@kusinta/iot-schema 0.1.0-beta.2 → 0.1.0-beta.21

package/src/kusinta/iot/webrtc/v1/envelope_pb.d.ts

@@ -1,14 +1,16 @@
-// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts"
+// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts,import_extension=js"
 // @generated from file kusinta/iot/webrtc/v1/envelope.proto (package kusinta.iot.webrtc.v1, syntax proto3)
 /* eslint-disable */
 
-import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
 import type { Message } from "@bufbuild/protobuf";
-import type { DeviceId } from "../../identity/v1/identity_pb";
+import type { DeviceId } from "../../identity/v1/identity_pb.js";
+import type { Space } from "../../space/v1/space_pb.js";
+import type { ManagementAck, ManagementRequest, SpaceTree } from "./management_pb.js";
 import type { Timestamp } from "@bufbuild/protobuf/wkt";
-import type { DevicePropertyEvent, DeviceStateSnapshot } from "./device_state_pb";
-import type { LivePermissionUpdate } from "./permission_push_pb";
-import type { CommandResult, DeviceCommand } from "./command_pb";
+import type { DeviceAdded, DevicePropertyEvent, DeviceRemoved, DeviceStateSnapshot } from "./device_state_pb.js";
+import type { LivePermissionUpdate } from "./permission_push_pb.js";
+import type { CommandResult, DeviceCommand } from "./command_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/envelope.proto.
@@ -40,19 +42,45 @@ export declare type Pong = Message<"kusinta.iot.webrtc.v1.Pong"> & {
 export declare const PongSchema: GenMessage<Pong>;
 
 /**
- * AppHandshake must be the first message sent by the Flutter app on the data channel.
- * The gateway validates the JWT locally using the mykusinta-api-server public key,
+ * @generated from message kusinta.iot.webrtc.v1.HandshakeRejected
+ */
+export declare type HandshakeRejected = Message<"kusinta.iot.webrtc.v1.HandshakeRejected"> & {
+  /**
+   * @generated from field: string reason = 1;
+   */
+  reason: string;
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.HandshakeRejected.
+ * Use `create(HandshakeRejectedSchema)` to create a new message.
+ */
+export declare const HandshakeRejectedSchema: GenMessage<HandshakeRejected>;
+
+/**
+ * AppHandshake must be the first message sent by the app on the data channel.
+ * The gateway validates the JWT locally using the api-server's public key,
  * checks that gateway_id in the JWT matches this gateway, then extracts the role.
  *
  * @generated from message kusinta.iot.webrtc.v1.AppHandshake
  */
 export declare type AppHandshake = Message<"kusinta.iot.webrtc.v1.AppHandshake"> & {
   /**
+   * Signed compact JWS. Its payload claims are documented by AppTokenClaims
+   * in app_token.proto — the shared contract between the api-server (issuer)
+   * and the gateway (validator).
+   *
    * @generated from field: string jwt = 1;
    */
   jwt: string;
 
   /**
+   * Initial interest set — an optimisation that saves one round trip, equivalent to
+   * sending SubscribeDevices immediately after the handshake. Interest only: naming
+   * an id here does not entitle the app to it, and ids the user may not see are
+   * refused in the SubscriptionAck that follows. Not the only mechanism — the set is
+   * revisable mid-session via AppMessage.subscribe / .unsubscribe.
+   *
    * @generated from field: repeated kusinta.iot.identity.v1.DeviceId subscribe_device_ids = 2;
    */
   subscribeDeviceIds: DeviceId[];
@@ -64,6 +92,110 @@ export declare type AppHandshake = Message<"kusinta.iot.webrtc.v1.AppHandshake">
  */
 export declare const AppHandshakeSchema: GenMessage<AppHandshake>;
 
