@camstack/addon-provider-bosch 0.1.20 → 0.1.21

package/dist/homecom/addon.mjs

@@ -1,25 +1,210 @@
-import { C as customAction, D as _enum, E as isSecretMarkerLike, I as EventCategory, N as string, T as isSecretMarker, b as DeviceType, j as object, k as literal, l as deviceAdoptionCapability, n as BaseDeviceProvider, o as climateControlCapability, s as connectionTestCapability, t as BaseDevice, v as waterHeaterCapability, w as defineCustomActions, x as errMsg } from "../dist-B75tWQLF.mjs";
-import { n as cascadeRemoveDevicesForIntegration, r as parseOAuthCallback, t as setIntegrationDevicesOnline } from "../account-integration-offline-DvuqXgc8.mjs";
+import { A as array, C as errMsg, D as isSecretMarker, E as defineCustomActions, F as string, M as number, N as object, O as isSecretMarkerLike, R as EventCategory, S as DeviceType, T as customAction, b as waterHeaterCapability, j as literal, k as _enum, l as deviceAdoptionCapability, n as BaseDeviceProvider, o as climateControlCapability, s as connectionTestCapability, t as BaseDevice } from "../dist-D9i3id5N.mjs";
+import { a as parseOAuthCallback, i as loginFailureForAttempt, n as cascadeRemoveDevicesForIntegration, r as createSignInAttemptStore, t as setIntegrationDevicesOnline } from "../account-integration-offline-Ciq9CZa-.mjs";
 import { createHash, randomBytes } from "node:crypto";
+//#region src/homecom/config.ts
+var HOMECOM_BRANDS = ["bosch", "buderus"];
+var HomeComBrandSchema = _enum(HOMECOM_BRANDS);
+var HOMECOM_REGIONS = ["eu", "us"];
+var HomeComRegionSchema = _enum(HOMECOM_REGIONS);
+var homeComConfigSchema = object({
+	/** Account email; filled by the sign-in, informational only. */
+	username: string().optional().describe("HomeCom / PointT account email").meta({ secret: true }),
+	token: string().min(1).describe("OAuth access token").meta({ secret: true }),
+	refresh: string().min(1).describe("OAuth refresh token").meta({ secret: true }),
+	brand: HomeComBrandSchema.default("bosch"),
+	region: HomeComRegionSchema.default("eu"),
+	/** The gateway this integration controls; chosen once from the account's gateways. */
+	gatewayId: string().min(1).optional(),
+	/** Shown on the sign-in field. Not a credential. */
+	accountLabel: string().optional(),
+	/** How many gateways the last sign-in listed. */
+	gatewayCount: number().optional()
+});
+function connectionFromSettings(settings) {
+	const parsed = homeComConfigSchema.safeParse(settings);
+	return parsed.success ? parsed.data : null;
+}
+function sameHomeComConnection(a, b) {
+	if (a === null || b === null) return false;
+	return a.username === b.username && a.token === b.token && a.refresh === b.refresh && a.brand === b.brand && a.region === b.region && a.gatewayId === b.gatewayId;
+}
+/**
+* PointT REST origin (matches homecom_alt / HomeCom Easy). US and EU accounts use
+* the same host; `region` is retained for Bacon MQTT (`euc1` / `use1`) when wired.
+*/
+var HOMECOM_POINTT_API_ORIGIN = "https://pointt-api.bosch-thermotechnology.com";
+function homeComApiBase(_region) {
+	return HOMECOM_POINTT_API_ORIGIN;
+}
+var HOMECOM_SECRET_KEYS = [
+	"username",
+	"token",
+	"refresh"
+];
+var HIDDEN_UNTIL_ADVANCED = {
+	field: "__hidden__",
+	equals: "yes"
+};
+function buildHomeComFormSchema() {
+	return { sections: [{
+		id: "account",
+		title: "HomeCom account",
+		titleKey: "provider-bosch:homecom.s_account.title",
+		description: "Sign in with your SingleKey ID. Bosch opens its app address; paste that address here.",
+		descriptionKey: "provider-bosch:homecom.s_account.description",
+		columns: 1,
+		fields: [
+			{
+				type: "account-sign-in",
+				addonId: "bosch-homecom",
+				key: "__homecom-sign-in",
+				label: "HomeCom",
+				labelKey: "provider-bosch:homecom.s_account.__homecom-sign-in.label",
+				providerLabel: "SingleKey ID",
+				beginAction: "beginSignIn",
+				completeAction: "finishSignIn",
+				signOutAction: "signOut",
+				accountKey: "accountLabel",
