@camstack/addon-provider-bosch 0.1.26 → 0.1.27

package/dist/{account-integration-offline-DAgg2Cgr.js → account-integration-offline-2MI94wOE.js}

@@ -10,15 +10,29 @@ var BARE_CODE = /^[A-Za-z0-9._~-]+$/;
 function cleanPaste(input) {
 	return input.trim().replace(/^(?:location|request url)\s*:\s*/i, "").replace(/^["'<]+|["'>]+$/g, "").trim();
 }
-function paramsOf(input) {
+function paramsFromUrl(input) {
 	try {
 		const url = new URL(input);
 		const merged = new URLSearchParams(url.search);
 		for (const [key, value] of new URLSearchParams(url.hash.replace(/^#/, ""))) if (!merged.has(key)) merged.set(key, value);
 		return merged;
 	} catch {
-		return new URLSearchParams(input.replace(/^[?#]/, ""));
+		return;
+	}
+}
+function paramsOf(input) {
+	const direct = paramsFromUrl(input);
+	if (direct) return direct;
+	if (input.includes("%")) try {
+		const decoded = decodeURIComponent(input);
+		if (decoded !== input) {
+			const again = paramsFromUrl(decoded);
+			if (again) return again;
+		}
+	} catch (err) {
+		if (!(err instanceof URIError)) throw err;
 	}
+	return new URLSearchParams(input.replace(/^[?#]/, ""));
 }
 /**
 * The authorization code from whatever an operator pasted after a browser sign-in: the full

package/dist/{account-integration-offline-iGgTPuq_.mjs → account-integration-offline-DKaazSyb.mjs}

@@ -10,15 +10,29 @@ var BARE_CODE = /^[A-Za-z0-9._~-]+$/;
 function cleanPaste(input) {
 	return input.trim().replace(/^(?:location|request url)\s*:\s*/i, "").replace(/^["'<]+|["'>]+$/g, "").trim();
 }
-function paramsOf(input) {
+function paramsFromUrl(input) {
 	try {
 		const url = new URL(input);
 		const merged = new URLSearchParams(url.search);
 		for (const [key, value] of new URLSearchParams(url.hash.replace(/^#/, ""))) if (!merged.has(key)) merged.set(key, value);
 		return merged;
 	} catch {
-		return new URLSearchParams(input.replace(/^[?#]/, ""));
+		return;
+	}
+}
+function paramsOf(input) {
+	const direct = paramsFromUrl(input);
+	if (direct) return direct;
+	if (input.includes("%")) try {
+		const decoded = decodeURIComponent(input);
+		if (decoded !== input) {
+			const again = paramsFromUrl(decoded);
+			if (again) return again;
+		}
+	} catch (err) {
+		if (!(err instanceof URIError)) throw err;
 	}
+	return new URLSearchParams(input.replace(/^[?#]/, ""));
 }
 /**
 * The authorization code from whatever an operator pasted after a browser sign-in: the full

package/dist/home-connect/addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_dist = require("../dist-DEZDBpGW.js");
-const require_account_integration_offline = require("../account-integration-offline-DAgg2Cgr.js");
+const require_account_integration_offline = require("../account-integration-offline-2MI94wOE.js");
 let node_crypto = require("node:crypto");
 let node_tls = require("node:tls");
 let node_zlib = require("node:zlib");

package/dist/home-connect/addon.mjs

@@ -1,5 +1,5 @@
 import { A as isSecretMarker, B as unknown, D as createEvent, E as errMsg, I as object, L as record, M as _enum, N as array, O as customAction, P as literal, R as string, T as DeviceType, V as EventCategory, _ as powerMeterCapability, b as runningStateCapability, c as connectionTestCapability, d as dishwasherCapability, f as enumSensorCapability, g as numericSensorCapability, h as ingestReading, i as RUNNING_STATE_COLD, j as isSecretMarkerLike, k as defineCustomActions, l as consumablesCapability, n as BaseDeviceProvider, o as binaryCapability, p as eventEmitterCapability, r as DishwasherOperationStateSchema, t as BaseDevice, u as deviceAdoptionCapability, v as quantityFromUnit, w as DeviceRole, y as runningFromDishwasherOperation, z as union } from "../dist-Cbcvh8mB.mjs";
-import { a as parseOAuthCallback, i as loginFailureForAttempt, n as cascadeRemoveDevicesForIntegration, r as createSignInAttemptStore, t as setIntegrationDevicesOnline } from "../account-integration-offline-iGgTPuq_.mjs";
+import { a as parseOAuthCallback, i as loginFailureForAttempt, n as cascadeRemoveDevicesForIntegration, r as createSignInAttemptStore, t as setIntegrationDevicesOnline } from "../account-integration-offline-DKaazSyb.mjs";
 import { createHash, randomBytes } from "node:crypto";
 import { connect } from "node:tls";
 import { inflateRawSync } from "node:zlib";

