ha-mcp-dev 9.1.0.dev3360__tar.gz → 9.1.1.dev3362__tar.gz

{ha_mcp_dev-9.1.0.dev3360 → ha_mcp_dev-9.1.1.dev3362}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ha-mcp-dev
-Version: 9.1.0.dev3360
+Version: 9.1.1.dev3362
 Summary: Home Assistant MCP Server - Complete control of Home Assistant through MCP
 Keywords: mcp,home-assistant,ai,automation,smart-home
 Author: Julien

{ha_mcp_dev-9.1.0.dev3360 → ha_mcp_dev-9.1.1.dev3362}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "ha-mcp-dev"
-version = "9.1.0.dev3360"
+version = "9.1.1.dev3362"
 description = "Home Assistant MCP Server - Complete control of Home Assistant through MCP"
 readme = "README.md"
 requires-python = ">=3.13,<3.15"

{ha_mcp_dev-9.1.0.dev3360 → ha_mcp_dev-9.1.1.dev3362}/pyproject.toml.orig

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "ha-mcp-dev"
-version = "9.1.0.dev3360"
+version = "9.1.1.dev3362"
 description = "Home Assistant MCP Server - Complete control of Home Assistant through MCP"
 readme = "README.md"
 # Upper bound widened to <3.15 so the package installs on Home Assistant's

{ha_mcp_dev-9.1.0.dev3360 → ha_mcp_dev-9.1.1.dev3362}/src/ha_mcp/settings_ui/locales/en.json

@@ -444,6 +444,7 @@
     "policies.pending.decision.denied": "denied",
     "policies.pending.invalid_token": "This approval token is no longer valid (already consumed or expired).",
     "policies.pending.action_failed": "Approval action failed: {detail}",
+    "policies.pending.announcement": "Pending approvals: {count}",
     "visibility.errors.reach_server": "Could not reach the server: {message}",
     "visibility.errors.corrupt_suffix": " (entity_visibility.json appears corrupt; edit or delete it in the server's data directory)",
     "visibility.errors.load_detail": "Failed to load visibility config: {detail}",

{ha_mcp_dev-9.1.0.dev3360 → ha_mcp_dev-9.1.1.dev3362}/src/ha_mcp/settings_ui/settings.css

@@ -734,10 +734,17 @@
   #panel-tool-security-policies > h2 {
     font-size: 1.125rem; font-weight: 500; margin-bottom: 8px;
   }
-  .policy-rule-card {
+  .policy-rule-card, .policy-pending-card {
     background: var(--surface); border: var(--card-border); border-radius: 12px;
     padding: 14px 16px; margin: 8px 0;
   }
+  .policy-pending-card strong { font-size: 0.9375rem; font-weight: 500; }
+  .policy-pending-args {
+    white-space: pre-wrap; overflow-wrap: anywhere; background: var(--bg);
+    padding: 8px; margin: 6px 0; border-radius: 6px; font-size: 0.8rem;
+  }
+  .policy-pending-expires { font-size: 0.75rem; color: var(--text-secondary); }
+  .policy-pending-actions { display: flex; flex-wrap: wrap; gap: 8px; margin-top: 8px; }
   .policy-rule-header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 8px; }
   .policy-rule-header strong { font-size: 0.9375rem; font-weight: 500; }
   .policy-rule-remove {

{ha_mcp_dev-9.1.0.dev3360 → ha_mcp_dev-9.1.1.dev3362}/src/ha_mcp/settings_ui/settings.html

@@ -479,6 +479,7 @@
   <section id="policy-pending" style="margin-bottom:16px">
     <h3 style="font-size:1rem;margin-bottom:8px" data-i18n="policies.pending.title">Pending approvals</h3>
     <div id="policy-pending-list" class="backup-empty" data-i18n="policies.pending.empty">No pending approvals.</div>
+    <div id="policy-pending-announcement" class="visually-hidden" role="status" aria-live="polite"></div>
   </section>
 
