@camstack/addon-provider-homeassistant 1.2.639 → 1.2.640

package/dist/{dist-Cvz76AD1.mjs → ha-broker-source-FHFpUlgq.mjs}

@@ -5587,7 +5587,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-6eG9C8Xl.mjs
+//#region ../types/dist/sleep-CeyhrcOk.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -7654,6 +7654,7 @@ var BaseAddon = class {
 	* a warning and falls back rather than crashing boot.
 	*/
 	state(key, schema, fallback) {
+		this._declaredStateKeys.add(key);
 		return createDurableState({
 			key,
 			schema,
@@ -7669,6 +7670,96 @@ var BaseAddon = class {
 			} })
 		});
 	}
+	/** Durable-state keys this process registered through {@link state}. */
+	_declaredStateKeys = /* @__PURE__ */ new Set();
+	/**
+	* Stale-data audit: every global-settings key this addon still declares —
+	* constructor defaults, settings-schema fields (layout containers included),
+	* durable-state keys and the root of each `secretStatePaths` entry. Answered
+	* here, in the addon's own process, so the hub keeps no copy of it.
+	*/
+	async getDeclaredSettingsKeys() {
+		return { keys: [...this.declaredKeySet()].toSorted() };
+	}
+	declaredKeySet() {
+		const keys = new Set(Object.keys(this.defaults));
+		const schema = this.globalSettingsSchema();
+		if (schema) for (const section of schema.sections) for (const key of collectFieldKeys(section.fields)) keys.add(key);
+		for (const key of this._declaredStateKeys) keys.add(key);
+		for (const path of this.secretStatePaths) {
+			const root = path.split(/[.[]/, 1)[0];
+			if (root) keys.add(root);
+		}
+		return keys;
+	}
+	/**
+	* Stale-data audit: remove stored global-settings keys the addon no longer
+	* declares, and clear the keychain values their markers held — except a value
+	* a surviving key still points at. A declared or absent key is refused.
+	*/
+	async unsetStoredSettingsKeys(keys) {
+		const settings = this._ctx?.settings;
+		const raw = this.rawSettings();
+		if (!settings || !raw) return {
+			removed: [],
+			refused: keys.map((key) => ({
+				key,
+				reason: "no settings store"
+			})),
+			secretsCleared: 0
+		};
+		let stored;
+		try {
+			stored = await raw.readAddonStore();
+		} catch (error) {
+			const reason = `store unreadable: ${error instanceof Error ? error.message : "unknown"}`;
+			return {
+				removed: [],
+				refused: keys.map((key) => ({
+					key,
+					reason
+				})),
+				secretsCleared: 0
+			};
+		}
+		const declared = this.declaredKeySet();
+		const removed = [];
+		const refused = [];
+		for (const key of keys) {
+			const base = key.split("@", 1)[0] ?? key;
+			if (declared.has(base)) refused.push({
+				key,
+				reason: "still declared by the addon"
+			});
+			else if (!(key in stored)) refused.push({
+				key,
+				reason: "not stored"
+			});
+			else removed.push(key);
+		}
+		if (removed.length === 0) return {
+			removed,
+			refused,
+			secretsCleared: 0
+		};
+		const kept = /* @__PURE__ */ new Set();
+		const held = /* @__PURE__ */ new Set();
+		for (const [key, value] of Object.entries(stored)) {
+			const target = removed.includes(key) ? held : kept;
+			for (const ref of collectSecretMarkerRefs(value)) target.add(ref);
+		}
+		const refsToClear = [...held].filter((ref) => !kept.has(ref));
+		const patch = {};
+		for (const key of removed) patch[key] = void 0;
+		await settings.writeAddonStore(patch);
+		const secretsCleared = refsToClear.length > 0 && this._ctx?.secrets ? await this._ctx.secrets.delete(refsToClear) : 0;
+		await this.resolveConfig();
+		return {
+			removed,
+			refused,
+			secretsCleared
+		};
+	}
 	/** Per-device variant of {@link state}, backed by the per-device store. */
 	deviceState(deviceId, key, schema, fallback) {
 		return createDurableState({
@@ -7939,6 +8030,21 @@ function dropPerNodeFields(fields) {
 	}
 	return kept;
 }
+function collectFieldKeys(fields) {
+	const collected = [];
+	for (const field of fields) {
+		if (field.type === "group") {
+			collected.push(...collectFieldKeys(field.fields));
+			continue;
+		}
+		if (field.type === "sub-tabs") {
+			for (const tab of field.tabs) collected.push(...collectFieldKeys(tab.fields));
+			continue;
+		}
+		if ("key" in field && typeof field.key === "string") collected.push(field.key);
+	}
+	return collected;
+}
 function collectPerNodeFieldKeys(fields) {
 	const collected = [];
 	for (const field of fields) {
@@ -9171,6 +9277,7 @@ var CAP_NAMES = Object.freeze([
 	"recording-signal",
 	"records",
 	"remote",
+	"remote-layout-components",
 	"running-state",
 	"scene-monitor",
 	"script-runner",
@@ -11016,7 +11123,7 @@ object({
 	params: record(string(), union([string(), number()])).optional()
 });
 //#endregion
-//#region ../types/dist/err-msg-DWXWc0Di.mjs
+//#region ../types/dist/err-msg-BD5buxvT.mjs
 var DeviceType = /* @__PURE__ */ function(DeviceType) {
 	DeviceType["Camera"] = "camera";
 	DeviceType["Hub"] = "hub";
@@ -11122,6 +11229,12 @@ var DeviceType = /* @__PURE__ */ function(DeviceType) {
 	DeviceType["Washer"] = "washer";
 	/** Tumble dryer. Same plug-built running surface as {@link Washer}. */
 	DeviceType["Dryer"] = "dryer";
+	/** The physical bridge box of a vendor ecosystem (Velux KLF-200, and later
+	*  other radio-to-IP bridges). It carries the box's own facts (firmware,
+	*  address, connection state) and the actions the box really supports
+	*  (`reboot`, `device-admin-link`). Products are NOT its children — they are
+	*  adopted beside it — and its connection settings stay on the integration. */
+	DeviceType["Gateway"] = "gateway";
 	return DeviceType;
 }({});
 var DeviceFeature = /* @__PURE__ */ function(DeviceFeature) {
@@ -11382,7 +11495,7 @@ function errMsg(err) {
 	return String(err);
 }
 //#endregion
-//#region ../types/dist/composition-kSuOifuG.mjs
+//#region ../types/dist/composition-C7WdThmP.mjs
 /**
 * The ffmpeg build every CamStack node downloads, per platform and arch.
 *
@@ -16043,246 +16156,630 @@ object({
 		path: ["expr"]
 	});
 });
-/** How a leaf compares a device field to a value. Derived from the field's
-*  `kind` in `deviceManager.getWireableFields`, never hand-maintained. */
-var AutomationConditionOperatorSchema = _enum([
-	"eq",
-	"ne",
-	"gt",
-	"gte",
-	"lt",
-	"lte",
-	"contains",
-	"in"
-]);
-var AutomationConditionLeafSchema = object({
-	kind: literal("condition"),
-	deviceId: number().int().nonnegative(),
-	cap: string().min(1),
-	fieldPath: string().min(1),
-	operator: AutomationConditionOperatorSchema,
-	value: union([
-		string(),
-		number(),
-		boolean(),
-		array(union([string(), number()]))
-	])
-});
-var AutomationConditionStationaryPresentSchema = object({
-	kind: literal("stationary-present"),
-	deviceId: number().int().nonnegative(),
-	/** Class names; a macro class matches every raw class that maps to it. */
-	classes: array(string().min(1)).min(1).optional(),
-	/** The parked object must be in at least one of these zones. */
-	zones: array(string().min(1)).min(1).optional()
-});
 /**
-* The expression leaf, declared as a plain object rather than an intersection
-* with {@link ExpressionSourceSchema}: a discriminated union has to be able to
-* read `kind` off each option, and an intersection hides it. The author-time
-* validation is the SAME function `ExpressionSourceSchema` runs, so the two
-* cannot drift — an expression that one accepts, the other accepts.
+* Identity envelope for a device's upstream-system metadata.
+*
+* Two jobs:
+*
+*   1. **Dispatch key.** `id` is the natural identifier the SOURCE system
+*      uses to address this device (HA `entity_id`, Reolink MAC, ONVIF
+*      WS-Discovery endpoint UUID, …). Provider code keeps a
+*      `Map<sourceInfo.id, IDevice>` to route inbound push events in O(1)
+*      without round-tripping through `stableId` / `id` mappings.
+*
+*   2. **Stability bridge.** `uniqueId` is the *immutable* upstream id when
+*      one exists (HA `entity.unique_id`, Reolink MAC again — same as `id`
+*      for vendors where MAC is the natural key). For systems where the
+*      live dispatch key can be renamed (HA `entity_id` can be edited),
+*      providers detect renames by matching `uniqueId` and patch `id`
+*      in-place so dispatch keeps working.
+*
+* **Display unit and precision are NOT stored here.** They are a read-time
+* preference (D944). A polymorphic reading stores its `quantity` here once,
+* at adopt, and a date/time value stores `dateTimeShape` the same way —
+* neither is repeated on each sample. The `device_class` tag is an
+* HA-specific input consumed at the discovery boundary (`ha-domain-mapping`)
+* to derive the CamStack `DeviceRole`; it is never stored after that point.
+*
+* The `raw` escape hatch carries provider-specific attributes that don't
+* fit the structured slots (HA `attributes` whitelist, Reolink `deviceCache`
+* details, …). Providers control what lands here.
 */
-var AutomationConditionExpressionSchema = object({
-	kind: literal("expression"),
-	expr: string().min(1).max(MAX_EXPRESSION_SOURCE_LENGTH),
-	bindings: record(string().regex(EXPRESSION_IDENTIFIER_RE), ExpressionBindingSourceSchema)
-}).superRefine((src, ctx) => {
-	const err = validateExpressionSource(src);
-	if (err !== null) ctx.addIssue({
-		code: "custom",
-		message: err,
-		path: ["expr"]
-	});
+var SourceInfoSchema = object({
+	/** Live dispatch key — mutable when the source system allows rename. */
+	id: string(),
+	/** Source system tag — e.g. 'homeassistant' | 'reolink' | 'onvif'. */
+	system: string(),
+	/** Immutable upstream identifier when available (HA `unique_id`, … ).
+	*  Used to detect rename when `id` changes. */
+	uniqueId: string().optional(),
+	/** Quantity of a polymorphic reading, written once at adopt (D944). */
+	quantity: ReadingQuantitySchema.optional(),
+	/** Date / time / datetime shape of a string reading, written once at adopt. */
+	dateTimeShape: _enum([
+		"date",
+		"time",
+		"datetime"
+	]).optional(),
+	/** Provider-specific extras that don't fit the structured slots.
+	*  Whitelist what goes here per provider — do NOT dump entire HA
+	*  attribute blobs (would explode the meta JSON column). */
+	raw: record(string(), unknown()).optional()
 });
-var AutomationConditionSchema = lazy(() => discriminatedUnion("kind", [
-	object({
-		kind: literal("all"),
-		children: array(AutomationConditionSchema)
-	}),
-	object({
-		kind: literal("any"),
-		children: array(AutomationConditionSchema)
-	}),
-	object({
-		kind: literal("not"),
-		child: AutomationConditionSchema
-	}),
-	AutomationConditionLeafSchema,
-	AutomationConditionExpressionSchema,
-	AutomationConditionStationaryPresentSchema
-]));
 /**
-* What starts a run.
-*
-* D8 compliance, and it is the reason `device-state` is not merely an event
-* subscription: the trigger evaluates against the **state mirror**, which is
-* reconciled, and an event only WAKES the evaluation. A dropped event therefore
-* DELAYS a trigger; it does not lose it. `schedule` uses `croner` — the one
-* already in the repo — because `setInterval(24h)` drifts and "at 23:30" does
-* not.
+* Build the synthetic SourceInfo every existing provider falls back to
+* when no upstream value has been persisted. Keeps non-migrated providers
+* (Reolink / Hikvision / ONVIF / RTSP) functional without code
+* changes — `id` reuses the CamStack stableId, `system` reuses the addon
+* id. Real upstream identity replaces this once a provider migrates and
+* calls `updateSourceInfo()` with concrete values.
 */
-var AutomationTriggerSchema = discriminatedUnion("kind", [
-	object({
-		kind: literal("device-state"),
-		deviceId: number().int().nonnegative(),
-		cap: string().min(1),
-		fieldPath: string().min(1),
-		/** Fire when the field takes this value. Omit to fire on any change. */
-		becomes: union([
-			string(),
-			number(),
-			boolean()
-		]).optional(),
-		/** Only on a CHANGE of value, not on every re-report. */
-		edge: boolean().optional(),
-		/** The condition must hold this long before the run starts. */
-		forMs: number().int().min(0).max(864e5).optional(),
-		/** Collapse a burst into one run. */
-		debounceMs: number().int().min(0).max(6e5).optional()
-	}),
-	object({
-		kind: literal("device-event"),
-		/** An `EventCategory` value. */
-		category: string().min(1),
-		deviceId: number().int().nonnegative().optional()
-	}),
-	object({
-		kind: literal("schedule"),
-		cron: string().min(1).max(120)
-	}),
-	object({ kind: literal("manual") }),
-	object({
-		kind: literal("detection"),
-		/** Class names. A macro class (`animal`, `vehicle`, `person`, `package`)
-		*  matches every raw class that maps to it; any other name matches
-		*  exactly. */
-		classes: array(string().min(1)).min(1),
-		deviceIds: array(number().int().nonnegative()).min(1),
-		/** The track must have visited at least one of these zones. */
-		zones: array(string().min(1)).min(1).optional(),
-		/** Best-so-far confidence the track must reach. */
-		minScore: number().min(0).max(1).optional()
-	}),
-	object({
-		kind: literal("stationary"),
-		deviceIds: array(number().int().nonnegative()).min(1),
-		/** Class names; a macro class matches like the detection trigger. */
-		classes: array(string().min(1)).min(1).optional(),
-		/** The parked object must be in at least one of these zones. */
-		zones: array(string().min(1)).min(1).optional(),
-		/** `appeared`: it became parked. `departed`: the registry retired it.
-		*  The vocabulary of `PipelineAnalyticsStationaryChanged`. */
-		phase: _enum(["appeared", "departed"])
-	}),
-	object({
-		kind: literal("interval"),
-		minutes: number().int().min(1).max(1440)
-	})
-]);
+function synthesizeSourceInfo(input) {
+	return {
+		id: input.stableId,
+		system: input.addonId
+	};
+}
 /**
-* One action step.
+* Shallow-merge a partial patch over a prior SourceInfo. `undefined`
+* patch values are ignored (no field clobber); to clear a field
+* explicitly, providers omit it from the patch and rebuild from scratch
+* via `updateSourceInfo({})` cycles — uncommon enough that we don't
+* bother with a `null`-means-delete sentinel.
 *
-* `wait` and `cap` are `NcRuleActionSchema`'s two members, kept structurally
-* identical so `NcRuleActionRunner` runs them unchanged — its device-scope
-* check, stop-at-first-failure and per-sequence throttle are the whole reason
-* to reuse it, and none of them are re-implemented here.
+* The `raw` field is also shallow-merged: passing `raw: { foo: 1 }`
+* merges over existing `raw` keys instead of replacing the whole bag.
+*/
+function mergeSourceInfo(prev, patch) {
+	const next = { ...prev };
+	for (const [k, v] of Object.entries(patch)) {
+		if (v === void 0) continue;
+		if (k === "raw" && typeof v === "object" && v !== null) {
+			next.raw = {
+				...prev.raw,
+				...v
+			};
+			continue;
+		}
+		next[k] = v;
+	}
+	return next;
+}
+/**
+* Coerce common unit-of-measurement string variants to a canonical form
+* so the UI's display templates can rely on stable strings. Pure
+* passthrough for unknown units — kept conservative on purpose, the goal
+* is to normalise the long tail of HA `unit_of_measurement` values that
+* have multiple historical spellings (`'°C'` vs `'C'` vs `'celsius'`).
 *
-* **The one divergence, and it is forced.** `NcRuleActionSchema.cap.deviceId` is
-* a literal `z.number().int()`, and the NC runner's own `RunSequencesInput`
-* documents its subject device as *"for the log tag, never for routing"*. So an
-* NC action can never target the device that triggered it — which is fine for
-* the NC (its rules already scope to a device) and fatal for an automation
-* ("sound the siren of the camera that saw the person"). `deviceId` therefore
-* also accepts `{ $var }`, resolved from the run's `vars` bag BEFORE the runner
-* is called. The runner still receives a number and is untouched; the
-* resolution is the recipe's job, not the runner's.
+* Extend the map as we encounter real-world data. Returning the raw
+* input for unknown values is intentional: providers should never
+* lose information silently here.
