@fastybird/smart-panel-backend 1.1.0-alpha.64 → 1.1.0-alpha.65

package/dist/plugins/devices-shelly-ng/contracts/guard-script-source.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SHELLY_GUARD_SOURCE = void 0;
+exports.SHELLY_GUARD_SOURCE = "/* Offline protocol candidate. See shelly-reconciliation.md before using it.\n * SP_GUARD_CONFIG must be prepended by the internal installation qualifier.\n * No default limits, firmware, component, or evidence are supplied here.\n */\nlet cfg = SP_GUARD_CONFIG;\nlet epoch = 0;\nlet ready = false;\nlet busy = false;\nlet pendingFence = null;\nlet pendingOn = null;\nlet fencePersisted = false;\nlet emergencyBusy = false;\nlet until = 0;\nlet floorLatched = true;\nlet floorObservedAt = 0;\nlet floorValue = null;\nlet fault = null;\nlet info = Shelly.getDeviceInfo();\n\n/** Reject NaN and infinities using arithmetic supported by the embedded script runtime. */\nfunction finiteNumber(n) {\n\treturn typeof n === 'number' && n === n && n - n === 0;\n}\n/** Bound epochs and millisecond expiries to the nonnegative integer range used by this protocol. */\nfunction integer(n) {\n\treturn typeof n === 'number' && n === Math.floor(n) && n >= 0 && n < 2147483647;\n}\n/** Use device uptime for lease and sensor age checks, independent of backend clocks. */\nfunction now() {\n\treturn Shelly.getUptimeMs();\n}\n/** Return a protocol error without claiming that earlier local ON work has drained. */\nfunction reject(request, reason) {\n\trequest.error(-1, reason);\n}\n/** Require finite installed Steinhart-Hart parameters before treating raw voltage as floor temperature. */\nfunction conversionQualified() {\n\tlet conversion = cfg.floorConversion;\n\treturn (\n\t\tcfg.floorComponentType === 'voltmeter' &&\n\t\tcfg.floorAttribute === 'voltage' &&\n\t\tconversion &&\n\t\tconversion.kind === 'steinhart_hart' &&\n\t\tfiniteNumber(conversion.referenceVoltage) &&\n\t\tconversion.referenceVoltage > 0 &&\n\t\tfiniteNumber(conversion.seriesResistance) &&\n\t\tconversion.seriesResistance > 0 &&\n\t\tfiniteNumber(conversion.a) &&\n\t\tfiniteNumber(conversion.b) &&\n\t\tfiniteNumber(conversion.c) &&\n\t\t(conversion.thermistorLeg === 'low' || conversion.thermistorLeg === 'high') &&\n\t\tconversion.inputRange && finiteNumber(conversion.inputRange.minimum) && finiteNumber(conversion.inputRange.maximum) && conversion.inputRange.minimum <= conversion.inputRange.maximum &&\n\t\tconversion.outputRange && finiteNumber(conversion.outputRange.minimum) && finiteNumber(conversion.outputRange.maximum) && conversion.outputRange.minimum <= conversion.outputRange.maximum\n\t);\n}\n/** Convert qualified divider voltage to Celsius; invalid electrical or conversion values yield no sample. */\nfunction floorCelsius(value) {\n\tif (!finiteNumber(value)) return null;\n\tif (cfg.floorAttribute !== 'voltage') return value;\n\tif (!conversionQualified() || value <= 0 || value >= cfg.floorConversion.referenceVoltage) return null;\n\tlet conversion = cfg.floorConversion;\n\tif (value < conversion.inputRange.minimum || value > conversion.inputRange.maximum) return null;\n\tlet resistance = conversion.thermistorLeg === 'low' ? (conversion.seriesResistance * value) / (conversion.referenceVoltage - value) : (conversion.seriesResistance * (conversion.referenceVoltage - value)) / value;\n\tif (!finiteNumber(resistance) || resistance <= 0) return null;\n\tlet logarithm = Math.log(resistance);\n\tlet inverse = conversion.a + (conversion.b + conversion.c * logarithm * logarithm) * logarithm;\n\tif (!finiteNumber(inverse) || inverse <= 0) return null;\n\tlet temperature = 1 / inverse - 273.15;\n\treturn finiteNumber(temperature) && temperature >= conversion.outputRange.minimum && temperature <= conversion.outputRange.maximum ? temperature : null;\n}\n\n/** Require unchanged installed sensor configuration, a fresh value and a cleared overtemperature latch. */\nfunction floorSafe() {\n\tlet floorConfig = Shelly.getComponentConfig(cfg.floorComponentType, cfg.floorComponentId);\n\tlet helper = floorConfig && floorConfig[cfg.floorAttribute];\n\tlet celsius =\n\t\tconversionQualified() ||\n\t\tcfg.floorComponentType === 'temperature' ||\n\t\t(helper &&\n\t\t\ttypeof helper.expr === 'string' &&\n\t\t\thelper.expr.length > 0 &&\n\t\t\t(helper.unit === 'C' || helper.unit === '\u00b0C' || helper.unit === 'Celsius' || helper.unit === 'celsius'));\n\treturn (\n\t\tcelsius &&\n\t\tJSON.stringify(floorConfig) === cfg.floorConfigurationJson &&\n\t\tfloorValue !== null &&\n\t\t!floorLatched &&\n\t\tnow() - floorObservedAt < cfg.floorMaxAgeMs\n\t);\n}\n/** Record an actual floor report and update the fail-closed temperature latch with hysteresis. */\nfunction observeFloor(status) {\n\tlet value = floorCelsius(status && status[cfg.floorAttribute]);\n\tfloorObservedAt = now();\n\tif (typeof value !== 'number' || !finiteNumber(value) || (status.errors && status.errors.length > 0)) {\n\t\tfloorValue = null;\n\t\tfloorLatched = true;\n\t} else {\n\t\tfloorValue = value;\n\t\tif (value >= cfg.floorLimitC) floorLatched = true;\n\t\telse if (value < cfg.floorLimitC - cfg.floorHysteresisC) floorLatched = false;\n\t}\n}\n/** Expose current identity, epoch, lease-readiness and output status for backend inspection. */\nfunction view() {\n\tlet output = Shelly.getComponentStatus('switch', cfg.componentId);\n\treturn {\n\t\tprotocol: 'sp-guard-candidate-1',\n\t\tdeviceId: info.id,\n\t\tfirmware: info.fw_id,\n\t\tcomponentId: cfg.componentId,\n\t\tevidenceId: cfg.evidenceId,\n\t\tepoch: epoch,\n\t\tnowMs: now(),\n\t\tready: ready,\n\t\tbusy: busy,\n\t\tfault: fault,\n\t\tfloorSafe: floorSafe(),\n\t\tfloorCelsius: floorValue,\n\t\toutput: output && typeof output.output === 'boolean' ? output.output : null,\n\t};\n}\n/** Revoke readiness and the lease, rejecting pending replies without asserting physical OFF or drainage. */\nfunction fail(reason) {\n\tfault = reason;\n\tready = false;\n\tuntil = 0;\n\tif (pendingOn) {\n\t\treject(pendingOn, reason);\n\t\tpendingOn = null;\n\t}\n\tif (pendingFence) {\n\t\treject(pendingFence, reason);\n\t\tpendingFence = null;\n\t}\n}\n/** Acknowledge a persisted fence only after matched OFF readback from an OFF cycle in its current epoch. */\nfunction readBack(result, code, message, cycleEpoch) {\n\tbusy = false;\n\tif (code !== 0 || !result || result.id !== cfg.componentId || result.output !== false) {\n\t\tfail('off_readback_unconfirmed');\n\t\treturn;\n\t}\n\tif (pendingFence && fencePersisted && cycleEpoch === epoch) {\n\t\tlet request = pendingFence;\n\t\tpendingFence = null;\n\t\t// Covers this script's earlier local IO only. External writer exclusion and\n\t\t// script-restart IO drainage still require installed firmware qualification.\n\t\trequest.result({\n\t\t\tepoch: epoch,\n\t\t\tdeviceId: info.id,\n\t\t\tcomponentId: cfg.componentId,\n\t\t\toutput: false,\n\t\t\tlocalOnDrained: fault === null,\n\t\t\texternalWriterBarrier: false,\n\t\t\tobservedAtMs: now(),\n\t\t\tevidenceId: cfg.evidenceId,\n\t\t});\n\t} else if (pendingFence && fencePersisted) {\n\t\tdriveOff();\n\t}\n}\n/** After acknowledged absolute OFF, request status readback; unknown execution faults without minting proof. */\nfunction offDone(result, code, message, cycleEpoch) {\n\tif (code !== 0 || !result || typeof result.was_on !== 'boolean') {\n\t\tbusy = false;\n\t\tfail('off_execution_unknown');\n\t\treturn;\n\t}\n\tShelly.call('Switch.GetStatus', { id: cfg.componentId }, readBack, cycleEpoch);\n}\n/** Allow another best-effort emergency OFF attempt; its callback supplies no serial drainage proof. */\nfunction emergencyDone() {\n\temergencyBusy = false;\n}\n/** Revoke the lease and drive absolute OFF, using emergency attempts while serial work or epoch persistence is pending. */\nfunction driveOff() {\n\tuntil = 0;\n\tif (pendingFence && !fencePersisted) {\n\t\tif (!emergencyBusy) {\n\t\t\temergencyBusy = true;\n\t\t\tShelly.call('Switch.Set', { id: cfg.componentId, on: false }, emergencyDone);\n\t\t}\n\t\treturn;\n\t}\n\tif (busy) {\n\t\t// Best-effort emergency OFF does not constitute a drain barrier. Never let a\n\t\t// stalled ON callback suppress all OFF attempts. Serial OFF/readback follows\n\t\t// only after that ON has genuinely completed; unknown completion stays faulted.\n\t\tif ((pendingOn || !ready) && !emergencyBusy) {\n\t\t\temergencyBusy = true;\n\t\t\tShelly.call('Switch.Set', { id: cfg.componentId, on: false }, emergencyDone);\n\t\t}\n\t\treturn;\n\t}\n\tbusy = true;\n\t// OFF never receives a flip-back timer. Native auto_on must be disabled by qualification.\n\tShelly.call('Switch.Set', { id: cfg.componentId, on: false }, offDone, pendingFence && fencePersisted ? epoch : null);\n}\n/** Acknowledge ON only while its lease and floor remain valid; failed or superseded completion triggers OFF. */\nfunction onDone(result, code) {\n\tbusy = false;\n\tlet request = pendingOn;\n\tpendingOn = null;\n\tif (code !== 0 || !result || typeof result.was_on !