Devices — provision boxes and point them at your reseller sources.

• Xtream reseller account: Assign a device → source Xtream → paste the line's server URL + username + password. Credentials are AES-GCM encrypted on save and never shown again (only “has creds”).
• m3u reseller account: Assign → source M3U → paste the m3u/m3u8 URL (optionally an EPG/XMLTV URL). Use Source preflight to auto-detect type + reachability before assigning.
• Many at once: Import sources takes a CSV to attach playlists across many devices from a reseller export — m3u (device_id, source_url, …) or xtream (device_id, server, username, password, …; creds encrypted on import).
• Add a fallback: give a device a second source (different reseller) via Playlists — lower priority. If the primary dies, health-aware auto-failover promotes the healthy fallback automatically.
• Tag by reseller / segment (e.g. reseller-a, pilot): tags drive bulk actions and Rollouts cohorts.
• Expiry gates a box automatically when a subscription lapses; renewing reactivates it on the next poll.
• Restore a box that reinstalled or switched build (it reappears under a new device id): on the new device click Restore and enter the old device id — its playlists are copied over (creds re-encrypted), non-destructively.