Release v1.79.0-beta.2 candidate

Publish the 58 integrated S8 issues since beta.1. Synchronize versions, rebuild committed frontend assets, refresh ratchets to measured facts, and update release metadata. All 11 documentation screenshots were accepted as pixel-identical in WSL, without replacing PNG bytes. Owner-authorized manual ship review covers all 13 ship issues; High 0. Local checks: build/typecheck, 3510 unit tests passed (30 skipped), 20 selected browser smokes, Stage 3 dense observable contract. Full exact-SHA Validate remains mandatory before publication. Release: v1.79.0-beta.2 Issue: #694 Issue: #703 Issue: #704 Issue: #705 Issue: #707 Issue: #708 Issue: #712 Issue: #714 Issue: #715 Issue: #716 Issue: #717 Issue: #718 Issue: #719 Issue: #720 Issue: #721 Issue: #722 Issue: #723 Issue: #724 Issue: #725 Issue: #726 Issue: #727 Issue: #728 Issue: #729 Issue: #730 Issue: #731 Issue: #732 Issue: #733 Issue: #734 Issue: #735 Issue: #736 Issue: #737 Issue: #738 Issue: #739 Issue: #740 Issue: #741 Issue: #742 Issue: #743 Issue: #744 Issue: #745 Issue: #746 Issue: #747 Issue: #748 Issue: #749 Issue: #750 Issue: #751 Issue: #752 Issue: #753 Issue: #754 Issue: #755 Issue: #756 Issue: #757 Issue: #758 Issue: #759 Issue: #760 Issue: #761 Issue: #762 Issue: #772 Issue: #775 User-Visible: yes
docs: manual ship review for v1.79.0-beta.2
2026-10-07 23:19:14 +00:00 · 2026-10-02 07:55:09 +03:00 · 2026-10-02 07:54:50 +03:00 · 2026-10-01 23:05:23 +00:00 · 2026-10-01 23:05:20 +00:00 · 2026-10-02 01:01:38 +03:00
2349 changed files with 129821 additions and 35288 deletions
@@ -12,3 +12,9 @@
 *.zip binary
 *.woff binary
 *.woff2 binary
+
+# #698: записи двух задач в `## Unreleased` друг другу не противоречат — при
+# слиянии и ребейзе git объединяет обе стороны сам (встроенный драйвер union),
+# и параллельные задачи не возвращаются в S6 из-за соседней строки ченджлога.
+docs/CHANGELOG.md merge=union
+docs/CHANGELOG.ru.md merge=union
@@ -30,20 +30,14 @@ else
 fi

 status=0
+gate_status=0

-# Локальный набор гейтов (#343). Выключен по умолчанию намеренно: 20-45 секунд на
-# каждый пуш, включая пуши одной строки документации, — цена, которую стоит
-# платить осознанно. Документация: docs/TESTING.md.
-if [ "${HP_PREPUSH_GATE:-}" = "1" ] && [ -f "$repo_root/scripts/pre-push-gate.mjs" ]; then
-  echo "pre-push-gate: HP_PREPUSH_GATE=1, прогоняю локальный набор" >&2
-  if ! node "$repo_root/scripts/pre-push-gate.mjs" >&2; then
-    status=1
-  fi
-fi
+# Строки git читаются один раз: их нужно и локальному набору, и процессному гейту.
+refs=$(cat)

 while read -r local_ref local_sha remote_ref remote_sha; do
-  # Deleting a remote branch pushes nothing to examine.
-  if [ "$local_sha" = "$zero" ]; then
+  # An empty line (nothing on stdin) and deleting a remote branch push nothing to examine.
+  if [ -z "$local_sha" ] || [ "$local_sha" = "$zero" ]; then
    continue
  fi

@@ -71,10 +65,25 @@ while read -r local_ref local_sha remote_ref remote_sha; do
  if ! node "$gate" --range "${base}..${local_sha}" --target-ref "$remote_ref" $issues_flag >&2; then
    status=1
  fi
-done
+done <<EOF
+$refs
+EOF
+
+# Локальный набор gate:small (#633, прежде opt-in #343) — после процессного
+# гейта: тот отвечает за секунды, а набор идёт минуты; прогоняются оба, чтобы
+# автор узнал обо всех провалах одним кругом. По умолчанию включён для
+# веток issue/* с исполняемым диффом; дифф только класса C/D (документы ревью,
+# changelog, бандл) и ветки вне issue/* его не запускают. Выключение — явное:
+# HP_PREPUSH_GATE=0; HP_PREPUSH_GATE=1 — прогнать для любой ветки. Документация:
+# docs/TESTING.md, docs/DEVELOPMENT.md «Локальный контур за 5 минут».
+if [ -f "$repo_root/scripts/pre-push-gate.mjs" ]; then
+  if ! printf '%s\n' "$refs" | node "$repo_root/scripts/pre-push-gate.mjs" --hook >&2; then
+    gate_status=1
+  fi
+fi

 if [ "$status" -ne 0 ]; then
-  cat >&2 <<'EOF'
+  cat >&2 <<'MSG'

 Push остановлен: нарушен процесс (PROCESS.md §10.2).

@@ -84,7 +93,12 @@ Push остановлен: нарушен процесс (PROCESS.md §10.2).

 Обойти проверку можно через `git push --no-verify`, и тогда то же самое найдёт
 job `process-gate` в Validate — уже после того, как код окажется в dev.
-EOF
+MSG
+fi
+
+if [ "$gate_status" -ne 0 ]; then
+  echo "Push остановлен: красный локальный набор gate:small (см. вывод выше)." >&2
+  exit 1
 fi

 exit "$status"
@@ -0,0 +1,228 @@
+name: "Бета: производные артефакты на dev · тело (#716)"
+
+# #697, PROCESS.md §8 и §11.4: ветки задач не коммитят ни отпечаток и кадры
+# скриншотов документации, ни эталоны golden. Их обновляет один коммит бота на
+# `dev` перед кандидатом беты; коммит проверяет релиз-менеджер.
+#
+# - Скриншоты: съёмка на `dev` тем же каноническим способом, что
+#   `docs-screenshots.yml`, и приёмка `docs:accept --reviewed`. Кадры, которые
+#   менять не собирались, обязаны совпасть байт-в-байт (свидетели среды);
+#   изменившийся кадр принимается, только если назван в `docs_expect_change`.
+#   Ничего не изменилось — обновляется один отпечаток исходников.
+# - Golden: артефакт `golden-images` полного Validate на `dev`
+#   (`golden_run`) и `golden:accept --reviewed` с объявленными сценами. Коммит
+#   несёт `Release:` и `Baseline-Reviewed:` — провенанс, который требует
+#   validate-commit-provenance.mjs.
+#
+# Необъявленная разница — отказ с перечнем кадров, артефакт съёмки остаётся
+# для просмотра: решение, какие кадры сдвинулись законно, принимает человек.
+
+on:
+  # #716: тело вызывается тонким файлом `beta-derived.yml` по ссылке `@dev`;
+  # кнопка, входы ручного запуска, run-name и concurrency живут там. Без
+  # файла в ветке по умолчанию GitHub не даёт запустить workflow_dispatch вовсе.
+  workflow_call:
+    inputs:
+      tag:
+        description: "Beta tag these artifacts are for, for example v1.79.0-beta.1"
+        required: true
+        type: string
+      docs_expect_change:
+        description: "Doc scenario ids expected to change, comma-separated (empty = none)"
+        required: false
+        type: string
+        default: ""
+      golden_run:
+        description: "Validate run id on dev whose golden-images artifact holds the shifted frames (empty = skip golden)"
+        required: false
+        type: string
+        default: ""
+      golden_expect_change:
+        description: "Golden scenes expected to change, comma-separated"
+        required: false
+        type: string
+        default: ""
+      golden_expect_new:
+        description: "New golden scenes, comma-separated"
+        required: false
+        type: string
+        default: ""
+
+permissions:
+  contents: read
+
+# Concurrency уровня workflow — у вызывающего `beta-derived.yml` (#716).
+
+jobs:
+  accept:
+    name: "Отпечаток, кадры и эталоны — одним коммитом в dev"
+    runs-on: ubuntu-24.04
+    timeout-minutes: 40
+    permissions:
+      contents: read
+      actions: read
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: dev
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+          cache: npm
+      - run: npm ci
+      - name: Кэш браузеров Playwright
+        id: pw
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
+        with:
+          path: ~/.cache/ms-playwright
+          key: playwright-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
+      - name: Install pinned Chromium
+        if: steps.pw.outputs.cache-hit != 'true'
+        run: npx playwright install chromium
+      - name: Build the bundle the screenshots must come from
+        run: npm run build
+      # Тот же закреплённый упаковщик, что у docs-screenshots.yml: другой
+      # переписал бы все кадры без единого изменённого пикселя.
+      - name: Установить oxipng
+        env:
+          OXIPNG_VERSION: 10.2.0
+          OXIPNG_SHA256: b33f84c73d42cb592bea5d84c431030b1e97784817693380dfcec7d9575f871e
+        run: |
+          set -euo pipefail
+          asset="oxipng-${OXIPNG_VERSION}-x86_64-unknown-linux-gnu.tar.gz"
+          curl -fsSL -o "$asset" \
+            "https://github.com/oxipng/oxipng/releases/download/v${OXIPNG_VERSION}/${asset}"
+          echo "${OXIPNG_SHA256}  ${asset}" | sha256sum -c -
+          mkdir -p "$HOME/.local/bin"
+          tar -xzf "$asset" --strip-components=1 -C "$HOME/.local/bin" \
+            "oxipng-${OXIPNG_VERSION}-x86_64-unknown-linux-gnu/oxipng"
+          echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+          "$HOME/.local/bin/oxipng" --version
+      - name: "Съёмка воспроизводима между прогонами (#410, #422)"
+        run: node scripts/capture-determinism.mjs
+      - name: Кадры документации — съёмка и приёмка
+        id: docs
+        env:
+          EXPECT: ${{ inputs.docs_expect_change }}
+        run: |
+          set -euo pipefail
+          node demo/docs/capture.mjs --stability=3
+          cand="$RUNNER_TEMP/docs-candidate"
+          rm -rf "$cand" && mkdir -p "$cand"
+          cp docs/images/*.png docs/images/screenshots.json "$cand/"
+          # Приёмка сравнивает кандидата с ЗАКОММИЧЕННЫМИ кадрами: рабочая
+          # копия возвращается к dev, и заменить файлы может только она.
+          git checkout -- docs/images
+          git clean -fdq -- docs/images
+          args=(--reviewed "--from=$cand")
+          if [ -n "$EXPECT" ]; then args+=("--expect-change=$EXPECT"); fi
+          node scripts/docs-accept.mjs "${args[@]}"
+          if git diff --quiet -- docs/images; then changed=false; else changed=true; fi
+          echo "changed=$changed" >> "$GITHUB_OUTPUT"
+          git diff --stat -- docs/images
+      - name: Сохранить кандидата скриншотов для просмотра
+        if: always()
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: docs-candidate-${{ github.run_id }}
+          path: ${{ runner.temp }}/docs-candidate
+          if-no-files-found: ignore
+          retention-days: 7
+      - name: Эталоны golden из прогона Validate
+        id: golden
+        if: inputs.golden_run != ''
+        env:
+          GH_TOKEN: ${{ github.token }}
+          RUN: ${{ inputs.golden_run }}
+          EXPECT_CHANGE: ${{ inputs.golden_expect_change }}
+          EXPECT_NEW: ${{ inputs.golden_expect_new }}
+        run: |
+          set -euo pipefail
+          case "$RUN" in ''|*[!0-9]*) echo "::error::golden_run — числовой id прогона Validate"; exit 1 ;; esac
+          meta=$(gh api "repos/${{ github.repository }}/actions/runs/$RUN" \
+            --jq '[.path, .head_branch, .status, .html_url] | @tsv')
+          IFS=$'\t' read -r path branch status url <<< "$meta"
+          # Провенанс эталонов — завершённый Validate на dev: другой workflow
+          # или ветка задачи доказательством для кандидата беты не являются.
+          if [ "$path" != ".github/workflows/validate.yml" ] || [ "$branch" != "dev" ] || [ "$status" != "completed" ]; then
+            echo "::error::прогон $RUN — не завершённый Validate на dev ($path, $branch, $status)"
+            exit 1
+          fi
+          from="$RUNNER_TEMP/golden-candidate"
+          rm -rf "$from" && mkdir -p "$from"
+          gh run download "$RUN" --repo "${{ github.repository }}" -n golden-images -D "$from"
+          # Отчёт обязан быть снят с этого же дерева: accept.mjs сверяет его
+          # отпечаток с исходниками и откажет, если dev ушёл вперёд.
+          args=(--reviewed "--from=$from")
+          if [ -n "$EXPECT_CHANGE" ]; then args+=("--expect-change=$EXPECT_CHANGE"); fi
+          if [ -n "$EXPECT_NEW" ]; then args+=("--expect-new=$EXPECT_NEW"); fi
+          node scripts/golden-accept.mjs "${args[@]}"
+          if git diff --quiet -- demo/golden/baselines; then changed=false; else changed=true; fi
+          { echo "changed=$changed"; echo "url=$url"; } >> "$GITHUB_OUTPUT"
+          git diff --stat -- demo/golden/baselines
+      - name: Коммит в dev
+        env:
+          TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
+          TAG: ${{ inputs.tag }}
+          DOCS_CHANGED: ${{ steps.docs.outputs.changed }}
+          DOCS_EXPECT: ${{ inputs.docs_expect_change }}
+          GOLDEN_CHANGED: ${{ steps.golden.outputs.changed }}
+          GOLDEN_URL: ${{ steps.golden.outputs.url }}
+          GOLDEN_EXPECT_CHANGE: ${{ inputs.golden_expect_change }}
+          GOLDEN_EXPECT_NEW: ${{ inputs.golden_expect_new }}
+          RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+          # Хук pre-push гоняет process-gate; gate:small здесь не нужен —
+          # продуктового кода коммит не несёт.
+          HP_PREPUSH_GATE: "0"
+        run: |
+          set -euo pipefail
+          git add -- docs/images demo/golden/baselines
+          if git diff --cached --quiet; then
+            echo "::notice::отпечаток, кадры и эталоны на dev уже свежие — коммитить нечего"
+            exit 0
+          fi
+          msg="$RUNNER_TEMP/message.txt"
+          {
+            echo "docs: accept derived artifacts on dev for $TAG"
+            echo ""
+            echo "Производные артефакты беты — одним коммитом на dev (PROCESS.md §8, §11.4, #697)."
+            echo "Прогон: $RUN_URL"
+            if [ "$DOCS_CHANGED" = "true" ]; then
+              echo "Скриншоты документации: отпечаток исходников; изменённые кадры: ${DOCS_EXPECT:-нет}."
+            fi
+            if [ "$GOLDEN_CHANGED" = "true" ]; then
+              echo "Golden: изменённые сцены: ${GOLDEN_EXPECT_CHANGE:-нет}; новые: ${GOLDEN_EXPECT_NEW:-нет}."
+            fi
+            echo ""
+            if [ "$GOLDEN_CHANGED" = "true" ]; then
+              echo "Release: $TAG"
+              echo "Baseline-Reviewed: $GOLDEN_URL"
+            fi
+            echo "Issue: #697"
+            echo "User-Visible: no"
+          } > "$msg"
+          git -c user.name="claude[bot]" \
+              -c user.email="209825114+claude[bot]@users.noreply.github.com" \
+              commit -q -F "$msg"
+          git show --stat --format='%H %s' HEAD | head -40
+          # #730: сдвигом dev считается только устаревший lease — отказ
+          # разбирает код слияния (merge-candidate.mjs --push-refusal, #705).
+          # Скрипт — из dev: рабочая копия и есть dev. Сдвиг — прежний совет
+          # перезапустить; отказ GitHub (право на workflow, правило ветки, хук)
+          # перезапуск не лечит: причина и ответ git без токена — в журнале и в
+          # сводке шага.
+          push_err="$RUNNER_TEMP/beta-derived-push.stderr"
+          if ! git push -q "https://x-access-token:$TOKEN@github.com/${{ github.repository }}" HEAD:dev 2> "$push_err"; then
+            kind=$(node scripts/merge-candidate.mjs --push-refusal="$push_err" --ref=dev \
+              --stage=beta-derived --summary="$GITHUB_STEP_SUMMARY") || kind=unknown
+            if [ "$kind" = "stale" ]; then
+              echo "::error::dev ушёл вперёд за время съёмки — запустить workflow заново: отпечаток судит дерево, а оно уже другое"
+            else
+              echo "::error::push производных артефактов в dev отклонён ($kind) — это не сдвиг dev, перезапуск не поможет; причина и ответ git — выше и в сводке шага"
+            fi
+            exit 1
+          fi
+          echo "### Производные артефакты $TAG" >> "$GITHUB_STEP_SUMMARY"
+          echo "Коммит \`$(git rev-parse --short HEAD)\` в dev — проверить перед кандидатом беты." >> "$GITHUB_STEP_SUMMARY"
@@ -0,0 +1,357 @@
+name: "Мутационный гейт · тело (#623)"
+
+# Реестр известных поломок (issue #85): каждый мутант ломает продуктовый код
+# известным способом, и объявленный тест ОБЯЗАН на этом покраснеть. Тест,
+# оставшийся зелёным на сломанном коде, ничего не защищает — он лишь выглядит
+# защитой, и это хуже его отсутствия.
+#
+# Прогон дорогой и проверяет не продукт, а тесты, поэтому он не входит ни в
+# Validate, ни в цикл разработки, ни в релизный гейт (#513, решение владельца
+# 09.09): каждую ночь по расписанию, отказ — issue с отчётом (#472).
+# Мутанты, задетые диффом, конвейер ревью и слияние гоняют отдельно на своём
+# кандидате (#510); кандидат беты, `full=true` и ночной Validate их не
+# запрашивают (#601) — ночью достаточно этого полного реестра.
+# Дешёвая половина — «якоря патчей живы, guard-файлы существуют» — идёт с
+# обычными юнитами: test/mutation-gate.test.mjs.
+#
+# #332: бандл собирается только мутантам с браузерным гвардом (guardNeedsBundle),
+# компиляция тестов в worktree стартует с тёплого test-build (инкрементальный
+# tsc), а реестр режется на четыре чересполосных шарда — полный прогон
+# укладывается в десятки минут вместо часов. Локальный дифф-режим:
+# node scripts/mutation-gate.mjs --changed origin/dev..HEAD
+#
+# #620: ночь по расписанию на дереве, уже доказанном зелёным полным прогоном
+# (тот же tree материала, тот же SHA workflow, маркер не старше недели), шарды не
+# гоняет — в сводке «reused from run N». Маркер пишет только зелёный агрегатор,
+# поэтому красный не переносится: следующая ночь гонит реестр заново и снова
+# заводит issue (#472). Ручной dispatch гонит полный реестр всегда. Решение —
+# чистая функция scripts/mutation-nightly-reuse.mjs.
+#
+# #623: «SHA workflow» — `job.workflow_sha`, SHA этого файла-тела. В вызываемом
+# workflow `github.workflow_sha` принадлежит вызывающему `mutation-gate.yml` из
+# main и не меняется вместе с телом, поэтому здесь он не используется.
+
+on:
+  # #623: тело вызывается тонким файлом `mutation-gate.yml` из ветки по умолчанию
+  # по ссылке `@dev`; триггеры, run-name и concurrency живут там.
+  workflow_call:
+    inputs:
+      ref:
+        description: "Git ref whose mutation guards must be proved"
+        required: false
+        type: string
+        default: dev
+
+permissions:
+  contents: read
+
+# Concurrency уровня workflow — у вызывающего `mutation-gate.yml` (#623).
+
+jobs:
+  # #549: moving ref разрешается ровно один раз. Все шарды ниже получают один
+  # commit/tree, а не самостоятельно читают dev в разное время.
+  material:
+    name: "Зафиксировать неизменяемый материал"
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    outputs:
+      sha: ${{ steps.identity.outputs.sha }}
+      tree: ${{ steps.identity.outputs.tree }}
+      ref: ${{ steps.identity.outputs.ref }}
+      reuse: ${{ steps.reuse.outputs.reuse }}
+      reused_run: ${{ steps.reuse.outputs.reused_run }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.ref || 'dev' }}
+          fetch-depth: 0
+      - name: Зафиксировать commit и tree
+        id: identity
+        run: |
+          echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
+          echo "tree=$(git rev-parse 'HEAD^{tree}')" >> "$GITHUB_OUTPUT"
+          echo "ref=${{ github.event_name == 'workflow_dispatch' && inputs.ref || 'dev' }}" >> "$GITHUB_OUTPUT"
+      # #620: самый свежий маркер зелёного прогона этого tree и этого workflow.
+      # Ключ уникален на прогон (кэш неизменяем), восстанавливается по префиксу —
+      # иначе перепроверка после недели не смогла бы освежить маркер.
+      - name: Маркер зелёного прогона этого дерева
+        if: github.event_name == 'schedule'
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
+        with:
+          path: artifacts/mutation-green
+          key: mutation-green-v1-${{ steps.identity.outputs.tree }}-${{ job.workflow_sha }}-${{ github.run_id }}
+          restore-keys: |
+            mutation-green-v1-${{ steps.identity.outputs.tree }}-${{ job.workflow_sha }}-
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+      # Любой сбой решения — полный прогон: пропуск должен быть доказан, а не
+      # выведен из ошибки. Материал без скрипта (dispatch старого ref) — тоже.
+      - name: Нужен ли прогон
+        id: reuse
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          TREE: ${{ steps.identity.outputs.tree }}
+          WORKFLOW_SHA: ${{ job.workflow_sha }}
+          RUN_URL_BASE: ${{ github.server_url }}/${{ github.repository }}/actions/runs
+        run: |
+          decision="$RUNNER_TEMP/mutation-reuse.txt"
+          if [ -f scripts/mutation-nightly-reuse.mjs ] && node scripts/mutation-nightly-reuse.mjs --decide \
+               --event="$EVENT_NAME" --tree="$TREE" --workflow-sha="$WORKFLOW_SHA" \
+               --marker=artifacts/mutation-green/marker.json \
+               --summary="$GITHUB_STEP_SUMMARY" --run-url-base="$RUN_URL_BASE" > "$decision"; then
+            cat "$decision" >> "$GITHUB_OUTPUT"
+            if grep -qx 'reuse=true' "$decision"; then
+              echo "::notice::reused from run $(sed -n 's/^reused_run=//p' "$decision")"
+            fi
+          else
+            echo "::warning::решение о повторном использовании не получено — полный прогон"
+            echo "reuse=false" >> "$GITHUB_OUTPUT"
+          fi
+
+  mutants:
+    name: "Мутанты: каждый обязан красить тесты (шард ${{ matrix.shard }} из 6)"
+    needs: material
+    if: needs.material.outputs.reuse != 'true'
+    runs-on: ubuntu-24.04
+    strategy:
+      fail-fast: false
+      matrix:
+        shard: [1, 2, 3, 4, 5, 6]
+    # Шесть чересполосных шардов (#604): при четырёх шард нёс ~203 мутанта из
+    # 810 и рос с реестром — 42 мин 10.09, 57 мин 20.09, 61 мин 21.09, и шард
+    # 2/4 был снят по потолку без единого FAIL. Делитель тот же, что у
+    # `changed_mutants` в Validate; число шардов повторяется в `--shard=i/6`,
+    # `--shards=6` и имени job — тест `mutation-gate.test.mjs` держит их
+    # равными. Бандл собирают только браузерные гварды. Час — потолок против
+    # зависшего Chromium, а не бюджет шарда: шард, упёршийся в него, — сигнал
+    # снова делить, и отчёт (#472) называет такой шард прерванным, не «ok».
+    timeout-minutes: 60
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: ${{ needs.material.outputs.sha }}
+          fetch-depth: 0
+
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+          cache: npm
+
+      - run: npm ci
+
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        with:
+          python-version: '3.14'
+
+      - name: Установить backend test dependencies
+        run: |
+          # Точные версии — в tests_backend/requirements.txt (#392): без них
+          # резолвер выбирает набор сам, и «зелёный backend» значит разное
+          # в разные дни.
+          pip install -r tests_backend/requirements.txt
+          pip list --format=columns | grep -Ei 'homeassistant|voluptuous|^pytest '
+
+      - name: Кэш браузеров Playwright
+        id: pw
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
+        with:
+          path: ~/.cache/ms-playwright
+          key: playwright-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
+
+      - name: Установить Chromium
+        if: steps.pw.outputs.cache-hit != 'true'
+        run: npx playwright install --with-deps chromium
+
+      - name: Реестр применим к текущему коду
+        run: node scripts/mutation-gate.mjs --check
+
+      - name: Тёплый test-build для инкрементальной компиляции мутантов
+        run: npx tsc -p tsconfig.test.json && node scripts/fix-test-build.mjs
+
+      # Вывод шарда сохраняется артефактом (#472): строки
+      # `FAIL <id>: тест остался зелёным…` — единственное место, где названо,
+      # ЧТО сбежало. Без артефакта отказ безымянный. `PIPESTATUS` — чтобы
+      # `tee` не съел код выхода раннера.
+      - name: Каждый тест ловит свою поломку
+        id: gate
+        run: |
+          mkdir -p artifacts/mutation-shard-${{ matrix.shard }}
+          set -o pipefail
+          node scripts/mutation-gate.mjs --shard=${{ matrix.shard }}/6 2>&1 | tee artifacts/mutation-shard-${{ matrix.shard }}/mutation-shard-${{ matrix.shard }}.log
+      # Исход шага едет в evidence (#604): снятый по timeout-minutes шаг даёт
+      # `cancelled`, и агрегатор отвергает такой шард как неполный — лог без
+      # строк FAIL сам по себе зелёным не считается.
+      - name: Записать identity шарда
+        if: always()
+        run: |
+          node scripts/mutation-gate-report.mjs \
+            --write-evidence=artifacts/mutation-shard-${{ matrix.shard }}/evidence.json \
+            --sha=${{ needs.material.outputs.sha }} \
+            --tree=${{ needs.material.outputs.tree }} \
+            --workflow-sha=${{ job.workflow_sha }} \
+            --run-id=${{ github.run_id }} --run-attempt=${{ github.run_attempt }} \
+            --shard=${{ matrix.shard }} --shards=6 \
+            --outcome=${{ steps.gate.outcome }}
+      - name: Сохранить лог и identity шарда
+        if: always()
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: mutation-shard-${{ matrix.shard }}-attempt-${{ github.run_attempt }}
+          path: artifacts/mutation-shard-${{ matrix.shard }}
+          if-no-files-found: warn
+          retention-days: 30
+
+  # Результат нельзя приписывать material, пока не доказаны все шесть шардов —
+  # каждый с identity и с дошедшим до конца прогоном (#549, #604).
+  # always() нужен при красном мутанте: лог красного шарда всё равно evidence.
+  evidence:
+    name: "Доказать единый material всех шардов"
+    needs: [material, mutants]
+    if: always() && needs.material.outputs.reuse != 'true'
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          # CLI отчётчика принадлежит зафиксированному material. В main лежит
+          # только workflow и может не быть dev-версии scripts/**.
+          ref: ${{ needs.material.outputs.sha }}
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+      - name: Забрать evidence всех попыток
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        with:
+          pattern: mutation-shard-*
+          path: artifacts/mutation-logs
+      - name: Проверить полноту и identity
+        run: |
+          node scripts/mutation-gate-report.mjs --verify-only \
+            --logs=artifacts/mutation-logs --shards=6 \
+            --sha=${{ needs.material.outputs.sha }} \
+            --tree=${{ needs.material.outputs.tree }} \
+            --workflow-sha=${{ job.workflow_sha }} \
+            --run-id=${{ github.run_id }} --run-attempt=${{ github.run_attempt }}
+
+  # #620: маркер пишется ТОЛЬКО после зелёного агрегатора — все шесть шардов
+  # доказаны на одном material. Красный или неполный прогон маркера не оставляет,
+  # и следующая ночь гонит реестр заново.
+  green_marker:
+    name: "Записать маркер зелёного прогона"
+    needs: [material, mutants, evidence]
+    if: needs.material.outputs.reuse != 'true' && needs.mutants.result == 'success' && needs.evidence.result == 'success'
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: ${{ needs.material.outputs.sha }}
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+      - name: Маркер
+        run: |
+          node scripts/mutation-nightly-reuse.mjs \
+            --write-marker=artifacts/mutation-green/marker.json \
+            --tree=${{ needs.material.outputs.tree }} \
+            --sha=${{ needs.material.outputs.sha }} \
+            --workflow-sha=${{ job.workflow_sha }} \
+            --run-id=${{ github.run_id }} --run-attempt=${{ github.run_attempt }} \
+            --event=${{ github.event_name }}
+      - name: Сохранить маркер
+        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
+        with:
+          path: artifacts/mutation-green
+          key: mutation-green-v1-${{ needs.material.outputs.tree }}-${{ job.workflow_sha }}-${{ github.run_id }}
+
+  # Адресат у отказа (#472). Только по расписанию: ручной dispatch остаётся
+  # для отладки самого гейта, его результат смотрят в прогоне — issue на
+  # каждый такой отказ был бы шумом, который снова перестанут читать.
+  #
+  # Права job-уровня ЗАМЕНЯЮТ права workflow, а не дополняют (прецедент —
+  # validate.yml, job с actions: read): перечислены все три.
+  report:
+    name: "Отказ расписания: issue и Telegram"
+    needs: [material, mutants, evidence]
+    # #620: ночь, принявшая доказательство прошлого зелёного прогона, отказом не
+    # является — её шарды пропущены намеренно. Любой другой пропуск шардов
+    # (упал material) по-прежнему заводит issue.
+    if: always() && github.event_name == 'schedule' && needs.material.outputs.reuse != 'true' && (needs.mutants.result != 'success' || needs.evidence.result != 'success')
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    permissions:
+      contents: read
+      actions: read
+      issues: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          # Не перечитываем moving dev: код отчётчика берётся из уже
+          # зафиксированного material. В стабильном main dev-скриптов нет.
+          ref: ${{ needs.material.outputs.sha }}
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+      - name: Забрать логи шардов
+        continue-on-error: true
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        with:
+          pattern: mutation-shard-*
+          path: artifacts/mutation-logs
+      - name: Собрать отчёт
+        id: report
+        env:
+          RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+        run: |
+          mkdir -p artifacts
+          node scripts/mutation-gate-report.mjs \
+            --require-evidence --logs=artifacts/mutation-logs --shards=6 \
+            --sha=${{ needs.material.outputs.sha }} \
+            --tree=${{ needs.material.outputs.tree }} \
+            --workflow-sha=${{ job.workflow_sha }} \
+            --run-id=${{ github.run_id }} --run-attempt=${{ github.run_attempt }} \
+            --run-url="$RUN_URL" --ref=${{ needs.material.outputs.ref }} \
+            --body-out=artifacts/mutation-report.md \
+            --telegram-out=artifacts/mutation-telegram.txt >> "$GITHUB_OUTPUT"
+      # Одно issue, а не одно на неделю: открытое с тем же маркером в заголовке
+      # получает комментарий, новое заводится только если открытого нет.
+      - name: Issue — создать или дописать
+        id: issue
+        env:
+          GH_TOKEN: ${{ github.token }}
+          REPO: ${{ github.repository }}
+          MARKER: ${{ steps.report.outputs.marker }}
+          TITLE: ${{ steps.report.outputs.title }}
+        run: |
+          existing=$(gh issue list --repo "$REPO" --state open --search "\"$MARKER\" in:title" \
+            --json number,title --jq '[.[] | select(.title | startswith(env.MARKER))][0].number // empty')
+          if [ -n "$existing" ]; then
+            gh issue comment "$existing" --repo "$REPO" --body-file artifacts/mutation-report.md
+            url="${{ github.server_url }}/$REPO/issues/$existing"
+          else
+            url=$(gh issue create --repo "$REPO" --title "$TITLE" \
+              --label infra --label process --label tests \
+              --body-file artifacts/mutation-report.md)
+          fi
+          echo "url=$url" >> "$GITHUB_OUTPUT"
+          echo "issue: $url"
+      # Тот же канал, что у релизов (announce.yml). Нет секретов — не отказ:
+      # issue уже заведено, а Telegram — второй адресат, не единственный.
+      - name: Telegram
+        if: always() && steps.issue.outcome == 'success'
+        env:
+          TOKEN: ${{ secrets.TELEGRAM_BOT_TOKEN }}
+          CHAT: ${{ secrets.TELEGRAM_CHAT_ID }}
+          ISSUE_URL: ${{ steps.issue.outputs.url }}
+        run: |
+          if [ -z "$TOKEN" ] || [ -z "$CHAT" ]; then
+            echo "::warning::TELEGRAM_BOT_TOKEN/TELEGRAM_CHAT_ID не заданы — оповещение пропущено, issue заведено"
+            exit 0
+          fi
+          TEXT=$(sed "s|(issue)|$ISSUE_URL|" artifacts/mutation-telegram.txt)
+          curl -sS --fail-with-body -X POST \
+            "https://api.telegram.org/bot$TOKEN/sendMessage" \
+            --data-urlencode "chat_id=$CHAT" \
+            --data-urlencode "text=$TEXT" \
+            -d disable_web_page_preview=true
@@ -0,0 +1,200 @@
+# Ночной полный прогон (#479).
+#
+# Тяжёлые job Validate — смоки, golden, performance_smoke — на обычном пуше не
+# идут: они ни разу не ловили дефект в момент ревью и стоили ~6 минут
+# критического пути на каждую итерацию. Полный набор идёт на кандидате беты
+# (трейлер `Release:`), по кнопке и здесь — каждую ночь на голове `dev`.
+#
+# Почему не `schedule` прямо в validate.yml: расписание исполняется на ветке
+# по умолчанию (`main`), а проверять надо `dev`. Один dispatch с `--ref dev`
+# делает это без переписывания checkout во всех job. Reuse (#208) сохраняется:
+# при неизменённом дереве ночной прогон обойдётся маркерами.
+#
+# Красный ночной прогон — сигнал автору последних коммитов на dev, не гейт:
+# гейт беты по-прежнему требует зелёный Validate на точном SHA кандидата, и
+# там полный набор идёт заново. Адресат сигнала (#736) — задачи, чьи коммиты
+# классов A/B вошли в dev после последней зелёной ночи: job `night_red` пишет
+# каждой один комментарий (`scripts/night-red.mjs`, PROCESS.md §10.4).
+#
+# Сигнал обязан быть настоящим (#492 §7): до этой задачи job завершалась
+# успехом в момент постановки Validate в очередь, и красный полный прогон не
+# делал ночной workflow красным. Теперь job находит запущенный прогон и ждёт
+# его: успешный dispatch — не успешная проверка.
+#
+# #727: после Validate при любом его исходе ночь запускает пакетное ревью ship
+# (`ship-review.yml -f tag=nightly`) на SHA прогона Validate: оно читает код, а
+# не прогон. Ship-задача узнаёт о дефектах в ночь после слияния, а бета читает
+# только то, что ночь не прочла (PROCESS.md §11.7). Цвет ночи — цвет Validate.
+name: "Ночной полный прогон dev · тело (#623)"
+
+on:
+  # #623: тело вызывается тонким файлом `nightly.yml` из ветки по умолчанию
+  # по ссылке `@dev`; триггеры, run-name и concurrency живут там.
+  workflow_call:
+
+permissions:
+  actions: write
+  contents: read
+
+jobs:
+  dispatch:
+    name: "Запустить Validate на dev с полным набором и дождаться результата"
+    runs-on: ubuntu-24.04
+    timeout-minutes: 90
+    outputs:
+      # #727: SHA прогона Validate — отдельным шагом до ожидания, красный Validate его не теряет.
+      head_sha: ${{ steps.validate.outputs.head_sha }}
+      # #736: прогон Validate для разбора красной ночи — тем же шагом, до ожидания.
+      run_id: ${{ steps.validate.outputs.run_id }}
+    steps:
+      # #658: при плане 02:30 UTC ночь фактически стартовала в 07:42–08:05 и
+      # кончалась в рабочее время владельца. Сдвиг старта больше часа — видимое
+      # предупреждение, а не молча съеденная ночь. `github.event.schedule` —
+      # строка cron вызывающего `nightly.yml`; NOW_EPOCH подставляет только тест.
+      - name: "Сдвиг старта ночи против расписания"
+        if: github.event_name == 'schedule'
+        env:
+          SCHEDULE: ${{ github.event.schedule }}
+        run: |
+          set -euo pipefail
+          read -r minute hour _ <<< "$SCHEDULE"
+          now=${NOW_EPOCH:-$(date -u +%s)}
+          planned=$(date -u -d "@$now" +%F)
+          planned=$(date -u -d "$planned $hour:$minute" +%s)
+          [ "$planned" -le "$now" ] || planned=$((planned - 86400))
+          lag=$(( (now - planned) / 60 ))
+          echo "- Старт по расписанию \`$SCHEDULE\` (UTC): сдвиг $lag мин" >> "$GITHUB_STEP_SUMMARY"
+          if [ "$lag" -gt 60 ]; then
+            echo "::warning::ночной прогон стартовал на $lag мин позже расписания ($SCHEDULE UTC) — очередь расписаний GitHub (#658)"
+          fi
+      - name: "Запустить Validate и найти его прогон"
+        id: validate
+        env:
+          GH_TOKEN: ${{ github.token }}
+          REPO: ${{ github.repository }}
+        run: |
+          set -euo pipefail
+          since=$(date -u +%FT%TZ)
+          gh workflow run validate.yml --repo "$REPO" --ref dev -f full=true
+          echo "Validate(dev, full=true) поставлен в очередь: $since"
+          # Найти именно этот прогон: workflow_dispatch на dev, созданный не
+          # раньше момента запуска. До трёх минут на появление в списке.
+          run_id=""
+          for _ in $(seq 1 18); do
+            sleep 10
+            run_id=$(gh run list --repo "$REPO" --workflow validate.yml --branch dev \
+              --event workflow_dispatch --json databaseId,createdAt --limit 5 \
+              --jq "[.[] | select(.createdAt >= \"$since\")] | sort_by(.createdAt) | last | .databaseId // empty")
+            [ -n "$run_id" ] && break
+          done
+          if [ -z "$run_id" ]; then
+            echo "::error::прогон Validate не появился за 3 минуты — dispatch не равен проверке"
+            exit 1
+          fi
+          url="${{ github.server_url }}/$REPO/actions/runs/$run_id"
+          echo "дочерний прогон: $url"
+          echo "- Validate(dev, full=true): $url" >> "$GITHUB_STEP_SUMMARY"
+          head_sha=$(gh run view "$run_id" --repo "$REPO" --json headSha --jq .headSha)
+          echo "run_id=$run_id" >> "$GITHUB_OUTPUT"
+          echo "head_sha=$head_sha" >> "$GITHUB_OUTPUT"
+      - name: "Дождаться Validate"
+        env:
+          GH_TOKEN: ${{ github.token }}
+          REPO: ${{ github.repository }}
+          RUN_ID: ${{ steps.validate.outputs.run_id }}
+        run: |
+          set -euo pipefail
+          run_id="$RUN_ID"
+          # Ждём завершения; красный дочерний прогон — красный ночной.
+          gh run watch "$run_id" --repo "$REPO" --exit-status --interval 30
+
+  # #727 К6: ночное пакетное ревью ship на SHA прогона Validate — при любом его
+  # исходе. Dispatch тонкого `ship-review.yml` (`github.token` порождает прогон,
+  # как у Validate; входы и права тонких файлов уже в main). Job ждёт только
+  # появления прогона, не его конца; не появился — предупреждение, не красная
+  # ночь: цвет ночи — цвет Validate.
+  ship_review:
+    name: "Запустить ночное пакетное ревью ship на SHA прогона Validate"
+    needs: dispatch
+    if: always()
+    continue-on-error: true
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    steps:
+      - name: "Запустить ship-ревью и дождаться появления прогона"
+        env:
+          GH_TOKEN: ${{ github.token }}
+          REPO: ${{ github.repository }}
+          CANDIDATE: ${{ needs.dispatch.outputs.head_sha }}
+        run: |
+          set -euo pipefail
+          if [ -z "$CANDIDATE" ]; then
+            echo "::warning::нет SHA прогона Validate — ночное ship-ревью не запущено"
+            echo "- Ship-ревью ночью: не запущено — нет SHA прогона Validate" >> "$GITHUB_STEP_SUMMARY"
+            exit 0
+          fi
+          since=$(date -u +%FT%TZ)
+          if ! gh workflow run ship-review.yml --ref dev -f tag=nightly -f candidate="$CANDIDATE" --repo "$REPO"; then
+            echo "::warning::ship-ревью ночью не запущено: dispatch отклонён — ночь не красится"
+            echo "- Ship-ревью ночью: dispatch отклонён" >> "$GITHUB_STEP_SUMMARY"
+            exit 0
+          fi
+          run_id=""
+          for _ in $(seq 1 18); do
+            sleep 10
+            run_id=$(gh run list --repo "$REPO" --workflow ship-review.yml --branch dev \
+              --event workflow_dispatch --json databaseId,createdAt --limit 5 \
+              --jq "[.[] | select(.createdAt >= \"$since\")] | sort_by(.createdAt) | last | .databaseId // empty")
+            [ -n "$run_id" ] && break
+          done
+          if [ -z "$run_id" ]; then
+            echo "::warning::прогон ship-ревью не появился за 3 минуты — ночь не красится, её цвет — цвет Validate"
+            echo "- Ship-ревью ночью (\`$CANDIDATE\`): прогон не появился за 3 минуты" >> "$GITHUB_STEP_SUMMARY"
+            exit 0
+          fi
+          echo "- Ship-ревью ночью (\`$CANDIDATE\`): ${{ github.server_url }}/$REPO/actions/runs/$run_id" >> "$GITHUB_STEP_SUMMARY"
+
+  # #736: красная ночь — один комментарий в каждую задачу, чьи коммиты классов
+  # A/B вошли в dev после последней зелёной ночи (`scripts/night-red.mjs`,
+  # PROCESS.md §10.4). Только при красном dispatch с известным прогоном;
+  # исход прогона (failure, а не cancelled/timed_out) скрипт читает сам.
+  # Actions — `github.token`, issue — `HP_PROCESS_TOKEN`: `issues: write` у
+  # ночи нет, и потолок тонкого `nightly.yml` в main не меняется. Сбой —
+  # предупреждение, не красная ночь сверх Validate.
+  night_red:
+    name: "Красная ночь: комментарий в задачи, слитые после последней зелёной"
+    needs: dispatch
+    if: always() && needs.dispatch.result == 'failure' && needs.dispatch.outputs.run_id != ''
+    continue-on-error: true
+    runs-on: ubuntu-24.04
+    timeout-minutes: 15
+    permissions:
+      actions: read
+      contents: read
+    steps:
+      # Нужны коммиты и деревья, не блобы; скрипт и его импорты — без зависимостей, npm ci не нужен.
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: dev
+          fetch-depth: 0
+          filter: blob:none
+          persist-credentials: false
+
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+
+      - name: "Комментарий в задачи диапазона от последней зелёной ночи до красной"
+        env:
+          ACTIONS_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
+          REPO: ${{ github.repository }}
+          RED_RUN: ${{ needs.dispatch.outputs.run_id }}
+        run: |
+          set -euo pipefail
+          # Сбои API, токена и git скрипт сам сводит к предупреждению; упавший
+          # скрипт — тоже предупреждение: цвет ночи — цвет Validate.
+          if ! node scripts/night-red.mjs --repo="$REPO" --red-run="$RED_RUN"; then
+            echo "::warning::красная ночь (#736): скрипт упал — комментарии не написаны; цвет ночи — цвет Validate"
+            echo "- Красная ночь (#736): скрипт упал — комментарии не написаны" >> "$GITHUB_STEP_SUMMARY"
+          fi
@@ -0,0 +1,66 @@
+name: "Метрики процесса · тело (#623)"
+
+# #637: еженедельный замер вместо ощущений — lead time S→S7→S8, раунды ревью,
+# прогоны Validate по исходам, минуты конвейера в S4/S7. Только чтение: отчёт
+# идёт в step summary и артефакт; в issue и репозиторий ничего не пишется.
+# Цифры аудита 22.09 (1,57 раунда код-ревью, S7 ≈ 36 мин/раунд, 226 Validate
+# за неделю) были собраны руками за час — теперь они стоят один запуск.
+#
+# #728: эффект процесса по трекам — отрезки, возвраты с причинами, находки
+# ship, job-минуты по стадиям и сравнение до/после 28.09. Прогон дороже:
+# jobs до 600 прогонов и таймлайны задач окна сравнения (≈ 600–800 запросов),
+# поэтому потолок 30 минут; трек инфраструктуры и объём задачи читаются из
+# истории git — нужна полная история dev.
+
+on:
+  # #623: тело вызывается тонким файлом `process-metrics.yml` из ветки по умолчанию
+  # по ссылке `@dev`; триггеры, run-name и concurrency живут там.
+  workflow_call:
+    inputs:
+      days:
+        description: "Окно в днях"
+        required: false
+        type: string
+        default: "7"
+
+permissions:
+  contents: read
+  actions: read
+  issues: read
+
+jobs:
+  metrics:
+    name: "Снимок недели: issue, раунды, прогоны"
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
+    steps:
+      # Код — из dev, как у reconcile: расписание читается из main, а исполняется
+      # версия, которую проверил CI. Полная история (#728): коммиты задачи по
+      # трейлеру `Issue: #NN` дают признак инфраструктуры и объём для сравнения.
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: dev
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+      - name: Собрать отчёт
+        env:
+          GH_TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
+          REPO: ${{ github.repository }}
+          DAYS: ${{ inputs.days || '7' }}
+        run: |
+          mkdir -p artifacts/process-metrics
+          node scripts/process-metrics.mjs --repo="$REPO" --days="$DAYS" \
+            --output=artifacts/process-metrics/report.md \
+            --json=artifacts/process-metrics/report.json > /dev/null
+          cat artifacts/process-metrics/report.md >> "$GITHUB_STEP_SUMMARY"
+      - name: Сохранить отчёт
+        if: always()
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: process-metrics-${{ github.run_id }}
+          path: artifacts/process-metrics
+          if-no-files-found: error
+          retention-days: 90
@@ -0,0 +1,57 @@
+name: "Сверка очереди ревью · тело (#623)"
+
+on:
+  # #623: тело вызывается тонким файлом `process-reconcile.yml` из ветки по умолчанию
+  # по ссылке `@dev`; триггеры, run-name и concurrency живут там.
+  workflow_call:
+    inputs:
+      apply:
+        description: "Повторно будить потерянные запросы и публиковать диагностику"
+        required: false
+        type: boolean
+        default: true
+
+permissions:
+  actions: read
+  contents: read
+  issues: read
+
+jobs:
+  reconcile:
+    name: "Один снимок S4/S7 без polling модели"
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    concurrency:
+      group: process-reconcile
+      cancel-in-progress: false
+    steps:
+      # Расписание читается из main, а исполняемый reconciler — из dev: так
+      # после штатного merge действует та же версия кода, которую проверил CI.
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: dev
+          fetch-depth: 1
+          persist-credentials: false
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+      - name: Сопоставить labels, requests, runs и sealed evidence
+        env:
+          GH_TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
+          REPO: ${{ github.repository }}
+          APPLY: ${{ github.event_name == 'schedule' || inputs.apply == true }}
+        run: |
+          mkdir -p artifacts/process-reconcile
+          node scripts/process-reconcile.mjs \
+            --repo "$REPO" \
+            --apply="$APPLY" \
+            --max-actions=5 \
+            --output=artifacts/process-reconcile/summary.json
+      - name: Опубликовать компактный machine-readable итог
+        if: always()
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: process-reconcile-${{ github.run_id }}-${{ github.run_attempt }}
+          path: artifacts/process-reconcile/summary.json
+          if-no-files-found: error
+          retention-days: 14
@@ -0,0 +1,65 @@
+name: "Продолжение ревью после Validate · тело (#623)"
+
+# #636. Стадия `prepare` конвейера (process.yml) больше не ждёт Validate с
+# мутантами на материале внутри job — раннер спал ≈ 28 минут на раунд при
+# 10–12 минутах работы модели. Она диспатчит прогон, кладёт запечатанный
+# маркер `review-pending-…` и выходит. Этот workflow просыпается на завершение
+# любого Validate и, если раунд ждал именно этот прогон (маркер на материале,
+# метка S7 стоит, активного прогона конвейера нет), переставляет метку S7 —
+# новый прогон `prepare` находит завершённый dispatch и продолжает раунд.
+# Ничего не оценивает: зелёный/красный разбирает сам конвейер. Страховка на
+# потерянное событие — process-reconcile.yml с тем же маркером.
+#
+# Для события `workflow_run` GitHub берёт workflow только из ветки по
+# умолчанию (main). Там лежит тонкий `process-resume.yml`, который вызывает
+# этот файл по ссылке `@dev` (#623); сверка тонких копий — в preflight
+# validate.yml.
+
+on:
+  # #623: тело вызывается тонким файлом `process-resume.yml` из ветки по умолчанию
+  # по ссылке `@dev`; триггеры, run-name и concurrency живут там.
+  workflow_call:
+
+permissions:
+  contents: read
+  actions: read
+
+jobs:
+  resume:
+    name: "Разбудить раунд, ждавший этот Validate"
+    if: github.event.workflow_run.event == 'workflow_dispatch' && startsWith(github.event.workflow_run.head_branch, 'issue/')
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    concurrency:
+      group: process-resume-${{ github.event.workflow_run.head_branch }}
+      cancel-in-progress: false
+    steps:
+      # Код берётся из dev, как у reconcile: после штатного слияния действует
+      # версия, которую проверил CI, а не копия из main.
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: dev
+          fetch-depth: 1
+          persist-credentials: false
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+      # Метка переставляется HP_PROCESS_TOKEN: событие от GITHUB_TOKEN не
+      # запустило бы process.yml (см. шапку process.yml, п. 1).
+      - name: Решить по маркеру ожидания и переставить S7
+        env:
+          GH_TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
+          REPO: ${{ github.repository }}
+          BRANCH: ${{ github.event.workflow_run.head_branch }}
+          SHA: ${{ github.event.workflow_run.head_sha }}
+          EVENT: ${{ github.event.workflow_run.event }}
+          STATUS: ${{ github.event.workflow_run.status }}
+          VALIDATE_RUN_ID: ${{ github.event.workflow_run.id }}
+        # #751: без pipefail код конвейера — код tee, и исключение скрипта (gh,
+        # API) проходило зелёным шагом: событие возобновления терялось до
+        # прохода process-reconcile.
+        run: |
+          set -o pipefail
+          node scripts/process-resume.mjs \
+            --repo="$REPO" --branch="$BRANCH" --sha="$SHA" \
+            --event="$EVENT" --status="$STATUS" --run-id="$VALIDATE_RUN_ID" --apply=true | tee -a "$GITHUB_STEP_SUMMARY"
@@ -0,0 +1,415 @@
+name: "Бета: пакетное ревью ship · тело (#716)"
+
+# #696, PROCESS.md §11.7: задачи `track:ship` сливаются без ревью модели —
+# правка в механических рамках и зелёный лёгкий Validate. Их код читает одна
+# сессия модели перед бетой: все ship-задачи диапазона «прошлый тег..кандидат».
+# Гейт публикации беты (`ship-review.mjs check`) требует этот документ, если в
+# диапазоне есть ship-задачи.
+#
+# Три job, как у release-review.yml (#551, #556): детерминированный вход,
+# модель без права записи, детерминированная публикация документа в `dev`.
+#
+# #727: `tag=nightly` — ночной режим. Его запускает `_nightly.yml` после
+# полного Validate с `candidate` = голова `dev` того прогона. Читаются только
+# ship-задачи без покрытия или изменившиеся после ревью (`shipCoverage`), документ —
+# `SHIP-REVIEW-<база>-dev-<sha12>.md`. Бета так же читает только дельту.
+
+on:
+  # #716: тело вызывается тонким файлом `ship-review.yml` по ссылке `@dev`;
+  # кнопка, входы ручного запуска, run-name и concurrency живут там. Без
+  # файла в ветке по умолчанию GitHub не даёт запустить workflow_dispatch вовсе.
+  workflow_call:
+    inputs:
+      # #727: `nightly` — зарезервированное значение (ночной режим, candidate обязателен).
+      tag:
+        description: "Beta tag the review is for, for example v1.79.0-beta.1"
+        required: true
+        type: string
+      candidate:
+        description: "Exact candidate SHA; empty = the dev tip"
+        required: false
+        type: string
+        default: ""
+      force:
+        description: "Review again even when the document already exists in dev"
+        required: false
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+
+# Concurrency уровня workflow — у вызывающего `ship-review.yml` (#716).
+
+jobs:
+  prepare:
+    name: "Ship-ревью: задачи диапазона"
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    permissions:
+      contents: read
+      issues: read
+    outputs:
+      proceed: ${{ steps.range.outputs.proceed }}
+      candidate: ${{ steps.range.outputs.candidate }}
+      base: ${{ steps.range.outputs.base }}
+      doc: ${{ steps.range.outputs.doc }}
+      issues: ${{ steps.range.outputs.issues }}
+      mode: ${{ steps.range.outputs.mode }}
+      patches: ${{ steps.range.outputs.patches }}
+      subject: ${{ steps.range.outputs.subject }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 0
+          ref: dev
+          persist-credentials: false
+
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+
+      - name: Кандидат, база и ship-задачи
+        id: range
+        env:
+          GH_TOKEN: ${{ github.token }}
+          TAG: ${{ inputs.tag }}
+          CANDIDATE: ${{ inputs.candidate }}
+          FORCE: ${{ inputs.force }}
+          RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+        run: |
+          # Отказ prepare за `| tee` не должен читаться как «ship-задач нет» (#727).
+          set -o pipefail
+          git fetch -q --tags origin
+          # #727: tag=nightly без candidate — отказ до подстановки вершины dev.
+          node scripts/ship-review.mjs mode --tag="$TAG" --candidate="$CANDIDATE"
+          if [ -z "$CANDIDATE" ]; then CANDIDATE=$(git rev-parse origin/dev); fi
+          git cat-file -e "$CANDIDATE^{commit}"
+          CANDIDATE=$(git rev-parse "$CANDIDATE^{commit}")
+          doc=$(node scripts/ship-review.mjs doc --tag="$TAG" --candidate="$CANDIDATE")
+          if [ "$FORCE" != "true" ] && git cat-file -e "origin/dev:$doc" 2>/dev/null; then
+            echo "::notice::$doc уже есть в dev — повторное ревью не запускается (force=true, чтобы переснять)"
+            echo "proceed=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+          out="$RUNNER_TEMP/ship-review-input"
+          node scripts/ship-review.mjs prepare --tag="$TAG" --candidate="$CANDIDATE" --force="$FORCE" \
+            --out="$out" --repo="${{ github.repository }}" --run-url="$RUN_URL" | tee "$RUNNER_TEMP/range.txt"
+          cat "$RUNNER_TEMP/range.txt" >> "$GITHUB_OUTPUT"
+          echo "candidate=$CANDIDATE" >> "$GITHUB_OUTPUT"
+          issues=$(sed -n 's/^issues=//p' "$RUNNER_TEMP/range.txt")
+          if [ -z "$issues" ]; then
+            # #727 К5: пустая дельта — все ship-задачи покрыты документами базы.
+            note=$(sed -n 's/^note=//p' "$RUNNER_TEMP/range.txt")
+            echo "::notice::${note:-ship-задач в диапазоне нет — ревью не нужно}"
+            if [ -n "$note" ]; then echo "- $note" >> "$GITHUB_STEP_SUMMARY"; fi
+            echo "proceed=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+          echo "proceed=true" >> "$GITHUB_OUTPUT"
+          (cd "$out" && sha256sum brief.md ship-issues.json > manifest.sha256)
+          cat "$out/brief.md" >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Передать вход модели
+        if: steps.range.outputs.proceed == 'true'
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: ship-review-input-${{ github.run_id }}-${{ github.run_attempt }}
+          path: ${{ runner.temp }}/ship-review-input
+          if-no-files-found: error
+          retention-days: 3
+
+  model_review:
+    name: "Ship-ревью: работа модели"
+    needs: prepare
+    if: needs.prepare.outputs.proceed == 'true'
+    runs-on: ubuntu-24.04
+    timeout-minutes: 45
+    # #737: строка расхода сессии модели (scripts/model-usage.mjs).
+    outputs:
+      usage: ${{ steps.usage.outputs.line }}
+    # Недоверенная стадия без права записи (#556): документ публикует
+    # `publish`. `github_token` у шага Review обязателен — без него action
+    # меняет OIDC на собственный App-токен с правом записи.
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 0
+          ref: ${{ needs.prepare.outputs.candidate }}
+          persist-credentials: false
+
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Получить вход
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: ship-review-input-${{ github.run_id }}-${{ github.run_attempt }}
+          path: ${{ runner.temp }}/ship-review-input
+
+      - name: Проверить вход и кандидата
+        env:
+          CANDIDATE: ${{ needs.prepare.outputs.candidate }}
+        run: |
+          (cd "$RUNNER_TEMP/ship-review-input" && sha256sum -c manifest.sha256)
+          test "$(git rev-parse HEAD)" = "$CANDIDATE"
+
+      - name: Установить зависимости
+        run: npm ci
+
+      - name: Кэш браузеров Playwright
+        id: pw
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
+        with:
+          path: ~/.cache/ms-playwright
+          key: playwright-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
+
+      - name: Установить Chromium
+        if: steps.pw.outputs.cache-hit != 'true'
+        run: npx playwright install chromium
+
+      # Тот же обход, что у конвейера (_process.yml, anthropics issue 1817).
+      - name: Установить Claude Code детерминированно
+        id: claude_bin
+        run: |
+          src=$(ls "$RUNNER_WORKSPACE"/../_actions/anthropics/claude-code-*/v1/src/entrypoints/run.ts 2>/dev/null | head -1)
+          ver=$(grep -oE 'claudeCodeVersion = "[0-9]+\.[0-9]+\.[0-9]+"' "$src" 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' || true)
+          ver="${ver:-2.1.265}"
+          base=https://downloads.claude.ai/claude-code-releases
+          bin="$HOME/.local/bin/claude"
+          mkdir -p "$(dirname "$bin")"
+          curl -fsSL --retry 3 "$base/$ver/linux-x64/claude" -o "$bin"
+          sum=$(curl -fsSL --retry 3 "$base/$ver/manifest.json" | jq -r '.platforms["linux-x64"].checksum')
+          echo "$sum  $bin" | sha256sum -c -
+          chmod +x "$bin"
+          "$bin" --version
+          echo "path=$bin" >> "$GITHUB_OUTPUT"
+
+      - name: Review
+        id: review
+        uses: anthropics/claude-code-action@9cdae7f0d995e3ba7c33f226087fdf82a59cd520 # v1
+        env:
+          REVIEW_DOC: ${{ runner.temp }}/ship-review.md
+          REVIEW_INPUT: ${{ runner.temp }}/ship-review-input
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          path_to_claude_code_executable: ${{ steps.claude_bin.outputs.path }}
+          prompt: |
+            Ты ревьюер кода проекта House Plan. Язык ответа — русский.
+
+            ${{ needs.prepare.outputs.subject }}
+            Кандидат ${{ needs.prepare.outputs.candidate }} (рабочая копия уже на нём) · база
+            диапазона: ${{ needs.prepare.outputs.base || 'нет' }}.
+            Задачи: ${{ needs.prepare.outputs.issues }} — вход в $REVIEW_INPUT/brief.md
+            (строка ТЗ каждой задачи и её коммиты) и $REVIEW_INPUT/ship-issues.json.
+
+            Эти задачи шли по треку ship и слиты в dev без ревью модели: правка
+            в механических рамках и зелёный лёгкий Validate. Ты — первый, кто
+            читает их код. Правила — docs/process/REVIEWER.md, раздел
+            «Пакетное ревью ship», канон — PROCESS.md §5 и §11.7. Прочитай их
+            первыми.
+
+            По каждой задаче: `git show <sha>` каждого коммита; делает ли код
+            то, что сказано в строке ТЗ, и только это; не ломает ли соседнее
+            поведение; не вышла ли правка из трека ship по смыслу (новый
+            UX-контракт, геометрия, конфиг, перф) — это находка Medium с
+            предложением трека. Исполняй, где дёшево: `npm test`, смоук,
+            который называет строка ТЗ или выбирает
+            `node scripts/smoke-select.mjs --base <sha>^ --head <sha>`.
+
+            Серьёзность: High — дефект, который увидит пользователь беты, или
+            правка не делает заявленного; High блокирует публикацию беты.
+            Medium — поведение вне заявленного или вне рамок трека; Low —
+            остальное. Находка чинится отдельной задачей, ты ничего не правишь.
+
+            Ты ничего не правишь и не публикуешь: ни код, ни issue, ни
+            комментарии. Права на запись у тебя нет. Любые изменения рабочей
+            копии будут отброшены — после проверок восстанови её сам
+            (`git checkout -- . && git clean -fd`), если что-то менял.
+
+            Напиши документ в файл по пути из переменной REVIEW_DOC (абсолютный,
+            вне репозитория). Первой строкой после заголовка —
+            `Итог: High N · Medium N · Low N`. Затем по задаче на раздел
+            `## #NN — заголовок`: что проверил (команда → результат), находки с
+            воспроизведением, чего не проверял.
+
+            Затем верни JSON по схеме — последнее обязательное действие.
+          claude_args: |
+            --max-turns 150
+            --allowedTools Read,Write,Grep,Glob,Bash
+            --json-schema '{"type":"object","properties":{"high":{"type":"integer"},"medium":{"type":"integer"},"low":{"type":"integer"},"summary":{"type":"string"}},"required":["high","medium","low","summary"]}'
+
+      # #737: как у конвейера (_process.yml) — расход выходом job, не через
+      # artifact; execution_file не выгружается и не печатается.
+      - name: Снять расход модели
+        id: usage
+        if: always()
+        continue-on-error: true
+        env:
+          EXEC: ${{ steps.review.outputs.execution_file }}
+        run: |
+          line=$(node scripts/model-usage.mjs --execution-file="$EXEC")
+          echo "line=$line" >> "$GITHUB_OUTPUT"
+          echo "- расход модели: \`$line\`" >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Запечатать результат модели
+        env:
+          SOURCE: ${{ runner.temp }}/ship-review.md
+          OUT: ${{ steps.review.outputs.structured_output }}
+        run: |
+          test -s "$SOURCE" || { echo "::error::модель не оставила документ ревью"; exit 1; }
+          dir="$RUNNER_TEMP/ship-review-result"
+          mkdir -p "$dir"
+          printf '%s' "$OUT" > "$dir/result.json"
+          jq -e '(.high|type=="number") and (.medium|type=="number") and (.low|type=="number") and (.summary|type=="string")' \
+            "$dir/result.json" >/dev/null
+          cp "$SOURCE" "$dir/ship-review.md"
+          (cd "$dir" && sha256sum ship-review.md result.json > manifest.sha256)
+
+      - name: Передать результат публикации
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: ship-review-result-${{ github.run_id }}-${{ github.run_attempt }}
+          path: ${{ runner.temp }}/ship-review-result
+          if-no-files-found: error
+          retention-days: 3
+
+  publish:
+    name: "Ship-ревью: документ в dev"
+    needs: [prepare, model_review]
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 0
+          ref: dev
+          persist-credentials: false
+
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+
+      - name: Получить результат модели
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: ship-review-result-${{ github.run_id }}-${{ github.run_attempt }}
+          path: ${{ runner.temp }}/ship-review-result
+
+      # Модель пишет только текст. Путь, машинный блок (его читает гейт беты),
+      # индекс и коммит решает этот шаг. #727: `mode` и `patches` блока — из
+      # prepare (детерминированный патч-набор), не из результата модели.
+      - name: Опубликовать документ
+        env:
+          TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
+          TAG: ${{ inputs.tag }}
+          DOC: ${{ needs.prepare.outputs.doc }}
+          CANDIDATE: ${{ needs.prepare.outputs.candidate }}
+          BASE: ${{ needs.prepare.outputs.base }}
+          ISSUES: ${{ needs.prepare.outputs.issues }}
+          MODE: ${{ needs.prepare.outputs.mode }}
+          PATCHES: ${{ needs.prepare.outputs.patches }}
+          RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+          # #737: расход модели — строкой сразу после блока; недоверенный ввод.
+          USAGE: ${{ needs.model_review.outputs.usage }}
+        run: |
+          dir="$RUNNER_TEMP/ship-review-result"
+          (cd "$dir" && sha256sum -c manifest.sha256)
+          test "$DOC" = "$(node scripts/ship-review.mjs doc --tag="$TAG" --candidate="$CANDIDATE")"
+          high=$(jq -r '.high' "$dir/result.json")
+          medium=$(jq -r '.medium' "$dir/result.json")
+          low=$(jq -r '.low' "$dir/result.json")
+          # Сообщение коммита — построчно в файл, без heredoc в `run:` (#730, как #723).
+          # #748: ночью — своё: имя документа без префикса, задача ночного режима.
+          if [ "$MODE" = "nightly" ]; then
+            night=${DOC##*/SHIP-REVIEW-}
+            subject="docs: nightly ship review ${night%.md}"
+            lead="Ночное пакетное ревью задач track:ship (PROCESS.md §11.7)."
+            issue="#727"
+          else
+            subject="docs: ship review for $TAG"
+            lead="Пакетное ревью задач track:ship перед бетой (PROCESS.md §11.7)."
+            issue="#696"
+          fi
+          msg="$RUNNER_TEMP/ship-review-commit.txt"
+          push_err="$RUNNER_TEMP/ship-review-push.stderr"
+          for attempt in 1 2 3; do
+            git fetch -q origin dev
+            git reset -q --hard origin/dev
+            git clean -fdq
+            mkdir -p docs/reviews
+            {
+              cat "$dir/ship-review.md"
+              printf '\n\n'
+              node -e '
+                import("./scripts/ship-review.mjs").then((m) => process.stdout.write(m.anchorBlock({
+                  tag: process.env.TAG, candidate: process.env.CANDIDATE, base: process.env.BASE || null,
+                  issues: String(process.env.ISSUES || "").split(",").filter(Boolean).map(Number),
+                  high: Number(process.argv[1]), medium: Number(process.argv[2]), low: Number(process.argv[3]),
+                  runUrl: process.env.RUN_URL, mode: process.env.MODE, patches: m.parsePatches(process.env.PATCHES),
+                  usage: process.env.USAGE ?? "",
+                })));
+              ' "$high" "$medium" "$low"
+            } > "$DOC"
+            node scripts/reviews-index.mjs --dir=docs/reviews --strict
+            git add -- "$DOC" docs/reviews/INDEX.md
+            git diff --cached --name-only | node scripts/review-doc-guard.mjs
+            {
+              echo "$subject"
+              echo ""
+              echo "$lead"
+              echo "Задачи: $ISSUES. Итог: High $high · Medium $medium · Low $low."
+              echo ""
+              echo "Issue: $issue"
+              echo "User-Visible: no"
+            } > "$msg"
+            git -c user.name="claude[bot]" \
+                -c user.email="209825114+claude[bot]@users.noreply.github.com" \
+                commit -q -F "$msg"
+            git diff --name-only "origin/dev...HEAD" | node scripts/review-doc-guard.mjs
+            if git push -q "https://x-access-token:$TOKEN@github.com/${{ github.repository }}" HEAD:dev 2> "$push_err"; then
+              echo "### Пакетное ревью ship $TAG" >> "$GITHUB_STEP_SUMMARY"
+              echo "Задачи $ISSUES · High $high · Medium $medium · Low $low — \`$DOC\` в dev." >> "$GITHUB_STEP_SUMMARY"
+              echo "::notice::$DOC опубликован: High $high · Medium $medium · Low $low"
+              exit 0
+            fi
+            # #730: сдвигом dev считается только устаревший lease — отказ
+            # разбирает код слияния (merge-candidate.mjs --push-refusal, #705),
+            # как у ревью релиза (#723). Скрипт — из dev: рабочая копия только что
+            # сброшена на origin/dev. Отказ GitHub (право на workflow, правило
+            # ветки, хук) повтор не лечит: шаг останавливается, причина и ответ
+            # git без токена — в журнале и в сводке шага.
+            kind=$(node scripts/merge-candidate.mjs --push-refusal="$push_err" --ref=dev \
+              --stage=ship-review --summary="$GITHUB_STEP_SUMMARY") || kind=unknown
+            if [ "$kind" != "stale" ]; then
+              echo "::error::push $DOC в dev отклонён ($kind) — это не сдвиг dev, повтор не поможет; причина и ответ git — выше и в сводке шага"
+              exit 1
+            fi
+            echo "::warning::dev ушёл вперёд — попытка $attempt из 3, документ собирается заново"
+            sleep $((attempt * 10))
+          done
+          echo "::error::документ ревью не опубликован в dev за три попытки"
+          exit 1
+
+      # #727 К8: High ночного документа — одна строка в каждую его задачу.
+      # Повтор на тот же документ не пишется (метка hp:ship-review-high doc=…),
+      # Medium и Low в issue не идут — их решает владелец (§11.7). Режим и
+      # High проверяет и скрипт: шаг вне ночи или без High ничего не пишет.
+      - name: High ночью — строка в задачи документа
+        if: needs.prepare.outputs.mode == 'nightly'
+        env:
+          GH_TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
+          MODE: ${{ needs.prepare.outputs.mode }}
+          DOC: ${{ needs.prepare.outputs.doc }}
+          ISSUES: ${{ needs.prepare.outputs.issues }}
+        run: |
+          high=$(jq -r '.high' "$RUNNER_TEMP/ship-review-result/result.json")
+          node scripts/ship-review.mjs comment-high --mode="$MODE" --high="$high" --doc="$DOC" \
+            --issues="$ISSUES" --repo="${{ github.repository }}"
@@ -43,7 +43,8 @@ jobs:
  telegram:
    name: Оповещение в Telegram (только стабильные)
    if: ${{ github.event_name == 'workflow_dispatch' || (github.event_name == 'workflow_call' && inputs.prerelease == false) }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
    steps:
      - name: Check out release notes for a reusable call
        if: ${{ inputs.reusable == true }}
@@ -0,0 +1,65 @@
+name: "Бета: производные артефакты на dev"
+run-name: "Derived artifacts ${{ inputs.tag }}"
+
+# Тонкий вызывающий файл (#716, устройство #623). `workflow_dispatch` GitHub
+# исполняет с выбранной ветки, но кнопку и сам запуск (`gh workflow run`)
+# даёт только workflow, чей файл лежит в ветке по умолчанию (`main`). Поэтому
+# здесь только то, что обязано жить там: триггер, входы ручного запуска,
+# run-name, права и concurrency. Тело — `_beta-derived.yml` по ссылке `@dev`:
+# правка съёмки и приёмки — один коммит в `dev`, а запуск с любой ветки (в
+# кнопке по умолчанию выбрана `main`) исполняет тело из `dev`.
+# Этот файл меняется, только когда меняются входы или потолок прав; тогда он
+# зеркалится в `main`, и preflight `workflow_sync` (validate.yml) держит копии
+# равными.
+
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Beta tag these artifacts are for, for example v1.79.0-beta.1"
+        required: true
+        type: string
+      docs_expect_change:
+        description: "Doc scenario ids expected to change, comma-separated (empty = none)"
+        required: false
+        type: string
+        default: ""
+      golden_run:
+        description: "Validate run id on dev whose golden-images artifact holds the shifted frames (empty = skip golden)"
+        required: false
+        type: string
+        default: ""
+      golden_expect_change:
+        description: "Golden scenes expected to change, comma-separated"
+        required: false
+        type: string
+        default: ""
+      golden_expect_new:
+        description: "New golden scenes, comma-separated"
+        required: false
+        type: string
+        default: ""
+
+permissions:
+  contents: read
+
+concurrency:
+  group: beta-derived
+  cancel-in-progress: false
+
+jobs:
+  # Потолок прав тела: объединение job-level прав `_beta-derived.yml`. Вызываемый
+  # workflow может права только сузить, поэтому каждая его job по-прежнему
+  # получает свой прежний минимум (#556), а шире этого набора не получит никто.
+  dev:
+    permissions:
+      contents: read
+      actions: read
+    uses: Matysh/houseplan-card/.github/workflows/_beta-derived.yml@dev # #716: тело съёмки и приёмки из dev
+    with:
+      tag: ${{ inputs.tag }}
+      docs_expect_change: ${{ inputs.docs_expect_change }}
+      golden_run: ${{ inputs.golden_run }}
+      golden_expect_change: ${{ inputs.golden_expect_change }}
+      golden_expect_new: ${{ inputs.golden_expect_new }}
+    secrets: inherit
@@ -31,7 +31,8 @@ permissions:
 jobs:
  capture:
    name: Съёмка и сверка скриншот-индекса
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
@@ -1,24 +1,12 @@
 name: Мутационный гейт

