@leaflow/sdk 0.0.0-dev.498.gdfc2667 → 0.0.0-dev.504.g6ff9fb5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (210) hide show
  1. package/dist/fleet/v1/generated/functions.d.ts +25 -15
  2. package/dist/fleet/v1/generated/functions.js +17 -10
  3. package/dist/fleet/v1/generated/models.d.ts +8 -5
  4. package/dist/fleet/v1/generated/schemas.zod.d.ts +25 -15
  5. package/dist/fleet/v1/generated/schemas.zod.js +25 -15
  6. package/dist/fleet/v1/generated/validators/accountList.zod.d.ts +8 -5
  7. package/dist/fleet/v1/generated/validators/accountList.zod.js +8 -5
  8. package/dist/fleet/v1/generated/validators/accountResource.zod.d.ts +8 -5
  9. package/dist/fleet/v1/generated/validators/accountResource.zod.js +8 -5
  10. package/dist/fleet/v1/generated/validators/approveEnrollmentRequest.zod.d.ts +8 -5
  11. package/dist/fleet/v1/generated/validators/approveEnrollmentRequest.zod.js +8 -5
  12. package/dist/fleet/v1/generated/validators/callMcpToolRequest.zod.d.ts +8 -5
  13. package/dist/fleet/v1/generated/validators/callMcpToolRequest.zod.js +8 -5
  14. package/dist/fleet/v1/generated/validators/callMcpToolResponse.zod.d.ts +8 -5
  15. package/dist/fleet/v1/generated/validators/callMcpToolResponse.zod.js +8 -5
  16. package/dist/fleet/v1/generated/validators/callToolRequest.zod.d.ts +8 -5
  17. package/dist/fleet/v1/generated/validators/callToolRequest.zod.js +8 -5
  18. package/dist/fleet/v1/generated/validators/callToolResponse.zod.d.ts +8 -5
  19. package/dist/fleet/v1/generated/validators/callToolResponse.zod.js +8 -5
  20. package/dist/fleet/v1/generated/validators/createGroupMemberRequest.zod.d.ts +8 -5
  21. package/dist/fleet/v1/generated/validators/createGroupMemberRequest.zod.js +8 -5
  22. package/dist/fleet/v1/generated/validators/createGroupRequest.zod.d.ts +8 -5
  23. package/dist/fleet/v1/generated/validators/createGroupRequest.zod.js +8 -5
  24. package/dist/fleet/v1/generated/validators/createMachineRegistrationRequest.zod.d.ts +8 -5
  25. package/dist/fleet/v1/generated/validators/createMachineRegistrationRequest.zod.js +8 -5
  26. package/dist/fleet/v1/generated/validators/createMachineRegistrationResponse.zod.d.ts +8 -5
  27. package/dist/fleet/v1/generated/validators/createMachineRegistrationResponse.zod.js +8 -5
  28. package/dist/fleet/v1/generated/validators/createParticipantRequest.zod.d.ts +8 -5
  29. package/dist/fleet/v1/generated/validators/createParticipantRequest.zod.js +8 -5
  30. package/dist/fleet/v1/generated/validators/createParticipantResponse.zod.d.ts +8 -5
  31. package/dist/fleet/v1/generated/validators/createParticipantResponse.zod.js +8 -5
  32. package/dist/fleet/v1/generated/validators/createPeerConnectionCandidatesRequest.zod.d.ts +8 -5
  33. package/dist/fleet/v1/generated/validators/createPeerConnectionCandidatesRequest.zod.js +8 -5
  34. package/dist/fleet/v1/generated/validators/createPeerConnectionRequest.zod.d.ts +8 -5
  35. package/dist/fleet/v1/generated/validators/createPeerConnectionRequest.zod.js +8 -5
  36. package/dist/fleet/v1/generated/validators/createSessionRequest.zod.d.ts +8 -5
  37. package/dist/fleet/v1/generated/validators/createSessionRequest.zod.js +8 -5
  38. package/dist/fleet/v1/generated/validators/cursorPagination.zod.d.ts +8 -5
  39. package/dist/fleet/v1/generated/validators/cursorPagination.zod.js +8 -5
  40. package/dist/fleet/v1/generated/validators/deleteMcpServerParams.zod.d.ts +8 -5
  41. package/dist/fleet/v1/generated/validators/deleteMcpServerParams.zod.js +8 -5
  42. package/dist/fleet/v1/generated/validators/denyPrivilegeRequestRequest.zod.d.ts +8 -5
  43. package/dist/fleet/v1/generated/validators/denyPrivilegeRequestRequest.zod.js +8 -5
  44. package/dist/fleet/v1/generated/validators/desktopOptions.zod.d.ts +8 -5
  45. package/dist/fleet/v1/generated/validators/desktopOptions.zod.js +8 -5
  46. package/dist/fleet/v1/generated/validators/desktopState.zod.d.ts +8 -5
  47. package/dist/fleet/v1/generated/validators/desktopState.zod.js +8 -5
  48. package/dist/fleet/v1/generated/validators/directoryName.zod.d.ts +8 -5
  49. package/dist/fleet/v1/generated/validators/directoryName.zod.js +8 -5
