iobroker.bee 0.0.0-stage → 0.2.0

package/README.md

@@ -1,3 +1,94 @@
-# Temporary Holding Version
+![Logo](admin/bee.svg)
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# ioBroker.bee
+
+Fleet agent for ioBroker. It connects a delivered ioBroker system (in a house, a radio station in the mountains, a vehicle, a machine in the field, …) to a **beekeeper** fleet server: it reports the inventory, receives the desired version profile and converges the system to it, locally and at the right time.
+
+> Prototype. The server (beekeeper) is a separate, closed product. This adapter only reports, reads, executes and verifies; it holds no secrets besides its own device certificate.
+
+## How it works
+
+1. **Enrollment.** The factory image contains the enrollment URL and a one-time token bound to the asset (the managed installation). On first start the agent sends the token and the system UUID and receives its own device certificate. The token is used up.
+2. **Control channel.** MQTT over TLS with the device certificate, to the platform's own broker. The broker certificate may come from the platform CA (handed out at enrollment) or from a public CA such as Let's Encrypt; for the latter the agent uses the public root certificates shipped with Node.js. Heartbeat and Last Will report online status, the inventory is sent completely on connect and as a diff afterwards, all payloads gzip-compressed. Keepalive and heartbeat are configurable to keep mobile data low.
+3. **Desired state instead of commands.** The server publishes the desired profile as a retained message. A system that was offline for months reads the current profile, not a backlog of orders.
+4. **Reconciliation.** The agent compares the profile with the installed versions and plans install, upgrade, downgrade (and removal only when the server asks for it on return to managed mode). It never touches adapters that are not in the profile.
+5. **Preflight.** Emergency stop, dependencies of the target versions (`io-package.json` of the target version, `engines.node`), free space, maintenance window and configurable conditions on ioBroker states (installation not in use, battery charged, no roaming, vehicle standing, …). Conditions that change by themselves mean *waiting*, everything that needs a human means *blocked*.
+6. **Execution.** A detached runner process performs backup (`iobroker backup`) and the steps (`iobroker add/upgrade/del`) one by one. It survives restarts of the adapter, including the update of the agent itself, which always comes last.
+7. **Verification.** Versions must match, all enabled daemon instances of the changed adapters must be alive, and no new errors may appear in their log during the observation time. Otherwise the agent rolls back the changed adapters to their previous versions and reports *blocked*. A blocked job is not repeated until the fleet manager releases a new attempt.
+
+### Behaviour without server
+
+- **Unknown means self-stop.** If the server explicitly rejects the device (unknown token, revoked certificate), the agent writes the reason to `bee.0.info.status`, raises a notification and terminates. It does not keep knocking.
+- **Network errors are no reason to stop.** Without connection the distance between attempts grows up to a daily rhythm. Jobs that were started continue and report later.
+
+### Managed and self-managed
+
+If the owner installs adapters that are not part of the profile, the agent reports them, stops automatic updates and informs the owner via an ioBroker notification. The fleet manager sees the installation in the deviation list and can bring it back to managed mode (removing the own adapters or tolerating them as exceptions).
+
+### Remote access to admin and vis-2
+
+A technician of the fleet manager can open admin or vis-2 of the system from the fleet management, without ioBroker.pro and without open ports on the device:
+
+1. The server sends the job `tunnel` over MQTT with a one-time ticket, the kind (admin or vis-2), the technician, the purpose and the end of the session (at most 4 hours).
+2. The agent checks that the tunnel URL belongs to its own server (same host as enrollment or broker, `wss://` only) and opens an outgoing WebSocket to it.
+3. The server carries the connections of the technician's browser through this WebSocket. The agent connects them to an enabled admin instance (or web instance for vis-2, only with vis-2 installed) on this host and nowhere else. It reports these instances with port, HTTPS and login mode in the inventory; with several, the technician chooses one, and the agent accepts only one from its own list.
