bosch-shc-camera-client 0.1.0__tar.gz

bosch_shc_camera_client-0.1.0/.gitignore

@@ -0,0 +1,9 @@
+__pycache__/
+*.py[cod]
+.venv/
+.mypy_cache/
+.pytest_cache/
+.ruff_cache/
+dist/
+build/
+*.egg-info/

bosch_shc_camera_client-0.1.0/CHANGELOG.md

@@ -0,0 +1,7 @@
+# Changelog
+
+## [v0.1.0] - 2026-07-14
+
+Initial extraction: `smb.py` and `local_rcp.py`, copied verbatim from the Home Assistant integration
+(zero internal coupling to the integration package). `shc.py` and `rcp.py` follow once decoupled from
+`cloud_ssl.async_get_bosch_cloud_session` (session-injection refactor, tracked separately).

bosch_shc_camera_client-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Thomas Mosandl
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

bosch_shc_camera_client-0.1.0/PKG-INFO

@@ -0,0 +1,66 @@
+Metadata-Version: 2.4
+Name: bosch-shc-camera-client
+Version: 0.1.0
+Summary: Async Python client library for Bosch Smart Home Camera cloud + local (RCP) APIs.
+Project-URL: Homepage, https://github.com/mosandlt/bosch-shc-camera-client
+Project-URL: Repository, https://github.com/mosandlt/bosch-shc-camera-client
+License: MIT License
+        
+        Copyright (c) 2026 Thomas Mosandl
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+License-File: LICENSE
+Requires-Python: >=3.11
+Requires-Dist: aiohttp
+Requires-Dist: defusedxml>=0.7.1
+Description-Content-Type: text/markdown
+
+# bosch-shc-camera-client
+
+Async Python client library for Bosch Smart Home Camera cloud + local (RCP) APIs.
+
+Extracted from the [Bosch Smart Home Camera Tool](https://github.com/mosandlt/Bosch-Smart-Home-Camera-Tool-HomeAssistant)
+integration family (Home Assistant, ioBroker, Python CLI, MCP, Node-RED, NiceGUI frontend) so every
+consumer shares one maintained implementation instead of duplicating the client logic per platform.
+
+Status: early extraction in progress. Not yet feature-complete versus the inline modules it's replacing.
+
+## Scope
+
+- Local RCP protocol read access over `/rcp.xml` (Gen2 camera on-device control plane), read-only.
+- Bosch cloud API (`residential.cbs.boschsecurity.com`): auth, video inputs, motion zones, privacy
+  masks, rules, friends/sharing, firmware, lighting — **planned**, not yet extracted (`shc.py`/`rcp.py`
+  in the source integration are coupled to a `hass`/coordinator-provided `aiohttp.ClientSession` and
+  need a session-injection refactor before they can move here cleanly).
+
+Out of scope (stays integration-specific, not extracted here): FCM push-notification plumbing tied to
+Home Assistant's recorder/snapshot-store internals, anything HA-entity-shaped, and the SMB/FTP export
+helpers (`smb.py`) — those reach into the HA integration's coordinator object directly
+(`coordinator.hass`, `coordinator.options`, private state) rather than being a standalone API client, so
+they don't belong in a generic library without their own decoupling pass first.
+
+## Install
+
+```
+pip install bosch-shc-camera-client
+```
+
+## License
+
+MIT, see [LICENSE](LICENSE).

bosch_shc_camera_client-0.1.0/README.md

@@ -0,0 +1,33 @@
+# bosch-shc-camera-client
+
+Async Python client library for Bosch Smart Home Camera cloud + local (RCP) APIs.
+
+Extracted from the [Bosch Smart Home Camera Tool](https://github.com/mosandlt/Bosch-Smart-Home-Camera-Tool-HomeAssistant)
+integration family (Home Assistant, ioBroker, Python CLI, MCP, Node-RED, NiceGUI frontend) so every
+consumer shares one maintained implementation instead of duplicating the client logic per platform.
+
+Status: early extraction in progress. Not yet feature-complete versus the inline modules it's replacing.
+
+## Scope
+
+- Local RCP protocol read access over `/rcp.xml` (Gen2 camera on-device control plane), read-only.
+- Bosch cloud API (`residential.cbs.boschsecurity.com`): auth, video inputs, motion zones, privacy
+  masks, rules, friends/sharing, firmware, lighting — **planned**, not yet extracted (`shc.py`/`rcp.py`
+  in the source integration are coupled to a `hass`/coordinator-provided `aiohttp.ClientSession` and
+  need a session-injection refactor before they can move here cleanly).
+
+Out of scope (stays integration-specific, not extracted here): FCM push-notification plumbing tied to
+Home Assistant's recorder/snapshot-store internals, anything HA-entity-shaped, and the SMB/FTP export
+helpers (`smb.py`) — those reach into the HA integration's coordinator object directly
+(`coordinator.hass`, `coordinator.options`, private state) rather than being a standalone API client, so
+they don't belong in a generic library without their own decoupling pass first.
+
+## Install
+
+```
+pip install bosch-shc-camera-client
+```
+
+## License
+
+MIT, see [LICENSE](LICENSE).

