@camstack/addon-provider-homeassistant 1.2.648 → 1.2.649

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.2.649] - 2026-11-02
+
+### Changed
+
+- The retired media base URL setting is now removed from the settings table where it is actually stored
+
 ## [1.2.648] - 2026-11-02
 
 ### Changed

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_ha_broker_source = require("./ha-broker-source-Ba20mhmb.js");
+const require_ha_broker_source = require("./ha-broker-source-CE3nHkyW.js");
 let node_crypto = require("node:crypto");
 let node_zlib = require("node:zlib");
 //#region src/ha-admin-link.ts

package/dist/addon.mjs

@@ -1,4 +1,4 @@
-import { $ as humiditySensorCapability, $t as discriminatedUnion, A as brokerCapability, At as tamperCapability, C as alarmPanelCapability, Ct as runningFromMediaPlayer, D as bestLocationMatch, E as batteryCapability, Et as scriptRunnerCapability, F as carbonMonoxideCapability, Ft as vacuumControlCapability, G as deviceAdoptionCapability, Gt as defineEntryKind, H as controlCapability, Ht as baseUnitOf, I as climateControlCapability, It as valveCapability, J as eventEmitterCapability, Kt as defineRecordKinds, L as colorCapability, Lt as vibrationCapability, M as buildDeviceAdminUrl, Mt as tryConvertDelta, N as buttonCapability, Nt as tryConvertUnit, O as binaryCapability, Ot as smokeCapability, P as calendarSourceCapability, Pt as updateCapability, Q as humidifierCapability, Qt as boolean, R as connectivityCapability, Rt as waterHeaterCapability, S as airQualitySensorCapability, St as runningFromLawnMower, T as automationControlCapability, Tt as runningStateCapability, U as coverCapability, Ut as createEvent, V as contactCapability, Vt as RecordSecretUnavailableError, W as deviceAdminLinkCapability, X as floodCapability, Xt as _enum, Y as fanControlCapability, Z as gasCapability, Zt as array, a as BaseDevice, an as union, at as motionCapability, b as accessoriesCapability, bt as resolveAttachmentUrls, cn as DeviceFeature, ct as notifierCapability, dn as errMsg, dt as parseAdminBase, en as literal, et as imageCapability, fn as EventCategory, ft as powerMeterCapability, gt as pressureSensorCapability, ht as presenceCapability, in as string, it as mediaPlayerCapability, j as buildAddonRouteProvider, jt as temperatureSensorCapability, k as brightnessCapability, kt as switchCapability, ln as DeviceRole, lt as numericSensorCapability, mt as prepareNotification, nn as object, nt as lawnMowerControlCapability, o as BaseDeviceProvider, on as unknown, ot as normalizeUnit, p as EnumSensorDateTimeFormatSchema, q as enumSensorCapability, qt as entryBody, rn as record, rt as lockControlCapability, sn as url, st as notificationOutputCapability, t as HA_BROKER_KIND, tn as number, tt as ingestReading, un as DeviceType, v as RUNNING_STATE_COLD, vt as publicEndpointReaderFrom, w as ambientLightSensorCapability, wt as runningFromVacuumState, x as addonRoutesCapability, y as TargetSchema, yt as quantityFromUnit, zt as weatherCapability } from "./ha-broker-source-iLA_DsW8.mjs";
+import { $ as humiditySensorCapability, $t as discriminatedUnion, A as brokerCapability, At as tamperCapability, C as alarmPanelCapability, Ct as runningFromMediaPlayer, D as bestLocationMatch, E as batteryCapability, Et as scriptRunnerCapability, F as carbonMonoxideCapability, Ft as vacuumControlCapability, G as deviceAdoptionCapability, Gt as defineEntryKind, H as controlCapability, Ht as baseUnitOf, I as climateControlCapability, It as valveCapability, J as eventEmitterCapability, Kt as defineRecordKinds, L as colorCapability, Lt as vibrationCapability, M as buildDeviceAdminUrl, Mt as tryConvertDelta, N as buttonCapability, Nt as tryConvertUnit, O as binaryCapability, Ot as smokeCapability, P as calendarSourceCapability, Pt as updateCapability, Q as humidifierCapability, Qt as boolean, R as connectivityCapability, Rt as waterHeaterCapability, S as airQualitySensorCapability, St as runningFromLawnMower, T as automationControlCapability, Tt as runningStateCapability, U as coverCapability, Ut as createEvent, V as contactCapability, Vt as RecordSecretUnavailableError, W as deviceAdminLinkCapability, X as floodCapability, Xt as _enum, Y as fanControlCapability, Z as gasCapability, Zt as array, a as BaseDevice, an as union, at as motionCapability, b as accessoriesCapability, bt as resolveAttachmentUrls, cn as DeviceFeature, ct as notifierCapability, dn as errMsg, dt as parseAdminBase, en as literal, et as imageCapability, fn as EventCategory, ft as powerMeterCapability, gt as pressureSensorCapability, ht as presenceCapability, in as string, it as mediaPlayerCapability, j as buildAddonRouteProvider, jt as temperatureSensorCapability, k as brightnessCapability, kt as switchCapability, ln as DeviceRole, lt as numericSensorCapability, mt as prepareNotification, nn as object, nt as lawnMowerControlCapability, o as BaseDeviceProvider, on as unknown, ot as normalizeUnit, p as EnumSensorDateTimeFormatSchema, q as enumSensorCapability, qt as entryBody, rn as record, rt as lockControlCapability, sn as url, st as notificationOutputCapability, t as HA_BROKER_KIND, tn as number, tt as ingestReading, un as DeviceType, v as RUNNING_STATE_COLD, vt as publicEndpointReaderFrom, w as ambientLightSensorCapability, wt as runningFromVacuumState, x as addonRoutesCapability, y as TargetSchema, yt as quantityFromUnit, zt as weatherCapability } from "./ha-broker-source-D3FBA6uG.mjs";
 import { randomUUID } from "node:crypto";
 import { brotliCompressSync, deflateSync, gzipSync } from "node:zlib";
 //#region src/ha-admin-link.ts

package/dist/{ha-broker-source-Ba20mhmb.js → ha-broker-source-CE3nHkyW.js}

@@ -5972,7 +5972,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-Bei295Bz.mjs
+//#region ../types/dist/sleep-CdJHPm-k.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -6089,7 +6089,7 @@ function isKeychainStoredField(field) {
 var SECRET_CLEAR = { $secretClear: true };
 /** The `'***'` token D634 redaction writes for non-admins. */
 var LEGACY_DEVICE_REDACTION = "***";
-function isRecord$6(value) {
+function isRecord$7(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function makeSecretMarker(ref) {
@@ -6100,12 +6100,12 @@ function makeSecretMarker(ref) {
 }
 /** A stored marker: an object whose `$secret` is a non-empty string. */
 function isSecretMarker(value) {
-	if (!isRecord$6(value)) return false;
+	if (!isRecord$7(value)) return false;
 	const ref = value["$secret"];
 	return typeof ref === "string" && ref.length > 0;
 }
 function isSecretClear(value) {
-	return isRecord$6(value) && value["$secretClear"] === true;
+	return isRecord$7(value) && value["$secretClear"] === true;
 }
 /**
 * The UI view of a stored secret field value: a marker becomes "set", inline
@@ -6858,7 +6858,7 @@ var KeychainWriteRefusedError = class extends Error {
 	}
 };
 var KEEP = { kind: "keep" };
-function isRecord$5(value) {
+function isRecord$6(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function defaultMintId() {
