@leaflow/sdk 0.200.0 → 0.201.0

package/dist/fleet/v1/generated/functions.js

@@ -127,19 +127,23 @@ export const getRunMachineCommandUrl = (machineId) => {
  * redirection and `&&` work; there is no terminal and no standard input. The machine admits
  * the account through PAM as for a login. The account is created if the caller has none yet.
  * A command that fails is still a successful request: its exit status is its result.
+ * Before starting it, Fleet prepares or reuses the account's ready lightweight graphical
+ * session, without starting a full desktop environment. The command has its own job scope;
+ * its timeout or exit must not close the account's graphical context.
  *
  * Inside the command, `sudo` works without a prompt while the caller has
  * `fleet:machines.admin` on the machine, and refuses otherwise.
  *
- * The request is held until the command ends, at most `timeout_seconds` and a few seconds
- * more. Neither the command nor its output is hidden from the platform: do not put secrets
+ * After graphical context preparation, the request is held until the command ends, at most
+ * `timeout_seconds` and a few seconds more. Neither the command nor its output is hidden from the platform: do not put secrets
  * into either.
  *
  * Requires `fleet:machines.login` on the machine.
  *
  * Fails with:
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
- * - `FEATURE_UNAVAILABLE` when the machine does not offer `leaflow.fleet.command.v1`;
+ * - `FEATURE_UNAVAILABLE` when the command, session or graphical backend is unavailable;
+ * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when the account context is not ready or closing;
  * - `USER_NOT_FOUND`, `USER_NOT_ALLOWED`, `ACCOUNT_EXPIRED` or `PAM_PERMISSION_DENIED` when
  *   the machine refuses the account, as for opening a session;
  * - `COMMAND_START_FAILED` when the shell could not start; nothing ran;
@@ -326,6 +330,105 @@ export const deleteMcpServer = async (machineId, serverName, params, options, fe
     const data = body ? JSON.parse(body) : {};
     return { data, status: res.status, headers: res.headers };
 };
+export const getListToolsUrl = (machineId, params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value !== undefined) {
+            normalizedParams.append(key, value === null ? "null" : String(value));
+        }
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0
+        ? `https://fleet.leaflow.cloud/api/v1/machines/${encodeURIComponent(String(machineId))}/tools?${stringifiedParams}`
+        : `https://fleet.leaflow.cloud/api/v1/machines/${encodeURIComponent(String(machineId))}/tools`;
+};
+/**
+ * Queries Agent's builtin tools and the caller's configured MCP servers live. No directory,
+ * result or image is cached. Requires fleet:machines.login; builtin capabilities retain
+ * their native policies and read-only restrictions. Ensures or reuses the caller's single
+ * open graphical session, without launching a desktop environment. The client instance is
+ * a UUID generated once per running client, not an authorization credential. Each request
+ * checks current IAM permissions and signs a short-lived control-only authorization.
+ * Tool arguments, results and images traverse Fleet with hop-by-hop TLS and are visible to
+ * Fleet. Existing desktop streaming remains end-to-end encrypted. TOOL_LIST_CHANGED means
+ * restart listing from the first page, never replay a CallTool. At most 100 tools per page.
+ * @summary List live tools available to the caller on a machine
+ */
+export const listTools = async (machineId, params, options, fetchFn) => {
+    const res = await (fetchFn ?? fetch)(getListToolsUrl(machineId, params), {
+        ...options,
+        method: "GET",
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getCallToolUrl = (machineId) => {
+    return `https://fleet.leaflow.cloud/api/v1/machines/${encodeURIComponent(String(machineId))}/tools:call`;
+};
+/**
+ * Uses the same current permissions, directory account and graphical session as listTools.
+ * Listing is not a precondition: callers may use a previously discovered ToolRef, and this
+ * operation never sends a discovery request or refreshes schemas before executing it.
+ * A removed tool or MCP server returns TOOL_NOT_FOUND, as does a direct builtin computer.*
+ * call while virtual desktop capability is unavailable. Actual permission errors remain
+ * permission errors; a missing target window is not a missing tool. Use listTools only when
+ * discovery or refresh is needed, and do not cache or reuse execution results.
