- doCreate() calls EnsureNamespace before creating device (idempotent) Fixes namespace-not-found when session was cached before v0.1.62 - Added sanitizeApiError() — hides internal details (namespace names, k8s paths) from user, shows friendly Russian messages instead - Patterns handled: namespace not found, already exists, HTTP 5xx Image: v0.1.63