@camstack/addon-provider-homeassistant 1.2.656 → 1.2.658

package/CHANGELOG.md

@@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.2.658] - 2026-11-04
+
+### Changed
+
+- Fixed the Home Assistant export migration reading every switch as off after the instances moved to typed records; it now reads the legacy integration row and refuses when that row is unreadable.
+- Image links sent to Home Assistant now prefer the public endpoint (falling back to the internal address when none is set), so notifications show images away from home.
+
+## [1.2.657] - 2026-11-04
+
+### Changed
+
+- Home Assistant broker migrations no longer read as 'skipped-newer' (and no false 'Database is newer' alert) after the addon boots
+
 ## [1.2.656] - 2026-11-04
 
 ### Changed

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_ha_instance_settings = require("./ha-instance-settings-Dm0tU8iv.js");
+const require_ha_instance_settings = require("./ha-instance-settings-CRvQ5rH6.js");
 let node_crypto = require("node:crypto");
 let node_zlib = require("node:zlib");
 //#region src/ha-admin-link.ts
@@ -8966,7 +8966,7 @@ var HaProviderAddon = class HaProviderAddon extends require_ha_instance_settings
 			onChanged: (id) => this.syncBrokerRuntime(id),
 			probe: (settings) => this.requireRegistry().testSettings(settings)
 		});
-		await this.runMigrations(require_ha_instance_settings.defineAddonMigrations(ADDON_MIGRATIONS.filter((m) => m.meta.id === FLATTEN_BROKER_RECORDS_ID), this.flattenPorts(records)));
+		await this.runMigrations(require_ha_instance_settings.defineAddonMigrations(ADDON_MIGRATIONS, this.flattenPorts(records)), { only: [FLATTEN_BROKER_RECORDS_ID] });
 		this.activeBrokers = await this.loadPersistedBrokers();
 		this.registry = new HaBrokerRegistry(this.ctx.logger, this.ctx.eventBus);
 		this.registry.setOnBrokerConnected((brokerId) => {
@@ -8983,7 +8983,7 @@ var HaProviderAddon = class HaProviderAddon extends require_ha_instance_settings
 			this.reconcileAllConnectedBrokers();
 		}, HaProviderAddon.RESYNC_INTERVAL_MS);
 		this.ctx.logger.info("ha provider initialised", { meta: { brokerCount: this.activeBrokers.length } });
-		await this.runMigrations(require_ha_instance_settings.defineAddonMigrations(ADDON_MIGRATIONS.filter((m) => m.meta.id !== FLATTEN_BROKER_RECORDS_ID), this.flattenPorts(records)));
+		await this.runMigrations(require_ha_instance_settings.defineAddonMigrations(ADDON_MIGRATIONS, this.flattenPorts(records)), { only: ADDON_MIGRATIONS.map((m) => m.meta.id).filter((id) => id !== FLATTEN_BROKER_RECORDS_ID) });
 		await this.reconcileIntegrationsToBrokers();
 		this.subscribeIntegrationLifecycle();
 		return [

package/dist/addon.mjs

@@ -1,4 +1,4 @@
-import { $ as fanControlCapability, $t as createEvent, A as bestLocationMatch, At as runningFromMediaPlayer, B as climateControlCapability, Bt as tryConvertDelta, C as accessoriesCapability, Ct as pressureSensorCapability, D as ambientLightSensorCapability, Dt as resolveAttachmentUrls, E as alarmPanelCapability, Et as quantityFromUnit, F as buildAddonRouteProvider, Ft as smokeCapability, G as contactCapability, Gt as vibrationCapability, H as connectivityCapability, Ht as updateCapability, I as buildDeviceAdminUrl, J as deviceAdminLinkCapability, K as controlCapability, Kt as waterHeaterCapability, L as buttonCapability, Lt as switchCapability, M as boardKeySourceCapability, Mt as runningStateCapability, N as brightnessCapability, Nt as scriptRunnerCapability, O as automationControlCapability, P as brokerCapability, Q as eventEmitterCapability, Qt as baseUnitOf, R as calendarSourceCapability, Rt as tamperCapability, S as TargetSchema, Sn as EventCategory, St as presenceCapability, T as airQualitySensorCapability, Tt as publicEndpointReaderFrom, Ut as vacuumControlCapability, V as colorCapability, Vt as tryConvertUnit, Wt as valveCapability, Xt as RecordSecretUnavailableError, Y as deviceAdoptionCapability, Z