@leaflow/sdk 0.0.0-dev.433.g7e48b8f → 0.0.0-dev.435.ge640f61

package/dist/iam/v1/generated/functions.d.ts

@@ -12,7 +12,7 @@
  * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
  * OpenAPI spec version: 1.0.0
  */
-import type { AttachPolicyRequestBody, BatchGetMembersRequestBody, BatchGetMembersResponseBody, CatalogListResponseBody, CreateRoleRequestBody, CreateSSHKeyRequestBody, Error, IssueInvitationRequestBody, IssuedInvitationResponseBody, LengthAwarePageInvitationResource, LengthAwarePageMemberResource, LengthAwarePageSSHKeyResource, ListMembersParams, ListPoliciesParams, ListProjectInvitationsParams, ListSshKeysParams, MemberResource, MembershipResource, OwnershipTransferResponseBody, PolicyListResponseBody, PolicyResource, ProjectAccessResource, QuotaListResponseBody, RenameSSHKeyRequestBody, RoleListResponseBody, RoleResource, SSHKeyResource, SetMemberPermissionsRequestBody, SetMemberRolesRequestBody, SetProjectSlugRequestBody, TransferOwnershipRequestBody, UpdatePolicyRequestBody, UpdateProjectRequestBody, UpdateRoleRequestBody } from "./models.js";
+import type { ApplicationResource, AttachPolicyRequestBody, BatchGetMembersRequestBody, BatchGetMembersResponseBody, CatalogListResponseBody, CreateApplicationRequestBody, CreateApplicationResponseBody, CreateRoleRequestBody, CreateSSHKeyRequestBody, Error, IssueInvitationRequestBody, IssuedInvitationResponseBody, LengthAwarePageApplicationResource, LengthAwarePageInvitationResource, LengthAwarePageMemberResource, LengthAwarePageSSHKeyResource, ListApplicationsParams, ListMembersParams, ListPoliciesParams, ListProjectInvitationsParams, ListSshKeysParams, MemberResource, MembershipResource, OwnershipTransferResponseBody, PolicyListResponseBody, PolicyResource, ProjectAccessResource, QuotaListResponseBody, RenameSSHKeyRequestBody, RoleListResponseBody, RoleResource, RotateApplicationSecretResponseBody, SSHKeyResource, SetMemberPermissionsRequestBody, SetMemberRolesRequestBody, SetProjectSlugRequestBody, TransferOwnershipRequestBody, UpdateApplicationRequestBody, UpdatePolicyRequestBody, UpdateProjectRequestBody, UpdateRoleRequestBody } from "./models.js";
 export type HTTPStatusCode1xx = 100 | 101 | 102 | 103;
 export type HTTPStatusCode2xx = 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207;
 export type HTTPStatusCode3xx = 300 | 301 | 302 | 303 | 304 | 305 | 307 | 308;
@@ -677,3 +677,141 @@ export declare const getRevokeSshKeyUrl: (keyId: string) => string;
  * @summary Revoke an SSH key
  */
 export declare const revokeSshKey: (keyId: string, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<revokeSshKeyResponse>;
+export type listApplicationsResponse200 = {
+    data: LengthAwarePageApplicationResource;
+    status: 200;
+};
+export type listApplicationsResponseDefault = {
+    data: Error;
+    status: Exclude<HTTPStatusCodes, 200>;
+};
+export type listApplicationsResponseSuccess = listApplicationsResponse200 & {
+    headers: Headers;
+};
+export type listApplicationsResponseError = listApplicationsResponseDefault & {
+    headers: Headers;
+};
+export type listApplicationsResponse = listApplicationsResponseSuccess | listApplicationsResponseError;
+export declare const getListApplicationsUrl: (params?: ListApplicationsParams) => string;
+/**
+ * Disabled applications are listed. Archived applications are omitted unless
+ * `include_archived` is true. An application that is still being created is not listed.
+ * @summary List the applications of this project
+ */
+export declare const listApplications: (params?: ListApplicationsParams, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<listApplicationsResponse>;
+export type createApplicationResponse201 = {
+    data: CreateApplicationResponseBody;
+    status: 201;
+};
+export type createApplicationResponseDefault = {
+    data: Error;
+    status: Exclude<HTTPStatusCodes, 201>;
+};
+export type createApplicationResponseSuccess = createApplicationResponse201 & {
+    headers: Headers;
+};
+export type createApplicationResponseError = createApplicationResponseDefault & {
+    headers: Headers;
+};
+export type createApplicationResponse = createApplicationResponseSuccess | createApplicationResponseError;
+export declare const getCreateApplicationUrl: () => string;
+/**
+ * Creates an OIDC client for an application of this project. Applications authenticate
+ * against `https://auth.leaflow.net/realms/user`.
+ *
