@camstack/addon-provider-velux 0.2.153 → 0.2.155

package/dist/addon.js

@@ -33,7 +33,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 //#endregion
 let node_tls = require("node:tls");
 let timers_promises = require("timers/promises");
-//#region ../types/dist/event-category-CaURIwQA.mjs
+//#region ../types/dist/event-category-BmPm98n0.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -517,6 +517,10 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["RunningStarted"] = "running.started";
 	/** Mirrors `runningStateCapability.events.onFinished`. */
 	EventCategory["RunningFinished"] = "running.finished";
+	/** Mirrors `deviceRunsCapability.events.onRunOpened` - a durable run record opened. */
+	EventCategory["DeviceRunOpened"] = "device-run.opened";
+	/** Mirrors `deviceRunsCapability.events.onRunClosed` - a durable run record closed. */
+	EventCategory["DeviceRunClosed"] = "device-run.closed";
 	/**
 	* Cap event fired by every device that registers the `event-emitter`
 	* capability. Mirrors `eventEmitterCapability.events.onEvent`. Carries
@@ -5865,7 +5869,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-CSYuxssh.mjs
+//#region ../types/dist/sleep-BKzhQTSm.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -9378,6 +9382,7 @@ var CAP_NAMES = Object.freeze([
 	"device-ops",
 	"device-provider",
 	"device-removal-hook",
+	"device-runs",
 	"device-state",
 	"device-status",
 	"dishwasher",
@@ -11322,7 +11327,7 @@ object({
 	params: record(string(), union([string(), number()])).optional()
 });
 //#endregion
-//#region ../types/dist/composition-BBzVf2xd.mjs
+//#region ../types/dist/composition-BiKWlUCc.mjs
 /**
 * The ffmpeg build every CamStack node downloads, per platform and arch.
 *
@@ -12255,7 +12260,15 @@ var HelperSpecSchema = discriminatedUnion("kind", [
 		thresholdWatts: number().positive(),
 		startDwellMs: number().int().nonnegative(),
 		stopDwellMs: number().int().nonnegative(),
-		member: HelperMemberSchema
+		member: HelperMemberSchema,
+		/**
+		* The plug that powers the appliance (`switch.on`). Optional: when set, the
+		* composition carries a `power-source` feature, so the hub can cut and restore
+		* that plug (power-source link of a NEW-target composition).
+		*/
+		powerSwitch: HelperMemberSchema.optional(),
+		/** How long a forced restart keeps the plug off; the cap's default when unset. */
+		offSeconds: number().optional()
 	}),
 	object({
 		kind: literal("statistic"),
@@ -13653,7 +13666,13 @@ var MigrationLedgerEntrySchema = object({
 	/** Why it is `blocked` or `held` (`dependency-failed`, `snapshot-refused`, …). */
 	reason: string().nullable(),
 	nodeId: string().nullable(),
-	bootId: string().nullable()
+	bootId: string().nullable(),
+	/**
+	* The catalogued meta of this id (description, body kind, store, `dependsOn`…),
+	* joined by the engine from the catalogues it knows this boot. Absent when no
+	* catalogue lists the id (a newer database).
+	*/
+	meta: MigrationMetaSchema.optional()
 });
 /** A catalogued migration that is not applied, with where it stands. */
 var MigrationPendingEntrySchema = object({
@@ -19460,6 +19479,14 @@ var APPLIANCE_CAP_VOCABULARY = {
 			}
 		} }
 	},
+	"device-runs": {
+		scope: "device",
+		noun: t("Runs", "Esecuzioni"),
+		events: {
+			onRunOpened: { notOperatorFacing: "the durable record of a run that the running-state start flip already announces" },
+			onRunClosed: { notOperatorFacing: "the durable record of a run that the running-state finish flip already announces" }
+		}
+	},
 	update: {
 		scope: "device",
 		noun: t("Firmware update", "Aggiornamento firmware"),
@@ -46042,6 +46069,117 @@ function actuator(input) {
 	};
 }
 new Map(GROUP_TEMPLATES.map((template) => [template.id, template]));
+var PowerSourceRefusalReasonSchema = _enum([
+	"no-power-source",
+	"switch-missing",
+	"switch-offline",
+	"switch-unknown",
+	"restart-in-progress",
+	"switch-call-failed"
+]);
+var PowerSourceActionResultSchema = discriminatedUnion("accepted", [object({ accepted: literal(true) }), object({
+	accepted: literal(false),
+	reason: PowerSourceRefusalReasonSchema,
+	/** One line for the operator, naming the switch. */
+	message: string()
+})]);
+var PowerSourceInfoSchema = object({
+	/** False when the device has no power source linked; the rest is then empty. */
+	linked: boolean(),
+	switchDeviceId: number().nullable(),
+	switchName: string().nullable(),
+	/** The switch's on/off state, or null when it is unknown. Never false for unknown (D393). */
+	switchOn: boolean().nullable(),
+	switchOnline: boolean().nullable(),
+	restartInProgress: boolean(),
+	offSeconds: number().int()
+});
+/** The composed slice: the switch state the link mirrors, plus the stored off time. */
+var PowerSourceStateSchema = object({
+	/** Null while the switch has not reported: unknown is never `false` (D393). */
+	switchOn: boolean().nullable(),
+	offSeconds: number().int(),
