unifi-cli 0.3.2__tar.gz → 0.3.3__tar.gz

{unifi_cli-0.3.2 → unifi_cli-0.3.3}/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file.
 
+## [0.3.3](https://github.com/rvben/unifi-cli/compare/v0.3.2...v0.3.3) - 2026-08-10
+
+### Fixed
+
+- **api**: decode a response body before judging its content type ([0e49404](https://github.com/rvben/unifi-cli/commit/0e4940467e428f4cea20f54c1eafbc337b6cca00))
+- **api**: report an absent controller application as unsupported ([0f5384c](https://github.com/rvben/unifi-cli/commit/0f5384c84caccc3dfcbf5b5b63831cd97eca55b5))
+
 ## [0.3.2](https://github.com/rvben/unifi-cli/compare/v0.3.1...v0.3.2) - 2026-08-10
 
 ### Fixed
@@ -130,7 +137,7 @@ Thanks to [@l3wi](https://github.com/l3wi) for reporting the TLS certificate val
 - TUI: device panel shows all devices without scrolling, cursor moves through items
 - TUI: client list viewport follows cursor instead of cursor staying at top
 - CLI: dynamic column widths adapt to data instead of fixed widths causing misalignment
-- CLI: MAC suffixes stripped from display names (e.g., "garage-bluetooth-proxy" instead of "garage-bluetooth-proxy 43:3c")
+- CLI: MAC suffixes stripped from display names (e.g., "lobby-bluetooth-proxy" instead of "lobby-bluetooth-proxy 43:3c")
 
 ### Changed
 - TUI: overlay shortcut hints moved from footer to overlay bottom border

{unifi_cli-0.3.2 → unifi_cli-0.3.3}/Cargo.lock

@@ -2786,7 +2786,7 @@ checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
 
 [[package]]
 name = "unifi-cli"
-version = "0.3.2"
+version = "0.3.3"
 dependencies = [
  "clap",
  "clap_complete",

{unifi_cli-0.3.2 → unifi_cli-0.3.3}/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "unifi-cli"
-version = "0.3.2"
+version = "0.3.3"
 edition = "2024"
 rust-version = "1.90"
 description = "CLI for UniFi Network controller"

{unifi_cli-0.3.2 → unifi_cli-0.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: unifi-cli
-Version: 0.3.2
+Version: 0.3.3
 Classifier: Development Status :: 3 - Alpha
 Classifier: Environment :: Console
 Classifier: Intended Audience :: System Administrators
@@ -357,6 +357,7 @@ unifi schema    # Dumps all commands, arguments, output fields as JSON
 | 2 | `confirmation_required` | A destructive command ran without `--yes` and without a TTY |
 | 3 | `auth_error` | Authentication error (401/403) |
 | 4 | `not_found` | Not found (404) |
+| 4 | `unsupported` | The controller does not serve this API at all (it answered a JSON endpoint with HTML, which is how UniFi OS reports an application it does not have); unlike `not_found` there is no other identifier worth trying |
 | 5 | `client_error` | The controller rejected the request itself (4xx other than 401/403/404/408/429); retrying it unchanged cannot help |
 | 5 | `retry_later` | The controller invited a retry (429 rate limited, 408 request timeout); back off and send the same request again |
 | 5 | `api_error` | The controller failed to serve the request (5xx); may be transient |

{unifi_cli-0.3.2 → unifi_cli-0.3.3}/README.md

@@ -336,6 +336,7 @@ unifi schema    # Dumps all commands, arguments, output fields as JSON
 | 2 | `confirmation_required` | A destructive command ran without `--yes` and without a TTY |
 | 3 | `auth_error` | Authentication error (401/403) |
 | 4 | `not_found` | Not found (404) |
+| 4 | `unsupported` | The controller does not serve this API at all (it answered a JSON endpoint with HTML, which is how UniFi OS reports an application it does not have); unlike `not_found` there is no other identifier worth trying |
 | 5 | `client_error` | The controller rejected the request itself (4xx other than 401/403/404/408/429); retrying it unchanged cannot help |
 | 5 | `retry_later` | The controller invited a retry (429 rate limited, 408 request timeout); back off and send the same request again |
 | 5 | `api_error` | The controller failed to serve the request (5xx); may be transient |

