@leaflow/sdk 0.207.0 → 0.208.0

package/dist/compute/v2/generated/models.d.ts

@@ -1105,6 +1105,15 @@ export interface Instance {
     launch_template_version_number: number | null;
     /** The most recent operation started on the instance; null when none has been recorded. */
     latest_operation: LatestOperation | null;
+    /** Whether the instance is configured to join Leaflow Fleet. The value is set at creation and retained across rebuilds unless a rebuild specifies a new value. */
+    join_fleet: boolean;
+    /** Whether the operating system with which the instance was created or last rebuilt supports Leaflow Fleet. The value reflects that specific image build; other builds of the same operating system may differ. */
+    supports_fleet: boolean;
+    /**
+     * The identifier of the Leaflow Fleet machine reserved for this instance. The instance enrolls as this machine on its first boot after creation or a rebuild, and its enrollment status is available from Fleet. Null if the instance is not configured to join Fleet, if its operating system does not support Fleet, or if Fleet was unavailable when the instance was created or last rebuilt.
+     * @nullable
+     */
+    fleet_machine_id: string | null;
 }
 /**
  * The instance as it is when the deletion is accepted, and the Billing cancellation that releases it when subscriptions pay for it.
@@ -1326,6 +1335,12 @@ export interface CreateInstanceRequestBody {
      * @maxLength 4096
      */
     description?: string;
+    /**
+     * Whether each instance joins Leaflow Fleet. An instance that joins enrolls automatically on its first boot, without a pairing code, and project members can then access it through Fleet using their own accounts. If omitted, the value from the launch template is used; if the template does not specify one, each instance joins when its image supports Fleet (`supports_fleet`).
+     *
+     * Setting the value to `true` for an image that does not support Fleet, or when booting from an existing volume, is rejected with 422 `INSTANCE_FLEET_UNSUPPORTED` before an order is placed. If Fleet is unavailable when an instance is created, the instance is still created and its `fleet_machine_id` is null.
+     */
+    join_fleet?: boolean;
     checkout?: CheckoutOptions;
 }
 /**
@@ -1402,6 +1417,8 @@ export interface ResetInstancePasswordResponseBody {
 export interface RebuildInstanceRequestBody {
     image_id: ImageID;
     password?: PasswordChoice;
+    /** Whether the rebuilt instance joins Leaflow Fleet. If omitted, the instance's current value is retained. Because a rebuild replaces the operating system, the instance enrolls as a new Fleet machine and the previous machine is removed from Fleet. Setting the value to `true` for an image that does not support Fleet is rejected with 422 `INSTANCE_FLEET_UNSUPPORTED`. */
+    join_fleet?: boolean;
 }
 export interface RebuildInstanceResponseBody {
     instance: Instance;
@@ -1453,14 +1470,6 @@ export interface CreateInstanceResponseBody {
      */
     password: string | null;
 }
-export interface RescueInstanceRequestBody {
-    /**
-     * Password for the rescue environment. Generate and retain a strong password before calling.
-     * @minLength 12
-     * @maxLength 128
-     */
-    password: string;
-}
 export interface RescueInstanceResponseBody {
     /** Login account in the temporary rescue environment. */
     login_username: string;
@@ -1556,6 +1565,8 @@ export interface NewLaunchTemplateVersion {
     labels?: NewLaunchTemplateVersionLabels;
     /** @maxLength 4096 */
     description?: string;
+    /** Whether instances created from this version join Leaflow Fleet, as described for `join_fleet` on instance creation. If omitted, instances join when their image supports Fleet. */
+    join_fleet?: boolean;
 }
 export interface CreateLaunchTemplateRequestBody {
     region_id: RegionID;
@@ -1594,6 +1605,11 @@ export interface LaunchTemplateVersion {
      * @nullable
      */
     description: string | null;
+    /**
+     * Null if the version does not specify a value, in which case the image determines it.
+     * @nullable
+     */
+    join_fleet: boolean | null;
     created_at: string;
 }
 export interface CreateLaunchTemplateResponseBody {
@@ -1876,6 +1892,8 @@ export interface PrivateImageResource {
     min_memory_mib: number;
     /** False means a new password can only be set by rebuilding an instance created from this image */
     supports_password_reset: boolean;
+    /** Whether instances created from this image can join Leaflow Fleet (`join_fleet`). The value is true when the operating system captured from the source instance supports Fleet */
+    supports_fleet: boolean;
     /** Only available images can install instances. A capture is pending until it finishes, then becomes available. Failed means no usable image was produced; failure describes the outcome. Error means the image service broke the image or no longer holds it, and nothing can be installed from it. A value naming an operation in progress (`suspending`, `resuming`, `deleting`) is shown while that operation runs. */
     status: PrivateImageResourceStatus;
     /**
@@ -1995,6 +2013,8 @@ export interface PublicImageResource {
     min_memory_mib: number;
     /** False means a new password can only be set by rebuilding an instance created from this image */
     supports_password_reset: boolean;
+    /** Whether instances created from this image can join Leaflow Fleet (`join_fleet`). The value applies to this specific image build; other builds of the same operating system may differ */
+    supports_fleet: boolean;
     /** `on_sale` images can install new instances. `off_sale` means the platform withdrew the image: it stops new purchases only, and instances already running it keep running and can still be rebuilt onto it. */
     sale_status: PublicImageResourceSaleStatus;
     created_at: string;

