@leaflow/sdk 0.207.0 → 0.209.0

package/dist/compute/v2/generated/validators/createInstanceResponseBody.zod.d.ts

@@ -153,6 +153,9 @@ export declare const CreateInstanceResponseBody: zod.ZodObject<{
             }>;
             started_at: zod.z.ZodISODateTime;
         }, zod.z.core.$strict>, zod.ZodNull]>;
+        join_fleet: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
+        fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
     }, zod.z.core.$strict>>;
     checkout_session_id: zod.ZodUUID;
     order_id: zod.ZodNullable<zod.ZodUUID>;

package/dist/compute/v2/generated/validators/createLaunchTemplateRequestBody.zod.d.ts

@@ -73,6 +73,7 @@ export declare const CreateLaunchTemplateRequestBody: zod.ZodObject<{
         }, zod.z.core.$strict>>;
         labels: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
         description: zod.ZodOptional<zod.ZodString>;
+        join_fleet: zod.ZodOptional<zod.ZodBoolean>;
     }, zod.z.core.$strict>;
 }, zod.z.core.$strict>;
 export type CreateLaunchTemplateRequestBody = zod.input<typeof CreateLaunchTemplateRequestBody>;

package/dist/compute/v2/generated/validators/createLaunchTemplateResponseBody.zod.d.ts

@@ -80,6 +80,7 @@ export declare const CreateLaunchTemplateResponseBody: zod.ZodObject<{
         }, zod.z.core.$strict>, zod.ZodNull]>;
         labels: zod.ZodNullable<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
         description: zod.ZodNullable<zod.ZodString>;
+        join_fleet: zod.ZodNullable<zod.ZodBoolean>;
         created_at: zod.z.ZodISODateTime;
     }, zod.z.core.$strict>;
 }, zod.z.core.$strict>;

package/dist/compute/v2/generated/validators/createPrivateImageResponseBody.zod.d.ts

@@ -45,6 +45,7 @@ export declare const CreatePrivateImageResponseBody: zod.ZodObject<{
         min_volume_size_gib: zod.ZodInt;
         min_memory_mib: zod.ZodInt;
         supports_password_reset: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
         status: zod.ZodEnum<{
             deleting: "deleting";
             deleted: "deleted";

package/dist/compute/v2/generated/validators/createSecurityGroupRuleRequestBody.zod.js

@@ -57,6 +57,6 @@ export const CreateSecurityGroupRuleRequestBody = zod.strictObject({
         .string()
         .max(createSecurityGroupRuleRequestBodyRemoteCidrMax)
         .optional()
-        .describe("A CIDR of the rule's IP version. Every address when omitted."),
+        .describe("An IP address or CIDR block of the rule's IP version. A single address admits only itself, and a block is recorded with its host bits cleared. Every address when omitted."),
     description: zod.string().max(createSecurityGroupRuleRequestBodyDescriptionMax).optional(),
 });

package/dist/compute/v2/generated/validators/deleteInstanceResponseBody.zod.d.ts

@@ -152,6 +152,9 @@ export declare const DeleteInstanceResponseBody: zod.ZodObject<{
             }>;
             started_at: zod.z.ZodISODateTime;
         }, zod.z.core.$strict>, zod.ZodNull]>;
+        join_fleet: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
+        fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
     }, zod.z.core.$strict>;
     cancellation: zod.ZodUnion<readonly [zod.ZodNull, zod.ZodObject<{
         id: zod.ZodUUID;

package/dist/compute/v2/generated/validators/deletePrivateImageResponseBody.zod.d.ts

@@ -45,6 +45,7 @@ export declare const DeletePrivateImageResponseBody: zod.ZodObject<{
         min_volume_size_gib: zod.ZodInt;
         min_memory_mib: zod.ZodInt;
         supports_password_reset: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
         status: zod.ZodEnum<{
             deleting: "deleting";
             deleted: "deleted";

package/dist/compute/v2/generated/validators/instance.zod.d.ts

@@ -154,6 +154,9 @@ export declare const Instance: zod.ZodObject<{
         }>;
         started_at: zod.z.ZodISODateTime;
     }, zod.z.core.$strict>, zod.ZodNull]>;
+    join_fleet: zod.ZodBoolean;
+    supports_fleet: zod.ZodBoolean;
+    fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
 }, zod.z.core.$strict>;
 export type Instance = zod.input<typeof Instance>;
 export type InstanceOutput = zod.output<typeof Instance>;

