@camstack/addon-provider-homeassistant 1.2.146 → 1.2.147

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_dist = require("./dist-BTJhdlL4.js");
+const require_dist = require("./dist-CslhAXSs.js");
 let node_crypto = require("node:crypto");
 let node_zlib = require("node:zlib");
 //#region src/ha-admin-link.ts
@@ -8401,17 +8401,9 @@ var HaProviderAddon = class HaProviderAddon extends require_dist.BaseDeviceProvi
 	*/
 	async onRestoreDevices(savedDevices) {
 		const { standalone, containerChildren, rest } = partitionRestoreDevices(savedDevices);
-		for (const saved of standalone) try {
+		await this.restoreWithBoundedRetry(standalone, async (saved) => {
 			await this.ctx.kernel.devices.create(saved.stableId, standaloneEntityDeviceClass, {});
-		} catch (err) {
-			this.ctx.logger.warn("ha restore: standalone entity device failed", {
-				tags: { stableId: saved.stableId },
-				meta: {
-					type: saved.type,
-					error: require_dist.errMsg(err)
-				}
-			});
-		}
+		});
 		await super.onRestoreDevices(rest);
 	}
 	/** Re-sync every currently-connected broker's adopted devices (Containers +

package/dist/addon.mjs

@@ -1,4 +1,4 @@
-import { $ as parseAdminBase, A as contactCapability, At as union, B as gasCapability, C as buildAddonRouteProvider, Ct as array, D as climateControlCapability, Dt as object, E as carbonMonoxideCapability, Et as number, G as lockControlCapability, H as humiditySensorCapability, I as enumSensorCapability, J as normalizeUnit, K as mediaPlayerCapability, L as eventEmitterCapability, M as coverCapability, Mt as url, N as deviceAdminLinkCapability, Nt as EventCategory, O as colorCapability, Ot as record, P as deviceAdoptionCapability, R as fanControlCapability, S as brokerCapability, St as _enum, T as buttonCapability, Tt as literal, U as imageCapability, V as humidifierCapability, W as lawnMowerControlCapability, X as notifierCapability, Y as notificationOutputCapability, Z as numericSensorCapability, _ as automationControlCapability, _t as DeviceType, at as smokeCapability, b as binaryCapability, bt as createEvent, ct as temperatureSensorCapability, d as TargetSchema, dt as valveCapability, et as powerMeterCapability, f as accessoriesCapability, ft as vibrationCapability, g as ambientLightSensorCapability, gt as DeviceRole, h as alarmPanelCapability, ht as DeviceFeature, it as scriptRunnerCapability, j as controlCapability, jt as unknown, k as connectivityCapability, kt as string, lt as updateCapability, m as airQualitySensorCapability, mt as weatherCapability, n as BaseDevice, nt as presenceCapability, ot as switchCapability, p as addonRoutesCapability, pt as waterHeaterCapability, q as motionCapability, r as BaseDeviceProvider, rt as pressureSensorCapability, s as EnumSensorDateTimeFormatSchema, st as tamperCapability, tt as prepareNotification, ut as vacuumControlCapability, v as batteryCapability, vt as errMsg, w as buildDeviceAdminUrl, wt as discriminatedUnion, x as brightnessCapability, y as bestLocationMatch, z as floodCapability } from "./dist-D2jDnKLv.mjs";
+import { $ as parseAdminBase, A as contactCapability, At as union, B as gasCapability, C as buildAddonRouteProvider, Ct as array, D as climateControlCapability, Dt as object, E as carbonMonoxideCapability, Et as number, G as lockControlCapability, H as humiditySensorCapability, I as enumSensorCapability, J as normalizeUnit, K as mediaPlayerCapability, L as eventEmitterCapability, M as coverCapability, Mt as url, N as deviceAdminLinkCapability, Nt as EventCategory, O as colorCapability, Ot as record, P as deviceAdoptionCapability, R as fanControlCapability, S as brokerCapability, St as _enum, T as buttonCapability, Tt as literal, U as imageCapability, V as humidifierCapability, W as lawnMowerControlCapability, X as notifierCapability, Y as notificationOutputCapability, Z as numericSensorCapability, _ as automationControlCapability, _t as DeviceType, at as smokeCapability, b as binaryCapability, bt as createEvent, ct as temperatureSensorCapability, d as TargetSchema, dt as valveCapability, et as powerMeterCapability, f as accessoriesCapability, ft as vibrationCapability, g as ambientLightSensorCapability, gt as DeviceRole, h as alarmPanelCapability, ht as DeviceFeature, it as scriptRunnerCapability, j as controlCapability, jt as unknown, k as connectivityCapability, kt as string, lt as updateCapability, m as airQualitySensorCapability, mt as weatherCapability, n as BaseDevice, nt as presenceCapability, ot as switchCapability, p as addonRoutesCapability, pt as waterHeaterCapability, q as motionCapability, r as BaseDeviceProvider, rt as pressureSensorCapability, s as EnumSensorDateTimeFormatSchema, st as tamperCapability, tt as prepareNotification, ut as vacuumControlCapability, v as batteryCapability, vt as errMsg, w as buildDeviceAdminUrl, wt as discriminatedUnion, x as brightnessCapability, y as bestLocationMatch, z as floodCapability } from "./dist-DVwhiKWh.mjs";
 import { randomUUID } from "node:crypto";
 import { brotliCompressSync, deflateSync, gzipSync } from "node:zlib";
 //#region src/ha-admin-link.ts
@@ -8400,17 +8400,9 @@ var HaProviderAddon = class HaProviderAddon extends BaseDeviceProvider {
 	*/
 	async onRestoreDevices(savedDevices) {
 		const { standalone, containerChildren, rest } = partitionRestoreDevices(savedDevices);
-		for (const saved of standalone) try {
+		await this.restoreWithBoundedRetry(standalone, async (saved) => {
 			await this.ctx.kernel.devices.create(saved.stableId, standaloneEntityDeviceClass, {});
-		} catch (err) {
-			this.ctx.logger.warn("ha restore: standalone entity device failed", {
-				tags: { stableId: saved.stableId },
-				meta: {
-					type: saved.type,
-					error: errMsg(err)
-				}
-			});
-		}
+		});
 		await super.onRestoreDevices(rest);
 	}
 	/** Re-sync every currently-connected broker's adopted devices (Containers +

package/dist/{dist-BTJhdlL4.js → dist-CslhAXSs.js}

@@ -5370,7 +5370,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-jkRQgtSc.mjs
+//#region ../types/dist/sleep-DlrgY4Qb.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -6985,6 +6985,10 @@ function toNodeId(idOrRunnerId) {
 	const head = idOrRunnerId.split("/")[0];
 	return head === void 0 || head.length === 0 ? idOrRunnerId : head;
 }
+object({
+	field: string().min(1),
+	on: literal("advance")
+});
 /**
 * Output schema shared by the contribution + live methods.
