@camstack/addon-provider-homeassistant 1.2.653 → 1.2.655

package/dist/ha-export/ha-export.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_ha_broker_source = require("../ha-broker-source-DnSL-mbs.js");
+const require_ha_instance_settings = require("../ha-instance-settings-5Ms7yRju.js");
 let node_crypto = require("node:crypto");
 require("node:zlib");
 let node_fs = require("node:fs");
@@ -91,7 +91,7 @@ async function applyCameraFunctionWrite(api, deviceId, write, sourceNodeId) {
 			await api.streamBroker.setDeviceAudioMute.mutate({
 				deviceId,
 				muted: write.muted
-			}, require_ha_broker_source.nodePin(sourceNodeId));
+			}, require_ha_instance_settings.nodePin(sourceNodeId));
 			return;
 	}
 }
@@ -725,8 +725,8 @@ function consumableEntity(key, facet) {
 * rather than to an icon for nothing.
 */
 function consumableForm(item) {
-	const declared = require_ha_broker_source.ConsumableFormSchema.safeParse(item.form);
-	return require_ha_broker_source.consumableFormOf({
+	const declared = require_ha_instance_settings.ConsumableFormSchema.safeParse(item.form);
+	return require_ha_instance_settings.consumableFormOf({
 		...item.kind !== void 0 ? { kind: item.kind } : {},
 		...declared.success ? { form: declared.data } : {}
 	});
@@ -739,7 +739,7 @@ function partIcon(key, label) {
 function formIcon(item, form) {
 	switch (form) {
 		case "part": return partIcon(item.key, item.label);
-		case "tank": return require_ha_broker_source.consumableKindOf(item) === "waste" ? "mdi:water-off" : "mdi:water";
+		case "tank": return require_ha_instance_settings.consumableKindOf(item) === "waste" ? "mdi:water-off" : "mdi:water";
 		case "product": return "mdi:shaker-outline";
 		case "bin": return "mdi:delete";
 	}
@@ -750,8 +750,8 @@ function formIcon(item, form) {
 * form this export does not know degrades one icon instead of refusing the
 * whole slice.
 */
-var ExportConsumableItemSchema = require_ha_broker_source.ConsumableItemSchema.extend({ form: require_ha_broker_source.unknown().optional() });
-var ExportConsumablesSchema = require_ha_broker_source.object({ items: require_ha_broker_source.array(ExportConsumableItemSchema) });
+var ExportConsumableItemSchema = require_ha_instance_settings.ConsumableItemSchema.extend({ form: require_ha_instance_settings.unknown().optional() });
+var ExportConsumablesSchema = require_ha_instance_settings.object({ items: require_ha_instance_settings.array(ExportConsumableItemSchema) });
 /**
 * A worn part's life is a diagnostic; a tank's fill is what the device page
 * is for (a vacuum's clean water, a dishwasher's salt), so it is not hidden.
@@ -764,7 +764,7 @@ function consumableEntities(item) {
 		capName: "consumables",
 		itemKey: item.key
 	};
-	const kind = require_ha_broker_source.consumableKindOf(item);
+	const kind = require_ha_instance_settings.consumableKindOf(item);
 	const form = consumableForm(item);
 	const icon = formIcon(item, form);
 	/** What the item IS, on the sensors that describe it (not on a counter or a button). */
@@ -804,7 +804,7 @@ function consumableEntities(item) {
 		platform: "sensor",
 		label: `${item.label} status`,
 		deviceClass: "enum",
-		options: require_ha_broker_source.ConsumableStatusSchema.options,
+		options: require_ha_instance_settings.ConsumableStatusSchema.options,
 		icon,
 		attributes,
 		entityCategory: "diagnostic"
@@ -2405,7 +2405,7 @@ var CAP_ENTITY_MAP = {
 		* failure. `fanMode` and `preset` get no such list at all: they are
 		* free-form strings, so they stay sensors.
 		*/
-		options: require_ha_broker_source.HvacModeSchema.options,
+		options: require_ha_instance_settings.HvacModeSchema.options,
 		extras: {
 			"current-temp": {
 				platform: "sensor",
@@ -2555,7 +2555,7 @@ var CAP_ENTITY_MAP = {
 				field: "direction",
 				label: "Direction",
 				writable: true,
-				options: require_ha_broker_source.FanDirectionSchema.options,
+				options: require_ha_instance_settings.FanDirectionSchema.options,
 				enabledByDefault: false
 			}
 		}
@@ -2985,7 +2985,7 @@ var CAP_ENTITY_MAP = {
 				field: "repeat",
 				label: "Repeat",
 				writable: true,
-				options: require_ha_broker_source.MediaPlayerRepeatSchema.options,
+				options: require_ha_instance_settings.MediaPlayerRepeatSchema.options,
 				enabledByDefault: false
 			},
 			shuffle: {
@@ -3481,7 +3481,7 @@ function controlEntitySpecs(slice, quantity) {
 		const min = readFiniteNumber(slice, "min") ?? PERCENT_RANGE.min;
 		const max = readFiniteNumber(slice, "max") ?? PERCENT_RANGE.max;
 		const step = readFiniteNumber(slice, "step") ?? PERCENT_RANGE.step;
-		const unit = quantity === void 0 ? void 0 : require_ha_broker_source.baseUnitOf(quantity);
+		const unit = quantity === void 0 ? void 0 : require_ha_instance_settings.baseUnitOf(quantity);
 		if (min < max && step > 0) return [{
 			entity: primary,
 			platform: "number",
@@ -3803,7 +3803,7 @@ function buildDerivedPlan(device, options = UNNEGOTIATED_PLAN_OPTIONS) {
 			continue;
 		}
 		if (cap === "numeric-sensor") {
-			const unit = device.readingQuantity === void 0 ? void 0 : require_ha_broker_source.baseUnitOf(device.readingQuantity);
+			const unit = device.readingQuantity === void 0 ? void 0 : require_ha_instance_settings.baseUnitOf(device.readingQuantity);
 			specs.push(...capEntitySpecs(cap).map((spec) => degradeUnsupported(unit === void 0 ? spec : {
 				...spec,
 				unit
@@ -3878,7 +3878,7 @@ function buildDevicePlan(device, options = UNNEGOTIATED_PLAN_OPTIONS) {
 * was.