as enumSensorCapability, _n as url, at as humiditySensorCapability, b as RUNNING_STATE_COLD, bn as DeviceType, bt as preconditionOf, cn as boolean, ct as integrationInstancesCapability, dn as number, dt as mediaPlayerCapability, en as defineAddonMigrations, et as flattenNestedRecords, fn as object, ft as motionCapability, gn as unknown, gt as numericSensorCapability, hn as union, ht as notifierCapability, it as humidifierCapability, j as binaryCapability, jt as runningFromVacuumState, k as batteryCapability, kt as runningFromLawnMower, ln as discriminatedUnion, lt as lawnMowerControlCapability, m as EnumSensorDateTimeFormatSchema, mn as string, mt as notificationOutputCapability, n as HA_BROKER_KIND, nn as defineRecordKinds, nt as floodCapability, o as BaseDevice, on as _enum, ot as imageCapability, pn as record, pt as normalizeUnit, q as coverCapability, qt as weatherCapability, rn as entryBody, rt as gasCapability, s as BaseDeviceProvider, sn as array, st as ingestReading, t as haInstanceSettingsPortsOver, tn as defineEntryKind, tt as flattenPortsOver, un as literal, ut as lockControlCapability, vn as DeviceFeature, vt as parseAdminBase, w as addonRoutesCapability, x as RecordIntegrationInstances, xn as errMsg, xt as prepareNotification, yn as DeviceRole, yt as powerMeterCapability, z as carbonMonoxideCapability, zt as temperatureSensorCapability } from "./ha-instance-settings-EQ5Ey3Q-.mjs";
+import { $ as fanControlCapability, $t as createEvent, A as bestLocationMatch, At as runningFromMediaPlayer, B as climateControlCapability, Bt as tryConvertDelta, C as accessoriesCapability, Ct as pressureSensorCapability, D as ambientLightSensorCapability, Dt as resolveAttachmentUrls, E as alarmPanelCapability, Et as quantityFromUnit, F as buildAddonRouteProvider, Ft as smokeCapability, G as contactCapability, Gt as vibrationCapability, H as connectivityCapability, Ht as updateCapability, I as buildDeviceAdminUrl, J as deviceAdminLinkCapability, K as controlCapability, Kt as waterHeaterCapability, L as buttonCapability, Lt as switchCapability, M as boardKeySourceCapability, Mt as runningStateCapability, N as brightnessCapability, Nt as scriptRunnerCapability, O as automationControlCapability, P as brokerCapability, Q as eventEmitterCapability, Qt as baseUnitOf, R as calendarSourceCapability, Rt as tamperCapability, S as TargetSchema, Sn as EventCategory, St as presenceCapability, T as airQualitySensorCapability, Tt as publicEndpointReaderFrom, Ut as vacuumControlCapability, V as colorCapability, Vt as tryConvertUnit, Wt as valveCapability, Xt as RecordSecretUnavailableError, Y as deviceAdoptionCapability, Z as enumSensorCapability, _n as url, at as humiditySensorCapability, b as RUNNING_STATE_COLD, bn as DeviceType, bt as preconditionOf, cn as boolean, ct as integrationInstancesCapability, dn as number, dt as mediaPlayerCapability, en as defineAddonMigrations, et as flattenNestedRecords, fn as object, ft as motionCapability, gn as unknown, gt as numericSensorCapability, hn as union, ht as notifierCapability, it as humidifierCapability, j as binaryCapability, jt as runningFromVacuumState, k as batteryCapability, kt as runningFromLawnMower, ln as discriminatedUnion, lt as lawnMowerControlCapability, m as EnumSensorDateTimeFormatSchema, mn as string, mt as notificationOutputCapability, n as HA_BROKER_KIND, nn as defineRecordKinds, nt as floodCapability, o as BaseDevice, on as _enum, ot as imageCapability, pn as record, pt as normalizeUnit, q as coverCapability, qt as weatherCapability, rn as entryBody, rt as gasCapability, s as BaseDeviceProvider, sn as array, st as ingestReading, t as haInstanceSettingsPortsOver, tn as defineEntryKind, tt as flattenPortsOver, un as literal, ut as lockControlCapability, vn as DeviceFeature, vt as parseAdminBase, w as addonRoutesCapability, x as RecordIntegrationInstances, xn as errMsg, xt as prepareNotification, yn as DeviceRole, yt as powerMeterCapability, z as carbonMonoxideCapability, zt as temperatureSensorCapability } from "./ha-instance-settings-qhCNJbbn.mjs";