+ * Source is explicit: MCP names never select or impersonate builtin tools. The arguments
+ * object is at most 256 KiB. The complete result is at most 8 MiB in the protobuf transport,
+ * with each encoded image at most 4 MiB; images are converted to base64 once at this JSON
+ * boundary, without recompression or persistence. Cancellation is propagated. A timeout,
+ * disconnect or failed response does not prove that side effects did not happen; do not
+ * automatically replay. operation_id only correlates live activity, not idempotency.
+ * @summary Call a live builtin or external MCP tool
+ */
+export const callTool = async (machineId, callToolRequest, options, fetchFn) => {
+    const getHeaders = (h) => {
+        if (!h)
+            return {};
+        if (h instanceof Headers)
+            return Object.fromEntries(h.entries());
+        if (Symbol.iterator in h) {
+            return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+        }
+        const headers = {};
+        for (const [name, value] of Object.entries(h)) {
+            if (value !== undefined)
+                headers[name] = value;
+        }
+        return headers;
+    };
+    const res = await (fetchFn ?? fetch)(getCallToolUrl(machineId), {
+        ...options,
+        method: "POST",
+        headers: { "Content-Type": "application/json", ...getHeaders(options?.headers) },
+        body: JSON.stringify(callToolRequest),
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getPollToolActivitiesUrl = (sessionId) => {
+    return `https://fleet.leaflow.cloud/api/v1/sessions/${encodeURIComponent(String(sessionId))}/tool-activities`;
+};
+/**
+ * Checks current session viewing permission for each request and again before returning
+ * events. Subscribes only while this request is pending, returning on the first batch or
+ * after at most 20 idle seconds. At most 64 events, no offline queue, event database, cursor
+ * history or replay guarantee. Missing events never mean repeat an action. Coordinates
+ * are window-client-local (window_id=0 means canvas), not CSS or image pixels. The frontend
+ * applies its own zoom and DPI. Compare sequence only within the same instance_id.
+ * @summary Receive live tool activity for an authorized session
+ */
+export const pollToolActivities = async (sessionId, options, fetchFn) => {
+    const res = await (fetchFn ?? fetch)(getPollToolActivitiesUrl(sessionId), {
+        ...options,
+        method: "GET",
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
 export const getSendMcpRequestUrl = (machineId, serverName) => {
     return `https://fleet.leaflow.cloud/api/v1/machines/${encodeURIComponent(String(machineId))}/mcp-servers/${encodeURIComponent(String(serverName))}:send`;
 };
@@ -333,7 +436,9 @@ export const getSendMcpRequestUrl = (machineId, serverName) => {
  * Sends one JSON-RPC request of MCP to one of the caller's servers on the machine, such as
  * `tools/call`, `resources/read` or `prompts/get`, and returns the server's response. The
  * machine starts or connects to the server if it is not running, and handles its
- * initialization itself; a request still running when `timeout_seconds` passes is cancelled
+ * initialization itself. Before any such request, Fleet prepares or reuses the caller's
+ * ready lightweight account graphical session, including for resources and prompts; no full
+ * desktop environment is needed. A request still running when `timeout_seconds` passes is cancelled
  * at the server. Requests the server makes of the client are answered as by a client that
  * offers no sampling, elicitation or roots, and its notifications, such as of progress, are
  * dropped. A response with a JSON-RPC error is a successful request. Neither the request nor
@@ -347,7 +452,8 @@ export const getSendMcpRequestUrl = (machineId, serverName) => {
  *   is one of initialization;
  * - `RESULT_TOO_LARGE` when the response is larger than 8 MiB;
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
- * - `FEATURE_UNAVAILABLE` when the machine does not offer `leaflow.fleet.mcp.v1`;
+ * - `FEATURE_UNAVAILABLE` when the MCP, session or graphical backend is unavailable;
+ * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when the account context is not ready or closing;
  * - `USER_NOT_FOUND`, `USER_NOT_ALLOWED`, `ACCOUNT_EXPIRED` or `PAM_PERMISSION_DENIED` when
  *   the machine refuses the account, as for opening a session;
  * - `MCP_START_FAILED` when the machine could not start MCP for the caller's account;
@@ -393,6 +499,7 @@ export const getCallMcpToolUrl = (machineId, serverName, toolName) => {
  * Fails as sending a request does, and with `MCP_REQUEST_FAILED` when the server answers
  * with a JSON-RPC error, such as for a tool it does not offer or arguments it does not
  * accept, with the error's `metadata.code` and `metadata.message`.
