arthexis 0.1.26__py3-none-any.whl → 0.1.28__py3-none-any.whl

ocpp/admin.py

@@ -1,18 +1,22 @@
 from django.contrib import admin, messages
+from django.contrib.admin import helpers
 from django import forms
 
 import asyncio
 import base64
 from datetime import datetime, time, timedelta
+from pathlib import Path
+from urllib.parse import urlparse, unquote
+import contextlib
 import json
 from typing import Any
-
 from django.shortcuts import redirect
 from django.utils import formats, timezone, translation
-from django.utils.translation import gettext_lazy as _
+from django.utils.translation import gettext_lazy as _, ngettext
 from django.utils.dateparse import parse_datetime
-from django.utils.html import format_html
-from django.urls import path
+from django.utils.html import format_html, format_html_join
+from django.utils.text import slugify
+from django.urls import path, reverse
 from django.http import HttpResponse, HttpResponseRedirect
 from django.template.response import TemplateResponse
 
@@ -24,16 +28,20 @@ from cryptography.hazmat.primitives import hashes
 from cryptography.hazmat.primitives.asymmetric import padding
 from django.db import transaction
 from django.core.exceptions import ValidationError
+from django.conf import settings
 
 from .models import (
     Charger,
     ChargerConfiguration,
+    ConfigurationKey,
     Simulator,
     MeterValue,
     Transaction,
     Location,
     DataTransferMessage,
     CPReservation,
+    CPFirmware,
+    CPFirmwareDeployment,
 )
 from .simulator import ChargePointSimulator
 from . import store
@@ -44,6 +52,7 @@ from .transactions_io import (
 from .status_display import STATUS_BADGE_MAP, ERROR_OK_VALUES
 from .views import _charger_state, _live_sessions
 from core.admin import SaveBeforeChangeAction
+from core.models import RFID as CoreRFID
 from core.user_data import EntityModelAdmin
 from nodes.models import Node
 
@@ -115,6 +124,64 @@ class CPReservationForm(forms.ModelForm):
         return cleaned
 
 
+class UploadFirmwareForm(forms.Form):
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+        default_date = timezone.now() + timedelta(minutes=1)
+        if timezone.is_naive(default_date):
+            default_date = timezone.make_aware(
+                default_date, timezone.get_current_timezone()
+            )
+        self.fields["retrieve_date"].initial = timezone.localtime(default_date)
+        self.fields["chargers"].queryset = (
+            Charger.objects.filter(connector_id__isnull=True)
+            .order_by("display_name", "charger_id")
+        )
+
+    chargers = forms.ModelMultipleChoiceField(
+        label=_("Charge points"),
+        queryset=Charger.objects.none(),
+        help_text=_("Select the EVCS units to update."),
+    )
+    retrieve_date = forms.DateTimeField(
+        label=_("Retrieve date"),
+        required=False,
+        help_text=_("When the EVCS should start downloading the firmware."),
+    )
+    retries = forms.IntegerField(
+        label=_("Retries"),
+        required=False,
+        min_value=0,
+        initial=1,
+        help_text=_("Number of download attempts before giving up."),
+    )
+    retry_interval = forms.IntegerField(
+        label=_("Retry interval (seconds)"),
+        required=False,
+        min_value=0,
+        initial=600,
+        help_text=_("Seconds between retry attempts."),
+    )
+
+    def clean_retrieve_date(self):
+        value = self.cleaned_data.get("retrieve_date")
+        if value is None:
+            return None
+        if timezone.is_naive(value):
+            value = timezone.make_aware(value, timezone.get_current_timezone())
+        return value
+
+    def clean(self):
+        cleaned = super().clean()
+        chargers = cleaned.get("chargers")
+        if not chargers:
+            self.add_error(
+                "chargers",
+                _("Select at least one charge point to receive the firmware."),
+            )
+        return cleaned
+
+
 class LogViewAdminMixin:
     """Mixin providing an admin view to display charger or simulator logs."""
 
@@ -159,6 +226,44 @@ class LogViewAdminMixin:
         return TemplateResponse(request, self.log_template_name, context)
 
