@camstack/addon-provider-bosch 0.1.43 → 0.1.45

package/dist/homecom/addon.mjs

@@ -1,5 +1,5 @@
-import { A as RecordIntegrationInstances, B as array, F as entryBody, H as literal, K as string, M as customAction, N as defineCustomActions, P as defineEntryKind, Q as EventCategory, R as rowsDepsOver, U as number, V as boolean, W as object, X as DeviceType, Z as errMsg, a as BaseDevice, h as deviceAdoptionCapability, i as testBoschInstance, k as waterHeaterCapability, n as boschRowsPorts, o as BaseDeviceProvider, p as climateControlCapability, r as keepBodyKeys, t as boschRowsMigration, u as VendorLoginProxy, x as integrationInstancesCapability, z as _enum } from "../bosch-instances-BtKXLOoG.mjs";
-import { a as createSignInAttemptStore, i as openSignInProxy, n as cascadeRemoveDevicesForIntegration, o as loginFailureForAttempt, r as createSignInClaims, s as parseOAuthCallback, t as setIntegrationDevicesOnline } from "../account-integration-offline-BrrnCsrl.mjs";
+import { A as RecordIntegrationInstances, B as array, F as entryBody, G as string, H as number, M as customAction, N as defineCustomActions, P as defineEntryKind, R as rowsDepsOver, U as object, V as literal, X as errMsg, Y as DeviceType, Z as EventCategory, _ as heatPumpControlCapability, a as BaseDevice, d as climateControlCapability, i as testBoschInstance, k as waterHeaterCapability, n as boschRowsPorts, o as BaseDeviceProvider, p as deviceAdoptionCapability, r as keepBodyKeys, t as boschRowsMigration, v as heatPumpStatusCapability, x as integrationInstancesCapability, z as _enum } from "../bosch-instances-DXID-jMD.mjs";
+import { a as loginFailureForAttempt, i as createSignInAttemptStore, n as cascadeRemoveDevicesForIntegration, o as parseOAuthCallback, r as buildSignInGuideFields, s as HOMECOM_REDIRECT_URI, t as setIntegrationDevicesOnline } from "../account-integration-offline-DAEciV_Q.mjs";
 import { createHash, randomBytes } from "node:crypto";
 //#region src/homecom/config.ts
 var HOMECOM_BRANDS = ["bosch", "buderus"];
@@ -45,23 +45,22 @@ var HIDDEN_UNTIL_ADVANCED = {
 	field: "__hidden__",
 	equals: "yes"
 };
-var HOMECOM_CODE_HELP = "If the page does not finish, copy the address it stops on (it starts with com.bosch.tt.dashtt.pointt://app/login?code=) or only the code, and paste it in the box under the sign-in button.";
+var HOMECOM_SIGN_IN_GUIDE = {
+	i18nPrefix: "homecom.s_account",
+	keyPrefix: "__homecom",
+	providerName: "SingleKey ID",
+	redirectStart: `${HOMECOM_REDIRECT_URI}?code=`
+};
 function buildHomeComFormSchema() {
 	return { sections: [{
 		id: "account",
 		title: "HomeCom account",
 		titleKey: "provider-bosch:homecom.s_account.title",
-		description: "Sign in with your SingleKey ID. A new tab opens the sign-in page through this hub and finishes on its own.",
+		description: "Sign in with your SingleKey ID in your own browser, then paste the address the browser stops on.",
 		descriptionKey: "provider-bosch:homecom.s_account.description",
 		columns: 1,
 		fields: [
-			{
-				type: "info",
-				key: "__homecom-code-help",
-				label: HOMECOM_CODE_HELP,
-				labelKey: "provider-bosch:homecom.s_account.__homecom-code-help.label",
-				content: ""
-			},
+			...buildSignInGuideFields(HOMECOM_SIGN_IN_GUIDE),
 			{
 				type: "account-sign-in",
 				addonId: "bosch-homecom",
@@ -71,7 +70,6 @@ function buildHomeComFormSchema() {
 				providerLabel: "SingleKey ID",
 				beginAction: "beginSignIn",
 				completeAction: "finishSignIn",
-				claimAction: "claimSignIn",
 				signOutAction: "signOut",
 				accountKey: "accountLabel",
 				countKey: "gatewayCount",
@@ -214,27 +212,6 @@ var homeComActions = defineCustomActions({
 		kind: "mutation",
 		auth: "admin"
 	}),
-	/**
-	* The form asks while the proxied login page is open: `pending` until the hub captured the
-	* app-scheme redirect and finished the exchange, then the same fields `finishSignIn` returns.
-	* Claimed once. A failed exchange answers with its operator-facing message as an error.
