c3227c179c
감사에서 확정된 잔여 항목을 일괄 처리. 이전 커밋이 증상(스테일 번들)을 고쳤다면 이번에는 그것이 조용히 지나가게 만든 구조를 고친다. 보안 - CSP 도입. 인라인 2블록에 per-request nonce, unsafe-inline 없음. 빌드가 없다는 제약이 nonce를 막지는 않는다. 보안 헤더를 .htaccess 단독에서 PHP로 옮겨 개발/납품이 같아진다. - /logout에 CSRF. SameSite=Lax가 막아주지만, 사고 대응 중 운영자를 콘솔에서 튕겨내는 건 이 제품에선 실제 가용성 공격이라 예외로 둘 이유가 없다. - 잠긴 계정 423 → 401. 아무나 이름을 추측해 5회 실패로 잠근 뒤 423을 계정 실재 확인으로 쓸 수 있었다. 잠금 사실은 감사 로그에 남고, 익명 호출자는 못 읽는다. 엣지 - 큐 flush에 회당 상한. 정전 복구 직후 2000건을 비우는 동안 감지가 멈추던 구간을 없앤다. - 타이머 env 전수 검증. COOLDOWN_S=nan은 dedup을 무력화해 매 틱 발보시켰다. - T2 프레임 스킵(INFER_EVERY). 스킵 틱은 프레임을 읽어 버퍼만 비우고 링버퍼에 넣지 않는다 — 추론이 없으면 얼굴 박스도 없어 그대로 넣으면 증거 스냅샷에 미블러 얼굴이 실린다. T3(모션 게이트)는 의도적으로 미구현: 게이트가 틀리면 '움직이지 않는 쓰러진 작업자'에게 추론이 안 돈다. 실영상 없이 임계값을 정할 수 없다. - systemd 워치독(sd_notify) + 메모리 상한. Restart=always는 죽은 프로세스만 잡고 '살아 있는데 멈춘' 상태는 못 잡는다. UVC 해상도·버퍼 고정(링버퍼 RSS가 웹캠 기본값에 좌우). 테스트 — 감사의 최대 갭 - PDO 통합 테스트가 pdo_sqlite 부재로 통째로 스킵되고 CI도 없어 사실상 한 번도 안 돌았다. `-d extension=pdo_sqlite`로 되살리고 리포트·히트맵·익스포트 집계 SQL을 최초로 실행한다. - 얼굴 블러 테스트가 out is not None만 봤다 — blur()가 무동작이어도 통과. PIPA 대응의 유일한 실행 가능한 증거였는데 아무것도 증명하지 못했다. 디테일 파괴를 단언하도록 교체. - index.php 라우트 테이블 대조(프런트 호출 15개 교차검증), dist↔소스 패리티 테스트, CI 신설(스킵이 하나라도 있으면 실패). - ArraySessionStore.regenerate()가 데이터를 지워 실제 session_regenerate_id(true)와 달랐다. 더블이 실구현과 어긋난 자리 하나를 실제로 잡았다. 프런트 - 이벤트 목록 시그니처 재렌더 스킵 + 포커스 복원. aria-live 영역을 5초마다 통째로 다시 만들어 스크린리더가 200행을 재낭독하고 키보드 포커스가 body로 날아갔다. 같은 패턴이 device-tree.js에는 이미 있었다. - 폴링 중첩 가드(느린 공유호스팅에서 응답 역전), 콜드스타트 실패 표시. 납품 - VERSION 신설, 두 산출물에 version/git_commit/built_at 스탬프. 스테일 번들의 SHA256SUMS는 자기정합적이라 통과한다 — provenance 없이는 하류에서 탐지할 방법이 없다. - deploy/README·env.example을 Hailo 단독 번들 실제와 일치(템플릿이 없는 ONNX를 가리켰다). - 이벤트 보존 정책은 기본 0(영구). 산업안전 기록을 시스템이 임의로 지우지 않는다. 검증: pytest 251 / PHPUnit 162, 스킵 0. CSP nonce 결합은 실제 렌더 경로로 확인. 브라우저 실렌더는 MySQL이 필요해 이 환경에서 미수행.
807 lines
37 KiB
JavaScript
807 lines
37 KiB
JavaScript
/**
|
||
* Events dashboard: polls GET /api/events every 5s, renders the list with
|
||
* severity text+icon+color (never color alone, per NF9), pins unacknowledged
|
||
* events to the top, and wires the acknowledge button to POST /events/{id}/ack.
|
||
*
|
||
* XSS-safe: all dynamic values are set via textContent, never innerHTML.
|
||
*/
|
||
(function () {
|
||
'use strict';
|
||
|
||
// Mount prefix: '' at the web root, '/move_detect' when the app shares a www/ with another
|
||
// site. Injected by src/View/layout.php from the server's SCRIPT_NAME. Every URL below must
|
||
// go through it — a bare '/api/...' would address the other site instead.
|
||
var B = window.APP_BASE || '';
|
||
|
||
var POLL_INTERVAL_MS = 5000;
|
||
|
||
// Event types arrive as wire codes ("fall") but the console reads in Korean. An unknown
|
||
// code (a newer edge than this dashboard) falls through as the raw code — never blank.
|
||
var TYPE_LABELS = {
|
||
fall: '넘어짐', no_motion: '넘어짐 후 미동 없음', immobility: '장시간 부동',
|
||
ghost: '위험 상태 소실', zone_warning: '경고구역 진입', zone_restricted: '제한구역 침입',
|
||
pinch: '협착구역 침입', monitoring_degraded: '감시 성능 저하', device_fault: '장치 이상',
|
||
lone_worker: '위험구역 단독 작업', overcapacity: '정원 초과', overstay: '체류 상한 초과',
|
||
near_fall: '넘어질 뻔함 (니어미스)', ergo_report: '작업자세 부담 리포트'
|
||
};
|
||
|
||
var SEVERITY_LABELS = {
|
||
critical: { icon: '⛔', text: '위급', cls: 'sev-critical' }, // ⛔
|
||
high: { icon: '⚠', text: '높음', cls: 'sev-high' }, // ⚠
|
||
warning: { icon: '△', text: '경고', cls: 'sev-warning' }, // △
|
||
info: { icon: 'ℹ', text: '정보', cls: 'sev-info' } // ℹ
|
||
};
|
||
|
||
var root = document.getElementById('events-root');
|
||
if (!root) return;
|
||
|
||
// Live-monitoring pill: honest about poll health — green "실시간 감시 중" while events
|
||
// are flowing, muted "연결 지연" when a poll fails, so a stale board never looks live.
