iobroker.bee 0.0.0-stage → 0.2.2

package/README.md

@@ -1,3 +1,112 @@
-# Temporary Holding Version
+![Logo](admin/bee.svg)
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# ioBroker.bee
+
+Fleet agent for ioBroker. It connects a delivered ioBroker system (in a house, a radio station in the mountains, a vehicle, a machine in the field, …) to a **beekeeper** fleet server: it reports the inventory, receives the desired version profile and converges the system to it, locally and at the right time.
+
+> Prototype. The server (beekeeper) is a separate, closed product. This adapter only reports, reads, executes and verifies; it holds no secrets besides its own device certificate.
+
+## How it works
+
+1. **Enrollment.** The factory image contains the enrollment URL and a one-time token bound to the asset (the managed installation). On first start the agent sends the token and the system UUID and receives its own device certificate. The token is used up.
+2. **Control channel.** MQTT over TLS with the device certificate, to the platform's own broker. The broker certificate may come from the platform CA (handed out at enrollment) or from a public CA such as Let's Encrypt; for the latter the agent uses the public root certificates shipped with Node.js. Heartbeat and Last Will report online status, the inventory is sent completely on connect and as a diff afterwards, all payloads gzip-compressed. Keepalive and heartbeat are configurable to keep mobile data low.
+3. **Desired state instead of commands.** The server publishes the desired profile as a retained message. A system that was offline for months reads the current profile, not a backlog of orders.
+4. **Reconciliation.** The agent compares the profile with the installed versions and plans install, upgrade, downgrade (and removal only when the server asks for it on return to managed mode). It never touches adapters that are not in the profile.
+5. **Preflight.** Emergency stop, dependencies of the target versions (`io-package.json` of the target version, `engines.node`), free space, maintenance window and configurable conditions on ioBroker states (installation not in use, battery charged, no roaming, vehicle standing, …). Conditions that change by themselves mean *waiting*, everything that needs a human means *blocked*.
+6. **Execution.** A detached runner process performs backup (`iobroker backup`) and the steps (`iobroker add/upgrade/del`) one by one. It survives restarts of the adapter, including the update of the agent itself, which always comes last.
+7. **Verification.** Versions must match, all enabled daemon instances of the changed adapters must be alive, and no new errors may appear in their log during the observation time. Otherwise the agent rolls back the changed adapters to their previous versions and reports *blocked*. A blocked job is not repeated until the fleet manager releases a new attempt.
+
+### Behaviour without server
+
+- **Unknown means self-stop.** If the server explicitly rejects the device (unknown token, revoked certificate), the agent writes the reason to `bee.0.info.status`, raises a notification and terminates. It does not keep knocking.
+- **Network errors are no reason to stop.** Without connection the distance between attempts grows up to a daily rhythm. Jobs that were started continue and report later.
+
+### Managed and self-managed
+
+If the owner installs adapters that are not part of the profile, the agent reports them, stops automatic updates and informs the owner via an ioBroker notification. The fleet manager sees the installation in the deviation list and can bring it back to managed mode (removing the own adapters or tolerating them as exceptions).
+
+### Remote access to admin, vis-2 and the console
+
+A technician of the fleet manager can open admin or vis-2 of the system from the fleet management, without ioBroker.pro and without open ports on the device:
+
+1. The server sends the job `tunnel` over MQTT with a one-time ticket, the kind (admin or vis-2), the technician, the purpose and the end of the session (at most 4 hours).
+2. The agent checks that the tunnel URL belongs to its own server (same host as enrollment or broker, `wss://` only) and opens an outgoing WebSocket to it.
+3. The server carries the connections of the technician's browser through this WebSocket. The agent connects them to an enabled admin instance (or web instance for vis-2, only with vis-2 installed) on this host and nowhere else. It reports these instances with port, HTTPS and login mode in the inventory; with several, the technician chooses one, and the agent accepts only one from its own list.
+
+The owner can switch off each kind in the tab *Remote access*; the agent then refuses the session and the fleet management shows why. Running sessions are visible in `info.remoteAccess`. After a connection loss the agent reconnects until the session expires, also across restarts of the adapter. The server ends the session early when the technician ends it or the device is revoked.