package/dist/compute/v2/generated/schemas.zod.d.ts

@@ -514,6 +514,7 @@ export declare const CreateInstanceBody: zod.ZodObject<{
     }, zod.z.core.$strict>], "type">>;
     labels: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
     description: zod.ZodOptional<zod.ZodString>;
+    join_fleet: zod.ZodOptional<zod.ZodBoolean>;
     checkout: zod.ZodOptional<zod.ZodObject<{
         mode: zod.ZodDefault<zod.ZodEnum<{
             automatic: "automatic";
@@ -731,6 +732,7 @@ export declare const RebuildInstanceBody: zod.ZodObject<{
         }>;
         value: zod.ZodString;
     }, zod.z.core.$strict>], "type">>;
+    join_fleet: zod.ZodOptional<zod.ZodBoolean>;
 }, zod.z.core.$strict>;
 /**
  * @summary List the volumes attached to an instance
@@ -831,6 +833,8 @@ export declare const DetachInstanceNetworkInterfaceParams: zod.ZodObject<{
  *
  * In rescue mode, everything only the instance's own system can take is refused with 409 `INSTANCE_UNRESCUE_REQUIRED`: starting, stopping, rebooting, rebuilding, resetting the password, changing `instance_type_id`, attaching or detaching volumes and network interfaces, capturing a private image and running commands. Leave rescue mode with `:unrescue` first. The console stays available, releasing the instance works as usual, and the instance is charged as when running. A suspension that begins in rescue mode takes the instance out of rescue before stopping it, and starting it again once the suspension ends boots its own system.
  *
+ * The rescue environment does not accept passwords. The remote console signs in as `login_username` automatically, and SSH accepts `login_username` with the public keys the instance was created or last rebuilt with.
+ *
  * A rescue the compute service could not boot leaves the instance as it was, or in `error`; request it again or reboot the instance.
  *
  * The request does not name an image. The rescue image is the region's enabled rescue image for the architecture of the instance's boot volume. A region and architecture with no enabled rescue image is refused with `RESCUE_IMAGE_NOT_CONFIGURED` (409).
@@ -842,9 +846,6 @@ export declare const rescueInstancePathInstanceIdRegExp: RegExp;
 export declare const RescueInstanceParams: zod.ZodObject<{
     instanceId: zod.ZodString;
 }, zod.z.core.$strict>;
-export declare const RescueInstanceBody: zod.ZodObject<{
-    password: zod.ZodString;
-}, zod.z.core.$strict>;
 /**
  * Restores boot from the original boot volume. Completion is shown by the instance state, and the instance is `unrescuing` until then.
  * @summary Take an instance out of rescue mode
@@ -916,6 +917,7 @@ export declare const CreateLaunchTemplateBody: zod.ZodObject<{
         }, zod.z.core.$strict>>;
         labels: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
         description: zod.ZodOptional<zod.ZodString>;
+        join_fleet: zod.ZodOptional<zod.ZodBoolean>;
     }, zod.z.core.$strict>;
 }, zod.z.core.$strict>;
 /**
@@ -1014,6 +1016,7 @@ export declare const CreateLaunchTemplateVersionBody: zod.ZodObject<{
     }, zod.z.core.$strict>>;
     labels: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
     description: zod.ZodOptional<zod.ZodString>;
+    join_fleet: zod.ZodOptional<zod.ZodBoolean>;
 }, zod.z.core.$strict>;
 /**
  * @summary Get a launch template version

