@coffeerunhobby/mcp-ha-connect 2.1.0 → 2.2.0

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,wCAAwC;AACxC,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAA8B,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAmB,MAAM,kBAAkB,CAAC;AAavE;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA6B;IAC5D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC;IAC/F,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAEtC,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,4CAA4C;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,WAAW,GAAG,0BAA0B,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjE,UAAU,IAAI,WAAW,CAAC;IAC5B,CAAC;IAED,mCAAmC;IACnC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC;QACrF,UAAU,IAAI,cAAc,CAAC;IAC/B,CAAC;IAED,iEAAiE;IACjE,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtD,UAAU,IAAI,WAAW,CAAC;IAE1B,sDAAsD;IACtD,UAAU,IAAI,kBAAkB,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;IAE5D,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;QAC/C,UAAU;QACV,SAAS,EAAE,CAAC,CAAC,QAAQ;QACrB,YAAY,EAAE,CAAC,CAAC,WAAW;QAC3B,SAAS,EAAE,CAAC,CAAC,QAAQ;QACrB,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;KACxD,CAAC,CAAC;AACL,CAAC;AAED,6BAA6B;AAC7B,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAExE,qEAAqE;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,wCAAwC;AACxC,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAA8B,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAmB,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAgBzE;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA6B;IAC5D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IAC/G,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAEtC,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,4CAA4C;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,WAAW,GAAG,0BAA0B,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjE,UAAU,IAAI,WAAW,CAAC;QAC1B,IAAI,cAAc,EAAE,CAAC;YACnB,UAAU,IAAI,0BAA0B,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC;QACrF,UAAU,IAAI,cAAc,CAAC;IAC/B,CAAC;IAED,iEAAiE;IACjE,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtD,UAAU,IAAI,WAAW,CAAC;IAE1B,sDAAsD;IACtD,UAAU,IAAI,kBAAkB,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;IAE5D,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;QAC/C,UAAU;QACV,SAAS,EAAE,CAAC,CAAC,QAAQ;QACrB,YAAY,EAAE,CAAC,CAAC,WAAW;QAC3B,SAAS,EAAE,CAAC,CAAC,QAAQ;QACrB,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;KACxD,CAAC,CAAC;AACL,CAAC;AAED,6BAA6B;AAC7B,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAExE,qEAAqE;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}

package/dist/utils/plainText.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Plain-text validation for user-visible strings we put on the owner's phone.
+ *
+ * Text is NFC-normalized first (so composed letters such as Romanian ș/ț/ă count
+ * as one character), then every character must be a letter, digit, punctuation,
+ * a math/currency/modifier symbol, the degree sign, or a plain space; line
+ * breaks only where allowed. Everything else is refused, never stripped:
+ * emoji and pictographs, control and invisible format characters (zero-width
+ * joiners, bidi overrides that make text display differently than it reads),
+ * variation selectors and leftover combining marks ("zalgo"), private-use and
+ * lone surrogates.
+ */
+export interface PlainTextOptions {
+    field: string;
+    maxLength: number;
+    allowNewlines?: boolean;
+}
+/**
+ * @returns the NFC-normalized text
+ * @throws Error naming the field and the first offending character
+ */
+export declare function validatePlainText(text: string, options: PlainTextOptions): string;

package/dist/utils/plainText.js

@@ -0,0 +1,39 @@
+/**
+ * Plain-text validation for user-visible strings we put on the owner's phone.
+ *
+ * Text is NFC-normalized first (so composed letters such as Romanian ș/ț/ă count
+ * as one character), then every character must be a letter, digit, punctuation,
+ * a math/currency/modifier symbol, the degree sign, or a plain space; line
+ * breaks only where allowed. Everything else is refused, never stripped:
+ * emoji and pictographs, control and invisible format characters (zero-width
+ * joiners, bidi overrides that make text display differently than it reads),
+ * variation selectors and leftover combining marks ("zalgo"), private-use and
+ * lone surrogates.
+ */
+const ALLOWED_CHAR = /^[\p{L}\p{N}\p{P}\p{Sm}\p{Sc}\p{Sk}° ]$/u;
+/**
+ * @returns the NFC-normalized text
+ * @throws Error naming the field and the first offending character
+ */
+export function validatePlainText(text, options) {
+    const normalized = text.normalize('NFC');
+    const chars = [...normalized];
+    if (chars.length === 0 || normalized.trim() === '') {
+        throw new Error(`${options.field} must not be empty`);
+    }
+    if (chars.length > options.maxLength) {
+        throw new Error(`${options.field} is ${chars.length} characters; the maximum is ${options.maxLength}`);
+    }
+    for (const [index, char] of chars.entries()) {
+        if (char === '\n' && options.allowNewlines) {
+            continue;
+        }
+        if (!ALLOWED_CHAR.test(char)) {
+            const codePoint = char.codePointAt(0).toString(16).toUpperCase().padStart(4, '0');
+            throw new Error(`${options.field} contains a disallowed character U+${codePoint} at position ${index + 1}; ` +
+                'only plain text is accepted (no emoji, control or invisible characters)');
+        }
+    }
+    return normalized;
+}
+//# sourceMappingURL=plainText.js.map

