ha-mcp-dev 9.1.0.dev3242__tar.gz → 9.1.0.dev3249__tar.gz

{ha_mcp_dev-9.1.0.dev3242 → ha_mcp_dev-9.1.0.dev3249}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ha-mcp-dev
-Version: 9.1.0.dev3242
+Version: 9.1.0.dev3249
 Summary: Home Assistant MCP Server - Complete control of Home Assistant through MCP
 Keywords: mcp,home-assistant,ai,automation,smart-home
 Author: Julien
@@ -94,9 +94,9 @@ Description-Content-Type: text/markdown
 
 ## 🚀 Get Started
 
-The recommended way to run ha-mcp is the **HA-MCP Custom Component**. It installs into Home Assistant through HACS, runs the full server **in-process**, and works on **every** Home Assistant installation type — Home Assistant OS, Supervised, Container, and Core — with full feature parity. It is the easiest setup in every case: setup asks for an administrator access token and how clients may connect.
+The recommended way to run ha-mcp is the **HA-MCP Custom Component**. It installs into Home Assistant through HACS (the built-in Marketplace on Home Assistant 2026.11+), runs the full server **in-process**, and works on **every** Home Assistant installation type — Home Assistant OS, Supervised, Container, and Core — with full feature parity. It is the easiest setup in every case: setup asks for an administrator access token and how clients may connect.
 
-**Add it to Home Assistant via HACS (the preferred install):**
+**Add it to Home Assistant via HACS or, on Home Assistant 2026.11+, the Marketplace (the preferred install):**
 
 [![Add HA-MCP to HACS](https://my.home-assistant.io/badges/hacs_repository.svg)](https://my.home-assistant.io/redirect/hacs_repository/?owner=homeassistant-ai&repository=ha-mcp&category=integration)
 
@@ -104,7 +104,8 @@ The recommended way to run ha-mcp is the **HA-MCP Custom Component**. It install
 
 > The setup below is for version 9.0.0 (October 28, 2026) and later; earlier versions show a shorter setup form without the administrator account step.
 
-1. Install the **HA-MCP Custom Component** from HACS — click the badge above, or in HACS open **Integrations → ⋮ → Custom repositories**, add `https://github.com/homeassistant-ai/ha-mcp` (category: **Integration**), then **Download**.
+1. Install the **HA-MCP Custom Component**. On **Home Assistant 2026.10 or older**, from HACS — click the badge above, or in HACS open **Integrations → ⋮ → Custom repositories**, add `https://github.com/homeassistant-ai/ha-mcp` (category: **Integration**), then **Download**.
+   On **Home Assistant 2026.11 or newer**, HACS is built in as the **Marketplace**: open **Settings → Marketplace** and accept its first-run warning, then **Connect GitHub** (a device sign-in). Adding a custom repository needs it, and until HA-MCP is in the Marketplace catalog it is also what makes the Marketplace check HA-MCP for updates in the background; without it, **Refresh information** on HA-MCP's Marketplace page checks by hand. Then click the badge above, or open the **Add from link** tab and add `https://github.com/homeassistant-ai/ha-mcp` as an **Integration**, and **Install**.
    Already installed from the earlier `homeassistant-ai/ha-mcp-integration` repository? It keeps receiving the same releases; nothing to change.
 2. **Restart Home Assistant.**
 3. Decide which administrator account the server acts as. Either create a long-lived access token on your own account (your profile → **Security** → **Long-lived access tokens** → **Create token**; it works from anywhere if it leaks, and the server's changes show under your name), or, safer, create an account just for HA-MCP under **Settings → People → Add person** with **Allow login**, **Local access only** and **Administrator** on. Never use your own login for the second option.
@@ -118,7 +119,7 @@ The recommended way to run ha-mcp is the **HA-MCP Custom Component**. It install
 - **Local only?** Leave remote access disabled at setup (or turn off **Remote access via webhook** in the entry options) — no webhook is registered at all, while the direct port and sidebar panel keep working.
 - **Settings panel:** while the server runs, an admin-only **HA-MCP** panel appears in the Home Assistant sidebar for managing tools, feature flags, backups, and themes.
 - **Optional authentication:** set **Authentication mode** to `ha_auth` to require a Home Assistant account sign-in instead of using the secret URL as the credential.
-- **Manual install (no HACS):** copy `custom_components/ha_mcp_tools/` from this repository into your Home Assistant `config/custom_components/` directory, then restart and add the integration as above.
+- **Manual install (no HACS or Marketplace):** copy `custom_components/ha_mcp_tools/` from this repository into your Home Assistant `config/custom_components/` directory, then restart and add the integration as above.
 
