@fastybird/smart-panel-backend 1.1.0-alpha.63 → 1.1.0-alpha.65

package/dist/plugins/devices-shelly-ng/services/guarded-shelly-http.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.guardedShellyHttp = guardedShellyHttp;
+const node_http_1 = require("node:http");
+async function guardedShellyHttp(url, deadline, isCurrent, createRequest = node_http_1.request, onSend) {
+    if (url.protocol !== 'http:' || url.username || url.password || !isCurrent() || Date.now() >= deadline)
+        throw new Error('Shelly HTTP request is not admitted');
+    const nonce = url.searchParams.get('nonce');
+    if (!nonce)
+        throw new Error('Shelly HTTP correlation missing');
+    return new Promise((resolve, reject) => {
+        let pending = true;
+        const request = createRequest(url, { method: 'GET', agent: false }, (response) => {
+            if (response.statusCode !== 200 || response.headers['content-type']?.split(';')[0] !== 'application/json') {
+                response.resume();
+                request.destroy(new Error('Shelly guard endpoint refused or is unauthenticated'));
+                return;
+            }
+            let body = '';
+            response.setEncoding('utf8');
+            response.on('data', (chunk) => {
+                body += chunk;
+                if (Buffer.byteLength(body, 'utf8') > 8192)
+                    request.destroy(new Error('Shelly guard response too large'));
+            });
+            response.on('error', (error) => finish(error));
+            response.on('end', () => {
+                try {
+                    if (!isCurrent() || Date.now() >= deadline)
+                        throw new Error('Shelly HTTP lease expired');
+                    const envelope = JSON.parse(body);
+                    if (!Object.hasOwn(envelope, 'result') || envelope.error !== undefined || envelope.nonce !== nonce)
+                        throw new Error('Shelly guard error');
+                    finish(null, envelope.result);
+                }
+                catch (error) {
+                    finish(error);
+                }
+            });
+        });
+        function finish(error, value) {
+            if (!pending)
+                return;
+            pending = false;
+            clearTimeout(timer);
+            if (error)
+                reject(error);
+            else
+                resolve(value);
+        }
+        const send = () => {
+            try {
+                if (!pending || !isCurrent() || Date.now() >= deadline) {
+                    request.destroy(new Error('Shelly HTTP authority expired before send'));
+                    return;
+                }
+                onSend?.();
+                request.end();
+            }
+            catch (error) {
+                finish(error instanceof Error ? error : new Error('Shelly HTTP send failed'));
+                request.destroy();
+            }
+        };
+        request.on('error', (error) => finish(error));
+        request.once('socket', (socket) => {
+            if (socket.connecting)
+                socket.once('connect', send);
+            else
+                send();
+        });
+        const timer = setTimeout(() => {
+            finish(new Error('Shelly HTTP deadline expired'));
+            request.destroy();
+        }, Math.max(0, deadline - Date.now()));
+    });
+}
+//# sourceMappingURL=guarded-shelly-http.js.map

package/dist/plugins/devices-shelly-ng/services/guarded-shelly-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guarded-shelly-http.js","sourceRoot":"","sources":["../../../../src/plugins/devices-shelly-ng/services/guarded-shelly-http.ts"],"names":[],"mappings":";;AAOA,8CA0EC;AAjFD,yCAAmD;AAO5C,KAAK,UAAU,iBAAiB,CACtC,GAAQ,EACR,QAAgB,EAChB,SAAwB,EACxB,gBAAoC,mBAAW,EAC/C,MAAmB;IAEnB,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;QACrG,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/D,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzC,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE;YAChF,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,kBAAkB,EAAE,CAAC;gBAC3G,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC,CAAC;gBAClF,OAAO;YACR,CAAC;YACD,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC7B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACrC,IAAI,IAAI,KAAK,CAAC;gBACd,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,IAAI;oBAAE,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;YAC3G,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/C,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACvB,IAAI,CAAC;oBACJ,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;oBACzF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqD,CAAC;oBACtF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK;wBACjG,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;oBACvC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC/B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,MAAM,CAAC,KAAc,CAAC,CAAC;gBACxB,CAAC;YACF,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,SAAS,MAAM,CAAC,KAAmB,EAAE,KAAS;YAC7C,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,OAAO,GAAG,KAAK,CAAC;YAChB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,IAAI,GAAG,GAAS,EAAE;YACvB,IAAI,CAAC;gBACJ,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBACxD,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAC;oBACxE,OAAO;gBACR,CAAC;gBAED,MAAM,EAAE,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,EAAE,CAAC;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;gBAC9E,OAAO,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACF,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YACjC,IAAI,MAAM,CAAC,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;;gBAC/C,IAAI,EAAE,CAAC;QACb,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CACvB,GAAG,EAAE;YACJ,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAClC,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/plugins/devices-shelly-ng/services/guarded-shelly-rpc.d.ts

