@camstack/addon-provider-bosch 0.1.36 → 0.1.38

package/dist/home-connect/addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_bosch_instances = require("../bosch-instances-CXmuRkef.js");
-const require_account_integration_offline = require("../account-integration-offline-Bnm17sAE.js");
+const require_bosch_instances = require("../bosch-instances-Y9sMCElY.js");
+const require_account_integration_offline = require("../account-integration-offline-CeMaWElV.js");
 let node_crypto = require("node:crypto");
 let node_tls = require("node:tls");
 let node_zlib = require("node:zlib");
@@ -1408,9 +1408,14 @@ function homeConnectFinishResult(account) {
 /**
 * Home Connect signs in through its own identity pages, which end on `hcauth://auth/prod?...`
 * — an address no browser can open. These are the hosts those pages are served from; the
-* proxy reaches nothing else. (Not verified against the live pages: no vendor credentials.)
+* proxy reaches nothing else. The authorize call redirects to SingleKey ID, whose page loads its
+* scripts from `cdn.singlekey-id.com` (see `HOMECOM_LOGIN_HOSTS`).
 */
-var HOME_CONNECT_LOGIN_HOSTS = ["api.home-connect.com", "singlekey-id.com"];
+var HOME_CONNECT_LOGIN_HOSTS = [
+	"api.home-connect.com",
+	"singlekey-id.com",
+	"cdn.singlekey-id.com"
+];
 var HOME_CONNECT_APP_SCHEME = HOME_CONNECT_REDIRECT_URI.slice(0, HOME_CONNECT_REDIRECT_URI.indexOf("://") + 3);
 var homeConnectSignInClaims = require_account_integration_offline.createSignInClaims();
 /** Start an attempt whose `authorizeUrl` is the hub-relative proxied login page. */
@@ -5383,6 +5388,7 @@ var BoschHomeConnectProviderAddon = class extends require_bosch_instances.BaseDe
 		await records.declare(homeConnectRecordKinds);
 		await this.runMigrations(require_bosch_instances.defineAddonMigrations(HOME_CONNECT_MIGRATIONS, homeConnectRowsPorts({
 			api: require_bosch_instances.defaultIntegrationApiOver(this.ctx.api),
+			secrets: this.ctx.secrets ?? null,
 			records,
 			warn: (message) => this.ctx.logger.warn(message)
 		})));

