@kusinta/iot-schema 0.1.0-beta.9 → 0.2.0-beta.1

package/src/kusinta/iot/webrtc/v1/command_pb.d.ts

@@ -2,10 +2,12 @@
 // @generated from file kusinta/iot/webrtc/v1/command.proto (package kusinta.iot.webrtc.v1, syntax proto3)
 /* eslint-disable */
 
-import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
 import type { Message } from "@bufbuild/protobuf";
 import type { DeviceId } from "../../identity/v1/identity_pb.js";
 import type { Timestamp } from "@bufbuild/protobuf/wkt";
+import type { AttributeRef } from "../../access/v1/acl_pb.js";
+import type { AttributeValue } from "../../device/v1/cluster_state_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/command.proto.
@@ -13,17 +15,24 @@ import type { Timestamp } from "@bufbuild/protobuf/wkt";
 export declare const file_kusinta_iot_webrtc_v1_command: GenFile;
 
 /**
- * Maps to Matter SetpointRaiseLower command (Thermostat cluster 0x0201).
+ * Adjusts a setpoint by a delta. Maps to the Matter SetpointRaiseLower command
+ * (Thermostat cluster 0x0201).
+ *
+ * A delta needs a base, and only the producer holds one. On a battery-powered device
+ * that wakes on a multi-minute cycle the producer often has no current base and MUST
+ * refuse the command rather than guess at one — guessing moves a real radiator to a
+ * temperature nobody asked for. Prefer ThermostatSetpointWriteParams where the caller
+ * already knows the absolute value it wants; it has no such failure mode.
  *
  * @generated from message kusinta.iot.webrtc.v1.ThermostatSetpointParams
  */
 export declare type ThermostatSetpointParams = Message<"kusinta.iot.webrtc.v1.ThermostatSetpointParams"> & {
   /**
-   * SetpointAdjustMode: Heat=1, Cool=2, Both=3
+   * SetpointAdjustMode, see above
    *
-   * @generated from field: uint32 mode = 1;
+   * @generated from field: optional uint32 mode = 1;
    */
-  mode: number;
+  mode?: number | undefined;
 
   /**
    * centidegrees delta
@@ -67,20 +76,17 @@ export declare type LevelControlParams = Message<"kusinta.iot.webrtc.v1.LevelCon
 export declare const LevelControlParamsSchema: GenMessage<LevelControlParams>;
 
 /**
- * Maps to Matter On and Off commands (On/Off cluster 0x0006).
+ * Arguments for the Matter On/Off cluster's Off (0x00), On (0x01) and Toggle (0x02)
+ * commands — of which there are none: all three take no arguments.
+ *
+ * Which of the three is meant is DeviceCommand.matter_command_id, and only that. The
+ * message previously carried `on` and `toggle` booleans, a second encoding of the same
+ * choice in a different shape, so a command could say Toggle in one field and On in
+ * another and parse cleanly. Empty is the honest form.
  *
  * @generated from message kusinta.iot.webrtc.v1.OnOffParams
  */
 export declare type OnOffParams = Message<"kusinta.iot.webrtc.v1.OnOffParams"> & {
-  /**
-   * @generated from field: bool on = 1;
-   */
-  on: boolean;
-
-  /**
-   * @generated from field: bool toggle = 2;
-   */
-  toggle: boolean;
 };
 
 /**
@@ -110,18 +116,16 @@ export declare type WindowCoveringLiftParams = Message<"kusinta.iot.webrtc.v1.Wi
 export declare const WindowCoveringLiftParamsSchema: GenMessage<WindowCoveringLiftParams>;
 
 /**
- * Maps to Matter LockDoor/UnlockDoor commands (Door Lock cluster 0x0101).
+ * Arguments for the Matter Door Lock cluster's LockDoor (0x00) and UnlockDoor (0x01),
+ * which take an optional PIN and nothing else.
+ *
+ * lock_state is gone: it restated LockDoor/UnlockDoor as Locked=1/Unlocked=2, a second
+ * selector in a THIRD numbering, disagreeing with both Matter's command IDs and its
+ * LockState attribute. Which operation is meant is DeviceCommand.matter_command_id.
  *
  * @generated from message kusinta.iot.webrtc.v1.DoorLockParams
  */
 export declare type DoorLockParams = Message<"kusinta.iot.webrtc.v1.DoorLockParams"> & {
-  /**
-   * Locked=1, Unlocked=2
-   *
-   * @generated from field: uint32 lock_state = 1;
-   */
-  lockState: number;
-
   /**
    * optional PIN
    *
@@ -137,15 +141,34 @@ export declare type DoorLockParams = Message<"kusinta.iot.webrtc.v1.DoorLockPara
 export declare const DoorLockParamsSchema: GenMessage<DoorLockParams>;
 
