@camstack/types 1.2.442 → 1.2.443

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.2.443] - 2026-10-29
+
+### Added
+
+- The vendor login proxy writes a names-only trace line per proxied sign-in request (parameter, form-field and cookie names, never values) to show where a sign-in loses a parameter
+- Added the no_authorization_code reason to the OAuth result page codes
+- Comments on the placement flags now say a role defaults on for every node
+
+### Changed
+
+- A node-removal-hook capability: addons are told when the operator forgets a cluster node
+
 ## [1.2.442] - 2026-10-29
 
 ### Changed

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-BpwNJ1Su.js");
+const require_sleep = require("./sleep-E7qAQwTE.js");
 const require_event_category = require("./event-category-E17zaHjN.js");
 const require_err_msg = require("./err-msg-COHgq7Mb.js");
 //#region src/generated/cap-input-defaults.ts

package/dist/addon.mjs

@@ -1,4 +1,4 @@
-import { $ as expandCapMethods, $n as REVALIDATE_AFTER_MS, $r as isSecretMarker, $t as RecordFieldPathSchema, A as HF_REPO, An as RecordUniqueViolationError, Ar as buildSecretRef, B as withoutCallerStamp, Bn as RECORD_CLASSES, C as addonSliceHandleApi, Cn as InvalidRecordError, Dn as RecordNotFoundError, En as RECORDS_ERROR_CODES, Fn as UnknownRecordKindError, Fr as parseSecretRef, G as adminUiCapability, Gn as RECORD_MAX_DATA_BYTES, Hn as RECORD_DEFAULT_MAX_DATA_BYTES, I as deviceOpsCapability, In as asRecordsError, Jn as RECORD_QUERY_MAX, Jt as defineEntryKind, Kn as RECORD_MAX_INDEXES, L as viewerUiCapability, Ln as recordsErrorFromMessage, M as CAP_ADVANCE_FIELDS, Mn as RevConflictError, Mr as globalSecretScope, Nn as TransactRefusedError, Nr as isSecretRef, On as RecordSecretUnavailableError, Or as SECRET_REF_SCHEME, P as CAP_STATE_LEAVES, Pn as UnindexedFilterError, Pr as normalizeSecretOwner, Qn as resolveSecretViewsIn, Qr as isSecretFieldView, Qt as EntryDescriptorSchema, R as DEVICE_CHILDREN_BATCH_MAX, Rn as RECORD_BATCH_MAX, Rr as createEvent, Sn as ForeignSecretMarkerError, Tn as PlaintextSecretError, U as describeCustomActions, Un as RECORD_DELETE_BATCH, Vn as RECORD_DATABASES, Wn as RECORD_ID_MAX_LENGTH, Xn as RECORD_SETTINGS_MAX_ROWS, Xr as classifySecretWrite, Xt as createRecordsAccess, Yn as RECORD_SECRET_COLLECTION_PREFIX, Yr as SECRET_CLEAR, Yt as entryBody, Zn as RECORD_SWEEP_INTERVAL_MS, Zr as isSecretClear, Zt as assertTransactScope, _ as readErrorI18n, _n as collectZodSecretPaths, an as assertValidDeclaration, ar as registerKnownSecret, b as isDeviceScopedCap, bn as DeclarationRefusedError, c as asString, cn as REMOVE_LEAF, cr as PEER_BYTES_CHUNK_BYTES, ct as readNodePin, d as parseJsonUnknown, dn as parseSecretPath, dr as PEER_BYTES_TICKET_TTL_MS, dt as ReadinessRegistry, ei as isSecretMarkerLike, en as RecordIndexSchema, er as createSecretsAccess, f as hfModelUrl, fn as recordArrayItemPath, ft as ReadinessTimeoutError, g as ErrorI18nPayloadSchema, gr as BaseAddon, hn as secretArrayPrefixes, hr as DisposerChain, ht as scopeKey, in as StoredRecordKindDeclarationSchema, ir as knownSecretCount, jn as RecordsError, jr as formatSecretScope, kn as RecordTooLargeError, kr as arrayItemFieldPath, ln as collectSecretLeaves, lr as PEER_BYTES_MAX_OUTSTANDING, mn as recordSecretRef, ni as toSecretFieldView, nn as RecordKindNameSchema, nr as clearKnownSecrets, o as asJsonObject, on as declarationsOf, or as scrubKnownSecrets, p as BOOT_RECOVERY_BACKOFF_MS, pn as recordSecretCollection, pr as DATAPLANE_SECRET_HEADER, qn as RECORD_MAX_INDEX_FIELDS, qt as makeInMemoryRecords, r as maskUrlCredentials, rn as RecordRetentionSchema, rr as forgetKnownSecret, sn as defineRecordKinds, sr as shortSecretRefHash, st as nodePin, t as sleep, ti as makeSecretMarker, tn as RecordKindDeclarationSchema, tr as MIN_SCRUBBED_LENGTH, un as mapSecretLeaves, ur as PEER_BYTES_STALL_MS, ut as MODEL_FORMATS, vn as isZodSecret, vr as normalizeAddonInitResult, w as createEventBusSliceSource, wn as NoCallerError, x as createDeviceProxy, xn as FilterRequiredError, y as DEVICE_SCOPED_CAPS, yn as BatchTooLargeError, z as CALLER_STAMPED_CAPABILITIES, zn as RECORD_BATCH_MAX_BYTES, zr as emitReadiness } from "./sleep-DJws6ho7.mjs";
