@camstack/addon-provider-bosch 0.1.35 → 0.1.37

package/dist/homecom/addon.js

@@ -1,28 +1,28 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_dist = require("../dist-CyZFf49n.js");
-const require_account_integration_offline = require("../account-integration-offline-De_H_EsP.js");
+const require_bosch_instances = require("../bosch-instances-CO8yIFzJ.js");
+const require_account_integration_offline = require("../account-integration-offline-VItxeiJg.js");
 let node_crypto = require("node:crypto");
 //#region src/homecom/config.ts
 var HOMECOM_BRANDS = ["bosch", "buderus"];
-var HomeComBrandSchema = require_dist._enum(HOMECOM_BRANDS);
+var HomeComBrandSchema = require_bosch_instances._enum(HOMECOM_BRANDS);
 var HOMECOM_REGIONS = ["eu", "us"];
-var HomeComRegionSchema = require_dist._enum(HOMECOM_REGIONS);
-var homeComConfigSchema = require_dist.object({
+var HomeComRegionSchema = require_bosch_instances._enum(HOMECOM_REGIONS);
+var homeComConfigSchema = require_bosch_instances.object({
 	/** Account email; filled by the sign-in, informational only. */
-	username: require_dist.string().optional().describe("HomeCom / PointT account email").meta({ secret: true }),
-	token: require_dist.string().min(1).describe("OAuth access token").meta({ secret: true }),
-	refresh: require_dist.string().min(1).describe("OAuth refresh token").meta({ secret: true }),
+	username: require_bosch_instances.string().optional().describe("HomeCom / PointT account email").meta({ secret: true }),
+	token: require_bosch_instances.string().min(1).describe("OAuth access token").meta({ secret: true }),
+	refresh: require_bosch_instances.string().min(1).describe("OAuth refresh token").meta({ secret: true }),
 	brand: HomeComBrandSchema.default("bosch"),
 	region: HomeComRegionSchema.default("eu"),
 	/**
 	* The gateway this integration controls. Chosen from the account list after
 	* sign-in. A blank value is the same as absent: the id is not known yet.
 	*/
-	gatewayId: require_dist.string().trim().optional().transform((value) => value === void 0 || value.length === 0 ? void 0 : value),
+	gatewayId: require_bosch_instances.string().trim().optional().transform((value) => value === void 0 || value.length === 0 ? void 0 : value),
 	/** Shown on the sign-in field. Not a credential. */
-	accountLabel: require_dist.string().optional(),
+	accountLabel: require_bosch_instances.string().optional(),
 	/** How many gateways the last sign-in listed. */
-	gatewayCount: require_dist.number().optional()
+	gatewayCount: require_bosch_instances.number().optional()
 });
 function connectionFromSettings(settings) {
 	const parsed = homeComConfigSchema.safeParse(settings);
@@ -42,11 +42,6 @@ var HOMECOM_GATEWAYS_PATH = "/pointt-api/api/v1/gateways/";
 function homeComApiBase(_region) {
 	return HOMECOM_POINTT_API_ORIGIN;
 }
-var HOMECOM_SECRET_KEYS = [
-	"username",
-	"token",
-	"refresh"
-];
 var HIDDEN_UNTIL_ADVANCED = {
 	field: "__hidden__",
 	equals: "yes"
@@ -187,35 +182,35 @@ function buildHomeComFormSchema() {
 }
 //#endregion
 //#region src/homecom/custom-actions.ts
-var gatewayChoice = require_dist.object({
-	value: require_dist.string(),
-	label: require_dist.string(),
+var gatewayChoice = require_bosch_instances.object({
+	value: require_bosch_instances.string(),
+	label: require_bosch_instances.string(),
 	brand: HomeComBrandSchema,
 	region: HomeComRegionSchema
 });
-var homeComActions = require_dist.defineCustomActions({
-	beginSignIn: require_dist.customAction(require_dist.object({}), require_dist.object({
-		attemptId: require_dist.string().min(1),
-		authorizeUrl: require_dist.string().min(1),
-		summary: require_dist.string()
+var homeComActions = require_bosch_instances.defineCustomActions({
+	beginSignIn: require_bosch_instances.customAction(require_bosch_instances.object({}), require_bosch_instances.object({
+		attemptId: require_bosch_instances.string().min(1),
+		authorizeUrl: require_bosch_instances.string().min(1),
+		summary: require_bosch_instances.string()
 	}), {
 		kind: "mutation",
 		auth: "admin"
 	}),
-	finishSignIn: require_dist.customAction(require_dist.object({
-		attemptId: require_dist.string().min(1),