 /**
+ * A command an app asks the gateway to run on a device.
+ *
+ * Authorization
+ *
+ * An app MAY send any command; it does not decide whether it is allowed. The gateway
+ * authorizes every DeviceCommand against the caller's access.v1.DeviceAcl for the target
+ * device before forwarding it to a connector — the command must be permitted by
+ * PERMISSION_ACTION_INVOKE, must target an attribute the ACL's allowed_attribute_refs
+ * reaches, and must respect any PropertyConstraint bounding the value.
+ *
+ * A refusal comes back as an ordinary CommandResult with success = false and an error,
+ * NOT as a session-level GatewayError: one command being refused says nothing about the
+ * session, which continues. A command for a device the caller cannot reach is refused the
+ * same way whether or not it exists, so no result reveals a device the user may not see.
+ *
  * @generated from message kusinta.iot.webrtc.v1.DeviceCommand
  */
 export declare type DeviceCommand = Message<"kusinta.iot.webrtc.v1.DeviceCommand"> & {
   /**
-   * UUID, matched in CommandResult
+   * Was command_id. Renamed because Matter has its own numeric command ID, added below,
+   * and two fields called "command id" meaning entirely different things in one message is
+   * a trap. Same name as AttributeWriteRequest.request_id, which correlates the same way.
    *
-   * @generated from field: string command_id = 1;
+   * UUID, matched in the result
+   *
+   * @generated from field: string request_id = 1;
    */
-  commandId: string;
+  requestId: string;
 
   /**
    * @generated from field: kusinta.iot.identity.v1.DeviceId device_id = 2;
@@ -153,16 +176,60 @@ export declare type DeviceCommand = Message<"kusinta.iot.webrtc.v1.DeviceCommand
   deviceId?: DeviceId | undefined;
 
   /**
-   * @generated from field: string cluster_id_hex = 3;
+   * The command's own PascalCase spelling, for logs and rendering.
+   *
+   * ADVISORY, and not validated against anything: nothing reconciles it with
+   * matter_command_id, so it can say "Toggle" beside an ID meaning On. A consumer MUST NOT
+   * route or authorize on it, and where the two disagree the ID wins. It is here so a
+   * refused or unresolvable command is legible to whoever reads the log.
+   *
+   * @generated from field: string command_name = 4;
    */
-  clusterIdHex: string;
+  commandName: string;
 
   /**
-   * PascalCase Matter command name
+   * e.g. 0x0201 for Thermostat
    *
-   * @generated from field: string command_name = 4;
+   * @generated from field: uint32 cluster_id = 12;
    */
-  commandName: string;
+  clusterId: number;
+
+  /**
+   * The Matter command ID within that cluster, e.g. 0x02 for On/Off's Toggle.
+   *
+   * What a consumer routes and authorizes on, matching Matter's own wire and the numeric
+   * Endpoint.clusters[].accepted_command_ids — so "does this device accept this command"
+   * is answerable before sending it rather than by watching it fail.
+   *
+   * Where the parameters case declares a (matter_command_id), this MUST equal it; where it
+   * declares only a (matter_command_cluster) — because several commands share the same
+   * arguments — this is what picks the command. cluster_id MUST equal the case's
+   * (matter_command_cluster) either way. A mismatch is malformed and is refused with
+   * COMMAND_ERROR_CODE_INVALID_COMMAND.
+   *
+   * raw_tlv has no annotation to check against, so there this is simply required.
+   *
+   * @generated from field: optional uint32 matter_command_id = 13;
+   */
+  matterCommandId?: number | undefined;
+
+  /**
+   * Which endpoint of the device to command. Required by rule — proto3 has no `required`,
+   * and `optional` is what makes "not stated" representable so a consumer can reject it
+   * rather than decode an omission to endpoint 0, which is the Matter root node.
+   *
+   * A device presents several
+   * endpoints and a command with no destination has no correct one — on a 4-channel
+   * actuator, picking any of them moves real hardware. Refuse an unaddressed command
+   * rather than guessing.
+   *
+   * No exemption for single-endpoint devices. A rule where the same message is valid or
+   * invalid depending on the shape of its target is a rule that works until a device
+   * grows an endpoint.
+   *
+   * @generated from field: optional uint32 endpoint_id = 11;
+   */
+  endpointId?: number | undefined;
 
