@mega-yfue/eufy-sdk 0.4.0-beta.1 → 0.4.0-beta.11

package/dist/index.js

@@ -1070,6 +1070,401 @@ function normalizePushImage(data, p2pDid) {
   return decodeImageV1(data, p2pDid) ?? data;
 }
 
+// dist/core/types.js
+var PRINTER_CATEGORY_RE = /ankermake|eufymake|fdm|3d_?print/i;
+function classifyDevice(raw) {
+  const category = raw.category ?? "";
+  const hasP2p = typeof raw.p2p_did === "string" && raw.p2p_did.length > 0;
+  if (category === "eufy_security" || hasP2p)
+    return { category, api: "mega", realtime: "p2p" };
+  if (PRINTER_CATEGORY_RE.test(category))
+    return { category, api: "ankermake", realtime: "ankermake-mqtt" };
+  return { category, api: "mega", realtime: "smqtt" };
+}
+
+// dist/core/contracts.js
+var StoredSnapshotUnavailableError = class extends Error {
+  reason;
+  constructor(reason, message, options) {
+    super(message, options);
+    this.reason = reason;
+    this.name = "StoredSnapshotUnavailableError";
+  }
+};
+var RETRYABLE_LIVE_SNAPSHOT_REASONS = [
+  "no-keyframe",
+  "source-failed",
+  "undecodable-burst"
+];
+var LiveSnapshotUnavailableError = class extends Error {
+  reason;
+  /** Whether another attempt could plausibly succeed without the host changing anything. */
+  retryable;
+  constructor(reason, message, options) {
+    super(message, options);
+    this.reason = reason;
+    this.name = "LiveSnapshotUnavailableError";
+    this.retryable = RETRYABLE_LIVE_SNAPSHOT_REASONS.includes(reason);
+  }
+};
+var CameraDisabledError = class extends Error {
+  camera;
+  constructor(camera, options) {
+    super(`camera${camera ? ` ${camera}` : ""} is disabled \u2014 no live stream possible`, options);
+    this.camera = camera;
+    this.name = "CameraDisabledError";
+  }
+};
+var StationKeyUnavailableError = class extends Error {
+  stationSn;
+  /** Always true: the negotiation is per connection, so a later one may still produce a key. */
+  retryable = true;
+  constructor(stationSn, options) {
+    super(`station ${stationSn} did not provide its session key, so nothing that requires one could be sent`, options);
+    this.stationSn = stationSn;
+    this.name = "StationKeyUnavailableError";
+  }
+};
+var StationUnreachableError = class extends Error {
+  stationSn;
+  waitedMs;
+  /** Always true: a station unreachable now may answer on a later attempt. */
+  retryable = true;
+  constructor(stationSn, waitedMs, options) {
+    super(`station ${stationSn}'s P2P session did not connect within ${waitedMs}ms, so nothing could be sent to it`, options);
+    this.stationSn = stationSn;
+    this.waitedMs = waitedMs;
+    this.name = "StationUnreachableError";
+  }
+};
+var DeviceChannelUnresolvedError = class extends Error {
+  sn;
+  stationSn;
+  constructor(sn, stationSn, options) {
+    super(`${sn} has no usable channel on station ${stationSn}, so nothing was sent to it`, options);
+    this.sn = sn;
+    this.stationSn = stationSn;
+    this.name = "DeviceChannelUnresolvedError";
+  }
+};
+var LiveStreamStartError = class extends Error {
+  reason;
+  stage;
+  timeoutMs;
+  attempts;
+  constructor(failure) {
+    super(`live stream failed to start (${failure.reason} at ${failure.stage} after ${failure.attempts} attempts; ${failure.timeoutMs}ms deadline)`, failure.cause === void 0 ? void 0 : { cause: failure.cause });
+    this.name = "LiveStreamStartError";
+    this.reason = failure.reason;
+    this.stage = failure.stage;
+    this.timeoutMs = failure.timeoutMs;
+    this.attempts = failure.attempts;
+  }
+};
+var StateConvergenceError = class extends Error {
+  sn;
+  property;
+  param;
+  expected;
+  observed;
+  timeoutMs;
+  constructor(failure) {
+    super(`device ${failure.sn} did not report ${failure.property} as ${String(failure.expected)} within ${failure.timeoutMs}ms (param ${failure.param} read ${String(failure.observed)})`);
+    this.name = "StateConvergenceError";
+    this.sn = failure.sn;
+    this.property = failure.property;
+    this.param = failure.param;
+    this.expected = failure.expected;
+    this.observed = failure.observed;
+    this.timeoutMs = failure.timeoutMs;
+  }
+};
+var COMMAND_OBSERVATION = /* @__PURE__ */ Symbol("command-observation");
+function observeCommand(command, observation) {
+  return Object.defineProperty(command, COMMAND_OBSERVATION, { configurable: true, value: observation });
+}
+function commandObservation(command) {
+  return command[COMMAND_OBSERVATION];
+}
+
+// dist/core/raw-dp-writer.js
+var WIRE = { VARINT: 0, LENGTH_DELIMITED: 2 };
+function encodeVarint(value) {
+  if (!Number.isSafeInteger(value) || value < 0) {
+    throw new Error(`varint: ${value} is not a non-negative safe integer`);
+  }
+  const out = [];
+  let v = value;
+  while (v > 127) {
+    out.push(v % 128 + 128);
+    v = Math.floor(v / 128);
+  }
+  out.push(v);
+  return out;
+}
+function zigzag(value) {
+  if (!Number.isSafeInteger(value))
+    throw new Error(`zigzag: ${value} is not a safe integer`);
+  return value < 0 ? -2 * value - 1 : 2 * value;
+}
+var RawDpWriter = class _RawDpWriter {
+  body = [];
+  /** A varint-valued field (`int32`, `uint32`, `bool`, an enum member). */
+  int(field, value) {
+    this.body.push(...encodeVarint(tag(field, WIRE.VARINT)), ...encodeVarint(value));
+    return this;
+  }
+  /** A signed varint field (`sint32`, `sint64`), ZigZag-encoded — see {@link zigzag}. */
+  sint(field, value) {
+    return this.int(field, zigzag(value));
+  }
+  /** A boolean field, on protobuf's own terms: `1` or `0` in a varint. */
+  bool(field, value) {
+    return this.int(field, value ? 1 : 0);
+  }
+  /** A length-delimited field carrying raw bytes — a string, a blob, or a message built elsewhere. */
+  bytes(field, value) {
+    const bytes2 = value instanceof Uint8Array ? Array.from(value) : [...value];
+    this.body.push(...encodeVarint(tag(field, WIRE.LENGTH_DELIMITED)), ...encodeVarint(bytes2.length), ...bytes2);
+    return this;
+  }
+  /**
+   * A nested sub-message, built by `build` into a writer of its own.
+   *
+   * The sub-message is emitted even when `build` writes nothing into it. That is not an oversight: an
+   * EMPTY sub-message is how these protocols say "this subsystem exists and is in its zero state", as
+   * opposed to saying nothing about it, and the readers on the other side of this file depend on the
+   * distinction. Omitting the call is what says nothing about it.
+   */
+  sub(field, build) {
+    const inner = new _RawDpWriter();
+    build(inner);
+    return this.bytes(field, inner.toBytes());
+  }
+  /** The message body on its own, unframed — for nesting into another writer. */
+  toBytes() {
+    return [...this.body];
+  }
+  /**
+   * The finished DP value: `varint(bodyLength) ++ body`, base64-encoded.
+   *
+   * This is the envelope `RawDpCodec.decode` unwraps, so a value produced here and read back through the
+   * codec is a genuine round-trip rather than two implementations of the same guess.