 The component's second entry type, the **File & YAML services entry** (**HA-MCP File & YAML Tools**), is only needed if you enable ha-mcp's opt-in file and YAML editing tools (feature flags, off by default) — skip it otherwise; you can add it later at any time. It works with any server type (in-process, app, Docker, or stdio).
 
@@ -374,7 +375,7 @@ Install the **HA-MCP File & YAML Tools** entry from the same **HA-MCP Custom Com
 
 [![Open your Home Assistant instance and open a repository inside the Home Assistant Community Store.](https://my.home-assistant.io/badges/hacs_repository.svg)](https://my.home-assistant.io/redirect/hacs_repository/?owner=homeassistant-ai&repository=ha-mcp&category=integration)
 
-To add manually: open **HACS** > **Integrations** > three-dot menu > **Custom repositories** > add `https://github.com/homeassistant-ai/ha-mcp` (category: Integration) > **Download**. Or copy `custom_components/ha_mcp_tools/` from this repository into your HA `config/custom_components/` directory.
+To add manually on Home Assistant 2026.10 or older: open **HACS** > **Integrations** > three-dot menu > **Custom repositories** > add `https://github.com/homeassistant-ai/ha-mcp` (category: Integration) > **Download**. On 2026.11 or newer: in **Marketplace**, accept the first-run warning and **Connect GitHub**, then **Add from link** > `https://github.com/homeassistant-ai/ha-mcp` as an **Integration** > **Install**. Or copy `custom_components/ha_mcp_tools/` from this repository into your HA `config/custom_components/` directory.
 
 After installing, restart Home Assistant, then open **Settings** > **Devices & Services** > **Add Integration**, search for **HA-MCP Custom Component**, and add the **HA-MCP File & YAML Tools** entry.
 

{ha_mcp_dev-9.1.0.dev3242 → ha_mcp_dev-9.1.0.dev3249}/README.md

@@ -34,9 +34,9 @@
 
 ## 🚀 Get Started
 
-The recommended way to run ha-mcp is the **HA-MCP Custom Component**. It installs into Home Assistant through HACS, runs the full server **in-process**, and works on **every** Home Assistant installation type — Home Assistant OS, Supervised, Container, and Core — with full feature parity. It is the easiest setup in every case: setup asks for an administrator access token and how clients may connect.
+The recommended way to run ha-mcp is the **HA-MCP Custom Component**. It installs into Home Assistant through HACS (the built-in Marketplace on Home Assistant 2026.11+), runs the full server **in-process**, and works on **every** Home Assistant installation type — Home Assistant OS, Supervised, Container, and Core — with full feature parity. It is the easiest setup in every case: setup asks for an administrator access token and how clients may connect.
 
-**Add it to Home Assistant via HACS (the preferred install):**
+**Add it to Home Assistant via HACS or, on Home Assistant 2026.11+, the Marketplace (the preferred install):**
 
 [![Add HA-MCP to HACS](https://my.home-assistant.io/badges/hacs_repository.svg)](https://my.home-assistant.io/redirect/hacs_repository/?owner=homeassistant-ai&repository=ha-mcp&category=integration)
 
@@ -44,7 +44,8 @@ The recommended way to run ha-mcp is the **HA-MCP Custom Component**. It install
 
 > The setup below is for version 9.0.0 (October 28, 2026) and later; earlier versions show a shorter setup form without the administrator account step.
 
