@camstack/addon-provider-bosch 0.1.42 → 0.1.44

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.1.44] - 2026-11-09
+
+### Changed
+
+- Bosch HomeCom and Home Connect sign-in no longer go through the hub login proxy: the form explains how to sign in with SingleKey ID in your own browser and copy the address back, in English and Italian.
+
+## [0.1.43] - 2026-11-08
+
+### Changed
+
+- Its integration-instances provider declares its instance kind and stamps it on every instance.
+
 ## [0.1.42] - 2026-11-06
 
 ### Changed

package/dist/{account-integration-offline-D2xBMGsR.js → account-integration-offline-CFyuKmsG.js}

@@ -1,5 +1,10 @@
-const require_bosch_instances = require("./bosch-instances-CINVxMF_.js");
+const require_bosch_instances = require("./bosch-instances-CXMUquuA.js");
 let node_crypto = require("node:crypto");
+//#region src/shared/sign-in-redirects.ts
+/** The addresses each vendor sends the browser to after a sign-in; no browser can open them. Kept free of imports so the form schema can name them. */
+var HOMECOM_REDIRECT_URI = "com.bosch.tt.dashtt.pointt://app/login";
+var HOME_CONNECT_REDIRECT_URI = "hcauth://auth/prod";
+//#endregion
 //#region src/shared/oauth-callback.ts
 /** A code on its own: no scheme, no query, no separators. */
 var BARE_CODE = /^[A-Za-z0-9._~-]+$/;
@@ -118,118 +123,50 @@ function loginFailureForAttempt(reason) {
 	return reason === "expired" ? "code-rejected" : "state-mismatch";
 }
 //#endregion
-//#region src/shared/login-proxy-sign-in.ts
-function createSignInClaims(ttlMs = SIGN_IN_ATTEMPT_TTL_MS) {
-	const parked = /* @__PURE__ */ new Map();
-	return {
-		settle(attemptId, outcome, nowMs) {
-			parked.set(attemptId, {
-				outcome,
-				expiresAtMs: nowMs + ttlMs
-			});
-		},
-		claim(attemptId, nowMs) {
-			const found = parked.get(attemptId);
-			if (found === void 0) return { state: "pending" };
-			parked.delete(attemptId);
-			if (nowMs > found.expiresAtMs) return { state: "pending" };
-			if (!found.outcome.ok) throw new Error(found.outcome.message);
-			return {
-				state: "done",
-				result: found.outcome.result
-			};
-		}
-	};
-}
-/** An `&`-escaped address inside HTML is the same address. */
-function unescapeHtml(text) {
-	return text.replace(/&/g, "&");
-}
-/**
-* Terminal condition for an app-scheme redirect: the `Location` of a response, or — when the
-* vendor's page navigates by script — the first address in its body, that starts with the app
-* scheme.
-*/
-function appSchemeTerminal(scheme) {
-	const inBody = new RegExp(`${scheme.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}[^"'<>\\s\\\\]+`);
-	return (view) => {
-		if (view.location !== null && view.location.startsWith(scheme)) return {
-			kind: "done",
-			payload: view.location
-		};
-		const fromBody = view.bodyText === null ? null : inBody.exec(unescapeHtml(view.bodyText));
-		if (fromBody !== null) return {
-			kind: "done",
-			payload: fromBody[0]
-		};
-		return { kind: "continue" };
-	};
-}
-/** The result-page reason code for a sign-in failure reason (`HomeConnectLoginFailure`, …). */
-function landingReasonForLogin(reason) {
-	switch (reason) {
-		case "denied": return "access_denied";
-		case "state-mismatch":
-		case "state-missing": return "invalid_state";
-		case "empty":
-		case "no-code": return "invalid_request";
-		case "code-rejected":
-		case "rejected": return "exchange_failed";
-		case "no-refresh": return "no_refresh_token";
-		default: return "unknown";
+//#region src/shared/sign-in-guide.ts
+var SIGN_IN_GUIDE_STEPS = [
+	{
+		id: "open",
+		text: (g) => `1. Click “Sign in with ${g.providerName}”. The sign-in page opens in a new tab of your own browser (it cannot be shown inside CamStack).`
+	},
+	{
+		id: "login",
+		text: () => "2. Sign in there with your SingleKey ID: email, password and the one-time code if you are asked for one."