@@ -6871,7 +6871,7 @@ function collectSecretMarkerRefs(value, out = []) {
 		return out;
 	}
 	if (Array.isArray(value)) for (const item of value) collectSecretMarkerRefs(item, out);
-	else if (isRecord$5(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
+	else if (isRecord$6(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
 	return out;
 }
 async function storedValueEquals(secrets, marker, candidate) {
@@ -6926,7 +6926,7 @@ function rowId(row, idKey) {
 	return null;
 }
 async function writeArray(ctx, node, incoming, stored, fieldPath) {
-	const storedRows = Array.isArray(stored) ? stored.filter(isRecord$5) : [];
+	const storedRows = Array.isArray(stored) ? stored.filter(isRecord$6) : [];
 	if (!Array.isArray(incoming)) {
 		ctx.deletes.push(...collectSecretMarkerRefs(storedRows));
 		return {
@@ -6942,7 +6942,7 @@ async function writeArray(ctx, node, incoming, stored, fieldPath) {
 	const kept = /* @__PURE__ */ new Set();
 	const rows = [];
 	for (const row of incoming) {
-		if (!isRecord$5(row)) {
+		if (!isRecord$6(row)) {
 			rows.push(row);
 			continue;
 		}
@@ -6967,7 +6967,7 @@ async function writeNode(ctx, node, incoming, stored, fieldPath) {
 		case "leaf": return writeLeaf(ctx, incoming, stored, fieldPath);
 		case "array": return writeArray(ctx, node, incoming, stored, fieldPath);
 		case "object": {
-			if (!isRecord$5(incoming)) {
+			if (!isRecord$6(incoming)) {
 				if (incoming === void 0) return KEEP;
 				ctx.deletes.push(...collectSecretMarkerRefs(stored));
 				return {
@@ -6975,7 +6975,7 @@ async function writeNode(ctx, node, incoming, stored, fieldPath) {
 					value: incoming
 				};
 			}
-			const storedObj = isRecord$5(stored) ? stored : {};
+			const storedObj = isRecord$6(stored) ? stored : {};
 			return {
 				kind: "value",
 				value: await writeMembers(ctx, node.children, incoming, storedObj, (m) => `${fieldPath}.${m}`)
@@ -7098,7 +7098,7 @@ async function resolveSecretMarkers(value, secrets, options = {}) {
 				value: items
 			};
 		}
-		if (isRecord$5(v)) {
+		if (isRecord$6(v)) {
 			const out = {};
 			for (const [k, child] of Object.entries(v)) {
 				const s = substitute(child);
@@ -7130,7 +7130,7 @@ var SecretOverwriteRefusedError = class extends Error {
 		this.name = "SecretOverwriteRefusedError";
 	}
 };
-function isRecord$4(value) {
+function isRecord$5(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function resolvedValue(pass, marker) {
@@ -7159,7 +7159,7 @@ function inArray(pass, incoming, stored) {
 	return incoming.map((item, index) => {
 		const twin = stored[index];
 		if (isSecretMarker(twin)) return typeof item === "string" && item === resolvedValue(pass, twin) ? twin : item;
-		if (isRecord$4(item) && isRecord$4(twin)) return inArrayRow(pass, item, twin);
+		if (isRecord$5(item) && isRecord$5(twin)) return inArrayRow(pass, item, twin);
 		if (Array.isArray(item) && Array.isArray(twin)) return inArray(pass, item, twin);
 		return item;
 	});
@@ -7170,7 +7170,7 @@ function inArrayRow(pass, incoming, stored) {
 		const twin = stored[key];
 		if (isSecretMarker(twin)) {
 			if (typeof value === "string" && value === resolvedValue(pass, twin)) out[key] = twin;
-		} else if (isRecord$4(value) && isRecord$4(twin)) out[key] = inArrayRow(pass, value, twin);
+		} else if (isRecord$5(value) && isRecord$5(twin)) out[key] = inArrayRow(pass, value, twin);
 		else if (Array.isArray(value) && Array.isArray(twin)) out[key] = inArray(pass, value, twin);
 	}
 	return out;
@@ -7178,7 +7178,7 @@ function inArrayRow(pass, incoming, stored) {
 async function walk(pass, incoming, stored) {
 	if (isSecretMarker(stored)) return atMarker(pass, incoming, stored);
 	if (Array.isArray(incoming) && Array.isArray(stored)) return inArray(pass, incoming, stored);
-	if (!isRecord$4(incoming) || !isRecord$4(stored)) return incoming;
+	if (!isRecord$5(incoming) || !isRecord$5(stored)) return incoming;
 	const out = { ...incoming };
 	for (const [key, value] of Object.entries(incoming)) out[key] = await walk(pass, value, stored[key]);
 	return out;
@@ -7209,7 +7209,7 @@ async function restoreUnchangedSecrets(input) {
 function isJsonEqual(a, b) {
 	if (Object.is(a, b)) return true;
 	if (Array.isArray(a)) return Array.isArray(b) && a.length === b.length && a.every((v, i) => isJsonEqual(v, b[i]));
-	if (isRecord$4(a) && isRecord$4(b)) {
+	if (isRecord$5(a) && isRecord$5(b)) {
 		const keys = Object.keys(a);
 		if (keys.length !== Object.keys(b).length) return false;
 		return keys.every((k) => Object.prototype.hasOwnProperty.call(b, k) && isJsonEqual(a[k], b[k]));
@@ -7233,7 +7233,7 @@ function markerKeysOf(blob, owner) {
 }
 function nodeFromStored(value, owner) {
 	if (isSecretMarker(value)) return isSecretRefOwnedBy(value.$secret, owner) ? { kind: "leaf" } : null;
-	if (!isRecord$4(value)) return null;
+	if (!isRecord$5(value)) return null;
 	const children = /* @__PURE__ */ new Map();
 	for (const [key, child] of Object.entries(value)) {
 		const node = nodeFromStored(child, owner);
@@ -7852,6 +7852,44 @@ var BaseAddon = class {
 		return null;
 	}
 	/**
+	* D986 scoped settings: the form shape of the CLUSTER-wide settings one capability this addon
+	* provides owns, or `null` when it has none. `cap` is a capability name the addon's manifest
+	* declares. Stored as `addon-settings` rows `<addonId>.<field>`. The keys of this schema, of
+	* {@link nodeSettingsSchema} and of {@link deviceDefaultsSchema} are disjoint, and a key never
+	* contains `@` (guard `check-scoped-settings-declared`). SHAPE only: values are read by scope.
+	*/
+	async clusterSettingsSchema(_cap) {
+		return null;
+	}
+	/**
+	* D986: the form shape of the settings one capability owns PER NODE, or `null`. Stored as
+	* `addon-settings` rows `<addonId>.<field>@<nodeId>` carrying `nodeId` in the row data, so a
+	* forgotten node's rows go in one central delete.
+	*/
+	async nodeSettingsSchema(_cap) {
+		return null;
+	}
+	/**
+	* D986: the form shape of the FLEET DEFAULTS of the per-device settings one capability owns,
+	* or `null`. Stored as `addon-settings` rows `<addonId>.<field>`; a device resolves its value
+	* as device row, then this default, then the schema default (`resolveDeviceSettings`).
+	*/
+	async deviceDefaultsSchema(_cap) {
+		return null;
+	}
+	/**
+	* The host's read of the scoped declarations: the schema one capability declares for `scope`,
+	* or `null`. Beside {@link getIntegrationFormSchema}, the same shape: the hook is protected, the
+	* host asks this method.
+	*/
+	async getScopedSettingsSchema(scope, cap) {
+		switch (scope) {
+			case "cluster": return this.clusterSettingsSchema(cap);
+			case "node": return this.nodeSettingsSchema(cap);
+			case "device-defaults": return this.deviceDefaultsSchema(cap);
+		}
+	}
+	/**
 	* What the create wizard and the integration edit page render for one instance: the addon's
 	* per-instance schema when it declares one, else its global schema (what they always showed).