+import { $ as expandCapMethods, $n as REVALIDATE_AFTER_MS, $r as isSecretMarker, $t as RecordFieldPathSchema, A as HF_REPO, An as RecordUniqueViolationError, Ar as buildSecretRef, B as withoutCallerStamp, Bn as RECORD_CLASSES, C as addonSliceHandleApi, Cn as InvalidRecordError, Dn as RecordNotFoundError, En as RECORDS_ERROR_CODES, Fn as UnknownRecordKindError, Fr as parseSecretRef, G as adminUiCapability, Gn as RECORD_MAX_DATA_BYTES, Hn as RECORD_DEFAULT_MAX_DATA_BYTES, I as deviceOpsCapability, In as asRecordsError, Jn as RECORD_QUERY_MAX, Jt as defineEntryKind, Kn as RECORD_MAX_INDEXES, L as viewerUiCapability, Ln as recordsErrorFromMessage, M as CAP_ADVANCE_FIELDS, Mn as RevConflictError, Mr as globalSecretScope, Nn as TransactRefusedError, Nr as isSecretRef, On as RecordSecretUnavailableError, Or as SECRET_REF_SCHEME, P as CAP_STATE_LEAVES, Pn as UnindexedFilterError, Pr as normalizeSecretOwner, Qn as resolveSecretViewsIn, Qr as isSecretFieldView, Qt as EntryDescriptorSchema, R as DEVICE_CHILDREN_BATCH_MAX, Rn as RECORD_BATCH_MAX, Rr as createEvent, Sn as ForeignSecretMarkerError, Tn as PlaintextSecretError, U as describeCustomActions, Un as RECORD_DELETE_BATCH, Vn as RECORD_DATABASES, Wn as RECORD_ID_MAX_LENGTH, Xn as RECORD_SETTINGS_MAX_ROWS, Xr as classifySecretWrite, Xt as createRecordsAccess, Yn as RECORD_SECRET_COLLECTION_PREFIX, Yr as SECRET_CLEAR, Yt as entryBody, Zn as RECORD_SWEEP_INTERVAL_MS, Zr as isSecretClear, Zt as assertTransactScope, _ as readErrorI18n, _n as collectZodSecretPaths, an as assertValidDeclaration, ar as registerKnownSecret, b as isDeviceScopedCap, bn as DeclarationRefusedError, c as asString, cn as REMOVE_LEAF, cr as PEER_BYTES_CHUNK_BYTES, ct as readNodePin, d as parseJsonUnknown, dn as parseSecretPath, dr as PEER_BYTES_TICKET_TTL_MS, dt as ReadinessRegistry, ei as isSecretMarkerLike, en as RecordIndexSchema, er as createSecretsAccess, f as hfModelUrl, fn as recordArrayItemPath, ft as ReadinessTimeoutError, g as ErrorI18nPayloadSchema, gr as BaseAddon, hn as secretArrayPrefixes, hr as DisposerChain, ht as scopeKey, in as StoredRecordKindDeclarationSchema, ir as knownSecretCount, jn as RecordsError, jr as formatSecretScope, kn as RecordTooLargeError, kr as arrayItemFieldPath, ln as collectSecretLeaves, lr as PEER_BYTES_MAX_OUTSTANDING, mn as recordSecretRef, ni as toSecretFieldView, nn as RecordKindNameSchema, nr as clearKnownSecrets, o as asJsonObject, on as declarationsOf, or as scrubKnownSecrets, p as BOOT_RECOVERY_BACKOFF_MS, pn as recordSecretCollection, pr as DATAPLANE_SECRET_HEADER, qn as RECORD_MAX_INDEX_FIELDS, qt as makeInMemoryRecords, r as maskUrlCredentials, rn as RecordRetentionSchema, rr as forgetKnownSecret, sn as defineRecordKinds, sr as shortSecretRefHash, st as nodePin, t as sleep, ti as makeSecretMarker, tn as RecordKindDeclarationSchema, tr as MIN_SCRUBBED_LENGTH, un as mapSecretLeaves, ur as PEER_BYTES_STALL_MS, ut as MODEL_FORMATS, vn as isZodSecret, vr as normalizeAddonInitResult, w as createEventBusSliceSource, wn as NoCallerError, x as createDeviceProxy, xn as FilterRequiredError, y as DEVICE_SCOPED_CAPS, yn as BatchTooLargeError, z as CALLER_STAMPED_CAPABILITIES, zn as RECORD_BATCH_MAX_BYTES, zr as emitReadiness } from "./sleep-C_u6cEAJ.mjs";
 import { t as EventCategory } from "./event-category-DmZDPDf_.mjs";
 import { a as DeviceType, t as errMsg } from "./err-msg-BCdlR2Li.mjs";
 //#region src/generated/cap-input-defaults.ts

