@meetkai/mka1 0.51.15 → 0.51.16

package/dist/esm/sdk/secrets.d.ts

@@ -23,5 +23,12 @@ export declare class Secrets extends ClientSDK {
      * Delete a secret.
      */
     delete(request: operations.DeleteSecretRequest, options?: RequestOptions): Promise<void>;
+    /**
+     * Get a secret
+     *
+     * @remarks
+     * Retrieve secret metadata: key names and allowed use. Values are never returned.
+     */
+    get(request: operations.GetSecretRequest, options?: RequestOptions): Promise<components.Secret>;
 }
 //# sourceMappingURL=secrets.d.ts.map

package/dist/esm/sdk/secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../src/sdk/secrets.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAC5D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,OAAQ,SAAQ,SAAS;IACpC;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,kBAAkB,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;IAQjC;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;IAQ7B;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC;CAOjB"}
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../src/sdk/secrets.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAC5D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,OAAQ,SAAQ,SAAS;IACpC;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,kBAAkB,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;IAQjC;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;IAQ7B;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC;IAQhB;;;;;OAKG;IACG,GAAG,CACP,OAAO,EAAE,UAAU,CAAC,gBAAgB,EACpC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;CAO9B"}

package/dist/esm/sdk/secrets.js

@@ -3,6 +3,7 @@
  */
 import { servingSecretsCreate } from "../funcs/servingSecretsCreate.js";
 import { servingSecretsDelete } from "../funcs/servingSecretsDelete.js";
+import { servingSecretsGet } from "../funcs/servingSecretsGet.js";
 import { servingSecretsList } from "../funcs/servingSecretsList.js";
 import { ClientSDK } from "../lib/sdks.js";
 import { unwrapAsync } from "../types/fp.js";
@@ -34,5 +35,14 @@ export class Secrets extends ClientSDK {
     async delete(request, options) {
         return unwrapAsync(servingSecretsDelete(this, request, options));
     }
+    /**
+     * Get a secret
+     *
+     * @remarks
+     * Retrieve secret metadata: key names and allowed use. Values are never returned.
+     */
+    async get(request, options) {
+        return unwrapAsync(servingSecretsGet(this, request, options));
+    }
 }
 //# sourceMappingURL=secrets.js.map

package/dist/esm/sdk/secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../src/sdk/secrets.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,OAAO,OAAQ,SAAQ,SAAS;IACpC;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAAsC,EACtC,OAAwB;QAExB,OAAO,WAAW,CAAC,kBAAkB,CACnC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAAwB;QAExB,OAAO,WAAW,CAAC,oBAAoB,CACrC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAAwB;QAExB,OAAO,WAAW,CAAC,oBAAoB,CACrC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../src/sdk/secrets.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,OAAO,OAAQ,SAAQ,SAAS;IACpC;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAAsC,EACtC,OAAwB;QAExB,OAAO,WAAW,CAAC,kBAAkB,CACnC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAAwB;QAExB,OAAO,WAAW,CAAC,oBAAoB,CACrC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAAwB;QAExB,OAAO,WAAW,CAAC,oBAAoB,CACrC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CACP,OAAoC,EACpC,OAAwB;QAExB,OAAO,WAAW,CAAC,iBAAiB,CAClC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;CACF"}

package/jsr.json

@@ -2,7 +2,7 @@
 
 {
   "name": "@meetkai/mka1",
-  "version": "0.51.15",
+  "version": "0.51.16",
   "exports": {
     ".": "./src/index.ts",    
     "./models/errors": "./src/models/errors/index.ts",    

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meetkai/mka1",
-  "version": "0.51.15",
+  "version": "0.51.16",
   "author": "Daniel Wilder <dauncy@gmail.com>",
   "homepage": "https://docs.mka1.com",
   "publishConfig": {

package/src/funcs/servingFinetuneJobsCreate.ts

@@ -178,7 +178,7 @@ async function $do(
     | SDKValidationError
   >(
     M.json(201, components.FinetuneJob$inboundSchema),
-    M.jsonErr(403, errors.ServingError$inboundSchema),
+    M.jsonErr([403, 409], errors.ServingError$inboundSchema),
     M.jsonErr(422, errors.ServingHTTPValidationError$inboundSchema),
     M.fail([401, "4XX"]),
     M.fail("5XX"),

