@mega-yfue/eufy-sdk 0.6.0-beta.4 → 0.6.0-beta.41

package/dist/model/capabilities/access.d.ts

@@ -76,9 +76,10 @@ export declare function setJsonRaw(cmd: number, data: Record<string, unknown>, c
 export declare function setPayload(cmd: number, payload: Record<string, unknown>, ctx: CommandContext, mValue3?: number, channel?: number, form?: ScalarForm): Command;
 /**
  * Set a station-scoped scalar (132-byte body, no channel field) on an EXPLICIT channel — for the
- * HomeBase's own controls on the station broadcast channel 255 (alarm/speaker volume 1235).
+ * HomeBase's own controls on the station broadcast channel 255 (alarm/speaker volume 1235). Level-2
+ * only, unless `form` is `"auto"`, which seals it at the session's own level.
  */
-export declare function setStationScalar(cmd: number, value: number, channel: number): Command;
+export declare function setStationScalar(cmd: number, value: number, channel: number, form?: "auto"): Command;
 /**
  * A one-line device descriptor for error messages — carries every identifier needed to reproduce or
  * triage from a log later (deviceType, model T-code, full serial, channel, codec), so a "capability

package/dist/model/capabilities/arming.d.ts

@@ -77,7 +77,8 @@ export declare const ARMING_CMD: {
      * was captured on holds a level-2 key and seals it level-2, while an own-session camera that never
      * negotiates one carries the same envelope level-1. See `armingCommand`.
      *
-     * A T8410C takes the mode as a direct frame instead of this envelope; see {@link DIRECT_ARMING_MODELS}.
+     * A T8410C and a T8410 take the mode as a direct frame instead of this envelope; see
+     * {@link DIRECT_ARMING_MODELS} and {@link BROADCAST_ARMING_MODELS}.
      */
     readonly SET_ARMING: 1224;
     /**

package/dist/model/capabilities/battery.d.ts

@@ -128,12 +128,9 @@ export declare const CELL_PARAMS: readonly number[];
  */
 export declare function isChargingState(v: string | number | boolean): boolean;
 /**
- * Every `battery` feature, declared once — the property schema, the evidence-gated getters, the derived
- * setters, the intent routes and the descriptions all come out of this table. Order is schema order.
- *
- * Each write is gated on the device reporting the param it reads back, because "has a battery" is much
- * weaker evidence than "speaks this setting": an entry sensor reports a level (1101) and nothing else,
- * and handing it a power-source frame it never accepts would look like success.
+ * The published `battery` table: the full camera surface, minus every member on the `sensor` codec —
+ * a sensor's 1101 is a non-cell sentinel and it has none of the camera power reads, so it exposes no
+ * battery entity (see {@link notOnSensor}). Every getter, setter and description derives from this.
  *
  * Exported but NOT published: each entry states its wire id and the evidence it was confirmed on,
  * which the reference site does not carry.
@@ -144,6 +141,9 @@ export declare const BATTERY_MEMBERS: {
      * The headline percentage, and this capability's detection evidence: reporting 1101 is what proves a
      * device is battery-powered, which is also the fact `MediaProvider` reads to decide a stream needs a
      * power budget. Published flat as `battery` — `level` alone is claimed by `suction` too.
+     *
+     * Withheld on a device that resolved `lock`, whose own `battery` member reads the same param 1101 and
+     * owns the `battery` property there, so the two do not both claim it.
      */
     readonly level: {
         readonly param: 1101;
@@ -152,6 +152,7 @@ export declare const BATTERY_MEMBERS: {
         readonly unit: "%";
         readonly kind: "percent";
         readonly provenance: "verified";
+        readonly available: (ctx: AvailabilityContext) => boolean;
         readonly description: "Battery level 0-100 (verified: param 1101).";
     };
     /**
@@ -170,7 +171,7 @@ export declare const BATTERY_MEMBERS: {
     /**
      * 1293 is the READABLE indicator (6445 is write-only/cloud-hidden). Verified live on a T8124R via an
      * app-toggle before/after diff: 0 = Battery, 1 = External Solar Panel. Values beyond 0/1 (some models
-     * report 5) are shown raw — `enumValues` only labels the two that are confirmed.
+     * report 5) read as `undefined` — `enumValues` holds only the two that are confirmed.
      *
      * The write is a `1350` SET_PAYLOAD, inner cmd 1293, `{charge_mode:N}`, `mValue3` 0 (the app uses 0,
      * not the cmd id), and the setter accepts a NAME as well as the index the getter answers.

