@ninedeploy/schemas 0.2.4 → 0.3.0

package/dist/service.d.ts

@@ -10,9 +10,13 @@ export declare const buildPack: z.ZodEnum<{
     nixpacks: "nixpacks";
 }>;
 export declare const createService: z.ZodObject<{
-    projectId: z.ZodOptional<z.ZodNumber>;
+    templateId: z.ZodOptional<z.ZodString>;
+    tagProjectIds: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+    tagWorkspaceIds: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+    tagLabelIds: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
     name: z.ZodString;
     slug: z.ZodOptional<z.ZodString>;
+    reuseExisting: z.ZodOptional<z.ZodBoolean>;
     type: z.ZodDefault<z.ZodEnum<{
         compose: "compose";
         docker: "docker";
@@ -58,7 +62,9 @@ export type CreateService = z.infer<typeof createService>;
  * still applies `.default()` values for absent keys, which would silently
  * rewrite `type` back to 'docker' and `branch` to 'main' on every PATCH. */
 export declare const updateService: z.ZodObject<{
-    projectId: z.ZodOptional<z.ZodNumber>;
+    tagProjectIds: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+    tagWorkspaceIds: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+    tagLabelIds: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
     name: z.ZodOptional<z.ZodString>;
     slug: z.ZodOptional<z.ZodString>;
     type: z.ZodOptional<z.ZodEnum<{
@@ -68,7 +74,7 @@ export declare const updateService: z.ZodObject<{
     }>>;
     repoUrl: z.ZodOptional<z.ZodURL>;
     branch: z.ZodOptional<z.ZodString>;
-    sourceId: z.ZodOptional<z.ZodNumber>;
+    sourceId: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     serverId: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     image: z.ZodOptional<z.ZodString>;
     volumeMount: z.ZodOptional<z.ZodString>;
@@ -106,7 +112,24 @@ export type CreateServiceInput = z.input<typeof createService>;
 export type UpdateServiceInput = z.input<typeof updateService>;
 export declare const service: z.ZodObject<{
     id: z.ZodNumber;
-    projectId: z.ZodNullable<z.ZodNumber>;
+    projectIds: z.ZodArray<z.ZodNumber>;
+    workspaceIds: z.ZodArray<z.ZodNumber>;
+    labelIds: z.ZodArray<z.ZodNumber>;
+    projects: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodNumber;
+        name: z.ZodString;
+        slug: z.ZodString;
+    }, z.core.$strip>>>;
+    workspaces: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodNumber;
+        name: z.ZodString;
+        slug: z.ZodString;
+    }, z.core.$strip>>>;
+    labels: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodNumber;
+        name: z.ZodString;
+        color: z.ZodString;
+    }, z.core.$strip>>>;
     serverId: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     name: z.ZodString;
     slug: z.ZodString;
@@ -126,6 +149,7 @@ export declare const service: z.ZodObject<{
     repoUrl: z.ZodNullable<z.ZodString>;
     branch: z.ZodString;
     sourceId: z.ZodNullable<z.ZodNumber>;
+    sourceName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     image: z.ZodNullable<z.ZodString>;
     volumeMount: z.ZodNullable<z.ZodString>;
     composeService: z.ZodNullable<z.ZodString>;
@@ -186,8 +210,10 @@ export declare const source: z.ZodObject<{
     type: z.ZodString;
     hasToken: z.ZodBoolean;
     hasDeployKey: z.ZodBoolean;
+    registryUsername: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     defaultBranch: z.ZodNullable<z.ZodString>;
     createdAt: z.ZodString;
+    updatedAt: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type Source = z.infer<typeof source>;
 export declare const triggerDeploy: z.ZodObject<{
@@ -263,6 +289,7 @@ export declare const webhook: z.ZodObject<{
     branch: z.ZodString;
     active: z.ZodBoolean;
     watchPaths: z.ZodString;
+    sourceId: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     url: z.ZodString;
     createdAt: z.ZodString;
 }, z.core.$strip>;
@@ -273,6 +300,7 @@ export declare const createdWebhook: z.ZodObject<{
     branch: z.ZodString;
     active: z.ZodBoolean;
     watchPaths: z.ZodString;
+    sourceId: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     url: z.ZodString;
     createdAt: z.ZodString;
     secret: z.ZodString;
@@ -293,6 +321,7 @@ export declare const createDatabase: z.ZodObject<{
     }>;
     version: z.ZodOptional<z.ZodString>;
     projectId: z.ZodOptional<z.ZodNumber>;
+    reuseExisting: z.ZodOptional<z.ZodBoolean>;
     existingVolume: z.ZodOptional<z.ZodString>;
     extensions: z.ZodOptional<z.ZodArray<z.ZodString>>;
     webGuiEnabled: z.ZodOptional<z.ZodBoolean>;
@@ -335,6 +364,7 @@ export type ManagedDatabase = z.infer<typeof managedDatabase>;