package/src/funcs/servingSecretsGet.ts

@@ -0,0 +1,196 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { SDKCore } from "../core.js";
+import { encodeSimple } from "../lib/encodings.js";
+import { matchStatusCode } from "../lib/http.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import * as components from "../models/components/index.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKError } from "../models/errors/sdkerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import * as operations from "../models/operations/index.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * Get a secret
+ *
+ * @remarks
+ * Retrieve secret metadata: key names and allowed use. Values are never returned.
+ */
+export function servingSecretsGet(
+  client: SDKCore,
+  request: operations.GetSecretRequest,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    components.Secret,
+    | errors.ServingError
+    | errors.ServingHTTPValidationError
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: SDKCore,
+  request: operations.GetSecretRequest,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      components.Secret,
+      | errors.ServingError
+      | errors.ServingHTTPValidationError
+      | SDKError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) => operations.GetSecretRequest$outboundSchema.parse(value),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+
+  const pathParams = {
+    secret_id: encodeSimple("secret_id", payload.secret_id, {
+      explode: false,
+      charEncoding: "percent",
+    }),
+  };
+  const path = pathToFunc("/api/v1/serving/secrets/{secret_id}")(pathParams);
+
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple(
+      "X-On-Behalf-Of",
+      payload["X-On-Behalf-Of"],
+      { explode: false, charEncoding: "none" },
+    ),
+  }));
+
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "getSecret",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || {
+        strategy: "backoff",
+        backoff: {
+          initialInterval: 500,
+          maxInterval: 5000,
+          exponent: 1.5,
+          maxElapsedTime: 15000,
+        },
+        retryConnectionErrors: true,
+      }
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode: number) =>
+      matchStatusCode({ status: statusCode } as Response, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req },
+  };
+
+  const [result] = await M.match<
+    components.Secret,
+    | errors.ServingError
+    | errors.ServingHTTPValidationError
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(200, components.Secret$inboundSchema),
+    M.jsonErr([403, 404], errors.ServingError$inboundSchema),
+    M.jsonErr(422, errors.ServingHTTPValidationError$inboundSchema),
+    M.fail([401, "4XX"]),
+    M.fail("5XX"),
+  )(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/lib/config.ts

@@ -65,7 +65,7 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 export const SDK_METADATA = {
   language: "typescript",
   openapiDocVersion: "1.1.0",
-  sdkVersion: "0.51.15",
+  sdkVersion: "0.51.16",
   genVersion: "2.918.4",
-  userAgent: "speakeasy-sdk/typescript 0.51.15 2.918.4 1.1.0 @meetkai/mka1",
+  userAgent: "speakeasy-sdk/typescript 0.51.16 2.918.4 1.1.0 @meetkai/mka1",
 } as const;

package/src/mcp-server/mcp-server.ts

@@ -19,7 +19,7 @@ const routes = buildRouteMap({
 export const app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.51.15",
+    currentVersion: "0.51.16",
   },
 });
 

package/src/mcp-server/server.ts

@@ -338,6 +338,7 @@ import { tool$servingRecipesRegister } from "./tools/servingRecipesRegister.js";
 import { tool$servingRecipesSetEnabled } from "./tools/servingRecipesSetEnabled.js";
 import { tool$servingSecretsCreate } from "./tools/servingSecretsCreate.js";
 import { tool$servingSecretsDelete } from "./tools/servingSecretsDelete.js";
+import { tool$servingSecretsGet } from "./tools/servingSecretsGet.js";
 import { tool$servingSecretsList } from "./tools/servingSecretsList.js";
 import { tool$servingSpendGet } from "./tools/servingSpendGet.js";
 import { tool$servingTenantsDeleteOrganization } from "./tools/servingTenantsDeleteOrganization.js";
@@ -362,7 +363,7 @@ export function createMCPServer(deps: {
 }) {
   const server = new McpServer({
     name: "SDK",
-    version: "0.51.15",
+    version: "0.51.16",
   });
 
   const client = new SDKCore({
@@ -720,6 +721,7 @@ export function createMCPServer(deps: {
   tool(tool$servingSecretsList);
   tool(tool$servingSecretsCreate);
   tool(tool$servingSecretsDelete);
+  tool(tool$servingSecretsGet);
   tool(tool$servingSpendGet);
   tool(tool$servingTenantsList);
   tool(tool$servingTenantsGet);

