tesla-fleet-api 0.4.0 → 0.6.0

package/dist/commands.d.mts

@@ -1,53 +1,173 @@
 import { CommandResponse } from "./types/commands.mjs";
-import { AutoSeat, ClimateMode, Level, Seat, Trunk } from "./const.mjs";
+import { AutoSeat, ClimateMode, DistanceUnit, EnergyDisplayFormat, Level, PhoneFontSize, Seat, TemperatureUnit, TimeDisplayFormat, TirePressureUnit, Trunk, VehicleImageType } from "./const.mjs";
 import Vehicle from "./vehicle.mjs";
 import VehicleSpecific from "./vehiclespecific.mjs";
-import { RoutableMessage } from "@teslemetry/tesla-protocol/command/universal_message";
-import { VehicleStatus } from "@teslemetry/tesla-protocol/command/vcsec";
+import { Session } from "./signing/session.mjs";
+import { Domain, RoutableMessage } from "@teslemetry/tesla-protocol/command/universal_message";
+import { UnsignedMessage, VehicleStatus, WhitelistOperationInformationE } from "@teslemetry/tesla-protocol/command/vcsec";
+import { Action, Response, SetRateTariffRequest_Seasons, SetRateTariffRequest_Tariff, VehicleAction } from "@teslemetry/tesla-protocol/command/car_server";
+import { VehicleData } from "@teslemetry/tesla-protocol/command/vehicle";
+/** A signed command's outcome, with any other `Response` payload under its field name. */
+export interface SignedCommandResponse extends CommandResponse {
+  response: CommandResponse["response"] & Partial<Omit<Response, "actionStatus" | "vehicleData" | "ping">>;
+}
+/** Which field of a reply `_send` waits for: a command's payload, or a handshake's session info. */
+export type SendRequires = "protobuf_message_as_bytes" | "session_info";
+/**
+ * How `_send` waits for a reply. Each option only applies to a transport that
+ * frames its own replies: `VehicleSigned` ignores them all.
+ */
+export interface SendOptions {
+  /** `false` for a VCSEC actuation, whose reply is one terminal ack with no data after it. Defaults to `true`. */
+  expectsData?: boolean;
+  /** The whole reply wait. Defaults to the transport's own timeout. */
+  timeoutMs?: number;
+  /** Return as soon as the message is written, without a reply. */
+  optimistic?: boolean;
+  /** Lets an unsolicited state broadcast confirm the command alongside the addressed ack. `undefined` means the status says nothing either way. */
+  confirmBroadcast?: (status: VehicleStatus) => boolean | undefined;
+  /**
+   * Called each time a frame may have reached the vehicle: its write completed,
+   * or failed after entering the backend. A failure before any such call sent nothing.
+   */
+  onSubmitted?: () => void;
+  /** Once aborted, nothing more is written: the send rejects with the signal's reason instead. */
+  signal?: AbortSignal;
+}
+/** What one signed dispatch resolves to: a command outcome, or the data a read asked for. */
+export type SignedReply = SignedCommandResponse | {
+  response: VehicleData;
+} | {
+  response: VehicleStatus;
+};
+/** A short debug-log name for a VCSEC command: the RKE action name, or the populated field. */
+export declare function vcsec_command_name(command: UnsignedMessage): string;
+/** A short debug-log name for an infotainment command: the populated `VehicleAction` field. */
+export declare function infotainment_command_name(command: Action): string;
+/**
+ * Day names Tesla's vehicle-command proxy accepts for `days_of_week`, which the
+ * REST route takes as a comma-joined string rather than the proto bitmask.
+ */
+export declare const DAY_OF_WEEK_BITS: Readonly<Record<string, number>>;
+/**
+ * Convert a bitmask or comma-joined day names (e.g. `"Mon,Wed"`, `"All"`) to the proto bitmask.
+ * @throws Error for an unknown day name.
+ */
+export declare function days_of_week_mask(days_of_week: string | number): number;
 /**
  * Transport-agnostic signed-command builder for the Tesla Vehicle Command
  * Protocol: mirrors `python-tesla-fleet-api`'s `Commands` ABC. Every method
- * here builds a `RoutableMessage`, signs it (HMAC-personalized), and
- * dispatches it through the single abstract seam `_send`. A concrete
- * subclass fills that seam for one transport - the cloud `/signed_command`
- * HTTP endpoint (`VehicleSigned`) today, a BLE GATT link in a future story.
+ * here builds a `RoutableMessage`, signs it by `authMethod`, and dispatches
+ * it through the single abstract seam `_send`. A concrete subclass fills that
+ * seam for one transport: the cloud `/signed_command` HTTP endpoint
+ * (`VehicleSigned`) today, a BLE GATT link next. The protected members are
+ * what such a transport builds on.
  *
- * AES-GCM personalized signing (the BLE-only auth mode) is intentionally out
- * of scope here; see AGENTS.md.
+ * `"hmac"` signs a plaintext command. `"aes"` encrypts it with AES-GCM and asks
+ * the vehicle to encrypt its reply, which firmware before 2024.38 ignores.
