@kusinta/iot-schema 0.2.0-beta.3 → 0.2.0-beta.31

package/src/kusinta/iot/signaling/v1/signaling_pb.d.ts

@@ -2,7 +2,7 @@
 // @generated from file kusinta/iot/signaling/v1/signaling.proto (package kusinta.iot.signaling.v1, syntax proto3)
 /* eslint-disable */
 
-import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
 import type { Message } from "@bufbuild/protobuf";
 import type { GatewayId, UserId } from "../../identity/v1/identity_pb.js";
 
@@ -76,10 +76,26 @@ export declare type IceCandidate = Message<"kusinta.iot.signaling.v1.IceCandidat
 export declare const IceCandidateSchema: GenMessage<IceCandidate>;
 
 /**
- * Empty keepalive. The gateway sends this periodically on the GatewayConnect
- * stream so the otherwise-idle bidi request keeps producing DATA frames, which
- * resets the inactivity timers on any proxy between the two ends and stops it
- * from tearing the stream down. Carries no routing target and is dropped on receipt.
+ * Empty keepalive, sent periodically on a stream that would otherwise fall
+ * silent. The DATA frames it produces reset the inactivity timers on any proxy
+ * between the two ends and stop it tearing the stream down. Carries no routing
+ * target and is dropped on receipt.
+ *
+ * Carried on two arms, each covering a half that falls silent while neither end
+ * has anything to say: the building-server gateway sends it upstream on
+ * GatewayConnect, and the api-server sends it downstream to the app on
+ * UserConnectResponse. The remaining halves have no arm — an app leg's upstream
+ * that goes idle is one the client can write on whenever it needs to.
+ *
+ * Never an acknowledgement. A heartbeat answers no message and must not be
+ * treated as confirming one.
+ *
+ * On GatewayConnect it also lets the api-server judge whether the gateway is
+ * present. A gateway is present while its stream is open, and never lets it
+ * carry nothing for more than 30 seconds: a heartbeat fills any longer silence.
+ * A stream that has carried nothing for 90 seconds may be taken as gone, even
+ * when the transport has not yet said so. That is the gateway's presence and
+ * nothing more: a present gateway may still have lost its devices.
  *
  * @generated from message kusinta.iot.signaling.v1.HeartBeat
  */
@@ -124,6 +140,23 @@ export declare type UserHandshakeAck = Message<"kusinta.iot.signaling.v1.UserHan
    * @generated from field: string reason = 2;
    */
   reason: string;
+
+  /**
+   * How often the api-server will send a HeartBeat on this stream, in
+   * milliseconds.
+   *
+   * Advisory, and a client must not refuse a stream over it: a client that has
+   * seen no traffic at all for a small multiple of this may take the stream for
+   * gone and reattach with the same session_id, which is the difference between
+   * a renegotiation that stalls and one that reconnects. The server is free to
+   * answer with a different value on the next session.
+   *
+   * Zero means the server is not heartbeating this stream, and a client must
+   * then not infer anything from silence.
+   *
+   * @generated from field: uint32 heartbeat_interval_ms = 3;
+   */
+  heartbeatIntervalMs: number;
 };
 
 /**
@@ -141,13 +174,16 @@ export declare const UserHandshakeAckSchema: GenMessage<UserHandshakeAck>;
  */
 export declare type GatewayConnectRequest = Message<"kusinta.iot.signaling.v1.GatewayConnectRequest"> & {
   /**
+   * On redeem_invite_result, the user who redeemed (RedeemInvite).
+   *
    * @generated from field: kusinta.iot.identity.v1.UserId target_user_id = 1;
    */
   targetUserId?: UserId | undefined;
 
   /**
    * The session of target_user_id this message answers. See the contract above.
-   * Ignored on a heartbeat, which carries no routing target at all.
+   * Ignored on a heartbeat, which carries no routing target at all, and on
+   * redeem_invite_result, which belongs to no session.
    *
    * @generated from field: string session_id = 5;
    */
@@ -174,6 +210,12 @@ export declare type GatewayConnectRequest = Message<"kusinta.iot.signaling.v1.Ga
      */
     value: HeartBeat;
     case: "heartbeat";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.signaling.v1.RedeemInviteResult redeem_invite_result = 6;
+     */
+    value: RedeemInviteResult;
+    case: "redeemInviteResult";
   } | { case: undefined; value?: undefined };
 };
 
