tesla-fleet-api 0.4.0 → 0.5.0

package/dist/index.mjs

@@ -1,14 +1,27 @@
-import Commands from "./commands.mjs";
+import Charging from "./charging.mjs";
+import Commands, { DAY_OF_WEEK_BITS, days_of_week_mask, infotainment_command_name, vcsec_command_name } from "./commands.mjs";
 import Energy from "./energy.mjs";
-import EnergySpecific from "./energyspecific.mjs";
+import EnergySpecific, { MAX_DISPATCH_DURATION_SECONDS, UNSIGNED_DEVICE_COMMANDS, validate_dispatch_battery_power } from "./energyspecific.mjs";
+import Partner from "./partner.mjs";
 import TeslaFleetApi from "./teslafleetapi.mjs";
-import Teslemetry from "./teslemetry.mjs";
+import TeslaFleetOAuth from "./oauth.mjs";
+import Teslemetry, { REGISTER_URL, register_client } from "./teslemetry.mjs";
 import Tessie from "./tessie.mjs";
+import User from "./user.mjs";
 import Vehicle from "./vehicle.mjs";
 import VehicleSigned from "./vehiclesigned.mjs";
 import VehicleSpecific from "./vehiclespecific.mjs";
+import { TeslemetryVehicle, TeslemetryVehicleTelemetry, TeslemetryVehicles } from "./teslemetryvehicle.mjs";
+import { TessieVehicle, TessieVehicles } from "./tessievehicle.mjs";
+import { ENERGY_SIGNATURE_TTL_SECONDS, EnergyDeviceSigner } from "./signing/energy.mjs";
+import { DEFAULT_PAIRING_POLL_INTERVAL, DEFAULT_PAIRING_TIMEOUT, TeslemetryEnergySite, TeslemetryEnergySites } from "./teslemetryenergy.mjs";
+import { parse_authorized_clients, parse_gateway_address } from "./energyparsers.mjs";
+import { CLOSURE_STATES, FieldPath, LOCK_STATES, ObservationFunnel, TeslemetryStreamPublisher, VehicleDataResultPublisher } from "./funnel.mjs";
 import { Session } from "./signing/session.mjs";
+import { jws_exports } from "./signing/jws.mjs";
+import { ec_private_key_from_pem, generate_ec_private_key_pem, generate_rsa_private_key_pem, rsa_public_der_pkcs1 } from "./signing/keys.mjs";
 import { AESDecryptAuthFault, AuthorizedClientPairingTimedOut, AuthorizedClientWaitExpired, BadGateway, BluetoothCloudUnavailableError, BluetoothCommandFailed, BluetoothTimeout, BluetoothTransportError, BluetoothUnconfirmedCommand, ClientClosedRequest, CouldNotHashMetadataFault, CouldNotRetrieveKeyFault, CouldNotRetrieveTokenFault, DeviceUnexpectedResponse, ECDSAInputFault, ECDSASignatureFault, EnergyGatewayUnreachable, Forbidden, GatewayTimeout, INFORMATION_FAULTS, IVIncorrectLengthFault, IVSmallerThanExpectedFault, IncorrectEpochFault, InsufficientCredits, InternalServerError, InvalidAuthCode, InvalidCommand, InvalidField, InvalidMethod, InvalidRedirectUrl, InvalidRegion, InvalidRequest, InvalidResource, InvalidResponse, InvalidScope, InvalidTeslemetryToken, InvalidTessieToken, InvalidToken, InvalidTokenFault, KEY_REJECTED_FAULTS, LibraryError, LocalEntityResultFault, LocalEntityStartFault, Locked, LoginRequired, MESSAGE_FAULTS, MissingTeslemetryToken, MissingTessieToken, MissingToken, MobileAccessDisabled, NotAcceptable, NotAllowed, NotFound, NotOnWhitelistFault, NotProvisionedWithIdentityFault, OAuthExpired, OAuthInvalid, PaymentRequired, PreconditionFailed, PrivateKeyError, RateLimited, ResourceUnavailableForLegalReasons, ResponseError, SIGNED_MESSAGE_INFORMATION_FAULTS, ServiceUnavailable, SessionInfoAuthenticationFault, SignatureTooShortFault, SignedCommandRequired, SignedCommandResponseReplayed, SignedMessageInformationFault, SignedMessageInformationFaultAESDecryptAuth, SignedMessageInformationFaultCouldNotHashMetadata, SignedMessageInformationFaultCouldNotRetrieveKey, SignedMessageInformationFaultCouldNotRetrieveToken, SignedMessageInformationFaultECDSAInput, SignedMessageInformationFaultECDSASignature, SignedMessageInformationFaultIVIncorrectLength, SignedMessageInformationFaultIVSmallerThanExpected, SignedMessageInformationFaultIncorrectEpoch, SignedMessageInformationFaultInvalidToken, SignedMessageInformationFaultLocalEntityResult, SignedMessageInformationFaultLocalEntityStart, SignedMessageInformationFaultNotOnWhitelist, SignedMessageInformationFaultNotProvisionedWithIdentity, SignedMessageInformationFaultSignatureTooShort, SignedMessageInformationFaultTimeExpired, SignedMessageInformationFaultTokenAndCounterInvalid, SignedMessageInformationFaultTokenIsIncorrectLength, SignedMessageInformationFaultUnknown, SigningDisabled, SubscriptionRequired, TeslaFleetConnectionError, TeslaFleetError, TeslaFleetInformationFault, TeslaFleetMessageFault, TeslaFleetMessageFaultBadParameter, TeslaFleetMessageFaultBusy, TeslaFleetMessageFaultCommandRequiresAccountCredentials, TeslaFleetMessageFaultCouldNotHashMetadata, TeslaFleetMessageFaultDecoding, TeslaFleetMessageFaultFieldExceedsMTU, TeslaFleetMessageFaultIVIncorrectLength, TeslaFleetMessageFaultInactiveKey, TeslaFleetMessageFaultIncorrectEpoch, TeslaFleetMessageFaultInsufficientPrivileges, TeslaFleetMessageFaultInternal, TeslaFleetMessageFaultInvalidCommand, TeslaFleetMessageFaultInvalidDomains, TeslaFleetMessageFaultInvalidKeyHandle, TeslaFleetMessageFaultInvalidSignature, TeslaFleetMessageFaultInvalidTokenOrCounter, TeslaFleetMessageFaultKeychainIsFull, TeslaFleetMessageFaultNotProvisionedWithIdentity, TeslaFleetMessageFaultRemoteAccessDisabled, TeslaFleetMessageFaultRemoteServiceAccessDisabled, TeslaFleetMessageFaultRepeatedCounter, TeslaFleetMessageFaultRequiresResponseEncryption, TeslaFleetMessageFaultResponseSizeExceedsMTU, TeslaFleetMessageFaultTimeExpired, TeslaFleetMessageFaultTimeToLiveTooLong, TeslaFleetMessageFaultTimeout, TeslaFleetMessageFaultUnknownKeyId, TeslaFleetMessageFaultWrongPersonalization, TeslemetryRegistrationError, TimeExpiredFault, TokenAndCounterInvalidFault, TokenIsIncorrectLengthFault, UnauthorizedClient, UnknownFault, UnsupportedVehicle, VehicleOffline, VehicleSubscriptionRequired, WHITELIST_OPERATION_STATUS, WhitelistOperationAttemptingToAddExistingKey, WhitelistOperationAttemptingToAddKeyWithServiceRole, WhitelistOperationAttemptingToAddKeyWithoutRole, WhitelistOperationAttemptingToDemoteSuperiorToOneself, WhitelistOperationAttemptingToElevateOthersAboveOneself, WhitelistOperationAttemptingToRemoveOwnPermissions, WhitelistOperationCouldNotStartLocalEntityAuth, WhitelistOperationFMAttemptingToAddPermanentKey, WhitelistOperationFMAttemptingToRemovePermanentKey, WhitelistOperationFMModifyingOutsideOfFMode, WhitelistOperationInvalidPublicKey, WhitelistOperationKeychainWhileFSFull, WhitelistOperationKeyfobSlotsFull, WhitelistOperationLocalEntityAuthFailedCancelled, WhitelistOperationLocalEntityAuthFailedTimedOutWaitingForTap, WhitelistOperationLocalEntityAuthFailedTimedOutWaitingForUIAck, WhitelistOperationLocalEntityAuthFailedUIDenied, WhitelistOperationLocalEntityAuthFailedValetMode, WhitelistOperationNoPermissionToAdd, WhitelistOperationNoPermissionToChangePermissions, WhitelistOperationNoPermissionToRemove, WhitelistOperationNoPermissionToRemoveOneself, WhitelistOperationNonServiceKeyAttemptingToAddServiceTech, WhitelistOperationNotAllowedToAddUnlessOnReader, WhitelistOperationPublicKeyNotOnWhitelist, WhitelistOperationServiceKeyAttemptingToAddServiceTechOutsideServiceMode, WhitelistOperationStatus, WhitelistOperationUndocumentedError, WhitelistOperationWhitelistFull, is_key_rejected, raise_for_status } from "./exceptions.mjs";
-import { getTariffPeriods } from "./tariff.mjs";
-import { AuthorizationRole, AuthorizedClientKeyType, AuthorizedClientState, AuthorizedClientType, AuthorizedVerificationType, AutoSeat, BluetoothVehicleData, CabinOverheatProtectionTemp, ClimateKeeperMode, ClimateModes, ClosureState, DeviceType, DistanceUnit, EnergyDeviceIdentifierType, EnergyDisplayFormat, EnergyExportMode, EnergyIslandMode, EnergyOperationMode, Level, Method, Models, PhoneFontSize, SERVERS, Scope, SeatHeaterLevel, Seats, SunRoofCommand, TOKEN_URLS, TemperatureUnit, TeslaEnergyPeriod, TimeDisplayFormat, TirePressureUnit, Trunk, VehicleDataEndpoint, VehicleImageType, WindowCommand, is_valid_region } from "./const.mjs";
-export { AESDecryptAuthFault, AuthorizationRole, AuthorizedClientKeyType, AuthorizedClientPairingTimedOut, AuthorizedClientState, AuthorizedClientType, AuthorizedClientWaitExpired, AuthorizedVerificationType, AutoSeat, BadGateway, BluetoothCloudUnavailableError, BluetoothCommandFailed, BluetoothTimeout, BluetoothTransportError, BluetoothUnconfirmedCommand, BluetoothVehicleData, CabinOverheatProtectionTemp, ClientClosedRequest, ClimateKeeperMode, ClimateModes, ClosureState, Commands, CouldNotHashMetadataFault, CouldNotRetrieveKeyFault, CouldNotRetrieveTokenFault, DeviceType, DeviceUnexpectedResponse, DistanceUnit, ECDSAInputFault, ECDSASignatureFault, Energy, EnergyDeviceIdentifierType, EnergyDisplayFormat, EnergyExportMode, EnergyGatewayUnreachable, EnergyIslandMode, EnergyOperationMode, EnergySpecific, Forbidden, GatewayTimeout, INFORMATION_FAULTS, IVIncorrectLengthFault, IVSmallerThanExpectedFault, IncorrectEpochFault, InsufficientCredits, InternalServerError, InvalidAuthCode, InvalidCommand, InvalidField, InvalidMethod, InvalidRedirectUrl, InvalidRegion, InvalidRequest, InvalidResource, InvalidResponse, InvalidScope, InvalidTeslemetryToken, InvalidTessieToken, InvalidToken, InvalidTokenFault, KEY_REJECTED_FAULTS, Level, LibraryError, LocalEntityResultFault, LocalEntityStartFault, Locked, LoginRequired, MESSAGE_FAULTS, Method, MissingTeslemetryToken, MissingTessieToken, MissingToken, MobileAccessDisabled, Models, NotAcceptable, NotAllowed, NotFound, NotOnWhitelistFault, NotProvisionedWithIdentityFault, OAuthExpired, OAuthInvalid, PaymentRequired, PhoneFontSize, PreconditionFailed, PrivateKeyError, RateLimited, ResourceUnavailableForLegalReasons, ResponseError, SERVERS, SIGNED_MESSAGE_INFORMATION_FAULTS, Scope, SeatHeaterLevel, Seats, ServiceUnavailable, Session, SessionInfoAuthenticationFault, SignatureTooShortFault, SignedCommandRequired, SignedCommandResponseReplayed, SignedMessageInformationFault, SignedMessageInformationFaultAESDecryptAuth, SignedMessageInformationFaultCouldNotHashMetadata, SignedMessageInformationFaultCouldNotRetrieveKey, SignedMessageInformationFaultCouldNotRetrieveToken, SignedMessageInformationFaultECDSAInput, SignedMessageInformationFaultECDSASignature, SignedMessageInformationFaultIVIncorrectLength, SignedMessageInformationFaultIVSmallerThanExpected, SignedMessageInformationFaultIncorrectEpoch, SignedMessageInformationFaultInvalidToken, SignedMessageInformationFaultLocalEntityResult, SignedMessageInformationFaultLocalEntityStart, SignedMessageInformationFaultNotOnWhitelist, SignedMessageInformationFaultNotProvisionedWithIdentity, SignedMessageInformationFaultSignatureTooShort, SignedMessageInformationFaultTimeExpired, SignedMessageInformationFaultTokenAndCounterInvalid, SignedMessageInformationFaultTokenIsIncorrectLength, SignedMessageInformationFaultUnknown, SigningDisabled, SubscriptionRequired, SunRoofCommand, TOKEN_URLS, TemperatureUnit, TeslaEnergyPeriod, TeslaFleetApi, TeslaFleetConnectionError, TeslaFleetError, TeslaFleetInformationFault, TeslaFleetMessageFault, TeslaFleetMessageFaultBadParameter, TeslaFleetMessageFaultBusy, TeslaFleetMessageFaultCommandRequiresAccountCredentials, TeslaFleetMessageFaultCouldNotHashMetadata, TeslaFleetMessageFaultDecoding, TeslaFleetMessageFaultFieldExceedsMTU, TeslaFleetMessageFaultIVIncorrectLength, TeslaFleetMessageFaultInactiveKey, TeslaFleetMessageFaultIncorrectEpoch, TeslaFleetMessageFaultInsufficientPrivileges, TeslaFleetMessageFaultInternal, TeslaFleetMessageFaultInvalidCommand, TeslaFleetMessageFaultInvalidDomains, TeslaFleetMessageFaultInvalidKeyHandle, TeslaFleetMessageFaultInvalidSignature, TeslaFleetMessageFaultInvalidTokenOrCounter, TeslaFleetMessageFaultKeychainIsFull, TeslaFleetMessageFaultNotProvisionedWithIdentity, TeslaFleetMessageFaultRemoteAccessDisabled, TeslaFleetMessageFaultRemoteServiceAccessDisabled, TeslaFleetMessageFaultRepeatedCounter, TeslaFleetMessageFaultRequiresResponseEncryption, TeslaFleetMessageFaultResponseSizeExceedsMTU, TeslaFleetMessageFaultTimeExpired, TeslaFleetMessageFaultTimeToLiveTooLong, TeslaFleetMessageFaultTimeout, TeslaFleetMessageFaultUnknownKeyId, TeslaFleetMessageFaultWrongPersonalization, Teslemetry, TeslemetryRegistrationError, Tessie, TimeDisplayFormat, TimeExpiredFault, TirePressureUnit, TokenAndCounterInvalidFault, TokenIsIncorrectLengthFault, Trunk, UnauthorizedClient, UnknownFault, UnsupportedVehicle, Vehicle, VehicleDataEndpoint, VehicleImageType, VehicleOffline, VehicleSigned, VehicleSpecific, VehicleSubscriptionRequired, WHITELIST_OPERATION_STATUS, WhitelistOperationAttemptingToAddExistingKey, WhitelistOperationAttemptingToAddKeyWithServiceRole, WhitelistOperationAttemptingToAddKeyWithoutRole, WhitelistOperationAttemptingToDemoteSuperiorToOneself, WhitelistOperationAttemptingToElevateOthersAboveOneself, WhitelistOperationAttemptingToRemoveOwnPermissions, WhitelistOperationCouldNotStartLocalEntityAuth, WhitelistOperationFMAttemptingToAddPermanentKey, WhitelistOperationFMAttemptingToRemovePermanentKey, WhitelistOperationFMModifyingOutsideOfFMode, WhitelistOperationInvalidPublicKey, WhitelistOperationKeychainWhileFSFull, WhitelistOperationKeyfobSlotsFull, WhitelistOperationLocalEntityAuthFailedCancelled, WhitelistOperationLocalEntityAuthFailedTimedOutWaitingForTap, WhitelistOperationLocalEntityAuthFailedTimedOutWaitingForUIAck, WhitelistOperationLocalEntityAuthFailedUIDenied, WhitelistOperationLocalEntityAuthFailedValetMode, WhitelistOperationNoPermissionToAdd, WhitelistOperationNoPermissionToChangePermissions, WhitelistOperationNoPermissionToRemove, WhitelistOperationNoPermissionToRemoveOneself, WhitelistOperationNonServiceKeyAttemptingToAddServiceTech, WhitelistOperationNotAllowedToAddUnlessOnReader, WhitelistOperationPublicKeyNotOnWhitelist, WhitelistOperationServiceKeyAttemptingToAddServiceTechOutsideServiceMode, WhitelistOperationStatus, WhitelistOperationUndocumentedError, WhitelistOperationWhitelistFull, WindowCommand, getTariffPeriods, is_key_rejected, is_valid_region, raise_for_status };
+import { getTariffPeriods, unwrapTariffV2 } from "./tariff.mjs";
+import { firmwareAtLeast, firmwareCompare } from "./util.mjs";
+import { AuthorizationRole, AuthorizedClientKeyType, AuthorizedClientState, AuthorizedClientType, AuthorizedVerificationType, AutoSeat, BluetoothVehicleData, CabinOverheatProtectionTemp, ClimateKeeperMode, ClimateModes, ClosureState, DEFAULT_LOCALE, DeviceType, DistanceUnit, EnergyDeviceIdentifierType, EnergyDisplayFormat, EnergyExportMode, EnergyIslandMode, EnergyOperationMode, Level, Method, Models, PhoneFontSize, SERVERS, Scope, SeatHeaterLevel, Seats, SnapshotTopic, SunRoofCommand, TOKEN_URLS, TemperatureUnit, TeslaEnergyPeriod, TimeDisplayFormat, TirePressureUnit, Trunk, VehicleDataEndpoint, VehicleImageType, WaitTopic, WindowCommand, is_valid_region } from "./const.mjs";
+export { AESDecryptAuthFault, AuthorizationRole, AuthorizedClientKeyType, AuthorizedClientPairingTimedOut, AuthorizedClientState, AuthorizedClientType, AuthorizedClientWaitExpired, AuthorizedVerificationType, AutoSeat, BadGateway, BluetoothCloudUnavailableError, BluetoothCommandFailed, BluetoothTimeout, BluetoothTransportError, BluetoothUnconfirmedCommand, BluetoothVehicleData, CLOSURE_STATES, CabinOverheatProtectionTemp, Charging, ClientClosedRequest, ClimateKeeperMode, ClimateModes, ClosureState, Commands, CouldNotHashMetadataFault, CouldNotRetrieveKeyFault, CouldNotRetrieveTokenFault, DAY_OF_WEEK_BITS, DEFAULT_LOCALE, DEFAULT_PAIRING_POLL_INTERVAL, DEFAULT_PAIRING_TIMEOUT, DeviceType, DeviceUnexpectedResponse, DistanceUnit, ECDSAInputFault, ECDSASignatureFault, ENERGY_SIGNATURE_TTL_SECONDS, Energy, EnergyDeviceIdentifierType, EnergyDeviceSigner, EnergyDisplayFormat, EnergyExportMode, EnergyGatewayUnreachable, EnergyIslandMode, EnergyOperationMode, EnergySpecific, FieldPath, Forbidden, GatewayTimeout, INFORMATION_FAULTS, IVIncorrectLengthFault, IVSmallerThanExpectedFault, IncorrectEpochFault, InsufficientCredits, InternalServerError, InvalidAuthCode, InvalidCommand, InvalidField, InvalidMethod, InvalidRedirectUrl, InvalidRegion, InvalidRequest, InvalidResource, InvalidResponse, InvalidScope, InvalidTeslemetryToken, InvalidTessieToken, InvalidToken, InvalidTokenFault, KEY_REJECTED_FAULTS, LOCK_STATES, Level, LibraryError, LocalEntityResultFault, LocalEntityStartFault, Locked, LoginRequired, MAX_DISPATCH_DURATION_SECONDS, MESSAGE_FAULTS, Method, MissingTeslemetryToken, MissingTessieToken, MissingToken, MobileAccessDisabled, Models, NotAcceptable, NotAllowed, NotFound, NotOnWhitelistFault, NotProvisionedWithIdentityFault, OAuthExpired, OAuthInvalid, ObservationFunnel, Partner, PaymentRequired, PhoneFontSize, PreconditionFailed, PrivateKeyError, REGISTER_URL, RateLimited, ResourceUnavailableForLegalReasons, ResponseError, SERVERS, SIGNED_MESSAGE_INFORMATION_FAULTS, Scope, SeatHeaterLevel, Seats, ServiceUnavailable, Session, SessionInfoAuthenticationFault, SignatureTooShortFault, SignedCommandRequired, SignedCommandResponseReplayed, SignedMessageInformationFault, SignedMessageInformationFaultAESDecryptAuth, SignedMessageInformationFaultCouldNotHashMetadata, SignedMessageInformationFaultCouldNotRetrieveKey, SignedMessageInformationFaultCouldNotRetrieveToken, SignedMessageInformationFaultECDSAInput, SignedMessageInformationFaultECDSASignature, SignedMessageInformationFaultIVIncorrectLength, SignedMessageInformationFaultIVSmallerThanExpected, SignedMessageInformationFaultIncorrectEpoch, SignedMessageInformationFaultInvalidToken, SignedMessageInformationFaultLocalEntityResult, SignedMessageInformationFaultLocalEntityStart, SignedMessageInformationFaultNotOnWhitelist, SignedMessageInformationFaultNotProvisionedWithIdentity, SignedMessageInformationFaultSignatureTooShort, SignedMessageInformationFaultTimeExpired, SignedMessageInformationFaultTokenAndCounterInvalid, SignedMessageInformationFaultTokenIsIncorrectLength, SignedMessageInformationFaultUnknown, SigningDisabled, SnapshotTopic, SubscriptionRequired, SunRoofCommand, TOKEN_URLS, TemperatureUnit, TeslaEnergyPeriod, TeslaFleetApi, TeslaFleetConnectionError, TeslaFleetError, TeslaFleetInformationFault, TeslaFleetMessageFault, TeslaFleetMessageFaultBadParameter, TeslaFleetMessageFaultBusy, TeslaFleetMessageFaultCommandRequiresAccountCredentials, TeslaFleetMessageFaultCouldNotHashMetadata, TeslaFleetMessageFaultDecoding, TeslaFleetMessageFaultFieldExceedsMTU, TeslaFleetMessageFaultIVIncorrectLength, TeslaFleetMessageFaultInactiveKey, TeslaFleetMessageFaultIncorrectEpoch, TeslaFleetMessageFaultInsufficientPrivileges, TeslaFleetMessageFaultInternal, TeslaFleetMessageFaultInvalidCommand, TeslaFleetMessageFaultInvalidDomains, TeslaFleetMessageFaultInvalidKeyHandle, TeslaFleetMessageFaultInvalidSignature, TeslaFleetMessageFaultInvalidTokenOrCounter, TeslaFleetMessageFaultKeychainIsFull, TeslaFleetMessageFaultNotProvisionedWithIdentity, TeslaFleetMessageFaultRemoteAccessDisabled, TeslaFleetMessageFaultRemoteServiceAccessDisabled, TeslaFleetMessageFaultRepeatedCounter, TeslaFleetMessageFaultRequiresResponseEncryption, TeslaFleetMessageFaultResponseSizeExceedsMTU, TeslaFleetMessageFaultTimeExpired, TeslaFleetMessageFaultTimeToLiveTooLong, TeslaFleetMessageFaultTimeout, TeslaFleetMessageFaultUnknownKeyId, TeslaFleetMessageFaultWrongPersonalization, TeslaFleetOAuth, Teslemetry, TeslemetryEnergySite, TeslemetryEnergySites, TeslemetryRegistrationError, TeslemetryStreamPublisher, TeslemetryVehicle, TeslemetryVehicleTelemetry, TeslemetryVehicles, Tessie, TessieVehicle, TessieVehicles, TimeDisplayFormat, TimeExpiredFault, TirePressureUnit, TokenAndCounterInvalidFault, TokenIsIncorrectLengthFault, Trunk, UNSIGNED_DEVICE_COMMANDS, UnauthorizedClient, UnknownFault, UnsupportedVehicle, User, Vehicle, VehicleDataEndpoint, VehicleDataResultPublisher, VehicleImageType, VehicleOffline, VehicleSigned, VehicleSpecific, VehicleSubscriptionRequired, WHITELIST_OPERATION_STATUS, WaitTopic, WhitelistOperationAttemptingToAddExistingKey, WhitelistOperationAttemptingToAddKeyWithServiceRole, WhitelistOperationAttemptingToAddKeyWithoutRole, WhitelistOperationAttemptingToDemoteSuperiorToOneself, WhitelistOperationAttemptingToElevateOthersAboveOneself, WhitelistOperationAttemptingToRemoveOwnPermissions, WhitelistOperationCouldNotStartLocalEntityAuth, WhitelistOperationFMAttemptingToAddPermanentKey, WhitelistOperationFMAttemptingToRemovePermanentKey, WhitelistOperationFMModifyingOutsideOfFMode, WhitelistOperationInvalidPublicKey, WhitelistOperationKeychainWhileFSFull, WhitelistOperationKeyfobSlotsFull, WhitelistOperationLocalEntityAuthFailedCancelled, WhitelistOperationLocalEntityAuthFailedTimedOutWaitingForTap, WhitelistOperationLocalEntityAuthFailedTimedOutWaitingForUIAck, WhitelistOperationLocalEntityAuthFailedUIDenied, WhitelistOperationLocalEntityAuthFailedValetMode, WhitelistOperationNoPermissionToAdd, WhitelistOperationNoPermissionToChangePermissions, WhitelistOperationNoPermissionToRemove, WhitelistOperationNoPermissionToRemoveOneself, WhitelistOperationNonServiceKeyAttemptingToAddServiceTech, WhitelistOperationNotAllowedToAddUnlessOnReader, WhitelistOperationPublicKeyNotOnWhitelist, WhitelistOperationServiceKeyAttemptingToAddServiceTechOutsideServiceMode, WhitelistOperationStatus, WhitelistOperationUndocumentedError, WhitelistOperationWhitelistFull, WindowCommand, days_of_week_mask, ec_private_key_from_pem, firmwareAtLeast, firmwareCompare, generate_ec_private_key_pem, generate_rsa_private_key_pem, getTariffPeriods, infotainment_command_name, is_key_rejected, is_valid_region, jws_exports as jws, parse_authorized_clients, parse_gateway_address, raise_for_status, register_client, rsa_public_der_pkcs1, unwrapTariffV2, validate_dispatch_battery_power, vcsec_command_name };