 */
 /** The camera function ids, keyed by the entity slug the catalog emits. */
-var CAMERA_SWITCH_BY_SLUG = Object.fromEntries(require_ha_broker_source.CAMERA_SWITCH_ORDER.map((id) => [toSlug(id), id]));
+var CAMERA_SWITCH_BY_SLUG = Object.fromEntries(require_ha_instance_settings.CAMERA_SWITCH_ORDER.map((id) => [toSlug(id), id]));
 var PTZ_DIRECTION_BY_ENTITY = Object.fromEntries(PTZ_BUTTONS.map((entity) => [entity, entity.slice(4)]));
 function parseBool(value) {
 	const lower = value.trim().toLowerCase();
@@ -3941,7 +3941,7 @@ function parseAlarmAction(value) {
 	if (lower === "disarm" || lower === "disarmed") return { kind: "disarm" };
 	if (lower === "trigger" || lower === "triggered") return { kind: "trigger" };
 	const withoutPrefix = lower.startsWith("armed_") ? lower.slice(6) : lower.startsWith("arm_") ? lower.slice(4) : lower;
-	const mode = require_ha_broker_source.AlarmArmModeSchema.safeParse(withoutPrefix);
+	const mode = require_ha_instance_settings.AlarmArmModeSchema.safeParse(withoutPrefix);
 	return mode.success ? {
 		kind: "arm",
 		mode: mode.data
@@ -4090,7 +4090,7 @@ var CAP_COMMAND_ROUTES = {
 	},
 	"climate-control": {
 		primary: (deviceId, value) => {
-			const mode = parseEnum(require_ha_broker_source.HvacModeSchema, value);
+			const mode = parseEnum(require_ha_instance_settings.HvacModeSchema, value);
 			return mode === null ? null : {
 				kind: "climate-mode",
 				deviceId,
@@ -4205,7 +4205,7 @@ var CAP_COMMAND_ROUTES = {
 				};
 			},
 			direction: (deviceId, value) => {
-				const direction = parseEnum(require_ha_broker_source.FanDirectionSchema, value);
+				const direction = parseEnum(require_ha_instance_settings.FanDirectionSchema, value);
 				return direction === null ? null : {
 					kind: "fan-direction",
 					deviceId,
@@ -4409,7 +4409,7 @@ var CAP_COMMAND_ROUTES = {
 				};
 			},
 			repeat: (deviceId, value) => {
-				const repeat = parseEnum(require_ha_broker_source.MediaPlayerRepeatSchema, value);
+				const repeat = parseEnum(require_ha_instance_settings.MediaPlayerRepeatSchema, value);
 				return repeat === null ? null : {
 					kind: "media-repeat",
 					deviceId,
@@ -5001,32 +5001,13 @@ async function planDropPublicBaseUrl(ports) {
 		op: "deleteKeys",
 		scope: ADDON_SETTINGS_TABLE,
 		keys: present.map(rowId),
-		precondition: require_ha_broker_source.preconditionOf(Object.fromEntries(present.map((key) => [rowId(key), {
+		precondition: require_ha_instance_settings.preconditionOf(Object.fromEntries(present.map((key) => [rowId(key), {
 			addonId: HA_EXPORT_ADDON_ID,
 			key,
 			value: stored[key]
 		}])))
 	}] };
 }
-//#endregion
-//#region src/ha-export/migrations/index.ts
-/** The `homeassistant-export` catalogue (D987): offered to the engine when the addon initialises. */
-var ADDON_MIGRATIONS = [{
-	meta: {
-		id: "homeassistant-export/2026-11-02-drop-public-base-url",
-		owner: "homeassistant-export",
-		level: "addon-state",
-		seq: 1,
-		dependsOn: [],
-		store: "settings",
-		scope: "cluster",
-		onFailure: "tolerate",
-		bodyKind: "plan",
-		description: "Delete the retired publicBaseUrl setting; each instance now chooses a hub address role",
-		fixtureMark: "the reconcile interval the migration does not know"
-	},
-	plan: planDropPublicBaseUrl
-}];
 process.platform, process.env["SystemRoot"];
 /**
 * The ONE derivation of "a signed, expiring URL".
@@ -5082,65 +5063,6 @@ function verifyExpiringUrl(input) {
 	return (0, node_crypto.timingSafeEqual)(a, b);
 }
 //#endregion
-//#region src/ha-export/media-url.ts
-/**
-* Signed, expiring media links.
-*
-* Images never cross the push transport. Home Assistant is handed a URL
-* and fetches the bytes itself, on demand, which is what keeps a camera
-* with a `last_image` entity from turning every detection into a
-* multi-megabyte POST.
-*
-* The link is signed rather than protected by a session, because the
-* fetcher is HA's own frontend or a phone — neither of which holds a
-* camstack token.
-*
-* The HMAC itself is NOT restated here. It used to be — this module and the
-* notification artifact plane each carried their own copy, because addons never
-* import each other and neither could reach the other's. That reasoning was
-* right and the conclusion was wrong: both now delegate to the single
-* derivation in `@camstack/types/node`, which every addon may depend on. What
-* stays local is policy — the TTL below, and the id this plane signs.
-*
-* Expiry is checked BEFORE the constant-time compare (in the shared verifier):
-* an expired link is refused whether or not its signature is valid, so a leaked
-* URL stops working on its own.
-*/
-/** The settings key that carries one broker's media role (per-instance, like `exportTo:`). */
-function mediaRoleKey(brokerId) {
-	return `mediaRole:${brokerId}`;
-}
-/** A broker's chosen role; anything stored that is not a known role is `internal`. */
-function haMediaRoleOf(store, brokerId) {
-	return store[mediaRoleKey(brokerId)] === "publicEndpoint" ? "publicEndpoint" : "internal";
-}
-/**
-* The base a media link is minted on: the hub's role (D734) — `internal` unless the
-* broker chose `publicEndpoint`. Ranked by `local-network`, never loopback (`null`
-* when the role resolves to nothing): a link Home Assistant cannot open is worse
-* than no image.
