@camstack/addon-provider-homeassistant 1.2.655 → 1.2.657

package/dist/{ha-instance-settings-5Ms7yRju.js → ha-instance-settings-DJXP_6Rg.js}

@@ -5981,7 +5981,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-BkzQdpzF.mjs
+//#region ../types/dist/sleep-Cv4Zmie9.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -6591,7 +6591,7 @@ var NOT_RUN = {
 * throws: an unreachable or refusing engine is logged and reported `declared: false`,
 * because the hub (and this addon's boot) must not hang on a migration.
 */
-async function runAddonMigrations(host, migrations, logger) {
+async function runAddonMigrations(host, migrations, logger, options = {}) {
 	const first = migrations[0];
 	if (first === void 0) return NOT_RUN;
 	const owner = first.meta.owner;
@@ -6620,7 +6620,9 @@ async function runAddonMigrations(host, migrations, logger) {
 		else if (status === "blocked") blocked.push(id);
 		else skipped.push(id);
 	};
+	const selected = options.only === void 0 ? null : new Set(options.only);
 	for (const step of declaration.steps) {
+		if (selected !== null && !selected.has(step.id)) continue;
 		const bound = byId.get(step.id);
 		if (bound === void 0 || step.action === "skip") {
 			skipped.push(step.id);
@@ -7780,14 +7782,18 @@ var BaseAddon = class {
 	* nothing; the boot continues. A migration that FAILED (or was blocked by one)
 	* and declares `onFailure: 'block-owner'` makes this throw, so the addon does not
 	* serve data whose shape it cannot trust; `tolerate` migrations never do.
+	*
+	* ALWAYS pass the whole catalogue; a phase that must run only some of it passes
+	* `{ only: [ids] }` — never a filtered catalogue (the engine would judge the
+	* omitted applied ids "newer").
 	*/
-	async runMigrations(migrations) {
+	async runMigrations(migrations, options) {
 		const api = this.ctx.api.migrations;
 		const report = await runAddonMigrations({
 			declareOwner: (input) => api.declareOwner.mutate(input),
 			startMigration: (input) => api.startMigration.mutate(input),
 			finishMigration: (input) => api.finishMigration.mutate(input)
-		}, migrations, this.ctx.logger);
+		}, migrations, this.ctx.logger, options);
 		if (report.blockOwner.length > 0) throw new AddonMigrationsBlockedError(report.blockOwner);
 		return report;
 	}
@@ -8783,6 +8789,13 @@ var RecordsError = class extends Error {
 		this.detail = detail;
 	}
 };
+/** A write guarded by `ifRev` found another revision (or an existing row for `ifRev: 0`). */
+var RevConflictError = class extends RecordsError {
+	constructor(detail) {
+		super("rev-conflict", detail);
+		this.name = "RevConflictError";
+	}
+};
 /** The keychain could not store or serve a value: explicit, never an empty string. */
 var RecordSecretUnavailableError = class extends RecordsError {
 	constructor(detail) {
@@ -8827,6 +8840,10 @@ var RECORD_SECRET_COLLECTION_PREFIX = "records:";
 * (`collectZodSecretPaths`): dotted keys, `[]` for "each element of this array"
 * (`auth.accessToken`, `headers[].value`).
 *
+* `{}` after a key means "each value of this map" (`applianceSecrets{}`): the map's own key
+* names the value (`applianceSecrets{fridge}`), so no id key is declared and a body that drops a
+* key releases exactly that key's secret.
