camstack 1.2.188 → 1.2.190

package/dist/{launcher-FYTHPW44.js → launcher-ILGFB3AQ.js}

@@ -24024,9 +24024,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-Ct88catN.js
-var require_dist_Ct88catN = __commonJS({
-  "../system/dist/dist-Ct88catN.js"(exports) {
+// ../system/dist/dist-Bi4Ioxop.js
+var require_dist_Bi4Ioxop = __commonJS({
+  "../system/dist/dist-Bi4Ioxop.js"(exports) {
     "use strict";
     var zod = require_zod();
     __require("crypto");
@@ -24049,6 +24049,7 @@ var require_dist_Ct88catN = __commonJS({
       EventCategory2["AddonRunnerRefused"] = "addon.runner-refused";
       EventCategory2["ProcessStateChanged"] = "process.state-changed";
       EventCategory2["SystemRunnerCheck"] = "system.runner-check";
+      EventCategory2["AlertEpisode"] = "alert.episode";
       EventCategory2["AddonError"] = "addon.error";
       EventCategory2["AddonPageReady"] = "addon.page-ready";
       EventCategory2["AddonWidgetReady"] = "addon.widget-ready";
@@ -32045,7 +32046,14 @@ var require_dist_Ct88catN = __commonJS({
     ]);
     var AlertActionSchema = zod.z.object({
       label: zod.z.string(),
-      href: zod.z.string().optional()
+      href: zod.z.string().optional(),
+      /**
+      * How `href` is followed. Absent / `app`: an admin-ui route (client-side).
+      * `server`: a route the HUB serves (an addon HTTP route such as an OAuth
+      * start) — the browser must leave the SPA with a full navigation, because
+      * the SPA has no such route and would bounce to the home page.
+      */
+      navigation: zod.z.enum(["app", "server"]).optional()
     });
     var AlertStatusSchema = zod.z.enum([
       "active",
@@ -38138,7 +38146,7 @@ var require_dist_Ct88catN = __commonJS({
     var deviceAdoptionCapability = {
       name: "device-adoption",
       scope: "system",
-      mode: "singleton",
+      mode: "collection",
       status: {
         schema: AdoptionStatusSchema,
         kind: "poll"
@@ -59424,7 +59432,7 @@ var require_dist_Ct88catN = __commonJS({
           auth: "admin"
         }),
         /** List candidate filter chips for an integration via its device-adoption
-        *  provider — addonId-routed so it never hits the singleton shadow. */
+        *  provider — addonId-routed via the collection pin. */
         adoptionListCandidateFilters: method(zod.z.object({
           addonId: zod.z.string(),
           integrationId: zod.z.string()
@@ -62794,6 +62802,9 @@ var require_dist_Ct88catN = __commonJS({
       "server-updated",
       "export-completed",
       "backup-completed",
+      "alert-critical",
+      "alert-error",
+      "alert-critical-resolved",
       "camera-online",
       "camera-offline",
       "camera-disabled",
@@ -71992,6 +72003,18 @@ var require_dist_Ct88catN = __commonJS({
         */
         movers: method(zod.z.object({}), zod.z.array(StorageMigrationMoverSchema).readonly(), { auth: "admin" }),
         /**
+        * May a mover that touches these locations run NOW? One claim per physical
+        * root is owned by the storage orchestrator: a single-location repoint holds
+        * it while it carries its subtree, and a mover (`relocateMedia`,
+        * `relocateFootage`, a migration move) asks here AFTER registering its job and
+        * cancels itself on `clear: false`. The repoint, in turn, refuses while a
+        * registered mover touches its root. Asked, never polled (D3).
+        */
+        moverClearance: method(zod.z.object({ locationIds: zod.z.array(zod.z.string()).readonly() }), zod.z.object({
+          clear: zod.z.boolean(),
+          repointLocationId: zod.z.string().optional()
+        }), { auth: "admin" }),
+        /**
         * What each class's SOURCE still holds, from the archive — never from the
         * resident index (D295). Only classes with something left (or something
         * unknown) are listed, so an empty list means there is nothing to drain and
@@ -76209,35 +76232,139 @@ var require_dist_Ct88catN = __commonJS({
       "error",
       "unavailable"
     ]);
+    var DishwasherOperationStateSchema = zod.z.enum([
+      "Inactive",
+      "Ready",
+      "DelayedStart",
+      "Run",
+      "Pause",
+      "ActionRequired",
+      "Finished",
+      "Error",
+      "Aborting"
+    ]);
+    var DishwasherAvailabilitySchema = zod.z.enum([
+      "available",
+      "offline",
+      "description-missing"
+    ]);
     var DishwasherConsumableLevelSchema = zod.z.enum([
       "ok",
       "low",
       "empty"
     ]);
     var DishwasherStatusSchema = zod.z.object({
+      availability: DishwasherAvailabilitySchema,
+      /** Coarse state for compact surfaces; `unavailable` whenever the appliance state is not known. */
       state: DishwasherStateSchema,
-      /** Active program id/name, or null when none selected / unknown. */
+      /** The appliance's operation state as reported; null when not known. */
+      operationState: DishwasherOperationStateSchema.nullable(),
+      /** Feature key of the ACTIVE (running) program, or null when none runs / not known. */
       program: zod.z.string().nullable(),
-      /** Program tokens the hardware accepts — drives the UI selector. */
+      /** Feature key of the SELECTED program (what Start would run), or null when none / not known. */
+      selectedProgram: zod.z.string().nullable(),
+      /** Feature keys of the programs the appliance currently offers — drives the UI selector. */
       availablePrograms: zod.z.array(zod.z.string()),
-      /** Minutes remaining on the active cycle, or null when not running. */
-      remainingMinutes: zod.z.number().int().nonnegative().nullable(),
+      /** Seconds remaining on the active cycle, or null when not running / not known. */
+      remainingSeconds: zod.z.number().int().nonnegative().nullable(),
+      /** Seconds the delayed start is set to (time until the cycle starts), or null. */
+      delayedStartSeconds: zod.z.number().int().nonnegative().nullable(),
       /** Cycle completion 0..100, or null when not applicable. */
       progressPercent: zod.z.number().min(0).max(100).nullable(),
-      /** True when the door is reported open. */
-      doorOpen: zod.z.boolean(),
-      /** True when remote start is allowed (door closed, power on, etc.). */
-      remoteStartAllowed: zod.z.boolean(),
-      /** Main power / switched-on state. */
-      powerOn: zod.z.boolean(),
+      /** True when the door is reported open; null when the door state is not known. */
+      doorOpen: zod.z.boolean().nullable(),
+      /** True when the door is latched (locked) during a cycle; null when not reported. */
+      doorLocked: zod.z.boolean().nullable(),
+      /** True when remote start is allowed (door closed, power on, etc.); null when not known. */
+      remoteStartAllowed: zod.z.boolean().nullable(),
+      /** True when the appliance accepts remote control now; null when not known. */
+      remoteControlActive: zod.z.boolean().nullable(),
+      /** True while somebody operates the appliance at its panel; null when not reported. */
+      localControlActive: zod.z.boolean().nullable(),
+      /** Main power / switched-on state; null when not known. */
+      powerOn: zod.z.boolean().nullable(),
+      /** The raw power state (`On`, `Off`, `Standby`, …); null when not known. */
+      powerState: zod.z.string().nullable(),
       saltLevel: DishwasherConsumableLevelSchema.nullable(),
       rinseAidLevel: DishwasherConsumableLevelSchema.nullable(),
-      halfLoad: zod.z.boolean(),
-      hygienePlus: zod.z.boolean(),
+      /** Option states: null when the appliance does not expose the option or has not said. */
+      halfLoad: zod.z.boolean().nullable(),
+      hygienePlus: zod.z.boolean().nullable(),
+      /** Extra dry option when the appliance exposes it. */
+      extraDry: zod.z.boolean().nullable(),
+      /** Intensive zone (lower basket) when the appliance exposes it. */
+      intensiveZone: zod.z.boolean().nullable(),
+      /** VarioSpeed / VarioSpeed+ when the appliance exposes it. */
+      varioSpeedPlus: zod.z.boolean().nullable(),
+      /** Child lock (controls disabled on the appliance); null when not known. */
+      childLock: zod.z.boolean().nullable(),
+      /** Feature keys of the events currently raised (salt low, rinse aid low, program finished, …). */
+      activeEvents: zod.z.array(zod.z.string()),
+      /** Numeric error code when the appliance reports one; null otherwise. */
       errorCode: zod.z.number().nullable(),
+      /** Name of the raised alert-level event while the appliance is in error; null otherwise. */
       errorLabel: zod.z.string().nullable(),
+      /** Ms epoch of the last value received from the appliance; 0 = never. */
       lastFetchedAt: zod.z.number()
     });
+    var DeviceIdSchema = zod.z.number().int().nonnegative();
+    var DishwasherValueSchema = zod.z.union([
+      zod.z.boolean(),
+      zod.z.string(),
+      zod.z.number()
+    ]);
+    var DishwasherAccessSchema = zod.z.enum([
+      "none",
+      "read",
+      "readWrite",
+      "writeOnly",
+      "readStatic"
+    ]);
+    var DishwasherOptionDescriptorSchema = zod.z.object({
+      /** Feature key (`Dishcare.Dishwasher.Option.ExtraDry`). */
+      key: zod.z.string(),
+      /** Last segment of the key, for display. */
+      name: zod.z.string(),
+      type: zod.z.enum([
+        "boolean",
+        "number",
+        "enum",
+        "string"
+      ]),
+      access: DishwasherAccessSchema,
+      /** The appliance reports this entity as currently available. */
+      available: zod.z.boolean(),
+      /** Unit the description declares for a number; null when it declares none. */
+      unit: zod.z.string().nullable(),
+      min: zod.z.number().nullable(),
+      max: zod.z.number().nullable(),
+      step: zod.z.number().nullable(),
+      /** Allowed members of an enum; null for other types. */
+      enumValues: zod.z.array(zod.z.string()).nullable(),
+      defaultValue: DishwasherValueSchema.nullable()
+    });
+    var DishwasherProgramSchema = zod.z.object({
+      /** Feature key (`Dishcare.Dishwasher.Program.Eco50`) — what `setProgram` / `start` take. */
+      key: zod.z.string(),
+      name: zod.z.string(),
+      /** The appliance currently offers this program. */
+      available: zod.z.boolean(),
+      /** The options this program lists, with the program-level access / availability / default. */
+      options: zod.z.array(DishwasherOptionDescriptorSchema)
+    });
+    var DishwasherOptionsSchema = zod.z.object({
+      availability: DishwasherAvailabilitySchema,
+      /** What the appliance can be told to do, from the commands its description declares. */
+      supportsStart: zod.z.boolean(),
+      supportsPause: zod.z.boolean(),
+      supportsResume: zod.z.boolean(),
+      supportsStop: zod.z.boolean(),
+      supportsPower: zod.z.boolean(),
+      /** Every program the description lists, with its options. */
+      programs: zod.z.array(DishwasherProgramSchema),
+      /** Every option and setting entity the description lists (programs reference these by key). */
+      options: zod.z.array(DishwasherOptionDescriptorSchema)
+    });
     var dishwasherCapability = {
       name: "dishwasher",
       scope: "device",
@@ -76245,58 +76372,102 @@ var require_dist_Ct88catN = __commonJS({
       mode: "singleton",
       deviceTypes: [DeviceType.Dishwasher],
       methods: {
-        start: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
+        /**
+        * Start a program. Without `program` the selected one starts. `options` are
+        * option feature keys; each is checked against the program's constraints.
+        */
+        start: method(zod.z.object({
+          deviceId: DeviceIdSchema,
+          program: zod.z.string().min(1).optional(),
+          options: zod.z.record(zod.z.string(), DishwasherValueSchema).optional()
+        }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
-        pause: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
+        pause: method(zod.z.object({ deviceId: DeviceIdSchema }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
-        stop: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
+        resume: method(zod.z.object({ deviceId: DeviceIdSchema }), zod.z.void(), {
+          kind: "mutation",
+          auth: "protected"
+        }),
+        stop: method(zod.z.object({ deviceId: DeviceIdSchema }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
+        /** Select (not start) a program; refused when the appliance does not offer it. */
         setProgram: method(zod.z.object({
-          deviceId: zod.z.number().int().nonnegative(),
+          deviceId: DeviceIdSchema,
           program: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
         setPower: method(zod.z.object({
-          deviceId: zod.z.number().int().nonnegative(),
+          deviceId: DeviceIdSchema,
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
         setHalfLoad: method(zod.z.object({
-          deviceId: zod.z.number().int().nonnegative(),
+          deviceId: DeviceIdSchema,
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
         setHygienePlus: method(zod.z.object({
-          deviceId: zod.z.number().int().nonnegative(),
+          deviceId: DeviceIdSchema,
+          on: zod.z.boolean()
+        }), zod.z.void(), {
+          kind: "mutation",
+          auth: "protected"
+        }),
+        setExtraDry: method(zod.z.object({
+          deviceId: DeviceIdSchema,
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
+        setIntensiveZone: method(zod.z.object({
+          deviceId: DeviceIdSchema,
+          on: zod.z.boolean()
+        }), zod.z.void(), {
+          kind: "mutation",
+          auth: "protected"
+        }),
+        setVarioSpeedPlus: method(zod.z.object({
+          deviceId: DeviceIdSchema,
+          on: zod.z.boolean()
+        }), zod.z.void(), {
+          kind: "mutation",
+          auth: "protected"
+        }),
+        setChildLock: method(zod.z.object({
+          deviceId: DeviceIdSchema,
+          on: zod.z.boolean()
+        }), zod.z.void(), {
+          kind: "mutation",
+          auth: "protected"
+        }),
+        /**
+        * Write any option or setting by feature key. Refused when the description does
+        * not list it, it is not writable or not available now, or the value is outside
+        * its declared range / members.
+        */
         setOption: method(zod.z.object({
-          deviceId: zod.z.number().int().nonnegative(),
+          deviceId: DeviceIdSchema,
           key: zod.z.string().min(1),
-          value: zod.z.union([
-            zod.z.boolean(),
-            zod.z.string(),
-            zod.z.number()
-          ])
+          value: DishwasherValueSchema
         }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
-        })
+        }),
+        /** What this appliance can do, from its own description — the UI is derived from it. */
+        getOptions: method(zod.z.object({ deviceId: DeviceIdSchema }), DishwasherOptionsSchema, { auth: "protected" })
       },
       status: {
         schema: DishwasherStatusSchema,
@@ -86887,6 +87058,7 @@ var require_dist_Ct88catN = __commonJS({
       "fan",
       "vacuum",
       "lawn-mower",
+      "dishwasher",
       "light",
       "switch",
       "siren",
@@ -89625,6 +89797,12 @@ var require_dist_Ct88catN = __commonJS({
         addonId: null,
         access: "view"
       },
+      "dishwasher.getOptions": {
+        capName: "dishwasher",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "dishwasher.getStatus": {
         capName: "dishwasher",
         capScope: "device",
@@ -89637,6 +89815,24 @@ var require_dist_Ct88catN = __commonJS({
         addonId: null,
         access: "create"
       },
+      "dishwasher.resume": {
+        capName: "dishwasher",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
+      "dishwasher.setChildLock": {
+        capName: "dishwasher",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
+      "dishwasher.setExtraDry": {
+        capName: "dishwasher",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
       "dishwasher.setHalfLoad": {
         capName: "dishwasher",
         capScope: "device",
@@ -89649,6 +89845,12 @@ var require_dist_Ct88catN = __commonJS({
         addonId: null,
         access: "create"
       },
+      "dishwasher.setIntensiveZone": {
+        capName: "dishwasher",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
       "dishwasher.setOption": {
         capName: "dishwasher",
         capScope: "device",
@@ -89667,6 +89869,12 @@ var require_dist_Ct88catN = __commonJS({
         addonId: null,
         access: "create"
       },
+      "dishwasher.setVarioSpeedPlus": {
+        capName: "dishwasher",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
       "dishwasher.start": {
         capName: "dishwasher",
         capScope: "device",
@@ -94113,6 +94321,12 @@ var require_dist_Ct88catN = __commonJS({
         addonId: null,
         access: "view"
       },
+      "storageMigration.moverClearance": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "storageMigration.movers": {
         capName: "storage-migration",
         capScope: "system",
@@ -96563,6 +96777,11 @@ var require_dist_Ct88catN = __commonJS({
         form: "single",
         optional: false
       }],
+      "dishwasher.getOptions": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "dishwasher.getStatus": [{
         name: "deviceId",
         form: "single",
@@ -96573,6 +96792,21 @@ var require_dist_Ct88catN = __commonJS({
         form: "single",
         optional: false
       }],
+      "dishwasher.resume": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
+      "dishwasher.setChildLock": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
+      "dishwasher.setExtraDry": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "dishwasher.setHalfLoad": [{
         name: "deviceId",
         form: "single",
@@ -96583,6 +96817,11 @@ var require_dist_Ct88catN = __commonJS({
         form: "single",
         optional: false
       }],
+      "dishwasher.setIntensiveZone": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "dishwasher.setOption": [{
         name: "deviceId",
         form: "single",
@@ -96598,6 +96837,11 @@ var require_dist_Ct88catN = __commonJS({
         form: "single",
         optional: false
       }],
+      "dishwasher.setVarioSpeedPlus": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "dishwasher.start": [{
         name: "deviceId",
         form: "single",
@@ -99126,6 +99370,9 @@ var require_dist_Ct88catN = __commonJS({
       "wrapper-update-available": "system",
       "backup-completed": "system",
       "export-completed": "system",
+      "alert-critical": "system",
+      "alert-error": "system",
+      "alert-critical-resolved": "system",
       "storage-location-low": "system",
       "storage-location-critical": "system",
       "storage-location-ok": "system",
@@ -99250,6 +99497,16 @@ var require_dist_Ct88catN = __commonJS({
           "storage-location-ok"
         ]
       },
+      {
+        id: "alerts",
+        family: "system",
+        label: "Alerts",
+        kinds: [
+          "alert-critical",
+          "alert-error",
+          "alert-critical-resolved"
+        ]
+      },
       {
         id: "alarm",
         family: "alarm",
@@ -99267,6 +99524,60 @@ var require_dist_Ct88catN = __commonJS({
       return [[descriptor.kind, field]];
     })));
     Object.freeze(Object.keys(NC_SENSOR_RAISED_FIELD_BY_KIND));
+    zod.z.object({
+      phase: zod.z.enum(["raised", "resolved"]),
+      episodeId: zod.z.string().min(1),
+      alertId: zod.z.string().min(1),
+      severity: AlertSeveritySchema,
+      category: zod.z.string(),
+      title: zod.z.string(),
+      message: zod.z.string(),
+      sourceType: zod.z.string().optional(),
+      sourceId: zod.z.string().optional(),
+      nodeId: zod.z.string().optional(),
+      /** The alert's own action link (where the operator acts on it), when it has one. */
+      actionUrl: zod.z.string().optional(),
+      at: zod.z.number()
+    });
+    function isAlertEpisodeOpen(status) {
+      return status !== "completed" && status !== "dismissed";
+    }
+    function isAlertEpisodeSeverity(severity) {
+      return severity === "critical" || severity === "error";
+    }
+    function alertEpisodeId(alert) {
+      const minted = alert.metadata?.["episodeId"];
+      return typeof minted === "string" && minted.length > 0 ? minted : `${alert.id}@${String(alert.createdAt)}`;
+    }
+    function alertNodeId(alert) {
+      const direct = alert.metadata?.["nodeId"];
+      if (typeof direct === "string") return direct;
+      const runner = alert.metadata?.["runner"];
+      if (typeof runner === "object" && runner !== null && "nodeId" in runner) {
+        const id = runner.nodeId;
+        if (typeof id === "string") return id;
+      }
+      return alert.source?.type === "node" ? alert.source.id : void 0;
+    }
+    function alertEpisodePayload(alert, phase, at) {
+      const nodeId = alertNodeId(alert);
+      return {
+        phase,
+        episodeId: alertEpisodeId(alert),
+        alertId: alert.id,
+        severity: alert.severity,
+        category: alert.category,
+        title: alert.title,
+        message: alert.message,
+        ...alert.source !== void 0 ? {
+          sourceType: alert.source.type,
+          sourceId: alert.source.id
+        } : {},
+        ...nodeId !== void 0 ? { nodeId } : {},