-*/
-function haMediaBaseUrl(book, role = "internal") {
-	return book.roles[role].resolved;
-}
-/** brokerId → media base, each broker on ITS role. Pure: the caller reads the palette per use. */
-function mediaBasesByBroker(store, brokerIds, book) {
-	return new Map(brokerIds.map((brokerId) => [brokerId, haMediaBaseUrl(book, haMediaRoleOf(store, brokerId))]));
-}
-/** How long a minted link stays valid. Long enough for HA to render it. */
-var MEDIA_URL_TTL_MS = 360 * 60 * 1e3;
-function signMedia(secret, id, expMs) {
-	return signExpiringUrl(secret, id, expMs);
-}
-function buildMediaUrl(input) {
-	const base = input.baseUrl.replace(/\/+$/, "");
-	const sig = signMedia(input.secret, input.id, input.expMs);
-	return `${base}${input.routePrefix}/${encodeURIComponent(input.id)}?exp=${input.expMs}&sig=${sig}`;
-}
-function verifyMediaSignature(input) {
-	return verifyExpiringUrl(input);
-}
-//#endregion
 //#region src/ha-export/membership.ts
 function devicesForBroker(membership, brokerId) {
 	return membership[brokerId] ?? [];
@@ -5202,10 +5124,19 @@ function pruneBrokers(membership, knownBrokerIds) {
 *
 * A broker that is no longer known is not enabled, whatever the store says:
 * a stale `exportTo:` key for a deleted instance must not resurrect it.
+*
+* The switch is a setting of the INSTANCE (D985): `perBroker` carries each broker's integration
+* settings, and a broker whose integration has an `exportTo` answers from it. A broker whose
+* integration has none yet — the migration has not copied it — falls back to the legacy
+* `exportTo:<brokerId>` key, so the move never flips a switch mid-way.
 */
-function enabledBrokerIds(store, knownBrokerIds) {
-	return knownBrokerIds.filter((brokerId) => store[`exportTo:${brokerId}`] === true);
+function enabledBrokerIds(store, knownBrokerIds, perBroker = NO_INSTANCE_SETTINGS) {
+	return knownBrokerIds.filter((brokerId) => {
+		const own = perBroker.get(brokerId)?.["exportTo"];
+		return typeof own === "boolean" ? own : store[`exportTo:${brokerId}`] === true;
+	});
 }
+var NO_INSTANCE_SETTINGS = /* @__PURE__ */ new Map();
 /** Same brokers, same order, same names — nothing for the form to re-render. */
 function sameBrokers(a, b) {
 	if (a.length !== b.length) return false;
@@ -5259,6 +5190,282 @@ function brokerRefreshPatch(current, next) {
 	};
 }
 //#endregion
+//#region src/ha-export/media-url.ts
+/**
+* Signed, expiring media links.
+*
+* Images never cross the push transport. Home Assistant is handed a URL
+* and fetches the bytes itself, on demand, which is what keeps a camera
+* with a `last_image` entity from turning every detection into a
+* multi-megabyte POST.
+*
+* The link is signed rather than protected by a session, because the
+* fetcher is HA's own frontend or a phone — neither of which holds a
+* camstack token.
+*
+* The HMAC itself is NOT restated here. It used to be — this module and the
+* notification artifact plane each carried their own copy, because addons never
+* import each other and neither could reach the other's. That reasoning was
+* right and the conclusion was wrong: both now delegate to the single
+* derivation in `@camstack/types/node`, which every addon may depend on. What
+* stays local is policy — the TTL below, and the id this plane signs.
+*
+* Expiry is checked BEFORE the constant-time compare (in the shared verifier):
+* an expired link is refused whether or not its signature is valid, so a leaked
+* URL stops working on its own.
+*/
+/** The hub address roles a Home Assistant media link may be minted on. */
+var HA_MEDIA_ROLES = ["internal", "publicEndpoint"];
+/** The settings key that carries one broker's media role (per-instance, like `exportTo:`). */
+function mediaRoleKey(brokerId) {
+	return `mediaRole:${brokerId}`;
+}
+/**
+* A broker's chosen role; anything stored that is not a known role is `internal`. The role is a
+* setting of the INSTANCE (D985): the integration's `mediaRole` answers when it has one, and a
+* broker the migration has not reached falls back to the legacy `mediaRole:<brokerId>` key.
+*/
+function haMediaRoleOf(store, brokerId, perBroker = NO_INSTANCE_SETTINGS) {
+	const own = perBroker.get(brokerId)?.["mediaRole"];
+	return (own !== void 0 ? own : store[mediaRoleKey(brokerId)]) === "publicEndpoint" ? "publicEndpoint" : "internal";
+}
+/**
+* The base a media link is minted on: the hub's role (D734) — `internal` unless the
+* broker chose `publicEndpoint`. Ranked by `local-network`, never loopback (`null`
+* when the role resolves to nothing): a link Home Assistant cannot open is worse
+* than no image.
+*/
+function haMediaBaseUrl(book, role = "internal") {
+	return book.roles[role].resolved;
+}
+/** brokerId → media base, each broker on ITS role. Pure: the caller reads the palette per use. */
+function mediaBasesByBroker(store, brokerIds, book, perBroker = NO_INSTANCE_SETTINGS) {
+	return new Map(brokerIds.map((brokerId) => [brokerId, haMediaBaseUrl(book, haMediaRoleOf(store, brokerId, perBroker))]));
+}
+/** How long a minted link stays valid. Long enough for HA to render it. */
+var MEDIA_URL_TTL_MS = 360 * 60 * 1e3;
+function signMedia(secret, id, expMs) {
+	return signExpiringUrl(secret, id, expMs);
+}
+function buildMediaUrl(input) {
+	const base = input.baseUrl.replace(/\/+$/, "");
+	const sig = signMedia(input.secret, input.id, input.expMs);
+	return `${base}${input.routePrefix}/${encodeURIComponent(input.id)}?exp=${input.expMs}&sig=${sig}`;
+}
+function verifyMediaSignature(input) {
+	return verifyExpiringUrl(input);
+}
+//#endregion
+//#region src/ha-export/migrations/per-broker-flags.ts
+/**
+* Whether the export reaches a Home Assistant instance, and which hub address role its image
+* links use, are facts of THAT instance (D985): they live in the instance's integration settings
+* as `exportTo` and `mediaRole`, not in the addon store as one dynamic key per broker
+* (`exportTo:<brokerId>`, `mediaRole:<brokerId>`).