+				countKey: "gatewayCount",
+				countNoun: "gateway",
+				choiceKey: "gatewayId",
+				choiceLabel: "Gateway",
+				pastePlaceholder: "com.bosch.tt.dashtt.pointt://app/login?code=…&state=…",
+				secretKeys: [
+					"token",
+					"refresh",
+					"username"
+				],
+				assignResult: {
+					token: "token",
+					refresh: "refresh",
+					username: "username",
+					accountLabel: "accountLabel",
+					gatewayId: "gatewayId",
+					brand: "brand",
+					region: "region",
+					gatewayCount: "gatewayCount"
+				}
+			},
+			{
+				type: "text",
+				key: "accountLabel",
+				label: "Account",
+				labelKey: "provider-bosch:homecom.s_account.accountLabel.label",
+				required: false,
+				showWhen: HIDDEN_UNTIL_ADVANCED
+			},
+			{
+				type: "number",
+				key: "gatewayCount",
+				label: "Gateways",
+				labelKey: "provider-bosch:homecom.s_account.gatewayCount.label",
+				required: false,
+				showWhen: HIDDEN_UNTIL_ADVANCED
+			},
+			{
+				type: "password",
+				key: "username",
+				label: "Account email",
+				labelKey: "provider-bosch:homecom.s_account.username.label",
+				required: false,
+				showWhen: HIDDEN_UNTIL_ADVANCED
+			},
+			{
+				type: "group",
+				key: "__homecom-advanced",
+				label: "Advanced",
+				labelKey: "provider-bosch:homecom.s_account.__homecom-advanced.label",
+				style: "accordion",
+				defaultCollapsed: true,
+				fields: [
+					{
+						type: "password",
+						key: "token",
+						label: "Access token",
+						labelKey: "provider-bosch:homecom.s_account.token.label",
+						required: false,
+						showToggle: false
+					},
+					{
+						type: "password",
+						key: "refresh",
+						label: "Refresh token",
+						labelKey: "provider-bosch:homecom.s_account.refresh.label",
+						required: false,
+						showToggle: false
+					},
+					{
+						type: "text",
+						key: "gatewayId",
+						label: "Gateway id",
+						labelKey: "provider-bosch:homecom.s_account.gatewayId.label",
+						required: false
+					},
+					{
+						type: "select",
+						key: "brand",
+						label: "Brand",
+						labelKey: "provider-bosch:homecom.s_account.brand.label",
+						default: "bosch",
+						options: HOMECOM_BRANDS.map((b) => ({
+							value: b,
+							label: b
+						}))
+					},
+					{
+						type: "select",
+						key: "region",
+						label: "Region",
+						labelKey: "provider-bosch:homecom.s_account.region.label",
+						default: "eu",
+						options: HOMECOM_REGIONS.map((r) => ({
+							value: r,
+							label: r.toUpperCase()
+						}))
+					}
+				]
+			}
+		]
+	}] };
+}
+//#endregion
 //#region src/homecom/custom-actions.ts
+var gatewayChoice = object({
+	value: string(),
+	label: string(),
+	brand: HomeComBrandSchema,
+	region: HomeComRegionSchema
+});
 var homeComActions = defineCustomActions({
 	beginSignIn: customAction(object({}), object({
+		attemptId: string().min(1),
 		authorizeUrl: string().min(1),
-		verifier: string().min(1),
-		state: string().min(1),
 		summary: string()
 	}), {
 		kind: "mutation",
 		auth: "admin"
 	}),
 	finishSignIn: customAction(object({
-		verifier: string().min(1),
-		callback: string().min(1),
-		state: string().min(1)
+		attemptId: string().min(1),
+		callback: string().min(1)
 	}), object({
 		token: string().min(1).meta({ secret: true }),
 		refresh: string().min(1).meta({ secret: true }),
 		username: string().meta({ secret: true }),
+		accountLabel: string(),
+		gatewayCount: number(),
+		summary: string(),
+		gatewayId: string().optional(),
+		brand: HomeComBrandSchema.optional(),
+		region: HomeComRegionSchema.optional(),
+		choices: array(gatewayChoice).optional()
+	}), {
+		kind: "mutation",
+		auth: "admin"
+	}),
+	signOut: customAction(object({}), object({
+		signedOut: literal(true),
 		summary: string()
 	}), {
 		kind: "mutation",
@@ -27,6 +212,113 @@ var homeComActions = defineCustomActions({
 	})
 });
 //#endregion
+//#region src/homecom/homecom-domain-mapping.ts