 import { randomUUID } from "node:crypto";
 import { brotliCompressSync, deflateSync, gzipSync } from "node:zlib";
 //#region src/ha-admin-link.ts
@@ -8945,7 +8945,7 @@ var HaProviderAddon = class HaProviderAddon extends BaseDeviceProvider {
 			onChanged: (id) => this.syncBrokerRuntime(id),
 			probe: (settings) => this.requireRegistry().testSettings(settings)
 		});
-		await this.runMigrations(defineAddonMigrations(ADDON_MIGRATIONS.filter((m) => m.meta.id === FLATTEN_BROKER_RECORDS_ID), this.flattenPorts(records)));
+		await this.runMigrations(defineAddonMigrations(ADDON_MIGRATIONS, this.flattenPorts(records)), { only: [FLATTEN_BROKER_RECORDS_ID] });
 		this.activeBrokers = await this.loadPersistedBrokers();
 		this.registry = new HaBrokerRegistry(this.ctx.logger, this.ctx.eventBus);
 		this.registry.setOnBrokerConnected((brokerId) => {
@@ -8962,7 +8962,7 @@ var HaProviderAddon = class HaProviderAddon extends BaseDeviceProvider {
 			this.reconcileAllConnectedBrokers();
 		}, HaProviderAddon.RESYNC_INTERVAL_MS);
 		this.ctx.logger.info("ha provider initialised", { meta: { brokerCount: this.activeBrokers.length } });
-		await this.runMigrations(defineAddonMigrations(ADDON_MIGRATIONS.filter((m) => m.meta.id !== FLATTEN_BROKER_RECORDS_ID), this.flattenPorts(records)));
+		await this.runMigrations(defineAddonMigrations(ADDON_MIGRATIONS, this.flattenPorts(records)), { only: ADDON_MIGRATIONS.map((m) => m.meta.id).filter((id) => id !== FLATTEN_BROKER_RECORDS_ID) });
 		await this.reconcileIntegrationsToBrokers();
 		this.subscribeIntegrationLifecycle();
 		return [

package/dist/ha-export/ha-export.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_ha_instance_settings = require("../ha-instance-settings-Dm0tU8iv.js");
+const require_ha_instance_settings = require("../ha-instance-settings-CRvQ5rH6.js");
 let node_crypto = require("node:crypto");
 require("node:zlib");
 let node_fs = require("node:fs");
@@ -5090,13 +5090,21 @@ function verifyExpiringUrl(input) {
 /** The hub address roles a Home Assistant media link may be minted on. */
 var HA_MEDIA_ROLES = ["internal", "publicEndpoint"];
 /**
-* The base a media link is minted on: the hub's role (D734) — `internal` unless the
-* broker chose `publicEndpoint`. Ranked by `local-network`, never loopback (`null`
-* when the role resolves to nothing): a link Home Assistant cannot open is worse
-* than no image.
+* The base a media link is minted on: the hub's role (D734) the broker chose. Links reach
+* Home Assistant notifications on phones away from home, so a new broker chooses `publicEndpoint`;
+* when that resolves to nothing the `internal` address answers instead (a LAN Home Assistant still
+* gets an image). A broker that chose `internal` never falls back to public. Ranked by
+* `local-network`, never loopback (`null` when nothing resolves): a link Home Assistant cannot
+* open is worse than no image.
 */
-function haMediaBaseUrl(book, role = "internal") {
-	return book.roles[role].resolved;
+function haMediaBaseUrl(book, role = "publicEndpoint") {
+	const chosen = book.roles[role].resolved;
+	if (chosen !== null || role !== "publicEndpoint") return chosen;
+	return book.roles.internal.resolved;
+}
+/** True when `haMediaBaseUrl` answered with the internal address because the public endpoint was chosen but unset. */
+function usedInternalFallback(book, role) {
+	return role === "publicEndpoint" && book.roles.publicEndpoint.resolved === null && book.roles.internal.resolved !== null;
 }
 /** brokerId → media base, each broker on ITS role. Pure: the caller reads the palette per use. */
 function mediaBasesByBroker(brokerIds, book, roleOf) {
@@ -5279,6 +5287,8 @@ function integrationByBroker(rows, warn) {
