@camstack/addon-google-services 0.2.42 → 0.2.44

package/dist/google-services.addon.mjs

@@ -1,5 +1,5 @@
 import { createHash, randomBytes } from "node:crypto";
-//#region ../types/dist/event-category-BmPm98n0.mjs
+//#region ../types/dist/event-category-78tcBemo.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -120,6 +120,23 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["AddonLoadRecovered"] = "addon.load-recovered";
 	/**
+	* An addon is RUNNING although its installed package is below what the
+	* running server requires (`camstack.requires.addons` of the server, or the
+	* addon's own `requires.server`). Raised once per streak by the unsupported-
+	* addon tracker, on the hub and on agents; AlertCenter turns it into one
+	* operator alert per node and package. The addon is never held back for it.
+	*
+	* Payload: `{ packageName, addonId, nodeId, installedVersion, requiredMinimum, serverVersion, unmet }`.
+	*/
+	EventCategory["AddonUnsupportedVersion"] = "addon.unsupported-version";
+	/**
+	* The package of an {@link AddonUnsupportedVersion} alert reached a supported
+	* version, or is no longer installed on the node. AlertCenter dismisses the matching alert.
+	*
+	* Payload: `{ packageName, addonId, nodeId }`.
+	*/
+	EventCategory["AddonUnsupportedResolved"] = "addon.unsupported-resolved";
+	/**
 	* Monitor scheduled the next retry for a failed addon. Transient —
 	* surfaced to the UI for live-updating the "next retry in Ns"
 	* countdown on the Addons page row, NOT persisted as an alert.
@@ -230,7 +247,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["ProcessRestarted"] = "process.restarted";
 	/**
 	* The SET of storage locations changed — one was created, edited, enabled,
-	* disabled or deleted through `storage.upsertLocation` / `deleteLocation`.
+	* disabled or deleted through the location instances or the forced-delete action.
 	*
 	* Telemetry, not a transaction (D8/D11): every consumer that re-resolves on
 	* it must also converge on its own periodic path, because a dropped event
@@ -785,7 +802,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/device-type-D1fH5kaC.mjs
+//#region ../types/dist/device-type-DxCT0krO.mjs
 /**
 import { errMsg } from '@camstack/types'
 * Extract a human-readable message from an unknown error value.
@@ -947,6 +964,13 @@ var DeviceFeature = /* @__PURE__ */ function(DeviceFeature) {
 	* filters that want "all devices with on-motion behaviour".
 	*/
 	DeviceFeature["MotionTrigger"] = "motion-trigger";
+	/**
+	* Device can be run for a chosen time and then stopped. Mirrors the
+	* `timed-run` wrapper cap — the cap is bound by the core-blocks addon, not by
+	* a driver, so the flag is derived from the device's bindings
+	* (`featuresOfBoundCaps`). Gates the quick-run control in the viewer.
+	*/
+	DeviceFeature["TimedRun"] = "timed-run";
 	/** Light supports rgb-triplet color via `color` cap. */
 	DeviceFeature["LightColorRgb"] = "light-color-rgb";
 	/** Light supports HSV color via `color` cap. */
@@ -5981,7 +6005,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-D7ZKm4nb.mjs
+//#region ../types/dist/sleep-CGPZyzB5.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -6345,6 +6369,59 @@ Object.fromEntries([
 function isValuelessField(field) {
 	return field.type === "separator" || field.type === "info" || field.type === "qr-code" || field.type === "button" || field.type === "object-array" || field.type === "widget" || field.type === "addon-action-button" || field.type === "device-action-button" || field.type === "account-sign-in" || field.type === "secret-presence";
 }
+/**
+* Base collector: flatten a hydrated `ConfigUISchemaWithValues` into
+* `key → { value, default }`, recursing through `group` and `sub-tabs`
+* layout fields. Keeping `value` and `default` SEPARATE (rather than
+* pre-resolving) lets callers both read the effective value AND detect
+* overrides (`value` differs from `default`). Structural over `unknown`;
+* malformed input yields an empty map, never throws.
+*/
+function collectHydratedFieldEntries(schema) {
+	const out = /* @__PURE__ */ new Map();
+	if (typeof schema !== "object" || schema === null) return out;
+	const sections = schema.sections;
+	if (!Array.isArray(sections)) return out;
+	for (const section of sections) if (typeof section === "object" && section !== null) collectFieldEntriesInto(section.fields, out);
+	return out;
+}
+/** Recursive field walker for {@link collectHydratedFieldEntries}. */
+function collectFieldEntriesInto(fields, into) {
+	if (!Array.isArray(fields)) return;
+	for (const field of fields) {
+		if (typeof field !== "object" || field === null) continue;
+		const type = field.type;
+		if (type === "group") {
+			collectFieldEntriesInto(field.fields, into);
+			continue;
+		}
+		if (type === "sub-tabs") {
+			const tabs = field.tabs;
+			if (Array.isArray(tabs)) {
+				for (const tab of tabs) if (typeof tab === "object" && tab !== null) collectFieldEntriesInto(tab.fields, into);
+			}
+			continue;
+		}
+		const key = field.key;
+		if (typeof key !== "string" || key.length === 0) continue;
+		if (!("value" in field)) continue;
+		into.set(key, {
+			value: field.value,
+			default: field.default
+		});
+	}
+}
+/**
+* Flatten a hydrated settings payload into `key → EFFECTIVE value`
+* (`value ?? default`). The read-side inverse of `hydrateSchema` for the
+* common "just give me the resolved values" case. Built on
+* {@link collectHydratedFieldEntries}.
+*/
+function collectHydratedFieldValues(schema) {
+	const out = /* @__PURE__ */ new Map();
+	for (const [key, entry] of collectHydratedFieldEntries(schema)) out.set(key, entry.value ?? entry.default);
+	return out;
+}
 function hydrateSchema(schema, values, options = {}) {
 	return {
 		...schema.tabs ? { tabs: [...schema.tabs] } : {},
@@ -7145,6 +7222,7 @@ var RecordIntegrationInstances = class {
 		this.secretKeys = topLevelSecretKeys(kind.declaration.secretPaths);
 		this.secretMaps = secretMapKeys(kind.declaration.secretPaths);
 		this.nameField = kind.declaration.entry?.nameField ?? "name";
+		if (hooks.kindOf === void 0 && hooks.description.kinds.length !== 1) throw new Error(`record kind '${kind.name}': describe().kinds has ${hooks.description.kinds.length} entries, so kindOf is required to say which one an instance is`);
 	}
 	/**
 	* One instance read for the addon's own runtime; null when absent. When the keychain is
@@ -7186,10 +7264,21 @@ var RecordIntegrationInstances = class {
 		}
 		return out;
 	}
+	/** The kind an instance body is of: the provider's `kindOf`, else its one declared kind. */
+	kindOfBody(body) {
+		if (this.hooks.kindOf !== void 0) {
+			const id = this.hooks.kindOf(body);
+			if (!this.hooks.description.kinds.some((declared) => declared.id === id)) throw new Error(`record kind '${this.kind.name}': kindOf returned '${id}', which describe().kinds does not declare (D1013)`);
+			return id;
+		}
+		const only = this.hooks.description.kinds[0];
+		if (only === void 0) throw new Error(`record kind '${this.kind.name}' declares no kinds`);
+		return only.id;
+	}
 	viewOf(record) {
 		const shown = secretViewsOf(this.records.owner, this.kind.name, record.id, this.kind.declaration, record.data);
 		const rawName = record.data[this.nameField];
-		const kind = this.hooks.kindOf?.(record.data);
+		const kind = this.kindOfBody(record.data);
 		const health = this.hooks.health?.(record.data, record.id);
 		return {
 			id: record.id,
@@ -7197,7 +7286,7 @@ var RecordIntegrationInstances = class {
 			configured: this.hooks.configured(record.data),
 			enabled: isInstanceEnabled(record.data),
 			formValues: shown,
-			...kind !== void 0 ? { kind } : {},
+			kind,
 			...health?.status !== void 0 ? { status: health.status } : {},
 			...health?.lastCheckedAt !== void 0 ? { lastCheckedAt: health.lastCheckedAt } : {}
 		};
@@ -7230,17 +7319,35 @@ var RecordIntegrationInstances = class {
 			...kind !== void 0 ? { kind } : {}
 		});
 		if (minted === void 0) throw new Error("createInstance needs an id: this provider does not mint one");
+		const initial = this.hooks.initialBody(name, kind);
+		const patch = this.patchOf(values ?? {});
+		if (Object.keys(patch).length > 0) Object.assign(patch, await this.hooks.validateWrite?.({
+			kind,
+			body: {
+				...initial,
+				...patch
+			}
+		}));
 		await this.handle.put({
 			id: minted,
-			data: this.hooks.initialBody(name, kind)
+			data: initial
 		}, { ifRev: 0 });
-		const patch = this.patchOf(values ?? {});
 		if (Object.keys(patch).length > 0) await this.handle.patch(minted, patch);
 		await this.hooks.onChanged?.(minted, "created");
 		return { id: minted };
 	};
 	updateInstance = async ({ id, name, values }) => {
 		const patch = this.patchOf(values);
+		if (this.hooks.validateWrite !== void 0 && Object.keys(patch).length > 0) {
+			const stored = await this.handle.get(id);
+			if (stored !== null) Object.assign(patch, await this.hooks.validateWrite({
+				kind: void 0,
+				body: {
+					...stored.data,
+					...patch
+				}
+			}));
+		}
 		if (name !== void 0) patch[this.nameField] = name;
 		await this.handle.patch(id, patch);
 		await this.hooks.onChanged?.(id, "updated");
@@ -7551,6 +7658,21 @@ var SCOPED_SETTINGS_SCOPES = [
 	"device-defaults",
 	"node"
 ];
+/** The one refusal of a key a scope did not declare. */
+function assertDeclaredKeys(keys, declared) {
+	const undeclared = keys.filter((key) => !declared.has(key));
+	if (undeclared.length > 0) throw new Error(`scoped settings: [${undeclared.join(", ")}] not declared for this scope (declared: [${[...declared].join(", ")}])`);
+}
+/** Build the handle over an addon's scoped read, write and unset. */
+function createScopedSettings(deps) {
+	return {
+		async get() {
+			return deps.schema.parse(await deps.read());
+		},
+		patch: (patch) => deps.write(Object.fromEntries(Object.entries(patch))),
+		unset: (keys) => deps.unset(keys)
+	};
+}
 /** A write to a secret path could not be stored in the keychain, so it was refused. */
 var KeychainWriteRefusedError = class extends Error {
 	fieldPath;
@@ -8126,7 +8248,16 @@ function createHandle(raw, opts) {
 				return blob;
 			}
 		},
-		writeAddonStore: writeAddon
+		writeAddonStore: writeAddon,
+		removeClearedKeys: (keys) => serialize("addon", async () => {
+			const stored = await readStoredAddonBlob(raw);
+			index.seen("addon", stored);
+			const removable = keys.filter((key) => collectSecretMarkerRefs(stored[key]).length === 0);
+			if (removable.length === 0) return;
+			const patch = Object.fromEntries(removable.map((key) => [key, void 0]));
+			await raw.writeAddonStore(patch);
+			index.wrote("addon", patch);
+		})
 	};
 }
 /** The context the addon sees, plus the private raw view and write outcome. */
@@ -8256,7 +8387,7 @@ function boundOf(list) {
 * Base class for CamStack addons. Eliminates settings boilerplate:
 *
 * - Typed `config` property with automatic resolution from store + defaults
-* - `getGlobalSettings()` / `updateGlobalSettings()` auto-implemented
+* - the scoped settings API (`clusterSettings` / `nodeSettings` / `deviceDefaults`) auto-implemented
 * - `getAddonSettings()` / `updateAddonSettings()` auto-implemented
 * - `getDeviceSettings()` / `updateDeviceSettings()` auto-implemented
 * - `ctx` accessor for the AddonContext (no manual `this.ctxRef` storage)
@@ -8266,7 +8397,7 @@ function boundOf(list) {
 * Subclasses override:
 * - `onInitialize()` — addon-specific init logic, return ProviderRegistration[]
 * - `onShutdown()` — cleanup
-* - `globalSettingsSchema()` / `deviceSettingsSchema()` — UI schemas
+* - `clusterSettingsSchema()` / `nodeSettingsSchema()` / `deviceSettingsSchema()` — UI schemas
 *
 * @example
 * ```ts
@@ -8280,7 +8411,7 @@ function boundOf(list) {
 *     super({ maxRetries: 3, endpoint: 'http://localhost' })
 *   }
 *
-*   protected globalSettingsSchema() {
+*   protected clusterSettingsSchema() {
 *     return this.schema({
 *       sections: [{
 *         id: 'main', title: 'Settings',
@@ -8323,7 +8454,7 @@ var BaseAddon = class {
 	defaults;
 	/**
 	* Hidden-state paths that hold secrets (D787) — values the addon writes
-	* itself (`updateGlobalSettings`, `state()`) that no form field declares.
+	* itself (`state()`, the scoped writers) that no form field declares.
 	* Stored in the keychain exactly like a `password` field. Syntax:
 	* `'snapshotSigningKey'`, `'identity.pincode'`, `'tokens[userId].accessToken'`
 	* (`key[<id field>]` addresses array items by id, never by index).
@@ -8333,7 +8464,7 @@ var BaseAddon = class {
 	/**
 	* D986 M4: the scoped schemas this addon declared, resolved once per capability
 	* (`loadScopedSchemas`) so the sync readers (`perNodeKeys`, the secret tree, the restart check)
-	* see them. Empty until loaded: the readers then fall back to {@link globalSettingsSchema}.
+	* see them. Empty until loaded.
 	*/
 	_scopedByCap = /* @__PURE__ */ new Map();
 	_nodeKeysByCap = /* @__PURE__ */ new Map();
@@ -8519,7 +8650,7 @@ var BaseAddon = class {
 	/** Addon-specific cleanup. Override if needed. */
 	async onShutdown() {}
 	/**
-	* Called after config is resolved during updateGlobalSettings/updateAddonSettings.
+	* Called after config is resolved during a settings write.
 	* Override to react to config changes (e.g. restart a sampler, reconnect a service).
 	* Not called during initialize() — use onInitialize() for initial setup.
 	*/
@@ -8548,82 +8679,12 @@ var BaseAddon = class {
 	scopedSettingsCapabilities() {
 		return [];
 	}
-	/** Override to provide global-level settings UI schema. */
-	globalSettingsSchema(_cap) {
-		return null;
-	}
 	/** Override to provide device-level settings UI schema. */
 	deviceSettingsSchema() {
 		return null;
 	}
 	/**
-	* INTEGRATION-LEVEL SETTINGS — declare which of this addon's global sections
-	* ARE the configuration of its integration.
-	*
-	* Return the `ConfigSection.id`s, from {@link globalSettingsSchema}, that an
-	* operator should find on the addon's integration page (System →
-	* Integrations → <name>) rather than only in the cluster-wide list of every
-	* addon. Empty (the default) means the addon has no integration-level
-	* settings and no such surface is offered — this is opt-in, because whether
-	* an addon's configuration IS its integration's configuration depends on the
-	* nature of the integration.
-	*
-	* WHAT THIS IS NOT. It is not a scope. The selected sections keep living in
-	* the ONE global schema, in the ONE addon store, written by the ONE
-	* `updateGlobalSettings` path. There is deliberately no
-	* `updateIntegrationSettings`: a second write path is how a surface acquires
-	* a second store key, and this repo has shipped that twice (`btmPath@hub`,
-	* D266). Selecting sections cannot introduce a key that selecting cannot.
