@camstack/addon-provider-bosch 0.1.30 → 0.1.31

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.1.31] - 2026-10-28
+
+### Changed
+
+- The Home Connect and HomeCom sign-in pages open under the shared vendor-login path
+
 ## [0.1.30] - 2026-10-27
 
 ### Changed

package/dist/{account-integration-offline-pv6cqOKu.mjs → account-integration-offline-Cfcp8s5x.mjs}

@@ -1,4 +1,4 @@
-import { D as errMsg } from "./dist-DBUnIovD.mjs";
+import { O as errMsg } from "./dist-DxO4cucS.mjs";
 import { randomBytes } from "node:crypto";
 //#region src/shared/oauth-callback.ts
 /** A code on its own: no scheme, no query, no separators. */

package/dist/{account-integration-offline-BMoYdiX2.js → account-integration-offline-IvvrXQDg.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-BioIJ3NA.js");
+const require_dist = require("./dist-NdDwxHvT.js");
 let node_crypto = require("node:crypto");
 //#region src/shared/oauth-callback.ts
 /** A code on its own: no scheme, no query, no separators. */

package/dist/{dist-DBUnIovD.mjs → dist-DxO4cucS.mjs}

@@ -90420,6 +90420,17 @@ function ingestReading(input) {
 	};
 }
 /**
+* The data-plane prefix every `VendorLoginProxy` is served under
+* (`/addon/<addonId>/vendor-login/<attemptId>/<vendorHost>/…`).
+*
+* The hub consults an addon's data-plane prefixes BEFORE its HTTP routes, so a
+* prefix equal to the first segment of a route the addon serves swallows that
+* route. A sign-in addon serves `/login/start|status|commit|cancel`; the proxy
+* therefore lives on a segment no addon route uses. One constant, so the entry
+* path, the mount and the docs cannot drift apart.
+*/
+var VENDOR_LOGIN_PROXY_PREFIX = "vendor-login";
+/**
 * Where an OAuth round-trip ends: the admin-ui completion route
 * (`/sso-complete`, the page every popup sign-in already lands on), with the
 * OUTCOME in the URL fragment.
@@ -90661,19 +90672,17 @@ function sendPlain(res, status, text) {
 }
 var VendorLoginProxy = class {
 	#addonId;
-	#prefix;
 	#logger;
 	#now;
 	#fetch;
 	#attempts = /* @__PURE__ */ new Map();
 	constructor(options) {
 		this.#addonId = options.addonId;
-		this.#prefix = options.prefix;
 		this.#logger = options.logger;
 		this.#now = options.now ?? (() => Date.now());
 		this.#fetch = options.fetchFn ?? globalThis.fetch.bind(globalThis);
 	}
-	/** The `DataPlaneHandler` to pass to `ctx.dataPlane.serve({ prefix, access: 'admin', … })`. */
+	/** The `DataPlaneHandler` to pass to `ctx.dataPlane.serve({ prefix: VENDOR_LOGIN_PROXY_PREFIX, access: 'admin', … })`. */
 	handler = (req, res) => this.#handle(req, res);
 	/** Register an attempt. A one-shot capability: refused hosts are rejected up front. */
 	open(spec) {
@@ -90710,11 +90719,11 @@ var VendorLoginProxy = class {
 			basePath: "",
 			upstreams: attempt.upstreams
 		}, url.host) === void 0) return null;
-		return `/addon/${this.#addonId}/${this.#prefix}/${attemptId}/${url.host}${url.pathname}${url.search}`;
+		return `/addon/${this.#addonId}/${VENDOR_LOGIN_PROXY_PREFIX}/${attemptId}/${url.host}${url.pathname}${url.search}`;
 	}
 	#routeFor(attemptId, attempt, forwardedPrefix) {
 		return {
-			basePath: `${forwardedPrefix}/addon/${this.#addonId}/${this.#prefix}/${attemptId}`,
+			basePath: `${forwardedPrefix}/addon/${this.#addonId}/${VENDOR_LOGIN_PROXY_PREFIX}/${attemptId}`,
 			upstreams: attempt.upstreams
 		};
 	}
@@ -90864,4 +90873,4 @@ var VendorLoginProxy = class {
 var MB = 1024 * 1024;
 1024 * MB, 3072 * MB;
 //#endregion
-export { defineCustomActions as A, string as B, temperatureSensorCapability as C, errMsg as D, DeviceType as E, boolean as F, unknown as H, literal as I, number as L, isSecretMarkerLike as M, _enum as N, createEvent as O, array as P, object as R, switchCapability as S, DeviceRole as T, EventCategory as U, union as V, numericSensorCapability as _, VendorLoginProxy as a, runningFromDishwasherOperation as b, climateControlCapability as c, deviceAdoptionCapability as d, dishwasherCapability as f, ingestReading as g, heatingValveCapability as h, RUNNING_STATE_COLD as i, isSecretMarker as j, customAction as k, connectionTestCapability as l, eventEmitterCapability as m, BaseDeviceProvider as n, batteryCapability as o, enumSensorCapability as p, DishwasherOperationStateSchema as r, binaryCapability as s, BaseDevice as t, consumablesCapability as u, powerMeterCapability as v, waterHeaterCapability as w, runningStateCapability as x, quantityFromUnit as y, record as z };
+export { customAction as A, record as B, switchCapability as C, DeviceType as D, DeviceRole as E, array as F, union as H, boolean as I, literal as L, isSecretMarker as M, isSecretMarkerLike as N, errMsg as O, _enum as P, number as R, runningStateCapability as S, waterHeaterCapability as T, unknown as U, string as V, EventCategory as W, ingestReading as _, VENDOR_LOGIN_PROXY_PREFIX as a, quantityFromUnit as b, binaryCapability as c, consumablesCapability as d, deviceAdoptionCapability as f, heatingValveCapability as g, eventEmitterCapability as h, RUNNING_STATE_COLD as i, defineCustomActions as j, createEvent as k, climateControlCapability as l, enumSensorCapability as m, BaseDeviceProvider as n, VendorLoginProxy as o, dishwasherCapability as p, DishwasherOperationStateSchema as r, batteryCapability as s, BaseDevice as t, connectionTestCapability as u, numericSensorCapability as v, temperatureSensorCapability as w, runningFromDishwasherOperation as x, powerMeterCapability as y, object as z };