-1. Install the **HA-MCP Custom Component** from HACS — click the badge above, or in HACS open **Integrations → ⋮ → Custom repositories**, add `https://github.com/homeassistant-ai/ha-mcp` (category: **Integration**), then **Download**.
+1. Install the **HA-MCP Custom Component**. On **Home Assistant 2026.10 or older**, from HACS — click the badge above, or in HACS open **Integrations → ⋮ → Custom repositories**, add `https://github.com/homeassistant-ai/ha-mcp` (category: **Integration**), then **Download**.
+   On **Home Assistant 2026.11 or newer**, HACS is built in as the **Marketplace**: open **Settings → Marketplace** and accept its first-run warning, then **Connect GitHub** (a device sign-in). Adding a custom repository needs it, and until HA-MCP is in the Marketplace catalog it is also what makes the Marketplace check HA-MCP for updates in the background; without it, **Refresh information** on HA-MCP's Marketplace page checks by hand. Then click the badge above, or open the **Add from link** tab and add `https://github.com/homeassistant-ai/ha-mcp` as an **Integration**, and **Install**.
    Already installed from the earlier `homeassistant-ai/ha-mcp-integration` repository? It keeps receiving the same releases; nothing to change.
 2. **Restart Home Assistant.**
 3. Decide which administrator account the server acts as. Either create a long-lived access token on your own account (your profile → **Security** → **Long-lived access tokens** → **Create token**; it works from anywhere if it leaks, and the server's changes show under your name), or, safer, create an account just for HA-MCP under **Settings → People → Add person** with **Allow login**, **Local access only** and **Administrator** on. Never use your own login for the second option.
@@ -58,7 +59,7 @@ The recommended way to run ha-mcp is the **HA-MCP Custom Component**. It install
 - **Local only?** Leave remote access disabled at setup (or turn off **Remote access via webhook** in the entry options) — no webhook is registered at all, while the direct port and sidebar panel keep working.
 - **Settings panel:** while the server runs, an admin-only **HA-MCP** panel appears in the Home Assistant sidebar for managing tools, feature flags, backups, and themes.
 - **Optional authentication:** set **Authentication mode** to `ha_auth` to require a Home Assistant account sign-in instead of using the secret URL as the credential.
-- **Manual install (no HACS):** copy `custom_components/ha_mcp_tools/` from this repository into your Home Assistant `config/custom_components/` directory, then restart and add the integration as above.
+- **Manual install (no HACS or Marketplace):** copy `custom_components/ha_mcp_tools/` from this repository into your Home Assistant `config/custom_components/` directory, then restart and add the integration as above.
 
 The component's second entry type, the **File & YAML services entry** (**HA-MCP File & YAML Tools**), is only needed if you enable ha-mcp's opt-in file and YAML editing tools (feature flags, off by default) — skip it otherwise; you can add it later at any time. It works with any server type (in-process, app, Docker, or stdio).
 
@@ -314,7 +315,7 @@ Install the **HA-MCP File & YAML Tools** entry from the same **HA-MCP Custom Com
 
 [![Open your Home Assistant instance and open a repository inside the Home Assistant Community Store.](https://my.home-assistant.io/badges/hacs_repository.svg)](https://my.home-assistant.io/redirect/hacs_repository/?owner=homeassistant-ai&repository=ha-mcp&category=integration)
 
-To add manually: open **HACS** > **Integrations** > three-dot menu > **Custom repositories** > add `https://github.com/homeassistant-ai/ha-mcp` (category: Integration) > **Download**. Or copy `custom_components/ha_mcp_tools/` from this repository into your HA `config/custom_components/` directory.
+To add manually on Home Assistant 2026.10 or older: open **HACS** > **Integrations** > three-dot menu > **Custom repositories** > add `https://github.com/homeassistant-ai/ha-mcp` (category: Integration) > **Download**. On 2026.11 or newer: in **Marketplace**, accept the first-run warning and **Connect GitHub**, then **Add from link** > `https://github.com/homeassistant-ai/ha-mcp` as an **Integration** > **Install**. Or copy `custom_components/ha_mcp_tools/` from this repository into your HA `config/custom_components/` directory.
 
 After installing, restart Home Assistant, then open **Settings** > **Devices & Services** > **Add Integration**, search for **HA-MCP Custom Component**, and add the **HA-MCP File & YAML Tools** entry.
 

{ha_mcp_dev-9.1.0.dev3242 → ha_mcp_dev-9.1.0.dev3249}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "ha-mcp-dev"
-version = "9.1.0.dev3242"
+version = "9.1.0.dev3249"
 description = "Home Assistant MCP Server - Complete control of Home Assistant through MCP"
 readme = "README.md"
 requires-python = ">=3.13,<3.15"

{ha_mcp_dev-9.1.0.dev3242 → ha_mcp_dev-9.1.0.dev3249}/pyproject.toml.orig

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "ha-mcp-dev"
-version = "9.1.0.dev3242"
+version = "9.1.0.dev3249"
 description = "Home Assistant MCP Server - Complete control of Home Assistant through MCP"
 readme = "README.md"
 # Upper bound widened to <3.15 so the package installs on Home Assistant's

{ha_mcp_dev-9.1.0.dev3242 → ha_mcp_dev-9.1.0.dev3249}/src/ha_mcp/config_settings.py

@@ -231,6 +231,13 @@ class Settings(BaseSettings):
         bool, Setting(surface="advanced", section="operations")
     ] = Field(False, alias="HAMCP_ENABLE_HISTORY_QUERY_GUARDRAILS")
 