+/**
+ * Adds device_ids to what the app wants streamed. Interest, never entitlement:
+ * the gateway intersects the request with what the user is permitted to see and
+ * reports what it declined in SubscriptionAck.refused. Additive — ids already in
+ * the set are a no-op, so a retry after a dropped ack is safe.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.SubscribeDevices
+ */
+export declare type SubscribeDevices = Message<"kusinta.iot.webrtc.v1.SubscribeDevices"> & {
+  /**
+   * @generated from field: repeated kusinta.iot.identity.v1.DeviceId device_ids = 1;
+   */
+  deviceIds: DeviceId[];
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.SubscribeDevices.
+ * Use `create(SubscribeDevicesSchema)` to create a new message.
+ */
+export declare const SubscribeDevicesSchema: GenMessage<SubscribeDevices>;
+
+/**
+ * Removes device_ids from what the app wants streamed. Removing an id the app is
+ * not subscribed to is a no-op, not an error.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.UnsubscribeDevices
+ */
+export declare type UnsubscribeDevices = Message<"kusinta.iot.webrtc.v1.UnsubscribeDevices"> & {
+  /**
+   * @generated from field: repeated kusinta.iot.identity.v1.DeviceId device_ids = 1;
+   */
+  deviceIds: DeviceId[];
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.UnsubscribeDevices.
+ * Use `create(UnsubscribeDevicesSchema)` to create a new message.
+ */
+export declare const UnsubscribeDevicesSchema: GenMessage<UnsubscribeDevices>;
+
+/**
+ * A device the gateway declined to add to the interest set. Ids the gateway does
+ * not know are refused as NOT_ENTITLED rather than a distinct not-found code, so
+ * the ack cannot be used to enumerate devices the user may not see.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.RefusedSubscription
+ */
+export declare type RefusedSubscription = Message<"kusinta.iot.webrtc.v1.RefusedSubscription"> & {
+  /**
+   * @generated from field: kusinta.iot.identity.v1.DeviceId device_id = 1;
+   */
+  deviceId?: DeviceId | undefined;
+
+  /**
+   * @generated from field: kusinta.iot.webrtc.v1.GatewayErrorCode code = 2;
+   */
+  code: GatewayErrorCode;
+
+  /**
+   * human-readable, for logs
+   *
+   * @generated from field: string message = 3;
+   */
+  message: string;
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.RefusedSubscription.
+ * Use `create(RefusedSubscriptionSchema)` to create a new message.
+ */
+export declare const RefusedSubscriptionSchema: GenMessage<RefusedSubscription>;
+
+/**
+ * Answer to SubscribeDevices / UnsubscribeDevices, gateway → app.
+ * `subscribed` is the effective set after the change, not a delta: an app that
+ * missed an ack or raced two requests re-syncs from it without reconnecting.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.SubscriptionAck
+ */
+export declare type SubscriptionAck = Message<"kusinta.iot.webrtc.v1.SubscriptionAck"> & {
+  /**
+   * AppMessage.message_id of the request
+   *
+   * @generated from field: string in_reply_to = 1;
+   */
+  inReplyTo: string;
+
+  /**
+   * @generated from field: repeated kusinta.iot.identity.v1.DeviceId subscribed = 2;
+   */
+  subscribed: DeviceId[];
+
+  /**
+   * @generated from field: repeated kusinta.iot.webrtc.v1.RefusedSubscription refused = 3;
+   */
+  refused: RefusedSubscription[];
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.SubscriptionAck.
+ * Use `create(SubscriptionAckSchema)` to create a new message.
+ */
+export declare const SubscriptionAckSchema: GenMessage<SubscriptionAck>;
+
 /**
  * @generated from message kusinta.iot.webrtc.v1.PropertyReadRequest
  */
@@ -91,7 +223,106 @@ export declare type PropertyReadRequest = Message<"kusinta.iot.webrtc.v1.Propert
 export declare const PropertyReadRequestSchema: GenMessage<PropertyReadRequest>;
 