== 'boolean') {\n\t\tif (request) reject(request, 'on_execution_unknown');\n\t\tfail('on_execution_unknown');\n\t\tdriveOff();\n\t\treturn;\n\t}\n\tif (pendingFence || !ready || !floorSafe() || now() >= until) {\n\t\tif (request) reject(request, 'on_superseded');\n\t\tdriveOff();\n\t\treturn;\n\t}\n\tif (request) request.result({ epoch: epoch, accepted: true, untilMs: until });\n}\n/** Enable serial OFF/readback after durable epoch persistence without stealing an existing IO cycle. */\nfunction persistedFence(result, code) {\n\tif (code !== 0) {\n\t\tbusy = false;\n\t\tfail('epoch_persistence_failed');\n\t\tdriveOff();\n\t\treturn;\n\t}\n\tfencePersisted = true;\n\t// Existing ON/OFF/readback owns busy until completion. Never overwrite its ownership.\n\tif (!busy) driveOff();\n}\n/** Advance and persist the epoch before acknowledging correlated OFF and local ON drainage. */\nfunction fence(request) {\n\tif (!ready || pendingFence || epoch >= 2147483646) {\n\t\treject(request, 'fence_unavailable');\n\t\treturn;\n\t}\n\tepoch = epoch + 1;\n\tuntil = 0;\n\tpendingFence = request;\n\tfencePersisted = false;\n\t// Persist before acknowledging the barrier. A concurrently running ON callback\n\t// must not run OFF/readback before this persistence operation has completed.\n\tShelly.call('KVS.Set', { key: cfg.epochKey, value: epoch }, persistedFence);\n}\n/** Admit one current-epoch ON with a safe floor and bounded absolute expiry, backed by native flip-back. */\nfunction energize(request, params) {\n\tif (!ready || fault || busy || pendingFence || !params || params.epoch !== epoch || !floorSafe()) {\n\t\treject(request, 'on_not_admitted');\n\t\treturn;\n\t}\n\tlet remaining = params.untilMs - now();\n\tif (!integer(params.untilMs) || remaining < cfg.minLeaseMs || remaining > cfg.maxLeaseMs) {\n\t\treject(request, 'on_expired_or_unqualified');\n\t\treturn;\n\t}\n\tuntil = params.untilMs;\n\tpendingOn = request;\n\tbusy = true;\n\t// Native flip-back remains a second bound if this script crashes after dispatch.\n\tShelly.call('Switch.Set', { id: cfg.componentId, on: true, toggle_after: remaining / 1000 }, onDone);\n}\n/** Drive OFF for revoked or expired leases, unsafe floor data and unknown output while leaving idle confirmed OFF alone. */\nfunction watchdog() {\n\tif (fault || pendingFence || (pendingOn && until === 0)) {\n\t\tdriveOff();\n\t\treturn;\n\t}\n\tlet hasLease = until > 0;\n\tif (hasLease && (now() >= until || !floorSafe())) {\n\t\tdriveOff();\n\t\treturn;\n\t}\n\tlet output = Shelly.getComponentStatus('switch', cfg.componentId);\n\t// Pending ON owns its valid lease even while the cached output is still OFF;\n\t// revoked pending ON keeps requesting emergency OFF until its callback drains.\n\t// Unknown output fails closed; idle confirmed OFF needs no serial IO cycle.\n\tif (!output || typeof output.output !== 'boolean' || (!hasLease && output.output)) driveOff();\n}\n/** Process reports from the configured floor component and request OFF whenever floor safety is lost. */\nfunction floorUpdate(event) {\n\tif (event.component !== cfg.floorComponentType + ':' + cfg.floorComponentId) return;\n\tobserveFloor(event.delta);\n\tif (!floorSafe()) driveOff();\n}\n/** Enable readiness only after startup status reports the configured switch output as OFF. */\nfunction startupOff(result, code) {\n\tif (code !== 0 || !result || result.id !== cfg.componentId || result.output !== false) {\n\t\tfail('startup_off_unconfirmed');\n\t\treturn;\n\t}\n\tbusy = false;\n\tready = true;\n}\n/** Require acknowledged startup OFF before requesting the live status needed to enable readiness. */\nfunction startupSet(result, code) {\n\tif (code !== 0 || !result || typeof result.was_on !== 'boolean') {\n\t\tfail('startup_off_execution_unknown');\n\t\treturn;\n\t}\n\tShelly.call('Switch.GetStatus', { id: cfg.componentId }, startupOff);\n}\n/** After persisting the boot epoch, issue absolute OFF before the startup readiness readback. */\nfunction startupPersist(result, code) {\n\tif (code !== 0) {\n\t\tfail('epoch_persistence_failed');\n\t\treturn;\n\t}\n\tbusy = true;\n\tShelly.call('Switch.Set', { id: cfg.componentId, on: false }, startupSet);\n}\n/** Require commissioned epoch storage and persist its successor so packets from an earlier boot cannot reuse the epoch. */\nfunction startupEpoch(result, code) {\n\t// The key must have been initialized during commissioning. Missing/reset storage\n\t// cannot silently establish a fresh epoch and admit packets from an earlier boot.\n\tif (code !== 0 || !result || !integer(result.value) || result.value >= 2147483646) {\n\t\tfail('epoch_storage_unqualified');\n\t\treturn;\n\t}\n\tepoch = result.value + 1;\n\tShelly.call('KVS.Set', { key: cfg.epochKey, value: epoch }, startupPersist);\n}\n/** Restrict correlation tokens to a bounded alphabet accepted unchanged by the HTTP query parser. */\nfunction validNonce(nonce) {\n\tif (typeof nonce !== 'string' || nonce.length < 1 || nonce.length > 64) return false;\n\tlet allowed = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz_-';\n\tfor (let index = 0; index < nonce.length; index++) if (allowed.indexOf(nonce.charAt(index)) < 0) return false;\n\treturn true;\n}\n\n/** Validate unique action parameters and nonce, then route one uncached correlated status, fence or ON reply. */\nfunction handleHttp(request, response) {\n\tlet params = {};\n\tlet reply = {\n\t\t/** Correlate a successful action result with the exact request nonce. */\n\t\tresult: function (value) {\n\t\t\tresponse.code = 200;\n\t\t\tresponse.body = JSON.stringify({ result: value, nonce: params.nonce });\n\t\t\tresponse.send();\n\t\t},\n\t\t/** Return a correlated protocol error without representing it as successful OFF evidence. */\n\t\terror: function (code, reason) {\n\t\t\tresponse.code = 409;\n\t\t\tresponse.body = JSON.stringify({ error: reason, nonce: params.nonce });\n\t\t\tresponse.send();\n\t\t},\n\t};\n\tresponse.headers = [\n\t\t['Content-Type', 'application/json'],\n\t\t['Cache-Control', 'no-store'],\n\t];\n\tif (request.method !== 'GET') {\n\t\treject(reply, 'method_not_allowed');\n\t\treturn;\n\t}\n\tlet action = null;\n\tlet parts = (request.query || '').split('&');\n\ttry {\n\t\tfor (let index = 0; index < parts.length; index++) {\n\t\t\tlet field = parts[index].split('=');\n\t\t\tif (field.length !== 2) {\n\t\t\t\treject(reply, 'invalid_query');\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (field[0] === 'action' && action === null) action = field[1];\n\t\t\telse if (field[0] === 'nonce' && params.nonce === undefined) params.nonce = field[1];\n\t\t\telse if (field[0] === 'epoch' && params.epoch === undefined) params.epoch = JSON.parse(field[1]);\n\t\t\telse if (field[0] === 'untilMs' && params.untilMs === undefined) params.untilMs = JSON.parse(field[1]);\n\t\t\telse {\n\t\t\t\treject(reply, 'invalid_query');\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t} catch (error) {\n\t\treject(reply, 'invalid_query');\n\t\treturn;\n\t}\n\tif (!validNonce(params.nonce)) {\n\t\treject(reply, 'invalid_nonce');\n\t\treturn;\n\t}\n\tif (action === 'status' && parts.length === 2) reply.result(view());\n\telse if (action === 'fence' && parts.length === 2) fence(reply);\n\telse if (action === 'on' && parts.length === 4) energize(reply, params);\n\telse reject(reply, 'invalid_action');\n}\n\n/** Validate device identity, declared installation prerequisites and bounds; declarations alone are not commissioning evidence. */\nfunction validConfig() {\n\treturn (\n\t\tcfg &&\n\t\tcfg.deviceId === info.id &&\n\t\tcfg.model === info.model &&\n\t\tcfg.firmware === info.fw_id &&\n\t\tcfg.evidenceId &&\n\t\tcfg.scriptRestartDrainQualified === true &&\n\t\tcfg.nativeWritersExcluded === true &&\n\t\tinteger(cfg.componentId) &&\n\t\tinteger(cfg.floorComponentId) &&\n\t\t((cfg.floorComponentType === 'temperature' && cfg.floorAttribute === 'tC') ||\n\t\t\t(cfg.floorComponentType === 'voltmeter' && cfg.floorAttribute === 'xvoltage') ||\n\t\t\tconversionQualified() ||\n\t\t\t(cfg.floorComponentType === 'input' && cfg.floorAttribute === 'xpercent')) &&\n\t\ttypeof cfg.floorConfigurationJson === 'string' &&\n\t\tcfg.floorConfigurationJson &&\n\t\ttypeof cfg.epochKey === 'string' &&\n\t\tcfg.epochKey &&\n\t\tinteger(cfg.minLeaseMs) &&\n\t\tcfg.minLeaseMs > 0 &&\n\t\tinteger(cfg.maxLeaseMs) &&\n\t\tcfg.maxLeaseMs >= cfg.minLeaseMs &&\n\t\tinteger(cfg.watchdogMs) &&\n\t\tcfg.watchdogMs > 0 &&\n\t\tcfg.watchdogMs < cfg.minLeaseMs &&\n\t\tinteger(cfg.floorMaxAgeMs) &&\n\t\tcfg.floorMaxAgeMs > cfg.watchdogMs &&\n\t\ttypeof cfg.floorLimitC === 'number' &&\n\t\tfiniteNumber(cfg.floorLimitC) &&\n\t\ttypeof cfg.floorHysteresisC === 'number' &&\n\t\tfiniteNumber(cfg.floorHysteresisC) &&\n\t\tcfg.floorHysteresisC > 0\n\t);\n}\n\nif (!validConfig()) {\n\tfail('installation_qualification_missing');\n} else {\n\tHTTPServer.registerEndpoint('spguard', handleHttp);\n\t// A cached startup snapshot cannot refresh sensor freshness. Only actual\n\t// sensor status reports qualify floor input; equal-report behavior needs testing.\n\tShelly.addStatusHandler(floorUpdate);\n\tTimer.set(cfg.watchdogMs, true, watchdog);\n\tbusy = true;\n\tdriveOff();\n\tShelly.call('KVS.Get', { key: cfg.epochKey }, startupEpoch);\n}\n";
+//# sourceMappingURL=guard-script-source.js.map

