@pollen-robotics/reachy-mini-sdk 1.10.0-dev.0.main.b50d97e → 1.10.0-dev.0.main.c8367cd

package/host/dist/index.js

@@ -1,14 +1,15 @@
-import { R as o } from "./chunks/reachy-mini-CdsdQLIU.js";
-import { R as s, m as a } from "./chunks/mountHost-DjE5zE9R.js";
-import { c as t } from "./chunks/index-lMs2sCXG.js";
-import { PROTOCOL_VERSION as c, decodeCredsFromHash as m, encodeCredsToHash as w, isProtocolMessage as h } from "./lib/protocol.js";
+import { R as o } from "./chunks/centralRest-uXNMidlL.js";
+import { R as i, m as a } from "./chunks/mountHost-BTTF4Uu9.js";
+import { c as r, a as c } from "./chunks/index-Beu4GNzi.js";
+import { PROTOCOL_VERSION as m, decodeCredsFromHash as w, encodeCredsToHash as h, isProtocolMessage as y } from "./lib/protocol.js";
 typeof window < "u" && !window.ReachyMini && (window.ReachyMini = o, window.dispatchEvent(new Event("reachymini:ready")));
 export {
-  c as PROTOCOL_VERSION,
-  s as ReachyHost,
-  t as connectToHost,
-  m as decodeCredsFromHash,
-  w as encodeCredsToHash,
-  h as isProtocolMessage,
+  m as PROTOCOL_VERSION,
+  i as ReachyHost,
+  r as connectToHost,
+  c as connectToHostCredsOnly,
+  w as decodeCredsFromHash,
+  h as encodeCredsToHash,
+  y as isProtocolMessage,
   a as mountHost
 };

package/host/dist/lib/daemonRelease.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Daemon version policy for the standalone web shell.
+ *
+ * Why the shell cares
+ * ───────────────────
+ * A Space runs against whatever daemon the user's robot happens to have.
+ * Neither central nor the host holds a data channel, so the only version
+ * signal is the one the embed forwards on `embed:app-state` once its
+ * session is up (`daemonVersion`).
+ *
+ * Why this is softer than the mobile app
+ * ──────────────────────────────────────
+ * The mobile app blocks the moment the daemon is behind the latest
+ * GitHub release. That is defensible for a controlled first-party
+ * funnel; it is not for the web, where every published Space would turn
+ * a daemon release into a global kill switch for robots that were
+ * working fine a minute earlier. So the web policy has two tiers:
+ *
+ *   block  - the daemon is below `MIN_SUPPORTED_DAEMON_VERSION`, i.e.
+ *            too old for the app contract to hold. Blocking is the only
+ *            honest answer.
+ *   notice - the daemon merely trails the latest release. Dismissable
+ *            banner, the app stays usable.
+ *
+ * Fail-open discipline
+ * ────────────────────
+ * Every unknown resolves to "no action". An unparseable version, a
+ * daemon too old to answer `get_version`, an offline or rate-limited
+ * GitHub: none of these may ever cost the user their app. We only act
+ * on versions we positively understand.
+ */
+/**
+ * Floor below which the shell refuses to run an app.
+ *
+ * Set to the first release that understands the WebRTC `start_update`
+ * command (reachy_mini#1208, v1.8.2), which makes it the lowest version
+ * we can still repair from here: under it, the gate's own "Update now"
+ * button would do nothing and the user has to go through the desktop
+ * app anyway.
+ */
+export declare const MIN_SUPPORTED_DAEMON_VERSION = "1.8.2";
+export interface SemVer {
+    major: number;
+    minor: number;
+    patch: number;
+}
+/**
+ * Parse a `MAJOR.MINOR.PATCH` string into a `SemVer`. Tolerates a
+ * leading `v` (GitHub tags) and trailing pre-release / build metadata
+ * (`1.8.2-rc1` → `1.8.2`). Returns `null` when the first three numeric
+ * components can't be read, so callers can fail-open.
+ */
+export declare function parseSemver(value: string | null | undefined): SemVer | null;
+/** Negative if `a < b`, positive if `a > b`, 0 if equal. */
+export declare function compareSemver(a: SemVer, b: SemVer): number;
+/**
+ * True only when BOTH versions parse AND `current` is strictly behind
+ * `latest`. Any unparseable input returns `false` (fail-open).
+ */
+export declare function isDaemonOutdated(current: string | null | undefined, latest: string | null | undefined): boolean;
+/**
+ * What the shell should do about this daemon.
+ *
+ *   `'block'`  - below the supported floor: hard gate.
+ *   `'notice'` - behind the latest release: dismissable banner.
+ *   `null`     - up to date, or not enough information to judge.
+ */
+export type DaemonUpdateSeverity = 'block' | 'notice';
+export declare function daemonUpdateSeverity(current: string | null | undefined, latest: string | null | undefined): DaemonUpdateSeverity | null;
+/**
+ * True when the daemon is new enough to install its own update over the
+ * data channel. Unknown / unparseable → false, so the caller points the
+ * user at the desktop app rather than offering a dead button.
+ */
+export declare function supportsSelfUpdate(current: string | null | undefined): boolean;
+/**
+ * Resolve the latest published daemon version (e.g. `"1.8.2"`), or
+ * `null` when it can't be determined. Cached in localStorage for
+ * `TTL_MS`: the unauthenticated GitHub API allows 60 requests per
+ * hour per IP, and a Space reloads far more often than daemons ship.
+ * Never throws.
+ */
+export declare function fetchLatestDaemonVersion(): Promise<string | null>;
+//# sourceMappingURL=daemonRelease.d.ts.map

