@kusinta/iot-schema 0.2.0-beta.25 → 0.2.0-beta.27

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kusinta/iot-schema",
-  "version": "0.2.0-beta.25",
+  "version": "0.2.0-beta.27",
   "type": "module",
   "license": "MIT",
   "files": ["src"],
@@ -33,6 +33,8 @@
     "./webrtc/app-token":       "./src/kusinta/iot/webrtc/v1/app_token_pb.js",
     "./webrtc/command":         "./src/kusinta/iot/webrtc/v1/command_pb.js",
     "./webrtc/device-state":    "./src/kusinta/iot/webrtc/v1/device_state_pb.js",
+    "./webrtc/invite":          "./src/kusinta/iot/webrtc/v1/invite_pb.js",
+    "./webrtc/members":         "./src/kusinta/iot/webrtc/v1/members_pb.js",
     "./webrtc/management":      "./src/kusinta/iot/webrtc/v1/management_pb.js",
     "./webrtc/permission-push": "./src/kusinta/iot/webrtc/v1/permission_push_pb.js",
     "./webrtc/setpoint-mode":   "./src/kusinta/iot/webrtc/v1/setpoint_mode_pb.js",

package/src/kusinta/iot/access/v1/roles_pb.d.ts

@@ -236,7 +236,9 @@ export declare const PermissionActionSchema: GenEnum<PermissionAction>;
  * who service the building get the service view above and no more. It does not keep the
  * property owner or the administrator out by force — they hold the building's filing
  * authority and the gateway itself — but it makes their seeing in a deliberate act on the
- * home, such as filing themselves on it, rather than something handed out by default.
+ * home, such as filing themselves on it, rather than something handed out by default. Who
+ * lives where is the exception: they are shown every member and membership
+ * (webrtc.v1.ListGatewayMembers), since they remove a resident who moves out.
  *
  * A membership recorded with no relation, made before relations existed, sees no more than
  * either relation would where it is held: on an apartment or a room, a home as service; on a

package/src/kusinta/iot/access/v1/roles_pb.js

@@ -140,7 +140,9 @@ export const MembershipRelationSchema = /*@__PURE__*/
  * who service the building get the service view above and no more. It does not keep the
  * property owner or the administrator out by force — they hold the building's filing
  * authority and the gateway itself — but it makes their seeing in a deliberate act on the
- * home, such as filing themselves on it, rather than something handed out by default.
+ * home, such as filing themselves on it, rather than something handed out by default. Who
+ * lives where is the exception: they are shown every member and membership
+ * (webrtc.v1.ListGatewayMembers), since they remove a resident who moves out.
  *
  * A membership recorded with no relation, made before relations existed, sees no more than
  * either relation would where it is held: on an apartment or a room, a home as service; on a

package/src/kusinta/iot/reporting/v1/reporting_pb.d.ts

@@ -726,6 +726,12 @@ export declare const ReportServedSpacesResponseSchema: GenMessage<ReportServedSp
  * administrator is also reported so, the api-server's record governs: their administration
  * counts from the earlier of its own start and administrator_since.
  *
+ * A member here is a user the gateway holds a membership or a role for, and no one else. The
+ * registering administrator is reported only when the gateway holds one of those for them —
+ * a membership, or ROLE_PROPERTY_OWNER they were given — and never with the
+ * ROLE_GATEWAY_ADMIN their token carries. That the gateway recognises them otherwise
+ * (webrtc.v1.MemberDetail.registering_admin) does not make them a member of this report.
+ *
  * @generated from message kusinta.iot.reporting.v1.GatewayMember
  */
 export declare type GatewayMember = Message<"kusinta.iot.reporting.v1.GatewayMember"> & {
@@ -841,6 +847,105 @@ export declare type ReportMembersResponse = Message<"kusinta.iot.reporting.v1.Re
  */
 export declare const ReportMembersResponseSchema: GenMessage<ReportMembersResponse>;
 