package/dist/plugins/devices-shelly-ng/contracts/guard-script-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-script-source.js","sourceRoot":"","sources":["../../../../src/plugins/devices-shelly-ng/contracts/guard-script-source.ts"],"names":[],"mappings":";;;AACa,QAAA,mBAAmB,GAC/B,mljBAAmljB,CAAC"}

package/dist/plugins/devices-shelly-ng/contracts/guard-script.contract.d.ts

@@ -0,0 +1,21 @@
+export interface ShellyGuardScriptQualification {
+    readonly scriptId: number;
+    readonly sourceHash: string;
+    readonly endpointHostname: string;
+    readonly canonicalMac: string;
+    readonly evidenceId: string;
+    readonly writerIsolationEvidenceId: string;
+    readonly commissioningBarrierEvidenceId: string;
+    readonly endpointAuthenticationEvidenceId: string;
+    readonly restartDrainEvidenceId: string;
+    readonly localExecutionBoundsEvidenceId: string;
+    readonly installationMetadata?: {
+        readonly componentType: string;
+        readonly componentId: number;
+        readonly configurationJson: string;
+        readonly switchConfigurationJson: string;
+        readonly peripheralsJson: string;
+    };
+    readonly protocol: 'sp-guard-candidate-1';
+}
+export declare function guardScriptReadiness(value: ShellyGuardScriptQualification | undefined): readonly string[];

package/dist/plugins/devices-shelly-ng/contracts/guard-script.contract.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.guardScriptReadiness = guardScriptReadiness;
+const node_net_1 = require("node:net");
+function guardScriptReadiness(value) {
+    if (!value)
+        return ['ordered_script_qualification_missing'];
+    const identifiers = [
+        value.evidenceId,
+        value.writerIsolationEvidenceId,
+        value.commissioningBarrierEvidenceId,
+        value.endpointAuthenticationEvidenceId,
+        value.restartDrainEvidenceId,
+        value.localExecutionBoundsEvidenceId,
+    ];
+    if (identifiers.some((id) => typeof id !== 'string' || !id.trim() || id.length > 256))
+        return ['ordered_script_qualification_invalid'];
+    try {
+        const endpoint = new URL(`http://${value.endpointHostname}`);
+        if ((0, node_net_1.isIP)(endpoint.hostname.replace(/^\[|\]$/g, '')) === 0 ||
+            endpoint.host !== value.endpointHostname ||
+            endpoint.username ||
+            endpoint.password ||
+            endpoint.pathname !== '/' ||
+            endpoint.search ||
+            endpoint.hash)
+            return ['ordered_script_endpoint_invalid'];
+    }
+    catch {
+        return ['ordered_script_endpoint_invalid'];
+    }
+    return Number.isSafeInteger(value.scriptId) &&
+        value.scriptId >= 0 &&
+        /^[a-f0-9]{64}$/.test(value.sourceHash) &&
+        /^[a-f0-9]{12}$/i.test(value.canonicalMac) &&
+        !!value.endpointHostname &&
+        !!value.evidenceId &&
+        !!value.writerIsolationEvidenceId &&
+        !!value.commissioningBarrierEvidenceId &&
+        !!value.endpointAuthenticationEvidenceId &&
+        !!value.restartDrainEvidenceId &&
+        !!value.localExecutionBoundsEvidenceId &&
+        value.protocol === 'sp-guard-candidate-1'
+        ? []
+        : ['ordered_script_qualification_invalid'];
+}
+//# sourceMappingURL=guard-script.contract.js.map