package/host/dist/lib/daemonRelease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemonRelease.d.ts","sourceRoot":"","sources":["../../src/lib/daemonRelease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAWH;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B,UAAU,CAAC;AAEpD,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAS3E;AAED,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAClC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAChC,OAAO,CAKT;AAED;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEtD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAClC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAChC,oBAAoB,GAAG,IAAI,CAW7B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAI9E;AAsBD;;;;;;GAMG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAyBvE"}

package/host/dist/lib/protocol.d.ts

@@ -14,10 +14,12 @@
  * - Every message carries `source: 'reachy-mini'`. Lets receivers
  *   distinguish our envelopes from unrelated `postMessage` traffic
  *   (DevTools, MUI portals, browser extensions, ...).
- * - Both sides validate `event.origin` against the expected origin
- *   before trusting the payload. In our deployment (same-origin
- *   iframe within an HF Space) the expected origin is
- *   `event.origin === window.location.origin`.
+ * - Both sides validate `event.origin` before trusting the payload,
+ *   but against different references: the web shell requires strict
+ *   same-origin (`window.location.origin` - Mode A, the Space embeds
+ *   itself), while the embed accepts its PARENT's origin resolved via
+ *   `document.referrer` (Mode B, the mobile shell at e.g.
+ *   `tauri.localhost` is a different origin by construction).
  *
  * Message families
  * ────────────────
@@ -87,8 +89,19 @@ export interface HostInitMsg {
     hfToken?: string;
     /** HF account user name, when known. */
     userName?: string | null;
-    /** Robot ID selected by the host's picker. */
+    /** Robot ID selected by the host's picker. Unstable: the central
+     *  peer id rotates on every relay reconnect, so the embed treats
+     *  this as a starting point and re-resolves the live id from
+     *  `robotHardwareId` right before `startSession()`. */
     robotPeerId: string;
+    /** Stable hardware id of the selected robot (central
+     *  `meta.hardware_id`), when the daemon exposes one. Lets the embed
+     *  re-resolve the CURRENT `robotPeerId` from central just before
+     *  dialing, so a rotated peer id (long iframe cold-start, relay
+     *  reconnect) doesn't strand the app on a dead producer. Omitted for
+     *  daemons too old to advertise it - the embed then uses
+     *  `robotPeerId` as-is. */
+    robotHardwareId?: string | null;
     /** Optional opaque payload from `?config=<base64>` or from the
      *  mobile-app handoff. App is responsible for parsing /
      *  validating. */
@@ -133,7 +146,45 @@ export interface HostLeavingMsg {
      *  regardless. */
     timeoutMs: number;
 }
-export type HostToEmbedMsg = HostInitMsg | HostThemeChangedMsg | HostConfigChangedMsg | HostLeavingMsg;
+/**
+ * Ask the embed to trigger the daemon's PyPI self-update.
+ *
+ * Only the embed holds a data channel, so the host cannot send
+ * `start_update` itself - it delegates here and watches the
+ * `embed:update-progress` replies. A successful update ends with a
+ * `systemctl restart` on the robot, which kills the session: the embed
+ * will go silent and the host is expected to remount the iframe once
+ * the robot is back on central.
+ *
+ * Additive message (no version bump): an embed too old to know this
+ * type ignores it, so the host must not block on a reply.
+ */
+export interface HostStartUpdateMsg {
+    source: typeof PROTOCOL_SOURCE;
+    type: 'host:start-update';
+    version: 1;
+    /** Install the latest pre-release instead of the latest stable. */
+    preRelease?: boolean;
+}
+/**
+ * The host gave up on the update it started (its own stall timer
+ * fired while the session was still alive). This does NOT abort the
+ * daemon-side job - nothing can, the install owns the robot - it
+ * disarms the embed's update-mode plumbing: the sessionStopped →
+ * `rebooting` translator and the auto-reconnect stand-down. Without
+ * it, the user's next NORMAL end-session would replay a stale
+ * `rebooting` frame into a host that already declared the update
+ * failed.
+ *
+ * Additive message (no version bump): an embed too old to know this
+ * type ignores it, and its own translator dies with the iframe.
+ */
+export interface HostCancelUpdateMsg {
+    source: typeof PROTOCOL_SOURCE;
+    type: 'host:cancel-update';
+    version: 1;
+}
+export type HostToEmbedMsg = HostInitMsg | HostThemeChangedMsg | HostConfigChangedMsg | HostLeavingMsg | HostStartUpdateMsg | HostCancelUpdateMsg;
 /**
  * Emitted by the app as early as possible (synchronous tick of
  * the embed entry, before the SDK is touched). Tells the host
@@ -175,6 +226,65 @@ export interface EmbedAppStateMsg {
      * ignore it.
      */
     rttMs?: number | null;
+    /**
+     * Daemon version reported by the robot (`get_version` over the data