  50. package/dist/fleet/v1/generated/validators/enrollmentResource.zod.d.ts +8 -5
  51. package/dist/fleet/v1/generated/validators/enrollmentResource.zod.js +8 -5
  52. package/dist/fleet/v1/generated/validators/enrollmentState.zod.d.ts +8 -5
  53. package/dist/fleet/v1/generated/validators/enrollmentState.zod.js +8 -5
  54. package/dist/fleet/v1/generated/validators/error.zod.d.ts +8 -5
  55. package/dist/fleet/v1/generated/validators/error.zod.js +8 -5
  56. package/dist/fleet/v1/generated/validators/errorStatus.zod.d.ts +8 -5
  57. package/dist/fleet/v1/generated/validators/errorStatus.zod.js +8 -5
  58. package/dist/fleet/v1/generated/validators/featureState.zod.d.ts +8 -5
  59. package/dist/fleet/v1/generated/validators/featureState.zod.js +8 -5
  60. package/dist/fleet/v1/generated/validators/fieldViolation.zod.d.ts +8 -5
  61. package/dist/fleet/v1/generated/validators/fieldViolation.zod.js +8 -5
  62. package/dist/fleet/v1/generated/validators/findEnrollmentByPairingCodeParams.zod.d.ts +8 -5
  63. package/dist/fleet/v1/generated/validators/findEnrollmentByPairingCodeParams.zod.js +8 -5
  64. package/dist/fleet/v1/generated/validators/findEnrollmentResponse.zod.d.ts +8 -5
  65. package/dist/fleet/v1/generated/validators/findEnrollmentResponse.zod.js +8 -5
  66. package/dist/fleet/v1/generated/validators/getPeerConnectionParams.zod.d.ts +8 -5
  67. package/dist/fleet/v1/generated/validators/getPeerConnectionParams.zod.js +8 -5
  68. package/dist/fleet/v1/generated/validators/groupList.zod.d.ts +8 -5
  69. package/dist/fleet/v1/generated/validators/groupList.zod.js +8 -5
  70. package/dist/fleet/v1/generated/validators/groupResource.zod.d.ts +8 -5
  71. package/dist/fleet/v1/generated/validators/groupResource.zod.js +8 -5
  72. package/dist/fleet/v1/generated/validators/iceCandidate.zod.d.ts +8 -5
  73. package/dist/fleet/v1/generated/validators/iceCandidate.zod.js +8 -5
  74. package/dist/fleet/v1/generated/validators/iceServer.zod.d.ts +8 -5
  75. package/dist/fleet/v1/generated/validators/iceServer.zod.js +8 -5
  76. package/dist/fleet/v1/generated/validators/listAccountsParams.zod.d.ts +8 -5
  77. package/dist/fleet/v1/generated/validators/listAccountsParams.zod.js +8 -5
  78. package/dist/fleet/v1/generated/validators/listGroupMembersParams.zod.d.ts +8 -5
  79. package/dist/fleet/v1/generated/validators/listGroupMembersParams.zod.js +8 -5
  80. package/dist/fleet/v1/generated/validators/listGroupsParams.zod.d.ts +8 -5
  81. package/dist/fleet/v1/generated/validators/listGroupsParams.zod.js +8 -5
  82. package/dist/fleet/v1/generated/validators/listMachineEventsParams.zod.d.ts +8 -5
  83. package/dist/fleet/v1/generated/validators/listMachineEventsParams.zod.js +8 -5
  84. package/dist/fleet/v1/generated/validators/listMachineRegistrationsParams.zod.d.ts +8 -5
  85. package/dist/fleet/v1/generated/validators/listMachineRegistrationsParams.zod.js +8 -5
  86. package/dist/fleet/v1/generated/validators/listMachinesParams.zod.d.ts +8 -5
  87. package/dist/fleet/v1/generated/validators/listMachinesParams.zod.js +8 -5
  88. package/dist/fleet/v1/generated/validators/listPrivilegeAutoApprovalsParams.zod.d.ts +8 -5
  89. package/dist/fleet/v1/generated/validators/listPrivilegeAutoApprovalsParams.zod.js +8 -5
  90. package/dist/fleet/v1/generated/validators/listPrivilegeRequestsParams.zod.d.ts +8 -5
  91. package/dist/fleet/v1/generated/validators/listPrivilegeRequestsParams.zod.js +8 -5
  92. package/dist/fleet/v1/generated/validators/listSessionsParams.zod.d.ts +8 -5
  93. package/dist/fleet/v1/generated/validators/listSessionsParams.zod.js +8 -5
  94. package/dist/fleet/v1/generated/validators/listToolsParams.zod.d.ts +8 -5
  95. package/dist/fleet/v1/generated/validators/listToolsParams.zod.js +8 -5
  96. package/dist/fleet/v1/generated/validators/machineEventList.zod.d.ts +8 -5
  97. package/dist/fleet/v1/generated/validators/machineEventList.zod.js +8 -5
  98. package/dist/fleet/v1/generated/validators/machineEventResource.zod.d.ts +8 -5
  99. package/dist/fleet/v1/generated/validators/machineEventResource.zod.js +8 -5