+var MODE_MAP = {
+	Off: "off",
+	off: "off",
+	Heat: "heat",
+	heat: "heat",
+	Cool: "cool",
+	cool: "cool",
+	Auto: "auto",
+	auto: "auto"
+};
+function mapHvacMode(raw) {
+	return MODE_MAP[raw] ?? "off";
+}
+function climateSliceFromCircuit(circuit, nowMs) {
+	return {
+		mode: mapHvacMode(circuit.operationMode),
+		availableModes: [
+			"off",
+			"heat",
+			"auto"
+		],
+		fanMode: "",
+		availableFanModes: [],
+		preset: "",
+		availablePresets: [],
+		target: circuit.setpoint,
+		targetHigh: null,
+		targetLow: null,
+		targetHumidity: null,
+		currentTemp: circuit.currentRoomTemp,
+		currentHumidity: null,
+		swingVertical: null,
+		swingHorizontal: null,
+		minTemp: circuit.minTemp,
+		maxTemp: circuit.maxTemp,
+		tempStep: .5,
+		lastFetchedAt: nowMs
+	};
+}
+function waterHeaterSliceFromDhw(dhw, nowMs) {
+	return {
+		currentTemp: dhw.currentTemp,
+		targetTemp: dhw.targetTemp,
+		operationMode: dhw.operationMode,
+		availableModes: [...dhw.availableModes],
+		away: null,
+		minTemp: dhw.minTemp,
+		maxTemp: dhw.maxTemp,
+		lastChangedAt: nowMs
+	};
+}
+/** Parse K40-style gateway JSON into heating circuits + DHW. Pure. */
+function parseHomeComSystemPayload(payload) {
+	if (typeof payload !== "object" || payload === null) return {
+		circuits: [],
+		dhw: null
+	};
+	const root = payload;
+	const circuits = [];
+	const rawCircuits = root["heatingCircuits"];
+	if (Array.isArray(rawCircuits)) for (const item of rawCircuits) {
+		if (typeof item !== "object" || item === null) continue;
+		const row = item;
+		const id = row["id"];
+		if (typeof id !== "string") continue;
+		circuits.push({
+			id,
+			name: typeof row["name"] === "string" ? row["name"] : id,
+			operationMode: typeof row["operationMode"] === "string" ? row["operationMode"] : "off",
+			setpoint: readNum(row["setpoint"]),
+			currentRoomTemp: readNum(row["currentRoomTemperature"]),
+			minTemp: readNum(row["minTemp"]),
+			maxTemp: readNum(row["maxTemp"])
+		});
+	}
+	let dhw = null;
+	const rawDhw = root["domesticHotWater"];
+	if (typeof rawDhw === "object" && rawDhw !== null) {
+		const row = rawDhw;
+		const modes = [];
+		if (Array.isArray(row["operationModes"])) {
+			for (const m of row["operationModes"]) if (typeof m === "string") modes.push(m);
+		}
+		dhw = {
+			currentTemp: readNum(row["currentTemperature"]),
+			targetTemp: readNum(row["setpoint"]),
+			operationMode: typeof row["operationMode"] === "string" ? row["operationMode"] : null,
+			availableModes: modes.length > 0 ? modes : [
+				"off",
+				"eco",
+				"performance"
+			],
+			minTemp: readNum(row["minTemp"]),
+			maxTemp: readNum(row["maxTemp"])
+		};
+	}
+	return {
+		circuits,
+		dhw
+	};
+}
+function readNum(raw) {
+	if (typeof raw === "number" && Number.isFinite(raw)) return raw;
+	return null;
+}
+//#endregion
 //#region src/homecom/homecom-oauth.ts
 /**
 * Public OAuth client of the HomeCom Easy / PointT mobile app, signed in through SingleKey ID.
@@ -54,6 +346,179 @@ var HOMECOM_SCOPE = [
 	"hcc.tariff.read"
 ].join(" ");
 //#endregion
+//#region src/homecom/homecom-api-client.ts
+var HomeComAuthError = class extends Error {
+	name = "HomeComAuthError";
+};
+function isRecord$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function rowId(row) {
+	for (const key of [
+		"deviceId",
+		"gatewayId",
+		"id"
+	]) {
+		const value = row[key];
+		if (typeof value === "string" && value.length > 0) return value;
+		if (typeof value === "number") return String(value);
+	}
+	return null;
+}
+/** Gateways from the account listing: a bare array or `{ gateways: [...] }`. */
+function parseHomeComGatewayList(payload) {
+	const rows = isRecord$1(payload) ? payload["gateways"] : payload;
+	if (!Array.isArray(rows)) return [];
+	const out = [];
+	for (const row of rows) {
+		if (!isRecord$1(row)) continue;
+		const gatewayId = rowId(row);
+		if (gatewayId === null) continue;
+		const name = row["name"];