+
+**Console.** Off until the owner allows it (*Allow the console*), and only on Linux with `script` of util-linux (part of every Debian). Then every terminal the technician opens in the browser is a login shell on this system, as the user ioBroker runs as (usually `iobroker`), started in the ioBroker directory. No native module: `script` gives the shell a pseudo terminal, `stty` sets the size of its window. At most 4 shells per session; when the session or the connection ends, the shells get SIGHUP. `info.remoteAccessBy` shows how many shells are open. Whatever the shell may do beyond the rights of that user belongs in a sudo allow list for single commands, not in a general sudo. Note that the list the ioBroker installer writes (`/etc/sudoers.d/iobroker`) contains `apt`, `apt-get` and `dpkg` without password, which makes the console effectively root on a standard installation. Systems installed with `--hardened` have no sudo; there the OS updates below do not work either.
+
+### Commands from the fleet management
+
+From the asset detail a technician (permission `operate`) can start, stop and restart instances on this host, restart ioBroker, and install updates of operating system packages. The agent answers on the topic `reply`; the fleet management logs who did what.
+
+- Instances: the same way admin does it, through the instance object (`common.enabled`, or rewriting it for a restart). Only instances of this host; `bee` itself can be restarted but not stopped from afar.
+- Restart of ioBroker: host command `restartController` of js-controller.
+- OS updates: js-controller (6 and newer, Linux) lists upgradeable packages (`apt list --upgradeable`) on every update of the repository, admin triggers that daily, and writes them to `system.host.<host>.osPackageUpdates`. The agent reports this list in the inventory, together with `/var/run/reboot-required`, and on request passes the chosen packages to the host command `upgradeOsPackages`, which runs apt (with sudo if ioBroker does not run as root). Packages that js-controller did not list are refused.
+- Nothing of this while a job (update) is running, and one command at a time.
+
+## Configuration
+
+| Tab | Setting | Meaning |
+| --- | --- | --- |
+| Enrollment | Enrollment URL, token | from the factory image or the fleet manager; the URL is preset to `https://bee.iobroker.click`, the token is stored encrypted |
+| | comment | free text shown in the fleet management next to the installation, e.g. `Womo Mercedes KA-1525`; sent on enrollment and with the inventory. It helps to recognize the installation but proves nothing: the identity is the device certificate |
+| Maintenance window | start, end | daily window for updates, may span midnight (e.g. 22:00–05:00) |
+| | conditions | table of `state operator value`, e.g. `victron.0.soc >= 50`, `modem.0.roaming == false`, `presence.0.home == false` |
+| | minimum free space | for download, unpacking and backup |
+| Advanced | heartbeat, check interval, MQTT keepalive | trade-off between reaction time and mobile data |
+| | observation after update, start timeout | verification of a rollout |
+| | backup before every update | only disable for tests |
+| Remote access | allow admin, allow vis-2 | whether the fleet manager may open the interface remotely (both allowed by default) |
+| | allow the console | a shell on this system for the fleet manager (off by default, Linux only) |
+
+## States
+
+| State | Meaning |
+| --- | --- |
+| `info.connection` | connected to the beekeeper broker |
+| `info.status` | readable status, including the reason of a rejection |
+| `info.deviceId`, `info.assetId` | identity assigned by the server |
+| `info.mode`, `info.profile`, `info.onTarget` | managed/self, desired profile, system matches it |
+| `job.state`, `job.detail`, `job.steps` | current or last job |
+| `control.halted` | emergency stop of the fleet is active |
+| `control.refresh`, `control.check` | buttons: send inventory, check desired state now |
+| `info.remoteAccess`, `info.remoteAccessBy` | remote access running now, and by whom with which purpose |
+
+Files in `iobroker-data/bee.0/`: `device.json` (certificate and key, mode 0600), `desired.json`, `job.json`, `runner.json`, `runner.log` (complete CLI output of all jobs), `tunnels.json` (running remote access sessions, resumed after a restart).
+
+## Not in this version
+
+Platform updates of js-controller and Node.js (with a systemd watchdog outside ioBroker), vis-2 project distribution, recording of console sessions, signed artifacts. See the concept of the beekeeper project.
+
+## Development
+
+```bash
+npm install
+npm run build
+npm test          # unit tests of planner, preflight and diff
+```
+
+`src/lib/protocol.ts` and `src/lib/tunnel.ts` are shared with the server and must stay identical to `beekeeper-server/src/protocol.ts` and `beekeeper-server/src/tunnel.ts`.