+     * channel), resolved once the session is up. Additive field (no
+     * version bump).
+     *
+     * The host has no data channel of its own and central exposes no
+     * version, so this is the ONLY way a shell can tell whether the robot
+     * it just handed the app to is running current software. The web
+     * shell uses it to gate on a minimum supported version; hosts that
+     * don't care ignore it.
+     *
+     * `null` (or omitted) until resolved, or when the daemon predates
+     * `get_version`. Receivers MUST treat "unknown" as "fine" - never
+     * block a robot just because it stayed silent.
+     */
+    daemonVersion?: string | null;
+    /**
+     * Build version of the SDK bundle the app loaded
+     * (`ReachyMini.version`, generated at publish time). Additive field
+     * (no version bump).
+     *
+     * The embed rides whatever `window.ReachyMini` the app shipped, so
+     * this tells the shell how stale the app's robot stack is - e.g. to
+     * warn that behaviour may be off against a newer daemon. `null` (or
+     * omitted) when the SDK predates the field - which, unlike
+     * `daemonVersion`, is a meaningful signal: every SDK from the release
+     * that introduced this field reports it, so silence through a live
+     * session means "built before that". Receivers may surface a notice
+     * on it, but MUST never block on it.
+     */
+    sdkVersion?: string | null;
+}
+/**
+ * Progress of a `host:start-update` job, relayed from the SDK's
+ * `update_progress` stream one message per log line.
+ *
+ *   in_progress : a log line of the install.
+ *   rebooting   : the WebRTC session died while the update was in
+ *                 flight. Synthesised by the embed, NOT by the daemon -
+ *                 a successful install restarts the daemon before it
+ *                 can report anything, so the transport dropping is the
+ *                 success signal. Nothing more will arrive on this
+ *                 channel: the host should tear the iframe down and
+ *                 wait for the robot to reappear on central.
+ *   done        : the daemon explicitly reported completion. Rare (see
+ *                 above), but forwarded when it happens.
+ *   failed      : the daemon declined the job (not wireless, no update
+ *                 available, one already running) or the install raised
+ *                 before the restart.
+ */
+export interface EmbedUpdateProgressMsg {
+    source: typeof PROTOCOL_SOURCE;
+    type: 'embed:update-progress';
+    version: 1;
+    status: 'in_progress' | 'rebooting' | 'done' | 'failed';
+    /** Log line for `in_progress`. */
+    line?: string | null;
+    /** Reason for `failed`. */
+    error?: string | null;
 }
 /** App requests to leave (user clicked an in-app exit, error,
  *  ...). The host runs the same tear-down as a top-bar
@@ -184,6 +294,22 @@ export interface EmbedRequestLeaveMsg {
     type: 'embed:request-leave';
     version: 1;
 }
+/**
+ * The embed finished its `host:leaving` tear-down: app `onLeave`
+ * callbacks ran AND the SDK's host-owned sleep sequence completed
+ * (goto_sleep trajectory + motors disabled). Lets the host unmount as
+ * soon as the robot is actually asleep instead of after a fixed
+ * worst-case timeout - and, because the WebRTC session is still up when
+ * this fires, the motors are already `Disabled` before the app-slot lock
+ * frees, so the daemon's idle-reset sees "already asleep" and does NOT
+ * replay a second goto_sleep (no double trajectory / go_sleep sound).
+ * The host still force-unmounts after its own cap if this never arrives.
+ */
+export interface EmbedLeftMsg {
+    source: typeof PROTOCOL_SOURCE;
+    type: 'embed:left';
+    version: 1;
+}
 /** App-level error report. `fatal: true` switches the host to
  *  ErrorView; `fatal: false` is logged and may surface a toast. */
 export interface EmbedErrorMsg {
@@ -194,7 +320,7 @@ export interface EmbedErrorMsg {
     fatal: boolean;
     detail?: unknown;
 }
-export type EmbedToHostMsg = EmbedReadyMsg | EmbedAppStateMsg | EmbedRequestLeaveMsg | EmbedErrorMsg;
+export type EmbedToHostMsg = EmbedReadyMsg | EmbedAppStateMsg | EmbedRequestLeaveMsg | EmbedLeftMsg | EmbedErrorMsg | EmbedUpdateProgressMsg;
 /**
  * Serialised credentials passed from the host (Mode A) or the
  * mobile app (Mode B) to the embed via the URL hash fragment.
@@ -211,6 +337,14 @@ export interface CredsBundle {
     hfToken?: string | null;
     userName?: string | null;
     robotPeerId: string;
+    /** Stable hardware id of the selected robot (central
+     *  `meta.hardware_id`), when the daemon exposes one. Lets the embed
+     *  re-resolve the CURRENT `robotPeerId` from central just before
+     *  dialing, so a rotated peer id (long iframe cold-start, relay
+     *  reconnect) doesn't strand the app on a dead producer. Omitted for
+     *  daemons too old to advertise it - the embed then uses
+     *  `robotPeerId` as-is. */
+    robotHardwareId?: string | null;
     signalingUrl: string;
     theme: ThemeMode;
     config: ConfigPayload;