+    # Opt-in: ask HACS / the Marketplace to refresh the component's repository
+    # at startup after a server update (hacs_auto_refresh). An install that ran
+    # the refresh before it became opt-in has it turned on once, on its behalf.
+    hacs_refresh_after_update: Annotated[
+        bool, Setting(surface="advanced", section="operations")
+    ] = Field(False, alias="HAMCP_HACS_REFRESH_AFTER_UPDATE")
+
     # Optional process-wide outer tool-call concurrency. Zero preserves the
     # existing unlimited behavior; constrained installs can opt into queuing.
     ha_tool_concurrency: Annotated[

{ha_mcp_dev-9.1.0.dev3242 → ha_mcp_dev-9.1.0.dev3249}/src/ha_mcp/errors.py

@@ -249,7 +249,10 @@ DEFAULT_SUGGESTIONS: dict[ErrorCode, list[str]] = {
         "Report this issue if it persists",
     ],
     ErrorCode.COMPONENT_NOT_INSTALLED: [
-        "Install the required custom component via HACS",
+        (
+            "Install the required custom component via HACS (the Marketplace on "
+            "Home Assistant 2026.11+)"
+        ),
         "Restart Home Assistant after installation",
     ],
 }

{ha_mcp_dev-9.1.0.dev3242 → ha_mcp_dev-9.1.0.dev3249}/src/ha_mcp/hacs_auto_refresh.py

@@ -1,16 +1,23 @@
-"""Ask HACS to surface the paired component update after a server update.
+"""Ask HACS to surface the paired component update after a server update (opt-in).
 
 HACS refreshes a *custom* repository's release data from GitHub only about
-every 48 hours, and the ha_mcp_tools component ships in lockstep with each
-server release — so a freshly updated server can sit for two days next to a
-component update HACS has not noticed yet. This module closes that gap for
-add-on, Docker, pip and stdio installs. The embedded server is skipped: the
-component manages its updates.
+every 48 hours, and the Marketplace that replaces it in Home Assistant 2026.11
+only when a GitHub account is connected. The ha_mcp_tools component ships in
+lockstep with each server release, so a component update can go unnoticed for
+days, or for good. This module closes that gap for every install, the embedded
+server included. It goes away once ha-mcp is in the default catalog, which the
+Marketplace refreshes every 6 hours.
 
 On startup, when the server version changed since the last recorded nudge (the
-just-updated case) or a newer release is pending, it sends HACS's "Update
-information" refresh (``hacs/repository/refresh``) over the existing admin
-WebSocket for every INSTALLED candidate repository entry.
+just-updated case) or a newer release is pending, it sends the store's "Update
+information" refresh (``marketplace/repository/refresh``, or
+``hacs/repository/refresh`` before 2026.11) over the existing admin WebSocket
+for every INSTALLED candidate repository entry. Nothing is installed: the user
+still updates from the update entity.
+
+It is opt-in (``hacs_refresh_after_update``). An install whose nudge completed
+a pass before it became opt-in has a marker file and no explicit choice; the
+setting is turned on for it once, so its behavior does not change.
 
 Fully advisory: every failure degrades to a debug log and nothing here can
 fault startup. A marker file in the data dir records the state the last
@@ -24,19 +31,21 @@ import asyncio
 import hashlib
 import json
 import logging
+import os
 from collections.abc import AsyncIterator
 from contextlib import asynccontextmanager, suppress
 from pathlib import Path
 from typing import Any
 
 from ._vendor import websockets
-from ._version import get_version, is_embedded
+from ._version import get_version
 from .client.rest_client import (
     HomeAssistantCommandError,
     HomeAssistantCommandTimeout,
     HomeAssistantConnectionError,
 )
 from .config import OAUTH_MODE_TOKEN, get_global_settings
+from .config_overrides import _read_feature_flag_override_file
 from .update_check import UpdateInfo, get_update_info, is_update_check_disabled
 from .utils.data_paths import get_data_dir
 
@@ -123,18 +132,23 @@ async def _refresh_installed_candidates() -> dict[str, Any] | None:
     or None when the outcome could not be determined.
     """
     from .client.websocket_client import get_websocket_client
+    from .tools.hacs_backend import STORE_APIS
     from .tools.hacs_registration import send_hacs_repository_refresh
 