package/dist/{dist-BioIJ3NA.js → dist-NdDwxHvT.js}

@@ -90420,6 +90420,17 @@ function ingestReading(input) {
 	};
 }
 /**
+* The data-plane prefix every `VendorLoginProxy` is served under
+* (`/addon/<addonId>/vendor-login/<attemptId>/<vendorHost>/…`).
+*
+* The hub consults an addon's data-plane prefixes BEFORE its HTTP routes, so a
+* prefix equal to the first segment of a route the addon serves swallows that
+* route. A sign-in addon serves `/login/start|status|commit|cancel`; the proxy
+* therefore lives on a segment no addon route uses. One constant, so the entry
+* path, the mount and the docs cannot drift apart.
+*/
+var VENDOR_LOGIN_PROXY_PREFIX = "vendor-login";
+/**
 * Where an OAuth round-trip ends: the admin-ui completion route
 * (`/sso-complete`, the page every popup sign-in already lands on), with the
 * OUTCOME in the URL fragment.
@@ -90661,19 +90672,17 @@ function sendPlain(res, status, text) {
 }
 var VendorLoginProxy = class {
 	#addonId;
-	#prefix;
 	#logger;
 	#now;
 	#fetch;
 	#attempts = /* @__PURE__ */ new Map();
 	constructor(options) {
 		this.#addonId = options.addonId;
-		this.#prefix = options.prefix;
 		this.#logger = options.logger;
 		this.#now = options.now ?? (() => Date.now());
 		this.#fetch = options.fetchFn ?? globalThis.fetch.bind(globalThis);
 	}
-	/** The `DataPlaneHandler` to pass to `ctx.dataPlane.serve({ prefix, access: 'admin', … })`. */
+	/** The `DataPlaneHandler` to pass to `ctx.dataPlane.serve({ prefix: VENDOR_LOGIN_PROXY_PREFIX, access: 'admin', … })`. */
 	handler = (req, res) => this.#handle(req, res);
 	/** Register an attempt. A one-shot capability: refused hosts are rejected up front. */
 	open(spec) {
@@ -90710,11 +90719,11 @@ var VendorLoginProxy = class {
 			basePath: "",
 			upstreams: attempt.upstreams
 		}, url.host) === void 0) return null;
-		return `/addon/${this.#addonId}/${this.#prefix}/${attemptId}/${url.host}${url.pathname}${url.search}`;
+		return `/addon/${this.#addonId}/${VENDOR_LOGIN_PROXY_PREFIX}/${attemptId}/${url.host}${url.pathname}${url.search}`;
 	}
 	#routeFor(attemptId, attempt, forwardedPrefix) {
 		return {
-			basePath: `${forwardedPrefix}/addon/${this.#addonId}/${this.#prefix}/${attemptId}`,
+			basePath: `${forwardedPrefix}/addon/${this.#addonId}/${VENDOR_LOGIN_PROXY_PREFIX}/${attemptId}`,
 			upstreams: attempt.upstreams
 		};
 	}
@@ -90906,6 +90915,12 @@ Object.defineProperty(exports, "RUNNING_STATE_COLD", {
 		return RUNNING_STATE_COLD;
 	}
 });
+Object.defineProperty(exports, "VENDOR_LOGIN_PROXY_PREFIX", {
+	enumerable: true,
+	get: function() {
+		return VENDOR_LOGIN_PROXY_PREFIX;
+	}
+});
 Object.defineProperty(exports, "VendorLoginProxy", {
 	enumerable: true,
 	get: function() {

