@camstack/addon-provider-homeassistant 1.2.646 → 1.2.648

package/dist/ha-export/ha-export.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_ha_broker_source = require("../ha-broker-source-gQYTcasw.js");
+const require_ha_broker_source = require("../ha-broker-source-Ba20mhmb.js");
 let node_crypto = require("node:crypto");
 require("node:zlib");
 let node_fs = require("node:fs");
@@ -3485,6 +3485,10 @@ function controlEntitySpecs(slice, quantity) {
 	}, kindExtra];
 }
 var CAPS_NOT_EXPORTED = [
+	{
+		cap: "do-not-disturb",
+		reason: "A vendor switch of a speaker, provided so far only by an imported Echo: its media player is the entity a home-automation front end needs, and no entity kind has been chosen for the Do Not Disturb switch yet."
+	},
 	{
 		cap: "timed-run",
 		reason: "A hub-side timer for a device that has none: a \"run for N minutes\" command and the deadline of the pending switch-off. The switch or pump it drives is already exported through `switch`, and the deadline is a countdown, not a value an entity can hold."
@@ -4936,6 +4940,49 @@ async function call(slice, capName, make) {
 	}
 	return { ok: true };
 }
+//#endregion
+//#region src/ha-export/migrations/drop-public-base-url.ts
+/**
+* The media base is no longer a setting of this addon (D986 §5): each Home Assistant
+* instance chooses a hub address ROLE (`mediaRole:<brokerId>`) and the address is read from
+* the palette on every use. The `publicBaseUrl` key older versions persisted is deleted.
+* Every other key is left exactly as stored.
+*
+* Idempotent: a store without the key yields an empty plan, which writes nothing.
+*/
+/** The settings scope of this addon (`<addonId>:addon-settings`). */
+var HA_EXPORT_SETTINGS_SCOPE = "homeassistant-export:addon-settings";
+var RETIRED_URL_KEYS = ["publicBaseUrl"];
+async function planDropPublicBaseUrl(ports) {
+	const stored = await ports.readStored();
+	const present = RETIRED_URL_KEYS.filter((key) => key in stored);
+	if (present.length === 0) return { edits: [] };
+	return { edits: [{
+		op: "deleteKeys",
+		scope: HA_EXPORT_SETTINGS_SCOPE,
+		keys: [...present],
+		precondition: require_ha_broker_source.preconditionOf(Object.fromEntries(present.map((key) => [key, stored[key]])))
+	}] };
+}
+//#endregion
+//#region src/ha-export/migrations/index.ts
+/** The `homeassistant-export` catalogue (D987): offered to the engine when the addon initialises. */
+var ADDON_MIGRATIONS = [{
+	meta: {
+		id: "homeassistant-export/2026-11-02-drop-public-base-url",
+		owner: "homeassistant-export",
+		level: "addon-state",
+		seq: 1,
+		dependsOn: [],
+		store: "settings",
+		scope: "cluster",
+		onFailure: "tolerate",
+		bodyKind: "plan",
+		description: "Delete the retired publicBaseUrl setting; each instance now chooses a hub address role",
+		fixtureMark: "the reconcile interval the migration does not know"
+	},
+	plan: planDropPublicBaseUrl
+}];
 process.platform, process.env["SystemRoot"];
 /**
 * The ONE derivation of "a signed, expiring URL".
@@ -5015,15 +5062,26 @@ function verifyExpiringUrl(input) {
 * an expired link is refused whether or not its signature is valid, so a leaked
 * URL stops working on its own.