  */
 export default abstract class Commands extends VehicleSpecific {
   #private;
   /** Delay between WAIT-retries; overridable so tests don't have to wait for real timers. */
   protected retryDelayMs: number;
-  private readonly fromDestination;
+  /** Session-info requests sent before a handshake gives up on replies that fail authentication. */
+  protected handshakeAttempts: number;
+  /** Delay between those requests. */
+  protected handshakeRetryDelayMs: number;
+  /** How `buildMessage` signs a command. */
+  protected authMethod: "hmac" | "aes";
+  /** One random routing address per instance: replies addressed to it are ours. */
+  protected readonly fromDestination: Buffer;
   private readonly sessions;
-  constructor(parent: Vehicle, vin: string, privateKey?: Buffer, publicKey?: Buffer);
+  /** Transport identity for debug logging; set per concrete subclass. */
+  abstract readonly _transport_name: string;
+  /**
+   * @param parent
+   * @param vin
+   * @param privateKey Raw 32-byte P-256 scalar. `undefined` falls back to the parent's key, and throws if there is none. `false` disables signing, for a passive listener that never sends a command: any handshake then raises `SigningDisabled`.
+   * @param publicKey Uncompressed P-256 point. Derived from `privateKey` if omitted.
+   */
+  constructor(parent: Vehicle, vin: string, privateKey?: Buffer | false, publicKey?: Buffer);
+  /** The uncompressed public key this instance signs with. Empty when signing is disabled. */
+  protected get publicKey(): Buffer;
+  /** Derive the 16-byte shared key used for signed-command session encryption. */
+  shared_key(vehicleKey: Buffer): Buffer;
+  /** A Tesla.SS256 JWS over a Fleet Telemetry config, signed here so the key never leaves this class. */
+  protected signFleetTelemetryConfig(config: Readonly<Record<string, unknown>>): string;
   /**
    * Transmit a signed (or session-handshake) `RoutableMessage` to the
    * vehicle and return its reply. Implementations must call
-   * `validateAndUpdateSession(resp, msg.uuid)` on the reply before
-   * returning it.
+   * `validate_msg(resp, msg.uuid, msg.toDestination?.domain)` on the reply before returning it, and
+   * must not take `Session.withLock`: `dispatch` already holds that lock
+   * across `_send` for VCSEC, and it is not reentrant.
    */
-  protected abstract _send(msg: RoutableMessage, requires: string, expectsData?: boolean, confirmBroadcast?: (status: VehicleStatus) => boolean): Promise<RoutableMessage>;
-  private sessionFor;
+  protected abstract _send(msg: RoutableMessage, requires: SendRequires, options?: SendOptions): Promise<RoutableMessage>;
+  protected sessionFor(domain: Domain): Session;
   /**
    * Absorb session info piggy-backed on any signed-command reply and raise
    * on a whitelist rejection or a terminal message fault. Every concrete
-   * `_send` must call this on the reply - passing the `uuid` of the request
-   * it just sent - before returning it.
+   * `_send` must call this on the reply - passing the `uuid` and destination
+   * domain of the request it just sent - before returning it. The session comes
+   * from that request: a reply's own `fromDestination` is unauthenticated, so it
+   * can only be checked against the request, never select a session.
    *
    * A `SessionInfo` is untrusted wire data until its `session_info_tag` is
-   * verified: the tag is an HMAC over the exact bytes received, keyed by a
-   * key derived from the *candidate* vehicle public key carried inside that
-   * same SessionInfo, and bound to this request's `uuid` as a challenge (so
-   * a captured older reply can't be replayed against a newer request). Only
-   * once that tag checks out do we act on anything the message claims -
+   * verified: the tag is an HMAC over the exact bytes received, bound to this
+   * request's `uuid` as a challenge (so a captured older reply can't be
+   * replayed against a newer request). It is keyed by the session's stored
+   * key. Only at first contact, when there is none, is that key derived from
+   * the public key in the reply, which is trust on first use; see `Session`.
+   * Only once that tag checks out do we act on anything the message claims -
    * including its own whitelist-status field - and even then `Session.commit`
    * still refuses a clock time that regresses within the same epoch.
-   */
-  protected validateAndUpdateSession(resp: RoutableMessage, requestUuid: Buffer): void;
-  private handshake;
+   *
+   * The one exception is an empty public key: no shared key can be derived
+   * from it to verify a tag. An unpaired key has no session, so
+   * key-not-on-whitelist is the only real reply that omits the key, and that
+   * one status is accepted unauthenticated. Any other status with no key is
+   * malformed.
+   */
+  validate_msg(resp: RoutableMessage, requestUuid: Buffer, requestDomain: Domain | undefined): void;
+  /** The unsigned session-info request that opens a domain session. */
+  protected sessionInfoRequest(domain: Domain): RoutableMessage;
+  /**
+   * Open or refresh a domain session. A reply that fails authentication is
+   * discarded and the unsigned, idempotent request sent again, rather than
+   * failing the handshake on one bad reply. Never trusted either way.
+   *
+   * For VCSEC the caller must hold the session lock; `ensureHandshake` and
+   * `handshakeVehicleSecurity` do.
+   * @returns Whether the session can now sign.
+   * @throws SigningDisabled before anything is sent, when this instance has no key.
+   */
+  protected handshake(domain: Domain, options?: SendOptions): Promise<boolean>;
+  /**
+   * Open a domain session unless one is ready, for a subclass that must know
+   * it can sign before it dispatches. Do not call this from inside the VCSEC
+   * session lock, which it takes.
+   */
+  protected ensureHandshake(domain: Domain): Promise<void>;
+  /** Perform a handshake with the vehicle security domain, even if a session is already established. */
+  handshakeVehicleSecurity(): Promise<void>;
+  /** Perform a handshake with the infotainment domain, even if a session is already established. */
+  handshakeInfotainment(): Promise<void>;
+  /** Sign `command` for `session` by `authMethod`. Assigns a counter, so run it under the session lock. */
+  protected buildMessage(session: Session, command: Buffer): RoutableMessage;
   private buildHmacMessage;
+  private buildAesMessage;
+  /** The authentication method of `request` followed by its tag, which a response's metadata binds to. */
+  private requestHash;
+  /**
+   * Open an encrypted reply to `request`. A reply with no `AESGCMResponseData`
+   * is plaintext and comes back as it is.
