wled-screen-controller-mixed

alexei.dolgolyov/wled-screen-controller-mixed

Fork 0

Commit Graph

Author	SHA1	Message	Date
alexei.dolgolyov	f2871319cb	refactor: comprehensive code quality, security, and release readiness improvements Some checks failed Lint & Test / test (push) Failing after 48s Details Security: tighten CORS defaults, add webhook rate limiting, fix XSS in automations, guard WebSocket JSON.parse, validate ADB address input, seal debug exception leak, URL-encode WS tokens, CSS.escape in selectors. Code quality: add Pydantic models for brightness/power endpoints, fix thread safety and name uniqueness in DeviceStore, immutable update pattern, split 6 oversized files into 16 focused modules, enable TypeScript strictNullChecks (741→102 errors), type state variables, add dom-utils helper, migrate 3 modules from inline onclick to event delegation, ProcessorDependencies dataclass. Performance: async store saves, health endpoint log level, command palette debounce, optimized entity-events comparison, fix service worker precache list. Testing: expand from 45 to 293 passing tests — add store tests (141), route tests (25), core logic tests (42), E2E flow tests (33), organize into tests/api/, tests/storage/, tests/core/, tests/e2e/. DevOps: CI test pipeline, pre-commit config, Dockerfile multi-stage build with non-root user and health check, docker-compose improvements, version bump to 0.2.0. Docs: rewrite CLAUDE.md (202→56 lines), server/CLAUDE.md (212→76), create contexts/server-operations.md, fix .js→.ts references, fix env var prefix in README, rewrite INSTALLATION.md, add CONTRIBUTING.md and .env.example.	2026-03-22 00:38:28 +03:00
alexei.dolgolyov	aafcf83896	Add webhook trigger condition for automations Per-automation webhook URL with auto-generated 128-bit hex token. External services (Home Assistant, IFTTT, curl) can POST to /api/v1/webhooks/{token} with {"action": "activate"\|"deactivate"} to control automation state — no API key required (token is auth). Backend: WebhookCondition model, engine state tracking with immediate evaluation, webhook endpoint, schema/route updates. Frontend: webhook option in condition editor, URL display with copy button, card badge, i18n for en/ru/zh. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-01 18:28:31 +03:00

Author

SHA1

Message

Date

alexei.dolgolyov

f2871319cb

refactor: comprehensive code quality, security, and release readiness improvements

Lint & Test / test (push) Failing after 48s

Details

Security: tighten CORS defaults, add webhook rate limiting, fix XSS in
automations, guard WebSocket JSON.parse, validate ADB address input,
seal debug exception leak, URL-encode WS tokens, CSS.escape in selectors.

Code quality: add Pydantic models for brightness/power endpoints, fix
thread safety and name uniqueness in DeviceStore, immutable update
pattern, split 6 oversized files into 16 focused modules, enable
TypeScript strictNullChecks (741→102 errors), type state variables,
add dom-utils helper, migrate 3 modules from inline onclick to event
delegation, ProcessorDependencies dataclass.

Performance: async store saves, health endpoint log level, command
palette debounce, optimized entity-events comparison, fix service
worker precache list.

Testing: expand from 45 to 293 passing tests — add store tests (141),
route tests (25), core logic tests (42), E2E flow tests (33), organize
into tests/api/, tests/storage/, tests/core/, tests/e2e/.

DevOps: CI test pipeline, pre-commit config, Dockerfile multi-stage
build with non-root user and health check, docker-compose improvements,
version bump to 0.2.0.

Docs: rewrite CLAUDE.md (202→56 lines), server/CLAUDE.md (212→76),
create contexts/server-operations.md, fix .js→.ts references, fix env
var prefix in README, rewrite INSTALLATION.md, add CONTRIBUTING.md and
.env.example.

2026-03-22 00:38:28 +03:00

alexei.dolgolyov

aafcf83896

Add webhook trigger condition for automations

Per-automation webhook URL with auto-generated 128-bit hex token.
External services (Home Assistant, IFTTT, curl) can POST to
/api/v1/webhooks/{token} with {"action": "activate"|"deactivate"}
to control automation state — no API key required (token is auth).

Backend: WebhookCondition model, engine state tracking with
immediate evaluation, webhook endpoint, schema/route updates.
Frontend: webhook option in condition editor, URL display with
copy button, card badge, i18n for en/ru/zh.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-01 18:28:31 +03:00

2 Commits