{unifi_cli-0.3.2 → unifi_cli-0.3.3}/src/api/client.rs

@@ -11,6 +11,49 @@ pub fn error_for_status(status: u16, message: String) -> ApiError {
     }
 }
 
+/// Decode a successful response as JSON, naming what answered when it is not.
+///
+/// UniFi OS answers a request for an application the controller does not have
+/// by proxying it to the web UI, which returns 200 with an HTML page. Decoding
+/// that as JSON produces "error decoding response body", which names neither
+/// the endpoint nor the reason, so the caller cannot tell a missing application
+/// from a transport fault worth retrying.
+///
+/// The body is decoded first and the content type only chooses the error for a
+/// body that did not decode: a controller or proxy that serves JSON under
+/// `text/plain` or under no content type at all is still answering the request,
+/// so it must not be reported as an application that is not there.
+async fn json_or_unsupported<T: DeserializeOwned>(
+    resp: reqwest::Response,
+    endpoint: &str,
+) -> Result<T, ApiError> {
+    let raw = resp
+        .headers()
+        .get(reqwest::header::CONTENT_TYPE)
+        .and_then(|v| v.to_str().ok())
+        .unwrap_or("")
+        .to_string();
+    let bytes = resp.bytes().await?;
+    match serde_json::from_slice(&bytes) {
+        Ok(value) => Ok(value),
+        // A body that claims to be JSON and is not is a fault in a controller
+        // that does serve this endpoint, which is a different thing entirely.
+        Err(e) if raw.to_ascii_lowercase().contains("json") => Err(ApiError::Other(format!(
+            "Failed to decode the response from {endpoint}: {e}"
+        ))),
+        Err(_) => {
+            let content_type = match raw.split(';').next().map(str::trim) {
+                Some(t) if !t.is_empty() => t.to_string(),
+                _ => "no content type".to_string(),
+            };
+            Err(ApiError::Unsupported {
+                endpoint: endpoint.to_string(),
+                content_type,
+            })
+        }
+    }
+}
+
 /// Valid RTSPS quality levels accepted by the Protect API.
 const VALID_QUALITIES: &[&str] = &["high", "medium", "low", "package"];
 
@@ -120,18 +163,19 @@ impl UnifiClient {
             let body = resp.text().await.unwrap_or_default();
             return Err(error_for_status(status, body));
         }
-        Ok(resp.json().await?)
+        json_or_unsupported(resp, path).await
     }
 
     async fn get_legacy<T: DeserializeOwned>(&self, path: &str) -> Result<Vec<T>, ApiError> {
-        let url = format!("{}/proxy/network/api/s/default{path}", self.base_url);
+        let endpoint = format!("/proxy/network/api/s/default{path}");
+        let url = format!("{}{endpoint}", self.base_url);
         let resp = self.http.get(&url).send().await?;
         let status = resp.status().as_u16();
         if !resp.status().is_success() {
             let body = resp.text().await.unwrap_or_default();
             return Err(error_for_status(status, body));
         }
-        let legacy: LegacyResponse<T> = resp.json().await?;
+        let legacy: LegacyResponse<T> = json_or_unsupported(resp, &endpoint).await?;
         if legacy.meta.rc != "ok" {
             return Err(ApiError::Api {
                 status: 200,
@@ -146,17 +190,15 @@ impl UnifiClient {
         manager: &str,
         body: serde_json::Value,
     ) -> Result<serde_json::Value, ApiError> {
-        let url = format!(
-            "{}/proxy/network/api/s/default/cmd/{manager}",
-            self.base_url
-        );
+        let endpoint = format!("/proxy/network/api/s/default/cmd/{manager}");
+        let url = format!("{}{endpoint}", self.base_url);
         let resp = self.http.post(&url).json(&body).send().await?;
         let status = resp.status().as_u16();
         if !resp.status().is_success() {
             let body = resp.text().await.unwrap_or_default();
             return Err(error_for_status(status, body));
         }
-        Ok(resp.json().await?)
+        json_or_unsupported(resp, &endpoint).await
     }
 