@@ -0,0 +1,9 @@
+import { RpcParams, WebSocketRpcHandler, WebSocketRpcHandlerFactory } from 'shellies-ds9';
+export declare class GuardedShellyRpcHandler extends WebSocketRpcHandler {
+    private activeGuard;
+    private activePossibleSend;
+    withSendGuard<T>(isCurrent: () => boolean, invoke: () => T, onPossibleSend?: () => void): T;
+    request<T>(method: string, params?: RpcParams): PromiseLike<T>;
+    protected sendRequest(payload: RpcParams): Promise<void>;
+}
+export declare function installGuardedShellyRpcFactory(factory: WebSocketRpcHandlerFactory): void;

package/dist/plugins/devices-shelly-ng/services/guarded-shelly-rpc.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GuardedShellyRpcHandler = void 0;
+exports.installGuardedShellyRpcFactory = installGuardedShellyRpcFactory;
+const shellies_ds9_1 = require("shellies-ds9");
+const sendGuard = Symbol('shelly-internal-send-guard');
+const possibleSend = Symbol('shelly-internal-possible-send');
+class GuardedShellyRpcHandler extends shellies_ds9_1.WebSocketRpcHandler {
+    withSendGuard(isCurrent, invoke, onPossibleSend) {
+        const previous = this.activeGuard;
+        const previousPossibleSend = this.activePossibleSend;
+        this.activeGuard = isCurrent;
+        this.activePossibleSend = onPossibleSend;
+        try {
+            return invoke();
+        }
+        finally {
+            this.activeGuard = previous;
+            this.activePossibleSend = previousPossibleSend;
+        }
+    }
+    request(method, params) {
+        const authority = this.activeGuard;
+        const onPossibleSend = this.activePossibleSend;
+        let pending = true;
+        const timeoutMs = this.options.requestTimeout * 1000;
+        if (!Number.isFinite(timeoutMs) || timeoutMs <= 0)
+            return Promise.reject(new Error('Invalid Shelly timeout'));
+        const expiresAt = Date.now() + timeoutMs;
+        const guarded = { ...params };
+        Object.defineProperty(guarded, sendGuard, {
+            value: () => pending && Date.now() < expiresAt && (authority?.() ?? true),
+        });
+        Object.defineProperty(guarded, possibleSend, { value: onPossibleSend });
+        let timer;
+        const timeout = new Promise((_, reject) => {
+            timer = setTimeout(() => reject(new Error('Shelly request deadline expired')), timeoutMs);
+        });
+        return Promise.race([Promise.resolve(super.request(method, guarded)), timeout]).finally(() => {
+            pending = false;
+            clearTimeout(timer);
+        });
+    }
+    sendRequest(payload) {
+        const guard = payload.params?.[sendGuard];
+        if (guard && !guard())
+            return Promise.reject(new Error('Shelly request authority expired before send'));
+        payload.params?.[possibleSend]?.();
+        return super.sendRequest(payload);
+    }
+}
+exports.GuardedShellyRpcHandler = GuardedShellyRpcHandler;
+function installGuardedShellyRpcFactory(factory) {
+    factory.create = (hostname, options) => new GuardedShellyRpcHandler(hostname, { ...factory.defaultOptions, ...options });
+}
+//# sourceMappingURL=guarded-shelly-rpc.js.map

package/dist/plugins/devices-shelly-ng/services/guarded-shelly-rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guarded-shelly-rpc.js","sourceRoot":"","sources":["../../../../src/plugins/devices-shelly-ng/services/guarded-shelly-rpc.ts"],"names":[],"mappings":";;;AAgEA,wEAGC;AAnED,+CAA0F;AAE1F,MAAM,SAAS,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC;AACvD,MAAM,YAAY,GAAG,MAAM,CAAC,+BAA+B,CAAC,CAAC;AAI7D,MAAa,uBAAwB,SAAQ,kCAAmB;IAK/D,aAAa,CAAI,SAAwB,EAAE,MAAe,EAAE,cAA2B;QACtF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC;QAClC,MAAM,oBAAoB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACrD,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,kBAAkB,GAAG,cAAc,CAAC;QACzC,IAAI,CAAC;YACJ,OAAO,MAAM,EAAE,CAAC;QACjB,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC;YAC5B,IAAI,CAAC,kBAAkB,GAAG,oBAAoB,CAAC;QAChD,CAAC;IACF,CAAC;IAMQ,OAAO,CAAI,MAAc,EAAE,MAAkB;QAGrD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC;QACnC,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAC/C,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC9G,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACzC,MAAM,OAAO,GAAkB,EAAE,GAAG,MAAM,EAAE,CAAC;QAC7C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE;YACzC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,IAAI,CAAC;SACzE,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACxE,IAAI,KAAoC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAChD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAI,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAC/F,OAAO,GAAG,KAAK,CAAC;YAChB,YAAY,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACJ,CAAC;IAGkB,WAAW,CAAC,OAAkB;QAChD,MAAM,KAAK,GAAI,OAAO,CAAC,MAAoC,EAAE,CAAC,SAAS,CAAC,CAAC;QACzE,IAAI,KAAK,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC,CAAC;QAEvG,OAAO,CAAC,MAAoC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QAClE,OAAO,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;CACD;AAtDD,0DAsDC;AAGD,SAAgB,8BAA8B,CAAC,OAAmC;IACjF,OAAO,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CACtC,IAAI,uBAAuB,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AACnF,CAAC"}