@@ -190,6 +232,9 @@ export declare const GatewayConnectRequestSchema: GenMessage<GatewayConnectReque
  */
 export declare type GatewayConnectResponse = Message<"kusinta.iot.signaling.v1.GatewayConnectResponse"> & {
   /**
+   * On redeem_invite, the user redeeming: the sub of the token the api-server
+   * verified, and never a value the user supplied.
+   *
    * @generated from field: kusinta.iot.identity.v1.UserId from_user_id = 1;
    */
   fromUserId?: UserId | undefined;
@@ -197,7 +242,7 @@ export declare type GatewayConnectResponse = Message<"kusinta.iot.signaling.v1.G
   /**
    * The session of from_user_id this message originates from — the value the
    * gateway must echo on the GatewayConnectRequest that answers it. See the
-   * contract above.
+   * contract above. Unset on redeem_invite, which belongs to no session.
    *
    * @generated from field: string session_id = 4;
    */
@@ -218,6 +263,12 @@ export declare type GatewayConnectResponse = Message<"kusinta.iot.signaling.v1.G
      */
     value: IceCandidate;
     case: "iceCandidate";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.signaling.v1.RedeemInvite redeem_invite = 5;
+     */
+    value: RedeemInvite;
+    case: "redeemInvite";
   } | { case: undefined; value?: undefined };
 };
 
@@ -227,6 +278,104 @@ export declare type GatewayConnectResponse = Message<"kusinta.iot.signaling.v1.G
  */
 export declare const GatewayConnectResponseSchema: GenMessage<GatewayConnectResponse>;
 
+/**
+ * A person redeeming an invite (webrtc.v1 CreateInvite), api-server → gateway.
+ * The one request on this stream that the gateway answers, with a
+ * RedeemInviteResult carrying the same request_id.
+ *
+ * The api-server sends it only to the gateway whose invite routes hold the
+ * secret's hash (reporting.v1.ReportInviteRoutesRequest), and only for a user
+ * whose account has a verified email: it answers a user without one itself,
+ * before routing. A hash held by more than one gateway routes nowhere and is
+ * answered as INVALID.
+ *
+ * A code is 40 bits, few enough to guess at. The api-server limits how often each
+ * user, and each client address, may redeem, and answers past that limit itself.
+ *
+ * The api-server waits at least 30 seconds for the result. With no result by
+ * then, or no stream to send on, it tells the user to try again later; the redeem
+ * may or may not have been done. Trying again is safe: a redeem is idempotent for
+ * its user (see RedeemOutcome).
+ *
+ * @generated from message kusinta.iot.signaling.v1.RedeemInvite
+ */
+export declare type RedeemInvite = Message<"kusinta.iot.signaling.v1.RedeemInvite"> & {
+  /**
+   * Minted by the api-server, opaque, unique among its redeems in flight.
+   *
+   * @generated from field: string request_id = 1;
+   */
+  requestId: string;
+
+  /**
+   * The secret as the user gave it: the token from a link, or the code as typed.
+   * The gateway hashes and normalises as webrtc.v1 invite.proto says.
+   *
+   * @generated from oneof kusinta.iot.signaling.v1.RedeemInvite.secret
+   */
+  secret: {
+    /**
+     * @generated from field: string token = 2;
+     */
+    value: string;
+    case: "token";
+  } | {
+    /**
+     * @generated from field: string code = 3;
+     */
+    value: string;
+    case: "code";
+  } | { case: undefined; value?: undefined };
+
+  /**
+   * The display name the user's token carries, for the join request it may make, by the
+   * same rule as webrtc.v1.AppTokenClaims.name: the identity provider's display-name claim
+   * alone, never a username or an email address. May be empty.
+   *
+   * @generated from field: string display_name = 4;
+   */
+  displayName: string;
+
+  /**
+   * The verified email address of the user's account, as their token states it.
+   * Never an address the token does not mark verified.
+   *
+   * @generated from field: string verified_email = 5;
+   */
+  verifiedEmail: string;
+};
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.RedeemInvite.
+ * Use `create(RedeemInviteSchema)` to create a new message.
+ */
+export declare const RedeemInviteSchema: GenMessage<RedeemInvite>;
+
+/**
+ * The answer to a RedeemInvite, gateway → api-server.
+ *
+ * @generated from message kusinta.iot.signaling.v1.RedeemInviteResult
+ */
+export declare type RedeemInviteResult = Message<"kusinta.iot.signaling.v1.RedeemInviteResult"> & {
+  /**
+   * As RedeemInvite.request_id.
+   *
+   * @generated from field: string request_id = 1;
+   */
+  requestId: string;
+
+  /**
+   * @generated from field: kusinta.iot.signaling.v1.RedeemOutcome outcome = 2;
+   */
+  outcome: RedeemOutcome;
+};
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.RedeemInviteResult.
+ * Use `create(RedeemInviteResultSchema)` to create a new message.
+ */
+export declare const RedeemInviteResultSchema: GenMessage<RedeemInviteResult>;
+
 /**
  * Messages sent by the app (GatewaySignalingService.UserConnect stream).
  * Auth: Authorization: Bearer <jwt> in gRPC request metadata (validated by interceptor).
@@ -244,6 +393,10 @@ export declare type UserConnectRequest = Message<"kusinta.iot.signaling.v1.UserC
   sessionId: string;
 
