@mega-yfue/eufy-sdk 0.5.0-beta.50 → 0.5.0-beta.51

package/dist/transport/tuya/account.d.ts

@@ -1,14 +1,17 @@
-/** Username/plaintext prefix the app prepends to the eufy user id. */
-export declare const TUYA_USERNAME_PREFIX = "eufyhome-";
+/**
+ * Username/plaintext prefix the app prepends to the eufy user id. The production app uses `eh-`;
+ * `eufyhome-` is the prefix of its QA environment only.
+ */
+export declare const TUYA_USERNAME_PREFIX = "eh-";
 /** AES-128-CBC key used to derive the Tuya password (16 bytes). */
 export declare const TUYA_PASSWORD_KEY: Buffer<ArrayBuffer>;
 /** AES-128-CBC IV used to derive the Tuya password (16 bytes). */
 export declare const TUYA_PASSWORD_IV: Buffer<ArrayBuffer>;
-/** The Tuya username for a eufy user id (`"eufyhome-" + eufyUserId`). */
+/** The Tuya username for a eufy user id (`"eh-" + eufyUserId`). */
 export declare function tuyaUsername(eufyUserId: string): string;
 /**
  * Derive the Tuya password for a eufy user id:
- * `UPPERCASE-HEX( AES-128-CBC-NoPadding( pad16("eufyhome-"+eufyUserId), KEY, IV ) )`.
+ * `UPPERCASE-HEX( AES-128-CBC-NoPadding( pad16("eh-"+eufyUserId), KEY, IV ) )`.
  * Deterministic (fixed KEY/IV) — the same user id always yields the same password.
  */
 export declare function deriveTuyaPassword(eufyUserId: string): string;
@@ -29,7 +32,7 @@ export declare function isoToDialCode(iso: string): string | undefined;
 export declare function resolveCountryCode(phoneCode?: string, region?: string, isoCode?: string): string;
 /** A derived Tuya login identity — everything needed to call the uid token/password login actions. */
 export interface TuyaAccount {
-    /** `"eufyhome-" + eufyUserId`. */
+    /** `"eh-" + eufyUserId`. */
     username: string;
     /** AES-derived password (uppercase hex). See {@link deriveTuyaPassword}. */
     password: string;

package/dist/transport/tuya/client.d.ts

@@ -50,8 +50,21 @@ export declare class TuyaClient {
      * Requires a working signer (the sign step).
      */
     buildRequest(action: TuyaAction): Record<string, string>;
-    /** Build + POST an action, returning the parsed envelope. Requires a working signer. */
+    /**
+     * Build + POST an action, returning the parsed envelope. Requires a working signer.
+     *
+     * On an `et=3` reply the envelope's `result` is a base64 AES-128-GCM blob, not an object; this
+     * decrypts it (keyed off the request's `requestId` and the session's `ecode`) and returns the
+     * decrypted inner envelope, so callers read `result` as an object regardless. A non-string `result`
+     * (an error, or an already-plain reply) passes through untouched.
+     */
     call<T = unknown>(action: TuyaAction): Promise<TuyaEnvelope<T>>;
+    /**
+     * Decode an et=3 reply. When `result` is a non-empty string it is the encrypted blob: decrypt and
+     * parse it (a wrong key or tampered blob fails the GCM tag in {@link decryptReply} and throws). The
+     * plaintext is itself the standard `{success, t, result}` envelope, which becomes the returned one.
+     */
+    private decodeReply;
     /**
      * Log into the Tuya cloud from a eufy user id (wire-confirmed from the eufy Security app).
      *
@@ -68,12 +81,12 @@ export declare class TuyaClient {
      */
     login(eufyUserId: string, phoneCode?: string): Promise<TuyaLoginResult>;
     /**
-     * READ/dump a device's cached data-points (`thing.m.device.cache.dp.get`).
+     * READ/dump a device's cached data-points (`smartlife.m.device.cache.dp.get`).
      * Builds the request without needing a working signer; the signer is only exercised on send.
      */
     getDeviceDps<T = unknown>(devId: string, dpCacheType?: number): Promise<TuyaEnvelope<T>>;
     /**
-     * CONTROL: publish data-points to a device (`thing.m.device.dp.publish`). `dps` is
+     * CONTROL: publish data-points to a device (`smartlife.m.device.dp.publish`). `dps` is
      * `{ "<dpId>": <value> }`. `gwId` is the gateway/parent id (equals `devId` for a standalone gw).
      *
      * ⚠️ UNVERIFIED write — refuses to send by default. The `dp.publish` param shape

