@camstack/addon-provider-homeassistant 1.1.28 → 1.1.30

package/dist/addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let node_crypto = require("node:crypto");
 let node_zlib = require("node:zlib");
-//#region ../types/dist/event-category-H4AVePnn.mjs
+//#region ../types/dist/event-category-D4HJq7Mw.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -154,6 +154,11 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	/** Runner-sampled scrub thumbnail (~1/5 s/camera). Telemetry (D8): a lost
 	*  thumb is a scrub gap the recorder's keyframe backfill covers. */
 	EventCategory["RecordingThumbSampled"] = "recording.thumb-sampled";
+	/** Export render progress (0–100). Telemetry (D8): a lost tick is a stale
+	*  progress bar the client reconciles via `recordingExport.getExport`. */
+	EventCategory["RecordingExportProgress"] = "recording.export.progress";
+	EventCategory["RecordingExportCompleted"] = "recording.export.completed";
+	EventCategory["RecordingExportFailed"] = "recording.export.failed";
 	EventCategory["DetectionEvent"] = "detection.event";
 	EventCategory["SessionTrackNew"] = "session.track.new";
 	EventCategory["SessionTrackExpired"] = "session.track.expired";
@@ -443,6 +448,25 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineAnalyticsStationaryChanged"] = "pipeline-analytics.stationary-changed";
 	/**
+	* Fired by `addon-post-analysis` when a package-drop is confirmed inside
+	* a package zone — a newly-appeared stationary object of a package class
+	* that cleared the class / zone / dwell / size gates. Payload:
+	* `PipelineAnalyticsPackageDeliveredPayload` carrying `{ deviceId,
+	* entryId, className, zoneIds, keyFrameMediaKey?, bbox, timestamp }`.
+	* Telemetry (D8): the durable record is the `package-events` store row;
+	* this bus topic drives notifier rules + live UI. See
+	* docs/superpowers/specs/2026-07-17-package-zones-design.md §5.1.
+	*/
+	EventCategory["PipelineAnalyticsPackageDelivered"] = "pipeline-analytics.package-delivered";
+	/**
+	* Fired by `addon-post-analysis` when a previously-delivered package
+	* leaves its zone (the stationary entry departed — moved or swept).
+	* Payload: `PipelineAnalyticsPackagePickedUpPayload` carrying
+	* `{ deviceId, entryId, deliveredEventId, className, timestamp }`.
+	* Telemetry (D8). See package-zones-design §5.2.
+	*/
+	EventCategory["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
+	/**
 	* Fired by `addon-post-analysis` whenever a gallery face row changes:
 	* `kind:'buffered'` a new detected face was persisted, `'assigned'` /
 	* `'unassigned'` its identity link changed, `'deleted'` the row was
@@ -5181,6 +5205,25 @@ function _instanceof(cls, params = {}) {
 	};
 	return inst;
 }
+//#endregion
+//#region ../../node_modules/zod/v4/classic/compat.js
+/** @deprecated Use the raw string literal codes instead, e.g. "invalid_type". */
+var ZodIssueCode = {
+	invalid_type: "invalid_type",
+	too_big: "too_big",
+	too_small: "too_small",
+	invalid_format: "invalid_format",
+	not_multiple_of: "not_multiple_of",
+	unrecognized_keys: "unrecognized_keys",
+	invalid_union: "invalid_union",
+	invalid_key: "invalid_key",
+	invalid_element: "invalid_element",
+	invalid_value: "invalid_value",
+	custom: "custom"
+};
+/** @deprecated Do not use. Stub definition, only included for zod-to-json-schema compatibility. */
+var ZodFirstPartyTypeKind;
+ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 Object.fromEntries([
 	{
 		id: "overview",
@@ -7356,6 +7399,24 @@ var RecordingRetentionSchema = object({
 	maxSizeGb: number().min(0).optional()
 });
 /**
+* Scrub-thumbnail fidelity preset — the single per-camera selector bundling the
+* sprite tile RESOLUTION + JPEG QUALITY the recorder packs timeline-scrub
+* previews at. Five graduated steps; absent on a config = `standard` (the
+* shipped default, matching `sheet-geometry`/`sheet-composer`).