package/dist/homecom/addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_dist = require("../dist-DEZDBpGW.js");
-const require_account_integration_offline = require("../account-integration-offline-DAgg2Cgr.js");
+const require_account_integration_offline = require("../account-integration-offline-2MI94wOE.js");
 let node_crypto = require("node:crypto");
 //#region src/homecom/config.ts
 var HOMECOM_BRANDS = ["bosch", "buderus"];
@@ -322,16 +322,20 @@ function readNum(raw) {
 //#endregion
 //#region src/homecom/homecom-oauth.ts
 /**
-* Public OAuth client of the HomeCom Easy / PointT mobile app, signed in through SingleKey ID.
+* Public OAuth client of the HomeCom Easy app, signed in through SingleKey ID.
 *
-* These are the PUBLIC values the app itself ships (a PKCE client has no secret). They are not
-* derivable from this repository; they come from the community PointT client (`homecom_alt`) and
-* have to be confirmed against a live account — see docs/addons/addon-provider-bosch-homecom.md.
+* A PKCE client has no secret. The values are the ones SingleKey accepts for this client id
+* today: the same authorize query the MIT-licensed `homecom_alt` client records
+* (`OAUTH_LOGIN_PARAMS` — parameters, not copied code) and that the Home Assistant integration
+* opens. `pointt.gateway.resource.dopair` is not a scope this client may request; SingleKey
+* answers `misconfigured-application` and never shows the login page. The scope it does accept
+* names `pointt.gateway.resource.dashapp`, and the Bosch app sends `style_id=tt_bsch`.
 */
 var HOMECOM_CLIENT_ID = "762162C0-FA2D-4540-AE66-6489F189FADC";
 var HOMECOM_REDIRECT_URI = "com.bosch.tt.dashtt.pointt://app/login";
 var HOMECOM_AUTHORIZE_URL = "https://singlekey-id.com/auth/connect/authorize";
 var HOMECOM_TOKEN_URL = "https://singlekey-id.com/auth/connect/token";
+var HOMECOM_STYLE_ID = "tt_bsch";
 var HOMECOM_SCOPE = [
 	"openid",
 	"email",
@@ -341,7 +345,7 @@ var HOMECOM_SCOPE = [
 	"pointt.gateway.removal",
 	"pointt.gateway.list",
 	"pointt.gateway.users",
-	"pointt.gateway.resource.dopair",
+	"pointt.gateway.resource.dashapp",
 	"pointt.castt.flow.token-exchange",
 	"bacon",
 	"hcc.tariff.read"
@@ -557,6 +561,7 @@ function beginHomeComSignIn() {
 	url.searchParams.set("state", state);
 	url.searchParams.set("nonce", b64url((0, node_crypto.randomBytes)(16)));
 	url.searchParams.set("prompt", "login");
+	url.searchParams.set("style_id", HOMECOM_STYLE_ID);
 	return {
 		authorizeUrl: url.toString(),
 		verifier,