package/dist/plugins/devices-shelly-ng/contracts/guard-script.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-script.contract.js","sourceRoot":"","sources":["../../../../src/plugins/devices-shelly-ng/contracts/guard-script.contract.ts"],"names":[],"mappings":";;AA4BA,oDAyCC;AArED,uCAAgC;AA4BhC,SAAgB,oBAAoB,CAAC,KAAiD;IACrF,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG;QACnB,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,yBAAyB;QAC/B,KAAK,CAAC,8BAA8B;QACpC,KAAK,CAAC,gCAAgC;QACtC,KAAK,CAAC,sBAAsB;QAC5B,KAAK,CAAC,8BAA8B;KACpC,CAAC;IACF,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,GAAG,CAAC;QACpF,OAAO,CAAC,sCAAsC,CAAC,CAAC;IACjD,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC7D,IACC,IAAA,eAAI,EAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;YACrD,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,gBAAgB;YACxC,QAAQ,CAAC,QAAQ;YACjB,QAAQ,CAAC,QAAQ;YACjB,QAAQ,CAAC,QAAQ,KAAK,GAAG;YACzB,QAAQ,CAAC,MAAM;YACf,QAAQ,CAAC,IAAI;YAEb,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1C,KAAK,CAAC,QAAQ,IAAI,CAAC;QACnB,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QACvC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QAC1C,CAAC,CAAC,KAAK,CAAC,gBAAgB;QACxB,CAAC,CAAC,KAAK,CAAC,UAAU;QAClB,CAAC,CAAC,KAAK,CAAC,yBAAyB;QACjC,CAAC,CAAC,KAAK,CAAC,8BAA8B;QACtC,CAAC,CAAC,KAAK,CAAC,gCAAgC;QACxC,CAAC,CAAC,KAAK,CAAC,sBAAsB;QAC9B,CAAC,CAAC,KAAK,CAAC,8BAA8B;QACtC,KAAK,CAAC,QAAQ,KAAK,sBAAsB;QACzC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/plugins/devices-shelly-ng/contracts/member-guard-script-source.d.ts

@@ -0,0 +1,2 @@
+export declare function buildShellyMemberGuardSource(source: string): string;
+export declare const SHELLY_MEMBER_GUARD_SOURCE: string;

package/dist/plugins/devices-shelly-ng/contracts/member-guard-script-source.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SHELLY_MEMBER_GUARD_SOURCE = void 0;
+exports.buildShellyMemberGuardSource = buildShellyMemberGuardSource;
+const guard_script_source_1 = require("./guard-script-source");
+function buildShellyMemberGuardSource(source) {
+    const patches = [
+        [
+            'function observeFloor(status) {\n',
+            'function observeFloor(status) {\n\tif (now() - floorObservedAt >= cfg.floorMaxAgeMs) floorLatched = true;\n',
+        ],
+        [
+            '!finiteNumber(value) || (status.errors',
+            '!finiteNumber(value) || !cfg.floorDomainC || value < cfg.floorDomainC.minimum || value > cfg.floorDomainC.maximum || (status.errors',
+        ],
+        [
+            'cfg.floorHysteresisC > 0\n',
+            'cfg.floorHysteresisC > 0 && cfg.floorDomainC && finiteNumber(cfg.floorDomainC.minimum) && finiteNumber(cfg.floorDomainC.maximum) && cfg.floorDomainC.minimum < cfg.floorDomainC.maximum && cfg.floorLimitC <= cfg.floorDomainC.maximum && cfg.floorLimitC > cfg.floorDomainC.minimum && cfg.floorLimitC - cfg.floorHysteresisC > cfg.floorDomainC.minimum\n',
+        ],
+    ];
+    for (const [anchor] of patches)
+        if (source.split(anchor).length !== 2)
+            throw new Error(`Member guard patch anchor must occur exactly once: ${anchor}`);
+    return patches.reduce((result, [anchor, replacement]) => result.replace(anchor, replacement), source);
+}
+exports.SHELLY_MEMBER_GUARD_SOURCE = buildShellyMemberGuardSource(guard_script_source_1.SHELLY_GUARD_SOURCE);
+//# sourceMappingURL=member-guard-script-source.js.map

package/dist/plugins/devices-shelly-ng/contracts/member-guard-script-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-guard-script-source.js","sourceRoot":"","sources":["../../../../src/plugins/devices-shelly-ng/contracts/member-guard-script-source.ts"],"names":[],"mappings":";;;AAGA,oEAmBC;AAtBD,+DAA4D;AAG5D,SAAgB,4BAA4B,CAAC,MAAc;IAC1D,MAAM,OAAO,GAAG;QACf;YACC,mCAAmC;YACnC,6GAA6G;SAC7G;QACD;YACC,wCAAwC;YACxC,qIAAqI;SACrI;QACD;YACC,4BAA4B;YAC5B,6VAA6V;SAC7V;KACQ,CAAC;IACX,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO;QAC7B,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,sDAAsD,MAAM,EAAE,CAAC,CAAC;IAClF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;AACvG,CAAC;AAGY,QAAA,0BAA0B,GAAG,4BAA4B,CAAC,yCAAmB,CAAC,CAAC"}

package/dist/plugins/devices-shelly-ng/contracts/native-temperature.contract.d.ts

@@ -0,0 +1,36 @@
+import { PropertySampleEvidence } from '../../../modules/devices/models/property-sample.model';
+export { hasQualifiedRawVoltageIdentity } from '../../../modules/devices/utils/property-metadata.utils';
+export interface ShellyRawSample {
+    readonly componentKey: string;
+    readonly values: Readonly<Record<string, unknown>>;
+    readonly evidence: PropertySampleEvidence;
+}
+export interface NativeTemperatureSnapshot {
+    readonly installationSnapshot?: {
+        configuration: Readonly<Record<string, unknown>>;
+        peripherals: Readonly<Record<string, unknown>>;
+    };
+    readonly componentKey: string;
+    readonly fingerprint: string;
+    readonly channelIdentifier: string;
+    readonly attribute: 'xpercent' | 'xvoltage' | 'tC' | 'voltage';
+    readonly unit: string;
+    readonly expression: string | null;
+    readonly configuration: {
+        readonly enabled: boolean;
+        readonly inverted: boolean;
+        readonly rangeMap: readonly number[] | null;
+        readonly inputRange: number | null;
+        readonly reportThreshold: number | null;
+        readonly offset: number | null;
+    };
+    readonly peripheral: {
+        readonly kind: 'analog_in' | 'voltmeter' | 'ds18b20';
+        readonly io: number;
+        readonly address: string | null;
+    };
+}
+export declare function nativeTemperatureIdentity(componentKey: string, config: Readonly<Record<string, unknown>>, peripherals: Readonly<Record<string, unknown>>): NativeTemperatureSnapshot | null;
+export declare function nativeVoltmeterVoltageIdentity(componentKey: string, config: Readonly<Record<string, unknown>>, peripherals: Readonly<Record<string, unknown>>, canonicalMac: string | null | undefined): NativeTemperatureSnapshot | null;
+export declare function shellySampleEvidence(ts: unknown, observedAt: Date, receivedAt?: Date): PropertySampleEvidence;
+export declare function hasQualifiedFloorSourceIdentity(channelIdentifier: string): boolean;