-	*
-	* WHY IT IS A LIST OF SECTION IDS AND NOT A MARKER ON THE SECTION.
-	* `ConfigFieldBase` used to carry `scope?: 'device' | 'global'` and it was
-	* removed with the reason recorded at
-	* `packages/types/src/interfaces/config-ui.ts:249` — *"a field's scope is
-	* determined by WHICH schema it lives in, not by a field-level marker."* A
-	* marker sprinkled across sections also has to borrow a field that already
-	* means something else; borrowing `section.tab` put the literal word
-	* "integration" into an operator-facing tab bar, because `tab` means "how to
-	* GROUP this visually" and cannot also mean "where this lives" (D269
-	* supersedes D268). One declaration, in one place, next to the schema whose
-	* ids it names.
-	*/
-	integrationSettingSections() {
-		return [];
-	}
-	async getGlobalSettings(overlay, cap, nodeId) {
-		await this.loadScopedSchemas(cap);
-		const schema = this.globalSettingsSchema(cap) ?? this.scopedFormSchema(cap);
-		if (!schema) return { sections: [] };
-		const projected = await this.readRawProjectedStore(nodeId, cap);
-		return hydrateSchema(schema, overlay ? await this.overlayKeepingMarkers(projected, overlay) : projected, { inlineSecretsAsViews: true });
-	}
-	/**
-	* The integration-level view of this addon's settings: exactly the sections
-	* named by {@link integrationSettingSections}, hydrated from the SAME store
-	* `getGlobalSettings` reads, and narrowed to cluster-scoped fields.
-	*
-	* Returns `null` when the addon declared nothing — an addon that opts out has
-	* no integration settings surface at all, rather than an empty one that reads
-	* as a failed load.
-	*
-	* Three properties hold BY CONSTRUCTION, which is why they are here in core
-	* and not in whichever UI happens to render this:
-	*
-	*  1. **One key.** The payload is a SUBSET of the global schema, so a field
-	*     shown here is the same field, with the same bare key, that the addon's
-	*     own page shows. There is no integration-specific writer — callers save
-	*     through `updateGlobalSettings` — so a second store key is unreachable,
-	*     not merely discouraged.
-	*  2. **No node scope.** `perNode: true` fields are DROPPED. Their store key
-	*     is `<key>@<nodeId>` and an integration is not a node; whichever node
-	*     such a field silently picked would be a wrong answer for the operator
-	*     who opened the page (D266).
-	*  3. **No silent typo.** A declared id that names no section throws. The
-	*     alternative — skip it — turns a rename into a surface that quietly
-	*     empties, which looks exactly like an addon with nothing to configure.
-	*/
-	/**
-	* The form schema of ONE integration instance, or `null` to use {@link globalSettingsSchema}.
+	* The form schema of ONE integration instance, or `null` to use the scoped form.
 	*
 	* Override it only when an `instanceMode: multiple` addon's instances differ: an NVR integration
 	* needs its connection fields, the default integration the addon's own sections. It is the
@@ -8671,37 +8732,178 @@ var BaseAddon = class {
 		}
 	}
 	/**
+	* Hook: values layered over the stored ones when the FORM of one scope is served
+	* ({@link getScopedSettings}) — a preview that derives dependent options without writing.
+	* Never applied to {@link ScopedSettings.get} or to a write. `null` ⇒ no overlay.
+	*/
+	async scopedSettingsOverlay(_scope, _cap, _nodeId) {
+		return null;
+	}
+	/**
+	* Hook: a write of one scope changed stored values (not called when the store reports no change,
+	* e.g. the write-back of a stored secret). `keys` are the bare field keys of the write, node keys included.
+	*/
+	async onScopedSettingsChanged(_scope, _cap, _keys) {}
+	/** Typed handle over the CLUSTER settings `cap` declares (`clusterSettingsSchema`). */
+	clusterSettings(cap, schema) {
+		return this.scopedHandle("cluster", cap, schema);
+	}
+	/** Typed handle over the fleet defaults of the per-device settings `cap` declares. */
+	deviceDefaults(cap, schema) {
+		return this.scopedHandle("device-defaults", cap, schema);
+	}
+	/**
+	* Typed handle over the settings `cap` owns PER NODE. `nodeId` omitted ⇒ the local node. A node
+	* with no row yields the schema defaults — never a bare-key fallback.
+	*/
+	nodeSettings(cap, schema, nodeId) {
+		return this.scopedHandle("node", cap, schema, nodeId);
+	}
+	/**
+	* {@link state} for a value that is kept per node: stored under `<key>@<nodeId>`, and the
+	* settings store carries `nodeId` in the row data (D986 §1), so a forgotten node's rows go in one
+	* central delete. `nodeId` omitted ⇒ the local node.
+	*/
+	nodeState(key, schema, fallback, nodeId) {
+		this._declaredStateKeys.add(key);
+		return createDurableState({
+			key: nodeScopedKey(key, nodeId ?? this._ctx?.kernel?.localNodeId ?? ""),
+			schema,
+			fallback,
+			read: async () => this.resolveStoredSecrets(await this.readAddonStoreWithRetry()),
+			write: async (patch) => {
+				await this._ctx?.settings?.writeAddonStore(patch);
+			},
+			onParseError: (k, e) => this._ctx?.logger?.warn?.(`durable-state: stored "${k}" failed validation — using fallback`, { meta: {
+				addonId: this._ctx?.id,
+				key: k,
+				error: String(e)
+			} })
+		});
+	}
+	/** The loaded schema `cap` declares for `scope`, or `null`. */
+	async declaredScopedSchema(scope, cap) {
+		await this.loadScopedSchemas(cap);
+		return this.loadedScopedSchemas(cap).find((entry) => entry.scope === scope)?.schema ?? null;
+	}
+	async requireScopedSchema(scope, cap) {
+		const schema = await this.declaredScopedSchema(scope, cap);
+		if (schema === null) throw new Error(`${this.constructor.name}: cap "${cap}" declares no ${scope} settings`);
+		return schema;
+	}
+	scopedKeys(schema) {
+		return new Set(schema.sections.flatMap((section) => collectValueFieldKeys(section.fields)));
+	}
+	/** `store` narrowed to the keys `schema` declares. */
+	narrowToScope(store, schema) {
+		const keys = this.scopedKeys(schema);
+		return Object.fromEntries(Object.entries(store).filter(([key]) => keys.has(key)));
+	}
+	scopedHandle(scope, cap, schema, nodeId) {
+		return createScopedSettings({
+			schema,
+			read: async () => {
+				const declared = await this.requireScopedSchema(scope, cap);
+				const stored = this.narrowToScope(await this.resolveGlobalStore(nodeId, cap), declared);
+				const effective = collectHydratedFieldValues(hydrateSchema(declared, stored));
+				return {
+					...Object.fromEntries([...effective].filter(([, value]) => value !== void 0)),
+					...stored
+				};
+			},
+			write: (patch) => this.writeScoped(scope, cap, patch, nodeId),
+			unset: (keys) => this.unsetScoped(scope, cap, keys, nodeId)
+		});
+	}
+	/** The one write path of the scoped API: declared keys only, then the global patch. */
+	async writeScoped(scope, cap, patch, nodeId) {
+		assertDeclaredKeys(Object.keys(patch), this.scopedKeys(await this.requireScopedSchema(scope, cap)));
+		if (await this.applyGlobalPatch(patch, scope === "node" ? nodeId : void 0, cap)) await this.onScopedSettingsChanged(scope, cap, Object.keys(patch));
+	}
+	/**
+	* Remove declared keys of one scope. A secret goes through {@link clearSecrets} — its keychain
+	* value is released exactly as there — and the emptied row is then removed; every other key is
+	* removed by an `undefined` patch (which a secret transform would read as "keep").
+	*/
+	async unsetScoped(scope, cap, keys, nodeId) {
+		assertDeclaredKeys(keys, this.scopedKeys(await this.requireScopedSchema(scope, cap)));
+		const target = scope === "node" ? nodeId : void 0;
+		const tree = this.addonSecretTree();
+		const secretKeys = keys.filter((key) => tree.has(key));
+		const plainKeys = keys.filter((key) => !tree.has(key));
+		let changed = false;
+		if (plainKeys.length > 0) {
+			const patch = Object.fromEntries(plainKeys.map((key) => [key, void 0]));
+			changed = await this.applyGlobalPatch(patch, target, cap) || changed;
+		}
+		if (secretKeys.length > 0) {
+			await this.clearSecretKeys(secretKeys, target, cap);
+			const node = normalizeNodeId(target ?? this._ctx?.kernel?.localNodeId);
+			const rows = secretKeys.map((key) => scope === "node" ? nodeScopedKey(key, node) : key);
+			if (this._secretSettings !== null) await this._secretSettings.removeClearedKeys(rows);
+			else await this._ctx?.settings?.writeAddonStore(Object.fromEntries(rows.map((row) => [row, void 0])));
+			changed = true;
+		}
+		if (changed) await this.onScopedSettingsChanged(scope, cap, [...keys]);
+	}
+	/**
+	* The hydrated form of one scope of one capability's settings (any
+	* {@link scopedSettingsOverlay} applied), or `null` when the capability declares nothing there.
+	*/
+	async getScopedSettings(scope, cap, nodeId) {
+		const schema = await this.declaredScopedSchema(scope, cap);
+		if (schema === null) return null;
+		const stored = this.narrowToScope(await this.readRawProjectedStore(nodeId, cap), schema);
+		const overlay = await this.scopedSettingsOverlay(scope, cap, nodeId);
+		return hydrateSchema(schema, overlay ? await this.overlayKeepingMarkers(stored, overlay) : stored, { inlineSecretsAsViews: true });
+	}
+	/**
+	* The scoped schemas this addon serves: one entry per loaded (capability, scope), capabilities
+	* in declaration order, scopes in {@link SCOPED_SETTINGS_SCOPES} order. `[]` when it declares
+	* nothing.
+	*/
+	async listScopedSettings() {
+		await this.loadScopedSchemas();
+		return [...this._scopedByCap].flatMap(([cap, entries]) => entries.map((entry) => ({
+			cap,
+			scope: entry.scope,
+			sectionIds: entry.schema.sections.map((section) => section.id)
+		})));
+	}
+	/** The OPERATOR's write of declared keys of one scope (D787 secret semantics). */
+	async updateScopedSettings(scope, cap, patch, nodeId) {
+		this._operatorWriteDepth++;
+		try {
+			await this.writeScoped(scope, cap, patch, nodeId);
+		} finally {
+			this._operatorWriteDepth--;
+		}
+	}
+	/**
+	* The effective values (`stored ?? default`) of one scope, a secret as its `set` view — never
+	* its value. `null` when the capability declares nothing for the scope.
+	*/
+	async readScopedValues(scope, cap, nodeId) {
+		const schema = await this.declaredScopedSchema(scope, cap);
+		if (schema === null) return null;
+		const form = hydrateSchema(schema, this.narrowToScope(await this.readRawProjectedStore(nodeId, cap), schema), { inlineSecretsAsViews: true });
+		return Object.fromEntries([...collectHydratedFieldValues(form)].filter(([, value]) => value !== void 0));
+	}
+	/**
 	* What the create wizard and the integration edit page render for one instance: the addon's
 	* per-instance schema when it declares one, else its global schema (what they always showed).
 	*/
 	async getIntegrationFormSchema(instance, nodeId) {
 		const scoped = await this.integrationFormSchema(instance);
-		if (scoped === null) return this.getGlobalSettings(void 0, void 0, nodeId);
+		if (scoped === null) return this.scopedForm(nodeId);
 		return hydrateSchema(scoped, {}, { inlineSecretsAsViews: true });
 	}
-	async getIntegrationSettings(nodeId) {
-		const declared = this.integrationSettingSections();
-		if (declared.length === 0) return null;
-		const schema = this.globalSettingsSchema();
-		if (!schema) throw new Error(`${this.constructor.name}: integrationSettingSections() names [${declared.join(", ")}] but globalSettingsSchema() returns null.`);
-		const byId = new Map(schema.sections.map((section) => [section.id, section]));
-		const sections = [];
-		for (const id of declared) {
-			const section = byId.get(id);
-			if (!section) throw new Error(`${this.constructor.name}: integrationSettingSections() names unknown section "${id}". Known sections: [${[...byId.keys()].join(", ")}].`);
-			const fields = dropPerNodeFields(section.fields);
-			if (fields.length === 0) continue;
-			sections.push({
-				...section,
-				fields
-			});
-		}
-		if (sections.length === 0) return null;
-		const projected = await this.readRawProjectedStore(nodeId);
-		return hydrateSchema({
-			...schema,
-			sections
-		}, projected, { inlineSecretsAsViews: true });
+	/** The form of the scoped schemas this addon declared, hydrated from its store. */
+	async scopedForm(nodeId) {
+		await this.loadScopedSchemas();
+		const schema = this.scopedFormSchema();
+		if (!schema) return { sections: [] };
+		return hydrateSchema(schema, await this.readRawProjectedStore(nodeId), { inlineSecretsAsViews: true });
 	}
 	/**
 	* The raw addon store PROJECTED onto the target node's bare per-node keys:
@@ -8710,8 +8912,8 @@ var BaseAddon = class {
 	* bare fallback), all `@`-scoped and stray bare per-node keys are dropped.
 	* A no-op passthrough when the schema declares no `perNode` field.
 	*
-	* This is the sanctioned way for a `getGlobalSettings` OVERRIDE that needs
-	* the store for custom option logic (option narrowing, value snapping) to
+	* This is the sanctioned way for an addon that needs
+	* the store for custom logic (option narrowing, value snapping) to
 	* read it per-node — never `ctx.settings.readAddonStore()` directly.
 	* `nodeId` omitted ⇒ the local node (node-blind injection from ctx).
 	*
@@ -8763,7 +8965,7 @@ var BaseAddon = class {
 	}
 	/**
 	* Whether ONE global key of this addon's store was written, read three-way
-	* (D651). For a question a hydrated view cannot answer: `getGlobalSettings`
+	* (D651). For a question a hydrated view cannot answer: a hydrated form
 	* reports `value ?? default`, so "the operator chose the default" and "nobody
 	* chose" look the same, and a failed read looks like both. A `perNode` key is
 	* not supported here: its stored name is scoped.
@@ -8797,7 +8999,7 @@ var BaseAddon = class {
 	}
 	/**
 	* The OPERATOR's write — a settings form or an admin API call, dispatched by
-	* the kernel. Identical to {@link updateGlobalSettings}, except that a secret
+	* the kernel. The one in-process write of the addon blob that is not a scoped write; a secret
 	* the operator sends is stored as sent even when it equals a pre-keychain
 	* inline value: the operator re-entering a password is a change, an addon
 	* writing back what it read is not (D787).
@@ -8810,9 +9012,6 @@ var BaseAddon = class {
 			this._operatorWriteDepth--;
 		}
 	}
-	async updateGlobalSettings(patch, nodeId) {
-		await this.applyGlobalPatch(patch, nodeId);
-	}
 	/**
 	* REMOVE stored secrets — their keychain values and their markers (D787).
 	*
@@ -8822,6 +9021,9 @@ var BaseAddon = class {
 	* a keychain (an older kernel) it writes `''`, as such code always did.
