0.2.2: fixes for first-capture 400, menu-bar flicker, camera SIGABRT

Server:
- When activating a credit-mode session, use clientCapturedAt as
  started_at (clamped to [serverNow-5min, serverNow]) so upload latency
  + client clock skew don't push capturedAt microseconds before
  startedAt and trigger captured_at_before_session_start.
- validateCapturedAt tolerates a 2s slop window on that check to
  handle parallel-activation races.

Desktop:
- Menu-bar title was flickering between '<1m'/'1m' and '1m'/'2m'
  because both Rust (1s tick) and JS (per useSessionTimer change)
  were writing the title with values that drifted by ~1s at the
  minute boundary. JS now only calls update_tray_time on pause/resume
  transitions; the Rust ticker is the sole writer.
- start_tray_ticker was a sync #[tauri::command] that called
  tokio::spawn via start_tray_timer. Sync Tauri commands run on
  threads without a tokio runtime, so spawn panicked and aborted the
  process. This crashed camera sessions in 0.2.0 + 0.2.1; nobody
  noticed because screen capture (the common path) goes through
  start_capture_loop which is already async. Fix: add 'async' to the
  command. Regression tests assert tokio::spawn behavior in both
  runtime contexts.

SDK (clients/react): no source changes — only the version bump. The
0.2.2 dist (rebuilt locally) contains the credit-mode capturedAt /
getNextExpectedAt plumbing landed in 0.2.1; verified downstream
desktop + web packages still type-check against the rebuilt bundle.

Author: samdev-7

clients/desktop/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lookout/desktop",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "private": true,
   "type": "module",
   "scripts": {

clients/desktop/src-tauri/Cargo.lock

@@ -6,7 +6,7 @@ opt-level = 1
 
 [package]
 name = "lookout-desktop"
-version = "0.2.1"
+version = "0.2.2"
 edition = "2021"
 
 [lib]

clients/desktop/src-tauri/Cargo.toml

@@ -1628,8 +1628,15 @@ fn stop_capture_loop(state: State<'_, AppState>) -> Result<(), String> {
 
 /// Start the Rust-side tray title ticker (for camera sessions where
 /// the capture loop runs in JS but we still want an accurate menu bar timer).
+///
+/// MUST be `async` — `start_tray_timer` calls `tokio::spawn` internally,
+/// which panics if not invoked from inside a tokio runtime. Tauri runs
+/// `async` commands on its own tokio runtime, but sync commands run on a
+/// thread without one. Calling this command sync caused SIGABRT on camera
+/// sessions in 0.2.0 + 0.2.1 (only camera path uses this; screen capture
+/// goes through `start_capture_loop` which is already async).
 #[tauri::command]
-fn start_tray_ticker(
+async fn start_tray_ticker(
     tracked_seconds: i64,
     state: State<'_, AppState>,
     app: AppHandle,
@@ -2296,4 +2303,43 @@ mod compat_tests {
         assert_eq!(parse_iso_to_unix_ms("not-a-date"), None);
         assert_eq!(parse_iso_to_unix_ms("2025/06/01"), None);
     }
+
+    // ──────────────────────────────────────────────────────────────────
+    // Regression test for the camera-session crash (SIGABRT) in 0.2.0/0.2.1.
+    //
+    // `start_tray_ticker` was a sync `#[tauri::command]` that called
+    // `tokio::spawn` via `start_tray_timer`. Sync Tauri commands run on a
+    // thread with no tokio runtime in context, so `tokio::spawn` panicked
+    // and the app aborted. The fix is making the command `async` so Tauri
+    // hosts it on its async runtime.
+    //
+    // We can't easily instantiate Tauri's AppHandle in a unit test, so we
+    // reproduce the underlying invariant: `tokio::spawn` must run inside a
+    // runtime. If this assertion ever weakens (e.g. tokio adds an
+    // ambient-runtime fallback), revisit whether the `async fn` is still
+    // load-bearing on the command.
+    // ──────────────────────────────────────────────────────────────────
+
+    #[test]
+    fn tokio_spawn_panics_without_runtime() {
+        // The exact failure mode that crashed 0.2.0/0.2.1 camera sessions.
+        let result = std::panic::catch_unwind(|| {
+            let _ = tokio::spawn(async {});
+        });
+        assert!(
+            result.is_err(),
+            "tokio::spawn outside a runtime should panic — if this now succeeds, \
+             tokio's behavior changed and the async-fn fix may no longer be required."
+        );
+    }
+
+    #[test]
+    fn tokio_spawn_succeeds_inside_runtime() {
+        // Mirrors what Tauri's async runtime does for `async` commands.
+        let rt = tokio::runtime::Runtime::new().expect("build runtime");
+        rt.block_on(async {
+            let h = tokio::spawn(async { 42i32 });
+            assert_eq!(h.await.unwrap(), 42);
+        });
+    }
 }