package/dist/transport/tuya/command-router.d.ts

@@ -56,7 +56,7 @@ export declare class TuyaCommandRouter {
     registerDevice(sn: string, devId: string, gwId?: string): void;
     private ensureLoggedIn;
     /**
-     * Fetch a device's cached DPs from the Tuya cloud (`thing.m.device.cache.dp.get`) and deliver
+     * Fetch a device's cached DPs from the Tuya cloud (`smartlife.m.device.cache.dp.get`) and deliver
      * the raw DP map to the caller. Used for initial state hydration after MQTT subscribe — gets the
      * last-known state without waiting for the first realtime push.
      *

package/dist/transport/tuya/et3.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The per-request AES-128 key, `getEncryptoKey(requestId, ecode)`: take the lowercase hex of
+ * `HMAC-SHA256(key = requestId, msg = K[+ "_" + ecode])`, keep the first 16 hex characters, and use
+ * those characters as 16 ASCII bytes. `K` is the app HMAC key ({@link resolveSignKey}).
+ *
+ * `ecode` is the session's per-login encryption code (`User.ecode`, read from the decrypted
+ * `login.reg` reply). `ecode === null` selects the pre-session variant `msg = K` used to open the
+ * `token.get` and `login.reg` replies themselves, before any `ecode` is known.
+ */
+export declare function deriveBodyKey(requestId: string, ecode: string | null): Buffer;
+/**
+ * Encrypt an `et=3` request `postData`: AES-128-GCM under a random 12-byte nonce, laid out
+ * `nonce(12) ‖ ciphertext ‖ tag(16)` then base64 — the inverse of {@link decryptReply}, keyed by the
+ * same {@link deriveBodyKey}. No AAD. The request is signed over this blob.
+ */
+export declare function encryptBody(key: Buffer, json: string): string;
+/**
+ * Decrypt an `et=3` reply `result`: base64 → AES-128-GCM-decrypt-verify (`nonce = blob[0:12]`,
+ * `tag = blob[-16:]`, ciphertext between), gunzip when the plaintext is gzip-framed, and return the
+ * plaintext JSON string. Throws when the blob is too short or the GCM tag fails to authenticate.
+ */
+export declare function decryptReply(key: Buffer, resultB64: string): string;