+        ...alert.action?.href !== void 0 ? { actionUrl: alert.action.href } : {},
+        at
+      };
+    }
     var RULE_BODY_ONLY = ["body"];
     var RULE_TEXT = ["title", "body"];
     var BATTERY = ["device-battery-low", "device-battery-normal"];
@@ -99276,6 +99587,11 @@ var require_dist_Ct88catN = __commonJS({
       "device-tank-full",
       "device-tank-normal"
     ];
+    var ALERT_EPISODE = [
+      "alert-critical",
+      "alert-error",
+      "alert-critical-resolved"
+    ];
     var UPDATES = [
       "addon-update-available",
       "server-update-available",
@@ -99465,14 +99781,14 @@ var require_dist_Ct88catN = __commonJS({
       ([...RULE_TEXT], [...CONSUMABLE]),
       ([...RULE_TEXT], [...TANK]),
       [...RULE_TEXT],
-      ([...RULE_TEXT], [...UPDATES]),
-      ([...RULE_TEXT], [...UPDATES]),
-      [...RULE_TEXT],
+      ([...RULE_TEXT], [...UPDATES, ...ALERT_EPISODE]),
+      ([...RULE_TEXT], [...UPDATES, ...ALERT_EPISODE]),
       [...RULE_TEXT],
       [...RULE_TEXT],
       [...RULE_TEXT],
       [...RULE_TEXT],
       [...RULE_TEXT],
+      ([...RULE_TEXT], [...ALERT_EPISODE]),
       [...RULE_TEXT],
       [...RULE_TEXT],
       [...RULE_TEXT],
@@ -99490,7 +99806,11 @@ var require_dist_Ct88catN = __commonJS({
       [...RULE_TEXT],
       [...RULE_TEXT],
       [...RULE_TEXT],
-      [...RULE_TEXT],
+      ([...RULE_TEXT], [...ALERT_EPISODE]),
+      ([...RULE_TEXT], [...ALERT_EPISODE]),
+      ([...RULE_TEXT], [...ALERT_EPISODE]),
+      ([...RULE_TEXT], [...ALERT_EPISODE]),
+      ([...RULE_TEXT], [...ALERT_EPISODE]),
       [...RULE_TEXT],
       [...RULE_TEXT],
       [...RULE_TEXT],
@@ -100678,6 +100998,18 @@ var require_dist_Ct88catN = __commonJS({
         return addonWidgetsCapability;
       }
     });
+    Object.defineProperty(exports, "alertEpisodeId", {
+      enumerable: true,
+      get: function() {
+        return alertEpisodeId;
+      }
+    });
+    Object.defineProperty(exports, "alertEpisodePayload", {
+      enumerable: true,
+      get: function() {
+        return alertEpisodePayload;
+      }
+    });
     Object.defineProperty(exports, "alertsCapability", {
       enumerable: true,
       get: function() {
@@ -101164,6 +101496,18 @@ var require_dist_Ct88catN = __commonJS({
         return interpolate;
       }
     });
+    Object.defineProperty(exports, "isAlertEpisodeOpen", {
+      enumerable: true,
+      get: function() {
+        return isAlertEpisodeOpen;
+      }
+    });
+    Object.defineProperty(exports, "isAlertEpisodeSeverity", {
+      enumerable: true,
+      get: function() {
+        return isAlertEpisodeSeverity;
+      }
+    });
     Object.defineProperty(exports, "isAppLinkBase", {
       enumerable: true,
       get: function() {
@@ -113278,11 +113622,11 @@ ${values.join("\n")}` : `${blockName} :`;
   }
 });
 
-// ../system/dist/device-ca-75rt3U_U.js
-var require_device_ca_75rt3U_U = __commonJS({
-  "../system/dist/device-ca-75rt3U_U.js"(exports) {
+// ../system/dist/device-ca-B3hUVfYk.js
+var require_device_ca_B3hUVfYk = __commonJS({
+  "../system/dist/device-ca-B3hUVfYk.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_x509_es = require_x509_es_C4cOo48M();
     var node_crypto = __require("crypto");
     var SYSTEM_SECRET_OWNER = "system";
@@ -113697,11 +114041,11 @@ var require_device_ca_75rt3U_U = __commonJS({
   }
 });
 
-// ../system/dist/phase6-declare-gate-C6WqagkC.js
-var require_phase6_declare_gate_C6WqagkC = __commonJS({
-  "../system/dist/phase6-declare-gate-C6WqagkC.js"(exports) {
+// ../system/dist/phase6-declare-gate-DwYAep7y.js
+var require_phase6_declare_gate_DwYAep7y = __commonJS({
+  "../system/dist/phase6-declare-gate-DwYAep7y.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     function legacyTableRowCountFromList(tables, collection) {
       return tables.find((t) => t.name === collection)?.rows ?? 0;
     }
@@ -113795,124 +114139,33 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
-    var require_phase6_declare_gate = require_phase6_declare_gate_C6WqagkC();
-    var CRITICAL_CATEGORIES = /* @__PURE__ */ new Set([
-      "addon.runner-failed",
-      "addon.runner-refused",
-      "system.runner-check"
-    ]);
-    function isCriticalPush(alert) {
-      return alert.severity === "critical" || CRITICAL_CATEGORIES.has(alert.category);
-    }
-    function isPushState(value) {
-      if (typeof value !== "object" || value === null) return false;
-      const rec = value;
-      return (rec["state"] === "pending" || rec["state"] === "delivered" || rec["state"] === "disabled") && typeof rec["key"] === "string" && typeof rec["attempts"] === "number";
-    }
-    function selectPushTargets(targets, policy) {
-      const enabled = targets.filter((t) => t.enabled);
-      if (policy.targetIds.length > 0) return enabled.filter((t) => policy.targetIds.includes(t.id));
-      return enabled.filter((t) => t.ownerUserId === void 0);
-    }
-    var MAX_DIGEST_LINES = 20;
-    function composeDigest(items) {
-      const first = items[0];
-      if (items.length === 1 && first !== void 0) return {
-        title: first.title,
-        body: first.line
-      };
-      const shown = items.slice(0, MAX_DIGEST_LINES).map((i) => i.line);
-      const more = items.length - shown.length;
-      return {
-        title: `${String(items.length)} addons need attention`,
-        body: [...shown, ...more > 0 ? [`... and ${String(more)} more`] : []].join("\n")
-      };
-    }
-    async function deliverDigest(input) {
-      const out = /* @__PURE__ */ new Map();
-      const work = input.items.filter((i) => !(i.previous !== null && i.previous.key === i.key && i.previous.state !== "pending"));
-      if (work.length === 0) return out;
-      const sameKey = (i) => i.previous !== null && i.previous.key === i.key ? i.previous : null;
-      const attemptsOf = (i) => (sameKey(i)?.attempts ?? 0) + 1;
-      const sentOf = (i) => sameKey(i)?.sentTo ?? [];
-      if (!input.policy.enabled) {
-        for (const i of work) out.set(i.alertId, {
-          state: "disabled",
-          key: i.key,
-          attempts: attemptsOf(i)
-        });
-        return out;
-      }
-      const fail = (error) => {
-        for (const i of work) out.set(i.alertId, {
-          state: "pending",
-          key: i.key,
-          attempts: attemptsOf(i),
-          lastError: error,
-          ...sentOf(i).length > 0 ? { sentTo: sentOf(i) } : {}
-        });
-        return out;
-      };
-      let targets;
-      try {
-        targets = selectPushTargets(await input.ports.listTargets(), input.policy);
-      } catch (err) {
-        return fail(`notifiers unavailable: ${err instanceof Error ? err.message : String(err)}`);
-      }
-      if (targets.length === 0) return fail("no eligible notifier target");
-      const sent = new Map(work.map((i) => [i.alertId, [...sentOf(i)]]));
-      const errors = new Map(work.map((i) => [i.alertId, []]));
-      for (const target of targets) {
-        const todo = work.filter((i) => !(sent.get(i.alertId) ?? []).includes(target.id));
-        if (todo.length === 0) continue;
-        let failure = null;
-        try {
-          const result = await input.ports.send(target, composeDigest(todo));
-          if (!result.success) failure = `${target.id}: ${result.error ?? "send failed"}`;
-        } catch (err) {
-          failure = `${target.id}: ${err instanceof Error ? err.message : String(err)}`;
-        }
-        for (const i of todo) if (failure === null) sent.get(i.alertId)?.push(target.id);
-        else errors.get(i.alertId)?.push(failure);
-      }
-      for (const i of work) {
-        const sentTo = sent.get(i.alertId) ?? [];
-        const complete = targets.every((t) => sentTo.includes(t.id));
-        out.set(i.alertId, complete ? {
-          state: "delivered",
-          key: i.key,
-          at: input.now,
-          attempts: attemptsOf(i),
-          sentTo
-        } : {
-          state: "pending",
-          key: i.key,
-          attempts: attemptsOf(i),
-          lastError: (errors.get(i.alertId) ?? []).join("; "),
-          ...sentTo.length > 0 ? { sentTo } : {}
-        });
-      }
-      return out;
+    var require_phase6_declare_gate = require_phase6_declare_gate_DwYAep7y();
+    function nextEpisodeId(input) {
+      const { previous } = input;
+      if (previous !== null && require_dist10.isAlertEpisodeOpen(previous.status)) {
+        if (input.incomingKey === void 0 || input.incomingKey === previous.episodeKey) return previous.episodeId;
+      }
+      const minted = `${input.alertId}@${String(input.now)}`;
+      return previous !== null && previous.episodeId === minted ? `${minted}+` : minted;
+    }
+    function episodeEdge(previous, next) {
+      const nextOpen = require_dist10.isAlertEpisodeOpen(next.status);
+      const continues = previous !== null && require_dist10.isAlertEpisodeOpen(previous.status) && previous.episodeId === next.episodeId;
+      if (nextOpen) {
+        if (!require_dist10.isAlertEpisodeSeverity(next.severity)) return null;
+        if (!continues || previous === null) return "raised";
+        if (!require_dist10.isAlertEpisodeSeverity(previous.severity)) return "raised";
+        return previous.severity === "error" && next.severity === "critical" ? "raised" : null;
+      }
+      if (previous !== null && require_dist10.isAlertEpisodeOpen(previous.status) && require_dist10.isAlertEpisodeSeverity(previous.severity)) return "resolved";
+      return null;
     }
     function episodeKeyFromMetadata(metadata) {
       const key = metadata?.["episodeKey"];
       return typeof key === "string" ? key : void 0;
     }
-    function shouldDropPriorPush(existingStatus) {
-      return existingStatus === "completed";
-    }
-    function alertWithRetainedPush(toStore, existingPush, existingStatus) {
-      if (existingPush === void 0 || shouldDropPriorPush(existingStatus)) return toStore;
-      return {
-        ...toStore,
-        metadata: {
-          ...toStore.metadata,
-          push: existingPush
-        }
-      };
-    }
     function mergeEmitAlert(input) {
       const incomingKey = episodeKeyFromMetadata(input.incoming.metadata);
       const existingKey = input.existing?.episodeKey;
@@ -113920,26 +114173,11 @@ var require_alerts_addon = __commonJS({
         const sameEpisode = incomingKey === void 0 || incomingKey === existingKey;
         const priorCompleted = input.existing.status === "completed";
         if (sameEpisode && !priorCompleted) return {
-          alert: {
-            ...input.incoming,
-            read: true
-          },
-          queuePush: false
+          ...input.incoming,
+          read: true
         };
       }
-      const queuePush = isCriticalPush(input.incoming) && input.incoming.status === "active" && input.incoming.read === false;
-      return {
-        alert: input.incoming,
-        queuePush
-      };
-    }
-    function criticalPushPayload(alert) {
-      const key = episodeKeyFromMetadata(alert.metadata) ?? alert.id;
-      const pushLine = alert.metadata?.["pushLine"];
-      return {
-        key,
-        line: typeof pushLine === "string" ? pushLine : alert.title
-      };
+      return input.incoming;
     }
     function deviceLabelFromEventData(data) {
       const name = stringNonEmpty(data["name"]) ?? stringNonEmpty(data["deviceName"]);
@@ -114049,13 +114287,13 @@ var require_alerts_addon = __commonJS({
       switch (record.state) {
         case "refused":
           return {
-            severity: "error",
+            severity: "critical",
             title: "Addon refused to start",
             message: `${where}: refused - ${record.reason ?? "no reason reported"}${record.remedy !== void 0 ? ` ${record.remedy}` : ""}`
           };
         case "failed":
           return {
-            severity: "error",
+            severity: "critical",
             title: "Addon crash loop",
             message: `Runner "${where}" gave up${record.crashesInWindow !== void 0 ? ` after ${String(record.crashesInWindow)} crashes` : ""}${record.addonIds.length > 0 ? ` (addons: ${record.addonIds.join(", ")})` : ""} - ${String(record.count)} events`
           };
@@ -114067,22 +114305,6 @@ var require_alerts_addon = __commonJS({
           };
       }
     }
-    function isTerminalRunnerState(state) {
-      return state === "failed" || state === "refused";
-    }
-    function hash(text) {
-      let h = 5381;
-      for (let i = 0; i < text.length; i++) h = (h << 5) + h + text.charCodeAt(i) | 0;
-      return (h >>> 0).toString(36);
-    }
-    function runnerPushKey(record) {
-      const cause = record.state === "refused" ? hash(`${record.reason ?? ""}|${record.remedy ?? ""}`) : "breaker";
-      return `runner:${record.state}:${String(record.since)}:${cause}`;
-    }
-    function runnerPushLine(record) {
-      const where = record.nodeId === "hub" ? record.runnerId : `${record.runnerId} on ${record.nodeId}`;
-      return record.state === "refused" ? `${where}: refused to start. ${record.remedy ?? "See the Addons page."}` : `${where}: stopped after repeated crashes. Restart it from the Addons page.`;
-    }
     var import_read_all_rows = require_read_all_rows$1.require_read_all_rows();
     var ALERTS_COLLECTION = "alerts";
     var AlertBodySchema = require_dist10.AlertSchema.omit({ id: true });
@@ -114374,7 +114596,6 @@ var require_alerts_addon = __commonJS({
       }
     };
     var SILENT_TRACKED_CATEGORIES = [
-      "addon.started",
       "process.state-changed",
       "addon.load-recovered",
       "system.liveness-recovered",
@@ -114425,21 +114646,25 @@ var require_alerts_addon = __commonJS({
     }
     var DEFAULT_CONFIG = {
       maxAlerts: 500,
-      retentionDays: 30,
-      criticalPushEnabled: true,
-      criticalPushTargetIds: []
+      retentionDays: 30
     };
-    function normalizeCriticalPushTargetIds(raw) {
-      if (Array.isArray(raw)) return raw.filter((id) => typeof id === "string" && id.trim().length > 0).map((id) => id.trim());
-      if (typeof raw === "string" && raw.trim().length > 0) return raw.split(",").map((id) => id.trim()).filter((id) => id.length > 0);
-      return [];
-    }
-    var PUSH_COALESCE_MS = 2e3;
-    var PUSH_RECONCILE_ADDONS = /* @__PURE__ */ new Set(["notifiers", "notification-center"]);
     var EVENT_SOURCE = {
       type: "addon",
       id: "alert-center"
     };
+    var ADDONS_PAGE_ACTION = {
+      label: "Open Addons",
+      href: "/system/addons"
+    };
+    function episodeViewOf(alert) {
+      const key = episodeKeyFromMetadata(alert.metadata);
+      return {
+        status: alert.status,
+        severity: alert.severity,
+        episodeId: require_dist10.alertEpisodeId(alert),
+        ...key !== void 0 ? { episodeKey: key } : {}
+      };
+    }
     function toPrunable(record) {
       return {
         id: record.id,
@@ -114450,11 +114675,8 @@ var require_alerts_addon = __commonJS({
     var AlertCenterAddon = class extends require_dist10.BaseAddon {
       alertStore = null;
       unsubscribers = [];
-      /** How long a burst of critical findings is gathered into one digest push. */
-      pushCoalesceMs;
-      constructor(options) {
+      constructor() {
         super({ ...DEFAULT_CONFIG });
-        this.pushCoalesceMs = options?.pushCoalesceMs ?? PUSH_COALESCE_MS;
       }
       /**
       * Per `(category, source.id)` counter used to rate-limit chatty
@@ -114485,9 +114707,7 @@ var require_alerts_addon = __commonJS({
           unsubs.push(unsub);
         }
         this.unsubscribers = unsubs;
-        this.reconcilePendingPushes();
         this.dismissLegacyStreamCards(void 0);
-        this.migrateCriticalPushTargetIds();
         this.ctx.logger.info("Initialized", { meta: { trackedCategoriesCount: TRACKED_CATEGORIES.length } });
         return [{
           capability: require_dist10.alertsCapability,
@@ -114506,46 +114726,29 @@ var require_alerts_addon = __commonJS({
           description: "Configure alert storage and retention.",
           descriptionKey: "server:globalSettings.s_alerts.description",
           columns: 1,
-          fields: [
-            this.field({
-              type: "number",
-              key: "maxAlerts",
-              label: "Maximum stored alerts",
-              labelKey: "server:globalSettings.s_alerts.maxAlerts.label",
-              description: "Oldest read alerts are deleted when this limit is exceeded.",
-              descriptionKey: "server:globalSettings.s_alerts.maxAlerts.description",
-              min: 50,
-              max: 5e3,
-              step: 50,
-              default: 500
-            }),
-            this.field({
-              type: "number",
-              key: "retentionDays",
-              label: "Alert retention (days)",
-              labelKey: "server:globalSettings.s_alerts.retentionDays.label",
-              description: "Alerts older than this are automatically removed.",
-              descriptionKey: "server:globalSettings.s_alerts.retentionDays.description",
-              min: 1,
-              max: 365,
-              step: 1,
-              default: 30
-            }),
-            this.field({
-              type: "boolean",
-              key: "criticalPushEnabled",
-              label: "Push critical system alerts",
-              description: "A runner that failed or refused to start, or a node whose runners are degraded, is pushed straight to the notifier targets \u2014 even when Notification Center is down. This path does not use notification rules.",
-              default: true
-            }),
-            this.field({
-              type: "notification-target-multiselect",
-              key: "criticalPushTargetIds",
-              label: "Critical push targets",
-              description: "Notifier targets that receive critical system alerts. Empty = every enabled shared (not personal) target.",
-              default: []
-            })
-          ]
+          fields: [this.field({
+            type: "number",
+            key: "maxAlerts",
+            label: "Maximum stored alerts",
+            labelKey: "server:globalSettings.s_alerts.maxAlerts.label",
+            description: "Oldest read alerts are deleted when this limit is exceeded.",
+            descriptionKey: "server:globalSettings.s_alerts.maxAlerts.description",
+            min: 50,
+            max: 5e3,
+            step: 50,
+            default: 500
+          }), this.field({
+            type: "number",
+            key: "retentionDays",
+            label: "Alert retention (days)",
+            labelKey: "server:globalSettings.s_alerts.retentionDays.label",
+            description: "Alerts older than this are automatically removed.",
+            descriptionKey: "server:globalSettings.s_alerts.retentionDays.description",
+            min: 1,
+            max: 365,
+            step: 1,
+            default: 30
+          })]
         }] });
       }
       async listAlerts(filter) {
@@ -114584,7 +114787,17 @@ var require_alerts_addon = __commonJS({
           updatedAt: Date.now()
         });
       }
-      async handleEvent(category, event) {
+      /**
+      * Events are handled one at a time: every handler is a read-modify-write of
+      * an alert, and two concurrent events about one runner would both read "no
+      * alert yet" and open two episodes for it.
+      */
+      eventChain = Promise.resolve();
+      handleEvent(category, event) {
+        this.eventChain = this.eventChain.then(() => this.processEvent(category, event));
+        return this.eventChain;
+      }
+      async processEvent(category, event) {
         try {
           if (category === "model.download.progress") {
             await this.handleModelDownload(event);
@@ -114602,11 +114815,6 @@ var require_alerts_addon = __commonJS({
             await this.handleRunnerCheck(event);
             return;
           }
-          if (category === require_dist10.EventCategory.AddonStarted) {
-            const addonId = event.data["addonId"];
-            if (typeof addonId === "string" && PUSH_RECONCILE_ADDONS.has(addonId)) await this.reconcilePendingPushes();
-            return;
-          }
           if (category === require_dist10.EventCategory.AddonLoadFailed) {
             await this.handleAddonLoadFailed(event);
             return;
@@ -114707,11 +114915,8 @@ var require_alerts_addon = __commonJS({
             type: "runner",
             id: record.runnerId
           },
-          metadata: {
-            runner: record,
-            pushLine: runnerPushLine(record),
-            ...existing?.push !== void 0 ? { push: existing.push } : {}
-          }
+          action: ADDONS_PAGE_ACTION,
+          metadata: { runner: record }
         };
         await this.persistAlert(alert);
         if (previous === null) this.emitAlertCreatedEvent(alert);
@@ -114720,17 +114925,11 @@ var require_alerts_addon = __commonJS({
           title: alert.title
         });
         await this.enforceMaxAlerts();
-        if (isTerminalRunnerState(record.state)) this.queuePush({
-          alertId,
-          key: runnerPushKey(record),
-          title: rendered.title,
-          line: runnerPushLine(record)
-        });
       }
       /**
       * A runner reached `running`: its episode is over. Close the runner alert so a
-      * later failure opens a NEW episode (new push key), instead of folding into a
-      * stale `refused` record that would never push again.
+      * later failure opens a NEW episode, instead of folding into a stale
+      * `refused` record whose notification was already sent.