   /**
+   * A payload added here, the handshake aside, belongs in UserSendRequest too:
+   * the half-duplex form of this leg carries the same upstream messages, and
+   * nothing fails if one of them is only added to one of the two.
+   *
    * @generated from oneof kusinta.iot.signaling.v1.UserConnectRequest.payload
    */
   payload: {
@@ -276,6 +429,10 @@ export declare const UserConnectRequestSchema: GenMessage<UserConnectRequest>;
 /**
  * Messages sent by the api-server to the app.
  *
+ * One oneof serves both forms of the leg: UserListenResponse wraps this message
+ * rather than restating its payloads, so an arm added here reaches the bidi and
+ * half-duplex forms alike.
+ *
  * @generated from message kusinta.iot.signaling.v1.UserConnectResponse
  */
 export declare type UserConnectResponse = Message<"kusinta.iot.signaling.v1.UserConnectResponse"> & {
@@ -283,6 +440,7 @@ export declare type UserConnectResponse = Message<"kusinta.iot.signaling.v1.User
    * Echoes the session_id of the stream this message is delivered on, so a
    * client can assert the relay routed to the session it thinks it is. See the
    * contract above.
+   * Ignored on a heartbeat, which carries no routing target at all.
    *
    * @generated from field: string session_id = 4;
    */
@@ -309,6 +467,22 @@ export declare type UserConnectResponse = Message<"kusinta.iot.signaling.v1.User
      */
     value: IceCandidate;
     case: "iceCandidate";
+  } | {
+    /**
+     * Keeps a silent stream alive. UserListen is downstream-only — the client
+     * opens it with a handshake and then writes nothing — so between the
+     * acknowledgement and an answer there is no traffic in either direction, and
+     * an idle negotiation can outlast a proxy's patience. Upstream cannot help:
+     * the client has nothing to send, and it is traffic *to* the client that
+     * resets a client-side idle timer.
+     *
+     * A client that does not know this arm sees an unset payload rather than an
+     * error, which is what the oneof buys.
+     *
+     * @generated from field: kusinta.iot.signaling.v1.HeartBeat heartbeat = 5;
+     */
+    value: HeartBeat;
+    case: "heartbeat";
   } | { case: undefined; value?: undefined };
 };
 
@@ -318,3 +492,183 @@ export declare type UserConnectResponse = Message<"kusinta.iot.signaling.v1.User
  */
 export declare const UserConnectResponseSchema: GenMessage<UserConnectResponse>;
 