-	*/
-	claimSignIn: customAction(object({ attemptId: string().min(1) }), object({
-		pending: boolean(),
-		token: string().optional().meta({ secret: true }),
-		refresh: string().optional().meta({ secret: true }),
-		username: string().optional().meta({ secret: true }),
-		accountLabel: string().optional(),
-		gatewayCount: number().optional(),
-		summary: string().optional(),
-		gatewayId: string().optional(),
-		brand: HomeComBrandSchema.optional(),
-		region: HomeComRegionSchema.optional(),
-		choices: array(gatewayChoice).optional()
-	}), {
-		kind: "mutation",
-		auth: "admin"
-	}),
 	signOut: customAction(object({}), object({
 		signedOut: literal(true),
 		summary: string()
@@ -289,37 +266,6 @@ function unsupportedDeviceTypeMessage(deviceType) {
 	return new HomeComUnknownDeviceTypeError(deviceType ?? "(missing)").message;
 }
 //#endregion
-//#region src/homecom/homecom-oauth.ts
-/**
-* Public OAuth client of the HomeCom Easy app, signed in through SingleKey ID.
-*
-* A PKCE client has no secret. The values are the ones SingleKey accepts for this client id
-* today: the same authorize query the MIT-licensed `homecom_alt` client records
-* (`OAUTH_LOGIN_PARAMS` — parameters, not copied code) and that the Home Assistant integration
-* opens. `pointt.gateway.resource.dopair` is not a scope this client may request; SingleKey
-* answers `misconfigured-application` and never shows the login page. The scope it does accept
-* names `pointt.gateway.resource.dashapp`, and the Bosch app sends `style_id=tt_bsch`.
-*/
-var HOMECOM_CLIENT_ID = "762162C0-FA2D-4540-AE66-6489F189FADC";
-var HOMECOM_REDIRECT_URI = "com.bosch.tt.dashtt.pointt://app/login";
-var HOMECOM_AUTHORIZE_URL = "https://singlekey-id.com/auth/connect/authorize";
-var HOMECOM_TOKEN_URL = "https://singlekey-id.com/auth/connect/token";
-var HOMECOM_STYLE_ID = "tt_bsch";
-var HOMECOM_SCOPE = [
-	"openid",
-	"email",
-	"profile",
-	"offline_access",
-	"pointt.gateway.claiming",
-	"pointt.gateway.removal",
-	"pointt.gateway.list",
-	"pointt.gateway.users",
-	"pointt.gateway.resource.dashapp",
-	"pointt.castt.flow.token-exchange",
-	"bacon",
-	"hcc.tariff.read"
-].join(" ");
-//#endregion
 //#region src/homecom/homecom-domain-mapping.ts
 var MODE_MAP = {
 	Off: "off",
@@ -740,6 +686,352 @@ function isRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 //#endregion
+//#region src/homecom/homecom-heat-pump.ts
+/**
+* Heat-pump resources of a hydronic gateway (D1026).
+*
+* UNVERIFIED: the paths below come from the layout of the public HomeCom Easy
+* tree as the MIT `homecom_alt` library lists it, and were not checked against a
+* live heat pump. They live in this one table so a wrong path is a one-line
+* fix, and a resource the gateway does not answer reads as `null` (never 0),
+* which the hero then simply does not draw.
+*/
+var HEAT_PUMP_PATHS = {
+	system: {
+		silent: "/heatSources/hs1/silentMode",
+		away: "/system/awayMode",
+		additionalHeater: "/heatSources/hs1/additionalHeaterMode",
+		holiday: "/system/holidayMode"
+	},
+	readings: {
+		thermalW: "/heatSources/hs1/heatPumpPower",
+		electricalW: "/heatSources/hs1/electricalPower",
+		compressorPct: "/heatSources/hs1/compressorModulation",
+		supply: "/heatSources/hs1/supplyTemperature",
+		return: "/heatSources/hs1/returnTemperature",
+		outdoor: "/system/sensors/temperatures/outdoor_t1",
+		thermalKwh: "/recordings/heatSources/total/thermalEnergy",
+		electricalKwh: "/recordings/heatSources/total/electricalEnergy",
+		pressureBar: "/heatSources/hs1/waterPressure",
+		starts: "/heatSources/hs1/numberOfStarts"
+	},
+	circuit: {
+		operationMode: "operationMode",
+		heatCoolMode: "heatCoolMode",
+		summerWinter: "suWiSwitchMode",
+		comfort: "temperatureLevels/comfort2",
+		eco: "temperatureLevels/eco",
+		maxFlow: "maxSupplyTemperature",
+		current: "roomtemperature",
+		target: "currentRoomSetpoint"
+	},
+	dhw: {
+		operationMode: "operationMode",
+		level: "currentTemperatureLevel",
+		chargeDuration: "charge/duration",
+		charge: "charge",
+		current: "actualTemp",
+		target: "currentSetpoint"
+	}
+};
+/** A write the gateway would refuse, caught before it is sent. */
+var HomeComHeatPumpRefusalError = class extends Error {
+	name = "HomeComHeatPumpRefusalError";
+};
+async function readHeatPump(input) {