+ * The `secret` is present only for a confidential application, and only in this response.
+ * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
+ *
+ * Any account of this platform may sign in to the application. Membership of this project
+ * is confirmed only when a token is exchanged for a scoped token.
+ * @summary Create an application
+ */
+export declare const createApplication: (createApplicationRequestBody: CreateApplicationRequestBody, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<createApplicationResponse>;
+export type getApplicationResponse200 = {
+    data: ApplicationResource;
+    status: 200;
+};
+export type getApplicationResponseDefault = {
+    data: Error;
+    status: Exclude<HTTPStatusCodes, 200>;
+};
+export type getApplicationResponseSuccess = getApplicationResponse200 & {
+    headers: Headers;
+};
+export type getApplicationResponseError = getApplicationResponseDefault & {
+    headers: Headers;
+};
+export type getApplicationResponse = getApplicationResponseSuccess | getApplicationResponseError;
+export declare const getGetApplicationUrl: (applicationId: string) => string;
+/**
+ * An application that has been deleted is still returned, with `status` `ARCHIVED`.
+ * @summary Get an application
+ */
+export declare const getApplication: (applicationId: string, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<getApplicationResponse>;
+export type updateApplicationResponse200 = {
+    data: ApplicationResource;
+    status: 200;
+};
+export type updateApplicationResponseDefault = {
+    data: Error;
+    status: Exclude<HTTPStatusCodes, 200>;
+};
+export type updateApplicationResponseSuccess = updateApplicationResponse200 & {
+    headers: Headers;
+};
+export type updateApplicationResponseError = updateApplicationResponseDefault & {
+    headers: Headers;
+};
+export type updateApplicationResponse = updateApplicationResponseSuccess | updateApplicationResponseError;
+export declare const getUpdateApplicationUrl: (applicationId: string) => string;
+/**
+ * Only the name and the redirect URIs can change. The type and `client_id` never change.
+ *
+ * An application that is disabled or deleted cannot be updated.
+ * @summary Update an application
+ */
+export declare const updateApplication: (applicationId: string, updateApplicationRequestBody: UpdateApplicationRequestBody, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<updateApplicationResponse>;
+export type deleteApplicationResponse200 = {
+    data: ApplicationResource;
+    status: 200;
+};
+export type deleteApplicationResponseDefault = {
+    data: Error;
+    status: Exclude<HTTPStatusCodes, 200>;
+};
+export type deleteApplicationResponseSuccess = deleteApplicationResponse200 & {
+    headers: Headers;
+};
+export type deleteApplicationResponseError = deleteApplicationResponseDefault & {
+    headers: Headers;
+};
+export type deleteApplicationResponse = deleteApplicationResponseSuccess | deleteApplicationResponseError;
+export declare const getDeleteApplicationUrl: (applicationId: string) => string;
+/**
+ * The application is removed from the identity provider and its row is retained with
+ * `status` `ARCHIVED`. Repeating the call returns the same resource.
+ * @summary Delete an application
+ */
+export declare const deleteApplication: (applicationId: string, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<deleteApplicationResponse>;
+export type rotateApplicationSecretResponse200 = {
+    data: RotateApplicationSecretResponseBody;
+    status: 200;
+};
+export type rotateApplicationSecretResponseDefault = {
+    data: Error;
+    status: Exclude<HTTPStatusCodes, 200>;
+};
+export type rotateApplicationSecretResponseSuccess = rotateApplicationSecretResponse200 & {
+    headers: Headers;
+};
+export type rotateApplicationSecretResponseError = rotateApplicationSecretResponseDefault & {
+    headers: Headers;
+};
+export type rotateApplicationSecretResponse = rotateApplicationSecretResponseSuccess | rotateApplicationSecretResponseError;
+export declare const getRotateApplicationSecretUrl: (applicationId: string) => string;
+/**
+ * Returns a new secret and invalidates the previous one immediately. Only an active
+ * confidential application has a secret; any other state answers 412.
+ * @summary Rotate the secret of an application
+ */
+export declare const rotateApplicationSecret: (applicationId: string, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<rotateApplicationSecretResponse>;