 */
+/** The settings key that carries one broker's media role (per-instance, like `exportTo:`). */
+function mediaRoleKey(brokerId) {
+	return `mediaRole:${brokerId}`;
+}
+/** A broker's chosen role; anything stored that is not a known role is `internal`. */
+function haMediaRoleOf(store, brokerId) {
+	return store[mediaRoleKey(brokerId)] === "publicEndpoint" ? "publicEndpoint" : "internal";
+}
 /**
-* The base a media link is minted on when the operator left the addon's own
-* field empty: the hub's `internal` role (D734) — the address flagged
-* "Internal" on the Network page, else the detected LAN address. Home
-* Assistant is a LAN device pulling from the hub, so never the public
-* endpoint, and never loopback (`null` when nothing qualifies).
+* The base a media link is minted on: the hub's role (D734) — `internal` unless the
+* broker chose `publicEndpoint`. Ranked by `local-network`, never loopback (`null`
+* when the role resolves to nothing): a link Home Assistant cannot open is worse
+* than no image.
 */
-function haMediaBaseUrl(book) {
-	return book.roles.internal.resolved;
+function haMediaBaseUrl(book, role = "internal") {
+	return book.roles[role].resolved;
+}
+/** brokerId → media base, each broker on ITS role. Pure: the caller reads the palette per use. */
+function mediaBasesByBroker(store, brokerIds, book) {
+	return new Map(brokerIds.map((brokerId) => [brokerId, haMediaBaseUrl(book, haMediaRoleOf(store, brokerId))]));
 }
 /** How long a minted link stays valid. Long enough for HA to render it. */
 var MEDIA_URL_TTL_MS = 360 * 60 * 1e3;
@@ -7164,8 +7222,7 @@ var DEFAULT_CONFIG = {
 	exportedEntities: {
 		actions: [],
 		targets: []
-	},
-	publicBaseUrl: ""
+	}
 };
 var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 	links = /* @__PURE__ */ new Map();
@@ -7174,7 +7231,6 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 	/** numeric deviceId → deviceKey, for the event path. */
 	keyByDeviceId = /* @__PURE__ */ new Map();
 	mediaSecret = "";
-	mediaBaseUrl = null;
 	reconcileTimer = null;
 	reconcileInFlight = false;
 	/** A reason asked for while one was running. Re-run, never dropped. */
@@ -7274,6 +7330,7 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 		super({ ...DEFAULT_CONFIG });
 	}
 	async onInitialize() {
+		await this.runMigrations(require_ha_broker_source.defineAddonMigrations(ADDON_MIGRATIONS, { readStored: async () => this.resolveGlobalStore() }));
 		const secret = this.state("haExportMediaSecret", require_ha_broker_source.string(), "");
 		const existing = await secret.get();
 		if (existing.length === 0) {
@@ -7674,32 +7731,39 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 		const lastSeen = readNumber(data, "lastSeen") ?? Date.now();
 		const zonesVisited = readStringArray(data, "zonesVisited");
 		const fusedIntoTrackId = readString(data, "fusedIntoTrackId");
-		const mediaUrl = this.mintTrackMediaUrl(trackId, deviceId);
-		const values = projectTrackLifecycle(deviceKey, {
-			deviceId,
-			trackId,
-			phase,
-			classes,
-			...bestClassName !== null ? { bestClassName } : {},
-			...label !== null ? { label } : {},
-			...plateText !== null ? { plateText } : {},
-			lastSeen,
-			zonesVisited,
-			...fusedIntoTrackId !== null ? { fusedIntoTrackId } : {}
-		}, mediaUrl);
-		if (values.length === 0) {
-			this.ctx.logger.debug("ha-export: track produced no exportable state", {
-				tags: { deviceId },
-				meta: {
-					trackId,
-					bestClassName,
-					phase,
-					fusedIntoTrackId
-				}
-			});
-			return;
+		const exported = this.exported.get(deviceKey);
+		if (exported === void 0) return;
+		const bases = await this.mediaBasesFor(exported.brokerIds, deviceId);
+		let produced = false;