+	const get = safeGet(input.get, input.onFailure);
+	const circuits = await Promise.all([...input.circuitIds.hc.map((id) => readHc(get, id)), ...input.circuitIds.dhw.map((id) => readDhwCircuit(get, id))]);
+	const r = HEAT_PUMP_PATHS.readings;
+	const s = HEAT_PUMP_PATHS.system;
+	const [silent, away, additionalHeater, holiday] = await Promise.all([
+		setting(get, s.silent),
+		setting(get, s.away),
+		setting(get, s.additionalHeater),
+		setting(get, s.holiday)
+	]);
+	const [thermalW, electricalW, compressorPct, supply, ret, outdoor] = await Promise.all([
+		num(get, r.thermalW),
+		num(get, r.electricalW),
+		num(get, r.compressorPct),
+		num(get, r.supply),
+		num(get, r.return),
+		num(get, r.outdoor)
+	]);
+	const [thermalKwh, electricalKwh, pressureBar, starts] = await Promise.all([
+		num(get, r.thermalKwh),
+		num(get, r.electricalKwh),
+		num(get, r.pressureBar),
+		num(get, r.starts)
+	]);
+	return {
+		circuits,
+		silent,
+		away,
+		additionalHeater,
+		holiday,
+		thermalW,
+		electricalW,
+		compressorPct,
+		supply,
+		return: ret,
+		outdoor,
+		thermalKwh,
+		electricalKwh,
+		pressureBar,
+		starts
+	};
+}
+/** Any failure of a heat-pump read (HTTP 4xx/5xx, a throw) is "not answered", never an error. */
+function safeGet(get, onFailure) {
+	return async (path) => {
+		try {
+			return await get(path);
+		} catch (error) {
+			onFailure?.(path, error);
+			return null;
+		}
+	};
+}
+/**
+* True when a HEAT PUMP answered: silent mode, the auxiliary heater, heat-pump
+* power or compressor modulation. Flow temperatures, pressure and starts are left
+* out on purpose: a gas boiler's heat source answers those too, and it is no heat pump.
+*/
+function hasHeatSource(reading) {
+	return [
+		reading.silent,
+		reading.additionalHeater,
+		reading.thermalW,
+		reading.electricalW,
+		reading.compressorPct
+	].some((v) => v !== null);
+}
+async function readHc(get, id) {
+	const base = `/heatingCircuits/${id}`;
+	const p = HEAT_PUMP_PATHS.circuit;
+	const [operationMode, heatCoolMode, summerWinter, comfort, eco, maxFlow, current, target] = await Promise.all([
+		setting(get, `${base}/${p.operationMode}`),
+		setting(get, `${base}/${p.heatCoolMode}`),
+		setting(get, `${base}/${p.summerWinter}`),
+		setting(get, `${base}/${p.comfort}`),
+		setting(get, `${base}/${p.eco}`),
+		setting(get, `${base}/${p.maxFlow}`),
+		num(get, `${base}/${p.current}`),
+		num(get, `${base}/${p.target}`)
+	]);
+	return {
+		id,
+		kind: "hc",
+		currentTemp: current,
+		targetTemp: target,
+		operationMode,
+		heatCoolMode,
+		summerWinter,
+		comfort,
+		eco,
+		maxFlow,
+		level: null,
+		chargeDuration: null,
+		charge: null
+	};
+}
+async function readDhwCircuit(get, id) {
+	const base = `/dhwCircuits/${id}`;
+	const p = HEAT_PUMP_PATHS.dhw;
+	const [operationMode, level, chargeDuration, charge, current, target] = await Promise.all([
+		setting(get, `${base}/${p.operationMode}`),
+		setting(get, `${base}/${p.level}`),
+		setting(get, `${base}/${p.chargeDuration}`),
+		setting(get, `${base}/${p.charge}`),
+		num(get, `${base}/${p.current}`),
+		num(get, `${base}/${p.target}`)
+	]);
+	return {
+		id,
+		kind: "dhw",
+		currentTemp: current,
+		targetTemp: target,
+		operationMode,
+		heatCoolMode: null,
+		summerWinter: null,
+		comfort: null,
+		eco: null,
+		maxFlow: null,
+		level,
+		chargeDuration,
+		charge
+	};
+}
+async function setting(get, path) {
+	const envelope = readEnvelope(await get(path));
+	return envelope === null ? null : settingOf(path, envelope);
+}
+async function num(get, path) {
+	const envelope = readEnvelope(await get(path));
+	return envelope !== null && typeof envelope.value === "number" && Number.isFinite(envelope.value) ? envelope.value : null;
+}
+function settingOf(path, envelope) {
+	return {
+		path,
+		value: envelope.value,
+		min: envelope.min,
+		max: envelope.max,
+		allowed: envelope.allowed
+	};
+}
+function heatPumpStatusFrom(reading, now) {
+	return {
+		circuits: reading.circuits.map(circuitOf),
+		system: {
+			silent: optionOf(reading.silent),
+			away: optionOf(reading.away),
+			additionalHeater: optionOf(reading.additionalHeater),
+			holiday: optionOf(reading.holiday)
+		},
+		power: {
+			thermalW: reading.thermalW,
+			electricalW: reading.electricalW,
+			compressorPct: reading.compressorPct
+		},
