@camstack/addon-provider-homematic 1.2.164 → 1.2.165

package/dist/addon.js

@@ -57010,6 +57010,12 @@ var TerminalInstanceInfoSchema = object({
 	instanceId: string(),
 	cameraStableId: string(),
 	nodeId: string(),
+	/**
+	* False while the node the instance is bound to is not in the cluster
+	* topology (forgotten, renamed, re-paired). The instance is kept; the
+	* operator re-points it with `updateInstance({ targetNodeId })`.
+	*/
+	nodeInCluster: boolean(),
 	profileId: string(),
 	profileLabel: string(),
 	name: string(),
@@ -57059,6 +57065,8 @@ method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }),
 	auth: "admin"
 }), method(object({
 	instanceId: string().min(1),
+	/** Re-point the instance to another node; the profile must exist there. */
+	targetNodeId: string().min(1).max(256).optional(),
 	name: string().trim().min(1).max(160).optional(),
 	executable: string().max(1024).optional(),
 	args: array(string().max(2048)).max(64).optional(),
@@ -113228,6 +113236,19 @@ var CircuitBreakerOpenError = class extends BaseHomematicError {};
 var AuthFailureError = class extends BaseHomematicError {};
 var InternalBackendError = class extends BaseHomematicError {};
 var CommandSupersededError = class extends BaseHomematicError {};
+var CcuManagementError = class extends BaseHomematicError {
+	/** The XML-RPC / JSON-RPC method that failed. */
+	method;
+	/** The underlying typed error (or whatever was thrown). */
+	original;
+	constructor(method, original) {
+		const detail = original instanceof Error ? original.message : String(original);
+		super(`${method} failed: ${detail}`);
+		this.method = method;
+		this.original = original;
+	}
+};
+var GroupWriteVerificationError = class extends BaseHomematicError {};
 var DescriptionNotFoundError = class extends BaseHomematicError {};
 var InvalidStateTransitionError = class extends BaseHomematicError {};
 var TimeoutError = class extends BaseHomematicError {};
@@ -113981,6 +114002,54 @@ var InterfaceClient = class {
 		const result = await this.callGuarded("getInstallMode", []);
 		return typeof result === "number" ? result : 0;
 	}
+	/**
+	* `listBidcosInterfaces()` → the radio gateways of a BidCos interface.
+	*
+	* Source: HomeMatic XML-RPC interface spec (rfd), as consumed by the WebUI in
+	* eq-3/occu `WebUI/www/api/methods/interface/listbidcosinterfaces.tcl`
+	* (fields ADDRESS, DESCRIPTION, DUTY_CYCLE, CONNECTED, DEFAULT,
+	* FIRMWARE_VERSION, TYPE). A field the CCU did not send is `null`, never 0.
+	*/
+	async listBidcosInterfaces() {
+		const result = await this.managementCall("listBidcosInterfaces", []);
+		if (!Array.isArray(result)) return [];
+		const gateways = [];
+		for (const entry of result) if (isStruct(entry)) gateways.push(toRadioGateway(entry));
+		return gateways;
+	}
+	/**
+	* `setInstallMode(on[, seconds[, mode]])` — open or close the pairing window.
+	*
+	* Source: HomeMatic XML-RPC interface spec; the WebUI forwards the same call
+	* in eq-3/occu `WebUI/www/api/methods/interface/setinstallmode.tcl` and
+	* `setinstallmodehmip.tcl` (`setInstallMode(bool on, int time)`). `mode`
+	* (1 normal, 2 with the HomeMatic Secure key) is BidCos-only and is sent only
+	* when given.
+	*/
+	async setInstallMode(request) {
+		const params = [request.on];
+		if (request.seconds !== void 0) params.push(request.seconds);
+		if (request.mode !== void 0) params.push(request.mode);
+		await this.managementCall("setInstallMode", params);
+	}
+	/**
+	* `getInstallMode()` → seconds left of the pairing window, or `null` when the
+	* CCU answered something that is not an integer (never a fake 0).
+	*/
+	async getInstallModeRemaining() {
+		const result = await this.managementCall("getInstallMode", []);
+		return typeof result === "number" && Number.isInteger(result) ? result : null;
+	}
+	/**
+	* `deleteDevice(address, flags)` — remove a device from the interface.
+	*
+	* Source: eq-3/occu `WebUI/www/api/methods/interface/deletedevice.tcl`:
+	* flags 0x01 reset to factory, 0x02 force (also when unreachable), 0x04 defer
+	* until the device is next reachable.
+	*/
+	async deleteDevice(address, flags) {
+		await this.managementCall("deleteDevice", [address, flags]);
+	}
 	/** `getVersion()` (bypass) → backend version string. */
 	async getVersion() {
 		return scalarToString(await this.callGuarded("getVersion", [], { bypassBreaker: true }));
@@ -113991,6 +114060,18 @@ var InterfaceClient = class {
 		return Array.isArray(result) ? result.map(scalarToString) : [];
 	}
 	/**
+	* A management call: guarded like any other, but a failure is rethrown as a
+	* {@link CcuManagementError} naming the method and keeping the CCU fault text.
+	*/
+	async managementCall(method, params) {
+		try {
+			return await this.callGuarded(method, params);
+		} catch (err) {
+			if (err instanceof BaseHomematicError) throw new CcuManagementError(method, err);
+			throw err;
+		}
+	}
+	/**
 	* Invoke `method`, gating non-bypass calls behind the circuit breaker.
 	* Bypass methods skip the breaker entirely (no success/failure recorded).