     async fn put_legacy<T: serde::Serialize>(
@@ -164,14 +206,15 @@ impl UnifiClient {
         path: &str,
         body: &T,
     ) -> Result<serde_json::Value, ApiError> {
-        let url = format!("{}/proxy/network/api/s/default{path}", self.base_url);
+        let endpoint = format!("/proxy/network/api/s/default{path}");
+        let url = format!("{}{endpoint}", self.base_url);
         let resp = self.http.put(&url).json(body).send().await?;
         let status = resp.status().as_u16();
         if !resp.status().is_success() {
             let body = resp.text().await.unwrap_or_default();
             return Err(error_for_status(status, body));
         }
-        Ok(resp.json().await?)
+        json_or_unsupported(resp, &endpoint).await
     }
 
     async fn post_legacy<T: serde::Serialize>(
@@ -179,14 +222,15 @@ impl UnifiClient {
         path: &str,
         body: &T,
     ) -> Result<serde_json::Value, ApiError> {
-        let url = format!("{}/proxy/network/api/s/default{path}", self.base_url);
+        let endpoint = format!("/proxy/network/api/s/default{path}");
+        let url = format!("{}{endpoint}", self.base_url);
         let resp = self.http.post(&url).json(body).send().await?;
         let status = resp.status().as_u16();
         if !resp.status().is_success() {
             let body = resp.text().await.unwrap_or_default();
             return Err(error_for_status(status, body));
         }
-        Ok(resp.json().await?)
+        json_or_unsupported(resp, &endpoint).await
     }
 
     // Paginate through all results from Integration API
@@ -467,10 +511,8 @@ impl UnifiClient {
         qualities: &[String],
     ) -> Result<RtspsStreams, ApiError> {
         validate_qualities(qualities)?;
-        let url = format!(
-            "{}/proxy/protect/integration/v1/cameras/{camera_id}/rtsps-stream",
-            self.base_url
-        );
+        let endpoint = format!("/proxy/protect/integration/v1/cameras/{camera_id}/rtsps-stream");
+        let url = format!("{}{endpoint}", self.base_url);
         let body = serde_json::json!({ "qualities": qualities });
         let resp = self.http.post(&url).json(&body).send().await?;
         let status = resp.status().as_u16();
@@ -478,7 +520,7 @@ impl UnifiClient {
             let body = resp.text().await.unwrap_or_default();
             return Err(error_for_status(status, body));
         }
-        Ok(resp.json().await?)
+        json_or_unsupported(resp, &endpoint).await
     }
 
     /// Delete RTSPS streams for a camera at the specified quality levels.
@@ -547,7 +589,7 @@ impl UnifiClient {
             let body = resp.text().await.unwrap_or_default();
             return Err(error_for_status(status, body));
         }
-        Ok(resp.json().await?)
+        json_or_unsupported(resp, "/api/system").await
     }
 }
 
@@ -637,7 +679,8 @@ impl ProtectSession {
 
     /// GET from the direct Protect API (cookie-authenticated).
     pub async fn get<T: DeserializeOwned>(&self, path: &str) -> Result<T, ApiError> {
-        let url = format!("{}/proxy/protect/api{path}", self.base_url);
+        let endpoint = format!("/proxy/protect/api{path}");
+        let url = format!("{}{endpoint}", self.base_url);
         let mut req = self
             .http
             .get(&url)
@@ -651,9 +694,7 @@ impl ProtectSession {
             let body = resp.text().await.unwrap_or_default();
             return Err(error_for_status(status, body));
         }
-        let bytes = resp.bytes().await.map_err(ApiError::Http)?;
-        serde_json::from_slice(&bytes)
-            .map_err(|e| ApiError::Other(format!("JSON parse error: {e}")))
+        json_or_unsupported(resp, &endpoint).await
     }
 
     /// List all cameras from the direct Protect API (full objects).