package/dist/plugins/devices-shelly-ng/services/remote-dew-point-artifact.d.ts

@@ -0,0 +1,45 @@
+import { REMOTE_DEW_POINT_PROFILE, REMOTE_DEW_POINT_PROTOCOL, RemoteDewPointTiming } from './remote-dew-point-lease.contract';
+export interface RemoteDewPointArtifactBinding {
+    deviceId: string;
+    deviceHardwareId: string;
+    endpointHostname: string;
+    scriptId: number;
+    model: string;
+    firmware: '1.7.5';
+    physicalActuator: string;
+    switchId: number;
+    switchConfigurationJson: string;
+    controllerRevision: number;
+    protectionFingerprint: string;
+    localSurface: {
+        component: string;
+        property: string;
+        peripheralFingerprint: string;
+        calibrationFingerprint: string;
+        configurationJson: string;
+        peripheralsJson: string;
+        domain: {
+            minimum: number;
+            maximum: number;
+        };
+        maximumAgeMs: number;
+    };
+    remoteLineageFingerprint: string;
+    formulaVersion: 'magnus-water-17.62-243.12-v1';
+    marginC: number;
+    recoveryHysteresisC: number;
+    absoluteMinimumC: number | null;
+    timing: RemoteDewPointTiming;
+    writerIsolationEvidenceId: string;
+}
+export interface RemoteDewPointArtifact {
+    profile: typeof REMOTE_DEW_POINT_PROFILE;
+    version: 1;
+    protocol: typeof REMOTE_DEW_POINT_PROTOCOL;
+    artifactId: string;
+    sha256: string;
+    source: string;
+    binding: Readonly<RemoteDewPointArtifactBinding>;
+    installationEligibility: 'post_alpha_qualification_required';
+}
+export declare function compileRemoteDewPointArtifact(binding: RemoteDewPointArtifactBinding): RemoteDewPointArtifact;