+	lastFetchedAt: number()
+});
+var POWER_SOURCE_DEVICE_TYPES = [
+	DeviceType.Gateway,
+	DeviceType.Hub,
+	DeviceType.Camera,
+	DeviceType.Sensor,
+	DeviceType.MediaPlayer,
+	DeviceType.Vacuum,
+	DeviceType.Generic,
+	DeviceType.Washer,
+	DeviceType.Dryer,
+	DeviceType.Dishwasher,
+	DeviceType.PetFountain,
+	DeviceType.Fan,
+	DeviceType.Humidifier,
+	DeviceType.Climate,
+	DeviceType.WaterHeater
+];
+var powerSourceCustomize = {
+	version: 1,
+	targets: [{
+		id: "switch",
+		cardinality: "scalar",
+		vocabulary: {
+			cap: "power-source",
+			stateField: "switchOn"
+		},
+		deviceTypes: POWER_SOURCE_DEVICE_TYPES,
+		apply: "add",
+		path: "switchOn",
+		sources: [{
+			kind: "switch",
+			transforms: [{ kind: "identity" }]
+		}],
+		companions: [{
+			kind: "constant",
+			path: "offSeconds",
+			value: 10,
+			when: "add"
+		}, {
+			kind: "clock",
+			path: "lastFetchedAt",
+			when: "always"
+		}],
+		sourceReport: { status: "assignment-status" }
+	}]
+};
+var deviceInput$1 = object({ deviceId: number().int().nonnegative() });
+var powerSourceCapability = {
+	name: "power-source",
+	scope: "device",
+	mode: "singleton",
+	deviceTypes: POWER_SOURCE_DEVICE_TYPES,
+	methods: {
+		getStatus: systemMethod(deviceInput$1, PowerSourceInfoSchema, { auth: "admin" }),
+		powerOn: systemMethod(deviceInput$1, PowerSourceActionResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		powerOff: systemMethod(deviceInput$1, PowerSourceActionResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		forceRestart: systemMethod(deviceInput$1, PowerSourceActionResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		})
+	},
+	runtimeState: PowerSourceStateSchema,
+	customize: powerSourceCustomize,
+	/**
+	* Runtime-state durability: **session** — mirrored from the linked switch on
+	* its next report; a restored value would outlive the reading it names.
+	*
+	* See `RuntimeStateDurability`. Enforced by
+	* `scripts/check-runtime-state-durability.ts`.
+	*/
+	durability: "session",
+	history: "none"
+};
 DeviceFeature.LightColorRgb, DeviceFeature.LightColorHsv, DeviceFeature.LightColorMired;
 DeviceType.Camera;
 `${COMPOSED_DEVICE_STABLE_ID_PREFIX}`;
@@ -47467,6 +47605,101 @@ method(object({ deviceId: number().int() }), array(SeriesInfoSchema).readonly())
 	kind: "mutation",
 	auth: "admin"
 });
+/**
+* device-runs - the durable record of ONE run of a device: a washing cycle, a
+* dishwasher cycle, later a mow or a clean (D992).
+*
+* A run is a DOCUMENT (opened at one instant, closed at another, carrying what
+* was measured over it), never a sample - device-history keeps the numbers over
+* time and its `device-runs` provider keeps these documents beside them, because
+* the energy of a run is a question about device-history's own series. The
+* record is written from the `running-state` flip on `DeviceStateChanged`; it
+* survives a restart (the open row is on disk) and a missed flip (boot compares
+* the open rows against the live snapshots).
+*
+* Every measurement is `number | null` and `null` means "could not be
+* measured", never `0` (D393). A run closed by the boot reconcile because the
+* device stopped while nobody was watching has `outcome: 'unknown'`.
+*/
+var DeviceRunKindSchema = _enum([
+	"appliance",
+	"mower",
+	"vacuum"
+]);
+var DeviceRunStateSchema = _enum(["open", "closed"]);
+var DeviceRunOutcomeSchema = _enum([
+	"completed",
+	"aborted",
+	"error",
+	"unknown"
+]);
+/** What opened or closed the run. `reconcile` is the boot comparison against live state. */
+var DeviceRunSourceSchema = _enum([
+	"running-state",
+	"activity",
+	"reconcile"
+]);
+/** How the energy of a run was obtained; `null` when it could not be. */
+var DeviceRunEnergyMethodSchema = _enum(["counter-delta", "history-integral"]);
+var DeviceRunPhaseSchema = object({
+	phase: string(),
+	at: number()
+});
+/** The kind-specific block; a later phase adds a branch, nothing else changes. */
+var DeviceRunDetailSchema = discriminatedUnion("kind", [object({
+	kind: literal("appliance"),
+	/** kWh used over the run. */
+	energyKwh: number().nullable().meta(readingMeta("energy")),
+	energyMethod: DeviceRunEnergyMethodSchema.nullable(),
+	/** Highest power seen while the run was open. */
+	peakW: number().nullable().meta(readingMeta("power")),
+	/** Time-weighted mean power while the run was open. */
+	avgW: number().nullable().meta(readingMeta("power")),
+	/** The program the appliance said it ran when the run opened. */
+	program: string().nullable(),
+	remainingAtStartSec: number().nullable().meta(readingMeta("duration")),
+	/** The last phase the device reported before the run closed. */
+	finalPhase: string().nullable(),
+	/**
+	* The meter's energy counter when the run opened; `null` when the meter had
+	* not said (or the run was opened late, by the boot reconcile). It lives in
+	* the row so a run that outlives a restart still ends with `end - start`.
