@camstack/addon-provider-bosch 0.1.55 → 0.1.56

package/dist/home-connect/addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_bosch_instances = require("../bosch-instances-DaWS-s0M.js");
-const require_account_integration_offline = require("../account-integration-offline-DzGZkIwF.js");
+const require_bosch_instances = require("../bosch-instances-BnuV5On6.js");
+const require_account_integration_offline = require("../account-integration-offline-DOH2c7x2.js");
 let node_crypto = require("node:crypto");
 let node_tls = require("node:tls");
 let node_zlib = require("node:zlib");

package/dist/home-connect/addon.mjs

@@ -1,5 +1,5 @@
-import { $ as union, A as runningFromDishwasherOperation, B as entryBody, C as ingestReading, D as powerMeterCapability, E as plainEventVocabulary, F as RecordIntegrationInstances, H as isSecretMarkerLike, I as createEvent, J as literal, K as array, L as customAction, O as quantityFromUnit, Q as string, R as defineCustomActions, T as numericSensorCapability, U as rowsDepsOver, V as isSecretMarker, W as _enum, X as object, Z as record, _ as enumSensorCapability, a as BaseDevice, c as RUNNING_STATE_COLD, d as binaryCapability, et as unknown, g as dishwasherCapability, h as deviceAdoptionCapability, i as testBoschInstance, it as EventCategory, j as runningStateCapability, n as boschRowsPorts, nt as DeviceType, o as BaseDeviceProvider, p as consumablesCapability, r as keepBodyKeys, rt as errMsg, s as DishwasherOperationStateSchema, t as boschRowsMigration, tt as DeviceRole, v as eventEmitterCapability, w as integrationInstancesCapability, z as defineEntryKind } from "../bosch-instances-g54r3Dus.mjs";
-import { a as loginFailureForAttempt, c as HOME_CONNECT_REDIRECT_URI, i as createSignInAttemptStore, n as cascadeRemoveDevicesForIntegration, o as parseOAuthCallback, r as buildSignInGuideFields, t as setIntegrationDevicesOnline } from "../account-integration-offline-xi6muNeM.mjs";
+import { $ as literal, B as defineCustomActions, C as ingestReading, D as plainEventVocabulary, E as numericSensorCapability, G as isSecretMarkerLike, H as entryBody, I as RecordIntegrationInstances, J as _enum, K as rowsDepsOver, M as runningStateCapability, O as powerMeterCapability, R as createEvent, V as defineEntryKind, W as isSecretMarker, X as array, _ as enumSensorCapability, a as BaseDevice, at as unknown, c as RUNNING_STATE_COLD, ct as errMsg, d as binaryCapability, g as dishwasherCapability, h as deviceAdoptionCapability, i as testBoschInstance, it as union, j as runningFromDishwasherOperation, k as quantityFromUnit, lt as EventCategory, n as boschRowsPorts, nt as record, o as BaseDeviceProvider, ot as DeviceRole, p as consumablesCapability, r as keepBodyKeys, rt as string, s as DishwasherOperationStateSchema, st as DeviceType, t as boschRowsMigration, tt as object, v as eventEmitterCapability, w as integrationInstancesCapability, z as customAction } from "../bosch-instances-REcWLM14.mjs";
+import { a as loginFailureForAttempt, c as HOME_CONNECT_REDIRECT_URI, i as createSignInAttemptStore, n as cascadeRemoveDevicesForIntegration, o as parseOAuthCallback, r as buildSignInGuideFields, t as setIntegrationDevicesOnline } from "../account-integration-offline-fB8V7XNu.mjs";
 import { createHash, randomBytes } from "node:crypto";
 import { connect } from "node:tls";
 import { inflateRawSync } from "node:zlib";

package/dist/homecom/addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_bosch_instances = require("../bosch-instances-DaWS-s0M.js");
-const require_account_integration_offline = require("../account-integration-offline-DzGZkIwF.js");
+const require_bosch_instances = require("../bosch-instances-BnuV5On6.js");
+const require_account_integration_offline = require("../account-integration-offline-DOH2c7x2.js");
 let node_crypto = require("node:crypto");
 let node_child_process = require("node:child_process");
 let node_fs = require("node:fs");
@@ -458,6 +458,17 @@ async function exploreHomeComResources(input) {
 }
 //#endregion
 //#region src/homecom/custom-actions.ts
+/** A stored secret as the form sees it (`SecretFieldView`): set or not, never the value. */
+var secretView = require_bosch_instances.custom(require_bosch_instances.isSecretFieldView, "a stored secret view");
+/**
+* A sign-in secret in the result: in clear only for a form that has no record yet (the wizard
+* stores it on create); for an existing instance it is already stored and comes back as a view.
