@fleetless/sdk 1.0.0 → 2.0.1

package/CHANGELOG.md

@@ -0,0 +1,113 @@
+# Changelog
+
+All notable changes to `@fleetless/sdk`. The format follows Keep a Changelog; the versions follow semver.
+
+## [Unreleased]
+
+## [2.0.1] — 2026-09-04
+
+No code change; the published `dist/` is byte-identical to 2.0.0.
+
+### Changed
+
+- The contact address in the README and in `package.json` (`author`,
+  `bugs`) is hello@fleetless.dev.
+- The README's closing section states that the source repository is private
+  and takes no outside contributions; the `CONTRIBUTING.md` it linked to is
+  gone.
+
+## [2.0.0] — 2026-09-04
+
+The first release since 1.0.0, and it is a breaking one. The entries below are
+the **complete** difference in the published surface, established by unpacking
+`@fleetless/sdk@1.0.0` from npm and diffing its bundled `dist/index.d.ts`
+against this tree's, declaration by declaration — not read off the commit log.
+Everything not named here is byte-identical between the two builds.
+
+### Removed
+
+- **`client.auth.register(email, password)` and
+  `client.auth.confirmRegistration(token)`.** Self-registration through the SDK
+  is gone, with no successor. The org-central identity redesign removed per-app
+  user pools: users belong to one pool per organisation and a group grows by
+  invitation (or, once the federation work lands, by OIDC just-in-time
+  provisioning). There is no client-side sign-up call any more, and the routes
+  behind both methods no longer exist.
+- **`client.auth.requestPasswordReset(email)` and
+  `client.auth.confirmPasswordReset(token, newPassword)`.** Same reason: the
+  routes are gone. Link the user to the platform's hosted reset page instead —
+  `client.auth.passwordResetUrl()` builds the URL, and nothing about it is a
+  network call.
+- **The exported types `MailStatus` and `ClientRegisterResponse`**, which
+  described `register()`'s result and went with it.
+- **The error code `not_a_member`**, from `FleetlessErrorCode` and from
+  `ERROR_CODES`. No route emits it any more. Removing a member of a
+  string-literal union is a *compile-time* break for an exhaustive `switch` on
+  `error.code` and for any `error.code === 'not_a_member'` comparison.
+
+### Changed
+
+- **`CameraDescriptor.snapshot_interval_ms` is now
+  `CameraDescriptor.snapshot_interval_seconds`.** This is a rename **and a unit
+  change**: the value is now seconds, so it is a thousand times smaller than
+  the field it replaces. Following the compile error by renaming the property
+  and nothing else silently gives you the wrong number — divide by 1000 as
+  well, or read the field as the seconds it now is.
+- **`UrdfCompleteness.missing` is no longer `string[]`.** It is now
+  `{ uri: string; element: 'mesh' | 'texture' }[]`, so a caller can tell a
+  missing mesh from a missing texture instead of reporting every gap as a
+  mesh. `UrdfSceneResources.missing` (returned by `assets.prepareUrdfScene`)
+  carries the same change; it is now typed as `UrdfCompleteness['missing']`.
+  If you only want the URIs: `missing.map((m) => m.uri)`.
+- **`client.auth.logout()` returns `LogoutResult`** rather than an inline
+  `{ revoked: boolean }`. Additive in practice — `.revoked` is unchanged — but
+  the result now also carries `idp_logout`, five separable facts about the
+  session at the identity provider: `redirect` (with the URL to send the
+  browser to), `not_federated`, `unsupported_by_idp`, `hint_unavailable`,
+  `session_unknown`, or `null` when there was no response to report. Only
+  `not_federated` means the user is fully signed out. The type is exported, so
+  it can be named.
+- Types and bundled contract values follow the platform's contracts at the
+  release's pin.
+
+### Added
+
+- **`client.grants`**, an end user's own record of the OAuth clients they have
+  authorized: `list()` returns `ConsentGrantSummary[]`, `revoke(clientId)`
+  returns `ConsentRevokeResponse` and takes one grant back without touching the
+  others. `GrantsApi`, `ConsentGrantSummary` and `ConsentRevokeResponse` are
+  exported.
+- **`client.auth.passwordResetUrl(): string`** — the hosted password-reset page
+  for every user of the platform, served by the cloud. A pure string builder,
+  no request; it is what replaces the two removed reset methods.
+- **`client.assets.syncStatus(robotId, syncId)`** — the state of one asset sync
+  run: how far it has got, and what it could not resolve or upload.
+- **`AssetListResponse.active_sync`** — the sync currently running for the
+  robot, or `null`. Nullable, and always present.
+- **`ClientIdentity.act`** (optional) — `{ admin_user_id: string }`, the admin
+  actually driving when the session is an impersonation. Absent on an ordinary
+  session, which is not the same fact as an unknown actor.
+- **`LogoutResult`** — exported; see `logout()` above.
+- **Eight error codes** in `FleetlessErrorCode` / `ERROR_CODES`:
+  `unknown_slug`, `capability_required`, `last_owner`, `group_not_deletable`,
+  `group_in_use`, `target_state_conflict`, `mcp_access_denied`,
+  `signup_closed`.
+- **Licence (MIT) and package metadata.** The tarball now carries `LICENSE`
+  and `CHANGELOG.md`, and the manifest an SPDX id, author, homepage, bugs
+  address and keywords. Every version from this one on is published by the
+  repository's own pipeline from a release tag; `npm publish` by hand is
+  retired.
+
+### Fixed
+
+- **A CommonJS consumer can type the package.** The `exports` map offered
+  `require` a JavaScript entry point but only ever an ESM `.d.ts` beside it,
+  so under `node16`/`nodenext` resolution TypeScript refused the require with
+  `TS1479` — the runtime worked, the types did not. Each condition now carries
+  its own declarations (`dist/index.d.ts` for `import`, `dist/index.d.cts` for
+  `require`), and `pnpm test:pack` typechecks both against the packed tarball.
+  Present in 1.0.0.
+
+## [1.0.0] — 2026-08-18
+
+First published version.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Dehne Robotik GmbH
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.