+	*/
+	energyStartKwh: number().nullable().meta(readingMeta("energy")),
+	/** Milliseconds of power readings behind `avgW` - the weight a restart resumes the mean with. */
+	powerObservedMs: number()
+})]);
+var DeviceRunSchema = object({
+	/** `${deviceId}:${startedAt}`. */
+	runId: string(),
+	deviceId: number().int(),
+	kind: DeviceRunKindSchema,
+	state: DeviceRunStateSchema,
+	startedAt: number(),
+	endedAt: number().nullable(),
+	durationMs: number().nullable(),
+	outcome: DeviceRunOutcomeSchema.nullable(),
+	startSource: DeviceRunSourceSchema,
+	endSource: DeviceRunSourceSchema.nullable(),
+	/** Where the device's running bit came from (`running-state.source`); `null` when it did not say. */
+	runningSource: _enum(["native", "assigned"]).nullable(),
+	phases: array(DeviceRunPhaseSchema),
+	detail: DeviceRunDetailSchema
+});
+DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, method(object({
+	deviceId: number().int(),
+	outcome: DeviceRunOutcomeSchema.optional(),
+	atFrom: number().optional(),
+	atTo: number().optional(),
+	limit: number().int().positive().max(200).default(50),
+	cursor: string().optional()
+}), object({
+	runs: array(DeviceRunSchema).readonly(),
+	nextCursor: string().nullable()
+})), method(object({
+	deviceId: number().int(),
+	runId: string()
+}), DeviceRunSchema.nullable()), method(object({ deviceId: number().int() }), DeviceRunSchema.nullable());
 var DeviceCaStatusSchema = discriminatedUnion("state", [
 	object({ state: literal("absent") }),
 	object({
@@ -47602,8 +47835,8 @@ method(object({}), object({
 });
 var KeychainKeySourceSchema = object({
 	kind: _enum([
-		"config-file",
-		"previous-config-file",
+		"mounted-file",
+		"previous-mounted-file",
 		"platform",
 		"default-file"
 	]),
@@ -52099,7 +52332,8 @@ var PALETTE_ENTRY_IDS = [
 	"switch",
 	"siren",
 	"button",
-	"doorbell"
+	"doorbell",
+	"appliance-cycle"
 ];
 var AUDIO_ENTRY_ID = "audio";
 /** Six rungs, quiet → loud. The opaque end is the entry's hex. */
@@ -52170,7 +52404,8 @@ var CAMSTACK_HEX = {
 	switch: "#7a812a",
 	siren: "#ac5d7f",
 	button: "#b276cd",
-	doorbell: "#0087ab"
+	doorbell: "#0087ab",
+	"appliance-cycle": "#2a8c8c"
 };
 var CAMSTACK_FALLBACK = [
 	"#b34dc7",
@@ -52235,7 +52470,8 @@ var HIGH_CONTRAST_HEX = {
 	switch: "#d05259",
 	siren: "#cd67b3",
 	button: "#c9746a",
-	doorbell: "#338eeb"
+	doorbell: "#338eeb",
+	"appliance-cycle": "#00848a"
 };
 var HIGH_CONTRAST_FALLBACK = [
 	"#817f3b",
@@ -52300,7 +52536,8 @@ var OKABE_ITO_HEX = {
 	switch: "#ad2c4e",
 	siren: "#348e08",
 	button: "#d27303",
-	doorbell: "#55770f"
+	doorbell: "#55770f",
+	"appliance-cycle": "#00737d"
 };
 var OKABE_ITO_FALLBACK = [
 	"#9a3784",
@@ -52509,6 +52746,7 @@ sub("switch", "control", "control", "switch", "Switch");
 sub("siren", "control", "control", "siren", "Siren");
 sub("button", "control", "control", "button", "Button");
 sub("doorbell", "control", "control", "doorbell", "Doorbell");
+sub("appliance-cycle", "control", "control", "switch", "Appliance cycle");
 for (const l of AUDIO_MACRO_LABELS) {
 	const kind = `audio-${l.id}`;
 	if (entries.has(kind)) continue;
@@ -61140,7 +61378,8 @@ var CAP_TO_KIND = {
 	cover: "cover",
 	switch: "switch",
 	button: "button",
-	doorbell: "doorbell"
+	doorbell: "doorbell",
+	"running-state": "appliance-cycle"
 };
 function buildDescriptor(capName, kind) {
 	const t = EVENT_TAXONOMY[kind];
@@ -64270,10 +64509,7 @@ method(object({ nodeId: string().optional() }).optional(), array(AddonListItemSc
 }), InstallPackageResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ packageName: string() }), InstallPackageResultSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(_void(), boolean()), method(_void(), array(unknown()).readonly()), method(object({
+}), method(object({
 	packageName: string().min(1),
 	nodeId: string().optional(),
 	everywhere: boolean().optional()
@@ -65534,19 +65770,19 @@ var RemoteSetConfigResultSchema = discriminatedUnion("status", [object({ status:
 	reason: _enum(["unknown-template", "not-a-media-player"]),