clients/desktop/src-tauri/src/lib.rs

@@ -2,7 +2,7 @@
   "$schema": "https://raw.githubusercontent.com/nicehash/tauri/refs/tags/tauri-v2.3.1/crates/tauri-utils/schema.json",
   "productName": "Lookout",
   "identifier": "com.hackclub.lookout",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "build": {
     "frontendDist": "../dist",
     "devUrl": "http://localhost:1420",

clients/desktop/src-tauri/tauri.conf.json

@@ -340,21 +340,42 @@ export function DesktopRecorder({ token, source, onChangeSource: _onChangeSource
     return () => unlisten?.();
   }, []);
 
-  // Sync state to rust backend (for instant tray loads) AND emit to tray window
+  // Sync menu-bar state to Rust + the tray window.
+  //
+  // IMPORTANT: do NOT call `update_tray_time` on every displaySeconds change.
+  // The Rust tray ticker is the authoritative source for the menu-bar title
+  // and runs at 1s cadence; calling update_tray_time from JS every second
+  // creates two writers fighting over the title, which produces the visible
+  // flicker between "<1m"/"1m" and "1m"/"2m" at the minute boundaries
+  // (JS interpolates to one second, Rust to another).
+  //
+  // We still split the writes:
+  //   - `update_tray_time`: pause/resume only (the icon/title needs to
+  //     change immediately when paused, which the Rust ticker won't do
+  //     within its 1s tick window).
+  //   - `set_tray_state` + `tray-state` event: tray-window UI updates
+  //     fine-grained per second.
+
+  // controlMode + initial-show effect (low frequency)
   useEffect(() => {
-    const timeText = formatTimeTray(displaySeconds);
-    const state = { 
-      displaySeconds, 
-      screenshotCount, 
+    invoke("show_tray", { timeText: formatTimeTray(displaySeconds) }).catch(console.error);
+    invoke("update_tray_time", {
+      timeText: formatTimeTray(displaySeconds),
+      isPaused: controlMode === "paused",
+    }).catch(console.error);
+    // (displaySeconds intentionally read-only here — not in deps. We just
+    // need a sensible initial title; the Rust ticker takes over from there.)
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [controlMode]);
+
+  // Per-second state sync (tray window, not menu-bar title)
+  useEffect(() => {
+    const state = {
+      displaySeconds,
+      screenshotCount,
       controlMode,
-      updatedAt: Date.now()
+      updatedAt: Date.now(),
     };
-    
-    invoke("show_tray", { timeText }).catch(console.error);
-    // The Rust tray ticker now handles the menu bar title, but we
-    // still call update_tray_time as a fallback for the initial render
-    // and for camera sources where the ticker might not be running yet.
-    invoke("update_tray_time", { timeText, isPaused: controlMode === "paused" }).catch(console.error);
     invoke("set_tray_state", { state }).catch(console.error);
     emit("tray-state", state).catch(console.error);
 

clients/desktop/src/components/DesktopRecorder.tsx

@@ -1,6 +1,6 @@
 {
   "name": "@lookout/react",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",

clients/react/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lookout/web",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "private": true,
   "type": "module",
   "scripts": {

clients/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lookout/server",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "private": true,
   "type": "module",
   "main": "./dist/index.js",