+		const brand = row["brand"];
+		const region = row["region"];
+		out.push({
+			gatewayId,
+			name: typeof name === "string" && name.length > 0 ? name : gatewayId,
+			...typeof brand === "string" && brand.length > 0 ? { brand } : {},
+			...typeof region === "string" && region.length > 0 ? { region } : {}
+		});
+	}
+	return out;
+}
+function createHomeComApiClient(config, gatewayId, deps = {}) {
+	const fetchFn = deps.fetchFn ?? globalThis.fetch.bind(globalThis);
+	let token = config.token;
+	let refresh = config.refresh;
+	const base = homeComApiBase(config.region);
+	async function authHeaders() {
+		return {
+			Authorization: `Bearer ${token}`,
+			Accept: "application/json",
+			"Content-Type": "application/json"
+		};
+	}
+	async function request(path, init = {}) {
+		const res = await fetchFn(`${base}${path}`, {
+			method: init.method ?? "GET",
+			headers: await authHeaders(),
+			body: init.body !== void 0 ? JSON.stringify(init.body) : void 0
+		});
+		if (res.status === 401) throw new HomeComAuthError("token expired");
+		if (!res.ok) throw new Error(`HomeCom API ${path} failed: HTTP ${res.status}`);
+		return res.json();
+	}
+	return {
+		async refreshTokens() {
+			const res = await fetchFn(HOMECOM_TOKEN_URL, {
+				method: "POST",
+				headers: { "Content-Type": "application/x-www-form-urlencoded" },
+				body: new URLSearchParams({
+					grant_type: "refresh_token",
+					refresh_token: refresh,
+					client_id: HOMECOM_CLIENT_ID
+				}).toString()
+			});
+			if (!res.ok) {
+				if (res.status === 401 || res.status === 403) throw new HomeComAuthError("refresh refused");
+				throw new Error(`HomeCom token refresh failed: HTTP ${res.status}`);
+			}
+			const body = await res.json();
+			if (typeof body !== "object" || body === null) throw new Error("HomeCom token refresh: bad body");
+			const row = body;
+			const newToken = row["access_token"];
+			const newRefresh = row["refresh_token"];
+			if (typeof newToken !== "string" || typeof newRefresh !== "string") throw new Error("HomeCom token refresh: missing tokens");
+			token = newToken;
+			refresh = newRefresh;
+			await deps.onTokensRotated?.({
+				token,
+				refresh
+			});
+			return {
+				token,
+				refresh
+			};
+		},
+		async listGateways() {
+			return parseHomeComGatewayList(await request("/v2/gateways"));
+		},
+		async fetchSystem() {
+			const parsed = parseHomeComSystemPayload(await request(`/v2/gateways/${gatewayId}/system`));
+			return {
+				gateway: {
+					gatewayId,
+					name: "HomeCom heat pump",
+					model: "K40"
+				},
+				circuits: parsed.circuits,
+				dhw: parsed.dhw
+			};
+		},
+		async setCircuitSetpoint(circuitId, temp) {
+			await request(`/v2/gateways/${gatewayId}/heatingCircuits/${circuitId}/setpoint`, {
+				method: "PUT",
+				body: { value: temp }
+			});
+		},
+		async setCircuitMode(circuitId, mode) {
+			await request(`/v2/gateways/${gatewayId}/heatingCircuits/${circuitId}/operationMode`, {
+				method: "PUT",
+				body: { value: mode }
+			});
+		},
+		async setDhwTarget(temp) {
+			await request(`/v2/gateways/${gatewayId}/domesticHotWater/setpoint`, {
+				method: "PUT",
+				body: { value: temp }
+			});
+		},
+		async setDhwMode(mode) {
+			await request(`/v2/gateways/${gatewayId}/domesticHotWater/operationMode`, {
+				method: "PUT",
+				body: { value: mode }
+			});
+		}
+	};
+}
+//#endregion
+//#region src/homecom/homecom-gateway-pick.ts
+function brandOf(value) {
+	for (const brand of HOMECOM_BRANDS) if (value === brand) return brand;
+	return "bosch";
+}
+function regionOf(value) {
+	for (const region of HOMECOM_REGIONS) if (value === region) return region;
+	return "eu";
+}
+function choiceOf(gateway) {
+	return {
+		value: gateway.gatewayId,
+		label: gateway.name,
+		brand: brandOf(gateway.brand),
+		region: regionOf(gateway.region)
+	};
+}
+/**
+* One gateway is filled in. Several stay a choice. None leaves the id empty
+* for Advanced.
