@coffeerunhobby/mcp-ha-connect 2.1.0 → 2.2.0

package/dist/omadaClient/site.js

@@ -69,16 +69,29 @@ export function buildSiteUpdateBody(site, ntpServers, ntpEnable) {
             dst.enable = enable;
         if (mode !== undefined)
             dst.mode = mode;
-        if (start !== undefined)
+        // With DST off the controller returns start/end as `{}` but rejects them on
+        // write ("should not be null"), so only complete points are sent back.
+        if (isCompleteDstTime(start))
             dst.start = start;
-        if (end !== undefined)
+        if (isCompleteDstTime(end))
             dst.end = end;
         if (offset !== undefined)
             dst.offset = offset;
+        if (enable === true && (dst.start === undefined || dst.end === undefined)) {
+            throw new Error('Site has daylight saving enabled but an incomplete start/end; refusing to write');
+        }
         body.dst = dst;
     }
     return body;
 }
+const DST_TIME_FIELDS = ['month', 'serial', 'day', 'hour', 'minute'];
+function isCompleteDstTime(value) {
+    if (typeof value !== 'object' || value === null) {
+        return false;
+    }
+    const point = value;
+    return DST_TIME_FIELDS.every((field) => typeof point[field] === 'number');
+}
 /**
  * Validate a configured default site (`OMADA_SITE_ID`) against the controller's
  * live site list.

package/dist/omadaClient/site.js.map

@@ -1 +1 @@
-{"version":3,"file":"site.js","sourceRoot":"","sources":["../../src/omadaClient/site.ts"],"names":[],"mappings":"AAIA,wDAAwD;AACxD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AAEjC;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,+EAA+E,CAAC;AAE5G,MAAM,SAAS,GAAG,WAAW,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC3C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,OAAO,2EAA2E,CAAC;IAClG,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAChH,OAAO,IAAI,OAAO,+BAA+B,CAAC;QACtD,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAiED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAmB,EAAE,UAAoB,EAAE,SAAkB;IAC7F,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAU,EAAE,CAAC;QAC9D,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,wEAAwE,CAAC,CAAC;QAC5H,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAmB;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS;QACT,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;KACzD,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACzD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC5D,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC;QACtD,MAAM,GAAG,GAAuC,EAAE,CAAC;QACnD,IAAI,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;QAC3C,IAAI,GAAG,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;QACrC,IAAI,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QAC9C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAC/B,gBAAoC,EACpC,KAAyB;IAEzB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gCAAgC,CAAC;IAC7G,OAAO,kBAAkB,gBAAgB,mEAAmE,SAAS,GAAG,CAAC;AAC7H,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,cAAc;IAKF;IACA;IACA;IANrB,4EAA4E;IAC3D,eAAe,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEpE,YACqB,OAAuB,EACvB,SAAmC,EACnC,aAAsB;QAFtB,YAAO,GAAP,OAAO,CAAgB;QACvB,cAAS,GAAT,SAAS,CAA0B;QACnC,kBAAa,GAAb,aAAa,CAAS;IACxC,CAAC;IAEJ;;OAEG;IACI,KAAK,CAAC,SAAS;QAClB,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAmB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzF,CAAC;IAED;;;OAGG;IACI,aAAa,CAAC,MAAe;QAChC,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,aAAa,CAAC;QAC9B,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,+IAA+I,CAAC,CAAC;IACrK,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,WAAW,CAAC,MAAe;QACpC,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACnC,IAAI,CAAC,SAAS,CAAC,UAAU,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC,CACjE,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,gBAAgB,CAAC,MAAe;QACzC,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACnC,IAAI,CAAC,SAAS,CAAC,UAAU,kBAAkB,CAAC,cAAc,CAAC,cAAc,CAAC,CAC7E,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,YAAY,CAAI,MAAc,EAAE,EAAoB;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACvE,IAAI,OAAoB,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC1C,OAAO,GAAG,OAAO,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,QAAQ,CAAC;QACf,IAAI,CAAC;YACD,OAAO,MAAM,EAAE,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACP,OAAO,EAAE,CAAC;YACV,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;QACL,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,KAAK,CAAC,iBAAiB,CAC1B,OAAiB,EACjB,UAAoE,EAAE;QAEtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;QACxC,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,eAAe,8BAA8B,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACnF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACxG,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAE1E,mEAAmE;YACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YACtD,IAAI,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnG,MAAM,IAAI,KAAK,CACX,uHAAuH,CAC1H,CAAC;YACN,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACnC,IAAI,CAAC,SAAS,CAAC,UAAU,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC,EAC9D,MAAM,CAAC,OAAO,CACjB,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAErC,+DAA+D;YAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YACvD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,MAAM,CAAC,KAAK,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACjG,OAAO,MAAM,CAAC;QAClB,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,aAAa,CAAC,MAAc,EAAE,IAAmB,EAAE,OAAiB,EAAE,OAAgB;QAC1F,OAAO;YACH,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE;YACxE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE;YAClD,OAAO,EAAE,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC;SACvD,CAAC;IACN,CAAC;CACJ"}