-		callback: require_dist.string().min(1)
-	}), require_dist.object({
-		token: require_dist.string().min(1).meta({ secret: true }),
-		refresh: require_dist.string().min(1).meta({ secret: true }),
-		username: require_dist.string().meta({ secret: true }),
-		accountLabel: require_dist.string(),
-		gatewayCount: require_dist.number(),
-		summary: require_dist.string(),
-		gatewayId: require_dist.string().optional(),
+	finishSignIn: require_bosch_instances.customAction(require_bosch_instances.object({
+		attemptId: require_bosch_instances.string().min(1),
+		callback: require_bosch_instances.string().min(1)
+	}), require_bosch_instances.object({
+		token: require_bosch_instances.string().min(1).meta({ secret: true }),
+		refresh: require_bosch_instances.string().min(1).meta({ secret: true }),
+		username: require_bosch_instances.string().meta({ secret: true }),
+		accountLabel: require_bosch_instances.string(),
+		gatewayCount: require_bosch_instances.number(),
+		summary: require_bosch_instances.string(),
+		gatewayId: require_bosch_instances.string().optional(),
 		brand: HomeComBrandSchema.optional(),
 		region: HomeComRegionSchema.optional(),
-		choices: require_dist.array(gatewayChoice).optional()
+		choices: require_bosch_instances.array(gatewayChoice).optional()
 	}), {
 		kind: "mutation",
 		auth: "admin"
@@ -225,25 +220,25 @@ var homeComActions = require_dist.defineCustomActions({
 	* app-scheme redirect and finished the exchange, then the same fields `finishSignIn` returns.
 	* Claimed once. A failed exchange answers with its operator-facing message as an error.
 	*/
-	claimSignIn: require_dist.customAction(require_dist.object({ attemptId: require_dist.string().min(1) }), require_dist.object({
-		pending: require_dist.boolean(),
-		token: require_dist.string().optional().meta({ secret: true }),
-		refresh: require_dist.string().optional().meta({ secret: true }),
-		username: require_dist.string().optional().meta({ secret: true }),
-		accountLabel: require_dist.string().optional(),
-		gatewayCount: require_dist.number().optional(),
-		summary: require_dist.string().optional(),
-		gatewayId: require_dist.string().optional(),
+	claimSignIn: require_bosch_instances.customAction(require_bosch_instances.object({ attemptId: require_bosch_instances.string().min(1) }), require_bosch_instances.object({
+		pending: require_bosch_instances.boolean(),
+		token: require_bosch_instances.string().optional().meta({ secret: true }),
+		refresh: require_bosch_instances.string().optional().meta({ secret: true }),
+		username: require_bosch_instances.string().optional().meta({ secret: true }),
+		accountLabel: require_bosch_instances.string().optional(),
+		gatewayCount: require_bosch_instances.number().optional(),
+		summary: require_bosch_instances.string().optional(),
+		gatewayId: require_bosch_instances.string().optional(),
 		brand: HomeComBrandSchema.optional(),
 		region: HomeComRegionSchema.optional(),
-		choices: require_dist.array(gatewayChoice).optional()
+		choices: require_bosch_instances.array(gatewayChoice).optional()
 	}), {
 		kind: "mutation",
 		auth: "admin"
 	}),
-	signOut: require_dist.customAction(require_dist.object({}), require_dist.object({
-		signedOut: require_dist.literal(true),
-		summary: require_dist.string()
+	signOut: require_bosch_instances.customAction(require_bosch_instances.object({}), require_bosch_instances.object({
+		signedOut: require_bosch_instances.literal(true),
+		summary: require_bosch_instances.string()
 	}), {
 		kind: "mutation",
 		auth: "admin"
@@ -1263,41 +1258,27 @@ function beginHomeComProxiedSignIn(deps) {
 }
 //#endregion
 //#region src/homecom/homecom-token-persist.ts
-function unreadable(value) {
-	return require_dist.isSecretMarker(value) || require_dist.isSecretMarkerLike(value);
-}
 /**
-* Merge `patch` into the integration's stored settings in ONE `setSettings` write, one at a
-* time per integration. Refuses (and says so, without values) when a secret the write
-* touches cannot be read back from the keychain: the hub refuses an overwrite of a secret the
-* addon could not read, so the write would only fail.