 export declare const createAttachment: z.ZodObject<{
     databaseId: z.ZodNumber;
     envAlias: z.ZodOptional<z.ZodString>;
+    reuseExisting: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type CreateAttachmentInput = z.input<typeof createAttachment>;
 export declare const attachment: z.ZodObject<{
@@ -352,6 +382,7 @@ export declare const upsertEnvVar: z.ZodObject<{
     key: z.ZodString;
     value: z.ZodString;
     isSecret: z.ZodOptional<z.ZodBoolean>;
+    overwriteExisting: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type UpsertEnvVarInput = z.input<typeof upsertEnvVar>;
 export declare const envVar: z.ZodObject<{
@@ -361,6 +392,36 @@ export declare const envVar: z.ZodObject<{
     isSecret: z.ZodBoolean;
 }, z.core.$strip>;
 export type EnvVar = z.infer<typeof envVar>;
+/** Create a new attachment. Exactly one of `volumeName` or `create.label`
+ *  must be present — the former attaches an existing managed volume, the
+ *  latter provisions a new one (system-generated name) and immediately
+ *  attaches it. */
+export declare const createServiceVolumeAttachment: z.ZodObject<{
+    volumeName: z.ZodOptional<z.ZodString>;
+    create: z.ZodOptional<z.ZodObject<{
+        label: z.ZodString;
+    }, z.core.$strip>>;
+    containerPath: z.ZodString;
+    readOnly: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type CreateServiceVolumeAttachmentInput = z.input<typeof createServiceVolumeAttachment>;
+/** PATCH shape — path and readOnly are optional, but at least one must change. */
+export declare const updateServiceVolumeAttachment: z.ZodObject<{
+    containerPath: z.ZodOptional<z.ZodString>;
+    readOnly: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type UpdateServiceVolumeAttachmentInput = z.input<typeof updateServiceVolumeAttachment>;
+/** API representation of a service's volume attachment. */
+export declare const serviceVolumeAttachment: z.ZodObject<{
+    id: z.ZodNumber;
+    serviceId: z.ZodNumber;
+    volumeName: z.ZodString;
+    containerPath: z.ZodString;
+    readOnly: z.ZodBoolean;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type ServiceVolumeAttachment = z.infer<typeof serviceVolumeAttachment>;
 export declare const setLimits: z.ZodObject<{
     cpuShares: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     memLimitMb: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -476,20 +537,38 @@ export type TopologyGraph = z.infer<typeof topologyGraph>;
 export declare const backup: z.ZodObject<{
     id: z.ZodNumber;
     databaseId: z.ZodNullable<z.ZodNumber>;
+    volumeName: z.ZodNullable<z.ZodString>;
+    scope: z.ZodEnum<{
+        db: "db";
+        volumes: "volumes";
+    }>;
     status: z.ZodString;
     sizeBytes: z.ZodNumber;
+    hasRemoteCopy: z.ZodOptional<z.ZodBoolean>;
     createdAt: z.ZodString;
 }, z.core.$strip>;
 export type Backup = z.infer<typeof backup>;
 export declare const backupWithDb: z.ZodObject<{
     id: z.ZodNumber;
     databaseId: z.ZodNullable<z.ZodNumber>;
+    volumeName: z.ZodNullable<z.ZodString>;
+    scope: z.ZodEnum<{
+        db: "db";
+        volumes: "volumes";
+    }>;
     status: z.ZodString;
     sizeBytes: z.ZodNumber;
+    hasRemoteCopy: z.ZodOptional<z.ZodBoolean>;
     createdAt: z.ZodString;
     databaseName: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>;
 export type BackupWithDb = z.infer<typeof backupWithDb>;
+/** Create a new volume backup. The `volumeName` is the route param; the
+ *  body only carries the `label` for human-friendly file naming. */
+export declare const createVolumeBackup: z.ZodObject<{
+    label: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type CreateVolumeBackupInput = z.input<typeof createVolumeBackup>;
 export declare const templateSummary: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;
@@ -497,6 +576,8 @@ export declare const templateSummary: z.ZodObject<{
     category: z.ZodString;
     emoji: z.ZodString;
     featured: z.ZodOptional<z.ZodBoolean>;
+    runtimeVerified: z.ZodOptional<z.ZodBoolean>;
+    verifiedAt: z.ZodOptional<z.ZodISODate>;
 }, z.core.$strip>;
 export type TemplateSummary = z.infer<typeof templateSummary>;
 export declare const template: z.ZodObject<{
@@ -517,6 +598,8 @@ export declare const template: z.ZodObject<{
     website: z.ZodOptional<z.ZodString>;
     docs: z.ZodOptional<z.ZodString>;
     featured: z.ZodOptional<z.ZodBoolean>;
+    runtimeVerified: z.ZodOptional<z.ZodBoolean>;
+    verifiedAt: z.ZodOptional<z.ZodISODate>;
     requires: z.ZodOptional<z.ZodString>;
     dbEngine: z.ZodOptional<z.ZodEnum<{
         clickhouse: "clickhouse";
