Sam Rolfe
4f233a8012
Build on Phases 1–7. Adds the two override paths from AGENTS.md §4 FR-10/FR-11: the shared device keycode and the versioned admin HTTP API the separate Kotlin admin app will call. - store: migration 004 adds state.grant_until and a settings table. New overrides.go records every override in `overrides` and verifies the shared keycode (bcrypt; one code for every device, §10 rule 3). ExpireLocks also clears an expired grant, and NextScheduleBoundary includes the grant end so a device re-locks on time. - effective state: a grant unlocks a device inside a schedule window; a manual lock clears a grant and a grant clears a manual lock. The retained config payload gains grant_until (additive, v stays 1). - web: /api/v1/admin/... (list, state, lock, unlock, grant) guarded by CONTROL_ADMIN_API_TOKEN, separate from the session login, plus the on-device keycode endpoint POST /api/v1/device/override with per-address throttling. A state change is published retained before the API responds. - cmd/control: `keycode` subcommand and start-up seeding from CONTROL_DEVICE_KEYCODE_HASH. - deploy/verify-phase8.sh + `make verify-phase8` prove the definition of done: an API lock reaches a real broker subscriber in well under a second. - Version 0.6.0-phase8 (compose, Makefile, docs). Measured on .13: the lock reached the TLS broker subscriber in 7 ms (handler 1 ms, request to retained publish accepted). Tests: go vet ./... and go test -count=1 ./... pass in golang:1.25-alpine. Co-Authored-By: Paperclip <noreply@paperclip.ing>
53 lines
2.5 KiB
HTML
53 lines
2.5 KiB
HTML
{{define "device-cards.html"}}<div class="device-grid">
|
|
{{range .Devices}}
|
|
<article class="device-card">
|
|
<header class="device-card__head">
|
|
<div class="device-card__id">
|
|
<h3 class="device-card__name">{{.Name}}</h3>
|
|
<p class="device-card__meta">{{.Child}} · {{.PlatformLabel}}</p>
|
|
</div>
|
|
<span class="status-pill {{if .Locked}}status-pill--off{{else}}status-pill--on{{end}}">
|
|
<span class="dot {{if .Locked}}dot--off{{else}}dot--on{{end}}"></span>{{.StateLabel}}
|
|
</span>
|
|
</header>
|
|
|
|
<p class="device-card__state">
|
|
{{if .Locked}}Blocked{{if .ReasonLabel}} {{.ReasonLabel}}{{end}}{{if .TimeLeft}} · {{.TimeLeft}}{{end}}{{else if .Granted}}Time granted{{if .TimeLeft}} · {{.TimeLeft}}{{end}}{{else}}No block active{{end}}
|
|
</p>
|
|
{{if .Until}}<p class="device-card__until">{{if .Granted}}Grant ends{{else}}Lifts{{end}} {{.UntilLocal}}</p>{{end}}
|
|
|
|
<div class="device-card__actions">
|
|
<form method="post" action="/devices/{{.ID}}/lock" class="inline-form">
|
|
<input type="hidden" name="csrf" value="{{$.CSRF}}">
|
|
<select class="select-input" name="minutes" aria-label="Lock duration">
|
|
<option value="0">until I unlock</option>
|
|
<option value="15">15 min</option>
|
|
<option value="30" selected>30 min</option>
|
|
<option value="60">1 hour</option>
|
|
</select>
|
|
<button class="button-primary" type="submit">{{if .Locked}}Re-lock{{else}}Lock{{end}}</button>
|
|
</form>
|
|
{{if .Locked}}
|
|
<form method="post" action="/devices/{{.ID}}/unlock" class="inline-form">
|
|
<input type="hidden" name="csrf" value="{{$.CSRF}}">
|
|
<button class="button-utility" type="submit">Unlock</button>
|
|
</form>
|
|
{{end}}
|
|
<a class="button-utility" href="/devices/{{.ID}}/edit">Edit</a>
|
|
<a class="button-utility" href="/devices/{{.ID}}/schedule">Schedule</a>
|
|
<a class="button-utility" href="/devices/{{.ID}}/lists">Lists</a>
|
|
<a class="button-utility" href="/devices/{{.ID}}/usage">Usage</a>
|
|
</div>
|
|
|
|
<p class="device-card__foot">
|
|
<span class="device-card__presence">
|
|
<span class="dot {{if .Online}}dot--on{{else}}dot--faint{{end}}"></span>
|
|
{{if .Online}}online{{else}}offline{{end}}
|
|
</span>
|
|
{{if .HasLastSeen}}<span>· last seen {{.LastSeen}}</span>{{else}}<span>· never connected</span>{{end}}
|
|
</p>
|
|
<p class="device-card__topic"><code>{{.Topic}}</code></p>
|
|
</article>
|
|
{{end}}
|
|
</div>{{end}}
|