+* Patch the integration's record, one write at a time per integration. Refuses (and says so,
+* without values) when the record's secrets cannot be read right now: the write would replace a
+* secret the addon cannot see.
 */
 function buildSerialPatcher(deps) {
 	const tails = /* @__PURE__ */ new Map();
 	return (integrationId, patch) => {
 		const run = async () => {
 			try {
-				const stored = await deps.getSettings(integrationId);
-				const locked = HOMECOM_SECRET_KEYS.filter((key) => unreadable(stored[key]));
-				if (locked.length > 0) {
-					deps.logger.warn(`HomeCom not persisting ${deps.what} — stored secrets are locked`, {
-						tags: { integrationId },
-						meta: { locked }
-					});
+				const stored = await deps.read(integrationId);
+				if (stored === null) return;
+				if (stored.locked) {
+					deps.logger.warn(`HomeCom not persisting ${deps.what} — stored secrets are locked`, { tags: { integrationId } });
 					return;
 				}
-				await deps.setSettings({
-					id: integrationId,
-					settings: {
-						...stored,
-						...patch
-					},
-					secretKeys: [...HOMECOM_SECRET_KEYS]
-				});
+				await deps.patch(integrationId, patch);
 			} catch (err) {
 				deps.logger.warn(`HomeCom failed to persist ${deps.what}`, {
 					tags: { integrationId },
-					meta: { error: require_dist.errMsg(err) }
+					meta: { error: require_bosch_instances.errMsg(err) }
 				});
 			}
 		};
@@ -1330,7 +1311,7 @@ function buildHomeComGatewayPersister(deps) {
 function buildHomeComCandidates(input) {
 	const out = [];
 	for (const dev of input.devices) {
-		const type = dev.kind === "heating-circuit" ? require_dist.DeviceType.Climate : require_dist.DeviceType.WaterHeater;
+		const type = dev.kind === "heating-circuit" ? require_bosch_instances.DeviceType.Climate : require_bosch_instances.DeviceType.WaterHeater;
 		const caps = dev.kind === "heating-circuit" ? ["climate-control"] : ["water-heater"];
 		const adoptedId = input.adopted.get(dev.nativeId) ?? null;
 		out.push({
@@ -1401,7 +1382,7 @@ function buildHomeComAdoptionProvider(deps) {
 					lastDiscoveryAt: null,
 					candidateCount: 0,
 					adoptedCount: 0,
-					lastError: require_dist.errMsg(err)
+					lastError: require_bosch_instances.errMsg(err)
 				};
 			}
 		},
@@ -1451,7 +1432,7 @@ function buildHomeComAdoptionProvider(deps) {
 				logger.warn("homecom adopt failed", { meta: {
 					nativeId,
 					integrationId,
-					error: require_dist.errMsg(err)
+					error: require_bosch_instances.errMsg(err)
 				} });
 				failures++;
 			}
@@ -1574,7 +1555,7 @@ var HomeComIntegrationManager = class {
 			} catch (err) {
 				this.#logger.warn("HomeCom could not store the rotated tokens", {
 					tags: { integrationId: this.#id },
-					meta: { error: require_dist.errMsg(err) }
+					meta: { error: require_bosch_instances.errMsg(err) }
 				});
 			}
 		};
@@ -1630,7 +1611,7 @@ var HomeComIntegrationManager = class {
