gac-connect 0.1.0__tar.gz

gac_connect-0.1.0/.gitignore

@@ -0,0 +1,20 @@
+# Local-only maintainer tooling (kept out of the published repo)
+scripts/build_material.py
+material.txt
+keys/
+
+# Python
+.venv/
+__pycache__/
+*.pyc
+*.egg-info/
+build/
+dist/
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+
+# Local-only maintainer/dev scripts (reference the research tree or hit live API)
+tests/test_compat.py
+tests/live_smoke.py
+tests/close_windows.py

gac_connect-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 GAC Connect contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

gac_connect-0.1.0/PKG-INFO

@@ -0,0 +1,115 @@
+Metadata-Version: 2.5
+Name: gac-connect
+Version: 0.1.0
+Summary: Unofficial async client for GAC / Aion international connected-car accounts
+Project-URL: Homepage, https://github.com/wattferry/gac-connect
+Project-URL: Issues, https://github.com/wattferry/gac-connect/issues
+Author: GAC Connect contributors
+License-Expression: MIT
+License-File: LICENSE
+Keywords: aion,car,ev,gac,home-assistant
+Classifier: Development Status :: 3 - Alpha
+Classifier: Framework :: AsyncIO
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Topic :: Home Automation
+Requires-Python: >=3.11
+Requires-Dist: aiohttp>=3.9
+Requires-Dist: cryptography>=44
+Provides-Extra: cli
+Requires-Dist: rich>=13; extra == 'cli'
+Requires-Dist: typer>=0.12; extra == 'cli'
+Provides-Extra: dev
+Requires-Dist: mypy>=1.11; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Requires-Dist: ruff>=0.6; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# GAC Connect
+
+An unofficial async Python client for **GAC / Aion international** connected-car
+accounts — read your vehicle's status and control charging from your own code.
+
+> Not affiliated with, endorsed by, or supported by GAC. Use it with a vehicle
+> you own, on your own account. Names and trademarks belong to their owners.
+
+Works today for **Australia and New Zealand**. Other regions are listed but
+unverified — reports welcome.
+
+## Install
+
+```bash
+pip install gac-connect          # library
+pip install "gac-connect[cli]"   # + the `gac` command
+```
+
+## Library
+
+```python
+import aiohttp
+from gac_connect import GacClient  # noqa
+
+async def main():
+    async with aiohttp.ClientSession() as http:
+        client = GacClient("AU", http)
+
+        # First run: sign in. You solve a slide puzzle and enter an SMS code.
+        captcha = await client.start_captcha()
+        # ... show captcha.background / captcha.piece, get the slide offset x ...
+        await client.request_sms("04xxxxxxxx", x)
+        await client.login_sms("04xxxxxxxx", "123456")
+
+        vehicles = await client.list_vehicles()
+        status = await client.get_status(vehicles[0].vin)
+        print(status.soc, status.range_km, status.odometer_km)
+
+        await client.charge_pause(vehicles[0].vin)
+```
+
+Pass a `TokenStore` to persist the session (the refresh token is single-use and
+rotates on every refresh, so persistence matters):
+
+```python
+from gac_connect.session import FileStore
+client = GacClient("AU", http, FileStore("~/.config/gac-connect/session.json"))
+await client.load()
+```
+
+## CLI
+
+```bash
+gac login --mobile 04xxxxxxxx     # opens a browser puzzle, then asks for the SMS code
+gac vehicles
+gac status <VIN>
+gac charge <VIN> pause            # or: now
+```
+
+## What you can read
+
+State of charge, range, odometer, charging state and mode, plugged-in, cabin
+temperature, 12 V battery, GPS, doors / windows / boot / lock state, and per-tyre
+pressure (in kPa) and temperature.
+
+## Charging control
+
+`charge_now`, `charge_pause`, and `set_charge_window` gate charging through the
+car's schedule. Pausing stops charging within seconds; resuming takes the car a
+few minutes to act on — so pause only for sustained periods.
+
+## Notes and limits
+
+- Sign-in needs a human: a slide puzzle and an SMS code. There is no headless login.
+- Remote lock/unlock, engine, and charger-release need a remote-control PIN that
+  this client does not yet support; those commands are refused.
+- Using the official app and this client on the same account at the same time can
+  occasionally sign one of them out.
+
+## Home Assistant
+
+A Home Assistant integration built on this library is available separately.
+
+## License
+
+MIT.