+*
+* Existing sheets are IMMUTABLE — a changed preset applies to NEW windows only.
+* Each window's index sidecar carries its own tile dims, so a camera whose
+* preset changed over time renders every historical window at the dims it was
+* written with.
+*/
+var ScrubThumbnailPresetSchema = _enum([
+	"minimal",
+	"low",
+	"standard",
+	"high",
+	"max"
+]);
+/**
 * The full per-camera recording intent — the wire shape of a RecordingTarget.
 *
 * `mode` is the authoritative storage choice; `schedule`/`triggers`/`pre`/`post`
@@ -7392,7 +7453,14 @@ var RecordingConfigSchema = object({
 	* derived into bands once via `migrateConfigToBands`.
 	*/
 	bands: array(RecordingBandSchema).optional(),
-	retention: RecordingRetentionSchema.optional()
+	retention: RecordingRetentionSchema.optional(),
+	/**
+	* Per-camera scrub-thumbnail fidelity preset (resolution + JPEG quality for
+	* timeline-scrub sprite previews). Absent = `standard`. Applies to NEW
+	* windows only — existing sheets are immutable, and each window's index
+	* carries its own tile dims so mixed-preset history renders correctly.
+	*/
+	scrubThumbnails: ScrubThumbnailPresetSchema.optional()
 });
 /**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
@@ -14988,7 +15056,11 @@ array(ZoneRuleSchema).readonly();
 * Extend the enum here when a new gating consumer comes online (audio
 * gating, alert filtering, …) — no other surface needs to change.
 */
-var ZoneRuleStageEnum = _enum(["motion", "detection"]);
+var ZoneRuleStageEnum = _enum([
+	"motion",
+	"detection",
+	"package"
+]);
 /**
 * Runtime registry: cap-property-name → cap definition. `BaseDevice`'s
 * `state` getter looks up the cap definition here to construct a
@@ -15082,16 +15154,24 @@ var DEVICE_LOCAL_STATE_CAPS = {
 			})
 		},
 		/**
-		* Runtime-state slice — both stages mirrored together so consumers
+		* Runtime-state slice — every stage mirrored together so consumers
 		* see one reactive handle (`device.state.zoneRules.value`) instead
-		* of two. Bulk-replace mutations on either stage write the full
-		* `{motion, detection}` shape, so subscribers always get the
+		* of one per stage. Bulk-replace mutations on any stage write the full
+		* `{motion, detection, package}` shape, so subscribers always get the
 		* complete current set. Consumers that only care about one stage
 		* just read the matching property.
+		*
+		* `package` backs the package-drop detector — a package zone is a
+		* `ZoneRule` on the `'package'` stage referencing drawn polygons
+		* (see docs/superpowers/specs/2026-07-17-package-zones-design.md §3.1).
+		* The orchestrator provider that writes this stage lands in a later
+		* slice; until then the mirror carries only `{motion, detection}` and
+		* consumers read `package` as absent (treat as `[]`).
 		*/
 		runtimeState: object({
 			motion: array(ZoneRuleSchema).readonly(),
-			detection: array(ZoneRuleSchema).readonly()
+			detection: array(ZoneRuleSchema).readonly(),
+			package: array(ZoneRuleSchema).readonly()
 		})
 	},
 	zones: zonesCapability
@@ -19152,6 +19232,7 @@ var EventKindIconSchema = _enum([
 	"smoke",
 	"water",
 	"button",
+	"package",
 	"generic"
 ]);
 var EventKindCategorySchema = _enum([
@@ -19159,7 +19240,8 @@ var EventKindCategorySchema = _enum([
 	"audio",
 	"detection",
 	"sensor",
-	"custom"
+	"custom",
+	"package"
 ]);
 var EventKindDescriptorSchema = object({
 	/** Stable kind id (e.g. 'motion', 'person', 'contact'). */
@@ -22894,6 +22976,108 @@ method(object({
 	auth: "admin"
 });
 /**
+* `recordingExport` cap — render a footage time range into a single downloadable
+* MP4 (regular / accelerated / decelerated / timelapse, ± audio), kept for a
+* bounded lifetime with a durable history, auto-expiry, and optional
+* delete-after-download.
