netalertx · jokob-sk · Jun 19, 2026 · Jun 17, 2026 · Jun 17, 2026 · Jun 17, 2026
diff --git a/.gemini/skills/plugin-development/plugin-skill.md b/.gemini/skills/plugin-development/plugin-skill.md
@@ -0,0 +1,16 @@
+# Plugin development skill
+
+1. Assess requirements
+2. Read `docs/PLUGINS_DEV.md`
+3. Confirm field mapping
+4. Ask clarifying questions
+5. code placed in `front/plugins/<new plugin name>`
+
+
+Plugin prefix:
+
+- has to be uppercase letters only (no underscores)
+- must be unique
+- keep short but readable if possible
+
+
diff --git a/docs/API_DEVICE_FIELD_LOCK.md b/docs/API_DEVICE_FIELD_LOCK.md
@@ -151,7 +151,6 @@ The authoritative field update logic prevents plugin overwrites:
 ## See Also
 
 - [Device locking](./DEVICE_FIELD_LOCK.md)
-- [Device source fields](./DEVICE_SOURCE_FIELDS.md)
+- [Device source fields - Authoritative updates](./DEVICE_SOURCE_FIELDS.md)
 - [API Device Endpoints Documentation](./API_DEVICE.md)
-- [Authoritative Field Updates System](./PLUGINS_DEV.md#authoritative-fields)
 - [Plugin Configuration Reference](./PLUGINS_DEV_CONFIG.md)
diff --git a/docs/DEVICE_FIELD_LOCK.md b/docs/DEVICE_FIELD_LOCK.md
@@ -157,9 +157,8 @@ Overwrite rules are
 ## See also
 
 - [Device locking](./DEVICE_FIELD_LOCK.md)
-- [Device source fields](./DEVICE_SOURCE_FIELDS.md)
+- [Device source fields - Authoritative updates](./DEVICE_SOURCE_FIELDS.md)
 - [API Device Endpoints Documentation](./API_DEVICE.md)
-- [Authoritative Field Updates System](./PLUGINS_DEV.md#authoritative-fields)
 - [Plugin Configuration Reference](./PLUGINS_DEV_CONFIG.md)
 - [Device locking APIs](API_DEVICE_FIELD_LOCK.md)
 - [Device management](DEVICE_MANAGEMENT.md)

diff --git a/docs/DEVICE_SOURCE_FIELDS.md b/docs/DEVICE_SOURCE_FIELDS.md
@@ -65,9 +65,8 @@ Some fields, like **IP Addresses** (`devLastIP`) and **Full Domain Names** (`dev
 ## See also:
 
 - [Device locking](./DEVICE_FIELD_LOCK.md)
-- [Device source fields](./DEVICE_SOURCE_FIELDS.md)
+- [Device source fields - Authoritative updates](./DEVICE_SOURCE_FIELDS.md)
 - [API Device Endpoints Documentation](./API_DEVICE.md)
-- [Authoritative Field Updates System](./PLUGINS_DEV.md#authoritative-fields)
 - [Plugin Configuration Reference](./PLUGINS_DEV_CONFIG.md)
 - [Device locking APIs](API_DEVICE_FIELD_LOCK.md)
 - [Device management](DEVICE_MANAGEMENT.md)
diff --git a/docs/PLUGINS.md b/docs/PLUGINS.md
diff --git a/front/css/app.css b/front/css/app.css
@@ -1846,6 +1846,13 @@ textarea[readonly],
     display: grid;
 }
 
+@media (min-width: 768px) {
+  .modal-dialog {
+    width: 750px;
+    margin: 30px auto;
+  }
+}
+
 /* ----------------------------------------------------------------- */
 /* NETWORK page */
 /* ----------------------------------------------------------------- */

diff --git a/front/js/modal.js b/front/js/modal.js
@@ -208,7 +208,12 @@ function showModalPopupForm(
           }
         }
 
-        const fieldOptionsOverride = field.type?.elements[0]?.elementOptions || [];
+        // For select elements use field.options (the selectable values); for all other
+        // element types fall back to elementOptions (used for input attributes like placeholder).
+        const elementType = field.type?.elements[0]?.elementType;
+        const fieldOptionsOverride = (elementType === 'select' && field.options?.length)
+          ? field.options
+          : (field.type?.elements[0]?.elementOptions || []);
         const setValue = initialValue;
         const setType = JSON.stringify(field.type);
         const setEvents = field.events || [];  // default to empty array if missing

diff --git a/front/js/settings_utils.js b/front/js/settings_utils.js
@@ -1175,6 +1175,7 @@ function generateFormHtml(settingsData, set, overrideValue, overrideOptions, ori
 
