homebridge-mynest 2.1.0 → 2.1.2

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 All notable changes to this project are documented here. From the first release onward, [release-please](https://github.com/googleapis/release-please) owns this file — do not hand-edit version headings after `0.1.0` ships.
 
+## [2.1.2](https://github.com/tbaur/homebridge-mynest/compare/v2.1.1...v2.1.2) (2026-10-26)
+
+
+### Bug Fixes
+
+* page auth-failed when Nest rejects the token ([#72](https://github.com/tbaur/homebridge-mynest/issues/72)) ([d69bf69](https://github.com/tbaur/homebridge-mynest/commit/d69bf69e1e67e4f75e8a5148edcbd2c933499ee4))
+
+## [2.1.1](https://github.com/tbaur/homebridge-mynest/compare/v2.1.0...v2.1.1) (2026-10-26)
+
+
+### Bug Fixes
+
+* log raw Protect REST fields at debug, not on every arrival ([#69](https://github.com/tbaur/homebridge-mynest/issues/69)) ([44c7cd9](https://github.com/tbaur/homebridge-mynest/commit/44c7cd95c6502047eaf3b9501a861d3085af8c85))
+* stop faulting temperature sensors when the house is quiet ([#71](https://github.com/tbaur/homebridge-mynest/issues/71)) ([793601c](https://github.com/tbaur/homebridge-mynest/commit/793601c9a673d7ad5debf6eac220c473f6683387))
+
 ## [2.1.0](https://github.com/tbaur/homebridge-mynest/compare/v2.0.2...v2.1.0) (2026-10-26)
 
 

package/README.md

@@ -108,8 +108,8 @@ The [detailed documentation](docs/README-DETAILED.md#full-configuration-referenc
 1. **Authentication error:** token missing, truncated, Google JWT/`ya29.`, or revoked. Capture a fresh Nest Account token ([docs/AUTH.md](docs/AUTH.md)).
 2. **Thermostat missing:** modern thermostats are Observe-only on some accounts. Enable `debug` for stream detail.
 3. **Eco / setpoint changes snap back:** enable **Allow thermostat control**.
-4. **Protect smoke/CO shows a fault:** REST has not supplied that sensor's number, or the REST feed is stale. The tile stays. A line `REST topaz auto_away=... smoke_status=... co_status=...` is the raw reading, including when the summary sentence did not change.
-5. **No occupancy, or a room that stays Occupied:** occupancy is Nest's `auto_away` inverted (false means Occupied), not motion. It is omitted for a battery Protect, when `auto_away` is missing, or when `exposeProtectOccupancy` is off. A stuck Occupied is that boolean staying false. The `REST topaz` line shows the raw value each time a Protect object arrives.
+4. **Protect smoke/CO shows a fault:** REST has not supplied that sensor's number, or the REST feed is stale. The tile stays. With `debug` on, a `REST topaz` line shows the raw `smoke_status` and `co_status` Nest sent.
+5. **No occupancy, or a room that stays Occupied:** occupancy is Nest's `auto_away` inverted (false means Occupied), not motion. It is omitted for a battery Protect, when `auto_away` is missing, or when `exposeProtectOccupancy` is off. A stuck Occupied is that boolean staying false. The Protect's summary line, such as `Zone One Protect: Smoke ok, CO ok, Occupied`, shows the change when it happens.
 
 The [full troubleshooting list](docs/README-DETAILED.md#troubleshooting) covers more cases, including a stuck Home app tile.
 

package/dist/accessories/temperature-sensor.js

@@ -28,7 +28,7 @@ class TemperatureSensorAccessory extends base_1.NestAccessory {
         // No temperature yet is not a live 0 °C. HAP's default for this
         // characteristic is 0, and 0 is inside the legal range, so the fault is
         // what tells Home the number is not a reading. A later real 0 °C clears it.
-        this.binder.bind(this.#service, Characteristic.StatusFault, () => (this.state.isObserveStale === true || this.state.temperatureC === undefined || this.isUnreported
+        this.binder.bind(this.#service, Characteristic.StatusFault, () => (this.state.temperatureC === undefined || this.isUnreported
             ? Characteristic.StatusFault.GENERAL_FAULT
             : Characteristic.StatusFault.NO_FAULT));
         this.binder.bind(this.#service, Characteristic.CurrentTemperature, () => this.state.temperatureC);

package/dist/api/session.d.ts

@@ -33,7 +33,7 @@ export declare function authenticatedHeaders(session: NestSession): Record<strin
 /**
  * Exchange the configured access token for a usable session.
  *
- * @throws {AuthenticationError} When Nest rejects the token.
+ * @throws {AuthenticationError} When Nest rejects the token (HTTP 400 or 401).
  * @throws {SessionShapeError} When the response is accepted but omits a field
  *   the plugin needs, or names a transport host off Nest infrastructure. Either
  *   means Nest changed the contract; a new token would not help.

