@camstack/addon-provider-homeassistant 1.2.647 → 1.2.648

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.2.648] - 2026-11-02
+
+### Changed
+
+- Home Assistant export: the Hub URL setting is gone; each Home Assistant instance now chooses whether its image links use the Internal address or the Public endpoint of the Network page.
+
 ## [1.2.647] - 2026-11-02
 
 ### Changed

package/README.md

@@ -23,7 +23,7 @@ Edit these from System, Addons, this addon, Settings (a device's own settings ar
 - Home Assistant broker: Brokers are managed separately
 - Home Assistant connection: Auth mode, HA base URL, Long-lived access token, Supervisor token
 - Home Assistant instances: No brokers
-- Connection: Hub URL Home Assistant can reach
+- Connection: per Home Assistant instance, the hub address role its image links use (Internal, or Public endpoint)
 - Advanced: Reconcile interval (s)
 
 ## Requirements

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_ha_broker_source = require("./ha-broker-source-BFFi4NDH.js");
+const require_ha_broker_source = require("./ha-broker-source-Ba20mhmb.js");
 let node_crypto = require("node:crypto");
 let node_zlib = require("node:zlib");
 //#region src/ha-admin-link.ts

package/dist/addon.mjs

@@ -1,4 +1,4 @@
-import { $ as humiditySensorCapability, $t as number, A as brokerCapability, At as temperatureSensorCapability, Bt as RecordSecretUnavailableError, C as alarmPanelCapability, Ct as runningFromVacuumState, D as bestLocationMatch, Dt as smokeCapability, E as batteryCapability, F as carbonMonoxideCapability, Ft as valveCapability, G as deviceAdoptionCapability, Gt as entryBody, H as controlCapability, Ht as createEvent, I as climateControlCapability, It as vibrationCapability, J as eventEmitterCapability, Jt as _enum, L as colorCapability, Lt as waterHeaterCapability, M as buildDeviceAdminUrl, Mt as tryConvertUnit, N as buttonCapability, Nt as updateCapability, O as binaryCapability, Ot as switchCapability, P as calendarSourceCapability, Pt as vacuumControlCapability, Q as humidifierCapability, Qt as literal, R as connectivityCapability, Rt as weatherCapability, S as airQualitySensorCapability, St as runningFromMediaPlayer, T as automationControlCapability, Tt as scriptRunnerCapability, U as coverCapability, Ut as defineEntryKind, V as contactCapability, Vt as baseUnitOf, W as deviceAdminLinkCapability, Wt as defineRecordKinds, X as floodCapability, Xt as boolean, Y as fanControlCapability, Yt as array, Z as gasCapability, Zt as discriminatedUnion, _t as publicEndpointReaderFrom, a as BaseDevice, an as url, at as motionCapability, b as accessoriesCapability, cn as DeviceType, ct as notifierCapability, dt as parseAdminBase, en as object, et as imageCapability, ft as powerMeterCapability, ht as pressureSensorCapability, in as unknown, it as mediaPlayerCapability, j as buildAddonRouteProvider, jt as tryConvertDelta, k as brightnessCapability, kt as tamperCapability, ln as errMsg, lt as numericSensorCapability, mt as presenceCapability, nn as string, nt as lawnMowerControlCapability, o as BaseDeviceProvider, on as DeviceFeature, ot as normalizeUnit, p as EnumSensorDateTimeFormatSchema, pt as prepareNotification, q as enumSensorCapability, rn as union, rt as lockControlCapability, sn as DeviceRole, st as notificationOutputCapability, t as HA_BROKER_KIND, tn as record, tt as ingestReading, un as EventCategory, v as RUNNING_STATE_COLD, vt as quantityFromUnit, w as ambientLightSensorCapability, wt as runningStateCapability, x as addonRoutesCapability, xt as runningFromLawnMower, y as TargetSchema, yt as resolveAttachmentUrls } from "./ha-broker-source-B6wqfEUz.mjs";
+import { $ as humiditySensorCapability, $t as discriminatedUnion, A as brokerCapability, At as tamperCapability, C as alarmPanelCapability, Ct as runningFromMediaPlayer, D as bestLocationMatch, E as batteryCapability, Et as scriptRunnerCapability, F as carbonMonoxideCapability, Ft as vacuumControlCapability, G as deviceAdoptionCapability, Gt as defineEntryKind, H as controlCapability, Ht as baseUnitOf, I as climateControlCapability, It as valveCapability, J as eventEmitterCapability, Kt as defineRecordKinds, L as colorCapability, Lt as vibrationCapability, M as buildDeviceAdminUrl, Mt as tryConvertDelta, N as buttonCapability, Nt as tryConvertUnit, O as binaryCapability, Ot as smokeCapability, P as calendarSourceCapability, Pt as updateCapability, Q as humidifierCapability, Qt as boolean, R as connectivityCapability, Rt as waterHeaterCapability, S as airQualitySensorCapability, St as runningFromLawnMower, T as automationControlCapability, Tt as runningStateCapability, U as coverCapability, Ut as createEvent, V as contactCapability, Vt as RecordSecretUnavailableError, W as deviceAdminLinkCapability, X as floodCapability, Xt as _enum, Y as fanControlCapability, Z as gasCapability, Zt as array, a as BaseDevice, an as union, at as motionCapability, b as accessoriesCapability, bt as resolveAttachmentUrls, cn as DeviceFeature, ct as notifierCapability, dn as errMsg, dt as parseAdminBase, en as literal, et as imageCapability, fn as EventCategory, ft as powerMeterCapability, gt as pressureSensorCapability, ht as presenceCapability, in as string, it as mediaPlayerCapability, j as buildAddonRouteProvider, jt as temperatureSensorCapability, k as brightnessCapability, kt as switchCapability, ln as DeviceRole, lt as numericSensorCapability, mt as prepareNotification, nn as object, nt as lawnMowerControlCapability, o as BaseDeviceProvider, on as unknown, ot as normalizeUnit, p as EnumSensorDateTimeFormatSchema, q as enumSensorCapability, qt as entryBody, rn as record, rt as lockControlCapability, sn as url, st as notificationOutputCapability, t as HA_BROKER_KIND, tn as number, tt as ingestReading, un as DeviceType, v as RUNNING_STATE_COLD, vt as publicEndpointReaderFrom, w as ambientLightSensorCapability, wt as runningFromVacuumState, x as addonRoutesCapability, y as TargetSchema, yt as quantityFromUnit, zt as weatherCapability } from "./ha-broker-source-iLA_DsW8.mjs";
 import { randomUUID } from "node:crypto";
 import { brotliCompressSync, deflateSync, gzipSync } from "node:zlib";
 //#region src/ha-admin-link.ts

