@camstack/addon-provider-velux 0.2.154 → 0.2.155

package/dist/addon.mjs

@@ -1,7 +1,6 @@
 import { createRequire } from "node:module";
 import { connect } from "node:tls";
 import { setImmediate as setImmediate$1 } from "timers/promises";
-import { connect as connect$1 } from "node:net";
 //#region \0rolldown/runtime.js
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -35,7 +34,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 }) : target, mod));
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 //#endregion
-//#region ../types/dist/event-category-CaURIwQA.mjs
+//#region ../types/dist/event-category-BmPm98n0.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -519,6 +518,10 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["RunningStarted"] = "running.started";
 	/** Mirrors `runningStateCapability.events.onFinished`. */
 	EventCategory["RunningFinished"] = "running.finished";
+	/** Mirrors `deviceRunsCapability.events.onRunOpened` - a durable run record opened. */
+	EventCategory["DeviceRunOpened"] = "device-run.opened";
+	/** Mirrors `deviceRunsCapability.events.onRunClosed` - a durable run record closed. */
+	EventCategory["DeviceRunClosed"] = "device-run.closed";
 	/**
 	* Cap event fired by every device that registers the `event-emitter`
 	* capability. Mirrors `eventEmitterCapability.events.onEvent`. Carries
@@ -5867,7 +5870,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-CSYuxssh.mjs
+//#region ../types/dist/sleep-BKzhQTSm.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -9380,6 +9383,7 @@ var CAP_NAMES = Object.freeze([
 	"device-ops",
 	"device-provider",
 	"device-removal-hook",
+	"device-runs",
 	"device-state",
 	"device-status",
 	"dishwasher",
@@ -11324,7 +11328,7 @@ object({
 	params: record(string(), union([string(), number()])).optional()
 });
 //#endregion
-//#region ../types/dist/composition-BBzVf2xd.mjs
+//#region ../types/dist/composition-BiKWlUCc.mjs
 /**
 * The ffmpeg build every CamStack node downloads, per platform and arch.
 *
@@ -12257,7 +12261,15 @@ var HelperSpecSchema = discriminatedUnion("kind", [
 		thresholdWatts: number().positive(),
 		startDwellMs: number().int().nonnegative(),
 		stopDwellMs: number().int().nonnegative(),
-		member: HelperMemberSchema
+		member: HelperMemberSchema,
+		/**
+		* The plug that powers the appliance (`switch.on`). Optional: when set, the
+		* composition carries a `power-source` feature, so the hub can cut and restore
+		* that plug (power-source link of a NEW-target composition).
+		*/
+		powerSwitch: HelperMemberSchema.optional(),
+		/** How long a forced restart keeps the plug off; the cap's default when unset. */
+		offSeconds: number().optional()
 	}),
 	object({
 		kind: literal("statistic"),
@@ -13655,7 +13667,13 @@ var MigrationLedgerEntrySchema = object({
 	/** Why it is `blocked` or `held` (`dependency-failed`, `snapshot-refused`, …). */
 	reason: string().nullable(),
 	nodeId: string().nullable(),
-	bootId: string().nullable()
+	bootId: string().nullable(),
+	/**
+	* The catalogued meta of this id (description, body kind, store, `dependsOn`…),
+	* joined by the engine from the catalogues it knows this boot. Absent when no
+	* catalogue lists the id (a newer database).