+*
 * Array elements are matched by a DECLARED id key (`secretArrayKeys`:
 * `{ headers: 'name' }`), never by index, so reordering a list keeps every
 * keychain ref (the same rule as `arrayItemFieldPath`). The concrete path of a
@@ -8839,11 +8856,13 @@ function parseSecretPath(path) {
 	if (path.length === 0) throw new InvalidRecordError("an empty secret path");
 	return path.split(".").map((raw) => {
 		const each = raw.endsWith("[]");
-		const key = each ? raw.slice(0, -2) : raw;
+		const map = raw.endsWith("{}");
+		const key = each || map ? raw.slice(0, -2) : raw;
 		if (key.length === 0) throw new InvalidRecordError(`secret path "${path}" has an empty segment`);
 		return {
 			key,
-			each
+			each,
+			map
 		};
 	});
 }
@@ -8895,6 +8914,22 @@ function mapAt(node, segments, index, walkedKeys, concretePrefix, declared, arra
 			[segment.key]: mapped
 		};
 	}
+	if (segment.map) {
+		if (!isRecord$4(child)) return node;
+		const kept = Object.entries(child).map(([mapKey, value]) => {
+			const concrete = `${concretePrefix}${concretePrefix.length > 0 ? "." : ""}${segment.key}{${encodeURIComponent(mapKey)}}`;
+			if (!last) return [mapKey, mapAt(value, segments, index + 1, keys, concrete, declared, arrayKeys, visit)];
+			return [mapKey, visit({
+				declared,
+				concrete,
+				value
+			})];
+		}).filter(([, value]) => value !== REMOVE_LEAF);
+		return {
+			...node,
+			[segment.key]: Object.fromEntries(kept)
+		};
+	}
 	const concrete = `${concretePrefix}${concretePrefix.length > 0 ? "." : ""}${segment.key}`;
 	if (last) {
 		const replacement = visit({
@@ -9036,7 +9071,8 @@ function isZodSecret(schema) {
 }
 /**
 * Every declared secret path in a config schema: dotted keys, `[]` for "each
-* element of this array" (`connection.password`, `rows[].token`). A declared
+* element of this array" (`connection.password`, `rows[].token`), `{}` for "each value of this
+* map" (`applianceSecrets{}`). A declared
 * object or array is reported as one path and not descended into — everything
 * under it is secret.
 */
@@ -9047,6 +9083,7 @@ function collectZodSecretPaths(schema, prefix = "") {
 		const def = defOf(layer);
 		if (def.type === "object" && def.shape) for (const [key, child] of Object.entries(def.shape)) paths.push(...collectZodSecretPaths(child, prefix ? `${prefix}.${key}` : key));
 		else if (def.type === "array" && def.element) paths.push(...collectZodSecretPaths(def.element, `${prefix}[]`));
+		else if (def.type === "record" && def.valueType) paths.push(...collectZodSecretPaths(def.valueType, `${prefix}{}`));
 		else if (def.type === "union" && def.options) for (const option of def.options) paths.push(...collectZodSecretPaths(option, prefix));
 		else if (def.type === "intersection") {
 			if (def.left) paths.push(...collectZodSecretPaths(def.left, prefix));
@@ -13423,11 +13460,49 @@ function buildCapturingReply(envelope) {
 	};
 	return wrapper;
 }
+/**
+* `RecordIntegrationInstances` - the `integration-instances` provider over ONE
+* entry kind, so an addon that holds a connection serves it in ~30 lines.
+*
+* Every instance is one record of the addon's own kind, keyed by the
+* `integrations` registry id. The records door does the secret work: a field the
+* kind marks `.meta({ secret: true })` is a keychain marker bound to the row, so
+* deleting the row deletes the secret, and one row's value is never another's.
+*
+* Patch rules for a secret (`updateInstance`): omitted, `''`, the redaction
+* token or the view the form was given KEEP the stored secret;
+* `{ $secretClear: true }` clears it; any other string replaces it.
+*/
 /** The most instances one addon lists (an integrations page, not a table). */
 var INSTANCES_LIST_MAX = 1e3;
 /** The keys of the kind's secret fields that sit at the top level of the body. */
 function topLevelSecretKeys(paths) {
-	return new Set(paths.filter((p) => !p.includes(".") && !p.includes("[")));
+	return new Set(paths.filter((p) => !p.includes(".") && !p.includes("[") && !p.includes("{")));
+}
+/** The keys of the kind's top-level MAPS whose values are secrets (`applianceSecrets{}`). */
+function secretMapKeys(paths) {
+	return new Set(paths.filter((p) => p.endsWith("{}") && !p.slice(0, -2).match(/[.[{]/)).map((p) => p.slice(0, -2)));
+}
+/**
+* A patch value for a map of secrets: an entry that is omitted, `''`, the redaction token or the
+* view the form was given KEEPS its stored secret (it is left out of the merge); `{ $secretClear }`
+* or `null` removes the entry; any other string replaces it. Null when nothing is left to merge.