 *
@@ -7468,7 +7472,45 @@ function errMsg(err) {
 	return String(err);
 }
 //#endregion
-//#region ../types/dist/composition-CPFIlFfw.mjs
+//#region ../types/dist/composition-BK-GTFYb.mjs
+/**
+* LA tabella "quale booleano di questo tipo di device conta come ALTO", e il
+* valutatore puro del suo FRONTE.
+*
+* Viveva dentro il builtin virtual-doorbell
+* (`@camstack/system` — `builtins/doorbell/trigger-engine.ts`) e i suoi
+* predicati erano privati al modulo. Il recorder ne ha bisogno per il trigger
+* `RecordingTriggers.sensorDeviceIds`: copiarla avrebbe creato la SECONDA
+* tabella, che diverge alla prima cap aggiunta e il cui sintomo — "il sensore
+* fa suonare il campanello ma non registra" — è esattamente D62. Quindi si
+* SPOSTA qui e il doorbell la ri-esporta.
+*
+* ⚠ NON è `DEVICE_STATE_READERS` (`catalogs/device-state-vocabulary.ts`), e le
+* due non vanno unificate: quella risponde a "qual è la PAROLA di stato per una
+* regola" (e include `presence`, `cover`, `alarm-panel`), questa a "qual è il
+* booleano il cui FRONTE conta". Vocabolari deliberatamente diversi.
+*/
+/**
+* Known binary / switch source caps → the boolean slice field whose
+* false→true rise counts as ACTIVE. Every entry is "fire on active".
+* Sensors whose "active" reading is not a plain boolean (presence's string
+* state, connectivity's connected flag) are deliberately excluded — a
+* reconnect is not a doorbell press, and it is not a recording either.
+*/
+var SOURCE_CAP_ACTIVE_FIELD = {
+	contact: "entryOpen",
+	binary: "on",
+	switch: "on",
+	motion: "detected",
+	flood: "flooded",
+	gas: "detected",
+	smoke: "detected",
+	"carbon-monoxide": "detected",
+	vibration: "detected",
+	tamper: "tampered"
+};
+/** Cap names whose presence in a device's bindings qualify it as a source. */
+var SOURCE_CAPS = Object.keys(SOURCE_CAP_ACTIVE_FIELD);
 /**
 * Error types for the safe expression engine. Two distinct classes so callers
 * can tell a compile-time (grammar) failure from a runtime (evaluation)
@@ -7666,6 +7708,20 @@ var table = {
 			const present = args.flatMap((a, i) => a === null ? [] : [asFiniteNumber(a, "latest", i)]);
 			return present.length === 0 ? null : finiteResult(Math.max(...present), "latest");
 		}
+	},
+	rose: {
+		minArgs: 2,
+		maxArgs: 3,
+		apply: () => {
+			throw new ExpressionEvalError("rose: stateful evaluation context is required");
+		}
+	},
+	count: {
+		minArgs: 1,
+		maxArgs: 1,
+		apply: () => {
+			throw new ExpressionEvalError("count: stateful evaluation context is required");
+		}
 	}
 };
 Object.freeze(Object.assign(Object.create(null), table));
@@ -8180,6 +8236,7 @@ var CompositionItemEntrySchema = object({
 var CompositionFeatureSchema = discriminatedUnion("kind", [object({
 	kind: literal("fields"),
 	cap: string().min(1),
+	enabled: boolean().optional(),
 	fields: record(string().min(1), CompositionFieldSourceSchema).refine((fields) => Object.keys(fields).length <= 32, { message: `at most 32 fields per capability` }),
 	/**
 	* Items of the cap's item array, keyed by item key (D663). Naming `items`
@@ -8191,6 +8248,7 @@ var CompositionFeatureSchema = discriminatedUnion("kind", [object({
 }), object({
 	kind: literal("passthrough"),
 	cap: string().min(1),
+	enabled: boolean().optional(),
 	source: CompositionSourceRefSchema
 })]);
 var CompositionSchema = object({
@@ -13138,6 +13196,15 @@ var cameraStreamsCapability = {
 	*/
 	durability: "session"
 };
+EventCategory.DoorbellOnPressed;
+var CompositionEventPlanSchema = object({
+	featureIndex: number().int().nonnegative(),
+	cap: string(),
+	eventName: string(),
+	category: _enum(EventCategory),
+	stateField: string(),
+	fieldKey: string()
+});
 /** One refusal, named (D391). `path` points into the composition, e.g. `features[0].fields.celsius`. */
 var CompositionProblemSchema = object({
 	code: _enum([
@@ -13187,12 +13254,14 @@ var CompositionUnavailableModeSchema = _enum([
 ]);
 /**
 * `derived` reads a source · `clock` reads only `now`, recomputed when a sibling
-* field of its cap changes value · `constant` reads nothing, computed once.