+
+## Changelog
+
+### 0.2.2 (2026-11-10)
+
+- Console: a shell on this system for the fleet management, in the browser of the technician; off unless the owner allows it, Linux with `script` (util-linux) only
+- Enrollment URL preset to `https://bee.iobroker.click` (new instances)
+- Commands from the fleet management: start, stop and restart instances, restart ioBroker, install OS updates listed by js-controller (6 and newer)
+
+### 0.2.0 (2026-11-10)
+
+- Remote access to admin and vis-2 through a tunnel to the fleet server, switchable per kind by the owner
+- Versions set per asset by the fleet server, also adapter packages (tgz) loaded from the own server, checked by SHA-256 and installed with `iobroker url`
+
+### 0.1.0 (2026-09-18)
+
+- Initial prototype: enrollment, inventory, desired state via MQTT, adapter rollout with preflight, backup, verification and rollback
+
+## License
+
+Proprietary (UNLICENSED). Copyright (c) 2026 Denis Haev. All rights reserved.

package/admin/bee.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64"><path d="M32 4 56 18v28L32 60 8 46V18z" fill="#e0a100"/><path d="M20 26h24M19 33h26M22 40h20" stroke="#1a1400" stroke-width="4" stroke-linecap="round"/><path d="M26 18c-3-6-9-7-12-4M38 18c3-6 9-7 12-4" stroke="#1a1400" stroke-width="2.5" fill="none" stroke-linecap="round"/></svg>

package/admin/jsonConfig.json

@@ -0,0 +1,321 @@
+{
+    "i18n": false,
+    "type": "tabs",
+    "items": {
+        "connection": {
+            "type": "panel",
+            "label": { "en": "Enrollment", "de": "Anmeldung" },
+            "items": {
+                "hdr1": {
+                    "type": "staticText",
+                    "text": {
+                        "en": "Enrollment URL and one-time token come with the factory image or from the fleet manager. After the first successful contact the device holds its own certificate; the token is used up.",
+                        "de": "Enrollment-URL und Einmal-Token kommen mit dem Werksimage oder vom Flottenverwalter. Nach dem ersten erfolgreichen Kontakt hat das Gerät ein eigenes Zertifikat; das Token ist verbraucht."
+                    },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12
+                },
+                "enrollUrl": {
+                    "type": "text",
+                    "label": { "en": "Enrollment URL", "de": "Enrollment-URL" },
+                    "placeholder": "https://bee.iobroker.click",
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6,
+                    "newLine": true
+                },
+                "enrollToken": {
+                    "type": "password",
+                    "label": { "en": "Enrollment token", "de": "Enrollment-Token" },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6
+                },
+                "comment": {
+                    "type": "text",
+                    "label": { "en": "Comment", "de": "Kommentar" },
+                    "help": {
+                        "en": "Shown in the fleet management next to this installation, e.g. \"Womo Mercedes KA-1525\" (max. 200 characters)",
+                        "de": "Erscheint in der Flottenverwaltung bei dieser Anlage, z. B. \"Womo Mercedes KA-1525\" (höchstens 200 Zeichen)"
+                    },
+                    "maxLength": 200,
+                    "newLine": true,
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12
+                },
+                "_status": {
+                    "type": "state",
+                    "oid": "info.status",
+                    "label": { "en": "Status", "de": "Status" },
+                    "newLine": true,
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12
+                }
+            }
+        },
+        "remote": {
+            "type": "panel",
+            "label": { "en": "Remote access", "de": "Fernzugriff" },
+            "items": {
+                "hdr3": {
+                    "type": "staticText",
+                    "text": {
+                        "en": "Service staff of the fleet management can open admin or vis-2 of this system from afar, without ioBroker.pro and without open ports: on request, this adapter connects to the fleet server for the duration of the access. Every access is logged with person and purpose, and is shown below while it lasts. Changing these settings ends running accesses. The console is off until you allow it here.",
+                        "de": "Servicepersonal der Flottenverwaltung kann admin oder vis-2 dieses Systems aus der Ferne öffnen, ohne ioBroker.pro und ohne offene Ports: auf Anforderung verbindet sich dieser Adapter für die Dauer des Zugriffs mit dem Flottenserver. Jeder Zugriff wird mit Person und Zweck protokolliert und unten angezeigt, solange er läuft. Eine Änderung dieser Einstellungen beendet laufende Zugriffe. Die Konsole ist aus, bis Sie sie hier erlauben."