+*
+* Two migrations:
+*
+* 1. `per-broker-flags-to-integration` (procedure) copies each legacy key to the integration that
+*    links its broker. A flag the integration already has is never overwritten; a key whose
+*    broker has no integration any more (a deleted instance) is skipped, never recreated; two
+*    integrations linking one broker are an ambiguity and throw; a value that is not a boolean /
+*    a known role is skipped (the reader already treats it as off / `internal`).
+* 2. `drop-per-broker-flags` (plan) deletes a legacy key only after a read-back: the integration
+*    must show the same flag. A key the integration disagrees with (its own value was there
+*    first) or whose broker has no integration stays PARKED in place, never deleted.
+*
+* Both are idempotent.
+*/
+var PREFIX = {
+	exportTo: "exportTo:",
+	mediaRole: "mediaRole:"
+};
+var validValue = (flag, value) => flag === "exportTo" ? typeof value === "boolean" : typeof value === "string" && HA_MEDIA_ROLES.some((role) => role === value);
+/** Every legacy key with a value the reader understands, per broker. */
+function legacyFlags(stored) {
+	const out = [];
+	for (const [storeKey, value] of Object.entries(stored)) for (const flag of ["exportTo", "mediaRole"]) {
+		const prefix = PREFIX[flag];
+		if (!storeKey.startsWith(prefix) || storeKey.length === prefix.length) continue;
+		if (validValue(flag, value)) out.push({
+			storeKey,
+			brokerId: storeKey.slice(prefix.length),
+			flag,
+			value
+		});
+	}
+	return out;
+}
+/** The one integration per broker; two integrations linking one broker are an ambiguity. */
+function instanceByBroker(rows) {
+	const out = /* @__PURE__ */ new Map();
+	for (const row of rows) {
+		if (row.brokerId === null) continue;
+		const other = out.get(row.brokerId);
+		if (other !== void 0) throw new Error(`homeassistant-export: integrations ${other.integrationId} and ${row.integrationId} both link broker ${row.brokerId} — nothing copied`);
+		out.set(row.brokerId, row);
+	}
+	return out;
+}
+async function copyFlagsToIntegrations(ports) {
+	const legacy = legacyFlags(await ports.readStored());
+	if (legacy.length === 0) return {
+		outcome: "already-done",
+		summary: { reason: "no-legacy-flags" }
+	};
+	const byBroker = instanceByBroker(await ports.listInstances());
+	const pending = /* @__PURE__ */ new Map();
+	let kept = 0;
+	let skipped = 0;
+	for (const entry of legacy) {
+		const instance = byBroker.get(entry.brokerId);
+		if (instance === void 0) {
+			skipped += 1;
+			continue;
+		}
+		if (entry.flag in instance.settings) {
+			kept += 1;
+			continue;
+		}
+		pending.set(instance.integrationId, {
+			...pending.get(instance.integrationId),
+			[entry.flag]: entry.value
+		});
+	}
+	let copied = 0;
+	let gone = 0;
+	for (const [integrationId, patch] of pending) if (await ports.patchInstanceSettings(integrationId, patch)) copied += Object.keys(patch).length;
+	else gone += 1;
+	return {
+		outcome: copied === 0 ? "already-done" : "done",
+		summary: {
+			copied,
+			kept,
+			skipped,
+			gone
+		}
+	};
+}
+async function planDropPerBrokerFlags(ports) {
+	const legacy = legacyFlags(await ports.readStored());
+	if (legacy.length === 0) return { edits: [] };
+	const byBroker = instanceByBroker(await ports.listInstances());
+	const rowId = (key) => `${HA_EXPORT_ADDON_ID}.${key}`;
+	const drop = [];
+	for (const entry of legacy) {
+		const instance = byBroker.get(entry.brokerId);
+		if (instance === void 0) continue;
+		if (!(entry.flag in instance.settings)) throw new Error(`homeassistant-export: ${entry.storeKey} is not dropped, integration ${instance.integrationId} does not show ${entry.flag}`);
+		if (instance.settings[entry.flag] === entry.value) drop.push(entry);
+	}
+	if (drop.length === 0) return { edits: [] };
+	return { edits: [{
+		op: "deleteKeys",
+		scope: ADDON_SETTINGS_TABLE,
+		keys: drop.map((entry) => rowId(entry.storeKey)),
+		precondition: require_ha_instance_settings.preconditionOf(Object.fromEntries(drop.map((entry) => [rowId(entry.storeKey), {
+			addonId: HA_EXPORT_ADDON_ID,
+			key: entry.storeKey,
+			value: entry.value
+		}])))
+	}] };
+}
+//#endregion
+//#region src/ha-export/migrations/index.ts
+/** The `homeassistant-export` catalogue (D987): offered to the engine when the addon initialises. */
+var ADDON_MIGRATIONS = [
+	{
+		meta: {
+			id: "homeassistant-export/2026-11-02-drop-public-base-url",
+			owner: "homeassistant-export",
+			level: "addon-state",
+			seq: 1,
+			dependsOn: [],
+			store: "settings",
+			scope: "cluster",
+			onFailure: "tolerate",
+			bodyKind: "plan",
+			description: "Delete the retired publicBaseUrl setting; each instance now chooses a hub address role",
+			fixtureMark: "the reconcile interval the migration does not know"
+		},
+		plan: planDropPublicBaseUrl
+	},
+	{
+		meta: {
+			id: "homeassistant-export/2026-11-03-per-broker-flags-to-integration",
+			owner: "homeassistant-export",
+			level: "addon-state",
+			seq: 2,
+			dependsOn: [],
+			store: "settings",
+			scope: "cluster",
+			onFailure: "tolerate",
+			bodyKind: "procedure",
+			description: "Copy each exportTo:<broker> and mediaRole:<broker> key to the settings of the integration that links the broker",