 	detail: string()
 })]);
-var deviceInput$1 = object({ deviceId: number().int().nonnegative() });
+var deviceInput = object({ deviceId: number().int().nonnegative() });
 DeviceType.MediaPlayer;
-method(deviceInput$1, RemoteConfigSchema, { auth: "admin" }), method(deviceInput$1.extend({ config: RemoteConfigSchema }), RemoteSetConfigResultSchema, {
+method(deviceInput, RemoteConfigSchema, { auth: "admin" }), method(deviceInput.extend({ config: RemoteConfigSchema }), RemoteSetConfigResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(deviceInput$1, RemoteCommandListSchema, { auth: "protected" }), method(deviceInput$1.extend({
+}), method(deviceInput, RemoteCommandListSchema, { auth: "protected" }), method(deviceInput.extend({
 	role: RemoteRoleSchema,
 	/** Sends in a row (volume steps). */
 	repeat: number().int().min(1).max(50).default(1)
 }), RemoteSendResultSchema, {
 	kind: "mutation",
 	auth: "protected"
-}), method(deviceInput$1.extend({
+}), method(deviceInput.extend({
 	command: RemoteMediaCommandSchema,
 	muted: boolean().optional(),
 	source: string().optional(),
@@ -66414,6 +66650,60 @@ onColorChanged: { data: object({
 	*/
 	history: "none"
 };
+/**
+* `connection-test` — pre-creation validation of an integration's settings,
+* system-scoped collection (one provider per integration addon).
+*
+* ── Why this cap exists ─────────────────────────────────────────────────────
+*
+* Before it, `integrations.testConnection` had exactly two behaviours: a broker
+* branch (`settings.brokerId` → `broker.testConnection`) and a DEFAULT branch
+* that probed `settings.main_stream_url ?? settings.url` with ffprobe. Every
+* account-based integration — Dreo, Dreame, Tuya, Petkit, Wyze — fell into that
+* default and was told `{"success":false,"error":"No stream URL provided"}`.
+* That answer neither validated nor refused anything, so:
+*
+*   - the Test button had NEVER worked for an account integration, and
+*   - `integrations.create` had nothing to gate on, so an integration with a
+*     wrong password was created happily and failed later, silently, at
+*     reconcile time.
+*
+* The structural gap was that at CREATE time the integration does not exist
+* yet: there is no `integrationId`, no `brokerId`, no live client — and every
+* existing provider surface (`device-provider`, `device-adoption`) is keyed by
+* one of those. There was no way to ask "are these settings valid?" before the
+* row existed.
+*
+* ── The contract ────────────────────────────────────────────────────────────
+*
+* The provider knows how to validate its OWN settings. The framework does not
+* guess from the shape of the settings — a stream-URL probe is one provider's
+* implementation of this cap, not the universal fallback. A provider that does
+* not register this cap is a KNOWN "cannot validate", never a silent pass.
+*
+* `testSettings` takes the candidate settings blob exactly as the wizard's
+* config step collected it (the same blob that would be handed to
+* `integrations.create`), and MUST NOT persist anything, mint an integration,
+* or mutate live state. It opens a throwaway session, asks, and closes it.
+*
+* ── The three outcomes are NOT interchangeable ──────────────────────────────
+*
+* This is the whole point of the discriminated union: a `null` from a timeout
+* must never look like a `null` from a refusal.
+*
+*   - `validated`    — the remote ACCEPTED these credentials. Observed.
+*   - `rejected`     — the remote REFUSED these credentials. Observed.
+*                      This is the ONLY outcome that blocks creation.
+*   - `inconclusive` — the check could not complete (DNS, timeout, 5xx, an
+*                      unexpected shape). NOTHING was observed about the
+*                      credentials. Never rendered, or counted, as a failure.
+*
+* A provider that cannot tell a refusal from a transport fault must return
+* `inconclusive`. Guessing `rejected` would block creation on a flaky network;
+* guessing `validated` would wave a wrong password through.