 /** Every broker the old shape has something for, with the value the old reader would have used. */
 function legacyLinks(stored, rows, warn) {
 	const membership = membershipOf$1(stored[MEMBERSHIP_KEY]);
+	const unreadable = rows.find((row) => Object.keys(row.settings).length === 0);
+	if (unreadable !== void 0 && membership.size > 0) throw new Error(`the settings of integration ${unreadable.integrationId} read as empty; the export switch cannot be carried from an unreadable source, nothing was written`);
 	const integrations = integrationByBroker(rows, warn);
 	const brokers = new Set(membership.keys());
 	for (const key of Object.keys(stored)) for (const prefix of [EXPORT_PREFIX, ROLE_PREFIX]) if (key.startsWith(prefix) && key.length > prefix.length) brokers.add(key.slice(prefix.length));
@@ -5472,12 +5482,12 @@ var haExportLinksKind = require_ha_instance_settings.defineEntryKind(HA_EXPORT_L
 	schema: HaExportLinksBodySchema,
 	writeTrigger: "an operator switches the export of a Home Assistant instance, picks its image-link address, or exports a device to it"
 });
-/** A link the operator has not touched: off, on the internal address, no device. */
+/** A link the operator has not touched: off, on the public endpoint, no device. */
 function defaultLinks(name) {
 	return {
 		name,
 		exportTo: false,
-		mediaRole: "internal",
+		mediaRole: "publicEndpoint",
 		devices: []
 	};
 }
@@ -5521,7 +5531,7 @@ var ExportLinks = class ExportLinks {
 		return this.rows.get(brokerId)?.exportTo === true;
 	}
 	mediaRole(brokerId) {
-		return this.rows.get(brokerId)?.mediaRole ?? "internal";
+		return this.rows.get(brokerId)?.mediaRole ?? "publicEndpoint";
 	}
 	/** brokerId → exported device ids, for the brokers that export at least one. */
 	membership() {
@@ -8247,6 +8257,7 @@ var HaExportAddon = class extends require_ha_instance_settings.BaseAddon {
 	}
 	/** deviceId:cap:field already reported. Bounded by devices × mapped caps. */
 	warnedCapFields = /* @__PURE__ */ new Set();
+	warnedMediaFallback = /* @__PURE__ */ new Set();
 	warnOnce(deviceId, capName, field, line) {
 		const key = `${deviceId}:${capName}:${field}`;
 		if (this.warnedCapFields.has(key)) return;
@@ -10023,14 +10034,24 @@ var HaExportAddon = class extends require_ha_instance_settings.BaseAddon {
 	}
 	/**
 	* Each broker's media base, read per use: the palette's role the broker chose
-	* (the `ha-export-links` record's `mediaRole`, `internal` by default). A role that resolves to nothing
+	* (the `ha-export-links` record's `mediaRole`, `publicEndpoint` by default, internal when none is set). A role that resolves to nothing
 	* is `null` and says so — the image entities then carry no value, which reads as
 	* empty rather than as a broken link.
 	*/
 	async mediaBasesFor(brokerIds, deviceId) {
 		let bases;
 		try {
-			bases = mediaBasesByBroker(brokerIds, await this.ctx.api.localNetwork.getAddresses.query(), (brokerId) => this.book().mediaRole(brokerId));
+			const answer = await this.ctx.api.localNetwork.getAddresses.query();
+			bases = mediaBasesByBroker(brokerIds, answer, (brokerId) => this.book().mediaRole(brokerId));
+			for (const brokerId of brokerIds) {
+				if (this.warnedMediaFallback.has(brokerId)) continue;
+				if (!usedInternalFallback(answer, this.book().mediaRole(brokerId))) continue;
+				this.warnedMediaFallback.add(brokerId);
+				this.ctx.logger.info("ha-export: no public endpoint is set, so image links use the internal address", {
+					tags: { deviceId },
+					meta: { brokerId }
+				});
+			}
 		} catch (err) {
 			this.ctx.logger.debug("ha-export: could not resolve the media base URLs", {
 				tags: { deviceId },
@@ -10127,7 +10148,7 @@ var HaExportAddon = class extends require_ha_instance_settings.BaseAddon {
 				id: "ha-export-transport",
 				title: "Connection",
 				titleKey: "provider-homeassistant:globalSettings.s_ha-export-transport.title",