gac_connect-0.1.0/README.md

@@ -0,0 +1,86 @@
+# GAC Connect
+
+An unofficial async Python client for **GAC / Aion international** connected-car
+accounts — read your vehicle's status and control charging from your own code.
+
+> Not affiliated with, endorsed by, or supported by GAC. Use it with a vehicle
+> you own, on your own account. Names and trademarks belong to their owners.
+
+Works today for **Australia and New Zealand**. Other regions are listed but
+unverified — reports welcome.
+
+## Install
+
+```bash
+pip install gac-connect          # library
+pip install "gac-connect[cli]"   # + the `gac` command
+```
+
+## Library
+
+```python
+import aiohttp
+from gac_connect import GacClient  # noqa
+
+async def main():
+    async with aiohttp.ClientSession() as http:
+        client = GacClient("AU", http)
+
+        # First run: sign in. You solve a slide puzzle and enter an SMS code.
+        captcha = await client.start_captcha()
+        # ... show captcha.background / captcha.piece, get the slide offset x ...
+        await client.request_sms("04xxxxxxxx", x)
+        await client.login_sms("04xxxxxxxx", "123456")
+
+        vehicles = await client.list_vehicles()
+        status = await client.get_status(vehicles[0].vin)
+        print(status.soc, status.range_km, status.odometer_km)
+
+        await client.charge_pause(vehicles[0].vin)
+```
+
+Pass a `TokenStore` to persist the session (the refresh token is single-use and
+rotates on every refresh, so persistence matters):
+
+```python
+from gac_connect.session import FileStore
+client = GacClient("AU", http, FileStore("~/.config/gac-connect/session.json"))
+await client.load()
+```
+
+## CLI
+
+```bash
+gac login --mobile 04xxxxxxxx     # opens a browser puzzle, then asks for the SMS code
+gac vehicles
+gac status <VIN>
+gac charge <VIN> pause            # or: now
+```
+
+## What you can read
+
+State of charge, range, odometer, charging state and mode, plugged-in, cabin
+temperature, 12 V battery, GPS, doors / windows / boot / lock state, and per-tyre
+pressure (in kPa) and temperature.
+
+## Charging control
+
+`charge_now`, `charge_pause`, and `set_charge_window` gate charging through the
+car's schedule. Pausing stops charging within seconds; resuming takes the car a
+few minutes to act on — so pause only for sustained periods.
+
+## Notes and limits
+
+- Sign-in needs a human: a slide puzzle and an SMS code. There is no headless login.
+- Remote lock/unlock, engine, and charger-release need a remote-control PIN that
+  this client does not yet support; those commands are refused.
+- Using the official app and this client on the same account at the same time can
+  occasionally sign one of them out.
+
+## Home Assistant
+
+A Home Assistant integration built on this library is available separately.
+
+## License
+
+MIT.

