boneio 1.6.0.dev22__tar.gz → 1.6.0.dev23__tar.gz

{boneio-1.6.0.dev22/boneio.egg-info → boneio-1.6.0.dev23}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boneio
-Version: 1.6.0.dev22
+Version: 1.6.0.dev23
 Summary: Python App for BoneIO
 Author-email: Paweł Szafer <pszafer@gmail.com>
 License: GNU General Public License v3.0

{boneio-1.6.0.dev22 → boneio-1.6.0.dev23}/boneio/core/auth/models.py

@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from dataclasses import dataclass
+from dataclasses import dataclass, field
 from datetime import UTC, datetime
 from enum import StrEnum
 
@@ -37,6 +37,18 @@ class User:
     role: Role = Role.ADMIN
     created_at: str = ""
     updated_at: str = ""
+    # Bumped whenever the password changes. Login tokens carry the value they
+    # were issued under, and one that no longer matches is refused, which is
+    # how a password change signs every other session out.
+    session_version: int = 0
+    # Single browser sessions cut off after too many wrong passwords, as
+    # session id → the unix time its token expires, after which the entry is
+    # pointless and gets pruned.
+    revoked_sessions: dict[str, int] = field(default_factory=dict)
+    # Wrong passwords typed per session while it was signed in, as session id
+    # → {"count": n, "until": token expiry}. Kept here, not in memory, so a
+    # restart does not hand a guessing session a fresh allowance.
+    session_failures: dict[str, dict] = field(default_factory=dict)
 
     def to_dict(self) -> dict:
         """Serialise for ``users.json``.
@@ -50,6 +62,9 @@ class User:
             "role": str(self.role),
             "created_at": self.created_at,
             "updated_at": self.updated_at,
+            "session_version": self.session_version,
+            "revoked_sessions": dict(self.revoked_sessions),
+            "session_failures": {k: dict(v) for k, v in self.session_failures.items()},
         }
 
     @classmethod
@@ -79,12 +94,22 @@ class User:
         except ValueError:
             role = Role.VIEWER
 
+        # Absent in every users.json written before 1.6.0.dev23, and those
+        # accounts' tokens carry no version either: both read as 0.
+        try:
+            session_version = int(raw.get("session_version", 0))
+        except (TypeError, ValueError):
+            session_version = 0
+
         return cls(
+            revoked_sessions=_int_map(raw.get("revoked_sessions")),
+            session_failures=_failure_map(raw.get("session_failures")),
             username=username,
             password_hash=password_hash,
             role=role,
             created_at=str(raw.get("created_at", "")),
             updated_at=str(raw.get("updated_at", "")),
+            session_version=session_version,
         )
 
     def to_public_dict(self) -> dict:
@@ -99,3 +124,43 @@ class User:
             "created_at": self.created_at,
             "updated_at": self.updated_at,
         }
+
+
+def _int_map(raw) -> dict[str, int]:
+    """Read a ``{str: int}`` map from users.json, dropping what does not fit.
+
+    Args:
+        raw: Whatever the file holds under the key.
+
+    Returns:
+        The well-formed entries.
+    """
+    if not isinstance(raw, dict):
+        return {}
+    out: dict[str, int] = {}
+    for key, value in raw.items():
+        if isinstance(key, str) and isinstance(value, int) and not isinstance(value, bool):
+            out[key] = value
+    return out
+
+
+def _failure_map(raw) -> dict[str, dict]:
+    """Read the per-session failure counts, dropping what does not fit.
+
+    Args:
+        raw: Whatever the file holds under the key.
+
+    Returns:
+        ``{session_id: {"count": int, "until": int}}`` for the entries that
+        have both.
+    """
+    if not isinstance(raw, dict):
+        return {}
+    out: dict[str, dict] = {}
+    for key, value in raw.items():
+        if not isinstance(key, str) or not isinstance(value, dict):
+            continue
+        count, until = value.get("count"), value.get("until")
+        if all(isinstance(v, int) and not isinstance(v, bool) for v in (count, until)):
+            out[key] = {"count": count, "until": until}
+    return out

{boneio-1.6.0.dev22 → boneio-1.6.0.dev23}/boneio/core/auth/store.py

@@ -18,6 +18,7 @@ import logging
 import os
 import tempfile
 import threading
+import time
 from pathlib import Path
 
 from boneio.core.auth.hashing import hash_password, verify_password
@@ -390,7 +391,11 @@ class UserStore:
         return user
 
     def set_password(self, username: str, password: str) -> User:
-        """Replace an account's password.
+        """Replace an account's password and revoke its sessions.
+
+        Every token issued before the change stops being honoured; the caller
+        that made the change has to be handed a fresh one if it is to stay
+        signed in.
 
         Args:
             username: Account to change.
@@ -413,11 +418,79 @@ class UserStore:
                 raise UserStoreError(f"No such account: {username}")
             user.password_hash = hash_password(password)
             user.updated_at = utc_now()
+            # Signs out every session opened with the old password, the
+            # stolen one being the point.
+            user.session_version += 1
             self._save()
 
         _LOGGER.info("Password changed for account '%s'", user.username)
         return user
 
+    def record_session_failure(self, username: str, session_id: str, until: int) -> int:
+        """Count a wrong password typed by one signed-in session.
+
+        Cumulative for the life of the session, not a sliding window: a window
+        lets a patient guesser stay under it forever, a few tries at a time.
+        The count goes when the password is typed right or the token expires.
+
+        Args:
+            username: Account the session belongs to.
+            session_id: The session (see middleware.auth.session_id_of).
+            until: Unix time the session's token expires.
+
+        Returns:
+            The session's count after this one, or 0 if the account is gone.
+        """
+        self._ensure_loaded()
+        key = normalize_username(username)
+        with self._lock:
+            user = self._users.get(key)
+            if user is None:
+                return 0
+            _prune(user)
+            entry = user.session_failures.get(session_id, {"count": 0, "until": until})
+            entry = {"count": entry["count"] + 1, "until": max(entry["until"], until)}
+            user.session_failures[session_id] = entry
+            self._save()
+            return entry["count"]
+
+    def clear_session_failures(self, username: str, session_id: str) -> None:
+        """Forget a session's wrong passwords once it has typed the right one.
+
+        Args:
+            username: Account the session belongs to.
+            session_id: The session.
+        """
+        self._ensure_loaded()
+        key = normalize_username(username)
+        with self._lock:
+            user = self._users.get(key)
+            if user is None or session_id not in user.session_failures:
+                return
+            del user.session_failures[session_id]
+            self._save()
+
+    def revoke_session(self, username: str, session_id: str, until: int) -> None:
+        """Sign one session out, leaving the account's other sessions alone.
+
+        Args:
+            username: Account the session belongs to.
+            session_id: The session to refuse from now on.
+            until: Unix time its token expires; the entry is useless after.
+        """
+        self._ensure_loaded()
+        key = normalize_username(username)
+        with self._lock:
+            user = self._users.get(key)
+            if user is None:
+                return
+            _prune(user)
+            user.revoked_sessions[session_id] = until
+            user.session_failures.pop(session_id, None)
+            self._save()
+
+        _LOGGER.warning("Signed out one session of '%s'", user.username)
+
     def set_role(self, username: str, role: Role) -> User:
         """Change an account's role.
 
@@ -520,3 +593,16 @@ def dummy_hash() -> str:
         if _DUMMY_HASH is None:
             _DUMMY_HASH = hash_password("boneio-nonexistent-account-placeholder")
         return _DUMMY_HASH
+
+
+def _prune(user: User) -> None:
+    """Drop session entries whose tokens have expired anyway.
+
+    Args:
+        user: Account to tidy, modified in place.
+    """
+    now = int(time.time())
+    user.revoked_sessions = {k: v for k, v in user.revoked_sessions.items() if v > now}
+    user.session_failures = {
+        k: v for k, v in user.session_failures.items() if v["until"] > now
+    }

{boneio-1.6.0.dev22 → boneio-1.6.0.dev23}/boneio/core/manager/security_alert.py

@@ -164,8 +164,36 @@ class SecurityAlertPublisher:
             # Still publish: the entity may already exist from a previous run,
             # and a stale retained state is worse than a corrected one.
 
+        try:
+            from boneio.integration.homeassistant import ha_security_event_message
+
+            self._manager.publish_ha_discovery(
+                id="security_event",
+                ha_type="event",
+                payload=ha_security_event_message(
+                    config_helper=self._manager._config_helper
+                ),
+            )
+        except Exception as err:  # noqa: BLE001 - discovery must not stop startup
+            _LOGGER.warning("Could not register the security events entity: %s", err)
+
         await self.publish_state()
 
+    def publish_event(self, payload: dict) -> None:
+        """Fire the Security events entity.
+
+        Not retained: an event is something that happened, and a retained one
+        would fire again every time Home Assistant reconnects.
+
+        Args:
+            payload: ``{"event_type": ..., ...}`` from boneio.webui.security_events.
+        """
+        self._manager.send_message(
+            topic=f"{self._manager._topic_prefix}/security/event",
+            payload=json.dumps(payload),
+            retain=False,
+        )
+
     async def publish_state(self) -> None:
         """Publish the current posture.
 