+{"version":3,"file":"site.js","sourceRoot":"","sources":["../../src/omadaClient/site.ts"],"names":[],"mappings":"AAIA,wDAAwD;AACxD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AAEjC;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,+EAA+E,CAAC;AAE5G,MAAM,SAAS,GAAG,WAAW,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC3C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,OAAO,2EAA2E,CAAC;IAClG,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAChH,OAAO,IAAI,OAAO,+BAA+B,CAAC;QACtD,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAiED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAmB,EAAE,UAAoB,EAAE,SAAkB;IAC7F,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAU,EAAE,CAAC;QAC9D,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,wEAAwE,CAAC,CAAC;QAC5H,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAmB;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS;QACT,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;KACzD,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACzD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC5D,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC;QACtD,MAAM,GAAG,GAAuC,EAAE,CAAC;QACnD,IAAI,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QACxC,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,iBAAiB,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;QAChD,IAAI,iBAAiB,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QAC9C,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAE9E,SAAS,iBAAiB,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAC/B,gBAAoC,EACpC,KAAyB;IAEzB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gCAAgC,CAAC;IAC7G,OAAO,kBAAkB,gBAAgB,mEAAmE,SAAS,GAAG,CAAC;AAC7H,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,cAAc;IAKF;IACA;IACA;IANrB,4EAA4E;IAC3D,eAAe,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEpE,YACqB,OAAuB,EACvB,SAAmC,EACnC,aAAsB;QAFtB,YAAO,GAAP,OAAO,CAAgB;QACvB,cAAS,GAAT,SAAS,CAA0B;QACnC,kBAAa,GAAb,aAAa,CAAS;IACxC,CAAC;IAEJ;;OAEG;IACI,KAAK,CAAC,SAAS;QAClB,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAmB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzF,CAAC;IAED;;;OAGG;IACI,aAAa,CAAC,MAAe;QAChC,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,aAAa,CAAC;QAC9B,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,+IAA+I,CAAC,CAAC;IACrK,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,WAAW,CAAC,MAAe;QACpC,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACnC,IAAI,CAAC,SAAS,CAAC,UAAU,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC,CACjE,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,gBAAgB,CAAC,MAAe;QACzC,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACnC,IAAI,CAAC,SAAS,CAAC,UAAU,kBAAkB,CAAC,cAAc,CAAC,cAAc,CAAC,CAC7E,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,YAAY,CAAI,MAAc,EAAE,EAAoB;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACvE,IAAI,OAAoB,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC1C,OAAO,GAAG,OAAO,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,QAAQ,CAAC;QACf,IAAI,CAAC;YACD,OAAO,MAAM,EAAE,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACP,OAAO,EAAE,CAAC;YACV,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;QACL,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,KAAK,CAAC,iBAAiB,CAC1B,OAAiB,EACjB,UAAoE,EAAE;QAEtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;QACxC,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,eAAe,8BAA8B,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACnF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACxG,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAE1E,mEAAmE;YACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YACtD,IAAI,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnG,MAAM,IAAI,KAAK,CACX,uHAAuH,CAC1H,CAAC;YACN,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACnC,IAAI,CAAC,SAAS,CAAC,UAAU,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC,EAC9D,MAAM,CAAC,OAAO,CACjB,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAErC,+DAA+D;YAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YACvD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,MAAM,CAAC,KAAK,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACjG,OAAO,MAAM,CAAC;QAClB,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,aAAa,CAAC,MAAc,EAAE,IAAmB,EAAE,OAAiB,EAAE,OAAgB;QAC1F,OAAO;YACH,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE;YACxE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE;YAClD,OAAO,EAAE,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC;SACvD,CAAC;IACN,CAAC;CACJ"}

package/dist/ownerQuestions/service.d.ts

@@ -0,0 +1,167 @@
+/**
+ * Owner questions: ask the owner a yes/no-style question as an actionable phone
+ * notification and collect the button they tap.