package/dist/log.cjs

@@ -0,0 +1,75 @@
+const require_exceptions = require("./exceptions.cjs");
+// src/log.ts
+/**
+* Parameter and body keys whose values never reach a log, lower-cased with
+* separators removed. `migrate_to_oauth` sends and receives tokens through
+* `_request`; PINs travel as `pin` or `password` body keys (Fleet, Teslemetry)
+* or query parameters (Tessie); `trigger_homelink` and the telemetry JWS send
+* `token`; a vehicle reply lists `tokens`; a signed `routable_message` executes
+* again if replayed before it expires, up to 30 seconds later.
+*/
+const SECRET_KEYS = /* @__PURE__ */ new Set([
+	"accesstoken",
+	"clientsecret",
+	"idtoken",
+	"password",
+	"pin",
+	"privatekey",
+	"refreshtoken",
+	"routablemessage",
+	"token",
+	"tokens"
+]);
+const REDACTED = "[redacted]";
+function isSecretKey(key) {
+	return SECRET_KEYS.has(key.replace(/[_-]/g, "").toLowerCase());
+}
+/** `JSON.stringify` for a log line, with secret values replaced at any depth. */
+function redactedJson(value) {
+	return JSON.stringify(value, (key, val) => isSecretKey(key) ? REDACTED : val);
+}
+/** A query string for a log line, with secret values replaced. */
+function redactedQuery(query) {
+	const redacted = new URLSearchParams(query);
+	for (const key of new Set(query.keys())) if (isSecretKey(key)) redacted.set(key, REDACTED);
+	return redacted.toString();
+}
+/**
+* A `TeslaFleetError`'s message is its class's, with per-instance detail in
+* `data`, so it is safe to log. Any other message, or thrown value, comes from
+* outside (a token function, a transport) and may hold a secret, so only its
+* type is logged.
+*/
+function errorText(error) {
+	if (error instanceof require_exceptions.TeslaFleetError) return `${error.name}: ${error.message}`;
+	return error instanceof Error ? error.name : typeof error;
+}
+/**
+* Log the outcome of a completed request: a command's `result` and `reason`
+* (inside `response`, or at the top level as Tessie replies) when present,
+* otherwise plain success. Mirrors Python's `_log_request_result`.
+*/
+function logRequestResult(log, command, transport, data) {
+	if (data === null || typeof data !== "object" || Array.isArray(data)) {
+		log(`command=${command} transport=${transport} result=success`);
+		return;
+	}
+	const response = data.response;
+	let result;
+	if (response !== null && typeof response === "object" && "result" in response) result = response;
+	else if ("result" in data) result = data;
+	else {
+		log(`command=${command} transport=${transport} result=success`);
+		return;
+	}
+	log(`command=${command} transport=${transport} result=${result.result} reason=${result.reason ?? ""}`);
+}
+/** Log a failed request or command. The error class name carries the failure kind. */
+function logRequestError(log, command, transport, error) {
+	log(`command=${command} transport=${transport} result=error error=${errorText(error)}`);
+}
+exports.errorText = errorText;
+exports.logRequestError = logRequestError;
+exports.logRequestResult = logRequestResult;
+exports.redactedJson = redactedJson;
+exports.redactedQuery = redactedQuery;

package/dist/log.d.cts

@@ -0,0 +1,4 @@
+/** Receives the library's debug lines. Tokens, PINs and passcodes are never logged. */
+export type Logger = {
+  debug(message: string): void;
+};

package/dist/log.d.mts

@@ -0,0 +1,4 @@
+/** Receives the library's debug lines. Tokens, PINs and passcodes are never logged. */
+export type Logger = {
+  debug(message: string): void;
+};