package/dist/plugins/devices-shelly-ng/services/remote-dew-point-artifact.js

@@ -0,0 +1,278 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileRemoteDewPointArtifact = compileRemoteDewPointArtifact;
+const node_crypto_1 = require("node:crypto");
+const remote_dew_point_lease_contract_1 = require("./remote-dew-point-lease.contract");
+const hash = (text) => (0, node_crypto_1.createHash)('sha256').update(text).digest('hex');
+function compileRemoteDewPointArtifact(binding) {
+    if (!binding ||
+        !/^[A-Za-z0-9.-]+(?::[0-9]{1,5})?$/.test(binding.endpointHostname) ||
+        !Number.isInteger(binding.scriptId) ||
+        binding.scriptId < 1 ||
+        binding.scriptId > 100 ||
+        !/^[A-Za-z0-9_-]{1,80}$/.test(binding.deviceId) ||
+        !binding.model ||
+        binding.firmware !== '1.7.5' ||
+        !/^[A-F0-9]{12}$/.test(binding.deviceHardwareId) ||
+        binding.physicalActuator !== `shelly-ng:${binding.deviceHardwareId}:switch:${binding.switchId}:output` ||
+        !Number.isInteger(binding.switchId) ||
+        binding.switchId < 0 ||
+        binding.switchId > 3 ||
+        !Number.isSafeInteger(binding.controllerRevision) ||
+        binding.controllerRevision < 1 ||
+        !Number.isFinite(binding.marginC) ||
+        binding.marginC <= 0 ||
+        binding.marginC > 60 ||
+        !Number.isFinite(binding.recoveryHysteresisC) ||
+        binding.recoveryHysteresisC <= 0 ||
+        binding.recoveryHysteresisC > 60 ||
+        binding.formulaVersion !== 'magnus-water-17.62-243.12-v1' ||
+        ![
+            binding.protectionFingerprint,
+            binding.remoteLineageFingerprint,
+            binding.writerIsolationEvidenceId,
+            binding.localSurface?.peripheralFingerprint,
+            binding.localSurface?.calibrationFingerprint,
+        ].every((s) => typeof s === 'string' && s.length > 0 && s.length <= 128) ||
+        ![
+            binding.switchConfigurationJson,
+            binding.localSurface?.configurationJson,
+            binding.localSurface?.peripheralsJson,
+        ].every((text) => typeof text === 'string' && text.length > 1 && text.length <= 4096) ||
+        !/^temperature:\d+$/.test(binding.localSurface.component) ||
+        !/^tC$/.test(binding.localSurface.property) ||
+        !Number.isFinite(binding.localSurface.domain.minimum) ||
+        binding.localSurface.domain.minimum <= -45 ||
+        !Number.isFinite(binding.localSurface.domain.maximum) ||
+        binding.localSurface.domain.maximum > 60 ||
+        binding.localSurface.domain.minimum >= binding.localSurface.domain.maximum ||
+        !Number.isSafeInteger(binding.localSurface.maximumAgeMs) ||
+        binding.localSurface.maximumAgeMs < 100 ||
+        binding.localSurface.maximumAgeMs > 60000 ||
+        !Object.values(binding.timing).every((n) => Number.isFinite(n) && n >= 0) ||
+        binding.timing.minimumLifetimeMs < 100 ||
+        binding.timing.maximumLeaseMs <= binding.timing.minimumLifetimeMs ||
+        binding.timing.maximumLeaseMs > 60000 ||
+        (binding.absoluteMinimumC !== null &&
+            (!Number.isFinite(binding.absoluteMinimumC) || binding.absoluteMinimumC <= -45 || binding.absoluteMinimumC > 60)))
+        throw new Error('Invalid remote dew point artifact binding');
+    for (const text of [
+        binding.switchConfigurationJson,
+        binding.localSurface.configurationJson,
+        binding.localSurface.peripheralsJson,
+    ]) {
+        let parsed;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            throw new Error('Invalid component configuration JSON');
+        }
+        const safe = (value) => value === null ||
+            typeof value !== 'object' ||
+            Object.entries(value).every(([key, child]) => !/password|credential|authorization|secret/i.test(key) && safe(child));
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed) || !safe(parsed))
+            throw new Error('Unsafe component configuration JSON');
+    }
+    const freeze = (value) => {
+        if (value && typeof value === 'object') {
+            for (const child of Object.values(value))
+                freeze(child);
+            Object.freeze(value);
+        }
+        return value;
+    };
+    const frozen = freeze(JSON.parse(JSON.stringify(binding)));
+    const artifactId = hash(JSON.stringify({ templateVersion: 1, binding: frozen }));
+    const source = remoteDewPointScript({ ...frozen, artifact: artifactId, protocol: remote_dew_point_lease_contract_1.REMOTE_DEW_POINT_PROTOCOL });
+    return Object.freeze({
+        profile: remote_dew_point_lease_contract_1.REMOTE_DEW_POINT_PROFILE,
+        version: 1,
+        protocol: remote_dew_point_lease_contract_1.REMOTE_DEW_POINT_PROTOCOL,
+        artifactId,
+        sha256: hash(source),
+        source,
+        binding: Object.freeze(frozen),
+        installationEligibility: 'post_alpha_qualification_required',
+    });
+}
+function remoteDewPointScript(configuration) {
+    return `// sp-remote-dew-point-lease-1; SOFTWARE ONLY until installed qualification
+var C = ${JSON.stringify(configuration)};
+var KEY = "sp_remote_dew_v1", BLOCK = 256, MAX = 2147483000;
+var ready = false, busy = false, epoch = 0, reserved = 0, seq = 0, last = null, lastResult = null;
+var pendingOn = 0, offPending = false, drained = false, operation = 0, lease = null, latched = true;
+var surfaceAt = -1, lastReserveAt = -60000, storageTag = null;
+var metadataAt = -1, metadataBusy = false, metadataValid = false, lastOffId = null, lastOffResult = null;
+function uptime() { return Shelly.getUptimeMs(); }
+function number(n) { return typeof n === "number" && n === n && n - n === 0; }
+function integer(n) { return number(n) && Math.floor(n) === n; }
+function identity() {
+  var d = Shelly.getDeviceInfo();
+  return d.auth_en === true && d.mac === C.deviceHardwareId && d.id === C.deviceId && d.model === C.model && d.ver === C.firmware &&
+    JSON.stringify(Shelly.getComponentConfig(C.localSurface.component)) === C.localSurface.configurationJson &&
+    JSON.stringify(Shelly.getComponentConfig("switch:"+C.switchId)) === C.switchConfigurationJson;
+}
+function output() { var s = Shelly.getComponentStatus("switch:" + C.switchId); return s && s.output === true; }
+function forceOff() {
+  if (!offPending || lease !== null || pendingOn > 0) operation++;
+  lease = null; latched = true; drained = false;
+  if (offPending) return;
+  offPending = true;
+  Shelly.call("Switch.Set", {id:C.switchId,on:false}, function(r,e) {
+    if (e) { offPending=false; return; }
+    var captured=operation, capturedEpoch=epoch;
+    Shelly.call("Switch.GetStatus",{id:C.switchId},function(status,error) {
+      offPending=false;
+      drained=!error && status && status.output === false && pendingOn === 0 && captured === operation && capturedEpoch === epoch;
+    });
+  });
+}
+function failure() { ready = false; busy = false; forceOff(); }
+function surface() {
+  var s = Shelly.getComponentStatus(C.localSurface.component);
+  if (!s || (s.errors && s.errors.length) || !number(s[C.localSurface.property])) return null;
+  var t = s[C.localSurface.property];
+  if (t < C.localSurface.domain.minimum || t > C.localSurface.domain.maximum) return null;
+  if (surfaceAt < 0 || uptime() - surfaceAt >= C.localSurface.maximumAgeMs) return null;
+  return t;
+}
+function validLease(p) {
+  var left = p.untilDeviceUptimeMs - uptime();
+  return identity() && metadataValid && metadataAt >= 0 && uptime()-metadataAt < 2000 && p.protocol === C.protocol && p.artifact === C.artifact && p.epoch === epoch &&
+    p.controllerRevision === C.controllerRevision && p.protectionFingerprint === C.protectionFingerprint &&
+    number(p.thresholdC) && p.thresholdC > -45 && p.thresholdC <= 60 &&
+    (C.absoluteMinimumC === null || p.thresholdC >= C.absoluteMinimumC) &&
+    number(p.untilDeviceUptimeMs) && left > 0 && left <= C.timing.maximumLeaseMs;
+}
+function protection(p) {
+  var t = surface();
+  if (t === null || !validLease(p)) return false;
+  if (t <= p.thresholdC) latched = true;
+  else if (t > p.thresholdC + C.recoveryHysteresisC && drained && pendingOn === 0) latched = false;