+ *
+ * Stateless by design: everything needed to recognise a question travels in
+ * signed identifiers, so a server restart does not lose open questions.
+ *  - The requestId given to the caller carries the question, title, buttons,
+ *    target, expiry, the asking token's `sub` and a random nonce, signed with a
+ *    key derived from the server secret.
+ *  - Each button's action id carries the nonce, the button index, the expiry,
+ *    the target and its own signature, so a tap that arrives after a restart is
+ *    still verified and attributed. The secret never leaves the server, and the
+ *    requestId is not enough to forge a button id.
+ * Only answers (and cancellations) are kept in memory until they are read. A tap
+ * that lands while the server is down is lost; the question then expires as NO.
+ *
+ * A tap counts only if Home Assistant reports it as coming from a mobile app
+ * webhook (origin REMOTE, with a user), so an automation that fires a fake
+ * `mobile_app_notification_action` event (origin LOCAL) cannot approve anything.
+ * With `allowedUserIds` (MCP_OWNER_QUESTIONS_HA_USERS) only those HA users can answer.
+ *
+ * Known limit, accepted: cancellations and answers are remembered in memory
+ * only, while a button's signed id stays valid until the question expires. After
+ * a restart, re-sending an old button id through Home Assistant's own API (which
+ * needs an HA login, and the id from HA's history) could answer a question that
+ * had been cancelled or denied. The phone itself no longer shows the buttons.
+ * Anyone with that access can already control the house directly.
+ */
+export declare const ACTION_EVENT = "mobile_app_notification_action";
+export declare const LIMITS: {
+    readonly questionChars: 256;
+    readonly titleChars: 60;
+    readonly buttonChars: 20;
+    readonly maxButtons: 3;
+    readonly minTimeoutSeconds: 60;
+    readonly maxTimeoutSeconds: number;
+    readonly defaultTimeoutSeconds: 600;
+    readonly maxWaitSeconds: 50;
+    readonly maxOpenPerCaller: 3;
+    readonly maxPerCallerPerHour: 30;
+};
+export interface AskOwnerInput {
+    question: string;
+    title: string;
+    buttons: string[];
+    target: string;
+    timeoutSeconds: number;
+    channel?: string;
+    importance?: 'high' | 'default' | 'low' | 'min';
+}
+export type OwnerAnswer = {
+    status: 'answered';
+    index: number;
+    button: string;
+    answeredAt: string;
+    answeredBy: string;
+    question: string;
+    buttons: string[];
+} | {
+    status: 'pending';
+    expiresAt: string;
+    question: string;
+    buttons: string[];
+} | {
+    status: 'timeout';
+    expiredAt: string;
+    question: string;
+    buttons: string[];
+} | {
+    status: 'cancelled';
+    cancelledAt: string;
+    question: string;
+    buttons: string[];
+} | {
+    status: 'unknown';
+    reason: string;
+};
+export interface OwnerQuestionDeps {
+    /** Calls `notify.<target>`. */
+    notify: (target: string, serviceData: Record<string, unknown>) => Promise<unknown>;
+    /**
+     * Subscribes to a Home Assistant event type. Rejects if Home Assistant refuses
+     * it now; `onRejected` reports a refusal seen later (e.g. after a reconnect).