+		temperatures: {
+			supply: reading.supply,
+			return: reading.return,
+			outdoor: reading.outdoor
+		},
+		energy: {
+			thermalKwh: reading.thermalKwh,
+			electricalKwh: reading.electricalKwh
+		},
+		waterPressureBar: reading.pressureBar,
+		starts: reading.starts,
+		lastFetchedAt: now
+	};
+}
+function circuitOf(c) {
+	const kind = kindOf(c);
+	const mode = textOf$1(c.operationMode);
+	return {
+		id: c.id,
+		kind,
+		label: labelOf(c),
+		icon: kind === "dhw" ? "droplets" : kind === "cooling" ? "snowflake" : "flame",
+		currentTemp: c.currentTemp,
+		targetTemp: c.targetTemp,
+		mode,
+		active: null,
+		operationMode: optionOf(c.operationMode),
+		heatCoolMode: optionOf(c.heatCoolMode),
+		summerWinter: optionOf(c.summerWinter),
+		comfortSetpoint: rangeOf(c.comfort),
+		ecoSetpoint: rangeOf(c.eco),
+		maxFlowTemp: rangeOf(c.maxFlow),
+		temperatureLevel: optionOf(c.level),
+		chargeDuration: rangeOf(c.chargeDuration),
+		extraHotWater: c.charge === null ? null : textOf$1(c.charge) === "start"
+	};
+}
+function kindOf(c) {
+	if (c.kind === "dhw") return "dhw";
+	return textOf$1(c.heatCoolMode) === "cooling" ? "cooling" : "heating";
+}
+function labelOf(c) {
+	const n = c.id.replace(/^\D+/, "");
+	if (c.kind === "dhw") return n === "1" || n === "" ? "Hot water" : `Hot water ${n}`;
+	return n === "" ? "Circuit" : `Circuit ${n}`;
+}
+function textOf$1(s) {
+	return s !== null && typeof s.value === "string" && s.value.length > 0 ? s.value : null;
+}
+function optionOf(s) {
+	if (s === null) return null;
+	return {
+		value: textOf$1(s),
+		allowed: [...s.allowed]
+	};
+}
+function rangeOf(s) {
+	if (s === null) return null;
+	return {
+		value: typeof s.value === "number" && Number.isFinite(s.value) ? s.value : null,
+		min: s.min,
+		max: s.max,
+		step: null
+	};
+}
+function requireCircuit(reading, circuitId, want) {
+	const found = reading.circuits.find((c) => c.id === circuitId && c.kind === want);
+	if (found === void 0) throw new HomeComHeatPumpRefusalError(`HomeCom heat pump has no ${want} circuit ${circuitId}`);
+	return found;
+}
+function optionWrite(s, what, mode) {
+	if (s === null) throw new HomeComHeatPumpRefusalError(`HomeCom heat pump: ${what} is not available`);
+	if (s.allowed.length === 0) throw new HomeComHeatPumpRefusalError(`HomeCom heat pump: ${what} is read-only on this gateway`);
+	if (!s.allowed.includes(mode)) throw new HomeComHeatPumpRefusalError(`HomeCom heat pump: "${mode}" is not an accepted value of ${what} (${s.allowed.join(", ")})`);
+	return {
+		path: s.path,
+		value: mode
+	};
+}
+function rangeWrite(s, what, value) {
+	if (s === null) throw new HomeComHeatPumpRefusalError(`HomeCom heat pump: ${what} is not available`);
+	if (!Number.isFinite(value)) throw new HomeComHeatPumpRefusalError(`HomeCom heat pump: ${what} needs a finite number`);
+	if (s.min === null || s.max === null) throw new HomeComHeatPumpRefusalError(`HomeCom heat pump: ${what} has no limits from the gateway`);
+	if (value < s.min || value > s.max) throw new HomeComHeatPumpRefusalError(`HomeCom heat pump: ${value} is outside ${what} limits ${s.min}..${s.max}`);
+	return {
+		path: s.path,
+		value
+	};
+}
+function systemModeWrite(reading, which, mode) {
+	return optionWrite(reading[which], `${which} mode`, mode);
+}
+function circuitOptionWrite(reading, circuitId, which, mode) {
+	return optionWrite(requireCircuit(reading, circuitId, "hc")[which], `${circuitId} ${which}`, mode);
+}
+function dhwOptionWrite(reading, circuitId, which, mode) {
+	return optionWrite(requireCircuit(reading, circuitId, "dhw")[which], `${circuitId} ${which}`, mode);
+}
+function circuitRangeWrite(reading, circuitId, which, value) {
+	return rangeWrite(requireCircuit(reading, circuitId, "hc")[which], `${circuitId} ${which}`, value);
+}
+function dhwChargeDurationWrite(reading, circuitId, minutes) {
+	return rangeWrite(requireCircuit(reading, circuitId, "dhw").chargeDuration, `${circuitId} charge duration`, minutes);
+}
+function extraHotWaterWrite(reading, circuitId) {
+	const charge = requireCircuit(reading, circuitId, "dhw").charge;
+	return optionWrite(charge, `${circuitId} extra hot water`, "start");
+}
+//#endregion
+//#region src/homecom/homecom-oauth.ts
+/**
+* Public OAuth client of the HomeCom Easy app, signed in through SingleKey ID.