+
+The owner can switch off each kind in the tab *Remote access*; the agent then refuses the session and the fleet management shows why. Running sessions are visible in `info.remoteAccess`. After a connection loss the agent reconnects until the session expires, also across restarts of the adapter. The server ends the session early when the technician ends it or the device is revoked.
+
+## Configuration
+
+| Tab | Setting | Meaning |
+| --- | --- | --- |
+| Enrollment | Enrollment URL, token | from the factory image or the fleet manager; the token is stored encrypted |
+| | comment | free text shown in the fleet management next to the installation, e.g. `Womo Mercedes KA-1525`; sent on enrollment and with the inventory. It helps to recognize the installation but proves nothing: the identity is the device certificate |
+| Maintenance window | start, end | daily window for updates, may span midnight (e.g. 22:00–05:00) |
+| | conditions | table of `state operator value`, e.g. `victron.0.soc >= 50`, `modem.0.roaming == false`, `presence.0.home == false` |
+| | minimum free space | for download, unpacking and backup |
+| Advanced | heartbeat, check interval, MQTT keepalive | trade-off between reaction time and mobile data |
+| | observation after update, start timeout | verification of a rollout |
+| | backup before every update | only disable for tests |
+| Remote access | allow admin, allow vis-2 | whether the fleet manager may open the interface remotely (both allowed by default) |
+
+## States
+
+| State | Meaning |
+| --- | --- |
+| `info.connection` | connected to the beekeeper broker |
+| `info.status` | readable status, including the reason of a rejection |
+| `info.deviceId`, `info.assetId` | identity assigned by the server |
+| `info.mode`, `info.profile`, `info.onTarget` | managed/self, desired profile, system matches it |
+| `job.state`, `job.detail`, `job.steps` | current or last job |
+| `control.halted` | emergency stop of the fleet is active |
+| `control.refresh`, `control.check` | buttons: send inventory, check desired state now |
+| `info.remoteAccess`, `info.remoteAccessBy` | remote access running now, and by whom with which purpose |
+
+Files in `iobroker-data/bee.0/`: `device.json` (certificate and key, mode 0600), `desired.json`, `job.json`, `runner.json`, `runner.log` (complete CLI output of all jobs), `tunnels.json` (running remote access sessions, resumed after a restart).
+
+## Not in this version
+
+Platform updates of js-controller and Node.js (with a systemd watchdog outside ioBroker), vis-2 project distribution, remote console (PTY), signed artifacts. See the concept of the beekeeper project.
+
+## Development
+
+```bash
+npm install
+npm run build
+npm test          # unit tests of planner, preflight and diff
+```
+
+`src/lib/protocol.ts` and `src/lib/tunnel.ts` are shared with the server and must stay identical to `beekeeper-server/src/protocol.ts` and `beekeeper-server/src/tunnel.ts`.
+
+## Changelog
+
+### 0.2.0 (2026-11-10)
+
+- Remote access to admin and vis-2 through a tunnel to the fleet server, switchable per kind by the owner
+- Versions set per asset by the fleet server, also adapter packages (tgz) loaded from the own server, checked by SHA-256 and installed with `iobroker url`
+
+### 0.1.0 (2026-09-18)
+
+- Initial prototype: enrollment, inventory, desired state via MQTT, adapter rollout with preflight, backup, verification and rollback
+
+## License
+
+Proprietary (UNLICENSED). Copyright (c) 2026 Denis Haev. All rights reserved.