+  return !latched;
+}
+function reply(response,code,data) { response.code=code; response.headers=[["Content-Type","application/json"]]; response.body=JSON.stringify(data); response.send(); }
+function result(p,accepted) { return {protocol:C.protocol,artifact:C.artifact,epoch:epoch,sequence:p.sequence,requestId:p.requestId,untilDeviceUptimeMs:p.untilDeviceUptimeMs,accepted:accepted,output:output(),pendingOn:pendingOn>0,drained:drained}; }
+function accept(p,response) {
+  if (!ready || !identity() || busy || !integer(p.sequence) || p.sequence <= 0 || p.sequence > MAX ||
+      typeof p.requestId !== "string" || p.requestId.length < 1 || p.requestId.length > 80 || !validLease(p)) {
+    forceOff(); reply(response,409,{error:"inhibited"}); return;
+  }
+  var text = JSON.stringify(p);
+  if (p.sequence === seq) {
+    if (last === text && lastResult !== null) { reply(response,200,lastResult); return; }
+    forceOff(); reply(response,409,{error:"duplicate_conflict"}); return;
+  }
+  if (p.sequence < seq || p.sequence > reserved || (p.action !== "on" && p.action !== "threshold")) {
+    forceOff(); reply(response,409,{error:"sequence_or_action"}); return;
+  }
+  seq=p.sequence; last=text; lastResult=null;
+  // A higher-sequence threshold updates current ON protection, but never energizes by itself.
+  lease=p;
+  if (!protection(p)) { forceOff(); lastResult=result(p,false); reply(response,200,lastResult); return; }
+  if (p.action === "threshold") { lastResult=result(p,true); reply(response,200,lastResult); return; }
+  if (pendingOn > 0 || offPending || (!drained && !output())) { forceOff(); reply(response,409,{error:"pending_release"}); return; }
+  var captured=++operation, capturedEpoch=epoch, capturedSeq=seq;
+  pendingOn++; drained=false;
+  Shelly.call("Switch.Set",{id:C.switchId,on:true,toggle_after:(p.untilDeviceUptimeMs-uptime())/1000},function(r,e) {
+    pendingOn--;
+    if (e || captured !== operation || capturedEpoch !== epoch || capturedSeq !== seq || !protection(p)) {
+      forceOff(); var failed=result(p,false);
+      if (capturedSeq === seq && capturedEpoch === epoch) lastResult=failed;
+      reply(response,409,failed); return;
+    }
+    lastResult=result(p,true); lastResult.wasOn=r && typeof r.was_on === "boolean" ? r.was_on : null; reply(response,200,lastResult);
+  });
+}
+function reserve(p,response) {
+  if (reserved > MAX - BLOCK) { failure(); reply(response,503,{error:"sequence_exhausted"}); return; }
+  if (busy || !integer(p.sequence) || p.sequence !== reserved + 1 || uptime()-lastReserveAt < 60000) {
+    forceOff(); reply(response,409,{error:"reservation_refused"}); return;
+  }
+  busy=true; var capturedEpoch=epoch, capturedOperation=operation, through=reserved+BLOCK;
+  Shelly.call("KVS.Set",{key:KEY,value:{epoch:epoch,reservedThrough:through},etag:storageTag},function(r,e) {
+    if (e || capturedEpoch !== epoch) { failure(); reply(response,503,{error:"storage"}); return; }
+    Shelly.call("KVS.Get",{key:KEY},function(saved,error) {
+      busy=false;
+      if (error || !saved || !saved.value || saved.value.epoch !== epoch || saved.value.reservedThrough !== through || typeof saved.etag !== "string" || capturedEpoch !== epoch) {
+        failure(); reply(response,503,{error:"storage_readback"}); return;
+      }
+      reserved=through; storageTag=saved.etag; lastReserveAt=uptime();
+      if (capturedOperation !== operation) { forceOff(); reply(response,409,{error:"superseded"}); return; }
+      // Awaited persistence never refreshes a threshold's absolute expiry.
+      accept(p,response);
+    });
+  });
+}
+function fenceOff(p,response) {
+  var wasOn=output(); forceOff();
+  if (p.requestId && p.requestId === lastOffId && lastOffResult !== null) { reply(response,200,lastOffResult); return; }
+  if (busy || storageTag === null || epoch >= MAX) { ready=false; reply(response,409,{error:"off_without_durable_fence"}); return; }
+  busy=true; ready=false; epoch++; seq=0; reserved=0; last=null; lastResult=null;
+  var capturedEpoch=epoch;
+  Shelly.call("KVS.Set",{key:KEY,value:{epoch:epoch,reservedThrough:0},etag:storageTag},function(r,e) {
+    if (e || capturedEpoch !== epoch) { failure(); reply(response,503,{error:"off_epoch_storage"}); return; }
+    Shelly.call("KVS.Get",{key:KEY},function(check,error) {
+      if (error || !check || !check.value || check.value.epoch !== epoch || check.value.reservedThrough !== 0 ||
+          typeof check.etag !== "string" || capturedEpoch !== epoch || !identity()) {
+        failure(); reply(response,503,{error:"off_epoch_readback"}); return;
+      }
+      storageTag=check.etag; busy=false; ready=true; lastReserveAt=-60000;
+      forceOff(); lastOffId=p.requestId; lastOffResult=result(p,true); lastOffResult.wasOn=wasOn; reply(response,200,lastOffResult);
+    });
+  });
+}
+HTTPServer.registerEndpoint("remote-dew-point",function(request,response) {
+  if (!identity()) { failure(); reply(response,503,{error:"identity_or_auth"}); return; }
+  if (request.method === "GET") {
+    reply(response,200,{protocol:C.protocol,artifact:C.artifact,deviceId:C.deviceId,model:C.model,firmware:C.firmware,
+      auth_en:true,epoch:epoch,sessionId:C.artifact+":"+epoch,uptimeMs:uptime(),ready:ready&&metadataValid&&metadataAt>=0&&uptime()-metadataAt<2000,output:output(),pendingOn:pendingOn>0,sequence:seq,requestId:lastResult ? lastResult.requestId : null,drained:drained}); return;
+  }
+  if (request.method !== "POST") { reply(response,405,{error:"method"}); return; }
+  var p; try { p=JSON.parse(request.body); } catch(e) { forceOff(); reply(response,400,{error:"json"}); return; }
+  // Emergency OFF is never throttled or denied by missing source/qualification/sequence authority.
+  if (p && p.action === "off") { fenceOff(p,response); return; }
+  if (!p || !ready || !validLease(p)) { forceOff(); reply(response,409,{error:"lease"}); return; }
+  if (p.sequence > reserved) { reserve(p,response); return; }
+  accept(p,response);
+});
+Shelly.addStatusHandler(function(event) {
+  if (event.component === C.localSurface.component && event.delta) {
+    if (event.delta.errors && event.delta.errors.length) { surfaceAt=-1; forceOff(); return; }
+    if (number(event.delta[C.localSurface.property])) { surfaceAt=uptime(); }
+    if (lease && !protection(lease)) forceOff();
+  }
+});
+function pollMetadata() {
+  if (metadataBusy) return;
+  metadataBusy=true; var capturedEpoch=epoch;
+  Shelly.call("SensorAddon.GetPeripherals",{},function(r,e) {
+    metadataBusy=false;
+    if (capturedEpoch !== epoch) return;
+    metadataValid=!e && JSON.stringify(r) === C.localSurface.peripheralsJson;
+    if (metadataValid) metadataAt=uptime(); else forceOff();
+  });
+}
+Timer.set(1000,true,pollMetadata);
+Timer.set(100,true,function() {
+  if (!identity() || !metadataValid || metadataAt < 0 || uptime()-metadataAt >= 2000 || surface() === null || (lease && !protection(lease)) || (!lease && output())) forceOff();
+  if (!lease && (!drained || pendingOn>0 || output())) forceOff();
+});
+// Existing KVS seed is an installation prerequisite. Missing/erased/corrupt storage never resets epoch to zero.
+forceOff();
+Shelly.call("KVS.Get",{key:KEY},function(saved,e) {
+  if (e || !saved || !saved.value || !integer(saved.value.epoch) || saved.value.epoch < 1 || saved.value.epoch >= MAX ||
+      typeof saved.etag !== "string" || !integer(saved.value.reservedThrough) || saved.value.reservedThrough < 0 || saved.value.reservedThrough > MAX) { failure(); return; }
+  epoch=saved.value.epoch+1; storageTag=saved.etag;
+  Shelly.call("KVS.Set",{key:KEY,value:{epoch:epoch,reservedThrough:0},etag:storageTag},function(r,error) {
+    if (error) { failure(); return; }
+    Shelly.call("KVS.Get",{key:KEY},function(check,err) {
+      if (err || !check || !check.value || check.value.epoch !== epoch || check.value.reservedThrough !== 0 || typeof check.etag !== "string" || !identity()) { failure(); return; }
+      storageTag=check.etag; ready=true; forceOff(); pollMetadata();
+    });
+  });
+});
+`;
+}
+//# sourceMappingURL=remote-dew-point-artifact.js.map

