@fleetless/sdk 3.1.0 → 4.0.0

package/dist/index.d.cts

@@ -26,13 +26,13 @@ declare const mcpExposure: z.ZodObject<{
     decimals: z.ZodNullable<z.ZodNumber>;
     input_schema: z.ZodNullable<z.ZodUnknown>;
 }, z.core.$strip>;
-type McpExposure = z.infer<typeof mcpExposure>;
+type McpExposure$1 = z.infer<typeof mcpExposure>;
 /** The two role capabilities a robot tool can need beyond a slug grant. `presence` is a stream and has no tool. */
 declare const mcpCapabilities: z.ZodObject<{
     action_history: z.ZodBoolean;
     assets: z.ZodBoolean;
 }, z.core.$strip>;
-type McpCapabilities = z.infer<typeof mcpCapabilities>;
+type McpCapabilities$1 = z.infer<typeof mcpCapabilities>;
 /**
  * What one caller may do on one robot — the answer to `robot_describe`, and
  * since 1.1.0 to `GET /api/robots/:id/datasheet` as well. One schema for both
@@ -352,8 +352,8 @@ declare const historySamplesResponse: z.ZodObject<{
     }, z.core.$strip>>;
     truncated: z.ZodBoolean;
     truncated_by: z.ZodNullable<z.ZodEnum<{
-        limit: "limit";
         bytes: "bytes";
+        limit: "limit";
     }>>;
 }, z.core.$strip>;
 type HistorySamplesResponse = z.infer<typeof historySamplesResponse>;
@@ -577,6 +577,7 @@ declare const clientRobotListItem: z.ZodObject<{
     bridge_state: z.ZodObject<{
         online: z.ZodBoolean;
         latency_ms: z.ZodNullable<z.ZodNumber>;
+        low_bandwidth: z.ZodBoolean;
     }, z.core.$strip>;
     published_version: z.ZodNullable<z.ZodNumber>;
     id: z.ZodUUID;
@@ -593,7 +594,6 @@ declare const asset: z.ZodObject<{
         urdf: "urdf";
         mesh: "mesh";
         texture: "texture";
-        other: "other";
     }>;
     name: z.ZodString;
     media_type: z.ZodString;
@@ -649,14 +649,16 @@ declare const assetSyncStatus: z.ZodObject<{
             unresolvable: "unresolvable";
             upload_failed: "upload_failed";
             refused: "refused";
-            too_large: "too_large";
         }>;
         details: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-            limit_bytes: z.ZodNumber;
+            store_bytes: z.ZodNumber;
+            used_bytes: z.ZodNumber;
             size_bytes: z.ZodNumber;
         }, z.core.$strip>>>;
     }, z.core.$strip>>;
     reason: z.ZodNullable<z.ZodString>;
+    stored: z.ZodNullable<z.ZodNumber>;
+    announced: z.ZodNumber;
     started_at: z.ZodISODateTime;
     updated_at: z.ZodISODateTime;
 }, z.core.$strip>;
@@ -669,7 +671,6 @@ declare const assetListResponse: z.ZodObject<{
             urdf: "urdf";
             mesh: "mesh";
             texture: "texture";
-            other: "other";
         }>;
         name: z.ZodString;
         media_type: z.ZodString;
@@ -693,14 +694,16 @@ declare const assetListResponse: z.ZodObject<{
                 unresolvable: "unresolvable";
                 upload_failed: "upload_failed";
                 refused: "refused";
-                too_large: "too_large";
             }>;
             details: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-                limit_bytes: z.ZodNumber;
+                store_bytes: z.ZodNumber;
+                used_bytes: z.ZodNumber;
                 size_bytes: z.ZodNumber;
             }, z.core.$strip>>>;
         }, z.core.$strip>>;
         reason: z.ZodNullable<z.ZodString>;
+        stored: z.ZodNullable<z.ZodNumber>;
+        announced: z.ZodNumber;
         started_at: z.ZodISODateTime;
         updated_at: z.ZodISODateTime;
     }, z.core.$strip>>;
@@ -716,6 +719,11 @@ declare const assetListResponse: z.ZodObject<{
         }, z.core.$strip>>;
     }, z.core.$strip>;
     urdf_available: z.ZodNullable<z.ZodBoolean>;
+    store: z.ZodObject<{
+        bytes: z.ZodNumber;
+        used_bytes: z.ZodNumber;
+    }, z.core.$strip>;
+    joint_state_slug: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>;
 type AssetListResponse = z.infer<typeof assetListResponse>;
 
@@ -758,7 +766,7 @@ type ParameterInvalidDetails = z.infer<typeof parameterInvalidDetails>;
  * list is the shared vocabulary, not a closed set, so a new refusal never
  * needs a contracts release before it can be reported honestly.