package/admin/bee.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64"><path d="M32 4 56 18v28L32 60 8 46V18z" fill="#e0a100"/><path d="M20 26h24M19 33h26M22 40h20" stroke="#1a1400" stroke-width="4" stroke-linecap="round"/><path d="M26 18c-3-6-9-7-12-4M38 18c3-6 9-7 12-4" stroke="#1a1400" stroke-width="2.5" fill="none" stroke-linecap="round"/></svg>

package/admin/jsonConfig.json

@@ -0,0 +1,307 @@
+{
+    "i18n": false,
+    "type": "tabs",
+    "items": {
+        "connection": {
+            "type": "panel",
+            "label": { "en": "Enrollment", "de": "Anmeldung" },
+            "items": {
+                "hdr1": {
+                    "type": "staticText",
+                    "text": {
+                        "en": "Enrollment URL and one-time token come with the factory image or from the fleet manager. After the first successful contact the device holds its own certificate; the token is used up.",
+                        "de": "Enrollment-URL und Einmal-Token kommen mit dem Werksimage oder vom Flottenverwalter. Nach dem ersten erfolgreichen Kontakt hat das Gerät ein eigenes Zertifikat; das Token ist verbraucht."
+                    },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12
+                },
+                "enrollUrl": {
+                    "type": "text",
+                    "label": { "en": "Enrollment URL", "de": "Enrollment-URL" },
+                    "placeholder": "https://beekeeper.example.com",
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6,
+                    "newLine": true
+                },
+                "enrollToken": {
+                    "type": "password",
+                    "label": { "en": "Enrollment token", "de": "Enrollment-Token" },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6
+                },
+                "comment": {
+                    "type": "text",
+                    "label": { "en": "Comment", "de": "Kommentar" },
+                    "help": {
+                        "en": "Shown in the fleet management next to this installation, e.g. \"Womo Mercedes KA-1525\" (max. 200 characters)",
+                        "de": "Erscheint in der Flottenverwaltung bei dieser Anlage, z. B. \"Womo Mercedes KA-1525\" (höchstens 200 Zeichen)"
+                    },
+                    "maxLength": 200,
+                    "newLine": true,
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12
+                },
+                "_status": {
+                    "type": "state",
+                    "oid": "info.status",
+                    "label": { "en": "Status", "de": "Status" },
+                    "newLine": true,
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12
+                }
+            }
+        },
+        "remote": {
+            "type": "panel",
+            "label": { "en": "Remote access", "de": "Fernzugriff" },
+            "items": {
+                "hdr3": {
+                    "type": "staticText",
+                    "text": {
+                        "en": "Service staff of the fleet management can open admin or vis-2 of this system from afar, without ioBroker.pro and without open ports: on request, this adapter connects to the fleet server for the duration of the access. Every access is logged with person and purpose, and is shown below while it lasts. Changing these settings ends running accesses.",
+                        "de": "Servicepersonal der Flottenverwaltung kann admin oder vis-2 dieses Systems aus der Ferne öffnen, ohne ioBroker.pro und ohne offene Ports: auf Anforderung verbindet sich dieser Adapter für die Dauer des Zugriffs mit dem Flottenserver. Jeder Zugriff wird mit Person und Zweck protokolliert und unten angezeigt, solange er läuft. Eine Änderung dieser Einstellungen beendet laufende Zugriffe."
+                    },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12
+                },
+                "allowAdmin": {
+                    "type": "checkbox",
+                    "label": { "en": "Allow remote access to admin", "de": "Fernzugriff auf admin erlauben" },
+                    "help": {
+                        "en": "admin means full access to the system",
+                        "de": "admin bedeutet vollen Zugriff auf das System"
+                    },
+                    "newLine": true,
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6
+                },
+                "allowVis": {
+                    "type": "checkbox",
+                    "label": { "en": "Allow remote access to vis-2 (web)", "de": "Fernzugriff auf vis-2 (web) erlauben" },
+                    "help": {
+                        "en": "vis-2 shows the values of this system, e.g. consumption",
+                        "de": "vis-2 zeigt die Werte dieses Systems, z. B. Verbräuche"
+                    },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6
+                },
+                "_remoteAccessBy": {
+                    "type": "state",
+                    "oid": "info.remoteAccessBy",
+                    "label": { "en": "Access right now", "de": "Zugriff gerade" },
+                    "newLine": true,
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12
+                }
+            }
+        },
+        "maintenance": {
+            "type": "panel",
+            "label": { "en": "Maintenance window", "de": "Wartungsfenster" },
+            "items": {
+                "hdr2": {
+                    "type": "staticText",
+                    "text": {
+                        "en": "Updates only run inside the maintenance window and when all conditions are met (e.g. installation not in use, battery charged, no roaming, vehicle standing).",
+                        "de": "Updates laufen nur im Wartungsfenster und wenn alle Bedingungen erfüllt sind (z. B. Anlage nicht in Benutzung, Batterie geladen, kein Roaming, Fahrzeug steht)."