+*/
+/** Ceiling on how long a pre-creation probe may hold the wizard. */
+var CONNECTION_TEST_TIMEOUT_MS = 2e4;
 var ConnectionTestOutcomeSchema = discriminatedUnion("outcome", [
 	object({
 		outcome: literal("validated"),
@@ -69866,117 +70156,6 @@ var lockControlCapability = {
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastChangedAt"]
 };
-var PowerSourceRefusalReasonSchema = _enum([
-	"no-power-source",
-	"switch-missing",
-	"switch-offline",
-	"switch-unknown",
-	"restart-in-progress",
-	"switch-call-failed"
-]);
-var PowerSourceActionResultSchema = discriminatedUnion("accepted", [object({ accepted: literal(true) }), object({
-	accepted: literal(false),
-	reason: PowerSourceRefusalReasonSchema,
-	/** One line for the operator, naming the switch. */
-	message: string()
-})]);
-var PowerSourceInfoSchema = object({
-	/** False when the device has no power source linked; the rest is then empty. */
-	linked: boolean(),
-	switchDeviceId: number().nullable(),
-	switchName: string().nullable(),
-	/** The switch's on/off state, or null when it is unknown. Never false for unknown (D393). */
-	switchOn: boolean().nullable(),
-	switchOnline: boolean().nullable(),
-	restartInProgress: boolean(),
-	offSeconds: number().int()
-});
-/** The composed slice: the switch state the link mirrors, plus the stored off time. */
-var PowerSourceStateSchema = object({
-	/** Null while the switch has not reported: unknown is never `false` (D393). */
-	switchOn: boolean().nullable(),
-	offSeconds: number().int(),
-	lastFetchedAt: number()
-});
-var POWER_SOURCE_DEVICE_TYPES = [
-	DeviceType.Gateway,
-	DeviceType.Hub,
-	DeviceType.Camera,
-	DeviceType.Sensor,
-	DeviceType.MediaPlayer,
-	DeviceType.Vacuum,
-	DeviceType.Generic,
-	DeviceType.Washer,
-	DeviceType.Dryer,
-	DeviceType.Dishwasher,
-	DeviceType.PetFountain,
-	DeviceType.Fan,
-	DeviceType.Humidifier,
-	DeviceType.Climate,
-	DeviceType.WaterHeater
-];
-var powerSourceCustomize = {
-	version: 1,
-	targets: [{
-		id: "switch",
-		cardinality: "scalar",
-		vocabulary: {
-			cap: "power-source",
-			stateField: "switchOn"
-		},
-		deviceTypes: POWER_SOURCE_DEVICE_TYPES,
-		apply: "add",
-		path: "switchOn",
-		sources: [{
-			kind: "switch",
-			transforms: [{ kind: "identity" }]
-		}],
-		companions: [{
-			kind: "constant",
-			path: "offSeconds",
-			value: 10,
-			when: "add"
-		}, {
-			kind: "clock",
-			path: "lastFetchedAt",
-			when: "always"
-		}],
-		sourceReport: { status: "assignment-status" }
-	}]
-};
-var deviceInput = object({ deviceId: number().int().nonnegative() });
-var powerSourceCapability = {
-	name: "power-source",
-	scope: "device",
-	mode: "singleton",
-	deviceTypes: POWER_SOURCE_DEVICE_TYPES,
-	methods: {
-		getStatus: systemMethod(deviceInput, PowerSourceInfoSchema, { auth: "admin" }),
-		powerOn: systemMethod(deviceInput, PowerSourceActionResultSchema, {
-			kind: "mutation",
-			auth: "admin"
-		}),
-		powerOff: systemMethod(deviceInput, PowerSourceActionResultSchema, {
-			kind: "mutation",
-			auth: "admin"
-		}),
-		forceRestart: systemMethod(deviceInput, PowerSourceActionResultSchema, {
-			kind: "mutation",
-			auth: "admin"
-		})
-	},
-	runtimeState: PowerSourceStateSchema,
-	customize: powerSourceCustomize,
-	/**
-	* Runtime-state durability: **session** — mirrored from the linked switch on
-	* its next report; a restored value would outlive the reading it names.
-	*
-	* See `RuntimeStateDurability`. Enforced by
-	* `scripts/check-runtime-state-durability.ts`.
-	*/
-	durability: "session",
-	history: "none"
-};
 /**
 * A monotonic total between resets (D944). Energy uses `power-meter.energy`
 * so dashboards keep one series; every other instantaneous reading lands here.