+			fixtureMark: "the broker link stored beside the flags of an integration"
+		},
+		procedure: copyFlagsToIntegrations
+	},
+	{
+		meta: {
+			id: "homeassistant-export/2026-11-03-drop-per-broker-flags",
+			owner: "homeassistant-export",
+			level: "addon-state",
+			seq: 3,
+			dependsOn: ["homeassistant-export/2026-11-03-per-broker-flags-to-integration"],
+			store: "settings",
+			scope: "cluster",
+			onFailure: "tolerate",
+			bodyKind: "plan",
+			description: "Delete the per-broker keys once the integration shows the same flag",
+			fixtureMark: "a legacy flag parked when the integration holds a different one"
+		},
+		plan: planDropPerBrokerFlags
+	}
+];
+//#endregion
+//#region src/ha-export/instance-flags.ts
+var exportKey = (brokerId) => `exportTo:${brokerId}`;
+var KEYS = [{
+	flag: "exportTo",
+	keyOf: exportKey
+}, {
+	flag: "mediaRole",
+	keyOf: mediaRoleKey
+}];
+function splitInstanceKeys(patch, instances) {
+	const claimed = /* @__PURE__ */ new Set();
+	const toInstances = /* @__PURE__ */ new Map();
+	for (const row of instances) {
+		if (row.brokerId === null) continue;
+		for (const { flag, keyOf } of KEYS) {
+			const key = keyOf(row.brokerId);
+			if (!(key in patch)) continue;
+			claimed.add(key);
+			toInstances.set(row.integrationId, {
+				...toInstances.get(row.integrationId),
+				[flag]: patch[key]
+			});
+		}
+	}
+	return {
+		toInstances,
+		rest: Object.fromEntries(Object.entries(patch).filter(([key]) => !claimed.has(key)))
+	};
+}
+/** The form's dynamic keys carrying each instance's own value. */
+function instanceOverlay(instances) {
+	const overlay = {};
+	for (const row of instances) {
+		if (row.brokerId === null) continue;
+		for (const { flag, keyOf } of KEYS) {
+			const value = row.settings[flag];
+			if (value !== void 0) overlay[keyOf(row.brokerId)] = value;
+		}
+	}
+	return overlay;
+}
+//#endregion
 //#region src/ha-export/node-reads.ts
 var UNREAD = {
 	footageUsedBytes: null,
@@ -5970,7 +6177,7 @@ function reduceLastTriggers(rows) {
 function macroOf(className) {
 	const lower = className.toLowerCase();
 	if (EXPORTED_MACROS.includes(lower)) return lower;
-	const mapped = require_ha_broker_source.COCO_TO_MACRO.mapping[lower];
+	const mapped = require_ha_instance_settings.COCO_TO_MACRO.mapping[lower];
 	return typeof mapped === "string" ? mapped : null;
 }
 function iso(timestamp) {
@@ -7119,7 +7326,7 @@ var ExportedEntities = class {
 			this.ports.logger.warn("homeassistant-export: exported entities not reconciled — a list was unanswered", { meta: { error: errMsg$1(err) } });
 			return;
 		}
-		const { dropped } = require_ha_broker_source.pruneDeletedEntities([...this.state.actions.map((e) => ({
+		const { dropped } = require_ha_instance_settings.pruneDeletedEntities([...this.state.actions.map((e) => ({
 			kind: "action",
 			actionId: e.actionId
 		})), ...this.state.targets.map((e) => ({
@@ -7191,7 +7398,7 @@ var ExportedEntities = class {
 		const action = this.state.actions.find((e) => actionEntity(e.actionId) === entity);
 		if (action !== void 0) return {
 			handled: true,
-			applied: (await require_ha_broker_source.runExportedAction(this.ports.api, this.ports.logger, {
+			applied: (await require_ha_instance_settings.runExportedAction(this.ports.api, this.ports.logger, {
 				exporter: EXPORTER,
 				actionId: action.actionId
 			})).status === "started"
@@ -7199,7 +7406,7 @@ var ExportedEntities = class {
 		const target = this.state.targets.find((e) => targetEntity(e.targetId) === entity);
 		if (target !== void 0) return {
 			handled: true,
-			applied: (await require_ha_broker_source.sendToExportedTarget(this.ports.api, this.ports.logger, {
+			applied: (await require_ha_instance_settings.sendToExportedTarget(this.ports.api, this.ports.logger, {
 				exporter: EXPORTER,
 				targetId: target.targetId,
 				notification: { body: value }
@@ -7250,7 +7457,7 @@ var SUPPORTED_DEVICE_KINDS = [
 	"image",
 	"pet-feeder",
 	"hub",
-	...require_ha_broker_source.PLUG_APPLIANCE_TYPES
+	...require_ha_instance_settings.PLUG_APPLIANCE_TYPES
 ];
 //#endregion
 //#region src/ha-export/ha-export.addon.ts
@@ -7320,7 +7527,7 @@ var DEFAULT_CONFIG = {
 		targets: []
 	}
 };
-var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
+var HaExportAddon = class extends require_ha_instance_settings.BaseAddon {
 	links = /* @__PURE__ */ new Map();
 	/** deviceKey → the device it addresses. Rebuilt on every reconcile. */
 	exported = /* @__PURE__ */ new Map();
@@ -7426,8 +7633,11 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 		super({ ...DEFAULT_CONFIG });
 	}
 	async onInitialize() {
-		await this.runMigrations(require_ha_broker_source.defineAddonMigrations(ADDON_MIGRATIONS, { readStored: async () => this.resolveGlobalStore() }));
-		const secret = this.state("haExportMediaSecret", require_ha_broker_source.string(), "");
+		await this.runMigrations(require_ha_instance_settings.defineAddonMigrations(ADDON_MIGRATIONS, {
+			readStored: async () => this.resolveGlobalStore(),
+			...this.instancePorts()
+		}));
+		const secret = this.state("haExportMediaSecret", require_ha_instance_settings.string(), "");