package/dist/compute/v2/generated/schemas.zod.js

@@ -55,7 +55,6 @@ import { NewLaunchTemplateVersion } from "./validators/newLaunchTemplateVersion.
 import { PasswordChoice } from "./validators/passwordChoice.zod.js";
 import { RebootInstanceRequestBody } from "./validators/rebootInstanceRequestBody.zod.js";
 import { RebuildInstanceRequestBody } from "./validators/rebuildInstanceRequestBody.zod.js";
-import { RescueInstanceRequestBody } from "./validators/rescueInstanceRequestBody.zod.js";
 import { RevertVolumeRequestBody } from "./validators/revertVolumeRequestBody.zod.js";
 import { RunInstanceCommandRequestBody } from "./validators/runInstanceCommandRequestBody.zod.js";
 import { UpdateElasticIPRequestBody } from "./validators/updateElasticIPRequestBody.zod.js";
@@ -896,6 +895,8 @@ export const DetachInstanceNetworkInterfaceParams = zod.strictObject({
  *
  * In rescue mode, everything only the instance's own system can take is refused with 409 `INSTANCE_UNRESCUE_REQUIRED`: starting, stopping, rebooting, rebuilding, resetting the password, changing `instance_type_id`, attaching or detaching volumes and network interfaces, capturing a private image and running commands. Leave rescue mode with `:unrescue` first. The console stays available, releasing the instance works as usual, and the instance is charged as when running. A suspension that begins in rescue mode takes the instance out of rescue before stopping it, and starting it again once the suspension ends boots its own system.
  *
+ * The rescue environment does not accept passwords. The remote console signs in as `login_username` automatically, and SSH accepts `login_username` with the public keys the instance was created or last rebuilt with.
+ *
  * A rescue the compute service could not boot leaves the instance as it was, or in `error`; request it again or reboot the instance.
  *
  * The request does not name an image. The rescue image is the region's enabled rescue image for the architecture of the instance's boot volume. A region and architecture with no enabled rescue image is refused with `RESCUE_IMAGE_NOT_CONFIGURED` (409).
@@ -912,7 +913,6 @@ export const RescueInstanceParams = zod.strictObject({
         .regex(rescueInstancePathInstanceIdRegExp)
         .describe("The public ins resource identifier. Only this fixed TypeID prefix is accepted; UUID text is not an alternative representation."),
 });
-export const RescueInstanceBody = RescueInstanceRequestBody;
 /**
  * Restores boot from the original boot volume. Completion is shown by the instance state, and the instance is `unrescuing` until then.
  * @summary Take an instance out of rescue mode

package/dist/compute/v2/generated/validators/createInstanceRequestBody.zod.d.ts

@@ -183,6 +183,7 @@ export declare const CreateInstanceRequestBody: zod.ZodObject<{
     }, zod.z.core.$strict>], "type">>;
     labels: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
     description: zod.ZodOptional<zod.ZodString>;
+    join_fleet: zod.ZodOptional<zod.ZodBoolean>;
     checkout: zod.ZodOptional<zod.ZodObject<{
         mode: zod.ZodDefault<zod.ZodEnum<{
             automatic: "automatic";

package/dist/compute/v2/generated/validators/createInstanceRequestBody.zod.js

@@ -76,6 +76,10 @@ export const CreateInstanceRequestBody = zod
         .max(createInstanceRequestBodyDescriptionMax)
         .optional()
         .describe("A free-text note about each instance. Do not put credentials here"),
+    join_fleet: zod
+        .boolean()
+        .optional()
+        .describe("Whether each instance joins Leaflow Fleet. An instance that joins enrolls automatically on its first boot, without a pairing code, and project members can then access it through Fleet using their own accounts. If omitted, the value from the launch template is used; if the template does not specify one, each instance joins when its image supports Fleet (`supports_fleet`).\n\nSetting the value to `true` for an image that does not support Fleet, or when booting from an existing volume, is rejected with 422 `INSTANCE_FLEET_UNSUPPORTED` before an order is placed. If Fleet is unavailable when an instance is created, the instance is still created and its `fleet_machine_id` is null."),
     checkout: CheckoutOptions.optional(),
 })
     .describe("Every part a launch template can describe may come from `launch_template` instead: a part given here overrides the template's, and `data_volumes`, when given, replaces the template's list. After that the instance type, the boot volume and the network interface are required, each refused with 422 `INSTANCE_CREATE_INVALID` naming the field when neither gives it.\n\nEvery component bought with the instance (its boot volume, data volumes and elastic IP) shares the usage type and period of `compute.billing`; a component's own `billing` exists to choose a different termination policy, and when omitted it is `compute.billing`.");

package/dist/compute/v2/generated/validators/createInstanceResponseBody.zod.d.ts

@@ -153,6 +153,9 @@ export declare const CreateInstanceResponseBody: zod.ZodObject<{
             }>;
             started_at: zod.z.ZodISODateTime;
         }, zod.z.core.$strict>, zod.ZodNull]>;
+        join_fleet: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
+        fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
     }, zod.z.core.$strict>>;
     checkout_session_id: zod.ZodUUID;
     order_id: zod.ZodNullable<zod.ZodUUID>;

package/dist/compute/v2/generated/validators/createLaunchTemplateRequestBody.zod.d.ts