 
+class ConfigurationKeyInline(admin.TabularInline):
+    model = ConfigurationKey
+    extra = 0
+    can_delete = False
+    ordering = ("position", "id")
+    readonly_fields = (
+        "position",
+        "key",
+        "readonly",
+        "value_display",
+        "extra_display",
+    )
+    fields = readonly_fields
+    show_change_link = False
+
+    def has_add_permission(self, request, obj=None):  # pragma: no cover - admin hook
+        return False
+
+    @admin.display(description=_("Value"))
+    def value_display(self, obj):
+        if not obj.has_value:
+            return "-"
+        value = obj.value
+        if isinstance(value, (dict, list)):
+            formatted = json.dumps(value, indent=2, ensure_ascii=False)
+            return format_html("<pre>{}</pre>", formatted)
+        if value in (None, ""):
+            return "-"
+        return str(value)
+
+    @admin.display(description=_("Extra data"))
+    def extra_display(self, obj):
+        if not obj.extra_data:
+            return "-"
+        formatted = json.dumps(obj.extra_data, indent=2, ensure_ascii=False)
+        return format_html("<pre>{}</pre>", formatted)
+
+
 @admin.register(ChargerConfiguration)
 class ChargerConfigurationAdmin(admin.ModelAdmin):
     list_display = (
@@ -177,10 +282,10 @@ class ChargerConfigurationAdmin(admin.ModelAdmin):
         "created_at",
         "updated_at",
         "linked_chargers",
-        "configuration_keys_display",
         "unknown_keys_display",
         "raw_payload_display",
     )
+    inlines = (ConfigurationKeyInline,)
     fieldsets = (
         (
             None,
@@ -200,7 +305,6 @@ class ChargerConfigurationAdmin(admin.ModelAdmin):
             "Payload",
             {
                 "fields": (
-                    "configuration_keys_display",
                     "unknown_keys_display",
                     "raw_payload_display",
                 )
@@ -231,10 +335,6 @@ class ChargerConfigurationAdmin(admin.ModelAdmin):
         formatted = json.dumps(data, indent=2, ensure_ascii=False)
         return format_html("<pre>{}</pre>", formatted)
 
-    @admin.display(description="configurationKey")
-    def configuration_keys_display(self, obj):
-        return self._render_json(obj.configuration_keys)
-
     @admin.display(description="unknownKey")
     def unknown_keys_display(self, obj):
         return self._render_json(obj.unknown_keys)
@@ -254,6 +354,15 @@ class ChargerConfigurationAdmin(admin.ModelAdmin):
         super().save_model(request, obj, form, change)
 
 
+@admin.register(ConfigurationKey)
+class ConfigurationKeyAdmin(admin.ModelAdmin):
+    list_display = ("configuration", "key", "position", "readonly")
+    ordering = ("configuration", "position", "id")
+
+    def get_model_perms(self, request):  # pragma: no cover - admin hook
+        return {}
+
+
 @admin.register(Location)
 class LocationAdmin(EntityModelAdmin):
     form = LocationAdminForm
@@ -300,9 +409,388 @@ class DataTransferMessageAdmin(admin.ModelAdmin):
     )
 