@@ -73518,6 +73697,10 @@ var RUNNING_DEVICE_TYPES = Object.values(DeviceType);
 /** Generic Customize target for the running boolean (D936). */
 var runningCustomize = {
 	version: 1,
+	overridable: [{
+		path: "running",
+		by: "running"
+	}],
 	targets: [{
 		id: "running",
 		cardinality: "scalar",
@@ -73575,7 +73758,7 @@ var runningCustomize = {
 				kind: "constant",
 				path: "phase",
 				value: null,
-				when: "always"
+				when: "add"
 			},
 			{
 				kind: "clock",
@@ -76885,7 +77068,7 @@ var ExternalIdentityKeySchema = object({
 	provider: string().min(1),
 	subject: string().min(1)
 });
-method(_void(), array(UserSummarySchema), { auth: "admin" }), method(CreateUserInputSchema, UserSummarySchema, {
+method(_void(), array(UserSummarySchema), { auth: "admin" }), method(_void(), object({ defaultPasswordInUse: boolean() }), { auth: "admin" }), method(CreateUserInputSchema, UserSummarySchema, {
 	kind: "mutation",
 	auth: "admin",
 	access: "create"
@@ -80224,13 +80407,6 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"addons.installFromWorkspace": {
-		capName: "addons",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
 	"addons.installPackage": {
 		capName: "addons",
 		capScope: "system",
@@ -80238,13 +80414,6 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
-	"addons.isWorkspaceAvailable": {
-		capName: "addons",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
 	"addons.list": {
 		capName: "addons",
 		capScope: "system",
@@ -80294,13 +80463,6 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"addons.listWorkspacePackages": {
-		capName: "addons",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
 	"addons.onAddonLogs": {
 		capName: "addons",
 		capScope: "system",
@@ -82968,6 +83130,27 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"deviceRuns.getCurrentRun": {
+		capName: "device-runs",
+		capScope: "device",
+		addonId: null,
+		access: "view",
+		role: "viewer"
+	},
+	"deviceRuns.getRun": {
+		capName: "device-runs",
+		capScope: "device",
+		addonId: null,
+		access: "view",
+		role: "viewer"
+	},
+	"deviceRuns.listRuns": {
+		capName: "device-runs",
+		capScope: "device",
+		addonId: null,
+		access: "view",
+		role: "viewer"
+	},
 	"deviceState.claimFields": {
 		capName: "device-state",
 		capScope: "system",
@@ -89681,6 +89864,13 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
+	"userManagement.getAdminBootstrapStatus": {
+		capName: "user-management",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
 	"userManagement.getTotpStatus": {
 		capName: "user-management",
 		capScope: "system",
@@ -91166,6 +91356,21 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceRuns.getCurrentRun": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceRuns.getRun": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceRuns.listRuns": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceState.claimFields": [{
 		name: "deviceId",
 		form: "single",
@@ -93648,13 +93853,114 @@ NC_AUDIO_DEFAULTS.hitPercent, NC_AUDIO_DEFAULTS.samplingSeconds;
 *
 * Pure, RN-safe: the viewer imports the support rule from here.
 */
+/**
+* Control caps that still have a raise and a clear an operator names: an
+* appliance cycle raises when it STARTS and clears when it FINISHES. Kept out
+* of `SOURCE_CAP_ACTIVE_FIELD` on purpose — that table also makes a device a
+* camera-sensor / recorder-trigger source, and a dishwasher is neither.
+*/
+var CYCLE_RAISED_FIELD_BY_CAP = { "running-state": "running" };
 /** Event kind → the boolean field of its cap slice that means "raised". */
 var NC_SENSOR_RAISED_FIELD_BY_KIND = Object.freeze(Object.fromEntries(Object.entries(EVENT_KIND_BY_CAP).flatMap(([capName, descriptor]) => {
+	const cycleField = CYCLE_RAISED_FIELD_BY_CAP[capName];
+	if (cycleField !== void 0) return [[descriptor.kind, cycleField]];
 	const field = SOURCE_CAP_ACTIVE_FIELD[capName];
 	if (field === void 0 || descriptor.category !== "sensor") return [];
 	return [[descriptor.kind, field]];
 })));
 Object.freeze(Object.keys(NC_SENSOR_RAISED_FIELD_BY_KIND));
+Object.freeze({
+	contact: {
+		starts: {
+			en: "opened",
+			it: "si apre"
+		},
+		finishes: {
+			en: "closed",
+			it: "si chiude"
+		}
+	},
+	"motion-sensor": {
+		starts: {
+			en: "motion detected",
+			it: "movimento rilevato"
+		},
+		finishes: {
+			en: "motion stopped",
+			it: "movimento terminato"
+		}
+	},
+	smoke: {
+		starts: {
+			en: "smoke detected",
+			it: "fumo rilevato"
+		},
+		finishes: {
+			en: "smoke gone",
+			it: "fumo scomparso"
+		}
+	},
+	flood: {
+		starts: {
+			en: "water detected",
+			it: "acqua rilevata"
+		},
+		finishes: {
+			en: "dry again",
+			it: "di nuovo asciutto"
+		}
+	},
+	gas: {
+		starts: {
+			en: "gas detected",
+			it: "gas rilevato"
+		},
+		finishes: {
+			en: "gas gone",
+			it: "gas scomparso"
+		}
+	},
+	"carbon-monoxide": {
+		starts: {
+			en: "carbon monoxide detected",
+			it: "monossido rilevato"
+		},
+		finishes: {