+*/
+function resolveHomeComGateway(gateways) {
+	if (gateways.length === 0) return { kind: "none" };
+	const options = gateways.map(choiceOf);
+	const only = options[0];
+	if (gateways.length === 1 && only !== void 0) return {
+		kind: "one",
+		gatewayId: only.value,
+		brand: only.brand,
+		region: only.region
+	};
+	return {
+		kind: "many",
+		options
+	};
+}
+//#endregion
 //#region src/homecom/homecom-login.ts
 var MESSAGES = {
 	empty: "Nothing was pasted. Paste the address the browser tried to open after you signed in.",
@@ -106,7 +571,7 @@ function parseHomeComCallback(input, expectedState) {
 	if (!parsed.ok) throw new HomeComLoginError(parsed.reason);
 	return parsed.code;
 }
-function isRecord$1(value) {
+function isRecord(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function emailFromIdToken(idToken) {
@@ -115,7 +580,7 @@ function emailFromIdToken(idToken) {
 	if (!payload) return "";
 	try {
 		const parsed = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
-		return isRecord$1(parsed) && typeof parsed["email"] === "string" ? parsed["email"] : "";
+		return isRecord(parsed) && typeof parsed["email"] === "string" ? parsed["email"] : "";
 	} catch {
 		return "";
 	}
@@ -134,189 +599,85 @@ async function completeHomeComSignIn(input, fetchFn = globalThis.fetch.bind(glob
 		}).toString()
 	});
 	const body = await res.json().catch(() => null);
-	if (!res.ok) throw new HomeComLoginError((isRecord$1(body) ? body["error"] : void 0) === "invalid_grant" ? "code-rejected" : "rejected");
-	if (!isRecord$1(body) || typeof body["access_token"] !== "string" || body["access_token"] === "") throw new HomeComLoginError("rejected");
+	if (!res.ok) throw new HomeComLoginError((isRecord(body) ? body["error"] : void 0) === "invalid_grant" ? "code-rejected" : "rejected");
+	if (!isRecord(body) || typeof body["access_token"] !== "string" || body["access_token"] === "") throw new HomeComLoginError("rejected");
 	const refresh = body["refresh_token"];
 	if (typeof refresh !== "string" || refresh === "") throw new HomeComLoginError("no-refresh");
 	return {
 		token: body["access_token"],
 		refresh,
-		username: emailFromIdToken(body["id_token"])
-	};
-}
-//#endregion
-//#region src/homecom/config.ts
-var HOMECOM_BRANDS = ["bosch", "buderus"];
-var HomeComBrandSchema = _enum(HOMECOM_BRANDS);
-var HOMECOM_REGIONS = ["eu", "us"];
-var HomeComRegionSchema = _enum(HOMECOM_REGIONS);
-var homeComConfigSchema = object({
-	/** Account email; filled by the sign-in, informational only. */
-	username: string().optional().describe("HomeCom / PointT account email").meta({ secret: true }),
-	token: string().min(1).describe("OAuth access token").meta({ secret: true }),
-	refresh: string().min(1).describe("OAuth refresh token").meta({ secret: true }),
-	brand: HomeComBrandSchema.default("bosch"),
-	region: HomeComRegionSchema.default("eu"),
-	/** The gateway this integration controls; chosen once from the account's gateways. */
-	gatewayId: string().min(1).optional()
-});
-function connectionFromSettings(settings) {
-	const parsed = homeComConfigSchema.safeParse(settings);
-	return parsed.success ? parsed.data : null;
-}
-function sameHomeComConnection(a, b) {
-	if (a === null || b === null) return false;
-	return a.username === b.username && a.token === b.token && a.refresh === b.refresh && a.brand === b.brand && a.region === b.region && a.gatewayId === b.gatewayId;
-}
-/**
-* PointT REST origin (matches homecom_alt / HomeCom Easy). US and EU accounts use
-* the same host; `region` is retained for Bacon MQTT (`euc1` / `use1`) when wired.
-*/
-var HOMECOM_POINTT_API_ORIGIN = "https://pointt-api.bosch-thermotechnology.com";
-function homeComApiBase(_region) {
-	return HOMECOM_POINTT_API_ORIGIN;
-}
-var HOMECOM_SECRET_KEYS = [
-	"username",
-	"token",
-	"refresh"
-];
-function buildHomeComFormSchema() {
-	return { sections: [{
-		id: "account",
-		title: "HomeCom account",
-		titleKey: "provider-bosch:homecom.s_account.title",
-		description: "Sign in with your SingleKey ID, then paste the address the browser stops on (com.bosch.tt.dashtt.pointt://app/login?code=…). Find it in DevTools > Network.",
-		descriptionKey: "provider-bosch:homecom.s_account.description",
-		columns: 1,
-		fields: [
-			{
-				type: "addon-action-button",
-				addonId: "bosch-homecom",
-				key: "__homecom-begin",
-				label: "HomeCom",
-				labelKey: "provider-bosch:homecom.s_account.__homecom-begin.label",
-				buttonLabel: "Create login link",
-				action: "beginSignIn",
-				variant: "primary",
-				assignResult: {
-					authorizeUrl: "authorizeUrl",
-					verifier: "verifier",
-					state: "state"
-				},
-				successMessage: "Open the link in a browser and sign in."