+	*/
+	meta: MigrationMetaSchema.optional()
 });
 /** A catalogued migration that is not applied, with where it stands. */
 var MigrationPendingEntrySchema = object({
@@ -19462,6 +19480,14 @@ var APPLIANCE_CAP_VOCABULARY = {
 			}
 		} }
 	},
+	"device-runs": {
+		scope: "device",
+		noun: t("Runs", "Esecuzioni"),
+		events: {
+			onRunOpened: { notOperatorFacing: "the durable record of a run that the running-state start flip already announces" },
+			onRunClosed: { notOperatorFacing: "the durable record of a run that the running-state finish flip already announces" }
+		}
+	},
 	update: {
 		scope: "device",
 		noun: t("Firmware update", "Aggiornamento firmware"),
@@ -46044,6 +46070,117 @@ function actuator(input) {
 	};
 }
 new Map(GROUP_TEMPLATES.map((template) => [template.id, template]));
+var PowerSourceRefusalReasonSchema = _enum([
+	"no-power-source",
+	"switch-missing",
+	"switch-offline",
+	"switch-unknown",
+	"restart-in-progress",
+	"switch-call-failed"
+]);
+var PowerSourceActionResultSchema = discriminatedUnion("accepted", [object({ accepted: literal(true) }), object({
+	accepted: literal(false),
+	reason: PowerSourceRefusalReasonSchema,
+	/** One line for the operator, naming the switch. */
+	message: string()
+})]);
+var PowerSourceInfoSchema = object({
+	/** False when the device has no power source linked; the rest is then empty. */
+	linked: boolean(),
+	switchDeviceId: number().nullable(),
+	switchName: string().nullable(),
+	/** The switch's on/off state, or null when it is unknown. Never false for unknown (D393). */
+	switchOn: boolean().nullable(),
+	switchOnline: boolean().nullable(),
+	restartInProgress: boolean(),
+	offSeconds: number().int()
+});
+/** The composed slice: the switch state the link mirrors, plus the stored off time. */
+var PowerSourceStateSchema = object({
+	/** Null while the switch has not reported: unknown is never `false` (D393). */
+	switchOn: boolean().nullable(),
+	offSeconds: number().int(),
+	lastFetchedAt: number()
+});
+var POWER_SOURCE_DEVICE_TYPES = [
+	DeviceType.Gateway,
+	DeviceType.Hub,
+	DeviceType.Camera,
+	DeviceType.Sensor,
+	DeviceType.MediaPlayer,
+	DeviceType.Vacuum,
+	DeviceType.Generic,
+	DeviceType.Washer,
+	DeviceType.Dryer,
+	DeviceType.Dishwasher,
+	DeviceType.PetFountain,
+	DeviceType.Fan,
+	DeviceType.Humidifier,
+	DeviceType.Climate,
+	DeviceType.WaterHeater
+];
+var powerSourceCustomize = {
+	version: 1,
+	targets: [{
+		id: "switch",
+		cardinality: "scalar",
+		vocabulary: {
+			cap: "power-source",
+			stateField: "switchOn"
+		},
+		deviceTypes: POWER_SOURCE_DEVICE_TYPES,
+		apply: "add",
+		path: "switchOn",
+		sources: [{
+			kind: "switch",
+			transforms: [{ kind: "identity" }]
+		}],
+		companions: [{
+			kind: "constant",
+			path: "offSeconds",
+			value: 10,
+			when: "add"
+		}, {
+			kind: "clock",
+			path: "lastFetchedAt",
+			when: "always"
+		}],
+		sourceReport: { status: "assignment-status" }
+	}]
+};
+var deviceInput$1 = object({ deviceId: number().int().nonnegative() });
+var powerSourceCapability = {
+	name: "power-source",
+	scope: "device",
+	mode: "singleton",
+	deviceTypes: POWER_SOURCE_DEVICE_TYPES,
+	methods: {
+		getStatus: systemMethod(deviceInput$1, PowerSourceInfoSchema, { auth: "admin" }),
+		powerOn: systemMethod(deviceInput$1, PowerSourceActionResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		powerOff: systemMethod(deviceInput$1, PowerSourceActionResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		forceRestart: systemMethod(deviceInput$1, PowerSourceActionResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		})
+	},
+	runtimeState: PowerSourceStateSchema,
+	customize: powerSourceCustomize,
+	/**
+	* Runtime-state durability: **session** — mirrored from the linked switch on
+	* its next report; a restored value would outlive the reading it names.
+	*
+	* See `RuntimeStateDurability`. Enforced by
+	* `scripts/check-runtime-state-durability.ts`.
+	*/
+	durability: "session",
+	history: "none"
+};
 DeviceFeature.LightColorRgb, DeviceFeature.LightColorHsv, DeviceFeature.LightColorMired;
 DeviceType.Camera;
 `${COMPOSED_DEVICE_STABLE_ID_PREFIX}`;
@@ -47469,6 +47606,101 @@ method(object({ deviceId: number().int() }), array(SeriesInfoSchema).readonly())
 	kind: "mutation",
 	auth: "admin"
 });
+/**
+* device-runs - the durable record of ONE run of a device: a washing cycle, a
+* dishwasher cycle, later a mow or a clean (D992).