 	*/
 	async clearSecrets(keys, nodeId) {
+		await this.clearSecretKeys(keys, nodeId);
+	}
+	async clearSecretKeys(keys, nodeId, cap) {
 		const tree = this.addonSecretTree();
 		const keychain = this._ctx?.secrets !== void 0;
 		const stored = keychain ? await this.readAddonStoreWithRetry() : {};
@@ -8834,25 +9036,26 @@ var BaseAddon = class {
 			const keychainStored = tree.has(key) || collectSecretMarkerRefs(stored[key]).length > 0;
 			patch[key] = keychain && keychainStored ? SECRET_CLEAR : "";
 		}
-		await this.applyGlobalPatch(patch, nodeId);
+		await this.applyGlobalPatch(patch, nodeId, cap);
 	}
-	async applyGlobalPatch(barePatch, nodeId) {
-		await this.loadScopedSchemas();
-		const keys = this.perNodeKeys();
+	/** Resolves `true` when the write changed stored values. */
+	async applyGlobalPatch(barePatch, nodeId, cap) {
+		await this.loadScopedSchemas(cap);
+		const keys = this.perNodeKeys(cap);
 		const localNode = normalizeNodeId(this._ctx?.kernel?.localNodeId);
 		const target = normalizeNodeId(nodeId ?? this._ctx?.kernel?.localNodeId);
 		const scoped = keys.size > 0 ? scopePatch(barePatch, keys, target) : barePatch;
 		const handle = this._secretSettings;
 		if (handle !== null) {
 			const { changed } = await handle.writeAddonStore(scoped);
-			if (!changed) return;
+			if (!changed) return false;
 		} else await this._ctx?.settings?.writeAddonStore(scoped);
-		if (target !== localNode) return;
+		if (target !== localNode) return true;
 		await this.resolveConfig();
 		await this.onConfigChanged();
 		this.emitLifecycle(EventCategory.AddonUpdated, { level: "global" });
-		const legacy = this.globalSettingsSchema();
-		this.maybeAutoRestart(Object.keys(barePatch), [...legacy === null ? [] : [legacy], ...this.loadedScopedSchemas().map((entry) => entry.schema)]);
+		this.maybeAutoRestart(Object.keys(barePatch), this.loadedScopedSchemas().map((entry) => entry.schema));
+		return true;
 	}
 	/**
 	* The set of field keys the global settings schema declares `perNode: true`
@@ -8889,10 +9092,7 @@ var BaseAddon = class {
 		this._nodeKeysByCap = /* @__PURE__ */ new Map();
 		this._addonSecretTree = null;
 	}
-	/**
-	* The form the settings API serves while an addon declares no {@link globalSettingsSchema}: the
-	* sections of its scoped schemas, so dropping the old hook does not blank the form.
-	*/
+	/** The form of an addon's scoped schemas: their sections, each shown once. */
 	scopedFormSchema(cap) {
 		const byId = /* @__PURE__ */ new Map();
 		for (const entry of this.loadedScopedSchemas(cap)) for (const section of entry.schema.sections) if (!byId.has(section.id)) byId.set(section.id, section);
@@ -8904,8 +9104,7 @@ var BaseAddon = class {
 		return [...this._scopedByCap.values()].flat();
 	}
 	/**
-	* The field keys that are stored per node: every field of a {@link nodeSettingsSchema}, plus
-	* the fields the legacy {@link globalSettingsSchema} still marks `perNode: true`. Derived once
+	* The field keys that are stored per node: every field of a {@link nodeSettingsSchema}. Derived once
 	* per `cap` argument and memoized (schemas are static declarations). Empty set ⇒ every
 	* per-node code path is bypassed and the settings API behaves like the node-agnostic one.
 	* Call {@link loadScopedSchemas} first (the async seams do).
@@ -8914,8 +9113,7 @@ var BaseAddon = class {
 		const cacheKey = cap ?? "";
 		const cached = this._nodeKeysByCap.get(cacheKey);
 		if (cached) return cached;
-		const legacy = this.globalSettingsSchema(cap);
-		const keys = new Set(legacy ? legacy.sections.flatMap((section) => collectPerNodeFieldKeys(section.fields)) : []);
+		const keys = /* @__PURE__ */ new Set();
 		for (const { scope, schema } of this.loadedScopedSchemas(cap)) {
 			if (scope !== "node") continue;
 			for (const section of schema.sections) for (const key of collectValueFieldKeys(section.fields)) keys.add(key);
@@ -9133,8 +9331,6 @@ var BaseAddon = class {
 	}
 	declaredKeySet() {
 		const keys = new Set(Object.keys(this.defaults));
-		const schema = this.globalSettingsSchema();
-		if (schema) for (const section of schema.sections) for (const key of collectFieldKeys(section.fields)) keys.add(key);
 		for (const { schema: scoped } of this.loadedScopedSchemas()) for (const section of scoped.sections) for (const key of collectFieldKeys(section.fields)) keys.add(key);
 		for (const key of this._declaredStateKeys) keys.add(key);
 		for (const path of this.secretStatePaths) {
@@ -9232,7 +9428,7 @@ var BaseAddon = class {
 	/** The addon store's secret tree: schema fields by TYPE, plus `secretStatePaths`. */
 	addonSecretTree() {
 		if (this._addonSecretTree === null) {
-			const tree = new Map(secretTreeFromSchema(this.globalSettingsSchema()));
+			const tree = /* @__PURE__ */ new Map();
 			for (const { schema } of this.loadedScopedSchemas()) for (const [key, node] of secretTreeFromSchema(schema)) tree.set(key, node);
 			this._addonSecretTree = mergeSecretStatePaths(tree, this.secretStatePaths);
 		}
@@ -9444,47 +9640,6 @@ function classifyStoreError(err) {
 	if (TRANSPORT_PHRASES.some((f) => message.includes(f))) return "transport";
 	return "permanent";
 }
-/**
-* Collect the keys of every field marked `perNode: true`, recursing into
-* layout containers (`group` fields and `sub-tabs` tabs) the same way
-* `hydrateSchema` does. Valueless structural fields (separator/info/…)
-* don't declare `perNode` and are excluded by the `in` narrowing.
-*/
-/**
-* The same fields with every `perNode: true` one removed, recursing into layout
-* containers exactly as {@link collectPerNodeFieldKeys} does. A container left
-* with no child is dropped rather than rendered empty.
-*
-* Used by `getIntegrationSettings`: an integration is not a node, so a field
-* whose store key is `<key>@<nodeId>` has no node to belong to there.
-*/
-function dropPerNodeFields(fields) {
-	const kept = [];
-	for (const field of fields) {
-		if (field.type === "group") {
-			const inner = dropPerNodeFields(field.fields);
-			if (inner.length > 0) kept.push({
-				...field,
-				fields: inner
-			});
-			continue;
-		}
-		if (field.type === "sub-tabs") {
-			const tabs = field.tabs.map((tab) => ({
-				...tab,
-				fields: dropPerNodeFields(tab.fields)
-			})).filter((tab) => tab.fields.length > 0);
-			if (tabs.length > 0) kept.push({
-				...field,
-				tabs
-			});
-			continue;
-		}
-		if ("perNode" in field && field.perNode === true) continue;
-		kept.push(field);
-	}
-	return kept;
-}
 /** The keys of the value-holding fields, recursing into layout containers. */
 function collectValueFieldKeys(fields) {
 	const collected = [];
@@ -9517,21 +9672,6 @@ function collectFieldKeys(fields) {
 	}
 	return collected;
 }
-function collectPerNodeFieldKeys(fields) {
-	const collected = [];
-	for (const field of fields) {
-		if (field.type === "group") {
-			collected.push(...collectPerNodeFieldKeys(field.fields));
-			continue;
-		}
-		if (field.type === "sub-tabs") {
-			for (const tab of field.tabs) collected.push(...collectPerNodeFieldKeys(tab.fields));
-			continue;
-		}
-		if ("perNode" in field && field.perNode === true) collected.push(field.key);
-	}
-	return collected;
-}
 /**
 * Normalize an `ICamstackAddon.initialize()` return value into the
 * `AddonInitResult` envelope. Arrays are wrapped into `{ providers }`;
@@ -10582,7 +10722,6 @@ var CAP_NAMES = Object.freeze([
 	"notifier",
 	"numeric-sensor",
 	"oauth-integration",
-	"oidc-connections",
 	"osd",
 	"osd-manager",
 	"pet-feeder",
@@ -12289,13 +12428,25 @@ Object.freeze({
 		"path": "temperature",
 		"valueType": "number"
 	}],
-	"timed-run": [{
-		"path": "activeUntil",
-		"valueType": "number"
-	}, {
-		"path": "requestedBy",
-		"valueType": "string"
-	}],
+	"timed-run": [
+		{
+			"path": "activeUntil",
+			"valueType": "number"
+		},
+		{
+			"path": "requestedBy",
+			"valueType": "string"
+		},
+		{
+			"path": "quickRun.duration",
+			"valueType": "number"
+		},
+		{
+			"path": "quickRun.unit",
+			"valueType": "enum",
+			"enumValues": ["s", "min"]
+		}
+	],
 	"update": [
 		{
 			"path": "currentVersion",
@@ -12474,8 +12625,7 @@ Object.freeze({
 	"device-provider": { "reloadDevice": 18e4 },
 	"llm": {
 		"generate": 6e5,
-		"generateVision": 6e5,
-		"testProfile": 6e5
+		"generateVision": 6e5
 	},
 	"llm-runtime": {
 		"complete": 6e5,
@@ -12534,7 +12684,7 @@ function userError(code, params, englishFallback) {
 	return new CamstackError(code, params, englishFallback);
 }
 //#endregion
-//#region ../types/dist/composition-BmBHuDTQ.mjs
+//#region ../types/dist/composition-Bx0JvKUU.mjs
 /**
 * The ffmpeg build every CamStack node downloads, per platform and arch.
 *
@@ -13696,6 +13846,387 @@ var NodeColorIdSchema = _enum([
 	"node-h"
 ]);
 //#endregion
+//#region ../types/dist/convert-BAzH15HU.mjs
+/**
+* Frozen unit → spec table. `•` in the doc marks each dimension's canonical
+* unit (`factor: 1, offset: 0`). °F derives from `°C = (°F − 32) × 5/9` ⇒
+* `factor = 5/9`, `offset = -160/9` (kept as exact expressions, not rounded
+* decimals). K derives from `°C = K − 273.15`.
+*/
+var UNIT_TABLE = {
+	"°C": {
+		dimension: "temperature",
+		factor: 1,
+		offset: 0
+	},
+	"°F": {
+		dimension: "temperature",
+		factor: 5 / 9,
+		offset: -160 / 9
+	},
+	K: {
+		dimension: "temperature",
+		factor: 1,
+		offset: -273.15
+	},
+	hPa: {
+		dimension: "pressure",
+		factor: 1,
+		offset: 0
+	},
+	kPa: {
+		dimension: "pressure",
+		factor: 10,
+		offset: 0
+	},
+	Pa: {
+		dimension: "pressure",
+		factor: .01,
+		offset: 0
+	},
+	mbar: {
+		dimension: "pressure",
+		factor: 1,
+		offset: 0
+	},
+	bar: {
+		dimension: "pressure",
+		factor: 1e3,
+		offset: 0
+	},
+	inHg: {
+		dimension: "pressure",
+		factor: 33.8639,
+		offset: 0
+	},
+	mmHg: {
+		dimension: "pressure",
+		factor: 1.33322,
+		offset: 0
+	},
+	psi: {
+		dimension: "pressure",
+		factor: 68.9476,
+		offset: 0
+	},
+	"m/s": {
+		dimension: "speed",
+		factor: 1,
+		offset: 0
+	},
+	"km/h": {
+		dimension: "speed",
+		factor: 1 / 3.6,
+		offset: 0
+	},
+	mph: {
+		dimension: "speed",
+		factor: .44704,
+		offset: 0
+	},
+	kn: {
+		dimension: "speed",
+		factor: .514444,
+		offset: 0
+	},
+	"mm/h": {
+		dimension: "precipitation-rate",
+		factor: 1,
+		offset: 0
+	},
+	"in/h": {
+		dimension: "precipitation-rate",
+		factor: 25.4,
+		offset: 0
+	},
+	m: {
+		dimension: "length",
+		factor: 1,
+		offset: 0
+	},
+	mm: {
+		dimension: "length",
+		factor: .001,
+		offset: 0
+	},
+	cm: {
+		dimension: "length",
+		factor: .01,
+		offset: 0
+	},
+	km: {
+		dimension: "length",
+		factor: 1e3,
+		offset: 0
+	},
+	in: {
+		dimension: "length",
+		factor: .0254,
+		offset: 0
+	},
+	ft: {
+		dimension: "length",
+		factor: .3048,
+		offset: 0
+	},
+	mi: {
+		dimension: "length",
+		factor: 1609.344,
+		offset: 0
+	},
+	"m²": {
+		dimension: "area",
+		factor: 1,
+		offset: 0
+	},
+	lx: {
+		dimension: "illuminance",
+		factor: 1,
+		offset: 0
+	},
+	"W/m²": {
+		dimension: "irradiance",
+		factor: 1,
+		offset: 0
+	},
+	W: {
+		dimension: "power",
+		factor: 1,
+		offset: 0
+	},
+	kW: {
+		dimension: "power",
+		factor: 1e3,
+		offset: 0
+	},
+	VA: {
+		dimension: "apparent-power",
+		factor: 1,
+		offset: 0
+	},
+	Wh: {
+		dimension: "energy",
+		factor: 1,
+		offset: 0
+	},
+	kWh: {
+		dimension: "energy",
+		factor: 1e3,
+		offset: 0
+	},
+	MWh: {
+		dimension: "energy",
+		factor: 1e6,
+		offset: 0
+	},
+	V: {
+		dimension: "voltage",
+		factor: 1,
+		offset: 0
+	},
+	mV: {
+		dimension: "voltage",
+		factor: .001,
+		offset: 0
+	},
+	A: {
+		dimension: "current",
+		factor: 1,
+		offset: 0
+	},
+	mA: {
+		dimension: "current",
+		factor: .001,
+		offset: 0
+	},
+	ppm: {
+		dimension: "concentration-volume",
+		factor: 1,
+		offset: 0
+	},
+	ppb: {
+		dimension: "concentration-volume",
+		factor: .001,
+		offset: 0
+	},
+	"µg/m³": {
+		dimension: "concentration-mass",
+		factor: 1,
+		offset: 0
+	},
+	"mg/m³": {
+		dimension: "concentration-mass",
+		factor: 1e3,
+		offset: 0
+	},
+	kg: {
+		dimension: "mass",
+		factor: 1,
+		offset: 0
+	},
+	g: {
+		dimension: "mass",
+		factor: .001,
+		offset: 0
+	},
+	lb: {
+		dimension: "mass",
+		factor: .453592,
+		offset: 0
+	},
+	oz: {
+		dimension: "mass",
+		factor: .0283495,
+		offset: 0
+	},
+	"%": {
+		dimension: "percentage",
+		factor: 1,
+		offset: 0
+	},
+	L: {
+		dimension: "volume",
+		factor: 1,
+		offset: 0
+	},
+	mL: {
+		dimension: "volume",
+		factor: .001,
+		offset: 0
+	},
+	gal: {
+		dimension: "volume",
+		factor: 3.785411784,
+		offset: 0
+	},
+	s: {
+		dimension: "duration",
+		factor: 1,
+		offset: 0
+	},
+	ms: {
+		dimension: "duration",
+		factor: .001,
+		offset: 0
+	},
+	min: {
+		dimension: "duration",
+		factor: 60,
+		offset: 0
+	},
+	h: {
+		dimension: "duration",
+		factor: 3600,
+		offset: 0
+	},
+	d: {
+		dimension: "duration",
+		factor: 86400,
+		offset: 0
+	},
+	B: {
+		dimension: "information",
+		factor: 1,
+		offset: 0
+	},
+	KiB: {
+		dimension: "information",
+		factor: 1024,
+		offset: 0
+	},
+	MiB: {
+		dimension: "information",
+		factor: 1024 ** 2,
+		offset: 0
+	},
+	GiB: {
+		dimension: "information",
+		factor: 1024 ** 3,
+		offset: 0
+	},
+	TiB: {
+		dimension: "information",
+		factor: 1024 ** 4,
+		offset: 0
+	},
+	kB: {
+		dimension: "information",
+		factor: 1e3,
+		offset: 0
+	},
+	MB: {
+		dimension: "information",
+		factor: 1e6,
+		offset: 0
+	},
+	GB: {
+		dimension: "information",
+		factor: 1e9,
+		offset: 0
+	},
+	"°": {
+		dimension: "angle",
+		factor: 1,
+		offset: 0
+	},
+	dBFS: {
+		dimension: "sound-level",
+		factor: 1,
+		offset: 0
+	},
+	dBm: {
+		dimension: "signal-level",
+		factor: 1,
+		offset: 0
+	},
+	mired: {
+		dimension: "colour-temperature",
+		factor: 1,
+		offset: 0
+	},
+	kbps: {
+		dimension: "bitrate",
+		factor: 1,
+		offset: 0
+	},
+	Mbps: {
+		dimension: "bitrate",
+		factor: 1e3,
+		offset: 0
+	},
+	fps: {
+		dimension: "rate",
+		factor: 1,
+		offset: 0
+	}
+};
+/** Resolve a unit's `UnitSpec`, or `undefined` when the spelling is unknown. */
+function specFor(unit) {
+	return Object.hasOwn(UNIT_TABLE, unit) ? UNIT_TABLE[unit] : void 0;
+}
+/** Value in `spec`'s unit → its dimension's canonical unit. */
+function toCanonical(value, spec) {
+	return value * spec.factor + spec.offset;
+}
+/** Canonical-unit value → the unit described by `spec`. */
+function fromCanonical(canonical, spec) {
+	return (canonical - spec.offset) / spec.factor;
+}
+/**
+* Graceful variant for the render path: returns the converted value, or
+* `undefined` when the conversion is refused (unknown unit / cross-dimension).
