@camstack/addon-provider-bosch 0.1.52 → 0.1.53

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.1.53] - 2026-11-12
+
+### Changed
+
+- Event devices declare their event vocabulary; each event is listed under its native name for now
+
 ## [0.1.52] - 2026-11-11
 
 ### Changed

package/dist/{account-integration-offline-BEzGeJcl.js → account-integration-offline-C-KJYRdX.js}

@@ -1,4 +1,4 @@
-const require_bosch_instances = require("./bosch-instances-LWbVnsaD.js");
+const require_bosch_instances = require("./bosch-instances-dqTG9no9.js");
 let node_crypto = require("node:crypto");
 //#region src/shared/sign-in-redirects.ts
 /** The addresses each vendor sends the browser to after a sign-in; no browser can open them. Kept free of imports so the form schema can name them. */

package/dist/{account-integration-offline-D5vjmfia.mjs → account-integration-offline-KQcJ_VVK.mjs}

@@ -1,4 +1,4 @@
-import { $ as errMsg } from "./bosch-instances-DSE6IXdU.mjs";
+import { et as errMsg } from "./bosch-instances-y_A00js_.mjs";
 import { randomBytes } from "node:crypto";
 //#region src/shared/sign-in-redirects.ts
 /** The addresses each vendor sends the browser to after a sign-in; no browser can open them. Kept free of imports so the form schema can name them. */