+*
+* Like `recording` this is a `scope:'system', mode:'singleton'` cap: the
+* recorder self-gates so exactly ONE node (the designated `recordingNodeId`,
+* default `hub`) registers it. Device-scoped methods carry `deviceId` in their
+* input and dispatch to that single provider; the render runs on the node that
+* owns the footage (no cross-node segment transfer). Download rides the
+* framework addon data-plane. State persists in a DurableState blob (NOT
+* SQLite); history rows survive file deletion for audit.
+*/
+/** Playback-speed multiplier for the render (1 = realtime). */
+var ExportSpeedSchema = number().min(.25).max(32);
+/** Timelapse cadence — sample one source frame per `everyMs`, output at `outputFps`. */
+var ExportTimelapseSchema = object({
+	everyMs: number().int().positive(),
+	outputFps: number().int().min(1).max(60).optional()
+});
+/**
+* Render options. `speed` and `timelapse` are mutually exclusive. `includeAudio`
+* is honoured only for a realtime-ish speed (0.5–2×); timelapse is always
+* silent. `maxLifeMs` bounds how long the finished file is kept;
+* `deleteAfterDownload` removes it shortly after the first complete download.
+*/
+var ExportOptionsSchema = object({
+	speed: ExportSpeedSchema.optional(),
+	timelapse: ExportTimelapseSchema.optional(),
+	includeAudio: boolean(),
+	maxLifeMs: number().int().positive(),
+	deleteAfterDownload: boolean(),
+	title: string().max(200).optional()
+}).superRefine((v, ctx) => {
+	if (v.speed !== void 0 && v.timelapse !== void 0) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		message: "speed and timelapse are mutually exclusive",
+		path: ["timelapse"]
+	});
+});
+var ExportStateSchema = _enum([
+	"queued",
+	"rendering",
+	"ready",
+	"failed",
+	"expired",
+	"deleted"
+]);
+/** One export job / history row. */
+var ExportRecordSchema = object({
+	id: string(),
+	deviceId: number(),
+	profile: string(),
+	fromMs: number(),
+	toMs: number(),
+	options: ExportOptionsSchema,
+	state: ExportStateSchema,
+	/** 0–100 while rendering; null otherwise. */
+	progressPct: number().nullable(),
+	/** File size once ready; null before. */
+	fileBytes: number().nullable(),
+	expiresAt: number(),
+	deleteAfterDownload: boolean(),
+	/** Epoch of the first complete download; null until then. */
+	downloadedAt: number().nullable(),
+	createdAt: number(),
+	/** User id/name that requested the export. */
+	createdBy: string(),
+	/** Failure reason when state is 'failed'; null otherwise. */
+	error: string().nullable()
+});
+/** Candidate download URLs (LAN first, then operator extra hosts). */
+var ExportDownloadSchema = object({
+	url: string(),
+	endpoints: array(string())
+});
+method(object({
+	deviceId: number(),
+	profile: string(),
+	fromMs: number(),
+	toMs: number(),
+	options: ExportOptionsSchema
+}), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ deviceId: number().optional() }), array(ExportRecordSchema), {
+	kind: "query",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "query",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportDownloadSchema, {
+	kind: "query",
+	auth: "protected"
+});
+/**
 * One publishable camera stream as its OWNING PROVIDER describes it — the same
 * payload the (legacy) push `streamBroker.publishCameraStream` carried, minus
 * `deviceId`.