+   */
+  finish() {
+    return Buffer.from([...encodeVarint(this.body.length), ...this.body]).toString("base64");
+  }
+};
+function tag(field, wire) {
+  if (!Number.isSafeInteger(field) || field < 1)
+    throw new Error(`field number: ${field} is not a positive integer`);
+  return field * 8 + wire;
+}
+function rawDp(build) {
+  const w = new RawDpWriter();
+  build(w);
+  return w.finish();
+}
+
+// dist/core/raw-dp-hex.js
+function hexToRawDp(hex) {
+  if (hex.length === 0 || hex.length % 2 !== 0 || !/^[0-9a-fA-F]+$/.test(hex))
+    return void 0;
+  return Buffer.from(hex, "hex").toString("base64");
+}
+
+// dist/core/util.js
+var Timer = class {
+  handle;
+  /** (Re)arm to run `fn` after `ms`, cancelling any already-pending fire. */
+  arm(ms, fn) {
+    this.cancel();
+    this.handle = setTimeout(() => {
+      this.handle = void 0;
+      fn();
+    }, ms);
+    this.handle.unref?.();
+  }
+  /** Cancel a pending fire. No-op if not armed. */
+  cancel() {
+    if (this.handle) {
+      clearTimeout(this.handle);
+      this.handle = void 0;
+    }
+  }
+  /** Whether a fire is currently scheduled. */
+  get pending() {
+    return this.handle !== void 0;
+  }
+};
+function assertNever(value) {
+  throw new Error(`unhandled variant: ${JSON.stringify(value)}`);
+}
+function asBool(value) {
+  if (typeof value === "string")
+    return value === "1" || value.toLowerCase() === "true";
+  return value === true || value === 1;
+}
+function clamp(value, min, max) {
+  if (Number.isNaN(value))
+    return min;
+  return Math.max(min, Math.min(max, Math.round(value)));
+}
+function structuralEqual(a, b) {
+  if (Object.is(a, b))
+    return true;
+  if (typeof a !== "object" || typeof b !== "object" || a === null || b === null)
+    return false;
+  const aArr = Array.isArray(a);
+  const bArr = Array.isArray(b);
+  if (aArr !== bArr)
+    return false;
+  if (aArr && bArr) {
+    if (a.length !== b.length)
+      return false;
+    for (let i = 0; i < a.length; i++)
+      if (!structuralEqual(a[i], b[i]))
+        return false;
+    return true;
+  }
+  const aObj = a;
+  const bObj = b;
+  const aKeys = Object.keys(aObj);
+  const bKeys = Object.keys(bObj);
+  if (aKeys.length !== bKeys.length)
+    return false;
+  for (const k of aKeys) {
+    if (!Object.prototype.hasOwnProperty.call(bObj, k))
+      return false;
+    if (!structuralEqual(aObj[k], bObj[k]))
+      return false;
+  }
+  return true;
+}
+function coerceEnumValue(enumObj, value) {
+  const n = Number(value);
+  return Number.isInteger(n) && Object.values(enumObj).includes(n) ? n : void 0;
+}
+function enumValues(enumObj) {
+  return Object.values(enumObj).join("/");
+}
+function enumLabels(enumObj) {
+  return Object.fromEntries(Object.entries(enumObj).map(([name, value]) => [value, name]));
+}
+function jsonObject(text2) {
+  if (typeof text2 !== "string")
+    return void 0;
+  try {
+    const v = JSON.parse(text2);
+    return v && typeof v === "object" && !Array.isArray(v) ? v : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function u16le(n) {
+  const b = Buffer.alloc(2);
+  b.writeUInt16LE(n & 65535);
+  return b;
+}
+function u16be(n) {
+  const b = Buffer.alloc(2);
+  b.writeUInt16BE(n & 65535);
+  return b;
+}
+function u32le(n) {
+  const b = Buffer.alloc(4);
+  b.writeUInt32LE(n >>> 0);
+  return b;
+}
+function u32be(n) {
+  const b = Buffer.alloc(4);
+  b.writeUInt32BE(n >>> 0);
+  return b;
+}
+
+// dist/core/lz4-block.js
+var MAX_OUTPUT = 64 * 1024 * 1024;
+function lz4BlockDecompress(block, size) {
+  if (!Number.isSafeInteger(size) || size < 0 || size > MAX_OUTPUT)
+    return void 0;
+  const out = Buffer.alloc(size);
+  const end = block.length;
+  let pos = 0;
+  let written = 0;
+  const extend2 = (base) => {
+    let len = base;
+    if (base !== 15)
+      return len;
+    for (; ; ) {
+      if (pos >= end)
+        return void 0;
+      const extra = block[pos++];
+      len += extra;
+      if (extra !== 255)
+        return len;
+    }
+  };
+  while (pos < end) {
+    const token = block[pos++];
+    const literals = extend2(token >> 4);
+    if (literals === void 0)
+      return void 0;
+    if (pos + literals > end || written + literals > size)
+      return void 0;
+    for (let i = 0; i < literals; i++)
+      out[written++] = block[pos++];
+    if (pos === end)
+      break;
+    if (pos + 2 > end)
+      return void 0;
+    const offset = block[pos] | block[pos + 1] << 8;
+    pos += 2;
+    if (offset === 0 || offset > written)
+      return void 0;
+    const match = extend2(token & 15);
+    if (match === void 0)
+      return void 0;
+    const length = match + 4;
+    if (written + length > size)
+      return void 0;
+    let from = written - offset;
+    for (let i = 0; i < length; i++)
+      out[written++] = out[from++];
+  }
+  return written === size ? out : void 0;
+}
+
+// dist/transport/http/passport.js
+function loginCredentials(email, password, country) {
+  const { clientPublicKeyHex, encryptedPassword } = encryptLoginPassword(password);
+  return { email, password: encryptedPassword, ab: country, client_secret_info: { public_key: clientPublicKeyHex } };
+}
+function readLoginReply(data) {
+  const userId = data.ap_cloud_user_id ?? data.user_id ?? data.userId;
+  const authToken = data.auth_token ?? data.token;
+  if (!userId || !authToken)
+    return void 0;
+  return {
+    userId,
+    accountUserId: data.user_id ?? data.userId,
+    authToken,
+    geoKey: data.geo_key,
+    tokenExpiresAt: Number(data.token_expires_at ?? 0) || 0,
+    twoFactorPending: !!(data.fa_info ?? {}).info
+  };
+}
+function signedHeaders(entry, encBody) {
+  const ts = nowSec();
+  const once = genId();
+  return {
+    "x-encryption-info": "algo_ecdh",
+    "x-key-ident": entry.keyIdent,
+    "x-request-ts": ts,
+    "x-request-once": once,
+    "x-signature": signRequest(entry.shareKey, ts, once, encBody)
+  };
+}
+
 // dist/transport/http/mega-client.js
 function parseMaybeJson(text2) {
   if (text2.length === 0)
@@ -1437,17 +1832,11 @@ ${this.auth_?.authToken ?? ""}`;
     const order = preferred === "text/plain" ? ["text/plain", "application/json"] : ["application/json", "text/plain"];
     let last;
     for (const contentType of order) {
-      const ts = nowSec();
-      const once = genId();
       const headers = {
         ...this.baseHeaders(),
         "content-type": contentType,
-        "x-encryption-info": "algo_ecdh",
+        ...signedHeaders(entry, encBody),
         "x-replay-info": "replay",
-        "x-key-ident": entry.keyIdent,
-        "x-request-ts": ts,
-        "x-request-once": once,
-        "x-signature": signRequest(entry.shareKey, ts, once, encBody),
         // Per-call header overrides (e.g. app-name=eufy_security to request a security-scoped
         // MQTT cert on an existing eufy_mega session — see EufyMega.getUserMqttInfo).
