Wave 9 #122.c — Phase 6 Tailscale wizard Path C (Nabu Casa HA Cloud)

connections/remote-access/connection.yml

@@ -397,21 +397,30 @@ wizard:
         Coming soon — Path A is wired now.
 
     - id: nabu_casa
-      label: "Nabu Casa HA Cloud (coming soon)"
+      label: "Nabu Casa HA Cloud"
       connection_kind: recipe
       tier: b
       recipe_over: "HA Core `cloud` integration (since 2022.x) + Nabu Casa subscription"
       estimated_time: "~10 min"
       requires_reboot: false
       requires_inputs:
-        - "Nabu Casa HA Cloud subscription"
-        - "Nabu Casa account login"
+        - "Nabu Casa HA Cloud subscription (active)"
+        - "Nabu Casa account email (operator-entered helper, never logged)"
+        - "Nabu Casa remote URL (auto-detected from `sensor.home_assistant_cloud_remote`)"
       side_effects:
         - registers_wizard_helpers_input_selects
         - registers_wizard_helpers_input_texts
-        - routes_to_nabu_casa_stub_stage
+        - registers_wizard_template_binary_sensors
+        - registers_wizard_template_sensor_status
+        - registers_wizard_advance_automation
+        - registers_wizard_recovery_automation
+        - registers_wizard_detect_existing_automation
+        - registers_wizard_path_pick_routing_automation
+        - advances_setup_wizard_stage_to_map_on_completion
+        - nabu_casa_uses_cloud_remote_connect_idempotently
       setup_notes: |
-        Coming soon — Path A is wired now.
+        Pick this if you already pay for Nabu Casa HA Cloud — the wizard
+        walks you through it in three plain-English taps.
 
     - id: wireguard
       label: "Wireguard (coming soon)"

docs/catalog/connectivity/remote-access.md

@@ -4,18 +4,20 @@ Check the van from anywhere: see sensor status, view cameras, get alerts, or (op
 
 ## How to install
 
-- Tailscale account (free for personal use)
-- Cloudflare account for Cloudflare Tunnel (free tier)
+- For Tailscale (Path A, free): a Tailscale account.
+- For Nabu Casa HA Cloud (Path C, paid): an active Nabu Casa
+  subscription.
+- For Cloudflare Tunnel (Path B, free): a Cloudflare account.
 
 - Add this repo as a **HACS custom repository** (Category: *Integration*), then install **remote-access**.
 - Restart Home Assistant.
 - Done — the tiles appear under the relevant section in the dashboard.
 
 If you'd like a guided setup, see the Remote access setup wizard at
 [`docs/setup/guided-remote-access.md`](../setup/guided-remote-access.md).
-It walks you through Path A (Tailscale) step by step with plain-English
-prompts — Path B (Cloudflare), Path C (Nabu Casa) and Path D
-(Wireguard) are coming soon in follow-up slices.
+It walks you through Path A (Tailscale) or Path C (Nabu Casa HA
+Cloud) step by step in plain English — Path B (Cloudflare) and Path
+D (Wireguard) are coming soon in follow-up slices.
 
 ## What it does
 

docs/mvp/features-build-status.md

@@ -1,11 +1,22 @@
 # RoamCore MVP — Features Build Status
 
-Last updated: 2026-08-03
+Last updated: 2026-08-06
 
 This is an internal status page for the remaining MVP feature build-out.
 
 ## Shipped (repo)
 
+- Wave 9 #122.c Path C Nabu Casa — Phase 6 Tailscale wizard Path C (Nabu Casa HA Cloud)
+  - Connection: [`connections/remote-access/`](../../connections/remote-access/) `wizard.setup_paths.nabu_casa` flipped from "coming soon" stub to fully wired (tier-b honest, additive to #122.a's Path A foundation)
+  - Package: `homeassistant/packages/roamcore_remote_access_setup.yaml` (additive — Path A/B/D code paths untouched)
+  - New Path C helpers (`input_text.rc_nabu_casa_account_email` mode:password + 4 new wizard stages: `nabu_casa_have_subscription` / `nabu_casa_paste_email` / `nabu_casa_verify` / `nabu_casa_done`)
+  - New Path C detection: `binary_sensor.rc_remote_access_setup_nabu_casa_installed` + `binary_sensor.rc_remote_access_setup_nabu_casa_active` (reuses upstream `sensor.home_assistant_cloud_remote`)
+  - New §8.5 `automation.rc_remote_access_setup_advance_path_c` (§8.5 advance + flip `rc_setup_stage` past `networking`) + §8.6 `automation.rc_remote_access_setup_recovery_nabu_casa` (60s verify-timeout → recovery stage; plain-English nudge to home.nabu-casa.com; NEVER clears operator email) + §8.7 `automation.rc_remote_access_setup_detect_existing_nabu_casa` (auto-skip wizard when upstream `cloud` integration already exposes a remote URL)
+  - User-facing IKEA doc: [`docs/setup/guided-remote-access.md`](../setup/guided-remote-access.md) §6 (5-step Nabu Casa HA Cloud section, mirrors §3 Tailscale structure)
+  - No secrets in repo: operator-entered email is `input_text` mode:password; grep smoke asserts no hardcoded `@nabu-casa.com` / `hass-*.nabu-casa.com` / `nabucasa_*` tokens
+  - rc-entity-naming compliance: new helpers use `rc_nabu_casa_` prefix (third allowed subsystem prefix alongside `rc_remote_access_setup_` + `rc_tailscale_`)
+  - Verification: `bash scripts/check.sh --core-only` exit 0 + `bash scripts/checks/remote-access-setup-smoke.sh` 11/11 PASS + `python3 -m pytest homeassistant/packages/tests/test_remote_access_setup.py -v` 56/56 PASS
+
 - Weather + time contract sensors
   - `homeassistant/packages/roamcore_weather_time.yaml`
 