+ * @deprecated
  * @summary Call an MCP tool
  */
 export const callMcpTool = async (machineId, serverName, toolName, callMcpToolRequest, options, fetchFn) => {
@@ -450,6 +557,7 @@ export const getListMcpToolsUrl = (machineId, params) => {
  *   the machine refuses the account, as for opening a session;
  * - `MCP_START_FAILED` when the machine could not start MCP for the caller's account;
  * - `MACHINE_TIMEOUT` when the machine did not answer in time.
+ * @deprecated
  * @summary List the caller's MCP tools on a machine
  */
 export const listMcpTools = async (machineId, params, options, fetchFn) => {
@@ -1174,12 +1282,19 @@ export const getCreateSessionUrl = () => {
 };
 /**
  * Opens a session for the caller on a machine, as the caller's account, and returns once it
- * is ready. With `desktop` the session has a desktop. Without, it is a terminal session: its
+ * is ready. With `desktop` the session has a desktop. Without, Fleet first prepares or reuses
+ * the account's separate ready lightweight graphical session, then creates a terminal session
+ * with its own SID and lifetime; closing that terminal does not close the account context. Its
  * one terminal runs the caller's login shell from the start, every participant attaches to
  * that terminal, and the session ends when the shell exits; a caller who wants another
  * terminal opens another session. Either kind also offers programs, files, ports, sound,
  * devices, printers and privilege approvals. The account is created if the caller has none
  * yet. Requires `fleet:machines.login` on the machine.
+ * All newly created graphical account sessions, including desktop-first FullDesktop and
+ * Seamless sessions, keep running when no viewer has joined or the last viewer disconnects.
+ * Configured maximum lifetime, resource limits and explicit close/terminate still apply.
+ * This create API has no client-selected idle policy; existing running policies are not
+ * silently rewritten when tools, commands or terminals reuse the account context.
  *
  * On a machine an account has at most one session with a desktop and at most 8 sessions in
  * all. Sessions without a desktop run side by side, such as one for a program and one for a
@@ -1187,8 +1302,8 @@ export const getCreateSessionUrl = () => {
  *
  * Fails with:
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
- * - `FEATURE_UNAVAILABLE` when the machine does not offer sessions, or with `desktop`,
- *   desktops;
+ * - `FEATURE_UNAVAILABLE` when the machine does not offer sessions or the graphical backend;
+ * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when its shared account context is not ready or closing;
  * - `USER_HAS_DESKTOP_SESSION` with `desktop` when the account already has a session with a
  *   desktop on the machine, which `metadata.sessionId` names; connect to it instead;
  * - `SESSION_LIMIT_REACHED` when the account already has 8 open sessions on the machine;

package/dist/fleet/v1/generated/models.d.ts

@@ -83,11 +83,15 @@
  *   and remote ones it connects to;
  * - `leaflow.fleet.host.v1`: terminal sessions, with programs, files, ports, sound, devices,
  *   printers and privilege approvals;
- * - `leaflow.fleet.virtualdesktop.host.v1`: sessions with a desktop.
+ * - `leaflow.fleet.virtualdesktop.host.v1`: sessions with a graphical backend;
+ * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
+ *   the virtual desktop capability is actually available; MCP is a separate source.
  *
- * A machine installed without a desktop does not offer `leaflow.fleet.virtualdesktop.host.v1`. A
- * request that needs a feature the machine does not report available fails with
- * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names the feature.