         ...headerOverrides
@@ -1746,13 +2135,7 @@ ${this.auth_?.authToken ?? ""}`;
   }
   /** Build the /passport/login body (verify_code empty unless 2FA). */
   loginBody(opts) {
-    const { clientPublicKeyHex, encryptedPassword } = encryptLoginPassword(this.cfg.password);
-    const base = {
-      email: this.cfg.email,
-      password: encryptedPassword,
-      ab: this.cfg.countryCode,
-      client_secret_info: { public_key: clientPublicKeyHex }
-    };
+    const base = loginCredentials(this.cfg.email, this.cfg.password, this.cfg.countryCode);
     if (opts.verifyCode)
       return { ...base, verify_code: opts.verifyCode, login_id: "" };
     if (opts.captchaId)
@@ -1990,15 +2373,12 @@ ${this.auth_?.authToken ?? ""}`;
       if (cap.length)
         this.logger.debug("[mega] captcha/fa:", JSON.stringify(Object.fromEntries(cap.map((k) => [k, res[k]]))));
     }
-    const userId = res.ap_cloud_user_id ?? res.user_id ?? res.userId;
-    const accountUserId = res.user_id ?? res.userId;
-    const authToken = res.auth_token ?? res.token;
-    if (!userId || !authToken)
+    const reply = readLoginReply(res);
+    if (!reply)
       throw new Error(`login returned no session: ${JSON.stringify(res).slice(0, 200)}`);
-    const faInfo = res.fa_info ?? {};
-    const needs2fa = !isVerify && !!faInfo.info;
-    if (needs2fa) {
-      this.auth_ = { userId, accountUserId, authToken, geoKey: res.geo_key };
+    const { userId, accountUserId, authToken, geoKey } = reply;
+    if (!isVerify && reply.twoFactorPending) {
+      this.auth_ = { userId, accountUserId, authToken, geoKey };
       this.pendingCaptchaId = void 0;
       this.pending2fa = true;
       await this.sendVerifyCode(messageType);
@@ -2006,8 +2386,8 @@ ${this.auth_?.authToken ?? ""}`;
     }
     this.pendingCaptchaId = void 0;
     this.pending2fa = false;
-    this.auth_ = { userId, accountUserId, authToken, geoKey: res.geo_key };
-    this.tokenExpiresAt = Number(res.token_expires_at ?? 0) || 0;
+    this.auth_ = { userId, accountUserId, authToken, geoKey };
+    this.tokenExpiresAt = reply.tokenExpiresAt;
     this.sessionKey = void 0;
     await this.ensureSessionKey();
     this.persist();
@@ -2125,6 +2505,10 @@ function solixUserTopics(appName, userId) {
 
 // dist/transport/mqtt/secure-mqtt.js
 var SUBACK_FAILURE = 128;
+function isRefusal(err) {
+  const granted = err?.packet?.granted;
+  return Array.isArray(granted) && granted.some((g) => typeof g === "number" && (g & SUBACK_FAILURE) !== 0);
+}
 function isNotAuthorized(err) {
   return err instanceof Error && /connection refused/i.test(err.message) && /not authori[sz]ed/i.test(err.message);
 }
@@ -2227,19 +2611,16 @@ var SecureMqtt = class extends EventEmitter {
   }
   /**
    * Subscribe every inbound leg this device's line uses (see `topics.ts` — one `/res` for most lines,
-   * four topics for `eufy_life`).
+   * four topics for `eufy_life` and the clean line).
    *
-   * The grants are INSPECTED, not assumed: AWS IoT answers a policy-denied filter with a
-   * SUBACK_FAILURE (`0x80`) grant rather than failing the SUBSCRIBE, so subscribing with a credential
-   * whose scope doesn't cover the topic looks identical to success and then delivers nothing. A denied
-   * topic is reported via `error` naming the credential scope; only an all-denied device throws, so a
-   * line that grants its state channel but refuses (say) the OTA leg still works.
+   * The grants are INSPECTED, not assumed: AWS IoT refuses a policy-denied filter with a
+   * {@link SUBACK_FAILURE} grant rather than failing the connection. A denied topic is reported via
+   * `error` naming the credential scope; only an all-denied device throws, so a line that grants its
+   * state channel but refuses (say) a business leg still works.
    */
   async subscribeDevice(device) {
-    if (!this.client)
-      throw new Error("SecureMqtt not connected");
     const topics = [...subscribeTopics(device)];
-    const { denied } = this.partitionGrants(await this.client.subscribeAsync(topics, { qos: 1 }));
+    const { denied } = await this.subscribeEach(topics);
     const scope = this.o.credentials.app_name ?? "default";
     if (denied.length === topics.length) {
       throw new Error(`subscribe ${device.sn}: every topic denied on credential scope "${scope}" \u2014 this line's topics are granted to a different scope (${denied.join(", ")})`);
@@ -2250,25 +2631,43 @@ var SecureMqtt = class extends EventEmitter {
   }
   /**
    * Subscribe to explicit topic filters, returning the topics that were granted. A scope-denied filter
-   * comes back with SUBACK_FAILURE rather than an error (AWS IoT quirk), so it is dropped from the result
-   * instead of throwing — callers that need every leg check the returned list. Used by lines whose topic
-   * vocabulary isn't the eufy `subscribeTopics` shape (e.g. Anker Solix `dt/{app}/{pn}/{sn}`).
+   * is dropped from the result instead of throwing — callers that need every leg check the returned
+   * list. Used by lines whose topic vocabulary isn't the eufy `subscribeTopics` shape (e.g. Anker Solix
+   * `dt/{app}/{pn}/{sn}`).
    */
   async subscribe(topics) {
-    if (!this.client)
-      throw new Error("SecureMqtt not connected");
-    return this.partitionGrants(await this.client.subscribeAsync(topics, { qos: 1 })).granted;
+    return (await this.subscribeEach(topics)).granted;
   }
   /**
-   * Split SUBACK grants into granted vs scope-denied topics. AWS IoT marks a policy-denied filter with a
-   * SUBACK_FAILURE (`0x80`) grant rather than failing the SUBSCRIBE, so the two subscribe paths share
-   * this split and layer their own policy (drop vs report) on top.
+   * Subscribe each filter in a SUBSCRIBE of its own and split the outcome into granted vs refused.
+   *
+   * One request per filter because the MQTT engine treats a SUBACK as all-or-nothing: one refused grant
+   * rejects the whole request, and it forgets EVERY filter of that request for resubscription after a
+   * reconnect — so a batch holding one denied leg would lose the granted legs on the next drop. Alone,
+   * a refused filter costs only itself. A rejection that carries no SUBACK is a transport failure and
+   * is thrown.
+   *
+   * The cost is one SUBSCRIBE and one SUBACK per filter instead of one per device — four for a
+   * four-leg line. They are sent concurrently, so the wall-clock cost is one round trip. Folding them
+   * back into one request brings back the lost resubscription.
    */
-  partitionGrants(grants) {
+  async subscribeEach(topics) {
+    const client = this.client;
+    if (!client)
+      throw new Error("SecureMqtt not connected");
+    const outcomes = await Promise.allSettled(topics.map((topic) => client.subscribeAsync(topic, { qos: 1 })));
     const granted = [];
     const denied = [];
-    for (const g of grants)
-      (g.qos === SUBACK_FAILURE ? denied : granted).push(g.topic);
+    outcomes.forEach((outcome, i) => {
+      const topic = topics[i];
+      if (outcome.status === "fulfilled") {
+        granted.push(topic);
+        return;
+      }
+      if (!isRefusal(outcome.reason))
+        throw outcome.reason;
+      denied.push(topic);
+    });
     return { granted, denied };
   }
   /**
@@ -2276,141 +2675,32 @@ var SecureMqtt = class extends EventEmitter {
    * is a pre-built envelope the caller supplies (the command router builds it). QoS 1 by default (the
    * broker acks). This is the outbound leg — commands, alongside the receive-only `/res` subscriptions.