+   *
+   * A reply that fails to open cannot be trusted, and says nothing about
+   * whether the command ran.
+   * @returns The reply with its payload in the clear.
+   * @throws Error when the reply fails to open.
+   * @throws SignedCommandResponseReplayed when this request already saw this response counter.
+   */
+  protected decryptResponse(session: Session, request: RoutableMessage, resp: RoutableMessage): RoutableMessage;
   /**
    * Build, sign, dispatch (with WAIT/epoch-fault retry), and interpret one
    * domain command.
@@ -60,19 +180,93 @@ export default abstract class Commands extends VehicleSpecific {
    * most one VCSEC message is ever in flight. Infotainment keeps the
    * narrower build-only lock, serializing only counter assignment.
    */
-  private dispatch;
+  protected dispatch(domain: Domain, command: Buffer, options?: Omit<SendOptions, "optimistic">): Promise<SignedReply>;
   private interpretResponse;
   private interpretVcsecResponse;
+  protected raiseWhitelistFault(information: WhitelistOperationInformationE | undefined): void;
   private interpretInfotainmentResponse;
-  private sendVehicleSecurity;
-  private sendInfotainment;
-  private vehicleAction;
+  /** Dispatch one signed command, logging its name, transport and outcome. */
+  private dispatchLogged;
+  /** The data a read asked for. A reply that only reports an outcome carries none. */
+  private readData;
+  /** One `getVehicleImageState` read, with the single image its reply must carry. */
+  private readVehicleImage;
+  /**
+   * Fetches a rendered vehicle image and returns its assembled bytes. Unlike
+   * any other read it is paged: an `ID` request reports the total size, then
+   * `DATA` requests advance by `chunk_size` until the whole range has arrived.
+   * @param image_type `VehicleImageType`
+   * @param chunk_size Bytes per request. A transport with a small frame needs a smaller value than the default.
+   * @throws Error when `chunk_size` is invalid, before anything is sent, or when the chunks do not add up to the reported size.
+   * @throws InvalidResponse when a reply carries no image.
+   */
+  vehicle_image_state(image_type: VehicleImageType | number, chunk_size?: number): Promise<Buffer>;
+  /** Sign and send an actuation: its reply is a bare terminal ack, so `expectsData` is false. */
+  protected sendVehicleSecurity(command: UnsignedMessage, options?: Pick<SendOptions, "confirmBroadcast" | "onSubmitted">): Promise<CommandResponse>;
+  /**
+   * Sign and send a read to the Vehicle Security computer.
+   * @throws InvalidResponse when the reply carries no `VehicleStatus`.
+   */
+  protected _getVehicleSecurity(command: UnsignedMessage): Promise<VehicleStatus>;
+  /**
+   * Sign and send a command to the Infotainment computer. Reads go through
+   * `_getInfotainment`. `mutating` is false for a command that cannot change
+   * the vehicle, so a transport can give up on it rather than ask whether it
+   * ran; `ping` is the only one. The cloud transport has no use for it.
+   */
+  protected sendInfotainment(action: Action, { onSubmitted }?: {
+    mutating?: boolean;
+  } & Pick<SendOptions, "onSubmitted">): Promise<SignedCommandResponse>;
+  /**
+   * Sign and send a read to the Infotainment computer.
+   * @throws InvalidResponse when the reply carries no `VehicleData`.
+   */
+  protected _getInfotainment(action: Action): Promise<VehicleData>;
+  protected vehicleAction(action: VehicleAction, options?: {
+    mutating?: boolean;
+  }): Promise<SignedCommandResponse>;
+  private moveTonneau;
   private resolveSeat;
+  /** Pings the vehicle. On success, `reason` is the vehicle's timestamp in ISO 8601. */
+  ping(): Promise<CommandResponse>;
+  /**
+   * Add or modify a charging schedule. At least one of `start_time` or `end_time` is required.
+   * @param days_of_week Comma-joined day names (e.g. `"Mon,Wed"`, `"All"`, `"Weekdays"`) or a day bitmask
+   * @param enabled `true` or `false`
+   * @param lat Latitude of the schedule's location
+   * @param lon Longitude of the schedule's location
+   * @param start_time Minutes after midnight to start charging
+   * @param end_time Minutes after midnight to stop charging
+   * @param one_time Run the schedule only once
+   * @param id Schedule ID to modify an existing schedule
+   * @param name Schedule name
+   */
+  add_charge_schedule(days_of_week: string | number, enabled: boolean, lat: number, lon: number, start_time?: number, end_time?: number, one_time?: boolean, id?: number, name?: string): Promise<CommandResponse>;
+  /**
+   * Registers a managed charging site, for a utility managed-charging program, on this vehicle.
+   * @param public_key The raw EC point string the vehicle expects, not the DER a gateway's `get_signed_commands_public_key` returns
+   * @param din The gateway's DIN, which the vehicle matches to the site controller
+   * @param lat Latitude
+   * @param lon Longitude
+   */
+  add_managed_charging_site(public_key: string, din: string, lat: number, lon: number): Promise<SignedCommandResponse>;
+  /**
+   * Add or modify a preconditioning schedule.
