--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Commit 014e463527af2d3aa5ea4fc10f98d2e705093fbb
Parents : fd846e3
Author : Sudo-Ivan <ivan@quad4.io>
Signature : Signature validation error
Date : 2026-01-04T14:59:47-06:00
feat(api): add firmware download endpoint with GitHub URL validation and enhance initiation status response with target name
Changes
Diff
diff --git a/meshchatx/meshchat.py b/meshchatx/meshchat.py
index 1ba14c20..8df3c8df 100644
--- a/meshchatx/meshchat.py
+++ b/meshchatx/meshchat.py
@@ -2,6 +2,7 @@
import argparse
import asyncio
+import aiohttp
import atexit
import base64
import configparser
@@ -1807,6 +1808,16 @@ class ReticulumMeshChat:
ctx = context or self.current_context
if not ctx:
return
+
+ target_name = None
+ if target_hash:
+ try:
+ contact = ctx.database.contacts.get_contact_by_hash(target_hash)
+ if contact:
+ target_name = contact.name
+ except Exception: # noqa: S110
+ pass
+
AsyncUtils.run_async(
self.websocket_broadcast(
json.dumps(
@@ -1814,6 +1825,7 @@ class ReticulumMeshChat:
"type": "telephone_initiation_status",
"status": status,
"target_hash": target_hash,
+ "target_name": target_name,
},
),
),
@@ -2245,6 +2257,40 @@ class ReticulumMeshChat:
},
)
+ @routes.get("/api/v1/tools/rnode/download_firmware")
+ async def tools_rnode_download_firmware(request):
+ url = request.query.get("url")
+ if not url:
+ return web.json_response({"error": "URL is required"}, status=400)
+
+ # Restrict to GitHub for safety
+ if not url.startswith("https://github.com/") and not url.startswith(
+ "https://objects.githubusercontent.com/"
+ ):
+ return web.json_response({"error": "Invalid download URL"}, status=403)
+
+ try:
+ async with aiohttp.ClientSession() as session:
+ async with session.get(url, allow_redirects=True) as response:
+ if response.status != 200:
+ return web.json_response(
+ {"error": f"Failed to download: {response.status}"},
+ status=response.status,
+ )
+
+ data = await response.read()
+ filename = url.split("/")[-1]
+
+ return web.Response(
+ body=data,
+ content_type="application/zip",
+ headers={
+ "Content-Disposition": f'attachment; filename="{filename}"'
+ },
+ )
+ except Exception as e:
+ return web.json_response({"error": str(e)}, status=500)
+
# fetch reticulum interfaces
@routes.get("/api/v1/reticulum/interfaces")
async def reticulum_interfaces(request):
@@ -3825,6 +3871,18 @@ class ReticulumMeshChat:
"is_contact": contact is not None,
}
+ initiation_target_hash = self.telephone_manager.initiation_target_hash
+ initiation_target_name = None
+ if initiation_target_hash:
+ try:
+ contact = self.database.contacts.get_contact_by_hash(
+ initiation_target_hash
+ )
+ if contact:
+ initiation_target_name = contact.name
+ except Exception: # noqa: S110
+ pass
+
return web.json_response(
{
"enabled": True,
@@ -3839,7 +3897,8 @@ class ReticulumMeshChat:
"latest_id": self.database.voicemails.get_latest_voicemail_id(),
},
"initiation_status": self.telephone_manager.initiation_status,
- "initiation_target_hash": self.telephone_manager.initiation_target_hash,
+ "initiation_target_hash": initiation_target_hash,
+ "initiation_target_name": initiation_target_name,
},
)
@@ -5541,9 +5600,26 @@ class ReticulumMeshChat:
max_hops = request.query.get("max_hops")
if max_hops:
max_hops = int(max_hops)
+
+ search = request.query.get("search")
+ interface = request.query.get("interface")
+ hops = request.query.get("hops")
+ if hops:
+ hops = int(hops)
+
+ page = int(request.query.get("page", 1))
+ limit = int(request.query.get("limit", 50))
+
try:
- table = self.rnpath_handler.get_path_table(max_hops=max_hops)
- return web.json_response({"table": table})
+ result = self.rnpath_handler.get_path_table(
+ max_hops=max_hops,
+ search=search,
+ interface=interface,
+ hops=hops,
+ page=page,
+ limit=limit,
+ )
+ return web.json_response(result)
except Exception as e:
return web.json_response({"message": str(e)}, status=500)
@@ -7014,6 +7090,8 @@ class ReticulumMeshChat:
@web.middleware
async def mime_type_middleware(request, handler):
response = await handler(request)
+ if response is None:
+ return None
path = request.path
if path.endswith(".js") or path.endswith(".mjs"):
response.headers["Content-Type"] = (
@@ -7033,6 +7111,8 @@ class ReticulumMeshChat:
@web.middleware
async def security_middleware(request, handler):
response = await handler(request)
+ if response is None:
+ return None
# Add security headers to all responses
response.headers["X-Content-Type-Options"] = "nosniff"
@@ -7055,7 +7135,7 @@ class ReticulumMeshChat:
"style-src 'self' 'unsafe-inline'; "
"img-src 'self' data: blob: https://*.tile.openstreetmap.org https://tile.openstreetmap.org; "
"font-src 'self' data:; "
- "connect-src 'self' ws://localhost:* wss://localhost:* blob: https://*.tile.openstreetmap.org https://tile.openstreetmap.org https://nominatim.openstreetmap.org; "
+ "connect-src 'self' ws://localhost:* wss://localhost:* blob: https://*.tile.openstreetmap.org https://tile.openstreetmap.org https://nominatim.openstreetmap.org https://api.github.com https://objects.githubusercontent.com https://github.com; "
"media-src 'self' blob:; "
"worker-src 'self' blob:; "
"frame-src 'self'; "
@@ -7698,8 +7778,16 @@ class ReticulumMeshChat:
elif _type == "nomadnet.page.archives.get":
destination_hash = data["destination_hash"]
page_path = data["page_path"]
+
+ # Try relative path first
archives = self.get_archived_page_versions(destination_hash, page_path)
+ # If nothing found and path doesn't look like it's already absolute,
+ # try searching with the destination hash prefix (support for old buggy archives)
+ if not archives and not page_path.startswith(destination_hash):
+ buggy_path = f"{destination_hash}:{page_path}"
+ archives = self.get_archived_page_versions(destination_hash, buggy_path)
+
AsyncUtils.run_async(
client.send_str(
json.dumps(
@@ -7711,6 +7799,8 @@ class ReticulumMeshChat:
{
"id": archive.id,
"hash": archive.hash,
+ "destination_hash": archive.destination_hash,
+ "page_path": archive.page_path,
"created_at": archive.created_at.isoformat()
if hasattr(archive.created_at, "isoformat")
else str(archive.created_at),
──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────