`userAppID`) attached to the account. `camera.start_stream()` and `qubopy stream` automatically detect and supply the account's registered mobile device ID, which can also be overridden via `user_app_id`.
+> - **Single-Consumer Sessions**: Cloud Wowza URLs are single-consumer sessions. Opening the stream in another player terminates any active session using the same token. Invoke `await camera.stop_stream()` when playback ends to release server-side resources.
+> - **Video Doorbells (`HCD` series)**: Doorbells support cloud Wowza RTSPS identical to cameras, but operate on a duty cycle—the doorbell stops transmitting video when idle, which causes players to disconnect when there is no active event. For direct local media transport over P2P UDP, an alternative pathway is also available (see Method 2 below and `ha-qubo`'s go2rtc client), which negotiates initial session signaling via the cloud before streaming media directly over local UDP.
 
 ##### 2. Local Peer-to-Peer (P2P) UDP Streaming (`camera.initiate_p2p_call()`) (`⚠️ Experimental`)
 
@@ -693,9 +702,13 @@ python -m qubopy tokens --json
 python -m qubopy devices
 python -m qubopy list-devices
 
-# Mint live Wowza RTSPS stream URL for cameras (can open in VLC or go2rtc)
+# Mint live Wowza RTSPS stream URL for cameras & doorbells (auto-resolves paired mobile userAppID)
 python -m qubopy stream
-python -m qubopy stream --device-id <camera_uuid> --quality high
+python -m qubopy stream --device-id <camera_uuid> --quality high --user-app-id <mobile_id>
+
+# Play the stream in VLC (TCP transport required) or ffplay
+vlc --rtsp-tcp "<rtsps_url>"
+ffplay -rtsp_transport tcp "<rtsps_url>"
 
 # Fetch in-car Wi-Fi AP credentials (SSID and WPA2 password) for dashcam
 python -m qubopy dashcam-wifi
@@ -707,7 +720,9 @@ python -m qubopy export-ble-keys --device-id <lock_uuid>
 # Cloud unlock smart lock via paired in-home gateway
 python -m qubopy unlock --device-id <lock_uuid>
 
