curl -X POST https://api.bota.dev/v1/devices/dev_abc123/heartbeat \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "battery_percent": 85,
    "storage_used_mb": 512,
    "storage_total_mb": 32768,
    "device_state": "idle",
    "pending_recordings": 3,
    "connection_type": ["ble"]
  }'

curl -X POST https://api.bota.dev/v1/devices/me/heartbeat \
  -H "Authorization: Bearer dtok_..." \
  -H "Content-Type: application/json" \
  -d '{
    "battery_percent": 85,
    "battery_mv": 3820,
    "is_charging": false,
    "storage_used_mb": 512,
    "storage_total_mb": 32768,
    "signal_strength_dbm": -75,
    "firmware_version": "1.2.3",
    "device_state": "idle",
    "pending_recordings": 3,
    "flags": 8,
    "connection_type": ["wifi", "4g"],
    "lte_status": "connected",
    "wifi_status": "connected"
  }'

// Developer's backend relays device status read over BLE
app.post('/devices/:id/heartbeat', auth, async (req, res) => {
  const response = await fetch(
    `https://api.bota.dev/v1/devices/${req.params.id}/heartbeat`,
    {
      method: 'POST',
      headers: {
        'Authorization': `Bearer ${BOTA_API_KEY}`,
        'Content-Type': 'application/json',
      },
      body: JSON.stringify({
        ...req.body,
        connection_type: ['ble'],
      }),
    }
  );

  res.json(await response.json());
});

{
  "status": "ok",
  "pending_commands": [
    {
      "id": "cmd_xyz789",
      "type": "factory_reset",
      "params": {},
      "grant_token": "rct_...",
      "expires_at": null
    }
  ]
}

{
  "error": {
    "code": "forbidden",
    "message": "Device token does not match device ID"
  }
}