+		for (const brokerId of exported.brokerIds) {
+			const link = this.links.get(brokerId);
+			if (link === void 0) continue;
+			const base = bases.get(brokerId) ?? null;
+			const values = projectTrackLifecycle(deviceKey, {
+				deviceId,
+				trackId,
+				phase,
+				classes,
+				...bestClassName !== null ? { bestClassName } : {},
+				...label !== null ? { label } : {},
+				...plateText !== null ? { plateText } : {},
+				lastSeen,
+				zonesVisited,
+				...fusedIntoTrackId !== null ? { fusedIntoTrackId } : {}
+			}, base === null ? null : this.mintTrackMediaUrl(trackId, deviceId, base));
+			if (values.length === 0) continue;
+			produced = true;
+			for (const value of values) link.client.publishState(value.topic, value.value);
 		}
-		this.push(deviceId, values);
+		if (!produced) this.ctx.logger.debug("ha-export: track produced no exportable state", {
+			tags: { deviceId },
+			meta: {
+				trackId,
+				bestClassName,
+				phase,
+				fusedIntoTrackId
+			}
+		});
 	}
 	onAudioWindow(data) {
 		const deviceId = readNumber(data, "deviceId");
@@ -7844,7 +7908,6 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 			await this.refreshBrokers();
 			const fullResync = this.resync.take(reason);
 			let readsHeld = false;
-			await this.refreshMediaBaseUrl();
 			await this.refreshComponentSupport();
 			const enabled = this.enabledBrokerIds();
 			const devices = await this.ctx.api.deviceManager.listAll.query({});
@@ -9321,28 +9384,41 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 	* cannot open is worse than no image, because it renders as a broken
 	* entity rather than an empty one.
 	*/
-	mintTrackMediaUrl(trackId, deviceId) {
-		if (this.mediaBaseUrl === null || this.mediaSecret.length === 0) return null;
+	mintTrackMediaUrl(trackId, deviceId, baseUrl) {
+		if (this.mediaSecret.length === 0) return null;
 		return buildMediaUrl({
-			baseUrl: this.mediaBaseUrl,
+			baseUrl,
 			routePrefix: MEDIA_ROUTE_PREFIX,
 			id: `${String(deviceId)}:${trackId}`,
 			secret: this.mediaSecret,
 			expMs: Date.now() + MEDIA_URL_TTL_MS
 		});
 	}
-	async refreshMediaBaseUrl() {
-		if (this.config.publicBaseUrl.length > 0) {
-			this.mediaBaseUrl = this.config.publicBaseUrl;
-			return;
-		}
+	/**
+	* Each broker's media base, read per use: the palette's role the broker chose
+	* (`mediaRole:<brokerId>`, `internal` by default). A role that resolves to nothing
+	* is `null` and says so — the image entities then carry no value, which reads as
+	* empty rather than as a broken link.
+	*/
+	async mediaBasesFor(brokerIds, deviceId) {
+		let bases;
 		try {
-			this.mediaBaseUrl = haMediaBaseUrl(await this.ctx.api.localNetwork.getAddresses.query());
+			bases = mediaBasesByBroker(await this.resolveGlobalStore(), brokerIds, await this.ctx.api.localNetwork.getAddresses.query());
 		} catch (err) {
-			this.mediaBaseUrl = null;
-			this.ctx.logger.debug("ha-export: could not resolve a media base URL", { meta: { error: errMsg(err) } });
+			this.ctx.logger.debug("ha-export: could not resolve the media base URLs", {
+				tags: { deviceId },
+				meta: { error: errMsg(err) }
+			});
+			return new Map(brokerIds.map((brokerId) => [brokerId, null]));
+		}
+		for (const brokerId of brokerIds) {
+			if (bases.get(brokerId) !== null) continue;
+			this.ctx.logger.warn("ha-export: the broker media role resolves to no hub address — image entities carry no value until the Network page names one", {
+				tags: { deviceId },
+				meta: { brokerId }
+			});
 		}
-		if (this.mediaBaseUrl === null) this.ctx.logger.warn("ha-export: no reachable hub URL — image entities will carry no value until one is set");
+		return bases;
 	}
 	/**
 	* The cap-level expose/unexpose applies to EVERY enabled broker.