package/dist/compute/v2/generated/validators/instance.zod.js

@@ -164,4 +164,14 @@ export const Instance = zod.strictObject({
     latest_operation: zod
         .union([LatestOperation, zod.null()])
         .describe("The most recent operation started on the instance; null when none has been recorded."),
+    join_fleet: zod
+        .boolean()
+        .describe("Whether the instance is configured to join Leaflow Fleet. The value is set at creation and retained across rebuilds unless a rebuild specifies a new value."),
+    supports_fleet: zod
+        .boolean()
+        .describe("Whether the operating system with which the instance was created or last rebuilt supports Leaflow Fleet. The value reflects that specific image build; other builds of the same operating system may differ."),
+    fleet_machine_id: zod
+        .uuid()
+        .nullable()
+        .describe("The identifier of the Leaflow Fleet machine reserved for this instance. The instance enrolls as this machine on its first boot after creation or a rebuild, and its enrollment status is available from Fleet. Null if the instance is not configured to join Fleet, if its operating system does not support Fleet, or if Fleet was unavailable when the instance was created or last rebuilt."),
 });

package/dist/compute/v2/generated/validators/instanceListResponseBody.zod.d.ts

@@ -152,6 +152,9 @@ export declare const InstanceListResponseBody: zod.ZodObject<{
             }>;
             started_at: zod.z.ZodISODateTime;
         }, zod.z.core.$strict>, zod.ZodNull]>;
+        join_fleet: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
+        fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
     }, zod.z.core.$strict>>;
     pagination: zod.ZodObject<{
         page: zod.ZodInt;

package/dist/compute/v2/generated/validators/launchTemplateVersion.zod.d.ts

@@ -69,6 +69,7 @@ export declare const LaunchTemplateVersion: zod.ZodObject<{
     }, zod.z.core.$strict>, zod.ZodNull]>;
     labels: zod.ZodNullable<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
     description: zod.ZodNullable<zod.ZodString>;
+    join_fleet: zod.ZodNullable<zod.ZodBoolean>;
     created_at: zod.z.ZodISODateTime;
 }, zod.z.core.$strict>;
 export type LaunchTemplateVersion = zod.input<typeof LaunchTemplateVersion>;

package/dist/compute/v2/generated/validators/launchTemplateVersion.zod.js

@@ -53,5 +53,9 @@ export const LaunchTemplateVersion = zod.strictObject({
         .nullable()
         .describe("Null when the version describes no labels."),
     description: zod.string().nullable().describe("Null when the version describes no note."),
+    join_fleet: zod
+        .boolean()
+        .nullable()
+        .describe("Null if the version does not specify a value, in which case the image determines it."),
     created_at: zod.iso.datetime({ offset: true }),
 });

package/dist/compute/v2/generated/validators/launchTemplateVersionListResponseBody.zod.d.ts

@@ -70,6 +70,7 @@ export declare const LaunchTemplateVersionListResponseBody: zod.ZodObject<{
         }, zod.z.core.$strict>, zod.ZodNull]>;
         labels: zod.ZodNullable<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
         description: zod.ZodNullable<zod.ZodString>;
+        join_fleet: zod.ZodNullable<zod.ZodBoolean>;
         created_at: zod.z.ZodISODateTime;
     }, zod.z.core.$strict>>;
     pagination: zod.ZodObject<{

package/dist/compute/v2/generated/validators/newLaunchTemplateVersion.zod.d.ts

@@ -71,6 +71,7 @@ export declare const NewLaunchTemplateVersion: zod.ZodObject<{
     }, zod.z.core.$strict>>;
     labels: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodString>>;
     description: zod.ZodOptional<zod.ZodString>;
+    join_fleet: zod.ZodOptional<zod.ZodBoolean>;
 }, zod.z.core.$strict>;
 export type NewLaunchTemplateVersion = zod.input<typeof NewLaunchTemplateVersion>;
 export type NewLaunchTemplateVersionOutput = zod.output<typeof NewLaunchTemplateVersion>;

package/dist/compute/v2/generated/validators/newLaunchTemplateVersion.zod.js

@@ -58,5 +58,9 @@ export const NewLaunchTemplateVersion = zod
         .optional()
         .describe("A key may not contain a colon, whitespace or control characters."),
     description: zod.string().max(newLaunchTemplateVersionDescriptionMax).optional(),
+    join_fleet: zod
+        .boolean()
+        .optional()
+        .describe("Whether instances created from this version join Leaflow Fleet, as described for `join_fleet` on instance creation. If omitted, instances join when their image supports Fleet."),
 })
     .describe("What a version describes. Every part is optional; an instance created from the version supplies what is left out and may override what is given.");

package/dist/compute/v2/generated/validators/privateImageListResponseBody.zod.d.ts