package/src/mcp-server/tools/servingSecretsGet.ts

@@ -0,0 +1,37 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { servingSecretsGet } from "../../funcs/servingSecretsGet.js";
+import * as operations from "../../models/operations/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: operations.GetSecretRequest$inboundSchema,
+};
+
+export const tool$servingSecretsGet: ToolDefinition<typeof args> = {
+  name: "serving-secrets-get",
+  description: `Get a secret
+
+Retrieve secret metadata: key names and allowed use. Values are never returned.`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await servingSecretsGet(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/models/components/deploymentcreate.ts

@@ -95,6 +95,9 @@ export type DeploymentCreate = {
    * Create-time scaling. Omitted min_containers defaults to one; explicit zero is preserved.
    */
   scaling?: DeploymentScalingCreate | undefined;
+  /**
+   * Each referenced secret must include "serving" in its allowed_use.
+   */
   secrets?: Array<string> | undefined;
   /**
    * How a config change or rollback is rolled out.

package/src/models/components/finetunejobcreate.ts

@@ -59,6 +59,9 @@ export type FinetuneJobCreate = {
    * Volume where checkpoints are written
    */
   outputVolume: string;
+  /**
+   * Each referenced secret must include "finetune" in its allowed_use.
+   */
   secrets?: Array<string> | undefined;
 };
 

package/src/models/components/metrics.ts

@@ -12,11 +12,10 @@ import { SDKValidationError } from "../errors/sdkvalidationerror.js";
  * Live serving metrics for a deployment.
  */
 export type Metrics = {
-  acceleratorMemoryUsedMb: number;
   /**
-   * 0.0–1.0 across replicas
+   * 0.0–1.0 serving-engine KV-cache usage averaged across Ready replicas
    */
-  acceleratorUtilization: number;
+  kvCacheUtilization: number;
   /**
    * Requests waiting for a free replica
    */
@@ -28,23 +27,20 @@ export type Metrics = {
 /** @internal */
 export const Metrics$inboundSchema: z.ZodType<Metrics, z.ZodTypeDef, unknown> =
   z.object({
-    accelerator_memory_used_mb: z.number().int(),
-    accelerator_utilization: z.number(),
+    kv_cache_utilization: z.number(),
     queue_backlog: z.number().int(),
     replicas: z.number().int(),
     requests_per_second: z.number(),
   }).transform((v) => {
     return remap$(v, {
-      "accelerator_memory_used_mb": "acceleratorMemoryUsedMb",
-      "accelerator_utilization": "acceleratorUtilization",
+      "kv_cache_utilization": "kvCacheUtilization",
       "queue_backlog": "queueBacklog",
       "requests_per_second": "requestsPerSecond",
     });
   });
 /** @internal */
 export type Metrics$Outbound = {
-  accelerator_memory_used_mb: number;
-  accelerator_utilization: number;
+  kv_cache_utilization: number;
   queue_backlog: number;
   replicas: number;
   requests_per_second: number;
@@ -56,15 +52,13 @@ export const Metrics$outboundSchema: z.ZodType<
   z.ZodTypeDef,
   Metrics
 > = z.object({
-  acceleratorMemoryUsedMb: z.number().int(),
-  acceleratorUtilization: z.number(),
+  kvCacheUtilization: z.number(),
   queueBacklog: z.number().int(),
   replicas: z.number().int(),
   requestsPerSecond: z.number(),
 }).transform((v) => {
   return remap$(v, {
-    acceleratorMemoryUsedMb: "accelerator_memory_used_mb",
-    acceleratorUtilization: "accelerator_utilization",
+    kvCacheUtilization: "kv_cache_utilization",
     queueBacklog: "queue_backlog",
     requestsPerSecond: "requests_per_second",
   });