+*
+* A run is a DOCUMENT (opened at one instant, closed at another, carrying what
+* was measured over it), never a sample - device-history keeps the numbers over
+* time and its `device-runs` provider keeps these documents beside them, because
+* the energy of a run is a question about device-history's own series. The
+* record is written from the `running-state` flip on `DeviceStateChanged`; it
+* survives a restart (the open row is on disk) and a missed flip (boot compares
+* the open rows against the live snapshots).
+*
+* Every measurement is `number | null` and `null` means "could not be
+* measured", never `0` (D393). A run closed by the boot reconcile because the
+* device stopped while nobody was watching has `outcome: 'unknown'`.
+*/
+var DeviceRunKindSchema = _enum([
+	"appliance",
+	"mower",
+	"vacuum"
+]);
+var DeviceRunStateSchema = _enum(["open", "closed"]);
+var DeviceRunOutcomeSchema = _enum([
+	"completed",
+	"aborted",
+	"error",
+	"unknown"
+]);
+/** What opened or closed the run. `reconcile` is the boot comparison against live state. */
+var DeviceRunSourceSchema = _enum([
+	"running-state",
+	"activity",
+	"reconcile"
+]);
+/** How the energy of a run was obtained; `null` when it could not be. */
+var DeviceRunEnergyMethodSchema = _enum(["counter-delta", "history-integral"]);
+var DeviceRunPhaseSchema = object({
+	phase: string(),
+	at: number()
+});
+/** The kind-specific block; a later phase adds a branch, nothing else changes. */
+var DeviceRunDetailSchema = discriminatedUnion("kind", [object({
+	kind: literal("appliance"),
+	/** kWh used over the run. */
+	energyKwh: number().nullable().meta(readingMeta("energy")),
+	energyMethod: DeviceRunEnergyMethodSchema.nullable(),
+	/** Highest power seen while the run was open. */
+	peakW: number().nullable().meta(readingMeta("power")),
+	/** Time-weighted mean power while the run was open. */
+	avgW: number().nullable().meta(readingMeta("power")),
+	/** The program the appliance said it ran when the run opened. */
+	program: string().nullable(),
+	remainingAtStartSec: number().nullable().meta(readingMeta("duration")),
+	/** The last phase the device reported before the run closed. */
+	finalPhase: string().nullable(),
+	/**
+	* The meter's energy counter when the run opened; `null` when the meter had
+	* not said (or the run was opened late, by the boot reconcile). It lives in
+	* the row so a run that outlives a restart still ends with `end - start`.
+	*/
+	energyStartKwh: number().nullable().meta(readingMeta("energy")),
+	/** Milliseconds of power readings behind `avgW` - the weight a restart resumes the mean with. */
+	powerObservedMs: number()
+})]);
+var DeviceRunSchema = object({
+	/** `${deviceId}:${startedAt}`. */
+	runId: string(),
+	deviceId: number().int(),
+	kind: DeviceRunKindSchema,
+	state: DeviceRunStateSchema,
+	startedAt: number(),
+	endedAt: number().nullable(),
+	durationMs: number().nullable(),
+	outcome: DeviceRunOutcomeSchema.nullable(),
+	startSource: DeviceRunSourceSchema,
+	endSource: DeviceRunSourceSchema.nullable(),
+	/** Where the device's running bit came from (`running-state.source`); `null` when it did not say. */
+	runningSource: _enum(["native", "assigned"]).nullable(),
+	phases: array(DeviceRunPhaseSchema),
+	detail: DeviceRunDetailSchema
+});
+DeviceType.Washer, DeviceType.Dryer, DeviceType.Dishwasher, method(object({
+	deviceId: number().int(),
+	outcome: DeviceRunOutcomeSchema.optional(),
+	atFrom: number().optional(),
+	atTo: number().optional(),
+	limit: number().int().positive().max(200).default(50),
+	cursor: string().optional()
+}), object({