  100. package/dist/fleet/v1/generated/validators/machineEventType.zod.d.ts +8 -5
  101. package/dist/fleet/v1/generated/validators/machineEventType.zod.js +8 -5
  102. package/dist/fleet/v1/generated/validators/machineFeature.zod.d.ts +8 -5
  103. package/dist/fleet/v1/generated/validators/machineFeature.zod.js +8 -5
  104. package/dist/fleet/v1/generated/validators/machineList.zod.d.ts +8 -5
  105. package/dist/fleet/v1/generated/validators/machineList.zod.js +8 -5
  106. package/dist/fleet/v1/generated/validators/machineRegistrationList.zod.d.ts +8 -5
  107. package/dist/fleet/v1/generated/validators/machineRegistrationList.zod.js +8 -5
  108. package/dist/fleet/v1/generated/validators/machineRegistrationResource.zod.d.ts +8 -5
  109. package/dist/fleet/v1/generated/validators/machineRegistrationResource.zod.js +8 -5
  110. package/dist/fleet/v1/generated/validators/machineRegistrationState.zod.d.ts +8 -5
  111. package/dist/fleet/v1/generated/validators/machineRegistrationState.zod.js +8 -5
  112. package/dist/fleet/v1/generated/validators/machineResource.zod.d.ts +8 -5
  113. package/dist/fleet/v1/generated/validators/machineResource.zod.js +8 -5
  114. package/dist/fleet/v1/generated/validators/mcpConfigurationFile.zod.d.ts +8 -5
  115. package/dist/fleet/v1/generated/validators/mcpConfigurationFile.zod.js +8 -5
  116. package/dist/fleet/v1/generated/validators/mcpConfigurationResource.zod.d.ts +8 -5
  117. package/dist/fleet/v1/generated/validators/mcpConfigurationResource.zod.js +8 -5
  118. package/dist/fleet/v1/generated/validators/mcpImplementation.zod.d.ts +8 -5
  119. package/dist/fleet/v1/generated/validators/mcpImplementation.zod.js +8 -5
  120. package/dist/fleet/v1/generated/validators/mcpServerFailure.zod.d.ts +8 -5
  121. package/dist/fleet/v1/generated/validators/mcpServerFailure.zod.js +8 -5
  122. package/dist/fleet/v1/generated/validators/mcpServerResource.zod.d.ts +8 -5
  123. package/dist/fleet/v1/generated/validators/mcpServerResource.zod.js +8 -5
  124. package/dist/fleet/v1/generated/validators/mcpTransport.zod.d.ts +8 -5
  125. package/dist/fleet/v1/generated/validators/mcpTransport.zod.js +8 -5
  126. package/dist/fleet/v1/generated/validators/migrationStep.zod.d.ts +8 -5
  127. package/dist/fleet/v1/generated/validators/migrationStep.zod.js +8 -5
  128. package/dist/fleet/v1/generated/validators/namedIdentity.zod.d.ts +8 -5
  129. package/dist/fleet/v1/generated/validators/namedIdentity.zod.js +8 -5
  130. package/dist/fleet/v1/generated/validators/offsetPagination.zod.d.ts +8 -5
  131. package/dist/fleet/v1/generated/validators/offsetPagination.zod.js +8 -5
  132. package/dist/fleet/v1/generated/validators/operatingSystem.zod.d.ts +8 -5
  133. package/dist/fleet/v1/generated/validators/operatingSystem.zod.js +8 -5
  134. package/dist/fleet/v1/generated/validators/participantList.zod.d.ts +8 -5
  135. package/dist/fleet/v1/generated/validators/participantList.zod.js +8 -5
  136. package/dist/fleet/v1/generated/validators/participantResource.zod.d.ts +8 -5
  137. package/dist/fleet/v1/generated/validators/participantResource.zod.js +8 -5
  138. package/dist/fleet/v1/generated/validators/peerConnection.zod.d.ts +8 -5
  139. package/dist/fleet/v1/generated/validators/peerConnection.zod.js +8 -5
  140. package/dist/fleet/v1/generated/validators/privilegeAutoApprovalList.zod.d.ts +8 -5
  141. package/dist/fleet/v1/generated/validators/privilegeAutoApprovalList.zod.js +8 -5
  142. package/dist/fleet/v1/generated/validators/privilegeAutoApprovalMode.zod.d.ts +8 -5
  143. package/dist/fleet/v1/generated/validators/privilegeAutoApprovalMode.zod.js +8 -5
  144. package/dist/fleet/v1/generated/validators/privilegeAutoApprovalResource.zod.d.ts +8 -5
  145. package/dist/fleet/v1/generated/validators/privilegeAutoApprovalResource.zod.js +8 -5
  146. package/dist/fleet/v1/generated/validators/privilegeDecider.zod.d.ts +8 -5
  147. package/dist/fleet/v1/generated/validators/privilegeDecider.zod.js +8 -5
  148. package/dist/fleet/v1/generated/validators/privilegeRequestList.zod.d.ts +8 -5
  149. package/dist/fleet/v1/generated/validators/privilegeRequestList.zod.js +8 -5
