Remove UHPPOTE/ZKTeco; Dingtian is the only access driver

Neither UHPPOTE nor ZKTeco is used — the Dingtian relay controller was chosen
and verified. Remove their code and re-scope the wiki.

Code:
- delete access-uhppote.ts, uhppoted.d.ts, access.ts (zkteco/esp32-relay stubs),
  and the three uhppote-*.mjs hardware test scripts.
- remove the `uhppoted` npm dependency from @parking/devices and @parking/server.
- unregister uhppote/zkteco/esp32-relay from the driver registry; drop their
  exports. Catalog access drivers = dingtian only. Build green (5/5).
- refresh now-stale example comments (registry/interfaces/setup/api) to use
  current examples; keep the two "UHPPOTE blocker" references that explain why
  the precondition capability exists.

Wiki (kept pages, re-scoped):
- uhppote-controller, zkteco-controller -> rejected/historical with callouts;
  uhppote-vs-esp32 -> historical (detection-vs-prevention lens still useful).
- re-point all "current device" framing (standing-decisions, bom, overview,
  open-questions, device-registry, device-discovery, index) to dingtian-relay.
- transferable concepts (network-isolation, event-log-ingestion, barrier-not-a-
  door, threat-model) untouched. Raw source immutable. Links lint clean.

wiki/entities/bom.md

@@ -14,7 +14,7 @@ payment terminal is dictated by the acquiring bank. (See [[parking-system-archit
 | --- | --- | --- |
 | Barrier operator | Magnetic Autocontrol / FAAC / CAME / Nice | Owns physical safety in firmware ([[barrier-not-a-door]]) |
 | Induction loops | Feig / BEA / EMX | Safety + free-exit detection |
-| Access controller | [[uhppote-controller]] now → ZKTeco later | Reader + relay; **isolate the VLAN** ([[network-isolation]]) |
+| Access controller | [[dingtian-relay]] relay+input board | Decoupled inputs (host-in-the-loop); **isolate the VLAN** ([[network-isolation]]). ([[uhppote-controller]]/[[zkteco-controller]] rejected) |
 | Permit readers | Nedap/Kathrein UHF, or Mifare → [[wiegand]] | Hands-free, or autonomous offline decisions |
 | Casual identity | [[lpr-camera]] (Milesight, edge AI) | Plate = ticket + independent record |
 | Ticket dispenser | Custom VKP80 | Parking-grade thermal/ESC-POS |

wiki/entities/uhppote-controller.md

@@ -1,33 +1,37 @@
 ---
 type: entity
-tags: [parking, hardware, access-control, current-choice]
+tags: [parking, hardware, access-control, rejected, historical]
 sources: [parking-system-architecture]
 updated: 2026-06-15
 ---
 
-# UHPPOTE Controller (current choice)
+# UHPPOTE Controller (rejected — historical)
 
-The starting access-control hardware: a **UHPPOTE Wiegand 26/34 network controller (4-door)** —
-a cheap reader-plus-relay frontend, acceptable **provided you understand its limits**. The plan
-is UHPPOTE now → ZKTeco later (see [[bom]]). (See [[parking-system-architecture]] §6.)
+> **❌ NOT USED. Replaced by the [[dingtian-relay]] controller** (and its driver/test code
+> removed). Kept as the record of *why* — its firmware-fixed push-button blocker
+> ([[access-controller-button-flow]]) is what drove the switch to a board with decoupled inputs.
+> The transferable lessons below (network isolation, append-only log ingestion, "a barrier is not
+> a door") still apply to any access device.
 