 
+class CPFirmwareDeploymentInline(admin.TabularInline):
+    model = CPFirmwareDeployment
+    extra = 0
+    can_delete = False
+    ordering = ("-requested_at",)
+    readonly_fields = (
+        "charger",
+        "node",
+        "status",
+        "status_info",
+        "status_timestamp",
+        "retrieve_date",
+        "retry_count",
+        "retry_interval",
+        "download_token",
+        "download_token_expires_at",
+        "downloaded_at",
+        "requested_at",
+        "completed_at",
+        "ocpp_message_id",
+    )
+    show_change_link = True
+
+
+def _format_failure_message(result: dict, *, action_label: str) -> str:
+    error_code = str(result.get("error_code") or "").strip()
+    error_description = str(result.get("error_description") or "").strip()
+    details = result.get("error_details")
+    parts: list[str] = []
+    if error_code:
+        parts.append(_("code=%(code)s") % {"code": error_code})
+    if error_description:
+        parts.append(
+            _("description=%(description)s") % {"description": error_description}
+        )
+    if details:
+        try:
+            details_text = json.dumps(details, sort_keys=True, ensure_ascii=False)
+        except TypeError:
+            details_text = str(details)
+        if details_text:
+            parts.append(_("details=%(details)s") % {"details": details_text})
+    if parts:
+        return _("%(action)s failed: %(details)s") % {
+            "action": action_label,
+            "details": ", ".join(parts),
+        }
+    return _("%(action)s failed.") % {"action": action_label}
+
+
+@admin.register(CPFirmware)
+class CPFirmwareAdmin(EntityModelAdmin):
+    list_display = (
+        "name",
+        "filename",
+        "content_type",
+        "payload_size",
+        "downloaded_at",
+        "source_node",
+        "source_charger",
+    )
+    list_filter = ("source", "content_type")
+    search_fields = (
+        "name",
+        "filename",
+        "source_charger__charger_id",
+        "source_charger__display_name",
+    )
+    readonly_fields = (
+        "source",
+        "source_node",
+        "source_charger",
+        "payload_size",
+        "checksum",
+        "download_vendor_id",
+        "download_message_id",
+        "downloaded_at",
+        "created_at",
+        "updated_at",
+        "metadata",
+    )
+    fieldsets = (
+        (
+            None,
+            {
+                "fields": (
+                    "name",
+                    "description",
+                    "filename",
+                    "content_type",
+                    "payload_encoding",
+                    "payload_size",
+                    "checksum",
+                )
+            },
+        ),
+        (
+            _("Source"),
+            {
+                "fields": (
+                    "source",
+                    "source_node",
+                    "source_charger",
+                    "download_vendor_id",
+                    "download_message_id",
+                    "downloaded_at",
+                )
+            },
+        ),
+        (
+            _("Metadata"),
+            {"fields": ("metadata", "created_at", "updated_at")},
+        ),
+    )
+    actions = ["upload_evcs_firmware"]
+    inlines = [CPFirmwareDeploymentInline]
+
+    def _format_pending_failure(self, result: dict) -> str:
+        return _format_failure_message(result, action_label=_("Update firmware"))
+
+    def _dispatch_firmware_update(
+        self,
+        request,
+        firmware: CPFirmware,
+        charger: Charger,
+        retrieve_date: datetime | None,
+        retries: int | None,
+        retry_interval: int | None,
+    ) -> bool:
+        connection = store.get_connection(charger.charger_id, charger.connector_id)
+        if connection is None:
+            self.message_user(
+                request,
+                _("%(charger)s is not currently connected to the platform.")
+                % {"charger": charger},
+                level=messages.ERROR,
+            )
+            return False
+
+        if not firmware.has_binary and not firmware.has_json:
+            self.message_user(
+                request,
+                _("%(firmware)s does not contain any payload to upload.")
+                % {"firmware": firmware},
+                level=messages.ERROR,
+            )
+            return False
+
+        start_time = retrieve_date or (timezone.now() + timedelta(seconds=30))
+        if timezone.is_naive(start_time):
+            start_time = timezone.make_aware(
+                start_time, timezone.get_current_timezone()
+            )
+
+        message_id = uuid.uuid4().hex
+        deployment = CPFirmwareDeployment.objects.create(
+            firmware=firmware,
+            charger=charger,
+            node=charger.node_origin,
+            ocpp_message_id=message_id,
+            status="Pending",
+            status_info=_("Awaiting charge point response."),
+            status_timestamp=timezone.now(),
+            retrieve_date=start_time,
+            retry_count=int(retries or 0),
+            retry_interval=int(retry_interval or 0),
+            request_payload={},
+            is_user_data=True,
+        )
+        token = deployment.issue_download_token(lifetime=timedelta(hours=4))
+        download_url = request.build_absolute_uri(
+            reverse("cp-firmware-download", args=[deployment.pk, token])
+        )
+        payload = {
+            "location": download_url,
+            "retrieveDate": start_time.isoformat(),
+        }
+        if retries is not None:
+            payload["retries"] = int(retries)
+        if retry_interval:
+            payload["retryInterval"] = int(retry_interval)
+        if firmware.checksum:
+            payload["checksum"] = firmware.checksum
+        deployment.request_payload = payload
+        deployment.save(update_fields=["request_payload", "updated_at"])
+
+        frame = json.dumps([2, message_id, "UpdateFirmware", payload])
+        async_to_sync(connection.send)(frame)
+        log_key = store.identity_key(charger.charger_id, charger.connector_id)
+        store.add_log(
+            log_key,
+            _("Dispatched UpdateFirmware request."),
+            log_type="charger",
+        )
+        store.register_pending_call(
+            message_id,
+            {
+                "action": "UpdateFirmware",
+                "charger_id": charger.charger_id,
+                "connector_id": charger.connector_id,
+                "deployment_pk": deployment.pk,
+                "log_key": log_key,
+            },
+        )
+        store.schedule_call_timeout(
+            message_id, action="UpdateFirmware", log_key=log_key
+        )
+
+        result = store.wait_for_pending_call(message_id, timeout=15.0)
+        if result is None:
+            deployment.mark_status("Timeout", _("No response received."))
+            deployment.completed_at = timezone.now()
+            deployment.save(update_fields=["completed_at", "updated_at"])
+            self.message_user(
+                request,
+                _(
+                    "The charge point did not respond to the UpdateFirmware request."
+                ),
+                level=messages.ERROR,
+            )
+            return False
+        if not result.get("success", True):
+            detail = self._format_pending_failure(result)
+            deployment.mark_status("Error", detail, response=result.get("payload"))
+            deployment.completed_at = timezone.now()
+            deployment.save(update_fields=["completed_at", "updated_at"])
+            self.message_user(request, detail, level=messages.ERROR)
+            return False
+
+        payload_data = result.get("payload") or {}
+        status_value = str(payload_data.get("status") or "").strip() or "Accepted"
+        timestamp = timezone.now()
+        deployment.mark_status(status_value, "", timestamp, response=payload_data)
+        if status_value.lower() != "accepted":
+            self.message_user(
+                request,
+                _(
+                    "UpdateFirmware for %(charger)s was %(status)s."
+                )
+                % {"charger": charger, "status": status_value},
+                level=messages.ERROR,
+            )
+            return False
+
+        self.message_user(
+            request,
+            _("Queued firmware installation for %(charger)s.")
+            % {"charger": charger},
+            level=messages.SUCCESS,
+        )
+        return True
+
+    @admin.action(description=_("Upload EVCS firmware"))
+    def upload_evcs_firmware(self, request, queryset):
+        selected_ids = request.POST.getlist(helpers.ACTION_CHECKBOX_NAME)
+        if selected_ids:
+            firmware_qs = CPFirmware.objects.filter(pk__in=selected_ids)
+            firmware_map = {str(obj.pk): obj for obj in firmware_qs}
+            firmware_list = [
+                firmware_map[value]
+                for value in selected_ids
+                if value in firmware_map
+            ]
+        else:
+            firmware_list = list(queryset)
+            selected_ids = [str(obj.pk) for obj in firmware_list]
+
+        if not firmware_list:
+            self.message_user(
+                request,
+                _("Select at least one firmware record to upload."),
+                level=messages.ERROR,
+            )
+            return None
+
+        form = UploadFirmwareForm(request.POST or None)
+        if request.method == "POST" and form.is_valid():
+            chargers = list(form.cleaned_data["chargers"])
+            retrieve_date = form.cleaned_data.get("retrieve_date")
+            retries = form.cleaned_data.get("retries")
+            retry_interval = form.cleaned_data.get("retry_interval")
+            success_count = 0
+            for firmware in firmware_list:
+                for charger in chargers:
+                    if self._dispatch_firmware_update(
+                        request,
+                        firmware,
+                        charger,
+                        retrieve_date,
+                        retries,
+                        retry_interval,
+                    ):
+                        success_count += 1
+            if success_count:
+                self.message_user(
+                    request,
+                    ngettext(
+                        "Queued %(count)d firmware upload.",
+                        "Queued %(count)d firmware uploads.",
+                        success_count,
+                    )
+                    % {"count": success_count},
+                    level=messages.SUCCESS,
+                )
+            return None
+
+        context = {
+            **self.admin_site.each_context(request),
+            "opts": self.model._meta,
+            "title": _("Upload EVCS firmware"),
+            "firmware_list": firmware_list,
+            "selected_ids": selected_ids,
+            "action_name": request.POST.get("action", "upload_evcs_firmware"),
+            "select_across": request.POST.get("select_across", "0"),
+            "action_checkbox_name": helpers.ACTION_CHECKBOX_NAME,
+            "adminform": helpers.AdminForm(
+                form,
+                [
+                    (
+                        None,
+                        {
+                            "fields": (
+                                "chargers",
+                                "retrieve_date",
+                                "retries",
+                                "retry_interval",
+                            )
+                        },
+                    )
+                ],
+                {},
+            ),
+            "form": form,
+            "media": self.media + form.media,
+        }
+        return TemplateResponse(
+            request, "admin/ocpp/cpfirmware/upload_evcs.html", context
+        )
+
+
+@admin.register(CPFirmwareDeployment)
+class CPFirmwareDeploymentAdmin(EntityModelAdmin):
+    list_display = (
+        "firmware",
+        "charger",
+        "status",
+        "status_timestamp",
+        "requested_at",
+        "completed_at",
+    )
+    list_filter = ("status",)
+    search_fields = (
+        "firmware__name",
+        "charger__charger_id",
+        "ocpp_message_id",
+    )
+    readonly_fields = (
+        "firmware",
+        "charger",
+        "node",
+        "ocpp_message_id",
+        "status",
+        "status_info",
+        "status_timestamp",
+        "requested_at",
+        "completed_at",
+        "retrieve_date",
+        "retry_count",
+        "retry_interval",
+        "download_token",
+        "download_token_expires_at",
+        "downloaded_at",
+        "request_payload",
+        "response_payload",
+        "created_at",
+        "updated_at",
+    )
+
 @admin.register(CPReservation)
 class CPReservationAdmin(EntityModelAdmin):
     form = CPReservationForm
+    actions = ("cancel_reservations",)
     list_display = (
         "location",
         "connector_side_display",
@@ -423,6 +911,49 @@ class CPReservationAdmin(EntityModelAdmin):
         value = obj.id_tag_value
         return value or "-"
 