package/dist/log.mjs

@@ -0,0 +1,71 @@
+import { TeslaFleetError } from "./exceptions.mjs";
+// src/log.ts
+/**
+* Parameter and body keys whose values never reach a log, lower-cased with
+* separators removed. `migrate_to_oauth` sends and receives tokens through
+* `_request`; PINs travel as `pin` or `password` body keys (Fleet, Teslemetry)
+* or query parameters (Tessie); `trigger_homelink` and the telemetry JWS send
+* `token`; a vehicle reply lists `tokens`; a signed `routable_message` executes
+* again if replayed before it expires, up to 30 seconds later.
+*/
+const SECRET_KEYS = /* @__PURE__ */ new Set([
+	"accesstoken",
+	"clientsecret",
+	"idtoken",
+	"password",
+	"pin",
+	"privatekey",
+	"refreshtoken",
+	"routablemessage",
+	"token",
+	"tokens"
+]);
+const REDACTED = "[redacted]";
+function isSecretKey(key) {
+	return SECRET_KEYS.has(key.replace(/[_-]/g, "").toLowerCase());
+}
+/** `JSON.stringify` for a log line, with secret values replaced at any depth. */
+function redactedJson(value) {
+	return JSON.stringify(value, (key, val) => isSecretKey(key) ? REDACTED : val);
+}
+/** A query string for a log line, with secret values replaced. */
+function redactedQuery(query) {
+	const redacted = new URLSearchParams(query);
+	for (const key of new Set(query.keys())) if (isSecretKey(key)) redacted.set(key, REDACTED);
+	return redacted.toString();
+}
+/**
+* A `TeslaFleetError`'s message is its class's, with per-instance detail in
+* `data`, so it is safe to log. Any other message, or thrown value, comes from
+* outside (a token function, a transport) and may hold a secret, so only its
+* type is logged.
+*/
+function errorText(error) {
+	if (error instanceof TeslaFleetError) return `${error.name}: ${error.message}`;
+	return error instanceof Error ? error.name : typeof error;
+}
+/**
+* Log the outcome of a completed request: a command's `result` and `reason`
+* (inside `response`, or at the top level as Tessie replies) when present,
+* otherwise plain success. Mirrors Python's `_log_request_result`.
+*/
+function logRequestResult(log, command, transport, data) {
+	if (data === null || typeof data !== "object" || Array.isArray(data)) {
+		log(`command=${command} transport=${transport} result=success`);
+		return;
+	}
+	const response = data.response;
+	let result;
+	if (response !== null && typeof response === "object" && "result" in response) result = response;
+	else if ("result" in data) result = data;
+	else {
+		log(`command=${command} transport=${transport} result=success`);
+		return;
+	}
+	log(`command=${command} transport=${transport} result=${result.result} reason=${result.reason ?? ""}`);
+}
+/** Log a failed request or command. The error class name carries the failure kind. */
+function logRequestError(log, command, transport, error) {
+	log(`command=${command} transport=${transport} result=error error=${errorText(error)}`);
+}
+export { errorText, logRequestError, logRequestResult, redactedJson, redactedQuery };

package/dist/oauth.cjs

@@ -0,0 +1,143 @@
+const require_const = require("./const.cjs");
+const require_exceptions = require("./exceptions.cjs");
+const require_teslafleetapi = require("./teslafleetapi.cjs");
+// src/oauth.ts
+function nowSeconds() {
+	return Date.now() / 1e3;
+}
+/** The fields every token reply needs; a reply without them must not replace a working token. */
+function tokenFrom(data) {
+	if (typeof data?.access_token !== "string" || typeof data.expires_in !== "number") throw new require_exceptions.InvalidResponse();
+	return {
+		access_token: data.access_token,
+		expires: Math.floor(nowSeconds()) + data.expires_in
+	};
+}
+/**
+* Tesla Fleet API client that signs a user in with OAuth and keeps its access
+* token fresh. `expires` is in epoch seconds, as in Python, so a stored
+* token works with either library.
+*/
+var TeslaFleetOAuth = class extends require_teslafleetapi.default {
+	client_id;
+	redirect_uri;
+	refresh_token;
+	/** Expiry of the access token, in epoch seconds. */
+	expires;
+	#client_secret;
+	#refreshing = null;
+	constructor(options) {
+		if (!require_const.is_valid_region(options.region)) throw new Error("Invalid region");
+		const { region, client_id, client_secret, redirect_uri, access_token, refresh_token, expires, ...rest } = options;
+		super({
+			...rest,
+			region,
+			accessToken: access_token
+		});
+		this.client_id = client_id;
+		this.#client_secret = client_secret ?? null;
+		this.redirect_uri = redirect_uri ?? null;
+		this.refresh_token = refresh_token ?? null;
+		this.expires = expires ?? 0;
+	}
+	/**
+	* The URL to send the user to, built exactly as Python builds it: values are
+	* not URL-encoded.
+	* @param scopes Scopes to request.
+	* @param state Value Tesla echoes back on the redirect.
+	*/
+	get_login_url(scopes, state = "login") {
+		if (this.redirect_uri == null) throw new Error("Redirect URI is missing");
+		return `https://${this.region === "cn" ? "auth.tesla.cn" : "auth.tesla.com"}/oauth2/v3/authorize?response_type=code&client_id=${this.client_id}&redirect_uri=${this.redirect_uri}&scope=${scopes.join("+")}&state=${state}`;
+	}
+	/**
+	* Exchange an authorization code for tokens. A code prefixed with a region
+	* (e.g. `NA_...`) also selects that region's server.
+	* @param code The code from the login redirect.
+	*/
+	async get_refresh_token(code) {
+		if (this.#client_secret == null) throw new Error("Client secret is missing");
+		if (this.redirect_uri == null) throw new Error("Redirect URI is missing");
+		this.server ??= require_const.SERVERS[this.region ?? "na"];
+		const data = await this.#token({
+			grant_type: "authorization_code",
+			client_id: this.client_id,
+			client_secret: this.#client_secret,
+			code,
+			audience: this.server,
+			redirect_uri: this.redirect_uri
+		});
+		const { access_token, expires } = tokenFrom(data);
+		this.refresh_token = data.refresh_token ?? null;
+		this.accessToken = access_token;
+		this.expires = expires;
+		const region = code.split("_")[0].toLowerCase();
+		if (require_const.is_valid_region(region)) this.server = require_const.SERVERS[region];
+	}
+	/**
+	* The current access token, refreshed first when `expires` has passed.
+	* @throws MissingToken when there is no token and none can be refreshed.
+	*/
+	async access_token() {
+		if (this.expires < nowSeconds()) await this.refresh_access_token();
+		if (this.accessToken && typeof this.accessToken === "string") return this.accessToken;
+		throw new require_exceptions.MissingToken("Access token is missing");
+	}
+	/**
+	* Refresh the access token if it is missing or expired.
+	* @returns The refreshed token to persist, or `null` when none was needed.
+	*/
+	async check_access_token() {
+		if (this.accessToken && this.expires > nowSeconds()) return null;
+		return this.refresh_access_token();
+	}
+	/**
+	* Refresh the access token. Tesla rotates the refresh token, so persist what
+	* this returns.
+	* @throws MissingToken without a refresh token, or the `TeslaFleetError`
+	* matching the failure, e.g. `LoginRequired`.
+	*/
+	refresh_access_token() {
+		this.#refreshing ??= this.#refresh().finally(() => {
+			this.#refreshing = null;
+		});
+		return this.#refreshing;
+	}
+	async #refresh() {
+		if (!this.refresh_token) throw new require_exceptions.MissingToken("Refresh token is missing");
+		const data = await this.#token({
+			grant_type: "refresh_token",
+			client_id: this.client_id,
+			refresh_token: this.refresh_token
+		});
+		const { access_token, expires } = tokenFrom(data);
+		if (typeof data.refresh_token !== "string") throw new require_exceptions.InvalidResponse();
+		this.accessToken = access_token;
+		this.refresh_token = data.refresh_token;
+		this.expires = expires;
+		return {
+			refresh_token: data.refresh_token,
+			expires
+		};
+	}
+	/** POST a form to the region's token endpoint. Bypasses `_request`, which would log the reply. */
+	async #token(form) {
+		try {
+			const resp = await this._fetch(require_const.TOKEN_URLS[this.region ?? "na"], {
+				method: "POST",
+				headers: { "Content-Type": "application/x-www-form-urlencoded" },
+				body: new URLSearchParams(form),
+				signal: this.timeout != null ? AbortSignal.timeout(this.timeout) : null
+			});
+			return await this._response(resp);
+		} catch (error) {
+			if (error instanceof require_exceptions.TeslaFleetError) throw error;
+			throw new require_exceptions.TeslaFleetConnectionError(null, null, { cause: error });
+		}
+	}
+	async _request(method, path, params = null, json = null) {
+		await this.check_access_token();
+		return super._request(method, path, params, json);
+	}
+};
+exports.default = TeslaFleetOAuth;