       */
       async handleRunnerStateChanged(event) {
         if (event.data["state"] !== "running") return;
@@ -114756,24 +114955,20 @@ var require_alerts_addon = __commonJS({
         }) : [];
         const failedIds = ids(event.data["failed"]);
         const missingIds = ids(event.data["missing"]);
-        const pushLine = `${nodeId}: runners degraded - ${[
+        const parts = [
           ...failedIds.length > 0 ? [`failed: ${failedIds.join(", ")}`] : [],
           ...refusedIds.length > 0 ? [`refused: ${refusedIds.join(", ")}`] : [],
           ...missingIds.length > 0 ? [`missing: ${missingIds.join(", ")}`] : []
-        ].join("; ")}. See the Addons page.`;
-        const pushKey = `check:${[
-          ...failedIds,
-          ...refusedIds,
-          ...missingIds
-        ].sort().join(",")}`;
+        ];
         const now = Date.now();
         const existing = await this.readAlertRaw(alertId);
         const alert = {
           id: alertId,
           category: "system.runner-check",
-          severity: "error",
+          severity: "critical",
           title: "Runners degraded",
-          message: `${nodeId}: ${summary}`,
+          message: `${nodeId}: ${summary}${parts.length > 0 ? ` (${parts.join("; ")})` : ""}`,
+          action: ADDONS_PAGE_ACTION,
           status: "active",
           read: false,
           createdAt: existing?.createdAt ?? now,
@@ -114786,19 +114981,11 @@ var require_alerts_addon = __commonJS({
             nodeId,
             failed: event.data["failed"],
             refused: event.data["refused"],
-            missing: event.data["missing"],
-            pushLine,
-            ...existing?.push !== void 0 ? { push: existing.push } : {}
+            missing: event.data["missing"]
           }
         };
         await this.persistAlert(alert);
         this.emitAlertCreatedEvent(alert);
-        this.queuePush({
-          alertId,
-          key: pushKey,
-          title: alert.title,
-          line: pushLine
-        });
       }
       async readAlertRaw(alertId) {
         const store = this.alertStore;
@@ -114807,155 +114994,19 @@ var require_alerts_addon = __commonJS({
         if (raw === null) return null;
         const rec = Object.fromEntries(Object.entries(raw));
         const meta = rec["metadata"];
-        const push = typeof meta === "object" && meta !== null && !Array.isArray(meta) ? meta["push"] : void 0;
         const metadata = typeof meta === "object" && meta !== null && !Array.isArray(meta) ? meta : void 0;
+        const parsed = require_dist10.AlertSchema.safeParse({
+          id: alertId,
+          ...rec
+        });
         return {
           ...typeof rec["createdAt"] === "number" ? { createdAt: rec["createdAt"] } : {},
           ...typeof rec["read"] === "boolean" ? { read: rec["read"] } : {},
           ...typeof rec["status"] === "string" ? { status: rec["status"] } : {},
-          ...isPushState(push) ? { push } : {},
-          ...episodeKeyFromMetadata(metadata) !== void 0 ? { episodeKey: episodeKeyFromMetadata(metadata) } : {}
+          ...episodeKeyFromMetadata(metadata) !== void 0 ? { episodeKey: episodeKeyFromMetadata(metadata) } : {},
+          ...parsed.success ? { episode: episodeViewOf(parsed.data) } : {}
         };
       }
-      /** Pushes run one at a time so a burst can never send the same state twice. */
-      pushChain = Promise.resolve();
-      /** Findings waiting for the next digest, by alert id. */
-      pushQueue = /* @__PURE__ */ new Map();
-      pushTimer = null;
-      pushPolicy() {
-        return {
-          enabled: this.config.criticalPushEnabled,
-          targetIds: normalizeCriticalPushTargetIds(this.config.criticalPushTargetIds)
-        };
-      }
-      /** Rewrite a legacy CSV `criticalPushTargetIds` string into `string[]`. */
-      async migrateCriticalPushTargetIds() {
-        const raw = this.config.criticalPushTargetIds;
-        if (typeof raw !== "string") return;
-        try {
-          await this.updateGlobalSettings({ criticalPushTargetIds: normalizeCriticalPushTargetIds(raw) });
-        } catch (err) {
-          this.ctx.logger.warn("criticalPushTargetIds CSV migration failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
-        }
-      }
-      pushPorts() {
-        const api = this.ctx.api;
-        return {
-          listTargets: async () => {
-            return (await api.notificationOutput.listTargets.query({})).map((t) => {
-              const owner = t.config["ownerUserId"];
-              return {
-                id: t.id,
-                addonId: t.addonId,
-                enabled: t.enabled,
-                ...typeof owner === "string" && owner.length > 0 ? { ownerUserId: owner } : {}
-              };
-            });
-          },
-          send: async (target, message) => api.notificationOutput.send.mutate({
-            addonId: target.addonId,
-            targetId: target.id,
-            notification: {
-              title: message.title,
-              body: message.body,
-              format: "text",
-              priority: 5
-            }
-          })
-        };
-      }
-      /**
-      * Queue a critical finding for the next digest. A burst (every runner of a boot)
-      * arrives within the coalesce window and leaves as ONE message per target.
-      */
-      queuePush(item) {
-        this.pushQueue.set(item.alertId, item);
-        if (this.pushTimer !== null) return;
-        this.pushTimer = setTimeout(() => {
-          this.pushTimer = null;
-          this.flushPushes();
-        }, this.pushCoalesceMs);
-        this.pushTimer.unref?.();
-      }
-      /** Send the queued findings now (also the reconcile path). */
-      flushPushes() {
-        this.pushChain = this.pushChain.then(async () => {
-          const queued = [...this.pushQueue.values()];
-          this.pushQueue.clear();
-          if (queued.length === 0) return;
-          try {
-            const items = [];
-            for (const q of queued) {
-              const existing = await this.readAlertRaw(q.alertId);
-              items.push({
-                ...q,
-                previous: existing?.push ?? null
-              });
-            }
-            const states = await deliverDigest({
-              items,
-              policy: this.pushPolicy(),
-              ports: this.pushPorts(),
-              now: Date.now()
-            });
-            for (const [alertId, state] of states) {
-              await this.storePushState(alertId, state);
-              this.ctx.logger?.info("critical alert push", { meta: {
-                alertId,
-                state: state.state,
-                attempts: state.attempts,
-                error: state.lastError
-              } });
-            }
-          } catch (err) {
-            this.ctx.logger?.warn("critical alert push failed unexpectedly", { meta: { error: require_dist10.errMsg(err) } });
-          }
-        });
-        return this.pushChain;
-      }
-      async storePushState(alertId, push) {
-        const store = this.alertStore;
-        if (store === null) return;
-        const raw = await store.getData(alertId);
-        if (raw === null) return;
-        const meta = raw["metadata"];
-        const metadata = typeof meta === "object" && meta !== null && !Array.isArray(meta) ? meta : {};
-        await store.mergeUpdate(alertId, { metadata: {
-          ...metadata,
-          push
-        } });
-      }
-      /**
-      * Retry every critical alert whose push is still pending - at boot and when
-      * the notifiers or notification-center start. An alert whose state was already
-      * delivered is skipped by its key, so reconciling never sends twice.
-      */
-      async reconcilePendingPushes() {
-        const store = this.alertStore;
-        if (store === null) return;
-        try {
-          const rows = await store.listRecent(500);
-          for (const row of rows) {
-            const parsed = require_dist10.AlertSchema.safeParse({
-              id: row.id,
-              ...row.data
-            });
-            if (!parsed.success || parsed.data.status !== "active") continue;
-            if (!isCriticalPush(parsed.data)) continue;
-            const push = parsed.data.metadata?.["push"];
-            if (!isPushState(push) || push.state !== "pending") continue;
-            this.pushQueue.set(parsed.data.id, {
-              alertId: parsed.data.id,
-              key: push.key,
-              title: parsed.data.title,
-              line: String(parsed.data.metadata?.["pushLine"] ?? parsed.data.title)
-            });
-          }
-          await this.flushPushes();
-        } catch (err) {
-          this.ctx.logger?.warn("pending critical push reconcile failed", { meta: { error: require_dist10.errMsg(err) } });
-        }
-      }
       async handleModelDownload(event) {
         const data = event.data;
         const modelId = data.modelId ?? "unknown";
@@ -115302,7 +115353,7 @@ var require_alerts_addon = __commonJS({
       }
       async emitAlert(alert) {
         const existingRaw = await this.readAlertRaw(alert.id);
-        const { alert: toStore, queuePush } = mergeEmitAlert({
+        const toStore = mergeEmitAlert({
           existing: existingRaw === null ? null : {
             read: existingRaw.read,
             episodeKey: existingRaw.episodeKey,
@@ -115310,20 +115361,10 @@ var require_alerts_addon = __commonJS({
           },
           incoming: alert
         });
-        const stored = alertWithRetainedPush(toStore, existingRaw?.push, existingRaw?.status);
         const isNew = existingRaw === null;
-        await this.persistAlert(stored);
+        const stored = await this.persistAlert(toStore);
         if (isNew) this.emitAlertCreatedEvent(stored);
         else this.emitAlertUpdatedEvent(alert.id, stored);
-        if (queuePush) {
-          const { key, line } = criticalPushPayload(stored);
-          this.queuePush({
-            alertId: stored.id,
-            key,
-            title: stored.title,
-            line
-          });
-        }
         await this.enforceMaxAlerts();
         await this.enforceRetention();
       }
@@ -115338,15 +115379,73 @@ var require_alerts_addon = __commonJS({
       * Read-merge-write: SettingsBackend.update() replaces the entire `data` blob,
       * so we must read the existing record, merge the patch, and write back.
       */
-      async mergeUpdate(id, patch) {
+      /** Alert writes (stamp + store + announce) from any caller, one at a time. */
+      writeChain = Promise.resolve();
+      serializedWrite(write) {
+        const run = this.writeChain.then(write, write);
+        this.writeChain = run.catch(() => void 0);
+        return run;
+      }
+      mergeUpdate(id, patch) {
+        return this.serializedWrite(() => this.mergeUpdateNow(id, patch));
+      }
+      async mergeUpdateNow(id, patch) {
         const store = this.alertStore;
         if (store === null) return;
-        await store.mergeUpdate(id, patch);
+        const previous = (await this.readAlertRaw(id))?.episode ?? null;
+        const metadata = patch["metadata"];
+        const keepEpisode = previous !== null && typeof metadata === "object" && metadata !== null ? { metadata: {
+          ...metadata,
+          episodeId: previous.episodeId
+        } } : {};
+        await store.mergeUpdate(id, {
+          ...patch,
+          ...keepEpisode
+        });
+        const after = await store.getData(id);
+        const parsed = after === null ? null : require_dist10.AlertSchema.safeParse({
+          id,
+          ...after
+        });
+        if (parsed?.success === true) this.announceEpisode(previous, parsed.data);
+      }
+      /**
+      * Store an alert, stamping its episode identity. The stored alert is what a
+      * caller must use afterwards, and the opening or closing of a critical/error
+      * episode is announced here, in the one place every write passes through.
+      */
+      persistAlert(alert) {
+        return this.serializedWrite(() => this.persistAlertNow(alert));
       }
-      async persistAlert(alert) {
+      async persistAlertNow(alert) {
         const store = this.alertStore;
-        if (store === null) return;
-        await store.persist(alert);
+        if (store === null) return alert;
+        const previous = (await this.readAlertRaw(alert.id))?.episode ?? null;
+        const episodeId = nextEpisodeId({
+          alertId: alert.id,
+          previous,
+          incomingKey: episodeKeyFromMetadata(alert.metadata),
+          now: Date.now()
+        });
+        const stamped = {
+          ...alert,
+          metadata: {
+            ...alert.metadata,
+            episodeId
+          }
+        };
+        await store.persist(stamped);
+        this.announceEpisode(previous, stamped);
+        return stamped;
+      }
+      /**
+      * Announce an episode edge on the bus. Telemetry, and it may be dropped
+      * (D8): Notification Center reconciles from the alerts store (D11, D49).
+      */
+      announceEpisode(previous, alert) {
+        const edge = episodeEdge(previous, episodeViewOf(alert));
+        if (edge === null) return;
+        this.ctx.eventBus?.emit(require_dist10.createEvent(require_dist10.EventCategory.AlertEpisode, EVENT_SOURCE, require_dist10.alertEpisodePayload(alert, edge, Date.now())));
       }
       emitAlertCreatedEvent(alert) {
         this.ctx.eventBus?.emit(require_dist10.createEvent("alert.created", EVENT_SOURCE, {
@@ -115447,7 +115546,7 @@ var require_calendars_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_settle_sources = require_settle_sources_Bhsy57y();
     var zod = require_zod();
     var CALENDAR_COLOR_PALETTE = [
@@ -115665,11 +115764,11 @@ var require_calendars = __commonJS({
   }
 });
 
-// ../system/dist/composition-sources-BQmhc3se.js
-var require_composition_sources_BQmhc3se = __commonJS({
-  "../system/dist/composition-sources-BQmhc3se.js"(exports) {
+// ../system/dist/composition-sources-Cukc78eu.js
+var require_composition_sources_Cukc78eu = __commonJS({
+  "../system/dist/composition-sources-Cukc78eu.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     function normalizedNativeOwner(owner) {
       const trimmed = owner?.trim();
       return trimmed ? trimmed : null;
@@ -115784,8 +115883,8 @@ var require_composer_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
-    var require_composition_sources = require_composition_sources_BQmhc3se();
+    var require_dist10 = require_dist_Bi4Ioxop();
+    var require_composition_sources = require_composition_sources_Cukc78eu();
     var zod = require_zod();
     function isRecord$2(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -119595,7 +119694,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -123988,9 +124087,9 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
-    var require_composition_sources = require_composition_sources_BQmhc3se();
+    var require_composition_sources = require_composition_sources_Cukc78eu();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var require_prefix_walk = require_prefix_walk_Dv6MLZlM();
     var zod = require_zod();
@@ -126190,9 +126289,9 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../types/dist/event-category-Hoe-mqbd.js
-var require_event_category_Hoe_mqbd = __commonJS({
-  "../types/dist/event-category-Hoe-mqbd.js"(exports) {
+// ../types/dist/event-category-eSqkye-K.js
+var require_event_category_eSqkye_K = __commonJS({
+  "../types/dist/event-category-eSqkye-K.js"(exports) {
     "use strict";
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
       EventCategory2["SystemBoot"] = "system.boot";
@@ -126213,6 +126312,7 @@ var require_event_category_Hoe_mqbd = __commonJS({
       EventCategory2["AddonRunnerRefused"] = "addon.runner-refused";
       EventCategory2["ProcessStateChanged"] = "process.state-changed";
       EventCategory2["SystemRunnerCheck"] = "system.runner-check";
+      EventCategory2["AlertEpisode"] = "alert.episode";
       EventCategory2["AddonError"] = "addon.error";
       EventCategory2["AddonPageReady"] = "addon.page-ready";
       EventCategory2["AddonWidgetReady"] = "addon.widget-ready";
@@ -126394,11 +126494,11 @@ var require_event_category_Hoe_mqbd = __commonJS({
   }
 });
 
-// ../types/dist/sleep--L6qY125.js
-var require_sleep_L6qY125 = __commonJS({
-  "../types/dist/sleep--L6qY125.js"(exports) {
+// ../types/dist/sleep-BE7_6UnC.js
+var require_sleep_BE7_6UnC = __commonJS({
+  "../types/dist/sleep-BE7_6UnC.js"(exports) {
     "use strict";
-    var require_event_category = require_event_category_Hoe_mqbd();
+    var require_event_category = require_event_category_eSqkye_K();
     var zod = require_zod();
     var AUDIO_CHUNK_FORMATS = [
       "f32le",
@@ -131460,14 +131560,19 @@ var require_sleep_L6qY125 = __commonJS({
     function addonSliceHandleApi(api) {
       return api;
     }
+    function isCapRecord(value) {
+      if (value === null || Array.isArray(value)) return false;
+      const kind = typeof value;
+      return kind === "object" || kind === "function";
+    }
     function isTrpcProcedureLeaf(value) {
-      if (typeof value !== "object" || value === null) return false;
+      if (!isCapRecord(value)) return false;
       const record = value;
-      return (typeof record.query === "function" || typeof record.mutate === "function" || typeof record.subscribe === "function") && !Array.isArray(value);
+      return typeof record.query === "function" || typeof record.mutate === "function" || typeof record.subscribe === "function";
     }
     function readCapRecord(api, capProp) {
       const cap = Reflect.get(api, capProp);
-      if (typeof cap !== "object" || cap === null || Array.isArray(cap)) return void 0;
+      if (!isCapRecord(cap)) return void 0;
       return cap;
     }
     function readTrpcLeaf(api, capProp, method2) {
@@ -131647,12 +131752,18 @@ var require_sleep_L6qY125 = __commonJS({
       const dishwasherInterface = {
         start: (input) => dispatch("dishwasher", "dishwasher", "start", "mutation", input),
         pause: (input) => dispatch("dishwasher", "dishwasher", "pause", "mutation", input),
+        resume: (input) => dispatch("dishwasher", "dishwasher", "resume", "mutation", input),
         stop: (input) => dispatch("dishwasher", "dishwasher", "stop", "mutation", input),
         setProgram: (input) => dispatch("dishwasher", "dishwasher", "setProgram", "mutation", input),
         setPower: (input) => dispatch("dishwasher", "dishwasher", "setPower", "mutation", input),
         setHalfLoad: (input) => dispatch("dishwasher", "dishwasher", "setHalfLoad", "mutation", input),
         setHygienePlus: (input) => dispatch("dishwasher", "dishwasher", "setHygienePlus", "mutation", input),
+        setExtraDry: (input) => dispatch("dishwasher", "dishwasher", "setExtraDry", "mutation", input),
+        setIntensiveZone: (input) => dispatch("dishwasher", "dishwasher", "setIntensiveZone", "mutation", input),
+        setVarioSpeedPlus: (input) => dispatch("dishwasher", "dishwasher", "setVarioSpeedPlus", "mutation", input),
+        setChildLock: (input) => dispatch("dishwasher", "dishwasher", "setChildLock", "mutation", input),
         setOption: (input) => dispatch("dishwasher", "dishwasher", "setOption", "mutation", input),
+        getOptions: (input) => dispatch("dishwasher", "dishwasher", "getOptions", "query", input),
         getStatus: (input) => dispatch("dishwasher", "dishwasher", "getStatus", "query", input)
       };
       const doorbellInterface = { getStatus: (input) => dispatch("doorbell", "doorbell", "getStatus", "query", input) };
@@ -133950,8 +134061,8 @@ var require_addon = __commonJS({
   "../types/dist/addon.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_sleep = require_sleep_L6qY125();
-    var require_event_category = require_event_category_Hoe_mqbd();
+    var require_sleep = require_sleep_BE7_6UnC();
+    var require_event_category = require_event_category_eSqkye_K();
     var require_err_msg = require_err_msg_BhVbr0NX();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -134855,6 +134966,15 @@ var require_addon = __commonJS({
         "valueType": "boolean"
       }],
       "dishwasher": [
+        {
+          "path": "availability",
+          "valueType": "enum",
+          "enumValues": [
+            "available",
+            "offline",
+            "description-missing"
+          ]
+        },
         {
           "path": "state",
           "valueType": "enum",
@@ -134867,12 +134987,35 @@ var require_addon = __commonJS({
             "unavailable"
           ]
         },
+        {
+          "path": "operationState",
+          "valueType": "enum",
+          "enumValues": [
+            "Inactive",
+            "Ready",
+            "DelayedStart",
+            "Run",
+            "Pause",
+            "ActionRequired",
+            "Finished",
+            "Error",
+            "Aborting"
+          ]
+        },
         {
           "path": "program",
           "valueType": "string"
         },
         {
-          "path": "remainingMinutes",
+          "path": "selectedProgram",
+          "valueType": "string"
+        },
+        {
+          "path": "remainingSeconds",
+          "valueType": "number"
+        },
+        {
+          "path": "delayedStartSeconds",
           "valueType": "number"
         },
         {
@@ -134883,14 +135026,30 @@ var require_addon = __commonJS({
           "path": "doorOpen",
           "valueType": "boolean"
         },
+        {
+          "path": "doorLocked",
+          "valueType": "boolean"
+        },
         {
           "path": "remoteStartAllowed",
           "valueType": "boolean"
         },
+        {
+          "path": "remoteControlActive",
+          "valueType": "boolean"
+        },
+        {
+          "path": "localControlActive",
+          "valueType": "boolean"
+        },
         {
           "path": "powerOn",
           "valueType": "boolean"
         },
+        {
+          "path": "powerState",
+          "valueType": "string"
+        },
         {
           "path": "saltLevel",
           "valueType": "enum",
@@ -134917,6 +135076,22 @@ var require_addon = __commonJS({
           "path": "hygienePlus",
           "valueType": "boolean"
         },
+        {
+          "path": "extraDry",
+          "valueType": "boolean"
+        },
+        {
+          "path": "intensiveZone",
+          "valueType": "boolean"
+        },
+        {
+          "path": "varioSpeedPlus",
+          "valueType": "boolean"
+        },
+        {
+          "path": "childLock",
+          "valueType": "boolean"
+        },
         {
           "path": "errorCode",
           "valueType": "number"
@@ -136532,7 +136707,7 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var require_prefix_walk = require_prefix_walk_Dv6MLZlM();
@@ -145606,7 +145781,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -145743,7 +145918,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -146106,12 +146281,12 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var require_safe_buffer$1 = require_safe_buffer_D3aoa_7X();
     var require_ms$1 = require_ms_LB3giGoU();
-    var require_device_ca = require_device_ca_75rt3U_U();
-    var require_phase6_declare_gate = require_phase6_declare_gate_C6WqagkC();
+    var require_device_ca = require_device_ca_B3hUVfYk();
+    var require_phase6_declare_gate = require_phase6_declare_gate_DwYAep7y();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
@@ -156906,7 +157081,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -157578,7 +157753,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var node_fs_promises = __require("fs/promises");
     var node_util = __require("util");
     var node_os = __require("os");
@@ -158365,6 +158540,11 @@ var require_native_metrics_addon = __commonJS({
         }
       };
     }
+    function refusalCounts(result) {
+      const counts = {};
+      for (const r of result.refused) counts[r.reason] = (counts[r.reason] ?? 0) + r.count;
+      return counts;
+    }
     var NodeMetricsHistoryRecorder = class {
       deps;
       declared = false;
@@ -158438,7 +158618,15 @@ var require_native_metrics_addon = __commonJS({
         });
         if (points.length === 0) return;
         try {
-          await this.deps.deviceHistory.record({ points });
+          const result = await this.deps.deviceHistory.record({ points });
+          if (result.refused.length > 0) {
+            if (result.refused.some((r) => r.reason === "undeclared")) this.declared = false;
+            this.deps.logger.warn("node metrics history points refused", { meta: {
+              nodeId,
+              accepted: result.accepted,
+              refused: refusalCounts(result)
+            } });
+          }
         } catch (err) {
           this.deps.logger.warn("node metrics history sample not stored", { meta: {
             nodeId,
@@ -159959,7 +160147,7 @@ var require_device_history_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     function subjectIdOf(subject) {
       return subject.kind === "device" ? `d:${subject.deviceId}` : `n:${subject.nodeId}`;
     }
@@ -162638,7 +162826,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -163748,12 +163936,12 @@ var require_lib = __commonJS({
   }
 });
 
-// ../system/dist/wal-maintenance-mwCBe3Vr.js
-var require_wal_maintenance_mwCBe3Vr = __commonJS({
-  "../system/dist/wal-maintenance-mwCBe3Vr.js"(exports) {
+// ../system/dist/wal-maintenance-Bo_lo3Dh.js
+var require_wal_maintenance_Bo_lo3Dh = __commonJS({
+  "../system/dist/wal-maintenance-Bo_lo3Dh.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var node_crypto = __require("crypto");
     var node_module = __require("module");
@@ -164038,7 +164226,9 @@ var require_wal_maintenance_mwCBe3Vr = __commonJS({
       return {
         hasTable: ({ name }) => backend.hasTable(name),
         dropRetiredTable: ({ name }) => backend.dropRetiredTable(name),
-        threadId: () => threadId
+        threadId: () => threadId,
+        listPhysicalTables: ({ ownerPrefix }) => backend.listTables(ownerPrefix),
+        readLegacyCollection: (input) => backend.readLegacyCollection(input)
       };
     }
     function callControl(target, op, input) {
@@ -164689,8 +164879,41 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
         if (this.schemaReady) {
           ensureRecordsSchema(db);
           for (const row of loadKinds(db)) this.kinds.set(keyOf(row.owner, row.kind), row);
+          this.correctSequences();
         }
       }
+      /**
+      * Boot correction: every kind that ever allocated an id has its counter raised
+      * above the highest numeric id it holds. Adopted legacy rows (or any caller
+      * chosen numeric id) kept ids far above a counter that started at 1, and the
+      * upsert would have overwritten another device's row on the first collision.
