@nubisco/openbridge 1.4.1 → 1.5.1

package/dist/services/bridge.d.ts

@@ -0,0 +1,102 @@
+/**
+ * What the bridge knows about its devices, as plain functions.
+ *
+ * The REST routes in server.ts and the MCP tools in mcp/tools.ts are two thin
+ * adapters over these, side by side in one process. Every check lives here, so
+ * an agent can never do more than the same request through the HTTP API (see
+ * "MCP servers" in the workspace AGENTS.md).
+ *
+ * A refusal is a ServiceError carrying the HTTP status the route answers with.
+ * Fastify sends it as it does any error with a statusCode, and the MCP layer
+ * turns it into a result the model reads.
+ */
+import type { DeviceDescriptor, DeviceHealth, PluginRegistry } from '@nubisco/openbridge-core';
+import { type LogEntry, type LogLevel } from '@nubisco/openbridge-logger';
+import type { HomebridgeAPI } from '@nubisco/openbridge-compatibility-homebridge';
+import type { DeviceEvent, DeviceEventLog } from '../device-events.js';
+import type { DeviceObservation, ObservationStore } from '../observations.js';
+import { type Point } from '../timeseries.js';
+import type { HomeKitServiceTypes } from '../homekit-service-type.js';
+export type ControlHandler = (value: unknown) => void | Promise<void>;
+export declare class ServiceError extends Error {
+    readonly statusCode: number;
+    constructor(statusCode: number, message: string);
+}
+export declare function isServiceError(err: unknown): err is ServiceError;
+/** Everything the functions below read, handed over once by createServer. */
+export interface BridgeContext {
+    registry: PluginRegistry;
+    home: string;
+    hapAPI: HomebridgeAPI | null;
+    controls: Map<string, ControlHandler>;
+    restrictedControls: Set<string>;
+    deviceEvents: DeviceEventLog | null;
+    observations: ObservationStore | null;
+    homekitServiceTypes: HomeKitServiceTypes | null;
+    nativeAccessoryUuid: ((deviceId: string) => string | null) | null;
+}
+export type DeviceView = DeviceDescriptor & {
+    telemetry: Record<string, unknown>;
+    pluginStatus: string;
+    homekitType: string | null;
+    health: DeviceHealth;
+};
+/** Find a registered device by id across every plugin. */
+export declare function findDevice(registry: PluginRegistry, deviceId: string): DeviceDescriptor | null;
+/** Every device across every plugin, with its latest telemetry and health. */
+export declare function listDevices(ctx: BridgeContext): DeviceView[];
+export declare function getDevice(ctx: BridgeContext, deviceId: string): DeviceView;
+/** The controls a plugin registered for a device, and whether each is restricted. */
+export declare function deviceControls(ctx: BridgeContext, deviceId: string): Array<{
+    id: string;
+    restricted: boolean;
+}>;
+/** Run one control. A restricted control is refused here, for every caller. */
+export declare function controlDevice(ctx: BridgeContext, deviceId: string, control: string, value: unknown): Promise<void>;
+export interface MetricQuery {
+    metric?: string;
+    /** Unix seconds. Defaults to a day before `to`. */
+    from?: number;
+    /** Unix seconds. Defaults to now. */
+    to?: number;
+    maxPoints?: number;
+}
+export interface MetricSeries {
+    metric: NonNullable<DeviceDescriptor['metrics']>[number];
+    resolution: number;
+    tier: string;
+    from: number;
+    to: number;
+    points: Point[];
+}
+/**
+ * A device's recorded history for one metric over a range. Without a metric it
+ * reports what the device offers, so a caller can choose without a second read.