@@ -45,6 +45,7 @@ export declare const PrivateImageListResponseBody: zod.ZodObject<{
         min_volume_size_gib: zod.ZodInt;
         min_memory_mib: zod.ZodInt;
         supports_password_reset: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
         status: zod.ZodEnum<{
             deleting: "deleting";
             deleted: "deleted";

package/dist/compute/v2/generated/validators/privateImageResource.zod.d.ts

@@ -45,6 +45,7 @@ export declare const PrivateImageResource: zod.ZodObject<{
     min_volume_size_gib: zod.ZodInt;
     min_memory_mib: zod.ZodInt;
     supports_password_reset: zod.ZodBoolean;
+    supports_fleet: zod.ZodBoolean;
     status: zod.ZodEnum<{
         deleting: "deleting";
         deleted: "deleted";

package/dist/compute/v2/generated/validators/privateImageResource.zod.js

@@ -60,6 +60,9 @@ export const PrivateImageResource = zod
     supports_password_reset: zod
         .boolean()
         .describe("False means a new password can only be set by rebuilding an instance created from this image"),
+    supports_fleet: zod
+        .boolean()
+        .describe("Whether instances created from this image can join Leaflow Fleet (`join_fleet`). The value is true when the operating system captured from the source instance supports Fleet"),
     status: zod
         .enum([
         "pending",

package/dist/compute/v2/generated/validators/publicImageListResponseBody.zod.d.ts

@@ -45,6 +45,7 @@ export declare const PublicImageListResponseBody: zod.ZodObject<{
         min_volume_size_gib: zod.ZodInt;
         min_memory_mib: zod.ZodInt;
         supports_password_reset: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
         sale_status: zod.ZodEnum<{
             on_sale: "on_sale";
             off_sale: "off_sale";

package/dist/compute/v2/generated/validators/publicImageResource.zod.d.ts

@@ -45,6 +45,7 @@ export declare const PublicImageResource: zod.ZodObject<{
     min_volume_size_gib: zod.ZodInt;
     min_memory_mib: zod.ZodInt;
     supports_password_reset: zod.ZodBoolean;
+    supports_fleet: zod.ZodBoolean;
     sale_status: zod.ZodEnum<{
         on_sale: "on_sale";
         off_sale: "off_sale";

package/dist/compute/v2/generated/validators/publicImageResource.zod.js

@@ -57,6 +57,9 @@ export const PublicImageResource = zod
     supports_password_reset: zod
         .boolean()
         .describe("False means a new password can only be set by rebuilding an instance created from this image"),
+    supports_fleet: zod
+        .boolean()
+        .describe("Whether instances created from this image can join Leaflow Fleet (`join_fleet`). The value applies to this specific image build; other builds of the same operating system may differ"),
     sale_status: zod
         .enum(["on_sale", "off_sale"])
         .describe("`on_sale` images can install new instances. `off_sale` means the platform withdrew the image: it stops new purchases only, and instances already running it keep running and can still be rebuilt onto it."),

package/dist/compute/v2/generated/validators/rebuildInstanceRequestBody.zod.d.ts

@@ -45,6 +45,7 @@ export declare const RebuildInstanceRequestBody: zod.ZodObject<{
         }>;
         value: zod.ZodString;
     }, zod.z.core.$strict>], "type">>;
+    join_fleet: zod.ZodOptional<zod.ZodBoolean>;
 }, zod.z.core.$strict>;
 export type RebuildInstanceRequestBody = zod.input<typeof RebuildInstanceRequestBody>;
 export type RebuildInstanceRequestBodyOutput = zod.output<typeof RebuildInstanceRequestBody>;

package/dist/compute/v2/generated/validators/rebuildInstanceRequestBody.zod.js

@@ -38,4 +38,8 @@ import { PasswordChoice } from "./passwordChoice.zod.js";
 export const RebuildInstanceRequestBody = zod.strictObject({
     image_id: ImageID,
     password: PasswordChoice.optional(),
+    join_fleet: zod
+        .boolean()
+        .optional()
+        .describe("Whether the rebuilt instance joins Leaflow Fleet. If omitted, the instance's current value is retained. Because a rebuild replaces the operating system, the instance enrolls as a new Fleet machine and the previous machine is removed from Fleet. Setting the value to `true` for an image that does not support Fleet is rejected with 422 `INSTANCE_FLEET_UNSUPPORTED`."),
 });

package/dist/compute/v2/generated/validators/rebuildInstanceResponseBody.zod.d.ts

@@ -152,6 +152,9 @@ export declare const RebuildInstanceResponseBody: zod.ZodObject<{
             }>;
             started_at: zod.z.ZodISODateTime;
         }, zod.z.core.$strict>, zod.ZodNull]>;
+        join_fleet: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
+        fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
     }, zod.z.core.$strict>;
     password: zod.ZodNullable<zod.ZodString>;
 }, zod.z.core.$strict>;

package/dist/compute/v2/generated/validators/rescueInstanceResponseBody.zod.d.ts

@@ -153,6 +153,9 @@ export declare const RescueInstanceResponseBody: zod.ZodObject<{
             }>;
             started_at: zod.z.ZodISODateTime;
         }, zod.z.core.$strict>, zod.ZodNull]>;
+        join_fleet: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
+        fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
     }, zod.z.core.$strict>;
 }, zod.z.core.$strict>;
 export type RescueInstanceResponseBody = zod.input<typeof RescueInstanceResponseBody>;