+* Never throws — a render caller falls back to the raw value + source unit.
+*/
+function tryConvertUnit(value, from, to) {
+	if (from === to) return value;
+	const fromSpec = specFor(from);
+	if (!fromSpec) return void 0;
+	const toSpec = specFor(to);
+	if (!toSpec) return void 0;
+	if (fromSpec.dimension !== toSpec.dimension) return void 0;
+	return fromCanonical(toCanonical(value, fromSpec), toSpec);
+}
+//#endregion
 //#region ../types/dist/index.mjs
 var SMTP_INBOUND_DEFAULT_PORT = 2525;
 var SMTP_INBOUND_DEFAULT_DOMAIN = "camstack.local";
@@ -14100,17 +14631,18 @@ function composeInstanceKinds(parts, base) {
 * message to what the kind supports — callers never special-case a service.
 *
 * DESIGN DECISIONS (locked):
-*  - Target CRUD lives on THIS cap (`upsertTarget` / `deleteTarget` /
-*    `setTargetEnabled`), each provider persisting via the `settings-store`
-*    cap. Rationale: the admin UI needs one uniform surface across the
-*    notifiers addon AND the HA addon; the addon-`globalSettingsSchema`-array
-*    alternative would fork the UI per addon and cannot host the
-*    discovery→adopt flow.
-*  - `listTargetKinds` / `listTargets` / `discoverTargets` return arrays →
-*    the generated cap-mount auto-`concatCollection`-fans them across every
-*    registered provider (notifiers addon + HA addon) so one catalog is
-*    routable. `send` / `testTarget` / CRUD route to ONE provider by the
-*    `addonId` the generated collection router extracts from the call input.
+*  - A target is an INSTANCE of this function cap (epic #440, step 6): the
+*    providers serve their targets as `integration-instances` records, one
+*    record kind per target kind, and the admin lists, adds, edits, switches
+*    and deletes them through that cap. This cap keeps what an instance cannot
+*    say: the kind catalogue (`listTargetKinds`: capabilities, delivery
+*    parameters, brand icon), dispatch (`send`, `testTarget`) and the form
+*    helpers (`discoverTargets`, `probeTargetConfig`).
+*  - `listTargetKinds` / `discoverTargets` return arrays → the generated
+*    cap-mount auto-`concatCollection`-fans them across every registered
+*    provider so one catalog is routable. `send` / `testTarget` /
+*    `probeTargetConfig` route to ONE provider by the `addonId` the generated
+*    collection router extracts from the call input.
 *  - `Attachment.bytes` is `Uint8Array`. Transport-safe: superjson (the tRPC
 *    transformer) + UDS MsgPack both round-trip typed arrays — already used by
 *    `storage` / `storage-provider` / `recording` caps over the same path. No
@@ -14355,7 +14887,7 @@ var TargetKindCapsSchema = object({
 * the union is large and not meant for runtime validation here; the exported
 * `TargetKind` type re-tightens `configSchema` to `ConfigUISchema`.
 */
-var ConfigSchemaPassthrough$4 = unknown();
+var ConfigSchemaPassthrough$3 = unknown();
 var TargetKindSchema = object({
 	kind: string(),
 	label: string(),
@@ -14392,7 +14924,7 @@ var TargetKindSchema = object({
 	* its raster path, which is the safe default for an unknown image.
 	*/
 	iconMediaType: string().optional(),
-	configSchema: ConfigSchemaPassthrough$4,
+	configSchema: ConfigSchemaPassthrough$3,
 	/**
 	* The config keys that decide WHERE this kind's secrets are sent (server,
 	* base URL, instance, chat, recipient). A save that changes any of them
@@ -14414,9 +14946,11 @@ var TargetKindSchema = object({
 	caps: TargetKindCapsSchema
 });
 /**
-* A persisted target. `config` holds secrets; providers REDACT secret fields
-* (return a presence marker only) when serving `listTargets` — never
-* round-trip a stored secret to the UI.
+* A target as a provider's own code sees it (the notification-center bridge, the
+* send path): the flat record body split into the name, the switch and the
+* kind's fields. `config` holds secrets; a reader that serves it to a client
+* REDACTS secret fields (a presence marker only) — never round-trip a stored
+* secret to the UI.
 */
 var TargetSchema = object({
 	id: string(),
@@ -14459,13 +14993,13 @@ var ProbeTargetConfigResultSchema = object({
 	stateInstance: string().optional(),
 	error: string().optional()
 });
-method(object({}), array(TargetKindSchema)), method(object({}), array(TargetSchema), { auth: "admin" }), method(object({ targetId: string() }), TargetSchema, { auth: "admin" }), method(object({
+method(object({}), array(TargetKindSchema)), method(object({
 	kind: string(),
 	config: record(string(), unknown()).optional(),
 	/**
 	* When editing / duplicating, the blank password field never round-trips
 	* the stored token. Pass the source target id so the provider can restore
-	* secrets server-side before dialling (same merge as upsert).
+	* secrets server-side before dialling.
 	*/
 	targetId: string().optional()
 }), array(DiscoveredTargetSchema), { auth: "admin" }), method(object({
@@ -14488,27 +15022,6 @@ method(object({}), array(TargetKindSchema)), method(object({}), array(TargetSche
 }), TestResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({
-	target: TargetSchema,
-	/**
-	* Duplicate flow: create a NEW target id while copying secrets from an
-	* existing row. The UI never holds the stored token; blank / redacted
-	* password fields are restored from this source (D634 still applies if
-	* destinations diverge without a re-typed secret).
-	*/
-	cloneSecretsFrom: string().optional()
-}), TargetSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({ targetId: string() }), _void(), {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({
-	targetId: string(),
-	enabled: boolean()
-}), _void(), {
-	kind: "mutation",
-	auth: "admin"
 });
 looseObject({
 	name: string().min(1),
@@ -22776,7 +23289,6 @@ var SYSTEM_CAP_VOCABULARY = {
 	"notification-output": system("notification delivery — reached through notifier devices and rules"),
 	"notification-rules": system("notification rules — authored on their own page"),
 	"oauth-integration": system(IDENTITY),
-	"oidc-connections": system(IDENTITY),
 	"osd-manager": system(PIPELINE),
 	"pipeline-executor": system(PIPELINE),
 	"pipeline-orchestrator": system(PIPELINE),
@@ -42797,6 +43309,7 @@ var ExpressionBindingSourceSchema = union([
 	object({
 		kind: literal("global"),
 		sourceStableId: string(),
+		addonId: string().optional(),
 		cap: string(),
 		fieldPath: string()
 	})
@@ -42863,385 +43376,6 @@ var SourceInfoSchema = object({
 	raw: record(string(), unknown()).optional()
 });
 /**
-* Frozen unit → spec table. `•` in the doc marks each dimension's canonical
-* unit (`factor: 1, offset: 0`). °F derives from `°C = (°F − 32) × 5/9` ⇒
-* `factor = 5/9`, `offset = -160/9` (kept as exact expressions, not rounded
-* decimals). K derives from `°C = K − 273.15`.
-*/
-var UNIT_TABLE = {
-	"°C": {
-		dimension: "temperature",
-		factor: 1,
-		offset: 0
-	},
-	"°F": {
-		dimension: "temperature",
-		factor: 5 / 9,
-		offset: -160 / 9
-	},
-	K: {
-		dimension: "temperature",
-		factor: 1,
-		offset: -273.15
-	},
-	hPa: {
-		dimension: "pressure",
-		factor: 1,
-		offset: 0
-	},
-	kPa: {
-		dimension: "pressure",
-		factor: 10,
-		offset: 0
-	},
-	Pa: {
-		dimension: "pressure",
-		factor: .01,
-		offset: 0
-	},
-	mbar: {
-		dimension: "pressure",
-		factor: 1,
-		offset: 0
-	},
-	bar: {
-		dimension: "pressure",
-		factor: 1e3,
-		offset: 0
-	},
-	inHg: {
-		dimension: "pressure",
-		factor: 33.8639,
-		offset: 0
-	},
-	mmHg: {
-		dimension: "pressure",
-		factor: 1.33322,
-		offset: 0
-	},
-	psi: {
-		dimension: "pressure",
-		factor: 68.9476,
-		offset: 0
-	},
-	"m/s": {
-		dimension: "speed",
-		factor: 1,
-		offset: 0
-	},
-	"km/h": {
-		dimension: "speed",
-		factor: 1 / 3.6,
-		offset: 0
-	},
-	mph: {
-		dimension: "speed",
-		factor: .44704,
-		offset: 0
-	},
-	kn: {
-		dimension: "speed",
-		factor: .514444,
-		offset: 0
-	},
-	"mm/h": {
-		dimension: "precipitation-rate",
-		factor: 1,
-		offset: 0
-	},
-	"in/h": {
-		dimension: "precipitation-rate",
-		factor: 25.4,
-		offset: 0
-	},
-	m: {
-		dimension: "length",
-		factor: 1,
-		offset: 0
-	},
-	mm: {
-		dimension: "length",
-		factor: .001,
-		offset: 0
-	},
-	cm: {
-		dimension: "length",
-		factor: .01,
-		offset: 0
-	},
-	km: {
-		dimension: "length",
-		factor: 1e3,
-		offset: 0
-	},
-	in: {
-		dimension: "length",
-		factor: .0254,
-		offset: 0
-	},
-	ft: {
-		dimension: "length",
-		factor: .3048,
-		offset: 0
-	},
-	mi: {
-		dimension: "length",
-		factor: 1609.344,
-		offset: 0
-	},
-	"m²": {
-		dimension: "area",
-		factor: 1,
-		offset: 0
-	},
-	lx: {
-		dimension: "illuminance",
-		factor: 1,
-		offset: 0
-	},
-	"W/m²": {
-		dimension: "irradiance",
-		factor: 1,
-		offset: 0
-	},
-	W: {
-		dimension: "power",
-		factor: 1,
-		offset: 0
-	},
-	kW: {
-		dimension: "power",
-		factor: 1e3,
-		offset: 0
-	},
-	VA: {
-		dimension: "apparent-power",
-		factor: 1,
-		offset: 0
-	},
-	Wh: {
-		dimension: "energy",
-		factor: 1,
-		offset: 0
-	},
-	kWh: {
-		dimension: "energy",
-		factor: 1e3,
-		offset: 0
-	},
-	MWh: {
-		dimension: "energy",
-		factor: 1e6,
-		offset: 0
-	},
-	V: {
-		dimension: "voltage",
-		factor: 1,
-		offset: 0
-	},
-	mV: {
-		dimension: "voltage",
-		factor: .001,
-		offset: 0
-	},
-	A: {
-		dimension: "current",
-		factor: 1,
-		offset: 0
-	},
-	mA: {
-		dimension: "current",
-		factor: .001,
-		offset: 0
-	},
-	ppm: {
-		dimension: "concentration-volume",
-		factor: 1,
-		offset: 0
-	},
-	ppb: {
-		dimension: "concentration-volume",
-		factor: .001,
-		offset: 0
-	},
-	"µg/m³": {
-		dimension: "concentration-mass",
-		factor: 1,
-		offset: 0
-	},
-	"mg/m³": {
-		dimension: "concentration-mass",
-		factor: 1e3,
-		offset: 0
-	},
-	kg: {
-		dimension: "mass",
-		factor: 1,
-		offset: 0
-	},
-	g: {
-		dimension: "mass",
-		factor: .001,
-		offset: 0
-	},
-	lb: {
-		dimension: "mass",
-		factor: .453592,
-		offset: 0
-	},
-	oz: {
-		dimension: "mass",
-		factor: .0283495,
-		offset: 0
-	},
-	"%": {
-		dimension: "percentage",
-		factor: 1,
-		offset: 0
-	},
-	L: {
-		dimension: "volume",
-		factor: 1,
-		offset: 0
-	},
-	mL: {
-		dimension: "volume",
-		factor: .001,
-		offset: 0
-	},
-	gal: {
-		dimension: "volume",
-		factor: 3.785411784,
-		offset: 0
-	},
-	s: {
-		dimension: "duration",
-		factor: 1,
-		offset: 0
-	},
-	ms: {
-		dimension: "duration",
-		factor: .001,
-		offset: 0
-	},
-	min: {
-		dimension: "duration",
-		factor: 60,
-		offset: 0
-	},
-	h: {
-		dimension: "duration",
-		factor: 3600,
-		offset: 0
-	},
-	d: {
-		dimension: "duration",
-		factor: 86400,
-		offset: 0
-	},
-	B: {
-		dimension: "information",
-		factor: 1,
-		offset: 0
-	},
-	KiB: {
-		dimension: "information",
-		factor: 1024,
-		offset: 0
-	},
-	MiB: {
-		dimension: "information",
-		factor: 1024 ** 2,
-		offset: 0
-	},
-	GiB: {
-		dimension: "information",
-		factor: 1024 ** 3,
-		offset: 0
-	},
-	TiB: {
-		dimension: "information",
-		factor: 1024 ** 4,
-		offset: 0
-	},
-	kB: {
-		dimension: "information",
-		factor: 1e3,
-		offset: 0
-	},
-	MB: {
-		dimension: "information",
-		factor: 1e6,
-		offset: 0
-	},
-	GB: {
-		dimension: "information",
-		factor: 1e9,
-		offset: 0
-	},
-	"°": {
-		dimension: "angle",
-		factor: 1,
-		offset: 0
-	},
-	dBFS: {
-		dimension: "sound-level",
-		factor: 1,
-		offset: 0
-	},
-	dBm: {
-		dimension: "signal-level",
-		factor: 1,
-		offset: 0
-	},
-	mired: {
-		dimension: "colour-temperature",
-		factor: 1,
-		offset: 0
-	},
-	kbps: {
-		dimension: "bitrate",
-		factor: 1,
-		offset: 0
-	},
-	Mbps: {
-		dimension: "bitrate",
-		factor: 1e3,
-		offset: 0
-	},
-	fps: {
-		dimension: "rate",
-		factor: 1,
-		offset: 0
-	}
-};
-/** Resolve a unit's `UnitSpec`, or `undefined` when the spelling is unknown. */
-function specFor(unit) {
-	return Object.hasOwn(UNIT_TABLE, unit) ? UNIT_TABLE[unit] : void 0;
-}
-/** Value in `spec`'s unit → its dimension's canonical unit. */
-function toCanonical(value, spec) {
-	return value * spec.factor + spec.offset;
-}
-/** Canonical-unit value → the unit described by `spec`. */
-function fromCanonical(canonical, spec) {
-	return (canonical - spec.offset) / spec.factor;
-}
-/**
-* Graceful variant for the render path: returns the converted value, or
-* `undefined` when the conversion is refused (unknown unit / cross-dimension).