package/dist/home-connect/addon.mjs

@@ -1,5 +1,5 @@
-import { $ as errMsg, B as isSecretMarkerLike, C as ingestReading, D as quantityFromUnit, E as powerMeterCapability, F as defineAddonMigrations, H as array, I as defineCustomActions, J as string, K as object, L as defineEntryKind, N as createEvent, O as runningFromDishwasherOperation, P as customAction, Q as DeviceType, R as entryBody, T as numericSensorCapability, U as boolean, V as _enum, W as literal, X as unknown, Y as union, Z as DeviceRole, _ as defaultIntegrationApiOver, a as BaseDevice, b as enumSensorCapability, c as RUNNING_STATE_COLD, d as VendorLoginProxy, et as EventCategory, g as consumablesCapability, h as connectionTestCapability, i as testBoschInstance, k as runningStateCapability, l as RecordIntegrationInstances, n as boschRowsPorts, o as BaseDeviceProvider, p as binaryCapability, q as record, r as keepBodyKeys, s as DishwasherOperationStateSchema, t as boschRowsMigration, v as deviceAdoptionCapability, w as integrationInstancesCapability, x as eventEmitterCapability, y as dishwasherCapability, z as isSecretMarker } from "../bosch-instances-BIvOtuzj.mjs";
-import { a as createSignInAttemptStore, i as openSignInProxy, n as cascadeRemoveDevicesForIntegration, o as loginFailureForAttempt, r as createSignInClaims, s as parseOAuthCallback, t as setIntegrationDevicesOnline } from "../account-integration-offline-9ooJuNrN.mjs";
+import { $ as errMsg, B as isSecretMarkerLike, C as ingestReading, D as quantityFromUnit, E as powerMeterCapability, F as defineAddonMigrations, H as array, I as defineCustomActions, J as string, K as object, L as defineEntryKind, N as createEvent, O as runningFromDishwasherOperation, P as customAction, Q as DeviceType, R as entryBody, T as numericSensorCapability, U as boolean, V as _enum, W as literal, X as unknown, Y as union, Z as DeviceRole, _ as defaultIntegrationApiOver, a as BaseDevice, b as enumSensorCapability, c as RUNNING_STATE_COLD, d as VendorLoginProxy, et as EventCategory, g as consumablesCapability, h as connectionTestCapability, i as testBoschInstance, k as runningStateCapability, l as RecordIntegrationInstances, n as boschRowsPorts, o as BaseDeviceProvider, p as binaryCapability, q as record, r as keepBodyKeys, s as DishwasherOperationStateSchema, t as boschRowsMigration, v as deviceAdoptionCapability, w as integrationInstancesCapability, x as eventEmitterCapability, y as dishwasherCapability, z as isSecretMarker } from "../bosch-instances-CIuDwXQ8.mjs";
+import { a as createSignInAttemptStore, i as openSignInProxy, n as cascadeRemoveDevicesForIntegration, o as loginFailureForAttempt, r as createSignInClaims, s as parseOAuthCallback, t as setIntegrationDevicesOnline } from "../account-integration-offline-DhHNdL3k.mjs";
 import { createHash, randomBytes } from "node:crypto";
 import { connect } from "node:tls";
 import { inflateRawSync } from "node:zlib";
@@ -1407,9 +1407,14 @@ function homeConnectFinishResult(account) {
 /**
 * Home Connect signs in through its own identity pages, which end on `hcauth://auth/prod?...`
 * — an address no browser can open. These are the hosts those pages are served from; the
-* proxy reaches nothing else. (Not verified against the live pages: no vendor credentials.)
+* proxy reaches nothing else. The authorize call redirects to SingleKey ID, whose page loads its
+* scripts from `cdn.singlekey-id.com` (see `HOMECOM_LOGIN_HOSTS`).
 */
-var HOME_CONNECT_LOGIN_HOSTS = ["api.home-connect.com", "singlekey-id.com"];
+var HOME_CONNECT_LOGIN_HOSTS = [
+	"api.home-connect.com",
+	"singlekey-id.com",
+	"cdn.singlekey-id.com"
+];
 var HOME_CONNECT_APP_SCHEME = HOME_CONNECT_REDIRECT_URI.slice(0, HOME_CONNECT_REDIRECT_URI.indexOf("://") + 3);
 var homeConnectSignInClaims = createSignInClaims();
 /** Start an attempt whose `authorizeUrl` is the hub-relative proxied login page. */
@@ -5382,6 +5387,7 @@ var BoschHomeConnectProviderAddon = class extends BaseDeviceProvider {
 		await records.declare(homeConnectRecordKinds);
 		await this.runMigrations(defineAddonMigrations(HOME_CONNECT_MIGRATIONS, homeConnectRowsPorts({
 			api: defaultIntegrationApiOver(this.ctx.api),
+			secrets: this.ctx.secrets ?? null,
 			records,
 			warn: (message) => this.ctx.logger.warn(message)
 		})));

package/dist/homecom/addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_bosch_instances = require("../bosch-instances-CXmuRkef.js");
-const require_account_integration_offline = require("../account-integration-offline-Bnm17sAE.js");
+const require_bosch_instances = require("../bosch-instances-Y9sMCElY.js");
+const require_account_integration_offline = require("../account-integration-offline-CeMaWElV.js");
 let node_crypto = require("node:crypto");
 //#region src/homecom/config.ts
 var HOMECOM_BRANDS = ["bosch", "buderus"];
@@ -1227,8 +1227,13 @@ function finishedFromGateways(tokens, resolved, listFailure) {
 var homeComSignInAttempts = require_account_integration_offline.createSignInAttemptStore();
 //#endregion
 //#region src/homecom/homecom-sign-in-proxy.ts
-/** SingleKey ID serves the whole HomeCom login. (Not verified against the live pages: no vendor credentials.) */
-var HOMECOM_LOGIN_HOSTS = ["singlekey-id.com"];
+/**
+* SingleKey ID serves the HomeCom login page; its scripts and styles come from `cdn.singlekey-id.com`
+* as `type=module` + `crossorigin` files, which the CDN does not CORS-enable for another origin —
+* served from the hub origin through the proxy they load, loaded directly they are refused and the
+* page has no script (only the email field, no way to continue).
+*/
+var HOMECOM_LOGIN_HOSTS = ["singlekey-id.com", "cdn.singlekey-id.com"];
 var HOMECOM_APP_SCHEME = HOMECOM_REDIRECT_URI.slice(0, HOMECOM_REDIRECT_URI.indexOf("://") + 3);
 var homeComSignInClaims = require_account_integration_offline.createSignInClaims();
 /** Start an attempt whose `authorizeUrl` is the hub-relative proxied login page. */
@@ -2193,6 +2198,7 @@ var BoschHomeComProviderAddon = class extends require_bosch_instances.BaseDevice
 		await records.declare(homeComRecordKinds);
 		await this.runMigrations(require_bosch_instances.defineAddonMigrations(HOMECOM_MIGRATIONS, homeComRowsPorts({
 			api: require_bosch_instances.defaultIntegrationApiOver(this.ctx.api),
+			secrets: this.ctx.secrets ?? null,
 			records,
 			warn: (message) => this.ctx.logger.warn(message)
 		})));