package/dist/model/capabilities/camera.d.ts

@@ -263,6 +263,8 @@ export type CameraActions = Surface<typeof CAMERA_MEMBERS> & {
 };
 /** T8442 has a binary night-vision wire, unlike cameras with the three-mode 1277 control. */
 declare function isT8442(ctx: AvailabilityContext): boolean;
+/** A C30/C31 has reported no 1716 and no doorbell LED write was tried on it, so it keeps 1045. */
+declare const doorbellLed: (ctx: AvailabilityContext) => boolean;
 /**
  * Every `camera` feature, declared once. The property schema, the typed getters, the derived setters,
  * the intent routes, the media methods and the descriptions all come out of this table.
@@ -439,6 +441,10 @@ export declare const CAMERA_MEMBERS: {
      * sensor omits it, and the wire accepts the value regardless — the device's own reported set is the
      * only statement of which of the three it has. `coerceEnumValue` rejects a value outside
      * {@link NightVision} rather than coercing it. The payload key on the wire is `night_sion`.
+     *
+     * 1277 carries more than these three on some models: the V6 app's per-model mappings put modes on
+     * 3, 5, 6 and 8 as well, and which model takes which mapping is not in the app bundle. A reported value
+     * outside the published options reads as `undefined` rather than as an unnamed number.
      */
     readonly nightVision: {
         readonly param: 1277;
@@ -475,6 +481,8 @@ export declare const CAMERA_MEMBERS: {
      *
      * `transaction` is part of the frame that was captured, so it is sent. The recording sibling's own
      * confirmed frame carries no such field; neither is inferred from the other.
+     *
+     * Not offered where the device reports the doorbell's own live-view quality (1705).
      */
     readonly streamingQuality: {
         readonly accepts: StreamingQualityName;
@@ -483,7 +491,7 @@ export declare const CAMERA_MEMBERS: {
         readonly kind: "enum";
         readonly enumValues: Readonly<Record<number, string>>;
         readonly provenance: "verified";
-        readonly available: typeof isCameraCodec;
+        readonly available: (ctx: AvailabilityContext) => boolean;
         readonly args: readonly [{
             readonly name: "quality";
             readonly kind: "enum";
@@ -560,13 +568,14 @@ export declare const CAMERA_MEMBERS: {
         readonly readAvailable: (ctx: AvailabilityContext) => boolean;
         readonly readAliases: readonly [{
             readonly paramType: 1716;
-            readonly available: (ctx: AvailabilityContext) => boolean;
+            readonly available: typeof doorbellLed;
         }];
         readonly requiresRead: true;
         readonly description: "Camera status LED. Video doorbells report the same state under their button-ring LED parameter.";
         readonly write: (v: string | number | boolean, ctx: CommandContext) => Command;
     };
     readonly views: import("./members.js").ProvidedMember<"media", (() => readonly number[]) | undefined>;
+    readonly outputResolutions: import("./members.js").ProvidedMember<"media", (() => readonly "1080p"[]) | undefined>;
     /**
      * Media is not a property: it returns DATA rather than moving state, its options are richer than a
      * value, and it exists only on a device bound to a provider. Each is declared once, with its
@@ -596,8 +605,10 @@ export declare const CAMERA_MEMBERS: {
         timeoutMs?: number;
         skipKeyframes?: number;
     } | undefined) => Promise<Buffer<ArrayBufferLike>>)>;
+    /** The T8530 serves its live feed as a Readable too. */
     readonly openReadable: import("./members.js").ProvidedMember<"media", false | ((opts?: Parameters<NonNullable<MediaProvider["openReadable"]>>[0]) => Promise<import("node:stream").Readable>) | undefined>;
     readonly recordFragments: import("./members.js").ProvidedMember<"media", false | ((opts?: Parameters<NonNullable<MediaProvider["recordFragments"]>>[0]) => import("../../core/contracts.js").FragmentRecordingHandle) | undefined>;
+    /** A T8530 is offered the download behind a HomeBase 3 alone. */
     readonly downloadRecording: import("./members.js").ProvidedMember<"media", false | ((opts: Parameters<NonNullable<MediaProvider["downloadRecording"]>>[0]) => Promise<import("../../core/contracts.js").RecordingDownload>) | undefined>;
     /**
      * Push audio from the host to this camera's speaker. Gated on the **speaker** param specifically —