+                    },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12
+                },
+                "windowStart": {
+                    "type": "text",
+                    "label": { "en": "Window start (HH:MM)", "de": "Fenster Beginn (HH:MM)" },
+                    "xs": 6,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3,
+                    "newLine": true
+                },
+                "windowEnd": {
+                    "type": "text",
+                    "label": { "en": "Window end (HH:MM)", "de": "Fenster Ende (HH:MM)" },
+                    "xs": 6,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3
+                },
+                "ignoreWindow": {
+                    "type": "checkbox",
+                    "label": { "en": "Ignore window (testing only)", "de": "Fenster ignorieren (nur für Tests)" },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6
+                },
+                "minFreeMb": {
+                    "type": "number",
+                    "min": 100,
+                    "label": { "en": "Minimum free space (MB)", "de": "Mindestens freier Speicher (MB)" },
+                    "xs": 12,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3,
+                    "newLine": true
+                },
+                "conditions": {
+                    "type": "table",
+                    "label": { "en": "Conditions for updates", "de": "Bedingungen für Updates" },
+                    "newLine": true,
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12,
+                    "items": [
+                        {
+                            "type": "text",
+                            "attr": "label",
+                            "title": { "en": "Label", "de": "Bezeichnung" },
+                            "width": "25%"
+                        },
+                        {
+                            "type": "objectId",
+                            "attr": "stateId",
+                            "title": { "en": "State", "de": "Datenpunkt" },
+                            "width": "40%"
+                        },
+                        {
+                            "type": "select",
+                            "attr": "op",
+                            "title": { "en": "Operator", "de": "Vergleich" },
+                            "options": [
+                                { "label": "==", "value": "==" },
+                                { "label": "!=", "value": "!=" },
+                                { "label": ">=", "value": ">=" },
+                                { "label": ">", "value": ">" },
+                                { "label": "<=", "value": "<=" },
+                                { "label": "<", "value": "<" }
+                            ],
+                            "default": "==",
+                            "width": "15%"
+                        },
+                        {
+                            "type": "text",
+                            "attr": "value",
+                            "title": { "en": "Value", "de": "Wert" },
+                            "width": "20%"
+                        }
+                    ]
+                }
+            }
+        },
+        "advanced": {
+            "type": "panel",
+            "label": { "en": "Advanced", "de": "Erweitert" },
+            "items": {
+                "heartbeatMinutes": {
+                    "type": "number",
+                    "min": 5,
+                    "label": { "en": "Heartbeat interval (min)", "de": "Heartbeat-Intervall (min)" },
+                    "xs": 12,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3
+                },
+                "checkMinutes": {
+                    "type": "number",
+                    "min": 1,
+                    "label": { "en": "Check interval (min)", "de": "Prüfintervall (min)" },
+                    "xs": 12,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3
+                },
+                "keepaliveSeconds": {
+                    "type": "number",
+                    "min": 30,
+                    "label": { "en": "MQTT keepalive (s)", "de": "MQTT-Keepalive (s)" },
+                    "help": { "en": "Longer saves mobile data", "de": "Länger spart Mobilfunkvolumen" },