docs/setup/guided-remote-access.md

@@ -1,15 +1,39 @@
 # Checking your van from anywhere
 
-This guide walks you through setting up Tailscale so you can check
-on your van from your phone, even when you're far away from it.
+This guide walks you through setting up a remote-access path so you
+can check on your van from your phone, even when you're far away
+from it. RoamCore supports four remote-access paths; pick the one
+that fits your life.
+
+- **Path A — Tailscale** (free mesh VPN, recommended for most
+  operators). Full step-by-step in §3 below.
+- **Path B — Cloudflare Tunnel** (free, no inbound ports). Coming
+  soon.
+- **Path C — Nabu Casa HA Cloud** (paid; for operators who
+  already subscribe). Step-by-step in §6 below.
+- **Path D — Wireguard** (self-hosted VPN for technical
+  operators). Coming soon.
+
+If you'd rather not set up remote access at all, pick **Skip**
+from the wizard's path drop-down.
 
 ## 1. What this is
 
-Tailscale is a small piece of software that lets your phone and your
-van talk to each other safely, over the internet, without opening
-any doors into your van's network. Once it's set up, you can open
-your RoamCore dashboard from a coffee shop, a trailhead, or your
-house — and see the same screen you'd see sitting inside the van.
+RoamCore's remote-access wizard replaces the technical setup with
+three plain-English taps so a vanlifer can reach their dashboard
+from anywhere. You pick a path, drop in the credentials the wizard
+asks for, and wait for the dashboard to tell you it's done. The
+wizard checks the path is reachable from your phone, surfaces an
+honest banner if your subscription lapses (you don't have to dig
+through error logs), and preserves anything you've already typed
+if you have to retry.
+
+**Path C — Nabu Casa HA Cloud** is the simplest choice if you
+already pay for Nabu Casa. Nabu Casa is Home Assistant's official
+cloud relay — Home Assistant takes care of the connection for
+you. The wizard's three taps are: pick Nabu Casa, paste the email
+on your Nabu Casa account, wait for the dashboard to confirm
+the connection works.
 
 ## 2. What you see
 
@@ -64,7 +88,7 @@ drop-down and you're done.
 
 ## 4. What to do if it goes wrong
 
-Three things can go sideways, and each one has a one-step fix.
+Four things can go sideways, and each one has a one-step fix.
 
 - **"Install the Tailscale add-on, then paste your auth key."**
   This means the wizard can't see Tailscale yet. Go back to step 1
@@ -79,6 +103,13 @@ Three things can go sideways, and each one has a one-step fix.
   online, the dashboard will retry by itself. Your auth key is
   still in the box — you don't need to type it again.
 
+- **Your Nabu Casa subscription paused.** If you picked Path C,
+  the wizard will tell you "Your Nabu Casa subscription is paused"
+  if your subscription lapsed (e.g. your card expired). Log into
+  home.nabu-casa.com to resume, then the dashboard will retry by
+  itself. Your account email is still in the box — you don't need
+  to type it again.
+
 - **The hostname doesn't load on your phone.** Make sure you typed
   it exactly right, including the `.ts.net` at the end. If you
   used the wrong one, fix it in the box and the dashboard will
@@ -96,9 +127,116 @@ won't lose anything.
 - Tailscale installation guide: https://tailscale.com/kb/1017/install/
 - Home Assistant Tailscale integration:
   https://www.home-assistant.io/integrations/tailscale/
+- Home Assistant Nabu Casa cloud integration:
+  https://www.home-assistant.io/integrations/cloud/
+- Nabu Casa account portal: https://home.nabu-casa.com/
 - RoamCore remote access overview: see the **Connectivity → Remote
   access** page in the RoamCore documentation.
 