+* field of its cap changes value · `constant` reads nothing, computed once ·
+* `accumulator` advances from the target's seed/current output.
 */
 var CompositionFieldRoleSchema = _enum([
 	"derived",
 	"clock",
-	"constant"
+	"constant",
+	"accumulator"
 ]);
 /** The item a planned field belongs to; its `path` is then the dotted path INSIDE the item. */
 var CompositionFieldItemSchema = object({
@@ -13228,6 +13297,7 @@ var CompositionFeatureModeSchema = _enum([
 	"replace"
 ]);
 var CompositionFeaturePlanSchema = object({
+	/** Index in the stored feature array; disabled features are omitted rather than re-indexed. */
 	featureIndex: number().int().nonnegative(),
 	cap: string(),
 	mode: CompositionFeatureModeSchema
@@ -13236,7 +13306,8 @@ var CompositionValidationSchema = object({
 	ok: boolean(),
 	problems: array(CompositionProblemSchema),
 	fields: array(CompositionFieldPlanSchema),
-	features: array(CompositionFeaturePlanSchema)
+	features: array(CompositionFeaturePlanSchema),
+	events: array(CompositionEventPlanSchema)
 });
 /**
 * Mirrors `CoreBlockStatus`, pinned by `core-blocks-source.spec.ts`. `degraded`:
@@ -15253,6 +15324,34 @@ var DeviceBindingsForDeviceSchema = object({
 		nativeAddonId: string()
 	}))
 });
+/**
+* The STORED wrapper activation for one `(device, capability)` pair — the row
+* `setWrapperActive` writes, read back three-way (D675):
+*
+* - `value` — the store answered and holds an activation: the bound wrapper's
+*   addon id, or `null`, the operator's explicit "off" marker (D62);
+* - `missing` — the store answered, its activation map exists, and it holds
+*   nothing for this pair: the operator never activated or deactivated a
+*   wrapper here;
+* - `failed` — the store could not be read, holds no activation map at all
+*   (an empty or unready snapshot, D44), or holds something that is not an
+*   activation. It carries NO information: a consumer must never read it as
+*   `missing` (D315, D393).
+*
+* This is the persisted INPUT, not the derived `getBindings` view — no registry
+* resolution, no `defaultActive` auto-binding, no cluster native-cap folding.
+*/
+var WrapperActivationReadSchema = discriminatedUnion("kind", [
+	object({
+		kind: literal("value"),
+		wrapperAddonId: string().nullable()
+	}),
+	object({ kind: literal("missing") }),
+	object({
+		kind: literal("failed"),
+		error: string()
+	})
+]);
 var SavedDeviceRowSchema = object({
 	/** Numeric id reserved at allocateDeviceId time. */
 	id: number(),
@@ -15603,7 +15702,10 @@ method(object({
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ capName: string() }), array(string())), method(object({ deviceType: string() }), array(object({
+}), method(object({
+	deviceId: number(),
+	capName: string().min(1)
+}), WrapperActivationReadSchema), method(object({ capName: string() }), array(string())), method(object({ deviceType: string() }), array(object({
 	capName: string(),
 	wrappers: array(string())
 }))), method(object({ deviceId: number() }), SettingsSchemaWithValuesSchema.nullable()), method(object({ deviceId: number() }), SettingsSchemaWithValuesSchema.nullable()), method(object({ deviceId: number() }), object({
@@ -27251,44 +27353,6 @@ DeviceType.Camera, method(object({
 	auth: "protected"
 });
 /**
-* LA tabella "quale booleano di questo tipo di device conta come ALTO", e il
-* valutatore puro del suo FRONTE.
-*
-* Viveva dentro il builtin virtual-doorbell
-* (`@camstack/system` — `builtins/doorbell/trigger-engine.ts`) e i suoi
-* predicati erano privati al modulo. Il recorder ne ha bisogno per il trigger
-* `RecordingTriggers.sensorDeviceIds`: copiarla avrebbe creato la SECONDA
-* tabella, che diverge alla prima cap aggiunta e il cui sintomo — "il sensore
-* fa suonare il campanello ma non registra" — è esattamente D62. Quindi si
-* SPOSTA qui e il doorbell la ri-esporta.
-*
-* ⚠ NON è `DEVICE_STATE_READERS` (`catalogs/device-state-vocabulary.ts`), e le
-* due non vanno unificate: quella risponde a "qual è la PAROLA di stato per una
-* regola" (e include `presence`, `cover`, `alarm-panel`), questa a "qual è il
-* booleano il cui FRONTE conta". Vocabolari deliberatamente diversi.
-*/
-/**
-* Known binary / switch source caps → the boolean slice field whose
-* false→true rise counts as ACTIVE. Every entry is "fire on active".
-* Sensors whose "active" reading is not a plain boolean (presence's string
-* state, connectivity's connected flag) are deliberately excluded — a
-* reconnect is not a doorbell press, and it is not a recording either.
-*/
-var SOURCE_CAP_ACTIVE_FIELD = {
-	contact: "entryOpen",
-	binary: "on",
-	switch: "on",
-	motion: "detected",
-	flood: "flooded",
-	gas: "detected",
-	smoke: "detected",
-	"carbon-monoxide": "detected",
-	vibration: "detected",
-	tamper: "tampered"
-};
-/** Cap names whose presence in a device's bindings qualify it as a source. */
-var SOURCE_CAPS = Object.keys(SOURCE_CAP_ACTIVE_FIELD);
-/**
 * Doorbell button cap. Two kinds of providers coexist behind this cap
 * name (same pattern as `snapshot`):
 *
@@ -27361,7 +27425,13 @@ var doorbellCapability = {
 	* push (`ReolinkSimpleEvent.type === 'doorbell'`). There is no
 	* release/duration — it's a pulse.