+*/
+function secretMapPatch(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+	const out = {};
+	for (const [key, entry] of Object.entries(value)) if (entry === null || isSecretClear(entry)) out[key] = null;
+	else if (typeof entry === "string" && entry !== "" && entry !== "__camstack_redacted__" && !isSecretFieldView(entry)) out[key] = entry;
+	return Object.keys(out).length > 0 ? out : null;
+}
+/** Does the kind's body schema carry an `enabled` field? */
+function declaresEnabled(kind) {
+	const json = toJSONSchema(kind.schema, {
+		unrepresentable: "any",
+		io: "input"
+	});
+	const properties = Reflect.get(json, "properties");
+	return typeof properties === "object" && properties !== null && "enabled" in properties;
 }
 var RecordIntegrationInstances = class {
 	records;
@@ -13435,14 +13510,20 @@ var RecordIntegrationInstances = class {
 	hooks;
 	handle;
 	secretKeys;
+	secretMaps;
 	nameField;
+	/** The `integrations` registry owns the on/off switch (`role: devices`); the body has none. */
+	registryOwnsEnabled;
 	constructor(records, kind, hooks) {
 		this.records = records;
 		this.kind = kind;
 		this.hooks = hooks;
 		this.handle = records.kind(kind);
 		this.secretKeys = topLevelSecretKeys(kind.declaration.secretPaths);
+		this.secretMaps = secretMapKeys(kind.declaration.secretPaths);
 		this.nameField = kind.declaration.entry?.nameField ?? "name";
+		this.registryOwnsEnabled = hooks.description.role === "devices";
+		if (this.registryOwnsEnabled && declaresEnabled(kind)) throw new Error(`kind "${kind.name}": the integrations registry owns the on/off switch of a role "devices" addon, so the body must not declare "enabled"`);
 	}
 	/**
 	* One instance read for the addon's own runtime; null when absent. When the keychain is
@@ -13493,7 +13574,7 @@ var RecordIntegrationInstances = class {
 			id: record.id,
 			name: typeof rawName === "string" ? rawName : record.id,
 			configured: this.hooks.configured(record.data),
-			enabled: record.data.enabled !== false,
+			...this.registryOwnsEnabled ? {} : { enabled: record.data.enabled !== false },
 			formValues: shown,
 			...kind !== void 0 ? { kind } : {},
 			...health?.status !== void 0 ? { status: health.status } : {},
@@ -13523,32 +13604,36 @@ var RecordIntegrationInstances = class {
 			id: minted,
 			data: this.hooks.initialBody(name, kind)
 		}, { ifRev: 0 });
-		await this.hooks.onChanged?.(minted);
+		await this.hooks.onChanged?.(minted, "created");
 		return { id: minted };
 	};
 	updateInstance = async ({ id, name, values }) => {
 		const patch = {};
 		for (const [key, value] of Object.entries(values)) {
 			if (value === void 0) continue;
-			if (!this.secretKeys.has(key)) patch[key] = value;
+			if (this.secretMaps.has(key)) {
+				const entries = secretMapPatch(value);
+				if (entries !== null) patch[key] = entries;
+			} else if (!this.secretKeys.has(key)) patch[key] = value;
 			else if (isSecretClear(value)) patch[key] = null;
 			else if (typeof value === "string" && value !== "" && value !== "__camstack_redacted__" && !isSecretFieldView(value)) patch[key] = value;
 		}
 		if (name !== void 0) patch[this.nameField] = name;
 		await this.handle.patch(id, patch);
-		await this.hooks.onChanged?.(id);
+		await this.hooks.onChanged?.(id, "updated");
 		return { ok: true };
 	};
 	/** The switch lives in the record body; the addon is told so it applies it (D996). */
 	setInstanceEnabled = async ({ id, enabled }) => {
+		if (this.registryOwnsEnabled) throw new Error(`instance "${id}": the integrations registry owns the on/off switch of this addon; set it with integrations.update`);
 		await this.handle.patch(id, { enabled });
-		await this.hooks.onChanged?.(id);
+		await this.hooks.onChanged?.(id, "enabled");
 		return { ok: true };
 	};
 	/** The row and its keychain refs go together (the records door). */
 	deleteInstance = async ({ id }) => {
 		await this.handle.delete(id);
-		await this.hooks.onChanged?.(id);
+		await this.hooks.onChanged?.(id, "deleted");
 		return { ok: true };
 	};
 	testInstance = async (input) => {
@@ -14646,7 +14731,13 @@ var MigrationLedgerEntrySchema = object({
 	* joined by the engine from the catalogues it knows this boot. Absent when no
 	* catalogue lists the id (a newer database).
 	*/
-	meta: MigrationMetaSchema.optional()
+	meta: MigrationMetaSchema.optional(),
+	/**
+	* Set when this is an applied row of an addon owner whose catalogue the answering
+	* process has not loaded (the owner has not declared yet): the row is applied, the
+	* process just cannot judge it. Never `skipped-newer` — that needs the owner loaded.