 */
-var AutomationWaitStepSchema = object({
-	kind: literal("wait"),
-	seconds: number().min(0).max(300)
-});
-var AutomationCapStepSchema = object({
-	kind: literal("cap"),
-	/**
-	* One device, several same-family devices (locks / climate family / …),
-	* or `{ $var }` for the device that triggered the run. An array is
-	* fan-out at codegen — each id gets the same cap.method call.
-	*/
-	deviceId: union([
-		number().int(),
-		array(number().int()).min(1),
-		object({ $var: string().min(1) })
-	]),
-	cap: string().min(1),
-	method: string().min(1),
-	/** Values may carry `{{vars.x}}` slots, or be exactly `{ $var: 'name' }`, which
-	*  SUBSTITUTE and do not evaluate (§3.2.3). Anything beyond substitution is
-	*  the expression leaf. */
-	args: record(string(), unknown()).optional()
-});
+function normalizeUnit(raw) {
+	if (raw == null) return void 0;
+	const trimmed = raw.trim();
+	if (trimmed === "") return void 0;
+	const lower = trimmed.toLowerCase();
+	if (lower === "°c" || lower === "c" || lower === "celsius") return "°C";
+	if (lower === "°f" || lower === "f" || lower === "fahrenheit") return "°F";
+	if (lower === "k" || lower === "kelvin") return "K";
+	if (lower === "%" || lower === "percent" || lower === "percentage") return "%";
+	if (lower === "lx" || lower === "lux") return "lx";
+	if (lower === "hpa" || lower === "hectopascal") return "hPa";
+	if (lower === "kpa") return "kPa";
+	if (lower === "pa") return "Pa";
+	if (lower === "mbar" || lower === "millibar") return "mbar";
+	if (lower === "w" || lower === "watt") return "W";
+	if (lower === "kw" || lower === "kilowatt") return "kW";
+	if (lower === "wh" || lower === "watt-hour") return "Wh";
+	if (lower === "kwh" || lower === "kilowatt-hour") return "kWh";
+	if (lower === "v" || lower === "volt") return "V";
+	if (lower === "a" || lower === "amp" || lower === "ampere") return "A";
+	if (lower === "ma" || lower === "milliampere") return "mA";
+	if (lower === "va") return "VA";
+	if (lower === "ppm") return "ppm";
+	if (lower === "ppb") return "ppb";
+	if (lower === "µg/m³" || lower === "ug/m3" || lower === "µg/m3") return "µg/m³";
+	if (lower === "km/h" || lower === "kph") return "km/h";
+	if (lower === "mph") return "mph";
+	if (lower === "m/s") return "m/s";
+	if (lower === "m") return "m";
+	if (lower === "m²" || lower === "m2") return "m²";
+	if (lower === "mm") return "mm";
+	if (lower === "cm") return "cm";
+	if (lower === "km") return "km";
+	if (lower === "in" || lower === "inch" || lower === "inches") return "in";
+	if (lower === "ft" || lower === "foot" || lower === "feet") return "ft";
+	if (lower === "kg") return "kg";
+	if (lower === "g") return "g";
+	if (lower === "l" || lower === "liter" || lower === "litre" || lower === "liters" || lower === "litres") return "L";
+	if (lower === "ml") return "mL";
+	if (lower === "gal" || lower === "gallon" || lower === "gallons") return "gal";
+	if (lower === "s" || lower === "sec" || lower === "second" || lower === "seconds") return "s";
+	if (lower === "ms") return "ms";
+	if (lower === "min" || lower === "minute" || lower === "minutes") return "min";
+	if (lower === "h" || lower === "hr" || lower === "hour" || lower === "hours") return "h";
+	if (lower === "d" || lower === "day" || lower === "days") return "d";
+	if (lower === "b" || lower === "byte" || lower === "bytes") return "B";
+	if (lower === "kib") return "KiB";
+	if (lower === "mib") return "MiB";
+	if (lower === "gib") return "GiB";
+	if (lower === "tib") return "TiB";
+	if (lower === "kb") return "kB";
+	if (lower === "mb") return "MB";
+	if (lower === "gb") return "GB";
+	if (lower === "dbm") return "dBm";
+	if (lower === "dbfs") return "dBFS";
+	if (lower === "inhg") return "inHg";
+	if (lower === "mm/h") return "mm/h";
+	if (lower === "w/m²" || lower === "w/m2") return "W/m²";
+	if (lower === "°" || lower === "deg" || lower === "degree" || lower === "degrees") return "°";
+	if (lower === "kbps") return "kbps";
+	if (lower === "fps") return "fps";
+	return trimmed;
+}
 /**
-* The steps an internal Action may contain: cap and wait, and nothing that can
-* call back into an Action — so an Action can never reach itself (no cycles).
+* Key under which `SourceInfo` lives inside `DeviceMeta.metadata`. The
+* blob is a free-form `Record<string, unknown>` shared with hardware-
+* identity fields (`manufacturer`, `model`, `firmware`, …); SourceInfo
+* lives under a single nested key to keep it composable with those.
 */
-var ActionStepSchema = discriminatedUnion("kind", [AutomationWaitStepSchema, AutomationCapStepSchema]);
-var AutomationActionSchema = discriminatedUnion("kind", [
-	AutomationWaitStepSchema,
-	AutomationCapStepSchema,
-	object({
-		kind: literal("action"),
-		/** An entry of the `actions` surface (`internal:<uuid>` or `<addonId>:<localId>`). */
-		actionId: string().min(1),
-		/** Values for the action's declared variables; the others take their default. */
-		variables: record(string(), union([
-			string(),
-			number(),
-			boolean()
-		])).optional()
-	}),
-	object({
-		kind: literal("code"),
-		/** Compiled into the automation's OWN block by esbuild — not a third
-		*  runtime, not a `vm`, and not dynamically evaluated. */
-		code: string().min(1).max(2e4)
-	})
-]);
+var SOURCE_INFO_METADATA_KEY = "sourceInfo";
 /**
-* How a trigger that arrives while the automation is busy (or cooling down) is
-* handled. One of the automation's execution modes, never a property of its
-* actions. Absent means `single`.
+* Extract a SourceInfo from a `DeviceMeta.metadata` blob, validating
+* with Zod. Returns `null` when the blob is missing or the nested
+* `sourceInfo` key fails validation — callers fall back to the
+* synthetic default in that case (see `synthesizeSourceInfo`).
+*/
+function extractSourceInfoFromMetadata(metadata) {
+	if (!metadata) return null;
+	const raw = metadata[SOURCE_INFO_METADATA_KEY];
+	if (!raw) return null;
+	const parsed = SourceInfoSchema.safeParse(raw);
+	if (!parsed.success) return null;
+	return parsed.data;
+}
+/**
+* Frozen unit → spec table. `•` in the doc marks each dimension's canonical
+* unit (`factor: 1, offset: 0`). °F derives from `°C = (°F − 32) × 5/9` ⇒
+* `factor = 5/9`, `offset = -160/9` (kept as exact expressions, not rounded
+* decimals). K derives from `°C = K − 273.15`.
+*/
+var UNIT_TABLE = {
+	"°C": {
+		dimension: "temperature",
+		factor: 1,
+		offset: 0
+	},
+	"°F": {
+		dimension: "temperature",
+		factor: 5 / 9,
+		offset: -160 / 9
+	},
+	K: {
+		dimension: "temperature",
+		factor: 1,
+		offset: -273.15
+	},
+	hPa: {
+		dimension: "pressure",
+		factor: 1,
+		offset: 0
+	},
+	kPa: {
+		dimension: "pressure",
+		factor: 10,
+		offset: 0
+	},
+	Pa: {
+		dimension: "pressure",
+		factor: .01,
+		offset: 0
+	},
+	mbar: {
+		dimension: "pressure",
+		factor: 1,
+		offset: 0
+	},
+	bar: {
+		dimension: "pressure",
+		factor: 1e3,
+		offset: 0
+	},
+	inHg: {
+		dimension: "pressure",
+		factor: 33.8639,
+		offset: 0
+	},
+	mmHg: {
+		dimension: "pressure",
+		factor: 1.33322,
+		offset: 0
+	},
+	psi: {
+		dimension: "pressure",
+		factor: 68.9476,
+		offset: 0
+	},
+	"m/s": {
+		dimension: "speed",
+		factor: 1,
+		offset: 0
+	},
+	"km/h": {
+		dimension: "speed",
+		factor: 1 / 3.6,
+		offset: 0
+	},
+	mph: {
+		dimension: "speed",
+		factor: .44704,
+		offset: 0
+	},
+	kn: {
+		dimension: "speed",
+		factor: .514444,
+		offset: 0
+	},
+	"mm/h": {
+		dimension: "precipitation-rate",
+		factor: 1,
+		offset: 0
+	},
+	"in/h": {
+		dimension: "precipitation-rate",
+		factor: 25.4,
+		offset: 0
+	},
+	m: {
+		dimension: "length",
+		factor: 1,
+		offset: 0
+	},
+	mm: {
+		dimension: "length",
+		factor: .001,
+		offset: 0
+	},
+	cm: {
+		dimension: "length",
+		factor: .01,
+		offset: 0
+	},
+	km: {
+		dimension: "length",
+		factor: 1e3,
+		offset: 0
+	},
+	in: {
+		dimension: "length",
+		factor: .0254,
+		offset: 0
+	},
+	ft: {
+		dimension: "length",
+		factor: .3048,
+		offset: 0
+	},
+	mi: {
+		dimension: "length",
+		factor: 1609.344,
+		offset: 0
+	},
+	"m²": {
+		dimension: "area",
+		factor: 1,
+		offset: 0
+	},
+	lx: {
+		dimension: "illuminance",
+		factor: 1,
+		offset: 0
+	},
+	"W/m²": {
+		dimension: "irradiance",
+		factor: 1,
+		offset: 0
+	},
+	W: {
+		dimension: "power",
+		factor: 1,
+		offset: 0
+	},
+	kW: {
+		dimension: "power",
+		factor: 1e3,
+		offset: 0
+	},
+	VA: {
+		dimension: "apparent-power",
+		factor: 1,
+		offset: 0
+	},
+	Wh: {
+		dimension: "energy",
+		factor: 1,
+		offset: 0
+	},
+	kWh: {
+		dimension: "energy",
+		factor: 1e3,
+		offset: 0
+	},
+	MWh: {
+		dimension: "energy",
+		factor: 1e6,
+		offset: 0
+	},
+	V: {
+		dimension: "voltage",
+		factor: 1,
+		offset: 0
+	},
+	mV: {
+		dimension: "voltage",
+		factor: .001,
+		offset: 0
+	},
+	A: {
+		dimension: "current",
+		factor: 1,
+		offset: 0
+	},
+	mA: {
+		dimension: "current",
+		factor: .001,
+		offset: 0
+	},
+	ppm: {
+		dimension: "concentration-volume",
+		factor: 1,
+		offset: 0
+	},
+	ppb: {
+		dimension: "concentration-volume",
+		factor: .001,
+		offset: 0
+	},
+	"µg/m³": {
+		dimension: "concentration-mass",
+		factor: 1,
+		offset: 0
+	},
+	"mg/m³": {
+		dimension: "concentration-mass",
+		factor: 1e3,
+		offset: 0
+	},
+	kg: {
+		dimension: "mass",
+		factor: 1,
+		offset: 0
+	},
+	g: {
+		dimension: "mass",
+		factor: .001,
+		offset: 0
+	},
+	lb: {
+		dimension: "mass",
+		factor: .453592,
+		offset: 0
+	},
+	oz: {
+		dimension: "mass",
+		factor: .0283495,
+		offset: 0
+	},
+	"%": {
+		dimension: "percentage",
+		factor: 1,
+		offset: 0
+	},
+	L: {
+		dimension: "volume",
+		factor: 1,
+		offset: 0
+	},
+	mL: {
+		dimension: "volume",
+		factor: .001,
+		offset: 0
+	},
+	gal: {
+		dimension: "volume",
+		factor: 3.785411784,
+		offset: 0
+	},
+	s: {
+		dimension: "duration",
+		factor: 1,
+		offset: 0
+	},
+	ms: {
+		dimension: "duration",
+		factor: .001,
+		offset: 0
+	},
+	min: {
+		dimension: "duration",
+		factor: 60,
+		offset: 0
+	},
+	h: {
+		dimension: "duration",
+		factor: 3600,
+		offset: 0
+	},
+	d: {
+		dimension: "duration",
+		factor: 86400,
+		offset: 0
+	},
+	B: {
+		dimension: "information",
+		factor: 1,
+		offset: 0
+	},
+	KiB: {
+		dimension: "information",
+		factor: 1024,
+		offset: 0
+	},
+	MiB: {
+		dimension: "information",
+		factor: 1024 ** 2,
+		offset: 0
+	},
+	GiB: {
+		dimension: "information",
+		factor: 1024 ** 3,
+		offset: 0
+	},
+	TiB: {
+		dimension: "information",
+		factor: 1024 ** 4,
+		offset: 0
+	},
+	kB: {
+		dimension: "information",
+		factor: 1e3,
+		offset: 0
+	},
+	MB: {
+		dimension: "information",
+		factor: 1e6,
+		offset: 0
+	},
+	GB: {
+		dimension: "information",
+		factor: 1e9,
+		offset: 0
+	},
+	"°": {
+		dimension: "angle",
+		factor: 1,
+		offset: 0
+	},
+	dBFS: {
+		dimension: "sound-level",
+		factor: 1,
+		offset: 0
+	},
+	dBm: {
+		dimension: "signal-level",
+		factor: 1,
+		offset: 0
+	},
+	mired: {
+		dimension: "colour-temperature",
+		factor: 1,
+		offset: 0
+	},
+	kbps: {
+		dimension: "bitrate",
+		factor: 1,
+		offset: 0
+	},
+	Mbps: {
+		dimension: "bitrate",
+		factor: 1e3,
+		offset: 0
+	},
+	fps: {
+		dimension: "rate",
+		factor: 1,
+		offset: 0
+	}
+};
+/** Resolve a unit's `UnitSpec`, or `undefined` when the spelling is unknown. */
+function specFor(unit) {
+	return Object.hasOwn(UNIT_TABLE, unit) ? UNIT_TABLE[unit] : void 0;
+}
+/** The dimension a unit belongs to, or `undefined` for an unknown unit. */
+function unitDimension(unit) {
+	return specFor(unit)?.dimension;
+}
+/** Value in `spec`'s unit → its dimension's canonical unit. */
+function toCanonical(value, spec) {
+	return value * spec.factor + spec.offset;
+}
+/** Canonical-unit value → the unit described by `spec`. */
+function fromCanonical(canonical, spec) {
+	return (canonical - spec.offset) / spec.factor;
+}
+/**
+* Graceful variant for the render path: returns the converted value, or
+* `undefined` when the conversion is refused (unknown unit / cross-dimension).
+* Never throws — a render caller falls back to the raw value + source unit.
+*/
+function tryConvertUnit(value, from, to) {
+	if (from === to) return value;
+	const fromSpec = specFor(from);
+	if (!fromSpec) return void 0;
+	const toSpec = specFor(to);
+	if (!toSpec) return void 0;
+	if (fromSpec.dimension !== toSpec.dimension) return void 0;
+	return fromCanonical(toCanonical(value, fromSpec), toSpec);
+}
+/**
+* Every known unit spelling in a dimension (table insertion order — canonical
+* unit first). Powers the UI's same-dimension unit picker.
+*/
+/**
+* Convert a difference, not a reading. Affine units (°F) shift an absolute
+* value by their offset; a step of 1°F is 5/9°C, so the offset is cancelled.
+*/
+function tryConvertDelta(value, from, to) {
+	if (from === to) return value;
+	const origin = tryConvertUnit(0, from, to);
+	const shifted = tryConvertUnit(value, from, to);
+	if (origin === void 0 || shifted === void 0) return void 0;
+	return shifted - origin;
+}
+/**
+* A number a person types for a physical quantity — the input side of the
+* value + unit contract (D972).
 *
-*  - `single`   — drop the trigger while a run is in progress (traced + logged).
-*  - `restart`  — abort the run in progress (at its next step boundary), start fresh.
-*  - `queued`   — queue up to `max` triggers, drop the rest (traced).
-*  - `parallel` — up to `max` runs at once, drop the rest (traced).
-*  - `cooldown` — `single`, and no new run until `minutes` after the last run
-*    STARTED; persisted across a restart. A manual trigger bypasses only this
-*    wait, never the single/queued limits.
+* Readings are stored in the base unit of their quantity (D944); a cap method
+* param is stored in the unit its input schema DECLARES (`paramMeta`). The
+* wire pair {@link QuantityValue} says "this number is expressed in this
+* unit"; {@link convertQuantityInput} brings it to the stored unit and refuses,
+* with a typed {@link QuantityUnitError}, a unit that cannot be that quantity.