-# Реестр известных поломок (issue #85): каждый мутант ломает продуктовый код
-# известным способом, и объявленный тест ОБЯЗАН на этом покраснеть. Тест,
-# оставшийся зелёным на сломанном коде, ничего не защищает — он лишь выглядит
-# защитой, и это хуже его отсутствия.
-#
-# Прогон дорогой и проверяет не продукт, а тесты, поэтому он не входит ни в
-# Validate, ни в цикл разработки, ни в релизный гейт (#513, решение владельца
-# 09.09): каждую ночь по расписанию, отказ — issue с отчётом (#472).
-# Мутанты, задетые диффом, конвейер ревью и слияние гоняют отдельно на своём
-# кандидате (#510); кандидат беты, `full=true` и ночной Validate их не
-# запрашивают (#601) — ночью достаточно этого полного реестра.
-# Дешёвая половина — «якоря патчей живы, guard-файлы существуют» — идёт с
-# обычными юнитами: test/mutation-gate.test.mjs.
-#
-# #332: бандл собирается только мутантам с браузерным гвардом (guardNeedsBundle),
-# компиляция тестов в worktree стартует с тёплого test-build (инкрементальный
-# tsc), а реестр режется на четыре чересполосных шарда — полный прогон
-# укладывается в десятки минут вместо часов. Локальный дифф-режим:
-# node scripts/mutation-gate.mjs --changed origin/dev..HEAD
+# Тонкий вызывающий файл (#623). Для этого события GitHub берёт workflow из
+# ветки по умолчанию (`main`), поэтому здесь только то, что обязано жить там:
+# триггеры, run-name, права и concurrency. Тело — `_mutation-gate.yml` по ссылке
+# `@dev`: правка конвейера — один коммит в `dev`, зеркало в `main` не нужно.
+# Этот файл меняется, только когда меняются сами триггеры или потолок прав;
+# тогда он зеркалится в `main`, и preflight `workflow_sync` (validate.yml)
+# держит копии равными.

 on:
  workflow_dispatch:
@@ -28,9 +16,10 @@ on:
        required: false
        default: dev
  schedule:
-    # Каждую ночь, 01:00 UTC (04:00 MSK) — после суток правок и до ночного
-    # полного Validate (nightly.yml, 02:30 UTC), чтобы не делить раннеры (#513).
-    - cron: '0 1 * * *'
+    # Каждую ночь, 00:43 UTC (03:43 MSK) — после суток правок и до ночного
+    # полного Validate (nightly.yml, 02:17 UTC), чтобы не делить раннеры (#513).
+    # Минута не круглая: такие старты GitHub сдвигает меньше (#658).
+    - cron: '43 0 * * *'

 permissions:
  contents: read
@@ -45,233 +34,15 @@ concurrency:
  cancel-in-progress: true

 jobs:
-  # #549: moving ref разрешается ровно один раз. Все шарды ниже получают один
-  # commit/tree, а не самостоятельно читают dev в разное время.
-  material:
-    name: "Зафиксировать неизменяемый материал"
-    runs-on: ubuntu-latest
-    outputs:
-      sha: ${{ steps.identity.outputs.sha }}
-      tree: ${{ steps.identity.outputs.tree }}
-      ref: ${{ steps.identity.outputs.ref }}
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.ref || 'dev' }}
-          fetch-depth: 0
-      - name: Зафиксировать commit и tree
-        id: identity
-        run: |
-          echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
-          echo "tree=$(git rev-parse 'HEAD^{tree}')" >> "$GITHUB_OUTPUT"
-          echo "ref=${{ github.event_name == 'workflow_dispatch' && inputs.ref || 'dev' }}" >> "$GITHUB_OUTPUT"
-
-  mutants:
-    name: "Мутанты: каждый обязан красить тесты (шард ${{ matrix.shard }} из 6)"
-    needs: material
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        shard: [1, 2, 3, 4, 5, 6]
-    # Шесть чересполосных шардов (#604): при четырёх шард нёс ~203 мутанта из
-    # 810 и рос с реестром — 42 мин 10.09, 57 мин 20.09, 61 мин 21.09, и шард
-    # 2/4 был снят по потолку без единого FAIL. Делитель тот же, что у
-    # `changed_mutants` в Validate; число шардов повторяется в `--shard=i/6`,
-    # `--shards=6` и имени job — тест `mutation-gate.test.mjs` держит их
-    # равными. Бандл собирают только браузерные гварды. Час — потолок против
-    # зависшего Chromium, а не бюджет шарда: шард, упёршийся в него, — сигнал
-    # снова делить, и отчёт (#472) называет такой шард прерванным, не «ok».
-    timeout-minutes: 60
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          ref: ${{ needs.material.outputs.sha }}
-          fetch-depth: 0
-
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
-        with:
-          node-version: 22
-          cache: npm
-
-      - run: npm ci
-
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
-        with:
-          python-version: '3.14'
-
-      - name: Установить backend test dependencies
-        run: |
-          # Точные версии — в tests_backend/requirements.txt (#392): без них
-          # резолвер выбирает набор сам, и «зелёный backend» значит разное
-          # в разные дни.
-          pip install -r tests_backend/requirements.txt
-          pip list --format=columns | grep -Ei 'homeassistant|voluptuous|^pytest '
-
-      - name: Кэш браузеров Playwright
-        id: pw
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
-        with:
-          path: ~/.cache/ms-playwright
-          key: playwright-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
-
-      - name: Установить Chromium
-        if: steps.pw.outputs.cache-hit != 'true'
-        run: npx playwright install --with-deps chromium
-
-      - name: Реестр применим к текущему коду
-        run: node scripts/mutation-gate.mjs --check
-
-      - name: Тёплый test-build для инкрементальной компиляции мутантов
-        run: npx tsc -p tsconfig.test.json && node scripts/fix-test-build.mjs
-
-      # Вывод шарда сохраняется артефактом (#472): строки
-      # `FAIL <id>: тест остался зелёным…` — единственное место, где названо,
-      # ЧТО сбежало. Без артефакта отказ безымянный. `PIPESTATUS` — чтобы
-      # `tee` не съел код выхода раннера.
-      - name: Каждый тест ловит свою поломку
-        id: gate
-        run: |
-          mkdir -p artifacts/mutation-shard-${{ matrix.shard }}
-          set -o pipefail
-          node scripts/mutation-gate.mjs --shard=${{ matrix.shard }}/6 2>&1 | tee artifacts/mutation-shard-${{ matrix.shard }}/mutation-shard-${{ matrix.shard }}.log
-      # Исход шага едет в evidence (#604): снятый по timeout-minutes шаг даёт
-      # `cancelled`, и агрегатор отвергает такой шард как неполный — лог без
-      # строк FAIL сам по себе зелёным не считается.
-      - name: Записать identity шарда
-        if: always()
-        run: |
-          node scripts/mutation-gate-report.mjs \
-            --write-evidence=artifacts/mutation-shard-${{ matrix.shard }}/evidence.json \
-            --sha=${{ needs.material.outputs.sha }} \
-            --tree=${{ needs.material.outputs.tree }} \
-            --workflow-sha=${{ github.workflow_sha }} \
-            --run-id=${{ github.run_id }} --run-attempt=${{ github.run_attempt }} \
-            --shard=${{ matrix.shard }} --shards=6 \
-            --outcome=${{ steps.gate.outcome }}
-      - name: Сохранить лог и identity шарда
-        if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-        with:
-          name: mutation-shard-${{ matrix.shard }}-attempt-${{ github.run_attempt }}
-          path: artifacts/mutation-shard-${{ matrix.shard }}
-          if-no-files-found: warn
-          retention-days: 30
-
-  # Результат нельзя приписывать material, пока не доказаны все шесть шардов —
-  # каждый с identity и с дошедшим до конца прогоном (#549, #604).
-  # always() нужен при красном мутанте: лог красного шарда всё равно evidence.
-  evidence:
-    name: "Доказать единый material всех шардов"
-    needs: [material, mutants]
-    if: always()
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          # CLI отчётчика принадлежит зафиксированному material. В main лежит
-          # только workflow и может не быть dev-версии scripts/**.
-          ref: ${{ needs.material.outputs.sha }}
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
-        with:
-          node-version: 22
-      - name: Забрать evidence всех попыток
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
-        with:
-          pattern: mutation-shard-*
-          path: artifacts/mutation-logs
-      - name: Проверить полноту и identity
-        run: |
-          node scripts/mutation-gate-report.mjs --verify-only \
-            --logs=artifacts/mutation-logs --shards=6 \
-            --sha=${{ needs.material.outputs.sha }} \
-            --tree=${{ needs.material.outputs.tree }} \
-            --workflow-sha=${{ github.workflow_sha }} \
-            --run-id=${{ github.run_id }} --run-attempt=${{ github.run_attempt }}
-
-  # Адресат у отказа (#472). Только по расписанию: ручной dispatch остаётся
-  # для отладки самого гейта, его результат смотрят в прогоне — issue на
-  # каждый такой отказ был бы шумом, который снова перестанут читать.
-  #
-  # Права job-уровня ЗАМЕНЯЮТ права workflow, а не дополняют (прецедент —
-  # validate.yml, job с actions: read): перечислены все три.
-  report:
-    name: "Отказ расписания: issue и Telegram"
-    needs: [material, mutants, evidence]
-    if: always() && github.event_name == 'schedule' && (needs.mutants.result != 'success' || needs.evidence.result != 'success')
-    runs-on: ubuntu-latest
+  # Потолок прав тела: объединение job-level прав `_mutation-gate.yml`. Вызываемый
+  # workflow может права только сузить, поэтому каждая его job по-прежнему
+  # получает свой прежний минимум (#556), а шире этого набора не получит никто.
+  dev:
    permissions:
      contents: read
      actions: read
      issues: write
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          # Не перечитываем moving dev: код отчётчика берётся из уже
-          # зафиксированного material. В стабильном main dev-скриптов нет.
-          ref: ${{ needs.material.outputs.sha }}
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
-        with:
-          node-version: 22
-      - name: Забрать логи шардов
-        continue-on-error: true
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
-        with:
-          pattern: mutation-shard-*
-          path: artifacts/mutation-logs
-      - name: Собрать отчёт
-        id: report
-        env:
-          RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
-        run: |
-          mkdir -p artifacts
-          node scripts/mutation-gate-report.mjs \
-            --require-evidence --logs=artifacts/mutation-logs --shards=6 \
-            --sha=${{ needs.material.outputs.sha }} \
-            --tree=${{ needs.material.outputs.tree }} \
-            --workflow-sha=${{ github.workflow_sha }} \
-            --run-id=${{ github.run_id }} --run-attempt=${{ github.run_attempt }} \
-            --run-url="$RUN_URL" --ref=${{ needs.material.outputs.ref }} \
-            --body-out=artifacts/mutation-report.md \
-            --telegram-out=artifacts/mutation-telegram.txt >> "$GITHUB_OUTPUT"
-      # Одно issue, а не одно на неделю: открытое с тем же маркером в заголовке
-      # получает комментарий, новое заводится только если открытого нет.
-      - name: Issue — создать или дописать
-        id: issue
-        env:
-          GH_TOKEN: ${{ github.token }}
-          REPO: ${{ github.repository }}
-          MARKER: ${{ steps.report.outputs.marker }}
-          TITLE: ${{ steps.report.outputs.title }}
-        run: |
-          existing=$(gh issue list --repo "$REPO" --state open --search "\"$MARKER\" in:title" \
-            --json number,title --jq '[.[] | select(.title | startswith(env.MARKER))][0].number // empty')
-          if [ -n "$existing" ]; then
-            gh issue comment "$existing" --repo "$REPO" --body-file artifacts/mutation-report.md
-            url="${{ github.server_url }}/$REPO/issues/$existing"
-          else
-            url=$(gh issue create --repo "$REPO" --title "$TITLE" \
-              --label infra --label process --label tests \
-              --body-file artifacts/mutation-report.md)
-          fi
-          echo "url=$url" >> "$GITHUB_OUTPUT"
-          echo "issue: $url"
-      # Тот же канал, что у релизов (announce.yml). Нет секретов — не отказ:
-      # issue уже заведено, а Telegram — второй адресат, не единственный.
-      - name: Telegram
-        if: always() && steps.issue.outcome == 'success'
-        env:
-          TOKEN: ${{ secrets.TELEGRAM_BOT_TOKEN }}
-          CHAT: ${{ secrets.TELEGRAM_CHAT_ID }}
-          ISSUE_URL: ${{ steps.issue.outputs.url }}
-        run: |
-          if [ -z "$TOKEN" ] || [ -z "$CHAT" ]; then
-            echo "::warning::TELEGRAM_BOT_TOKEN/TELEGRAM_CHAT_ID не заданы — оповещение пропущено, issue заведено"
-            exit 0
-          fi
-          TEXT=$(sed "s|(issue)|$ISSUE_URL|" artifacts/mutation-telegram.txt)
-          curl -sS --fail-with-body -X POST \
-            "https://api.telegram.org/bot$TOKEN/sendMessage" \
-            --data-urlencode "chat_id=$CHAT" \
-            --data-urlencode "text=$TEXT" \
-            -d disable_web_page_preview=true
+    uses: Matysh/houseplan-card/.github/workflows/_mutation-gate.yml@dev # #623: тело конвейера из dev
+    with:
+      ref: ${{ inputs.ref }}
+    secrets: inherit
@@ -1,28 +1,18 @@
-# Ночной полный прогон (#479).
-#
-# Тяжёлые job Validate — смоки, golden, performance_smoke — на обычном пуше не
-# идут: они ни разу не ловили дефект в момент ревью и стоили ~6 минут
-# критического пути на каждую итерацию. Полный набор идёт на кандидате беты
-# (трейлер `Release:`), по кнопке и здесь — каждую ночь на голове `dev`.
-#
-# Почему не `schedule` прямо в validate.yml: расписание исполняется на ветке
-# по умолчанию (`main`), а проверять надо `dev`. Один dispatch с `--ref dev`
-# делает это без переписывания checkout во всех job. Reuse (#208) сохраняется:
-# при неизменённом дереве ночной прогон обойдётся маркерами.
-#
-# Красный ночной прогон — сигнал автору последних коммитов на dev, не гейт:
-# гейт беты по-прежнему требует зелёный Validate на точном SHA кандидата, и
-# там полный набор идёт заново.
-#
-# Сигнал обязан быть настоящим (#492 §7): до этой задачи job завершалась
-# успехом в момент постановки Validate в очередь, и красный полный прогон не
-# делал ночной workflow красным. Теперь job находит запущенный прогон и ждёт
-# его: успешный dispatch — не успешная проверка.
 name: Ночной полный прогон dev

+# Тонкий вызывающий файл (#623). Для этого события GitHub берёт workflow из
+# ветки по умолчанию (`main`), поэтому здесь только то, что обязано жить там:
+# триггеры, run-name, права и concurrency. Тело — `_nightly.yml` по ссылке
+# `@dev`: правка конвейера — один коммит в `dev`, зеркало в `main` не нужно.
+# Этот файл меняется, только когда меняются сами триггеры или потолок прав;
+# тогда он зеркалится в `main`, и preflight `workflow_sync` (validate.yml)
+# держит копии равными.
+
 on:
+  # 02:17 UTC, не на круглой минуте: старты «ровно в час/полчаса» GitHub
+  # откладывает на часы (факт — 07:42–08:05 при плане 02:30, #658).
  schedule:
-    - cron: '30 2 * * *'
+    - cron: '17 2 * * *'
  workflow_dispatch: {}

 permissions:
@@ -30,35 +20,12 @@ permissions:
  contents: read

 jobs:
-  dispatch:
-    name: "Запустить Validate на dev с полным набором и дождаться результата"
-    runs-on: ubuntu-latest
-    timeout-minutes: 90
-    steps:
-      - env:
-          GH_TOKEN: ${{ github.token }}
-          REPO: ${{ github.repository }}
-        run: |
-          set -euo pipefail
-          since=$(date -u +%FT%TZ)
-          gh workflow run validate.yml --repo "$REPO" --ref dev -f full=true
-          echo "Validate(dev, full=true) поставлен в очередь: $since"
-          # Найти именно этот прогон: workflow_dispatch на dev, созданный не
-          # раньше момента запуска. До трёх минут на появление в списке.
-          run_id=""
-          for _ in $(seq 1 18); do
-            sleep 10
-            run_id=$(gh run list --repo "$REPO" --workflow validate.yml --branch dev \
-              --event workflow_dispatch --json databaseId,createdAt --limit 5 \
-              --jq "[.[] | select(.createdAt >= \"$since\")] | sort_by(.createdAt) | last | .databaseId // empty")
-            [ -n "$run_id" ] && break
-          done
-          if [ -z "$run_id" ]; then
-            echo "::error::прогон Validate не появился за 3 минуты — dispatch не равен проверке"
-            exit 1
-          fi
-          url="${{ github.server_url }}/$REPO/actions/runs/$run_id"
-          echo "дочерний прогон: $url"
-          echo "- Validate(dev, full=true): $url" >> "$GITHUB_STEP_SUMMARY"
-          # Ждём завершения; красный дочерний прогон — красный ночной.
-          gh run watch "$run_id" --repo "$REPO" --exit-status --interval 30
+  # Потолок прав тела: объединение job-level прав `_nightly.yml`. Вызываемый
+  # workflow может права только сузить, поэтому каждая его job по-прежнему
+  # получает свой прежний минимум (#556), а шире этого набора не получит никто.
+  dev:
+    permissions:
+      actions: write
+      contents: read
+    uses: Matysh/houseplan-card/.github/workflows/_nightly.yml@dev # #623: тело конвейера из dev
+    secrets: inherit
@@ -6,8 +6,12 @@ on:
  push:
    branches:
      - main
+    paths-ignore:
+      - ".github/workflows/**"
+      - "docs/**"
  schedule:
-    - cron: "0 4 * * 1"
+    # Минута не круглая (#658): доходит до main вместе со стабильным релизом.
+    - cron: "11 4 * * 1"
  workflow_dispatch:
    inputs:
      comparison_ref:
@@ -28,7 +32,7 @@ jobs:
    # Every profile keeps base and candidate sequential on one hosted runner.
    # Independent profile pairs run in parallel: cross-profile timing is never
    # compared, while serialising all profile pairs cannot fit the job timeout.
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
    timeout-minutes: 60
    strategy:
      fail-fast: false
@@ -36,6 +40,7 @@ jobs:
        profile:
          - large-house
          - isometric
+          - isometric-backdrop
          - isometric-stage3
          - plan-snap
          - interaction
@@ -130,6 +135,10 @@ jobs:
              npm run benchmark:large-house-isometric -- --target-root=../baseline --samples=7 --warmups=1 --output=../artifacts/performance/isometric-baseline.json
              npm run benchmark:large-house-isometric -- --target-root=. --samples=7 --warmups=1 --output=../artifacts/performance/isometric-candidate.json
              ;;
+            isometric-backdrop)
+              npm run benchmark:large-house-isometric-backdrop -- --target-root=../baseline --samples=7 --warmups=1 --output=../artifacts/performance/isometric-backdrop-baseline.json
+              npm run benchmark:large-house-isometric-backdrop -- --target-root=. --samples=7 --warmups=1 --output=../artifacts/performance/isometric-backdrop-candidate.json
+              ;;
            isometric-stage3)
              npm run benchmark:isometric-stage3-dense -- --allow-stage2-base --target-root=../baseline --samples=7 --warmups=1 --output=../artifacts/performance/isometric-stage3-baseline.json
              npm run benchmark:isometric-stage3-dense -- --target-root=. --samples=7 --warmups=1 --output=../artifacts/performance/isometric-stage3-candidate.json
@@ -184,6 +193,9 @@ jobs:
            isometric)
              npm run benchmark:compare -- --budgets=demo/performance/budgets-large-house-isometric.json --baseline=../artifacts/performance/isometric-baseline.json --candidate=../artifacts/performance/isometric-candidate.json --baseline-sha="$(git -C ../baseline rev-parse HEAD)" --candidate-sha="$(git rev-parse HEAD)" --output=../artifacts/performance/isometric-comparison.json
              ;;
+            isometric-backdrop)
+              npm run benchmark:compare -- --budgets=demo/performance/budgets-large-house-isometric-backdrop.json --baseline=../artifacts/performance/isometric-backdrop-baseline.json --candidate=../artifacts/performance/isometric-backdrop-candidate.json --baseline-sha="$(git -C ../baseline rev-parse HEAD)" --candidate-sha="$(git rev-parse HEAD)" --output=../artifacts/performance/isometric-backdrop-comparison.json
+              ;;
            isometric-stage3)
              npm run benchmark:compare -- --budgets=demo/performance/budgets-isometric-stage3-dense.json --baseline=../artifacts/performance/isometric-stage3-baseline.json --candidate=../artifacts/performance/isometric-stage3-candidate.json --baseline-sha="$(git -C ../baseline rev-parse HEAD)" --candidate-sha="$(git rev-parse HEAD)" --output=../artifacts/performance/isometric-stage3-comparison.json
              ;;
@@ -0,0 +1,41 @@
+name: Метрики процесса
+
+# Тонкий вызывающий файл (#623). Для этого события GitHub берёт workflow из
+# ветки по умолчанию (`main`), поэтому здесь только то, что обязано жить там:
+# триггеры, run-name, права и concurrency. Тело — `_process-metrics.yml` по ссылке
+# `@dev`: правка конвейера — один коммит в `dev`, зеркало в `main` не нужно.
+# Этот файл меняется, только когда меняются сами триггеры или потолок прав;
+# тогда он зеркалится в `main`, и preflight `workflow_sync` (validate.yml)
+# держит копии равными.
+
+on:
+  schedule:
+    # Понедельник 05:23 UTC — после ночных прогонов, до рабочего дня; минута
+    # не круглая, чтобы не стоять в очереди «ровных» расписаний (#658).
+    - cron: '23 5 * * 1'
+  workflow_dispatch:
+    inputs:
+      days:
+        description: "Окно в днях"
+        required: false
+        default: "7"
+        type: string
+
+permissions:
+  contents: read
+  actions: read
+  issues: read
+
+jobs:
+  # Потолок прав тела: объединение job-level прав `_process-metrics.yml`. Вызываемый
+  # workflow может права только сузить, поэтому каждая его job по-прежнему
+  # получает свой прежний минимум (#556), а шире этого набора не получит никто.
+  dev:
+    permissions:
+      contents: read
+      actions: read
+      issues: read
+    uses: Matysh/houseplan-card/.github/workflows/_process-metrics.yml@dev # #623: тело конвейера из dev
+    with:
+      days: ${{ inputs.days }}
+    secrets: inherit
@@ -1,6 +1,14 @@
 name: Сверка очереди ревью
 run-name: "reconcile process queue · ${{ github.event_name }}"