package/host/dist/lib/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/lib/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,kDAAkD;AAClD,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,6CAA6C;AAC7C,eAAO,MAAM,eAAe,EAAG,aAAsB,CAAC;AAEtD,uDAAuD;AACvD,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;AAEzC;;;;;;;;;;GAUG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;AAE5E;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAE5D,2DAA2D;AAC3D,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC;AAEpC,uDAAuD;AACvD,MAAM,MAAM,aAAa,GACrB,aAAa,GACb,iBAAiB,GACjB,OAAO,GACP,UAAU,CAAC;AAIf;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,SAAS,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB;+BAC2B;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB;;sBAEkB;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB;+DAC2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,sEAAsE;AACtE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,SAAS,CAAC;CAClB;AAED,oDAAoD;AACpD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,qBAAqB,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,aAAa,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,aAAa,CAAC;IACtB;sBACkB;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,cAAc,GACtB,WAAW,GACX,mBAAmB,GACnB,oBAAoB,GACpB,cAAc,CAAC;AAInB;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,CAAC,CAAC;CACZ;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,QAAQ,CAAC;IAChB,8DAA8D;IAC9D,cAAc,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC1C,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;qBAEqB;AACrB,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,qBAAqB,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC;CACZ;AAED;mEACmE;AACnE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,cAAc,GACtB,aAAa,GACb,gBAAgB,GAChB,oBAAoB,GACpB,aAAa,CAAC;AAIlB;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAID;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,OAAO,GACb,KAAK,IAAI;IAAE,MAAM,EAAE,OAAO,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAQ5E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAI7D;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,WAAW,GAAG,IAAI,CAe3E"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/lib/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,kDAAkD;AAClD,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,6CAA6C;AAC7C,eAAO,MAAM,eAAe,EAAG,aAAsB,CAAC;AAEtD,uDAAuD;AACvD,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;AAEzC;;;;;;;;;;GAUG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;AAE5E;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAE5D,2DAA2D;AAC3D,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC;AAEpC,uDAAuD;AACvD,MAAM,MAAM,aAAa,GACrB,aAAa,GACb,iBAAiB,GACjB,OAAO,GACP,UAAU,CAAC;AAIf;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,SAAS,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB;+BAC2B;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;2DAGuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;+BAM2B;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;;sBAEkB;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB;+DAC2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,sEAAsE;AACtE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,SAAS,CAAC;CAClB;AAED,oDAAoD;AACpD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,qBAAqB,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,aAAa,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,aAAa,CAAC;IACtB;sBACkB;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC;IACX,mEAAmE;IACnE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC;CACZ;AAED,MAAM,MAAM,cAAc,GACtB,WAAW,GACX,mBAAmB,GACnB,oBAAoB,GACpB,cAAc,GACd,kBAAkB,GAClB,mBAAmB,CAAC;AAIxB;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,CAAC,CAAC;CACZ;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,QAAQ,CAAC;IAChB,8DAA8D;IAC9D,cAAc,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC1C,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,uBAAuB,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,aAAa,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAC;IACxD,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;qBAEqB;AACrB,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,qBAAqB,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC;CACZ;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,CAAC,CAAC;CACZ;AAED;mEACmE;AACnE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,cAAc,GACtB,aAAa,GACb,gBAAgB,GAChB,oBAAoB,GACpB,YAAY,GACZ,aAAa,GACb,sBAAsB,CAAC;AAI3B;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;+BAM2B;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAID;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,OAAO,GACb,KAAK,IAAI;IAAE,MAAM,EAAE,OAAO,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAQ5E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAI7D;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,WAAW,GAAG,IAAI,CAe3E"}

