v0.9.2

src/engine/temporary_thermostat.rs

@@ -362,19 +362,11 @@ async fn expire_local_thermostat_overrides(state: &AppState, zones: &mut [Zone],
         // Do not let the old timer expire underneath someone who is actively controlling
         // the unit. When that takeover ends and the device returns to OFF, the deadline is
         // re-armed from that moment.
+        // Only an explicit timed local-OFF participates in automatic hand-back.
+        // local_thermostat_power=false with resume_at=None is a deliberate indefinite OFF
+        // (notably the state produced by group OFF) and must stay off until the user/group
+        // explicitly turns it back on or resumes automation.
         if !local_thermostat_handback_is_active(zone) { continue; }
-        if zone.local_thermostat_resume_at.is_none() {
-            // Upgrade safety for a persisted 0.7.10/0.7.11 local-OFF state: old releases
-            // had no hand-back deadline, so start one from the first cycle after upgrade.
-            set_local_thermostat_power(zone, false, now.clone());
-            zone.updated_at = now.clone();
-            state.db.save_zone(zone)?;
-            state.broadcast("zone.updated", serde_json::to_value(&*zone)?);
-            state.log("info", "zone.local_thermostat_resume_scheduled", &format!("Local thermostat hand-back scheduled for {}", zone.name), json!({
-                "zone_id": zone.id, "device_id": zone.device_id, "delay_minutes": LOCAL_THERMOSTAT_RESUME_DELAY_MINUTES
-            }));
-            continue;
-        }
         let expired = zone.local_thermostat_resume_at.as_ref().map(|at| at <= &now).unwrap_or(false);
         if !expired { continue; }
         reset_local_thermostat_override(zone);