package/dist/capabilities/index.d.ts

@@ -70,6 +70,8 @@ export { DiscoveredDeviceSchema, deviceProviderCapability, ProviderStatusSchema,
 export { type ClaimOutcome, ClaimOutcomeSchema, type ClaimsListing, ClaimsListingSchema, deviceStateCapability, type FieldClaim, type FieldClaimMode, FieldClaimModeSchema, FieldClaimSchema, } from './device-state.cap.js';
 export type { EmbeddingFailedModel, EmbeddingFailedRequirement, EmbeddingModelFailure, EmbeddingRefusal, EmbeddingRefusalCode, EmbeddingTower, IEmbeddingEncoderProvider, } from './embedding-encoder.cap.js';
 export { EMBEDDING_MODEL_FAILED, EMBEDDING_REQUIREMENTS_FAILED, EMBEDDING_REQUIREMENTS_UNAVAILABLE, EmbeddingFailedModelSchema, EmbeddingFailedRequirementSchema, EmbeddingInfoSchema, EmbeddingRefusalCodeSchema, EmbeddingResultSchema, EmbeddingTowerSchema, embeddingEncoderCapability, embeddingModelFailedError, embeddingModelFailedOf, embeddingRefusalOf, embeddingRequirementsFailedError, embeddingRequirementsUnavailableError, isEmbeddingModelFailed, } from './embedding-encoder.cap.js';
+export type { INodeRemovalHookProvider, NodeRemovedInput, NodeRemovedResult, } from './node-removal-hook.cap.js';
+export { NodeRemovedInputSchema, NodeRemovedResultSchema, nodeRemovalHookCapability, } from './node-removal-hook.cap.js';
 export type { DeviceDataEntry, DeviceRemovedInput, DeviceRemovedResult, IDeviceRemovalHookProvider, } from './device-removal-hook.cap.js';
 export { DeviceDataEntrySchema, DeviceRemovedInputSchema, DeviceRemovedResultSchema, deviceRemovalHookCapability, } from './device-removal-hook.cap.js';
 export type { FailureContribution, IFailureContributionProvider, } from './failure-contribution.cap.js';
@@ -338,6 +340,7 @@ import type { deviceProviderCapability } from './device-provider.cap.js';
 import type { deviceStateCapability } from './device-state.cap.js';
 import type { deviceStatusCapability } from './device-status.cap.js';
 import type { deviceRemovalHookCapability } from './device-removal-hook.cap.js';
+import type { nodeRemovalHookCapability } from './node-removal-hook.cap.js';
 import type { dishwasherCapability } from './dishwasher.cap.js';
 import type { doorbellCapability } from './doorbell.cap.js';
 import type { embeddingEncoderCapability } from './embedding-encoder.cap.js';
@@ -455,6 +458,6 @@ import type { trainingProviderCapability } from './training-provider.cap.js';
 import type { zoneAnalyticsCapability } from './zone-analytics.cap.js';
 import type { zoneRulesCapability } from './zone-rules.cap.js';
 import type { zonesCapability } from './zones.cap.js';
-type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof databaseSnapshotCapability | typeof storageAdminCapability | typeof recordsCapability | typeof recordEntriesCapability | typeof deviceHistoryCapability | typeof keychainCapability | typeof keychainAdminCapability | typeof deviceCredentialsCapability | typeof nodeCertificatesCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof deviceRemovalHookCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceAdminLinkCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof calendarSourceCapability | typeof calendarsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof composerCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof runningStateCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof meterCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof actionSourceCapability | typeof actionsCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof trainingCapability | typeof trainingProviderCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof groupActiveCapability | typeof groupCommandsCapability | typeof groupStatusCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof heatingValveCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingArchiveCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof displayPaletteCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof oidcConnectionsCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof recordingOnboardCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof irTransmitterCapability | typeof remoteCapability | typeof templateCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability | typeof deviceExtensionCapability | typeof dishwasherCapability;
+type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof databaseSnapshotCapability | typeof storageAdminCapability | typeof recordsCapability | typeof recordEntriesCapability | typeof deviceHistoryCapability | typeof keychainCapability | typeof keychainAdminCapability | typeof deviceCredentialsCapability | typeof nodeCertificatesCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof deviceRemovalHookCapability | typeof nodeRemovalHookCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceAdminLinkCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof calendarSourceCapability | typeof calendarsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof composerCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof runningStateCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof meterCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof actionSourceCapability | typeof actionsCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof trainingCapability | typeof trainingProviderCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof groupActiveCapability | typeof groupCommandsCapability | typeof groupStatusCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof heatingValveCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingArchiveCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof displayPaletteCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof oidcConnectionsCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof recordingOnboardCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof irTransmitterCapability | typeof remoteCapability | typeof templateCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability | typeof deviceExtensionCapability | typeof dishwasherCapability;
 export type CapabilityName = AnyCapability['name'];
 export type ITypedReadinessRegistry = IReadinessRegistry<CapabilityName>;