  150. package/dist/fleet/v1/generated/validators/privilegeRequestResource.zod.d.ts +8 -5
  151. package/dist/fleet/v1/generated/validators/privilegeRequestResource.zod.js +8 -5
  152. package/dist/fleet/v1/generated/validators/privilegeRequestState.zod.d.ts +8 -5
  153. package/dist/fleet/v1/generated/validators/privilegeRequestState.zod.js +8 -5
  154. package/dist/fleet/v1/generated/validators/publicKey.zod.d.ts +8 -5
  155. package/dist/fleet/v1/generated/validators/publicKey.zod.js +8 -5
  156. package/dist/fleet/v1/generated/validators/renewParticipantRequest.zod.d.ts +8 -5
  157. package/dist/fleet/v1/generated/validators/renewParticipantRequest.zod.js +8 -5
  158. package/dist/fleet/v1/generated/validators/renewParticipantResponse.zod.d.ts +8 -5
  159. package/dist/fleet/v1/generated/validators/renewParticipantResponse.zod.js +8 -5
  160. package/dist/fleet/v1/generated/validators/replaceMcpConfigurationRequest.zod.d.ts +8 -5
  161. package/dist/fleet/v1/generated/validators/replaceMcpConfigurationRequest.zod.js +8 -5
  162. package/dist/fleet/v1/generated/validators/rtcConfiguration.zod.d.ts +8 -5
  163. package/dist/fleet/v1/generated/validators/rtcConfiguration.zod.js +8 -5
  164. package/dist/fleet/v1/generated/validators/runCommandRequest.zod.d.ts +8 -5
  165. package/dist/fleet/v1/generated/validators/runCommandRequest.zod.js +8 -5
  166. package/dist/fleet/v1/generated/validators/runCommandResponse.zod.d.ts +8 -5
  167. package/dist/fleet/v1/generated/validators/runCommandResponse.zod.js +8 -5
  168. package/dist/fleet/v1/generated/validators/sendMcpRequestRequest.zod.d.ts +8 -5
  169. package/dist/fleet/v1/generated/validators/sendMcpRequestRequest.zod.js +8 -5
  170. package/dist/fleet/v1/generated/validators/sendMcpRequestResponse.zod.d.ts +8 -5
  171. package/dist/fleet/v1/generated/validators/sendMcpRequestResponse.zod.js +8 -5
  172. package/dist/fleet/v1/generated/validators/sessionCloseReason.zod.d.ts +8 -5
  173. package/dist/fleet/v1/generated/validators/sessionCloseReason.zod.js +8 -5
  174. package/dist/fleet/v1/generated/validators/sessionList.zod.d.ts +8 -5
  175. package/dist/fleet/v1/generated/validators/sessionList.zod.js +8 -5
  176. package/dist/fleet/v1/generated/validators/sessionMode.zod.d.ts +8 -5
  177. package/dist/fleet/v1/generated/validators/sessionMode.zod.js +8 -5
  178. package/dist/fleet/v1/generated/validators/sessionResource.zod.d.ts +8 -5
  179. package/dist/fleet/v1/generated/validators/sessionResource.zod.js +8 -5
  180. package/dist/fleet/v1/generated/validators/sessionState.zod.d.ts +8 -5
  181. package/dist/fleet/v1/generated/validators/sessionState.zod.js +8 -5
  182. package/dist/fleet/v1/generated/validators/signedMessage.zod.d.ts +8 -5
  183. package/dist/fleet/v1/generated/validators/signedMessage.zod.js +8 -5
  184. package/dist/fleet/v1/generated/validators/signingKey.zod.d.ts +8 -5
  185. package/dist/fleet/v1/generated/validators/signingKey.zod.js +8 -5
  186. package/dist/fleet/v1/generated/validators/toolActivityList.zod.d.ts +8 -5
  187. package/dist/fleet/v1/generated/validators/toolActivityList.zod.js +8 -5
  188. package/dist/fleet/v1/generated/validators/toolContent.zod.d.ts +8 -5
  189. package/dist/fleet/v1/generated/validators/toolContent.zod.js +8 -5
  190. package/dist/fleet/v1/generated/validators/toolDescriptor.zod.d.ts +8 -5
  191. package/dist/fleet/v1/generated/validators/toolDescriptor.zod.js +8 -5
  192. package/dist/fleet/v1/generated/validators/toolImage.zod.d.ts +8 -5
  193. package/dist/fleet/v1/generated/validators/toolImage.zod.js +8 -5
  194. package/dist/fleet/v1/generated/validators/toolList.zod.d.ts +8 -5
  195. package/dist/fleet/v1/generated/validators/toolList.zod.js +8 -5
  196. package/dist/fleet/v1/generated/validators/updateAccountRequest.zod.d.ts +8 -5
  197. package/dist/fleet/v1/generated/validators/updateAccountRequest.zod.js +8 -5
  198. package/dist/fleet/v1/generated/validators/updateGroupRequest.zod.d.ts +8 -5
  199. package/dist/fleet/v1/generated/validators/updateGroupRequest.zod.js +8 -5