+	runs: array(DeviceRunSchema).readonly(),
+	nextCursor: string().nullable()
+})), method(object({
+	deviceId: number().int(),
+	runId: string()
+}), DeviceRunSchema.nullable()), method(object({ deviceId: number().int() }), DeviceRunSchema.nullable());
 var DeviceCaStatusSchema = discriminatedUnion("state", [
 	object({ state: literal("absent") }),
 	object({
@@ -47604,8 +47836,8 @@ method(object({}), object({
 });
 var KeychainKeySourceSchema = object({
 	kind: _enum([
-		"config-file",
-		"previous-config-file",
+		"mounted-file",
+		"previous-mounted-file",
 		"platform",
 		"default-file"
 	]),
@@ -52101,7 +52333,8 @@ var PALETTE_ENTRY_IDS = [
 	"switch",
 	"siren",
 	"button",
-	"doorbell"
+	"doorbell",
+	"appliance-cycle"
 ];
 var AUDIO_ENTRY_ID = "audio";
 /** Six rungs, quiet → loud. The opaque end is the entry's hex. */
@@ -52172,7 +52405,8 @@ var CAMSTACK_HEX = {
 	switch: "#7a812a",
 	siren: "#ac5d7f",
 	button: "#b276cd",
-	doorbell: "#0087ab"
+	doorbell: "#0087ab",
+	"appliance-cycle": "#2a8c8c"
 };
 var CAMSTACK_FALLBACK = [
 	"#b34dc7",
@@ -52237,7 +52471,8 @@ var HIGH_CONTRAST_HEX = {
 	switch: "#d05259",
 	siren: "#cd67b3",
 	button: "#c9746a",
-	doorbell: "#338eeb"
+	doorbell: "#338eeb",
+	"appliance-cycle": "#00848a"
 };
 var HIGH_CONTRAST_FALLBACK = [
 	"#817f3b",
@@ -52302,7 +52537,8 @@ var OKABE_ITO_HEX = {
 	switch: "#ad2c4e",
 	siren: "#348e08",
 	button: "#d27303",
-	doorbell: "#55770f"
+	doorbell: "#55770f",
+	"appliance-cycle": "#00737d"
 };
 var OKABE_ITO_FALLBACK = [
 	"#9a3784",
@@ -52511,6 +52747,7 @@ sub("switch", "control", "control", "switch", "Switch");
 sub("siren", "control", "control", "siren", "Siren");
 sub("button", "control", "control", "button", "Button");
 sub("doorbell", "control", "control", "doorbell", "Doorbell");
+sub("appliance-cycle", "control", "control", "switch", "Appliance cycle");
 for (const l of AUDIO_MACRO_LABELS) {
 	const kind = `audio-${l.id}`;
 	if (entries.has(kind)) continue;
@@ -61142,7 +61379,8 @@ var CAP_TO_KIND = {
 	cover: "cover",
 	switch: "switch",
 	button: "button",
-	doorbell: "doorbell"
+	doorbell: "doorbell",
+	"running-state": "appliance-cycle"
 };
 function buildDescriptor(capName, kind) {
 	const t = EVENT_TAXONOMY[kind];
@@ -64272,10 +64510,7 @@ method(object({ nodeId: string().optional() }).optional(), array(AddonListItemSc
 }), InstallPackageResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ packageName: string() }), InstallPackageResultSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(_void(), boolean()), method(_void(), array(unknown()).readonly()), method(object({
+}), method(object({
 	packageName: string().min(1),
 	nodeId: string().optional(),
 	everywhere: boolean().optional()
@@ -65536,19 +65771,19 @@ var RemoteSetConfigResultSchema = discriminatedUnion("status", [object({ status:
 	reason: _enum(["unknown-template", "not-a-media-player"]),
 	detail: string()
 })]);
-var deviceInput$1 = object({ deviceId: number().int().nonnegative() });
+var deviceInput = object({ deviceId: number().int().nonnegative() });
 DeviceType.MediaPlayer;
-method(deviceInput$1, RemoteConfigSchema, { auth: "admin" }), method(deviceInput$1.extend({ config: RemoteConfigSchema }), RemoteSetConfigResultSchema, {
+method(deviceInput, RemoteConfigSchema, { auth: "admin" }), method(deviceInput.extend({ config: RemoteConfigSchema }), RemoteSetConfigResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(deviceInput$1, RemoteCommandListSchema, { auth: "protected" }), method(deviceInput$1.extend({
+}), method(deviceInput, RemoteCommandListSchema, { auth: "protected" }), method(deviceInput.extend({