+ */
+export declare function deviceMetrics(ctx: BridgeContext, deviceId: string, q: MetricQuery): {
+    deviceId: string;
+    metrics: NonNullable<DeviceDescriptor['metrics']>;
+    series: MetricSeries | null;
+};
+export declare function deviceEvents(ctx: BridgeContext, deviceId: string, limit?: number): DeviceEvent[];
+export declare function deviceObservations(ctx: BridgeContext, deviceId: string, limit?: number): {
+    observations: DeviceObservation[];
+    total: number;
+};
+export interface LogQuery {
+    plugin?: string;
+    limit?: number;
+    /** Only this level and above. */
+    minLevel?: LogLevel;
+    /** Case-insensitive substring of the message. */
+    contains?: string;
+    /** ISO timestamp: only entries after it. */
+    since?: string;
+}
+/** The daemon's in-memory log buffer, oldest first, newest `limit` kept. */
+export declare function readLogs(q: LogQuery): LogEntry[];
+/** Accessories published by Homebridge-compatible plugins, with their characteristic values. */
+export declare function listAccessories(ctx: BridgeContext): import("@nubisco/openbridge-compatibility-homebridge").SerializedAccessory[];
+/** Write one HomeKit characteristic, which runs the plugin's onSet handler. */
+export declare function setCharacteristic(ctx: BridgeContext, uuid: string, serviceUuid: string, charUuid: string, value: unknown): void;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/services/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/services/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAC9F,OAAO,EAAU,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AACjF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAA;AAEjF,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC7E,OAAO,EAAgB,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAErE,MAAM,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAErE,qBAAa,YAAa,SAAQ,KAAK;IAEnC,QAAQ,CAAC,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM,EAC3B,OAAO,EAAE,MAAM;CAIlB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,YAAY,CAEhE;AAED,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,cAAc,CAAA;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;IAC5B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IACrC,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,YAAY,EAAE,cAAc,GAAG,IAAI,CAAA;IACnC,YAAY,EAAE,gBAAgB,GAAG,IAAI,CAAA;IACrC,mBAAmB,EAAE,mBAAmB,GAAG,IAAI,CAAA;IAC/C,mBAAmB,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;CAClE;AAED,MAAM,MAAM,UAAU,GAAG,gBAAgB,GAAG;IAC1C,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,MAAM,EAAE,YAAY,CAAA;CACrB,CAAA;AAUD,0DAA0D;AAC1D,wBAAgB,UAAU,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAM9F;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,GAAG,UAAU,EAAE,CA2B5D;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAI1E;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAC,CAQ/G;AAED,+EAA+E;AAC/E,wBAAsB,aAAa,CACjC,GAAG,EAAE,aAAa,EAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,qCAAqC;IACrC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACxD,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,KAAK,EAAE,CAAA;CAChB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,aAAa,EAClB,QAAQ,EAAE,MAAM,EAChB,CAAC,EAAE,WAAW,GACb;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,WAAW,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAA;CAAE,CAiCtG;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,WAAW,EAAE,CAG7F;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,aAAa,EAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,SAAM,GACV;IAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAMtD;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iCAAiC;IACjC,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAID,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,CAAC,EAAE,QAAQ,GAAG,QAAQ,EAAE,CAehD;AAED,gGAAgG;AAChG,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,gFAEjD;AAED,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,GACb,IAAI,CAiBN"}

package/dist/services/bridge.js

@@ -0,0 +1,191 @@
+/**
+ * What the bridge knows about its devices, as plain functions.
+ *
+ * The REST routes in server.ts and the MCP tools in mcp/tools.ts are two thin
+ * adapters over these, side by side in one process. Every check lives here, so
+ * an agent can never do more than the same request through the HTTP API (see
+ * "MCP servers" in the workspace AGENTS.md).
+ *
+ * A refusal is a ServiceError carrying the HTTP status the route answers with.
+ * Fastify sends it as it does any error with a statusCode, and the MCP layer
+ * turns it into a result the model reads.
+ */
+import { readFileSync } from 'fs';
+import { join } from 'path';
+import { Logger } from '@nubisco/openbridge-logger';
+import { assessDeviceHealth } from '../device-health.js';
+import { DeviceSeries } from '../timeseries.js';
+export class ServiceError extends Error {
+    statusCode;
+    constructor(statusCode, message) {
+        super(message);
+        this.statusCode = statusCode;
+    }
+}
+export function isServiceError(err) {
+    return err instanceof ServiceError;
+}
+function customNames(home) {
+    try {
+        return JSON.parse(readFileSync(join(home, 'device-names.json'), 'utf8'));
+    }
+    catch {
+        return {};
+    }
+}
+/** Find a registered device by id across every plugin. */
+export function findDevice(registry, deviceId) {
+    for (const instance of registry.getAll()) {
+        const device = instance.devices?.[deviceId];
+        if (device)
+            return device;
+    }
+    return null;
+}
+/** Every device across every plugin, with its latest telemetry and health. */
+export function listDevices(ctx) {
+    const names = customNames(ctx.home);
+    const devices = [];
+    for (const instance of ctx.registry.getAll()) {
+        if (!instance.devices)
+            continue;
+        for (const device of Object.values(instance.devices)) {
+            const telemetry = instance.telemetry?.[device.id] ?? {};
+            const name = names[device.id] ?? device.name;
+            // What the device is *presented* as, which may differ from the widget
+            // type its plugin declared. Sent so the card can show a relay driving a
+            // lamp as a light rather than contradicting the inspector next to it.