|
||
var watchEl = document.getElementById('watch-status');
|
||
function setWatch(ok) {
|
||
if (!watchEl) return;
|
||
watchEl.textContent = ok ? '실시간 감시 중' : '연결 지연';
|
||
watchEl.classList.toggle('is-stale', !ok);
|
||
}
|
||
|
||
var csrfToken = null;
|
||
function loadCsrfToken() {
|
||
return fetch(B + '/api/csrf', { headers: { Accept: 'application/json' } })
|
||
.then(function (res) { return res.ok ? res.json() : null; })
|
||
.then(function (data) { if (data && data.token) csrfToken = data.token; })
|
||
.catch(function () { /* ack will fail with 403 and re-enable the button */ });
|
||
}
|
||
|
||
function severityInfo(sev) {
|
||
return SEVERITY_LABELS[sev] || { icon: 'ℹ', text: sev || '알수없음', cls: 'sev-info' };
|
||
}
|
||
|
||
function pad2(n) { return n < 10 ? '0' + n : String(n); }
|
||
|
||
// Compact 24h stamp in the row's mono column. toLocaleString('ko-KR') renders
|
||
// "2026. 7. 26. 오후 2:22:31": long, 12-hour, and non-tabular, so a column of them cannot be
|
||
// scanned. The year is shown only when the event is not from the current year, so a deep
|
||
// paged-in row is never mistaken for a recent one.
|
||
function formatTime(occurredAt) {
|
||
if (!occurredAt && occurredAt !== 0) return '';
|
||
var d = new Date(Number(occurredAt) * 1000);
|
||
if (isNaN(d.getTime())) return '';
|
||
var year = d.getFullYear() !== new Date().getFullYear() ? d.getFullYear() + '-' : '';
|
||
return year + pad2(d.getMonth() + 1) + '-' + pad2(d.getDate()) + ' '
|
||
+ pad2(d.getHours()) + ':' + pad2(d.getMinutes()) + ':' + pad2(d.getSeconds());
|
||
}
|
||
|
||
function buildBadge(sev) {
|
||
var info = severityInfo(sev);
|
||
var badge = document.createElement('span');
|
||
badge.className = 'severity-badge ' + info.cls;
|
||
var icon = document.createElement('span');
|
||
icon.className = 'icon';
|
||
icon.setAttribute('aria-hidden', 'true');
|
||
icon.textContent = info.icon;
|
||
var label = document.createElement('span');
|
||
label.className = 'label';
|
||
label.textContent = info.text;
|
||
badge.appendChild(icon);
|
||
badge.appendChild(label);
|
||
return badge;
|
||
}
|
||
|
||
// --- desk audio alert: repeating beep while any unacknowledged critical exists ---
|
||
// No binary asset (air-gapped friendly): a WebAudio oscillator tone. The browser
|
||
// blocks audio until a user gesture, so the context is created on first click.
|
||
var audioCtx = null;
|
||
var alarmTimer = null;
|
||
var beepedCritical = {}; // event_id -> true; each new critical beeps once immediately
|
||
|
||
function unlockAudio() {
|
||
if (!audioCtx) {
|
||
var AC = window.AudioContext || window.webkitAudioContext;
|
||
if (AC) audioCtx = new AC();
|
||
}
|
||
document.removeEventListener('click', unlockAudio);
|
||
}
|
||
|
||
function beep() {
|
||
if (!audioCtx) return;
|
||
try {
|
||
var osc = audioCtx.createOscillator();
|
||
var gain = audioCtx.createGain();
|
||
osc.type = 'sine';
|
||
osc.frequency.value = 880;
|
||
gain.gain.value = 0.2;
|
||
osc.connect(gain);
|
||
gain.connect(audioCtx.destination);
|
||
osc.start();
|
||
osc.stop(audioCtx.currentTime + 0.4);
|
||
} catch (e) {
|
||
// audio unavailable; the visual list still surfaces the critical event
|
||
}
|
||
}
|
||
|
||
function updateAlarm(events) {
|
||
var hasUnackedCritical = false;
|
||
events.forEach(function (ev) {
|
||
var acked = ev.acknowledged_by !== null && ev.acknowledged_by !== undefined && ev.acknowledged_by !== '';
|
||
if (ev.severity === 'critical' && !acked) {
|
||
hasUnackedCritical = true;
|
||
if (!beepedCritical[ev.event_id]) { beepedCritical[ev.event_id] = true; beep(); }
|
||
}
|
||
});
|
||
if (hasUnackedCritical && !alarmTimer) {
|
||
alarmTimer = setInterval(beep, 3000);
|
||
} else if (!hasUnackedCritical && alarmTimer) {
|
||
clearInterval(alarmTimer);
|
||
alarmTimer = null;
|
||
}
|
||
}
|
||
|
||
// No snapshot, or the file is gone (PIPA retention purge / a broken store). Both are the same
|
||
// fact for the operator — the row has no evidence — and the label has to say so, because the
|
||
// "무영상" the slot draws is CSS content and never reaches a screen reader.
|
||
function markEmptySlot(slot) {
|
||
slot.classList.add('is-empty');
|
||
slot.setAttribute('aria-label', '무영상 · 상세 보기');
|
||
}
|
||
|
||
function spanWith(cls, text) {
|
||
var s = document.createElement('span');
|
||
s.className = cls;
|
||
s.textContent = text;
|
||
return s;
|
||
}
|
||
|
||
// Human name for the event's device, from the last /api/devices payload. Falls back to the
|
||
// raw device_id: a row must still say where it came from when the device is unregistered.