 	role: RemoteRoleSchema,
 	/** Sends in a row (volume steps). */
 	repeat: number().int().min(1).max(50).default(1)
 }), RemoteSendResultSchema, {
 	kind: "mutation",
 	auth: "protected"
-}), method(deviceInput$1.extend({
+}), method(deviceInput.extend({
 	command: RemoteMediaCommandSchema,
 	muted: boolean().optional(),
 	source: string().optional(),
@@ -69922,117 +70157,6 @@ var lockControlCapability = {
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastChangedAt"]
 };
-var PowerSourceRefusalReasonSchema = _enum([
-	"no-power-source",
-	"switch-missing",
-	"switch-offline",
-	"switch-unknown",
-	"restart-in-progress",
-	"switch-call-failed"
-]);
-var PowerSourceActionResultSchema = discriminatedUnion("accepted", [object({ accepted: literal(true) }), object({
-	accepted: literal(false),
-	reason: PowerSourceRefusalReasonSchema,
-	/** One line for the operator, naming the switch. */
-	message: string()
-})]);
-var PowerSourceInfoSchema = object({
-	/** False when the device has no power source linked; the rest is then empty. */
-	linked: boolean(),
-	switchDeviceId: number().nullable(),
-	switchName: string().nullable(),
-	/** The switch's on/off state, or null when it is unknown. Never false for unknown (D393). */
-	switchOn: boolean().nullable(),
-	switchOnline: boolean().nullable(),
-	restartInProgress: boolean(),
-	offSeconds: number().int()
-});
-/** The composed slice: the switch state the link mirrors, plus the stored off time. */
-var PowerSourceStateSchema = object({
-	/** Null while the switch has not reported: unknown is never `false` (D393). */
-	switchOn: boolean().nullable(),
-	offSeconds: number().int(),
-	lastFetchedAt: number()
-});
-var POWER_SOURCE_DEVICE_TYPES = [
-	DeviceType.Gateway,
-	DeviceType.Hub,
-	DeviceType.Camera,
-	DeviceType.Sensor,
-	DeviceType.MediaPlayer,
-	DeviceType.Vacuum,
-	DeviceType.Generic,
-	DeviceType.Washer,
-	DeviceType.Dryer,
-	DeviceType.Dishwasher,
-	DeviceType.PetFountain,
-	DeviceType.Fan,
-	DeviceType.Humidifier,
-	DeviceType.Climate,
-	DeviceType.WaterHeater
-];
-var powerSourceCustomize = {
-	version: 1,
-	targets: [{
-		id: "switch",
-		cardinality: "scalar",
-		vocabulary: {
-			cap: "power-source",
-			stateField: "switchOn"
-		},
-		deviceTypes: POWER_SOURCE_DEVICE_TYPES,
-		apply: "add",
-		path: "switchOn",
-		sources: [{
-			kind: "switch",
-			transforms: [{ kind: "identity" }]
-		}],
-		companions: [{
-			kind: "constant",
-			path: "offSeconds",
-			value: 10,
-			when: "add"
-		}, {
-			kind: "clock",
-			path: "lastFetchedAt",
-			when: "always"
-		}],
-		sourceReport: { status: "assignment-status" }
-	}]
-};
-var deviceInput = object({ deviceId: number().int().nonnegative() });
-var powerSourceCapability = {
-	name: "power-source",
-	scope: "device",
-	mode: "singleton",
-	deviceTypes: POWER_SOURCE_DEVICE_TYPES,
-	methods: {
-		getStatus: systemMethod(deviceInput, PowerSourceInfoSchema, { auth: "admin" }),
-		powerOn: systemMethod(deviceInput, PowerSourceActionResultSchema, {
-			kind: "mutation",
-			auth: "admin"
-		}),
-		powerOff: systemMethod(deviceInput, PowerSourceActionResultSchema, {
-			kind: "mutation",
-			auth: "admin"
-		}),
-		forceRestart: systemMethod(deviceInput, PowerSourceActionResultSchema, {
-			kind: "mutation",
-			auth: "admin"
-		})
-	},
-	runtimeState: PowerSourceStateSchema,
-	customize: powerSourceCustomize,
-	/**
-	* Runtime-state durability: **session** — mirrored from the linked switch on
-	* its next report; a restored value would outlive the reading it names.
-	*
-	* See `RuntimeStateDurability`. Enforced by
-	* `scripts/check-runtime-state-durability.ts`.