package/dist/iam/v1/generated/functions.js

@@ -758,3 +758,154 @@ export const revokeSshKey = async (keyId, options, fetchFn) => {
     const data = body ? JSON.parse(body) : {};
     return { data, status: res.status, headers: res.headers };
 };
+export const getListApplicationsUrl = (params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value !== undefined) {
+            normalizedParams.append(key, value === null ? "null" : String(value));
+        }
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0
+        ? `https://iam.leaflow.cloud/api/v1/applications?${stringifiedParams}`
+        : `https://iam.leaflow.cloud/api/v1/applications`;
+};
+/**
+ * Disabled applications are listed. Archived applications are omitted unless
+ * `include_archived` is true. An application that is still being created is not listed.
+ * @summary List the applications of this project
+ */
+export const listApplications = async (params, options, fetchFn) => {
+    const res = await (fetchFn ?? fetch)(getListApplicationsUrl(params), {
+        ...options,
+        method: "GET",
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getCreateApplicationUrl = () => {
+    return `https://iam.leaflow.cloud/api/v1/applications`;
+};
+/**
+ * Creates an OIDC client for an application of this project. Applications authenticate
+ * against `https://auth.leaflow.net/realms/user`.
+ *
+ * The `secret` is present only for a confidential application, and only in this response.
+ * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
+ *
+ * Any account of this platform may sign in to the application. Membership of this project
+ * is confirmed only when a token is exchanged for a scoped token.
+ * @summary Create an application
+ */
+export const createApplication = async (createApplicationRequestBody, options, fetchFn) => {
+    const getHeaders = (h) => {
+        if (!h)
+            return {};
+        if (h instanceof Headers)
+            return Object.fromEntries(h.entries());
+        if (Symbol.iterator in h) {
+            return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+        }
+        const headers = {};
+        for (const [name, value] of Object.entries(h)) {
+            if (value !== undefined)
+                headers[name] = value;
+        }
+        return headers;
+    };
+    const res = await (fetchFn ?? fetch)(getCreateApplicationUrl(), {
+        ...options,
+        method: "POST",
+        headers: { "Content-Type": "application/json", ...getHeaders(options?.headers) },
+        body: JSON.stringify(createApplicationRequestBody),
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getGetApplicationUrl = (applicationId) => {
+    return `https://iam.leaflow.cloud/api/v1/applications/${encodeURIComponent(String(applicationId))}`;
+};
+/**
+ * An application that has been deleted is still returned, with `status` `ARCHIVED`.
+ * @summary Get an application
+ */
+export const getApplication = async (applicationId, options, fetchFn) => {
+    const res = await (fetchFn ?? fetch)(getGetApplicationUrl(applicationId), {
+        ...options,
+        method: "GET",
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getUpdateApplicationUrl = (applicationId) => {
+    return `https://iam.leaflow.cloud/api/v1/applications/${encodeURIComponent(String(applicationId))}`;
+};
+/**
+ * Only the name and the redirect URIs can change. The type and `client_id` never change.
+ *
+ * An application that is disabled or deleted cannot be updated.
+ * @summary Update an application
+ */
+export const updateApplication = async (applicationId, updateApplicationRequestBody, options, fetchFn) => {
+    const getHeaders = (h) => {
+        if (!h)
+            return {};
+        if (h instanceof Headers)
+            return Object.fromEntries(h.entries());
+        if (Symbol.iterator in h) {
+            return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+        }
+        const headers = {};
+        for (const [name, value] of Object.entries(h)) {
+            if (value !== undefined)
+                headers[name] = value;
+        }
+        return headers;
+    };
+    const res = await (fetchFn ?? fetch)(getUpdateApplicationUrl(applicationId), {
+        ...options,
+        method: "PATCH",
+        headers: { "Content-Type": "application/json", ...getHeaders(options?.headers) },
+        body: JSON.stringify(updateApplicationRequestBody),
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getDeleteApplicationUrl = (applicationId) => {
+    return `https://iam.leaflow.cloud/api/v1/applications/${encodeURIComponent(String(applicationId))}`;
+};
+/**
+ * The application is removed from the identity provider and its row is retained with
+ * `status` `ARCHIVED`. Repeating the call returns the same resource.
+ * @summary Delete an application
+ */
+export const deleteApplication = async (applicationId, options, fetchFn) => {
+    const res = await (fetchFn ?? fetch)(getDeleteApplicationUrl(applicationId), {
+        ...options,
+        method: "DELETE",
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};
+export const getRotateApplicationSecretUrl = (applicationId) => {
+    return `https://iam.leaflow.cloud/api/v1/applications/${encodeURIComponent(String(applicationId))}:rotateSecret`;
+};
+/**
+ * Returns a new secret and invalidates the previous one immediately. Only an active
+ * confidential application has a secret; any other state answers 412.
+ * @summary Rotate the secret of an application
+ */
+export const rotateApplicationSecret = async (applicationId, options, fetchFn) => {
+    const res = await (fetchFn ?? fetch)(getRotateApplicationSecretUrl(applicationId), {
+        ...options,
+        method: "POST",
+    });
+    const body = [204, 205, 304].includes(res.status) ? null : await res.text();
+    const data = body ? JSON.parse(body) : {};
+    return { data, status: res.status, headers: res.headers };
+};

package/dist/iam/v1/generated/models.d.ts

@@ -545,6 +545,84 @@ export interface RenameSSHKeyRequestBody {
      */
     name: string;
 }
+export type ApplicationResourceType = (typeof ApplicationResourceType)[keyof typeof ApplicationResourceType];
+export declare const ApplicationResourceType: {
+    readonly PUBLIC: "PUBLIC";
+    readonly CONFIDENTIAL: "CONFIDENTIAL";
+};
+export type ApplicationResourceStatus = (typeof ApplicationResourceStatus)[keyof typeof ApplicationResourceStatus];
+export declare const ApplicationResourceStatus: {
+    readonly ACTIVE: "ACTIVE";
+    readonly DISABLED: "DISABLED";
+    readonly ARCHIVED: "ARCHIVED";
+};
+export interface ApplicationResource {
+    id: string;
+    name: string;
+    type: ApplicationResourceType;
+    client_id: string;
+    redirect_uris: string[];
+    status: ApplicationResourceStatus;
+    /** @nullable */
+    created_by: string | null;
+    created_at: string;
+    /** @nullable */
+    disabled_at: string | null;
+    /** @nullable */
+    secret_rotated_at: string | null;
+}
+export type CreateApplicationRequestBodyType = (typeof CreateApplicationRequestBodyType)[keyof typeof CreateApplicationRequestBodyType];
+export declare const CreateApplicationRequestBodyType: {
+    readonly PUBLIC: "PUBLIC";
+    readonly CONFIDENTIAL: "CONFIDENTIAL";
+};
+export interface CreateApplicationRequestBody {
+    /**
+     * @minLength 1
+     * @maxLength 128
+     */
+    name: string;
+    type: CreateApplicationRequestBodyType;
+    /**
+     * @minItems 1
+     * @maxItems 10
+     * @items.minLength 1
+     * @items.maxLength 2048
+     */
+    redirect_uris: string[];
+}
+export interface CreateApplicationResponseBody {
+    application: ApplicationResource;
+    /**
+     * Present only for a confidential application, and only in this response
+     * @nullable
+     */
+    secret: string | null;
+}
+export interface UpdateApplicationRequestBody {
+    /**
+     * @minLength 1
+     * @maxLength 128
+     */
+    name?: string;
+    /**
+     * @minItems 1
+     * @maxItems 10
+     * @items.minLength 1
+     * @items.maxLength 2048
+     */
+    redirect_uris?: string[];
+}
+export interface RotateApplicationSecretResponseBody {
+    secret: string;
+    rotated_at: string;
+}
+export interface LengthAwarePageApplicationResource {
+    items: ApplicationResource[];
+    limit: number;
+    offset: number;
+    total: number;
+}
 /**
  * Pagination metadata for stable numbered pages. total_count is returned only when the operation can determine it without an unbounded scan.
  */
@@ -633,3 +711,21 @@ export declare const ListSshKeysStatus: {
     readonly ACTIVE: "ACTIVE";
     readonly REVOKED: "REVOKED";
 };
+export type ListApplicationsParams = {
+    /**
+     * Items returned in this page. Defaults to 50; at most 200.
+     * @minimum 1
+     * @maximum 200
+     */
+    limit?: number;
+    /**
+     * Items to skip. Defaults to 0; at most 10000.
+     * @minimum 0
+     * @maximum 10000
+     */
+    offset?: number;
+    /**
+     * Include applications that have been deleted
+     */
+    include_archived?: boolean;
+};