+/**
+ * Which invite secrets this gateway answers for, by hash alone (webrtc.v1 invite.proto
+ * gives the hash), so the api-server can route a redeem (signaling.v1.RedeemInvite) to the
+ * one gateway that can decide it. Nothing else of an invite leaves the gateway here — not
+ * its space, relation, address, creator or expiry — and the hash of a secret says nothing
+ * of the secret.
+ *
+ * A secret's hash is reported from when the secret is issued until it expires, used or not,
+ * so that a user who redeemed it can redeem again and be told what came of it
+ * (signaling.v1.RedeemOutcome). A revoke, and a resend for the old secrets, removes them at
+ * once; an expiry removes them at or soon after the moment, not necessarily to the second,
+ * and the gateway still answers INVALID for an expired secret meanwhile. Changes are sent
+ * at once.
+ *
+ * The api-server keeps the hashes of a gateway's current snapshot and changes only, drops
+ * them all with the gateway, and routes no redeem by a hash it does not hold.
+ *
+ * A gateway MUST NOT report more than 10000 hashes at once (two for each of the at most
+ * 5000 invites webrtc.v1 CreateInvite allows). The api-server MAY ignore hashes past that.
+ *
+ * @generated from message kusinta.iot.reporting.v1.ReportInviteRoutesRequest
+ */
+export declare type ReportInviteRoutesRequest = Message<"kusinta.iot.reporting.v1.ReportInviteRoutesRequest"> & {
+  /**
+   * This concern's stream; see SnapshotPart.
+   *
+   * @generated from field: string stream_id = 1;
+   */
+  streamId: string;
+
+  /**
+   * The streams this one replaced; see SnapshotPart. Empty on the gateway's first.
+   *
+   * @generated from field: repeated string previous_stream_ids = 2;
+   */
+  previousStreamIds: string[];
+
+  /**
+   * As ReportServiceReachRequest.seq, on this concern's own stream.
+   *
+   * @generated from field: uint64 seq = 3;
+   */
+  seq: bigint;
+
+  /**
+   * Secret hashes (32 bytes each) this gateway answers for from now.
+   *
+   * @generated from field: repeated bytes secret_hashes = 4;
+   */
+  secretHashes: Uint8Array[];
+
+  /**
+   * Secret hashes it no longer answers for. A hash named here and in secret_hashes is
+   * removed.
+   *
+   * @generated from field: repeated bytes removed_secret_hashes = 5;
+   */
+  removedSecretHashes: Uint8Array[];
+
+  /**
+   * Set when this request is part of a snapshot of every hash; hashes absent from a whole
+   * snapshot are routed here no more.
+   *
+   * @generated from field: kusinta.iot.reporting.v1.SnapshotPart snapshot = 6;
+   */
+  snapshot?: SnapshotPart | undefined;
+};
+
+/**
+ * Describes the message kusinta.iot.reporting.v1.ReportInviteRoutesRequest.
+ * Use `create(ReportInviteRoutesRequestSchema)` to create a new message.
+ */
+export declare const ReportInviteRoutesRequestSchema: GenMessage<ReportInviteRoutesRequest>;
+
+/**
+ * @generated from message kusinta.iot.reporting.v1.ReportInviteRoutesResponse
+ */
+export declare type ReportInviteRoutesResponse = Message<"kusinta.iot.reporting.v1.ReportInviteRoutesResponse"> & {
+  /**
+   * As ReportServiceReachResponse.applied_seq.
+   *
+   * @generated from field: uint64 applied_seq = 1;
+   */
+  appliedSeq: bigint;
+
+  /**
+   * As ReportServiceReachResponse.resync_required.
+   *
+   * @generated from field: bool resync_required = 2;
+   */
+  resyncRequired: boolean;
+};
+
+/**
+ * Describes the message kusinta.iot.reporting.v1.ReportInviteRoutesResponse.
+ * Use `create(ReportInviteRoutesResponseSchema)` to create a new message.
+ */
+export declare const ReportInviteRoutesResponseSchema: GenMessage<ReportInviteRoutesResponse>;
+
 /**
  * What kind of problem is open. The device kinds mirror what service staff are given of a
  * device (webrtc.v1.ServiceStatus: reachability, the battery flags, the ServiceFault values);

package/src/kusinta/iot/reporting/v1/reporting_pb.js

@@ -12,7 +12,7 @@ import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identit
  * Describes the file kusinta/iot/reporting/v1/reporting.proto.
  */
 export const file_kusinta_iot_reporting_v1_reporting = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_roles, file_kusinta_iot_common_v1_types, file_kusinta_iot_identity_v1_identity]);
+  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_roles, file_kusinta_iot_common_v1_types, file_kusinta_iot_identity_v1_identity]);
 