-				description: "The hub address each Home Assistant instance fetches image links from. Internal is the address flagged Internal on the Network page; choose Public endpoint for an instance outside your network.",
+				description: "The hub address each Home Assistant instance fetches image links from. Public endpoint is the default, so notifications show images away from home; when none is set the internal address is used. Choose Internal to never use the public endpoint.",
 				columns: 1,
 				fields: this.config.knownBrokers.map((broker) => ({
 					type: "select",
@@ -10140,7 +10161,7 @@ var HaExportAddon = class extends require_ha_instance_settings.BaseAddon {
 						value: "publicEndpoint",
 						label: "Public endpoint (reachable from outside)"
 					}],
-					default: "internal"
+					default: "publicEndpoint"
 				}))
 			}] : [],
 			{

package/dist/ha-export/ha-export.addon.mjs

@@ -1,4 +1,4 @@
-import { F as buildAddonRouteProvider, It as statusInstanceOf, Jt as BaseAddon, Ot as runExportedAction, Pt as sendToExportedTarget, Qt as baseUnitOf, Sn as EventCategory, U as consumableFormOf, W as consumableKindOf, X as deviceExportCapability, Zt as RevConflictError, _ as HvacModeSchema, _t as oauthIntegrationCapability, a as AlarmArmModeSchema, an as nodePin, bt as preconditionOf, c as CAMERA_SWITCH_ORDER, cn as boolean, d as ConsumableFormSchema, en as defineAddonMigrations, f as ConsumableItemSchema, fn as object, g as FanDirectionSchema, gn as unknown, h as ExportInstanceUnknownError, i as listHomeAssistantBrokers, in as isReadingQuantity, l as COCO_TO_MACRO, mn as string, on as _enum, p as ConsumableStatusSchema, sn as array, t as haInstanceSettingsPortsOver, tn as defineEntryKind, u as CameraSwitchIdSchema, v as MediaPlayerRepeatSchema, w as addonRoutesCapability, wt as pruneDeletedEntities, y as PLUG_APPLIANCE_TYPES } from "../ha-instance-settings-EQ5Ey3Q-.mjs";
+import { F as buildAddonRouteProvider, It as statusInstanceOf, Jt as BaseAddon, Ot as runExportedAction, Pt as sendToExportedTarget, Qt as baseUnitOf, Sn as EventCategory, U as consumableFormOf, W as consumableKindOf, X as deviceExportCapability, Zt as RevConflictError, _ as HvacModeSchema, _t as oauthIntegrationCapability, a as AlarmArmModeSchema, an as nodePin, bt as preconditionOf, c as CAMERA_SWITCH_ORDER, cn as boolean, d as ConsumableFormSchema, en as defineAddonMigrations, f as ConsumableItemSchema, fn as object, g as FanDirectionSchema, gn as unknown, h as ExportInstanceUnknownError, i as listHomeAssistantBrokers, in as isReadingQuantity, l as COCO_TO_MACRO, mn as string, on as _enum, p as ConsumableStatusSchema, sn as array, t as haInstanceSettingsPortsOver, tn as defineEntryKind, u as CameraSwitchIdSchema, v as MediaPlayerRepeatSchema, w as addonRoutesCapability, wt as pruneDeletedEntities, y as PLUG_APPLIANCE_TYPES } from "../ha-instance-settings-qhCNJbbn.mjs";
 import { createHmac, timingSafeEqual } from "node:crypto";
 import "node:zlib";
 import "node:fs";
@@ -5055,13 +5055,21 @@ function verifyExpiringUrl(input) {
 /** The hub address roles a Home Assistant media link may be minted on. */
 var HA_MEDIA_ROLES = ["internal", "publicEndpoint"];
 /**
-* The base a media link is minted on: the hub's role (D734) — `internal` unless the
-* broker chose `publicEndpoint`. Ranked by `local-network`, never loopback (`null`
-* when the role resolves to nothing): a link Home Assistant cannot open is worse
-* than no image.
+* The base a media link is minted on: the hub's role (D734) the broker chose. Links reach
+* Home Assistant notifications on phones away from home, so a new broker chooses `publicEndpoint`;
+* when that resolves to nothing the `internal` address answers instead (a LAN Home Assistant still
+* gets an image). A broker that chose `internal` never falls back to public. Ranked by
+* `local-network`, never loopback (`null` when nothing resolves): a link Home Assistant cannot
+* open is worse than no image.