@@ -9396,21 +9472,26 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 					variant: "warning"
 				}]
 			},
-			{
+			...this.config.knownBrokers.length > 0 ? [{
 				id: "ha-export-transport",
 				title: "Connection",
 				titleKey: "provider-homeassistant:globalSettings.s_ha-export-transport.title",
+				description: "The hub address each Home Assistant instance fetches image links from. Internal is the address flagged Internal on the Network page; choose Public endpoint for an instance outside your network.",
 				columns: 1,
-				fields: [{
-					type: "text",
-					key: "publicBaseUrl",
-					label: "Hub URL Home Assistant can reach",
-					labelKey: "provider-homeassistant:globalSettings.s_ha-export-transport.publicBaseUrl.label",
-					description: "Used for the signed image links Home Assistant fetches; leave empty to derive one automatically.",
-					descriptionKey: "provider-homeassistant:globalSettings.s_ha-export-transport.publicBaseUrl.description",
-					default: ""
-				}]
-			},
+				fields: this.config.knownBrokers.map((broker) => ({
+					type: "select",
+					key: mediaRoleKey(broker.id),
+					label: `Image links for ${broker.name}`,
+					options: [{
+						value: "internal",
+						label: "Internal (LAN address)"
+					}, {
+						value: "publicEndpoint",
+						label: "Public endpoint (reachable from outside)"
+					}],
+					default: "internal"
+				}))
+			}] : [],
 			{
 				id: "ha-export-advanced",
 				title: "Advanced",

package/dist/ha-export/ha-export.addon.mjs

@@ -1,4 +1,4 @@
-import { B as consumableKindOf, Et as sendToExportedTarget, K as deviceExportCapability, Kt as isReadingQuantity, Vt as baseUnitOf, Yt as array, _ as PLUG_APPLIANCE_TYPES, bt as runExportedAction, c as COCO_TO_MACRO, d as ConsumableItemSchema, en as object, f as ConsumableStatusSchema, g as MediaPlayerRepeatSchema, gt as pruneDeletedEntities, h as HvacModeSchema, i as AlarmArmModeSchema, in as unknown, j as buildAddonRouteProvider, l as CameraSwitchIdSchema, m as FanDirectionSchema, nn as string, qt as nodePin, r as listHomeAssistantBrokers, s as CAMERA_SWITCH_ORDER, u as ConsumableFormSchema, un as EventCategory, ut as oauthIntegrationCapability, x as addonRoutesCapability, z as consumableFormOf, zt as BaseAddon } from "../ha-broker-source-DRIYmtMd.mjs";
+import { B as consumableKindOf, Bt as BaseAddon, Dt as sendToExportedTarget, Ht as baseUnitOf, Jt as isReadingQuantity, K as deviceExportCapability, Wt as defineAddonMigrations, Yt as nodePin, Zt as array, _ as PLUG_APPLIANCE_TYPES, _t as pruneDeletedEntities, c as COCO_TO_MACRO, d as ConsumableItemSchema, f as ConsumableStatusSchema, fn as EventCategory, g as MediaPlayerRepeatSchema, h as HvacModeSchema, i as AlarmArmModeSchema, in as string, j as buildAddonRouteProvider, l as CameraSwitchIdSchema, m as FanDirectionSchema, nn as object, on as unknown, pt as preconditionOf, r as listHomeAssistantBrokers, s as CAMERA_SWITCH_ORDER, u as ConsumableFormSchema, ut as oauthIntegrationCapability, x as addonRoutesCapability, xt as runExportedAction, z as consumableFormOf } from "../ha-broker-source-iLA_DsW8.mjs";
 import { createHmac, timingSafeEqual } from "node:crypto";
 import "node:zlib";
 import "node:fs";
@@ -3450,6 +3450,10 @@ function controlEntitySpecs(slice, quantity) {
 	}, kindExtra];
 }
 var CAPS_NOT_EXPORTED = [
+	{
+		cap: "do-not-disturb",
+		reason: "A vendor switch of a speaker, provided so far only by an imported Echo: its media player is the entity a home-automation front end needs, and no entity kind has been chosen for the Do Not Disturb switch yet."