+    @admin.action(description=_("Cancel selected Reservations"))
+    def cancel_reservations(self, request, queryset):
+        cancelled = 0
+        for reservation in queryset:
+            try:
+                reservation.send_cancel_request()
+            except ValidationError as exc:
+                messages_list: list[str] = []
+                if getattr(exc, "message_dict", None):
+                    for errors in exc.message_dict.values():
+                        messages_list.extend(str(error) for error in errors)
+                elif getattr(exc, "messages", None):
+                    messages_list.extend(str(error) for error in exc.messages)
+                else:
+                    messages_list.append(str(exc))
+                for message in messages_list:
+                    self.message_user(
+                        request,
+                        _("%(reservation)s: %(message)s")
+                        % {"reservation": reservation, "message": message},
+                        level=messages.ERROR,
+                    )
+            except Exception as exc:  # pragma: no cover - defensive
+                self.message_user(
+                    request,
+                    _("%(reservation)s: unable to cancel reservation (%(error)s)")
+                    % {"reservation": reservation, "error": exc},
+                    level=messages.ERROR,
+                )
+            else:
+                cancelled += 1
+        if cancelled:
+            self.message_user(
+                request,
+                ngettext(
+                    "Sent %(count)d cancellation request.",
+                    "Sent %(count)d cancellation requests.",
+                    cancelled,
+                )
+                % {"count": cancelled},
+                level=messages.SUCCESS,
+            )
+
 