package/dist/homecom/addon.mjs

@@ -1,5 +1,5 @@
 import { A as isSecretMarker, C as waterHeaterCapability, E as errMsg, F as number, I as object, M as _enum, N as array, O as customAction, P as literal, R as string, T as DeviceType, V as EventCategory, c as connectionTestCapability, j as isSecretMarkerLike, k as defineCustomActions, n as BaseDeviceProvider, s as climateControlCapability, t as BaseDevice, u as deviceAdoptionCapability } from "../dist-Cbcvh8mB.mjs";
-import { a as parseOAuthCallback, i as loginFailureForAttempt, n as cascadeRemoveDevicesForIntegration, r as createSignInAttemptStore, t as setIntegrationDevicesOnline } from "../account-integration-offline-iGgTPuq_.mjs";
+import { a as parseOAuthCallback, i as loginFailureForAttempt, n as cascadeRemoveDevicesForIntegration, r as createSignInAttemptStore, t as setIntegrationDevicesOnline } from "../account-integration-offline-DKaazSyb.mjs";
 import { createHash, randomBytes } from "node:crypto";
 //#region src/homecom/config.ts
 var HOMECOM_BRANDS = ["bosch", "buderus"];
@@ -321,16 +321,20 @@ function readNum(raw) {
 //#endregion
 //#region src/homecom/homecom-oauth.ts
 /**
-* Public OAuth client of the HomeCom Easy / PointT mobile app, signed in through SingleKey ID.
+* Public OAuth client of the HomeCom Easy app, signed in through SingleKey ID.
 *
-* These are the PUBLIC values the app itself ships (a PKCE client has no secret). They are not
-* derivable from this repository; they come from the community PointT client (`homecom_alt`) and
-* have to be confirmed against a live account — see docs/addons/addon-provider-bosch-homecom.md.
+* A PKCE client has no secret. The values are the ones SingleKey accepts for this client id
+* today: the same authorize query the MIT-licensed `homecom_alt` client records
+* (`OAUTH_LOGIN_PARAMS` — parameters, not copied code) and that the Home Assistant integration
+* opens. `pointt.gateway.resource.dopair` is not a scope this client may request; SingleKey
+* answers `misconfigured-application` and never shows the login page. The scope it does accept
+* names `pointt.gateway.resource.dashapp`, and the Bosch app sends `style_id=tt_bsch`.
 */
 var HOMECOM_CLIENT_ID = "762162C0-FA2D-4540-AE66-6489F189FADC";
 var HOMECOM_REDIRECT_URI = "com.bosch.tt.dashtt.pointt://app/login";
 var HOMECOM_AUTHORIZE_URL = "https://singlekey-id.com/auth/connect/authorize";
 var HOMECOM_TOKEN_URL = "https://singlekey-id.com/auth/connect/token";
+var HOMECOM_STYLE_ID = "tt_bsch";
 var HOMECOM_SCOPE = [
 	"openid",
 	"email",
@@ -340,7 +344,7 @@ var HOMECOM_SCOPE = [
 	"pointt.gateway.removal",
 	"pointt.gateway.list",
 	"pointt.gateway.users",
-	"pointt.gateway.resource.dopair",
+	"pointt.gateway.resource.dashapp",
 	"pointt.castt.flow.token-exchange",
 	"bacon",
 	"hcc.tariff.read"
@@ -556,6 +560,7 @@ function beginHomeComSignIn() {
 	url.searchParams.set("state", state);
 	url.searchParams.set("nonce", b64url(randomBytes(16)));
 	url.searchParams.set("prompt", "login");
+	url.searchParams.set("style_id", HOMECOM_STYLE_ID);
 	return {
 		authorizeUrl: url.toString(),
 		verifier,