@@ -26817,6 +27001,42 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recordingExport.cancelExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.createExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.deleteExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"recordingExport.getDownloadUrl": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.getExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.listExports": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",
@@ -32801,7 +33021,7 @@ var BUS_EVENT_TYPES = [
 	"deconz_event",
 	"xiaomi_aqara.click"
 ];
-var HaIntegrationManager = class {
+var HaIntegrationManager = class HaIntegrationManager {
 	opts;
 	wsClient = null;
 	connection = null;
@@ -32815,6 +33035,15 @@ var HaIntegrationManager = class {
 	lastCheckedAt = null;
 	lastError = null;
 	haInfo = {};
+	/** Deadline timer for the INITIAL connect. `start()` no longer blocks on
+	*  the socket (see the comment there), so a broker whose host silently
+	*  drops packets would otherwise sit at `connecting` for the full OS TCP
+	*  timeout (tens of seconds) with no UI signal. This timer flips it to
+	*  `unreachable` promptly; a late successful connect still overrides it. */
+	connectDeadlineTimer = null;
+	/** Ceiling on the `connecting` state before the UI is shown `unreachable`.
+	*  Slightly above the throwaway `testSettings` probe timeout (8s). */
+	static CONNECT_DEADLINE_MS = 1e4;
 	constructor(opts) {
 		this.opts = opts;
 	}
@@ -32828,6 +33057,8 @@ var HaIntegrationManager = class {
 					await this.refreshHaConfigInfo(connection);
 					await this.ensureBaselineSubscription();
 					await this.ensureBusEventSubscriptions();
+					this.clearConnectDeadline();
+					this.lastError = null;
 					this.setStatus("connected");
 					try {
 						this.opts.onConnected?.(this.opts.id);
@@ -32863,14 +33094,32 @@ var HaIntegrationManager = class {
 				}
 			}
 		});
-		try {
-			await this.wsClient.start();
-		} catch (err) {
+		this.startConnectDeadline();
+		this.wsClient.start().catch((err) => {
 			this.classifyAuthError(err);
-			throw err;
+		});
+	}
+	/** Arm the initial-connect deadline. Idempotent — clears any prior timer. */
+	startConnectDeadline() {
+		this.clearConnectDeadline();
+		const timer = setTimeout(() => {
+			this.connectDeadlineTimer = null;
+			if (this.status === "connecting") {
+				if (this.lastError === null) this.lastError = "Connection timed out";
+				this.setStatus("unreachable");
+			}
+		}, HaIntegrationManager.CONNECT_DEADLINE_MS);
+		if (typeof timer.unref === "function") timer.unref();
+		this.connectDeadlineTimer = timer;
+	}
+	clearConnectDeadline() {
+		if (this.connectDeadlineTimer) {
+			clearTimeout(this.connectDeadlineTimer);
+			this.connectDeadlineTimer = null;
 		}
 	}
 	async stop() {
+		this.clearConnectDeadline();
 		if (this.upstreamSubscriptionUnsub) {
 			try {
 				await this.upstreamSubscriptionUnsub();
@@ -33085,15 +33334,19 @@ var HaIntegrationManager = class {
 		}));
 	}
 	classifyAuthError(err) {
+		this.clearConnectDeadline();
 		if (err === 2) {
+			this.lastError = "Authentication failed — check the access token";
 			this.setStatus("auth-failed");
-			this.lastError = "invalid_auth";
-		} else if (err === 1 || err === 4) {
+		} else if (err === 1) {
+			this.lastError = "Cannot connect — host unreachable or Home Assistant not responding";
+			this.setStatus("unreachable");
+		} else if (err === 4) {
+			this.lastError = "Home Assistant host / URL is required";
 			this.setStatus("unreachable");
-			this.lastError = errMsg(err);
 		} else {
-			this.setStatus("error");
 			this.lastError = errMsg(err);
+			this.setStatus("error");
 		}
 	}
 	requireConnection() {

package/dist/addon.mjs

@@ -1,6 +1,6 @@