     ws_client = await get_websocket_client()
-    try:
-        response = await ws_client.send_command("hacs/repositories/list")
-    except HomeAssistantCommandError as err:
-        # HACS not installed at all — HA rejects its commands as unknown. Same
-        # detection as ``_assert_hacs_available`` in tools/tools_hacs.py. Any
-        # other command failure is a real error: let the retry loop see it.
-        if err.code == "unknown_command" or "unknown command" in str(err).lower():
-            return {"hacs": "absent", "refreshed": []}
-        raise
+    for api in STORE_APIS:
+        try:
+            response = await ws_client.send_command(api.command("list"))
+        except HomeAssistantCommandError as err:
+            # A store that is not installed answers as an unknown command; any
+            # other failure (the Marketplace still loading included) is real:
+            # let the retry loop see it.
+            if err.code == "unknown_command" or "unknown command" in str(err).lower():
+                continue
+            raise
+        break
+    else:
+        return {"hacs": "absent", "refreshed": []}
 
     wanted = {name.lower() for name in CANDIDATE_REPO_FULL_NAMES}
     refreshed: list[str] = []
@@ -148,7 +162,7 @@ async def _refresh_installed_candidates() -> dict[str, Any] | None:
             continue
         attempted += 1
         try:
-            await send_hacs_repository_refresh(ws_client, str(repo["id"]))
+            await send_hacs_repository_refresh(ws_client, str(repo["id"]), api)
         except Exception as err:  # noqa: BLE001
             # Both entries read installed only when someone downloaded the
             # mirror without removing the legacy record — HACS guards against
@@ -199,12 +213,34 @@ async def _refresh_with_retries() -> dict[str, Any] | None:
     return absent_result
 
 
+SETTING = "hacs_refresh_after_update"
+SETTING_ENV = "HAMCP_HACS_REFRESH_AFTER_UPDATE"
+
+
+async def _opted_in(settings: Any, marker: dict[str, Any] | None) -> bool:
+    """Whether the nudge is on; an install that already ran it keeps it."""
+    if getattr(settings, SETTING):
+        return True
+    explicit = os.environ.get(SETTING_ENV) is not None or SETTING in (
+        await asyncio.to_thread(_read_feature_flag_override_file)
+    )
+    if explicit or marker is None:
+        return False
+    from .settings_ui._handlers_advanced import _write_advanced_overrides_file
+
+    if await _write_advanced_overrides_file({SETTING: True}) is not None:
+        logger.warning("Could not save %s=true; it stays on for this run", SETTING)
+    setattr(settings, SETTING, True)
+    logger.info(
+        "HACS auto-refresh is opt-in now; it stays on for this install, which "
+        "already used it (turn it off under Advanced settings)"
+    )
+    return True
+
+
 async def maybe_refresh_hacs_after_update() -> None:
     """Nudge HACS once per startup when the update picture changed."""
     try:
-        if is_embedded():
-            # The component manages the embedded server's updates.
-            return
         if is_update_check_disabled():
             return
 
@@ -215,11 +251,16 @@ async def maybe_refresh_hacs_after_update() -> None:
             return
         ha_url = settings.homeassistant_url
 
+        marker = await asyncio.to_thread(_read_marker, ha_url)
+        if not await _opted_in(settings, marker):
+            # Per-boot DEBUG line: the add-on lane proves scheduling with it.
+            logger.debug("HACS auto-refresh: off (%s is opt-in)", SETTING_ENV)
+            return
+
         current = get_version()
         # Normally a cache hit — the startup banner warms the lru_cache — but
         # offloaded anyway so a cold call can never touch the event loop.
         info = await asyncio.to_thread(get_update_info)
-        marker = await asyncio.to_thread(_read_marker, ha_url)
         if not _nudge_due(current, info, marker):
             # DEBUG, not INFO: the not-due return is the per-conversation
             # stdio hot path and must stay quiet at default levels. The line

{ha_mcp_dev-9.1.0.dev3242 → ha_mcp_dev-9.1.0.dev3249}/src/ha_mcp/settings_ui/_handlers_oauth_callbacks.py

@@ -61,7 +61,8 @@ async def _component_command(
     if not component_supports(caps, CAPABILITY):
         raise _Unavailable(
             "This HA-MCP component cannot edit the callback list. Update the "
-            "HA-MCP integration in HACS."
+            "HA-MCP integration in HACS (the Marketplace on Home Assistant "
+            "2026.11+)."
         )
     ws = await get_websocket_client(
         url=client.base_url,

{ha_mcp_dev-9.1.0.dev3242 → ha_mcp_dev-9.1.0.dev3249}/src/ha_mcp/settings_ui/locales/en.json

