@kusinta/iot-schema 0.1.0-beta.9 → 0.2.0-beta.2

package/src/kusinta/iot/webrtc/v1/envelope_pb.d.ts

@@ -2,13 +2,17 @@
 // @generated from file kusinta/iot/webrtc/v1/envelope.proto (package kusinta.iot.webrtc.v1, syntax proto3)
 /* eslint-disable */
 
-import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
 import type { Message } from "@bufbuild/protobuf";
 import type { DeviceId } from "../../identity/v1/identity_pb.js";
+import type { AttributeRef } from "../../access/v1/acl_pb.js";
+import type { Space } from "../../space/v1/space_pb.js";
+import type { ManagementAck, ManagementRequest, SpaceTree } from "./management_pb.js";
 import type { Timestamp } from "@bufbuild/protobuf/wkt";
-import type { DevicePropertyEvent, DeviceStateSnapshot } from "./device_state_pb.js";
+import type { DeviceAdded, DeviceRemoved, DeviceStateSnapshot, PropertyReport } from "./device_state_pb.js";
 import type { LivePermissionUpdate } from "./permission_push_pb.js";
-import type { CommandResult, DeviceCommand } from "./command_pb.js";
+import type { AttributeWriteRequest, CommandResult, DeviceCommand } from "./command_pb.js";
+import type { DeviceEventBatch } from "../../device/v1/device_event_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/envelope.proto.
@@ -56,19 +60,29 @@ export declare type HandshakeRejected = Message<"kusinta.iot.webrtc.v1.Handshake
 export declare const HandshakeRejectedSchema: GenMessage<HandshakeRejected>;
 
 /**
- * AppHandshake must be the first message sent by the Flutter app on the data channel.
- * The gateway validates the JWT locally using the mykusinta-api-server public key,
+ * AppHandshake must be the first message sent by the app on the data channel.
+ * The gateway validates the JWT locally using the api-server's public key,
  * checks that gateway_id in the JWT matches this gateway, then extracts the role.
  *
  * @generated from message kusinta.iot.webrtc.v1.AppHandshake
  */
 export declare type AppHandshake = Message<"kusinta.iot.webrtc.v1.AppHandshake"> & {
   /**
+   * Signed compact JWS. Its payload claims are documented by AppTokenClaims
+   * in app_token.proto — the shared contract between the api-server (issuer)
+   * and the gateway (validator).
+   *
    * @generated from field: string jwt = 1;
    */
   jwt: string;
 
   /**
+   * Initial interest set — an optimisation that saves one round trip, equivalent to
+   * sending SubscribeDevices immediately after the handshake. Interest only: naming
+   * an id here does not entitle the app to it, and ids the user may not see are
+   * refused in the SubscriptionAck that follows. Not the only mechanism — the set is
+   * revisable mid-session via AppMessage.subscribe / .unsubscribe.
+   *
    * @generated from field: repeated kusinta.iot.identity.v1.DeviceId subscribe_device_ids = 2;
    */
   subscribeDeviceIds: DeviceId[];
@@ -81,23 +95,129 @@ export declare type AppHandshake = Message<"kusinta.iot.webrtc.v1.AppHandshake">
 export declare const AppHandshakeSchema: GenMessage<AppHandshake>;
 
 /**
- * @generated from message kusinta.iot.webrtc.v1.PropertyReadRequest
+ * Adds device_ids to what the app wants streamed. Interest, never entitlement:
+ * the gateway intersects the request with what the user is permitted to see and
+ * reports what it declined in SubscriptionAck.refused. Additive — ids already in
+ * the set are a no-op, so a retry after a dropped ack is safe.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.SubscribeDevices
  */
-export declare type PropertyReadRequest = Message<"kusinta.iot.webrtc.v1.PropertyReadRequest"> & {
+export declare type SubscribeDevices = Message<"kusinta.iot.webrtc.v1.SubscribeDevices"> & {
+  /**
+   * @generated from field: repeated kusinta.iot.identity.v1.DeviceId device_ids = 1;
+   */
+  deviceIds: DeviceId[];
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.SubscribeDevices.
+ * Use `create(SubscribeDevicesSchema)` to create a new message.
+ */
+export declare const SubscribeDevicesSchema: GenMessage<SubscribeDevices>;
+
+/**
+ * Removes device_ids from what the app wants streamed. Removing an id the app is
+ * not subscribed to is a no-op, not an error.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.UnsubscribeDevices
+ */
+export declare type UnsubscribeDevices = Message<"kusinta.iot.webrtc.v1.UnsubscribeDevices"> & {
+  /**
+   * @generated from field: repeated kusinta.iot.identity.v1.DeviceId device_ids = 1;
+   */
+  deviceIds: DeviceId[];
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.UnsubscribeDevices.
+ * Use `create(UnsubscribeDevicesSchema)` to create a new message.
+ */
+export declare const UnsubscribeDevicesSchema: GenMessage<UnsubscribeDevices>;
+
+/**
+ * A device the gateway declined to add to the interest set. Ids the gateway does
+ * not know are refused as NOT_ENTITLED rather than a distinct not-found code, so
+ * the ack cannot be used to enumerate devices the user may not see.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.RefusedSubscription
+ */
+export declare type RefusedSubscription = Message<"kusinta.iot.webrtc.v1.RefusedSubscription"> & {
   /**
    * @generated from field: kusinta.iot.identity.v1.DeviceId device_id = 1;
    */
   deviceId?: DeviceId | undefined;
 