 			}, this.#pollIntervalMs);
 		} catch (err) {
 			this.#status = "error";
-			this.#error = err instanceof HomeComAuthError ? "authentication failed — sign in again" : require_dist.errMsg(err);
+			this.#error = err instanceof HomeComAuthError ? "authentication failed — sign in again" : require_bosch_instances.errMsg(err);
 			this.#client = null;
 			this.#surfaceSink.set(this.#id, null);
 			this.#onDisconnected(this.#id);
@@ -1664,7 +1645,7 @@ var HomeComIntegrationManager = class {
 		} catch (err) {
 			this.#logger.warn("HomeCom poll failed", { meta: {
 				integrationId: this.#id,
-				error: require_dist.errMsg(err)
+				error: require_bosch_instances.errMsg(err)
 			} });
 		}
 	}
@@ -1739,7 +1720,7 @@ var HomeComClientRegistry = class {
 			} catch (err) {
 				this.#logger.warn("HomeComClientRegistry: applyConnection failed", { meta: {
 					integrationId,
-					error: require_dist.errMsg(err)
+					error: require_bosch_instances.errMsg(err)
 				} });
 			}
 			return;
@@ -1763,7 +1744,7 @@ var HomeComClientRegistry = class {
 		} catch (err) {
 			this.#logger.warn("HomeComClientRegistry: manager start failed", { meta: {
 				integrationId,
-				error: require_dist.errMsg(err)
+				error: require_bosch_instances.errMsg(err)
 			} });
 		}
 	}
@@ -1776,7 +1757,7 @@ var HomeComClientRegistry = class {
 		} catch (err) {
 			this.#logger.warn("HomeComClientRegistry: remove stop failed", { meta: {
 				integrationId,
-				error: require_dist.errMsg(err)
+				error: require_bosch_instances.errMsg(err)
 			} });
 		}
 	}
@@ -1789,7 +1770,7 @@ var HomeComClientRegistry = class {
 		} catch (err) {
 			this.#logger.warn("HomeComClientRegistry: shutdown stop failed", { meta: {
 				integrationId: id,
-				error: require_dist.errMsg(err)
+				error: require_bosch_instances.errMsg(err)
 			} });
 		}
 		this.#entries.clear();
@@ -1867,7 +1848,7 @@ function buildHomeComConnectionTestProvider(deps) {
 					outcome: "rejected",
 					error: "HomeCom refused the access token — sign in again to get a fresh one."
 				};
-				logger.warn("HomeCom connection test inconclusive", { meta: { error: require_dist.errMsg(err) } });
+				logger.warn("HomeCom connection test inconclusive", { meta: { error: require_bosch_instances.errMsg(err) } });
 				return {
 					outcome: "inconclusive",
 					error: "Could not reach the HomeCom cloud API."
@@ -1877,13 +1858,141 @@ function buildHomeComConnectionTestProvider(deps) {
 	};
 }
 //#endregion
+//#region src/homecom/homecom-instances.ts
+/**
+* HomeCom integrations as `integration-instances` (planning#416, D985, D1007): one `connections`
+* record per account under the `integrations` registry id. The body IS the account (the account
+* email and the OAuth tokens in the keychain; brand, region, the chosen gateway and the
+* signed-in label in the open), so the form the instances page edits is the stored shape.