|
||
function deviceLabel(deviceId) {
|
||
var id = String(deviceId || '');
|
||
if (!id) return '';
|
||
for (var i = 0; i < deviceList.length; i++) {
|
||
if (String(deviceList[i].device_id) === id) return deviceList[i].name || id;
|
||
}
|
||
return id;
|
||
}
|
||
|
||
function buildRow(ev) {
|
||
var isAcked = ev.acknowledged_by !== null && ev.acknowledged_by !== undefined && ev.acknowledged_by !== '';
|
||
|
||
// sev-row-* drives the severity-colored left rail (and the critical glow) on
|
||
// unacknowledged rows. Constrain to the known tiers so the class can't carry an
|
||
// arbitrary server value into the DOM.
|
||
var sevRow = SEVERITY_LABELS.hasOwnProperty(ev.severity) ? ev.severity : 'info';
|
||
var row = document.createElement('div');
|
||
row.className = 'event-row sev-row-' + sevRow + (isAcked ? '' : ' is-unacknowledged');
|
||
|
||
// Evidence slot — EVERY row is a camera slot so rows stay aligned and the stream reads as a
|
||
// contact sheet. When a snapshot exists it fills the slot; otherwise (or after a PIPA-retention
|
||
// purge) the slot shows an empty "무영상" frame instead of collapsing the row. The <img> goes
|
||
// through /snap/{uuid}, which re-checks session + site scope, so the uuid grants nothing.
|
||
// The slot opens the incident — the same destination as the title link below, so it is
|
||
// skipped by Tab (a mouse shortcut, not a second stop) but kept in the accessibility tree:
|
||
// whether an event has evidence at all is part of reading the row. The link carries the
|
||
// label, so the image itself is decorative (alt="").
|
||
var slot = document.createElement('a');
|
||
slot.className = 'event-thumb-slot';
|
||
slot.href = B + '/events/' + encodeURIComponent(ev.event_id) + '/view';
|
||
slot.tabIndex = -1;
|
||
if (ev.thumb_uuid) {
|
||
var thumb = document.createElement('img');
|
||
thumb.className = 'event-thumb';
|
||
thumb.src = B + '/snap/' + encodeURIComponent(ev.thumb_uuid);
|
||
thumb.alt = '';
|
||
thumb.loading = 'lazy';
|
||
thumb.onerror = function () { markEmptySlot(slot); if (thumb.parentNode) thumb.parentNode.removeChild(thumb); };
|
||
slot.appendChild(thumb);
|
||
slot.setAttribute('aria-label', '스냅샷 · 상세 보기');
|
||
} else {
|
||
markEmptySlot(slot);
|
||
}
|
||
row.appendChild(slot);
|
||
|
||
row.appendChild(buildBadge(ev.severity));
|
||
|
||
var meta = document.createElement('div');
|
||
meta.className = 'event-meta';
|
||
|
||
var type = document.createElement('div');
|
||
type.className = 'event-type';
|
||
var typeLink = document.createElement('a');
|
||
typeLink.className = 'event-detail-link';
|
||
typeLink.href = B + '/events/' + encodeURIComponent(ev.event_id) + '/view';
|
||
typeLink.textContent = TYPE_LABELS[ev.event_type] || String(ev.event_type || '');
|
||
type.appendChild(typeLink);
|
||
// The one loud cue: an unacknowledged critical (a fall) gets a "확인 필요" chip —
|
||
// secondary encoding alongside the red tint, so it never rides on color alone.
|
||
if (!isAcked && ev.severity === 'critical') {
|
||
var chip = document.createElement('span');
|
||
chip.className = 'chip';
|
||
chip.textContent = '확인 필요';
|
||
type.appendChild(chip);
|
||
}
|
||
meta.appendChild(type);
|
||
|
||
// Provenance line: WHERE (device, then camera) and WHEN. The device name is prose and the
|
||
// ids/stamp are mono, so the three read apart on typeface alone — a "·" chain would blur
|
||
// into the device names, which contain "·" themselves ("1공장 · 프레스 라인").
|
||
var sub = document.createElement('div');
|
||
sub.className = 'event-time';
|
||
var src = deviceLabel(ev.device_id);
|
||
if (src) sub.appendChild(spanWith('ev-src', src));
|
||
if (ev.camera_id) sub.appendChild(spanWith('ev-cam', String(ev.camera_id)));
|
||
var time = formatTime(ev.occurred_at);
|
||
if (time) sub.appendChild(spanWith('ev-at', time));
|
||
meta.appendChild(sub);
|
||
|
||
row.appendChild(meta);
|
||
|
||
// Actions column. Resolution states are terminal and mutually exclusive in display:
|
||
// an FP tag wins (it is the more specific verdict — the event was also acknowledged
|
||
// server-side), then a plain acknowledgement, else the two action buttons.
|
||
var actions = document.createElement('div');
|
||
actions.className = 'row-actions';
|
||
var isFp = ev.false_positive_by !== null && ev.false_positive_by !== undefined && ev.false_positive_by !== '';
|
||
if (isFp) {
|
||
var fpDone = document.createElement('span');
|
||
fpDone.className = 'fp-done';
|
||
fpDone.textContent = '오탐 (' + String(ev.false_positive_by) + ')';
|
||
actions.appendChild(fpDone);
|
||
} else if (isAcked) {
|
||
var ackDone = document.createElement('span');
|
||
ackDone.className = 'ack-done';
|
||
ackDone.textContent = '확인됨 (' + String(ev.acknowledged_by) + ')';
|
||
actions.appendChild(ackDone);
|
||
} else {
|
||
var btn = document.createElement('button');
|
||
btn.type = 'button';
|
||
btn.className = 'ack-btn';
|
||
// data-focus keys the row's controls so renderList can hand focus back to the SAME
|
||
// button after a poll rebuild (see renderList). Without it a keyboard operator loses
|
||
// focus to <body> every 5 seconds, mid-triage.