  200. package/dist/fleet/v1/generated/validators/updateMachineRequest.zod.d.ts +8 -5
  201. package/dist/fleet/v1/generated/validators/updateMachineRequest.zod.js +8 -5
  202. package/dist/fleet/v1/generated/validators/updateMcpServerRequest.zod.d.ts +8 -5
  203. package/dist/fleet/v1/generated/validators/updateMcpServerRequest.zod.js +8 -5
  204. package/dist/fleet/v1/generated/validators/updateMcpServerResponse.zod.d.ts +8 -5
  205. package/dist/fleet/v1/generated/validators/updateMcpServerResponse.zod.js +8 -5
  206. package/dist/fleet/v1/generated/validators/updatePrivilegeAutoApprovalRequest.zod.d.ts +8 -5
  207. package/dist/fleet/v1/generated/validators/updatePrivilegeAutoApprovalRequest.zod.js +8 -5
  208. package/dist/proto/leaflow/fleet/virtualdesktop/application/v1/application_pb.d.ts +153 -7
  209. package/dist/proto/leaflow/fleet/virtualdesktop/application/v1/application_pb.js +21 -11
  210. package/package.json +1 -1
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -381,14 +384,16 @@ export declare const getRunMachineCommandUrl: (machineId: string) => string;
381
384
  * redirection and `&&` work; there is no terminal and no standard input. The machine admits
382
385
  * the account through PAM as for a login. The account is created if the caller has none yet.
383
386
  * A command that fails is still a successful request: its exit status is its result.
384
- * Before starting it, Fleet prepares or reuses the account's ready lightweight graphical
385
- * session, without starting a full desktop environment. The command has its own job scope;
386
- * its timeout or exit must not close the account's graphical context.
387
+ * When the machine reports graphical capability available, Fleet first prepares or reuses
388
+ * the account's ready lightweight graphical session, without starting a full desktop
389
+ * environment. Otherwise the command runs without creating a graphical session or injecting
390
+ * X environment variables. The command has its own job scope; its timeout or exit must not
391
+ * close an existing account graphical context.
387
392
  *
388
393
  * Inside the command, `sudo` works without a prompt while the caller has
389
394
  * `fleet:machines.admin` on the machine, and refuses otherwise.
390
395
  *
391
- * After graphical context preparation, the request is held until the command ends, at most
396
+ * After any required context preparation, the request is held until the command ends, at most
392
397
  * `timeout_seconds` and a few seconds more. Neither the command nor its output is hidden from the platform: do not put secrets
393
398
  * into either.
394
399
  *
@@ -396,7 +401,8 @@ export declare const getRunMachineCommandUrl: (machineId: string) => string;
396
401
  *
397
402
  * Fails with:
398
403
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
399
- * - `FEATURE_UNAVAILABLE` when the command, session or graphical backend is unavailable;
404
+ * - `FEATURE_UNAVAILABLE` when a required capability is unavailable; an absent graphical
405
+ * backend alone does not block a command;
400
406
  * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when the account context is not ready or closing;
401
407
  * - `USER_NOT_FOUND`, `USER_NOT_ALLOWED`, `ACCOUNT_EXPIRED` or `PAM_PERMISSION_DENIED` when
402
408
  * the machine refuses the account, as for opening a session;
@@ -1355,10 +1361,13 @@ export type createSessionResponse = createSessionResponseSuccess | createSession
1355
1361
  export declare const getCreateSessionUrl: () => string;
1356
1362
  /**
1357
1363
  * Opens a session for the caller on a machine, as the caller's account, and returns once it
1358
- * is ready. With `desktop` the session has a desktop. Without, Fleet first prepares or reuses
1359
- * the account's separate ready lightweight graphical session, then creates a terminal session
1360
- * with its own SID and lifetime; closing that terminal does not close the account context. Its
1361
- * one terminal runs the caller's login shell from the start, every participant attaches to
1364
+ * is ready. With `desktop` the session requires graphical capability and has a desktop.