 @admin.register(Charger)
 class ChargerAdmin(LogViewAdminMixin, EntityModelAdmin):
@@ -487,6 +1018,15 @@ class ChargerAdmin(LogViewAdminMixin, EntityModelAdmin):
             "Configuration",
             {"fields": ("public_display", "require_rfid", "configuration")},
         ),
+        (
+            "Local authorization",
+            {
+                "fields": (
+                    "local_auth_list_version",
+                    "local_auth_list_updated_at",
+                )
+            },
+        ),
         (
             "Network",
             {
@@ -529,6 +1069,8 @@ class ChargerAdmin(LogViewAdminMixin, EntityModelAdmin):
         "availability_request_status_at",
         "availability_request_details",
         "configuration",
+        "local_auth_list_version",
+        "local_auth_list_updated_at",
         "forwarded_to",
         "forwarding_watermark",
         "last_online_at",
@@ -553,16 +1095,145 @@ class ChargerAdmin(LogViewAdminMixin, EntityModelAdmin):
         "purge_data",
         "fetch_cp_configuration",
         "toggle_rfid_authentication",
+        "send_rfid_list_to_evcs",
+        "update_rfids_from_evcs",
         "recheck_charger_status",
+        "get_diagnostics",
         "change_availability_operative",
         "change_availability_inoperative",
         "set_availability_state_operative",
         "set_availability_state_inoperative",
+        "clear_authorization_cache",
         "remote_stop_transaction",
         "reset_chargers",
         "delete_selected",
     ]
 