+	},
 	{
 		cap: "timed-run",
 		reason: "A hub-side timer for a device that has none: a \"run for N minutes\" command and the deadline of the pending switch-off. The switch or pump it drives is already exported through `switch`, and the deadline is a countdown, not a value an entity can hold."
@@ -4901,6 +4905,49 @@ async function call(slice, capName, make) {
 	}
 	return { ok: true };
 }
+//#endregion
+//#region src/ha-export/migrations/drop-public-base-url.ts
+/**
+* The media base is no longer a setting of this addon (D986 §5): each Home Assistant
+* instance chooses a hub address ROLE (`mediaRole:<brokerId>`) and the address is read from
+* the palette on every use. The `publicBaseUrl` key older versions persisted is deleted.
+* Every other key is left exactly as stored.
+*
+* Idempotent: a store without the key yields an empty plan, which writes nothing.
+*/
+/** The settings scope of this addon (`<addonId>:addon-settings`). */
+var HA_EXPORT_SETTINGS_SCOPE = "homeassistant-export:addon-settings";
+var RETIRED_URL_KEYS = ["publicBaseUrl"];
+async function planDropPublicBaseUrl(ports) {
+	const stored = await ports.readStored();
+	const present = RETIRED_URL_KEYS.filter((key) => key in stored);
+	if (present.length === 0) return { edits: [] };
+	return { edits: [{
+		op: "deleteKeys",
+		scope: HA_EXPORT_SETTINGS_SCOPE,
+		keys: [...present],
+		precondition: preconditionOf(Object.fromEntries(present.map((key) => [key, stored[key]])))
+	}] };
+}
+//#endregion
+//#region src/ha-export/migrations/index.ts
+/** The `homeassistant-export` catalogue (D987): offered to the engine when the addon initialises. */
+var ADDON_MIGRATIONS = [{
+	meta: {
+		id: "homeassistant-export/2026-11-02-drop-public-base-url",
+		owner: "homeassistant-export",
+		level: "addon-state",
+		seq: 1,
+		dependsOn: [],
+		store: "settings",
+		scope: "cluster",
+		onFailure: "tolerate",
+		bodyKind: "plan",
+		description: "Delete the retired publicBaseUrl setting; each instance now chooses a hub address role",
+		fixtureMark: "the reconcile interval the migration does not know"
+	},
+	plan: planDropPublicBaseUrl
+}];
 process.platform, process.env["SystemRoot"];
 /**
 * The ONE derivation of "a signed, expiring URL".
@@ -4980,15 +5027,26 @@ function verifyExpiringUrl(input) {
 * an expired link is refused whether or not its signature is valid, so a leaked
 * URL stops working on its own.
 */
+/** The settings key that carries one broker's media role (per-instance, like `exportTo:`). */
+function mediaRoleKey(brokerId) {
+	return `mediaRole:${brokerId}`;
+}
+/** A broker's chosen role; anything stored that is not a known role is `internal`. */
+function haMediaRoleOf(store, brokerId) {
+	return store[mediaRoleKey(brokerId)] === "publicEndpoint" ? "publicEndpoint" : "internal";
+}
 /**
-* The base a media link is minted on when the operator left the addon's own
-* field empty: the hub's `internal` role (D734) — the address flagged
-* "Internal" on the Network page, else the detected LAN address. Home
-* Assistant is a LAN device pulling from the hub, so never the public
-* endpoint, and never loopback (`null` when nothing qualifies).