+            const accessoryUuid = ctx.nativeAccessoryUuid?.(device.id) ?? null;
+            const homekitType = accessoryUuid ? (ctx.homekitServiceTypes?.typeForAccessory(accessoryUuid) ?? null) : null;
+            // Derived here rather than stored, so it is always current and there
+            // is no second copy of the truth to go stale on its own.
+            const health = assessDeviceHealth({
+                telemetry,
+                intervalSeconds: device.telemetryIntervalSeconds,
+                pluginStatus: instance.status,
+            });
+            devices.push({ ...device, name, telemetry, pluginStatus: instance.status, homekitType, health });
+        }
+    }
+    return devices;
+}
+export function getDevice(ctx, deviceId) {
+    const device = listDevices(ctx).find((d) => d.id === deviceId);
+    if (!device)
+        throw new ServiceError(404, `Device '${deviceId}' not found`);
+    return device;
+}
+/** The controls a plugin registered for a device, and whether each is restricted. */
+export function deviceControls(ctx, deviceId) {
+    const prefix = `${deviceId}::`;
+    const out = [];
+    for (const key of ctx.controls.keys()) {
+        if (!key.startsWith(prefix))
+            continue;
+        out.push({ id: key.slice(prefix.length), restricted: ctx.restrictedControls.has(key) });
+    }
+    return out;
+}
+/** Run one control. A restricted control is refused here, for every caller. */
+export async function controlDevice(ctx, deviceId, control, value) {
+    const key = `${deviceId}::${control}`;
+    if (ctx.restrictedControls.has(key)) {
+        throw new ServiceError(403, `Control '${control}' is restricted for device '${deviceId}'`);
+    }
+    const handler = ctx.controls.get(key);
+    if (!handler)
+        throw new ServiceError(404, `No control '${control}' registered for device '${deviceId}'`);
+    await handler(value);
+}
+/**
+ * A device's recorded history for one metric over a range. Without a metric it
+ * reports what the device offers, so a caller can choose without a second read.
+ */
+export function deviceMetrics(ctx, deviceId, q) {
+    const device = findDevice(ctx.registry, deviceId);
+    if (!device)
+        throw new ServiceError(404, `Device '${deviceId}' not found`);
+    const metrics = device.metrics ?? [];
+    if (metrics.length === 0)
+        return { deviceId, metrics: [], series: null };
+    if (!q.metric)
+        return { deviceId, metrics, series: null };
+    const descriptor = metrics.find((m) => m.key === q.metric);
+    if (!descriptor)
+        throw new ServiceError(404, `Device '${deviceId}' does not report '${q.metric}'`);
+    const now = Math.floor(Date.now() / 1000);
+    const toSec = q.to ?? now;
+    const fromSec = q.from ?? toSec - 86400;
+    if (!Number.isFinite(fromSec) || !Number.isFinite(toSec) || fromSec >= toSec) {
+        throw new ServiceError(400, 'Invalid from/to range');
+    }
+    const series = new DeviceSeries(join(ctx.home, 'metrics'), deviceId, metrics);
+    const points = Math.min(5000, Math.max(10, q.maxPoints || 720));
+    const result = series.query(descriptor.key, fromSec, toSec, points);
+    return {
+        deviceId,
+        metrics,
+        series: {
+            metric: descriptor,
+            resolution: result.tier.interval,
+            tier: result.tier.name,
+            from: fromSec,
+            to: toSec,
+            points: result.points,
+        },
+    };
+}
+export function deviceEvents(ctx, deviceId, limit = 100) {
+    if (!ctx.deviceEvents)
+        throw new ServiceError(503, 'event log unavailable');
+    return ctx.deviceEvents.read(deviceId, Number.isFinite(limit) ? limit : 100);
+}
+export function deviceObservations(ctx, deviceId, limit = 100) {
+    if (!ctx.observations)
+        throw new ServiceError(503, 'observation store unavailable');
+    return {
+        observations: ctx.observations.list(deviceId, Number.isFinite(limit) ? limit : 100),
+        total: ctx.observations.count(deviceId),
+    };
+}
+const LEVEL_ORDER = { debug: 0, info: 1, warn: 2, error: 3 };
+/** The daemon's in-memory log buffer, oldest first, newest `limit` kept. */
+export function readLogs(q) {
+    const limit = q.limit ?? 200;
+    // The REST route never filtered, so it asks for the buffer as it always did.