package/dist/plugins/devices-shelly-ng/contracts/native-temperature.contract.js

@@ -0,0 +1,200 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasQualifiedRawVoltageIdentity = void 0;
+exports.nativeTemperatureIdentity = nativeTemperatureIdentity;
+exports.nativeVoltmeterVoltageIdentity = nativeVoltmeterVoltageIdentity;
+exports.shellySampleEvidence = shellySampleEvidence;
+exports.hasQualifiedFloorSourceIdentity = hasQualifiedFloorSourceIdentity;
+const crypto_1 = require("crypto");
+var property_metadata_utils_1 = require("../../../modules/devices/utils/property-metadata.utils");
+Object.defineProperty(exports, "hasQualifiedRawVoltageIdentity", { enumerable: true, get: function () { return property_metadata_utils_1.hasQualifiedRawVoltageIdentity; } });
+function installationSnapshot(componentKey, configuration, peripherals) {
+    const common = ['id', 'name', 'enable', 'invert', 'range', 'range_map', 'report_thr', 'offset'];
+    const allowed = componentKey.startsWith('temperature:')
+        ? ['id', 'name', 'report_thr_C', 'offset_C']
+        : [...common, 'type', 'factory_reset', 'xpercent', 'xvoltage'];
+    if (Object.keys(configuration).some((key) => !allowed.includes(key)))
+        return undefined;
+    for (const key of ['xpercent', 'xvoltage']) {
+        const helper = configuration[key];
+        if (helper != null &&
+            (typeof helper !== 'object' ||
+                Array.isArray(helper) ||
+                Object.entries(helper).some(([field, value]) => !['expr', 'unit'].includes(field) || (value !== null && typeof value !== 'string'))))
+            return undefined;
+    }
+    for (const [key, value] of Object.entries(configuration)) {
+        if (['xpercent', 'xvoltage'].includes(key))
+            continue;
+        if (key === 'range_map') {
+            if (value != null &&
+                (!Array.isArray(value) || !value.every((entry) => typeof entry === 'number' && Number.isFinite(entry))))
+                return undefined;
+            continue;
+        }
+        if (value !== null && !['string', 'boolean', 'number'].includes(typeof value))
+            return undefined;
+        if (typeof value === 'number' && !Number.isFinite(value))
+            return undefined;
+    }
+    for (const [kind, links] of Object.entries(peripherals)) {
+        if (!['analog_in', 'voltmeter', 'ds18b20', 'dht22', 'digital_in', 'digital_out'].includes(kind) ||
+            !links ||
+            typeof links !== 'object' ||
+            Array.isArray(links))
+            return undefined;
+        for (const link of Object.values(links))
+            if (!link ||
+                typeof link !== 'object' ||
+                Array.isArray(link) ||
+                Object.entries(link).some(([key, value]) => key === 'io'
+                    ? !Number.isSafeInteger(value) || value < 0
+                    : key === 'addr'
+                        ? typeof value !== 'string'
+                        : true))
+                return undefined;
+    }
+    const serialized = JSON.stringify({ configuration, peripherals });
+    return serialized.length <= 8192
+        ? JSON.parse(serialized)
+        : undefined;
+}
+function nativeTemperatureIdentity(componentKey, config, peripherals) {
+    const [type, id] = componentKey.split(':');
+    if (!['input', 'voltmeter', 'temperature'].includes(type) || !/^\d+$/.test(id) || config.id !== Number(id))
+        return null;
+    if (!Number.isSafeInteger(Number(id)))
+        return null;
+    if (config.range_map !== undefined &&
+        config.range_map !== null &&
+        (!Array.isArray(config.range_map) ||
+            !config.range_map.every((value) => typeof value === 'number' && Number.isFinite(value))))
+        return null;
+    for (const field of ['invert', 'enable'])
+        if (config[field] !== undefined && typeof config[field] !== 'boolean')
+            return null;
+    const thresholdField = type === 'temperature' ? 'report_thr_C' : 'report_thr';
+    const offsetField = type === 'temperature' ? 'offset_C' : 'offset';
+    for (const field of [offsetField, thresholdField])
+        if (config[field] !== undefined &&
+            config[field] !== null &&
+            (typeof config[field] !== 'number' || !Number.isFinite(config[field])))
+            return null;
+    if (config.range !== undefined &&
+        config.range !== null &&
+        (!Number.isInteger(config.range) || config.range < 0))
+        return null;
+    const attribute = type === 'input' ? 'xpercent' : type === 'voltmeter' ? 'xvoltage' : 'tC';
+    const kind = type === 'input' ? 'analog_in' : type === 'voltmeter' ? 'voltmeter' : 'ds18b20';
+    const links = peripherals[kind];
+    const link = links?.[componentKey];
+    if (!link || typeof link !== 'object' || Array.isArray(link))
+        return null;
+    const io = link.io === undefined ? 0 : link.io;
+    if (!Number.isInteger(io) || io < 0)
+        return null;
+    let unit;
+    let expression;
+    if (type === 'temperature') {
+        if (typeof link.addr !== 'string' || !link.addr.trim())
+            return null;
+        unit = '°C';
+        expression = null;
+    }
+    else {
+        const helper = config[attribute];
+        if (!helper ||
+            typeof helper.expr !== 'string' ||
+            !helper.expr.trim() ||
+            typeof helper.unit !== 'string' ||
+            !['°C', 'C', 'Celsius', 'celsius'].includes(helper.unit))
+            return null;
+        if (type === 'input' && (config.type !== 'analog' || config.enable === false))
+            return null;
+        unit = helper.unit;
+        expression = helper.expr;
+    }
+    const configuration = {
+        enabled: config.enable !== false,
+        inverted: config.invert === true,
+        rangeMap: Array.isArray(config.range_map) &&
+            config.range_map.every((value) => typeof value === 'number' && Number.isFinite(value))
+            ? [...config.range_map]
+            : null,
+        inputRange: typeof config.range === 'number' ? config.range : null,
+        reportThreshold: typeof config[thresholdField] === 'number' && Number.isFinite(config[thresholdField])
+            ? config[thresholdField]
+            : null,
+        offset: typeof config[offsetField] === 'number' && Number.isFinite(config[offsetField]) ? config[offsetField] : null,
+    };
+    const peripheral = {
+        kind,
+        io: io,
+        address: typeof link.addr === 'string' ? link.addr : null,
+    };
+    const fingerprint = (0, crypto_1.createHash)('sha256')
+        .update(JSON.stringify({ componentKey, unit, expression, configuration, peripheral }))
+        .digest('hex');
+    return {
+        installationSnapshot: installationSnapshot(componentKey, config, peripherals),
+        componentKey,
+        fingerprint,
+        channelIdentifier: `${type === 'temperature' ? 'probe-temperature' : 'helper-temperature'}:${componentKey}:${fingerprint}`,
+        attribute,
+        unit,
+        expression,
+        configuration,
+        peripheral,
+    };
+}
+function nativeVoltmeterVoltageIdentity(componentKey, config, peripherals, canonicalMac) {
+    const match = /^voltmeter:(\d+)$/.exec(componentKey);
+    if (!match || !Number.isSafeInteger(Number(match[1])) || config.id !== Number(match[1]))
+        return null;
+    if (!canonicalMac || !/^[\da-f]{12}$/i.test(canonicalMac))
+        return null;
+    if (!Number.isInteger(config.range) || config.range < 0)
+        return null;
+    if (config.report_thr !== undefined &&
+        config.report_thr !== null &&
+        (typeof config.report_thr !== 'number' || !Number.isFinite(config.report_thr)))
+        return null;
+    const links = peripherals.voltmeter;
+    const link = links?.[componentKey];
+    if (!link || typeof link !== 'object' || Array.isArray(link))
+        return null;
+    const io = link.io === undefined ? 0 : link.io;
+    if (!Number.isInteger(io) || io < 0)
+        return null;
+    const configuration = {
+        enabled: true,
+        inverted: false,
+        rangeMap: null,
+        inputRange: config.range,
+        reportThreshold: typeof config.report_thr === 'number' ? config.report_thr : null,
+        offset: null,
+    };
+    const peripheral = { kind: 'voltmeter', io: io, address: null };
+    const fingerprint = (0, crypto_1.createHash)('sha256')
+        .update(JSON.stringify({ canonicalMac: canonicalMac.toUpperCase(), componentKey, unit: 'V', configuration, peripheral }))
+        .digest('hex');
+    return {
+        installationSnapshot: installationSnapshot(componentKey, config, peripherals),
+        componentKey,
+        fingerprint,
+        channelIdentifier: `raw-voltage:${componentKey}:${fingerprint}`,
+        attribute: 'voltage',
+        unit: 'V',
+        expression: null,
+        configuration,
+        peripheral,
+    };
+}
+function shellySampleEvidence(ts, observedAt, receivedAt = new Date()) {
+    const sourceTime = ts === undefined ? observedAt : new Date(typeof ts === 'number' && Number.isFinite(ts) ? ts * 1000 : Number.NaN);
+    return { sampledAt: sourceTime, receivedAt, observedAt, provenance: 'live' };
+}
+function hasQualifiedFloorSourceIdentity(channelIdentifier) {
+    return /^(helper-temperature:(input|voltmeter)|probe-temperature:temperature):\d+:[a-f0-9]{64}$/.test(channelIdentifier);
+}
+//# sourceMappingURL=native-temperature.contract.js.map