+* The base a media link is minted on: the hub's role (D734) — `internal` unless the
+* broker chose `publicEndpoint`. Ranked by `local-network`, never loopback (`null`
+* when the role resolves to nothing): a link Home Assistant cannot open is worse
+* than no image.
 */
-function haMediaBaseUrl(book) {
-	return book.roles.internal.resolved;
+function haMediaBaseUrl(book, role = "internal") {
+	return book.roles[role].resolved;
+}
+/** brokerId → media base, each broker on ITS role. Pure: the caller reads the palette per use. */
+function mediaBasesByBroker(store, brokerIds, book) {
+	return new Map(brokerIds.map((brokerId) => [brokerId, haMediaBaseUrl(book, haMediaRoleOf(store, brokerId))]));
 }
 /** How long a minted link stays valid. Long enough for HA to render it. */
 var MEDIA_URL_TTL_MS = 360 * 60 * 1e3;
@@ -7129,8 +7187,7 @@ var DEFAULT_CONFIG = {
 	exportedEntities: {
 		actions: [],
 		targets: []
-	},
-	publicBaseUrl: ""
+	}
 };
 var HaExportAddon = class extends BaseAddon {
 	links = /* @__PURE__ */ new Map();
@@ -7139,7 +7196,6 @@ var HaExportAddon = class extends BaseAddon {
 	/** numeric deviceId → deviceKey, for the event path. */
 	keyByDeviceId = /* @__PURE__ */ new Map();
 	mediaSecret = "";
-	mediaBaseUrl = null;
 	reconcileTimer = null;
 	reconcileInFlight = false;
 	/** A reason asked for while one was running. Re-run, never dropped. */
@@ -7239,6 +7295,7 @@ var HaExportAddon = class extends BaseAddon {
 		super({ ...DEFAULT_CONFIG });
 	}
 	async onInitialize() {
+		await this.runMigrations(defineAddonMigrations(ADDON_MIGRATIONS, { readStored: async () => this.resolveGlobalStore() }));
 		const secret = this.state("haExportMediaSecret", string(), "");
 		const existing = await secret.get();
 		if (existing.length === 0) {
@@ -7639,32 +7696,39 @@ var HaExportAddon = class extends BaseAddon {
 		const lastSeen = readNumber(data, "lastSeen") ?? Date.now();
 		const zonesVisited = readStringArray(data, "zonesVisited");
 		const fusedIntoTrackId = readString(data, "fusedIntoTrackId");
-		const mediaUrl = this.mintTrackMediaUrl(trackId, deviceId);
-		const values = projectTrackLifecycle(deviceKey, {
-			deviceId,
-			trackId,
-			phase,
-			classes,
-			...bestClassName !== null ? { bestClassName } : {},
-			...label !== null ? { label } : {},
-			...plateText !== null ? { plateText } : {},
-			lastSeen,
-			zonesVisited,
-			...fusedIntoTrackId !== null ? { fusedIntoTrackId } : {}
-		}, mediaUrl);
-		if (values.length === 0) {
-			this.ctx.logger.debug("ha-export: track produced no exportable state", {
-				tags: { deviceId },
-				meta: {
-					trackId,
-					bestClassName,
-					phase,
-					fusedIntoTrackId
-				}
-			});
-			return;
+		const exported = this.exported.get(deviceKey);
+		if (exported === void 0) return;
+		const bases = await this.mediaBasesFor(exported.brokerIds, deviceId);
+		let produced = false;
+		for (const brokerId of exported.brokerIds) {
+			const link = this.links.get(brokerId);
+			if (link === void 0) continue;
+			const base = bases.get(brokerId) ?? null;
+			const values = projectTrackLifecycle(deviceKey, {
+				deviceId,
+				trackId,
+				phase,
+				classes,
+				...bestClassName !== null ? { bestClassName } : {},
+				...label !== null ? { label } : {},
+				...plateText !== null ? { plateText } : {},