+	},
+	{
+		id: "redirect",
+		text: (g) => `3. When you finish, the browser tries to open the Bosch app and fails or shows an empty page. That is expected: the address it tried to open is what CamStack needs. It starts with ${g.redirectStart}`
+	},
+	{
+		id: "chrome",
+		text: (g) => `Chrome, Edge, Brave: before you sign in press F12, open Network and tick “Preserve log”. After the failure pick the last request whose address starts with ${g.redirectStart} and use right click, Copy, Copy URL (or copy the address from the error line in the Console).`
+	},
+	{
+		id: "firefox",
+		text: () => "Firefox: before you sign in press F12, open Network, open the gear menu and enable “Persist Logs”. After the failure right click the last request, Copy Value, Copy URL."
+	},
+	{
+		id: "safari",
+		text: () => "Safari: enable the Develop menu (Settings, Advanced), then Develop, Show Web Inspector, Network, and keep “Preserve Log” on. After the failure copy the address of the last request. Safari may also show the address in its “cannot open” message."
+	},
+	{
+		id: "phone",
+		text: () => "Phone or tablet: the failed address often stays in the address bar; press and hold it to copy. If it does not, repeat the sign-in from a computer."
+	},
+	{
+		id: "paste",
+		text: () => "4. Paste the whole address (or only the code after “code=”) in the box that appears under the button. The sign-in completes by itself; the code is valid for about ten minutes."
 	}
-}
-function reasonOf(err) {
-	if (typeof err === "object" && err !== null && "reason" in err) {
-		const reason = err.reason;
-		if (typeof reason === "string") return reason;
-	}
-	return "unknown";
-}
-/**
-* Open the proxied login for one attempt and return the hub-relative path the browser opens.
-* A failed exchange is parked as an operator-facing message and the browser lands on the
-* result page with a reason code; nothing about the captured address leaves this function.
-*/
-function openSignInProxy(input) {
-	const started = input.nowMs();
-	input.proxy.open({
-		attemptId: input.attemptId,
-		expiresAtMs: started + SIGN_IN_ATTEMPT_TTL_MS,
-		upstreams: input.hosts.map((host) => ({
-			host,
-			scheme: input.scheme ?? "https"
-		})),
-		terminal: appSchemeTerminal(input.appScheme),
-		serverCookieJar: true,
-		onDone: async (callback) => {
-			try {
-				const result = await input.finish(callback);
-				input.claims.settle(input.attemptId, {
-					ok: true,
-					result
-				}, input.nowMs());
-				return {
-					status: "success",
-					addonId: input.addonId
-				};
-			} catch (err) {
-				const message = err instanceof Error ? err.message : "The sign-in failed.";
-				input.claims.settle(input.attemptId, {
-					ok: false,
-					message
-				}, input.nowMs());
-				return {
-					status: "error",
-					addonId: input.addonId,
-					reason: landingReasonForLogin(reasonOf(err))
-				};
-			}
-		}
-	});
-	const entry = input.proxy.entryPath(input.attemptId, input.authorizeUrl);
-	if (entry === null) throw new Error("The sign-in page host is not reachable through the proxy.");
-	return entry;
+];
+/** The info rows shown above the sign-in button: what to do and where each value comes from. */
+function buildSignInGuideFields(input) {
+	return SIGN_IN_GUIDE_STEPS.map((step) => ({
+		type: "info",
+		key: `${input.keyPrefix}-guide-${step.id}`,
+		label: step.text(input),
+		labelKey: `provider-bosch:${input.i18nPrefix}.${input.keyPrefix}-guide-${step.id}.label`,
+		content: ""
+	}));
 }
 //#endregion
 //#region src/shared/account-integration-cascade.ts
@@ -269,34 +206,40 @@ function setIntegrationDevicesOnline(devices, system, integrationId, online) {
 	return count;
 }
 //#endregion
-Object.defineProperty(exports, "cascadeRemoveDevicesForIntegration", {
+Object.defineProperty(exports, "HOMECOM_REDIRECT_URI", {
 	enumerable: true,
 	get: function() {
-		return cascadeRemoveDevicesForIntegration;
+		return HOMECOM_REDIRECT_URI;
 	}
 });
-Object.defineProperty(exports, "createSignInAttemptStore", {
+Object.defineProperty(exports, "HOME_CONNECT_REDIRECT_URI", {
 	enumerable: true,
 	get: function() {
-		return createSignInAttemptStore;
+		return HOME_CONNECT_REDIRECT_URI;
 	}
 });
-Object.defineProperty(exports, "createSignInClaims", {
+Object.defineProperty(exports, "buildSignInGuideFields", {