+*/
+var homeComConnectionsEntryKind = require_bosch_instances.defineEntryKind("connections", {
+	title: "HomeCom accounts",
+	schema: require_bosch_instances.entryBody({
+		username: require_bosch_instances.string().optional().meta({ secret: true }),
+		token: require_bosch_instances.string().optional().meta({ secret: true }),
+		refresh: require_bosch_instances.string().optional().meta({ secret: true }),
+		brand: HomeComBrandSchema.optional(),
+		region: HomeComRegionSchema.optional(),
+		gatewayId: require_bosch_instances.string().optional(),
+		accountLabel: require_bosch_instances.string().optional(),
+		gatewayCount: require_bosch_instances.number().optional()
+	}),
+	writeTrigger: "an operator signs in, edits or removes a HomeCom account, or a connection stores a rotated token or its gateway"
+});
+/** Every kind this addon declares, keyed by its name. */
+var homeComRecordKinds = { connections: homeComConnectionsEntryKind };
+var LEGACY_KEYS = [
+	"username",
+	"token",
+	"refresh",
+	"brand",
+	"region",
+	"gatewayId",
+	"accountLabel",
+	"gatewayCount"
+];
+var SECRET_KEYS = [
+	"username",
+	"token",
+	"refresh"
+];
+function text(value) {
+	return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+/** The record body of one account, from its legacy rows (secrets resolved). */
+function homeComBodyFromRows(values, log, integration) {
+	const dropped = Object.keys(values).filter((key) => !LEGACY_KEYS.includes(key));
+	if (dropped.length > 0) log.warn(`integration '${integration.id}': legacy settings nothing reads any more are dropped: ${dropped.join(", ")}`);
+	const username = text(values["username"]);
+	const token = text(values["token"]);
+	const refresh = text(values["refresh"]);
+	const brand = HomeComBrandSchema.safeParse(values["brand"]);
+	const region = HomeComRegionSchema.safeParse(values["region"]);
+	const gatewayId = text(values["gatewayId"])?.trim();
+	const accountLabel = text(values["accountLabel"]);
+	const count = values["gatewayCount"];
+	return {
+		name: integration.name,
+		...username !== void 0 ? { username } : {},
+		...token !== void 0 ? { token } : {},
+		...refresh !== void 0 ? { refresh } : {},
+		...brand.success ? { brand: brand.data } : {},
+		...region.success ? { region: region.data } : {},
+		...gatewayId !== void 0 && gatewayId.length > 0 ? { gatewayId } : {},
+		...accountLabel !== void 0 ? { accountLabel } : {},
+		...typeof count === "number" && Number.isFinite(count) ? { gatewayCount: count } : {}
+	};
+}
+/** The whole `bosch-homecom` catalogue (D987): offered to the engine at `onInitialize`. */
+var HOMECOM_MIGRATIONS = [require_bosch_instances.boschRowsMigration({
+	addonId: "bosch-homecom",
+	id: "bosch-homecom/2026-11-05-integration-rows-to-record",
+	description: "Move every HomeCom account into a typed instance record keyed by its registry id, then clear the legacy integration settings rows and their keychain values",
+	fixtureMark: "a legacy setting key the migration does not know",
+	kind: homeComConnectionsEntryKind,
+	bodyFrom: homeComBodyFromRows
+})];
+function homeComRowsPorts(deps) {
+	return require_bosch_instances.boschRowsPorts({
+		...deps,
+		kind: homeComConnectionsEntryKind
+	});
+}
+async function homeComStoredOf(instances, id) {
+	const read = await instances.readResolved(id);
+	if (read === null) return null;
+	return {
+		settings: { ...read.body },
+		locked: read.secrets === "unavailable"
+	};
+}
+/**
+* The live account of one integration, read from its record. null while it is not signed in; a
+* locked keychain throws so the caller keeps the client it has instead of reconfiguring it
+* without its tokens (D49).
