Initial project scaffold

.gitignore

@@ -0,0 +1,3 @@
+.idea/
+.vscode/
+*.log

AGENTS.md

@@ -0,0 +1,7 @@
+# Repository Rules
+
+This repository is public. It may contain only Home Assistant app metadata, public documentation, neutral artwork, and a reference to the published bridge image.
+
+Never add bridge source code, device protocol details, confidential fixtures, credentials, tokens, private build details, or vendor-owned artwork. Do not publish an image or release without explicit approval.
+
+All source text and documentation in this repository must be written in English.

README.md

@@ -0,0 +1,7 @@
+# MB-Secure Home Assistant Apps
+
+This repository contains the public Home Assistant metadata for the unofficial, local MB-Secure integration.
+
+The bridge implementation is distributed as a pre-built container and is not part of this public repository. It exposes only a vendor-neutral API to the Home Assistant integration.
+
+No container image has been published yet.

mb_secure_bridge/DOCS.md

@@ -0,0 +1,7 @@
+# Configuration
+
+Configure the local controller address and the installation-specific credentials supplied for your system. Credentials stay inside the app and are never passed to the Home Assistant integration.
+
+For local certificates, `fingerprint` mode requires the expected SHA-256 certificate fingerprint. A certificate change is rejected. `system_ca` uses the standard trust store, while `custom_ca` is reserved for a separately provided local certificate authority.
+
+The bridge API is intended for the internal Home Assistant network and is not exposed on a host port by default.

mb_secure_bridge/README.md

@@ -0,0 +1,5 @@
+# MB-Secure Bridge
+
+The MB-Secure Bridge provides a local, vendor-neutral API for the MB-Secure Home Assistant integration.
+
+This app is not affiliated with or endorsed by the device manufacturer. An installable container image is not available yet.

mb_secure_bridge/config.yaml

@@ -0,0 +1,32 @@
+name: MB-Secure Bridge
+version: "0.1.0"
+slug: mb_secure_bridge
+description: Local bridge for the MB-Secure Home Assistant integration
+url: https://git.bahmcloud.de/bahmcloud/home-assistant-addons
+startup: application
+boot: auto
+init: false
+arch:
+  - amd64
+  - aarch64
+image: git.bahmcloud.de/bahmcloud/mb-secure-bridge
+ports: {}
+ports_description: {}
+options:
+  host: ""
+  port: 443
+  username: ""
+  password: ""
+  tls_mode: fingerprint
+  certificate_sha256: ""
+  reconnect_interval: 10
+  log_level: info
+schema:
+  host: str
+  port: port
+  username: str
+  password: password
+  tls_mode: list(system_ca|custom_ca|fingerprint)
+  certificate_sha256: str
+  reconnect_interval: int(1,300)
+  log_level: list(error|warn|info|debug)

mb_secure_bridge/translations/en.yaml

@@ -0,0 +1,25 @@
+configuration:
+  host:
+    name: Controller host
+    description: Local address of the controller.
+  port:
+    name: Controller port
+    description: TLS port used by the controller.
+  username:
+    name: Username
+    description: Installation-specific local API username.
+  password:
+    name: Password
+    description: Installation-specific local API password.
+  tls_mode:
+    name: TLS verification mode
+    description: Select system trust, a custom CA, or a pinned certificate fingerprint.
+  certificate_sha256:
+    name: Certificate SHA-256 fingerprint
+    description: Expected fingerprint when fingerprint verification is selected.
+  reconnect_interval:
+    name: Reconnect interval
+    description: Initial reconnect delay in seconds.
+  log_level:
+    name: Log level
+    description: Diagnostic logging verbosity. Secrets are always redacted.

repository.yaml

@@ -0,0 +1,3 @@
+name: MB-Secure Apps
+url: https://git.bahmcloud.de/bahmcloud/home-assistant-addons
+maintainer: BahmCloud