package/dist/plugins/devices-shelly-ng/contracts/native-temperature.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-temperature.contract.js","sourceRoot":"","sources":["../../../../src/plugins/devices-shelly-ng/contracts/native-temperature.contract.ts"],"names":[],"mappings":";;;AAyGA,8DAgGC;AAGD,wEA8CC;AAGD,oDAKC;AAGD,0EAIC;AAzQD,mCAAoC;AAIpC,kGAAwG;AAA/F,yIAAA,8BAA8B,OAAA;AAmCvC,SAAS,oBAAoB,CAC5B,YAAoB,EACpB,aAAgD,EAChD,WAA8C;IAE9C,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAChG,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC;QACtD,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,CAAC;QAC5C,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACvF,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,IACC,MAAM,IAAI,IAAI;YACd,CAAC,OAAO,MAAM,KAAK,QAAQ;gBAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACrB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAC1B,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CACtG,CAAC;YAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QACrD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACzB,IACC,KAAK,IAAI,IAAI;gBACb,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAEhH,OAAO,SAAS,CAAC;YAClB,SAAS;QACV,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAChG,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;IAC5E,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACzD,IACC,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC3F,CAAC,KAAK;YACN,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAEpB,OAAO,SAAS,CAAC;QAClB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;YACjE,IACC,CAAC,IAAI;gBACL,OAAO,IAAI,KAAK,QAAQ;gBACxB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBACnB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAC1C,GAAG,KAAK,IAAI;oBACX,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC;oBACvD,CAAC,CAAC,GAAG,KAAK,MAAM;wBACf,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;wBAC3B,CAAC,CAAC,IAAI,CACR;gBAED,OAAO,SAAS,CAAC;IACpB,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;IAClE,OAAO,UAAU,CAAC,MAAM,IAAI,IAAI;QAC/B,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAuD;QAC/E,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAGD,SAAgB,yBAAyB,CACxC,YAAoB,EACpB,MAAyC,EACzC,WAA8C;IAE9C,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;QACzG,OAAO,IAAI,CAAC;IACb,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,IACC,MAAM,CAAC,SAAS,KAAK,SAAS;QAC9B,MAAM,CAAC,SAAS,KAAK,IAAI;QACzB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YAChC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAElG,OAAO,IAAI,CAAC;IACb,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACvC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;IACpF,MAAM,cAAc,GAAG,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC;IAC9E,MAAM,WAAW,GAAG,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC;QAChD,IACC,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS;YAC3B,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI;YACtB,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAEtE,OAAO,IAAI,CAAC;IACd,IACC,MAAM,CAAC,KAAK,KAAK,SAAS;QAC1B,MAAM,CAAC,KAAK,KAAK,IAAI;QACrB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,IAAK,MAAM,CAAC,KAAgB,GAAG,CAAC,CAAC;QAEjE,OAAO,IAAI,CAAC;IACb,MAAM,SAAS,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,MAAM,IAAI,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAiE,CAAC;IAChG,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1E,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAK,EAAa,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,IAAY,CAAC;IACjB,IAAI,UAAyB,CAAC;IAC9B,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC5B,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACpE,IAAI,GAAG,IAAI,CAAC;QACZ,UAAU,GAAG,IAAI,CAAC;IACnB,CAAC;SAAM,CAAC;QACP,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAmD,CAAC;QACnF,IACC,CAAC,MAAM;YACP,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;YACnB,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;YAExD,OAAO,IAAI,CAAC;QACb,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3F,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACnB,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;IACD,MAAM,aAAa,GAA+C;QACjE,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,KAAK;QAChC,QAAQ,EAAE,MAAM,CAAC,MAAM,KAAK,IAAI;QAChC,QAAQ,EACP,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YAC/B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9F,CAAC,CAAC,CAAC,GAAI,MAAM,CAAC,SAAsB,CAAC;YACrC,CAAC,CAAC,IAAI;QACR,UAAU,EAAE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QAClE,eAAe,EACd,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACpF,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;YACxB,CAAC,CAAC,IAAI;QACR,MAAM,EACL,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;KAC7G,CAAC;IACF,MAAM,UAAU,GAA4C;QAC3D,IAAI;QACJ,EAAE,EAAE,EAAY;QAChB,OAAO,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;KACzD,CAAC;IACF,MAAM,WAAW,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC;SACtC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC;SACrF,MAAM,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO;QACN,oBAAoB,EAAE,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,CAAC;QAC7E,YAAY;QACZ,WAAW;QACX,iBAAiB,EAAE,GAAG,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,oBAAoB,IAAI,YAAY,IAAI,WAAW,EAAE;QAC1H,SAAS;QACT,IAAI;QACJ,UAAU;QACV,aAAa;QACb,UAAU;KACV,CAAC;AACH,CAAC;AAGD,SAAgB,8BAA8B,CAC7C,YAAoB,EACpB,MAAyC,EACzC,WAA8C,EAC9C,YAAuC;IAEvC,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,IAAI,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,IAAK,MAAM,CAAC,KAAgB,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjF,IACC,MAAM,CAAC,UAAU,KAAK,SAAS;QAC/B,MAAM,CAAC,UAAU,KAAK,IAAI;QAC1B,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAE9E,OAAO,IAAI,CAAC;IACb,MAAM,KAAK,GAAG,WAAW,CAAC,SAAyD,CAAC;IACpF,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAK,EAAa,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,aAAa,GAA+C;QACjE,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,MAAM,CAAC,KAAe;QAClC,eAAe,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QACjF,MAAM,EAAE,IAAI;KACZ,CAAC;IACF,MAAM,UAAU,GAA4C,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,EAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACnH,MAAM,WAAW,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC;SACtC,MAAM,CACN,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAChH;SACA,MAAM,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO;QACN,oBAAoB,EAAE,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,CAAC;QAC7E,YAAY;QACZ,WAAW;QACX,iBAAiB,EAAE,eAAe,YAAY,IAAI,WAAW,EAAE;QAC/D,SAAS,EAAE,SAAS;QACpB,IAAI,EAAE,GAAG;QACT,UAAU,EAAE,IAAI;QAChB,aAAa;QACb,UAAU;KACV,CAAC;AACH,CAAC;AAGD,SAAgB,oBAAoB,CAAC,EAAW,EAAE,UAAgB,EAAE,UAAU,GAAG,IAAI,IAAI,EAAE;IAE1F,MAAM,UAAU,GACf,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAC9E,CAAC;AAGD,SAAgB,+BAA+B,CAAC,iBAAyB;IACxE,OAAO,yFAAyF,CAAC,IAAI,CACpG,iBAAiB,CACjB,CAAC;AACH,CAAC"}