+*/
+async function homeComConnectionOf(instances, id) {
+	const stored = await homeComStoredOf(instances, id);
+	if (stored === null) return null;
+	if (stored.locked) throw new Error("the keychain is locked, the saved HomeCom tokens cannot be read");
+	return connectionFromSettings(stored.settings);
+}
+function buildHomeComInstances(records, deps) {
+	const handle = records.kind(homeComConnectionsEntryKind);
+	const instances = new require_bosch_instances.RecordIntegrationInstances(records, homeComConnectionsEntryKind, {
+		description: {
+			role: "devices",
+			instanceMode: "multiple",
+			kind: "account",
+			canTest: true
+		},
+		formSchema: () => buildHomeComFormSchema(),
+		initialBody: (name) => ({ name }),
+		configured: (body) => connectionFromSettings(body) !== null,
+		onChanged: async (_id, change) => {
+			if (change !== "deleted") await deps.onChanged();
+		},
+		test: (input) => require_bosch_instances.testBoschInstance({
+			...input,
+			tester: deps.tester,
+			handle,
+			secretKeys: SECRET_KEYS
+		})
+	});
+	return {
+		instances,
+		handle,
+		provider: require_bosch_instances.keepBodyKeys(instances.toProvider(), new Set(Object.keys(homeComConnectionsEntryKind.schema.shape)))
+	};
+}
+//#endregion
 //#region src/homecom/devices/homecom-climate-device.ts
-var homeComClimateSchema = require_dist.object({
-	nativeId: require_dist.string().min(1),
-	brokerId: require_dist.string().min(1),
-	circuitId: require_dist.string().min(1),
-	system: require_dist.literal("homecom").optional(),
-	integrationId: require_dist.string().optional()
+var homeComClimateSchema = require_bosch_instances.object({
+	nativeId: require_bosch_instances.string().min(1),
+	brokerId: require_bosch_instances.string().min(1),
+	circuitId: require_bosch_instances.string().min(1),
+	system: require_bosch_instances.literal("homecom").optional(),
+	integrationId: require_bosch_instances.string().optional()
 });
 var CLIMATE_CAP = "climate-control";
 var COLD_START$1 = {
@@ -1903,7 +2012,7 @@ var COLD_START$1 = {
 	swingHorizontal: null,
 	lastFetchedAt: 0
 };
-var HomeComClimateDevice = class extends require_dist.BaseDevice {
+var HomeComClimateDevice = class extends require_bosch_instances.BaseDevice {
 	features = [];
 	#brokerId;
 	#circuitId;
@@ -1941,7 +2050,7 @@ var HomeComClimateDevice = class extends require_dist.BaseDevice {
 		return client;
 	}
 	registerClimateCap() {
-		this.ctx.registerNativeCap(require_dist.climateControlCapability, {
+		this.ctx.registerNativeCap(require_bosch_instances.climateControlCapability, {
 			getStatus: async () => {
 				this.refreshFromSnapshot();
 				return this.runtimeState.getCapState(CLIMATE_CAP) ?? COLD_START$1;
@@ -1989,11 +2098,11 @@ function hvacModeToHomeCom(mode) {
 }
 //#endregion
 //#region src/homecom/devices/homecom-water-heater-device.ts
-var homeComWaterHeaterSchema = require_dist.object({
-	nativeId: require_dist.string().min(1),
-	brokerId: require_dist.string().min(1),
-	system: require_dist.literal("homecom").optional(),
-	integrationId: require_dist.string().optional()
+var homeComWaterHeaterSchema = require_bosch_instances.object({
+	nativeId: require_bosch_instances.string().min(1),
+	brokerId: require_bosch_instances.string().min(1),
+	system: require_bosch_instances.literal("homecom").optional(),
+	integrationId: require_bosch_instances.string().optional()
 });
 var WH_CAP = "water-heater";
 var COLD_START = {
@@ -2006,7 +2115,7 @@ var COLD_START = {
 	maxTemp: null,
 	lastChangedAt: 0
 };
-var HomeComWaterHeaterDevice = class extends require_dist.BaseDevice {
+var HomeComWaterHeaterDevice = class extends require_bosch_instances.BaseDevice {
 	features = [];
 	#brokerId;
 	constructor(ctx) {
@@ -2042,7 +2151,7 @@ var HomeComWaterHeaterDevice = class extends require_dist.BaseDevice {