 	*/
-onPressed: { data: DoorbellPressEventSchema } },
+onPressed: {
+		data: DoorbellPressEventSchema,
+		fromState: {
+			field: "lastPressedAt",
+			on: "advance"
+		}
+	} },
 	status: {
 		schema: DoorbellStatusSchema,
 		kind: "push"
@@ -35248,12 +35318,21 @@ var RecordingStorageUsageSchema = object({
 	*/
 	devicesRead: _enum(["archive", "unavailable"]).optional(),
 	/**
+	* Is the `archive` answer WHOLE (D674): the hour ledger loaded without
+	* hitting its row cap, and at least one location resolved? Only then may a
+	* camera ABSENT from `devices[]` be read as "no footage" — and only then is a
+	* row's `oldestMs` the archive's oldest rather than the oldest of a fraction.
+	* OPTIONAL: a recorder predating D674 omits it, and a consumer must read the
+	* absence as `false`. A retention floor is a delete; it never guesses.
+	*/
+	complete: boolean().optional(),
+	/**
 	* Per-physical-volume capacity. OPTIONAL, and consumers must render the rest
-	* of the payload without it: the hub serves this method through a BAKED
-	* router, so a hub whose framework train predates a change to this array
-	* strips it out of an answer a newer recorder happily produced. A UI that
-	* dereferences it unconditionally crashes the whole Storage page over a
-	* missing disk bar.
+	* of the payload without it: a recorder that could not build it omits it. A
+	* UI that dereferences it unconditionally crashes the whole Storage page over
+	* a missing disk bar. (The hub's cap routers pass output through unvalidated
+	* since 2026-07-11 — `cap-router-builder.ts` — so a newer recorder's fields
+	* are not stripped by an older hub.)
 	*/
 	locations: array(RecordingLocationUsageSchema).optional()
 });
@@ -38772,7 +38851,12 @@ Object.freeze({
 	number: {
 		kind: "fixed",
 		result: ["number", "null"]
-	}
+	},
+	rose: {
+		kind: "fixed",
+		result: ["number", "null"]
+	},
+	count: NUMBER
 });
 `${COMPOSED_DEVICE_STABLE_ID_PREFIX}`;
 /**
@@ -39813,6 +39897,7 @@ var BaseDeviceProvider = class extends BaseAddon {
 		}];
 	}
 	async onShutdown() {
+		this._restoreShuttingDown = true;
 		this.cancelRestoreRetries();
 		const devices = await this.ctx.kernel.devices?.getAll() ?? [];
 		for (const device of devices) try {
@@ -39930,6 +40015,7 @@ var BaseDeviceProvider = class extends BaseAddon {
 		};
 	}
 	async restoreDevices(savedDevices) {
+		this._restoreShuttingDown = false;
 		const report = await this.onRestoreDevices(savedDevices);
 		if (savedDevices.length === 0) return;
 		if (report && report.failedCount > 0) {
@@ -39944,8 +40030,13 @@ var BaseDeviceProvider = class extends BaseAddon {
 	/** Retry lane width. See `device-restore-retry.ts` for why retries
 	*  never re-stampede full-width while the initial pass does (D167). */
 	restoreRetryConcurrency = 4;
-	_restoreRetryScheduler = null;
+	/** Every bounded retry this process started — the default pass's, and each
+	*  `restoreWithBoundedRetry` of a provider's own rows. Cancelled together. */
+	_restoreRetrySchedulers = [];
 	_restoreRetryCompletion = null;
+	/** Set by `onShutdown` BEFORE the retries are cancelled: a restore pass still
+	*  in flight must not start a scheduler after the cancel ran. */
+	_restoreShuttingDown = false;
 	_permanentRestoreFailures = /* @__PURE__ */ new Map();
 	/** Settles when the background retry rounds finish (or `null` when
 	*  nothing failed). Exposed for tests and subclass diagnostics —
@@ -40014,8 +40105,8 @@ var BaseDeviceProvider = class extends BaseAddon {
 		});
 	}
 	cancelRestoreRetries() {
-		this._restoreRetryScheduler?.cancel();
-		this._restoreRetryScheduler = null;
+		for (const scheduler of this._restoreRetrySchedulers) scheduler.cancel();
+		this._restoreRetrySchedulers = [];
 	}
 	recordPermanentRestoreFailure(failure) {
 		this._permanentRestoreFailures.set(failure.deviceId, failure);
@@ -40032,6 +40123,13 @@ var BaseDeviceProvider = class extends BaseAddon {
 		});
 	}
 	scheduleRestoreRetries(failures, attempt) {
+		if (this._restoreShuttingDown) {
+			this.ctx.logger.info("Restore retries not scheduled — the provider is shutting down", { meta: {
+				rows: failures.length,
+				deviceIds: failures.map((f) => f.saved.id)
+			} });
+			return;
+		}
 		const scheduler = new DeviceRestoreRetryScheduler({
 			logger: this.ctx.logger,
 			delaysMs: this.restoreRetryDelaysMs,
@@ -40039,10 +40137,54 @@ var BaseDeviceProvider = class extends BaseAddon {
 			attempt,
 			onPermanentFailure: (failure) => this.recordPermanentRestoreFailure(failure)
 		});
-		this._restoreRetryScheduler = scheduler;
-		this._restoreRetryCompletion = scheduler.run(failures).then(() => void 0).catch((err) => {
+		this._restoreRetrySchedulers = [...this._restoreRetrySchedulers, scheduler];
+		const run = scheduler.run(failures).then(() => void 0).catch((err) => {
 			this.ctx.logger.error("Restore retry scheduler crashed", { meta: { error: err instanceof Error ? err.message : String(err) } });
 		});
+		const prior = this._restoreRetryCompletion;
+		this._restoreRetryCompletion = prior === null ? run : Promise.all([prior, run]).then(() => void 0);
+	}
+	/**
+	* Restore rows the default pass does not handle (a provider's own restore
+	* loop) under the SAME bounded retry (D347): one attempt each, in order; a
+	* row that throws is logged with `tags.deviceId` and retried in the
+	* background rounds, then marked permanently failed like any other.
