@kusinta/iot-schema 0.2.0-beta.4 → 0.2.0-beta.40

package/src/kusinta/iot/webrtc/v1/app_token_pb.d.ts

@@ -67,11 +67,26 @@ export declare type AppTokenClaims = Message<"kusinta.iot.webrtc.v1.AppTokenClai
 
   /**
    * Custom claims.
-   * A user may hold several roles at once (e.g. resident + gateway admin), so
-   * this is a list. Carried in the JWT as an array of enum NAME strings
-   * (e.g. ["ROLE_RESIDENT", "ROLE_GATEWAY_ADMIN"]), matching proto3 canonical
-   * JSON enum encoding — not integer values. This keeps the claim
-   * self-describing and aligns with text-typed role storage on the api-server.
+   * The roles the api-server holds for the user on this gateway: the service
+   * roles the gateway reported (reporting.v1.GatewayMember) other than
+   * ROLE_GATEWAY_ADMIN, and ROLE_GATEWAY_ADMIN for each administrator of the
+   * organisation that owns the gateway. A resident's token names none. Carried in the JWT as an array of
+   * enum NAME strings (e.g. ["ROLE_TECHNICIAN"]), not integer values. The
+   * issuer writes the claim even when it names no role ([]), and a validator
+   * refuses a token without it.
+   *
+   * The gateway authorises from the roles it holds itself, and takes from
+   * this claim ROLE_GATEWAY_ADMIN alone. So the api-server MUST set
+   * ROLE_GATEWAY_ADMIN here only for an administrator of the organisation that
+   * owns the gateway as it stands when the token is minted, never because the
+   * gateway reported someone as one: the gateway holds those itself, and a copy
+   * in a token would outlive their demotion until the token expired. The same
+   * administrators are told to the gateway as the vouched set
+   * (signaling.v1.VouchedAdministrators), which ends the administration of a
+   * session whose user it no longer names, and of a token issued before it. A gateway that holds roles itself must be
+   * deployed before an api-server issues tokens under this rule, since a
+   * gateway that authorised from this claim would find residents and
+   * reported service roles missing.
    *
    * @generated from field: repeated kusinta.iot.access.v1.Role roles = 6;
    */
@@ -105,6 +120,34 @@ export declare type AppTokenClaims = Message<"kusinta.iot.webrtc.v1.AppTokenClai
    * @generated from field: kusinta.iot.webrtc.v1.Confirmation cnf = 7;
    */
   cnf?: Confirmation | undefined;
+
+  /**
+   * The user's display name as the identity provider holds it, or empty. The issuer MUST
+   * take it from the provider's display-name claim alone and send it empty rather than
+   * fall back to a username, an email address or any other field, since a username is an
+   * email address wherever accounts log in by email. The gateway records it only to name the
+   * user to the people who may see who they are (MemberDetail.name, ServiceParty.names),
+   * and treats it as self-chosen: it removes control and format characters (bidirectional
+   * overrides among them) and keeps at most 80 Unicode code points. A validator accepts a
+   * token without it. Carried in the JWT as "name".
+   *
+   * @generated from field: string name = 8;
+   */
+  name: string;
+
+  /**
+   * The verified email address of the account, or empty. The issuer sets it for a user who
+   * is staff (access.v1.Role, STAFF) on the token's gateway as the member report stands
+   * (reporting.v1.GatewayMember), every administrator of the owning organisation included, when the identity
+   * provider marks their address verified. It MUST be empty for anyone else, and for an
+   * address not marked verified. The gateway MUST keep it only while the user holds a
+   * staff role, and use it only to tell staff apart to whoever may list every member
+   * (MemberDetail.email). A validator accepts a token without it. Carried in the JWT as
+   * "email".
+   *
+   * @generated from field: string email = 9;
+   */
+  email: string;
 };
 