-# Enable verbose debug logging for troubleshooting (place -v or --debug before any command)
+# Enable verbose debug logging for troubleshooting (prints server error codes and bodies)
+python -m qubopy --debug login --email <email>
+python -m qubopy --debug stream
 python -m qubopy --debug devices
 ```
 
@@ -1002,6 +1017,7 @@ mypy qubopy
 ### Author & Contributors
 * **Architecture & Lead Engineering**: [@selvakk2k](https://github.com/selvakk2k)
 * **Code Implementation & Engineering**: **Antigravity** (Google DeepMind)
+* **Automated Code Review & Auditing**: **CodeRabbit** ([@coderabbitai](https://github.com/coderabbitai))
 * **Code Review & Pre-Release Auditing**: **Claude** (Anthropic)
 
 Licensed under the **MIT License**. See the [LICENSE](LICENSE) file for details.

{qubopy-0.2.0 → qubopy-0.2.2}/tests/test_auth.py

@@ -92,6 +92,26 @@ async def test_email_login_invalid_credentials():
     await auth.close()
 
 
+@pytest.mark.asyncio
+async def test_email_login_server_error_detail():
+    """Verify that HTTP 400 error surfaces the backend code and message."""
+    auth = QuboAuth()
+    mock_resp = MockClientResponse(
+        400, json.dumps({"code": "ERR_SM_002", "message": ["Invalid user"]})
+    )
+
+    with (
+        patch("aiohttp.ClientSession.post", return_value=mock_resp),
+        pytest.raises(
+            QuboAuthError,
+            match=r"Email login failed \(HTTP 400: ERR_SM_002 - Invalid user\)",
+        ),
+    ):
+        await auth.login_with_email("user@example.com", "wrong")
+
+    await auth.close()
+
+
 @pytest.mark.asyncio
 async def test_phone_otp_flow():
     """Verify phone OTP flow with required App-Id, Source, and deviceAttribute."""

{qubopy-0.2.0 → qubopy-0.2.2}/tests/test_cli.py

@@ -5,7 +5,7 @@ import base64
 import json
 import logging
 import time
-from unittest.mock import AsyncMock, patch
+from unittest.mock import AsyncMock, MagicMock, patch
 
 import pytest
 
@@ -319,3 +319,45 @@ def test_cli_debug_flag_configures_logging():
         assert exc_info.value.code == 0
         mock_basic_config.assert_called_once()
         assert mock_basic_config.call_args[1]["level"] == logging.DEBUG
+
+
+@pytest.mark.asyncio
+async def test_cmd_stream_instructions(capsys):
+    """Verify stream command resolves camera, uses user_app_id, and prints playback instructions."""
+    from qubopy.cli import _cmd_stream
+    from qubopy.devices import QuboCamera
+    from qubopy.models import DeviceModelInfo, DeviceShadow
+
+    mock_client = AsyncMock()
+    mock_client.auth.device_id = "test-auth-device-id"
+
+    cam_info = DeviceModelInfo(
+        deviceUUID="cam-01",
+        unitUUID="u-01",
+        entityUUID="e-01",
+        deviceType="ptzeCamera",
+        name="Living Room Cam",
+    )
+    cam = QuboCamera(cam_info, mock_client, DeviceShadow())
+    cam.start_stream = AsyncMock(return_value="rtsps://wowza.qubo.com/live/cam-01")
+
+    mock_mobile = MagicMock()
+    mock_mobile.device_id = "mob-01"
+    mock_mobile.name = "Mobile App - my-phone-id"
+
+    mock_client.get_all_devices = AsyncMock(return_value=[mock_mobile, cam])
+
+    args = argparse.Namespace(device_id="cam-01", quality="high", user_app_id=None)
+
+    with patch("qubopy.cli._get_authenticated_client", AsyncMock(return_value=mock_client)):
+        code = await _cmd_stream(args)
+
+    assert code == 0
+    cam.start_stream.assert_called_once_with(quality="high", user_app_id="my-phone-id")
+    captured = capsys.readouterr().out
+    assert "Live RTSPS Stream URL:" in captured
+    assert "rtsps://wowza.qubo.com/live/cam-01" in captured
+    assert "vlc --rtsp-tcp" in captured
+    assert "ffplay -rtsp_transport tcp" in captured
+    assert "Web Browsers: Browsers do not support RTSP/RTSPS directly" in captured
+

{qubopy-0.2.0 → qubopy-0.2.2}/tests/test_mqtt_live.py

@@ -63,10 +63,15 @@ class Broker:
             capture_output=True,
         )
 
-        is_root = getattr(os, "geteuid", lambda: -1)() == 0
-        root = "user root\n" if is_root else ""
+        import getpass
+        try:
+            current_user = getpass.getuser()
+            user_line = f"user {current_user}\n"
+        except Exception:
+            user_line = ""
+
         conf_content = (
-            f"{root}listener {self.port} 127.0.0.1\n"
+            f"{user_line}listener {self.port} 127.0.0.1\n"
             f"cafile {ca_path}\n"
             f"certfile {ca_path}\n"
             f"keyfile {key_path}\n"
@@ -74,31 +79,58 @@ class Broker:
             f"password_file {pw_path}\n"
             f"persistence false\n"
         )
-        (tmp_path / "m.conf").write_text(conf_content, encoding="utf-8")
+        conf_file = tmp_path / "m.conf"
+        conf_file.write_text(conf_content, encoding="utf-8")
+        try:
+            os.chmod(tmp_path, 0o777)
+            os.chmod(conf_file, 0o666)
+            os.chmod(ca_path, 0o666)
+            os.chmod(key_path, 0o666)
+        except OSError:
+            pass
 
     def set_password(self, tok: str) -> None:
         pw_path = (self.d / "pw").as_posix()
         subprocess.run(["mosquitto_passwd", "-b", "-c", pw_path, "user1", tok], check=True)
+        try:
+            os.chmod(pw_path, 0o666)
+        except OSError:
+            pass
 
     def start(self) -> None:
         conf_path = (self.d / "m.conf").as_posix()
         self.proc = subprocess.Popen(
             ["mosquitto", "-c", conf_path],
-            stdout=subprocess.DEVNULL,
-            stderr=subprocess.DEVNULL,
+            stdout=subprocess.PIPE,
+            stderr=subprocess.PIPE,
+            text=True,
         )
         for _ in range(50):
+            if self.proc.poll() is not None:
+                stdout, stderr = self.proc.communicate()
+                raise RuntimeError(
+                    f"broker exited early with code {self.proc.returncode}:\n"
+                    f"stderr: {stderr}\nstdout: {stdout}"
+                )
             try:
                 socket.create_connection(("127.0.0.1", self.port), 0.2).close()
                 return
             except OSError:
                 time.sleep(0.1)
-        raise RuntimeError("broker did not start")
+        if self.proc.poll() is not None:
+            stdout, stderr = self.proc.communicate()
+            raise RuntimeError(
+                f"broker did not start (code {self.proc.returncode}):\nstderr: {stderr}"
+            )
+        raise RuntimeError("broker did not start (timed out)")
 
     def stop(self) -> None:
         if self.proc:
             self.proc.terminate()
-            self.proc.wait()
+            try:
+                self.proc.wait(timeout=2)
+            except subprocess.TimeoutExpired:
+                self.proc.kill()
 
     def publish(self, tok: str) -> None:
         ca_path = (self.d / "ca.pem").as_posix()