package/dist/homecom/addon.mjs

@@ -1,5 +1,5 @@
-import { $ as errMsg, F as defineAddonMigrations, G as number, H as array, I as defineCustomActions, J as string, K as object, L as defineEntryKind, M as waterHeaterCapability, P as customAction, Q as DeviceType, R as entryBody, U as boolean, V as _enum, W as literal, _ as defaultIntegrationApiOver, a as BaseDevice, d as VendorLoginProxy, et as EventCategory, h as connectionTestCapability, i as testBoschInstance, l as RecordIntegrationInstances, m as climateControlCapability, n as boschRowsPorts, o as BaseDeviceProvider, r as keepBodyKeys, t as boschRowsMigration, v as deviceAdoptionCapability, w as integrationInstancesCapability } from "../bosch-instances-BIvOtuzj.mjs";
-import { a as createSignInAttemptStore, i as openSignInProxy, n as cascadeRemoveDevicesForIntegration, o as loginFailureForAttempt, r as createSignInClaims, s as parseOAuthCallback, t as setIntegrationDevicesOnline } from "../account-integration-offline-9ooJuNrN.mjs";
+import { $ as errMsg, F as defineAddonMigrations, G as number, H as array, I as defineCustomActions, J as string, K as object, L as defineEntryKind, M as waterHeaterCapability, P as customAction, Q as DeviceType, R as entryBody, U as boolean, V as _enum, W as literal, _ as defaultIntegrationApiOver, a as BaseDevice, d as VendorLoginProxy, et as EventCategory, h as connectionTestCapability, i as testBoschInstance, l as RecordIntegrationInstances, m as climateControlCapability, n as boschRowsPorts, o as BaseDeviceProvider, r as keepBodyKeys, t as boschRowsMigration, v as deviceAdoptionCapability, w as integrationInstancesCapability } from "../bosch-instances-CIuDwXQ8.mjs";
+import { a as createSignInAttemptStore, i as openSignInProxy, n as cascadeRemoveDevicesForIntegration, o as loginFailureForAttempt, r as createSignInClaims, s as parseOAuthCallback, t as setIntegrationDevicesOnline } from "../account-integration-offline-DhHNdL3k.mjs";
 import { createHash, randomBytes } from "node:crypto";
 //#region src/homecom/config.ts
 var HOMECOM_BRANDS = ["bosch", "buderus"];
@@ -1226,8 +1226,13 @@ function finishedFromGateways(tokens, resolved, listFailure) {
 var homeComSignInAttempts = createSignInAttemptStore();
 //#endregion
 //#region src/homecom/homecom-sign-in-proxy.ts
-/** SingleKey ID serves the whole HomeCom login. (Not verified against the live pages: no vendor credentials.) */
-var HOMECOM_LOGIN_HOSTS = ["singlekey-id.com"];
+/**
+* SingleKey ID serves the HomeCom login page; its scripts and styles come from `cdn.singlekey-id.com`
+* as `type=module` + `crossorigin` files, which the CDN does not CORS-enable for another origin —
+* served from the hub origin through the proxy they load, loaded directly they are refused and the
+* page has no script (only the email field, no way to continue).
+*/
+var HOMECOM_LOGIN_HOSTS = ["singlekey-id.com", "cdn.singlekey-id.com"];
 var HOMECOM_APP_SCHEME = HOMECOM_REDIRECT_URI.slice(0, HOMECOM_REDIRECT_URI.indexOf("://") + 3);
 var homeComSignInClaims = createSignInClaims();
 /** Start an attempt whose `authorizeUrl` is the hub-relative proxied login page. */
@@ -2192,6 +2197,7 @@ var BoschHomeComProviderAddon = class extends BaseDeviceProvider {
 		await records.declare(homeComRecordKinds);
 		await this.runMigrations(defineAddonMigrations(HOMECOM_MIGRATIONS, homeComRowsPorts({
 			api: defaultIntegrationApiOver(this.ctx.api),
+			secrets: this.ctx.secrets ?? null,
 			records,
 			warn: (message) => this.ctx.logger.warn(message)
 		})));