@@ -472,6 +472,8 @@
     "advanced.individual_fetch_batch_size.help": "Concurrent per-ID config fetches. Lower toward 1 on serial HA servers.",
     "advanced.enable_history_query_guardrails.label": "History query guardrails",
     "advanced.enable_history_query_guardrails.help": "Reject recorder queries that exceed conservative entity and time-range budgets. Disabled by default.",
+    "advanced.hacs_refresh_after_update.label": "Refresh the component in HACS after an update",
+    "advanced.hacs_refresh_after_update.help": "At startup after a server update, ask HACS (the Marketplace on Home Assistant 2026.11+) to re-check the HA-MCP Custom Component repository, so its matching update shows right away instead of at the next 48-hour check. Off by default; installs that already did this keep it on.",
     "advanced.ha_tool_concurrency.label": "Home Assistant tool concurrency",
     "advanced.ha_tool_concurrency.help": "Optional limit on outer Home Assistant tool calls across all sessions. Internal REST, WebSocket, and per-tool fan-out concurrency is unchanged. 0 keeps unlimited behavior. A call waiting for capacity fails after 60 seconds.",
     "advanced.dashboard_screenshot_engine_url.label": "Dashboard screenshot engine URL",

{ha_mcp_dev-9.1.0.dev3242 → ha_mcp_dev-9.1.0.dev3249}/src/ha_mcp/tools/config_helpers/listing.py

@@ -66,6 +66,14 @@ def listed_items(listed: Any) -> list[Any]:
     return listed if isinstance(listed, list) else []
 
 
+def _outside_storage(rec: dict[str, Any]) -> bool:
+    """A component record of a helper ``<type>/list`` does not list (a YAML
+    helper, the home zone): the component sends it with a null storage id."""
+    return rec.get("kind") == "collection" and (
+        "storage_id" in rec and rec["storage_id"] is None
+    )
+
+
 def _shape_collection_helper_record(rec: dict[str, Any]) -> dict[str, Any]:
     """Map one component collection-helper record onto the legacy list record.
 
@@ -205,7 +213,7 @@ def _shape_component_helpers_response(
     for rec in records:
         if not isinstance(rec, dict):
             continue
-        if (rec.get("kind") == "flow") != want_flow:
+        if (rec.get("kind") == "flow") != want_flow or _outside_storage(rec):
             continue
         helpers.append(
             _shape_flow_helper_record(rec)
@@ -228,8 +236,8 @@ def _component_covers(result: dict[str, Any], helper_type: str) -> bool:
     """Whether a helpers_list response authoritatively enumerated ``helper_type``.
 
     The component reports ``covered_types``: the helper types its response could
-    actually see. A type outside that list (e.g. ``tag`` — tags have no state
-    entity, so the component's from-states scan can't enumerate them) must NOT
+    actually see. A type outside that list (e.g. ``person`` or ``tag``, whose
+    ``<type>/list`` adds more than the stored items) must NOT
     be trusted as "none exist". A response with no ``covered_types`` at all (an
     older component) is treated conservatively as covering nothing, so the
     caller falls back rather than trusting a possibly-partial list.
@@ -290,8 +298,8 @@ async def shape_all_helpers_response(
     collection → ``_shape_collection_helper_record``) and stamped with its
     own ``helper_type`` so records of different types stay distinguishable in
     the flat list. Respecting ``covered_types`` (mirroring the single-type
-    path): a simple type the component could not enumerate from the state
-    machine — ``tag`` has no state entity — is fetched per-type via its
+    path): a simple type the component did not cover — ``person`` and ``tag``
+    — is fetched per-type via its
     legacy ``{type}/list`` (``legacy_list``) and merged, so ``all`` never silently drops it.
 
     ``flow_types`` is Core's current set of helper flow types; one the component
@@ -301,7 +309,7 @@ async def shape_all_helpers_response(
     records = raw if isinstance(raw, list) else []
     helpers: list[dict[str, Any]] = []
     for rec in records:
-        if not isinstance(rec, dict):
+        if not isinstance(rec, dict) or _outside_storage(rec):
             continue
         if rec.get("kind") == "flow":
             helpers.append(_shape_flow_helper_record(rec))

{ha_mcp_dev-9.1.0.dev3242 → ha_mcp_dev-9.1.0.dev3249}/src/ha_mcp/tools/dashboard_card_describe.py

