nsaspy/zara-plugins

Fork 0

feat(zara-home): add bounded Home Assistant HTTP transport #221

Open

nsaspy wants to merge 30 commits from feat/zara-home-ha-transport into main

nsaspy commented

2026-09-08 02:18:48 +00:00

Owner

Implements #512 as one bounded provider slice.

adds production Home Assistant HTTP transport with bearer auth
confines base URL and request paths
bounds response size and request timeout
handles structured provider failures without secret-bearing error strings
permits exactly one refresh callback + retry after 401
configures zara-home from ZARA_HOME_ASSISTANT_URL + ZARA_HOME_ASSISTANT_TOKEN
keeps SmartThings credentials/provider authority out of the plugin and in Core #202
preserves HomeService read-back as the only source of mutation verification

Tests were added first in test_home_assistant_transport.py using a deterministic local HTTP server.

Worker mailbox: #505

Implements #512 as one bounded provider slice. - adds production Home Assistant HTTP transport with bearer auth - confines base URL and request paths - bounds response size and request timeout - handles structured provider failures without secret-bearing error strings - permits exactly one refresh callback + retry after 401 - configures zara-home from `ZARA_HOME_ASSISTANT_URL` + `ZARA_HOME_ASSISTANT_TOKEN` - keeps SmartThings credentials/provider authority out of the plugin and in Core #202 - preserves HomeService read-back as the only source of mutation verification Tests were added first in `test_home_assistant_transport.py` using a deterministic local HTTP server. Worker mailbox: #505

nsaspy added 8 commits

2026-09-08 02:18:48 +00:00

test(zara-home): specify bounded Home Assistant HTTP transport 9c4dce9ef3

feat(zara-home): add bounded Home Assistant HTTP transport f3c715f3b4

feat(zara-home): configure Home Assistant transport from environment 2e0d5163da

fix(zara-home): confine Home Assistant transport authority 2045fc0093

test(zara-home): cover unsafe tokens and provider failures 6d51e19b5a

fix(zara-home): reject unsafe bearer credentials 3aa24870b1

test(zara-home): pin redirect credential confinement 5adffd2149

fix(zara-home): reject Home Assistant redirects

CI / test (pull_request) Failing after 19s

Details

CI / zara-avatar idle CPU budget (pull_request) Failing after 15m3s

Details

e3024d3d72

nsaspy added 22 commits

2026-09-21 23:38:48 +00:00

test(local-recall): require transactional install rollback e8b6d2fd02

fix(local-recall): rollback failed installer updates 769e276af0

test(local-recall): cover interrupted install recovery 4abed8ac73

fix(local-recall): recover installer generations atomically 162be23f10

test(local-recall): inject failures at atomic publish boundary

CI / test (pull_request) Failing after 27s

Details

CI / zara-avatar idle CPU budget (pull_request) Failing after 15m4s

Details

85f620a8d2

test(local-recall): lock malformed marker recovery a4045f4f84

fix(local-recall): keep transaction state loader-safe abd3d08d08

chore(zara-home): refresh HA transport onto current main 075c152b2b

Merge pull request #521 from lost-rob0t/plugin-d/local-recall-transactional-install ef45b79468

fix(local-recall): make installer update rollback transactional

test(agent-zero): prevent remote error reflection fb024a390d

fix(agent-zero): sanitize remote errors b55d1d0c12

test(agent-zero): cover traceback error reflection abf005e7f0

fix(agent-zero): suppress remote exception causes c55dd24068

Merge pull request #525 from lost-rob0t/plugin-d/agent-zero-error-sanitization c6d96a01a2

fix(agent-zero): sanitize remote error details

test(starintel): cover reflected secrets in failure paths de537fb612

fix(starintel): sanitize remote failure evidence 0e47804096

Merge pull request #529 from lost-rob0t/plugin-d/starintel-error-sanitization-20260908 990d46e3bc

Harden StarIntel remote failure sanitization

Add provider-neutral Zara mobility trip copilot (#836 ) 07763f6a30

Adds the bounded zara-mobility service plugin slice for Google Maps, OpenStreetMap, COTA/GoBus transit profiles, Uber/Lyft ride handoffs, and trip planning. Live GTFS-RT parsing and Android Navigation SDK integration remain follow-on work in #829 and lost-rob0t/zara#1017.

Add zara-cota static GTFS transit plugin (#834 ) 486f109025

First COTA slice: bounded static GTFS parsing, scheduled transit tools, route geometry for Zara Maps, registry packaging, and deterministic tests. Realtime, Prolog discovery, shared OSM maps, journey planning, and Android host integration remain tracked by #830 and zara#1016/#924.

Merge current main into Home Assistant transport 9a1c360152

test(zara-home): reject non-finite and boolean timeouts 6233ec4260

fix(zara-home): enforce finite transport timeout bounds

CI / test (pull_request) Failing after 14s

Details

CI / zara-avatar idle CPU budget (pull_request) Failing after 15m1s

Details

bc896242a4

CI / test (pull_request) Failing after 14s

Details

CI / zara-avatar idle CPU budget (pull_request) Failing after 15m1s

Details

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin feat/zara-home-ha-transport:feat/zara-home-ha-transport

git switch feat/zara-home-ha-transport

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff feat/zara-home-ha-transport

git switch feat/zara-home-ha-transport

git rebase main

git switch main

git merge --ff-only feat/zara-home-ha-transport

git switch feat/zara-home-ha-transport

git rebase main

git switch main

git merge --no-ff feat/zara-home-ha-transport

git switch main

git merge --squash feat/zara-home-ha-transport