+    class DiagnosticsDownloadError(Exception):
+        """Raised when diagnostics downloads fail."""
+
+    def _diagnostics_directory_for(self, user) -> tuple[Path, Path]:
+        username = getattr(user, "get_username", None)
+        if callable(username):
+            username = username()
+        else:
+            username = getattr(user, "username", "")
+        if not username:
+            username = str(getattr(user, "pk", "user"))
+        username_component = Path(str(username)).name or "user"
+        base_dir = Path(settings.BASE_DIR)
+        user_dir = base_dir / "work" / username_component
+        diagnostics_dir = user_dir / "diagnostics"
+        diagnostics_dir.mkdir(parents=True, exist_ok=True)
+        return diagnostics_dir, user_dir
+
+    def _content_disposition_filename(self, header_value: str) -> str:
+        for part in header_value.split(";"):
+            candidate = part.strip()
+            lower = candidate.lower()
+            if lower.startswith("filename*="):
+                value = candidate.split("=", 1)[1].strip()
+                if value.lower().startswith("utf-8''"):
+                    value = value[7:]
+                return Path(unquote(value.strip('"'))).name
+            if lower.startswith("filename="):
+                value = candidate.split("=", 1)[1].strip().strip('"')
+                return Path(value).name
+        return ""
+
+    def _diagnostics_filename(self, charger: Charger, location: str, response) -> str:
+        parsed = urlparse(location)
+        candidate = Path(parsed.path or "").name
+        header_name = ""
+        content_disposition = response.headers.get("Content-Disposition") if hasattr(response, "headers") else None
+        if content_disposition:
+            header_name = self._content_disposition_filename(content_disposition)
+        if header_name:
+            candidate = header_name
+        if not candidate:
+            candidate = "diagnostics.log"
+        path_candidate = Path(candidate)
+        suffix = "".join(path_candidate.suffixes)
+        if suffix:
+            base_name = candidate[: -len(suffix)]
+        else:
+            base_name = candidate
+            suffix = ".log"
+        base_name = base_name.rstrip(".")
+        if not base_name:
+            base_name = "diagnostics"
+        charger_slug = slugify(charger.charger_id or charger.display_name or str(charger.pk or "charger"))
+        if not charger_slug:
+            charger_slug = "charger"
+        diagnostics_slug = slugify(base_name) or "diagnostics"
+        timestamp = timezone.now().strftime("%Y%m%d%H%M%S")
+        return f"{charger_slug}-{diagnostics_slug}-{timestamp}{suffix}"
+
+    def _unique_diagnostics_path(self, directory: Path, filename: str) -> Path:
+        base_path = Path(filename)
+        suffix = "".join(base_path.suffixes)
+        if suffix:
+            base_name = filename[: -len(suffix)]
+        else:
+            base_name = filename
+            suffix = ""
+        base_name = base_name.rstrip(".") or "diagnostics"
+        candidate = directory / f"{base_name}{suffix}"
+        counter = 1
+        while candidate.exists():
+            candidate = directory / f"{base_name}-{counter}{suffix}"
+            counter += 1
+        return candidate
+
+    def _download_diagnostics(
+        self,
+        request,
+        charger: Charger,
+        location: str,
+        diagnostics_dir: Path,
+        user_dir: Path,
+    ) -> tuple[Path, str]:
+        parsed = urlparse(location)
+        scheme = (parsed.scheme or "").lower()
+        if scheme not in {"http", "https"}:
+            raise self.DiagnosticsDownloadError(
+                _("Diagnostics location must use HTTP or HTTPS.")
+            )
+        try:
+            response = requests.get(location, stream=True, timeout=15)
+        except RequestException as exc:
+            raise self.DiagnosticsDownloadError(
+                _("Failed to download diagnostics: %s") % exc
+            ) from exc
+        try:
+            if response.status_code != 200:
+                raise self.DiagnosticsDownloadError(
+                    _("Diagnostics download returned status %s.")
+                    % response.status_code
+                )
+            filename = self._diagnostics_filename(charger, location, response)
+            destination = self._unique_diagnostics_path(diagnostics_dir, filename)
+            try:
+                with destination.open("wb") as handle:
+                    for chunk in response.iter_content(chunk_size=65536):
+                        if not chunk:
+                            continue
+                        handle.write(chunk)
+            except OSError as exc:
+                raise self.DiagnosticsDownloadError(
+                    _("Unable to write diagnostics file: %s") % exc
+                ) from exc
+        finally:
+            with contextlib.suppress(Exception):
+                response.close()
+        relative_asset = destination.relative_to(user_dir).as_posix()
+        asset_url = reverse(
+            "pages:readme-asset",
+            kwargs={"source": "work", "asset": relative_asset},
+        )
+        absolute_url = request.build_absolute_uri(asset_url)
+        return destination, absolute_url
+
     def _prepare_remote_credentials(self, request):
         local = Node.get_local()
         if not local or not local.uuid:
@@ -708,6 +1379,55 @@ class ChargerAdmin(LogViewAdminMixin, EntityModelAdmin):
         for field, value in applied.items():
             setattr(charger, field, value)
 
+    @admin.action(description="Get diagnostics")
+    def get_diagnostics(self, request, queryset):
+        diagnostics_dir, user_dir = self._diagnostics_directory_for(request.user)
+        successes: list[tuple[Charger, str, Path]] = []
+        for charger in queryset:
+            location = (charger.diagnostics_location or "").strip()
+            if not location:
+                self.message_user(
+                    request,
+                    _("%(charger)s: no diagnostics location reported.")
+                    % {"charger": charger},
+                    level=messages.WARNING,
+                )
+                continue
+            try:
+                destination, asset_url = self._download_diagnostics(
+                    request,
+                    charger,
+                    location,
+                    diagnostics_dir,
+                    user_dir,
+                )
+            except self.DiagnosticsDownloadError as exc:
+                self.message_user(
+                    request,
+                    _("%(charger)s: %(error)s")
+                    % {"charger": charger, "error": exc},
+                    level=messages.ERROR,
+                )
+                continue
+            successes.append((charger, asset_url, destination))
+
+        if successes:
+            summary = ngettext(
+                "Retrieved diagnostics for %(count)d charger.",
+                "Retrieved diagnostics for %(count)d chargers.",
+                len(successes),
+            ) % {"count": len(successes)}
+            details = format_html_join(
+                "",
+                "<li>{}: <a href=\"{}\" target=\"_blank\">{}</a> (<code>{}</code>)</li>",
+                (
+                    (charger, url, destination.name, destination)
+                    for charger, url, destination in successes
+                ),
+            )
+            message = format_html("{}<ul>{}</ul>", summary, details)
+            self.message_user(request, message, level=messages.SUCCESS)
+
     def get_readonly_fields(self, request, obj=None):
         readonly = list(super().get_readonly_fields(request, obj))
         if obj and not obj.is_local:
@@ -814,6 +1534,21 @@ class ChargerAdmin(LogViewAdminMixin, EntityModelAdmin):
             return obj.location.name
         return obj.charger_id
 