package/src/models/components/model.ts

@@ -13,6 +13,10 @@ import { SDKValidationError } from "../errors/sdkvalidationerror.js";
  */
 export type Model = {
   createdAt: Date;
+  /**
+   * Managed runtime recipes that can serve this model one-click; empty means the model is not deployable via a managed runtime (preflight signal, not a create-time error)
+   */
+  deployableRuntimes: Array<string>;
   id: string;
   name: string;
   revision?: string | null | undefined;
@@ -25,6 +29,7 @@ export const Model$inboundSchema: z.ZodType<Model, z.ZodTypeDef, unknown> = z
     created_at: z.string().datetime({ offset: true }).transform(v =>
       new Date(v)
     ),
+    deployable_runtimes: z.array(z.string()),
     id: z.string(),
     name: z.string(),
     revision: z.nullable(z.string()).optional(),
@@ -32,11 +37,13 @@ export const Model$inboundSchema: z.ZodType<Model, z.ZodTypeDef, unknown> = z
   }).transform((v) => {
     return remap$(v, {
       "created_at": "createdAt",
+      "deployable_runtimes": "deployableRuntimes",
     });
   });
 /** @internal */
 export type Model$Outbound = {
   created_at: string;
+  deployable_runtimes: Array<string>;
   id: string;
   name: string;
   revision?: string | null | undefined;
@@ -50,6 +57,7 @@ export const Model$outboundSchema: z.ZodType<
   Model
 > = z.object({
   createdAt: z.date().transform(v => v.toISOString()),
+  deployableRuntimes: z.array(z.string()),
   id: z.string(),
   name: z.string(),
   revision: z.nullable(z.string()).optional(),
@@ -57,6 +65,7 @@ export const Model$outboundSchema: z.ZodType<
 }).transform((v) => {
   return remap$(v, {
     createdAt: "created_at",
+    deployableRuntimes: "deployable_runtimes",
   });
 });
 

package/src/models/components/secret.ts

@@ -5,13 +5,24 @@
 import * as z from "zod/v3";
 import { remap as remap$ } from "../../lib/primitives.js";
 import { safeParse } from "../../lib/schemas.js";
+import { ClosedEnum } from "../../types/enums.js";
 import { Result as SafeParseResult } from "../../types/fp.js";
 import { SDKValidationError } from "../errors/sdkvalidationerror.js";
 
+export const AllowedUse = {
+  Finetune: "finetune",
+  Serving: "serving",
+} as const;
+export type AllowedUse = ClosedEnum<typeof AllowedUse>;
+
 /**
  * A secret. Only key names are ever returned, never values.
  */
 export type Secret = {
+  /**
+   * Products that may resolve this secret into a workload environment
+   */
+  allowedUse: Array<AllowedUse>;
   createdAt: Date;
   id: string;
   /**
@@ -21,9 +32,17 @@ export type Secret = {
   name: string;
 };
 
+/** @internal */
+export const AllowedUse$inboundSchema: z.ZodNativeEnum<typeof AllowedUse> = z
+  .nativeEnum(AllowedUse);
+/** @internal */
+export const AllowedUse$outboundSchema: z.ZodNativeEnum<typeof AllowedUse> =
+  AllowedUse$inboundSchema;
+
 /** @internal */
 export const Secret$inboundSchema: z.ZodType<Secret, z.ZodTypeDef, unknown> = z
   .object({
+    allowed_use: z.array(AllowedUse$inboundSchema),
     created_at: z.string().datetime({ offset: true }).transform(v =>
       new Date(v)
     ),
@@ -32,11 +51,13 @@ export const Secret$inboundSchema: z.ZodType<Secret, z.ZodTypeDef, unknown> = z
     name: z.string(),
   }).transform((v) => {
     return remap$(v, {
+      "allowed_use": "allowedUse",
       "created_at": "createdAt",
     });
   });
 /** @internal */
 export type Secret$Outbound = {
+  allowed_use: Array<string>;
   created_at: string;
   id: string;
   keys: Array<string>;
@@ -49,12 +70,14 @@ export const Secret$outboundSchema: z.ZodType<
   z.ZodTypeDef,
   Secret
 > = z.object({
+  allowedUse: z.array(AllowedUse$outboundSchema),
   createdAt: z.date().transform(v => v.toISOString()),
   id: z.string(),
   keys: z.array(z.string()),
   name: z.string(),
 }).transform((v) => {
   return remap$(v, {
+    allowedUse: "allowed_use",
     createdAt: "created_at",
   });
 });

package/src/models/components/secretcreate.ts

@@ -3,14 +3,26 @@
  */
 
 import * as z from "zod/v3";
+import { remap as remap$ } from "../../lib/primitives.js";
 import { safeParse } from "../../lib/schemas.js";
+import { ClosedEnum } from "../../types/enums.js";
 import { Result as SafeParseResult } from "../../types/fp.js";
 import { SDKValidationError } from "../errors/sdkvalidationerror.js";
 