1365
+ * Without `desktop`, Fleet creates a terminal session with its own SID and lifetime. If
1366
+ * graphical capability is available, Fleet first prepares or reuses the account's separate
1367
+ * ready lightweight graphical session; otherwise the terminal runs without creating a
1368
+ * graphical context or injecting X environment variables. Closing a terminal does not close
1369
+ * an existing account graphical context. Its one terminal runs the caller's login shell from
1370
+ * the start, every participant attaches to
1362
1371
  * that terminal, and the session ends when the shell exits; a caller who wants another
1363
1372
  * terminal opens another session. Either kind also offers programs, files, ports, sound,
1364
1373
  * devices, printers and privilege approvals. The account is created if the caller has none
@@ -1375,7 +1384,8 @@ export declare const getCreateSessionUrl: () => string;
1375
1384
  *
1376
1385
  * Fails with:
1377
1386
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
1378
- * - `FEATURE_UNAVAILABLE` when the machine does not offer sessions or the graphical backend;
1387
+ * - `FEATURE_UNAVAILABLE` when the machine does not offer the requested session capability;
1388
+ * a terminal-only request does not require a graphical backend;
1379
1389
  * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when its shared account context is not ready or closing;
1380
1390
  * - `USER_HAS_DESKTOP_SESSION` with `desktop` when the account already has a session with a
1381
1391
  * desktop on the machine, which `metadata.sessionId` names; connect to it instead;
@@ -127,14 +127,16 @@ export const getRunMachineCommandUrl = (machineId) => {
127
127
  * redirection and `&&` work; there is no terminal and no standard input. The machine admits
128
128
  * the account through PAM as for a login. The account is created if the caller has none yet.
129
129
  * A command that fails is still a successful request: its exit status is its result.
130
- * Before starting it, Fleet prepares or reuses the account's ready lightweight graphical
131
- * session, without starting a full desktop environment. The command has its own job scope;
132
- * its timeout or exit must not close the account's graphical context.
130
+ * When the machine reports graphical capability available, Fleet first prepares or reuses
131
+ * the account's ready lightweight graphical session, without starting a full desktop
132
+ * environment. Otherwise the command runs without creating a graphical session or injecting
133
+ * X environment variables. The command has its own job scope; its timeout or exit must not
134
+ * close an existing account graphical context.
133
135
  *
134
136
  * Inside the command, `sudo` works without a prompt while the caller has
135
137
  * `fleet:machines.admin` on the machine, and refuses otherwise.
136
138
  *
137
- * After graphical context preparation, the request is held until the command ends, at most
139
+ * After any required context preparation, the request is held until the command ends, at most
138
140
  * `timeout_seconds` and a few seconds more. Neither the command nor its output is hidden from the platform: do not put secrets
139
141
  * into either.
140
142
  *
@@ -142,7 +144,8 @@ export const getRunMachineCommandUrl = (machineId) => {
142
144
  *
143
145
  * Fails with:
144
146
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
145
- * - `FEATURE_UNAVAILABLE` when the command, session or graphical backend is unavailable;
147
+ * - `FEATURE_UNAVAILABLE` when a required capability is unavailable; an absent graphical
148
+ * backend alone does not block a command;
146
149
  * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when the account context is not ready or closing;
147
150
  * - `USER_NOT_FOUND`, `USER_NOT_ALLOWED`, `ACCOUNT_EXPIRED` or `PAM_PERMISSION_DENIED` when
148
151
  * the machine refuses the account, as for opening a session;
@@ -1244,10 +1247,13 @@ export const getCreateSessionUrl = () => {
1244
1247
  };
1245
1248
  /**
1246
1249
  * Opens a session for the caller on a machine, as the caller's account, and returns once it
1247
- * is ready. With `desktop` the session has a desktop. Without, Fleet first prepares or reuses
1248
- * the account's separate ready lightweight graphical session, then creates a terminal session
1249
- * with its own SID and lifetime; closing that terminal does not close the account context. Its
1250
- * one terminal runs the caller's login shell from the start, every participant attaches to
1250
+ * is ready. With `desktop` the session requires graphical capability and has a desktop.
1251
+ * Without `desktop`, Fleet creates a terminal session with its own SID and lifetime. If
1252
+ * graphical capability is available, Fleet first prepares or reuses the account's separate
1253
+ * ready lightweight graphical session; otherwise the terminal runs without creating a
1254
+ * graphical context or injecting X environment variables. Closing a terminal does not close
1255
+ * an existing account graphical context. Its one terminal runs the caller's login shell from
1256
+ * the start, every participant attaches to
1251
1257
  * that terminal, and the session ends when the shell exits; a caller who wants another
1252
1258
  * terminal opens another session. Either kind also offers programs, files, ports, sound,
1253
1259
  * devices, printers and privilege approvals. The account is created if the caller has none
@@ -1264,7 +1270,8 @@ export const getCreateSessionUrl = () => {
1264
1270
  *
1265
1271
  * Fails with:
1266
1272
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
1267
- * - `FEATURE_UNAVAILABLE` when the machine does not offer sessions or the graphical backend;
1273
+ * - `FEATURE_UNAVAILABLE` when the machine does not offer the requested session capability;
1274
+ * a terminal-only request does not require a graphical backend;
1268
1275
  * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when its shared account context is not ready or closing;
1269
1276
  * - `USER_HAS_DESKTOP_SESSION` with `desktop` when the account already has a session with a
1270
1277
  * desktop on the machine, which `metadata.sessionId` names; connect to it instead;
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -311,14 +314,16 @@ export declare const ListMachineEventsQueryParams: zod.ZodObject<{
311
314
  * redirection and `&&` work; there is no terminal and no standard input. The machine admits
312
315
  * the account through PAM as for a login. The account is created if the caller has none yet.