package/dist/home-connect/addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_dist = require("../dist-BioIJ3NA.js");
-const require_account_integration_offline = require("../account-integration-offline-BMoYdiX2.js");
+const require_dist = require("../dist-NdDwxHvT.js");
+const require_account_integration_offline = require("../account-integration-offline-IvvrXQDg.js");
 let node_crypto = require("node:crypto");
 let node_tls = require("node:tls");
 let node_zlib = require("node:zlib");
@@ -1443,7 +1443,6 @@ function homeConnectFinishResult(account) {
 * proxy reaches nothing else. (Not verified against the live pages: no vendor credentials.)
 */
 var HOME_CONNECT_LOGIN_HOSTS = ["api.home-connect.com", "singlekey-id.com"];
-var HOME_CONNECT_PROXY_PREFIX = "login";
 var HOME_CONNECT_APP_SCHEME = HOME_CONNECT_REDIRECT_URI.slice(0, HOME_CONNECT_REDIRECT_URI.indexOf("://") + 3);
 var homeConnectSignInClaims = require_account_integration_offline.createSignInClaims();
 /** Start an attempt whose `authorizeUrl` is the hub-relative proxied login page. */
@@ -5385,12 +5384,11 @@ var BoschHomeConnectProviderAddon = class extends require_dist.BaseDeviceProvide
 	async serveLoginProxy() {
 		const proxy = new require_dist.VendorLoginProxy({
 			addonId: this.ctx.id,
-			prefix: HOME_CONNECT_PROXY_PREFIX,
 			logger: this.ctx.logger
 		});
 		try {
 			this.loginPlane = await this.ctx.dataPlane?.serve({
-				prefix: "login",
+				prefix: "vendor-login",
 				access: "admin",
 				handler: proxy.handler
 			}) ?? null;

