web_server.cpp

Go to the documentation of this file.

#include "web_server.h"
 
#include <algorithm>
#ifdef USE_WEBSERVER
#include "esphome/components/json/json_util.h"
#include "esphome/core/progmem.h"
#include "esphome/components/network/util.h"
#include "esphome/core/application.h"
#include "esphome/core/defines.h"
#include "esphome/core/entity_base.h"
#include "esphome/core/helpers.h"
#include "esphome/core/log.h"
#include "esphome/core/util.h"
 
#if !defined(USE_ESP32) && defined(USE_ARDUINO)
#include "StreamString.h"
#endif
 
#include <cstdlib>
 
#ifdef USE_LIGHT
#include "esphome/components/light/light_json_schema.h"
#endif
 
#ifdef USE_LOGGER
#include "esphome/components/logger/logger.h"
#endif
 
#ifdef USE_CLIMATE
#include "esphome/components/climate/climate.h"
#endif
 
#ifdef USE_UPDATE
#include "esphome/components/update/update_entity.h"
#endif
 
#ifdef USE_WATER_HEATER
#include "esphome/components/water_heater/water_heater.h"
#endif
 
#ifdef USE_INFRARED
#include "esphome/components/infrared/infrared.h"
#endif
#ifdef USE_RADIO_FREQUENCY
#include "esphome/components/radio_frequency/radio_frequency.h"
#endif
 
#ifdef USE_WEBSERVER_CAPTIVE
#include "esphome/components/wifi/wifi_component.h"
#endif
 
#ifdef USE_WEBSERVER_LOCAL
#if USE_WEBSERVER_VERSION == 2
#include "server_index_v2.h"
#elif USE_WEBSERVER_VERSION == 3
#include "server_index_v3.h"
#endif
#endif
 
namespace esphome::web_server {
 
ESPHOME_LOG_TAG(TAG, "web_server");
 
using json::linked;
 
#ifdef USE_ESP8266
// A LogString is always in flash on ESP8266: view it as a ProgmemStr so ArduinoJson copies it PROGMEM-aware.
[[maybe_unused]] static ProgmemStr json_state_str(const LogString *s) { return reinterpret_cast<ProgmemStr>(s); }
#else
// Elsewhere a LogString is in RAM and can be linked
[[maybe_unused]] static JsonString json_state_str(const LogString *s) { return linked(LOG_STR_ARG(s)); }
#endif
 
// One action of a POST /{domain}/{entity}/{action} request, kept in PROGMEM with the name inline so the
// table needs no RAM on ESP8266.
template<typename Call> struct ActionEntry {
  char name[16];
  Call &(Call::*action)();
};
 
// Runs the entry whose name matches the request's action; false when none does.
template<typename Call, size_t N>
static bool run_action(const UrlMatch &match, Call &call, const ActionEntry<Call> (&table)[N]) {
  for (const auto &entry : table) {
    if (match.method_equals(reinterpret_cast<ProgmemStr>(entry.name))) {
      Call &(Call::*action)();
      progmem_memcpy(&action, &entry.action, sizeof(action));
      (call.*action)();
      return true;
    }
  }
  return false;
}
 
// Out of line: every GET handler ends with this
[[maybe_unused]] static void send_json(AsyncWebServerRequest *request, json::JsonBuilder &builder) {
  auto data = builder.serialize();
  request->send(200, ESPHOME_F("application/json"), data.c_str());
}
 
// Parse URL and return match info
// URL formats (disambiguated by HTTP method for 3-segment case):
//   GET  /{domain}/{entity_name} - main device state
//   POST /{domain}/{entity_name}/{action} - main device action
//   GET  /{domain}/{device_name}/{entity_name} - sub-device state (USE_DEVICES only)
//   POST /{domain}/{device_name}/{entity_name}/{action} - sub-device action (USE_DEVICES only)
static UrlMatch match_url(const char *url_ptr, size_t url_len, bool only_domain, bool is_post = false) {
  // Every path returns this one object so it is built in place; fields are only set once the URL is known valid
  UrlMatch match{};
 
  // URL must start with '/' and have content after it
  if (url_len < 2 || url_ptr[0] != '/')
    return match;
 
  const char *p = url_ptr + 1;
  const char *end = url_ptr + url_len;
 
  // Helper to find next segment: returns pointer after '/' or nullptr if no more slashes
  auto next_segment = [&end](const char *start) -> const char * {
    const char *slash = (const char *) memchr(start, '/', end - start);
    return slash ? slash + 1 : nullptr;
  };
 
  // Helper to make StringRef from segment start to next segment (or end)
  auto make_ref = [&end](const char *start, const char *next_start) -> StringRef {
    return StringRef(start, (next_start ? next_start - 1 : end) - start);
  };
 
  // Parse domain segment
  const char *s1 = p;
  const char *s2 = next_segment(s1);
 
  // Must have domain with trailing slash
  if (!s2)
    return match;
 
  if (only_domain || s2 >= end) {
    match.domain = make_ref(s1, s2);
    match.valid = true;
    return match;
  }
 
  // Parse remaining segments only when needed
  const char *s3 = next_segment(s2);
  const char *s4 = s3 ? next_segment(s3) : nullptr;
 
  StringRef seg2 = make_ref(s2, s3);
  StringRef seg3 = s3 ? make_ref(s3, s4) : StringRef();
  StringRef seg4 = s4 ? make_ref(s4, nullptr) : StringRef();
 
  // Reject empty segments
  if (seg2.empty() || (s3 && seg3.empty()) || (s4 && seg4.empty()))
    return match;
 
  // Interpret based on segment count
  if (!s3) {
    // 1 segment after domain: /{domain}/{entity}
    match.id = seg2;
  } else if (!s4) {
    // 2 segments after domain: /{domain}/{X}/{Y}
    // HTTP method disambiguates: GET = device/entity, POST = entity/action
    if (is_post) {
      match.id = seg2;
      match.method = seg3;
    } else {
#ifdef USE_DEVICES
      match.device_name = seg2;
      match.id = seg3;
#else
      return match;  // 3-segment GET not supported without USE_DEVICES
#endif
    }
  } else {
    // 3 segments after domain: /{domain}/{device}/{entity}/{action}
#ifdef USE_DEVICES
    if (!is_post) {
      return match;  // 4-segment GET not supported (action requires POST)
    }
    match.device_name = seg2;
    match.id = seg3;
    match.method = seg4;
#else
    // Not supported without USE_DEVICES
    return match;
#endif
  }
 
  match.domain = make_ref(s1, s2);
  match.valid = true;
  return match;
}
 
EntityMatchResult UrlMatch::match_entity(EntityBase *entity) const {
  EntityMatchResult result{false, this->method.empty()};
 
  // Internal entities are unreachable by URL unless include_internal is set, as with the native API and MQTT.
  if (!this->include_internal && entity->is_internal())
    return result;
 
#ifdef USE_DEVICES
  Device *entity_device = entity->get_device();
  bool url_has_device = !this->device_name.empty();
  bool entity_has_device = (entity_device != nullptr);
 
  // Device matching: URL device segment must match entity's device
  if (url_has_device != entity_has_device) {
    return result;  // Mismatch: one has device, other doesn't
  }
  if (url_has_device && this->device_name != entity_device->get_name()) {
    return result;  // Device name doesn't match
  }
#endif
 
  // Match by entity name
  if (entity->name_equals(this->id)) {
    result.matched = true;
  }
 
  return result;
}
 
#if !defined(USE_ESP32) && defined(USE_ARDUINO)
// helper for allowing only unique entries in the queue
void __attribute__((flatten)) DeferredUpdateEventSource::deq_push_back_with_dedup_(
    void *source, message_generator_t *message_generator) {
  DeferredEvent item(source, message_generator);
 
  // Use range-based for loop instead of std::find_if to reduce template instantiation overhead and binary size
  for (auto &event : this->deferred_queue_) {
    if (event == item) {
      return;  // Already in queue, no need to update since items are equal
    }
  }
  this->deferred_queue_.push_back(item);
}
 
void DeferredUpdateEventSource::process_deferred_queue_() {
  while (!deferred_queue_.empty()) {
    DeferredEvent &de = deferred_queue_.front();
    json::JsonBuilder builder;
    de.message_generator_(web_server_, de.source_, builder);
    auto message = builder.serialize();
    if (this->send(message.c_str(), "state") != DISCARDED) {
      // O(n) but memory efficiency is more important than speed here which is why std::vector was chosen
      deferred_queue_.erase(deferred_queue_.begin());
      this->consecutive_send_failures_ = 0;  // Reset failure count on successful send
    } else {
      // NOTE: Similar logic exists in web_server_idf/web_server_idf.cpp in AsyncEventSourceResponse::drain_tail_().
      // The close mechanisms are platform-specific (this path calls close() directly; the IDF path is time-based and
      // closes through HTTPD to preserve session ownership), but both drop a client after roughly 20 seconds without
      // send progress. Keep that stall policy in sync when changing either side.
      this->consecutive_send_failures_++;
      if (this->consecutive_send_failures_ >= MAX_CONSECUTIVE_SEND_FAILURES) {
        // Too many failures, connection is likely dead
        ESP_LOGW(TAG, "Closing stuck EventSource connection after %" PRIu16 " failed sends",
                 this->consecutive_send_failures_);
        this->close();
        this->deferred_queue_.clear();
      }
      break;
    }
  }
}
 
void DeferredUpdateEventSource::loop() {
  process_deferred_queue_();
  // One step per loop; refusals retry next pass
  this->entities_iterator_.try_advance(1);
}
 
void DeferredUpdateEventSource::deferrable_send_state(void *source, bool detail_all,
                                                      message_generator_t *message_generator) {
  // Skip if no connected clients to avoid unnecessary deferred queue processing
  if (this->count() == 0)
    return;
 
  // Let the detail_all listing finish before bare state events, so the web UI never shows unnamed entries and
  // initial connect sends less
  if (!detail_all && !this->entities_iterator_.completed())
    return;
 
  if (!deferred_queue_.empty())
    process_deferred_queue_();
  if (!deferred_queue_.empty()) {
    // deferred queue still not empty which means downstream event queue full, no point trying to send first
    deq_push_back_with_dedup_(source, message_generator);
  } else {
    json::JsonBuilder builder;
    message_generator(web_server_, source, builder);
    auto message = builder.serialize();
    if (this->send(message.c_str(), "state") == DISCARDED) {
      deq_push_back_with_dedup_(source, message_generator);
    } else {
      this->consecutive_send_failures_ = 0;  // Reset failure count on successful send
    }
  }
}
 
// used for logs plus the initial ping/config
void DeferredUpdateEventSource::try_send_nodefer(const char *message, size_t message_len, const char *event,
                                                 uint32_t id, uint32_t reconnect) {
  // ESPAsyncWebServer's send() only accepts null-terminated strings
  (void) message_len;
  this->send(message, event, id, reconnect);
}
 
bool DeferredUpdateEventSourceList::loop() {
  for (DeferredUpdateEventSource *dues : *this) {
    dues->loop();
  }
  return !this->empty();
}
 
void DeferredUpdateEventSourceList::deferrable_send_state(void *source, bool detail_all,
                                                          message_generator_t *message_generator) {
  // Skip if no event sources (no connected clients) to avoid unnecessary iteration
  if (this->empty())
    return;
  for (DeferredUpdateEventSource *dues : *this) {
    dues->deferrable_send_state(source, detail_all, message_generator);
  }
}
 
void DeferredUpdateEventSourceList::try_send_nodefer(const char *message, size_t message_len, const char *event,
                                                     uint32_t id, uint32_t reconnect) {
  for (DeferredUpdateEventSource *dues : *this) {
    dues->try_send_nodefer(message, message_len, event, id, reconnect);
  }
}
 
void DeferredUpdateEventSourceList::add_new_client(WebServer *ws, AsyncWebServerRequest *request) {
  DeferredUpdateEventSource *es = new DeferredUpdateEventSource(ws, ESPHOME_F("/events"));
  this->push_back(es);
 
  es->onConnect([this, es](AsyncEventSourceClient *client) { this->on_client_connect_(es); });
 
  es->onDisconnect([this, es](AsyncEventSourceClient *client) { this->on_client_disconnect_(es); });
 
  es->handleRequest(request);
  ws->enable_loop_soon_any_context();
}
 
void DeferredUpdateEventSourceList::on_client_connect_(DeferredUpdateEventSource *source) {
  WebServer *ws = source->web_server_;
  ws->defer([ws, source]() {
    // Configure reconnect timeout and send config
    // this should always go through since the AsyncEventSourceClient event queue is empty on connect
    auto message = ws->get_config_json();
    source->try_send_nodefer(message.c_str(), message.size(), "ping", millis(), 30000);
 