-* Never throws — a render caller falls back to the raw value + source unit.
-*/
-function tryConvertUnit(value, from, to) {
-	if (from === to) return value;
-	const fromSpec = specFor(from);
-	if (!fromSpec) return void 0;
-	const toSpec = specFor(to);
-	if (!toSpec) return void 0;
-	if (fromSpec.dimension !== toSpec.dimension) return void 0;
-	return fromCanonical(toCanonical(value, fromSpec), toSpec);
-}
-/**
 * A number a person types for a physical quantity — the input side of the
 * value + unit contract (D972).
 *
@@ -44937,15 +45071,28 @@ var SettingsSchemaWithValuesSchema = object({
 });
 /** Patch object — keys are field names, values are the new field values. */
 var SettingsPatchSchema = record(string(), unknown());
+/** The scope of a scoped-settings call (D986): where the capability declared the values. */
+var ScopedSettingsScopeSchema = _enum(SCOPED_SETTINGS_SCOPES);
+/** One scoped schema an addon serves: its capability, scope and section ids. */
+var ScopedSettingsDeclarationSchema = object({
+	cap: string(),
+	scope: ScopedSettingsScopeSchema,
+	sectionIds: array(string())
+});
 /** Standard success response for update operations. */
 var SettingsUpdateResultSchema = object({ success: literal(true) });
 method(object({
 	addonId: string(),
-	nodeId: string().optional(),
-	overlay: record(string(), unknown()).optional(),
-	cap: string().optional()
+	cap: string(),
+	scope: ScopedSettingsScopeSchema,
+	nodeId: string().optional()
 }), SettingsSchemaWithValuesSchema.nullable()), method(object({
 	addonId: string(),
+	nodeId: string().optional()
+}), array(ScopedSettingsDeclarationSchema).nullable()), method(object({
+	addonId: string(),
+	cap: string(),
+	scope: ScopedSettingsScopeSchema,
 	nodeId: string().optional(),
 	patch: SettingsPatchSchema
 }), SettingsUpdateResultSchema, {
@@ -44953,8 +45100,10 @@ method(object({
 	auth: "admin"
 }), method(object({
 	addonId: string(),
+	cap: string(),
+	scope: ScopedSettingsScopeSchema,
 	nodeId: string().optional()
-}), SettingsSchemaWithValuesSchema.nullable()), method(object({
+}), record(string(), unknown()).nullable()), method(object({
 	addonId: string(),
 	nodeId: string().optional(),
 	instance: IntegrationInstanceRefSchema
@@ -46294,7 +46443,7 @@ var BackupDestinationInfoSchema = object({
 	id: string(),
 	/**
 	* Manifest id of the owning addon. The Settings button on the
-	* destination card opens that addon's `globalSettingsSchema` panel.
+	* destination card opens that addon's scoped settings panel.
 	*/
 	addonId: string(),
 	/** Operator-toggled enable flag from the destination-policy table. */
@@ -48903,7 +49052,7 @@ DeviceType.MediaPlayer, method(deviceOnly, _void(), {
 	kind: "mutation",
 	auth: "protected"
 });
-DeviceType.Camera, DeviceType.Sensor, DeviceType.Button, DeviceType.Switch, DeviceType.PetFeeder, DeviceType.Container, DeviceType.Thermostat, DeviceType.EventEmitter, DeviceType.Camera, DeviceType.Hub, DeviceType.Light, DeviceType.Siren, DeviceType.Switch, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Fan, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder, DeviceType.PetFountain, DeviceType.Dishwasher, DeviceType.Washer, DeviceType.Heater, DeviceType.Dryer, DeviceType.Gateway, DeviceType.Camera, DeviceType.Fan, DeviceType.Lock, DeviceType.Camera, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Heater, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Heater, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Heater, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Heater, DeviceType.Gateway, DeviceType.Hub, DeviceType.Camera, DeviceType.Sensor, DeviceType.MediaPlayer, DeviceType.Vacuum, DeviceType.Generic, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.PetFountain, DeviceType.Fan, DeviceType.Humidifier, DeviceType.Climate, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.MediaPlayer, DeviceType.WaterHeater, DeviceType.Humidifier, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.PetFeeder, DeviceType.Heater;
+DeviceType.Camera, DeviceType.Sensor, DeviceType.Button, DeviceType.Switch, DeviceType.PetFeeder, DeviceType.Container, DeviceType.Thermostat, DeviceType.EventEmitter, DeviceType.Camera, DeviceType.Hub, DeviceType.Light, DeviceType.Siren, DeviceType.Switch, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Fan, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder, DeviceType.PetFountain, DeviceType.Dishwasher, DeviceType.Washer, DeviceType.Heater, DeviceType.Dryer, DeviceType.Gateway, DeviceType.Camera, DeviceType.Fan, DeviceType.Lock, DeviceType.Camera, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Heater, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Heater, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Heater, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Heater, DeviceType.Gateway, DeviceType.Hub, DeviceType.Camera, DeviceType.Sensor, DeviceType.MediaPlayer, DeviceType.Vacuum, DeviceType.Generic, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.PetFountain, DeviceType.Fan, DeviceType.Humidifier, DeviceType.Climate, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.MediaPlayer, DeviceType.WaterHeater, DeviceType.Humidifier, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.PetFeeder, DeviceType.Heater, DeviceType.MediaPlayer;
 var NUMBER = {
 	kind: "fixed",
 	result: ["number"]
@@ -50774,6 +50923,7 @@ method(InstancePinSchema, DeviceExportStatusSchema), method(_void(), array(Expor
 	kind: "mutation",
 	auth: "admin"
 });
+var DeviceAliasSchema = string().max(64).regex(/^[a-z][a-z0-9_]*$/);
 /**
 * A SITE ZONE — a named part of the property that several locations belong to.
 *
@@ -51167,6 +51317,12 @@ var DeviceInfoSchema = object({
 	addonId: string(),
 	type: _enum(DeviceType),
 	name: string(),
+	/** The name a value template uses for this device (`{{ stufa_veranda.temperature }}`),
+	*  entity_id style. Generated once from the name at first registration, unique
+	*  cluster-wide, editable through `setAlias`, NOT changed by a rename (D1021).
+	*  Optional: a record produced by an older build omits it until the boot
+	*  backfill has run. */
+	alias: DeviceAliasSchema.optional(),
 	/** Operator-organisational location label. `null` when unset. */
 	location: string().nullable(),
 	/** Soft-disabled flag. */
@@ -51486,6 +51642,25 @@ method(object({
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	deviceId: number(),
+	alias: string()
+}), discriminatedUnion("ok", [object({
+	ok: literal(true),
+	alias: DeviceAliasSchema
+}), object({
+	ok: literal(false),
+	reason: _enum([
+		"empty",
+		"too-long",
+		"grammar",
+		"reserved",
+		"taken"
+	]),
+	takenBy: number().optional()
+})]), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	deviceId: number(),
 	location: string().nullable()
@@ -54511,7 +54686,7 @@ method(_void(), array(IntegrationWithStateSchema)), method(object({ id: string()
 * or the redaction token KEEPS the stored secret; `{ $secretClear: true }`
 * clears it.
 */
-var ConfigSchemaPassthrough$3 = custom();
+var ConfigSchemaPassthrough$2 = custom();
 var IntegrationInstanceIdSchema = string().min(1);
 var IntegrationInstanceModeSchema = _enum(["single", "multiple"]);
 /**
@@ -54557,7 +54732,16 @@ var IntegrationInstanceKindSchema = object({
 	/** Relative hub path to start an interactive account link of an instance of this kind. */
 	connectPath: string().min(1).optional(),
 	/** Relative hub path to disconnect that account. */
-	disconnectPath: string().min(1).optional()
+	disconnectPath: string().min(1).optional(),
+	/**
+	* Parts of the edit dialog the flat form cannot draw (a node picker, a model source), named by a
+	* GENERIC widget id the client maps to a component; a client that knows none of them shows none.
+	* `connection` widgets write connection values, `model` widgets own the model choice.
+	*/
+	widgets: array(object({
+		id: string().min(1),
+		placement: _enum(["connection", "model"])
+	})).optional()
 });
 /**
 * How devices of an instance are found. `none`: the operator adds them by hand; `lan`: the addon
@@ -54598,10 +54782,11 @@ var IntegrationInstanceDescriptionSchema = object({
 	/** True when `testInstance` really probes the remote. */
 	canTest: boolean(),
 	/**
-	* The kinds an instance can be of. Absent or one entry: nothing to choose; more than one: the
-	* Add flow asks which first and sends it as `createInstance.kind`.
+	* The kinds an instance can be of (D1013 rule 1), each naming its `functionCap`. One entry:
+	* nothing to choose; more than one: the Add flow asks which first and sends it as
+	* `createInstance.kind`. Never empty: every instance belongs to exactly one kind.
 	*/
-	kinds: array(IntegrationInstanceKindSchema).optional(),
+	kinds: array(IntegrationInstanceKindSchema).min(1),
 	/**
 	* The provider accepts `createInstance.id` for an id that once existed (an adopted id, because
 	* devices carry it). The UI then offers "restore under its old id" on Add. Absent means no.
@@ -54637,8 +54822,8 @@ var IntegrationInstanceSchema = object({
 	* the body is the one store, `setInstanceEnabled` the one writer (epic #440, step 3).
 	*/
 	enabled: boolean().optional(),
-	/** The kind of this instance (one of `describe().kinds[].id`), when the provider has kinds. */
-	kind: string().optional(),
+	/** The kind of this instance: exactly one of `describe().kinds[].id` (D1013 rule 2). */
+	kind: string().min(1),
 	/** Values for the instance form; a secret is a `SecretFieldView`, never text. */
 	formValues: record(string(), unknown()),
 	status: IntegrationInstanceStatusSchema.optional(),
@@ -54662,7 +54847,7 @@ var integrationInstancesCapability = {
 			id: IntegrationInstanceIdSchema.nullable(),
 			/** The kind of the create form (`id: null`) of a provider with several. */
 			kind: string().min(1).optional()
-		}), ConfigSchemaPassthrough$3, { auth: "admin" }),
+		}), ConfigSchemaPassthrough$2, { auth: "admin" }),
 		listInstances: method(_void(), array(IntegrationInstanceSchema).readonly(), { auth: "admin" }),
 		getInstance: method(object({ id: IntegrationInstanceIdSchema }), IntegrationInstanceSchema.nullable(), { auth: "admin" }),
 		/**
@@ -55613,12 +55798,12 @@ var LlmModelInfoSchema = object({
 });
 /**
 * The provider-specific part of a profile, validated by the provider that owns
-* the kind (`upsertProfile` refuses what it does not accept). A field its
+* the kind (saving an instance refuses what it does not accept). A field its
 * `connectionSchema` declares `type: 'password'` is a secret: it is held in the
 * keychain, never in the row, and reads back as the redaction marker.
 */
 var LlmProviderConfigSchema = record(string(), unknown());
-var LlmProfileSchema = object({
+object({
 	id: string(),
 	name: string(),
 	/** The provider-declared kind (`LlmProfileKindDescriptor.kind`). */
@@ -55712,8 +55897,8 @@ var LlmProviderWidgetSchema = object({
 /** ConfigUISchema tree passed through untyped on the wire (the
 *  notification-output `ConfigSchemaPassthrough` precedent at
 *  notification-output.cap.ts:151); the exported TS type re-tightens it. */
-var ConfigSchemaPassthrough$2 = unknown();
-var LlmProfileKindDescriptorSchema = object({
+var ConfigSchemaPassthrough$1 = unknown();
+object({
 	kind: LlmProfileKindSchema,
 	label: string(),
 	/** A generic icon name (`cloud`, `plug`, `cpu`) — never a glyph or a logo. */
@@ -55721,9 +55906,9 @@ var LlmProfileKindDescriptorSchema = object({
 	/** Stamped by each provider so the concat-fanned catalog stays routable. */
 	addonId: string(),
 	/** The provider's own fields (`providerConfig`); `password` fields are keychain-held. */
-	connectionSchema: ConfigSchemaPassthrough$2,
+	connectionSchema: ConfigSchemaPassthrough$1,
 	/** Provider fields that belong under "Advanced" (extra headers, runtime tuning). */
-	advancedSchema: ConfigSchemaPassthrough$2.optional(),
+	advancedSchema: ConfigSchemaPassthrough$1.optional(),
 	/** The kind's defaults; a model from `listModels` may override any of them. */
 	features: LlmModelFeaturesSchema,
 	/** `false` = the provider stamps `supportsVision` itself (from what a node reports). */
@@ -55852,20 +56037,7 @@ method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
 }), method(object({
 	addonId: string().optional(),
 	requestId: string()
-}), _void(), { kind: "mutation" }), method(object({}), array(LlmProfileKindDescriptorSchema)), method(object({}), array(LlmProfileSchema)), method(object({ profile: LlmProfileSchema }), LlmProfileSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(RawSecretMigrationInputSchema, RawSecretMigrationReportSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(ProfileRefInputSchema, _void(), {
-	kind: "mutation",
-	auth: "admin"
-}), method(ProfileRefInputSchema, LlmGenerateResultSchema, {
-	kind: "mutation",
-	auth: "admin",
-	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
-}), method(LlmListModelsInputSchema, LlmListModelsResultSchema, {
+}), _void(), { kind: "mutation" }), method(LlmListModelsInputSchema, LlmListModelsResultSchema, {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({}), array(LlmDefaultSchema)), method(object({
@@ -56860,20 +57032,7 @@ method(_void(), MeshStatusSchema), method(object({
 /** Optional hostname override the host should advertise once joined. */
 hostname: string().optional() }), object({ 
 /** Authentication URL the operator should open in a browser. */
-loginUrl: string() }), { kind: "mutation" }), method(_void(), object({ left: literal(true) }), { kind: "mutation" }), method(_void(), object({ loggedOut: literal(true) }), { kind: "mutation" }), method(_void(), object({ peers: array(MeshPeerSchema).readonly() })), method(object({ 
-/** Optional auth key — when provided, probes the key validity
-*  against the provider's API. Omit when already joined to
-*  just ping the daemon. */
-authKey: string().optional() }), object({
-	ok: boolean(),
-	/** Provider-side identifier resolved by the probe (tailnet
-	*  name for Tailscale, network id for ZeroTier, etc.). */
-	tenant: string().optional(),
-	/** Daemon binary version, when reachable. */
-	daemonVersion: string().optional(),
-	/** Human-readable error when `ok: false`. */
-	error: string().optional()
-}), { kind: "mutation" });
+loginUrl: string() }), { kind: "mutation" }), method(_void(), object({ left: literal(true) }), { kind: "mutation" }), method(_void(), object({ loggedOut: literal(true) }), { kind: "mutation" }), method(_void(), object({ peers: array(MeshPeerSchema).readonly() }));
 object({
 	value: number().nullable().meta(readingMeta("device", { label: "Total" })),
 	lastFetchedAt: number()
@@ -64234,6 +64393,11 @@ var NcScheduleSchema = object({
 * as a STATE SUMMARY at the end of each window of `schedule`.