bosch_shc_camera_client-0.1.0/pyproject.toml

@@ -0,0 +1,39 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "bosch-shc-camera-client"
+version = "0.1.0"
+description = "Async Python client library for Bosch Smart Home Camera cloud + local (RCP) APIs."
+readme = "README.md"
+license = { file = "LICENSE" }
+requires-python = ">=3.11"
+dependencies = [
+    "aiohttp",
+    "defusedxml>=0.7.1",
+]
+
+[project.urls]
+Homepage = "https://github.com/mosandlt/bosch-shc-camera-client"
+Repository = "https://github.com/mosandlt/bosch-shc-camera-client"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/bosch_shc_camera_client"]
+
+[tool.hatch.build.targets.sdist]
+only-include = [
+    "src",
+    "tests",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md",
+    "pyproject.toml",
+]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+addopts = "-ra --strict-markers"
+
+[tool.mypy]
+strict = true

bosch_shc_camera_client-0.1.0/src/bosch_shc_camera_client/__init__.py

@@ -0,0 +1,5 @@
+"""Async Python client library for Bosch Smart Home Camera cloud + local (RCP) APIs."""
+
+from . import local_rcp
+
+__all__ = ["local_rcp"]

bosch_shc_camera_client-0.1.0/src/bosch_shc_camera_client/local_rcp.py

@@ -0,0 +1,140 @@
+"""Local / cloud-proxy RCP+ READ over `/rcp.xml` (XML format, not binary TLV).
+
+Read-only — writes need a `service`-account auth level that Bosch keeps internal only.
+This module provides read helpers only; the caller decides when to poll.
+
+Two auth modes:
+  LOCAL  — HTTP Digest with the `cbs-…` user from `PUT /connection LOCAL`. URL: `https://<cam_ip>:443/rcp.xml?…`.
+  REMOTE — HTTP Basic (empty:empty) with the cloud-proxy hash URL from `PUT /connection REMOTE`.
+           The hash itself is the credential — URL: `https://proxy-XX:42090/{hash}/rcp.xml?…`.
+
+XML response format (verified 2026-04-27 against Gen2 Outdoor FW 9.40.25):
+  <rcp>
+    <command><hex>0xNNNN</hex>…</command>
+    <type>P_OCTET|P_STRING|T_WORD|T_DWORD</type>
+    <result>
+      <dec>N</dec>             ← T_WORD/T_DWORD
+      <str>HEX BYTES…</str>     ← P_OCTET (space-separated hex) or P_STRING (ASCII)
+      <err>0xNN</err>           ← read failed / wrong auth level
+    </result>
+  </rcp>
+
+Gotchas:
+- On Gen2 Outdoor (FW 9.40.25), `PUT /connection` rotates the Digest credential. A plain
+  RCP read does *not* rotate it — verified via stress test (10 reads/10s, stream stayed up).
+- TLS verify=False: Bosch uses a private CA (NXP-BUID) for the camera cert.
+"""
+
+import logging
+import ssl
+import urllib.error
+import urllib.request
+from typing import Any
+
+from defusedxml import ElementTree as ET  # XXE-safe drop-in for xml.etree.ElementTree
+
+_LOGGER = logging.getLogger(__name__)
+
+
+def _parse_rcp_xml(text: str, type_: str) -> Any:
+    """Parse RCP+ XML response. Returns int / bytes / str, or None on error/parse-fail."""
+    try:
+        root = ET.fromstring(text)
+    except ET.ParseError:
+        _LOGGER.debug("rcp parse: not XML (first 100 chars): %r", text[:100])
+        return None
+    err_el = root.find(".//result/err")
+    if err_el is not None:
+        _LOGGER.debug("rcp parse: <err>%s</err> for type=%s", err_el.text, type_)
+        return None
+    if type_ in ("T_WORD", "T_DWORD", "T_BYTE"):
+        dec = root.find(".//result/dec")
+        if dec is not None and dec.text:
+            try:
+                return int(dec.text.strip())
+            except ValueError:
+                return None
+        return None
+    if type_ == "P_STRING":
+        s = root.find(".//result/str")
+        return s.text if s is not None else None
+    if type_ == "P_OCTET":
+        s = root.find(".//result/str")
+        if s is None or not s.text:
+            return None
+        try:
+            return bytes.fromhex(s.text.replace(" ", ""))
+        except ValueError:
+            return None
+    return None
+
+
+def rcp_read_local_sync(
+    host: str, user: str, pwd: str, command: str, type_: str, timeout: float = 5.0
+) -> Any:
+    """RCP+ READ via local HTTPS endpoint with HTTP Digest auth (cbs-…-user).
+
+    `host` is "192.168.x.x:443". Returns parsed value or None on any failure.
+    """
+    url = f"https://{host}/rcp.xml?command={command}&type={type_}&direction=READ&num=1&payload="
+    pwd_mgr = urllib.request.HTTPPasswordMgrWithDefaultRealm()
+    pwd_mgr.add_password(None, url, user, pwd)
+    handler = urllib.request.HTTPDigestAuthHandler(pwd_mgr)
+    ctx = ssl.create_default_context()
+    ctx.check_hostname = False
+    ctx.verify_mode = ssl.CERT_NONE
+    https_handler = urllib.request.HTTPSHandler(context=ctx)
+    opener = urllib.request.build_opener(handler, https_handler)
+    try:
+        with opener.open(url, timeout=timeout) as r:
+            if r.status != 200:
+                _LOGGER.debug("rcp local: %s %s → HTTP %d", command, type_, r.status)
+                return None
+            return _parse_rcp_xml(r.read().decode(errors="replace"), type_)
+    except (urllib.error.URLError, OSError, ValueError) as err:
+        _LOGGER.debug("rcp local: %s %s → error: %s", command, type_, err)
+        return None
+
+
+def rcp_read_remote_sync(
+    proxy_url_with_hash: str, command: str, type_: str, timeout: float = 5.0
+) -> Any:
+    """RCP+ READ via Bosch Cloud-Proxy. Hash inside the URL IS the credential.
+
+    `proxy_url_with_hash` is e.g.
+    "proxy-20.live.cbs.boschsecurity.com:42090/abc123def".
+    Returns parsed value or None on any failure.
+
+    Note: per `research/rcp_findings.txt` (2026-03-22 Cloud-Proxy probe), the
+    Cloud-Proxy may return *binary TLV* on `/rcp.xml` rather than XML, depending
+    on Content-Type negotiation. We always try XML parse first; if that fails
+    we return None (no binary path implemented). When a real REMOTE-only test
+    surfaces a binary response, extend `_parse_rcp_xml` with a binary fallback.
+    """
+    url = f"https://{proxy_url_with_hash}/rcp.xml?command={command}&type={type_}&direction=READ&num=1&payload="
+    ctx = ssl.create_default_context()
+    ctx.check_hostname = False
+    ctx.verify_mode = ssl.CERT_NONE
+    try:
+        with urllib.request.urlopen(url, timeout=timeout, context=ctx) as r:  # noqa: S310 # local camera RCP endpoint, fixed https scheme, not user-supplied
+            if r.status != 200:
+                _LOGGER.debug("rcp remote: %s %s → HTTP %d", command, type_, r.status)
+                return None
+            return _parse_rcp_xml(r.read().decode(errors="replace"), type_)
+    except (urllib.error.URLError, OSError, ValueError) as err:
+        _LOGGER.debug("rcp remote: %s %s → error: %s", command, type_, err)
+        return None
+
+
+# ── Field-specific helpers — RETIRED ────────────────────────────────────────
+# Earlier versions exported parse_privacy_state(0x0d00) and
+# parse_led_dimmer_percent(0x0c22) here. Both were removed in v10.4.9 after
+# A/B testing proved the byte mappings did NOT match the user-facing
+# privacy-mode toggle (0x0d00 byte[1] stayed 1 even with the mode OFF).
+# rcp_findings.txt's "PRIVACY MASK" label was taken to mean "privacy mode";
+# it doesn't. Don't add field-specific helpers here again without:
+#   1. Toggling the user-facing setting both ways
+#   2. Re-reading the RCP value after each toggle
+#   3. Confirming the RCP value actually changes
+# The generic rcp_read_local_sync / rcp_read_remote_sync helpers remain
+# correct and are kept for future verified uses.

bosch_shc_camera_client-0.1.0/tests/test_import.py

@@ -0,0 +1,7 @@
+"""Smoke test: package imports cleanly."""
+
+import bosch_shc_camera_client
+
+
+def test_import() -> None:
+    assert bosch_shc_camera_client.local_rcp