package/dist/compute/v2/generated/validators/updateInstanceResponseBody.zod.d.ts

@@ -152,6 +152,9 @@ export declare const UpdateInstanceResponseBody: zod.ZodObject<{
             }>;
             started_at: zod.z.ZodISODateTime;
         }, zod.z.core.$strict>, zod.ZodNull]>;
+        join_fleet: zod.ZodBoolean;
+        supports_fleet: zod.ZodBoolean;
+        fleet_machine_id: zod.ZodNullable<zod.ZodUUID>;
     }, zod.z.core.$strict>;
     checkout_session_id: zod.ZodNullable<zod.ZodUUID>;
     order_id: zod.ZodNullable<zod.ZodUUID>;

package/dist/iam/v1/generated/functions.d.ts

@@ -667,8 +667,15 @@ export declare const getCreateApplicationUrl: () => string;
  * The `secret` is present only for a confidential application, and only in this response.
  * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
  *
- * Any account of this platform may sign in to the application. Membership of this project
- * is confirmed only when a token is exchanged for a scoped token.
+ * Any account of this platform may sign in to the application and is always asked for
+ * consent. `profile` and `email` are granted at every sign-in; any other scope selected here
+ * is granted only when the authorization request names it explicitly.
+ *
+ * To call the Leaflow API on behalf of a user, the application requests `iam`, and the user
+ * must then authorize the application for each project in which it is to act, as described
+ * in the Account API. Within an authorized project, the application holds exactly the
+ * permissions of the user and none beyond them. Members of this project must authorize the
+ * application in the same way as any other user.
  * @summary Create an application
  */
 export declare const createApplication: (createApplicationRequestBody: CreateApplicationRequestBody, options?: RequestInit, fetchFn?: typeof globalThis.fetch) => Promise<createApplicationResponse>;

package/dist/iam/v1/generated/functions.js

@@ -711,8 +711,15 @@ export const getCreateApplicationUrl = () => {
  * The `secret` is present only for a confidential application, and only in this response.
  * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
  *
- * Any account of this platform may sign in to the application. Membership of this project
- * is confirmed only when a token is exchanged for a scoped token.
+ * Any account of this platform may sign in to the application and is always asked for
+ * consent. `profile` and `email` are granted at every sign-in; any other scope selected here
+ * is granted only when the authorization request names it explicitly.
+ *
+ * To call the Leaflow API on behalf of a user, the application requests `iam`, and the user
+ * must then authorize the application for each project in which it is to act, as described
+ * in the Account API. Within an authorized project, the application holds exactly the
+ * permissions of the user and none beyond them. Members of this project must authorize the
+ * application in the same way as any other user.
  * @summary Create an application
  */
 export const createApplication = async (createApplicationRequestBody, options, fetchFn) => {

package/dist/iam/v1/generated/models.d.ts

@@ -522,7 +522,7 @@ export interface CreateApplicationRequestBody {
      * @items.maxLength 2048
      */
     redirect_uris: string[];
-    /** The scopes the application may request. Omitted means the defaults, `profile` and `email`; a scope not in the platform's list is refused */
+    /** The scopes the application may request. Omitted means the defaults, `profile` and `email`; a scope not in the platform's list is refused. `profile` and `email` are granted at every sign-in, and any other scope only when the authorization request names it explicitly */
     scopes?: string[];
 }
 export interface CreateApplicationResponseBody {

package/dist/iam/v1/generated/schemas.zod.d.ts

@@ -268,8 +268,15 @@ export declare const ListApplicationsQueryParams: zod.ZodObject<{
  * The `secret` is present only for a confidential application, and only in this response.
  * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
  *
- * Any account of this platform may sign in to the application. Membership of this project
- * is confirmed only when a token is exchanged for a scoped token.
+ * Any account of this platform may sign in to the application and is always asked for
+ * consent. `profile` and `email` are granted at every sign-in; any other scope selected here
+ * is granted only when the authorization request names it explicitly.
+ *
+ * To call the Leaflow API on behalf of a user, the application requests `iam`, and the user
+ * must then authorize the application for each project in which it is to act, as described
+ * in the Account API. Within an authorized project, the application holds exactly the
+ * permissions of the user and none beyond them. Members of this project must authorize the
+ * application in the same way as any other user.
  * @summary Create an application
  */
 export declare const CreateApplicationBody: zod.ZodObject<{