 		const existing = await secret.get();
 		if (existing.length === 0) {
 			const minted = randomSecret();
@@ -7460,41 +7670,56 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 		this.exportedEntities = exportedEntities;
 		return [
 			{
-				capability: require_ha_broker_source.deviceExportCapability,
+				capability: require_ha_instance_settings.deviceExportCapability,
 				provider: {
-					getStatus: async () => this.buildStatus(),
-					listSupportedDeviceKinds: async () => [...SUPPORTED_DEVICE_KINDS],
-					listExposedDevices: async () => exposedDeviceIds(this.config.membership, this.enabledBrokerIds()).map((deviceId) => ({
-						deviceId,
-						exposedAs: brokersExposing(this.config.membership, deviceId).map((brokerId) => this.brokerName(brokerId)).join(", ")
+					getStatus: async (input) => this.buildStatus(this.brokerScope(require_ha_instance_settings.statusInstanceOf(input))),
+					listInstances: async () => this.config.knownBrokers.map((broker) => ({
+						instanceId: broker.id,
+						name: broker.name,
+						enabled: this.enabledBrokerIds().includes(broker.id),
+						kind: "home-assistant"
 					})),
-					exposeDevice: async ({ deviceId }) => this.setMembershipEverywhere(deviceId, true),
-					unexposeDevice: async ({ deviceId }) => this.setMembershipEverywhere(deviceId, false),
+					listSupportedDeviceKinds: async ({ instanceId }) => {
+						this.brokerScope(instanceId);
+						return [...SUPPORTED_DEVICE_KINDS];
+					},
+					listExposedDevices: async ({ instanceId }) => this.exposedDeviceRows(this.brokerScope(instanceId)),
+					exposeDevice: async ({ instanceId, deviceId }) => this.setBrokerMembership(instanceId, deviceId, true),
+					unexposeDevice: async ({ instanceId, deviceId }) => this.setBrokerMembership(instanceId, deviceId, false),
 					listSupportedEntityKinds: async () => [
 						"device",
 						"action",
 						"notifier"
 					],
-					listExposedEntities: async () => {
+					listExposedEntities: async ({ instanceId }) => {
+						const scope = this.brokerScope(instanceId);
 						await exportedEntities.pruneDeleted();
-						return [...exposedDeviceIds(this.config.membership, this.enabledBrokerIds()).map((deviceId) => ({
+						return [...this.exposedDeviceRows(scope).map((row) => ({
 							entity: {
 								kind: "device",
-								deviceId
+								deviceId: row.deviceId
 							},
-							exposedAs: brokersExposing(this.config.membership, deviceId).map((brokerId) => this.brokerName(brokerId)).join(", ")
+							exposedAs: row.exposedAs
 						})), ...exportedEntities.list()];
 					},
-					exposeEntity: async ({ entity }) => entity.kind === "device" ? this.setMembershipEverywhere(entity.deviceId, true) : exportedEntities.expose(entity),
-					unexposeEntity: async ({ entity }) => entity.kind === "device" ? this.setMembershipEverywhere(entity.deviceId, false) : exportedEntities.unexpose(entity),
+					exposeEntity: async ({ instanceId, entity }) => {
+						if (entity.kind === "device") return this.setBrokerMembership(instanceId, entity.deviceId, true);
+						this.brokerScope(instanceId);
+						return exportedEntities.expose(entity);
+					},
+					unexposeEntity: async ({ instanceId, entity }) => {
+						if (entity.kind === "device") return this.setBrokerMembership(instanceId, entity.deviceId, false);
+						this.brokerScope(instanceId);
+						return exportedEntities.unexpose(entity);
+					},
 					getDeviceSettingsContribution: async ({ deviceId }) => this.buildContribution(deviceId),
 					getDeviceLiveContribution: async () => null,
 					applyDeviceSettingsPatch: async ({ deviceId, patch }) => this.applyDeviceSettingsPatch(deviceId, patch)
 				}
 			},
 			{
-				capability: require_ha_broker_source.addonRoutesCapability,
-				provider: require_ha_broker_source.buildAddonRouteProvider(ADDON_ID, [{
+				capability: require_ha_instance_settings.addonRoutesCapability,
+				provider: require_ha_instance_settings.buildAddonRouteProvider(ADDON_ID, [{
 					method: "POST",
 					path: "/command",
 					access: "authenticated",
@@ -7505,27 +7730,56 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 				}])
 			},
 			{
-				capability: require_ha_broker_source.oauthIntegrationCapability,
+				capability: require_ha_instance_settings.oauthIntegrationCapability,
 				provider: { getDescriptor: async () => HOME_ASSISTANT_OAUTH_INTEGRATION }
 			}
 		];
 	}
+	/**
+	* The form of the addon shows each instance's own switch and media role: the values sit on its
+	* integration (D985), overlaid on the legacy keys the store may still hold.
+	*/
+	async getGlobalSettings(overlay, cap, nodeId) {
+		const rows = await require_ha_instance_settings.listInstancesOrNothing(this.instancePorts(), (error) => this.ctx.logger.warn("ha-export: the instance settings could not be read for the form", { meta: { error } }));
+		return super.getGlobalSettings({
+			...overlay,
+			...instanceOverlay(rows)
+		}, cap, nodeId);
+	}
+	/**
+	* An operator write: the `exportTo:` / `mediaRole:` keys go to the integration of their broker
+	* (D985), everything else to the addon store as before. A key whose broker has no integration
+	* stays in the store.