    *
-   * NOTE: which cert scope is used does NOT gate publishing to a security device's topic — confirmed
-   * live, an `eufy_mega`-scoped cert and an `eufy_security`-scoped cert get the identical grant/deny
-   * pattern. What actually matters is landing on the broker instance that currently holds the device's
-   * session (`ensureSecurityMqttFor`/`broker-discovery.ts` — the NLB fronts several instances that
-   * don't share subscribe/publish routing).
-   */
-  async publish(topic, body, opts = {}) {
-    if (!this.client)
-      throw new Error("SecureMqtt not connected");
-    await this.client.publishAsync(topic, body, { qos: opts.qos ?? 1 });
-  }
-  async disconnect() {
-    this.connecting = void 0;
-    await this.client?.endAsync(true);
-    this.client = void 0;
-  }
-};
-
-// dist/transport/mqtt/app-client-id.js
-import { createHash as createHash4 } from "node:crypto";
-function buildAppShapedClientId(input) {
-  const ts = input.timestamp ?? Math.floor(Date.now() / 1e3);
-  return `android-${input.appName}-${input.uid}-${input.mqttUuid}-${ts}`;
-}
-function mqttUuidFrom(installId) {
-  return createHash4("sha256").update(installId).digest("hex").slice(0, 16);
-}
-
-// dist/core/util.js
-var Timer = class {
-  handle;
-  /** (Re)arm to run `fn` after `ms`, cancelling any already-pending fire. */
-  arm(ms, fn) {
-    this.cancel();
-    this.handle = setTimeout(() => {
-      this.handle = void 0;
-      fn();
-    }, ms);
-    this.handle.unref?.();
-  }
-  /** Cancel a pending fire. No-op if not armed. */
-  cancel() {
-    if (this.handle) {
-      clearTimeout(this.handle);
-      this.handle = void 0;
-    }
-  }
-  /** Whether a fire is currently scheduled. */
-  get pending() {
-    return this.handle !== void 0;
-  }
-};
-function assertNever(value) {
-  throw new Error(`unhandled variant: ${JSON.stringify(value)}`);
-}
-function asBool(value) {
-  if (typeof value === "string")
-    return value === "1" || value.toLowerCase() === "true";
-  return value === true || value === 1;
-}
-function clamp(value, min, max) {
-  if (Number.isNaN(value))
-    return min;
-  return Math.max(min, Math.min(max, Math.round(value)));
-}
-function structuralEqual(a, b) {
-  if (Object.is(a, b))
-    return true;
-  if (typeof a !== "object" || typeof b !== "object" || a === null || b === null)
-    return false;
-  const aArr = Array.isArray(a);
-  const bArr = Array.isArray(b);
-  if (aArr !== bArr)
-    return false;
-  if (aArr && bArr) {
-    if (a.length !== b.length)
-      return false;
-    for (let i = 0; i < a.length; i++)
-      if (!structuralEqual(a[i], b[i]))
-        return false;
-    return true;
-  }
-  const aObj = a;
-  const bObj = b;
-  const aKeys = Object.keys(aObj);
-  const bKeys = Object.keys(bObj);
-  if (aKeys.length !== bKeys.length)
-    return false;
-  for (const k of aKeys) {
-    if (!Object.prototype.hasOwnProperty.call(bObj, k))
-      return false;
-    if (!structuralEqual(aObj[k], bObj[k]))
-      return false;
-  }
-  return true;
-}
-function coerceEnumValue(enumObj, value) {
-  const n = Number(value);
-  return Number.isInteger(n) && Object.values(enumObj).includes(n) ? n : void 0;
-}
-function enumValues(enumObj) {
-  return Object.values(enumObj).join("/");
-}
-function enumLabels(enumObj) {
-  return Object.fromEntries(Object.entries(enumObj).map(([name, value]) => [value, name]));
-}
-function jsonObject(text2) {
-  if (typeof text2 !== "string")
-    return void 0;
-  try {
-    const v = JSON.parse(text2);
-    return v && typeof v === "object" && !Array.isArray(v) ? v : void 0;
-  } catch {
-    return void 0;
+   * NOTE: which cert scope is used does NOT gate publishing to a security device's topic — confirmed
+   * live, an `eufy_mega`-scoped cert and an `eufy_security`-scoped cert get the identical grant/deny
+   * pattern. What actually matters is landing on the broker instance that currently holds the device's
+   * session (`ensureSecurityMqttFor`/`broker-discovery.ts` — the NLB fronts several instances that
+   * don't share subscribe/publish routing).
+   */
+  async publish(topic, body, opts = {}) {
+    if (!this.client)
+      throw new Error("SecureMqtt not connected");
+    await this.client.publishAsync(topic, body, { qos: opts.qos ?? 1 });
   }
+  async disconnect() {
+    this.connecting = void 0;
+    await this.client?.endAsync(true);
+    this.client = void 0;
+  }
+};
+
+// dist/transport/mqtt/app-client-id.js
+import { createHash as createHash4 } from "node:crypto";
+function buildAppShapedClientId(input) {
+  const ts = input.timestamp ?? Math.floor(Date.now() / 1e3);
+  return `android-${input.appName}-${input.uid}-${input.mqttUuid}-${ts}`;
 }
-function u16le(n) {
-  const b = Buffer.alloc(2);
-  b.writeUInt16LE(n & 65535);
-  return b;
-}
-function u16be(n) {
-  const b = Buffer.alloc(2);
-  b.writeUInt16BE(n & 65535);
-  return b;
-}
-function u32le(n) {
-  const b = Buffer.alloc(4);
-  b.writeUInt32LE(n >>> 0);
-  return b;
-}
-function u32be(n) {
-  const b = Buffer.alloc(4);
-  b.writeUInt32BE(n >>> 0);
-  return b;
+function mqttUuidFrom(installId) {
+  return createHash4("sha256").update(installId).digest("hex").slice(0, 16);
 }
 
 // dist/transport/mqtt/availability.js
@@ -2537,13 +2827,6 @@ function parseAiotDpReport(raw) {
   return Object.keys(out).length ? out : void 0;
 }
 
-// dist/core/raw-dp-hex.js
-function hexToRawDp(hex) {
-  if (hex.length === 0 || hex.length % 2 !== 0 || !/^[0-9a-fA-F]+$/.test(hex))
-    return void 0;
-  return Buffer.from(hex, "hex").toString("base64");
-}
-
 // dist/transport/mqtt/biz-stream.js
 var BIZ_PROTOCOL = {
   /** Map-stream data: the frames this module parses. */
@@ -2727,18 +3010,6 @@ var DeviceType = {
   CAMERA_C35: 10035
 };
 
-// dist/core/types.js
-var PRINTER_CATEGORY_RE = /ankermake|eufymake|fdm|3d_?print/i;
-function classifyDevice(raw) {
-  const category = raw.category ?? "";
-  const hasP2p = typeof raw.p2p_did === "string" && raw.p2p_did.length > 0;
-  if (category === "eufy_security" || hasP2p)
-    return { category, api: "mega", realtime: "p2p" };
-  if (PRINTER_CATEGORY_RE.test(category))
-    return { category, api: "ankermake", realtime: "ankermake-mqtt" };
-  return { category, api: "mega", realtime: "smqtt" };