+# Тонкий вызывающий файл (#623). Для этого события GitHub берёт workflow из
+# ветки по умолчанию (`main`), поэтому здесь только то, что обязано жить там:
+# триггеры, run-name, права и concurrency. Тело — `_process-reconcile.yml` по ссылке
+# `@dev`: правка конвейера — один коммит в `dev`, зеркало в `main` не нужно.
+# Этот файл меняется, только когда меняются сами триггеры или потолок прав;
+# тогда он зеркалится в `main`, и preflight `workflow_sync` (validate.yml)
+# держит копии равными.
+
 on:
  schedule:
    - cron: '7,37 * * * *'
@@ -18,41 +26,15 @@ permissions:
  issues: read

 jobs:
-  reconcile:
-    name: "Один снимок S4/S7 без polling модели"
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    concurrency:
-      group: process-reconcile
-      cancel-in-progress: false
-    steps:
-      # Расписание читается из main, а исполняемый reconciler — из dev: так
-      # после штатного merge действует та же версия кода, которую проверил CI.
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with:
-          ref: dev
-          fetch-depth: 1
-          persist-credentials: false
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
-        with:
-          node-version: 22
-      - name: Сопоставить labels, requests, runs и sealed evidence
-        env:
-          GH_TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
-          REPO: ${{ github.repository }}
-          APPLY: ${{ github.event_name == 'schedule' || inputs.apply == true }}
-        run: |
-          mkdir -p artifacts/process-reconcile
-          node scripts/process-reconcile.mjs \
-            --repo "$REPO" \
-            --apply="$APPLY" \
-            --max-actions=5 \
-            --output=artifacts/process-reconcile/summary.json
-      - name: Опубликовать компактный machine-readable итог
-        if: always()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
-        with:
-          name: process-reconcile-${{ github.run_id }}-${{ github.run_attempt }}
-          path: artifacts/process-reconcile/summary.json
-          if-no-files-found: error
-          retention-days: 14
+  # Потолок прав тела: объединение job-level прав `_process-reconcile.yml`. Вызываемый
+  # workflow может права только сузить, поэтому каждая его job по-прежнему
+  # получает свой прежний минимум (#556), а шире этого набора не получит никто.
+  dev:
+    permissions:
+      actions: read
+      contents: read
+      issues: read
+    uses: Matysh/houseplan-card/.github/workflows/_process-reconcile.yml@dev # #623: тело конвейера из dev
+    with:
+      apply: ${{ inputs.apply == true }}
+    secrets: inherit
@@ -0,0 +1,33 @@
+name: Продолжение ревью после Validate
+run-name: "resume · ${{ github.event.workflow_run.head_branch }} · ${{ github.event.workflow_run.conclusion }}"
+
+# Тонкий вызывающий файл (#623). Для этого события GitHub берёт workflow из
+# ветки по умолчанию (`main`), поэтому здесь только то, что обязано жить там:
+# триггеры, run-name, права и concurrency. Тело — `_process-resume.yml` по ссылке
+# `@dev`: правка конвейера — один коммит в `dev`, зеркало в `main` не нужно.
+# Этот файл меняется, только когда меняются сами триггеры или потолок прав;
+# тогда он зеркалится в `main`, и preflight `workflow_sync` (validate.yml)
+# держит копии равными.
+
+on:
+  workflow_run:
+    workflows: ["Проверка (CI)"]
+    types: [completed]
+
+permissions:
+  contents: read
+  actions: read
+
+jobs:
+  # Потолок прав тела: объединение job-level прав `_process-resume.yml`. Вызываемый
+  # workflow может права только сузить, поэтому каждая его job по-прежнему
+  # получает свой прежний минимум (#556), а шире этого набора не получит никто.
+  dev:
+    # Тот же фильтр, что у job `resume` тела: посторонние события не
+    # поднимают вызов, а прогон остаётся skipped, как до #623.
+    if: github.event.workflow_run.event == 'workflow_dispatch' && startsWith(github.event.workflow_run.head_branch, 'issue/')
+    permissions:
+      contents: read
+      actions: read
+    uses: Matysh/houseplan-card/.github/workflows/_process-resume.yml@dev # #623: тело конвейера из dev
+    secrets: inherit
@@ -21,7 +21,9 @@ concurrency:
 jobs:
  gate:
    name: "Гейт: зелёная Проверка и релизный контракт"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    # Больше ожидания зелёного Validate в release-gate.mjs (до 60 мин) (#658).
+    timeout-minutes: 75
    outputs:
      sha: ${{ steps.candidate.outputs.sha }}
      tag: ${{ steps.candidate.outputs.tag }}
@@ -89,6 +91,14 @@ jobs:
          REPO: ${{ github.repository }}
          SHA: ${{ steps.candidate.outputs.sha }}
        run: node scripts/release-gate.mjs "$SHA"
+      # #696, PROCESS.md §11.7: задачи track:ship слиты без ревью модели — бета
+      # публикуется, только когда их код прочитало пакетное ревью диапазона.
+      - name: Ship tasks of the range are batch-reviewed
+        env:
+          GH_TOKEN: ${{ github.token }}
+          TAG: ${{ steps.candidate.outputs.tag }}
+          SHA: ${{ steps.candidate.outputs.sha }}
+        run: node scripts/ship-review.mjs check --tag="$TAG" --candidate="$SHA" --repo="$GITHUB_REPOSITORY"
      - name: Bind issue membership to the exact candidate
        env:
          GH_TOKEN: ${{ github.token }}
@@ -122,7 +132,8 @@ jobs:
  publish:
    name: Публикация тега и релиза
    needs: gate
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
    outputs:
      url: ${{ steps.verify.outputs.url }}
      newly_published: ${{ steps.release.outputs.newly_published }}
@@ -289,7 +300,8 @@ jobs:
  close-merged:
    name: Закрытие вошедших issue
    needs: [gate, publish]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 15
    permissions:
      contents: read
      actions: read
@@ -0,0 +1,361 @@
+name: "Релиз: независимое ревью линии"
+run-name: "Release review ${{ inputs.tag }}"
+
+# #638, PROCESS.md §11.5: перед стабильным релизом — одно независимое ревью
+# поверхностей, изменённых всей линией бет, «с нуля»: без ТЗ и документов
+# раундов, по SCOPE и USER-GUIDE. Инкрементальное ревью судит дифф задачи
+# против её ТЗ; четыре дефекта линии 1.77 (#607, #608, #611, #619) не входили
+# ни в один AC и нашлись только так.
+#
+# Решение владельца 2026-09-25: ревью НЕ блокирует выпуск. `release.yml`
+# запускает этот workflow параллельно гейтам из job, от которого не зависит ни
+# один job выпуска; документ — рекомендация, в работу его берёт владелец.
+#
+# Только `workflow_dispatch`: GitHub исполняет файл с той ветки, на которой
+# запущен прогон (`release.yml` зовёт `--ref dev`), поэтому зеркало в `main`
+# не нужно, а правка — один коммит в `dev`.
+#
+# Три job, как у конвейера (#551, #556): детерминированная подготовка,
+# недоверенная модель без единого права на запись, детерминированная
+# публикация документа в `dev`.
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Stable release tag, for example v1.78.0"
+        required: true
+        type: string
+      candidate:
+        description: "Exact candidate SHA; empty = the commit of the tag"
+        required: false
+        type: string
+        default: ""
+      force:
+        description: "Review again even when the document already exists in dev"
+        required: false
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+
+concurrency:
+  group: release-review-${{ inputs.tag }}
+  cancel-in-progress: false
+
+jobs:
+  prepare:
+    name: "Ревью релиза: вход линии"
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    permissions:
+      contents: read
+    outputs:
+      proceed: ${{ steps.line.outputs.proceed }}
+      candidate: ${{ steps.line.outputs.candidate }}
+      base: ${{ steps.line.outputs.base }}
+      doc: ${{ steps.line.outputs.doc }}
+      issues: ${{ steps.line.outputs.issues }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 0
+          ref: dev
+          persist-credentials: false
+
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+
+      - name: Кандидат, база и issue линии
+        id: line
+        env:
+          TAG: ${{ inputs.tag }}
+          CANDIDATE: ${{ inputs.candidate }}
+          FORCE: ${{ inputs.force }}
+          RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+        run: |
+          # Отказ prepare за `| tee` не должен идти дальше с неполным
+          # GITHUB_OUTPUT и proceed=true (#751).
+          set -o pipefail
+          doc=$(node scripts/release-review.mjs doc --tag="$TAG")
+          git fetch -q --tags origin
+          if [ -z "$CANDIDATE" ]; then
+            CANDIDATE=$(git rev-parse --verify -q "refs/tags/$TAG^{commit}") || {
+              echo "::error::тега $TAG нет, а кандидат не передан"; exit 1; }
+          fi
+          git cat-file -e "$CANDIDATE^{commit}"
+          CANDIDATE=$(git rev-parse "$CANDIDATE^{commit}")
+          # Повтор на тот же тег не тратит модель: документ уже есть (§11.5).
+          if [ "$FORCE" != "true" ] && git cat-file -e "origin/dev:$doc" 2>/dev/null; then
+            echo "::notice::$doc уже есть в dev — повторное ревью не запускается (force=true, чтобы переснять)"
+            echo "proceed=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+          out="$RUNNER_TEMP/release-review-input"
+          node scripts/release-review.mjs prepare --tag="$TAG" --candidate="$CANDIDATE" \
+            --out="$out" --run-url="$RUN_URL" | tee -a "$GITHUB_OUTPUT"
+          echo "candidate=$CANDIDATE" >> "$GITHUB_OUTPUT"
+          echo "proceed=true" >> "$GITHUB_OUTPUT"
+          (cd "$out" && sha256sum brief.md line-membership.json > manifest.sha256)
+          cat "$out/brief.md" >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Передать вход модели
+        if: steps.line.outputs.proceed == 'true'
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: release-review-input-${{ github.run_id }}-${{ github.run_attempt }}
+          path: ${{ runner.temp }}/release-review-input
+          if-no-files-found: error
+          retention-days: 3
+
+  model_review:
+    name: "Ревью релиза: работа модели"
+    needs: prepare
+    if: needs.prepare.outputs.proceed == 'true'
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    # Недоверенная стадия. Прав на запись нет никаких: ни в репозиторий, ни в
+    # issue. Документ публикует `publish`; находки в issue превращает владелец.
+    # `github_token` у шага Review обязателен (#556): без него action меняет
+    # OIDC на собственный App-токен с правом записи.
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 0
+          ref: ${{ needs.prepare.outputs.candidate }}
+          persist-credentials: false
+
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Получить вход линии
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: release-review-input-${{ github.run_id }}-${{ github.run_attempt }}
+          path: ${{ runner.temp }}/release-review-input
+
+      - name: Проверить вход и кандидата
+        env:
+          CANDIDATE: ${{ needs.prepare.outputs.candidate }}
+        run: |
+          (cd "$RUNNER_TEMP/release-review-input" && sha256sum -c manifest.sha256)
+          test "$(git rev-parse HEAD)" = "$CANDIDATE"
+
+      - name: Установить зависимости
+        run: npm ci
+
+      - name: Кэш браузеров Playwright
+        id: pw
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
+        with:
+          path: ~/.cache/ms-playwright
+          key: playwright-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
+
+      - name: Установить Chromium
+        if: steps.pw.outputs.cache-hit != 'true'
+        run: npx playwright install chromium
+
+      # Тот же обход, что у конвейера (_process.yml, anthropics issue 1817).
+      - name: Установить Claude Code детерминированно
+        id: claude_bin
+        run: |
+          src=$(ls "$RUNNER_WORKSPACE"/../_actions/anthropics/claude-code-*/v1/src/entrypoints/run.ts 2>/dev/null | head -1)
+          ver=$(grep -oE 'claudeCodeVersion = "[0-9]+\.[0-9]+\.[0-9]+"' "$src" 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' || true)
+          ver="${ver:-2.1.265}"
+          base=https://downloads.claude.ai/claude-code-releases
+          bin="$HOME/.local/bin/claude"
+          mkdir -p "$(dirname "$bin")"
+          curl -fsSL --retry 3 "$base/$ver/linux-x64/claude" -o "$bin"
+          sum=$(curl -fsSL --retry 3 "$base/$ver/manifest.json" | jq -r '.platforms["linux-x64"].checksum')
+          echo "$sum  $bin" | sha256sum -c -
+          chmod +x "$bin"
+          "$bin" --version
+          echo "path=$bin" >> "$GITHUB_OUTPUT"
+
+      - name: Review
+        id: review
+        uses: anthropics/claude-code-action@9cdae7f0d995e3ba7c33f226087fdf82a59cd520 # v1
+        env:
+          REVIEW_DOC: ${{ runner.temp }}/release-review.md
+          REVIEW_INPUT: ${{ runner.temp }}/release-review-input
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          # #704: `release.yml` ставит ревью в очередь токеном GITHUB_TOKEN, и
+          # прогон начинает `github-actions[bot]` (тип Bot). Action отказывает
+          # ботам, которых нет в списке («Workflow initiated by non-human actor:
+          # github-actions (type: Bot)», v1.78.0). Разрешён ровно этот бот —
+          # не '*': любой другой бот по-прежнему отклоняется. Action сравнивает
+          # имена без регистра и без суффикса `[bot]`. Человек, запустивший
+          # ревью руками, списка не касается.
+          allowed_bots: "github-actions[bot]"
+          path_to_claude_code_executable: ${{ steps.claude_bin.outputs.path }}
+          prompt: |
+            Ты независимый ревьюер релиза House Plan. Язык ответа — русский.
+
+            Релиз: ${{ inputs.tag }} · кандидат ${{ needs.prepare.outputs.candidate }}
+            (рабочая копия уже на нём) · база линии: ${{ needs.prepare.outputs.base || 'нет' }}.
+            Вход линии — файл $REVIEW_INPUT/brief.md (issue линии, доказанные
+            трейлерами, и изменённые продуктовые файлы) и
+            $REVIEW_INPUT/line-membership.json.
+
+            Правила этого ревью — docs/process/REVIEWER.md, раздел «Независимое
+            ревью линии», канон — PROCESS.md §11.5. Прочитай их первыми.
+
+            Главное, что нельзя пропустить:
+            - Ты судишь ПОВЕРХНОСТИ, изменённые линией, против ПОЛЬЗОВАТЕЛЯ, а
+              не дифф против ТЗ. Не читай ТЗ задач (раздел «## ТЗ» в issue,
+              docs/specs/**) и документы раундов (docs/reviews/**): независимость
+              и есть смысл шага. Основа суждения — docs/SCOPE.md (персоны и
+              работы) и docs/USER-GUIDE.ru.md (что обещано пользователю).
+            - Проверяй исполнением, а не чтением: собери бандл
+              (`npm run bundle:sync`), открой затронутые поверхности в браузере
+              (стенд `demo/`, смоки `demo/smoke_*.mjs`), вводи текст
+              посимвольно, закрывай диалоги настоящим Escape и крестиком. Где
+              есть диалоги HA — пиннутая фикстура `ha-dialog` (#505,
+              demo/helpers/README-ha-dialog.md,
+              `node demo/verify_ha_dialog_discard_recovery.mjs`).
+            - Для каждой поверхности: обычный сценарий и самый рискованный
+              соседний, шесть классов риска (async, данные/права, геометрия,
+              визуал, объём/perf, host/input) — PROCESS.md §2.6.
+            - Ты ничего не правишь и не публикуешь: ни код, ни issue, ни
+              комментарии. Права на запись у тебя нет. Любые изменения рабочей
+              копии будут отброшены — после проверок восстанови её сам
+              (`git checkout -- . && git clean -fd`), если что-то менял.
+
+            Находки: High / Medium / Low, у каждой — поверхность, воспроизведение
+            (команда или шаги), что увидит пользователь, какая персона задета.
+            Выпуск это ревью не останавливает: документ — рекомендация владельцу.
+
+            Напиши полный документ в файл по пути из переменной REVIEW_DOC
+            (абсолютный, вне репозитория). Разделы: что входило в линию,
+            поверхности и как каждая проверялась (команда → результат),
+            находки, что проверено и корректно, чего не проверял и почему.
+            Первой строкой после заголовка — `Итог: High N · Medium N · Low N`.
+
+            Затем верни JSON по схеме — последнее обязательное действие.
+          claude_args: |
+            --max-turns 200
+            --allowedTools Read,Write,Grep,Glob,Bash
+            --json-schema '{"type":"object","properties":{"high":{"type":"integer"},"medium":{"type":"integer"},"low":{"type":"integer"},"summary":{"type":"string"}},"required":["high","medium","low","summary"]}'
+
+      - name: Запечатать результат модели
+        env:
+          SOURCE: ${{ runner.temp }}/release-review.md
+          OUT: ${{ steps.review.outputs.structured_output }}
+        run: |
+          test -s "$SOURCE" || { echo "::error::модель не оставила документ ревью"; exit 1; }
+          dir="$RUNNER_TEMP/release-review-result"
+          mkdir -p "$dir"
+          printf '%s' "$OUT" > "$dir/result.json"
+          jq -e '(.high|type=="number") and (.medium|type=="number") and (.low|type=="number") and (.summary|type=="string")' \
+            "$dir/result.json" >/dev/null
+          cp "$SOURCE" "$dir/release-review.md"
+          (cd "$dir" && sha256sum release-review.md result.json > manifest.sha256)
+
+      - name: Передать результат публикации
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: release-review-result-${{ github.run_id }}-${{ github.run_attempt }}
+          path: ${{ runner.temp }}/release-review-result
+          if-no-files-found: error
+          retention-days: 3
+
+  publish:
+    name: "Ревью релиза: документ в dev"
+    needs: [prepare, model_review]
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 0
+          ref: dev
+          persist-credentials: false
+
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+
+      - name: Получить результат модели
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: release-review-result-${{ github.run_id }}-${{ github.run_attempt }}
+          path: ${{ runner.temp }}/release-review-result
+
+      # Модель пишет только текст документа. Путь, машинный блок, индекс и
+      # коммит решает этот шаг; всё остальное в рабочей копии не существует.
+      - name: Опубликовать документ
+        env:
+          TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
+          TAG: ${{ inputs.tag }}
+          DOC: ${{ needs.prepare.outputs.doc }}
+          CANDIDATE: ${{ needs.prepare.outputs.candidate }}
+          BASE: ${{ needs.prepare.outputs.base }}
+          ISSUES: ${{ needs.prepare.outputs.issues }}
+          RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+        run: |
+          dir="$RUNNER_TEMP/release-review-result"
+          (cd "$dir" && sha256sum -c manifest.sha256)
+          test "$DOC" = "$(node scripts/release-review.mjs doc --tag="$TAG")"
+          counts=$(jq -r '"High \(.high) · Medium \(.medium) · Low \(.low)"' "$dir/result.json")
+          # Сообщение коммита — построчно в файл, без heredoc в `run:` (#723).
+          msg="$RUNNER_TEMP/release-review-commit.txt"
+          push_err="$RUNNER_TEMP/release-review-push.stderr"
+          for attempt in 1 2 3; do
+            git fetch -q origin dev
+            git reset -q --hard origin/dev
+            git clean -fdq
+            mkdir -p docs/reviews
+            {
+              cat "$dir/release-review.md"
+              printf '\n\n<!-- hp-release-review-anchors -->\n### Материал ревью\n\n```\n'
+              printf 'tag %s\ncandidate %s\nbase %s\nissues %s\nrun %s\n' \
+                "$TAG" "$CANDIDATE" "${BASE:-—}" "${ISSUES:-—}" "$RUN_URL"
+              printf '```\n'
+            } > "$DOC"
+            node scripts/reviews-index.mjs --dir=docs/reviews --strict
+            git add -- "$DOC" docs/reviews/INDEX.md
+            git diff --cached --name-only | node scripts/review-doc-guard.mjs
+            {
+              echo "docs: release review for $TAG"
+              echo ""
+              echo "Независимое ревью линии перед стабильным релизом (PROCESS.md §11.5)."
+              echo "Итог: $counts. Выпуск не блокирует; решение по находкам — за владельцем."
+              echo ""
+              echo "Issue: #638"
+              echo "User-Visible: no"
+            } > "$msg"
+            git -c user.name="claude[bot]" \
+                -c user.email="209825114+claude[bot]@users.noreply.github.com" \
+                commit -q -F "$msg"
+            git diff --name-only "origin/dev...HEAD" | node scripts/review-doc-guard.mjs
+            if git push -q "https://x-access-token:$TOKEN@github.com/${{ github.repository }}" HEAD:dev 2> "$push_err"; then
+              echo "### Независимое ревью $TAG" >> "$GITHUB_STEP_SUMMARY"
+              echo "Итог: $counts — \`$DOC\` в dev. Выпуск не блокируется." >> "$GITHUB_STEP_SUMMARY"
+              echo "::notice::$DOC опубликован: $counts"
+              exit 0
+            fi
+            # #723: сдвигом dev считается только устаревший lease — отказ
+            # разбирает код слияния (merge-candidate.mjs --push-refusal, #705).
+            # Отказ GitHub (право на workflow, правило ветки, хук) повтор не
+            # лечит: шаг останавливается, причина и ответ git без токена — в
+            # журнале и в сводке шага.
+            kind=$(node scripts/merge-candidate.mjs --push-refusal="$push_err" --ref=dev \
+              --stage=release-review --summary="$GITHUB_STEP_SUMMARY") || kind=unknown
+            if [ "$kind" != "stale" ]; then
+              echo "::error::push $DOC в dev отклонён ($kind) — это не сдвиг dev, повтор не поможет; причина и ответ git — выше и в сводке шага"
+              exit 1
+            fi
+            echo "::warning::dev ушёл вперёд — попытка $attempt из 3, документ собирается заново"
+            sleep $((attempt * 10))
+          done
+          echo "::error::документ ревью не опубликован в dev за три попытки"
+          exit 1
@@ -48,7 +48,8 @@ jobs:
    name: "Кандидат: точный SHA, режим и черновик"
    # Публикация беты руками — не наш случай: у бет свой staged-путь.
    if: ${{ github.event_name == 'workflow_dispatch' || !github.event.release.prerelease }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
    outputs:
      sha: ${{ steps.resolve.outputs.sha }}
      tag: ${{ steps.resolve.outputs.tag }}
@@ -131,10 +132,89 @@ jobs:
            echo "release $TAG is public: repair mode — only missing assets may be added"
          fi

+  independent-review:
+    name: "Независимое ревью линии (не блокирует выпуск)"
+    # #638, PROCESS.md §11.5. Решение владельца 2026-09-25: ревью идёт
+    # параллельно гейтам и выпуск не ждёт и не останавливает. Поэтому этот job
+    # только ставит в очередь `release-review.yml` на `dev` и ни один job
+    # выпуска от него не зависит (`needs` на него запрещён тестом
+    # release-workflow); его отказ — предупреждение, а не красный релиз.
+    # Беты пропускаются: ревью линии — перед стабильным.
+    needs: candidate
+    if: ${{ needs.candidate.outputs.prerelease != 'true' }}
+    continue-on-error: true
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
+    permissions:
+      actions: write
+    steps:
+      - name: Поставить в очередь ревью линии
+        env:
+          GH_TOKEN: ${{ github.token }}
+          TAG: ${{ needs.candidate.outputs.tag }}
+          SHA: ${{ needs.candidate.outputs.sha }}
+          # #704: сколько ждать, что dispatch стал прогоном, — выпуск не ждёт
+          # дольше нескольких минут; укладывается в timeout-minutes job.
+          APPEAR_SECONDS: 180
+          POLL_SECONDS: 15
+        run: |
+          repo="${{ github.repository }}"
+          # Отсчёт окна — до dispatch, с запасом минута на расхождение часов.
+          since=$(( $(date -u +%s) - 60 ))
+          if ! gh workflow run release-review.yml --repo "${{ github.repository }}" --ref dev \
+               -f tag="$TAG" -f candidate="$SHA"; then
+            echo "::warning::ревью линии $TAG не запущено — выпуск продолжается; запустить руками: gh workflow run release-review.yml --ref dev -f tag=$TAG -f candidate=$SHA"
+            echo "Независимое ревью $TAG: **не запущено** — dispatch release-review.yml отклонён." >> "$GITHUB_STEP_SUMMARY"
+            exit 1
+          fi
+          # #704: dispatch не возвращает прогона, и v1.78.0 показал цену: ревью
+          # упало в прогоне, о котором выпуск не знал. Прогон ищется по workflow,
+          # ветке dev, событию, времени и run-name «Release review <тег>».
+          # Найден и стартовал — ссылка и статус в сводке; нет — предупреждение,
+          # выпуск не блокируется.
+          title="Release review $TAG"
+          run=""
+          started=false
+          tries=$(( APPEAR_SECONDS / POLL_SECONDS ))
+          for try in $(seq 1 "$tries"); do
+            found=$(gh run list --repo "$repo" --workflow release-review.yml --branch dev \
+                      --event workflow_dispatch --limit 20 \
+                      --json databaseId,url,status,conclusion,displayTitle,createdAt \
+                    | jq -c --arg title "$title" --argjson since "$since" \
+                      '[.[] | select(.displayTitle == $title and (.createdAt | sub("\\.[0-9]+Z$"; "Z") | fromdateiso8601) >= $since)] | sort_by(.createdAt) | last // empty') || found=""
+            if [ -n "$found" ]; then
+              run="$found"
+              case "$(jq -r .status <<< "$run")" in
+                in_progress|completed) started=true; break ;;
+              esac
+            fi
+            if [ "$try" -lt "$tries" ]; then sleep "$POLL_SECONDS"; fi
+          done
+          minutes=$(( (APPEAR_SECONDS + 59) / 60 ))
+          if [ -z "$run" ]; then
+            echo "::warning::прогон ревью линии $TAG не появился за $minutes мин — выпуск продолжается; проверить Actions → release-review.yml"
+            echo "Независимое ревью $TAG: **не стартовало за $minutes мин** — прогон release-review.yml на dev не найден." >> "$GITHUB_STEP_SUMMARY"
+            exit 0
+          fi
+          url=$(jq -r .url <<< "$run")
+          status=$(jq -r '.status + (if (.conclusion // "") != "" then " · " + .conclusion else "" end)' <<< "$run")
+          if [ "$started" != "true" ]; then
+            echo "::warning::ревью линии $TAG в очереди и не стартовало за $minutes мин: $url"
+            echo "Независимое ревью $TAG: **не стартовало за $minutes мин** (в очереди) — [прогон]($url), статус $status." >> "$GITHUB_STEP_SUMMARY"
+            exit 0
+          fi
+          if [ "$(jq -r '.conclusion // ""' <<< "$run")" = "failure" ]; then
+            echo "::warning::ревью линии $TAG уже упало: $url"
+          fi
+          echo "Независимое ревью $TAG **запущено**: [прогон]($url), статус $status. Выпуск его не ждёт." >> "$GITHUB_STEP_SUMMARY"
+
  gate:
    name: "Гейт: контракт, Validate, Full Performance и E2E на точном SHA"
    needs: candidate
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    # Больше суммы собственных ожиданий job: Validate и Full Performance ждутся
+    # до 60 мин каждый (release-gate.mjs), E2E — до 45 (e2e-gate.mjs): 165 < 180 (#658).
+    timeout-minutes: 180
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
@@ -204,7 +284,8 @@ jobs:
  stage:
    name: "Сборка: ассеты, SHA256SUMS и загрузка в черновик"
    needs: [candidate, gate]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
@@ -344,7 +425,8 @@ jobs:
  publish:
    name: "Публикация и сверка публичных байтов"
    needs: [candidate, gate, stage]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 15
    outputs:
      url: ${{ steps.verify.outputs.url }}
      name: ${{ steps.verify.outputs.name }}
@@ -444,7 +526,8 @@ jobs:
    # make that distribution failure impossible to miss in the release run.
    if: ${{ needs.candidate.outputs.prerelease == 'true' }}
    needs: [candidate, publish]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
    steps:
      - name: Verify the published tag is the prerelease HACS will discover
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
@@ -0,0 +1,53 @@
+name: "Бета: пакетное ревью ship"
+run-name: "Ship review ${{ inputs.tag }}"
+
+# Тонкий вызывающий файл (#716, устройство #623). `workflow_dispatch` GitHub
+# исполняет с выбранной ветки, но кнопку и сам запуск (`gh workflow run`)
+# даёт только workflow, чей файл лежит в ветке по умолчанию (`main`). Поэтому
+# здесь только то, что обязано жить там: триггер, входы ручного запуска,
+# run-name, права и concurrency. Тело — `_ship-review.yml` по ссылке `@dev`:
+# правка ревью — один коммит в `dev`, а запуск с любой ветки (в кнопке по
+# умолчанию выбрана `main`) исполняет тело из `dev`.
+# Этот файл меняется, только когда меняются входы или потолок прав; тогда он
+# зеркалится в `main`, и preflight `workflow_sync` (validate.yml) держит копии
+# равными.
+
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Beta tag the review is for, for example v1.79.0-beta.1"
+        required: true
+        type: string
+      candidate:
+        description: "Exact candidate SHA; empty = the dev tip"
+        required: false
+        type: string
+        default: ""
+      force:
+        description: "Review again even when the document already exists in dev"
+        required: false
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ship-review-${{ inputs.tag }}
+  cancel-in-progress: false
+
+jobs:
+  # Потолок прав тела: объединение job-level прав `_ship-review.yml`. Вызываемый
+  # workflow может права только сузить, поэтому каждая его job по-прежнему
+  # получает свой прежний минимум (#556), а шире этого набора не получит никто.
+  dev:
+    permissions:
+      contents: read
+      issues: read
+    uses: Matysh/houseplan-card/.github/workflows/_ship-review.yml@dev # #716: тело ревью из dev
+    with:
+      tag: ${{ inputs.tag }}
+      candidate: ${{ inputs.candidate }}
+      force: ${{ inputs.force }}
+    secrets: inherit
@@ -21,12 +21,11 @@ on:
        description: 'Полный набор: смоки, golden, performance_smoke (без мутантов — #601)'
        type: boolean
        default: true
-      # Мутанты по диффу бегут только по явному запросу (#510, #601):
-      # ревью-конвейер и слияние кандидата запускают `-f full=false
-      # -f mutants=true` на материале. `full=true`, трейлер `Release:` и ночь
-      # их не включают — ночью идёт полный реестр (mutation-gate.yml).
+      # #709: мутанты в разработке не гоняются — вход оставлен, чтобы старые
+      # вызовы `-f mutants=…` не падали, но job мутантов по диффу он больше не
+      # включает (classify-changes.mjs). Весь реестр — ночью (mutation-gate.yml).
      mutants:
-        description: 'Мутанты по диффу на этом SHA (кандидат ревью или слияния)'
+        description: 'Не действует с #709: мутанты — только ночной полный прогон'
        type: boolean
        default: false

@@ -50,14 +49,16 @@ jobs:
  # действовать — на уровне шагов, с той же гранулярностью в логе.
  preflight:
    name: "Предполёт: документация, провенанс, процесс"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 15
    # `actions: read` — чтение списка прогонов Validate (#388), `issues: read` —
-    # проверка 8 процессного гейта. Права перечислены явно, потому что job
-    # обращается к API сверх содержимого репозитория.
+    # проверка 8 процессного гейта, `issues: write` — одно issue о расхождении
+    # зеркала workflow на push в dev (#700). Права перечислены явно, потому что
+    # job обращается к API сверх содержимого репозитория.
    permissions:
      contents: read
      actions: read
-      issues: read
+      issues: write
    steps:
      # `blob:none` при полной истории (#345): этой job нужны сообщения
      # коммитов, трейлеры и ИМЕНА изменённых файлов, а не содержимое старых
@@ -66,9 +67,11 @@ jobs:
      #
      # Коммиты и деревья скачиваются целиком, поэтому диапазоны и `merge-base`
      # работают как раньше. Единственная догрузка по требованию здесь —
-      # `git show origin/main:.github/workflows/process.yml`: один блоб.
+      # `git show origin/main:.github/workflows/<тонкий файл>`: по блобу на файл.
+      # `fetch-tags: true` (#703): теги релиза — граница проверенного материала
+      # для базы диапазона, а checkout по умолчанию качает с `--no-tags`.
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with: { fetch-depth: 0, filter: 'blob:none' }
+        with: { fetch-depth: 0, filter: 'blob:none', fetch-tags: true }
      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
        with: { node-version: 22 }

@@ -80,42 +83,110 @@ jobs:
        id: docs
        continue-on-error: true
        env:
+          REF: ${{ github.ref }}
          EVENT_NAME: ${{ github.event_name }}
          HEAD_MESSAGE: ${{ github.event.head_commit.message }}
          FULL_INPUT: ${{ inputs.full }}
+          # #697: на ветке задачи `Release:` строгий режим не включает.
+          REF_NAME: ${{ github.ref_name }}
        run: |
+          # #700: на ветке задачи упавший чужой сайт — предупреждение, а не
+          # красный preflight; push в dev, кандидат и релиз судят ссылки строго.
+          external=--external
+          case "$REF" in refs/heads/issue/*) external=--external=warn ;; esac
          # #586: CLI отдаёт ОДИН ответ. Прежде здесь сравнивался со строкой
          # `heavy=true` весь вывод `--heavy`, а он двухстрочный: в `$(…)`
          # строки схлопываются через пробел, сравнение не совпадало никогда,
          # и строгий режим не включился ни на одном кандидате.
          mode=$(node scripts/classify-changes.mjs --screenshots-mode)
          echo "скриншоты документации: режим $mode"
-          node scripts/check-docs.mjs --external --screenshots=$mode
+          node scripts/check-docs.mjs "$external" --screenshots=$mode

-      # Конвейер читает `process.yml` из ветки по умолчанию, поэтому файл обязан
-      # совпадать в `main` и `dev`. До этой проверки совпадение держалось на
-      # дисциплине: каждая правка требовала двух пушей и ручной сверки.
-      - name: "Процесс: process.yml и mutation-gate.yml идентичны в main и dev"
+      # #635: `docs/reviews/INDEX.md` — снимок каталога ревью; расхождение с
+      # каталогом — невидимые через индекс документы (r2 #635 H1). Гейт стоит
+      # только на push в dev: там свежесть держит конвейер — пересборка при
+      # публикации документа и после каждого своего ребейза (приведение к dev,
+      # слияние кандидата). На issue-ветках не судится: их ребейзит и
+      # публикует в них конвейер из ветки по умолчанию, и доехавший туда
+      # документ раунда индекс ветки знать не обязан — красить автора за
+      # коммит конвейера нельзя; расхождение излечивает слияние.
+      - name: "Индекс ревью совпадает с каталогом docs/reviews"
+        id: reviews_index
+        if: github.event_name == 'push' && github.ref == 'refs/heads/dev'
+        continue-on-error: true
+        run: node scripts/reviews-index.mjs --dir=docs/reviews --check
+
+      # #623: для событий `issues`, `schedule` и `workflow_run` GitHub берёт
+      # workflow из ветки по умолчанию (`main`). Там лежат тонкие вызывающие
+      # файлы — триггеры, run-name, права, concurrency, — а тело каждого
+      # (`_<имя>.yml`) они вызывают по ссылке `@dev`. Правка конвейера — один
+      # коммит в `dev`; тела здесь не сверяются: их копия в `main` не исполняется
+      # ни одним событием. Тонкий файл сверяется: правка триггера или потолка
+      # прав, не доехавшая до `main`, действовала бы только в dev-копии.
+      #
+      # #716: `ship-review.yml` и `beta-derived.yml` — только `workflow_dispatch`,
+      # он исполняет файл с выбранной ветки, но запуск GitHub даёт лишь workflow,
+      # чей файл есть в `main`. Шагам беты он нужен до промоушена, поэтому они
+      # устроены так же и сверяются здесь же: правка входа или потолка прав,
+      # не доехавшая до `main`, не действовала бы в запуске с `main`, а именно
+      # его кнопка выбирает по умолчанию.
+      #
+      # `performance.yml` не входит: по расписанию он судит `main` собственным
+      # телом из `main`, расхождение с `dev` до промоушена законно. Список ниже
+      # держит равным множеству тонких файлов
+      # test/default-branch-workflows.test.mjs.
+      - name: "Процесс: тонкие вызывающие workflow идентичны в main и dev"
        id: workflow_sync
        continue-on-error: true
        run: |
          git fetch --quiet origin main dev
-          # #472: расписание mutation-gate.yml тоже исполняется из ветки по
-          # умолчанию — та же ловушка, что у process.yml. Сверяются оба.
          status=0
-          for file in process.yml mutation-gate.yml; do
+          for file in process.yml mutation-gate.yml process-resume.yml nightly.yml process-reconcile.yml process-metrics.yml ship-review.yml beta-derived.yml; do
            if diff <(git show "origin/main:.github/workflows/$file") \
                    <(git show "origin/dev:.github/workflows/$file"); then
              echo "$file: main и dev идентичны"
            else
              echo "РАСХОЖДЕНИЕ: $file в main и dev различаются."
-              echo "Файл исполняется из ветки по умолчанию, поэтому"
-              echo "правку нужно отправить в обе ветки."
+              echo "Тонкий вызывающий файл исполняется из ветки по умолчанию,"
+              echo "поэтому правку триггеров или прав нужно зеркалить в main (#623)."
              status=1
            fi
          done
          exit $status

+      # #700: расхождение зеркала на dev — одно открытое issue владельцу, как у
+      # ночного мутационного гейта (#472): чинит его тот, кто зеркалит в main, а
+      # не автор задачи, чья ветка ни при чём. Сбой API — предупреждение: шаг
+      # сообщает, а не судит.
+      - name: "Расхождение зеркала на dev — issue владельцу"
+        if: github.event_name == 'push' && github.ref == 'refs/heads/dev' && steps.workflow_sync.outcome == 'failure'
+        env:
+          GH_TOKEN: ${{ github.token }}
+          REPO: ${{ github.repository }}
+          RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+        run: |
+          marker="[workflow-sync]"
+          # Список не прочитан — нового issue нет: иначе сбой сети или
+          # рейт-лимит плодил бы дубликат к уже открытому (r1 #700).
+          if ! existing=$(gh issue list --repo "$REPO" --state open --search "\"$marker\" in:title" \
+            --json number,title --jq '[.[] | select(.title | startswith("[workflow-sync]"))][0].number // empty'); then
+            echo "::warning::открытые issue не прочитаны — новое не заводится, чтобы не завести дубликат"
+            exit 0
+          fi
+          if [ -n "$existing" ]; then
+            gh issue comment "$existing" --repo "$REPO" --body "Расхождение повторилось: $RUN_URL" \
+              || echo "::warning::комментарий в #$existing не оставлен"
+            exit 0
+          fi
+          cat > /tmp/workflow-sync.md <<EOF
+          Тонкие вызывающие workflow в \`main\` и \`dev\` различаются. Прогон: $RUN_URL
+
+          Тонкий файл исполняется из ветки по умолчанию, поэтому правку триггеров, входов или прав нужно зеркалить в \`main\` (PROCESS.md §10.4, #623). На ветках задач это предупреждение (#700), на push в \`dev\` — красный preflight, пока зеркало не выровнено.
+          EOF
+          gh issue create --repo "$REPO" --title "$marker тонкие workflow в main и dev различаются" \
+            --label infra --label process --body-file /tmp/workflow-sync.md \
+            || echo "::warning::issue о расхождении зеркала не заведено"
+
      # Оба гейта ниже судят САМ диапазон коммитов, а не объём проверок, и до
      # #388 брали его от головы предыдущего пуша. Прогон предыдущего пуша
      # штатно отменяется следующим (concurrency), и тогда его коммиты не судит
@@ -125,9 +196,14 @@ jobs:
      # прежним `before`: расширять диапазон здесь нельзя, иначе гейт, который
      # сам красит прогон, лишает следующий пуш зелёного предка и запирает dev
      # в красноте навсегда.
+      #
+      # #703: то же на `main`. Stable-промоушен — пуш в `main` SHA, уже
+      # судимого на `dev`; с `event.before` (прошлый stable) провенанс и
+      # процессный гейт судили бы всю бета-линию заново. Прогоны читаются с
+      # обеих интеграционных веток, сам HEAD засчитывает только успешный.
      - name: "База диапазона: последний доказанно зелёный предок"
        id: range
-        if: github.event_name == 'push' && github.ref == 'refs/heads/dev'
+        if: github.event_name == 'push' && (github.ref == 'refs/heads/dev' || github.ref == 'refs/heads/main')
        env:
          GH_TOKEN: ${{ github.token }}
          HEAD_SHA: ${{ github.sha }}
@@ -137,11 +213,14 @@ jobs:
          # `status=completed`, а не `success`: гейтам диапазона нужен факт
          # «коммит судили», а не «вердикт был оправдательный». Упавший прогон
          # коммит судил; отменённый — нет, его отсеивает judgedShas (#388).
-          gh api -X GET "repos/$REPO/actions/workflows/validate.yml/runs" \
-            -f branch=dev -f status=completed -F per_page=100 \
-            > /tmp/validate-runs.json || echo '{}' > /tmp/validate-runs.json
+          for branch in dev main; do
+            gh api -X GET "repos/$REPO/actions/workflows/validate.yml/runs" \
+              -f branch="$branch" -f status=completed -F per_page=100 \
+              > "/tmp/validate-runs-$branch.json" || echo '{}' > "/tmp/validate-runs-$branch.json"
+          done
          node scripts/classify-base.mjs --head="$HEAD_SHA" --mode=range \
-            --fallback="$FALLBACK" --runs=/tmp/validate-runs.json
+            --fallback="$FALLBACK" \
+            --runs=/tmp/validate-runs-dev.json --runs=/tmp/validate-runs-main.json
      - name: "Провенанс коммитов: трейлеры и эталоны"
        id: provenance
        continue-on-error: true
@@ -195,6 +274,8 @@ jobs:
          PROVENANCE: ${{ steps.provenance.outcome }}
          PROCESS_GATE: ${{ steps.process_gate.outcome }}
          ACTION_PINS: ${{ steps.action_pins.outcome }}
+          REVIEWS_INDEX: ${{ steps.reviews_index.outcome }}
+          REF: ${{ github.ref }}
        run: |
          fail=0
          check() {
@@ -206,12 +287,30 @@ jobs:
              fail=1
            fi
          }
+          # #700: причина, к которой ветка задачи отношения не имеет, — в сводку
+          # предупреждением; на dev, кандидате и релизе она красит как прежде.
+          advise() {
+            if [ "$2" = "success" ]; then
+              echo "ok   $1"
+            else
+              echo "::warning::$1 ($2) — на ветке задачи предупреждение (#700)"
+              echo "- $1: $2 — предупреждение, чинит релиз-менеджер (#700)" >> "$GITHUB_STEP_SUMMARY"
+            fi
+          }
+          task_branch=false
+          case "$REF" in refs/heads/issue/*) task_branch=true ;; esac
          echo "### Предполётные проверки" >> "$GITHUB_STEP_SUMMARY"
          check "документация" "$DOCS"
-          check "process.yml и mutation-gate.yml в main и dev" "$WORKFLOW_SYNC"
+          if [ "$task_branch" = "true" ]; then
+            advise "тонкие вызывающие workflow в main и dev" "$WORKFLOW_SYNC"
+          else
+            check "тонкие вызывающие workflow в main и dev" "$WORKFLOW_SYNC"
+          fi
          check "провенанс коммитов" "$PROVENANCE"
          check "процессный гейт" "$PROCESS_GATE"
          check "пины сторонних Actions" "$ACTION_PINS"
+          # skipped — шаг не судил (не push в dev), это не отказ
+          [ "$REVIEWS_INDEX" = "skipped" ] || check "индекс ревью совпадает с каталогом" "$REVIEWS_INDEX"
          exit $fail