package/host/dist/lib/rebootWatch.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Offline-first latch for the daemon-update reboot watch.
+ *
+ * Problem: when the daemon restarts mid-update, the shell tears the
+ * iframe down and waits for the robot to reappear on central before
+ * telling `DaemonUpdateGate` the update is done. But central can keep
+ * the robot's PRE-reboot registration listed for a while (the SSE
+ * offline event or the listing TTL hasn't fired yet), so "the robot is
+ * listed" alone reads the STALE entry as "back online" seconds after
+ * the reboot started - the gate then declares success while the robot
+ * is still down, and the user re-picks a dead robot.
+ *
+ * Peer-id exclusion doesn't fix this: the embed re-resolves the live
+ * peer id right before dialing, so the shell doesn't reliably know
+ * which id the stale listing carries. What IS reliable is the order of
+ * observations: the dying relay connection makes central drop the old
+ * registration (realtime SSE `roles: []` event), and only then does the
+ * rebooted daemon re-register under a fresh id. So the watch requires
+ * seeing the robot ABSENT from the list at least once (the sticky
+ * `sawTargetOffline` boolean) before accepting its presence as "back
+ * online". Callers must skip observations while the list is still in
+ * its initial-loading window, where an empty array means "no data yet".
+ *
+ * If central never drops the stale entry (not observed in practice -
+ * the relay socket dies with the daemon), the watch never completes and
+ * the gate's reboot timeout produces an honest "check your robot"
+ * message instead of a false success.
+ */
+import type { RobotInfo } from './sdk-types';
+/** What the shell remembers about the robot it dropped mid-update. */
+export interface RebootTarget {
+    /** Stable hardware id (serial), the strongest match. */
+    hardwareId: string | null;
+    /** Advertised name, fallback for daemons without a hardware id. */
+    name: string | null;
+}
+/**
+ * Is the rebooting robot present in the central listing? Matched on
+ * hardware id first (survives the peer-id rotation), then name. With
+ * neither identity (older daemon), fall back to "any robot listed":
+ * combined with the offline-first latch this means "the list emptied,
+ * then repopulated", which is correct for single-robot accounts and
+ * degrades to the gate's reboot timeout on multi-robot ones.
+ */
+export declare function isTargetListed(robots: readonly RobotInfo[], target: RebootTarget): boolean;
+/** Sticky offline latch, advanced on every settled observation: once
+ *  the target has been seen absent, it stays seen. The watch completes
+ *  when `sawTargetOffline(...) && isTargetListed(...)` - never on a run
+ *  of presence-only observations (the stale-listing regression). */
+export declare function sawTargetOffline(prev: boolean, targetListed: boolean): boolean;
+//# sourceMappingURL=rebootWatch.d.ts.map

package/host/dist/lib/rebootWatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rebootWatch.d.ts","sourceRoot":"","sources":["../../src/lib/rebootWatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,sEAAsE;AACtE,MAAM,WAAW,YAAY;IAC3B,wDAAwD;IACxD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mEAAmE;IACnE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,SAAS,SAAS,EAAE,EAC5B,MAAM,EAAE,YAAY,GACnB,OAAO,CAMT;AAED;;;oEAGoE;AACpE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAE9E"}

package/host/dist/lib/sdk-types.d.ts

@@ -10,7 +10,7 @@
  * `ts/lib/types.ts` (re-exported from `ts/reachy-mini-sdk.ts`) — the
  * shipped `.d.ts` is auto-generated by `tsc` from that source.
  */
-export type { RobotInfo, RobotState, ReachyMiniOptions, ReachyMiniInstance, ReachyMiniConstructor, AutoConnectOptions, AutoConnectRobotChoice, AutoConnectResult, MotionAwaitOptions, SubscribeLogsOptions, } from '@pollen-robotics/reachy-mini-sdk';
+export type { RobotInfo, RobotState, ReachyMiniOptions, ReachyMiniInstance, ReachyMiniConstructor, AutoConnectOptions, AutoConnectRobotChoice, AutoConnectResult, MotionAwaitOptions, SubscribeLogsOptions, StartDaemonUpdateOptions, UpdateProgressEvent, } from '@pollen-robotics/reachy-mini-sdk';
 import type { ReachyMiniConstructor } from '@pollen-robotics/reachy-mini-sdk';
 /**
  * Host-internal global augmentation: the host shell instantiates