 /**

package/src/kusinta/iot/webrtc/v1/app_token_pb.js

@@ -10,7 +10,7 @@ import { file_kusinta_iot_access_v1_roles } from "../../access/v1/roles_pb.js";
  * Describes the file kusinta/iot/webrtc/v1/app_token.proto.
  */
 export const file_kusinta_iot_webrtc_v1_app_token = /*@__PURE__*/
-  fileDesc("CiVrdXNpbnRhL2lvdC93ZWJydGMvdjEvYXBwX3Rva2VuLnByb3RvEhVrdXNpbnRhLmlvdC53ZWJydGMudjEi5wEKDkFwcFRva2VuQ2xhaW1zEgsKA2lzcxgBIAEoCRILCgNhdWQYAiABKAkSCwoDc3ViGAMgASgJEicKA2lhdBgEIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXASJwoDZXhwGAUgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcBIqCgVyb2xlcxgGIAMoDjIbLmt1c2ludGEuaW90LmFjY2Vzcy52MS5Sb2xlEjAKA2NuZhgHIAEoCzIjLmt1c2ludGEuaW90LndlYnJ0Yy52MS5Db25maXJtYXRpb24iIAoMQ29uZmlybWF0aW9uEhAKCHg1dF9zMjU2GAEgASgJQgJIAWIGcHJvdG8z", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_roles]);
+  fileDesc("CiVrdXNpbnRhL2lvdC93ZWJydGMvdjEvYXBwX3Rva2VuLnByb3RvEhVrdXNpbnRhLmlvdC53ZWJydGMudjEihAIKDkFwcFRva2VuQ2xhaW1zEgsKA2lzcxgBIAEoCRILCgNhdWQYAiABKAkSCwoDc3ViGAMgASgJEicKA2lhdBgEIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXASJwoDZXhwGAUgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcBIqCgVyb2xlcxgGIAMoDjIbLmt1c2ludGEuaW90LmFjY2Vzcy52MS5Sb2xlEjAKA2NuZhgHIAEoCzIjLmt1c2ludGEuaW90LndlYnJ0Yy52MS5Db25maXJtYXRpb24SDAoEbmFtZRgIIAEoCRINCgVlbWFpbBgJIAEoCSIgCgxDb25maXJtYXRpb24SEAoIeDV0X3MyNTYYASABKAlCAkgBYgZwcm90bzM", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_roles]);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.AppTokenClaims.

package/src/kusinta/iot/webrtc/v1/command_pb.d.ts

@@ -281,6 +281,16 @@ export declare type DeviceCommand = Message<"kusinta.iot.webrtc.v1.DeviceCommand
     value: Uint8Array;
     case: "rawTlv";
   } | { case: undefined; value?: undefined };
+
+  /**
+   * How long, in seconds, the value the command sets holds, for a command that sets an
+   * attribute the producer states as leased: OnOff is set by the On and Off commands, not
+   * by a write. The same rules as AttributeWriteRequest.lease_seconds, applied to the
+   * attribute the command sets.
+   *
+   * @generated from field: optional uint32 lease_seconds = 14;
+   */
+  leaseSeconds?: number | undefined;
 };
 
 /**
@@ -304,6 +314,20 @@ export declare type CommandError = Message<"kusinta.iot.webrtc.v1.CommandError">
    * @generated from field: kusinta.iot.webrtc.v1.CommandErrorCode code = 3;
    */
   code: CommandErrorCode;
+
+  /**
+   * Structured detail for the app, beside `code`. Mirrors GatewayError.metadata.
+   *
+   *   "reason": a stable, machine-readable code the app may branch on — a reason
+   *             such as a setting being governed by the device's room.
+   *   "detail": one sentence the app may show the user.
+   *
+   * `message` stays log-only; anything meant for a user goes here. Empty means the
+   * producer has nothing to add beyond `code`.
+   *
+   * @generated from field: map<string, string> metadata = 4;
+   */
+  metadata: { [key: string]: string };
 };
 
