npm - smart-home-engine - Versions diffs - 1.16.1 → 1.17.1 - Mend

smart-home-engine 1.16.1 → 1.17.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (7) hide show

package/dist/web/assets/{index-B3w0pv6a.css → index-BvKmwc2a.css} +1 -1
package/dist/web/assets/index-CvkGKRP_.js +234 -0
package/dist/web/assets/{tsMode-DuWnr8LR.js → tsMode-CUj-T2Hb.js} +1 -1
package/dist/web/index.html +2 -2
package/package.json +1 -1
package/src/web/broker-api.js +144 -0
package/dist/web/assets/index-BIE09pOh.js +0 -232

package/dist/web/assets/{tsMode-DuWnr8LR.js → tsMode-CUj-T2Hb.js} RENAMED Viewed

@@ -1,4 +1,4 @@
-import{m as O}from"./monaco-langs-Dt8a9eeo.js";import{t as I}from"./index-BIE09pOh.js";/*!-----------------------------------------------------------------------------
+import{m as O}from"./monaco-langs-Dt8a9eeo.js";import{t as I}from"./index-CvkGKRP_.js";/*!-----------------------------------------------------------------------------
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Version: 0.52.2(404545bded1df6ffa41ea0af4e8ddb219018c6c1)
  * Released under the MIT license

package/dist/web/index.html CHANGED Viewed

@@ -172,10 +172,10 @@
                 }
             })();
         </script>
-      <script type="module" crossorigin src="/assets/index-BIE09pOh.js"></script>
+      <script type="module" crossorigin src="/assets/index-CvkGKRP_.js"></script>
       <link rel="modulepreload" crossorigin href="/assets/monaco-langs-Dt8a9eeo.js">
       <link rel="stylesheet" crossorigin href="/assets/monaco-langs-DyX1CsEw.css">
-      <link rel="stylesheet" crossorigin href="/assets/index-B3w0pv6a.css">
+      <link rel="stylesheet" crossorigin href="/assets/index-BvKmwc2a.css">
     </head>
     <body>
         <div id="app"></div>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
     "name": "smart-home-engine",
-    "version": "1.16.1",
+    "version": "1.17.1",
     "description": "Node.js based script runner for use in MQTT based Smart Home environments",
     "main": "src/index.js",
     "scripts": {