#ifdef USE_WEBSERVER_SORTING
    for (auto &group : ws->sorting_groups_) {
      json::JsonBuilder builder;
      JsonObject root = builder.root();
      root[ESPHOME_F("name")] = linked(group.second.name);
      root[ESPHOME_F("sorting_weight")] = group.second.weight;
      auto group_msg = builder.serialize();
 
      // up to 31 groups should be able to be queued initially without defer
      source->try_send_nodefer(group_msg.c_str(), group_msg.size(), "sorting_group");
    }
#endif
 
    source->entities_iterator_.begin(ws->include_internal_);
  });
}
 
void DeferredUpdateEventSourceList::on_client_disconnect_(DeferredUpdateEventSource *source) {
  source->web_server_->defer([this, source]() {
    // This method was called via WebServer->defer() and is no longer executing in the
    // context of the network callback. The object is now dead and can be safely deleted.
    this->remove(source);
    delete source;  // NOLINT
  });
}
#endif
 
#ifdef USE_WEBSERVER_CAPTIVE
WebServer *global_web_server = nullptr;  // NOLINT(cppcoreguidelines-avoid-non-const-global-variables)
#endif
 
WebServer::WebServer(web_server_base::WebServerBase *base) : base_(base) {
#ifdef USE_WEBSERVER_CAPTIVE
  global_web_server = this;
#endif
}
 
// Kept out of the callers so the 64 bit division is emitted once
__attribute__((noinline)) static uint32_t uptime_seconds() { return static_cast<uint32_t>(millis_64() / 1000); }
 
json::SerializationBuffer<> WebServer::get_config_json() {
  json::JsonBuilder builder;
  JsonObject root = builder.root();
 
  root[ESPHOME_F("title")] = linked(App.get_friendly_name().empty() ? App.get_name() : App.get_friendly_name());
  char comment_buffer[Application::ESPHOME_COMMENT_SIZE_MAX];
  App.get_comment_string(comment_buffer);
  root[ESPHOME_F("comment")] = static_cast<const char *>(comment_buffer);
#if defined(USE_WEBSERVER_OTA_DISABLED) || !defined(USE_WEBSERVER_OTA)
  root[ESPHOME_F("ota")] = false;  // Note: USE_WEBSERVER_OTA_DISABLED only affects web_server, not captive_portal
#else
  root[ESPHOME_F("ota")] = true;
#endif
  root[ESPHOME_F("log")] = this->expose_log_;
  root[ESPHOME_F("lang")] = "en";
  root[ESPHOME_F("uptime")] = uptime_seconds();
 
  return builder.serialize();
}
 
void WebServer::setup() {
  this->base_->init();
 
#ifdef USE_LOGGER
  if (logger::global_logger != nullptr && this->expose_log_) {
    logger::global_logger->add_log_callback(
        this, [](void *self, uint8_t level, const char *tag, const char *message, size_t message_len) {
          static_cast<WebServer *>(self)->on_log(level, tag, message, message_len);
        });
  }
#endif
 
#ifdef USE_ESP32
  this->base_->add_handler(&this->events_);
#endif
  this->base_->add_handler(this);
#ifdef USE_WEBSERVER_CAPTIVE
  // Not-found fallback (outside the auth middleware): the OS captive portal probes hit
  // arbitrary URLs and must get the redirect without credentials.
  this->base_->get_server()->onNotFound([this](AsyncWebServerRequest *request) { this->handle_not_found_(request); });
#endif
 
  // OTA is now handled by the web_server OTA platform
 
  // doesn't need defer functionality - if the queue is full, the client JS knows it's alive because it's clearly
  // getting a lot of events
  this->set_interval(10000, [this]() {
    if (this->events_.empty())
      return;
    char buf[32];
    auto uptime = uptime_seconds();
    size_t len = buf_append_printf(buf, sizeof(buf), 0, "{\"uptime\":%" PRIu32 "}", uptime);
    this->events_.try_send_nodefer(buf, len, "ping", millis(), 30000);
  });
}
void WebServer::loop() {
  bool keep_looping = this->events_.loop();
#ifdef USE_WEBSERVER_CAPTIVE
  this->dns_.loop();
  keep_looping |= this->dns_.is_running();
#endif
  // No SSE clients connected (and no captive DNS to serve); stop looping until a new client connects via
  // enable_loop_soon_any_context(). This is safe because:
  // - set_interval/set_timeout/defer run via the Scheduler, independent of loop()
  // - deferrable_send_state early-outs when no clients are connected
  // - try_send_nodefer (log, ping) iterates sessions which are empty
  // - REST API handlers use defer() which runs via the Scheduler
  if (!keep_looping)
    this->disable_loop();
}
 
#ifdef USE_WEBSERVER_CAPTIVE
void WebServer::start_captive() {
  // Avoid repeating the log and enable_loop on a second start
  if (this->dns_.is_running())
    return;
  network::IPAddress ip = wifi::global_wifi_component->wifi_soft_ap_ip();
  char ip_buf[network::IP_ADDRESS_BUFFER_SIZE];
  if (!this->dns_.start(ip)) {
    ESP_LOGW(TAG, "AP mode: captive DNS failed to start; open http://%s/ manually", ip.str_to(ip_buf));
    return;
  }
  this->enable_loop();
  ESP_LOGI(TAG, "AP mode: serving the web interface as captive portal at http://%s/", ip.str_to(ip_buf));
}
 
void WebServer::end_captive() { this->dns_.stop(); }
 
void WebServer::handle_not_found_(AsyncWebServerRequest *request) {
  // OS captive portal probe while the AP is up: a redirect rather than the page itself, because
  // the interface resolves its /events and REST paths relative to the page URL.
  if (this->dns_.is_running() && request->method() == HTTP_GET) {
    char ip_buf[network::IP_ADDRESS_BUFFER_SIZE];
    wifi::global_wifi_component->wifi_soft_ap_ip().str_to(ip_buf);
    // Captive mode requires port 80 (enforced at validation), so no port suffix
    char location[7 + network::IP_ADDRESS_BUFFER_SIZE + 1];
    buf_append_printf(location, sizeof(location), 0, "http://%s/", ip_buf);
    request->redirect(location);
    return;
  }
  request->send(404);
}
#endif
 
#ifdef USE_LOGGER
 
void WebServer::on_log(uint8_t level, const char *tag, const char *message, size_t message_len) {
  (void) level;
  (void) tag;
  this->events_.try_send_nodefer(message, std::min(message_len, LOG_EVENT_MAX_LEN), "log", millis());
}
#endif
 
void WebServer::dump_config() {
  char addr_buf[network::USE_ADDRESS_BUFFER_SIZE];
  ESP_LOGCONFIG(TAG,
                "Web Server:\n"
                "  Address: %s:%u",
                network::get_use_address_to(addr_buf), this->base_->get_port());
}
float WebServer::get_setup_priority() const { return setup_priority::WIFI - 1.0f; }
 
#ifdef USE_WEBSERVER_LOCAL
void WebServer::handle_index_request(AsyncWebServerRequest *request) {
  AsyncWebServerResponse *response = request->beginResponse(200, ESPHOME_F("text/html"), INDEX_GZ, sizeof(INDEX_GZ));
#ifdef USE_WEBSERVER_GZIP
  response->addHeader(ESPHOME_F("Content-Encoding"), ESPHOME_F("gzip"));
#else
  response->addHeader(ESPHOME_F("Content-Encoding"), ESPHOME_F("br"));
#endif
  request->send(response);
}
#elif USE_WEBSERVER_VERSION >= 2
void WebServer::handle_index_request(AsyncWebServerRequest *request) {
  AsyncWebServerResponse *response = request->beginResponse(200, ESPHOME_F("text/html"), ESPHOME_WEBSERVER_INDEX_HTML,
                                                            ESPHOME_WEBSERVER_INDEX_HTML_SIZE);
  // No gzip header here because the HTML file is so small
  request->send(response);
}
#endif
 
// Read a request header value portably across the Arduino and ESP-IDF web servers.
// Returns an empty string when the header is absent (only allocates when a value is present).
static std::string get_request_header(AsyncWebServerRequest *request, const char *name) {
#ifdef USE_ESP32
  // ESP32 (Arduino and ESP-IDF) uses the web_server_idf backend.
  optional<std::string> value = request->get_header(name);
  return value.has_value() ? std::move(*value) : std::string();
#else
  // ESP8266, RP2040 and LibreTiny use the Arduino ESPAsyncWebServer backend.
  const AsyncWebHeader *header = request->getHeader(name);
  return header != nullptr ? std::string(header->value().c_str()) : std::string();
#endif
}
 
bool WebServer::is_request_origin_allowed_(AsyncWebServerRequest *request, const std::string &origin) {
  // No Origin header: not a browser cross-origin request (e.g. curl, native API client). Allow.
  if (origin.empty())
    return true;
 
  // Same-origin: the Origin authority (scheme stripped) matches the Host the request was sent to.
  // This covers the device's own IP, mDNS name, or DNS name without knowing any at compile time.
  const size_t scheme_sep = origin.find("://");
  if (scheme_sep != std::string::npos) {
    const std::string host = get_request_header(request, "Host");
    // Compare by hand: compare(pos, ...) carries an out_of_range throw path that can never fire here
    const size_t authority = scheme_sep + 3;
    if (!host.empty() && origin.size() - authority == host.size() &&
        memcmp(origin.data() + authority, host.data(), host.size()) == 0)
      return true;
  }
 
#ifdef USE_WEBSERVER_ALLOWED_ORIGINS
  // Otherwise the origin must be explicitly allowed via configuration.
  for (const char *const *it = this->allowed_origins_; *it != nullptr; it++) {
    const char *allowed_origin = *it;
    // A single "*" entry allows any origin.
    if (allowed_origin[0] == '*' && allowed_origin[1] == '\0')
      return true;
    if (origin == allowed_origin)
      return true;
  }
#endif
  return false;
}
 
#ifdef USE_WEBSERVER_PRIVATE_NETWORK_ACCESS
void WebServer::handle_pna_cors_request(AsyncWebServerRequest *request) {
  const std::string origin = get_request_header(request, "Origin");
  if (!this->is_request_origin_allowed_(request, origin)) {
    request->send(403);
    return;
  }
 
  AsyncWebServerResponse *response = request->beginResponse(200, ESPHOME_F(""));
  // Echo the specific origin back so the response is valid even when auth (credentials) is enabled.
  response->addHeader(ESPHOME_F("Access-Control-Allow-Origin"), origin.empty() ? "*" : origin.c_str());
  response->addHeader(ESPHOME_F("Access-Control-Allow-Private-Network"), ESPHOME_F("true"));
  response->addHeader(ESPHOME_F("Private-Network-Access-Name"), App.get_name().c_str());
  char mac_s[MAC_ADDRESS_PRETTY_BUFFER_SIZE];
  response->addHeader(ESPHOME_F("Private-Network-Access-ID"), get_mac_address_pretty_into_buffer(mac_s));
  request->send(response);
}
#endif
 
#ifdef USE_WEBSERVER_CSS_INCLUDE
void WebServer::handle_css_request(AsyncWebServerRequest *request) {
  AsyncWebServerResponse *response = request->beginResponse(200, ESPHOME_F("text/css"), ESPHOME_WEBSERVER_CSS_INCLUDE,
                                                            ESPHOME_WEBSERVER_CSS_INCLUDE_SIZE);
  response->addHeader(ESPHOME_F("Content-Encoding"), ESPHOME_F("gzip"));
  request->send(response);
}
#endif
 