+*/
+var signInSecret = require_bosch_instances.union([
+	require_bosch_instances.string().min(1),
+	secretView,
+	require_bosch_instances._null()
+]).meta({ secret: true });
 var gatewayChoice = require_bosch_instances.object({
 	value: require_bosch_instances.string(),
 	label: require_bosch_instances.string(),
@@ -496,11 +507,17 @@ var homeComActions = require_bosch_instances.defineCustomActions({
 	}),
 	finishSignIn: require_bosch_instances.customAction(require_bosch_instances.object({
 		attemptId: require_bosch_instances.string().min(1),
-		callback: require_bosch_instances.string().min(1)
+		callback: require_bosch_instances.string().min(1),
+		/** An existing instance: the new sign-in is stored on it and applied at once. */
+		integrationId: require_bosch_instances.string().min(1).optional()
 	}), require_bosch_instances.object({
-		token: require_bosch_instances.string().min(1).meta({ secret: true }),
-		refresh: require_bosch_instances.string().min(1).meta({ secret: true }),
-		username: require_bosch_instances.string().meta({ secret: true }),
+		token: signInSecret,
+		refresh: signInSecret,
+		username: require_bosch_instances.union([
+			require_bosch_instances.string(),
+			secretView,
+			require_bosch_instances._null()
+		]).meta({ secret: true }),
 		accountLabel: require_bosch_instances.string(),
 		gatewayCount: require_bosch_instances.number(),
 		summary: require_bosch_instances.string(),
@@ -512,13 +529,18 @@ var homeComActions = require_bosch_instances.defineCustomActions({
 		kind: "mutation",
 		auth: "admin"
 	}),
-	signOut: require_bosch_instances.customAction(require_bosch_instances.object({}), require_bosch_instances.object({
-		signedOut: require_bosch_instances.literal(true),
-		summary: require_bosch_instances.string()
-	}), {
-		kind: "mutation",
-		auth: "admin"
-	}),
+	signOut: require_bosch_instances.customAction(
+		/** An existing instance: its stored sign-in is cleared and its connection stopped. */
+		require_bosch_instances.object({ integrationId: require_bosch_instances.string().min(1).optional() }),
+		require_bosch_instances.object({
+			signedOut: require_bosch_instances.literal(true),
+			summary: require_bosch_instances.string()
+		}),
+		{
+			kind: "mutation",
+			auth: "admin"
+		}
+	),
 	/** Read-only walk of the gateway's resource tree, for diagnosing what it serves. */
 	exploreResources: require_bosch_instances.customAction(exploreResourcesInput, exploreResourcesOutput, {
 		kind: "query",
@@ -526,6 +548,104 @@ var homeComActions = require_bosch_instances.defineCustomActions({
 	})
 });
 //#endregion
+//#region src/homecom/homecom-account.ts
+/**
+* Sign in / sign out of an EXISTING HomeCom instance, written through the instance record — the
+* owner of the tokens (keychain-backed secret fields). The record's change hook reconciles the
+* integration: new tokens are applied to the running manager, cleared ones stop it.