+				lastSeen,
+				zonesVisited,
+				...fusedIntoTrackId !== null ? { fusedIntoTrackId } : {}
+			}, base === null ? null : this.mintTrackMediaUrl(trackId, deviceId, base));
+			if (values.length === 0) continue;
+			produced = true;
+			for (const value of values) link.client.publishState(value.topic, value.value);
 		}
-		this.push(deviceId, values);
+		if (!produced) this.ctx.logger.debug("ha-export: track produced no exportable state", {
+			tags: { deviceId },
+			meta: {
+				trackId,
+				bestClassName,
+				phase,
+				fusedIntoTrackId
+			}
+		});
 	}
 	onAudioWindow(data) {
 		const deviceId = readNumber(data, "deviceId");
@@ -7809,7 +7873,6 @@ var HaExportAddon = class extends BaseAddon {
 			await this.refreshBrokers();
 			const fullResync = this.resync.take(reason);
 			let readsHeld = false;
-			await this.refreshMediaBaseUrl();
 			await this.refreshComponentSupport();
 			const enabled = this.enabledBrokerIds();
 			const devices = await this.ctx.api.deviceManager.listAll.query({});
@@ -9286,28 +9349,41 @@ var HaExportAddon = class extends BaseAddon {
 	* cannot open is worse than no image, because it renders as a broken
 	* entity rather than an empty one.
 	*/
-	mintTrackMediaUrl(trackId, deviceId) {
-		if (this.mediaBaseUrl === null || this.mediaSecret.length === 0) return null;
+	mintTrackMediaUrl(trackId, deviceId, baseUrl) {
+		if (this.mediaSecret.length === 0) return null;
 		return buildMediaUrl({
-			baseUrl: this.mediaBaseUrl,
+			baseUrl,
 			routePrefix: MEDIA_ROUTE_PREFIX,
 			id: `${String(deviceId)}:${trackId}`,
 			secret: this.mediaSecret,
 			expMs: Date.now() + MEDIA_URL_TTL_MS
 		});
 	}
-	async refreshMediaBaseUrl() {
-		if (this.config.publicBaseUrl.length > 0) {
-			this.mediaBaseUrl = this.config.publicBaseUrl;
-			return;
-		}
+	/**
+	* Each broker's media base, read per use: the palette's role the broker chose
+	* (`mediaRole:<brokerId>`, `internal` by default). A role that resolves to nothing
+	* is `null` and says so — the image entities then carry no value, which reads as
+	* empty rather than as a broken link.
+	*/
+	async mediaBasesFor(brokerIds, deviceId) {
+		let bases;
 		try {
-			this.mediaBaseUrl = haMediaBaseUrl(await this.ctx.api.localNetwork.getAddresses.query());
+			bases = mediaBasesByBroker(await this.resolveGlobalStore(), brokerIds, await this.ctx.api.localNetwork.getAddresses.query());
 		} catch (err) {
-			this.mediaBaseUrl = null;
-			this.ctx.logger.debug("ha-export: could not resolve a media base URL", { meta: { error: errMsg(err) } });
+			this.ctx.logger.debug("ha-export: could not resolve the media base URLs", {
+				tags: { deviceId },
+				meta: { error: errMsg(err) }
+			});
+			return new Map(brokerIds.map((brokerId) => [brokerId, null]));
+		}
+		for (const brokerId of brokerIds) {
+			if (bases.get(brokerId) !== null) continue;
+			this.ctx.logger.warn("ha-export: the broker media role resolves to no hub address — image entities carry no value until the Network page names one", {
+				tags: { deviceId },
+				meta: { brokerId }
+			});
 		}
-		if (this.mediaBaseUrl === null) this.ctx.logger.warn("ha-export: no reachable hub URL — image entities will carry no value until one is set");
+		return bases;
 	}
 	/**
 	* The cap-level expose/unexpose applies to EVERY enabled broker.