+	*
+	* A restore is a device build, and a build whose runtime-state load did not
+	* answer is REFUSED rather than started on cold defaults (D677) — so a
+	* transient hub read must cost a retry, never the device until the next
+	* runner restart. An ANSWERED `{}` is the device's true state and never
+	* refuses.
+	*/
+	async restoreWithBoundedRetry(rows, attempt) {
+		const failures = [];
+		for (const saved of rows) {
+			if (this.isUnrestorableShell(saved)) {
+				this.quarantineShell(saved);
+				continue;
+			}
+			try {
+				await attempt(saved);
+			} catch (err) {
+				const error = err instanceof Error ? err.message : String(err);
+				this.ctx.logger.warn("Failed to restore device — bounded retry scheduled", {
+					tags: {
+						deviceId: saved.id,
+						stableId: saved.stableId
+					},
+					meta: {
+						type: saved.type,
+						attempt: 1,
+						error
+					}
+				});
+				failures.push({
+					saved,
+					error
+				});
+			}
+		}
+		if (failures.length > 0) this.scheduleRestoreRetries(failures, attempt);
 	}
 	/**
 	* Tear down and reconstruct ONE device from its persisted rows — the
@@ -43352,6 +43494,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.getWrapperActivation": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.listAll": {
 		capName: "device-manager",
 		capScope: "system",
@@ -49161,6 +49309,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.getWrapperActivation": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceManager.listAll": [{
 		name: "deviceIds",
 		form: "array",

package/dist/{dist-D2jDnKLv.mjs → dist-DVwhiKWh.mjs}

@@ -5369,7 +5369,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-jkRQgtSc.mjs
+//#region ../types/dist/sleep-DlrgY4Qb.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -6984,6 +6984,10 @@ function toNodeId(idOrRunnerId) {
 	const head = idOrRunnerId.split("/")[0];
 	return head === void 0 || head.length === 0 ? idOrRunnerId : head;
 }
+object({
+	field: string().min(1),
+	on: literal("advance")
+});
 /**
 * Output schema shared by the contribution + live methods.
 *
@@ -7467,7 +7471,45 @@ function errMsg(err) {
 	return String(err);
 }
 //#endregion
-//#region ../types/dist/composition-CPFIlFfw.mjs
+//#region ../types/dist/composition-BK-GTFYb.mjs
+/**
+* LA tabella "quale booleano di questo tipo di device conta come ALTO", e il
+* valutatore puro del suo FRONTE.
+*
+* Viveva dentro il builtin virtual-doorbell
+* (`@camstack/system` — `builtins/doorbell/trigger-engine.ts`) e i suoi
+* predicati erano privati al modulo. Il recorder ne ha bisogno per il trigger
+* `RecordingTriggers.sensorDeviceIds`: copiarla avrebbe creato la SECONDA
+* tabella, che diverge alla prima cap aggiunta e il cui sintomo — "il sensore
+* fa suonare il campanello ma non registra" — è esattamente D62. Quindi si
+* SPOSTA qui e il doorbell la ri-esporta.
+*
+* ⚠ NON è `DEVICE_STATE_READERS` (`catalogs/device-state-vocabulary.ts`), e le
+* due non vanno unificate: quella risponde a "qual è la PAROLA di stato per una
+* regola" (e include `presence`, `cover`, `alarm-panel`), questa a "qual è il
+* booleano il cui FRONTE conta". Vocabolari deliberatamente diversi.
+*/
+/**
+* Known binary / switch source caps → the boolean slice field whose
+* false→true rise counts as ACTIVE. Every entry is "fire on active".
+* Sensors whose "active" reading is not a plain boolean (presence's string
+* state, connectivity's connected flag) are deliberately excluded — a
+* reconnect is not a doorbell press, and it is not a recording either.
