Solar System Dashboard

Generator automation now rechecks and records the exact emergency or planned-evening Start condition immediately before any relay request. Starts outside the configured condition are rejected without reaching the relay path; manual controls, inverter isolation, and weather/resilience behaviour are unchanged.

Generator Readiness now uses the final reconciled relay-command outcome rather than an intermediate empty TinyTuya acknowledgement. Raw transport evidence, uncertainty blocking, single-write safety, reconciliation, ownership, and all equipment-control behaviour remain unchanged.

Corrected a TinyTuya retry-limit mismatch that prevented the relay write path from making its initial connection. The helper now makes one connection attempt before disabling write resends, retains bounded readback and uncertainty handling, and records secret-safe transport phases. No inverter-control path or automatic relay retry was added.

Serialised all TinyTuya relay reads and writes through one per-device transport coordinator, kept timed-out helpers reserved until process cleanup completes, and separated last-read online status from command readiness. Single-shot target writes, uncertainty blocking, active-low behaviour, and all inverter-isolation boundaries remain unchanged.

Added a read-only completed-calendar-month EFC comparison across years and aligned Battery Information chart touch dragging with the History interaction. The figures remain bank-level estimates and do not connect to battery BMS devices or change equipment behaviour.

Added a read-only Battery Information tab with configured nameplate facts, bank-level live status, resolved-history provenance, estimated per-battery cycle and throughput trends, provisional reference-cycle comparisons, and usage-rate projections. It does not connect to battery BMS devices or change equipment behaviour.

Solarman Import history and Update to today now refresh the approved resolved-history view automatically. Raw source counts are distinct from resolved dates, approved reconstructions remain immutable, and material source collisions wait for review. Generator history before 21 June 2026 is labelled not installed, not measured zero.

Added effective-dated physical battery records and local estimated equivalent full cycles from bank-level Solarman discharge throughput. Existing capacity settings remain compatible with live calculations; results are estimates, not BMS or warranty cycle counters, and no equipment-control behaviour changed.

Expanded the local forecast-versus-actual PV evidence diagnostic into a read-only progress monitor with pipeline health, unique physical-hour queue states, a recent timeline, and an expandable completed-hours summary. It clarifies normal future collection work without adding calibration, provider-accuracy calculations, forecast changes, or equipment control.

Added local, quality-classified retention of Open-Meteo forecast snapshots alongside completed hourly PV evidence for future calibration. The records are advisory only: they do not calculate provider accuracy or alter the Energy Resilience Forecast, generator, inverter, or other equipment behaviour.

Improved Weather/Solar Forecast shadow-mode diagnostic readability and synchronised the About current-version display with canonical application metadata. Weather collection, resilience calculation, and equipment-control behaviour are unchanged.

Added optional Open-Meteo weather and solar forecast collection in shadow mode, with provider-neutral local snapshots and freshness diagnostics. The data is not yet used by the Energy Resilience Forecast and no equipment-control behaviour changed.

The Energy Resilience Forecast timeline now begins at the measured current SOC and forecast generation time, then shows projected hourly endpoints through the full 24-hour horizon.

The dashboard navigation now keeps its own horizontal scroll on intermediate and landscape screens, preventing the page itself from overflowing.

Configuration Audit now resolves harmless case and space, underscore, or hyphen differences in installation-profile enum bindings against the approved schema. Ambiguous values are rejected, raw rule-pack wording is retained for provenance, and the audit remains local and read-only.

Installation Profile versions now retain every reviewed fact, explicit Unknown selection, evidence type, verification date, and note. Replacement drafts start from a complete active-profile clone, show only genuine changes, and flag incomplete legacy profiles for review. The workflow remains local and cannot detect or control equipment.

Added reviewed local installation facts with immutable profile versions. The Configuration Audit now uses approved capability evidence to identify inactive options while keeping unknown or ambiguous facts as manual checks. The profile never detects or controls equipment.

