@amerged/ohmyhost-sdk 0.1.23 → 0.1.25

package/src/packages/sdk-ts/{generated → src/generated}/sdk.gen.ts

@@ -48,6 +48,8 @@ import type {
   CreateOrganizationResponses,
   CreateProjectDatabaseAccessErrors,
   CreateProjectDatabaseAccessResponses,
+  CreateProjectDataChangeErrors,
+  CreateProjectDataChangeResponses,
   CreateProjectDevAccessTicketErrors,
   CreateProjectDevAccessTicketResponses,
   CreateProjectErrors,
@@ -161,6 +163,8 @@ import type {
   PlanDeploymentRollbackResponses,
   PlanPaidProjectDomainErrors,
   PlanPaidProjectDomainResponses,
+  PlanProjectDataChangeErrors,
+  PlanProjectDataChangeResponses,
   PlanProjectDeletionErrors,
   PlanProjectDeletionResponses,
   PrepareManagedMailWebhookErrors,
@@ -168,6 +172,7 @@ import type {
   ProjectDatabaseAccessRequest,
   ProjectDatabaseQueryRequest,
   ProjectDatabaseWriteRequest,
+  ProjectDataChangeRequest,
   PromoteDeploymentErrors,
   PromoteDeploymentResponses,
   PutEnvironmentSecretErrors,
@@ -1077,7 +1082,7 @@ export const createBillingCheckout = <ThrowOnError extends boolean = true>(
 /**
  * Observe and reconcile an owner's original checkout
  *
- * Reads Stripe and reconciles confirmed credits/refunds idempotently. payment_confirmed describes the original Checkout, not spendable credit or current Paid entitlement. Read organization credits for available funding; paid_until is the current paid coverage. No new purchase intent or payment is created; an uncertain original Checkout can resume using its stored identity.
+ * Reads Stripe and reconciles confirmed credits/refunds idempotently. payment_confirmed describes the original Checkout, not spendable credit or current Paid entitlement. Read organization credits for available funding and the organization account's effective plan for Paid coverage; paid_until is the paid Stripe period end, not the end of renewal grace. No new purchase intent or payment is created; an uncertain original Checkout can resume using its stored identity.
  */
 export const getBillingCheckout = <ThrowOnError extends boolean = true>(
   parameters: {
@@ -2068,7 +2073,7 @@ export const getProjectPoweredByFlag = <ThrowOnError extends boolean = true>(
 /**
  * Show or hide the "Powered by ohmyho.st" flag
  *
- * Owner-only. The production site shows a small flag on its right edge that links to ohmyho.st. While it is on, a Free workspace may connect its own domain to this project and the custom-hostname fee is waived; Paid periods receive bonus credits. Hiding it is refused while a Free workspace's domain depends on it. A retry with the same Idempotency-Key and body returns the first result without switching again; a changed request under a used key returns idempotency_key_reused (409).
+ * Owner-only. The production site shows a small flag on its right edge that links to ohmyho.st. While it is on, a Free workspace may connect its own domain to this project and the custom-hostname fee is waived; each Paid period bought through Stripe adds 250 credits to the organization, however many of its projects show the flag. Hiding it is refused while a Free workspace's domain depends on it. A retry with the same Idempotency-Key and body returns the first result without switching again; a changed request under a used key returns idempotency_key_reused (409).
  */
 export const setProjectPoweredByFlag = <ThrowOnError extends boolean = true>(
   parameters: {
@@ -2693,7 +2698,7 @@ export const getPaidProjectDomain = <ThrowOnError extends boolean = true>(
 /**
  * Apply one Paid customer-owned hostname
  *
- * Requires a confirmed current Paid service period and no expired credit-exhaustion grace. Returns paid_plan_required without a Paid period, or insufficient_organization_credits after seven days with no available credits, without provider mutation. Top-ups restore exhausted Paid access but do not create or extend a Paid service period. After the Paid check, a project whose Prod environment has no active deployment returns production_deployment_required (409) without claiming the hostname or any provider mutation; a changed request under a used key returns idempotency_key_reused (409).
+ * Requires Paid access (a Stripe period or a grant) or, for a Free workspace, a project that currently shows the powered-by flag, and no expired credit-exhaustion grace. Returns paid_plan_required otherwise, or insufficient_organization_credits after seven days with no available credits, without provider mutation. Top-ups lift a credit-exhaustion block but never start or extend Paid access. After that check, a project whose Prod environment has no active deployment returns production_deployment_required (409) without claiming the hostname or any provider mutation; a changed request under a used key returns idempotency_key_reused (409).
  */
 export const applyPaidProjectDomain = <ThrowOnError extends boolean = true>(
   parameters: {
@@ -2744,7 +2749,7 @@ export const applyPaidProjectDomain = <ThrowOnError extends boolean = true>(
 /**
  * Plan a deployment
  *
- * Resolves immutable inputs and estimates effects without provider mutation or billable work. The plan targets Dev unless `environment` is `prod`; a Prod plan builds straight into Prod, except that a project with shared data and a database only reaches Prod through promotion. Mail and the currently supported mail-backed Better Auth contract require a confirmed Paid service period; it is checked again before build reservation. An old sender configuration is not Paid authority.
+ * Resolves immutable inputs and estimates effects without provider mutation or billable work. The plan targets Dev unless `environment` is `prod`; a Prod plan builds straight into Prod, except that a project with shared data and a database only reaches Prod through promotion. Managed mail requires a confirmed Paid service period; it is checked again before build reservation. Selecting the managed Better Auth bridge does not require managed mail or Paid access. An old sender configuration is not Paid authority.
  */
 export const planDeployment = <ThrowOnError extends boolean = true>(
   parameters: {
@@ -4307,3 +4312,107 @@ export const getManagedMailAttachment = <ThrowOnError extends boolean = true>(
     ...params,
   });
 };
+
+/**
+ * Plan a Dev and Prod data assignment change
+ *
+ * Plans one of four Owner-only changes without copying data and issues a ten-minute action-bound confirmation token. shared remains the default at project creation. A Dev reset preserves secrets and access mode and renews a protected share link.
+ */
+export const planProjectDataChange = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    projectDataChangeRequest: ProjectDataChangeRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  PlanProjectDataChangeResponses,
+  PlanProjectDataChangeErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { key: "projectDataChangeRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    PlanProjectDataChangeResponses,
+    PlanProjectDataChangeErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/data-changes:plan",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Execute a confirmed Dev and Prod data assignment change
+ *
+ * Accepts an asynchronous Owner-only data change with the plan ETag, X-Confirmation-Token and Idempotency-Key. It never deletes the data area Prod keeps. Retired Dev resources are removed after access and outstanding upload capabilities are fenced; uncertain effects remain reconcilable.
+ */
+export const createProjectDataChange = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    "If-Match": string;
+    "X-Confirmation-Token": ConfirmationToken;
+    project_id: Ulid;
+    projectDataChangeRequest: ProjectDataChangeRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  CreateProjectDataChangeResponses,
+  CreateProjectDataChangeErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "headers", key: "If-Match" },
+          { in: "headers", key: "X-Confirmation-Token" },
+          { in: "path", key: "project_id" },
+          { key: "projectDataChangeRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    CreateProjectDataChangeResponses,
+    CreateProjectDataChangeErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/data-changes",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};