+   * @param days_of_week Comma-joined day names (e.g. `"Mon,Wed"`, `"All"`, `"Weekdays"`) or a day bitmask
+   * @param enabled `true` or `false`
+   * @param lat Latitude of the schedule's location
+   * @param lon Longitude of the schedule's location
+   * @param precondition_time Minutes after midnight to be preconditioned by
+   * @param id Schedule ID to modify an existing schedule
+   * @param one_time Run the schedule only once
+   * @param name Schedule name
+   */
+  add_precondition_schedule(days_of_week: string | number, enabled: boolean, lat: number, lon: number, precondition_time: number, id?: number, one_time?: boolean, name?: string): Promise<CommandResponse>;
   /**
    * Controls the front (which_trunk: "front") or rear (which_trunk: "rear") trunk.
    * @param which_trunk "front" or "rear"
    */
-  actuate_truck(which_trunk: Trunk): Promise<CommandResponse>;
+  actuate_trunk(which_trunk: Trunk): Promise<CommandResponse>;
   /**
    * Adjusts vehicle media playback volume.
    * @param volume A floating point number from 0.0 to 11.0.
@@ -82,8 +276,26 @@ export default abstract class Commands extends VehicleSpecific {
   auto_conditioning_start(): Promise<CommandResponse>;
   /** Stops climate preconditioning. */
   auto_conditioning_stop(): Promise<CommandResponse>;
+  /** Auto secures the vehicle: locks it and closes what it can. */
+  auto_secure_vehicle(): Promise<CommandResponse>;
+  /**
+   * Removes charging schedules by location type.
+   * @param home Remove schedules at home
+   * @param work Remove schedules at work
+   * @param other Remove schedules at other locations
+   */
+  batch_remove_charge_schedules(home: boolean, work: boolean, other: boolean): Promise<CommandResponse>;
+  /**
+   * Removes preconditioning schedules by location type.
+   * @param home Remove schedules at home
+   * @param work Remove schedules at work
+   * @param other Remove schedules at other locations
+   */
+  batch_remove_precondition_schedules(home: boolean, work: boolean, other: boolean): Promise<CommandResponse>;
   /** Cancels the countdown to install the vehicle software update. */
   cancel_software_update(): Promise<CommandResponse>;
+  /** Cancels a State of Health test. */
+  cancel_soh_test(): Promise<CommandResponse>;
   /** Charges in max range mode -- we recommend limiting the use of this mode to long trips. */
   charge_max_range(): Promise<CommandResponse>;
   /** Closes the charge port door. */
@@ -98,8 +310,13 @@ export default abstract class Commands extends VehicleSpecific {
   charge_stop(): Promise<CommandResponse>;
   /**
    * Deactivates PIN to Drive and resets the associated PIN for vehicles running firmware versions 2023.44+. This command is only accessible to fleet managers or owners.
+   * @param _pin Accepted for parity with the REST command; the signed action carries no PIN.
    */
-  clear_pin_to_drive_admin(): Promise<CommandResponse>;
+  clear_pin_to_drive_admin(_pin?: string | number): Promise<CommandResponse>;
+  /** Closes the Cybertruck tonneau cover. */
+  close_tonneau(): Promise<CommandResponse>;
+  /** Saves a dashcam clip. */
+  dashcam_save_clip(): Promise<CommandResponse>;
   /** Locks the vehicle. */
   door_lock(): Promise<CommandResponse>;
   /** Unlocks the vehicle. */
@@ -108,6 +325,14 @@ export default abstract class Commands extends VehicleSpecific {
   erase_user_data(): Promise<CommandResponse>;
   /** Briefly flashes the vehicle headlights. Requires the vehicle to be in park. */
   flash_lights(): Promise<CommandResponse>;
+  /** Gets the charge on solar settings, under `response.getChargeOnSolarFeatureResponse`. */
+  get_charge_on_solar(): Promise<SignedCommandResponse>;
+  /** Gets the registered managed charging sites, under `response.getManagedChargingSitesResponse`. */
+  get_managed_charging_sites(): Promise<SignedCommandResponse>;
+  /** Gets vehicle in-car messages. The reply carries the vehicle's response under `getMessagesResponse`, if it sends one. */
+  get_messages(): Promise<SignedCommandResponse>;
+  /** Gets the current time-of-use rate tariff schedule, under `response.getRateTariffResponse`. */
+  get_rate_tariff(): Promise<SignedCommandResponse>;
   /**
    * Restricts certain vehicle UI functionality from guest users
    * @param enable `true` or `false`
@@ -127,6 +352,16 @@ export default abstract class Commands extends VehicleSpecific {
   media_toggle_playback(): Promise<CommandResponse>;
   /** Turns the volume down by one. */
   media_volume_down(): Promise<CommandResponse>;
+  /** Turns the volume up by one. */
+  media_volume_up(): Promise<CommandResponse>;
+  /**
+   * Start navigation to coordinates with a named destination.
+   * @param lat Latitude
+   * @param lon Longitude
+   * @param destination Destination name
+   * @param order Trip order: `0` replaces the current trip (default), `1` prepends it as the next stop, `2` appends it as the last stop
+   */
+  navigation_gps_destination_request(lat: number, lon: number, destination: string, order?: number): Promise<CommandResponse>;
   /**
    * Start navigation to given coordinates.
    * @param lat Latitude
@@ -137,19 +372,36 @@ export default abstract class Commands extends VehicleSpecific {
   /**
    * Sends a location to the in-vehicle navigation system.