 	*/
@@ -8645,47 +8683,6 @@ function normalizeAddonInitResult(result) {
 	if (Array.isArray(result)) return { providers: result };
 	return result;
 }
-/**
-* The share-view scope kinds a share-link token can carry. The hub mints
-* and validates them (`ShareViewGrantSchema` builds its
-* enum from this list); a data plane names the kinds it ACCEPTS in `share`.
-*/
-var SHARE_VIEW_KINDS = ["grid-view", "events-view"];
-/** The wire shape of {@link PeerBytesTicket} — see the type for what it is. */
-var PeerBytesTicketSchema = object({
-	/** `http://127.0.0.1:<port>/<token>`. One `GET` takes it. */
-	url: string().min(1),
-	/**
-	* The HOST node this URL means something on — the hub or a named agent,
-	* never a runner. {@link AddonPeerBytes.open} compares it to its own and
-	* refuses `cross-node` by name when they differ, without dialling.
-	*/
-	hostNodeId: string().min(1),
-	expiresAtMs: number().int().nonnegative(),
-	/**
-	* What the producer DECLARED the body to be, when it knows — `null` when it
-	* does not. Never `0` for unknown (D393): a consumer sizing a bound off this
-	* must be able to tell "the producer did not say" from "the body is empty".
-	*/
-	declaredBytes: number().int().nonnegative().nullable()
-});
-/** Limits and names of `ctx.records` (D881). One authority; the engine and the facade read it. */
-/** The files a kind may live in. `history` is device-history's (D850), never records. */
-var RECORD_DATABASES = ["settings", "events"];
-/** The classes of a kind: the `@durable` vocabulary, one authority (replaces the annotation). */
-var RECORD_CLASSES = [
-	"config",
-	"ledger",
-	"audit",
-	"mirror",
-	"ephemeral"
-];
-var RECORD_DEFAULT_MAX_DATA_BYTES = 64 * 1024;
-var RECORD_MAX_DATA_BYTES = 1024 * 1024;
-var RECORD_BATCH_MAX = 1e3;
-var RECORD_QUERY_MAX = 1e3;
-/** A kind in the `settings` file may not bound itself above this (D447: high volume is `events`). */
-var RECORD_SETTINGS_MAX_ROWS = 5e4;
 var PREFIX = "records/";
 /** The base of every records failure. `detail` is the human part of the message. */
 var RecordsError = class extends Error {
@@ -8718,6 +8715,83 @@ var DeclarationRefusedError = class extends RecordsError {
 		this.name = "DeclarationRefusedError";
 	}
 };
+/** Limits and names of `ctx.records` (D881). One authority; the engine and the facade read it. */
+/** The files a kind may live in. `history` is device-history's (D850), never records. */
+var RECORD_DATABASES = ["settings", "events"];
+/** The classes of a kind: the `@durable` vocabulary, one authority (replaces the annotation). */
+var RECORD_CLASSES = [
+	"config",
+	"ledger",
+	"audit",
+	"mirror",
+	"ephemeral"
+];
+var RECORD_DEFAULT_MAX_DATA_BYTES = 64 * 1024;
+var RECORD_MAX_DATA_BYTES = 1024 * 1024;
+var RECORD_BATCH_MAX = 1e3;
+var RECORD_QUERY_MAX = 1e3;
+/** A kind in the `settings` file may not bound itself above this (D447: high volume is `events`). */
+var RECORD_SETTINGS_MAX_ROWS = 5e4;
+/**
+* Secret fields of a record, addressed the way a Zod schema declares them
+* (`collectZodSecretPaths`): dotted keys, `[]` for "each element of this array"
+* (`auth.accessToken`, `headers[].value`).
+*
+* Array elements are matched by a DECLARED id key (`secretArrayKeys`:
+* `{ headers: 'name' }`), never by index, so reordering a list keeps every
+* keychain ref (the same rule as `arrayItemFieldPath`). The concrete path of a
+* leaf names its element: `headers[X-Api].value`.
+*
+* Pure and browser-safe. Nothing here mutates: every transform returns a new value.
+*/
+/** The array prefixes (declared form, e.g. `headers` or `a.headers`) of a path. */
+function parseSecretPath(path) {
+	if (path.length === 0) throw new InvalidRecordError("an empty secret path");
+	return path.split(".").map((raw) => {
+		const each = raw.endsWith("[]");
+		const key = each ? raw.slice(0, -2) : raw;
+		if (key.length === 0) throw new InvalidRecordError(`secret path "${path}" has an empty segment`);
+		return {
+			key,
+			each
+		};
+	});
+}
+/** The declared array prefixes of `path` that need an id key (`headers`, `a.rows`). */
+function secretArrayPrefixes(path) {
+	const segments = parseSecretPath(path);
+	const prefixes = [];
+	const walked = [];
+	for (const segment of segments) {
+		walked.push(segment.key);
+		if (segment.each) prefixes.push(walked.join("."));
+	}
+	return prefixes;
+}
+/**
+* The share-view scope kinds a share-link token can carry. The hub mints
+* and validates them (`ShareViewGrantSchema` builds its
+* enum from this list); a data plane names the kinds it ACCEPTS in `share`.
+*/
+var SHARE_VIEW_KINDS = ["grid-view", "events-view"];
+/** The wire shape of {@link PeerBytesTicket} — see the type for what it is. */
+var PeerBytesTicketSchema = object({
+	/** `http://127.0.0.1:<port>/<token>`. One `GET` takes it. */
+	url: string().min(1),
+	/**
+	* The HOST node this URL means something on — the hub or a named agent,
+	* never a runner. {@link AddonPeerBytes.open} compares it to its own and
+	* refuses `cross-node` by name when they differ, without dialling.
+	*/
+	hostNodeId: string().min(1),
+	expiresAtMs: number().int().nonnegative(),
+	/**
+	* What the producer DECLARED the body to be, when it knows — `null` when it
+	* does not. Never `0` for unknown (D393): a consumer sizing a bound off this
+	* must be able to tell "the producer did not say" from "the body is empty".
+	*/
+	declaredBytes: number().int().nonnegative().nullable()
+});
 function defOf(schema) {
 	const zodBag = Reflect.get(schema, "_zod");
 	if (typeof zodBag !== "object" || zodBag === null) return {};
@@ -8786,42 +8860,6 @@ function collectZodSecretPaths(schema, prefix = "") {
 	return [...new Set(paths)];
 }
 /**
-* Secret fields of a record, addressed the way a Zod schema declares them
-* (`collectZodSecretPaths`): dotted keys, `[]` for "each element of this array"
-* (`auth.accessToken`, `headers[].value`).
-*
-* Array elements are matched by a DECLARED id key (`secretArrayKeys`:
-* `{ headers: 'name' }`), never by index, so reordering a list keeps every
-* keychain ref (the same rule as `arrayItemFieldPath`). The concrete path of a
-* leaf names its element: `headers[X-Api].value`.
-*
-* Pure and browser-safe. Nothing here mutates: every transform returns a new value.