package/src/packages/sdk-ts/{generated → src/generated}/types.gen.ts

@@ -652,7 +652,7 @@ export type ProjectDatabaseAccess = {
   issued_at: string;
   expires_at: string;
   revoked_at: string | null;
-  revocation_reason: "principal" | "expired" | "budget" | "creation_failed" | null;
+  revocation_reason: "principal" | "expired" | "budget" | "creation_failed" | "data_change" | null;
 };
 
 export type ProjectDatabaseAccessCredential = ProjectDatabaseAccess & {
@@ -819,6 +819,9 @@ export type GuardedActionPlan = (
   source_artifact_digest?: Sha256Digest;
   source_environment?: "dev";
   target_environment?: "prod";
+  /**
+   * Send as If-Match with this plan's confirmation token.
+   */
   resource_etag: string;
   effects: Array<string>;
   risks: Array<string>;
@@ -840,7 +843,7 @@ export type GitCommitSha = string;
 export type Sha256Digest = string;
 
 /**
- * Chosen when the project is created. shared uses one database and a shared file namespace across Dev/Prod; isolated keeps their database/Auth records and files separate. Skills recommend isolated development, but the customer chooses the additional measured database consumption. Promotion applies pending schema migrations to an isolated Prod database without copying Dev data. Changing an established mode requires an explicit data migration.
+ * Optional at creation, default shared. shared uses one data area across Dev/Prod; isolated gives each environment its own database/Auth records and file namespace. The four Owner-confirmed data-change actions reassign or reset areas without copying data or files and without a special change fee; ordinary measured resource consumption still applies. A reset or merge removes the named Dev resources. Promotion applies pending schema migrations to isolated Prod without copying Dev data.
  */
 export type ProjectDataMode = "shared" | "isolated";
 