package/dist/utils/plainText.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plainText.js","sourceRoot":"","sources":["../../src/utils/plainText.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,YAAY,GAAG,0CAA0C,CAAC;AAQhE;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAyB;IACrE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,oBAAoB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,OAAO,KAAK,CAAC,MAAM,+BAA+B,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YACzC,SAAS;QACb,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACnF,MAAM,IAAI,KAAK,CACX,GAAG,OAAO,CAAC,KAAK,sCAAsC,SAAS,gBAAgB,KAAK,GAAG,CAAC,IAAI;gBAC5F,yEAAyE,CAC5E,CAAC;QACN,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/version.d.ts

@@ -2,4 +2,4 @@
  * Package version - hardcoded at build time for reliability
  * Keep in sync with package.json version
  */
-export declare const VERSION = "2.1.0";
+export declare const VERSION = "2.2.0";

package/dist/version.js

@@ -2,5 +2,5 @@
  * Package version - hardcoded at build time for reliability
  * Keep in sync with package.json version
  */
-export const VERSION = '2.1.0';
+export const VERSION = '2.2.0';
 //# sourceMappingURL=version.js.map

package/docs/CHANGELOG.md

@@ -1,3 +1,22 @@
+### 2.2.0
+- **New: owner questions — approve or deny from the phone.** `askOwner` sends a sticky, persistent notification with 1-3 buttons (default Approve / Deny) and returns a `requestId` at once; `getOwnerAnswer` waits up to 50 s per call and returns `answered` (button index and label, `answeredAt`, the HA user who tapped), `pending`, `timeout`, `cancelled` or `unknown`; `cancelOwnerQuestion` withdraws a question and marks the notification "Cancelled". Two calls rather than one long one because Cloudflare cuts requests at ~100 s. Questions stay open up to 7 days (default 10 min); the phone removes the notification at expiry by itself.
+  - **No database, restart-proof:** the requestId carries the question, buttons, target, expiry and asking client, signed with a key derived from `MCP_AUTH_SECRET`; each button's action id is signed separately and cannot be derived from the requestId. After a restart the server still recognises open questions and the taps on them. Only a tap during the restart itself is lost (the question then expires as NO).
+  - **Security:** a tap counts only with origin REMOTE and a user (the mobile app webhook), so an automation firing a fake `mobile_app_notification_action` cannot approve anything; tampered ids, extended expiries and swapped button indexes are rejected; only the asking token `sub` can read or cancel; at most 3 open questions and 30 per hour per client; first tap wins; late taps are ignored. Needs `NOTIFY`.
+  - **Plain text only:** question at most 256 characters (line breaks allowed), title 60, button labels 20. Text is NFC-normalized (Romanian diacritics are fine), then emoji, control and invisible characters (zero-width joiners, bidi overrides), variation selectors and stacked combining marks are refused with the offending character named — never silently stripped or cut.
+  - **`MCP_OWNER_QUESTIONS_HA_USERS`**: comma-separated HA user ids allowed to answer (the `answeredBy` of an answer); unset = any HA user, with a startup warning.
+  - Known limit, accepted: cancellations and answers are kept in memory only. After a restart, someone with a Home Assistant login could re-send an old button id through HA's API and answer a question that had been cancelled or denied (the phone no longer shows its buttons; that access already controls the house).
+  - Needs HTTP mode, an **admin** Home Assistant token (button taps are not on HA's non-admin event allowlist) and `MCP_AUTH_SECRET`. If Home Assistant refuses the tap subscription at startup, the three tools are not offered (logged); if it refuses later, `askOwner` returns an error saying so instead of sending questions nobody can answer. New `MCP_OWNER_QUESTIONS_ENABLED` (default `true`).
+- **Fix — `getAutomationTrace` always answered "Not Found".** Home Assistant has no REST trace endpoint; traces exist only over the WebSocket (`trace/list`, admin-only) and are keyed by the automation's `id` attribute, not its entity id. The tool now uses a one-off WebSocket command, returns the newest runs first (new `limit`, default 5, max 20) with trigger, state and errors, and explains when an automation defined in YAML without an `id` has no traces.