 /**
- * GatewayMessage: gateway → Flutter app
+ * Session-level error, gateway → app. Mirrors connector.v1.GatewayError
+ * on the connector leg; kept separate because the two legs have different
+ * authorization semantics and this one has a closed code vocabulary.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.GatewayError
+ */
+export declare type GatewayError = Message<"kusinta.iot.webrtc.v1.GatewayError"> & {
+  /**
+   * @generated from field: kusinta.iot.webrtc.v1.GatewayErrorCode code = 1;
+   */
+  code: GatewayErrorCode;
+
+  /**
+   * human-readable, for logs — never rendered to a user
+   *
+   * @generated from field: string message = 2;
+   */
+  message: string;
+
+  /**
+   * structured detail, e.g. {"device_id": "therm-1"}
+   *
+   * @generated from field: map<string, string> metadata = 3;
+   */
+  metadata: { [key: string]: string };
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.GatewayError.
+ * Use `create(GatewayErrorSchema)` to create a new message.
+ */
+export declare const GatewayErrorSchema: GenMessage<GatewayError>;
+
+/**
+ * Answer to a ManagementRequest, gateway → app. Lives here rather than beside the
+ * requests in management.proto because it carries GatewayError, which is declared
+ * in this file; the other direction would be an import cycle.
+ *
+ * Exactly one result arrives per request, correlated by in_reply_to. A refusal is
+ * an ordinary result, not a session-level error: a filing operation the caller may
+ * not perform says so and the session continues. Targets the caller cannot reach
+ * are refused as NOT_ENTITLED whether or not they exist, so no result here reveals
+ * which spaces or devices are out there.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.ManagementResult
+ */
+export declare type ManagementResult = Message<"kusinta.iot.webrtc.v1.ManagementResult"> & {
+  /**
+   * AppMessage.message_id of the request
+   *
+   * @generated from field: string in_reply_to = 1;
+   */
+  inReplyTo: string;
+
+  /**
+   * @generated from oneof kusinta.iot.webrtc.v1.ManagementResult.result
+   */
+  result: {
+    /**
+     * refused, or the request was malformed
+     *
+     * @generated from field: kusinta.iot.webrtc.v1.GatewayError error = 2;
+     */
+    value: GatewayError;
+    case: "error";
+  } | {
+    /**
+     * create_space, update_space
+     *
+     * @generated from field: kusinta.iot.space.v1.Space space = 3;
+     */
+    value: Space;
+    case: "space";
+  } | {
+    /**
+     * list_spaces
+     *
+     * @generated from field: kusinta.iot.webrtc.v1.SpaceTree space_tree = 4;
+     */
+    value: SpaceTree;
+    case: "spaceTree";
+  } | {
+    /**
+     * everything else
+     *
+     * @generated from field: kusinta.iot.webrtc.v1.ManagementAck ack = 5;
+     */
+    value: ManagementAck;
+    case: "ack";
+  } | { case: undefined; value?: undefined };
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.ManagementResult.
+ * Use `create(ManagementResultSchema)` to create a new message.
+ */
+export declare const ManagementResultSchema: GenMessage<ManagementResult>;
+
+/**
+ * GatewayMessage: gateway → app
  *
  * @generated from message kusinta.iot.webrtc.v1.GatewayMessage
  */
@@ -135,18 +366,46 @@ export declare type GatewayMessage = Message<"kusinta.iot.webrtc.v1.GatewayMessa
     case: "commandResult";
   } | {
     /**
-     * error description string
-     *
-     * @generated from field: string error = 7;
+     * @generated from field: kusinta.iot.webrtc.v1.Pong pong = 8;
+     */
+    value: Pong;
+    case: "pong";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.HandshakeRejected handshake_rejected = 9;
+     */
+    value: HandshakeRejected;
+    case: "handshakeRejected";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.GatewayError error = 10;
      */
-    value: string;
+    value: GatewayError;
     case: "error";
   } | {
     /**
-     * @generated from field: kusinta.iot.webrtc.v1.Pong pong = 8;
+     * @generated from field: kusinta.iot.webrtc.v1.SubscriptionAck subscription_ack = 11;
      */
-    value: Pong;
-    case: "pong";
+    value: SubscriptionAck;
+    case: "subscriptionAck";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.DeviceAdded device_added = 12;
+     */
+    value: DeviceAdded;
+    case: "deviceAdded";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.DeviceRemoved device_removed = 13;
+     */
+    value: DeviceRemoved;
+    case: "deviceRemoved";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.ManagementResult management_result = 14;
+     */
+    value: ManagementResult;
+    case: "managementResult";
   } | { case: undefined; value?: undefined };
 };
 
