@kusinta/iot-schema 0.1.0-beta.2 → 0.1.0-beta.20

package/src/kusinta/iot/webrtc/v1/envelope_pb.d.ts

@@ -1,14 +1,14 @@
-// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts"
+// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts,import_extension=js"
 // @generated from file kusinta/iot/webrtc/v1/envelope.proto (package kusinta.iot.webrtc.v1, syntax proto3)
 /* eslint-disable */
 
-import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
 import type { Message } from "@bufbuild/protobuf";
-import type { DeviceId } from "../../identity/v1/identity_pb";
+import type { DeviceId } from "../../identity/v1/identity_pb.js";
 import type { Timestamp } from "@bufbuild/protobuf/wkt";
-import type { DevicePropertyEvent, DeviceStateSnapshot } from "./device_state_pb";
-import type { LivePermissionUpdate } from "./permission_push_pb";
-import type { CommandResult, DeviceCommand } from "./command_pb";
+import type { DeviceAdded, DevicePropertyEvent, DeviceRemoved, DeviceStateSnapshot } from "./device_state_pb.js";
+import type { LivePermissionUpdate } from "./permission_push_pb.js";
+import type { CommandResult, DeviceCommand } from "./command_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/envelope.proto.
@@ -39,6 +39,22 @@ export declare type Pong = Message<"kusinta.iot.webrtc.v1.Pong"> & {
  */
 export declare const PongSchema: GenMessage<Pong>;
 
+/**
+ * @generated from message kusinta.iot.webrtc.v1.HandshakeRejected
+ */
+export declare type HandshakeRejected = Message<"kusinta.iot.webrtc.v1.HandshakeRejected"> & {
+  /**
+   * @generated from field: string reason = 1;
+   */
+  reason: string;
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.HandshakeRejected.
+ * Use `create(HandshakeRejectedSchema)` to create a new message.
+ */
+export declare const HandshakeRejectedSchema: GenMessage<HandshakeRejected>;
+
 /**
  * AppHandshake must be the first message sent by the Flutter app on the data channel.
  * The gateway validates the JWT locally using the mykusinta-api-server public key,
@@ -48,11 +64,21 @@ export declare const PongSchema: GenMessage<Pong>;
  */
 export declare type AppHandshake = Message<"kusinta.iot.webrtc.v1.AppHandshake"> & {
   /**
+   * Signed compact JWS. Its payload claims are documented by AppTokenClaims
+   * in app_token.proto — the shared contract between mykusinta-api-server
+   * (issuer) and the gateway (validator).
+   *
    * @generated from field: string jwt = 1;
    */
   jwt: string;
 
   /**
+   * Initial interest set — an optimisation that saves one round trip, equivalent to
+   * sending SubscribeDevices immediately after the handshake. Interest only: naming
+   * an id here does not entitle the app to it, and ids the user may not see are
+   * refused in the SubscriptionAck that follows. Not the only mechanism — the set is
+   * revisable mid-session via AppMessage.subscribe / .unsubscribe.
+   *
    * @generated from field: repeated kusinta.iot.identity.v1.DeviceId subscribe_device_ids = 2;
    */
   subscribeDeviceIds: DeviceId[];
@@ -64,6 +90,110 @@ export declare type AppHandshake = Message<"kusinta.iot.webrtc.v1.AppHandshake">
  */
 export declare const AppHandshakeSchema: GenMessage<AppHandshake>;
 