package/dist/{ha-broker-source-BFFi4NDH.js → ha-broker-source-Ba20mhmb.js}

@@ -5972,7 +5972,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-B-vp7x15.mjs
+//#region ../types/dist/sleep-Bei295Bz.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -6488,6 +6488,53 @@ function emitReadiness(bus, params) {
 		ts
 	}));
 }
+/** Why a catalogue entry is not a runnable body of its declared kind. */
+var AddonMigrationDefinitionError = class extends Error {
+	id;
+	constructor(id, message) {
+		super(`${id}: ${message}`);
+		this.id = id;
+		this.name = "AddonMigrationDefinitionError";
+	}
+};
+/**
+* Bind a catalogue to the addon's ports. Throws {@link AddonMigrationDefinitionError} when
+* an entry's `bodyKind` does not match the body it carries, or is `sql` (a hub-only
+* body). A throwing body never escapes `execute`: it is reported as a failed result.
+*/
+function defineAddonMigrations(catalogue, ports) {
+	return catalogue.map((entry) => {
+		const { meta } = entry;
+		if ("plan" in entry) {
+			if (meta.bodyKind !== "plan") throw new AddonMigrationDefinitionError(meta.id, `carries a plan body but declares "${meta.bodyKind}"`);
+			return {
+				meta,
+				execute: () => guarded(async () => ({
+					kind: "plan",
+					plan: await entry.plan(ports)
+				}))
+			};
+		}
+		if (meta.bodyKind !== "procedure") throw new AddonMigrationDefinitionError(meta.id, `carries a procedure body but declares "${meta.bodyKind}"`);
+		return {
+			meta,
+			execute: () => guarded(async () => ({
+				kind: "procedure",
+				result: await entry.procedure(ports)
+			}))
+		};
+	});
+}
+async function guarded(work) {
+	try {
+		return await work();
+	} catch (err) {
+		return {
+			kind: "failed",
+			error: errMsg(err)
+		};
+	}
+}
 var NOT_RUN = {
 	declared: false,
 	snapshot: null,
@@ -14124,6 +14171,16 @@ var MigrationPlanSchema = object({ edits: array(discriminatedUnion("op", [
 		precondition: PreconditionSchema
 	})
 ])) });
+/** `JSON.stringify` with object keys sorted, so equal values spell the same. */
+function canonicalJson(value) {
+	if (Array.isArray(value)) return `[${value.map((item) => canonicalJson(item)).join(",")}]`;
+	if (typeof value === "object" && value !== null) return `{${Object.entries(value).filter(([, item]) => item !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, item]) => `${JSON.stringify(key)}:${canonicalJson(item)}`).join(",")}}`;
+	return JSON.stringify(value) ?? "null";
+}
+/** The precondition string for a value a plan read (`null` when it read nothing). */
+function preconditionOf(value) {
+	return canonicalJson(value ?? null);
+}
 /**
 * What a `procedure` body reports. `already-done` means the rerun observed the
 * work finished (a crash between the work and the ledger row, or a manual fix)
@@ -16072,8 +16129,18 @@ var LogChannelDescriptorSchema = object({
 	* the operator narrows to one camera, sees nothing, and concludes the code
 	* path was never taken.
 	*/
-	perDevice: boolean()
-});
+	perDevice: boolean(),
+	/**
+	* What the channel is FOR, so the UI can list the channels an addon offers.
+	*
+	* - `diagnostic` (the default): a per-component diagnostic armed from the
+	*   Levels page, emitted at its declared level.
+	* - `debug`: a `debug.<channel>` dump watched live for a short window
+	*   (`ctx.debug`). Always per-device, and its lines are denied by the log
+	*   ring unless somebody is watching that device.
+	*/
+	kind: _enum(["diagnostic", "debug"]).default("diagnostic")
+}).refine((d) => d.kind !== "debug" || d.name.startsWith("debug.") && d.perDevice, { message: "a debug channel is named debug.<channel> and is per-device" });
 /**
 * An armed window over one channel, as the document hands it to a mirror.
 *
@@ -51615,6 +51682,45 @@ var deviceProviderCapability = {
 	}
 };
 /**
+* What the passive listener of `local-network` saw on the wire, before any
+* provider classified it. Device-manager turns an observation into the hits
+* of the providers whose declared discovery modes it matches.
+*/
+var DiscoveryObservationSchema = discriminatedUnion("kind", [object({
+	kind: literal("mdns"),
+	/** Normalised DNS-SD service type, e.g. `_esphomelib._tcp`. */
+	serviceType: string(),
+	instance: string(),
+	host: string(),
+	/** The A record address when the announcement carried one. */
+	address: string().nullable(),
+	port: number().int(),
+	txt: record(string(), string())
+}), object({
+	kind: literal("ssdp"),
+	/** Sender address of the datagram. */
+	host: string(),
+	port: number().int(),
+	/** `NT` of a NOTIFY, `ST` of a search response. */
+	target: string(),
+	headers: record(string(), string())
+})]);
+object({
+	addonId: string(),
+	candidate: DiscoveryCandidateSchema,
+	firstSeenAt: number(),
+	lastSeenAt: number(),
+	dismissed: boolean()
+});
+var DiscoveryProposalSchema = object({
+	id: string(),
+	addonId: string(),
+	candidate: DiscoveryCandidateSchema,
+	firstSeenAt: number(),
+	lastSeenAt: number(),
+	dismissed: boolean()
+});
+/**
 * Device Manager capability — hub-side singleton that unifies device persistence,
 * live registry access, and all management operations into a single tRPC surface.
 *
@@ -52343,6 +52449,19 @@ method(object({
 }), object({ candidates: array(DiscoveryCandidateSchema).readonly() }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({}), object({ proposals: array(DiscoveryProposalSchema).readonly() }), { auth: "admin" }), method(object({ id: string() }), object({ dismissed: boolean() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ observations: array(DiscoveryObservationSchema).max(512) }), object({ proposed: number().int() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({}), object({
+	providers: number().int(),
+	proposed: number().int()
+}), {
+	kind: "mutation",
+	auth: "admin",
+	timeoutMs: 12e4
 }), method(object({ addonId: string() }), object({ deviceType: _enum(DeviceType).nullable() }), { auth: "admin" }), method(object({ addonId: string() }), unknown(), { auth: "admin" }), method(object({
 	deviceId: number(),
 	key: string(),
@@ -76690,6 +76809,40 @@ var LoggingSettingsStateSchema = object({
 	opsLogRetentionDays: number().int().min(0),
 	persisted: boolean()
 });
+/**
+* Debug WATCH — a short, per-device window over `debug.<channel>` lines.
+*
+* `start` opens (or re-arms) a 10 minute window; `rearm` extends a LIVE one
+* and never revives a lapsed one; `stop` closes it; `list` only reads. No
+* chain of re-arms outlives 60 minutes from the first start. The hub holds the
+* watches in memory and pushes the interest to every node, so a watch lapses
+* by itself and survives nothing — a restart is a stop.
+*/
+var DebugWatchInputSchema = object({
+	action: _enum([
+		"list",
+		"start",
+		"rearm",
+		"stop"
+	]),
+	/** Full channel names, `debug.<channel>`, each declared with `kind: 'debug'`. */
+	channels: array(string().min(1)).readonly().default([]),
+	/** Numeric device ids. Required (non-empty) for `start`. */
+	deviceIds: array(number().int()).readonly().default([])
+});
+var DebugWatchStateSchema = object({
+	channel: string(),
+	deviceIds: array(number().int()).readonly(),
+	startedAtMs: number(),
+	untilMs: number(),
+	capAtMs: number()
+});
+var DebugWatchResultSchema = object({
+	nowMs: number(),
+	watches: array(DebugWatchStateSchema).readonly(),
+	/** Channels a `rearm` found already lapsed: nothing was revived. */
+	lapsed: array(string()).readonly()
+});
 method(_void(), SystemInfoSchema), method(_void(), HealthStatusSchema), method(_void(), FeatureManifestSchema), method(_void(), array(NetworkAddressSchema).readonly()), method(_void(), unknown().nullable(), { auth: "admin" }), method(record(string(), unknown()), _null(), {
 	kind: "mutation",
 	auth: "admin"
@@ -76705,6 +76858,9 @@ method(_void(), SystemInfoSchema), method(_void(), HealthStatusSchema), method(_
 }), method(_void(), RequestCensusStatusSchema, { auth: "admin" }), method(_void(), array(ReportedLoadContributionSchema).readonly(), { auth: "admin" }), method(_void(), array(ReportedFailureContributionSchema).readonly(), { auth: "admin" }), method(GetLoggingSettingsInputSchema, LoggingSettingsStateSchema, { auth: "admin" }), method(SetLoggingSettingsInputSchema, LoggingSettingsStateSchema, {
 	kind: "mutation",
 	auth: "admin"
+}), method(DebugWatchInputSchema, DebugWatchResultSchema, {
+	kind: "mutation",
+	auth: "admin"
 });
 /**
 * Tamper / case-open detection sensor. Drives Home Assistant
@@ -83814,6 +83970,13 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
+	"deviceManager.dismissDiscoveryProposal": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"deviceManager.enable": {
 		capName: "device-manager",
 		capScope: "system",
@@ -83996,6 +84159,13 @@ Object.freeze({
 		access: "view",
 		role: "viewer"
 	},
+	"deviceManager.listDiscoveryProposals": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
 	"deviceManager.listLocationDescriptions": {
 		capName: "device-manager",
 		capScope: "system",
@@ -84150,6 +84320,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"deviceManager.reportDiscoveryObservations": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"deviceManager.runDeviceAction": {
 		capName: "device-manager",
 		capScope: "system",
@@ -84157,6 +84334,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"deviceManager.runDiscoverySweep": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"deviceManager.setChildLayout": {
 		capName: "device-manager",
 		capScope: "system",
@@ -90744,6 +90928,13 @@ Object.freeze({
 		access: "create",
 		role: "viewer"
 	},
+	"system.debugWatch": {
+		capName: "system",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"system.detectSiteLocation": {
 		capName: "system",
 		capScope: "system",
@@ -94673,6 +94864,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"system.debugWatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
 	"tamper.getStatus": [{
 		name: "deviceId",
 		form: "single",
@@ -97157,6 +97353,12 @@ Object.defineProperty(exports, "createEvent", {
 		return createEvent;
 	}
 });
+Object.defineProperty(exports, "defineAddonMigrations", {
+	enumerable: true,
+	get: function() {
+		return defineAddonMigrations;
+	}
+});
 Object.defineProperty(exports, "defineEntryKind", {
 	enumerable: true,
 	get: function() {
@@ -97361,6 +97563,12 @@ Object.defineProperty(exports, "powerMeterCapability", {
 		return powerMeterCapability;
 	}
 });
+Object.defineProperty(exports, "preconditionOf", {
+	enumerable: true,
+	get: function() {
+		return preconditionOf;
+	}
+});
 Object.defineProperty(exports, "prepareNotification", {
 	enumerable: true,
 	get: function() {