package/dist/iam/v1/generated/schemas.zod.js

@@ -295,8 +295,15 @@ export const ListApplicationsQueryParams = zod.strictObject({
  * The `secret` is present only for a confidential application, and only in this response.
  * It is not stored and cannot be read again; use `:rotateSecret` to obtain a new one.
  *
- * Any account of this platform may sign in to the application. Membership of this project
- * is confirmed only when a token is exchanged for a scoped token.
+ * Any account of this platform may sign in to the application and is always asked for
+ * consent. `profile` and `email` are granted at every sign-in; any other scope selected here
+ * is granted only when the authorization request names it explicitly.
+ *
+ * To call the Leaflow API on behalf of a user, the application requests `iam`, and the user
+ * must then authorize the application for each project in which it is to act, as described
+ * in the Account API. Within an authorized project, the application holds exactly the
+ * permissions of the user and none beyond them. Members of this project must authorize the
+ * application in the same way as any other user.
  * @summary Create an application
  */
 export const CreateApplicationBody = CreateApplicationRequestBody;

package/dist/iam/v1/generated/validators/createApplicationRequestBody.zod.js

@@ -26,5 +26,5 @@ export const CreateApplicationRequestBody = zod.strictObject({
     scopes: zod
         .array(zod.string())
         .optional()
-        .describe("The scopes the application may request. Omitted means the defaults, `profile` and `email`; a scope not in the platform's list is refused"),
+        .describe("The scopes the application may request. Omitted means the defaults, `profile` and `email`; a scope not in the platform's list is refused. `profile` and `email` are granted at every sign-in, and any other scope only when the authorization request names it explicitly"),
 });

package/dist/proto/leaflow/fleet/virtualdesktop/datatransfer/v1/datatransfer_pb.d.ts