package/dist/iam/v1/generated/models.js

@@ -31,6 +31,19 @@ export const CreateSSHKeyRequestBodyOwner = {
     me: "me",
     project: "project",
 };
+export const ApplicationResourceType = {
+    PUBLIC: "PUBLIC",
+    CONFIDENTIAL: "CONFIDENTIAL",
+};
+export const ApplicationResourceStatus = {
+    ACTIVE: "ACTIVE",
+    DISABLED: "DISABLED",
+    ARCHIVED: "ARCHIVED",
+};
+export const CreateApplicationRequestBodyType = {
+    PUBLIC: "PUBLIC",
+    CONFIDENTIAL: "CONFIDENTIAL",
+};
 export const ListSshKeysStatus = {
     ACTIVE: "ACTIVE",
     REVOKED: "REVOKED",

package/dist/iam/v1/generated/schemas.zod.d.ts

@@ -278,3 +278,74 @@ export declare const RenameSshKeyBody: zod.ZodObject<{
 export declare const RevokeSshKeyParams: zod.ZodObject<{
     keyId: zod.ZodUUID;
 }, zod.z.core.$strict>;
+/**
+ * Disabled applications are listed. Archived applications are omitted unless
+ * `include_archived` is true. An application that is still being created is not listed.
+ * @summary List the applications of this project
+ */
+export declare const listApplicationsQueryLimitDefault = 50;
+export declare const listApplicationsQueryLimitMax = 200;
+export declare const listApplicationsQueryOffsetDefault = 0;
+export declare const listApplicationsQueryOffsetMin = 0;
+export declare const listApplicationsQueryOffsetMax = 10000;
+export declare const listApplicationsQueryIncludeArchivedDefault = false;
+export declare const ListApplicationsQueryParams: zod.ZodObject<{
+    limit: zod.ZodDefault<zod.ZodInt>;
+    offset: zod.ZodDefault<zod.ZodInt>;
+    include_archived: zod.ZodDefault<zod.ZodBoolean>;
+}, zod.z.core.$strict>;
+/**
+ * Creates an OIDC client for an application of this project. Applications authenticate
+ * against `https://auth.leaflow.net/realms/user`.
+ *
+ * The `secret` is present only for a confidential application, and only in this response.
+ * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
+ *
+ * Any account of this platform may sign in to the application. Membership of this project
+ * is confirmed only when a token is exchanged for a scoped token.
+ * @summary Create an application
+ */
+export declare const CreateApplicationBody: zod.ZodObject<{
+    name: zod.ZodString;
+    type: zod.ZodEnum<{
+        PUBLIC: "PUBLIC";
+        CONFIDENTIAL: "CONFIDENTIAL";
+    }>;
+    redirect_uris: zod.ZodArray<zod.ZodString>;
+}, zod.z.core.$strict>;
+/**
+ * An application that has been deleted is still returned, with `status` `ARCHIVED`.
+ * @summary Get an application
+ */
+export declare const GetApplicationParams: zod.ZodObject<{
+    applicationId: zod.ZodUUID;
+}, zod.z.core.$strict>;
+/**
+ * Only the name and the redirect URIs can change. The type and `client_id` never change.
+ *
+ * An application that is disabled or deleted cannot be updated.
+ * @summary Update an application
+ */
+export declare const UpdateApplicationParams: zod.ZodObject<{
+    applicationId: zod.ZodUUID;
+}, zod.z.core.$strict>;
+export declare const UpdateApplicationBody: zod.ZodObject<{
+    name: zod.ZodOptional<zod.ZodString>;
+    redirect_uris: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+}, zod.z.core.$strict>;
+/**
+ * The application is removed from the identity provider and its row is retained with
+ * `status` `ARCHIVED`. Repeating the call returns the same resource.
+ * @summary Delete an application
+ */
+export declare const DeleteApplicationParams: zod.ZodObject<{
+    applicationId: zod.ZodUUID;
+}, zod.z.core.$strict>;
+/**
+ * Returns a new secret and invalidates the previous one immediately. Only an active
+ * confidential application has a secret; any other state answers 412.
+ * @summary Rotate the secret of an application
+ */
+export declare const RotateApplicationSecretParams: zod.ZodObject<{
+    applicationId: zod.ZodUUID;
+}, zod.z.core.$strict>;