313
316
  * A command that fails is still a successful request: its exit status is its result.
314
- * Before starting it, Fleet prepares or reuses the account's ready lightweight graphical
315
- * session, without starting a full desktop environment. The command has its own job scope;
316
- * its timeout or exit must not close the account's graphical context.
317
+ * When the machine reports graphical capability available, Fleet first prepares or reuses
318
+ * the account's ready lightweight graphical session, without starting a full desktop
319
+ * environment. Otherwise the command runs without creating a graphical session or injecting
320
+ * X environment variables. The command has its own job scope; its timeout or exit must not
321
+ * close an existing account graphical context.
317
322
  *
318
323
  * Inside the command, `sudo` works without a prompt while the caller has
319
324
  * `fleet:machines.admin` on the machine, and refuses otherwise.
320
325
  *
321
- * After graphical context preparation, the request is held until the command ends, at most
326
+ * After any required context preparation, the request is held until the command ends, at most
322
327
  * `timeout_seconds` and a few seconds more. Neither the command nor its output is hidden from the platform: do not put secrets
323
328
  * into either.
324
329
  *
@@ -326,7 +331,8 @@ export declare const ListMachineEventsQueryParams: zod.ZodObject<{
326
331
  *
327
332
  * Fails with:
328
333
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
329
- * - `FEATURE_UNAVAILABLE` when the command, session or graphical backend is unavailable;
334
+ * - `FEATURE_UNAVAILABLE` when a required capability is unavailable; an absent graphical
335
+ * backend alone does not block a command;
330
336
  * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when the account context is not ready or closing;
331
337
  * - `USER_NOT_FOUND`, `USER_NOT_ALLOWED`, `ACCOUNT_EXPIRED` or `PAM_PERMISSION_DENIED` when
332
338
  * the machine refuses the account, as for opening a session;
@@ -920,10 +926,13 @@ export declare const ListSessionsQueryParams: zod.ZodObject<{
920
926
  }, zod.z.core.$strict>;
921
927
  /**
922
928
  * Opens a session for the caller on a machine, as the caller's account, and returns once it
923
- * is ready. With `desktop` the session has a desktop. Without, Fleet first prepares or reuses
924
- * the account's separate ready lightweight graphical session, then creates a terminal session
925
- * with its own SID and lifetime; closing that terminal does not close the account context. Its
926
- * one terminal runs the caller's login shell from the start, every participant attaches to
929
+ * is ready. With `desktop` the session requires graphical capability and has a desktop.
930
+ * Without `desktop`, Fleet creates a terminal session with its own SID and lifetime. If
931
+ * graphical capability is available, Fleet first prepares or reuses the account's separate
932
+ * ready lightweight graphical session; otherwise the terminal runs without creating a
933
+ * graphical context or injecting X environment variables. Closing a terminal does not close
934
+ * an existing account graphical context. Its one terminal runs the caller's login shell from
935
+ * the start, every participant attaches to
927
936
  * that terminal, and the session ends when the shell exits; a caller who wants another
928
937
  * terminal opens another session. Either kind also offers programs, files, ports, sound,
929
938
  * devices, printers and privilege approvals. The account is created if the caller has none
@@ -940,7 +949,8 @@ export declare const ListSessionsQueryParams: zod.ZodObject<{
940
949
  *
941
950
  * Fails with:
942
951
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
943
- * - `FEATURE_UNAVAILABLE` when the machine does not offer sessions or the graphical backend;
952
+ * - `FEATURE_UNAVAILABLE` when the machine does not offer the requested session capability;
953
+ * a terminal-only request does not require a graphical backend;
944
954
  * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when its shared account context is not ready or closing;
945
955
  * - `USER_HAS_DESKTOP_SESSION` with `desktop` when the account already has a session with a
946
956
  * desktop on the machine, which `metadata.sessionId` names; connect to it instead;
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -354,14 +357,16 @@ export const ListMachineEventsQueryParams = zod.strictObject({
354
357
  * redirection and `&&` work; there is no terminal and no standard input. The machine admits
355
358
  * the account through PAM as for a login. The account is created if the caller has none yet.
356
359
  * A command that fails is still a successful request: its exit status is its result.