 import { randomUUID } from "node:crypto";
 import { brotliCompressSync, deflateSync, gzipSync } from "node:zlib";
-//#region ../types/dist/event-category-H4AVePnn.mjs
+//#region ../types/dist/event-category-D4HJq7Mw.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -153,6 +153,11 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	/** Runner-sampled scrub thumbnail (~1/5 s/camera). Telemetry (D8): a lost
 	*  thumb is a scrub gap the recorder's keyframe backfill covers. */
 	EventCategory["RecordingThumbSampled"] = "recording.thumb-sampled";
+	/** Export render progress (0–100). Telemetry (D8): a lost tick is a stale
+	*  progress bar the client reconciles via `recordingExport.getExport`. */
+	EventCategory["RecordingExportProgress"] = "recording.export.progress";
+	EventCategory["RecordingExportCompleted"] = "recording.export.completed";
+	EventCategory["RecordingExportFailed"] = "recording.export.failed";
 	EventCategory["DetectionEvent"] = "detection.event";
 	EventCategory["SessionTrackNew"] = "session.track.new";
 	EventCategory["SessionTrackExpired"] = "session.track.expired";
@@ -442,6 +447,25 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineAnalyticsStationaryChanged"] = "pipeline-analytics.stationary-changed";
 	/**
+	* Fired by `addon-post-analysis` when a package-drop is confirmed inside
+	* a package zone — a newly-appeared stationary object of a package class
+	* that cleared the class / zone / dwell / size gates. Payload:
+	* `PipelineAnalyticsPackageDeliveredPayload` carrying `{ deviceId,
+	* entryId, className, zoneIds, keyFrameMediaKey?, bbox, timestamp }`.
+	* Telemetry (D8): the durable record is the `package-events` store row;
+	* this bus topic drives notifier rules + live UI. See
+	* docs/superpowers/specs/2026-07-17-package-zones-design.md §5.1.
+	*/
+	EventCategory["PipelineAnalyticsPackageDelivered"] = "pipeline-analytics.package-delivered";
+	/**
+	* Fired by `addon-post-analysis` when a previously-delivered package
+	* leaves its zone (the stationary entry departed — moved or swept).
+	* Payload: `PipelineAnalyticsPackagePickedUpPayload` carrying
+	* `{ deviceId, entryId, deliveredEventId, className, timestamp }`.
+	* Telemetry (D8). See package-zones-design §5.2.
+	*/
+	EventCategory["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
+	/**
 	* Fired by `addon-post-analysis` whenever a gallery face row changes:
 	* `kind:'buffered'` a new detected face was persisted, `'assigned'` /
 	* `'unassigned'` its identity link changed, `'deleted'` the row was
@@ -5180,6 +5204,25 @@ function _instanceof(cls, params = {}) {
 	};
 	return inst;
 }
+//#endregion
+//#region ../../node_modules/zod/v4/classic/compat.js
+/** @deprecated Use the raw string literal codes instead, e.g. "invalid_type". */
+var ZodIssueCode = {
+	invalid_type: "invalid_type",
+	too_big: "too_big",
+	too_small: "too_small",
+	invalid_format: "invalid_format",
+	not_multiple_of: "not_multiple_of",
+	unrecognized_keys: "unrecognized_keys",
+	invalid_union: "invalid_union",
+	invalid_key: "invalid_key",
+	invalid_element: "invalid_element",
+	invalid_value: "invalid_value",
+	custom: "custom"
+};
+/** @deprecated Do not use. Stub definition, only included for zod-to-json-schema compatibility. */
+var ZodFirstPartyTypeKind;
+ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 Object.fromEntries([
 	{
 		id: "overview",
@@ -7355,6 +7398,24 @@ var RecordingRetentionSchema = object({
 	maxSizeGb: number().min(0).optional()
 });
 /**
+* Scrub-thumbnail fidelity preset — the single per-camera selector bundling the
+* sprite tile RESOLUTION + JPEG QUALITY the recorder packs timeline-scrub
+* previews at. Five graduated steps; absent on a config = `standard` (the
+* shipped default, matching `sheet-geometry`/`sheet-composer`).