+*/
+var SOURCE_CAP_ACTIVE_FIELD = {
+	contact: "entryOpen",
+	binary: "on",
+	switch: "on",
+	motion: "detected",
+	flood: "flooded",
+	gas: "detected",
+	smoke: "detected",
+	"carbon-monoxide": "detected",
+	vibration: "detected",
+	tamper: "tampered"
+};
+/** Cap names whose presence in a device's bindings qualify it as a source. */
+var SOURCE_CAPS = Object.keys(SOURCE_CAP_ACTIVE_FIELD);
 /**
 * Error types for the safe expression engine. Two distinct classes so callers
 * can tell a compile-time (grammar) failure from a runtime (evaluation)
@@ -7665,6 +7707,20 @@ var table = {
 			const present = args.flatMap((a, i) => a === null ? [] : [asFiniteNumber(a, "latest", i)]);
 			return present.length === 0 ? null : finiteResult(Math.max(...present), "latest");
 		}
+	},
+	rose: {
+		minArgs: 2,
+		maxArgs: 3,
+		apply: () => {
+			throw new ExpressionEvalError("rose: stateful evaluation context is required");
+		}
+	},
+	count: {
+		minArgs: 1,
+		maxArgs: 1,
+		apply: () => {
+			throw new ExpressionEvalError("count: stateful evaluation context is required");
+		}
 	}
 };
 Object.freeze(Object.assign(Object.create(null), table));
@@ -8179,6 +8235,7 @@ var CompositionItemEntrySchema = object({
 var CompositionFeatureSchema = discriminatedUnion("kind", [object({
 	kind: literal("fields"),
 	cap: string().min(1),
+	enabled: boolean().optional(),
 	fields: record(string().min(1), CompositionFieldSourceSchema).refine((fields) => Object.keys(fields).length <= 32, { message: `at most 32 fields per capability` }),
 	/**
 	* Items of the cap's item array, keyed by item key (D663). Naming `items`
@@ -8190,6 +8247,7 @@ var CompositionFeatureSchema = discriminatedUnion("kind", [object({
 }), object({
 	kind: literal("passthrough"),
 	cap: string().min(1),
+	enabled: boolean().optional(),
 	source: CompositionSourceRefSchema
 })]);
 var CompositionSchema = object({
@@ -13137,6 +13195,15 @@ var cameraStreamsCapability = {
 	*/
 	durability: "session"
 };
+EventCategory.DoorbellOnPressed;
+var CompositionEventPlanSchema = object({
+	featureIndex: number().int().nonnegative(),
+	cap: string(),
+	eventName: string(),
+	category: _enum(EventCategory),
+	stateField: string(),
+	fieldKey: string()
+});
 /** One refusal, named (D391). `path` points into the composition, e.g. `features[0].fields.celsius`. */
 var CompositionProblemSchema = object({
 	code: _enum([
@@ -13186,12 +13253,14 @@ var CompositionUnavailableModeSchema = _enum([
 ]);
 /**
 * `derived` reads a source · `clock` reads only `now`, recomputed when a sibling
-* field of its cap changes value · `constant` reads nothing, computed once.
+* field of its cap changes value · `constant` reads nothing, computed once ·
+* `accumulator` advances from the target's seed/current output.
 */
 var CompositionFieldRoleSchema = _enum([
 	"derived",
 	"clock",
-	"constant"
+	"constant",
+	"accumulator"
 ]);
 /** The item a planned field belongs to; its `path` is then the dotted path INSIDE the item. */
 var CompositionFieldItemSchema = object({
@@ -13227,6 +13296,7 @@ var CompositionFeatureModeSchema = _enum([
 	"replace"
 ]);
 var CompositionFeaturePlanSchema = object({
+	/** Index in the stored feature array; disabled features are omitted rather than re-indexed. */
 	featureIndex: number().int().nonnegative(),
 	cap: string(),
 	mode: CompositionFeatureModeSchema
@@ -13235,7 +13305,8 @@ var CompositionValidationSchema = object({
 	ok: boolean(),
 	problems: array(CompositionProblemSchema),
 	fields: array(CompositionFieldPlanSchema),
-	features: array(CompositionFeaturePlanSchema)
+	features: array(CompositionFeaturePlanSchema),
+	events: array(CompositionEventPlanSchema)
 });
 /**
 * Mirrors `CoreBlockStatus`, pinned by `core-blocks-source.spec.ts`. `degraded`:
@@ -15252,6 +15323,34 @@ var DeviceBindingsForDeviceSchema = object({
 		nativeAddonId: string()
 	}))
 });
+/**
+* The STORED wrapper activation for one `(device, capability)` pair — the row
+* `setWrapperActive` writes, read back three-way (D675):
+*
+* - `value` — the store answered and holds an activation: the bound wrapper's
+*   addon id, or `null`, the operator's explicit "off" marker (D62);
+* - `missing` — the store answered, its activation map exists, and it holds
+*   nothing for this pair: the operator never activated or deactivated a
+*   wrapper here;
+* - `failed` — the store could not be read, holds no activation map at all
+*   (an empty or unready snapshot, D44), or holds something that is not an
+*   activation. It carries NO information: a consumer must never read it as
+*   `missing` (D315, D393).
+*
+* This is the persisted INPUT, not the derived `getBindings` view — no registry
+* resolution, no `defaultActive` auto-binding, no cluster native-cap folding.
+*/
+var WrapperActivationReadSchema = discriminatedUnion("kind", [
+	object({
+		kind: literal("value"),
+		wrapperAddonId: string().nullable()
+	}),
+	object({ kind: literal("missing") }),
+	object({
+		kind: literal("failed"),
+		error: string()
+	})
+]);
 var SavedDeviceRowSchema = object({
 	/** Numeric id reserved at allocateDeviceId time. */
 	id: number(),
@@ -15602,7 +15701,10 @@ method(object({
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ capName: string() }), array(string())), method(object({ deviceType: string() }), array(object({
+}), method(object({
+	deviceId: number(),
+	capName: string().min(1)
+}), WrapperActivationReadSchema), method(object({ capName: string() }), array(string())), method(object({ deviceType: string() }), array(object({
 	capName: string(),
 	wrappers: array(string())
 }))), method(object({ deviceId: number() }), SettingsSchemaWithValuesSchema.nullable()), method(object({ deviceId: number() }), SettingsSchemaWithValuesSchema.nullable()), method(object({ deviceId: number() }), object({
@@ -27250,44 +27352,6 @@ DeviceType.Camera, method(object({
 	auth: "protected"
 });
 /**
-* LA tabella "quale booleano di questo tipo di device conta come ALTO", e il
-* valutatore puro del suo FRONTE.