  */
-declare const ERROR_CODES: readonly ["not_found", "validation_error", "bad_request", "unknown_datapoint", "invalid_token", "protocol_mismatch", "invalid_frame", "duplicate_slug", "reserved_slug", "unknown_slug", "unknown_field_path", "unknown_type", "unknown_topic", "invalid_rate", "invalid_range", "config_conflict", "no_data", "robot_offline", "bridge_timeout", "unauthorized", "forbidden", "invalid_credentials", "token_expired", "token_revoked", "email_taken", "identifier_taken", "weak_password", "account_blocked", "busy", "parameter_invalid", "job_lost", "publisher_busy", "unknown_command", "not_subscribable", "camera_offline", "no_snapshot_yet", "live_unavailable", "wrong_kind", "not_recorded", "not_aggregatable", "quota_exceeded", "credential_in_use", "goal_timeout", "robot_in_use", "robot_deletion_partial", "job_queue_full", "invalid_uuid", "rate_limited", "tier_required", "token_spent", "service_timeout", "asset_missing", "asset_too_large", "dynamic_registration_disabled", "client_limit_reached", "idp_unavailable", "mcp_disabled", "tool_not_available", "capability_required", "last_owner", "target_state_conflict", "signup_closed", "draft_not_a_document", "internal_error", "not_cancellable", "unsupported_media_type", "wrong_browser", "invalid_yaml", "unstorable_yaml", "registration_closed", "domain_not_allowed", "email_unverified", "origin_not_allowed", "template_invalid", "provider_disabled", "provider_misconfigured", "invalid_redirect_uri", "interaction_expired"];
+declare const ERROR_CODES: readonly ["not_found", "validation_error", "bad_request", "unknown_datapoint", "invalid_token", "protocol_mismatch", "invalid_frame", "duplicate_slug", "reserved_slug", "unknown_slug", "unknown_field_path", "unknown_type", "unknown_topic", "invalid_rate", "invalid_range", "config_conflict", "no_data", "robot_offline", "bridge_timeout", "unauthorized", "forbidden", "invalid_credentials", "token_expired", "token_revoked", "email_taken", "identifier_taken", "weak_password", "account_blocked", "busy", "parameter_invalid", "job_lost", "publisher_busy", "unknown_command", "not_subscribable", "camera_offline", "no_snapshot_yet", "live_unavailable", "wrong_kind", "not_recorded", "not_aggregatable", "quota_exceeded", "credential_in_use", "goal_timeout", "robot_in_use", "robot_deletion_partial", "job_queue_full", "invalid_uuid", "rate_limited", "tier_required", "token_spent", "service_timeout", "asset_missing", "dynamic_registration_disabled", "client_limit_reached", "idp_unavailable", "mcp_disabled", "tool_not_available", "capability_required", "last_owner", "target_state_conflict", "signup_closed", "draft_not_a_document", "internal_error", "not_cancellable", "unsupported_media_type", "wrong_browser", "invalid_yaml", "unstorable_yaml", "registration_closed", "domain_not_allowed", "email_unverified", "origin_not_allowed", "template_invalid", "provider_disabled", "provider_misconfigured", "invalid_redirect_uri", "interaction_expired"];
 type ErrorCode = (typeof ERROR_CODES)[number];
 
 /**
@@ -912,6 +920,34 @@ declare class FleetlessError extends Error {
     constructor(code: FleetlessErrorCode, message: string, options?: FleetlessErrorOptions);
 }
 
+/**
+ * Supplies the `Authorization` header value for a request, and knows what to
+ * do when the server says the token has expired. `HttpClient` is agnostic to
+ * *what* is authenticating it — an end-user session with silent refresh, or
+ * a static server key — so both can share one request path.
+ */
+interface CredentialSource {
+    /**
+     * The current raw bearer credential — a JWT or a server key (`flk_...`) —
+     * or null if not authenticated. Raw, not `Bearer <token>`: REST forms the
+     * `Authorization` header from it, and the realtime auth frame
+     * carries the very same value unprefixed, so there is exactly one place
+     * that knows what "the token" currently is.