package/dist/shc/addon.js

@@ -16,7 +16,8 @@ var boschShcActions = require_dist.defineCustomActions({
 	discoverController: require_dist.customAction(require_dist.object({}), require_dist.object({
 		hosts: require_dist.array(require_dist.object({
 			host: require_dist.string(),
-			name: require_dist.string()
+			name: require_dist.string(),
+			id: require_dist.string()
 		})),
 		summary: require_dist.string()
 	}), {
@@ -331,6 +332,10 @@ async function registerShcClient(deps) {
 }
 //#endregion
 //#region src/shc/shc-controller-discovery.ts
+/** `prefilledConfig` flag: the scan opens the integration form instead of adopting a device. */
+var SHC_SETUP_INTEGRATION_KEY = "setupIntegration";
+/** Top bit of the question class: ask for a unicast reply (RFC 6762). */
+var MDNS_QU_CLASS = 32769;
 var SHC_MDNS_SERVICE = "_http._tcp.local";
 var SHC_CONTROLLER_NAME_PREFIX = "Bosch SHC";
 var SHC_DISCOVERY_TIMEOUT_MS = 1500;
@@ -399,6 +404,14 @@ function ipv4(buf, offset, length) {
 	if (length !== 4 || offset + 4 > buf.length) return null;
 	return `${buf[offset] ?? 0}.${buf[offset + 1] ?? 0}.${buf[offset + 2] ?? 0}.${buf[offset + 3] ?? 0}`;
 }
+/** Identity used to recognise a controller already stored on an integration. */
+function shcControllerId(input) {
+	const service = input.serviceHost?.trim().toLowerCase() ?? "";
+	if (service.length > 0) return service.endsWith(".local") ? service.slice(0, -6) : service;
+	const serial = /\[([^\]]+)\]/.exec(input.name)?.[1]?.trim().toLowerCase() ?? "";
+	if (serial.length > 0) return serial;
+	return input.host;
+}
 function hostsFromRecords(records) {
 	const instances = [];
 	const srv = /* @__PURE__ */ new Map();
@@ -424,13 +437,46 @@ function hostsFromRecords(records) {
 		if (host === void 0 || seen.has(host)) continue;
 		seen.add(host);
 		const label = instance.split("._")[0] ?? instance;
+		const id = shcControllerId({
+			name: label,
+			host,
+			...viaSrv !== void 0 ? { serviceHost: viaSrv } : {}
+		});
 		out.push({
 			host,
-			name: label
+			name: label,
+			id
 		});
 	}
 	return out;
 }
+function identityKeys(found) {
+	const host = found.host.trim().toLowerCase();
+	const id = found.id.trim().toLowerCase();
+	const keys = [host, id];
+	if (id.length > 0 && !id.endsWith(".local")) keys.push(`${id}.local`);
+	return keys;
+}
+/** Controllers whose host or id is already stored on an integration are not proposed again. */
+function proposeShcControllers(found, existingHosts) {
+	const known = new Set(existingHosts.map((host) => host.trim().toLowerCase()).filter((host) => host.length > 0));
+	return found.filter((item) => !identityKeys(item).some((key) => known.has(key)));
+}
+function shcDiscoveryCandidates(proposals) {
+	return proposals.map((found) => ({
+		stableId: `bosch-shc:${found.id}`,
+		suggestedName: found.name,
+		prefilledConfig: {
+			host: found.host,
+			[SHC_SETUP_INTEGRATION_KEY]: true
+		}
+	}));
+}
+function shcDiscoverySummary(foundCount, proposedCount) {
+	if (proposedCount === 0 && foundCount > 0) return "Controller already added.";
+	if (proposedCount === 0) return "No controller found on the network.";
+	return `Found ${proposedCount} ${proposedCount === 1 ? "controller" : "controllers"}.`;
+}
 /** Hosts advertised as a Bosch Smart Home Controller on one mDNS message. */
 function shcHostsFromDnsMessage(buf) {
 	if (buf.length < 12) return [];
@@ -463,7 +509,7 @@ function mdnsPtrQuery(service) {
 	header.writeUInt16BE(1, 4);
 	const tail = Buffer.alloc(4);
 	tail.writeUInt16BE(PTR, 0);
-	tail.writeUInt16BE(1, 2);
+	tail.writeUInt16BE(MDNS_QU_CLASS, 2);
 	return Buffer.concat([
 		header,
 		...encoded,
@@ -23818,22 +23864,15 @@ var BoschShcProviderAddon = class extends require_dist.BaseDeviceProvider {
 			customActions: boschShcActions,
 			actionHandlers: {
 				discoverController: async () => {
-					try {