+	*/
+	async updateGlobalSettingsAsOperator(patch, nodeId) {
+		const ports = this.instancePorts();
+		const { toInstances, rest } = splitInstanceKeys(patch, await ports.listInstances());
+		for (const [integrationId, flags] of toInstances) {
+			if (await ports.patchInstanceSettings(integrationId, flags)) continue;
+			throw new Error(`ha-export: integration ${integrationId} is gone — the setting was not saved`);
+		}
+		if (Object.keys(rest).length > 0 || toInstances.size === 0) {
+			await super.updateGlobalSettingsAsOperator(rest, nodeId);
+			return;
+		}
+		await this.onConfigChanged();
+	}
 	async onConfigChanged() {
 		for (const link of this.links.values()) link.client.resetBackoff();
 		await this.reconcile("config-changed");
 		this.startTimer();
 	}
 	wireListeners() {
-		this.subscribe({ category: require_ha_broker_source.EventCategory.DeviceStateChanged }, (event) => {
+		this.subscribe({ category: require_ha_instance_settings.EventCategory.DeviceStateChanged }, (event) => {
 			this.onSliceChanged(event.data);
 		});
-		this.subscribe({ category: require_ha_broker_source.EventCategory.DeviceOnline }, (event) => {
+		this.subscribe({ category: require_ha_instance_settings.EventCategory.DeviceOnline }, (event) => {
 			this.onOnlineChanged(event.data, true);
 		});
-		this.subscribe({ category: require_ha_broker_source.EventCategory.DeviceOffline }, (event) => {
+		this.subscribe({ category: require_ha_instance_settings.EventCategory.DeviceOffline }, (event) => {
 			this.onOnlineChanged(event.data, false);
 		});
-		this.subscribe({ category: require_ha_broker_source.EventCategory.MotionOnMotionChanged }, (event) => {
+		this.subscribe({ category: require_ha_instance_settings.EventCategory.MotionOnMotionChanged }, (event) => {
 			this.onMotion(event.data);
 		});
 		/**
@@ -7534,13 +7788,13 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 		* the entity existed and effectively never moved. It also carries the
 		* window LEVEL, which nothing else on the export path does.
 		*/
-		this.subscribe({ category: require_ha_broker_source.EventCategory.PipelineAudioInferenceResult }, (event) => {
+		this.subscribe({ category: require_ha_instance_settings.EventCategory.PipelineAudioInferenceResult }, (event) => {
 			this.onAudioWindow(event.data);
 		});
-		this.subscribe({ category: require_ha_broker_source.EventCategory.PipelineAnalyticsTrackLifecycle }, (event) => {
+		this.subscribe({ category: require_ha_instance_settings.EventCategory.PipelineAnalyticsTrackLifecycle }, (event) => {
 			this.onTrackLifecycle(event.data);
 		});
-		this.subscribe({ category: require_ha_broker_source.EventCategory.ZoneAnalyticsOccupancyChanged }, (event) => {
+		this.subscribe({ category: require_ha_instance_settings.EventCategory.ZoneAnalyticsOccupancyChanged }, (event) => {
 			this.onZoneOccupancy(event.data);
 		});
 		/**
@@ -7549,11 +7803,11 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 		* rather than a state push.
 		*/
 		for (const category of [
-			require_ha_broker_source.EventCategory.DeviceRegistered,
-			require_ha_broker_source.EventCategory.DeviceUnregistered,
-			require_ha_broker_source.EventCategory.DeviceBindingsChanged,
-			require_ha_broker_source.EventCategory.DeviceMetaChanged,
-			require_ha_broker_source.EventCategory.BrokerStatusChanged
+			require_ha_instance_settings.EventCategory.DeviceRegistered,
+			require_ha_instance_settings.EventCategory.DeviceUnregistered,
+			require_ha_instance_settings.EventCategory.DeviceBindingsChanged,
+			require_ha_instance_settings.EventCategory.DeviceMetaChanged,
+			require_ha_instance_settings.EventCategory.BrokerStatusChanged
 		]) this.subscribe({ category }, () => {
 			this.reconcileSoon();
 		});
@@ -8665,7 +8919,7 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 				*/
 				capSlices: snapshot,
 				itemEntities: items.entities,
-				...require_ha_broker_source.isReadingQuantity(readingQuantity) ? { readingQuantity } : {}
+				...require_ha_instance_settings.isReadingQuantity(readingQuantity) ? { readingQuantity } : {}
 			},
 			heldBack
 		};
@@ -8899,7 +9153,7 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 			maskEnabled: privacySlice["enabled"] === true,
 			audioEnabled: typeof privacySlice["audioEnabled"] === "boolean" ? privacySlice["audioEnabled"] : null
 		};
-		const brokerAudioMuted = sourceNodeId === null ? null : await this.ctx.api.streamBroker.getDeviceAudioMute.query({ deviceId }, require_ha_broker_source.nodePin(sourceNodeId)).then((r) => r.muted).catch((err) => {
+		const brokerAudioMuted = sourceNodeId === null ? null : await this.ctx.api.streamBroker.getDeviceAudioMute.query({ deviceId }, require_ha_instance_settings.nodePin(sourceNodeId)).then((r) => r.muted).catch((err) => {
 			this.ctx.logger.warn("ha-export: could not read broker audio mute, the broker-audio function degrades", {
 				tags: { deviceId },
 				meta: {
@@ -8950,7 +9204,7 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 	* reasoning.
 	*/
 	async refreshBrokers() {
-		const haBrokers = await require_ha_broker_source.listHomeAssistantBrokers((input) => this.ctx.api.broker.list.query(input));
+		const haBrokers = await require_ha_instance_settings.listHomeAssistantBrokers((input) => this.ctx.api.broker.list.query(input));
 		const known = haBrokers.map((broker) => ({
 			id: broker.id,
 			name: broker.name
@@ -9149,7 +9403,20 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 	enabled = [];
 	async refreshEnabledBrokers(known) {
 		const store = await this.resolveGlobalStore();
-		this.enabled = enabledBrokerIds(store, known.map((broker) => broker.id));
+		this.enabled = enabledBrokerIds(store, known.map((broker) => broker.id), await this.readInstanceSettings());
+	}
+	/** The hub's `integrations` capability, as the one reader and writer of an instance's settings. */
+	instancePorts() {
+		return require_ha_instance_settings.haInstanceSettingsPortsOver(this.ctx.api.integrations);
+	}
+	/**
+	* Each broker's integration settings (D985): the switch and the media role of an instance.