|
||
btn.setAttribute('data-focus', 'ack:' + String(ev.event_id));
|
||
btn.textContent = '확인';
|
||
btn.addEventListener('click', function () { acknowledge(ev.event_id, btn); });
|
||
actions.appendChild(btn);
|
||
var fpBtn = document.createElement('button');
|
||
fpBtn.type = 'button';
|
||
fpBtn.className = 'fp-btn';
|
||
fpBtn.setAttribute('data-focus', 'fp:' + String(ev.event_id));
|
||
fpBtn.textContent = '오탐';
|
||
fpBtn.setAttribute('aria-label', '오탐으로 표시 (확인 처리됨, 오탐 통계에 집계)');
|
||
fpBtn.addEventListener('click', function () { markFalsePositive(ev.event_id, fpBtn, btn); });
|
||
actions.appendChild(fpBtn);
|
||
}
|
||
row.appendChild(actions);
|
||
|
||
return row;
|
||
}
|
||
|
||
function acknowledge(eventId, btn) {
|
||
btn.disabled = true;
|
||
fetch(B + '/events/' + encodeURIComponent(eventId) + '/ack', {
|
||
method: 'POST',
|
||
headers: { 'X-Csrf-Token': csrfToken || '' }
|
||
})
|
||
.then(function (res) {
|
||
if (!res.ok) throw new Error('ack_failed:' + res.status);
|
||
// Reflect the ack on a "더 보기"-loaded (older-window) row too. loadEvents() only refreshes
|
||
// the live window, so without this an event acked from the paged tail snaps straight back
|
||
// to unacknowledged on the next render — inviting a duplicate ack that overwrites the
|
||
// original acknowledged_by audit record.
|
||
patchOlderAck(eventId);
|
||
return loadEvents();
|
||
})
|
||
.catch(function () {
|
||
btn.disabled = false;
|
||
});
|
||
}
|
||
|
||
function patchOlderAck(eventId, alsoFp) {
|
||
for (var i = 0; i < olderEvents.length; i++) {
|
||
var ev = olderEvents[i];
|
||
if (ev && ev.event_id === eventId && !isAcked(ev)) {
|
||
// New object, never mutate the existing one (keeps combinedEvents' dedup predictable).
|
||
var patch = { acknowledged_by: window.APP_USER || '확인' };
|
||
if (alsoFp) patch.false_positive_by = window.APP_USER || '오탐';
|
||
olderEvents[i] = Object.assign({}, ev, patch);
|
||
}
|
||
}
|
||
}
|
||
|
||
// The 오탐 tag: same terminality as an ack (the server also acknowledges), plus the event
|
||
// feeds the per-camera FP-rate panel. By product decision this is where the loop ENDS —
|
||
// the tag never auto-tunes edge thresholds; a human reads the rate and adjusts deliberately.
|
||
function markFalsePositive(eventId, fpBtn, ackBtn) {
|
||
fpBtn.disabled = true;
|
||
if (ackBtn) ackBtn.disabled = true;
|
||
fetch(B + '/events/' + encodeURIComponent(eventId) + '/false-positive', {
|
||
method: 'POST',
|
||
headers: { 'X-Csrf-Token': csrfToken || '' }
|
||
})
|
||
.then(function (res) {
|
||
if (!res.ok) throw new Error('fp_failed:' + res.status);
|
||
patchOlderAck(eventId, true);
|
||
loadFpStats(); // the panel should reflect the tag immediately, not in 60s
|
||
return loadEvents();
|
||
})
|
||
.catch(function () {
|
||
fpBtn.disabled = false;
|
||
if (ackBtn) ackBtn.disabled = false;
|
||
});
|
||
}
|
||
|
||
// Status strip: count UNACKNOWLEDGED events per severity from the same array the
|
||
// list renders. Stat tiles (not a chart): small integers a desk operator scans.
|
||
// Every tier tile is always drawn (zero -> muted) so the strip never reflows.
|
||
var statusRoot = document.getElementById('events-status');
|
||
var STATUS_TIERS = [
|
||
{ key: 'critical', cls: 'tile-critical' },
|
||
{ key: 'high', cls: 'tile-high' },
|
||
{ key: 'warning', cls: 'tile-warning' },
|
||
{ key: 'info', cls: 'tile-info' }
|
||
];
|
||
|
||
function isAcked(ev) {
|
||
return ev.acknowledged_by !== null && ev.acknowledged_by !== undefined && ev.acknowledged_by !== '';
|
||
}
|
||
|
||
function renderStatus(events) {
|
||
if (!statusRoot) return;
|
||
var counts = { critical: 0, high: 0, warning: 0, info: 0 };
|
||
events.forEach(function (ev) {
|
||
if (isAcked(ev)) return;
|
||
var sev = counts.hasOwnProperty(ev.severity) ? ev.severity : 'info';
|
||
counts[sev] += 1;
|
||
});
|
||
|
||
statusRoot.textContent = '';
|
||
var frag = document.createDocumentFragment();
|
||
STATUS_TIERS.forEach(function (tier) {
|
||
var info = severityInfo(tier.key);
|
||
var n = counts[tier.key];
|
||
|
||
var tile = document.createElement('div');
|
||
tile.className = 'stat-tile ' + tier.cls + (n === 0 ? ' is-zero' : '');
|
||
|
||
var label = document.createElement('span');
|
||
label.className = 'stat-label';
|
||
var led = document.createElement('span');
|
||
led.className = 'led';
|
||
led.setAttribute('aria-hidden', 'true');
|
||
var icon = document.createElement('span');
|
||
icon.className = 'icon';
|
||
icon.setAttribute('aria-hidden', 'true');
|
||
icon.textContent = info.icon;
|
||
// The strip is captioned "미확인" once (see the view), so each tile carries only its tier —
|
||
// four repetitions of the same word is noise in a strip meant to be read at a glance.