  # Классификация изменённых путей: тяжёлые job идут только там, где менялось
@@ -223,7 +322,8 @@ jobs:
  # там делает код-ревью, которое гоняет гейты само (#127).
  changes:
    name: Классификация изменённых файлов
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
    # Чтение списка прогонов Validate — единственное, что этой job нужно сверх
    # содержимого репозитория (#387).
    permissions:
@@ -243,20 +343,23 @@ jobs:
      mutants_requested: ${{ steps.heavy.outputs.mutants_requested }} # #510
      base: ${{ steps.base.outputs.base }}
      # `base` — до какого коммита классифицировать файлы ветки (#387),
-      # `range_base` — от какого судить диапазон на dev (#388).
+      # `range_base` — от какого судить диапазон на dev/main (#388, #619).
      range_base: ${{ steps.base.outputs.range_base }}
    steps:
      # `git diff --name-only` содержимого файлов не читает вовсе, поэтому
-      # блобы истории этой job не нужны ни на одном шаге (#345).
+      # блобы истории этой job не нужны ни на одном шаге (#345). Теги — нужны:
+      # они граница проверенного материала для `range_base` (#703), а checkout
+      # по умолчанию передаёт `git fetch --no-tags`.
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-        with: { fetch-depth: 0, filter: 'blob:none' }
+        with: { fetch-depth: 0, filter: 'blob:none', fetch-tags: true }
      # База диапазона — самый новый предок с УСПЕШНО завершённым Validate
      # (#387). Прежде бралась голова предыдущего пуша (`github.event.before`),
      # то есть допущение «до этого всё проверено». Concurrency отменяет прогон
      # предыдущего пуша штатно, и на #86 (r5) это дало зелёный статус ветки
      # без единого исполненного тяжёлого гейта.
      # Смоки, golden, performance_smoke — на кандидате беты (трейлер
-      # `Release:`), по `workflow_dispatch full=true`, на PR (#479). Логика и
+      # `Release:` вне веток задач, #697), по `workflow_dispatch full=true`, на
+      # PR (#479). Логика и
      # её тест — scripts/classify-changes.mjs.
      - id: heavy
        env:
@@ -264,7 +367,12 @@ jobs:
          HEAD_MESSAGE: ${{ github.event.head_commit.message }}
          FULL_INPUT: ${{ inputs.full }}
          MUTANTS_INPUT: ${{ inputs.mutants }}
-        run: node scripts/classify-changes.mjs --heavy | tee -a "$GITHUB_OUTPUT"
+          REF_NAME: ${{ github.ref_name }}
+        # #751: без pipefail упавший classify-changes оставлял heavy пустым —
+        # тяжёлые job молча пропускались, а job changes зеленела.
+        run: |
+          set -o pipefail
+          node scripts/classify-changes.mjs --heavy | tee -a "$GITHUB_OUTPUT"
      - id: base
        if: github.event_name != 'pull_request'
        env:
@@ -283,11 +391,18 @@ jobs:
          gh api -X GET "repos/$REPO/actions/workflows/validate.yml/runs" \
            -f branch="$BRANCH" -f status=completed -F per_page=100 \
            > /tmp/validate-runs.json || echo '{}' > /tmp/validate-runs.json
-          if [ "$REF" = "refs/heads/dev" ]; then
-            # На dev классифицировать нечего (всё true), но база диапазона
-            # нужна гейту «новый код не добавляет any» в job frontend (#388).
+          if [ "$REF" = "refs/heads/dev" ] || [ "$REF" = "refs/heads/main" ]; then
+            # На интеграционных ветках классифицировать нечего (всё true), но
+            # база диапазона нужна гейту «новый код не добавляет any» в job
+            # frontend (#388, #619). #703: прогоны обеих интеграционных веток —
+            # на `main` приходит SHA, уже судимый на `dev`.
+            other=dev; [ "$BRANCH" = "dev" ] && other=main
+            gh api -X GET "repos/$REPO/actions/workflows/validate.yml/runs" \
+              -f branch="$other" -f status=completed -F per_page=100 \
+              > /tmp/validate-runs-other.json || echo '{}' > /tmp/validate-runs-other.json
            node scripts/classify-base.mjs --head="$HEAD_SHA" --mode=range \
-              --name=range_base --fallback="$FALLBACK" --runs=/tmp/validate-runs.json
+              --name=range_base --fallback="$FALLBACK" \
+              --runs=/tmp/validate-runs.json --runs=/tmp/validate-runs-other.json
            exit 0
          fi
          merge_base=$(git merge-base origin/dev "$HEAD_SHA" || git rev-parse "$HEAD_SHA~1")
@@ -302,8 +417,8 @@ jobs:
          HEAD_SHA: ${{ github.sha }}
          REF: ${{ github.ref }}
        run: |
-          if [ "$REF" = "refs/heads/dev" ]; then
-            echo "dev: без фильтров, всё true"
+          if [ "$REF" = "refs/heads/dev" ] || [ "$REF" = "refs/heads/main" ]; then
+            echo "dev/main: без фильтров, всё true"
            node scripts/classify-changes.mjs --all >> "$GITHUB_OUTPUT"
            exit 0
          fi
@@ -381,7 +496,8 @@ jobs:
    # performance_smoke включает набор, иначе glow-only результат засчитался бы
    # прогону, которому нужен изометрический профиль.
    needs: changes
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
    outputs:
      smoke: ${{ steps.probe.outputs.smoke }}
      golden: ${{ steps.probe.outputs.golden }}
@@ -530,7 +646,8 @@ jobs:
    name: "HACS: валидация репозитория"
    needs: changes
    if: needs.changes.outputs.integration == 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: HACS validation
@@ -542,7 +659,8 @@ jobs:
    name: "Hassfest: манифест интеграции"
    needs: changes
    if: needs.changes.outputs.integration == 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: Hassfest validation
@@ -560,6 +678,10 @@ jobs:
  # слияние кандидата запускают Validate по кнопке с `mutants=true` на
  # материале; PR берёт её сам. За 08–09.09 на промежуточных пушах она стоила
  # 48 из 56 часов job-минут и в основном отменялась следующим пушем. С #601
+  # С #709 job не запрашивает никто: мутанты в разработке не гоняются, весь
+  # реестр проверяет ночь (mutation-gate.yml). Job оставлен до отдельной уборки
+  # вместе с контрактом имён job (#622); `mutants_requested` всегда false.
+  # Ниже — история до #709.
  # её не запрашивают ни `full=true`, ни кандидат беты (`Release:`): к бете
  # каждая задача уже прогнана мутантами на ревью и на слитом кандидате, а
  # ночь покрыта полным реестром. Когда мутанты запрошены, job бежит даже при
@@ -573,7 +695,7 @@ jobs:
      fail-fast: false
      matrix:
        shard: [1, 2, 3, 4, 5, 6]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
    timeout-minutes: 30
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
@@ -633,29 +755,47 @@ jobs:
          fi
          echo "диапазон: $base..$HEAD_SHA"
          echo "base=$base" >> "$GITHUB_OUTPUT"
-          count=$(node scripts/mutation-gate.mjs --changed="$base..$HEAD_SHA" --shard="$SHARD/6" \
-            --ledger="artifacts/mutation-ledger/shard-$SHARD.json" --plan-only \
-            | tee /dev/stderr | sed -n 's/^plan=//p' | tail -1)
+          plan="$RUNNER_TEMP/mutation-plan-$SHARD.txt"
+          node scripts/mutation-gate.mjs --changed="$base..$HEAD_SHA" --shard="$SHARD/6" \
+            --ledger="artifacts/mutation-ledger/shard-$SHARD.json" --plan-only > "$plan"
+          cat "$plan"
+          count=$(sed -n 's/^plan=//p' "$plan" | tail -1)
          echo "к прогону в этом шарде: ${count:-0}"
          echo "count=${count:-0}" >> "$GITHUB_OUTPUT"
+          # #620: план называет и окружение своих гардов. Непрочитанная строка
+          # при непустом плане значит «ставить»: лишняя установка стоит минуты,
+          # недоустановка — красный чистый прогон и лишний круг задачи.
+          if [ "${count:-0}" != "0" ]; then
+            browser=$(sed -n 's/^plan-browser=//p' "$plan" | tail -1)
+            python=$(sed -n 's/^plan-python=//p' "$plan" | tail -1)
+            echo "окружение шарда: браузер ${browser:-true}, Python ${python:-true}"
+            echo "browser=${browser:-true}" >> "$GITHUB_OUTPUT"
+            echo "python=${python:-true}" >> "$GITHUB_OUTPUT"
+          fi
      - if: steps.plan.outputs.count != '0'
        run: npm ci
-      - if: steps.plan.outputs.count != '0'
+      # Python и зависимости бэкенда — только шарду с pytest-гардами (#620);
+      # колёса pip кэшируются по requirements.txt.
+      - if: steps.plan.outputs.count != '0' && steps.plan.outputs.python == 'true'
        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
        with:
          python-version: '3.14'
+          cache: pip
+          cache-dependency-path: tests_backend/requirements.txt
      - name: Backend test dependencies
-        if: steps.plan.outputs.count != '0'
+        if: steps.plan.outputs.count != '0' && steps.plan.outputs.python == 'true'
        run: pip install -r tests_backend/requirements.txt
+      # Chromium — только шарду с браузерными гардами (#620): смоки, golden и
+      # юниты, чей граф исполнения импортирует Playwright.
      - name: Кэш браузеров Playwright
        id: pw
-        if: steps.plan.outputs.count != '0'
+        if: steps.plan.outputs.count != '0' && steps.plan.outputs.browser == 'true'
        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
        with:
          path: ~/.cache/ms-playwright
          key: playwright-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
      - name: Установить Chromium
-        if: steps.plan.outputs.count != '0' && steps.pw.outputs.cache-hit != 'true'
+        if: steps.plan.outputs.count != '0' && steps.plan.outputs.browser == 'true' && steps.pw.outputs.cache-hit != 'true'
        run: npx playwright install --with-deps chromium
      - name: Затронутые мутанты ловятся
        if: steps.plan.outputs.count != '0'
@@ -684,7 +824,8 @@ jobs:
    name: "Фронтенд: типы, юниты, мутанты, синхрон бандла"
    needs: changes
    if: needs.changes.outputs.frontend == 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 40
    steps:
      # Полная история без блобов (#342): гейт «новый код не добавляет any»
      # diff-aware, ему нужен диапазон, а содержимое старых ревизий — нет.
@@ -699,8 +840,10 @@ jobs:
        run: npm run typecheck
      # Долг типизации снимается при извлечении подсистем (#34), а не разовой
      # заменой: в src/** его 1034 вхождения в 49 файлах. Гейт держит приращение
-      # на нуле — судит только добавленные строки (#342).
-      - name: "Новый код не добавляет any"
+      # на нуле — судит только добавленные строки (#342). Тем же диапазоном
+      # судится и приращение записей смоков в приватное состояние карточки
+      # (#629): больше двух тысяч старых не трогаем, новых не добавляем.
+      - name: "Новый код не добавляет any и приватных записей в смоках"
        env:
          EVENT_NAME: ${{ github.event_name }}
          BEFORE_SHA: ${{ github.event.before }}
@@ -713,11 +856,12 @@ jobs:
          git fetch -q origin dev
          zero=$(printf '%040d' 0)
          base=""
-          # Пуш прямо в dev: диапазон — то, что добавлено с последнего
-          # ДОКАЗАННО зелёного предка (#388), а не с головы предыдущего пуша:
-          # его прогон штатно отменяется следующим, и добавленные им строки не
-          # судил бы никто. Фолбэк — прежний `before`.
-          if [ "$EVENT_NAME" != "pull_request" ] && [ "$REF" = "refs/heads/dev" ]; then
+          # Пуш прямо в dev/main: диапазон — то, что добавлено с последнего
+          # ДОКАЗАННО зелёного предка (#388, #619), а не с головы предыдущего
+          # пуша: его прогон штатно отменяется следующим, и добавленные им
+          # строки не судил бы никто. Фолбэк — прежний `before`.
+          if [ "$EVENT_NAME" != "pull_request" ] \
+             && { [ "$REF" = "refs/heads/dev" ] || [ "$REF" = "refs/heads/main" ]; }; then
            base="${PROVEN_BASE:-$BEFORE_SHA}"
          fi
          # Ветка, PR, новая история: точки отсчёта нет, берём merge-base с dev.
@@ -730,16 +874,31 @@ jobs:
            echo "не нашёл базу диапазона — гейт пропущен, это увидит следующий пуш"
            exit 0
          fi
-          node scripts/no-new-any.mjs --base "$base" --head "$HEAD_SHA"
-      - name: Unit tests
-        run: npm test
+          status=0
+          node scripts/no-new-any.mjs --base "$base" --head "$HEAD_SHA" || status=1
+          node scripts/no-new-private-writes.mjs --base "$base" --head "$HEAD_SHA" || status=1
+          exit "$status"
      - name: Build
        run: npm run build
+      # Часть unit-контрактов проверяет размеры реально поставляемых графов в
+      # dist/ (#438, #593, #627). В issue-ветке закоммиченный dist законно
+      # отстаёт от исходников (#657), поэтому юниты обязаны читать свежую
+      # сборку — тот же порядок закреплён локальным gate:small.
+      - name: Unit tests
+        run: npm test
      # Entry, manifest and every content-hashed chunk are one artifact (#337).
+      # #657: the committed bundle changes only in a release candidate, so the
+      # fresh build must equal it only there; elsewhere the committed copy
+      # legitimately lags and only the fresh dist is verified.
      - name: Card bundle trees in sync
        run: |
-          node scripts/bundle-tree.mjs dist custom_components/houseplan/frontend
+          node scripts/bundle-policy.mjs --verify HEAD
          npm run bundle:budget
+      # #624: `tsc --noUnusedLocals` чист вне порта/харнесса, шесть чисел
+      # связности монолита не выше scripts/monolith-baseline.json. После
+      # сборки — одно из чисел считает байты dist/.
+      - name: Мёртвый код и связность монолита
+        run: npm run lint:unused
      # Бандл собирается один раз и уезжает артефактом (#336). Прежде каждая из
      # пяти браузерных job собирала его заново: `bundle:sync` — это `tsc
      # --noEmit` плюс rollup, около минуты на job.
@@ -765,12 +924,48 @@ jobs:
          retention-days: 1
          if-no-files-found: error

+  # #657 (2б): бандл в дереве dev меняет только кандидат беты, поэтому стенд
+  # dev.houseplan.tech берёт его не из дерева, а из этого артефакта: после
+  # зелёного фронтенда на push в dev собранный `dist/` публикуется в служебную
+  # ветку `dev-build` одним коммитом без истории (scripts/dev-build.mjs), хост
+  # забирает его demo/stand/update-dev-bundle.sh. Опубликуется только голова:
+  # если dev ушёл вперёд, пушит следующий прогон. Не вход доказательства:
+  # стенд — не гейт, и сбой публикации не красит проверку кода.
+  dev_build:
+    name: "Бандл головы dev для стенда"
+    needs: frontend
+    if: github.event_name == 'push' && github.ref == 'refs/heads/dev' && needs.frontend.result == 'success'
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    continue-on-error: true
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+      # download-artifact распаковывает поверх checkout и не удаляет старые
+      # content-hashed чанки закоммиченного release-бандла (#657). Свежий
+      # артефакт должен быть единственным содержимым dist, иначе bundle-tree
+      # справедливо видит оставшиеся файлы как orphan assets.
+      - name: Очистить закоммиченный dist перед артефактом
+        run: |
+          node -e "require('node:fs').rmSync('dist', { recursive: true, force: true })"
+      - name: Забрать собранный бандл
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        with:
+          name: card-bundle
+          path: dist
+      - name: Опубликовать в dev-build
+        run: node scripts/dev-build.mjs --sha "$GITHUB_SHA" --dist dist
+
  smoke:
    name: Смоки в браузере (шард ${{ matrix.shard }} из 3)
    # Gated on `frontend` so a typecheck failure does not burn browser minutes.
    needs: [changes, frontend, reuse]
    if: needs.changes.outputs.heavy == 'true' && needs.reuse.outputs.smoke != 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
    timeout-minutes: 20
    # Смоки шардируются: последовательный прогон занимал ~7.5 минут и был
    # критическим путём всего Validate. Три шарда режут его примерно вдвое;
@@ -803,6 +998,9 @@ jobs:
      # Бандл приходит артефактом из job `frontend` (#336): та же сборка, но
      # один раз на прогон. Свежесть проверяет сам продукт — `assertFreshDemoBundle`
      # сверяет вшитый отпечаток с исходниками этого дерева.
+      - name: Очистить закоммиченный dist перед артефактом
+        run: |
+          node -e "require('node:fs').rmSync('dist', { recursive: true, force: true })"
      - name: Забрать собранный бандл
        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
        with:
@@ -874,7 +1072,8 @@ jobs:
    name: "Смоки: все шарды зелёные"
    needs: [changes, smoke, reuse]
    if: needs.changes.outputs.heavy == 'true' && needs.reuse.outputs.smoke != 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
    steps:
      - name: Записать маркер успеха
        run: |
@@ -898,7 +1097,8 @@ jobs:
    # inexpensive and catches a different class of regressions than timings.
    needs: [changes, frontend, reuse]
    if: needs.changes.outputs.heavy == 'true' && needs.reuse.outputs.golden != 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 45
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
@@ -923,6 +1123,9 @@ jobs:
      # Бандл приходит артефактом из job `frontend` (#336): та же сборка, но
      # один раз на прогон. Свежесть проверяет сам продукт — `assertFreshDemoBundle`
      # сверяет вшитый отпечаток с исходниками этого дерева.
+      - name: Очистить закоммиченный dist перед артефактом
+        run: |
+          node -e "require('node:fs').rmSync('dist', { recursive: true, force: true })"
      - name: Забрать собранный бандл
        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
        with:
@@ -997,7 +1200,7 @@ jobs:
    # prereleases. The expensive same-runner comparison lives in performance.yml.
    needs: [changes, frontend, reuse]
    if: needs.changes.outputs.heavy == 'true' && needs.reuse.outputs.performance_smoke != 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
    # 15 минут не хватало, когда установка браузера шла через apt: замер
    # начинался на исходе окна (#206). Запас на холодный кэш — при попадании
    # job укладывается в те же минуты, что и раньше. Диффозависимые профили
@@ -1027,6 +1230,9 @@ jobs:
      # Бандл приходит артефактом из job `frontend` (#336): та же сборка, но
      # один раз на прогон. Свежесть проверяет сам продукт — `assertFreshDemoBundle`
      # сверяет вшитый отпечаток с исходниками этого дерева.
+      - name: Очистить закоммиченный dist перед артефактом
+        run: |
+          node -e "require('node:fs').rmSync('dist', { recursive: true, force: true })"
      - name: Забрать собранный бандл
        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
        with:
@@ -1090,7 +1296,8 @@ jobs:
    name: "Геометрия: TS/Python parity исполнена"
    needs: [changes, reuse]
    if: needs.changes.outputs.geometry_parity == 'true' && needs.reuse.outputs.geometry_parity != 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 15
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
@@ -1124,7 +1331,8 @@ jobs:
    name: "Бэкенд: pytest в Home Assistant"
    needs: [changes, reuse]
    if: needs.changes.outputs.backend == 'true' && needs.reuse.outputs.backend != 'true'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      # Browser fixtures are generated by their real ESM factories and then
@@ -1210,7 +1418,8 @@ jobs:
    name: "Доказательство выполненных проверок"
    if: always()
    needs: [preflight, changes, reuse, hacs, hassfest, changed_mutants, frontend, smoke, smoke_done, golden, performance_smoke, geometry_parity, backend]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
@@ -4,78 +4,51 @@ House Plan is one HACS package with two parts plus a demo harness:

 - **Lovelace card** (`src/`, TypeScript + Lit) — the primary product, bundled to
  the entry, manifest and hashed chunks under `dist/`.
- **Storage integration** (`custom_components/houseplan/`, Python) — the Home Assistant backend.
- **Demo harness** (`demo/`) — a self-contained Playwright page (`demo/srv/demo.html`) that renders the card against a fake `hass`, used for screenshots and the `smoke_*.mjs` end-to-end suite.
+- **Storage integration** (`custom_components/houseplan/`, Python) — the Home
+  Assistant backend.
+- **Demo harness** (`demo/`) — a Playwright page (`demo/srv/demo.html`) that
+  renders the card against a fake `hass` for screenshots and the `smoke_*.mjs`
+  suite. The home is fully synthetic. Launcher `demo/serve.mjs`; golden scenes
+  `demo/golden/`, performance `demo/performance/`, guard suite `demo/guard/`,
+  live stand seed `demo/stand/` — each with its own README.
+
+This file is the map and the few rules every session needs before its first
+command. `PROCESS.md` is the only complete canon and wins any disagreement;
+the sections below link to it instead of retelling it.

 ## Read this first

 **`docs/SCOPE.md` before anything else.** It was fixed with the owner and states
 its own authority: features are built, improved and accepted **only** if they
-serve a job listed there. It carries the mission, the three personas, the core
-user jobs and the out-of-scope list.
+serve a job listed there. Its central consequence: **View mode is the product
+for two of the three personas.** Editors are admin-only tools and must never
+leak interactions into View. For work that changes visible behaviour, also read
+`docs/USER-GUIDE.ru.md` — interface wording comes from there and is not invented.

-Its central consequence: **View mode is the product for two of the three
-personas.** Editors are admin-only tools and must never leak interactions into
-View.
+**Reading order by role** (#634). `node scripts/entry-cost.mjs` measures each
+route and `test/entry-cost.test.mjs` keeps this list equal to its routes:

-For work that changes visible behaviour, also read `docs/USER-GUIDE.ru.md` —
-interface wording comes from there and is not invented, or the UI starts speaking
-developer.
+- author (analysis, spec, implementation, infrastructure): `docs/SCOPE.md` →
+  `AGENTS.md` → `docs/process/AUTHOR.md`, then the task packet
+  (`node scripts/task-packet.mjs --issue NN`); the status snapshot
+  (docs/STATUS.md) only when resuming a session or preparing a release;
+- reviewer (spec or code): `docs/SCOPE.md` → `AGENTS.md` →
+  `docs/process/REVIEWER.md`, then the issue body and its comments;
+- changing the pipeline, the gates or the process itself: `docs/SCOPE.md` →
+  `AGENTS.md` → `PROCESS.md` → `docs/STATUS.md`.

-Then `PROCESS.md` (the full process), `docs/STATUS.md` (where the release line
-is), and for non-trivial changes `docs/ARCHITECTURE.md` plus the canonical
-document of the subsystem you touch: `SUN.md`, `LIGHT.md`, `CANVAS.md`,
-`WALL-THICKNESS.md`, `UX-MODES.md`, `CONFIG-COMPATIBILITY.md`,
-`TOUCH-SUPPORT.md`.
+The two digests quote and link `PROCESS.md` section by section; open the linked
+section whenever a digest line governs your current step. For non-trivial
+changes add `docs/ARCHITECTURE.md` plus the canonical document of the subsystem
+you touch (one list, the same one the reviewer prompt in `_process.yml` reads):
+`SUN.md`, `LIGHT.md`, `CANVAS.md`, `WALL-THICKNESS.md`, `UX-MODES.md`,
+`CONFIG-COMPATIBILITY.md`, `TOUCH-SUPPORT.md`, `ISOMETRIC.md`, `VACUUM.md`,
+`DECOR-EDITOR.md`, `DEVICE-PRESENTATION.md`, `FILTERING.md`, `STAIRS.md`,
+`RADAR.md`, `PDF-EXPORT.md`, `STYLING-HOOKS.md`.

-Standard commands live in `package.json` scripts, `CONTRIBUTING.md` and
-`docs/DEVELOPMENT.md`.
-
-## Canonical backlog and status
-
-[GitHub Issues](https://github.com/Matysh/houseplan-card/issues) are the canonical
-task records: problem, scope, acceptance criteria and discussion.
-
-**Status lives in labels:** `S1-new`, `S2-analysis`, `S3-spec`, `S4-spec-review`,
-`S5-ready`, `S6-in-progress`, `S7-code-review`, `S8-merged`, plus `blocked` on top
-of a status and `rejected` on a closed issue. A product issue in flight carries
-exactly one `S*` label. An infrastructure-only issue is the deliberate exception:
-it may carry no `S*` label while being implemented, enters the common flow at
-`S7-code-review`, and from then on carries exactly one. Labels are the whole of
-it: GitHub Projects is no longer used.
-
-**The light track is the default, not a shortcut** (owner's decision 2026-08-27,
-issue #338). `small` — the spec lives in the issue body and its review is a
-comment. Analysis names the `small` criterion the task *fails* when it takes the
-full track; "ordinary track" without a named criterion is not a justification.
-The threshold itself did not move — only which side carries the proof. The full
-track stays what it was for geometry, config migrations and public contracts,
-where a criterion is broken plainly and saying which one is easy.
-
-`trivial` — the short track: no spec stage at all, `S2-analysis` straight to
-`S5-ready`, with the AC written into the issue body first. `trivial` requires a bug confined to one surface with no new UX
-contract, no migration, no i18n, no perf or touch impact, at most three checkable
-AC, **and expected behaviour already on record** — nothing left to decide. Code
-review is never skipped on either track: it checks scope, risks and the evidence
-from executed tests, but does not stand in for executing them.
-`PROCESS.md` §5 and §5.1 hold the criteria.
-
-An issue filed by an outsider is worked exactly like one of the owner's own, once
-the owner has decided to take it. For product work the check sits **at the
-entrance**, not on every step: the first status label admits it to the flow. For
-infrastructure work an explicit assignment by the owner is the entrance, and the
-issue may remain without an `S*` label until its first `S7-code-review`. In either
-case, **who filed it stops mattering** once the owner has admitted it.
-
-Applying that first label *is* the owner's explicit decision, and the platform
-already guarantees it — only someone with write access can label. The earlier rule
-made outside reports be refiled as the owner's own issues, which turned out to be
-work for nothing: on #123 the spec was already written by the time the guard
-refused.
-
-Specs, audits and ADRs may live under `docs/`, but must link to their issue and
-must not become a parallel task list. When repository documentation disagrees with
-Issues, the issue wins.
+Where the rest lives: commands — `package.json` scripts, `CONTRIBUTING.md`,
+`docs/DEVELOPMENT.md` (toolchain, build, release — its Release section is the
+only home of release mechanics); tests and gates — `docs/TESTING.md`.

 ## Rule #1

@@ -90,485 +63,149 @@ gh issue view <NN> --repo Matysh/houseplan-card --json number,state,labels

 The label must be one of `S5-ready`, `S6-in-progress`, `S7-code-review`. Anything
 else — refuse and say why. "Issue #83 is in `S2-analysis`, code is off limits.
-Start with the spec?" is the correct answer, not a smaller patch.
+Start with the spec?" is the correct answer, not a smaller patch. The one
+exception is a local, unpushed draft on `track:ask` while the spec is in
+`S4-spec-review`, each commit carrying the `Spec-Draft` trailer from the task
+packet; it reaches the branch only after a green spec review (`PROCESS.md`
+§11.8).

-## Change classes
+GitHub Issues are the canonical task records and the **labels** are the status
+(`PROCESS.md` §9); when repository documentation disagrees with an issue, the
+issue wins. Change classes (`PROCESS.md` §1): **A** product (`src/**`,
+integration Python, manifests, i18n), **B** gates and tooling (tests, `demo/**`,
+`scripts/**`, `.github/**`, build and package configuration), **C**
+documentation, **D** generated (bundle, golden baselines) — D beats A where paths
+overlap. The committed bundle changes only in a commit with a `Release:` trailer
+(#657); an ordinary task restores it with `npm run bundle:clean` before
+committing.

-| Class | Paths | Issue required |
-|---|---|---|
-| **A — product** | `src/**`, `custom_components/houseplan/**/*.py`, `manifest.json`, `hacs.json`, i18n, `custom_components/**/translations/**` | yes |
-| **B — gates and tooling** | `test/**`, `tests_backend/**`, `demo/**`, `scripts/**`, `.github/workflows/**`, `rollup.config.mjs`, `tsconfig*.json` | yes; may reuse the issue it covers |
-| **C — documentation** | `docs/**`, `README*`, `CHANGELOG*`, `AGENTS.md` | not if it is part of its issue's DoD |
-| **D — generated** | `dist/**`, `custom_components/houseplan/frontend/**`, `demo/golden/baselines/**` | never changes on its own. The stand copy `demo/srv/assets/**` is no longer committed (#255): build the complete tree with `npm run bundle:sync` |
+**Tracks** (`PROCESS.md` §5, §5.1): the label `track:ship`, `track:show` or
+`track:ask` sets the route, and the owner's label beats the criteria. `show` is the
+default: up to three AC in the issue body, no spec review, `S2` → `S5`. `ship` is a
+one-sentence change within fixed limits, `S1` → `S5`. `ask` is the full route with
+a spec review. Any agent may raise a track with a reason; only the owner lowers it.
+A label is a proposal until the owner confirms it with a comment line
+`Трек: <ship|show|ask> — решение владельца`; an agent never writes that line.
+Several track labels at once read as the strictest. A risky changed hunk
+(geometry, touch, migration, devices, perf, a new UX key) raises an unconfirmed
+`ship` to `show` at `S7`; on `show` it is a question to the reviewer (#707).
+`small` and `trivial` read as `show`. An **infrastructure** task — not a single
+class A file — skips analysis and spec and enters at `S7-code-review`
+(`PROCESS.md` §1). Every change is code-reviewed; on `ship` the review moves to a
+batch review (`ship-review.yml`, `PROCESS.md` §11.7): nightly
+(`SHIP-REVIEW-<base>-dev-<sha12>.md`), and before the beta tag whatever the night
+did not read (`SHIP-REVIEW-<tag>.md`). The review pipeline prices each round by
+track (§10.4): no mutants run
+during development on any track — the whole registry runs nightly (#709); a
+rebase before review only on `ask` or when
+the branch does not merge cleanly into `dev`. Review checks scope, risks and the
+evidence from executed tests, but does not replace executing them.

-The table above is a summary; `PROCESS.md` §1 is the authority and now covers the
-configuration files this one omits — `package.json`, `package-lock.json`,
-`pytest.ini`, `.gitignore`, `.gitattributes`, `.githooks/**` and the rest of
-`.github/**` are class B. Where paths overlap, **D beats A**: the built bundle
-lives inside `custom_components/houseplan/frontend/` and would otherwise read as
-product source.
+## Specs

-## Commits
+The spec lives in the **issue body**, under a `## ТЗ` heading (owner decision
+2026-09-10, #517); `docs/specs/` is an archive of specs written before that date
+and takes no new files. Required sections and the rule for questions are
+`PROCESS.md` §7.1: only **product** ambiguity goes to the owner — what a person
+sees or does, and how much user-visible change belongs in this issue — in one
+batched comment with a proposed default for each question and `blocked` on top of
+`S3-spec`. Everything a user cannot observe is yours to decide and record.

-Hooks install themselves: `package.json` runs `"prepare": "node
-scripts/install-hooks.mjs"`, so `npm ci` sets `core.hooksPath` in every fresh
-clone. Verify with `git config core.hooksPath` — expect `.githooks`.
+## Commits and branches

-Every non-merge commit carries **terminal** trailers:
+Hooks install themselves on `npm ci` (`prepare` → `scripts/install-hooks.mjs`);
+`git config core.hooksPath` must print `.githooks`. Every non-merge commit that
+touches anything outside class C (docs) carries **terminal** trailers; a
+docs-only commit needs none (`PROCESS.md` §3 п.10, #701):

 ```text
 Issue: #123
 User-Visible: yes
 ```

-One `Issue:` line per issue if a commit closes several. `User-Visible: no` for
-tests, refactors, tooling and documentation that does not change the product.
-`User-Visible: yes` requires edits to **both** changelogs — `docs/CHANGELOG.md`
-and `docs/CHANGELOG.ru.md` — in the same commit.
+One `Issue:` line per issue. `User-Visible: yes` requires edits to **both**
+`docs/CHANGELOG.md` and `docs/CHANGELOG.ru.md` in the same commit. A commit
+touching `demo/golden/baselines/**` also needs `Release:` plus exactly one of
+`Baseline-Reviewed: <GitHub run URL>` or `Baseline-Reviewed-Local: sha256:<WSL
+attestation>` (`PROCESS.md` §10.1). Never invent a review link and never rewrite
+published history to satisfy trailers.

-A commit touching `demo/golden/baselines/**` additionally requires:
+Branch `issue/<NN>-slug`; direct commits to `dev`, no PR (owner's decision); a
+violation is fixed with a follow-up commit, never a force-push.

-```text
-Release: v1.62.0-beta.9
-Baseline-Reviewed: https://github.com/Matysh/houseplan-card/actions/runs/<run-id>
-```
-
-Never invent a review link and never rewrite published history to satisfy
-trailers. `.githooks/commit-msg` and the `provenance` CI job both run
-`scripts/validate-commit-provenance.mjs`.
-
-Branch: `issue/<NN>-slug`. Direct commits to `dev`, no PR — the owner's decision;
-CI checks after the fact, and a violation is fixed with a follow-up commit, never
-a force-push.
-
-**Push after every task, not before a beta.** While work sits unpushed there is
-nothing to review, and reviewing twenty tasks at once is not review. `dev` may hold
-unreviewed code while a task is in flight; what matters is its state when the
-reviewer says it is accepted.
-
-**Standing permission: push `issue/<NN>-slug` without asking.** The reviewer runs
-in CI and can only read what is on the remote — an unpushed spec or commit means
-the review either stalls or judges the wrong tree. Pushing a task branch publishes
-nothing to users and does not touch the integration branch, so it needs no command.
-
-**Do not merge into `dev` by hand.** On a green code review the pipeline rebases
-the task branch onto `dev`, pushes it, and only then sets `S8-merged` — the label
-asserts the code is in `dev`, so the merge has to happen first or the label lies
-in between.
-
-If the rebase conflicts the pipeline says so in the issue and sends the task back
-to `S6-in-progress`. The verdict still stands: nothing needs reviewing again, the
-remaining work is the rebase. When the conflict is only in the committed bundle
-(`dist/**`, `custom_components/houseplan/frontend/**` — the usual case when two
-tasks built it in parallel), run `node scripts/rebase-on-dev.mjs` (#479): it takes
-`dev`'s copy through the rebase, rebuilds with `npm run bundle:sync` and amends
-the result into your last commit; a conflict anywhere else aborts and leaves the
-tree as it was. Then push the branch and re-apply `S7-code-review`. When the
-only difference from the reviewed material is the pipeline's own review-document
-commit, the next run re-applies the green verdict without calling the model
-(#499); any other change to the tree — a rebase included — gets a full review.
-
-The pipeline is an idempotent controller (#499): only `S4-spec-review` and
-`S7-code-review` start it, it reads the issue's *current* labels rather than the
-event snapshot, and a label removed before the run starts is treated as a
-withdrawn request. Push the material **before** applying the label — the reviewer
-is pinned to the SHA the pipeline captured and must not fetch newer commits. The second review run is not a formality — after a rebase onto a
-moved `dev` this is different code, and accepting it unchecked is how regressions
-arrive. Cycles are counted per stage, so a code review spends its own budget.
-
-Everything else still requires the owner's explicit command: pushing `main`,
-creating tags, publishing betas and releases, closing issues.
+- **Push after every task, not before a beta** — while work sits unpushed there
+  is nothing to review.
+- **Standing permission: push `issue/<NN>-slug` without asking.** The reviewer
+  runs in CI and reads only the remote; a task branch publishes nothing to users.
+  Push the material **before** applying the review label.
+- **Do not merge into `dev` by hand.** On a green review the pipeline rebases,
+  pushes and only then sets `S8-merged`. A conflicting rebase returns the task to
+  `S6-in-progress` with the verdict intact; `node scripts/rebase-on-dev.mjs`
+  resolves conflicts in generated files only (`PROCESS.md` §2.10), then push and
+  re-apply `S7-code-review`.
+- Everything else needs the owner's explicit command: pushing `main`, tags,
+  publishing betas and releases, closing issues.

 ## Working trees (#115)

 One checkout, one `HEAD`: two agents sharing a directory inherit each other's
-branch, and twice in one hour a commit landed on someone else's task branch that
-way. The layout is therefore fixed:
+branch. `houseplan-card-src/houseplan-card` is the author's tree — task branches
+live there, and unfamiliar local changes belong to the author or the owner,
+never reset or clean them away. `houseplan-card-src/hp-dev` is the owner's
+worktree, permanently on `dev`. The reviewer owns no tree: it runs in CI on a
+fresh checkout. A worktree works only on the machine that created it — its
+`.git` file records an absolute path in that machine's format.

- **`houseplan-card-src/houseplan-card`** — the author's tree. Task branches live
-  here; nobody else commits in it. Unfamiliar local changes belong to the author
-  or the owner — never reset or clean them away.
- **`houseplan-card-src/hp-dev`** — the owner's worktree, permanently on `dev`. For owner-side operations that must not disturb the
-  author's tree: pushing `dev`, restoring a hook's executable bit, emergencies.
- **The reviewer owns no author tree.** It runs in CI on a fresh checkout. The
-  agent implementing an infrastructure task is an ordinary task author and uses
-  the same author-tree rules as product work; task branches must not share a
-  mutable checkout concurrently.
+## Handoff and the verdict

-A worktree is only usable on the machine that created it: the `.git` file records
-an absolute path in that machine's format. One created from a Linux sandbox is
-dead on Windows and vice versa — create worktrees on the machine that will use
-them, which for `hp-dev` means the owner's.
+Start a task from its packet: `node scripts/task-packet.mjs --issue NN` (status;
+track with its basis, cycle limit and rebase policy; what the status permits;
+the branch against `dev` and the next step — no rebase a clean `show`/`ship`
+merge does not need; risk by changed hunks and what it means on this track; the
+required checks, each with its reason; changelog and visual evidence; the
+previous verdict and the unwitnessed AC; it writes nothing). The local gate is
+`npm run gate:small` (`docs/TESTING.md` › Локальный набор перед пушем); run the
+smokes named in the AC before `S7-code-review`. **"Verified" without a named
+command and its result is not evidence.** Comment formats — claim, handoff,
+verdict — are `PROCESS.md` §7.2.

-## Agent-neutral workflow
+**One handoff, one push** (`PROCESS.md` §10.4). Run
+`node scripts/process-gate.mjs --issues` before pushing; after
+`S7-code-review` do not push to the branch until the verdict or the return
+arrives — a push on top of a running review cancels it.

-No task type is reserved for Codex, Claude or any other named model. **Any agent
-may take any task**: analysis, spec, product implementation, infrastructure or a
-release explicitly commanded by the owner. Roles describe the current artifact,
-not the agent brand. The owner rules on product disputes, closes issues and
-commands releases.
-
-Author and reviewer are independent agents/sessions. They need not use different
-model families, but the reviewer must start without implementation context and
-must not be the author grading their own work. The reviewer does not edit the
-material under review.
-
-**Infrastructure-only work uses an accelerated entry into the common flow.** It
-is implemented immediately by any agent, without analysis, spec, spec review or
-the statuses `S1`…`S6`. Once the branch is ready and pushed, apply
-`S7-code-review`. From there the ordinary controller applies: green review rebases
-and merges the checked material into `dev` and then sets `S8-merged`; findings or
-a failed merge return the issue to `S6-in-progress`, and after correction it is
-submitted to `S7-code-review` again.
-
-The test for "infrastructure only" is mechanical: **not a single class A file** —
-nothing under `src/**`, no `custom_components/**/*.py`, no manifests, no i18n. A
-task that touches class A even once is not infrastructure and takes the full flow;
-there is no such thing as "mostly infrastructure". The strictness is deliberate:
-a loose reading would turn this into the route by which product changes skip
-review.
-
-What stays mandatory either way: an issue exists, both trailers are on every
-commit, proportionate local gates are green (normally `typecheck`, `test` and
-`build`), and any non-obvious decision is written down in the code or the issue
-rather than kept in someone's head. Infrastructure work skips specification, not
-code review.
-
-**Review starts by itself.** Applying `S4-spec-review` or `S7-code-review` fires the
-pipeline. Deterministic gates, model review and integration have independent
-55/45/55-minute budgets (#551); typical runs finish well before those ceilings.
-
-**Having applied one of those labels, wait for the result instead of ending the
-session.** Reporting "handed over for review" stops a conveyor that could have kept
-moving on its own. An agent has no clock — it exists only during its own turn — so
-waiting means polling: every 90 seconds, at most 110 times. A single long sleep hits
-the command timeout. Do the polling with `node scripts/wait-verdict.mjs --issue NN
-[--sha <tip>]` (#496): it watches the label, the pipeline's own comments (conflict,
-cancelled merge, failed run) and optionally Validate on the SHA, prints only when
-the state changes and exits 0 on a new label, 3 on an event that needs a hand,
-4 on timeout — the same 90 s × 110 without a model turn per tick. It writes
-nothing. Pipeline comments older than the latest application of `S4`/`S7` are
-the baseline, not an outcome of the new round; an outcome from the current round
-which already exists when the waiter starts is still delivered immediately (#546).
-Watch the **label**, not the comment: the label is the state,
-the comment only explains it. Do not wait at all while `blocked` is set — the task
-is waiting on the owner, not on the reviewer. On exhausting the attempts, stop and
-tell the owner: a failed run leaves the label where it was, forever.
-
-What the new label means:
+**Having applied `S4-spec-review` or `S7-code-review`, wait for the result
+instead of ending the session.** The label starts the pipeline by itself. Poll
+with `node scripts/wait-verdict.mjs --issue NN [--sha <tip>]` (#496): it watches
+the label and the pipeline's comments every 90 s, at most 110 times, prints only
+on a change and exits 0 on a new label, 3 on an event that needs a hand, 4 on
+timeout. Watch the **label**, not the comment. Do not wait while `blocked` is
+set.

 | Now reads | What happened | What you do |
 |---|---|---|
-| `S5-ready` | the spec is accepted | write the code |
+| `S5-ready` | the spec is accepted | write the code (a draft from `S4`: rebase onto `dev`, check, push — §11.8) |
 | `S3-spec` | the spec came back | read the verdict, revise, re-apply `S4-spec-review` |
 | `S6-in-progress` | the code came back | revise, re-apply `S7-code-review` — **or**, if the verdict was green and only the merge conflicted, just rebase and re-apply. The comment says which |
 | `S8-merged` | accepted and already in `dev` | nothing |
 | `review-4` | the cycle limit is spent | stop, the owner decides |

 **After a review run the label always changes.** If it did not, the run itself
-failed rather than the work — say so to the owner instead of polling on.
+failed rather than the work — say so to the owner instead of polling on. The
+bounded queue reconciler (#555) re-wakes a review whose event was lost; it is a
+safety net, not permission to stop waiting for the review you started.