+*
+* A PKCE client has no secret. The values are the ones SingleKey accepts for this client id
+* today: the same authorize query the MIT-licensed `homecom_alt` client records
+* (`OAUTH_LOGIN_PARAMS` — parameters, not copied code) and that the Home Assistant integration
+* opens. `pointt.gateway.resource.dopair` is not a scope this client may request; SingleKey
+* answers `misconfigured-application` and never shows the login page. The scope it does accept
+* names `pointt.gateway.resource.dashapp`, and the Bosch app sends `style_id=tt_bsch`.
+*/
+var HOMECOM_CLIENT_ID = "762162C0-FA2D-4540-AE66-6489F189FADC";
+var HOMECOM_AUTHORIZE_URL = "https://singlekey-id.com/auth/connect/authorize";
+var HOMECOM_TOKEN_URL = "https://singlekey-id.com/auth/connect/token";
+var HOMECOM_STYLE_ID = "tt_bsch";
+var HOMECOM_SCOPE = [
+	"openid",
+	"email",
+	"profile",
+	"offline_access",
+	"pointt.gateway.claiming",
+	"pointt.gateway.removal",
+	"pointt.gateway.list",
+	"pointt.gateway.users",
+	"pointt.gateway.resource.dashapp",
+	"pointt.castt.flow.token-exchange",
+	"bacon",
+	"hcc.tariff.read"
+].join(" ");
+//#endregion
 //#region src/homecom/homecom-api-client.ts
 var HomeComAuthError = class extends Error {
 	name = "HomeComAuthError";
@@ -953,15 +1245,43 @@ function createHomeComApiClient(config, gatewayId, deps = {}) {
 	}
 	async function fetchSystem() {
 		const resolved = await resolveDeviceType();
-		const snapshot = await readPointtSnapshot({
+		const withHeatPump = await attachHeatPump(await readPointtSnapshot({
 			deviceType: resolved.deviceType,
 			family: resolved.family,
 			gatewayId,
 			get: getResource,
 			logDrop
+		}));
+		last = withHeatPump;
+		return withHeatPump;
+	}
+	async function attachHeatPump(snapshot) {
+		if (snapshot.family !== "hydronic" || snapshot.deviceType === "rrc2") return snapshot;
+		const dhwId = snapshot.dhw?.circuitId;
+		const heatPump = await readHeatPump({
+			get: getResource,
+			onFailure: logHeatPumpFailure,
+			circuitIds: {
+				hc: snapshot.circuits.map((circuit) => circuit.id),
+				dhw: dhwId === void 0 ? [] : [dhwId]
+			}
+		});
+		return hasHeatSource(heatPump) ? {
+			...snapshot,
+			heatPump
+		} : snapshot;
+	}
+	function logHeatPumpFailure(path, error) {
+		const key = `heat-pump-read:${path}`;
+		if (dropped.has(key)) return;
+		dropped.add(key);
+		logger?.warn("HomeCom heat-pump resource could not be read; it is skipped", {
+			tags: { gatewayId },
+			meta: {
+				path,
+				error: error instanceof Error ? error.message : String(error)
+			}
 		});
-		last = snapshot;
-		return snapshot;
 	}
 	async function probePath(path) {
 		const res = await authed(homeComResourceUrl(gatewayId, path), {
@@ -1015,6 +1335,9 @@ function createHomeComApiClient(config, gatewayId, deps = {}) {
 			const snapshot = await requireSnapshot();
 			if (snapshot.family !== "rac") logDrop("swing is not a resource on this device type");
 			await putWrite(swingWrite(snapshot, "horizontal", on));
+		},
+		async writeHeatPump(writes) {
+			for (const write of writes) await putWrite(write);
 		}
 	};
 }
@@ -1225,42 +1548,6 @@ function finishedFromGateways(tokens, resolved, listFailure) {
 }
 var homeComSignInAttempts = createSignInAttemptStore();
 //#endregion
-//#region src/homecom/homecom-sign-in-proxy.ts
-/**
-* SingleKey ID serves the HomeCom login page; its scripts and styles come from `cdn.singlekey-id.com`
-* as `type=module` + `crossorigin` files, which the CDN does not CORS-enable for another origin —
-* served from the hub origin through the proxy they load, loaded directly they are refused and the
-* page has no script (only the email field, no way to continue).