package/dist/plugins/devices-shelly-ng/services/remote-dew-point-artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-dew-point-artifact.js","sourceRoot":"","sources":["../../../../src/plugins/devices-shelly-ng/services/remote-dew-point-artifact.ts"],"names":[],"mappings":";;AAmDA,sEA8FC;AAjJD,6CAAyC;AAEzC,uFAI2C;AA2C3C,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE/E,SAAgB,6BAA6B,CAAC,OAAsC;IACnF,IACC,CAAC,OAAO;QACR,CAAC,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAClE,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;QACnC,OAAO,CAAC,QAAQ,GAAG,CAAC;QACpB,OAAO,CAAC,QAAQ,GAAG,GAAG;QACtB,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC/C,CAAC,OAAO,CAAC,KAAK;QACd,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC5B,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAChD,OAAO,CAAC,gBAAgB,KAAK,aAAa,OAAO,CAAC,gBAAgB,WAAW,OAAO,CAAC,QAAQ,SAAS;QACtG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;QACnC,OAAO,CAAC,QAAQ,GAAG,CAAC;QACpB,OAAO,CAAC,QAAQ,GAAG,CAAC;QACpB,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,kBAAkB,CAAC;QACjD,OAAO,CAAC,kBAAkB,GAAG,CAAC;QAC9B,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;QACjC,OAAO,CAAC,OAAO,IAAI,CAAC;QACpB,OAAO,CAAC,OAAO,GAAG,EAAE;QACpB,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC7C,OAAO,CAAC,mBAAmB,IAAI,CAAC;QAChC,OAAO,CAAC,mBAAmB,GAAG,EAAE;QAChC,OAAO,CAAC,cAAc,KAAK,8BAA8B;QACzD,CAAC;YACA,OAAO,CAAC,qBAAqB;YAC7B,OAAO,CAAC,wBAAwB;YAChC,OAAO,CAAC,yBAAyB;YACjC,OAAO,CAAC,YAAY,EAAE,qBAAqB;YAC3C,OAAO,CAAC,YAAY,EAAE,sBAAsB;SAC5C,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;QACxE,CAAC;YACA,OAAO,CAAC,uBAAuB;YAC/B,OAAO,CAAC,YAAY,EAAE,iBAAiB;YACvC,OAAO,CAAC,YAAY,EAAE,eAAe;SACrC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QACrF,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC;QACzD,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC;QAC3C,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC;QACrD,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,EAAE;QAC1C,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC;QACrD,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,GAAG,EAAE;QACxC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO;QAC1E,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC;QACxD,OAAO,CAAC,YAAY,CAAC,YAAY,GAAG,GAAG;QACvC,OAAO,CAAC,YAAY,CAAC,YAAY,GAAG,KAAK;QACzC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,OAAO,CAAC,MAAM,CAAC,iBAAiB,GAAG,GAAG;QACtC,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,iBAAiB;QACjE,OAAO,CAAC,MAAM,CAAC,cAAc,GAAG,KAAK;QACrC,CAAC,OAAO,CAAC,gBAAgB,KAAK,IAAI;YACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,gBAAgB,IAAI,CAAC,EAAE,IAAI,OAAO,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;QAElH,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI;QAClB,OAAO,CAAC,uBAAuB;QAC/B,OAAO,CAAC,YAAY,CAAC,iBAAiB;QACtC,OAAO,CAAC,YAAY,CAAC,eAAe;KACpC,EAAE,CAAC;QACH,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAW,EAAE,CACxC,KAAK,KAAK,IAAI;YACd,OAAO,KAAK,KAAK,QAAQ;YACzB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAC1B,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CACvF,CAAC;QACH,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,CAAI,KAAQ,EAAK,EAAE;QACjC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAkC,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,oBAAoB,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,2DAAyB,EAAE,CAAC,CAAC;IAC9G,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,0DAAwB;QACjC,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,2DAAyB;QACnC,UAAU;QACV,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QACpB,MAAM;QACN,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC9B,uBAAuB,EAAE,mCAAmC;KAC5D,CAAC,CAAC;AACJ,CAAC;AAGD,SAAS,oBAAoB,CAC5B,aAAqF;IAErF,OAAO;UACE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+KtC,CAAC;AACF,CAAC"}