@@ -925,7 +928,7 @@ export type CreateProjectRequest = {
 
 export type CreateOrganizationRequest = {
   /**
-   * Optional public acquisition source from a link's r parameter. Signup is open and this value grants nothing; omit it when the customer arrived directly. Promotional credits are server-configured, attribution is fixed for the user, and rewards are never multiplied by retries or additional organizations.
+   * Optional public acquisition source from a link's r parameter; never a secret or an access code. Omit it when the customer arrived directly. A workspace referral value (ref-...) or a flag value (flag-..., while that project still shows the flag) gives the user's first workspace 1,000 credits and 30 days of granted Paid access; other promotional credits are server-configured. Direct signup and invalid referral values create a Free workspace without a referral reward. Attribution is fixed for the user, and rewards are never multiplied by retries or additional organizations.
    */
   signup_source?: string;
   name: string;
@@ -958,6 +961,9 @@ export type OrganizationAccount = {
   workos_organization_id: string;
   plan: "free" | "paid";
   plan_source: "free" | "stripe" | "granted" | "manual";
+  /**
+   * End of the paid Stripe billing period or the applicable grant; null on Free or for an unbounded grant. During an unpaid renewal the effective Paid plan may remain available for up to 14 days after this Stripe period end, without new monthly credits.
+   */
   paid_until: string | null;
   available_micros: CreditMicros;
   monthly_micros: CreditMicros;
@@ -1103,7 +1109,14 @@ export type ProblemDetails = {
     | "api_key_creation_uncertain"
     | "api_key_permissions_unavailable"
     | "reconciliation_exhausted"
-    | "service_unavailable";
+    | "service_unavailable"
+    | "source_commit_not_found"
+    | "domain_hostname_taken"
+    | "data_change_blocked"
+    | "data_change_in_progress"
+    | "data_change_not_applicable"
+    | "rollback_target_data_changed"
+    | "project_domain_delete_required";
   request_id: string;
   retryable: boolean;
   /**
@@ -1283,7 +1296,10 @@ export type OperationFailure = {
     | "runtime_candidate_failed"
     | "runtime_candidate_rejected"
     | "storage_jurisdiction_conflict"
-    | "provider_state_absent";
+    | "provider_state_absent"
+    | "auto_deploy_plan_rejected"
+    | "promotion_source_stale"
+    | "promotion_target_stale";
   message: string;
   /**
    * A terminal operation cannot be retried in place; follow suggested_action.
@@ -1317,6 +1333,41 @@ export type AuditEventPage = {
 
 export type Ulid = string;
 
+/**
+ * Owner-confirmed assignment change. No application data is copied; physical resources are provisioned lazily.
+ */
+export type ProjectDataChangeKind =
+  | "isolate_prod_keeps_data"
+  | "isolate_dev_keeps_data"
+  | "share_prod_keeps_data"
+  | "reset_dev";
+
+export type ProjectDataChangeRequest = {
+  change: ProjectDataChangeKind;
+};
+
+/**
+ * An action-bound ten-minute plan naming retained, retired and lazily created data areas. The workspace Owner confirms its destructive effects before execution.
+ */
+export type ProjectDataChangePlan = {
+  action: "data_change";
+  project_id: Ulid;
+  change: ProjectDataChangeKind;
+  data_mode_before: "shared" | "isolated";
+  data_mode_after: "shared" | "isolated";
+  effects: Array<string>;
+  destructive_effects: Array<string>;
+  redeploy_environments: ["dev" | "prod"];
+  risks: Array<string>;
+  /**
+   * Send as If-Match with this plan's confirmation token.
+   */
+  resource_etag: string;
+  confirmation_token: ConfirmationToken;
+  created_at: string;
+  expires_at: string;
+};
+
 /**
  * Immutable pre-build deployment plan. It expires exactly 24 hours after creation.
  */
@@ -1362,7 +1413,7 @@ export type AuditLimit = number;
 export type IdempotencyKey = string;
 
 /**
- * Exact ETag returned for the current project or deployment state.
+ * Use resource_etag from a fresh rollback, promotion, deletion or data-change plan. For a project address change, use etag from project status; an ETag from another representation is not accepted.
  */
 export type IfMatch = string;
 