package/src/web/broker-api.js CHANGED Viewed

@@ -950,6 +950,150 @@ router.get('/logs', (req, res) => {
     res.json(limit >= all.length ? all : all.slice(-limit));
 });
+// ── Password file management ──────────────────────────────────────────────────
+/** POSIX shell-safe single-quote escaping for SSH commands */
+function shellArg(s) {
+    return "'" + String(s).replace(/'/g, "'\\''") + "'";
+}
+/**
+ * GET /she/broker/passwd?file=<path>
+ * List usernames from a mosquitto password file.
+ */
+router.get('/passwd', async (req, res) => {
+    try {
+        const bc = getBrokerConfig(req);
+        const file = String(req.query.file || '').trim();
+        if (!file || !file.startsWith('/')) return res.status(400).json({ error: 'absolute file path required' });
+        let text = '';
+        if (bc.ssh && bc.ssh.host) {
+            const result = await sshDeploy.runCommand(bc.ssh, `sudo cat -- ${shellArg(file)} 2>/dev/null || true`);
+            text = result.stdout;
+        } else {
+            try {
+                text = fs.readFileSync(file, 'utf8');
+            } catch (e) {
+                if (e.code !== 'ENOENT') throw e;
+            }
+        }
+        const users = text
+            .split('\n')
+            .filter((l) => l.includes(':'))
+            .map((l) => l.split(':')[0])
+            .filter(Boolean);
+        res.json({ users });
+    } catch (err) {
+        handleError(res, err);
+    }
+});
+/**
+ * POST /she/broker/passwd
+ * Add or update a user in a mosquitto password file.
+ * Body: { file, username, password }
+ */
+router.post('/passwd', async (req, res) => {
+    try {
+        const bc = getBrokerConfig(req);
+        const { file, username, password } = req.body;
+        if (!file || typeof file !== 'string' || !file.startsWith('/')) return res.status(400).json({ error: 'absolute file path required' });
+        if (!username || typeof username !== 'string') return res.status(400).json({ error: 'username required' });
+        if (!password || typeof password !== 'string') return res.status(400).json({ error: 'password required' });
+        if (/[:\n\r]/.test(username)) return res.status(400).json({ error: 'invalid username' });
+        if (bc.ssh && bc.ssh.host) {
+            const cmd = `sudo mosquitto_passwd -b ${shellArg(file)} ${shellArg(username)} ${shellArg(password)}`;
+            await sshDeploy.runCommand(bc.ssh, cmd);
+        } else {
+            await execFileAsync('mosquitto_passwd', ['-b', file, username, password]);
+        }
+        res.json({ ok: true });
+    } catch (err) {
+        handleError(res, err);
+    }
+});
+/**
+ * DELETE /she/broker/passwd/:user
+ * Delete a user from a mosquitto password file.
+ * Body: { file }
+ */
+router.delete('/passwd/:user', async (req, res) => {
+    try {
+        const bc = getBrokerConfig(req);
+        const { file } = req.body;
+        const username = req.params.user;
+        if (!file || typeof file !== 'string' || !file.startsWith('/')) return res.status(400).json({ error: 'absolute file path required' });
+        if (bc.ssh && bc.ssh.host) {
+            const cmd = `sudo mosquitto_passwd -D ${shellArg(file)} ${shellArg(username)}`;
+            await sshDeploy.runCommand(bc.ssh, cmd);
+        } else {
+            await execFileAsync('mosquitto_passwd', ['-D', file, username]);
+        }
+        res.json({ ok: true });
+    } catch (err) {
+        handleError(res, err);
+    }
+});
+// ── ACL file management ───────────────────────────────────────────────────────
+/**
+ * GET /she/broker/acl?file=<path>
+ * Read a mosquitto ACL file (static file, not dynsec).
+ */
+router.get('/acl', async (req, res) => {
+    try {
+        const bc = getBrokerConfig(req);
+        const file = String(req.query.file || '').trim();
+        if (!file || !file.startsWith('/')) return res.status(400).json({ error: 'absolute file path required' });
+        let content = '';
+        if (bc.ssh && bc.ssh.host) {
+            try {
+                content = await sshDeploy.readRemoteFile(bc.ssh, file);
+            } catch (e) {
+                if (!String(e.message).toLowerCase().includes('no such file')) throw e;
+            }
+        } else {
+            try {
+                content = fs.readFileSync(file, 'utf8');
+            } catch (e) {
+                if (e.code !== 'ENOENT') throw e;
+            }
+        }
+        res.json({ content });
+    } catch (err) {
+        handleError(res, err);
+    }
+});
+/**
+ * PUT /she/broker/acl
+ * Write a mosquitto ACL file.
+ * Body: { file, content }
+ */
+router.put('/acl', async (req, res) => {
+    try {
+        const bc = getBrokerConfig(req);
+        const { file, content } = req.body;
+        if (!file || typeof file !== 'string' || !file.startsWith('/')) return res.status(400).json({ error: 'absolute file path required' });
+        if (typeof content !== 'string') return res.status(400).json({ error: 'content must be a string' });
+        if (bc.ssh && bc.ssh.host) {
+            await sshDeploy.uploadContent(bc.ssh, content, file);
+        } else {
+            fs.writeFileSync(file, content, 'utf8');
+        }
+        res.json({ ok: true });
+    } catch (err) {
+        handleError(res, err);
+    }
+});
 module.exports = { router, setLogger, setStore };
 // ── dynsec: ACL topic inspection ──────────────────────────────────────────────