+*
+* Existing sheets are IMMUTABLE — a changed preset applies to NEW windows only.
+* Each window's index sidecar carries its own tile dims, so a camera whose
+* preset changed over time renders every historical window at the dims it was
+* written with.
+*/
+var ScrubThumbnailPresetSchema = _enum([
+	"minimal",
+	"low",
+	"standard",
+	"high",
+	"max"
+]);
+/**
 * The full per-camera recording intent — the wire shape of a RecordingTarget.
 *
 * `mode` is the authoritative storage choice; `schedule`/`triggers`/`pre`/`post`
@@ -7391,7 +7452,14 @@ var RecordingConfigSchema = object({
 	* derived into bands once via `migrateConfigToBands`.
 	*/
 	bands: array(RecordingBandSchema).optional(),
-	retention: RecordingRetentionSchema.optional()
+	retention: RecordingRetentionSchema.optional(),
+	/**
+	* Per-camera scrub-thumbnail fidelity preset (resolution + JPEG quality for
+	* timeline-scrub sprite previews). Absent = `standard`. Applies to NEW
+	* windows only — existing sheets are immutable, and each window's index
+	* carries its own tile dims so mixed-preset history renders correctly.
+	*/
+	scrubThumbnails: ScrubThumbnailPresetSchema.optional()
 });
 /**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
@@ -14987,7 +15055,11 @@ array(ZoneRuleSchema).readonly();
 * Extend the enum here when a new gating consumer comes online (audio
 * gating, alert filtering, …) — no other surface needs to change.
 */
-var ZoneRuleStageEnum = _enum(["motion", "detection"]);
+var ZoneRuleStageEnum = _enum([
+	"motion",
+	"detection",
+	"package"
+]);
 /**
 * Runtime registry: cap-property-name → cap definition. `BaseDevice`'s
 * `state` getter looks up the cap definition here to construct a
@@ -15081,16 +15153,24 @@ var DEVICE_LOCAL_STATE_CAPS = {
 			})
 		},
 		/**
-		* Runtime-state slice — both stages mirrored together so consumers
+		* Runtime-state slice — every stage mirrored together so consumers
 		* see one reactive handle (`device.state.zoneRules.value`) instead
-		* of two. Bulk-replace mutations on either stage write the full
-		* `{motion, detection}` shape, so subscribers always get the
+		* of one per stage. Bulk-replace mutations on any stage write the full
+		* `{motion, detection, package}` shape, so subscribers always get the
 		* complete current set. Consumers that only care about one stage
 		* just read the matching property.
+		*
+		* `package` backs the package-drop detector — a package zone is a
+		* `ZoneRule` on the `'package'` stage referencing drawn polygons
+		* (see docs/superpowers/specs/2026-07-17-package-zones-design.md §3.1).
+		* The orchestrator provider that writes this stage lands in a later
+		* slice; until then the mirror carries only `{motion, detection}` and
+		* consumers read `package` as absent (treat as `[]`).
 		*/
 		runtimeState: object({
 			motion: array(ZoneRuleSchema).readonly(),
-			detection: array(ZoneRuleSchema).readonly()
+			detection: array(ZoneRuleSchema).readonly(),
+			package: array(ZoneRuleSchema).readonly()
 		})
 	},
 	zones: zonesCapability
@@ -19151,6 +19231,7 @@ var EventKindIconSchema = _enum([
 	"smoke",
 	"water",
 	"button",
+	"package",
 	"generic"
 ]);
 var EventKindCategorySchema = _enum([
@@ -19158,7 +19239,8 @@ var EventKindCategorySchema = _enum([
 	"audio",
 	"detection",
 	"sensor",
-	"custom"
+	"custom",
+	"package"
 ]);
 var EventKindDescriptorSchema = object({
 	/** Stable kind id (e.g. 'motion', 'person', 'contact'). */
@@ -22893,6 +22975,108 @@ method(object({
 	auth: "admin"
 });
 /**
+* `recordingExport` cap — render a footage time range into a single downloadable
+* MP4 (regular / accelerated / decelerated / timelapse, ± audio), kept for a
+* bounded lifetime with a durable history, auto-expiry, and optional
+* delete-after-download.