+/**
+ * Adds device_ids to what the app wants streamed. Interest, never entitlement:
+ * the gateway intersects the request with what the user is permitted to see and
+ * reports what it declined in SubscriptionAck.refused. Additive — ids already in
+ * the set are a no-op, so a retry after a dropped ack is safe.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.SubscribeDevices
+ */
+export declare type SubscribeDevices = Message<"kusinta.iot.webrtc.v1.SubscribeDevices"> & {
+  /**
+   * @generated from field: repeated kusinta.iot.identity.v1.DeviceId device_ids = 1;
+   */
+  deviceIds: DeviceId[];
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.SubscribeDevices.
+ * Use `create(SubscribeDevicesSchema)` to create a new message.
+ */
+export declare const SubscribeDevicesSchema: GenMessage<SubscribeDevices>;
+
+/**
+ * Removes device_ids from what the app wants streamed. Removing an id the app is
+ * not subscribed to is a no-op, not an error.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.UnsubscribeDevices
+ */
+export declare type UnsubscribeDevices = Message<"kusinta.iot.webrtc.v1.UnsubscribeDevices"> & {
+  /**
+   * @generated from field: repeated kusinta.iot.identity.v1.DeviceId device_ids = 1;
+   */
+  deviceIds: DeviceId[];
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.UnsubscribeDevices.
+ * Use `create(UnsubscribeDevicesSchema)` to create a new message.
+ */
+export declare const UnsubscribeDevicesSchema: GenMessage<UnsubscribeDevices>;
+
+/**
+ * A device the gateway declined to add to the interest set. Ids the gateway does
+ * not know are refused as NOT_ENTITLED rather than a distinct not-found code, so
+ * the ack cannot be used to enumerate devices the user may not see.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.RefusedSubscription
+ */
+export declare type RefusedSubscription = Message<"kusinta.iot.webrtc.v1.RefusedSubscription"> & {
+  /**
+   * @generated from field: kusinta.iot.identity.v1.DeviceId device_id = 1;
+   */
+  deviceId?: DeviceId | undefined;
+
+  /**
+   * @generated from field: kusinta.iot.webrtc.v1.GatewayErrorCode code = 2;
+   */
+  code: GatewayErrorCode;
+
+  /**
+   * human-readable, for logs
+   *
+   * @generated from field: string message = 3;
+   */
+  message: string;
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.RefusedSubscription.
+ * Use `create(RefusedSubscriptionSchema)` to create a new message.
+ */
+export declare const RefusedSubscriptionSchema: GenMessage<RefusedSubscription>;
+
+/**
+ * Answer to SubscribeDevices / UnsubscribeDevices, gateway → Flutter app.
+ * `subscribed` is the effective set after the change, not a delta: an app that
+ * missed an ack or raced two requests re-syncs from it without reconnecting.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.SubscriptionAck
+ */
+export declare type SubscriptionAck = Message<"kusinta.iot.webrtc.v1.SubscriptionAck"> & {
+  /**
+   * AppMessage.message_id of the request
+   *
+   * @generated from field: string in_reply_to = 1;
+   */
+  inReplyTo: string;
+
+  /**
+   * @generated from field: repeated kusinta.iot.identity.v1.DeviceId subscribed = 2;
+   */
+  subscribed: DeviceId[];
+
+  /**
+   * @generated from field: repeated kusinta.iot.webrtc.v1.RefusedSubscription refused = 3;
+   */
+  refused: RefusedSubscription[];
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.SubscriptionAck.
+ * Use `create(SubscriptionAckSchema)` to create a new message.
+ */
+export declare const SubscriptionAckSchema: GenMessage<SubscriptionAck>;
+
 /**
  * @generated from message kusinta.iot.webrtc.v1.PropertyReadRequest
  */
@@ -90,6 +220,40 @@ export declare type PropertyReadRequest = Message<"kusinta.iot.webrtc.v1.Propert
  */
 export declare const PropertyReadRequestSchema: GenMessage<PropertyReadRequest>;
 