-*/
-/** The array prefixes (declared form, e.g. `headers` or `a.headers`) of a path. */
-function parseSecretPath(path) {
-	if (path.length === 0) throw new InvalidRecordError("an empty secret path");
-	return path.split(".").map((raw) => {
-		const each = raw.endsWith("[]");
-		const key = each ? raw.slice(0, -2) : raw;
-		if (key.length === 0) throw new InvalidRecordError(`secret path "${path}" has an empty segment`);
-		return {
-			key,
-			each
-		};
-	});
-}
-/** The declared array prefixes of `path` that need an id key (`headers`, `a.rows`). */
-function secretArrayPrefixes(path) {
-	const segments = parseSecretPath(path);
-	const prefixes = [];
-	const walked = [];
-	for (const segment of segments) {
-		walked.push(segment.key);
-		if (segment.each) prefixes.push(walked.join("."));
-	}
-	return prefixes;
-}
-/**
 * Record kinds (D881): the declaration an addon makes of one kind of fact, the
 * Zod row schema that describes it, and the helper that turns the two into the
 * JSON the engine stores.
@@ -9786,6 +9824,7 @@ var CAP_NAMES = Object.freeze([
 	"humidity-sensor",
 	"image",
 	"image-settings",
+	"integration-instances",
 	"integrations",
 	"intercom",
 	"ir-transmitter",
@@ -11719,7 +11758,7 @@ object({
 	params: record(string(), union([string(), number()])).optional()
 });
 //#endregion
-//#region ../types/dist/composition-kKKOdFIG.mjs
+//#region ../types/dist/composition-BDUoQsw9.mjs
 /**
 * The ffmpeg build every CamStack node downloads, per platform and arch.
 *
@@ -21356,6 +21395,7 @@ var SYSTEM_CAP_VOCABULARY = {
 	"load-contribution": system(INTERNAL),
 	"local-network": system(NETWORK),
 	"log-channels": system(INTERNAL),
+	"integration-instances": system(INTERNAL),
 	"log-destination": system(INTERNAL),
 	"login-method": system(IDENTITY),
 	"mesh-network": system(NETWORK),
@@ -43656,7 +43696,7 @@ var TargetKindCapsSchema = object({
 * the union is large and not meant for runtime validation here; the exported
 * `TargetKind` type re-tightens `configSchema` to `ConfigUISchema`.
 */
-var ConfigSchemaPassthrough$3 = unknown();
+var ConfigSchemaPassthrough$4 = unknown();
 var TargetKindSchema = object({
 	kind: string(),
 	label: string(),
@@ -43693,7 +43733,7 @@ var TargetKindSchema = object({
 	* its raster path, which is the safe default for an unknown image.
 	*/
 	iconMediaType: string().optional(),
-	configSchema: ConfigSchemaPassthrough$3,
+	configSchema: ConfigSchemaPassthrough$4,
 	/**
 	* The config keys that decide WHERE this kind's secrets are sent (server,
 	* base URL, instance, chat, recipient). A save that changes any of them
@@ -55701,9 +55741,15 @@ var AvailableIntegrationTypeSchema = object({
 	* branch on CAP — never on addon name. `device-adoption` integrations
 	* (Home Assistant, …) route through the broker step (Approach A);
 	* `device-provider` integrations (Reolink/ONVIF) keep the
-	* legacy config → discovery flow.
+	* legacy config → discovery flow. `connection` is an addon that only holds a
+	* connection as typed records (`integration-instances`, D985): no devices,
+	* no discovery.
 	*/
-	kind: _enum(["device-adoption", "device-provider"]),
+	kind: _enum([
+		"device-adoption",
+		"device-provider",
+		"connection"
+	]),
 	/**
 	* For `device-adoption` addons: the broker kind to create/link
 	* (e.g. `home-assistant`), declared in the addon manifest. `null` for
@@ -55816,6 +55862,67 @@ method(_void(), array(IntegrationWithStateSchema)), method(object({ id: string()
 	auth: "admin"
 });
 /**
+* `integration-instances` - the connection of an addon that holds ONE or SEVERAL
+* (an account, a relay, a destination) as typed records, shown on the
+* Integrations page like every other integration (D985, D986).
+*
+* A collection of providers: each addon that holds connections registers one
+* and the hub aggregator (`integrations.*`) reaches a provider with the pinned
+* `addonId`. It is internal and has no route: the operator-facing surface is
+* the `integrations` cap, which keeps ONE list.
+*
+* Identity: the instance id IS the `integrations` registry id (`int_NNNN`,
+* immutable, already in the `/integrations/<id>` URL). A second operator-chosen
+* slug would be a second authority over one identity (D224). `name` is the
+* editable label.
+*
+* Secrets: every field the instance kind marks `.meta({ secret: true })` reaches
+* the form as a `SecretFieldView`, never text (D789). A patch value omitted, `''`
+* or the redaction token KEEPS the stored secret; `{ $secretClear: true }`
+* clears it.
+*/
+var ConfigSchemaPassthrough$3 = custom();
+var IntegrationInstanceIdSchema = string().min(1);
+var IntegrationInstanceDescriptionSchema = object({
+	/** `single`: at most one instance can exist (Loki). `multiple`: an account each. */
+	instanceMode: _enum(["single", "multiple"]),
+	/** What the instance is, for the UI (`destination`, `relay`, `account`). */
+	kind: string(),
+	/** True when `testInstance` really probes the remote. */
+	canTest: boolean()
+});
+var IntegrationInstanceStatusSchema = object({
+	state: _enum([
+		"ok",
+		"off",
+		"error",
+		"unknown"
+	]),
+	detail: string().optional()
+});
+var IntegrationInstanceSchema = object({
+	id: IntegrationInstanceIdSchema,
+	name: string(),
+	/** The addon's own rule (an URL is present, a client id is present...). */
+	configured: boolean(),
+	/** Values for the instance form; a secret is a `SecretFieldView`, never text. */
+	formValues: record(string(), unknown()),
+	status: IntegrationInstanceStatusSchema.optional()
+});
+var IntegrationInstancePatchSchema = object({
+	id: IntegrationInstanceIdSchema,
+	name: string().min(1).optional(),
+	/** Omitted / '' / redaction token keeps a secret; `{ $secretClear: true }` clears it. */
+	values: record(string(), unknown())
+});
+method(_void(), IntegrationInstanceDescriptionSchema), method(object({ id: IntegrationInstanceIdSchema.nullable() }), ConfigSchemaPassthrough$3), method(_void(), array(IntegrationInstanceSchema).readonly()), method(object({ id: IntegrationInstanceIdSchema }), IntegrationInstanceSchema.nullable()), method(object({
+	id: IntegrationInstanceIdSchema,
+	name: string().min(1)
+}), object({ id: string() }), { kind: "mutation" }), method(IntegrationInstancePatchSchema, object({ ok: literal(true) }), { kind: "mutation" }), method(object({ id: IntegrationInstanceIdSchema }), object({ ok: literal(true) }), { kind: "mutation" }), optionalMethod(object({
+	id: IntegrationInstanceIdSchema.nullable(),
+	values: record(string(), unknown())
+}), TestConnectionResultSchema$1, { kind: "mutation" });
+/**
 * Two-way audio / talk-back cap. Clients open a WebRTC audio-only
 * session (server-initiated offer pattern, identical to the main
 * video WebRTC flow) and the browser captures the mic; the server
@@ -85272,6 +85379,62 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"integrationInstances.createInstance": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
+	"integrationInstances.deleteInstance": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "delete",
+		role: "admin"
+	},
+	"integrationInstances.describe": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
+	"integrationInstances.getInstance": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
+	"integrationInstances.instanceFormSchema": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