@@ -157,7 +416,7 @@ export declare type GatewayMessage = Message<"kusinta.iot.webrtc.v1.GatewayMessa
 export declare const GatewayMessageSchema: GenMessage<GatewayMessage>;
 
 /**
- * AppMessage: Flutter app → gateway
+ * AppMessage: app → gateway
  *
  * @generated from message kusinta.iot.webrtc.v1.AppMessage
  */
@@ -199,6 +458,24 @@ export declare type AppMessage = Message<"kusinta.iot.webrtc.v1.AppMessage"> & {
      */
     value: Ping;
     case: "ping";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.SubscribeDevices subscribe = 7;
+     */
+    value: SubscribeDevices;
+    case: "subscribe";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.UnsubscribeDevices unsubscribe = 8;
+     */
+    value: UnsubscribeDevices;
+    case: "unsubscribe";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.ManagementRequest management = 9;
+     */
+    value: ManagementRequest;
+    case: "management";
   } | { case: undefined; value?: undefined };
 };
 
@@ -208,3 +485,74 @@ export declare type AppMessage = Message<"kusinta.iot.webrtc.v1.AppMessage"> & {
  */
 export declare const AppMessageSchema: GenMessage<AppMessage>;
 
+/**
+ * Machine-readable classification of a session-level gateway error, so the app
+ * can branch without string-matching a human sentence. Deliberately an enum here,
+ * unlike the free-form code on connector.v1.GatewayError: the app leg is versioned
+ * together with the gateway, and clients need an exhaustive switch.
+ *
+ * @generated from enum kusinta.iot.webrtc.v1.GatewayErrorCode
+ */
+export enum GatewayErrorCode {
+  /**
+   * Sender did not set a code, or sent one this client's schema does not know.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+
+  /**
+   * Permanent refusal — the user may not see or act on this. Stop asking, tell the user.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_NOT_ENTITLED = 1;
+   */
+  NOT_ENTITLED = 1,
+
+  /**
+   * The app sent something malformed. A client bug: log it, do not retry.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_INVALID_REQUEST = 2;
+   */
+  INVALID_REQUEST = 2,
+
+  /**
+   * Transient failure. Retrying is reasonable.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_UNAVAILABLE = 3;
+   */
+  UNAVAILABLE = 3,
+
+  /**
+   * Gateway-side fault. Not the app's doing; retry cautiously.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_INTERNAL = 4;
+   */
+  INTERNAL = 4,
+
+  /**
+   * The user already holds the maximum number of concurrent sessions this
+   * gateway will keep, and this attempt is refused. Permanent for this attempt:
+   * the limit does not clear on its own, so retrying is exactly the wrong
+   * response — the user must end another session first. Distinct from
+   * NOT_ENTITLED, which is a statement about what the user may see; this user
+   * may, they are simply already connected enough times.
+   *
+   * The limit itself is gateway configuration and deliberately not modelled
+   * here. GatewayError.message carries the specifics so a client can render
+   * something actionable.
+   *
+   * Rollout note: a client whose schema predates this value decodes it as
+   * UNSPECIFIED, which is retryable by design. Client handling must therefore
+   * ship before or with the gateway that emits it, and the gateway must close
+   * the session itself rather than rely on the client standing down.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_SESSION_LIMIT_REACHED = 5;
+   */
+  SESSION_LIMIT_REACHED = 5,
+}
+
+/**
+ * Describes the enum kusinta.iot.webrtc.v1.GatewayErrorCode.
+ */
+export declare const GatewayErrorCodeSchema: GenEnum<GatewayErrorCode>;
+

package/src/kusinta/iot/webrtc/v1/envelope_pb.js

@@ -1,19 +1,21 @@
-// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts"
+// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts,import_extension=js"
 // @generated from file kusinta/iot/webrtc/v1/envelope.proto (package kusinta.iot.webrtc.v1, syntax proto3)
 /* eslint-disable */
 