@@ -8,6 +8,42 @@ import type { Message } from "@bufbuild/protobuf";
  */
 export declare const file_leaflow_fleet_virtualdesktop_datatransfer_v1_datatransfer: GenFile;
 /**
+ * Windows 原生表示不能仅按格式名合并：同一格式的 aspect、index 和介质各自独立。
+ * 无法用标准媒体类型完整表达的可序列化表示使用下列媒体类型（参数均为 ASCII）：
+ * application/x-leaflow-windows-format;name=<utf16hex>;aspect=<u32>;index=<i32>;medium=<kind>
+ * name 为格式名每个 UTF-16 单元的四位十六进制串，不含终止 NUL；接收端以名称重新
+ * 注册格式，不得跨机复用来源的注册号。非注册格式改用 id=<1..49151>，不得同时带 name。
+ * aspect、index、medium 必须显式存在，不得丢失、重复或以未知参数降级为其它格式。
+ * medium=bytes 为 HGLOBAL/IStream 的可序列化字节，medium=storage 为完整 Compound File
+ * Binary 表示，medium=emf 为 TYMED_ENHMF 的完整增强型图元文件记录，不得降为位图。
+ * 普通 CF_ENHMETAFILE 的内容表示使用 image/emf；其它 aspect/index 保留显式选择器。
+ * medium=file 为 TYMED_FILE 承载的某种格式的完整正文，不是 lpszFileName 或文件引用。
+ * 仅在读取该表示时打开来源本机介质，按块取得正文；空正文有效，读取失败不改用其它格式。
+ * 接收端按需创建独立的本机临时介质文件，文件名仅交给本机 OLE 目标，绝不跨机发送。
+ * 已交出的介质由自己的 STGMEDIUM/pUnkForRelease 持有，不随原声明或读取期结束提前删除；
+ * 最后一个介质引用释放时删除自己创建的临时文件。来源介质仍按原 STGMEDIUM 的规则释放。
+ * medium=metafile-picture 为 TYMED_MFPICT：先依次编码 mm、xExt、yExt 三个 i32 小端数，
+ * 随后是完整 WMF 记录；不得发送 METAFILEPICT 的本机结构、对齐填充或 hMF 句柄。
+ * medium=gdi 为 TYMED_GDI：先编码对象种类 u32 小端数，7 为位图，5 为调色板。
+ * 位图随后为 40 字节 BITMAPINFOHEADER、BI_BITFIELDS 所需的三个颜色掩码、声明的
+ * RGBQUAD 颜色表及 DWORD 对齐的完整像素行；仅使用 BI_RGB 或 BI_BITFIELDS，保留
+ * 有效色深和像素，biSizeImage 精确等于像素长度，不含 BMP 文件头或本机指针。
+ * 调色板随后为 LOGPALETTE：version=0x300、条目数两个 u16 小端数，再依次编码每个
+ * PALETTEENTRY 的 red、green、blue、flags 四字节，接收端创建新的本机 GDI 对象。
+ * FORMATETC 的非空 ptd 另以可选 device=<bytehex> 参数声明整个 DVTARGETDEVICE；
+ * 每字节两个十六进制字符，包含 tdSize 指定的完整描述、DEVMODE 和驱动私有尾部。
+ * 省略 device 表示空 ptd；长度和内部偏移必须有效，不得把畸形或重复参数降级为普通
+ * 注册格式。设备描述也是表示身份，枚举、读取、缓存和重建不得合并不同 device。
+ * 各次原生枚举交出独立、可由 COM 分配器释放的副本；不得预读正文来取得该声明。
+ * 设备描述仅供保留和匹配，不得据此加载来源驱动或创建来源设备，也不进入日志。
+ * 本机介质与以完整媒体类型名提供的原始 HGLOBAL/IStream 字节表示可同时存在；
+ * 两者声明同一跨机格式时优先读取原始序列化字节，不得先经过本机 GDI 编组而改变
+ * 像素、色表、掩码或其它记录。两种本机表示共用同一媒体类型、读取期和数据通道。
+ * 接收端从记录重建介质，绝不把原生句柄、指针、COM 接口或源文件路径当正文。
+ * CF_HDROP(id=15)、FileContents、FileGroupDescriptor、PIDL、FileName 等文件/路径格式及
+ * 拖放控制格式仍归 filetransfer 或拖放适配，不得用此媒体类型绕过文件引用和权限。
+ * 原生声明和取得流引用不能预读正文；各表示继续独立按需读取、校验和取消。
+ *
  * Data of one format.
  *
  * @generated from message leaflow.fleet.virtualdesktop.datatransfer.v1.DataTransferItem
@@ -193,9 +229,10 @@ export type ClipboardFormatList = Message<"leaflow.fleet.virtualdesktop.datatran
      */
     items: DataTransferItem[];
     /**
-     * Files copied. The receiver fetches them as for any offer, with
-     * FileTransferRequest.clipboard set, and puts verified local copies on its
-     * clipboard; paths of the source never travel.
+     * 文件复制的首个独立文件操作。接收方按需取得正文，设置
+     * FileTransferRequest.clipboard，并仅发布本机引用，不传来源机器的路径。
+     * 该操作的完成、跳过或取消不结束复制声明；同一有效 sequence 的后续
+     * 粘贴通过 DataRequest.files 取得新的操作，不复用已结算的 transfer_id。
      *
      * @generated from field: leaflow.fleet.filetransfer.v1.FileTransferOffer file_offer = 5;
      */
@@ -946,8 +983,12 @@ export type DataRequest = Message<"leaflow.fleet.virtualdesktop.datatransfer.v1.
         case: "mimeType";
     } | {
         /**
-         * The offer of the dragged files, of a drag that announced
-         * files_available. Must be true.
+         * 必须为 true。拖放读取已声明 files_available 的来源；剪贴板读取
+         * 原 ClipboardFormatList.file_offer 对应的同一复制声明。
+         * 剪贴板每次成功读取均返回新的 transfer_id，保留原清单的 file_id、
+         * parent_id、元数据与来源文件版本，不重新扫描目录或换用当前的新复制。
+         * 读取仍检查方向权限和连接代际；复制已被替换时返回 ABORTED。
+         * 已接受的文件引用可独立完成；本次文件操作不能撤销其它读取或复制声明。
          *
          * @generated from field: bool files = 4;
          */
@@ -1364,7 +1405,8 @@ export type DragPolicy = Message<"leaflow.fleet.virtualdesktop.datatransfer.v1.D
      */
     allowedMimeTypes: string[];
     /**
-     * The longest a drag may last, at most 5 minutes. Unset or 0: no drags.
+     * DragDrop 之前物理手势的最长时间，至多 5 分钟；未设置或 0 表示不能拖拽。
+     * 已受理的原生确认、格式读取及文件交付不受旧手势时限约束，不代表放宽当前权限。
      *
      * @generated from field: google.protobuf.Duration max_duration = 4;
      */

package/dist/routes.d.ts

@@ -142,6 +142,38 @@ export declare const routes: readonly [{
     readonly operationId: "revoke-ssh-key";
     readonly securityScheme: "AccessToken";
     readonly upstreamUrl: "https://account.leaflow.cloud";
+}, {
+    readonly service: "account";
+    readonly contract: "account";
+    readonly method: "GET";
+    readonly path: "/account/v1/applications/{clientId}";
+    readonly operationId: "get-application";
+    readonly securityScheme: "AccessToken";
+    readonly upstreamUrl: "https://account.leaflow.cloud";
+}, {
+    readonly service: "account";
+    readonly contract: "account";
+    readonly method: "GET";
+    readonly path: "/account/v1/me/authorized-applications";
+    readonly operationId: "list-authorized-applications";
+    readonly securityScheme: "AccessToken";
+    readonly upstreamUrl: "https://account.leaflow.cloud";
+}, {
+    readonly service: "account";
+    readonly contract: "account";
+    readonly method: "POST";
+    readonly path: "/account/v1/me/authorized-applications";
+    readonly operationId: "authorize-application";
+    readonly securityScheme: "AccessToken";
+    readonly upstreamUrl: "https://account.leaflow.cloud";
+}, {
+    readonly service: "account";
+    readonly contract: "account";
+    readonly method: "DELETE";
+    readonly path: "/account/v1/me/authorized-applications/{authorizationId}";
+    readonly operationId: "revoke-authorized-application";
+    readonly securityScheme: "AccessToken";
+    readonly upstreamUrl: "https://account.leaflow.cloud";
 }, {
     readonly service: "account";
     readonly contract: "account";