{boneio-1.6.0.dev22 → boneio-1.6.0.dev23}/boneio/integration/homeassistant.py

@@ -1506,6 +1506,40 @@ def ha_security_alert_availability_message(
     return msg
 
 
+def ha_security_event_message(
+    config_helper: ConfigHelper,
+    **kwargs,
+) -> HomeAssistantDiscoveryMessage:
+    """Create the Security events entity (diagnostic) for HA.
+
+    An ``event`` entity, like a button's: it fires when somebody guesses a
+    password, so an automation can turn that into a notification. The types
+    are the ones boneio.webui.security_events sends, and HA refuses any other.
+
+    Args:
+        config_helper: ConfigHelper instance.
+        **kwargs: Additional fields forwarded to ``ha_availabilty_message``.
+
+    Returns:
+        HA discovery message dict for the event entity.
+    """
+    from boneio.webui.security_events import EVENT_TYPES
+
+    msg = ha_availabilty_message(
+        id="security_event",
+        name="Security events",
+        entity_type="event",
+        config_helper=config_helper,
+        device_type="update",
+        **kwargs,
+    )
+    msg["state_topic"] = f"{config_helper.topic_prefix}/security/event"
+    msg["event_types"] = list(EVENT_TYPES)
+    msg["icon"] = "mdi:shield-key"
+    msg["entity_category"] = "diagnostic"
+    return msg
+
+
 def ha_climate_availability_message(
     id: str,
     name: str,

{boneio-1.6.0.dev22 → boneio-1.6.0.dev23}/boneio/migrations/plans/manifest.json

@@ -1 +1 @@
-{"plans":{"1.3.0":"645ac6bdda8dc0a73c219aa3684a29df4bdd4032aad97a833b259de489b2ce32","1.3.1":"580381a4f6f40fc1bd4e903e591ad0d5c1db27daaccafc6f79dabf8c3b84259a","1.3.2":"7a69ffaf0c41438be25a656dcdc87783daac0eae79218d023648ef9d708e373f","1.4.0":"41c3a16e7819857a4b826e944fcfb4f79c58e7192cb151b106a3acd7487d5771","1.4.3":"a8cfbabff09d21944a822c4a70f23a7ee14960c4054de151c9fbc7cdb29adff5","1.4.4":"19508f66d84f1e16bd24932aaa17d45417912ffd1c20d326b2f003b931ac2f8c","1.5.0":"52d9d118da099abda0e0153cd16892e201681f6e4d3c6e5790284d1ac469a407","1.5.1":"d283cb8c01024338fb614ae2199744d883379f59579423e4eb9234f5c59ebdd8","1.5.10":"889e2f12614e6e67d342571c1c3bab8940659bfbbf43fa30a6847e73decb85d1","1.5.11":"4906e4de2b3a9c2f0b0181817c9dc168cb910ba6941691d4e86b8387802b624a","1.5.12":"c0a0dc085bb33d9718e869ed5effc2c1581deffd7ed0d5adc119b94312181625","1.5.13":"bfe58c8756f9b5f5e55d5acbb6f7cfc469d201004d312c14e022eb7c52369b7d","1.5.14":"a0464f11e05128cba8881e6295e591fce1ed1e8d43ab0e16710effb8e543d810","1.5.15":"0687a735cb4aaf8f8f74ad6e228ca1b14e045cba8821991c7d19fc9beaeac766","1.5.16":"3544ac754f39d56ecf2b06300b7cca1b6f8723f99885cd11bd690f1a704d3728","1.5.17":"cf1e9e0ff6812cb7092a82dd588392d625decbe3680fe003dfc554f9045809d3","1.5.18":"1fd873effa66b632217d674745722f712a48b36bb79957fefae722757a74bc30","1.5.2":"39fccb7582e13e7e3436861fde7b83ddb8057788cbde792f2f0cf7003f068850","1.5.3":"39fccb7582e13e7e3436861fde7b83ddb8057788cbde792f2f0cf7003f068850","1.5.4":"e86174ba5aff6f257f8a3f4721c7942885cd203469a9d8ddc15dbe6c704e0f45","1.5.5":"f93ed2d4342e447eb9900a0150331113918f2a8b3baeeb795c07231d80f0337c","1.5.6":"e3d90e6ceb20d760f1e9fa63224c5a070a16b3ca6e7dc4cc2c594138e929cce8","1.5.7":"a0464f11e05128cba8881e6295e591fce1ed1e8d43ab0e16710effb8e543d810","1.5.8":"f075b84fb04f4043658a28402d963494dd58481f164c0b371cec94322fe6d131","1.5.9":"ac170fc924019fc2acd69a90a82ba5c2552dce7a2c01a05e5407443e7a9e5af7","1.6.0":"c8286514d1a4f1805e727e13d3c350bb390378c6f31ad6920030412d61ec9b3f","1.6.1":"aa1d3934091853fc21208993930c1bf92e17136428d1d0baaefabfa65d13e7fa","1.6.10":"41c3a16e7819857a4b826e944fcfb4f79c58e7192cb151b106a3acd7487d5771","1.6.11":"d136203e08e3b052254403815d4ccedb555b0a297686fe97952d275eb1f322eb","1.6.12":"c328d4e36bd6277e01cef0140993e23970f4dff84425f3eba236cdd9a8954355","1.6.13":"f1f8b091d054a08665f047b5ad91f1f309f729a8aa30a2992d6ffdbd7f9fa7e4","1.6.14":"f1f8b091d054a08665f047b5ad91f1f309f729a8aa30a2992d6ffdbd7f9fa7e4","1.6.15":"8cfaeae24ceefe171d40241549c1f62527ce41821e5fd2904c0df1973596c0c7","1.6.16":"4b7e00dbe218a173ee83dd9cb32103f7129520352bdb4b11172d62e55df519c1","1.6.17":"44a9691862e7bf0f3a1df3d02df0524625b3ce3bb0edb0c947388e13dcf536e6","1.6.18":"44a9691862e7bf0f3a1df3d02df0524625b3ce3bb0edb0c947388e13dcf536e6","1.6.19":"4b7e00dbe218a173ee83dd9cb32103f7129520352bdb4b11172d62e55df519c1","1.6.2":"6ef96b5e00a04a929d16f0e4a136bfcc5b8132a466d6907a99b2c8516a8952d5","1.6.20":"28027c836eef19b21b95500760961e181f6078d22cccf8cca62b77bbbb11a0c5","1.6.21":"b0d0777e81edc8532d42bcd3b6d518fecd6078153dfe9f5f859469d2c13b369d","1.6.22":"685c74a48ddc89575c8c756fe0b151432ef73bb68a2aa2c02ff1437cf82b17e1","1.6.23":"4b7e00dbe218a173ee83dd9cb32103f7129520352bdb4b11172d62e55df519c1","1.6.24":"701460ed5e3ed236c8c7273ba0a98a0235786b4a04bd6c7aa6088fb835549aa6","1.6.25":"efa09d1677148bdfe4639273479c9a1fa527d4cf5d2ca9af6dd876883652ba22","1.6.26":"44a9691862e7bf0f3a1df3d02df0524625b3ce3bb0edb0c947388e13dcf536e6","1.6.27":"44a9691862e7bf0f3a1df3d02df0524625b3ce3bb0edb0c947388e13dcf536e6","1.6.3":"5c10db827bcb92b9322d4aa5751076b825da87c6d18d6953847ba72317cca862","1.6.4":"baf2bb1c2ec7c1bfccfc514ef1cef67907e056e4f7153bb5932ecb835c9cff78","1.6.5":"c15567ca0457e57b674081cda13b48157657acd61126c705ab20eb55a0bb339e","1.6.6":"535bb041b99d5ac1bc9028ea88bc2fbf3dbadc80ea8dea236cc219123c194114","1.6.7":"d59af413e270e6f34b1b9a1c8c4acef35328f00e26fad447cfe214545af78d8f","1.6.8":"162fdff235a5cede0fd8994c4d90bb2c14d559c83f66baf6d059a7da1ce32f7d","1.6.9":"dcd16b769f063d06c81686cd5f23ac45065a0750d64396db8fd7a2b755f233e4"},"release":"1.6.0.dev22"}
+{"plans":{"1.3.0":"645ac6bdda8dc0a73c219aa3684a29df4bdd4032aad97a833b259de489b2ce32","1.3.1":"580381a4f6f40fc1bd4e903e591ad0d5c1db27daaccafc6f79dabf8c3b84259a","1.3.2":"7a69ffaf0c41438be25a656dcdc87783daac0eae79218d023648ef9d708e373f","1.4.0":"41c3a16e7819857a4b826e944fcfb4f79c58e7192cb151b106a3acd7487d5771","1.4.3":"a8cfbabff09d21944a822c4a70f23a7ee14960c4054de151c9fbc7cdb29adff5","1.4.4":"19508f66d84f1e16bd24932aaa17d45417912ffd1c20d326b2f003b931ac2f8c","1.5.0":"52d9d118da099abda0e0153cd16892e201681f6e4d3c6e5790284d1ac469a407","1.5.1":"d283cb8c01024338fb614ae2199744d883379f59579423e4eb9234f5c59ebdd8","1.5.10":"889e2f12614e6e67d342571c1c3bab8940659bfbbf43fa30a6847e73decb85d1","1.5.11":"4906e4de2b3a9c2f0b0181817c9dc168cb910ba6941691d4e86b8387802b624a","1.5.12":"c0a0dc085bb33d9718e869ed5effc2c1581deffd7ed0d5adc119b94312181625","1.5.13":"bfe58c8756f9b5f5e55d5acbb6f7cfc469d201004d312c14e022eb7c52369b7d","1.5.14":"a0464f11e05128cba8881e6295e591fce1ed1e8d43ab0e16710effb8e543d810","1.5.15":"0687a735cb4aaf8f8f74ad6e228ca1b14e045cba8821991c7d19fc9beaeac766","1.5.16":"3544ac754f39d56ecf2b06300b7cca1b6f8723f99885cd11bd690f1a704d3728","1.5.17":"cf1e9e0ff6812cb7092a82dd588392d625decbe3680fe003dfc554f9045809d3","1.5.18":"1fd873effa66b632217d674745722f712a48b36bb79957fefae722757a74bc30","1.5.2":"39fccb7582e13e7e3436861fde7b83ddb8057788cbde792f2f0cf7003f068850","1.5.3":"39fccb7582e13e7e3436861fde7b83ddb8057788cbde792f2f0cf7003f068850","1.5.4":"e86174ba5aff6f257f8a3f4721c7942885cd203469a9d8ddc15dbe6c704e0f45","1.5.5":"f93ed2d4342e447eb9900a0150331113918f2a8b3baeeb795c07231d80f0337c","1.5.6":"e3d90e6ceb20d760f1e9fa63224c5a070a16b3ca6e7dc4cc2c594138e929cce8","1.5.7":"a0464f11e05128cba8881e6295e591fce1ed1e8d43ab0e16710effb8e543d810","1.5.8":"f075b84fb04f4043658a28402d963494dd58481f164c0b371cec94322fe6d131","1.5.9":"ac170fc924019fc2acd69a90a82ba5c2552dce7a2c01a05e5407443e7a9e5af7","1.6.0":"c8286514d1a4f1805e727e13d3c350bb390378c6f31ad6920030412d61ec9b3f","1.6.1":"aa1d3934091853fc21208993930c1bf92e17136428d1d0baaefabfa65d13e7fa","1.6.10":"41c3a16e7819857a4b826e944fcfb4f79c58e7192cb151b106a3acd7487d5771","1.6.11":"d136203e08e3b052254403815d4ccedb555b0a297686fe97952d275eb1f322eb","1.6.12":"c328d4e36bd6277e01cef0140993e23970f4dff84425f3eba236cdd9a8954355","1.6.13":"f1f8b091d054a08665f047b5ad91f1f309f729a8aa30a2992d6ffdbd7f9fa7e4","1.6.14":"f1f8b091d054a08665f047b5ad91f1f309f729a8aa30a2992d6ffdbd7f9fa7e4","1.6.15":"8cfaeae24ceefe171d40241549c1f62527ce41821e5fd2904c0df1973596c0c7","1.6.16":"4b7e00dbe218a173ee83dd9cb32103f7129520352bdb4b11172d62e55df519c1","1.6.17":"44a9691862e7bf0f3a1df3d02df0524625b3ce3bb0edb0c947388e13dcf536e6","1.6.18":"44a9691862e7bf0f3a1df3d02df0524625b3ce3bb0edb0c947388e13dcf536e6","1.6.19":"4b7e00dbe218a173ee83dd9cb32103f7129520352bdb4b11172d62e55df519c1","1.6.2":"6ef96b5e00a04a929d16f0e4a136bfcc5b8132a466d6907a99b2c8516a8952d5","1.6.20":"28027c836eef19b21b95500760961e181f6078d22cccf8cca62b77bbbb11a0c5","1.6.21":"b0d0777e81edc8532d42bcd3b6d518fecd6078153dfe9f5f859469d2c13b369d","1.6.22":"685c74a48ddc89575c8c756fe0b151432ef73bb68a2aa2c02ff1437cf82b17e1","1.6.23":"4b7e00dbe218a173ee83dd9cb32103f7129520352bdb4b11172d62e55df519c1","1.6.24":"701460ed5e3ed236c8c7273ba0a98a0235786b4a04bd6c7aa6088fb835549aa6","1.6.25":"efa09d1677148bdfe4639273479c9a1fa527d4cf5d2ca9af6dd876883652ba22","1.6.26":"44a9691862e7bf0f3a1df3d02df0524625b3ce3bb0edb0c947388e13dcf536e6","1.6.27":"44a9691862e7bf0f3a1df3d02df0524625b3ce3bb0edb0c947388e13dcf536e6","1.6.3":"5c10db827bcb92b9322d4aa5751076b825da87c6d18d6953847ba72317cca862","1.6.4":"baf2bb1c2ec7c1bfccfc514ef1cef67907e056e4f7153bb5932ecb835c9cff78","1.6.5":"c15567ca0457e57b674081cda13b48157657acd61126c705ab20eb55a0bb339e","1.6.6":"535bb041b99d5ac1bc9028ea88bc2fbf3dbadc80ea8dea236cc219123c194114","1.6.7":"d59af413e270e6f34b1b9a1c8c4acef35328f00e26fad447cfe214545af78d8f","1.6.8":"162fdff235a5cede0fd8994c4d90bb2c14d559c83f66baf6d059a7da1ce32f7d","1.6.9":"dcd16b769f063d06c81686cd5f23ac45065a0750d64396db8fd7a2b755f233e4"},"release":"1.6.0.dev23"}