 	*/
@@ -114045,17 +114126,48 @@ function asDeviceDescriptionArray(value) {
 function asParamsetDescription(value) {
 	return asStruct(value);
 }
+function stringOrNull(value) {
+	return typeof value === "string" && value !== "" ? value : null;
+}
+function numberOrNull(value) {
+	return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+function flagOrNull(value) {
+	if (typeof value === "boolean") return value;
+	if (value === 1) return true;
+	if (value === 0) return false;
+	return null;
+}
+function toRadioGateway(entry) {
+	const connected = flagOrNull(entry["CONNECTED"]);
+	return {
+		address: stringOrNull(entry["ADDRESS"]) ?? "",
+		description: stringOrNull(entry["DESCRIPTION"]),
+		dutyCycle: numberOrNull(entry["DUTY_CYCLE"]),
+		connected,
+		isDefault: flagOrNull(entry["DEFAULT"]) === true,
+		firmware: stringOrNull(entry["FIRMWARE_VERSION"]),
+		type: stringOrNull(entry["TYPE"])
+	};
+}
 var SESSION_ID_PARAM = "_session_id_";
 var JsonRpcMethod = {
 	CCU_GET_AUTH_ENABLED: "CCU.getAuthEnabled",
 	CCU_GET_HTTPS_REDIRECT_ENABLED: "CCU.getHttpsRedirectEnabled",
+	CCU_GET_VERSION: "CCU.getVersion",
+	CCU_GET_SERIAL: "CCU.getSerial",
+	CCU_GET_HEATING_GROUP_LIST: "CCU.getHeatingGroupList",
 	DEVICE_LIST_ALL_DETAIL: "Device.listAllDetail",
+	DEVICE_GET_REGA_ID_BY_ADDRESS: "Device.getReGaIDByAddress",
 	DEVICE_SET_NAME: "Device.setName",
 	CHANNEL_SET_NAME: "Channel.setName",
 	INTERFACE_LIST_INTERFACES: "Interface.listInterfaces",
 	INTERFACE_LIST_DEVICES: "Interface.listDevices",
+	INTERFACE_IS_PRESENT: "Interface.isPresent",
+	INTERFACE_GET_DUTY_CYCLE: "Interface.getDutyCycle",
 	INTERFACE_GET_INSTALL_MODE: "Interface.getInstallMode",
 	INTERFACE_SET_INSTALL_MODE_HMIP: "Interface.setInstallModeHMIP",
+	INTERFACE_SET_METADATA: "Interface.setMetadata",
 	PROGRAM_GET_ALL: "Program.getAll",
 	PROGRAM_EXECUTE: "Program.execute",
 	SYSVAR_GET_ALL: "SysVar.getAll",
@@ -114264,6 +114376,691 @@ var SessionManager = class {
 		return Math.min(exp, MAX_BACKOFF_MS);
 	}
 };
+var FORM_CONTENT_TYPE = "application/x-www-form-urlencoded; charset=UTF-8";
+var ESCAPE_SAFE = /[A-Za-z0-9@*_+\-./]/;
+function jsEscape(text) {
+	let out = "";
+	for (const ch of text) {
+		const unit = ch.charCodeAt(0);
+		if (ESCAPE_SAFE.test(ch)) out += ch;
+		else if (ch.length === 1 && unit < 256) out += `%${unit.toString(16).toUpperCase().padStart(2, "0")}`;
+		else for (let i = 0; i < ch.length; i += 1) out += `%u${ch.charCodeAt(i).toString(16).toUpperCase().padStart(4, "0")}`;
+	}
+	return out;
+}
+var WebUiHttpClient = class {
+	base;
+	timeoutMs;
+	fetchFn;
+	dispatcher;
+	constructor(options) {
+		this.base = options.url.replace(/\/+$/, "");
+		this.timeoutMs = options.timeoutMs ?? TIMEOUTS.rpc;
+		this.dispatcher = options.rejectUnauthorized === false ? new import_undici.Agent({ connect: { rejectUnauthorized: false } }) : void 0;
+		this.fetchFn = options.fetch ?? this.defaultFetch.bind(this);
+	}
+	get(path$2, sessionId) {
+		return this.request("GET", path$2, sessionId, void 0);
+	}
+	post(path$3, sessionId, body) {
+		return this.request("POST", path$3, sessionId, body);
+	}
+	async close() {
+		await this.dispatcher?.close();
+	}
+	async request(method, path$4, sessionId, body) {
+		const url = `${this.base}${path$4}?sid=${encodeURIComponent(sessionId)}`;
+		const controller = new AbortController();
+		const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+		try {
+			const response = await this.fetchFn(url, {
+				method,
+				headers: body === void 0 ? {} : { "Content-Type": FORM_CONTENT_TYPE },
+				body,
+				signal: controller.signal
+			});
+			const text = await response.text();
+			if (response.status < 200 || response.status >= 300) throw new ClientError(`HTTP ${response.status}`);
+			return text;
+		} catch (err) {
+			const mapped = err instanceof ClientError ? err : mapTransportError(err);
+			throw new CcuManagementError(`${method} ${path$4}`, /* @__PURE__ */ new Error(`${mapped.name}: ${mapped.message.split(sessionId).join("<sid>")}`));
+		} finally {
+			clearTimeout(timer);
+		}
+	}
+	async defaultFetch(url, init) {
+		const req = {
+			method: init.method,
+			headers: init.headers,
+			signal: init.signal
+		};
+		if (init.body !== void 0) req.body = init.body;
+		if (this.dispatcher) req.dispatcher = this.dispatcher;
+		return (0, import_undici.fetch)(url, req);
+	}
+};
+function escapeRegaString(s) {
+	return s.replace(/\\/g, "\\\\").replace(/"/g, "\\\"");
+}
+var CONTROL_CHARS = /[\u0000-\u001F]/g;
+function sanitizeJsonControlChars(s) {
+	return s.replace(CONTROL_CHARS, "");
+}
+function decodeRegaName(encoded) {
+	const bytes = [];
+	for (let i = 0; i < encoded.length; i += 1) {
+		const ch = encoded[i];
+		if (ch === "%" && i + 2 < encoded.length) {
+			const hex = encoded.slice(i + 1, i + 3);
+			const byte = Number.parseInt(hex, 16);
+			if (!Number.isNaN(byte) && /^[0-9a-fA-F]{2}$/.test(hex)) {
+				bytes.push(byte);
+				i += 2;
+				continue;
+			}
+		}
+		if (ch === "+") {
+			bytes.push(32);
+			continue;
+		}
+		bytes.push(ch.charCodeAt(0) & 255);
+	}
+	return Buffer.from(bytes).toString("latin1");
+}
+function substitute(body, params) {
+	let out = body;
+	for (const [key, value] of Object.entries(params)) {
+		const escaped = escapeRegaString(String(value));
+		out = out.split(`##${key}##`).join(escaped);
+	}
+	return out;
+}
+async function runScript(client, sessionId, body, params) {
+	const script = params ? substitute(body, params) : body;
+	const result = await client.post(JsonRpcMethod.REGA_RUN_SCRIPT, { script }, sessionId !== void 0 ? { sessionId } : void 0);
+	if (result === void 0 || result === null) throw new ClientError("ReGa.runScript returned no result");
+	if (typeof result === "string") return JSON.parse(sanitizeJsonControlChars(result));
+	return result;
+}
+var SET_SYSTEM_VARIABLE = `object sv = dom.GetObject("##name##");
+if (sv) {
+    sv.State("##value##");
+}`;
+var SET_PROGRAM_STATE = `object prog = dom.GetObject(##id##);
+if (prog) {
+    prog.Active(##state##);
+}`;
+var SYSVAR_DESCRIPTIONS = `string sSysVarId;
+string sSep = "";
+WriteLine("[");
+foreach(sSysVarId, dom.GetObject(ID_SYSTEM_VARIABLES).EnumUsedIDs()) {
+    object oSysVar = dom.GetObject(sSysVarId);
+    Write(sSep);
+    Write("{");
+    Write("\\"id\\":");
+    Write(oSysVar.ID());
+    Write(",\\"description\\":\\"");
+    Write(oSysVar.DPInfo().UriEncode());
+    Write("\\"}");
+    sSep = ",";
+}
+WriteLine("]");`;
+var GET_ROOMS_FUNCTIONS = `string sChnId;