#ifdef USE_WEBSERVER_JS_INCLUDE
void WebServer::handle_js_request(AsyncWebServerRequest *request) {
  AsyncWebServerResponse *response = request->beginResponse(
      200, ESPHOME_F("text/javascript"), ESPHOME_WEBSERVER_JS_INCLUDE, ESPHOME_WEBSERVER_JS_INCLUDE_SIZE);
  response->addHeader(ESPHOME_F("Content-Encoding"), ESPHOME_F("gzip"));
  request->send(response);
}
#endif
 
// Helper functions to reduce code size by avoiding macro expansion
// Build unique id as: {domain}/{device_name}/{entity_name} or {domain}/{entity_name}
// Uses names (not object_id) to avoid UTF-8 collision issues
static void set_json_id(JsonObject root, EntityBase *obj, const char *prefix, JsonDetail start_config) {
  size_t prefix_len = strlen(prefix);
 
#ifdef USE_DEVICES
  Device *device = obj->get_device();
  const char *device_name = device ? device->get_name() : nullptr;
  size_t device_len = device_name ? strlen(device_name) : 0;
#endif
 
  // Stack buffer for the id - ArduinoJson copies the string before it goes out of scope
  // Buffer sizes use constants from entity_base.h validated in core/config.py
  // Note: Device name uses ESPHOME_FRIENDLY_NAME_MAX_LEN (sub-device max 120), not ESPHOME_DEVICE_NAME_MAX_LEN
  // (hostname)
#ifdef USE_DEVICES
  static constexpr size_t ID_BUF_SIZE =
      ESPHOME_DOMAIN_MAX_LEN + 1 + ESPHOME_FRIENDLY_NAME_MAX_LEN + 1 + ESPHOME_FRIENDLY_NAME_MAX_LEN + 1;
#else
  static constexpr size_t ID_BUF_SIZE = ESPHOME_DOMAIN_MAX_LEN + 1 + ESPHOME_FRIENDLY_NAME_MAX_LEN + 1;
#endif
  char id_buf[ID_BUF_SIZE];
  memcpy(id_buf, prefix, prefix_len);  // NOLINT(bugprone-not-null-terminated-result)
 
  char *p = id_buf + prefix_len;
  *p++ = '/';
#ifdef USE_DEVICES
  if (device_name) {
    memcpy(p, device_name, device_len);
    p += device_len;
    *p++ = '/';
  }
#endif
#ifdef USE_ESP8266
  const char *name = p;
#endif
  obj->write_name_to(p, id_buf + ID_BUF_SIZE - p);
  root[ESPHOME_F("id")] = static_cast<const char *>(id_buf);
 
  if (start_config == DETAIL_ALL) {
    root[ESPHOME_F("domain")] = linked(prefix, prefix_len);
#ifdef USE_ESP8266
    root[ESPHOME_F("name")] = name;  // in id_buf on the stack, so copied
#else
    const StringRef &ram_name = obj->get_name_progmem().ram_ref();
    root[ESPHOME_F("name")] = linked(ram_name.c_str(), ram_name.size());
#endif
#ifdef USE_DEVICES
    if (device_name) {
      root[ESPHOME_F("device")] = linked(device_name, device_len);
    }
#endif
#ifdef USE_ENTITY_ICON
    root[ESPHOME_F("icon")] = linked(obj->get_icon_progmem());
#endif
    root[ESPHOME_F("entity_category")] = obj->get_entity_category();
    bool is_disabled = obj->is_disabled_by_default();
    if (is_disabled)
      root[ESPHOME_F("is_disabled_by_default")] = is_disabled;
  }
}
 
// Keep as separate function even though only used once: reduces code size by ~48 bytes
// by allowing compiler to share code between template instantiations (bool, float, etc.)
template<typename T>
static void set_json_value(JsonObject root, EntityBase *obj, const char *prefix, T value, JsonDetail start_config) {
  set_json_id(root, obj, prefix, start_config);
  root[ESPHOME_F("value")] = value;
}
 
template<typename S, typename T>
static void set_json_icon_state_value(JsonObject root, EntityBase *obj, const char *prefix, S state, T value,
                                      JsonDetail start_config) {
  set_json_value(root, obj, prefix, value, start_config);
  root[ESPHOME_F("state")] = state;
}
 
// Helper to get request detail parameter
[[maybe_unused]] static JsonDetail get_request_detail(AsyncWebServerRequest *request) {
  return request->arg(ESPHOME_F("detail")) == "all" ? DETAIL_ALL : DETAIL_STATE;
}
 
void WebServer::send_state_event_(void *source, const EntityBase *entity, message_generator_t *generator) {
  if (!entity->is_internal() || this->include_internal_)
    this->events_.deferrable_send_state(source, false, generator);
}
 
#ifdef USE_SENSOR
void WebServer::on_sensor_update(sensor::Sensor *obj) { this->send_state_event_(obj, sensor_state_json_generator); }
void WebServer::handle_sensor_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (sensor::Sensor *obj : App.get_sensors()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
    // Note: request->method() is always HTTP_GET here (canHandle ensures this)
    if (entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->sensor_json_(obj, obj->state, detail, builder);
      send_json(request, builder);
      return;
    }
  }
  request->send(404);
}
void WebServer::sensor_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->sensor_json_((sensor::Sensor *) (source), ((sensor::Sensor *) (source))->state, DETAIL_STATE, builder);
}
void WebServer::sensor_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->sensor_json_((sensor::Sensor *) (source), ((sensor::Sensor *) (source))->state, DETAIL_ALL, builder);
}
void WebServer::sensor_json_(sensor::Sensor *obj, float value, JsonDetail start_config, json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  const auto uom_ref = obj->get_unit_of_measurement_ref();
  char buf[VALUE_ACCURACY_MAX_LEN];
  const char *state = std::isnan(value)
                          ? "NA"
                          : (value_accuracy_with_uom_to_buf(buf, value, obj->get_accuracy_decimals(), uom_ref), buf);
  set_json_icon_state_value(root, obj, "sensor", state, value, start_config);
  if (start_config == DETAIL_ALL) {
    this->add_sorting_info_(root, obj);
    if (!uom_ref.empty())
      root[ESPHOME_F("uom")] = linked(uom_ref);
  }
}
#endif
 
#ifdef USE_TEXT_SENSOR
void WebServer::on_text_sensor_update(text_sensor::TextSensor *obj) {
  this->send_state_event_(obj, text_sensor_state_json_generator);
}
void WebServer::handle_text_sensor_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (text_sensor::TextSensor *obj : App.get_text_sensors()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
    // Note: request->method() is always HTTP_GET here (canHandle ensures this)
    if (entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->text_sensor_json_(obj, obj->state, detail, builder);
      send_json(request, builder);
      return;
    }
  }
  request->send(404);
}
void WebServer::text_sensor_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->text_sensor_json_((text_sensor::TextSensor *) (source), ((text_sensor::TextSensor *) (source))->state,
                                DETAIL_STATE, builder);
}
void WebServer::text_sensor_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->text_sensor_json_((text_sensor::TextSensor *) (source), ((text_sensor::TextSensor *) (source))->state,
                                DETAIL_ALL, builder);
}
void WebServer::text_sensor_json_(text_sensor::TextSensor *obj, const std::string &value, JsonDetail start_config,
                                  json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  // Not linked: the main loop can rewrite the state before the document is serialized
  const JsonString state(value.c_str(), value.size());
  set_json_icon_state_value(root, obj, "text_sensor", state, state, start_config);
  if (start_config == DETAIL_ALL) {
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_SWITCH
enum SwitchAction : uint8_t { SWITCH_ACTION_NONE, SWITCH_ACTION_TOGGLE, SWITCH_ACTION_TURN_ON, SWITCH_ACTION_TURN_OFF };
 
static void execute_switch_action(switch_::Switch *obj, SwitchAction action) {
  switch (action) {
    case SWITCH_ACTION_TOGGLE:
      obj->toggle();
      break;
    case SWITCH_ACTION_TURN_ON:
      obj->turn_on();
      break;
    case SWITCH_ACTION_TURN_OFF:
      obj->turn_off();
      break;
    default:
      break;
  }
}
 
void WebServer::on_switch_update(switch_::Switch *obj) { this->send_state_event_(obj, switch_state_json_generator); }
void WebServer::handle_switch_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (switch_::Switch *obj : App.get_switches()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->switch_json_(obj, obj->state, detail, builder);
      send_json(request, builder);
      return;
    }
 
    SwitchAction action = SWITCH_ACTION_NONE;
 
    if (match.method_equals(ESPHOME_F("toggle"))) {
      action = SWITCH_ACTION_TOGGLE;
    } else if (match.method_equals(ESPHOME_F("turn_on"))) {
      action = SWITCH_ACTION_TURN_ON;
    } else if (match.method_equals(ESPHOME_F("turn_off"))) {
      action = SWITCH_ACTION_TURN_OFF;
    }
 
    if (action != SWITCH_ACTION_NONE) {
      this->defer([obj, action]() { execute_switch_action(obj, action); });
      request->send(200);
    } else {
      request->send(404);
    }
    return;
  }
  request->send(404);
}
void WebServer::switch_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->switch_json_((switch_::Switch *) (source), ((switch_::Switch *) (source))->state, DETAIL_STATE, builder);
}
void WebServer::switch_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->switch_json_((switch_::Switch *) (source), ((switch_::Switch *) (source))->state, DETAIL_ALL, builder);
}
void WebServer::switch_json_(switch_::Switch *obj, bool value, JsonDetail start_config, json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  set_json_icon_state_value(root, obj, "switch", value ? "ON" : "OFF", value, start_config);
  if (start_config == DETAIL_ALL) {
    root[ESPHOME_F("assumed_state")] = obj->assumed_state();
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_BUTTON
void WebServer::handle_button_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (button::Button *obj : App.get_buttons()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->button_json_(obj, detail, builder);
      send_json(request, builder);
    } else if (match.method_equals(ESPHOME_F("press"))) {
      DEFER_ACTION(obj, obj->press());
      request->send(200);
      return;
    } else {
      request->send(404);
    }
    return;
  }
  request->send(404);
}
void WebServer::button_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->button_json_((button::Button *) (source), DETAIL_ALL, builder);
}
void WebServer::button_json_(button::Button *obj, JsonDetail start_config, json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  set_json_id(root, obj, "button", start_config);
  if (start_config == DETAIL_ALL) {
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_BINARY_SENSOR
void WebServer::on_binary_sensor_update(binary_sensor::BinarySensor *obj) {
  this->send_state_event_(obj, binary_sensor_state_json_generator);
}
void WebServer::handle_binary_sensor_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (binary_sensor::BinarySensor *obj : App.get_binary_sensors()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
    // Note: request->method() is always HTTP_GET here (canHandle ensures this)
    if (entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->binary_sensor_json_(obj, obj->state, detail, builder);
      send_json(request, builder);
      return;
    }
  }
  request->send(404);
}
void WebServer::binary_sensor_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->binary_sensor_json_((binary_sensor::BinarySensor *) (source),
                                  ((binary_sensor::BinarySensor *) (source))->state, DETAIL_STATE, builder);
}
void WebServer::binary_sensor_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->binary_sensor_json_((binary_sensor::BinarySensor *) (source),
                                  ((binary_sensor::BinarySensor *) (source))->state, DETAIL_ALL, builder);
}
void WebServer::binary_sensor_json_(binary_sensor::BinarySensor *obj, bool value, JsonDetail start_config,
                                    json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  set_json_icon_state_value(root, obj, "binary_sensor", value ? "ON" : "OFF", value, start_config);
  if (start_config == DETAIL_ALL) {
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_FAN
void WebServer::on_fan_update(fan::Fan *obj) { this->send_state_event_(obj, fan_state_json_generator); }
void WebServer::handle_fan_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (fan::Fan *obj : App.get_fans()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->fan_json_(obj, detail, builder);
      send_json(request, builder);
    } else if (match.method_equals(ESPHOME_F("toggle"))) {
      DEFER_ACTION(obj, obj->toggle().perform());
      request->send(200);
    } else {
      bool is_on = match.method_equals(ESPHOME_F("turn_on"));
      bool is_off = match.method_equals(ESPHOME_F("turn_off"));
      if (!is_on && !is_off) {
        request->send(404);
        return;
      }
      auto call = is_on ? obj->turn_on() : obj->turn_off();
 