{boneio-1.6.0.dev22 → boneio-1.6.0.dev23}/boneio/migrations/runner.py

@@ -163,6 +163,9 @@ class MigrationRunner:
         self._applied: set[str] = set()
         self._v2_available: bool | None = None
         self.hardening_pending: bool = False
+        # A skipped migration never gets its applied flag, so every status
+        # request finds it again; say so once per process, not on each poll.
+        self._skips_logged: set[str] = set()
 
     # ------------------------------------------------------------------
     # Public API
@@ -691,11 +694,13 @@ class MigrationRunner:
             if successor and successor in known and (
                 successor in pending_versions or successor in self._applied
             ):
-                _LOGGER.info(
-                    "Skipping %s: %s does everything it does.",
-                    migration.version,
-                    successor,
-                )
+                if migration.version not in self._skips_logged:
+                    self._skips_logged.add(migration.version)
+                    _LOGGER.info(
+                        "Skipping %s: %s does everything it does.",
+                        migration.version,
+                        successor,
+                    )
                 continue
             kept.append(migration)
         return kept

boneio-1.6.0.dev23/boneio/version.py

@@ -0,0 +1,2 @@
+# flake8: noqa
+__version__ = "1.6.0.dev23"

{boneio-1.6.0.dev22 → boneio-1.6.0.dev23}/boneio/webui/app.py

@@ -46,6 +46,8 @@ from boneio.models.events import (
 from boneio.models.state import ModbusDeviceState
 from boneio.version import __version__
 from boneio.webui.middleware.csrf import CSRFMiddleware
+from boneio.webui.middleware.proxy import TrustedProxyMiddleware
+from boneio.webui import security_events
 from boneio.webui.security_headers import apply_security_headers
 from boneio.webui.middleware.auth import (
     AuthMiddleware,
@@ -865,6 +867,12 @@ def init_app(
 
     # Set app state
     app.state.manager = manager
+    # Password guessing and the sessions signed out for it go to Home
+    # Assistant through the manager's MQTT link.
+    security_alert = getattr(manager, "security_alert", None)
+    security_events.set_publisher(
+        security_alert.publish_event if security_alert is not None else None
+    )
     app.state.auth_config = auth_config
     app.state.yaml_config_file = yaml_config_file
     app.state.web_server = web_server
@@ -998,6 +1006,10 @@ def init_app(
     # Add GZip compression
     app.add_middleware(GZipMiddleware, minimum_size=500)
 
+    # Last added runs first: the real client address has to be in place before
+    # anything reads it — the login throttle, the logs, the auth middleware.
+    app.add_middleware(TrustedProxyMiddleware)
+
     return app
 
 

{boneio-1.6.0.dev22 → boneio-1.6.0.dev23}/boneio/webui/bind.py

@@ -18,6 +18,7 @@ belongs to Docker and an operator can change it in daemon.json.
 
 from __future__ import annotations
 
+import ipaddress
 import json
 import logging
 import ssl
@@ -111,6 +112,30 @@ def _addresses_of(prefixes: tuple[str, ...]) -> list[str]:
     return sorted(set(addresses))
 