package/dist/api/session.js

@@ -48,26 +48,42 @@ function authenticatedHeaders(session) {
         'Content-Type': 'application/json',
     };
 }
+/**
+ * Fetch `GET /session`, reporting HTTP 400 or 401 as a rejected token.
+ *
+ * @throws {AuthenticationError} On HTTP 400 or 401.
+ */
+async function requestSession(options) {
+    try {
+        return await (0, http_1.requestJson)(options.endpoints.sessionUrl, {
+            method: 'GET',
+            headers: sessionHeaders(options.accessToken),
+            timeoutMs: settings_1.SESSION_TIMEOUT_MS,
+            fetchImpl: options.fetchImpl,
+            signal: options.signal,
+        });
+    }
+    catch (error) {
+        if (!(0, errors_1.isSessionTokenRejection)(error) || error instanceof errors_1.AuthenticationError) {
+            throw error;
+        }
+        throw new errors_1.AuthenticationError(error.message, { cause: error, status: error.httpStatus });
+    }
+}
 /**
  * Exchange the configured access token for a usable session.
  *
- * @throws {AuthenticationError} When Nest rejects the token.
+ * @throws {AuthenticationError} When Nest rejects the token (HTTP 400 or 401).
  * @throws {SessionShapeError} When the response is accepted but omits a field
  *   the plugin needs, or names a transport host off Nest infrastructure. Either
  *   means Nest changed the contract; a new token would not help.
  */
 async function openSession(options) {
-    const { accessToken, endpoints, log } = options;
+    const { accessToken, log } = options;
     if (log.debugEnabled) {
         log.debug(`Opening a Nest session with the configured token ${(0, sanitizers_1.previewSecret)(accessToken)}`);
     }
-    const body = await (0, http_1.requestJson)(endpoints.sessionUrl, {
-        method: 'GET',
-        headers: sessionHeaders(accessToken),
-        timeoutMs: settings_1.SESSION_TIMEOUT_MS,
-        fetchImpl: options.fetchImpl,
-        signal: options.signal,
-    });
+    const body = await requestSession(options);
     const token = typeof body.access_token === 'string' ? body.access_token : undefined;
     // Only a scalar. `String()` accepts anything, so an object would become
     // `'[object Object]'` — truthy, so it passes the missing-field check below and

package/dist/api/transport.d.ts

@@ -33,11 +33,6 @@ export interface NestTransportOptions {
      * on). Absent on callers that only have the merged map.
      */
     onBuckets: (buckets: BucketMap, updatedKeys?: readonly string[]) => void;
-    /**
-     * Called when decoded Observe device traits have been missing for
-     * {@link OBSERVE_DEVICE_DATA_STALE_MS}, and again when one arrives.
-     */
-    onObserveDeviceData?: (stale: boolean) => void;
     /**
      * Called when a new Observe connection is about to open.
      *
@@ -78,11 +73,6 @@ export interface NestTransportOptions {
     statusHeartbeatMs?: number;
     observeSilenceCheckMs?: number;
     forbiddenReprobeMs?: number;
-    /**
-     * How long with no decoded device trait before temperature sensors fault.
-     * Defaults to {@link OBSERVE_DEVICE_DATA_STALE_MS}. Tests set a short value.
-     */
-    observeDataStaleMs?: number;
     /** Injected REST subscribe breaker (tests); defaults to a fresh instance. */
     restCircuitBreaker?: CircuitBreaker;
     /** Injected `app_launch` breaker (tests); defaults to a fresh instance. */

package/dist/api/transport.js

@@ -74,8 +74,6 @@ class NestTransport {
     #lastObserveFrameAt = null;
     /** Decoded `DEVICE_` traits in the Observe session that is open now. */
     #decodedDeviceTraitsThisSession = 0;
-    #observeDataStale = false;
-    #observeDataStaleTimer = null;
     #loopRestartTimers = new Map();
     #observeSessionOpen = false;
     #restLoopRunning = false;
@@ -251,7 +249,6 @@ class NestTransport {
         // default `--unhandled-rejections=throw` — taking every other plugin down.
         this.#startLoop('Observe', () => this.#runObserveLoop());
         this.#startLoop('REST', () => this.#runSubscribeLoop());
-        this.#scheduleObserveDataStale();
         if (this.#options.statusHeartbeatEnabled !== false) {
             this.#startStatusHeartbeat();
         }
@@ -331,10 +328,6 @@ class NestTransport {
             this.#observeStartupWarnTimer = null;
         }
         this.#clearRestAlarmFeedStaleTimer();
-        if (this.#observeDataStaleTimer) {
-            clearTimeout(this.#observeDataStaleTimer);
-            this.#observeDataStaleTimer = null;
-        }
         for (const timer of this.#loopRestartTimers.values()) {
             clearTimeout(timer);
         }
@@ -647,45 +640,15 @@ class NestTransport {
         if (status?.code !== undefined && status.code !== 0) {
             this.#options.log.debug(`Observe stream reported status ${status.code}${status.message ? `: ${status.message}` : ''}`);
         }
+        // Observe sends device traits only on change, so a quiet house can go a
+        // long time without one. This counts them only to judge a session productive.
         if (traits.some((trait) => trait.resourceId.startsWith(classify_1.OBSERVE_DEVICE_PREFIX))) {
-            this.#noteDecodedDeviceTrait();
+            this.#decodedDeviceTraitsThisSession++;
         }
         if (traits.length > 0) {
             this.#options.onTraits(traits);
         }
     }
-    /** A decoded device trait is the only Observe event that means the house is live. */
-    #noteDecodedDeviceTrait() {
-        this.#decodedDeviceTraitsThisSession++;
-        if (this.#observeDataStale) {
-            this.#observeDataStale = false;
-            this.#options.log.info('Observe: device updates resumed');
-            this.#options.onObserveDeviceData?.(false);
-        }
-        this.#scheduleObserveDataStale();
-    }
-    /**
-     * Mark temperature sensors faulted if this long passes with no decoded
-     * device trait. Thermostats keep their last values.
-     *
-     * Catalog frames still increment `#observeFrames` and would otherwise keep
-     * the stream looking healthy.
-     */
-    #scheduleObserveDataStale() {
-        if (this.#observeDataStaleTimer) {
-            clearTimeout(this.#observeDataStaleTimer);
-        }
-        this.#observeDataStaleTimer = setTimeout(() => {
-            this.#observeDataStaleTimer = null;
-            if (this.#isStopped || this.#observeDataStale) {
-                return;
-            }
-            this.#observeDataStale = true;
-            this.#options.log.warn('Observe: no device updates for 10 min, temperature sensors marked faulted');
-            this.#options.onObserveDeviceData?.(true);
-        }, this.#options.observeDataStaleMs ?? settings_1.OBSERVE_DEVICE_DATA_STALE_MS);
-        this.#observeDataStaleTimer.unref?.();
-    }
     /**
      * Run a transport loop, and start it again if it throws.
      *