+/**
+ * Session-level error, gateway → Flutter app. Mirrors connector.v1.GatewayError
+ * on the connector leg; kept separate because the two legs have different
+ * authorization semantics and this one has a closed code vocabulary.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.GatewayError
+ */
+export declare type GatewayError = Message<"kusinta.iot.webrtc.v1.GatewayError"> & {
+  /**
+   * @generated from field: kusinta.iot.webrtc.v1.GatewayErrorCode code = 1;
+   */
+  code: GatewayErrorCode;
+
+  /**
+   * human-readable, for logs — never rendered to a user
+   *
+   * @generated from field: string message = 2;
+   */
+  message: string;
+
+  /**
+   * structured detail, e.g. {"device_id": "therm-1"}
+   *
+   * @generated from field: map<string, string> metadata = 3;
+   */
+  metadata: { [key: string]: string };
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.GatewayError.
+ * Use `create(GatewayErrorSchema)` to create a new message.
+ */
+export declare const GatewayErrorSchema: GenMessage<GatewayError>;
+
 /**
  * GatewayMessage: gateway → Flutter app
  *
@@ -135,18 +299,40 @@ export declare type GatewayMessage = Message<"kusinta.iot.webrtc.v1.GatewayMessa
     case: "commandResult";
   } | {
     /**
-     * error description string
-     *
-     * @generated from field: string error = 7;
+     * @generated from field: kusinta.iot.webrtc.v1.Pong pong = 8;
+     */
+    value: Pong;
+    case: "pong";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.HandshakeRejected handshake_rejected = 9;
+     */
+    value: HandshakeRejected;
+    case: "handshakeRejected";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.GatewayError error = 10;
      */
-    value: string;
+    value: GatewayError;
     case: "error";
   } | {
     /**
-     * @generated from field: kusinta.iot.webrtc.v1.Pong pong = 8;
+     * @generated from field: kusinta.iot.webrtc.v1.SubscriptionAck subscription_ack = 11;
      */
-    value: Pong;
-    case: "pong";
+    value: SubscriptionAck;
+    case: "subscriptionAck";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.DeviceAdded device_added = 12;
+     */
+    value: DeviceAdded;
+    case: "deviceAdded";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.DeviceRemoved device_removed = 13;
+     */
+    value: DeviceRemoved;
+    case: "deviceRemoved";
   } | { case: undefined; value?: undefined };
 };
 
@@ -199,6 +385,18 @@ export declare type AppMessage = Message<"kusinta.iot.webrtc.v1.AppMessage"> & {
      */
     value: Ping;
     case: "ping";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.SubscribeDevices subscribe = 7;
+     */
+    value: SubscribeDevices;
+    case: "subscribe";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.UnsubscribeDevices unsubscribe = 8;
+     */
+    value: UnsubscribeDevices;
+    case: "unsubscribe";
   } | { case: undefined; value?: undefined };
 };
 
@@ -208,3 +406,74 @@ export declare type AppMessage = Message<"kusinta.iot.webrtc.v1.AppMessage"> & {
  */
 export declare const AppMessageSchema: GenMessage<AppMessage>;
 
+/**
+ * Machine-readable classification of a session-level gateway error, so the app
+ * can branch without string-matching a human sentence. Deliberately an enum here,
+ * unlike the free-form code on connector.v1.GatewayError: the app leg is versioned
+ * together with the gateway, and clients need an exhaustive switch.
+ *
+ * @generated from enum kusinta.iot.webrtc.v1.GatewayErrorCode
+ */
+export enum GatewayErrorCode {
+  /**
+   * Sender did not set a code, or sent one this client's schema does not know.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+
+  /**
+   * Permanent refusal — the user may not see or act on this. Stop asking, tell the user.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_NOT_ENTITLED = 1;
+   */
+  NOT_ENTITLED = 1,
+
+  /**
+   * The app sent something malformed. A client bug: log it, do not retry.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_INVALID_REQUEST = 2;
+   */
+  INVALID_REQUEST = 2,
+
+  /**
+   * Transient failure. Retrying is reasonable.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_UNAVAILABLE = 3;
+   */
+  UNAVAILABLE = 3,
+
+  /**
+   * Gateway-side fault. Not the app's doing; retry cautiously.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_INTERNAL = 4;
+   */
+  INTERNAL = 4,
+
+  /**
+   * The user already holds the maximum number of concurrent sessions this
+   * gateway will keep, and this attempt is refused. Permanent for this attempt:
+   * the limit does not clear on its own, so retrying is exactly the wrong
+   * response — the user must end another session first. Distinct from
+   * NOT_ENTITLED, which is a statement about what the user may see; this user
+   * may, they are simply already connected enough times.
+   *
+   * The limit itself is gateway configuration and deliberately not modelled
+   * here. GatewayError.message carries the specifics so a client can render
+   * something actionable.
+   *
+   * Rollout note: a client whose schema predates this value decodes it as
+   * UNSPECIFIED, which is retryable by design. Client handling must therefore
+   * ship before or with the gateway that emits it, and the gateway must close
+   * the session itself rather than rely on the client standing down.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_SESSION_LIMIT_REACHED = 5;
+   */
+  SESSION_LIMIT_REACHED = 5,
+}
+
+/**
+ * Describes the enum kusinta.iot.webrtc.v1.GatewayErrorCode.
+ */
+export declare const GatewayErrorCodeSchema: GenEnum<GatewayErrorCode>;
+

package/src/kusinta/iot/webrtc/v1/envelope_pb.js

@@ -1,19 +1,19 @@
-// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts"
+// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts,import_extension=js"
 // @generated from file kusinta/iot/webrtc/v1/envelope.proto (package kusinta.iot.webrtc.v1, syntax proto3)
 /* eslint-disable */
 