+      * Runs on the engine's own connection, over the (kind_id, id) unique index.
+      */
+      correctSequences() {
+        const seq = this.db.prepare("SELECT kind_id FROM _record_sequences");
+        for (const { kind_id: kindId } of seq.all()) {
+          const top = this.db.prepare("SELECT MAX(CAST(id AS INTEGER)) AS m FROM records WHERE kind_id = ? AND id GLOB '[0-9]*'").get(kindId);
+          if (top?.m === null || top === void 0) continue;
+          if (this.db.prepare("UPDATE _record_sequences SET next = ? WHERE kind_id = ? AND next < ?").run(top.m + 1, kindId, top.m + 1).changes > 0) this.options.logger.warn("records: id sequence raised above the highest stored id", { meta: {
+            kindId,
+            next: top.m + 1
+          } });
+        }
+      }
+      /** Ids handed out by allocateId and not yet written: their first write is insert-only. */
+      pendingAllocated = /* @__PURE__ */ new Set();
+      static PENDING_ALLOCATED_MAX = 4096;
+      /** Raise a kind's counter above the numeric ids of a caller-supplied batch (adoption). */
+      raiseSequenceFor(k, records) {
+        let top = -1;
+        for (const r of records) if (/^\d{1,15}$/.test(r.id)) top = Math.max(top, Number(r.id));
+        if (top < 0) return;
+        if (k.declaration.adoptsFrom !== void 0) {
+          this.db.prepare("INSERT INTO _record_sequences(kind_id, next) VALUES (?, ?) ON CONFLICT(kind_id) DO UPDATE SET next = MAX(next, excluded.next)").run(k.kindId, top + 1);
+          return;
+        }
+        this.db.prepare("UPDATE _record_sequences SET next = ? WHERE kind_id = ? AND next < ?").run(top + 1, k.kindId, top + 1);
+      }
       schemaReady;
       kindOf(owner, kind) {
         const row = this.kinds.get(keyOf(owner, kind));
@@ -164829,6 +165052,17 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
       /** One row, inside the caller's transaction. */
       writeRecord(owner, k, rec, ifRev, nowMs) {
         const header = validateHeader(k.kind, k.declaration, rec, nowMs);
+        const allocatedKey = `${k.kindId}:${rec.id}`;
+        if (this.pendingAllocated.has(allocatedKey) && this.storedRow(k, rec.id) !== void 0) {
+          this.options.logger.warn("records: an allocated id collided with a stored row; write refused", {
+            tags: { deviceId: rec.deviceId },
+            meta: {
+              kind: k.kind,
+              id: rec.id
+            }
+          });
+          throw new require_dist10.RevConflictError(`${k.kind}/${rec.id}: an allocated id is insert-only and a row already holds it`);
+        }
         const stored = k.declaration.secretPaths.length > 0 || ifRev !== void 0 ? this.storedRow(k, rec.id) : void 0;
         if (ifRev !== void 0) {
           if (ifRev === 0 && stored !== void 0) throw new require_dist10.RevConflictError(`${k.kind}/${rec.id}: the row exists (ifRev 0 means "must not exist")`);
@@ -164842,6 +165076,7 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
         } }), nowMs);
         const row = this.wrapWrite(k, () => this.db.prepare(this.upsertSql(k.kindId)).get(header.id, header.deviceId, header.at, header.expiresAt, nowMs, json));
         if (row === void 0) throw new Error("records: the upsert returned no revision");
+        this.pendingAllocated.delete(allocatedKey);
         return {
           rev: row.rev,
           releasedRefs: checked.releasedRefs
@@ -164866,6 +165101,7 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
         const released = [];
         this.timed("putMany", input.kind, () => this.db.transaction(() => {
           for (const rec of input.records) released.push(...this.writeRecord(input.owner, k, rec, void 0, nowMs).releasedRefs);
+          this.raiseSequenceFor(k, input.records);
         })());
         this.afterWrite(k, input.records.map((r) => r.deviceId));
         return {
@@ -164988,6 +165224,11 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
         const k = this.kindOf(input.owner, input.kind);
         const row = this.db.prepare("INSERT INTO _record_sequences(kind_id, next) VALUES (?, 2) ON CONFLICT(kind_id) DO UPDATE SET next = next + 1 RETURNING next - 1 AS id").get(k.kindId);
         if (row === void 0) throw new Error("records: the sequence returned no id");
+        this.pendingAllocated.add(`${k.kindId}:${row.id}`);
+        if (this.pendingAllocated.size > RecordsEngine2.PENDING_ALLOCATED_MAX) {
+          const oldest = this.pendingAllocated.values().next();
+          if (oldest.done !== true) this.pendingAllocated.delete(oldest.value);
+        }
         return { id: row.id };
       }
       /**
@@ -165155,7 +165396,9 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
     var CONTROL_OPS = [
       "hasTable",
       "dropRetiredTable",
-      "threadId"
+      "threadId",
+      "listPhysicalTables",
+      "readLegacyCollection"
     ];
     function isDataStoreOp(op) {
       return DATA_STORE_OPS.some((known) => known === op);
@@ -166332,13 +166575,24 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
       */
       listTables(ownerPrefix) {
         const db = this.getDb();
-        const names = db.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name NOT LIKE 'sqlite_%' ORDER BY name").all().map((r) => r.name);
+        const entries = db.prepare("SELECT name, sql FROM sqlite_master WHERE type = 'table' AND name NOT LIKE 'sqlite_%' ORDER BY name").all();
         const out = [];
-        for (const name of names) {
+        for (const { name, sql } of entries) {
+          if (sql !== null && sql.toUpperCase().startsWith("CREATE VIRTUAL")) continue;
           const colon = name.indexOf(":");
           const owner = colon > 0 ? name.slice(0, colon) : null;
           if (ownerPrefix !== void 0 && owner !== ownerPrefix) continue;
-          const rows = db.prepare(`SELECT COUNT(*) AS c FROM "${name}"`).get()?.c ?? 0;
+          let rows = 0;
+          try {
+            rows = db.prepare(`SELECT COUNT(*) AS c FROM "${name}"`).get()?.c ?? 0;
+          } catch (err) {
+            this.logger?.warn("listTables: skipped a table whose COUNT failed", { meta: {
+              table: name,
+              database: this.options.databaseId,
+              error: err instanceof Error ? err.message : String(err)
+            } });
+            continue;
+          }
           let bytes = null;
           try {
             bytes = db.prepare("SELECT SUM(pgsize) AS b FROM dbstat WHERE name = ?").get(name)?.b ?? null;
@@ -167937,9 +168191,9 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_retired_settings_keys = require_retired_settings_keys_D_VwZiDt();
-    var require_wal_maintenance = require_wal_maintenance_mwCBe3Vr();
+    var require_wal_maintenance = require_wal_maintenance_Bo_lo3Dh();
     var require_sqlite_snapshot_protocol = require_sqlite_snapshot_protocol_B9OndqZv();
     var require_wal_checkpoint_policy = require_wal_checkpoint_policy_d2z2qPqx();
     var node_fs_promises = __require("fs/promises");
@@ -168822,6 +169076,12 @@ var require_sqlite_settings_addon = __commonJS({
       async hasTable(name) {
         return require_wal_maintenance.callControl(require_wal_maintenance.controlTargetOf(this.backend, 0), "hasTable", { name });
       }
+      listPhysicalTables(ownerPrefix) {
+        return Promise.resolve(require_wal_maintenance.callControl(require_wal_maintenance.controlTargetOf(this.backend, 0), "listPhysicalTables", { ownerPrefix }));
+      }
+      readLegacyCollection(input) {
+        return Promise.resolve(require_wal_maintenance.callControl(require_wal_maintenance.controlTargetOf(this.backend, 0), "readLegacyCollection", input));
+      }
       async dropRetiredTable(name) {
         return require_wal_maintenance.callControl(require_wal_maintenance.controlTargetOf(this.backend, 0), "dropRetiredTable", { name });
       }
@@ -168875,6 +169135,12 @@ var require_sqlite_settings_addon = __commonJS({
       hasTable(name) {
         return this.client.control("hasTable", { name });
       }
+      listPhysicalTables(ownerPrefix) {
+        return this.client.control("listPhysicalTables", { ownerPrefix });
+      }
+      readLegacyCollection(input) {
+        return this.client.control("readLegacyCollection", input);
+      }
       dropRetiredTable(name) {
         return this.client.control("dropRetiredTable", { name });
       }
@@ -169449,11 +169715,13 @@ var require_sqlite_settings_addon = __commonJS({
       logger;
       installedOwners;
       records;
-      constructor(backend, logger, installedOwners, records) {
+      peerFiles;
+      constructor(backend, logger, installedOwners, records, peerFiles = async () => []) {
         this.backend = backend;
         this.logger = logger;
         this.installedOwners = installedOwners;
         this.records = records;
+        this.peerFiles = peerFiles;
       }
       listKinds(input) {
         return this.records.listKinds(input);
@@ -169467,8 +169735,25 @@ var require_sqlite_settings_addon = __commonJS({
       isAdoptedLegacyTable(input) {
         return this.records.isAdoptedLegacyTable(input.collection).then((adopted) => ({ adopted }));
       }
-      readLegacyCollection(input) {
-        return Promise.resolve(this.backend.readLegacyCollection(input));
+      async readLegacyCollection(input) {
+        if (this.backend.hasTable(input.collection)) {
+          const page = this.backend.readLegacyCollection(input);
+          return {
+            rows: [...page.rows],
+            nextCursor: page.nextCursor
+          };
+        }
+        for (const file of await this.peerFiles()) if (await file.hasTable(input.collection)) {
+          const page = await file.readLegacyCollection(input);
+          return {
+            rows: [...page.rows],
+            nextCursor: page.nextCursor
+          };
+        }
+        return {
+          rows: [],
+          nextCursor: null
+        };
       }
       /** May this table be dropped AT ALL? Throws with the reason when not. */
       async assertDroppable(collection) {
@@ -169484,12 +169769,14 @@ var require_sqlite_settings_addon = __commonJS({
         if (installed.has(owner) && !await this.records.isAdoptedLegacyTable(collection)) throw new Error(`drop refused: "${collection}" belongs to the installed addon "${owner}"`);
       }
       async listTables(input) {
-        const tables = this.backend.listTables(input.ownerPrefix);
+        const tables = [...this.backend.listTables(input.ownerPrefix)];
+        for (const file of await this.peerFiles()) tables.push(...await file.listPhysicalTables(input.ownerPrefix));
+        tables.sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
         this.logger.info("storage-admin: listed tables", { meta: {
           tables: tables.length,
           ownerPrefix: input.ownerPrefix ?? null
         } });
-        return { tables: [...tables] };
+        return { tables };
       }
       async dropCollection(input) {
         try {
@@ -169673,7 +169960,7 @@ var require_sqlite_settings_addon = __commonJS({
           },
           {
             capability: require_dist10.storageAdminCapability,
-            provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), async () => new Set((await this.ctx.api.addons.list.query()).map((addon) => addon.manifest.id)), records)
+            provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), async () => new Set((await this.ctx.api.addons.list.query()).map((addon) => addon.manifest.id)), records, async () => router.openFiles().filter((file) => file.databaseId !== "settings"))
           }
         ];
       }
@@ -169763,7 +170050,7 @@ var require_sqlite_storage = __commonJS({
     });
     require_chunk_Cek0wNdY();
     var require_builtins_sqlite_storage_filesystem_storage_addon = require_filesystem_storage_addon();
-    var require_wal_maintenance = require_wal_maintenance_mwCBe3Vr();
+    var require_wal_maintenance = require_wal_maintenance_Bo_lo3Dh();
     var require_builtins_sqlite_storage_sqlite_settings_addon = require_sqlite_settings_addon();
     var ConfigStore = class {
       db;
@@ -169847,7 +170134,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -169871,6 +170158,7 @@ var require_storage_orchestrator_addon = __commonJS({
       mode: require_dist10.StorageLocationModeSchema.optional(),
       isDefault: zod.z.boolean().optional()
     });
+    var StorageSeedMarkerBodySchema = zod.z.object({ seededAt: zod.z.number() });
     var StorageDrainStateBodySchema = zod.z.object({
       locationId: zod.z.string(),
       startedAtMs: zod.z.number(),
@@ -169895,6 +170183,14 @@ var require_storage_orchestrator_addon = __commonJS({
         retention: { none: "operator delete or declaration prune only" },
         adoptsFrom: STORAGE_LOCATIONS
       },
+      "seed-markers": {
+        schema: StorageSeedMarkerBodySchema,
+        class: "config",
+        writeTrigger: "a declared location type was seeded (or found already present on an existing install); the id is the type",
+        device: "none",
+        at: "none",
+        retention: { none: "one row per location type ever seeded \u2014 what makes an operator delete stick" }
+      },
       "drain-state": {
         schema: StorageDrainStateBodySchema,
         class: "config",
@@ -169974,9 +170270,27 @@ var require_storage_orchestrator_addon = __commonJS({
       store;
       declared = false;
       locationsKind;
-      constructor(store, locationsKind = null) {
+      constructor(store, locationsKind = null, seedMarkersKind = null) {
         this.store = store;
         this.locationsKind = locationsKind;
+        this.seedMarkersKind = seedMarkersKind;
+      }
+      seedMarkersKind;
+      static seedMarkersOf(records) {
+        return records.kind(storageOrchestratorRecordKinds["seed-markers"]);
+      }
+      async loadSeededTypes() {
+        const kind = this.seedMarkersKind;
+        if (kind === null) return [];
+        return (await (0, import_read_all_rows.readAllRows)(kind)).map((r) => r.id);
+      }
+      async markTypeSeeded(type) {
+        const kind = this.seedMarkersKind;
+        if (kind === null) return;
+        await kind.put({
+          id: type,
+          data: { seededAt: Date.now() }
+        });
       }
       static recordStoresOf(records) {
         return records.kind(storageOrchestratorRecordKinds.locations);
@@ -170943,20 +171257,77 @@ var require_storage_orchestrator_addon = __commonJS({
         }
       };
     }
-    async function collectFiles(io, prefix) {
+    var STORAGE_CLASS_SUBTREES = {
+      eventMedia: ["events"],
+      recordingsLow: ["low"],
+      recordings: ["high", "mid"]
+    };
+    function isDotEntry(name) {
+      return name.startsWith(".");
+    }
+    async function dirHasAnyEntry(dir) {
+      let handle;
+      try {
+        handle = await (0, node_fs_promises.opendir)(dir);
+      } catch (err) {
+        if (err.code === "ENOENT") return false;
+        throw err;
+      }
+      try {
+        return await handle.read() !== null;
+      } finally {
+        await handle.close();
+      }
+    }
+    async function probeLocalDirectoryOccupancy(input) {
+      let names;
+      try {
+        names = await (0, node_fs_promises.readdir)(input.basePath);
+      } catch (err) {
+        if (err.code === "ENOENT") return "empty";
+        return "unknown";
+      }
+      const visible = names.filter((name) => !isDotEntry(name));
+      const subtrees = STORAGE_CLASS_SUBTREES[input.type];
+      if (subtrees === void 0) return visible.length > 0 ? "occupied" : "empty";
+      try {
+        for (const camera of visible) for (const subtree of subtrees) if (await dirHasAnyEntry(node_path.default.join(input.basePath, camera, subtree))) return "occupied";
+      } catch {
+        return "unknown";
+      }
+      return "empty";
+    }
+    var STORAGE_CLASS_ROOT_SUBTREES = { homekitClips: ["homekit-clips"] };
+    function classifyPath(type, relativePath) {
+      const rootSubtrees = STORAGE_CLASS_ROOT_SUBTREES[type];
+      const cameraSubtrees = STORAGE_CLASS_SUBTREES[type];
+      if (rootSubtrees === void 0 && cameraSubtrees === void 0) return "own";
+      const segments = relativePath.split("/").filter((segment) => segment.length > 0);
+      if (rootSubtrees !== void 0) {
+        const top = segments[0];
+        return top !== void 0 && rootSubtrees.includes(top) ? "own" : "foreign";
+      }
+      if (segments.length < 2) return "descend";
+      const subtree = segments[1];
+      return subtree !== void 0 && cameraSubtrees?.includes(subtree) === true ? "own" : "foreign";
+    }
+    async function collectFiles(io, scope, prefix) {
       const entries = await io.list(prefix);
       const files = [];
       for (const entry of entries) {
+        const verdict = scope(entry);
+        if (verdict === "foreign") continue;
         if ((await io.list(entry)).length > 0) {
-          files.push(...await collectFiles(io, entry));
+          files.push(...await collectFiles(io, scope, entry));
           continue;
         }
-        files.push(entry);
+        if (verdict === "own") files.push(entry);
       }
       return files;
     }
-    async function moveLocationTree(io) {
-      const candidates = await collectFiles(io);
+    var WHOLE_ROOT = () => "own";
+    async function moveLocationTree(io, scope = WHOLE_ROOT) {
+      const candidates = await collectFiles(io, scope);
       const copied = [];
       let bytes = 0;
       for (const relativePath of candidates) {
@@ -170978,6 +171349,118 @@ var require_storage_orchestrator_addon = __commonJS({
         bytes
       };
     }
+    var RepointRefusedError = class extends Error {
+      reason;
+      name = "RepointRefusedError";
+      constructor(reason, message) {
+        super(message);
+        this.reason = reason;
+      }
+    };
+    function rootsOverlap(a, b) {
+      if (a === b) return true;
+      const within = (inner, outer) => inner.startsWith(outer.endsWith("/") ? outer : `${outer}/`);
+      return within(a, b) || within(b, a);
+    }
+    function basePathOf$1(config) {
+      const raw = config["basePath"];
+      return typeof raw === "string" && raw.length > 0 ? raw : null;
+    }
+    var LocationRepointer = class {
+      deps;
+      claims = /* @__PURE__ */ new Set();
+      constructor(deps) {
+        this.deps = deps;
+      }
+      /**
+      * Move `stored`'s own subtree to `next`'s root, then run `commit` (the row
+      * save) while the claim is still held. Throws {@link RepointRefusedError}
+      * with NOTHING copied or deleted when a mover is on the root.