 /**
  * Describes the message kusinta.iot.reporting.v1.SnapshotPart.
@@ -140,6 +140,20 @@ export const ReportMembersRequestSchema = /*@__PURE__*/
 export const ReportMembersResponseSchema = /*@__PURE__*/
   messageDesc(file_kusinta_iot_reporting_v1_reporting, 17);
 
+/**
+ * Describes the message kusinta.iot.reporting.v1.ReportInviteRoutesRequest.
+ * Use `create(ReportInviteRoutesRequestSchema)` to create a new message.
+ */
+export const ReportInviteRoutesRequestSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_reporting_v1_reporting, 18);
+
+/**
+ * Describes the message kusinta.iot.reporting.v1.ReportInviteRoutesResponse.
+ * Use `create(ReportInviteRoutesResponseSchema)` to create a new message.
+ */
+export const ReportInviteRoutesResponseSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_reporting_v1_reporting, 19);
+
 /**
  * Describes the enum kusinta.iot.reporting.v1.ProblemKind.
  */

package/src/kusinta/iot/reporting/v1/reporting_service_pb.d.ts

@@ -3,7 +3,7 @@
 /* eslint-disable */
 
 import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv2";
-import type { ReportMembersRequestSchema, ReportMembersResponseSchema, ReportProblemsRequestSchema, ReportProblemsResponseSchema, ReportServedSpacesRequestSchema, ReportServedSpacesResponseSchema, ReportServiceReachRequestSchema, ReportServiceReachResponseSchema } from "./reporting_pb.js";
+import type { ReportInviteRoutesRequestSchema, ReportInviteRoutesResponseSchema, ReportMembersRequestSchema, ReportMembersResponseSchema, ReportProblemsRequestSchema, ReportProblemsResponseSchema, ReportServedSpacesRequestSchema, ReportServedSpacesResponseSchema, ReportServiceReachRequestSchema, ReportServiceReachResponseSchema } from "./reporting_pb.js";
 
 /**
  * Describes the file kusinta/iot/reporting/v1/reporting_service.proto.
@@ -51,5 +51,13 @@ export declare const GatewayReportingService: GenService<{
     input: typeof ReportMembersRequestSchema;
     output: typeof ReportMembersResponseSchema;
   },
+  /**
+   * @generated from rpc kusinta.iot.reporting.v1.GatewayReportingService.ReportInviteRoutes
+   */
+  reportInviteRoutes: {
+    methodKind: "unary";
+    input: typeof ReportInviteRoutesRequestSchema;
+    output: typeof ReportInviteRoutesResponseSchema;
+  },
 }>;
 

package/src/kusinta/iot/reporting/v1/reporting_service_pb.js

@@ -9,7 +9,7 @@ import { file_kusinta_iot_reporting_v1_reporting } from "./reporting_pb.js";
  * Describes the file kusinta/iot/reporting/v1/reporting_service.proto.
  */
 export const file_kusinta_iot_reporting_v1_reporting_service = /*@__PURE__*/
-  fileDesc("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", [file_kusinta_iot_reporting_v1_reporting]);
+  fileDesc("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", [file_kusinta_iot_reporting_v1_reporting]);
 
 /**
  * The building-server gateway's reports to the api-server, over the gateway's client

package/src/kusinta/iot/signaling/v1/signaling_pb.d.ts

@@ -2,7 +2,7 @@
 // @generated from file kusinta/iot/signaling/v1/signaling.proto (package kusinta.iot.signaling.v1, syntax proto3)
 /* eslint-disable */
 
-import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
 import type { Message } from "@bufbuild/protobuf";
 import type { GatewayId, UserId } from "../../identity/v1/identity_pb.js";
 
@@ -174,13 +174,16 @@ export declare const UserHandshakeAckSchema: GenMessage<UserHandshakeAck>;
  */
 export declare type GatewayConnectRequest = Message<"kusinta.iot.signaling.v1.GatewayConnectRequest"> & {
   /**
+   * On redeem_invite_result, the user who redeemed (RedeemInvite).
+   *
    * @generated from field: kusinta.iot.identity.v1.UserId target_user_id = 1;
    */
   targetUserId?: UserId | undefined;
 