-The repository also has a bounded queue reconciler (#555). It takes one S4/S7
-snapshot every thirty minutes and exits. It may re-apply the same review label
-only when the matching event was lost or its run ended with a transient
-cancellation/timeout before a sealed result existed. It never applies verdicts or
-merges. Running work, `blocked`, `review-4`, a foreign material/stage/attempt, a
-guard failure, or an unintegrated sealed model result is left untouched and gets
-at most one machine-keyed diagnostic. This is a safety net, not permission for an
-agent to stop waiting for the result of the review it started.
-
-**A failed pre-release gate does not send the issue back to review.** The
-implementation loop runs only typecheck, unit and build; golden, browser smokes,
-performance and the full HA harness run before a beta, which is after the code
-review has passed and the issue sits in `S8-merged`. Some defects cannot surface
-any earlier.
-
-Fix it, re-run what failed, and a green run is enough for the release to continue.
-The issue stays in `S8-merged`. Record the **exact command and its result** in the
-issue — "verified" without a command proves nothing. Trailers as usual, and
-`User-Visible: yes` still means both changelogs in the same commit.
-
-The exception covers repairing the defect the gate named, not carrying on
-development under the name of a repair. It goes through the normal flow — a new
-issue, or back to `S6-in-progress` — if the fix changes a behaviour contract, gives
-the user something new, reaches a subsystem the task never touched, or is
-comparable in size to the task itself. And editing the gate so it stops failing is
-concealment, not repair; the exception is a defect proven to be **in the fixture**,
-as on #89, where the sun sat at azimuth 180° and the only window faced north, so no
-ray was ever built.
-
-Baselines are still accepted only via `npm run golden:accept -- --reviewed` on a
-complete Linux CI artefact. "So the gate goes green" is not a reason.
-
-The exchange happens in **issue comments** — there is no local message bus. Verdict
-format:
-
-```text
-Verdict: green/yellow/red · cycle r<N>/4 · High: N · Medium: N → in-task | #… · Document: …
-```
-
-High blocks. A Medium finding INSIDE the task's scope is fixed within the task:
-with no High findings the verdict is yellow, the author fixes it and the fix
-passes another review cycle — no separate issue (owner's decision 2026-08-19,
-#202: filing and servicing an issue costs far more than fixing in place). Only
-a Medium finding OUTSIDE the scope becomes its own issue — foreign scope is
-never patched from this branch. Low is fixed or waived with a note
-in the review document. A yellow verdict is legitimate even when every acceptance
-criterion passes, if the change does not solve the stated scenario or degrades a
-neighbouring one.
-
-**Four review cycles** (two on the light track). The counter lives in the document
-name, `-r1`…`-r4`; the fourth adds the `review-4` label. There is no fifth attempt:
-the owner splits the task, rejects it, or arbitrates.
-
-On the light track (`small`: complexity ≤3, one surface, no config migration, no
-new UX contract, no perf or touch impact — all at once) the spec lives in the issue
-body and the spec review is a comment. Code review is never skipped. This track is
-the default: taking the full one means naming the criterion above that the task
-does not meet.
-
-## Specs
-
-The spec lives in the **issue body**, under a `## ТЗ` heading (owner decision
-2026-09-10, #517); `docs/specs/` is an archive of specs written before that date
-and takes no new files. Required sections are in `PROCESS.md` §7.1, plus two
-product ones: which persona meets this, on which surface, at what moment; and what
-the person sees before and after, in one sentence without implementation terms.
-Proof that a verdict was passed on a given text is the pipeline's job: it writes
-the `sha256` of the normalised body into the review document's anchor block, and
-an edit made after a green spec review reaches the code reviewer as a finding.
-
-**Ambiguity is asked, not guessed — but only product ambiguity.** A guess written as
-fact is the worst kind of defect: it passes review because it looks like a decision.
-
-The owner answers exactly two kinds of question: **what a person sees or does**, and
-**how much user-visible change belongs in this issue**. Behaviour in a boundary case,
-which persona wins when two conflict, what counts as acceptable degradation, whether
-a neighbouring behaviour is in scope here or becomes its own issue.
-
-Everything a user cannot observe is yours to settle: where state is stored, which
-module carries the guard, naming, file layout, test strategy, migration mechanics,
-development policy. Decide it, record it in an explicit "assumed, change freely"
-block, and let the reviewer challenge it. A technical disagreement between author and
-reviewer is settled by the verdict, not by the owner; it reaches him only when the
-cycle limit is exhausted.
-
-Split a mixed question instead of escalating all of it. "Where does this state live"
-is technical. "Does it survive a page reload and follow the plan across screens" is
-product. Ask the second, decide the first.
-
-Ask in one batched issue comment, each question carrying a proposed default, and put
-`blocked` on top of `S3-spec` while waiting. A question with a default costs the
-owner seconds; one without costs him minutes.
-
-## Gates
-
-```
-npm run typecheck
-npm test
-npm run build
-npm run inventory        # the only correct way to get test counts
-```
-
-Never copy test counts into documents by hand; they go stale in days.
-
-After building, keep the complete manifest-driven bundle trees in sync — CI
-verifies every listed file byte-for-byte:
-
-```
-npm run bundle:sync   # dist → custom_components + demo/srv/assets (#255)
-npm run bundle:budget # initial View graph <= 256000 B gzip (#337)
-```
-
-`npm run gate:small` runs the mandatory part of PROCESS §8 in one go (#479,
-#576): build with typecheck, `no-new-any` and `smoke-select` start in parallel;
-unit tests follow the completed build because their bundle-contract witnesses
-read the freshly produced `dist`, then the bundle-tree comparison and the
-bundle budget run. It prints the smokes the
-diff selects but does not run them by default — `npm run gate:small -- --smokes`
-(#496) adds the browser phase after the artefact preparation: `bundle-sync`, then
-the directly matched and registered smokes two at a time; "broad" matches stay
-the reviewer's call. `golden`, `pytest` and `check-docs --screenshots=strict`
-remain the author's call by diff and AC.
-
-**Start a task from its packet** (#496): `node scripts/task-packet.mjs --issue NN`
-prints one derived view — status and track, what the status permits, the owner's
-recent decisions, the branch against `dev` and Validate on its tip, the previous
-verdict with its recorded tree, AC → evidence from the last review document and
-what is still unwitnessed. It reads GitHub and git and writes nothing; the labels
-remain the only source of status.
-
-**Heavy CI gates run on the beta candidate, nightly and on demand — not on every
-push (#479).** `smoke`, `golden` and `performance_smoke` in Validate are gated
-on the `heavy` output: true for a head commit carrying a `Release:` trailer, for
-`workflow_dispatch full=true` (which `nightly.yml` issues on `dev` every night)
-and for pull requests. A plain push to `dev` runs preflight, frontend (types,
-units, build, bundle sync, no-new-any), the narrow TS/Python geometry parity
-guard when its inputs changed, backend, hacs and hassfest. Screenshot
-freshness in `check-docs` is likewise a warning on a plain push and an error on
-the candidate; `publish-prerelease.yml` and `release.yml` refuse a candidate
-without the `Release:` trailer, so a green Validate without the heavy jobs can
-never pass for a release.
-
-During the implementation cycle the fast gates always run. Since 2026-08-14 the
-owner's machine also carries Playwright with Chromium (Windows) and a full WSL
-environment, which changes one thing (#151): **before moving an issue to
-`S7-code-review`, run the smokes named in its AC locally** — `node
-demo/smoke_<name>.mjs`. A red smoke that reaches the review costs a cycle; run
-locally it costs a minute. Precedent: on #89 a fixture error lived through a
-whole review round that a local run would have caught immediately.
-
-**One handoff, one push (#510).** Run `node scripts/process-gate.mjs --issues`
-locally with `gh` available before pushing (without `gh` the hook cannot check the
-issue status and stays silent). After `S7-code-review` do not push to the branch
-until the verdict or the return arrives: a push on top of a running review cancels
-it (10–20 runner minutes) and, after the material is fixed, also the merge (#312).
-Set `S7` once per round, not after every CI fix: the pipeline now runs Validate
-with the diff mutants on the material itself and returns a red one to `S6` without
-spending a review cycle. Mutants by diff run only where they are explicitly
-requested — the review candidate, the merge candidate (both dispatch Validate
-with `mutants=true`) and PRs (#510, #601). Ordinary pushes, the beta candidate
-(`Release:` trailer) and `full=true` do not request them: a routine push costs
-~3 minutes (08–09.09 mutants cost 48 of 56 Validate job-hours and were mostly
-cancelled by the next push), and by the beta every issue has already been
-mutated twice — on review and on the rebased merge candidate; the night runs
-the full registry (`mutation-gate.yml`), not a diff subset.
-
-The full smoke set, `golden` and `performance_smoke` still belong to the
-pre-beta run — which is then mandatory and complete. WSL runs of the full HA
-harness (`~/houseplan-card`, venv) are advisory; **the canon does not move**:
-the beta gate is CI at the exact SHA.
-
-**Verifying and capturing are different things (#455).** `golden:verify` is
-advisory and legal anywhere, Windows included: it reports differences and
-accepts nothing. **Capturing** frames is refused outside Linux
-before the browser even starts — `golden:capture` through
-`demo/golden/policy.mjs`, documentation screenshots through
-`npm run docs:capture` (use that script, not a bare `node
-demo/docs/capture.mjs`: the gate sits one step earlier because editing the
-capture script invalidates the committed screenshot index). The refusal prints
-the WSL command. The reason is not policy but physics: Windows
-rasterizes text through DirectWrite with different subpixel and DPI behaviour,
-so no frame ever matches an accepted baseline byte for byte, no environment
-witness can exist, and acceptance would refuse anyway (#401 accepts any
-environment that proves itself with byte-identical undeclared frames — Linux is
-simply the only one we have). The deliberate override is
-`HP_ALLOW_FOREIGN_CAPTURE="reason"`; the reason travels into the output and the
-manifest. Baselines are still accepted only via
-`npm run golden:accept -- --reviewed` on a complete artefact, and the accepted
-index records the platform next to the Chromium build. The one local
-shortcut is `npm run docs:accept -- --identical` (#512): it re-captures on this
-machine, compares decoded pixels with the committed frames and, only when every
-frame is identical, refreshes the manifest fingerprints — frames that differ go
-through the artefact as before. The displayed card version reaches the DOM
-through `displayVersion()` (`src/card-version.ts`); the global
-`__HP_VERSION_OVERRIDE__` behind it is for harnesses only and the product never
-sets it.
-
-**Backend.** A full Home Assistant harness cannot run on native Windows at all:
-Home Assistant imports the Unix-only `fcntl` module. Its canon is Linux CI or WSL.
-Locally only the pure subset runs; `python -m pytest tests_backend/ -q` without
-Home Assistant **silently skips** `test_ha_*.py` (`conftest.py` ignores them when
-`homeassistant` is not importable), so a green result proves nothing. Say so in the
-report instead of claiming the backend was verified. Cloud agents have the harness
-at `.venv-backend/bin/python`.
-
-**Running the app / smoke suite**: build a fresh bundle and copy it into the demo
-assets first, then run `node demo/smoke_*.mjs`. No real Home Assistant server is
-required: `demo/srv/demo.html` stubs `hass`, registries and `callService`.
-
-**Golden images**: `npm run golden:capture` and `npm run golden:verify` refuse a
-stale demo bundle. Build and copy first, then review `artifacts/golden/actual/` and
-`diff/`. Update baselines only with `npm run golden:accept -- --reviewed`, using the
-complete Linux CI artifact; never accept a partial scenario or images merely to make
-CI green. See `demo/golden/README.md`.
-
-**Freshness contract**: the embedded fingerprint covers `src/` plus Rollup,
-TypeScript and package-lock build inputs. Every browser check must verify it
-before trusting a result — benchmarks, golden runs and documentation captures
-call `assertFreshDemoBundle` themselves, and smokes get it from `launch()` in
-`demo/serve.mjs` (#236). A missing or mismatched fingerprint is a hard failure,
-not a warning; `HP_ALLOW_STALE_BUNDLE=1` skips the check for debugging and says
-so out loud. A smoke against a stale bundle does not fail cleanly: part of its
-assertions go red and part stay green, which reads as a logic defect.
-
-**CI is pinned to an exact SHA.** The release gate accepts only a `completed
-success` run for the candidate's SHA, not "the last green one"; a new push cancels
-an unfinished Validate for the same branch. Gate jobs, matching the actual
-`validate.yml` (#191): `docs`, `provenance`, `process-gate`, `hacs`, `hassfest`,
-`frontend`, `smoke`, `golden`, `performance_smoke`, `geometry_parity`, `backend`.
-The `changes` job
-is a service path-filter, not a gate. `docs` is a real blocker: it checks the
-screenshots `sourceFingerprint` against current `src/**`, which is exactly what
-went red after the #113 merge. A stable release additionally waits for Full
-Performance and for a green E2E run on a real Home Assistant (`houseplan-e2e`,
-dispatched on the candidate SHA by `release.yml`, #514/#540); betas and the
-development cycle never run E2E. Stable installable assets (`houseplan.zip`,
-`houseplan-card.js` and their `SHA256SUMS`) reach the public stable release only
-from `release.yml` after those gates; a release published by hand is turned back
-into a draft first (#540). The prerelease publisher additionally ships a
-candidate-bound `RELEASE-MEMBERSHIP.json` covered by the same passport (#547).
-
-**"Verified" without a named command and its result is not evidence.**
+A failed pre-release gate (golden, full smokes, performance, HA harness) does not
+send the issue back to review: fix, re-run what failed, record the exact command
+and result in the issue (`PROCESS.md` §11.4 — and its limits).

 ## Environments

-**Local Windows checkout** is the day-to-day environment: repository-pinned Node
-and Python as in CI (`npm run toolchain:check` compares the machine with the pins
-CI actually uses — `.nvmrc` and `.python-version` are derived from the same
-sources, #496),
-`gh` authenticated. On the owner's machine do not trust the ambient PATH:
-`.\scripts\windows-toolchain.ps1 setup|check` owns a verified portable Node and
-dedicated `.venv-ci`, and its `npm`/`node`/`python`/`playwright` actions are the
-explicit pinned entrypoints (#557). It changes no persistent PATH and never
-deletes a mismatched venv. In WSL, work from an ext4 clone and use
-`bash scripts/wsl-setup.sh --verify` for the real HA subset plus one Linux visual
-capture; exact-SHA Linux CI remains authoritative. `.venv-backend` does **not**
-exist there — it is provisioned only by cloud agent startup scripts, which also
-run `npm ci` and install Playwright Chromium.
-
-Known environment-sensitive smoke: `demo/smoke_opening_measure.mjs` fails two
-sub-checks (`place_dialog_x_magnetised`, `place_committed_x_center`) under the pinned
-Chromium — a `1e-6`-tolerance magnet-snap on the opening-*placement* path. It
-reproduces against the pristine committed bundle, so treat it as
-pre-existing/pixel-precision, not a regression you introduced.
-
-## Alpha experiments
-
-`src/labs.ts` is the single registry and resolver for hidden presentation
-experiments. One browser-local switch controls the complete set known to the
-installed build: `hp_alpha=1` in query or the shared hash grammar enables and
-persists it, while `hp_alpha=0` disables and persists it. Do not add per-feature
-URL/storage keys or a YAML/config switch. The legacy `hp-labs` grammar and
-`houseplan_card_labs_v1` storage are ignored and never migrated.
-
-A new registry entry needs a unique lowercase id, issue, summary and
-unit/browser coverage; it does not get `since` or `expires`. Invalid or duplicate
-entries fail closed. Alpha capabilities may alter presentation only and must not
-gate data, migrations, stores, HA actions or network calls. Current renderer
-details are in `docs/ISOMETRIC.md`.
-
-Demo harness render quirk: the fake `hass` in `demo.html` is set once, so opening the
-page directly in a browser renders the floor plan but **device icons only appear
-after a re-render** (an F5 refresh, or nudging `card.hass = {...card.hass}`). The
-smoke launcher `demo/serve.mjs` already does this nudge; a plain browser session does
-not. This is a harness limitation, not a card bug.
-
-## Promotion rule
-
-Every new feature or material behaviour change must be published as a beta/RC
-before it can enter a stable release, even when its local audit is clean. The
-stable release commit is promotion-only: version fields, generated bundle
-snapshots and changelog/release metadata. Do not add feature source code in
-that commit. An explicit owner-requested emergency hotfix is the only exception
-and must be called out in the release handoff.
-
-A `Release vX.Y.Z-beta.N candidate` commit is **not** promotion-only: it carries
-the work itself and follows the ordinary rules, trailers included.
-
-Issues are closed in a batch when a beta ships, not when implementation ends: that
-way a bug found in the beta returns to the same task, and the beta announcement can
-list what went in. The batch is immutable candidate membership proven by Git
-trailers, never the mutable S8 queue at close time; authorship does not change
-membership. Status labels are stripped as the issues close, and retries resume the
-same manifest without duplicating the release comment (#547).
+The owner's Windows machine: `.\scripts\windows-toolchain.ps1 setup|check` owns
+the pinned Node and Python; WSL works from an ext4 clone with
+`bash scripts/wsl-setup.sh --verify` (`docs/DEVELOPMENT.md` › Local Windows
+workstation). `npm run toolchain:check` compares any machine with the pins CI
+uses. The full Home Assistant harness cannot run on native Windows; without an
+importable `homeassistant` pytest does not collect `test_ha_*.py` at all, so a
+green pure run proves nothing about the harness (`docs/TESTING.md`). Cloud
+agents have the harness at `.venv-backend/bin/python`.
@@ -38,6 +38,17 @@ an eager import. Extend the runtime, manifest, file/key/placeholder parity and
 regional-locale tests together; never bypass the registry by importing a locale
 directly in a component.

+Administrator-only copy lives in three lazy namespace dictionaries —
+`src/i18n/settings/`, `src/i18n/support/` and `src/i18n/topology/` (#627). Their
+English file is static (the synchronous fallback); every other language is one
+lazy chunk per namespace × language: a two-line loader module
+`src/i18n/<namespace>/<namespace>-<code>.ts`, one `import()` with a
+content-hashed retry token in `src/i18n/<namespace>.ts`, and one entry in
+`NAMESPACE_LOCALE_CHUNKS` in `scripts/bundle-manifest.mjs`. The lazy surfaces
+(onboarding, editor runtime, Zigbee overlay) wait for their dictionaries before
+painting; never import a non-English namespace JSON statically — the budget
+gate and `test/i18n-lazy-namespaces.test.mjs` refuse it.
+
 The current `subst()` helper does not implement plural rules. Phrase strings so
 their grammar does not depend on the numeric value (for example, use a neutral
 label followed by `{n}` rather than an English singular/plural pair).
@@ -47,6 +58,22 @@ set; maintain the existing English and Russian documentation according to the
 project's normal rules. Right-to-left layout is a separate product project,
 because the plan canvas and editors cannot be mirrored by translations alone.

+## Documentation screenshots
+
+The images under `docs/images/` are produced only from synthetic data on the
+pinned Chromium in CI. A task branch does not commit them, nor the golden
+baselines: once per beta the `beta-derived.yml` workflow refreshes the
+fingerprint, the frames and the golden baselines on `dev` in one bot commit,
+accepting only the frames it was told to expect (`PROCESS.md` §8, #697). A task
+that changes visuals on purpose sets the `ci:golden` label. The manual path —
+the `Docs screenshots` workflow and `npm run docs:accept -- --reviewed
+--from=<unpacked artifact>`, or `--identical` when no pixel can move — stays
+for the release manager. Scenario version, source fingerprint and every image hash
+are recorded in the [screenshot index](docs/images/screenshots.json), and
+`node scripts/check-docs.mjs` reports a stale fingerprint: a warning on an
+ordinary push, an error on a beta candidate (a commit with a `Release:`
+trailer). The full rule is in `PROCESS.md` §8.
+
 ## Where to ask

 Not sure whether something is a bug, or just want to discuss an idea before
@@ -67,44 +94,47 @@ issue, but they do not replace it or maintain a separate checklist.

 ```bash
 git clone --filter=blob:none https://github.com/Matysh/houseplan-card && cd houseplan-card
-npm ci                    # frontend toolchain
+npm ci                    # frontend toolchain; `prepare` installs .githooks
 npm run typecheck         # tsc --noEmit (strict)
 npm test                  # node:test — pure logic, i18n parity, tap-action security
 npm run build             # tsc + rollup → dist/houseplan-card.js
-pip install pytest voluptuous && python -m pytest tests_backend -q   # pure backend tests
-npm install                # also installs .githooks through the prepare script
+pip install -r tests_backend/requirements.txt && python -m pytest tests_backend -q   # CI pins, HA harness included
 ```

 ### Why `--filter=blob:none` (#345)

-A full clone is **215 MB of `.git`**; a blobless one is **26 MB** — measured, not
-estimated. Both carry all 1611 commits and all 182 tags, so ranges, `merge-base`
-and `git diff` across history work identically; `git diff origin/dev~3..origin/dev`
-in a blobless clone takes about a second and grows `.git` by one megabyte.
-
-The difference is that historical *file contents* are fetched only if something
-actually asks for them. That matters here because 32% of the pack is documentation
-screenshots — ten PNGs re-captured 196 times — and another sizeable share is the
-committed bundle, one 1.16 MB file per product change. Almost nobody ever reads an
-old revision of either.
+A blobless clone keeps every commit and tag, so ranges, `merge-base` and
+`git diff` across history work exactly as in a full clone; only historical *file
+contents* are fetched on demand. Most of the pack is exactly such content that
+almost nobody reads again — documentation screenshots re-captured with the UI and
+the committed bundle rewritten by every release candidate — so a blobless clone
+is several times smaller. To see the numbers for your own clone, compare
+`git count-objects -vH` in a blobless and in a full one.

 Drop the flag if you work offline with history, or need `git log -p` over the whole
 tree repeatedly. Do **not** replace it with `--depth=1`: a shallow clone is about
 the same size but has no `merge-base`, so the process gate, `smoke-select` and
 every `origin/dev..HEAD` range stop working.

-The HA-harness backend tests (`tests_backend/test_ha_*.py`) need Python ≥3.13 and
-`pytest-homeassistant-custom-component home-assistant-frontend`; CI runs them on
-every push — locally they are skipped when `homeassistant` is not importable.
+The HA-harness backend tests (`tests_backend/test_ha_*.py`) need the
+repository-pinned Python (`.python-version`) and
+`pytest-homeassistant-custom-component home-assistant-frontend`; their canon is
+Linux CI or WSL (`bash scripts/wsl-setup.sh --verify`). Without an importable
+`homeassistant` they are not collected at all — not skipped — and pytest prints
+`HA harness NOT collected: …` (#630).

 ## Ground rules

 - **Docs in the same commit**: CHANGELOG entry for user-visible changes;
-  `docs/STATUS.md` for state changes; `docs/DEVELOPMENT.md` for new gotchas.
+  `docs/ARCHITECTURE.md` for changes to the data model, WS API or coordinate
+  system; `docs/STATUS.md` for state changes; `docs/DEVELOPMENT.md` for new
+  gotchas. A docs-only commit needs no trailers (`PROCESS.md` §3 п.10).
 - Every UI string goes through `src/i18n/<lang>.json`; follow the
  [Translations](#translations) flow for registry and backend parity.
- The built card must be committed in sync: `cp dist/houseplan-card.js
-  custom_components/houseplan/frontend/` (CI compares them byte-for-byte).
+- The committed bundle changes only in a release candidate: `npm run
+  bundle:release` in a commit with a `Release:` trailer (#657). An ordinary task
+  restores it with `npm run bundle:clean` before committing — the `commit-msg`
+  hook refuses a bundle change otherwise.
 - Tap actions have a security model (locks/alarms never toggle from the plan) —
  see `resolveToggleIntent` in `src/device-toggle.ts`; don't weaken it.
 - Every commit follows the issue and trailer contract in `PROCESS.md`.
@@ -114,6 +144,5 @@ every push — locally they are skipped when `homeassistant` is not importable.
 ## Architecture

 Start with `docs/ARCHITECTURE.md` (data model, WS API, coordinate system) and
-`docs/STATUS.md` (current state). Release: bump the version in `package.json`,
-`manifest.json`, `const.py`, `CARD_VERSION`, tag `vX.Y.Z`, publish a GitHub release —
-the workflow attaches the card bundle.
+`docs/STATUS.md` (current state). Release mechanics live in one place:
+`docs/DEVELOPMENT.md` › Release.
@@ -42,6 +42,9 @@ sync across screens.
  show temperature, humidity, light state and average LQI.
 - **Light and environment.** Room fills, lamp Glow, wall shadows, a day-cycle
  backdrop and sunlight through windows.
+- **Flat or 2.5D.** One switch in General settings › Display shows the plan
+  with depth everywhere: raised device tiles with soft floor shadows and a soft
+  wash of sunlight; decor and wall colours stay as you set them.
 - **Doors, windows, gates and vacuums.** Openings follow real contacts and locks;
  a robot can show its position, dock and travelled path.
 - **Several floors and screens.** Space tabs, swipe navigation, local viewport,
@@ -58,8 +61,8 @@ sync across screens.
 1. Install the integration and open **House Plan** in the Home Assistant sidebar.
 2. Create the first **space**: upload SVG/PNG/JPG/WebP, reuse an uploaded image,
   or choose no image and draw the plan by hand.
-3. In Plan, select **Room outline**, place vertices, and click the first point to
-   close the outline.
+3. In Plan, select **Walls** and draw one continuous chain around the room: when
+   it closes an area, the room dialog opens.
 4. Name the room and bind it to a Home Assistant area. Use “No area” for a room
   that has no devices.
 5. Open Device: devices from the bound area are already placed; drag their
@@ -183,8 +186,11 @@ concurrent clients, but avoid editing the same object in two browsers at once.
 - [Full user guide](docs/USER-GUIDE.md)
 - [Mouse/touch/keyboard matrix](docs/USER-GUIDE.md#6-navigation-zoom-and-input)
 - [Plan tools](docs/USER-GUIDE.md#plan-tools-at-a-glance)
+- [Stairs and floor links](docs/STAIRS.md)
 - [Background editor](docs/DECOR-EDITOR.md)
 - [Robot vacuums](docs/VACUUM.md)
+- [Presence radars](docs/RADAR.md)
+- [PDF export](docs/PDF-EXPORT.md)
 - [Touch support](docs/TOUCH-SUPPORT.md)

 <!-- docs-section: support -->
@@ -197,9 +203,4 @@ concurrent clients, but avoid editing the same object in two browsers at once.
  Include the version, browser, logs and reproduction steps; private entity IDs
  may be replaced with fictional ones.

-Documentation screenshots are produced by the reproducible
-`npm run build && node demo/docs/capture.mjs` command using synthetic data only. Scenario version,
-source fingerprint and every image hash are recorded in the
-[screenshot index](docs/images/screenshots.json).
-
 License: [MIT](LICENSE).
@@ -43,6 +43,9 @@ Assistant — и устройства появятся на плане авто
  а карточки комнат показывают температуру, влажность, свет и средний LQI.
 - **Свет и окружение.** Заливки комнат, Glow от ламп, тени от стен, дневной фон и
  солнечные лучи из окон.
+- **Плоский план или 2.5D.** Один переключатель в «Общие настройки ›
+  Отображение › Объёмный вид плана (2.5D)» показывает план с глубиной везде: приподнятые плитки устройств с мягкими
+  тенями и мягкая засветка солнцем; декор и цвета стен остаются вашими.
 - **Двери, окна, ворота и пылесосы.** Проёмы отражают реальные датчики и замки;
  робот показывает позицию, базу и пройденный путь.
 - **Несколько этажей и экранов.** Вкладки пространств, жесты переключения,
@@ -57,10 +60,11 @@ Assistant — и устройства появятся на плане авто
 ## Первая рабочая комната

 1. Установите интеграцию и откройте **House Plan** в боковом меню Home Assistant.
-2. Создайте первое **пространство**: загрузите SVG/PNG/JPG/WebP либо выберите
-   вариант без изображения, чтобы нарисовать план вручную.
-3. В редакторе «План» выберите **Контур комнаты**, поставьте вершины и замкните
-   контур нажатием на первую точку.
+2. Создайте первое **пространство**: загрузите SVG/PNG/JPG/WebP, возьмите уже
+   загруженное изображение либо выберите вариант без изображения, чтобы
+   нарисовать план вручную.
+3. В редакторе «План» выберите **Стены** и нарисуйте непрерывную цепочку по
+   периметру комнаты: когда она замкнёт область, откроется диалог комнаты.
 4. Назовите комнату и свяжите её с зоной Home Assistant. Для помещения без
   устройств выберите «Без зоны».
 5. Откройте «Устройства»: устройства связанной зоны уже размещены автоматически;
@@ -188,8 +192,11 @@ default_floor: ground
 - [Полное руководство пользователя](docs/USER-GUIDE.ru.md)
 - [Матрица mouse/touch/keyboard](docs/USER-GUIDE.ru.md#6-навигация-масштаб-и-жесты)
 - [Инструменты плана](docs/USER-GUIDE.ru.md#инструменты-плана-в-короткой-таблице)
+- [Лестницы и переходы между этажами](docs/STAIRS.md)
 - [Редактор подложки](docs/DECOR-EDITOR.md)
 - [Роботы-пылесосы](docs/VACUUM.md)
+- [Радары присутствия](docs/RADAR.md)
+- [Экспорт в PDF](docs/PDF-EXPORT.md)
 - [Поддержка touch](docs/TOUCH-SUPPORT.md)

 <!-- docs-section: support -->
@@ -202,9 +209,4 @@ default_floor: ground
  обновление страницы (`Ctrl+F5`). Приложите версию, браузер, логи и шаги
  воспроизведения; приватные entity ID можно заменить вымышленными.

-Скриншоты в документации получены воспроизводимой командой
-`npm run build && node demo/docs/capture.mjs` только на синтетических данных. Версия сценариев,
-fingerprint исходников и хеш каждого изображения находятся в
-[индексе снимков](docs/images/screenshots.json).
-
 Лицензия: [MIT](LICENSE).
@@ -2,8 +2,8 @@

 Corrected derivative of the 0.4.0 built-in furniture artwork (#593, #606).

- `svg/menu/`: the same 33 front-view category illustrations as 0.4.0, used
-  only by the lazy editor bundle.
+- `svg/menu/`: 33 front-view category illustrations, used only by the lazy
+  editor bundle.
 - `svg/plan/`: 60 top-view drawings used on the plan.
 - `pack.json`: stable public ids, category links, default dimensions and names.
  The filename avoids the `*manifest.json` suffix reserved by HACS.
@@ -16,11 +16,18 @@ Corrections to 0.4.0:
   as a read-compatible alias by the application, not duplicated in this pack.
 2. The *contents* of `plan/bookshelf.svg` and `plan/shelf_floor.svg` were swapped
   so each filename and unchanged public id shows the named furniture item.
-3. All 33 menu categories now have a plan variant. No menu artwork was changed.
+3. All 33 menu categories now have a plan variant.
+4. `menu/dishwasher.svg` uses the replacement front-view illustration supplied
+   by JustBusiness in [issue #640](https://github.com/Matysh/houseplan-card/issues/640).
+   Its reviewed source archive is `dishwasher.zip`, SHA-256
+   `1A9B1BDAF490B35812F51E4DD3CB1C425224EC768219C31B979DD6A84E890203`;
+   the path geometry is unchanged apart from safe repository normalization.
+   JustBusiness supplied this asset for House Plan to use, modify and distribute
+   under the repository MIT License without separate UI attribution.

-The 93 SVG drawings originated with Sergey Matyunin (`Matysh`). He granted
-House Plan permission to use, modify and distribute them under the repository
-MIT License without separate UI attribution in
+The original 0.4.0 set of 93 SVG drawings originated with Sergey Matyunin
+(`Matysh`). He granted House Plan permission to use, modify and distribute them
+under the repository MIT License without separate UI attribution in
 [issue #593](https://github.com/Matysh/houseplan-card/issues/593#issuecomment-5739841899).
 The reviewed source archive is `houseplan-furniture-0.4.0.zip`, attached to
 [issue #593](https://github.com/Matysh/houseplan-card/issues/593), SHA-256
@@ -1,3 +1,3 @@
 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 110 110">
-  <path d="M81 82.5 L81 27.5 M81 82.5 C81 83.8807 79.8807 85 78.5 85 L31.5 85 C30.1193 85 29 83.8807 29 82.5 L29 55.5 M81 82.5 L81 40 M81 27.5 C81 26.1193 79.8807 25 78.5 25 L31.5 25 C30.1193 25 29 26.1193 29 27.5 M81 27.5 L81 40 M29 27.5 L29 55.5 M29 27.5 L29 40 M81 40 C81 38.6193 79.8807 37.5 78.5 37.5 L31.5 37.5 C30.1193 37.5 29 38.6193 29 40 M29 40 L29 55.5 M35.75 31 L45.25 31 M55.9943 55 C55.9943 55 54.6654 56.8105 54.5153 58.1429 C54.3169 59.9042 56.1139 60.6968 55.9943 62.4643 C55.8942 63.9429 54.5153 66 54.5153 66 M60.4943 55 C60.4943 55 59.1654 56.8105 59.0153 58.1429 C58.8169 59.9042 60.6139 60.6968 60.4943 62.4643 C60.3942 63.9429 59.0153 66 59.0153 66 M50.9943 55 C50.9943 55 49.6654 56.8105 49.5153 58.1429 C49.3169 59.9042 51.1139 60.6968 50.9943 62.4643 C50.8942 63.9429 49.5153 66 49.5153 66 M72 60.5 C72 69.8888 64.3888 77.5 55 77.5 C45.6112 77.5 38 69.8888 38 60.5 C38 51.1112 45.6112 43.5 55 43.5 C64.3888 43.5 72 51.1112 72 60.5 Z M66.5 60.5 C66.5 66.8513 61.3513 72 55 72 C48.6487 72 43.5 66.8513 43.5 60.5 C43.5 54.1487 48.6487 49 55 49 C61.3513 49 66.5 54.1487 66.5 60.5 Z M69.5 31 C69.5 32.1046 68.6046 33 67.5 33 C66.3954 33 65.5 32.1046 65.5 31 C65.5 29.8954 66.3954 29 67.5 29 C68.6046 29 69.5 29.8954 69.5 31 Z M77 31 C77 32.1046 76.1046 33 75 33 C73.8954 33 73 32.1046 73 31 C73 29.8954 73.8954 29 75 29 C76.1046 29 77 29.8954 77 31 Z" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+  <path d="M29 76C29 77.3807 30.1193 78.5 31.5 78.5H78.5C79.8807 78.5 81 77.3807 81 76M29 76V82.5C29 83.8807 30.1193 85 31.5 85H78.5C79.8807 85 81 83.8807 81 82.5V76M29 76V40M81 76V40M81 40C81 38.6193 79.8807 37.5 78.5 37.5H31.5C30.1193 37.5 29 38.6193 29 40M81 40V27.5C81 26.1193 79.8807 25 78.5 25H31.5C30.1193 25 29 26.1193 29 27.5V40M43 42H67M35.75 31H45.25M69.5 31C69.5 32.1046 68.6046 33 67.5 33C66.3954 33 65.5 32.1046 65.5 31C65.5 29.8954 66.3954 29 67.5 29C68.6046 29 69.5 29.8954 69.5 31ZM77 31C77 32.1046 76.1046 33 75 33C73.8954 33 73 32.1046 73 31C73 29.8954 73.8954 29 75 29C76.1046 29 77 29.8954 77 31Z" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
 </svg>
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 JB (justbusiness)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
@@ -0,0 +1,47 @@
+# House Plan moon pack 1.0.0
+
+Designer asset for [issue #661](https://github.com/Matysh/houseplan-card/issues/661)
+(moon in its current phase on the "Follow the Sun" background), variant A:
+one full-moon image, the phase is applied by the card as an SVG mask (C5).
+
+- `moon.svg`: square `viewBox="0 0 512 512"`, disc centred at (256, 256),
+  diameter 480 (16 px margin for anti-aliasing). Full moon, front-lit: no
+  terminator, no shadow, no halo or glow outside the disc, no baked phase.
+  Near side, north up, Mare Crisium on the right; the art is never mirrored.
+  Owner 2026-09-29: the lit side is always the left one (as in the designer's
+  phase sequence), waning runs the same states backwards; only the mask flips.
+  Owner 2026-09-30: a distinct state for every day of the lunar month; the mask
+  is continuous, so the card simply uses the daily illumination k.
+  The dark side is not drawn: the card renders the same art at 8 % opacity.
+- Edge: one radial gradient ring with no hard outer edge (as in the designer's
+  Figma export): bright rim 0.855-0.90 R, dark outline `#2b3138` at 50 % from
+  0.905 R to 0.92 R (owner 2026-09-29, for a forced white background), then a
+  1.5-unit fade to transparent by 0.935 R (r 239.4 in the 512 box, inside the 480
+  disc). The soft limb hides any missing anti-aliasing of the outer edge.
+- The disc is masked (`<mask>`), not clipped: Chrome with GPU rasterisation draws
+  `clip-path` edges without anti-aliasing (seen on Windows), masks are anti-aliased.
+- Art by JB (Figma, `House-plan` file). The Figma export (`source/figma-export/Full.svg`
+  in the source archive) was normalised for the pack by `source/convert_jb.py`:
+  viewBox 200 -> 512 (scale 2.56, disc clipped at r 240), the `mix-blend-mode`
+  screen ring and multiply groups removed (blend modes depend on the stacking
+  context they land in, so the file now composites normally and looks the same
+  everywhere), the three 5-7 % crater layers and the 484-path speckle texture
+  dropped (invisible at 200 px), and each mare "blend" of 22 nested rings
+  thinned to 4 rings (steps 0, 8, 16, 21). The export's screen-blended edge ring is rebuilt
+  as a normal-composited radial gradient (the art is masked at r 230), so the feathered edge is part
+  of the 480 disc and nothing is drawn outside it. Path coordinates rounded to 0.1, gradient offsets kept at 0.001 (`svgo.config.mjs`).
+- Vector only: two `radialGradient`s (disc, edge), one `mask`, paths. No `filter`,
+  `feGaussianBlur`, `feImage`, embedded raster, fonts or external references.
+  25.6 KB raw, about 9 KB gzip.
+- Colours: disc `#949493` (centre) -> `#D6D5D4` (rim), maria grey rings
+  `#404040 -> white` under a 0.2-0.6 group opacity. Checked on the night
+  (`#111a27 -> #1f2f3e`), dusk (`#48536c -> #9a7380`) and dawn
+  (`#aabdd1 -> #e8c8b7`) palettes at 200, 120 and 94 px.
+- `pack.json`: pack id, version, licence, source link and the disc geometry
+  for `scripts/generate-moon-assets.mjs`.
+
+JB (justbusiness) supplies this asset for House Plan to use, modify and
+distribute under the repository MIT License without separate UI attribution
+(`LICENSE.md`). The reviewed source archive with its SHA-256 is attached to
+issue #661. Generated TypeScript (`src/moon-art.generated.ts`) must not be
+edited by hand; regenerate it from this pack.
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "pack_id": "houseplan",
+  "pack_version": "1.0.0",
+  "title_ru": "Луна: полный диск для маски фазы",
+  "title_en": "Moon: full disc for the phase mask",
+  "author": "JB (justbusiness)",
+  "license": "MIT",
+  "source_url": "https://www.figma.com/design/cpGN8MhJGydwVOUzZv8dia/House-plan",
+  "issue": 661,
+  "file": "moon.svg",
+  "view_box": [
+    0,
+    0,
+    512,
+    512
+  ],
+  "disc": {
+    "cx": 256,
+    "cy": 256,
+    "r": 240
+  },
+  "lit": "front",
+  "north_up": true,
+  "east_right": true,
+  "notes_en": "Full moon, front-lit, no terminator, no shadow, no glow outside the disc; thin dark outline for light backgrounds. Art by JB (Figma export normalised: viewBox 512, blend modes removed, rings thinned). Phase mask and the 8 % dark side are applied by the card (C5). The art is never mirrored; the lit side is always the left one, waning runs the same states backwards (owner 2026-09-29).",
+  "notes_ru": "Полная луна, освещение в лоб, без терминатора, тени и ореола; тонкая тёмная обводка для светлого фона. Арт JB (экспорт из Figma нормализован: viewBox 512, без blend-режимов, кольца морей прорежены). Маску фазы и тёмную сторону 8 % накладывает карточка (C5). Арт не зеркалится; освещённая сторона всегда слева, убывание идёт теми же состояниями в обратном порядке (владелец 29.09).",
+  "mirror": false,
+  "outline": {
+    "color": "#2b3138",
+    "opacity": 0.5,
+    "from_r": 0.905,
+    "to_r": 0.92,
+    "fade_to_r": 0.935,
+    "note": "part of the edge gradient, no separate stroke"
+  },
+  "lit_side": "left"
+}
@@ -6,6 +6,7 @@ import logging
 from datetime import timedelta
 from pathlib import Path

+from homeassistant.const import EVENT_HOMEASSISTANT_STOP
 from homeassistant.core import HomeAssistant
 from homeassistant.exceptions import ConfigEntryNotReady
 from homeassistant.helpers.event import async_track_time_interval
@@ -39,6 +40,30 @@ from .store import (
 _LOGGER = logging.getLogger(__name__)


+async def _async_flush_runtime(
+    hass: HomeAssistant, entry: HouseplanConfigEntry,
+) -> None:
+    """Stop deferred writers and persist their latest state once.
+
+    Home Assistant stop and config-entry unload share this exact path.  Both
+    writers are independently guarded so one failed store cannot prevent the
+    other from reaching disk during shutdown.
+    """
+    recorder = hass.data.get(DOMAIN, {}).get("trail_recorder")
+    if recorder is not None:
+        try:
+            await recorder.async_teardown()
+        except Exception:  # noqa: BLE001 - shutdown must continue with other stores
+            _LOGGER.exception("House Plan: flushing vacuum trails failed")
+
+    virtual_lights = getattr(entry.runtime_data, "virtual_lights", None)
+    if virtual_lights is not None:
+        try:
+            await virtual_lights.async_flush()
+        except Exception:  # noqa: BLE001 - shutdown must continue with other stores
+            _LOGGER.exception("House Plan: flushing virtual-light state failed")
+
+
 async def async_setup(hass: HomeAssistant, config) -> bool:
    """Register global handlers (survive config-entry reloads): WS commands, HTTP view."""
    hass.data.setdefault(DOMAIN, {})
@@ -48,11 +73,13 @@ async def async_setup(hass: HomeAssistant, config) -> bool:
        HouseplanContentView,
        HouseplanDecorAssetUploadView,
        HouseplanImportPreviewView,
+        HouseplanPlanUploadView,
        HouseplanUploadView,
    )

    hass.http.register_view(HouseplanUploadView())
    hass.http.register_view(HouseplanDecorAssetUploadView())
+    hass.http.register_view(HouseplanPlanUploadView())
    hass.http.register_view(HouseplanContentView())
    hass.http.register_view(HouseplanImportPreviewView())
    hass.http.register_view(HouseplanFrontendAssetView())
@@ -250,6 +277,19 @@ async def async_setup_entry(hass: HomeAssistant, entry: HouseplanConfigEntry) ->
    # sidebar entry after a migration, repair or initial housekeeping failure.
    panel_path = Path(__file__).parent / "frontend" / "houseplan-panel.js"
    await async_setup_panel_registration(hass, entry, panel_path)
+
+    async def _flush_on_stop(_event) -> None:
+        stop_listener[0] = None
+        await _async_flush_runtime(hass, entry)
+
+    stop_listener = [hass.bus.async_listen_once(EVENT_HOMEASSISTANT_STOP, _flush_on_stop)]
+
+    def _remove_stop_listener() -> None:
+        if stop_listener[0] is not None:
+            stop_listener[0]()
+            stop_listener[0] = None
+
+    entry.async_on_unload(_remove_stop_listener)
    return True


@@ -261,9 +301,8 @@ async def async_unload_entry(hass: HomeAssistant, entry: HouseplanConfigEntry) -
    entry is loaded. Static paths cannot be unregistered by design.
    """
    remove_panel_registration(hass)
-    rec = hass.data.get(DOMAIN, {}).pop("trail_recorder", None)
-    if rec:
-        rec.teardown()
+    await _async_flush_runtime(hass, entry)
+    hass.data.get(DOMAIN, {}).pop("trail_recorder", None)
    if entry.runtime_data.radar_coordinator:
        entry.runtime_data.radar_coordinator.teardown()
        entry.runtime_data.radar_coordinator = None
@@ -7,6 +7,7 @@ one behaviour.
 """
 from __future__ import annotations

+from homeassistant.auth.const import GROUP_ID_READ_ONLY
 from homeassistant.core import HomeAssistant

 from .const import CONF_ADMIN_ONLY
@@ -28,4 +29,27 @@ def may_write(hass: HomeAssistant, user) -> bool:
    # UI has always been admin-gated, and an unset option must not open every
    # write WS/HTTP path to every authenticated household user.
    admin_only = bool(entry.options.get(CONF_ADMIN_ONLY, True))
-    return is_admin if admin_only else True
+    if admin_only:
+        return is_admin
+
+    # Administrators retain write access regardless of their group payload.
+    # HA normally exposes admin groups too, but authorization must be based on
+    # the explicit admin flag rather than incidental group serialization.
+    if is_admin:
+        return True
+
+    # Turning off ``admin_only`` grants editing to ordinary household users,
+    # not to HA's explicitly read-only role (#626).  ``groups`` is part of the
+    # supported HA User model; if a non-admin connection cannot provide a
+    # complete group list, the safe interpretation is that write permission
+    # has not been established.
+    groups = getattr(user, "groups", None)
+    if not isinstance(groups, list) or not groups:
+        return False
+    group_ids: list[str] = []
+    for group in groups:
+        group_id = getattr(group, "id", None)
+        if not isinstance(group_id, str):
+            return False
+        group_ids.append(group_id)
+    return GROUP_ID_READ_ONLY not in group_ids
@@ -57,7 +57,7 @@ SCHEDULED_GRACE_S = 30 * 24 * 3600
 FILES_DIR = "houseplan/files"
 ASSETS_DIR = "houseplan/assets"
 CONF_ADMIN_ONLY = "admin_only"
-VERSION = "1.77.0"
+VERSION = "1.79.0-beta.2"
 DECOR_ASSETS_API_VERSION = 1
 SUMMARY_PANEL_API_VERSION = 1

@@ -91,7 +91,9 @@ MAX_IMPORT_PREVIEWS_TOTAL = 3
 DEFAULT_CONFIG: dict[str, object] = {
    "spaces": [],
    "markers": [],
-    "settings": {"bg_mode": "daynight", "sun_ray_origin": "inner"},
+    # #661: new installations get the moon; an existing config without the key
+    # keeps its look (docs/SUN.md: an update never changes a stored plan).
+    "settings": {"bg_mode": "daynight", "sun_ray_origin": "inner", "moon": True},
 }