+/**
+ * The app leg of the protocol exists twice. UserConnect is one bidi stream, and
+ * is what a client uses when its transport can stream a request body. A client
+ * whose transport cannot — a browser, whose fetch API has no full-duplex request
+ * stream — uses UserListen and UserSend instead. Both forms carry the same
+ * messages and are served by the same relay: once a session is live, how it was
+ * opened is not observable.
+ *
+ * Opens the downstream half of a half-duplex app session, and carries the
+ * handshake that is the first frame of the bidi form. Field numbers are those of
+ * the equivalent UserConnectRequest, so the two cannot be confused on the wire.
+ *
+ * @generated from message kusinta.iot.signaling.v1.UserListenRequest
+ */
+export declare type UserListenRequest = Message<"kusinta.iot.signaling.v1.UserListenRequest"> & {
+  /**
+   * @generated from field: kusinta.iot.signaling.v1.UserHandshake handshake = 1;
+   */
+  handshake?: UserHandshake | undefined;
+
+  /**
+   * This client's session: opaque, minted by the client, stable across
+   * reconnects, never a credential, and required. See the contract above.
+   *
+   * @generated from field: string session_id = 4;
+   */
+  sessionId: string;
+};
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.UserListenRequest.
+ * Use `create(UserListenRequestSchema)` to create a new message.
+ */
+export declare const UserListenRequestSchema: GenMessage<UserListenRequest>;
+
+/**
+ * One message of the downstream half. Wraps the response the bidi form delivers
+ * directly, rather than restating its payloads: a response message is not shared
+ * between two rpcs, and a second copy of the oneof would be free to drift from
+ * the first.
+ *
+ * @generated from message kusinta.iot.signaling.v1.UserListenResponse
+ */
+export declare type UserListenResponse = Message<"kusinta.iot.signaling.v1.UserListenResponse"> & {
+  /**
+   * @generated from field: kusinta.iot.signaling.v1.UserConnectResponse response = 1;
+   */
+  response?: UserConnectResponse | undefined;
+};
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.UserListenResponse.
+ * Use `create(UserListenResponseSchema)` to create a new message.
+ */
+export declare const UserListenResponseSchema: GenMessage<UserListenResponse>;
+
+/**
+ * One upstream message of a half-duplex app session, delivered by its own call.
+ *
+ * The session must already be open, which is what makes ordering the caller's
+ * job: the handshake is acknowledged on the UserListen stream, and a UserSend
+ * issued before that acknowledgement names a session the relay does not hold
+ * yet. It is refused, not queued. Two sends racing each other can also arrive
+ * out of order, so a caller that must preserve order — an offer before the
+ * candidates that belong to it — issues them one at a time.
+ *
+ * @generated from message kusinta.iot.signaling.v1.UserSendRequest
+ */
+export declare type UserSendRequest = Message<"kusinta.iot.signaling.v1.UserSendRequest"> & {
+  /**
+   * The session to deliver into. See the contract above.
+   *
+   * @generated from field: string session_id = 4;
+   */
+  sessionId: string;
+
+  /**
+   * @generated from oneof kusinta.iot.signaling.v1.UserSendRequest.payload
+   */
+  payload: {
+    /**
+     * @generated from field: kusinta.iot.signaling.v1.SdpOffer offer = 2;
+     */
+    value: SdpOffer;
+    case: "offer";
+  } | {
+    /**
+     * @generated from field: kusinta.iot.signaling.v1.IceCandidate ice_candidate = 3;
+     */
+    value: IceCandidate;
+    case: "iceCandidate";
+  } | { case: undefined; value?: undefined };
+};
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.UserSendRequest.
+ * Use `create(UserSendRequestSchema)` to create a new message.
+ */
+export declare const UserSendRequestSchema: GenMessage<UserSendRequest>;
+
+/**
+ * Empty. Delivery is acknowledged by the call succeeding; a message that could
+ * not be routed fails the call instead.
+ *
+ * @generated from message kusinta.iot.signaling.v1.UserSendResponse
+ */
+export declare type UserSendResponse = Message<"kusinta.iot.signaling.v1.UserSendResponse"> & {
+};
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.UserSendResponse.
+ * Use `create(UserSendResponseSchema)` to create a new message.
+ */
+export declare const UserSendResponseSchema: GenMessage<UserSendResponse>;
+
+/**
+ * What redeeming an invite did, as the gateway decided it.
+ *
+ * A redeem is idempotent for its user: redeemed again by the same user, for as
+ * long as its secret would have lasted unused, a used invite answers JOINED if
+ * the user is filed on its space by then, and otherwise as it did the first time
+ * — so a denied request still answers PENDING_APPROVAL — except that one which
+ * filed the user, who has left that space since, answers INVALID. To anyone
+ * else it answers INVALID. So a user who never saw the first answer can safely
+ * try again.
+ *
+ * @generated from enum kusinta.iot.signaling.v1.RedeemOutcome
+ */
+export enum RedeemOutcome {
+  /**
+   * @generated from enum value: REDEEM_OUTCOME_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+
+  /**
+   * The user is a member of the invite's space. Answered only once the
+   * api-server has applied the member report that names them
+   * (reporting.v1.GatewayMember), so the user can connect as soon as they are
+   * told. Also the answer for a user already filed on that space: the invite is
+   * used up, and their membership is left exactly as it was.
+   *
+   * @generated from enum value: REDEEM_OUTCOME_JOINED = 1;
+   */
+  JOINED = 1,
+
+  /**
+   * A join request was made (webrtc.v1.JoinRequest); the user becomes a member
+   * once it is approved. Also the answer for a user who already has one on that
+   * space.
+   *
+   * @generated from enum value: REDEEM_OUTCOME_PENDING_APPROVAL = 2;
+   */
+  PENDING_APPROVAL = 2,
+
+  /**
+   * No invite: unknown, expired, revoked, already used by someone else, a code
+   * for an invite bound to another address, or anything else that is not a
+   * live invite. One answer for all of them, so a redeem tells nothing about
+   * which secrets exist.
+   *
+   * @generated from enum value: REDEEM_OUTCOME_INVALID = 3;
+   */
+  INVALID = 3,
+
+  /**
+   * The invite is bound to an address (webrtc.v1.CreateInvite.email) that is not
+   * the user's verified one. Answered only to a token, which cannot be guessed;
+   * a code bound to another address answers INVALID. Never says which address
+   * it is bound to, and leaves the invite pending.
+   *
+   * @generated from enum value: REDEEM_OUTCOME_WRONG_ACCOUNT = 4;
+   */
+  WRONG_ACCOUNT = 4,
+}
+
+/**
+ * Describes the enum kusinta.iot.signaling.v1.RedeemOutcome.
+ */
+export declare const RedeemOutcomeSchema: GenEnum<RedeemOutcome>;
+