+     */
+    subscribe: (eventType: string, callback: (event: ActionEvent) => void, onRejected: (error: Error) => void) => Promise<unknown>;
+    /** Key material for signing (the server's auth secret); a random key is used when absent. */
+    secret?: string;
+    /** HA user ids allowed to answer; empty or absent = any HA user. */
+    allowedUserIds?: string[];
+    now?: () => number;
+}
+export interface ActionEvent {
+    event_type: string;
+    data: {
+        action?: unknown;
+        [key: string]: unknown;
+    };
+    origin: string;
+    time_fired?: string;
+    context: {
+        user_id: string | null;
+    };
+}
+export declare class OwnerQuestionService {
+    private readonly deps;
+    private readonly key;
+    private readonly now;
+    /** Final outcomes by nonce, until the question's expiry passes. */
+    private readonly outcomes;
+    /** Open questions per caller sub: nonce -> expiry (ms). */
+    private readonly open;
+    /** Ask timestamps per caller sub, for the hourly cap. */
+    private readonly asked;
+    /** Pollers waiting for an outcome, by nonce. */
+    private readonly waiters;
+    /** Expiry timers by nonce (best effort: lost on restart; the phone also times out on its own). */
+    private readonly expiryTimers;
+    /** Labels and target of open questions, for nicer confirmations while the server stays up. */
+    private readonly known;
+    private sweepTimer;
+    /** Why questions cannot be answered right now (Home Assistant refused the tap subscription). */
+    private unavailable;
+    constructor(deps: OwnerQuestionDeps);
+    start(): Promise<void>;
+    stop(): void;
+    ask(input: AskOwnerInput, caller: string): Promise<{
+        requestId: string;
+        expiresAt: string;
+    }>;
+    getAnswer(requestId: string, caller: string, waitSeconds: number): Promise<OwnerAnswer>;
+    cancel(requestId: string, caller: string): Promise<OwnerAnswer>;
+    /** Handle a `mobile_app_notification_action` event. Exposed for tests. */
+    handleActionEvent(event: ActionEvent): void;
+    private signRequest;
+    private verifyRequest;
+    private actionId;
+    private parseActionId;
+    private hmac;
+    private safeEqual;
+    private tagFor;
+    private assertOwner;
+    private settledAnswer;
+    private pendingAnswer;
+    private settle;
+    private wake;
+    private waitForOutcome;
+    private scheduleExpiry;
+    private replaceNotification;
+    private enforceRateLimits;
+    private reserve;
+    private release;
+    /**
+     * Periodic cleanup, independent of new activity: outcomes a day after their
+     * question expired (a caller polling that late sees "timeout"), labels of
+     * expired questions, and rate-limit entries that no longer count.
+     * Exposed for tests.
+     */
+    sweep(): void;
+    /** Sizes of the in-memory state, for tests and diagnostics. */
+    stateSize(): {
+        outcomes: number;
+        known: number;
+        open: number;
+        asked: number;
+        waiters: number;
+    };
+}

package/dist/ownerQuestions/service.js

@@ -0,0 +1,439 @@
+/**
+ * Owner questions: ask the owner a yes/no-style question as an actionable phone
+ * notification and collect the button they tap.
+ *
+ * Stateless by design: everything needed to recognise a question travels in
+ * signed identifiers, so a server restart does not lose open questions.
+ *  - The requestId given to the caller carries the question, title, buttons,
+ *    target, expiry, the asking token's `sub` and a random nonce, signed with a
+ *    key derived from the server secret.
+ *  - Each button's action id carries the nonce, the button index, the expiry,
+ *    the target and its own signature, so a tap that arrives after a restart is
+ *    still verified and attributed. The secret never leaves the server, and the
+ *    requestId is not enough to forge a button id.
+ * Only answers (and cancellations) are kept in memory until they are read. A tap
+ * that lands while the server is down is lost; the question then expires as NO.
+ *
+ * A tap counts only if Home Assistant reports it as coming from a mobile app
+ * webhook (origin REMOTE, with a user), so an automation that fires a fake
+ * `mobile_app_notification_action` event (origin LOCAL) cannot approve anything.
+ * With `allowedUserIds` (MCP_OWNER_QUESTIONS_HA_USERS) only those HA users can answer.
+ *
+ * Known limit, accepted: cancellations and answers are remembered in memory
+ * only, while a button's signed id stays valid until the question expires. After
+ * a restart, re-sending an old button id through Home Assistant's own API (which
+ * needs an HA login, and the id from HA's history) could answer a question that
+ * had been cancelled or denied. The phone itself no longer shows the buttons.
+ * Anyone with that access can already control the house directly.