package/dist/plugins/devices-shelly-ng/contracts/protective-switch.contract.d.ts

@@ -0,0 +1,44 @@
+import type { QualifiedRemoteDewPointProfile } from '../services/remote-dew-point-qualification';
+import { ShellyGuardScriptQualification } from './guard-script.contract';
+export interface ShellyProtectiveQualification {
+    readonly deviceId: string;
+    readonly model: string;
+    readonly firmware: string;
+    readonly componentId: number;
+    readonly evidenceId: string;
+    readonly revision: number;
+    readonly testedLeaseSeconds: {
+        readonly min: number;
+        readonly max: number;
+    };
+    readonly releaseOrderingQualified: boolean;
+    readonly independentProtectionQualified: boolean;
+    readonly guardScript?: ShellyGuardScriptQualification;
+    readonly remoteDewPoint?: QualifiedRemoteDewPointProfile;
+}
+export type ShellyProtectiveCommand = {
+    readonly on: true;
+    readonly leaseSeconds: number;
+    readonly qualification: ShellyProtectiveQualification;
+} | {
+    readonly on: false;
+};
+export type ShellyProtectiveCommandResult = {
+    readonly outcome: 'refused';
+    readonly reasons: readonly string[];
+} | {
+    readonly outcome: 'accepted';
+    readonly wasOn: boolean;
+    readonly outputConfirmed: false;
+    readonly pendingOnDrained: false;
+} | {
+    readonly outcome: 'unknown';
+    readonly outputConfirmed: false;
+    readonly pendingOnDrained: false;
+};
+export declare function protectiveReadiness(identity: {
+    deviceId: string;
+    model: string;
+    firmware: string;
+}, componentId: number, qualification?: ShellyProtectiveQualification): readonly string[];
+export declare const SHELLY_V1_PROTECTIVE_READINESS: readonly string[];

package/dist/plugins/devices-shelly-ng/contracts/protective-switch.contract.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SHELLY_V1_PROTECTIVE_READINESS = void 0;
+exports.protectiveReadiness = protectiveReadiness;
+function protectiveReadiness(identity, componentId, qualification) {
+    const reasons = [];
+    if (identity.model !== 'SNSW-001P16EU')
+        reasons.push('unsupported_model');
+    if (!qualification)
+        return [...reasons, 'hardware_evidence_missing'];
+    if (qualification.deviceId !== identity.deviceId ||
+        qualification.model !== identity.model ||
+        !identity.firmware ||
+        qualification.firmware !== identity.firmware ||
+        qualification.componentId !== componentId)
+        reasons.push('hardware_identity_mismatch');
+    if (!qualification.evidenceId || !Number.isSafeInteger(qualification.revision) || qualification.revision < 1)
+        reasons.push('hardware_evidence_missing');
+    if (!qualification.releaseOrderingQualified)
+        reasons.push('release_ordering_unqualified');
+    if (!qualification.independentProtectionQualified)
+        reasons.push('independent_protection_unqualified');
+    const bounds = qualification.testedLeaseSeconds;
+    if (!Number.isFinite(bounds.min) || !Number.isFinite(bounds.max) || bounds.min <= 0 || bounds.max < bounds.min)
+        reasons.push('lease_bounds_unqualified');
+    return reasons;
+}
+exports.SHELLY_V1_PROTECTIVE_READINESS = Object.freeze(['unsupported_protective_protocol']);
+//# sourceMappingURL=protective-switch.contract.js.map

package/dist/plugins/devices-shelly-ng/contracts/protective-switch.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protective-switch.contract.js","sourceRoot":"","sources":["../../../../src/plugins/devices-shelly-ng/contracts/protective-switch.contract.ts"],"names":[],"mappings":";;;AAqCA,kDAyBC;AAzBD,SAAgB,mBAAmB,CAClC,QAA+D,EAC/D,WAAmB,EACnB,aAA6C;IAE7C,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,QAAQ,CAAC,KAAK,KAAK,eAAe;QAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC1E,IAAI,CAAC,aAAa;QAAE,OAAO,CAAC,GAAG,OAAO,EAAE,2BAA2B,CAAC,CAAC;IACrE,IACC,aAAa,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAC5C,aAAa,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QACtC,CAAC,QAAQ,CAAC,QAAQ;QAClB,aAAa,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAC5C,aAAa,CAAC,WAAW,KAAK,WAAW;QAEzC,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5C,IAAI,CAAC,aAAa,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,QAAQ,GAAG,CAAC;QAC3G,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3C,IAAI,CAAC,aAAa,CAAC,wBAAwB;QAAE,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC1F,IAAI,CAAC,aAAa,CAAC,8BAA8B;QAAE,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,aAAa,CAAC,kBAAkB,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG;QAC7G,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC;AAChB,CAAC;AAGY,QAAA,8BAA8B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC"}

package/dist/plugins/devices-shelly-ng/controllers/shelly-cover-recovery.controller.d.ts

@@ -0,0 +1,11 @@
+import { AuthenticatedRequest } from '../../../modules/auth/guards/auth.guard';
+import { ReqRecoverCoverOrderingDto } from '../dto/cover-recovery.dto';
+import { CoverRecoveryContextResponseModel, CoverRecoveryResponseModel } from '../models/cover-recovery.model';
+import { ShellyCoverRecoveryService } from '../services/shelly-cover-recovery.service';
+export declare class ShellyCoverRecoveryController {
+    private readonly recovery;
+    constructor(recovery: ShellyCoverRecoveryService);
+    private actor;
+    context(request: AuthenticatedRequest, deviceId: string, channelId: string, propertyId: string): Promise<CoverRecoveryContextResponseModel>;
+    recover(request: AuthenticatedRequest, deviceId: string, channelId: string, propertyId: string, dto: ReqRecoverCoverOrderingDto): Promise<CoverRecoveryResponseModel>;
+}

package/dist/plugins/devices-shelly-ng/controllers/shelly-cover-recovery.controller.js