-	*/
-	durability: "session",
-	history: "none"
-};
 /**
 * A monotonic total between resets (D944). Energy uses `power-meter.energy`
 * so dashboards keep one series; every other instantaneous reading lands here.
@@ -73574,6 +73698,10 @@ var RUNNING_DEVICE_TYPES = Object.values(DeviceType);
 /** Generic Customize target for the running boolean (D936). */
 var runningCustomize = {
 	version: 1,
+	overridable: [{
+		path: "running",
+		by: "running"
+	}],
 	targets: [{
 		id: "running",
 		cardinality: "scalar",
@@ -73631,7 +73759,7 @@ var runningCustomize = {
 				kind: "constant",
 				path: "phase",
 				value: null,
-				when: "always"
+				when: "add"
 			},
 			{
 				kind: "clock",
@@ -76941,7 +77069,7 @@ var ExternalIdentityKeySchema = object({
 	provider: string().min(1),
 	subject: string().min(1)
 });
-method(_void(), array(UserSummarySchema), { auth: "admin" }), method(CreateUserInputSchema, UserSummarySchema, {
+method(_void(), array(UserSummarySchema), { auth: "admin" }), method(_void(), object({ defaultPasswordInUse: boolean() }), { auth: "admin" }), method(CreateUserInputSchema, UserSummarySchema, {
 	kind: "mutation",
 	auth: "admin",
 	access: "create"
@@ -80280,13 +80408,6 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"addons.installFromWorkspace": {
-		capName: "addons",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
 	"addons.installPackage": {
 		capName: "addons",
 		capScope: "system",
@@ -80294,13 +80415,6 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
-	"addons.isWorkspaceAvailable": {
-		capName: "addons",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
 	"addons.list": {
 		capName: "addons",
 		capScope: "system",
@@ -80350,13 +80464,6 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"addons.listWorkspacePackages": {
-		capName: "addons",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
 	"addons.onAddonLogs": {
 		capName: "addons",
 		capScope: "system",
@@ -83024,6 +83131,27 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"deviceRuns.getCurrentRun": {
+		capName: "device-runs",
+		capScope: "device",
+		addonId: null,
+		access: "view",
+		role: "viewer"
+	},
+	"deviceRuns.getRun": {
+		capName: "device-runs",
+		capScope: "device",
+		addonId: null,
+		access: "view",
+		role: "viewer"
+	},
+	"deviceRuns.listRuns": {
+		capName: "device-runs",
+		capScope: "device",
+		addonId: null,
+		access: "view",
+		role: "viewer"
+	},
 	"deviceState.claimFields": {
 		capName: "device-state",
 		capScope: "system",
@@ -89737,6 +89865,13 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
+	"userManagement.getAdminBootstrapStatus": {
+		capName: "user-management",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
 	"userManagement.getTotpStatus": {
 		capName: "user-management",
 		capScope: "system",
@@ -91222,6 +91357,21 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceRuns.getCurrentRun": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceRuns.getRun": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceRuns.listRuns": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceState.claimFields": [{
 		name: "deviceId",
 		form: "single",
@@ -93704,13 +93854,114 @@ NC_AUDIO_DEFAULTS.hitPercent, NC_AUDIO_DEFAULTS.samplingSeconds;
 *
 * Pure, RN-safe: the viewer imports the support rule from here.
 */
+/**
+* Control caps that still have a raise and a clear an operator names: an
+* appliance cycle raises when it STARTS and clears when it FINISHES. Kept out
+* of `SOURCE_CAP_ACTIVE_FIELD` on purpose — that table also makes a device a
+* camera-sensor / recorder-trigger source, and a dishwasher is neither.