+ */
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { logger } from '../utils/logger.js';
+export const ACTION_EVENT = 'mobile_app_notification_action';
+export const LIMITS = {
+    questionChars: 256,
+    titleChars: 60,
+    buttonChars: 20,
+    maxButtons: 3,
+    minTimeoutSeconds: 60,
+    maxTimeoutSeconds: 7 * 24 * 60 * 60,
+    defaultTimeoutSeconds: 600,
+    maxWaitSeconds: 50,
+    maxOpenPerCaller: 3,
+    maxPerCallerPerHour: 30,
+};
+const REQUEST_PREFIX = 'q1';
+const ACTION_PREFIX = 'MCPASK';
+/** How long the confirmation that replaces an answered question stays on the phone. */
+const CONFIRMATION_SECONDS = 300;
+/** Outcomes stay readable this long after their question expired. */
+const OUTCOME_RETENTION_MS = 24 * 60 * 60 * 1000;
+const SWEEP_INTERVAL_MS = 10 * 60 * 1000;
+const b64url = (buffer) => buffer.toString('base64url');
+export class OwnerQuestionService {
+    deps;
+    key;
+    now;
+    /** Final outcomes by nonce, until the question's expiry passes. */
+    outcomes = new Map();
+    /** Open questions per caller sub: nonce -> expiry (ms). */
+    open = new Map();
+    /** Ask timestamps per caller sub, for the hourly cap. */
+    asked = new Map();
+    /** Pollers waiting for an outcome, by nonce. */
+    waiters = new Map();
+    /** Expiry timers by nonce (best effort: lost on restart; the phone also times out on its own). */
+    expiryTimers = new Map();
+    /** Labels and target of open questions, for nicer confirmations while the server stays up. */
+    known = new Map();
+    sweepTimer;
+    /** Why questions cannot be answered right now (Home Assistant refused the tap subscription). */
+    unavailable;
+    constructor(deps) {
+        this.deps = deps;
+        this.now = deps.now ?? Date.now;
+        if (deps.secret) {
+            this.key = createHmac('sha256', deps.secret).update('mcp-ha-connect/owner-questions/v1').digest();
+        }
+        else {
+            this.key = randomBytes(32);
+            logger.warn('Owner questions: no server secret configured; open questions will not survive a restart');
+        }
+    }
+    async start() {
+        await this.deps.subscribe(ACTION_EVENT, (event) => this.handleActionEvent(event), () => {
+            this.unavailable =
+                'Home Assistant refused the subscription to notification taps (the server needs an admin Home Assistant token)';
+            logger.error(`Owner questions unavailable: ${this.unavailable}`);
+        });
+        this.sweepTimer = setInterval(() => this.sweep(), SWEEP_INTERVAL_MS);
+        this.sweepTimer.unref?.();
+        logger.info('Owner questions: listening for notification taps');
+        if (!this.deps.allowedUserIds?.length) {
+            logger.warn('Owner questions: any Home Assistant user can answer; set MCP_OWNER_QUESTIONS_HA_USERS to restrict it');
+        }
+    }
+    stop() {
+        clearInterval(this.sweepTimer);
+        for (const timer of this.expiryTimers.values())
+            clearTimeout(timer);
+        this.expiryTimers.clear();
+    }
+    async ask(input, caller) {
+        if (this.unavailable) {
+            throw new Error(`Owner questions are unavailable: ${this.unavailable}`);
+        }
+        const now = this.now();
+        this.enforceRateLimits(caller, now);
+        const nonce = b64url(randomBytes(16));
+        const expiresAtSec = Math.floor(now / 1000) + input.timeoutSeconds;
+        const payload = {
+            v: 1,
+            n: nonce,
+            s: caller,
+            t: input.target,
+            e: expiresAtSec,
+            b: input.buttons,
+            q: input.question,
+            ti: input.title,
+        };
+        const requestId = this.signRequest(payload);
+        const data = {
+            tag: this.tagFor(nonce),
+            actions: input.buttons.map((title, index) => ({
+                action: this.actionId(nonce, index, expiresAtSec, input.target),
+                title,
+            })),
+            // Stays until answered: not dismissed by tapping the body (sticky) or by
+            // swiping (persistent, needs the tag); the phone removes it at expiry.
+            sticky: true,
+            persistent: true,
+            priority: 'high',
+            ttl: 0,
+            timeout: input.timeoutSeconds,
+        };
+        if (input.channel)
+            data.channel = input.channel;
+        if (input.importance)
+            data.importance = input.importance;
+        // Reserve the slot before sending, so concurrent calls cannot all pass the limits.