package/dist/errors/index.d.ts

@@ -28,7 +28,8 @@ export declare class ConfigurationError extends NestError {
     readonly isRetryable = false;
 }
 /**
- * Nest rejected the access token (HTTP 401).
+ * Nest rejected the access token: HTTP 401 anywhere, or HTTP 400 from the
+ * session endpoint (see {@link isSessionTokenRejection}).
  *
  * Not retryable: the token is copied by hand from a browser session and only a
  * new one will help. Retrying a rejected token is also how an account attracts
@@ -37,11 +38,24 @@ export declare class ConfigurationError extends NestError {
 export declare class AuthenticationError extends NestError {
     readonly code = "AUTH_ERROR";
     readonly isRetryable = false;
-    readonly httpStatus = 401;
+    readonly httpStatus: number;
     constructor(message?: string, options?: {
         cause?: Error;
+        status?: number;
     });
 }
+/**
+ * Whether a failed session open proves the configured token is unusable.
+ *
+ * The session endpoint takes nothing but the token, and Nest answers a
+ * missing or bad one with 400 (`invalid_request`) or 401. Every other failure
+ * retries, because a 403 or an unfamiliar code can be an edge block that
+ * clears on its own. Retrying never hides an outage: the alarm feed goes stale
+ * and alarm-feed-stale pages whatever the cause.
+ */
+export declare function isSessionTokenRejection(error: unknown): error is NestError & {
+    httpStatus: number;
+};
 /**
  * Nest answered HTTP 403 Forbidden.
  *

package/dist/errors/index.js

@@ -9,6 +9,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CircuitBreakerError = exports.ObserveStreamError = exports.ApiParseError = exports.ApiResponseError = exports.RateLimitError = exports.TimeoutError = exports.NetworkError = exports.SessionShapeError = exports.ForbiddenError = exports.AuthenticationError = exports.ConfigurationError = exports.NestError = void 0;
+exports.isSessionTokenRejection = isSessionTokenRejection;
 exports.isFatalTransportError = isFatalTransportError;
 exports.isCircuitBreakerFailure = isCircuitBreakerFailure;
 exports.parseRetryAfterMs = parseRetryAfterMs;
@@ -42,7 +43,8 @@ class ConfigurationError extends NestError {
 }
 exports.ConfigurationError = ConfigurationError;
 /**
- * Nest rejected the access token (HTTP 401).
+ * Nest rejected the access token: HTTP 401 anywhere, or HTTP 400 from the
+ * session endpoint (see {@link isSessionTokenRejection}).
  *
  * Not retryable: the token is copied by hand from a browser session and only a
  * new one will help. Retrying a rejected token is also how an account attracts
@@ -51,12 +53,25 @@ exports.ConfigurationError = ConfigurationError;
 class AuthenticationError extends NestError {
     code = 'AUTH_ERROR';
     isRetryable = false;
-    httpStatus = 401;
+    httpStatus;
     constructor(message = 'Nest rejected the configured access token. Sign in at https://home.nest.com, open https://home.nest.com/session, and copy a fresh "access_token".', options) {
-        super(message, options);
+        super(message, options?.cause ? { cause: options.cause } : undefined);
+        this.httpStatus = options?.status ?? 401;
     }
 }
 exports.AuthenticationError = AuthenticationError;
+/**
+ * Whether a failed session open proves the configured token is unusable.
+ *
+ * The session endpoint takes nothing but the token, and Nest answers a
+ * missing or bad one with 400 (`invalid_request`) or 401. Every other failure
+ * retries, because a 403 or an unfamiliar code can be an edge block that
+ * clears on its own. Retrying never hides an outage: the alarm feed goes stale
+ * and alarm-feed-stale pages whatever the cause.
+ */
+function isSessionTokenRejection(error) {
+    return error instanceof NestError && (error.httpStatus === 400 || error.httpStatus === 401);
+}
 /**
  * Nest answered HTTP 403 Forbidden.
  *

package/dist/nest-signals.d.ts

@@ -47,10 +47,12 @@ export declare class NestSignals {
     #private;
     constructor(writer: SignalWriter, graceMs?: number);
     /**
-     * Start the alarm feed grace.
+     * Write auth-failed and alarm-feed-stale clear, and start the alarm feed grace.
      *
-     * Does not write. Call once, before the first request, so a feed that is
-     * already down at launch still pages.
+     * Call once, before the first request. The write lists this plugin in
+     * homebridge-pagerduty even if Nest never answers, and the grace timer pages
+     * for a feed that is already down at launch. Smoke and CO wait for a fresh
+     * feed, so a restart cannot clear a real alarm.
      */
     start(): void;
     /** Nest accepted the token. Clears auth-failed. */