+                    "xs": 12,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3
+                },
+                "signalStateId": {
+                    "type": "objectId",
+                    "label": { "en": "State with signal quality (optional)", "de": "Datenpunkt mit Signalqualität (optional)" },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6,
+                    "newLine": true
+                },
+                "verifySeconds": {
+                    "type": "number",
+                    "min": 10,
+                    "label": { "en": "Observation after update (s)", "de": "Beobachtung nach Update (s)" },
+                    "help": { "en": "No new errors in the log during this time", "de": "In dieser Zeit keine neuen Fehler im Log" },
+                    "xs": 12,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3,
+                    "newLine": true
+                },
+                "startTimeoutSeconds": {
+                    "type": "number",
+                    "min": 30,
+                    "label": { "en": "Start timeout of instances (s)", "de": "Startfrist der Instanzen (s)" },
+                    "xs": 12,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3
+                },
+                "backupBeforeUpdate": {
+                    "type": "checkbox",
+                    "label": { "en": "Backup before every update", "de": "Sicherung vor jedem Update" },
+                    "help": { "en": "Disable for tests only", "de": "Nur für Tests abschalten" },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6
+                }
+            }
+        }
+    }
+}

package/build/lib/enrollment.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.enroll = enroll;
+async function enroll(url, req) {
+    let res;
+    try {
+        res = await fetch(`${url.replace(/\/+$/, '')}/api/enroll`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(req),
+            signal: AbortSignal.timeout(30_000),
+        });
+    }
+    catch (e) {
+        return { kind: 'retry', reason: e.cause?.message || e.message };
+    }
+    let body = null;
+    try {
+        body = await res.json();
+    }
+    catch {
+        // ignore, handled by status
+    }
+    if (res.ok) {
+        const creds = body;
+        if (!creds?.deviceId || !creds.cert || !creds.key || !creds.ca || !creds.mqttUrl) {
+            return { kind: 'retry', reason: 'Unvollständige Antwort des Servers' };
+        }
+        return { kind: 'ok', creds };
+    }
+    const reason = body?.reason || `HTTP ${res.status}`;
+    if (res.status === 403 || res.status === 400) {
+        return { kind: 'rejected', reason };
+    }
+    return { kind: 'retry', reason };
+}
+//# sourceMappingURL=enrollment.js.map

package/build/lib/enrollment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrollment.js","sourceRoot":"","sources":["../../src/lib/enrollment.ts"],"names":[],"mappings":";;AAYA,wBA8BC;AA9BM,KAAK,UAAU,MAAM,CAAC,GAAW,EAAE,GAAkB;IACxD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACD,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;YACzB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACtC,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,IAAI,CAAC;QACD,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACL,4BAA4B;IAChC,CAAC;IACD,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,IAAsB,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC/E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;QAC3E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,MAAM,GAAI,IAA2B,EAAE,MAAM,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;IAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC"}

package/build/lib/inventory.js

@@ -0,0 +1,136 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sdWrites = sdWrites;
+exports.diskInfo = diskInfo;
+exports.cpuTemperature = cpuTemperature;
+exports.collectInventory = collectInventory;
+exports.installedVersions = installedVersions;
+const node_child_process_1 = require("node:child_process");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = __importDefault(require("node:os"));
+/**
+ * Collects the inventory of this ioBroker system. Versions and system data only;
+ * no measured values of the end customer (data minimization).