package/dist/{ha-broker-source-B6wqfEUz.mjs → ha-broker-source-iLA_DsW8.mjs}

@@ -5971,7 +5971,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-B-vp7x15.mjs
+//#region ../types/dist/sleep-Bei295Bz.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -6487,6 +6487,53 @@ function emitReadiness(bus, params) {
 		ts
 	}));
 }
+/** Why a catalogue entry is not a runnable body of its declared kind. */
+var AddonMigrationDefinitionError = class extends Error {
+	id;
+	constructor(id, message) {
+		super(`${id}: ${message}`);
+		this.id = id;
+		this.name = "AddonMigrationDefinitionError";
+	}
+};
+/**
+* Bind a catalogue to the addon's ports. Throws {@link AddonMigrationDefinitionError} when
+* an entry's `bodyKind` does not match the body it carries, or is `sql` (a hub-only
+* body). A throwing body never escapes `execute`: it is reported as a failed result.
+*/
+function defineAddonMigrations(catalogue, ports) {
+	return catalogue.map((entry) => {
+		const { meta } = entry;
+		if ("plan" in entry) {
+			if (meta.bodyKind !== "plan") throw new AddonMigrationDefinitionError(meta.id, `carries a plan body but declares "${meta.bodyKind}"`);
+			return {
+				meta,
+				execute: () => guarded(async () => ({
+					kind: "plan",
+					plan: await entry.plan(ports)
+				}))
+			};
+		}
+		if (meta.bodyKind !== "procedure") throw new AddonMigrationDefinitionError(meta.id, `carries a procedure body but declares "${meta.bodyKind}"`);
+		return {
+			meta,
+			execute: () => guarded(async () => ({
+				kind: "procedure",
+				result: await entry.procedure(ports)
+			}))
+		};
+	});
+}
+async function guarded(work) {
+	try {
+		return await work();
+	} catch (err) {
+		return {
+			kind: "failed",
+			error: errMsg(err)
+		};
+	}
+}
 var NOT_RUN = {
 	declared: false,
 	snapshot: null,
@@ -14123,6 +14170,16 @@ var MigrationPlanSchema = object({ edits: array(discriminatedUnion("op", [
 		precondition: PreconditionSchema
 	})
 ])) });
+/** `JSON.stringify` with object keys sorted, so equal values spell the same. */
+function canonicalJson(value) {
+	if (Array.isArray(value)) return `[${value.map((item) => canonicalJson(item)).join(",")}]`;
+	if (typeof value === "object" && value !== null) return `{${Object.entries(value).filter(([, item]) => item !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, item]) => `${JSON.stringify(key)}:${canonicalJson(item)}`).join(",")}}`;
+	return JSON.stringify(value) ?? "null";
+}
+/** The precondition string for a value a plan read (`null` when it read nothing). */
+function preconditionOf(value) {
+	return canonicalJson(value ?? null);
+}
 /**
 * What a `procedure` body reports. `already-done` means the rerun observed the
 * work finished (a crash between the work and the ledger row, or a manual fix)
@@ -16071,8 +16128,18 @@ var LogChannelDescriptorSchema = object({
 	* the operator narrows to one camera, sees nothing, and concludes the code
 	* path was never taken.
 	*/
-	perDevice: boolean()
-});
+	perDevice: boolean(),
+	/**
+	* What the channel is FOR, so the UI can list the channels an addon offers.
+	*
+	* - `diagnostic` (the default): a per-component diagnostic armed from the
+	*   Levels page, emitted at its declared level.
+	* - `debug`: a `debug.<channel>` dump watched live for a short window
+	*   (`ctx.debug`). Always per-device, and its lines are denied by the log
+	*   ring unless somebody is watching that device.
+	*/
+	kind: _enum(["diagnostic", "debug"]).default("diagnostic")
+}).refine((d) => d.kind !== "debug" || d.name.startsWith("debug.") && d.perDevice, { message: "a debug channel is named debug.<channel> and is per-device" });
 /**
 * An armed window over one channel, as the document hands it to a mirror.
 *
@@ -51614,6 +51681,45 @@ var deviceProviderCapability = {
 	}
 };
 /**
+* What the passive listener of `local-network` saw on the wire, before any
+* provider classified it. Device-manager turns an observation into the hits
+* of the providers whose declared discovery modes it matches.
+*/
+var DiscoveryObservationSchema = discriminatedUnion("kind", [object({
+	kind: literal("mdns"),
+	/** Normalised DNS-SD service type, e.g. `_esphomelib._tcp`. */
+	serviceType: string(),
+	instance: string(),
+	host: string(),
+	/** The A record address when the announcement carried one. */
+	address: string().nullable(),
+	port: number().int(),
+	txt: record(string(), string())
+}), object({
+	kind: literal("ssdp"),
+	/** Sender address of the datagram. */
+	host: string(),
+	port: number().int(),
+	/** `NT` of a NOTIFY, `ST` of a search response. */
+	target: string(),
+	headers: record(string(), string())
+})]);
+object({
+	addonId: string(),
+	candidate: DiscoveryCandidateSchema,
+	firstSeenAt: number(),
+	lastSeenAt: number(),
+	dismissed: boolean()
+});
+var DiscoveryProposalSchema = object({
+	id: string(),
+	addonId: string(),
+	candidate: DiscoveryCandidateSchema,
+	firstSeenAt: number(),
+	lastSeenAt: number(),
+	dismissed: boolean()
+});
+/**
 * Device Manager capability — hub-side singleton that unifies device persistence,
 * live registry access, and all management operations into a single tRPC surface.
 *
@@ -52342,6 +52448,19 @@ method(object({
 }), object({ candidates: array(DiscoveryCandidateSchema).readonly() }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({}), object({ proposals: array(DiscoveryProposalSchema).readonly() }), { auth: "admin" }), method(object({ id: string() }), object({ dismissed: boolean() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ observations: array(DiscoveryObservationSchema).max(512) }), object({ proposed: number().int() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({}), object({
+	providers: number().int(),
+	proposed: number().int()
+}), {
+	kind: "mutation",
+	auth: "admin",
+	timeoutMs: 12e4
 }), method(object({ addonId: string() }), object({ deviceType: _enum(DeviceType).nullable() }), { auth: "admin" }), method(object({ addonId: string() }), unknown(), { auth: "admin" }), method(object({
 	deviceId: number(),
 	key: string(),
@@ -76689,6 +76808,40 @@ var LoggingSettingsStateSchema = object({
 	opsLogRetentionDays: number().int().min(0),
 	persisted: boolean()
 });
+/**
+* Debug WATCH — a short, per-device window over `debug.<channel>` lines.
+*
+* `start` opens (or re-arms) a 10 minute window; `rearm` extends a LIVE one
+* and never revives a lapsed one; `stop` closes it; `list` only reads. No
+* chain of re-arms outlives 60 minutes from the first start. The hub holds the
+* watches in memory and pushes the interest to every node, so a watch lapses
+* by itself and survives nothing — a restart is a stop.
+*/
+var DebugWatchInputSchema = object({
+	action: _enum([
+		"list",
+		"start",
+		"rearm",
+		"stop"
+	]),
+	/** Full channel names, `debug.<channel>`, each declared with `kind: 'debug'`. */
+	channels: array(string().min(1)).readonly().default([]),
+	/** Numeric device ids. Required (non-empty) for `start`. */
+	deviceIds: array(number().int()).readonly().default([])
+});
+var DebugWatchStateSchema = object({
+	channel: string(),
+	deviceIds: array(number().int()).readonly(),
+	startedAtMs: number(),
+	untilMs: number(),
+	capAtMs: number()
+});
+var DebugWatchResultSchema = object({
+	nowMs: number(),
+	watches: array(DebugWatchStateSchema).readonly(),
+	/** Channels a `rearm` found already lapsed: nothing was revived. */
+	lapsed: array(string()).readonly()
+});
 method(_void(), SystemInfoSchema), method(_void(), HealthStatusSchema), method(_void(), FeatureManifestSchema), method(_void(), array(NetworkAddressSchema).readonly()), method(_void(), unknown().nullable(), { auth: "admin" }), method(record(string(), unknown()), _null(), {
 	kind: "mutation",
 	auth: "admin"
@@ -76704,6 +76857,9 @@ method(_void(), SystemInfoSchema), method(_void(), HealthStatusSchema), method(_