-import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+import { enumDesc, fileDesc, messageDesc, tsEnum } from "@bufbuild/protobuf/codegenv2";
 import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
-import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identity_pb";
-import { file_kusinta_iot_webrtc_v1_command } from "./command_pb";
-import { file_kusinta_iot_webrtc_v1_device_state } from "./device_state_pb";
-import { file_kusinta_iot_webrtc_v1_permission_push } from "./permission_push_pb";
+import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identity_pb.js";
+import { file_kusinta_iot_webrtc_v1_command } from "./command_pb.js";
+import { file_kusinta_iot_webrtc_v1_device_state } from "./device_state_pb.js";
+import { file_kusinta_iot_webrtc_v1_permission_push } from "./permission_push_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/envelope.proto.
  */
 export const file_kusinta_iot_webrtc_v1_envelope = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_webrtc_v1_command, file_kusinta_iot_webrtc_v1_device_state, file_kusinta_iot_webrtc_v1_permission_push]);
+  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_webrtc_v1_command, file_kusinta_iot_webrtc_v1_device_state, file_kusinta_iot_webrtc_v1_permission_push]);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.Ping.
@@ -29,31 +29,90 @@ export const PingSchema = /*@__PURE__*/
 export const PongSchema = /*@__PURE__*/
   messageDesc(file_kusinta_iot_webrtc_v1_envelope, 1);
 
+/**
+ * Describes the message kusinta.iot.webrtc.v1.HandshakeRejected.
+ * Use `create(HandshakeRejectedSchema)` to create a new message.
+ */
+export const HandshakeRejectedSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 2);
+
 /**
  * Describes the message kusinta.iot.webrtc.v1.AppHandshake.
  * Use `create(AppHandshakeSchema)` to create a new message.
  */
 export const AppHandshakeSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 2);
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 3);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.SubscribeDevices.
+ * Use `create(SubscribeDevicesSchema)` to create a new message.
+ */
+export const SubscribeDevicesSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 4);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.UnsubscribeDevices.
+ * Use `create(UnsubscribeDevicesSchema)` to create a new message.
+ */
+export const UnsubscribeDevicesSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 5);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.RefusedSubscription.
+ * Use `create(RefusedSubscriptionSchema)` to create a new message.
+ */
+export const RefusedSubscriptionSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 6);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.SubscriptionAck.
+ * Use `create(SubscriptionAckSchema)` to create a new message.
+ */
+export const SubscriptionAckSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 7);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.PropertyReadRequest.
  * Use `create(PropertyReadRequestSchema)` to create a new message.
  */
 export const PropertyReadRequestSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 3);
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 8);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.GatewayError.
+ * Use `create(GatewayErrorSchema)` to create a new message.
+ */
+export const GatewayErrorSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 9);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.GatewayMessage.
  * Use `create(GatewayMessageSchema)` to create a new message.
  */
 export const GatewayMessageSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 4);
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 10);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.AppMessage.
  * Use `create(AppMessageSchema)` to create a new message.
  */
 export const AppMessageSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 5);
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 11);
+
+/**
+ * Describes the enum kusinta.iot.webrtc.v1.GatewayErrorCode.
+ */
+export const GatewayErrorCodeSchema = /*@__PURE__*/
+  enumDesc(file_kusinta_iot_webrtc_v1_envelope, 0);
+
+/**
+ * Machine-readable classification of a session-level gateway error, so the app
+ * can branch without string-matching a human sentence. Deliberately an enum here,
+ * unlike the free-form code on connector.v1.GatewayError: the app leg is versioned
+ * together with the gateway, and clients need an exhaustive switch.
+ *
+ * @generated from enum kusinta.iot.webrtc.v1.GatewayErrorCode
+ */
+export const GatewayErrorCode = /*@__PURE__*/
+  tsEnum(GatewayErrorCodeSchema);
 