@@ -9361,21 +9437,26 @@ var HaExportAddon = class extends BaseAddon {
 					variant: "warning"
 				}]
 			},
-			{
+			...this.config.knownBrokers.length > 0 ? [{
 				id: "ha-export-transport",
 				title: "Connection",
 				titleKey: "provider-homeassistant:globalSettings.s_ha-export-transport.title",
+				description: "The hub address each Home Assistant instance fetches image links from. Internal is the address flagged Internal on the Network page; choose Public endpoint for an instance outside your network.",
 				columns: 1,
-				fields: [{
-					type: "text",
-					key: "publicBaseUrl",
-					label: "Hub URL Home Assistant can reach",
-					labelKey: "provider-homeassistant:globalSettings.s_ha-export-transport.publicBaseUrl.label",
-					description: "Used for the signed image links Home Assistant fetches; leave empty to derive one automatically.",
-					descriptionKey: "provider-homeassistant:globalSettings.s_ha-export-transport.publicBaseUrl.description",
-					default: ""
-				}]
-			},
+				fields: this.config.knownBrokers.map((broker) => ({
+					type: "select",
+					key: mediaRoleKey(broker.id),
+					label: `Image links for ${broker.name}`,
+					options: [{
+						value: "internal",
+						label: "Internal (LAN address)"
+					}, {
+						value: "publicEndpoint",
+						label: "Public endpoint (reachable from outside)"
+					}],
+					default: "internal"
+				}))
+			}] : [],
 			{
 				id: "ha-export-advanced",
 				title: "Advanced",

package/i18n/en.json

@@ -14,8 +14,6 @@
   "globalSettings.s_ha-export-brokers.title": "Home Assistant instances",
   "globalSettings.s_ha-export-brokers.ha-export___no-brokers.label": "No brokers",
   "globalSettings.s_ha-export-transport.title": "Connection",
-  "globalSettings.s_ha-export-transport.publicBaseUrl.label": "Hub URL Home Assistant can reach",
-  "globalSettings.s_ha-export-transport.publicBaseUrl.description": "Used for the signed image links Home Assistant fetches; leave empty to derive one automatically.",
   "globalSettings.s_ha-export-advanced.title": "Advanced",
   "globalSettings.s_ha-export-advanced.reconcileIntervalSec.label": "Reconcile interval (s)",
   "globalSettings.s_ha-export-advanced.reconcileIntervalSec.description": "Full re-announce and re-push cadence.",

package/i18n/it.json

@@ -14,8 +14,6 @@
   "globalSettings.s_ha-export-brokers.title": "Istanze di Home Assistant",
   "globalSettings.s_ha-export-brokers.ha-export___no-brokers.label": "Nessun broker",
   "globalSettings.s_ha-export-transport.title": "Connessione",
-  "globalSettings.s_ha-export-transport.publicBaseUrl.label": "URL dell'hub raggiungibile da Home Assistant",
-  "globalSettings.s_ha-export-transport.publicBaseUrl.description": "Usato per i link firmati delle immagini che Home Assistant scarica; lascia vuoto per ricavarlo automaticamente.",
   "globalSettings.s_ha-export-advanced.title": "Avanzate",
   "globalSettings.s_ha-export-advanced.reconcileIntervalSec.label": "Intervallo di riconciliazione (s)",
   "globalSettings.s_ha-export-advanced.reconcileIntervalSec.description": "Cadenza di ri-annuncio e ri-invio completo.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-homeassistant",
-  "version": "1.2.646",
+  "version": "1.2.648",
   "description": "Home Assistant device provider addon for CamStack",
   "keywords": [
     "camstack",
@@ -127,7 +127,7 @@
       "description": "Device provider (import) + native entity export (push). Two addons, one bundle, separate processes."
     },
     "requires": {
-      "server": ">=1.2.730"
+      "server": ">=1.2.733"
     }
   },
   "files": [