 /**
@@ -420,6 +444,28 @@ export declare type AttributeWriteRequest = Message<"kusinta.iot.webrtc.v1.Attri
    * @generated from field: kusinta.iot.device.v1.AttributeValue value = 4;
    */
   value?: AttributeValue | undefined;
+
+  /**
+   * How long, in seconds, the written value holds before the device itself returns the
+   * attribute to its lapse value — for an attribute the producer states as leased
+   * (device.v1.LeasedWrite, on the attribute's cluster or as a vendor parameter). At least
+   * one second, and within the stated minimum and maximum.
+   *
+   * The producer MUST refuse, with COMMAND_ERROR_CODE_INVALID_COMMAND, a write to a leased
+   * attribute that carries no lease, a lease of zero or outside the stated bounds, and a
+   * lease on an attribute it does not state as leased. A write of the attribute's lapse
+   * value is the exception: it needs no lease, ends any lease running, and a lease on it
+   * is ignored (device.v1.LeasedWrite.lapse_value). Rollout order: a writer sends a
+   * lease for an attribute before the attribute's producer states it as leased.
+   *
+   * Set only by the gateway, towards a producer: a leased attribute is written by the
+   * gateway alone. A gateway MUST refuse a request from an app that carries a lease, with
+   * COMMAND_ERROR_CODE_INVALID_COMMAND, and an app's write or command to an attribute its
+   * producer states as leased, with COMMAND_ERROR_CODE_HELD_BY_GATEWAY.
+   *
+   * @generated from field: optional uint32 lease_seconds = 5;
+   */
+  leaseSeconds?: number | undefined;
 };
 
 /**
@@ -500,6 +546,16 @@ export enum CommandErrorCode {
    * @generated from enum value: COMMAND_ERROR_CODE_INTERNAL = 7;
    */
   INTERNAL = 7,
+
+  /**
+   * The attribute is one the gateway drives under a lease — a floor zone, a heat source's
+   * add-on heater block — and a person changes it through the room's target and comfort
+   * band, not directly. Permanent for this attribute: do not retry; tell the user where to
+   * change it instead.
+   *
+   * @generated from enum value: COMMAND_ERROR_CODE_HELD_BY_GATEWAY = 8;
+   */
+  HELD_BY_GATEWAY = 8,
 }
 
 /**

package/src/kusinta/iot/webrtc/v1/command_pb.js

@@ -14,7 +14,7 @@ import { file_kusinta_iot_webrtc_v1_setpoint_mode } from "./setpoint_mode_pb.js"
  * Describes the file kusinta/iot/webrtc/v1/command.proto.
  */
 export const file_kusinta_iot_webrtc_v1_command = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_acl, file_kusinta_iot_device_v1_cluster_state, file_kusinta_iot_device_v1_matter_options, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_webrtc_v1_setpoint_mode]);
+  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_acl, file_kusinta_iot_device_v1_cluster_state, file_kusinta_iot_device_v1_matter_options, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_webrtc_v1_setpoint_mode]);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.ThermostatSetpointParams.

package/src/kusinta/iot/webrtc/v1/device_state_pb.d.ts

@@ -2,13 +2,14 @@
 // @generated from file kusinta/iot/webrtc/v1/device_state.proto (package kusinta.iot.webrtc.v1, syntax proto3)
 /* eslint-disable */
 
-import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
 import type { Message } from "@bufbuild/protobuf";
 import type { Device } from "../../device/v1/device_pb.js";
 import type { EffectivePermissions } from "../../access/v1/acl_pb.js";
 import type { Timestamp } from "@bufbuild/protobuf/wkt";
-import type { PropertyUpdate } from "../../device/v1/property_update_pb.js";
+import type { SessionRoles } from "./permission_push_pb.js";
 import type { DeviceId } from "../../identity/v1/identity_pb.js";
+import type { PropertyUpdate } from "../../device/v1/property_update_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/device_state.proto.
@@ -16,7 +17,9 @@ import type { DeviceId } from "../../identity/v1/identity_pb.js";
 export declare const file_kusinta_iot_webrtc_v1_device_state: GenFile;
 