+    if (!q.minLevel && !q.contains && !q.since)
+        return Logger.getEntries(q.plugin, limit);
+    const needle = q.contains?.toLowerCase();
+    const floor = q.minLevel ? LEVEL_ORDER[q.minLevel] : 0;
+    return Logger.getEntries(q.plugin, Number.MAX_SAFE_INTEGER)
+        .filter((e) => LEVEL_ORDER[e.level] >= floor &&
+        (!q.since || e.timestamp > q.since) &&
+        (!needle || e.message.toLowerCase().includes(needle)))
+        .slice(-limit);
+}
+/** Accessories published by Homebridge-compatible plugins, with their characteristic values. */
+export function listAccessories(ctx) {
+    return ctx.hapAPI ? ctx.hapAPI.getAccessories() : [];
+}
+/** Write one HomeKit characteristic, which runs the plugin's onSet handler. */
+export function setCharacteristic(ctx, uuid, serviceUuid, charUuid, value) {
+    if (!ctx.hapAPI)
+        throw new ServiceError(503, 'HAP not available');
+    const raw = ctx.hapAPI.getRawAccessories();
+    const acc = raw.find((a) => a.UUID === uuid);
+    if (!acc)
+        throw new ServiceError(404, `Accessory '${uuid}' not found`);
+    const svc = acc.services?.find((s) => s.UUID === serviceUuid);
+    if (!svc)
+        throw new ServiceError(404, `Service '${serviceUuid}' not found`);
+    const ch = svc.characteristics?.find((c) => c.UUID === charUuid);
+    if (!ch)
+        throw new ServiceError(404, `Characteristic '${charUuid}' not found`);
+    try {
+        ch.setValue(value);
+    }
+    catch (err) {
+        throw new ServiceError(500, `setValue failed: ${err}`);
+    }
+}
+//# sourceMappingURL=bridge.js.map

package/dist/services/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/services/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,MAAM,EAAgC,MAAM,4BAA4B,CAAA;AAEjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAGxD,OAAO,EAAE,YAAY,EAAc,MAAM,kBAAkB,CAAA;AAK3D,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B;IADX,YACW,UAAkB,EAC3B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHL,eAAU,GAAV,UAAU,CAAQ;IAI7B,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,OAAO,GAAG,YAAY,YAAY,CAAA;AACpC,CAAC;AAsBD,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,UAAU,CAAC,QAAwB,EAAE,QAAgB;IACnE,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAA;QAC3C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAA;IAC3B,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,GAAkB;IAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,OAAO,GAAiB,EAAE,CAAA;IAChC,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,SAAQ;QAC/B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAA;YACvD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAA;YAE5C,sEAAsE;YACtE,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,aAAa,GAAG,GAAG,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAA;YAClE,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAE7G,qEAAqE;YACrE,yDAAyD;YACzD,MAAM,MAAM,GAAG,kBAAkB,CAAC;gBAChC,SAAS;gBACT,eAAe,EAAE,MAAM,CAAC,wBAAwB;gBAChD,YAAY,EAAE,QAAQ,CAAC,MAAM;aAC9B,CAAC,CAAA;YAEF,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAA;QAClG,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAkB,EAAE,QAAgB;IAC5D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAA;IAC9D,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,QAAQ,aAAa,CAAC,CAAA;IAC1E,OAAO,MAAM,CAAA;AACf,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,GAAkB,EAAE,QAAgB;IACjE,MAAM,MAAM,GAAG,GAAG,QAAQ,IAAI,CAAA;IAC9B,MAAM,GAAG,GAA+C,EAAE,CAAA;IAC1D,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAQ;QACrC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACzF,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAkB,EAClB,QAAgB,EAChB,OAAe,EACf,KAAc;IAEd,MAAM,GAAG,GAAG,GAAG,QAAQ,KAAK,OAAO,EAAE,CAAA;IACrC,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,YAAY,OAAO,+BAA+B,QAAQ,GAAG,CAAC,CAAA;IAC5F,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACrC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,eAAe,OAAO,4BAA4B,QAAQ,GAAG,CAAC,CAAA;IACxG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAoBD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAkB,EAClB,QAAgB,EAChB,CAAc;IAEd,