-*
-* Viveva dentro il builtin virtual-doorbell
-* (`@camstack/system` — `builtins/doorbell/trigger-engine.ts`) e i suoi
-* predicati erano privati al modulo. Il recorder ne ha bisogno per il trigger
-* `RecordingTriggers.sensorDeviceIds`: copiarla avrebbe creato la SECONDA
-* tabella, che diverge alla prima cap aggiunta e il cui sintomo — "il sensore
-* fa suonare il campanello ma non registra" — è esattamente D62. Quindi si
-* SPOSTA qui e il doorbell la ri-esporta.
-*
-* ⚠ NON è `DEVICE_STATE_READERS` (`catalogs/device-state-vocabulary.ts`), e le
-* due non vanno unificate: quella risponde a "qual è la PAROLA di stato per una
-* regola" (e include `presence`, `cover`, `alarm-panel`), questa a "qual è il
-* booleano il cui FRONTE conta". Vocabolari deliberatamente diversi.
-*/
-/**
-* Known binary / switch source caps → the boolean slice field whose
-* false→true rise counts as ACTIVE. Every entry is "fire on active".
-* Sensors whose "active" reading is not a plain boolean (presence's string
-* state, connectivity's connected flag) are deliberately excluded — a
-* reconnect is not a doorbell press, and it is not a recording either.
-*/
-var SOURCE_CAP_ACTIVE_FIELD = {
-	contact: "entryOpen",
-	binary: "on",
-	switch: "on",
-	motion: "detected",
-	flood: "flooded",
-	gas: "detected",
-	smoke: "detected",
-	"carbon-monoxide": "detected",
-	vibration: "detected",
-	tamper: "tampered"
-};
-/** Cap names whose presence in a device's bindings qualify it as a source. */
-var SOURCE_CAPS = Object.keys(SOURCE_CAP_ACTIVE_FIELD);
-/**
 * Doorbell button cap. Two kinds of providers coexist behind this cap
 * name (same pattern as `snapshot`):
 *
@@ -27360,7 +27424,13 @@ var doorbellCapability = {
 	* push (`ReolinkSimpleEvent.type === 'doorbell'`). There is no
 	* release/duration — it's a pulse.
 	*/
-onPressed: { data: DoorbellPressEventSchema } },
+onPressed: {
+		data: DoorbellPressEventSchema,
+		fromState: {
+			field: "lastPressedAt",
+			on: "advance"
+		}
+	} },
 	status: {
 		schema: DoorbellStatusSchema,
 		kind: "push"
@@ -35247,12 +35317,21 @@ var RecordingStorageUsageSchema = object({
 	*/
 	devicesRead: _enum(["archive", "unavailable"]).optional(),
 	/**
+	* Is the `archive` answer WHOLE (D674): the hour ledger loaded without
+	* hitting its row cap, and at least one location resolved? Only then may a
+	* camera ABSENT from `devices[]` be read as "no footage" — and only then is a
+	* row's `oldestMs` the archive's oldest rather than the oldest of a fraction.
+	* OPTIONAL: a recorder predating D674 omits it, and a consumer must read the
+	* absence as `false`. A retention floor is a delete; it never guesses.
+	*/
+	complete: boolean().optional(),
+	/**
 	* Per-physical-volume capacity. OPTIONAL, and consumers must render the rest
-	* of the payload without it: the hub serves this method through a BAKED
-	* router, so a hub whose framework train predates a change to this array
-	* strips it out of an answer a newer recorder happily produced. A UI that
-	* dereferences it unconditionally crashes the whole Storage page over a
-	* missing disk bar.
+	* of the payload without it: a recorder that could not build it omits it. A
+	* UI that dereferences it unconditionally crashes the whole Storage page over
+	* a missing disk bar. (The hub's cap routers pass output through unvalidated
+	* since 2026-07-11 — `cap-router-builder.ts` — so a newer recorder's fields
+	* are not stripped by an older hub.)
 	*/
 	locations: array(RecordingLocationUsageSchema).optional()
 });
@@ -38771,7 +38850,12 @@ Object.freeze({
 	number: {
 		kind: "fixed",
 		result: ["number", "null"]
-	}
+	},
+	rose: {
+		kind: "fixed",
+		result: ["number", "null"]
+	},
+	count: NUMBER
 });
 `${COMPOSED_DEVICE_STABLE_ID_PREFIX}`;
 /**
@@ -39812,6 +39896,7 @@ var BaseDeviceProvider = class extends BaseAddon {
 		}];
 	}
 	async onShutdown() {
+		this._restoreShuttingDown = true;
 		this.cancelRestoreRetries();
 		const devices = await this.ctx.kernel.devices?.getAll() ?? [];
 		for (const device of devices) try {
@@ -39929,6 +40014,7 @@ var BaseDeviceProvider = class extends BaseAddon {
 		};
 	}
 	async restoreDevices(savedDevices) {
+		this._restoreShuttingDown = false;
 		const report = await this.onRestoreDevices(savedDevices);
 		if (savedDevices.length === 0) return;
 		if (report && report.failedCount > 0) {
@@ -39943,8 +40029,13 @@ var BaseDeviceProvider = class extends BaseAddon {
 	/** Retry lane width. See `device-restore-retry.ts` for why retries
 	*  never re-stampede full-width while the initial pass does (D167). */
 	restoreRetryConcurrency = 4;
-	_restoreRetryScheduler = null;
+	/** Every bounded retry this process started — the default pass's, and each
+	*  `restoreWithBoundedRetry` of a provider's own rows. Cancelled together. */
+	_restoreRetrySchedulers = [];
 	_restoreRetryCompletion = null;
+	/** Set by `onShutdown` BEFORE the retries are cancelled: a restore pass still
+	*  in flight must not start a scheduler after the cancel ran. */
+	_restoreShuttingDown = false;
 	_permanentRestoreFailures = /* @__PURE__ */ new Map();