 */
-var AutomationRunModeSchema = discriminatedUnion("mode", [
-	object({ mode: literal("single") }),
-	object({ mode: literal("restart") }),
-	object({
-		mode: literal("queued"),
-		max: number().int().min(1).max(10)
-	}),
-	object({
-		mode: literal("parallel"),
-		max: number().int().min(1).max(10)
-	}),
-	object({
-		mode: literal("cooldown"),
-		minutes: number().int().min(1).max(1440)
-	})
-]);
-var AutomationRecipeSchema = object({
-	triggers: array(AutomationTriggerSchema),
-	conditions: AutomationConditionSchema.optional(),
-	actions: array(AutomationActionSchema),
-	runMode: AutomationRunModeSchema.optional(),
-	/** How many run traces the automation keeps (default {@link DEFAULT_TRACE_KEEP}). */
-	keepTraces: number().int().min(1).max(100).optional()
+/** A unit that cannot be applied to the number it was given with. */
+var QuantityUnitError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(`[${code}] ${message}`);
+		this.name = "QuantityUnitError";
+		this.code = code;
+	}
+};
+/** The wire pair: `value` is expressed in `unit`. */
+var QuantityValueSchema = object({
+	value: number(),
+	unit: string().min(1)
+});
+/**
+* Zod `.meta()` bag for a cap METHOD param that is a physical quantity — the
+* input-side twin of `readingMeta`. The value is carried in `unit` (a gram
+* portion stays in grams); the unit must belong to the quantity, checked once
+* when the cap is declared.
+*/
+function paramMeta(declared) {
+	const base = baseUnitOf(declared.quantity);
+	if (base === void 0) throw new QuantityUnitError("unknown-unit", `quantity "${declared.quantity}" has no unit`);
+	if (tryConvertUnit(1, declared.unit, base) === void 0) throw new QuantityUnitError("cross-dimension", `"${declared.unit}" is not a unit of ${declared.quantity}`);
+	return {
+		quantity: declared.quantity,
+		unit: declared.unit
+	};
+}
+object({
+	quantity: ReadingQuantitySchema,
+	unit: string().min(1)
 });
 new Set([
 	{
@@ -16329,16 +16826,610 @@ var COCO_TO_MACRO = {
 	},
 	preserveOriginal: false
 };
+/**
+* WHAT a detection-shaped leaf is about: one MACRO class (person, vehicle,
+* animal, package) plus an OPTIONAL label that narrows it.
+*
+* The taxonomy is `COCO_TO_MACRO` (and `CLASS_MAP_MACRO_TARGETS`) — never a
+* second list. The label that fits depends on the macro class:
+*
+*  - `animal`  → a sub-class (`dog`, `cat`, …);
+*  - `person`  → a known face (an identity of the `face-gallery`);
+*  - `vehicle` → a plate (its text) or a sub-class (`car`, `truck`, …);
+*  - `package` → a sub-class.
+*
+* `other` exists only so a class the taxonomy does not know (a custom model's
+* `forklift`) survives the conversion of a stored recipe without widening.
+*
+* A label is decided LATE (D683): face recognition and LPR land after the
+* detection starts. The track-lifecycle `update` event carries the newly
+* resolved `label` / `plateText`, which is why a leaf with a label fires when
+* the subject GETS it — not at the first detection.
+*/
+var SubClassLabelSchema = object({
+	kind: literal("sub-class"),
+	className: string().min(1)
+});
+var IdentityLabelSchema = object({
+	kind: literal("identity"),
+	/** The `face-gallery` identity id (stable across a rename). */
+	identityId: string().min(1),
+	/** The identity's name — what a track-lifecycle event carries as `label`. */
+	name: string().min(1)
+});
+var PlateLabelSchema = object({
+	kind: literal("plate"),
+	text: string().min(1)
+});
+function macroOf$1(className) {
+	return COCO_TO_MACRO.mapping[className.toLowerCase()] ?? className.toLowerCase();
+}
+/** A sub-class label must belong to the macro it is under. */
+function subClassBelongs(macro, label) {
+	return label === void 0 || macroOf$1(label.className) === macro;
+}
+var subClassOf = (macro) => SubClassLabelSchema.refine((l) => subClassBelongs(macro, l), { message: `that class is not a kind of ${macro} in the detection taxonomy` });
+var DetectionSubjectSchema = discriminatedUnion("macro", [
+	object({
+		macro: literal("animal"),
+		label: subClassOf("animal").optional()
+	}),
+	object({
+		macro: literal("person"),
+		label: IdentityLabelSchema.optional()
+	}),
+	object({
+		macro: literal("vehicle"),
+		label: discriminatedUnion("kind", [SubClassLabelSchema.refine((l) => subClassBelongs("vehicle", l), { message: "that class is not a kind of vehicle in the detection taxonomy" }), PlateLabelSchema]).optional()
+	}),
+	object({
+		macro: literal("package"),
+		label: subClassOf("package").optional()
+	}),
+	object({
+		macro: literal("other"),
+		className: string().min(1)
+	})
+]);
+/**
+* The subject of a PARKED object. The stationary registry's event carries a
+* class and a zone, no face and no plate — an identity or plate label there
+* could never match, so the schema refuses it instead of letting it sit dead.
+*/
+var StationarySubjectSchema = DetectionSubjectSchema.refine((s) => s.macro === "other" || s.label === void 0 || s.label.kind === "sub-class", { message: "a parked object carries no face or plate — only a class can narrow it" });
+/**
+* A stored class string as a subject: a macro name stays a macro; a raw class
+* the taxonomy files under a macro becomes that macro plus the sub-class label
+* (`dog` → animal / dog); anything else is `other`, kept verbatim.
+*/
+function subjectFromClassName(className) {
+	const name = className.trim().toLowerCase();
+	const macro = COCO_TO_MACRO.mapping[name];
+	if (new Set(Object.values(COCO_TO_MACRO.mapping)).has(name)) return macroOnly(name);
+	if (macro === void 0) return {
+		macro: "other",
+		className
+	};
+	const label = {
+		kind: "sub-class",
+		className: name
+	};
+	switch (macro) {
+		case "animal": return {
+			macro: "animal",
+			label
+		};
+		case "vehicle": return {
+			macro: "vehicle",
+			label
+		};
+		case "package": return {
+			macro: "package",
+			label
+		};
+		default: return {
+			macro: "other",
+			className
+		};
+	}
+}
+function macroOnly(macro) {
+	switch (macro) {
+		case "animal": return { macro: "animal" };
+		case "person": return { macro: "person" };
+		case "vehicle": return { macro: "vehicle" };
+		case "package": return { macro: "package" };
+		default: return {
+			macro: "other",
+			className: macro
+		};
+	}
+}
+/** How a state leaf compares a device field to a value. Derived from the
+*  field's `kind` in `deviceManager.getWireableFields`, never hand-maintained. */
+var AutomationConditionOperatorSchema = _enum([
+	"eq",
+	"ne",
+	"gt",
+	"gte",
+	"lt",
+	"lte",
+	"contains",
+	"in"
+]);
+/**
+* D8 compliance, and it is the reason a "becomes" leaf is not merely an event
+* subscription: it evaluates against the **state mirror**, which is reconciled,
+* and an event only WAKES the evaluation. A dropped event therefore DELAYS a
+* fire; it does not lose it.
+*/
+var DeviceBecomesLeafSchema = object({
+	kind: literal("device-becomes"),
+	deviceId: number().int().nonnegative(),
+	cap: string().min(1),
+	fieldPath: string().min(1),
+	/** Fire when the field takes this value. Omit to fire on any change. */
+	becomes: union([
+		string(),
+		number(),
+		boolean()
+	]).optional(),
+	/** Only on a CHANGE of value, not on every re-report. */
+	edge: boolean().optional(),
+	/** The new value must hold this long before it counts. */
+	forMs: number().int().min(0).max(864e5).optional(),
+	/** Collapse a burst into one occurrence. */
+	debounceMs: number().int().min(0).max(6e5).optional()
+});
+var DeviceEventLeafSchema = object({
+	kind: literal("device-event"),
+	/** An `EventCategory` value. */
+	category: string().min(1),
+	deviceId: number().int().nonnegative().optional()
+});
+var ScheduleLeafSchema = object({
+	kind: literal("schedule"),
+	cron: string().min(1).max(120)
+});
+var ManualLeafSchema = object({ kind: literal("manual") });
+var IntervalLeafSchema = object({
+	kind: literal("interval"),
+	minutes: number().int().min(1).max(1440)
+});
+var DetectionLeafSchema = object({
+	kind: literal("detection"),
+	/** One macro class each, optionally narrowed by a label; a track of any listed subject fires. */
+	subjects: array(DetectionSubjectSchema).min(1),
+	deviceIds: array(number().int().nonnegative()).min(1),
+	/** The track must have visited at least one of these zones. */
+	zones: array(string().min(1)).min(1).optional(),
+	/** Best-so-far confidence the track must reach. */
+	minScore: number().min(0).max(1).optional()
+});
+var StationaryLeafSchema = object({
+	kind: literal("stationary"),
+	deviceIds: array(number().int().nonnegative()).min(1),
+	subjects: array(StationarySubjectSchema).min(1).optional(),
+	zones: array(string().min(1)).min(1).optional(),
+	/** `appeared`: it became parked. `departed`: the registry retired it. */
+	phase: _enum(["appeared", "departed"])
+});
+/** "is": one device field compared to one value, NOW. */
+var DeviceIsLeafSchema = object({
+	kind: literal("device-is"),
+	deviceId: number().int().nonnegative(),
+	cap: string().min(1),
+	fieldPath: string().min(1),
+	operator: AutomationConditionOperatorSchema,
+	/**
+	* The value. A number on a quantity field is stored in the field's base unit
+	* (D944); a quantity value is the WRITE form, which the save boundary
+	* replaces with the converted number and `unit`. A leaf that still carries
+	* one is never evaluated (it fails).
+	*/
+	value: union([
+		string(),
+		number(),
+		boolean(),
+		array(union([string(), number()])),
+		QuantityValueSchema
+	]),
+	/** The unit the person picked for `value` (display only; `value` is in the base unit). */
+	unit: string().min(1).optional()
+});
+/**
+* True when the camera currently has a PARKED object matching `subjects` in at
+* least one of `zones`. Reads the zone-analytics snapshot through the same
+* mirror as every other state leaf, so a dropped event never decides it (D49).
+*/
+var StationaryPresentLeafSchema = object({
+	kind: literal("stationary-present"),
+	deviceId: number().int().nonnegative(),
+	subjects: array(StationarySubjectSchema).min(1).optional(),
+	zones: array(string().min(1)).min(1).optional()
+});
+/**
+* The escape hatch: the bounded expression engine over named device bindings.
+* Declared as a plain object so a discriminated union can read `kind`; the
+* author-time validation is the SAME function `ExpressionSourceSchema` runs.
+*/
+var ExpressionLeafSchema = object({
+	kind: literal("expression"),
+	expr: string().min(1).max(MAX_EXPRESSION_SOURCE_LENGTH),
+	bindings: record(string().regex(EXPRESSION_IDENTIFIER_RE), ExpressionBindingSourceSchema)
+}).superRefine((src, ctx) => {
+	const err = validateExpressionSource(src);
+	if (err !== null) ctx.addIssue({
+		code: "custom",
+		message: err,
+		path: ["expr"]
+	});
+});
+var AutomationWhenSchema = lazy(() => discriminatedUnion("kind", [
+	object({
+		kind: literal("all"),
+		children: array(AutomationWhenSchema)
+	}),
+	object({
+		kind: literal("any"),
+		children: array(AutomationWhenSchema)
+	}),
+	object({
+		kind: literal("not"),
+		child: AutomationWhenSchema
+	}),
+	DeviceBecomesLeafSchema,
+	DeviceEventLeafSchema,
+	ScheduleLeafSchema,
+	ManualLeafSchema,
+	IntervalLeafSchema,
+	DetectionLeafSchema,
+	StationaryLeafSchema,
+	DeviceIsLeafSchema,
+	StationaryPresentLeafSchema,
+	ExpressionLeafSchema
+]));
+/**
+* The recipe shape before the single `when` tree: a flat list of triggers
+* (OR'd, each an instant) and an optional condition tree. Stored recipes —
+* the `AUTOMATION_RECIPE` literal of every block saved so far, and whatever an
+* older client still posts — are in this shape, so it stays READABLE here, and
+* {@link convertLegacyRecipe} turns it into the new one, losslessly and one
+* way. Nothing writes this shape any more.
+*
+*   `{ triggers: [t1…tn], conditions?: C }`
+*      → `when = all(any(t1…tn), C)`, or `any(t1…tn)` without `C`;
+*        a single trigger is not wrapped in `any`.
+*   a `condition` leaf → a `device-is` leaf (the "is" verb);
+*   a `device-state` trigger → a `device-becomes` leaf (the "becomes" verb);
+*   `classes: ['dog']` → the macro `animal` with the label `dog`.
+*/
+var LegacyTriggerSchema = discriminatedUnion("kind", [
+	object({
+		kind: literal("device-state"),
+		deviceId: number().int().nonnegative(),
+		cap: string().min(1),
+		fieldPath: string().min(1),
+		becomes: union([
+			string(),
+			number(),
+			boolean()
+		]).optional(),
+		edge: boolean().optional(),
+		forMs: number().int().min(0).max(864e5).optional(),
+		debounceMs: number().int().min(0).max(6e5).optional()
+	}),
+	object({
+		kind: literal("device-event"),
+		category: string().min(1),
+		deviceId: number().int().nonnegative().optional()
+	}),
+	object({
+		kind: literal("schedule"),
+		cron: string().min(1).max(120)
+	}),
+	object({ kind: literal("manual") }),
+	object({
+		kind: literal("detection"),
+		classes: array(string().min(1)).min(1),
+		deviceIds: array(number().int().nonnegative()).min(1),
+		zones: array(string().min(1)).min(1).optional(),
+		minScore: number().min(0).max(1).optional()
+	}),
+	object({
+		kind: literal("stationary"),
+		deviceIds: array(number().int().nonnegative()).min(1),
+		classes: array(string().min(1)).min(1).optional(),
+		zones: array(string().min(1)).min(1).optional(),
+		phase: _enum(["appeared", "departed"])
+	}),
+	object({
+		kind: literal("interval"),
+		minutes: number().int().min(1).max(1440)
+	})
+]);
+var LegacyConditionLeafSchema = object({
+	kind: literal("condition"),
+	deviceId: number().int().nonnegative(),
+	cap: string().min(1),
+	fieldPath: string().min(1),
+	operator: AutomationConditionOperatorSchema,
+	value: union([
+		string(),
+		number(),
+		boolean(),
+		array(union([string(), number()])),
+		QuantityValueSchema
+	]),
+	unit: string().min(1).optional()
+});
+var LegacyStationaryPresentSchema = object({
+	kind: literal("stationary-present"),
+	deviceId: number().int().nonnegative(),
+	classes: array(string().min(1)).min(1).optional(),
+	zones: array(string().min(1)).min(1).optional()
+});
+var LegacyExpressionSchema = object({
+	kind: literal("expression"),
+	expr: string().min(1).max(MAX_EXPRESSION_SOURCE_LENGTH),
+	bindings: record(string().regex(EXPRESSION_IDENTIFIER_RE), ExpressionBindingSourceSchema)
+}).superRefine((src, ctx) => {
+	const err = validateExpressionSource(src);
+	if (err !== null) ctx.addIssue({
+		code: "custom",
+		message: err,
+		path: ["expr"]
+	});
+});
+var LegacyConditionSchema = lazy(() => discriminatedUnion("kind", [
+	object({
+		kind: literal("all"),
+		children: array(LegacyConditionSchema)
+	}),
+	object({
+		kind: literal("any"),
+		children: array(LegacyConditionSchema)
+	}),
+	object({
+		kind: literal("not"),
+		child: LegacyConditionSchema
+	}),
+	LegacyConditionLeafSchema,
+	LegacyExpressionSchema,
+	LegacyStationaryPresentSchema
+]));
+function convertTrigger(trigger) {
+	switch (trigger.kind) {
+		case "device-state": return {
+			...trigger,
+			kind: "device-becomes"
+		};
+		case "detection": {
+			const { classes, ...rest } = trigger;
+			return {
+				...rest,
+				subjects: classes.map(subjectFromClassName)
+			};
+		}
+		case "stationary": {
+			const { classes, ...rest } = trigger;
+			return {
+				...rest,
+				...classes === void 0 ? {} : { subjects: classes.map(subjectFromClassName) }
+			};
+		}
+		default: return trigger;
+	}
+}
+/** An old condition tree as a `when` subtree: `condition` → "is", classes → subjects. */
+function convertLegacyCondition(condition) {
+	switch (condition.kind) {
+		case "condition": return {
+			...condition,
+			kind: "device-is"
+		};
+		case "stationary-present": {
+			const { classes, ...rest } = condition;
+			return {
+				...rest,
+				...classes === void 0 ? {} : { subjects: classes.map(subjectFromClassName) }
+			};
+		}
+		case "expression": return condition;
+		case "not": return {
+			kind: "not",
+			child: convertLegacyCondition(condition.child)
+		};
+		case "all":
+		case "any": return {
+			kind: condition.kind,
+			children: condition.children.map(convertLegacyCondition)
+		};
+	}
+}
+/** `all(any(t1…tn), C)`, or `any(t1…tn)`; a single trigger is not wrapped in `any`. */
+function convertLegacyWhen(half) {
+	const leaves = half.triggers.map(convertTrigger);
+	const first = leaves[0];
+	const triggers = leaves.length === 1 && first !== void 0 ? first : {
+		kind: "any",
+		children: leaves
+	};
+	if (half.conditions === void 0) return triggers;
+	return {
+		kind: "all",
+		children: [triggers, convertLegacyCondition(half.conditions)]
+	};
+}
+/**
+* The automation RECIPE — what a visually-authored automation is, before it
+* becomes code.