 
+def docker_bridge_networks() -> list[ipaddress.IPv4Network]:
+    """The IPv4 networks of the host's Docker bridges.
+
+    Containers talk to the host from inside these — the reverse proxy among
+    them — so a request arriving from one came from this controller, not from
+    the LAN.
+
+    Returns:
+        Networks, deduplicated, or an empty list when none can be found.
+    """
+    networks: set[ipaddress.IPv4Network] = set()
+    try:
+        for name, addrs in psutil.net_if_addrs().items():
+            if not name.startswith(_BRIDGE_PREFIXES):
+                continue
+            for addr in addrs:
+                if int(getattr(addr, "family", 0)) != 2 or not addr.address or not addr.netmask:
+                    continue
+                networks.add(ipaddress.IPv4Network(f"{addr.address}/{addr.netmask}", strict=False))
+    except Exception as err:  # noqa: BLE001
+        _LOGGER.warning("Could not enumerate network interfaces: %s", err)
+    return sorted(networks)
+
+
 #: How long to wait for a Docker bridge to appear before giving up on it.
 #:
 #: boneIO deliberately does not start after docker.service — it drives relays,

boneio-1.6.0.dev23/boneio/webui/frontend-dist/assets/AccountsView-Cja7P4mF.js

@@ -0,0 +1 @@
+import{r as e}from"./rolldown-runtime-hePW80VL.js";import{gn as t,hn as n,ln as r,sn as i}from"./fa-BhM0fApf.js";import{n as a}from"./axios-DulIOGd1.js";import{F as o,I as s,N as c,P as l,R as u,T as d,h as f,m as p,y as m}from"./index-CxfYcGSv.js";var h=e(t(),1),g=n();function _(e,t){return e?.response?.data?.detail||t}function v(){let{t:e}=s(),{username:t,isAdmin:n}=u(),[v,y]=(0,h.useState)([]),[b,x]=(0,h.useState)(!0),[S,C]=(0,h.useState)(null),[w,T]=(0,h.useState)(null),[E,D]=(0,h.useState)(``),[O,k]=(0,h.useState)(``),[A,j]=(0,h.useState)(`viewer`),[M,N]=(0,h.useState)(!1),P=O?o(O,E):null,F=P?e(l[P],{min:8}):null,I=(0,h.useCallback)(async()=>{try{let{data:e}=await a.get(`/api/accounts`);y(e.accounts??[]),C(null)}catch(t){C(_(t,e(`accounts.load_failed`)))}finally{x(!1)}},[e]);(0,h.useEffect)(()=>{n&&I()},[n,I]);let L=async t=>{t.preventDefault(),C(null),T(null),N(!0);try{await a.post(`/api/accounts`,{username:E,password:O,role:A}),D(``),k(``),j(`viewer`),T(e(`accounts.created`)),await I()}catch(t){C(_(t,e(`accounts.create_failed`)))}finally{N(!1)}},R=async t=>{if(window.confirm(e(`accounts.confirm_delete`,{username:t.username}))){C(null),T(null);try{await a.delete(`/api/accounts/${encodeURIComponent(t.username)}`),T(e(`accounts.deleted`,{username:t.username})),await I()}catch(t){C(_(t,e(`accounts.delete_failed`)))}}},z=async(t,n)=>{C(null),T(null);try{await a.put(`/api/accounts/${encodeURIComponent(t.username)}/role`,{role:n}),await I()}catch(t){C(_(t,e(`accounts.role_failed`))),await I()}},B=async t=>{let n=window.prompt(e(`accounts.prompt_new_password`,{username:t.username}));if(!n)return;C(null),T(null);let r=o(n,t.username);if(r){C(e(l[r],{min:8}));return}try{let{data:r}=await a.put(`/api/accounts/${encodeURIComponent(t.username)}/password`,{password:n});typeof r?.token==`string`&&localStorage.setItem(`token`,r.token),T(e(`accounts.password_reset`,{username:t.username}))}catch(t){C(_(t,e(`accounts.password_failed`)))}};return n?(0,g.jsxs)(d,{width:`wide`,children:[S&&(0,g.jsx)(c,{variant:`error`,message:S}),w&&(0,g.jsx)(c,{variant:`success`,message:w}),(0,g.jsx)(m,{icon:(0,g.jsx)(r,{}),title:e(`accounts.title`),children:b?(0,g.jsx)(`div`,{className:`flex justify-center py-6`,children:(0,g.jsx)(`span`,{className:`loading loading-spinner loading-md text-primary`})}):(0,g.jsx)(`div`,{className:`stg-inset overflow-x-auto`,children:(0,g.jsxs)(`table`,{className:`table table-sm`,children:[(0,g.jsx)(`thead`,{children:(0,g.jsxs)(`tr`,{children:[(0,g.jsx)(`th`,{children:e(`accounts.username`)}),(0,g.jsx)(`th`,{children:e(`accounts.role`)}),(0,g.jsx)(`th`,{className:`text-right`,children:e(`accounts.actions`)})]})}),(0,g.jsx)(`tbody`,{children:v.map(n=>{let r=n.username.toLowerCase()===(t??``).toLowerCase();return(0,g.jsxs)(`tr`,{children:[(0,g.jsxs)(`td`,{children:[(0,g.jsx)(`span`,{className:`font-medium font-mono`,children:n.username}),r&&(0,g.jsx)(`span`,{className:`ml-2 badge badge-ghost badge-xs`,children:e(`accounts.you`)})]}),(0,g.jsx)(`td`,{children:(0,g.jsxs)(`select`,{className:`select select-xs select-bordered`,value:n.role,disabled:r,onChange:e=>z(n,e.target.value),children:[(0,g.jsx)(`option`,{value:`admin`,children:e(`accounts.role_admin`)}),(0,g.jsx)(`option`,{value:`viewer`,children:e(`accounts.role_viewer`)})]})}),(0,g.jsxs)(`td`,{className:`text-right whitespace-nowrap`,children:[(0,g.jsx)(`button`,{className:`btn btn-ghost btn-xs`,onClick:()=>B(n),children:e(`accounts.reset_password`)}),(0,g.jsx)(`button`,{className:`btn btn-ghost btn-xs text-error ml-1`,disabled:r,onClick:()=>R(n),children:e(`accounts.delete`)})]})]},n.username)})})]})})}),(0,g.jsx)(`form`,{onSubmit:L,children:(0,g.jsx)(m,{icon:(0,g.jsx)(i,{}),title:e(`accounts.add_title`),description:e(`accounts.add_intro`),footer:(0,g.jsx)(p,{children:(0,g.jsxs)(`button`,{type:`submit`,className:`btn btn-primary btn-sm gap-2`,disabled:M||!E||!O||!!F,children:[M&&(0,g.jsx)(`span`,{className:`loading loading-spinner loading-xs`}),e(`accounts.add_button`)]})}),children:(0,g.jsxs)(`div`,{className:`grid grid-cols-1 sm:grid-cols-[1fr_1fr_auto] gap-3`,children:[(0,g.jsx)(f,{label:e(`accounts.username`),children:(0,g.jsx)(`input`,{type:`text`,className:`input input-bordered w-full font-mono`,placeholder:e(`accounts.username`),autoComplete:`off`,required:!0,value:E,onChange:e=>D(e.target.value)})}),(0,g.jsx)(f,{label:e(`accounts.password`),error:F||void 0,children:(0,g.jsx)(`input`,{type:`password`,className:`input input-bordered w-full font-mono ${F?`input-error`:``}`,placeholder:e(`accounts.password`),autoComplete:`new-password`,required:!0,minLength:8,"aria-invalid":F?!0:void 0,"aria-describedby":F?`accounts-password-error`:void 0,value:O,onChange:e=>k(e.target.value)})}),(0,g.jsx)(f,{label:e(`accounts.role`),className:`sm:w-40`,children:(0,g.jsxs)(`select`,{className:`select select-bordered w-full`,value:A,onChange:e=>j(e.target.value),children:[(0,g.jsx)(`option`,{value:`viewer`,children:e(`accounts.role_viewer`)}),(0,g.jsx)(`option`,{value:`admin`,children:e(`accounts.role_admin`)})]})})]})})})]}):(0,g.jsx)(d,{width:`wide`,children:(0,g.jsx)(c,{variant:`warning`,message:e(`accounts.admin_only`)})})}export{v as default};

boneio-1.6.0.dev22/boneio/webui/frontend-dist/assets/AppInitContext-BL616lQR.js → boneio-1.6.0.dev23/boneio/webui/frontend-dist/assets/AppInitContext-CcKaS8cK.js