+      */
+      async run(stored, next, commit) {
+        const claim = await this.claim(stored, next);
+        try {
+          await this.refuseWhileMovers(claim, stored);
+          const moved = await moveLocationTree(await this.deps.ioFor(stored, next), (path) => classifyPath(stored.type, path));
+          this.logMoved(stored, next, moved);
+          return await commit();
+        } finally {
+          this.claims.delete(claim);
+        }
+      }
+      /**
+      * May a mover that touches `locationIds` run? Refuses while a repoint holds
+      * an overlapping root. Called by the owning addon AFTER its job is
+      * registered, so the repoint's mover listing and this check cannot both miss.
+      */
+      async clearance(locationIds) {
+        const keys = await this.keysOf(locationIds);
+        for (const claim of this.claims) if (claim.keys.some((held) => keys.some((key) => rootsOverlap(held, key)))) return {
+          clear: false,
+          reason: "repoint-active",
+          repointLocationId: claim.locationId
+        };
+        return { clear: true };
+      }
+      async claim(stored, next) {
+        const paths = [basePathOf$1(stored.config), basePathOf$1(next.config)].filter((path) => path !== null);
+        const keys = await Promise.all(paths.map((path) => this.deps.resolveKey(path)));
+        for (const other of this.claims) if (other.keys.some((held) => keys.some((key) => rootsOverlap(held, key)))) this.refuse(stored, "repoint-active", `a repoint of "${other.locationId}" holds the same root`);
+        const claim = {
+          locationId: stored.id,
+          keys
+        };
+        this.claims.add(claim);
+        return claim;
+      }
+      async refuseWhileMovers(claim, stored) {
+        let movers;
+        try {
+          movers = await this.deps.listMovers();
+        } catch (err) {
+          this.claims.delete(claim);
+          this.refuse(stored, "movers-unreadable", `the active movers could not be listed (${err instanceof Error ? err.message : String(err)})`);
+        }
+        for (const mover of movers) {
+          if (mover.job.state !== "queued" && mover.job.state !== "running") continue;
+          const touched = await this.keysOf(this.locationsTouchedBy(mover));
+          if (claim.keys.some((held) => touched.some((key) => rootsOverlap(held, key)))) {
+            this.claims.delete(claim);
+            this.refuse(stored, "mover-active", `${mover.lane} mover ${mover.job.jobId} (${mover.job.fromLocationId} -> ${mover.job.toLocationId}) touches the same physical root`, {
+              jobId: mover.job.jobId,
+              lane: mover.lane
+            });
+          }
+        }
+      }
+      locationsTouchedBy(mover) {
+        return [mover.job.fromLocationId, mover.job.toLocationId];
+      }
+      /** `*` is the media mover's "from wherever the rows are": every eventMedia location. */
+      async keysOf(locationIds) {
+        const paths = locationIds.flatMap((id) => id === "*" ? this.deps.locationIdsOfType("eventMedia") : [id]).map((id) => this.deps.locationBasePath(id)).filter((path) => path !== null);
+        return Promise.all(paths.map((path) => this.deps.resolveKey(path)));
+      }
+      refuse(stored, reason, detail, meta = {}) {
+        this.deps.logger.warn("storage-orchestrator: REFUSING to re-point a location \u2014 nothing was moved", { meta: {
+          id: stored.id,
+          type: stored.type,
+          reason,
+          detail,
+          ...meta
+        } });
+        throw new RepointRefusedError(reason, `re-point of "${stored.id}" refused (${reason}): ${detail}`);
+      }
+      logMoved(stored, next, moved) {
+        this.deps.logger.info("storage-orchestrator: singleton location re-pointed \u2014 its data was carried over", { meta: {
+          id: stored.id,
+          type: stored.type,
+          from: basePathOf$1(stored.config),
+          to: basePathOf$1(next.config),
+          ...moved
+        } });
+      }
+    };
     function resolveRefusalFor(location, locality) {
       if (locality !== false) return null;
       return `storage.resolve is a request for a path this node can open with node:fs, and location "${location.id}" is served by the remote provider "${location.providerId}" (nodeLocal: false) \u2014 the path it would return exists on the remote host, not here. Read and write this location through the storage cap (read/write, or beginUpload/writeChunk/finalizeUpload) instead.`;
@@ -171287,46 +171770,6 @@ var require_storage_orchestrator_addon = __commonJS({
         args: envelope.args
       }, { timeout: HUB_SETTINGS_FORWARD_TIMEOUT_MS }));
     }
-    var STORAGE_CLASS_SUBTREES = {
-      eventMedia: ["events"],
-      recordingsLow: ["low"],
-      recordings: ["high", "mid"]
-    };
-    function isDotEntry(name) {
-      return name.startsWith(".");
-    }
-    async function dirHasAnyEntry(dir) {
-      let handle;
-      try {
-        handle = await (0, node_fs_promises.opendir)(dir);
-      } catch (err) {
-        if (err.code === "ENOENT") return false;
-        throw err;
-      }
-      try {
-        return await handle.read() !== null;
-      } finally {
-        await handle.close();
-      }
-    }
-    async function probeLocalDirectoryOccupancy(input) {
-      let names;
-      try {
-        names = await (0, node_fs_promises.readdir)(input.basePath);
-      } catch (err) {
-        if (err.code === "ENOENT") return "empty";
-        return "unknown";
-      }
-      const visible = names.filter((name) => !isDotEntry(name));
-      const subtrees = STORAGE_CLASS_SUBTREES[input.type];
-      if (subtrees === void 0) return visible.length > 0 ? "occupied" : "empty";
-      try {
-        for (const camera of visible) for (const subtree of subtrees) if (await dirHasAnyEntry(node_path.default.join(input.basePath, camera, subtree))) return "occupied";
-      } catch {
-        return "unknown";
-      }
-      return "empty";
-    }
     var DEFAULT_STALE_AFTER_MS = 6e4;
     var LocationOccupancySlice = class {
       deps;
@@ -171827,6 +172270,44 @@ var require_storage_orchestrator_addon = __commonJS({
       getLocalNodeId() {
         return this.localNode;
       }
+      /**
+      * Whether a seed must wait for an ANSWERED read of the store (D49). True on a
+      * node whose locations live in a store: seeding before that read lands writes
+      * defaults the store's own rows (not yet adopted, or not yet read) then
+      * contradict. False on a node that has no store by design — it seeds in memory
+      * at every boot.
+      */
+      storeRequiredForSeed = false;
+      setStoreRequiredForSeed(required) {
+        this.storeRequiredForSeed = required;
+      }
+      /**
+      * The location types a default was ever seeded for — null when the store
+      * cannot remember (then a type with no row is seeded, as before). What makes
+      * an operator's delete of a seeded default STICK: zero rows today is not
+      * "fresh install", it is only fresh when nothing was ever seeded.
+      */
+      seededTypes = null;
+      /** The store held locations but no seed memory: an install older than the memory. */
+      installPredatesSeedMemory = false;
+      async loadSeedMemory(store, rowCount) {
+        if (!store.loadSeededTypes) return;
+        const types = await store.loadSeededTypes();
+        this.seededTypes = new Set(types);
+        this.installPredatesSeedMemory = types.length === 0 && rowCount > 0;
+      }
+      rememberSeeded(type) {
+        const seeded = this.seededTypes;
+        const store = this.locationStore;
+        if (seeded === null || seeded.has(type) || !store?.markTypeSeeded) return;
+        seeded.add(type);
+        store.markTypeSeeded(type).catch((err) => {
+          this.logger.error("storage-orchestrator: persisting the seed memory failed", { meta: {
+            type,
+            error: err instanceof Error ? err.message : String(err)
+          } });
+        });
+      }
       /** True once a persistence store is wired (constructor or {@link attachStore}). */
       hasStore() {
         return this.locationStore !== null;
@@ -171860,6 +172341,7 @@ var require_storage_orchestrator_addon = __commonJS({
       async attachStore(store) {
         if (this.locationStore) return;
         const rows = await store.loadAll();
+        await this.loadSeedMemory(store, rows.length);
         this.locationStore = store;
         const dbIds = new Set(rows.map((r) => r.id));
         for (const loc of rows) this.locations.set(loc.id, loc);
@@ -171998,6 +172480,7 @@ var require_storage_orchestrator_addon = __commonJS({
       async initialize() {
         if (!this.locationStore) return;
         const rows = await this.locationStore.loadAll();
+        await this.loadSeedMemory(this.locationStore, rows.length);
         for (const loc of rows) this.locations.set(loc.id, loc);
         this.logger.info("storage-orchestrator: hydrated locations from store", { meta: { loaded: this.locations.size } });
         this.migrateOntoTheWriteSet(rows);
@@ -172450,14 +172933,35 @@ var require_storage_orchestrator_addon = __commonJS({
       * directory for derivative slots like `recordingsLow` → `recordings`).
       */
       seedDefaults(input) {
+        if (this.storeRequiredForSeed && this.locationStore === null) {
+          this.logger.warn("storage-orchestrator: seed deferred \u2014 the location store has not answered a read yet (not wired, adoption pending, or the read failed); seeding now could shadow the operator's existing locations");
+          return {
+            added: 0,
+            deferred: "store-not-answered"
+          };
+        }
         let added = 0;
+        let deferredProvider = false;
         const declById = new Map(input.declarations.map((d) => [d.id, d]));
         const rootFor = (d) => {
           const dedicated = d.defaultRoot === "media" ? input.mediaBasePath : d.defaultRoot === "backup" ? input.backupBasePath : void 0;
           return node_path.join(dedicated ?? input.basePath, d.id);
         };
         for (const d of input.declarations) {
-          if (this.hasAnyLocationOfType(d.id)) continue;
+          if (this.hasAnyLocationOfType(d.id)) {
+            this.rememberSeeded(d.id);
+            continue;
+          }
+          if (this.seededTypes?.has(d.id)) continue;
+          if (this.installPredatesSeedMemory) {
+            this.logger.info("storage-orchestrator: existing install \u2014 not re-creating a default the operator may have removed", { meta: { type: d.id } });
+            this.rememberSeeded(d.id);
+            continue;
+          }
+          if (this.nodeLocalResolver !== null && this.nodeLocalResolver(input.providerId) === void 0) {
+            deferredProvider = true;
+            continue;
+          }
           const base = d.defaultsTo ? this.getLocationById(`${d.defaultsTo}:default`)?.config["basePath"] ?? rootFor(declById.get(d.defaultsTo) ?? d) : rootFor(d);
           this.upsertLocation({
             id: `${d.id}:default`,
@@ -172468,12 +172972,18 @@ var require_storage_orchestrator_addon = __commonJS({
             enabled: true,
             isSystem: false
           });
+          this.rememberSeeded(d.id);
           added++;
         }
         if (added > 0) this.logger.info("storage-orchestrator: seeded default locations", { meta: {
           added,
           basePath: input.basePath
         } });
+        if (deferredProvider) this.logger.info("storage-orchestrator: seed deferred for some types \u2014 provider not classified yet", { meta: { providerId: input.providerId } });
+        return deferredProvider ? {
+          added,
+          deferred: "provider-unclassified"
+        } : { added };
       }
       /**
       * The same-type physical-root refusal (D389).
@@ -172805,29 +173315,69 @@ var require_storage_orchestrator_addon = __commonJS({
       lowPercent: 15,
       criticalPercent: 5
     };
-    function bandOf(freePercent, config) {
-      if (freePercent === null) return {
-        band: "critical",
-        reason: "capacity-unreadable"
-      };
-      if (freePercent <= config.criticalPercent) return {
-        band: "critical",
-        reason: "free-below-critical"
-      };
-      if (freePercent <= config.lowPercent) return {
-        band: "low",
-        reason: "free-below-warn"
+    var UNMANAGED_HYSTERESIS_POINTS = 2;
+    var MANAGED_LOW_ENTER = 0.8;
+    var MANAGED_LOW_EXIT = 0.9;
+    var MANAGED_CRITICAL_ENTER = 0.5;
+    var MANAGED_CRITICAL_EXIT = 0.6;
+    var MANAGED_LOW_GRACE_MS = 10 * 6e4;
+    function boundsOf(floorPercent, config) {
+      if (floorPercent === void 0) return {
+        lowEnter: config.lowPercent,
+        lowExit: config.lowPercent + UNMANAGED_HYSTERESIS_POINTS,
+        criticalEnter: config.criticalPercent,
+        criticalExit: config.criticalPercent + UNMANAGED_HYSTERESIS_POINTS,
+        lowGraceMs: 0,
+        lowReason: "free-below-warn",
+        criticalReason: "free-below-critical"
       };
       return {
-        band: "ok",
-        reason: "free-ok"
+        lowEnter: floorPercent * MANAGED_LOW_ENTER,
+        lowExit: floorPercent * MANAGED_LOW_EXIT,
+        criticalEnter: floorPercent * MANAGED_CRITICAL_ENTER,
+        criticalExit: floorPercent * MANAGED_CRITICAL_EXIT,
+        lowGraceMs: MANAGED_LOW_GRACE_MS,
+        lowReason: "free-below-floor",
+        criticalReason: "free-below-hard-bound"
       };
     }
     var StorageLocationBandMonitor = class {
       config;
+      now;
       band = /* @__PURE__ */ new Map();
-      constructor(config = DEFAULT_STORAGE_LOCATION_BAND_CONFIG) {
+      /** When free first went under `lowEnter` and has stayed there. */
+      belowLowSince = /* @__PURE__ */ new Map();
+      constructor(config = DEFAULT_STORAGE_LOCATION_BAND_CONFIG, now = Date.now) {
         this.config = config;
+        this.now = now;
+      }
+      nextBand(locationId, previous, free, b) {
+        if (free < b.criticalEnter || previous === "critical" && free < b.criticalExit) return {
+          band: "critical",
+          reason: b.criticalReason
+        };
+        const lowActive = previous === "low" || previous === "critical";
+        if (free < b.lowEnter || lowActive && free < b.lowExit) {
+          if (lowActive) return {
+            band: "low",
+            reason: b.lowReason
+          };
+          const since = this.belowLowSince.get(locationId) ?? this.now();
+          this.belowLowSince.set(locationId, since);
+          if (this.now() - since >= b.lowGraceMs) return {
+            band: "low",
+            reason: b.lowReason
+          };
+          return {
+            band: previous ?? "ok",
+            reason: "free-ok"
+          };
+        }
+        this.belowLowSince.delete(locationId);
+        return {
+          band: "ok",
+          reason: "free-ok"
+        };
       }
       /**
       * Observe one sweep of managed locations. Locations missing from `samples`
@@ -172838,8 +173388,9 @@ var require_storage_orchestrator_addon = __commonJS({
         const out = [];
         for (const sample of samples) {
           seen.add(sample.locationId);
-          const { band, reason } = bandOf(sample.freePercent, this.config);
+          if (sample.freePercent === null) continue;
           const previous = this.band.get(sample.locationId) ?? null;
+          const { band, reason } = this.nextBand(sample.locationId, previous, sample.freePercent, boundsOf(sample.floorPercent, this.config));
           if (previous === band) continue;
           this.band.set(sample.locationId, band);
           if (previous === null && band === "ok") continue;
@@ -172849,11 +173400,17 @@ var require_storage_orchestrator_addon = __commonJS({
             ...sample.locationName !== void 0 ? { locationName: sample.locationName } : {},
             band,
             freePercent: sample.freePercent,
+            ...sample.floorPercent !== void 0 ? { floorPercent: sample.floorPercent } : {},
+            ...sample.freeBytes !== void 0 ? { freeBytes: sample.freeBytes } : {},
+            ...sample.floorBytes !== void 0 ? { floorBytes: sample.floorBytes } : {},
             reason,
             previous
           });
         }
-        for (const id of [...this.band.keys()]) if (!seen.has(id)) this.band.delete(id);
+        for (const id of [...this.band.keys()]) if (!seen.has(id)) {
+          this.band.delete(id);
+          this.belowLowSince.delete(id);
+        }
         return out;
       }
     };
@@ -172866,6 +173423,7 @@ var require_storage_orchestrator_addon = __commonJS({
     var CAP_PROVIDER_REGISTERED_CATEGORY = "capability:provider-registered";
     var StorageOrchestratorAddon = class extends require_dist10.BaseAddon {
       locationsKind = null;
+      seedMarkersKind = null;
       drainStateKind = null;
       service = null;
       pressureManager = null;
@@ -172891,6 +173449,8 @@ var require_storage_orchestrator_addon = __commonJS({
       pressureTimer = null;
       pressureSweepInFlight = false;
       migration = null;
+      /** Guards every single-location repoint and arbitrates movers per physical root. */
+      repointer = null;
       /**
       * Cached `providerId → nodeLocal` snapshot (SP1). Backs the orchestrator's
       * synchronous `NodeLocalResolver` — `getProviderInfo()` is async, so we
@@ -172927,6 +173487,7 @@ var require_storage_orchestrator_addon = __commonJS({
         if (records !== void 0) {
           await records.declare(storageOrchestratorRecordKinds);
           this.locationsKind = SqliteLocationStore.recordStoresOf(records);
+          this.seedMarkersKind = SqliteLocationStore.seedMarkersOf(records);
           this.drainStateKind = SqliteDrainStateStore.recordStoresOf(records);
         }
         const getProviders = () => {
@@ -172946,6 +173507,7 @@ var require_storage_orchestrator_addon = __commonJS({
           return proxy;
         });
         this.service = service;
+        service.setStoreRequiredForSeed(this.locationsKind !== null);
         service.setNodeLocalResolver((providerId) => this.nodeLocalByProvider.get(providerId));
         service.setOccupancyProbe((location) => this.locationOccupancy(location));
         await service.initialize();
@@ -172969,8 +173531,7 @@ var require_storage_orchestrator_addon = __commonJS({
               ...input,
               config: keychained
             };
-            await this.carryDataOnRepoint(stored, next);
-            const saved = service.upsertLocation(next);
+            const saved = await this.upsertCarryingData(stored, next, () => service.upsertLocation(next));
             this.announceLocationsChanged(saved.id, saved.type, "upsert");
             return this.redacted(saved);
           },
@@ -173180,6 +173741,49 @@ var require_storage_orchestrator_addon = __commonJS({
           deviceKeyOf: (locationId) => this.locationDeviceKey(locationId)
         });
         this.migration = migration;
+        this.repointer = new LocationRepointer({
+          logger: this.ctx.logger,
+          resolveKey: async (basePath) => {
+            try {
+              return await node_fs_promises.realpath(basePath);
+            } catch {
+              return node_path.resolve(basePath);
+            }
+          },
+          locationBasePath: (id) => this.locationBasePath(id),
+          locationIdsOfType: (type) => service.listLocations({ type }).map((loc) => loc.id),
+          listMovers: () => migration.movers(),
+          ioFor: async (stored, next) => {
+            const target = {
+              ...stored,
+              config: next.config
+            };
+            const [source, destination] = await Promise.all([service.getProviderFor(stored), service.getProviderFor(target)]);
+            return {
+              list: (prefix) => source.list(prefix === void 0 ? { location: stored } : {
+                location: stored,
+                prefix
+              }),
+              read: (relativePath) => source.read({
+                location: stored,
+                relativePath
+              }),
+              write: (relativePath, data) => destination.write({
+                location: target,
+                relativePath,
+                data
+              }),
+              readBack: (relativePath) => destination.read({
+                location: target,
+                relativePath
+              }),
+              deleteSource: (relativePath) => source.delete({
+                location: stored,
+                relativePath
+              })
+            };
+          }
+        });
         const cleanup = new StorageCleanupCoordinator({
           locations: service,
           state: this.state("storage-cleanup", require_dist10.StorageCleanupJobSchema.nullable(), null),
@@ -173215,6 +173819,13 @@ var require_storage_orchestrator_addon = __commonJS({
           status: ({ jobId }) => migration.status(jobId),
           cancel: async ({ jobId }) => ({ cancelled: await migration.cancel(jobId) }),
           movers: () => migration.movers(),
+          moverClearance: async ({ locationIds }) => {
+            const verdict = await this.requireRepointer().clearance(locationIds);
+            return verdict.clear ? { clear: true } : {
+              clear: false,
+              repointLocationId: verdict.repointLocationId
+            };
+          },
           residue: () => migration.residue(),
           drain: async (input) => ({ jobId: await migration.drain(input) }),
           cleanupStart: async (input) => ({ jobId: await cleanup.start(input) }),
@@ -173342,7 +173953,7 @@ var require_storage_orchestrator_addon = __commonJS({
           else this.ctx.logger.info("storage-orchestrator: this node boots no data-store engine \u2014 storage locations are seeded from addon declarations at every boot, and node-pinned locations live on the hub");
           return null;
         }
-        return new SqliteLocationStore(engine, this.locationsKind);
+        return new SqliteLocationStore(engine, this.locationsKind, this.seedMarkersKind);
       }
       /**
       * Late-wire the persistence store once a `data-store-provider` engine
@@ -173354,12 +173965,26 @@ var require_storage_orchestrator_addon = __commonJS({
       * restart — the service never hydrates from / persists to SQLite.