 */
 var NcSystemEventDeliveryModeSchema = _enum(["instant", "summary"]);
+_enum([
+	"activation",
+	"deactivation",
+	"schedule"
+]);
 /**
 * How a summary window is SENT (D698): `rule` (absent) = ONE notification with
 * every section; `section` = one notification per section with something to
@@ -64250,11 +64414,26 @@ var NcStateSummarySplitSchema = _enum(["rule", "section"]);
 * midnight crossing); the send time is each window's END. Refused on the
 * `alarm` family, which stays instant (`systemEventDeliveryProblems`).
 */
-var NcSystemEventDeliverySchema = discriminatedUnion("mode", [object({ mode: literal("instant") }), object({
-	mode: literal("summary"),
-	schedule: NcScheduleSchema,
-	split: NcStateSummarySplitSchema.optional()
-})]);
+var NcSystemEventDeliverySchema = discriminatedUnion("mode", [
+	object({ mode: literal("instant") }),
+	object({
+		mode: literal("summary"),
+		schedule: NcScheduleSchema,
+		split: NcStateSummarySplitSchema.optional()
+	}),
+	object({
+		mode: literal("modes"),
+		/** The bad edge, and every kind that has a single edge. */
+		onActivation: boolean(),
+		/** The recovery edges of the classes of the selected kinds (derived, never stored per kind). */
+		onDeactivation: boolean(),
+		/** A state summary at the end of each window; absent = no summary. */
+		onSchedule: object({
+			schedule: NcScheduleSchema,
+			grouping: NcStateSummarySplitSchema
+		}).optional()
+	})
+]);
 /** Fuzzy plate matcher — OCR noise makes exact match useless (spec row 12/13). */
 var NcPlateMatcherSchema = object({
 	/**
@@ -66531,61 +66710,6 @@ var OauthIntegrationDescriptorSchema = object({
 });
 method(_void(), OauthIntegrationDescriptorSchema, { auth: "admin" });
 /**
-* `oidc-connections` — CRUD for IdP rows under `auth-oidc` (D828 sibling).
-*
-* One hub-only singleton (`auth-oidc`). The Settings UI is a DataTable +
-* ItemFormDialog; there is no `editable-array` in `globalSettingsSchema`.
-* Operator-chosen `id` is the URL slug (`/addon/auth-oidc/<id>/…`) and is
-* immutable after create.
-*/
-var ConfigSchemaPassthrough$1 = unknown();
-var OidcConnectionSchema = object({
-	id: string().min(1),
-	displayName: string(),
-	icon: string(),
-	issuerUrl: string(),
-	clientId: string(),
-	/** Client id + secret present — never the secret value. */
-	configured: boolean(),
-	/**
-	* Values for the connection form schema. `clientSecret` is a keychain
-	* {@link SecretFieldView} or `null` / `''`, never plaintext (D789).
-	*/
-	formValues: record(string(), unknown()).optional()
-});
-/**
-* Patch one connection. Omitted or empty `clientSecret` keeps the stored
-* secret (D787). `{ $secretClear: true }` clears it. `id` is never renamed.
-*/
-var OidcConnectionUpdateInputSchema = object({
-	id: string().min(1),
-	displayName: string().min(1),
-	icon: string().optional(),
-	issuerUrl: string().optional(),
-	clientId: string().optional(),
-	clientSecret: union([string(), object({ $secretClear: literal(true) })]).optional(),
-	redirectUri: string().optional(),
-	scopes: string().optional(),
-	usernameClaim: _enum([
-		"preferred_username",
-		"email",
-		"sub"
-	]).optional()
-});
-method(object({}), ConfigSchemaPassthrough$1, { auth: "admin" }), method(object({}), array(OidcConnectionSchema).readonly(), { auth: "admin" }), method(object({
-	id: string().min(1).regex(/^[a-z0-9][a-z0-9-]{0,63}$/, "id must be a lowercase slug"),
-	displayName: string().min(1)
-}), object({ id: string() }), {
-	kind: "mutation",
-	auth: "admin"
-}), method(OidcConnectionUpdateInputSchema, object({ ok: literal(true) }), {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({ id: string().min(1) }), object({ ok: literal(true) }), {
-	kind: "mutation",
-	auth: "admin"
-});
-/**
 * Generic on-screen-display (video overlay) cap. Each camera exposes
 * a firmware-defined list of overlays (channel name, timestamp,
 * watermark, logo, …); the cap models them as a homogeneous array of
@@ -71636,6 +71760,7 @@ var RemoteLayoutComponentSchema = object({
 	});
 });
 method(object({}), array(RemoteLayoutComponentSchema), { auth: "protected" });
+DeviceType.MediaPlayer;
 var RunningStateSourceSchema = _enum(["native", "assigned"]);
 object({
 	/** null = unknown — never coerced to false (D393). */
@@ -72771,21 +72896,6 @@ method(object({
 	*/
 	ttlSec: union([number().int().positive(), literal("never")]).optional()
 }), object({ token: string() }), { auth: "admin" }), method(object({ token: string() }), SsoBridgeClaimsSchema.nullable(), { auth: "admin" });
-var ProviderListEntrySchema = discriminatedUnion("shouldSaveDiskSpace", [object({
-	providerId: string().min(1),
-	displayName: string().min(1),
-	configSchema: unknown(),
-	nodeLocal: boolean(),
-	shouldSaveDiskSpace: literal(true),
-	minFreePercent: number().min(0).max(100)
-}), object({
-	providerId: string().min(1),
-	displayName: string().min(1),
-	configSchema: unknown(),
-	nodeLocal: boolean(),
-	shouldSaveDiskSpace: literal(false),
-	minFreePercent: literal(null)
-})]);
 method(object({
 	location: StorageLocationRefSchema,
 	relativePath: string()
@@ -72847,42 +72957,7 @@ method(object({
 }), _instanceof(Uint8Array), { auth: "admin" }), method(object({ downloadId: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ type: StorageLocationTypeSchema.optional() }), array(StorageLocationSchema).readonly()), method(_void(), array(StorageLocationDeclarationSchema).readonly()), method(StorageLocationSchema.omit({
-	createdAt: true,
-	updatedAt: true
-}), StorageLocationSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({
-	id: string(),
-	force: boolean().optional()
-}), _void(), {
-	kind: "mutation",
-	auth: "admin"
-}), method(_void(), array(StorageDrainProgressSchema).readonly()), method(object({ id: string() }), object({
-	ok: boolean(),
-	error: string().optional()
-}), { auth: "admin" }), method(_void(), array(ProviderListEntrySchema).readonly()), method(object({
-	providerId: string(),
-	/**
-	* The location this config is an UNSAVED edit of, when there is one.
-	*
-	* `listLocations` replaces every declared secret with the redaction
-	* sentinel, so the edit modal's form state holds the sentinel for any
-	* credential the operator did not retype — and posting that here
-	* without a way to resolve it makes the provider try to authenticate
-	* as `__camstack_redacted__` and report the operator's own working
-	* password as wrong. Given this id, the orchestrator restores each
-	* sentinel from the stored config (same rule as `upsertLocation`)
-	* before dispatching. Omitted by the "Add location" wizard, where
-	* every value was typed just now and nothing is stored yet.
-	*/
-	locationId: string().optional(),
-	config: record(string(), unknown())
-}), object({
-	ok: boolean(),
-	error: string().optional()
-}), { auth: "admin" });
+}), method(object({ type: StorageLocationTypeSchema.optional() }), array(StorageLocationSchema).readonly()), method(_void(), array(StorageLocationDeclarationSchema).readonly()), method(_void(), array(StorageDrainProgressSchema).readonly());
 /** One table of the settings database. */
 var StorageTableSchema = object({
 	/** The table's full name, e.g. `recorder:addon-settings` or `addon-device-settings`. */
@@ -74113,7 +74188,7 @@ var TerminalInstanceInfoSchema = object({
 	/**
 	* False while the node the instance is bound to is not in the cluster
 	* topology (forgotten, renamed, re-paired). The instance is kept; the
-	* operator re-points it with `updateInstance({ targetNodeId })`.
+	* operator re-points it on the Terminal page.
 	*/
 	nodeInCluster: boolean(),
 	profileId: string(),
@@ -74151,41 +74226,7 @@ var TerminalOutputBatchSchema = object({
 	snapshot: string().optional(),
 	events: array(TerminalOutputEventSchema).readonly()
 });
-method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }), method(_void(), array(TerminalInstanceInfoSchema).readonly(), { auth: "admin" }), method(object({
-	targetNodeId: string().min(1),
-	profileId: string().min(1),
-	name: string().trim().min(1).max(160).optional(),
-	executable: string().max(1024).optional(),
-	args: array(string().max(2048)).max(64).optional(),
-	cwd: string().max(1024).optional(),
-	environment: array(string().max(4096)).max(64).optional(),
-	profileSettings: ProfileSettingsBagSchema.optional()
-}), TerminalInstanceInfoSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({
-	instanceId: string().min(1),
-	/** Re-point the instance to another node; the profile must exist there. */
-	targetNodeId: string().min(1).max(256).optional(),
-	name: string().trim().min(1).max(160).optional(),
-	executable: string().max(1024).optional(),
-	args: array(string().max(2048)).max(64).optional(),
-	cwd: string().max(1024).optional(),
-	environment: array(string().max(4096)).max(64).optional(),
-	profileSettings: ProfileSettingsBagSchema.optional()
-}), TerminalInstanceInfoSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({ instanceId: string().min(1) }), _void(), {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({
-	instanceId: string().min(1),
-	enabled: boolean()
-}), TerminalInstanceInfoSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(_void(), array(TerminalLegacyCameraSchema).readonly(), { auth: "admin" }), method(object({
+method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }), method(_void(), array(TerminalLegacyCameraSchema).readonly(), { auth: "admin" }), method(object({
 	stableId: string().min(1),
 	name: string().trim().min(1).max(160).optional()
 }), TerminalInstanceInfoSchema, {
@@ -74254,6 +74295,11 @@ var TimedRunUnitSchema = _enum(["s", "min"]);
 _enum(["switch", "pet-fountain"]);
 DeviceType.Heater, DeviceType.PetFountain;
 DeviceType.Heater, DeviceType.PetFountain;
+/** One duration, as the one-tap run asks for it. */
+var TimedRunQuickRunSchema = object({
+	duration: number().positive().finite(),
+	unit: TimedRunUnitSchema
+});
 /** Why a request was not carried out. Typed, so a caller can say it in words. */
 var TimedRunRefusalSchema = _enum([
 	"unsupported-device",
@@ -74274,9 +74320,30 @@ object({
 	activeUntil: number().nullable(),
 	/** Who asked for the run (a user id or an addon id); `null` when nothing is armed or it did not say. */
 	requestedBy: string().nullable(),
+	/**
+	* The one-tap run of THIS device: what a "Run" button on any surface starts. `null` when
+	* the device is gone or its type has no timed run; a status from before this field
+	* existed has none, and a surface falls back to the type's default.