    *
-   * `locale` and `type` are REST-only fields with no equivalent in the
-   * signed-command protocol (which only carries a destination string and a
-   * multi-stop order), so they are accepted for cross-transport signature
-   * parity but not sent.
+   * `type`, `locale` and `timestamp_ms` are REST-only fields with no equivalent
+   * in the signed-command protocol, which only carries a destination string
+   * and a multi-stop order. They keep REST's positions, so the router's types
+   * agree, and are not sent.
    * @param value Destination text
    */
-  navigation_request(value: string, _locale?: string, _type?: string): Promise<CommandResponse>;
+  navigation_request(value: string, _type?: string, _locale?: string | null, _timestamp_ms?: number | null): Promise<CommandResponse>;
   /**
    * Start navigation to a supercharger.
    * @param id Supercharger ID
    * @param order Trip order: `0` replaces the current trip (default), `1` prepends it as the next stop, `2` appends it as the last stop
    */
   navigation_sc_request(id: number, order?: number): Promise<CommandResponse>;
+  /** Triggers vehicle route navigation. */
+  navigation_route(): Promise<CommandResponse>;
+  /**
+   * Sends a list of waypoints to the vehicle's navigation system.
+   * @param waypoints Comma-separated Google Maps place IDs, e.g. `"refId:ChIJ...,refId:ChIJ..."`
+   */
+  navigation_waypoints_request(waypoints: string): Promise<CommandResponse>;
+  /** Opens the Cybertruck tonneau cover. */
+  open_tonneau(): Promise<CommandResponse>;
+  /**
+   * Returns the charging sites near the current location of the vehicle.
+   * The sites are under `response.getNearbyChargingSites`.
+   * @param count Number of sites to return
+   * @param radius Search radius
+   * @param detail Whether to include site metadata
+   */
+  nearby_charging_sites(count?: number, radius?: number, detail?: boolean): Promise<SignedCommandResponse>;
   /**
    * Sets automatic seat heating and cooling. Only the front seats support this action.
    * @param auto_seat_position `AutoSeat` position (1-indexed: front left is 1, front right is 2)
@@ -161,6 +413,21 @@ export default abstract class Commands extends VehicleSpecific {
    * @param on `true` or `false`
    */
   remote_auto_steering_wheel_heat_climate_request(on: boolean): Promise<CommandResponse>;
+  /**
+   * Removes a charging schedule.
+   * @param id Schedule ID
+   */
+  remove_charge_schedule(id: number): Promise<CommandResponse>;
+  /**
+   * Removes a registered managed charging site.
+   * @param public_key The public key it was registered with
+   */
+  remove_managed_charging_site(public_key: string): Promise<SignedCommandResponse>;
+  /**
+   * Removes a preconditioning schedule.
+   * @param id Schedule ID
+   */
+  remove_precondition_schedule(id: number): Promise<CommandResponse>;
   /**
    * Plays a sound through the vehicle external speaker.
    * @param sound Fart is `0`, Locate ping is `2000`
@@ -168,10 +435,10 @@ export default abstract class Commands extends VehicleSpecific {
   remote_boombox(sound?: number): Promise<CommandResponse>;
   /**
    * Sets seat cooling. Only the front seats support this action.
-   * @param seat_position Seat position
+   * @param seat_position `AutoSeat` position (1-indexed: front left is 1, front right is 2), unlike seat heating
    * @param seat_cooler_level Cooling level
    */
-  remote_seat_cooler_request(seat_position: Seat | number, seat_cooler_level: Level): Promise<CommandResponse>;
+  remote_seat_cooler_request(seat_position: keyof typeof AutoSeat | number, seat_cooler_level: Level): Promise<CommandResponse>;
   /**
    * Sets seat heating.
    * @param seat_position Seat position
@@ -182,7 +449,7 @@ export default abstract class Commands extends VehicleSpecific {
   remote_start_drive(): Promise<CommandResponse>;
   /**
    * Sets steering wheel heat level.
-   * @param level Heating level (0=Off, 1=Low, 2=High)
+   * @param level `Level` OFF, LOW or HIGH (0, 1, 3). There is no medium level.
    */
   remote_steering_wheel_heat_level_request(level: Level): Promise<CommandResponse>;
   /**
@@ -190,6 +457,12 @@ export default abstract class Commands extends VehicleSpecific {
    * @param on `true` or `false`
    */
   remote_steering_wheel_heater_request(on: boolean): Promise<CommandResponse>;
+  /**
+   * Resets PIN to Drive for fleet managers and owners. Requires firmware 2023.44+.
+   * The vehicle only accepts this with account credentials, which the cloud
+   * transport has and a raw Bluetooth link does not.
+   */
+  reset_pin_to_drive_admin(): Promise<CommandResponse>;
   /** Removes PIN to Drive. Requires the car to be in Pin to Drive mode and not in Valet mode. */
   reset_pin_to_drive_pin(): Promise<CommandResponse>;
   /** Removes PIN for Valet Mode. */
@@ -231,6 +504,21 @@ export default abstract class Commands extends VehicleSpecific {
    * @param cop_temp Integer representing Low (0/30C/90F), Medium (1/35C/95F), or High (2/40C/100F)
    */
   set_cop_temp(cop_temp: 0 | 1 | 2 | 30 | 35 | 40 | 90 | 95 | 100): Promise<CommandResponse>;
+  /**
+   * Sets the vehicle's general discharge limit. This is not `set_powershare_discharge_limit`, which is a separate message.
+   * @param discharge_limit Discharge limit
+   */
+  set_discharge_limit(discharge_limit: number): Promise<CommandResponse>;
+  /**
+   * Turns Keep Accessory Power mode on and off, keeping 12V accessory power available while the vehicle is parked.