 # #42: THE stable public error-code contract. Every code a user-facing
@@ -158,6 +158,12 @@ def canonicalize_config_geometry(config: Any) -> Any:
                _lattice_fields(decor, ("x", "y"))
                _scalar_fields(decor, ("scale", "angle"))

+        for stair in _records(space.get("stairs")):
+            # #663: wall/stair magnet placement is continuous like furniture.
+            # Scalar cleanup removes JSON tails without moving an authored
+            # physical-face contact onto the plan grid.
+            _scalar_fields(stair, ("x", "y", "length", "width", "radius", "angle"))
+
        # Legacy-only read boundary: v9 drafts are canonicalized before the
        # wall-model migration turns their edges into current partitions.
        for draft in _records(space.get("room_drafts")):
@@ -9,7 +9,7 @@ from homeassistant.core import HomeAssistant
 from .store import HouseplanConfigEntry

 # Marker metadata may contain personal notes, external links and manual filenames.
-TO_REDACT = {"link", "description", "pdfs", "name"}
+TO_REDACT = {"link", "description", "pdfs", "name", "binding", "settings"}


 async def async_get_config_entry_diagnostics(
@@ -33,10 +33,13 @@ async def async_get_config_entry_diagnostics(
                "rooms_with_area": sum(1 for r in s.get("rooms", []) if r.get("area")),
                "partitions": len(s.get("partitions", [])),
                "wall_columns": len(s.get("wall_columns", [])),
+                "stairs": len(s.get("stairs", [])),
            }
            for s in config.get("spaces", [])
        ],
        "markers": async_redact_data(config.get("markers", []), TO_REDACT),
-        "settings": config.get("settings", {}),
+        "settings": async_redact_data(
+            {"settings": config.get("settings", {})}, TO_REDACT
+        )["settings"],
        "layout_entries": len(layout),
    }
@@ -1,312 +1,466 @@
 {
  "schema": 1,
-  "fingerprint": "5e6b797362146dcb25e3ad594eca3a115b92cc4df3101d718fe7950b0ebfc362",
+  "fingerprint": "2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004",
  "entry": "houseplan-card.js",
  "panelEntry": "houseplan-panel.js",
  "initialViewFiles": [
-    "houseplan-assets/houseplan-card-BGma7Zjs.js",
+    "houseplan-assets/houseplan-card-DGdbxgxC.js",
    "houseplan-card.js"
  ],
-  "initialViewGzipBytes": 290095,
+  "initialViewGzipBytes": 300565,
  "initialPanelFiles": [
-    "houseplan-assets/houseplan-card-BGma7Zjs.js",
+    "houseplan-assets/houseplan-card-DGdbxgxC.js",
    "houseplan-panel.js"
  ],
-  "initialPanelGzipBytes": 291618,
+  "initialPanelGzipBytes": 302087,
  "initialPanelOnlyFiles": [
    "houseplan-panel.js"
  ],
-  "initialPanelOnlyGzipBytes": 2325,
+  "initialPanelOnlyGzipBytes": 2323,
  "lazyFiles": [
-    "houseplan-assets/backdrop-pick-Cghq1scc.js",
-    "houseplan-assets/de-DSAbt10z.js",
-    "houseplan-assets/editor-DuEZ_blF.js",
-    "houseplan-assets/form-kit.styles-CfB4DWMs.js",
-    "houseplan-assets/fr-Dqa7XXi8.js",
-    "houseplan-assets/furniture-plan-art.generated-DvOAO0uu.js",
-    "houseplan-assets/houseplan-editor-runtime-dcfYk9Ux.js",
-    "houseplan-assets/houseplan-onboarding-runtime-DO5YuA8C.js",
-    "houseplan-assets/hp-zigbee-topology-overlay-Fybk76vu.js",
-    "houseplan-assets/iso-scene-render-DrqMFlnw.js",
-    "houseplan-assets/live-interaction-runtime-CY4BdkFz.js",
-    "houseplan-assets/pdf-export-uvcL70gX.js",
-    "houseplan-assets/summary-panel-runtime-loaded-CGySQMOD.js",
-    "houseplan-assets/zigbee-topology-DmwpO4_X.js",
-    "houseplan-assets/zigbee-topology-runtime-BK3ECo6u.js"
+    "houseplan-assets/backdrop-pick-erCrvaVF.js",
+    "houseplan-assets/de-d9TwEFPV.js",
+    "houseplan-assets/editor-C_sFCxgH.js",
+    "houseplan-assets/form-kit.styles-BBYWe4Py.js",
+    "houseplan-assets/fr-CWO2BzcK.js",
+    "houseplan-assets/furniture-plan-art.generated-CCd6mmtp.js",
+    "houseplan-assets/houseplan-editor-runtime-6Ti0yXA0.js",
+    "houseplan-assets/houseplan-onboarding-runtime-D2g8WweX.js",
+    "houseplan-assets/hp-zigbee-topology-overlay-CpILp2jS.js",
+    "houseplan-assets/iso-scene-render-R0PpaYmJ.js",
+    "houseplan-assets/live-interaction-runtime-zvKxzkbX.js",
+    "houseplan-assets/moon-runtime-DXG94qOm.js",
+    "houseplan-assets/namespace-language-CPNZBROg.js",
+    "houseplan-assets/pdf-export-ByjBIvRJ.js",
+    "houseplan-assets/space-editor-Ch0tH8G9.js",
+    "houseplan-assets/summary-panel-runtime-loaded-rO8jZiCI.js",
+    "houseplan-assets/zigbee-topology-DZ_-WbFy.js",
+    "houseplan-assets/zigbee-topology-runtime-Boh9TM9B.js"
  ],
-  "lazyGzipBytes": 459921,
+  "lazyGzipBytes": 464846,
  "lazyEditorFiles": [
-    "houseplan-assets/backdrop-pick-Cghq1scc.js",
-    "houseplan-assets/editor-DuEZ_blF.js",
-    "houseplan-assets/form-kit.styles-CfB4DWMs.js",
-    "houseplan-assets/furniture-plan-art.generated-DvOAO0uu.js",
-    "houseplan-assets/houseplan-editor-runtime-dcfYk9Ux.js",
-    "houseplan-assets/zigbee-topology-DmwpO4_X.js"
+    "houseplan-assets/backdrop-pick-erCrvaVF.js",
+    "houseplan-assets/editor-C_sFCxgH.js",
+    "houseplan-assets/form-kit.styles-BBYWe4Py.js",
+    "houseplan-assets/furniture-plan-art.generated-CCd6mmtp.js",
+    "houseplan-assets/houseplan-editor-runtime-6Ti0yXA0.js",
+    "houseplan-assets/namespace-language-CPNZBROg.js",
+    "houseplan-assets/zigbee-topology-DZ_-WbFy.js"
  ],
-  "lazyEditorGzipBytes": 243369,
+  "lazyEditorGzipBytes": 239369,
  "lazyOnboardingFiles": [
-    "houseplan-assets/backdrop-pick-Cghq1scc.js",
-    "houseplan-assets/form-kit.styles-CfB4DWMs.js",
-    "houseplan-assets/houseplan-onboarding-runtime-DO5YuA8C.js"
+    "houseplan-assets/backdrop-pick-erCrvaVF.js",
+    "houseplan-assets/form-kit.styles-BBYWe4Py.js",
+    "houseplan-assets/houseplan-onboarding-runtime-D2g8WweX.js",
+    "houseplan-assets/namespace-language-CPNZBROg.js"
  ],
-  "lazyOnboardingGzipBytes": 33816,
+  "lazyOnboardingGzipBytes": 28396,
  "lazyLocaleFiles": [
-    "houseplan-assets/de-DSAbt10z.js",
-    "houseplan-assets/fr-Dqa7XXi8.js"
+    "houseplan-assets/de-d9TwEFPV.js",
+    "houseplan-assets/fr-CWO2BzcK.js"
  ],
-  "lazyLocaleGzipBytes": 55370,
+  "lazyLocaleGzipBytes": 56069,
  "lazyIsometricFiles": [
-    "houseplan-assets/iso-scene-render-DrqMFlnw.js"
+    "houseplan-assets/iso-scene-render-R0PpaYmJ.js"
  ],
-  "lazyIsometricGzipBytes": 17642,
+  "lazyIsometricGzipBytes": 12345,
  "lazyFurnitureArtFiles": [
-    "houseplan-assets/furniture-plan-art.generated-DvOAO0uu.js"
+    "houseplan-assets/furniture-plan-art.generated-CCd6mmtp.js"
  ],
-  "lazyFurnitureArtGzipBytes": 16940,
+  "lazyFurnitureArtGzipBytes": 16942,
  "lazyPdfFiles": [
-    "houseplan-assets/furniture-plan-art.generated-DvOAO0uu.js",
-    "houseplan-assets/pdf-export-uvcL70gX.js"
+    "houseplan-assets/furniture-plan-art.generated-CCd6mmtp.js",
+    "houseplan-assets/pdf-export-ByjBIvRJ.js"
  ],
-  "lazyPdfGzipBytes": 126825,
+  "lazyPdfGzipBytes": 126940,
+  "lazyMoonFiles": [
+    "houseplan-assets/moon-runtime-DXG94qOm.js"
+  ],
+  "lazyMoonGzipBytes": 11716,
+  "lazyNamespaceLocaleFiles": [
+    "houseplan-assets/settings-de-Cu0ARW9H.js",
+    "houseplan-assets/settings-fr-BIO-QwTT.js",
+    "houseplan-assets/settings-ru-gpeXJk2y.js",
+    "houseplan-assets/support-de-CH0Mth3e.js",
+    "houseplan-assets/support-fr-5un_aGUp.js",
+    "houseplan-assets/support-ru-BUP8Z3Kb.js",
+    "houseplan-assets/topology-de-DoQ2W7CB.js",
+    "houseplan-assets/topology-fr-4M_CQtH4.js",
+    "houseplan-assets/topology-ru-DLnNeJR5.js"
+  ],
+  "lazyNamespaceLocaleGzipBytes": 22672,
  "files": [
    {
-      "path": "houseplan-assets/backdrop-pick-Cghq1scc.js",
-      "sha256": "a3c6643d8fa86b46c0b14d6464331ac722fb2de5f76090f2415c394c2b45830d",
-      "rawBytes": 74076,
-      "gzipBytes": 23932,
+      "path": "houseplan-assets/backdrop-pick-erCrvaVF.js",
+      "sha256": "58bdb0ca63168828ebdd1fe564ba18c096ee124ae01aa9795465497e3469c868",
+      "rawBytes": 55329,
+      "gzipBytes": 18026,
      "isEntry": false,
      "imports": [
-        "houseplan-assets/form-kit.styles-CfB4DWMs.js",
-        "houseplan-assets/houseplan-card-BGma7Zjs.js"
+        "houseplan-assets/form-kit.styles-BBYWe4Py.js",
+        "houseplan-assets/houseplan-card-DGdbxgxC.js",
+        "houseplan-assets/namespace-language-CPNZBROg.js"
      ],
-      "dynamicImports": []
+      "dynamicImports": [
+        "houseplan-assets/settings-de-Cu0ARW9H.js",
+        "houseplan-assets/settings-fr-BIO-QwTT.js",
+        "houseplan-assets/settings-ru-gpeXJk2y.js"
+      ]
    },
    {
-      "path": "houseplan-assets/de-DSAbt10z.js",
-      "sha256": "00b04a9346c92a955a778fd765078a17e164f038ae93e8bf8980c047cc5c5eae",
-      "rawBytes": 92496,
-      "gzipBytes": 27928,
+      "path": "houseplan-assets/de-d9TwEFPV.js",
+      "sha256": "350157130d9bc87112a94a0062e6fdc5c1061efe8816be115a3c7836f54225d7",
+      "rawBytes": 93620,
+      "gzipBytes": 28263,
      "isEntry": false,
      "imports": [],
      "dynamicImports": []
    },
    {
-      "path": "houseplan-assets/editor-DuEZ_blF.js",
-      "sha256": "ffbfb66c07157e20053fd287e8e423b967322de5f633ba57ed3bdc9b6ab3f353",
+      "path": "houseplan-assets/editor-C_sFCxgH.js",
+      "sha256": "cb88aa19af05a9921272bd04e9023fdd75f0fbe63a8e490f7fd3c22652847c76",
      "rawBytes": 3833,
-      "gzipBytes": 1583,
+      "gzipBytes": 1582,
      "isEntry": false,
      "imports": [
-        "houseplan-assets/houseplan-card-BGma7Zjs.js"
+        "houseplan-assets/houseplan-card-DGdbxgxC.js"
      ],
      "dynamicImports": []
    },
    {
-      "path": "houseplan-assets/form-kit.styles-CfB4DWMs.js",
-      "sha256": "551efa002ff77410c8ecd04f0b1e8eebba295e8f04f1de1c0f5973bc60343cba",
+      "path": "houseplan-assets/form-kit.styles-BBYWe4Py.js",
+      "sha256": "88f80b20957ade215c2028113fab371dfb8588d93d19774cfebcc03f38ab6e6c",
      "rawBytes": 25600,
-      "gzipBytes": 5056,
+      "gzipBytes": 5055,
      "isEntry": false,
      "imports": [],
      "dynamicImports": []
    },
    {
-      "path": "houseplan-assets/fr-Dqa7XXi8.js",
-      "sha256": "6e339f8074d2ad2325b5c93161a251f89ab4041f5bda8a90a491c165dd6aec31",
-      "rawBytes": 94813,
-      "gzipBytes": 27442,
+      "path": "houseplan-assets/fr-CWO2BzcK.js",
+      "sha256": "ca7a4fc1e696690c6e971c94f46d856816583cd247fe66a64ec4ae371e196631",
+      "rawBytes": 96021,
+      "gzipBytes": 27806,
      "isEntry": false,
      "imports": [],
      "dynamicImports": []
    },
    {
-      "path": "houseplan-assets/furniture-plan-art.generated-DvOAO0uu.js",
-      "sha256": "4e2e255541baab68c9a71b8996f7db842cd2fcbd1466984acda21423b2279be7",
+      "path": "houseplan-assets/furniture-plan-art.generated-CCd6mmtp.js",
+      "sha256": "1c9a0ca09ec566715248c691386bfd17e23d3ae821a0c21608f9513602c72095",
      "rawBytes": 52035,
-      "gzipBytes": 16940,
+      "gzipBytes": 16942,
      "isEntry": false,
      "imports": [],
      "dynamicImports": []
    },
    {
-      "path": "houseplan-assets/houseplan-card-BGma7Zjs.js",
-      "sha256": "020967c47a73d107ac522a4dc2e458154324779405cdddc60e3548f72939e7b4",
-      "rawBytes": 1028792,
-      "gzipBytes": 289293,
+      "path": "houseplan-assets/houseplan-card-DGdbxgxC.js",
+      "sha256": "1a9aa573e7c525eaa850feecfa59c215ed926706908872937424881b5799f501",
+      "rawBytes": 1058576,
+      "gzipBytes": 299764,
      "isEntry": false,
      "imports": [],
      "dynamicImports": [
-        "houseplan-assets/de-DSAbt10z.js",
-        "houseplan-assets/editor-DuEZ_blF.js",
-        "houseplan-assets/fr-Dqa7XXi8.js",
-        "houseplan-assets/furniture-plan-art.generated-DvOAO0uu.js",
-        "houseplan-assets/houseplan-editor-runtime-dcfYk9Ux.js",
-        "houseplan-assets/houseplan-onboarding-runtime-DO5YuA8C.js",
-        "houseplan-assets/hp-zigbee-topology-overlay-Fybk76vu.js",
-        "houseplan-assets/iso-scene-render-DrqMFlnw.js",
-        "houseplan-assets/live-interaction-runtime-CY4BdkFz.js",
-        "houseplan-assets/pdf-export-uvcL70gX.js",
-        "houseplan-assets/summary-panel-runtime-loaded-CGySQMOD.js"
+        "houseplan-assets/de-d9TwEFPV.js",
+        "houseplan-assets/editor-C_sFCxgH.js",
+        "houseplan-assets/fr-CWO2BzcK.js",
+        "houseplan-assets/furniture-plan-art.generated-CCd6mmtp.js",
+        "houseplan-assets/houseplan-editor-runtime-6Ti0yXA0.js",
+        "houseplan-assets/houseplan-onboarding-runtime-D2g8WweX.js",
+        "houseplan-assets/hp-zigbee-topology-overlay-CpILp2jS.js",
+        "houseplan-assets/iso-scene-render-R0PpaYmJ.js",
+        "houseplan-assets/live-interaction-runtime-zvKxzkbX.js",
+        "houseplan-assets/moon-runtime-DXG94qOm.js",
+        "houseplan-assets/pdf-export-ByjBIvRJ.js",
+        "houseplan-assets/space-editor-Ch0tH8G9.js",
+        "houseplan-assets/summary-panel-runtime-loaded-rO8jZiCI.js"
      ]
    },
    {
-      "path": "houseplan-assets/houseplan-editor-runtime-dcfYk9Ux.js",
-      "sha256": "a594bdfea7e0eaac7be0e513cf316d28503194dd4cc156f832271ac3b4f91f2b",
-      "rawBytes": 677705,
-      "gzipBytes": 188432,
+      "path": "houseplan-assets/houseplan-editor-runtime-6Ti0yXA0.js",
+      "sha256": "a9aae4b426f09d16563c0fef14db3190c1d71f7ca8eb603fff9824d6fa632fdc",
+      "rawBytes": 690723,
+      "gzipBytes": 193056,
      "isEntry": false,
      "imports": [
-        "houseplan-assets/backdrop-pick-Cghq1scc.js",
-        "houseplan-assets/form-kit.styles-CfB4DWMs.js",
-        "houseplan-assets/furniture-plan-art.generated-DvOAO0uu.js",
-        "houseplan-assets/houseplan-card-BGma7Zjs.js",
-        "houseplan-assets/zigbee-topology-DmwpO4_X.js"
+        "houseplan-assets/backdrop-pick-erCrvaVF.js",
+        "houseplan-assets/form-kit.styles-BBYWe4Py.js",
+        "houseplan-assets/furniture-plan-art.generated-CCd6mmtp.js",
+        "houseplan-assets/houseplan-card-DGdbxgxC.js",
+        "houseplan-assets/namespace-language-CPNZBROg.js",
+        "houseplan-assets/zigbee-topology-DZ_-WbFy.js"
      ],
      "dynamicImports": [
-        "houseplan-assets/zigbee-topology-runtime-BK3ECo6u.js"
+        "houseplan-assets/support-de-CH0Mth3e.js",
+        "houseplan-assets/support-fr-5un_aGUp.js",
+        "houseplan-assets/support-ru-BUP8Z3Kb.js",
+        "houseplan-assets/zigbee-topology-runtime-Boh9TM9B.js"
      ]
    },
    {
-      "path": "houseplan-assets/houseplan-onboarding-runtime-DO5YuA8C.js",
-      "sha256": "2341b680e95085a18f3a4258ef54d76de360d8eb7f62c22d0bbbeb9e552a3776",
-      "rawBytes": 15667,
-      "gzipBytes": 4828,
+      "path": "houseplan-assets/houseplan-onboarding-runtime-D2g8WweX.js",
+      "sha256": "ddb0ec7750f3269ba2a7d8d259f69f640ae4ddc7cf3bce378c70daece30d21c6",
+      "rawBytes": 15886,
+      "gzipBytes": 4907,
      "isEntry": false,
      "imports": [
-        "houseplan-assets/backdrop-pick-Cghq1scc.js",
-        "houseplan-assets/form-kit.styles-CfB4DWMs.js",
-        "houseplan-assets/houseplan-card-BGma7Zjs.js"
+        "houseplan-assets/backdrop-pick-erCrvaVF.js",
+        "houseplan-assets/form-kit.styles-BBYWe4Py.js",
+        "houseplan-assets/houseplan-card-DGdbxgxC.js",
+        "houseplan-assets/namespace-language-CPNZBROg.js"
      ],
      "dynamicImports": []
    },
    {
-      "path": "houseplan-assets/hp-zigbee-topology-overlay-Fybk76vu.js",
-      "sha256": "9a79675b2b08e08e69f48268134b052111cdbaa804b6b270dfc3c66857c475fa",
-      "rawBytes": 10759,
-      "gzipBytes": 3685,
+      "path": "houseplan-assets/hp-zigbee-topology-overlay-CpILp2jS.js",
+      "sha256": "123c7685bcfb9a2e4b47fcd4ecbc19b2e7acc463afbfea4a00678dcf94287250",
+      "rawBytes": 10958,
+      "gzipBytes": 3765,
      "isEntry": false,
      "imports": [
-        "houseplan-assets/houseplan-card-BGma7Zjs.js",
-        "houseplan-assets/zigbee-topology-DmwpO4_X.js",
-        "houseplan-assets/zigbee-topology-runtime-BK3ECo6u.js"
+        "houseplan-assets/houseplan-card-DGdbxgxC.js",
+        "houseplan-assets/namespace-language-CPNZBROg.js",
+        "houseplan-assets/zigbee-topology-DZ_-WbFy.js",
+        "houseplan-assets/zigbee-topology-runtime-Boh9TM9B.js"
      ],
      "dynamicImports": []
    },
    {
-      "path": "houseplan-assets/iso-scene-render-DrqMFlnw.js",
-      "sha256": "516d5176c89713778220ea37910af126ac49deec11bca4835628acb9234a7c5b",
-      "rawBytes": 51983,
-      "gzipBytes": 17642,
+      "path": "houseplan-assets/iso-scene-render-R0PpaYmJ.js",
+      "sha256": "729b5d1c02300c80614c8fd14c28d9ca9ea310d0824c9630327e38d4b651bea5",
+      "rawBytes": 36700,
+      "gzipBytes": 12345,
      "isEntry": false,
      "imports": [
-        "houseplan-assets/houseplan-card-BGma7Zjs.js"
+        "houseplan-assets/houseplan-card-DGdbxgxC.js"
      ],
      "dynamicImports": []
    },
    {
-      "path": "houseplan-assets/live-interaction-runtime-CY4BdkFz.js",
-      "sha256": "4dcf38616ab83f5a2914558399c3852b7afa6ba5878fee9f75cf406cc746dda1",
-      "rawBytes": 8216,
-      "gzipBytes": 3209,
+      "path": "houseplan-assets/live-interaction-runtime-zvKxzkbX.js",
+      "sha256": "a02ff870b438bd2070f53a164cbcf69efda578358fb14a32c32221e67fd43657",
+      "rawBytes": 8370,
+      "gzipBytes": 3277,
      "isEntry": false,
      "imports": [
-        "houseplan-assets/houseplan-card-BGma7Zjs.js"
+        "houseplan-assets/houseplan-card-DGdbxgxC.js"
      ],
      "dynamicImports": []
    },
    {
-      "path": "houseplan-assets/pdf-export-uvcL70gX.js",
-      "sha256": "206bebb97b82857af0143431a63ef1cf81cc7e869daa807278ef474cc91a57c6",
-      "rawBytes": 236264,
-      "gzipBytes": 109885,
+      "path": "houseplan-assets/moon-runtime-DXG94qOm.js",
+      "sha256": "8f3839a242d5e6293134ffa5a10edfe63516d0f89e3097dfe68ff07f2111e246",
+      "rawBytes": 30292,
+      "gzipBytes": 11716,
      "isEntry": false,
      "imports": [
-        "houseplan-assets/furniture-plan-art.generated-DvOAO0uu.js",
-        "houseplan-assets/houseplan-card-BGma7Zjs.js"
+        "houseplan-assets/houseplan-card-DGdbxgxC.js"
      ],
      "dynamicImports": []
    },
    {
-      "path": "houseplan-assets/summary-panel-editor-CMasQ4vg.js",
-      "sha256": "4b34a8e5ddd9ddf67aa84d27b93a345cfca03b693f1f2513e2e046054465d817",
+      "path": "houseplan-assets/namespace-language-CPNZBROg.js",
+      "sha256": "068f3469028297daea7cf745fc8be94a99aade466532b25d92b3b33928a6242e",
+      "rawBytes": 675,
+      "gzipBytes": 408,
+      "isEntry": false,
+      "imports": [
+        "houseplan-assets/houseplan-card-DGdbxgxC.js"
+      ],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/pdf-export-ByjBIvRJ.js",
+      "sha256": "e94672f04c50bdba29636ab9b5a206ace0d600486ea1ad5d87be9a9183666fee",
+      "rawBytes": 236714,
+      "gzipBytes": 109998,
+      "isEntry": false,
+      "imports": [
+        "houseplan-assets/furniture-plan-art.generated-CCd6mmtp.js",
+        "houseplan-assets/houseplan-card-DGdbxgxC.js"
+      ],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/settings-de-Cu0ARW9H.js",
+      "sha256": "a3755fbf40c148aa9848bf4a5191a27c636977c774dc01f137ccc2470c7a0ee5",
+      "rawBytes": 8886,
+      "gzipBytes": 3406,
+      "isEntry": false,
+      "imports": [],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/settings-fr-BIO-QwTT.js",
+      "sha256": "abeee9f1cef76177568d2994cca968e07a42040ebd0a6bbc89e81d6eb7eb760e",
+      "rawBytes": 9297,
+      "gzipBytes": 3379,
+      "isEntry": false,
+      "imports": [],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/settings-ru-gpeXJk2y.js",
+      "sha256": "8e05df136db81011ac4c884665d889dc773e12523937215c5f078f71bf882752",
+      "rawBytes": 12284,
+      "gzipBytes": 3897,
+      "isEntry": false,
+      "imports": [],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/space-editor-Ch0tH8G9.js",
+      "sha256": "8136fb4e381881486a4f6aaec92e2cfc3d01dd5f9ea51f2c0dca1ebec9141a3e",
+      "rawBytes": 2619,
+      "gzipBytes": 1124,
+      "isEntry": false,
+      "imports": [
+        "houseplan-assets/houseplan-card-DGdbxgxC.js"
+      ],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/summary-panel-editor-4by4BwDV.js",
+      "sha256": "c0a480f80507425774e9a71d465014d825b7a9b877d75f20438ee43986af1325",
      "rawBytes": 14862,
-      "gzipBytes": 3426,
+      "gzipBytes": 3423,
      "isEntry": false,
      "imports": [
-        "houseplan-assets/form-kit.styles-CfB4DWMs.js",
-        "houseplan-assets/houseplan-card-BGma7Zjs.js",
-        "houseplan-assets/summary-panel-runtime-loaded-CGySQMOD.js"
+        "houseplan-assets/form-kit.styles-BBYWe4Py.js",
+        "houseplan-assets/houseplan-card-DGdbxgxC.js",
+        "houseplan-assets/summary-panel-runtime-loaded-rO8jZiCI.js"
      ],
      "dynamicImports": []
    },
    {
-      "path": "houseplan-assets/summary-panel-metrics-BeGWlYtn.js",
-      "sha256": "d3b46ab20f1de0a48a16737e7456c0318e9903b79df2c5f9f78082bf378e5c93",
-      "rawBytes": 2611,
-      "gzipBytes": 1307,
+      "path": "houseplan-assets/summary-panel-metrics-DmEWv1wn.js",
+      "sha256": "7ed391b93d0da3dcc1aaf6fc0c47cd5e0ee7106f6697f16143cb3f2d5dc25e80",
+      "rawBytes": 2701,
+      "gzipBytes": 1340,
      "isEntry": false,
      "imports": [
-        "houseplan-assets/houseplan-card-BGma7Zjs.js"
+        "houseplan-assets/houseplan-card-DGdbxgxC.js"
      ],
      "dynamicImports": []
    },
    {
-      "path": "houseplan-assets/summary-panel-runtime-loaded-CGySQMOD.js",
-      "sha256": "70932d7306193061fed10ac47812d912c3a59a7417f95e240f37b61457bf09a8",
-      "rawBytes": 72733,
-      "gzipBytes": 20171,
+      "path": "houseplan-assets/summary-panel-runtime-loaded-rO8jZiCI.js",
+      "sha256": "9fbaea7e6dae38df1f12013f9eaef0b02936fec9ac5866a8f214b92ac1214050",
+      "rawBytes": 73476,
+      "gzipBytes": 20488,
      "isEntry": false,
      "imports": [
-        "houseplan-assets/form-kit.styles-CfB4DWMs.js",
-        "houseplan-assets/houseplan-card-BGma7Zjs.js"
+        "houseplan-assets/form-kit.styles-BBYWe4Py.js",
+        "houseplan-assets/houseplan-card-DGdbxgxC.js"
      ],
      "dynamicImports": [
-        "houseplan-assets/summary-panel-editor-CMasQ4vg.js",
-        "houseplan-assets/summary-panel-metrics-BeGWlYtn.js"
+        "houseplan-assets/summary-panel-editor-4by4BwDV.js",
+        "houseplan-assets/summary-panel-metrics-DmEWv1wn.js"
      ]
    },
    {
-      "path": "houseplan-assets/zigbee-topology-DmwpO4_X.js",
-      "sha256": "a5f74e545476fb0048e5ae34d3e6aba6ca56d4774699b437f8400e40069a988e",
-      "rawBytes": 18962,
-      "gzipBytes": 7426,
+      "path": "houseplan-assets/support-de-CH0Mth3e.js",
+      "sha256": "f835d35a37d84f9972a2673f24105de7768d34e597553b22971ffbf708b36279",
+      "rawBytes": 6167,
+      "gzipBytes": 2393,
      "isEntry": false,
-      "imports": [
-        "houseplan-assets/houseplan-card-BGma7Zjs.js"
-      ],
+      "imports": [],
      "dynamicImports": []
    },
    {
-      "path": "houseplan-assets/zigbee-topology-runtime-BK3ECo6u.js",
-      "sha256": "aa8b20e637d9d66b0affee0d0efee1bfd7defa9285d92d1bd496777fe5f3432b",
-      "rawBytes": 3942,
-      "gzipBytes": 1762,
+      "path": "houseplan-assets/support-fr-5un_aGUp.js",
+      "sha256": "537afde2367d66766509cfd53664f76cb77c1ef689ec07ba59abd285a75c0a9f",
+      "rawBytes": 6333,
+      "gzipBytes": 2427,
+      "isEntry": false,
+      "imports": [],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/support-ru-BUP8Z3Kb.js",
+      "sha256": "d965e7e334b56a19d1175ba3c4b791e2585f45917582e3210904c1eb8705894f",
+      "rawBytes": 8376,
+      "gzipBytes": 2874,
+      "isEntry": false,
+      "imports": [],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/topology-de-DoQ2W7CB.js",
+      "sha256": "708ceeb7a1c7c843a438f7cb9f9e5a310f4fad8a172c6e6be1ba375c270bc21a",
+      "rawBytes": 2698,
+      "gzipBytes": 1332,
+      "isEntry": false,
+      "imports": [],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/topology-fr-4M_CQtH4.js",
+      "sha256": "72f6e5c98a4a1c9fce80de9d99193059c687045aae3c4b3b03a87b610469cd94",
+      "rawBytes": 2718,
+      "gzipBytes": 1351,
+      "isEntry": false,
+      "imports": [],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/topology-ru-DLnNeJR5.js",
+      "sha256": "1cb2e1f8984a997e20d3ea05b2749379e3c773e41bf7670226ac0141fca13ccf",
+      "rawBytes": 3669,
+      "gzipBytes": 1613,
+      "isEntry": false,
+      "imports": [],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/zigbee-topology-DZ_-WbFy.js",
+      "sha256": "b2deb6084e835c4864160259cf445a24f4340d54c0db574cc4e9635d47e4f6a1",
+      "rawBytes": 10958,
+      "gzipBytes": 4300,
      "isEntry": false,
      "imports": [
-        "houseplan-assets/houseplan-card-BGma7Zjs.js",
-        "houseplan-assets/zigbee-topology-DmwpO4_X.js"
+        "houseplan-assets/houseplan-card-DGdbxgxC.js",
+        "houseplan-assets/namespace-language-CPNZBROg.js"
+      ],
+      "dynamicImports": [
+        "houseplan-assets/topology-de-DoQ2W7CB.js",
+        "houseplan-assets/topology-fr-4M_CQtH4.js",
+        "houseplan-assets/topology-ru-DLnNeJR5.js"
+      ]
+    },
+    {
+      "path": "houseplan-assets/zigbee-topology-runtime-Boh9TM9B.js",
+      "sha256": "2f82578f02c24a55de11c7591a421c19694eca62a23cc5f71ca1acf9abe8e5a2",
+      "rawBytes": 3983,
+      "gzipBytes": 1788,
+      "isEntry": false,
+      "imports": [
+        "houseplan-assets/houseplan-card-DGdbxgxC.js",
+        "houseplan-assets/namespace-language-CPNZBROg.js",
+        "houseplan-assets/zigbee-topology-DZ_-WbFy.js"
      ],
      "dynamicImports": []
    },
    {
      "path": "houseplan-card.js",
-      "sha256": "d0b270ebad646accee58fd8cf7a130875da8b505b596f0e05ada91fffb41bb02",
+      "sha256": "acb67dca9358ea65c86cc0a5e6f1b6eabe364e2cf3b5ed4b67b1bf5f5b8d1c9a",
      "rawBytes": 1205,
-      "gzipBytes": 802,
+      "gzipBytes": 801,
      "isEntry": true,
      "imports": [
-        "houseplan-assets/houseplan-card-BGma7Zjs.js"
+        "houseplan-assets/houseplan-card-DGdbxgxC.js"
      ],
      "dynamicImports": []
    },
    {
      "path": "houseplan-panel.js",
-      "sha256": "4150cfd182db03e56a9e4b4b680ad72ace418f9882528e526de2579e32944606",
+      "sha256": "4b0022acf6b29c9904be5c5d9c69bc0ba92ee4a26e6daa6e09bc93345d8af354",
      "rawBytes": 6165,
-      "gzipBytes": 2325,
+      "gzipBytes": 2323,
      "isEntry": true,
      "imports": [
-        "houseplan-assets/houseplan-card-BGma7Zjs.js"
+        "houseplan-assets/houseplan-card-DGdbxgxC.js"
      ],
      "dynamicImports": []
    }
@@ -1,4 +1,4 @@
-globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="5e6b797362146dcb25e3ad594eca3a115b92cc4df3101d718fe7950b0ebfc362";import{az as e,l as o,aC as t,e8 as s,A as a,e9 as i,ea as l,eb as n,E as r,c}from"./houseplan-card-BGma7Zjs.js";class h extends e{constructor(){super(...arguments),this._spaces=null,this._spacesLoading=!1,this._spacesAuthoritative=!1}setConfig(e){this._config=e}async _loadSpaces(){if(!this._spaces&&!this._spacesLoading&&this.hass){this._spacesLoading=!0;try{const e=await this.hass.callWS({type:"houseplan/config/get"});this._spaces=(e?.config?.spaces||[]).map(e=>({value:e.id,label:e.title||e.id})),this._spacesAuthoritative=!0}catch{this._spaces=[],this._spacesAuthoritative=!1}finally{this._spacesLoading=!1}}}get _lang(){return o(this.hass,this._config?.language)}get _floorToken(){const e=this._config?.floor;return"number"==typeof e?`__houseplan_yaml_floor_index__:${String(e)}`:null}get _formData(){const e={...this._config},o=this._floorToken;return o?e.floor=o:Object.prototype.hasOwnProperty.call(e,"floor")||(e.floor=""),e}get _schema(){const e=this._spaces||[],o=this._lang,a=[{value:"",label:t(o,"editor.floor_none")}],i=this._floorToken;i&&a.push({value:i,label:t(o,"editor.floor_index",{index:String(this._config?.floor)})});const l="string"==typeof this._config?.floor?this._config.floor:"";l&&!e.some(e=>e.value===l)&&a.push({value:l,label:l}),a.push(...e);const n="string"==typeof this._config?.default_floor?this._config.default_floor:"",r=[...e];return n&&!e.some(e=>e.value===n)&&r.unshift({value:n,label:n}),[{name:"title",selector:{text:{}}},{name:"floor",selector:{select:{mode:"dropdown",options:a}}},e.length?{name:"default_floor",selector:{select:{mode:"dropdown",options:r}}}:{name:"default_floor",selector:{text:{}}},{name:"language",selector:{select:{mode:"dropdown",options:s(t(o,"editor.lang_auto"),this._config?.language)}}},{name:"icon_size",selector:{number:{min:1,max:6,step:.1,mode:"box"}}},{name:"show_temperature",selector:{boolean:{}}},{name:"live_states",selector:{boolean:{}}},{name:"show_signal",selector:{boolean:{}}},{name:"kiosk",selector:{boolean:{}}},{name:"cycle",selector:{number:{min:0,max:3600,step:5,mode:"box"}}}]}render(){if(!this.hass||!this._config)return a;const e=i(this,l,o(this.hass,this._config.language));if("cold"===e)return n();if("warm"===e)return r;this._loadSpaces();const s=this._lang,h={title:t(s,"editor.title"),floor:t(s,"editor.floor"),default_floor:t(s,"editor.default_floor"),language:t(s,"editor.language"),icon_size:t(s,"editor.icon_size"),show_temperature:t(s,"editor.show_temperature"),live_states:t(s,"editor.live_states"),show_signal:t(s,"editor.show_signal"),kiosk:t(s,"editor.kiosk"),cycle:t(s,"editor.cycle")},f=this._schema,_=function(e,o,t){if(!t||null===o)return null;const s="string"==typeof e?.default_floor?e.default_floor:"";return!s||o.some(e=>e.value===s)?null:s}(this._config,this._spaces,this._spacesAuthoritative),d=e=>c`<ha-form
+globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";import{aG as e,l as o,aJ as t,eD as s,A as a,eE as i,eF as l,eG as n,E as r,c}from"./houseplan-card-DGdbxgxC.js";class h extends e{constructor(){super(...arguments),this._spaces=null,this._spacesLoading=!1,this._spacesAuthoritative=!1}setConfig(e){this._config=e}async _loadSpaces(){if(!this._spaces&&!this._spacesLoading&&this.hass){this._spacesLoading=!0;try{const e=await this.hass.callWS({type:"houseplan/config/get"});this._spaces=(e?.config?.spaces||[]).map(e=>({value:e.id,label:e.title||e.id})),this._spacesAuthoritative=!0}catch{this._spaces=[],this._spacesAuthoritative=!1}finally{this._spacesLoading=!1}}}get _lang(){return o(this.hass,this._config?.language)}get _floorToken(){const e=this._config?.floor;return"number"==typeof e?`__houseplan_yaml_floor_index__:${String(e)}`:null}get _formData(){const e={...this._config},o=this._floorToken;return o?e.floor=o:Object.prototype.hasOwnProperty.call(e,"floor")||(e.floor=""),e}get _schema(){const e=this._spaces||[],o=this._lang,a=[{value:"",label:t(o,"editor.floor_none")}],i=this._floorToken;i&&a.push({value:i,label:t(o,"editor.floor_index",{index:String(this._config?.floor)})});const l="string"==typeof this._config?.floor?this._config.floor:"";l&&!e.some(e=>e.value===l)&&a.push({value:l,label:l}),a.push(...e);const n="string"==typeof this._config?.default_floor?this._config.default_floor:"",r=[...e];return n&&!e.some(e=>e.value===n)&&r.unshift({value:n,label:n}),[{name:"title",selector:{text:{}}},{name:"floor",selector:{select:{mode:"dropdown",options:a}}},e.length?{name:"default_floor",selector:{select:{mode:"dropdown",options:r}}}:{name:"default_floor",selector:{text:{}}},{name:"language",selector:{select:{mode:"dropdown",options:s(t(o,"editor.lang_auto"),this._config?.language)}}},{name:"icon_size",selector:{number:{min:1,max:6,step:.1,mode:"box"}}},{name:"show_temperature",selector:{boolean:{}}},{name:"live_states",selector:{boolean:{}}},{name:"show_signal",selector:{boolean:{}}},{name:"kiosk",selector:{boolean:{}}},{name:"cycle",selector:{number:{min:0,max:3600,step:5,mode:"box"}}}]}render(){if(!this.hass||!this._config)return a;const e=i(this,l,o(this.hass,this._config.language));if("cold"===e)return n();if("warm"===e)return r;this._loadSpaces();const s=this._lang,h={title:t(s,"editor.title"),floor:t(s,"editor.floor"),default_floor:t(s,"editor.default_floor"),language:t(s,"editor.language"),icon_size:t(s,"editor.icon_size"),show_temperature:t(s,"editor.show_temperature"),live_states:t(s,"editor.live_states"),show_signal:t(s,"editor.show_signal"),kiosk:t(s,"editor.kiosk"),cycle:t(s,"editor.cycle")},f=this._schema,_=function(e,o,t){if(!t||null===o)return null;const s="string"==typeof e?.default_floor?e.default_floor:"";return!s||o.some(e=>e.value===s)?null:s}(this._config,this._spaces,this._spacesAuthoritative),d=e=>c`<ha-form
        .hass=${this.hass}
        .data=${this._formData}
        .schema=${e}
@@ -0,0 +1 @@
+globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";import{eJ as e,eK as a,eF as n}from"./houseplan-card-DGdbxgxC.js";function c(n,c){return new e([{code:"en",dictionary:n},{code:"ru",loadDictionary:c.ru},{code:"de",loadDictionary:c.de},{code:"fr",loadDictionary:c.fr}],"2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004",console.warn,a)}function d(e){return function(e,a){return{state:n=>{const c=e.state(n);return"pending"!==c&&a.some(e=>"pending"===e.state(n))?"pending":c},dictionary:a=>e.dictionary(a),ensure:n=>Promise.all([e,...a].map(e=>e.ensure(n))).then(()=>{})}}(n,e)}export{c as n,d as s};
@@ -0,0 +1,7 @@
+globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";import{aG as e,l as t,aJ as s,A as a,eE as o,eF as i,eG as n,E as c,eI as l,c as r}from"./houseplan-card-DGdbxgxC.js";class h extends e{constructor(){super(...arguments),this._spaces=null,this._spacesLoading=!1}setConfig(e){this._config=e}async _loadSpaces(){if(!this._spaces&&!this._spacesLoading&&this.hass){this._spacesLoading=!0;try{const e=await this.hass.callWS({type:"houseplan/config/get"});this._spaces=(e?.config?.spaces||[]).map(e=>({value:e.id,label:e.title||e.id}))}catch{this._spaces=[]}finally{this._spacesLoading=!1}}}get _lang(){return t(this.hass,this._config?.language)}get _schema(){const e=this._spaces||[];return[e.length?{name:"space",selector:{select:{mode:"dropdown",options:e}}}:{name:"space",selector:{text:{}}},{name:"title",selector:{text:{}}},{name:"fit",selector:{select:{mode:"dropdown",options:[{value:"content",label:s(this._lang,"editor.fit_content")},{value:"house",label:s(this._lang,"editor.fit_house")}]}}},{name:"show_button",selector:{boolean:{}}},{name:"button_label",selector:{text:{}}},{name:"button_target",selector:{text:{}}},{name:"icon_size",selector:{number:{min:1,max:6,step:.1,mode:"box"}}},{name:"show_temperature",selector:{boolean:{}}},{name:"live_states",selector:{boolean:{}}},{name:"light_pools",selector:{boolean:{}}},{name:"show_signal",selector:{boolean:{}}}]}render(){if(!this.hass||!this._config)return a;const e=o(this,i,t(this.hass,this._config.language));if("cold"===e)return n();if("warm"===e)return c;this._loadSpaces();const h=this._lang,_={space:s(h,"editor.space"),title:s(h,"editor.title"),fit:s(h,"editor.framing"),show_button:s(h,"editor.show_button"),button_label:s(h,"editor.button_label"),button_target:s(h,"editor.button_target"),icon_size:s(h,"editor.icon_size"),show_temperature:s(h,"editor.show_temperature"),live_states:s(h,"editor.live_states"),light_pools:s(h,"editor.light_pools"),show_signal:s(h,"editor.show_signal")};return r`<ha-form
+      .hass=${this.hass}
+      .data=${{...this._config,fit:l(this._config.fit)}}
+      .schema=${this._schema}
+      .computeLabel=${e=>_[e.name]||e.name}
+      @value-changed=${this._valueChanged}
+    ></ha-form>`}_valueChanged(e){const t={...this._config||{},...e.detail.value};delete t.aspect_ratio;const s=new Event("config-changed",{bubbles:!0,composed:!0});s.detail={config:t},this.dispatchEvent(s)}}h.properties={hass:{attribute:!1},_config:{state:!0},_spaces:{state:!0}},customElements.get("houseplan-space-card-editor")||customElements.define("houseplan-space-card-editor",h);
@@ -1,4 +1,4 @@
-globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="5e6b797362146dcb25e3ad594eca3a115b92cc4df3101d718fe7950b0ebfc362";import{c as a,A as e}from"./houseplan-card-BGma7Zjs.js";import{s,n as t,a as l,m as r,b as o,c as i,d as u}from"./summary-panel-runtime-loaded-CGySQMOD.js";import"./form-kit.styles-CfB4DWMs.js";const m=m=>{const{host:c,dialog:d,problems:n,t:b}=m,y=n.find(a=>"error"===a.kind),$=d.localShow!==d.baseLocalShow||!d.localOnly&&!s(t(d.draft),d.base),p=$&&!d.busy&&!y,v=a=>n.find(e=>e.path===a),h=a=>a?b(`summary.problem.${a.code}`):"",k=()=>m.close(),g=a`<label class="summary-switch" for="summary-local-show">
+globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";import{c as a,A as e}from"./houseplan-card-DGdbxgxC.js";import{s,n as t,a as l,m as r,b as o,c as i,d as u}from"./summary-panel-runtime-loaded-rO8jZiCI.js";import"./form-kit.styles-BBYWe4Py.js";const m=m=>{const{host:c,dialog:d,problems:n,t:b}=m,y=n.find(a=>"error"===a.kind),$=d.localShow!==d.baseLocalShow||!d.localOnly&&!s(t(d.draft),d.base),p=$&&!d.busy&&!y,v=a=>n.find(e=>e.path===a),h=a=>a?b(`summary.problem.${a.code}`):"",k=()=>m.close(),g=a`<label class="summary-switch" for="summary-local-show">
    <span class="summary-switch-caption"><strong>${b("summary.show_local")}</strong>
      <small id="summary-local-show-hint">${b("summary.show_local_hint")}</small></span>
    <input id="summary-local-show" data-summary-local-show type="checkbox"
@@ -1 +0,0 @@
-globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="5e6b797362146dcb25e3ad594eca3a115b92cc4df3101d718fe7950b0ebfc362";import{ee as e,J as t,aX as n,H as i,aa as o,a8 as r,bP as s,bO as a,aW as c,aV as l,aY as d,ef as u,eg as f,bR as m,eh as g}from"./houseplan-card-BGma7Zjs.js";function v(e){if(!e.registry.authoritative)return null;const t=new Set,n=d(e.markers);for(const i of Object.values(e.registry.devices||{}))i?.id&&"service"!==i.entry_type&&!n.devices.has(i.id)&&i.area_id&&e.areaToSpace[i.area_id]&&t.add(i.id);for(const i of e.markers||[]){if(i.removed||"virtual"===i.binding)continue;const o=String(i.binding||"").indexOf(":");if(o<1)continue;const r=i.binding.slice(0,o),s=i.binding.slice(o+1),a="device"===r?e.registry.devices?.[s]:null,c="entity"===r?e.registry.entities?.[s]:null,l="device"===r?s:c?.device_id,d="device"===r?a?.area_id:c?.area_id||l&&e.registry.devices?.[l]?.area_id,u="string"==typeof i.room_id&&i.room_id.length>0&&null===i.area?"":i.area||d||"",f=u&&e.areaToSpace[u]||i.space||e.firstSpaceId;l&&e.registry.devices?.[l]&&e.spaceIds.has(f)&&(!n.devices.has(l)||"entity"===r&&n.liveEntities.has(s))&&t.add(l)}return t}function y(e,t){return e?.length?t?.length?g(e,t):e:t}function _(e,t){const n=c(e.rooms,t.walls,t.openCuts,[],i,t.cellCm,o,r);return{roomGeom:"ok"===n.status||"degraded-extra"===n.status?n.roomGeom:void 0,multiWallNodes:l(e.rooms,t.walls,t.openCuts,i,t.cellCm,o,r)}}function*h(c,l,d=_){try{let u=0;for(const f of l){const l=c.spaces.find(e=>String(e?.id)===f.id);if(!l)continue;const m=e(l,f),g=d(f,m);let v=null;for(const e of f.rooms){if(!e.id)continue;const a=t(e);if(!a)continue;const c=n(f.rooms,e.id,m.walls,m.openCuts,i,m.cellCm,o,r,g.roomGeom,g.multiWallNodes)||a;v=y(v,s(c,m.physicalBodies)),yield}const _=m.cellCm/o;u+=a(v)*_*_/1e4}return u}catch{return null}}function p(e,t,n=_){const i=h(e,t,n);let o=i.next();for(;!o.done;)o=i.next();return o.value}function b(e,t,n,i){if("system"!==e.type)return null;if("device_count"===e.key)return null===t.deviceCount?null:String(t.deviceCount);if("total_area"===e.key)return null===t.areaM2?null:m(t.areaM2,"mi"===n?.config?.unit_system?.length);try{return new Intl.DateTimeFormat(i||void 0,{dateStyle:"short",timeStyle:"short",timeZone:n?.config?.time_zone||void 0}).format(t.now)}catch{return t.now.toLocaleString()}}function S(e,t){const n=e?.states?.[t];if(!n)return null;const i=u(e,t);return i?f(i,String(n.attributes?.unit_of_measurement||"")):null}export{h as cleanFloorAreaSteps,v as representedHaDeviceIds,_ as spaceWallGeometry,S as summaryEntityValue,b as summarySystemValue,p as totalCleanFloorAreaM2};
@@ -0,0 +1 @@
+globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";import{eM as e,O as t,b5 as n,M as i,af as o,ad as r,ce as s,eN as a,cd as c,b4 as l,b3 as d,b6 as u,eO as f,eP as m,cg as g,eQ as v}from"./houseplan-card-DGdbxgxC.js";function y(e){if(!e.registry.authoritative)return null;const t=new Set,n=u(e.markers);for(const i of Object.values(e.registry.devices||{}))i?.id&&"service"!==i.entry_type&&!n.devices.has(i.id)&&i.area_id&&e.areaToSpace[i.area_id]&&t.add(i.id);for(const i of e.markers||[]){if(i.removed||"virtual"===i.binding)continue;const o=String(i.binding||"").indexOf(":");if(o<1)continue;const r=i.binding.slice(0,o),s=i.binding.slice(o+1),a="device"===r?e.registry.devices?.[s]:null,c="entity"===r?e.registry.entities?.[s]:null,l="device"===r?s:c?.device_id,d="device"===r?a?.area_id:c?.area_id||l&&e.registry.devices?.[l]?.area_id,u="string"==typeof i.room_id&&i.room_id.length>0&&null===i.area?"":i.area||d||"",f=u&&e.areaToSpace[u]||i.space||e.firstSpaceId;l&&e.registry.devices?.[l]&&e.spaceIds.has(f)&&(!n.devices.has(l)||"entity"===r&&n.liveEntities.has(s))&&t.add(l)}return t}function _(e,t){return e?.length?t?.length?v(e,t):e:t}function h(e,t){const n=l(e.rooms,t.walls,t.openCuts,[],i,t.cellCm,o,r);return{roomGeom:"ok"===n.status||"degraded-extra"===n.status?n.roomGeom:void 0,multiWallNodes:d(e.rooms,t.walls,t.openCuts,i,t.cellCm,o,r)}}function*p(l,d,u=h){try{let f=0;for(const m of d){const d=l.spaces.find(e=>String(e?.id)===m.id);if(!d)continue;const g=e(d,m),v=u(m,g);let y=null;for(const e of m.rooms){if(!e.id)continue;const a=t(e);if(!a)continue;const c=n(m.rooms,e.id,g.walls,g.openCuts,i,g.cellCm,o,r,v.roomGeom,v.multiWallNodes)||a;y=_(y,s(c,g.physicalBodies)),yield}const h=a(y||[],m.stairs);let p=h.next();for(;!p.done;)yield,p=h.next();y=p.value;const b=g.cellCm/o;f+=c(y)*b*b/1e4}return f}catch{return null}}function b(e,t,n=h){const i=p(e,t,n);let o=i.next();for(;!o.done;)o=i.next();return o.value}function S(e,t,n,i){if("system"!==e.type)return null;if("device_count"===e.key)return null===t.deviceCount?null:String(t.deviceCount);if("total_area"===e.key)return null===t.areaM2?null:g(t.areaM2,"mi"===n?.config?.unit_system?.length);try{return new Intl.DateTimeFormat(i||void 0,{dateStyle:"short",timeStyle:"short",timeZone:n?.config?.time_zone||void 0}).format(t.now)}catch{return t.now.toLocaleString()}}function C(e,t){const n=e?.states?.[t];if(!n)return null;const i=f(e,t);return i?m(i,String(n.attributes?.unit_of_measurement||"")):null}export{p as cleanFloorAreaSteps,y as representedHaDeviceIds,h as spaceWallGeometry,C as summaryEntityValue,S as summarySystemValue,b as totalCleanFloorAreaM2};
@@ -0,0 +1 @@
+globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";var e={title:"Zigbee-Verbindungen",toggle:"Zigbee-Verbindungen beim Darüberfahren über ein Gerät anzeigen",hint:"Es werden nur beobachtete direkte Nachbarn angezeigt. Beim Darüberfahren werden keine Daten abgerufen.",help:"Zeigt, mit welchen Zigbee-Geräten jedes Gerät direkt verbunden ist. Die Linienfarbe ist die Verbindungsqualität (LQI) auf derselben Skala wie der LQI-Wert des Geräts: rot bei 40 und darunter, grün bei 180 und darüber. Eine gestrichelte Linie bedeutet, dass die Qualität nicht gemeldet wurde. Ein Pfeil zeigt auf das nächste Gerät auf dem Weg zum Koordinator: ein Pfeil führt hinaus, eingehende Pfeile sind die Geräte, die über dieses Gerät routen. Eine Linie ohne Pfeil ist ein Ersatznachbar. Das ist der Routenbaum, den House Plan bildet, nicht der Weg eines Pakets in diesem Moment: eine Beschriftung am Pfeilende bedeutet, dass das Ziel nicht auf diesem Plan liegt, und ein fehlender Pfeil, dass die Route unbekannt ist. Die Daten stammen aus dem letzten Laden und veralten; Verbindungen sind nur mit der Maus sichtbar.",help_aria:"Hilfe: Zigbee-Verbindungen",admin_only:"Topologiedaten sind nur für Home-Assistant-Administratoren verfügbar.",save_first:"Speichere diese Einstellung, bevor Topologiedaten geladen werden.",zha:"ZHA",zha_read:"ZHA-Daten lesen",zha_hint:"Liest den ZHA-Topologiecache; es wird kein Funkscan gestartet.",z2m:"Zigbee2MQTT",z2m_topics:"Basistopics (eines pro Zeile)",z2m_update:"Karte aktualisieren",z2m_warning:"Ein Netzwerkscan kann 10 Sekunden bis 2 Minuten dauern und Zigbee vorübergehend verlangsamen.",status_idle:"Daten nicht geladen",status_loading:"Wird geladen…",status_ready:"Empfangen: {time}",status_stale:"Empfangen: {time} · veraltet",status_partial:"Empfangen: {time} · einige Knoten fehlen",status_no_links:"Empfangen: {time} · keine beobachteten Verbindungen gefunden",error_permission:"Administratorrechte sind erforderlich.",error_unsupported:"Dieser Anbieter oder die Home-Assistant-API ist nicht verfügbar.",error_timeout:"Der Anbieter hat nicht rechtzeitig geantwortet.",error_invalid_topic:"Prüfe das Zigbee2MQTT-Basistopic.",error_invalid_payload:"Der Anbieter hat nicht unterstützte Topologiedaten geliefert.",error_provider:"Topologiedaten konnten nicht geladen werden.",remote_count:"+{n} in anderen Bereichen",route_device_not_on_plan:"Gerät ist nicht im Plan",route_coordinator_not_on_plan:"Koordinator ist nicht im Plan",route_other_space:"anderer Bereich"};const n="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";export{e as dictionary,n as fingerprint};
@@ -0,0 +1 @@
+globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";var e={title:"Liens Zigbee",toggle:"Afficher les liens Zigbee au survol d’un appareil",hint:"Seuls les voisins directs observés sont affichés. Le survol ne lance aucune requête.",help:"Montre avec quels appareils Zigbee chaque appareil communique directement. La couleur de la ligne est la qualité du lien (LQI) sur la même échelle que l'indicateur LQI de l'appareil : rouge à 40 et en dessous, vert à 180 et au-dessus. Une ligne pointillée signifie que la qualité n'a pas été communiquée. Une flèche pointe vers l'appareil suivant sur le chemin du coordinateur : une flèche part, les flèches entrantes sont les appareils qui passent par celui-ci. Une ligne sans flèche est un voisin de secours. C'est l'arbre de routes que construit House Plan, pas le trajet d'un paquet à cet instant : une étiquette au bout d'une flèche signifie que sa cible n'est pas sur ce plan, et l'absence de flèche que la route est inconnue. Les données proviennent du dernier chargement et vieillissent ; les liens ne sont visibles qu'à la souris.",help_aria:"Aide : liens Zigbee",admin_only:"Les données de topologie sont réservées aux administrateurs Home Assistant.",save_first:"Enregistrez ce réglage avant de charger les données de topologie.",zha:"ZHA",zha_read:"Lire les données ZHA",zha_hint:"Lit la topologie en cache de ZHA sans lancer d’analyse radio.",z2m:"Zigbee2MQTT",z2m_topics:"Topics de base (un par ligne)",z2m_update:"Actualiser la carte",z2m_warning:"L’analyse de la carte réseau peut durer de 10 secondes à 2 minutes et réduire temporairement la réactivité de Zigbee.",status_idle:"Données non chargées",status_loading:"Chargement…",status_ready:"Reçu : {time}",status_stale:"Reçu : {time} · obsolète",status_partial:"Reçu : {time} · certains nœuds sont omis",status_no_links:"Reçu : {time} · aucun lien observé trouvé",error_permission:"Les droits administrateur sont requis.",error_unsupported:"Ce fournisseur ou l’API Home Assistant n’est pas disponible.",error_timeout:"Le fournisseur n’a pas répondu à temps.",error_invalid_topic:"Vérifiez le topic de base Zigbee2MQTT.",error_invalid_payload:"Le fournisseur a renvoyé des données de topologie non prises en charge.",error_provider:"Impossible de charger les données de topologie.",remote_count:"+{n} dans d’autres espaces",route_device_not_on_plan:"appareil absent du plan",route_coordinator_not_on_plan:"coordinateur absent du plan",route_other_space:"autre espace"};const s="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";export{e as dictionary,s as fingerprint};
@@ -0,0 +1 @@
+globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";var e={title:"Связи Zigbee",toggle:"Показывать связи Zigbee при наведении на устройство",hint:"Показываются только наблюдаемые прямые соседи. Наведение ничего не запрашивает.",help:"Показывает, с какими устройствами Zigbee каждое связано напрямую. Цвет линии — качество связи (LQI) по той же шкале, что у показателя LQI устройства: красный при 40 и ниже, зелёный при 180 и выше. Пунктир — качество не сообщено. Стрелка ведёт к следующему устройству по пути к координатору: исходящая одна, входящие — те, кто ходит через это устройство. Линия без стрелки — запасной сосед. Это дерево маршрутов, которое строит House Plan, а не путь пакета в эту секунду: подпись на конце стрелки значит, что цель не на этом плане, а отсутствие стрелки — что путь неизвестен. Данные из последней загрузки и устаревают, связи видны только при работе мышью.",help_aria:"Справка: связи Zigbee",admin_only:"Данные топологии доступны только администраторам Home Assistant.",save_first:"Сохраните настройку перед загрузкой данных топологии.",zha:"ZHA",zha_read:"Прочитать данные ZHA",zha_hint:"Читает сохранённую топологию ZHA и не запускает радио-сканирование.",z2m:"Zigbee2MQTT",z2m_topics:"Базовые топики (по одному в строке)",z2m_update:"Обновить карту",z2m_warning:"Сканирование карты сети занимает от 10 секунд до 2 минут и временно может снизить отзывчивость Zigbee.",status_idle:"Данные не загружены",status_loading:"Загрузка…",status_ready:"Получено: {time}",status_stale:"Получено: {time} · данные устарели",status_partial:"Получено: {time} · часть узлов не показана",status_no_links:"Получено: {time} · наблюдаемые связи не найдены",error_permission:"Нужны права администратора.",error_unsupported:"Провайдер или API Home Assistant недоступен.",error_timeout:"Провайдер не ответил вовремя.",error_invalid_topic:"Проверьте базовый топик Zigbee2MQTT.",error_invalid_payload:"Провайдер вернул неподдерживаемые данные топологии.",error_provider:"Не удалось загрузить данные топологии.",remote_count:"+{n} в других пространствах",route_device_not_on_plan:"устройства нет на плане",route_coordinator_not_on_plan:"координатора нет на плане",route_other_space:"другое пространство"};const a="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";export{e as dictionary,a as fingerprint};
@@ -1 +0,0 @@
-globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="5e6b797362146dcb25e3ad594eca3a115b92cc4df3101d718fe7950b0ebfc362";import{n as t,b as n}from"./zigbee-topology-DmwpO4_X.js";import{aI as e}from"./houseplan-card-BGma7Zjs.js";const o=new WeakMap;function i(t){const n=function(t){const n=t?.connection||t;return!n||"object"!=typeof n&&"function"!=typeof n?null:n}(t);if(!n)return null;let e=o.get(n);return e||(e={revision:0,topologies:[],states:{},listeners:new Set,inflight:new Map},o.set(n,e)),e}function r(t,n,e){t.states={...t.states,[n]:e},function(t){t.revision++;for(const n of t.listeners)n()}(t)}function s(t){const n=t?.code;if("permission"===n||"unsupported"===n||"timeout"===n||"invalid_topic"===n||"invalid_payload"===n)return n;const e=String(t?.message||"").toLowerCase();return e.includes("unauthor")||e.includes("permission")?"permission":e.includes("unknown_command")||e.includes("not found")?"unsupported":"provider"}function a(t){return Object.assign(new Error(t),{code:t})}function c(t,n,e){const o=t.inflight.get(n);if(o)return o;r(t,n,{phase:"loading"});const i=e().then(n=>{if(!n.nodes.length&&n.warnings.some(t=>"invalid_payload"===t.code))throw a("invalid_payload");!function(t,n){t.topologies=[...t.topologies.filter(t=>!(t.provider===n.provider&&t.instanceId===n.instanceId)),n],r(t,"zha"===n.provider?"zha":`z2m:${n.instanceId}`,{phase:"ready",obtainedAt:n.obtainedAt,partial:n.warnings.length>0})}(t,n)}).catch(e=>{r(t,n,{phase:"error",error:s(e)})}).finally(()=>t.inflight.delete(n));return t.inflight.set(n,i),i}function l(t){const n=i(t);return n?{revision:n.revision,topologies:n.topologies,states:n.states}:{revision:0,topologies:[],states:{}}}function u(t,n){const e=i(t);return e?(e.listeners.add(n),()=>e.listeners.delete(n)):()=>{}}function p(t){if(!0!==t?.user?.is_admin)throw a("permission")}function f(n){const e=i(n);return e?c(e,"zha",async()=>{if(p(n),"function"!=typeof n?.callWS)throw a("unsupported");return t(await n.callWS({type:"zha/devices"}))}):Promise.resolve()}function d(t){return null!==t&&"object"==typeof t?t:null}function h(t){const n=d(t),e=n?.payload??t;if("string"!=typeof e)return e;try{return JSON.parse(e)}catch{return null}}async function m(t,n){let e;try{return await Promise.race([t,new Promise((t,o)=>{e=globalThis.setTimeout(()=>o(a("timeout")),Math.max(1,n))})])}finally{void 0!==e&&globalThis.clearTimeout(e)}}function g(t,o,r=15e4){const s=i(t);if(!s)return Promise.resolve();const l=e(o);return c(s,`z2m:${l||String(o)}`,async()=>{if(p(t),!l)throw a("invalid_topic");const e=t.connection,o=e?.subscribeMessage;if("function"!=typeof o||"function"!=typeof t?.callService)throw a("unsupported");const i=function(){const t=globalThis.crypto;return"function"==typeof t?.randomUUID?`houseplan-${t.randomUUID()}`:`houseplan-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`}(),s=Date.now()+Math.max(1,r);let c=!1,u=null,f=null,g=null;const y=new Promise(t=>{u=t}),w=new Promise((t,n)=>{f=t,g=n}),b=[];try{const r=await o.call(e,t=>{!0===d(t)?.retain&&h(t)&&u?.()},{type:"mqtt/subscribe",topic:`${l}/bridge/info`});"function"==typeof r&&b.push(r);const p=await o.call(e,t=>{if(!0===d(t)?.retain)return;const n=h(t);null!==n?n&&function(t){const n=d(t),e=n?.transaction??d(n?.data)?.transaction;return"string"==typeof e||"number"==typeof e?String(e):null}(n)===i&&f?.(n):c&&g?.(a("invalid_payload"))},{type:"mqtt/subscribe",topic:`${l}/bridge/response/networkmap`});"function"==typeof p&&b.push(p),await m(y,Math.min(4e3,Math.max(1,s-Date.now()))),c=!0,await t.callService("mqtt","publish",{topic:`${l}/bridge/request/networkmap`,payload:JSON.stringify({type:"raw",routes:!1,transaction:i}),qos:0,retain:!1});const v=await m(w,s-Date.now()),_=d(v)?.status;if(_&&"ok"!==_)throw a("provider");return n(v,l)}finally{for(const t of b)try{t()}catch{}}})}export{f as readZhaTopology,g as refreshZ2mTopology,u as subscribeZigbeeTopology,l as zigbeeTopologyRuntimeSnapshot};
@@ -0,0 +1 @@
+globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";import{n as t,c as n}from"./zigbee-topology-DZ_-WbFy.js";import{aP as e}from"./houseplan-card-DGdbxgxC.js";import"./namespace-language-CPNZBROg.js";const o=new WeakMap;function i(t){const n=function(t){const n=t?.connection||t;return!n||"object"!=typeof n&&"function"!=typeof n?null:n}(t);if(!n)return null;let e=o.get(n);return e||(e={revision:0,topologies:[],states:{},listeners:new Set,inflight:new Map},o.set(n,e)),e}function r(t,n,e){t.states={...t.states,[n]:e},function(t){t.revision++;for(const n of t.listeners)n()}(t)}function s(t){const n=t?.code;if("permission"===n||"unsupported"===n||"timeout"===n||"invalid_topic"===n||"invalid_payload"===n)return n;const e=String(t?.message||"").toLowerCase();return e.includes("unauthor")||e.includes("permission")?"permission":e.includes("unknown_command")||e.includes("not found")?"unsupported":"provider"}function a(t){return Object.assign(new Error(t),{code:t})}function c(t,n,e){const o=t.inflight.get(n);if(o)return o;r(t,n,{phase:"loading"});const i=e().then(n=>{if(!n.nodes.length&&n.warnings.some(t=>"invalid_payload"===t.code))throw a("invalid_payload");!function(t,n){t.topologies=[...t.topologies.filter(t=>!(t.provider===n.provider&&t.instanceId===n.instanceId)),n],r(t,"zha"===n.provider?"zha":`z2m:${n.instanceId}`,{phase:"ready",obtainedAt:n.obtainedAt,partial:n.warnings.length>0})}(t,n)}).catch(e=>{r(t,n,{phase:"error",error:s(e)})}).finally(()=>t.inflight.delete(n));return t.inflight.set(n,i),i}function l(t){const n=i(t);return n?{revision:n.revision,topologies:n.topologies,states:n.states}:{revision:0,topologies:[],states:{}}}function u(t,n){const e=i(t);return e?(e.listeners.add(n),()=>e.listeners.delete(n)):()=>{}}function p(t){if(!0!==t?.user?.is_admin)throw a("permission")}function f(n){const e=i(n);return e?c(e,"zha",async()=>{if(p(n),"function"!=typeof n?.callWS)throw a("unsupported");return t(await n.callWS({type:"zha/devices"}))}):Promise.resolve()}function d(t){return null!==t&&"object"==typeof t?t:null}function m(t){const n=d(t),e=n?.payload??t;if("string"!=typeof e)return e;try{return JSON.parse(e)}catch{return null}}async function g(t,n){let e;try{return await Promise.race([t,new Promise((t,o)=>{e=globalThis.setTimeout(()=>o(a("timeout")),Math.max(1,n))})])}finally{void 0!==e&&globalThis.clearTimeout(e)}}function h(t,o,r=15e4){const s=i(t);if(!s)return Promise.resolve();const l=e(o);return c(s,`z2m:${l||String(o)}`,async()=>{if(p(t),!l)throw a("invalid_topic");const e=t.connection,o=e?.subscribeMessage;if("function"!=typeof o||"function"!=typeof t?.callService)throw a("unsupported");const i=function(){const t=globalThis.crypto;return"function"==typeof t?.randomUUID?`houseplan-${t.randomUUID()}`:`houseplan-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`}(),s=Date.now()+Math.max(1,r);let c=!1,u=null,f=null,h=null;const y=new Promise(t=>{u=t}),w=new Promise((t,n)=>{f=t,h=n}),b=[];try{const r=await o.call(e,t=>{!0===d(t)?.retain&&m(t)&&u?.()},{type:"mqtt/subscribe",topic:`${l}/bridge/info`});"function"==typeof r&&b.push(r);const p=await o.call(e,t=>{if(!0===d(t)?.retain)return;const n=m(t);null!==n?n&&function(t){const n=d(t),e=n?.transaction??d(n?.data)?.transaction;return"string"==typeof e||"number"==typeof e?String(e):null}(n)===i&&f?.(n):c&&h?.(a("invalid_payload"))},{type:"mqtt/subscribe",topic:`${l}/bridge/response/networkmap`});"function"==typeof p&&b.push(p),await g(y,Math.min(4e3,Math.max(1,s-Date.now()))),c=!0,await t.callService("mqtt","publish",{topic:`${l}/bridge/request/networkmap`,payload:JSON.stringify({type:"raw",routes:!1,transaction:i}),qos:0,retain:!1});const v=await g(w,s-Date.now()),_=d(v)?.status;if(_&&"ok"!==_)throw a("provider");return n(v,l)}finally{for(const t of b)try{t()}catch{}}})}export{f as readZhaTopology,h as refreshZ2mTopology,u as subscribeZigbeeTopology,l as zigbeeTopologyRuntimeSnapshot};
@@ -1 +1 @@
-globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="5e6b797362146dcb25e3ad594eca3a115b92cc4df3101d718fe7950b0ebfc362";try{await import("./houseplan-assets/houseplan-card-BGma7Zjs.js")}catch(e){if(!customElements.get("houseplan-card")){const l=String(navigator.language||"en").toLowerCase();const m=l.startsWith("ru")?"House Plan обновился — перезагрузите страницу (Ctrl+F5).":l.startsWith("de")?"House Plan wurde aktualisiert — bitte laden Sie die Seite neu (Strg+F5).":l.startsWith("fr")?"House Plan a été mis à jour — veuillez recharger la page (Ctrl+F5).":"House Plan was updated — please reload the page (Ctrl+F5).";customElements.define("houseplan-card",class extends HTMLElement{setConfig(){}getCardSize(){return 1}connectedCallback(){this.style.cssText="display:block;box-sizing:border-box;padding:16px;border:1px solid var(--divider-color,#e0e0e0);border-radius:var(--ha-card-border-radius,12px);background:var(--card-background-color,#fff);color:var(--primary-text-color,#212121);font:14px/1.4 var(--paper-font-body1_-_font-family,sans-serif)";this.textContent=m}})}console.error("[houseplan] stale houseplan-card.js: the implementation chunk is unavailable",e)}
+globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";try{await import("./houseplan-assets/houseplan-card-DGdbxgxC.js")}catch(e){if(!customElements.get("houseplan-card")){const l=String(navigator.language||"en").toLowerCase();const m=l.startsWith("ru")?"House Plan обновился — перезагрузите страницу (Ctrl+F5).":l.startsWith("de")?"House Plan wurde aktualisiert — bitte laden Sie die Seite neu (Strg+F5).":l.startsWith("fr")?"House Plan a été mis à jour — veuillez recharger la page (Ctrl+F5).":"House Plan was updated — please reload the page (Ctrl+F5).";customElements.define("houseplan-card",class extends HTMLElement{setConfig(){}getCardSize(){return 1}connectedCallback(){this.style.cssText="display:block;box-sizing:border-box;padding:16px;border:1px solid var(--divider-color,#e0e0e0);border-radius:var(--ha-card-border-radius,12px);background:var(--card-background-color,#fff);color:var(--primary-text-color,#212121);font:14px/1.4 var(--paper-font-body1_-_font-family,sans-serif)";this.textContent=m}})}console.error("[houseplan] stale houseplan-card.js: the implementation chunk is unavailable",e)}
@@ -36,6 +36,8 @@ from .const import (
    MAX_EXPORT_BYTES,
    MAX_FILES_BYTES,
    MAX_FILES_COUNT,
+    MAX_PLANS_BYTES,
+    MAX_PLANS_FILES,
    MIN_FREE_BYTES,
    PLANS_DIR,
 )
@@ -50,15 +52,25 @@ from .decor_assets import (
    validate_asset,
 )
 from .import_export import ImportFailure, create_preview
-from .plans import TMP_PREFIX, QuotaError, check_quota, reserve_filename
+from .plans import (
+    TMP_PREFIX,
+    QuotaError,
+    check_quota,
+    read_bounded,
+    reserve_filename,
+    store_plan_upload,
+)
 from .registry_snapshot import import_registry_snapshot
 from .store import get_data
 from .validation import (
    FILE_EXTENSIONS,
    MAX_FILE_BYTES,
+    MAX_PLAN_BYTES,
+    PLAN_EXTENSIONS,
    file_ext,
    sanitize_filename,
    sanitize_marker_id,
+    valid_space_id,
 )