+*/
+/** Forget the account: the three secrets are cleared in the keychain, the account labels reset. */
+async function signOutHomeComInstance(integrationId, instances) {
+	await instances.updateInstance({
+		id: integrationId,
+		values: {
+			token: require_bosch_instances.SECRET_CLEAR,
+			refresh: require_bosch_instances.SECRET_CLEAR,
+			username: require_bosch_instances.SECRET_CLEAR,
+			accountLabel: "",
+			gatewayCount: 0
+		}
+	});
+}
+/**
+* Store a finished sign-in on the instance. The gateway (and its brand / region) is written only
+* when the sign-in settled on one: a choice still open keeps the stored gateway.
+*/
+async function storeHomeComSignIn(integrationId, finished, instances) {
+	await instances.updateInstance({
+		id: integrationId,
+		values: {
+			token: finished.token,
+			refresh: finished.refresh,
+			username: finished.username,
+			accountLabel: finished.accountLabel,
+			gatewayCount: finished.gatewayCount,
+			...finished.gatewayId !== void 0 ? { gatewayId: finished.gatewayId } : {},
+			...finished.brand !== void 0 ? { brand: finished.brand } : {},
+			...finished.region !== void 0 ? { region: finished.region } : {}
+		}
+	});
+}
+/**
+* The answer to a sign-in on an existing instance: the tokens are on the record now, so the form
+* gets the record's "set" views (as `hydrateSchema` hands them out) in their place — a Save that
+* follows keeps them, and the values never travel to the browser.
+*/
+async function storedSignInResult(integrationId, finished, handle) {
+	const data = (await handle.get(integrationId))?.data ?? {};
+	const { token: _token, refresh: _refresh, username: _username, ...open } = finished;
+	return {
+		...open,
+		token: require_bosch_instances.toSecretFieldView(data["token"]),
+		refresh: require_bosch_instances.toSecretFieldView(data["refresh"]),
+		username: require_bosch_instances.toSecretFieldView(data["username"])
+	};
+}
+//#endregion
+//#region src/homecom/homecom-reconcile.ts
+/**
+* Bring the running HomeCom managers in line with the enabled integrations:
+*
+* - signed in       -> upsert (a changed connection is applied to the running manager);
+* - signed out      -> the manager stops and the devices go offline; the integration still
+*                      exists, so its devices and its session alert are KEPT;
+* - unreadable      -> left as it is (a locked keychain is not a sign out, nor a deletion);
+* - gone / disabled -> the manager stops and the caller drops what belonged to it.
+*
+* "Gone" is judged over EVERY id the addon still holds something for — a running manager, an
+* instance record, a device — not only the running managers: an integration that was signed out
+* or unreadable has no manager, and its devices and alert must still go when it is deleted.
+*/
+async function reconcileHomeComIntegrations(deps) {
+	const enabled = await deps.listEnabled();
+	const present = new Set(enabled.map((integration) => integration.id));
+	for (const integration of enabled) await reconcileOne(deps, integration);
+	const vanished = [...new Set([...deps.registry.list(), ...await deps.knownIds()])].filter((id) => !present.has(id));
+	await deps.registry.retain(present);
+	for (const integrationId of vanished) await deps.onVanished(integrationId);
+}
+async function reconcileOne(deps, integration) {
+	const tags = { integrationId: integration.id };
+	try {
+		const connection = await deps.connectionOf(integration.id);
+		deps.onNamed(integration.id, integration.name);