package/src/kusinta/iot/signaling/v1/signaling_pb.js

@@ -2,14 +2,14 @@
 // @generated from file kusinta/iot/signaling/v1/signaling.proto (package kusinta.iot.signaling.v1, syntax proto3)
 /* eslint-disable */
 
-import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+import { enumDesc, fileDesc, messageDesc, tsEnum } from "@bufbuild/protobuf/codegenv2";
 import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identity_pb.js";
 
 /**
  * Describes the file kusinta/iot/signaling/v1/signaling.proto.
  */
 export const file_kusinta_iot_signaling_v1_signaling = /*@__PURE__*/
-  fileDesc("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", [file_kusinta_iot_identity_v1_identity]);
+  fileDesc("CihrdXNpbnRhL2lvdC9zaWduYWxpbmcvdjEvc2lnbmFsaW5nLnByb3RvEhhrdXNpbnRhLmlvdC5zaWduYWxpbmcudjEiFwoIU2RwT2ZmZXISCwoDc2RwGAEgASgJIhgKCVNkcEFuc3dlchILCgNzZHAYASABKAkiSwoMSWNlQ2FuZGlkYXRlEhEKCWNhbmRpZGF0ZRgBIAEoCRIPCgdzZHBfbWlkGAIgASgJEhcKD3NkcF9tbGluZV9pbmRleBgDIAEoBSILCglIZWFydEJlYXQiTgoNVXNlckhhbmRzaGFrZRI9ChF0YXJnZXRfZ2F0ZXdheV9pZBgBIAEoCzIiLmt1c2ludGEuaW90LmlkZW50aXR5LnYxLkdhdGV3YXlJZCJTChBVc2VySGFuZHNoYWtlQWNrEhAKCGFjY2VwdGVkGAEgASgIEg4KBnJlYXNvbhgCIAEoCRIdChVoZWFydGJlYXRfaW50ZXJ2YWxfbXMYAyABKA0i7wIKFUdhdGV3YXlDb25uZWN0UmVxdWVzdBI3Cg50YXJnZXRfdXNlcl9pZBgBIAEoCzIfLmt1c2ludGEuaW90LmlkZW50aXR5LnYxLlVzZXJJZBISCgpzZXNzaW9uX2lkGAUgASgJEjUKBmFuc3dlchgCIAEoCzIjLmt1c2ludGEuaW90LnNpZ25hbGluZy52MS5TZHBBbnN3ZXJIABI/Cg1pY2VfY2FuZGlkYXRlGAMgASgLMiYua3VzaW50YS5pb3Quc2lnbmFsaW5nLnYxLkljZUNhbmRpZGF0ZUgAEjgKCWhlYXJ0YmVhdBgEIAEoCzIjLmt1c2ludGEuaW90LnNpZ25hbGluZy52MS5IZWFydEJlYXRIABJMChRyZWRlZW1faW52aXRlX3Jlc3VsdBgGIAEoCzIsLmt1c2ludGEuaW90LnNpZ25hbGluZy52MS5SZWRlZW1JbnZpdGVSZXN1bHRIAEIJCgdwYXlsb2FkIqUCChZHYXRld2F5Q29ubmVjdFJlc3BvbnNlEjUKDGZyb21fdXNlcl9pZBgBIAEoCzIfLmt1c2ludGEuaW90LmlkZW50aXR5LnYxLlVzZXJJZBISCgpzZXNzaW9uX2lkGAQgASgJEjMKBW9mZmVyGAIgASgLMiIua3VzaW50YS5pb3Quc2lnbmFsaW5nLnYxLlNkcE9mZmVySAASPwoNaWNlX2NhbmRpZGF0ZRgDIAEoCzImLmt1c2ludGEuaW90LnNpZ25hbGluZy52MS