+- **Fix — Home Assistant events stopped after an HA restart.** The WebSocket client reconnected but never re-sent its subscriptions (HA forgets them with the connection), so `/subscribe_events` went silent after every HA restart. Subscriptions are now restored on reconnect; the client keeps retrying with the delay capped at 60 s instead of giving up after 10 attempts; commands are matched to their results by id (they were matched in arrival order); connecting has a deadline and fails at once if HA closes before authenticating; and a subscription made while Home Assistant is unreachable (also at server startup) is queued and sent once HA is back, instead of failing (an SSE client stays connected and receives events when HA returns; previously owner questions and SSE stayed unavailable until a server restart). Unsubscribing works while HA is offline (the subscription is forgotten for good, never restored on reconnect), and a subscription cancelled before HA confirmed it is cancelled on HA's side too. A subscription HA refuses (e.g. a non-admin token) is reported and dropped; one whose confirmation is lost is cancelled and retried (no duplicate subscriptions on HA); and an event HA sends right after confirming a subscription is no longer dropped. Errors from these WebSocket commands reach callers and logs as HA's error code only (e.g. `Home Assistant rejected 'trace/list' (unauthorized)`), never HA's free text or the internal address; the detail stays in the server log. The WebSocket connections now follow `HA_STRICT_SSL` like the REST client.
+- **Fix — duplicate events.** With two subscriptions to the same event type, each received every event twice (HA sends one copy per subscription). Each copy now goes only to its own subscription.
+- **Logging — tool arguments are logged at debug level only.** The info-level `Tool invoked` line now carries just the tool and session; the arguments (message and question text, entity names, MAC addresses) appear only with `LOG_LEVEL=debug`.
+- README: `MCP_SSE_EVENTS_ENABLED` defaults to `true` (the README said `false`).
+- +88 tests (owner question service and tools incl. a real MCP round trip and concurrent rate limits, plain-text validation, WebSocket client against a fake HA server incl. reconnects, deadlines and the TLS policy, trace lookup; the security checks are mutation-tested).
+
+### 2.1.1
+- **Fix — `omada_setSiteNtpServers` was rejected by the controller on sites with daylight saving off.** Omada returns the DST start/end as empty objects when DST is off, but rejects them on write ("Daylight saving parameter [month] should not be null"). The site update now sends DST start/end only when complete; with DST on and an incomplete start/end it refuses to write. The rejected 2.1.0 call changed nothing (the controller validates before saving).
+- +2 tests (the live DST-off shape; DST on with an incomplete start/end).
+
 ### 2.1.0
 - **New: site NTP tools for Omada.** `omada_getSiteNtpStatus` (QUERY; also `omada_read /network/ntp` in graph mode) reads the NTP configuration and status. `omada_setSiteNtpServers` (**CONFIGURE**, not CONTROL: it changes site-wide configuration) replaces the site NTP server list (hostnames or IPv4, at most 5) and can turn NTP on or off. Omada has no NTP-only write: NTP lives in the site settings, so the tool reads the site, changes only the NTP fields and writes the whole site back (`PUT /sites/{siteId}`), translating the read and write shapes (servers are strings on read, `{ address }` objects on write; read-only DST fields are dropped). It refuses to write if the site lacks a required field, validates every address before contacting the controller, supports `dryRun` to preview the exact request, and reports the before/after lists as the controller holds them. The controller has no conditional update, so writes are serialized per site and the site is re-read just before the PUT: if a non-NTP setting changed in between, nothing is written and the call fails with a conflict. Not exposed on the Open WebUI REST bridge.
 - README: the Omada tool list was stale (said 24, missed the block/unblock, PoE and SSID action tools); it now lists all 30.

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Home Assistant MCP Wrapper",
-    "version": "2.1.0",
+    "version": "2.2.0",
     "description": "REST endpoints that wrap MCP tools for Home Assistant integration."
   },
   "servers": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coffeerunhobby/mcp-ha-connect",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Smart home MCP server for Home Assistant plus Local AI integration",
   "type": "module",
   "main": "dist/index.js",

package/src/config.ts

@@ -80,6 +80,8 @@ const envSchema = z
 
     // SSE Event Subscription Configuration
     sseEventsEnabled: createBooleanStringSchema(true),
+    ownerQuestionsEnabled: createBooleanStringSchema(true),
+    ownerQuestionsHaUsers: z.string().optional(),
     sseEventsPath: z.string().optional(),
 