      parse_num_param_(request, ESPHOME_F("speed_level"), call, &decltype(call)::set_speed);
 
      if (request->hasArg(ESPHOME_F("oscillation"))) {
        auto speed = request->arg(ESPHOME_F("oscillation"));
        auto val = parse_on_off(speed.c_str());
        switch (val) {
          case PARSE_ON:
            call.set_oscillating(true);
            break;
          case PARSE_OFF:
            call.set_oscillating(false);
            break;
          case PARSE_TOGGLE:
            call.set_oscillating(!obj->oscillating);
            break;
          case PARSE_NONE:
            request->send(404);
            return;
        }
      }
      DEFER_ACTION(call, call.perform());
      request->send(200);
    }
    return;
  }
  request->send(404);
}
void WebServer::fan_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->fan_json_((fan::Fan *) (source), DETAIL_STATE, builder);
}
void WebServer::fan_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->fan_json_((fan::Fan *) (source), DETAIL_ALL, builder);
}
void WebServer::fan_json_(fan::Fan *obj, JsonDetail start_config, json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  set_json_icon_state_value(root, obj, "fan", obj->state ? "ON" : "OFF", obj->state, start_config);
  const auto traits = obj->get_traits();
  if (traits.supports_speed()) {
    root[ESPHOME_F("speed_level")] = obj->speed;
    root[ESPHOME_F("speed_count")] = traits.supported_speed_count();
  }
  if (obj->get_traits().supports_oscillation())
    root[ESPHOME_F("oscillation")] = obj->oscillating;
  if (start_config == DETAIL_ALL) {
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_LIGHT
void WebServer::on_light_update(light::LightState *obj) { this->send_state_event_(obj, light_state_json_generator); }
void WebServer::handle_light_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (light::LightState *obj : App.get_lights()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->light_json_(obj, detail, builder);
      send_json(request, builder);
    } else if (match.method_equals(ESPHOME_F("toggle"))) {
      DEFER_ACTION(obj, obj->toggle().perform());
      request->send(200);
    } else {
      bool is_on = match.method_equals(ESPHOME_F("turn_on"));
      bool is_off = match.method_equals(ESPHOME_F("turn_off"));
      if (!is_on && !is_off) {
        request->send(404);
        return;
      }
      auto call = is_on ? obj->turn_on() : obj->turn_off();
 
      if (is_on) {
        // Parse color parameters
        parse_light_param_(request, ESPHOME_F("brightness"), call, &decltype(call)::set_brightness, 255.0f);
        parse_light_param_(request, ESPHOME_F("r"), call, &decltype(call)::set_red, 255.0f);
        parse_light_param_(request, ESPHOME_F("g"), call, &decltype(call)::set_green, 255.0f);
        parse_light_param_(request, ESPHOME_F("b"), call, &decltype(call)::set_blue, 255.0f);
        parse_light_param_(request, ESPHOME_F("white_value"), call, &decltype(call)::set_white, 255.0f);
        parse_light_param_(request, ESPHOME_F("color_temp"), call, &decltype(call)::set_color_temperature);
 
        // Parse timing parameters
        parse_light_param_uint_(request, ESPHOME_F("flash"), call, &decltype(call)::set_flash_length, 1000);
      }
      parse_light_param_uint_(request, ESPHOME_F("transition"), call, &decltype(call)::set_transition_length, 1000);
 
      if (is_on) {
        parse_cstr_param_(
            request, ESPHOME_F("effect"), call,
            static_cast<light::LightCall &(light::LightCall::*)(const char *, size_t)>(&decltype(call)::set_effect));
      }
 
      DEFER_ACTION(call, call.perform());
      request->send(200);
    }
    return;
  }
  request->send(404);
}
void WebServer::light_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->light_json_((light::LightState *) (source), DETAIL_STATE, builder);
}
void WebServer::light_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->light_json_((light::LightState *) (source), DETAIL_ALL, builder);
}
void WebServer::light_json_(light::LightState *obj, JsonDetail start_config, json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  set_json_value(root, obj, "light", obj->get_reported_values().is_on() ? "ON" : "OFF", start_config);
 
  light::LightJSONSchema::dump_json(*obj, root);
  if (start_config == DETAIL_ALL) {
    JsonArray opt = root[ESPHOME_F("effects")].to<JsonArray>();
    opt.add(linked("None"));
    for (auto const &option : obj->get_effects()) {
      opt.add(linked(option->get_name()));
    }
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_COVER
void WebServer::on_cover_update(cover::Cover *obj) { this->send_state_event_(obj, cover_state_json_generator); }
void WebServer::handle_cover_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (cover::Cover *obj : App.get_covers()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->cover_json_(obj, detail, builder);
      send_json(request, builder);
      return;
    }
 
    auto call = obj->make_call();
 
    static constexpr ActionEntry<cover::CoverCall> ACTIONS[] PROGMEM = {
        {"open", &cover::CoverCall::set_command_open},     {"close", &cover::CoverCall::set_command_close},
        {"stop", &cover::CoverCall::set_command_stop},     {"stop_tilt", &cover::CoverCall::set_command_stop_tilt},
        {"toggle", &cover::CoverCall::set_command_toggle},
    };
 
    if (!run_action(match, call, ACTIONS) && !match.method_equals(ESPHOME_F("set"))) {
      request->send(404);
      return;
    }
 
    auto traits = obj->get_traits();
    if ((request->hasArg(ESPHOME_F("position")) && !traits.get_supports_position()) ||
        (request->hasArg(ESPHOME_F("tilt")) && !traits.get_supports_tilt())) {
      request->send(409);
      return;
    }
 
    parse_num_param_(request, ESPHOME_F("position"), call, &decltype(call)::set_position);
    parse_num_param_(request, ESPHOME_F("tilt"), call, &decltype(call)::set_tilt);
 
    DEFER_ACTION(call, call.perform());
    request->send(200);
    return;
  }
  request->send(404);
}
void WebServer::cover_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->cover_json_((cover::Cover *) (source), DETAIL_STATE, builder);
}
void WebServer::cover_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->cover_json_((cover::Cover *) (source), DETAIL_ALL, builder);
}
void WebServer::cover_json_(cover::Cover *obj, JsonDetail start_config, json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  set_json_icon_state_value(root, obj, "cover", linked(obj->is_fully_closed() ? "CLOSED" : "OPEN"), obj->position,
                            start_config);
  root[ESPHOME_F("current_operation")] = json_state_str(cover::cover_operation_to_str(obj->current_operation));
 
  if (obj->get_traits().get_supports_position())
    root[ESPHOME_F("position")] = obj->position;
  if (obj->get_traits().get_supports_tilt())
    root[ESPHOME_F("tilt")] = obj->tilt;
  if (start_config == DETAIL_ALL) {
    root[ESPHOME_F("assumed_state")] = obj->get_traits().get_is_assumed_state();
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_NUMBER
void WebServer::on_number_update(number::Number *obj) { this->send_state_event_(obj, number_state_json_generator); }
void WebServer::handle_number_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (auto *obj : App.get_numbers()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->number_json_(obj, detail, builder);
      send_json(request, builder);
      return;
    }
    if (!match.method_equals(ESPHOME_F("set"))) {
      request->send(404);
      return;
    }
 
    auto call = obj->make_call();
    parse_num_param_(request, ESPHOME_F("value"), call, &decltype(call)::set_value);
 
    DEFER_ACTION(call, call.perform());
    request->send(200);
    return;
  }
  request->send(404);
}
 
void WebServer::number_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  auto *obj = (number::Number *) (source);
  web_server->number_json_(obj, DETAIL_STATE, builder);
}
void WebServer::number_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  auto *obj = (number::Number *) (source);
  web_server->number_json_(obj, DETAIL_ALL, builder);
}
void WebServer::number_json_(number::Number *obj, JsonDetail start_config, json::JsonBuilder &builder) {
  JsonObject root = builder.root();
  const float value = obj->has_state() ? obj->state : NAN;
 
  const auto uom_ref = obj->get_unit_of_measurement_ref();
  const int8_t accuracy = step_to_accuracy_decimals(obj->traits.get_step());
 
  // Need two buffers: one for value, one for state with UOM
  char val_buf[VALUE_ACCURACY_MAX_LEN];
  char state_buf[VALUE_ACCURACY_MAX_LEN];
  JsonString val_str = linked("NaN");
  JsonString state_str = linked("NA");
  if (!std::isnan(value)) {
    value_accuracy_to_buf(val_buf, value, accuracy);
    value_accuracy_with_uom_to_buf(state_buf, value, accuracy, uom_ref);
    val_str = JsonString(val_buf);
    state_str = JsonString(state_buf);
  }
  set_json_icon_state_value(root, obj, "number", state_str, val_str, start_config);
  if (start_config == DETAIL_ALL) {
    // ArduinoJson copies the string immediately, so we can reuse val_buf
    root[ESPHOME_F("min_value")] = (value_accuracy_to_buf(val_buf, obj->traits.get_min_value(), accuracy), val_buf);
    root[ESPHOME_F("max_value")] = (value_accuracy_to_buf(val_buf, obj->traits.get_max_value(), accuracy), val_buf);
    root[ESPHOME_F("step")] = (value_accuracy_to_buf(val_buf, obj->traits.get_step(), accuracy), val_buf);
    root[ESPHOME_F("mode")] = (int) obj->traits.get_mode();
    if (!uom_ref.empty())
      root[ESPHOME_F("uom")] = linked(uom_ref);
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_DATETIME_DATE
void WebServer::on_date_update(datetime::DateEntity *obj) { this->send_state_event_(obj, date_state_json_generator); }
void WebServer::handle_date_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (auto *obj : App.get_dates()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->date_json_(obj, detail, builder);
      send_json(request, builder);
      return;
    }
    if (!match.method_equals(ESPHOME_F("set"))) {
      request->send(404);
      return;
    }
 
    auto call = obj->make_call();
 
    const auto &value = request->arg(ESPHOME_F("value"));
    // Arduino String has isEmpty() not empty(), use length() for cross-platform compatibility
    if (value.length() == 0) {  // NOLINT(readability-container-size-empty)
      request->send(409);
      return;
    }
    call.set_date(value.c_str(), value.length());
 
    DEFER_ACTION(call, call.perform());
    request->send(200);
    return;
  }
  request->send(404);
}
 
void WebServer::date_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->date_json_((datetime::DateEntity *) (source), DETAIL_STATE, builder);
}
void WebServer::date_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->date_json_((datetime::DateEntity *) (source), DETAIL_ALL, builder);
}
void WebServer::date_json_(datetime::DateEntity *obj, JsonDetail start_config, json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  // Format: YYYY-MM-DD (max 10 chars + null)
  char value[12];
  buf_append_printf(value, sizeof(value), 0, "%d-%02d-%02d", obj->year, obj->month, obj->day);
  set_json_icon_state_value<const char *, const char *>(root, obj, "date", value, value, start_config);
  if (start_config == DETAIL_ALL) {
    this->add_sorting_info_(root, obj);
  }
}
#endif  // USE_DATETIME_DATE
 
#ifdef USE_DATETIME_TIME
void WebServer::on_time_update(datetime::TimeEntity *obj) { this->send_state_event_(obj, time_state_json_generator); }
void WebServer::handle_time_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (auto *obj : App.get_times()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->time_json_(obj, detail, builder);
      send_json(request, builder);
      return;
    }
    if (!match.method_equals(ESPHOME_F("set"))) {
      request->send(404);
      return;
    }
 
    auto call = obj->make_call();
 
    const auto &value = request->arg(ESPHOME_F("value"));
    // Arduino String has isEmpty() not empty(), use length() for cross-platform compatibility
    if (value.length() == 0) {  // NOLINT(readability-container-size-empty)
      request->send(409);
      return;
    }
    call.set_time(value.c_str(), value.length());
 