 }), method(_void(), RequestCensusStatusSchema, { auth: "admin" }), method(_void(), array(ReportedLoadContributionSchema).readonly(), { auth: "admin" }), method(_void(), array(ReportedFailureContributionSchema).readonly(), { auth: "admin" }), method(GetLoggingSettingsInputSchema, LoggingSettingsStateSchema, { auth: "admin" }), method(SetLoggingSettingsInputSchema, LoggingSettingsStateSchema, {
 	kind: "mutation",
 	auth: "admin"
+}), method(DebugWatchInputSchema, DebugWatchResultSchema, {
+	kind: "mutation",
+	auth: "admin"
 });
 /**
 * Tamper / case-open detection sensor. Drives Home Assistant
@@ -83813,6 +83969,13 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
+	"deviceManager.dismissDiscoveryProposal": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"deviceManager.enable": {
 		capName: "device-manager",
 		capScope: "system",
@@ -83995,6 +84158,13 @@ Object.freeze({
 		access: "view",
 		role: "viewer"
 	},
+	"deviceManager.listDiscoveryProposals": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
 	"deviceManager.listLocationDescriptions": {
 		capName: "device-manager",
 		capScope: "system",
@@ -84149,6 +84319,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"deviceManager.reportDiscoveryObservations": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"deviceManager.runDeviceAction": {
 		capName: "device-manager",
 		capScope: "system",
@@ -84156,6 +84333,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"deviceManager.runDiscoverySweep": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"deviceManager.setChildLayout": {
 		capName: "device-manager",
 		capScope: "system",
@@ -90743,6 +90927,13 @@ Object.freeze({
 		access: "create",
 		role: "viewer"
 	},
+	"system.debugWatch": {
+		capName: "system",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"system.detectSiteLocation": {
 		capName: "system",
 		capScope: "system",
@@ -94672,6 +94863,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"system.debugWatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
 	"tamper.getStatus": [{
 		name: "deviceId",
 		form: "single",
@@ -96838,4 +97034,4 @@ async function listHomeAssistantBrokers(query) {
 	return (await query({})).filter((broker) => broker.kind === HA_BROKER_KIND);
 }
 //#endregion
-export { humiditySensorCapability as $, number as $t, brokerCapability as A, temperatureSensorCapability as At, consumableKindOf as B, RecordSecretUnavailableError as Bt, alarmPanelCapability as C, runningFromVacuumState as Ct, bestLocationMatch as D, smokeCapability as Dt, batteryCapability as E, sendToExportedTarget as Et, carbonMonoxideCapability as F, valveCapability as Ft, deviceAdoptionCapability as G, entryBody as Gt, controlCapability as H, createEvent as Ht, climateControlCapability as I, vibrationCapability as It, eventEmitterCapability as J, _enum as Jt, deviceExportCapability as K, isReadingQuantity as Kt, colorCapability as L, waterHeaterCapability as Lt, buildDeviceAdminUrl as M, tryConvertUnit as Mt, buttonCapability as N, updateCapability as Nt, binaryCapability as O, switchCapability as Ot, calendarSourceCapability as P, vacuumControlCapability as Pt, humidifierCapability as Q, literal as Qt, connectivityCapability as R, weatherCapability as Rt, airQualitySensorCapability as S, runningFromMediaPlayer as St, automationControlCapability as T, scriptRunnerCapability as Tt, coverCapability as U, defineEntryKind as Ut, contactCapability as V, baseUnitOf as Vt, deviceAdminLinkCapability as W, defineRecordKinds as Wt, floodCapability as X, boolean as Xt, fanControlCapability as Y, array as Yt, gasCapability as Z, discriminatedUnion as Zt, PLUG_APPLIANCE_TYPES as _, publicEndpointReaderFrom as _t, BaseDevice as a, url as an, motionCapability as at, accessoriesCapability as b, runExportedAction as bt, COCO_TO_MACRO as c, DeviceType as cn, notifierCapability as ct, ConsumableItemSchema as d, parseAdminBase as dt, object as en, imageCapability as et, ConsumableStatusSchema as f, powerMeterCapability as ft, MediaPlayerRepeatSchema as g, pruneDeletedEntities as gt, HvacModeSchema as h, pressureSensorCapability as ht, AlarmArmModeSchema as i, unknown as in, mediaPlayerCapability as it, buildAddonRouteProvider as j, tryConvertDelta as jt, brightnessCapability as k, tamperCapability as kt, CameraSwitchIdSchema as l, errMsg as ln, numericSensorCapability as lt, FanDirectionSchema as m, presenceCapability as mt, HA_PROVIDER_ADDON_ID as n, string as nn, lawnMowerControlCapability as nt, BaseDeviceProvider as o, DeviceFeature as on, normalizeUnit as ot, EnumSensorDateTimeFormatSchema as p, prepareNotification as pt, enumSensorCapability as q, nodePin as qt, listHomeAssistantBrokers as r, union as rn, lockControlCapability as rt, CAMERA_SWITCH_ORDER as s, DeviceRole as sn, notificationOutputCapability as st, HA_BROKER_KIND as t, record as tn, ingestReading as tt, ConsumableFormSchema as u, EventCategory as un, oauthIntegrationCapability as ut, RUNNING_STATE_COLD as v, quantityFromUnit as vt, ambientLightSensorCapability as w, runningStateCapability as wt, addonRoutesCapability as x, runningFromLawnMower as xt, TargetSchema as y, resolveAttachmentUrls as yt, consumableFormOf as z, BaseAddon as zt };
+export { humiditySensorCapability as $, discriminatedUnion as $t, brokerCapability as A, tamperCapability as At, consumableKindOf as B, BaseAddon as Bt, alarmPanelCapability as C, runningFromMediaPlayer as Ct, bestLocationMatch as D, sendToExportedTarget as Dt, batteryCapability as E, scriptRunnerCapability as Et, carbonMonoxideCapability as F, vacuumControlCapability as Ft, deviceAdoptionCapability as G, defineEntryKind as Gt, controlCapability as H, baseUnitOf as Ht, climateControlCapability as I, valveCapability as It, eventEmitterCapability as J, isReadingQuantity as Jt, deviceExportCapability as K, defineRecordKinds as Kt, colorCapability as L, vibrationCapability as Lt, buildDeviceAdminUrl as M, tryConvertDelta as Mt, buttonCapability as N, tryConvertUnit as Nt, binaryCapability as O, smokeCapability as Ot, calendarSourceCapability as P, updateCapability as Pt, humidifierCapability as Q, boolean as Qt, connectivityCapability as R, waterHeaterCapability as Rt, airQualitySensorCapability as S, runningFromLawnMower as St, automationControlCapability as T, runningStateCapability as Tt, coverCapability as U, createEvent as Ut, contactCapability as V, RecordSecretUnavailableError as Vt, deviceAdminLinkCapability as W, defineAddonMigrations as Wt, floodCapability as X, _enum as Xt, fanControlCapability as Y, nodePin as Yt, gasCapability as Z, array as Zt, PLUG_APPLIANCE_TYPES as _, pruneDeletedEntities as _t, BaseDevice as a, union as an, motionCapability as at, accessoriesCapability as b, resolveAttachmentUrls as bt, COCO_TO_MACRO as c, DeviceFeature as cn, notifierCapability as ct, ConsumableItemSchema as d, errMsg as dn, parseAdminBase as dt, literal as en, imageCapability as et, ConsumableStatusSchema as f, EventCategory as fn, powerMeterCapability as ft, MediaPlayerRepeatSchema as g, pressureSensorCapability as gt, HvacModeSchema as h, presenceCapability as ht, AlarmArmModeSchema as i, string as in, mediaPlayerCapability as it, buildAddonRouteProvider as j, temperatureSensorCapability as jt, brightnessCapability as k, switchCapability as kt, CameraSwitchIdSchema as l, DeviceRole as ln, numericSensorCapability as lt, FanDirectionSchema as m, prepareNotification as mt, HA_PROVIDER_ADDON_ID as n, object as nn, lawnMowerControlCapability as nt, BaseDeviceProvider as o, unknown as on, normalizeUnit as ot, EnumSensorDateTimeFormatSchema as p, preconditionOf as pt, enumSensorCapability as q, entryBody as qt, listHomeAssistantBrokers as r, record as rn, lockControlCapability as rt, CAMERA_SWITCH_ORDER as s, url as sn, notificationOutputCapability as st, HA_BROKER_KIND as t, number as tn, ingestReading as tt, ConsumableFormSchema as u, DeviceType as un, oauthIntegrationCapability as ut, RUNNING_STATE_COLD as v, publicEndpointReaderFrom as vt, ambientLightSensorCapability as w, runningFromVacuumState as wt, addonRoutesCapability as x, runExportedAction as xt, TargetSchema as y, quantityFromUnit as yt, consumableFormOf as z, weatherCapability as zt };