+		if (connection === null) {
+			if (deps.registry.has(integration.id)) {
+				await deps.registry.remove(integration.id);
+				deps.logger.info("HomeCom integration has no sign-in — stopped, devices offline", { tags });
+			}
+			deps.onSignedOut(integration.id);
+			return;
+		}
+		await deps.registry.upsert(integration.id, integration.name, connection);
+	} catch (err) {
+		deps.logger.warn("HomeCom reconcile failed for integration", {
+			tags,
+			meta: { error: require_bosch_instances.errMsg(err) }
+		});
+	}
+}
+//#endregion
 //#region src/homecom/homecom-session-alert.ts
 /** The standard session-lost alert for HomeCom; "Sign in again" opens the integration page. */
 function createHomeComSessionAlert(deps) {
@@ -534,7 +654,9 @@ function createHomeComSessionAlert(deps) {
 		providerName: "Bosch HomeCom",
 		logger: deps.logger,
 		getAlerts: deps.getAlerts,
-		debounceMs: deps.debounceMs ?? 0
+		debounceMs: deps.debounceMs ?? 0,
+		addonId: deps.addonId,
+		severity: "critical"
 	});
 	return {
 		authFailed: (integrationId) => tracker.lost(integrationId, {
@@ -542,7 +664,7 @@ function createHomeComSessionAlert(deps) {
 			reason: "token-expired",
 			action: {
 				label: "Sign in again",
-				href: `/integrations/${encodeURIComponent(integrationId)}`,
+				href: require_bosch_instances.integrationPageHref(deps.addonId, integrationId),
 				navigation: "app"
 			}
 		}),
@@ -3738,7 +3860,8 @@ var BoschHomeComProviderAddon = class extends require_bosch_instances.BaseDevice
 		const sessionAlert = createHomeComSessionAlert({
 			logger: this.ctx.logger,
 			getAlerts: () => this.ctx.api.alerts,
-			nameOf: (id) => this.integrationNames.get(id) ?? id
+			nameOf: (id) => this.integrationNames.get(id) ?? id,
+			addonId: this.addonId
 		});
 		this.sessionAlert = sessionAlert;
 		this.clients = new HomeComClientRegistry(this.ctx.logger, {
@@ -3779,15 +3902,30 @@ var BoschHomeComProviderAddon = class extends require_bosch_instances.BaseDevice
 					...publishHomeComSignIn(homeComSignInAttempts, Date.now()),
 					summary: "Open the sign-in page, sign in, then paste the address the browser stops on."
 				}),
-				finishSignIn: async (input) => finishHomeComSignIn({
-					attemptId: input.attemptId,
-					callback: input.callback,
-					nowMs: Date.now()
-				}, homeComSignInAttempts),
-				signOut: async () => ({
-					signedOut: true,
-					summary: "Signed out."
-				}),
+				finishSignIn: async (input) => {
+					const finished = await finishHomeComSignIn({
+						attemptId: input.attemptId,
+						callback: input.callback,
+						nowMs: Date.now()
+					}, homeComSignInAttempts);
+					const integrationId = input.integrationId;
+					if (integrationId === void 0) return finished;
+					await this.storeSignIn(integrationId, () => storeHomeComSignIn(integrationId, finished, built.instances));
+					return storedSignInResult(integrationId, finished, built.handle);
+				},
+				signOut: async (input) => {
+					const integrationId = input.integrationId;
+					if (integrationId === void 0) return {
+						signedOut: true,
+						summary: "Signed out."
+					};
+					await this.storeSignIn(integrationId, () => signOutHomeComInstance(integrationId, built.instances));
+					this.ctx.logger.info("HomeCom signed out — stored sign-in cleared", { tags: { integrationId } });
+					return {
+						signedOut: true,
+						summary: "Signed out. The devices stay offline until you sign in again."