package/dist/{bosch-instances-LWbVnsaD.js → bosch-instances-dqTG9no9.js}

@@ -6044,7 +6044,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-Bn346wCJ.mjs
+//#region ../types/dist/sleep-D0roI_CZ.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -16242,6 +16242,10 @@ Object.freeze({
 			"path": "lastEvent.eventType",
 			"valueType": "string"
 		},
+		{
+			"path": "lastEvent.sourceId",
+			"valueType": "string"
+		},
 		{
 			"path": "lastEvent.timestamp",
 			"valueType": "number"
@@ -44800,9 +44804,12 @@ function convertLegacyWhen(half) {
 * every caller — automations, Actions, and the notification centre, which runs
 * only Actions (planning#473).
 */
+/** The longest one `wait` step lasts. It is cut by a restart of the run and does not survive a hub restart. */
+var WAIT_MAX_SECONDS = 3600;
+var WAIT_TOO_LONG = `a wait is at most one hour (${WAIT_MAX_SECONDS} s)`;
 var AutomationWaitStepSchema = object({
 	kind: literal("wait"),
-	seconds: number$1().min(0).max(300)
+	seconds: number$1().min(0).max(WAIT_MAX_SECONDS, WAIT_TOO_LONG)
 });
 /** The legacy `deviceId` of a cap step: still READ, never written (D983). */
 var LegacyStepDeviceSchema = union([
@@ -44872,39 +44879,227 @@ var elseNeedsIf = {
 	path: ["else"]
 };
 var GuardedWaitStepSchema = AutomationWaitStepSchema.extend(stepGuardShape).refine((step) => step.else === void 0 || step.if !== void 0, elseNeedsIf);
-var GuardedCapStepSchema = AutomationCapStepBaseSchema.extend(stepGuardShape).refine((step) => step.target !== void 0 || step.deviceId !== void 0, {
-	message: "a cap step needs a target",
-	path: ["target"]
-}).refine((step) => step.target?.kind !== "domain" || step.actionId !== void 0, {
-	message: "a domain target needs the vocabulary action it applies to (actionId)",
-	path: ["actionId"]
-}).refine((step) => step.else === void 0 || step.if !== void 0, elseNeedsIf);
 /**
 * A step of a STANDALONE list (an action, a scheduler point, a preset): the
 * same two step kinds an automation runs, minus a guard that reads the
 * automation's trigger, which such a list does not have.
 */
-var ActionStepSchema = discriminatedUnion("kind", [GuardedWaitStepSchema, GuardedCapStepSchema]).superRefine((step, ctx) => {
+var ActionStepSchema = discriminatedUnion("kind", [GuardedWaitStepSchema, AutomationCapStepBaseSchema.extend(stepGuardShape).refine((step) => step.target !== void 0 || step.deviceId !== void 0, {
+	message: "a cap step needs a target",
+	path: ["target"]
+}).refine((step) => step.target?.kind !== "domain" || step.actionId !== void 0, {
+	message: "a domain target needs the vocabulary action it applies to (actionId)",
+	path: ["actionId"]
+}).refine((step) => step.else === void 0 || step.if !== void 0, elseNeedsIf)]).superRefine((step, ctx) => {
 	if (step.if !== void 0 && hasTriggeredByLeaves(step.if)) ctx.addIssue({
 		code: "custom",
 		message: TRIGGERED_BY_NEEDS_AUTOMATION,
 		path: ["if"]
 	});
 });
+/**
+* Flow control of an AUTOMATION's list (#500). A standalone list (an action, a
+* scheduler point, a preset) stays `wait` and `cap`: it has no run of its own
+* to end and no variable bag to write.
+*/
+var continueOnErrorShape = { 
+/** A failure of this step is traced `failed-continued` and the next step runs. */
+continueOnError: literal(true).optional() };
+/** An automation's cap step: the shared guarded cap step, plus `continueOnError`. */
+var AutomationGuardedCapStepSchema = AutomationCapStepBaseSchema.extend({
+	...stepGuardShape,
+	...continueOnErrorShape
+}).refine((step) => step.target !== void 0 || step.deviceId !== void 0, {
+	message: "a cap step needs a target",
+	path: ["target"]
+}).refine((step) => step.target?.kind !== "domain" || step.actionId !== void 0, {
+	message: "a domain target needs the vocabulary action it applies to (actionId)",
+	path: ["actionId"]
+}).refine((step) => step.else === void 0 || step.if !== void 0, elseNeedsIf);
+/** End the run here, on purpose. `reason` may carry `{{vars.x}}` slots. */
+var AutomationStopStepSchema = object({
+	kind: literal("stop"),
+	reason: string().min(1, "a stop needs a reason: it is what the run trace shows").max(200),
+	/** `ok`: the run ends as a success. `failed`: it ends as a failure, with the reason. */
+	outcome: _enum(["ok", "failed"]),
+	/** Stop only when this reads true; false or unknown does not stop. */
+	if: AutomationWhenSchema.optional()
+});
+var SET_VAR_NAME_RE = /^[A-Za-z_][A-Za-z0-9_]{0,39}$/;
+/** Names the run itself writes and reads (`leaf` is what `triggered-by` judges): a step may not overwrite them. */
+var RESERVED_RUN_VARS = [
+	"kind",
+	"leaf",
+	"at"
+];
+/**
+* Write variables into the run's bag, for the steps after it. SUBSTITUTION
+* only, never evaluation: a text value may carry `{{vars.x}}` slots.
+*/
+var AutomationSetStepSchema = object({
+	kind: literal("set"),
+	vars: record(string(), union([
+		string().max(500),
+		number$1(),
+		boolean()
+	])).refine((vars) => Object.keys(vars).every((name) => SET_VAR_NAME_RE.test(name)), { message: "a variable name is letters, digits and _, not starting with a digit (max 40)" }).refine((vars) => Object.keys(vars).length >= 1, { message: "set needs at least one variable" }).refine((vars) => Object.keys(vars).length <= 20, { message: `set holds at most 20 variables` }).refine((vars) => Object.keys(vars).every((name) => !RESERVED_RUN_VARS.includes(name)), { message: `the names ${RESERVED_RUN_VARS.join(", ")} belong to the run and cannot be set` }),
+	/** Set only when this reads true; false or unknown leaves the bag as it is. */
+	if: AutomationWhenSchema.optional()
+});
+var AutomationRunActionStepSchema = object({
+	kind: literal("action"),
+	/** An entry of the `actions` surface (`internal:<uuid>` or `<addonId>:<localId>`). */
+	actionId: string().min(1),
+	/** Values for the action's declared variables; the others take their default. */
+	variables: record(string(), union([
+		string(),
+		number$1(),
+		boolean()
+	])).optional(),
+	...continueOnErrorShape
+});
+/**
+* A step INSIDE a branch of a `choose`: a flow step with no condition of its
+* own (the branch is the condition) and no block inside it. Strict, so an `if`
+* written on such a step is refused rather than dropped.
+*/
+/** The longest a `wait-until` may wait: six hours. */
+var WAIT_UNTIL_TIMEOUT_MAX_S = 21600;
+/**
+* Pause the run until a condition is true (#500). The timeout is mandatory: a
+* run never waits without an end. `onTimeout` says what a wait that ran out
+* does: `continue` goes on to the next step, `stop` ends the run as a failure.
+* A condition that cannot be read is not "true": the wait goes on (D49).
+*/
+var AutomationWaitUntilStepSchema = object({
+	kind: literal("wait-until"),
+	when: AutomationWhenSchema,
+	timeoutS: number$1().int().min(1, "a wait needs a timeout of at least one second").max(WAIT_UNTIL_TIMEOUT_MAX_S, `a wait for a condition is at most six hours (${WAIT_UNTIL_TIMEOUT_MAX_S} s)`),
+	onTimeout: _enum(["continue", "stop"])
+}).strict();
+/** The step kinds that hold steps of their own, or pause on a condition: they nest two levels at most. */
+var BLOCK_STEP_KINDS = [
+	"choose",
+	"repeat",
+	"parallel",
+	"wait-until"
+];
+var NEST_TOO_DEEP = `steps nest two levels at most: a step inside a nested choose or repeat can be a plain step only`;
+function kindOf(input) {
+	return typeof input === "object" && input !== null ? Reflect.get(input, "kind") : void 0;
+}
+/** Where the nesting ends, a block step is refused in words rather than as an unknown kind. */
+function nestTooDeep(issue) {
+	const kind = kindOf(issue.input);
+	return typeof kind === "string" && BLOCK_STEP_KINDS.includes(kind) ? NEST_TOO_DEEP : void 0;
+}
+var plainStepSchemas = [
+	AutomationWaitStepSchema.strict(),
+	AutomationCapStepBaseSchema.extend(continueOnErrorShape).strict().refine((step) => step.target !== void 0 || step.deviceId !== void 0, {
+		message: "a cap step needs a target",
+		path: ["target"]
+	}).refine((step) => step.target?.kind !== "domain" || step.actionId !== void 0, {
+		message: "a domain target needs the vocabulary action it applies to (actionId)",
+		path: ["actionId"]
+	}),
+	AutomationStopStepSchema.omit({ if: true }).strict(),
+	AutomationSetStepSchema.omit({ if: true }).strict(),
+	AutomationRunActionStepSchema.strict()
+];
+/**
+* A plain step: a flow step with no condition of its own and no step inside
+* it. The second (last) level of nesting holds these only.
+*/
+var AutomationBranchStepSchema = discriminatedUnion("kind", plainStepSchemas, { error: nestTooDeep });
+/** A step that can run beside others: it writes no variable and does not end the run. */
+var AutomationParallelMemberSchema = AutomationBranchStepSchema.refine((step) => step.kind === "cap" || step.kind === "action" || step.kind === "wait", "a parallel holds device commands, actions and waits only: a set or a stop beside other steps has no order");
+/**
+* Several steps at once (#500): all are started together and all are awaited.
+* A failure fails the run once the others finished, as in a sequence; a member
+* marked "continue if this fails" does not.
+*/
+var AutomationParallelStepSchema = object({
+	kind: literal("parallel"),
+	steps: array(AutomationParallelMemberSchema).min(2, "a parallel needs at least two steps").max(5, `a parallel takes at most 5 steps`)
+}).strict();
+var REPEAT_NEEDS_MAX = "a repeat on a condition needs a maximum number of iterations";
+/** A loop on a condition: the bound is mandatory, so a run never loops without an end. */
+var repeatConditionShape = {
+	when: AutomationWhenSchema,
+	maxIterations: number$1({ error: REPEAT_NEEDS_MAX }).int().min(1, REPEAT_NEEDS_MAX).max(50, `a repeat on a condition runs at most 50 times`),
+	/** A pause between two iterations, never after the last. */
+	waitS: number$1().int().min(1).max(WAIT_MAX_SECONDS, WAIT_TOO_LONG).optional()
+};
+/** What decides how many times a `repeat` runs. */
+var AutomationRepeatLoopSchema = discriminatedUnion("by", [
+	object({
+		by: literal("count"),
+		count: number$1().int().min(1).max(20, `a repeat runs at most 20 times`)
+	}).strict(),
+	object({
+		by: literal("while"),
+		...repeatConditionShape
+	}).strict(),
+	object({
+		by: literal("until"),
+		...repeatConditionShape
+	}).strict(),
+	object({
+		by: literal("forEach"),
+		target: object({
+			kind: literal("devices"),
+			ids: array(number$1().int()).min(1, "a repeat over devices needs at least one device").max(50, `a repeat over devices takes at most 50 devices`)
+		}).strict()
+	}).strict()
+]);
+/**
+* The same steps several times (#500). Every form is bounded at save, so a
+* run cannot loop without an end. A failure or a `stop` in the steps ends the
+* loop and the run, as in a sequence.
+*/
+function repeatSchemaOf(step) {
+	return object({
+		kind: literal("repeat"),
+		loop: AutomationRepeatLoopSchema,
+		steps: array(step).min(1, "a repeat needs at least one step").max(10, `a repeat takes at most 10 steps`)
+	}).strict();
+}
+/**
+* One step, several ways (#500): the branches are read in order and the FIRST
+* whose condition is true runs; `else` runs when every branch is false. A
+* branch that cannot be read ends the choice: nothing runs, not the branches
+* after it and not the else (D49). The #472 `if` / `else` of a wait or cap
+* step is the one-branch case and stays as it is stored.
+*/
+function chooseSchemaOf(step) {
+	const steps = array(step).max(10);
+	return object({
+		kind: literal("choose"),
+		branches: array(object({
+			if: AutomationWhenSchema,
+			steps: steps.min(1, "a branch needs at least one step")
+		})).min(1, "a choose needs at least one branch").max(6, `a choose takes at most 6 branches`),
+		else: steps.optional()
+	});
+}
+var AutomationBodyStepSchema = discriminatedUnion("kind", [
+	...plainStepSchemas,
+	AutomationWaitUntilStepSchema,
+	AutomationParallelStepSchema,
+	chooseSchemaOf(AutomationBranchStepSchema),
+	repeatSchemaOf(AutomationBranchStepSchema)
+]);
+var AutomationRepeatStepSchema = repeatSchemaOf(AutomationBodyStepSchema);