-}
-
 // dist/model/classify.js
 var STATION_TYPES = /* @__PURE__ */ new Set([
   DeviceType.STATION,
@@ -2778,208 +3049,103 @@ var SENSOR_TYPES = /* @__PURE__ */ new Set([
   DeviceType.SMOKE_SENSOR,
   DeviceType.SIREN_SENSOR_E20,
   DeviceType.ENTRY_SENSOR_E20,
-  DeviceType.PIR_SENSOR_E20
-]);
-var KEYPAD_TYPES = /* @__PURE__ */ new Set([DeviceType.KEYPAD]);
-function codecForType(deviceType) {
-  if (!Number.isFinite(deviceType))
-    return void 0;
-  if (STATION_TYPES.has(deviceType))
-    return "station";
-  if (LOCK_TYPES.has(deviceType))
-    return "lock";
-  if (SENSOR_TYPES.has(deviceType))
-    return "sensor";
-  if (KEYPAD_TYPES.has(deviceType))
-    return "keypad";
-  if (isKnownSecurityType(deviceType))
-    return "camera";
-  return void 0;
-}
-function isKnownSecurityType(deviceType) {
-  if (deviceType === DeviceType.SMART_TRACK_LINK || deviceType === DeviceType.SMART_TRACK_CARD)
-    return false;
-  if (deviceType >= 0 && deviceType <= 210)
-    return true;
-  if (deviceType >= 300 && deviceType <= 301)
-    return true;
-  if (deviceType >= 1e4 && deviceType <= 10100)
-    return true;
-  return false;
-}
-function codecFromModel(model) {
-  if (!model)
-    return void 0;
-  const m = model.trim().toUpperCase();
-  if (m.length === 0)
-    return void 0;
-  if (/^T2(80B|880B?|801B?)$/.test(m))
-    return "mower";
-  if (/^T2/.test(m))
-    return "vacuum";
-  if (/^T1/.test(m))
-    return "vacuum";
-  if (/^T8(00[0-9]|010|023|025|030)/.test(m))
-    return "station";
-  if (/^T8N0/.test(m) || /^T8E0/.test(m))
-    return "station";
-  if (/^T9000/.test(m))
-    return "station";
-  if (/^T74/.test(m))
-    return "lock";
-  if (/^T85/.test(m))
-    return "lock";
-  if (/^T8960/.test(m))
-    return "keypad";
-  if (/^T89/.test(m))
-    return "sensor";
-  if (/^T8L/.test(m))
-    return "light";
-  if (/^T87A/.test(m))
-    return "display";
-  if (/^T8/.test(m))
-    return "camera";
-  return void 0;
-}
-function classify(rec) {
-  const byModel = codecFromModel(rec.model);
-  if (rec.category && PRINTER_CATEGORY_RE.test(rec.category))
-    return "printer";
-  if (byModel === "mower")
-    return "mower";
-  if (rec.category && /clean|vacuum|robovac/i.test(rec.category))
-    return "vacuum";
-  if (byModel === "vacuum")
-    return "vacuum";
-  if (byModel === "light" || byModel === "display")
-    return byModel;
-  if (rec.deviceType !== void 0) {
-    const byType = codecForType(rec.deviceType);
-    if (byType !== void 0)
-      return byType;
-  }
-  if (byModel !== void 0)
-    return byModel;
-  return "camera";
-}
-
-// dist/model/infer.js
-function inferName(rec) {
-  const model = rec?.model;
-  if (typeof model !== "string")
-    return void 0;
-  const trimmed = model.trim();
-  if (trimmed.length === 0)
-    return void 0;
-  const match = trimmed.match(/\b([A-Za-z]\d{3,5}[A-Za-z0-9]{0,3})\b/);
-  if (match)
-    return match[1].toUpperCase();
-  return void 0;
-}
-
-// dist/core/contracts.js
-var StoredSnapshotUnavailableError = class extends Error {
-  reason;
-  constructor(reason, message, options) {
-    super(message, options);
-    this.reason = reason;
-    this.name = "StoredSnapshotUnavailableError";
-  }
-};
-var RETRYABLE_LIVE_SNAPSHOT_REASONS = [
-  "no-keyframe",
-  "source-failed",
-  "undecodable-burst"
-];
-var LiveSnapshotUnavailableError = class extends Error {
-  reason;
-  /** Whether another attempt could plausibly succeed without the host changing anything. */
-  retryable;
-  constructor(reason, message, options) {
-    super(message, options);
-    this.reason = reason;
-    this.name = "LiveSnapshotUnavailableError";
-    this.retryable = RETRYABLE_LIVE_SNAPSHOT_REASONS.includes(reason);
-  }
-};
-var CameraDisabledError = class extends Error {
-  camera;
-  constructor(camera, options) {
-    super(`camera${camera ? ` ${camera}` : ""} is disabled \u2014 no live stream possible`, options);
-    this.camera = camera;
-    this.name = "CameraDisabledError";
-  }
-};
-var StationKeyUnavailableError = class extends Error {
-  stationSn;
-  /** Always true: the negotiation is per connection, so a later one may still produce a key. */
-  retryable = true;
-  constructor(stationSn, options) {
-    super(`station ${stationSn} did not provide its session key, so nothing that requires one could be sent`, options);
-    this.stationSn = stationSn;
-    this.name = "StationKeyUnavailableError";
-  }
-};
-var StationUnreachableError = class extends Error {
-  stationSn;
-  waitedMs;
-  /** Always true: a station unreachable now may answer on a later attempt. */
-  retryable = true;
-  constructor(stationSn, waitedMs, options) {
-    super(`station ${stationSn}'s P2P session did not connect within ${waitedMs}ms, so nothing could be sent to it`, options);
-    this.stationSn = stationSn;
-    this.waitedMs = waitedMs;
-    this.name = "StationUnreachableError";
-  }
-};
-var DeviceChannelUnresolvedError = class extends Error {
-  sn;
-  stationSn;
-  constructor(sn, stationSn, options) {
-    super(`${sn} has no usable channel on station ${stationSn}, so nothing was sent to it`, options);
-    this.sn = sn;
-    this.stationSn = stationSn;
-    this.name = "DeviceChannelUnresolvedError";
-  }
-};
-var LiveStreamStartError = class extends Error {
-  reason;
-  stage;
-  timeoutMs;
-  attempts;
-  constructor(failure) {
-    super(`live stream failed to start (${failure.reason} at ${failure.stage} after ${failure.attempts} attempts; ${failure.timeoutMs}ms deadline)`, failure.cause === void 0 ? void 0 : { cause: failure.cause });
-    this.name = "LiveStreamStartError";
-    this.reason = failure.reason;
-    this.stage = failure.stage;
-    this.timeoutMs = failure.timeoutMs;
-    this.attempts = failure.attempts;
-  }
-};
-var StateConvergenceError = class extends Error {
-  sn;
-  property;
-  param;
-  expected;
-  observed;
-  timeoutMs;
-  constructor(failure) {
-    super(`device ${failure.sn} did not report ${failure.property} as ${String(failure.expected)} within ${failure.timeoutMs}ms (param ${failure.param} read ${String(failure.observed)})`);
-    this.name = "StateConvergenceError";
-    this.sn = failure.sn;
-    this.property = failure.property;