package/dist/nest-signals.js

@@ -58,16 +58,20 @@ class NestSignals {
         this.#graceMs = graceMs;
     }
     /**
-     * Start the alarm feed grace.
+     * Write auth-failed and alarm-feed-stale clear, and start the alarm feed grace.
      *
-     * Does not write. Call once, before the first request, so a feed that is
-     * already down at launch still pages.
+     * Call once, before the first request. The write lists this plugin in
+     * homebridge-pagerduty even if Nest never answers, and the grace timer pages
+     * for a feed that is already down at launch. Smoke and CO wait for a fresh
+     * feed, so a restart cannot clear a real alarm.
      */
     start() {
-        if (this.#isClosed || this.#hasStarted) {
+        if (this.#isClosed || this.#hasStarted || this.#hasStopped) {
             return;
         }
         this.#hasStarted = true;
+        this.#writeAuthFailedClear();
+        this.#writeFeedStale(false);
         this.#armStaleTimer();
     }
     /** Nest accepted the token. Clears auth-failed. */
@@ -75,11 +79,7 @@ class NestSignals {
         if (this.#isClosed || this.#hasStopped) {
             return;
         }
-        this.#writer.write(exports.SIGNAL_AUTH_FAILED, {
-            active: false,
-            severity: 'error',
-            summary: exports.TOKEN_REJECTED_SUMMARY,
-        });
+        this.#writeAuthFailedClear();
     }
     /** Record the Protects HomeKit is showing and whether their alarm feed is fresh. */
     update(protects, isFeedAvailable) {
@@ -132,6 +132,13 @@ class NestSignals {
         this.#clearStaleTimer();
         this.#writer.close();
     }
+    #writeAuthFailedClear() {
+        this.#writer.write(exports.SIGNAL_AUTH_FAILED, {
+            active: false,
+            severity: 'error',
+            summary: exports.TOKEN_REJECTED_SUMMARY,
+        });
+    }
     #writeFeedStale(active) {
         this.#writer.write(exports.SIGNAL_ALARM_FEED_STALE, {
             active,

package/dist/platform.js

@@ -66,7 +66,32 @@ const UPDATE_COALESCE_MS = 250;
  * only remaining signal that HomeKit's values are frozen.
  */
 const FATAL_REMINDER_MS = 60 * 60_000;
-const TOKEN_REJECTED_MESSAGE = 'Nest token rejected. Get a new token from https://home.nest.com/session and restart Homebridge.';
+function tokenRejectedMessage(status) {
+    return `Nest rejected the token (HTTP ${status}). Get a new token from https://home.nest.com/session and restart Homebridge.`;
+}
+/** A few words for the startup retry line; the full error goes to debug. */
+function describeStartupFailure(error) {
+    if (error instanceof errors_1.CircuitBreakerError) {
+        return 'paused after repeated failures';
+    }
+    if (error instanceof errors_1.TimeoutError) {
+        return 'timed out';
+    }
+    if (error instanceof errors_1.NetworkError) {
+        return 'network error';
+    }
+    if (error instanceof errors_1.ApiParseError) {
+        return 'unexpected response';
+    }
+    if (error instanceof errors_1.NestError && error.httpStatus !== undefined) {
+        return `HTTP ${error.httpStatus}`;
+    }
+    return (0, sanitizers_1.sanitizeError)(error);
+}
+function formatDelay(ms) {
+    const seconds = Math.round(ms / 1000);
+    return seconds < 120 ? `${seconds}s` : `${Math.round(seconds / 60)} min`;
+}
 function stopReasonFor(error) {
     if (error instanceof errors_1.SessionShapeError) {
         return 'session';
@@ -119,8 +144,6 @@ class MyNestPlatform {
     #pendingUpdate = null;
     #pendingChangedIds = null;
     #bucketsChanged = false;
-    /** True after 10 minutes with no decoded Observe device trait. */
-    #observeDeviceDataStale = false;
     #isShuttingDown = false;
     #hasFatal = false;
     #startedAt = 0;
@@ -205,6 +228,9 @@ class MyNestPlatform {
             for (const warning of warnings) {
                 this.#log.warn(warning);
             }
+            if (resolved.allowThermostatControl) {
+                this.#log.info('Thermostat control enabled');
+            }
         }
         catch (error) {
             // Homebridge keeps running other platforms, so this must not throw. The
@@ -254,9 +280,6 @@ class MyNestPlatform {
         this.#holdUnpublishedProtectAlarms();
         this.#signals?.start();
         this.#startedAt = Date.now();
-        if (this.#config.allowThermostatControl) {
-            this.#log.info('Thermostat control enabled');
-        }
         const diagnostics = this.#diagnostics;
         const transport = new transport_1.NestTransport({
             accessToken: this.#config.accessToken,