   /**
-   * @generated from field: string attribute_name = 2;
+   * @generated from field: kusinta.iot.webrtc.v1.GatewayErrorCode code = 2;
    */
-  attributeName: string;
+  code: GatewayErrorCode;
 
   /**
-   * @generated from field: string cluster_id_hex = 3;
+   * human-readable, for logs
+   *
+   * @generated from field: string message = 3;
    */
-  clusterIdHex: string;
+  message: string;
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.RefusedSubscription.
+ * Use `create(RefusedSubscriptionSchema)` to create a new message.
+ */
+export declare const RefusedSubscriptionSchema: GenMessage<RefusedSubscription>;
+
+/**
+ * Answer to SubscribeDevices / UnsubscribeDevices, gateway → app.
+ * `subscribed` is the effective set after the change, not a delta: an app that
+ * missed an ack or raced two requests re-syncs from it without reconnecting.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.SubscriptionAck
+ */
+export declare type SubscriptionAck = Message<"kusinta.iot.webrtc.v1.SubscriptionAck"> & {
+  /**
+   * AppMessage.message_id of the request
+   *
+   * @generated from field: string in_reply_to = 1;
+   */
+  inReplyTo: string;
+
+  /**
+   * @generated from field: repeated kusinta.iot.identity.v1.DeviceId subscribed = 2;
+   */
+  subscribed: DeviceId[];
+
+  /**
+   * @generated from field: repeated kusinta.iot.webrtc.v1.RefusedSubscription refused = 3;
+   */
+  refused: RefusedSubscription[];
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.SubscriptionAck.
+ * Use `create(SubscriptionAckSchema)` to create a new message.
+ */
+export declare const SubscriptionAckSchema: GenMessage<SubscriptionAck>;
+
+/**
+ * Reads one attribute of one endpoint, on demand. The carrier for
+ * PERMISSION_ACTION_READ.
+ *
+ * Addressed by AttributeRef, the same type a write, a grant and a constraint use — so a
+ * read, the write that changes the value, and the permission covering both name the
+ * attribute identically.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.PropertyReadRequest
+ */
+export declare type PropertyReadRequest = Message<"kusinta.iot.webrtc.v1.PropertyReadRequest"> & {
+  /**
+   * @generated from field: kusinta.iot.identity.v1.DeviceId device_id = 1;
+   */
+  deviceId?: DeviceId | undefined;
+
+  /**
+   * @generated from field: kusinta.iot.access.v1.AttributeRef target = 7;
+   */
+  target?: AttributeRef | undefined;
 };
 
 /**
@@ -107,7 +227,106 @@ export declare type PropertyReadRequest = Message<"kusinta.iot.webrtc.v1.Propert
 export declare const PropertyReadRequestSchema: GenMessage<PropertyReadRequest>;
 