   /**
    * @generated from oneof kusinta.iot.webrtc.v1.DeviceCommand.parameters
@@ -219,14 +286,16 @@ export declare const DeviceCommandSchema: GenMessage<DeviceCommand>;
  */
 export declare type CommandError = Message<"kusinta.iot.webrtc.v1.CommandError"> & {
   /**
-   * @generated from field: string code = 1;
+   * human-readable, for logs — never rendered to a user
+   *
+   * @generated from field: string message = 2;
    */
-  code: string;
+  message: string;
 
   /**
-   * @generated from field: string message = 2;
+   * @generated from field: kusinta.iot.webrtc.v1.CommandErrorCode code = 3;
    */
-  message: string;
+  code: CommandErrorCode;
 };
 
 /**
@@ -236,16 +305,23 @@ export declare type CommandError = Message<"kusinta.iot.webrtc.v1.CommandError">
 export declare const CommandErrorSchema: GenMessage<CommandError>;
 
 /**
- * CommandResult travels gateway → Flutter app (GatewayMessage) and
- * connector → gateway (ConnectRequest via connector.proto import).
+ * CommandResult travels gateway → app (GatewayMessage) and
+ * connector → gateway (SessionRequest via connector.proto import).
+ *
+ * success = true means the command was ACCEPTED, not that the device confirmed it. For
+ * a battery-powered device that wakes on a multi-minute cycle, acceptance without
+ * confirmation is the normal path, not an edge case: waiting for the device would fail
+ * every write to a sleeping one.
  *
  * @generated from message kusinta.iot.webrtc.v1.CommandResult
  */
 export declare type CommandResult = Message<"kusinta.iot.webrtc.v1.CommandResult"> & {
   /**
-   * @generated from field: string command_id = 1;
+   * matches DeviceCommand.request_id
+   *
+   * @generated from field: string request_id = 1;
    */
-  commandId: string;
+  requestId: string;
 
   /**
    * @generated from field: bool success = 2;
@@ -261,6 +337,25 @@ export declare type CommandResult = Message<"kusinta.iot.webrtc.v1.CommandResult
    * @generated from field: google.protobuf.Timestamp completed_at = 4;
    */
   completedAt?: Timestamp | undefined;
+
+  /**
+   * When the producer's own optimistic window closes: by this time the value has either
+   * been confirmed by the device or restored to what it was, and either way the producer
+   * will have published a PropertyUpdate saying so.
+   *
+   * Set it when the producer applied the value optimistically and runs a rollback timer.
+   * It exists so a consumer can bound its wait without hardcoding a constant chasing a
+   * timer that lives in someone else's codebase and changes without notice.
+   *
+   * Absent means no claim — either the producer confirms synchronously, or it cannot
+   * state a bound. Absent is NOT "settles immediately".
+   *
+   * This bounds the wait; it does not label the values that arrive. Which update was the
+   * optimistic one is device.v1.PropertyUpdate.provenance.
+   *
+   * @generated from field: optional google.protobuf.Timestamp settles_by = 5;
+   */
+  settlesBy?: Timestamp | undefined;
 };
 
 /**
@@ -269,3 +364,138 @@ export declare type CommandResult = Message<"kusinta.iot.webrtc.v1.CommandResult
  */
 export declare const CommandResultSchema: GenMessage<CommandResult>;
 