-			},
-			{
-				type: "textarea",
-				key: "authorizeUrl",
-				label: "Login link",
-				labelKey: "provider-bosch:homecom.s_account.authorizeUrl.label",
-				required: false,
-				omitFromSettings: true
-			},
-			{
-				type: "textarea",
-				key: "callback",
-				label: "Redirect address or code",
-				labelKey: "provider-bosch:homecom.s_account.callback.label",
-				required: false,
-				placeholder: "com.bosch.tt.dashtt.pointt://app/login?code=…&state=…",
-				omitFromSettings: true
-			},
-			{
-				type: "password",
-				key: "state",
-				label: "Login state",
-				labelKey: "provider-bosch:homecom.s_account.state.label",
-				required: false,
-				omitFromSettings: true
-			},
-			{
-				type: "password",
-				key: "verifier",
-				label: "Login verifier",
-				labelKey: "provider-bosch:homecom.s_account.verifier.label",
-				required: false,
-				omitFromSettings: true
-			},
-			{
-				type: "addon-action-button",
-				addonId: "bosch-homecom",
-				key: "__homecom-finish",
-				label: "Finish",
-				labelKey: "provider-bosch:homecom.s_account.__homecom-finish.label",
-				buttonLabel: "Complete sign-in",
-				action: "finishSignIn",
-				variant: "primary",
-				paramsFromForm: {
-					verifier: "verifier",
-					callback: "callback",
-					state: "state"
-				},
-				assignResult: {
-					token: "token",
-					refresh: "refresh",
-					username: "username"
-				},
-				successMessage: "{summary}"
-			},
-			{
-				type: "text",
-				key: "username",
-				label: "Account",
-				labelKey: "provider-bosch:homecom.s_account.username.label",
-				required: false
-			},
-			{
-				type: "password",
-				key: "token",
-				label: "Access token (filled by sign-in, or paste one)",
-				labelKey: "provider-bosch:homecom.s_account.token.label",
-				required: true,
-				showToggle: true
-			},
-			{
-				type: "password",
-				key: "refresh",
-				label: "Refresh token (filled by sign-in, or paste one)",
-				labelKey: "provider-bosch:homecom.s_account.refresh.label",
-				required: true,
-				showToggle: true
-			},
-			{
-				type: "text",
-				key: "gatewayId",
-				label: "Gateway id",
-				labelKey: "provider-bosch:homecom.s_account.gatewayId.label",
-				description: "Leave empty to use the first gateway of the account; the chosen one is stored here. For a second gateway add another HomeCom account entry and enter its id.",
-				descriptionKey: "provider-bosch:homecom.s_account.gatewayId.description",
-				required: false
-			},
-			{
-				type: "select",
-				key: "brand",
-				label: "Brand",
-				labelKey: "provider-bosch:homecom.s_account.brand.label",
-				default: "bosch",
-				options: HOMECOM_BRANDS.map((b) => ({
-					value: b,
-					label: b
-				}))
-			},
-			{
-				type: "select",
-				key: "region",
-				label: "Region",
-				labelKey: "provider-bosch:homecom.s_account.region.label",
-				default: "eu",
-				options: HOMECOM_REGIONS.map((r) => ({
-					value: r,
-					label: r.toUpperCase()
-				}))
-			}
-		]
-	}] };
+		username: emailFromIdToken(body["id_token"])
+	};
+}
+//#endregion
+//#region src/homecom/homecom-sign-in.ts
+/** What the form is allowed to see: the URL and an attempt id. Not the verifier. */
+function publishHomeComSignIn(store, nowMs) {
+	const started = beginHomeComSignIn();
+	return {
+		attemptId: store.put(started.verifier, started.state, nowMs),
+		authorizeUrl: started.authorizeUrl
+	};
+}
+async function listGatewaysDefault(tokens, fetchFn) {
+	const res = await fetchFn(`${HOMECOM_POINTT_API_ORIGIN}/v2/gateways`, { headers: {
+		Authorization: `Bearer ${tokens.token}`,
+		Accept: "application/json"
+	} });
+	if (!res.ok) return [];
+	return parseHomeComGatewayList(await res.json());
+}
+async function finishHomeComSignIn(input, store, deps = {}) {
+	const taken = store.take(input.attemptId, input.nowMs);
+	if (!taken.ok) throw new HomeComLoginError(loginFailureForAttempt(taken.reason));
+	const fetchFn = deps.fetchFn ?? globalThis.fetch.bind(globalThis);
+	const tokens = await completeHomeComSignIn({
+		verifier: taken.attempt.verifier,
+		callback: input.callback,
+		state: taken.attempt.state
+	}, fetchFn);
+	let gateways = [];
+	let listFailed = false;
+	try {
+		gateways = await (deps.listGateways ?? ((next) => listGatewaysDefault(next, fetchFn)))(tokens);
+	} catch {
+		listFailed = true;
+		gateways = [];
+	}
+	return finishedFromGateways(tokens, resolveHomeComGateway(gateways), listFailed);
+}
+function finishedFromGateways(tokens, resolved, listFailed) {