package/dist/capabilities/node-removal-hook.cap.d.ts

@@ -0,0 +1,67 @@
+/**
+ * `node-removal-hook` — the reliable way an addon learns a cluster node was
+ * FORGOTTEN, so it can remove or re-point what it keeps for that node. The
+ * node-scoped twin of `device-removal-hook` (D865); same shape, same rules.
+ *
+ * ## Why not "the node is absent"
+ *
+ * A node missing from topology is offline, restarting or not yet re-registered —
+ * it is not forgotten. Deleting node-scoped data from absence destroys a live
+ * node's configuration on any failed or partial read (D49). So the hook is
+ * driven by a TOMBSTONE the hub records when the operator forgets a node
+ * (`AgentRegistryService.forgetClusterNode`); nothing else produces one.
+ *
+ * ## The pieces
+ *
+ * 1. The hub records a tombstone `{ nodeId, removedAt, pending }` before it calls
+ *    anyone. `pending` is the set of implementers that have not yet acknowledged.
+ * 2. The hub calls `onNodeRemoved` on EVERY provider of this collection, one by
+ *    one, with bounded retries, logged; an acknowledgement removes the
+ *    implementer from `pending`.
+ * 3. The hub re-drives still-pending tombstones at boot, so an implementer that
+ *    was down at forget time is told when it is back.
+ *
+ * ## Contract for an implementer
+ *
+ * - **Idempotent.** Called again by a retry and by the boot re-drive. A node with
+ *   nothing left answers zero counts.
+ * - **One key per store** in `counts`, rows changed per store, so the log line
+ *   can say where the data was.
+ * - **Re-point or remove, never guess.** A row that merely MENTIONS the node as
+ *   a preference is re-pointed to "unset"; a row that only means something on
+ *   that node (a runtime bound to it) is removed.
+ * - A provider that cannot tell is allowed to throw; the caller retries it.
+ */
+import { z } from 'zod';
+import { type InferProvider } from './capability-definition.js';
+/** What a hook is told about the removal. */
+export declare const NodeRemovedInputSchema: z.ZodObject<{
+    nodeId: z.ZodString;
+    removedAt: z.ZodNumber;
+}, z.core.$strip>;
+export type NodeRemovedInput = z.infer<typeof NodeRemovedInputSchema>;
+/** Rows changed (removed or re-pointed), per store this implementer owns. */
+export declare const NodeRemovedResultSchema: z.ZodObject<{
+    counts: z.ZodRecord<z.ZodString, z.ZodNumber>;
+}, z.core.$strip>;
+export type NodeRemovedResult = z.infer<typeof NodeRemovedResultSchema>;
+export declare const nodeRemovalHookCapability: {
+    readonly name: 'node-removal-hook';
+    readonly scope: 'system';
+    readonly mode: 'collection';
+    readonly internal: true;
+    readonly methods: {
+        /** Remove or re-point everything this addon keeps for the forgotten node. Idempotent. */
+        readonly onNodeRemoved: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            nodeId: z.ZodString;
+            removedAt: z.ZodNumber;
+        }, z.core.$strip>, z.ZodObject<{
+            counts: z.ZodRecord<z.ZodString, z.ZodNumber>;
+        }, z.core.$strip>, "mutation">;
+    };
+    /** In-process only — enumerated through `addons.listCapabilityProviders`. */
+    readonly mount: {
+        readonly kind: 'skip';
+    };
+};
+export type INodeRemovalHookProvider = InferProvider<typeof nodeRemovalHookCapability>;

package/dist/capabilities/pipeline-orchestrator.cap.d.ts

@@ -1164,8 +1164,7 @@ export declare const pipelineOrchestratorCapability: {
          * replaced the four flat orchestrator lists (`enabledNodes`,
          * `enabledDecoderNodes`, `enabledAudioNodes`, `remoteSourcingNodes`).
          * Each flag is optional in the patch: omit a flag to leave it unchanged,
-         * pass `null` to reset it to the node default (`hub` → capable, every
-         * other node → not). Detection/audio eligibility is derived from these
+         * pass `null` to reset it to the default (ON for every node). Detection/audio eligibility is derived from these
          * flags across the cluster; changing them re-derives the enabled sets
          * and reconciles dispatch immediately. There is NO separate decode flag:
          * decode is always co-located with its frame consumer, so decode

package/dist/generated/addon-api.d.ts

@@ -91,6 +91,7 @@ import type { navigationCapability } from '../capabilities/navigation.cap.js';
 import type { networkAccessCapability } from '../capabilities/network-access.cap.js';
 import type { networkQualityCapability } from '../capabilities/network-quality.cap.js';
 import type { nodeCertificatesCapability } from '../capabilities/node-certificates.cap.js';
+import type { nodeRemovalHookCapability } from '../capabilities/node-removal-hook.cap.js';
 import type { nodesCapability } from '../capabilities/nodes.cap.js';
 import type { notificationOutputCapability } from '../capabilities/notification-output.cap.js';
 import type { notificationRulesCapability } from '../capabilities/notification-rules.cap.js';
@@ -5694,6 +5695,20 @@ export type AppRouter = TrpcCoreRouter<{
             meta: object;
         }>;
     }>>;
+    nodeRemovalHook: TRPCBuiltRouter<{
+        ctx: TrpcContext;
+        meta: object;
+        errorShape: AugmentedErrorShape;
+        transformer: true;
+    }, TRPCDecorateCreateRouterOptions<{
+        onNodeRemoved: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof nodeRemovalHookCapability.methods.onNodeRemoved.input>;
+            output: z.infer<typeof nodeRemovalHookCapability.methods.onNodeRemoved.output>;
+            meta: object;
+        }>;
+    }>>;
     nodes: TRPCBuiltRouter<{
         ctx: TrpcContext;
         meta: object;