+/**
+ * Writes one attribute of one endpoint. The carrier for PERMISSION_ACTION_WRITE, which
+ * until it existed authorized an operation no message performed.
+ *
+ * Deliberately not a DeviceCommand case. A write and an invoke are different operations in
+ * Matter carrying different authority: a user who may toggle a light is not thereby a user
+ * who may rewrite its attributes. Routing both through one message made INVOKE imply WRITE
+ * and left the distinction unenforceable.
+ *
+ * Lives here beside DeviceCommand rather than in envelope.proto because both legs carry
+ * it — the app sends one, and the gateway forwards it to a connector. That is the same
+ * reason DeviceCommand is here.
+ *
+ * Addressed by AttributeRef, so an access.v1.PropertyConstraint bounds the value by
+ * matching target directly rather than needing a rule per writable attribute.
+ *
+ * A relative adjust is NOT this. Thermostat SetpointRaiseLower is a genuine Matter command
+ * and stays a DeviceCommand; this is for writing an absolute value.
+ *
+ * Answered by CommandResult, correlated on request_id.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.AttributeWriteRequest
+ */
+export declare type AttributeWriteRequest = Message<"kusinta.iot.webrtc.v1.AttributeWriteRequest"> & {
+  /**
+   * UUID, matched in CommandResult
+   *
+   * @generated from field: string request_id = 1;
+   */
+  requestId: string;
+
+  /**
+   * @generated from field: kusinta.iot.identity.v1.DeviceId device_id = 2;
+   */
+  deviceId?: DeviceId | undefined;
+
+  /**
+   * Which attribute to write. endpoint_id is required here — an unaddressed write has no
+   * correct destination, exactly as for a command.
+   *
+   * @generated from field: kusinta.iot.access.v1.AttributeRef target = 3;
+   */
+  target?: AttributeRef | undefined;
+
+  /**
+   * @generated from field: kusinta.iot.device.v1.AttributeValue value = 4;
+   */
+  value?: AttributeValue | undefined;
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.AttributeWriteRequest.
+ * Use `create(AttributeWriteRequestSchema)` to create a new message.
+ */
+export declare const AttributeWriteRequestSchema: GenMessage<AttributeWriteRequest>;
+
+/**
+ * Why a command was refused or failed, so an app can branch without string-matching a
+ * human sentence. Closed vocabulary for the same reason as GatewayErrorCode: the app leg
+ * is versioned together with the gateway, so clients can switch exhaustively.
+ *
+ * @generated from enum kusinta.iot.webrtc.v1.CommandErrorCode
+ */
+export enum CommandErrorCode {
+  /**
+   * Sender did not set a code, or sent one this client's schema does not know.
+   *
+   * @generated from enum value: COMMAND_ERROR_CODE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+
+  /**
+   * The caller's DeviceAcl does not permit this command. Permanent: do not retry, and do
+   * not reveal whether the device exists. Also the answer for a device out of reach.
+   *
+   * @generated from enum value: COMMAND_ERROR_CODE_NOT_ENTITLED = 1;
+   */
+  NOT_ENTITLED = 1,
+
+  /**
+   * The value is outside a PropertyConstraint bounding it — a resident asking for a
+   * setpoint above the property owner's limit. About the USER's request, not the app's
+   * correctness: worth telling the user, and the limit is readable from their permissions.
+   *
+   * @generated from enum value: COMMAND_ERROR_CODE_CONSTRAINT_VIOLATED = 2;
+   */
+  CONSTRAINT_VIOLATED = 2,
+
+  /**
+   * Malformed: no endpoint_id, an unknown parameters case, a cluster the device does not
+   * have. A client bug — log it, do not retry.
+   *
+   * @generated from enum value: COMMAND_ERROR_CODE_INVALID_COMMAND = 3;
+   */
+  INVALID_COMMAND = 3,
+
+  /**
+   * No route to the device right now: its connector is disconnected, or the device did
+   * not answer. Transient, retrying is reasonable. NOT a statement that the device is
+   * gone — that is webrtc.v1.DeviceRemoved.
+   *
+   * @generated from enum value: COMMAND_ERROR_CODE_UNREACHABLE = 4;
+   */
+  UNREACHABLE = 4,
+
+  /**
+   * The gateway's own deadline passed with no answer from the connector. The command MAY
+   * still have run: this is the one code that says nothing about what happened to the
+   * device, so it is never a reason to roll back a displayed value.
+   *
+   * @generated from enum value: COMMAND_ERROR_CODE_TIMEOUT = 5;
+   */
+  TIMEOUT = 5,
+
+  /**
+   * The connector or the device refused it for a reason of its own — a mode the hardware
+   * will not accept, a locked device. Read message for specifics.
+   *
+   * @generated from enum value: COMMAND_ERROR_CODE_REJECTED_BY_DEVICE = 6;
+   */
+  REJECTED_BY_DEVICE = 6,
+
+  /**
+   * Gateway-side fault. Not the app's doing; retry cautiously.
+   *
+   * @generated from enum value: COMMAND_ERROR_CODE_INTERNAL = 7;
+   */
+  INTERNAL = 7,
+}
+
+/**
+ * Describes the enum kusinta.iot.webrtc.v1.CommandErrorCode.
+ */
+export declare const CommandErrorCodeSchema: GenEnum<CommandErrorCode>;
+