+			en: "carbon monoxide gone",
+			it: "monossido scomparso"
+		}
+	},
+	vibration: {
+		starts: {
+			en: "vibration detected",
+			it: "vibrazione rilevata"
+		},
+		finishes: {
+			en: "vibration stopped",
+			it: "vibrazione terminata"
+		}
+	},
+	tamper: {
+		starts: {
+			en: "tampered with",
+			it: "manomesso"
+		},
+		finishes: {
+			en: "tamper cleared",
+			it: "manomissione rientrata"
+		}
+	},
+	"appliance-cycle": {
+		starts: {
+			en: "the cycle started",
+			it: "il ciclo parte"
+		},
+		finishes: {
+			en: "the cycle finished",
+			it: "il ciclo è terminato"
+		}
+	}
+});
 object({
 	phase: _enum(["raised", "resolved"]),
 	episodeId: string().min(1),
@@ -93861,6 +94167,10 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
+	[...RULE_TEXT],
+	[...RULE_TEXT],
+	[...RULE_TEXT],
+	[...RULE_TEXT],
 	[...RULE_BODY_ONLY],
 	[...RULE_TEXT],
 	([...RULE_TEXT], [...DEVICE_EVENTS]),
@@ -93878,6 +94188,7 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
+	[...RULE_TEXT],
 	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -94122,6 +94433,7 @@ new Set([
 	"siren",
 	"button",
 	"doorbell",
+	"appliance-cycle",
 	"audio-speech",
 	"audio-scream",
 	"audio-crying",
@@ -103431,8 +103743,90 @@ var VeluxClientRegistry = class {
 };
 //#endregion
 //#region src/klf-probe.ts
-/** Seconds allowed for the TLS handshake plus password exchange of a probe. */
-var PROBE_LOGIN_TIMEOUT_S = 15;
+/**
+* Defaults add up, worst case, to 12 + 3 + 1.5 + 1.5 = 18 s, which is the
+* wizard's `CONNECTION_TEST_TIMEOUT_MS` ceiling (20 s) minus the 2 s margin of
+* `DEFAULT_TEST_DEADLINE_MS`, so a stuck gateway is named here instead of the
+* wizard giving up unnamed. The handshake gets 12 s because a real KLF-200 needs
+* about 4.2 s for ONE handshake (TLSv1.2, DHE-RSA-AES256-SHA256 on a weak CPU).
+*
+* A probe opens exactly ONE connection: the gateway frees a closed slot very
+* slowly (measured 2026-11-01: a bare TCP connect and close before the TLS connect
+* left the real session without a handshake for 20 s), so no pre-check connects first.
+*/
+var DEFAULT_KLF_PROBE_TIMEOUTS_MS = {
+	tls: 12e3,
+	password: 3e3,
+	version: 1500,
+	logout: 1500
+};
+var PHASE_TEXT = {
+	tls: "did not accept a connection or complete the TLS handshake on port 51200",
+	password: "did not answer the password",
+	version: "did not answer the version request",
+	logout: "did not close the session"
+};
+/** A probe step ran out of time. Names the step, so a bound is never a silent hang. */
+var KlfProbeTimeoutError = class extends Error {
+	phase;
+	host;
+	limitMs;
+	constructor(phase, host, limitMs) {
+		super(`The gateway ${host} ${PHASE_TEXT[phase]} within ${Math.round(limitMs / 100) / 10}s (timed out)`);
+		this.phase = phase;
+		this.host = host;
+		this.limitMs = limitMs;
+		this.name = "KlfProbeTimeoutError";
+	}
+};
+async function withDeadline(work, ms, onTimeout) {
+	let timer;
+	try {
+		return await Promise.race([work, new Promise((_resolve, reject) => {
+			timer = setTimeout(() => reject(onTimeout()), ms);
+		})]);
+	} finally {
+		clearTimeout(timer);
+	}
+}
+/** How often the login watcher checks whether the handshake has finished. */
+var PHASE_POLL_MS = 20;
+/**
+* The library's `loginAsync` runs the TLS handshake and the password answer as one
+* call. `KLF200SocketProtocol` appears when the handshake is done and the password
+* is on its way, so watching it splits the call into two bounded, named steps.
+*/
+async function loginInPhases(connection, host, password, limits) {
+	let handshakeDone = false;
+	let passwordTimer;
+	let tlsTimer;
+	let poll;
+	const tlsError = () => new KlfProbeTimeoutError("tls", host, limits.tls);
+	const passwordError = () => new KlfProbeTimeoutError("password", host, limits.password);
+	const bounds = new Promise((_resolve, reject) => {
+		tlsTimer = setTimeout(() => reject(tlsError()), limits.tls);
+		poll = setInterval(() => {
+			if (handshakeDone || connection.KLF200SocketProtocol === void 0) return;
+			handshakeDone = true;
+			clearTimeout(tlsTimer);
+			clearInterval(poll);
+			passwordTimer = setTimeout(() => reject(passwordError()), limits.password);
+		}, PHASE_POLL_MS);
+	});
+	const libraryS = (limits.tls + limits.password) / 1e3;
+	try {
+		await Promise.race([connection.loginAsync(password, libraryS), bounds]);
+	} catch (err) {
+		if (err instanceof KlfProbeTimeoutError) throw err;
+		if (/^timeout$/i.test(errMsg(err)) || err instanceof Error && err.name === "TimeoutError") throw handshakeDone ? passwordError() : tlsError();
+		throw err;
+	} finally {
+		clearTimeout(tlsTimer);
+		clearTimeout(passwordTimer);
+		clearInterval(poll);
+		bounds.catch(() => void 0);
+	}
+}
 /**
 * Opens ONE session, authenticates, reads the firmware version and closes the
 * session again, whatever happens. The gateway accepts two sessions in total, so
@@ -103440,28 +103834,44 @@ var PROBE_LOGIN_TIMEOUT_S = 15;
 * list. A refused password rejects with `VeluxLoginRefusedError`.