@@ -120,7 +120,10 @@ async def describe_card_response(client: Any, card_type: str | None) -> dict[str
                 "Describing card types needs the ha_mcp_tools custom component "
                 "with dashboard card support.",
                 suggestions=[
-                    "Install or update the HA-MCP Custom Component through HACS",
+                    (
+                        "Install or update the HA-MCP Custom Component through "
+                        "HACS (the Marketplace on Home Assistant 2026.11+)"
+                    ),
                     "Restart Home Assistant after the update completes",
                 ],
                 context={"action": "describe", "card_type": card_type},

ha_mcp_dev-9.1.0.dev3249/src/ha_mcp/tools/entity_expose_batch.py

@@ -0,0 +1,67 @@
+"""Bulk ``homeassistant/expose_entity`` calls for ``ha_set_entity``."""
+
+import logging
+from collections.abc import Callable
+from typing import Any
+
+logger = logging.getLogger(__name__)
+
+
+def changed_entity_ids(reply: dict[str, Any]) -> set[str] | None:
+    """The entities Core reports it changed, or None before Core 2026.11."""
+    result = reply.get("result")
+    if isinstance(result, dict) and isinstance(result.get("changed_entity_ids"), list):
+        return set(result["changed_entity_ids"])
+    return None
+
+
+async def apply_bulk_expose(
+    client: Any,
+    entity_ids: list[str],
+    parsed_expose_to: dict[str, bool],
+    extract_error: Callable[[dict[str, Any]], str],
+) -> tuple[str | None, set[str] | None]:
+    """Expose/hide many entities in one homeassistant/expose_entity call per set.
+
+    The command's schema accepts the full entity_ids list, so bulk exposure
+    needs at most two WS calls (one for the assistants being turned on, one
+    for those being turned off) regardless of entity count — not one per
+    entity. Returns (error, changed): error is None on success, or the message
+    of the first failing set, which applies to every id in the list. changed
+    holds the ids Core reports it changed, or None when Core does not report
+    them (before 2026.11).
+    """
+    expose_true = [a for a, v in parsed_expose_to.items() if v]
+    expose_false = [a for a, v in parsed_expose_to.items() if not v]
+    applied: list[str] = []
+    changed: set[str] | None = set()
+    for assistants, should_expose in [(expose_true, True), (expose_false, False)]:
+        if not assistants:
+            continue
+        logger.info(
+            f"{'Exposing' if should_expose else 'Hiding'} {len(entity_ids)} "
+            f"entities {'to' if should_expose else 'from'} {assistants}"
+        )
+        result = await client.send_websocket_message(
+            {
+                "type": "homeassistant/expose_entity",
+                "assistants": assistants,
+                "entity_ids": entity_ids,
+                "should_expose": should_expose,
+            }
+        )
+        if not result.get("success"):
+            error = extract_error(result)
+            if applied:
+                # The earlier assistant group already changed — say so, or
+                # the all-failed report implies no exposure was touched.
+                error = (
+                    f"{error} (note: expose changes for "
+                    f"{', '.join(applied)} were already applied before "
+                    "this failure)"
+                )
+            return error, None
+        applied.extend(assistants)
+        reported = changed_entity_ids(result)
+        changed = None if reported is None or changed is None else changed | reported
+    return None, changed

{ha_mcp_dev-9.1.0.dev3242 → ha_mcp_dev-9.1.0.dev3249}/src/ha_mcp/tools/error_log_parsing.py

@@ -16,7 +16,9 @@ the client or tool plumbing.
 """
 
 import re
+from collections.abc import Callable
 from dataclasses import dataclass
+from datetime import UTC, datetime, timezone
 from typing import Any, Literal, NamedTuple
 
 from ..client.error_log_journald import cursor_token
@@ -33,9 +35,9 @@ from .log_common import (
 # The thread field is matched lazily instead of as `\([^)]*\)`: since Python 3.10
 # an unnamed thread is called "Thread-1 (target_fn)", so the field itself can
 # contain parentheses, and a class that cannot cross them drops every line those
-# threads log.
+# threads log. Core 2026.11+ appends the local UTC offset ("…10:15:23.456-04:00").
 _HA_LOG_LINE_RE = re.compile(
-    r"^(\d{4}-\d{2}-\d{2}[T ]\d{2}:\d{2}:\d{2}(?:\.\d+)?)"
+    r"^(\d{4}-\d{2}-\d{2}[T ]\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:?\d{2})?)"
     r"\s+(DEBUG|INFO|WARNING|ERROR|CRITICAL)"
     r"\s+\(.*?\)"
     r"\s+\[([^\]]+)\]"
@@ -83,13 +85,11 @@ def _strip_ansi(text: str) -> str:
 def _normalize_timestamp(timestamp: str) -> str:
     """Put a matched timestamp on one date/time separator.
 