package/src/kusinta/iot/webrtc/v1/command_pb.js

@@ -2,15 +2,18 @@
 // @generated from file kusinta/iot/webrtc/v1/command.proto (package kusinta.iot.webrtc.v1, syntax proto3)
 /* eslint-disable */
 
-import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+import { enumDesc, fileDesc, messageDesc, tsEnum } from "@bufbuild/protobuf/codegenv2";
 import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+import { file_kusinta_iot_access_v1_acl } from "../../access/v1/acl_pb.js";
+import { file_kusinta_iot_device_v1_cluster_state } from "../../device/v1/cluster_state_pb.js";
+import { file_kusinta_iot_device_v1_matter_options } from "../../device/v1/matter_options_pb.js";
 import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identity_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/command.proto.
  */
 export const file_kusinta_iot_webrtc_v1_command = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_identity_v1_identity]);
+  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_acl, file_kusinta_iot_device_v1_cluster_state, file_kusinta_iot_device_v1_matter_options, file_kusinta_iot_identity_v1_identity]);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.ThermostatSetpointParams.
@@ -68,3 +71,26 @@ export const CommandErrorSchema = /*@__PURE__*/
 export const CommandResultSchema = /*@__PURE__*/
   messageDesc(file_kusinta_iot_webrtc_v1_command, 7);
 
+/**
+ * Describes the message kusinta.iot.webrtc.v1.AttributeWriteRequest.
+ * Use `create(AttributeWriteRequestSchema)` to create a new message.
+ */
+export const AttributeWriteRequestSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_command, 8);
+
+/**
+ * Describes the enum kusinta.iot.webrtc.v1.CommandErrorCode.
+ */
+export const CommandErrorCodeSchema = /*@__PURE__*/
+  enumDesc(file_kusinta_iot_webrtc_v1_command, 0);
+
+/**
+ * Why a command was refused or failed, so an app can branch without string-matching a
+ * human sentence. Closed vocabulary for the same reason as GatewayErrorCode: the app leg
+ * is versioned together with the gateway, so clients can switch exhaustively.
+ *
+ * @generated from enum kusinta.iot.webrtc.v1.CommandErrorCode
+ */
+export const CommandErrorCode = /*@__PURE__*/
+  tsEnum(CommandErrorCodeSchema);
+

package/src/kusinta/iot/webrtc/v1/device_state_pb.d.ts

@@ -8,6 +8,7 @@ import type { Device } from "../../device/v1/device_pb.js";
 import type { EffectivePermissions } from "../../access/v1/acl_pb.js";
 import type { Timestamp } from "@bufbuild/protobuf/wkt";
 import type { PropertyUpdate } from "../../device/v1/property_update_pb.js";
+import type { DeviceId } from "../../identity/v1/identity_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/device_state.proto.
@@ -15,7 +16,7 @@ import type { PropertyUpdate } from "../../device/v1/property_update_pb.js";
 export declare const file_kusinta_iot_webrtc_v1_device_state: GenFile;
 
 /**
- * Full device state sent to the Flutter app on initial WebRTC connection.
+ * Full device state sent to the app on initial WebRTC connection.
  *
  * @generated from message kusinta.iot.webrtc.v1.DeviceStateSnapshot
  */
@@ -43,7 +44,7 @@ export declare type DeviceStateSnapshot = Message<"kusinta.iot.webrtc.v1.DeviceS
 export declare const DeviceStateSnapshotSchema: GenMessage<DeviceStateSnapshot>;
 