package/dist/oauth.d.cts

@@ -0,0 +1,69 @@
+import { Method, Region, Scope } from "./const.cjs";
+import { Logger } from "./log.cjs";
+import TeslaFleetApi from "./teslafleetapi.cjs";
+export type TeslaFleetOAuthOptions = {
+  region: Region;
+  client_id: string;
+  /** Needed only to exchange an authorization code. */
+  client_secret?: string;
+  redirect_uri?: string;
+  access_token?: string;
+  refresh_token?: string;
+  /** Expiry of `access_token`, in epoch seconds as `TeslaFleetOAuth.expires`. */
+  expires?: number;
+  debug?: boolean;
+  logger?: Logger;
+  fetch?: typeof fetch;
+  timeout?: number;
+};
+/** What a refresh hands back for the caller to persist. */
+export type RefreshedToken = {
+  refresh_token: string;
+  /** Epoch seconds. */
+  expires: number;
+};
+/**
+ * Tesla Fleet API client that signs a user in with OAuth and keeps its access
+ * token fresh. `expires` is in epoch seconds, as in Python, so a stored
+ * token works with either library.
+ */
+export default class TeslaFleetOAuth extends TeslaFleetApi {
+  #private;
+  readonly client_id: string;
+  redirect_uri: string | null;
+  refresh_token: string | null;
+  /** Expiry of the access token, in epoch seconds. */
+  expires: number;
+  constructor(options: TeslaFleetOAuthOptions);
+  /**
+   * The URL to send the user to, built exactly as Python builds it: values are
+   * not URL-encoded.
+   * @param scopes Scopes to request.
+   * @param state Value Tesla echoes back on the redirect.
+   */
+  get_login_url(scopes: Scope[], state?: string): string;
+  /**
+   * Exchange an authorization code for tokens. A code prefixed with a region
+   * (e.g. `NA_...`) also selects that region's server.
+   * @param code The code from the login redirect.
+   */
+  get_refresh_token(code: string): Promise<void>;
+  /**
+   * The current access token, refreshed first when `expires` has passed.
+   * @throws MissingToken when there is no token and none can be refreshed.
+   */
+  access_token(): Promise<string>;
+  /**
+   * Refresh the access token if it is missing or expired.
+   * @returns The refreshed token to persist, or `null` when none was needed.
+   */
+  check_access_token(): Promise<RefreshedToken | null>;
+  /**
+   * Refresh the access token. Tesla rotates the refresh token, so persist what
+   * this returns.
+   * @throws MissingToken without a refresh token, or the `TeslaFleetError`
+   * matching the failure, e.g. `LoginRequired`.
+   */
+  refresh_access_token(): Promise<RefreshedToken>;
+  _request(method: Method, path: string, params?: Record<string, any> | null, json?: Record<string, any> | null): Promise<any>;
+}

package/dist/oauth.d.mts

@@ -0,0 +1,69 @@
+import { Method, Region, Scope } from "./const.mjs";
+import { Logger } from "./log.mjs";
+import TeslaFleetApi from "./teslafleetapi.mjs";
+export type TeslaFleetOAuthOptions = {
+  region: Region;
+  client_id: string;
+  /** Needed only to exchange an authorization code. */
+  client_secret?: string;
+  redirect_uri?: string;
+  access_token?: string;
+  refresh_token?: string;
+  /** Expiry of `access_token`, in epoch seconds as `TeslaFleetOAuth.expires`. */
+  expires?: number;
+  debug?: boolean;
+  logger?: Logger;
+  fetch?: typeof fetch;
+  timeout?: number;
+};
+/** What a refresh hands back for the caller to persist. */
+export type RefreshedToken = {
+  refresh_token: string;
+  /** Epoch seconds. */
+  expires: number;
+};
+/**
+ * Tesla Fleet API client that signs a user in with OAuth and keeps its access
+ * token fresh. `expires` is in epoch seconds, as in Python, so a stored
+ * token works with either library.
+ */
+export default class TeslaFleetOAuth extends TeslaFleetApi {
+  #private;
+  readonly client_id: string;
+  redirect_uri: string | null;
+  refresh_token: string | null;
+  /** Expiry of the access token, in epoch seconds. */
+  expires: number;
+  constructor(options: TeslaFleetOAuthOptions);
+  /**
+   * The URL to send the user to, built exactly as Python builds it: values are
+   * not URL-encoded.
+   * @param scopes Scopes to request.
+   * @param state Value Tesla echoes back on the redirect.
+   */
+  get_login_url(scopes: Scope[], state?: string): string;
+  /**
+   * Exchange an authorization code for tokens. A code prefixed with a region
+   * (e.g. `NA_...`) also selects that region's server.
+   * @param code The code from the login redirect.
+   */
+  get_refresh_token(code: string): Promise<void>;
+  /**
+   * The current access token, refreshed first when `expires` has passed.
+   * @throws MissingToken when there is no token and none can be refreshed.
+   */
+  access_token(): Promise<string>;
+  /**
+   * Refresh the access token if it is missing or expired.
+   * @returns The refreshed token to persist, or `null` when none was needed.
+   */
+  check_access_token(): Promise<RefreshedToken | null>;
+  /**
+   * Refresh the access token. Tesla rotates the refresh token, so persist what
+   * this returns.
+   * @throws MissingToken without a refresh token, or the `TeslaFleetError`
+   * matching the failure, e.g. `LoginRequired`.
+   */
+  refresh_access_token(): Promise<RefreshedToken>;
+  _request(method: Method, path: string, params?: Record<string, any> | null, json?: Record<string, any> | null): Promise<any>;
+}