-    this.param = failure.param;
-    this.expected = failure.expected;
-    this.observed = failure.observed;
-    this.timeoutMs = failure.timeoutMs;
+  DeviceType.PIR_SENSOR_E20
+]);
+var KEYPAD_TYPES = /* @__PURE__ */ new Set([DeviceType.KEYPAD]);
+function codecForType(deviceType) {
+  if (!Number.isFinite(deviceType))
+    return void 0;
+  if (STATION_TYPES.has(deviceType))
+    return "station";
+  if (LOCK_TYPES.has(deviceType))
+    return "lock";
+  if (SENSOR_TYPES.has(deviceType))
+    return "sensor";
+  if (KEYPAD_TYPES.has(deviceType))
+    return "keypad";
+  if (isKnownSecurityType(deviceType))
+    return "camera";
+  return void 0;
+}
+function isKnownSecurityType(deviceType) {
+  if (deviceType === DeviceType.SMART_TRACK_LINK || deviceType === DeviceType.SMART_TRACK_CARD)
+    return false;
+  if (deviceType >= 0 && deviceType <= 210)
+    return true;
+  if (deviceType >= 300 && deviceType <= 301)
+    return true;
+  if (deviceType >= 1e4 && deviceType <= 10100)
+    return true;
+  return false;
+}
+function codecFromModel(model) {
+  if (!model)
+    return void 0;
+  const m = model.trim().toUpperCase();
+  if (m.length === 0)
+    return void 0;
+  if (/^T2(80B|880B?|801B?)$/.test(m))
+    return "mower";
+  if (/^T2/.test(m))
+    return "vacuum";
+  if (/^T1/.test(m))
+    return "vacuum";
+  if (/^T8(00[0-9]|010|023|025|030)/.test(m))
+    return "station";
+  if (/^T8N0/.test(m) || /^T8E0/.test(m))
+    return "station";
+  if (/^T9000/.test(m))
+    return "station";
+  if (/^T74/.test(m))
+    return "lock";
+  if (/^T85/.test(m))
+    return "lock";
+  if (/^T8960/.test(m))
+    return "keypad";
+  if (/^T89/.test(m))
+    return "sensor";
+  if (/^T8L/.test(m))
+    return "light";
+  if (/^T87A/.test(m))
+    return "display";
+  if (/^T8/.test(m))
+    return "camera";
+  return void 0;
+}
+function classify(rec) {
+  const byModel = codecFromModel(rec.model);
+  if (rec.category && PRINTER_CATEGORY_RE.test(rec.category))
+    return "printer";
+  if (byModel === "mower")
+    return "mower";
+  if (rec.category && /clean|vacuum|robovac/i.test(rec.category))
+    return "vacuum";
+  if (byModel === "vacuum")
+    return "vacuum";
+  if (byModel === "light" || byModel === "display")
+    return byModel;
+  if (rec.deviceType !== void 0) {
+    const byType = codecForType(rec.deviceType);
+    if (byType !== void 0)
+      return byType;
   }
-};
-var COMMAND_OBSERVATION = /* @__PURE__ */ Symbol("command-observation");
-function observeCommand(command, observation) {
-  return Object.defineProperty(command, COMMAND_OBSERVATION, { configurable: true, value: observation });
+  if (byModel !== void 0)
+    return byModel;
+  return "camera";
 }
-function commandObservation(command) {
-  return command[COMMAND_OBSERVATION];
+
+// dist/model/infer.js
+function inferName(rec) {
+  const model = rec?.model;
+  if (typeof model !== "string")
+    return void 0;
+  const trimmed = model.trim();
+  if (trimmed.length === 0)
+    return void 0;
+  const match = trimmed.match(/\b([A-Za-z]\d{3,5}[A-Za-z0-9]{0,3})\b/);
+  if (match)
+    return match[1].toUpperCase();
+  return void 0;
 }
 
 // dist/model/capabilities/access.js
@@ -4326,7 +4492,7 @@ function decodePowerSource(raw) {
 function recordSetting(param, value, ctx) {
   return setStationScalar(param, value, ctx.channel);
 }
-var MAINS_CAMERA_MODELS = ["T8425", "T8419", "T8410", "T84A1"];
+var MAINS_CAMERA_MODELS = ["T8425", "T8419", "T8410", "T84A1", "T8423"];
 function cameraPowerTier(model, capabilities) {
   return capabilities.has("battery") && notMainsCamera({ model }) ? "battery" : "wired";
 }
@@ -7562,85 +7728,6 @@ var STORAGE = {
   detection: { codecs: ["station"] }
 };
 
-// dist/core/raw-dp-writer.js
-var WIRE = { VARINT: 0, LENGTH_DELIMITED: 2 };
-function encodeVarint(value) {
-  if (!Number.isSafeInteger(value) || value < 0) {
-    throw new Error(`varint: ${value} is not a non-negative safe integer`);
-  }
-  const out = [];
-  let v = value;
-  while (v > 127) {
-    out.push(v % 128 + 128);
-    v = Math.floor(v / 128);
-  }
-  out.push(v);
-  return out;
-}
-function zigzag(value) {
-  if (!Number.isSafeInteger(value))
-    throw new Error(`zigzag: ${value} is not a safe integer`);
-  return value < 0 ? -2 * value - 1 : 2 * value;
-}
-var RawDpWriter = class _RawDpWriter {
-  body = [];
-  /** A varint-valued field (`int32`, `uint32`, `bool`, an enum member). */
-  int(field, value) {
-    this.body.push(...encodeVarint(tag(field, WIRE.VARINT)), ...encodeVarint(value));
-    return this;
-  }
-  /** A signed varint field (`sint32`, `sint64`), ZigZag-encoded — see {@link zigzag}. */
-  sint(field, value) {
-    return this.int(field, zigzag(value));
-  }
-  /** A boolean field, on protobuf's own terms: `1` or `0` in a varint. */
-  bool(field, value) {
-    return this.int(field, value ? 1 : 0);
-  }
-  /** A length-delimited field carrying raw bytes — a string, a blob, or a message built elsewhere. */
-  bytes(field, value) {
-    const bytes2 = value instanceof Uint8Array ? Array.from(value) : [...value];
-    this.body.push(...encodeVarint(tag(field, WIRE.LENGTH_DELIMITED)), ...encodeVarint(bytes2.length), ...bytes2);
-    return this;
-  }
-  /**
-   * A nested sub-message, built by `build` into a writer of its own.
-   *
-   * The sub-message is emitted even when `build` writes nothing into it. That is not an oversight: an
-   * EMPTY sub-message is how these protocols say "this subsystem exists and is in its zero state", as
-   * opposed to saying nothing about it, and the readers on the other side of this file depend on the
-   * distinction. Omitting the call is what says nothing about it.
-   */
-  sub(field, build) {
-    const inner = new _RawDpWriter();
-    build(inner);
-    return this.bytes(field, inner.toBytes());
-  }
-  /** The message body on its own, unframed — for nesting into another writer. */
-  toBytes() {
-    return [...this.body];
-  }
-  /**
-   * The finished DP value: `varint(bodyLength) ++ body`, base64-encoded.
-   *
-   * This is the envelope `RawDpCodec.decode` unwraps, so a value produced here and read back through the
-   * codec is a genuine round-trip rather than two implementations of the same guess.