+ * A graphical backend does not require a full desktop environment. Terminal logins, commands
+ * and MCP server initialization prepare or reuse the account's lightweight graphical context,
+ * in addition to their own session or job. Configuration reads and writes do not initialize a
+ * server and do not require this preparation. A request that needs a feature the machine does
+ * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
  *
  * ## Directory
  *
@@ -975,6 +979,167 @@ export interface SendMcpRequestResponse {
     /** The server's JSON-RPC 2.0 response, with the id of the request */
     response: SendMcpRequestResponseResponse;
 }
+export type ToolRefSource = (typeof ToolRefSource)[keyof typeof ToolRefSource];
+export declare const ToolRefSource: {
+    readonly builtin: "builtin";
+    readonly mcp: "mcp";
+};
+export interface ToolRef {
+    source: ToolRefSource;
+    /**
+     * @minLength 1
+     * @maxLength 128
+     */
+    name: string;
+    /**
+     * Required only for mcp; forbidden for builtin
+     * @minLength 1
+     * @maxLength 64
+     */
+    server?: string;
+}
+export type ToolDescriptorInputSchema = {
+    [key: string]: unknown;
+};
+export type ToolDescriptorOutputSchema = {
+    [key: string]: unknown;
+};
+/**
+ * Untrusted display metadata; never grants authorization
+ */
+export type ToolDescriptorMetadata = {
+    [key: string]: unknown;
+};
+export interface ToolDescriptor {
+    tool: ToolRef;
+    name: string;
+    title: string;
+    description: string;
+    input_schema: ToolDescriptorInputSchema;
+    output_schema?: ToolDescriptorOutputSchema;
+    /** Untrusted display metadata; never grants authorization */
+    metadata?: ToolDescriptorMetadata;
+}
+export type ToolListUnavailableSourcesItemSource = (typeof ToolListUnavailableSourcesItemSource)[keyof typeof ToolListUnavailableSourcesItemSource];
+export declare const ToolListUnavailableSourcesItemSource: {
+    readonly builtin: "builtin";
+    readonly mcp: "mcp";
+};
+export type ToolListUnavailableSourcesItem = {
+    source: ToolListUnavailableSourcesItemSource;
+    mcp_server: string;
+    code: number;
+    reason: string;
+};
+export interface ToolList {
+    session_id: string;
+    items: ToolDescriptor[];
+    next_page_token: string;
+    unavailable_sources: ToolListUnavailableSourcesItem[];
+}
+/**
+ * A JSON object, at most 256 KiB when encoded
+ */
+export type CallToolRequestArguments = {
+    [key: string]: unknown;
+};
+export interface CallToolRequest {
+    client_instance_id: string;
+    tool: ToolRef;
+    /** A JSON object, at most 256 KiB when encoded */
+    arguments: CallToolRequestArguments;
+    read_only?: boolean;
+    /**
+     * @minimum 1
+     * @maximum 240
+     */
+    timeout_seconds?: number;
+}
+/**
+ * Untrusted content extensions such as MCP annotations or _meta, without duplicated body or image data
+ */
+export type ToolContentMetadata = {
+    [key: string]: unknown;
+};
+/**
+ * An unrecognized external content block, preserved as data
+ */
+export type ToolContentJson = {
+    [key: string]: unknown;
+};
+export type ToolImageMimeType = (typeof ToolImageMimeType)[keyof typeof ToolImageMimeType];
+export declare const ToolImageMimeType: {
+    readonly "image/png": "image/png";
+    readonly "image/jpeg": "image/jpeg";
+    readonly "image/webp": "image/webp";
+};
+/**
+ * ScreenshotContext in protobuf JSON with original field names: reference, window_id,
+ * area, windows (including resize_counter and shape_counter), captured_at, revision,
+ * quiet. uint64 values are decimal strings to preserve precision. Images do not change
+ * this original geometry. The opaque reference binds coordinate actions to this capture.
+ */
+export type ToolImageScreenshot = {
+    [key: string]: unknown;
+};
+export interface ToolImage {
+    /** Base64 of Agent's original encoded image bytes, never a URL */
+    data: string;
+    mime_type: ToolImageMimeType;
+    /** @minimum 1 */
+    width: number;
+    /** @minimum 1 */
+    height: number;
+    /**
+     * ScreenshotContext in protobuf JSON with original field names: reference, window_id,
+     * area, windows (including resize_counter and shape_counter), captured_at, revision,
+     * quiet. uint64 values are decimal strings to preserve precision. Images do not change
+     * this original geometry. The opaque reference binds coordinate actions to this capture.