package/dist/shc/addon.js

@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 //#region \0rolldown/runtime.js
 var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
 //#endregion
-const require_bosch_instances = require("../bosch-instances-CXmuRkef.js");
+const require_bosch_instances = require("../bosch-instances-Y9sMCElY.js");
 let node_crypto = require("node:crypto");
 let node_https = require("node:https");
 let node_child_process = require("node:child_process");
@@ -23845,6 +23845,7 @@ var BoschShcProviderAddon = class extends require_bosch_instances.BaseDeviceProv
 		await records.declare(shcRecordKinds);
 		await this.runMigrations(require_bosch_instances.defineAddonMigrations(SHC_MIGRATIONS, shcRowsPorts({
 			api: require_bosch_instances.defaultIntegrationApiOver(this.ctx.api),
+			secrets: this.ctx.secrets ?? null,
 			records,
 			warn: (message) => this.ctx.logger.warn(message)
 		})));

package/dist/shc/addon.mjs

@@ -1,4 +1,4 @@
-import { $ as errMsg, A as switchCapability, F as defineAddonMigrations, G as number, H as array, I as defineCustomActions, J as string, K as object, L as defineEntryKind, P as customAction, Q as DeviceType, R as entryBody, S as heatingValveCapability, V as _enum, W as literal, _ as defaultIntegrationApiOver, a as BaseDevice, et as EventCategory, f as batteryCapability, h as connectionTestCapability, i as testBoschInstance, j as temperatureSensorCapability, l as RecordIntegrationInstances, m as climateControlCapability, n as boschRowsPorts, o as BaseDeviceProvider, r as keepBodyKeys, t as boschRowsMigration, v as deviceAdoptionCapability, w as integrationInstancesCapability } from "../bosch-instances-BIvOtuzj.mjs";
+import { $ as errMsg, A as switchCapability, F as defineAddonMigrations, G as number, H as array, I as defineCustomActions, J as string, K as object, L as defineEntryKind, P as customAction, Q as DeviceType, R as entryBody, S as heatingValveCapability, V as _enum, W as literal, _ as defaultIntegrationApiOver, a as BaseDevice, et as EventCategory, f as batteryCapability, h as connectionTestCapability, i as testBoschInstance, j as temperatureSensorCapability, l as RecordIntegrationInstances, m as climateControlCapability, n as boschRowsPorts, o as BaseDeviceProvider, r as keepBodyKeys, t as boschRowsMigration, v as deviceAdoptionCapability, w as integrationInstancesCapability } from "../bosch-instances-CIuDwXQ8.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { request } from "node:https";
@@ -23846,6 +23846,7 @@ var BoschShcProviderAddon = class extends BaseDeviceProvider {
 		await records.declare(shcRecordKinds);
 		await this.runMigrations(defineAddonMigrations(SHC_MIGRATIONS, shcRowsPorts({
 			api: defaultIntegrationApiOver(this.ctx.api),
+			secrets: this.ctx.secrets ?? null,
 			records,
 			warn: (message) => this.ctx.logger.warn(message)
 		})));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-bosch",
-  "version": "0.1.36",
+  "version": "0.1.38",
   "description": "Bosch smart-home device-provider addons for CamStack — SHC, Home Connect, and HomeCom cloud integrations (scaffold)",
   "keywords": [
     "camstack",
@@ -141,7 +141,7 @@
       }
     ],
     "requires": {
-      "server": ">=1.2.765"
+      "server": ">=1.2.778"
     }
   },
   "files": [