package/dist/model/capabilities/doorbell.d.ts

@@ -1,5 +1,7 @@
 import { type Surface } from "./members.js";
-import type { CapabilityModule } from "./types.js";
+import type { AvailabilityContext, CapabilityModule } from "./types.js";
+/** No doorbell write has been tried on a C30/C31, so only their ring event binds. */
+declare const writable: (ctx: AvailabilityContext) => boolean;
 /**
  * The P2P **feature-command ids** this doorbell capability drives. Capability-owned wire vocabulary
  * (transport forwards `cmd.param` opaquely; full id→name catalog in the generated
@@ -191,6 +193,7 @@ export declare const DOORBELL_MEMBERS: {
      */
     readonly chimeSwitch: {
         readonly param: 1702;
+        readonly available: typeof writable;
         readonly type: "bool";
         readonly kind: "boolean";
         readonly provenance: "verified";
@@ -203,6 +206,7 @@ export declare const DOORBELL_MEMBERS: {
      */
     readonly mechanicalChimeSwitch: {
         readonly param: 1703;
+        readonly available: typeof writable;
         readonly type: "bool";
         readonly kind: "boolean";
         readonly provenance: "verified";
@@ -212,6 +216,7 @@ export declare const DOORBELL_MEMBERS: {
     /** Same reasoning and the same capture session as {@link DOORBELL_MEMBERS.mechanicalChimeSwitch}. */
     readonly wdrSwitch: {
         readonly param: 1704;
+        readonly available: typeof writable;
         readonly type: "bool";
         readonly kind: "boolean";
         readonly provenance: "verified";
@@ -242,6 +247,7 @@ export declare const DOORBELL_MEMBERS: {
      */
     readonly dingdongVolume: {
         readonly param: 1717;
+        readonly available: typeof writable;
         readonly type: "number";
         readonly unit: "%";
         readonly kind: "percent";
@@ -259,6 +265,7 @@ export declare const DOORBELL_MEMBERS: {
      */
     readonly dingdongRingtone: {
         readonly param: 1718;
+        readonly available: typeof writable;
         readonly type: "number";
         readonly kind: "enum";
         readonly enumValues: Record<number, string>;
@@ -313,7 +320,9 @@ export declare const DOORBELL_MEMBERS: {
      * reads {@link DOORBELL_MEMBERS.videoQuality} and {@link DOORBELL_MEMBERS.highCompressionEncoding}
      * and passes what it wants, instead of the SDK guessing from a stale copy.
      */
-    readonly setVideoQuality: import("./members.js").MethodMember<(quality: DoorbellVideoQualityValue, highCompression: boolean) => Promise<void>>;
+    readonly setVideoQuality: import("./members.js").MethodMember<(quality: DoorbellVideoQualityValue, highCompression: boolean) => Promise<void>> & {
+        available: (ctx: import("./types.js").CommandContext) => boolean;
+    };
     /**
      * A config blob the device reports WHOLE, so it is typed `string` and handed back unparsed — three
      * settings live inside it (motion notifications, ring notifications, notification style) and the SDK
@@ -339,7 +348,9 @@ export declare const DOORBELL_MEMBERS: {
      */
     readonly playQuickResponse: import("./members.js").MethodMember<(voiceId: number, opts?: {
         engage?: boolean;
-    }) => Promise<void>>;
+    }) => Promise<void>> & {
+        available: (ctx: import("./types.js").CommandContext) => boolean;
+    };
     /**
      * Fetch the doorbell's quick-response list — a P2P request/reply query that returns data, so it
      * exists only on a device bound to a media provider that offers one.
@@ -352,3 +363,4 @@ export declare const DOORBELL_MEMBERS: {
     }) => Promise<QuickResponse[]>) | undefined>;
 };
 export declare const DOORBELL: CapabilityModule;
+export {};

package/dist/model/capabilities/index.d.ts

@@ -388,7 +388,7 @@ export interface DeviceEventMap {
  * with the type. (Only capabilities whose module defines `actions()` appear.)
  */
 export interface DeviceActionMap {
-    /** Pan/tilt/zoom control: `rotate(dir, step)` + `left`/`right`/`up`/`down`, `zoom`, preset() namespace (goto/preview/save/setDefault/delete/list/image). */
+    /** Pan/tilt/zoom control: `rotate(dir, step)` + `left`/`right`/`up`/`down`, `rotate360`, `zoom`, preset() namespace (goto/preview/save/setDefault/delete/list/image). */
     ptz: PtzActions;
     /** Floodlight/spotlight: `on`/`off`/`set`, `setBrightness`/`setColorTemp`/`setEnabled`, `setAutoSpotlight`. */
     light: LightActions;