-   */
-  finish() {
-    return Buffer.from([...encodeVarint(this.body.length), ...this.body]).toString("base64");
-  }
-};
-function tag(field, wire) {
-  if (!Number.isSafeInteger(field) || field < 1)
-    throw new Error(`field number: ${field} is not a positive integer`);
-  return field * 8 + wire;
-}
-function rawDp(build) {
-  const w = new RawDpWriter();
-  build(w);
-  return w.finish();
-}
-
 // dist/model/capabilities/vacuum-dock.js
 var VACUUM_DOCK_DP = 173;
 var VACUUM_DOCK_INFO_DP = 169;
@@ -13345,58 +13432,6 @@ function parseCleanRecordDetail(blob, codec) {
   };
 }
 
-// dist/core/lz4-block.js
-var MAX_OUTPUT = 64 * 1024 * 1024;
-function lz4BlockDecompress(block, size) {
-  if (!Number.isSafeInteger(size) || size < 0 || size > MAX_OUTPUT)
-    return void 0;
-  const out = Buffer.alloc(size);
-  const end = block.length;
-  let pos = 0;
-  let written = 0;
-  const extend2 = (base) => {
-    let len = base;
-    if (base !== 15)
-      return len;
-    for (; ; ) {
-      if (pos >= end)
-        return void 0;
-      const extra = block[pos++];
-      len += extra;
-      if (extra !== 255)
-        return len;
-    }
-  };
-  while (pos < end) {
-    const token = block[pos++];
-    const literals = extend2(token >> 4);
-    if (literals === void 0)
-      return void 0;
-    if (pos + literals > end || written + literals > size)
-      return void 0;
-    for (let i = 0; i < literals; i++)
-      out[written++] = block[pos++];
-    if (pos === end)
-      break;
-    if (pos + 2 > end)
-      return void 0;
-    const offset = block[pos] | block[pos + 1] << 8;
-    pos += 2;
-    if (offset === 0 || offset > written)
-      return void 0;
-    const match = extend2(token & 15);
-    if (match === void 0)
-      return void 0;
-    const length = match + 4;
-    if (written + length > size)
-      return void 0;
-    let from = written - offset;
-    for (let i = 0; i < length; i++)
-      out[written++] = out[from++];
-  }
-  return written === size ? out : void 0;
-}
-
 // dist/model/vacuum-map.js
 var DOCK_KINDS = ["charger", "station"];
 var MAP_QUALITIES = ["incomplete", "rough", "effective", "listFull"];
@@ -15159,6 +15194,7 @@ var LOCAL_LOOKUP_PORT = 32108;
 var HEARTBEAT_MS = 5e3;
 var PATH_SILENCE_MS = HEARTBEAT_MS * 3;
 var LOOKUP_RETRY_MS = 1e3;
+var RECEIVE_BUFFER_BYTES = 4 * 1024 * 1024;
 var CONNECT_TIMEOUT_MS = 15e3;
 var STATION_CHANNEL3 = 255;
 var CMD_GATEWAYINFO = 1100;
@@ -15188,6 +15224,7 @@ var REORDER_MAX_DATAGRAMS = 128;
 var MAX_TRACED_DATAGRAM_GAPS = 8;
 var CMD_SET_PAYLOAD = 1350;
 var CMD_NOTIFY_PAYLOAD = 1351;
+var PADDED_RESULT_BYTES = 132;
 var CMD_CAMERA_INFO = 1103;
 var CMD_DATABASE_IMAGE = 1308;
 var CMD_DATABASE = 1306;
@@ -15213,6 +15250,8 @@ var P2PSession = class _P2PSession extends EventEmitter2 {
   connected = false;
   connecting = false;
   closed = false;
+  /** Whether a short receive buffer has been reported, so a reconnect does not repeat the same warning. */
+  receiveBufferReported = false;
   connectAddress;
   seqNumber = 0;
   /**
@@ -15252,7 +15291,10 @@ var P2PSession = class _P2PSession extends EventEmitter2 {
   cloudLookup;
   /** Local outbound IPv4 reported inside LOOKUP_WITH_KEY requests. */
   selfHost;
-  /** In-flight multi-datagram frame per data channel (see onData). */
+  /**
+   * In-flight multi-datagram frame per data channel (see reassemble): the payload gathered so far under its
+   * parsed header, or, without a header, the start of a frame header cut by the datagram boundary.
+   */
   pendingByDataType = /* @__PURE__ */ new Map();
   /** Last delivered datagram sequence number per data type. */
   lastSeqByType = /* @__PURE__ */ new Map();
@@ -15532,6 +15574,26 @@ var P2PSession = class _P2PSession extends EventEmitter2 {
   get isConnected() {
     return this.connected;
   }
+  /**
+   * Ask the OS for {@link RECEIVE_BUFFER_BYTES} on a bound socket, and warn once per session when it grants
+   * less or refuses.
+   *
+   * The request is made here rather than through `createSocket`'s `recvBufferSize`: Node applies that option
+   * inside the bind callback, where a refusal is thrown out of reach of this session and ends the process.
+   */
+  requestReceiveBuffer(socket) {
+    let granted;
+    try {
+      socket.setRecvBufferSize(RECEIVE_BUFFER_BYTES);
+      granted = socket.getRecvBufferSize();
+    } catch {
+      granted = 0;
+    }
+    if (granted >= RECEIVE_BUFFER_BYTES || this.receiveBufferReported)
+      return;
+    this.receiveBufferReported = true;
+    this.logger.warn(`[p2p] ${this.cfg.stationSn} UDP receive buffer below the ${RECEIVE_BUFFER_BYTES} bytes requested` + (granted > 0 ? ` (granted ${granted})` : " (request refused)") + `; live video can lose keyframes. Raise the OS limit (net.core.rmem_max on Linux, kern.ipc.maxsockbuf on BSD) to at least ${RECEIVE_BUFFER_BYTES}.`);
+  }
   /** Open the socket and start the lookup → hole-punch handshake. */
   async connect() {
     if (this.connecting || this.connected)
@@ -15555,6 +15617,7 @@ var P2PSession = class _P2PSession extends EventEmitter2 {
           socket.setBroadcast(true);
         } catch {
         }
+        this.requestReceiveBuffer(socket);
         resolve();
       });
     });
@@ -16627,7 +16690,13 @@ var P2PSession = class _P2PSession extends EventEmitter2 {
     clearTimeout(reorder.timer);
     reorder.timer = void 0;
   }
-  /** Reassemble one in-sequence datagram body into logical frames. */
+  /**
+   * Reassemble one in-sequence datagram body into logical frames.
+   *
+   * Frames are packed back to back, so a frame header can itself be cut by a datagram boundary. The start
+   * of a header left at the end of a datagram is carried into the next one rather than discarded; dropping
+   * it would lose that frame and every frame after it until a datagram happened to begin on a header.
+   */
   reassemble(dataType, datagramBody) {
     const pending = this.pendingByDataType.get(dataType);
     let body = pending ? Buffer.concat([pending.buf, datagramBody]) : datagramBody;
@@ -16651,6 +16720,9 @@ var P2PSession = class _P2PSession extends EventEmitter2 {
       this.handleFrame(header, payload.subarray(0, header.bytesToRead), dataType);
       body = body.subarray(P2P_DATA_HEADER_BYTES + header.bytesToRead);
     }
+    if (body.length > 0 && body.length < P2P_DATA_HEADER_BYTES && MAGIC_WORD.startsWith(body.subarray(0, 4).toString())) {
+      this.pendingByDataType.set(dataType, { buf: body });
+    }
   }
   /**
    * Forget where each data type's sequence numbering had reached, and drop any half-reassembled frame.