package/host/dist/lib/sdk-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-types.d.ts","sourceRoot":"","sources":["../../src/lib/sdk-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,YAAY,EACV,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAE9E;;;;;;;;;;;;;;GAcG;AACH,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,UAAU,EAAE,qBAAqB,CAAC;QAClC;gEACwD;QACxD,WAAW,CAAC,EAAE;YACZ,SAAS,CAAC,EAAE;gBACV,eAAe,CAAC,EAAE,MAAM,CAAC;gBACzB,YAAY,CAAC,EAAE,MAAM,CAAC;gBACtB,UAAU,CAAC,EAAE,MAAM,CAAC;gBACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;aACnB,CAAC;SACH,CAAC;KACH;CACF;AAED,OAAO,EAAE,CAAC"}
+{"version":3,"file":"sdk-types.d.ts","sourceRoot":"","sources":["../../src/lib/sdk-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,YAAY,EACV,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAE9E;;;;;;;;;;;;;;GAcG;AACH,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,UAAU,EAAE,qBAAqB,CAAC;QAClC;gEACwD;QACxD,WAAW,CAAC,EAAE;YACZ,SAAS,CAAC,EAAE;gBACV,eAAe,CAAC,EAAE,MAAM,CAAC;gBACzB,YAAY,CAAC,EAAE,MAAM,CAAC;gBACtB,UAAU,CAAC,EAAE,MAAM,CAAC;gBACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;aACnB,CAAC;SACH,CAAC;KACH;CACF;AAED,OAAO,EAAE,CAAC"}

package/host/dist/lib/sdkStaleness.d.ts

@@ -0,0 +1,78 @@
+/**
+ * SDK staleness self-check for the embed runtime.
+ *
+ * Why this exists
+ * ───────────────
+ * A published Space bundles its SDK at build time and is never
+ * rebuilt: if a bundled SDK generation ever becomes incompatible with
+ * the deployed daemons, there is NO channel to tell the users of those
+ * frozen apps - except code that ships inside the app itself. This
+ * module is that channel. It runs inside the iframe, so every host
+ * (web shell, mobile WebView, anything future) is covered with zero
+ * parent integration. The one case it structurally cannot cover is a
+ * bundle that predates this very check; an independently-updated
+ * parent catches that instead (the mobile app, via the absence of
+ * `sdkVersion` on app-state).
+ *
+ * Why it is this conservative (learned in #1316 review)
+ * ─────────────────────────────────────────────────────
+ * The first cut of this feature was the "global kill switch" the
+ * daemon update policy explicitly argues against: it warned on ANY
+ * version gap, full-screen, on every reload, comparing the npm bundle
+ * version against the DAEMON's GitHub release tag - two version lines
+ * that only agree while they happen to be tagged together. This
+ * version inverts every one of those choices:
+ *
+ *   - source of truth: the npm registry entry of the package itself.
+ *     The registry is what apps actually install from, so it cannot
+ *     drift from the bundle's own version line.
+ *   - trigger: MAJOR gap only. A major bump is the only signal that
+ *     the app/robot contract may genuinely no longer hold; minor and
+ *     patch releases must never nag a working app.
+ *   - dismissal: persisted (localStorage). One "I understand" covers
+ *     everything up to the dismissed major; the overlay returns only
+ *     when a NEWER major ships.
+ *   - theming: follows `prefers-color-scheme` instead of hardcoding a
+ *     light card into apps that may be dark.
+ *
+ * Fail-open discipline: unparseable versions, dev placeholders
+ * (`0.x`), an unreachable registry - all resolve to "stay silent".
+ * Advisory code must never cost the user their app.
+ */
+/**
+ * Resolve the latest published SDK version from the npm registry's
+ * `latest` dist-tag (a ~200-byte JSON, CORS-enabled), or `null` when
+ * it can't be determined. Cached in localStorage for `TTL_MS`; a
+ * failed refresh serves the stale value rather than flapping to null.
+ * Never throws.
+ */
+export declare function fetchLatestSdkVersion(): Promise<string | null>;
+/**
+ * Should the overlay show for this current/latest pair? True only
+ * when BOTH versions parse, the current one is a real release (not a
+ * `0.x` dev placeholder), and the latest is a strictly NEWER MAJOR.
+ * Anything unknown resolves to false.
+ */
+export declare function isSdkMajorBehind(current: string | null | undefined, latest: string | null | undefined): boolean;
+/**
+ * A dismissal covers every release up to the dismissed latest's
+ * major: the overlay returns only when a newer major ships than the
+ * one the user already acknowledged.
+ */
+export declare function isSdkWarningDismissed(latest: string | null | undefined): boolean;
+export declare function dismissSdkWarning(latest: string): void;
+/**
+ * Fire-and-forget entry point for the embed: check, and show the
+ * overlay when (and only when) the bundled SDK is a full major behind
+ * the npm registry and the user hasn't already acknowledged that
+ * major. Never throws, never blocks the session.
+ */
+export declare function maybeWarnSdkStale(currentVersion: string | null): Promise<void>;
+/**
+ * Plain-DOM overlay (the embed is framework-agnostic). Colors follow
+ * `prefers-color-scheme` - an advisory card must not hardcode a light
+ * theme into an app that may be dark. Exported for tests; production
+ * code goes through `maybeWarnSdkStale`.
+ */
+export declare function showSdkStalenessOverlay(current: string, latest: string): void;
+//# sourceMappingURL=sdkStaleness.d.ts.map