@@ -73,6 +73,7 @@ export declare const CreateLaunchTemplateRequestBody: zod.ZodObject<{
         }, zod.z.core.$strict>>;
         labels: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
         description: zod.ZodOptional<zod.ZodString>;
+        join_fleet: zod.ZodOptional<zod.ZodBoolean>;
     }, zod.z.core.$strict>;
 }, zod.z.core.$strict>;
 export type CreateLaunchTemplateRequestBody = zod.input<typeof CreateLaunchTemplateRequestBody>;

package/dist/compute/v2/generated/validators/createLaunchTemplateResponseBody.zod.d.ts

@@ -80,6 +80,7 @@ export declare const CreateLaunchTemplateResponseBody: zod.ZodObject<{
         }, zod.z.core.$strict>, zod.ZodNull]>;
         labels: zod.ZodNullable<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
         description: zod.ZodNullable<zod.ZodString>;
+        join_fleet: zod.ZodNullable<zod.ZodBoolean>;
         created_at: zod.z.ZodISODateTime;
     }, zod.z.core.$strict>;
 }, zod.z.core.$strict>;

package/dist/compute/v2/generated/validators/createPrivateImageResponseBody.zod.d.ts

@@ -45,6 +45,7 @@ export declare const CreatePrivateImageResponseBody: zod.ZodObject<{
         min_volume_size_gib: zod.ZodInt;
         min_memory_mib: zod.ZodInt;
         supports_password_reset: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
         status: zod.ZodEnum<{
             deleting: "deleting";
             deleted: "deleted";

package/dist/compute/v2/generated/validators/deleteInstanceResponseBody.zod.d.ts

@@ -152,6 +152,9 @@ export declare const DeleteInstanceResponseBody: zod.ZodObject<{
             }>;
             started_at: zod.z.ZodISODateTime;
         }, zod.z.core.$strict>, zod.ZodNull]>;
+        join_fleet: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
+        fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
     }, zod.z.core.$strict>;
     cancellation: zod.ZodUnion<readonly [zod.ZodNull, zod.ZodObject<{
         id: zod.ZodUUID;

package/dist/compute/v2/generated/validators/deletePrivateImageResponseBody.zod.d.ts

@@ -45,6 +45,7 @@ export declare const DeletePrivateImageResponseBody: zod.ZodObject<{
         min_volume_size_gib: zod.ZodInt;
         min_memory_mib: zod.ZodInt;
         supports_password_reset: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
         status: zod.ZodEnum<{
             deleting: "deleting";
             deleted: "deleted";

package/dist/compute/v2/generated/validators/instance.zod.d.ts

@@ -154,6 +154,9 @@ export declare const Instance: zod.ZodObject<{
         }>;
         started_at: zod.z.ZodISODateTime;
     }, zod.z.core.$strict>, zod.ZodNull]>;
+    join_fleet: zod.ZodBoolean;
+    supports_fleet: zod.ZodBoolean;
+    fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
 }, zod.z.core.$strict>;
 export type Instance = zod.input<typeof Instance>;
 export type InstanceOutput = zod.output<typeof Instance>;

package/dist/compute/v2/generated/validators/instance.zod.js

@@ -164,4 +164,14 @@ export const Instance = zod.strictObject({
     latest_operation: zod
         .union([LatestOperation, zod.null()])
         .describe("The most recent operation started on the instance; null when none has been recorded."),
+    join_fleet: zod
+        .boolean()
+        .describe("Whether the instance is configured to join Leaflow Fleet. The value is set at creation and retained across rebuilds unless a rebuild specifies a new value."),
+    supports_fleet: zod
+        .boolean()
+        .describe("Whether the operating system with which the instance was created or last rebuilt supports Leaflow Fleet. The value reflects that specific image build; other builds of the same operating system may differ."),
+    fleet_machine_id: zod
+        .uuid()
+        .nullable()
+        .describe("The identifier of the Leaflow Fleet machine reserved for this instance. The instance enrolls as this machine on its first boot after creation or a rebuild, and its enrollment status is available from Fleet. Null if the instance is not configured to join Fleet, if its operating system does not support Fleet, or if Fleet was unavailable when the instance was created or last rebuilt."),
 });

package/dist/compute/v2/generated/validators/instanceListResponseBody.zod.d.ts

@@ -152,6 +152,9 @@ export declare const InstanceListResponseBody: zod.ZodObject<{
             }>;
             started_at: zod.z.ZodISODateTime;
         }, zod.z.core.$strict>, zod.ZodNull]>;
+        join_fleet: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
+        fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
     }, zod.z.core.$strict>>;
     pagination: zod.ZodObject<{
         page: zod.ZodInt;

package/dist/compute/v2/generated/validators/launchTemplateVersion.zod.d.ts

@@ -69,6 +69,7 @@ export declare const LaunchTemplateVersion: zod.ZodObject<{
     }, zod.z.core.$strict>, zod.ZodNull]>;
     labels: zod.ZodNullable<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
     description: zod.ZodNullable<zod.ZodString>;
+    join_fleet: zod.ZodNullable<zod.ZodBoolean>;
     created_at: zod.z.ZodISODateTime;
 }, zod.z.core.$strict>;
 export type LaunchTemplateVersion = zod.input<typeof LaunchTemplateVersion>;