+*
+* Like `recording` this is a `scope:'system', mode:'singleton'` cap: the
+* recorder self-gates so exactly ONE node (the designated `recordingNodeId`,
+* default `hub`) registers it. Device-scoped methods carry `deviceId` in their
+* input and dispatch to that single provider; the render runs on the node that
+* owns the footage (no cross-node segment transfer). Download rides the
+* framework addon data-plane. State persists in a DurableState blob (NOT
+* SQLite); history rows survive file deletion for audit.
+*/
+/** Playback-speed multiplier for the render (1 = realtime). */
+var ExportSpeedSchema = number().min(.25).max(32);
+/** Timelapse cadence — sample one source frame per `everyMs`, output at `outputFps`. */
+var ExportTimelapseSchema = object({
+	everyMs: number().int().positive(),
+	outputFps: number().int().min(1).max(60).optional()
+});
+/**
+* Render options. `speed` and `timelapse` are mutually exclusive. `includeAudio`
+* is honoured only for a realtime-ish speed (0.5–2×); timelapse is always
+* silent. `maxLifeMs` bounds how long the finished file is kept;
+* `deleteAfterDownload` removes it shortly after the first complete download.
+*/
+var ExportOptionsSchema = object({
+	speed: ExportSpeedSchema.optional(),
+	timelapse: ExportTimelapseSchema.optional(),
+	includeAudio: boolean(),
+	maxLifeMs: number().int().positive(),
+	deleteAfterDownload: boolean(),
+	title: string().max(200).optional()
+}).superRefine((v, ctx) => {
+	if (v.speed !== void 0 && v.timelapse !== void 0) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		message: "speed and timelapse are mutually exclusive",
+		path: ["timelapse"]
+	});
+});
+var ExportStateSchema = _enum([
+	"queued",
+	"rendering",
+	"ready",
+	"failed",
+	"expired",
+	"deleted"
+]);
+/** One export job / history row. */
+var ExportRecordSchema = object({
+	id: string(),
+	deviceId: number(),
+	profile: string(),
+	fromMs: number(),
+	toMs: number(),
+	options: ExportOptionsSchema,
+	state: ExportStateSchema,
+	/** 0–100 while rendering; null otherwise. */
+	progressPct: number().nullable(),
+	/** File size once ready; null before. */
+	fileBytes: number().nullable(),
+	expiresAt: number(),
+	deleteAfterDownload: boolean(),
+	/** Epoch of the first complete download; null until then. */
+	downloadedAt: number().nullable(),
+	createdAt: number(),
+	/** User id/name that requested the export. */
+	createdBy: string(),
+	/** Failure reason when state is 'failed'; null otherwise. */
+	error: string().nullable()
+});
+/** Candidate download URLs (LAN first, then operator extra hosts). */
+var ExportDownloadSchema = object({
+	url: string(),
+	endpoints: array(string())
+});
+method(object({
+	deviceId: number(),
+	profile: string(),
+	fromMs: number(),
+	toMs: number(),
+	options: ExportOptionsSchema
+}), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ deviceId: number().optional() }), array(ExportRecordSchema), {
+	kind: "query",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "query",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportDownloadSchema, {
+	kind: "query",
+	auth: "protected"
+});
+/**
 * One publishable camera stream as its OWNING PROVIDER describes it — the same
 * payload the (legacy) push `streamBroker.publishCameraStream` carried, minus
 * `deviceId`.