{unifi_cli-0.3.2 → unifi_cli-0.3.3}/src/api/tests.rs

@@ -172,8 +172,8 @@ fn deserialize_paginated_response() {
         "count": 2,
         "totalCount": 2,
         "data": [
-            {"macAddress": "aa:bb:cc:dd:ee:ff", "ipAddress": "10.0.0.1", "name": "Test", "type": "WIRED"},
-            {"macAddress": "11:22:33:44:55:66", "ipAddress": "10.0.0.2", "hostname": "host2", "type": "WIRELESS"}
+            {"macAddress": "aa:bb:cc:dd:ee:ff", "ipAddress": "192.0.2.1", "name": "Test", "type": "WIRED"},
+            {"macAddress": "11:22:33:44:55:66", "ipAddress": "192.0.2.2", "hostname": "host2", "type": "WIRELESS"}
         ]
     }"#;
     let resp: PaginatedResponse<Client> = serde_json::from_str(json).unwrap();
@@ -210,7 +210,7 @@ fn deserialize_legacy_response_ok() {
     let json = r#"{
         "meta": {"rc": "ok"},
         "data": [
-            {"_id": "abc123", "mac": "aa:bb:cc:dd:ee:ff", "ip": "10.0.0.1", "is_wired": true}
+            {"_id": "abc123", "mac": "aa:bb:cc:dd:ee:ff", "ip": "192.0.2.1", "is_wired": true}
         ]
     }"#;
     let resp: LegacyResponse<LegacyClient> = serde_json::from_str(json).unwrap();
@@ -237,15 +237,15 @@ fn deserialize_legacy_response_error() {
 #[test]
 fn deserialize_client_all_fields() {
     let json = r#"{
-        "macAddress": "d0:11:e5:ce:d5:54",
-        "ipAddress": "192.168.1.180",
+        "macAddress": "aa:bb:cc:dd:d5:54",
+        "ipAddress": "198.51.100.180",
         "name": "Mac Mini",
         "hostname": "mac-mini",
         "type": "WIRED"
     }"#;
     let client: Client = serde_json::from_str(json).unwrap();
-    assert_eq!(client.mac_address.as_deref(), Some("d0:11:e5:ce:d5:54"));
-    assert_eq!(client.ip_address.as_deref(), Some("192.168.1.180"));
+    assert_eq!(client.mac_address.as_deref(), Some("aa:bb:cc:dd:d5:54"));
+    assert_eq!(client.ip_address.as_deref(), Some("198.51.100.180"));
     assert_eq!(client.name.as_deref(), Some("Mac Mini"));
     assert_eq!(client.hostname.as_deref(), Some("mac-mini"));
     assert_eq!(client.client_type.as_deref(), Some("WIRED"));
@@ -290,7 +290,7 @@ fn deserialize_legacy_client_full() {
     let json = r#"{
         "_id": "67890",
         "mac": "aa:bb:cc:dd:ee:ff",
-        "ip": "10.0.0.5",
+        "ip": "192.0.2.5",
         "hostname": "myhost",
         "name": "My Client",
         "is_wired": false,
@@ -298,8 +298,8 @@ fn deserialize_legacy_client_full() {
         "tx_bytes": 1048576,
         "rx_bytes": 2097152,
         "signal": -55,
-        "ap_mac": "60:22:32:58:b8:00",
-        "essid": "Notwork"
+        "ap_mac": "aa:bb:cc:dd:b8:00",
+        "essid": "GuestNet"
     }"#;
     let client: LegacyClient = serde_json::from_str(json).unwrap();
     assert_eq!(client.id, "67890");
@@ -309,8 +309,8 @@ fn deserialize_legacy_client_full() {
     assert_eq!(client.tx_bytes, Some(1048576));
     assert_eq!(client.rx_bytes, Some(2097152));
     assert_eq!(client.signal, Some(-55));
-    assert_eq!(client.ap_mac.as_deref(), Some("60:22:32:58:b8:00"));
-    assert_eq!(client.ssid.as_deref(), Some("Notwork"));
+    assert_eq!(client.ap_mac.as_deref(), Some("aa:bb:cc:dd:b8:00"));
+    assert_eq!(client.ssid.as_deref(), Some("GuestNet"));
 }
 