   /**
    * The session of target_user_id this message answers. See the contract above.
-   * Ignored on a heartbeat, which carries no routing target at all.
+   * Ignored on a heartbeat, which carries no routing target at all, and on
+   * redeem_invite_result, which belongs to no session.
    *
    * @generated from field: string session_id = 5;
    */
@@ -207,6 +210,12 @@ export declare type GatewayConnectRequest = Message<"kusinta.iot.signaling.v1.Ga
      */
     value: HeartBeat;
     case: "heartbeat";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.signaling.v1.RedeemInviteResult redeem_invite_result = 6;
+     */
+    value: RedeemInviteResult;
+    case: "redeemInviteResult";
   } | { case: undefined; value?: undefined };
 };
 
@@ -223,6 +232,9 @@ export declare const GatewayConnectRequestSchema: GenMessage<GatewayConnectReque
  */
 export declare type GatewayConnectResponse = Message<"kusinta.iot.signaling.v1.GatewayConnectResponse"> & {
   /**
+   * On redeem_invite, the user redeeming: the sub of the token the api-server
+   * verified, and never a value the user supplied.
+   *
    * @generated from field: kusinta.iot.identity.v1.UserId from_user_id = 1;
    */
   fromUserId?: UserId | undefined;
@@ -230,7 +242,7 @@ export declare type GatewayConnectResponse = Message<"kusinta.iot.signaling.v1.G
   /**
    * The session of from_user_id this message originates from — the value the
    * gateway must echo on the GatewayConnectRequest that answers it. See the
-   * contract above.
+   * contract above. Unset on redeem_invite, which belongs to no session.
    *
    * @generated from field: string session_id = 4;
    */
@@ -251,6 +263,12 @@ export declare type GatewayConnectResponse = Message<"kusinta.iot.signaling.v1.G
      */
     value: IceCandidate;
     case: "iceCandidate";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.signaling.v1.RedeemInvite redeem_invite = 5;
+     */
+    value: RedeemInvite;
+    case: "redeemInvite";
   } | { case: undefined; value?: undefined };
 };
 
@@ -260,6 +278,104 @@ export declare type GatewayConnectResponse = Message<"kusinta.iot.signaling.v1.G
  */
 export declare const GatewayConnectResponseSchema: GenMessage<GatewayConnectResponse>;
 