-    Every timestamp comparison downstream is lexicographic — the covered
-    window, an issue's ``first_seen``/``last_seen`` bounds, and the recency
-    tiebreaker. ``_HA_LOG_LINE_RE`` accepts both the space and the ``T`` form
-    (case-insensitively), and ``" "`` sorts below every digit while ``"T"``
-    sorts above them, so a stream mixing the two forms would corrupt all three
-    at once. HA core emits the space form, so normalize onto that: real logs
-    come out byte-identical and only the ISO-8601 variant is rewritten.
+    ``_HA_LOG_LINE_RE`` accepts both the space and the ``T`` form
+    (case-insensitively); one form keeps a recurring issue's reported
+    timestamps uniform. HA core emits the space form, so normalize onto that:
+    real logs come out byte-identical and only the ISO-8601 variant is
+    rewritten. Comparisons go through ``_instant_order``.
 
     The date is fixed-width in the pattern (``\\d{4}-\\d{2}-\\d{2}``), so the
     separator is always at index 10 — replacing by position also covers the
@@ -98,6 +98,30 @@ def _normalize_timestamp(timestamp: str) -> str:
     return timestamp[:10] + " " + timestamp[11:]
 
 
+def _instant_order(stamps: list[str]) -> Callable[[str], datetime]:
+    """Order timestamps by instant, not text.
+
+    Core 2026.11+ stamps carry the UTC offset, so the repeated hour when
+    daylight saving ends sorts wrong as text. Offset-less stamps (older Core,
+    or the lines before an upgrade) take the window's first offset: the zone
+    outlives a restart.
+    """
+    offset = next(
+        (o for s in stamps if (o := datetime.fromisoformat(s).utcoffset()) is not None),
+        None,
+    )
+
+    def key(stamp: str) -> datetime:
+        parsed = datetime.fromisoformat(stamp)
+        if parsed.tzinfo is None:
+            if offset is None:
+                return parsed
+            parsed = parsed.replace(tzinfo=timezone(offset))
+        return parsed.astimezone(UTC).replace(tzinfo=None)
+
+    return key
+
+
 def _get_component_prefix(logger_name: str) -> str:
     """Extract the component prefix (first N dotted segments) of a logger name.
 
@@ -141,6 +165,7 @@ class _ExtractedLines(NamedTuple):
     blank: int
     window_start: str | None
     window_end: str | None
+    order: Callable[[str], datetime]
 
 
 def _extract_log_entries(
@@ -159,8 +184,7 @@ def _extract_log_entries(
     matched = 0
     unparseable = 0
     blank = 0
-    window_start: str | None = None
-    window_end: str | None = None
+    stamps: list[str] = []
     needle = search.lower() if search else None
 
     for line in lines:
@@ -180,12 +204,9 @@ def _extract_log_entries(
         matched += 1
         timestamp, log_level, logger_name, message = match.groups()
         timestamp = _normalize_timestamp(timestamp)
-        # Widen the covered window on every parseable line, filtered or not:
+        # The covered window spans every parseable line, filtered or not:
         # it describes the log slice that was read, not the summary's contents.
-        if window_start is None or timestamp < window_start:
-            window_start = timestamp
-        if window_end is None or timestamp > window_end:
-            window_end = timestamp
+        stamps.append(timestamp)
         log_level = log_level.upper()
         if level and log_level != level:
             continue
@@ -207,13 +228,15 @@ def _extract_log_entries(
             }
         )
 
+    order = _instant_order(stamps)
     return _ExtractedLines(
         entries=entries,
         matched=matched,
         unparseable=unparseable,
         blank=blank,
-        window_start=window_start,
-        window_end=window_end,
+        window_start=min(stamps, key=order, default=None),
+        window_end=max(stamps, key=order, default=None),
+        order=order,
     )
 
 
@@ -440,8 +463,12 @@ def _parse_error_log_structured(
         # Bounds, not last-write-wins: a log whose lines are not perfectly
         # ordered would otherwise drag last_seen backwards, which also
         # misplaces the issue in the recency tiebreaker below.
-        record["first_seen"] = min(record["first_seen"], entry["timestamp"])
-        record["last_seen"] = max(record["last_seen"], entry["timestamp"])
+        record["first_seen"] = min(
+            record["first_seen"], entry["timestamp"], key=extracted.order
+        )
+        record["last_seen"] = max(
+            record["last_seen"], entry["timestamp"], key=extracted.order
+        )
 
     # Count first, then severity, then recency. Python's sort is stable, so
     # count alone would return the *oldest* of a tied run — and on a log whose
@@ -452,7 +479,7 @@ def _parse_error_log_structured(
         key=lambda i: (
             i["count"],
             _LEVEL_SEVERITY.get(i["level"], 0),
-            i["last_seen"],
+            extracted.order(i["last_seen"]),
         ),
         reverse=True,
     )