package/dist/compute/v2/generated/validators/launchTemplateVersion.zod.js

@@ -53,5 +53,9 @@ export const LaunchTemplateVersion = zod.strictObject({
         .nullable()
         .describe("Null when the version describes no labels."),
     description: zod.string().nullable().describe("Null when the version describes no note."),
+    join_fleet: zod
+        .boolean()
+        .nullable()
+        .describe("Null if the version does not specify a value, in which case the image determines it."),
     created_at: zod.iso.datetime({ offset: true }),
 });

package/dist/compute/v2/generated/validators/launchTemplateVersionListResponseBody.zod.d.ts

@@ -70,6 +70,7 @@ export declare const LaunchTemplateVersionListResponseBody: zod.ZodObject<{
         }, zod.z.core.$strict>, zod.ZodNull]>;
         labels: zod.ZodNullable<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
         description: zod.ZodNullable<zod.ZodString>;
+        join_fleet: zod.ZodNullable<zod.ZodBoolean>;
         created_at: zod.z.ZodISODateTime;
     }, zod.z.core.$strict>>;
     pagination: zod.ZodObject<{

package/dist/compute/v2/generated/validators/newLaunchTemplateVersion.zod.d.ts

@@ -71,6 +71,7 @@ export declare const NewLaunchTemplateVersion: zod.ZodObject<{
     }, zod.z.core.$strict>>;
     labels: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
     description: zod.ZodOptional<zod.ZodString>;
+    join_fleet: zod.ZodOptional<zod.ZodBoolean>;
 }, zod.z.core.$strict>;
 export type NewLaunchTemplateVersion = zod.input<typeof NewLaunchTemplateVersion>;
 export type NewLaunchTemplateVersionOutput = zod.output<typeof NewLaunchTemplateVersion>;

package/dist/compute/v2/generated/validators/newLaunchTemplateVersion.zod.js

@@ -58,5 +58,9 @@ export const NewLaunchTemplateVersion = zod
         .optional()
         .describe("A key may not contain a colon, whitespace or control characters."),
     description: zod.string().max(newLaunchTemplateVersionDescriptionMax).optional(),
+    join_fleet: zod
+        .boolean()
+        .optional()
+        .describe("Whether instances created from this version join Leaflow Fleet, as described for `join_fleet` on instance creation. If omitted, instances join when their image supports Fleet."),
 })
     .describe("What a version describes. Every part is optional; an instance created from the version supplies what is left out and may override what is given.");

package/dist/compute/v2/generated/validators/privateImageListResponseBody.zod.d.ts

@@ -45,6 +45,7 @@ export declare const PrivateImageListResponseBody: zod.ZodObject<{
         min_volume_size_gib: zod.ZodInt;
         min_memory_mib: zod.ZodInt;
         supports_password_reset: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
         status: zod.ZodEnum<{
             deleting: "deleting";
             deleted: "deleted";

package/dist/compute/v2/generated/validators/privateImageResource.zod.d.ts

@@ -45,6 +45,7 @@ export declare const PrivateImageResource: zod.ZodObject<{
     min_volume_size_gib: zod.ZodInt;
     min_memory_mib: zod.ZodInt;
     supports_password_reset: zod.ZodBoolean;
+    supports_fleet: zod.ZodBoolean;
     status: zod.ZodEnum<{
         deleting: "deleting";
         deleted: "deleted";

package/dist/compute/v2/generated/validators/privateImageResource.zod.js

@@ -60,6 +60,9 @@ export const PrivateImageResource = zod
     supports_password_reset: zod
         .boolean()
         .describe("False means a new password can only be set by rebuilding an instance created from this image"),
+    supports_fleet: zod
+        .boolean()
+        .describe("Whether instances created from this image can join Leaflow Fleet (`join_fleet`). The value is true when the operating system captured from the source instance supports Fleet"),
     status: zod
         .enum([
         "pending",

package/dist/compute/v2/generated/validators/publicImageListResponseBody.zod.d.ts