       */
       storeWireInFlight = null;
+      /** True while the locations kind is empty and its legacy table still holds rows. */
+      async adoptionIsPending() {
+        const records = this.ctx.records;
+        if (records === void 0 || this.locationsKind === null) return false;
+        try {
+          await records.declare(storageOrchestratorRecordKinds);
+          return false;
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          this.ctx.logger.warn("storage-orchestrator: persistence NOT wired \u2014 the storage-locations kind is not authoritative yet (adoption pending or the check failed); seeding is deferred", { meta: { error: message } });
+          return true;
+        }
+      }
       async ensureStoreWired() {
         const service = this.service;
         if (!service || service.hasStore()) return;
         if (this.storeWireInFlight) return this.storeWireInFlight;
         const store = this.resolveLocationStore(true);
         if (!store) return;
+        if (await this.adoptionIsPending()) return;
         this.ctx.logger.info("storage-orchestrator: data-store engine now available \u2014 wiring persistence");
         this.storeWireInFlight = service.attachStore(store).then(() => this.seedFromDeclarations()).catch((err) => {
           this.ctx.logger.error("storage-orchestrator: attachStore failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
@@ -173388,7 +174013,7 @@ var require_storage_orchestrator_addon = __commonJS({
       }
       /**
       * Sample free space for every managed location and emit NC band edges.
-      * A failed capacity read stays `null` (critical) — never folded to 0 (D393).
+      * A failed capacity read stays `null` and changes no band — never folded to 0 (D393).
       */
       async emitLocationBandEvents() {
         const svc = this.service;
@@ -173404,11 +174029,18 @@ var require_storage_orchestrator_addon = __commonJS({
           };
           const capacity = await this.volumeCapacityOf(locationId).catch(() => null);
           const freePercent = capacity === null ? null : freePercentOf(capacity);
+          if (capacity === null) ctx.logger.debug("storage: location capacity unreadable \u2014 band unchanged", { meta: { locationId } });
+          const floorPercent = thresholds.get(locationId);
           return {
             locationId,
             nodeId: loc.nodeId,
             locationName: loc.displayName,
-            freePercent
+            freePercent,
+            ...floorPercent !== void 0 ? { floorPercent } : {},
+            ...capacity !== null ? {
+              freeBytes: capacity.availableBytes,
+              ...floorPercent !== void 0 ? { floorBytes: Math.round(capacity.totalBytes * floorPercent / 100) } : {}
+            } : {}
           };
         }));
         for (const edge of this.locationBandMonitor.observe(samples)) {
@@ -173417,6 +174049,9 @@ var require_storage_orchestrator_addon = __commonJS({
             locationId: edge.locationId,
             band: edge.band,
             freePercent: edge.freePercent,
+            floorPercent: edge.floorPercent ?? null,
+            freeBytes: edge.freeBytes ?? null,
+            floorBytes: edge.floorBytes ?? null,
             reason: edge.reason
           } });
           ctx.eventBus.emit({
@@ -173531,50 +174166,19 @@ var require_storage_orchestrator_addon = __commonJS({
       * A no-op for everything else — a rename, a mode change, a `multi` kind, or a
       * location being created for the first time.
       */
-      async carryDataOnRepoint(stored, next) {
-        if (stored === void 0) return;
+      async upsertCarryingData(stored, next, commit) {
+        if (stored === void 0) return commit();
         const service = this.service;
-        if (service === null) return;
-        if (service.listDeclarations().find((entry) => entry.id === next.type)?.cardinality !== "single") return;
+        if (service === null) return commit();
+        if (service.listDeclarations().find((entry) => entry.id === next.type)?.cardinality !== "single") return commit();
         const from = stored.config["basePath"];
         const to = next.config["basePath"];
-        if (typeof from !== "string" || typeof to !== "string" || from === to) return;
-        const source = await service.getProviderFor(stored);
-        const target = {
-          ...stored,
-          config: next.config
-        };
-        const destination = await service.getProviderFor(target);
-        const moved = await moveLocationTree({
-          list: (prefix) => source.list(prefix === void 0 ? { location: stored } : {
-            location: stored,
-            prefix
-          }),
-          read: (relativePath) => source.read({
-            location: stored,
-            relativePath
-          }),
-          write: (relativePath, data) => destination.write({
-            location: target,
-            relativePath,
-            data
-          }),
-          readBack: (relativePath) => destination.read({
-            location: target,
-            relativePath
-          }),
-          deleteSource: (relativePath) => source.delete({
-            location: stored,
-            relativePath
-          })
-        });
-        this.ctx.logger.info("storage-orchestrator: singleton location re-pointed \u2014 its data was carried over", { meta: {
-          id: stored.id,
-          type: stored.type,
-          from,
-          to,
-          ...moved
-        } });
+        if (typeof from !== "string" || typeof to !== "string" || from === to) return commit();
+        return this.requireRepointer().run(stored, next, commit);
+      }
+      requireRepointer() {
+        if (this.repointer === null) throw new Error("storage-orchestrator: not initialized");
+        return this.repointer;
       }
       secretKeysFor(providerId, config) {
         return secretKeysForConfig(config, this.declaredSecretKeys(providerId));
@@ -173978,11 +174582,11 @@ var require_storage_orchestrator = __commonJS({
   }
 });
 
-// ../system/dist/constants-BPWA-r-Y.js
-var require_constants_BPWA_r_Y = __commonJS({
-  "../system/dist/constants-BPWA-r-Y.js"(exports) {
+// ../system/dist/constants-DBGG6Zu5.js
+var require_constants_DBGG6Zu5 = __commonJS({
+  "../system/dist/constants-DBGG6Zu5.js"(exports) {
     "use strict";
-    var MESH_CA_KEY_REF = require_dist_Ct88catN().buildSecretRef({
+    var MESH_CA_KEY_REF = require_dist_Bi4Ioxop().buildSecretRef({
       owner: "system",
       scope: { kind: "global" },
       fieldPath: "meshCaKey"
@@ -174045,14 +174649,14 @@ var require_constants_BPWA_r_Y = __commonJS({
   }
 });
 
-// ../system/dist/agent-https-CMz4S56_.js
-var require_agent_https_CMz4S56 = __commonJS({
-  "../system/dist/agent-https-CMz4S56_.js"(exports) {
+// ../system/dist/agent-https-B7IjRRzT.js
+var require_agent_https_B7IjRRzT = __commonJS({
+  "../system/dist/agent-https-B7IjRRzT.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_x509_es = require_x509_es_C4cOo48M();
-    var require_constants15 = require_constants_BPWA_r_Y();
+    var require_constants15 = require_constants_DBGG6Zu5();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
@@ -192795,11 +193399,11 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_safe_buffer$1 = require_safe_buffer_D3aoa_7X();
     var require_x509_es = require_x509_es_C4cOo48M();
-    var require_constants$8 = require_constants_BPWA_r_Y();
-    var require_agent_https = require_agent_https_CMz4S56();
+    var require_constants$8 = require_constants_DBGG6Zu5();
+    var require_agent_https = require_agent_https_B7IjRRzT();
     var require_src$1 = require_src_CnAqG6EF();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -272512,7 +273116,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -280162,14 +280766,14 @@ var require_lib_8oZrELLm = __commonJS({
   }
 });
 
-// ../system/dist/hub-mdns-ciao-DAU1WttG.js
-var require_hub_mdns_ciao_DAU1WttG = __commonJS({
-  "../system/dist/hub-mdns-ciao-DAU1WttG.js"(exports) {
+// ../system/dist/hub-mdns-ciao-2FzLWfbD.js
+var require_hub_mdns_ciao_2FzLWfbD = __commonJS({
+  "../system/dist/hub-mdns-ciao-2FzLWfbD.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_x509_es = require_x509_es_C4cOo48M();
-    var require_agent_https = require_agent_https_CMz4S56();
+    var require_agent_https = require_agent_https_B7IjRRzT();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var node_fs_promises = __require("fs/promises");
@@ -281168,12 +281772,12 @@ var require_platform_key_source_Di7HrlGR = __commonJS({
   }
 });
 
-// ../system/dist/restore-archive-Cprdh3P9.js
-var require_restore_archive_Cprdh3P9 = __commonJS({
-  "../system/dist/restore-archive-Cprdh3P9.js"(exports) {
+// ../system/dist/restore-archive-C0ymYQk7.js
+var require_restore_archive_C0ymYQk7 = __commonJS({
+  "../system/dist/restore-archive-C0ymYQk7.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -292494,9 +293098,9 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct88catN();
+    var require_dist10 = require_dist_Bi4Ioxop();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
-    var require_device_ca = require_device_ca_75rt3U_U();
+    var require_device_ca = require_device_ca_B3hUVfYk();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_builtins_calendars_calendars_addon = require_calendars_addon();
@@ -292521,21 +293125,21 @@ var require_dist3 = __commonJS({
     var require_builtins_native_metrics_native_metrics_addon = require_native_metrics_addon();
     var require_builtins_device_history_device_history_addon = require_device_history_addon();
     var require_builtins_sqlite_storage_filesystem_storage_addon = require_filesystem_storage_addon();
-    var require_wal_maintenance = require_wal_maintenance_mwCBe3Vr();
+    var require_wal_maintenance = require_wal_maintenance_Bo_lo3Dh();
     var require_builtins_sqlite_storage_sqlite_settings_addon = require_sqlite_settings_addon();
     var require_builtins_sqlite_storage_index = require_sqlite_storage();
     var require_builtins_storage_orchestrator_storage_orchestrator_addon = require_storage_orchestrator_addon();
     require_storage_orchestrator();
-    var require_constants15 = require_constants_BPWA_r_Y();
-    var require_agent_https = require_agent_https_CMz4S56();
+    var require_constants15 = require_constants_DBGG6Zu5();
+    var require_agent_https = require_agent_https_B7IjRRzT();
     var require_builtins_system_config_system_config_addon = require_system_config_addon();
     require_system_config();
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_custom_action_registry = require_custom_action_registry_COyb49zm();
-    var require_hub_mdns_ciao = require_hub_mdns_ciao_DAU1WttG();
+    var require_hub_mdns_ciao = require_hub_mdns_ciao_2FzLWfbD();
     var require_platform_key_source = require_platform_key_source_Di7HrlGR();
     var require_resource_monitor = require_resource_monitor_mio9dSCT();
-    var require_restore_archive = require_restore_archive_Cprdh3P9();
+    var require_restore_archive = require_restore_archive_C0ymYQk7();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
@@ -301599,8 +302203,16 @@ var require_dist3 = __commonJS({
               const nodeId = typeof picked2.nodeId === "string" ? picked2.nodeId : void 0;
               const topLevelAddonId = typeof picked2.addonId === "string" ? picked2.addonId : void 0;
               const canRecoverNestedAddonId = !require_dist10.isArrayOutputSchema(method.schema.output) && !require_dist10.objectInputDeclaresAddonId(method.schema.input);
-              const addonId = topLevelAddonId ?? (canRecoverNestedAddonId ? require_dist10.extractNestedAddonId(rest2) : void 0);
-              return invokeCapMethod(resolveProviderForCall(capName, nodeId, () => getLocal(ctx, addonId), services, topLevelAddonId), method, method.callerRequired ? injectCaller(rest2, ctx, capName, method.name, services) : rest2, capName, isCollection, services);
+              let addonId = topLevelAddonId ?? (canRecoverNestedAddonId ? require_dist10.extractNestedAddonId(rest2) : void 0);
+              const resolveAndInvoke = async () => {
+                let refusePin = topLevelAddonId;
+                if (addonId === void 0 && !method.isArrayOutput && services.inferCollectionAddonPin) {
+                  addonId = await Promise.resolve(services.inferCollectionAddonPin(capName, method.name, rest2));
+                  if (addonId !== void 0) refusePin = addonId;
+                }
+                return invokeCapMethod(resolveProviderForCall(capName, nodeId, () => getLocal(ctx, addonId), services, refusePin), method, method.callerRequired ? injectCaller(rest2, ctx, capName, method.name, services) : rest2, capName, isCollection, services);
+              };
+              return resolveAndInvoke();
             }
             const { rest, picked } = stripKeys(input, ["nodeId"]);
             return invokeCapMethod(resolveProviderForCall(capName, typeof picked.nodeId === "string" ? picked.nodeId : void 0, () => getLocal(ctx), services), method, method.callerRequired ? injectCaller(rest, ctx, capName, method.name, services) : rest, capName, isCollection, services);
@@ -315973,7 +316585,7 @@ var require_enums = __commonJS({
   "../types/dist/enums.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_event_category = require_event_category_Hoe_mqbd();
+    var require_event_category = require_event_category_eSqkye_K();
     var EventSourceType = /* @__PURE__ */ (function(EventSourceType2) {
       EventSourceType2["Addon"] = "addon";
       EventSourceType2["Core"] = "core";
@@ -315993,8 +316605,8 @@ var require_dist4 = __commonJS({
   "../types/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_sleep = require_sleep_L6qY125();
-    var require_event_category = require_event_category_Hoe_mqbd();
+    var require_sleep = require_sleep_BE7_6UnC();
+    var require_event_category = require_event_category_eSqkye_K();
     var require_composition = require_composition_eoYYVfOp();
     var require_node_color2 = require_node_color();
     var require_err_msg = require_err_msg_BhVbr0NX();
@@ -318405,6 +319017,31 @@ var require_dist4 = __commonJS({
       error: zod.z.string().nullable()
     });
     var StorageCleanupStatusInputSchema = zod.z.object({ jobId: zod.z.string().optional() });
+    async function startMoverUnderClearance(deps) {
+      const refuse = (detail) => {
+        throw new Error(`mover refused: ${detail}`);
+      };
+      const ask = async () => {
+        try {
+          return await deps.clearance(deps.locationIds);
+        } catch (err) {
+          return refuse(`the storage orchestrator could not be asked (${err instanceof Error ? err.message : String(err)})`);
+        }
+      };
+      const blocked = (answer) => `a re-point of "${answer.repointLocationId ?? "a location"}" holds an overlapping storage root`;
+      const before = await ask();
+      if (!before.clear) return refuse(blocked(before));
+      const jobId = deps.start();
+      const after = await ask().catch((err) => {
+        deps.cancel(jobId);
+        throw err;
+      });
+      if (!after.clear) {
+        deps.cancel(jobId);
+        return refuse(blocked(after));
+      }
+      return jobId;
+    }
     var SUB_DETECTION_TYPES = ["face", "plate"];
     var RECOGNITION_TYPES = [
       "face",
@@ -321402,7 +322039,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     ]);
     var AlertActionSchema = zod.z.object({
       label: zod.z.string(),
-      href: zod.z.string().optional()
+      href: zod.z.string().optional(),
+      /**
+      * How `href` is followed. Absent / `app`: an admin-ui route (client-side).
+      * `server`: a route the HUB serves (an addon HTTP route such as an OAuth
+      * start) — the browser must leave the SPA with a full navigation, because
+      * the SPA has no such route and would bounce to the home page.
+      */
+      navigation: zod.z.enum(["app", "server"]).optional()
     });
     var AlertStatusSchema = zod.z.enum([
       "active",
@@ -327702,7 +328346,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     var deviceAdoptionCapability = {
       name: "device-adoption",
       scope: "system",
-      mode: "singleton",
+      mode: "collection",
       status: {
         schema: AdoptionStatusSchema,
         kind: "poll"
@@ -349070,7 +349714,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           auth: "admin"
         }),
         /** List candidate filter chips for an integration via its device-adoption
-        *  provider — addonId-routed so it never hits the singleton shadow. */
+        *  provider — addonId-routed via the collection pin. */
         adoptionListCandidateFilters: require_sleep.method(zod.z.object({
           addonId: zod.z.string(),
           integrationId: zod.z.string()
@@ -352917,6 +353561,9 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "server-updated",
       "export-completed",
       "backup-completed",
+      "alert-critical",
+      "alert-error",
+      "alert-critical-resolved",
       "camera-online",
       "camera-offline",
       "camera-disabled",
@@ -354055,6 +354702,18 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
             value: "backup-completed",
             label: "Backup completed"
           },
+          {
+            value: "alert-critical",
+            label: "Critical alert raised"
+          },
+          {
+            value: "alert-error",
+            label: "Error alert raised"
+          },
+          {
+            value: "alert-critical-resolved",
+            label: "Critical alert resolved"
+          },
           {
             value: "alarm-arm-refused",
             label: "Alarm arm refused"
@@ -363041,6 +363700,18 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         */
         movers: require_sleep.method(zod.z.object({}), zod.z.array(StorageMigrationMoverSchema).readonly(), { auth: "admin" }),
         /**
+        * May a mover that touches these locations run NOW? One claim per physical
+        * root is owned by the storage orchestrator: a single-location repoint holds
+        * it while it carries its subtree, and a mover (`relocateMedia`,
+        * `relocateFootage`, a migration move) asks here AFTER registering its job and
+        * cancels itself on `clear: false`. The repoint, in turn, refuses while a
+        * registered mover touches its root. Asked, never polled (D3).