+/**
+ * A person redeeming an invite (webrtc.v1 CreateInvite), api-server → gateway.
+ * The one request on this stream that the gateway answers, with a
+ * RedeemInviteResult carrying the same request_id.
+ *
+ * The api-server sends it only to the gateway whose invite routes hold the
+ * secret's hash (reporting.v1.ReportInviteRoutesRequest), and only for a user
+ * whose account has a verified email: it answers a user without one itself,
+ * before routing. A hash held by more than one gateway routes nowhere and is
+ * answered as INVALID.
+ *
+ * A code is 40 bits, few enough to guess at. The api-server limits how often each
+ * user, and each client address, may redeem, and answers past that limit itself.
+ *
+ * The api-server waits at least 30 seconds for the result. With no result by
+ * then, or no stream to send on, it tells the user to try again later; the redeem
+ * may or may not have been done. Trying again is safe: a redeem is idempotent for
+ * its user (see RedeemOutcome).
+ *
+ * @generated from message kusinta.iot.signaling.v1.RedeemInvite
+ */
+export declare type RedeemInvite = Message<"kusinta.iot.signaling.v1.RedeemInvite"> & {
+  /**
+   * Minted by the api-server, opaque, unique among its redeems in flight.
+   *
+   * @generated from field: string request_id = 1;
+   */
+  requestId: string;
+
+  /**
+   * The secret as the user gave it: the token from a link, or the code as typed.
+   * The gateway hashes and normalises as webrtc.v1 invite.proto says.
+   *
+   * @generated from oneof kusinta.iot.signaling.v1.RedeemInvite.secret
+   */
+  secret: {
+    /**
+     * @generated from field: string token = 2;
+     */
+    value: string;
+    case: "token";
+  } | {
+    /**
+     * @generated from field: string code = 3;
+     */
+    value: string;
+    case: "code";
+  } | { case: undefined; value?: undefined };
+
+  /**
+   * The display name the user's token carries, for the join request it may make, by the
+   * same rule as webrtc.v1.AppTokenClaims.name: the identity provider's display-name claim
+   * alone, never a username or an email address. May be empty.
+   *
+   * @generated from field: string display_name = 4;
+   */
+  displayName: string;
+
+  /**
+   * The verified email address of the user's account, as their token states it.
+   * Never an address the token does not mark verified.
+   *
+   * @generated from field: string verified_email = 5;
+   */
+  verifiedEmail: string;
+};
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.RedeemInvite.
+ * Use `create(RedeemInviteSchema)` to create a new message.
+ */
+export declare const RedeemInviteSchema: GenMessage<RedeemInvite>;
+
+/**
+ * The answer to a RedeemInvite, gateway → api-server.
+ *
+ * @generated from message kusinta.iot.signaling.v1.RedeemInviteResult
+ */
+export declare type RedeemInviteResult = Message<"kusinta.iot.signaling.v1.RedeemInviteResult"> & {
+  /**
+   * As RedeemInvite.request_id.
+   *
+   * @generated from field: string request_id = 1;
+   */
+  requestId: string;
+
+  /**
+   * @generated from field: kusinta.iot.signaling.v1.RedeemOutcome outcome = 2;
+   */
+  outcome: RedeemOutcome;
+};
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.RedeemInviteResult.
+ * Use `create(RedeemInviteResultSchema)` to create a new message.
+ */
+export declare const RedeemInviteResultSchema: GenMessage<RedeemInviteResult>;
+
 /**
  * Messages sent by the app (GatewaySignalingService.UserConnect stream).
  * Auth: Authorization: Bearer <jwt> in gRPC request metadata (validated by interceptor).
@@ -491,3 +607,68 @@ export declare type UserSendResponse = Message<"kusinta.iot.signaling.v1.UserSen
  */
 export declare const UserSendResponseSchema: GenMessage<UserSendResponse>;
 
+/**
+ * What redeeming an invite did, as the gateway decided it.
+ *
+ * A redeem is idempotent for its user: redeemed again by the same user, for as
+ * long as its secret would have lasted unused, a used invite answers JOINED if
+ * the user is filed on its space by then, and otherwise as it did the first time
+ * — so a denied request still answers PENDING_APPROVAL — except that one which
+ * filed the user, who has left that space since, answers INVALID. To anyone
+ * else it answers INVALID. So a user who never saw the first answer can safely
+ * try again.
+ *
+ * @generated from enum kusinta.iot.signaling.v1.RedeemOutcome
+ */
+export enum RedeemOutcome {
+  /**
+   * @generated from enum value: REDEEM_OUTCOME_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+
+  /**
+   * The user is a member of the invite's space. Answered only once the
+   * api-server has applied the member report that names them
+   * (reporting.v1.GatewayMember), so the user can connect as soon as they are
+   * told. Also the answer for a user already filed on that space: the invite is
+   * used up, and their membership is left exactly as it was.
+   *
+   * @generated from enum value: REDEEM_OUTCOME_JOINED = 1;
+   */
+  JOINED = 1,
+
+  /**
+   * A join request was made (webrtc.v1.JoinRequest); the user becomes a member
+   * once it is approved. Also the answer for a user who already has one on that
+   * space.
+   *
+   * @generated from enum value: REDEEM_OUTCOME_PENDING_APPROVAL = 2;
+   */
+  PENDING_APPROVAL = 2,
+
+  /**
+   * No invite: unknown, expired, revoked, already used by someone else, a code
+   * for an invite bound to another address, or anything else that is not a
+   * live invite. One answer for all of them, so a redeem tells nothing about
+   * which secrets exist.
+   *
+   * @generated from enum value: REDEEM_OUTCOME_INVALID = 3;
+   */
+  INVALID = 3,
+
+  /**
+   * The invite is bound to an address (webrtc.v1.CreateInvite.email) that is not
+   * the user's verified one. Answered only to a token, which cannot be guessed;
+   * a code bound to another address answers INVALID. Never says which address
+   * it is bound to, and leaves the invite pending.
+   *
+   * @generated from enum value: REDEEM_OUTCOME_WRONG_ACCOUNT = 4;
+   */
+  WRONG_ACCOUNT = 4,
+}
+
+/**
+ * Describes the enum kusinta.iot.signaling.v1.RedeemOutcome.
+ */
+export declare const RedeemOutcomeSchema: GenEnum<RedeemOutcome>;
+