@@ -529,10 +612,41 @@ export declare const template: z.ZodObject<{
         redis: "redis";
         valkey: "valkey";
     }>>;
+    databaseEnv: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        database: "database";
+        host: "host";
+        hostPort: "hostPort";
+        password: "password";
+        port: "port";
+        url: "url";
+        username: "username";
+    }>>>;
     cmd: z.ZodOptional<z.ZodArray<z.ZodString>>;
     dockerSocket: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type Template = z.infer<typeof template>;
+/**
+ * One canonical Hub installation request. Image, internal port, volume,
+ * command, Docker socket and database mapping are intentionally absent: they
+ * are privileged registry-owned fields resolved by the server.
+ */
+export declare const deployTemplate: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    projectId: z.ZodOptional<z.ZodNumber>;
+    serverId: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    publishedPort: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    healthPath: z.ZodOptional<z.ZodString>;
+    cpuShares: z.ZodOptional<z.ZodNumber>;
+    memLimitMb: z.ZodOptional<z.ZodNumber>;
+    env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        value: z.ZodString;
+        isSecret: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, z.core.$strip>>>;
+    reuseExisting: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, z.core.$strip>;
+export type DeployTemplateInput = z.input<typeof deployTemplate>;
+export type DeployTemplate = z.infer<typeof deployTemplate>;
 export declare const domainEntry: z.ZodObject<{
     id: z.ZodNumber;
     hostname: z.ZodString;

package/dist/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,WAAW;;;;EAAuC,CAAC;AAChE,eAAO,MAAM,SAAS;;;;EAA6C,CAAC;AAEpE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwCxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;4EAG4E;AAC5E,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoCxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,2EAA2E;AAC3E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC/D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE/D,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8ClB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAG9C,eAAO,MAAM,YAAY;;;;;;;;;;;;;iBAQvB,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,eAAO,MAAM,MAAM;;;;;;;;iBAQjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,aAAa;;iBAExB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;iBAUrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAGpD,eAAO,MAAM,YAAY;;;;;;;;;;iBAiBvB,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,uDAAuD;AACvD,eAAO,MAAM,WAAW;;;;;;;;iBAQtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;iBAejB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAG5C,eAAO,MAAM,aAAa;;;iBAIxB,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE/D,eAAO,MAAM,OAAO;;;;;;;iBAOlB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAE9C,8EAA8E;AAC9E,eAAO,MAAM,cAAc;;;;;;;;iBAAyC,CAAC;AACrE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAG5D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;iBAQzB,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,aAAa;;;;iBAIxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;iBAmB1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;uEAEuE;AACvE,eAAO,MAAM,gBAAgB;;;iBAG3B,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAErE,eAAO,MAAM,UAAU;;;;;;;;;iBAKrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAGpD,eAAO,MAAM,YAAY;;;;iBAIvB,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,eAAO,MAAM,MAAM;;;;;iBAKjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAG5C,eAAO,MAAM,SAAS;;;iBAGpB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAGvD,eAAO,MAAM,QAAQ;;;;;;;iBAOnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,eAAO,MAAM,aAAa;;;;;;;;;;;;iBASxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;iBAGxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,YAAY;;;;;;iBAGvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAGxD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4BxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAG1D,eAAO,MAAM,MAAM;;;;;;iBAMjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,YAAY;;;;;;;iBAAyD,CAAC;AACnF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAGxD,eAAO,MAAM,eAAe;;;;;;;iBAO1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0BnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAGhD,eAAO,MAAM,WAAW;;;;;;;;;;;;;iBAatB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,WAAW;;;;;;;;;;iBAMtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAGtD,eAAO,MAAM,eAAe;;;;;;;;;iBAM1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,eAAe;;;iBAK1B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAEnE,eAAO,MAAM,gBAAgB;;iBAE3B,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAGrE,eAAO,MAAM,kBAAkB;;;;;;;;;iBAAkB,CAAC;AAClD,MAAM,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAEjD,eAAO,MAAM,kBAAkB;;;iBAAkB,CAAC;AAClD,MAAM,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAE3D,eAAO,MAAM,mBAAmB;;iBAAmB,CAAC;AACpD,MAAM,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAG7D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;iBAM1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAG9D,eAAO,MAAM,YAAY;;;iBAA2E,CAAC;AACrG,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,eAAO,MAAM,WAAW;;;;;;;iBAOtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAGtD,eAAO,MAAM,YAAY;;;;;;EAA0D,CAAC;AACpF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,cAAc;;;;EAAqC,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;iBAanB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;iBASzB,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;iBAA2B,CAAC;AACvD,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAGpE,eAAO,MAAM,eAAe;;;;;;;;iBAQ1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,qBAAqB;;;;;;;;iBAA4B,CAAC;AAC/D,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE/E,eAAO,MAAM,eAAe;;;;;;;;;;;;;iBAM1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,kBAAkB;;;;;;;;;;iBAU7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,WAAW;;;;EAAuC,CAAC;AAChE,eAAO,MAAM,SAAS;;;;EAA6C,CAAC;AAKpE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsDxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;4EAG4E;AAC5E,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0CxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,2EAA2E;AAC3E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC/D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE/D,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiElB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAG9C,eAAO,MAAM,YAAY;;;;;;;;;;;;;iBAQvB,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,eAAO,MAAM,MAAM;;;;;;;;;;iBAUjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,aAAa;;iBAExB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;iBAUrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAGpD,eAAO,MAAM,YAAY;;;;;;;;;;iBAiBvB,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,uDAAuD;AACvD,eAAO,MAAM,WAAW;;;;;;;;iBAQtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;iBAejB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAG5C,eAAO,MAAM,aAAa;;;iBAIxB,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE/D,eAAO,MAAM,OAAO;;;;;;;;iBAQlB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAE9C,8EAA8E;AAC9E,eAAO,MAAM,cAAc;;;;;;;;;iBAAyC,CAAC;AACrE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAG5D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;iBAWzB,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,aAAa;;;;iBAIxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;iBAmB1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;uEAEuE;AACvE,eAAO,MAAM,gBAAgB;;;;iBAI3B,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAErE,eAAO,MAAM,UAAU;;;;;;;;;iBAKrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAGpD,eAAO,MAAM,YAAY;;;;;iBAKvB,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,eAAO,MAAM,MAAM;;;;;iBAKjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAO5C;;;mBAGmB;AACnB,eAAO,MAAM,6BAA6B;;;;;;;iBAatC,CAAC;AACL,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAE/F,kFAAkF;AAClF,eAAO,MAAM,6BAA6B;;;iBAOtC,CAAC;AACL,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAE/F,2DAA2D;AAC3D,eAAO,MAAM,uBAAuB;;;;;;;;iBAQlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAG9E,eAAO,MAAM,SAAS;;;iBAGpB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAGvD,eAAO,MAAM,QAAQ;;;;;;;iBAOnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,eAAO,MAAM,aAAa;;;;;;;;;;;;iBASxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;iBAGxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,YAAY;;;;;;iBAGvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAGxD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4BxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAG1D,eAAO,MAAM,MAAM;;;;;;;;;;;;iBAUjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,YAAY;;;;;;;;;;;;;iBAAyD,CAAC;AACnF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;oEACoE;AACpE,eAAO,MAAM,kBAAkB;;iBAE7B,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAGzE,eAAO,MAAM,eAAe;;;;;;;;;iBAS1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4CnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;iBAezB,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAG5D,eAAO,MAAM,WAAW;;;;;;;;;;;;;iBAatB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,WAAW;;;;;;;;;;iBAMtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAGtD,eAAO,MAAM,eAAe;;;;;;;;;iBAM1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,eAAe;;;iBAK1B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAEnE,eAAO,MAAM,gBAAgB;;iBAE3B,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAGrE,eAAO,MAAM,kBAAkB;;;;;;;;;iBAAkB,CAAC;AAClD,MAAM,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAEjD,eAAO,MAAM,kBAAkB;;;iBAAkB,CAAC;AAClD,MAAM,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAE3D,eAAO,MAAM,mBAAmB;;iBAAmB,CAAC;AACpD,MAAM,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAG7D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;iBAM1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAG9D,eAAO,MAAM,YAAY;;;iBAA2E,CAAC;AACrG,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,eAAO,MAAM,WAAW;;;;;;;iBAOtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAGtD,eAAO,MAAM,YAAY;;;;;;EAA0D,CAAC;AACpF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,cAAc;;;;EAAqC,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;iBAanB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;iBASzB,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;iBAA2B,CAAC;AACvD,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAGpE,eAAO,MAAM,eAAe;;;;;;;;iBAQ1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,qBAAqB;;;;;;;;iBAA4B,CAAC;AAC/D,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE/E,eAAO,MAAM,eAAe;;;;;;;;;;;;;iBAM1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,kBAAkB;;;;;;;;;;iBAU7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/service.js

@@ -1,11 +1,27 @@
 import { z } from 'zod';
-import { envVarName, gitBranch, gitRepoUrl, httpPath, slug } from './common.js';
+import { containerPath, dockerVolumeName, envVarName, gitBranch, gitRepoUrl, httpPath, repoBaseDir, repoRelativePath, slug } from './common.js';
 export const serviceType = z.enum(['pm2', 'docker', 'compose']);
 export const buildPack = z.enum(['auto', 'nixpacks', 'dockerfile']);
+/** Optional project/workspace/label tag IDs for new service creation. */
+const tagIds = z.array(z.number().int().positive()).optional();
 export const createService = z.object({
-    projectId: z.number().int().positive().optional(),
+    /** Bundled/remote Hub template ID. The server resolves privileged template
+     * settings (cmd, Docker socket and database env mapping) from the trusted
+     * registry; clients cannot submit those settings directly. */
+    templateId: z.string().min(1).max(100).optional(),
+    /**
+     * Project / workspace / label tagging (N-N). `tagProjectIds` replaces the
+     * removed `projectId` field. `tagWorkspaceIds` defaults to all workspaces
+     * the caller belongs to when omitted (so a freshly-created service is
+     * visible from the operator's workspaces). `tagLabelIds` is optional.
+     */
+    tagProjectIds: tagIds,
+    tagWorkspaceIds: tagIds,
+    tagLabelIds: tagIds,
     name: z.string().min(1).max(100),
     slug: slug.optional(), // derived from name if omitted
+    /** Resume an idle, caller-owned service left by an interrupted Hub deploy. */
+    reuseExisting: z.boolean().optional(),
     type: serviceType.default('docker'),
     repoUrl: gitRepoUrl.optional(),
     branch: gitBranch.default('main'),
@@ -28,11 +44,11 @@ export const createService = z.object({
     build: z
         .object({
         buildPack: buildPack.default('auto'),
-        baseDir: z.string().default('/'),
+        baseDir: repoBaseDir.default('/'),
         installCmd: z.string().optional(),
         buildCmd: z.string().optional(),
         startCmd: z.string().optional(),
-        dockerfilePath: z.string().optional(),
+        dockerfilePath: repoRelativePath.optional(),
         preDeployCmd: z.string().nullable().optional(),
         postDeployCmd: z.string().nullable().optional(),
         preStopCmd: z.string().nullable().optional(),
@@ -48,13 +64,19 @@ export const createService = z.object({
  * still applies `.default()` values for absent keys, which would silently
  * rewrite `type` back to 'docker' and `branch` to 'main' on every PATCH. */
 export const updateService = z.object({
-    projectId: z.number().int().positive().optional(),
+    // Tag updates are usually handled by `PUT /v1/services/:id/tags`; these
+    // convenience fields let a single PATCH reassign tags together with other
+    // service edits without an extra round-trip.