 /**
- * Full device state sent to the app on initial WebRTC connection.
+ * Full device state sent to the app on initial WebRTC connection. Devices the recipient sees
+ * as service are as they are now, by description only, each with its ServiceStatus once
+ * one has been evaluated for them (see service_statuses).
  *
  * @generated from message kusinta.iot.webrtc.v1.DeviceStateSnapshot
  */
@@ -35,6 +38,23 @@ export declare type DeviceStateSnapshot = Message<"kusinta.iot.webrtc.v1.DeviceS
    * @generated from field: google.protobuf.Timestamp snapshotted_at = 3;
    */
   snapshottedAt?: Timestamp | undefined;
+
+  /**
+   * One for every device the recipient sees, as last evaluated (see ServiceStatus). A device
+   * the recipient began to see since the last quarter hour — or began to see as its
+   * resident — has none until the next.
+   *
+   * @generated from field: repeated kusinta.iot.webrtc.v1.ServiceStatus service_statuses = 4;
+   */
+  serviceStatuses: ServiceStatus[];
+
+  /**
+   * The roles the gateway holds for the session as it opens (see SessionRoles). Every
+   * LivePermissionUpdate after it carries them again.
+   *
+   * @generated from field: kusinta.iot.webrtc.v1.SessionRoles session_roles = 5;
+   */
+  sessionRoles?: SessionRoles | undefined;
 };
 
 /**
@@ -43,6 +63,123 @@ export declare type DeviceStateSnapshot = Message<"kusinta.iot.webrtc.v1.DeviceS
  */
 export declare const DeviceStateSnapshotSchema: GenMessage<DeviceStateSnapshot>;
 
