3 Commits

Include renames

Author	SHA1	Message	Date
Logan CusanoandClaude Opus 5.5	1b4fcefbf2	mqtt_manager: expose last connect error; health tells refused from unreachable (node-26#21) ... mqtt_manager.last_error = {kind, detail, epoch}: 'refused' from a non-zero CONNACK, 'unreachable' from the initial connect loop or paho's on_connect_fail, 'disconnected' otherwise. Cleared on connect. The /api/health MQTT check now gives a key fix for a refusal and a network fix for an unreachable broker instead of guessing from whether a key is on disk. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-27 20:07:47 -04:00
Logan CusanoandClaude Opus 5.5	7f52e0e891	checkin: report host disk free/total bytes (#41) ... /recordings is a bind mount of the host checkout, so shutil.disk_usage on it is the disk the recorder writes to and Docker fills. Explicit nulls on error so C2 never keeps a stale reading. Server half: server-26 feat/41-node-disk. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-26 02:24:07 -04:00
Logan CusanoandClaude Opus 5	87633ab50d	Authenticate the node dashboard, and the broker connection per node ... Two unauthenticated surfaces closed on the edge node. Dashboard and API: the local dashboard and every /api/* route were open to anything on the node's LAN. Adds a login page plus session-cookie auth for the browser, and cookie-or-Basic for the API so scripted callers stay possible. Passwords are hashed with stdlib scrypt (no new dependency, this runs on a Pi) and compared in constant time; the salt and session-signing secret persist in credentials.json. Startup warns while the default password is still in place. No non-browser callers of the node API exist today (C2 talks to nodes over MQTT and nodes call C2 outbound), so nothing breaks. Adds python-multipart, which FastAPI's Form() needs for the login POST and which was missing from requirements entirely. MQTT: nodes authenticated with a shared drb-node password, and the broker ACL keyed off %c — the client-supplied client id — so any holder of that one password could claim another node's topic namespace. Nodes now connect as username=<node_id>, password=<their C2-issued api_key>, which mosquitto's dynamic-security plugin checks, with the ACL keyed off the authenticated %u. TLS is gated on MQTT_TLS and uses default CA verification. The old key_request MQTT path stays in place behind TODO(mqtt-cutover) markers as the fallback until the cutover is proven; a node with no api_key on disk logs a clear repeated refusal rather than spinning. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-16 09:34:16 -04:00