package/dist/ha-export/ha-export.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_ha_broker_source = require("../ha-broker-source-BFFi4NDH.js");
+const require_ha_broker_source = require("../ha-broker-source-Ba20mhmb.js");
 let node_crypto = require("node:crypto");
 require("node:zlib");
 let node_fs = require("node:fs");
@@ -4940,6 +4940,49 @@ async function call(slice, capName, make) {
 	}
 	return { ok: true };
 }
+//#endregion
+//#region src/ha-export/migrations/drop-public-base-url.ts
+/**
+* The media base is no longer a setting of this addon (D986 §5): each Home Assistant
+* instance chooses a hub address ROLE (`mediaRole:<brokerId>`) and the address is read from
+* the palette on every use. The `publicBaseUrl` key older versions persisted is deleted.
+* Every other key is left exactly as stored.
+*
+* Idempotent: a store without the key yields an empty plan, which writes nothing.
+*/
+/** The settings scope of this addon (`<addonId>:addon-settings`). */
+var HA_EXPORT_SETTINGS_SCOPE = "homeassistant-export:addon-settings";
+var RETIRED_URL_KEYS = ["publicBaseUrl"];
+async function planDropPublicBaseUrl(ports) {
+	const stored = await ports.readStored();
+	const present = RETIRED_URL_KEYS.filter((key) => key in stored);
+	if (present.length === 0) return { edits: [] };
+	return { edits: [{
+		op: "deleteKeys",
+		scope: HA_EXPORT_SETTINGS_SCOPE,
+		keys: [...present],
+		precondition: require_ha_broker_source.preconditionOf(Object.fromEntries(present.map((key) => [key, stored[key]])))
+	}] };
+}
+//#endregion
+//#region src/ha-export/migrations/index.ts
+/** The `homeassistant-export` catalogue (D987): offered to the engine when the addon initialises. */
+var ADDON_MIGRATIONS = [{
+	meta: {
+		id: "homeassistant-export/2026-11-02-drop-public-base-url",
+		owner: "homeassistant-export",
+		level: "addon-state",
+		seq: 1,
+		dependsOn: [],
+		store: "settings",
+		scope: "cluster",
+		onFailure: "tolerate",
+		bodyKind: "plan",
+		description: "Delete the retired publicBaseUrl setting; each instance now chooses a hub address role",
+		fixtureMark: "the reconcile interval the migration does not know"
+	},
+	plan: planDropPublicBaseUrl
+}];
 process.platform, process.env["SystemRoot"];
 /**
 * The ONE derivation of "a signed, expiring URL".
@@ -5019,15 +5062,26 @@ function verifyExpiringUrl(input) {
 * an expired link is refused whether or not its signature is valid, so a leaked
 * URL stops working on its own.
 */
+/** The settings key that carries one broker's media role (per-instance, like `exportTo:`). */
+function mediaRoleKey(brokerId) {
+	return `mediaRole:${brokerId}`;
+}
+/** A broker's chosen role; anything stored that is not a known role is `internal`. */
+function haMediaRoleOf(store, brokerId) {
+	return store[mediaRoleKey(brokerId)] === "publicEndpoint" ? "publicEndpoint" : "internal";
+}
 /**
-* The base a media link is minted on when the operator left the addon's own
-* field empty: the hub's `internal` role (D734) — the address flagged
-* "Internal" on the Network page, else the detected LAN address. Home
-* Assistant is a LAN device pulling from the hub, so never the public
-* endpoint, and never loopback (`null` when nothing qualifies).
+* The base a media link is minted on: the hub's role (D734) — `internal` unless the
+* broker chose `publicEndpoint`. Ranked by `local-network`, never loopback (`null`
+* when the role resolves to nothing): a link Home Assistant cannot open is worse
+* than no image.
 */
-function haMediaBaseUrl(book) {
-	return book.roles.internal.resolved;
+function haMediaBaseUrl(book, role = "internal") {
+	return book.roles[role].resolved;
+}
+/** brokerId → media base, each broker on ITS role. Pure: the caller reads the palette per use. */
+function mediaBasesByBroker(store, brokerIds, book) {
+	return new Map(brokerIds.map((brokerId) => [brokerId, haMediaBaseUrl(book, haMediaRoleOf(store, brokerId))]));
 }
 /** How long a minted link stays valid. Long enough for HA to render it. */
 var MEDIA_URL_TTL_MS = 360 * 60 * 1e3;
@@ -7168,8 +7222,7 @@ var DEFAULT_CONFIG = {
 	exportedEntities: {
 		actions: [],
 		targets: []
-	},
-	publicBaseUrl: ""
+	}
 };
 var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 	links = /* @__PURE__ */ new Map();
@@ -7178,7 +7231,6 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 	/** numeric deviceId → deviceKey, for the event path. */
 	keyByDeviceId = /* @__PURE__ */ new Map();
 	mediaSecret = "";
-	mediaBaseUrl = null;
 	reconcileTimer = null;
 	reconcileInFlight = false;
 	/** A reason asked for while one was running. Re-run, never dropped. */
@@ -7278,6 +7330,7 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 		super({ ...DEFAULT_CONFIG });
 	}
 	async onInitialize() {
+		await this.runMigrations(require_ha_broker_source.defineAddonMigrations(ADDON_MIGRATIONS, { readStored: async () => this.resolveGlobalStore() }));
 		const secret = this.state("haExportMediaSecret", require_ha_broker_source.string(), "");
 		const existing = await secret.get();
 		if (existing.length === 0) {
@@ -7678,32 +7731,39 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 		const lastSeen = readNumber(data, "lastSeen") ?? Date.now();
 		const zonesVisited = readStringArray(data, "zonesVisited");
 		const fusedIntoTrackId = readString(data, "fusedIntoTrackId");
-		const mediaUrl = this.mintTrackMediaUrl(trackId, deviceId);
-		const values = projectTrackLifecycle(deviceKey, {
-			deviceId,
-			trackId,
-			phase,
-			classes,
-			...bestClassName !== null ? { bestClassName } : {},
-			...label !== null ? { label } : {},
-			...plateText !== null ? { plateText } : {},
-			lastSeen,
-			zonesVisited,
-			...fusedIntoTrackId !== null ? { fusedIntoTrackId } : {}
-		}, mediaUrl);
-		if (values.length === 0) {
-			this.ctx.logger.debug("ha-export: track produced no exportable state", {
-				tags: { deviceId },
-				meta: {
-					trackId,
-					bestClassName,
-					phase,
-					fusedIntoTrackId
-				}
-			});
-			return;
+		const exported = this.exported.get(deviceKey);
+		if (exported === void 0) return;
+		const bases = await this.mediaBasesFor(exported.brokerIds, deviceId);
+		let produced = false;
+		for (const brokerId of exported.brokerIds) {
+			const link = this.links.get(brokerId);
+			if (link === void 0) continue;
+			const base = bases.get(brokerId) ?? null;
+			const values = projectTrackLifecycle(deviceKey, {
+				deviceId,
+				trackId,
+				phase,
+				classes,
+				...bestClassName !== null ? { bestClassName } : {},
+				...label !== null ? { label } : {},
+				...plateText !== null ? { plateText } : {},
+				lastSeen,
+				zonesVisited,
+				...fusedIntoTrackId !== null ? { fusedIntoTrackId } : {}
+			}, base === null ? null : this.mintTrackMediaUrl(trackId, deviceId, base));
+			if (values.length === 0) continue;
+			produced = true;
+			for (const value of values) link.client.publishState(value.topic, value.value);
 		}
-		this.push(deviceId, values);
+		if (!produced) this.ctx.logger.debug("ha-export: track produced no exportable state", {
+			tags: { deviceId },
+			meta: {
+				trackId,
+				bestClassName,
+				phase,
+				fusedIntoTrackId
+			}
+		});
 	}
 	onAudioWindow(data) {
 		const deviceId = readNumber(data, "deviceId");
@@ -7848,7 +7908,6 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 			await this.refreshBrokers();
 			const fullResync = this.resync.take(reason);
 			let readsHeld = false;
-			await this.refreshMediaBaseUrl();
 			await this.refreshComponentSupport();
 			const enabled = this.enabledBrokerIds();
 			const devices = await this.ctx.api.deviceManager.listAll.query({});
@@ -9325,28 +9384,41 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 	* cannot open is worse than no image, because it renders as a broken
 	* entity rather than an empty one.
 	*/
-	mintTrackMediaUrl(trackId, deviceId) {
-		if (this.mediaBaseUrl === null || this.mediaSecret.length === 0) return null;
+	mintTrackMediaUrl(trackId, deviceId, baseUrl) {
+		if (this.mediaSecret.length === 0) return null;
 		return buildMediaUrl({
-			baseUrl: this.mediaBaseUrl,
+			baseUrl,
 			routePrefix: MEDIA_ROUTE_PREFIX,
 			id: `${String(deviceId)}:${trackId}`,
 			secret: this.mediaSecret,
 			expMs: Date.now() + MEDIA_URL_TTL_MS
 		});
 	}
-	async refreshMediaBaseUrl() {
-		if (this.config.publicBaseUrl.length > 0) {
-			this.mediaBaseUrl = this.config.publicBaseUrl;
-			return;
-		}
+	/**
+	* Each broker's media base, read per use: the palette's role the broker chose
+	* (`mediaRole:<brokerId>`, `internal` by default). A role that resolves to nothing
+	* is `null` and says so — the image entities then carry no value, which reads as
+	* empty rather than as a broken link.
+	*/
+	async mediaBasesFor(brokerIds, deviceId) {
+		let bases;
 		try {
-			this.mediaBaseUrl = haMediaBaseUrl(await this.ctx.api.localNetwork.getAddresses.query());
+			bases = mediaBasesByBroker(await this.resolveGlobalStore(), brokerIds, await this.ctx.api.localNetwork.getAddresses.query());
 		} catch (err) {
-			this.mediaBaseUrl = null;
-			this.ctx.logger.debug("ha-export: could not resolve a media base URL", { meta: { error: errMsg(err) } });
+			this.ctx.logger.debug("ha-export: could not resolve the media base URLs", {
+				tags: { deviceId },
+				meta: { error: errMsg(err) }
+			});
+			return new Map(brokerIds.map((brokerId) => [brokerId, null]));
+		}
+		for (const brokerId of brokerIds) {
+			if (bases.get(brokerId) !== null) continue;
+			this.ctx.logger.warn("ha-export: the broker media role resolves to no hub address — image entities carry no value until the Network page names one", {
+				tags: { deviceId },
+				meta: { brokerId }
+			});
 		}
-		if (this.mediaBaseUrl === null) this.ctx.logger.warn("ha-export: no reachable hub URL — image entities will carry no value until one is set");
+		return bases;
 	}
 	/**
 	* The cap-level expose/unexpose applies to EVERY enabled broker.
@@ -9400,21 +9472,26 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 					variant: "warning"
 				}]
 			},
-			{
+			...this.config.knownBrokers.length > 0 ? [{
 				id: "ha-export-transport",
 				title: "Connection",
 				titleKey: "provider-homeassistant:globalSettings.s_ha-export-transport.title",
+				description: "The hub address each Home Assistant instance fetches image links from. Internal is the address flagged Internal on the Network page; choose Public endpoint for an instance outside your network.",
 				columns: 1,
-				fields: [{
-					type: "text",
-					key: "publicBaseUrl",
-					label: "Hub URL Home Assistant can reach",
-					labelKey: "provider-homeassistant:globalSettings.s_ha-export-transport.publicBaseUrl.label",
-					description: "Used for the signed image links Home Assistant fetches; leave empty to derive one automatically.",
-					descriptionKey: "provider-homeassistant:globalSettings.s_ha-export-transport.publicBaseUrl.description",
-					default: ""
-				}]
-			},
+				fields: this.config.knownBrokers.map((broker) => ({
+					type: "select",
+					key: mediaRoleKey(broker.id),
+					label: `Image links for ${broker.name}`,
+					options: [{
+						value: "internal",
+						label: "Internal (LAN address)"
+					}, {
+						value: "publicEndpoint",
+						label: "Public endpoint (reachable from outside)"
+					}],
+					default: "internal"
+				}))
+			}] : [],
 			{
 				id: "ha-export-advanced",
 				title: "Advanced",