+     */
+    screenshot?: ToolImageScreenshot;
+}
+/**
+ * Exactly one of text, image or json is present
+ */
+export interface ToolContent {
+    /** Untrusted content extensions such as MCP annotations or _meta, without duplicated body or image data */
+    metadata?: ToolContentMetadata;
+    text?: string;
+    image?: ToolImage;
+    /** An unrecognized external content block, preserved as data */
+    json?: ToolContentJson;
+}
+export type CallToolResponseStructuredContent = {
+    [key: string]: unknown;
+};
+/**
+ * Untrusted result extensions such as MCP _meta, without duplicated content or images
+ */
+export type CallToolResponseMetadata = {
+    [key: string]: unknown;
+};
+export interface CallToolResponse {
+    session_id: string;
+    operation_id: string;
+    content: ToolContent[];
+    structured_content?: CallToolResponseStructuredContent;
+    /** Untrusted result extensions such as MCP _meta, without duplicated content or images */
+    metadata?: CallToolResponseMetadata;
+    is_error: boolean;
+}
+/**
+ * ToolActivity in protobuf JSON with original field names. Includes session_id,
+ * participant_id, operation_id, instance_id, sequence, observed_at, phase, action and
+ * optional target (window_id, position x/y, resize_counter, shape_counter). All uint64
+ * values are decimal strings. No input text, key values, arguments or image data.
+ */
+export type ToolActivityListItemsItem = {
+    [key: string]: unknown;
+};
+export interface ToolActivityList {
+    /** @maxItems 64 */
+    items: ToolActivityListItemsItem[];
+}
 /**
  * The tool's arguments, as its `input_schema` describes them
  */
@@ -1426,6 +1591,34 @@ export type DeleteMcpServerParams = {
      */
     expected_revision?: string;
 };
+export type ListToolsParams = {
+    client_instance_id: string;
+    source?: ListToolsSource;
+    /**
+     * @maxLength 64
+     */
+    mcp_server?: string;
+    /**
+     * @maxLength 256
+     */
+    query?: string;
+    read_only?: boolean;
+    /**
+     * @minimum 1
+     * @maximum 100
+     */
+    page_size?: number;
+    /**
+     * @maxLength 4096
+     */
+    page_token?: string;
+};
+export type ListToolsSource = (typeof ListToolsSource)[keyof typeof ListToolsSource];
+export declare const ListToolsSource: {
+    readonly all: "all";
+    readonly builtin: "builtin";
+    readonly mcp: "mcp";
+};
 export type ListMcpToolsParams = {
     /**
      * Only this server's tools

package/dist/fleet/v1/generated/models.js

@@ -68,6 +68,19 @@ export const McpServerFailure = {
     protocol_error: "protocol_error",
     timeout: "timeout",
 };
+export const ToolRefSource = {
+    builtin: "builtin",
+    mcp: "mcp",
+};
+export const ToolListUnavailableSourcesItemSource = {
+    builtin: "builtin",
+    mcp: "mcp",
+};
+export const ToolImageMimeType = {
+    "image/png": "image/png",
+    "image/jpeg": "image/jpeg",
+    "image/webp": "image/webp",
+};
 export const PrivilegeAutoApprovalMode = {
     automatic_review: "automatic_review",
     always_approve: "always_approve",
@@ -99,3 +112,8 @@ export const CreateParticipantRequestPermissionsItem = {
     "fleet:privilegeapprove": "fleet:privilege.approve",
     "fleet:logsread": "fleet:logs.read",
 };
+export const ListToolsSource = {
+    all: "all",
+    builtin: "builtin",
+    mcp: "mcp",
+};

package/dist/fleet/v1/generated/schemas.zod.d.ts

@@ -83,11 +83,15 @@
  *   and remote ones it connects to;
  * - `leaflow.fleet.host.v1`: terminal sessions, with programs, files, ports, sound, devices,
  *   printers and privilege approvals;
- * - `leaflow.fleet.virtualdesktop.host.v1`: sessions with a desktop.