 var AutomationActionSchema = discriminatedUnion("kind", [
 	GuardedWaitStepSchema,
-	GuardedCapStepSchema,
-	object({
-		kind: literal("action"),
-		/** An entry of the `actions` surface (`internal:<uuid>` or `<addonId>:<localId>`). */
-		actionId: string().min(1),
-		/** Values for the action's declared variables; the others take their default. */
-		variables: record(string(), union([
-			string(),
-			number$1(),
-			boolean()
-		])).optional()
-	}),
+	AutomationGuardedCapStepSchema,
+	AutomationStopStepSchema,
+	AutomationSetStepSchema,
+	chooseSchemaOf(AutomationBodyStepSchema),
+	AutomationWaitUntilStepSchema,
+	AutomationParallelStepSchema,
+	AutomationRepeatStepSchema,
+	AutomationRunActionStepSchema,
 	object({
 		kind: literal("code"),
 		/** Compiled into the automation's OWN block by esbuild — not a third
@@ -44967,11 +45162,6 @@ function convertLegacyRecipe(legacy) {
 		...rest
 	};
 }
-/**
-* Where recipes are PARSED (the core-blocks cap, the MCP tool, the literal a
-* saved block carries): the new shape as it is, or the old shape converted to
-* it. The output type is always the new one.
-*/
 var AutomationRecipeSchema = union([CurrentAutomationRecipeSchema, LegacyAutomationRecipeSchema.transform(convertLegacyRecipe)]);
 var DETECTION_DESCRIPTIONS = {
 	deviceId: "the camera that saw it",
@@ -45056,12 +45246,16 @@ var HoldOverrideSchema = discriminatedUnion("mode", [object({ mode: literal("res
 })]);
 /** A missed edge up to this late still runs. */
 var DEFAULT_MAX_LATE_MS = 10 * 6e4;
+var SchedulerStepSchema = ActionStepSchema.refine((step) => step.kind !== "wait" || step.seconds <= 300, {
+	message: `a scheduler point waits at most five minutes (300 s); put a longer wait in an action`,
+	path: ["seconds"]
+});
 var SchedulerPointSchema = object({
 	id: string().min(1).max(64),
 	at: SchedulerTimeSpecSchema,
 	mode: SchedulerPointModeSchema,
 	/** The actions of an `edge` or `hold`; a `release` has none. */
-	steps: array(ActionStepSchema).max(20).default([]),
+	steps: array(SchedulerStepSchema).max(20).default([]),
 	/** Checked when the point runs (an edge) or is applied (a hold). */
 	conditions: SchedulerStateTreeSchema.optional(),
 	/** Hold only; absent means `respect`. */
@@ -45329,18 +45523,46 @@ var StepTraceBaseSchema = object({
 	]).optional(),
 	/** Why the condition read what it read, in the evaluator's own words. */
 	conditionReason: string().optional(),
-	/** `empty`: the target resolved to no device, so nothing was done — never silently `ok`. `skipped`: its `if` was false (or unknown) and nothing ran in its place. */
+	/** `empty`: the target resolved to no device, so nothing was done — never silently `ok`. `skipped`: its `if` was false (or unknown) and nothing ran in its place. `failed-continued`: it failed and was marked to be passed over (#500). */
 	outcome: _enum([
 		"ok",
 		"error",
 		"not-run",
 		"empty",
-		"skipped"
+		"skipped",
+		"failed-continued",
+		"timed-out"
 	]),
 	message: string().optional()
 });
+/** What a block step adds to its row: which list ran, what each branch read, how many rounds. */
+var blockTraceShape = {
+	/** A `choose` step (#500): the list that ran, `branches.<n>` or `else`. Absent when none did. */
+	branch: string().optional(),
+	/** A `choose` step: what each branch read, in order, up to the one that decided. */
+	branchChecks: array(object({
+		condition: _enum([
+			"true",
+			"false",
+			"unknown"
+		]),
+		conditionReason: string().optional()
+	})).optional(),
+	/** A `repeat` step (#500): how many times its steps ran. */
+	iterations: number$1().int().optional()
+};
+/** A step one level down: it may be a block step itself, whose own steps are plain rows (the nesting ends there). */
+var NestedStepTraceSchema = StepTraceBaseSchema.extend({
+	...blockTraceShape,
+	steps: array(StepTraceBaseSchema).optional()
+});
 /** A step trace; the `else` steps that ran are one level of the same shape (the nesting is bounded at one). */
-var AutomationStepTraceSchema = StepTraceBaseSchema.extend({ else: array(StepTraceBaseSchema).optional() });
+var AutomationStepTraceSchema = StepTraceBaseSchema.extend({
+	else: array(StepTraceBaseSchema).optional(),
+	...blockTraceShape,
+	/** A `choose` step: the steps of the list that ran. A `parallel`: its members. A `repeat`: the LAST iteration. */
+	steps: array(NestedStepTraceSchema).optional()
+});
 var AutomationRunTraceSchema = object({
 	runId: string().min(1),
 	startedAt: number$1(),
@@ -45747,7 +45969,9 @@ var AddonHttpRouteSchema = object({
 	]).optional(),
 	description: string().optional(),
 	/** The hub limits this route per client address before the handler runs. */
-	rateLimit: _enum(["auth"]).optional()
+	rateLimit: _enum(["auth"]).optional(),
+	/** Served once per integration instance; the handler reads `instanceId`. */
+	perInstance: boolean().optional()
 });
 /**
 * Cross-process route invocation envelope. The hub captures the
@@ -45764,6 +45988,8 @@ var InvokeRequestSchema = object({
 	query: record(string(), string()),
 	body: unknown(),
 	headers: record(string(), string()),
+	/** The instance the hub resolved for a `perInstance` route. */
+	instanceId: string().optional(),
 	user: object({
 		id: string(),
 		username: string(),
@@ -56435,25 +56661,81 @@ var enumSensorCapability = {
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastFetchedAt", "timestamp"]
 };
+var EventVocabularyKindSchema = _enum([
+	"press",
+	"long-press",
+	"long-press-start",
+	"release",
+	"repeat",
+	"double-press",
+	"other"
+]);
+/** The part of the device an event comes from: a button, a channel. */
+var EventVocabularySourceSchema = object({
+	id: string().min(1),
+	label: string().min(1)
+});
+/** One scalar field of an event's `data`, by dotted path. */
+var EventVocabularyFieldSchema = object({
+	path: string().min(1),
+	kind: _enum([
+		"string",
+		"number",
+		"boolean",
+		"enum"
+	]),
+	enumValues: array(string()).optional(),
+	label: string().min(1).optional()
+});
+var EventVocabularyEntrySchema = object({
+	/** The native token, verbatim. */
+	id: string().min(1),
+	source: EventVocabularySourceSchema.optional(),
+	label: string().min(1),
+	description: string().optional(),
+	kind: EventVocabularyKindSchema.optional(),
+	payload: array(EventVocabularyFieldSchema).optional()
+});
+/**
+* The vocabulary of a source that declares tokens and nothing else: one
+* entry per token, labelled with the token itself.
+*/
+function plainEventVocabulary(eventTypes) {
+	return [...new Set(eventTypes)].filter((eventType) => eventType !== "").map((eventType) => ({
+		id: eventType,
+		label: eventType
+	}));
+}
 /**
 * Generic stateless event emitter. Installed on a `DeviceType.EventEmitter`
 * device. Carries the device's EXACT declared event vocabulary verbatim
 * (NO normalization). Two shapes:
-*  - structured source (HA `event.*` entity) → `eventTypes` is the fixed
-*    declared vocabulary (e.g. ['press_short','press_long',...]).
-*  - generic/legacy source (HA bus events, e.g. zha_event) → `eventTypes`
+*  - structured source (HA `event.*` entity) → `vocabulary` is the fixed
+*    declared set (e.g. press_short, press_long, …).
+*  - generic/legacy source (HA bus events, e.g. zha_event) → `vocabulary`
 *    is [] (open) and `lastEvent.data` carries the complex payload.
+* `vocabulary` (D1044) names each event for a person and types it for a
+* rule; `eventTypes` is its list of native tokens, kept for older readers.
+* A fire names the part of the device it came from in `sourceId` when the
+* vocabulary declares sources (a remote's buttons).
 * `seq` is monotonic so two identical events still produce distinct slice writes.
 */
 var EventFireSchema = object({
 	deviceId: number$1(),
 	eventType: string(),
+	sourceId: string().optional(),
 	data: record(string(), unknown()).nullable(),
 	timestamp: number$1().meta(readingMeta("none")),
 	seq: number$1().meta(readingMeta("count"))
 });
 var EventEmitterStatusSchema = object({
 	eventTypes: array(string()),
+	/**
+	* Required of a provider by the type. A status written before the field
+	* existed still parses, as an empty vocabulary: read it through
+	* `readEventVocabulary`, which then answers with the plain tokens.
+	*/
+	vocabulary: array(EventVocabularyEntrySchema).default([]),
 	lastEvent: EventFireSchema.nullable(),
 	eventCountSinceStart: number$1().meta(readingMeta("count"))
 });
@@ -71972,7 +72254,18 @@ var OauthIntegrationDescriptorSchema = object({
 	* The value is baked into the authorization code at `/authorize` and travels
 	* on the tokens, so editing this field changes FUTURE links only.
 	*/
-	refreshTokenTtlSec: union([number$1().int().positive(), literal("never")]).optional()
+	refreshTokenTtlSec: union([number$1().int().positive(), literal("never")]).optional(),
+	/**
+	* The integration instances an account can be linked to (planning#415),
+	* beside the default one. `/api/oauth2/authorize?instance=<id>` is accepted
+	* only for an id listed here; with no `instance=` the link is made to the
+	* default instance, which is never listed and always accepted — it is the
+	* address third parties already hold. Omit for a single-instance integration.
+	*/
+	instances: array(object({
+		id: string(),
+		displayName: string()
+	})).optional()
 });
 method(_void(), OauthIntegrationDescriptorSchema, { auth: "admin" });
 /**
@@ -78909,6 +79202,13 @@ var SsoBridgeClaimsSchema = object({
 	/** OAuth authorization-code binding — set only on `oauth-code` tokens. */
 	redirectUri: string().optional(),
 	integrationId: string().optional(),
+	/**
+	* The integration INSTANCE an OAuth link was made for (planning#415). Set on
+	* `oauth-code`, `oauth-access` and `oauth-refresh` tokens of a link made
+	* with `instance=`; absent on a link to the default instance. A cloud relay
+	* reads it off the access token to route; the hub answers from the session.
+	*/
+	instanceId: string().optional(),
 	/** JWT ID — unique per issued code; consumed-set enforces single-use. */
 	jti: string().optional(),
 	/** PKCE S256 challenge — set only on `oauth-code` tokens issued to a public
@@ -81287,6 +81587,8 @@ var OauthSessionSummarySchema = object({
 	userId: string(),
 	username: string(),
 	integrationId: string(),
+	/** The instance the link was made for; `null` = the default instance. */
+	instanceId: string().nullable().optional(),
 	scopes: array(TokenScopeSchema),
 	createdAt: number$1(),
 	lastUsedAt: number$1(),
@@ -81386,6 +81688,9 @@ method(_void(), array(UserSummarySchema), { auth: "admin" }), method(_void(), ob
 	access: "view"
 }), method(object({
 	integrationId: string(),
+	/** The integration instance the link is for. Omit for the default
+	*  instance — never pass the addon id to mean it. */
+	instanceId: string().optional(),
 	userId: string(),
 	username: string(),
 	scopes: array(TokenScopeSchema),
@@ -81424,7 +81729,13 @@ method(_void(), array(UserSummarySchema), { auth: "admin" }), method(_void(), ob
 }), method(object({ token: string() }), object({
 	userId: string(),
 	username: string(),
-	scopes: array(TokenScopeSchema)
+	scopes: array(TokenScopeSchema),
+	/** The instance the link was made for, read from the SESSION.
+	*  Absent = the default instance. `oauthLinkServesInstance` is the
+	*  helper a per-instance route calls to compare it with the instance
+	*  of its path; no route declares `perInstance` yet (the Alexa
+	*  per-instance route, T3, is the first consumer). */
+	instanceId: string().optional()
 }).nullable(), { access: "view" }), method(object({ userId: string() }), array(ExternalIdentitySchema), { auth: "admin" }), method(ExternalIdentityKeySchema, object({
 	userId: string(),
 	issuer: string()
@@ -103128,6 +103439,12 @@ Object.defineProperty(exports, "object", {
 		return object;
 	}
 });
+Object.defineProperty(exports, "plainEventVocabulary", {
+	enumerable: true,
+	get: function() {
+		return plainEventVocabulary;
+	}
+});
 Object.defineProperty(exports, "powerMeterCapability", {
 	enumerable: true,
 	get: function() {