+	*/
+	quickRun: TimedRunQuickRunSchema.nullable(),
 	lastFetchedAt: number()
 });
-method(object({
+/** What the settings form needs: the unit, the bounds and the type's default. */
+var TimedRunOptionsSchema = object({
+	unit: TimedRunUnitSchema,
+	/** The longest run, in `unit`. */
+	maxDuration: number(),
+	defaultDuration: number()
+});
+/** The one-tap run duration, in the type's unit; `null` returns to the type's default. */
+var TimedRunSettingsPatchSchema = object({ quickRunDuration: number().positive().finite().nullable().optional() });
+method(object({ deviceId: number().int() }), TimedRunOptionsSchema), method(object({
+	deviceId: number().int(),
+	settings: TimedRunSettingsPatchSchema
+}), _void(), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
 	deviceId: number().int(),
 	duration: number().positive().finite(),
 	unit: TimedRunUnitSchema
@@ -76982,21 +77049,28 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"addonSettings.getGlobalSettings": {
+	"addonSettings.getIntegrationFormSchema": {
+		capName: "addon-settings",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
+	"addonSettings.getScopedSettings": {
 		capName: "addon-settings",
 		capScope: "system",
 		addonId: null,
 		access: "view",
 		role: "admin"
 	},
-	"addonSettings.getIntegrationFormSchema": {
+	"addonSettings.listScopedSettings": {
 		capName: "addon-settings",
 		capScope: "system",
 		addonId: null,
 		access: "view",
 		role: "admin"
 	},
-	"addonSettings.getIntegrationSettings": {
+	"addonSettings.readScopedValues": {
 		capName: "addon-settings",
 		capScope: "system",
 		addonId: null,
@@ -77017,7 +77091,7 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
-	"addonSettings.updateGlobalSettings": {
+	"addonSettings.updateScopedSettings": {
 		capName: "addon-settings",
 		capScope: "system",
 		addonId: null,
@@ -79187,6 +79261,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"deviceManager.setAlias": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"deviceManager.setChildLayout": {
 		capName: "device-manager",
 		capScope: "system",
@@ -80475,13 +80556,6 @@ Object.freeze({
 		access: "delete",
 		role: "admin"
 	},
-	"llm.deleteProfile": {
-		capName: "llm",
-		capScope: "system",
-		addonId: null,
-		access: "delete",
-		role: "admin"
-	},
 	"llm.generate": {
 		capName: "llm",
 		capScope: "system",
@@ -80545,20 +80619,6 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"llm.listProfileKinds": {
-		capName: "llm",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
-	"llm.listProfiles": {
-		capName: "llm",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
 	"llm.listRuntimeNodes": {
 		capName: "llm",
 		capScope: "system",
@@ -80566,13 +80626,6 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"llm.migrateRawSecrets": {
-		capName: "llm",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
 	"llm.resolveModelRef": {
 		capName: "llm",
 		capScope: "system",
@@ -80601,20 +80654,6 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
-	"llm.testProfile": {
-		capName: "llm",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
-	"llm.upsertProfile": {
-		capName: "llm",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
 	"llmRuntime.appleAvailability": {
 		capName: "llm-runtime",
 		capScope: "system",
@@ -81119,13 +81158,6 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
-	"meshNetwork.testConnection": {
-		capName: "mesh-network",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
 	"meter.getStatus": {
 		capName: "meter",
 		capScope: "device",
@@ -81784,13 +81816,6 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
-	"notificationOutput.deleteTarget": {
-		capName: "notification-output",
-		capScope: "system",
-		addonId: null,
-		access: "delete",
-		role: "admin"
-	},
 	"notificationOutput.discoverTargets": {
 		capName: "notification-output",
 		capScope: "system",
@@ -81798,13 +81823,6 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"notificationOutput.getTarget": {
-		capName: "notification-output",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
 	"notificationOutput.listTargetKinds": {
 		capName: "notification-output",
 		capScope: "system",
@@ -81812,13 +81830,6 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"notificationOutput.listTargets": {
-		capName: "notification-output",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
 	"notificationOutput.probeTargetConfig": {
 		capName: "notification-output",
 		capScope: "system",
@@ -81833,13 +81844,6 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
-	"notificationOutput.setTargetEnabled": {
-		capName: "notification-output",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
 	"notificationOutput.testTarget": {
 		capName: "notification-output",
 		capScope: "system",
@@ -81847,13 +81851,6 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
-	"notificationOutput.upsertTarget": {
-		capName: "notification-output",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
 	"notificationRules.activateAlarmProfile": {
 		capName: "notification-rules",
 		capScope: "system",
@@ -82113,41 +82110,6 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"oidcConnections.connectionFormSchema": {
-		capName: "oidc-connections",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
-	"oidcConnections.createConnection": {
-		capName: "oidc-connections",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
-	"oidcConnections.deleteConnection": {
-		capName: "oidc-connections",
-		capScope: "system",
-		addonId: null,
-		access: "delete",
-		role: "admin"
-	},
-	"oidcConnections.listConnections": {
-		capName: "oidc-connections",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
-	"oidcConnections.updateConnection": {
-		capName: "oidc-connections",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
 	"osd.getStatus": {
 		capName: "osd",
 		capScope: "device",
@@ -85179,13 +85141,6 @@ Object.freeze({
 		access: "delete",
 		role: "admin"
 	},
-	"storage.deleteLocation": {
-		capName: "storage",
-		capScope: "system",
-		addonId: null,
-		access: "delete",
-		role: "admin"
-	},
 	"storage.endDownload": {
 		capName: "storage",
 		capScope: "system",
@@ -85242,13 +85197,6 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"storage.listProviders": {
-		capName: "storage",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
 	"storage.read": {
 		capName: "storage",
 		capScope: "system",
@@ -85270,27 +85218,6 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"storage.testConfig": {
-		capName: "storage",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
-	"storage.testLocation": {
-		capName: "storage",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
-	"storage.upsertLocation": {
-		capName: "storage",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
 	"storage.write": {
 		capName: "storage",
 		capScope: "system",
@@ -86068,27 +85995,6 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
-	"terminalSession.createInstance": {
-		capName: "terminal-session",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
-	"terminalSession.deleteInstance": {
-		capName: "terminal-session",
-		capScope: "system",
-		addonId: null,
-		access: "delete",
-		role: "admin"
-	},
-	"terminalSession.listInstances": {
-		capName: "terminal-session",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
 	"terminalSession.listLegacyCameras": {
 		capName: "terminal-session",
 		capScope: "system",
@@ -86131,20 +86037,6 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
-	"terminalSession.setInstanceEnabled": {
-		capName: "terminal-session",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
-	"terminalSession.updateInstance": {
-		capName: "terminal-session",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
 	"terminalSession.writeInput": {
 		capName: "terminal-session",
 		capScope: "system",
@@ -86159,6 +86051,13 @@ Object.freeze({
 		access: "create",
 		role: "viewer"
 	},
+	"timedRun.getOptions": {
+		capName: "timed-run",
+		capScope: "device",
+		addonId: null,
+		access: "view",
+		role: "viewer"
+	},
 	"timedRun.getStatus": {
 		capName: "timed-run",
 		capScope: "device",
@@ -86173,6 +86072,13 @@ Object.freeze({
 		access: "create",
 		role: "viewer"
 	},
+	"timedRun.setSettings": {
+		capName: "timed-run",
+		capScope: "device",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"toast.onToast": {
 		capName: "toast",
 		capScope: "system",
@@ -87103,6 +87009,7 @@ function offered(received) {
 	};
 }
 offered(HA_AS), withheld(HOMEKIT_REASON), withheld(ALEXA_REASON), withheld(GOOGLE_REASON), withheld(MATTER_REASON);
+string().min(1).max(4096);
 Object.freeze({
 	"accessories.getStatus": [{
 		name: "deviceId",
@@ -87786,6 +87693,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.setAlias": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceManager.setChildLayout": [{
 		name: "deviceId",
 		form: "single",
@@ -89850,6 +89762,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"timedRun.getOptions": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"timedRun.getStatus": [{
 		name: "deviceId",
 		form: "single",
@@ -89860,6 +89777,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"timedRun.setSettings": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"update.getStatus": [{
 		name: "deviceId",
 		form: "single",
@@ -90722,6 +90644,7 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
+	[...RULE_TEXT],
 	[...RULE_BODY_ONLY],
 	[...RULE_TEXT],
 	([...RULE_TEXT], [...DEVICE_EVENTS]),
@@ -91843,222 +91766,6 @@ var GoogleBrokerRegistry = class {
 	}
 };
 //#endregion
-//#region src/google-settings-copy.ts
-/**
-* Operator-facing setup copy for Connectivity → Calendars / Email.
-* Keep Connect as a same-origin relative link so the admin session cookie
-* rides along (an absolute Public URL from a LAN admin tab drops the cookie).
-* Root-relative hrefs must survive `sanitizeInfoHtml` in ui-library.
-*/
-/** Enable APIs library in Google Cloud Console. */
-var GOOGLE_CONSOLE_APIS_URL = "https://console.cloud.google.com/apis/library";
-/** Create / manage OAuth Web clients. */
-var GOOGLE_CONSOLE_CREDENTIALS_URL = "https://console.cloud.google.com/apis/credentials";
-function redirectUriDisplay(publicOrigin) {
-	if (publicOrigin === null || publicOrigin.length === 0) return `<public-hub>${OAUTH_CALLBACK_SUFFIX}`;
-	return `${publicOrigin.replace(/\/$/, "")}${OAUTH_CALLBACK_SUFFIX}`;
-}
-function consoleLinksHtml$1() {
-	return [
-		`<a href="${GOOGLE_CONSOLE_APIS_URL}">API library</a>`,
-		` · `,
-		`<a href="${GOOGLE_CONSOLE_CREDENTIALS_URL}">Credentials</a>`
-	].join("");
-}
-function introHtml(cap, publicOrigin) {
-	const redirect = escapeHtml$1(redirectUriDisplay(publicOrigin));
-	const console = consoleLinksHtml$1();
-	if (cap === "smtp-provider") return [
-		"<ol>",
-		`<li>Open Google Cloud Console (${console}) and enable the <strong>Gmail API</strong> (and Calendar API if you also use Calendars).</li>`,
-		"<li>Under Credentials, create an OAuth client of type <strong>Web application</strong>.</li>",
-		`<li>Add this authorized redirect URI (Network → <strong>Public endpoint</strong>, not Internal): <code>${redirect}</code></li>`,
-		"<li>Paste Client ID and Client secret below, then <strong>Save</strong>.</li>",
-		`<li>Open <a href="${OAUTH_START_PATH}">Connect Google</a> while signed in as admin (same browser tab as this hub).</li>`,
-		"<li>Set From address (connected account or a verified send-as). Turn this integration off with the page <strong>Enable</strong> toggle when you do not want Gmail send — Calendar can stay connected.</li>",
-		"</ol>"
-	].join("");
-	if (cap === "calendar-source") return [
-		"<ol>",
-		`<li>Open Google Cloud Console (${console}) and enable the <strong>Google Calendar API</strong> (and Gmail API if you also use Email).</li>`,
-		"<li>Under Credentials, create an OAuth client of type <strong>Web application</strong>.</li>",
-		`<li>Add this authorized redirect URI (Network → <strong>Public endpoint</strong>, not Internal): <code>${redirect}</code></li>`,
-		"<li>Paste Client ID and Client secret below, then <strong>Save</strong>.</li>",
-		`<li>Open <a href="${OAUTH_START_PATH}">Connect Google</a> while signed in as admin (same browser tab as this hub).</li>`,
-		"<li>Optionally restrict which calendars are exposed with the filter below.</li>",
-		"</ol>"
-	].join("");
-	return [
-		"<ol>",
-		`<li>Open Google Cloud Console (${console}) and enable <strong>Google Calendar API</strong> and <strong>Gmail API</strong>.</li>`,
-		"<li>Create a <strong>Web application</strong> OAuth client under Credentials.</li>",
-		`<li>Register redirect URI: <code>${redirect}</code> (Network → Public endpoint).</li>`,
-		`<li>Paste Client ID / secret, Save, then <a href="${OAUTH_START_PATH}">Connect Google</a>.</li>`,
-		"<li>Calendars and Email share one Google account; use each page’s <strong>Enable</strong> toggle to turn a capability off without revoking OAuth.</li>",
-		"</ol>"
-	].join("");
-}
-function connectHtml(cap, publicOrigin) {
-	const redirect = escapeHtml$1(redirectUriDisplay(publicOrigin));
-	if (cap === "smtp-provider") return [
-		`After Save, open <a href="${OAUTH_START_PATH}">Connect Google</a> in this hub (admin session required). `,
-		"Connect requests <code>gmail.send</code> (and Calendar read for the Calendars page). ",
-		`Google must list exactly: <code>${redirect}</code>. `,
-		"If an older Connect predates Gmail send, revoke CamStack in Google Account → Security and Connect again. ",
-		`Console: ${consoleLinksHtml$1()}.`
-	].join("");
-	if (cap === "calendar-source") return [
-		`After Save, open <a href="${OAUTH_START_PATH}">Connect Google</a> in this hub (admin session required). `,
-		"Connect requests <code>calendar.readonly</code> (and Gmail send for the Email page). ",
-		`Google must list exactly: <code>${redirect}</code>. `,
-		`Console: ${consoleLinksHtml$1()}.`
-	].join("");
-	return [
-		`After Save, open <a href="${OAUTH_START_PATH}">Connect Google</a>. `,
-		`Redirect URI registered in Google Cloud must be <code>${redirect}</code>. `,
-		`Console: ${consoleLinksHtml$1()}.`
-	].join("");
-}
-function escapeHtml$1(s) {
-	return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
-}
-//#endregion
-//#region src/google-broker-settings-schema.ts
-/**
-* Per-kind broker creation/edit form for kind=`google`.
-* Account linking (Sign in) is driven by the kind's `connectPath`
-* on the instances page — not a hard-coded Connect link in this form.
-*/
-function consoleLinksHtml() {
-	return [
-		`<a href="${GOOGLE_CONSOLE_APIS_URL}">API library</a>`,
-		` · `,
-		`<a href="${GOOGLE_CONSOLE_CREDENTIALS_URL}">Credentials</a>`
-	].join("");
-}
-/** Setup steps shown on Add / Edit — includes Audience / Test users. */
-function googleBrokerSetupHtml(publicOrigin) {
-	const redirect = escapeHtml(redirectUriDisplay(publicOrigin));
-	return [
-		"<ol>",
-		`<li>Open Google Cloud Console (${consoleLinksHtml()}). Create a <strong>new project</strong> (or pick an existing one) from the project picker at the top.</li>`,
-		"<li>In that project, enable <strong>Google Calendar API</strong> and/or <strong>Gmail API</strong> (API library).</li>",
-		"<li>Open <strong>Google Auth Platform → Audience</strong> (or APIs &amp; Services → OAuth consent screen → <strong>Audience</strong>). User type <strong>External</strong> + publishing status <strong>Testing</strong> is fine for a personal hub. Under <strong>Test users</strong>, add the Google account(s) that will Sign in — otherwise Google returns <code>403: access_denied</code>. (If you only see Branding / Data Access, open the <strong>Audience</strong> tab in the left sidebar of Google Auth Platform.) Publishing / verification is optional for a private hub.</li>",
-		"<li>Under Credentials, create an OAuth client of type <strong>Web application</strong>.</li>",
-		`<li>Add this authorized redirect URI (Network → <strong>Public endpoint</strong>, not Internal): <code>${redirect}</code></li>`,
-		"<li>Paste Client ID and Client secret below. <strong>Test connection</strong> checks those with Google (not the account yet).</li>",
-		"<li>Add the broker — the hub then opens Google sign-in in a popup to link the account (Calendar + Gmail). Use <strong>Sign in</strong> on the row if you skip or cancel.</li>",
-		"</ol>"
-	].join("");
-}
-function buildGoogleBrokerSettingsSchema(publicOrigin) {
-	return { sections: [
-		{
-			id: "setup-intro",
-			title: "Setup",
-			titleKey: "google-services:googleBrokerSettings.s_setup-intro.title",
-			description: "Google Cloud Console — register the hub redirect before Add / Sign in.",
-			descriptionKey: "google-services:googleBrokerSettings.s_setup-intro.description",
-			columns: 1,
-			fields: [{
-				type: "info",
-				key: "_setupSteps",
-				label: "Steps",
-				labelKey: "google-services:googleBrokerSettings.s_setup-intro._setupSteps.label",
-				format: "html",
-				content: googleBrokerSetupHtml(publicOrigin)
-			}]
-		},
-		{
-			id: "google-oauth-client",
-			title: "Google OAuth client",
-			titleKey: "google-services:googleBrokerSettings.s_google-oauth-client.title",
-			description: "Web application client from Google Cloud Console. The same Cloud project can be reused across Google brokers.",
-			descriptionKey: "google-services:googleBrokerSettings.s_google-oauth-client.description",
-			columns: 1,
-			fields: [{
-				type: "text",
-				key: "clientId",
-				label: "Client ID",
-				labelKey: "google-services:googleBrokerSettings.s_google-oauth-client.clientId.label"
-			}, {
-				type: "password",
-				key: "clientSecret",
-				label: "Client secret",
-				labelKey: "google-services:googleBrokerSettings.s_google-oauth-client.clientSecret.label",
-				showToggle: true
-			}]
-		},
-		{
-			id: "gmail-send",
-			title: "Gmail send",
-			titleKey: "google-services:googleBrokerSettings.s_gmail-send.title",
-			description: "From must be this connected account or a verified send-as. Disable Email on Connectivity to turn Gmail off without removing the broker.",
-			descriptionKey: "google-services:googleBrokerSettings.s_gmail-send.description",
-			columns: 1,
-			fields: [{
-				type: "text",
-				key: "fromAddress",
-				label: "From address",
-				labelKey: "google-services:googleBrokerSettings.s_gmail-send.fromAddress.label",
-				description: "Defaults to the connected Google account email when empty.",
-				descriptionKey: "google-services:googleBrokerSettings.s_gmail-send.fromAddress.description"
-			}, {
-				type: "text",
-				key: "fromName",
-				label: "From display name (optional)",
-				labelKey: "google-services:googleBrokerSettings.s_gmail-send.fromName.label"
-			}]
-		}
-	] };
-}
-/** Connectivity Calendars / Email pages — the calendar import picker is on each broker. */
-function buildGoogleFeatureSettingsSchema(cap, publicOrigin) {
-	const redirect = escapeHtml(redirectUriDisplay(publicOrigin));
-	if (cap === "calendar-source") return { sections: [{
-		id: "setup-intro",
-		title: "Google brokers",
-		titleKey: "google-services:googleFeatureSettings.s_setup-intro.title",
-		columns: 1,
-		fields: [{
-			type: "info",
-			key: "_setupSteps",
-			label: "Setup",
-			labelKey: "google-services:googleFeatureSettings.s_setup-intro._setupSteps.label",
-			format: "html",
-			content: [
-				"<p>Link a Google account under Connectivity → <strong>Brokers</strong> ",
-				"(Client ID / secret + Sign in), then add a calendar under Connectivity → <strong>Calendars</strong>. ",
-				`OAuth redirect URI: <code>${redirect}</code>.</p>`
-			].join("")
-		}]
-	}] };
-	return { sections: [{
-		id: "setup-intro",
-		title: cap === "smtp-provider" ? "Gmail send uses Google brokers" : "Google brokers",
-		columns: 1,
-		fields: [{
-			type: "info",
-			key: "_setupSteps",
-			label: "Setup",
-			labelKey: "google-services:googleFeatureSettings._setupSteps.label",
-			format: "html",
-			content: cap === "smtp-provider" ? [
-				"<p>Add or edit a <strong>Google</strong> broker under Connectivity → <strong>Brokers</strong> ",
-				"(Client ID / secret + Sign in). From address and send-as live on that broker. ",
-				`OAuth redirect URI: <code>${redirect}</code>.</p>`
-			].join("") : [
-				"<p>Add or edit a <strong>Google</strong> broker under Connectivity → <strong>Brokers</strong> ",
-				"(Client ID / secret + Sign in). ",
-				`OAuth redirect URI: <code>${redirect}</code>.</p>`
-			].join("")
-		}]
-	}] };
-}
-function escapeHtml(s) {
-	return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
-}
-//#endregion
 //#region src/google-calendar-source.ts
 function parseGoogleInstant(value) {
 	const ms = Date.parse(value);
@@ -92555,7 +92262,13 @@ function buildGoogleCalendarInstances(records, deps) {
 			role: "services",
 			instanceMode: "multiple",
 			kind: GOOGLE_CALENDAR_INSTANCE_KIND,
-			canTest: false
+			canTest: false,
+			kinds: [{
+				id: GOOGLE_CALENDAR_INSTANCE_KIND,
+				label: "Google calendar",
+				functionCap: "calendar-source",
+				role: "services"
+			}]
 		},
 		labels: { accountId: {
 			label: "Google account",
@@ -92579,6 +92292,179 @@ function buildGoogleCalendarInstances(records, deps) {
 	});
 }
 //#endregion
+//#region src/google-settings-copy.ts
+/**
+* Operator-facing setup copy for Connectivity → Calendars / Email.
