HomeCore Controller v0.1.0 initial release

homecore_controller/CHANGELOG.md

@@ -0,0 +1,8 @@
+# Changelog
+
+## 0.1.0
+- Initial Owner/property binding.
+- Persistent Ed25519 controller identity.
+- Signed controller session authentication.
+- Home Assistant version heartbeat.
+- Ingress commissioning screen.

homecore_controller/DOCS.md

@@ -0,0 +1,12 @@
+# HomeCore Controller
+
+HomeCore Controller binds a Home Assistant Green to one HomeCore Owner/property and provides the local controller identity used by HomeCore Cloud.
+
+For the trial:
+1. Set `cloud_api` to the HomeCore Cloud API URL.
+2. Start the app.
+3. Open its Home Assistant ingress page.
+4. Sign in using the customer's HomeCore Owner account.
+5. Enter the property name and connect.
+
+Binding is one-time. Shared users are added by the Owner through HomeCore permissions, not by claiming the controller again.

homecore_controller/Dockerfile

@@ -0,0 +1,11 @@
+FROM ghcr.io/home-assistant/base:latest
+ARG BUILD_VERSION
+ARG BUILD_ARCH
+LABEL io.hass.version="$BUILD_VERSION" io.hass.type="app" io.hass.arch="$BUILD_ARCH"
+RUN apk add --no-cache python3 py3-pip && python3 -m venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
+COPY requirements.txt /tmp/requirements.txt
+RUN pip install --no-cache-dir -r /tmp/requirements.txt
+COPY app /opt/homecore
+WORKDIR /opt/homecore
+CMD ["python", "main.py"]

homecore_controller/README.md

@@ -0,0 +1,3 @@
+# HomeCore Controller App v0.1.0
+
+Initial HomeCore commissioning agent for Home Assistant Green.