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IACjD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,QAAQ,aAAa,CAAC,CAAA;IAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAA;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IACxE,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAEzD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAA;IAC1D,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,QAAQ,sBAAsB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IAElG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAA;IACzB,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,KAAK,GAAG,KAAK,CAAA;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;QAC7E,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAA;IACtD,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IAEnE,OAAO;QACL,QAAQ;QACR,OAAO;QACP,MAAM,EAAE;YACN,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;YAChC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAkB,EAAE,QAAgB,EAAE,KAAK,GAAG,GAAG;IAC5E,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAA;IAC3E,OAAO,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;AAC9E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAAkB,EAClB,QAAgB,EAChB,KAAK,GAAG,GAAG;IAEX,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;IACnF,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;QACnF,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;KACxC,CAAA;AACH,CAAC;AAaD,MAAM,WAAW,GAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;AAEtF,4EAA4E;AAC5E,MAAM,UAAU,QAAQ,CAAC,CAAW;IAClC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,GAAG,CAAA;IAC5B,6EAA6E;IAC7E,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAErF,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACtD,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC;SACxD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK;QAC7B,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC;QACnC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACxD;SACA,KAAK,CAAC,CAAC,KAAK,CAAC,CAAA;AAClB,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,eAAe,CAAC,GAAkB;IAChD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AACtD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAC/B,GAAkB,EAClB,IAAY,EACZ,WAAmB,EACnB,QAAgB,EAChB,KAAc;IAEd,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;IACjE,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAA;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;IACjD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,cAAc,IAAI,aAAa,CAAC,CAAA;IAEtE,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAA;IAClE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,YAAY,WAAW,aAAa,CAAC,CAAA;IAE3E,MAAM,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;IACrE,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,mBAAmB,QAAQ,aAAa,CAAC,CAAA;IAE9E,IAAI,CAAC;QACH,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,oBAAoB,GAAG,EAAE,CAAC,CAAA;IACxD,CAAC;AACH,CAAC"}

package/dist/token-cli.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `openbridge token ...`: manage MCP tokens from the host.
+ *
+ * The way in for a bridge whose dashboard sign-in is off, and a way back in
+ * for any bridge: whoever has a shell on the host already owns the bridge, so
+ * no further proof is asked. Writes the same access.json the daemon reads, and
+ * the daemon picks the change up without a restart.
+ */
+export declare function runTokenCommand(args: string[], home?: string): number;
+//# sourceMappingURL=token-cli.d.ts.map

package/dist/token-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-cli.d.ts","sourceRoot":"","sources":["../src/token-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmBH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,SAAuC,GAAG,MAAM,CAqDnG"}

package/dist/token-cli.js

@@ -0,0 +1,76 @@
+/**
+ * `openbridge token ...`: manage MCP tokens from the host.
+ *
+ * The way in for a bridge whose dashboard sign-in is off, and a way back in
+ * for any bridge: whoever has a shell on the host already owns the bridge, so
+ * no further proof is asked. Writes the same access.json the daemon reads, and
+ * the daemon picks the change up without a restart.