+	"integrationInstances.listInstances": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
+	"integrationInstances.testInstance": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
+	"integrationInstances.updateInstance": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"integrations.create": {
 		capName: "integrations",
 		capScope: "system",

package/dist/{ha-broker-source-iLA_DsW8.mjs → ha-broker-source-D3FBA6uG.mjs}

@@ -5971,7 +5971,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-Bei295Bz.mjs
+//#region ../types/dist/sleep-CdJHPm-k.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -6088,7 +6088,7 @@ function isKeychainStoredField(field) {
 var SECRET_CLEAR = { $secretClear: true };
 /** The `'***'` token D634 redaction writes for non-admins. */
 var LEGACY_DEVICE_REDACTION = "***";
-function isRecord$6(value) {
+function isRecord$7(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function makeSecretMarker(ref) {
@@ -6099,12 +6099,12 @@ function makeSecretMarker(ref) {
 }
 /** A stored marker: an object whose `$secret` is a non-empty string. */
 function isSecretMarker(value) {
-	if (!isRecord$6(value)) return false;
+	if (!isRecord$7(value)) return false;
 	const ref = value["$secret"];
 	return typeof ref === "string" && ref.length > 0;
 }
 function isSecretClear(value) {
-	return isRecord$6(value) && value["$secretClear"] === true;
+	return isRecord$7(value) && value["$secretClear"] === true;
 }
 /**
 * The UI view of a stored secret field value: a marker becomes "set", inline
@@ -6857,7 +6857,7 @@ var KeychainWriteRefusedError = class extends Error {
 	}
 };
 var KEEP = { kind: "keep" };
-function isRecord$5(value) {
+function isRecord$6(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function defaultMintId() {
@@ -6870,7 +6870,7 @@ function collectSecretMarkerRefs(value, out = []) {
 		return out;
 	}
 	if (Array.isArray(value)) for (const item of value) collectSecretMarkerRefs(item, out);
-	else if (isRecord$5(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
+	else if (isRecord$6(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
 	return out;
 }
 async function storedValueEquals(secrets, marker, candidate) {
@@ -6925,7 +6925,7 @@ function rowId(row, idKey) {
 	return null;
 }
 async function writeArray(ctx, node, incoming, stored, fieldPath) {
-	const storedRows = Array.isArray(stored) ? stored.filter(isRecord$5) : [];
+	const storedRows = Array.isArray(stored) ? stored.filter(isRecord$6) : [];
 	if (!Array.isArray(incoming)) {
 		ctx.deletes.push(...collectSecretMarkerRefs(storedRows));
 		return {
@@ -6941,7 +6941,7 @@ async function writeArray(ctx, node, incoming, stored, fieldPath) {
 	const kept = /* @__PURE__ */ new Set();
 	const rows = [];
 	for (const row of incoming) {
-		if (!isRecord$5(row)) {
+		if (!isRecord$6(row)) {
 			rows.push(row);
 			continue;
 		}
@@ -6966,7 +6966,7 @@ async function writeNode(ctx, node, incoming, stored, fieldPath) {
 		case "leaf": return writeLeaf(ctx, incoming, stored, fieldPath);
 		case "array": return writeArray(ctx, node, incoming, stored, fieldPath);
 		case "object": {
-			if (!isRecord$5(incoming)) {
+			if (!isRecord$6(incoming)) {
 				if (incoming === void 0) return KEEP;
 				ctx.deletes.push(...collectSecretMarkerRefs(stored));
 				return {
@@ -6974,7 +6974,7 @@ async function writeNode(ctx, node, incoming, stored, fieldPath) {
 					value: incoming
 				};
 			}
-			const storedObj = isRecord$5(stored) ? stored : {};
+			const storedObj = isRecord$6(stored) ? stored : {};
 			return {
 				kind: "value",
 				value: await writeMembers(ctx, node.children, incoming, storedObj, (m) => `${fieldPath}.${m}`)
@@ -7097,7 +7097,7 @@ async function resolveSecretMarkers(value, secrets, options = {}) {
 				value: items
 			};
 		}
-		if (isRecord$5(v)) {
+		if (isRecord$6(v)) {
 			const out = {};
 			for (const [k, child] of Object.entries(v)) {
 				const s = substitute(child);
@@ -7129,7 +7129,7 @@ var SecretOverwriteRefusedError = class extends Error {
 		this.name = "SecretOverwriteRefusedError";
 	}
 };
-function isRecord$4(value) {
+function isRecord$5(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function resolvedValue(pass, marker) {
@@ -7158,7 +7158,7 @@ function inArray(pass, incoming, stored) {
 	return incoming.map((item, index) => {
 		const twin = stored[index];
 		if (isSecretMarker(twin)) return typeof item === "string" && item === resolvedValue(pass, twin) ? twin : item;
-		if (isRecord$4(item) && isRecord$4(twin)) return inArrayRow(pass, item, twin);
+		if (isRecord$5(item) && isRecord$5(twin)) return inArrayRow(pass, item, twin);
 		if (Array.isArray(item) && Array.isArray(twin)) return inArray(pass, item, twin);
 		return item;
 	});
@@ -7169,7 +7169,7 @@ function inArrayRow(pass, incoming, stored) {
 		const twin = stored[key];
 		if (isSecretMarker(twin)) {
 			if (typeof value === "string" && value === resolvedValue(pass, twin)) out[key] = twin;
-		} else if (isRecord$4(value) && isRecord$4(twin)) out[key] = inArrayRow(pass, value, twin);
+		} else if (isRecord$5(value) && isRecord$5(twin)) out[key] = inArrayRow(pass, value, twin);
 		else if (Array.isArray(value) && Array.isArray(twin)) out[key] = inArray(pass, value, twin);
 	}
 	return out;
@@ -7177,7 +7177,7 @@ function inArrayRow(pass, incoming, stored) {
 async function walk(pass, incoming, stored) {
 	if (isSecretMarker(stored)) return atMarker(pass, incoming, stored);
 	if (Array.isArray(incoming) && Array.isArray(stored)) return inArray(pass, incoming, stored);
-	if (!isRecord$4(incoming) || !isRecord$4(stored)) return incoming;
+	if (!isRecord$5(incoming) || !isRecord$5(stored)) return incoming;
 	const out = { ...incoming };
 	for (const [key, value] of Object.entries(incoming)) out[key] = await walk(pass, value, stored[key]);
 	return out;
@@ -7208,7 +7208,7 @@ async function restoreUnchangedSecrets(input) {
 function isJsonEqual(a, b) {
 	if (Object.is(a, b)) return true;
 	if (Array.isArray(a)) return Array.isArray(b) && a.length === b.length && a.every((v, i) => isJsonEqual(v, b[i]));
-	if (isRecord$4(a) && isRecord$4(b)) {
+	if (isRecord$5(a) && isRecord$5(b)) {
 		const keys = Object.keys(a);
 		if (keys.length !== Object.keys(b).length) return false;
 		return keys.every((k) => Object.prototype.hasOwnProperty.call(b, k) && isJsonEqual(a[k], b[k]));
@@ -7232,7 +7232,7 @@ function markerKeysOf(blob, owner) {
 }
 function nodeFromStored(value, owner) {
 	if (isSecretMarker(value)) return isSecretRefOwnedBy(value.$secret, owner) ? { kind: "leaf" } : null;
-	if (!isRecord$4(value)) return null;
+	if (!isRecord$5(value)) return null;
 	const children = /* @__PURE__ */ new Map();
 	for (const [key, child] of Object.entries(value)) {
 		const node = nodeFromStored(child, owner);
@@ -7851,6 +7851,44 @@ var BaseAddon = class {
 		return null;
 	}
 	/**
+	* D986 scoped settings: the form shape of the CLUSTER-wide settings one capability this addon
+	* provides owns, or `null` when it has none. `cap` is a capability name the addon's manifest
+	* declares. Stored as `addon-settings` rows `<addonId>.<field>`. The keys of this schema, of
+	* {@link nodeSettingsSchema} and of {@link deviceDefaultsSchema} are disjoint, and a key never
+	* contains `@` (guard `check-scoped-settings-declared`). SHAPE only: values are read by scope.