@@ -45,6 +45,7 @@ export declare const PublicImageListResponseBody: zod.ZodObject<{
         min_volume_size_gib: zod.ZodInt;
         min_memory_mib: zod.ZodInt;
         supports_password_reset: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
         sale_status: zod.ZodEnum<{
             on_sale: "on_sale";
             off_sale: "off_sale";

package/dist/compute/v2/generated/validators/publicImageResource.zod.d.ts

@@ -45,6 +45,7 @@ export declare const PublicImageResource: zod.ZodObject<{
     min_volume_size_gib: zod.ZodInt;
     min_memory_mib: zod.ZodInt;
     supports_password_reset: zod.ZodBoolean;
+    supports_fleet: zod.ZodBoolean;
     sale_status: zod.ZodEnum<{
         on_sale: "on_sale";
         off_sale: "off_sale";

package/dist/compute/v2/generated/validators/publicImageResource.zod.js

@@ -57,6 +57,9 @@ export const PublicImageResource = zod
     supports_password_reset: zod
         .boolean()
         .describe("False means a new password can only be set by rebuilding an instance created from this image"),
+    supports_fleet: zod
+        .boolean()
+        .describe("Whether instances created from this image can join Leaflow Fleet (`join_fleet`). The value applies to this specific image build; other builds of the same operating system may differ"),
     sale_status: zod
         .enum(["on_sale", "off_sale"])
         .describe("`on_sale` images can install new instances. `off_sale` means the platform withdrew the image: it stops new purchases only, and instances already running it keep running and can still be rebuilt onto it."),

package/dist/compute/v2/generated/validators/rebuildInstanceRequestBody.zod.d.ts

@@ -45,6 +45,7 @@ export declare const RebuildInstanceRequestBody: zod.ZodObject<{
         }>;
         value: zod.ZodString;
     }, zod.z.core.$strict>], "type">>;
+    join_fleet: zod.ZodOptional<zod.ZodBoolean>;
 }, zod.z.core.$strict>;
 export type RebuildInstanceRequestBody = zod.input<typeof RebuildInstanceRequestBody>;
 export type RebuildInstanceRequestBodyOutput = zod.output<typeof RebuildInstanceRequestBody>;

package/dist/compute/v2/generated/validators/rebuildInstanceRequestBody.zod.js

@@ -38,4 +38,8 @@ import { PasswordChoice } from "./passwordChoice.zod.js";
 export const RebuildInstanceRequestBody = zod.strictObject({
     image_id: ImageID,
     password: PasswordChoice.optional(),
+    join_fleet: zod
+        .boolean()
+        .optional()
+        .describe("Whether the rebuilt instance joins Leaflow Fleet. If omitted, the instance's current value is retained. Because a rebuild replaces the operating system, the instance enrolls as a new Fleet machine and the previous machine is removed from Fleet. Setting the value to `true` for an image that does not support Fleet is rejected with 422 `INSTANCE_FLEET_UNSUPPORTED`."),
 });

package/dist/compute/v2/generated/validators/rebuildInstanceResponseBody.zod.d.ts

@@ -152,6 +152,9 @@ export declare const RebuildInstanceResponseBody: zod.ZodObject<{
             }>;
             started_at: zod.z.ZodISODateTime;
         }, zod.z.core.$strict>, zod.ZodNull]>;
+        join_fleet: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
+        fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
     }, zod.z.core.$strict>;
     password: zod.ZodNullable<zod.ZodString>;
 }, zod.z.core.$strict>;

package/dist/compute/v2/generated/validators/rescueInstanceResponseBody.zod.d.ts

@@ -153,6 +153,9 @@ export declare const RescueInstanceResponseBody: zod.ZodObject<{
             }>;
             started_at: zod.z.ZodISODateTime;
         }, zod.z.core.$strict>, zod.ZodNull]>;
+        join_fleet: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
+        fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
     }, zod.z.core.$strict>;
 }, zod.z.core.$strict>;
 export type RescueInstanceResponseBody = zod.input<typeof RescueInstanceResponseBody>;

package/dist/compute/v2/generated/validators/updateInstanceResponseBody.zod.d.ts

@@ -152,6 +152,9 @@ export declare const UpdateInstanceResponseBody: zod.ZodObject<{
             }>;
             started_at: zod.z.ZodISODateTime;
         }, zod.z.core.$strict>, zod.ZodNull]>;
+        join_fleet: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
+        fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
     }, zod.z.core.$strict>;
     checkout_session_id: zod.ZodNullable<zod.ZodUUID>;
     order_id: zod.ZodNullable<zod.ZodUUID>;

package/dist/iam/v1/generated/functions.d.ts

@@ -667,8 +667,15 @@ export declare const getCreateApplicationUrl: () => string;
  * The `secret` is present only for a confidential application, and only in this response.
  * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
  *
- * Any account of this platform may sign in to the application. Membership of this project
- * is confirmed only when a token is exchanged for a scoped token.
+ * Any account of this platform may sign in to the application and is always asked for
+ * consent. `profile` and `email` are granted at every sign-in; any other scope selected here
+ * is granted only when the authorization request names it explicitly.
+ *
+ * To call the Leaflow API on behalf of a user, the application requests `iam`, and the user
+ * must then authorize the application for each project in which it is to act, as described
+ * in the Account API. Within an authorized project, the application holds exactly the
+ * permissions of the user and none beyond them. Members of this project must authorize the
+ * application in the same way as any other user.
  * @summary Create an application
  */
 export declare const createApplication: (createApplicationRequestBody: CreateApplicationRequestBody, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<createApplicationResponse>;