package/dist/ha-export/ha-export.addon.mjs

@@ -1,4 +1,4 @@
-import { B as consumableKindOf, Et as sendToExportedTarget, K as deviceExportCapability, Kt as isReadingQuantity, Vt as baseUnitOf, Yt as array, _ as PLUG_APPLIANCE_TYPES, bt as runExportedAction, c as COCO_TO_MACRO, d as ConsumableItemSchema, en as object, f as ConsumableStatusSchema, g as MediaPlayerRepeatSchema, gt as pruneDeletedEntities, h as HvacModeSchema, i as AlarmArmModeSchema, in as unknown, j as buildAddonRouteProvider, l as CameraSwitchIdSchema, m as FanDirectionSchema, nn as string, qt as nodePin, r as listHomeAssistantBrokers, s as CAMERA_SWITCH_ORDER, u as ConsumableFormSchema, un as EventCategory, ut as oauthIntegrationCapability, x as addonRoutesCapability, z as consumableFormOf, zt as BaseAddon } from "../ha-broker-source-B6wqfEUz.mjs";
+import { B as consumableKindOf, Bt as BaseAddon, Dt as sendToExportedTarget, Ht as baseUnitOf, Jt as isReadingQuantity, K as deviceExportCapability, Wt as defineAddonMigrations, Yt as nodePin, Zt as array, _ as PLUG_APPLIANCE_TYPES, _t as pruneDeletedEntities, c as COCO_TO_MACRO, d as ConsumableItemSchema, f as ConsumableStatusSchema, fn as EventCategory, g as MediaPlayerRepeatSchema, h as HvacModeSchema, i as AlarmArmModeSchema, in as string, j as buildAddonRouteProvider, l as CameraSwitchIdSchema, m as FanDirectionSchema, nn as object, on as unknown, pt as preconditionOf, r as listHomeAssistantBrokers, s as CAMERA_SWITCH_ORDER, u as ConsumableFormSchema, ut as oauthIntegrationCapability, x as addonRoutesCapability, xt as runExportedAction, z as consumableFormOf } from "../ha-broker-source-iLA_DsW8.mjs";
 import { createHmac, timingSafeEqual } from "node:crypto";
 import "node:zlib";
 import "node:fs";
@@ -4905,6 +4905,49 @@ async function call(slice, capName, make) {
 	}
 	return { ok: true };
 }
+//#endregion
+//#region src/ha-export/migrations/drop-public-base-url.ts
+/**
+* The media base is no longer a setting of this addon (D986 §5): each Home Assistant
+* instance chooses a hub address ROLE (`mediaRole:<brokerId>`) and the address is read from
+* the palette on every use. The `publicBaseUrl` key older versions persisted is deleted.
+* Every other key is left exactly as stored.
+*
+* Idempotent: a store without the key yields an empty plan, which writes nothing.
+*/
+/** The settings scope of this addon (`<addonId>:addon-settings`). */
+var HA_EXPORT_SETTINGS_SCOPE = "homeassistant-export:addon-settings";
+var RETIRED_URL_KEYS = ["publicBaseUrl"];
+async function planDropPublicBaseUrl(ports) {
+	const stored = await ports.readStored();
+	const present = RETIRED_URL_KEYS.filter((key) => key in stored);
+	if (present.length === 0) return { edits: [] };
+	return { edits: [{
+		op: "deleteKeys",
+		scope: HA_EXPORT_SETTINGS_SCOPE,
+		keys: [...present],
+		precondition: preconditionOf(Object.fromEntries(present.map((key) => [key, stored[key]])))
+	}] };
+}
+//#endregion
+//#region src/ha-export/migrations/index.ts
+/** The `homeassistant-export` catalogue (D987): offered to the engine when the addon initialises. */
+var ADDON_MIGRATIONS = [{
+	meta: {
+		id: "homeassistant-export/2026-11-02-drop-public-base-url",
+		owner: "homeassistant-export",
+		level: "addon-state",
+		seq: 1,
+		dependsOn: [],
+		store: "settings",
+		scope: "cluster",
+		onFailure: "tolerate",
+		bodyKind: "plan",
+		description: "Delete the retired publicBaseUrl setting; each instance now chooses a hub address role",
+		fixtureMark: "the reconcile interval the migration does not know"
+	},
+	plan: planDropPublicBaseUrl
+}];
 process.platform, process.env["SystemRoot"];
 /**
 * The ONE derivation of "a signed, expiring URL".
@@ -4984,15 +5027,26 @@ function verifyExpiringUrl(input) {
 * an expired link is refused whether or not its signature is valid, so a leaked
 * URL stops working on its own.
 */
+/** The settings key that carries one broker's media role (per-instance, like `exportTo:`). */
+function mediaRoleKey(brokerId) {
+	return `mediaRole:${brokerId}`;
+}
+/** A broker's chosen role; anything stored that is not a known role is `internal`. */
+function haMediaRoleOf(store, brokerId) {
+	return store[mediaRoleKey(brokerId)] === "publicEndpoint" ? "publicEndpoint" : "internal";
+}
 /**
-* The base a media link is minted on when the operator left the addon's own
-* field empty: the hub's `internal` role (D734) — the address flagged
-* "Internal" on the Network page, else the detected LAN address. Home
-* Assistant is a LAN device pulling from the hub, so never the public
-* endpoint, and never loopback (`null` when nothing qualifies).
+* The base a media link is minted on: the hub's role (D734) — `internal` unless the
+* broker chose `publicEndpoint`. Ranked by `local-network`, never loopback (`null`
+* when the role resolves to nothing): a link Home Assistant cannot open is worse
+* than no image.
 */
-function haMediaBaseUrl(book) {
-	return book.roles.internal.resolved;
+function haMediaBaseUrl(book, role = "internal") {
+	return book.roles[role].resolved;
+}
+/** brokerId → media base, each broker on ITS role. Pure: the caller reads the palette per use. */
+function mediaBasesByBroker(store, brokerIds, book) {
+	return new Map(brokerIds.map((brokerId) => [brokerId, haMediaBaseUrl(book, haMediaRoleOf(store, brokerId))]));
 }
 /** How long a minted link stays valid. Long enough for HA to render it. */
 var MEDIA_URL_TTL_MS = 360 * 60 * 1e3;
@@ -7133,8 +7187,7 @@ var DEFAULT_CONFIG = {
 	exportedEntities: {
 		actions: [],
 		targets: []
-	},
-	publicBaseUrl: ""
+	}
 };
 var HaExportAddon = class extends BaseAddon {
 	links = /* @__PURE__ */ new Map();
@@ -7143,7 +7196,6 @@ var HaExportAddon = class extends BaseAddon {
 	/** numeric deviceId → deviceKey, for the event path. */
 	keyByDeviceId = /* @__PURE__ */ new Map();
 	mediaSecret = "";
-	mediaBaseUrl = null;
 	reconcileTimer = null;
 	reconcileInFlight = false;
 	/** A reason asked for while one was running. Re-run, never dropped. */
@@ -7243,6 +7295,7 @@ var HaExportAddon = class extends BaseAddon {
 		super({ ...DEFAULT_CONFIG });
 	}
 	async onInitialize() {
+		await this.runMigrations(defineAddonMigrations(ADDON_MIGRATIONS, { readStored: async () => this.resolveGlobalStore() }));
 		const secret = this.state("haExportMediaSecret", string(), "");
 		const existing = await secret.get();