+     */
+    token(): Promise<string | null>;
+    /**
+     * Called once when a request comes back `token_expired`. Three outcomes:
+     * - resolves `true` — a fresh credential is ready, retry the request;
+     * - resolves `false` — nothing to do (e.g. a server key, which cannot be
+     *   refreshed at all), propagate the original `token_expired`;
+     * - throws a `FleetlessError` — refreshing itself failed for a specific,
+     *   more useful reason (e.g. `token_revoked`, a reused refresh token);
+     *   that error propagates instead of the original `token_expired`, so the
+     *   caller learns what actually happened, not just that a retry was tried.
+     */
+    handleExpired(): Promise<boolean>;
+}
+
 /**
  * The options every realtime command accepts — `actions.cancel` and
  * `publishers.publish` take exactly these; `InvokeOptions` extends them for
@@ -2049,13 +2085,19 @@ interface DatapointsApi {
  * `validation_error`, not quietly reduced.
  */
 interface JobHistoryOptions {
+    /** Only runs of this action or service. */
     slug?: string;
+    /** Only runs in this state: `running`, `succeeded`, `failed`, `cancelled` or `lost`. */
     state?: JobState;
+    /** Only `action` runs, or only `service` runs. */
     kind?: 'action' | 'service';
+    /** How many runs to return, 1 to 200; absent means 100. Above the cap the platform refuses with `validation_error` rather than trimming. */
     limit?: number;
     /** The previous page's `next_cursor`. Send it back rather than computing one. */
     beforeSeq?: number;
+    /** Only runs that started at or after this unix timestamp in milliseconds; with `toMs` the window is half-open, `[from, to)`. */
     fromMs?: number;
+    /** Only runs that started before this unix timestamp in milliseconds. */
     toMs?: number;
 }
 /**
@@ -2139,6 +2181,20 @@ interface PublishersApi {
     publish(robotId: string, slug: string, message: Record<string, unknown>, options?: SendCommandOptions): Promise<void>;
 }
 
+/**
+ * One row of a datasheet's `exposures`: a granted datapoint, action, service,
+ * publisher or camera, with its `slug`, `kind`, `description` (or `null`),
+ * a datapoint's `unit` and `decimals`, and for anything that takes
+ * parameters the JSON Schema under `input_schema`. The wire shape is
+ * contracts' `mcpExposure`; the alias exists so the reference can describe it.
+ */
+type McpExposure = McpExposure$1;
+/**
+ * The two role capabilities a datasheet names beyond slugs: `action_history`
+ * (may `jobs.history` be read) and `assets` (may the URDF and meshes be read).
+ * The wire shape is contracts' `mcpCapabilities`.
+ */
+type McpCapabilities = McpCapabilities$1;
 /**
  * Discovery, reachable as `client.robots`: which robots may I name at all,
  * and what may I do on one. The two calls every app screen starts from;
@@ -2233,6 +2289,25 @@ interface FleetlessClientOptions {
      * with a server key never calls `auth.login`/`auth.logout`.
      */
     serverKey?: string;
+    /**
+     * **A credential this client does not own.** The caller answers both
+     * questions a bearer raises: what the token is right now (`token()`), and
+     * what to do when the server says it expired (`handleExpired()`).
+     *
+     * For an embedder that already holds a session and refreshes it itself —
+     * the Fleetless console is the case this exists for. Without it such a
+     * caller had to impersonate a `TokenStore`, and a cloud-side
+     * `token_expired` arriving while its own clock still read live posted one
+     * empty refresh whose `validation_error` had to be translated back into a
+     * session message. A source that answers `handleExpired: false` never
+     * builds a refresh request at all.
+     *
+     * Mutually exclusive with `tokenStore` and `serverKey`, which each own a
+     * credential of their own; a client acts as exactly one identity.
+     * `auth.login`/`auth.logout` refuse here for the same reason they refuse
+     * on a server key: there is no session for this client to start or end.