+*
+* This is the data half of `docs/design/2026-08-08-automation-scripts-custom-devices.md`
+* Phase 6. A recipe is not an engine and never evaluates anything: it is a
+* declarative description that {@link generateAutomationBlock} compiles to the
+* TypeScript of an ordinary core block. There is therefore no second rule
+* engine, no second store and no second runtime — the block runner is the
+* runtime, `core_blocks` is the store (§2.1).
+*
+* Two parts:
+*
+*  - **`when`** — ONE tree (`./when.ts`) of all/any/not over event leaves
+*    (instants) and state leaves (durations). It replaces the flat trigger list
+*    plus the separate condition tree; the firing rule is in that file and in
+*    ADR "one tree".
+*  - **Actions** — `NcRuleActionSchema`'s two steps, plus the `{kind:'code'}`
+*    fragment of §3.2.2. See {@link AutomationActionSchema} for the ONE place
+*    this had to diverge from "verbatim", and why.
+*
+* A recipe stored in the old shape (`triggers` + `conditions`) still LOADS:
+* {@link AutomationRecipeSchema} (the parse-anywhere schema) converts it on parse. Nothing writes it.
+*/
+/**
+* One action step.
+*
+* `wait` and `cap` are `NcRuleActionSchema`'s two members, kept structurally
+* identical so `NcRuleActionRunner` runs them unchanged — its device-scope
+* check, stop-at-first-failure and per-sequence throttle are the whole reason
+* to reuse it, and none of them are re-implemented here.
+*
+* **The one divergence, and it is forced.** `NcRuleActionSchema.cap.deviceId` is
+* a literal `z.number().int()`, and the NC runner's own `RunSequencesInput`
+* documents its subject device as *"for the log tag, never for routing"*. So an
+* NC action can never target the device that triggered it — which is fine for
+* the NC (its rules already scope to a device) and fatal for an automation
+* ("sound the siren of the camera that saw the person"). `deviceId` therefore
+* also accepts `{ $var }`, resolved from the run's `vars` bag BEFORE the runner
+* is called. The runner still receives a number and is untouched; the
+* resolution is the recipe's job, not the runner's.
+*/
+var AutomationWaitStepSchema = object({
+	kind: literal("wait"),
+	seconds: number().min(0).max(300)
+});
+var AutomationCapStepSchema = object({
+	kind: literal("cap"),
+	/**
+	* One device, several same-family devices (locks / climate family / …),
+	* or `{ $var }` for the device that triggered the run. An array is
+	* fan-out at codegen — each id gets the same cap.method call.
+	*/
+	deviceId: union([
+		number().int(),
+		array(number().int()).min(1),
+		object({ $var: string().min(1) })
+	]),
+	cap: string().min(1),
+	method: string().min(1),
+	/** Values may carry `{{vars.x}}` slots, or be exactly `{ $var: 'name' }`, which
+	*  SUBSTITUTE and do not evaluate (§3.2.3). Anything beyond substitution is
+	*  the expression leaf. */
+	args: record(string(), unknown()).optional(),
+	/**
+	* The unit the person picked per arg (display only). `args` always hold the
+	* value in the unit the method's input DECLARES (`paramMeta`); on a write an
+	* arg may be a {@link QuantityValue}, which the save boundary converts.
+	*/
+	argUnits: record(string(), string().min(1)).optional()
+});
+/**
+* The steps an internal Action may contain: cap and wait, and nothing that can
+* call back into an Action — so an Action can never reach itself (no cycles).
+*/
+var ActionStepSchema = discriminatedUnion("kind", [AutomationWaitStepSchema, AutomationCapStepSchema]);
+var AutomationActionSchema = discriminatedUnion("kind", [
+	AutomationWaitStepSchema,
+	AutomationCapStepSchema,
+	object({
+		kind: literal("action"),
+		/** An entry of the `actions` surface (`internal:<uuid>` or `<addonId>:<localId>`). */
+		actionId: string().min(1),
+		/** Values for the action's declared variables; the others take their default. */
+		variables: record(string(), union([
+			string(),
+			number(),
+			boolean()
+		])).optional()
+	}),
+	object({
+		kind: literal("code"),
+		/** Compiled into the automation's OWN block by esbuild — not a third
+		*  runtime, not a `vm`, and not dynamically evaluated. */
+		code: string().min(1).max(2e4)
+	})
+]);
+/**
+* How a trigger that arrives while the automation is busy (or cooling down) is
+* handled. One of the automation's execution modes, never a property of its
+* actions. Absent means `single`.
+*
+*  - `single`   — drop the trigger while a run is in progress (traced + logged).
+*  - `restart`  — abort the run in progress (at its next step boundary), start fresh.
+*  - `queued`   — queue up to `max` triggers, drop the rest (traced).
+*  - `parallel` — up to `max` runs at once, drop the rest (traced).
+*  - `cooldown` — `single`, and no new run until `minutes` after the last run
+*    STARTED; persisted across a restart. A manual trigger bypasses only this
+*    wait, never the single/queued limits.
+*/
+var AutomationRunModeSchema = discriminatedUnion("mode", [
+	object({ mode: literal("single") }),
+	object({ mode: literal("restart") }),
+	object({
+		mode: literal("queued"),
+		max: number().int().min(1).max(10)
+	}),
+	object({
+		mode: literal("parallel"),
+		max: number().int().min(1).max(10)
+	}),
+	object({
+		mode: literal("cooldown"),
+		minutes: number().int().min(1).max(1440)
+	})
+]);
+var CurrentAutomationRecipeSchema = object({
+	when: AutomationWhenSchema,
+	actions: array(AutomationActionSchema),
+	runMode: AutomationRunModeSchema.optional(),
+	/** How many run traces the automation keeps (default {@link DEFAULT_TRACE_KEEP}). */
+	keepTraces: number().int().min(1).max(100).optional()
+});
+/** A recipe as it was stored before the single tree. Read-only: nothing writes this. */
+var LegacyAutomationRecipeSchema = object({
+	triggers: array(LegacyTriggerSchema),
+	conditions: LegacyConditionSchema.optional(),
+	actions: array(AutomationActionSchema),
+	runMode: AutomationRunModeSchema.optional(),
+	keepTraces: number().int().min(1).max(100).optional()
+});
+/** The old shape as the new one, lossless. */
+function convertLegacyRecipe(legacy) {
+	const { triggers, conditions, ...rest } = legacy;
+	return {
+		when: convertLegacyWhen({
+			triggers,
+			conditions
+		}),
+		...rest
+	};
+}
+/**
+* Where recipes are PARSED (the core-blocks cap, the MCP tool, the literal a
+* saved block carries): the new shape as it is, or the old shape converted to
+* it. The output type is always the new one.
+*/
+var AutomationRecipeSchema = union([CurrentAutomationRecipeSchema, LegacyAutomationRecipeSchema.transform(convertLegacyRecipe)]);
 new Set(Object.values(COCO_TO_MACRO.mapping));
 /**
 * Run traces — what an automation (or, later, an Action run) DID, node by node,
 * so the editor can paint every block green or red with its reason.
 *
-* A trace is data, not a log: it covers the WHOLE tree — the trigger stage,
-* every condition node (containers and leaves, including the ones a
-* short-circuit never reached), the run-mode verdict and every action step —
-* each addressed by a stable path (`conditions.0.1`, `actions.2`, or `steps.N`
-* for an Action run). Skipped
+* A trace is data, not a log: it covers the WHOLE tree — the event leaf that
+* fired, every node of the `when` tree (containers and leaves, including the
+* ones a short-circuit never reached), the run-mode verdict and every action
+* step — each addressed by a stable path (`when.0.1`, `actions.2`, or `steps.N`
+* for an Action run). Traces written before the single tree carry
+* `conditions.*` paths and still parse. Skipped
 * evaluations are traced too, and identical consecutive skips collapse into a
 * repeat count so a trigger that fails every 5 minutes cannot flush real runs.
 *
@@ -16370,6 +17461,8 @@ var TraceNodeOutcomeSchema = _enum([
 ]);
 var AutomationTriggerTraceSchema = object({
 	kind: string().min(1),
+	/** The event leaf that fired (`when`, `when.0.1`); absent on traces written before the single tree. */
+	path: string().min(1).optional(),
 	outcome: _enum(["pass", "fail"]),
 	/** Why an event was rejected ("class person not in [dog]") or what fired. */
 	reason: string(),
@@ -16377,15 +17470,23 @@ var AutomationTriggerTraceSchema = object({
 	vars: record(string(), TraceValueSchema)
 });
 var AutomationConditionTraceNodeSchema = object({
-	/** `conditions` for the root, `conditions.<i>` for its i-th child, … */
+	/** `when` for the root, `when.<i>` for its i-th child, … (`conditions…` on an old trace). */
 	path: string().min(1),
 	kind: _enum([
 		"all",
 		"any",
 		"not",
 		"condition",
+		"device-is",
 		"expression",
-		"stationary-present"
+		"stationary-present",
+		"device-becomes",
+		"device-event",
+		"schedule",
+		"interval",
+		"manual",
+		"detection",
+		"stationary"
 	]),
 	outcome: TraceNodeOutcomeSchema,
 	reason: string(),
@@ -16419,6 +17520,12 @@ var AutomationStepTraceSchema = object({
 	deviceId: number().int().optional(),
 	startedAt: number().optional(),
 	endedAt: number().optional(),
+	/**
+	* The parameters the step SENT, after `{{vars.x}}` substitution — what the
+	* device was actually asked. Bounded like trigger `vars`; a secret parameter
+	* is shown as {@link REDACTED_ARG}. Absent on traces written before it existed.
+	*/
+	args: record(string(), TraceValueSchema).optional(),
 	outcome: _enum([
 		"ok",
 		"error",
@@ -16599,6 +17706,16 @@ object({
 	lastRunAt: number().nullable(),
 	lastError: string().nullable()
 });
+/** A bare number accepted as a base unit — the save succeeded, say so. */
+var UnitWarningSchema = object({
+	/** Where in the saved record, e.g. `conditions.children.0` or `steps.2.args.grams`. */
+	path: string(),
+	deviceId: number().int().optional(),
+	field: string(),
+	value: number(),
+	assumedUnit: string(),
+	message: string()
+});
 /**
 * notification-output — canonical, capability-gated notification delivery.
 *
@@ -17337,6 +18454,23 @@ method(object({
 	addonId: string(),
 	nodeId: string().optional()
 }), SettingsSchemaWithValuesSchema.nullable()), method(object({
+	addonId: string(),
+	nodeId: string().optional()
+}), object({ keys: array(string()) }).nullable(), { auth: "admin" }), method(object({
+	addonId: string(),
+	nodeId: string().optional(),
+	keys: array(string())
+}), object({
+	removed: array(string()),
+	refused: array(object({
+		key: string(),
+		reason: string()
+	})),
+	secretsCleared: number()
+}), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
 	addonId: string(),
 	deviceId: number(),
 	nodeId: string().optional()
@@ -18772,8 +19906,21 @@ var BrokerProviderInfoSchema = object({
 		* (`{ sessionId }`) drops the session. The dialog that edits a broker
 		* offers it as the default path; the fields the session fills are
 		* marked `filledBySignIn` in the kind's settings schema.
+		*
+		* `methods` lists the ways the session can sign in, recommended first:
+		* `'device-code'` adds `POST {basePath}/code/start` (body: the form's
+		* settings) answering `{ sessionId, userCode, verificationUrl,
+		* expiresAt }` — the operator types `userCode` at `verificationUrl` on
+		* any device, and the same `status` / `commit` / `cancel` routes follow
+		* (status then carries `method`, `userCode`, `verificationUrl`,
+		* `expiresAt` and the phases `'awaiting-code'` / `'expired'`);
+		* `'proxy'` is the `{basePath}/start` flow above. Absent means
+		* `['proxy']`.
 		*/
-		signIn: object({ basePath: string().min(1) }).optional()
+		signIn: object({
+			basePath: string().min(1),
+			methods: array(_enum(["device-code", "proxy"])).optional()
+		}).optional()
 	}))
 });
 var ListInputSchema = object({ 
@@ -21402,6 +22549,8 @@ var StorageKindSchema = object({
 		"orphaned",
 		"dropped"
 	]),
+	/** An owner declared this kind since the engine started. */
+	declaredThisBoot: boolean(),
 	/** `null` when the caller asked for no counts (`counts: false`). */
 	rows: number().int().nonnegative().nullable(),
 	/** Rows x the average size of a sample; null for an empty kind. */
@@ -21413,6 +22562,51 @@ var StorageKindSchema = object({
 	/** The whole declaration, secret paths and entry descriptor included (the entries service builds its handle from it). */
 	declaration: RecordKindDeclarationSchema
 });
+_enum([
+	"orphaned",
+	"stale",
+	"unknown"
+]);
+/** A record kind nobody declared since its owner started, or whose owner is gone. */
+var StaleKindFindingSchema = object({
+	owner: string(),
+	kind: string(),
+	/** `unknown`: the owner could not be judged (not running, or its state unreadable) - never dropped. */
+	verdict: _enum(["orphaned", "unknown"]),
+	reason: string(),
+	rows: number().int().nonnegative().nullable(),
+	/** local-auth's tables are never dropped by this audit. */
+	protected: boolean()
+});
+/** A stored global-settings key the running addon no longer declares. */
+var StaleSettingsKeyFindingSchema = object({
+	addonId: string(),
+	/** The stored key as written, a per-node `<key>@<nodeId>` suffix included. */
+	key: string(),
+	/**
+	* Keychain refs whose ONLY marker sits under this key: in use by stale data,
+	* not orphans yet. Removing the key releases them.
+	*/
+	secretRefs: array(string())
+});
+/** An addon the audit could not judge, with the reason. Never reported as stale. */
+var StaleUnknownSchema = object({
+	subject: string(),
+	reason: string()
+});
+var StaleDataReportSchema = object({
+	/** Epoch ms of the last finished scan; `null` before the first. */
+	scannedAt: number().nullable(),
+	scanning: boolean(),
+	trigger: _enum([
+		"boot",
+		"interval",
+		"manual"
+	]).nullable(),
+	kinds: array(StaleKindFindingSchema),
+	settingsKeys: array(StaleSettingsKeyFindingSchema),
+	unknown: array(StaleUnknownSchema)
+});
 method(object({ ownerPrefix: string().min(1).optional() }), object({ tables: array(StorageTableSchema) }), { auth: "admin" }), method(object({
 	owner: string().min(1).optional(),
 	/** `false` skips the per-kind row count (a catalog read only). Default true. */
@@ -21420,7 +22614,30 @@ method(object({ ownerPrefix: string().min(1).optional() }), object({ tables: arr
 }), object({ kinds: array(StorageKindSchema) }), { auth: "admin" }), method(RecordQueryInputSchema.extend({
 	owner: string().min(1),
 	kind: RecordKindNameSchema
-}), RecordQueryResultSchema, { auth: "admin" });
+}), RecordQueryResultSchema, { auth: "admin" }), method(object({}), StaleDataReportSchema, { auth: "admin" }), method(object({}), StaleDataReportSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
+	owner: string().min(1),
+	kind: RecordKindNameSchema
+}), object({
+	deleted: number().int().nonnegative(),
+	secretsReleased: number().int().nonnegative()
+}), {
+	kind: "mutation",
+	auth: "admin",
+	caller: "required"
+}), method(object({
+	addonId: string().min(1),
+	key: string().min(1)
+}), object({
+	removed: boolean(),
+	secretsCleared: number().int().nonnegative()
+}), {
+	kind: "mutation",
+	auth: "admin",
+	caller: "required"
+});
 /**
 * record-entries - the ONE admin surface for every list of user-created entries
 * (D881): notification targets, brokers, LLM profiles, anything an addon
@@ -21559,6 +22776,12 @@ method(object({
 }), method(object({ deviceId: number().int() }), object({ refs: array(string()).readonly() }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	refs: RefListSchema,
+	onBehalfOf: string().min(1)
+}), object({ released: number().int() }), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({}), array(KeychainSecretMetaSchema).readonly(), { auth: "admin" }), method(object({}), KeychainStateSchema, { auth: "admin" });
 /**
 * device-history — the ONE mechanism for numeric history (D850).