|
||
var text = document.createElement('span');
|
||
text.textContent = info.text;
|
||
label.appendChild(led);
|
||
label.appendChild(icon);
|
||
label.appendChild(text);
|
||
tile.setAttribute('aria-label', '미확인 ' + info.text + ' ' + n + '건');
|
||
|
||
var count = document.createElement('span');
|
||
count.className = 'stat-count';
|
||
count.textContent = String(n);
|
||
|
||
tile.appendChild(label);
|
||
tile.appendChild(count);
|
||
frag.appendChild(tile);
|
||
});
|
||
statusRoot.appendChild(frag);
|
||
}
|
||
|
||
// --- filter + pagination state ---------------------------------------------------
|
||
// Filters are CLIENT-SIDE (they narrow only the displayed list); the status strip and the
|
||
// audible alarm keep considering the full live set, so filtering the view can never silence a
|
||
// real unacknowledged critical. Pagination is SERVER-SIDE (keyset cursor): "더 보기" pulls
|
||
// events older than the live window into an accumulated tail that the 5s poll does not wipe.
|
||
var liveEvents = []; // newest window from the poll (drives status + alarm)
|
||
var olderEvents = []; // events pulled in by "더 보기", older than the live window
|
||
var moreCursor = null; // cursor for the NEXT "더 보기" (null = no older page)
|
||
var pagedByUser = false; // once true, polls stop resetting moreCursor to the live boundary
|
||
var newestIdAtPaging = null; // newest live event_id at the moment paging began (gap detection)
|
||
var pageGapHint = null; // lazily-built "new events arrived while paging" reload affordance
|
||
var lastListSig = null; // last rendered list fingerprint; unchanged -> keep the DOM (and focus)
|
||
var eventsInFlight = false; // guards against overlapping polls on a slow shared host
|
||
var loadedOnce = false; // distinguishes "cold start failed" from "refresh went stale"
|
||
// The camera filter is a (device, camera) PAIR, not a bare camera_id: camera ids are free-form
|
||
// strings from the edge, so two devices may both run a "cam-01". Selecting the pair is what the
|
||
// rail tree hands us, and it keeps one device's events out of another's filtered view.
|
||
var filters = { severity: '', type: '', device: '', camera: '', unackedOnly: false };
|
||
var moreBtn = document.getElementById('load-more');
|
||
|
||
function matchesFilters(ev) {
|
||
if (filters.severity && ev.severity !== filters.severity) return false;
|
||
if (filters.type && ev.event_type !== filters.type) return false;
|
||
if (filters.camera && String(ev.camera_id || '') !== filters.camera) return false;
|
||
if (filters.device && String(ev.device_id || '') !== filters.device) return false;
|
||
if (filters.unackedOnly && isAcked(ev)) return false;
|
||
return true;
|
||
}
|
||
|
||
function combinedEvents() {
|
||
var seen = {}, out = [];
|
||
liveEvents.concat(olderEvents).forEach(function (ev) {
|
||
if (seen[ev.event_id]) return; // dedup: a poll may overlap the paged tail by an event
|
||
seen[ev.event_id] = true;
|
||
out.push(ev);
|
||
});
|
||
return out;
|
||
}
|
||
|
||
function renderList() {
|
||
renderStatus(liveEvents); // counts always from the full live window, never the filtered view
|
||
updateAlarm(liveEvents); // alarm too — before any early return
|
||
renderTree(); // rail: camera stats + the current selection
|
||
|
||
var all = combinedEvents();
|
||
|
||
var shown = all.filter(matchesFilters).sort(function (a, b) {
|
||
var aA = isAcked(a), bA = isAcked(b);
|
||
if (aA !== bA) return aA ? 1 : -1; // unacknowledged first
|
||
var at = Number(a.occurred_at) || 0, bt = Number(b.occurred_at) || 0;
|
||
if (at !== bt) return bt - at; // then newest first
|
||
return (b.event_id || 0) - (a.event_id || 0);
|
||
});
|
||
|
||
// Skip the rebuild when nothing visible changed. #events-root is an aria-live region and
|
||
// this runs every 5s: rebuilding it unconditionally made a screen reader re-announce all
|
||
// 200 rows on every poll, and threw keyboard focus to <body> mid-triage. Same signature +
|
||
// refocus pattern device-tree.js already uses for the rail.
|
||
var anyFilter = filters.severity || filters.type || filters.camera || filters.unackedOnly;
|
||
var sig = shown.map(function (ev) {
|
||
return [ev.event_id, ev.acknowledged_by || '', ev.false_positive_by || '',
|
||
ev.thumb_uuid || ''].join('|');
|
||
}).join(',') + '#' + String(moreCursor === null) + '#' + String(!!anyFilter);
|
||
if (sig === lastListSig) return;
|
||
lastListSig = sig;
|
||
|
||
// Rows are rebuilt, not patched, so remember which control held focus and restore it.
|
||
var active = document.activeElement;
|
||
var refocus = (active && root.contains(active)) ? active.getAttribute('data-focus') : null;
|
||
|
||
root.textContent = '';
|
||
root.removeAttribute('aria-busy');
|
||
if (shown.length === 0) {
|
||
var empty = document.createElement('div');
|
||
empty.className = 'stream-empty';
|
||
empty.textContent = anyFilter
|
||
? '조건에 맞는 이벤트가 없습니다. 왼쪽에서 필터를 해제하면 전체 스트림으로 돌아갑니다.'