+        this.reserve(caller, nonce, expiresAtSec * 1000, now);
+        try {
+            await this.deps.notify(input.target, { title: input.title, message: input.question, data });
+        }
+        catch {
+            // The underlying error can carry request details; neither the caller
+            // nor this log gets its text.
+            this.release(caller, nonce, now);
+            logger.warn('Owner questions: sending the notification failed', { target: input.target });
+            throw new Error(`Could not send the notification through Home Assistant (is '${input.target}' a valid notify target?)`);
+        }
+        this.known.set(nonce, { target: input.target, title: input.title, buttons: input.buttons, expiresAt: expiresAtSec * 1000 });
+        // Count from now, after delivery: the signed expiry is what matters.
+        this.scheduleExpiry(nonce, Math.max(expiresAtSec * 1000 - this.now(), 0));
+        logger.info('Owner question sent', { caller, target: input.target, buttons: input.buttons.length, expiresAt: expiresAtSec });
+        return { requestId, expiresAt: new Date(expiresAtSec * 1000).toISOString() };
+    }
+    async getAnswer(requestId, caller, waitSeconds) {
+        const payload = this.verifyRequest(requestId);
+        if (!payload) {
+            return { status: 'unknown', reason: 'Not a valid question id from this server (or the server secret changed)' };
+        }
+        this.assertOwner(payload, caller);
+        const settled = this.settledAnswer(payload);
+        if (settled || waitSeconds <= 0) {
+            return settled ?? this.pendingAnswer(payload);
+        }
+        const untilExpiry = payload.e * 1000 - this.now();
+        await this.waitForOutcome(payload.n, Math.min(waitSeconds * 1000, Math.max(untilExpiry, 0)));
+        return this.settledAnswer(payload) ?? this.pendingAnswer(payload);
+    }
+    async cancel(requestId, caller) {
+        const payload = this.verifyRequest(requestId);
+        if (!payload) {
+            return { status: 'unknown', reason: 'Not a valid question id from this server (or the server secret changed)' };
+        }
+        this.assertOwner(payload, caller);
+        const settled = this.settledAnswer(payload);
+        if (settled) {
+            return settled;
+        }
+        this.settle(payload.n, { status: 'cancelled', cancelledAt: this.now() }, payload.e * 1000);
+        await this.replaceNotification(payload.n, payload.t, payload.ti, 'Cancelled - no answer needed');
+        return this.settledAnswer(payload);
+    }
+    /** Handle a `mobile_app_notification_action` event. Exposed for tests. */
+    handleActionEvent(event) {
+        const parsed = this.parseActionId(event.data.action);
+        if (!parsed) {
+            return; // not one of ours
+        }
+        if (event.origin !== 'REMOTE' || !event.context.user_id) {
+            logger.warn('Owner questions: ignored a tap not coming from a mobile app', { origin: event.origin });
+            return;
+        }
+        if (this.deps.allowedUserIds?.length && !this.deps.allowedUserIds.includes(event.context.user_id)) {
+            logger.warn('Owner questions: ignored a tap from a Home Assistant user that may not answer');
+            return;
+        }
+        const { nonce, index, expiresAtSec, target } = parsed;
+        const known = this.known.get(nonce);
+        if (this.now() >= expiresAtSec * 1000) {
+            logger.info('Owner questions: ignored a tap after expiry');
+            void this.replaceNotification(nonce, target, known?.title ?? 'Question', 'Expired - the answer was not recorded');
+            return;
+        }
+        if (this.outcomes.has(nonce)) {
+            return; // first tap wins
+        }
+        this.settle(nonce, { status: 'answered', index, answeredAt: this.now(), answeredBy: event.context.user_id }, expiresAtSec * 1000);
+        logger.info('Owner question answered', { index });
+        const label = known?.buttons[index];
+        void this.replaceNotification(nonce, target, known?.title ?? 'Question', label ? `Answered: ${label}` : 'Answer recorded');
+    }
+    // ---- internals -------------------------------------------------------
+    signRequest(payload) {
+        const body = `${REQUEST_PREFIX}.${b64url(Buffer.from(JSON.stringify(payload), 'utf8'))}`;
+        return `${body}.${b64url(this.hmac(`request|${body}`))}`;
+    }
+    verifyRequest(requestId) {
+        const parts = typeof requestId === 'string' ? requestId.split('.') : [];
