docs: update CLAUDE.md for Fingerbank integration
CI / web (push) Successful in 15s
CI / api (push) Successful in 20s

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
2026-07-12 23:41:24 -06:00
parent e5ace7692a
commit c614768704
+9 -4
View File
@@ -56,13 +56,18 @@ One login instead of logging into Proxmox, Zabbix, OMV, and every service separa
(real ARP entries live in the host's network namespace, not Docker's bridge network). API reads the (real ARP entries live in the host's network namespace, not Docker's bridge network). API reads the
resulting JSON each poll cycle. Sortable by every column in the UI (click a header, click again to resulting JSON each poll cycle. Sortable by every column in the UI (click a header, click again to
reverse). Full reasoning in `docs/device-discovery.md`. reverse). Full reasoning in `docs/device-discovery.md`.
- **Identifying unknown devices** (done): four layers — MAC OUI vendor lookup (`mac-oui-lookup`, - **Identifying unknown devices** (done): five layers — MAC OUI vendor lookup (`mac-oui-lookup`,
computed on read), mDNS hostname (added to the discovery sweep), manual labels (new `device_labels` computed on read), mDNS hostname (added to the discovery sweep), manual labels (new `device_labels`
table keyed by MAC, inline-editable in the dashboard, takes priority), and an admin-triggered table keyed by MAC, inline-editable in the dashboard, takes priority), an admin-triggered
**on-demand deep check** per unknown device (mDNS + targeted SSDP/UPnP + curated port scan + HTTP **on-demand deep check** per unknown device (mDNS + targeted SSDP/UPnP + curated port scan + HTTP
title grab, runs on the CT122 host via a *parameterized* SSH forced-command reading title grab, runs on the CT122 host via a *parameterized* SSH forced-command reading
`$SSH_ORIGINAL_COMMAND`, strictly validated). Full writeup in `docs/device-discovery.md`. Already `$SSH_ORIGINAL_COMMAND`, strictly validated), and optional **Fingerbank** enrichment folded into that
resolved ~59/71 devices including "Ring LLC" and multiple "Amazon Technologies Inc." entries. same button (MAC + SSDP SERVER header, gated behind `FINGERBANK_API_KEY`, runs directly from the API
container — no host-level access needed, unlike the other deep-check steps). Full writeup in
`docs/device-discovery.md`. Already resolved ~59/71 devices including "Ring LLC" and multiple "Amazon
Technologies Inc." entries. Fingerbank's honest ceiling without DHCP fingerprint data (which we don't
have — not the DHCP server) is manufacturer-level confidence, same as free OUI — documented plainly,
not oversold; UI shows the confidence band so a low-confidence guess isn't mistaken for a confirmed ID.
Two real bugs hit while building this: `mac-oui-lookup`'s named export crashed the whole process at Two real bugs hit while building this: `mac-oui-lookup`'s named export crashed the whole process at
startup under Node ESM/CJS interop (works fine under `require()`, fails under `import { x } from`, startup under Node ESM/CJS interop (works fine under `require()`, fails under `import { x } from`,
confirmed by running the built output with `node`, not just `tsc`); and SQLite's `ALTER TABLE ADD confirmed by running the built output with `node`, not just `tsc`); and SQLite's `ALTER TABLE ADD