package/dist/routes.js

@@ -162,6 +162,42 @@ export const routes = [
         securityScheme: "AccessToken",
         upstreamUrl: "https://account.leaflow.cloud",
     },
+    {
+        service: "account",
+        contract: "account",
+        method: "GET",
+        path: "/account/v1/applications/{clientId}",
+        operationId: "get-application",
+        securityScheme: "AccessToken",
+        upstreamUrl: "https://account.leaflow.cloud",
+    },
+    {
+        service: "account",
+        contract: "account",
+        method: "GET",
+        path: "/account/v1/me/authorized-applications",
+        operationId: "list-authorized-applications",
+        securityScheme: "AccessToken",
+        upstreamUrl: "https://account.leaflow.cloud",
+    },
+    {
+        service: "account",
+        contract: "account",
+        method: "POST",
+        path: "/account/v1/me/authorized-applications",
+        operationId: "authorize-application",
+        securityScheme: "AccessToken",
+        upstreamUrl: "https://account.leaflow.cloud",
+    },
+    {
+        service: "account",
+        contract: "account",
+        method: "DELETE",
+        path: "/account/v1/me/authorized-applications/{authorizationId}",
+        operationId: "revoke-authorized-application",
+        securityScheme: "AccessToken",
+        upstreamUrl: "https://account.leaflow.cloud",
+    },
     {
         service: "account",
         contract: "account",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leaflow/sdk",
-  "version": "0.207.0",
+  "version": "0.209.0",
   "description": "Leaflow 平台 API 的 TypeScript SDK",
   "license": "MIT",
   "repository": {