@@ -264,11 +287,6 @@ class MyNestPlatform {
             log: this.#log,
             onTraits: (traits) => this.#applyTraits(traits),
             onBuckets: (buckets, updatedKeys) => this.#applyBuckets(buckets, updatedKeys),
-            onObserveDeviceData: (stale) => {
-                this.#observeDeviceDataStale = stale;
-                this.#bucketsChanged = true;
-                this.#scheduleUpdate();
-            },
             onObserveSessionStart: () => this.#beginObserveSnapshot(),
             onFatal: (error) => this.#handleFatal(error),
             onCircuitOpen: () => diagnostics?.breakerTrip(),
@@ -309,8 +327,8 @@ class MyNestPlatform {
             if (this.#isShuttingDown) {
                 return;
             }
-            this.#log.warn(`Nest unreachable at startup (${(0, sanitizers_1.sanitizeError)(error)}), retrying`);
-            this.#scheduleStartRetry();
+            this.#log.debug(`Startup failed: ${(0, sanitizers_1.sanitizeError)(error)}`);
+            this.#scheduleStartRetry(describeStartupFailure(error));
             return;
         }
         this.#startRetryAttempt = 0;
@@ -327,7 +345,7 @@ class MyNestPlatform {
      * the plugin permanently idle — and cache-restored Protect tiles keep whatever
      * smoke/CO value Homebridge persisted, with no handler to mark them faulted.
      */
-    #scheduleStartRetry() {
+    #scheduleStartRetry(reason) {
         if (this.#isShuttingDown || this.#hasFatal || this.#startRetryTimer) {
             return;
         }
@@ -336,6 +354,7 @@ class MyNestPlatform {
         this.#holdUnpublishedProtectAlarms();
         this.#startRetryAttempt++;
         const delayMs = (0, retry_1.computeBackoffMs)(this.#startRetryAttempt);
+        this.#log.warn(`Could not connect to Nest (${reason}), retrying in ${formatDelay(delayMs)}`);
         this.#startRetryTimer = setTimeout(() => {
             this.#startRetryTimer = null;
             if (this.#isShuttingDown || this.#hasFatal) {
@@ -400,7 +419,11 @@ class MyNestPlatform {
         }
         this.#hasFatal = true;
         const isSessionShape = error instanceof errors_1.SessionShapeError;
-        this.#log.error(error instanceof errors_1.AuthenticationError ? TOKEN_REJECTED_MESSAGE : error.message);
+        const message = error instanceof errors_1.AuthenticationError
+            ? tokenRejectedMessage(error.httpStatus)
+            : error.message;
+        this.#log.error(message);
+        this.#log.debug(`Stopped by: ${(0, sanitizers_1.sanitizeError)(error)}`);
         this.#signals?.noteStopped(stopReasonFor(error));
         // Mark Protect smoke/CO inactive/faulted while handlers can still refresh.
         // `#stop` sets `#isShuttingDown` and drops `#scheduleUpdate`, so the
@@ -424,7 +447,7 @@ class MyNestPlatform {
         // the single error line above scrolls out of the log within hours.
         const reminder = isSessionShape
             ? 'Still stopped: unsupported Nest session format. Readings are frozen.'
-            : `Still stopped: ${TOKEN_REJECTED_MESSAGE}`;
+            : `Still stopped: ${message}`;
         this.#fatalReminderTimer = setInterval(() => {
             this.#log.error(reminder);
         }, FATAL_REMINDER_MS);
@@ -592,7 +615,7 @@ class MyNestPlatform {
             const topaz = value;
             const knownName = this.#lastInventory?.protects.get(id)?.identity.name;
             const description = (0, classify_1.cleanName)(topaz.description);
-            this.#log.info((0, protect_state_1.formatTopazArrival)(topaz, knownName ?? description ?? id));
+            this.#log.debug((0, protect_state_1.formatTopazArrival)(topaz, knownName ?? description ?? id));
         }
     }
     /** Collapse a burst of transport updates into one HomeKit refresh. */
@@ -633,7 +656,6 @@ class MyNestPlatform {
             buckets: this.#buckets,
             ignoredDeviceIds: this.#config.ignoredDeviceIds,
             restAlarmFeedAvailable: isFeedAvailable,
-            observeDataStale: this.#observeDeviceDataStale,
         });
         this.#lastInventory = inventory;
         // A reconnect snapshot names every device; a typical patch names one.
@@ -1146,7 +1168,6 @@ class MyNestPlatform {
                 buckets: this.#buckets,
                 ignoredDeviceIds: this.#config.ignoredDeviceIds,
                 restAlarmFeedAvailable: this.#transport?.status.isRestAlarmFeedAvailable ?? false,
-                observeDataStale: this.#observeDeviceDataStale,
             })
             : null);
         if (inventory) {