homecore_controller/app/main.py

@@ -0,0 +1,82 @@
+from pathlib import Path
+import os,json,base64,hashlib,time,threading
+import httpx
+from fastapi import FastAPI,Form,HTTPException
+from fastapi.responses import HTMLResponse
+from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
+from cryptography.hazmat.primitives import serialization
+import uvicorn
+
+DATA=Path('/config');DATA.mkdir(parents=True,exist_ok=True)
+STATE=DATA/'state.json';KEY=DATA/'controller_ed25519.pem';OPTIONS=Path('/data/options.json')
+
+def options():
+    try:return json.loads(OPTIONS.read_text())
+    except Exception:return {'cloud_api':'https://api.homecore.example.com'}
+def ensure_key():
+    if KEY.exists():return serialization.load_pem_private_key(KEY.read_bytes(),password=None)
+    k=Ed25519PrivateKey.generate();KEY.write_bytes(k.private_bytes(serialization.Encoding.PEM,serialization.PrivateFormat.PKCS8,serialization.NoEncryption()));return k
+KEYOBJ=ensure_key()
+def pub_pem():return KEYOBJ.public_key().public_bytes(serialization.Encoding.PEM,serialization.PublicFormat.SubjectPublicKeyInfo).decode()
+def fingerprint():return hashlib.sha256(KEYOBJ.public_key().public_bytes(serialization.Encoding.Raw,serialization.PublicFormat.Raw)).hexdigest()
+def load_state():
+    try:return json.loads(STATE.read_text())
+    except Exception:return {}
+def save_state(s):STATE.write_text(json.dumps(s,indent=2))
+def supervisor_get(path):
+    token=os.getenv('SUPERVISOR_TOKEN')
+    if not token:return None
+    try:
+        r=httpx.get('http://supervisor'+path,headers={'Authorization':'Bearer '+token},timeout=5);r.raise_for_status();return r.json()
+    except Exception:return None
+
+def controller_session():
+    s=load_state()
+    if not s.get('controller_id'):return None
+    api=options()['cloud_api'].rstrip('/')
+    with httpx.Client(timeout=15) as c:
+        ch=c.get(f"{api}/api/v1/controllers/{s['controller_id']}/challenge");ch.raise_for_status();challenge=ch.json()['challenge']
+        sig=base64.b64encode(KEYOBJ.sign(challenge.encode())).decode()
+        r=c.post(f"{api}/api/v1/controllers/{s['controller_id']}/session",json={'challenge':challenge,'signature_b64':sig});r.raise_for_status();return r.json()['controller_token']
+
+def heartbeat_loop():
+    while True:
+        try:
+            s=load_state()
+            if s.get('controller_id'):
+                token=controller_session(); api=options()['cloud_api'].rstrip('/')
+                info=supervisor_get('/core/info') or {}; ha_ver=((info.get('data') or {}).get('version') or '') if isinstance(info,dict) else ''
+                httpx.post(f"{api}/api/v1/controllers/{s['controller_id']}/heartbeat",headers={'Authorization':'Bearer '+token},json={'software_version':'0.1.0','ha_version':ha_ver},timeout=10)
+        except Exception:pass
+        time.sleep(60)
+
+app=FastAPI(title='HomeCore Controller',version='0.1.0')
+STYLE='''<style>body{font-family:Inter,Arial,sans-serif;background:#0d1520;color:#edf4ff;margin:0}.wrap{max-width:720px;margin:60px auto;padding:28px}.card{background:#162231;border:1px solid #26384b;border-radius:18px;padding:28px;box-shadow:0 18px 50px #0005}h1{font-size:36px;margin:0 0 4px}.core{color:#78a9ff}p{color:#aebed0;line-height:1.5}label{font-size:13px;color:#aebed0}input{width:100%;box-sizing:border-box;padding:13px;margin:6px 0 16px;border-radius:10px;border:1px solid #36506a;background:#0e1926;color:white}button{background:#377dff;color:white;border:0;border-radius:10px;padding:13px 18px;font-weight:700;cursor:pointer}.ok{color:#55d68b}</style>'''
+
+@app.get('/',response_class=HTMLResponse)
+def setup_page():
+    s=load_state()
+    if s.get('controller_id'):
+        return STYLE+f'<div class="wrap"><div class="card"><h1>Home<span class="core">Core</span></h1><h2 class="ok">Controller connected</h2><p>Controller: {s["controller_id"]}</p><p>Property: {s.get("property_id")}</p><p>This Green is permanently bound to the HomeCore property.</p></div></div>'
+    return STYLE+'''<div class="wrap"><div class="card"><h1>Home<span class="core">Core</span></h1><h2>Set up this controller</h2><p>Sign in with the customer's HomeCore Owner account. HomeCore will create or select the property and permanently bind this Home Assistant Green.</p><form method="post" action="./bind"><label>Owner email</label><input name="email" type="email" required><label>Password</label><input name="password" type="password" required><label>Property name</label><input name="property_name" required><button>Connect HomeCore</button></form></div></div>'''
+
+@app.post('/bind',response_class=HTMLResponse)
+def bind(email:str=Form(...),password:str=Form(...),property_name:str=Form(...)):
+    if load_state().get('controller_id'):raise HTTPException(409,'Controller already bound')
+    api=options()['cloud_api'].rstrip('/')
+    with httpx.Client(timeout=20) as c:
+        r=c.post(api+'/api/v1/auth/login',json={'email':email,'password':password});r.raise_for_status();token=r.json()['access_token'];headers={'Authorization':'Bearer '+token}
+        r=c.get(api+'/api/v1/properties',headers=headers);r.raise_for_status();found=next((p for p in r.json() if p['name'].lower()==property_name.lower() and p.get('owner')),None)
+        if not found:
+            r=c.post(api+'/api/v1/properties',headers=headers,json={'name':property_name,'timezone':'Europe/London'});r.raise_for_status();found=r.json()
+        info=supervisor_get('/core/info') or {};ha_ver=((info.get('data') or {}).get('version') or '') if isinstance(info,dict) else ''
+        payload={'property_id':found['id'],'public_key':pub_pem(),'fingerprint':fingerprint(),'software_version':'0.1.0','ha_version':ha_ver}
+        r=c.post(api+'/api/v1/controllers/bind',headers=headers,json=payload);r.raise_for_status();out=r.json()
+    save_state(out)
+    return HTMLResponse(STYLE+'<div class="wrap"><div class="card"><h1>Home<span class="core">Core</span></h1><h2 class="ok">Connected</h2><p>This controller is now bound to the customer property. Sign into the HomeCore app with the same Owner account.</p></div></div>')
+
+@app.get('/health')
+def health():return {'status':'ok','bound':bool(load_state().get('controller_id')),'fingerprint':fingerprint()}
+
+threading.Thread(target=heartbeat_loop,daemon=True).start()
+if __name__=='__main__':uvicorn.run(app,host='0.0.0.0',port=8099)

homecore_controller/config.yaml

@@ -0,0 +1,25 @@
+name: HomeCore Controller
+version: "0.1.0"
+slug: homecore_controller
+description: HomeCore local controller agent for Home Assistant Green.
+url: https://homecore.home-core.co.uk
+init: false
+arch: [aarch64]
+homeassistant_api: true
+hassio_api: true
+hassio_role: homeassistant
+ingress: true
+ingress_port: 8099
+panel_icon: mdi:home-automation
+startup: application
+stage: experimental
+backup: hot
+panel_title: HomeCore Setup
+boot: auto
+options:
+  cloud_api: "https://api.homecore.home-core.co.uk"
+schema:
+  cloud_api: str
+map:
+  - type: addon_config
+    read_only: false

homecore_controller/requirements.txt

@@ -0,0 +1,5 @@
+fastapi==0.116.1
+uvicorn[standard]==0.35.0
+httpx==0.28.1
+cryptography==45.0.6
+python-multipart==0.0.20

repository.yaml

@@ -0,0 +1,3 @@
+name: HomeCore Apps
+url: https://homecore.home-core.co.uk
+maintainer: HomeCore