package/src/kusinta/iot/signaling/v1/signaling_pb.js

@@ -2,14 +2,14 @@
 // @generated from file kusinta/iot/signaling/v1/signaling.proto (package kusinta.iot.signaling.v1, syntax proto3)
 /* eslint-disable */
 
-import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+import { enumDesc, fileDesc, messageDesc, tsEnum } from "@bufbuild/protobuf/codegenv2";
 import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identity_pb.js";
 
 /**
  * Describes the file kusinta/iot/signaling/v1/signaling.proto.
  */
 export const file_kusinta_iot_signaling_v1_signaling = /*@__PURE__*/
-  fileDesc("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", [file_kusinta_iot_identity_v1_identity]);
+  fileDesc("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", [file_kusinta_iot_identity_v1_identity]);
 
 /**
  * Describes the message kusinta.iot.signaling.v1.SdpOffer.
@@ -67,45 +67,81 @@ export const GatewayConnectRequestSchema = /*@__PURE__*/
 export const GatewayConnectResponseSchema = /*@__PURE__*/
   messageDesc(file_kusinta_iot_signaling_v1_signaling, 7);
 
+/**
+ * Describes the message kusinta.iot.signaling.v1.RedeemInvite.
+ * Use `create(RedeemInviteSchema)` to create a new message.
+ */
+export const RedeemInviteSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 8);
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.RedeemInviteResult.
+ * Use `create(RedeemInviteResultSchema)` to create a new message.
+ */
+export const RedeemInviteResultSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 9);
+
 /**
  * Describes the message kusinta.iot.signaling.v1.UserConnectRequest.
  * Use `create(UserConnectRequestSchema)` to create a new message.
  */
 export const UserConnectRequestSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_signaling_v1_signaling, 8);
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 10);
 
 /**
  * Describes the message kusinta.iot.signaling.v1.UserConnectResponse.
  * Use `create(UserConnectResponseSchema)` to create a new message.
  */
 export const UserConnectResponseSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_signaling_v1_signaling, 9);
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 11);
 
 /**
  * Describes the message kusinta.iot.signaling.v1.UserListenRequest.
  * Use `create(UserListenRequestSchema)` to create a new message.
  */
 export const UserListenRequestSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_signaling_v1_signaling, 10);
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 12);
 
 /**
  * Describes the message kusinta.iot.signaling.v1.UserListenResponse.
  * Use `create(UserListenResponseSchema)` to create a new message.
  */
 export const UserListenResponseSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_signaling_v1_signaling, 11);
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 13);
 
 /**
  * Describes the message kusinta.iot.signaling.v1.UserSendRequest.
  * Use `create(UserSendRequestSchema)` to create a new message.
  */
 export const UserSendRequestSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_signaling_v1_signaling, 12);
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 14);
 
 /**
  * Describes the message kusinta.iot.signaling.v1.UserSendResponse.
  * Use `create(UserSendResponseSchema)` to create a new message.
  */
 export const UserSendResponseSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_signaling_v1_signaling, 13);
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 15);
+
+/**
+ * Describes the enum kusinta.iot.signaling.v1.RedeemOutcome.
+ */
+export const RedeemOutcomeSchema = /*@__PURE__*/
+  enumDesc(file_kusinta_iot_signaling_v1_signaling, 0);
+
+/**
+ * What redeeming an invite did, as the gateway decided it.
+ *
+ * A redeem is idempotent for its user: redeemed again by the same user, for as
+ * long as its secret would have lasted unused, a used invite answers JOINED if
+ * the user is filed on its space by then, and otherwise as it did the first time
+ * — so a denied request still answers PENDING_APPROVAL — except that one which
+ * filed the user, who has left that space since, answers INVALID. To anyone
+ * else it answers INVALID. So a user who never saw the first answer can safely
+ * try again.
+ *
+ * @generated from enum kusinta.iot.signaling.v1.RedeemOutcome
+ */
+export const RedeemOutcome = /*@__PURE__*/
+  tsEnum(RedeemOutcomeSchema);
 