@@ -0,0 +1,98 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ShellyCoverRecoveryController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const api_documentation_decorator_1 = require("../../../modules/swagger/decorators/api-documentation.decorator");
+const roles_guard_1 = require("../../../modules/users/guards/roles.guard");
+const users_constants_1 = require("../../../modules/users/users.constants");
+const devices_shelly_ng_constants_1 = require("../devices-shelly-ng.constants");
+const cover_recovery_dto_1 = require("../dto/cover-recovery.dto");
+const cover_recovery_model_1 = require("../models/cover-recovery.model");
+const shelly_cover_recovery_service_1 = require("../services/shelly-cover-recovery.service");
+let ShellyCoverRecoveryController = class ShellyCoverRecoveryController {
+    constructor(recovery) {
+        this.recovery = recovery;
+    }
+    actor(request) {
+        const auth = request.auth;
+        if (auth?.type !== 'user' || !auth.id || ![users_constants_1.UserRole.OWNER, users_constants_1.UserRole.ADMIN].includes(auth.role))
+            throw new common_1.ForbiddenException('Identified owner or administrator required');
+        return auth.id;
+    }
+    async context(request, deviceId, channelId, propertyId) {
+        const response = new cover_recovery_model_1.CoverRecoveryContextResponseModel();
+        response.data = await this.recovery.context(this.actor(request), deviceId, channelId, propertyId);
+        return response;
+    }
+    async recover(request, deviceId, channelId, propertyId, dto) {
+        const response = new cover_recovery_model_1.CoverRecoveryResponseModel();
+        response.data = await this.recovery.recover(this.actor(request), deviceId, channelId, propertyId, dto.data);
+        return response;
+    }
+};
+exports.ShellyCoverRecoveryController = ShellyCoverRecoveryController;
+__decorate([
+    (0, swagger_1.ApiOperation)({
+        tags: [devices_shelly_ng_constants_1.DEVICES_SHELLY_NG_PLUGIN_API_TAG_NAME],
+        summary: 'Get unresolved ordinary cover ordering context',
+        description: 'Owner/admin only. Short-lived canonical metadata and connection context; this is not command authority.',
+        operationId: 'get-devices-shelly-ng-plugin-cover-ordering-recovery',
+    }),
+    (0, api_documentation_decorator_1.ApiSuccessResponse)(cover_recovery_model_1.CoverRecoveryContextResponseModel, 'Current unresolved ordinary cover ordering context'),
+    (0, api_documentation_decorator_1.ApiForbiddenResponse)('Identified owner or administrator user session required'),
+    (0, api_documentation_decorator_1.ApiBadRequestResponse)('Invalid canonical device/channel/property identifiers'),
+    (0, api_documentation_decorator_1.ApiNotFoundResponse)('No current canonical motor or unresolved ordering reservation'),
+    (0, api_documentation_decorator_1.ApiConflictResponse)('Recovery context or guarded provider changed'),
+    (0, roles_guard_1.Roles)(users_constants_1.UserRole.OWNER, users_constants_1.UserRole.ADMIN),
+    (0, common_1.Get)(),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('deviceId', new common_1.ParseUUIDPipe())),
+    __param(2, (0, common_1.Param)('channelId', new common_1.ParseUUIDPipe())),
+    __param(3, (0, common_1.Param)('propertyId', new common_1.ParseUUIDPipe())),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String, String, String]),
+    __metadata("design:returntype", Promise)
+], ShellyCoverRecoveryController.prototype, "context", null);
+__decorate([
+    (0, swagger_1.ApiOperation)({
+        tags: [devices_shelly_ng_constants_1.DEVICES_SHELLY_NG_PLUGIN_API_TAG_NAME],
+        summary: 'Accept unresolved ordinary cover ordering uncertainty',
+        description: 'Explicit owner/admin physical handback responsibility. Previously sent actions may still execute. Fresh nonmoving status is a current-condition prerequisite, never upstream drain proof or command completion. No hardware command is sent.',
+        operationId: 'recover-devices-shelly-ng-plugin-cover-ordering',
+    }),
+    (0, api_documentation_decorator_1.ApiSuccessResponse)(cover_recovery_model_1.CoverRecoveryResponseModel, 'Audited operator uncertainty override; no command confirmation'),
+    (0, api_documentation_decorator_1.ApiForbiddenResponse)('Identified owner or administrator user session required'),
+    (0, api_documentation_decorator_1.ApiBadRequestResponse)('Explicit acknowledgement, bounded reason and current context required'),
+    (0, api_documentation_decorator_1.ApiNotFoundResponse)('Current canonical ordinary physical motor is unavailable'),
+    (0, api_documentation_decorator_1.ApiConflictResponse)('Active dispatch, stale context/reservation, invalid current condition or audit conflict; ordering stays unresolved'),
+    (0, roles_guard_1.Roles)(users_constants_1.UserRole.OWNER, users_constants_1.UserRole.ADMIN),
+    (0, common_1.Post)(),
+    (0, common_1.HttpCode)(200),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)('deviceId', new common_1.ParseUUIDPipe())),
+    __param(2, (0, common_1.Param)('channelId', new common_1.ParseUUIDPipe())),
+    __param(3, (0, common_1.Param)('propertyId', new common_1.ParseUUIDPipe())),
+    __param(4, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String, String, String, cover_recovery_dto_1.ReqRecoverCoverOrderingDto]),
+    __metadata("design:returntype", Promise)
+], ShellyCoverRecoveryController.prototype, "recover", null);
+exports.ShellyCoverRecoveryController = ShellyCoverRecoveryController = __decorate([
+    (0, swagger_1.ApiTags)(devices_shelly_ng_constants_1.DEVICES_SHELLY_NG_PLUGIN_API_TAG_NAME),
+    (0, common_1.Controller)('devices/:deviceId/channels/:channelId/properties/:propertyId/cover-ordering-recovery'),
+    __metadata("design:paramtypes", [shelly_cover_recovery_service_1.ShellyCoverRecoveryService])
+], ShellyCoverRecoveryController);
+//# sourceMappingURL=shelly-cover-recovery.controller.js.map

package/dist/plugins/devices-shelly-ng/controllers/shelly-cover-recovery.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shelly-cover-recovery.controller.js","sourceRoot":"","sources":["../../../../src/plugins/devices-shelly-ng/controllers/shelly-cover-recovery.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAsH;AACtH,6CAAwD;AAGxD,iHAMyE;AACzE,2EAAkE;AAClE,4EAAkE;AAClE,gFAAuF;AACvF,kEAAuE;AACvE,yEAA+G;AAC/G,6FAAuF;AAIhF,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IACzC,YAA6B,QAAoC;QAApC,aAAQ,GAAR,QAAQ,CAA4B;IAAG,CAAC;IAC7D,KAAK,CAAC,OAA6B;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,0BAAQ,CAAC,KAAK,EAAE,0BAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7F,MAAM,IAAI,2BAAkB,CAAC,4CAA4C,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,EAAE,CAAC;IAChB,CAAC;IAeK,AAAN,KAAK,CAAC,OAAO,CACL,OAA6B,EACI,QAAgB,EACf,SAAiB,EAChB,UAAkB;QAE5D,MAAM,QAAQ,GAAG,IAAI,wDAAiC,EAAE,CAAC;QACzD,QAAQ,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAClG,OAAO,QAAQ,CAAC;IACjB,CAAC;IAkBK,AAAN,KAAK,CAAC,OAAO,CACL,OAA6B,EACI,QAAgB,EACf,SAAiB,EAChB,UAAkB,EACpD,GAA+B;QAEvC,MAAM,QAAQ,GAAG,IAAI,iDAA0B,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5G,OAAO,QAAQ,CAAC;IACjB,CAAC;CACD,CAAA;AA5DY,sEAA6B;AAsBnC;IAdL,IAAA,sBAAY,EAAC;QACb,IAAI,EAAE,CAAC,mEAAqC,CAAC;QAC7C,OAAO,EAAE,gDAAgD;QACzD,WAAW,EACV,yGAAyG;QAC1G,WAAW,EAAE,sDAAsD;KACnE,CAAC;IACD,IAAA,gDAAkB,EAAC,wDAAiC,EAAE,oDAAoD,CAAC;IAC3G,IAAA,kDAAoB,EAAC,yDAAyD,CAAC;IAC/E,IAAA,mDAAqB,EAAC,uDAAuD,CAAC;IAC9E,IAAA,iDAAmB,EAAC,+DAA+D,CAAC;IACpF,IAAA,iDAAmB,EAAC,8CAA8C,CAAC;IACnE,IAAA,mBAAK,EAAC,0BAAQ,CAAC,KAAK,EAAE,0BAAQ,CAAC,KAAK,CAAC;IACrC,IAAA,YAAG,GAAE;IAEJ,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,UAAU,EAAE,IAAI,sBAAa,EAAE,CAAC,CAAA;IACtC,WAAA,IAAA,cAAK,EAAC,WAAW,EAAE,IAAI,sBAAa,EAAE,CAAC,CAAA;IACvC,WAAA,IAAA,cAAK,EAAC,YAAY,EAAE,IAAI,sBAAa,EAAE,CAAC,CAAA;;;;4DAKzC;AAkBK;IAjBL,IAAA,sBAAY,EAAC;QACb,IAAI,EAAE,CAAC,mEAAqC,CAAC;QAC7C,OAAO,EAAE,uDAAuD;QAChE,WAAW,EACV,8OAA8O;QAC/O,WAAW,EAAE,iDAAiD;KAC9D,CAAC;IACD,IAAA,gDAAkB,EAAC,iDAA0B,EAAE,gEAAgE,CAAC;IAChH,IAAA,kDAAoB,EAAC,yDAAyD,CAAC;IAC/E,IAAA,mDAAqB,EAAC,uEAAuE,CAAC;IAC9F,IAAA,iDAAmB,EAAC,0DAA0D,CAAC;IAC/E,IAAA,iDAAmB,EACnB,oHAAoH,CACpH;IACA,IAAA,mBAAK,EAAC,0BAAQ,CAAC,KAAK,EAAE,0BAAQ,CAAC,KAAK,CAAC;IACrC,IAAA,aAAI,GAAE;IACN,IAAA,iBAAQ,EAAC,GAAG,CAAC;IAEZ,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,UAAU,EAAE,IAAI,sBAAa,EAAE,CAAC,CAAA;IACtC,WAAA,IAAA,cAAK,EAAC,WAAW,EAAE,IAAI,sBAAa,EAAE,CAAC,CAAA;IACvC,WAAA,IAAA,cAAK,EAAC,YAAY,EAAE,IAAI,sBAAa,EAAE,CAAC,CAAA;IACxC,WAAA,IAAA,aAAI,GAAE,CAAA;;qEAAM,+CAA0B;;4DAKvC;wCA3DW,6BAA6B;IAFzC,IAAA,iBAAO,EAAC,mEAAqC,CAAC;IAC9C,IAAA,mBAAU,EAAC,sFAAsF,CAAC;qCAE3D,0DAA0B;GADrD,6BAA6B,CA4DzC"}