 /**
- * GatewayMessage: gateway → Flutter app
+ * Session-level error, gateway → app. Mirrors connector.v1.GatewayError
+ * on the connector leg; kept separate because the two legs have different
+ * authorization semantics and this one has a closed code vocabulary.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.GatewayError
+ */
+export declare type GatewayError = Message<"kusinta.iot.webrtc.v1.GatewayError"> & {
+  /**
+   * @generated from field: kusinta.iot.webrtc.v1.GatewayErrorCode code = 1;
+   */
+  code: GatewayErrorCode;
+
+  /**
+   * human-readable, for logs — never rendered to a user
+   *
+   * @generated from field: string message = 2;
+   */
+  message: string;
+
+  /**
+   * structured detail, e.g. {"device_id": "therm-1"}
+   *
+   * @generated from field: map<string, string> metadata = 3;
+   */
+  metadata: { [key: string]: string };
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.GatewayError.
+ * Use `create(GatewayErrorSchema)` to create a new message.
+ */
+export declare const GatewayErrorSchema: GenMessage<GatewayError>;
+
+/**
+ * Answer to a ManagementRequest, gateway → app. Lives here rather than beside the
+ * requests in management.proto because it carries GatewayError, which is declared
+ * in this file; the other direction would be an import cycle.
+ *
+ * Exactly one result arrives per request, correlated by in_reply_to. A refusal is
+ * an ordinary result, not a session-level error: a filing operation the caller may
+ * not perform says so and the session continues. Targets the caller cannot reach
+ * are refused as NOT_ENTITLED whether or not they exist, so no result here reveals
+ * which spaces or devices are out there.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.ManagementResult
+ */
+export declare type ManagementResult = Message<"kusinta.iot.webrtc.v1.ManagementResult"> & {
+  /**
+   * AppMessage.message_id of the request
+   *
+   * @generated from field: string in_reply_to = 1;
+   */
+  inReplyTo: string;
+
+  /**
+   * @generated from oneof kusinta.iot.webrtc.v1.ManagementResult.result
+   */
+  result: {
+    /**
+     * refused, or the request was malformed
+     *
+     * @generated from field: kusinta.iot.webrtc.v1.GatewayError error = 2;
+     */
+    value: GatewayError;
+    case: "error";
+  } | {
+    /**
+     * create_space, update_space
+     *
+     * @generated from field: kusinta.iot.space.v1.Space space = 3;
+     */
+    value: Space;
+    case: "space";
+  } | {
+    /**
+     * list_spaces
+     *
+     * @generated from field: kusinta.iot.webrtc.v1.SpaceTree space_tree = 4;
+     */
+    value: SpaceTree;
+    case: "spaceTree";
+  } | {
+    /**
+     * everything else
+     *
+     * @generated from field: kusinta.iot.webrtc.v1.ManagementAck ack = 5;
+     */
+    value: ManagementAck;
+    case: "ack";
+  } | { case: undefined; value?: undefined };
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.ManagementResult.
+ * Use `create(ManagementResultSchema)` to create a new message.
+ */
+export declare const ManagementResultSchema: GenMessage<ManagementResult>;
+
+/**
+ * GatewayMessage: gateway → app
  *
  * @generated from message kusinta.iot.webrtc.v1.GatewayMessage
  */
@@ -133,10 +352,10 @@ export declare type GatewayMessage = Message<"kusinta.iot.webrtc.v1.GatewayMessa
     case: "stateSnapshot";
   } | {
     /**
-     * @generated from field: kusinta.iot.webrtc.v1.DevicePropertyEvent property_event = 4;
+     * @generated from field: kusinta.iot.webrtc.v1.PropertyReport property_report = 4;
      */
-    value: DevicePropertyEvent;
-    case: "propertyEvent";
+    value: PropertyReport;
+    case: "propertyReport";
   } | {
     /**
      * @generated from field: kusinta.iot.webrtc.v1.LivePermissionUpdate permission_update = 5;
@@ -149,14 +368,6 @@ export declare type GatewayMessage = Message<"kusinta.iot.webrtc.v1.GatewayMessa
      */
     value: CommandResult;
     case: "commandResult";
-  } | {
-    /**
-     * error description string
-     *
-     * @generated from field: string error = 7;
-     */
-    value: string;
-    case: "error";
   } | {
     /**
      * @generated from field: kusinta.iot.webrtc.v1.Pong pong = 8;
@@ -169,6 +380,47 @@ export declare type GatewayMessage = Message<"kusinta.iot.webrtc.v1.GatewayMessa
      */
     value: HandshakeRejected;
     case: "handshakeRejected";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.GatewayError error = 10;
+     */
+    value: GatewayError;
+    case: "error";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.SubscriptionAck subscription_ack = 11;
+     */
+    value: SubscriptionAck;
+    case: "subscriptionAck";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.DeviceAdded device_added = 12;
+     */
+    value: DeviceAdded;
+    case: "deviceAdded";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.DeviceRemoved device_removed = 13;
+     */
+    value: DeviceRemoved;
+    case: "deviceRemoved";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.ManagementResult management_result = 14;
+     */
+    value: ManagementResult;
+    case: "managementResult";
+  } | {
+    /**
+     * 15 was attribute_write_result. Answers to attribute writes come back as
+     * command_result above instead: a write and an invoke differ in what they do to a
+     * device, not in how the gateway reports having done it, and request_id says which
+     * request is being answered either way.
+     *
+     * @generated from field: kusinta.iot.device.v1.DeviceEventBatch device_events = 16;
+     */
+    value: DeviceEventBatch;
+    case: "deviceEvents";
   } | { case: undefined; value?: undefined };
 };
 