    DEFER_ACTION(call, call.perform());
    request->send(200);
    return;
  }
  request->send(404);
}
void WebServer::time_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->time_json_((datetime::TimeEntity *) (source), DETAIL_STATE, builder);
}
void WebServer::time_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->time_json_((datetime::TimeEntity *) (source), DETAIL_ALL, builder);
}
void WebServer::time_json_(datetime::TimeEntity *obj, JsonDetail start_config, json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  // Format: HH:MM:SS (8 chars + null)
  char value[12];
  buf_append_printf(value, sizeof(value), 0, "%02d:%02d:%02d", obj->hour, obj->minute, obj->second);
  set_json_icon_state_value<const char *, const char *>(root, obj, "time", value, value, start_config);
  if (start_config == DETAIL_ALL) {
    this->add_sorting_info_(root, obj);
  }
}
#endif  // USE_DATETIME_TIME
 
#ifdef USE_DATETIME_DATETIME
void WebServer::on_datetime_update(datetime::DateTimeEntity *obj) {
  this->send_state_event_(obj, datetime_state_json_generator);
}
void WebServer::handle_datetime_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (auto *obj : App.get_datetimes()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->datetime_json_(obj, detail, builder);
      send_json(request, builder);
      return;
    }
    if (!match.method_equals(ESPHOME_F("set"))) {
      request->send(404);
      return;
    }
 
    auto call = obj->make_call();
 
    const auto &value = request->arg(ESPHOME_F("value"));
    // Arduino String has isEmpty() not empty(), use length() for cross-platform compatibility
    if (value.length() == 0) {  // NOLINT(readability-container-size-empty)
      request->send(409);
      return;
    }
    call.set_datetime(value.c_str(), value.length());
 
    DEFER_ACTION(call, call.perform());
    request->send(200);
    return;
  }
  request->send(404);
}
void WebServer::datetime_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->datetime_json_((datetime::DateTimeEntity *) (source), DETAIL_STATE, builder);
}
void WebServer::datetime_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->datetime_json_((datetime::DateTimeEntity *) (source), DETAIL_ALL, builder);
}
void WebServer::datetime_json_(datetime::DateTimeEntity *obj, JsonDetail start_config, json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  // Format: YYYY-MM-DD HH:MM:SS (max 19 chars + null)
  char value[24];
  buf_append_printf(value, sizeof(value), 0, "%d-%02d-%02d %02d:%02d:%02d", obj->year, obj->month, obj->day, obj->hour,
                    obj->minute, obj->second);
  set_json_icon_state_value<const char *, const char *>(root, obj, "datetime", value, value, start_config);
  if (start_config == DETAIL_ALL) {
    this->add_sorting_info_(root, obj);
  }
}
#endif  // USE_DATETIME_DATETIME
 
#ifdef USE_TEXT
void WebServer::on_text_update(text::Text *obj) { this->send_state_event_(obj, text_state_json_generator); }
void WebServer::handle_text_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (auto *obj : App.get_texts()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->text_json_(obj, obj->state, detail, builder);
      send_json(request, builder);
      return;
    }
    if (!match.method_equals(ESPHOME_F("set"))) {
      request->send(404);
      return;
    }
 
    auto call = obj->make_call();
    parse_cstr_param_(
        request, ESPHOME_F("value"), call,
        static_cast<text::TextCall &(text::TextCall::*)(const char *, size_t)>(&decltype(call)::set_value));
 
    DEFER_ACTION(call, call.perform());
    request->send(200);
    return;
  }
  request->send(404);
}
 
void WebServer::text_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->text_json_((text::Text *) (source), ((text::Text *) (source))->state, DETAIL_STATE, builder);
}
void WebServer::text_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->text_json_((text::Text *) (source), ((text::Text *) (source))->state, DETAIL_ALL, builder);
}
void WebServer::text_json_(text::Text *obj, const std::string &value, JsonDetail start_config,
                           json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  // Not linked: the main loop can rewrite the state before the document is serialized
  const JsonString copied_value(value.c_str(), value.size());
  // A password entity shows the mask and prefills the input with nothing, so the secret never
  // reaches the JSON and the mask cannot be written back as the value
  const bool password = obj->traits.get_mode() == text::TextMode::TEXT_MODE_PASSWORD;
  set_json_icon_state_value(root, obj, "text", password ? linked("********") : copied_value,
                            password ? linked("") : copied_value, start_config);
  root[ESPHOME_F("min_length")] = obj->traits.get_min_length();
  root[ESPHOME_F("max_length")] = obj->traits.get_max_length();
  root[ESPHOME_F("pattern")] = linked(obj->traits.get_pattern_c_str());
  if (start_config == DETAIL_ALL) {
    root[ESPHOME_F("mode")] = (int) obj->traits.get_mode();
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_SELECT
void WebServer::on_select_update(select::Select *obj) { this->send_state_event_(obj, select_state_json_generator); }
void WebServer::handle_select_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (auto *obj : App.get_selects()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->select_json_(obj, obj->has_state() ? obj->current_option() : StringRef(), detail, builder);
      send_json(request, builder);
      return;
    }
 
    if (!match.method_equals(ESPHOME_F("set"))) {
      request->send(404);
      return;
    }
 
    auto call = obj->make_call();
    parse_cstr_param_(
        request, ESPHOME_F("option"), call,
        static_cast<select::SelectCall &(select::SelectCall::*)(const char *, size_t)>(&decltype(call)::set_option));
 
    DEFER_ACTION(call, call.perform());
    request->send(200);
    return;
  }
  request->send(404);
}
void WebServer::select_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  auto *obj = (select::Select *) (source);
  web_server->select_json_(obj, obj->has_state() ? obj->current_option() : StringRef(), DETAIL_STATE, builder);
}
void WebServer::select_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  auto *obj = (select::Select *) (source);
  web_server->select_json_(obj, obj->has_state() ? obj->current_option() : StringRef(), DETAIL_ALL, builder);
}
void WebServer::select_json_(select::Select *obj, StringRef value, JsonDetail start_config,
                             json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  const JsonString state = linked(value);
  set_json_icon_state_value(root, obj, "select", state, state, start_config);
  if (start_config == DETAIL_ALL) {
    JsonArray opt = root[ESPHOME_F("option")].to<JsonArray>();
    for (auto &option : obj->traits.get_options()) {
      opt.add(linked(option));
    }
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_CLIMATE
void WebServer::on_climate_update(climate::Climate *obj) { this->send_state_event_(obj, climate_state_json_generator); }
void WebServer::handle_climate_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (auto *obj : App.get_climates()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->climate_json_(obj, detail, builder);
      send_json(request, builder);
      return;
    }
 
    if (!match.method_equals(ESPHOME_F("set"))) {
      request->send(404);
      return;
    }
 
    auto call = obj->make_call();
 
    // Parse string mode parameters
    parse_cstr_param_(
        request, ESPHOME_F("mode"), call,
        static_cast<climate::ClimateCall &(climate::ClimateCall::*)(const char *, size_t)>(&decltype(call)::set_mode));
    parse_cstr_param_(request, ESPHOME_F("fan_mode"), call,
                      static_cast<climate::ClimateCall &(climate::ClimateCall::*)(const char *, size_t)>(
                          &decltype(call)::set_fan_mode));
    parse_cstr_param_(request, ESPHOME_F("swing_mode"), call,
                      static_cast<climate::ClimateCall &(climate::ClimateCall::*)(const char *, size_t)>(
                          &decltype(call)::set_swing_mode));
    parse_cstr_param_(request, ESPHOME_F("preset"), call,
                      static_cast<climate::ClimateCall &(climate::ClimateCall::*)(const char *, size_t)>(
                          &decltype(call)::set_preset));
 
    // Parse temperature parameters
    // static_cast needed to disambiguate overloaded setters (float vs optional<float>)
    using ClimateCall = decltype(call);
    parse_num_param_(request, ESPHOME_F("target_temperature_high"), call,
                     static_cast<ClimateCall &(ClimateCall::*)(float)>(&ClimateCall::set_target_temperature_high));
    parse_num_param_(request, ESPHOME_F("target_temperature_low"), call,
                     static_cast<ClimateCall &(ClimateCall::*)(float)>(&ClimateCall::set_target_temperature_low));
    parse_num_param_(request, ESPHOME_F("target_temperature"), call,
                     static_cast<ClimateCall &(ClimateCall::*)(float)>(&ClimateCall::set_target_temperature));
 
    DEFER_ACTION(call, call.perform());
    request->send(200);
    return;
  }
  request->send(404);
}
void WebServer::climate_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  // NOLINTNEXTLINE(clang-analyzer-cplusplus.NewDeleteLeaks) false positive with ArduinoJson
  web_server->climate_json_((climate::Climate *) (source), DETAIL_STATE, builder);
}
void WebServer::climate_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  // NOLINTNEXTLINE(clang-analyzer-cplusplus.NewDeleteLeaks) false positive with ArduinoJson
  web_server->climate_json_((climate::Climate *) (source), DETAIL_ALL, builder);
}
void WebServer::climate_json_(climate::Climate *obj, JsonDetail start_config, json::JsonBuilder &builder) {
  // NOLINTBEGIN(clang-analyzer-cplusplus.NewDeleteLeaks) false positive with ArduinoJson
  JsonObject root = builder.root();
  set_json_id(root, obj, "climate", start_config);
  const auto traits = obj->get_traits();
  int8_t target_accuracy = traits.get_target_temperature_accuracy_decimals();
  int8_t current_accuracy = traits.get_current_temperature_accuracy_decimals();
  char temp_buf[VALUE_ACCURACY_MAX_LEN];
 
  if (start_config == DETAIL_ALL) {
    JsonArray opt = root[ESPHOME_F("modes")].to<JsonArray>();
    for (climate::ClimateMode m : traits.get_supported_modes())
      opt.add(json_state_str(climate::climate_mode_to_string(m)));
    if (traits.get_supports_fan_modes()) {
      JsonArray opt = root[ESPHOME_F("fan_modes")].to<JsonArray>();
      for (climate::ClimateFanMode m : traits.get_supported_fan_modes())
        opt.add(json_state_str(climate::climate_fan_mode_to_string(m)));
    }
 
    if (!traits.get_supported_custom_fan_modes().empty()) {
      JsonArray opt = root[ESPHOME_F("custom_fan_modes")].to<JsonArray>();
      for (auto const &custom_fan_mode : traits.get_supported_custom_fan_modes())
        opt.add(linked(custom_fan_mode));
    }
    if (traits.get_supports_swing_modes()) {
      JsonArray opt = root[ESPHOME_F("swing_modes")].to<JsonArray>();
      for (auto swing_mode : traits.get_supported_swing_modes())
        opt.add(json_state_str(climate::climate_swing_mode_to_string(swing_mode)));
    }
    if (traits.get_supports_presets()) {
      JsonArray opt = root[ESPHOME_F("presets")].to<JsonArray>();
      for (climate::ClimatePreset m : traits.get_supported_presets())
        opt.add(json_state_str(climate::climate_preset_to_string(m)));
    }
    if (!traits.get_supported_custom_presets().empty()) {
      JsonArray opt = root[ESPHOME_F("custom_presets")].to<JsonArray>();
      for (auto const &custom_preset : traits.get_supported_custom_presets())
        opt.add(linked(custom_preset));
    }
    root[ESPHOME_F("max_temp")] =
        (value_accuracy_to_buf(temp_buf, traits.get_visual_max_temperature(), target_accuracy), temp_buf);
    root[ESPHOME_F("min_temp")] =
        (value_accuracy_to_buf(temp_buf, traits.get_visual_min_temperature(), target_accuracy), temp_buf);
    root[ESPHOME_F("step")] = traits.get_visual_target_temperature_step();
    root[ESPHOME_F("temperature_unit")] = static_cast<uint8_t>(traits.get_temperature_unit());
    this->add_sorting_info_(root, obj);
  }
 