+* Keep Connect as a same-origin relative link so the admin session cookie
+* rides along (an absolute Public URL from a LAN admin tab drops the cookie).
+* Root-relative hrefs must survive `sanitizeInfoHtml` in ui-library.
+*/
+/** Enable APIs library in Google Cloud Console. */
+var GOOGLE_CONSOLE_APIS_URL = "https://console.cloud.google.com/apis/library";
+/** Create / manage OAuth Web clients. */
+var GOOGLE_CONSOLE_CREDENTIALS_URL = "https://console.cloud.google.com/apis/credentials";
+function redirectUriDisplay(publicOrigin) {
+	if (publicOrigin === null || publicOrigin.length === 0) return `<public-hub>${OAUTH_CALLBACK_SUFFIX}`;
+	return `${publicOrigin.replace(/\/$/, "")}${OAUTH_CALLBACK_SUFFIX}`;
+}
+function consoleLinksHtml$1() {
+	return [
+		`<a href="${GOOGLE_CONSOLE_APIS_URL}">API library</a>`,
+		` · `,
+		`<a href="${GOOGLE_CONSOLE_CREDENTIALS_URL}">Credentials</a>`
+	].join("");
+}
+function introHtml(cap, publicOrigin) {
+	const redirect = escapeHtml$1(redirectUriDisplay(publicOrigin));
+	const console = consoleLinksHtml$1();
+	if (cap === "smtp-provider") return [
+		"<ol>",
+		`<li>Open Google Cloud Console (${console}) and enable the <strong>Gmail API</strong> (and Calendar API if you also use Calendars).</li>`,
+		"<li>Under Credentials, create an OAuth client of type <strong>Web application</strong>.</li>",
+		`<li>Add this authorized redirect URI (Network → <strong>Public endpoint</strong>, not Internal): <code>${redirect}</code></li>`,
+		"<li>Paste Client ID and Client secret below, then <strong>Save</strong>.</li>",
+		`<li>Open <a href="${OAUTH_START_PATH}">Connect Google</a> while signed in as admin (same browser tab as this hub).</li>`,
+		"<li>Set From address (connected account or a verified send-as). Turn this integration off with the page <strong>Enable</strong> toggle when you do not want Gmail send — Calendar can stay connected.</li>",
+		"</ol>"
+	].join("");
+	if (cap === "calendar-source") return [
+		"<ol>",
+		`<li>Open Google Cloud Console (${console}) and enable the <strong>Google Calendar API</strong> (and Gmail API if you also use Email).</li>`,
+		"<li>Under Credentials, create an OAuth client of type <strong>Web application</strong>.</li>",
+		`<li>Add this authorized redirect URI (Network → <strong>Public endpoint</strong>, not Internal): <code>${redirect}</code></li>`,
+		"<li>Paste Client ID and Client secret below, then <strong>Save</strong>.</li>",
+		`<li>Open <a href="${OAUTH_START_PATH}">Connect Google</a> while signed in as admin (same browser tab as this hub).</li>`,
+		"<li>Optionally restrict which calendars are exposed with the filter below.</li>",
+		"</ol>"
+	].join("");
+	return [
+		"<ol>",
+		`<li>Open Google Cloud Console (${console}) and enable <strong>Google Calendar API</strong> and <strong>Gmail API</strong>.</li>`,
+		"<li>Create a <strong>Web application</strong> OAuth client under Credentials.</li>",
+		`<li>Register redirect URI: <code>${redirect}</code> (Network → Public endpoint).</li>`,
+		`<li>Paste Client ID / secret, Save, then <a href="${OAUTH_START_PATH}">Connect Google</a>.</li>`,
+		"<li>Calendars and Email share one Google account; use each page’s <strong>Enable</strong> toggle to turn a capability off without revoking OAuth.</li>",
+		"</ol>"
+	].join("");
+}
+function connectHtml(cap, publicOrigin) {
+	const redirect = escapeHtml$1(redirectUriDisplay(publicOrigin));
+	if (cap === "smtp-provider") return [
+		`After Save, open <a href="${OAUTH_START_PATH}">Connect Google</a> in this hub (admin session required). `,
+		"Connect requests <code>gmail.send</code> (and Calendar read for the Calendars page). ",
+		`Google must list exactly: <code>${redirect}</code>. `,
+		"If an older Connect predates Gmail send, revoke CamStack in Google Account → Security and Connect again. ",
+		`Console: ${consoleLinksHtml$1()}.`
+	].join("");
+	if (cap === "calendar-source") return [
+		`After Save, open <a href="${OAUTH_START_PATH}">Connect Google</a> in this hub (admin session required). `,
+		"Connect requests <code>calendar.readonly</code> (and Gmail send for the Email page). ",
+		`Google must list exactly: <code>${redirect}</code>. `,
+		`Console: ${consoleLinksHtml$1()}.`
+	].join("");
+	return [
+		`After Save, open <a href="${OAUTH_START_PATH}">Connect Google</a>. `,
+		`Redirect URI registered in Google Cloud must be <code>${redirect}</code>. `,
+		`Console: ${consoleLinksHtml$1()}.`
+	].join("");
+}
+function escapeHtml$1(s) {
+	return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+//#endregion
+//#region src/google-broker-settings-schema.ts
+/**
+* Per-kind broker creation/edit form for kind=`google`.
+* Account linking (Sign in) is driven by the kind's `connectPath`
+* on the instances page — not a hard-coded Connect link in this form.
+*/
+function consoleLinksHtml() {
+	return [
+		`<a href="${GOOGLE_CONSOLE_APIS_URL}">API library</a>`,
+		` · `,
+		`<a href="${GOOGLE_CONSOLE_CREDENTIALS_URL}">Credentials</a>`
+	].join("");
+}
+/** Setup steps shown on Add / Edit — includes Audience / Test users. */
+function googleBrokerSetupHtml(publicOrigin) {
+	const redirect = escapeHtml(redirectUriDisplay(publicOrigin));
+	return [
+		"<ol>",
+		`<li>Open Google Cloud Console (${consoleLinksHtml()}). Create a <strong>new project</strong> (or pick an existing one) from the project picker at the top.</li>`,
+		"<li>In that project, enable <strong>Google Calendar API</strong> and/or <strong>Gmail API</strong> (API library).</li>",
+		"<li>Open <strong>Google Auth Platform → Audience</strong> (or APIs &amp; Services → OAuth consent screen → <strong>Audience</strong>). User type <strong>External</strong> + publishing status <strong>Testing</strong> is fine for a personal hub. Under <strong>Test users</strong>, add the Google account(s) that will Sign in — otherwise Google returns <code>403: access_denied</code>. (If you only see Branding / Data Access, open the <strong>Audience</strong> tab in the left sidebar of Google Auth Platform.) Publishing / verification is optional for a private hub.</li>",
+		"<li>Under Credentials, create an OAuth client of type <strong>Web application</strong>.</li>",
+		`<li>Add this authorized redirect URI (Network → <strong>Public endpoint</strong>, not Internal): <code>${redirect}</code></li>`,
+		"<li>Paste Client ID and Client secret below. <strong>Test connection</strong> checks those with Google (not the account yet).</li>",
+		"<li>Add the broker — the hub then opens Google sign-in in a popup to link the account (Calendar + Gmail). Use <strong>Sign in</strong> on the row if you skip or cancel.</li>",
+		"</ol>"
+	].join("");
+}
+function buildGoogleBrokerSettingsSchema(publicOrigin) {
+	return { sections: [
+		{
+			id: "setup-intro",
+			title: "Setup",
+			titleKey: "google-services:googleBrokerSettings.s_setup-intro.title",
+			description: "Google Cloud Console — register the hub redirect before Add / Sign in.",
+			descriptionKey: "google-services:googleBrokerSettings.s_setup-intro.description",
+			columns: 1,
+			fields: [{
+				type: "info",
+				key: "_setupSteps",
+				label: "Steps",
+				labelKey: "google-services:googleBrokerSettings.s_setup-intro._setupSteps.label",
+				format: "html",
+				content: googleBrokerSetupHtml(publicOrigin)
+			}]
+		},
+		{
+			id: "google-oauth-client",
+			title: "Google OAuth client",
+			titleKey: "google-services:googleBrokerSettings.s_google-oauth-client.title",
+			description: "Web application client from Google Cloud Console. The same Cloud project can be reused across Google brokers.",
+			descriptionKey: "google-services:googleBrokerSettings.s_google-oauth-client.description",
+			columns: 1,
+			fields: [{
+				type: "text",
+				key: "clientId",
+				label: "Client ID",
+				labelKey: "google-services:googleBrokerSettings.s_google-oauth-client.clientId.label"
+			}, {
+				type: "password",
+				key: "clientSecret",
+				label: "Client secret",
+				labelKey: "google-services:googleBrokerSettings.s_google-oauth-client.clientSecret.label",
+				showToggle: true
+			}]
+		},
+		{
+			id: "gmail-send",
+			title: "Gmail send",
+			titleKey: "google-services:googleBrokerSettings.s_gmail-send.title",
+			description: "From must be this connected account or a verified send-as. Disable Email on Connectivity to turn Gmail off without removing the broker.",
+			descriptionKey: "google-services:googleBrokerSettings.s_gmail-send.description",
+			columns: 1,
+			fields: [{
+				type: "text",
+				key: "fromAddress",
+				label: "From address",
+				labelKey: "google-services:googleBrokerSettings.s_gmail-send.fromAddress.label",
+				description: "Defaults to the connected Google account email when empty.",
+				descriptionKey: "google-services:googleBrokerSettings.s_gmail-send.fromAddress.description"
+			}, {
+				type: "text",
+				key: "fromName",
+				label: "From display name (optional)",
+				labelKey: "google-services:googleBrokerSettings.s_gmail-send.fromName.label"
+			}]
+		}
+	] };
+}
+function escapeHtml(s) {
+	return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+//#endregion
 //#region src/google-instances.ts
 /**
 * The Google accounts as `integration-instances` (planning#408 P3): one instance per broker
@@ -92615,7 +92501,8 @@ function buildGoogleInstances(records, deps) {
 			instanceMode: "multiple",
 			kind: "account",
 			canTest: true,
-			allowRestoreId: true
+			allowRestoreId: true,
+			kinds: [googleAccountKind(deps)]
 		},
 		formSchema: () => buildGoogleBrokerSettingsSchema(deps.publicOrigin()),
 		initialBody: (name) => ({
@@ -93865,21 +93752,6 @@ var GoogleServicesAddon = class extends BaseAddon {
 			this.publicOrigin = null;
 		}
 	}
-	/**
-	* Connectivity Calendars / Email: point at Brokers (no duplicate OAuth fields).
-	* Addon page without cap: same pointer + note.
-	*/
-	globalSettingsSchema(cap) {
-		const scoped = asSettingsCap(cap);
-		return this.schema(buildGoogleFeatureSettingsSchema(scoped, this.publicOrigin));
-	}
-	async getGlobalSettings(overlay, cap, nodeId) {
-		await this.refreshPublicOrigin();
-		return super.getGlobalSettings(overlay, cap, nodeId);
-	}
 };
-function asSettingsCap(cap) {
-	if (cap === "calendar-source" || cap === "smtp-provider") return cap;
-}
 //#endregion
-export { GOOGLE_OAUTH_SCOPES as C, GoogleServicesAddon, GoogleServicesAddon as default, GOOGLE_GMAIL_SEND_SCOPE as S, OAUTH_START_PATH as T, GoogleBrokerRegistry as _, refreshAccessToken as a, DEFAULT_GOOGLE_CONFIG as b, selectGmailAccount as c, mapGoogleEvent as d, GOOGLE_CONSOLE_APIS_URL as f, redirectUriDisplay as g, introHtml as h, needsRefresh as i, createGoogleCalendarApi as l, connectHtml as m, buildAuthorizeUrl as n, buildRawMime as o, GOOGLE_CONSOLE_CREDENTIALS_URL as p, exchangeCode as r, createGmailSmtpProvider as s, applyTokenResponse as t, createGoogleCalendarSource as u, parseStampedCalendarId as v, GoogleServicesConfigSchema as w, GOOGLE_BROKER_KIND as x, stampCalendarId as y };
+export { GOOGLE_OAUTH_SCOPES as C, GoogleServicesAddon, GoogleServicesAddon as default, GOOGLE_GMAIL_SEND_SCOPE as S, OAUTH_START_PATH as T, GoogleBrokerRegistry as _, redirectUriDisplay as a, DEFAULT_GOOGLE_CONFIG as b, exchangeCode as c, buildRawMime as d, createGmailSmtpProvider as f, mapGoogleEvent as g, createGoogleCalendarSource as h, introHtml as i, needsRefresh as l, createGoogleCalendarApi as m, GOOGLE_CONSOLE_CREDENTIALS_URL as n, applyTokenResponse as o, selectGmailAccount as p, connectHtml as r, buildAuthorizeUrl as s, GOOGLE_CONSOLE_APIS_URL as t, refreshAccessToken as u, parseStampedCalendarId as v, GoogleServicesConfigSchema as w, GOOGLE_BROKER_KIND as x, stampCalendarId as y };