@@ -179,7 +431,7 @@ export declare type GatewayMessage = Message<"kusinta.iot.webrtc.v1.GatewayMessa
 export declare const GatewayMessageSchema: GenMessage<GatewayMessage>;
 
 /**
- * AppMessage: Flutter app → gateway
+ * AppMessage: app → gateway
  *
  * @generated from message kusinta.iot.webrtc.v1.AppMessage
  */
@@ -221,6 +473,30 @@ export declare type AppMessage = Message<"kusinta.iot.webrtc.v1.AppMessage"> & {
      */
     value: Ping;
     case: "ping";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.SubscribeDevices subscribe = 7;
+     */
+    value: SubscribeDevices;
+    case: "subscribe";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.UnsubscribeDevices unsubscribe = 8;
+     */
+    value: UnsubscribeDevices;
+    case: "unsubscribe";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.ManagementRequest management = 9;
+     */
+    value: ManagementRequest;
+    case: "management";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.webrtc.v1.AttributeWriteRequest attribute_write = 10;
+     */
+    value: AttributeWriteRequest;
+    case: "attributeWrite";
   } | { case: undefined; value?: undefined };
 };
 
@@ -230,3 +506,74 @@ export declare type AppMessage = Message<"kusinta.iot.webrtc.v1.AppMessage"> & {
  */
 export declare const AppMessageSchema: GenMessage<AppMessage>;
 
+/**
+ * Machine-readable classification of a session-level gateway error, so the app
+ * can branch without string-matching a human sentence. Deliberately an enum here,
+ * unlike the free-form code on connector.v1.GatewayError: the app leg is versioned
+ * together with the gateway, and clients need an exhaustive switch.
+ *
+ * @generated from enum kusinta.iot.webrtc.v1.GatewayErrorCode
+ */
+export enum GatewayErrorCode {
+  /**
+   * Sender did not set a code, or sent one this client's schema does not know.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+
+  /**
+   * Permanent refusal — the user may not see or act on this. Stop asking, tell the user.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_NOT_ENTITLED = 1;
+   */
+  NOT_ENTITLED = 1,
+
+  /**
+   * The app sent something malformed. A client bug: log it, do not retry.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_INVALID_REQUEST = 2;
+   */
+  INVALID_REQUEST = 2,
+
+  /**
+   * Transient failure. Retrying is reasonable.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_UNAVAILABLE = 3;
+   */
+  UNAVAILABLE = 3,
+
+  /**
+   * Gateway-side fault. Not the app's doing; retry cautiously.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_INTERNAL = 4;
+   */
+  INTERNAL = 4,
+
+  /**
+   * The user already holds the maximum number of concurrent sessions this
+   * gateway will keep, and this attempt is refused. Permanent for this attempt:
+   * the limit does not clear on its own, so retrying is exactly the wrong
+   * response — the user must end another session first. Distinct from
+   * NOT_ENTITLED, which is a statement about what the user may see; this user
+   * may, they are simply already connected enough times.
+   *
+   * The limit itself is gateway configuration and deliberately not modelled
+   * here. GatewayError.message carries the specifics so a client can render
+   * something actionable.
+   *
+   * Rollout note: a client whose schema predates this value decodes it as
+   * UNSPECIFIED, which is retryable by design. Client handling must therefore
+   * ship before or with the gateway that emits it, and the gateway must close
+   * the session itself rather than rely on the client standing down.
+   *
+   * @generated from enum value: GATEWAY_ERROR_CODE_SESSION_LIMIT_REACHED = 5;
+   */
+  SESSION_LIMIT_REACHED = 5,
+}
+
+/**
+ * Describes the enum kusinta.iot.webrtc.v1.GatewayErrorCode.
+ */
+export declare const GatewayErrorCodeSchema: GenEnum<GatewayErrorCode>;
+

package/src/kusinta/iot/webrtc/v1/envelope_pb.js

@@ -2,18 +2,22 @@
 // @generated from file kusinta/iot/webrtc/v1/envelope.proto (package kusinta.iot.webrtc.v1, syntax proto3)
 /* eslint-disable */
 