package/dist/model/capabilities/members.d.ts

@@ -576,12 +576,14 @@ export declare function memberWrite(name: string, m: ValueMember, value: boolean
  * is stored as a decoded object. Handing either through a getter typed `number` is the one lie this
  * table exists to prevent.
  *
+ * A number outside `values`, the options published for this device, answers `undefined`.
+ *
  * Exported so the ONE narrowing the getters use is also the one a property-change announcement carries.
  * A second conversion of the wire value is precisely how a payload comes to disagree with the getter
  * beside it, which would defeat the point of announcing the change at all.
  * @internal
  */
-export declare function narrow(type: PropertyValueType, read: CapabilityStateReader, prop: string): boolean | number | string | undefined;
+export declare function narrow(type: PropertyValueType, read: CapabilityStateReader, prop: string, values?: Record<number, string>): boolean | number | string | undefined;
 /**
  * Both presence gates at once: the params a member requires, and its own {@link ValueMember.available}.
  *

package/dist/model/capabilities/motion.d.ts

@@ -1,5 +1,5 @@
 import { type Surface } from "./members.js";
-import type { CapabilityModule, CommandContext } from "./types.js";
+import type { AvailabilityContext, CapabilityModule, CommandContext } from "./types.js";
 import type { Command } from "../../core/contracts.js";
 /**
  * The P2P **feature-command ids** this motion capability drives. Capability-owned wire vocabulary
@@ -125,6 +125,13 @@ export declare const MOTION_CMD: {
      * as a `1700` control payload carrying an index rather than the `1350` envelope its siblings take.
      */
     readonly INDOOR_SENSITIVITY_INDEX: 6041;
+    /**
+     * Motion detection on-off on a T8410 (app `CMD_INDOOR_DET_SET_MOTION_DETECT_ENABLE`). `1700` control
+     * payload `{"commandType":6040,"data":{"enable":0,"quality":0,"status":0|1,"value":0}}`.
+     *
+     * ⚠️ Replay + readback confirmed on a standalone and a HomeBase 3-attached T8410, NOT byte-captured.
+     */
+    readonly INDOOR_MOTION_ENABLE: 6040;
     /**
      * Detection sensitivity a solo camera REPORTS (app `SET_MOTION_DETECTION_SENSITIVITY_SOLO`). It does
      * not accept writes on this id — the write goes to {@link MOTION_SENSITIVITY}, which is why a scale
@@ -187,6 +194,8 @@ export declare function decodeAiDetectType(value: number): AiDetectFlags;
  * `ai_detect_type` field of the JSON object form. Answers `undefined` for any other shape.
  */
 declare function decodeAiDetectTypeParam(raw: unknown): number | undefined;
+/** A T8410, whose motion switch is {@link MOTION_CMD.INDOOR_MOTION_ENABLE} rather than {@link MOTION_CMD.CAMERA_PIR}. */
+declare function isT8410(ctx: AvailabilityContext): boolean;
 /**
  * Decode a `radar_wd_switch` (2706, loitering) read the way the app does:
  * `typeof v === "object" ? v.radar_wd_switch : v`. The device may store it as a JSON object
@@ -227,7 +236,12 @@ export declare const MOTION_MEMBERS: {
         readonly type: "bool";
         readonly kind: "boolean";
         readonly provenance: "verified";
-        readonly description: "Motion/PIR detection enabled (verified: param 1011 = CAMERA_PIR).";
+        readonly readAvailable: (ctx: AvailabilityContext) => boolean;
+        readonly readAliases: readonly [{
+            readonly paramType: 6040;
+            readonly available: typeof isT8410;
+        }];
+        readonly description: string;
         readonly write: (v: string | number | boolean, ctx: CommandContext) => Command;
         readonly writeAs: "setDetection";
     };

package/dist/model/capabilities/mower.d.ts

@@ -34,9 +34,9 @@ export declare const MOWER_DP: {
     readonly SPARSE_LAWN_OPTIMIZATION: 141;
 };
 /** The `net_media_type` (DP 134) range, as the schema lists it. */
-export declare const MOWER_NETWORKS: readonly ["None", "Wifi", "Cellular"];
+declare const MOWER_NETWORKS: readonly ["None", "Wifi", "Cellular"];
 /** The mower's network link (DP 134). */
-export type MowerNetwork = (typeof MOWER_NETWORKS)[number];
+type MowerNetwork = (typeof MOWER_NETWORKS)[number];
 /**
  * Every `mower` read, declared once.
  *
@@ -228,3 +228,4 @@ export declare const MOWER_MEMBERS: {
 export type MowerActions = Surface<typeof MOWER_MEMBERS>;
 /** `mower` — robot-mower state from its Tuya data points. */
 export declare const MOWER: CapabilityModule;
+export {};