package/dist/plugins/devices-shelly-ng/services/remote-dew-point-lease.contract.d.ts

@@ -0,0 +1,49 @@
+export declare const REMOTE_DEW_POINT_PROFILE: "shelly-ng.remote-dew-point-lease";
+export declare const REMOTE_DEW_POINT_PROTOCOL: "sp-remote-dew-point-lease-1";
+export interface RemoteDewPointPacket {
+    protocol: typeof REMOTE_DEW_POINT_PROTOCOL;
+    artifact: string;
+    epoch: number;
+    sequence: number;
+    requestId: string;
+    controllerRevision: number;
+    protectionFingerprint: string;
+    action: 'threshold' | 'on' | 'off';
+    thresholdC: number;
+    untilDeviceUptimeMs: number;
+}
+export interface RemoteDewPointStatus {
+    protocol: typeof REMOTE_DEW_POINT_PROTOCOL;
+    artifact: string;
+    deviceId: string;
+    model: string;
+    firmware: string;
+    auth_en: true;
+    epoch: number;
+    sessionId: string;
+    uptimeMs: number;
+    ready: boolean;
+    output: boolean;
+    pendingOn: boolean;
+    sequence: number;
+    drained?: boolean;
+    requestId?: string | null;
+}
+export interface RemoteDewPointTiming {
+    transportMs: number;
+    statusMs: number;
+    clockMs: number;
+    driftMs: number;
+    dispatchMs: number;
+    minimumLifetimeMs: number;
+    maximumLeaseMs: number;
+}
+export declare class RemoteDewPointDeadline {
+    readonly expiresAt: number;
+    private readonly wall;
+    private readonly monotonic;
+    private readonly monotonicDeadline;
+    constructor(expiresAt: number, wall?: () => number, monotonic?: () => number);
+    remaining(): number;
+    deviceExpiry(status: RemoteDewPointStatus, timing: RemoteDewPointTiming): number | null;
+}

package/dist/plugins/devices-shelly-ng/services/remote-dew-point-lease.contract.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RemoteDewPointDeadline = exports.REMOTE_DEW_POINT_PROTOCOL = exports.REMOTE_DEW_POINT_PROFILE = void 0;
+const node_perf_hooks_1 = require("node:perf_hooks");
+exports.REMOTE_DEW_POINT_PROFILE = 'shelly-ng.remote-dew-point-lease';
+exports.REMOTE_DEW_POINT_PROTOCOL = 'sp-remote-dew-point-lease-1';
+class RemoteDewPointDeadline {
+    constructor(expiresAt, wall = Date.now, monotonic = () => node_perf_hooks_1.performance.now()) {
+        this.expiresAt = expiresAt;
+        this.wall = wall;
+        this.monotonic = monotonic;
+        const remaining = Number.isFinite(expiresAt) ? expiresAt - wall() : 0;
+        this.monotonicDeadline = monotonic() + (Number.isFinite(remaining) && remaining > 0 ? remaining : 0);
+    }
+    remaining() {
+        return Math.max(0, Math.min(this.monotonicDeadline - this.monotonic(), this.expiresAt - this.wall()));
+    }
+    deviceExpiry(status, timing) {
+        if (!Object.values(timing).every((n) => Number.isFinite(n) && n >= 0) ||
+            timing.minimumLifetimeMs <= 0 ||
+            timing.maximumLeaseMs <= timing.minimumLifetimeMs ||
+            timing.maximumLeaseMs > 60000 ||
+            !Number.isFinite(status.uptimeMs) ||
+            status.uptimeMs < 0)
+            return null;
+        const budget = timing.transportMs + timing.statusMs + timing.clockMs + timing.driftMs + timing.dispatchMs;
+        const remaining = Math.min(timing.maximumLeaseMs, this.remaining() - budget);
+        return remaining >= timing.minimumLifetimeMs ? status.uptimeMs + remaining : null;
+    }
+}
+exports.RemoteDewPointDeadline = RemoteDewPointDeadline;
+//# sourceMappingURL=remote-dew-point-lease.contract.js.map