+                    },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12
+                },
+                "allowAdmin": {
+                    "type": "checkbox",
+                    "label": { "en": "Allow remote access to admin", "de": "Fernzugriff auf admin erlauben" },
+                    "help": {
+                        "en": "admin means full access to the system",
+                        "de": "admin bedeutet vollen Zugriff auf das System"
+                    },
+                    "newLine": true,
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6
+                },
+                "allowVis": {
+                    "type": "checkbox",
+                    "label": { "en": "Allow remote access to vis-2 (web)", "de": "Fernzugriff auf vis-2 (web) erlauben" },
+                    "help": {
+                        "en": "vis-2 shows the values of this system, e.g. consumption",
+                        "de": "vis-2 zeigt die Werte dieses Systems, z. B. Verbräuche"
+                    },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6
+                },
+                "allowConsole": {
+                    "type": "checkbox",
+                    "label": { "en": "Allow the console (a shell on this system)", "de": "Konsole erlauben (Shell auf diesem System)" },
+                    "help": {
+                        "en": "Only Linux. The shell runs as the user of ioBroker: full access to ioBroker, its data and, depending on the setup, to the system",
+                        "de": "Nur Linux. Die Shell läuft als Nutzer von ioBroker: voller Zugriff auf ioBroker, seine Daten und, je nach Einrichtung, auf das System"
+                    },
+                    "newLine": true,
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6
+                },
+                "_remoteAccessBy": {
+                    "type": "state",
+                    "oid": "info.remoteAccessBy",
+                    "label": { "en": "Access right now", "de": "Zugriff gerade" },
+                    "newLine": true,
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12
+                }
+            }
+        },
+        "maintenance": {
+            "type": "panel",
+            "label": { "en": "Maintenance window", "de": "Wartungsfenster" },
+            "items": {
+                "hdr2": {
+                    "type": "staticText",
+                    "text": {
+                        "en": "Updates only run inside the maintenance window and when all conditions are met (e.g. installation not in use, battery charged, no roaming, vehicle standing).",
+                        "de": "Updates laufen nur im Wartungsfenster und wenn alle Bedingungen erfüllt sind (z. B. Anlage nicht in Benutzung, Batterie geladen, kein Roaming, Fahrzeug steht)."
+                    },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12
+                },
+                "windowStart": {
+                    "type": "text",
+                    "label": { "en": "Window start (HH:MM)", "de": "Fenster Beginn (HH:MM)" },
+                    "xs": 6,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3,
+                    "newLine": true
+                },
+                "windowEnd": {
+                    "type": "text",
+                    "label": { "en": "Window end (HH:MM)", "de": "Fenster Ende (HH:MM)" },
+                    "xs": 6,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3
+                },
+                "ignoreWindow": {
+                    "type": "checkbox",
+                    "label": { "en": "Ignore window (testing only)", "de": "Fenster ignorieren (nur für Tests)" },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6
+                },
+                "minFreeMb": {
+                    "type": "number",
+                    "min": 100,
+                    "label": { "en": "Minimum free space (MB)", "de": "Mindestens freier Speicher (MB)" },
+                    "xs": 12,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3,
+                    "newLine": true
+                },
+                "conditions": {
+                    "type": "table",
+                    "label": { "en": "Conditions for updates", "de": "Bedingungen für Updates" },
+                    "newLine": true,
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 12,
+                    "lg": 12,
+                    "xl": 12,
+                    "items": [
+                        {
+                            "type": "text",
+                            "attr": "label",
+                            "title": { "en": "Label", "de": "Bezeichnung" },
+                            "width": "25%"
+                        },
+                        {
+                            "type": "objectId",
+                            "attr": "stateId",
+                            "title": { "en": "State", "de": "Datenpunkt" },
+                            "width": "40%"
+                        },
+                        {
+                            "type": "select",
+                            "attr": "op",
+                            "title": { "en": "Operator", "de": "Vergleich" },
+                            "options": [