+/**
+ * What keeps a device working, as the gateway judges it, and nothing that describes the
+ * people around it. Sent for every device a recipient sees, so that an app reads a
+ * device's problems from one place whatever its view. To a recipient whose
+ * DeviceAcl.relation is SERVICE it is all they get of the device's state, beside its
+ * description-only Device: they hold no action on
+ * it and are sent no PropertyReport or DeviceEvent for it (see
+ * access.v1.MembershipRelation).
+ *
+ * Evaluated by the gateway at each quarter hour (:00, :15, :30, :45 UTC) from what it holds
+ * then, and pushed in ServiceStatusChanged when it differs from what the recipient was last
+ * sent. Between quarter hours nothing here changes, so polling learns nothing more. A
+ * change still says the device was heard within that quarter hour, and nothing finer.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.ServiceStatus
+ */
+export declare type ServiceStatus = Message<"kusinta.iot.webrtc.v1.ServiceStatus"> & {
+  /**
+   * @generated from field: kusinta.iot.identity.v1.DeviceId device_id = 1;
+   */
+  deviceId?: DeviceId | undefined;
+
+  /**
+   * Always set. The quarter hour at which the status took its current value, but never
+   * earlier than the start of the recipient's current, unbroken stretch of seeing the
+   * device, nor, for a resident, than their current residency — each start taken at the
+   * first quarter hour at or after it. When that start moves because the recipient becomes
+   * a resident, the app drops the status it held and is sent one again from the new start at
+   * the next quarter hour. These quarter hours, and the moments a device appears to service,
+   * changes and is taken away, which they see as they happen, are the only times service is
+   * given of a device in a home (see access.v1.MembershipRelation). Pushed and in a
+   * snapshot alike, so an unchanged status carries the same as_of however it arrived.
+   *
+   * @generated from field: google.protobuf.Timestamp as_of = 2;
+   */
+  asOf?: Timestamp | undefined;
+
+  /**
+   * @generated from field: bool reachable = 3;
+   */
+  reachable: boolean;
+
+  /**
+   * While unreachable, the quarter hour at which the gateway found it so — not when it was
+   * last heard, which for a device that reports on change is when it was last used — and,
+   * like as_of, never earlier than those starts. Unset while reachable.
+   *
+   * @generated from field: google.protobuf.Timestamp unreachable_since = 4;
+   */
+  unreachableSince?: Timestamp | undefined;
+
+  /**
+   * Remaining charge, rounded up to a multiple of ten — 4 % is sent as 10, and 0 only when
+   * the device reports none left. Absent for a device that does not report one.
+   *
+   * @generated from field: optional uint32 battery_percent = 5;
+   */
+  batteryPercent?: number | undefined;
+
+  /**
+   * battery_low: the device reports its charge low or critical (Matter Power Source
+   * BatChargeLevel, or a vendor's low-battery flag). battery_replacement_needed: it reports
+   * that its battery must be replaced. Each is set on its own report alone.
+   *
+   * @generated from field: bool battery_low = 6;
+   */
+  batteryLow: boolean;
+
+  /**
+   * @generated from field: bool battery_replacement_needed = 7;
+   */
+  batteryReplacementNeeded: boolean;
+
+  /**
+   * A device.v1.RadioQuality number, travelling as a uint32 as every enum-valued reading
+   * does. Absent: the device does not report one.
+   *
+   * @generated from field: optional uint32 radio_quality = 8;
+   */
+  radioQuality?: number | undefined;
+
+  /**
+   * Faults the device reports now, each listed once. Empty: none. A fault can follow from
+   * what someone did — a casing opened — and service learns that within the quarter hour;
+   * that much fault reporting discloses.
+   *
+   * @generated from field: repeated kusinta.iot.webrtc.v1.ServiceFault faults = 9;
+   */
+  faults: ServiceFault[];
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.ServiceStatus.
+ * Use `create(ServiceStatusSchema)` to create a new message.
+ */
+export declare const ServiceStatusSchema: GenMessage<ServiceStatus>;
+
+/**
+ * The service statuses that changed at a quarter hour, gateway → app. Apply each as an
+ * upsert keyed on device_id. Sent for every device the recipient sees, without a
+ * subscription: a service view holds no SUBSCRIBE, and needs none for this.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.ServiceStatusChanged
+ */
+export declare type ServiceStatusChanged = Message<"kusinta.iot.webrtc.v1.ServiceStatusChanged"> & {
+  /**
+   * @generated from field: repeated kusinta.iot.webrtc.v1.ServiceStatus statuses = 1;
+   */
+  statuses: ServiceStatus[];
+};
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.ServiceStatusChanged.
+ * Use `create(ServiceStatusChangedSchema)` to create a new message.
+ */
+export declare const ServiceStatusChangedSchema: GenMessage<ServiceStatusChanged>;
+
 /**
  * One attribute reading streamed to the app as it happens — Matter's Report Data Action,
  * for a single attribute.
@@ -78,7 +215,9 @@ export declare const PropertyReportSchema: GenMessage<PropertyReport>;
  *
  * Carries the full Device, descriptor plus current typed properties, so the app can
  * render it without a follow-up read — the same payload DeviceStateSnapshot gives
- * per device.
+ * per device. To a recipient who sees it as service, the Device carries its description
+ * only, as in a snapshot, and is sent as it appears; its ServiceStatus follows from the
+ * next quarter hour (see access.v1.DeviceAcl.relation).
  *
  * Apply as an upsert keyed on descriptor.device_id, never as an insert: a device can
  * be in the snapshot and then announced, or announced twice across a connector
@@ -106,11 +245,15 @@ export declare const DeviceAddedSchema: GenMessage<DeviceAdded>;
 
 /**
  * A device is gone, because its connector said so via connector.v1.DeviceRemoval.
+ * To a recipient who sees it as service, sent at once, as the removal from their
+ * permissions is (see LivePermissionUpdate) — if they were shown the device; otherwise not
+ * at all.
  *
  * A connector disconnecting is NOT a removal: an ordinary reconnect wipes the
  * device→connector route while every device still exists, and treating that as a
  * removal makes the whole UI flap. Unreachability is a separate signal — read
- * device.v1.Device.last_seen for that.
+ * ServiceStatus.reachable for that, which every recipient gets; device.v1.Device.last_seen
+ * may be unset.
  *
  * @generated from message kusinta.iot.webrtc.v1.DeviceRemoved
  */
@@ -134,3 +277,34 @@ export declare type DeviceRemoved = Message<"kusinta.iot.webrtc.v1.DeviceRemoved
  */
 export declare const DeviceRemovedSchema: GenMessage<DeviceRemoved>;
 