+	*/
+	async clusterSettingsSchema(_cap) {
+		return null;
+	}
+	/**
+	* D986: the form shape of the settings one capability owns PER NODE, or `null`. Stored as
+	* `addon-settings` rows `<addonId>.<field>@<nodeId>` carrying `nodeId` in the row data, so a
+	* forgotten node's rows go in one central delete.
+	*/
+	async nodeSettingsSchema(_cap) {
+		return null;
+	}
+	/**
+	* D986: the form shape of the FLEET DEFAULTS of the per-device settings one capability owns,
+	* or `null`. Stored as `addon-settings` rows `<addonId>.<field>`; a device resolves its value
+	* as device row, then this default, then the schema default (`resolveDeviceSettings`).
+	*/
+	async deviceDefaultsSchema(_cap) {
+		return null;
+	}
+	/**
+	* The host's read of the scoped declarations: the schema one capability declares for `scope`,
+	* or `null`. Beside {@link getIntegrationFormSchema}, the same shape: the hook is protected, the
+	* host asks this method.
+	*/
+	async getScopedSettingsSchema(scope, cap) {
+		switch (scope) {
+			case "cluster": return this.clusterSettingsSchema(cap);
+			case "node": return this.nodeSettingsSchema(cap);
+			case "device-defaults": return this.deviceDefaultsSchema(cap);
+		}
+	}
+	/**
 	* What the create wizard and the integration edit page render for one instance: the addon's
 	* per-instance schema when it declares one, else its global schema (what they always showed).
 	*/
@@ -8644,47 +8682,6 @@ function normalizeAddonInitResult(result) {
 	if (Array.isArray(result)) return { providers: result };
 	return result;
 }
-/**
-* The share-view scope kinds a share-link token can carry. The hub mints
-* and validates them (`ShareViewGrantSchema` builds its
-* enum from this list); a data plane names the kinds it ACCEPTS in `share`.
-*/
-var SHARE_VIEW_KINDS = ["grid-view", "events-view"];
-/** The wire shape of {@link PeerBytesTicket} — see the type for what it is. */
-var PeerBytesTicketSchema = object({
-	/** `http://127.0.0.1:<port>/<token>`. One `GET` takes it. */
-	url: string().min(1),
-	/**
-	* The HOST node this URL means something on — the hub or a named agent,
-	* never a runner. {@link AddonPeerBytes.open} compares it to its own and
-	* refuses `cross-node` by name when they differ, without dialling.
-	*/
-	hostNodeId: string().min(1),
-	expiresAtMs: number().int().nonnegative(),
-	/**
-	* What the producer DECLARED the body to be, when it knows — `null` when it
-	* does not. Never `0` for unknown (D393): a consumer sizing a bound off this
-	* must be able to tell "the producer did not say" from "the body is empty".
-	*/
-	declaredBytes: number().int().nonnegative().nullable()
-});
-/** Limits and names of `ctx.records` (D881). One authority; the engine and the facade read it. */
-/** The files a kind may live in. `history` is device-history's (D850), never records. */
-var RECORD_DATABASES = ["settings", "events"];
-/** The classes of a kind: the `@durable` vocabulary, one authority (replaces the annotation). */
-var RECORD_CLASSES = [
-	"config",
-	"ledger",
-	"audit",
-	"mirror",
-	"ephemeral"
-];
-var RECORD_DEFAULT_MAX_DATA_BYTES = 64 * 1024;
-var RECORD_MAX_DATA_BYTES = 1024 * 1024;
-var RECORD_BATCH_MAX = 1e3;
-var RECORD_QUERY_MAX = 1e3;
-/** A kind in the `settings` file may not bound itself above this (D447: high volume is `events`). */
-var RECORD_SETTINGS_MAX_ROWS = 5e4;
 var PREFIX = "records/";
 /** The base of every records failure. `detail` is the human part of the message. */
 var RecordsError = class extends Error {
@@ -8717,6 +8714,83 @@ var DeclarationRefusedError = class extends RecordsError {
 		this.name = "DeclarationRefusedError";
 	}
 };
+/** Limits and names of `ctx.records` (D881). One authority; the engine and the facade read it. */
+/** The files a kind may live in. `history` is device-history's (D850), never records. */
+var RECORD_DATABASES = ["settings", "events"];
+/** The classes of a kind: the `@durable` vocabulary, one authority (replaces the annotation). */
+var RECORD_CLASSES = [
+	"config",
+	"ledger",
+	"audit",
+	"mirror",
+	"ephemeral"
+];
+var RECORD_DEFAULT_MAX_DATA_BYTES = 64 * 1024;
+var RECORD_MAX_DATA_BYTES = 1024 * 1024;
+var RECORD_BATCH_MAX = 1e3;
+var RECORD_QUERY_MAX = 1e3;
+/** A kind in the `settings` file may not bound itself above this (D447: high volume is `events`). */
+var RECORD_SETTINGS_MAX_ROWS = 5e4;
+/**
+* Secret fields of a record, addressed the way a Zod schema declares them
+* (`collectZodSecretPaths`): dotted keys, `[]` for "each element of this array"
+* (`auth.accessToken`, `headers[].value`).
+*
+* Array elements are matched by a DECLARED id key (`secretArrayKeys`:
+* `{ headers: 'name' }`), never by index, so reordering a list keeps every
+* keychain ref (the same rule as `arrayItemFieldPath`). The concrete path of a
+* leaf names its element: `headers[X-Api].value`.
+*
+* Pure and browser-safe. Nothing here mutates: every transform returns a new value.
+*/
+/** The array prefixes (declared form, e.g. `headers` or `a.headers`) of a path. */
+function parseSecretPath(path) {
+	if (path.length === 0) throw new InvalidRecordError("an empty secret path");
+	return path.split(".").map((raw) => {
+		const each = raw.endsWith("[]");
+		const key = each ? raw.slice(0, -2) : raw;
+		if (key.length === 0) throw new InvalidRecordError(`secret path "${path}" has an empty segment`);
+		return {
+			key,
+			each
+		};
+	});
+}
+/** The declared array prefixes of `path` that need an id key (`headers`, `a.rows`). */
+function secretArrayPrefixes(path) {
+	const segments = parseSecretPath(path);
+	const prefixes = [];
+	const walked = [];
+	for (const segment of segments) {
+		walked.push(segment.key);
+		if (segment.each) prefixes.push(walked.join("."));
+	}
+	return prefixes;
+}
+/**
+* The share-view scope kinds a share-link token can carry. The hub mints
+* and validates them (`ShareViewGrantSchema` builds its
+* enum from this list); a data plane names the kinds it ACCEPTS in `share`.
+*/
+var SHARE_VIEW_KINDS = ["grid-view", "events-view"];
+/** The wire shape of {@link PeerBytesTicket} — see the type for what it is. */
+var PeerBytesTicketSchema = object({
+	/** `http://127.0.0.1:<port>/<token>`. One `GET` takes it. */
+	url: string().min(1),
+	/**
+	* The HOST node this URL means something on — the hub or a named agent,
+	* never a runner. {@link AddonPeerBytes.open} compares it to its own and
+	* refuses `cross-node` by name when they differ, without dialling.
+	*/
+	hostNodeId: string().min(1),
+	expiresAtMs: number().int().nonnegative(),
+	/**
+	* What the producer DECLARED the body to be, when it knows — `null` when it
+	* does not. Never `0` for unknown (D393): a consumer sizing a bound off this
+	* must be able to tell "the producer did not say" from "the body is empty".