+   * @param on `true` or `false`
+   */
+  set_keep_accessory_power_mode(on: boolean): Promise<CommandResponse>;
+  /**
+   * Turns Low Power mode on and off, reducing standby power consumption while the vehicle is parked.
+   * @param on `true` or `false`
+   */
+  set_low_power_mode(on: boolean): Promise<CommandResponse>;
   /**
    * Sets a four-digit passcode for PIN to Drive.
    * @param on `true` or `false`
@@ -243,6 +531,19 @@ export default abstract class Commands extends VehicleSpecific {
    * @param manual_override `true` or `false`
    */
   set_preconditioning_max(on: boolean, manual_override: boolean): Promise<CommandResponse>;
+  /**
+   * Sets a time-of-use rate tariff schedule. The schedule nests up to five
+   * named seasons of four period types each, so build `seasons` and `tariff`
+   * with the `tesla-protocol` message types.
+   * @param seasons The tariff's seasons
+   * @param tariff The tariff
+   */
+  set_rate_tariff(seasons: SetRateTariffRequest_Seasons, tariff?: SetRateTariffRequest_Tariff): Promise<CommandResponse>;
+  /**
+   * Sets HVAC recirculation mode on and off.
+   * @param on `true` or `false`
+   */
+  set_recirculation(on: boolean): Promise<CommandResponse>;
   /**
    * Sets a time at which charging should be completed.
    * @param enable `true` or `false`
@@ -252,35 +553,46 @@ export default abstract class Commands extends VehicleSpecific {
   /**
    * Sets a time at which departure should be completed.
    *
-   * `preconditioning_enabled` and `off_peak_charging_enabled` are accepted
-   * for cross-transport signature parity but have no field in the signed
-   * command protobuf, so they are not sent.
+   * The protocol has no enable flags: a present recurrence block switches its
+   * feature on. So preconditioning and off-peak charging are sent only when
+   * their `*_enabled` or `*_weekdays_only` argument is true, and an absent
+   * block is what turns the feature off.
    * @param enable `true` or `false`
-   * @param preconditioning_enabled not representable in a signed command
+   * @param preconditioning_enabled `true` or `false`
    * @param preconditioning_weekdays_only `true` or `false`
    * @param departure_time Minutes after midnight
-   * @param off_peak_charging_enabled not representable in a signed command
+   * @param off_peak_charging_enabled `true` or `false`
    * @param off_peak_charging_weekdays_only `true` or `false`
    * @param end_off_peak_time Minutes after midnight
    */
-  set_scheduled_departure(enable?: boolean, _preconditioning_enabled?: boolean, preconditioning_weekdays_only?: boolean, departure_time?: number, _off_peak_charging_enabled?: boolean, off_peak_charging_weekdays_only?: boolean, end_off_peak_time?: number): Promise<CommandResponse>;
+  set_scheduled_departure(enable?: boolean, preconditioning_enabled?: boolean, preconditioning_weekdays_only?: boolean, departure_time?: number, off_peak_charging_enabled?: boolean, off_peak_charging_weekdays_only?: boolean, end_off_peak_time?: number): Promise<CommandResponse>;
   /**
    * Enables and disables Sentry Mode.
    * @param on `true` or `false`
    */
   set_sentry_mode(on: boolean): Promise<CommandResponse>;
+  /**
+   * Sets the vehicle suspension level.
+   * @param level `1` entry, `2` low, `3` medium, `4` high, `5` very high, `6` extract
+   */
+  set_suspension_level(level: number): Promise<CommandResponse>;
   /**
    * Sets the driver and/or passenger-side cabin temperature (and other zones if sync is enabled).
    * @param driver_temp Driver temperature
    * @param passenger_temp Passenger temperature
    */
   set_temps(driver_temp: number, passenger_temp: number): Promise<CommandResponse>;
+  /**
+   * Enables or disables tent mode.
+   * @param on `true` or `false`
+   */
+  set_tent_mode(on: boolean): Promise<CommandResponse>;
   /**
    * Turns on Valet Mode and sets a four-digit passcode.
    * @param on `true` or `false`
    * @param password Four-digit passcode
    */
-  set_valet_mode(on: boolean, password: string | number): Promise<CommandResponse>;
+  set_valet_mode(on: boolean, password?: string | number): Promise<CommandResponse>;
   /**
    * Changes the name of a vehicle.
    * @param vehicle_name New name
@@ -308,14 +620,26 @@ export default abstract class Commands extends VehicleSpecific {
    * @param limit_mph Maximum speed in MPH
    */
   speed_limit_set_limit(limit_mph: number): Promise<CommandResponse>;
+  /**
+   * Starts a light show.
+   * @param show_index Index of the show
+   * @param start_time Start time
+   * @param volume Volume
+   * @param dance_moves Whether the vehicle moves during the show
+   */
+  start_light_show(show_index?: number, start_time?: number, volume?: number, dance_moves?: boolean): Promise<CommandResponse>;
+  /** Stops the current light show. */
+  stop_light_show(): Promise<CommandResponse>;
+  /** Stops the Cybertruck tonneau cover. */
+  stop_tonneau(): Promise<CommandResponse>;
   /**
    * Controls the panoramic sunroof on the Model S.
    *
    * "stop" has no corresponding field in the signed-command protobuf (only
    * vent/close/open), so it is rejected rather than guessed at.