5JY2VDYW5kaWRhdGVIABI/Cg1yZWRlZW1faW52aXRlGAUgASgLMiYua3VzaW50YS5pb3Quc2lnbmFsaW5nLnYxLlJlZGVlbUludml0ZUgAQgkKB3BheWxvYWQiewoMUmVkZWVtSW52aXRlEhIKCnJlcXVlc3RfaWQYASABKAkSDwoFdG9rZW4YAiABKAlIABIOCgRjb2RlGAMgASgJSAASFAoMZGlzcGxheV9uYW1lGAQgASgJEhYKDnZlcmlmaWVkX2VtYWlsGAUgASgJQggKBnNlY3JldCJiChJSZWRlZW1JbnZpdGVSZXN1bHQSEgoKcmVxdWVzdF9pZBgBIAEoCRI4CgdvdXRjb21lGAIgASgOMicua3VzaW50YS5pb3Quc2lnbmFsaW5nLnYxLlJlZGVlbU91dGNvbWUi5wEKElVzZXJDb25uZWN0UmVxdWVzdBISCgpzZXNzaW9uX2lkGAQgASgJEjwKCWhhbmRzaGFrZRgBIAEoCzInLmt1c2ludGEuaW90LnNpZ25hbGluZy52MS5Vc2VySGFuZHNoYWtlSAASMwoFb2ZmZXIYAiABKAsyIi5rdXNpbnRhLmlvdC5zaWduYWxpbmcudjEuU2RwT2ZmZXJIABI/Cg1pY2VfY2FuZGlkYXRlGAMgASgLMiYua3VzaW50YS5pb3Quc2lnbmFsaW5nLnYxLkljZUNhbmRpZGF0ZUgAQgkKB3BheWxvYWQiqwIKE1VzZXJDb25uZWN0UmVzcG9uc2USEgoKc2Vzc2lvbl9pZBgEIAEoCRJDCg1oYW5kc2hha2VfYWNrGAEgASgLMioua3VzaW50YS5pb3Quc2lnbmFsaW5nLnYxLlVzZXJIYW5kc2hha2VBY2tIABI1CgZhbnN3ZXIYAiABKAsyIy5rdXNpbnRhLmlvdC5zaWduYWxpbmcudjEuU2RwQW5zd2VySAASPwoNaWNlX2NhbmRpZGF0ZRgDIAEoCzImLmt1c2ludGEuaW90LnNpZ25hbGluZy52MS5JY2VDYW5kaWRhdGVIABI4CgloZWFydGJlYXQYBSABKAsyIy5rdXNpbnRhLmlvdC5zaWduYWxpbmcudjEuSGVhcnRCZWF0SABCCQoHcGF5bG9hZCJvChFVc2VyTGlzdGVuUmVxdWVzdBI6CgloYW5kc2hha2UYASABKAsyJy5rdXNpbnRhLmlvdC5zaWduYWxpbmcudjEuVXNlckhhbmRzaGFrZRISCgpzZXNzaW9uX2lkGAQgASgJSgQIAhADSgQIAxAEIlUKElVzZXJMaXN0ZW5SZXNwb25zZRI/CghyZXNwb25zZRgBIAEoCzItLmt1c2ludGEuaW90LnNpZ25hbGluZy52MS5Vc2VyQ29ubmVjdFJlc3BvbnNlIrcBCg9Vc2VyU2VuZFJlcXVlc3QSEgoKc2Vzc2lvbl9pZBgEIAEoCRIzCgVvZmZlchgCIAEoCzIiLmt1c2ludGEuaW90LnNpZ25hbGluZy52MS5TZHBPZmZlckgAEj8KDWljZV9jYW5kaWRhdGUYAyABKAsyJi5rdXNpbnRhLmlvdC5zaWduYWxpbmcudjEuSWNlQ2FuZGlkYXRlSABCCQoHcGF5bG9hZEoECAEQAlIJaGFuZHNoYWtlIhIKEFVzZXJTZW5kUmVzcG9uc2UqrQEKDVJlZGVlbU91dGNvbWUSHgoaUkVERUVNX09VVENPTUVfVU5TUEVDSUZJRUQQABIZChVSRURFRU1fT1VUQ09NRV9KT0lORUQQARIjCh9SRURFRU1fT1VUQ09NRV9QRU5ESU5HX0FQUFJPVkFMEAISGgoWUkVERUVNX09VVENPTUVfSU5WQUxJRBADEiAKHFJFREVFTV9PVVRDT01FX1dST05HX0FDQ09VTlQQBEICSAFiBnByb3RvMw", [file_kusinta_iot_identity_v1_identity]);
 