+    def _build_local_authorization_list(self) -> list[dict[str, object]]:
+        """Return the payload for SendLocalList with released and allowed RFIDs."""
+
+        entries: list[dict[str, object]] = []
+        queryset = (
+            CoreRFID.objects.filter(released=True, allowed=True)
+            .order_by("rfid")
+            .only("rfid")
+        )
+        for tag in queryset.iterator():
+            entry: dict[str, object] = {"idTag": tag.rfid}
+            entry["idTagInfo"] = {"status": "Accepted"}
+            entries.append(entry)
+        return entries
+
     @admin.display(boolean=True, description="Local")
     def local_indicator(self, obj):
         return obj.is_local
@@ -1031,6 +1766,183 @@ class ChargerAdmin(LogViewAdminMixin, EntityModelAdmin):
                 f"Updated RFID authentication: {summary}",
             )
 
+    @admin.action(description="Send RFID list to EVCS")
+    def send_rfid_list_to_evcs(self, request, queryset):
+        authorization_list = self._build_local_authorization_list()
+        update_type = "Full"
+        sent = 0
+        local_node = None
+        private_key = None
+        remote_unavailable = False
+        for charger in queryset:
+            list_version = (charger.local_auth_list_version or 0) + 1
+            if charger.is_local:
+                connector_value = charger.connector_id
+                ws = store.get_connection(charger.charger_id, connector_value)
+                if ws is None:
+                    self.message_user(
+                        request,
+                        f"{charger}: no active connection",
+                        level=messages.ERROR,
+                    )
+                    continue
+                message_id = uuid.uuid4().hex
+                payload = {
+                    "listVersion": list_version,
+                    "updateType": update_type,
+                    "localAuthorizationList": authorization_list,
+                }
+                msg = json.dumps([2, message_id, "SendLocalList", payload])
+                try:
+                    async_to_sync(ws.send)(msg)
+                except Exception as exc:  # pragma: no cover - network error
+                    self.message_user(
+                        request,
+                        f"{charger}: failed to send SendLocalList ({exc})",
+                        level=messages.ERROR,
+                    )
+                    continue
+                log_key = store.identity_key(charger.charger_id, connector_value)
+                store.add_log(log_key, f"< {msg}", log_type="charger")
+                store.register_pending_call(
+                    message_id,
+                    {
+                        "action": "SendLocalList",
+                        "charger_id": charger.charger_id,
+                        "connector_id": connector_value,
+                        "log_key": log_key,
+                        "list_version": list_version,
+                        "list_size": len(authorization_list),
+                        "requested_at": timezone.now(),
+                    },
+                )
+                store.schedule_call_timeout(
+                    message_id,
+                    action="SendLocalList",
+                    log_key=log_key,
+                    message="SendLocalList request timed out",
+                )
+                sent += 1
+                continue
+
+            if not charger.allow_remote:
+                self.message_user(
+                    request,
+                    f"{charger}: remote administration is disabled.",
+                    level=messages.ERROR,
+                )
+                continue
+            if remote_unavailable:
+                continue
+            if local_node is None:
+                local_node, private_key = self._prepare_remote_credentials(request)
+                if not local_node or not private_key:
+                    remote_unavailable = True
+                    continue
+            extra = {
+                "local_authorization_list": [entry.copy() for entry in authorization_list],
+                "list_version": list_version,
+                "update_type": update_type,
+            }
+            success, updates = self._call_remote_action(
+                request,
+                local_node,
+                private_key,
+                charger,
+                "send-local-rfid-list",
+                extra,
+            )
+            if success:
+                self._apply_remote_updates(charger, updates)
+                sent += 1
+
+        if sent:
+            self.message_user(
+                request,
+                f"Sent SendLocalList to {sent} charger(s)",
+            )
+
+    @admin.action(description="Update RFIDs from EVCS")
+    def update_rfids_from_evcs(self, request, queryset):
+        requested = 0
+        local_node = None
+        private_key = None
+        remote_unavailable = False
+        for charger in queryset:
+            if charger.is_local:
+                connector_value = charger.connector_id
+                ws = store.get_connection(charger.charger_id, connector_value)
+                if ws is None:
+                    self.message_user(
+                        request,
+                        f"{charger}: no active connection",
+                        level=messages.ERROR,
+                    )
+                    continue
+                message_id = uuid.uuid4().hex
+                payload: dict[str, object] = {}
+                msg = json.dumps([2, message_id, "GetLocalListVersion", payload])
+                try:
+                    async_to_sync(ws.send)(msg)
+                except Exception as exc:  # pragma: no cover - network error
+                    self.message_user(
+                        request,
+                        f"{charger}: failed to send GetLocalListVersion ({exc})",
+                        level=messages.ERROR,
+                    )
+                    continue
+                log_key = store.identity_key(charger.charger_id, connector_value)
+                store.add_log(log_key, f"< {msg}", log_type="charger")
+                store.register_pending_call(
+                    message_id,
+                    {
+                        "action": "GetLocalListVersion",
+                        "charger_id": charger.charger_id,
+                        "connector_id": connector_value,
+                        "log_key": log_key,
+                        "requested_at": timezone.now(),
+                    },
+                )
+                store.schedule_call_timeout(
+                    message_id,
+                    action="GetLocalListVersion",
+                    log_key=log_key,
+                    message="GetLocalListVersion request timed out",
+                )
+                requested += 1
+                continue
+
+            if not charger.allow_remote:
+                self.message_user(
+                    request,
+                    f"{charger}: remote administration is disabled.",
+                    level=messages.ERROR,
+                )
+                continue
+            if remote_unavailable:
+                continue
+            if local_node is None:
+                local_node, private_key = self._prepare_remote_credentials(request)
+                if not local_node or not private_key:
+                    remote_unavailable = True
+                    continue
+            success, updates = self._call_remote_action(
+                request,
+                local_node,
+                private_key,
+                charger,
+                "get-local-list-version",
+            )
+            if success:
+                self._apply_remote_updates(charger, updates)
+                requested += 1
+
+        if requested:
+            self.message_user(
+                request,
+                f"Requested GetLocalListVersion from {requested} charger(s)",
+            )
+
     def _dispatch_change_availability(self, request, queryset, availability_type: str):
         sent = 0
         local_node = None
@@ -1186,6 +2098,85 @@ class ChargerAdmin(LogViewAdminMixin, EntityModelAdmin):
     def set_availability_state_inoperative(self, request, queryset):
         self._set_availability_state(request, queryset, "Inoperative")
 