@@ -22424,190 +23647,6 @@ function parseAdminBase(baseUrl) {
 	};
 }
 /**
-* Identity envelope for a device's upstream-system metadata.
-*
-* Two jobs:
-*
-*   1. **Dispatch key.** `id` is the natural identifier the SOURCE system
-*      uses to address this device (HA `entity_id`, Reolink MAC, ONVIF
-*      WS-Discovery endpoint UUID, …). Provider code keeps a
-*      `Map<sourceInfo.id, IDevice>` to route inbound push events in O(1)
-*      without round-tripping through `stableId` / `id` mappings.
-*
-*   2. **Stability bridge.** `uniqueId` is the *immutable* upstream id when
-*      one exists (HA `entity.unique_id`, Reolink MAC again — same as `id`
-*      for vendors where MAC is the natural key). For systems where the
-*      live dispatch key can be renamed (HA `entity_id` can be edited),
-*      providers detect renames by matching `uniqueId` and patch `id`
-*      in-place so dispatch keeps working.
-*
-* **Display unit and precision are NOT stored here.** They are a read-time
-* preference (D944). A polymorphic reading stores its `quantity` here once,
-* at adopt, and a date/time value stores `dateTimeShape` the same way —
-* neither is repeated on each sample. The `device_class` tag is an
-* HA-specific input consumed at the discovery boundary (`ha-domain-mapping`)
-* to derive the CamStack `DeviceRole`; it is never stored after that point.
-*
-* The `raw` escape hatch carries provider-specific attributes that don't
-* fit the structured slots (HA `attributes` whitelist, Reolink `deviceCache`
-* details, …). Providers control what lands here.
-*/
-var SourceInfoSchema = object({
-	/** Live dispatch key — mutable when the source system allows rename. */
-	id: string(),
-	/** Source system tag — e.g. 'homeassistant' | 'reolink' | 'onvif'. */
-	system: string(),
-	/** Immutable upstream identifier when available (HA `unique_id`, … ).
-	*  Used to detect rename when `id` changes. */
-	uniqueId: string().optional(),
-	/** Quantity of a polymorphic reading, written once at adopt (D944). */
-	quantity: ReadingQuantitySchema.optional(),
-	/** Date / time / datetime shape of a string reading, written once at adopt. */
-	dateTimeShape: _enum([
-		"date",
-		"time",
-		"datetime"
-	]).optional(),
-	/** Provider-specific extras that don't fit the structured slots.
-	*  Whitelist what goes here per provider — do NOT dump entire HA
-	*  attribute blobs (would explode the meta JSON column). */
-	raw: record(string(), unknown()).optional()
-});
-/**
-* Build the synthetic SourceInfo every existing provider falls back to
-* when no upstream value has been persisted. Keeps non-migrated providers
-* (Reolink / Hikvision / ONVIF / RTSP) functional without code
-* changes — `id` reuses the CamStack stableId, `system` reuses the addon
-* id. Real upstream identity replaces this once a provider migrates and
-* calls `updateSourceInfo()` with concrete values.
-*/
-function synthesizeSourceInfo(input) {
-	return {
-		id: input.stableId,
-		system: input.addonId
-	};
-}
-/**
-* Shallow-merge a partial patch over a prior SourceInfo. `undefined`
-* patch values are ignored (no field clobber); to clear a field
-* explicitly, providers omit it from the patch and rebuild from scratch
-* via `updateSourceInfo({})` cycles — uncommon enough that we don't
-* bother with a `null`-means-delete sentinel.
-*
-* The `raw` field is also shallow-merged: passing `raw: { foo: 1 }`
-* merges over existing `raw` keys instead of replacing the whole bag.
-*/
-function mergeSourceInfo(prev, patch) {
-	const next = { ...prev };
-	for (const [k, v] of Object.entries(patch)) {
-		if (v === void 0) continue;
-		if (k === "raw" && typeof v === "object" && v !== null) {
-			next.raw = {
-				...prev.raw,
-				...v
-			};
-			continue;
-		}
-		next[k] = v;
-	}
-	return next;
-}
-/**
-* Coerce common unit-of-measurement string variants to a canonical form
-* so the UI's display templates can rely on stable strings. Pure
-* passthrough for unknown units — kept conservative on purpose, the goal
-* is to normalise the long tail of HA `unit_of_measurement` values that
-* have multiple historical spellings (`'°C'` vs `'C'` vs `'celsius'`).
-*
-* Extend the map as we encounter real-world data. Returning the raw
-* input for unknown values is intentional: providers should never
-* lose information silently here.
-*/
-function normalizeUnit(raw) {
-	if (raw == null) return void 0;
-	const trimmed = raw.trim();
-	if (trimmed === "") return void 0;
-	const lower = trimmed.toLowerCase();
-	if (lower === "°c" || lower === "c" || lower === "celsius") return "°C";
-	if (lower === "°f" || lower === "f" || lower === "fahrenheit") return "°F";
-	if (lower === "k" || lower === "kelvin") return "K";
-	if (lower === "%" || lower === "percent" || lower === "percentage") return "%";
-	if (lower === "lx" || lower === "lux") return "lx";
-	if (lower === "hpa" || lower === "hectopascal") return "hPa";
-	if (lower === "kpa") return "kPa";
-	if (lower === "pa") return "Pa";
-	if (lower === "mbar" || lower === "millibar") return "mbar";
-	if (lower === "w" || lower === "watt") return "W";
-	if (lower === "kw" || lower === "kilowatt") return "kW";
-	if (lower === "wh" || lower === "watt-hour") return "Wh";
-	if (lower === "kwh" || lower === "kilowatt-hour") return "kWh";
-	if (lower === "v" || lower === "volt") return "V";
-	if (lower === "a" || lower === "amp" || lower === "ampere") return "A";
-	if (lower === "ma" || lower === "milliampere") return "mA";
-	if (lower === "va") return "VA";
-	if (lower === "ppm") return "ppm";
-	if (lower === "ppb") return "ppb";
-	if (lower === "µg/m³" || lower === "ug/m3" || lower === "µg/m3") return "µg/m³";
-	if (lower === "km/h" || lower === "kph") return "km/h";
-	if (lower === "mph") return "mph";
-	if (lower === "m/s") return "m/s";
-	if (lower === "m") return "m";
-	if (lower === "m²" || lower === "m2") return "m²";
-	if (lower === "mm") return "mm";
-	if (lower === "cm") return "cm";
-	if (lower === "km") return "km";
-	if (lower === "in" || lower === "inch" || lower === "inches") return "in";
-	if (lower === "ft" || lower === "foot" || lower === "feet") return "ft";
-	if (lower === "kg") return "kg";
-	if (lower === "g") return "g";
-	if (lower === "l" || lower === "liter" || lower === "litre" || lower === "liters" || lower === "litres") return "L";
-	if (lower === "ml") return "mL";
-	if (lower === "gal" || lower === "gallon" || lower === "gallons") return "gal";
-	if (lower === "s" || lower === "sec" || lower === "second" || lower === "seconds") return "s";
-	if (lower === "ms") return "ms";
-	if (lower === "min" || lower === "minute" || lower === "minutes") return "min";
-	if (lower === "h" || lower === "hr" || lower === "hour" || lower === "hours") return "h";
-	if (lower === "d" || lower === "day" || lower === "days") return "d";
-	if (lower === "b" || lower === "byte" || lower === "bytes") return "B";
-	if (lower === "kib") return "KiB";
-	if (lower === "mib") return "MiB";
-	if (lower === "gib") return "GiB";
-	if (lower === "tib") return "TiB";
-	if (lower === "kb") return "kB";
-	if (lower === "mb") return "MB";
-	if (lower === "gb") return "GB";
-	if (lower === "dbm") return "dBm";
-	if (lower === "dbfs") return "dBFS";
-	if (lower === "inhg") return "inHg";
-	if (lower === "mm/h") return "mm/h";
-	if (lower === "w/m²" || lower === "w/m2") return "W/m²";
-	if (lower === "°" || lower === "deg" || lower === "degree" || lower === "degrees") return "°";
-	if (lower === "kbps") return "kbps";
-	if (lower === "fps") return "fps";
-	return trimmed;
-}
-/**
-* Key under which `SourceInfo` lives inside `DeviceMeta.metadata`. The
-* blob is a free-form `Record<string, unknown>` shared with hardware-
-* identity fields (`manufacturer`, `model`, `firmware`, …); SourceInfo
-* lives under a single nested key to keep it composable with those.
-*/
-var SOURCE_INFO_METADATA_KEY = "sourceInfo";
-/**
-* Extract a SourceInfo from a `DeviceMeta.metadata` blob, validating
-* with Zod. Returns `null` when the blob is missing or the nested
-* `sourceInfo` key fails validation — callers fall back to the
-* synthetic default in that case (see `synthesizeSourceInfo`).
-*/
-function extractSourceInfoFromMetadata(metadata) {
-	if (!metadata) return null;
-	const raw = metadata[SOURCE_INFO_METADATA_KEY];
-	if (!raw) return null;
-	const parsed = SourceInfoSchema.safeParse(raw);
-	if (!parsed.success) return null;
-	return parsed.data;
-}
-/**
 * device-discovery — device-scoped capability for parents that host /
 * enumerate child devices (Reolink Hub / NVR, ONVIF gateway, future
 * integrations). The parent advertises a list of discoverable children,
@@ -22679,7 +23718,9 @@ var DiscoveredChildDeviceSchema = lazy(() => object({
 	/** Upstream-system identity + rendering hints for the candidate. */
 	sourceInfo: SourceInfoSchema.optional(),
 	/** Nested entity-children for accordion preview — integrations populate, Hubs omit. */
-	children: array(DiscoveredChildDeviceSchema).readonly().optional()
+	children: array(DiscoveredChildDeviceSchema).readonly().optional(),
+	/** `childNativeId` of the gateway candidate in the same list this device sits behind. */
+	parentStableId: string().optional()
 }));
 /**
 * Status block — populated by the integration after each
@@ -43091,6 +44132,79 @@ object({
 	metadata: record(string(), unknown()).optional()
 });
 /**
+* HOW a provider can be found on the network. The provider only DECLARES the
+* mode; the `local-network` scan engine runs it once for every provider that
+* asked (one multicast browse, one host sweep) and hands the raw hits back to
+* `classifyDiscoveryHits`. A provider never opens a discovery socket itself,
+* except through a `custom` mode.
+*/
+var DiscoveryModeSchema = discriminatedUnion("kind", [
+	object({
+		kind: literal("mdns"),
+		/** DNS-SD service type, e.g. `_esphomelib._tcp`. */
+		serviceType: string().min(1),
+		/** Regular expression an instance name must match (case-insensitive). */
+		instancePattern: string().optional()
+	}),
+	object({
+		kind: literal("ws-discovery"),
+		/** Probe types (e.g. `dn:NetworkVideoTransmitter`); omitted = any device. */
+		types: array(string()).optional()
+	}),
+	object({
+		kind: literal("ssdp"),
+		searchTarget: string().min(1)
+	}),
+	object({
+		kind: literal("udp-broadcast"),
+		port: number().int().min(1).max(65535),
+		payloadHex: string().regex(/^([0-9a-fA-F]{2})*$/),
+		/** Port replies arrive on, when the device answers somewhere other than the source port. */
+		listenPort: number().int().min(1).max(65535).optional()
+	}),
+	object({
+		kind: literal("http-probe"),
+		port: number().int().min(1).max(65535),
+		path: string().startsWith("/"),
+		method: _enum(["GET", "POST"]).default("GET"),
+		bodyText: string().optional(),
+		contentType: string().optional(),
+		tls: boolean().default(false),
+		/** Status codes that count as a hit. Omitted = any HTTP answer. */
+		acceptStatus: array(number().int()).optional()
+	}),
+	object({
+		kind: literal("custom"),
+		/** Why the engine cannot do it (an allowlisted exception, e.g. a vendor UDP protocol). */
+		reason: string().min(1)
+	})
+]);
+/** What the engine saw on the wire for ONE declared mode; the provider classifies it. */
+var DiscoveryHitSchema = object({
+	/** Index into the provider's own `getDiscoveryModes()` array. */
+	modeIndex: number().int().min(0),
+	host: string(),
+	port: number().int(),
+	http: object({
+		status: number().int(),
+		headers: record(string(), string()),
+		/** At most 16 KiB. */
+		bodyText: string()
+	}).optional(),
+	mdns: object({
+		instance: string(),
+		host: string(),
+		port: number().int(),
+		txt: record(string(), string())
+	}).optional(),
+	udp: object({ payloadHex: string() }).optional(),
+	wsd: object({
+		xaddrs: array(string()),
+		types: array(string()),
+		scopes: array(string())
+	}).optional()
+});
+/**
 * Candidate handed back from discovery and accepted by
 * `adoptDiscoveredDevice`. Shape mirrors the in-process
 * `DiscoveredDevice` interface used by `DeviceDiscovery`.
@@ -43125,7 +44239,17 @@ var DiscoveryCandidateSchema = object({
 	/** Numeric id of the device this candidate was matched to. Set with `alreadyOnboarded`. */
 	onboardedDeviceId: number().optional(),
 	/** Operator-facing name of the matched device, so the UI can say WHICH one it is. */
-	onboardedName: string().optional()
+	onboardedName: string().optional(),
+	/**
+	* This candidate is an INTEGRATION to set up (a gateway, a hub, a controller),
+	* not a device to adopt. Replaces the `prefilledConfig.setupIntegration` marker,
+	* which is still read for one release.
+	*/
+	setupIntegration: boolean().optional(),
+	/** `stableId` of the gateway candidate this device was found BEHIND. */
+	parentStableId: string().optional(),
+	/** `false` = shown for context but not pickable. Default true. */
+	selectable: boolean().optional()
 });
 /**
 * Flat device summary returned by `createDevice` / `adoptDiscoveredDevice`.
@@ -43222,6 +44346,24 @@ var deviceProviderCapability = {
 			auth: "admin"
 		}),
 		/**
+		* How this provider is found on the network. `[]` = the provider has no
+		* declarative mode and keeps answering `discoverDevices` itself.
+		*/
+		getDiscoveryModes: method(object({}), array(DiscoveryModeSchema)),
+		/**
+		* Turn the engine's raw hits into candidates. The provider may make
+		* follow-up UNICAST requests to a hit host (an authenticated call, an
+		* identity check) and never sweeps a subnet. `params` is the per-scan form
+		* from `getDiscoveryParamsSchema`.
+		*/
+		classifyDiscoveryHits: method(object({
+			hits: array(DiscoveryHitSchema),
+			params: record(string(), unknown()).optional()
+		}), array(DiscoveryCandidateSchema), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/**
 		* Optional form schema (`ConfigUISchema`) for the EXTRA per-scan inputs a
 		* provider accepts (e.g. Gree's broadcast address for a different subnet).
 		* `null` when the provider takes no extra scan params — the generic
@@ -43986,17 +45128,23 @@ method(object({
 }), method(object({}), object({ providers: array(object({
 	addonId: string(),
 	label: string()
-})).readonly() }), { auth: "admin" }), method(object({}), object({ groups: array(object({
-	addonId: string(),
-	label: string(),
-	candidates: array(DiscoveryCandidateSchema).readonly(),
-	error: string().nullable()
-})).readonly() }), {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({
+})).readonly() }), { auth: "admin" }), method(
+	/** `subnets`: extra CIDRs for THIS scan, on top of the hub's own and the saved list. */
+	object({ subnets: array(string()).optional() }),
+	object({ groups: array(object({
+		addonId: string(),
+		label: string(),
+		candidates: array(DiscoveryCandidateSchema).readonly(),
+		error: string().nullable()
+	})).readonly() }),
+	{
+		kind: "mutation",
+		auth: "admin"
+	}
+), method(object({
 	addonId: string(),
-	params: record(string(), unknown()).optional()
+	params: record(string(), unknown()).optional(),
+	subnets: array(string()).optional()
 }), object({ candidates: array(DiscoveryCandidateSchema).readonly() }), {
 	kind: "mutation",
 	auth: "admin"
@@ -55636,11 +56784,13 @@ var ImageContractSchema = object({
 * The shell verdict (see {@link WrapperKindSchema}) with the proofs that
 * produced it.
 *
-* There is deliberately NO `canSelfUpdate` and no apply action: a wrapper
-* update is an ANNOUNCEMENT. The notification body carries the exact command
-* for a `docker` shell and says the app restarts into the new build for
-* `electron`, and that sentence is chosen from `kind` alone — a boolean
-* nothing reads is the defect this repo keeps paying for.
+* There is deliberately NO `canSelfUpdate` boolean: a wrapper update is an
+* ANNOUNCEMENT. The notification body carries the exact command for a `docker`
+* shell and says the app restarts into the new build for `electron`, and that
+* sentence is chosen from `kind` alone — a boolean nothing reads is the defect
+* this repo keeps paying for. The one shell that CAN be acted on is the
+* Electron app, and only through `installDesktopUpdate` (see
+* {@link DesktopAppStatusSchema} for what the node reads from the app first).