package/dist/{bosch-instances-DSE6IXdU.mjs → bosch-instances-y_A00js_.mjs}

@@ -6044,7 +6044,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-Bn346wCJ.mjs
+//#region ../types/dist/sleep-D0roI_CZ.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -16242,6 +16242,10 @@ Object.freeze({
 			"path": "lastEvent.eventType",
 			"valueType": "string"
 		},
+		{
+			"path": "lastEvent.sourceId",
+			"valueType": "string"
+		},
 		{
 			"path": "lastEvent.timestamp",
 			"valueType": "number"
@@ -44800,9 +44804,12 @@ function convertLegacyWhen(half) {
 * every caller — automations, Actions, and the notification centre, which runs
 * only Actions (planning#473).
 */
+/** The longest one `wait` step lasts. It is cut by a restart of the run and does not survive a hub restart. */
+var WAIT_MAX_SECONDS = 3600;
+var WAIT_TOO_LONG = `a wait is at most one hour (${WAIT_MAX_SECONDS} s)`;
 var AutomationWaitStepSchema = object({
 	kind: literal("wait"),
-	seconds: number$1().min(0).max(300)
+	seconds: number$1().min(0).max(WAIT_MAX_SECONDS, WAIT_TOO_LONG)
 });
 /** The legacy `deviceId` of a cap step: still READ, never written (D983). */
 var LegacyStepDeviceSchema = union([
@@ -44872,39 +44879,227 @@ var elseNeedsIf = {
 	path: ["else"]
 };
 var GuardedWaitStepSchema = AutomationWaitStepSchema.extend(stepGuardShape).refine((step) => step.else === void 0 || step.if !== void 0, elseNeedsIf);
-var GuardedCapStepSchema = AutomationCapStepBaseSchema.extend(stepGuardShape).refine((step) => step.target !== void 0 || step.deviceId !== void 0, {
-	message: "a cap step needs a target",
-	path: ["target"]
-}).refine((step) => step.target?.kind !== "domain" || step.actionId !== void 0, {
-	message: "a domain target needs the vocabulary action it applies to (actionId)",
-	path: ["actionId"]
-}).refine((step) => step.else === void 0 || step.if !== void 0, elseNeedsIf);
 /**
 * A step of a STANDALONE list (an action, a scheduler point, a preset): the
 * same two step kinds an automation runs, minus a guard that reads the
 * automation's trigger, which such a list does not have.
 */
-var ActionStepSchema = discriminatedUnion("kind", [GuardedWaitStepSchema, GuardedCapStepSchema]).superRefine((step, ctx) => {
+var ActionStepSchema = discriminatedUnion("kind", [GuardedWaitStepSchema, AutomationCapStepBaseSchema.extend(stepGuardShape).refine((step) => step.target !== void 0 || step.deviceId !== void 0, {
+	message: "a cap step needs a target",
+	path: ["target"]
+}).refine((step) => step.target?.kind !== "domain" || step.actionId !== void 0, {
+	message: "a domain target needs the vocabulary action it applies to (actionId)",
+	path: ["actionId"]
+}).refine((step) => step.else === void 0 || step.if !== void 0, elseNeedsIf)]).superRefine((step, ctx) => {
 	if (step.if !== void 0 && hasTriggeredByLeaves(step.if)) ctx.addIssue({
 		code: "custom",
 		message: TRIGGERED_BY_NEEDS_AUTOMATION,
 		path: ["if"]
 	});
 });
+/**
+* Flow control of an AUTOMATION's list (#500). A standalone list (an action, a
+* scheduler point, a preset) stays `wait` and `cap`: it has no run of its own
+* to end and no variable bag to write.
+*/
+var continueOnErrorShape = { 
+/** A failure of this step is traced `failed-continued` and the next step runs. */
+continueOnError: literal(true).optional() };
+/** An automation's cap step: the shared guarded cap step, plus `continueOnError`. */
+var AutomationGuardedCapStepSchema = AutomationCapStepBaseSchema.extend({
+	...stepGuardShape,
+	...continueOnErrorShape
+}).refine((step) => step.target !== void 0 || step.deviceId !== void 0, {
+	message: "a cap step needs a target",
+	path: ["target"]
+}).refine((step) => step.target?.kind !== "domain" || step.actionId !== void 0, {
+	message: "a domain target needs the vocabulary action it applies to (actionId)",
+	path: ["actionId"]
+}).refine((step) => step.else === void 0 || step.if !== void 0, elseNeedsIf);
+/** End the run here, on purpose. `reason` may carry `{{vars.x}}` slots. */
+var AutomationStopStepSchema = object({
+	kind: literal("stop"),
+	reason: string().min(1, "a stop needs a reason: it is what the run trace shows").max(200),
+	/** `ok`: the run ends as a success. `failed`: it ends as a failure, with the reason. */
+	outcome: _enum(["ok", "failed"]),
+	/** Stop only when this reads true; false or unknown does not stop. */
+	if: AutomationWhenSchema.optional()
+});
+var SET_VAR_NAME_RE = /^[A-Za-z_][A-Za-z0-9_]{0,39}$/;
+/** Names the run itself writes and reads (`leaf` is what `triggered-by` judges): a step may not overwrite them. */
+var RESERVED_RUN_VARS = [
+	"kind",
+	"leaf",
+	"at"
+];
+/**
+* Write variables into the run's bag, for the steps after it. SUBSTITUTION
+* only, never evaluation: a text value may carry `{{vars.x}}` slots.
+*/
+var AutomationSetStepSchema = object({
+	kind: literal("set"),
+	vars: record(string(), union([
+		string().max(500),
+		number$1(),
+		boolean()
+	])).refine((vars) => Object.keys(vars).every((name) => SET_VAR_NAME_RE.test(name)), { message: "a variable name is letters, digits and _, not starting with a digit (max 40)" }).refine((vars) => Object.keys(vars).length >= 1, { message: "set needs at least one variable" }).refine((vars) => Object.keys(vars).length <= 20, { message: `set holds at most 20 variables` }).refine((vars) => Object.keys(vars).every((name) => !RESERVED_RUN_VARS.includes(name)), { message: `the names ${RESERVED_RUN_VARS.join(", ")} belong to the run and cannot be set` }),
+	/** Set only when this reads true; false or unknown leaves the bag as it is. */
+	if: AutomationWhenSchema.optional()
+});
+var AutomationRunActionStepSchema = object({
+	kind: literal("action"),
+	/** An entry of the `actions` surface (`internal:<uuid>` or `<addonId>:<localId>`). */
+	actionId: string().min(1),
+	/** Values for the action's declared variables; the others take their default. */
+	variables: record(string(), union([
+		string(),
+		number$1(),
+		boolean()
+	])).optional(),
+	...continueOnErrorShape
+});
+/**
+* A step INSIDE a branch of a `choose`: a flow step with no condition of its
+* own (the branch is the condition) and no block inside it. Strict, so an `if`
+* written on such a step is refused rather than dropped.
+*/
+/** The longest a `wait-until` may wait: six hours. */
+var WAIT_UNTIL_TIMEOUT_MAX_S = 21600;
+/**
+* Pause the run until a condition is true (#500). The timeout is mandatory: a
+* run never waits without an end. `onTimeout` says what a wait that ran out
+* does: `continue` goes on to the next step, `stop` ends the run as a failure.
+* A condition that cannot be read is not "true": the wait goes on (D49).
+*/
+var AutomationWaitUntilStepSchema = object({
+	kind: literal("wait-until"),
+	when: AutomationWhenSchema,
+	timeoutS: number$1().int().min(1, "a wait needs a timeout of at least one second").max(WAIT_UNTIL_TIMEOUT_MAX_S, `a wait for a condition is at most six hours (${WAIT_UNTIL_TIMEOUT_MAX_S} s)`),
+	onTimeout: _enum(["continue", "stop"])
+}).strict();
+/** The step kinds that hold steps of their own, or pause on a condition: they nest two levels at most. */
+var BLOCK_STEP_KINDS = [
+	"choose",
+	"repeat",
+	"parallel",
+	"wait-until"
+];
+var NEST_TOO_DEEP = `steps nest two levels at most: a step inside a nested choose or repeat can be a plain step only`;
+function kindOf(input) {
+	return typeof input === "object" && input !== null ? Reflect.get(input, "kind") : void 0;
+}
+/** Where the nesting ends, a block step is refused in words rather than as an unknown kind. */
+function nestTooDeep(issue) {
+	const kind = kindOf(issue.input);
+	return typeof kind === "string" && BLOCK_STEP_KINDS.includes(kind) ? NEST_TOO_DEEP : void 0;
+}
+var plainStepSchemas = [
+	AutomationWaitStepSchema.strict(),
+	AutomationCapStepBaseSchema.extend(continueOnErrorShape).strict().refine((step) => step.target !== void 0 || step.deviceId !== void 0, {
+		message: "a cap step needs a target",
+		path: ["target"]
+	}).refine((step) => step.target?.kind !== "domain" || step.actionId !== void 0, {
+		message: "a domain target needs the vocabulary action it applies to (actionId)",
+		path: ["actionId"]
+	}),
+	AutomationStopStepSchema.omit({ if: true }).strict(),
+	AutomationSetStepSchema.omit({ if: true }).strict(),
+	AutomationRunActionStepSchema.strict()
+];
+/**
+* A plain step: a flow step with no condition of its own and no step inside
+* it. The second (last) level of nesting holds these only.
+*/
+var AutomationBranchStepSchema = discriminatedUnion("kind", plainStepSchemas, { error: nestTooDeep });
+/** A step that can run beside others: it writes no variable and does not end the run. */
+var AutomationParallelMemberSchema = AutomationBranchStepSchema.refine((step) => step.kind === "cap" || step.kind === "action" || step.kind === "wait", "a parallel holds device commands, actions and waits only: a set or a stop beside other steps has no order");