+        if (parts.length !== 3 || parts[0] !== REQUEST_PREFIX) {
+            return null;
+        }
+        const body = `${parts[0]}.${parts[1]}`;
+        if (!this.safeEqual(parts[2], b64url(this.hmac(`request|${body}`)))) {
+            return null;
+        }
+        try {
+            const payload = JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf8'));
+            return payload.v === 1 ? payload : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    actionId(nonce, index, expiresAtSec, target) {
+        const sig = b64url(this.hmac(`action|${nonce}|${index}|${expiresAtSec}|${target}`)).slice(0, 22);
+        return `${ACTION_PREFIX}.${nonce}.${index}.${expiresAtSec}.${target}.${sig}`;
+    }
+    parseActionId(action) {
+        if (typeof action !== 'string' || !action.startsWith(`${ACTION_PREFIX}.`)) {
+            return null;
+        }
+        const match = /^MCPASK\.([A-Za-z0-9_-]{22})\.([0-2])\.(\d{1,12})\.(mobile_app_[a-z0-9_]{1,64})\.([A-Za-z0-9_-]{22})$/.exec(action);
+        if (!match) {
+            logger.warn('Owner questions: ignored a malformed action id');
+            return null;
+        }
+        const [, nonce, index, expires, target, sig] = match;
+        const expected = b64url(this.hmac(`action|${nonce}|${index}|${expires}|${target}`)).slice(0, 22);
+        if (!this.safeEqual(sig, expected)) {
+            logger.warn('Owner questions: ignored a tap with an invalid signature');
+            return null;
+        }
+        return { nonce, index: Number(index), expiresAtSec: Number(expires), target };
+    }
+    hmac(message) {
+        return createHmac('sha256', this.key).update(message).digest();
+    }
+    safeEqual(a, b) {
+        const left = Buffer.from(a);
+        const right = Buffer.from(b);
+        return left.length === right.length && timingSafeEqual(left, right);
+    }
+    tagFor(nonce) {
+        return `mcpask-${nonce}`;
+    }
+    assertOwner(payload, caller) {
+        if (payload.s !== caller) {
+            throw new Error('This question was asked by a different client');
+        }
+    }
+    settledAnswer(payload) {
+        const base = { question: payload.q, buttons: payload.b };
+        const outcome = this.outcomes.get(payload.n);
+        if (outcome?.status === 'answered') {
+            return {
+                status: 'answered',
+                index: outcome.index,
+                button: payload.b[outcome.index] ?? `#${outcome.index}`,
+                answeredAt: new Date(outcome.answeredAt).toISOString(),
+                answeredBy: outcome.answeredBy,
+                ...base,
+            };
+        }
+        if (outcome?.status === 'cancelled') {
+            return { status: 'cancelled', cancelledAt: new Date(outcome.cancelledAt).toISOString(), ...base };
+        }
+        if (this.now() >= payload.e * 1000) {
+            return { status: 'timeout', expiredAt: new Date(payload.e * 1000).toISOString(), ...base };
+        }
+        return null;
+    }
+    pendingAnswer(payload) {
+        return { status: 'pending', expiresAt: new Date(payload.e * 1000).toISOString(), question: payload.q, buttons: payload.b };
+    }
+    settle(nonce, outcome, expiresAtMs) {
+        this.outcomes.set(nonce, { ...outcome, expiresAt: expiresAtMs });
+        this.known.delete(nonce);
+        for (const questions of this.open.values()) {
+            questions.delete(nonce);
+        }
+        const timer = this.expiryTimers.get(nonce);
+        if (timer) {
+            clearTimeout(timer);
+            this.expiryTimers.delete(nonce);
+        }
+        this.wake(nonce);
+    }
+    wake(nonce) {
+        for (const resolve of this.waiters.get(nonce) ?? []) {
+            resolve();
+        }
+        this.waiters.delete(nonce);
+    }
+    waitForOutcome(nonce, ms) {
+        return new Promise((resolve) => {
+            const waiters = this.waiters.get(nonce) ?? new Set();
+            this.waiters.set(nonce, waiters);
+            const done = () => {
+                clearTimeout(timer);
+                waiters.delete(done);
+                if (waiters.size === 0 && this.waiters.get(nonce) === waiters) {
+                    this.waiters.delete(nonce);
+                }
+                resolve();
+            };
+            const timer = setTimeout(done, ms);
+            waiters.add(done);
+        });
+    }
+    scheduleExpiry(nonce, ms) {
+        // Node timers overflow above ~24.8 days; questions last at most 7 days.