+	*/
+	ownerNotLoaded: boolean().optional()
 });
 /** A catalogued migration that is not applied, with where it stands. */
 var MigrationPendingEntrySchema = object({
@@ -56775,6 +56866,21 @@ var IntegrationInstanceKindSchema = object({
 	disconnectPath: string().min(1).optional()
 });
 var IntegrationInstanceDescriptionSchema = object({
+	/** What the instances are for the Integrations page; see {@link IntegrationInstanceRoleSchema}. */
+	role: _enum([
+		"devices",
+		"services",
+		"both"
+	]),
+	/** How the devices of an instance are found; absent means `{ mode: 'none' }`. */
+	discovery: object({
+		mode: _enum([
+			"none",
+			"lan",
+			"account"
+		]),
+		scopedToInstance: boolean()
+	}).optional(),
 	/** `single`: at most one instance can exist (Loki). `multiple`: an account each. */
 	instanceMode: IntegrationInstanceModeSchema,
 	/** What the instance is, for the UI (`destination`, `relay`, `account`). */
@@ -56814,10 +56920,11 @@ var IntegrationInstanceSchema = object({
 	/** The addon's own rule (an URL is present, a client id is present...). */
 	configured: boolean(),
 	/**
-	* The instance's own on/off switch (D996): always present, derived from the record body
-	* (`enabled !== false`, so a row written before the field existed is on).
+	* The instance's own on/off switch (D996), derived from the record body (`enabled !== false`,
+	* so a row written before the field existed is on). Absent when the `integrations` registry
+	* owns the switch (`describe().role` is `devices`): read it from the registry row.
 	*/
-	enabled: boolean(),
+	enabled: boolean().optional(),
 	/** The kind of this instance (one of `describe().kinds[].id`), when the provider has kinds. */
 	kind: string().optional(),
 	/** Values for the instance form; a secret is a `SecretFieldView`, never text. */
@@ -98300,21 +98407,6 @@ function haInstanceSettingsPortsOver(api) {
 		}
 	};
 }
-/** The brokerId → settings view of the instances: what a reader keeps per broker. */
-function settingsByBroker(rows) {
-	const out = /* @__PURE__ */ new Map();
-	for (const row of rows) if (row.brokerId !== null) out.set(row.brokerId, row.settings);
-	return out;
-}
-/** Read the instances, or report why not and answer nothing (a reader falls back to the legacy key). */
-async function listInstancesOrNothing(ports, onError) {
-	try {
-		return await ports.listInstances();
-	} catch (err) {
-		onError(errMsg(err));
-		return [];
-	}
-}
 //#endregion
 Object.defineProperty(exports, "AlarmArmModeSchema", {
 	enumerable: true,
@@ -98472,6 +98564,12 @@ Object.defineProperty(exports, "RecordSecretUnavailableError", {
 		return RecordSecretUnavailableError;
 	}
 });
+Object.defineProperty(exports, "RevConflictError", {
+	enumerable: true,
+	get: function() {
+		return RevConflictError;
+	}
+});
 Object.defineProperty(exports, "TargetSchema", {
 	enumerable: true,
 	get: function() {
@@ -98808,12 +98906,6 @@ Object.defineProperty(exports, "listHomeAssistantBrokers", {
 		return listHomeAssistantBrokers;
 	}
 });
-Object.defineProperty(exports, "listInstancesOrNothing", {
-	enumerable: true,
-	get: function() {
-		return listInstancesOrNothing;
-	}
-});
 Object.defineProperty(exports, "literal", {
 	enumerable: true,
 	get: function() {
@@ -98994,12 +99086,6 @@ Object.defineProperty(exports, "sendToExportedTarget", {
 		return sendToExportedTarget;
 	}
 });
-Object.defineProperty(exports, "settingsByBroker", {
-	enumerable: true,
-	get: function() {
-		return settingsByBroker;
-	}
-});
 Object.defineProperty(exports, "smokeCapability", {
 	enumerable: true,
 	get: function() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-homeassistant",
-  "version": "1.2.655",
+  "version": "1.2.657",
   "description": "Home Assistant device provider addon for CamStack",
   "keywords": [
     "camstack",
@@ -134,7 +134,7 @@
       "description": "Device provider (import) + native entity export (push). Two addons, one bundle, separate processes."
     },
     "requires": {
-      "server": ">=1.2.761"
+      "server": ">=1.2.763"
     }
   },
   "files": [