@@ -1 +1 @@
-import{r as e}from"./rolldown-runtime-hePW80VL.js";import{gn as t,hn as n}from"./fa-BhM0fApf.js";import{n as r}from"./axios-DJBeJS4R.js";import{i}from"./configCache-BS98BpF9.js";var a=e(t(),1),o=`boneio-provisioned`;function s(e){let t=e?.match(/\/(proxy\/\d+)\/?$/);return t?`${o}-${t[1].replace(`/`,`-`)}`:o}function c(e,t){try{return e?.getItem(s(t))===`1`}catch{return!1}}function l(e,t,n){try{e?.setItem(s(t),n?`0`:`1`)}catch{}}var u=`boneio-update`,d=`boneio-stale-reload`;function f(e,t){let n=t?.match(/\/(proxy\/\d+)\/?$/);return n?`${e}-${n[1].replace(`/`,`-`)}`:e}function p(e){if(!e)return null;let t=e.trim();return t.startsWith(`v`)?t.slice(1):t}function m(e,t,n){try{let r=e?.getItem(f(u,t));if(!r)return null;let i=JSON.parse(r);return typeof i?.startedAt!=`number`||typeof i.fromVersion!=`string`||n-i.startedAt>36e5||i.startedAt>n+6e4?null:i}catch{return null}}function h(e,t,n){try{e?.setItem(f(u,t),JSON.stringify(n))}catch{}}function g(e,t){try{e?.removeItem(f(u,t))}catch{}}function _(e,t,n){if(t)return e.wentDown||e.downSince===void 0?e:{...e,downSince:void 0};let r=e.downSince??n,i=!!e.wentDown||n-r>=15e3;return r===e.downSince&&i===!!e.wentDown?e:{...e,downSince:r,wentDown:i}}function v(e,t){let n=p(t);if(!n)return!1;let r=p(e.toVersion);return r?n===r:n!==p(e.fromVersion)}function y(e){let{reachable:t,serverVersion:n,panelVersion:r,mark:i}=e;if(!t)return i?`updating`:`probably_updating`;let a=p(n),o=p(r);return a&&o&&a!==o?`stale_panel`:i&&i.wentDown&&a&&!v(i,a)&&a===p(i.fromVersion)?`update_failed`:`ok`}function b(e,t){try{return e?.getItem(d)===t}catch{return!0}}function x(e,t){try{e?.setItem(d,t)}catch{}}var S=n(),C=(0,a.createContext)({data:null,isLoading:!0,isApiAvailable:!0,needsOnboarding:!1,panelState:`ok`,dismissPanelState:()=>{},refetch:async()=>{}});function w(){return(0,a.useContext)(C)}function T(e,t){return e||!!t?.needs_onboarding}var E=2,D=1e3,O=3e4,k=5e3,A=`boneio-stale-bypass`,j=`1.6.0.dev22`;function M(e){try{return window.sessionStorage.getItem(e)}catch{return null}}function N({children:e}){let[t,n]=(0,a.useState)(null),[o,s]=(0,a.useState)(!0),[c,u]=(0,a.useState)(!0),[d,f]=(0,a.useState)(!1),[p,b]=(0,a.useState)(`ok`),x=(0,a.useCallback)((e,t)=>{let n=window.__BONEIO_BASE_PATH__,r=Date.now(),i=m(window.localStorage,n,r);if(i){let t=_(i,e,r);t!==i&&h(window.localStorage,n,t),i=t}i&&e&&v(i,t)&&(g(window.localStorage,n),i=null);let a=y({reachable:e,serverVersion:t,panelVersion:j,mark:i});a===`stale_panel`&&t&&M(A)===t&&(a=`ok`),b(a)},[]),w=(0,a.useCallback)(()=>{g(window.localStorage,window.__BONEIO_BASE_PATH__);let e=t?.version;if(p===`stale_panel`&&e)try{window.sessionStorage.setItem(A,e)}catch{}b(`ok`)},[t?.version,p]),N=(0,a.useCallback)(async()=>{for(let e=0;e<=E;e++)try{let{data:e}=await r.get(`/api/init`);n(t=>t&&JSON.stringify(t)===JSON.stringify(e)?t:e),f(t=>T(t,e)),l(window.localStorage,window.__BONEIO_BASE_PATH__,!!e?.needs_onboarding),x(!0,e?.version??null),u(!0),s(!1),i();return}catch{e<E&&await new Promise(e=>setTimeout(e,D))}x(!1,null),u(!1),s(!1)},[x]);(0,a.useEffect)(()=>{N()},[N]);let P=!c||p===`stale_panel`;return(0,a.useEffect)(()=>{let e=setInterval(N,P?k:O);return()=>clearInterval(e)},[N,P]),(0,a.useEffect)(()=>{let e=()=>{document.visibilityState===`visible`&&N()};return document.addEventListener(`visibilitychange`,e),()=>document.removeEventListener(`visibilitychange`,e)},[N]),(0,S.jsx)(C.Provider,{value:{data:t,isLoading:o,isApiAvailable:c,needsOnboarding:d,panelState:p,dismissPanelState:w,refetch:N},children:e})}export{p as a,v as c,g as i,h as l,w as n,x as o,b as r,m as s,N as t,c as u};
+import{r as e}from"./rolldown-runtime-hePW80VL.js";import{gn as t,hn as n}from"./fa-BhM0fApf.js";import{n as r}from"./axios-DulIOGd1.js";import{i}from"./configCache-CPKXFBoa.js";var a=e(t(),1),o=`boneio-provisioned`;function s(e){let t=e?.match(/\/(proxy\/\d+)\/?$/);return t?`${o}-${t[1].replace(`/`,`-`)}`:o}function c(e,t){try{return e?.getItem(s(t))===`1`}catch{return!1}}function l(e,t,n){try{e?.setItem(s(t),n?`0`:`1`)}catch{}}var u=`boneio-update`,d=`boneio-stale-reload`;function f(e,t){let n=t?.match(/\/(proxy\/\d+)\/?$/);return n?`${e}-${n[1].replace(`/`,`-`)}`:e}function p(e){if(!e)return null;let t=e.trim();return t.startsWith(`v`)?t.slice(1):t}function m(e,t,n){try{let r=e?.getItem(f(u,t));if(!r)return null;let i=JSON.parse(r);return typeof i?.startedAt!=`number`||typeof i.fromVersion!=`string`||n-i.startedAt>36e5||i.startedAt>n+6e4?null:i}catch{return null}}function h(e,t,n){try{e?.setItem(f(u,t),JSON.stringify(n))}catch{}}function g(e,t){try{e?.removeItem(f(u,t))}catch{}}function _(e,t,n){if(t)return e.wentDown||e.downSince===void 0?e:{...e,downSince:void 0};let r=e.downSince??n,i=!!e.wentDown||n-r>=15e3;return r===e.downSince&&i===!!e.wentDown?e:{...e,downSince:r,wentDown:i}}function v(e,t){let n=p(t);if(!n)return!1;let r=p(e.toVersion);return r?n===r:n!==p(e.fromVersion)}function y(e){let{reachable:t,serverVersion:n,panelVersion:r,mark:i}=e;if(!t)return i?`updating`:`probably_updating`;let a=p(n),o=p(r);return a&&o&&a!==o?`stale_panel`:i&&i.wentDown&&a&&!v(i,a)&&a===p(i.fromVersion)?`update_failed`:`ok`}function b(e,t){try{return e?.getItem(d)===t}catch{return!0}}function x(e,t){try{e?.setItem(d,t)}catch{}}var S=n(),C=(0,a.createContext)({data:null,isLoading:!0,isApiAvailable:!0,needsOnboarding:!1,panelState:`ok`,dismissPanelState:()=>{},refetch:async()=>{}});function w(){return(0,a.useContext)(C)}function T(e,t){return e||!!t?.needs_onboarding}var E=2,D=1e3,O=3e4,k=5e3,A=`boneio-stale-bypass`,j=`1.6.0.dev23`;function M(e){try{return window.sessionStorage.getItem(e)}catch{return null}}function N({children:e}){let[t,n]=(0,a.useState)(null),[o,s]=(0,a.useState)(!0),[c,u]=(0,a.useState)(!0),[d,f]=(0,a.useState)(!1),[p,b]=(0,a.useState)(`ok`),x=(0,a.useCallback)((e,t)=>{let n=window.__BONEIO_BASE_PATH__,r=Date.now(),i=m(window.localStorage,n,r);if(i){let t=_(i,e,r);t!==i&&h(window.localStorage,n,t),i=t}i&&e&&v(i,t)&&(g(window.localStorage,n),i=null);let a=y({reachable:e,serverVersion:t,panelVersion:j,mark:i});a===`stale_panel`&&t&&M(A)===t&&(a=`ok`),b(a)},[]),w=(0,a.useCallback)(()=>{g(window.localStorage,window.__BONEIO_BASE_PATH__);let e=t?.version;if(p===`stale_panel`&&e)try{window.sessionStorage.setItem(A,e)}catch{}b(`ok`)},[t?.version,p]),N=(0,a.useCallback)(async()=>{for(let e=0;e<=E;e++)try{let{data:e}=await r.get(`/api/init`);n(t=>t&&JSON.stringify(t)===JSON.stringify(e)?t:e),f(t=>T(t,e)),l(window.localStorage,window.__BONEIO_BASE_PATH__,!!e?.needs_onboarding),x(!0,e?.version??null),u(!0),s(!1),i();return}catch{e<E&&await new Promise(e=>setTimeout(e,D))}x(!1,null),u(!1),s(!1)},[x]);(0,a.useEffect)(()=>{N()},[N]);let P=!c||p===`stale_panel`;return(0,a.useEffect)(()=>{let e=setInterval(N,P?k:O);return()=>clearInterval(e)},[N,P]),(0,a.useEffect)(()=>{let e=()=>{document.visibilityState===`visible`&&N()};return document.addEventListener(`visibilitychange`,e),()=>document.removeEventListener(`visibilitychange`,e)},[N]),(0,S.jsx)(C.Provider,{value:{data:t,isLoading:o,isApiAvailable:c,needsOnboarding:d,panelState:p,dismissPanelState:w,refetch:N},children:e})}export{p as a,v as c,g as i,h as l,w as n,x as o,b as r,m as s,N as t,c as u};

boneio-1.6.0.dev22/boneio/webui/frontend-dist/assets/BackupSection-Dsjck3YU.js → boneio-1.6.0.dev23/boneio/webui/frontend-dist/assets/BackupSection-CXs6ghs_.js