 	enumerable: true,
 	get: function() {
-		return createSignInClaims;
+		return buildSignInGuideFields;
 	}
 });
-Object.defineProperty(exports, "loginFailureForAttempt", {
+Object.defineProperty(exports, "cascadeRemoveDevicesForIntegration", {
 	enumerable: true,
 	get: function() {
-		return loginFailureForAttempt;
+		return cascadeRemoveDevicesForIntegration;
 	}
 });
-Object.defineProperty(exports, "openSignInProxy", {
+Object.defineProperty(exports, "createSignInAttemptStore", {
 	enumerable: true,
 	get: function() {
-		return openSignInProxy;
+		return createSignInAttemptStore;
+	}
+});
+Object.defineProperty(exports, "loginFailureForAttempt", {
+	enumerable: true,
+	get: function() {
+		return loginFailureForAttempt;
 	}
 });
 Object.defineProperty(exports, "parseOAuthCallback", {

package/dist/{account-integration-offline-cC99EePp.mjs → account-integration-offline-IHodWmhD.mjs}

@@ -1,5 +1,10 @@
-import { Z as errMsg } from "./bosch-instances-BmvHlGiY.mjs";
+import { J as errMsg } from "./bosch-instances-C8FRjQzC.mjs";
 import { randomBytes } from "node:crypto";
+//#region src/shared/sign-in-redirects.ts
+/** The addresses each vendor sends the browser to after a sign-in; no browser can open them. Kept free of imports so the form schema can name them. */
+var HOMECOM_REDIRECT_URI = "com.bosch.tt.dashtt.pointt://app/login";
+var HOME_CONNECT_REDIRECT_URI = "hcauth://auth/prod";
+//#endregion
 //#region src/shared/oauth-callback.ts
 /** A code on its own: no scheme, no query, no separators. */
 var BARE_CODE = /^[A-Za-z0-9._~-]+$/;
@@ -118,118 +123,50 @@ function loginFailureForAttempt(reason) {
 	return reason === "expired" ? "code-rejected" : "state-mismatch";
 }
 //#endregion
-//#region src/shared/login-proxy-sign-in.ts
-function createSignInClaims(ttlMs = SIGN_IN_ATTEMPT_TTL_MS) {
-	const parked = /* @__PURE__ */ new Map();
-	return {
-		settle(attemptId, outcome, nowMs) {
-			parked.set(attemptId, {
-				outcome,
-				expiresAtMs: nowMs + ttlMs
-			});
-		},
-		claim(attemptId, nowMs) {
-			const found = parked.get(attemptId);
-			if (found === void 0) return { state: "pending" };
-			parked.delete(attemptId);
-			if (nowMs > found.expiresAtMs) return { state: "pending" };
-			if (!found.outcome.ok) throw new Error(found.outcome.message);
-			return {
-				state: "done",
-				result: found.outcome.result
-			};
-		}
-	};
-}
-/** An `&`-escaped address inside HTML is the same address. */
-function unescapeHtml(text) {
-	return text.replace(/&/g, "&");
-}
-/**
-* Terminal condition for an app-scheme redirect: the `Location` of a response, or — when the
-* vendor's page navigates by script — the first address in its body, that starts with the app
-* scheme.
-*/
-function appSchemeTerminal(scheme) {
-	const inBody = new RegExp(`${scheme.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}[^"'<>\\s\\\\]+`);
-	return (view) => {
-		if (view.location !== null && view.location.startsWith(scheme)) return {
-			kind: "done",
-			payload: view.location
-		};
-		const fromBody = view.bodyText === null ? null : inBody.exec(unescapeHtml(view.bodyText));
-		if (fromBody !== null) return {
-			kind: "done",
-			payload: fromBody[0]
-		};
-		return { kind: "continue" };
-	};
-}
-/** The result-page reason code for a sign-in failure reason (`HomeConnectLoginFailure`, …). */
-function landingReasonForLogin(reason) {
-	switch (reason) {
-		case "denied": return "access_denied";
-		case "state-mismatch":
-		case "state-missing": return "invalid_state";
-		case "empty":
-		case "no-code": return "invalid_request";
-		case "code-rejected":
-		case "rejected": return "exchange_failed";
-		case "no-refresh": return "no_refresh_token";
-		default: return "unknown";
-	}
-}
-function reasonOf(err) {
-	if (typeof err === "object" && err !== null && "reason" in err) {
-		const reason = err.reason;
-		if (typeof reason === "string") return reason;
+//#region src/shared/sign-in-guide.ts
+var SIGN_IN_GUIDE_STEPS = [
+	{
+		id: "open",
+		text: (g) => `1. Click “Sign in with ${g.providerName}”. The sign-in page opens in a new tab of your own browser (it cannot be shown inside CamStack).`
+	},
+	{
+		id: "login",
+		text: () => "2. Sign in there with your SingleKey ID: email, password and the one-time code if you are asked for one."