gac_connect-0.1.0/pyproject.toml

@@ -0,0 +1,69 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "gac-connect"
+version = "0.1.0"
+description = "Unofficial async client for GAC / Aion international connected-car accounts"
+readme = "README.md"
+requires-python = ">=3.11"
+license = "MIT"
+license-files = ["LICENSE"]
+keywords = ["gac", "aion", "ev", "car", "home-assistant"]
+authors = [{ name = "GAC Connect contributors" }]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Framework :: AsyncIO",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3 :: Only",
+    "Topic :: Home Automation",
+]
+dependencies = [
+    "aiohttp>=3.9",
+    "cryptography>=44",
+]
+
+[project.optional-dependencies]
+cli = ["typer>=0.12", "rich>=13"]
+dev = ["pytest>=8", "pytest-asyncio>=0.23", "ruff>=0.6", "mypy>=1.11"]
+
+[project.scripts]
+gac = "gac_connect.cli:app"
+
+[project.urls]
+Homepage = "https://github.com/wattferry/gac-connect"
+Issues = "https://github.com/wattferry/gac-connect/issues"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/gac_connect"]
+
+[tool.hatch.build.targets.wheel.force-include]
+"src/gac_connect/_material.pem" = "gac_connect/_material.pem"
+
+[tool.pytest.ini_options]
+asyncio_mode = "auto"
+testpaths = ["tests"]
+
+[tool.ruff]
+line-length = 120
+target-version = "py311"
+
+[tool.ruff.lint]
+select = ["E", "F", "I", "UP", "B", "S"]
+# S101 asserts in tests; S311 request-id is not security-sensitive;
+# S105 flags the ERR_TOKEN_INVALID constant name (a code, not a secret).
+ignore = ["S101", "S311", "S105"]
+
+[tool.ruff.lint.per-file-ignores]
+# The CLI's tiny embedded HTTP handler / puzzle page uses compact lines.
+"src/gac_connect/cli.py" = ["E701", "E702", "E501"]
+# The command catalog reads better as aligned single-line entries.
+"src/gac_connect/commands.py" = ["E501"]
+# Tests set sys.path before importing and keep fixtures inline.
+"tests/*" = ["S105", "S106", "E402", "E501", "E701", "E702", "I001"]
+
+[tool.mypy]
+python_version = "3.11"
+strict = true

gac_connect-0.1.0/src/gac_connect/__init__.py

@@ -0,0 +1,33 @@
+"""GAC Connect — an unofficial client for GAC / Aion international connected-car accounts.
+
+Not affiliated with, endorsed by, or supported by GAC. For use with a vehicle you
+own, on your own account.
+"""
+from __future__ import annotations
+
+from .errors import (
+    AuthError,
+    AuthExpiredError,
+    CaptchaError,
+    CommandError,
+    GacError,
+    LoginError,
+    PinRequiredError,
+    RateLimitedError,
+    RegionError,
+)
+
+__version__ = "0.1.0"
+
+__all__ = [
+    "AuthError",
+    "AuthExpiredError",
+    "CaptchaError",
+    "CommandError",
+    "GacError",
+    "LoginError",
+    "PinRequiredError",
+    "RateLimitedError",
+    "RegionError",
+    "__version__",
+]

gac_connect-0.1.0/src/gac_connect/_material.pem

@@ -0,0 +1,61 @@
+# @iov
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
+# @main
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
+# iov_hmac: international-pro
+# main_hmac: rgw19oelccch
+# captcha_key: BGxdEUOZkXka4HSj

gac_connect-0.1.0/src/gac_connect/auth.py

@@ -0,0 +1,57 @@
+"""Block-puzzle captcha helpers.
+
+The gateway's sign-in is gated by an anji-plus block puzzle. The get response
+returns two images and a ``secretKey`` of the form ``<32B key>@DS@<16B iv>`` plus
+a one-time ``token``. The user slides the piece to an x offset; from that we build
+two proofs, both AES-256-CBC with the session key/iv from ``secretKey``:
+
+* ``pointJson``     = enc('{"x":X,"y":5}')           — sent to /check and as randomStr
+* ``captchaTicket`` = enc('<token>---{"x":X,"y":5}') — sent to send-code / login
+"""
+from __future__ import annotations
+
+import base64
+import json
+from dataclasses import dataclass
+
+from . import crypto
+from .const import PUZZLE_HEIGHT, PUZZLE_PIECE_WIDTH, PUZZLE_WIDTH
+
+_SEP = b"@DS@"
+
+
+@dataclass
+class Captcha:
+    """A pending puzzle. ``background`` and ``piece`` are base64 PNGs."""
+    background: str
+    piece: str
+    secret_key: str
+    token: str
+    width: int = PUZZLE_WIDTH
+    height: int = PUZZLE_HEIGHT
+    piece_width: int = PUZZLE_PIECE_WIDTH
+
+    @classmethod
+    def from_data(cls, data: dict) -> Captcha:
+        return cls(
+            background=data["originalImageBase64"],
+            piece=data["jigsawImageBase64"],
+            secret_key=data["secretKey"],
+            token=data["token"],
+        )
+
+    def _key_iv(self) -> tuple[bytes, bytes]:
+        key, iv = self.secret_key.encode().split(_SEP, 1)
+        return key, iv
+
+    def _point(self, x: int) -> bytes:
+        return json.dumps({"x": int(x), "y": 5}, separators=(",", ":")).encode()
+
+    def point_json(self, x: int) -> str:
+        key, iv = self._key_iv()
+        return base64.b64encode(crypto.aes_cbc_encrypt(key, iv, self._point(x))).decode()
+
+    def ticket(self, x: int) -> str:
+        key, iv = self._key_iv()
+        payload = f"{self.token}---".encode() + self._point(x)
+        return base64.b64encode(crypto.aes_cbc_encrypt(key, iv, payload)).decode()