-						const hosts = await browseShcControllers();
-						return {
-							hosts: hosts.map((found) => ({
-								host: found.host,
-								name: found.name
-							})),
-							summary: hosts.length === 0 ? "No controller found on the network." : `Found ${hosts.length} controller${hosts.length === 1 ? "" : "s"}.`
-						};
-					} catch (err) {
-						this.ctx.logger.warn("SHC controller discovery failed", { meta: { error: require_dist.errMsg(err) } });
-						return {
-							hosts: [],
-							summary: "No controller found on the network."
-						};
-					}
+					const { proposals, summary } = await this.discoverShcControllers();
+					return {
+						hosts: proposals.map((found) => ({
+							host: found.host,
+							name: found.name,
+							id: found.id
+						})),
+						summary
+					};
 				},
 				registerClient: async (input) => {
 					const { sslCertificate, sslKey, token } = await registerShcClient({
@@ -23868,6 +23907,28 @@ var BoschShcProviderAddon = class extends require_dist.BaseDeviceProvider {
 	async supportsManualCreation() {
 		return false;
 	}
+	/**
+	* LAN mDNS probe. This addon is hub-only, so the socket is the hub's.
+	* The operator's hub is on br0 (its own LAN address), the same path the
+	* hub already uses to announce itself — multicast UDP 5353 reaches the
+	* LAN. The probe asks for a unicast reply and does not bind 5353, which
+	* the hub's announcer holds. Agents do not run this addon.
+	*/
+	async supportsDiscovery() {
+		return true;
+	}
+	async discoverDevices() {
+		const { proposals } = await this.discoverShcControllers();
+		return shcDiscoveryCandidates(proposals).map((candidate) => ({
+			stableId: candidate.stableId,
+			type: require_dist.DeviceType.Hub,
+			suggestedName: candidate.suggestedName,
+			prefilledConfig: { ...candidate.prefilledConfig }
+		}));
+	}
+	async adoptDiscoveredDevice(_input) {
+		throw new Error("Bosch SHC controllers are paired from the integration form");
+	}
 	async onGetCreationSchema(_type) {
 		return null;
 	}
@@ -23881,6 +23942,46 @@ var BoschShcProviderAddon = class extends require_dist.BaseDeviceProvider {
 		if (typeof shcDeviceId !== "string" || shcDeviceId.length === 0) throw new Error("bosch-shc generateStableId: shcDeviceId required");
 		return `bosch-shc:${integrationId}:${shcDeviceId}`;
 	}
+	async discoverShcControllers() {
+		let found = [];
+		try {
+			found = await browseShcControllers();
+		} catch (err) {
+			this.ctx.logger.warn("SHC controller discovery failed", { meta: { error: require_dist.errMsg(err) } });
+		}
+		const known = await this.knownControllerHosts();
+		const proposals = proposeShcControllers(found, known);
+		if (found.length > proposals.length) this.ctx.logger.info("SHC discovery skipped controllers already added", { meta: {
+			found: found.length,
+			proposed: proposals.length
+		} });
+		return {
+			proposals,
+			summary: shcDiscoverySummary(found.length, proposals.length)
+		};
+	}
+	async knownControllerHosts() {
+		try {
+			const all = await this.ctx.api.integrations.list.query();
+			const hosts = [];
+			for (const integration of all) {
+				if (integration.addonId !== this.ctx.id) continue;
+				try {
+					const connection = connectionFromSettings(await this.ctx.api.integrations.getSettings.query({ id: integration.id }));
+					if (connection) hosts.push(connection.host);
+				} catch (err) {
+					this.ctx.logger.warn("SHC discovery: settings read failed", { meta: {
+						integrationId: integration.id,
+						error: require_dist.errMsg(err)
+					} });
+				}
+			}
+			return hosts;
+		} catch (err) {
+			this.ctx.logger.warn("SHC discovery: integration list failed", { meta: { error: require_dist.errMsg(err) } });
+			return [];
+		}
+	}
 	requireClients() {
 		if (!this.clients) throw new Error("Bosch SHC provider not initialised");
 		return this.clients;