+ */
+async function readText(path) {
+    try {
+        return (await (0, promises_1.readFile)(path, 'utf8')).trim();
+    }
+    catch {
+        return null;
+    }
+}
+async function osName() {
+    const release = await readText('/etc/os-release');
+    const m = release && /^PRETTY_NAME="?([^"\n]+)"?/m.exec(release);
+    return m ? m[1] : `${node_os_1.default.type()} ${node_os_1.default.version?.() || node_os_1.default.release()}`;
+}
+let npmVersion = null;
+async function npmVer() {
+    if (npmVersion === null) {
+        npmVersion = await new Promise(resolve => {
+            (0, node_child_process_1.execFile)(node_os_1.default.platform() === 'win32' ? 'npm.cmd' : 'npm', ['-v'], { timeout: 20_000, shell: node_os_1.default.platform() === 'win32' }, (err, stdout) => resolve(err ? '' : stdout.trim()));
+        });
+    }
+    return npmVersion || '';
+}
+/** Sectors written to the SD card since boot (field 7 of /sys/block/mmcblk0/stat) */
+async function sdWrites() {
+    const stat = await readText('/sys/block/mmcblk0/stat');
+    if (!stat) {
+        return null;
+    }
+    const fields = stat.split(/\s+/);
+    return fields.length > 6 ? parseInt(fields[6], 10) : null;
+}
+async function diskInfo(path) {
+    try {
+        const s = await (0, promises_1.statfs)(path);
+        return { total: s.blocks * s.bsize, free: s.bavail * s.bsize };
+    }
+    catch {
+        return null;
+    }
+}
+async function cpuTemperature() {
+    const t = await readText('/sys/class/thermal/thermal_zone0/temp');
+    return t ? Math.round(parseInt(t, 10) / 100) / 10 : null;
+}
+/** backitup targets that store the backup outside the device */
+const OFF_DEVICE_KEYS = [
+    'cifsEnabled',
+    'ftpEnabled',
+    'dropboxEnabled',
+    'googledriveEnabled',
+    'onedriveEnabled',
+    'webdavEnabled',
+    'sftpEnabled',
+];
+async function collectInventory(adapter, opts) {
+    const adapterRows = await adapter.getObjectViewAsync('system', 'adapter', {
+        startkey: 'system.adapter.',
+        endkey: 'system.adapter.香',
+    });
+    const adapters = {};
+    for (const row of adapterRows.rows) {
+        const common = row.value?.common;
+        if (common?.name && common.version) {
+            adapters[common.name] = {
+                version: common.version,
+                ...(common.installedFrom ? { installedFrom: common.installedFrom } : {}),
+            };
+        }
+    }
+    const instanceRows = await adapter.getObjectViewAsync('system', 'instance', {
+        startkey: 'system.adapter.',
+        endkey: 'system.adapter.香',
+    });
+    const instances = {};
+    let offDevice = false;
+    for (const row of instanceRows.rows) {
+        const obj = row.value;
+        if (!obj || obj.common.host !== adapter.host) {
+            continue;
+        }
+        const id = obj._id.replace(/^system\.adapter\./, '');
+        const alive = await adapter.getForeignStateAsync(`${obj._id}.alive`);
+        instances[id] = { enabled: !!obj.common.enabled, alive: !!alive?.val, mode: obj.common.mode };
+        if (obj.common.name === 'backitup' && obj.common.enabled) {
+            const native = obj.native;
+            offDevice ||= OFF_DEVICE_KEYS.some(k => native[k] === true);
+        }
+    }
+    const hostObj = await adapter.getForeignObjectAsync(`system.host.${adapter.host}`);
+    const disk = await diskInfo(opts.dataDir);
+    const model = (await readText('/proc/device-tree/model'))?.replace(/\0/g, '') || node_os_1.default.cpus()[0]?.model || '';
+    return {
+        agentVersion: opts.agentVersion,
+        uuid: '',
+        hostname: adapter.host || node_os_1.default.hostname(),
+        software: {
+            jsController: hostObj?.common?.installedVersion || '',
+            node: process.version,
+            npm: await npmVer(),
+            adapters,
+            instances,
+        },
+        system: {
+            platform: node_os_1.default.platform(),
+            arch: node_os_1.default.arch(),
+            os: await osName(),
+            kernel: node_os_1.default.release(),
+            model,
+            memTotal: node_os_1.default.totalmem(),