+ */
+import os from 'os';
+import { join, resolve } from 'path';
+import { AccessStore } from './access.js';
+const USAGE = `Usage:
+  openbridge token create <name> [--control]   Create a token (read-only unless --control)
+  openbridge token list                         List tokens
+  openbridge token revoke <id>                  Revoke a token
+
+A token opens the MCP endpoint at /mcp and nothing else. Read-only tokens see
+devices, history, events, observations and logs. --control also lets the agent
+operate devices.`;
+function flagValue(args, ...names) {
+    return args.some((a) => names.includes(a));
+}
+export function runTokenCommand(args, home = resolve(os.homedir(), '.openbridge')) {
+    const store = new AccessStore(join(home, 'access.json'));
+    const [sub, ...rest] = args;
+    const positional = rest.filter((a) => !a.startsWith('-'));
+    switch (sub) {
+        case 'create': {
+            const name = positional.join(' ').trim();
+            if (!name) {
+                console.error('A name is required, e.g. openbridge token create "Claude on my laptop"\n');
+                console.error(USAGE);
+                return 1;
+            }
+            const access = flagValue(rest, '--control') ? 'control' : 'read';
+            const { token } = store.createToken(name, access, { id: 'local', email: null });
+            console.log(`Created "${name}" with ${access === 'control' ? 'read and control' : 'read-only'} access.`);
+            console.log('It works once the daemon runs with OPENBRIDGE_MCP=on, which is off by default.');
+            console.log('Copy it now, it is not shown again:\n');
+            console.log(`  ${token}\n`);
+            console.log('Connect Claude Code with:\n');
+            console.log(`  claude mcp add --transport http openbridge http://<this-host>:8582/mcp \\`);
+            console.log(`    --header "Authorization: Bearer ${token}"`);
+            return 0;
+        }
+        case 'list': {
+            const tokens = store.listTokens();
+            if (tokens.length === 0) {
+                console.log('No tokens.');
+                return 0;
+            }
+            for (const t of tokens) {
+                const used = t.lastUsedAt ? `last used ${t.lastUsedAt}` : 'never used';
+                console.log(`${t.id}  ${t.access.padEnd(7)}  ${t.name}  (${used})`);
+            }
+            return 0;
+        }
+        case 'revoke': {
+            const id = positional[0];
+            if (!id) {
+                console.error(USAGE);
+                return 1;
+            }
+            if (!store.revokeToken(id)) {
+                console.error(`No token with id ${id}`);
+                return 1;
+            }
+            console.log('Revoked.');
+            return 0;
+        }
+        default:
+            console.log(USAGE);
+            return sub === undefined || sub === 'help' || sub === '--help' ? 0 : 1;
+    }
+}
+//# sourceMappingURL=token-cli.js.map

package/dist/token-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-cli.js","sourceRoot":"","sources":["../src/token-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAA;AACnB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACpC,OAAO,EAAE,WAAW,EAAe,MAAM,aAAa,CAAA;AAEtD,MAAM,KAAK,GAAG;;;;;;;iBAOG,CAAA;AAEjB,SAAS,SAAS,CAAC,IAAc,EAAE,GAAG,KAAe;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAc,EAAE,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC;IACzF,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAA;IACxD,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;IAEzD,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;YACxC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAA;gBACzF,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBACpB,OAAO,CAAC,CAAA;YACV,CAAC;YACD,MAAM,MAAM,GAAW,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;YACxE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/E,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,UAAU,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,CAAA;YACxG,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAA;YAC7F,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAA;YACpD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAA;YAC3B,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAA;YAC1C,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAA;YAC1F,OAAO,CAAC,GAAG,CAAC,uCAAuC,KAAK,GAAG,CAAC,CAAA;YAC5D,OAAO,CAAC,CAAA;QACV,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAA;YACjC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;gBACzB,OAAO,CAAC,CAAA;YACV,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,YAAY,CAAA;gBACtE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,IAAI,GAAG,CAAC,CAAA;YACrE,CAAC;YACD,OAAO,CAAC,CAAA;QACV,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;YACxB,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBACpB,OAAO,CAAC,CAAA;YACV,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3B,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAA;gBACvC,OAAO,CAAC,CAAA;YACV,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YACvB,OAAO,CAAC,CAAA;QACV,CAAC;QACD;YACE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAClB,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1E,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nubisco/openbridge",
-  "version": "1.4.1",
+  "version": "1.5.1",
   "description": "Local-first home automation bridge for developers. Plugin-based, TypeScript-first, Homebridge-compatible.",
   "author": "José Silva <jose@nubisco.io>",
   "license": "MIT",
@@ -53,10 +53,11 @@
     "hap-nodejs": "^0.14.3",
     "qrcode-terminal": "^0.12.0",
     "systeminformation": "^5.33.16",
-    "@nubisco/openbridge-compatibility-homebridge": "1.4.1",
-    "@nubisco/openbridge-core": "1.4.1",
-    "@nubisco/openbridge-config": "1.4.1",
-    "@nubisco/openbridge-logger": "1.4.1"
+    "zod": "^4.3.5",
+    "@nubisco/openbridge-compatibility-homebridge": "1.5.1",
+    "@nubisco/openbridge-config": "1.5.1",
+    "@nubisco/openbridge-logger": "1.5.1",
+    "@nubisco/openbridge-core": "1.5.1"
   },
   "optionalDependencies": {
     "node-pty": "^1.1.0"