 */
 async function probeKlfGateway(options) {
+	const limits = {
+		...DEFAULT_KLF_PROBE_TIMEOUTS_MS,
+		...options.timeoutsMs
+	};
 	const connection = options.tls === void 0 ? new Connection(options.host) : new Connection(options.host, options.tls);
 	try {
 		try {
-			await connection.loginAsync(options.password, PROBE_LOGIN_TIMEOUT_S);
+			await loginInPhases(connection, options.host, options.password, limits);
 		} catch (err) {
+			if (err instanceof KlfProbeTimeoutError) throw err;
+			if (err instanceof Error && typeof Reflect.get(err, "code") === "string") throw err;
 			throw loginFailure(err);
 		}
 		try {
-			const { SoftwareVersion } = await new Gateway(connection).getVersionAsync();
+			const { SoftwareVersion } = await withDeadline(new Gateway(connection).getVersionAsync(), limits.version, () => new KlfProbeTimeoutError("version", options.host, limits.version));
 			return { firmware: SoftwareVersion.toString() };
 		} catch {
 			return { firmware: null };
 		}
 	} finally {
 		try {
-			await connection.logoutAsync();
+			await withDeadline(connection.logoutAsync(limits.logout / 1e3), limits.logout + 500, () => new KlfProbeTimeoutError("logout", options.host, limits.logout));
 		} catch (err) {
 			errMsg(err);
+			await connection[Symbol.asyncDispose]().catch(() => void 0);
 		}
 	}
 }
 var TEST_LABEL = "Logs in to the gateway with this password, then closes the session";
+/** Under `CONNECTION_TEST_TIMEOUT_MS`, so the reason reaches the operator first. */
+var DEFAULT_TEST_DEADLINE_MS = CONNECTION_TEST_TIMEOUT_MS - 2e3;
+/** The whole test outlived its ceiling; no step of the probe answered in time. */
+var KlfTestDeadlineError = class extends Error {
+	constructor(host, limitMs) {
+		super(`The gateway ${host} did not answer within ${Math.round(limitMs / 1e3)}s (timed out)`);
+		this.name = "KlfTestDeadlineError";
+	}
+};
 var UNREACHABLE_CODES = new Set([
 	"ECONNREFUSED",
 	"EHOSTUNREACH",
@@ -103483,6 +103893,10 @@ function classifyProbeFailure(err) {
 		kind: "wrong-password",
 		text: err.message
 	};
+	if (err instanceof KlfProbeTimeoutError || err instanceof KlfTestDeadlineError) return {
+		kind: "unreachable",
+		text: err.message
+	};
 	const text = typeof err === "string" ? err : errMsg(err);
 	const code = typeof err === "object" && err !== null ? Reflect.get(err, "code") : void 0;
 	if (typeof code === "string" && UNREACHABLE_CODES.has(code)) return {
@@ -103507,7 +103921,7 @@ function classifyProbeFailure(err) {
 	};
 }
 function buildVeluxConnectionTestProvider(deps) {
-	const { logger, probe = probeKlfGateway, liveSessions = () => 0 } = deps;
+	const { logger, probe = probeKlfGateway, liveSessions = () => 0, deadlineMs = DEFAULT_TEST_DEADLINE_MS } = deps;
 	/** The tail of the test queue per host: a second test waits for the first to log out. */
 	const queues = /* @__PURE__ */ new Map();
 	async function run(host, password) {
@@ -103523,10 +103937,13 @@ function buildVeluxConnectionTestProvider(deps) {
 		}
 		const startedAt = Date.now();
 		try {
-			const result = await probe({
+			let timer;
+			const result = await Promise.race([probe({
 				host,
 				password
-			});
+			}), new Promise((_resolve, reject) => {
+				timer = setTimeout(() => reject(new KlfTestDeadlineError(host, deadlineMs)), deadlineMs);
+			})]).finally(() => clearTimeout(timer));
 			return {
 				outcome: "validated",
 				latencyMs: Date.now() - startedAt,
@@ -103761,7 +104178,12 @@ var VeluxProviderAddon = class extends BaseDeviceProvider {
 			],
 			customActions: veluxActions,
 			actionHandlers: { discoverGateway: async () => {
+				const startedAt = Date.now();
 				const { candidates } = await this.ctx.api.deviceManager.discoverProvider.mutate({ addonId: this.ctx.id });
+				this.ctx.logger.info("Velux gateway scan finished", { meta: {
+					found: candidates.length,
+					ms: Date.now() - startedAt
+				} });
 				const hosts = candidates.map((candidate) => ({
 					host: String(candidate.prefilledConfig["host"] ?? ""),
 					name: candidate.suggestedName,