+/**
+* Several steps at once (#500): all are started together and all are awaited.
+* A failure fails the run once the others finished, as in a sequence; a member
+* marked "continue if this fails" does not.
+*/
+var AutomationParallelStepSchema = object({
+	kind: literal("parallel"),
+	steps: array(AutomationParallelMemberSchema).min(2, "a parallel needs at least two steps").max(5, `a parallel takes at most 5 steps`)
+}).strict();
+var REPEAT_NEEDS_MAX = "a repeat on a condition needs a maximum number of iterations";
+/** A loop on a condition: the bound is mandatory, so a run never loops without an end. */
+var repeatConditionShape = {
+	when: AutomationWhenSchema,
+	maxIterations: number$1({ error: REPEAT_NEEDS_MAX }).int().min(1, REPEAT_NEEDS_MAX).max(50, `a repeat on a condition runs at most 50 times`),
+	/** A pause between two iterations, never after the last. */
+	waitS: number$1().int().min(1).max(WAIT_MAX_SECONDS, WAIT_TOO_LONG).optional()
+};
+/** What decides how many times a `repeat` runs. */
+var AutomationRepeatLoopSchema = discriminatedUnion("by", [
+	object({
+		by: literal("count"),
+		count: number$1().int().min(1).max(20, `a repeat runs at most 20 times`)
+	}).strict(),
+	object({
+		by: literal("while"),
+		...repeatConditionShape
+	}).strict(),
+	object({
+		by: literal("until"),
+		...repeatConditionShape
+	}).strict(),
+	object({
+		by: literal("forEach"),
+		target: object({
+			kind: literal("devices"),
+			ids: array(number$1().int()).min(1, "a repeat over devices needs at least one device").max(50, `a repeat over devices takes at most 50 devices`)
+		}).strict()
+	}).strict()
+]);
+/**
+* The same steps several times (#500). Every form is bounded at save, so a
+* run cannot loop without an end. A failure or a `stop` in the steps ends the
+* loop and the run, as in a sequence.
+*/
+function repeatSchemaOf(step) {
+	return object({
+		kind: literal("repeat"),
+		loop: AutomationRepeatLoopSchema,
+		steps: array(step).min(1, "a repeat needs at least one step").max(10, `a repeat takes at most 10 steps`)
+	}).strict();
+}
+/**
+* One step, several ways (#500): the branches are read in order and the FIRST
+* whose condition is true runs; `else` runs when every branch is false. A
+* branch that cannot be read ends the choice: nothing runs, not the branches
+* after it and not the else (D49). The #472 `if` / `else` of a wait or cap
+* step is the one-branch case and stays as it is stored.
+*/
+function chooseSchemaOf(step) {
+	const steps = array(step).max(10);
+	return object({
+		kind: literal("choose"),
+		branches: array(object({
+			if: AutomationWhenSchema,
+			steps: steps.min(1, "a branch needs at least one step")
+		})).min(1, "a choose needs at least one branch").max(6, `a choose takes at most 6 branches`),
+		else: steps.optional()
+	});
+}
+var AutomationBodyStepSchema = discriminatedUnion("kind", [
+	...plainStepSchemas,
+	AutomationWaitUntilStepSchema,
+	AutomationParallelStepSchema,
+	chooseSchemaOf(AutomationBranchStepSchema),
+	repeatSchemaOf(AutomationBranchStepSchema)
+]);
+var AutomationRepeatStepSchema = repeatSchemaOf(AutomationBodyStepSchema);
 var AutomationActionSchema = discriminatedUnion("kind", [
 	GuardedWaitStepSchema,
-	GuardedCapStepSchema,
-	object({
-		kind: literal("action"),
-		/** An entry of the `actions` surface (`internal:<uuid>` or `<addonId>:<localId>`). */
-		actionId: string().min(1),
-		/** Values for the action's declared variables; the others take their default. */
-		variables: record(string(), union([
-			string(),
-			number$1(),
-			boolean()
-		])).optional()
-	}),
+	AutomationGuardedCapStepSchema,
+	AutomationStopStepSchema,
+	AutomationSetStepSchema,
+	chooseSchemaOf(AutomationBodyStepSchema),
+	AutomationWaitUntilStepSchema,
+	AutomationParallelStepSchema,
+	AutomationRepeatStepSchema,
+	AutomationRunActionStepSchema,
 	object({
 		kind: literal("code"),
 		/** Compiled into the automation's OWN block by esbuild — not a third
@@ -44967,11 +45162,6 @@ function convertLegacyRecipe(legacy) {
 		...rest
 	};
 }
-/**
-* Where recipes are PARSED (the core-blocks cap, the MCP tool, the literal a
-* saved block carries): the new shape as it is, or the old shape converted to
-* it. The output type is always the new one.
-*/
 var AutomationRecipeSchema = union([CurrentAutomationRecipeSchema, LegacyAutomationRecipeSchema.transform(convertLegacyRecipe)]);
 var DETECTION_DESCRIPTIONS = {
 	deviceId: "the camera that saw it",
@@ -45056,12 +45246,16 @@ var HoldOverrideSchema = discriminatedUnion("mode", [object({ mode: literal("res
 })]);
 /** A missed edge up to this late still runs. */
 var DEFAULT_MAX_LATE_MS = 10 * 6e4;
+var SchedulerStepSchema = ActionStepSchema.refine((step) => step.kind !== "wait" || step.seconds <= 300, {
+	message: `a scheduler point waits at most five minutes (300 s); put a longer wait in an action`,
+	path: ["seconds"]
+});
 var SchedulerPointSchema = object({
 	id: string().min(1).max(64),
 	at: SchedulerTimeSpecSchema,
 	mode: SchedulerPointModeSchema,
 	/** The actions of an `edge` or `hold`; a `release` has none. */
-	steps: array(ActionStepSchema).max(20).default([]),
+	steps: array(SchedulerStepSchema).max(20).default([]),
 	/** Checked when the point runs (an edge) or is applied (a hold). */
 	conditions: SchedulerStateTreeSchema.optional(),
 	/** Hold only; absent means `respect`. */
@@ -45329,18 +45523,46 @@ var StepTraceBaseSchema = object({
 	]).optional(),
 	/** Why the condition read what it read, in the evaluator's own words. */
 	conditionReason: string().optional(),
-	/** `empty`: the target resolved to no device, so nothing was done — never silently `ok`. `skipped`: its `if` was false (or unknown) and nothing ran in its place. */
+	/** `empty`: the target resolved to no device, so nothing was done — never silently `ok`. `skipped`: its `if` was false (or unknown) and nothing ran in its place. `failed-continued`: it failed and was marked to be passed over (#500). */
 	outcome: _enum([
 		"ok",
 		"error",
 		"not-run",
 		"empty",
-		"skipped"
+		"skipped",
+		"failed-continued",
+		"timed-out"
 	]),
 	message: string().optional()
 });
+/** What a block step adds to its row: which list ran, what each branch read, how many rounds. */
+var blockTraceShape = {
+	/** A `choose` step (#500): the list that ran, `branches.<n>` or `else`. Absent when none did. */
+	branch: string().optional(),
+	/** A `choose` step: what each branch read, in order, up to the one that decided. */
+	branchChecks: array(object({
+		condition: _enum([
+			"true",
+			"false",
+			"unknown"
+		]),
+		conditionReason: string().optional()
+	})).optional(),
+	/** A `repeat` step (#500): how many times its steps ran. */
+	iterations: number$1().int().optional()
+};
+/** A step one level down: it may be a block step itself, whose own steps are plain rows (the nesting ends there). */
+var NestedStepTraceSchema = StepTraceBaseSchema.extend({
+	...blockTraceShape,
+	steps: array(StepTraceBaseSchema).optional()
+});
 /** A step trace; the `else` steps that ran are one level of the same shape (the nesting is bounded at one). */
-var AutomationStepTraceSchema = StepTraceBaseSchema.extend({ else: array(StepTraceBaseSchema).optional() });
+var AutomationStepTraceSchema = StepTraceBaseSchema.extend({
+	else: array(StepTraceBaseSchema).optional(),
+	...blockTraceShape,
+	/** A `choose` step: the steps of the list that ran. A `parallel`: its members. A `repeat`: the LAST iteration. */
+	steps: array(NestedStepTraceSchema).optional()
+});
 var AutomationRunTraceSchema = object({
 	runId: string().min(1),
 	startedAt: number$1(),
@@ -45747,7 +45969,9 @@ var AddonHttpRouteSchema = object({
 	]).optional(),
 	description: string().optional(),
 	/** The hub limits this route per client address before the handler runs. */
-	rateLimit: _enum(["auth"]).optional()
+	rateLimit: _enum(["auth"]).optional(),
+	/** Served once per integration instance; the handler reads `instanceId`. */
+	perInstance: boolean().optional()
 });
 /**
 * Cross-process route invocation envelope. The hub captures the
@@ -45764,6 +45988,8 @@ var InvokeRequestSchema = object({
 	query: record(string(), string()),
 	body: unknown(),
 	headers: record(string(), string()),
+	/** The instance the hub resolved for a `perInstance` route. */
+	instanceId: string().optional(),
 	user: object({
 		id: string(),
 		username: string(),
@@ -56435,25 +56661,81 @@ var enumSensorCapability = {
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastFetchedAt", "timestamp"]
 };
+var EventVocabularyKindSchema = _enum([
+	"press",
+	"long-press",
+	"long-press-start",
+	"release",
+	"repeat",