+     */
+    credentials?: CredentialSource;
     /** Injectable for tests, or a non-global `fetch` implementation. */
     fetch?: typeof fetch;
     /** Injectable for tests, or a non-global `WebSocket` implementation. */
@@ -2302,12 +2377,14 @@ interface FleetlessClient {
  * Builds a client for one app. Pass `tokenStore` (or nothing — the default
  * keeps the session in memory) for an app-user client that signs in with
  * `auth.login` or a federated provider; pass `serverKey` for a server-side
- * caller that never holds a user session. Passing both throws, because the
- * two are different identities and a client acts as exactly one.
+ * caller that never holds a user session; pass `credentials` when the
+ * embedder already holds the bearer and refreshes it itself. Passing more
+ * than one throws, because each is a different identity and a client acts
+ * as exactly one.
  *
  * Nothing is fetched here: the realtime channel opens on the first
  * subscription and closes on `close()` or `auth.logout()`.
  */
 declare function createClient(options: FleetlessClientOptions): FleetlessClient;
 
-export { type AcceptInvitationOptions, type ActionsApi, type Asset, type AssetBytes, type AssetListResponse, type AssetsApi, type AuthApi, type BeginOidcLoginOptions, type BusyDetails, type CameraDescriptor, type CameraLiveSession, type CameraSnapshot, type CameraSnapshotMeta, type CamerasApi, type ClientIdentity, type ClientMcpInteraction, type ClientOidcErrorCode, type ClientRobotListItem, type CompleteOidcLoginOptions, type CreateMeshLoaderOptions, type DatapointEvent, type DatapointSubscription, type DatapointSubscriptionHandlers, type DatapointValue, type DatapointsApi, type FleetlessClient, type FleetlessClientConfig, type FleetlessClientOptions, FleetlessError, type FleetlessErrorCode, type FleetlessErrorOptions, type HistoryAggregation, type HistoryBucketsResponse, type HistoryOptions, type HistorySamplesResponse, InMemoryTokenStore, type InvokeOptions, type Job, type JobEvent, type JobHistoryOptions, type JobRun, type JobRunListResponse, type JobState, type JobSubscription, type JobSubscriptionHandlers, type JobsApi, type McpCapabilities, type McpConsentGrant, type McpExposure, type McpInteractionDecision, type McpRobotDatasheet, type MeshLoaderDelegate, type OidcLoginRequest, type ParameterInvalidDetails, type ParameterViolation, type PrepareUrdfSceneOptions, type ProviderButton, type PublishersApi, type RateLimitDetails, type RegisterOptions, type RobotsApi, SDK_ERROR_CODES, type SdkErrorCode, type SendCommandOptions, type ServicesApi, type StoredSession, type TokenStore, type UrdfCompleteness, type UrdfSceneManager, type UrdfSceneResources, createClient, parameterInvalidDetails };
+export { type AcceptInvitationOptions, type ActionsApi, type Asset, type AssetBytes, type AssetListResponse, type AssetsApi, type AuthApi, type BeginOidcLoginOptions, type BusyDetails, type CameraDescriptor, type CameraLiveSession, type CameraSnapshot, type CameraSnapshotMeta, type CamerasApi, type ClientIdentity, type ClientMcpInteraction, type ClientOidcErrorCode, type ClientRobotListItem, type CompleteOidcLoginOptions, type CreateMeshLoaderOptions, type CredentialSource, type DatapointEvent, type DatapointSubscription, type DatapointSubscriptionHandlers, type DatapointValue, type DatapointsApi, type FleetlessClient, type FleetlessClientConfig, type FleetlessClientOptions, FleetlessError, type FleetlessErrorCode, type FleetlessErrorOptions, type HistoryAggregation, type HistoryBucketsResponse, type HistoryOptions, type HistorySamplesResponse, InMemoryTokenStore, type InvokeOptions, type Job, type JobEvent, type JobHistoryOptions, type JobRun, type JobRunListResponse, type JobState, type JobSubscription, type JobSubscriptionHandlers, type JobsApi, type McpCapabilities, type McpConsentGrant, type McpExposure, type McpInteractionDecision, type McpRobotDatasheet, type MeshLoaderDelegate, type OidcLoginRequest, type ParameterInvalidDetails, type ParameterViolation, type PrepareUrdfSceneOptions, type ProviderButton, type PublishersApi, type RateLimitDetails, type RegisterOptions, type RobotsApi, SDK_ERROR_CODES, type SdkErrorCode, type SendCommandOptions, type ServicesApi, type StoredSession, type TokenStore, type UrdfCompleteness, type UrdfSceneManager, type UrdfSceneResources, createClient, parameterInvalidDetails };