 /**
  * Describes the message kusinta.iot.signaling.v1.SdpOffer.
@@ -67,17 +67,81 @@ export const GatewayConnectRequestSchema = /*@__PURE__*/
 export const GatewayConnectResponseSchema = /*@__PURE__*/
   messageDesc(file_kusinta_iot_signaling_v1_signaling, 7);
 
+/**
+ * Describes the message kusinta.iot.signaling.v1.RedeemInvite.
+ * Use `create(RedeemInviteSchema)` to create a new message.
+ */
+export const RedeemInviteSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 8);
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.RedeemInviteResult.
+ * Use `create(RedeemInviteResultSchema)` to create a new message.
+ */
+export const RedeemInviteResultSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 9);
+
 /**
  * Describes the message kusinta.iot.signaling.v1.UserConnectRequest.
  * Use `create(UserConnectRequestSchema)` to create a new message.
  */
 export const UserConnectRequestSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_signaling_v1_signaling, 8);
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 10);
 
 /**
  * Describes the message kusinta.iot.signaling.v1.UserConnectResponse.
  * Use `create(UserConnectResponseSchema)` to create a new message.
  */
 export const UserConnectResponseSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_signaling_v1_signaling, 9);
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 11);
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.UserListenRequest.
+ * Use `create(UserListenRequestSchema)` to create a new message.
+ */
+export const UserListenRequestSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 12);
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.UserListenResponse.
+ * Use `create(UserListenResponseSchema)` to create a new message.
+ */
+export const UserListenResponseSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 13);
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.UserSendRequest.
+ * Use `create(UserSendRequestSchema)` to create a new message.
+ */
+export const UserSendRequestSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 14);
+
+/**
+ * Describes the message kusinta.iot.signaling.v1.UserSendResponse.
+ * Use `create(UserSendResponseSchema)` to create a new message.
+ */
+export const UserSendResponseSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_signaling_v1_signaling, 15);
+
+/**
+ * Describes the enum kusinta.iot.signaling.v1.RedeemOutcome.
+ */
+export const RedeemOutcomeSchema = /*@__PURE__*/
+  enumDesc(file_kusinta_iot_signaling_v1_signaling, 0);
+
+/**
+ * What redeeming an invite did, as the gateway decided it.
+ *
+ * A redeem is idempotent for its user: redeemed again by the same user, for as
+ * long as its secret would have lasted unused, a used invite answers JOINED if
+ * the user is filed on its space by then, and otherwise as it did the first time
+ * — so a denied request still answers PENDING_APPROVAL — except that one which
+ * filed the user, who has left that space since, answers INVALID. To anyone
+ * else it answers INVALID. So a user who never saw the first answer can safely
+ * try again.
+ *
+ * @generated from enum kusinta.iot.signaling.v1.RedeemOutcome
+ */
+export const RedeemOutcome = /*@__PURE__*/
+  tsEnum(RedeemOutcomeSchema);
 