+	},
+	{
+		id: "redirect",
+		text: (g) => `3. When you finish, the browser tries to open the Bosch app and fails or shows an empty page. That is expected: the address it tried to open is what CamStack needs. It starts with ${g.redirectStart}`
+	},
+	{
+		id: "chrome",
+		text: (g) => `Chrome, Edge, Brave: before you sign in press F12, open Network and tick “Preserve log”. After the failure pick the last request whose address starts with ${g.redirectStart} and use right click, Copy, Copy URL (or copy the address from the error line in the Console).`
+	},
+	{
+		id: "firefox",
+		text: () => "Firefox: before you sign in press F12, open Network, open the gear menu and enable “Persist Logs”. After the failure right click the last request, Copy Value, Copy URL."
+	},
+	{
+		id: "safari",
+		text: () => "Safari: enable the Develop menu (Settings, Advanced), then Develop, Show Web Inspector, Network, and keep “Preserve Log” on. After the failure copy the address of the last request. Safari may also show the address in its “cannot open” message."
+	},
+	{
+		id: "phone",
+		text: () => "Phone or tablet: the failed address often stays in the address bar; press and hold it to copy. If it does not, repeat the sign-in from a computer."
+	},
+	{
+		id: "paste",
+		text: () => "4. Paste the whole address (or only the code after “code=”) in the box that appears under the button. The sign-in completes by itself; the code is valid for about ten minutes."
 	}
-	return "unknown";
-}
-/**
-* Open the proxied login for one attempt and return the hub-relative path the browser opens.
-* A failed exchange is parked as an operator-facing message and the browser lands on the
-* result page with a reason code; nothing about the captured address leaves this function.
-*/
-function openSignInProxy(input) {
-	const started = input.nowMs();
-	input.proxy.open({
-		attemptId: input.attemptId,
-		expiresAtMs: started + SIGN_IN_ATTEMPT_TTL_MS,
-		upstreams: input.hosts.map((host) => ({
-			host,
-			scheme: input.scheme ?? "https"
-		})),
-		terminal: appSchemeTerminal(input.appScheme),
-		serverCookieJar: true,
-		onDone: async (callback) => {
-			try {
-				const result = await input.finish(callback);
-				input.claims.settle(input.attemptId, {
-					ok: true,
-					result
-				}, input.nowMs());
-				return {
-					status: "success",
-					addonId: input.addonId
-				};
-			} catch (err) {
-				const message = err instanceof Error ? err.message : "The sign-in failed.";
-				input.claims.settle(input.attemptId, {
-					ok: false,
-					message
-				}, input.nowMs());
-				return {
-					status: "error",
-					addonId: input.addonId,
-					reason: landingReasonForLogin(reasonOf(err))
-				};
-			}
-		}
-	});
-	const entry = input.proxy.entryPath(input.attemptId, input.authorizeUrl);
-	if (entry === null) throw new Error("The sign-in page host is not reachable through the proxy.");
-	return entry;
+];
+/** The info rows shown above the sign-in button: what to do and where each value comes from. */
+function buildSignInGuideFields(input) {
+	return SIGN_IN_GUIDE_STEPS.map((step) => ({
+		type: "info",
+		key: `${input.keyPrefix}-guide-${step.id}`,
+		label: step.text(input),
+		labelKey: `provider-bosch:${input.i18nPrefix}.${input.keyPrefix}-guide-${step.id}.label`,
+		content: ""
+	}));
 }
 //#endregion
 //#region src/shared/account-integration-cascade.ts
@@ -269,4 +206,4 @@ function setIntegrationDevicesOnline(devices, system, integrationId, online) {
 	return count;
 }
 //#endregion
-export { createSignInAttemptStore as a, openSignInProxy as i, cascadeRemoveDevicesForIntegration as n, loginFailureForAttempt as o, createSignInClaims as r, parseOAuthCallback as s, setIntegrationDevicesOnline as t };
+export { loginFailureForAttempt as a, HOME_CONNECT_REDIRECT_URI as c, createSignInAttemptStore as i, cascadeRemoveDevicesForIntegration as n, parseOAuthCallback as o, buildSignInGuideFields as r, HOMECOM_REDIRECT_URI as s, setIntegrationDevicesOnline as t };