+	const who = tokens.username.length > 0 ? `Signed in as ${tokens.username}` : "Signed in";
+	const base = {
+		...tokens,
+		accountLabel: tokens.username
+	};
+	if (listFailed) return {
+		...base,
+		gatewayCount: 0,
+		summary: `${who}. The gateway list could not be read. Enter the gateway id under Advanced.`
+	};
+	if (resolved.kind === "one") return {
+		...base,
+		gatewayCount: 1,
+		gatewayId: resolved.gatewayId,
+		brand: resolved.brand,
+		region: resolved.region,
+		summary: `${who}. Gateway ${resolved.gatewayId} selected.`
+	};
+	if (resolved.kind === "many") return {
+		...base,
+		gatewayCount: resolved.options.length,
+		choices: resolved.options.map((row) => ({ ...row })),
+		summary: `${who}. Choose a gateway.`
+	};
+	return {
+		...base,
+		gatewayCount: 0,
+		summary: `${who}. No gateway was listed. Enter the gateway id under Advanced.`
+	};
 }
+var homeComSignInAttempts = createSignInAttemptStore();
 //#endregion
 //#region src/homecom/homecom-token-persist.ts
 function unreadable(value) {
@@ -590,245 +951,6 @@ function buildDiscoverables(snapshot) {
 }
 var homeComConnections = new HomeComConnectionResolver();
 //#endregion
-//#region src/homecom/homecom-domain-mapping.ts
-var MODE_MAP = {
-	Off: "off",
-	off: "off",
-	Heat: "heat",
-	heat: "heat",
-	Cool: "cool",
-	cool: "cool",
-	Auto: "auto",
-	auto: "auto"
-};
-function mapHvacMode(raw) {
-	return MODE_MAP[raw] ?? "off";
-}
-function climateSliceFromCircuit(circuit, nowMs) {
-	return {
-		mode: mapHvacMode(circuit.operationMode),
-		availableModes: [
-			"off",
-			"heat",
-			"auto"
-		],
-		fanMode: "",
-		availableFanModes: [],
-		preset: "",
-		availablePresets: [],
-		target: circuit.setpoint,
-		targetHigh: null,
-		targetLow: null,
-		targetHumidity: null,
-		currentTemp: circuit.currentRoomTemp,
-		currentHumidity: null,
-		swingVertical: null,
-		swingHorizontal: null,
-		minTemp: circuit.minTemp,
-		maxTemp: circuit.maxTemp,
-		tempStep: .5,
-		lastFetchedAt: nowMs
-	};
-}
-function waterHeaterSliceFromDhw(dhw, nowMs) {
-	return {
-		currentTemp: dhw.currentTemp,
-		targetTemp: dhw.targetTemp,
-		operationMode: dhw.operationMode,
-		availableModes: [...dhw.availableModes],
-		away: null,
-		minTemp: dhw.minTemp,
-		maxTemp: dhw.maxTemp,
-		lastChangedAt: nowMs
-	};
-}
-/** Parse K40-style gateway JSON into heating circuits + DHW. Pure. */
-function parseHomeComSystemPayload(payload) {
-	if (typeof payload !== "object" || payload === null) return {
-		circuits: [],
-		dhw: null
-	};
-	const root = payload;
-	const circuits = [];
-	const rawCircuits = root["heatingCircuits"];
-	if (Array.isArray(rawCircuits)) for (const item of rawCircuits) {
-		if (typeof item !== "object" || item === null) continue;
-		const row = item;
-		const id = row["id"];
-		if (typeof id !== "string") continue;
-		circuits.push({
-			id,
-			name: typeof row["name"] === "string" ? row["name"] : id,
-			operationMode: typeof row["operationMode"] === "string" ? row["operationMode"] : "off",
-			setpoint: readNum(row["setpoint"]),
-			currentRoomTemp: readNum(row["currentRoomTemperature"]),
-			minTemp: readNum(row["minTemp"]),
-			maxTemp: readNum(row["maxTemp"])
-		});
-	}
-	let dhw = null;
-	const rawDhw = root["domesticHotWater"];
-	if (typeof rawDhw === "object" && rawDhw !== null) {
-		const row = rawDhw;
-		const modes = [];
-		if (Array.isArray(row["operationModes"])) {
-			for (const m of row["operationModes"]) if (typeof m === "string") modes.push(m);
-		}
-		dhw = {
-			currentTemp: readNum(row["currentTemperature"]),
-			targetTemp: readNum(row["setpoint"]),
-			operationMode: typeof row["operationMode"] === "string" ? row["operationMode"] : null,
-			availableModes: modes.length > 0 ? modes : [
-				"off",
-				"eco",
-				"performance"
-			],
-			minTemp: readNum(row["minTemp"]),
-			maxTemp: readNum(row["maxTemp"])
-		};
-	}
-	return {
-		circuits,
-		dhw
-	};
-}
-function readNum(raw) {
-	if (typeof raw === "number" && Number.isFinite(raw)) return raw;
-	return null;
-}
-//#endregion
-//#region src/homecom/homecom-api-client.ts
-var HomeComAuthError = class extends Error {
-	name = "HomeComAuthError";
-};
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function rowId(row) {
-	for (const key of [
-		"deviceId",
-		"gatewayId",
-		"id"
-	]) {
-		const value = row[key];
-		if (typeof value === "string" && value.length > 0) return value;
-		if (typeof value === "number") return String(value);
-	}
-	return null;
-}
-/** Gateways from the account listing: a bare array or `{ gateways: [...] }`. */