package/dist/compute/v2/generated/validators/rescueInstanceRequestBody.zod.d.ts

@@ -1,42 +0,0 @@
-/**
- * Generated by orval 🍺
- * Do not edit manually.
- * Leaflow Compute API
- * Leaflow Compute user API for managing instances, volumes, snapshots, volume backups, public and private images, virtual private clouds, subnets, routes, security groups, network interfaces and elastic IPs.
- *
- * ## Authentication
- *
- * Every request carries a scoped token; see the `scopedTokenAuth` security scheme. The catalog reads, which list and retrieve regions, availability zones, instance types, volume types, public images and elastic IP lines, also answer without a token, so a visitor can configure a purchase and price it with Billing before signing in. A token given to them is still verified, and an invalid one is refused.
- *
- * ## Conventions
- *
- * - **Purchases.** A purchase that creates resources returns them together with the `checkout_session_id` of its Billing Checkout Session and, once checkout completes, its `order_id`. They are readable at once and start as `pending`: checkout may not be complete, the order has not been accepted, nothing exists in the cloud, no inventory such as an address is held, and fields known only after allocation, such as addresses, are null. Once Billing accepts the order, the resource is created: it stays `pending`, then reaches its usual status, such as `running` or `available`. When the Checkout Session expires, the order is declined, canceled or expires, or creation fails, the resource ends `failed` and `failure_reason` states why; the charge for a resource that failed after acceptance is refunded. A purchased change, such as a resize requested with `instance_type_id`, `size_gib` or `bandwidth_mbps` on the resource, returns the resource unchanged with the Checkout Session for the change, and applies once its order is accepted.
- * - **Commercial terms.** Compute catalogs describe technical specifications and, for each order line a purchase makes, how it is sold in Billing (a `BillingComponent`: its Plan, dimensions, what its quantity counts and what its meters read); prices, amounts and currency belong to Billing. A purchase chooses its terms with `billing`, and Billing selects the matching price. Read prices and their rates with Billing's `search-prices` from those components, quote a proposed purchase with `get-quote`, and a change of a resource by its `subscription_id`; Compute has no quote or price proxy endpoint and returns no amounts.
- * - **Checkout.** `checkout` is passed to Billing unchanged. Omit it for automatic checkout, which completes checkout within the request and pays from eligible credit grants and balance; insufficient funds refuse the request with HTTP 422 `BILLING_INSUFFICIENT_FUNDS`, and nothing is created. With `checkout.mode` set to `deferred`, the resources are returned `pending` with an open Checkout Session and no order, even for a zero total; nothing is created until the customer completes checkout in Billing, where a promotion code can be applied, and the order is paid. Do not submit the purchase again after paying; after an uncertain response, look the Checkout Session up in Billing first.
- * - **Quotas.** A creation, purchase or resize that adds to what a project holds in a region is checked against the project's quota there before anything is ordered or created, and is refused with HTTP 409 `COMPUTE_PROJECT_QUOTA_EXCEEDED`, whose `meta` names the `resource`, its `limit`, the amount `used` and the amount `requested`. An instance purchase counts the volumes, the new primary network interface and the new elastic IP bought with each instance. Read the limits with `list-quotas`; a limit no operator set is the platform default.
- * - **Projects.** Resource ownership and project identifiers refer to IAM platform projects, not OpenStack tenants. Instances, images and networks share one infrastructure OpenStack project; the platform project remains the authorization and ownership boundary.
- * - **Custom methods.** An action that is not one of the standard methods (list, get, create, update, delete) is a custom method, `POST` on the resource's path followed by `:` and the verb, as in `POST /api/v2/instances/{id}:reboot` (AIP-136). A state is changed by its custom method, never by writing the state: `:start` and `:stop`, `:rescue` and `:unrescue`, `:associate` and `:disassociate`.
- * - **Operations.** Requests such as `:start`, attaching or deleting return HTTP 202 with the resource as it is when the request is accepted. While an operation runs, the resource's `status` names it, as in `starting` or `deleting`; once it has finished the resource shows its new status and the result. A resource with an operation in progress refuses another operation with HTTP 409 `COMPUTE_RESOURCE_BUSY`; an operation involving two resources, such as attaching a volume, is refused when either has one. A purchased change, such as a resize, is an operation from the moment its Checkout Session is created until the change is applied, the session expires or its order is canceled. Renaming and replacing labels or notes are not operations and are accepted at any time. **Updating.** A `PATCH` carries only mutable fields, all optional and at least one given, and answers 200 when only descriptive fields changed and 202 when an operation started. An operational field (`instance_type_id`, `size_gib`, `bandwidth_mbps`) cannot be combined with any other field in the same request: it is refused with 422 `UPDATE_FIELDS_COMBINED`, because a rename that committed beside a change that was then refused would leave the request half applied.
- * - **Billing relationships.** A purchased resource records its `checkout_session_id` and, once checkout completes, its `order_id`, `order_item_id` and `subscription_id`. Its `access_state` is `pending` until the order is accepted and delivery settles it, then `enabled`; a subscription that lapses suspends or reclaims the resource it pays for. Deleting a resource that subscriptions pay for cancels the subscriptions of its `release_set` in Billing, and the deletion answers with that cancellation.
- * - **Availability zones.** A volume and an instance must reside in the same availability zone to be attached. An instance type and a volume type each belong to one availability zone, as on GCP, so a purchase names the type and the type names the zone; the volumes bought with an instance have to be of types of the instance type's zone.
- * - **IPv6 is routed, not translated.** A virtual private cloud with IPv6 holds a /56 and each of its subnets a /64 of it, as on Alibaba Cloud, Tencent Cloud and Azure; IPv6 and its security groups require no EIP or NAT gateway. EIP and NATGateway are IPv4 products; IPv6 EIP, NAT66 and IPv6 port forwarding are not supported.
- * - **Elastic IP release.** A released address returns to available inventory as soon as its cleanup is confirmed, with no cooldown period. Removing or replacing an elastic IP's association keeps the address held by the project and does not release it.
- * - **Passwords are returned once.** A password generated by the platform during creation or rebuild appears only in that response. Store it immediately.
- *
- * ## Resource identifiers
- *
- * Compute resource IDs use the fixed TypeID prefix declared in their schema. UUID text is not accepted for these resource IDs. Project, order, subscription and Billing Plan identifiers remain UUIDs. Historical operation-log subject IDs are audit facts and are not rewritten.
- *
- * ## Error meta
- *
- * Resource identifiers in an error's `meta` (`resource_id`, `volume_id`, `network_interface_id` and the like) are TypeIDs, in the same form as the identifiers in resources. `meta.resource_type` is the resource's name as written in paths, with underscores: `instance`, `volume`, `elastic_ip`, `network_interface`, `virtual_private_cloud`, `private_image`, `volume_backup`, and so on.
- * OpenAPI spec version: 2.0.0
- */
-import * as zod from "zod";
-export declare const rescueInstanceRequestBodyPasswordMin = 12;
-export declare const rescueInstanceRequestBodyPasswordMax = 128;
-export declare const RescueInstanceRequestBody: zod.ZodObject<{
-    password: zod.ZodString;
-}, zod.z.core.$strict>;
-export type RescueInstanceRequestBody = zod.input<typeof RescueInstanceRequestBody>;
-export type RescueInstanceRequestBodyOutput = zod.output<typeof RescueInstanceRequestBody>;