 You can come back to this card any time to see where you are in the
 setup, change your settings, or turn remote access off if you ever
 want to.
+
+## 6. How to set up Nabu Casa HA Cloud (Path C)
+
+Pick this if you already pay for Nabu Casa HA Cloud — Home
+Assistant's official cloud relay. It's the simplest path if you
+already have a subscription; the wizard does the rest in three
+plain-English taps.
+
+### 6.1 What this is
+
+Nabu Casa is a paid service from the Home Assistant team. When
+you enable it in your van, Home Assistant takes care of the
+remote connection for you — you don't have to install any extra
+software, you don't have to set up a VPN, and you don't have to
+open any ports on your van's network. Once it's set up, you can
+open your RoamCore dashboard from your phone, your laptop, or
+your house — and see the same screen you'd see sitting inside
+the van.
+
+### 6.2 What you see
+
+When you pick **Nabu Casa HA Cloud** from the remote-access
+wizard's drop-down, you'll see:
+
+- One sentence at the top in plain English. It tells you
+  what's happening right now. For example: "Do you already pay
+  for Nabu Casa HA Cloud?" or "Testing your Nabu Casa
+  connection..." or "Nabu Casa is set up. You're good to go."
+- One question — "Do you already pay for Nabu Casa HA Cloud?"
+  — which the dashboard answers for you once you've enabled
+  remote access in Home Assistant.
+- One box to paste the email on your Nabu Casa account. The box
+  hides what you type so no one looking over your shoulder can
+  see it.
+
+That's it. You don't need to type any commands, edit any files,
+or restart anything yourself.
+
+### 6.3 What you do
+
+Follow these five steps, in order. Stop when you're done — the
+dashboard will tell you when each step is finished.
+
+1. **Subscribe to Nabu Casa HA Cloud.** Open Home Assistant,
+   go to **Settings → Home Assistant Cloud**, and follow the
+   prompts to start a free trial or subscribe. Nabu Casa is a
+   paid service (after the trial); you can manage your
+   subscription anytime at home.nabu-casa.com.
+2. **Pick Nabu Casa.** On the remote-access wizard card, make
+   sure the drop-down says **Nabu Casa HA Cloud**. If it says
+   something else, change it back.
+3. **Turn on remote access in the HA Cloud panel.** Still in
+   **Settings → Home Assistant Cloud**, flip **Remote access**
+   to ON. This is what tells Home Assistant to open the
+   relay for you.
+4. **Paste the email on your Nabu Casa account.** Use the same
+   email you subscribed with. The wizard uses it only to confirm
+   that you own the subscription; the box hides what you type.
+5. **Wait for the dashboard to say it's done.** The sentence at
+   the top will change from "Testing your Nabu Casa
+   connection..." to "Nabu Casa is set up. You're good to go."
+   That usually takes under a minute. When it does, open your
+   phone's browser and try typing your Nabu Casa remote URL
+   (you'll find it on **Settings → Home Assistant Cloud** under
+   **Remote access**). Your van's dashboard should appear.
+
+### 6.4 What to do if it goes wrong
+
+Three things can go sideways with Nabu Casa, and each has a
+one-step fix.
+
+- **"Subscribe to Nabu Casa HA Cloud, then paste your account
+  email."** This means the wizard can't talk to Nabu Casa yet.
+  Go back to steps 1 + 2 + 3 and make sure your subscription
+  is active AND **Remote access** is flipped ON in the HA
+  Cloud panel. Once both are done, the sentence will change on
+  its own — you don't need to refresh anything.
+
+- **"We couldn't reach Nabu Casa. Check that your subscription
+  is active."** This is the wizard's way of saying your Nabu
+  Casa subscription has paused (most often: your card
+  expired). Log into home.nabu-casa.com to resume — you can
+  update your payment method and turn the subscription back on
+  from there. Once it's active, the dashboard retries on its
+  own. Your account email is still in the box — you don't
+  need to type it again.
+
+- **The Nabu Casa URL doesn't load on your phone.** Double-check
+  that you've typed the URL exactly as shown in the HA Cloud
+  panel. If you used the wrong one, fix it on your phone's
+  browser bookmark or your HA Companion app settings.
+
+If none of those fix it, wait five minutes and try again — the
+Nabu Casa relay can take a moment to catch up after a fresh
+subscription. If it's still stuck after that, log into
+home.nabu-casa.com to confirm your subscription is active (not
+paused), then walk through steps 2 + 3 + 4 again.
+
+### 6.5 Useful links
+
+- Nabu Casa: https://www.nabucasa.com/
+- Nabu Casa account portal: https://home.nabu-casa.com/
+- Home Assistant Cloud integration:
+  https://www.home-assistant.io/integrations/cloud/