Improved local Deye-export validation by reading masked Common Information metadata, preserving directional protection-setting names, and showing exact candidate blockers and warnings. Golden rule pack v1.2 accepts the approved 21–100% Time-of-Use SOC range while retaining Deye-range differences for review. Baseline approval and all recovery guidance remain manual and read-only.

Added local approval and immutable version storage for known-good Deye Cloud configuration exports, current-export comparison, optional hash-verified Golden rule-pack evaluation, visual discrepancy filtering, and a browser-only manual recovery checklist. Files remain local, identities are masked, and the dashboard cannot connect to or correct the inverter.

Added a local, read-only foundation for comparing Deye Cloud configuration exports against a future approved baseline. It safely parses untrusted spreadsheets, normalizes values and ranges, detects duplicate or implausible entries, and supports an optional validated rule pack with manual-only recovery guidance. No upload UI, device contact, MQTT publish, inverter command, generator-control link, or automatic correction was added.

MQTT setup verification now succeeds once the broker accepts every exact read-only telemetry subscription, without waiting for the next state update. Generator Control Events now include confirmed external physical start/stop evidence and recover recent confirmed sessions, while the Rollups payload presents that ledger correctly. The advisory resilience forecast remains above diesel and service resources on desktop.

Corrected forecast solar-transition meaning, separated expected and conservative outcomes, made generator-assistance wording scenario-aware, withheld impractical generator estimates, and clarified data-confidence meaning. Refined forecast chart selector labels and reusable mobile-friendly forecast cards, including compact accessible help controls, without adding any inverter or generator control path.

Planned evening generator runs now calculate a start-by deadline backwards from configured quiet hours, using the greater of estimated charging duration and minimum runtime plus the existing startup allowance. The change preserves quiet-hours backstops, emergency/manual/external-run ownership, command safety, and the forecast's advisory-only boundary.

Added a local, advisory-only 24-hour battery-resilience outlook using current telemetry, local rollups, and a historical PV/load profile provider. It presents projected SOC, reserve timing, solar-production windows, scenario-aware generator-assistance evidence, confidence, and a shared chart selector. No weather API, new MQTT topic, direct dongle access, inverter write, generator command, or automation link was introduced.

Closed T06 through T11 after read-only audits and focused improvements: Solarman polling policy verification, truthful inferred-routing presentation, a safe offline smoke runner, a redacted diagnostic snapshot, mobile/chart QA, and financial terminology aligned with the existing bill-estimate model. The optional T12 modularisation gate and curated future-ideas policy were also recorded.

Formally closed IR-01 after commissioning the dashboard through the local receive-only MQTT broker path. The dashboard no longer connects directly to SolarAssistant or the Solarman dongle; its inverter isolation, exact telemetry allowlist, publish denial, cloud restrictions, and external deployment evidence remain in force.

Corrected the one-way Mosquitto bridge reference to use supported operational password handling outside Git, separated remote bridge, local bridge, and dashboard MQTT identities and ACL responsibilities, added bridge-reference verification, hardened static scanner exceptions and network call-site inventory, removed dormant direct-Solarman live orchestration, tightened Solarman cloud URL/path checks, and strengthened loopback MQTT and fake-dongle isolation tests.

Hardened the inverter write-isolation assurance layer with full launcher-chain review, exact firewall-rule verification semantics, broader executable static scanning, loopback-only MQTT and fake-dongle transport tests, stricter Solarman cloud origin allowlisting, clearer isolation status layers, and complete one-way MQTT bridge/ACL reference material.

Introduced an absolute inverter write-isolation barrier: direct Solarman dongle networking is disabled, SolarAssistant MQTT is receive-only with an exact telemetry allowlist and blocked outbound PUBLISH packets, Solarman OpenAPI is restricted to read-only endpoints, and a new isolation status endpoint, firewall script, bridge example, static scan, and verification report document the safety boundary. The Tuya generator relay remains the sole intentional control-output exception.