  bool has_state = false;
  root[ESPHOME_F("mode")] = json_state_str(climate_mode_to_string(obj->mode));
  if (traits.has_feature_flags(climate::CLIMATE_SUPPORTS_ACTION)) {
    root[ESPHOME_F("action")] = json_state_str(climate_action_to_string(obj->action));
    root[ESPHOME_F("state")] = root[ESPHOME_F("action")];
    has_state = true;
  }
  if (traits.get_supports_fan_modes() && obj->fan_mode.has_value()) {
    root[ESPHOME_F("fan_mode")] = json_state_str(climate_fan_mode_to_string(obj->fan_mode.value()));
  }
  if (!traits.get_supported_custom_fan_modes().empty() && obj->has_custom_fan_mode()) {
    root[ESPHOME_F("custom_fan_mode")] = linked(obj->get_custom_fan_mode());
  }
  if (traits.get_supports_presets() && obj->preset.has_value()) {
    root[ESPHOME_F("preset")] = json_state_str(climate_preset_to_string(obj->preset.value()));
  }
  if (!traits.get_supported_custom_presets().empty() && obj->has_custom_preset()) {
    root[ESPHOME_F("custom_preset")] = linked(obj->get_custom_preset());
  }
  if (traits.get_supports_swing_modes()) {
    root[ESPHOME_F("swing_mode")] = json_state_str(climate_swing_mode_to_string(obj->swing_mode));
  }
  if (traits.has_feature_flags(climate::CLIMATE_SUPPORTS_CURRENT_TEMPERATURE)) {
    root[ESPHOME_F("current_temperature")] =
        std::isnan(obj->current_temperature)
            ? "NA"
            : (value_accuracy_to_buf(temp_buf, obj->current_temperature, current_accuracy), temp_buf);
  }
  if (traits.has_feature_flags(climate::CLIMATE_SUPPORTS_CURRENT_HUMIDITY)) {
    root[ESPHOME_F("current_humidity")] = std::isnan(obj->current_humidity)
                                              ? "NA"
                                              : (value_accuracy_to_buf(temp_buf, obj->current_humidity, 0), temp_buf);
  }
  if (traits.has_feature_flags(climate::CLIMATE_SUPPORTS_TWO_POINT_TARGET_TEMPERATURE |
                               climate::CLIMATE_REQUIRES_TWO_POINT_TARGET_TEMPERATURE)) {
    root[ESPHOME_F("target_temperature_low")] =
        (value_accuracy_to_buf(temp_buf, obj->target_temperature_low, target_accuracy), temp_buf);
    root[ESPHOME_F("target_temperature_high")] =
        (value_accuracy_to_buf(temp_buf, obj->target_temperature_high, target_accuracy), temp_buf);
    if (!has_state) {
      root[ESPHOME_F("state")] =
          (value_accuracy_to_buf(temp_buf, (obj->target_temperature_high + obj->target_temperature_low) / 2.0f,
                                 target_accuracy),
           temp_buf);
    }
  } else {
    root[ESPHOME_F("target_temperature")] =
        (value_accuracy_to_buf(temp_buf, obj->target_temperature, target_accuracy), temp_buf);
    if (!has_state)
      root[ESPHOME_F("state")] = root[ESPHOME_F("target_temperature")];
  }
 
  // NOLINTEND(clang-analyzer-cplusplus.NewDeleteLeaks)
}
#endif
 
#ifdef USE_LOCK
enum LockAction : uint8_t { LOCK_ACTION_NONE, LOCK_ACTION_LOCK, LOCK_ACTION_UNLOCK, LOCK_ACTION_OPEN };
 
static void execute_lock_action(lock::Lock *obj, LockAction action) {
  switch (action) {
    case LOCK_ACTION_LOCK:
      obj->lock();
      break;
    case LOCK_ACTION_UNLOCK:
      obj->unlock();
      break;
    case LOCK_ACTION_OPEN:
      obj->open();
      break;
    default:
      break;
  }
}
 
void WebServer::on_lock_update(lock::Lock *obj) { this->send_state_event_(obj, lock_state_json_generator); }
void WebServer::handle_lock_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (lock::Lock *obj : App.get_locks()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->lock_json_(obj, obj->state, detail, builder);
      send_json(request, builder);
      return;
    }
 
    LockAction action = LOCK_ACTION_NONE;
 
    if (match.method_equals(ESPHOME_F("lock"))) {
      action = LOCK_ACTION_LOCK;
    } else if (match.method_equals(ESPHOME_F("unlock"))) {
      action = LOCK_ACTION_UNLOCK;
    } else if (match.method_equals(ESPHOME_F("open"))) {
      action = LOCK_ACTION_OPEN;
    }
 
    if (action != LOCK_ACTION_NONE) {
      this->defer([obj, action]() { execute_lock_action(obj, action); });
      request->send(200);
    } else {
      request->send(404);
    }
    return;
  }
  request->send(404);
}
void WebServer::lock_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->lock_json_((lock::Lock *) (source), ((lock::Lock *) (source))->state, DETAIL_STATE, builder);
}
void WebServer::lock_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->lock_json_((lock::Lock *) (source), ((lock::Lock *) (source))->state, DETAIL_ALL, builder);
}
void WebServer::lock_json_(lock::Lock *obj, lock::LockState value, JsonDetail start_config,
                           json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  set_json_icon_state_value(root, obj, "lock", json_state_str(lock::lock_state_to_string(value)), value, start_config);
  if (start_config == DETAIL_ALL) {
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_VALVE
void WebServer::on_valve_update(valve::Valve *obj) { this->send_state_event_(obj, valve_state_json_generator); }
void WebServer::handle_valve_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (valve::Valve *obj : App.get_valves()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->valve_json_(obj, detail, builder);
      send_json(request, builder);
      return;
    }
 
    auto call = obj->make_call();
 
    static constexpr ActionEntry<valve::ValveCall> ACTIONS[] PROGMEM = {
        {"open", &valve::ValveCall::set_command_open},
        {"close", &valve::ValveCall::set_command_close},
        {"stop", &valve::ValveCall::set_command_stop},
        {"toggle", &valve::ValveCall::set_command_toggle},
    };
 
    if (!run_action(match, call, ACTIONS) && !match.method_equals(ESPHOME_F("set"))) {
      request->send(404);
      return;
    }
 
    auto traits = obj->get_traits();
    if (request->hasArg(ESPHOME_F("position")) && !traits.get_supports_position()) {
      request->send(409);
      return;
    }
 
    parse_num_param_(request, ESPHOME_F("position"), call, &decltype(call)::set_position);
 
    DEFER_ACTION(call, call.perform());
    request->send(200);
    return;
  }
  request->send(404);
}
void WebServer::valve_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->valve_json_((valve::Valve *) (source), DETAIL_STATE, builder);
}
void WebServer::valve_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->valve_json_((valve::Valve *) (source), DETAIL_ALL, builder);
}
void WebServer::valve_json_(valve::Valve *obj, JsonDetail start_config, json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  set_json_icon_state_value(root, obj, "valve", linked(obj->is_fully_closed() ? "CLOSED" : "OPEN"), obj->position,
                            start_config);
  root[ESPHOME_F("current_operation")] = json_state_str(valve::valve_operation_to_str(obj->current_operation));
 
  if (obj->get_traits().get_supports_position())
    root[ESPHOME_F("position")] = obj->position;
  if (start_config == DETAIL_ALL) {
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_ALARM_CONTROL_PANEL
void WebServer::on_alarm_control_panel_update(alarm_control_panel::AlarmControlPanel *obj) {
  this->send_state_event_(obj, alarm_control_panel_state_json_generator);
}
void WebServer::handle_alarm_control_panel_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (alarm_control_panel::AlarmControlPanel *obj : App.get_alarm_control_panels()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->alarm_control_panel_json_(obj, obj->get_state(), detail, builder);
      send_json(request, builder);
      return;
    }
 
    auto call = obj->make_call();
    parse_cstr_param_(
        request, ESPHOME_F("code"), call,
        static_cast<alarm_control_panel::AlarmControlPanelCall &(alarm_control_panel::AlarmControlPanelCall::*)(
            const char *, size_t)>(&decltype(call)::set_code));
 
    static constexpr ActionEntry<alarm_control_panel::AlarmControlPanelCall> ACTIONS[] PROGMEM = {
        {"disarm", &alarm_control_panel::AlarmControlPanelCall::disarm},
        {"arm_away", &alarm_control_panel::AlarmControlPanelCall::arm_away},
        {"arm_home", &alarm_control_panel::AlarmControlPanelCall::arm_home},
        {"arm_night", &alarm_control_panel::AlarmControlPanelCall::arm_night},
        {"arm_vacation", &alarm_control_panel::AlarmControlPanelCall::arm_vacation},
    };
 
    if (!run_action(match, call, ACTIONS)) {
      request->send(404);
      return;
    }
 
    DEFER_ACTION(call, call.perform());
    request->send(200);
    return;
  }
  request->send(404);
}
void WebServer::alarm_control_panel_state_json_generator(WebServer *web_server, void *source,
                                                         json::JsonBuilder &builder) {
  web_server->alarm_control_panel_json_((alarm_control_panel::AlarmControlPanel *) (source),
                                        ((alarm_control_panel::AlarmControlPanel *) (source))->get_state(),
                                        DETAIL_STATE, builder);
}
void WebServer::alarm_control_panel_all_json_generator(WebServer *web_server, void *source,
                                                       json::JsonBuilder &builder) {
  web_server->alarm_control_panel_json_((alarm_control_panel::AlarmControlPanel *) (source),
                                        ((alarm_control_panel::AlarmControlPanel *) (source))->get_state(), DETAIL_ALL,
                                        builder);
}
void WebServer::alarm_control_panel_json_(alarm_control_panel::AlarmControlPanel *obj,
                                          alarm_control_panel::AlarmControlPanelState value, JsonDetail start_config,
                                          json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  set_json_icon_state_value(root, obj, "alarm_control_panel",
                            json_state_str(alarm_control_panel_state_to_string(value)), value, start_config);
  if (start_config == DETAIL_ALL) {
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_WATER_HEATER
void WebServer::on_water_heater_update(water_heater::WaterHeater *obj) {
  this->send_state_event_(obj, water_heater_state_json_generator);
}
void WebServer::handle_water_heater_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (water_heater::WaterHeater *obj : App.get_water_heaters()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->water_heater_json_(obj, detail, builder);
      send_json(request, builder);
      return;
    }
    if (!match.method_equals(ESPHOME_F("set"))) {
      request->send(404);
      return;
    }
    auto call = obj->make_call();
    // Use base class reference for template deduction (make_call returns WaterHeaterCallInternal)
    water_heater::WaterHeaterCall &base_call = call;
 
    // Parse mode parameter
    parse_cstr_param_(
        request, ESPHOME_F("mode"), base_call,
        static_cast<water_heater::WaterHeaterCall &(water_heater::WaterHeaterCall::*)(const char *, size_t)>(
            &water_heater::WaterHeaterCall::set_mode));
 
    // Parse temperature parameters
    parse_num_param_(request, ESPHOME_F("target_temperature"), base_call,
                     &water_heater::WaterHeaterCall::set_target_temperature);
    parse_num_param_(request, ESPHOME_F("target_temperature_low"), base_call,
                     &water_heater::WaterHeaterCall::set_target_temperature_low);
    parse_num_param_(request, ESPHOME_F("target_temperature_high"), base_call,
                     &water_heater::WaterHeaterCall::set_target_temperature_high);
 
    // Parse away mode parameter
    parse_bool_param_(request, ESPHOME_F("away"), base_call, &water_heater::WaterHeaterCall::set_away);
 
    // Parse on/off parameter
    parse_bool_param_(request, ESPHOME_F("is_on"), base_call, &water_heater::WaterHeaterCall::set_on);
 