 */
 var WrapperIdentitySchema = object({
 	kind: _enum([
@@ -55688,6 +56838,49 @@ var ServerRollbackInfoSchema = object({
 	reason: string()
 });
 /**
+* What the native desktop app (Electron) that hosts this node says about
+* itself, read from `<dataDir>/server-root/desktop-app-state.json` (ADR-0971).
+* Absent on the status = no desktop app, or it never wrote the file.
+*
+* `stale` is the honest answer to an app that stopped writing (closed, hung,
+* crashed): the update facts are then the LAST ones known, not current ones,
+* and a consumer must not read `update.available: false` from a stale record
+* as "no update". `stateAtMs` is when the app last wrote.
+*/
+var DesktopAppStatusSchema = object({
+	/** The Electron app's own version (not the node closure's). */
+	version: string(),
+	update: object({
+		available: boolean(),
+		/** The new build is downloaded and `installDesktopUpdate` can apply it. */
+		downloaded: boolean(),
+		version: string().nullable(),
+		checking: boolean(),
+		/** Why the app's last update check produced no answer; `null` when it did. */
+		error: string().nullable()
+	}),
+	stateAtMs: number(),
+	stale: boolean()
+});
+/**
+* Why `installDesktopUpdate` did nothing. Stable names a UI maps to a sentence:
+*  - `not-electron`   — this node does not run inside the desktop app.
+*  - `no-app-state`   — the app never published its state (or the file is unreadable).
+*  - `app-state-stale` — the app stopped writing; it is probably not running.
+*  - `not-downloaded` — no update is downloaded yet; nothing to install.
+*/
+var InstallDesktopUpdateReasonSchema = _enum([
+	"not-electron",
+	"no-app-state",
+	"app-state-stale",
+	"not-downloaded"
+]);
+var InstallDesktopUpdateResultSchema = object({
+	accepted: boolean(),
+	/** Non-null exactly when `accepted` is false. */
+	reason: InstallDesktopUpdateReasonSchema.nullable()
+});
+/**
 * The runner boot check (D877): the runners this node PLANNED (hub: one per
 * `resolveRunnerId` over its forked addons; agent: the runners its process
 * service holds, because only the hub plans) against the states the process
@@ -55791,7 +56984,12 @@ var ServerPackageStatusSchema = object({
 	* on a provider that predates it. Absent is "not checked yet", never "all
 	* well": a consumer that needs the answer treats it as pending.
 	*/
-	runners: RunnerBootCheckSchema.optional()
+	runners: RunnerBootCheckSchema.optional(),
+	/**
+	* The desktop app hosting this node (see {@link DesktopAppStatusSchema}).
+	* Optional for version skew AND because most nodes have no desktop app.
+	*/
+	desktopApp: DesktopAppStatusSchema.optional()
 });
 var ServerUpdateCheckResultSchema = object({
 	packageName: string(),
@@ -55896,6 +57094,9 @@ method(_void(), ServerPackageStatusSchema, { auth: "admin" }), method(_void(), S
 	kind: "mutation",
 	auth: "admin",
 	timeoutMs: 16 * 6e4
+}), method(_void(), InstallDesktopUpdateResultSchema, {
+	kind: "mutation",
+	auth: "admin"
 }), method(_void(), ServerUpdateActionResultSchema, {
 	kind: "mutation",
 	auth: "admin"
@@ -56626,6 +57827,12 @@ var TerminalInstanceInfoSchema = object({
 	instanceId: string(),
 	cameraStableId: string(),
 	nodeId: string(),
+	/**
+	* False while the node the instance is bound to is not in the cluster
+	* topology (forgotten, renamed, re-paired). The instance is kept; the
+	* operator re-points it with `updateInstance({ targetNodeId })`.
+	*/
+	nodeInCluster: boolean(),
 	profileId: string(),
 	profileLabel: string(),
 	name: string(),
@@ -56675,6 +57882,8 @@ method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }),
 	auth: "admin"
 }), method(object({
 	instanceId: string().min(1),
+	/** Re-point the instance to another node; the profile must exist there. */
+	targetNodeId: string().min(1).max(256).optional(),
 	name: string().trim().min(1).max(160).optional(),
 	executable: string().max(1024).optional(),
 	args: array(string().max(2048)).max(64).optional(),
@@ -59084,13 +60293,19 @@ method(object({}), array(ActionEntrySchema), { auth: "admin" }), method(object({
 }), method(ActionIdInput, _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(ActionIdInput, object({ traces: array(AutomationRunTraceSchema) }), { auth: "admin" }), method(object({ action: ActionInputSchema }), object({ action: ActionEntrySchema }), {
+}), method(ActionIdInput, object({ traces: array(AutomationRunTraceSchema) }), { auth: "admin" }), method(object({ action: ActionInputSchema }), object({
+	action: ActionEntrySchema,
+	warnings: array(UnitWarningSchema).optional()
+}), {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({
 	actionId: string().min(1),
 	action: ActionInputSchema.partial()
-}), object({ action: ActionEntrySchema }), {
+}), object({
+	action: ActionEntrySchema,
+	warnings: array(UnitWarningSchema).optional()
+}), {
 	kind: "mutation",
 	auth: "admin"
 }), method(ActionIdInput, _void(), {
@@ -59672,6 +60887,30 @@ object({
 		at: number()
 	}).nullable()
 });
+var RemoteButtonShapeSchema = _enum([
+	"rect",
+	"rounded",
+	"round",
+	"pill"
+]);
+var RemoteButtonToneSchema = _enum([
+	"neutral",
+	"accent",
+	"danger",
+	"red",
+	"green",
+	"yellow",
+	"blue"
+]);
+var RemoteGroupFrameSchema = _enum([
+	"none",
+	"panel",
+	"divider",
+	"dpad",
+	"rocker-v",
+	"rocker-h",
+	"keypad"
+]);
 var RemoteLayoutButtonSchema = object({
 	id: string().min(1).max(40),
 	/** 0-based grid position. */
@@ -59681,12 +60920,94 @@ var RemoteLayoutButtonSchema = object({
 	colSpan: number().int().min(1).max(24),
 	icon: string().min(1).max(60).optional(),
 	label: string().min(1).max(40).optional(),
-	role: RemoteRoleSchema
+	role: RemoteRoleSchema,
+	/** Absent = the plain rendering every layout had before shapes existed. */
+	shape: RemoteButtonShapeSchema.optional(),
+	tone: RemoteButtonToneSchema.optional(),
+	/** The group this button belongs to; it must lie inside that group's rectangle. */
+	groupId: string().min(1).max(40).optional()
 });
+/**
+* A rectangle of the grid that moves as ONE thing and is drawn with a frame: a
+* titled panel, a section divider, a D-pad ring. `componentId` names the palette
+* entry it came from (informational: the layout is self-contained).
+*/
+var RemoteLayoutGroupSchema = object({
+	id: string().min(1).max(40),
+	componentId: string().min(1).max(80),
+	frame: RemoteGroupFrameSchema,
+	row: number().int().min(0).max(24),
+	col: number().int().min(0).max(24),
+	rowSpan: number().int().min(1).max(24),
+	colSpan: number().int().min(1).max(24),
+	title: string().min(1).max(40).optional()
+});
+function rectsOverlap(a, b) {
+	return a.row < b.row + b.rowSpan && b.row < a.row + a.rowSpan && a.col < b.col + b.colSpan && b.col < a.col + a.colSpan;
+}
+function rectContains(outer, inner) {
+	return inner.row >= outer.row && inner.col >= outer.col && inner.row + inner.rowSpan <= outer.row + outer.rowSpan && inner.col + inner.colSpan <= outer.col + outer.colSpan;
+}
+/**
+* The group rules of a layout: inside the grid, no two groups overlap, a
+* member lies inside its group, a divider holds nothing, and a button that is
+* not a member never sits inside someone else's rectangle (a group moves as
+* one thing, so a stray key under it would be left behind).
+*/
+function refineGroups(grid, ctx) {
+	const groups = grid.groups ?? [];
+	const byId = /* @__PURE__ */ new Map();
+	const fail = (message, path) => {
+		ctx.addIssue({
+			code: "custom",
+			message,
+			path
+		});
+	};
+	groups.forEach((group, index) => {
+		if (byId.has(group.id)) fail(`group id "${group.id}" is used twice`, [
+			"groups",
+			index,
+			"id"
+		]);
+		byId.set(group.id, group);
+		if (group.row + group.rowSpan > grid.rows || group.col + group.colSpan > grid.columns) fail(`group "${group.id}" leaves the grid`, ["groups", index]);
+		for (let other = 0; other < index; other += 1) {
+			const earlier = groups[other];
+			if (earlier !== void 0 && rectsOverlap(earlier, group)) {
+				fail(`groups "${earlier.id}" and "${group.id}" overlap`, ["groups", index]);
+				return;
+			}
+		}
+	});
+	grid.buttons.forEach((button, index) => {
+		if (button.groupId !== void 0) {
+			const group = byId.get(button.groupId);
+			if (group === void 0) {
+				fail(`button "${button.id}" names the unknown group "${button.groupId}"`, [
+					"buttons",
+					index,
+					"groupId"
+				]);
+				return;
+			}
+			if (group.frame === "divider") fail(`a divider group ("${group.id}") holds no buttons`, [
+				"buttons",
+				index,
+				"groupId"
+			]);
+			if (!rectContains(group, button)) fail(`button "${button.id}" lies outside its group "${group.id}"`, ["buttons", index]);
+			return;
+		}
+		const foreign = groups.find((group) => rectsOverlap(group, button));
+		if (foreign !== void 0) fail(`button "${button.id}" lies inside group "${foreign.id}" but is not a member`, ["buttons", index]);
+	});
+}
 object({
 	columns: number().int().min(1).max(24),
 	rows: number().int().min(1).max(24),
-	buttons: array(RemoteLayoutButtonSchema).max(200)
+	buttons: array(RemoteLayoutButtonSchema).max(200),
+	groups: array(RemoteLayoutGroupSchema).max(50).optional()
 }).superRefine((grid, ctx) => {
 	const ids = /* @__PURE__ */ new Set();
 	const taken = /* @__PURE__ */ new Map();
@@ -59723,6 +61044,7 @@ object({
 			taken.set(cell, button.id);
 		}
 	});
+	refineGroups(grid, ctx);
 });
 var RemoteBoundCommandSchema = object({
 	role: RemoteRoleSchema,
@@ -59854,6 +61176,91 @@ method(object({ kind: TemplateKindSchema.optional() }), array(TemplateRecordSche
 	kind: "mutation",
 	auth: "admin"
 });
+var RemoteComponentCategorySchema = _enum([
+	"power",
+	"navigation",
+	"volume",
+	"numbers",
+	"media",
+	"colour",
+	"apps",
+	"layout"
+]);
+/** `<namespace>:<name>`, both lowercase slugs — `core:dpad`, `<addonId>:<name>`. */
+var COMPONENT_ID_RE = /^[a-z0-9][a-z0-9_.-]*:[a-z0-9][a-z0-9_-]*$/;
+var RemoteComponentButtonSchema = object({
+	/** Joined to the instance id when the component is inserted. */
+	idSuffix: string().regex(/^[a-z0-9][a-z0-9_-]{0,19}$/, { message: "a short lowercase slug" }),
+	row: number().int().min(0).max(24),
+	col: number().int().min(0).max(24),
+	rowSpan: number().int().min(1).max(24),
+	colSpan: number().int().min(1).max(24),
+	role: RemoteRoleSchema,
+	icon: string().min(1).max(60).optional(),
+	label: string().min(1).max(40).optional(),
+	shape: RemoteButtonShapeSchema.optional(),
+	tone: RemoteButtonToneSchema.optional()
+});
+var RemoteLayoutComponentSchema = object({
+	id: string().max(80).regex(COMPONENT_ID_RE, { message: "<namespace>:<name>, lowercase" }),
+	name: string().min(1).max(60),
+	nameI18n: object({
+		en: string().min(1).max(60),
+		it: string().min(1).max(60)
+	}).optional(),
+	/** A display icon key, resolved by the UI like a button icon. */
+	icon: string().min(1).max(60),
+	category: RemoteComponentCategorySchema,
+	size: object({
+		rows: number().int().min(1).max(24),
+		cols: number().int().min(1).max(24)
+	}),
+	/** The frame drawn around the whole component, or null for loose buttons. */
+	group: object({
+		frame: RemoteGroupFrameSchema,
+		title: string().min(1).max(40).optional()
+	}).nullable(),
+	buttons: array(RemoteComponentButtonSchema).max(40)
+}).superRefine((component, ctx) => {
+	const suffixes = /* @__PURE__ */ new Set();
+	component.buttons.forEach((button, index) => {
+		if (suffixes.has(button.idSuffix)) ctx.addIssue({
+			code: "custom",
+			message: `button "${button.idSuffix}" is listed twice`,
+			path: [
+				"buttons",
+				index,
+				"idSuffix"
+			]
+		});
+		suffixes.add(button.idSuffix);
+		if (button.row + button.rowSpan > component.size.rows || button.col + button.colSpan > component.size.cols) {
+			ctx.addIssue({
+				code: "custom",
+				message: `button "${button.idSuffix}" leaves the component`,
+				path: ["buttons", index]
+			});
+			return;
+		}
+		for (let other = 0; other < index; other += 1) {
+			const earlier = component.buttons[other];
+			if (earlier !== void 0 && rectsOverlap(earlier, button)) {
+				ctx.addIssue({
+					code: "custom",
+					message: `buttons "${earlier.idSuffix}" and "${button.idSuffix}" overlap`,
+					path: ["buttons", index]
+				});
+				return;
+			}
+		}
+	});
+	if (component.group?.frame === "divider" && component.buttons.length > 0) ctx.addIssue({
+		code: "custom",
+		message: "a divider component holds no buttons",
+		path: ["buttons"]
+	});
+});
+method(object({}), array(RemoteLayoutComponentSchema), { auth: "protected" });
 /**
 * button — device-scoped capability for HA `button.*` / `input_button.*`
 * fire-only actuators. A button entity has no readable state — pressing it
@@ -63218,7 +64625,9 @@ method(_void(), array(IntegrationWithStateSchema)), method(object({ id: string()
 	id: string(),
 	settings: record(string(), unknown()),
 	/** Keys the form's schema declares secret (by type) — keychain-stored (D787). */
-	secretKeys: array(string()).optional()
+	secretKeys: array(string()).optional(),
+	/** The integration's own addon applies the change in-process and asks the hub not to respawn it. */
+	skipRestart: boolean().optional()
 }), object({ success: boolean() }), {
 	kind: "mutation",
 	auth: "admin"
@@ -63846,6 +65255,39 @@ var TlsStatusSchema = object({
 		hasCa: boolean()
 	}).nullable()
 });
+/** One provider's ask of the scan engine: the modes it declared. */
+var ScanRequestSchema = object({
+	providerId: string().min(1),
+	modes: array(DiscoveryModeSchema)
+});
+var ScanErrorSchema = object({
+	/** Absent for a failure that is the scan's own (a bad subnet, a socket that would not open). */
+	providerId: string().optional(),
+	/** The mode family that failed (`mdns`, `http-probe`, …). */
+	mode: string().optional(),
+	message: string()
+});
+/** What one scan did, per mode family; the engine logs the same numbers once. */
+var ScanStatsSchema = object({
+	hostsProbed: number().int(),
+	hits: number().int(),
+	timeouts: number().int(),
+	byMode: record(string(), object({
+		probed: number().int(),
+		hits: number().int(),
+		timeouts: number().int()
+	}))
+});
+var ScanNetworkResultSchema = object({
+	hits: array(object({
+		providerId: string(),
+		hit: DiscoveryHitSchema
+	})),
+	/** CIDRs actually covered: the hub's own /24s, the saved list and the per-call list. */
+	subnetsScanned: array(string()),
+	errors: array(ScanErrorSchema),
+	stats: ScanStatsSchema
+});
 method(_void(), ListResultSchema), method(_void(), PreferredSchema), method(object({
 	/**
 	* LEGACY HINT — do not send from new code. Kept optional so clients
@@ -63900,6 +65342,16 @@ method(_void(), ListResultSchema), method(_void(), PreferredSchema), method(obje