+*/
+var CYCLE_RAISED_FIELD_BY_CAP = { "running-state": "running" };
 /** Event kind → the boolean field of its cap slice that means "raised". */
 var NC_SENSOR_RAISED_FIELD_BY_KIND = Object.freeze(Object.fromEntries(Object.entries(EVENT_KIND_BY_CAP).flatMap(([capName, descriptor]) => {
+	const cycleField = CYCLE_RAISED_FIELD_BY_CAP[capName];
+	if (cycleField !== void 0) return [[descriptor.kind, cycleField]];
 	const field = SOURCE_CAP_ACTIVE_FIELD[capName];
 	if (field === void 0 || descriptor.category !== "sensor") return [];
 	return [[descriptor.kind, field]];
 })));
 Object.freeze(Object.keys(NC_SENSOR_RAISED_FIELD_BY_KIND));
+Object.freeze({
+	contact: {
+		starts: {
+			en: "opened",
+			it: "si apre"
+		},
+		finishes: {
+			en: "closed",
+			it: "si chiude"
+		}
+	},
+	"motion-sensor": {
+		starts: {
+			en: "motion detected",
+			it: "movimento rilevato"
+		},
+		finishes: {
+			en: "motion stopped",
+			it: "movimento terminato"
+		}
+	},
+	smoke: {
+		starts: {
+			en: "smoke detected",
+			it: "fumo rilevato"
+		},
+		finishes: {
+			en: "smoke gone",
+			it: "fumo scomparso"
+		}
+	},
+	flood: {
+		starts: {
+			en: "water detected",
+			it: "acqua rilevata"
+		},
+		finishes: {
+			en: "dry again",
+			it: "di nuovo asciutto"
+		}
+	},
+	gas: {
+		starts: {
+			en: "gas detected",
+			it: "gas rilevato"
+		},
+		finishes: {
+			en: "gas gone",
+			it: "gas scomparso"
+		}
+	},
+	"carbon-monoxide": {
+		starts: {
+			en: "carbon monoxide detected",
+			it: "monossido rilevato"
+		},
+		finishes: {
+			en: "carbon monoxide gone",
+			it: "monossido scomparso"
+		}
+	},
+	vibration: {
+		starts: {
+			en: "vibration detected",
+			it: "vibrazione rilevata"
+		},
+		finishes: {
+			en: "vibration stopped",
+			it: "vibrazione terminata"
+		}
+	},
+	tamper: {
+		starts: {
+			en: "tampered with",
+			it: "manomesso"
+		},
+		finishes: {
+			en: "tamper cleared",
+			it: "manomissione rientrata"
+		}
+	},
+	"appliance-cycle": {
+		starts: {
+			en: "the cycle started",
+			it: "il ciclo parte"
+		},
+		finishes: {
+			en: "the cycle finished",
+			it: "il ciclo è terminato"
+		}
+	}
+});
 object({
 	phase: _enum(["raised", "resolved"]),
 	episodeId: string().min(1),
@@ -93917,6 +94168,10 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
+	[...RULE_TEXT],
+	[...RULE_TEXT],
+	[...RULE_TEXT],
+	[...RULE_TEXT],
 	[...RULE_BODY_ONLY],
 	[...RULE_TEXT],
 	([...RULE_TEXT], [...DEVICE_EVENTS]),
@@ -93934,6 +94189,7 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
+	[...RULE_TEXT],
 	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -94178,6 +94434,7 @@ new Set([
 	"siren",
 	"button",
 	"doorbell",
+	"appliance-cycle",
 	"audio-speech",
 	"audio-scream",
 	"audio-crying",
@@ -103487,22 +103744,26 @@ var VeluxClientRegistry = class {
 };
 //#endregion
 //#region src/klf-probe.ts
-/** The gateway's TLS API port. */
-var KLF_PORT = 51200;
 /**
-* Defaults add up, worst case, to 3 + 2 x 5 + 2 + 2 = 17 s, under the
-* `CONNECTION_TEST_TIMEOUT_MS` ceiling of the wizard, so a stuck gateway is named
-* here instead of the wizard giving up unnamed.
+* Defaults add up, worst case, to 12 + 3 + 1.5 + 1.5 = 18 s, which is the
+* wizard's `CONNECTION_TEST_TIMEOUT_MS` ceiling (20 s) minus the 2 s margin of
+* `DEFAULT_TEST_DEADLINE_MS`, so a stuck gateway is named here instead of the
+* wizard giving up unnamed. The handshake gets 12 s because a real KLF-200 needs
+* about 4.2 s for ONE handshake (TLSv1.2, DHE-RSA-AES256-SHA256 on a weak CPU).
+*
+* A probe opens exactly ONE connection: the gateway frees a closed slot very
+* slowly (measured 2026-11-01: a bare TCP connect and close before the TLS connect
+* left the real session without a handshake for 20 s), so no pre-check connects first.