@@ -1 +1 @@
-import{r as e}from"./rolldown-runtime-hePW80VL.js";import{Gt as t,N as n,R as r,U as i,gn as a,hn as o,in as s,on as c,rn as l}from"./fa-BhM0fApf.js";import{a as u,i as d,n as f,o as p,t as m}from"./dialog-Dyh6AFFV.js";import{n as h}from"./axios-DJBeJS4R.js";import{I as g,N as _,T as v,m as y,y as b}from"./index-0xWkEPA0.js";var x=e(a(),1),S=o();function C(){let{t:e}=g(),a=(0,x.useRef)(null),[o,C]=(0,x.useState)(!1),[w,T]=(0,x.useState)(!1),[E,D]=(0,x.useState)(null),[O,k]=(0,x.useState)(null),[A,j]=(0,x.useState)([]),[M,N]=(0,x.useState)(!1),[P,F]=(0,x.useState)(null),I=(0,x.useCallback)(async()=>{try{let{data:e}=await h.get(`/api/config/backups`);j(e.backups||[])}catch(e){console.error(`Error fetching available backups:`,e)}},[]);(0,x.useEffect)(()=>{I()},[I]);let L=async()=>{C(!0),k(null);try{let{data:e}=await h.post(`/api/config/create_backup`);e.status===`success`?(await I(),alert(e.message)):k(e.message)}catch(t){k(e(`backup.error`)),console.error(`Error creating backup:`,t)}finally{C(!1)}},R=async(t,n)=>{try{let e=(await h.get(`/api/config/download_backup?backup_path=${encodeURIComponent(t)}`,{responseType:`blob`})).data,r=window.URL.createObjectURL(e),i=document.createElement(`a`);i.href=r,i.download=n,document.body.appendChild(i),i.click(),window.URL.revokeObjectURL(r),document.body.removeChild(i)}catch(t){k(e(`backup.error`)),console.error(`Error downloading backup:`,t)}},z=async(t,n)=>{if(confirm(`${e(`device_management.confirm_delete_backup`)||`Delete backup`} ${n}?`))try{let{data:e}=await h.delete(`/api/config/delete_backup`,{data:{backup_path:t}});e.status===`success`?(await I(),alert(e.message)):k(e.message)}catch(t){k(e(`backup.error`)),console.error(`Error deleting backup:`,t)}},B=async t=>{t.status===`success`?(D(t),confirm(e(`device_management.restore_success_restart`))&&(await h.post(`/api/restart`),setTimeout(()=>window.location.reload(),3e3))):k(t.message||e(`device_management.restore_failed`))},V=async(t,n)=>{T(!0);try{let{data:e}=await h.post(`/api/config/restore_backup`,{backup_path:t,override_serial:n},{timeout:3e4});await B(e)}catch(t){k(e(`device_management.restore_failed`)),console.error(`Error restoring config:`,t)}finally{T(!1)}},H=async t=>{T(!0),k(null),D(null);try{let{data:n}=await h.post(`/api/config/inspect_backup_path`,{backup_path:t});n.serial_mismatch?F({backupMeta:n.backup_meta,currentSerial:n.current_serial,onConfirm:e=>{F(null),V(t,e)},onCancel:()=>{F(null),T(!1)}}):confirm(e(`device_management.confirm_restore`))?await V(t,!1):T(!1)}catch(t){k(e(`device_management.restore_failed`)),console.error(`Error inspecting backup path:`,t),T(!1)}},U=async()=>{C(!0),k(null);try{let e=await h.get(`/api/config/download`,{responseType:`blob`}),t=e.headers[`content-disposition`],n=`boneio_config.tar.gz`;if(t){let e=t.match(/filename=(.+)/);e&&(n=e[1])}let r=e.data,i=window.URL.createObjectURL(r),a=document.createElement(`a`);a.href=i,a.download=n,document.body.appendChild(a),a.click(),window.URL.revokeObjectURL(i),document.body.removeChild(a)}catch(t){k(e(`backup.error`)),console.error(`Error downloading config:`,t)}finally{C(!1)}},W=async(t,n)=>{T(!0);try{let e=new FormData;e.append(`file`,t),e.append(`override_serial`,n?`true`:`false`);let{data:r}=await h.post(`/api/config/restore`,e,{headers:{"Content-Type":`multipart/form-data`},timeout:3e4});await B(r)}catch(t){k(e(`device_management.restore_failed`)),console.error(`Error restoring config:`,t)}finally{T(!1)}};return(0,S.jsxs)(v,{width:`wide`,children:[O&&(0,S.jsx)(_,{variant:`error`,message:O,action:(0,S.jsx)(`button`,{className:`btn btn-ghost btn-xs btn-circle`,onClick:()=>k(null),children:`×`})}),(0,S.jsx)(b,{icon:(0,S.jsx)(n,{}),title:e(`device_management.configuration_backup`),description:e(`device_management.backup_description`),footer:(0,S.jsxs)(y,{children:[(0,S.jsx)(`button`,{className:`btn btn-primary btn-sm gap-2`,onClick:U,disabled:o||w,children:o?(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(t,{className:`animate-spin`}),e(`device_management.preparing`)]}):(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(n,{}),e(`device_management.download_config`)]})}),(0,S.jsx)(`button`,{className:`btn btn-outline btn-sm gap-2`,onClick:()=>a.current?.click(),disabled:o||w,children:w?(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(t,{className:`animate-spin`}),e(`device_management.restoring`)]}):(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(c,{}),e(`device_management.restore_config`)]})})]}),children:(0,S.jsxs)(`div`,{className:`space-y-3`,children:[(0,S.jsx)(`input`,{ref:a,type:`file`,accept:`.tar.gz,.tgz`,onChange:async t=>{let n=t.target.files?.[0];if(n){T(!0),k(null),D(null);try{let t=new FormData;t.append(`file`,n);let{data:r}=await h.post(`/api/config/inspect_backup_file`,t,{headers:{"Content-Type":`multipart/form-data`}});r.serial_mismatch?F({backupMeta:r.backup_meta,currentSerial:r.current_serial,onConfirm:e=>{F(null),W(n,e)},onCancel:()=>{F(null),T(!1)}}):confirm(e(`device_management.confirm_restore`))?await W(n,!1):T(!1)}catch(t){k(e(`device_management.restore_failed`)),console.error(`Error inspecting backup file:`,t),T(!1)}}a.current&&(a.current.value=``)},style:{display:`none`}}),(0,S.jsx)(_,{variant:`info`,message:(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(`span`,{className:`block`,children:e(`device_management.backup_info_1`)}),(0,S.jsx)(`span`,{className:`block`,children:e(`device_management.backup_info_2`)}),(0,S.jsx)(`span`,{className:`block font-semibold mt-1`,children:e(`device_management.restore_info`)})]})}),E&&(0,S.jsx)(_,{variant:E.validation_status===`success`?`success`:`warning`,message:(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(`span`,{className:`block`,children:E.message}),(0,S.jsxs)(`span`,{className:`block text-xs opacity-70 mt-1 break-all`,children:[e(`device_management.backup_created`),`: `,E.backup_path]}),E.validation_status===`warning`&&(0,S.jsx)(`span`,{className:`block text-xs mt-1`,children:E.validation_message})]})})]})}),(0,S.jsx)(b,{icon:(0,S.jsx)(i,{}),title:e(`device_management.config_backups`),collapsible:A.length>0,open:M,onOpenChange:e=>{N(e),e&&I()},summary:A.length,action:(0,S.jsx)(`button`,{className:`btn btn-primary btn-sm gap-2`,onClick:L,disabled:o||w,children:o?(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(t,{className:`animate-spin`}),e(`device_management.preparing`)]}):(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(i,{}),e(`device_management.create_backup`)||`Create Backup`]})}),children:(0,S.jsxs)(`div`,{className:`space-y-3`,children:[(0,S.jsx)(_,{variant:`neutral`,message:e(`device_management.backup_limit_info`)||`Maximum 10 backups are kept. Oldest backups are automatically removed when creating new ones.