package/dist/iam/v1/generated/schemas.zod.js

@@ -15,6 +15,7 @@
 import * as zod from "zod";
 import { AttachPolicyRequestBody } from "./validators/attachPolicyRequestBody.zod.js";
 import { BatchGetMembersRequestBody } from "./validators/batchGetMembersRequestBody.zod.js";
+import { CreateApplicationRequestBody } from "./validators/createApplicationRequestBody.zod.js";
 import { CreateRoleRequestBody } from "./validators/createRoleRequestBody.zod.js";
 import { CreateSSHKeyRequestBody } from "./validators/createSSHKeyRequestBody.zod.js";
 import { IssueInvitationRequestBody } from "./validators/issueInvitationRequestBody.zod.js";
@@ -23,6 +24,7 @@ import { SetMemberPermissionsRequestBody } from "./validators/setMemberPermissio
 import { SetMemberRolesRequestBody } from "./validators/setMemberRolesRequestBody.zod.js";
 import { SetProjectSlugRequestBody } from "./validators/setProjectSlugRequestBody.zod.js";
 import { TransferOwnershipRequestBody } from "./validators/transferOwnershipRequestBody.zod.js";
+import { UpdateApplicationRequestBody } from "./validators/updateApplicationRequestBody.zod.js";
 import { UpdatePolicyRequestBody } from "./validators/updatePolicyRequestBody.zod.js";
 import { UpdateProjectRequestBody } from "./validators/updateProjectRequestBody.zod.js";
 import { UpdateRoleRequestBody } from "./validators/updateRoleRequestBody.zod.js";
@@ -273,3 +275,77 @@ export const RenameSshKeyBody = RenameSSHKeyRequestBody;
 export const RevokeSshKeyParams = zod.strictObject({
     keyId: zod.uuid(),
 });
+/**
+ * Disabled applications are listed. Archived applications are omitted unless
+ * `include_archived` is true. An application that is still being created is not listed.
+ * @summary List the applications of this project
+ */
+export const listApplicationsQueryLimitDefault = 50;
+export const listApplicationsQueryLimitMax = 200;
+export const listApplicationsQueryOffsetDefault = 0;
+export const listApplicationsQueryOffsetMin = 0;
+export const listApplicationsQueryOffsetMax = 10000;
+export const listApplicationsQueryIncludeArchivedDefault = false;
+export const ListApplicationsQueryParams = zod.strictObject({
+    limit: zod
+        .int()
+        .min(1)
+        .max(listApplicationsQueryLimitMax)
+        .default(listApplicationsQueryLimitDefault)
+        .describe("Items returned in this page. Defaults to 50; at most 200."),
+    offset: zod
+        .int()
+        .min(listApplicationsQueryOffsetMin)
+        .max(listApplicationsQueryOffsetMax)
+        .default(listApplicationsQueryOffsetDefault)
+        .describe("Items to skip. Defaults to 0; at most 10000."),
+    include_archived: zod
+        .boolean()
+        .default(listApplicationsQueryIncludeArchivedDefault)
+        .describe("Include applications that have been deleted"),
+});
+/**
+ * Creates an OIDC client for an application of this project. Applications authenticate
+ * against `https://auth.leaflow.net/realms/user`.
+ *
+ * The `secret` is present only for a confidential application, and only in this response.
+ * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
+ *
+ * Any account of this platform may sign in to the application. Membership of this project
+ * is confirmed only when a token is exchanged for a scoped token.
+ * @summary Create an application
+ */
+export const CreateApplicationBody = CreateApplicationRequestBody;
+/**
+ * An application that has been deleted is still returned, with `status` `ARCHIVED`.
+ * @summary Get an application
+ */
+export const GetApplicationParams = zod.strictObject({
+    applicationId: zod.uuid(),
+});
+/**
+ * Only the name and the redirect URIs can change. The type and `client_id` never change.
+ *
+ * An application that is disabled or deleted cannot be updated.
+ * @summary Update an application
+ */
+export const UpdateApplicationParams = zod.strictObject({
+    applicationId: zod.uuid(),
+});
+export const UpdateApplicationBody = UpdateApplicationRequestBody;
+/**
+ * The application is removed from the identity provider and its row is retained with
+ * `status` `ARCHIVED`. Repeating the call returns the same resource.
+ * @summary Delete an application
+ */
+export const DeleteApplicationParams = zod.strictObject({
+    applicationId: zod.uuid(),
+});
+/**
+ * Returns a new secret and invalidates the previous one immediately. Only an active
+ * confidential application has a secret; any other state answers 412.
+ * @summary Rotate the secret of an application
+ */
+export const RotateApplicationSecretParams = zod.strictObject({
+    applicationId: zod.uuid(),
+});

package/dist/iam/v1/generated/validators/applicationResource.zod.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const ApplicationResource: zod.ZodObject<{
+    id: zod.ZodUUID;
+    name: zod.ZodString;
+    type: zod.ZodEnum<{
+        PUBLIC: "PUBLIC";
+        CONFIDENTIAL: "CONFIDENTIAL";
+    }>;
+    client_id: zod.ZodString;
+    redirect_uris: zod.ZodArray<zod.ZodString>;
+    status: zod.ZodEnum<{
+        ACTIVE: "ACTIVE";
+        DISABLED: "DISABLED";
+        ARCHIVED: "ARCHIVED";
+    }>;
+    created_by: zod.ZodNullable<zod.ZodString>;
+    created_at: zod.z.ZodISODateTime;
+    disabled_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+    secret_rotated_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+}, zod.z.core.$strict>;
+export type ApplicationResource = zod.input<typeof ApplicationResource>;
+export type ApplicationResourceOutput = zod.output<typeof ApplicationResource>;

package/dist/iam/v1/generated/validators/applicationResource.zod.js

@@ -0,0 +1,27 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const ApplicationResource = zod.strictObject({
+    id: zod.uuid(),
+    name: zod.string(),
+    type: zod.enum(["PUBLIC", "CONFIDENTIAL"]),
+    client_id: zod.string(),
+    redirect_uris: zod.array(zod.string()),
+    status: zod.enum(["ACTIVE", "DISABLED", "ARCHIVED"]),
+    created_by: zod.string().nullable(),
+    created_at: zod.iso.datetime({ offset: true }),
+    disabled_at: zod.iso.datetime({ offset: true }).nullable(),
+    secret_rotated_at: zod.iso.datetime({ offset: true }).nullable(),
+});