package/dist/iam/v1/generated/functions.js

@@ -711,8 +711,15 @@ export const getCreateApplicationUrl = () => {
  * The `secret` is present only for a confidential application, and only in this response.
  * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
  *
- * Any account of this platform may sign in to the application. Membership of this project
- * is confirmed only when a token is exchanged for a scoped token.
+ * Any account of this platform may sign in to the application and is always asked for
+ * consent. `profile` and `email` are granted at every sign-in; any other scope selected here
+ * is granted only when the authorization request names it explicitly.
+ *
+ * To call the Leaflow API on behalf of a user, the application requests `iam`, and the user
+ * must then authorize the application for each project in which it is to act, as described
+ * in the Account API. Within an authorized project, the application holds exactly the
+ * permissions of the user and none beyond them. Members of this project must authorize the
+ * application in the same way as any other user.
  * @summary Create an application
  */
 export const createApplication = async (createApplicationRequestBody, options, fetchFn) => {

package/dist/iam/v1/generated/models.d.ts

@@ -522,7 +522,7 @@ export interface CreateApplicationRequestBody {
      * @items.maxLength 2048
      */
     redirect_uris: string[];
-    /** The scopes the application may request. Omitted means the defaults, `profile` and `email`; a scope not in the platform's list is refused */
+    /** The scopes the application may request. Omitted means the defaults, `profile` and `email`; a scope not in the platform's list is refused. `profile` and `email` are granted at every sign-in, and any other scope only when the authorization request names it explicitly */
     scopes?: string[];
 }
 export interface CreateApplicationResponseBody {

package/dist/iam/v1/generated/schemas.zod.d.ts

@@ -268,8 +268,15 @@ export declare const ListApplicationsQueryParams: zod.ZodObject<{
  * The `secret` is present only for a confidential application, and only in this response.
  * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
  *
- * Any account of this platform may sign in to the application. Membership of this project
- * is confirmed only when a token is exchanged for a scoped token.
+ * Any account of this platform may sign in to the application and is always asked for
+ * consent. `profile` and `email` are granted at every sign-in; any other scope selected here
+ * is granted only when the authorization request names it explicitly.
+ *
+ * To call the Leaflow API on behalf of a user, the application requests `iam`, and the user
+ * must then authorize the application for each project in which it is to act, as described
+ * in the Account API. Within an authorized project, the application holds exactly the
+ * permissions of the user and none beyond them. Members of this project must authorize the
+ * application in the same way as any other user.
  * @summary Create an application
  */
 export declare const CreateApplicationBody: zod.ZodObject<{

package/dist/iam/v1/generated/schemas.zod.js

@@ -295,8 +295,15 @@ export const ListApplicationsQueryParams = zod.strictObject({
  * The `secret` is present only for a confidential application, and only in this response.
  * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
  *
- * Any account of this platform may sign in to the application. Membership of this project
- * is confirmed only when a token is exchanged for a scoped token.
+ * Any account of this platform may sign in to the application and is always asked for
+ * consent. `profile` and `email` are granted at every sign-in; any other scope selected here
+ * is granted only when the authorization request names it explicitly.
+ *
+ * To call the Leaflow API on behalf of a user, the application requests `iam`, and the user
+ * must then authorize the application for each project in which it is to act, as described
+ * in the Account API. Within an authorized project, the application holds exactly the
+ * permissions of the user and none beyond them. Members of this project must authorize the
+ * application in the same way as any other user.
  * @summary Create an application
  */
 export const CreateApplicationBody = CreateApplicationRequestBody;

package/dist/iam/v1/generated/validators/createApplicationRequestBody.zod.js

@@ -26,5 +26,5 @@ export const CreateApplicationRequestBody = zod.strictObject({
     scopes: zod
         .array(zod.string())
         .optional()
-        .describe("The scopes the application may request. Omitted means the defaults, `profile` and `email`; a scope not in the platform's list is refused"),
+        .describe("The scopes the application may request. Omitted means the defaults, `profile` and `email`; a scope not in the platform's list is refused. `profile` and `email` are granted at every sign-in, and any other scope only when the authorization request names it explicitly"),
 });

package/dist/proto/leaflow/fleet/virtualdesktop/datatransfer/v1/datatransfer_pb.d.ts