 _LOGGER = logging.getLogger(__name__)
@@ -255,13 +267,6 @@ class HouseplanDecorAssetUploadView(HomeAssistantView):
        if not filename:
            return web.json_response({"error": "invalid_format"}, status=400)

-        try:
-            validated = await hass.async_add_executor_job(
-                validate_asset, b"".join(blocks), filename, declared_mime,
-            )
-        except DecorAssetError as err:
-            return web.json_response({"error": err.code, "message": str(err)}, status=413 if err.code == "too_large" else 400)
-
        root = Path(hass.config.path(ASSETS_DIR))

        def _store() -> tuple[dict, bool]:
@@ -339,9 +344,19 @@ class HouseplanDecorAssetUploadView(HomeAssistantView):

        try:
            async with runtime.upload_lock:
+                # Pillow may consume far more RSS than the compressed body.
+                # Serialise decode/validation as well as quota+promotion so N
+                # parallel uploads cannot become N simultaneous decoders.
+                validated = await hass.async_add_executor_job(
+                    validate_asset, b"".join(blocks), filename, declared_mime,
+                )
                row, reused = await hass.async_add_executor_job(_store)
        except DecorAssetError as err:
-            status = 507 if err.code == "capacity_exceeded" else 400
+            status = (
+                507 if err.code == "capacity_exceeded"
+                else 413 if err.code == "too_large"
+                else 400
+            )
            return web.json_response({"error": err.code, "message": str(err)}, status=status)
        except OSError as err:
            _LOGGER.warning("House Plan decor asset upload: store failed: %s", err)
@@ -349,6 +364,90 @@ class HouseplanDecorAssetUploadView(HomeAssistantView):
        return web.json_response({"ok": True, "reused": reused, "asset": public_asset(row)})


+# Form fields other than the file are a space id (<= 64 chars) and an
+# extension; a kilobyte is generous and keeps a hostile field from buffering.
+_PLAN_FIELD_BYTES = 1024
+
+
+class HouseplanPlanUploadView(HomeAssistantView):
+    """POST /api/houseplan/plans/upload — store one space plan, return its URL.
+
+    The card used to send plans base64-encoded over WebSocket; above ~3 MiB the
+    frame passed the 4 MiB message limit and HA closed the socket before
+    `houseplan/plan/set` ever ran, so the advertised 8 MiB limit was a lie
+    (#617). Multipart over HTTP has no such frame, and the body is bounded
+    while it streams. The body is buffered in memory (<= MAX_PLAN_BYTES plus
+    one chunk), like the decor view, and written by the same
+    `store_plan_upload` that the WebSocket command uses.
+    """
+
+    url = "/api/houseplan/plans/upload"
+    name = "api:houseplan:plan-upload"
+    requires_auth = True
+
+    async def post(self, request: web.Request) -> web.Response:
+        hass: HomeAssistant = request.app[KEY_HASS]
+        if not may_write(hass, request.get("hass_user")):
+            return web.json_response({"error": "unauthorized"}, status=403)
+        runtime = get_data(hass)
+        if runtime is None:
+            return web.json_response({"error": "not_ready"}, status=503)
+        too_large = web.json_response(
+            {"error": "too_large", "max_mb": MAX_PLAN_BYTES // 1024 // 1024}, status=413,
+        )
+        # Content-Length covers the multipart envelope too: reserve one batch
+        # for it, like the other upload views, and let the streaming bound
+        # below decide exactly.
+        declared = request.content_length
+        if declared is not None and declared > MAX_PLAN_BYTES + _FLUSH_AT:
+            return too_large
+        space_id: str | None = None
+        ext: str | None = None
+        raw: bytes | None = None
+        try:
+            reader = await request.multipart()
+            async for part in reader:
+                if part.name == "file":
+                    if raw is not None:
+                        return web.json_response({"error": "one_file_only"}, status=400)
+                    raw = await read_bounded(part, MAX_PLAN_BYTES, _CHUNK)
+                    if raw is None:
+                        return too_large
+                elif part.name in ("space_id", "ext"):
+                    field = await read_bounded(part, _PLAN_FIELD_BYTES, _CHUNK)
+                    value = field.decode("utf-8", "replace") if field is not None else ""
+                    if part.name == "space_id":
+                        space_id = value
+                    else:
+                        ext = value
+        except Exception as err:  # noqa: BLE001 - a broken multipart stream must answer 400, not crash the view
+            _LOGGER.warning("House Plan plan upload: multipart read error: %s", err)
+            return web.json_response({"error": "bad_request"}, status=400)
+        if space_id is None or not valid_space_id(space_id):
+            return web.json_response({"error": "invalid_space_id"}, status=400)
+        if ext not in PLAN_EXTENSIONS:
+            return web.json_response({"error": "bad_ext"}, status=400)
+        if raw is None:
+            return web.json_response({"error": "no_file"}, status=400)
+
+        plans_dir = Path(hass.config.path(PLANS_DIR))
+        try:
+            async with runtime.upload_lock:
+                name = await hass.async_add_executor_job(
+                    partial(
+                        store_plan_upload, plans_dir, space_id, ext, raw,
+                        max_bytes=MAX_PLANS_BYTES, max_files=MAX_PLANS_FILES,
+                    )
+                )
+        except QuotaError as err:
+            _LOGGER.warning("House Plan plan upload refused: %s", err.detail)
+            return web.json_response({"error": err.reason, "detail": err.detail}, status=507)
+        except OSError as err:
+            _LOGGER.warning("House Plan plan upload: could not store the file: %s", err)
+            return web.json_response({"error": "io_error"}, status=500)
+        return web.json_response({"ok": True, "url": f"{CONTENT_URL}/plans/_/{name}"})
+
+
 class HouseplanUploadView(HomeAssistantView):
    """POST /api/houseplan/upload — save a marker file, return its URL."""

@@ -362,6 +461,40 @@ class HouseplanUploadView(HomeAssistantView):
            return web.json_response({"error": "unauthorized"}, status=403)

        files_root = Path(hass.config.path(FILES_DIR))
+        runtime = get_data(hass)
+        if runtime is None:
+            return web.json_response({"error": "not_ready"}, status=503)
+
+        # Content-Length includes multipart boundaries and headers, not just
+        # file bytes. Reserve one streaming batch for that overhead and only
+        # preflight the guaranteed payload floor; otherwise a tiny file at the
+        # exact store boundary would be rejected by its envelope (#498). The
+        # exact staged size is checked again under the same lock immediately
+        # before promotion.
+        declared_size = getattr(request, "content_length", None)
+        if declared_size is not None and declared_size > 0:
+            if declared_size > MAX_FILE_BYTES + _FLUSH_AT:
+                return web.json_response(
+                    {"error": "too_large", "max_mb": MAX_FILE_BYTES // 1024 // 1024},
+                    status=413,
+                )
+            payload_floor = max(0, declared_size - _FLUSH_AT)
+            if payload_floor:
+                try:
+                    async with runtime.upload_lock:
+                        await hass.async_add_executor_job(
+                            partial(
+                                check_quota,
+                                files_root,
+                                payload_floor,
+                                MAX_FILES_BYTES,
+                                MAX_FILES_COUNT,
+                            )
+                        )
+                except QuotaError as err:
+                    return web.json_response(
+                        {"error": err.reason, "detail": err.detail}, status=507
+                    )
        marker_id = "misc"
        filename: str | None = None
        # Every temporary file this request creates, promoted or not. The outer
@@ -444,21 +577,6 @@ class HouseplanUploadView(HomeAssistantView):
                return web.json_response({"error": "no_file"}, status=400)

            tmp_path = temps[0]
-            try:
-                # The staged file already sits under files_root: hand it to
-                # the quota as `incoming` only, not as stored usage too (#498).
-                await hass.async_add_executor_job(
-                    partial(
-                        check_quota, files_root, tmp_path.stat().st_size,
-                        MAX_FILES_BYTES, MAX_FILES_COUNT, exclude=tmp_path,
-                        additional_disk_bytes=0,
-                    ),
-                )
-            except QuotaError as err:
-                _LOGGER.warning("House Plan upload refused: %s", err.detail)
-                return web.json_response({"error": err.reason, "detail": err.detail}, status=507)
-            except OSError:
-                pass
            target_dir = files_root / marker_id
            safe_name = filename

@@ -480,8 +598,27 @@ class HouseplanUploadView(HomeAssistantView):
                    raise
                return name

+            def _check_and_promote() -> str:
+                # The staged file already sits under files_root: hand it to
+                # the quota as `incoming` only, not as stored usage too (#498).
+                check_quota(
+                    files_root,
+                    tmp_path.stat().st_size,
+                    MAX_FILES_BYTES,
+                    MAX_FILES_COUNT,
+                    exclude=tmp_path,
+                    additional_disk_bytes=0,
+                )
+                return _promote()
+
            try:
-                name = await hass.async_add_executor_job(_promote)
+                async with runtime.upload_lock:
+                    name = await hass.async_add_executor_job(_check_and_promote)
+            except QuotaError as err:
+                _LOGGER.warning("House Plan upload refused: %s", err.detail)
+                return web.json_response(
+                    {"error": err.reason, "detail": err.detail}, status=507
+                )
            except OSError as err:
                _LOGGER.warning("House Plan upload: could not store the file: %s", err)
                return web.json_response({"error": "io_error"}, status=500)
@@ -45,12 +45,14 @@ from .validation import (
    MAX_LAYOUT,
    MAX_MARKERS,
    MAX_SPACES,
+    DuplicateMarkerIdError,
    MarkerControlError,
    OpeningPassageError,
    PartitionOpeningHostError,
    PartitionOpeningJambMarginError,
    sanitize_filename,
    sanitize_marker_id,
+    validate_active_marker_ids,
    validate_marker_controls,
    validate_marker_light_entities,
    validate_marker_vacuum_routes,
@@ -71,7 +73,7 @@ _LIVE_TEXT_ENTITY = re.compile(r"^[a-z0-9_]+\.[a-z0-9_]+$")
 _LIVE_TEXT_ATTRIBUTE = re.compile(r"^[a-zA-Z0-9_.-]+$")
 _PLAN_ONLY_DASH = "—"
 _IMPORT_ID_NAMESPACES = {
-    "space", "room", "marker", "partition", "wall", "opening", "decor", "column",
+    "space", "room", "marker", "partition", "wall", "opening", "decor", "column", "stair",
 }
 _MAX_IMPORT_LINEAGE_DEPTH = 16
 _REPORT_EXAMPLE_LIMIT = 24
@@ -292,6 +294,15 @@ def _project_plan_only_space(space: dict[str, Any]) -> dict[str, Any]:
        projected["decor"] = [
            _project_plan_only_decor(shape) for shape in space.get("decor") or []
        ]
+    if "stairs" in space:
+        projected["stairs"] = [
+            _pick_fields(stair, (
+                "id", "kind", "x", "y", "angle", "direction",
+                "target_space_id", "length", "width", "radius",
+                "color", "opacity", "fill_color", "fill_opacity",
+            ))
+            for stair in space.get("stairs") or []
+        ]
    return projected


@@ -740,6 +751,7 @@ def _counts(config: dict[str, Any], layout: dict[str, Any]) -> dict[str, int]:
        "markers": len(config.get("markers") or []),
        "openings": sum(len(sp.get("openings") or []) for sp in spaces),
        "decor": sum(len(sp.get("decor") or []) for sp in spaces),
+        "stairs": sum(len(sp.get("stairs") or []) for sp in spaces),
        "layout": len(layout),
    }

@@ -1130,6 +1142,14 @@ def _repair_target_space_refs(

    for space in spaces:
        space_id = str(space.get("id", "?"))
+        for stair in space.get("stairs") or []:
+            target = stair.get("target_space_id") if isinstance(stair, dict) else None
+            mapped = replace(
+                f"{space_id}:{stair.get('id', '?')}", "stair.target_space_id",
+                target, resolve_space,
+            )
+            if mapped is not None:
+                stair["target_space_id"] = mapped
        for room in space.get("rooms") or []:
            room_id = str(room.get("id", "?"))
            values = room.get("open_to")
@@ -1177,6 +1197,17 @@ def _repair_target_space_refs(
                    preserve_related(
                        marker_id, "marker.vacuum.segment_map", room_id, resolve_room,
                    )
+        routes = vacuum.get("map_routes") if isinstance(vacuum, dict) else None
+        if isinstance(routes, list):
+            for route in routes:
+                if not isinstance(route, dict):
+                    continue
+                mapped = replace(
+                    marker_id, "marker.vacuum.map_routes.space",
+                    route.get("space"), resolve_space,
+                )
+                if mapped is not None:
+                    route["space"] = mapped
        controls = marker.get("controls")
        if isinstance(controls, list):
            for index, ref in enumerate(controls):
@@ -1309,7 +1340,7 @@ def build_space_merge(
            (sp,), sp.get("rooms") or [],
            sp.get("partitions") or [], sp.get("wall_segments") or [],
            sp.get("wall_columns") or [],
-            sp.get("openings") or [], sp.get("decor") or [],
+            sp.get("openings") or [], sp.get("decor") or [], sp.get("stairs") or [],
        )
        for item in collection
        if isinstance(item, dict)
@@ -1325,7 +1356,7 @@ def build_space_merge(
            (incoming_space,), incoming_space.get("rooms") or [],
            incoming_space.get("partitions") or [], incoming_space.get("wall_segments") or [],
            incoming_space.get("wall_columns") or [],
-            incoming_space.get("openings") or [], incoming_space.get("decor") or [],
+            incoming_space.get("openings") or [], incoming_space.get("decor") or [], incoming_space.get("stairs") or [],
        )
        for item in collection
        if isinstance(item, dict)
@@ -1349,6 +1380,7 @@ def build_space_merge(
        ("rooms", "room"), ("partitions", "partition"),
        ("wall_segments", "wall"),
        ("wall_columns", "column"), ("openings", "opening"), ("decor", "decor"),
+        ("stairs", "stair"),
    ):
        for item in space.get(collection) or []:
            if isinstance(item, dict) and item.get("id") is not None:
@@ -1392,6 +1424,16 @@ def build_space_merge(
                    reference_report, "incoming", "opening.host",
                    str(opening.get("id", "?")), old_host_id,
                )
+    # A one-space export cannot carry a trustworthy external floor target.
+    # Self-links are invalid too because the imported source gets a new id.
+    for stair in space.get("stairs") or []:
+        target = stair.get("target_space_id") if isinstance(stair, dict) else None
+        if target is not None:
+            stair["target_space_id"] = None
+            _report_remap(
+                reference_report, "incoming", "stair.target_space_id",
+                str(stair.get("id", "?")), str(target),
+            )
    space["id"] = new_space_id
    space["title"] = _unique_title(
        str(space.get("title") or old_space_id), current_config.get("spaces") or []
@@ -1464,6 +1506,21 @@ def build_space_merge(
                        new_id, old_room_id,
                    )
            vacuum["segment_map"] = remapped_segments
+        # A single-space export can retain only routes owned by that space.
+        # The copy itself gets a fresh id, so the retained route must follow
+        # it just like marker.space does; otherwise foreign imports fail the
+        # referential validator and same-instance imports silently target the
+        # source floor (#611).
+        if isinstance(vacuum, dict) and isinstance(vacuum.get("map_routes"), list):
+            for route in vacuum["map_routes"]:
+                if not isinstance(route, dict) \
+                        or str(route.get("space")) != old_space_id:
+                    continue
+                route["space"] = new_space_id
+                _report_remap(
+                    reference_report, "incoming", "marker.vacuum.map_routes.space",
+                    new_id, old_space_id,
+                )
        if binding in duplicate and duplicate_policy == "virtual":
            virtualized += 1
            virtualized_targets.add(old_id)
@@ -1861,6 +1918,14 @@ def _materialize_import_candidate(
        config = CONFIG_SCHEMA(config)
    except vol.Invalid as err:
        raise ImportFailure("invalid_config", str(err)) from err
+    try:
+        validate_active_marker_ids(
+            config,
+            current_config if prepared["kind"] == "space" else None,
+            validate_all=prepared["kind"] == "full",
+        )
+    except DuplicateMarkerIdError as err:
+        raise ImportFailure(err.code, str(err)) from err
    try:
        layout = LAYOUT_SCHEMA(layout)
    except vol.Invalid as err:
@@ -20,5 +20,5 @@
  "issue_tracker": "https://github.com/Matysh/houseplan-card/issues",
  "requirements": [],
  "single_config_entry": true,
-  "version": "1.77.0"
+  "version": "1.79.0-beta.2"
 }
@@ -10,9 +10,11 @@ from __future__ import annotations

 import logging
 import os
+import secrets
+import tempfile
 import time
 from pathlib import Path
-from typing import Any
+from typing import Any, Protocol

 from .const import MIN_FREE_BYTES, PLAN_ORPHAN_TTL_S
 from .validation import MAX_FILENAME, PLAN_EXTENSIONS, sanitize_filename
@@ -25,6 +27,21 @@ _LOGGER = logging.getLogger(__name__)
 TMP_PREFIX = ".upload-"


+def atomic_write(path: Path, data: bytes, *, prefix: str = ".upload-") -> None:
+    """Durably replace ``path`` without exposing a partial destination file."""
+    path.parent.mkdir(parents=True, exist_ok=True)
+    fd, temp_name = tempfile.mkstemp(prefix=prefix, dir=str(path.parent))
+    temp = Path(temp_name)
+    try:
+        with os.fdopen(fd, "wb") as stream:
+            stream.write(data)
+            stream.flush()
+            os.fsync(stream.fileno())
+        os.replace(temp, path)
+    finally:
+        temp.unlink(missing_ok=True)
+
+
 def reserve_filename(directory: Path, name: str) -> str:
    """Atomically claim a free name inside `directory` and return it.