package/dist/index.d.ts

@@ -26,13 +26,13 @@ declare const mcpExposure: z.ZodObject<{
     decimals: z.ZodNullable<z.ZodNumber>;
     input_schema: z.ZodNullable<z.ZodUnknown>;
 }, z.core.$strip>;
-type McpExposure = z.infer<typeof mcpExposure>;
+type McpExposure$1 = z.infer<typeof mcpExposure>;
 /** The two role capabilities a robot tool can need beyond a slug grant. `presence` is a stream and has no tool. */
 declare const mcpCapabilities: z.ZodObject<{
     action_history: z.ZodBoolean;
     assets: z.ZodBoolean;
 }, z.core.$strip>;
-type McpCapabilities = z.infer<typeof mcpCapabilities>;
+type McpCapabilities$1 = z.infer<typeof mcpCapabilities>;
 /**
  * What one caller may do on one robot — the answer to `robot_describe`, and
  * since 1.1.0 to `GET /api/robots/:id/datasheet` as well. One schema for both
@@ -352,8 +352,8 @@ declare const historySamplesResponse: z.ZodObject<{
     }, z.core.$strip>>;
     truncated: z.ZodBoolean;
     truncated_by: z.ZodNullable<z.ZodEnum<{
-        limit: "limit";
         bytes: "bytes";
+        limit: "limit";
     }>>;
 }, z.core.$strip>;
 type HistorySamplesResponse = z.infer<typeof historySamplesResponse>;
@@ -577,6 +577,7 @@ declare const clientRobotListItem: z.ZodObject<{
     bridge_state: z.ZodObject<{
         online: z.ZodBoolean;
         latency_ms: z.ZodNullable<z.ZodNumber>;
+        low_bandwidth: z.ZodBoolean;
     }, z.core.$strip>;
     published_version: z.ZodNullable<z.ZodNumber>;
     id: z.ZodUUID;
@@ -593,7 +594,6 @@ declare const asset: z.ZodObject<{
         urdf: "urdf";
         mesh: "mesh";
         texture: "texture";
-        other: "other";
     }>;
     name: z.ZodString;
     media_type: z.ZodString;
@@ -649,14 +649,16 @@ declare const assetSyncStatus: z.ZodObject<{
             unresolvable: "unresolvable";
             upload_failed: "upload_failed";
             refused: "refused";
-            too_large: "too_large";
         }>;
         details: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-            limit_bytes: z.ZodNumber;
+            store_bytes: z.ZodNumber;
+            used_bytes: z.ZodNumber;
             size_bytes: z.ZodNumber;
         }, z.core.$strip>>>;
     }, z.core.$strip>>;
     reason: z.ZodNullable<z.ZodString>;
+    stored: z.ZodNullable<z.ZodNumber>;
+    announced: z.ZodNumber;
     started_at: z.ZodISODateTime;
     updated_at: z.ZodISODateTime;
 }, z.core.$strip>;
@@ -669,7 +671,6 @@ declare const assetListResponse: z.ZodObject<{
             urdf: "urdf";
             mesh: "mesh";
             texture: "texture";
-            other: "other";
         }>;
         name: z.ZodString;
         media_type: z.ZodString;
@@ -693,14 +694,16 @@ declare const assetListResponse: z.ZodObject<{
                 unresolvable: "unresolvable";
                 upload_failed: "upload_failed";
                 refused: "refused";
-                too_large: "too_large";
             }>;
             details: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-                limit_bytes: z.ZodNumber;
+                store_bytes: z.ZodNumber;
+                used_bytes: z.ZodNumber;
                 size_bytes: z.ZodNumber;
             }, z.core.$strip>>>;
         }, z.core.$strip>>;
         reason: z.ZodNullable<z.ZodString>;
+        stored: z.ZodNullable<z.ZodNumber>;
+        announced: z.ZodNumber;
         started_at: z.ZodISODateTime;
         updated_at: z.ZodISODateTime;
     }, z.core.$strip>>;
@@ -716,6 +719,11 @@ declare const assetListResponse: z.ZodObject<{
         }, z.core.$strip>>;
     }, z.core.$strip>;
     urdf_available: z.ZodNullable<z.ZodBoolean>;
+    store: z.ZodObject<{
+        bytes: z.ZodNumber;
+        used_bytes: z.ZodNumber;
+    }, z.core.$strip>;
+    joint_state_slug: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>;
 type AssetListResponse = z.infer<typeof assetListResponse>;
 
@@ -758,7 +766,7 @@ type ParameterInvalidDetails = z.infer<typeof parameterInvalidDetails>;
  * list is the shared vocabulary, not a closed set, so a new refusal never
  * needs a contracts release before it can be reported honestly.