|
||
: '표시할 이벤트가 없습니다.';
|
||
root.appendChild(empty);
|
||
} else {
|
||
var frag = document.createDocumentFragment();
|
||
shown.forEach(function (ev) { frag.appendChild(buildRow(ev)); });
|
||
root.appendChild(frag);
|
||
}
|
||
if (refocus) {
|
||
var back = root.querySelector('[data-focus="' + refocus + '"]');
|
||
if (back) back.focus();
|
||
}
|
||
if (moreBtn) moreBtn.hidden = (moreCursor === null);
|
||
updatePageGapHint();
|
||
}
|
||
|
||
function updatePageGapHint() {
|
||
// A gap exists once new events have arrived since the operator paged: some events have slid out
|
||
// of the live window into a band that was never fetched. Surface it honestly with a reload,
|
||
// rather than let the operator scroll a timeline with a silent hole in the middle.
|
||
var gap = pagedByUser && liveEvents.length > 0 && newestIdAtPaging !== null
|
||
&& (liveEvents[0].event_id || 0) > newestIdAtPaging;
|
||
if (!pageGapHint) {
|
||
pageGapHint = document.createElement('div');
|
||
pageGapHint.className = 'page-gap-hint';
|
||
var span = document.createElement('span');
|
||
span.textContent = '페이징 이후 새 이벤트가 도착해 목록 일부가 밀렸을 수 있습니다.';
|
||
var btn = document.createElement('button');
|
||
btn.type = 'button';
|
||
btn.textContent = '새로고침';
|
||
btn.addEventListener('click', function () { window.location.reload(); });
|
||
pageGapHint.appendChild(span);
|
||
pageGapHint.appendChild(btn);
|
||
if (root.parentNode) root.parentNode.insertBefore(pageGapHint, root); // sibling above the list, survives root clears
|
||
}
|
||
pageGapHint.hidden = !gap;
|
||
}
|
||
|
||
function loadEvents() {
|
||
// In-flight guard. This runs on a fixed 5s interval against Cafe24 shared hosting; if a
|
||
// response takes longer than the interval, unguarded polls stack up and — worse — an older
|
||
// response can land after a newer one and overwrite the list with stale rows.
|
||
if (eventsInFlight) return Promise.resolve();
|
||
eventsInFlight = true;
|
||
// Newest window (server MAX_LIMIT=200). The audible alarm and the "unacknowledged first"
|
||
// pinning only consider this set, so it stays the full cap — during an event burst a smaller
|
||
// page could push an unacknowledged critical off it and updateAlarm() would clear the alarm
|
||
// while a fall is still unacknowledged.
|
||
return fetch(B + '/api/events?limit=200', { headers: { Accept: 'application/json' } })
|
||
.then(function (res) {
|
||
if (res.status === 401) { window.location.href = B + '/login'; return null; }
|
||
if (!res.ok) throw new Error('list_failed:' + res.status);
|
||
return res.json();
|
||
})
|
||
.then(function (data) {
|
||
if (data && Array.isArray(data.events)) {
|
||
liveEvents = data.events;
|
||
// Track the live boundary as the next-page cursor only until the operator starts paging;
|
||
// after that "더 보기" advances moreCursor itself and a poll must not reset it.
|
||
if (!pagedByUser) moreCursor = data.next_cursor || null;
|
||
renderList();
|
||
}
|
||
loadedOnce = true;
|
||
setWatch(true);
|
||
})
|
||
.catch(function () {
|
||
// Leave the last rendered state on transient poll failure, but flag the staleness.
|
||
setWatch(false);
|
||
// Cold start is different from a stale refresh: if the FIRST load never succeeded there
|
||
// is no last-good list, and the skeleton "불러오는 중…" would sit there forever looking
|
||
// like a slow page rather than a broken one — on a safety console, silence must not be
|
||
// mistaken for calm.
|
||
if (!loadedOnce && root) {
|
||
root.removeAttribute('aria-busy');
|
||
root.textContent = '';
|
||
var fail = document.createElement('div');
|
||
fail.className = 'stream-empty';
|
||
fail.textContent = '이벤트를 불러오지 못했습니다. 서버 연결을 확인하세요 — 재시도 중입니다.';
|
||
root.appendChild(fail);
|
||
lastListSig = null; // let the next successful poll rebuild the list
|
||
}
|
||
})
|
||
.then(function () { eventsInFlight = false; });
|
||
}
|
||
|
||
function loadMore() {
|
||
if (moreCursor === null) return;
|
||
if (moreBtn) { moreBtn.disabled = true; moreBtn.textContent = '불러오는 중...'; }
|
||
fetch(B + '/api/events?limit=200&cursor=' + encodeURIComponent(moreCursor), { headers: { Accept: 'application/json' } })
|
||
.then(function (res) {
|
||
if (res.status === 401) { window.location.href = B + '/login'; return null; }
|
||
if (!res.ok) throw new Error('more_failed:' + res.status);
|
||
return res.json();
|
||
})
|
||
.then(function (data) {
|
||
if (data && Array.isArray(data.events)) {
|
||
// Capture the newest live id at the moment paging begins. If newer events arrive after
|
||
// this, the live window (newest 200) slides forward and events between its new bottom and
|
||
// the frozen paged boundary belong to neither array — combinedEvents() drops them
|
||
// silently. We cannot re-fetch that middle band cheaply, so we at least SURFACE it: the
|
||
// gap hint (renderList) tells the operator to reload for the complete timeline.
|
||
if (!pagedByUser) newestIdAtPaging = (liveEvents[0] && liveEvents[0].event_id) || 0;
|
||
pagedByUser = true;
|
||
olderEvents = olderEvents.concat(data.events);
|
||
moreCursor = data.next_cursor || null;
|
||
renderList();
|
||
}
|
||
})
|
||
.catch(function () { /* leave state; the button re-enables below */ })
|
||
.then(function () {
|
||
if (moreBtn) { moreBtn.disabled = false; moreBtn.textContent = '더 보기'; }
|
||
});
|
||
}
|
||
|
||
// Logout is wired in the shared layout footer (src/View/layout.php) so it works on every page,
|
||
// not just this one — app.js bails early on pages without #events-root.