@@ -261,6 +278,63 @@ def check_quota(
        raise QuotaError("low_disk_space", f"only {free // 1024 // 1024} MB free on the disk")


+class _ChunkReader(Protocol):
+    async def read_chunk(self, size: int = ...) -> bytes: ...
+
+
+async def read_bounded(part: _ChunkReader, limit: int, chunk: int) -> bytes | None:
+    """Read one multipart part into memory, or None once it passes ``limit``.
+
+    The bound is inclusive: exactly ``limit`` bytes is accepted, one more is
+    refused. Reading stops at the first block that crosses it, so an oversized
+    upload never costs more than ``limit + chunk`` bytes of memory and nothing
+    touches the disk (#617). Pure — the part only has to offer ``read_chunk``.
+    """
+    blocks: list[bytes] = []
+    size = 0
+    while block := await part.read_chunk(chunk):
+        size += len(block)
+        if size > limit:
+            return None
+        blocks.append(block)
+    return b"".join(blocks)
+
+
+def store_plan_upload(
+    plans_dir: Path,
+    space_id: str,
+    ext: str,
+    raw: bytes,
+    *,
+    max_bytes: int,
+    max_files: int,
+) -> str:
+    """Write one validated plan upload under a new name and return that name.
+
+    The single writer behind both transports — the HTTP view and the legacy
+    WebSocket ``houseplan/plan/set`` (#617) — so naming, quota and the atomic
+    write cannot drift between them. The caller has already checked
+    ``space_id``, ``ext`` and the size, holds ``runtime.upload_lock`` and runs
+    this as ONE executor job: the quota measurement is only a bound if nothing
+    else writes between it and our write (HP-1490-02). A failed write reserves
+    nothing — the file either exists and is counted by the next scan, or does
+    not and is not.
+
+    Copy-on-write: a plan is written under a NEW unique name and nothing is
+    deleted here (review R2-1). The old name stays readable, so a config write
+    that is later rejected leaves the stored plan exactly as it was; the file a
+    commit REPLACES is collected by ``config/set`` itself (review R3-1).
+
+    ``.`` separates the id from the token because a space id cannot contain one
+    (SPACE_ID_RE), so "<space>.<token>.<ext>" can never be confused with the
+    files of a differently named space.
+    """
+    name = f"{space_id}.{secrets.token_hex(4)}.{ext}"
+    check_quota(plans_dir, len(raw), max_bytes, max_files)
+    atomic_write(plans_dir / name, raw, prefix=".plan-upload-")
+    return name
+
+
 def plan_basename(url: Any) -> str:
    """File name a stored plan_url points at ('' when there is none)."""
    if not isinstance(url, str) or not url:
@@ -123,4 +123,7 @@ rules:
    comment: No dependencies.
  inject-websession:
    status: exempt
-    comment: No outgoing HTTP.
+    comment: >-
+      The optional user-confirmed support relay is the integration's only
+      outgoing HTTP path and creates its bounded ClientSession explicitly;
+      ordinary plan, device and asset operation remains local.
@@ -81,6 +81,7 @@ class HouseplanData:
    store: HouseplanStore
    config_store: HouseplanStore
    virtual_light_store: HouseplanStore
+    virtual_lights: Any | None = None
    # One lock for every load→modify→save cycle of both stores: prevents
    # lost updates from concurrent WS calls and makes the rev check atomic.
    write_lock: asyncio.Lock = field(default_factory=asyncio.Lock)
@@ -118,7 +119,7 @@ HouseplanConfigEntry = ConfigEntry[HouseplanData]

 def create_data(hass: HomeAssistant) -> HouseplanData:
    """Create the stores for a config entry."""
-    return HouseplanData(
+    data = HouseplanData(
        store=HouseplanStore(hass, STORAGE_VERSION, STORAGE_KEY, minor_version=STORAGE_MINOR_VERSION),
        config_store=HouseplanStore(
            hass, STORAGE_VERSION, STORAGE_CONFIG_KEY, minor_version=STORAGE_MINOR_VERSION
@@ -130,6 +131,10 @@ def create_data(hass: HomeAssistant) -> HouseplanData:
            minor_version=STORAGE_MINOR_VERSION,
        ),
    )
+    from .virtual_lights import VirtualLightController
+
+    data.virtual_lights = VirtualLightController(hass, data.virtual_light_store)
+    return data


 def get_data(hass: HomeAssistant) -> HouseplanData | None:
@@ -229,12 +234,17 @@ async def async_save_config_state(
    from .virtual_lights import async_reconcile_virtual_lights

    try:
+        controller = getattr(runtime, "virtual_lights", None)
+        if controller is not None:
+            await controller.async_flush()
        await async_reconcile_virtual_lights(
            runtime.virtual_light_store,
            canonical_config,
            rev,
            previous_config_rev=previous_rev,
        )
+        if controller is not None:
+            controller.reset()
    except Exception:  # noqa: BLE001 - config commit already stands
        _LOGGER.exception("House Plan: virtual-light state reconciliation failed")
    return payload
@@ -155,6 +155,12 @@ def _global_settings(value: object) -> dict[str, Any]:
    show_room_tooltip = value.get("show_room_tooltip")
    if isinstance(show_room_tooltip, bool):
        out["show_room_tooltip"] = show_room_tooltip
+    volumetric_view = value.get("volumetric_view")
+    if isinstance(volumetric_view, bool):
+        out["volumetric_view"] = volumetric_view
+    moon = value.get("moon")
+    if isinstance(moon, bool):
+        out["moon"] = moon
    fill_colors = value.get("fill_colors")
    if isinstance(fill_colors, dict):
        palette = {
@@ -371,6 +377,18 @@ def _project_space(ids: _Pseudonyms, space: dict[str, Any], index: int) -> dict[
    out["decor"] = [
        _project_decor(ids, item) for item in space.get("decor") or [] if isinstance(item, dict)
    ]
+    out["stairs"] = []
+    for item in space.get("stairs") or []:
+        if not isinstance(item, dict):
+            continue
+        projected = {"id": ids.get("stair", item.get("id"))}
+        projected.update(_copy_keys(item, (
+            "kind", "x", "y", "angle", "direction", "length", "width", "radius",
+            "color", "opacity", "fill_color", "fill_opacity",
+        )))
+        if item.get("target_space_id"):
+            projected["target_space_id"] = ids.get("space", item.get("target_space_id"))
+        out["stairs"].append(projected)
    out["open_spans"] = [
        {"a": _point(item.get("a")), "b": _point(item.get("b"))}
        for item in space.get("open_spans") or [] if isinstance(item, dict)
@@ -433,6 +451,7 @@ def _summary(config: object, layout: object) -> dict[str, Any]:
        "columns": sum(len(space.get("wall_columns") or []) for space in spaces if isinstance(space, dict)),
        "openings": dict(sorted(kinds.items())),
        "decor": dict(sorted(decor_kinds.items())),
+        "stairs": sum(len(space.get("stairs") or []) for space in spaces if isinstance(space, dict)),
        "markers": {
            "total": len(markers),
            "lifecycle": dict(sorted(lifecycles.items())),
@@ -31,6 +31,7 @@ async def system_health_info(hass: HomeAssistant) -> dict[str, Any]:
        "rooms": sum(len(s.get("rooms", [])) for s in config.get("spaces", [])),
        "partitions": sum(len(s.get("partitions", [])) for s in config.get("spaces", [])),
        "wall_columns": sum(len(s.get("wall_columns", [])) for s in config.get("spaces", [])),
+        "stairs": sum(len(s.get("stairs", [])) for s in config.get("spaces", [])),
        "markers": len(config.get("markers", [])),
        "layout_entries": len(layout_raw.get("layout", {})),
    }
@@ -455,16 +455,30 @@ class TrailRecorder:
                self.hass, sorted(ents), self._on_state
            )

-    def teardown(self) -> None:
+    def _close_subscriptions(self) -> bool:
+        """Stop callbacks/timers and report whether a save was pending."""
        # HP-1540-05: flag FIRST — a refresh parked on its awaited load must
-        # not re-subscribe after this cleanup has already run
+        # not re-subscribe after this cleanup has already run.
        self._closed = True
        if self._unsub_track:
            self._unsub_track()
            self._unsub_track = None
+        pending = self._unsub_save is not None
        if self._unsub_save:
            self._unsub_save()
            self._unsub_save = None
+        return pending
+
+    async def async_teardown(self) -> None:
+        """Stop the recorder and durably flush a pending debounced save."""
+        async with self._refresh_lock:
+            pending = self._close_subscriptions()
+            if pending:
+                await self.store.async_save(self.book.data)
+
+    def teardown(self) -> None:
+        """Synchronous emergency cleanup for already-closing event loops."""
+        self._close_subscriptions()

    def _vacuum_entity(self, m: dict[str, Any]) -> str | None:
        b = str(m.get("binding") or "")
@@ -42,6 +42,62 @@ class MarkerControlError(ValueError):
        self.code = code


+class DuplicateMarkerIdError(ValueError):
+    """A write introduced or retained a changed duplicate active marker id."""
+
+    code = "invalid_config"
+
+    def __init__(self) -> None:
+        # Marker ids may contain user-controlled entity/device identifiers. A
+        # stable message is enough and does not leak the value into logs.
+        super().__init__("duplicate active marker id")
+
+
+def _active_marker_groups(config: dict | None) -> dict[str, list[str]]:
+    """Return order-independent structural signatures grouped by live id."""
+    groups: dict[str, list[str]] = {}
+    for marker in (config or {}).get("markers") or []:
+        if not isinstance(marker, dict) or marker.get("removed") is True:
+            continue
+        marker_id = marker.get("id")
+        if not isinstance(marker_id, str) or not marker_id:
+            continue
+        groups.setdefault(marker_id, []).append(
+            json.dumps(marker, sort_keys=True, ensure_ascii=False, separators=(",", ":"))
+        )
+    for signatures in groups.values():
+        signatures.sort()
+    return groups
+
+
+def validate_active_marker_ids(
+    config: dict,
+    previous: dict | None = None,
+    *,
+    validate_all: bool = False,
+) -> None:
+    """Reject new active-id ambiguity without stranding legacy documents.
+
+    Existing duplicate groups may round-trip unchanged so an unrelated save
+    remains possible. Once any member changes, the candidate must repair the
+    group down to at most one active marker. Authoritative imports pass
+    ``validate_all=True`` because they have no local legacy group to preserve.
+    """
+    candidate = _active_marker_groups(config)
+    duplicates = {
+        marker_id: signatures
+        for marker_id, signatures in candidate.items()
+        if len(signatures) > 1
+    }
+    if not duplicates:
+        return
+    if validate_all or previous is None:
+        raise DuplicateMarkerIdError()
+    old = _active_marker_groups(previous)
+    if any(old.get(marker_id) != signatures for marker_id, signatures in duplicates.items()):
+        raise DuplicateMarkerIdError()
+
+
 class OpeningPassageError(ValueError):
    """Semantic open-passage error with a stable public code and payload."""

@@ -1142,6 +1198,7 @@ MAX_ROOMS = 400
 MAX_MARKERS = 2000
 MAX_OPENINGS = 500
 MAX_DECOR = 1000
+MAX_STAIRS = 250
 # v8 atomises room boundaries. The 2 MiB wire cap is the practical bound; this
 # structural cap mirrors MAX_ROOMS * MAX_POLY_POINTS without depending on the
 # later constant declaration.
@@ -1151,7 +1208,7 @@ _LEGACY_MAX_ROOM_DRAFTS = 200
 _LEGACY_MAX_DRAFT_SEGMENTS = 2000
 MAX_PARTITIONS = 2000
 MAX_WALL_COLUMNS = 500
-# Open (virtual) wall stretches, docs/superpowers/specs/2026-08-05-open-spans-delete-design.md.
+# Open (virtual) wall stretches, legacy/docs/superpowers/specs/2026-08-05-open-spans-delete-design.md.
 # Every span is a piece of a shared boundary, so there can never be more of
 # them than there are wall segments — the cap is the walls' one (AUD-159B6-03).
 MAX_OPEN_SPANS = 500
@@ -1223,7 +1280,7 @@ _GEOM = vol.All(_finite, vol.Range(min=-CANVAS_LIMIT, max=CANVAS_LIMIT))
 # than the old unit square — while staying strictly positive.
 _EXTENT = vol.All(_finite, vol.Range(min=0.001, max=CANVAS_LIMIT))

-# The backdrop's uniform scale (docs/BACKDROP.md). A MULTIPLIER, not a
+# The backdrop's uniform scale (docs/DECOR-EDITOR.md §3). A MULTIPLIER, not a
 # coordinate: strictly positive, and bounded by what a person could mean —
 # a hundredth of the canvas is already a thumbnail, a hundred canvases is
 # already absurd. Mirrored by PLAN_SCALE_MIN/MAX in src/space-geometry.ts.
@@ -1371,7 +1428,7 @@ SPACE_DISPLAY_SCHEMA = vol.Schema(
    extra=vol.ALLOW_EXTRA,
 )

-# Live text on a decor label (docs/LIVE-TEXT.md). An entity id is
+# Live text on a decor label (docs/DECOR-EDITOR.md §5). An entity id is
 # `<domain>.<object_id>`; HA itself allows only lowercase letters, digits and
 # underscores in both halves. The bound is a sanity limit, not a policy.
 MAX_ENTITY_ID = 255
@@ -1433,7 +1490,7 @@ DECOR_SCHEMA = vol.Any(
    vol.Schema({**_DECOR_COMMON, vol.Required("kind"): "text",
                vol.Required("x"): _NORM, vol.Required("y"): _NORM,
                # the template: newlines are the user's own line breaks and are
-                # kept verbatim (docs/LIVE-TEXT.md); the label never wraps itself
+                # kept verbatim (docs/DECOR-EDITOR.md §5); the label never wraps itself
                vol.Required("text"): vol.All(str, vol.Length(min=1, max=MAX_DECOR_TEXT)),
                # legacy font size ('s'|'m'|'l'). The dialog no longer offers it
                # — the block is scaled by its corner handles — but a plan
@@ -1476,6 +1533,61 @@ DECOR_SCHEMA = vol.Any(
 )


+def _strict_stair(value: dict) -> dict:
+    """A discriminated stair record carries dimensions for exactly one kind."""
+    if value["kind"] == "straight":
+        if "radius" in value:
+            raise vol.Invalid("radius is allowed only for spiral stairs")
+        if value["direction"] not in ("forward", "backward"):
+            raise vol.Invalid("straight stair direction must be forward or backward")
+    else:
+        if "length" in value or "width" in value:
+            raise vol.Invalid("length and width are allowed only for straight stairs")
+        if value["direction"] not in ("clockwise", "counterclockwise"):
+            raise vol.Invalid("spiral stair direction must be clockwise or counterclockwise")
+    return value
+
+
+def _stair_dimensions(value: dict) -> dict:
+    """Require the dimension fields owned by the selected stair kind."""
+    complete = (
+        value["kind"] == "straight" and "length" in value and "width" in value
+        or value["kind"] == "spiral" and "radius" in value
+    )
+    if not complete:
+        raise vol.Invalid("stair kind requires its dimensions")
+    return value
+
+
+STAIR_SCHEMA = vol.All(
+    vol.Schema(
+        {
+            vol.Required("id"): vol.All(str, vol.Length(min=1, max=64)),
+            vol.Required("kind"): vol.In(["straight", "spiral"]),
+            vol.Required("x"): _NORM,
+            vol.Required("y"): _NORM,
+            vol.Required("angle"): vol.All(_finite, vol.Range(min=-360.0, max=360.0)),
+            vol.Required("direction"): vol.In([
+                "forward", "backward", "clockwise", "counterclockwise",
+            ]),
+            vol.Optional("target_space_id"): vol.Any(
+                None, vol.All(str, vol.Match(SPACE_ID_RE.pattern))
+            ),
+            vol.Optional("length"): _FURN_SIZE,
+            vol.Optional("width"): _FURN_SIZE,
+            vol.Optional("radius"): _FURN_SIZE,
+            vol.Optional("color"): _COLOR,
+            vol.Optional("opacity"): vol.All(_finite, vol.Range(min=0.0, max=1.0)),
+            vol.Optional("fill_color"): _COLOR,
+            vol.Optional("fill_opacity"): vol.All(_finite, vol.Range(min=0.0, max=1.0)),
+        },
+        extra=vol.ALLOW_EXTRA,
+    ),
+    _stair_dimensions,
+    _strict_stair,
+)
+
+
 def _wall_endpoints_pair(entry: dict) -> dict:
    """Exact wall endpoints are useful only as a complete a/b pair."""
    if ("a" in entry) != ("b" in entry):
@@ -1617,7 +1729,7 @@ OPENING_HOST_SCHEMA = vol.Any(PARTITION_OPENING_HOST_SCHEMA, WALL_OPENING_HOST_S
 def _space_geometry_invariants(value: dict) -> dict:
    """All stored geometry shares ids; draft segments also have a space cap."""
    seen: set[str] = set()
-    for key in ("rooms", "openings", "decor", "room_drafts", "partitions", "wall_columns", "wall_segments"):
+    for key in ("rooms", "openings", "decor", "stairs", "room_drafts", "partitions", "wall_columns", "wall_segments"):
        for item in value.get(key, []):
            item_id = item.get("id")
            if not item_id:
@@ -1687,7 +1799,7 @@ SPACE_SCHEMA = vol.All(vol.Schema(
        vol.Optional("plan_aspect"): vol.Any(
            None, vol.All(vol.Coerce(float), vol.Range(min=0.05, max=20))
        ),
-        # Backdrop placement (docs/BACKDROP.md): the picture may be moved,
+        # Backdrop placement (docs/DECOR-EDITOR.md §3): the picture may be moved,
        # resized per axis and rotated. Every transform field is optional; its
        # complete absence is the pre-v1.58.0 behaviour exactly, and an old
        # config validates unchanged. The offset is a normalised
@@ -1712,6 +1824,7 @@ SPACE_SCHEMA = vol.All(vol.Schema(
        vol.Required("view_box"): _view_box,
        vol.Required("rooms"): vol.All([ROOM_SCHEMA], vol.Length(max=MAX_ROOMS)),
        vol.Optional("decor"): vol.All([DECOR_SCHEMA], vol.Length(max=MAX_DECOR)),
+        vol.Optional("stairs"): vol.All([STAIR_SCHEMA], vol.Length(max=MAX_STAIRS)),
        vol.Optional("openings"): vol.All([
            vol.Schema(
                {
@@ -2198,6 +2311,10 @@ CONFIG_SCHEMA = vol.All(
                    vol.Optional("sun_rays"): bool,
                    vol.Optional("sun_ray_origin"): _SUN_RAY_ORIGIN,
                    vol.Optional("show_room_tooltip"): bool,
+                    # #649: installation-wide 2.5D View; absent/false keeps Flat.
+                    vol.Optional("volumetric_view"): bool,
+                    # #661: the moon on the "Follow the Sun" background; absent/false = off.
+                    vol.Optional("moon"): bool,
                    vol.Optional("summary_panel"): SUMMARY_PANEL_WIRE_SCHEMA,
                    vol.Optional("radar"): vol.Schema({}, extra=vol.ALLOW_EXTRA),
                    # Removed from the UI/runtime in 2026-08-08. Keep accepting the
@@ -1,13 +1,20 @@
 """Persistent operational state for manual virtual lights."""
 from __future__ import annotations

+import asyncio
+import copy
+import logging
 from typing import TYPE_CHECKING, Any

 if TYPE_CHECKING:
+    from homeassistant.core import HomeAssistant
+
    from .store import HouseplanStore


 EVENT_VIRTUAL_LIGHT_UPDATED = "houseplan_virtual_light_updated"
+SAVE_DELAY_S = 0.5
+_LOGGER = logging.getLogger(__name__)


 def is_manual_virtual_light(marker: Any) -> bool:
@@ -57,6 +64,119 @@ def _wire(rev: int, config_rev: int, off: set[str]) -> dict[str, Any]:
    return {"rev": rev, "config_rev": config_rev, "off": sorted(off)}


+def _snapshot_payload(
+    stored: Any,
+    config: dict[str, Any],
+    config_rev: int,
+    *,
+    previous_config_rev: int | None = None,
+) -> dict[str, Any]:
+    rev, state_config_rev, stored_off = _read_state(stored)
+    eligible = eligible_virtual_light_ids(config)
+    expected_rev = config_rev if previous_config_rev is None else previous_config_rev
+    off = stored_off & eligible if state_config_rev == expected_rev else set()
+    if off != stored_off:
+        rev += 1
+    return _wire(rev, config_rev, off)
+
+
+class VirtualLightController:
+    """Runtime cache with coalesced durable writes for rapid toggles."""
+
+    def __init__(self, hass: HomeAssistant, store: HouseplanStore) -> None:
+        self.hass = hass
+        self.store = store
+        self._state: dict[str, Any] | None = None
+        self._dirty = False
+        self._save_task: asyncio.Task[None] | None = None
+        self._flush_event = asyncio.Event()
+        self._flush_lock = asyncio.Lock()
+
+    async def async_snapshot(
+        self, config: dict[str, Any], config_rev: int,
+    ) -> dict[str, Any]:
+        source = self._state
+        if source is None:
+            source = await self.store.async_load() or {}
+        payload = _snapshot_payload(source, config, config_rev)
+        self._state = payload
+        if payload != source:
+            self._dirty = True
+            self._schedule_save()
+        return copy.deepcopy(payload)
+
+    async def async_toggle(
+        self,
+        config: dict[str, Any],
+        config_rev: int,
+        marker_id: str,
+    ) -> dict[str, Any] | None:
+        if marker_id not in eligible_virtual_light_ids(config):
+            return None
+        snapshot = await self.async_snapshot(config, config_rev)
+        off = set(snapshot["off"])
+        if marker_id in off:
+            off.remove(marker_id)
+        else:
+            off.add(marker_id)
+        payload = _wire(_integer(snapshot["rev"]) + 1, config_rev, off)
+        self._state = payload
+        self._dirty = True
+        self._schedule_save()
+        return {
+            "marker_id": marker_id,
+            "on": marker_id not in off,
+            "rev": payload["rev"],
+        }
+
+    def _schedule_save(self) -> None:
+        if self._save_task is None or self._save_task.done():
+            self._save_task = self.hass.async_create_task(self._delayed_save())
+
+    async def _delayed_save(self) -> None:
+        try:
+            while self._dirty:
+                if not self._flush_event.is_set():
+                    try:
+                        await asyncio.wait_for(
+                            self._flush_event.wait(), timeout=SAVE_DELAY_S,
+                        )
+                    except TimeoutError:
+                        pass
+                if not self._dirty or self._state is None:
+                    continue
+                payload = copy.deepcopy(self._state)
+                self._dirty = False
+                try:
+                    await self.store.async_save(payload)
+                except Exception:  # noqa: BLE001 - next toggle/unload retries
+                    self._dirty = True
+                    _LOGGER.exception("House Plan: virtual-light delayed save failed")
+                    return
+        finally:
+            self._save_task = None
+            if not self._dirty:
+                self._flush_event.clear()
+
+    async def async_flush(self) -> None:
+        """Persist the latest state before config transitions or unload."""
+        async with self._flush_lock:
+            task = self._save_task
+            if task is not None:
+                self._flush_event.set()
+                await task
+            if self._dirty and self._state is not None:
+                payload = copy.deepcopy(self._state)
+                await self.store.async_save(payload)
+                self._dirty = False
+            if not self._dirty:
+                self._flush_event.clear()
+
+    def reset(self) -> None:
+        """Forget cache after an external reconciliation wrote the store."""
+        self._state = None
+
+
 async def async_virtual_light_snapshot(
    store: HouseplanStore,
    config: dict[str, Any],
@@ -70,12 +190,7 @@ async def async_virtual_light_snapshot(
    old off state for a marker whose role changed in the meantime.
    """
    stored = await store.async_load() or {}
-    rev, state_config_rev, stored_off = _read_state(stored)
-    eligible = eligible_virtual_light_ids(config)
-    off = stored_off & eligible if state_config_rev == config_rev else set()
-    if off != stored_off:
-        rev += 1
-    payload = _wire(rev, config_rev, off)
+    payload = _snapshot_payload(stored, config, config_rev)
    if payload != stored:
        await store.async_save(payload)
    return payload
@@ -90,12 +205,9 @@ async def async_reconcile_virtual_lights(
 ) -> dict[str, Any]:
    """Carry eligible state across one known configuration transition."""
    stored = await store.async_load() or {}
-    rev, state_config_rev, stored_off = _read_state(stored)
-    eligible = eligible_virtual_light_ids(config)
-    off = stored_off & eligible if state_config_rev == previous_config_rev else set()
-    if off != stored_off:
-        rev += 1
-    payload = _wire(rev, config_rev, off)
+    payload = _snapshot_payload(
+        stored, config, config_rev, previous_config_rev=previous_config_rev,
+    )
    if payload != stored:
        await store.async_save(payload)
    return payload
@@ -439,7 +439,7 @@ def _thickness(space: dict[str, Any], atom: dict[str, Any], previous: dict[str,

 def _non_catalog_ids(space: dict[str, Any]) -> set[str]:
    result: set[str] = set()
-    for name in ("rooms", "openings", "decor", "room_drafts", "partitions", "wall_columns"):
+    for name in ("rooms", "openings", "decor", "stairs", "room_drafts", "partitions", "wall_columns"):
        for item in space.get(name) or []:
            if isinstance(item, dict) and isinstance(item.get("id"), str) and item["id"]:
                result.add(item["id"])
@@ -661,7 +661,7 @@ def _migrate_room_drafts_to_partitions(space: dict[str, Any]) -> tuple[int, int]
        return 0, 0
    used = {
        str(item["id"])
-        for name in ("rooms", "openings", "decor", "partitions",
+        for name in ("rooms", "openings", "decor", "stairs", "partitions",
                     "wall_columns", "wall_segments")
        for item in space.get(name) or []
        if isinstance(item, dict) and isinstance(item.get("id"), str) and item["id"]
@@ -72,13 +72,13 @@ from .import_export import (
 from .junction_limits import JunctionLimitError, validate_junction_limits
 from .plans import (
    QuotaError,
-    check_quota,
    collect_attachments,
    collect_plans,
    is_plan_file,
    plan_basename,
    plan_refs,
    reserve_filename,
+    store_plan_upload,
 )
 from .projection import project_config, project_layout
 from .radar_validation import (
@@ -113,6 +113,7 @@ from .validation import (
    MAX_PLAN_BYTES,
    PLAN_EXTENSIONS,
    POS_SCHEMA,
+    DuplicateMarkerIdError,
    MarkerControlError,
    OpeningPassageError,
    PartitionOpeningHostError,
@@ -121,6 +122,7 @@ from .validation import (
    prepare_ordinary_summary_candidate,
    sanitize_filename,
    valid_space_id,
+    validate_active_marker_ids,
    validate_marker_controls,
    validate_marker_light_entities,
    validate_marker_vacuum_routes,
@@ -141,6 +143,19 @@ from .wall_segment_model import (
 )

 _LOGGER = logging.getLogger(__name__)
+_MISSING_REV_DEBUGGED: set[str] = set()
+
+
+def _debug_missing_revision_once(command: str, current_rev: int) -> None:
+    """Log one low-noise diagnostic per legacy write command."""
+    if command in _MISSING_REV_DEBUGGED:
+        return
+    _MISSING_REV_DEBUGGED.add(command)
+    _LOGGER.debug(
+        "House Plan: %s without expected_rev over rev %s; write rejected",
+        command,
+        current_rev,
+    )

 def _optimizer_backup_is_current(config_data: dict[str, Any], layout_data: dict[str, Any]) -> bool:
    """An optimization can be undone before any later ordinary plan edit."""
@@ -440,21 +455,23 @@ async def ws_export_create(hass: HomeAssistant, connection, msg: dict[str, Any])
        return
    try:
        async with rt.write_lock:
-            config_data = await rt.config_store.async_load() or {}
-            layout_data = await rt.store.async_load() or {}
-            document, filename = await hass.async_add_executor_job(
-                partial(
-                    create_export,
-                    rt,
-                    config_data,
-                    layout_data,
-                    kind=msg["kind"],
-                    space_id=msg.get("space_id"),
-                    plan_only=msg.get("plan_only", False),
-                    card_version=msg.get("card_version", ""),
-                    config_root=Path(hass.config.path("")),
-                )
+            # Copy one coherent pair while writers are excluded, then release
+            # the global lock before hashing assets and building the document.
+            config_data = copy.deepcopy(await rt.config_store.async_load() or {})
+            layout_data = copy.deepcopy(await rt.store.async_load() or {})
+        document, filename = await hass.async_add_executor_job(
+            partial(
+                create_export,
+                rt,
+                config_data,
+                layout_data,
+                kind=msg["kind"],
+                space_id=msg.get("space_id"),
+                plan_only=msg.get("plan_only", False),
+                card_version=msg.get("card_version", ""),
+                config_root=Path(hass.config.path("")),
            )
+        )
    except ImportFailure as err:
        _send_import_error(connection, msg["id"], err)
        return
@@ -575,8 +592,11 @@ async def ws_import_apply(hass: HomeAssistant, connection, msg: dict[str, Any])
                    "missing_plan",
                    "Plan file no longer exists: " + ", ".join(sorted(missing)),
                )
-            missing_attachments = _missing_internal_attachments(
-                Path(hass.config.path("")), target_config, config_data.get("config")
+            missing_attachments = await hass.async_add_executor_job(
+                _missing_internal_attachments,
+                Path(hass.config.path("")),
+                target_config,
+                config_data.get("config"),
            )
            if missing_attachments:
                raise ImportFailure(
@@ -751,11 +771,7 @@ async def ws_layout_set(hass: HomeAssistant, connection, msg: dict[str, Any]) ->
            # indistinguishable from a stale writer.  Keep the schema field
            # optional only for rev-zero bootstrap and return the stable domain
            # conflict here rather than allowing canonical no-op to bypass CAS.
-            _LOGGER.warning(
-                "House Plan: layout/set without expected_rev over rev %s — "
-                "write rejected (outdated client?)",
-                current_rev,
-            )
+            _debug_missing_revision_once("layout/set", current_rev)
            connection.send_error(
                msg["id"], "conflict",
                f"Layout revision is required; reload the layout, or — for "
@@ -808,10 +824,6 @@ async def ws_layout_update(hass: HomeAssistant, connection, msg: dict[str, Any])
        config_data = resolved.config_data
        config = config_data.get("config") or {}
        markers = config.get("markers") or []
-        deleted = any(
-            str(m.get("id")) == msg["device_id"] and m.get("removed") is True
-            for m in markers
-        )
        live_virtual = any(
            str(m.get("id")) == msg["device_id"] and m.get("removed") is not True
            and m.get("binding") == "virtual"
@@ -821,6 +833,10 @@ async def ws_layout_update(hass: HomeAssistant, connection, msg: dict[str, Any])
            str(m.get("id")) == msg["device_id"] and m.get("removed") is not True
            for m in markers
        )
+        deleted = not live_explicit and any(
+            str(m.get("id")) == msg["device_id"] and m.get("removed") is True
+            for m in markers
+        )
        orphan_virtual = (
            msg["device_id"].startswith("v_")
            and not live_virtual
@@ -1040,6 +1056,9 @@ async def ws_plans_list(hass: HomeAssistant, connection, msg: dict[str, Any]) ->
    works as a policy if the user can see them: detaching a plan keeps the
    image, and this is how it gets picked up again — or deleted on purpose.
    """
+    if not _check_write(hass, connection):
+        connection.send_error(msg["id"], "unauthorized", "Only writers may list plans")
+        return
    rt = _runtime(hass, connection, msg["id"])
    if rt is None:
        return
@@ -1429,10 +1448,10 @@ async def ws_config_get(hass: HomeAssistant, connection, msg: dict[str, Any]) ->
        config = {**DEFAULT_CONFIG, **data.get("config", {})}
        config_rev = int(data.get("rev", 0))
        try:
-            virtual_lights = await async_virtual_light_snapshot(
-                rt.virtual_light_store,
-                config,
-                config_rev,
+            virtual_lights = await (
+                rt.virtual_lights.async_snapshot(config, config_rev)
+                if rt.virtual_lights is not None
+                else async_virtual_light_snapshot(rt.virtual_light_store, config, config_rev)
            )
        except Exception:  # noqa: BLE001 - config remains independently readable
            _LOGGER.exception("House Plan: reading virtual-light state failed")
@@ -1482,11 +1501,17 @@ async def ws_virtual_light_toggle(
    async with rt.write_lock:
        data = await rt.config_store.async_load() or {}
        config = {**DEFAULT_CONFIG, **data.get("config", {})}
-        result = await async_toggle_virtual_light(
-            rt.virtual_light_store,
-            config,
-            int(data.get("rev", 0)),
-            msg["marker_id"],
+        result = await (
+            rt.virtual_lights.async_toggle(
+                config, int(data.get("rev", 0)), msg["marker_id"]
+            )
+            if rt.virtual_lights is not None
+            else async_toggle_virtual_light(
+                rt.virtual_light_store,
+                config,
+                int(data.get("rev", 0)),
+                msg["marker_id"],
+            )
        )
        if result is None:
            connection.send_error(
@@ -1495,8 +1520,8 @@ async def ws_virtual_light_toggle(
                "Marker is not an active virtual light with tap_action=toggle",
            )
            return
-    # Both the reply and event follow the durable Store write.  There is no
-    # optimistic client state, so all cards converge on this revision.
+    # The runtime revision is immediate; durable writes are coalesced and
+    # flushed before config transitions/unload.
    connection.send_result(msg["id"], result)
    hass.bus.async_fire(EVENT_VIRTUAL_LIGHT_UPDATED, result)

@@ -1627,11 +1652,7 @@ async def ws_config_set(hass: HomeAssistant, connection, msg: dict[str, Any]) ->
            # empty-store bootstrap and so this path can return the same stable
            # domain error as an explicit stale revision.  Accepting it over a
            # saved document would bypass optimistic locking entirely.
-            _LOGGER.warning(
-                "House Plan: config/set without expected_rev over rev %s — "
-                "write rejected (outdated client?)",
-                current_rev,
-            )
+            _debug_missing_revision_once("config/set", current_rev)
            connection.send_error(
                msg["id"], "conflict",
                f"Configuration revision is required; reload the configuration, "
@@ -1670,6 +1691,7 @@ async def ws_config_set(hass: HomeAssistant, connection, msg: dict[str, Any]) ->
            )
            msg["config"].clear()
            msg["config"].update(checked)
+            validate_active_marker_ids(msg["config"], data.get("config"))
            validate_marker_controls(msg["config"], data.get("config"))
            validate_marker_light_entities(msg["config"], data.get("config"))
            validate_marker_radars(
@@ -1686,7 +1708,7 @@ async def ws_config_set(hass: HomeAssistant, connection, msg: dict[str, Any]) ->
        try:
            candidate_counts = await hass.async_add_executor_job(_validate_config_cpu)
        except (
-            JunctionLimitError, MarkerControlError, OpeningPassageError,
+            DuplicateMarkerIdError, JunctionLimitError, MarkerControlError, OpeningPassageError,
            PartitionOpeningHostError, PartitionOpeningJambMarginError,
            WallModelClientOutdatedError,
        ) as err:
@@ -1826,6 +1848,10 @@ def _space_delete_candidate(
        item for item in candidate_config.get("spaces") or []
        if item.get("id") != space_id
    ]
+    for remaining_space in candidate_config["spaces"]:
+        for stair in remaining_space.get("stairs") or []:
+            if isinstance(stair, dict) and stair.get("target_space_id") == space_id:
+                stair["target_space_id"] = None
    for marker in candidate_config.get("markers") or []:
        marker_id = str(marker.get("id")) if marker.get("id") is not None else None
        marker_position = candidate_layout.get(marker_id) if marker_id is not None else None
@@ -1916,6 +1942,7 @@ async def ws_space_delete(hass: HomeAssistant, connection, msg: dict[str, Any])
                )
                return
            target_config = CONFIG_SCHEMA(target_config)
+            validate_active_marker_ids(target_config, current_config)
            target_layout = LAYOUT_SCHEMA(target_layout)
            new_config_rev = config_rev + 1
            new_layout_rev = layout_rev + 1
@@ -1952,6 +1979,9 @@ async def ws_space_delete(hass: HomeAssistant, connection, msg: dict[str, Any])
    except ImportFailure as err:
        _send_import_error(connection, msg["id"], err)
        return
+    except DuplicateMarkerIdError as err:
+        connection.send_error(msg["id"], err.code, str(err))
+        return
    except vol.Invalid as err:
        connection.send_error(msg["id"], "invalid_config", str(err))
        return
@@ -2058,6 +2088,7 @@ async def ws_plan_optimize(hass: HomeAssistant, connection, msg: dict[str, Any])
                return None, migrated_size
            msg["config"].clear()
            msg["config"].update(checked)
+            validate_active_marker_ids(msg["config"], config_data.get("config"))
            validate_marker_controls(msg["config"], config_data.get("config"))
            validate_marker_light_entities(msg["config"], config_data.get("config"))
            validate_marker_radars(
@@ -2093,7 +2124,7 @@ async def ws_plan_optimize(hass: HomeAssistant, connection, msg: dict[str, Any])
                )
                return
        except (
-            JunctionLimitError, MarkerControlError, OpeningPassageError,
+            DuplicateMarkerIdError, JunctionLimitError, MarkerControlError, OpeningPassageError,
            PartitionOpeningHostError, PartitionOpeningJambMarginError,
            WallModelClientOutdatedError,
            WallSegmentMigrationError,
@@ -2324,38 +2355,25 @@ async def ws_plan_set(hass: HomeAssistant, connection, msg: dict[str, Any]) -> N
        connection.send_error(msg["id"], "too_large", f"Plan is larger than {MAX_PLAN_BYTES // 1024 // 1024} MB")
        return

-    # Copy-on-write: a plan is written under a NEW unique name and nothing is
-    # deleted here (review R2-1). The old name stays readable, so a config write
-    # that is later rejected — revision conflict, validation, lost connection —
-    # leaves the stored plan exactly as it was. The card calls
-    # nothing here; the file a commit REPLACES is collected by `config/set`
-    # itself, inside the write lock (review R3-1). An upload that never gets
-    # committed is not collected at all — it is offered back in the space
-    # dialog's "already uploaded" list, where the user can attach or delete it.
-    # Every attempt to age these out ended in data loss or a race (v1.46.4-6).
-    #
-    # `.` separates the id from the token because a space id cannot contain one
-    # (SPACE_ID_RE), so "<space>.<token>.<ext>" can never be confused with the
-    # files of a differently named space.
+    # Kept for cards cached from before #617: they still upload over WS. A
+    # current card uses POST /api/houseplan/plans/upload instead, because the
+    # base64 frame of a plan above ~3 MiB exceeds the 4 MiB WebSocket message
+    # limit and the socket closes before this handler runs — the size check
+    # above is reachable only for small files on this path. Both transports
+    # write through the same `store_plan_upload` (copy-on-write naming, quota,
+    # atomic write), so the contract below cannot drift between them.
    plans_dir = Path(hass.config.path(PLANS_DIR))
-    name = f"{space_id}.{secrets.token_hex(4)}.{msg['ext']}"
-    path = plans_dir / name
-
-    def _check_and_write() -> None:
-        # one executor job for the pair, under upload_lock: the measurement
-        # is only a bound if nothing else writes between it and our write
-        # (HP-1490-02). A failed write reserves nothing — the file either
-        # exists and is counted by the next scan, or does not and is not.
-        check_quota(plans_dir, len(raw), MAX_PLANS_BYTES, MAX_PLANS_FILES)
-        plans_dir.mkdir(parents=True, exist_ok=True)
-        path.write_bytes(raw)
-
    data = _runtime(hass, connection, msg["id"])
    if data is None:
        return
    async with data.upload_lock:
        try:
-            await hass.async_add_executor_job(_check_and_write)
+            name = await hass.async_add_executor_job(
+                partial(
+                    store_plan_upload, plans_dir, space_id, msg["ext"], raw,
+                    max_bytes=MAX_PLANS_BYTES, max_files=MAX_PLANS_FILES,
+                )
+            )
        except QuotaError as err:
            connection.send_error(msg["id"], err.reason, err.detail)
            return
@@ -2375,12 +2393,27 @@ async def _purge_trail_recorder(hass: HomeAssistant, config: dict[str, Any]) ->
    return await rec.async_purge_orphans(config) if rec else 0


+def _public_trails(value: Any) -> Any:
+    """Copy the trail book for View without exposing source entity ids (#626)."""
+    if isinstance(value, dict):
+        return {
+            key: _public_trails(item)
+            for key, item in value.items()
+            if key != "source"
+        }
+    if isinstance(value, list):
+        return [_public_trails(item) for item in value]
+    return value
+
+
@websocket_api.websocket_command({vol.Required("type"): "houseplan/trail/get"})
@websocket_api.async_response
 async def ws_trail_get(hass: HomeAssistant, connection: websocket_api.ActiveConnection, msg: dict) -> None:
-    """Current + previous cleanup runs per marker, raw robot coordinates."""
+    """Current + previous runs and raw coordinates, without source entity ids."""
    rec = hass.data.get(DOMAIN, {}).get("trail_recorder")
-    connection.send_result(msg["id"], {"trails": rec.book.data if rec else {}})
+    connection.send_result(
+        msg["id"], {"trails": _public_trails(rec.book.data) if rec else {}}
+    )


@websocket_api.websocket_command(
--- a/Show More
+++ b/Show More
				`@@ -0,0 +1 @@`
				globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004";import{eJ as e,eK as a,eF as n}from"./houseplan-card-DGdbxgxC.js";function c(n,c){return new e([{code:"en",dictionary:n},{code:"ru",loadDictionary:c.ru},{code:"de",loadDictionary:c.de},{code:"fr",loadDictionary:c.fr}],"2c4b7fa5cbc37ca9d9ac95d53f27dcefde7da87e20d87774a9e7ec19a9399004",console.warn,a)}function d(e){return function(e,a){return{state:n=>{const c=e.state(n);return"pending"!==c&&a.some(e=>"pending"===e.state(n))?"pending":c},dictionary:a=>e.dictionary(a),ensure:n=>Promise.all([e,...a].map(e=>e.ensure(n))).then(()=>{})}}(n,e)}export{c as n,d as s};
				`@@ -1 +0,0 @@`
				globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="5e6b797362146dcb25e3ad594eca3a115b92cc4df3101d718fe7950b0ebfc362";import{ee as e,J as t,aX as n,H as i,aa as o,a8 as r,bP as s,bO as a,aW as c,aV as l,aY as d,ef as u,eg as f,bR as m,eh as g}from"./houseplan-card-BGma7Zjs.js";function v(e){if(!e.registry.authoritative)return null;const t=new Set,n=d(e.markers);for(const i of Object.values(e.registry.devices\|\|{}))i?.id&&"service"!==i.entry_type&&!n.devices.has(i.id)&&i.area_id&&e.areaToSpace[i.area_id]&&t.add(i.id);for(const i of e.markers\|\|[]){if(i.removed\|\|"virtual"===i.binding)continue;const o=String(i.binding\|\|"").indexOf(":");if(o<1)continue;const r=i.binding.slice(0,o),s=i.binding.slice(o+1),a="device"===r?e.registry.devices?.[s]:null,c="entity"===r?e.registry.entities?.[s]:null,l="device"===r?s:c?.device_id,d="device"===r?a?.area_id:c?.area_id\|\|l&&e.registry.devices?.[l]?.area_id,u="string"==typeof i.room_id&&i.room_id.length>0&&null===i.area?"":i.area\|\|d\|\|"",f=u&&e.areaToSpace[u]\|\|i.space\|\|e.firstSpaceId;l&&e.registry.devices?.[l]&&e.spaceIds.has(f)&&(!n.devices.has(l)\|\|"entity"===r&&n.liveEntities.has(s))&&t.add(l)}return t}function y(e,t){return e?.length?t?.length?g(e,t):e:t}function _(e,t){const n=c(e.rooms,t.walls,t.openCuts,[],i,t.cellCm,o,r);return{roomGeom:"ok"===n.status\|\|"degraded-extra"===n.status?n.roomGeom:void 0,multiWallNodes:l(e.rooms,t.walls,t.openCuts,i,t.cellCm,o,r)}}functionh(c,l,d=_){try{let u=0;for(const f of l){const l=c.spaces.find(e=>String(e?.id)===f.id);if(!l)continue;const m=e(l,f),g=d(f,m);let v=null;for(const e of f.rooms){if(!e.id)continue;const a=t(e);if(!a)continue;const c=n(f.rooms,e.id,m.walls,m.openCuts,i,m.cellCm,o,r,g.roomGeom,g.multiWallNodes)\|\|a;v=y(v,s(c,m.physicalBodies)),yield}const _=m.cellCm/o;u+=a(v)_*_/1e4}return u}catch{return null}}function p(e,t,n=_){const i=h(e,t,n);let o=i.next();for(;!o.done;)o=i.next();return o.value}function b(e,t,n,i){if("system"!==e.type)return null;if("device_count"===e.key)return null===t.deviceCount?null:String(t.deviceCount);if("total_area"===e.key)return null===t.areaM2?null:m(t.areaM2,"mi"===n?.config?.unit_system?.length);try{return new Intl.DateTimeFormat(i\|\|void 0,{dateStyle:"short",timeStyle:"short",timeZone:n?.config?.time_zone\|\|void 0}).format(t.now)}catch{return t.now.toLocaleString()}}function S(e,t){const n=e?.states?.[t];if(!n)return null;const i=u(e,t);return i?f(i,String(n.attributes?.unit_of_measurement\|\|"")):null}export{h as cleanFloorAreaSteps,v as representedHaDeviceIds,_ as spaceWallGeometry,S as summaryEntityValue,b as summarySystemValue,p as totalCleanFloorAreaM2};