 }), method(_void(), object({ pem: string() })), method(_void(), TlsStatusSchema, {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	requests: array(ScanRequestSchema),
+	subnets: array(string()).optional()
+}), ScanNetworkResultSchema, {
+	kind: "mutation",
+	auth: "admin",
+	timeoutMs: 9e4
+}), method(_void(), object({ subnets: array(string()) }), { auth: "admin" }), method(object({ subnets: array(string()) }), object({ subnets: array(string()) }), {
+	kind: "mutation",
+	auth: "admin"
 }), method(_void(), TlsStatusSchema, {
 	kind: "mutation",
 	auth: "admin"
@@ -65987,6 +67439,14 @@ var PetFeederDeviceStatusSchema = _enum([
 	"on_batteries"
 ]);
 var gramsPortion = number().int().min(4).max(200);
+/** A portion REQUESTED of the feeder is a mass the method takes in GRAMS (the
+*  hardware's own unit). The bounds are grams; a caller entering another unit
+*  converts to grams first (`paramMeta`, D972). The STATUS fields above stay
+*  plain grams — they are not readings in the kilogram base. */
+var gramsParam = gramsPortion.meta(paramMeta({
+	quantity: "mass",
+	unit: "g"
+}));
 var PetFeederStatusSchema = object({
 	/** Food in the TANK (hopper), as the feeder's own sensor reports it
 	*  (`state.food`). A coarse level code, not grams — `0` is empty. The
@@ -66075,9 +67535,9 @@ var petFeederCapability = {
 		*/
 		feed: method(object({
 			deviceId: number().int().nonnegative(),
-			grams: gramsPortion.optional(),
-			hopper1: gramsPortion.optional(),
-			hopper2: gramsPortion.optional()
+			grams: gramsParam.optional(),
+			hopper1: gramsParam.optional(),
+			hopper2: gramsParam.optional()
 		}), _void(), {
 			kind: "mutation",
 			auth: "protected"
@@ -67619,7 +69079,7 @@ var runningStateCapability = {
 	volatileStateFields: ["lastFetchedAt"],
 	customize: runningCustomize
 };
-DeviceType.Camera, DeviceType.Sensor, DeviceType.Switch, method(object({ deviceId: number().int().nonnegative() }), object({ success: literal(true) }), {
+DeviceType.Camera, DeviceType.Sensor, DeviceType.Switch, DeviceType.Gateway, method(object({ deviceId: number().int().nonnegative() }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
 });
@@ -72232,6 +73692,124 @@ method(object({}), array(TrainingBaseModelSchema).readonly(), { auth: "admin" })
 	kind: "mutation",
 	auth: "admin"
 });
+var btn = (idSuffix, row, col, init) => ({
+	idSuffix,
+	row,
+	col,
+	rowSpan: 1,
+	colSpan: 1,
+	...init
+});
+function rocker(id, name, it, frame, title, buttons, size) {
+	return {
+		id,
+		name,
+		nameI18n: {
+			en: name,
+			it
+		},
+		icon: frame === "rocker-v" ? "chevrons-up-down" : "chevrons-left-right",
+		category: id.includes("channel") || id.includes("volume") ? "volume" : "navigation",
+		size,
+		group: title === null ? { frame } : {
+			frame,
+			title
+		},
+		buttons
+	};
+}
+btn("power", 0, 0, {
+	role: "power",
+	shape: "round",
+	tone: "danger"
+}), btn("up", 0, 1, {
+	role: "up",
+	icon: "chevron-up"
+}), btn("left", 1, 0, {
+	role: "left",
+	icon: "chevron-left"
+}), btn("ok", 1, 1, {
+	role: "ok",
+	shape: "round",
+	tone: "accent"
+}), btn("right", 1, 2, {
+	role: "right",
+	icon: "chevron-right"
+}), btn("down", 2, 1, {
+	role: "down",
+	icon: "chevron-down"
+}), rocker("core:rocker-volume-v", "Volume rocker", "Bilanciere volume", "rocker-v", "VOL", [btn("up", 0, 0, {
+	role: "volume_up",
+	icon: "plus",
+	shape: "pill"
+}), btn("down", 1, 0, {
+	role: "volume_down",
+	icon: "minus",
+	shape: "pill"
+})], {
+	rows: 2,
+	cols: 1
+}), rocker("core:rocker-channel-v", "Channel rocker", "Bilanciere canali", "rocker-v", "CH", [btn("up", 0, 0, {
+	role: "channel_up",
+	icon: "chevron-up",
+	shape: "pill"
+}), btn("down", 1, 0, {
+	role: "channel_down",
+	icon: "chevron-down",
+	shape: "pill"
+})], {
+	rows: 2,
+	cols: 1
+}), rocker("core:rocker-h", "Minus / plus rocker", "Bilanciere meno / più", "rocker-h", null, [btn("minus", 0, 0, {
+	role: "custom:minus",
+	label: "Minus",
+	icon: "minus",
+	shape: "pill"
+}), btn("plus", 0, 1, {
+	role: "custom:plus",
+	label: "Plus",
+	icon: "plus",
+	shape: "pill"
+})], {
+	rows: 1,
+	cols: 2
+}), [...Array.from({ length: 9 }, (_, i) => btn(`d${i + 1}`, Math.floor(i / 3), i % 3, { role: `digit_${i + 1}` })), btn("d0", 3, 1, { role: "digit_0" })], btn("red", 0, 0, {
+	role: "custom:color_red",
+	label: "Red",
+	tone: "red"
+}), btn("green", 0, 1, {
+	role: "custom:color_green",
+	label: "Green",
+	tone: "green"
+}), btn("yellow", 0, 2, {
+	role: "custom:color_yellow",
+	label: "Yellow",
+	tone: "yellow"
+}), btn("blue", 0, 3, {
+	role: "custom:color_blue",
+	label: "Blue",
+	tone: "blue"
+}), btn("rewind", 0, 0, {
+	role: "rewind",
+	icon: "rewind"
+}), btn("play", 0, 1, {
+	role: "play",
+	icon: "play"
+}), btn("pause", 0, 2, {
+	role: "pause",
+	icon: "pause"
+}), btn("forward", 0, 3, {
+	role: "fast_forward",
+	icon: "fast-forward"
+}), btn("stop", 0, 4, {
+	role: "stop",
+	icon: "square"
+}), [
+	1,
+	2,
+	3,
+	4
+].map((n) => btn(`app${n}`, 0, n - 1, { role: `custom:app_slot_${n}` })), btn("back", 0, 0, { role: "back" }), btn("home", 0, 1, { role: "home" }), btn("menu", 0, 2, { role: "menu" });
 discriminatedUnion("kind", [object({
 	kind: literal("raw"),
 	timings: array(number().int()),
@@ -72278,406 +73856,8 @@ function runningFromMediaPlayer(state, previous, fetchedAt, transitionAt) {
 	return nativeSlice(false, state, previous, transitionAtMs, fetchedAt, null);
 }
 DeviceFeature.FanSpeed, DeviceFeature.FanPreset, DeviceFeature.FanDirection, DeviceFeature.FanOscillating, DeviceFeature.CoverPositionable, DeviceFeature.CoverTilt, DeviceFeature.ValvePositionable, DeviceFeature.MediaPlayerVolume, DeviceFeature.ClimateFanMode;
-/**
-* Frozen unit → spec table. `•` in the doc marks each dimension's canonical
-* unit (`factor: 1, offset: 0`). °F derives from `°C = (°F − 32) × 5/9` ⇒
-* `factor = 5/9`, `offset = -160/9` (kept as exact expressions, not rounded
-* decimals). K derives from `°C = K − 273.15`.
-*/
-var UNIT_TABLE = {
-	"°C": {
-		dimension: "temperature",
-		factor: 1,
-		offset: 0
-	},
-	"°F": {
-		dimension: "temperature",
-		factor: 5 / 9,
-		offset: -160 / 9
-	},
-	K: {
-		dimension: "temperature",
-		factor: 1,
-		offset: -273.15
-	},
-	hPa: {
-		dimension: "pressure",
-		factor: 1,
-		offset: 0
-	},
-	kPa: {
-		dimension: "pressure",
-		factor: 10,
-		offset: 0
-	},
-	Pa: {
-		dimension: "pressure",
-		factor: .01,
-		offset: 0
-	},
-	mbar: {
-		dimension: "pressure",
-		factor: 1,
-		offset: 0
-	},
-	bar: {
-		dimension: "pressure",
-		factor: 1e3,
-		offset: 0
-	},
-	inHg: {
-		dimension: "pressure",
-		factor: 33.8639,
-		offset: 0
-	},
-	mmHg: {
-		dimension: "pressure",
-		factor: 1.33322,
-		offset: 0
-	},
-	psi: {
-		dimension: "pressure",
-		factor: 68.9476,
-		offset: 0
-	},
-	"m/s": {
-		dimension: "speed",
-		factor: 1,
-		offset: 0
-	},
-	"km/h": {
-		dimension: "speed",
-		factor: 1 / 3.6,
-		offset: 0
-	},
-	mph: {
-		dimension: "speed",
-		factor: .44704,
-		offset: 0
-	},
-	kn: {
-		dimension: "speed",
-		factor: .514444,
-		offset: 0
-	},
-	"mm/h": {
-		dimension: "precipitation-rate",
-		factor: 1,
-		offset: 0
-	},
-	"in/h": {
-		dimension: "precipitation-rate",
-		factor: 25.4,
-		offset: 0
-	},
-	m: {
-		dimension: "length",
-		factor: 1,
-		offset: 0
-	},
-	mm: {
-		dimension: "length",
-		factor: .001,
-		offset: 0
-	},
-	cm: {
-		dimension: "length",
-		factor: .01,
-		offset: 0
-	},
-	km: {
-		dimension: "length",
-		factor: 1e3,
-		offset: 0
-	},
-	in: {
-		dimension: "length",
-		factor: .0254,
-		offset: 0
-	},
-	ft: {
-		dimension: "length",
-		factor: .3048,
-		offset: 0
-	},
-	mi: {
-		dimension: "length",
-		factor: 1609.344,
-		offset: 0
-	},
-	"m²": {
-		dimension: "area",
-		factor: 1,
-		offset: 0
-	},
-	lx: {
-		dimension: "illuminance",
-		factor: 1,
-		offset: 0
-	},
-	"W/m²": {
-		dimension: "irradiance",
-		factor: 1,
-		offset: 0
-	},
-	W: {
-		dimension: "power",
-		factor: 1,
-		offset: 0
-	},
-	kW: {
-		dimension: "power",
-		factor: 1e3,
-		offset: 0
-	},
-	VA: {
-		dimension: "apparent-power",
-		factor: 1,
-		offset: 0
-	},
-	Wh: {
-		dimension: "energy",
-		factor: 1,
-		offset: 0
-	},
-	kWh: {
-		dimension: "energy",
-		factor: 1e3,
-		offset: 0
-	},
-	MWh: {
-		dimension: "energy",
-		factor: 1e6,
-		offset: 0
-	},
-	V: {
-		dimension: "voltage",
-		factor: 1,
-		offset: 0
-	},
-	mV: {
-		dimension: "voltage",
-		factor: .001,
-		offset: 0
-	},
-	A: {
-		dimension: "current",
-		factor: 1,
-		offset: 0
-	},
-	mA: {
-		dimension: "current",
-		factor: .001,
-		offset: 0
-	},
-	ppm: {
-		dimension: "concentration-volume",
-		factor: 1,
-		offset: 0
-	},
-	ppb: {
-		dimension: "concentration-volume",
-		factor: .001,
-		offset: 0
-	},
-	"µg/m³": {
-		dimension: "concentration-mass",
-		factor: 1,
-		offset: 0
-	},
-	"mg/m³": {
-		dimension: "concentration-mass",
-		factor: 1e3,
-		offset: 0
-	},
-	kg: {
-		dimension: "mass",
-		factor: 1,
-		offset: 0
-	},
-	g: {
-		dimension: "mass",
-		factor: .001,
-		offset: 0
-	},
-	lb: {
-		dimension: "mass",
-		factor: .453592,
-		offset: 0
-	},
-	oz: {
-		dimension: "mass",
-		factor: .0283495,
-		offset: 0
-	},
-	"%": {
-		dimension: "percentage",
-		factor: 1,
-		offset: 0
-	},
-	L: {
-		dimension: "volume",
-		factor: 1,
-		offset: 0
-	},
-	mL: {
-		dimension: "volume",
-		factor: .001,
-		offset: 0
-	},
-	gal: {
-		dimension: "volume",
-		factor: 3.785411784,
-		offset: 0
-	},
-	s: {
-		dimension: "duration",
-		factor: 1,
-		offset: 0
-	},
-	ms: {
-		dimension: "duration",
-		factor: .001,
-		offset: 0
-	},
-	min: {
-		dimension: "duration",
-		factor: 60,
-		offset: 0
-	},
-	h: {
-		dimension: "duration",
-		factor: 3600,
-		offset: 0
-	},
-	d: {
-		dimension: "duration",
-		factor: 86400,
-		offset: 0
-	},
-	B: {
-		dimension: "information",
-		factor: 1,
-		offset: 0
-	},
-	KiB: {
-		dimension: "information",
-		factor: 1024,
-		offset: 0
-	},
-	MiB: {
-		dimension: "information",
-		factor: 1024 ** 2,
-		offset: 0
-	},
-	GiB: {
-		dimension: "information",
-		factor: 1024 ** 3,
-		offset: 0
-	},
-	TiB: {
-		dimension: "information",
-		factor: 1024 ** 4,
-		offset: 0
-	},
-	kB: {
-		dimension: "information",
-		factor: 1e3,
-		offset: 0
-	},
-	MB: {
-		dimension: "information",
-		factor: 1e6,
-		offset: 0
-	},
-	GB: {
-		dimension: "information",
-		factor: 1e9,
-		offset: 0
-	},
-	"°": {
-		dimension: "angle",
-		factor: 1,
-		offset: 0
-	},
-	dBFS: {
-		dimension: "sound-level",
-		factor: 1,
-		offset: 0
-	},
-	dBm: {
-		dimension: "signal-level",
-		factor: 1,
-		offset: 0
-	},
-	mired: {
-		dimension: "colour-temperature",
-		factor: 1,
-		offset: 0
-	},
-	kbps: {
-		dimension: "bitrate",
-		factor: 1,
-		offset: 0
-	},
-	Mbps: {
-		dimension: "bitrate",
-		factor: 1e3,
-		offset: 0
-	},
-	fps: {
-		dimension: "rate",
-		factor: 1,
-		offset: 0
-	}
-};
-/** Resolve a unit's `UnitSpec`, or `undefined` when the spelling is unknown. */
-function specFor(unit) {
-	return Object.hasOwn(UNIT_TABLE, unit) ? UNIT_TABLE[unit] : void 0;
-}
-/** The dimension a unit belongs to, or `undefined` for an unknown unit. */
-function unitDimension(unit) {
-	return specFor(unit)?.dimension;
-}
-/** Value in `spec`'s unit → its dimension's canonical unit. */
-function toCanonical(value, spec) {
-	return value * spec.factor + spec.offset;
-}
-/** Canonical-unit value → the unit described by `spec`. */
-function fromCanonical(canonical, spec) {
-	return (canonical - spec.offset) / spec.factor;
-}
-/**
-* Graceful variant for the render path: returns the converted value, or
-* `undefined` when the conversion is refused (unknown unit / cross-dimension).
-* Never throws — a render caller falls back to the raw value + source unit.
-*/
-function tryConvertUnit(value, from, to) {
-	if (from === to) return value;
-	const fromSpec = specFor(from);
-	if (!fromSpec) return void 0;
-	const toSpec = specFor(to);
-	if (!toSpec) return void 0;
-	if (fromSpec.dimension !== toSpec.dimension) return void 0;
-	return fromCanonical(toCanonical(value, fromSpec), toSpec);
-}
-/**
-* Every known unit spelling in a dimension (table insertion order — canonical
-* unit first). Powers the UI's same-dimension unit picker.
-*/
-/**
-* Convert a difference, not a reading. Affine units (°F) shift an absolute
-* value by their offset; a step of 1°F is 5/9°C, so the offset is cancelled.
-*/
-function tryConvertDelta(value, from, to) {
-	if (from === to) return value;
-	const origin = tryConvertUnit(0, from, to);
-	const shifted = tryConvertUnit(value, from, to);
-	if (origin === void 0 || shifted === void 0) return void 0;
-	return shifted - origin;
-}
 SOURCE_CAPS.filter((cap) => cap !== "switch" && cap !== "motion");
-DeviceType.Camera, DeviceType.Sensor, DeviceType.Button, DeviceType.Switch, DeviceType.PetFeeder, DeviceType.Container, DeviceType.Thermostat, DeviceType.EventEmitter, DeviceType.Camera, DeviceType.Hub, DeviceType.Light, DeviceType.Siren, DeviceType.Switch, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Fan, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder, DeviceType.PetFountain, DeviceType.Dishwasher, DeviceType.Washer, DeviceType.Dryer, DeviceType.Camera, DeviceType.Camera, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.MediaPlayer, DeviceType.WaterHeater, DeviceType.Humidifier, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.PetFeeder;
+DeviceType.Camera, DeviceType.Sensor, DeviceType.Button, DeviceType.Switch, DeviceType.PetFeeder, DeviceType.Container, DeviceType.Thermostat, DeviceType.EventEmitter, DeviceType.Camera, DeviceType.Hub, DeviceType.Light, DeviceType.Siren, DeviceType.Switch, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Fan, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder, DeviceType.PetFountain, DeviceType.Dishwasher, DeviceType.Washer, DeviceType.Dryer, DeviceType.Gateway, DeviceType.Camera, DeviceType.Camera, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.Switch, DeviceType.Light, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.PetFeeder, DeviceType.MediaPlayer, DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.MediaPlayer, DeviceType.WaterHeater, DeviceType.Humidifier, DeviceType.Fan, DeviceType.Climate, DeviceType.Thermostat, DeviceType.PetFeeder;
 String.raw`rose\(active(\d+), changed(\d+), (\d+(?:\.\d+)?)\)`;
 DeviceRole.BinarySensor, DeviceRole.MotionSensor;
 new Set(CAP_NAMES);
@@ -73799,6 +74979,17 @@ var BaseDeviceProvider = class extends BaseAddon {
 	async discoverDevices(_input) {
 		return [];
 	}
+	/**
+	* How the scan engine finds this provider. Default `[]`: the provider is
+	* not migrated and keeps answering `discoverDevices` itself.