|
||
|
||
// --- rail: device → camera tree ---------------------------------------------------
|
||
// GET /api/devices surfaces the heartbeat telemetry the edge already reports (online/offline,
|
||
// fps, temp, throttle, config drift); the cameras seen in the event stream nest under their
|
||
// device. A dead camera is a safety blind spot, so this is the panel that turns "the board
|
||
// looks calm" into "the board is actually watching". DeviceTree (device-tree.js) owns the DOM.
|
||
var devicesRoot = document.getElementById('devices-root');
|
||
var railSummary = document.getElementById('rail-summary');
|
||
var cameraReset = document.getElementById('camera-reset');
|
||
var deviceList = []; // last successful /api/devices payload
|
||
var devicesLoaded = false; // false until the first success, so "empty" ≠ "not known yet"
|
||
var devicesStale = false; // last poll failed: show the old state, but say that it is old
|
||
var deviceLabelSig = ''; // device_id=name pairs last painted into the stream rows
|
||
|
||
var SEV_RANK = { info: 0, warning: 1, high: 2, critical: 3 };
|
||
var CAM_SEP = '\u001f'; // (device, camera) key separator — a unit separator, never in an id
|
||
|
||
function cameraKey(deviceId, cameraId) {
|
||
return String(deviceId || '') + CAM_SEP + String(cameraId || '');
|
||
}
|
||
|
||
// Per-camera rail stats. MEMBERSHIP and "last seen" come from everything this session has seen
|
||
// (live window + any paged tail), so a camera keeps its place in the tree during a quiet spell
|
||
// instead of blinking out between polls. The UNACKNOWLEDGED counts come from the live window
|
||
// only — the same set the KPI strip and the alarm use, so the rail can never show a backlog
|
||
// that the strip contradicts.
|
||
function cameraStats() {
|
||
var byKey = {}, out = [];
|
||
combinedEvents().forEach(function (ev) {
|
||
if (!ev.camera_id) return;
|
||
var key = cameraKey(ev.device_id, ev.camera_id);
|
||
var cam = byKey[key];
|
||
if (!cam) {
|
||
cam = byKey[key] = { key: key, device_id: String(ev.device_id || ''), camera_id: String(ev.camera_id),
|
||
last_at: 0, unacked: 0, worst: null };
|
||
out.push(cam);
|
||
}
|
||
var at = Number(ev.occurred_at) || 0;
|
||
if (at > cam.last_at) cam.last_at = at;
|
||
});
|
||
liveEvents.forEach(function (ev) {
|
||
if (!ev.camera_id || isAcked(ev)) return;
|
||
var cam = byKey[cameraKey(ev.device_id, ev.camera_id)];
|
||
if (!cam) return;
|
||
cam.unacked += 1;
|
||
var sev = SEV_RANK.hasOwnProperty(ev.severity) ? ev.severity : 'info';
|
||
if (cam.worst === null || SEV_RANK[sev] > SEV_RANK[cam.worst]) cam.worst = sev;
|
||
});
|
||
return out;
|
||
}
|
||
|
||
function renderTree() {
|
||
if (cameraReset) cameraReset.hidden = !filters.camera;
|
||
if (!devicesRoot || !window.DeviceTree) return;
|
||
window.DeviceTree.render(devicesRoot, railSummary, {
|
||
devices: deviceList,
|
||
cameras: cameraStats(),
|
||
now: Date.now() / 1000,
|
||
loaded: devicesLoaded,
|
||
stale: devicesStale,
|
||
selectedKey: filters.camera ? cameraKey(filters.device, filters.camera) : '',
|
||
onSelect: selectCamera
|
||
});
|
||
}
|
||
|
||
// Clicking the selected camera again clears the filter — the same affordance as the
|
||
// "전체 보기" button, so the operator never gets stuck inside one camera.
|
||
function selectCamera(key) {
|
||
var pair = key.split(CAM_SEP);
|
||
var isSame = filters.device === pair[0] && filters.camera === pair[1];
|
||
filters.device = isSame ? '' : pair[0];
|
||
filters.camera = isSame ? '' : pair[1];
|
||
renderList();
|
||
}
|
||
|
||
function clearCamera() {
|
||
filters.device = '';
|
||
filters.camera = '';
|
||
renderList();
|
||
}
|
||
|
||
function loadDevices() {
|
||
return fetch(B + '/api/devices', { headers: { Accept: 'application/json' } })
|
||
.then(function (res) {
|
||
if (res.status === 401) { window.location.href = B + '/login'; return null; }
|
||
if (!res.ok) throw new Error('devices_failed:' + res.status);
|
||
return res.json();
|
||
})
|
||
.then(function (data) {
|
||
if (data && Array.isArray(data.devices)) {
|
||
deviceList = data.devices;
|
||
devicesLoaded = true;
|
||
devicesStale = false;
|
||
// The stream rows print the device's NAME, not its id, so a changed name set — the
|
||
// first load above all, which lands after the first event render — has to repaint the
|
||
// list too. Unchanged names (the steady state) only repaint the rail.
|
||
var sig = deviceList.map(function (d) { return d.device_id + '=' + (d.name || ''); }).join('|');
|
||
if (sig !== deviceLabelSig) { deviceLabelSig = sig; renderList(); }
|
||
else renderTree();
|
||
}
|
||
})
|
||
.catch(function () {
|
||
// A silently frozen panel (poll 500 / WAF-blocked while events still flow) is worse than
|
||
// an empty one: a camera that dies afterwards would keep showing "온라인". Keep the last
|
||
// state, but flag it. Cleared automatically by the next successful poll.
|
||
devicesStale = true;
|
||
renderTree();
|
||
});
|
||
}
|
||
|
||
// --- rail: FP-rate panel ----------------------------------------------------------
|
||
// Per-(camera, type) false-positive rates over 30 days. Refreshed on its own slow cadence
|
||
// (60s) — tag volume changes slowly — plus immediately after the operator tags one.