+string sRoomId;
+string sFuncId;
+string sChnSepR = "";
+string sChnSepF = "";
+Write("{\\"rooms\\":{");
+foreach(sChnId, dom.GetObject(ID_CHANNELS).EnumUsedIDs()) {
+    object oChn = dom.GetObject(sChnId);
+    if (oChn) {
+        string sAddr = oChn.Address();
+        object oRooms = oChn.ChnRoom();
+        if (oRooms && oRooms.Count() > 0) {
+            Write(sChnSepR);
+            Write("\\"");
+            Write(sAddr);
+            Write("\\":[");
+            string sRoomSep = "";
+            foreach(sRoomId, oRooms) {
+                object oRoom = dom.GetObject(sRoomId);
+                Write(sRoomSep);
+                Write("\\"");
+                Write(oRoom.Name().UriEncode());
+                Write("\\"");
+                sRoomSep = ",";
+            }
+            Write("]");
+            sChnSepR = ",";
+        }
+    }
+}
+Write("},\\"functions\\":{");
+foreach(sChnId, dom.GetObject(ID_CHANNELS).EnumUsedIDs()) {
+    object oChn = dom.GetObject(sChnId);
+    if (oChn) {
+        string sAddr = oChn.Address();
+        object oFuncs = oChn.ChnFunction();
+        if (oFuncs && oFuncs.Count() > 0) {
+            Write(sChnSepF);
+            Write("\\"");
+            Write(sAddr);
+            Write("\\":[");
+            string sFuncSep = "";
+            foreach(sFuncId, oFuncs) {
+                object oFunc = dom.GetObject(sFuncId);
+                Write(sFuncSep);
+                Write("\\"");
+                Write(oFunc.Name().UriEncode());
+                Write("\\"");
+                sFuncSep = ",";
+            }
+            Write("]");
+            sChnSepF = ",";
+        }
+    }
+}
+Write("}}");`;
+var GET_SERVICE_MESSAGES = `string sAID;
+string sSep = "";
+Write("[");
+foreach(sAID, dom.GetObject(ID_SERVICES).EnumIDs()) {
+    object oAlarm = dom.GetObject(sAID);
+    if (oAlarm) {
+        if (oAlarm.IsTypeOf(OT_ALARMDP)) {
+            if (oAlarm.AlState() == asOncoming) {
+                string sAddr = "";
+                string sType = "";
+                string sAck = "true";
+                object oLast = dom.GetObject(oAlarm.LastTriggerID());
+                if (oLast) {
+                    sType = oLast.HSSID();
+                    object oChn = dom.GetObject(oLast.Channel());
+                    if (oChn) {
+                        sAddr = oChn.Address();
+                    }
+                }
+                object oTrig = dom.GetObject(oAlarm.AlTriggerDP());
+                if (oTrig) {
+                    if (!(oTrig.Operations() & OPERATION_WRITE)) {
+                        sAck = "false";
+                    }
+                }
+                Write(sSep);
+                Write("{\\"id\\":");
+                Write(oAlarm.ID());
+                Write(",\\"name\\":\\"");
+                Write(oAlarm.Name().UriEncode());
+                Write("\\",\\"address\\":\\"");
+                Write(sAddr);
+                Write("\\",\\"type\\":\\"");
+                Write(sType);
+                Write("\\",\\"timestamp\\":");
+                Write(oAlarm.AlOccurrenceTime().ToInteger());
+                Write(",\\"acknowledgeable\\":");
+                Write(sAck);
+                Write("}");
+                sSep = ",";
+            }
+        }
+    }
+}
+Write("]");`;
+var ACKNOWLEDGE_SERVICE_MESSAGE = `object oAlarm = dom.GetObject(##id##);
+if (oAlarm) {
+    oAlarm.AlReceipt();
+    Write("{\\"ok\\":true}");
+} else {
+    Write("{\\"ok\\":false}");
+}`;
+var GET_CCU_PLATFORM = `string sRelease;
+string sHost;
+string sErr;
+system.Exec("cat /VERSION", &sRelease, &sErr);
+system.Exec("hostname", &sHost, &sErr);
+Write("{\\"release\\":\\"");
+Write(sRelease.UriEncode());
+Write("\\",\\"host\\":\\"");
+Write(sHost.UriEncode());
+Write("\\"}");`;
+var GROUP_CREATE_PATH = "/pages/jpages/group/create";
+var GROUP_SAVE_PATH = "/pages/jpages/group/save";
+var GROUP_DELETE_PATH = "/pages/jpages/group/delete";
+var DRAFT_GROUP_ID = /self\.groupId\s*=\s*(\d+)/;
+var KNOWN_GROUP_TYPES = ["hmip.heating.group", "HomeMatic.heating"];
+var CHANNEL_ADDRESS = /^[0-9A-Za-z_-]+:\d+$/;
+var MAX_GROUP_NAME = 64;
+var DEFAULT_INSTALL_SECONDS = 60;
+var MAX_INSTALL_SECONDS = 3600;
+var SERVICE_MESSAGE_ID = /^\d+$/;
+function isRecord(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function asRecordArray(value) {
+	return Array.isArray(value) ? value.filter(isRecord) : [];
+}
+function strOrNull(value) {
+	if (typeof value === "string") return value === "" ? null : value;
+	if (typeof value === "number" && Number.isFinite(value)) return String(value);
+	return null;
+}
+function numOrNull(value) {
+	if (value === null || value === void 0 || value === "") return null;
+	const num = typeof value === "number" ? value : Number(value);
+	return Number.isFinite(num) ? num : null;
+}
+var INTERFACES_BY_NAME = new Map(Object.values(Interface).map((iface) => [iface.toString(), iface]));
+function toInterface(name) {
+	const match = INTERFACES_BY_NAME.get(name);
+	if (match === void 0) throw new ValidationError(`Unknown interface "${name}".`);
+	return match;
+}
+function toGateway(info) {
+	return { ...info };
+}
+function decodedOrNull(value) {
+	if (typeof value !== "string") return null;
+	const text = decodeRegaName(value).trim();
+	return text === "" ? null : text;
+}
+function parseKeyValueLines(text) {
+	const out = /* @__PURE__ */ new Map();
+	for (const line of text.split(/\r?\n/)) {
+		const eq = line.indexOf("=");
+		if (eq > 0) out.set(line.slice(0, eq).trim(), line.slice(eq + 1).trim());
+	}
+	return out;
+}
+var OPENCCU_PRODUCTS = /* @__PURE__ */ new Set([
+	"raspberrymatic",
+	"openccu",
+	"ova"
+]);
+function productFamily(raw) {
+	if (raw === null) return "unknown";
+	const key = raw.toLowerCase();
+	if (key === "ccu3") return "ccu3";
+	return OPENCCU_PRODUCTS.has(key) ? "openccu" : "unknown";
+}
+var CcuManagement = class {
+	json;
+	webUi;
+	getSessionId;
+	interfaceClient;
+	configuredInterfaces;
+	constructor(options) {
+		this.json = options.json;
+		this.webUi = options.webUi;
+		this.getSessionId = options.getSessionId;
+		this.interfaceClient = options.interfaceClient;
+		this.configuredInterfaces = options.configuredInterfaces;
+	}
+	/**
+	* Every interface the CCU offers (JSON-RPC `Interface.listInterfaces`), with
+	* connection state, duty cycle and, for BidCos, the radio gateways. Without a
+	* JSON-RPC client only the configured interfaces are listed and every probe
+	* result is `null`.