-> **⚠️ Entry-flow blocker (verified on hardware):** the push-button input **auto-opens the relay
-> in firmware** — there's no command to make it report-without-opening — so it **cannot** do
-> ticket-first entry (`button → print → open`). Fine as a host-**commanded relay** and for
-> [[wiegand]]/permit lanes, but **not** the button-driven entry lane as wired. Full detail and
-> options: [[access-controller-button-flow]].
+The original starting hardware: a **UHPPOTE Wiegand 26/34 network controller (4-door)** — a cheap
+reader-plus-relay frontend. (See [[parking-system-architecture]] §6.)
+
+> **⚠️ The fatal limit (verified on hardware):** the push-button input **auto-opens the relay in
+> firmware** — no command makes it report-without-opening — so it **cannot** do ticket-first entry
+> (`button → print → open`). This is *the* reason it was dropped: full detail and the resolution in
+> [[access-controller-button-flow]].
 >
-> **Verified working on the real unit** (serial 225088491, fw 09120): host-commanded `openDoor`
-> on doors 1 & 2 (physically actuated, `reason="remote open door"`); button presses captured live
-> (`reason="push button ok"`); [[device-discovery]] scan. Test scripts: `apps/server/scripts/`.
+> **What was verified on the real unit** (serial 225088491, fw 09120) before retiring it:
+> host-commanded `openDoor` on doors 1 & 2 (physically actuated, `reason="remote open door"`);
+> button presses captured live (`reason="push button ok"`); UDP-broadcast [[device-discovery]].
+> The driver, `uhppoted` dependency, and test scripts have since been removed from the codebase.
 
-> **Implementation:** integrated via the official **`uhppoted`** npm package (MIT, by the
-> `uhppoted` org — `github.com/uhppoted/uhppoted-lib-nodejs`), added to `@parking/devices` as the
-> `uhppote` access driver ([[device-registry]]). It exposes exactly the protocol commands this
-> design needs: `openDoor`, `getStatus`, and the event-log set (`getEvent`, `getEventIndex`,
-> `setEventIndex`, `recordSpecialEvents`) plus `setListener`/`listen` for auto-push — see
-> [[event-log-ingestion]]. Transport defaults to **UDP** (broadcast `…:60000`), with optional
-> per-call TCP on newer firmware. The driver also implements **[[device-discovery]]**
+> **Past implementation (removed):** was integrated via the official **`uhppoted`** npm package
+> (MIT — `github.com/uhppoted/uhppoted-lib-nodejs`) as the `uhppote` access driver. It exposed
+> exactly the protocol commands the design needs: `openDoor`, `getStatus`, and the event-log set
+> (`getEvent`, `getEventIndex`, `setEventIndex`, `recordSpecialEvents`) plus `setListener`/`listen`
+> for auto-push — see [[event-log-ingestion]]. Transport defaulted to **UDP** (broadcast `…:60000`),
+> with optional per-call TCP on newer firmware. The driver also implemented **[[device-discovery]]**
 > (`getDevices` broadcast) so the setup wizard can scan for controllers. Note: the lib pulls one
 > trivial extra dep (the npm `os` shim) and uses UDP broadcast, which needs socket broadcast
 > permission on the host.

wiki/entities/zkteco-controller.md

@@ -1,20 +1,24 @@
 ---
 type: entity
-tags: [parking, hardware, access-control]
+tags: [parking, hardware, access-control, rejected, historical]
 sources: [parking-system-architecture]
 updated: 2026-06-15
 ---
 
-# ZKTeco Controller
+# ZKTeco Controller (rejected — historical)
 
-A network access controller (C3 / inBio families) — the documented "UHPPOTE now → ZKTeco later"
-upgrade in the [[bom]]. A `zkteco` driver **stub** exists in the [[device-registry]] but the
-**real protocol is not implemented** (see below).
+> **❌ NOT USED.** Was considered as the access controller; the **[[dingtian-relay]]** board was
+> chosen instead (decoupled inputs, already verified). The `zkteco` driver **stub** has been
+> **removed** from the codebase. Kept for the record of the comparison below.
 
-## Relevance to the entry-flow blocker
+A network access controller (C3 / inBio families), originally the documented "UHPPOTE now →
+ZKTeco later" upgrade in the [[bom]].
+
+## Why it was a contender (vs. UHPPOTE)
 
 ZKTeco is **better positioned** than the [[uhppote-controller]] for host-in-the-loop entry (the
-[[access-controller-button-flow]] blocker), but this is **unverified on our hardware**:
+[[access-controller-button-flow]] blocker) — but it was **never verified on our hardware**, and the
+Dingtian solved the problem first with less effort:
 
 - Its **auxiliary inputs** have **programmable linkage** (ZKBioSecurity software / PULL SDK) and
   are **not** hardwired to "open door" — so a button on an *aux* input can raise a host event