+ * - `leaflow.fleet.virtualdesktop.host.v1`: sessions with a graphical backend;
+ * - `leaflow.fleet.tool.v1`: live session tools. Builtin `computer.*` tools are exposed only while
+ *   the virtual desktop capability is actually available; MCP is a separate source.
  *
- * A machine installed without a desktop does not offer `leaflow.fleet.virtualdesktop.host.v1`. A
- * request that needs a feature the machine does not report available fails with
- * `FEATURE_UNAVAILABLE`, whose `metadata.feature` names the feature.
+ * A graphical backend does not require a full desktop environment. Terminal logins, commands
+ * and MCP server initialization prepare or reuse the account's lightweight graphical context,
+ * in addition to their own session or job. Configuration reads and writes do not initialize a
+ * server and do not require this preparation. A request that needs a feature the machine does
+ * not report available fails with `FEATURE_UNAVAILABLE`, whose `metadata.feature` names it.
  *
  * ## Directory
  *
@@ -307,19 +311,23 @@ export declare const ListMachineEventsQueryParams: zod.ZodObject<{
  * redirection and `&&` work; there is no terminal and no standard input. The machine admits
  * the account through PAM as for a login. The account is created if the caller has none yet.
  * A command that fails is still a successful request: its exit status is its result.
+ * Before starting it, Fleet prepares or reuses the account's ready lightweight graphical
+ * session, without starting a full desktop environment. The command has its own job scope;
+ * its timeout or exit must not close the account's graphical context.
  *
  * Inside the command, `sudo` works without a prompt while the caller has
  * `fleet:machines.admin` on the machine, and refuses otherwise.
  *
- * The request is held until the command ends, at most `timeout_seconds` and a few seconds
- * more. Neither the command nor its output is hidden from the platform: do not put secrets
+ * After graphical context preparation, the request is held until the command ends, at most
+ * `timeout_seconds` and a few seconds more. Neither the command nor its output is hidden from the platform: do not put secrets
  * into either.
  *
  * Requires `fleet:machines.login` on the machine.
  *
  * Fails with:
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
- * - `FEATURE_UNAVAILABLE` when the machine does not offer `leaflow.fleet.command.v1`;
+ * - `FEATURE_UNAVAILABLE` when the command, session or graphical backend is unavailable;
+ * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when the account context is not ready or closing;
  * - `USER_NOT_FOUND`, `USER_NOT_ALLOWED`, `ACCOUNT_EXPIRED` or `PAM_PERMISSION_DENIED` when
  *   the machine refuses the account, as for opening a session;
  * - `COMMAND_START_FAILED` when the shell could not start; nothing ran;
@@ -435,11 +443,95 @@ export declare const deleteMcpServerQueryExpectedRevisionMax = 64;
 export declare const DeleteMcpServerQueryParams: zod.ZodObject<{
     expected_revision: zod.ZodOptional<zod.ZodString>;
 }, zod.z.core.$strict>;
+/**
+ * Queries Agent's builtin tools and the caller's configured MCP servers live. No directory,
+ * result or image is cached. Requires fleet:machines.login; builtin capabilities retain
+ * their native policies and read-only restrictions. Ensures or reuses the caller's single
+ * open graphical session, without launching a desktop environment. The client instance is
+ * a UUID generated once per running client, not an authorization credential. Each request
+ * checks current IAM permissions and signs a short-lived control-only authorization.
+ * Tool arguments, results and images traverse Fleet with hop-by-hop TLS and are visible to
+ * Fleet. Existing desktop streaming remains end-to-end encrypted. TOOL_LIST_CHANGED means
+ * restart listing from the first page, never replay a CallTool. At most 100 tools per page.