-function parseHomeComGatewayList(payload) {
-	const rows = isRecord(payload) ? payload["gateways"] : payload;
-	if (!Array.isArray(rows)) return [];
-	const out = [];
-	for (const row of rows) {
-		if (!isRecord(row)) continue;
-		const gatewayId = rowId(row);
-		if (gatewayId === null) continue;
-		const name = row["name"];
-		out.push({
-			gatewayId,
-			name: typeof name === "string" && name.length > 0 ? name : gatewayId
-		});
-	}
-	return out;
-}
-function createHomeComApiClient(config, gatewayId, deps = {}) {
-	const fetchFn = deps.fetchFn ?? globalThis.fetch.bind(globalThis);
-	let token = config.token;
-	let refresh = config.refresh;
-	const base = homeComApiBase(config.region);
-	async function authHeaders() {
-		return {
-			Authorization: `Bearer ${token}`,
-			Accept: "application/json",
-			"Content-Type": "application/json"
-		};
-	}
-	async function request(path, init = {}) {
-		const res = await fetchFn(`${base}${path}`, {
-			method: init.method ?? "GET",
-			headers: await authHeaders(),
-			body: init.body !== void 0 ? JSON.stringify(init.body) : void 0
-		});
-		if (res.status === 401) throw new HomeComAuthError("token expired");
-		if (!res.ok) throw new Error(`HomeCom API ${path} failed: HTTP ${res.status}`);
-		return res.json();
-	}
-	return {
-		async refreshTokens() {
-			const res = await fetchFn(HOMECOM_TOKEN_URL, {
-				method: "POST",
-				headers: { "Content-Type": "application/x-www-form-urlencoded" },
-				body: new URLSearchParams({
-					grant_type: "refresh_token",
-					refresh_token: refresh,
-					client_id: HOMECOM_CLIENT_ID
-				}).toString()
-			});
-			if (!res.ok) {
-				if (res.status === 401 || res.status === 403) throw new HomeComAuthError("refresh refused");
-				throw new Error(`HomeCom token refresh failed: HTTP ${res.status}`);
-			}
-			const body = await res.json();
-			if (typeof body !== "object" || body === null) throw new Error("HomeCom token refresh: bad body");
-			const row = body;
-			const newToken = row["access_token"];
-			const newRefresh = row["refresh_token"];
-			if (typeof newToken !== "string" || typeof newRefresh !== "string") throw new Error("HomeCom token refresh: missing tokens");
-			token = newToken;
-			refresh = newRefresh;
-			await deps.onTokensRotated?.({
-				token,
-				refresh
-			});
-			return {
-				token,
-				refresh
-			};
-		},
-		async listGateways() {
-			return parseHomeComGatewayList(await request("/v2/gateways"));
-		},
-		async fetchSystem() {
-			const parsed = parseHomeComSystemPayload(await request(`/v2/gateways/${gatewayId}/system`));
-			return {
-				gateway: {
-					gatewayId,
-					name: "HomeCom heat pump",
-					model: "K40"
-				},
-				circuits: parsed.circuits,
-				dhw: parsed.dhw
-			};
-		},
-		async setCircuitSetpoint(circuitId, temp) {
-			await request(`/v2/gateways/${gatewayId}/heatingCircuits/${circuitId}/setpoint`, {
-				method: "PUT",
-				body: { value: temp }
-			});
-		},
-		async setCircuitMode(circuitId, mode) {
-			await request(`/v2/gateways/${gatewayId}/heatingCircuits/${circuitId}/operationMode`, {
-				method: "PUT",
-				body: { value: mode }
-			});
-		},
-		async setDhwTarget(temp) {
-			await request(`/v2/gateways/${gatewayId}/domesticHotWater/setpoint`, {
-				method: "PUT",
-				body: { value: temp }
-			});
-		},
-		async setDhwMode(mode) {
-			await request(`/v2/gateways/${gatewayId}/domesticHotWater/operationMode`, {
-				method: "PUT",
-				body: { value: mode }
-			});
-		}
-	};
-}
-//#endregion
 //#region src/homecom/homecom-integration-manager.ts
 var HomeComIntegrationManager = class {
 	#id;
@@ -1389,16 +1511,18 @@ var BoschHomeComProviderAddon = class extends BaseDeviceProvider {
 			customActions: homeComActions,
 			actionHandlers: {
 				beginSignIn: async () => ({
-					...beginHomeComSignIn(),
+					...publishHomeComSignIn(homeComSignInAttempts, Date.now()),
 					summary: "Open the link in a browser and sign in."
 				}),
-				finishSignIn: async (input) => {
-					const tokens = await completeHomeComSignIn(input);
-					return {
-						...tokens,
-						summary: tokens.username.length > 0 ? `Signed in as ${tokens.username}. Save to connect.` : "Signed in. Save to connect."
-					};
-				}
+				finishSignIn: async (input) => finishHomeComSignIn({
+					attemptId: input.attemptId,
+					callback: input.callback,
+					nowMs: Date.now()
+				}, homeComSignInAttempts),
+				signOut: async () => ({
+					signedOut: true,
+					summary: "Signed out."
+				})
 			}
 		};
 	}