+	*/
+	declaredBytes: number().int().nonnegative().nullable()
+});
 function defOf(schema) {
 	const zodBag = Reflect.get(schema, "_zod");
 	if (typeof zodBag !== "object" || zodBag === null) return {};
@@ -8785,42 +8859,6 @@ function collectZodSecretPaths(schema, prefix = "") {
 	return [...new Set(paths)];
 }
 /**
-* Secret fields of a record, addressed the way a Zod schema declares them
-* (`collectZodSecretPaths`): dotted keys, `[]` for "each element of this array"
-* (`auth.accessToken`, `headers[].value`).
-*
-* Array elements are matched by a DECLARED id key (`secretArrayKeys`:
-* `{ headers: 'name' }`), never by index, so reordering a list keeps every
-* keychain ref (the same rule as `arrayItemFieldPath`). The concrete path of a
-* leaf names its element: `headers[X-Api].value`.
-*
-* Pure and browser-safe. Nothing here mutates: every transform returns a new value.
-*/
-/** The array prefixes (declared form, e.g. `headers` or `a.headers`) of a path. */
-function parseSecretPath(path) {
-	if (path.length === 0) throw new InvalidRecordError("an empty secret path");
-	return path.split(".").map((raw) => {
-		const each = raw.endsWith("[]");
-		const key = each ? raw.slice(0, -2) : raw;
-		if (key.length === 0) throw new InvalidRecordError(`secret path "${path}" has an empty segment`);
-		return {
-			key,
-			each
-		};
-	});
-}
-/** The declared array prefixes of `path` that need an id key (`headers`, `a.rows`). */
-function secretArrayPrefixes(path) {
-	const segments = parseSecretPath(path);
-	const prefixes = [];
-	const walked = [];
-	for (const segment of segments) {
-		walked.push(segment.key);
-		if (segment.each) prefixes.push(walked.join("."));
-	}
-	return prefixes;
-}
-/**
 * Record kinds (D881): the declaration an addon makes of one kind of fact, the
 * Zod row schema that describes it, and the helper that turns the two into the
 * JSON the engine stores.
@@ -9785,6 +9823,7 @@ var CAP_NAMES = Object.freeze([
 	"humidity-sensor",
 	"image",
 	"image-settings",
+	"integration-instances",
 	"integrations",
 	"intercom",
 	"ir-transmitter",
@@ -11718,7 +11757,7 @@ object({
 	params: record(string(), union([string(), number()])).optional()
 });
 //#endregion
-//#region ../types/dist/composition-kKKOdFIG.mjs
+//#region ../types/dist/composition-BDUoQsw9.mjs
 /**
 * The ffmpeg build every CamStack node downloads, per platform and arch.
 *
@@ -21355,6 +21394,7 @@ var SYSTEM_CAP_VOCABULARY = {
 	"load-contribution": system(INTERNAL),
 	"local-network": system(NETWORK),
 	"log-channels": system(INTERNAL),
+	"integration-instances": system(INTERNAL),
 	"log-destination": system(INTERNAL),
 	"login-method": system(IDENTITY),
 	"mesh-network": system(NETWORK),
@@ -43655,7 +43695,7 @@ var TargetKindCapsSchema = object({
 * the union is large and not meant for runtime validation here; the exported
 * `TargetKind` type re-tightens `configSchema` to `ConfigUISchema`.
 */
-var ConfigSchemaPassthrough$3 = unknown();
+var ConfigSchemaPassthrough$4 = unknown();
 var TargetKindSchema = object({
 	kind: string(),
 	label: string(),
@@ -43692,7 +43732,7 @@ var TargetKindSchema = object({
 	* its raster path, which is the safe default for an unknown image.
 	*/
 	iconMediaType: string().optional(),
-	configSchema: ConfigSchemaPassthrough$3,
+	configSchema: ConfigSchemaPassthrough$4,
 	/**
 	* The config keys that decide WHERE this kind's secrets are sent (server,
 	* base URL, instance, chat, recipient). A save that changes any of them
@@ -55700,9 +55740,15 @@ var AvailableIntegrationTypeSchema = object({
 	* branch on CAP — never on addon name. `device-adoption` integrations
 	* (Home Assistant, …) route through the broker step (Approach A);
 	* `device-provider` integrations (Reolink/ONVIF) keep the
-	* legacy config → discovery flow.
+	* legacy config → discovery flow. `connection` is an addon that only holds a
+	* connection as typed records (`integration-instances`, D985): no devices,
+	* no discovery.
 	*/
-	kind: _enum(["device-adoption", "device-provider"]),
+	kind: _enum([
+		"device-adoption",
+		"device-provider",
+		"connection"
+	]),
 	/**
 	* For `device-adoption` addons: the broker kind to create/link
 	* (e.g. `home-assistant`), declared in the addon manifest. `null` for
@@ -55815,6 +55861,67 @@ method(_void(), array(IntegrationWithStateSchema)), method(object({ id: string()
 	auth: "admin"
 });
 /**
+* `integration-instances` - the connection of an addon that holds ONE or SEVERAL
+* (an account, a relay, a destination) as typed records, shown on the
+* Integrations page like every other integration (D985, D986).
+*
+* A collection of providers: each addon that holds connections registers one
+* and the hub aggregator (`integrations.*`) reaches a provider with the pinned
+* `addonId`. It is internal and has no route: the operator-facing surface is
+* the `integrations` cap, which keeps ONE list.
+*
+* Identity: the instance id IS the `integrations` registry id (`int_NNNN`,
+* immutable, already in the `/integrations/<id>` URL). A second operator-chosen
+* slug would be a second authority over one identity (D224). `name` is the
+* editable label.
+*
+* Secrets: every field the instance kind marks `.meta({ secret: true })` reaches
+* the form as a `SecretFieldView`, never text (D789). A patch value omitted, `''`
+* or the redaction token KEEPS the stored secret; `{ $secretClear: true }`
+* clears it.
+*/
+var ConfigSchemaPassthrough$3 = custom();
+var IntegrationInstanceIdSchema = string().min(1);
+var IntegrationInstanceDescriptionSchema = object({
+	/** `single`: at most one instance can exist (Loki). `multiple`: an account each. */
+	instanceMode: _enum(["single", "multiple"]),
+	/** What the instance is, for the UI (`destination`, `relay`, `account`). */
+	kind: string(),
+	/** True when `testInstance` really probes the remote. */
+	canTest: boolean()
+});
+var IntegrationInstanceStatusSchema = object({
+	state: _enum([
+		"ok",
+		"off",
+		"error",
+		"unknown"
+	]),
+	detail: string().optional()
+});
+var IntegrationInstanceSchema = object({
+	id: IntegrationInstanceIdSchema,
+	name: string(),
+	/** The addon's own rule (an URL is present, a client id is present...). */
+	configured: boolean(),
+	/** Values for the instance form; a secret is a `SecretFieldView`, never text. */
+	formValues: record(string(), unknown()),
+	status: IntegrationInstanceStatusSchema.optional()
+});
+var IntegrationInstancePatchSchema = object({
+	id: IntegrationInstanceIdSchema,
+	name: string().min(1).optional(),
+	/** Omitted / '' / redaction token keeps a secret; `{ $secretClear: true }` clears it. */
+	values: record(string(), unknown())
+});
+method(_void(), IntegrationInstanceDescriptionSchema), method(object({ id: IntegrationInstanceIdSchema.nullable() }), ConfigSchemaPassthrough$3), method(_void(), array(IntegrationInstanceSchema).readonly()), method(object({ id: IntegrationInstanceIdSchema }), IntegrationInstanceSchema.nullable()), method(object({
+	id: IntegrationInstanceIdSchema,
+	name: string().min(1)
+}), object({ id: string() }), { kind: "mutation" }), method(IntegrationInstancePatchSchema, object({ ok: literal(true) }), { kind: "mutation" }), method(object({ id: IntegrationInstanceIdSchema }), object({ ok: literal(true) }), { kind: "mutation" }), optionalMethod(object({
+	id: IntegrationInstanceIdSchema.nullable(),
+	values: record(string(), unknown())
+}), TestConnectionResultSchema$1, { kind: "mutation" });
+/**
 * Two-way audio / talk-back cap. Clients open a WebRTC audio-only
 * session (server-initiated offer pattern, identical to the main
 * video WebRTC flow) and the browser captures the mic; the server
@@ -85271,6 +85378,62 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"integrationInstances.createInstance": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
+	"integrationInstances.deleteInstance": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "delete",
+		role: "admin"
+	},
+	"integrationInstances.describe": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
+	"integrationInstances.getInstance": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
+	"integrationInstances.instanceFormSchema": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
+	"integrationInstances.listInstances": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
+	"integrationInstances.testInstance": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
+	"integrationInstances.updateInstance": {
+		capName: "integration-instances",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"integrations.create": {
 		capName: "integrations",
 		capScope: "system",

package/dist/ha-export/ha-export.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_ha_broker_source = require("../ha-broker-source-Ba20mhmb.js");
+const require_ha_broker_source = require("../ha-broker-source-CE3nHkyW.js");
 let node_crypto = require("node:crypto");
 require("node:zlib");
 let node_fs = require("node:fs");
@@ -4950,18 +4950,29 @@ async function call(slice, capName, make) {
 *
 * Idempotent: a store without the key yields an empty plan, which writes nothing.