+ * @summary List live tools available to the caller on a machine
+ */
+export declare const ListToolsParams: zod.ZodObject<{
+    machineId: zod.ZodUUID;
+}, zod.z.core.$strict>;
+export declare const listToolsQuerySourceDefault = "all";
+export declare const listToolsQueryMcpServerMax = 64;
+export declare const listToolsQueryQueryMax = 256;
+export declare const listToolsQueryReadOnlyDefault = false;
+export declare const listToolsQueryPageSizeDefault = 100;
+export declare const listToolsQueryPageSizeMax = 100;
+export declare const listToolsQueryPageTokenMax = 4096;
+export declare const ListToolsQueryParams: zod.ZodObject<{
+    client_instance_id: zod.ZodUUID;
+    source: zod.ZodDefault<zod.ZodEnum<{
+        builtin: "builtin";
+        all: "all";
+        mcp: "mcp";
+    }>>;
+    mcp_server: zod.ZodOptional<zod.ZodString>;
+    query: zod.ZodOptional<zod.ZodString>;
+    read_only: zod.ZodDefault<zod.ZodBoolean>;
+    page_size: zod.ZodDefault<zod.ZodInt>;
+    page_token: zod.ZodOptional<zod.ZodString>;
+}, zod.z.core.$strict>;
+/**
+ * Uses the same current permissions, directory account and graphical session as listTools.
+ * Listing is not a precondition: callers may use a previously discovered ToolRef, and this
+ * operation never sends a discovery request or refreshes schemas before executing it.
+ * A removed tool or MCP server returns TOOL_NOT_FOUND, as does a direct builtin computer.*
+ * call while virtual desktop capability is unavailable. Actual permission errors remain
+ * permission errors; a missing target window is not a missing tool. Use listTools only when
+ * discovery or refresh is needed, and do not cache or reuse execution results.
+ * Source is explicit: MCP names never select or impersonate builtin tools. The arguments
+ * object is at most 256 KiB. The complete result is at most 8 MiB in the protobuf transport,
+ * with each encoded image at most 4 MiB; images are converted to base64 once at this JSON
+ * boundary, without recompression or persistence. Cancellation is propagated. A timeout,
+ * disconnect or failed response does not prove that side effects did not happen; do not
+ * automatically replay. operation_id only correlates live activity, not idempotency.
+ * @summary Call a live builtin or external MCP tool
+ */
+export declare const CallToolParams: zod.ZodObject<{
+    machineId: zod.ZodUUID;
+}, zod.z.core.$strict>;
+export declare const CallToolBody: zod.ZodObject<{
+    client_instance_id: zod.ZodUUID;
+    tool: zod.ZodObject<{
+        source: zod.ZodEnum<{
+            builtin: "builtin";
+            mcp: "mcp";
+        }>;
+        name: zod.ZodString;
+        server: zod.ZodOptional<zod.ZodString>;
+    }, zod.z.core.$strict>;
+    arguments: zod.ZodRecord<zod.ZodString, zod.ZodUnknown>;
+    read_only: zod.ZodDefault<zod.ZodBoolean>;
+    timeout_seconds: zod.ZodDefault<zod.ZodInt>;
+}, zod.z.core.$strict>;
+/**
+ * Checks current session viewing permission for each request and again before returning
+ * events. Subscribes only while this request is pending, returning on the first batch or
+ * after at most 20 idle seconds. At most 64 events, no offline queue, event database, cursor
+ * history or replay guarantee. Missing events never mean repeat an action. Coordinates
+ * are window-client-local (window_id=0 means canvas), not CSS or image pixels. The frontend
+ * applies its own zoom and DPI. Compare sequence only within the same instance_id.