 #[test]
@@ -351,15 +351,15 @@ fn deserialize_site() {
 #[test]
 fn deserialize_device() {
     let json = r#"{
-        "macAddress": "9c:05:d6:bc:06:43",
-        "ipAddress": "192.168.1.1",
+        "macAddress": "aa:bb:cc:dd:06:43",
+        "ipAddress": "198.51.100.1",
         "name": "UCG Ultra",
         "model": "UCG Ultra",
         "state": "ONLINE",
         "firmwareVersion": "5.0.12"
     }"#;
     let device: Device = serde_json::from_str(json).unwrap();
-    assert_eq!(device.mac_address.as_deref(), Some("9c:05:d6:bc:06:43"));
+    assert_eq!(device.mac_address.as_deref(), Some("aa:bb:cc:dd:06:43"));
     assert_eq!(device.name.as_deref(), Some("UCG Ultra"));
     assert_eq!(device.state.as_deref(), Some("ONLINE"));
     assert_eq!(device.firmware_version.as_deref(), Some("5.0.12"));
@@ -406,14 +406,14 @@ fn deserialize_health_wan() {
     let json = r#"{
         "subsystem": "wan",
         "status": "ok",
-        "wan_ip": "81.172.153.156",
-        "isp_name": "Caiway NL"
+        "wan_ip": "203.0.113.156",
+        "isp_name": "ExampleISP NL"
     }"#;
     let health: HealthSubsystem = serde_json::from_str(json).unwrap();
     assert_eq!(health.subsystem, "wan");
     assert_eq!(health.status.as_deref(), Some("ok"));
-    assert_eq!(health.wan_ip.as_deref(), Some("81.172.153.156"));
-    assert_eq!(health.isp_name.as_deref(), Some("Caiway NL"));
+    assert_eq!(health.wan_ip.as_deref(), Some("203.0.113.156"));
+    assert_eq!(health.isp_name.as_deref(), Some("ExampleISP NL"));
 }
 
 #[test]
@@ -472,7 +472,7 @@ fn deserialize_sysinfo_minimal() {
 fn deserialize_event() {
     let json = r#"{
         "key": "EVT_AP_Connected",
-        "msg": "AP[80:2a:a8:cd:47:ab] was connected",
+        "msg": "AP[aa:bb:cc:dd:47:ab] was connected",
         "subsystem": "wlan",
         "time": 1710886800,
         "datetime": "2026-03-19T12:00:00Z"
@@ -554,7 +554,7 @@ fn deserialize_port_entry_minimal() {
 #[test]
 fn deserialize_device_with_ports() {
     let json = r#"{
-        "mac": "9c:05:d6:bc:06:43",
+        "mac": "aa:bb:cc:dd:06:43",
         "name": "USW-24-PoE",
         "model": "USW-24-PoE",
         "port_table": [
@@ -581,8 +581,8 @@ fn deserialize_device_with_empty_port_table() {
 #[test]
 fn deserialize_legacy_device() {
     let json = r#"{
-        "mac": "9c:05:d6:bc:06:43",
-        "ip": "192.168.1.1",
+        "mac": "aa:bb:cc:dd:06:43",
+        "ip": "198.51.100.1",
         "name": "UCG Ultra",
         "model": "UCG Ultra",
         "type": "ugw",
@@ -592,7 +592,7 @@ fn deserialize_legacy_device() {
         "num_sta": 42
     }"#;
     let device: LegacyDevice = serde_json::from_str(json).unwrap();
-    assert_eq!(device.mac.as_deref(), Some("9c:05:d6:bc:06:43"));
+    assert_eq!(device.mac.as_deref(), Some("aa:bb:cc:dd:06:43"));
     assert_eq!(device.name.as_deref(), Some("UCG Ultra"));
     assert_eq!(device.state, Some(1));
     assert_eq!(device.state_str(), "ONLINE");
@@ -674,8 +674,8 @@ fn host_system_missing_state() {
 fn strip_mac_suffix_removes_colon_suffix() {
     // MAC aa:bb:cc:dd:ee:ff → suffix " ee:ff"
     assert_eq!(
-        strip_mac_suffix("garage-bluetooth-proxy ee:ff", Some("aa:bb:cc:dd:ee:ff")),
-        "garage-bluetooth-proxy"
+        strip_mac_suffix("lobby-bluetooth-proxy ee:ff", Some("aa:bb:cc:dd:ee:ff")),
+        "lobby-bluetooth-proxy"
     );
 }
 