package/dist/generated/capability-router-map.d.ts

@@ -113,6 +113,7 @@ export { networkAccessCapability } from '../capabilities/network-access.cap.js';
 export { networkLinkCapability } from '../capabilities/network-link.cap.js';
 export { networkQualityCapability } from '../capabilities/network-quality.cap.js';
 export { nodeCertificatesCapability } from '../capabilities/node-certificates.cap.js';
+export { nodeRemovalHookCapability } from '../capabilities/node-removal-hook.cap.js';
 export { nodesCapability } from '../capabilities/nodes.cap.js';
 export { notificationOutputCapability } from '../capabilities/notification-output.cap.js';
 export { notificationRulesCapability } from '../capabilities/notification-rules.cap.js';
@@ -304,6 +305,7 @@ export declare const CAPABILITY_NAMES: {
     readonly networkLink: 'network-link';
     readonly networkQuality: 'network-quality';
     readonly nodeCertificates: 'node-certificates';
+    readonly nodeRemovalHook: 'node-removal-hook';
     readonly nodes: 'nodes';
     readonly notificationOutput: 'notification-output';
     readonly notificationRules: 'notification-rules';
@@ -508,6 +510,7 @@ export interface CapabilityRouterMap<TRouter = unknown> {
     readonly networkLink: TRouter;
     readonly networkQuality: TRouter;
     readonly nodeCertificates: TRouter;
+    readonly nodeRemovalHook: TRouter;
     readonly nodes: TRouter;
     readonly notificationOutput: TRouter;
     readonly notificationRules: TRouter;
@@ -588,8 +591,8 @@ export interface CapabilityRouterMap<TRouter = unknown> {
 export declare const SINGLETON_CAPABILITY_NAMES: readonly ['accessories', 'actions', 'addon-pages', 'addon-settings', 'addon-widgets', 'addons', 'admin-ui', 'air-quality-sensor', 'alarm-panel', 'alerts', 'ambient-light-sensor', 'audio-analysis', 'audio-analyzer', 'audio-codec', 'audio-metrics', 'automation-control', 'backup', 'battery', 'binary', 'brightness', 'button', 'calendars', 'camera-credentials', 'camera-grid-layout', 'camera-pipeline-config', 'camera-streams', 'carbon-monoxide', 'climate-control', 'color', 'composer', 'connectivity', 'consumables', 'contact', 'control', 'core-blocks', 'cover', 'database-snapshot', 'day-night', 'decoder', 'detection-pipeline', 'device-admin-link', 'device-credentials', 'device-discovery', 'device-history', 'device-manager', 'device-ops', 'device-state', 'device-status', 'dishwasher', 'display-palette', 'doorbell', 'enum-sensor', 'event-emitter', 'face-gallery', 'fan-control', 'feature-probe', 'filesystem-browse', 'flood', 'gas', 'group-active', 'group-commands', 'group-status', 'heating-valve', 'humidifier', 'humidity-sensor', 'image', 'image-settings', 'integrations', 'intercom', 'ir-transmitter', 'keychain', 'keychain-admin', 'lawn-mower-control', 'llm-runtime', 'local-network', 'lock-control', 'media-player', 'meter', 'metrics-provider', 'model-convert', 'model-distributor', 'motion', 'motion-detection', 'motion-trigger', 'motion-zones', 'native-object-detection', 'navigation', 'network-link', 'network-quality', 'node-certificates', 'nodes', 'notification-rules', 'notifier', 'numeric-sensor', 'oidc-connections', 'osd', 'osd-manager', 'pet-feeder', 'pipeline-analytics', 'pipeline-executor', 'pipeline-orchestrator', 'pipeline-runner', 'plate-gallery', 'platform-probe', 'power-meter', 'presence', 'pressure-sensor', 'privacy-mask', 'ptz', 'ptz-autotrack', 'reboot', 'record-entries', 'recording-archive', 'recording-export', 'recording-onboard', 'recording-signal', 'records', 'remote', 'running-state', 'scene-monitor', 'script-runner', 'server-management', 'settings-store', 'smoke', 'snapshot', 'sso-bridge', 'storage', 'storage-admin', 'storage-migration', 'stream-broker', 'stream-catalog', 'stream-params', 'stream-signals', 'switch', 'system', 'tamper', 'temperature-sensor', 'terminal-session', 'toast', 'training', 'update', 'user-management', 'vacuum-control', 'valve', 'vector-store', 'vibration', 'viewer-ui', 'water-heater', 'weather', 'webrtc-session', 'zone-analytics', 'zone-rules', 'zones'];
 /** Union of singleton capability names (literal string union). */
 export type SingletonCapabilityName = typeof SINGLETON_CAPABILITY_NAMES[number];
-/** Capability names whose mode is `collection` (37 caps). */
-export declare const COLLECTION_CAPABILITY_NAMES: readonly ['action-source', 'addon-pages-source', 'addon-routes', 'addon-widgets-source', 'auth-provider', 'broker', 'calendar-source', 'connection-test', 'custom-model-registry', 'data-store-provider', 'device-adoption', 'device-export', 'device-extension', 'device-provider', 'device-removal-hook', 'embedding-encoder', 'failure-contribution', 'llm', 'load-contribution', 'log-channels', 'log-destination', 'login-method', 'mesh-network', 'mqtt-broker', 'network-access', 'notification-output', 'oauth-integration', 'recording', 'smtp-provider', 'storage-evictable', 'storage-occupancy', 'storage-provider', 'template', 'training-provider', 'turn-provider', 'user-passkeys', 'videoclips'];
+/** Capability names whose mode is `collection` (38 caps). */
+export declare const COLLECTION_CAPABILITY_NAMES: readonly ['action-source', 'addon-pages-source', 'addon-routes', 'addon-widgets-source', 'auth-provider', 'broker', 'calendar-source', 'connection-test', 'custom-model-registry', 'data-store-provider', 'device-adoption', 'device-export', 'device-extension', 'device-provider', 'device-removal-hook', 'embedding-encoder', 'failure-contribution', 'llm', 'load-contribution', 'log-channels', 'log-destination', 'login-method', 'mesh-network', 'mqtt-broker', 'network-access', 'node-removal-hook', 'notification-output', 'oauth-integration', 'recording', 'smtp-provider', 'storage-evictable', 'storage-occupancy', 'storage-provider', 'template', 'training-provider', 'turn-provider', 'user-passkeys', 'videoclips'];
 /** Union of collection capability names (literal string union). */
 export type CollectionCapabilityName = typeof COLLECTION_CAPABILITY_NAMES[number];
 /** Capability mode lookup at runtime — mirrors the `.cap.ts` definitions. */