-*/
-var HOMECOM_LOGIN_HOSTS = ["singlekey-id.com", "cdn.singlekey-id.com"];
-var HOMECOM_APP_SCHEME = HOMECOM_REDIRECT_URI.slice(0, HOMECOM_REDIRECT_URI.indexOf("://") + 3);
-var homeComSignInClaims = createSignInClaims();
-/** Start an attempt whose `authorizeUrl` is the hub-relative proxied login page. */
-function beginHomeComProxiedSignIn(deps) {
-	const nowMs = deps.nowMs ?? (() => Date.now());
-	const published = publishHomeComSignIn(homeComSignInAttempts, nowMs());
-	if (deps.proxy === null) return published;
-	const entry = openSignInProxy({
-		proxy: deps.proxy,
-		claims: homeComSignInClaims,
-		addonId: deps.addonId,
-		attemptId: published.attemptId,
-		authorizeUrl: published.authorizeUrl,
-		hosts: HOMECOM_LOGIN_HOSTS,
-		appScheme: HOMECOM_APP_SCHEME,
-		finish: (callback) => finishHomeComSignIn({
-			attemptId: published.attemptId,
-			callback,
-			nowMs: nowMs()
-		}, homeComSignInAttempts, deps.fetchFn !== void 0 ? { fetchFn: deps.fetchFn } : {}),
-		nowMs
-	});
-	return {
-		attemptId: published.attemptId,
-		authorizeUrl: entry
-	};
-}
-//#endregion
 //#region src/homecom/homecom-token-persist.ts
 /**
 * Patch the integration's record, one write at a time per integration. Refuses (and says so,
@@ -1315,8 +1602,7 @@ function buildHomeComGatewayPersister(deps) {
 function buildHomeComCandidates(input) {
 	const out = [];
 	for (const dev of input.devices) {
-		const type = dev.kind === "heating-circuit" ? DeviceType.Climate : DeviceType.WaterHeater;
-		const caps = dev.kind === "heating-circuit" ? ["climate-control"] : ["water-heater"];
+		const { type, caps } = shapeOf(dev.kind);
 		const adoptedId = input.adopted.get(dev.nativeId) ?? null;
 		out.push({
 			childNativeId: dev.nativeId,
@@ -1331,6 +1617,22 @@ function buildHomeComCandidates(input) {
 	}
 	return out;
 }
+function shapeOf(kind) {
+	switch (kind) {
+		case "heating-circuit": return {
+			type: DeviceType.Climate,
+			caps: ["climate-control"]
+		};
+		case "dhw": return {
+			type: DeviceType.WaterHeater,
+			caps: ["water-heater"]
+		};
+		case "heat-pump": return {
+			type: DeviceType.HeatPump,
+			caps: ["heat-pump-status", "heat-pump-control"]
+		};
+	}
+}
 //#endregion
 //#region src/homecom/homecom-adoption-provider.ts
 var DEVICES_FILTER = {
@@ -1515,6 +1817,11 @@ function buildDiscoverables(snapshot) {
 		name: "Domestic hot water",
 		kind: "dhw"
 	});
+	if (snapshot.heatPump !== void 0) out.push({
+		nativeId: "hp:0",
+		name: "Heat pump",
+		kind: "heat-pump"
+	});
 	return out;
 }
 var homeComConnections = new HomeComConnectionResolver();
@@ -2001,7 +2308,7 @@ var homeComClimateSchema = object({
 	integrationId: string().optional()
 });
 var CLIMATE_CAP = "climate-control";
-var COLD_START$1 = {
+var COLD_START$2 = {
 	mode: "off",
 	availableModes: [],
 	fanMode: "",
@@ -2036,14 +2343,14 @@ var HomeComClimateDevice = class extends BaseDevice {
 	async onActivate() {
 		await super.onActivate();
 		this.registerClimateCap();
-		this.runtimeState.setCapState(CLIMATE_CAP, COLD_START$1);
+		this.runtimeState.setCapState(CLIMATE_CAP, COLD_START$2);
 		this.refreshFromSnapshot();
 	}
 	refreshFromSnapshot() {
 		const circuit = homeComConnections.getSnapshot(this.#brokerId)?.circuits.find((c) => c.id === this.#circuitId);
 		if (!circuit) {
 			this.runtimeState.setCapState(CLIMATE_CAP, {
-				...COLD_START$1,
+				...COLD_START$2,
 				lastFetchedAt: Date.now()
 			});
 			return;
@@ -2059,7 +2366,7 @@ var HomeComClimateDevice = class extends BaseDevice {
 		this.ctx.registerNativeCap(climateControlCapability, {
 			getStatus: async () => {
 				this.refreshFromSnapshot();
-				return this.runtimeState.getCapState(CLIMATE_CAP) ?? COLD_START$1;
+				return this.runtimeState.getCapState(CLIMATE_CAP) ?? COLD_START$2;
 			},
 			setMode: async ({ mode }) => {
 				const apiMode = hvacModeToHomeCom(mode);
@@ -2111,7 +2418,7 @@ var homeComWaterHeaterSchema = object({
 	integrationId: string().optional()
 });
 var WH_CAP = "water-heater";
-var COLD_START = {
+var COLD_START$1 = {
 	currentTemp: null,
 	targetTemp: null,
 	operationMode: null,
@@ -2137,14 +2444,14 @@ var HomeComWaterHeaterDevice = class extends BaseDevice {
 	async onActivate() {
 		await super.onActivate();
 		this.registerWaterHeaterCap();
-		this.runtimeState.setCapState(WH_CAP, COLD_START);
+		this.runtimeState.setCapState(WH_CAP, COLD_START$1);
 		this.refreshFromSnapshot();
 	}
 	refreshFromSnapshot() {