@@ -683,8 +683,8 @@ fn strip_mac_suffix_removes_colon_suffix() {
 fn strip_mac_suffix_removes_no_colon_suffix() {
     // Also matches " eeff" without colon
     assert_eq!(
-        strip_mac_suffix("garage-bluetooth-proxy eeff", Some("aa:bb:cc:dd:ee:ff")),
-        "garage-bluetooth-proxy"
+        strip_mac_suffix("lobby-bluetooth-proxy eeff", Some("aa:bb:cc:dd:ee:ff")),
+        "lobby-bluetooth-proxy"
     );
 }
 

{unifi_cli-0.3.2 → unifi_cli-0.3.3}/src/api/types.rs

@@ -528,6 +528,15 @@ pub enum ApiError {
     /// rejected locally before any HTTP call. Published by `unifi schema`
     /// as kind `conflict`, exit code 6.
     Conflict(String),
+    /// The controller answered a JSON endpoint with something else, which is
+    /// how UniFi OS reports an application it does not have: the request is
+    /// proxied to the web UI and returns 200 with an HTML page. Distinct from
+    /// `NotFound` because the whole API is absent, not one record, so there is
+    /// no other identifier worth trying. Published as kind `unsupported`.
+    Unsupported {
+        endpoint: String,
+        content_type: String,
+    },
     Other(String),
 }
 
@@ -611,6 +620,24 @@ impl fmt::Display for ApiError {
                 )
             }
             ApiError::Conflict(msg) => write!(f, "{msg}"),
+            ApiError::Unsupported {
+                endpoint,
+                content_type,
+            } => {
+                write!(
+                    f,
+                    "This controller does not serve {endpoint}: it answered with {content_type} \
+                     instead of JSON"
+                )?;
+                if endpoint.contains("/protect/") {
+                    write!(
+                        f,
+                        "\n  Hint: UniFi OS proxies the request to its web UI when the Protect \
+                         application is not installed on the controller"
+                    )?;
+                }
+                Ok(())
+            }
             ApiError::Other(msg) => write!(f, "{msg}"),
         }
     }

{unifi_cli-0.3.2 → unifi_cli-0.3.3}/src/commands/clients.rs

@@ -495,33 +495,33 @@ mod tests {
     fn merge_joins_legacy_detail_by_mac() {
         let clients = vec![make_client(
             "Plug",
-            "70:03:9f:90:3c:29",
-            "10.10.20.202",
+            "aa:bb:cc:dd:3c:29",
+            "192.0.2.202",
             "WIRELESS",
         )];
         let legacy_records = vec![legacy(
-            r#"{"_id":"1","mac":"70:03:9f:90:3c:29","ip":"10.10.20.202","essid":"Notwork",
+            r#"{"_id":"1","mac":"aa:bb:cc:dd:3c:29","ip":"192.0.2.202","essid":"GuestNet",
                 "signal":-57,"uptime":321125,"network":"IoT","vlan":20}"#,
         )];
 
         let rows = merge_rows(clients, legacy_records);
         assert_eq!(rows.len(), 1);
         let json = rows[0].to_json();
-        assert_eq!(json["ssid"], "Notwork");
+        assert_eq!(json["ssid"], "GuestNet");
         assert_eq!(json["signal"], -57);
         assert_eq!(json["network"], "IoT");
         assert_eq!(json["vlan"], 20);
-        assert_eq!(json["ip"], "10.10.20.202");
+        assert_eq!(json["ip"], "192.0.2.202");
     }
 
     #[test]
     fn merge_matches_macs_in_different_formats() {
-        let clients = vec![make_client("X", "AA-BB-CC-DD-EE-FF", "10.0.0.1", "WIRED")];
+        let clients = vec![make_client("X", "AA-BB-CC-DD-EE-FF", "192.0.2.1", "WIRED")];
         let legacy_records = vec![legacy(
-            r#"{"_id":"1","mac":"aa:bb:cc:dd:ee:ff","ip":"10.0.0.5"}"#,
+            r#"{"_id":"1","mac":"aa:bb:cc:dd:ee:ff","ip":"192.0.2.5"}"#,
         )];
         let rows = merge_rows(clients, legacy_records);
-        assert_eq!(rows[0].live_ip(), Some("10.0.0.5"));
+        assert_eq!(rows[0].live_ip(), Some("192.0.2.5"));
     }
 