+	*/
+	async listInterfaces() {
+		const offered = await this.offeredInterfaces();
+		const gatewaysByName = /* @__PURE__ */ new Map();
+		for (const entry of offered) {
+			const iface = INTERFACES_BY_NAME.get(entry.name);
+			const client = iface === void 0 ? void 0 : this.interfaceClient(iface);
+			if (client === void 0 || iface !== "BidCos-RF" && iface !== "HmIP-RF") continue;
+			const gateways = await this.tryOrNull(() => client.listBidcosInterfaces());
+			if (gateways !== null) gatewaysByName.set(entry.name, gateways.map(toGateway));
+		}
+		const fallbackDuty = offered.some((e) => e.name === "BidCos-RF".toString() && (gatewaysByName.get(e.name) ?? []).every((g) => g.dutyCycle === null)) ? await this.ownRadioDutyCycle() : null;
+		const result = [];
+		for (const entry of offered) {
+			const gateways = gatewaysByName.get(entry.name) ?? [];
+			const primary = gateways.find((g) => g.isDefault) ?? gateways[0];
+			const connected = primary?.connected ?? await this.isPresent(entry.name);
+			const dutyCycle = primary?.dutyCycle ?? (entry.name === "BidCos-RF".toString() ? fallbackDuty : null);
+			result.push({
+				name: entry.name,
+				port: entry.port,
+				info: entry.info,
+				connected,
+				dutyCycle,
+				firmware: primary?.firmware ?? null,
+				type: primary?.type ?? null,
+				gateways
+			});
+		}
+		return result;
+	}
+	/** Open (default 60 s) or close the pairing window of a configured interface. */
+	async setInstallMode(request) {
+		const client = this.requireClient(request.interface);
+		if (!request.on) {
+			await client.setInstallMode({ on: false });
+			return;
+		}
+		const seconds = request.seconds ?? DEFAULT_INSTALL_SECONDS;
+		if (!Number.isInteger(seconds) || seconds < 1 || seconds > MAX_INSTALL_SECONDS) throw new ValidationError(`seconds must be an integer between 1 and ${MAX_INSTALL_SECONDS}, got ${String(seconds)}.`);
+		const call = request.mode === void 0 ? {
+			on: true,
+			seconds
+		} : {
+			on: true,
+			seconds,
+			mode: request.mode === "secure" ? 2 : 1
+		};
+		await client.setInstallMode(call);
+	}
+	/** Seconds left of the pairing window; `null` when the CCU's answer was unusable. */
+	async getInstallMode(interfaceName) {
+		return this.requireClient(interfaceName).getInstallModeRemaining();
+	}
+	/** Every active service message (ReGa listing of `ID_SERVICES`). */
+	async serviceMessages() {
+		return asRecordArray(await this.rega("ReGa.runScript(serviceMessages)", GET_SERVICE_MESSAGES)).flatMap((entry) => {
+			const id = strOrNull(entry["id"]);
+			if (id === null) return [];
+			const address = strOrNull(entry["address"]);
+			const colon = address === null ? -1 : address.lastIndexOf(":");
+			const device = address === null ? null : colon === -1 ? address : address.slice(0, colon);
+			const channel = address === null || colon === -1 ? null : numOrNull(address.slice(colon + 1));
+			const seconds = numOrNull(entry["timestamp"]);
+			return [{
+				id,
+				name: decodedOrNull(entry["name"]),
+				address: device,
+				channel,
+				type: strOrNull(entry["type"]),
+				timestamp: seconds === null || seconds <= 0 ? null : seconds * 1e3,
+				acknowledgeable: entry["acknowledgeable"] === true
+			}];
+		});
+	}
+	/** Acknowledge one service message by its id. */
+	async acknowledgeServiceMessage(id) {
+		if (!SERVICE_MESSAGE_ID.test(id)) throw new ValidationError(`Invalid service message id "${id}".`);
+		const raw = await this.rega("ReGa.runScript(acknowledgeServiceMessage)", ACKNOWLEDGE_SERVICE_MESSAGE, { id });
+		if (!isRecord(raw) || raw["ok"] !== true) throw new ValidationError(`Unknown service message "${id}".`);
+	}
+	/** Version, product, serial and hostname; each `null` when unanswered. */
+	async ccuInfo() {
+		const [version, serial, platform] = await Promise.allSettled([
+			this.call(JsonRpcMethod.CCU_GET_VERSION),
+			this.call(JsonRpcMethod.CCU_GET_SERIAL),
+			this.rega("ReGa.runScript(ccuPlatform)", GET_CCU_PLATFORM)
+		]);
+		if (version.status === "rejected" && serial.status === "rejected" && platform.status === "rejected") throw version.reason instanceof CcuManagementError ? version.reason : new CcuManagementError(JsonRpcMethod.CCU_GET_VERSION, version.reason);
+		const release = platform.status === "fulfilled" && isRecord(platform.value) ? parseKeyValueLines(decodeRegaName(releaseText(platform.value))) : /* @__PURE__ */ new Map();
+		const hostname = platform.status === "fulfilled" && isRecord(platform.value) ? decodedOrNull(platform.value["host"]) : null;
+		const product = strOrNull(release.get("PRODUCT"));
+		return {
+			version: version.status === "fulfilled" ? strOrNull(version.value) : null,
+			product,
+			productFamily: productFamily(product),
+			platform: strOrNull(release.get("PLATFORM")),
+			serial: serial.status === "fulfilled" ? strOrNull(serial.value) : null,
+			hostname
+		};
+	}
+	/**
+	* The heating groups of the CCU ("Gruppen"), read from `CCU.getHeatingGroupList`
+	* (the HMServer's `/etc/config/groups.gson`). `[]` when the CCU has no groups
+	* file. Writes (`createGroup` / `updateGroup` / `deleteGroup`) go through the
+	* HMServer's WebUI pages instead, see the group-writes section below.
+	*/
+	async groups() {
+		const raw = await this.call(JsonRpcMethod.CCU_GET_HEATING_GROUP_LIST);
+		if (typeof raw !== "string" || raw.trim() === "") return [];
+		let parsed;
+		try {
+			parsed = JSON.parse(raw);
+		} catch (err) {
+			throw new CcuManagementError(JsonRpcMethod.CCU_GET_HEATING_GROUP_LIST, err);
+		}
+		if (!isRecord(parsed)) return [];
+		return Object.keys(parsed).sort().flatMap((key) => asRecordArray(parsed[key])).flatMap((entry) => {
+			const group = toGroup(entry);
+			return group === null ? [] : [group];
+		});
+	}
+	/** Create a group; resolves with the group as read back from the CCU. */
+	async createGroup(input) {
+		const name = validateGroupName(input.name);
+		const members = validateMembers(input.members);
+		const before = await this.groups();
+		this.validateType(input.type, before);
+		const { webUi, sid } = await this.requireWebUi("group/create");
+		const page = checkWebUiResponse(GROUP_CREATE_PATH, await webUi.get(GROUP_CREATE_PATH, sid));
+		const draft = DRAFT_GROUP_ID.exec(page);
+		if (draft === null || draft[1] === void 0) throw new CcuManagementError(GROUP_CREATE_PATH, new ClientError("no group id in the page"));
+		const draftId = Number(draft[1]);
+		const id = numOrNull(await this.saveGroup(webUi, sid, {
+			groupId: draftId,
+			groupName: jsEscape(name),
+			groupTypeId: input.type,
+			forbidSingleOperation: false,
+			assignedDevicesIds: members,
+			isNewGroup: true,
+			groupDeviceName: `${name} `
+		})) ?? draftId;
+		await this.flagMembers(members, "true");
+		return this.verifyPresent(id, {
+			name,
+			type: input.type,