 		const dhw = homeComConnections.getSnapshot(this.#brokerId)?.dhw;
 		if (!dhw) {
 			this.runtimeState.setCapState(WH_CAP, {
-				...COLD_START,
+				...COLD_START$1,
 				lastChangedAt: Date.now()
 			});
 			return;
@@ -2160,7 +2467,7 @@ var HomeComWaterHeaterDevice = class extends BaseDevice {
 		this.ctx.registerNativeCap(waterHeaterCapability, {
 			getStatus: async () => {
 				this.refreshFromSnapshot();
-				return this.runtimeState.getCapState(WH_CAP) ?? COLD_START;
+				return this.runtimeState.getCapState(WH_CAP) ?? COLD_START$1;
 			},
 			setTargetTemp: async ({ temp }) => {
 				await this.requireClient().setDhwTarget(temp);
@@ -2177,18 +2484,160 @@ var HomeComWaterHeaterDevice = class extends BaseDevice {
 	}
 };
 //#endregion
+//#region src/homecom/devices/homecom-heat-pump-device.ts
+var homeComHeatPumpSchema = object({
+	nativeId: string().min(1),
+	brokerId: string().min(1),
+	system: literal("homecom").optional(),
+	integrationId: string().optional()
+});
+var STATUS_CAP = "heat-pump-status";
+var COLD_START = {
+	circuits: [],
+	system: {
+		silent: null,
+		away: null,
+		additionalHeater: null,
+		holiday: null
+	},
+	power: {
+		thermalW: null,
+		electricalW: null,
+		compressorPct: null
+	},
+	temperatures: {
+		supply: null,
+		return: null,
+		outdoor: null
+	},
+	energy: {
+		thermalKwh: null,
+		electricalKwh: null
+	},
+	waterPressureBar: null,
+	starts: null,
+	lastFetchedAt: 0
+};
+/**
+* A heat pump on a hydronic HomeCom gateway (D1026). The slice and every limit
+* come from the gateway reading the integration poll already holds; a write is
+* checked against those limits first and the reading is refreshed after it.
+*/
+var HomeComHeatPumpDevice = class extends BaseDevice {
+	features = [];
+	#brokerId;
+	/** True while the gateway has no heat-pump reading, so the log marks the transitions only. */
+	#noReading = false;
+	constructor(ctx) {
+		const persisted = homeComHeatPumpSchema.parse(ctx.persistedConfig ?? {});
+		super(ctx, homeComHeatPumpSchema, { type: ctx.deviceMeta.type });
+		this.#brokerId = persisted.brokerId;
+		this.online = true;
+		this.updateSourceInfo({
+			id: persisted.nativeId,
+			system: "homecom"
+		});
+	}
+	async onActivate() {
+		await super.onActivate();
+		this.registerStatusCap();
+		this.registerControlCap();
+		this.runtimeState.setCapState(STATUS_CAP, COLD_START);
+		this.refreshFromSnapshot();
+	}
+	reading() {
+		return homeComConnections.getSnapshot(this.#brokerId)?.heatPump ?? null;
+	}
+	refreshFromSnapshot() {
+		const reading = this.reading();
+		if (reading === null) {
+			if (!this.#noReading) {
+				this.#noReading = true;
+				this.ctx.logger.warn("HomeCom heat pump: the gateway returned no heat-pump reading", { tags: { deviceId: this.ctx.id } });
+			}
+			this.runtimeState.setCapState(STATUS_CAP, {
+				...COLD_START,
+				lastFetchedAt: Date.now()
+			});
+			return;
+		}
+		if (this.#noReading) {
+			this.#noReading = false;
+			this.ctx.logger.info("HomeCom heat pump: the gateway answers with a heat-pump reading again", { tags: { deviceId: this.ctx.id } });
+		}
+		this.runtimeState.setCapState(STATUS_CAP, heatPumpStatusFrom(reading, Date.now()));
+	}
+	requireClient() {
+		const client = homeComConnections.getClient(this.#brokerId);
+		if (!client) throw new Error("HomeCom client unavailable (heat pump)");
+		return client;
+	}
+	requireReading() {
+		const reading = this.reading();
+		if (reading === null) throw new Error("HomeCom heat pump: no reading from the gateway yet");
+		return reading;
+	}
+	/** Validate against the reading, send, then re-read so the slice shows what the gateway holds. */
+	async apply(build) {
+		const write = build(this.requireReading());
+		const client = this.requireClient();
+		await client.writeHeatPump([write]);
+		this.ctx.logger.info("HomeCom heat pump: value written", {
+			tags: { deviceId: this.ctx.id },
+			meta: { path: write.path }
+		});
+		try {
+			const snapshot = await client.fetchSystem();
+			homeComConnections.updateSnapshot(this.#brokerId, snapshot);
+		} catch (error) {
+			this.ctx.logger.warn("HomeCom heat pump: value written, the refresh failed", {
+				tags: { deviceId: this.ctx.id },
+				meta: {
+					path: write.path,
+					error: error instanceof Error ? error.message : String(error)
+				}
+			});
+			return;
+		}
+		this.refreshFromSnapshot();
+	}
+	registerStatusCap() {
+		this.ctx.registerNativeCap(heatPumpStatusCapability, { getStatus: async () => {