package/dist/oauth.mjs

@@ -0,0 +1,143 @@
+import { SERVERS, TOKEN_URLS, is_valid_region } from "./const.mjs";
+import { InvalidResponse, MissingToken, TeslaFleetConnectionError, TeslaFleetError } from "./exceptions.mjs";
+import TeslaFleetApi from "./teslafleetapi.mjs";
+// src/oauth.ts
+function nowSeconds() {
+	return Date.now() / 1e3;
+}
+/** The fields every token reply needs; a reply without them must not replace a working token. */
+function tokenFrom(data) {
+	if (typeof data?.access_token !== "string" || typeof data.expires_in !== "number") throw new InvalidResponse();
+	return {
+		access_token: data.access_token,
+		expires: Math.floor(nowSeconds()) + data.expires_in
+	};
+}
+/**
+* Tesla Fleet API client that signs a user in with OAuth and keeps its access
+* token fresh. `expires` is in epoch seconds, as in Python, so a stored
+* token works with either library.
+*/
+var TeslaFleetOAuth = class extends TeslaFleetApi {
+	client_id;
+	redirect_uri;
+	refresh_token;
+	/** Expiry of the access token, in epoch seconds. */
+	expires;
+	#client_secret;
+	#refreshing = null;
+	constructor(options) {
+		if (!is_valid_region(options.region)) throw new Error("Invalid region");
+		const { region, client_id, client_secret, redirect_uri, access_token, refresh_token, expires, ...rest } = options;
+		super({
+			...rest,
+			region,
+			accessToken: access_token
+		});
+		this.client_id = client_id;
+		this.#client_secret = client_secret ?? null;
+		this.redirect_uri = redirect_uri ?? null;
+		this.refresh_token = refresh_token ?? null;
+		this.expires = expires ?? 0;
+	}
+	/**
+	* The URL to send the user to, built exactly as Python builds it: values are
+	* not URL-encoded.
+	* @param scopes Scopes to request.
+	* @param state Value Tesla echoes back on the redirect.
+	*/
+	get_login_url(scopes, state = "login") {
+		if (this.redirect_uri == null) throw new Error("Redirect URI is missing");
+		return `https://${this.region === "cn" ? "auth.tesla.cn" : "auth.tesla.com"}/oauth2/v3/authorize?response_type=code&client_id=${this.client_id}&redirect_uri=${this.redirect_uri}&scope=${scopes.join("+")}&state=${state}`;
+	}
+	/**
+	* Exchange an authorization code for tokens. A code prefixed with a region
+	* (e.g. `NA_...`) also selects that region's server.
+	* @param code The code from the login redirect.
+	*/
+	async get_refresh_token(code) {
+		if (this.#client_secret == null) throw new Error("Client secret is missing");
+		if (this.redirect_uri == null) throw new Error("Redirect URI is missing");
+		this.server ??= SERVERS[this.region ?? "na"];
+		const data = await this.#token({
+			grant_type: "authorization_code",
+			client_id: this.client_id,
+			client_secret: this.#client_secret,
+			code,
+			audience: this.server,
+			redirect_uri: this.redirect_uri
+		});
+		const { access_token, expires } = tokenFrom(data);
+		this.refresh_token = data.refresh_token ?? null;
+		this.accessToken = access_token;
+		this.expires = expires;
+		const region = code.split("_")[0].toLowerCase();
+		if (is_valid_region(region)) this.server = SERVERS[region];
+	}
+	/**
+	* The current access token, refreshed first when `expires` has passed.
+	* @throws MissingToken when there is no token and none can be refreshed.
+	*/
+	async access_token() {
+		if (this.expires < nowSeconds()) await this.refresh_access_token();
+		if (this.accessToken && typeof this.accessToken === "string") return this.accessToken;
+		throw new MissingToken("Access token is missing");
+	}
+	/**
+	* Refresh the access token if it is missing or expired.
+	* @returns The refreshed token to persist, or `null` when none was needed.
+	*/
+	async check_access_token() {
+		if (this.accessToken && this.expires > nowSeconds()) return null;
+		return this.refresh_access_token();
+	}
+	/**
+	* Refresh the access token. Tesla rotates the refresh token, so persist what
+	* this returns.
+	* @throws MissingToken without a refresh token, or the `TeslaFleetError`
+	* matching the failure, e.g. `LoginRequired`.
+	*/
+	refresh_access_token() {
+		this.#refreshing ??= this.#refresh().finally(() => {
+			this.#refreshing = null;
+		});
+		return this.#refreshing;
+	}
+	async #refresh() {
+		if (!this.refresh_token) throw new MissingToken("Refresh token is missing");
+		const data = await this.#token({
+			grant_type: "refresh_token",
+			client_id: this.client_id,
+			refresh_token: this.refresh_token
+		});
+		const { access_token, expires } = tokenFrom(data);
+		if (typeof data.refresh_token !== "string") throw new InvalidResponse();
+		this.accessToken = access_token;
+		this.refresh_token = data.refresh_token;
+		this.expires = expires;
+		return {
+			refresh_token: data.refresh_token,
+			expires
+		};
+	}
+	/** POST a form to the region's token endpoint. Bypasses `_request`, which would log the reply. */
+	async #token(form) {
+		try {
+			const resp = await this._fetch(TOKEN_URLS[this.region ?? "na"], {
+				method: "POST",
+				headers: { "Content-Type": "application/x-www-form-urlencoded" },
+				body: new URLSearchParams(form),
+				signal: this.timeout != null ? AbortSignal.timeout(this.timeout) : null
+			});
+			return await this._response(resp);
+		} catch (error) {
+			if (error instanceof TeslaFleetError) throw error;
+			throw new TeslaFleetConnectionError(null, null, { cause: error });
+		}
+	}
+	async _request(method, path, params = null, json = null) {
+		await this.check_access_token();
+		return super._request(method, path, params, json);
+	}
+};
+export { TeslaFleetOAuth as default };