 */
-function haMediaBaseUrl(book, role = "internal") {
-	return book.roles[role].resolved;
+function haMediaBaseUrl(book, role = "publicEndpoint") {
+	const chosen = book.roles[role].resolved;
+	if (chosen !== null || role !== "publicEndpoint") return chosen;
+	return book.roles.internal.resolved;
+}
+/** True when `haMediaBaseUrl` answered with the internal address because the public endpoint was chosen but unset. */
+function usedInternalFallback(book, role) {
+	return role === "publicEndpoint" && book.roles.publicEndpoint.resolved === null && book.roles.internal.resolved !== null;
 }
 /** brokerId → media base, each broker on ITS role. Pure: the caller reads the palette per use. */
 function mediaBasesByBroker(brokerIds, book, roleOf) {
@@ -5244,6 +5252,8 @@ function integrationByBroker(rows, warn) {
 /** Every broker the old shape has something for, with the value the old reader would have used. */
 function legacyLinks(stored, rows, warn) {
 	const membership = membershipOf$1(stored[MEMBERSHIP_KEY]);
+	const unreadable = rows.find((row) => Object.keys(row.settings).length === 0);
+	if (unreadable !== void 0 && membership.size > 0) throw new Error(`the settings of integration ${unreadable.integrationId} read as empty; the export switch cannot be carried from an unreadable source, nothing was written`);
 	const integrations = integrationByBroker(rows, warn);
 	const brokers = new Set(membership.keys());
 	for (const key of Object.keys(stored)) for (const prefix of [EXPORT_PREFIX, ROLE_PREFIX]) if (key.startsWith(prefix) && key.length > prefix.length) brokers.add(key.slice(prefix.length));
@@ -5423,12 +5433,12 @@ var haExportLinksKind = defineEntryKind("ha-export-links", {
 	}),
 	writeTrigger: "an operator switches the export of a Home Assistant instance, picks its image-link address, or exports a device to it"
 });
-/** A link the operator has not touched: off, on the internal address, no device. */
+/** A link the operator has not touched: off, on the public endpoint, no device. */
 function defaultLinks(name) {
 	return {
 		name,
 		exportTo: false,
-		mediaRole: "internal",
+		mediaRole: "publicEndpoint",
 		devices: []
 	};
 }
@@ -5472,7 +5482,7 @@ var ExportLinks = class ExportLinks {
 		return this.rows.get(brokerId)?.exportTo === true;
 	}
 	mediaRole(brokerId) {
-		return this.rows.get(brokerId)?.mediaRole ?? "internal";
+		return this.rows.get(brokerId)?.mediaRole ?? "publicEndpoint";
 	}
 	/** brokerId → exported device ids, for the brokers that export at least one. */
 	membership() {
@@ -8198,6 +8208,7 @@ var HaExportAddon = class extends BaseAddon {
 	}
 	/** deviceId:cap:field already reported. Bounded by devices × mapped caps. */
 	warnedCapFields = /* @__PURE__ */ new Set();
+	warnedMediaFallback = /* @__PURE__ */ new Set();
 	warnOnce(deviceId, capName, field, line) {
 		const key = `${deviceId}:${capName}:${field}`;
 		if (this.warnedCapFields.has(key)) return;
@@ -9974,14 +9985,24 @@ var HaExportAddon = class extends BaseAddon {
 	}
 	/**
 	* Each broker's media base, read per use: the palette's role the broker chose
-	* (the `ha-export-links` record's `mediaRole`, `internal` by default). A role that resolves to nothing
+	* (the `ha-export-links` record's `mediaRole`, `publicEndpoint` by default, internal when none is set). A role that resolves to nothing
 	* is `null` and says so — the image entities then carry no value, which reads as
 	* empty rather than as a broken link.
 	*/
 	async mediaBasesFor(brokerIds, deviceId) {
 		let bases;
 		try {
-			bases = mediaBasesByBroker(brokerIds, await this.ctx.api.localNetwork.getAddresses.query(), (brokerId) => this.book().mediaRole(brokerId));
+			const answer = await this.ctx.api.localNetwork.getAddresses.query();
+			bases = mediaBasesByBroker(brokerIds, answer, (brokerId) => this.book().mediaRole(brokerId));
+			for (const brokerId of brokerIds) {
+				if (this.warnedMediaFallback.has(brokerId)) continue;
+				if (!usedInternalFallback(answer, this.book().mediaRole(brokerId))) continue;
+				this.warnedMediaFallback.add(brokerId);
+				this.ctx.logger.info("ha-export: no public endpoint is set, so image links use the internal address", {
+					tags: { deviceId },
+					meta: { brokerId }
+				});
+			}
 		} catch (err) {
 			this.ctx.logger.debug("ha-export: could not resolve the media base URLs", {
 				tags: { deviceId },
@@ -10078,7 +10099,7 @@ var HaExportAddon = class extends BaseAddon {
 				id: "ha-export-transport",
 				title: "Connection",
 				titleKey: "provider-homeassistant:globalSettings.s_ha-export-transport.title",
-				description: "The hub address each Home Assistant instance fetches image links from. Internal is the address flagged Internal on the Network page; choose Public endpoint for an instance outside your network.",
+				description: "The hub address each Home Assistant instance fetches image links from. Public endpoint is the default, so notifications show images away from home; when none is set the internal address is used. Choose Internal to never use the public endpoint.",
 				columns: 1,
 				fields: this.config.knownBrokers.map((broker) => ({
 					type: "select",
@@ -10091,7 +10112,7 @@ var HaExportAddon = class extends BaseAddon {
 						value: "publicEndpoint",
 						label: "Public endpoint (reachable from outside)"
 					}],
-					default: "internal"
+					default: "publicEndpoint"
 				}))
 			}] : [],
 			{

package/dist/{ha-instance-settings-Dm0tU8iv.js → ha-instance-settings-CRvQ5rH6.js}

@@ -5981,7 +5981,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-BaWhXZFm.mjs
+//#region ../types/dist/sleep-D1jjWAr8.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -6591,7 +6591,7 @@ var NOT_RUN = {
 * throws: an unreachable or refusing engine is logged and reported `declared: false`,
 * because the hub (and this addon's boot) must not hang on a migration.