+					};
+				},
 				exploreResources: explore
 			}
 		};
@@ -3832,43 +3970,60 @@ var BoschHomeComProviderAddon = class extends require_bosch_instances.BaseDevice
 		if (typeof nativeId !== "string" || nativeId.length === 0) throw new Error("homecom generateStableId: nativeId required");
 		return homeComStableId(integrationId, nativeId);
 	}
+	/** Write a sign-in change on an instance that exists; a missing one is refused by name. */
+	async storeSignIn(integrationId, write) {
+		if (await homeComStoredOf(this.requireInstances().instances, integrationId) === null) throw new Error(`HomeCom integration ${integrationId} does not exist`);
+		await write();
+	}
 	async reconcileIntegrations() {
 		const reg = this.requireClients();
 		try {
-			const mine = (await this.ctx.api.integrations.list.query()).filter((i) => i.addonId === this.ctx.id && i.enabled);
-			const surviving = /* @__PURE__ */ new Set();
-			for (const integration of mine) try {
-				const connection = await homeComConnectionOf(this.requireInstances().instances, integration.id);
-				if (!connection) continue;
-				this.integrationNames.set(integration.id, integration.name);
-				await reg.upsert(integration.id, integration.name, connection);
-				surviving.add(integration.id);
-			} catch (err) {
-				this.ctx.logger.warn("HomeCom reconcile failed for integration", { meta: {
-					integrationId: integration.id,
-					error: require_bosch_instances.errMsg(err)
-				} });
-			}
-			const vanished = reg.list().filter((id) => !surviving.has(id));
-			await reg.retain(surviving);
-			for (const integrationId of vanished) {
-				this.integrationNames.delete(integrationId);
-				this.sessionAlert?.removed(integrationId);
-			}
-			const deviceReg = this.ctx.kernel.deviceRegistry;
-			const deviceApi = this.ctx.kernel.devices;
-			if (deviceReg && deviceApi) for (const integrationId of vanished) await require_account_integration_offline.cascadeRemoveDevicesForIntegration({
-				reg: deviceReg,
-				devices: deviceApi,
-				addonId: this.addonId,
-				system: "homecom",
-				integrationId,
+			await reconcileHomeComIntegrations({
+				listEnabled: async () => {
+					return (await this.ctx.api.integrations.list.query()).filter((i) => i.addonId === this.ctx.id && i.enabled);
+				},
+				knownIds: () => this.knownIntegrationIds(),
+				connectionOf: (id) => homeComConnectionOf(this.requireInstances().instances, id),
+				registry: reg,
+				onNamed: (id, name) => this.integrationNames.set(id, name),
+				onSignedOut: (id) => this.setIntegrationDevicesOnline(id, false),
+				onVanished: (id) => this.dropIntegration(id),
 				logger: this.ctx.logger
 			});
 		} catch (err) {
 			this.ctx.logger.warn("HomeCom integration reconcile failed", { meta: { error: require_bosch_instances.errMsg(err) } });
 		}
 	}
+	/** Every integration this addon holds a record or a top-level device for. */
+	async knownIntegrationIds() {
+		const ids = new Set(this.integrationNames.keys());
+		for (const row of await this.requireInstances().instances.listResolved()) ids.add(row.id);
+		const reg = this.ctx.kernel.deviceRegistry;
+		const devices = this.ctx.kernel.devices;
+		if (reg && devices) for (const d of reg.getAllForAddon(this.addonId)) {
+			if (d.parentDeviceId !== null) continue;
+			const cfg = await devices.loadConfig(d.id).catch(() => ({}));
+			const brokerId = cfg["brokerId"];
+			if (cfg["system"] === "homecom" && typeof brokerId === "string") ids.add(brokerId);
+		}
+		return [...ids];
+	}
+	/** The integration is gone: its alert and its devices go with it. */
+	async dropIntegration(integrationId) {
+		this.integrationNames.delete(integrationId);
+		this.sessionAlert?.removed(integrationId);
+		const deviceReg = this.ctx.kernel.deviceRegistry;
+		const deviceApi = this.ctx.kernel.devices;
+		if (!deviceReg || !deviceApi) return;
+		await require_account_integration_offline.cascadeRemoveDevicesForIntegration({
+			reg: deviceReg,
+			devices: deviceApi,
+			addonId: this.addonId,
+			system: "homecom",
+			integrationId,
+			logger: this.ctx.logger
+		});
+	}
 	subscribeIntegrationLifecycle() {
 		const handler = (event) => {
 			const addonId = event.data["addonId"];