 		if (existing.length === 0) {
@@ -7643,32 +7696,39 @@ var HaExportAddon = class extends BaseAddon {
 		const lastSeen = readNumber(data, "lastSeen") ?? Date.now();
 		const zonesVisited = readStringArray(data, "zonesVisited");
 		const fusedIntoTrackId = readString(data, "fusedIntoTrackId");
-		const mediaUrl = this.mintTrackMediaUrl(trackId, deviceId);
-		const values = projectTrackLifecycle(deviceKey, {
-			deviceId,
-			trackId,
-			phase,
-			classes,
-			...bestClassName !== null ? { bestClassName } : {},
-			...label !== null ? { label } : {},
-			...plateText !== null ? { plateText } : {},
-			lastSeen,
-			zonesVisited,
-			...fusedIntoTrackId !== null ? { fusedIntoTrackId } : {}
-		}, mediaUrl);
-		if (values.length === 0) {
-			this.ctx.logger.debug("ha-export: track produced no exportable state", {
-				tags: { deviceId },
-				meta: {
-					trackId,
-					bestClassName,
-					phase,
-					fusedIntoTrackId
-				}
-			});
-			return;
+		const exported = this.exported.get(deviceKey);
+		if (exported === void 0) return;
+		const bases = await this.mediaBasesFor(exported.brokerIds, deviceId);
+		let produced = false;
+		for (const brokerId of exported.brokerIds) {
+			const link = this.links.get(brokerId);
+			if (link === void 0) continue;
+			const base = bases.get(brokerId) ?? null;
+			const values = projectTrackLifecycle(deviceKey, {
+				deviceId,
+				trackId,
+				phase,
+				classes,
+				...bestClassName !== null ? { bestClassName } : {},
+				...label !== null ? { label } : {},
+				...plateText !== null ? { plateText } : {},
+				lastSeen,
+				zonesVisited,
+				...fusedIntoTrackId !== null ? { fusedIntoTrackId } : {}
+			}, base === null ? null : this.mintTrackMediaUrl(trackId, deviceId, base));
+			if (values.length === 0) continue;
+			produced = true;
+			for (const value of values) link.client.publishState(value.topic, value.value);
 		}
-		this.push(deviceId, values);
+		if (!produced) this.ctx.logger.debug("ha-export: track produced no exportable state", {
+			tags: { deviceId },
+			meta: {
+				trackId,
+				bestClassName,
+				phase,
+				fusedIntoTrackId
+			}
+		});
 	}
 	onAudioWindow(data) {
 		const deviceId = readNumber(data, "deviceId");
@@ -7813,7 +7873,6 @@ var HaExportAddon = class extends BaseAddon {
 			await this.refreshBrokers();
 			const fullResync = this.resync.take(reason);
 			let readsHeld = false;
-			await this.refreshMediaBaseUrl();
 			await this.refreshComponentSupport();
 			const enabled = this.enabledBrokerIds();
 			const devices = await this.ctx.api.deviceManager.listAll.query({});
@@ -9290,28 +9349,41 @@ var HaExportAddon = class extends BaseAddon {
 	* cannot open is worse than no image, because it renders as a broken
 	* entity rather than an empty one.
 	*/
-	mintTrackMediaUrl(trackId, deviceId) {
-		if (this.mediaBaseUrl === null || this.mediaSecret.length === 0) return null;
+	mintTrackMediaUrl(trackId, deviceId, baseUrl) {
+		if (this.mediaSecret.length === 0) return null;
 		return buildMediaUrl({
-			baseUrl: this.mediaBaseUrl,
+			baseUrl,
 			routePrefix: MEDIA_ROUTE_PREFIX,
 			id: `${String(deviceId)}:${trackId}`,
 			secret: this.mediaSecret,
 			expMs: Date.now() + MEDIA_URL_TTL_MS
 		});
 	}
-	async refreshMediaBaseUrl() {
-		if (this.config.publicBaseUrl.length > 0) {
-			this.mediaBaseUrl = this.config.publicBaseUrl;
-			return;
-		}
+	/**
+	* Each broker's media base, read per use: the palette's role the broker chose
+	* (`mediaRole:<brokerId>`, `internal` by default). A role that resolves to nothing
+	* is `null` and says so — the image entities then carry no value, which reads as
+	* empty rather than as a broken link.
+	*/
+	async mediaBasesFor(brokerIds, deviceId) {
+		let bases;
 		try {
-			this.mediaBaseUrl = haMediaBaseUrl(await this.ctx.api.localNetwork.getAddresses.query());
+			bases = mediaBasesByBroker(await this.resolveGlobalStore(), brokerIds, await this.ctx.api.localNetwork.getAddresses.query());
 		} catch (err) {
-			this.mediaBaseUrl = null;
-			this.ctx.logger.debug("ha-export: could not resolve a media base URL", { meta: { error: errMsg(err) } });
+			this.ctx.logger.debug("ha-export: could not resolve the media base URLs", {
+				tags: { deviceId },
+				meta: { error: errMsg(err) }
+			});
+			return new Map(brokerIds.map((brokerId) => [brokerId, null]));
+		}
+		for (const brokerId of brokerIds) {
+			if (bases.get(brokerId) !== null) continue;
+			this.ctx.logger.warn("ha-export: the broker media role resolves to no hub address — image entities carry no value until the Network page names one", {
+				tags: { deviceId },
+				meta: { brokerId }
+			});
 		}
-		if (this.mediaBaseUrl === null) this.ctx.logger.warn("ha-export: no reachable hub URL — image entities will carry no value until one is set");
+		return bases;
 	}
 	/**
 	* The cap-level expose/unexpose applies to EVERY enabled broker.
@@ -9365,21 +9437,26 @@ var HaExportAddon = class extends BaseAddon {
 					variant: "warning"
 				}]
 			},
-			{
+			...this.config.knownBrokers.length > 0 ? [{
 				id: "ha-export-transport",
 				title: "Connection",
 				titleKey: "provider-homeassistant:globalSettings.s_ha-export-transport.title",
+				description: "The hub address each Home Assistant instance fetches image links from. Internal is the address flagged Internal on the Network page; choose Public endpoint for an instance outside your network.",
 				columns: 1,
-				fields: [{
-					type: "text",
-					key: "publicBaseUrl",
-					label: "Hub URL Home Assistant can reach",
-					labelKey: "provider-homeassistant:globalSettings.s_ha-export-transport.publicBaseUrl.label",
-					description: "Used for the signed image links Home Assistant fetches; leave empty to derive one automatically.",
-					descriptionKey: "provider-homeassistant:globalSettings.s_ha-export-transport.publicBaseUrl.description",
-					default: ""
-				}]
-			},
+				fields: this.config.knownBrokers.map((broker) => ({
+					type: "select",
+					key: mediaRoleKey(broker.id),
+					label: `Image links for ${broker.name}`,
+					options: [{
+						value: "internal",
+						label: "Internal (LAN address)"
+					}, {
+						value: "publicEndpoint",
+						label: "Public endpoint (reachable from outside)"
+					}],
+					default: "internal"
+				}))
+			}] : [],
 			{
 				id: "ha-export-advanced",
 				title: "Advanced",