@@ -26816,6 +27000,42 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recordingExport.cancelExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.createExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.deleteExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"recordingExport.getDownloadUrl": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.getExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.listExports": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",
@@ -32800,7 +33020,7 @@ var BUS_EVENT_TYPES = [
 	"deconz_event",
 	"xiaomi_aqara.click"
 ];
-var HaIntegrationManager = class {
+var HaIntegrationManager = class HaIntegrationManager {
 	opts;
 	wsClient = null;
 	connection = null;
@@ -32814,6 +33034,15 @@ var HaIntegrationManager = class {
 	lastCheckedAt = null;
 	lastError = null;
 	haInfo = {};
+	/** Deadline timer for the INITIAL connect. `start()` no longer blocks on
+	*  the socket (see the comment there), so a broker whose host silently
+	*  drops packets would otherwise sit at `connecting` for the full OS TCP
+	*  timeout (tens of seconds) with no UI signal. This timer flips it to
+	*  `unreachable` promptly; a late successful connect still overrides it. */
+	connectDeadlineTimer = null;
+	/** Ceiling on the `connecting` state before the UI is shown `unreachable`.
+	*  Slightly above the throwaway `testSettings` probe timeout (8s). */
+	static CONNECT_DEADLINE_MS = 1e4;
 	constructor(opts) {
 		this.opts = opts;
 	}
@@ -32827,6 +33056,8 @@ var HaIntegrationManager = class {
 					await this.refreshHaConfigInfo(connection);
 					await this.ensureBaselineSubscription();
 					await this.ensureBusEventSubscriptions();
+					this.clearConnectDeadline();
+					this.lastError = null;
 					this.setStatus("connected");
 					try {
 						this.opts.onConnected?.(this.opts.id);
@@ -32862,14 +33093,32 @@ var HaIntegrationManager = class {
 				}
 			}
 		});
-		try {
-			await this.wsClient.start();
-		} catch (err) {
+		this.startConnectDeadline();
+		this.wsClient.start().catch((err) => {
 			this.classifyAuthError(err);
-			throw err;
+		});
+	}
+	/** Arm the initial-connect deadline. Idempotent — clears any prior timer. */
+	startConnectDeadline() {
+		this.clearConnectDeadline();
+		const timer = setTimeout(() => {
+			this.connectDeadlineTimer = null;
+			if (this.status === "connecting") {
+				if (this.lastError === null) this.lastError = "Connection timed out";
+				this.setStatus("unreachable");
+			}
+		}, HaIntegrationManager.CONNECT_DEADLINE_MS);
+		if (typeof timer.unref === "function") timer.unref();
+		this.connectDeadlineTimer = timer;
+	}
+	clearConnectDeadline() {
+		if (this.connectDeadlineTimer) {
+			clearTimeout(this.connectDeadlineTimer);
+			this.connectDeadlineTimer = null;
 		}
 	}
 	async stop() {
+		this.clearConnectDeadline();
 		if (this.upstreamSubscriptionUnsub) {
 			try {
 				await this.upstreamSubscriptionUnsub();
@@ -33084,15 +33333,19 @@ var HaIntegrationManager = class {
 		}));
 	}
 	classifyAuthError(err) {
+		this.clearConnectDeadline();
 		if (err === 2) {
+			this.lastError = "Authentication failed — check the access token";
 			this.setStatus("auth-failed");
-			this.lastError = "invalid_auth";
-		} else if (err === 1 || err === 4) {
+		} else if (err === 1) {
+			this.lastError = "Cannot connect — host unreachable or Home Assistant not responding";
+			this.setStatus("unreachable");
+		} else if (err === 4) {
+			this.lastError = "Home Assistant host / URL is required";
 			this.setStatus("unreachable");
-			this.lastError = errMsg(err);
 		} else {
-			this.setStatus("error");
 			this.lastError = errMsg(err);
+			this.setStatus("error");
 		}
 	}
 	requireConnection() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-homeassistant",
-  "version": "1.1.28",
+  "version": "1.1.30",
   "description": "Home Assistant device provider addon for CamStack",
   "keywords": [
     "camstack",