package/dist/shc/addon.mjs

@@ -17,7 +17,8 @@ var boschShcActions = defineCustomActions({
 	discoverController: customAction(object({}), object({
 		hosts: array(object({
 			host: string(),
-			name: string()
+			name: string(),
+			id: string()
 		})),
 		summary: string()
 	}), {
@@ -332,6 +333,10 @@ async function registerShcClient(deps) {
 }
 //#endregion
 //#region src/shc/shc-controller-discovery.ts
+/** `prefilledConfig` flag: the scan opens the integration form instead of adopting a device. */
+var SHC_SETUP_INTEGRATION_KEY = "setupIntegration";
+/** Top bit of the question class: ask for a unicast reply (RFC 6762). */
+var MDNS_QU_CLASS = 32769;
 var SHC_MDNS_SERVICE = "_http._tcp.local";
 var SHC_CONTROLLER_NAME_PREFIX = "Bosch SHC";
 var SHC_DISCOVERY_TIMEOUT_MS = 1500;
@@ -400,6 +405,14 @@ function ipv4(buf, offset, length) {
 	if (length !== 4 || offset + 4 > buf.length) return null;
 	return `${buf[offset] ?? 0}.${buf[offset + 1] ?? 0}.${buf[offset + 2] ?? 0}.${buf[offset + 3] ?? 0}`;
 }
+/** Identity used to recognise a controller already stored on an integration. */
+function shcControllerId(input) {
+	const service = input.serviceHost?.trim().toLowerCase() ?? "";
+	if (service.length > 0) return service.endsWith(".local") ? service.slice(0, -6) : service;
+	const serial = /\[([^\]]+)\]/.exec(input.name)?.[1]?.trim().toLowerCase() ?? "";
+	if (serial.length > 0) return serial;
+	return input.host;
+}
 function hostsFromRecords(records) {
 	const instances = [];
 	const srv = /* @__PURE__ */ new Map();
@@ -425,13 +438,46 @@ function hostsFromRecords(records) {
 		if (host === void 0 || seen.has(host)) continue;
 		seen.add(host);
 		const label = instance.split("._")[0] ?? instance;
+		const id = shcControllerId({
+			name: label,
+			host,
+			...viaSrv !== void 0 ? { serviceHost: viaSrv } : {}
+		});
 		out.push({
 			host,
-			name: label
+			name: label,
+			id
 		});
 	}
 	return out;
 }
+function identityKeys(found) {
+	const host = found.host.trim().toLowerCase();
+	const id = found.id.trim().toLowerCase();
+	const keys = [host, id];
+	if (id.length > 0 && !id.endsWith(".local")) keys.push(`${id}.local`);
+	return keys;
+}
+/** Controllers whose host or id is already stored on an integration are not proposed again. */
+function proposeShcControllers(found, existingHosts) {
+	const known = new Set(existingHosts.map((host) => host.trim().toLowerCase()).filter((host) => host.length > 0));
+	return found.filter((item) => !identityKeys(item).some((key) => known.has(key)));
+}
+function shcDiscoveryCandidates(proposals) {
+	return proposals.map((found) => ({
+		stableId: `bosch-shc:${found.id}`,
+		suggestedName: found.name,
+		prefilledConfig: {
+			host: found.host,
+			[SHC_SETUP_INTEGRATION_KEY]: true
+		}
+	}));
+}
+function shcDiscoverySummary(foundCount, proposedCount) {
+	if (proposedCount === 0 && foundCount > 0) return "Controller already added.";
+	if (proposedCount === 0) return "No controller found on the network.";
+	return `Found ${proposedCount} ${proposedCount === 1 ? "controller" : "controllers"}.`;
+}
 /** Hosts advertised as a Bosch Smart Home Controller on one mDNS message. */
 function shcHostsFromDnsMessage(buf) {
 	if (buf.length < 12) return [];
@@ -464,7 +510,7 @@ function mdnsPtrQuery(service) {
 	header.writeUInt16BE(1, 4);
 	const tail = Buffer.alloc(4);
 	tail.writeUInt16BE(PTR, 0);
-	tail.writeUInt16BE(1, 2);
+	tail.writeUInt16BE(MDNS_QU_CLASS, 2);
 	return Buffer.concat([
 		header,
 		...encoded,
@@ -23819,22 +23865,15 @@ var BoschShcProviderAddon = class extends BaseDeviceProvider {
 			customActions: boschShcActions,
 			actionHandlers: {
 				discoverController: async () => {
-					try {
-						const hosts = await browseShcControllers();
-						return {
-							hosts: hosts.map((found) => ({
-								host: found.host,
-								name: found.name
-							})),