+	*/
+	async getDiscoveryModes() {
+		return [];
+	}
+	/** Turn the scan engine's raw hits into candidates. Default: none. */
+	async classifyDiscoveryHits(_input) {
+		return [];
+	}
 	/** Extra per-scan input form (e.g. a broadcast address for another subnet).
 	*  Null = no extra params. Override in providers that support scoped scans. */
 	async getDiscoveryParamsSchema() {
@@ -74279,7 +75470,7 @@ var BaseDeviceProvider = class extends BaseAddon {
 		return toDeviceSummary(device, this.addonId);
 	}
 };
-DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Camera, DeviceType.Hub, DeviceType.Switch, DeviceType.Siren, DeviceType.Light, DeviceType.Fan, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder, DeviceType.PetFountain, DeviceType.Dishwasher, DeviceType.Washer, DeviceType.Dryer;
+DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Camera, DeviceType.Hub, DeviceType.Switch, DeviceType.Siren, DeviceType.Light, DeviceType.Fan, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder, DeviceType.PetFountain, DeviceType.Dishwasher, DeviceType.Washer, DeviceType.Dryer, DeviceType.Gateway;
 new Set(Object.values(DeviceType));
 Object.freeze({
 	"accessories.getStatus": {
@@ -74667,6 +75858,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"addonSettings.getDeclaredSettingsKeys": {
+		capName: "addon-settings",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
 	"addonSettings.getDeviceSettings": {
 		capName: "addon-settings",
 		capScope: "system",
@@ -74688,6 +75886,13 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
+	"addonSettings.unsetStoredSettingsKeys": {
+		capName: "addon-settings",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"addonSettings.updateDeviceSettings": {
 		capName: "addon-settings",
 		capScope: "system",
@@ -77103,6 +78308,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"deviceProvider.classifyDiscoveryHits": {
+		capName: "device-provider",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"deviceProvider.createDevice": {
 		capName: "device-provider",
 		capScope: "system",
@@ -77131,6 +78343,13 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
+	"deviceProvider.getDiscoveryModes": {
+		capName: "device-provider",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
 	"deviceProvider.getDiscoveryParamsSchema": {
 		capName: "device-provider",
 		capScope: "system",
@@ -77908,6 +79127,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"keychain.releaseRecordRefs": {
+		capName: "keychain",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"keychain.resolve": {
 		capName: "keychain",
 		capScope: "system",
@@ -78328,6 +79554,13 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
+	"localNetwork.getScanSubnets": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
 	"localNetwork.getTlsStatus": {
 		capName: "local-network",
 		capScope: "system",
@@ -78377,6 +79610,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"localNetwork.scanNetwork": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"localNetwork.setAddressRole": {
 		capName: "local-network",
 		capScope: "system",
@@ -78398,6 +79638,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"localNetwork.setScanSubnets": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"localNetwork.setViewerEndpoints": {
 		capName: "local-network",
 		capScope: "system",
@@ -82080,6 +83327,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"remoteLayoutComponents.listComponents": {
+		capName: "remote-layout-components",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
 	"runningState.getStatus": {
 		capName: "running-state",
 		capScope: "device",
@@ -82206,6 +83460,13 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
+	"serverManagement.installDesktopUpdate": {
+		capName: "server-management",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"serverManagement.restartServer": {
 		capName: "server-management",
 		capScope: "system",
@@ -82605,6 +83866,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"storageAdmin.dropOrphanedKind": {
+		capName: "storage-admin",
+		capScope: "system",
+		addonId: null,
+		access: "delete",
+		role: "admin"
+	},
 	"storageAdmin.listKinds": {
 		capName: "storage-admin",
 		capScope: "system",
@@ -82626,6 +83894,27 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
+	"storageAdmin.scanStaleData": {
+		capName: "storage-admin",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
+	"storageAdmin.staleDataReport": {
+		capName: "storage-admin",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
+	"storageAdmin.unsetStaleSettingsKey": {
+		capName: "storage-admin",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"storageEvictable.evict": {
 		capName: "storage-evictable",
 		capScope: "system",
@@ -86116,7 +87405,8 @@ var APPLIANCE_CAP_VOCABULARY = {
 						min: 4,
 						max: 200,
 						step: 1,
-						unit: "g"
+						unit: "g",
+						quantity: "mass"
 					},
 					optional: true
 				}]
@@ -86135,7 +87425,8 @@ var APPLIANCE_CAP_VOCABULARY = {
 						min: 4,
 						max: 200,
 						step: 1,
-						unit: "g"
+						unit: "g",
+						quantity: "mass"
 					},
 					optional: true
 				}, {
@@ -86146,7 +87437,8 @@ var APPLIANCE_CAP_VOCABULARY = {
 						min: 4,
 						max: 200,
 						step: 1,
-						unit: "g"
+						unit: "g",
+						quantity: "mass"
 					},
 					optional: true
 				}]
@@ -88246,6 +89538,7 @@ var SYSTEM_CAP_VOCABULARY = {
 	"recording-export": system("recording exports — requested from the timeline, not an automation step"),
 	records: system(INTERNAL),
 	remote: system("the per-device remote setup — authored in the Customize remote editor, sent through the remote UI"),
+	"remote-layout-components": system("the palette of the remote template editor — read-only data, never actuated"),
 	"server-management": system(CLUSTER),
 	"settings-store": system(INTERNAL),
 	"smtp-provider": system(INTERNAL),
@@ -88318,7 +89611,7 @@ function projectAction(cap, action) {
 	};
 }
 Object.entries(CAP_VOCABULARY_BY_NAME).flatMap(([cap, entry]) => entry.scope === "device" ? (entry.actions ?? []).map((a) => projectAction(cap, a)) : []);
-DeviceType.Camera, DeviceType.Hub, DeviceType.Light, DeviceType.Siren, DeviceType.Switch, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Fan, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder, DeviceType.PetFountain, DeviceType.Dishwasher, DeviceType.Washer, DeviceType.Dryer;
+DeviceType.Camera, DeviceType.Hub, DeviceType.Light, DeviceType.Siren, DeviceType.Switch, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Fan, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder, DeviceType.PetFountain, DeviceType.Dishwasher, DeviceType.Washer, DeviceType.Dryer, DeviceType.Gateway;
 DeviceFeature.BatteryOperated;
 /**
 * How a washer, dryer or dishwasher leaves CamStack.
@@ -92917,4 +94210,65 @@ object({
 	commands: record(string(), unknown())
 });
 //#endregion
-export { lawnMowerControlCapability as $, object as $t, buttonCapability as A, valveCapability as At, coverCapability as B, baseUnitOf as Bt, batteryCapability as C, switchCapability as Ct, brokerCapability as D, tryConvertUnit as Dt, brightnessCapability as E, tryConvertDelta as Et, connectivityCapability as F, DeviceRole as Ft, eventEmitterCapability as G, isReadingQuantity as Gt, deviceAdoptionCapability as H, defineEntryKind as Ht, consumableFormOf as I, DeviceType as It, gasCapability as J, array as Jt, fanControlCapability as K, nodePin as Kt, consumableKindOf as L, errMsg as Lt, carbonMonoxideCapability as M, waterHeaterCapability as Mt, climateControlCapability as N, weatherCapability as Nt, buildAddonRouteProvider as O, updateCapability as Ot, colorCapability as P, DeviceFeature as Pt, ingestReading as Q, number as Qt, contactCapability as R, BaseAddon as Rt, automationControlCapability as S, smokeCapability as St, binaryCapability as T, temperatureSensorCapability as Tt, deviceExportCapability as U, defineRecordKinds as Ut, deviceAdminLinkCapability as V, createEvent as Vt, enumSensorCapability as W, entryBody as Wt, humiditySensorCapability as X, discriminatedUnion as Xt, humidifierCapability as Y, boolean as Yt, imageCapability as Z, literal as Zt, accessoriesCapability as _, runningFromMediaPlayer as _t, COCO_TO_MACRO as a, EventCategory as an, notifierCapability as at, alarmPanelCapability as b, scriptRunnerCapability as bt, ConsumableItemSchema as c, parseAdminBase as ct, FanDirectionSchema as d, presenceCapability as dt, record as en, lockControlCapability as et, HvacModeSchema as f, pressureSensorCapability as ft, TargetSchema as g, runningFromLawnMower as gt, RUNNING_STATE_COLD as h, runExportedAction as ht, CAMERA_SWITCH_ORDER as i, url as in, notificationOutputCapability as it, calendarSourceCapability as j, vibrationCapability as jt, buildDeviceAdminUrl as k, vacuumControlCapability as kt, ConsumableStatusSchema as l, powerMeterCapability as lt, PLUG_APPLIANCE_TYPES as m, quantityFromUnit as mt, BaseDevice as n, union as nn, motionCapability as nt, CameraSwitchIdSchema as o, numericSensorCapability as ot, MediaPlayerRepeatSchema as p, pruneDeletedEntities as pt, floodCapability as q, _enum as qt, BaseDeviceProvider as r, unknown as rn, normalizeUnit as rt, ConsumableFormSchema as s, oauthIntegrationCapability as st, AlarmArmModeSchema as t, string as tn, mediaPlayerCapability as tt, EnumSensorDateTimeFormatSchema as u, prepareNotification as ut, addonRoutesCapability as v, runningFromVacuumState as vt, bestLocationMatch as w, tamperCapability as wt, ambientLightSensorCapability as x, sendToExportedTarget as xt, airQualitySensorCapability as y, runningStateCapability as yt, controlCapability as z, RecordSecretUnavailableError as zt };
+//#region src/ha-broker-source.ts
+/**
+* The export half's ONLY read of the `broker` registry — and the record of why
+* it is NOT pinned, which is the opposite of what this file said for one deploy.
+*
+* ── What a pin would buy, and why it cannot be paid for here ───────────────
+* `broker` is a `mode:'collection'` capability: several addons register a
+* provider, each owning a DISJOINT set of brokers (`provider-homematic` owns
+* `hm_*`, `provider-homeassistant` owns `ha_*`). For an ID-KEYED method that is
+* decisive, and the export half's `getBrokerConfig` call IS pinned for exactly
+* that reason — measured on the live hub:
+*
+*   broker.getBrokerConfig { id: 'ha_001' }                          → null
+*   broker.getBrokerConfig { id: 'ha_001', addonId: 'provider-…' }   → the config
+*
+* `list` is different, and the difference is not cosmetic. Pinning it makes the
+* read depend on `provider-homeassistant` being REGISTERED at the moment of the
+* call — and that provider registers its capabilities only at the very END of
+* its `initialize()`, after restoring every HA device. Pinned, the export half
+* hard-fails through that whole window with
+*
+*   BAD_REQUEST: Capability "broker" has no provider with addonId
+*                "provider-homeassistant"
+*
+* which is strictly worse than the union: unpinned, `list` is fanned across
+* every registered provider, so it returns `ha_001` as soon as the provider is
+* up and simply omits it while it is not. Shipped pinned on 2026-08-09 and it
+* took the operator from "one instance, switched off" to "no instance at all".
+*
+* ── The rule this leaves behind ────────────────────────────────────────────
+* Pin a call that NAMES a resource (`{ id }`, `{ brokerId }`) — only one
+* provider can answer it and a wrong answer is `null`, indistinguishable from
+* "no such resource". Do NOT pin an enumeration: its contract is already the
+* union, and a pin converts a provider's absence from "returns fewer rows" into
+* "throws". `scripts/check-collection-cap-pin.ts` enforces exactly that split.
+*
+* ── The other half of the lesson: never pin a cap you provide yourself ─────
+* The provider half's own `broker.*` calls (subscribe / getState / publish)
+* must stay unpinned too, and for a sharper reason: they run DURING
+* `registry.restore()`, i.e. before `initialize()` returns the provider that
+* would satisfy the pin. Pinning them deadlocks the addon's own boot — the cap
+* cannot register until restore finishes, and restore cannot finish until the
+* cap resolves. In-process they need no pin anyway: `localProviderLink`
+* short-circuits any cap the calling process already provides.
+*/
+/** The addon that owns the import direction, and every `ha_*` broker. */
+var HA_PROVIDER_ADDON_ID = "provider-homeassistant";
+/** The `BrokerInfo.kind` tag the Home Assistant provider stamps. */
+var HA_BROKER_KIND = "home-assistant";
+/**
+* Every Home Assistant broker currently registered, cluster-wide.
+*
+* Unpinned by design (see the module docblock) and filtered by `kind`, which is
+* the contract check that matters: whatever mix of providers answered the
+* union, only `home-assistant` brokers are ever exported to over Home
+* Assistant's transport.
+*/
+async function listHomeAssistantBrokers(query) {
+	return (await query({})).filter((broker) => broker.kind === HA_BROKER_KIND);
+}
+//#endregion
+export { humiditySensorCapability as $, discriminatedUnion as $t, brokerCapability as A, tryConvertUnit as At, consumableKindOf as B, errMsg as Bt, alarmPanelCapability as C, scriptRunnerCapability as Ct, bestLocationMatch as D, tamperCapability as Dt, batteryCapability as E, switchCapability as Et, carbonMonoxideCapability as F, waterHeaterCapability as Ft, deviceAdoptionCapability as G, defineEntryKind as Gt, controlCapability as H, RecordSecretUnavailableError as Ht, climateControlCapability as I, weatherCapability as It, eventEmitterCapability as J, isReadingQuantity as Jt, deviceExportCapability as K, defineRecordKinds as Kt, colorCapability as L, DeviceFeature as Lt, buildDeviceAdminUrl as M, vacuumControlCapability as Mt, buttonCapability as N, valveCapability as Nt, binaryCapability as O, temperatureSensorCapability as Ot, calendarSourceCapability as P, vibrationCapability as Pt, humidifierCapability as Q, boolean as Qt, connectivityCapability as R, DeviceRole as Rt, airQualitySensorCapability as S, runningStateCapability as St, automationControlCapability as T, smokeCapability as Tt, coverCapability as U, baseUnitOf as Ut, contactCapability as V, BaseAddon as Vt, deviceAdminLinkCapability as W, createEvent as Wt, floodCapability as X, _enum as Xt, fanControlCapability as Y, nodePin as Yt, gasCapability as Z, array as Zt, PLUG_APPLIANCE_TYPES as _, quantityFromUnit as _t, BaseDevice as a, union as an, motionCapability as at, accessoriesCapability as b, runningFromMediaPlayer as bt, COCO_TO_MACRO as c, EventCategory as cn, notifierCapability as ct, ConsumableItemSchema as d, parseAdminBase as dt, literal as en, imageCapability as et, ConsumableStatusSchema as f, powerMeterCapability as ft, MediaPlayerRepeatSchema as g, pruneDeletedEntities as gt, HvacModeSchema as h, pressureSensorCapability as ht, AlarmArmModeSchema as i, string as in, mediaPlayerCapability as it, buildAddonRouteProvider as j, updateCapability as jt, brightnessCapability as k, tryConvertDelta as kt, CameraSwitchIdSchema as l, numericSensorCapability as lt, FanDirectionSchema as m, presenceCapability as mt, HA_PROVIDER_ADDON_ID as n, object as nn, lawnMowerControlCapability as nt, BaseDeviceProvider as o, unknown as on, normalizeUnit as ot, EnumSensorDateTimeFormatSchema as p, prepareNotification as pt, enumSensorCapability as q, entryBody as qt, listHomeAssistantBrokers as r, record as rn, lockControlCapability as rt, CAMERA_SWITCH_ORDER as s, url as sn, notificationOutputCapability as st, HA_BROKER_KIND as t, number as tn, ingestReading as tt, ConsumableFormSchema as u, oauthIntegrationCapability as ut, RUNNING_STATE_COLD as v, runExportedAction as vt, ambientLightSensorCapability as w, sendToExportedTarget as wt, addonRoutesCapability as x, runningFromVacuumState as xt, TargetSchema as y, runningFromLawnMower as yt, consumableFormOf as z, DeviceType as zt };