@@ -16735,7 +16807,8 @@ var P2PSession = class _P2PSession extends EventEmitter2 {
         this.emit("error", e instanceof Error ? e : new Error(String(e)));
       }
     }
-    if (!isMedia && !frame.json && data.length === 4) {
+    const paddedResult = header.commandId === CMD_SET_PAYLOAD && data.length === PADDED_RESULT_BYTES && data.subarray(4).every((b) => b === 0);
+    if (!isMedia && !frame.json && (data.length === 4 || paddedResult)) {
       this.emit("commandResult", { code: data.readInt32LE(0), channel: header.channel });
     }
     this.emit("data", frame);
@@ -18164,9 +18237,9 @@ function annexbToJpeg(annexb, spawn2) {
 
 // dist/transport/p2p/shared-live-source.js
 import { EventEmitter as EventEmitter4 } from "node:events";
-function durationMs(seconds) {
-  const milliseconds = (seconds ?? 0) * 1e3;
-  return Number.isFinite(milliseconds) && milliseconds > 0 ? milliseconds : 0;
+var MAX_TIMER_DELAY_MS = 2147483647;
+function timerMs(value, fallback) {
+  return value !== void 0 && Number.isFinite(value) && value >= 1 && value <= MAX_TIMER_DELAY_MS ? value : fallback;
 }
 function sameConfig(a, b) {
   return b !== void 0 && a.codec === b.codec && a.width === b.width && a.height === b.height;
@@ -18419,14 +18492,14 @@ var SharedLiveSource = class {
   tag;
   constructor(opts) {
     this.opts = opts;
-    this.lingerMs = opts.lingerMs ?? 8e3;
+    this.lingerMs = opts.lingerMs === 0 ? 1 : timerMs(opts.lingerMs, 8e3);
     this.maxQueue = opts.maxQueue ?? 900;
-    this.preBufferMs = durationMs(opts.preBufferSeconds);
-    this.warmRetryMs = opts.warmRetryMs ?? 2e3;
-    this.warmTimeoutMs = opts.warmTimeoutMs ?? 2e4;
+    this.preBufferMs = timerMs((opts.preBufferSeconds ?? 0) * 1e3, 0);
+    this.warmRetryMs = timerMs(opts.warmRetryMs, 2e3);
+    this.warmTimeoutMs = timerMs(opts.warmTimeoutMs, 2e4);
     this.powered = opts.powered ?? "wired";
-    this.batteryBudgetMs = opts.batteryBudgetMs ?? 45e3;
-    this.budgetGraceMs = opts.budgetGraceMs ?? 1e4;
+    this.batteryBudgetMs = timerMs(opts.batteryBudgetMs, 45e3);
+    this.budgetGraceMs = timerMs(opts.budgetGraceMs, 1e4);
     this.logger = opts.logger ?? noopLogger;
     this.tag = opts.label ? `[live ${opts.label}]` : "[live]";
     this.traceId = `pull-${++pullSequence}`;
@@ -18674,7 +18747,7 @@ var SharedLiveSource = class {
     if (this.disposed || !this.stream)
       return;
     this.clearBudget();
-    this.budgetTimer.arm(ms ?? this.batteryBudgetMs, () => this.onBudgetExpire());
+    this.budgetTimer.arm(timerMs(ms, this.batteryBudgetMs), () => this.onBudgetExpire());
   }
   /** Settle a reuse watch on any frame — the join already holds a decodable picture. */
   settleReuseWatch() {
@@ -18815,7 +18888,7 @@ var SharedLiveSource = class {
     return this.bufferedMedia(seconds).filter((item) => item.kind === "video").map((item) => item.frame);
   }
   bufferedMedia(seconds) {
-    const requested = Math.min(durationMs(seconds), this.preBufferMs);
+    const requested = Number.isFinite(seconds) ? Math.min(seconds * 1e3, this.preBufferMs) : 0;
     if (requested <= 0 || !this.ring.length)
       return [];
     const start = this.windowStart(Date.now() - requested);
@@ -26837,7 +26910,7 @@ var EufyMega = class extends EventEmitter9 {
       if (ev.eventName === void 0 && ev.eventType != null)
         ev.eventName = detectionName(ev.eventType);
       if (ev.thumbnailCandidate)
-        void this.observeStoredImage(ev.thumbnailCandidate);
+        void this.observeStoredImage(ev.thumbnailCandidate, ev.deviceSn);
       this.emit("push", ev);
       const signal2 = {
         source: "push",
@@ -26886,9 +26959,16 @@ var EufyMega = class extends EventEmitter9 {
     client.on("error", (e) => this.reportError(e));
     return client;
   }
-  /** Admit only exact, account-known devices with resolved snapshot evidence into the passive store. */
-  async observeStoredImage(candidate) {
-    if (!this.storedImages || candidate.attribution.kind !== "device")
+  /**
+   * Admit only exact, account-known devices with resolved snapshot evidence into the passive store; a
+   * station-only candidate is admitted under the event's device serial.
+   */
+  async observeStoredImage(candidate, eventDeviceSn) {
+    if (!this.storedImages)
+      return;
+    const { attribution } = candidate;
+    const deviceSn = attribution.kind === "device" ? attribution.deviceSn : attribution.kind === "station" ? eventDeviceSn : void 0;
+    if (!deviceSn)
       return;
     const account = this.mega.auth?.userId;
     if (!account)
@@ -26898,9 +26978,9 @@ var EufyMega = class extends EventEmitter9 {
         await this.registry.getDevices();
       if (this.mega.auth?.userId !== account)
         return;
-      const caps = this.registry.capabilitiesForDevice(candidate.attribution.deviceSn);
+      const caps = this.registry.capabilitiesForDevice(deviceSn);
       if (caps && hasProvidedAction(caps, "snapshotStored")) {
-        this.storedImages.observe(candidate.attribution.deviceSn, candidate.url);
+        this.storedImages.observe(deviceSn, candidate.url);
       }
     } catch (e) {
       this.reportError(e);
@@ -27125,26 +27205,16 @@ var SolixClient = class _SolixClient {
   }
   /** Build the encrypted, signed `/passport/login` request body + headers for the negotiated key. */
   async postLogin(kx, verifyCode, limitedToken) {
-    const { clientPublicKeyHex, encryptedPassword } = encryptLoginPassword(this.password);
     const bodyObj = {
-      email: this.email,
-      password: encryptedPassword,
-      ab: this.country,
-      client_secret_info: { public_key: clientPublicKeyHex },
+      ...loginCredentials(this.email, this.password, this.country),
       answer: "",
       captcha_id: "",
       verify_code: verifyCode ?? "",
       login_id: ""
     };
     const encBody = encryptBody(JSON.stringify(bodyObj), kx.shareKey);
-    const ts = nowSec();
-    const once = genId();
     return this.post(this.apiHost, SOLIX_ENDPOINTS.login, encBody, this.authHeaders({
-      "x-encryption-info": "algo_ecdh",
-      "x-key-ident": kx.keyIdent,
-      "x-request-ts": ts,
-      "x-request-once": once,
-      "x-signature": signRequest(kx.shareKey, ts, once, encBody),
+      ...signedHeaders(kx, encBody),
       ...limitedToken ? { "x-auth-token": limitedToken } : {}
     }));
   }
@@ -27159,13 +27229,12 @@ var SolixClient = class _SolixClient {
    * observed refusing the header, which is consistent with the two ids agreeing on the accounts seen.
    */
   classifyLogin(data, isVerify) {
-    const userId = data.ap_cloud_user_id ?? data.user_id;
-    const authToken = data.auth_token;
-    if (!userId || !authToken)
+    const reply = readLoginReply(data);
+    if (!reply)
       throw new Error(`Solix login returned no session: ${JSON.stringify(data).slice(0, 160)}`);
-    const faInfo = data.fa_info ?? {};
-    if (!isVerify && faInfo.info) {
-      this.pending2fa = { limitedToken: authToken, userId, geoKey: data.geo_key };
+    const { userId, authToken } = reply;
+    if (!isVerify && reply.twoFactorPending) {
+      this.pending2fa = { limitedToken: authToken, userId, geoKey: reply.geoKey };
       return { status: "2fa", method: "code sent by the passport" };
     }
     this.pending2fa = void 0;
@@ -27174,7 +27243,7 @@ var SolixClient = class _SolixClient {
       userId,
       gtoken: gtoken(userId),
       apiHost: this.apiHost,
-      tokenExpiresAt: Number(data.token_expires_at ?? 0) || 0
+      tokenExpiresAt: reply.tokenExpiresAt
     };
     this.persist();
     return { status: "ok", session: this.session_ };
@@ -27329,14 +27398,8 @@ var SolixClient = class _SolixClient {
       throw new Error("not authenticated \u2014 call login() first");
     const kx = await this.keyExchange();
     const encBody = encryptBody(JSON.stringify(payload), kx.shareKey);
-    const ts = nowSec();
-    const once = genId();
     const env = await this.post(this.apiHost, path, encBody, this.baseHeaders({
-      "x-encryption-info": "algo_ecdh",
-      "x-key-ident": kx.keyIdent,
-      "x-request-ts": ts,
-      "x-request-once": once,
-      "x-signature": signRequest(kx.shareKey, ts, once, encBody),
+      ...signedHeaders(kx, encBody),
       "x-auth-token": this.session_.authToken,
       gtoken: this.session_.gtoken
     }));