 		return client;
 	}
 	registerWaterHeaterCap() {
-		this.ctx.registerNativeCap(require_dist.waterHeaterCapability, {
+		this.ctx.registerNativeCap(require_bosch_instances.waterHeaterCapability, {
 			getStatus: async () => {
 				this.refreshFromSnapshot();
 				return this.runtimeState.getCapState(WH_CAP) ?? COLD_START;
@@ -2063,14 +2172,15 @@ var HomeComWaterHeaterDevice = class extends require_dist.BaseDevice {
 };
 //#endregion
 //#region src/homecom/addon.ts
-var BoschHomeComProviderAddon = class extends require_dist.BaseDeviceProvider {
+var BoschHomeComProviderAddon = class extends require_bosch_instances.BaseDeviceProvider {
 	addonId = "bosch-homecom";
 	providerName = "Bosch HomeCom";
 	deviceClasses = {
-		[require_dist.DeviceType.Climate]: HomeComClimateDevice,
-		[require_dist.DeviceType.WaterHeater]: HomeComWaterHeaterDevice
+		[require_bosch_instances.DeviceType.Climate]: HomeComClimateDevice,
+		[require_bosch_instances.DeviceType.WaterHeater]: HomeComWaterHeaterDevice
 	};
 	clients = null;
+	instances = null;
 	loginProxy = null;
 	loginPlane = null;
 	constructor() {
@@ -2078,10 +2188,24 @@ var BoschHomeComProviderAddon = class extends require_dist.BaseDeviceProvider {
 	}
 	async onInitialize() {
 		const regs = this.providerRegistrationsFromSuper(await super.onInitialize());
+		const records = this.ctx.records;
+		if (records === void 0) throw new Error("bosch-homecom: ctx.records is required (hub-only addon)");
+		await records.declare(homeComRecordKinds);
+		await this.runMigrations(require_bosch_instances.defineAddonMigrations(HOMECOM_MIGRATIONS, homeComRowsPorts({
+			api: require_bosch_instances.defaultIntegrationApiOver(this.ctx.api),
+			secrets: this.ctx.secrets ?? null,
+			records,
+			warn: (message) => this.ctx.logger.warn(message)
+		})));
+		const built = buildHomeComInstances(records, {
+			onChanged: () => this.reconcileIntegrations(),
+			tester: this.buildConnectionTestProvider()
+		});
+		this.instances = built;
 		await this.serveLoginProxy();
 		const persistDeps = {
-			getSettings: (id) => this.ctx.api.integrations.getSettings.query({ id }),
-			setSettings: (input) => this.ctx.api.integrations.setSettings.mutate(input),
+			read: (id) => homeComStoredOf(built.instances, id),
+			patch: (id, patch) => built.handle.patch(id, patch),
 			logger: this.ctx.logger
 		};
 		const persistTokens = buildHomeComTokenPersister(persistDeps);
@@ -2102,12 +2226,16 @@ var BoschHomeComProviderAddon = class extends require_dist.BaseDeviceProvider {
 			providers: [
 				...regs,
 				{
-					capability: require_dist.deviceAdoptionCapability,
+					capability: require_bosch_instances.deviceAdoptionCapability,
 					provider: this.buildAdoptionProvider()
 				},
 				{
-					capability: require_dist.connectionTestCapability,
+					capability: require_bosch_instances.connectionTestCapability,
 					provider: this.buildConnectionTestProvider()
+				},
+				{
+					capability: require_bosch_instances.integrationInstancesCapability,
+					provider: built.provider
 				}
 			],
 			customActions: homeComActions,
@@ -2140,7 +2268,7 @@ var BoschHomeComProviderAddon = class extends require_dist.BaseDeviceProvider {
 	}
 	/** The hub's HTTPS face for the vendor's login pages (D955): admin session only. */
 	async serveLoginProxy() {
-		const proxy = new require_dist.VendorLoginProxy({
+		const proxy = new require_bosch_instances.VendorLoginProxy({
 			addonId: this.ctx.id,
 			logger: this.ctx.logger
 		});
@@ -2152,7 +2280,7 @@ var BoschHomeComProviderAddon = class extends require_dist.BaseDeviceProvider {
 			}) ?? null;
 			if (this.loginPlane !== null) this.loginProxy = proxy;
 		} catch (err) {
-			this.ctx.logger.warn("HomeCom login proxy failed to serve — sign-in falls back to paste", { meta: { error: require_dist.errMsg(err) } });