+	"double-press",
+	"other"
+]);
+/** The part of the device an event comes from: a button, a channel. */
+var EventVocabularySourceSchema = object({
+	id: string().min(1),
+	label: string().min(1)
+});
+/** One scalar field of an event's `data`, by dotted path. */
+var EventVocabularyFieldSchema = object({
+	path: string().min(1),
+	kind: _enum([
+		"string",
+		"number",
+		"boolean",
+		"enum"
+	]),
+	enumValues: array(string()).optional(),
+	label: string().min(1).optional()
+});
+var EventVocabularyEntrySchema = object({
+	/** The native token, verbatim. */
+	id: string().min(1),
+	source: EventVocabularySourceSchema.optional(),
+	label: string().min(1),
+	description: string().optional(),
+	kind: EventVocabularyKindSchema.optional(),
+	payload: array(EventVocabularyFieldSchema).optional()
+});
+/**
+* The vocabulary of a source that declares tokens and nothing else: one
+* entry per token, labelled with the token itself.
+*/
+function plainEventVocabulary(eventTypes) {
+	return [...new Set(eventTypes)].filter((eventType) => eventType !== "").map((eventType) => ({
+		id: eventType,
+		label: eventType
+	}));
+}
 /**
 * Generic stateless event emitter. Installed on a `DeviceType.EventEmitter`
 * device. Carries the device's EXACT declared event vocabulary verbatim
 * (NO normalization). Two shapes:
-*  - structured source (HA `event.*` entity) → `eventTypes` is the fixed
-*    declared vocabulary (e.g. ['press_short','press_long',...]).
-*  - generic/legacy source (HA bus events, e.g. zha_event) → `eventTypes`
+*  - structured source (HA `event.*` entity) → `vocabulary` is the fixed
+*    declared set (e.g. press_short, press_long, …).
+*  - generic/legacy source (HA bus events, e.g. zha_event) → `vocabulary`
 *    is [] (open) and `lastEvent.data` carries the complex payload.
+* `vocabulary` (D1044) names each event for a person and types it for a
+* rule; `eventTypes` is its list of native tokens, kept for older readers.
+* A fire names the part of the device it came from in `sourceId` when the
+* vocabulary declares sources (a remote's buttons).
 * `seq` is monotonic so two identical events still produce distinct slice writes.
 */
 var EventFireSchema = object({
 	deviceId: number$1(),
 	eventType: string(),
+	sourceId: string().optional(),
 	data: record(string(), unknown()).nullable(),
 	timestamp: number$1().meta(readingMeta("none")),
 	seq: number$1().meta(readingMeta("count"))
 });
 var EventEmitterStatusSchema = object({
 	eventTypes: array(string()),
+	/**
+	* Required of a provider by the type. A status written before the field
+	* existed still parses, as an empty vocabulary: read it through
+	* `readEventVocabulary`, which then answers with the plain tokens.
+	*/
+	vocabulary: array(EventVocabularyEntrySchema).default([]),
 	lastEvent: EventFireSchema.nullable(),
 	eventCountSinceStart: number$1().meta(readingMeta("count"))
 });
@@ -71972,7 +72254,18 @@ var OauthIntegrationDescriptorSchema = object({
 	* The value is baked into the authorization code at `/authorize` and travels
 	* on the tokens, so editing this field changes FUTURE links only.
 	*/
-	refreshTokenTtlSec: union([number$1().int().positive(), literal("never")]).optional()
+	refreshTokenTtlSec: union([number$1().int().positive(), literal("never")]).optional(),
+	/**
+	* The integration instances an account can be linked to (planning#415),
+	* beside the default one. `/api/oauth2/authorize?instance=<id>` is accepted
+	* only for an id listed here; with no `instance=` the link is made to the
+	* default instance, which is never listed and always accepted — it is the
+	* address third parties already hold. Omit for a single-instance integration.
+	*/
+	instances: array(object({
+		id: string(),
+		displayName: string()
+	})).optional()
 });
 method(_void(), OauthIntegrationDescriptorSchema, { auth: "admin" });
 /**
@@ -78909,6 +79202,13 @@ var SsoBridgeClaimsSchema = object({
 	/** OAuth authorization-code binding — set only on `oauth-code` tokens. */
 	redirectUri: string().optional(),
 	integrationId: string().optional(),
+	/**
+	* The integration INSTANCE an OAuth link was made for (planning#415). Set on
+	* `oauth-code`, `oauth-access` and `oauth-refresh` tokens of a link made
+	* with `instance=`; absent on a link to the default instance. A cloud relay
+	* reads it off the access token to route; the hub answers from the session.
+	*/
+	instanceId: string().optional(),
 	/** JWT ID — unique per issued code; consumed-set enforces single-use. */
 	jti: string().optional(),
 	/** PKCE S256 challenge — set only on `oauth-code` tokens issued to a public
@@ -81287,6 +81587,8 @@ var OauthSessionSummarySchema = object({
 	userId: string(),
 	username: string(),
 	integrationId: string(),
+	/** The instance the link was made for; `null` = the default instance. */
+	instanceId: string().nullable().optional(),
 	scopes: array(TokenScopeSchema),
 	createdAt: number$1(),
 	lastUsedAt: number$1(),
@@ -81386,6 +81688,9 @@ method(_void(), array(UserSummarySchema), { auth: "admin" }), method(_void(), ob
 	access: "view"
 }), method(object({
 	integrationId: string(),
+	/** The integration instance the link is for. Omit for the default
+	*  instance — never pass the addon id to mean it. */
+	instanceId: string().optional(),
 	userId: string(),
 	username: string(),
 	scopes: array(TokenScopeSchema),
@@ -81424,7 +81729,13 @@ method(_void(), array(UserSummarySchema), { auth: "admin" }), method(_void(), ob
 }), method(object({ token: string() }), object({
 	userId: string(),
 	username: string(),
-	scopes: array(TokenScopeSchema)
+	scopes: array(TokenScopeSchema),
+	/** The instance the link was made for, read from the SESSION.
+	*  Absent = the default instance. `oauthLinkServesInstance` is the
+	*  helper a per-instance route calls to compare it with the instance
+	*  of its path; no route declares `perInstance` yet (the Alexa
+	*  per-instance route, T3, is the first consumer). */
+	instanceId: string().optional()
 }).nullable(), { access: "view" }), method(object({ userId: string() }), array(ExternalIdentitySchema), { auth: "admin" }), method(ExternalIdentityKeySchema, object({
 	userId: string(),
 	issuer: string()
@@ -102888,4 +103199,4 @@ function keepBodyKeys(provider, keys) {
 	};
 }
 //#endregion
-export { errMsg as $, waterHeaterCapability as A, _enum as B, powerMeterCapability as C, runningStateCapability as D, runningFromDishwasherOperation as E, defineEntryKind as F, number$1 as G, array as H, entryBody as I, string as J, object as K, isSecretMarker as L, createEvent as M, customAction as N, switchCapability as O, defineCustomActions as P, DeviceType as Q, isSecretMarkerLike as R, numericSensorCapability as S, registerPowerSwitch as T, boolean as U, _null as V, literal as W, unknown as X, union as Y, DeviceRole as Z, heatPumpControlCapability as _, BaseDevice as a, ingestReading as b, RUNNING_STATE_COLD as c, climateControlCapability as d, EventCategory as et, consumablesCapability as f, eventEmitterCapability as g, enumSensorCapability as h, testBoschInstance as i, RecordIntegrationInstances as j, temperatureSensorCapability as k, batteryCapability as l, dishwasherCapability as m, boschRowsPorts as n, BaseDeviceProvider as o, deviceAdoptionCapability as p, record as q, keepBodyKeys as r, DishwasherOperationStateSchema as s, boschRowsMigration as t, binaryCapability as u, heatPumpStatusCapability as v, quantityFromUnit as w, integrationInstancesCapability as x, heatingValveCapability as y, rowsDepsOver as z };
+export { DeviceType as $, temperatureSensorCapability as A, rowsDepsOver as B, plainEventVocabulary as C, runningFromDishwasherOperation as D, registerPowerSwitch as E, defineCustomActions as F, literal as G, _null as H, defineEntryKind as I, record as J, number$1 as K, entryBody as L, RecordIntegrationInstances as M, createEvent as N, runningStateCapability as O, customAction as P, DeviceRole as Q, isSecretMarker as R, numericSensorCapability as S, quantityFromUnit as T, array as U, _enum as V, boolean as W, union as X, string as Y, unknown as Z, heatPumpControlCapability as _, BaseDevice as a, ingestReading as b, RUNNING_STATE_COLD as c, climateControlCapability as d, errMsg as et, consumablesCapability as f, eventEmitterCapability as g, enumSensorCapability as h, testBoschInstance as i, waterHeaterCapability as j, switchCapability as k, batteryCapability as l, dishwasherCapability as m, boschRowsPorts as n, BaseDeviceProvider as o, deviceAdoptionCapability as p, object as q, keepBodyKeys as r, DishwasherOperationStateSchema as s, boschRowsMigration as t, EventCategory as tt, binaryCapability as u, heatPumpStatusCapability as v, powerMeterCapability as w, integrationInstancesCapability as x, heatingValveCapability as y, isSecretMarkerLike as z };