  */
-declare const ERROR_CODES: readonly ["not_found", "validation_error", "bad_request", "unknown_datapoint", "invalid_token", "protocol_mismatch", "invalid_frame", "duplicate_slug", "reserved_slug", "unknown_slug", "unknown_field_path", "unknown_type", "unknown_topic", "invalid_rate", "invalid_range", "config_conflict", "no_data", "robot_offline", "bridge_timeout", "unauthorized", "forbidden", "invalid_credentials", "token_expired", "token_revoked", "email_taken", "identifier_taken", "weak_password", "account_blocked", "busy", "parameter_invalid", "job_lost", "publisher_busy", "unknown_command", "not_subscribable", "camera_offline", "no_snapshot_yet", "live_unavailable", "wrong_kind", "not_recorded", "not_aggregatable", "quota_exceeded", "credential_in_use", "goal_timeout", "robot_in_use", "robot_deletion_partial", "job_queue_full", "invalid_uuid", "rate_limited", "tier_required", "token_spent", "service_timeout", "asset_missing", "asset_too_large", "dynamic_registration_disabled", "client_limit_reached", "idp_unavailable", "mcp_disabled", "tool_not_available", "capability_required", "last_owner", "target_state_conflict", "signup_closed", "draft_not_a_document", "internal_error", "not_cancellable", "unsupported_media_type", "wrong_browser", "invalid_yaml", "unstorable_yaml", "registration_closed", "domain_not_allowed", "email_unverified", "origin_not_allowed", "template_invalid", "provider_disabled", "provider_misconfigured", "invalid_redirect_uri", "interaction_expired"];
+declare const ERROR_CODES: readonly ["not_found", "validation_error", "bad_request", "unknown_datapoint", "invalid_token", "protocol_mismatch", "invalid_frame", "duplicate_slug", "reserved_slug", "unknown_slug", "unknown_field_path", "unknown_type", "unknown_topic", "invalid_rate", "invalid_range", "config_conflict", "no_data", "robot_offline", "bridge_timeout", "unauthorized", "forbidden", "invalid_credentials", "token_expired", "token_revoked", "email_taken", "identifier_taken", "weak_password", "account_blocked", "busy", "parameter_invalid", "job_lost", "publisher_busy", "unknown_command", "not_subscribable", "camera_offline", "no_snapshot_yet", "live_unavailable", "wrong_kind", "not_recorded", "not_aggregatable", "quota_exceeded", "credential_in_use", "goal_timeout", "robot_in_use", "robot_deletion_partial", "job_queue_full", "invalid_uuid", "rate_limited", "tier_required", "token_spent", "service_timeout", "asset_missing", "dynamic_registration_disabled", "client_limit_reached", "idp_unavailable", "mcp_disabled", "tool_not_available", "capability_required", "last_owner", "target_state_conflict", "signup_closed", "draft_not_a_document", "internal_error", "not_cancellable", "unsupported_media_type", "wrong_browser", "invalid_yaml", "unstorable_yaml", "registration_closed", "domain_not_allowed", "email_unverified", "origin_not_allowed", "template_invalid", "provider_disabled", "provider_misconfigured", "invalid_redirect_uri", "interaction_expired"];
 type ErrorCode = (typeof ERROR_CODES)[number];
 
 /**
@@ -912,6 +920,34 @@ declare class FleetlessError extends Error {
     constructor(code: FleetlessErrorCode, message: string, options?: FleetlessErrorOptions);
 }
 
+/**
+ * Supplies the `Authorization` header value for a request, and knows what to
+ * do when the server says the token has expired. `HttpClient` is agnostic to
+ * *what* is authenticating it — an end-user session with silent refresh, or
+ * a static server key — so both can share one request path.
+ */
+interface CredentialSource {
+    /**
+     * The current raw bearer credential — a JWT or a server key (`flk_...`) —
+     * or null if not authenticated. Raw, not `Bearer <token>`: REST forms the
+     * `Authorization` header from it, and the realtime auth frame
+     * carries the very same value unprefixed, so there is exactly one place
+     * that knows what "the token" currently is.