Migrated reusable MQTT and Solarman OpenAPI credentials into a Windows CurrentUser-protected store, removed plaintext secrets from active configuration, restricted reusable-secret entry over HTTP to localhost, pinned Solarman authentication against redirects, and reduced public configuration metadata.

Added short-lived configuration write sessions, centralized authorization for every state-changing route, same-origin and trusted-Host checks, strict mutation content types, PIN-change session revocation, and an MQTT identity rule that prevents a saved password from being redirected to a different broker.

Separated startup observations from completed generator-command lifecycles, replaced routine MQTT keepalive noise with bounded summaries, made cache-recovery evidence durable, and added explicit calibration and duplicate-refill rejection evidence.

Corrected absolute fuel-calibration proposals, merged overlapping generator runtime evidence, hardened refill eligibility and duplicate detection, and made backup readiness reflect command uncertainty and safety-critical persistence health without adding any generator command path.

Made manual suspension and generator run ownership restart-safe, serialized the complete relay-command lifecycle, prevented uncertain ownership from authorizing automatic stops, and separated emergency prerequisites from planned night-history requirements.

Prevented late planned generator starts when the minimum runtime would cross into quiet hours, added a quiet-hours stop boundary for planned runs, and prioritised command events in Rollups with relay and physical-session evidence.

Added the live-node style draggable selector to every History chart, aligned it to real data centres, gave new months automatic edge spacing, made axis labels responsive, and standardized the same touch-friendly slider used by the inverter popup. Chronological sorting keeps partially populated comparison series full width.

Added independent service and oil-change hour counters, confirmed-runtime countdowns, explicit diesel refill history, approval-gated fuel calibration, backup-power readiness checks, and a visual hours-to-service gauge without adding any new generator command or inverter-write path.

Made the inverter node open a 24-hour routing overview that separates PV, generator, grid and battery sources from house, battery and grid destinations, with an interactive legend, five-minute selector, selected-time traffic summary, and compact energy totals.

Added a supplemental SolarAssistant 15-minute sample backfill for the September/October 2023 history gap, recovering PV, load, grid, battery throughput, and battery SOC context while preserving the Solarman API history cache unchanged.

Added 24-hour history popups for the PV Array, Grid, House, Generator, and Battery live energy-flow nodes, using locally retained 5-minute power traces, signed grid and battery direction, and a draggable chart selector.

Added rotating verified snapshots and startup recovery for live rollups, reliability health, and inverter-state event caches so a future blue-screen or sudden power loss can recover from the newest valid local snapshot instead of wiping the live cache back to empty.

Added a configurable shadow/armed generator automation layer that forecasts overnight battery need from recent night usage, respects quiet hours, watches diesel reserve, pauses after manual stops, and uses the existing protected Tuya generator-control path for any automated start or stop.

Recovered durable daily and generator evidence after an unexpected host shutdown, changed rollup and generator-session saves to atomic replacement with last-known-good backups, and prevented a damaged cache from being silently replaced by an empty ledger.

Made physically impossible battery charge-voltage settings alarm even under closed-loop BMS control, added forensic capture and validation for inverter battery-capacity/Ah settings, and retained a plain-language incident report without exposing credentials.

Stopped rounding every live generator sample interval, retained fractional runtime until presentation, and used the durable generator session ledger as recovery evidence for hourly and daily runtime affected by restarts.

Kept the short-lived generator-control unlock available across page refreshes in the same browser tab, clarified locked and already-requested button states, and replaced the misleading loading cursor on disabled controls.

Made generator-switch verification probe supported Tuya protocol versions without sending relay commands, detect Boolean switch DPS responses, retain the working protocol automatically, and return clearer connection, key, protocol, and DPS diagnostics.

Allowed Generator Control configuration from local-network devices when authorised with a separate configuration PIN, while keeping the start/stop control PIN, encrypted Tuya local key storage, and forensic audit logging intact.