package/dist/settings.d.ts

@@ -175,15 +175,6 @@ export declare const OBSERVE_CONNECT_TIMEOUT_MS = 30000;
  * the failure mode that leaves HomeKit showing stale temperatures indefinitely.
  */
 export declare const OBSERVE_IDLE_TIMEOUT_MS: number;
-/**
- * How long Observe may go without a decoded device trait before temperature
- * sensors are marked StatusFault.
- *
- * Thermostats do not get StatusFault in this HAP build. They keep their last
- * values, and the transport logs the gap. Catalog frames and a socket that
- * stays open do not count.
- */
-export declare const OBSERVE_DEVICE_DATA_STALE_MS: number;
 /** Delay before the first reconnect attempt after a transport drops. */
 export declare const RECONNECT_BASE_MS = 5000;
 /** Upper bound on the reconnect backoff. */

package/dist/settings.js

@@ -15,8 +15,8 @@
  * nothing external will tell you when it changes.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SETPOINT_STEP_C = exports.MAX_SETPOINT_C = exports.MIN_SETPOINT_C = exports.PROTECT_OCCUPANCY_HOLD_OFF_SEC = exports.MAX_DIAGNOSTICS_INTERVAL_SEC = exports.MIN_DIAGNOSTICS_INTERVAL_SEC = exports.REDISCOVERY_INTERVAL_MS = exports.MAX_RESPONSE_BYTES = exports.MIN_RETRY_AFTER_MS = exports.MAX_RETRY_AFTER_MS = exports.OBSERVE_SILENCE_CHECK_MS = exports.FRAME_DECODE_FAILURE_RATIO = exports.FRAME_DECODE_WINDOW = exports.STATUS_HEARTBEAT_MS = exports.LOOP_FAILURE_WARN_EVERY = exports.BATCH_UPDATE_MAX_ATTEMPTS = exports.MAX_REQUEST_ATTEMPTS = exports.SESSION_EXPIRY_MARGIN_MS = exports.SESSION_REFRESH_MS = exports.FORBIDDEN_REPROBE_MS = exports.FORBIDDEN_FATAL_THRESHOLD = exports.OBSERVE_SNAPSHOT_ABANDON_MS = exports.OBSERVE_SNAPSHOT_SETTLE_MS = exports.OBSERVE_STARTUP_WARN_MS = exports.MIN_SUBSCRIBE_CYCLE_MS = exports.RECONNECT_MAX_MS = exports.RECONNECT_BASE_MS = exports.OBSERVE_DEVICE_DATA_STALE_MS = exports.OBSERVE_IDLE_TIMEOUT_MS = exports.OBSERVE_CONNECT_TIMEOUT_MS = exports.OBSERVE_PING_INTERVAL_MS = exports.OBSERVE_SESSION_MS = exports.REST_RESPONSE_STALE_MS = exports.REST_PROOF_OF_LIFE_MS = exports.REST_ALARM_FEED_STALE_MS = exports.SUBSCRIBE_IDLE_MIN_ELAPSED_RATIO = exports.SUBSCRIBE_TIMEOUT_MS = exports.THERMOSTAT_WRITE_ECHO_MAX_MS = exports.BATCH_UPDATE_TIMEOUT_MS = exports.APP_LAUNCH_TIMEOUT_MS = exports.SESSION_TIMEOUT_MS = exports.APP_LAUNCH_BUCKET_TYPES = exports.WEB_APP_VERSION = exports.USER_AGENT = exports.MANUFACTURER = exports.GLOBAL_ECO_DISPLAY_NAME = exports.GLOBAL_ECO_DEVICE_ID = exports.UUID_PREFIX = exports.PLATFORM_NAME = exports.PLUGIN_NAME = void 0;
-exports.REPORTED_TEMPERATURE_STEP_C = exports.MAX_REPORTED_TEMPERATURE_C = exports.MIN_REPORTED_TEMPERATURE_C = exports.MIN_SETPOINT_SPAN_C = exports.DEFAULT_SETPOINT_SPAN_C = exports.DEFAULT_SETPOINT_C = void 0;
+exports.DEFAULT_SETPOINT_C = exports.SETPOINT_STEP_C = exports.MAX_SETPOINT_C = exports.MIN_SETPOINT_C = exports.PROTECT_OCCUPANCY_HOLD_OFF_SEC = exports.MAX_DIAGNOSTICS_INTERVAL_SEC = exports.MIN_DIAGNOSTICS_INTERVAL_SEC = exports.REDISCOVERY_INTERVAL_MS = exports.MAX_RESPONSE_BYTES = exports.MIN_RETRY_AFTER_MS = exports.MAX_RETRY_AFTER_MS = exports.OBSERVE_SILENCE_CHECK_MS = exports.FRAME_DECODE_FAILURE_RATIO = exports.FRAME_DECODE_WINDOW = exports.STATUS_HEARTBEAT_MS = exports.LOOP_FAILURE_WARN_EVERY = exports.BATCH_UPDATE_MAX_ATTEMPTS = exports.MAX_REQUEST_ATTEMPTS = exports.SESSION_EXPIRY_MARGIN_MS = exports.SESSION_REFRESH_MS = exports.FORBIDDEN_REPROBE_MS = exports.FORBIDDEN_FATAL_THRESHOLD = exports.OBSERVE_SNAPSHOT_ABANDON_MS = exports.OBSERVE_SNAPSHOT_SETTLE_MS = exports.OBSERVE_STARTUP_WARN_MS = exports.MIN_SUBSCRIBE_CYCLE_MS = exports.RECONNECT_MAX_MS = exports.RECONNECT_BASE_MS = exports.OBSERVE_IDLE_TIMEOUT_MS = exports.OBSERVE_CONNECT_TIMEOUT_MS = exports.OBSERVE_PING_INTERVAL_MS = exports.OBSERVE_SESSION_MS = exports.REST_RESPONSE_STALE_MS = exports.REST_PROOF_OF_LIFE_MS = exports.REST_ALARM_FEED_STALE_MS = exports.SUBSCRIBE_IDLE_MIN_ELAPSED_RATIO = exports.SUBSCRIBE_TIMEOUT_MS = exports.THERMOSTAT_WRITE_ECHO_MAX_MS = exports.BATCH_UPDATE_TIMEOUT_MS = exports.APP_LAUNCH_TIMEOUT_MS = exports.SESSION_TIMEOUT_MS = exports.APP_LAUNCH_BUCKET_TYPES = exports.WEB_APP_VERSION = exports.USER_AGENT = exports.MANUFACTURER = exports.GLOBAL_ECO_DISPLAY_NAME = exports.GLOBAL_ECO_DEVICE_ID = exports.UUID_PREFIX = exports.PLATFORM_NAME = exports.PLUGIN_NAME = void 0;
+exports.REPORTED_TEMPERATURE_STEP_C = exports.MAX_REPORTED_TEMPERATURE_C = exports.MIN_REPORTED_TEMPERATURE_C = exports.MIN_SETPOINT_SPAN_C = exports.DEFAULT_SETPOINT_SPAN_C = void 0;
 exports.resolveEndpoints = resolveEndpoints;
 exports.appLaunchUrl = appLaunchUrl;
 /** Name used to register the plugin with Homebridge (must match package.json name). */
@@ -198,15 +198,6 @@ exports.OBSERVE_CONNECT_TIMEOUT_MS = 30_000;
  * the failure mode that leaves HomeKit showing stale temperatures indefinitely.
  */
 exports.OBSERVE_IDLE_TIMEOUT_MS = 10 * 60_000;
-/**
- * How long Observe may go without a decoded device trait before temperature
- * sensors are marked StatusFault.
- *
- * Thermostats do not get StatusFault in this HAP build. They keep their last
- * values, and the transport logs the gap. Catalog frames and a socket that
- * stays open do not count.
- */
-exports.OBSERVE_DEVICE_DATA_STALE_MS = exports.OBSERVE_IDLE_TIMEOUT_MS;
 /** Delay before the first reconnect attempt after a transport drops. */
 exports.RECONNECT_BASE_MS = 5_000;
 /** Upper bound on the reconnect backoff. */

package/dist/state/protect-state.d.ts

@@ -72,11 +72,10 @@ export declare function readProtectState(options: {
     restAlarmFeedAvailable?: boolean;
 }): ProtectState;
 /**
- * One info line for a REST Protect object, including when HomeKit's sentence
- * would be unchanged.
+ * One debug line with the raw REST fields behind a Protect's summary.
  *
- * `auto_away` false is Occupied. A stuck Occupied is invisible if the plugin
- * only logs the summary when that word changes.
+ * `auto_away` false is Occupied. The accessory's info summary already shows
+ * the readable state on change; this is for checking what Nest actually sent.
  */
 export declare function formatTopazArrival(topaz: TopazBucket, label: string): string;
 /** A user-facing explanation for why occupancy is or is not published. */