+    @admin.action(description="Clear charger authorization cache")
+    def clear_authorization_cache(self, request, queryset):
+        cleared = 0
+        local_node = None
+        private_key = None
+        remote_unavailable = False
+        for charger in queryset:
+            if charger.is_local:
+                connector_value = charger.connector_id
+                ws = store.get_connection(charger.charger_id, connector_value)
+                if ws is None:
+                    self.message_user(
+                        request,
+                        f"{charger}: no active connection",
+                        level=messages.ERROR,
+                    )
+                    continue
+                message_id = uuid.uuid4().hex
+                msg = json.dumps([2, message_id, "ClearCache", {}])
+                try:
+                    async_to_sync(ws.send)(msg)
+                except Exception as exc:  # pragma: no cover - network error
+                    self.message_user(
+                        request,
+                        f"{charger}: failed to send ClearCache ({exc})",
+                        level=messages.ERROR,
+                    )
+                    continue
+                log_key = store.identity_key(charger.charger_id, connector_value)
+                store.add_log(log_key, f"< {msg}", log_type="charger")
+                requested_at = timezone.now()
+                store.register_pending_call(
+                    message_id,
+                    {
+                        "action": "ClearCache",
+                        "charger_id": charger.charger_id,
+                        "connector_id": connector_value,
+                        "log_key": log_key,
+                        "requested_at": requested_at,
+                    },
+                )
+                store.schedule_call_timeout(
+                    message_id,
+                    action="ClearCache",
+                    log_key=log_key,
+                )
+                cleared += 1
+                continue
+
+            if not charger.allow_remote:
+                self.message_user(
+                    request,
+                    f"{charger}: remote administration is disabled.",
+                    level=messages.ERROR,
+                )
+                continue
+            if remote_unavailable:
+                continue
+            if local_node is None:
+                local_node, private_key = self._prepare_remote_credentials(request)
+                if not local_node or not private_key:
+                    remote_unavailable = True
+                    continue
+            success, _updates = self._call_remote_action(
+                request,
+                local_node,
+                private_key,
+                charger,
+                "clear-cache",
+            )
+            if success:
+                cleared += 1
+
+        if cleared:
+            self.message_user(
+                request,
+                f"Sent ClearCache to {cleared} charger(s)",
+            )
+
     @admin.action(description="Remote stop active transaction")
     def remote_stop_transaction(self, request, queryset):
         stopped = 0