package/dist/model/capabilities/ptz.d.ts

@@ -5,7 +5,7 @@ import type { Command } from "../../core/contracts.js";
  * The P2P **feature-command ids** this pan-tilt capability drives. Capability-owned wire vocabulary
  * (transport forwards `cmd.param` opaquely; full id→name catalog in the generated
  * `transport/p2p/commands.ts`). Distinct from the {@link PTZ_ROTATE} direction map below (which is
- * `rotate_type` 1..4, not a command id).
+ * `rotate_type` 0..4, not a command id).
  *
  * Ids + envelopes are taken from the V6 app's own command builders (the `Set*Parser`/`*PositionsParser`
  * classes in the decompiled JS), which is this project's wire ground truth — NOT a third-party
@@ -135,9 +135,11 @@ export declare const PtzDirection: {
     readonly down: "down";
 };
 export type PtzDirection = (typeof PtzDirection)[keyof typeof PtzDirection];
-/** Pan-tilt rotate direction → `rotate_type` (the on-wire code). Not re-exported by the barrel —
- * stays internal to the capability. Confirmed on hardware (T8425): 1=left, 2=right, 3=up, 4=down. */
+/** Pan-tilt rotate motion → `rotate_type` (the on-wire code). Not re-exported by the barrel —
+ * stays internal to the capability. Confirmed on hardware (T8425): 1=left, 2=right, 3=up, 4=down.
+ * `sweep` (0) is a full 360° pan (room scan), from the app's 360 button. */
 export declare const PTZ_ROTATE: {
+    readonly sweep: 0;
     readonly left: 1;
     readonly right: 2;
     readonly up: 3;
@@ -145,7 +147,7 @@ export declare const PTZ_ROTATE: {
 };
 /**
  * Pan-tilt rotate as a transport-neutral {@link Command}. CONFIRMED wire command (captured on
- * T8425 ch3 during live-view): `{"commandType":6030,"data":{"cmd_type":1,"rotate_type":1..4,
+ * T8425 ch3 during live-view): `{"commandType":6030,"data":{"cmd_type":1,"rotate_type":0..4,
  * "zoom":1.0}}` under the generic control wrapper `1700` on the camera channel. `cmd_type:1` =
  * move; `zoom` defaults to 1.0.
  *
@@ -153,7 +155,7 @@ export declare const PTZ_ROTATE: {
  * resolver picks the encryption level by topology (standalone → L1, HomeBase → L2). A PT cam can be
  * either, so the level is NOT fixed here.
  */
-export declare function rotateCommand(direction: PtzDirection, ctx: CommandContext, zoom?: number): Command;
+export declare function rotateCommand(direction: keyof typeof PTZ_ROTATE, ctx: CommandContext, zoom?: number): Command;
 /**
  * Digital-zoom as a transport-neutral {@link Command}. The V6 app's `SetPictureZoomParser` builds a
  * `SET_PAYLOAD` (1350) sub-command `COMMAND_DUAL_CAMERA_ZOOM` with the crop-window payload
@@ -266,6 +268,10 @@ export declare const PTZ_MEMBERS: {
     readonly up: import("./members.js").MethodMember<() => Promise<void>>;
     /** Rotate one step down. */
     readonly down: import("./members.js").MethodMember<() => Promise<void>>;
+    /** Pan a full 360° (room scan). */
+    readonly rotate360: import("./members.js").MethodMember<() => Promise<void>> & {
+        available: (ctx: CommandContext) => boolean;
+    };
     /**
      * Zoom rides a SECOND (telephoto) lens, so it is offered only where the device shows zoom evidence —
      * otherwise `dev.ptz()?.zoom` would be a silent no-op on a single-lens pan-tilt camera.