+     */
+    token(): Promise<string | null>;
+    /**
+     * Called once when a request comes back `token_expired`. Three outcomes:
+     * - resolves `true` — a fresh credential is ready, retry the request;
+     * - resolves `false` — nothing to do (e.g. a server key, which cannot be
+     *   refreshed at all), propagate the original `token_expired`;
+     * - throws a `FleetlessError` — refreshing itself failed for a specific,
+     *   more useful reason (e.g. `token_revoked`, a reused refresh token);
+     *   that error propagates instead of the original `token_expired`, so the
+     *   caller learns what actually happened, not just that a retry was tried.
+     */
+    handleExpired(): Promise<boolean>;
+}
+
 /**
  * The options every realtime command accepts — `actions.cancel` and
  * `publishers.publish` take exactly these; `InvokeOptions` extends them for
@@ -2049,13 +2085,19 @@ interface DatapointsApi {
  * `validation_error`, not quietly reduced.
  */
 interface JobHistoryOptions {
+    /** Only runs of this action or service. */
     slug?: string;
+    /** Only runs in this state: `running`, `succeeded`, `failed`, `cancelled` or `lost`. */
     state?: JobState;
+    /** Only `action` runs, or only `service` runs. */
     kind?: 'action' | 'service';
+    /** How many runs to return, 1 to 200; absent means 100. Above the cap the platform refuses with `validation_error` rather than trimming. */
     limit?: number;
     /** The previous page's `next_cursor`. Send it back rather than computing one. */
     beforeSeq?: number;
+    /** Only runs that started at or after this unix timestamp in milliseconds; with `toMs` the window is half-open, `[from, to)`. */
     fromMs?: number;
+    /** Only runs that started before this unix timestamp in milliseconds. */
     toMs?: number;
 }
 /**
@@ -2139,6 +2181,20 @@ interface PublishersApi {
     publish(robotId: string, slug: string, message: Record<string, unknown>, options?: SendCommandOptions): Promise<void>;
 }
 
+/**
+ * One row of a datasheet's `exposures`: a granted datapoint, action, service,
+ * publisher or camera, with its `slug`, `kind`, `description` (or `null`),
+ * a datapoint's `unit` and `decimals`, and for anything that takes
+ * parameters the JSON Schema under `input_schema`. The wire shape is
+ * contracts' `mcpExposure`; the alias exists so the reference can describe it.
+ */
+type McpExposure = McpExposure$1;
+/**
+ * The two role capabilities a datasheet names beyond slugs: `action_history`
+ * (may `jobs.history` be read) and `assets` (may the URDF and meshes be read).
+ * The wire shape is contracts' `mcpCapabilities`.
+ */
+type McpCapabilities = McpCapabilities$1;
 /**
  * Discovery, reachable as `client.robots`: which robots may I name at all,
  * and what may I do on one. The two calls every app screen starts from;
@@ -2233,6 +2289,25 @@ interface FleetlessClientOptions {
      * with a server key never calls `auth.login`/`auth.logout`.
      */
     serverKey?: string;
+    /**
+     * **A credential this client does not own.** The caller answers both
+     * questions a bearer raises: what the token is right now (`token()`), and
+     * what to do when the server says it expired (`handleExpired()`).
+     *
+     * For an embedder that already holds a session and refreshes it itself —
+     * the Fleetless console is the case this exists for. Without it such a
+     * caller had to impersonate a `TokenStore`, and a cloud-side
+     * `token_expired` arriving while its own clock still read live posted one
+     * empty refresh whose `validation_error` had to be translated back into a
+     * session message. A source that answers `handleExpired: false` never
+     * builds a refresh request at all.
+     *
+     * Mutually exclusive with `tokenStore` and `serverKey`, which each own a
+     * credential of their own; a client acts as exactly one identity.
+     * `auth.login`/`auth.logout` refuse here for the same reason they refuse
+     * on a server key: there is no session for this client to start or end.
+     */
+    credentials?: CredentialSource;
     /** Injectable for tests, or a non-global `fetch` implementation. */
     fetch?: typeof fetch;
     /** Injectable for tests, or a non-global `WebSocket` implementation. */
@@ -2302,12 +2377,14 @@ interface FleetlessClient {
  * Builds a client for one app. Pass `tokenStore` (or nothing — the default
  * keeps the session in memory) for an app-user client that signs in with
  * `auth.login` or a federated provider; pass `serverKey` for a server-side
- * caller that never holds a user session. Passing both throws, because the
- * two are different identities and a client acts as exactly one.