+export const SecretCreateAllowedUse = {
+  Finetune: "finetune",
+  Serving: "serving",
+} as const;
+export type SecretCreateAllowedUse = ClosedEnum<typeof SecretCreateAllowedUse>;
+
 /**
  * Create a secret. Values are write-only and never returned.
  */
 export type SecretCreate = {
+  /**
+   * Products that may resolve this secret into a workload environment. Defaults to both when omitted.
+   */
+  allowedUse?: Array<SecretCreateAllowedUse> | undefined;
   /**
    * Key/value pairs injected as env vars
    */
@@ -18,17 +30,32 @@ export type SecretCreate = {
   name: string;
 };
 
+/** @internal */
+export const SecretCreateAllowedUse$inboundSchema: z.ZodNativeEnum<
+  typeof SecretCreateAllowedUse
+> = z.nativeEnum(SecretCreateAllowedUse);
+/** @internal */
+export const SecretCreateAllowedUse$outboundSchema: z.ZodNativeEnum<
+  typeof SecretCreateAllowedUse
+> = SecretCreateAllowedUse$inboundSchema;
+
 /** @internal */
 export const SecretCreate$inboundSchema: z.ZodType<
   SecretCreate,
   z.ZodTypeDef,
   unknown
 > = z.object({
+  allowed_use: z.array(SecretCreateAllowedUse$inboundSchema).optional(),
   data: z.record(z.string()),
   name: z.string(),
+}).transform((v) => {
+  return remap$(v, {
+    "allowed_use": "allowedUse",
+  });
 });
 /** @internal */
 export type SecretCreate$Outbound = {
+  allowed_use?: Array<string> | undefined;
   data: { [k: string]: string };
   name: string;
 };
@@ -39,8 +66,13 @@ export const SecretCreate$outboundSchema: z.ZodType<
   z.ZodTypeDef,
   SecretCreate
 > = z.object({
+  allowedUse: z.array(SecretCreateAllowedUse$outboundSchema).optional(),
   data: z.record(z.string()),
   name: z.string(),
+}).transform((v) => {
+  return remap$(v, {
+    allowedUse: "allowed_use",
+  });
 });
 
 export function secretCreateToJSON(secretCreate: SecretCreate): string {

package/src/models/components/spendsummary.ts

@@ -21,13 +21,13 @@ import {
 } from "./spendwindow.js";
 
 /**
- * Aggregate spend computed as price × runtime overlap with the window; derived on read, never stored.
+ * Aggregate spend computed as price × runtime overlap with the window; derived on read, never stored. The deployments group is present only on clusters where the deployments product is available; fine-tune-only clusters return the finetune group alone.
  */
 export type SpendSummary = {
   /**
    * Aggregate spend for one resource class.
    */
-  deployments: SpendGroup;
+  deployments?: SpendGroup | undefined;
   /**
    * Aggregate spend for one resource class.
    */
@@ -48,7 +48,7 @@ export const SpendSummary$inboundSchema: z.ZodType<
   z.ZodTypeDef,
   unknown
 > = z.object({
-  deployments: SpendGroup$inboundSchema,
+  deployments: SpendGroup$inboundSchema.optional(),
   finetune: SpendGroup$inboundSchema,
   total_usd: z.number(),
   window: SpendWindow$inboundSchema,
@@ -59,7 +59,7 @@ export const SpendSummary$inboundSchema: z.ZodType<
 });
 /** @internal */
 export type SpendSummary$Outbound = {
-  deployments: SpendGroup$Outbound;
+  deployments?: SpendGroup$Outbound | undefined;
   finetune: SpendGroup$Outbound;
   total_usd: number;
   window: SpendWindow$Outbound;
@@ -71,7 +71,7 @@ export const SpendSummary$outboundSchema: z.ZodType<
   z.ZodTypeDef,
   SpendSummary
 > = z.object({
-  deployments: SpendGroup$outboundSchema,
+  deployments: SpendGroup$outboundSchema.optional(),
   finetune: SpendGroup$outboundSchema,
   totalUsd: z.number(),
   window: SpendWindow$outboundSchema,