Merge pull request #21 from bryan-rt/services_uploader

Fix Dockerfile, gitignore secrets, update .env.example

Author: bryan-rt

CLAUDE.md

@@ -351,7 +351,7 @@ Idempotency is critical for the uploader — re-runs must not duplicate uploads.
 ## Current Branch & Status
 
 - **Active branch:** `services_uploader`
-- **Head commit:** `12fb2fe`
+- **Head commit:** `d0cf43e`
 - **Pipeline:** Full pipeline (A→F) verified end-to-end. Stages A, C produce tag observations + identity hints. Stage D (ILP stitching) resolves person tracks. Stage E detects match sessions. Stage F exports clips with privacy redaction.
 - **Services:** `nest_recorder` working — auto-registers cameras to Supabase on discovery. `uploader` working — resolves fighter tag IDs → profile IDs via active gym check-ins at upload time (Phase C identity bridge). `processor` scaffold only.
 - **Apps:** Flutter mobile app at `mobile_app/`. End-to-end tested on Pixel 7 Pro against local Supabase.
@@ -363,7 +363,7 @@ Idempotency is critical for the uploader — re-runs must not duplicate uploads.
   - **Android:** `usesCleartextTraffic=true` for local HTTP Supabase. `ACCESS_FINE_LOCATION` required for WiFi SSID + GPS.
   - **Local dev:** `supabase_config.dart` points to LAN IP (`192.168.0.66:54321`). Signed URLs rewrite `127.0.0.1` → configured host for phone access.
 - **Supabase:** All Phase A + Phase E + cameras migrations applied (17 migration files total). RLS on all 10 tables. Storage read policy on `match-clips` bucket. `cameras` table auto-populated by `nest_recorder`. `log_events` has a known schema mismatch — `AppLogger` sends `app_version` column that doesn't exist (non-blocking, errors are caught).
-- **Last updated:** 2026-03-16 (cameras table + nest_recorder auto-registration verified with 3 live cameras)
+- **Last updated:** 2026-03-16 (cameras table + auto-registration verified; secrets removed from git tracking; Dockerfile includes register_cameras.sh; .env.example updated for discovery model)
 
 ---
 

services/nest_recorder/.env.example

@@ -1,7 +1,3 @@
-# Nest Recorder service environment
-# Copy to .env to configure timezone and other settings
-
-# Timezone used by recorder container
 # Nest Recorder Service Environment (.env.example)
 # Copy to .env and set real values. Do NOT commit .env.
 
@@ -10,45 +6,33 @@
 TZ=America/New_York
 
 # --- Google SDM / OAuth ---
-# Project context (used by scripts when building resource paths)
-SDM_PROJECT_ID=projects/your-google-project-id
-
-# OAuth client credentials (prefer secrets files, see secrets/README.md)
+# OAuth client credentials (prefer secrets files — see secrets/README.md)
+# If set here, these override the secrets/*.txt files.
 SDM_CLIENT_ID=
 SDM_CLIENT_SECRET=
-
-# Refresh token: set here OR provide a file at services/nest_recorder/secrets/refresh_token.txt
-# If both exist, the scripts prefer a rotated token cached under /recordings/secrets
 SDM_REFRESH_TOKEN=
 
-# --- Camera/Device assignment ---
-# Map recording devices to camera IDs (up to 6 supported by scripts)
-# DEVICE_* can be human-readable names; CAM_ID_* are SDM resource identifiers
-DEVICE_1=mat-a
-CAM_ID_1=enter-camera-id-1
-DEVICE_2=mat-b
-CAM_ID_2=enter-camera-id-2
-DEVICE_3=
-CAM_ID_3=
-DEVICE_4=
-CAM_ID_4=
-DEVICE_5=
-CAM_ID_5=
-DEVICE_6=
-CAM_ID_6=
+# --- Camera discovery ---
+# Cameras are auto-discovered from the SDM API on each recording run.
+# cam_id = last 6 chars of the SDM device path (e.g. "J_EDEw").
+# No manual DEVICE_* / CAM_ID_* configuration is needed.
+# Discovery requires a valid access token (from secrets/ or env vars above).
+
+# --- Supabase connection (for camera auto-registration) ---
+# register_cameras.sh upserts discovered cameras into the cameras table.
+# Get these values from: cd backend/supabase/supabase && npx supabase status
+GYM_ID=00000000-0000-0000-0000-000000000000
+SUPABASE_URL=http://192.168.0.66:54321
+SUPABASE_SERVICE_KEY=your-service-role-key-here
 
 # --- Recording window & segmentation ---
 # WINDOW_MINUTES: total window to capture per invocation
 # PRE_ROLL_SECONDS: lead-in seconds before window start
 # SEG_SECONDS: segment length for rolling file outputs
-# EXTEND_SLEEP: additional idle time between iterations (dev workflows)
 WINDOW_MINUTES=30
 PRE_ROLL_SECONDS=10
 SEG_SECONDS=300
-EXTEND_SLEEP=0
 
-# --- Optional cache directory (defaults to /recordings/secrets) ---
-# SDM_CACHE_DIR=/recordings/secrets
-
-# SDM secrets are mounted at /secrets; path is fixed inside container
+# --- Optional overrides ---
 # SDM_SECRETS_DIR=/secrets
+# SDM_CACHE_DIR=/recordings/secrets

services/nest_recorder/.gitignore

@@ -0,0 +1,5 @@
+secrets/*.txt
+secrets/*.json
+secrets/google_3api
+!secrets/.keep
+!secrets/README.md

services/nest_recorder/recorder/Dockerfile

@@ -10,7 +10,8 @@ ENV LANG=C.UTF-8
 
 # Workdir & scripts
 WORKDIR /app
-COPY entrypoint.sh get_access_token.sh record_window.sh list_cameras.sh diag_v*.sh /app/
+COPY entrypoint.sh get_access_token.sh record_window.sh \
+     list_cameras.sh register_cameras.sh diag_v*.sh /app/
 RUN chmod +x /app/*.sh
 
 # Data mount point