+        */
+        moverClearance: require_sleep.method(zod.z.object({ locationIds: zod.z.array(zod.z.string()).readonly() }), zod.z.object({
+          clear: zod.z.boolean(),
+          repointLocationId: zod.z.string().optional()
+        }), { auth: "admin" }),
+        /**
         * What each class's SOURCE still holds, from the archive — never from the
         * resident index (D295). Only classes with something left (or something
         * unknown) are listed, so an empty list means there is nothing to drain and
@@ -367380,35 +368051,139 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "error",
       "unavailable"
     ]);
+    var DishwasherOperationStateSchema = zod.z.enum([
+      "Inactive",
+      "Ready",
+      "DelayedStart",
+      "Run",
+      "Pause",
+      "ActionRequired",
+      "Finished",
+      "Error",
+      "Aborting"
+    ]);
+    var DishwasherAvailabilitySchema = zod.z.enum([
+      "available",
+      "offline",
+      "description-missing"
+    ]);
     var DishwasherConsumableLevelSchema = zod.z.enum([
       "ok",
       "low",
       "empty"
     ]);
     var DishwasherStatusSchema = zod.z.object({
+      availability: DishwasherAvailabilitySchema,
+      /** Coarse state for compact surfaces; `unavailable` whenever the appliance state is not known. */
       state: DishwasherStateSchema,
-      /** Active program id/name, or null when none selected / unknown. */
+      /** The appliance's operation state as reported; null when not known. */
+      operationState: DishwasherOperationStateSchema.nullable(),
+      /** Feature key of the ACTIVE (running) program, or null when none runs / not known. */
       program: zod.z.string().nullable(),
-      /** Program tokens the hardware accepts — drives the UI selector. */
+      /** Feature key of the SELECTED program (what Start would run), or null when none / not known. */
+      selectedProgram: zod.z.string().nullable(),
+      /** Feature keys of the programs the appliance currently offers — drives the UI selector. */
       availablePrograms: zod.z.array(zod.z.string()),
-      /** Minutes remaining on the active cycle, or null when not running. */
-      remainingMinutes: zod.z.number().int().nonnegative().nullable(),
+      /** Seconds remaining on the active cycle, or null when not running / not known. */
+      remainingSeconds: zod.z.number().int().nonnegative().nullable(),
+      /** Seconds the delayed start is set to (time until the cycle starts), or null. */
+      delayedStartSeconds: zod.z.number().int().nonnegative().nullable(),
       /** Cycle completion 0..100, or null when not applicable. */
       progressPercent: zod.z.number().min(0).max(100).nullable(),
-      /** True when the door is reported open. */
-      doorOpen: zod.z.boolean(),
-      /** True when remote start is allowed (door closed, power on, etc.). */
-      remoteStartAllowed: zod.z.boolean(),
-      /** Main power / switched-on state. */
-      powerOn: zod.z.boolean(),
+      /** True when the door is reported open; null when the door state is not known. */
+      doorOpen: zod.z.boolean().nullable(),
+      /** True when the door is latched (locked) during a cycle; null when not reported. */
+      doorLocked: zod.z.boolean().nullable(),
+      /** True when remote start is allowed (door closed, power on, etc.); null when not known. */
+      remoteStartAllowed: zod.z.boolean().nullable(),
+      /** True when the appliance accepts remote control now; null when not known. */
+      remoteControlActive: zod.z.boolean().nullable(),
+      /** True while somebody operates the appliance at its panel; null when not reported. */
+      localControlActive: zod.z.boolean().nullable(),
+      /** Main power / switched-on state; null when not known. */
+      powerOn: zod.z.boolean().nullable(),
+      /** The raw power state (`On`, `Off`, `Standby`, …); null when not known. */
+      powerState: zod.z.string().nullable(),
       saltLevel: DishwasherConsumableLevelSchema.nullable(),
       rinseAidLevel: DishwasherConsumableLevelSchema.nullable(),
-      halfLoad: zod.z.boolean(),
-      hygienePlus: zod.z.boolean(),
+      /** Option states: null when the appliance does not expose the option or has not said. */
+      halfLoad: zod.z.boolean().nullable(),
+      hygienePlus: zod.z.boolean().nullable(),
+      /** Extra dry option when the appliance exposes it. */
+      extraDry: zod.z.boolean().nullable(),
+      /** Intensive zone (lower basket) when the appliance exposes it. */
+      intensiveZone: zod.z.boolean().nullable(),
+      /** VarioSpeed / VarioSpeed+ when the appliance exposes it. */
+      varioSpeedPlus: zod.z.boolean().nullable(),
+      /** Child lock (controls disabled on the appliance); null when not known. */
+      childLock: zod.z.boolean().nullable(),
+      /** Feature keys of the events currently raised (salt low, rinse aid low, program finished, …). */
+      activeEvents: zod.z.array(zod.z.string()),
+      /** Numeric error code when the appliance reports one; null otherwise. */
       errorCode: zod.z.number().nullable(),
+      /** Name of the raised alert-level event while the appliance is in error; null otherwise. */
       errorLabel: zod.z.string().nullable(),
+      /** Ms epoch of the last value received from the appliance; 0 = never. */
       lastFetchedAt: zod.z.number()
     });
+    var DeviceIdSchema = zod.z.number().int().nonnegative();
+    var DishwasherValueSchema = zod.z.union([
+      zod.z.boolean(),
+      zod.z.string(),
+      zod.z.number()
+    ]);
+    var DishwasherAccessSchema = zod.z.enum([
+      "none",
+      "read",
+      "readWrite",
+      "writeOnly",
+      "readStatic"
+    ]);
+    var DishwasherOptionDescriptorSchema = zod.z.object({
+      /** Feature key (`Dishcare.Dishwasher.Option.ExtraDry`). */
+      key: zod.z.string(),
+      /** Last segment of the key, for display. */
+      name: zod.z.string(),
+      type: zod.z.enum([
+        "boolean",
+        "number",
+        "enum",
+        "string"
+      ]),
+      access: DishwasherAccessSchema,
+      /** The appliance reports this entity as currently available. */
+      available: zod.z.boolean(),
+      /** Unit the description declares for a number; null when it declares none. */
+      unit: zod.z.string().nullable(),
+      min: zod.z.number().nullable(),
+      max: zod.z.number().nullable(),
+      step: zod.z.number().nullable(),
+      /** Allowed members of an enum; null for other types. */
+      enumValues: zod.z.array(zod.z.string()).nullable(),
+      defaultValue: DishwasherValueSchema.nullable()
+    });
+    var DishwasherProgramSchema = zod.z.object({
+      /** Feature key (`Dishcare.Dishwasher.Program.Eco50`) — what `setProgram` / `start` take. */
+      key: zod.z.string(),
+      name: zod.z.string(),
+      /** The appliance currently offers this program. */
+      available: zod.z.boolean(),
+      /** The options this program lists, with the program-level access / availability / default. */
+      options: zod.z.array(DishwasherOptionDescriptorSchema)
+    });
+    var DishwasherOptionsSchema = zod.z.object({
+      availability: DishwasherAvailabilitySchema,
+      /** What the appliance can be told to do, from the commands its description declares. */
+      supportsStart: zod.z.boolean(),
+      supportsPause: zod.z.boolean(),
+      supportsResume: zod.z.boolean(),
+      supportsStop: zod.z.boolean(),
+      supportsPower: zod.z.boolean(),
+      /** Every program the description lists, with its options. */
+      programs: zod.z.array(DishwasherProgramSchema),
+      /** Every option and setting entity the description lists (programs reference these by key). */
+      options: zod.z.array(DishwasherOptionDescriptorSchema)
+    });
     var dishwasherCapability = {
       name: "dishwasher",
       scope: "device",
@@ -367416,58 +368191,102 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       mode: "singleton",
       deviceTypes: [require_err_msg.DeviceType.Dishwasher],
       methods: {
-        start: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
+        /**
+        * Start a program. Without `program` the selected one starts. `options` are
+        * option feature keys; each is checked against the program's constraints.
+        */
+        start: require_sleep.method(zod.z.object({
+          deviceId: DeviceIdSchema,
+          program: zod.z.string().min(1).optional(),
+          options: zod.z.record(zod.z.string(), DishwasherValueSchema).optional()
+        }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
-        pause: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
+        pause: require_sleep.method(zod.z.object({ deviceId: DeviceIdSchema }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
-        stop: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
+        resume: require_sleep.method(zod.z.object({ deviceId: DeviceIdSchema }), zod.z.void(), {
+          kind: "mutation",
+          auth: "protected"
+        }),
+        stop: require_sleep.method(zod.z.object({ deviceId: DeviceIdSchema }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
+        /** Select (not start) a program; refused when the appliance does not offer it. */
         setProgram: require_sleep.method(zod.z.object({
-          deviceId: zod.z.number().int().nonnegative(),
+          deviceId: DeviceIdSchema,
           program: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
         setPower: require_sleep.method(zod.z.object({
-          deviceId: zod.z.number().int().nonnegative(),
+          deviceId: DeviceIdSchema,
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
         setHalfLoad: require_sleep.method(zod.z.object({
-          deviceId: zod.z.number().int().nonnegative(),
+          deviceId: DeviceIdSchema,
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
         setHygienePlus: require_sleep.method(zod.z.object({
-          deviceId: zod.z.number().int().nonnegative(),
+          deviceId: DeviceIdSchema,
+          on: zod.z.boolean()
+        }), zod.z.void(), {
+          kind: "mutation",
+          auth: "protected"
+        }),
+        setExtraDry: require_sleep.method(zod.z.object({
+          deviceId: DeviceIdSchema,
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
         }),
+        setIntensiveZone: require_sleep.method(zod.z.object({
+          deviceId: DeviceIdSchema,
+          on: zod.z.boolean()
+        }), zod.z.void(), {
+          kind: "mutation",
+          auth: "protected"
+        }),
+        setVarioSpeedPlus: require_sleep.method(zod.z.object({
+          deviceId: DeviceIdSchema,
+          on: zod.z.boolean()
+        }), zod.z.void(), {
+          kind: "mutation",
+          auth: "protected"
+        }),
+        setChildLock: require_sleep.method(zod.z.object({
+          deviceId: DeviceIdSchema,
+          on: zod.z.boolean()
+        }), zod.z.void(), {
+          kind: "mutation",
+          auth: "protected"
+        }),
+        /**
+        * Write any option or setting by feature key. Refused when the description does
+        * not list it, it is not writable or not available now, or the value is outside
+        * its declared range / members.
+        */
         setOption: require_sleep.method(zod.z.object({
-          deviceId: zod.z.number().int().nonnegative(),
+          deviceId: DeviceIdSchema,
           key: zod.z.string().min(1),
-          value: zod.z.union([
-            zod.z.boolean(),
-            zod.z.string(),
-            zod.z.number()
-          ])
+          value: DishwasherValueSchema
         }), zod.z.void(), {
           kind: "mutation",
           auth: "protected"
-        })
+        }),
+        /** What this appliance can do, from its own description — the UI is derived from it. */
+        getOptions: require_sleep.method(zod.z.object({ deviceId: DeviceIdSchema }), DishwasherOptionsSchema, { auth: "protected" })
       },
       status: {
         schema: DishwasherStatusSchema,
@@ -379588,6 +380407,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "fan",
       "vacuum",
       "lawn-mower",
+      "dishwasher",
       "light",
       "switch",
       "siren",
@@ -382486,6 +383306,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "dishwasher.getOptions": {
+        capName: "dishwasher",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "dishwasher.getStatus": {
         capName: "dishwasher",
         capScope: "device",
@@ -382498,6 +383324,24 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "dishwasher.resume": {
+        capName: "dishwasher",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
+      "dishwasher.setChildLock": {
+        capName: "dishwasher",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
+      "dishwasher.setExtraDry": {
+        capName: "dishwasher",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
       "dishwasher.setHalfLoad": {
         capName: "dishwasher",
         capScope: "device",
@@ -382510,6 +383354,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "dishwasher.setIntensiveZone": {
+        capName: "dishwasher",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
       "dishwasher.setOption": {
         capName: "dishwasher",
         capScope: "device",
@@ -382528,6 +383378,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "dishwasher.setVarioSpeedPlus": {
+        capName: "dishwasher",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
       "dishwasher.start": {
         capName: "dishwasher",
         capScope: "device",
@@ -386974,6 +387830,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "storageMigration.moverClearance": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "storageMigration.movers": {
         capName: "storage-migration",
         capScope: "system",
@@ -392322,6 +393184,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "dishwasher.getOptions": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "dishwasher.getStatus": [{
         name: "deviceId",
         form: "single",
@@ -392332,6 +393199,21 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "dishwasher.resume": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
+      "dishwasher.setChildLock": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
+      "dishwasher.setExtraDry": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "dishwasher.setHalfLoad": [{
         name: "deviceId",
         form: "single",
@@ -392342,6 +393224,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "dishwasher.setIntensiveZone": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "dishwasher.setOption": [{
         name: "deviceId",
         form: "single",
@@ -392357,6 +393244,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "dishwasher.setVarioSpeedPlus": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "dishwasher.start": [{
         name: "deviceId",
         form: "single",
@@ -395946,6 +396838,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           status: (input) => dispatch("storageMigration", "status", "query", input),
           cancel: (input) => dispatch("storageMigration", "cancel", "mutation", input),
           movers: (input) => dispatch("storageMigration", "movers", "query", input),
+          moverClearance: (input) => dispatch("storageMigration", "moverClearance", "query", input),
           residue: (input) => dispatch("storageMigration", "residue", "query", input),
           drain: (input) => dispatch("storageMigration", "drain", "mutation", input),
           cleanupStart: (input) => dispatch("storageMigration", "cleanupStart", "mutation", input),
@@ -396483,7 +397376,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         case "deviceTypes":
           return kind.startsWith("device-") || kind === "detection-blind";
         case "nodeIds":
-          return kind.startsWith("node-") || kind === "addon-crash-loop" || kind === "addon-update-available" || kind === "addon-updated" || kind === "server-update-available" || kind === "wrapper-update-available" || kind === "server-updated" || kind.startsWith("storage-location-");
+          return kind.startsWith("node-") || kind === "addon-crash-loop" || kind === "addon-update-available" || kind === "addon-updated" || kind === "server-update-available" || kind === "wrapper-update-available" || kind === "server-updated" || kind.startsWith("storage-location-") || kind.startsWith("alert-");
         case "packageNames":
           return kind.endsWith("update-available") || kind === "addon-updated" || kind === "node-updating" || kind === "server-updated";
         case "consumableLowPercent":
@@ -396532,6 +397425,9 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "wrapper-update-available": "system",
       "backup-completed": "system",
       "export-completed": "system",
+      "alert-critical": "system",
+      "alert-error": "system",
+      "alert-critical-resolved": "system",
       "storage-location-low": "system",
       "storage-location-critical": "system",
       "storage-location-ok": "system",
@@ -396667,6 +397563,16 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           "storage-location-ok"
         ]
       },
+      {
+        id: "alerts",
+        family: "system",
+        label: "Alerts",
+        kinds: [
+          "alert-critical",
+          "alert-error",
+          "alert-critical-resolved"
+        ]
+      },
       {
         id: "alarm",
         family: "alarm",
@@ -397739,6 +398645,69 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       return sensorKinds.every((kind) => NC_SENSOR_TRANSITION_KINDS.includes(normaliseKind(kind)));
     }
     var NC_SENSOR_TRANSITION_UNSUPPORTED_REASON = "Only a sensor that raises and clears (water, smoke, gas, CO, vibration, tamper, motion, contact) can fire on one edge. Pick only such sensor kinds, or the rule fires on every change.";
+    var AlertEpisodePayloadSchema = zod.z.object({
+      phase: zod.z.enum(["raised", "resolved"]),
+      episodeId: zod.z.string().min(1),
+      alertId: zod.z.string().min(1),
+      severity: AlertSeveritySchema,
+      category: zod.z.string(),
+      title: zod.z.string(),
+      message: zod.z.string(),
+      sourceType: zod.z.string().optional(),
+      sourceId: zod.z.string().optional(),
+      nodeId: zod.z.string().optional(),
+      /** The alert's own action link (where the operator acts on it), when it has one. */
+      actionUrl: zod.z.string().optional(),
+      at: zod.z.number()
+    });
+    function parseAlertEpisodePayload(data) {
+      const parsed = AlertEpisodePayloadSchema.safeParse(data);
+      return parsed.success ? parsed.data : null;
+    }
+    function isAlertEpisodeOpen(status) {
+      return status !== "completed" && status !== "dismissed";
+    }
+    function isAlertEpisodeSeverity(severity) {
+      return severity === "critical" || severity === "error";
+    }
+    function alertEpisodeId(alert) {
+      const minted = alert.metadata?.["episodeId"];
+      return typeof minted === "string" && minted.length > 0 ? minted : `${alert.id}@${String(alert.createdAt)}`;
+    }
+    function alertNodeId(alert) {
+      const direct = alert.metadata?.["nodeId"];
+      if (typeof direct === "string") return direct;
+      const runner = alert.metadata?.["runner"];
+      if (typeof runner === "object" && runner !== null && "nodeId" in runner) {
+        const id = runner.nodeId;
+        if (typeof id === "string") return id;
+      }
+      return alert.source?.type === "node" ? alert.source.id : void 0;
+    }
+    function alertEpisodeKind(severity, phase) {
+      if (severity === "critical") return phase === "raised" ? "alert-critical" : "alert-critical-resolved";
+      if (severity === "error" && phase === "raised") return "alert-error";
+      return null;
+    }
+    function alertEpisodePayload(alert, phase, at) {
+      const nodeId = alertNodeId(alert);
+      return {
+        phase,
+        episodeId: alertEpisodeId(alert),
+        alertId: alert.id,
+        severity: alert.severity,
+        category: alert.category,
+        title: alert.title,
+        message: alert.message,
+        ...alert.source !== void 0 ? {
+          sourceType: alert.source.type,
+          sourceId: alert.source.id
+        } : {},
+        ...nodeId !== void 0 ? { nodeId } : {},
+        ...alert.action?.href !== void 0 ? { actionUrl: alert.action.href } : {},
+        at
+      };
+    }
     var RULE_BODY_ONLY = ["body"];
     var RULE_TEXT = ["title", "body"];
     var BATTERY = ["device-battery-low", "device-battery-normal"];
@@ -397748,6 +398717,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "device-tank-full",
       "device-tank-normal"
     ];
+    var ALERT_EPISODE = [
+      "alert-critical",
+      "alert-error",
+      "alert-critical-resolved"
+    ];
     var UPDATES = [
       "addon-update-available",
       "server-update-available",
@@ -398269,7 +399243,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           "server-updated",
           "storage-location-low",
           "storage-location-critical",
-          "storage-location-ok"
+          "storage-location-ok",
+          ...ALERT_EPISODE
         ]
       },
       {
@@ -398291,7 +399266,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           "server-updated",
           "storage-location-low",
           "storage-location-critical",
-          "storage-location-ok"
+          "storage-location-ok",
+          ...ALERT_EPISODE
         ]
       },
       {
@@ -398358,7 +399334,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         families: ["rule"],
         fields: [...RULE_TEXT],
         kinds: ["system"],
-        systemEventKinds: ["recording-degraded"]
+        systemEventKinds: ["recording-degraded", ...ALERT_EPISODE]
       },
       {
         name: "locationName",
@@ -398555,13 +399531,53 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       },
       {
         name: "title",
-        label: "Export title",
+        label: "Export or alert title",
         example: "Ingresso 08:00",
         group: "system",
         families: ["rule"],
         fields: [...RULE_TEXT],
         kinds: ["system"],
-        systemEventKinds: ["export-completed"]
+        systemEventKinds: ["export-completed", ...ALERT_EPISODE]
+      },
+      {
+        name: "severity",
+        label: "Alert severity",
+        example: "critical",
+        group: "system",
+        families: ["rule"],
+        fields: [...RULE_TEXT],
+        kinds: ["system"],
+        systemEventKinds: [...ALERT_EPISODE]
+      },
+      {
+        name: "category",
+        label: "Alert category",
+        example: "addon.runner-failed",
+        group: "system",
+        families: ["rule"],
+        fields: [...RULE_TEXT],
+        kinds: ["system"],
+        systemEventKinds: [...ALERT_EPISODE]
+      },
+      {
+        name: "source",
+        label: "Alert source (addon, node or runner)",
+        example: "recorder",
+        group: "system",
+        families: ["rule"],
+        fields: [...RULE_TEXT],
+        kinds: ["system"],
+        systemEventKinds: [...ALERT_EPISODE]
+      },
+      {
+        name: "actionUrl",
+        label: "Alert action link",
+        example: "/system/addons",
+        group: "system",
+        families: ["rule"],
+        fields: [...RULE_TEXT],
+        kinds: ["system"],
+        systemEventKinds: [...ALERT_EPISODE]
       },
       {
         name: "exportId",
@@ -398757,7 +399773,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "device-tank-full",
       "device-tank-normal",
       "node-restarting",
-      "node-updating"
+      "node-updating",
+      "alert-critical",
+      "alert-error",
+      "alert-critical-resolved"
     ];
     function servedTemplateVars() {