package/dist/plugins/devices-shelly-ng/services/remote-dew-point-lease.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-dew-point-lease.contract.js","sourceRoot":"","sources":["../../../../src/plugins/devices-shelly-ng/services/remote-dew-point-lease.contract.ts"],"names":[],"mappings":";;;AAAA,qDAA8C;AAEjC,QAAA,wBAAwB,GAAG,kCAA2C,CAAC;AACvE,QAAA,yBAAyB,GAAG,6BAAsC,CAAC;AA0ChF,MAAa,sBAAsB;IAElC,YACU,SAAiB,EACT,OAAO,IAAI,CAAC,GAAG,EACf,YAAY,GAAG,EAAE,CAAC,6BAAW,CAAC,GAAG,EAAE;QAF3C,cAAS,GAAT,SAAS,CAAQ;QACT,SAAI,GAAJ,IAAI,CAAW;QACf,cAAS,GAAT,SAAS,CAA0B;QAEpD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,iBAAiB,GAAG,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,CAAC;IACD,SAAS;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,YAAY,CAAC,MAA4B,EAAE,MAA4B;QACtE,IACC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjE,MAAM,CAAC,iBAAiB,IAAI,CAAC;YAC7B,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,iBAAiB;YACjD,MAAM,CAAC,cAAc,GAAG,KAAK;YAC7B,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;YACjC,MAAM,CAAC,QAAQ,GAAG,CAAC;YAEnB,OAAO,IAAI,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC;QAC1G,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,CAAC;QAC7E,OAAO,SAAS,IAAI,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,CAAC;CACD;AA3BD,wDA2BC"}

package/dist/plugins/devices-shelly-ng/services/remote-dew-point-qualification.d.ts

@@ -0,0 +1,53 @@
+import { RemoteDewPointArtifact } from './remote-dew-point-artifact';
+import { REMOTE_DEW_POINT_PROFILE, REMOTE_DEW_POINT_PROTOCOL, RemoteDewPointStatus } from './remote-dew-point-lease.contract';
+export interface RemoteDewPointInstallationEvidence {
+    readonly profile: typeof REMOTE_DEW_POINT_PROFILE;
+    readonly version: 1;
+    readonly protocol: typeof REMOTE_DEW_POINT_PROTOCOL;
+    readonly publishedAlpha: string;
+    readonly physicalIdentity: string;
+    readonly deviceHardwareId: string;
+    readonly deviceId: string;
+    readonly model: string;
+    readonly firmware: string;
+    readonly artifactId: string;
+    readonly compiledSha256: string;
+    readonly surface: {
+        readonly placementAuditId: string;
+        readonly component: string;
+        readonly peripheralFingerprint: string;
+        readonly calibrationFingerprint: string;
+        readonly domainMinimum: number;
+        readonly domainMaximum: number;
+    };
+    readonly timingAuditId: string;
+    readonly authenticationAuditId: string;
+    readonly writerIsolationAuditId: string;
+    readonly opposedOutputInterlockAuditId?: string | null;
+    readonly nativeTimerAuditId: string;
+    readonly restartDrainAuditId: string;
+    readonly restartDrainObservation: {
+        readonly epoch: number;
+        readonly sessionId: string;
+        readonly physicalIdentity: string;
+        readonly artifactId: string;
+        readonly compiledSha256: string;
+        readonly coveredJournalIds: readonly string[];
+        readonly observedAt: number;
+        readonly nativeCompletionEvidenceId: string;
+        readonly offReadbackEvidenceId: string;
+        readonly isCurrent: () => boolean;
+    };
+    readonly independentEquipmentCutoffAuditId: string;
+    readonly measuredTiming: RemoteDewPointArtifact['binding']['timing'];
+    readonly observedAt: number;
+    readonly expiresAt: number;
+    readonly isCurrent: () => boolean;
+}
+export declare function remoteDewPointInstallationBlockers(artifact: RemoteDewPointArtifact, status: RemoteDewPointStatus | null, evidence: RemoteDewPointInstallationEvidence | null, now?: number): string[];
+export interface QualifiedRemoteDewPointProfile {
+    readonly artifact: RemoteDewPointArtifact;
+    readonly installation: RemoteDewPointInstallationEvidence;
+    readonly authenticatedStatus: RemoteDewPointStatus;
+}
+export declare function qualifiedRemoteDewPointBlockers(profile: QualifiedRemoteDewPointProfile | null): string[];