package/dist/home-connect/addon.mjs

@@ -1,5 +1,5 @@
-import { A as defineCustomActions, B as string, D as errMsg, E as DeviceType, F as boolean, H as unknown, I as literal, M as isSecretMarkerLike, N as _enum, O as createEvent, P as array, R as object, T as DeviceRole, U as EventCategory, V as union, _ as numericSensorCapability, a as VendorLoginProxy, b as runningFromDishwasherOperation, d as deviceAdoptionCapability, f as dishwasherCapability, g as ingestReading, i as RUNNING_STATE_COLD, j as isSecretMarker, k as customAction, l as connectionTestCapability, m as eventEmitterCapability, n as BaseDeviceProvider, p as enumSensorCapability, r as DishwasherOperationStateSchema, s as binaryCapability, t as BaseDevice, u as consumablesCapability, v as powerMeterCapability, x as runningStateCapability, y as quantityFromUnit, z as record } from "../dist-DBUnIovD.mjs";
-import { a as createSignInAttemptStore, i as openSignInProxy, n as cascadeRemoveDevicesForIntegration, o as loginFailureForAttempt, r as createSignInClaims, s as parseOAuthCallback, t as setIntegrationDevicesOnline } from "../account-integration-offline-pv6cqOKu.mjs";
+import { A as customAction, B as record, D as DeviceType, E as DeviceRole, F as array, H as union, I as boolean, L as literal, M as isSecretMarker, N as isSecretMarkerLike, O as errMsg, P as _enum, S as runningStateCapability, U as unknown, V as string, W as EventCategory, _ as ingestReading, b as quantityFromUnit, c as binaryCapability, d as consumablesCapability, f as deviceAdoptionCapability, h as eventEmitterCapability, i as RUNNING_STATE_COLD, j as defineCustomActions, k as createEvent, m as enumSensorCapability, n as BaseDeviceProvider, o as VendorLoginProxy, p as dishwasherCapability, r as DishwasherOperationStateSchema, t as BaseDevice, u as connectionTestCapability, v as numericSensorCapability, x as runningFromDishwasherOperation, y as powerMeterCapability, z as object } from "../dist-DxO4cucS.mjs";
+import { a as createSignInAttemptStore, i as openSignInProxy, n as cascadeRemoveDevicesForIntegration, o as loginFailureForAttempt, r as createSignInClaims, s as parseOAuthCallback, t as setIntegrationDevicesOnline } from "../account-integration-offline-Cfcp8s5x.mjs";
 import { createHash, randomBytes } from "node:crypto";
 import { connect } from "node:tls";
 import { inflateRawSync } from "node:zlib";
@@ -1442,7 +1442,6 @@ function homeConnectFinishResult(account) {
 * proxy reaches nothing else. (Not verified against the live pages: no vendor credentials.)
 */
 var HOME_CONNECT_LOGIN_HOSTS = ["api.home-connect.com", "singlekey-id.com"];
-var HOME_CONNECT_PROXY_PREFIX = "login";
 var HOME_CONNECT_APP_SCHEME = HOME_CONNECT_REDIRECT_URI.slice(0, HOME_CONNECT_REDIRECT_URI.indexOf("://") + 3);
 var homeConnectSignInClaims = createSignInClaims();
 /** Start an attempt whose `authorizeUrl` is the hub-relative proxied login page. */
@@ -5384,12 +5383,11 @@ var BoschHomeConnectProviderAddon = class extends BaseDeviceProvider {
 	async serveLoginProxy() {
 		const proxy = new VendorLoginProxy({
 			addonId: this.ctx.id,
-			prefix: HOME_CONNECT_PROXY_PREFIX,
 			logger: this.ctx.logger
 		});
 		try {
 			this.loginPlane = await this.ctx.dataPlane?.serve({
-				prefix: "login",
+				prefix: "vendor-login",
 				access: "admin",
 				handler: proxy.handler
 			}) ?? null;

package/dist/homecom/addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_dist = require("../dist-BioIJ3NA.js");
-const require_account_integration_offline = require("../account-integration-offline-BMoYdiX2.js");
+const require_dist = require("../dist-NdDwxHvT.js");
+const require_account_integration_offline = require("../account-integration-offline-IvvrXQDg.js");
 let node_crypto = require("node:crypto");
 //#region src/homecom/config.ts
 var HOMECOM_BRANDS = ["bosch", "buderus"];
@@ -1234,7 +1234,6 @@ var homeComSignInAttempts = require_account_integration_offline.createSignInAtte
 //#region src/homecom/homecom-sign-in-proxy.ts
 /** SingleKey ID serves the whole HomeCom login. (Not verified against the live pages: no vendor credentials.) */
 var HOMECOM_LOGIN_HOSTS = ["singlekey-id.com"];
-var HOMECOM_PROXY_PREFIX = "login";
 var HOMECOM_APP_SCHEME = HOMECOM_REDIRECT_URI.slice(0, HOMECOM_REDIRECT_URI.indexOf("://") + 3);
 var homeComSignInClaims = require_account_integration_offline.createSignInClaims();
 /** Start an attempt whose `authorizeUrl` is the hub-relative proxied login page. */
@@ -2143,12 +2142,11 @@ var BoschHomeComProviderAddon = class extends require_dist.BaseDeviceProvider {
 	async serveLoginProxy() {
 		const proxy = new require_dist.VendorLoginProxy({
 			addonId: this.ctx.id,
-			prefix: HOMECOM_PROXY_PREFIX,
 			logger: this.ctx.logger
 		});
 		try {
 			this.loginPlane = await this.ctx.dataPlane?.serve({
-				prefix: "login",
+				prefix: "vendor-login",
 				access: "admin",
 				handler: proxy.handler
 			}) ?? null;