+                                { "label": "==", "value": "==" },
+                                { "label": "!=", "value": "!=" },
+                                { "label": ">=", "value": ">=" },
+                                { "label": ">", "value": ">" },
+                                { "label": "<=", "value": "<=" },
+                                { "label": "<", "value": "<" }
+                            ],
+                            "default": "==",
+                            "width": "15%"
+                        },
+                        {
+                            "type": "text",
+                            "attr": "value",
+                            "title": { "en": "Value", "de": "Wert" },
+                            "width": "20%"
+                        }
+                    ]
+                }
+            }
+        },
+        "advanced": {
+            "type": "panel",
+            "label": { "en": "Advanced", "de": "Erweitert" },
+            "items": {
+                "heartbeatMinutes": {
+                    "type": "number",
+                    "min": 5,
+                    "label": { "en": "Heartbeat interval (min)", "de": "Heartbeat-Intervall (min)" },
+                    "xs": 12,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3
+                },
+                "checkMinutes": {
+                    "type": "number",
+                    "min": 1,
+                    "label": { "en": "Check interval (min)", "de": "Prüfintervall (min)" },
+                    "xs": 12,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3
+                },
+                "keepaliveSeconds": {
+                    "type": "number",
+                    "min": 30,
+                    "label": { "en": "MQTT keepalive (s)", "de": "MQTT-Keepalive (s)" },
+                    "help": { "en": "Longer saves mobile data", "de": "Länger spart Mobilfunkvolumen" },
+                    "xs": 12,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3
+                },
+                "signalStateId": {
+                    "type": "objectId",
+                    "label": { "en": "State with signal quality (optional)", "de": "Datenpunkt mit Signalqualität (optional)" },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6,
+                    "newLine": true
+                },
+                "verifySeconds": {
+                    "type": "number",
+                    "min": 10,
+                    "label": { "en": "Observation after update (s)", "de": "Beobachtung nach Update (s)" },
+                    "help": { "en": "No new errors in the log during this time", "de": "In dieser Zeit keine neuen Fehler im Log" },
+                    "xs": 12,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3,
+                    "newLine": true
+                },
+                "startTimeoutSeconds": {
+                    "type": "number",
+                    "min": 30,
+                    "label": { "en": "Start timeout of instances (s)", "de": "Startfrist der Instanzen (s)" },
+                    "xs": 12,
+                    "sm": 6,
+                    "md": 3,
+                    "lg": 3,
+                    "xl": 3
+                },
+                "backupBeforeUpdate": {
+                    "type": "checkbox",
+                    "label": { "en": "Backup before every update", "de": "Sicherung vor jedem Update" },
+                    "help": { "en": "Disable for tests only", "de": "Nur für Tests abschalten" },
+                    "xs": 12,
+                    "sm": 12,
+                    "md": 6,
+                    "lg": 6,
+                    "xl": 6
+                }
+            }
+        }
+    }
+}

package/build/lib/commands.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ACTION_DONE = exports.REBOOT_REQUIRED = void 0;
+exports.supportedCommands = supportedCommands;
+exports.osUpdatesFrom = osUpdatesFrom;
+exports.instanceRefusal = instanceRefusal;
+exports.chooseOsPackages = chooseOsPackages;
+const protocol_1 = require("./protocol");
+const util_1 = require("./util");
+/**
+ * Commands of the fleet management to this system: start, stop or restart an instance (as admin does it,
+ * through the instance object), restart ioBroker, upgrade packages of the operating system. The last two
+ * are done by js-controller (host commands restartController and upgradeOsPackages); the agent only passes
+ * them on, and only packages js-controller listed itself as upgradeable.
+ */
+/** Exists on Debian and Ubuntu when an update asks for a reboot of the system */
+exports.REBOOT_REQUIRED = '/var/run/reboot-required';
+/** What this system can do: OS updates need Linux and js-controller 6 (it lists them and runs apt) */
+function supportedCommands(jsController, platform = process.platform) {
+    const commands = ['instance', 'restart'];
+    if (platform === 'linux' && jsController && (0, util_1.compareVersions)(jsController, '6.0.0') >= 0) {
+        commands.push('osUpgrade');
+    }
+    return commands;
+}
+/**
+ * OS updates from the state system.host.<host>.osPackageUpdates, which js-controller writes on every update
+ * of the repository: a JSON list of lines of `apt list --upgradeable`. Undefined if there is no such state.