package/dist/home-connect/addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_bosch_instances = require("../bosch-instances-LWbVnsaD.js");
-const require_account_integration_offline = require("../account-integration-offline-BEzGeJcl.js");
+const require_bosch_instances = require("../bosch-instances-dqTG9no9.js");
+const require_account_integration_offline = require("../account-integration-offline-C-KJYRdX.js");
 let node_crypto = require("node:crypto");
 let node_tls = require("node:tls");
 let node_zlib = require("node:zlib");
@@ -4841,6 +4841,7 @@ var HomeConnectEventDevice = class extends require_bosch_instances.BaseDevice {
 	publish(eventTypes, previous, lastEvent) {
 		this.runtimeState.setCapState(EVENT_CAP, {
 			eventTypes: [...eventTypes],
+			vocabulary: require_bosch_instances.plainEventVocabulary(eventTypes),
 			lastEvent: lastEvent ?? previous?.lastEvent ?? null,
 			eventCountSinceStart: (previous?.eventCountSinceStart ?? 0) + (lastEvent !== void 0 ? 1 : 0)
 		});
@@ -4895,7 +4896,8 @@ var HomeConnectEventDevice = class extends require_bosch_instances.BaseDevice {
 	}
 	registerCap() {
 		this.ctx.registerNativeCap(require_bosch_instances.eventEmitterCapability, { getStatus: async () => this.runtimeState.getCapState(EVENT_CAP) ?? {
-			eventTypes: [],
+			eventTypes: [...this.eventTypes()],
+			vocabulary: require_bosch_instances.plainEventVocabulary(this.eventTypes()),
 			lastEvent: null,
 			eventCountSinceStart: 0
 		} });