package/dist/homecom/addon.mjs

@@ -1,5 +1,5 @@
-import { A as defineCustomActions, B as string, D as errMsg, E as DeviceType, F as boolean, I as literal, L as number, M as isSecretMarkerLike, N as _enum, P as array, R as object, U as EventCategory, a as VendorLoginProxy, c as climateControlCapability, d as deviceAdoptionCapability, j as isSecretMarker, k as customAction, l as connectionTestCapability, n as BaseDeviceProvider, t as BaseDevice, w as waterHeaterCapability } from "../dist-DBUnIovD.mjs";
-import { a as createSignInAttemptStore, i as openSignInProxy, n as cascadeRemoveDevicesForIntegration, o as loginFailureForAttempt, r as createSignInClaims, s as parseOAuthCallback, t as setIntegrationDevicesOnline } from "../account-integration-offline-pv6cqOKu.mjs";
+import { A as customAction, D as DeviceType, F as array, I as boolean, L as literal, M as isSecretMarker, N as isSecretMarkerLike, O as errMsg, P as _enum, R as number, T as waterHeaterCapability, V as string, W as EventCategory, f as deviceAdoptionCapability, j as defineCustomActions, l as climateControlCapability, n as BaseDeviceProvider, o as VendorLoginProxy, t as BaseDevice, u as connectionTestCapability, z as object } from "../dist-DxO4cucS.mjs";
+import { a as createSignInAttemptStore, i as openSignInProxy, n as cascadeRemoveDevicesForIntegration, o as loginFailureForAttempt, r as createSignInClaims, s as parseOAuthCallback, t as setIntegrationDevicesOnline } from "../account-integration-offline-Cfcp8s5x.mjs";
 import { createHash, randomBytes } from "node:crypto";
 //#region src/homecom/config.ts
 var HOMECOM_BRANDS = ["bosch", "buderus"];
@@ -1233,7 +1233,6 @@ var homeComSignInAttempts = createSignInAttemptStore();
 //#region src/homecom/homecom-sign-in-proxy.ts
 /** SingleKey ID serves the whole HomeCom login. (Not verified against the live pages: no vendor credentials.) */
 var HOMECOM_LOGIN_HOSTS = ["singlekey-id.com"];
-var HOMECOM_PROXY_PREFIX = "login";
 var HOMECOM_APP_SCHEME = HOMECOM_REDIRECT_URI.slice(0, HOMECOM_REDIRECT_URI.indexOf("://") + 3);
 var homeComSignInClaims = createSignInClaims();
 /** Start an attempt whose `authorizeUrl` is the hub-relative proxied login page. */
@@ -2142,12 +2141,11 @@ var BoschHomeComProviderAddon = class extends BaseDeviceProvider {
 	async serveLoginProxy() {
 		const proxy = new VendorLoginProxy({
 			addonId: this.ctx.id,
-			prefix: HOMECOM_PROXY_PREFIX,
 			logger: this.ctx.logger
 		});
 		try {
 			this.loginPlane = await this.ctx.dataPlane?.serve({
-				prefix: "login",
+				prefix: "vendor-login",
 				access: "admin",
 				handler: proxy.handler
 			}) ?? null;

package/dist/shc/addon.js

@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 //#region \0rolldown/runtime.js
 var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
 //#endregion
-const require_dist = require("../dist-BioIJ3NA.js");
+const require_dist = require("../dist-NdDwxHvT.js");
 let node_crypto = require("node:crypto");
 let node_https = require("node:https");
 let node_child_process = require("node:child_process");

package/dist/shc/addon.mjs

@@ -1,4 +1,4 @@
-import { A as defineCustomActions, B as string, C as temperatureSensorCapability, D as errMsg, E as DeviceType, I as literal, L as number, N as _enum, P as array, R as object, S as switchCapability, U as EventCategory, c as climateControlCapability, d as deviceAdoptionCapability, h as heatingValveCapability, k as customAction, l as connectionTestCapability, n as BaseDeviceProvider, o as batteryCapability, t as BaseDevice } from "../dist-DBUnIovD.mjs";
+import { A as customAction, C as switchCapability, D as DeviceType, F as array, L as literal, O as errMsg, P as _enum, R as number, V as string, W as EventCategory, f as deviceAdoptionCapability, g as heatingValveCapability, j as defineCustomActions, l as climateControlCapability, n as BaseDeviceProvider, s as batteryCapability, t as BaseDevice, u as connectionTestCapability, w as temperatureSensorCapability, z as object } from "../dist-DxO4cucS.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { request } from "node:https";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-bosch",
-  "version": "0.1.30",
+  "version": "0.1.31",
   "description": "Bosch smart-home device-provider addons for CamStack — SHC, Home Connect, and HomeCom cloud integrations (scaffold)",
   "keywords": [
     "camstack",