-import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+import { enumDesc, fileDesc, messageDesc, tsEnum } from "@bufbuild/protobuf/codegenv2";
 import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
-import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identity_pb";
-import { file_kusinta_iot_webrtc_v1_command } from "./command_pb";
-import { file_kusinta_iot_webrtc_v1_device_state } from "./device_state_pb";
-import { file_kusinta_iot_webrtc_v1_permission_push } from "./permission_push_pb";
+import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identity_pb.js";
+import { file_kusinta_iot_space_v1_space } from "../../space/v1/space_pb.js";
+import { file_kusinta_iot_webrtc_v1_command } from "./command_pb.js";
+import { file_kusinta_iot_webrtc_v1_device_state } from "./device_state_pb.js";
+import { file_kusinta_iot_webrtc_v1_management } from "./management_pb.js";
+import { file_kusinta_iot_webrtc_v1_permission_push } from "./permission_push_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/envelope.proto.
  */
 export const file_kusinta_iot_webrtc_v1_envelope = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_webrtc_v1_command, file_kusinta_iot_webrtc_v1_device_state, file_kusinta_iot_webrtc_v1_permission_push]);
+  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_space_v1_space, file_kusinta_iot_webrtc_v1_command, file_kusinta_iot_webrtc_v1_device_state, file_kusinta_iot_webrtc_v1_management, file_kusinta_iot_webrtc_v1_permission_push]);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.Ping.
@@ -29,31 +31,97 @@ export const PingSchema = /*@__PURE__*/
 export const PongSchema = /*@__PURE__*/
   messageDesc(file_kusinta_iot_webrtc_v1_envelope, 1);
 
+/**
+ * Describes the message kusinta.iot.webrtc.v1.HandshakeRejected.
+ * Use `create(HandshakeRejectedSchema)` to create a new message.
+ */
+export const HandshakeRejectedSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 2);
+
 /**
  * Describes the message kusinta.iot.webrtc.v1.AppHandshake.
  * Use `create(AppHandshakeSchema)` to create a new message.
  */
 export const AppHandshakeSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 2);
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 3);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.SubscribeDevices.
+ * Use `create(SubscribeDevicesSchema)` to create a new message.
+ */
+export const SubscribeDevicesSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 4);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.UnsubscribeDevices.
+ * Use `create(UnsubscribeDevicesSchema)` to create a new message.
+ */
+export const UnsubscribeDevicesSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 5);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.RefusedSubscription.
+ * Use `create(RefusedSubscriptionSchema)` to create a new message.
+ */
+export const RefusedSubscriptionSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 6);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.SubscriptionAck.
+ * Use `create(SubscriptionAckSchema)` to create a new message.
+ */
+export const SubscriptionAckSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 7);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.PropertyReadRequest.
  * Use `create(PropertyReadRequestSchema)` to create a new message.
  */
 export const PropertyReadRequestSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 3);
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 8);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.GatewayError.
+ * Use `create(GatewayErrorSchema)` to create a new message.
+ */
+export const GatewayErrorSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 9);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.ManagementResult.
+ * Use `create(ManagementResultSchema)` to create a new message.
+ */
+export const ManagementResultSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 10);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.GatewayMessage.
  * Use `create(GatewayMessageSchema)` to create a new message.
  */
 export const GatewayMessageSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 4);
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 11);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.AppMessage.
  * Use `create(AppMessageSchema)` to create a new message.
  */
 export const AppMessageSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 5);
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 12);
+
+/**
+ * Describes the enum kusinta.iot.webrtc.v1.GatewayErrorCode.
+ */
+export const GatewayErrorCodeSchema = /*@__PURE__*/
+  enumDesc(file_kusinta_iot_webrtc_v1_envelope, 0);
+
+/**
+ * Machine-readable classification of a session-level gateway error, so the app
+ * can branch without string-matching a human sentence. Deliberately an enum here,
+ * unlike the free-form code on connector.v1.GatewayError: the app leg is versioned
+ * together with the gateway, and clients need an exhaustive switch.
+ *
+ * @generated from enum kusinta.iot.webrtc.v1.GatewayErrorCode
+ */
+export const GatewayErrorCode = /*@__PURE__*/
+  tsEnum(GatewayErrorCodeSchema);