package/dist/home-connect/addon.mjs

@@ -1,5 +1,5 @@
-import { $ as errMsg, B as _enum, C as powerMeterCapability, D as runningStateCapability, E as runningFromDishwasherOperation, F as defineEntryKind, H as array, I as entryBody, J as string, K as object, L as isSecretMarker, M as createEvent, N as customAction, P as defineCustomActions, Q as DeviceType, R as isSecretMarkerLike, S as numericSensorCapability, W as literal, X as unknown, Y as union, Z as DeviceRole, a as BaseDevice, b as ingestReading, c as RUNNING_STATE_COLD, et as EventCategory, f as consumablesCapability, g as eventEmitterCapability, h as enumSensorCapability, i as testBoschInstance, j as RecordIntegrationInstances, m as dishwasherCapability, n as boschRowsPorts, o as BaseDeviceProvider, p as deviceAdoptionCapability, q as record, r as keepBodyKeys, s as DishwasherOperationStateSchema, t as boschRowsMigration, u as binaryCapability, w as quantityFromUnit, x as integrationInstancesCapability, z as rowsDepsOver } from "../bosch-instances-DSE6IXdU.mjs";
-import { a as loginFailureForAttempt, c as HOME_CONNECT_REDIRECT_URI, i as createSignInAttemptStore, n as cascadeRemoveDevicesForIntegration, o as parseOAuthCallback, r as buildSignInGuideFields, t as setIntegrationDevicesOnline } from "../account-integration-offline-D5vjmfia.mjs";
+import { $ as DeviceType, B as rowsDepsOver, C as plainEventVocabulary, D as runningFromDishwasherOperation, F as defineCustomActions, G as literal, I as defineEntryKind, J as record, L as entryBody, M as RecordIntegrationInstances, N as createEvent, O as runningStateCapability, P as customAction, Q as DeviceRole, R as isSecretMarker, S as numericSensorCapability, T as quantityFromUnit, U as array, V as _enum, X as union, Y as string, Z as unknown, a as BaseDevice, b as ingestReading, c as RUNNING_STATE_COLD, et as errMsg, f as consumablesCapability, g as eventEmitterCapability, h as enumSensorCapability, i as testBoschInstance, m as dishwasherCapability, n as boschRowsPorts, o as BaseDeviceProvider, p as deviceAdoptionCapability, q as object, r as keepBodyKeys, s as DishwasherOperationStateSchema, t as boschRowsMigration, tt as EventCategory, u as binaryCapability, w as powerMeterCapability, x as integrationInstancesCapability, z as isSecretMarkerLike } from "../bosch-instances-y_A00js_.mjs";
+import { a as loginFailureForAttempt, c as HOME_CONNECT_REDIRECT_URI, i as createSignInAttemptStore, n as cascadeRemoveDevicesForIntegration, o as parseOAuthCallback, r as buildSignInGuideFields, t as setIntegrationDevicesOnline } from "../account-integration-offline-KQcJ_VVK.mjs";
 import { createHash, randomBytes } from "node:crypto";
 import { connect } from "node:tls";
 import { inflateRawSync } from "node:zlib";
@@ -4840,6 +4840,7 @@ var HomeConnectEventDevice = class extends BaseDevice {
 	publish(eventTypes, previous, lastEvent) {
 		this.runtimeState.setCapState(EVENT_CAP, {
 			eventTypes: [...eventTypes],
+			vocabulary: plainEventVocabulary(eventTypes),
 			lastEvent: lastEvent ?? previous?.lastEvent ?? null,
 			eventCountSinceStart: (previous?.eventCountSinceStart ?? 0) + (lastEvent !== void 0 ? 1 : 0)
 		});
@@ -4894,7 +4895,8 @@ var HomeConnectEventDevice = class extends BaseDevice {
 	}
 	registerCap() {
 		this.ctx.registerNativeCap(eventEmitterCapability, { getStatus: async () => this.runtimeState.getCapState(EVENT_CAP) ?? {
-			eventTypes: [],
+			eventTypes: [...this.eventTypes()],
+			vocabulary: plainEventVocabulary(this.eventTypes()),
 			lastEvent: null,
 			eventCountSinceStart: 0
 		} });

package/dist/homecom/addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_bosch_instances = require("../bosch-instances-LWbVnsaD.js");
-const require_account_integration_offline = require("../account-integration-offline-BEzGeJcl.js");
+const require_bosch_instances = require("../bosch-instances-dqTG9no9.js");
+const require_account_integration_offline = require("../account-integration-offline-C-KJYRdX.js");
 let node_crypto = require("node:crypto");
 let node_child_process = require("node:child_process");
 let node_fs = require("node:fs");

package/dist/homecom/addon.mjs

@@ -1,5 +1,5 @@
-import { $ as errMsg, A as waterHeaterCapability, B as _enum, F as defineEntryKind, G as number, H as array, I as entryBody, J as string, K as object, N as customAction, P as defineCustomActions, Q as DeviceType, T as registerPowerSwitch, U as boolean, V as _null, W as literal, Y as union, Z as DeviceRole, _ as heatPumpControlCapability, a as BaseDevice, d as climateControlCapability, et as EventCategory, i as testBoschInstance, j as RecordIntegrationInstances, n as boschRowsPorts, o as BaseDeviceProvider, p as deviceAdoptionCapability, q as record, r as keepBodyKeys, t as boschRowsMigration, v as heatPumpStatusCapability, x as integrationInstancesCapability, z as rowsDepsOver } from "../bosch-instances-DSE6IXdU.mjs";
-import { a as loginFailureForAttempt, i as createSignInAttemptStore, n as cascadeRemoveDevicesForIntegration, o as parseOAuthCallback, r as buildSignInGuideFields, s as HOMECOM_REDIRECT_URI, t as setIntegrationDevicesOnline } from "../account-integration-offline-D5vjmfia.mjs";
+import { $ as DeviceType, B as rowsDepsOver, E as registerPowerSwitch, F as defineCustomActions, G as literal, H as _null, I as defineEntryKind, J as record, K as number, L as entryBody, M as RecordIntegrationInstances, P as customAction, Q as DeviceRole, U as array, V as _enum, W as boolean, X as union, Y as string, _ as heatPumpControlCapability, a as BaseDevice, d as climateControlCapability, et as errMsg, i as testBoschInstance, j as waterHeaterCapability, n as boschRowsPorts, o as BaseDeviceProvider, p as deviceAdoptionCapability, q as object, r as keepBodyKeys, t as boschRowsMigration, tt as EventCategory, v as heatPumpStatusCapability, x as integrationInstancesCapability } from "../bosch-instances-y_A00js_.mjs";
+import { a as loginFailureForAttempt, i as createSignInAttemptStore, n as cascadeRemoveDevicesForIntegration, o as parseOAuthCallback, r as buildSignInGuideFields, s as HOMECOM_REDIRECT_URI, t as setIntegrationDevicesOnline } from "../account-integration-offline-KQcJ_VVK.mjs";
 import { createHash, randomBytes } from "node:crypto";
 import { spawn } from "node:child_process";
 import { existsSync } from "node:fs";

package/dist/shc/addon.js

@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 //#region \0rolldown/runtime.js
 var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
 //#endregion
-const require_bosch_instances = require("../bosch-instances-LWbVnsaD.js");
+const require_bosch_instances = require("../bosch-instances-dqTG9no9.js");
 let node_crypto = require("node:crypto");
 let node_https = require("node:https");
 let node_child_process = require("node:child_process");

package/dist/shc/addon.mjs

@@ -1,4 +1,4 @@
-import { $ as errMsg, B as _enum, F as defineEntryKind, G as number, H as array, I as entryBody, J as string, K as object, N as customAction, O as switchCapability, P as defineCustomActions, Q as DeviceType, T as registerPowerSwitch, W as literal, Z as DeviceRole, a as BaseDevice, d as climateControlCapability, et as EventCategory, i as testBoschInstance, j as RecordIntegrationInstances, k as temperatureSensorCapability, l as batteryCapability, n as boschRowsPorts, o as BaseDeviceProvider, p as deviceAdoptionCapability, r as keepBodyKeys, t as boschRowsMigration, x as integrationInstancesCapability, y as heatingValveCapability, z as rowsDepsOver } from "../bosch-instances-DSE6IXdU.mjs";
+import { $ as DeviceType, A as temperatureSensorCapability, B as rowsDepsOver, E as registerPowerSwitch, F as defineCustomActions, G as literal, I as defineEntryKind, K as number, L as entryBody, M as RecordIntegrationInstances, P as customAction, Q as DeviceRole, U as array, V as _enum, Y as string, a as BaseDevice, d as climateControlCapability, et as errMsg, i as testBoschInstance, k as switchCapability, l as batteryCapability, n as boschRowsPorts, o as BaseDeviceProvider, p as deviceAdoptionCapability, q as object, r as keepBodyKeys, t as boschRowsMigration, tt as EventCategory, x as integrationInstancesCapability, y as heatingValveCapability } from "../bosch-instances-y_A00js_.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { request } from "node:https";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-bosch",
-  "version": "0.1.52",
+  "version": "0.1.53",
   "description": "Bosch smart-home device-provider addons for CamStack — SHC, Home Connect, and HomeCom cloud integrations (scaffold)",
   "keywords": [
     "camstack",
@@ -141,7 +141,7 @@
       }
     ],
     "requires": {
-      "server": ">=1.2.841"
+      "server": ">=1.2.842"
     }
   },
   "files": [