+			members
+		});
+	}
+	/** Change a group's name and/or member list; resolves with the group read back. */
+	async updateGroup(id, patch) {
+		if (patch.name === void 0 && patch.members === void 0) throw new ValidationError("updateGroup needs a name and/or members.");
+		const name = patch.name === void 0 ? void 0 : validateGroupName(patch.name);
+		const members = patch.members === void 0 ? void 0 : validateMembers(patch.members);
+		const current = await this.requireGroup(id);
+		const { webUi, sid } = await this.requireWebUi("group/save");
+		const nextName = name ?? current.name;
+		const nextMembers = members ?? current.members.map((m) => m.address);
+		await this.saveGroup(webUi, sid, {
+			groupId: id,
+			groupName: jsEscape(nextName),
+			groupTypeId: current.type,
+			forbidSingleOperation: current.forbidSingleOperation,
+			assignedDevicesIds: nextMembers,
+			isNewGroup: false,
+			groupDeviceName: current.deviceAddress === null ? nextName : `${nextName} ${virtualDeviceSerial(id)}`
+		});
+		await this.flagMembers(nextMembers, "true");
+		const kept = new Set(nextMembers);
+		await this.flagMembers(current.members.map((m) => m.address).filter((a) => !kept.has(a)), "false");
+		return this.verifyPresent(id, {
+			name: nextName,
+			type: current.type,
+			members: nextMembers
+		});
+	}
+	/** Delete a group; verified by the group being gone from the read-back. */
+	async deleteGroup(id) {
+		const current = await this.requireGroup(id);
+		const { webUi, sid } = await this.requireWebUi("group/delete");
+		checkWebUiResponse(GROUP_DELETE_PATH, await webUi.post(GROUP_DELETE_PATH, sid, JSON.stringify({ groupId: id })));
+		await this.flagMembers(current.members.map((m) => m.address), "false");
+		if ((await this.groups()).some((g) => g.id === id)) throw new GroupWriteVerificationError(`Group ${id} is still listed after deleteGroup.`);
+	}
+	async requireGroup(id) {
+		if (!Number.isInteger(id)) throw new ValidationError(`Invalid group id ${String(id)}.`);
+		const found = (await this.groups()).find((g) => g.id === id);
+		if (found === void 0) throw new ValidationError(`Unknown group ${id}.`);
+		return found;
+	}
+	validateType(type, existing) {
+		const known = /* @__PURE__ */ new Set([...KNOWN_GROUP_TYPES, ...existing.map((g) => g.type)]);
+		if (!known.has(type)) throw new ValidationError(`Unknown group type "${type}" (known: ${[...known].join(", ")}).`);
+	}
+	async requireWebUi(label) {
+		if (this.webUi === void 0) throw new ValidationError(`${label} needs WebUI credentials (HMServer pages); none are configured.`);
+		const sid = await this.getSessionId();
+		if (sid === void 0) throw new ValidationError(`${label} needs a WebUI session.`);
+		return {
+			webUi: this.webUi,
+			sid
+		};
+	}
+	/** POST `group/save`; returns the response `content` (the group id as text). */
+	async saveGroup(webUi, sid, payload) {
+		return checkWebUiResponse(GROUP_SAVE_PATH, await webUi.post(GROUP_SAVE_PATH, sid, JSON.stringify(payload)));
+	}
+	/**
+	* The WebUI marks every device it puts in / takes out of a heating group with
+	* `Interface.setMetadata inHeatingGroup` (its pages use the flag to hide
+	* grouped devices). Best effort: the hint is cosmetic and the group itself is
+	* verified separately.
+	*/
+	async flagMembers(addresses, value) {
+		const devices = [...new Set(addresses.map((a) => a.slice(0, a.lastIndexOf(":"))))];
+		for (const address of devices) try {
+			const objectId = await this.call(JsonRpcMethod.DEVICE_GET_REGA_ID_BY_ADDRESS, { address });
+			if (typeof objectId !== "string" || objectId === "" || objectId === "noDeviceFound") continue;
+			await this.call(JsonRpcMethod.INTERFACE_SET_METADATA, {
+				objectId,
+				dataId: "inHeatingGroup",
+				value
+			});
+		} catch {}
+	}
+	async verifyPresent(id, want) {
+		const found = (await this.groups()).find((g) => g.id === id);
+		if (found === void 0) throw new GroupWriteVerificationError(`Group ${id} is not listed after the write.`);
+		const have = found.members.map((m) => m.address).sort();
+		const expected = [...want.members].sort();
+		const sameMembers = have.length === expected.length && have.every((a, i) => a === expected[i]);
+		if (found.name !== want.name || found.type !== want.type || !sameMembers) throw new GroupWriteVerificationError(`Group ${id} reads back as "${found.name}" (${found.type}, ${have.length} members), expected "${want.name}" (${want.type}, ${expected.length} members).`);
+		return found;
+	}
+	requireClient(interfaceName) {
+		const iface = toInterface(interfaceName);
+		const client = this.interfaceClient(iface);
+		if (client === void 0) throw new ValidationError(`Interface "${interfaceName}" is not configured.`);
+		return client;
+	}
+	requireJson(method) {
+		if (this.json === void 0) throw new ValidationError(`${method} needs WebUI credentials (JSON-RPC); none are configured.`);
+		return this.json;
+	}
+	/** A session-bound JSON-RPC call whose failure names the method. */
+	async call(method, params) {
+		const json = this.requireJson(method);
+		try {
+			const sessionId = await this.getSessionId();
+			return await json.post(method, params, sessionId !== void 0 ? { sessionId } : void 0);
+		} catch (err) {
+			throw err instanceof ValidationError ? err : new CcuManagementError(method, err);
+		}
+	}
+	async rega(label, script, params) {
+		const json = this.requireJson(label);
+		try {
+			return await runScript(json, await this.getSessionId(), script, params);
+		} catch (err) {
+			throw err instanceof ValidationError ? err : new CcuManagementError(label, err);
+		}
+	}
+	async tryOrNull(fn) {
+		try {
+			return await fn();
+		} catch {
+			return null;
+		}
+	}
+	async offeredInterfaces() {
+		if (this.json === void 0) return this.configuredInterfaces().map((iface) => ({
+			name: iface,
+			port: null,
+			info: null
+		}));
+		return asRecordArray(await this.call(JsonRpcMethod.INTERFACE_LIST_INTERFACES)).flatMap((entry) => {
+			const name = strOrNull(entry["name"]);
+			return name === null ? [] : [{
+				name,
+				port: numOrNull(entry["port"]),
+				info: strOrNull(entry["info"])
+			}];
+		});
+	}
+	async isPresent(name) {
+		if (this.json === void 0) return null;
+		const answer = await this.tryOrNull(() => this.call(JsonRpcMethod.INTERFACE_IS_PRESENT, { interface: name }));
+		if (typeof answer === "boolean") return answer;
+		if (answer === "true") return true;
+		if (answer === "false") return false;
+		return null;
+	}
+	/**
+	* Fallback when `listBidcosInterfaces` gave no answer: `Interface.getDutyCycle`
+	* (RaspberryMatic / OpenCCU) reports the CCU's own radio module as ONE entry
+	* with string numbers (`"7"`). It cannot be attributed to HmIP, so it only
+	* ever stands in for BidCos-RF; non-numeric or absent is `null`.