package/dist/transport/tuya/request.d.ts

@@ -2,9 +2,10 @@
  * Tuya / Thingclips `api.json` request assembly + transport.
  *
  * Every call is a single `POST https://a1.tuyaeu.com/api.json` (EU) whose body is
- * **form-urlencoded plaintext params** (NOT an encrypted blob) plus a `sign`. This module builds
- * that param map for a given action, form-encodes it, POSTs it, and parses Tuya's response
- * envelope. The one non-plaintext piece — the `sign` digest — is delegated to a {@link TuyaSigner}.
+ * **form-urlencoded params** plus a `sign`. Under `et=3` the `postData` param is an AES-128-GCM blob
+ * and the reply `result` is encrypted the same way, with the same per-request key. This module builds
+ * that param map for a given action, form-encodes it, POSTs it, and parses Tuya's response envelope.
+ * The `sign` digest is delegated to a {@link TuyaSigner}.
  */
 /** Injectable POST transport — takes (url, form-body), returns the parsed JSON envelope. Native `fetch` by default. */
 export type TuyaHttpPost = (url: string, body: string) => Promise<unknown>;
@@ -24,7 +25,10 @@ export declare const TUYA_SDK_VERSION = "7.5.0";
 export declare const TUYA_APP_VERSION = "6.0.51_26722";
 /** A single action to call: the `a` (action) + `v` (version) + optional pre-serialized `postData`. */
 export interface TuyaAction {
-    /** Action name, e.g. `thing.m.device.dp.publish`. */
+    /**
+     * Action name as it goes on the wire, e.g. `smartlife.m.device.dp.publish`. The vendor SDK names
+     * its actions `thing.*` and rewrites a leading `thing` to `smartlife` before sending.
+     */
     a: string;
     /** Per-action version, e.g. `"1.0"` / `"2.0"`. */
     v: string;
@@ -43,6 +47,11 @@ export interface TuyaSession {
      * `"7cbfe6d8"` for this app's appId. Hardcode it.
      */
     chKey: string;
+    /**
+     * Per-login encryption code (`User.ecode`), read from the decrypted `login.reg` reply. Absent until
+     * login completes; it keys et=3 body encryption and reply decryption for every session call.
+     */
+    ecode?: string;
 }
 /**
  * The constant / environment fields of a request. All are plaintext and (except the sign-relevant
@@ -127,11 +136,11 @@ export interface SendOptions {
 export declare function sendApiRequest<T = unknown>(params: Record<string, string>, opts?: SendOptions): Promise<TuyaEnvelope<T>>;
 /**
  * CONTROL: publish device data-points. `dps` is `{ "<dpId>": <value> }`; note it is JSON-stringified
- * INSIDE the postData (Tuya nests the dps map as a string). Action `thing.m.device.dp.publish` v2.0.
+ * INSIDE the postData (Tuya nests the dps map as a string). Action `smartlife.m.device.dp.publish` v2.0.
  */
 export declare function buildPublishDpsAction(devId: string, gwId: string, dps: Record<string, unknown>): TuyaAction;
 /**
- * READ/dump: fetch a device's cached data-points. Action `thing.m.device.cache.dp.get` v2.0.
+ * READ/dump: fetch a device's cached data-points. Action `smartlife.m.device.cache.dp.get` v2.0.
  * TODO(verify): `dpCacheType` default (1) was not pinned from the capture.
  */
 export declare function buildGetDeviceDpsAction(devId: string, dpCacheType?: number): TuyaAction;
@@ -146,6 +155,7 @@ export declare function buildUsernameTokenGetAction(countryCode: string, usernam
  * LOGIN step 2: uid password login + auto-register.
  * Wire-confirmed from the eufy Security app: wire action
  * `smartlife.m.user.uid.password.login.reg`, v=1.0. `passwd` = hex of RSA-PKCS1-encrypt(MD5hex(aesPassword)).
+ * `options` is the JSON string `{"group": 1}`, as the app sends it.
  * On success returns `{ sid, uid }`.
  */
 export declare function buildPasswordLoginRegAction(countryCode: string, uid: string, passwd: string, token: string): TuyaAction;

package/dist/transport/tuya/sign.d.ts

@@ -44,6 +44,13 @@ export declare class StubSigner implements TuyaSigner {
  * The env var `TUYA_SIGN_KEY` can override this for non-standard builds.
  */
 export declare const TUYA_SIGN_K: string;
+/**
+ * Resolve the app-wide HMAC key {@link TUYA_SIGN_K}: an explicit `override` wins, then the
+ * `TUYA_SIGN_KEY` env var (for custom builds), then the built-in constant. Shared by the request
+ * signer ({@link HmacSigner}) and the et=3 body-key derivation, which key off the same `K`.
+ * @internal
+ */
+export declare function resolveSignKey(override?: string): string;
 /**
  * The real {@link TuyaSigner}: `sign = HMAC-SHA256(K, preimage)` as lowercase hex.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mega-yfue/eufy-sdk",
-  "version": "0.5.0-beta.50",
+  "version": "0.5.0-beta.51",
   "description": "One typed TypeScript client for the Anker eufy v6 cloud — capability-driven devices, realtime events over P2P/MQTT/push, and live media",
   "license": "Apache-2.0",
   "author": "mega-yfue",