 /**
- * Single property change event streamed to the Flutter app in real time.
+ * Single property change event streamed to the app in real time.
  *
  * @generated from message kusinta.iot.webrtc.v1.DevicePropertyEvent
  */
@@ -65,3 +66,65 @@ export declare type DevicePropertyEvent = Message<"kusinta.iot.webrtc.v1.DeviceP
  */
 export declare const DevicePropertyEventSchema: GenMessage<DevicePropertyEvent>;
 
+/**
+ * A device appeared while the app was connected — the app leg's counterpart to
+ * connector.v1.DeviceAnnouncement, which the gateway can currently only drop.
+ *
+ * Carries the full Device, descriptor plus current typed properties, so the app can
+ * render it without a follow-up read — the same payload DeviceStateSnapshot gives
+ * per device.
+ *
+ * Apply as an upsert keyed on descriptor.device_id, never as an insert: a device can
+ * be in the snapshot and then announced, or announced twice across a connector
+ * reconnect.
+ *
+ * Discovery, not interest. Being told a device exists does not subscribe the app to
+ * it — that still takes AppMessage.subscribe. The gateway sends this only for devices
+ * the user is entitled to see; an unfiltered announcement would be a device
+ * enumeration channel.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.DeviceAdded
+ */
+export declare type DeviceAdded = Message<"kusinta.iot.webrtc.v1.DeviceAdded"> & {
+  /**
+   * @generated from field: kusinta.iot.device.v1.Device device = 1;
+   */
+  device?: Device | undefined;
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.DeviceAdded.
+ * Use `create(DeviceAddedSchema)` to create a new message.
+ */
+export declare const DeviceAddedSchema: GenMessage<DeviceAdded>;
+
+/**
+ * A device is gone, because its connector said so via connector.v1.DeviceRemoval.
+ *
+ * A connector disconnecting is NOT a removal: an ordinary reconnect wipes the
+ * device→connector route while every device still exists, and treating that as a
+ * removal makes the whole UI flap. Unreachability is a separate signal — read
+ * device.v1.Device.last_seen for that.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.DeviceRemoved
+ */
+export declare type DeviceRemoved = Message<"kusinta.iot.webrtc.v1.DeviceRemoved"> & {
+  /**
+   * @generated from field: kusinta.iot.identity.v1.DeviceId device_id = 1;
+   */
+  deviceId?: DeviceId | undefined;
+
+  /**
+   * passed through from the connector, for logs
+   *
+   * @generated from field: string reason = 2;
+   */
+  reason: string;
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.DeviceRemoved.
+ * Use `create(DeviceRemovedSchema)` to create a new message.
+ */
+export declare const DeviceRemovedSchema: GenMessage<DeviceRemoved>;
+

package/src/kusinta/iot/webrtc/v1/device_state_pb.js

@@ -7,12 +7,13 @@ import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
 import { file_kusinta_iot_device_v1_device } from "../../device/v1/device_pb.js";
 import { file_kusinta_iot_device_v1_property_update } from "../../device/v1/property_update_pb.js";
 import { file_kusinta_iot_access_v1_acl } from "../../access/v1/acl_pb.js";
+import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identity_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/device_state.proto.
  */
 export const file_kusinta_iot_webrtc_v1_device_state = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_device_v1_device, file_kusinta_iot_device_v1_property_update, file_kusinta_iot_access_v1_acl]);
+  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_device_v1_device, file_kusinta_iot_device_v1_property_update, file_kusinta_iot_access_v1_acl, file_kusinta_iot_identity_v1_identity]);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.DeviceStateSnapshot.
@@ -28,3 +29,17 @@ export const DeviceStateSnapshotSchema = /*@__PURE__*/
 export const DevicePropertyEventSchema = /*@__PURE__*/
   messageDesc(file_kusinta_iot_webrtc_v1_device_state, 1);
 
+/**
+ * Describes the message kusinta.iot.webrtc.v1.DeviceAdded.
+ * Use `create(DeviceAddedSchema)` to create a new message.
+ */
+export const DeviceAddedSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_device_state, 2);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.DeviceRemoved.
+ * Use `create(DeviceRemovedSchema)` to create a new message.
+ */
+export const DeviceRemovedSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_device_state, 3);
+