+ * caller that never holds a user session; pass `credentials` when the
+ * embedder already holds the bearer and refreshes it itself. Passing more
+ * than one throws, because each is a different identity and a client acts
+ * as exactly one.
  *
  * Nothing is fetched here: the realtime channel opens on the first
  * subscription and closes on `close()` or `auth.logout()`.
  */
 declare function createClient(options: FleetlessClientOptions): FleetlessClient;
 
-export { type AcceptInvitationOptions, type ActionsApi, type Asset, type AssetBytes, type AssetListResponse, type AssetsApi, type AuthApi, type BeginOidcLoginOptions, type BusyDetails, type CameraDescriptor, type CameraLiveSession, type CameraSnapshot, type CameraSnapshotMeta, type CamerasApi, type ClientIdentity, type ClientMcpInteraction, type ClientOidcErrorCode, type ClientRobotListItem, type CompleteOidcLoginOptions, type CreateMeshLoaderOptions, type DatapointEvent, type DatapointSubscription, type DatapointSubscriptionHandlers, type DatapointValue, type DatapointsApi, type FleetlessClient, type FleetlessClientConfig, type FleetlessClientOptions, FleetlessError, type FleetlessErrorCode, type FleetlessErrorOptions, type HistoryAggregation, type HistoryBucketsResponse, type HistoryOptions, type HistorySamplesResponse, InMemoryTokenStore, type InvokeOptions, type Job, type JobEvent, type JobHistoryOptions, type JobRun, type JobRunListResponse, type JobState, type JobSubscription, type JobSubscriptionHandlers, type JobsApi, type McpCapabilities, type McpConsentGrant, type McpExposure, type McpInteractionDecision, type McpRobotDatasheet, type MeshLoaderDelegate, type OidcLoginRequest, type ParameterInvalidDetails, type ParameterViolation, type PrepareUrdfSceneOptions, type ProviderButton, type PublishersApi, type RateLimitDetails, type RegisterOptions, type RobotsApi, SDK_ERROR_CODES, type SdkErrorCode, type SendCommandOptions, type ServicesApi, type StoredSession, type TokenStore, type UrdfCompleteness, type UrdfSceneManager, type UrdfSceneResources, createClient, parameterInvalidDetails };
+export { type AcceptInvitationOptions, type ActionsApi, type Asset, type AssetBytes, type AssetListResponse, type AssetsApi, type AuthApi, type BeginOidcLoginOptions, type BusyDetails, type CameraDescriptor, type CameraLiveSession, type CameraSnapshot, type CameraSnapshotMeta, type CamerasApi, type ClientIdentity, type ClientMcpInteraction, type ClientOidcErrorCode, type ClientRobotListItem, type CompleteOidcLoginOptions, type CreateMeshLoaderOptions, type CredentialSource, type DatapointEvent, type DatapointSubscription, type DatapointSubscriptionHandlers, type DatapointValue, type DatapointsApi, type FleetlessClient, type FleetlessClientConfig, type FleetlessClientOptions, FleetlessError, type FleetlessErrorCode, type FleetlessErrorOptions, type HistoryAggregation, type HistoryBucketsResponse, type HistoryOptions, type HistorySamplesResponse, InMemoryTokenStore, type InvokeOptions, type Job, type JobEvent, type JobHistoryOptions, type JobRun, type JobRunListResponse, type JobState, type JobSubscription, type JobSubscriptionHandlers, type JobsApi, type McpCapabilities, type McpConsentGrant, type McpExposure, type McpInteractionDecision, type McpRobotDatasheet, type MeshLoaderDelegate, type OidcLoginRequest, type ParameterInvalidDetails, type ParameterViolation, type PrepareUrdfSceneOptions, type ProviderButton, type PublishersApi, type RateLimitDetails, type RegisterOptions, type RobotsApi, SDK_ERROR_CODES, type SdkErrorCode, type SendCommandOptions, type ServicesApi, type StoredSession, type TokenStore, type UrdfCompleteness, type UrdfSceneManager, type UrdfSceneResources, createClient, parameterInvalidDetails };