   <section id="policy-rules">

{ha_mcp_dev-9.1.0.dev3360 → ha_mcp_dev-9.1.1.dev3362}/src/ha_mcp/settings_ui/settings_js/07_policy_actions.js

@@ -271,6 +271,29 @@ async function policyClearPin() {
   await policyRefreshPinStatus();
 }
 
+// The list holds either approval cards or one status message; only a message
+// belongs in the dashed, centred empty-state box. Also announces the message.
+function policyShowPendingMessage(list, message, {emphasis = true, isError = false} = {}) {
+  delete list.dataset.pendingTokens;
+  list.classList.add('backup-empty');
+  list.innerHTML = emphasis ? '<em>' + escapeHtml(message) + '</em>' : escapeHtml(message);
+  policyAnnouncePending(message, {isError});
+}
+
+// The list is polled, so only a changed message is written here: a rewrite
+// would make a screen reader repeat an unchanged outage. `repeat` is for a
+// caller that knows the news is new although the text is the same.
+function policyAnnouncePending(message, {isError = false, repeat = false} = {}) {
+  const region = document.getElementById('policy-pending-announcement');
+  if (!repeat && region.textContent === message) return;
+  setStatusAlert(region, isError);
+  region.textContent = message;
+}
+
+function policyPendingExpiry(entry) {
+  return t('policies.pending.expires', {time: entry.expires_at}, 'Expires: ' + entry.expires_at);
+}
+
 async function policyLoadPending() {
   const list = document.getElementById('policy-pending-list');
   let resp;
@@ -279,11 +302,11 @@ async function policyLoadPending() {
   } catch (e) {
     // Surface the failure inline — silent return leaves the pending
     // list visibly frozen with no signal that polling broke.
-    list.innerHTML = '<em style="color:var(--text-secondary)">' + escapeHtml(t(
+    policyShowPendingMessage(list, t(
       'policies.pending.offline',
       {message: e.message},
       'Lost contact with server (' + e.message + '). Retrying.'
-    )) + '</em>';
+    ), {isError: true});
     return;
   }
   if (resp.status === 503) {
@@ -293,11 +316,11 @@ async function policyLoadPending() {
     // the server's 503 message rather than misleadingly claiming the
     // user disabled the feature.
     if (policyState.enabledKnown && !policyState.enabled) {
-      list.innerHTML = '<em>' + escapeHtml(t(
+      policyShowPendingMessage(list, t(
         'policies.pending.disabled',
         {},
         'Tool Security Policies is turned off. Toggle it on (top of this tab or in Server Settings) and restart the App (add-on) to enable gating.'
-      )) + '</em>';
+      ));
     } else {
       // Feature is on (or unknown) but the queue isn't reachable —
       // sidecar mode, startup ImportError, or transient outage.
@@ -310,7 +333,7 @@ async function policyLoadPending() {
         const body = await resp.json();
         if (body && body.error) msg = body.error;
       } catch (_e) { /* keep default */ }
-      list.innerHTML = '<em>' + escapeHtml(msg) + '</em>';
+      policyShowPendingMessage(list, msg, {isError: true});
     }
     return;
   }
@@ -318,22 +341,50 @@ async function policyLoadPending() {
   const data = await resp.json();
   const pending = data.pending || [];
   if (pending.length === 0) {
-    list.textContent = t('policies.pending.empty', {}, 'No pending approvals.');
+    policyShowPendingMessage(
+      list,
+      t('policies.pending.empty', {}, 'No pending approvals.'),
+      {emphasis: false}
+    );
+    return;
+  }
+  // Rebuilding unchanged cards would drop keyboard focus from Approve/Deny on
+  // every poll and reset a screen reader's cursor. A deadline can still be cut
+  // under an unchanged token, so that text is updated in place and announced:
+  // with focus held on a button, nothing else tells a screen reader.