+            diskTotal: disk?.total ?? 0,
+        },
+        backup: { lastLocal: opts.lastBackup ?? null, offDevice },
+    };
+}
+/** Installed adapter versions (name -> version) */
+function installedVersions(inv) {
+    return Object.fromEntries(Object.entries(inv.software.adapters).map(([n, a]) => [n, a.version]));
+}
+//# sourceMappingURL=inventory.js.map

package/build/lib/inventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory.js","sourceRoot":"","sources":["../../src/lib/inventory.ts"],"names":[],"mappings":";;;;;AAwCA,4BAOC;AAED,4BAOC;AAED,wCAGC;AAaD,4CAiEC;AAGD,8CAEC;AAhJD,2DAA8C;AAC9C,+CAAoD;AACpD,sDAAyB;AAGzB;;;GAGG;AAEH,KAAK,UAAU,QAAQ,CAAC,IAAY;IAChC,IAAI,CAAC;QACD,OAAO,CAAC,MAAM,IAAA,mBAAQ,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM;IACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,OAAO,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAE,CAAC,IAAI,EAAE,IAAI,iBAAE,CAAC,OAAO,EAAE,EAAE,IAAI,iBAAE,CAAC,OAAO,EAAE,EAAE,CAAC;AACvE,CAAC;AAED,IAAI,UAAU,GAAkB,IAAI,CAAC;AACrC,KAAK,UAAU,MAAM;IACjB,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACtB,UAAU,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;YACrC,IAAA,6BAAQ,EACJ,iBAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAC7C,CAAC,IAAI,CAAC,EACN,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,EACrD,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CACrD,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,UAAU,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,qFAAqF;AAC9E,KAAK,UAAU,QAAQ;IAC1B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,yBAAyB,CAAC,CAAC;IACvD,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAEM,KAAK,UAAU,QAAQ,CAAC,IAAY;IACvC,IAAI,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,IAAA,iBAAM,EAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,cAAc;IAChC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,uCAAuC,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,gEAAgE;AAChE,MAAM,eAAe,GAAG;IACpB,aAAa;IACb,YAAY;IACZ,gBAAgB;IAChB,oBAAoB;IACpB,iBAAiB;IACjB,eAAe;IACf,aAAa;CAChB,CAAC;AAEK,KAAK,UAAU,gBAAgB,CAClC,OAAyB,EACzB,IAA6F;IAE7F,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,SAAS,EAAE;QACtE,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kBAAkB;KAC7B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAqC,EAAE,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;QACjC,IAAI,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;gBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3E,CAAC;QACN,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,UAAU,EAAE;QACxE,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,kBAAkB;KAC7B,CAAC,CAAC;IACH,MAAM,SAAS,GAAsC,EAAE,CAAC;IACxD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,GAAG,CAAC,KAA4C,CAAC;QAC7D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;YAC3C,SAAS;QACb,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QACrE,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9F,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAiC,CAAC;YACrD,SAAS,KAAK,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAChE,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,eAAe,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,yBAAyB,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,iBAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;IAE3G,OAAO;QACH,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,IAAI,EAAE,EAAE;QACR,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,iBAAE,CAAC,QAAQ,EAAE;QACvC,QAAQ,EAAE;YACN,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,IAAI,EAAE;YACrD,IAAI,EAAE,OAAO,CAAC,OAAO;YACrB,GAAG,EAAE,MAAM,MAAM,EAAE;YACnB,QAAQ;YACR,SAAS;SACZ;QACD,MAAM,EAAE;YACJ,QAAQ,EAAE,iBAAE,CAAC,QAAQ,EAAE;YACvB,IAAI,EAAE,iBAAE,CAAC,IAAI,EAAE;YACf,EAAE,EAAE,MAAM,MAAM,EAAE;YAClB,MAAM,EAAE,iBAAE,CAAC,OAAO,EAAE;YACpB,KAAK;YACL,QAAQ,EAAE,iBAAE,CAAC,QAAQ,EAAE;YACvB,SAAS,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC;SAC9B;QACD,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,SAAS,EAAE;KAC5D,CAAC;AACN,CAAC;AAED,mDAAmD;AACnD,SAAgB,iBAAiB,CAAC,GAAc;IAC5C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACrG,CAAC"}