Daily email report of slowdowns and dropouts

[MSabacreationslab]

What

A daily email report of every slowdown and dropout, with its reason, the game that was running, and who was busy on the network at the time.

• Dashboard card: fields for who gets it (comma-separated), the sending account, and an app password; a daily on/off switch; Save, Send report now and Preview report.
• When it sends: once a day when HogWatch starts, or at 8 AM if it's already running. Each daily report covers the time since the previous one (7 days at most). A failed send is logged and retried an hour later.
• Sending: through the user's own SMTP account (Gmail by default), always over TLS (STARTTLS on 587, TLS from the start on 465). If Gmail rejects the login, the error explains app passwords.
• Password storage: encrypted with Windows DPAPI in data/email.json (gitignored), so only that Windows account can read it. The API never returns it; it only reports whether one is saved.
• CLI: python -m hogwatch send-report [--hours N] [--preview]
• Fix: eero's "Unassigned" profile no longer shows up as a device owner.

Security

The dashboard holds email settings now, so it's locked down further:

• It only answers requests whose Host is 127.0.0.1:<port> or localhost:<port>. This blocks DNS-rebinding pages from reading the API.
• Every POST needs the X-HogWatch: 1 header, which cross-site pages can't send without a CORS preflight (never approved). A random web page can't change the recipient or trigger emails.
• Device names are HTML-escaped in the email.

Testing

• 20 new tests in tests/test_report.py: DPAPI storage, the password never appearing in API responses, Host and header enforcement, HTML escaping, report counts and advice, SMTP flows (smtplib mocked), and daily scheduling. 51/51 pass locally.
• Manual run against a demo server: a bad address shows a clear error, Save persists, Send without a password refuses, and the preview renders.
• No real email was sent. The first real send needs the owner's app password.

Note: this repo's CI workflow is added in #1. This PR won't have its test check until #1 is merged and main is merged into this branch.

🤖 Generated with Claude Code