+  const tokens = JSON.stringify(pending.map(p => p.token));
+  if (list.dataset.pendingTokens === tokens) {
+    const expiries = list.querySelectorAll('.policy-pending-expires');
+    const changed = [];
+    pending.forEach((p, i) => {
+      const text = policyPendingExpiry(p);
+      if (expiries[i].textContent === text) return;
+      expiries[i].textContent = text;
+      changed.push(p.tool_name + ': ' + text);
+    });
+    if (changed.length) policyAnnouncePending(changed.join(' '), {repeat: true});
     return;
   }
+  list.dataset.pendingTokens = tokens;
+  list.classList.remove('backup-empty');
+  policyAnnouncePending(t(
+    'policies.pending.announcement',
+    {count: pending.length},
+    'Pending approvals: ' + pending.length
+  ), {repeat: true});
   list.innerHTML = pending.map(p => (
-    '<div data-pending-token="' + escapeHtml(p.token) + '" style="border:1px solid var(--border); padding:10px; margin:6px 0; border-radius:8px; background:var(--surface)">' +
+    '<div class="policy-pending-card" data-pending-token="' + escapeHtml(p.token) + '">' +
     '<strong>' + escapeHtml(p.tool_name) + '</strong>' +
-    '<pre style="white-space:pre-wrap; background:var(--bg); padding:8px; margin:6px 0; border-radius:6px; font-size:0.8rem">' +
+    '<pre class="policy-pending-args">' +
     escapeHtml(JSON.stringify(p.args, null, 2)) + '</pre>' +
-    '<small style="color:var(--text-secondary)">' + escapeHtml(t('policies.pending.expires', {time: p.expires_at}, 'Expires: ' + p.expires_at)) + '</small><br>' +
-    '<div style="margin-top:8px; display:flex; gap:8px">' +
+    '<div class="policy-pending-expires">' + escapeHtml(policyPendingExpiry(p)) + '</div>' +
+    '<div class="policy-pending-actions">' +
     '<button class="restart-btn" data-policy-token="' + escapeHtml(p.token) + '" data-policy-action="approve">' + escapeHtml(t('actions.approve', {}, 'Approve')) + '</button>' +
     '<button class="danger-btn" data-policy-token="' + escapeHtml(p.token) + '" data-policy-action="deny">' + escapeHtml(t('actions.deny', {}, 'Deny')) + '</button>' +
     '</div></div>'
   )).join('');
-  // Re-bind decision buttons each render (no event delegation needed —
-  // pending list is small and re-rendered on every poll).
+  // Bind decision buttons each render (no event delegation needed — the
+  // pending list is small and rebuilt whenever the queue changes).
   list.querySelectorAll('button[data-policy-token]').forEach(btn => {
     btn.addEventListener('click', () =>
       policyDecide(btn.dataset.policyToken, btn.dataset.policyAction)

{ha_mcp_dev-9.1.0.dev3360 → ha_mcp_dev-9.1.1.dev3362}/src/ha_mcp/settings_ui/settings_js/09_prefs_visibility.js

@@ -1,5 +1,5 @@
-// Auto-activate tab from ?tab=<name> query string (used by approval URLs
-// generated by the policy middleware: /settings?tab=tool-security-policies&token=...).
+// Auto-activate tab from the query string; supports deep links of the form
+// ?tab=<panel>&token=<approval token>.
 // If a &token=X is present and the target is the policy tab, scroll to
 // the matching pending entry once policyLoadPending() resolves.
 (function activateTabFromQuery() {
@@ -12,8 +12,8 @@
     activateTab(target);
     const token = params.get('token');
     if (token && target === 'tool-security-policies') {
-      // policyLoadPending() runs inside activateTab; wait a tick then
-      // scroll to the matching pending entry if it exists.
+      // policyLoadPending() runs inside activateTab; wait a fixed 500 ms,
+      // then scroll to the matching pending entry if it exists.
       setTimeout(() => {
         const row = document.querySelector('[data-pending-token="' + token + '"]');
         if (row && row.scrollIntoView) {