package/src/kusinta/iot/webrtc/v1/permission_push_pb.d.ts

@@ -1,11 +1,11 @@
-// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts"
+// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts,import_extension=js"
 // @generated from file kusinta/iot/webrtc/v1/permission_push.proto (package kusinta.iot.webrtc.v1, syntax proto3)
 /* eslint-disable */
 
 import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
 import type { Message } from "@bufbuild/protobuf";
-import type { EffectivePermissions } from "../../access/v1/acl_pb";
-import type { DeviceId } from "../../identity/v1/identity_pb";
+import type { EffectivePermissions } from "../../access/v1/acl_pb.js";
+import type { DeviceId } from "../../identity/v1/identity_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/permission_push.proto.
@@ -25,11 +25,17 @@ export declare type LivePermissionUpdate = Message<"kusinta.iot.webrtc.v1.LivePe
   newPermissions?: EffectivePermissions | undefined;
 
   /**
+   * Newly entitled devices. Entitlement is not interest: the app is not subscribed
+   * to these until it asks via AppMessage.subscribe.
+   *
    * @generated from field: repeated kusinta.iot.identity.v1.DeviceId added_devices = 2;
    */
   addedDevices: DeviceId[];
 
   /**
+   * Devices the user may no longer see. The gateway has already dropped these from
+   * the app's interest set — no property events follow, and no unsubscribe is needed.
+   *
    * @generated from field: repeated kusinta.iot.identity.v1.DeviceId removed_devices = 3;
    */
   removedDevices: DeviceId[];

package/src/kusinta/iot/webrtc/v1/permission_push_pb.js

@@ -1,10 +1,10 @@
-// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts"
+// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts,import_extension=js"
 // @generated from file kusinta/iot/webrtc/v1/permission_push.proto (package kusinta.iot.webrtc.v1, syntax proto3)
 /* eslint-disable */
 
 import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
-import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identity_pb";
-import { file_kusinta_iot_access_v1_acl } from "../../access/v1/acl_pb";
+import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identity_pb.js";
+import { file_kusinta_iot_access_v1_acl } from "../../access/v1/acl_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/permission_push.proto.