-import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+import { enumDesc, fileDesc, messageDesc, tsEnum } from "@bufbuild/protobuf/codegenv2";
 import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+import { file_kusinta_iot_access_v1_acl } from "../../access/v1/acl_pb.js";
+import { file_kusinta_iot_device_v1_device_event } from "../../device/v1/device_event_pb.js";
 import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identity_pb.js";
+import { file_kusinta_iot_space_v1_space } from "../../space/v1/space_pb.js";
 import { file_kusinta_iot_webrtc_v1_command } from "./command_pb.js";
 import { file_kusinta_iot_webrtc_v1_device_state } from "./device_state_pb.js";
+import { file_kusinta_iot_webrtc_v1_management } from "./management_pb.js";
 import { file_kusinta_iot_webrtc_v1_permission_push } from "./permission_push_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/envelope.proto.
  */
 export const file_kusinta_iot_webrtc_v1_envelope = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_webrtc_v1_command, file_kusinta_iot_webrtc_v1_device_state, file_kusinta_iot_webrtc_v1_permission_push]);
+  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_acl, file_kusinta_iot_device_v1_device_event, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_space_v1_space, file_kusinta_iot_webrtc_v1_command, file_kusinta_iot_webrtc_v1_device_state, file_kusinta_iot_webrtc_v1_management, file_kusinta_iot_webrtc_v1_permission_push]);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.Ping.
@@ -43,24 +47,83 @@ export const HandshakeRejectedSchema = /*@__PURE__*/
 export const AppHandshakeSchema = /*@__PURE__*/
   messageDesc(file_kusinta_iot_webrtc_v1_envelope, 3);
 
+/**
+ * Describes the message kusinta.iot.webrtc.v1.SubscribeDevices.
+ * Use `create(SubscribeDevicesSchema)` to create a new message.
+ */
+export const SubscribeDevicesSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 4);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.UnsubscribeDevices.
+ * Use `create(UnsubscribeDevicesSchema)` to create a new message.
+ */
+export const UnsubscribeDevicesSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 5);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.RefusedSubscription.
+ * Use `create(RefusedSubscriptionSchema)` to create a new message.
+ */
+export const RefusedSubscriptionSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 6);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.SubscriptionAck.
+ * Use `create(SubscriptionAckSchema)` to create a new message.
+ */
+export const SubscriptionAckSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 7);
+
 /**
  * Describes the message kusinta.iot.webrtc.v1.PropertyReadRequest.
  * Use `create(PropertyReadRequestSchema)` to create a new message.
  */
 export const PropertyReadRequestSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 4);
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 8);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.GatewayError.
+ * Use `create(GatewayErrorSchema)` to create a new message.
+ */
+export const GatewayErrorSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 9);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.ManagementResult.
+ * Use `create(ManagementResultSchema)` to create a new message.
+ */
+export const ManagementResultSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 10);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.GatewayMessage.
  * Use `create(GatewayMessageSchema)` to create a new message.
  */
 export const GatewayMessageSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 5);
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 11);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.AppMessage.
  * Use `create(AppMessageSchema)` to create a new message.
  */
 export const AppMessageSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 6);
+  messageDesc(file_kusinta_iot_webrtc_v1_envelope, 12);
+
+/**
+ * Describes the enum kusinta.iot.webrtc.v1.GatewayErrorCode.
+ */
+export const GatewayErrorCodeSchema = /*@__PURE__*/
+  enumDesc(file_kusinta_iot_webrtc_v1_envelope, 0);
+
+/**
+ * Machine-readable classification of a session-level gateway error, so the app
+ * can branch without string-matching a human sentence. Deliberately an enum here,
+ * unlike the free-form code on connector.v1.GatewayError: the app leg is versioned
+ * together with the gateway, and clients need an exhaustive switch.
+ *
+ * @generated from enum kusinta.iot.webrtc.v1.GatewayErrorCode
+ */
+export const GatewayErrorCode = /*@__PURE__*/
+  tsEnum(GatewayErrorCodeSchema);