package/dist/model/capabilities/vacuum-clean.d.ts

@@ -280,6 +280,16 @@ export declare function encodeSelectZonesClean(mapId: number, zones: readonly Va
  * @internal
  */
 export declare function encodeSceneClean(sceneId: number): string;
+/**
+ * Build one of the two DP 153 writes the vendor app sends when its map view opens: the time in
+ * microseconds, and on the second write field 2 set to `1`.
+ *
+ * Captured from the vendor app on the device's `cmd/…/req` leg, three times with the same layout. The
+ * product catalogue lists DP 153 as uplink-only (`WorkStatus`); the vendor app writes this message to it
+ * all the same. {@link VACUUM_CLEAN_MEMBERS.requestMap} dispatches both.
+ * @internal
+ */
+export declare function encodeMapWatch(nowMs: number, watching: boolean): string;
 /**
  * Build a whole-floor auto clean carrying an `AutoClean` payload of one pass.
  * @internal
@@ -1986,6 +1996,19 @@ export declare const VACUUM_CLEAN_MEMBERS: {
     readonly startScene: import("./members.js").MethodMember<(sceneId: number) => Promise<void>> & {
         available: (ctx: import("./types.js").CommandContext) => boolean;
     };
+    /**
+     * Ask the robot to push its whole map — plane, room outline, room list and restricted zones — on the
+     * map stream, as the vendor app does when its map view opens: two DP 153 writes, the time and then the
+     * time with field 2 set (see {@link encodeMapWatch}).
+     *
+     * A docked robot sends no map of its own accord, so this is how its room ids and names become
+     * readable without a clean. The map arrives on the stream like any other, not as this call's result.
+     *
+     * WATCHED: sent to a docked robot, it pushed its whole map within a second.
+     */
+    readonly requestMap: import("./members.js").MethodMember<() => Promise<void>> & {
+        available: (ctx: import("./types.js").CommandContext) => boolean;
+    };
     /**
      * State the cleaning settings a run uses — `CleanParamRequest.clean_param` over DP 154.
      *

package/dist/model/device-family.d.ts

@@ -52,10 +52,12 @@ export declare const isHomeBase: (ctx: FamilyContext) => boolean;
 export declare const isStation9000: (ctx: FamilyContext) => boolean;
 /** T8N00 NVR, identified by its reported model. */
 export declare const isNvrT8N00: (ctx: FamilyContext) => boolean;
-/** PoE cameras whose media is served by their NVR's portal call. */
+/** A camera attached to a T8N00 whose media the NVR's call serves. */
 export declare const isNvrMediaCamera: (ctx: FamilyContext) => boolean;
 /** PoE S4 camera with independently streamed fixed and movable optical views. */
 export declare const isNvrDualLensCamera: (ctx: FamilyContext) => boolean;
+/** NVR cameras verified to support an explicit 1080p live output. */
+export declare const isNvrFullHdCamera: (ctx: FamilyContext) => boolean;
 /** Video Doorbell C31 (T8223) or C30 (T8224), streamed by the app over the portal `call` route. */
 export declare const isCallDoorbell: (ctx: FamilyContext) => boolean;
 /** Wired doorbell (DeviceType.DOORBELL). */

package/dist/model/device-types.d.ts

@@ -112,6 +112,7 @@ export declare const DeviceType: {
     readonly LOCK_85D0: 202;
     readonly LOCK_85V0: 203;
     readonly LOCK_85P0: 209;
+    readonly WALL_LIGHT_CAM_T86C1: 298;
     readonly NVR_S4_MAX: 300;
     readonly CAMERA_POE_S4: 301;
     readonly WALL_LIGHT_CAM_81A0: 10005;