+/**
+ * A fault a device reports about itself, as service sees it.
+ *
+ * @generated from enum kusinta.iot.webrtc.v1.ServiceFault
+ */
+export enum ServiceFault {
+  /**
+   * @generated from enum value: SERVICE_FAULT_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+
+  /**
+   * An error the device reports in its own operation.
+   *
+   * @generated from enum value: SERVICE_FAULT_ERROR = 1;
+   */
+  ERROR = 1,
+
+  /**
+   * Its casing was opened or it was taken off its mount.
+   *
+   * @generated from enum value: SERVICE_FAULT_TAMPER = 2;
+   */
+  TAMPER = 2,
+}
+
+/**
+ * Describes the enum kusinta.iot.webrtc.v1.ServiceFault.
+ */
+export declare const ServiceFaultSchema: GenEnum<ServiceFault>;
+

package/src/kusinta/iot/webrtc/v1/device_state_pb.js

@@ -2,18 +2,19 @@
 // @generated from file kusinta/iot/webrtc/v1/device_state.proto (package kusinta.iot.webrtc.v1, syntax proto3)
 /* eslint-disable */
 
-import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+import { enumDesc, fileDesc, messageDesc, tsEnum } from "@bufbuild/protobuf/codegenv2";
 import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+import { file_kusinta_iot_access_v1_acl } from "../../access/v1/acl_pb.js";
 import { file_kusinta_iot_device_v1_device } from "../../device/v1/device_pb.js";
 import { file_kusinta_iot_device_v1_property_update } from "../../device/v1/property_update_pb.js";
-import { file_kusinta_iot_access_v1_acl } from "../../access/v1/acl_pb.js";
 import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identity_pb.js";
+import { file_kusinta_iot_webrtc_v1_permission_push } from "./permission_push_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/device_state.proto.
  */
 export const file_kusinta_iot_webrtc_v1_device_state = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_device_v1_device, file_kusinta_iot_device_v1_property_update, file_kusinta_iot_access_v1_acl, file_kusinta_iot_identity_v1_identity]);
+  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_acl, file_kusinta_iot_device_v1_device, file_kusinta_iot_device_v1_property_update, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_webrtc_v1_permission_push]);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.DeviceStateSnapshot.
@@ -22,24 +23,52 @@ export const file_kusinta_iot_webrtc_v1_device_state = /*@__PURE__*/
 export const DeviceStateSnapshotSchema = /*@__PURE__*/
   messageDesc(file_kusinta_iot_webrtc_v1_device_state, 0);
 
+/**
+ * Describes the message kusinta.iot.webrtc.v1.ServiceStatus.
+ * Use `create(ServiceStatusSchema)` to create a new message.
+ */
+export const ServiceStatusSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_device_state, 1);
+
+/**
+ * Describes the message kusinta.iot.webrtc.v1.ServiceStatusChanged.
+ * Use `create(ServiceStatusChangedSchema)` to create a new message.
+ */
+export const ServiceStatusChangedSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_webrtc_v1_device_state, 2);
+
 /**
  * Describes the message kusinta.iot.webrtc.v1.PropertyReport.
  * Use `create(PropertyReportSchema)` to create a new message.
  */
 export const PropertyReportSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_device_state, 1);
+  messageDesc(file_kusinta_iot_webrtc_v1_device_state, 3);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.DeviceAdded.
  * Use `create(DeviceAddedSchema)` to create a new message.
  */
 export const DeviceAddedSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_device_state, 2);
+  messageDesc(file_kusinta_iot_webrtc_v1_device_state, 4);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.DeviceRemoved.
  * Use `create(DeviceRemovedSchema)` to create a new message.
  */
 export const DeviceRemovedSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_webrtc_v1_device_state, 3);
+  messageDesc(file_kusinta_iot_webrtc_v1_device_state, 5);
+
+/**
+ * Describes the enum kusinta.iot.webrtc.v1.ServiceFault.
+ */
+export const ServiceFaultSchema = /*@__PURE__*/
+  enumDesc(file_kusinta_iot_webrtc_v1_device_state, 0);
+
+/**
+ * A fault a device reports about itself, as service sees it.
+ *
+ * @generated from enum kusinta.iot.webrtc.v1.ServiceFault
+ */
+export const ServiceFault = /*@__PURE__*/
+  tsEnum(ServiceFaultSchema);