+	*/
+	async ownRadioDutyCycle() {
+		if (this.json === void 0) return null;
+		const entries = asRecordArray(await this.tryOrNull(() => this.call(JsonRpcMethod.INTERFACE_GET_DUTY_CYCLE)));
+		return entries.length === 1 ? numOrNull(entries[0]?.["dutyCycle"]) : null;
+	}
+};
+function releaseText(value) {
+	const release = value["release"];
+	return typeof release === "string" ? release : "";
+}
+var DEVICE_ADDRESS_SUFFIX = /\b(INT\d{7})\s*$/;
+function toGroup(entry) {
+	const id = numOrNull(entry["id"]);
+	if (id === null) return null;
+	const props = isRecord(entry["groupProperties"]) ? entry["groupProperties"] : {};
+	const groupType = isRecord(entry["groupType"]) ? entry["groupType"] : {};
+	const deviceName = strOrNull(props["GROUP_DEVICE_NAME"]);
+	const deviceMatch = deviceName === null ? null : DEVICE_ADDRESS_SUFFIX.exec(deviceName);
+	const members = asRecordArray(entry["groupMembers"]).flatMap((m) => {
+		const address = strOrNull(m["id"]);
+		if (address === null) return [];
+		return [{
+			address,
+			type: (isRecord(m["memberType"]) ? strOrNull(m["memberType"]["id"]) : null) ?? ""
+		}];
+	});
+	return {
+		id,
+		name: (strOrNull(props["NAME"]) ?? "").trim(),
+		type: strOrNull(groupType["id"]) ?? "",
+		typeLabel: strOrNull(groupType["label"]),
+		deviceAddress: deviceMatch === null ? null : deviceMatch[1] ?? null,
+		forbidSingleOperation: props["FORBID_SINGLE_OPERATION"] === true,
+		members
+	};
+}
+function virtualDeviceSerial(id) {
+	return `INT${String(id).padStart(7, "0")}`;
+}
+function validateGroupName(raw) {
+	const name = raw.replace(/"/g, "'").trim();
+	if (name === "" || name.length > MAX_GROUP_NAME) throw new ValidationError(`Group name must be 1..${MAX_GROUP_NAME} characters.`);
+	return name;
+}
+function validateMembers(members) {
+	for (const address of members) if (!CHANNEL_ADDRESS.test(address)) throw new ValidationError(`Invalid member channel address "${address}".`);
+	return [...new Set(members)];
+}
+function checkWebUiResponse(path$5, text) {
+	let parsed;
+	try {
+		parsed = JSON.parse(text);
+	} catch {
+		throw new CcuManagementError(path$5, new ClientError("response was not JSON"));
+	}
+	if (!isRecord(parsed) || parsed["isSuccessful"] !== true) {
+		const code = isRecord(parsed) ? strOrNull(parsed["errorCode"]) : null;
+		throw new CcuManagementError(path$5, new ClientError(code === "42" ? "session expired (errorCode 42)" : `refused (errorCode ${code ?? "none"})`));
+	}
+	const content = parsed["content"];
+	return typeof content === "string" || typeof content === "number" ? String(content) : "";
+}
 var FAULT_METHOD_NOT_FOUND = -32601;
 var FAULT_INTERNAL_ERROR = -32603;
 var MethodNotFoundError = class extends BaseHomematicError {};
@@ -115171,128 +115968,6 @@ function asString(value) {
 	if (typeof value === "string" && value !== "") return value;
 	if (typeof value === "number") return String(value);
 }
-function escapeRegaString(s) {
-	return s.replace(/\\/g, "\\\\").replace(/"/g, "\\\"");
-}
-var CONTROL_CHARS = /[\u0000-\u001F]/g;
-function sanitizeJsonControlChars(s) {
-	return s.replace(CONTROL_CHARS, "");
-}
-function decodeRegaName(encoded) {
-	const bytes = [];
-	for (let i = 0; i < encoded.length; i += 1) {
-		const ch = encoded[i];
-		if (ch === "%" && i + 2 < encoded.length) {
-			const hex = encoded.slice(i + 1, i + 3);
-			const byte = Number.parseInt(hex, 16);
-			if (!Number.isNaN(byte) && /^[0-9a-fA-F]{2}$/.test(hex)) {
-				bytes.push(byte);
-				i += 2;
-				continue;
-			}
-		}
-		if (ch === "+") {
-			bytes.push(32);
-			continue;
-		}
-		bytes.push(ch.charCodeAt(0) & 255);
-	}
-	return Buffer.from(bytes).toString("latin1");
-}
-function substitute(body, params) {
-	let out = body;
-	for (const [key, value] of Object.entries(params)) {
-		const escaped = escapeRegaString(String(value));
-		out = out.split(`##${key}##`).join(escaped);
-	}
-	return out;
-}
-async function runScript(client, sessionId, body, params) {
-	const script = params ? substitute(body, params) : body;
-	const result = await client.post(JsonRpcMethod.REGA_RUN_SCRIPT, { script }, sessionId !== void 0 ? { sessionId } : void 0);
-	if (result === void 0 || result === null) throw new ClientError("ReGa.runScript returned no result");
-	if (typeof result === "string") return JSON.parse(sanitizeJsonControlChars(result));
-	return result;
-}
-var SET_SYSTEM_VARIABLE = `object sv = dom.GetObject("##name##");
-if (sv) {
-    sv.State("##value##");
-}`;
-var SET_PROGRAM_STATE = `object prog = dom.GetObject(##id##);
-if (prog) {
-    prog.Active(##state##);
-}`;
-var SYSVAR_DESCRIPTIONS = `string sSysVarId;
-string sSep = "";
-WriteLine("[");
-foreach(sSysVarId, dom.GetObject(ID_SYSTEM_VARIABLES).EnumUsedIDs()) {
-    object oSysVar = dom.GetObject(sSysVarId);
-    Write(sSep);
-    Write("{");
-    Write("\\"id\\":");
-    Write(oSysVar.ID());
-    Write(",\\"description\\":\\"");
-    Write(oSysVar.DPInfo().UriEncode());
-    Write("\\"}");
-    sSep = ",";
-}
-WriteLine("]");`;
-var GET_ROOMS_FUNCTIONS = `string sChnId;
-string sRoomId;
-string sFuncId;
-string sChnSepR = "";
-string sChnSepF = "";
-Write("{\\"rooms\\":{");
-foreach(sChnId, dom.GetObject(ID_CHANNELS).EnumUsedIDs()) {
-    object oChn = dom.GetObject(sChnId);
-    if (oChn) {
-        string sAddr = oChn.Address();
-        object oRooms = oChn.ChnRoom();
-        if (oRooms && oRooms.Count() > 0) {
-            Write(sChnSepR);
-            Write("\\"");
-            Write(sAddr);
-            Write("\\":[");
-            string sRoomSep = "";
-            foreach(sRoomId, oRooms) {
-                object oRoom = dom.GetObject(sRoomId);
-                Write(sRoomSep);
-                Write("\\"");
-                Write(oRoom.Name().UriEncode());
-                Write("\\"");
-                sRoomSep = ",";
-            }
-            Write("]");
-            sChnSepR = ",";
-        }
-    }
-}
-Write("},\\"functions\\":{");
-foreach(sChnId, dom.GetObject(ID_CHANNELS).EnumUsedIDs()) {
-    object oChn = dom.GetObject(sChnId);
-    if (oChn) {
-        string sAddr = oChn.Address();
-        object oFuncs = oChn.ChnFunction();
-        if (oFuncs && oFuncs.Count() > 0) {
-            Write(sChnSepF);
-            Write("\\"");
-            Write(sAddr);
-            Write("\\":[");
-            string sFuncSep = "";
-            foreach(sFuncId, oFuncs) {
-                object oFunc = dom.GetObject(sFuncId);
-                Write(sFuncSep);
-                Write("\\"");
-                Write(oFunc.Name().UriEncode());
-                Write("\\"");
-                sFuncSep = ",";
-            }
-            Write("]");
-            sChnSepF = ",";
-        }
-    }
-}
-Write("}}");`;
 var HubValueType = /* @__PURE__ */ ((HubValueType2) => {
 	HubValueType2["ALARM"] = "ALARM";
 	HubValueType2["FLOAT"] = "FLOAT";
@@ -115331,7 +116006,7 @@ function parseSysVarValue(type, raw) {
 	}
 }
 var WRITABLE_MARKER = "HAHM";
-function isRecord(value) {
+function isRecord2(value) {
 	return value !== null && typeof value === "object";
 }
 function asString2(value) {
@@ -115350,9 +116025,9 @@ function asOptionalNumber(value) {