package/src/kusinta/iot/signaling/v1/signaling_service_pb.d.ts

@@ -3,7 +3,7 @@
 /* eslint-disable */
 
 import type { GenFile, GenService } from "@bufbuild/protobuf/codegenv2";
-import type { GatewayConnectRequestSchema, GatewayConnectResponseSchema, UserConnectRequestSchema, UserConnectResponseSchema } from "./signaling_pb.js";
+import type { GatewayConnectRequestSchema, GatewayConnectResponseSchema, UserConnectRequestSchema, UserConnectResponseSchema, UserListenRequestSchema, UserListenResponseSchema, UserSendRequestSchema, UserSendResponseSchema } from "./signaling_pb.js";
 
 /**
  * Describes the file kusinta/iot/signaling/v1/signaling_service.proto.
@@ -30,5 +30,28 @@ export declare const GatewaySignalingService: GenService<{
     input: typeof UserConnectRequestSchema;
     output: typeof UserConnectResponseSchema;
   },
+  /**
+   * Opens the session and its downstream half, for a client whose transport
+   * cannot stream a request body and so cannot call UserConnect. The handshake
+   * travels in the request; the acknowledgement is the stream's first message.
+   *
+   * @generated from rpc kusinta.iot.signaling.v1.GatewaySignalingService.UserListen
+   */
+  userListen: {
+    methodKind: "server_streaming";
+    input: typeof UserListenRequestSchema;
+    output: typeof UserListenResponseSchema;
+  },
+  /**
+   * Delivers one upstream message into a session UserListen has already opened.
+   * A call naming a session the relay does not hold is refused, not queued.
+   *
+   * @generated from rpc kusinta.iot.signaling.v1.GatewaySignalingService.UserSend
+   */
+  userSend: {
+    methodKind: "unary";
+    input: typeof UserSendRequestSchema;
+    output: typeof UserSendResponseSchema;
+  },
 }>;
 

package/src/kusinta/iot/signaling/v1/signaling_service_pb.js

@@ -9,7 +9,7 @@ import { file_kusinta_iot_signaling_v1_signaling } from "./signaling_pb.js";
  * Describes the file kusinta/iot/signaling/v1/signaling_service.proto.
  */
 export const file_kusinta_iot_signaling_v1_signaling_service = /*@__PURE__*/
-  fileDesc("CjBrdXNpbnRhL2lvdC9zaWduYWxpbmcvdjEvc2lnbmFsaW5nX3NlcnZpY2UucHJvdG8SGGt1c2ludGEuaW90LnNpZ25hbGluZy52MTKCAgoXR2F0ZXdheVNpZ25hbGluZ1NlcnZpY2USdwoOR2F0ZXdheUNvbm5lY3QSLy5rdXNpbnRhLmlvdC5zaWduYWxpbmcudjEuR2F0ZXdheUNvbm5lY3RSZXF1ZXN0GjAua3VzaW50YS5pb3Quc2lnbmFsaW5nLnYxLkdhdGV3YXlDb25uZWN0UmVzcG9uc2UoATABEm4KC1VzZXJDb25uZWN0Eiwua3VzaW50YS5pb3Quc2lnbmFsaW5nLnYxLlVzZXJDb25uZWN0UmVxdWVzdBotLmt1c2ludGEuaW90LnNpZ25hbGluZy52MS5Vc2VyQ29ubmVjdFJlc3BvbnNlKAEwAUICSAFiBnByb3RvMw", [file_kusinta_iot_signaling_v1_signaling]);
+  fileDesc("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", [file_kusinta_iot_signaling_v1_signaling]);
 
 /**
  * @generated from service kusinta.iot.signaling.v1.GatewaySignalingService