   // Parse the setType JSON string
   // console.log(processQuotes(setType));
+  console.log(setType);
 
   const setTypeObject = JSON.parse(processQuotes(setType))
   const dataType = setTypeObject.dataType;

diff --git a/front/php/templates/modals.php b/front/php/templates/modals.php
@@ -1,6 +1,6 @@
 <!-- ---------------------------------------------------------------------------
 #  NetAlertX
-#  Open Source Network Guard / WIFI & LAN intrusion detector 
+#  Open Source Network Guard / WIFI & LAN intrusion detector
 #
 #  notificacion.php - Front module. Common notification & modal window
 #-------------------------------------------------------------------------------
@@ -129,7 +129,7 @@
 
       <div id="modal-form-message" class="modal-body"> Modal message </div>
 
-      <div id="modal-form-plc"></div>
+      <div id="modal-form-plc" style="overflow-y: auto; max-height: 60vh; padding: 0 15px;"></div>
 
       <div class="modal-footer">
         <button id="modal-form-cancel" type="button" class="btn btn-outline pull-left" style="min-width: 80px;" data-dismiss="modal"> Cancel </button>

diff --git a/front/plugins/rest_import/README.md b/front/plugins/rest_import/README.md
@@ -0,0 +1,84 @@
+## Overview
+
+Import devices from any REST API that returns JSON
+
+Designed to replace small vendor-specific plugins for systems like OPNsense, RouterOS, asset management tools, and custom inventory APIs. Multiple endpoints can be configured independently in a single plugin instance.
+
+### Quick setup guide
+
+Navigate to **Settings** > **REST Import** and click **Add** to create an import definition.
+
+| Field | Description |
+|---|---|
+| **Name** | Friendly label shown in logs (e.g. `OPNsense DHCP`) |
+| **URL** | Full REST endpoint URL |
+| **Method** | `GET` or `POST` |
+| **Verify SSL** | Disable for self-signed certificates |
+| **Auth Type** | `none`, `basic`, or `bearer` |
+| **Username / API Key** | Used with `basic` auth |
+| **Password / API Secret** | Used with `basic` auth |
+| **Bearer Token** | Used with `bearer` auth |
+| **Custom Headers** | Optional. One `Key: Value` per line |
+| **POST Body** | Optional JSON body for `POST` requests |
+| **Device List Path** | Dot-separated path to the array of records (e.g. `rows`, `data.devices`). Leave blank if the response is already an array |
+
+### Field mapping
+
+Map API response fields to NetAlertX scan fields. Leave a mapping blank to skip that field.
+
+| Popup field | Scan column |
+|---|---|
+| MAC Address | `scanMac` |
+| IP Address | `scanLastIP` |
+| Device Name | `scanName` |
+| Vendor | `scanVendor` |
+| SSID | `scanSSID` |
+| Device Type | `scanType` |
+| Parent MAC | `scanParentMAC` |
+| Parent Port | `scanParentPort` |
+| Site | `scanSite` |
+| VLAN | `scanVlan` |
+
+### Fake MAC generation
+
+Enable **Generate Fake MAC** when the API does not expose MAC addresses (e.g. remote ICMP scans, IP-only inventory systems). A deterministic fake MAC is derived from the IP address using the `fa:ce:` prefix. Requires a valid IP mapping.
+
+> [!WARNING]
+> Fake MACs can cause inconsistencies if IP addresses change between scans. Static IPs are strongly recommended when using this feature.
+
+### Example: OPNsense Dnsmasq API
+
+**Response:**
+```json
+{
+  "rows": [
+    {
+      "hwaddr": "94:18:65:de:22:01",
+      "address": "192.168.1.2",
+      "hostname": "Orbi-Base-Station",
+      "mac_info": "NETGEAR"
+    }
+  ]
+}
+```
+
+**Configuration:**
+```text
+Name:              OPNsense DHCP
+URL:               https://firewall/api/dnsmasq/leases/search
+Method:            GET
+Auth Type:         basic
+Username:          admin
+Device List Path:  rows
+MAC Address:       hwaddr
+IP Address:        address
+Device Name:       hostname
+Vendor:            mac_info
+```
+
+### Notes
+
+- Version: 1.0.0
+- Author: `jokob-sk`
+- Records with missing or invalid MAC addresses are skipped unless **Generate Fake MAC** is enabled
+- Each import definition executes independently; failed imports do not block others