 	const num = Number(value);
 	return Number.isFinite(num) ? num : void 0;
 }
-function asRecordArray(value) {
+function asRecordArray2(value) {
 	if (!Array.isArray(value)) return [];
-	return value.filter(isRecord);
+	return value.filter(isRecord2);
 }
 var HubFetcher = class {
 	client;
@@ -115371,7 +116046,7 @@ var HubFetcher = class {
 	*/
 	async fetchSystemVariables() {
 		const sid = this.sid();
-		const entries = asRecordArray(await this.client.post(JsonRpcMethod.SYSVAR_GET_ALL, void 0, sidOpts(sid)));
+		const entries = asRecordArray2(await this.client.post(JsonRpcMethod.SYSVAR_GET_ALL, void 0, sidOpts(sid)));
 		const descriptions = await this.fetchSysVarDescriptions();
 		return entries.map((entry) => this.toSystemVariable(entry, descriptions));
 	}
@@ -115413,7 +116088,7 @@ var HubFetcher = class {
 	/** Fetch all programs, coercing flags to booleans. */
 	async fetchPrograms() {
 		const sid = this.sid();
-		return asRecordArray(await this.client.post(JsonRpcMethod.PROGRAM_GET_ALL, void 0, sidOpts(sid))).map((entry) => {
+		return asRecordArray2(await this.client.post(JsonRpcMethod.PROGRAM_GET_ALL, void 0, sidOpts(sid))).map((entry) => {
 			const lastExecuteTime = entry.lastExecuteTime;
 			return {
 				id: asString2(entry.id),
@@ -115445,8 +116120,8 @@ var HubFetcher = class {
 		const sid = this.sid();
 		const parsed = await runScript(this.client, sid, GET_ROOMS_FUNCTIONS);
 		return {
-			rooms: toDecodedMap(isRecord(parsed) ? parsed.rooms : void 0),
-			functions: toDecodedMap(isRecord(parsed) ? parsed.functions : void 0)
+			rooms: toDecodedMap(isRecord2(parsed) ? parsed.rooms : void 0),
+			functions: toDecodedMap(isRecord2(parsed) ? parsed.functions : void 0)
 		};
 	}
 	/** Build the `SYSVAR_DESCRIPTIONS` map: sysvar id → description text. */
@@ -115455,7 +116130,7 @@ var HubFetcher = class {
 		const out = /* @__PURE__ */ new Map();
 		try {
 			const parsed = await runScript(this.client, sid, SYSVAR_DESCRIPTIONS);
-			for (const entry of asRecordArray(parsed)) {
+			for (const entry of asRecordArray2(parsed)) {
 				const id = asString2(entry.id);
 				if (id !== "") out.set(id, asString2(entry.description));
 			}
@@ -115492,7 +116167,7 @@ function sidOpts(sid) {
 }
 function toDecodedMap(value) {
 	const map = /* @__PURE__ */ new Map();
-	if (!isRecord(value)) return map;
+	if (!isRecord2(value)) return map;
 	for (const [addr, names] of Object.entries(value)) if (Array.isArray(names)) map.set(addr, names.filter((n) => typeof n === "string").map((n) => decodeRegaName(n)));
 	return map;
 }
@@ -116021,6 +116696,7 @@ var CentralUnit = class {
 	ifaceById = /* @__PURE__ */ new Map();
 	jsonClient;
 	session;
+	webUi;
 	callbackServer;
 	router;
 	recovery;
@@ -116088,6 +116764,30 @@ var CentralUnit = class {
 		});
 	}
 	/**
+	* Build the {@link CcuManagement} bound to this central's interface clients and
+	* (when credentialed) its JSON-RPC client. The session id is ensured per call
+	* through the {@link SessionManager}, so renews apply. INTERNAL: the facade
+	* exposes it; it is not part of the published surface.
+	*/
+	getManagement() {
+		return new CcuManagement({
+			json: this.jsonClient,
+			webUi: this.webUi,
+			getSessionId: () => this.session !== void 0 ? this.session.ensureSession() : Promise.resolve(void 0),
+			interfaceClient: (iface) => {
+				for (const runtime of this.runtimes.values()) if (runtime.iface === iface) return runtime.client;
+			},
+			configuredInterfaces: () => this.interfaces
+		});
+	}
+	/**
+	* Remove a device from the interface owning it, routing by `interfaceId`.
+	* Throws if the interface is unknown.
+	*/
+	async deleteDevice(interfaceId2, address, flags) {
+		await this.clientFor(interfaceId2).deleteDevice(address, flags);
+	}
+	/**
 	* Read the discovered paramset DESCRIPTION (the spec — types, ranges, flags)
 	* for a channel + paramset key from the in-memory {@link ParamsetDescriptionCache}.
 	* Returns `undefined` if the paramset has not been discovered. This is the
@@ -116186,14 +116886,14 @@ var CentralUnit = class {
 		};
 		const tls = this.tls;
 		const port = this.portFor(iface);
-		const path$2 = INTERFACE_REMOTE_PATH[iface];
+		const path$6 = INTERFACE_REMOTE_PATH[iface];
 		return new InterfaceClient({
 			centralName: this.centralName,
 			interface: iface,
 			host: this.host,
 			port,
 			tls,
-			...path$2 !== void 0 ? { path: path$2 } : {},
+			...path$6 !== void 0 ? { path: path$6 } : {},
 			...auth !== void 0 ? { auth } : {},
 			callbackUrlProvider: () => this.callbackUrl()
 		});
@@ -116219,10 +116919,14 @@ var CentralUnit = class {
 	}
 	buildJsonRpc() {
 		if (this.credentials === void 0) return;
-		if (this.options.jsonClient !== void 0) this.jsonClient = this.options.jsonClient;
-		else {
-			const client = new JsonRpcClient({ url: `${this.tls ? "https" : "http"}://${this.host}` });
+		if (this.options.jsonClient !== void 0) {
+			this.jsonClient = this.options.jsonClient;
+			this.webUi = this.options.webUiClient;
+		} else {
+			const scheme = this.tls ? "https" : "http";
+			const client = new JsonRpcClient({ url: `${scheme}://${this.host}` });
 			this.jsonClient = client;
+			this.webUi = this.options.webUiClient ?? new WebUiHttpClient({ url: `${scheme}://${this.host}` });
 			this.session = new SessionManager({
 				client,
 				username: this.credentials.username,
@@ -117700,7 +118404,7 @@ var TypedEventEmitter = class {
 };
 var DEFAULT_CENTRAL_NAME = "nodehomematic";
 var pendingTestInjectables;
-function toInterface(name) {
+function toInterface2(name) {
 	const match = Object.values(Interface).includes(name) ? name : void 0;
 	if (match === void 0) throw new ValidationError(`Unknown interface "${name}".`);
 	return match;
@@ -117710,7 +118414,7 @@ function deviceAddressOf4(channelAddress2) {
 	return colon === -1 ? channelAddress2 : channelAddress2.slice(0, colon);
 }
 function buildCentral(options, injectables) {
-	const interfaces = options.interfaces.map(toInterface);
+	const interfaces = options.interfaces.map(toInterface2);
 	if (interfaces.length === 0) throw new ValidationError("At least one interface is required.");
 	if (injectables.central !== void 0) return injectables.central;
 	return new CentralUnit({
@@ -117743,6 +118447,8 @@ var Homematic = class {
 	#started = false;
 	/** Bound hub fetcher, or undefined when no JSON-RPC client is available. */
 	#hub;
+	/** CCU-management service, built on first use, cleared at stop(). */
+	#management;
 	/** Snapshot of system variables, refreshed on start / refreshHub. */
 	#sysvars = [];
 	/** Snapshot of programs, refreshed on start / refreshHub. */
@@ -117800,6 +118506,7 @@ var Homematic = class {
 		this.#customEntityList = [];
 		this.#customEntitiesByKey.clear();
 		this.#hub = void 0;
+		this.#management = void 0;
 		this.#sysvars = [];
 		this.#programs = [];
 		this.#roomsByDevice.clear();
@@ -117844,6 +118551,98 @@ var Homematic = class {
 		await this.#central.installFirmware(device.interfaceId, deviceAddress);
 	}
 	/**
+	* Every interface the CCU offers (BidCos-RF, HmIP-RF, VirtualDevices, ...)