-   * @param state "close" or "vent"
+   * @param state "open", "close" or "vent"
    */
-  sun_roof_control(state: "stop" | "close" | "vent"): Promise<CommandResponse>;
+  sun_roof_control(state: "stop" | "close" | "vent" | "open"): Promise<CommandResponse>;
   /**
    * Records a drive note. Overrides the inherited plaintext command so it is
    * signed and dispatched over the vehicle-command protocol rather than
@@ -326,11 +650,18 @@ export default abstract class Commands extends VehicleSpecific {
   take_drivenote(note: string): Promise<CommandResponse>;
   /**
    * Turns on HomeLink (used to open and close garage doors).
-   * @param lat Latitude
-   * @param lon Longitude
    * @param token
+   * @param lat Latitude. `0` is a coordinate; the location is sent when both are given.
+   * @param lon Longitude
+   */
+  trigger_homelink(token?: string, lat?: number, lon?: number): Promise<CommandResponse>;
+  /**
+   * Updates the charge on solar settings.
+   * @param enabled `true` or `false`
+   * @param lower_charge_limit Lower charge limit
+   * @param upper_charge_limit Upper charge limit
    */
-  trigger_homelink(lat: number, lon: number, token?: string): Promise<CommandResponse>;
+  update_charge_on_solar(enabled: boolean, lower_charge_limit: number, upper_charge_limit: number): Promise<CommandResponse>;
   /**
    * Sends upcoming calendar entries to the vehicle. Overrides the inherited
    * plaintext command so it is signed and dispatched over the vehicle-command
@@ -339,6 +670,11 @@ export default abstract class Commands extends VehicleSpecific {
    * @param calendar_data Calendar data
    */
   upcoming_calendar_entries(calendar_data: string): Promise<CommandResponse>;
+  /**
+   * Asks the vehicle to open a video stream.
+   * @param url Video URL
+   */
+  video_request(url: string): Promise<CommandResponse>;
   /**
    * Control the windows of a parked vehicle. Supported commands: vent and close.
    * @param command "vent" or "close"
@@ -346,4 +682,200 @@ export default abstract class Commands extends VehicleSpecific {
    * @param lon Longitude
    */
   window_control(command: "vent" | "close", _lat?: number, _lon?: number): Promise<CommandResponse>;
+  /**
+   * Requests a PII key, for privacy and telemetry pseudonymization.
+   * @param subscriber_public_key Subscriber public key
+   * @param pii_key_expiration Expiry as a Unix timestamp in seconds
+   */
+  pii_key_request(subscriber_public_key: string, pii_key_expiration: number): Promise<SignedCommandResponse>;
+  /**
+   * Syncs the vehicle's privacy and telemetry pseudonym with a previously known hashed value.
+   * @param last_known_pseudonym_hashed The hashed pseudonym
+   */
+  pseudonym_sync_request(last_known_pseudonym_hashed: Uint8Array): Promise<SignedCommandResponse>;
+  /**
+   * Passes a completed "Sign in with Tesla" OAuth response to the vehicle
+   * screen. The caller must already hold that response from its own auth flow.
+   * @param client_id OAuth client ID
+   * @param scope OAuth scope
+   * @param access_token Access token
+   * @param refresh_token Refresh token
+   * @param expiry_timestamp Token expiry
+   * @param error OAuth error, if any
+   * @param scoped_token Scoped token
+   */
+  tesla_auth_response(client_id: string, scope: string, access_token: string, refresh_token: string, expiry_timestamp: number, error?: string, scoped_token?: string): Promise<CommandResponse>;
+  /**
+   * Links a local Tesla profile to a cloud vault profile.
+   * @param cloud_vault_uuid Cloud vault UUID
+   * @param local_profile_uuid Local profile UUID
+   * @param delete_local_profile_after_setup Whether to delete the local profile afterwards
+   */
+  setup_cloud_profile_with_local_profile_uuid(cloud_vault_uuid: string, local_profile_uuid: string, delete_local_profile_after_setup?: boolean): Promise<CommandResponse>;
+  /**
+   * Gets the local Tesla profiles of a cloud vault, under `response.getLocalProfilesResponse`.
+   * @param vault_uuid Cloud vault UUID
+   */
+  get_local_profiles_for_vault_uuid(vault_uuid: string): Promise<SignedCommandResponse>;
+  /**
+   * Requests Bluetooth Classic, not BLE, pairing with a phone for calls and audio.
+   * @param name Device name
+   * @param mac_address Device MAC address
+   */
+  bluetooth_classic_pairing_request(name: string, mac_address: Uint8Array): Promise<CommandResponse>;
+  /**
+   * Runs a diagnostic bandwidth test, with its result under `response.bandwidthTestResponse`.
+   * @param requested_size Size in bytes
+   */
+  bandwidth_test(requested_size: number): Promise<SignedCommandResponse>;
+  /** Gets information about keys paired with the vehicle, under `response.keysInfoResponse`. */
+  fetch_keys_info(): Promise<SignedCommandResponse>;
+  /** Formats the USB drive connected to the vehicle, erasing all files on it. Irreversible. */
+  format_usb(): Promise<CommandResponse>;
+  /** Deletes all dashcam clips stored on the vehicle. Irreversible. */
+  delete_dashcam_clips(): Promise<CommandResponse>;
+  /**
+   * Activates or deactivates parental controls.
+   * @param activate `true` or `false`
+   * @param pin Four-digit PIN
+   */
+  parental_controls(activate: boolean, pin: string | number): Promise<CommandResponse>;
+  /**
+   * Clears the parental controls PIN.