gac_connect-0.1.0/src/gac_connect/cli.py

@@ -0,0 +1,168 @@
+"""Command-line interface: ``gac login | status | vehicles | charge | command``.
+
+Installed with the ``[cli]`` extra. Stores its session in
+``~/.config/gac-connect/session.json`` (0600). The block puzzle opens in a local
+browser page during ``gac login``.
+"""
+from __future__ import annotations
+
+import asyncio
+import json
+import queue
+import threading
+import webbrowser
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+from pathlib import Path
+
+try:
+    import typer
+except ModuleNotFoundError as exc:  # pragma: no cover
+    raise SystemExit("the CLI needs the extra: pip install 'gac-connect[cli]'") from exc
+
+import aiohttp
+
+from .auth import Captcha
+from .client import GacClient
+from .errors import CaptchaError, LoginError
+from .session import FileStore
+
+app = typer.Typer(add_completion=False, help="Unofficial GAC / Aion client.")
+SESSION = Path.home() / ".config" / "gac-connect" / "session.json"
+
+_PAGE = """<!doctype html><meta charset=utf-8><title>GAC verification</title>
+<style>body{font-family:system-ui;background:#111;color:#eee;display:flex;flex-direction:column;
+align-items:center;gap:14px;padding:28px}.st{position:relative;width:310px;height:155px;background:#000;
+border-radius:8px;overflow:hidden}.st img{position:absolute;top:0;left:0}input{width:310px}
+button{font-size:16px;padding:9px 22px;border:0;border-radius:9px;background:#2e7d32;color:#fff}</style>
+<h3>Slide the piece into the gap</h3><div class=st><img id=b width=310 height=155><img id=p></div>
+<input id=s type=range min=0 max=263 value=0><div id=x style=font-size:28px>0</div><button id=g>Verify</button>
+<div id=m></div><script>const s=document.getElementById('s'),p=document.getElementById('p'),
+x=document.getElementById('x'),b=document.getElementById('b'),g=document.getElementById('g'),m=document.getElementById('m');
+let a=0,d=0;const u=()=>{p.style.left=s.value+'px';x.textContent=s.value};s.oninput=u;
+document.onkeydown=e=>{if(e.key=='ArrowRight'){s.value=+s.value+1;u()}if(e.key=='ArrowLeft'){s.value=+s.value-1;u()}};
+async function q(){if(d)return;const t=await(await fetch('/state')).json();if(t.a!=a){a=t.a;b.src='data:image/png;base64,'+t.b;
+p.src='data:image/png;base64,'+t.p;s.value=0;u();g.disabled=false;if(a>1)m.textContent='New puzzle (try '+a+')'}
+if(t.s=='ok'){d=1;g.disabled=true;m.textContent='Verified. Back to the terminal.';return}
+if(t.s=='failed'){d=1;m.textContent=t.m;return}setTimeout(q,400)}
+g.onclick=async()=>{g.disabled=true;await fetch('/submit',{method:'POST',body:JSON.stringify({x:+s.value})})};q();</script>"""
+
+
+class _Puzzle:
+    def __init__(self) -> None:
+        self.state = {"s": "pending", "a": 0, "b": "", "p": "", "m": ""}
+        self.q: queue.Queue[int] = queue.Queue()
+        self.lock = threading.Lock()
+        o = self
+
+        class H(BaseHTTPRequestHandler):
+            def log_message(self, *a): pass
+            def do_GET(self):
+                if self.path == "/state":
+                    with o.lock:
+                        body = json.dumps(o.state).encode()
+                else:
+                    body = _PAGE.encode()
+                self.send_response(200); self.end_headers(); self.wfile.write(body)
+            def do_POST(self):
+                n = int(self.headers.get("content-length") or 0)
+                o.q.put(int(json.loads(self.rfile.read(n) or b"{}").get("x", 0)))
+                self.send_response(200); self.end_headers(); self.wfile.write(b"{}")
+
+        self.httpd = ThreadingHTTPServer(("127.0.0.1", 0), H)