     // Rate Limiting Configuration
@@ -230,6 +232,10 @@ export interface EnvironmentConfig {
 
   // SSE Event Subscription Configuration
   sseEventsEnabled: boolean;
+  /** askOwner / getOwnerAnswer / cancelOwnerQuestion (HTTP mode with Home Assistant). */
+  ownerQuestionsEnabled: boolean;
+  /** HA user ids allowed to answer owner questions; empty = any HA user. */
+  ownerQuestionsHaUsers: string[];
   sseEventsPath: string;
 
   // Rate Limiting Configuration
@@ -301,6 +307,8 @@ export function loadConfig(env: NodeJS.ProcessEnv = process.env): EnvironmentCon
 
     // SSE Event Subscription Configuration
     sseEventsEnabled: env.MCP_SSE_EVENTS_ENABLED,
+    ownerQuestionsEnabled: env.MCP_OWNER_QUESTIONS_ENABLED,
+    ownerQuestionsHaUsers: env.MCP_OWNER_QUESTIONS_HA_USERS,
     sseEventsPath: env.MCP_SSE_EVENTS_PATH,
 
     // Rate Limiting Configuration
@@ -401,6 +409,8 @@ export function loadConfig(env: NodeJS.ProcessEnv = process.env): EnvironmentCon
 
     // SSE Event Subscription Configuration
     sseEventsEnabled: parsed.data.sseEventsEnabled,
+    ownerQuestionsEnabled: parsed.data.ownerQuestionsEnabled,
+    ownerQuestionsHaUsers: (parsed.data.ownerQuestionsHaUsers ?? '').split(',').map((u) => u.trim()).filter(Boolean),
     sseEventsPath: parsed.data.sseEventsPath ?? '/subscribe_events',
 
     // Rate Limiting Configuration

package/src/haClient/automations.ts

@@ -8,6 +8,19 @@ import { logger } from '../utils/logger.js';
 import type { StateOperations } from './states.js';
 import type { ServiceOperations } from './services.js';
 import type { RequestHandler } from './request.js';
+import type { HaWebSocketCommand } from './wsCommand.js';
+
+/** One run of an automation, as `trace/list` summarizes it. */
+export interface AutomationTraceSummary {
+  run_id: string;
+  state?: string;
+  script_execution?: string | null;
+  last_step?: string | null;
+  error?: string;
+  trigger?: string;
+  timestamp?: { start: string; finish: string | null };
+  [key: string]: unknown;
+}
 
 /**
  * Automation-related operations for the Home Assistant API.
@@ -16,7 +29,8 @@ export class AutomationOperations {
   constructor(
     private readonly stateOps: StateOperations,
     private readonly serviceOps?: ServiceOperations,
-    private readonly request?: RequestHandler
+    private readonly request?: RequestHandler,
+    private readonly wsCommand?: HaWebSocketCommand
   ) {}
 
   /**
@@ -216,14 +230,32 @@ export class AutomationOperations {
   /**
    * Get automation trace (execution history)
    */
-  async getAutomationTrace(entityId: string): Promise<unknown[]> {
-    if (!this.request) {
-      throw new Error('RequestHandler not available');
+  async getAutomationTrace(entityId: string, limit = 5): Promise<AutomationTraceSummary[]> {
+    if (!this.wsCommand) {
+      throw new Error('Automation traces need the Home Assistant WebSocket API, which is not available');
     }
 
-    const automationId = entityId.replace('automation.', '');
-    logger.debug('Fetching automation trace', { automationId });
+    // Traces are WebSocket-only (there is no REST endpoint) and are keyed by the
+    // automation's config id (its `id` attribute), not by the entity id.
+    const state = await this.stateOps.getState(entityId);
+    if (!state) {
+      throw new Error(`Automation ${entityId} not found`);
+    }
+    const itemId = state.attributes.id;
+    if (itemId === undefined || itemId === null || itemId === '') {
+      throw new Error(
+        `Automation ${entityId} has no 'id' (an automation defined in YAML without an id), so Home Assistant keeps no traces for it`
+      );
+    }
+    logger.debug('Fetching automation traces', { entityId, itemId });
 
-    return this.request.get<unknown[]>(`/trace/automation/${encodeURIComponent(automationId)}`);
+    const traces = await this.wsCommand<AutomationTraceSummary[]>({
+      type: 'trace/list',
+      domain: 'automation',
+      item_id: String(itemId),
+    });
+    return [...(traces ?? [])]
+      .sort((a, b) => (b.timestamp?.start ?? '').localeCompare(a.timestamp?.start ?? ''))
+      .slice(0, limit);
   }
 }