package/dist/generated/method-access-map.d.ts

@@ -6,7 +6,7 @@
  * scope+access check inside `protectedProcedure` (see
  * `server/backend/src/api/trpc/trpc.middleware.ts`).
  *
- * Coverage: 1416 method paths across 190 capabilities.
+ * Coverage: 1417 method paths across 191 capabilities.
  */
 import type { MethodRole } from '../auth/viewer-access.js';
 import type { CapabilityMethodAccess } from '../capabilities/capability-definition.js';

package/dist/index.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-BpwNJ1Su.js");
+const require_sleep = require("./sleep-E7qAQwTE.js");
 const require_event_category = require("./event-category-E17zaHjN.js");
 const require_composition = require("./composition-C0dlyG9U.js");
 const require_node_color = require("./node-color.js");
@@ -43463,6 +43463,64 @@ var embeddingEncoderCapability = {
 	}
 };
 //#endregion
+//#region src/capabilities/node-removal-hook.cap.ts
+/**
+* `node-removal-hook` — the reliable way an addon learns a cluster node was
+* FORGOTTEN, so it can remove or re-point what it keeps for that node. The
+* node-scoped twin of `device-removal-hook` (D865); same shape, same rules.
+*
+* ## Why not "the node is absent"
+*
+* A node missing from topology is offline, restarting or not yet re-registered —
+* it is not forgotten. Deleting node-scoped data from absence destroys a live
+* node's configuration on any failed or partial read (D49). So the hook is
+* driven by a TOMBSTONE the hub records when the operator forgets a node
+* (`AgentRegistryService.forgetClusterNode`); nothing else produces one.
+*
+* ## The pieces
+*
+* 1. The hub records a tombstone `{ nodeId, removedAt, pending }` before it calls
+*    anyone. `pending` is the set of implementers that have not yet acknowledged.
+* 2. The hub calls `onNodeRemoved` on EVERY provider of this collection, one by
+*    one, with bounded retries, logged; an acknowledgement removes the
+*    implementer from `pending`.
+* 3. The hub re-drives still-pending tombstones at boot, so an implementer that
+*    was down at forget time is told when it is back.
+*
+* ## Contract for an implementer
+*
+* - **Idempotent.** Called again by a retry and by the boot re-drive. A node with
+*   nothing left answers zero counts.
+* - **One key per store** in `counts`, rows changed per store, so the log line
+*   can say where the data was.
+* - **Re-point or remove, never guess.** A row that merely MENTIONS the node as
+*   a preference is re-pointed to "unset"; a row that only means something on
+*   that node (a runtime bound to it) is removed.
+* - A provider that cannot tell is allowed to throw; the caller retries it.
+*/
+/** What a hook is told about the removal. */
+var NodeRemovedInputSchema = zod.z.object({
+	nodeId: zod.z.string().min(1),
+	/** Epoch ms the node was forgotten (the tombstone's `removedAt`). */
+	removedAt: zod.z.number()
+});
+/** Rows changed (removed or re-pointed), per store this implementer owns. */
+var NodeRemovedResultSchema = zod.z.object({ counts: zod.z.record(zod.z.string(), zod.z.number().int().nonnegative()) });
+var nodeRemovalHookCapability = {
+	name: "node-removal-hook",
+	scope: "system",
+	mode: "collection",
+	internal: true,
+	methods: { 
+	/** Remove or re-point everything this addon keeps for the forgotten node. Idempotent. */
+onNodeRemoved: require_sleep.method(NodeRemovedInputSchema, NodeRemovedResultSchema, {
+		kind: "mutation",
+		auth: "admin"
+	}) },
+	/** In-process only — enumerated through `addons.listCapabilityProviders`. */
+	mount: { kind: "skip" }
+};
+//#endregion
 //#region src/capabilities/device-removal-hook.cap.ts
 /**
 * `device-removal-hook` — the reliable way an addon learns a device was DELETED,
@@ -59120,8 +59178,7 @@ var pipelineOrchestratorCapability = {
 		* replaced the four flat orchestrator lists (`enabledNodes`,
 		* `enabledDecoderNodes`, `enabledAudioNodes`, `remoteSourcingNodes`).
 		* Each flag is optional in the patch: omit a flag to leave it unchanged,
-		* pass `null` to reset it to the node default (`hub` → capable, every
-		* other node → not). Detection/audio eligibility is derived from these
+		* pass `null` to reset it to the default (ON for every node). Detection/audio eligibility is derived from these
 		* flags across the cluster; changing them re-derives the enabled sets
 		* and reconciles dispatch immediately. There is NO separate decode flag:
 		* decode is always co-located with its frame consumer, so decode
@@ -92880,6 +92937,13 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"nodeRemovalHook.onNodeRemoved": {
+		capName: "node-removal-hook",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"nodes.clusterAddonStatus": {
 		capName: "nodes",
 		capScope: "system",
@@ -98115,6 +98179,7 @@ var KNOWN_CAP_NAMES = [