package/host/dist/lib/sdkStaleness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdkStaleness.d.ts","sourceRoot":"","sources":["../../src/lib/sdkStaleness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AA6CH;;;;;;GAMG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAgBpE;AAID;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAClC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAChC,OAAO,CAMT;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAChC,OAAO,CAUT;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAMtD;AAID;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf;AAWD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,IAAI,CA2DN"}

package/host/dist/lib/settings.d.ts

@@ -12,12 +12,14 @@
  *
  * Storage rules (APP_CREATION_GUIDE §13.5.2 hash-only creds):
  *  - HF token + user name live in `sessionStorage` (tab-scoped,
- *    wiped on close). The Reachy Mini SDK reads them from
- *    `hf_token` / `hf_username` / `hf_token_expires`.
+ *    dies with the tab). The Reachy Mini SDK owns those keys via its
+ *    token-store (`hf_token` / `hf_username` / `hf_token_expires` /
+ *    `hf_token_last_seen`), which bounds their lifetime with the OAuth
+ *    expiry plus a sliding idle window.
  *  - Persistent flags (`hf_oauth_client_id`, `oauth-pending`,
- *    `signed-out`) live in `localStorage`.
- *  - Tokens have a 15 min TTL by default; the SDK refreshes
- *    on demand if a real OAuth refresh flow is wired.
+ *    `signed-out`) live in `localStorage`; the one-shot silent-auth
+ *    attempt flag lives in `sessionStorage` (must survive the OAuth
+ *    redirect round trip but reset with a fresh tab).
  */
 export type ClientIdSource = 'none' | 'caller' | 'space' | 'localStorage';
 export interface DevTokenConfig {
@@ -59,6 +61,15 @@ export declare function markUserSignedOut(): void;
 export declare function clearSignedOutFlag(): void;
 /** Returns `true` if the user explicitly signed out earlier. */
 export declare function isUserSignedOut(): boolean;
+/** Mark that this tab already attempted a silent sign-in
+ *  (`login({ prompt: 'none' })`), successful or not. Read before
+ *  auto-redirecting so a declined silent auth can never loop. */
+export declare function markSilentAuthAttempted(): void;
+/** `true` if this tab already attempted a silent sign-in. */
+export declare function hasSilentAuthAttempted(): boolean;
+/** Re-arm the silent attempt (explicit "Sign in" click), so a future
+ *  boot in this tab may try silently again. */
+export declare function clearSilentAuthAttempted(): void;
 /** Wipe HF token keys from sessionStorage. Called by the embed
  *  on `host:leaving` before the iframe unmounts
  *  (APP_CREATION_GUIDE §13.5.2). */