`}),M&&A.length>0&&(0,S.jsx)(`div`,{className:`stg-inset overflow-x-auto`,children:(0,S.jsxs)(`table`,{className:`table table-sm`,children:[(0,S.jsx)(`thead`,{children:(0,S.jsxs)(`tr`,{children:[(0,S.jsx)(`th`,{children:e(`device_management.version`)}),(0,S.jsx)(`th`,{children:e(`device_management.date`)}),(0,S.jsx)(`th`,{children:e(`device_management.files`)}),(0,S.jsx)(`th`,{className:`text-right`,children:e(`device_management.actions`)})]})}),(0,S.jsx)(`tbody`,{children:A.map(t=>(0,S.jsxs)(`tr`,{children:[(0,S.jsx)(`td`,{className:`font-mono`,children:t.version}),(0,S.jsx)(`td`,{className:`text-xs font-mono`,children:t.timestamp}),(0,S.jsxs)(`td`,{children:[t.file_count,` `,e(`device_management.yaml_files`)]}),(0,S.jsx)(`td`,{children:(0,S.jsxs)(`div`,{className:`flex gap-1 justify-end`,children:[(0,S.jsxs)(`button`,{className:`btn btn-warning btn-xs gap-1.5`,onClick:()=>H(t.path),disabled:w,title:e(`device_management.restore`),children:[(0,S.jsx)(s,{}),e(`device_management.restore`)]}),(0,S.jsx)(`button`,{className:`btn btn-ghost btn-xs btn-square`,onClick:()=>R(t.path,t.filename),title:e(`device_management.download_config`),children:(0,S.jsx)(n,{})}),(0,S.jsx)(`button`,{className:`btn btn-ghost btn-xs btn-square text-error`,onClick:()=>z(t.path,t.filename),title:e(`device_management.delete`)||`Delete`,children:(0,S.jsx)(l,{})})]})})]},t.path))})]})})]})}),P&&(0,S.jsx)(m,{open:!0,onOpenChange:e=>{e||P.onCancel()},children:(0,S.jsxs)(f,{className:`max-w-md`,children:[(0,S.jsx)(u,{children:(0,S.jsxs)(p,{className:`flex items-center gap-2 text-warning`,children:[(0,S.jsx)(r,{}),e(`device_management.serial_mismatch_title`)||`Serial Number Mismatch`]})}),(0,S.jsxs)(`div`,{className:`py-4 text-sm space-y-4`,children:[(0,S.jsx)(`p`,{children:e(`device_management.serial_mismatch_desc`)||`The uploaded configuration backup was created on a device with a different serial number:`}),(0,S.jsxs)(`div`,{className:`bg-base-300 p-3 rounded-lg font-mono text-xs space-y-1`,children:[(0,S.jsxs)(`div`,{children:[(0,S.jsxs)(`span`,{className:`opacity-60`,children:[e(`device_management.backup_serial`)||`Backup Serial`,`:`]}),` `,(0,S.jsx)(`span`,{className:`text-warning font-semibold`,children:P.backupMeta?.effective_serial||`Unknown`})]}),P.backupMeta?.hostname&&(0,S.jsxs)(`div`,{children:[(0,S.jsxs)(`span`,{className:`opacity-60`,children:[e(`device_management.backup_hostname`)||`Backup Hostname`,`:`]}),` `,(0,S.jsx)(`span`,{children:P.backupMeta.hostname})]}),P.backupMeta?.created_at&&(0,S.jsxs)(`div`,{children:[(0,S.jsxs)(`span`,{className:`opacity-60`,children:[e(`device_management.backup_created_at`)||`Created At`,`:`]}),` `,(0,S.jsx)(`span`,{children:new Date(P.backupMeta.created_at).toLocaleString()})]}),(0,S.jsxs)(`div`,{children:[(0,S.jsxs)(`span`,{className:`opacity-60`,children:[e(`device_management.current_serial`)||`Current Serial`,`:`]}),` `,(0,S.jsx)(`span`,{className:`text-info font-semibold`,children:P.currentSerial})]})]}),(0,S.jsxs)(`div`,{className:`alert alert-warning text-xs`,children:[(0,S.jsx)(r,{className:`shrink-0`}),(0,S.jsx)(`span`,{children:e(`device_management.serial_override_warning`)||`WARNING: If both controllers are running at the same time on the same MQTT broker with the same serial number, conflicts will occur!`})]})]}),(0,S.jsxs)(d,{className:`flex flex-col sm:flex-row gap-2`,children:[(0,S.jsx)(`button`,{className:`btn btn-warning btn-sm`,onClick:()=>P.onConfirm(!0),children:e(`device_management.keep_old_serial`)||`Keep Old Serial`}),(0,S.jsx)(`button`,{className:`btn btn-outline btn-sm`,onClick:()=>P.onConfirm(!1),children:e(`device_management.use_new_serial`)||`Use New Serial`}),(0,S.jsx)(`button`,{className:`btn btn-ghost btn-sm`,onClick:P.onCancel,children:e(`common.cancel`)||`Cancel`})]})]})})]})}export{C as default};
+import{r as e}from"./rolldown-runtime-hePW80VL.js";import{Gt as t,N as n,R as r,U as i,gn as a,hn as o,in as s,on as c,rn as l}from"./fa-BhM0fApf.js";import{a as u,i as d,n as f,o as p,t as m}from"./dialog-Dyh6AFFV.js";import{n as h}from"./axios-DulIOGd1.js";import{I as g,N as _,T as v,m as y,y as b}from"./index-CxfYcGSv.js";var x=e(a(),1),S=o();function C(){let{t:e}=g(),a=(0,x.useRef)(null),[o,C]=(0,x.useState)(!1),[w,T]=(0,x.useState)(!1),[E,D]=(0,x.useState)(null),[O,k]=(0,x.useState)(null),[A,j]=(0,x.useState)([]),[M,N]=(0,x.useState)(!1),[P,F]=(0,x.useState)(null),I=(0,x.useCallback)(async()=>{try{let{data:e}=await h.get(`/api/config/backups`);j(e.backups||[])}catch(e){console.error(`Error fetching available backups:`,e)}},[]);(0,x.useEffect)(()=>{I()},[I]);let L=async()=>{C(!0),k(null);try{let{data:e}=await h.post(`/api/config/create_backup`);e.status===`success`?(await I(),alert(e.message)):k(e.message)}catch(t){k(e(`backup.error`)),console.error(`Error creating backup:`,t)}finally{C(!1)}},R=async(t,n)=>{try{let e=(await h.get(`/api/config/download_backup?backup_path=${encodeURIComponent(t)}`,{responseType:`blob`})).data,r=window.URL.createObjectURL(e),i=document.createElement(`a`);i.href=r,i.download=n,document.body.appendChild(i),i.click(),window.URL.revokeObjectURL(r),document.body.removeChild(i)}catch(t){k(e(`backup.error`)),console.error(`Error downloading backup:`,t)}},z=async(t,n)=>{if(confirm(`${e(`device_management.confirm_delete_backup`)||`Delete backup`} ${n}?`))try{let{data:e}=await h.delete(`/api/config/delete_backup`,{data:{backup_path:t}});e.status===`success`?(await I(),alert(e.message)):k(e.message)}catch(t){k(e(`backup.error`)),console.error(`Error deleting backup:`,t)}},B=async t=>{t.status===`success`?(D(t),confirm(e(`device_management.restore_success_restart`))&&(await h.post(`/api/restart`),setTimeout(()=>window.location.reload(),3e3))):k(t.message||e(`device_management.restore_failed`))},V=async(t,n)=>{T(!0);try{let{data:e}=await h.post(`/api/config/restore_backup`,{backup_path:t,override_serial:n},{timeout:3e4});await B(e)}catch(t){k(e(`device_management.restore_failed`)),console.error(`Error restoring config:`,t)}finally{T(!1)}},H=async t=>{T(!0),k(null),D(null);try{let{data:n}=await h.post(`/api/config/inspect_backup_path`,{backup_path:t});n.serial_mismatch?F({backupMeta:n.backup_meta,currentSerial:n.current_serial,onConfirm:e=>{F(null),V(t,e)},onCancel:()=>{F(null),T(!1)}}):confirm(e(`device_management.confirm_restore`))?await V(t,!1):T(!1)}catch(t){k(e(`device_management.restore_failed`)),console.error(`Error inspecting backup path:`,t),T(!1)}},U=async()=>{C(!0),k(null);try{let e=await h.get(`/api/config/download`,{responseType:`blob`}),t=e.headers[`content-disposition`],n=`boneio_config.tar.gz`;if(t){let e=t.match(/filename=(.+)/);e&&(n=e[1])}let r=e.data,i=window.URL.createObjectURL(r),a=document.createElement(`a`);a.href=i,a.download=n,document.body.appendChild(a),a.click(),window.URL.revokeObjectURL(i),document.body.removeChild(a)}catch(t){k(e(`backup.error`)),console.error(`Error downloading config:`,t)}finally{C(!1)}},W=async(t,n)=>{T(!0);try{let e=new FormData;e.append(`file`,t),e.append(`override_serial`,n?