+   * @param pin Four-digit PIN
+   */
+  parental_controls_clear_pin(pin: string | number): Promise<CommandResponse>;
+  /** Clears the parental controls PIN, for fleet managers and owners. */
+  parental_controls_clear_pin_admin(): Promise<CommandResponse>;
+  /**
+   * Enables or disables a parental controls setting.
+   * @param setting `0` speed limit, `1` acceleration, `2` safety features, `3` curfew, `4` browser blocked, `5` theater blocked, `6` arcade blocked
+   * @param enable `true` or `false`
+   */
+  parental_controls_enable_setting(setting: number, enable: boolean): Promise<CommandResponse>;
+  /**
+   * Sets the parental controls speed limit.
+   * @param limit_mph Maximum speed in MPH
+   */
+  parental_controls_set_speed_limit(limit_mph: number): Promise<CommandResponse>;
+  /**
+   * Sets the displayed temperature unit.
+   * @param unit `TemperatureUnit`
+   */
+  set_temperature_unit(unit: TemperatureUnit | number): Promise<CommandResponse>;
+  /**
+   * Sets the displayed distance unit.
+   * @param unit `DistanceUnit`
+   */
+  set_distance_unit(unit: DistanceUnit | number): Promise<CommandResponse>;
+  /**
+   * Sets the displayed clock format.
+   * @param format `TimeDisplayFormat`
+   */
+  set_time_display_format(format: TimeDisplayFormat | number): Promise<CommandResponse>;
+  /**
+   * Sets the displayed tire pressure unit.
+   * @param unit `TirePressureUnit`
+   */
+  set_tire_pressure_unit(unit: TirePressureUnit | number): Promise<CommandResponse>;
+  /**
+   * Sets the displayed energy or range unit.
+   * @param format `EnergyDisplayFormat`
+   */
+  set_energy_display_format(format: EnergyDisplayFormat | number): Promise<CommandResponse>;
+  /**
+   * Sets paired-phone display preferences.
+   * @param font_size `PhoneFontSize`
+   * @param options.distance_unit `DistanceUnit`
+   * @param options.temperature_unit `TemperatureUnit`
+   */
+  set_phone_setting_preferences(font_size?: PhoneFontSize | number, { distance_unit, temperature_unit }?: {
+    distance_unit?: DistanceUnit | number;
+    temperature_unit?: TemperatureUnit | number;
+  }): Promise<CommandResponse>;
+  /**
+   * Enables or disables the Powershare feature.
+   * @param on `true` or `false`
+   */
+  set_powershare_feature(on: boolean): Promise<CommandResponse>;
+  /**
+   * Enables or disables powershare.
+   * @param on `true` or `false`
+   */
+  set_powershare_request(on: boolean): Promise<CommandResponse>;
+  /**
+   * Sets the Powershare discharge limit. This is not `set_discharge_limit`, which is a separate message.
+   * @param percent Discharge limit percentage
+   */
+  set_powershare_discharge_limit(percent: number): Promise<CommandResponse>;
+  /**
+   * Sets the outlets on or off.
+   * @param request `0` off, `1` cabin and bed, `2` cabin
+   */
+  set_outlets(request: number): Promise<CommandResponse>;
+  /**
+   * Sets the outlet timer.
+   * @param num_minutes Minutes
+   */
+  set_outlet_timer(num_minutes: number): Promise<CommandResponse>;
+  /**
+   * Sets the outlet state of charge limit.
+   * @param percent State of charge percentage
+   */
+  set_outlet_soc_limit(percent: number): Promise<CommandResponse>;
+  /**
+   * Sets the power feed on or off.
+   * @param request `0` off, `1` feed 1, `2` feed 2, `3` both
+   */
+  set_power_feed(request: number): Promise<CommandResponse>;
+  /**
+   * Sets the power feed timer.
+   * @param num_minutes Minutes
+   */
+  set_power_feed_timer(num_minutes: number): Promise<CommandResponse>;
+  /**
+   * Sets the power feed state of charge limit.
+   * @param percent State of charge percentage
+   */
+  set_power_feed_soc_limit(percent: number): Promise<CommandResponse>;
+  /**
+   * Sets the lightbar brightness.
+   * @param brightness Brightness
+   */
+  set_lightbar_brightness(brightness: number): Promise<CommandResponse>;
+  /**
+   * Turns the lightbar middle light on or off.
+   * @param on `true` or `false`
+   */
+  set_lightbar_middle(on: boolean): Promise<CommandResponse>;
+  /**
+   * Turns the ditch lights on or off.
+   * @param on `true` or `false`
+   */
+  set_lightbar_ditch(on: boolean): Promise<CommandResponse>;
+  /**
+   * Sets the front zone light level.
+   * @param level `0` off, `1` low, `2` medium, `3` high
+   */
+  set_front_zone_lights(level: number): Promise<CommandResponse>;
+  /**
+   * Sets the rear zone light level.
+   * @param level `0` off, `1` low, `2` medium, `3` high
+   */
+  set_rear_zone_lights(level: number): Promise<CommandResponse>;
+  /**
+   * Starts or stops the trailer light test.
+   * @param on `true` or `false`
+   */
+  set_trailer_light_test(on: boolean): Promise<CommandResponse>;
+  /**
+   * Sets the truck bed light's auto state.
+   * @param on `true` or `false`
+   */
+  set_truck_bed_light_auto(on: boolean): Promise<CommandResponse>;
+  /**
+   * Sets the truck bed light brightness.
+   * @param brightness Brightness
+   */
+  set_truck_bed_light_brightness(brightness: number): Promise<CommandResponse>;
 }