package/host/dist/lib/settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/lib/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAYH,MAAM,MAAM,cAAc,GACtB,MAAM,GACN,QAAQ,GACR,OAAO,GACP,cAAc,CAAC;AAEnB,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAW3E;AAED;wDACwD;AACxD,wBAAgB,qBAAqB,CACnC,cAAc,CAAC,EAAE,MAAM,GACtB;IAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CAW1D;AAED,sDAAsD;AACtD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAMpD;AAWD;8CAC8C;AAC9C,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAYzD;AAED;;2BAE2B;AAC3B,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED;;iCAEiC;AACjC,wBAAgB,iBAAiB,IAAI,OAAO,CAI3C;AAID;mEACmE;AACnE,wBAAgB,gBAAgB,IAAI,IAAI,CAMvC;AAED;+DAC+D;AAC/D,wBAAgB,mBAAmB,IAAI,OAAO,CAQ7C;AAID;+DAC+D;AAC/D,wBAAgB,iBAAiB,IAAI,IAAI,CAMxC;AAED;iCACiC;AACjC,wBAAgB,kBAAkB,IAAI,IAAI,CAMzC;AAED,gEAAgE;AAChE,wBAAgB,eAAe,IAAI,OAAO,CAMzC;AAID;;oCAEoC;AACpC,wBAAgB,oBAAoB,IAAI,IAAI,CAQ3C;AAID;;sDAEsD;AACtD,wBAAgB,aAAa,CAAC,CAAC,GAAG,OAAO,KAAK,CAAC,GAAG,IAAI,CAUrD"}
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/lib/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAgBH,MAAM,MAAM,cAAc,GACtB,MAAM,GACN,QAAQ,GACR,OAAO,GACP,cAAc,CAAC;AAEnB,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAW3E;AAED;wDACwD;AACxD,wBAAgB,qBAAqB,CACnC,cAAc,CAAC,EAAE,MAAM,GACtB;IAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CAW1D;AAED,sDAAsD;AACtD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAMpD;AAWD;8CAC8C;AAC9C,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAYzD;AAED;;2BAE2B;AAC3B,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED;;iCAEiC;AACjC,wBAAgB,iBAAiB,IAAI,OAAO,CAI3C;AAID;mEACmE;AACnE,wBAAgB,gBAAgB,IAAI,IAAI,CAMvC;AAED;+DAC+D;AAC/D,wBAAgB,mBAAmB,IAAI,OAAO,CAQ7C;AAID;+DAC+D;AAC/D,wBAAgB,iBAAiB,IAAI,IAAI,CAMxC;AAED;iCACiC;AACjC,wBAAgB,kBAAkB,IAAI,IAAI,CAMzC;AAED,gEAAgE;AAChE,wBAAgB,eAAe,IAAI,OAAO,CAMzC;AAID;;iEAEiE;AACjE,wBAAgB,uBAAuB,IAAI,IAAI,CAM9C;AAED,6DAA6D;AAC7D,wBAAgB,sBAAsB,IAAI,OAAO,CAMhD;AAED;+CAC+C;AAC/C,wBAAgB,wBAAwB,IAAI,IAAI,CAM/C;AAID;;oCAEoC;AACpC,wBAAgB,oBAAoB,IAAI,IAAI,CAS3C;AAID;;sDAEsD;AACtD,wBAAgB,aAAa,CAAC,CAAC,GAAG,OAAO,KAAK,CAAC,GAAG,IAAI,CAUrD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pollen-robotics/reachy-mini-sdk",
-  "version": "1.10.0-dev.0.main.b50d97e",
+  "version": "1.10.0-dev.0.main.c8367cd",
   "description": "Browser SDK for controlling a Reachy Mini robot over WebRTC, plus an optional Hugging Face Spaces host shell (OAuth + robot picker + iframe bridge) exposed via the ./host subpath.",
   "type": "module",
   "main": "./dist/reachy-mini-sdk.js",
@@ -45,6 +45,8 @@
   ],
   "sideEffects": false,
   "scripts": {
+    "gen:version": "node scripts/gen-version.mjs",
+    "prebuild:sdk": "node scripts/gen-version.mjs",
     "build:sdk": "tsc -p tsconfig.json",
     "build:host": "cd host && vite build && tsc -p tsconfig.build.json",
     "build": "npm run build:sdk && npm run build:host",
@@ -53,14 +55,16 @@
     "typecheck:host": "cd host && tsc --noEmit",
     "typecheck": "npm run typecheck:sdk && npm run typecheck:host",
     "dev": "cd host && vite",
+    "test": "vitest run",
+    "test:watch": "vitest",
     "clean": "rm -rf dist host/dist"
   },
   "dependencies": {
     "@emotion/react": "^11.14.0",
     "@emotion/styled": "^11.14.1",
     "@huggingface/hub": "^0.15.2",
-    "@mui/icons-material": "^7.3.5",
-    "@mui/material": "^7.3.5"
+    "@mui/icons-material": "^9.0.0",
+    "@mui/material": "^9.0.0"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",
@@ -75,14 +79,17 @@
     }
   },
   "devDependencies": {
+    "@testing-library/react": "^16.3.2",
     "@types/node": "^25.7.0",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react-swc": "^4.0.0",
+    "jsdom": "^29.1.1",
     "react": "^19.2.5",
     "react-dom": "^19.2.5",
     "typescript": "^5.7.3",
-    "vite": "^7.2.1"
+    "vite": "^7.2.1",
+    "vitest": "^4.1.10"
   },
   "keywords": [
     "reachy",