|
||
var fpStatsRoot = document.getElementById('fp-stats-root');
|
||
var FP_STATS_INTERVAL_MS = 60000;
|
||
var FP_STATS_SHOWN = 5;
|
||
|
||
function renderFpStats(stats) {
|
||
if (!fpStatsRoot) return;
|
||
fpStatsRoot.textContent = '';
|
||
if (!stats || stats.length === 0) {
|
||
fpStatsRoot.textContent = '오탐 태그가 없습니다.';
|
||
fpStatsRoot.className = 'fp-stats is-empty';
|
||
return;
|
||
}
|
||
fpStatsRoot.className = 'fp-stats';
|
||
stats.slice(0, FP_STATS_SHOWN).forEach(function (s) {
|
||
var row = document.createElement('div');
|
||
row.className = 'fp-row';
|
||
var what = document.createElement('span');
|
||
what.className = 'fp-what';
|
||
var cam = document.createElement('span');
|
||
cam.className = 'fp-cam';
|
||
cam.textContent = s.camera_id;
|
||
what.appendChild(cam);
|
||
what.appendChild(document.createTextNode(' ' + (TYPE_LABELS[s.event_type] || s.event_type)));
|
||
row.appendChild(what);
|
||
var rate = document.createElement('span');
|
||
var pct = Math.round((s.fp / Math.max(1, s.total)) * 100);
|
||
rate.className = 'fp-rate' + (pct >= 30 ? ' is-hot' : '');
|
||
rate.textContent = pct + '% (' + s.fp + '/' + s.total + ')';
|
||
// 30%+ = 그 카메라·유형은 재튜닝 후보라는 뜻의 시각 신호 (텍스트가 이미 수치를 말한다).
|
||
row.appendChild(rate);
|
||
fpStatsRoot.appendChild(row);
|
||
});
|
||
}
|
||
|
||
function loadFpStats() {
|
||
if (!fpStatsRoot) return;
|
||
fetch(B + '/api/fp-stats?days=30', { headers: { Accept: 'application/json' } })
|
||
.then(function (res) { return res.ok ? res.json() : null; })
|
||
.then(function (data) { if (data) renderFpStats(data.stats); })
|
||
.catch(function () { /* 패널은 보조 정보 — 실패 시 마지막 상태 유지 */ });
|
||
}
|
||
|
||
// --- 24h catch-up brief ------------------------------------------------------------
|
||
// The operator sitting down at 08:00 needs "what happened overnight" in one line before
|
||
// the live stream takes over. Reuses GET /api/report?days=1; loaded once per page load
|
||
// (the live KPIs and list carry the present — this line carries the past).
|
||
var dayBrief = document.getElementById('day-brief');
|
||
|
||
function briefDuration(s) {
|
||
if (s === null || s === undefined) return null;
|
||
if (s < 60) return Math.round(s) + '초';
|
||
return Math.floor(s / 60) + '분 ' + Math.round(s % 60) + '초';
|
||
}
|
||
|
||
function renderDayBrief(r) {
|
||
if (!dayBrief) return;
|
||
var t = r.totals;
|
||
var severe = t.critical + t.high;
|
||
dayBrief.textContent = '';
|
||
dayBrief.hidden = false;
|
||
dayBrief.classList.toggle('has-severe', severe > 0);
|
||
var lead = document.createElement('strong');
|
||
lead.textContent = '지난 24시간';
|
||
dayBrief.appendChild(lead);
|
||
var parts = [];
|
||
if (t.events === 0) {
|
||
parts.push('감지 이벤트 없음');
|
||
} else {
|
||
parts.push('감지 ' + t.events + '건' + (severe > 0 ? ' (중대 ' + severe + ')' : ''));
|
||
if (r.near_miss.near_fall > 0) parts.push('니어미스 ' + r.near_miss.near_fall);
|
||
var avg = briefDuration(r.tta.avg_s);
|
||
if (avg) parts.push('평균 대응 ' + avg);
|
||
parts.push(t.unacked > 0 ? '미확인 ' + t.unacked + '건 남음' : '전부 확인됨');
|
||
}
|
||
dayBrief.appendChild(document.createTextNode(' — ' + parts.join(' · ') + ' '));
|
||
var link = document.createElement('a');
|
||
link.href = B + '/report';
|
||
link.textContent = '리포트 보기 →';
|
||
dayBrief.appendChild(link);
|
||
}
|
||
|
||
function loadDayBrief() {
|
||
if (!dayBrief) return;
|
||
fetch(B + '/api/report?days=1', { headers: { Accept: 'application/json' } })
|
||
.then(function (res) { return res.ok ? res.json() : null; })
|
||
.then(function (data) { if (data) renderDayBrief(data); })
|
||
.catch(function () { /* 배너는 캐치업 보조 — 실패 시 그냥 숨김 유지 */ });
|
||
}
|
||
|
||
document.addEventListener('click', unlockAudio);
|
||
|
||
// Filter bar (client-side) + "더 보기" (server-side cursor).
|
||
var sevSel = document.getElementById('severity-filter');
|
||
if (sevSel) sevSel.addEventListener('change', function () { filters.severity = sevSel.value; renderList(); });
|
||
var typeSel = document.getElementById('type-filter');
|
||
if (typeSel) typeSel.addEventListener('change', function () { filters.type = typeSel.value; renderList(); });
|
||
if (cameraReset) cameraReset.addEventListener('click', clearCamera);
|
||
var unackedChk = document.getElementById('unacked-only');
|
||
if (unackedChk) unackedChk.addEventListener('change', function () { filters.unackedOnly = unackedChk.checked; renderList(); });
|
||
if (moreBtn) moreBtn.addEventListener('click', loadMore);
|
||
|
||
loadCsrfToken();
|
||
loadEvents();
|
||
loadDevices();
|
||
loadFpStats();
|
||
loadDayBrief();
|
||
setInterval(function () { loadEvents(); loadDevices(); }, POLL_INTERVAL_MS);
|
||
setInterval(loadFpStats, FP_STATS_INTERVAL_MS);
|
||
})();
|