    DEFER_ACTION(call, call.perform());
    request->send(200);
    return;
  }
  request->send(404);
}
 
void WebServer::water_heater_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  web_server->water_heater_json_(static_cast<water_heater::WaterHeater *>(source), DETAIL_STATE, builder);
}
void WebServer::water_heater_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  // NOLINTNEXTLINE(clang-analyzer-cplusplus.NewDeleteLeaks) false positive with ArduinoJson
  web_server->water_heater_json_(static_cast<water_heater::WaterHeater *>(source), DETAIL_ALL, builder);
}
void WebServer::water_heater_json_(water_heater::WaterHeater *obj, JsonDetail start_config,
                                   json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  const auto mode = obj->get_mode();
  set_json_icon_state_value(root, obj, "water_heater", json_state_str(water_heater::water_heater_mode_to_string(mode)),
                            mode, start_config);
 
  auto traits = obj->get_traits();
 
  if (start_config == DETAIL_ALL) {
    JsonArray modes = root[ESPHOME_F("modes")].to<JsonArray>();
    for (auto m : traits.get_supported_modes())
      modes.add(json_state_str(water_heater::water_heater_mode_to_string(m)));
    root[ESPHOME_F("min_temp")] = traits.get_min_temperature();
    root[ESPHOME_F("max_temp")] = traits.get_max_temperature();
    root[ESPHOME_F("step")] = traits.get_target_temperature_step();
    root[ESPHOME_F("temperature_unit")] = static_cast<uint8_t>(traits.get_temperature_unit());
    this->add_sorting_info_(root, obj);
  }
 
  if (traits.get_supports_current_temperature()) {
    float current = obj->get_current_temperature();
    if (!std::isnan(current))
      root[ESPHOME_F("current_temperature")] = current;
  }
 
  if (traits.get_supports_two_point_target_temperature()) {
    float low = obj->get_target_temperature_low();
    float high = obj->get_target_temperature_high();
    if (!std::isnan(low))
      root[ESPHOME_F("target_temperature_low")] = low;
    if (!std::isnan(high))
      root[ESPHOME_F("target_temperature_high")] = high;
  } else {
    float target = obj->get_target_temperature();
    if (!std::isnan(target))
      root[ESPHOME_F("target_temperature")] = target;
  }
 
  if (traits.get_supports_away_mode()) {
    root[ESPHOME_F("away")] = obj->is_away();
  }
 
  if (traits.has_feature_flags(water_heater::WATER_HEATER_SUPPORTS_ON_OFF)) {
    root[ESPHOME_F("is_on")] = obj->is_on();
  }
}
#endif
 
#ifdef USE_INFRARED
void WebServer::handle_infrared_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (infrared::Infrared *obj : App.get_infrareds()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->infrared_json_(obj, detail, builder);
      send_json(request, builder);
      return;
    }
    if (!match.method_equals(ESPHOME_F("transmit"))) {
      request->send(404);
      return;
    }
 
    // Only allow transmit if the device supports it
    if (!obj->has_transmitter()) {
      request->send(400, ESPHOME_F("text/plain"), ESPHOME_F("Device does not support transmission"));
      return;
    }
 
    // Parse parameters
    auto call = obj->make_call();
 
    // Parse carrier frequency (optional)
    {
      auto value = parse_number<uint32_t>(request->arg(ESPHOME_F("carrier_frequency")).c_str());
      if (value.has_value()) {
        call.set_carrier_frequency(*value);
      }
    }
 
    // Parse repeat count (optional, defaults to 1)
    {
      auto value = parse_number<uint32_t>(request->arg(ESPHOME_F("repeat_count")).c_str());
      if (value.has_value()) {
        call.set_repeat_count(*value);
      }
    }
 
    // Parse base64url-encoded raw timings (required)
    // Base64url is URL-safe: uses A-Za-z0-9-_ (no special characters needing escaping)
    const auto &data_arg = request->arg(ESPHOME_F("data"));
 
    // Validate base64url is not empty (also catches missing parameter since arg() returns empty string)
    // Arduino String has isEmpty() not empty(), use length() for cross-platform compatibility
    if (data_arg.length() == 0) {  // NOLINT(readability-container-size-empty)
      request->send(400, ESPHOME_F("text/plain"), ESPHOME_F("Missing or empty 'data' parameter"));
      return;
    }
 
    // Defer to main loop for thread safety. Move encoded string into lambda to ensure
    // it outlives the call - set_raw_timings_base64url stores a pointer, so the string
    // must remain valid until perform() completes.
    // ESP8266 also needs this because ESPAsyncWebServer callbacks run in "sys" context.
    this->defer([call, encoded = std::string(data_arg.c_str(), data_arg.length())]() mutable {
      call.set_raw_timings_base64url(encoded);
      call.perform();
    });
 
    request->send(200);
    return;
  }
  request->send(404);
}
 
void WebServer::infrared_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  // NOLINTNEXTLINE(clang-analyzer-cplusplus.NewDeleteLeaks) false positive with ArduinoJson
  web_server->infrared_json_(static_cast<infrared::Infrared *>(source), DETAIL_ALL, builder);
}
 
void WebServer::infrared_json_(infrared::Infrared *obj, JsonDetail start_config, json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  set_json_icon_state_value(root, obj, "infrared", "", 0, start_config);
 
  root[ESPHOME_F("supports_transmitter")] = obj->get_supports_transmitter();
  root[ESPHOME_F("supports_receiver")] = obj->get_supports_receiver();
 
  if (start_config == DETAIL_ALL) {
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_RADIO_FREQUENCY
void WebServer::handle_radio_frequency_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (radio_frequency::RadioFrequency *obj : App.get_radio_frequencies()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->radio_frequency_json_(obj, detail, builder);
      send_json(request, builder);
      return;
    }
    if (!match.method_equals(ESPHOME_F("transmit"))) {
      request->send(404);
      return;
    }
 
    // Only allow transmit if the device supports it
    if (!(obj->get_capability_flags() & radio_frequency::CAPABILITY_TRANSMITTER)) {
      request->send(400, ESPHOME_F("text/plain"), ESPHOME_F("Device does not support transmission"));
      return;
    }
 
    auto call = obj->make_call();
 
    // Parse carrier frequency (optional — overrides IC default)
    {
      auto value = parse_number<uint32_t>(request->arg(ESPHOME_F("frequency")).c_str());
      if (value.has_value()) {
        call.set_frequency(*value);
      }
    }
 
    // Parse repeat count (optional, defaults to 1)
    {
      auto value = parse_number<uint32_t>(request->arg(ESPHOME_F("repeat_count")).c_str());
      if (value.has_value()) {
        call.set_repeat_count(*value);
      }
    }
 
    // Parse base64url-encoded raw timings (required)
    // Base64url is URL-safe: uses A-Za-z0-9-_ (no special characters needing escaping)
    const auto &data_arg = request->arg(ESPHOME_F("data"));
 
    // Validate base64url is not empty (also catches missing parameter since arg() returns empty string)
    // Arduino String has isEmpty() not empty(), use length() for cross-platform compatibility
    if (data_arg.length() == 0) {  // NOLINT(readability-container-size-empty)
      request->send(400, ESPHOME_F("text/plain"), ESPHOME_F("Missing or empty 'data' parameter"));
      return;
    }
 
    // Defer to main loop for thread safety. Move encoded string into lambda to ensure
    // it outlives the call - set_raw_timings_base64url stores a pointer, so the string
    // must remain valid until perform() completes.
    // ESP8266 also needs this because ESPAsyncWebServer callbacks run in "sys" context.
    this->defer([call, encoded = std::string(data_arg.c_str(), data_arg.length())]() mutable {
      call.set_raw_timings_base64url(encoded);
      call.perform();
    });
 
    request->send(200);
    return;
  }
  request->send(404);
}
 
void WebServer::radio_frequency_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  // NOLINTNEXTLINE(clang-analyzer-cplusplus.NewDeleteLeaks) false positive with ArduinoJson
  web_server->radio_frequency_json_(static_cast<radio_frequency::RadioFrequency *>(source), DETAIL_ALL, builder);
}
 
void WebServer::radio_frequency_json_(radio_frequency::RadioFrequency *obj, JsonDetail start_config,
                                      json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  set_json_icon_state_value(root, obj, "radio_frequency", "", 0, start_config);
 
  const auto &traits = obj->get_traits();
  auto caps = obj->get_capability_flags();
 
  root[ESPHOME_F("supports_transmitter")] = bool(caps & radio_frequency::CAPABILITY_TRANSMITTER);
  root[ESPHOME_F("supports_receiver")] = bool(caps & radio_frequency::CAPABILITY_RECEIVER);
  if (traits.get_frequency_min_hz() != 0) {
    root[ESPHOME_F("frequency_min")] = traits.get_frequency_min_hz();
    root[ESPHOME_F("frequency_max")] = traits.get_frequency_max_hz();
  }
 
  if (start_config == DETAIL_ALL) {
    this->add_sorting_info_(root, obj);
  }
}
#endif
 
#ifdef USE_EVENT
void WebServer::on_event(event::Event *obj) { this->send_state_event_(obj, event_state_json_generator); }
 
void WebServer::handle_event_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (event::Event *obj : App.get_events()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    // Note: request->method() is always HTTP_GET here (canHandle ensures this)
    if (entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->event_json_(obj, StringRef(), detail, builder);
      send_json(request, builder);
      return;
    }
  }
  request->send(404);
}
 
static StringRef get_event_type(event::Event *event) { return event ? event->get_last_event_type() : StringRef(); }
 
void WebServer::event_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  auto *event = static_cast<event::Event *>(source);
  web_server->event_json_(event, get_event_type(event), DETAIL_STATE, builder);
}
// NOLINTBEGIN(clang-analyzer-cplusplus.NewDeleteLeaks) false positive with ArduinoJson
void WebServer::event_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  auto *event = static_cast<event::Event *>(source);
  web_server->event_json_(event, get_event_type(event), DETAIL_ALL, builder);
}
void WebServer::event_json_(event::Event *obj, StringRef event_type, JsonDetail start_config,
                            json::JsonBuilder &builder) {
  JsonObject root = builder.root();
 
  set_json_id(root, obj, "event", start_config);
  if (!event_type.empty()) {
    root[ESPHOME_F("event_type")] = linked(event_type);
  }
  if (start_config == DETAIL_ALL) {
    JsonArray event_types = root[ESPHOME_F("event_types")].to<JsonArray>();
    for (const char *event_type : obj->get_event_types()) {
      event_types.add(linked(event_type));
    }
    root[ESPHOME_F("device_class")] = linked(obj->get_device_class_progmem());
    this->add_sorting_info_(root, obj);
  }
}
// NOLINTEND(clang-analyzer-cplusplus.NewDeleteLeaks)
#endif
 
#ifdef USE_UPDATE
void WebServer::on_update(update::UpdateEntity *obj) { this->send_state_event_(obj, update_state_json_generator); }
void WebServer::handle_update_request(AsyncWebServerRequest *request, const UrlMatch &match) {
  for (update::UpdateEntity *obj : App.get_updates()) {
    auto entity_match = match.match_entity(obj);
    if (!entity_match.matched)
      continue;
 
    if (request->method() == HTTP_GET && entity_match.action_is_empty) {
      auto detail = get_request_detail(request);
      json::JsonBuilder builder;
      this->update_json_(obj, detail, builder);
      send_json(request, builder);
      return;
    }
 
    if (!match.method_equals(ESPHOME_F("install"))) {
      request->send(404);
      return;
    }
 
    DEFER_ACTION(obj, obj->perform());
    request->send(200);
    return;
  }
  request->send(404);
}
void WebServer::update_state_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  // NOLINTNEXTLINE(clang-analyzer-cplusplus.NewDeleteLeaks) false positive with ArduinoJson
  web_server->update_json_((update::UpdateEntity *) (source), DETAIL_STATE, builder);
}
void WebServer::update_all_json_generator(WebServer *web_server, void *source, json::JsonBuilder &builder) {
  // NOLINTNEXTLINE(clang-analyzer-cplusplus.NewDeleteLeaks) false positive with ArduinoJson
  web_server->update_json_((update::UpdateEntity *) (source), DETAIL_ALL, builder);
}
void WebServer::update_json_(update::UpdateEntity *obj, JsonDetail start_config, json::JsonBuilder &builder) {
  // NOLINTBEGIN(clang-analyzer-cplusplus.NewDeleteLeaks) false positive with ArduinoJson
  JsonObject root = builder.root();
 