`true`:`false`);let{data:r}=await h.post(`/api/config/restore`,e,{headers:{"Content-Type":`multipart/form-data`},timeout:3e4});await B(r)}catch(t){k(e(`device_management.restore_failed`)),console.error(`Error restoring config:`,t)}finally{T(!1)}};return(0,S.jsxs)(v,{width:`wide`,children:[O&&(0,S.jsx)(_,{variant:`error`,message:O,action:(0,S.jsx)(`button`,{className:`btn btn-ghost btn-xs btn-circle`,onClick:()=>k(null),children:`×`})}),(0,S.jsx)(b,{icon:(0,S.jsx)(n,{}),title:e(`device_management.configuration_backup`),description:e(`device_management.backup_description`),footer:(0,S.jsxs)(y,{children:[(0,S.jsx)(`button`,{className:`btn btn-primary btn-sm gap-2`,onClick:U,disabled:o||w,children:o?(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(t,{className:`animate-spin`}),e(`device_management.preparing`)]}):(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(n,{}),e(`device_management.download_config`)]})}),(0,S.jsx)(`button`,{className:`btn btn-outline btn-sm gap-2`,onClick:()=>a.current?.click(),disabled:o||w,children:w?(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(t,{className:`animate-spin`}),e(`device_management.restoring`)]}):(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(c,{}),e(`device_management.restore_config`)]})})]}),children:(0,S.jsxs)(`div`,{className:`space-y-3`,children:[(0,S.jsx)(`input`,{ref:a,type:`file`,accept:`.tar.gz,.tgz`,onChange:async t=>{let n=t.target.files?.[0];if(n){T(!0),k(null),D(null);try{let t=new FormData;t.append(`file`,n);let{data:r}=await h.post(`/api/config/inspect_backup_file`,t,{headers:{"Content-Type":`multipart/form-data`}});r.serial_mismatch?F({backupMeta:r.backup_meta,currentSerial:r.current_serial,onConfirm:e=>{F(null),W(n,e)},onCancel:()=>{F(null),T(!1)}}):confirm(e(`device_management.confirm_restore`))?await W(n,!1):T(!1)}catch(t){k(e(`device_management.restore_failed`)),console.error(`Error inspecting backup file:`,t),T(!1)}}a.current&&(a.current.value=``)},style:{display:`none`}}),(0,S.jsx)(_,{variant:`info`,message:(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(`span`,{className:`block`,children:e(`device_management.backup_info_1`)}),(0,S.jsx)(`span`,{className:`block`,children:e(`device_management.backup_info_2`)}),(0,S.jsx)(`span`,{className:`block font-semibold mt-1`,children:e(`device_management.restore_info`)})]})}),E&&(0,S.jsx)(_,{variant:E.validation_status===`success`?`success`:`warning`,message:(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(`span`,{className:`block`,children:E.message}),(0,S.jsxs)(`span`,{className:`block text-xs opacity-70 mt-1 break-all`,children:[e(`device_management.backup_created`),`: `,E.backup_path]}),E.validation_status===`warning`&&(0,S.jsx)(`span`,{className:`block text-xs mt-1`,children:E.validation_message})]})})]})}),(0,S.jsx)(b,{icon:(0,S.jsx)(i,{}),title:e(`device_management.config_backups`),collapsible:A.length>0,open:M,onOpenChange:e=>{N(e),e&&I()},summary:A.length,action:(0,S.jsx)(`button`,{className:`btn btn-primary btn-sm gap-2`,onClick:L,disabled:o||w,children:o?(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(t,{className:`animate-spin`}),e(`device_management.preparing`)]}):(0,S.jsxs)(S.Fragment,{children:[(0,S.jsx)(i,{}),e(`device_management.create_backup`)||`Create Backup`]})}),children:(0,S.jsxs)(`div`,{className:`space-y-3`,children:[(0,S.jsx)(_,{variant:`neutral`,message:e(`device_management.backup_limit_info`)||`Maximum 10 backups are kept. Oldest backups are automatically removed when creating new ones.`}),M&&A.length>0&&(0,S.jsx)(`div`,{className:`stg-inset overflow-x-auto`,children:(0,S.jsxs)(`table`,{className:`table table-sm`,children:[(0,S.jsx)(`thead`,{children:(0,S.jsxs)(`tr`,{children:[(0,S.jsx)(`th`,{children:e(`device_management.version`)}),(0,S.jsx)(`th`,{children:e(`device_management.date`)}),(0,S.jsx)(`th`,{children:e(`device_management.files`)}),(0,S.jsx)(`th`,{className:`text-right`,children:e(`device_management.actions`)})]})}),(0,S.jsx)(`tbody`,{children:A.map(t=>(0,S.jsxs)(`tr`,{children:[(0,S.jsx)(`td`,{className:`font-mono`,children:t.version}),(0,S.jsx)(`td`,{className:`text-xs font-mono`,children:t.timestamp}),(0,S.jsxs)(`td`,{children:[t.file_count,` `,e(`device_management.yaml_files`)]}),(0,S.jsx)(`td`,{children:(0,S.jsxs)(`div`,{className:`flex gap-1 justify-end`,children:[(0,S.jsxs)(`button`,{className:`btn btn-warning btn-xs gap-1.5`,onClick:()=>H(t.path),disabled:w,title:e(`device_management.restore`),children:[(0,S.jsx)(s,{}),e(`device_management.restore`)]}),(0,S.jsx)(`button`,{className:`btn btn-ghost btn-xs btn-square`,onClick:()=>R(t.path,t.filename),title:e(`device_management.download_config`),children:(0,S.jsx)(n,{})}),(0,S.jsx)(`button`,{className:`btn btn-ghost btn-xs btn-square text-error`,onClick:()=>z(t.path,t.filename),title:e(`device_management.delete`)||`Delete`,children:(0,S.jsx)(l,{})})]})})]},t.path))})]})})]})}),P&&(0,S.jsx)(m,{open:!0,onOpenChange:e=>{e||P.onCancel()},children:(0,S.jsxs)(f,{className:`max-w-md`,children:[(0,S.jsx)(u,{children:(0,S.jsxs)(p,{className:`flex items-center gap-2 text-warning`,children:[(0,S.jsx)(r,{}),e(`device_management.serial_mismatch_title`)||`Serial Number Mismatch`]})}),(0,S.jsxs)(`div`,{className:`py-4 text-sm space-y-4`,children:[(0,S.jsx)(`p`,{children:e(`device_management.serial_mismatch_desc`)||`The uploaded configuration backup was created on a device with a different serial number:`}),(0,S.jsxs)(`div`,{className:`bg-base-300 p-3 rounded-lg font-mono text-xs space-y-1`,children:[(0,S.jsxs)(`div`,{children:[(0,S.jsxs)(`span`,{className:`opacity-60`,children:[e(`device_management.backup_serial`)||`Backup Serial`,`:`]}),` `,(0,S.jsx)(`span`,{className:`text-warning font-semibold`,children:P.backupMeta?.effective_serial||`Unknown`})]}),P.backupMeta?.hostname&&(0,S.jsxs)(`div`,{children:[(0,S.jsxs)(`span`,{className:`opacity-60`,children:[e(`device_management.backup_hostname`)||`Backup Hostname`,`:`]}),` `,(0,S.jsx)(`span`,{children:P.backupMeta.hostname})]}),P.backupMeta?.created_at&&(0,S.jsxs)(`div`,{children:[(0,S.jsxs)(`span`,{className:`opacity-60`,children:[e(`device_management.backup_created_at`)||`Created At`,`:`]}),` `,(0,S.jsx)(`span`,{children:new Date(P.backupMeta.created_at).toLocaleString()})]}),(0,S.jsxs)(`div`,{children:[(0,S.jsxs)(`span`,{className:`opacity-60`,children:[e(`device_management.current_serial`)||`Current Serial`,`:`]}),` `,(0,S.jsx)(`span`,{className:`text-info font-semibold`,children:P.currentSerial})]})]}),(0,S.jsxs)(`div`,{className:`alert alert-warning text-xs`,children:[(0,S.jsx)(r,{className:`shrink-0`}),(0,S.jsx)(`span`,{children:e(`device_management.serial_override_warning`)||`WARNING: If both controllers are running at the same time on the same MQTT broker with the same serial number, conflicts will occur!`})]})]}),(0,S.jsxs)(d,{className:`flex flex-col sm:flex-row gap-2`,children:[(0,S.jsx)(`button`,{className:`btn btn-warning btn-sm`,onClick:()=>P.onConfirm(!0),children:e(`device_management.keep_old_serial`)||`Keep Old Serial`}),(0,S.jsx)(`button`,{className:`btn btn-outline btn-sm`,onClick:()=>P.onConfirm(!1),children:e(`device_management.use_new_serial`)||`Use New Serial`}),(0,S.jsx)(`button`,{className:`btn btn-ghost btn-sm`,onClick:P.onCancel,children:e(`common.cancel`)||`Cancel`})]})]})})]})}export{C as default};