package/src/kusinta/iot/space/v1/space_pb.d.ts

@@ -108,7 +108,7 @@ export declare type Space = Message<"kusinta.iot.space.v1.Space"> & {
    *     live with, and anyone filed on their home as service, since being filed on a home
    *     is an act on it its residents should see. Service reach from a building or floor
    *     above is not listed; webrtc.v1.PrivacyDisclosure tells them what kinds of party
-   *     hold it, without naming anyone;
+   *     hold it, and who, without saying where anyone lives;
    *   * anyone else sees none, residents of a building or floor included.
    *
    * @generated from field: repeated kusinta.iot.space.v1.SpaceMember members = 13;

package/src/kusinta/iot/webrtc/v1/app_token_pb.d.ts

@@ -117,6 +117,20 @@ export declare type AppTokenClaims = Message<"kusinta.iot.webrtc.v1.AppTokenClai
    * @generated from field: kusinta.iot.webrtc.v1.Confirmation cnf = 7;
    */
   cnf?: Confirmation | undefined;
+
+  /**
+   * The user's display name as the identity provider holds it, or empty. The issuer MUST
+   * take it from the provider's display-name claim alone and send it empty rather than
+   * fall back to a username, an email address or any other field, since a username is an
+   * email address wherever accounts log in by email. The gateway records it only to name the
+   * user to the people who may see who they are (MemberDetail.name, ServiceParty.names),
+   * and treats it as self-chosen: it removes control and format characters (bidirectional
+   * overrides among them) and keeps at most 80 Unicode code points. A validator accepts a
+   * token without it. Carried in the JWT as "name".
+   *
+   * @generated from field: string name = 8;
+   */
+  name: string;
 };
 
 /**

package/src/kusinta/iot/webrtc/v1/app_token_pb.js

@@ -10,7 +10,7 @@ import { file_kusinta_iot_access_v1_roles } from "../../access/v1/roles_pb.js";
  * Describes the file kusinta/iot/webrtc/v1/app_token.proto.
  */
 export const file_kusinta_iot_webrtc_v1_app_token = /*@__PURE__*/
-  fileDesc("CiVrdXNpbnRhL2lvdC93ZWJydGMvdjEvYXBwX3Rva2VuLnByb3RvEhVrdXNpbnRhLmlvdC53ZWJydGMudjEi5wEKDkFwcFRva2VuQ2xhaW1zEgsKA2lzcxgBIAEoCRILCgNhdWQYAiABKAkSCwoDc3ViGAMgASgJEicKA2lhdBgEIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXASJwoDZXhwGAUgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcBIqCgVyb2xlcxgGIAMoDjIbLmt1c2ludGEuaW90LmFjY2Vzcy52MS5Sb2xlEjAKA2NuZhgHIAEoCzIjLmt1c2ludGEuaW90LndlYnJ0Yy52MS5Db25maXJtYXRpb24iIAoMQ29uZmlybWF0aW9uEhAKCHg1dF9zMjU2GAEgASgJQgJIAWIGcHJvdG8z", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_roles]);
+  fileDesc("CiVrdXNpbnRhL2lvdC93ZWJydGMvdjEvYXBwX3Rva2VuLnByb3RvEhVrdXNpbnRhLmlvdC53ZWJydGMudjEi9QEKDkFwcFRva2VuQ2xhaW1zEgsKA2lzcxgBIAEoCRILCgNhdWQYAiABKAkSCwoDc3ViGAMgASgJEicKA2lhdBgEIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXASJwoDZXhwGAUgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcBIqCgVyb2xlcxgGIAMoDjIbLmt1c2ludGEuaW90LmFjY2Vzcy52MS5Sb2xlEjAKA2NuZhgHIAEoCzIjLmt1c2ludGEuaW90LndlYnJ0Yy52MS5Db25maXJtYXRpb24SDAoEbmFtZRgIIAEoCSIgCgxDb25maXJtYXRpb24SEAoIeDV0X3MyNTYYASABKAlCAkgBYgZwcm90bzM", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_roles]);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.AppTokenClaims.