+			this.refreshFromSnapshot();
+			return this.runtimeState.getCapState(STATUS_CAP) ?? COLD_START;
+		} });
+	}
+	registerControlCap() {
+		this.ctx.registerNativeCap(heatPumpControlCapability, {
+			setSilentMode: ({ mode }) => this.apply((r) => systemModeWrite(r, "silent", mode)),
+			setAwayMode: ({ mode }) => this.apply((r) => systemModeWrite(r, "away", mode)),
+			setAdditionalHeaterMode: ({ mode }) => this.apply((r) => systemModeWrite(r, "additionalHeater", mode)),
+			setHolidayMode: ({ mode }) => this.apply((r) => systemModeWrite(r, "holiday", mode)),
+			setCircuitOperationMode: ({ circuitId, mode }) => this.apply((r) => circuitOptionWrite(r, circuitId, "operationMode", mode)),
+			setCircuitHeatCoolMode: ({ circuitId, mode }) => this.apply((r) => circuitOptionWrite(r, circuitId, "heatCoolMode", mode)),
+			setCircuitSummerWinter: ({ circuitId, mode }) => this.apply((r) => circuitOptionWrite(r, circuitId, "summerWinter", mode)),
+			setCircuitComfortSetpoint: ({ circuitId, temp }) => this.apply((r) => circuitRangeWrite(r, circuitId, "comfort", temp)),
+			setCircuitEcoSetpoint: ({ circuitId, temp }) => this.apply((r) => circuitRangeWrite(r, circuitId, "eco", temp)),
+			setCircuitMaxFlowTemp: ({ circuitId, temp }) => this.apply((r) => circuitRangeWrite(r, circuitId, "maxFlow", temp)),
+			setDhwOperationMode: ({ circuitId, mode }) => this.apply((r) => dhwOptionWrite(r, circuitId, "operationMode", mode)),
+			setDhwTemperatureLevel: ({ circuitId, level }) => this.apply((r) => dhwOptionWrite(r, circuitId, "level", level)),
+			setDhwChargeDuration: ({ circuitId, minutes }) => this.apply((r) => dhwChargeDurationWrite(r, circuitId, minutes)),
+			startExtraHotWater: ({ circuitId }) => this.apply((r) => extraHotWaterWrite(r, circuitId))
+		});
+	}
+};
+//#endregion
 //#region src/homecom/addon.ts
 var BoschHomeComProviderAddon = class extends BaseDeviceProvider {
 	addonId = "bosch-homecom";
 	providerName = "Bosch HomeCom";
 	deviceClasses = {
 		[DeviceType.Climate]: HomeComClimateDevice,
-		[DeviceType.WaterHeater]: HomeComWaterHeaterDevice
+		[DeviceType.WaterHeater]: HomeComWaterHeaterDevice,
+		[DeviceType.HeatPump]: HomeComHeatPumpDevice
 	};
 	clients = null;
 	instances = null;
-	loginProxy = null;
-	loginPlane = null;
 	constructor() {
 		super({});
 	}
@@ -2207,7 +2656,6 @@ var BoschHomeComProviderAddon = class extends BaseDeviceProvider {
 			tester: this.buildConnectionTestProvider()
 		});
 		this.instances = built;
-		await this.serveLoginProxy();
 		const persistDeps = {
 			read: (id) => homeComStoredOf(built.instances, id),
 			patch: (id, patch) => built.handle.patch(id, patch),
@@ -2242,19 +2690,9 @@ var BoschHomeComProviderAddon = class extends BaseDeviceProvider {
 			customActions: homeComActions,
 			actionHandlers: {
 				beginSignIn: async () => ({
-					...beginHomeComProxiedSignIn({
-						proxy: this.loginProxy,
-						addonId: this.ctx.id
-					}),
-					summary: "Open the sign-in page and sign in."
+					...publishHomeComSignIn(homeComSignInAttempts, Date.now()),
+					summary: "Open the sign-in page, sign in, then paste the address the browser stops on."
 				}),
-				claimSignIn: async (input) => {
-					const claim = homeComSignInClaims.claim(input.attemptId, Date.now());
-					return claim.state === "pending" ? { pending: true } : {
-						pending: false,
-						...claim.result
-					};
-				},
 				finishSignIn: async (input) => finishHomeComSignIn({
 					attemptId: input.attemptId,
 					callback: input.callback,
@@ -2267,27 +2705,7 @@ var BoschHomeComProviderAddon = class extends BaseDeviceProvider {
 			}
 		};
 	}
-	/** The hub's HTTPS face for the vendor's login pages (D955): admin session only. */
-	async serveLoginProxy() {
-		const proxy = new VendorLoginProxy({
-			addonId: this.ctx.id,
-			logger: this.ctx.logger
-		});
-		try {
-			this.loginPlane = await this.ctx.dataPlane?.serve({
-				prefix: "vendor-login",
-				access: "admin",
-				handler: proxy.handler
-			}) ?? null;
-			if (this.loginPlane !== null) this.loginProxy = proxy;
-		} catch (err) {
-			this.ctx.logger.warn("HomeCom login proxy failed to serve — sign-in falls back to paste", { meta: { error: errMsg(err) } });
-		}
-	}
 	async onShutdown() {
-		await this.loginPlane?.dispose().catch(() => void 0);
-		this.loginPlane = null;
-		this.loginProxy = null;
 		try {
 			await this.clients?.shutdown();
 		} catch (err) {