357
- * Before starting it, Fleet prepares or reuses the account's ready lightweight graphical
358
- * session, without starting a full desktop environment. The command has its own job scope;
359
- * its timeout or exit must not close the account's graphical context.
360
+ * When the machine reports graphical capability available, Fleet first prepares or reuses
361
+ * the account's ready lightweight graphical session, without starting a full desktop
362
+ * environment. Otherwise the command runs without creating a graphical session or injecting
363
+ * X environment variables. The command has its own job scope; its timeout or exit must not
364
+ * close an existing account graphical context.
360
365
  *
361
366
  * Inside the command, `sudo` works without a prompt while the caller has
362
367
  * `fleet:machines.admin` on the machine, and refuses otherwise.
363
368
  *
364
- * After graphical context preparation, the request is held until the command ends, at most
369
+ * After any required context preparation, the request is held until the command ends, at most
365
370
  * `timeout_seconds` and a few seconds more. Neither the command nor its output is hidden from the platform: do not put secrets
366
371
  * into either.
367
372
  *
@@ -369,7 +374,8 @@ export const ListMachineEventsQueryParams = zod.strictObject({
369
374
  *
370
375
  * Fails with:
371
376
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
372
- * - `FEATURE_UNAVAILABLE` when the command, session or graphical backend is unavailable;
377
+ * - `FEATURE_UNAVAILABLE` when a required capability is unavailable; an absent graphical
378
+ * backend alone does not block a command;
373
379
  * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when the account context is not ready or closing;
374
380
  * - `USER_NOT_FOUND`, `USER_NOT_ALLOWED`, `ACCOUNT_EXPIRED` or `PAM_PERMISSION_DENIED` when
375
381
  * the machine refuses the account, as for opening a session;
@@ -1019,10 +1025,13 @@ export const ListSessionsQueryParams = zod.strictObject({
1019
1025
  });
1020
1026
  /**
1021
1027
  * Opens a session for the caller on a machine, as the caller's account, and returns once it
1022
- * is ready. With `desktop` the session has a desktop. Without, Fleet first prepares or reuses
1023
- * the account's separate ready lightweight graphical session, then creates a terminal session
1024
- * with its own SID and lifetime; closing that terminal does not close the account context. Its
1025
- * one terminal runs the caller's login shell from the start, every participant attaches to
1028
+ * is ready. With `desktop` the session requires graphical capability and has a desktop.
1029
+ * Without `desktop`, Fleet creates a terminal session with its own SID and lifetime. If
1030
+ * graphical capability is available, Fleet first prepares or reuses the account's separate
1031
+ * ready lightweight graphical session; otherwise the terminal runs without creating a
1032
+ * graphical context or injecting X environment variables. Closing a terminal does not close
1033
+ * an existing account graphical context. Its one terminal runs the caller's login shell from
1034
+ * the start, every participant attaches to
1026
1035
  * that terminal, and the session ends when the shell exits; a caller who wants another
1027
1036
  * terminal opens another session. Either kind also offers programs, files, ports, sound,
1028
1037
  * devices, printers and privilege approvals. The account is created if the caller has none
@@ -1039,7 +1048,8 @@ export const ListSessionsQueryParams = zod.strictObject({
1039
1048
  *
1040
1049
  * Fails with:
1041
1050
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
1042
- * - `FEATURE_UNAVAILABLE` when the machine does not offer sessions or the graphical backend;
1051
+ * - `FEATURE_UNAVAILABLE` when the machine does not offer the requested session capability;
1052
+ * a terminal-only request does not require a graphical backend;
1043
1053
  * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when its shared account context is not ready or closing;
1044
1054
  * - `USER_HAS_DESKTOP_SESSION` with `desktop` when the account already has a session with a
1045
1055
  * desktop on the machine, which `metadata.sessionId` names; connect to it instead;
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *
@@ -87,11 +87,14 @@
87
87
  * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
88
88
  * the virtual desktop capability is actually available; MCP is a separate source.
89
89
  *
90
- * A graphical backend does not require a full desktop environment. Terminal logins, commands
91
- * and MCP server initialization prepare or reuse the account's lightweight graphical context,
92
- * in addition to their own session or job. Configuration reads and writes do not initialize a
93
- * server and do not require this preparation. A request that needs a feature the machine does
94
- * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
90
+ * A graphical backend does not require a full desktop environment. When the machine reports
91
+ * graphical capability available, terminal logins and commands prepare or reuse the account's
92
+ * lightweight graphical context, in addition to their own session or job. Without graphical
93
+ * capability, ordinary commands and terminal sessions run without creating a graphical context
94
+ * or injecting X environment variables. MCP server initialization prepares or reuses a graphical
95
+ * context; configuration reads and writes do not initialize a server or require this preparation.
96
+ * A request that needs a feature the machine does not report available fails with
97
+ * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
95
98
  *
96
99
  * ## Directory
97
100
  *