+        const timer = setTimeout(() => {
+            this.expiryTimers.delete(nonce);
+            if (this.outcomes.has(nonce)) {
+                return;
+            }
+            for (const questions of this.open.values()) {
+                questions.delete(nonce);
+            }
+            this.wake(nonce);
+            const known = this.known.get(nonce);
+            this.known.delete(nonce);
+            if (known) {
+                void this.replaceNotification(nonce, known.target, known.title, 'Expired - treated as no');
+            }
+        }, ms);
+        timer.unref?.();
+        this.expiryTimers.set(nonce, timer);
+    }
+    async replaceNotification(nonce, target, title, message) {
+        try {
+            // Same tag replaces the question; no actions, dismissible, gone after a while.
+            await this.deps.notify(target, {
+                title,
+                message,
+                data: { tag: this.tagFor(nonce), sticky: false, persistent: false, timeout: CONFIRMATION_SECONDS },
+            });
+        }
+        catch {
+            logger.warn('Owner questions: could not update the notification', { target });
+        }
+    }
+    enforceRateLimits(caller, now) {
+        const open = this.open.get(caller);
+        if (open) {
+            for (const [nonce, expiresAt] of open) {
+                if (expiresAt <= now)
+                    open.delete(nonce);
+            }
+            if (open.size >= LIMITS.maxOpenPerCaller) {
+                throw new Error(`Too many open questions (${open.size}); answer, cancel or wait for one to expire first`);
+            }
+        }
+        const recent = (this.asked.get(caller) ?? []).filter((t) => t > now - 60 * 60 * 1000);
+        if (recent.length >= LIMITS.maxPerCallerPerHour) {
+            throw new Error(`Too many questions in the last hour (limit ${LIMITS.maxPerCallerPerHour})`);
+        }
+        this.asked.set(caller, recent);
+    }
+    reserve(caller, nonce, expiresAtMs, now) {
+        const open = this.open.get(caller) ?? new Map();
+        open.set(nonce, expiresAtMs);
+        this.open.set(caller, open);
+        const asked = this.asked.get(caller) ?? [];
+        asked.push(now);
+        this.asked.set(caller, asked);
+    }
+    release(caller, nonce, now) {
+        this.open.get(caller)?.delete(nonce);
+        const asked = this.asked.get(caller);
+        const index = asked?.lastIndexOf(now) ?? -1;
+        if (asked && index >= 0)
+            asked.splice(index, 1);
+    }
+    /**
+     * Periodic cleanup, independent of new activity: outcomes a day after their
+     * question expired (a caller polling that late sees "timeout"), labels of
+     * expired questions, and rate-limit entries that no longer count.
+     * Exposed for tests.
+     */
+    sweep() {
+        const now = this.now();
+        for (const [nonce, outcome] of this.outcomes) {
+            if (outcome.expiresAt + OUTCOME_RETENTION_MS < now)
+                this.outcomes.delete(nonce);
+        }
+        for (const [nonce, known] of this.known) {
+            if (known.expiresAt < now)
+                this.known.delete(nonce);
+        }
+        for (const [caller, open] of this.open) {
+            for (const [nonce, expiresAt] of open) {
+                if (expiresAt <= now)
+                    open.delete(nonce);
+            }
+            if (open.size === 0)
+                this.open.delete(caller);
+        }
+        for (const [caller, asked] of this.asked) {
+            const recent = asked.filter((t) => t > now - 60 * 60 * 1000);
+            if (recent.length === 0)
+                this.asked.delete(caller);
+            else
+                this.asked.set(caller, recent);
+        }
+    }
+    /** Sizes of the in-memory state, for tests and diagnostics. */
+    stateSize() {
+        return {
+            outcomes: this.outcomes.size,
+            known: this.known.size,
+            open: this.open.size,
+            asked: this.asked.size,
+            waiters: this.waiters.size,
+        };
+    }
+}
+//# sourceMappingURL=service.js.map