+	* with connection state, duty cycle, firmware and type where the CCU reports
+	* them. A value the CCU did not answer is `null`, never `0`. Needs a started
+	* facade.
+	*
+	* CCU methods: JSON-RPC `Interface.listInterfaces` / `Interface.isPresent`
+	* (eq-3/occu `WebUI/www/api/methods/interface/`), XML-RPC
+	* `listBidcosInterfaces` on BidCos-RF, JSON-RPC `Interface.getDutyCycle`
+	* (RaspberryMatic / OpenCCU only) for the HmIP access point.
+	*/
+	async listInterfaces() {
+		return this.#requireManagement().listInterfaces();
+	}
+	/**
+	* Open (default 60 s, 1..3600) or close the pairing window of a configured
+	* interface. XML-RPC `setInstallMode`; `mode: 'secure'` (BidCos only) also
+	* teaches the HomeMatic Secure key.
+	*/
+	async setInstallMode(request) {
+		await this.#requireManagement().setInstallMode(request);
+	}
+	/** Seconds left of an interface's pairing window (`null` when the CCU's answer was unusable). XML-RPC `getInstallMode`. */
+	async getInstallMode(interfaceName) {
+		return this.#requireManagement().getInstallMode(interfaceName);
+	}
+	/**
+	* Remove a device from its interface (XML-RPC `deleteDevice`). `flags` is an OR
+	* of {@link HM_DELETE_FLAGS}: `RESET` (0x01, factory reset), `FORCE` (0x02,
+	* remove even when unreachable), `DEFER` (0x04, remove when next reachable);
+	* `0` is a plain removal. The model drops the device once the CCU reports it
+	* through the `deleteDevices` callback. Throws {@link ValidationError} for an
+	* unknown device or invalid flags.
+	*/
+	async deleteDevice(deviceAddress, flags = 0) {
+		this.#requireManagement();
+		const device = this.#devicesByAddress.get(deviceAddress);
+		if (device === void 0) throw new ValidationError(`Unknown device "${deviceAddress}".`);
+		if (!Number.isInteger(flags) || flags < 0 || flags > 7) throw new ValidationError(`Invalid delete flags ${String(flags)} (expected an integer 0..7).`);
+		await this.#central.deleteDevice(device.interfaceId, deviceAddress, flags);
+	}
+	/**
+	* The CCU's active service messages (UNREACH, LOWBAT, CONFIG_PENDING,
+	* STICKY_UNREACH, ...). Needs WebUI credentials. ReGa script over
+	* `ReGa.runScript` (eq-3/occu `WebUI/www/rega/esp/system.fn`, `ID_SERVICES`).
+	*/
+	async serviceMessages() {
+		return this.#requireManagement().serviceMessages();
+	}
+	/** Acknowledge a service message by its `id` (ReGa `AlReceipt`, as the WebUI does). Needs WebUI credentials. */
+	async acknowledgeServiceMessage(id) {
+		await this.#requireManagement().acknowledgeServiceMessage(id);
+	}
+	/**
+	* Version, product (CCU3 / RaspberryMatic / OpenCCU), serial and hostname.
+	* Needs WebUI credentials. JSON-RPC `CCU.getVersion`, `CCU.getSerial`
+	* (eq-3/occu `WebUI/www/api/methods/ccu/`) plus a ReGa read of `/VERSION`.
+	*/
+	async ccuInfo() {
+		return this.#requireManagement().ccuInfo();
+	}
+	/**
+	* The CCU's heating groups ("Gruppen"): HmIP heating groups and HomeMatic
+	* heating groups with their member channels. Writes are separate and
+	* undocumented: {@link Homematic.createGroup}, `updateGroup`, `deleteGroup`.
+	* JSON-RPC `CCU.getHeatingGroupList` (eq-3/occu
+	* `WebUI/www/api/methods/ccu/getheatinggrouplist.tcl`). Needs WebUI credentials.
+	*/
+	async groups() {
+		return this.#requireManagement().groups();
+	}
+	/**
+	* Create a heating group (`type` e.g. `hmip.heating.group`, `members` channel
+	* addresses). Resolves with the group as read back from the CCU; a write the
+	* read-back does not show rejects with `GroupWriteVerificationError`.
+	*
+	* UNDOCUMENTED and firmware-dependent: no CCU API exists for this, so the call
+	* reproduces the WebUI's own HMServer page requests (eq-3/occu
+	* `HMserver/opt/HMServer/pages/GroupEditPage.ftl`, `GroupListPage.ftl`).
+	* Needs WebUI credentials.
+	*/
+	async createGroup(input) {
+		return this.#requireManagement().createGroup(input);
+	}
+	/** Rename a group and/or replace its member list (same caveats as {@link Homematic.createGroup}). */
+	async updateGroup(id, patch) {
+		return this.#requireManagement().updateGroup(id, patch);
+	}
+	/** Delete a group, verified by the read-back (same caveats as {@link Homematic.createGroup}). */
+	async deleteGroup(id) {
+		await this.#requireManagement().deleteGroup(id);
+	}
+	/**
 	* The MASTER configuration parameters of a channel, with the metadata needed
 	* to render a form. Empty array when nothing is known for the channel.
 	*/
@@ -118231,6 +119030,12 @@ var Homematic = class {
 		if (byName !== void 0) return byName.id;
 		throw new ValidationError(`Unknown program "${idOrName}".`);
 	}
+	/** Return the management service (built on first use), or throw before start(). */
+	#requireManagement() {
+		if (!this.#started) throw new ValidationError("Homematic is not started; call start() first.");
+		this.#management ??= this.#central.getManagement();
+		return this.#management;
+	}
 	/** Return the bound hub fetcher, or throw if none (no credentials). */
 	#requireHub() {
 		if (this.#hub === void 0) throw new ValidationError("Hub is unavailable (no WebUI credentials configured).");