 	/** Settles when the background retry rounds finish (or `null` when
 	*  nothing failed). Exposed for tests and subclass diagnostics —
@@ -40013,8 +40104,8 @@ var BaseDeviceProvider = class extends BaseAddon {
 		});
 	}
 	cancelRestoreRetries() {
-		this._restoreRetryScheduler?.cancel();
-		this._restoreRetryScheduler = null;
+		for (const scheduler of this._restoreRetrySchedulers) scheduler.cancel();
+		this._restoreRetrySchedulers = [];
 	}
 	recordPermanentRestoreFailure(failure) {
 		this._permanentRestoreFailures.set(failure.deviceId, failure);
@@ -40031,6 +40122,13 @@ var BaseDeviceProvider = class extends BaseAddon {
 		});
 	}
 	scheduleRestoreRetries(failures, attempt) {
+		if (this._restoreShuttingDown) {
+			this.ctx.logger.info("Restore retries not scheduled — the provider is shutting down", { meta: {
+				rows: failures.length,
+				deviceIds: failures.map((f) => f.saved.id)
+			} });
+			return;
+		}
 		const scheduler = new DeviceRestoreRetryScheduler({
 			logger: this.ctx.logger,
 			delaysMs: this.restoreRetryDelaysMs,
@@ -40038,10 +40136,54 @@ var BaseDeviceProvider = class extends BaseAddon {
 			attempt,
 			onPermanentFailure: (failure) => this.recordPermanentRestoreFailure(failure)
 		});
-		this._restoreRetryScheduler = scheduler;
-		this._restoreRetryCompletion = scheduler.run(failures).then(() => void 0).catch((err) => {
+		this._restoreRetrySchedulers = [...this._restoreRetrySchedulers, scheduler];
+		const run = scheduler.run(failures).then(() => void 0).catch((err) => {
 			this.ctx.logger.error("Restore retry scheduler crashed", { meta: { error: err instanceof Error ? err.message : String(err) } });
 		});
+		const prior = this._restoreRetryCompletion;
+		this._restoreRetryCompletion = prior === null ? run : Promise.all([prior, run]).then(() => void 0);
+	}
+	/**
+	* Restore rows the default pass does not handle (a provider's own restore
+	* loop) under the SAME bounded retry (D347): one attempt each, in order; a
+	* row that throws is logged with `tags.deviceId` and retried in the
+	* background rounds, then marked permanently failed like any other.
+	*
+	* A restore is a device build, and a build whose runtime-state load did not
+	* answer is REFUSED rather than started on cold defaults (D677) — so a
+	* transient hub read must cost a retry, never the device until the next
+	* runner restart. An ANSWERED `{}` is the device's true state and never
+	* refuses.
+	*/
+	async restoreWithBoundedRetry(rows, attempt) {
+		const failures = [];
+		for (const saved of rows) {
+			if (this.isUnrestorableShell(saved)) {
+				this.quarantineShell(saved);
+				continue;
+			}
+			try {
+				await attempt(saved);
+			} catch (err) {
+				const error = err instanceof Error ? err.message : String(err);
+				this.ctx.logger.warn("Failed to restore device — bounded retry scheduled", {
+					tags: {
+						deviceId: saved.id,
+						stableId: saved.stableId
+					},
+					meta: {
+						type: saved.type,
+						attempt: 1,
+						error
+					}
+				});
+				failures.push({
+					saved,
+					error
+				});
+			}
+		}
+		if (failures.length > 0) this.scheduleRestoreRetries(failures, attempt);
 	}
 	/**
 	* Tear down and reconstruct ONE device from its persisted rows — the
@@ -43351,6 +43493,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.getWrapperActivation": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.listAll": {
 		capName: "device-manager",
 		capScope: "system",
@@ -49160,6 +49308,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.getWrapperActivation": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceManager.listAll": [{
 		name: "deviceIds",
 		form: "array",

package/dist/ha-export/ha-export.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 //#endregion
-const require_dist = require("../dist-BTJhdlL4.js");
+const require_dist = require("../dist-CslhAXSs.js");
 let node_crypto = require("node:crypto");
 //#region src/ha-export/topics.ts
 /**

package/dist/ha-export/ha-export.addon.mjs

@@ -1,4 +1,4 @@
-import { C as buildAddonRouteProvider, F as deviceExportCapability, Nt as EventCategory, Q as oauthIntegrationCapability, a as COCO_TO_MACRO, c as FanDirectionSchema, i as CAMERA_SWITCH_ORDER, kt as string, l as HvacModeSchema, o as CameraSwitchIdSchema, p as addonRoutesCapability, t as AlarmArmModeSchema, u as MediaPlayerRepeatSchema, xt as nodePin, yt as BaseAddon } from "../dist-D2jDnKLv.mjs";
+import { C as buildAddonRouteProvider, F as deviceExportCapability, Nt as EventCategory, Q as oauthIntegrationCapability, a as COCO_TO_MACRO, c as FanDirectionSchema, i as CAMERA_SWITCH_ORDER, kt as string, l as HvacModeSchema, o as CameraSwitchIdSchema, p as addonRoutesCapability, t as AlarmArmModeSchema, u as MediaPlayerRepeatSchema, xt as nodePin, yt as BaseAddon } from "../dist-DVwhiKWh.mjs";
 import { createHmac, timingSafeEqual } from "node:crypto";
 //#region src/ha-export/topics.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-homeassistant",
-  "version": "1.2.146",
+  "version": "1.2.147",
   "description": "Home Assistant device provider addon for CamStack",
   "keywords": [
     "camstack",