New internal/monitor package provides a thread-safe, file-backed toggle.
Flag file presence (/etc/ems/monitor-only) = monitor-only active, survives
reboots. Deletion = resume normal operation.
Behaviour when active:
- EMS continues polling Prometheus, running the decision engine, and
updating the status page every 2 minutes — full visibility maintained
- All actuator calls suppressed (Shelly switches + Viessmann WW writes)
- Suppressed actions logged as [MONITOR-ONLY] for audit trail
- Startup warns if flag file is already present
Web UI:
- Amber banner "⏸ Monitor-Only — Keine Schaltvorgänge" with inline
"▶ Automatik" resume button when active
- Small unobtrusive "⏸ Monitor-Only" button at page bottom when inactive
- POST /monitor endpoint toggles state and redirects back to status page
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Lutz Finsterle
00f8f3cdde