+        threading.Thread(target=self.httpd.serve_forever, daemon=True).start()
+        self.url = f"http://127.0.0.1:{self.httpd.server_address[1]}/"
+
+    def show(self, c: Captcha, a: int) -> None:
+        with self.lock:
+            self.state.update(s="pending", a=a, b=c.background, p=c.piece, m="")
+
+    def done(self, ok: bool, m: str = "") -> None:
+        with self.lock:
+            self.state.update(s="ok" if ok else "failed", m=m)
+
+
+async def _run(coro):
+    return await coro
+
+
+def _client(http: aiohttp.ClientSession, region: str) -> GacClient:
+    return GacClient(region, http, FileStore(SESSION))
+
+
+@app.command()
+def login(mobile: str = typer.Option(..., prompt=True), region: str = "AU") -> None:
+    """Sign in with your mobile number and an SMS code."""
+    async def go() -> None:
+        async with aiohttp.ClientSession() as http:
+            client = _client(http, region)
+            pz = _Puzzle()
+            opened = False
+            for attempt in range(1, 6):
+                captcha = await client.start_captcha()
+                pz.show(captcha, attempt)
+                if not opened:
+                    opened = webbrowser.open(pz.url)
+                    typer.echo(f"Solve the puzzle: {pz.url}")
+                x = await asyncio.to_thread(pz.q.get)
+                try:
+                    await client.request_sms(mobile, x)
+                    pz.done(True)
+                    break
+                except (CaptchaError, LoginError) as exc:
+                    typer.echo(f"  {exc}; new puzzle")
+            else:
+                raise typer.Exit(1)
+            code = typer.prompt("SMS code")
+            await client.login_sms(mobile, code)
+            typer.echo("Signed in.")
+    asyncio.run(go())
+
+
+@app.command()
+def vehicles(region: str = "AU") -> None:
+    """List the vehicles on the account."""
+    async def go() -> None:
+        async with aiohttp.ClientSession() as http:
+            client = _client(http, region)
+            await client.load()
+            for v in await client.list_vehicles():
+                typer.echo(f"{v.vin}  {v.model or ''}  {v.plate or ''}")
+    asyncio.run(go())
+
+
+@app.command()
+def status(vin: str, region: str = "AU") -> None:
+    """Show live status for a VIN."""
+    async def go() -> None:
+        async with aiohttp.ClientSession() as http:
+            client = _client(http, region)
+            await client.load()
+            s = await client.get_status(vin)
+            typer.echo(json.dumps({
+                "soc": s.soc, "range_km": s.range_km, "odometer_km": s.odometer_km,
+                "charging": s.charging, "plugged_in": s.plugged_in, "locked": s.locked,
+                "cabin_temp_c": s.cabin_temp_c, "aux_voltage": s.aux_voltage,
+                "tyres_kpa": [t.pressure_kpa for t in s.tyres],
+            }, indent=2))
+    asyncio.run(go())
+
+
+@app.command()
+def charge(vin: str, action: str, region: str = "AU") -> None:
+    """Charge control: action = now | pause."""
+    async def go() -> None:
+        async with aiohttp.ClientSession() as http:
+            client = _client(http, region)
+            await client.load()
+            if action == "now":
+                await client.charge_now(vin)
+            elif action == "pause":
+                await client.charge_pause(vin)
+            else:
+                raise typer.BadParameter("action must be now or pause")
+            typer.echo(f"charge {action}: accepted")
+    asyncio.run(go())
+
+
+if __name__ == "__main__":
+    app()