9386dfc580
Three intertwined bodies of work developed and tested together this session. Full test suite green: python (edge) + phpunit (cloud). ## Edge/Pi install path - setup_online.sh: apt-lock retry (apt-daily contention), Type=exec unit + StartLimitIntervalSec in [Unit], journalctl-on-failure, crash-loop detection. - onnxruntime is now best-effort (no sdist / no 32-bit-ARM wheel); [6/8] probes the real backend and hard-fails if none works. - Hailo HEF auto-fetch: edge/tools/fetch_hailo_hef.py (pinned sha256, refuses to guess 8 vs 8L, HAILO_ARCH override for serial-less boards); hailo_pose.py run() timeout fix. - install_offline.sh: mirrors the backend gate; onnxruntime optional. ## Cafe24 cloud package (cloud/deploy/) - build_cafe24_package.sh emits move_detect_app/ (private, one folder) + www/move_detect/ (docroot subdir); no-dev classmap autoloader; preflight.php; hardened .htaccess. - Subdirectory mount support: Request::baseFrom/pathFor strip the mount prefix; index.php walks up to find the app root; views/JS prefix every URL with APP_BASE; session cookie scoped to the mount. ## Delivery audit — silent-failure & correctness (docs/delivery-audit.md) All 4 blockers + all Phase-1 silent-failure + Phase-2 HIGH correctness: - Edge cloud clients send a custom User-Agent (cafe24 WAF blocks python-requests) and allow_redirects=False. - Daemon fails loud on blank CAFE24_URL/DEVICE_SECRET; run_loop logs swallowed exceptions; heartbeat carries real fps + per-camera health; UvcSource reopens a dead camera; offline queue is size-capped and drops poison rows; TARGET_FPS/QUEUE_DB validated. - Zone coordinates normalized 0..1 on both sides (were canvas-px vs camera-px — every zone misplaced); pinch zones emit PINCH/HIGH (were downgraded to WARNING). - Fall detection uses bbox cues when keypoints are low-confidence (occluded fallen person); ghost incident not cancelled by a bystander; displacement normalized per-second (FPS-invariant). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019Xmn8KZWqiQUguEMRtn6rW
55 lines
2.1 KiB
Python
55 lines
2.1 KiB
Python
import base64
|
|
import hashlib
|
|
import hmac
|
|
import json
|
|
|
|
from edge.events import Event
|
|
|
|
# Shared-hosting WAFs (cafe24) frequently block the default "python-requests/x.y" User-Agent
|
|
# with an HTML 403 while curl passes — so every event would silently 403 with a correct HMAC
|
|
# and URL. Send an explicit UA on every request. CloudClient imports this too.
|
|
USER_AGENT = "move-detect-edge/1.0"
|
|
|
|
|
|
def sign(secret: str, nonce: str, ts: str, body: str | bytes) -> str:
|
|
if isinstance(body, str):
|
|
body = body.encode()
|
|
msg = nonce.encode() + ts.encode() + body
|
|
return hmac.new(secret.encode(), msg, hashlib.sha256).hexdigest()
|
|
|
|
|
|
class PostClient:
|
|
def __init__(self, url: str, device_id: str, secret: str,
|
|
nonce_fn, now_fn, http_post=None, timeout: float = 5.0):
|
|
self.url = url
|
|
self.device_id = device_id
|
|
self.secret = secret
|
|
self.nonce_fn = nonce_fn
|
|
self.now_fn = now_fn
|
|
self.timeout = timeout
|
|
if http_post is None:
|
|
import requests
|
|
http_post = requests.post
|
|
self._post = http_post
|
|
|
|
def send(self, event: Event, snapshots: list[bytes]) -> bool:
|
|
payload = event.to_payload(self.device_id)
|
|
payload["snapshots"] = [base64.b64encode(s).decode() for s in snapshots]
|
|
body = json.dumps(payload, sort_keys=True)
|
|
nonce = self.nonce_fn()
|
|
ts = str(self.now_fn())
|
|
headers = {
|
|
"Content-Type": "application/json",
|
|
"User-Agent": USER_AGENT,
|
|
"X-Nonce": nonce,
|
|
"X-Timestamp": ts,
|
|
"X-Signature": sign(self.secret, nonce, ts, body.encode()),
|
|
}
|
|
try:
|
|
# allow_redirects=False: the .htaccess http->https 302 must not silently become a
|
|
# GET (405/404). A redirect is a CAFE24_URL misconfiguration to surface, not follow.
|
|
resp = self._post(self.url, data=body, headers=headers, timeout=self.timeout,
|
|
allow_redirects=False)
|
|
except Exception:
|
|
return False
|
|
return 200 <= resp.status_code < 300
|