  // Not linked: the main loop can rewrite update_info before the document is serialized
  const auto &info = obj->update_info;
  set_json_icon_state_value(root, obj, "update", json_state_str(update::update_state_to_string(obj->state)),
                            info.latest_version.c_str(), start_config);
  if (start_config == DETAIL_ALL) {
    root[ESPHOME_F("current_version")] = info.current_version;
    root[ESPHOME_F("title")] = info.title;
    // Truncate long changelogs, the full text is available via release_url
    constexpr size_t max_summary_len = 256;
    root[ESPHOME_F("summary")] = JsonString(info.summary.c_str(), std::min(info.summary.size(), max_summary_len));
    root[ESPHOME_F("release_url")] = info.release_url;
    this->add_sorting_info_(root, obj);
  }
 
  // NOLINTEND(clang-analyzer-cplusplus.NewDeleteLeaks)
}
#endif
 
bool WebServer::canHandle(AsyncWebServerRequest *request) const {
#ifdef USE_ESP32
  char url_buf[AsyncWebServerRequest::URL_BUF_SIZE];
  StringRef url = request->url_to(url_buf);
#else
  const auto &url = request->url();
#endif
  const auto method = request->method();
 
  // Static URL checks - use ESPHOME_F to keep strings in flash on ESP8266
  if (url == ESPHOME_F("/"))
    return true;
#if !defined(USE_ESP32) && defined(USE_ARDUINO)
  if (url == ESPHOME_F("/events"))
    return true;
#endif
#ifdef USE_WEBSERVER_CSS_INCLUDE
  if (url == ESPHOME_F("/0.css"))
    return true;
#endif
#ifdef USE_WEBSERVER_JS_INCLUDE
  if (url == ESPHOME_F("/0.js"))
    return true;
#endif
 
#ifdef USE_WEBSERVER_PRIVATE_NETWORK_ACCESS
  if (method == HTTP_OPTIONS && request->hasHeader(ESPHOME_F("Access-Control-Request-Private-Network")))
    return true;
#endif
 
  // Parse URL for component checks
  UrlMatch match = match_url(url.c_str(), url.length(), true);
  if (!match.valid)
    return false;
 
  // Common pattern check
  bool is_get = method == HTTP_GET;
  bool is_post = method == HTTP_POST;
  bool is_get_or_post = is_get || is_post;
 
  if (!is_get_or_post)
    return false;
 
  // Check GET-only domains - use ESPHOME_F to keep strings in flash on ESP8266
  if (is_get) {
#ifdef USE_SENSOR
    if (match.domain_equals(ESPHOME_F("sensor")))
      return true;
#endif
#ifdef USE_BINARY_SENSOR
    if (match.domain_equals(ESPHOME_F("binary_sensor")))
      return true;
#endif
#ifdef USE_TEXT_SENSOR
    if (match.domain_equals(ESPHOME_F("text_sensor")))
      return true;
#endif
#ifdef USE_EVENT
    if (match.domain_equals(ESPHOME_F("event")))
      return true;
#endif
  }
 
  // Check GET+POST domains
  if (is_get_or_post) {
#ifdef USE_SWITCH
    if (match.domain_equals(ESPHOME_F("switch")))
      return true;
#endif
#ifdef USE_BUTTON
    if (match.domain_equals(ESPHOME_F("button")))
      return true;
#endif
#ifdef USE_FAN
    if (match.domain_equals(ESPHOME_F("fan")))
      return true;
#endif
#ifdef USE_LIGHT
    if (match.domain_equals(ESPHOME_F("light")))
      return true;
#endif
#ifdef USE_COVER
    if (match.domain_equals(ESPHOME_F("cover")))
      return true;
#endif
#ifdef USE_NUMBER
    if (match.domain_equals(ESPHOME_F("number")))
      return true;
#endif
#ifdef USE_DATETIME_DATE
    if (match.domain_equals(ESPHOME_F("date")))
      return true;
#endif
#ifdef USE_DATETIME_TIME
    if (match.domain_equals(ESPHOME_F("time")))
      return true;
#endif
#ifdef USE_DATETIME_DATETIME
    if (match.domain_equals(ESPHOME_F("datetime")))
      return true;
#endif
#ifdef USE_TEXT
    if (match.domain_equals(ESPHOME_F("text")))
      return true;
#endif
#ifdef USE_SELECT
    if (match.domain_equals(ESPHOME_F("select")))
      return true;
#endif
#ifdef USE_CLIMATE
    if (match.domain_equals(ESPHOME_F("climate")))
      return true;
#endif
#ifdef USE_LOCK
    if (match.domain_equals(ESPHOME_F("lock")))
      return true;
#endif
#ifdef USE_VALVE
    if (match.domain_equals(ESPHOME_F("valve")))
      return true;
#endif
#ifdef USE_ALARM_CONTROL_PANEL
    if (match.domain_equals(ESPHOME_F("alarm_control_panel")))
      return true;
#endif
#ifdef USE_UPDATE
    if (match.domain_equals(ESPHOME_F("update")))
      return true;
#endif
#ifdef USE_WATER_HEATER
    if (match.domain_equals(ESPHOME_F("water_heater")))
      return true;
#endif
#ifdef USE_INFRARED
    if (match.domain_equals(ESPHOME_F("infrared")))
      return true;
#endif
#ifdef USE_RADIO_FREQUENCY
    if (match.domain_equals(ESPHOME_F("radio_frequency")))
      return true;
#endif
  }
 
  return false;
}
void WebServer::handleRequest(AsyncWebServerRequest *request) {
#ifdef USE_ESP32
  char url_buf[AsyncWebServerRequest::URL_BUF_SIZE];
  StringRef url = request->url_to(url_buf);
#else
  const auto &url = request->url();
#endif
 
  // Handle static routes first
  if (url == ESPHOME_F("/")) {
    this->handle_index_request(request);
    return;
  }
 
#ifdef USE_WEBSERVER_PRIVATE_NETWORK_ACCESS
  // Private Network Access preflight carries a cross-origin Origin by design; its handler does the
  // origin check itself, so let it run before the general enforcement below.
  if (request->method() == HTTP_OPTIONS && request->hasHeader(ESPHOME_F("Access-Control-Request-Private-Network"))) {
    this->handle_pna_cors_request(request);
    return;
  }
#endif
 
  // Reject cross-origin browser requests unless the origin is explicitly allowed.
  if (!this->is_request_origin_allowed_(request, get_request_header(request, "Origin"))) {
    request->send(403);
    return;
  }
 
#if !defined(USE_ESP32) && defined(USE_ARDUINO)
  if (url == ESPHOME_F("/events")) {
    this->events_.add_new_client(this, request);
    return;
  }
#endif
 
#ifdef USE_WEBSERVER_CSS_INCLUDE
  if (url == ESPHOME_F("/0.css")) {
    this->handle_css_request(request);
    return;
  }
#endif
 
#ifdef USE_WEBSERVER_JS_INCLUDE
  if (url == ESPHOME_F("/0.js")) {
    this->handle_js_request(request);
    return;
  }
#endif
 
  // Parse URL for component routing
  // Pass HTTP method to disambiguate 3-segment URLs (GET=sub-device state, POST=main device action)
  UrlMatch match = match_url(url.c_str(), url.length(), false, request->method() == HTTP_POST);
  match.include_internal = this->include_internal_;
 
  // Route to appropriate handler based on domain
  // NOLINTNEXTLINE(readability-simplify-boolean-expr)
  if (false) {  // Start chain for else-if macro pattern
  }
#ifdef USE_SENSOR
  else if (match.domain_equals(ESPHOME_F("sensor"))) {
    this->handle_sensor_request(request, match);
  }
#endif
#ifdef USE_SWITCH
  else if (match.domain_equals(ESPHOME_F("switch"))) {
    this->handle_switch_request(request, match);
  }
#endif
#ifdef USE_BUTTON
  else if (match.domain_equals(ESPHOME_F("button"))) {
    this->handle_button_request(request, match);
  }
#endif
#ifdef USE_BINARY_SENSOR
  else if (match.domain_equals(ESPHOME_F("binary_sensor"))) {
    this->handle_binary_sensor_request(request, match);
  }
#endif
#ifdef USE_FAN
  else if (match.domain_equals(ESPHOME_F("fan"))) {
    this->handle_fan_request(request, match);
  }
#endif
#ifdef USE_LIGHT
  else if (match.domain_equals(ESPHOME_F("light"))) {
    this->handle_light_request(request, match);
  }
#endif
#ifdef USE_TEXT_SENSOR
  else if (match.domain_equals(ESPHOME_F("text_sensor"))) {
    this->handle_text_sensor_request(request, match);
  }
#endif
#ifdef USE_COVER
  else if (match.domain_equals(ESPHOME_F("cover"))) {
    this->handle_cover_request(request, match);
  }
#endif
#ifdef USE_NUMBER
  else if (match.domain_equals(ESPHOME_F("number"))) {
    this->handle_number_request(request, match);
  }
#endif
#ifdef USE_DATETIME_DATE
  else if (match.domain_equals(ESPHOME_F("date"))) {
    this->handle_date_request(request, match);
  }
#endif
#ifdef USE_DATETIME_TIME
  else if (match.domain_equals(ESPHOME_F("time"))) {
    this->handle_time_request(request, match);
  }
#endif
#ifdef USE_DATETIME_DATETIME
  else if (match.domain_equals(ESPHOME_F("datetime"))) {
    this->handle_datetime_request(request, match);
  }
#endif
#ifdef USE_TEXT
  else if (match.domain_equals(ESPHOME_F("text"))) {
    this->handle_text_request(request, match);
  }
#endif
#ifdef USE_SELECT
  else if (match.domain_equals(ESPHOME_F("select"))) {
    this->handle_select_request(request, match);
  }
#endif
#ifdef USE_CLIMATE
  else if (match.domain_equals(ESPHOME_F("climate"))) {
    this->handle_climate_request(request, match);
  }
#endif
#ifdef USE_LOCK
  else if (match.domain_equals(ESPHOME_F("lock"))) {
    this->handle_lock_request(request, match);
  }
#endif
#ifdef USE_VALVE
  else if (match.domain_equals(ESPHOME_F("valve"))) {
    this->handle_valve_request(request, match);
  }
#endif
#ifdef USE_ALARM_CONTROL_PANEL
  else if (match.domain_equals(ESPHOME_F("alarm_control_panel"))) {
    this->handle_alarm_control_panel_request(request, match);
  }
#endif
#ifdef USE_UPDATE
  else if (match.domain_equals(ESPHOME_F("update"))) {
    this->handle_update_request(request, match);
  }
#endif
#ifdef USE_WATER_HEATER
  else if (match.domain_equals(ESPHOME_F("water_heater"))) {
    this->handle_water_heater_request(request, match);
  }
#endif
#ifdef USE_INFRARED
  else if (match.domain_equals(ESPHOME_F("infrared"))) {
    this->handle_infrared_request(request, match);
  }
#endif
#ifdef USE_RADIO_FREQUENCY
  else if (match.domain_equals(ESPHOME_F("radio_frequency"))) {
    this->handle_radio_frequency_request(request, match);
  }
#endif
  else {
    // No matching handler found - send 404
    ESP_LOGV(TAG, "Request for unknown URL: %s", url.c_str());
    request->send(404, ESPHOME_F("text/plain"), ESPHOME_F("Not Found"));
  }
}
 
bool WebServer::isRequestHandlerTrivial() const { return false; }
 
void WebServer::add_sorting_info_(JsonObject &root, EntityBase *entity) {
#ifdef USE_WEBSERVER_SORTING
  if (this->sorting_entitys_.contains(entity)) {
    root[ESPHOME_F("sorting_weight")] = this->sorting_entitys_[entity].weight;
    if (this->sorting_groups_.contains(this->sorting_entitys_[entity].group_id)) {
      root[ESPHOME_F("sorting_group")] = linked(this->sorting_groups_[this->sorting_entitys_[entity].group_id].name);
    }
  }
#endif
}
 
#ifdef USE_WEBSERVER_SORTING
void WebServer::add_entity_config(EntityBase *entity, float weight, uint64_t group) {
  this->sorting_entitys_[entity] = SortingComponents{weight, group};
}
 
void WebServer::add_sorting_group(uint64_t group_id, const std::string &group_name, float weight) {
  this->sorting_groups_[group_id] = SortingGroup{group_name, weight};
}
#endif
 
}  // namespace esphome::web_server
#endif