 */
-async function runAddonMigrations(host, migrations, logger) {
+async function runAddonMigrations(host, migrations, logger, options = {}) {
 	const first = migrations[0];
 	if (first === void 0) return NOT_RUN;
 	const owner = first.meta.owner;
@@ -6620,7 +6620,9 @@ async function runAddonMigrations(host, migrations, logger) {
 		else if (status === "blocked") blocked.push(id);
 		else skipped.push(id);
 	};
+	const selected = options.only === void 0 ? null : new Set(options.only);
 	for (const step of declaration.steps) {
+		if (selected !== null && !selected.has(step.id)) continue;
 		const bound = byId.get(step.id);
 		if (bound === void 0 || step.action === "skip") {
 			skipped.push(step.id);
@@ -7780,14 +7782,18 @@ var BaseAddon = class {
 	* nothing; the boot continues. A migration that FAILED (or was blocked by one)
 	* and declares `onFailure: 'block-owner'` makes this throw, so the addon does not
 	* serve data whose shape it cannot trust; `tolerate` migrations never do.
+	*
+	* ALWAYS pass the whole catalogue; a phase that must run only some of it passes
+	* `{ only: [ids] }` — never a filtered catalogue (the engine would judge the
+	* omitted applied ids "newer").
 	*/
-	async runMigrations(migrations) {
+	async runMigrations(migrations, options) {
 		const api = this.ctx.api.migrations;
 		const report = await runAddonMigrations({
 			declareOwner: (input) => api.declareOwner.mutate(input),
 			startMigration: (input) => api.startMigration.mutate(input),
 			finishMigration: (input) => api.finishMigration.mutate(input)
-		}, migrations, this.ctx.logger);
+		}, migrations, this.ctx.logger, options);
 		if (report.blockOwner.length > 0) throw new AddonMigrationsBlockedError(report.blockOwner);
 		return report;
 	}
@@ -9259,6 +9265,7 @@ function defineEntryKind(name, spec) {
 		class: "config",
 		writeTrigger: spec.writeTrigger ?? "an operator adds or edits an entry in the entries UI",
 		retention: { none: "an entry goes only when the operator deletes it" },
+		...spec.maxDataBytes === void 0 ? {} : { maxDataBytes: spec.maxDataBytes },
 		...spec.database === void 0 ? {} : { database: spec.database },
 		...spec.indexes === void 0 ? {} : { indexes: spec.indexes },
 		...spec.secretArrayKeys === void 0 ? {} : { secretArrayKeys: spec.secretArrayKeys },
@@ -14725,7 +14732,13 @@ var MigrationLedgerEntrySchema = object({
 	* joined by the engine from the catalogues it knows this boot. Absent when no
 	* catalogue lists the id (a newer database).
 	*/
-	meta: MigrationMetaSchema.optional()
+	meta: MigrationMetaSchema.optional(),
+	/**
+	* Set when this is an applied row of an addon owner whose catalogue the answering
+	* process has not loaded (the owner has not declared yet): the row is applied, the
+	* process just cannot judge it. Never `skipped-newer` — that needs the owner loaded.
+	*/
+	ownerNotLoaded: boolean().optional()
 });
 /** A catalogued migration that is not applied, with where it stands. */
 var MigrationPendingEntrySchema = object({
@@ -56803,6 +56816,12 @@ method(_void(), array(IntegrationWithStateSchema)), method(object({ id: string()
 }), object({ success: boolean() }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({ id: string() }), object({
+	rows: number().int().nonnegative(),
+	secrets: number().int().nonnegative()
+}), {
+	kind: "mutation",
+	auth: "admin"
 }), method(_void(), array(AvailableIntegrationTypeSchema), { auth: "admin" }), method(object({
 	addonId: string(),
 	settings: record(string(), unknown())
@@ -86591,6 +86610,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"integrations.clearSettings": {
+		capName: "integrations",
+		capScope: "system",
+		addonId: null,
+		access: "delete",
+		role: "admin"
+	},
 	"integrations.create": {
 		capName: "integrations",
 		capScope: "system",

package/dist/{ha-instance-settings-EQ5Ey3Q-.mjs → ha-instance-settings-qhCNJbbn.mjs}

@@ -5980,7 +5980,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-BaWhXZFm.mjs
+//#region ../types/dist/sleep-D1jjWAr8.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -6590,7 +6590,7 @@ var NOT_RUN = {
 * throws: an unreachable or refusing engine is logged and reported `declared: false`,
 * because the hub (and this addon's boot) must not hang on a migration.