package/dist/iam/v1/generated/validators/createApplicationRequestBody.zod.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const createApplicationRequestBodyNameMax = 128;
+export declare const createApplicationRequestBodyRedirectUrisItemMax = 2048;
+export declare const createApplicationRequestBodyRedirectUrisMax = 10;
+export declare const CreateApplicationRequestBody: zod.ZodObject<{
+    name: zod.ZodString;
+    type: zod.ZodEnum<{
+        PUBLIC: "PUBLIC";
+        CONFIDENTIAL: "CONFIDENTIAL";
+    }>;
+    redirect_uris: zod.ZodArray<zod.ZodString>;
+}, zod.z.core.$strict>;
+export type CreateApplicationRequestBody = zod.input<typeof CreateApplicationRequestBody>;
+export type CreateApplicationRequestBodyOutput = zod.output<typeof CreateApplicationRequestBody>;

package/dist/iam/v1/generated/validators/createApplicationRequestBody.zod.js

@@ -0,0 +1,26 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const createApplicationRequestBodyNameMax = 128;
+export const createApplicationRequestBodyRedirectUrisItemMax = 2048;
+export const createApplicationRequestBodyRedirectUrisMax = 10;
+export const CreateApplicationRequestBody = zod.strictObject({
+    name: zod.string().min(1).max(createApplicationRequestBodyNameMax),
+    type: zod.enum(["PUBLIC", "CONFIDENTIAL"]),
+    redirect_uris: zod
+        .array(zod.string().min(1).max(createApplicationRequestBodyRedirectUrisItemMax))
+        .min(1)
+        .max(createApplicationRequestBodyRedirectUrisMax),
+});

package/dist/iam/v1/generated/validators/createApplicationResponseBody.zod.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const CreateApplicationResponseBody: zod.ZodObject<{
+    application: zod.ZodObject<{
+        id: zod.ZodUUID;
+        name: zod.ZodString;
+        type: zod.ZodEnum<{
+            PUBLIC: "PUBLIC";
+            CONFIDENTIAL: "CONFIDENTIAL";
+        }>;
+        client_id: zod.ZodString;
+        redirect_uris: zod.ZodArray<zod.ZodString>;
+        status: zod.ZodEnum<{
+            ACTIVE: "ACTIVE";
+            DISABLED: "DISABLED";
+            ARCHIVED: "ARCHIVED";
+        }>;
+        created_by: zod.ZodNullable<zod.ZodString>;
+        created_at: zod.z.ZodISODateTime;
+        disabled_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+        secret_rotated_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+    }, zod.z.core.$strict>;
+    secret: zod.ZodNullable<zod.ZodString>;
+}, zod.z.core.$strict>;
+export type CreateApplicationResponseBody = zod.input<typeof CreateApplicationResponseBody>;
+export type CreateApplicationResponseBodyOutput = zod.output<typeof CreateApplicationResponseBody>;

package/dist/iam/v1/generated/validators/createApplicationResponseBody.zod.js

@@ -0,0 +1,23 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+import { ApplicationResource } from "./applicationResource.zod.js";
+export const CreateApplicationResponseBody = zod.strictObject({
+    application: ApplicationResource,
+    secret: zod
+        .string()
+        .nullable()
+        .describe("Present only for a confidential application, and only in this response"),
+});

package/dist/iam/v1/generated/validators/lengthAwarePageApplicationResource.zod.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const LengthAwarePageApplicationResource: zod.ZodObject<{
+    items: zod.ZodArray<zod.ZodObject<{
+        id: zod.ZodUUID;
+        name: zod.ZodString;
+        type: zod.ZodEnum<{
+            PUBLIC: "PUBLIC";
+            CONFIDENTIAL: "CONFIDENTIAL";
+        }>;
+        client_id: zod.ZodString;
+        redirect_uris: zod.ZodArray<zod.ZodString>;
+        status: zod.ZodEnum<{
+            ACTIVE: "ACTIVE";
+            DISABLED: "DISABLED";
+            ARCHIVED: "ARCHIVED";
+        }>;
+        created_by: zod.ZodNullable<zod.ZodString>;
+        created_at: zod.z.ZodISODateTime;
+        disabled_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+        secret_rotated_at: zod.ZodNullable<zod.z.ZodISODateTime>;
+    }, zod.z.core.$strict>>;
+    limit: zod.ZodInt;
+    offset: zod.ZodInt;
+    total: zod.ZodInt;
+}, zod.z.core.$strict>;
+export type LengthAwarePageApplicationResource = zod.input<typeof LengthAwarePageApplicationResource>;
+export type LengthAwarePageApplicationResourceOutput = zod.output<typeof LengthAwarePageApplicationResource>;

package/dist/iam/v1/generated/validators/lengthAwarePageApplicationResource.zod.js

@@ -0,0 +1,22 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+import { ApplicationResource } from "./applicationResource.zod.js";
+export const LengthAwarePageApplicationResource = zod.strictObject({
+    items: zod.array(ApplicationResource),
+    limit: zod.int(),
+    offset: zod.int(),
+    total: zod.int(),
+});

package/dist/iam/v1/generated/validators/listApplicationsParams.zod.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const listApplicationsParamsLimitDefault = 50;
+export declare const listApplicationsParamsLimitMax = 200;
+export declare const listApplicationsParamsOffsetDefault = 0;
+export declare const listApplicationsParamsOffsetMin = 0;
+export declare const listApplicationsParamsOffsetMax = 10000;
+export declare const listApplicationsParamsIncludeArchivedDefault = false;
+export declare const ListApplicationsParams: zod.ZodObject<{
+    limit: zod.ZodDefault<zod.ZodInt>;
+    offset: zod.ZodDefault<zod.ZodInt>;
+    include_archived: zod.ZodDefault<zod.ZodBoolean>;
+}, zod.z.core.$strict>;
+export type ListApplicationsParams = zod.input<typeof ListApplicationsParams>;
+export type ListApplicationsParamsOutput = zod.output<typeof ListApplicationsParams>;