 	"network-link",
 	"network-quality",
 	"node-certificates",
+	"node-removal-hook",
 	"nodes",
 	"notification-output",
 	"notification-rules",
@@ -98348,6 +98413,7 @@ var SYSTEM_CAP_NAMES = [
 	"network-access",
 	"network-quality",
 	"node-certificates",
+	"node-removal-hook",
 	"nodes",
 	"notification-output",
 	"notification-rules",
@@ -102224,6 +102290,7 @@ var SYSTEM_CAP_VOCABULARY = {
 	"device-manager": system("the device registry itself — rename, move and remove are administration"),
 	"device-provider": system(INTERNAL),
 	"device-removal-hook": system(INTERNAL),
+	"node-removal-hook": system(INTERNAL),
 	"device-state": system("the runtime-state mirror every trigger already reads through"),
 	"display-palette": system("the cluster display palette — one colour table for every client, not a device action"),
 	"embedding-encoder": system(ML),
@@ -104216,6 +104283,7 @@ var CAPABILITY_NAMES = {
 	networkLink: "network-link",
 	networkQuality: "network-quality",
 	nodeCertificates: "node-certificates",
+	nodeRemovalHook: "node-removal-hook",
 	nodes: "nodes",
 	notificationOutput: "notification-output",
 	notificationRules: "notification-rules",
@@ -104754,6 +104822,10 @@ var CAPABILITY_ROUTER_KEYS = [
 		key: "nodeCertificates",
 		name: "node-certificates"
 	},
+	{
+		key: "nodeRemovalHook",
+		name: "node-removal-hook"
+	},
 	{
 		key: "nodes",
 		name: "nodes"
@@ -105180,6 +105252,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	networkLinkCapability,
 	networkQualityCapability,
 	nodeCertificatesCapability,
+	nodeRemovalHookCapability,
 	nodesCapability,
 	notificationOutputCapability,
 	notificationRulesCapability,
@@ -119078,6 +119151,7 @@ var OAUTH_LANDING_REASONS = [
 	"unknown_broker",
 	"not_configured",
 	"exchange_failed",
+	"no_authorization_code",
 	"no_refresh_token",
 	"unavailable",
 	"unknown"
@@ -119305,6 +119379,83 @@ function filterForwardedCookies(cookieHeader) {
 	return cookieHeader.split(";").map((part) => part.trim()).filter((part) => part.length > 0 && !part.toLowerCase().startsWith("camstack_")).join("; ");
 }
 //#endregion
+//#region src/vendor-login-proxy/flow-trace.ts
+/** A short stable label for the attempt: enough to group lines, useless as a capability. */
+function attemptLabel(attemptId) {
+	let hash = 2166136261;
+	for (let i = 0; i < attemptId.length; i += 1) hash = Math.imul(hash ^ attemptId.charCodeAt(i), 16777619) >>> 0;
+	return hash.toString(16).padStart(8, "0");
+}
+/** Distinct parameter names of a `?a=1&b=2` string (or of a urlencoded body), in order. */
+function paramNames(query) {
+	const names = [];
+	const raw = query.startsWith("?") ? query.slice(1) : query;
+	for (const pair of raw.split("&")) {
+		if (pair.length === 0) continue;
+		const eq = pair.indexOf("=");
+		const rawName = eq === -1 ? pair : pair.slice(0, eq);
+		let name;
+		try {
+			name = decodeURIComponent(rawName.replace(/\+/g, " "));
+		} catch {
+			name = rawName;
+		}
+		if (!names.includes(name)) names.push(name);
+	}
+	return names;
+}
+function hasOa2(names) {
+	return names.some((name) => name.startsWith("openid.oa2.") || name === "openid.ns.oa2");
+}
+function cookieNamesOf(setCookies) {
+	return setCookies.map((c) => c.split(";")[0]?.split("=")[0]?.trim() ?? "");
+}
+function mediaType(contentType) {
+	return (contentType ?? "none").split(";")[0]?.trim().toLowerCase() || "none";
+}
+/** Host and path of a Location (no query), or 'unparsable'. */
+function locationShape(location, base) {
+	try {
+		const url = new URL(location, base);
+		return {
+			target: `${url.host}${url.pathname}`,
+			names: paramNames(url.search)
+		};
+	} catch {
+		return {
+			target: "unparsable",
+			names: []
+		};
+	}
+}
+/** The `meta` of one trace line. Values: never. */
+function flowTraceMeta(input) {
+	const queryNames = paramNames(input.requestSearch);
+	const formNames = input.formBody === null ? null : paramNames(input.formBody);
+	const meta = {
+		session: attemptLabel(input.attemptId),
+		method: input.method,
+		upstream: `${input.upstreamHost}${input.upstreamPath}`,
+		queryNames: queryNames.join(",") || "none",
+		oa2InQuery: hasOa2(queryNames),
+		status: input.status,
+		setCookieNames: cookieNamesOf(input.setCookies).join(",") || "none",
+		cookiesSent: (input.cookieHeader ?? "").split(";").filter((p) => p.trim().length > 0).length
+	};
+	if (formNames !== null) {
+		meta["contentType"] = mediaType(input.contentType);
+		meta["formNames"] = formNames.join(",") || "none";
+		meta["oa2InForm"] = hasOa2(formNames);
+	}
+	if (input.location !== null) {
+		const loc = locationShape(input.location, `http://${input.upstreamHost}/`);
+		meta["location"] = loc.target;
+		meta["locationQueryNames"] = loc.names.join(",") || "none";