package/dist/transport/http/mega-client.d.ts

@@ -1,6 +1,7 @@
 import { type SessionEntry } from "../../core/crypto.js";
 import { type SessionStore } from "../../core/store.js";
 import { type Logger } from "../../core/logger.js";
+import type { EufyDevice } from "../../core/types.js";
 import type { SecureMqttCredentials } from "../mqtt/secure-mqtt.js";
 export type RegionShard = "eu-pr" | "us-pr";
 /**
@@ -211,6 +212,8 @@ export declare class MegaHttpClient {
     private region;
     /** The host `estimate_domain` answered, persisted with the session. */
     private estimatedDomain;
+    /** The in-flight (then settled, so cached) RTC-sign shard request from {@link portalShard}. */
+    private portalShardInFlight?;
     private bootstrapDomain?;
     private sessionKey?;
     /** Per-host ECDH session keys for non-mega gateways (e.g. eufylife) keyed by host. */
@@ -282,11 +285,19 @@ export declare class MegaHttpClient {
     /** The active region shard (e.g. `"eu-pr"`, `"us-pr"`), set after {@link login} or a region override. */
     get regionShard(): RegionShard;
     /**
-     * The shard the RTC signalling signs on: the regional prefix of the estimated domain
-     * (`…-ie-…`/`…-ie.` → `ie-pr`), else {@link regionShard}. The eu/us classification cannot name shards
-     * like `ie-pr`, whose accounts need the IE sign host and cluster.
+     * The shard the estimated domain names (`…-ie-…`/`…-ie.` → `ie-pr`), else {@link regionShard}. The
+     * eu/us classification cannot name shards like `ie-pr`.
      */
     get rtcShard(): string;
+    /**
+     * The shard the RTC signalling signs on, from `estimate_domain` asked with the portal's WEB identity
+     * (`Model-Type: WEB`, `App-Name: eufy_mega`) — the identity the sign itself is sent with, which can name
+     * a different shard than the PHONE identity does for one account. The in-flight request is shared by
+     * concurrent first callers, and once it settles to a shard the resolved promise is the cache; a call
+     * that fails or names no shard answers {@link rtcShard}, clears the field and is asked again next time.
+     */
+    portalShard(): Promise<string>;
+    private fetchPortalShard;
     /**
      * The credentials the RTC signalling needs; `undefined` while logged out. The sign is refused
      * ("gtoken not equal userid") unless its gtoken is the one every authed HTTP call carries.
@@ -333,6 +344,8 @@ export declare class MegaHttpClient {
      * raw text. Never throws on HTTP status (the callers classify the envelope themselves). 20s timeout.
      */
     private httpPost;
+    /** POST `estimate_domain` with the given identity headers. */
+    private estimateDomainRequest;
     /** Step 1: discover the account's region shard (and the bootstrap host). */
     estimateDomain(): Promise<void>;
     /**
@@ -354,11 +367,11 @@ export declare class MegaHttpClient {
     /** Authed call to a mega service host: app-{service}-{region}.eufy.com. */
     post<T = unknown>(service: string, path: string, body?: unknown, headerOverrides?: Record<string, string>): Promise<T>;
     /**
-     * Fetch the per-station DSK key used in the P2P cloud-lookup payload. Mirrors
+     * Fetch the per-station DSK key using each station's reported cloud category. Mirrors
      * the legacy `get_dsk_keys` body shape on the mega devicerelation service.
      * The P2P *local* lookup path does not need this; only the cloud path does.
      */
-    getDskKeys(stationSns: string[], priorDsks?: Record<string, string>): Promise<Record<string, {
+    getDskKeys(stations: ReadonlyArray<Pick<EufyDevice, "sn" | "category">>, priorDsks?: Record<string, string>): Promise<Record<string, {
         dskKey: string;
         expiration: number;
     }>>;

package/dist/transport/mqtt/biz-stream.d.ts

@@ -12,44 +12,41 @@ export declare const BIZ_PROTOCOL: {
     readonly LIVE_PHOTO: 43;
 };
 /**
- * The channels a map frame can arrive on, by id.
+ * The channels a map frame arrives on, by id, as a robot's own frames identify them.
  *
- * **The trap.** Ids 1–10 come from `Metadata.ChanIds` in `stream.proto`, where each *field* names a
- * message and each field's *value* is the id the device chose for it. The names below pair each
- * channel with its field NUMBER, because that is the numbering the vendor ships and the one a live
- * capture shows — but a device announcing a `Metadata` frame is announcing its own numbering, and a
- * firmware that renumbers would make this table wrong without making it look wrong. Anything that
- * *decodes* a channel's bytes must therefore prefer a device-declared mapping when one has been seen;
- * this table is the default to fall back on, not an authority.
+ * Each id is paired with the `stream.proto` message whose field layout its frames carry, which is not
+ * the field-number order of `Metadata.ChanIds`: the cell plane (`Map`) arrives on 2, its room outline
+ * on 4, the room list on 5, the restricted zones on 6, the robot's pose (`DynamicData`) on 7, the map's
+ * `MapDescription` on 60 and a whole `MapBackup` on 68. A `Metadata` frame would declare a device's own numbering; none has been seen,
+ * so none is read, and this table is the numbering every frame is read by.
  *
- * Channel 0 is the exception and is not in `ChanIds` at all: the app hard-codes it, routing it to a
- * scene-data event rather than a map one, and asks for the scene list on it by number. That one is
- * fixed.
+ * Only channels whose message is identified are listed. A channel whose frames carry too little to
+ * identify, or that carries a message nothing here reads, is absent.
+ *
+ * Channel 0 is not in `ChanIds` at all: the app hard-codes it, routing it to a scene-data event rather
+ * than a map one, and asks for the scene list on it by number.
  */
 export declare const BIZ_CHANNEL: {
     /** Scene (room-group) data. Hard-coded in the app, not part of `ChanIds`. */
     readonly SCENES: 0;
-    readonly MAP_INFO: 1;
-    readonly PATH: 2;
-    readonly ROOM_OUTLINE: 3;
-    readonly ROOM_PARAMS: 4;
-    readonly RESTRICTED_ZONE: 5;
-    readonly DYNAMIC_DATA: 6;
-    readonly TEMPORARY_DATA: 7;
-    readonly OBSTACLE_INFO: 8;
-    readonly MAP_DATA: 9;
-    readonly CRUISE_DATA: 10;
+    readonly MAP_DATA: 2;
+    readonly ROOM_OUTLINE: 4;
+    readonly ROOM_PARAMS: 5;
+    readonly RESTRICTED_ZONE: 6;
+    readonly DYNAMIC_DATA: 7;
+    readonly MAP_DESCRIPTION: 60;
+    readonly MAP_BACKUP: 68;
 };
-/** A channel's name under the default numbering — see the trap in {@link BIZ_CHANNEL}. */
+/** A channel's name under the {@link BIZ_CHANNEL} numbering. */
 export type BizChannel = keyof typeof BIZ_CHANNEL;
 /**
- * Name a channel id under the default numbering, or `undefined` for an id the vendor's table does not
- * list. Not a substitute for a device-declared mapping where one exists.
+ * Name a channel id under the {@link BIZ_CHANNEL} numbering, or `undefined` for an id it does not list.
+ * Not a substitute for a device-declared mapping where one exists.
  */
 export declare function bizChannelName(id: number): BizChannel | undefined;
 /** One frame off the map stream, unwrapped as far as its bytes but not decoded. */
 export interface BizMapFrame {
-    /** Which channel the bytes belong to. Compare against {@link BIZ_CHANNEL}, mindful of its trap. */
+    /** Which channel the bytes belong to. Compare against {@link BIZ_CHANNEL}. */
     readonly channelId: number;
     /**
      * The vendor's `clear_type`. Forwarded, not interpreted: the app passes it straight through to its