       return NC_TEMPLATE_VARS.filter((d) => !isHeldBackTemplateVar(d)).map((d) => d.systemEventKinds === void 0 ? d : {
@@ -401958,6 +402977,52 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       }
       current[parts[parts.length - 1]] = value;
     }
+    var OAUTH_LANDING_PATH = "/sso-complete";
+    var OAUTH_LANDING_REASONS = [
+      "access_denied",
+      "invalid_state",
+      "invalid_request",
+      "unknown_broker",
+      "not_configured",
+      "exchange_failed",
+      "no_refresh_token",
+      "unavailable",
+      "unknown"
+    ];
+    function isOauthLandingReason(value) {
+      return OAUTH_LANDING_REASONS.some((reason) => reason === value);
+    }
+    function oauthLandingUrl(origin, outcome) {
+      const params = new URLSearchParams({
+        return: "oauth",
+        status: outcome.status
+      });
+      if (outcome.addonId !== void 0) params.set("addon", outcome.addonId);
+      if (outcome.brokerId !== void 0) params.set("broker", outcome.brokerId);
+      if (outcome.integration !== void 0) params.set("integration", outcome.integration);
+      if (outcome.status === "error") params.set("reason", outcome.reason ?? "unknown");
+      if (outcome.action === "disconnect") params.set("action", "disconnect");
+      return `${origin === null ? "" : origin.replace(/\/+$/, "")}${OAUTH_LANDING_PATH}#${params.toString()}`;
+    }
+    function parseOauthLandingFragment(hash) {
+      if (!hash.startsWith("#")) return null;
+      const params = new URLSearchParams(hash.slice(1));
+      if (params.get("return") !== "oauth") return null;
+      const status = params.get("status");
+      if (status !== "success" && status !== "error") return null;
+      const addonId = params.get("addon");
+      const brokerId = params.get("broker");
+      const integration = params.get("integration");
+      const reasonRaw = params.get("reason");
+      return {
+        status,
+        ...addonId !== null && addonId.length > 0 ? { addonId } : {},
+        ...brokerId !== null && brokerId.length > 0 ? { brokerId } : {},
+        ...integration !== null && integration.length > 0 ? { integration } : {},
+        ...status === "error" ? { reason: isOauthLandingReason(reasonRaw) ? reasonRaw : "unknown" } : {},
+        ...params.get("action") === "disconnect" ? { action: "disconnect" } : {}
+      };
+    }
     var MB = 1024 * 1024;
     var DEFAULT_POOL_MEMORY_POLICY = {
       sampleIntervalMs: 6e4,
@@ -402810,6 +403875,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.AlarmArmModeSchema = AlarmArmModeSchema;
     exports.AlarmPanelStatusSchema = AlarmPanelStatusSchema;
     exports.AlarmStateSchema = AlarmStateSchema;
+    exports.AlertEpisodePayloadSchema = AlertEpisodePayloadSchema;
     exports.AlertSchema = AlertSchema;
     exports.AlertSeveritySchema = AlertSeveritySchema;
     exports.AlertSourceSchema = AlertSourceSchema;
@@ -403288,9 +404354,16 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.DiscoveredChildStatusSchema = DiscoveredChildStatusSchema;
     exports.DiscoveredDeviceSchema = DiscoveredDeviceSchema;
     exports.DiscoveredTargetSchema = DiscoveredTargetSchema;
+    exports.DishwasherAccessSchema = DishwasherAccessSchema;
+    exports.DishwasherAvailabilitySchema = DishwasherAvailabilitySchema;
     exports.DishwasherConsumableLevelSchema = DishwasherConsumableLevelSchema;
+    exports.DishwasherOperationStateSchema = DishwasherOperationStateSchema;
+    exports.DishwasherOptionDescriptorSchema = DishwasherOptionDescriptorSchema;
+    exports.DishwasherOptionsSchema = DishwasherOptionsSchema;
+    exports.DishwasherProgramSchema = DishwasherProgramSchema;
     exports.DishwasherStateSchema = DishwasherStateSchema;
     exports.DishwasherStatusSchema = DishwasherStatusSchema;
+    exports.DishwasherValueSchema = DishwasherValueSchema;
     exports.DiskReconcileJobSchema = DiskReconcileJobSchema;
     exports.DisposerChain = require_sleep.DisposerChain;
     exports.DoorbellPressEventSchema = DoorbellPressEventSchema;
@@ -403958,6 +405031,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.NotificationSchema = NotificationSchema;
     exports.NotifierStatusSchema = NotifierStatusSchema;
     exports.NumericSensorStatusSchema = NumericSensorStatusSchema;
+    exports.OAUTH_LANDING_PATH = OAUTH_LANDING_PATH;
+    exports.OAUTH_LANDING_REASONS = OAUTH_LANDING_REASONS;
     exports.OPERATOR_WRITTEN_STALE_MS = OPERATOR_WRITTEN_STALE_MS;
     exports.OPS_LOG_DEFAULT_LIMIT = OPS_LOG_DEFAULT_LIMIT;
     exports.OPS_LOG_RING_DEFAULT_MAX = OPS_LOG_RING_DEFAULT_MAX;
@@ -404638,6 +405713,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.alarmPanelCapability = alarmPanelCapability;
     exports.alarmPatchLanded = alarmPatchLanded;
     exports.alarmProfileById = alarmProfileById;
+    exports.alertEpisodeId = alertEpisodeId;
+    exports.alertEpisodeKind = alertEpisodeKind;
+    exports.alertEpisodePayload = alertEpisodePayload;
+    exports.alertNodeId = alertNodeId;
     exports.alertsCapability = alertsCapability;
     exports.allDoActions = allDoActions;
     exports.allowedSuppliedEffect = allowedSuppliedEffect;
@@ -404994,6 +406073,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.invocationFromEncodeProfile = require_composition.invocationFromEncodeProfile;
     exports.isAgentOnlyPlacement = isAgentOnlyPlacement;
     exports.isAlarmControllableCap = isAlarmControllableCap;
+    exports.isAlertEpisodeOpen = isAlertEpisodeOpen;
+    exports.isAlertEpisodeSeverity = isAlertEpisodeSeverity;
     exports.isAppLinkBase = isAppLinkBase;
     exports.isAppStartRefusal = isAppStartRefusal;
     exports.isArrayOutputSchema = isArrayOutputSchema;
@@ -405029,6 +406110,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.isLocationEnabled = isLocationEnabled;
     exports.isMediaOwnerType = isMediaOwnerType;
     exports.isNode = isNode;
+    exports.isOauthLandingReason = isOauthLandingReason;
     exports.isObjectInput = isObjectInput;
     exports.isOccupancyRule = isOccupancyRule;
     exports.isOwnerOnlyEventCategory = require_event_category.isOwnerOnlyEventCategory;
@@ -405152,6 +406234,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.notifierCapability = notifierCapability;
     exports.numericSensorCapability = numericSensorCapability;
     exports.oauthIntegrationCapability = oauthIntegrationCapability;
+    exports.oauthLandingUrl = oauthLandingUrl;
     exports.objectInputDeclaresAddonId = objectInputDeclaresAddonId;
     exports.objectInputDeclaresRequiredDeviceId = objectInputDeclaresRequiredDeviceId;
     exports.occupancyScope = occupancyScope;
@@ -405164,6 +406247,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.overlayClusterStepSettings = overlayClusterStepSettings;
     exports.packagePickerItems = packagePickerItems;
     exports.parseAdminBase = parseAdminBase;
+    exports.parseAlertEpisodePayload = parseAlertEpisodePayload;
     exports.parseAppAuthCallback = parseAppAuthCallback;
     exports.parseAppFlowRequest = parseAppFlowRequest;
     exports.parseAppPageLang = parseAppPageLang;
@@ -405174,6 +406258,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.parseJsonObject = require_sleep.parseJsonObject;
     exports.parseJsonUnknown = require_sleep.parseJsonUnknown;
     exports.parseMediaOwnerKey = parseMediaOwnerKey;
+    exports.parseOauthLandingFragment = parseOauthLandingFragment;
     exports.parseOccupancyScope = parseOccupancyScope;
     exports.parseProcStatus = parseProcStatus;
     exports.parseProfileBrokerId = require_sleep.parseProfileBrokerId;
@@ -405376,6 +406461,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.snapshotCapability = snapshotCapability;
     exports.splitTranslationRef = splitTranslationRef;
     exports.ssoBridgeCapability = ssoBridgeCapability;
+    exports.startMoverUnderClearance = startMoverUnderClearance;
     exports.startReachabilityPoll = startReachabilityPoll;
     exports.stateLabel = stateLabel;
     exports.stateVocabularyFor = stateVocabularyFor;
@@ -571574,6 +572660,10 @@ var require_app_page_shell = __commonJS({
       `.error:empty{display:none}`,
       `.btn:focus-visible,.link:focus-visible{outline:2px solid var(--color-primary);outline-offset:2px}`,
       `code{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12px;overflow-wrap:anywhere}`,
+      `.field{display:flex;flex-direction:column;gap:var(--spacing-md)}`,
+      `.field label{font-size:12px;line-height:16px;font-weight:500;color:var(--color-foreground-muted)}`,
+      `input[type=url],input[type=text]{width:100%;min-height:44px;padding:10px 12px;border:1px solid var(--color-border);border-radius:var(--radius-lg);background:var(--color-background);color:var(--color-foreground);font:inherit}`,
+      `input[type=url]:focus-visible,input[type=text]:focus-visible{outline:2px solid var(--color-primary);outline-offset:2px}`,
       `form{display:contents}`,
       `.actions{display:flex;flex-direction:column;gap:var(--spacing-md)}`
     ].join("");
@@ -571717,6 +572807,7 @@ var require_oauth2_routes = __commonJS({
     exports.isRedirectUriAllowed = isRedirectUriAllowed;
     exports.summariseScopes = summariseScopes;
     exports.registerOauth2Routes = registerOauth2Routes;
+    var types_1 = require_dist4();
     var session_cookie_js_1 = require_session_cookie();
     var app_page_strings_js_1 = require_app_page_strings();
     var consent_page_js_1 = require_consent_page();
@@ -571863,7 +572954,7 @@ var require_oauth2_routes = __commonJS({
       }
       return scopes.map((s) => s.type).join(", ") || "no permissions";
     }
-    function refuseAuthorize(reply, logger, method, call, refusal) {
+    function refuseAuthorize(request, reply, logger, method, call, refusal) {
       logger.warn(`oauth2 authorize refused: ${refusal.error}`, {
         meta: {
           method,
@@ -571876,7 +572967,18 @@ var require_oauth2_routes = __commonJS({
       if (refusal.retryAfterSec !== void 0) {
         void reply.header("Retry-After", String(refusal.retryAfterSec));
       }
-      return reply.status(refusal.status).send({ error: refusal.error, ...refusal.detail });
+      return answerRefusal(request, reply, refusal.status, { error: refusal.error, ...refusal.detail }, refusal.status === 503 ? "unavailable" : "invalid_request", typeof refusal.detail?.received === "string" ? refusal.detail.received : void 0);
+    }
+    function answerRefusal(request, reply, status, body, reason, integration) {
+      const accept = request.headers.accept;
+      if (typeof accept === "string" && accept.includes("text/html")) {
+        return reply.redirect((0, types_1.oauthLandingUrl)(null, {
+          status: "error",
+          reason,
+          ...integration !== void 0 && /^[A-Za-z0-9._-]{1,64}$/.test(integration) ? { integration } : {}
+        }));
+      }
+      return reply.status(status).send(body);
     }
     function refuseUnauthenticated(request, reply, logger, call, reason) {
       const redirected = (0, session_cookie_js_1.shouldRedirectToLogin)(request.method, request.headers.accept);
@@ -571925,13 +573027,13 @@ var require_oauth2_routes = __commonJS({
         }
         const registry = deps.getRegistry();
         if (!registry) {
-          return reply.status(503).send({ error: "service_unavailable" });
+          return answerRefusal(request, reply, 503, { error: "service_unavailable" }, "unavailable");
         }
         const { descriptors, pendingAddons } = await readIntegrationRegistry(registry);
         const query = request.query;
         const v = validateAuthorizeQuery(query, descriptors, pendingAddons);
         if (!v.ok) {
-          return refuseAuthorize(reply, deps.logger, "GET", call, v);
+          return refuseAuthorize(request, reply, deps.logger, "GET", call, v);
         }
         const descriptor = descriptors.get(v.integration);
         if (!isRedirectUriAllowed(v.redirectUri, descriptor.allowedRedirectPrefixes, descriptor.allowedPrivateHostPaths ?? [])) {
@@ -571945,7 +573047,7 @@ var require_oauth2_routes = __commonJS({
               allowedPrivateHostPaths: descriptor.allowedPrivateHostPaths ?? []
             }
           });
-          return reply.status(400).send({ error: "invalid_request \u2014 redirect_uri not allowed for this integration" });
+          return answerRefusal(request, reply, 400, { error: "invalid_request \u2014 redirect_uri not allowed for this integration" }, "invalid_request", v.integration);
         }
         const html = (0, consent_page_js_1.renderConsentPage)({
           lang: (0, app_page_strings_js_1.resolveAppPageLang)({
@@ -572002,7 +573104,7 @@ var require_oauth2_routes = __commonJS({
         }
         const registry = deps.getRegistry();
         if (!registry) {
-          return reply.status(503).send({ error: "service_unavailable" });
+          return answerRefusal(request, reply, 503, { error: "service_unavailable" }, "unavailable");
         }
         const { descriptors, pendingAddons } = await readIntegrationRegistry(registry);
         const body = request.body;
@@ -572016,7 +573118,7 @@ var require_oauth2_routes = __commonJS({
         };
         const v = validateAuthorizeQuery(formQuery, descriptors, pendingAddons);
         if (!v.ok) {
-          return refuseAuthorize(reply, deps.logger, "POST", call, v);
+          return refuseAuthorize(request, reply, deps.logger, "POST", call, v);
         }
         const descriptor = descriptors.get(v.integration);
         if (!isRedirectUriAllowed(v.redirectUri, descriptor.allowedRedirectPrefixes, descriptor.allowedPrivateHostPaths ?? [])) {
@@ -572030,7 +573132,7 @@ var require_oauth2_routes = __commonJS({
               allowedPrivateHostPaths: descriptor.allowedPrivateHostPaths ?? []
             }
           });
-          return reply.status(400).send({ error: "invalid_request \u2014 redirect_uri not allowed for this integration" });
+          return answerRefusal(request, reply, 400, { error: "invalid_request \u2014 redirect_uri not allowed for this integration" }, "invalid_request", v.integration);
         }
         if (body.consent !== "allow") {
           return reply.redirect(`${v.redirectUri}?error=access_denied&state=${encodeURIComponent(v.state)}`);
@@ -581597,6 +582699,40 @@ var require_cap_router_runtime = __commonJS({
         iterableSubscription: trpc_middleware_js_1.iterableSubscription
       };
     }
+    async function inferDeviceAdoptionCollectionAddonPin(methodName, input, deps) {
+      const integrationId = typeof input.integrationId === "string" && input.integrationId.length > 0 ? input.integrationId : void 0;
+      const camDeviceId = typeof input.camDeviceId === "number" && Number.isInteger(input.camDeviceId) ? input.camDeviceId : void 0;
+      if (methodName === "resync" || camDeviceId !== void 0 && integrationId === void 0) {
+        if (camDeviceId === void 0) {
+          throw new server_1.TRPCError({
+            code: "BAD_REQUEST",
+            message: "deviceAdoption.resync requires camDeviceId (owning addon is resolved from it) or an explicit addonId pin."
+          });
+        }
+        const resolved = deps.resolveDeviceAddonId ? await Promise.resolve(deps.resolveDeviceAddonId(camDeviceId)) : null;
+        if (resolved === null || resolved === "") {
+          throw new server_1.TRPCError({
+            code: "BAD_REQUEST",
+            message: `deviceAdoption.${methodName}: device ${camDeviceId} not found \u2014 pass addonId explicitly.`
+          });
+        }
+        return resolved;
+      }
+      if (integrationId !== void 0) {
+        const resolved = deps.resolveIntegrationAddonId ? await Promise.resolve(deps.resolveIntegrationAddonId(integrationId)) : null;
+        if (resolved === null || resolved === "") {
+          throw new server_1.TRPCError({
+            code: "BAD_REQUEST",
+            message: `deviceAdoption.${methodName}: unknown integrationId "${integrationId}" \u2014 pass addonId explicitly.`
+          });
+        }
+        return resolved;
+      }
+      throw new server_1.TRPCError({
+        code: "BAD_REQUEST",
+        message: `deviceAdoption.${methodName} requires addonId (top-level pin) or integrationId to resolve the owning provider.`
+      });
+    }
     function createCapRouterServices(deps) {
       const reg = deps.capabilityRegistry;
       const remoteProxy = (capName, nodeId) => deps.moleculer.createCapabilityProxy(capName, nodeId);
@@ -581645,10 +582781,16 @@ var require_cap_router_runtime = __commonJS({
           message: `Capability "${capName}" has no provider with addonId "${addonId}". Valid addonId(s): ${known.join(", ")}. An unresolvable addonId is refused rather than answered by another provider.`
         });
       };
+      const inferCollectionAddonPin = (capName, methodName, methodInput) => {
+        if (capName !== "device-adoption")
+          return void 0;
+        return inferDeviceAdoptionCollectionAddonPin(methodName, methodInput, deps);
+      };
       return {
         getLocalProvider,
         remoteProxy,
         rejectUnresolvedAddonPin,
+        inferCollectionAddonPin,
         noProvider: (capName, nodeId) => {
           if (nodeId !== void 0 && nodeId !== "hub") {
             throw new server_1.TRPCError({
@@ -581846,11 +582988,18 @@ var require_trpc_router = __commonJS({
       };
     }
     function buildCapabilityRouters(services) {
+      const integrationRegistry = services.addonRegistry.getIntegrationRegistry();
+      const deviceRegistry = services.addonRegistry.getDeviceRegistry();
       const dynamicCaps = (0, cap_router_runtime_js_1.buildRuntimeCapRouters)({
         capabilityRegistry: services.capabilityRegistry,
         moleculer: services.moleculer,
         serverProviders: buildServerProviders(services),
-        logger: services.loggingService.createLogger("cap-router")
+        logger: services.loggingService.createLogger("cap-router"),
+        resolveIntegrationAddonId: integrationRegistry ? async (integrationId) => {
+          const row = await integrationRegistry.getIntegration(integrationId);
+          return row?.addonId ?? null;
+        } : void 0,
+        resolveDeviceAddonId: (camDeviceId) => deviceRegistry.getAddonId(camDeviceId)
       });
       return {
         // ── Runtime-built cap routers: EVERY cap whose mount is
@@ -583353,6 +584502,28 @@ var require_addon_process_view = __commonJS({
   }
 });
 
+// ../../server/backend/dist/core/addon/hub-addon-api.js
+var require_hub_addon_api = __commonJS({
+  "../../server/backend/dist/core/addon/hub-addon-api.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.createHubAddonApi = createHubAddonApi;
+    var client_1 = require_dist2();
+    var system_1 = require_dist3();
+    function createHubAddonApi(options) {
+      const observerOpts = {
+        callerAddonId: options.callerAddonId,
+        providerAddonIdForCap: () => null,
+        observer: () => void 0
+      };
+      const client = (0, client_1.createTRPCClient)({
+        links: [(0, system_1.localProviderLink)(options.resolver, observerOpts), ...options.links]
+      });
+      return client;
+    }
+  }
+});
+
 // ../../server/backend/dist/core/addon/addon-call-gateway.js
 var require_addon_call_gateway = __commonJS({
   "../../server/backend/dist/core/addon/addon-call-gateway.js"(exports) {
@@ -584199,6 +585370,7 @@ var require_addon_registry_service = __commonJS({
     var system_1 = require_dist3();
     var types_1 = require_dist4();
     var client_1 = require_dist2();
+    var hub_addon_api_js_1 = require_hub_addon_api();
     var addon_call_gateway_js_1 = require_addon_call_gateway();
     var addon_row_manifest_1 = require_addon_row_manifest();
     var addon_settings_provider_js_1 = require_addon_settings_provider();
@@ -584409,29 +585581,41 @@ var require_addon_registry_service = __commonJS({
        */
       getBrokerApi() {
         if (!this.brokerApi) {
-          const reg = this.capabilityRegistry;
-          const resolver = {
-            getByName: (capName) => reg.getSingleton(capName) ?? reg.getAllProviders(capName)[0] ?? null
-          };
-          const client = (0, client_1.createTRPCClient)({
-            links: [
-              (0, system_1.localProviderLink)(resolver),
-              // Device-scoped caps go through the hub's CapRouteResolver, which is
-              // the only authority that can route `(cap, deviceId)` into a FORKED
-              // child — and forked children are broker-less, so the Moleculer
-              // lookup below cannot see them at all. Without this an in-process
-              // addon asking `ptz.getOptions({deviceId})` got
-              // `Service 'ptz.ptz.getOptions' is not found`, which is how the
-              // autotrack builtin came up switched on and unable to move a camera
-              // (2026-09-18).
-              (0, system_1.deviceCapResolverLink)((capName, method, input) => this.moleculer.callCapabilityOnNode(this.moleculer.broker.nodeID, capName, method, input), isDeviceScopedCapName),
-              (0, system_1.brokerTransportLink)(this.moleculer.broker)
-            ]
-          });
-          this.brokerApi = client;
+          this.brokerApi = this.buildBrokerApi(void 0);
         }
         return this.brokerApi;
       }
+      /**
+       * The `ctx.api` of one in-process addon. Same chain as {@link getBrokerApi},
+       * but its `localProviderLink` knows WHO is calling, so a caller-stamped cap
+       * (`device-history`, keychain, records) can identify the addon. A shared
+       * client cannot: `metrics-native` was refused `declareSeries` ("the caller
+       * addon could not be identified") on every sample.
+       */
+      getAddonApi(addonId) {
+        const cached = this.addonApis.get(addonId);
+        if (cached)
+          return cached;
+        const api = this.buildBrokerApi(addonId);
+        this.addonApis.set(addonId, api);
+        return api;
+      }
+      addonApis = /* @__PURE__ */ new Map();
+      buildBrokerApi(callerAddonId) {
+        const reg = this.capabilityRegistry;
+        const resolver = {
+          getByName: (capName) => reg.getSingleton(capName) ?? reg.getAllProviders(capName)[0] ?? null
+        };
+        const links = [
+          (0, system_1.deviceCapResolverLink)((capName, method, input) => this.moleculer.callCapabilityOnNode(this.moleculer.broker.nodeID, capName, method, input), isDeviceScopedCapName),
+          (0, system_1.brokerTransportLink)(this.moleculer.broker)
+        ];
+        if (callerAddonId !== void 0) {
+          return (0, hub_addon_api_js_1.createHubAddonApi)({ resolver, callerAddonId, links });
+        }
+        const client = (0, client_1.createTRPCClient)({ links: [(0, system_1.localProviderLink)(resolver), ...links] });
+        return client;
+      }
       // Common settings resolver (3-level: defaults → global → per-device).
       // Lazily constructed on first call to `getSettingsResolver()` so tests
       // that don't exercise the settings API can instantiate the service
@@ -586418,7 +587602,7 @@ var require_addon_registry_service = __commonJS({
           dataPlane: dataPlaneFacility.dataPlane,
           peerBytes: peerBytesFacility.peerBytes,
           get api() {
-            return registry.getBrokerApi();
+            return registry.getAddonApi(addonId);
           },
           integrationRegistry: this.integrationRegistry ?? void 0,
           // Live capability-collection accessor used by addons like stream-broker
@@ -591935,7 +593119,7 @@ var require_manual_boot = __commonJS({
             throw new Error("the process service did not answer");
           return rows;
         },
-        // The verdict reaches the alert centre (one alert + the direct critical push).
+        // The verdict reaches the alert centre (one critical alert).
         onResult: (check) => {
           eventBusService.emit({
             id: (0, node_crypto_1.randomUUID)(),