 */
-/** The settings scope of this addon (`<addonId>:addon-settings`). */
-var HA_EXPORT_SETTINGS_SCOPE = "homeassistant-export:addon-settings";
+/** The addon id, the prefix of its rows in the canonical settings table. */
+var HA_EXPORT_ADDON_ID = "homeassistant-export";
+/**
+* Where the addon's global settings live: the canonical `addon-settings` table, one row per
+* key, id `<addonId>.<key>`, data `{ addonId, key, value }` (never a per-addon scoped table,
+* which exists only when something lazily declared it).
+*/
+var ADDON_SETTINGS_TABLE = "addon-settings";
 var RETIRED_URL_KEYS = ["publicBaseUrl"];
 async function planDropPublicBaseUrl(ports) {
 	const stored = await ports.readStored();
 	const present = RETIRED_URL_KEYS.filter((key) => key in stored);
 	if (present.length === 0) return { edits: [] };
+	const rowId = (key) => `${HA_EXPORT_ADDON_ID}.${key}`;
 	return { edits: [{
 		op: "deleteKeys",
-		scope: HA_EXPORT_SETTINGS_SCOPE,
-		keys: [...present],
-		precondition: require_ha_broker_source.preconditionOf(Object.fromEntries(present.map((key) => [key, stored[key]])))
+		scope: ADDON_SETTINGS_TABLE,
+		keys: present.map(rowId),
+		precondition: require_ha_broker_source.preconditionOf(Object.fromEntries(present.map((key) => [rowId(key), {
+			addonId: HA_EXPORT_ADDON_ID,
+			key,
+			value: stored[key]
+		}])))
 	}] };
 }
 //#endregion

package/dist/ha-export/ha-export.addon.mjs

@@ -1,4 +1,4 @@
-import { B as consumableKindOf, Bt as BaseAddon, Dt as sendToExportedTarget, Ht as baseUnitOf, Jt as isReadingQuantity, K as deviceExportCapability, Wt as defineAddonMigrations, Yt as nodePin, Zt as array, _ as PLUG_APPLIANCE_TYPES, _t as pruneDeletedEntities, c as COCO_TO_MACRO, d as ConsumableItemSchema, f as ConsumableStatusSchema, fn as EventCategory, g as MediaPlayerRepeatSchema, h as HvacModeSchema, i as AlarmArmModeSchema, in as string, j as buildAddonRouteProvider, l as CameraSwitchIdSchema, m as FanDirectionSchema, nn as object, on as unknown, pt as preconditionOf, r as listHomeAssistantBrokers, s as CAMERA_SWITCH_ORDER, u as ConsumableFormSchema, ut as oauthIntegrationCapability, x as addonRoutesCapability, xt as runExportedAction, z as consumableFormOf } from "../ha-broker-source-iLA_DsW8.mjs";
+import { B as consumableKindOf, Bt as BaseAddon, Dt as sendToExportedTarget, Ht as baseUnitOf, Jt as isReadingQuantity, K as deviceExportCapability, Wt as defineAddonMigrations, Yt as nodePin, Zt as array, _ as PLUG_APPLIANCE_TYPES, _t as pruneDeletedEntities, c as COCO_TO_MACRO, d as ConsumableItemSchema, f as ConsumableStatusSchema, fn as EventCategory, g as MediaPlayerRepeatSchema, h as HvacModeSchema, i as AlarmArmModeSchema, in as string, j as buildAddonRouteProvider, l as CameraSwitchIdSchema, m as FanDirectionSchema, nn as object, on as unknown, pt as preconditionOf, r as listHomeAssistantBrokers, s as CAMERA_SWITCH_ORDER, u as ConsumableFormSchema, ut as oauthIntegrationCapability, x as addonRoutesCapability, xt as runExportedAction, z as consumableFormOf } from "../ha-broker-source-D3FBA6uG.mjs";
 import { createHmac, timingSafeEqual } from "node:crypto";
 import "node:zlib";
 import "node:fs";
@@ -4915,18 +4915,29 @@ async function call(slice, capName, make) {
 *
 * Idempotent: a store without the key yields an empty plan, which writes nothing.
 */
-/** The settings scope of this addon (`<addonId>:addon-settings`). */
-var HA_EXPORT_SETTINGS_SCOPE = "homeassistant-export:addon-settings";
+/** The addon id, the prefix of its rows in the canonical settings table. */
+var HA_EXPORT_ADDON_ID = "homeassistant-export";
+/**
+* Where the addon's global settings live: the canonical `addon-settings` table, one row per
+* key, id `<addonId>.<key>`, data `{ addonId, key, value }` (never a per-addon scoped table,
+* which exists only when something lazily declared it).
+*/
+var ADDON_SETTINGS_TABLE = "addon-settings";
 var RETIRED_URL_KEYS = ["publicBaseUrl"];
 async function planDropPublicBaseUrl(ports) {
 	const stored = await ports.readStored();
 	const present = RETIRED_URL_KEYS.filter((key) => key in stored);
 	if (present.length === 0) return { edits: [] };
+	const rowId = (key) => `${HA_EXPORT_ADDON_ID}.${key}`;
 	return { edits: [{
 		op: "deleteKeys",
-		scope: HA_EXPORT_SETTINGS_SCOPE,
-		keys: [...present],
-		precondition: preconditionOf(Object.fromEntries(present.map((key) => [key, stored[key]])))
+		scope: ADDON_SETTINGS_TABLE,
+		keys: present.map(rowId),
+		precondition: preconditionOf(Object.fromEntries(present.map((key) => [rowId(key), {
+			addonId: HA_EXPORT_ADDON_ID,
+			key,
+			value: stored[key]
+		}])))
 	}] };
 }
 //#endregion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-homeassistant",
-  "version": "1.2.648",
+  "version": "1.2.649",
   "description": "Home Assistant device provider addon for CamStack",
   "keywords": [
     "camstack",
@@ -127,7 +127,7 @@
       "description": "Device provider (import) + native entity export (push). Two addons, one bundle, separate processes."
     },
     "requires": {
-      "server": ">=1.2.733"
+      "server": ">=1.2.738"
     }
   },
   "files": [