noiwid/HAFamilySafety v2.0.18

2.0.18

on GitHub

Blocking and allowing websites works again, with a new allow_website service.

Fixed

• block_website and remove_website failed with 400 "The Operations field is required" (#54). The mobile aggregator now takes one operation per site: Add on /exceptions with {"website": "https://example.com", "allowed": false}, and Remove with the URL as a plain string. The URL must be absolute, so a bare host like example.com is prefixed with https:// for you. Confirmed on a real account: the sites showed up on the blocked and allowed lists in the Family Safety app and disappeared again after removal.

Added

• allow_website service: puts a site on the always-allowed list (the same list the app shows under "Allowed sites"). remove_website removes from either list.

Known gap

• The mobile API still answers an empty exceptions list on read, so the Web Filter sensor does not show the blocked/allowed sites unless the Family web session is alive. The writes themselves do not need that session.
• App time limits (set_app_time_limit) remain broken; the endpoint wants a policy field whose shape is still unknown. A capture of the Family Safety app's request would settle it, see #54.