+ * @summary Receive live tool activity for an authorized session
+ */
+export declare const pollToolActivitiesPathSessionIdMax = 40;
+export declare const pollToolActivitiesPathSessionIdRegExp: RegExp;
+export declare const PollToolActivitiesParams: zod.ZodObject<{
+    sessionId: zod.ZodString;
+}, zod.z.core.$strict>;
 /**
  * Sends one JSON-RPC request of MCP to one of the caller's servers on the machine, such as
  * `tools/call`, `resources/read` or `prompts/get`, and returns the server's response. The
  * machine starts or connects to the server if it is not running, and handles its
- * initialization itself; a request still running when `timeout_seconds` passes is cancelled
+ * initialization itself. Before any such request, Fleet prepares or reuses the caller's
+ * ready lightweight account graphical session, including for resources and prompts; no full
+ * desktop environment is needed. A request still running when `timeout_seconds` passes is cancelled
  * at the server. Requests the server makes of the client are answered as by a client that
  * offers no sampling, elicitation or roots, and its notifications, such as of progress, are
  * dropped. A response with a JSON-RPC error is a successful request. Neither the request nor
@@ -453,7 +545,8 @@ export declare const DeleteMcpServerQueryParams: zod.ZodObject<{
  *   is one of initialization;
  * - `RESULT_TOO_LARGE` when the response is larger than 8 MiB;
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
- * - `FEATURE_UNAVAILABLE` when the machine does not offer `leaflow.fleet.mcp.v1`;
+ * - `FEATURE_UNAVAILABLE` when the MCP, session or graphical backend is unavailable;
+ * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when the account context is not ready or closing;
  * - `USER_NOT_FOUND`, `USER_NOT_ALLOWED`, `ACCOUNT_EXPIRED` or `PAM_PERMISSION_DENIED` when
  *   the machine refuses the account, as for opening a session;
  * - `MCP_START_FAILED` when the machine could not start MCP for the caller's account;
@@ -479,6 +572,7 @@ export declare const SendMcpRequestBody: zod.ZodObject<{
  * Fails as sending a request does, and with `MCP_REQUEST_FAILED` when the server answers
  * with a JSON-RPC error, such as for a tool it does not offer or arguments it does not
  * accept, with the error's `metadata.code` and `metadata.message`.
+ * @deprecated
  * @summary Call an MCP tool
  */
 export declare const callMcpToolPathServerNameRegExp: RegExp;
@@ -509,6 +603,7 @@ export declare const CallMcpToolBody: zod.ZodObject<{
  *   the machine refuses the account, as for opening a session;
  * - `MCP_START_FAILED` when the machine could not start MCP for the caller's account;
  * - `MACHINE_TIMEOUT` when the machine did not answer in time.
+ * @deprecated
  * @summary List the caller's MCP tools on a machine
  */
 export declare const ListMcpToolsParams: zod.ZodObject<{
@@ -863,12 +958,19 @@ export declare const ListSessionsQueryParams: zod.ZodObject<{
 }, zod.z.core.$strict>;
 /**
  * Opens a session for the caller on a machine, as the caller's account, and returns once it
- * is ready. With `desktop` the session has a desktop. Without, it is a terminal session: its
+ * is ready. With `desktop` the session has a desktop. Without, Fleet first prepares or reuses
+ * the account's separate ready lightweight graphical session, then creates a terminal session
+ * with its own SID and lifetime; closing that terminal does not close the account context. Its
  * one terminal runs the caller's login shell from the start, every participant attaches to
  * that terminal, and the session ends when the shell exits; a caller who wants another
  * terminal opens another session. Either kind also offers programs, files, ports, sound,
  * devices, printers and privilege approvals. The account is created if the caller has none
  * yet. Requires `fleet:machines.login` on the machine.
+ * All newly created graphical account sessions, including desktop-first FullDesktop and
+ * Seamless sessions, keep running when no viewer has joined or the last viewer disconnects.
+ * Configured maximum lifetime, resource limits and explicit close/terminate still apply.
+ * This create API has no client-selected idle policy; existing running policies are not
+ * silently rewritten when tools, commands or terminals reuse the account context.
  *
  * On a machine an account has at most one session with a desktop and at most 8 sessions in
  * all. Sessions without a desktop run side by side, such as one for a program and one for a
@@ -876,8 +978,8 @@ export declare const ListSessionsQueryParams: zod.ZodObject<{
  *
  * Fails with:
  * - `MACHINE_OFFLINE` when the machine is not connected and does not connect again in time;
- * - `FEATURE_UNAVAILABLE` when the machine does not offer sessions, or with `desktop`,
- *   desktops;
+ * - `FEATURE_UNAVAILABLE` when the machine does not offer sessions or the graphical backend;
+ * - `SESSION_UNAVAILABLE` or `SESSION_CLOSED` when its shared account context is not ready or closing;
  * - `USER_HAS_DESKTOP_SESSION` with `desktop` when the account already has a session with a
  *   desktop on the machine, which `metadata.sessionId` names; connect to it instead;
  * - `SESSION_LIMIT_REACHED` when the account already has 8 open sessions on the machine;