     /// The defect this guards: `clients list` read `ip` from the integration API,
@@ -532,12 +532,12 @@ mod tests {
     fn live_ip_wins_over_the_integration_apis_last_known_address() {
         let clients = vec![make_client(
             "Refrigerator",
-            "c4:dd:57:1d:07:e6",
-            "10.10.20.203",
+            "aa:bb:cc:dd:07:e6",
+            "192.0.2.203",
             "WIRELESS",
         )];
         let legacy_records = vec![legacy(
-            r#"{"_id":"1","mac":"c4:dd:57:1d:07:e6","essid":"Network"}"#,
+            r#"{"_id":"1","mac":"aa:bb:cc:dd:07:e6","essid":"Network"}"#,
         )];
 
         let rows = merge_rows(clients, legacy_records);
@@ -555,7 +555,7 @@ mod tests {
         let clients = vec![make_client(
             "Ghost",
             "aa:bb:cc:dd:ee:ff",
-            "10.0.0.1",
+            "192.0.2.1",
             "WIRED",
         )];
         let rows = merge_rows(clients, vec![]);
@@ -570,12 +570,12 @@ mod tests {
     #[test]
     fn merge_preserves_client_order_and_count() {
         let clients = vec![
-            make_client("A", "aa:bb:cc:dd:ee:01", "10.0.0.1", "WIRED"),
-            make_client("B", "aa:bb:cc:dd:ee:02", "10.0.0.2", "WIRELESS"),
-            make_client("C", "aa:bb:cc:dd:ee:03", "10.0.0.3", "WIRELESS"),
+            make_client("A", "aa:bb:cc:dd:ee:01", "192.0.2.1", "WIRED"),
+            make_client("B", "aa:bb:cc:dd:ee:02", "192.0.2.2", "WIRELESS"),
+            make_client("C", "aa:bb:cc:dd:ee:03", "192.0.2.3", "WIRELESS"),
         ];
         let legacy_records = vec![legacy(
-            r#"{"_id":"1","mac":"aa:bb:cc:dd:ee:02","ip":"1.2.3.4"}"#,
+            r#"{"_id":"1","mac":"aa:bb:cc:dd:ee:02","ip":"192.0.2.104"}"#,
         )];
         let rows = merge_rows(clients, legacy_records);
         let names: Vec<String> = rows
@@ -583,26 +583,26 @@ mod tests {
             .map(|r| r.client.clean_name())
             .collect::<Vec<_>>();
         assert_eq!(names, vec!["A", "B", "C"]);
-        assert_eq!(rows[1].live_ip(), Some("1.2.3.4"));
+        assert_eq!(rows[1].live_ip(), Some("192.0.2.104"));
         assert_eq!(rows[0].live_ip(), None);
     }
 
     #[test]
     fn merge_ignores_legacy_records_with_no_matching_client() {
-        let clients = vec![make_client("A", "aa:bb:cc:dd:ee:01", "10.0.0.1", "WIRED")];
+        let clients = vec![make_client("A", "aa:bb:cc:dd:ee:01", "192.0.2.1", "WIRED")];
         let legacy_records = vec![
-            legacy(r#"{"_id":"1","mac":"aa:bb:cc:dd:ee:01","ip":"1.1.1.1"}"#),
-            legacy(r#"{"_id":"2","mac":"ff:ff:ff:ff:ff:ff","ip":"2.2.2.2"}"#),
+            legacy(r#"{"_id":"1","mac":"aa:bb:cc:dd:ee:01","ip":"192.0.2.101"}"#),
+            legacy(r#"{"_id":"2","mac":"ff:ff:ff:ff:ff:ff","ip":"192.0.2.102"}"#),
         ];
         let rows = merge_rows(clients, legacy_records);
         assert_eq!(rows.len(), 1);
-        assert_eq!(rows[0].live_ip(), Some("1.1.1.1"));
+        assert_eq!(rows[0].live_ip(), Some("192.0.2.101"));
     }
 