package/dist/iam/v1/generated/validators/listApplicationsParams.zod.js

@@ -0,0 +1,34 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const listApplicationsParamsLimitDefault = 50;
+export const listApplicationsParamsLimitMax = 200;
+export const listApplicationsParamsOffsetDefault = 0;
+export const listApplicationsParamsOffsetMin = 0;
+export const listApplicationsParamsOffsetMax = 10000;
+export const listApplicationsParamsIncludeArchivedDefault = false;
+export const ListApplicationsParams = zod.strictObject({
+    limit: zod
+        .int()
+        .min(1)
+        .max(listApplicationsParamsLimitMax)
+        .default(listApplicationsParamsLimitDefault),
+    offset: zod
+        .int()
+        .min(listApplicationsParamsOffsetMin)
+        .max(listApplicationsParamsOffsetMax)
+        .default(listApplicationsParamsOffsetDefault),
+    include_archived: zod.boolean().default(listApplicationsParamsIncludeArchivedDefault),
+});

package/dist/iam/v1/generated/validators/rotateApplicationSecretResponseBody.zod.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const RotateApplicationSecretResponseBody: zod.ZodObject<{
+    secret: zod.ZodString;
+    rotated_at: zod.z.ZodISODateTime;
+}, zod.z.core.$strict>;
+export type RotateApplicationSecretResponseBody = zod.input<typeof RotateApplicationSecretResponseBody>;
+export type RotateApplicationSecretResponseBodyOutput = zod.output<typeof RotateApplicationSecretResponseBody>;

package/dist/iam/v1/generated/validators/rotateApplicationSecretResponseBody.zod.js

@@ -0,0 +1,19 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const RotateApplicationSecretResponseBody = zod.strictObject({
+    secret: zod.string(),
+    rotated_at: zod.iso.datetime({ offset: true }),
+});

package/dist/iam/v1/generated/validators/updateApplicationRequestBody.zod.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export declare const updateApplicationRequestBodyNameMax = 128;
+export declare const updateApplicationRequestBodyRedirectUrisItemMax = 2048;
+export declare const updateApplicationRequestBodyRedirectUrisMax = 10;
+export declare const UpdateApplicationRequestBody: zod.ZodObject<{
+    name: zod.ZodOptional<zod.ZodString>;
+    redirect_uris: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
+}, zod.z.core.$strict>;
+export type UpdateApplicationRequestBody = zod.input<typeof UpdateApplicationRequestBody>;
+export type UpdateApplicationRequestBodyOutput = zod.output<typeof UpdateApplicationRequestBody>;

package/dist/iam/v1/generated/validators/updateApplicationRequestBody.zod.js

@@ -0,0 +1,26 @@
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Leaflow IAM API
+ * What happens inside a project: members, roles, invitations and SSH keys.
+ *
+ * Every request carries a scoped token; see the `bearerAuth` security scheme. No path carries a
+ * `projectId`, and the current project is the one the token states. Tokens are obtained from the
+ * account API.
+ *
+ * `GET /api/v1/membership` returns the roles and permissions the caller holds in the current
+ * project. It does not state whether a given operation is allowed; each service declares which permission its own operations require.
+ * OpenAPI spec version: 1.0.0
+ */
+import * as zod from "zod";
+export const updateApplicationRequestBodyNameMax = 128;
+export const updateApplicationRequestBodyRedirectUrisItemMax = 2048;
+export const updateApplicationRequestBodyRedirectUrisMax = 10;
+export const UpdateApplicationRequestBody = zod.strictObject({
+    name: zod.string().min(1).max(updateApplicationRequestBodyNameMax).optional(),
+    redirect_uris: zod
+        .array(zod.string().min(1).max(updateApplicationRequestBodyRedirectUrisItemMax))
+        .min(1)
+        .max(updateApplicationRequestBodyRedirectUrisMax)
+        .optional(),
+});

package/dist/monitoring/v1/generated/schemas.zod.d.ts

@@ -266,8 +266,8 @@ export declare const ListServersQueryParams: zod.ZodObject<{
     monitoring_status: zod.ZodOptional<zod.ZodEnum<{
         ACTIVE: "ACTIVE";
         PENDING: "PENDING";
-        FAILED: "FAILED";
         DISABLED: "DISABLED";
+        FAILED: "FAILED";
     }>>;
 }, zod.z.core.$strict>;
 /**

package/dist/monitoring/v1/generated/validators/lengthAwarePageServerResource.zod.d.ts

@@ -38,8 +38,8 @@ export declare const LengthAwarePageServerResource: zod.ZodObject<{
         monitoring_status: zod.ZodEnum<{
             ACTIVE: "ACTIVE";
             PENDING: "PENDING";
-            FAILED: "FAILED";
             DISABLED: "DISABLED";
+            FAILED: "FAILED";
         }>;
         name: zod.ZodString;
         project_id: zod.ZodUUID;

package/dist/monitoring/v1/generated/validators/listServersParams.zod.d.ts

@@ -32,8 +32,8 @@ export declare const ListServersParams: zod.ZodObject<{
     monitoring_status: zod.ZodOptional<zod.ZodEnum<{
         ACTIVE: "ACTIVE";
         PENDING: "PENDING";
-        FAILED: "FAILED";
         DISABLED: "DISABLED";
+        FAILED: "FAILED";
     }>>;
 }, zod.z.core.$strict>;
 export type ListServersParams = zod.input<typeof ListServersParams>;

package/dist/monitoring/v1/generated/validators/serverEnrollmentResponseBody.zod.d.ts