+		meta["oa2InLocation"] = hasOa2(loc.names);
+	}
+	return meta;
+}
+//#endregion
 //#region src/vendor-login-proxy/login-proxy.ts
 var MAX_REQUEST_BODY_BYTES = 2 * 1024 * 1024;
 var MAX_TEXT_BODY_BYTES = 4 * 1024 * 1024;
@@ -119410,6 +119561,8 @@ var VendorLoginProxy = class {
 	#now;
 	#fetch;
 	#attempts = /* @__PURE__ */ new Map();
+	/** Trace lines written per attempt (bounded by FLOW_TRACE_MAX_LINES). */
+	#traced = /* @__PURE__ */ new Map();
 	constructor(options) {
 		this.#addonId = options.addonId;
 		this.#logger = options.logger;
@@ -119436,6 +119589,7 @@ var VendorLoginProxy = class {
 	}
 	close(attemptId) {
 		this.#attempts.delete(attemptId);
+		this.#traced.delete(attemptId);
 	}
 	isOpen(attemptId) {
 		const attempt = this.#attempts.get(attemptId);
@@ -119482,7 +119636,7 @@ var VendorLoginProxy = class {
 		const forwardedPrefix = (firstHeader(req.headers["x-forwarded-prefix"]) ?? "").replace(/\/+$/, "");
 		const attempt = this.#attempts.get(parsed.attemptId);
 		if (attempt === void 0 || this.#now() > attempt.expiresAtMs) {
-			if (attempt !== void 0) this.#attempts.delete(parsed.attemptId);
+			if (attempt !== void 0) this.close(parsed.attemptId);
 			this.#logger.info("vendor login proxy: attempt refused", { meta: {
 				addonId: this.#addonId,
 				reason: attempt === void 0 ? "missing" : "expired"
@@ -119507,13 +119661,17 @@ var VendorLoginProxy = class {
 		}
 		const method = (req.method ?? "GET").toUpperCase();
 		let body;
+		let formBodyRaw = null;
 		if (method !== "GET" && method !== "HEAD") {
 			const read = await readRequestBody(req);
 			if (read === "too-large") {
 				sendPlain(res, 413, "Request too large");
 				return;
 			}
-			body = isFormEncoded(req.headers["content-type"]) ? Buffer.from(rewriteFormBody(read.toString("utf8"), route), "utf8") : read;
+			if (isFormEncoded(req.headers["content-type"])) {
+				formBodyRaw = read.toString("utf8");
+				body = Buffer.from(rewriteFormBody(formBodyRaw, route), "utf8");
+			} else body = read;
 		}
 		const headers = this.#requestHeaders(req, route, upstream);
 		const upstreamRes = await this.#fetch(target, {
@@ -119538,6 +119696,19 @@ var VendorLoginProxy = class {
 			sentNames: cookieNames(headers["cookie"]),
 			vendorSets: setCookies.map(setCookieShape).join(" | ")
 		} });
+		this.#trace(parsed.attemptId, {
+			attemptId: parsed.attemptId,
+			method,
+			upstreamHost: upstream.host,
+			upstreamPath: target.pathname,
+			requestSearch: target.search,
+			formBody: formBodyRaw,
+			contentType: firstHeader(req.headers["content-type"]),
+			status: upstreamRes.status,
+			location,
+			setCookies,
+			cookieHeader: headers["cookie"]
+		});
 		const settled = await attempt.evaluate({
 			status: upstreamRes.status,
 			url: target.toString(),
@@ -119546,7 +119717,7 @@ var VendorLoginProxy = class {
 			bodyText: text
 		});
 		if (settled.kind === "done") {
-			this.#attempts.delete(parsed.attemptId);
+			this.close(parsed.attemptId);
 			this.#logger.info("vendor login proxy: sign-in finished", { meta: {
 				addonId: this.#addonId,
 				status: settled.landing.status
@@ -119570,6 +119741,16 @@ var VendorLoginProxy = class {
 		res.writeHead(upstreamRes.status, out);
 		await this.#pipeBody(upstreamRes, res);
 	}
+	/** One names-only line per proxied request, at most FLOW_TRACE_MAX_LINES per attempt. */
+	#trace(attemptId, input) {
+		const written = this.#traced.get(attemptId) ?? 0;
+		if (written >= 200) return;
+		this.#traced.set(attemptId, written + 1);
+		this.#logger.info("vendor login proxy: flow", { meta: {
+			addonId: this.#addonId,
+			...flowTraceMeta(input)
+		} });
+	}
 	#requestHeaders(req, route, upstream) {
 		const headers = {};
 		for (const [name, value] of Object.entries(req.headers)) {
@@ -122125,6 +122306,8 @@ exports.NodeDirectoryEntrySchema = NodeDirectoryEntrySchema;
 exports.NodeDirectorySchema = NodeDirectorySchema;
 exports.NodeHttpsStateSchema = NodeHttpsStateSchema;
 exports.NodeRecommendationSchema = NodeRecommendationSchema;
+exports.NodeRemovedInputSchema = NodeRemovedInputSchema;
+exports.NodeRemovedResultSchema = NodeRemovedResultSchema;
 exports.NotificationActionIconSchema = NotificationActionIconSchema;
 exports.NotificationActionSchema = NotificationActionSchema;
 exports.NotificationFormatSchema = NotificationFormatSchema;
@@ -123559,6 +123742,7 @@ exports.nodeBenchmarkRefusals = nodeBenchmarkRefusals;
 exports.nodeCertificatesCapability = nodeCertificatesCapability;
 exports.nodePickerItems = nodePickerItems;
 exports.nodePin = require_sleep.nodePin;
+exports.nodeRemovalHookCapability = nodeRemovalHookCapability;
 exports.nodesCapability = nodesCapability;
 exports.normalizeAddonInitResult = require_sleep.normalizeAddonInitResult;
 exports.normalizeAudioLabel = normalizeAudioLabel;