@@ -3283,7 +3334,7 @@ export type DeleteProjectData = {
      */
     "Idempotency-Key": string;
     /**
-     * Exact ETag returned for the current project or deployment state.
+     * Use resource_etag from a fresh rollback, promotion, deletion or data-change plan. For a project address change, use etag from project status; an ETag from another representation is not accepted.
      */
     "If-Match": string;
     /**
@@ -4458,7 +4509,7 @@ export type ChangeProjectHandleData = {
      */
     "Idempotency-Key": string;
     /**
-     * Exact ETag returned for the current project or deployment state.
+     * Use resource_etag from a fresh rollback, promotion, deletion or data-change plan. For a project address change, use etag from project status; an ETag from another representation is not accepted.
      */
     "If-Match": string;
   };
@@ -5714,7 +5765,7 @@ export type RollbackDeploymentData = {
      */
     "Idempotency-Key": string;
     /**
-     * Exact ETag returned for the current project or deployment state.
+     * Use resource_etag from a fresh rollback, promotion, deletion or data-change plan. For a project address change, use etag from project status; an ETag from another representation is not accepted.
      */
     "If-Match": string;
     /**
@@ -5857,7 +5908,7 @@ export type PromoteDeploymentData = {
      */
     "Idempotency-Key": string;
     /**
-     * Exact ETag returned for the current project or deployment state.
+     * Use resource_etag from a fresh rollback, promotion, deletion or data-change plan. For a project address change, use etag from project status; an ETag from another representation is not accepted.
      */
     "If-Match": string;
     /**
@@ -7074,3 +7125,143 @@ export type GetManagedMailAttachmentResponses = {
 
 export type GetManagedMailAttachmentResponse =
   GetManagedMailAttachmentResponses[keyof GetManagedMailAttachmentResponses];
+
+export type PlanProjectDataChangeData = {
+  body: ProjectDataChangeRequest;
+  headers?: {
+    /**
+     * Optional caller-provided correlation identifier.
+     */
+    "X-Request-Id"?: string;
+  };
+  path: {
+    /**
+     * Project identifier.
+     */
+    project_id: Ulid;
+  };
+  query?: never;
+  url: "/v1/projects/{project_id}/data-changes:plan";
+};
+
+export type PlanProjectDataChangeErrors = {
+  /**
+   * The request failed.
+   */
+  400: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  401: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  403: ProblemDetails;
+  /**
+   * The resource does not exist or is not visible to the authenticated principal.
+   */
+  404: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  409: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  429: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  503: ProblemDetails;
+};
+
+export type PlanProjectDataChangeError =
+  PlanProjectDataChangeErrors[keyof PlanProjectDataChangeErrors];
+
+export type PlanProjectDataChangeResponses = {
+  /**
+   * The data assignment plan and its exact destructive effects.
+   */
+  200: ProjectDataChangePlan;
+};
+
+export type PlanProjectDataChangeResponse =
+  PlanProjectDataChangeResponses[keyof PlanProjectDataChangeResponses];
+
+export type CreateProjectDataChangeData = {
+  body: ProjectDataChangeRequest;
+  headers: {
+    /**
+     * Optional caller-provided correlation identifier.
+     */
+    "X-Request-Id"?: string;
+    /**
+     * Identifies one mutation and its canonical request payload.
+     */
+    "Idempotency-Key": string;
+    /**
+     * Use resource_etag from a fresh rollback, promotion, deletion or data-change plan. For a project address change, use etag from project status; an ETag from another representation is not accepted.
+     */
+    "If-Match": string;
+    /**
+     * Ten-minute token bound to the planned action, project, target resource, and resource ETag.
+     */
+    "X-Confirmation-Token": ConfirmationToken;
+  };
+  path: {
+    /**
+     * Project identifier.
+     */
+    project_id: Ulid;
+  };
+  query?: never;
+  url: "/v1/projects/{project_id}/data-changes";
+};
+
+export type CreateProjectDataChangeErrors = {
+  /**
+   * The request failed.
+   */
+  400: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  401: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  403: ProblemDetails;
+  /**
+   * The resource does not exist or is not visible to the authenticated principal.
+   */
+  404: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  409: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  413: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  429: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  503: ProblemDetails;
+};
+
+export type CreateProjectDataChangeError =
+  CreateProjectDataChangeErrors[keyof CreateProjectDataChangeErrors];
+
+export type CreateProjectDataChangeResponses = {
+  /**
+   * The mutation was accepted for asynchronous processing.
+   */
+  202: Operation;
+};
+
+export type CreateProjectDataChangeResponse =
+  CreateProjectDataChangeResponses[keyof CreateProjectDataChangeResponses];