+	* A read that fails answers nothing, so every broker falls back to its legacy key and the
+	* failure is logged — never read as "everything off".
+	*/
+	async readInstanceSettings() {
+		const rows = await require_ha_instance_settings.listInstancesOrNothing(this.instancePorts(), (error) => this.ctx.logger.warn("ha-export: the instance settings could not be read — the legacy per-broker keys answer", { meta: { error } }));
+		return rows.length === 0 ? NO_INSTANCE_SETTINGS : require_ha_instance_settings.settingsByBroker(rows);
 	}
 	enabledBrokerIds() {
 		return this.enabled;
@@ -9310,7 +9577,7 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 			}
 			switch (command.kind) {
 				case "camera-function": {
-					const parsed = require_ha_broker_source.CameraSwitchIdSchema.safeParse(command.switchId);
+					const parsed = require_ha_instance_settings.CameraSwitchIdSchema.safeParse(command.switchId);
 					if (!parsed.success) {
 						this.ctx.logger.warn("ha-export: dropping a command for an unknown camera function", {
 							tags: { deviceId: command.deviceId },
@@ -9550,7 +9817,7 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 	async mediaBasesFor(brokerIds, deviceId) {
 		let bases;
 		try {
-			bases = mediaBasesByBroker(await this.resolveGlobalStore(), brokerIds, await this.ctx.api.localNetwork.getAddresses.query());
+			bases = mediaBasesByBroker(await this.resolveGlobalStore(), brokerIds, await this.ctx.api.localNetwork.getAddresses.query(), await this.readInstanceSettings());
 		} catch (err) {
 			this.ctx.logger.debug("ha-export: could not resolve the media base URLs", {
 				tags: { deviceId },
@@ -9568,20 +9835,44 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 		return bases;
 	}
 	/**
-	* The cap-level expose/unexpose applies to EVERY enabled broker.
-	*
-	* The `device-export` cap is the COMMON surface across export targets
-	* and has no notion of a broker; per-broker granularity lives in the
-	* derived Export panel, over the same store. There is exactly one
-	* authority either way.
+	* Every broker this addon knows, enabled or not: a membership write may
+	* target a broker that is switched off (its devices resume when it is turned
+	* back on). A cold `knownBrokers` still counts the enabled ids.
 	*/
-	async setMembershipEverywhere(deviceId, exposed) {
-		let next = this.config.membership;
-		for (const brokerId of this.enabledBrokerIds()) next = setExposed(next, brokerId, deviceId, exposed);
+	knownBrokerIds() {
+		return new Set([...this.config.knownBrokers.map((b) => b.id), ...this.enabledBrokerIds()]);
+	}
+	/**
+	* The brokers a `device-export` read answers over: the named instance, or
+	* (absent) every enabled broker. A broker this addon does not know is
+	* refused, never answered empty.
+	*/
+	brokerScope(instanceId) {
+		if (instanceId === void 0) return this.enabledBrokerIds();
+		if (!this.knownBrokerIds().has(instanceId)) throw new require_ha_instance_settings.ExportInstanceUnknownError("provider-homeassistant", instanceId);
+		return [instanceId];
+	}
+	exposedDeviceRows(scope) {
+		return exposedDeviceIds(this.config.membership, scope).map((deviceId) => ({
+			deviceId,
+			exposedAs: brokersExposing(this.config.membership, deviceId).map((brokerId) => this.brokerName(brokerId)).join(", ")
+		}));
+	}
+	/**
+	* A cap-level expose/unexpose changes ONE broker's membership — the named
+	* instance. There is no write without a target and no "everywhere": the
+	* other brokers' membership is not touched.
+	*/
+	async setBrokerMembership(instanceId, deviceId, exposed) {
+		this.brokerScope(instanceId);
+		const next = setExposed(this.config.membership, instanceId, deviceId, exposed);
 		if (next === this.config.membership) {
 			this.ctx.logger.debug("ha-export: membership already in that state, nothing to do", {
 				tags: { deviceId: Number(deviceId) },
-				meta: { exposed }
+				meta: {
+					exposed,
+					brokerId: instanceId
+				}
 			});
 			return;
 		}
@@ -9590,7 +9881,7 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 			tags: { deviceId: Number(deviceId) },
 			meta: {
 				exposed,
-				brokers: this.enabledBrokerIds()
+				brokerId: instanceId
 			}
 		});
 		await this.reconcile(exposed ? "expose" : "unexpose");
@@ -9744,19 +10035,20 @@ var HaExportAddon = class extends require_ha_broker_source.BaseAddon {
 		await this.reconcile("device-panel");
 		return { success: true };
 	}
-	buildStatus() {
-		const enabled = this.enabledBrokerIds();
-		const healthy = [...this.links.values()].filter((link) => link.client.healthy).length;
-		const linkFailure = [...this.links.values()].map((link) => link.client.failure).filter((failure) => failure !== null)[0]?.text;
+	buildStatus(scope) {
+		const enabled = scope;
+		const links = [...this.links.entries()].filter(([brokerId]) => scope.includes(brokerId)).map(([, link]) => link);
+		const healthy = links.filter((link) => link.client.healthy).length;
+		const linkFailure = links.map((link) => link.client.failure).filter((failure) => failure !== null)[0]?.text;
 		return {
-			linkState: enabled.length === 0 ? "unlinked" : healthy === this.links.size ? "linked" : "error",
+			linkState: enabled.length === 0 ? "unlinked" : healthy === links.length ? "linked" : "error",
 			exposedDeviceCount: exposedDeviceIds(this.config.membership, enabled).length,
 			...linkFailure !== void 0 ? { error: linkFailure } : this.lastError !== void 0 ? { error: this.lastError } : {},
 			setup: {
 				fields: [
 					{
 						label: "Home Assistant instances",
-						value: `${healthy} / ${this.links.size} reachable`
+						value: `${healthy} / ${links.length} reachable`
 					},
 					{
 						label: "Last push failure",