package/dist/transport/p2p/audio-frame.d.ts

@@ -12,3 +12,16 @@ export declare const AUDIO_TYPE_OFFSET = 5;
  * itself when a stream produces no audio at all, to feed its decoder silence.
  */
 export declare const AUDIO_CODECS: Readonly<Record<number, AudioCodec>>;
+/**
+ * Whether an audio frame is sealed: after its header, a 16-byte GCM tag and a 12-byte nonce precede the
+ * `u32@0` bytes its header declares, where a frame in the clear carries those bytes straight after the header.
+ * A stream whose keyframes wrap their media key in an ECIES envelope seals its audio this way, measured on
+ * HomeBase recordings and on HomeBase 3 live streams answering a P-256 start.
+ */
+export declare function isSealedAudio(frame: Buffer): boolean;
+/**
+ * The payload of a sealed audio frame ({@link isSealedAudio}), opened with AES-256-GCM under `mediaKey`, the
+ * media key of the keyframe before it, with the video frames' AAD. Answers `undefined` for a frame that is not
+ * sealed or does not authenticate under that key.
+ */
+export declare function openSealedAudio(frame: Buffer, mediaKey: Buffer): Buffer | undefined;

package/dist/transport/p2p/codec.d.ts

@@ -94,6 +94,12 @@ export declare function p2pCommandEncryptionKey(stationSn: string, p2pDid: strin
 export declare function decryptP2PData(data: Buffer, key: Buffer): Buffer;
 /** The `cipher_id` named in a decrypted `CMD_GATEWAYINFO` (1100) payload (uint16 LE @0). */
 export declare function gatewayInfoCipherId(gwPayload: Buffer): number;
+/**
+ * Whether a `CMD_GATEWAYINFO` (1100) reply is a level-2 refusal: int32 LE `GATEWAY_LEVEL2_REFUSED` (`99 ff
+ * ff ff`) in place of a cipher. {@link gatewayInfoCipherId} reads those bytes as `cipher_id` 65433. Any other
+ * opening is not a refusal.
+ */
+export declare function gatewayInfoRefused(gwPayload: Buffer): boolean;
 /** Options for {@link eciesUnwrap}. */
 export interface EciesUnwrapOptions {
     /**
@@ -224,8 +230,8 @@ export declare function buildRawCommandPayload(data: Buffer, channel?: number, s
 export declare function buildAckPayload(dataTypeHeader: Buffer, seqNo: number): Buffer;
 /** Parse the 16-byte data-frame header that follows the "XZYH" magic. */
 export declare function parseDataFrameHeader(frame: Buffer): P2PDataFrameHeader;
-/** Parse a LOOKUP_ADDR or RLY_TO message's leading address record. */
-export declare function parseLookupAddr(msg: Buffer): Address;
+/** A LOOKUP_ADDR message's leading address record, or `undefined` for a message too short to carry it. */
+export declare function parseLookupAddr(msg: Buffer): Address | undefined;
 /** The relay servers a LIST_REQ_ACK names, in the order listed, without the unspecified address; records past the message's end are dropped. */
 export declare function parseRelayList(msg: Buffer): Address[];
 /** A RLY_PORT_ACK's mark and relay port, or `undefined` for a message too short to carry them. */