     #[test]
     fn to_json_emits_exactly_the_published_field_set() {
         let rows = merge_rows(
-            vec![make_client("A", "aa:bb:cc:dd:ee:01", "10.0.0.1", "WIRED")],
+            vec![make_client("A", "aa:bb:cc:dd:ee:01", "192.0.2.1", "WIRED")],
             vec![],
         );
         let json = rows[0].to_json();
@@ -647,8 +647,8 @@ mod tests {
     #[test]
     fn filter_no_constraints() {
         let clients = vec![
-            make_client("A", "aa:bb:cc:dd:ee:ff", "10.0.0.1", "WIRED"),
-            make_client("B", "11:22:33:44:55:66", "10.0.0.2", "WIRELESS"),
+            make_client("A", "aa:bb:cc:dd:ee:ff", "192.0.2.1", "WIRED"),
+            make_client("B", "11:22:33:44:55:66", "192.0.2.2", "WIRELESS"),
         ];
         let filter = ListFilter {
             wired: false,
@@ -661,8 +661,8 @@ mod tests {
     #[test]
     fn filter_wired_only() {
         let clients = vec![
-            make_client("A", "aa:bb:cc:dd:ee:ff", "10.0.0.1", "WIRED"),
-            make_client("B", "11:22:33:44:55:66", "10.0.0.2", "WIRELESS"),
+            make_client("A", "aa:bb:cc:dd:ee:ff", "192.0.2.1", "WIRED"),
+            make_client("B", "11:22:33:44:55:66", "192.0.2.2", "WIRELESS"),
         ];
         let filter = ListFilter {
             wired: true,
@@ -677,8 +677,8 @@ mod tests {
     #[test]
     fn filter_wireless_only() {
         let clients = vec![
-            make_client("A", "aa:bb:cc:dd:ee:ff", "10.0.0.1", "WIRED"),
-            make_client("B", "11:22:33:44:55:66", "10.0.0.2", "WIRELESS"),
+            make_client("A", "aa:bb:cc:dd:ee:ff", "192.0.2.1", "WIRED"),
+            make_client("B", "11:22:33:44:55:66", "192.0.2.2", "WIRELESS"),
         ];
         let filter = ListFilter {
             wired: false,
@@ -693,8 +693,8 @@ mod tests {
     #[test]
     fn filter_by_name_case_insensitive() {
         let clients = vec![
-            make_client("Mac Mini", "aa:bb:cc:dd:ee:ff", "10.0.0.1", "WIRED"),
-            make_client("iPhone", "11:22:33:44:55:66", "10.0.0.2", "WIRELESS"),
+            make_client("Mac Mini", "aa:bb:cc:dd:ee:ff", "192.0.2.1", "WIRED"),
+            make_client("iPhone", "11:22:33:44:55:66", "192.0.2.2", "WIRELESS"),
         ];
         let filter = ListFilter {
             wired: false,
@@ -708,7 +708,7 @@ mod tests {
 
     #[test]
     fn filter_by_name_no_match() {
-        let clients = vec![make_client("A", "aa:bb:cc:dd:ee:ff", "10.0.0.1", "WIRED")];
+        let clients = vec![make_client("A", "aa:bb:cc:dd:ee:ff", "192.0.2.1", "WIRED")];
         let filter = ListFilter {
             wired: false,
             wireless: false,
@@ -720,9 +720,9 @@ mod tests {
     #[test]
     fn filter_combined_type_and_name() {
         let clients = vec![
-            make_client("Mac Mini", "aa:bb:cc:dd:ee:ff", "10.0.0.1", "WIRED"),
-            make_client("MacBook", "11:22:33:44:55:66", "10.0.0.2", "WIRELESS"),
-            make_client("iPhone", "22:33:44:55:66:77", "10.0.0.3", "WIRELESS"),
+            make_client("Mac Mini", "aa:bb:cc:dd:ee:ff", "192.0.2.1", "WIRED"),
+            make_client("MacBook", "11:22:33:44:55:66", "192.0.2.2", "WIRELESS"),
+            make_client("iPhone", "22:33:44:55:66:77", "192.0.2.3", "WIRELESS"),
         ];
         let filter = ListFilter {
             wired: false,