@@ -8,6 +8,42 @@ import type { Message } from "@bufbuild/protobuf";
  */
 export declare const file_leaflow_fleet_virtualdesktop_datatransfer_v1_datatransfer: GenFile;
 /**
+ * Windows 原生表示不能仅按格式名合并：同一格式的 aspect、index 和介质各自独立。
+ * 无法用标准媒体类型完整表达的可序列化表示使用下列媒体类型（参数均为 ASCII）：
+ * application/x-leaflow-windows-format;name=<utf16hex>;aspect=<u32>;index=<i32>;medium=<kind>
+ * name 为格式名每个 UTF-16 单元的四位十六进制串，不含终止 NUL；接收端以名称重新
+ * 注册格式，不得跨机复用来源的注册号。非注册格式改用 id=<1..49151>，不得同时带 name。
+ * aspect、index、medium 必须显式存在，不得丢失、重复或以未知参数降级为其它格式。
+ * medium=bytes 为 HGLOBAL/IStream 的可序列化字节，medium=storage 为完整 Compound File
+ * Binary 表示，medium=emf 为 TYMED_ENHMF 的完整增强型图元文件记录，不得降为位图。
+ * 普通 CF_ENHMETAFILE 的内容表示使用 image/emf；其它 aspect/index 保留显式选择器。
+ * medium=file 为 TYMED_FILE 承载的某种格式的完整正文，不是 lpszFileName 或文件引用。
+ * 仅在读取该表示时打开来源本机介质，按块取得正文；空正文有效，读取失败不改用其它格式。
+ * 接收端按需创建独立的本机临时介质文件，文件名仅交给本机 OLE 目标，绝不跨机发送。
+ * 已交出的介质由自己的 STGMEDIUM/pUnkForRelease 持有，不随原声明或读取期结束提前删除；
+ * 最后一个介质引用释放时删除自己创建的临时文件。来源介质仍按原 STGMEDIUM 的规则释放。
+ * medium=metafile-picture 为 TYMED_MFPICT：先依次编码 mm、xExt、yExt 三个 i32 小端数，
+ * 随后是完整 WMF 记录；不得发送 METAFILEPICT 的本机结构、对齐填充或 hMF 句柄。
+ * medium=gdi 为 TYMED_GDI：先编码对象种类 u32 小端数，7 为位图，5 为调色板。
+ * 位图随后为 40 字节 BITMAPINFOHEADER、BI_BITFIELDS 所需的三个颜色掩码、声明的
+ * RGBQUAD 颜色表及 DWORD 对齐的完整像素行；仅使用 BI_RGB 或 BI_BITFIELDS，保留
+ * 有效色深和像素，biSizeImage 精确等于像素长度，不含 BMP 文件头或本机指针。
+ * 调色板随后为 LOGPALETTE：version=0x300、条目数两个 u16 小端数，再依次编码每个
+ * PALETTEENTRY 的 red、green、blue、flags 四字节，接收端创建新的本机 GDI 对象。
+ * FORMATETC 的非空 ptd 另以可选 device=<bytehex> 参数声明整个 DVTARGETDEVICE；
+ * 每字节两个十六进制字符，包含 tdSize 指定的完整描述、DEVMODE 和驱动私有尾部。
+ * 省略 device 表示空 ptd；长度和内部偏移必须有效，不得把畸形或重复参数降级为普通
+ * 注册格式。设备描述也是表示身份，枚举、读取、缓存和重建不得合并不同 device。
+ * 各次原生枚举交出独立、可由 COM 分配器释放的副本；不得预读正文来取得该声明。
+ * 设备描述仅供保留和匹配，不得据此加载来源驱动或创建来源设备，也不进入日志。
+ * 本机介质与以完整媒体类型名提供的原始 HGLOBAL/IStream 字节表示可同时存在；
+ * 两者声明同一跨机格式时优先读取原始序列化字节，不得先经过本机 GDI 编组而改变
+ * 像素、色表、掩码或其它记录。两种本机表示共用同一媒体类型、读取期和数据通道。
+ * 接收端从记录重建介质，绝不把原生句柄、指针、COM 接口或源文件路径当正文。
+ * CF_HDROP(id=15)、FileContents、FileGroupDescriptor、PIDL、FileName 等文件/路径格式及
+ * 拖放控制格式仍归 filetransfer 或拖放适配，不得用此媒体类型绕过文件引用和权限。
+ * 原生声明和取得流引用不能预读正文；各表示继续独立按需读取、校验和取消。
+ *
  * Data of one format.
  *
  * @generated from message leaflow.fleet.virtualdesktop.datatransfer.v1.DataTransferItem
@@ -1364,7 +1400,8 @@ export type DragPolicy = Message<"leaflow.fleet.virtualdesktop.datatransfer.v1.D
      */
     allowedMimeTypes: string[];
     /**
-     * The longest a drag may last, at most 5 minutes. Unset or 0: no drags.
+     * DragDrop 之前物理手势的最长时间，至多 5 分钟；未设置或 0 表示不能拖拽。
+     * 已受理的原生确认、格式读取及文件交付不受旧手势时限约束，不代表放宽当前权限。
      *
      * @generated from field: google.protobuf.Duration max_duration = 4;
      */