 */
 var DEFAULT_KLF_PROBE_TIMEOUTS_MS = {
-	tcp: 3e3,
-	login: 5e3,
-	version: 2e3,
-	logout: 2e3
+	tls: 12e3,
+	password: 3e3,
+	version: 1500,
+	logout: 1500
 };
 var PHASE_TEXT = {
-	tcp: "did not accept a TCP connection on port 51200",
-	login: "did not complete the secure login (TLS handshake or password answer)",
+	tls: "did not accept a connection or complete the TLS handshake on port 51200",
+	password: "did not answer the password",
 	version: "did not answer the version request",
 	logout: "did not close the session"
 };
@@ -103529,26 +103790,43 @@ async function withDeadline(work, ms, onTimeout) {
 		clearTimeout(timer);
 	}
 }
-/** A bare TCP connect to the gateway port: tells "nothing listens" from "TLS is stuck". */
-function tcpReachable(host, ms) {
-	return new Promise((resolve, reject) => {
-		const socket = connect$1({
-			host,
-			port: KLF_PORT
-		});
-		socket.setTimeout(ms, () => {
-			socket.destroy();
-			reject(new KlfProbeTimeoutError("tcp", host, ms));
-		});
-		socket.once("connect", () => {
-			socket.destroy();
-			resolve();
-		});
-		socket.once("error", (err) => {
-			socket.destroy();
-			reject(err);
-		});
+/** How often the login watcher checks whether the handshake has finished. */
+var PHASE_POLL_MS = 20;
+/**
+* The library's `loginAsync` runs the TLS handshake and the password answer as one
+* call. `KLF200SocketProtocol` appears when the handshake is done and the password
+* is on its way, so watching it splits the call into two bounded, named steps.
+*/
+async function loginInPhases(connection, host, password, limits) {
+	let handshakeDone = false;
+	let passwordTimer;
+	let tlsTimer;
+	let poll;
+	const tlsError = () => new KlfProbeTimeoutError("tls", host, limits.tls);
+	const passwordError = () => new KlfProbeTimeoutError("password", host, limits.password);
+	const bounds = new Promise((_resolve, reject) => {
+		tlsTimer = setTimeout(() => reject(tlsError()), limits.tls);
+		poll = setInterval(() => {
+			if (handshakeDone || connection.KLF200SocketProtocol === void 0) return;
+			handshakeDone = true;
+			clearTimeout(tlsTimer);
+			clearInterval(poll);
+			passwordTimer = setTimeout(() => reject(passwordError()), limits.password);
+		}, PHASE_POLL_MS);
 	});
+	const libraryS = (limits.tls + limits.password) / 1e3;
+	try {
+		await Promise.race([connection.loginAsync(password, libraryS), bounds]);
+	} catch (err) {
+		if (err instanceof KlfProbeTimeoutError) throw err;
+		if (/^timeout$/i.test(errMsg(err)) || err instanceof Error && err.name === "TimeoutError") throw handshakeDone ? passwordError() : tlsError();
+		throw err;
+	} finally {
+		clearTimeout(tlsTimer);
+		clearTimeout(passwordTimer);
+		clearInterval(poll);
+		bounds.catch(() => void 0);
+	}
 }
 /**
 * Opens ONE session, authenticates, reads the firmware version and closes the
@@ -103561,15 +103839,13 @@ async function probeKlfGateway(options) {
 		...DEFAULT_KLF_PROBE_TIMEOUTS_MS,
 		...options.timeoutsMs
 	};
-	await tcpReachable(options.host, limits.tcp);
 	const connection = options.tls === void 0 ? new Connection(options.host) : new Connection(options.host, options.tls);
-	const loginError = () => new KlfProbeTimeoutError("login", options.host, limits.login);
 	try {
 		try {
-			await withDeadline(connection.loginAsync(options.password, limits.login / 1e3), limits.login * 2 + 500, loginError);
+			await loginInPhases(connection, options.host, options.password, limits);
 		} catch (err) {
 			if (err instanceof KlfProbeTimeoutError) throw err;
-			if (/^timeout$/i.test(errMsg(err)) || err instanceof Error && err.name === "TimeoutError") throw loginError();
+			if (err instanceof Error && typeof Reflect.get(err, "code") === "string") throw err;
 			throw loginFailure(err);
 		}
 		try {