Changed live rollup and generator-session persistence from quiet-period debouncing to fixed-cadence checkpoints, and added graceful-shutdown flushing so continuous MQTT traffic and routine server restarts no longer discard accumulated runtime.

Added protected local Tuya control for the active-low generator ATS switch, encrypted local-key storage, relay and physical generator confirmation, manual start/stop controls, cooldown protection, availability monitoring, and a retained command audit trail.

Restored 15% VAT on published municipal service and capacity charges, made VAT-exclusive the default for all fixed-charge tariff periods, and migrated existing profiles without baking VAT into their source amounts.

Added single-instance server ownership, automatic completed-day gap detection and Solarman history recovery, visible data-reliability health, source-normalised quality rates, policy-filtered telemetry classification, and an auditable generator session ledger.

Reconciled imported history and live rollups into one date-based savings ledger, retained generator fuel costs across history refreshes, exposed missing and partial coverage, and separated energy, fixed-charge, and levy VAT treatment so mixed municipal schedules calculate correctly.

Separated the tariff catalogue from the installation's dated plan assignments, applied each tariff year's own rates to history, and added municipal billing status so avoided fixed charges are included after a supply or account is no longer billed.

Reorganised the growing Configuration tab into System Setup, Live Connections, Historical Data, and Tariffs & Costs so related settings are easier to find without changing any controls, integrations, or calculations.

Introduced tariff-period VAT handling and removed the previously baked-in Tshwane 2025/26 uplift. Version 0.17.0 later refined this into separate energy, fixed-charge, and levy treatment for mixed-VAT schedules.

Retired unreliable Auto-detect choices from installation-level inverter validation, added a required one-time setup that works with or without SolarAssistant, and separated setup completeness from operational source-quality protection.

Added full Solarman response-integrity validation, semantic snapshot quarantine, confirmed-sample critical alerts, canonical cross-source setting resolution, SOC-aware inactive voltage handling, and richer retained register evidence.

Verified safe Shared dongle polling against live data, corrected the live panel source heading, and reduced repeated forensic entries for unchanged review-only inverter settings while preserving state changes and periodic reminders.

Separated push-based SolarAssistant MQTT from active dongle polling, added dedicated and shared dongle safety profiles, slower context reads, adaptive backoff, a circuit pause, request diagnostics, subscriber-only MQTT enforcement, and stale-gap rollup protection.

Improved Inverter State Validation saving with browser-side pending preferences that sync automatically after an older dashboard service is restarted, and preserved the selected 16S LiFePO4 battery chemistry preference.

Added context-aware inverter setting validation, Healthy/Review/Error safety states, configurable fallback context, read-only Solarman context polling, and richer retained investigation evidence.

Added durable forensic audit logging, official Solarman API origin protection, persistent validation for impossible inverter setting states, a high-visibility Inverter State alarm, and retained investigation history in Rollups.

Added signed battery charge/discharge rate, configurable battery-bank capacity preferences, nominal-voltage validation, and negative live savings support while generator fuel costs accumulate.

Shifted the Dashboard toward an animated energy-control-centre experience, with dark live nodes, directional flow particles, custom icons, compact node labels, and configurable inverter visibility.

Added a bite-sized insights tab with compact visuals, refreshable facts, and configurable narrative tone based on local history, live rollups, savings, and tariff data.

Introduced residential tariff profiles, progressive blocks, fixed-charge treatment, carry-forward tariff periods, custom user-defined plans, and PDF tariff schedule import review.

Added Solarman OpenAPI configuration, connection testing, historical imports, update-to-today backfills, API call tracking, and API history export to Excel.

Added generator runtime estimates, fuel use by power band, diesel price capture, tank gauge estimates, generator cost, and generator cost per kWh in live and rollup views.

Added SolarAssistant MQTT and Deye/Solarman dongle live-source support, quality events, source-switching protection, and live message visibility.

Started with uploaded workbook history, monthly rollups, top production days, charts, savings trends, and table accordions.