 */
-async function runAddonMigrations(host, migrations, logger) {
+async function runAddonMigrations(host, migrations, logger, options = {}) {
 	const first = migrations[0];
 	if (first === void 0) return NOT_RUN;
 	const owner = first.meta.owner;
@@ -6619,7 +6619,9 @@ async function runAddonMigrations(host, migrations, logger) {
 		else if (status === "blocked") blocked.push(id);
 		else skipped.push(id);
 	};
+	const selected = options.only === void 0 ? null : new Set(options.only);
 	for (const step of declaration.steps) {
+		if (selected !== null && !selected.has(step.id)) continue;
 		const bound = byId.get(step.id);
 		if (bound === void 0 || step.action === "skip") {
 			skipped.push(step.id);
@@ -7779,14 +7781,18 @@ var BaseAddon = class {
 	* nothing; the boot continues. A migration that FAILED (or was blocked by one)
 	* and declares `onFailure: 'block-owner'` makes this throw, so the addon does not
 	* serve data whose shape it cannot trust; `tolerate` migrations never do.
+	*
+	* ALWAYS pass the whole catalogue; a phase that must run only some of it passes
+	* `{ only: [ids] }` — never a filtered catalogue (the engine would judge the
+	* omitted applied ids "newer").
 	*/
-	async runMigrations(migrations) {
+	async runMigrations(migrations, options) {
 		const api = this.ctx.api.migrations;
 		const report = await runAddonMigrations({
 			declareOwner: (input) => api.declareOwner.mutate(input),
 			startMigration: (input) => api.startMigration.mutate(input),
 			finishMigration: (input) => api.finishMigration.mutate(input)
-		}, migrations, this.ctx.logger);
+		}, migrations, this.ctx.logger, options);
 		if (report.blockOwner.length > 0) throw new AddonMigrationsBlockedError(report.blockOwner);
 		return report;
 	}
@@ -9258,6 +9264,7 @@ function defineEntryKind(name, spec) {
 		class: "config",
 		writeTrigger: spec.writeTrigger ?? "an operator adds or edits an entry in the entries UI",
 		retention: { none: "an entry goes only when the operator deletes it" },
+		...spec.maxDataBytes === void 0 ? {} : { maxDataBytes: spec.maxDataBytes },
 		...spec.database === void 0 ? {} : { database: spec.database },
 		...spec.indexes === void 0 ? {} : { indexes: spec.indexes },
 		...spec.secretArrayKeys === void 0 ? {} : { secretArrayKeys: spec.secretArrayKeys },
@@ -14724,7 +14731,13 @@ var MigrationLedgerEntrySchema = object({
 	* joined by the engine from the catalogues it knows this boot. Absent when no
 	* catalogue lists the id (a newer database).
 	*/
-	meta: MigrationMetaSchema.optional()
+	meta: MigrationMetaSchema.optional(),
+	/**
+	* Set when this is an applied row of an addon owner whose catalogue the answering
+	* process has not loaded (the owner has not declared yet): the row is applied, the
+	* process just cannot judge it. Never `skipped-newer` — that needs the owner loaded.
+	*/
+	ownerNotLoaded: boolean().optional()
 });
 /** A catalogued migration that is not applied, with where it stands. */
 var MigrationPendingEntrySchema = object({
@@ -56802,6 +56815,12 @@ method(_void(), array(IntegrationWithStateSchema)), method(object({ id: string()
 }), object({ success: boolean() }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({ id: string() }), object({
+	rows: number().int().nonnegative(),
+	secrets: number().int().nonnegative()
+}), {
+	kind: "mutation",
+	auth: "admin"
 }), method(_void(), array(AvailableIntegrationTypeSchema), { auth: "admin" }), method(object({
 	addonId: string(),
 	settings: record(string(), unknown())
@@ -86590,6 +86609,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"integrations.clearSettings": {
+		capName: "integrations",
+		capScope: "system",
+		addonId: null,
+		access: "delete",
+		role: "admin"
+	},
 	"integrations.create": {
 		capName: "integrations",
 		capScope: "system",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-homeassistant",
-  "version": "1.2.656",
+  "version": "1.2.658",
   "description": "Home Assistant device provider addon for CamStack",
   "keywords": [
     "camstack",
@@ -134,7 +134,7 @@
       "description": "Device provider (import) + native entity export (push). Two addons, one bundle, separate processes."
     },
     "requires": {
-      "server": ">=1.2.762"
+      "server": ">=1.2.766"
     }
   },
   "files": [