package/i18n/en.json

@@ -14,8 +14,6 @@
   "globalSettings.s_ha-export-brokers.title": "Home Assistant instances",
   "globalSettings.s_ha-export-brokers.ha-export___no-brokers.label": "No brokers",
   "globalSettings.s_ha-export-transport.title": "Connection",
-  "globalSettings.s_ha-export-transport.publicBaseUrl.label": "Hub URL Home Assistant can reach",
-  "globalSettings.s_ha-export-transport.publicBaseUrl.description": "Used for the signed image links Home Assistant fetches; leave empty to derive one automatically.",
   "globalSettings.s_ha-export-advanced.title": "Advanced",
   "globalSettings.s_ha-export-advanced.reconcileIntervalSec.label": "Reconcile interval (s)",
   "globalSettings.s_ha-export-advanced.reconcileIntervalSec.description": "Full re-announce and re-push cadence.",

package/i18n/it.json

@@ -14,8 +14,6 @@
   "globalSettings.s_ha-export-brokers.title": "Istanze di Home Assistant",
   "globalSettings.s_ha-export-brokers.ha-export___no-brokers.label": "Nessun broker",
   "globalSettings.s_ha-export-transport.title": "Connessione",
-  "globalSettings.s_ha-export-transport.publicBaseUrl.label": "URL dell'hub raggiungibile da Home Assistant",
-  "globalSettings.s_ha-export-transport.publicBaseUrl.description": "Usato per i link firmati delle immagini che Home Assistant scarica; lascia vuoto per ricavarlo automaticamente.",
   "globalSettings.s_ha-export-advanced.title": "Avanzate",
   "globalSettings.s_ha-export-advanced.reconcileIntervalSec.label": "Intervallo di riconciliazione (s)",
   "globalSettings.s_ha-export-advanced.reconcileIntervalSec.description": "Cadenza di ri-annuncio e ri-invio completo.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-homeassistant",
-  "version": "1.2.647",
+  "version": "1.2.648",
   "description": "Home Assistant device provider addon for CamStack",
   "keywords": [
     "camstack",
@@ -127,7 +127,7 @@
       "description": "Device provider (import) + native entity export (push). Two addons, one bundle, separate processes."
     },
     "requires": {
-      "server": ">=1.2.731"
+      "server": ">=1.2.733"
     }
   },
   "files": [