package/dist/state/protect-state.js

@@ -175,11 +175,10 @@ function readPlausibleRestTemperature(value) {
         : undefined;
 }
 /**
- * One info line for a REST Protect object, including when HomeKit's sentence
- * would be unchanged.
+ * One debug line with the raw REST fields behind a Protect's summary.
  *
- * `auto_away` false is Occupied. A stuck Occupied is invisible if the plugin
- * only logs the summary when that word changes.
+ * `auto_away` false is Occupied. The accessory's info summary already shows
+ * the readable state on change; this is for checking what Nest actually sent.
  */
 function formatTopazArrival(topaz, label) {
     const autoAway = typeof topaz.auto_away === 'boolean' ? String(topaz.auto_away) : 'absent';

package/dist/state/registry.d.ts

@@ -27,12 +27,6 @@ export interface BuildInventoryOptions {
      * values. Defaults to true.
      */
     restAlarmFeedAvailable?: boolean;
-    /**
-     * When true, `isObserveStale` is set on thermostats and temperature sensors.
-     * Only temperature sensors publish Status Fault. Thermostats keep their last
-     * values. Defaults to false.
-     */
-    observeDataStale?: boolean;
 }
 /**
  * Merge both transports into the device list the platform publishes.

package/dist/state/registry.js

@@ -36,7 +36,7 @@ const REST_DEVICE_BUCKETS = [
  * be exercised against fixtures without any transport.
  */
 function buildInventory(options) {
-    const { observe, buckets, ignoredDeviceIds, restAlarmFeedAvailable = true, observeDataStale = false, } = options;
+    const { observe, buckets, ignoredDeviceIds, restAlarmFeedAvailable = true, } = options;
     const kinds = collectDeviceKinds(observe, buckets);
     const roomNames = mergeRoomNames((0, classify_1.collectObserveRoomNames)(observe), readRestRoomNames(buckets));
     const comfortTemperatures = readComfortTemperatures(observe, buckets, kinds);
@@ -50,7 +50,6 @@ function buildInventory(options) {
             deviceId,
             roomNames,
             restAlarmFeedAvailable,
-            observeDataStale,
         };
         let device;
         switch (kind) {
@@ -236,10 +235,9 @@ function buildThermostat(context, comfortTemperatureC) {
         ? (0, thermostat_state_1.readThermostatFromObserve)(observe, resourceId, { comfortTemperatureC })
         : undefined;
     const fromRest = (0, thermostat_state_1.readThermostatFromRest)(buckets.shared?.[deviceId], buckets.device?.[deviceId]);
-    const state = (0, thermostat_state_1.mergeThermostatState)(fromObserve, fromRest);
     return {
         identity: buildIdentity(context, 'thermostat'),
-        state: context.observeDataStale ? { ...state, isObserveStale: true } : state,
+        state: (0, thermostat_state_1.mergeThermostatState)(fromObserve, fromRest),
     };
 }
 function buildProtect(context) {
@@ -256,14 +254,13 @@ function buildProtect(context) {
 }
 function buildTemperatureSensor(context) {
     const { observe, buckets, deviceId } = context;
-    const state = (0, sensor_state_1.readTemperatureSensorState)({
-        state: observe,
-        resourceId: (0, classify_1.toResourceId)(deviceId),
-        kryptonite: buckets.kryptonite?.[deviceId],
-    });
     return {
         identity: buildIdentity(context, 'temperature_sensor'),
-        state: context.observeDataStale ? { ...state, isObserveStale: true } : state,
+        state: (0, sensor_state_1.readTemperatureSensorState)({
+            state: observe,
+            resourceId: (0, classify_1.toResourceId)(deviceId),
+            kryptonite: buckets.kryptonite?.[deviceId],
+        }),
     };
 }
 /** Every device in an inventory, in a stable order, for logging and iteration. */

package/dist/types/device.d.ts

@@ -71,11 +71,6 @@ export interface ThermostatState {
      * Celsius. `TemperatureDisplayUnits` follows this field.
      */
     readonly displayUnit?: 'C' | 'F';
-    /**
-     * True when Observe has produced no decoded device trait for 10 minutes.
-     * Last values stay published.
-     */
-    readonly isObserveStale?: boolean;
 }
 /** Nest's three-level alarm scale, shared by the smoke and CO sensors. */
 export type AlarmLevel = 'ok' | 'warning' | 'emergency';
@@ -137,8 +132,6 @@ export interface TemperatureSensorState {
     /** Percent, when Nest reports one. */
     readonly batteryLevel?: number;
     readonly isBatteryLow?: boolean;
-    /** See {@link ThermostatState.isObserveStale}. */
-    readonly isObserveStale?: boolean;
 }
 /** One device, discriminated by {@link DeviceKind}. */
 export type NestDevice = {

package/docs/PROTOCOL.md

@@ -29,7 +29,7 @@ HomeKit accessories are unregistered only when Nest has confirmed a device is go
 | Observe never connected this session | Do not unregister (REST-only view cannot prove thermostats are gone) |
 | Cached accessory not named by Nest since the restart | Two settled Observe snapshots that both omit it before prune |
 | Device absent from the Observe ∪ REST inventory after the above | Unregister from HomeKit |
-| Expired or revoked access token (HTTP 401, or a session this plugin cannot use) | Stop updates; **keep** accessories. HTTP 403 does not stop the plugin, including when both transports exhaust their budget. Each transport probes again after the cooldown. Nest Account auth is a manually pasted session token, so unregistering would bounce rooms and automations until the user pastes a fresh token and restarts |
+| Expired, revoked or missing access token (HTTP 401 anywhere, HTTP 400 from `/session`, or a session this plugin cannot use) | Stop updates; **keep** accessories. Any other failure, including HTTP 403 from either host, retries and does not stop the plugin, including when both transports exhaust their budget. Each transport probes again after the cooldown. Nest Account auth is a manually pasted session token, so unregistering would bounce rooms and automations until the user pastes a fresh token and restarts |
 