-							summary: hosts.length === 0 ? "No controller found on the network." : `Found ${hosts.length} controller${hosts.length === 1 ? "" : "s"}.`
-						};
-					} catch (err) {
-						this.ctx.logger.warn("SHC controller discovery failed", { meta: { error: errMsg(err) } });
-						return {
-							hosts: [],
-							summary: "No controller found on the network."
-						};
-					}
+					const { proposals, summary } = await this.discoverShcControllers();
+					return {
+						hosts: proposals.map((found) => ({
+							host: found.host,
+							name: found.name,
+							id: found.id
+						})),
+						summary
+					};
 				},
 				registerClient: async (input) => {
 					const { sslCertificate, sslKey, token } = await registerShcClient({
@@ -23869,6 +23908,28 @@ var BoschShcProviderAddon = class extends BaseDeviceProvider {
 	async supportsManualCreation() {
 		return false;
 	}
+	/**
+	* LAN mDNS probe. This addon is hub-only, so the socket is the hub's.
+	* The operator's hub is on br0 (its own LAN address), the same path the
+	* hub already uses to announce itself — multicast UDP 5353 reaches the
+	* LAN. The probe asks for a unicast reply and does not bind 5353, which
+	* the hub's announcer holds. Agents do not run this addon.
+	*/
+	async supportsDiscovery() {
+		return true;
+	}
+	async discoverDevices() {
+		const { proposals } = await this.discoverShcControllers();
+		return shcDiscoveryCandidates(proposals).map((candidate) => ({
+			stableId: candidate.stableId,
+			type: DeviceType.Hub,
+			suggestedName: candidate.suggestedName,
+			prefilledConfig: { ...candidate.prefilledConfig }
+		}));
+	}
+	async adoptDiscoveredDevice(_input) {
+		throw new Error("Bosch SHC controllers are paired from the integration form");
+	}
 	async onGetCreationSchema(_type) {
 		return null;
 	}
@@ -23882,6 +23943,46 @@ var BoschShcProviderAddon = class extends BaseDeviceProvider {
 		if (typeof shcDeviceId !== "string" || shcDeviceId.length === 0) throw new Error("bosch-shc generateStableId: shcDeviceId required");
 		return `bosch-shc:${integrationId}:${shcDeviceId}`;
 	}
+	async discoverShcControllers() {
+		let found = [];
+		try {
+			found = await browseShcControllers();
+		} catch (err) {
+			this.ctx.logger.warn("SHC controller discovery failed", { meta: { error: errMsg(err) } });
+		}
+		const known = await this.knownControllerHosts();
+		const proposals = proposeShcControllers(found, known);
+		if (found.length > proposals.length) this.ctx.logger.info("SHC discovery skipped controllers already added", { meta: {
+			found: found.length,
+			proposed: proposals.length
+		} });
+		return {
+			proposals,
+			summary: shcDiscoverySummary(found.length, proposals.length)
+		};
+	}
+	async knownControllerHosts() {
+		try {
+			const all = await this.ctx.api.integrations.list.query();
+			const hosts = [];
+			for (const integration of all) {
+				if (integration.addonId !== this.ctx.id) continue;
+				try {
+					const connection = connectionFromSettings(await this.ctx.api.integrations.getSettings.query({ id: integration.id }));
+					if (connection) hosts.push(connection.host);
+				} catch (err) {
+					this.ctx.logger.warn("SHC discovery: settings read failed", { meta: {
+						integrationId: integration.id,
+						error: errMsg(err)
+					} });
+				}
+			}
+			return hosts;
+		} catch (err) {
+			this.ctx.logger.warn("SHC discovery: integration list failed", { meta: { error: errMsg(err) } });
+			return [];
+		}
+	}
 	requireClients() {
 		if (!this.clients) throw new Error("Bosch SHC provider not initialised");
 		return this.clients;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-bosch",
-  "version": "0.1.26",
+  "version": "0.1.27",
   "description": "Bosch smart-home device-provider addons for CamStack — SHC, Home Connect, and HomeCom cloud integrations (scaffold)",
   "keywords": [
     "camstack",