package/src/__tests__/access.test.js

@@ -1,134 +0,0 @@
-// @ts-check
-import { describe, it, expect } from 'vitest'
-import { create, toBinary, fromBinary } from '@bufbuild/protobuf'
-import { Role, PermissionAction } from '../kusinta/iot/access/v1/roles_pb.js'
-import {
-  PropertyConstraintSchema,
-  DeviceAclSchema,
-  EffectivePermissionsSchema,
-} from '../kusinta/iot/access/v1/acl_pb.js'
-
-describe('Role and PermissionAction enums', () => {
-  it('Role.RESIDENT is defined', () => {
-    expect(Role.RESIDENT).toBeDefined()
-  })
-
-  it('Role.PROPERTY_OWNER is defined', () => {
-    expect(Role.PROPERTY_OWNER).toBeDefined()
-  })
-
-  it('PermissionAction.WRITE is defined', () => {
-    expect(PermissionAction.WRITE).toBeDefined()
-  })
-})
-
-describe('PropertyConstraint — property-owner setpoint limits', () => {
-  it('round-trips int_max constraint for MaxHeatSetpointLimit', () => {
-    const c = create(PropertyConstraintSchema, {
-      attributeName: 'MaxHeatSetpointLimit',
-      constraint: { case: 'intMax', value: 2200 },
-      clusterIdHex: '0201',
-    })
-    const decoded = fromBinary(PropertyConstraintSchema, toBinary(PropertyConstraintSchema, c))
-    expect(decoded.attributeName).toBe('MaxHeatSetpointLimit')
-    expect(decoded.constraint?.case).toBe('intMax')
-    if (decoded.constraint?.case === 'intMax') {
-      expect(decoded.constraint.value).toBe(2200)
-    }
-  })
-
-  it('round-trips int_min constraint for MinHeatSetpointLimit', () => {
-    const c = create(PropertyConstraintSchema, {
-      attributeName: 'MinHeatSetpointLimit',
-      constraint: { case: 'intMin', value: 1600 },
-      clusterIdHex: '0201',
-    })
-    const decoded = fromBinary(PropertyConstraintSchema, toBinary(PropertyConstraintSchema, c))
-    expect(decoded.constraint?.case).toBe('intMin')
-    if (decoded.constraint?.case === 'intMin') {
-      expect(decoded.constraint.value).toBe(1600)
-    }
-  })
-
-  it('round-trips uint_max constraint', () => {
-    const c = create(PropertyConstraintSchema, {
-      attributeName: 'CurrentLevel',
-      constraint: { case: 'uintMax', value: 200 },
-      clusterIdHex: '0008',
-    })
-    const decoded = fromBinary(PropertyConstraintSchema, toBinary(PropertyConstraintSchema, c))
-    expect(decoded.constraint?.case).toBe('uintMax')
-  })
-})
-
-describe('DeviceAcl', () => {
-  it('round-trips resident acl with allowed actions and constraints', () => {
-    const acl = create(DeviceAclSchema, {
-      deviceId: { value: 'therm-1' },
-      userId: { value: 'user-resident-1' },
-      role: Role.RESIDENT,
-      allowedActions: [PermissionAction.READ, PermissionAction.WRITE],
-      allowedAttributes: ['OccupiedHeatingSetpoint', 'LocalTemperature'],
-      propertyConstraints: [
-        {
-          attributeName: 'OccupiedHeatingSetpoint',
-          constraint: { case: 'intMax', value: 2200 },
-          clusterIdHex: '0201',
-        },
-        {
-          attributeName: 'OccupiedHeatingSetpoint',
-          constraint: { case: 'intMin', value: 1600 },
-          clusterIdHex: '0201',
-        },
-      ],
-    })
-    const decoded = fromBinary(DeviceAclSchema, toBinary(DeviceAclSchema, acl))
-    expect(decoded.deviceId?.value).toBe('therm-1')
-    expect(decoded.userId?.value).toBe('user-resident-1')
-    expect(decoded.role).toBe(Role.RESIDENT)
-    expect(decoded.allowedActions).toEqual([PermissionAction.READ, PermissionAction.WRITE])
-    expect(decoded.allowedAttributes).toEqual(['OccupiedHeatingSetpoint', 'LocalTemperature'])
-    expect(decoded.propertyConstraints).toHaveLength(2)
-    expect(decoded.propertyConstraints[0].constraint?.case).toBe('intMax')
-  })
-
-  it('round-trips property-owner acl', () => {
-    const acl = create(DeviceAclSchema, {
-      deviceId: { value: 'therm-1' },
-      userId: { value: 'user-owner-1' },
-      role: Role.PROPERTY_OWNER,
-      allowedActions: [PermissionAction.READ, PermissionAction.WRITE, PermissionAction.OBSERVE],
-    })
-    const decoded = fromBinary(DeviceAclSchema, toBinary(DeviceAclSchema, acl))
-    expect(decoded.role).toBe(Role.PROPERTY_OWNER)
-  })
-})
-
-describe('EffectivePermissions', () => {
-  it('round-trips with multiple device acls', () => {
-    const perms = create(EffectivePermissionsSchema, {
-      userId: { value: 'user-1' },
-      gatewayId: { value: 'gw-1' },
-      deviceAcls: [
-        {
-          deviceId: { value: 'therm-1' },
-          userId: { value: 'user-1' },
-          role: Role.RESIDENT,
-          allowedActions: [PermissionAction.READ, PermissionAction.WRITE],
-        },
-        {
-          deviceId: { value: 'light-1' },
-          userId: { value: 'user-1' },
-          role: Role.RESIDENT,
-          allowedActions: [PermissionAction.READ, PermissionAction.WRITE],
-        },
-      ],
-    })
-    const decoded = fromBinary(EffectivePermissionsSchema, toBinary(EffectivePermissionsSchema, perms))
-    expect(decoded.userId?.value).toBe('user-1')
-    expect(decoded.gatewayId?.value).toBe('gw-1')
-    expect(decoded.deviceAcls).toHaveLength(2)
-    expect(decoded.deviceAcls[0].deviceId?.value).toBe('therm-1')
-    expect(decoded.deviceAcls[1].deviceId?.value).toBe('light-1')
-  })
-})