 Unusable plugin config at startup (missing/invalid token shape, etc.) **keeps** the cached accessories, for the same reason an expired token does. A typo, a half-edited `config.json`, or a truncated token would otherwise destroy every room assignment, scene membership, and automation target in the Home app — and fixing the config does not bring them back, because HomeKit treats the re-registered accessories as new devices. A config error cannot warrant a more destructive response than a revoked token. The plugin logs why and publishes nothing until it is restarted with a usable config.
 

package/docs/README-DETAILED.md

@@ -84,7 +84,7 @@ Unknown power is not a reason to omit occupancy when `auto_away` is already a bo
 
 If REST later goes stale, a last occupancy reading stays published but is marked inactive and faulted.
 
-Every REST object for a Protect logs one info line, `REST topaz auto_away=... smoke_status=... co_status=...`, including when the HomeKit summary sentence did not change. `absent` means Nest did not send that field.
+Each Protect logs a summary at info when its state changes, such as `Zone One Protect: Smoke ok, CO ok, Occupied`. With `debug` on, every REST object for a Protect also logs the raw fields, `REST topaz auto_away=... smoke_status=... co_status=...`. `absent` means Nest did not send that field.
 
 ## Smoke and CO honesty
 
@@ -131,10 +131,10 @@ Each condition below then opens a PagerDuty alert while it is present, and resol
 | --- | --- | --- |
 | `smoke` | critical | Any Protect reports a smoke warning or emergency |
 | `co` | critical | Any Protect reports a carbon monoxide warning or emergency |
-| `alarm-feed-stale` | error | The Protect alarm feed has been unavailable for 5 minutes, so HomeKit may not show a smoke or CO alarm |
-| `auth-failed` | error | The plugin stopped because Nest rejected the token, the token in the config is missing or invalid, or Nest changed its session format |
+| `alarm-feed-stale` | error | The Protect alarm feed has been unavailable for 5 minutes, whatever the cause, so HomeKit may not show a smoke or CO alarm |
+| `auth-failed` | error | The plugin stopped because Nest rejected the token (HTTP 400 or 401), the token in the config is missing or invalid, or Nest changed its session format |
 
-Each signal covers the whole house. The summary does not name the Protect, so check the Nest app for which one is alarming. While the alarm feed is stale, `smoke` and `co` keep their last value. They do not clear until fresh readings arrive. While `auth-failed` is active, `alarm-feed-stale` stays off, so a stopped plugin sends one page.
+Each signal covers the whole house. The summary does not name the Protect, so check the Nest app for which one is alarming. While the alarm feed is stale, `smoke` and `co` keep their last value. They do not clear until fresh readings arrive. While `auth-failed` is active, `alarm-feed-stale` stays off, so a stopped plugin sends one page. Any other failure, such as HTTP 403, an unfamiliar error code or a network outage, keeps retrying and pages `alarm-feed-stale` if it lasts 5 minutes. The plugin writes `auth-failed` and `alarm-feed-stale` at startup, so homebridge-pagerduty lists it even if Nest never answers.
 
 ## Troubleshooting
 
@@ -142,8 +142,8 @@ Each signal covers the whole house. The summary does not name the Protect, so ch
 2. **Thermostat missing.** Modern thermostats are Observe-only on some accounts. With default logging the plugin warns within about a minute if Observe produced no frames, and again every five minutes if a connected stream goes quiet. Set `debug: true` for stream detail. From a git checkout you can also run `npm run verify` against the live account. See [DEVELOPMENT.md](../DEVELOPMENT.md).
 3. **Thermostat in Settings but no room tile.** Remove and re-add the **MyNest** child bridge in the Home app (or whatever you set as **Name**), then assign rooms again. Same-UUID republish does not clear Apple Home's stuck presentation.
 4. **Eco / setpoint changes snap back.** Enable **Allow thermostat control**. With control off, HomeKit can still move the UI (required for tiles), but the plugin does not send the change to Nest and moves the tile back.
-5. **Protect smoke or CO shows a fault.** REST has no number for that sensor yet, or the REST feed is stale. The tile stays. Search the log for `REST topaz` to see the raw `smoke_status` and `co_status`.
-6. **No occupancy, or Occupied in an empty room.** Occupancy is `auto_away` inverted. It is omitted for a battery Protect, a missing `auto_away`, an Observe-only Protect, or `exposeProtectOccupancy` off. A room that stays Occupied has `auto_away=false` on each later `REST topaz` line, or no later line at all. See [Protect occupancy](#protect-occupancy).
+5. **Protect smoke or CO shows a fault.** REST has no number for that sensor yet, or the REST feed is stale. The tile stays. Turn on `debug` and search the log for `REST topaz` to see the raw `smoke_status` and `co_status`.
+6. **No occupancy, or Occupied in an empty room.** Occupancy is `auto_away` inverted. It is omitted for a battery Protect, a missing `auto_away`, an Observe-only Protect, or `exposeProtectOccupancy` off. A room that stays Occupied never logs a later summary with `Unoccupied`. With `debug` on, each `REST topaz` line for it shows `auto_away=false`. See [Protect occupancy](#protect-occupancy).
 
 Restart Homebridge after any `config.json` edit.
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "homebridge-mynest",
   "displayName": "Homebridge My Nest",
-  "version": "2.1.0",
+  "version": "2.1.2",
   "description": "Homebridge plugin for Nest thermostats (with Eco Mode), Nest Protect, and Nest Temperature Sensors using a Nest Account access token",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",