@@ -46,8 +46,8 @@ export declare const ServerEnrollmentResponseBody: zod.ZodObject<{
         monitoring_status: zod.ZodEnum<{
             ACTIVE: "ACTIVE";
             PENDING: "PENDING";
-            FAILED: "FAILED";
             DISABLED: "DISABLED";
+            FAILED: "FAILED";
         }>;
         name: zod.ZodString;
         project_id: zod.ZodUUID;

package/dist/monitoring/v1/generated/validators/serverResource.zod.d.ts

@@ -37,8 +37,8 @@ export declare const ServerResource: zod.ZodObject<{
     monitoring_status: zod.ZodEnum<{
         ACTIVE: "ACTIVE";
         PENDING: "PENDING";
-        FAILED: "FAILED";
         DISABLED: "DISABLED";
+        FAILED: "FAILED";
     }>;
     name: zod.ZodString;
     project_id: zod.ZodUUID;

package/dist/routes.d.ts

@@ -3069,6 +3069,54 @@ export declare const routes: readonly [{
     readonly operationId: "revoke-ssh-key";
     readonly securityScheme: "ScopedToken";
     readonly upstreamUrl: "https://iam.leaflow.cloud";
+}, {
+    readonly service: "iam";
+    readonly contract: "iam";
+    readonly method: "GET";
+    readonly path: "/api/v1/applications";
+    readonly operationId: "list-applications";
+    readonly securityScheme: "ScopedToken";
+    readonly upstreamUrl: "https://iam.leaflow.cloud";
+}, {
+    readonly service: "iam";
+    readonly contract: "iam";
+    readonly method: "POST";
+    readonly path: "/api/v1/applications";
+    readonly operationId: "create-application";
+    readonly securityScheme: "ScopedToken";
+    readonly upstreamUrl: "https://iam.leaflow.cloud";
+}, {
+    readonly service: "iam";
+    readonly contract: "iam";
+    readonly method: "GET";
+    readonly path: "/api/v1/applications/{applicationId}";
+    readonly operationId: "get-application";
+    readonly securityScheme: "ScopedToken";
+    readonly upstreamUrl: "https://iam.leaflow.cloud";
+}, {
+    readonly service: "iam";
+    readonly contract: "iam";
+    readonly method: "PATCH";
+    readonly path: "/api/v1/applications/{applicationId}";
+    readonly operationId: "update-application";
+    readonly securityScheme: "ScopedToken";
+    readonly upstreamUrl: "https://iam.leaflow.cloud";
+}, {
+    readonly service: "iam";
+    readonly contract: "iam";
+    readonly method: "DELETE";
+    readonly path: "/api/v1/applications/{applicationId}";
+    readonly operationId: "delete-application";
+    readonly securityScheme: "ScopedToken";
+    readonly upstreamUrl: "https://iam.leaflow.cloud";
+}, {
+    readonly service: "iam";
+    readonly contract: "iam";
+    readonly method: "POST";
+    readonly path: "/api/v1/applications/{applicationId}:rotateSecret";
+    readonly operationId: "rotate-application-secret";
+    readonly securityScheme: "ScopedToken";
+    readonly upstreamUrl: "https://iam.leaflow.cloud";
 }, {
     readonly service: "membership";
     readonly contract: "membership";

package/dist/routes.js

@@ -3453,6 +3453,60 @@ export const routes = [
         securityScheme: "ScopedToken",
         upstreamUrl: "https://iam.leaflow.cloud",
     },
+    {
+        service: "iam",
+        contract: "iam",
+        method: "GET",
+        path: "/api/v1/applications",
+        operationId: "list-applications",
+        securityScheme: "ScopedToken",
+        upstreamUrl: "https://iam.leaflow.cloud",
+    },
+    {
+        service: "iam",
+        contract: "iam",
+        method: "POST",
+        path: "/api/v1/applications",
+        operationId: "create-application",
+        securityScheme: "ScopedToken",
+        upstreamUrl: "https://iam.leaflow.cloud",
+    },
+    {
+        service: "iam",
+        contract: "iam",
+        method: "GET",
+        path: "/api/v1/applications/{applicationId}",
+        operationId: "get-application",
+        securityScheme: "ScopedToken",
+        upstreamUrl: "https://iam.leaflow.cloud",
+    },
+    {
+        service: "iam",
+        contract: "iam",
+        method: "PATCH",
+        path: "/api/v1/applications/{applicationId}",
+        operationId: "update-application",
+        securityScheme: "ScopedToken",
+        upstreamUrl: "https://iam.leaflow.cloud",
+    },
+    {
+        service: "iam",
+        contract: "iam",
+        method: "DELETE",
+        path: "/api/v1/applications/{applicationId}",
+        operationId: "delete-application",
+        securityScheme: "ScopedToken",
+        upstreamUrl: "https://iam.leaflow.cloud",
+    },
+    {
+        service: "iam",
+        contract: "iam",
+        method: "POST",
+        path: "/api/v1/applications/{applicationId}:rotateSecret",
+        operationId: "rotate-application-secret",
+        securityScheme: "ScopedToken",
+        upstreamUrl: "https://iam.leaflow.cloud",
+    },
     {
         service: "membership",
         contract: "membership",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leaflow/sdk",
-  "version": "0.0.0-dev.433.g7e48b8f",
+  "version": "0.0.0-dev.435.ge640f61",
   "description": "Leaflow 平台 API 的 TypeScript SDK",
   "license": "MIT",
   "repository": {