+ *
+ * @param state the state of js-controller
+ * @param rebootRequired whether the system asks for a reboot
+ */
+function osUpdatesFrom(state, rebootRequired) {
+    if (!state || typeof state.val !== 'string') {
+        return undefined;
+    }
+    let lines;
+    try {
+        lines = JSON.parse(state.val);
+    }
+    catch {
+        return undefined;
+    }
+    if (!Array.isArray(lines)) {
+        return undefined;
+    }
+    const packages = lines
+        .filter((l) => typeof l === 'string')
+        .map(protocol_1.parseOsPackage)
+        .filter((p) => !!p);
+    return { packages, checkedAt: state.ts || null, rebootRequired };
+}
+/**
+ * Why a command for an instance is not carried out, or null.
+ *
+ * @param id instance, e.g. "javascript.0"
+ * @param action start, stop or restart
+ * @param own the instance of the agent itself (bee.0)
+ * @param obj the object system.adapter.<id>
+ * @param host the host of the agent
+ */
+function instanceRefusal(id, action, own, obj, host) {
+    if (typeof id !== 'string' || !protocol_1.INSTANCE_ID.test(id)) {
+        return `Ungültige Instanz ${String(id)}`;
+    }
+    if (action !== 'start' && action !== 'stop' && action !== 'restart') {
+        return `Unbekannte Aktion ${String(action)}`;
+    }
+    if (!obj || obj.type !== 'instance') {
+        return `Instanz ${id} gibt es auf dem Gerät nicht`;
+    }
+    if (obj.common.host !== host) {
+        return `Instanz ${id} gehört zum Host ${obj.common.host}, nicht zu ${host}`;
+    }
+    if (id === own && action === 'stop') {
+        return 'bee stoppen trennt die Anlage von der Flottenverwaltung; das geht nur am Gerät';
+    }
+    if (action === 'restart' && !obj.common.enabled) {
+        return `Instanz ${id} ist ausgeschaltet; starten statt neu starten`;
+    }
+    return null;
+}
+exports.ACTION_DONE = {
+    start: 'gestartet',
+    stop: 'gestoppt',
+    restart: 'neu gestartet',
+};
+/** The packages of a request that js-controller listed, or the names it did not list */
+function chooseOsPackages(listed, wanted) {
+    const names = Array.isArray(wanted) ? wanted.filter((n) => typeof n === 'string') : [];
+    return {
+        packages: listed.filter(p => names.includes(p.name)),
+        unknown: names.filter(n => !listed.some(p => p.name === n)),
+    };
+}
+//# sourceMappingURL=commands.js.map

package/build/lib/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/lib/commands.ts"],"names":[],"mappings":";;;AAqBA,8CAMC;AASD,sCAqBC;AAWD,0CA0BC;AASD,4CAMC;AA7GD,yCAOoB;AACpB,iCAAyC;AAEzC;;;;;GAKG;AAEH,iFAAiF;AACpE,QAAA,eAAe,GAAG,0BAA0B,CAAC;AAE1D,sGAAsG;AACtG,SAAgB,iBAAiB,CAAC,YAAoB,EAAE,WAAmB,OAAO,CAAC,QAAQ;IACvF,MAAM,QAAQ,GAAmB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACzD,IAAI,QAAQ,KAAK,OAAO,IAAI,YAAY,IAAI,IAAA,sBAAe,EAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACtF,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,aAAa,CACzB,KAAwC,EACxC,cAAuB;IAEvB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK;SACjB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;SACjD,GAAG,CAAC,yBAAc,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,EAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,eAAe,CAC3B,EAAW,EACX,MAAe,EACf,GAAW,EACX,GAAuC,EACvC,IAAY;IAEZ,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,sBAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAClD,OAAO,qBAAqB,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAClE,OAAO,qBAAqB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,WAAW,EAAE,8BAA8B,CAAC;IACvD,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,WAAW,EAAE,oBAAoB,GAAG,CAAC,MAAM,CAAC,IAAI,cAAc,IAAI,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,EAAE,KAAK,GAAG,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO,gFAAgF,CAAC;IAC5F,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9C,OAAO,WAAW,EAAE,+CAA+C,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAEY,QAAA,WAAW,GAAmC;IACvD,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,eAAe;CAC3B,CAAC;AAEF,wFAAwF;AACxF,SAAgB,gBAAgB,CAAC,MAAmB,EAAE,MAAe;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpG,OAAO;QACH,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpD,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;KAC9D,CAAC;AACN,CAAC"}