+			this.ctx.logger.warn("HomeCom login proxy failed to serve — sign-in falls back to paste", { meta: { error: require_bosch_instances.errMsg(err) } });
 		}
 	}
 	async onShutdown() {
@@ -2162,9 +2290,10 @@ var BoschHomeComProviderAddon = class extends require_dist.BaseDeviceProvider {
 		try {
 			await this.clients?.shutdown();
 		} catch (err) {
-			this.ctx.logger.warn("HomeCom shutdown error", { meta: { error: require_dist.errMsg(err) } });
+			this.ctx.logger.warn("HomeCom shutdown error", { meta: { error: require_bosch_instances.errMsg(err) } });
 		}
 		this.clients = null;
+		this.instances = null;
 		await super.onShutdown();
 	}
 	requireClients() {
@@ -2184,14 +2313,14 @@ var BoschHomeComProviderAddon = class extends require_dist.BaseDeviceProvider {
 			const mine = (await this.ctx.api.integrations.list.query()).filter((i) => i.addonId === this.ctx.id && i.enabled);
 			const surviving = /* @__PURE__ */ new Set();
 			for (const integration of mine) try {
-				const connection = connectionFromSettings(await this.ctx.api.integrations.getSettings.query({ id: integration.id }));
+				const connection = await homeComConnectionOf(this.requireInstances().instances, integration.id);
 				if (!connection) continue;
 				await reg.upsert(integration.id, integration.name, connection);
 				surviving.add(integration.id);
 			} catch (err) {
 				this.ctx.logger.warn("HomeCom reconcile failed for integration", { meta: {
 					integrationId: integration.id,
-					error: require_dist.errMsg(err)
+					error: require_bosch_instances.errMsg(err)
 				} });
 			}
 			const vanished = reg.list().filter((id) => !surviving.has(id));
@@ -2207,7 +2336,7 @@ var BoschHomeComProviderAddon = class extends require_dist.BaseDeviceProvider {
 				logger: this.ctx.logger
 			});
 		} catch (err) {
-			this.ctx.logger.warn("HomeCom integration reconcile failed", { meta: { error: require_dist.errMsg(err) } });
+			this.ctx.logger.warn("HomeCom integration reconcile failed", { meta: { error: require_bosch_instances.errMsg(err) } });
 		}
 	}
 	subscribeIntegrationLifecycle() {
@@ -2216,9 +2345,9 @@ var BoschHomeComProviderAddon = class extends require_dist.BaseDeviceProvider {
 			if (typeof addonId === "string" && addonId !== this.ctx.id) return;
 			this.reconcileIntegrations();
 		};
-		this.ctx.eventBus.subscribe({ category: require_dist.EventCategory.IntegrationEnabled }, handler);
-		this.ctx.eventBus.subscribe({ category: require_dist.EventCategory.IntegrationDisabled }, handler);
-		this.ctx.eventBus.subscribe({ category: require_dist.EventCategory.IntegrationDeleted }, handler);
+		this.ctx.eventBus.subscribe({ category: require_bosch_instances.EventCategory.IntegrationEnabled }, handler);
+		this.ctx.eventBus.subscribe({ category: require_bosch_instances.EventCategory.IntegrationDisabled }, handler);
+		this.ctx.eventBus.subscribe({ category: require_bosch_instances.EventCategory.IntegrationDeleted }, handler);
 	}
 	buildConnectionTestProvider() {
 		return buildHomeComConnectionTestProvider({ logger: this.ctx.logger });
@@ -2273,9 +2402,6 @@ var BoschHomeComProviderAddon = class extends require_dist.BaseDeviceProvider {
 			logger: this.ctx.logger
 		});
 	}
-	globalSettingsSchema() {
-		return buildHomeComFormSchema();
-	}
 	async supportsManualCreation() {
 		return false;
 	}
@@ -2285,6 +2411,10 @@ var BoschHomeComProviderAddon = class extends require_dist.BaseDeviceProvider {
 	async onCreateDevice(_type, _config) {
 		throw new Error("HomeCom devices are adopted from the cloud");
 	}
+	requireInstances() {
+		if (!this.instances) throw new Error("HomeCom provider not initialised");
+		return this.instances;
+	}
 	setIntegrationDevicesOnline(integrationId, online) {
 		const reg = this.ctx.kernel.deviceRegistry;
 		if (!reg) return;