+    tagProjectIds: tagIds,
+    tagWorkspaceIds: tagIds,
+    tagLabelIds: tagIds,
     name: z.string().min(1).max(100).optional(),
     slug: slug.optional(),
     type: serviceType.optional(),
     repoUrl: gitRepoUrl.optional(),
     branch: gitBranch.optional(),
-    sourceId: z.number().int().positive().optional(),
+    /** Attached Git credential (source) for private-repo cloning. null clears it. */
+    sourceId: z.number().int().positive().nullable().optional(),
     serverId: z.number().int().positive().nullable().optional(),
     image: z.string().optional(),
     volumeMount: z.string().optional(),
@@ -71,11 +93,11 @@ export const updateService = z.object({
     build: z
         .object({
         buildPack: buildPack.optional(),
-        baseDir: z.string().optional(),
+        baseDir: repoBaseDir.optional(),
         installCmd: z.string().optional(),
         buildCmd: z.string().optional(),
         startCmd: z.string().optional(),
-        dockerfilePath: z.string().optional(),
+        dockerfilePath: repoRelativePath.optional(),
         preDeployCmd: z.string().nullable().optional(),
         postDeployCmd: z.string().nullable().optional(),
         preStopCmd: z.string().nullable().optional(),
@@ -86,7 +108,24 @@ export const updateService = z.object({
 });
 export const service = z.object({
     id: z.number().int(),
-    projectId: z.number().int().nullable(),
+    /**
+     * Project / workspace / label tag lists (N-N). The legacy single
+     * `projectId` field is gone; consumers compose the three arrays to decide
+     * what shows up in the top-bar filter chips.
+     */
+    projectIds: z.array(z.number().int()),
+    workspaceIds: z.array(z.number().int()),
+    labelIds: z.array(z.number().int()),
+    /** Resolved display objects — present on detail responses, may be omitted on list. */
+    projects: z
+        .array(z.object({ id: z.number().int(), name: z.string(), slug: z.string() }))
+        .optional(),
+    workspaces: z
+        .array(z.object({ id: z.number().int(), name: z.string(), slug: z.string() }))
+        .optional(),
+    labels: z
+        .array(z.object({ id: z.number().int(), name: z.string(), color: z.string() }))
+        .optional(),
     serverId: z.number().int().nullable().optional(),
     name: z.string(),
     slug: z.string(),
@@ -95,6 +134,8 @@ export const service = z.object({
     repoUrl: z.string().nullable(),
     branch: z.string(),
     sourceId: z.number().int().nullable(),
+    /** Display name of the attached Git credential (source), for the UI. */
+    sourceName: z.string().nullable().optional(),
     image: z.string().nullable(),
     volumeMount: z.string().nullable(),
     composeService: z.string().nullable(),
@@ -147,8 +188,10 @@ export const source = z.object({
     type: z.string(),
     hasToken: z.boolean(),
     hasDeployKey: z.boolean(),
+    registryUsername: z.string().nullable().optional(),
     defaultBranch: z.string().nullable(),
     createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime().optional(),
 });
 export const triggerDeploy = z.object({
     commitSha: z.string().optional(),
@@ -220,6 +263,7 @@ export const webhook = z.object({
     branch: z.string(),
     active: z.boolean(),
     watchPaths: z.string(),
+    sourceId: z.number().int().nullable().optional(),
     url: z.string(),
     createdAt: z.string().datetime(),
 });
@@ -231,6 +275,9 @@ export const createDatabase = z.object({
     engine: z.enum(['postgres', 'mysql', 'mariadb', 'redis', 'mongo', 'valkey', 'clickhouse', 'meilisearch', 'rabbitmq']),
     version: z.string().optional(),
     projectId: z.number().int().optional(),
+    /** Hub/template provisioning is retryable: resume a matching database owned
+     * by the caller instead of colliding with the globally unique slug. */
+    reuseExisting: z.boolean().optional(),
     existingVolume: z.string().optional(),
     extensions: z.array(z.string()).optional(),
     webGuiEnabled: z.boolean().optional(),
@@ -266,6 +313,7 @@ export const managedDatabase = z.object({
 export const createAttachment = z.object({
     databaseId: z.number().int().positive(),
     envAlias: envVarName.optional(),
+    reuseExisting: z.boolean().optional(),
 });
 export const attachment = z.object({
     id: z.number().int(),
@@ -278,6 +326,7 @@ export const upsertEnvVar = z.object({
     key: envVarName.max(100),
     value: z.string(),
     isSecret: z.boolean().optional(),
+    overwriteExisting: z.boolean().optional(),
 });
 export const envVar = z.object({
     id: z.number().int(),
@@ -285,6 +334,48 @@ export const envVar = z.object({
     value: z.string(),
     isSecret: z.boolean(),
 });
+// ── Service volume attachments ────────────────────────────────────────────
+// A service can attach additional named Docker volumes in addition to its
+// `volumeMount` primary. Either an existing managed volume (by name) or a
+// fresh one created on demand. The volume persists across redeploys and
+// container recreations — detaching only removes the link, not the data.
+/** Create a new attachment. Exactly one of `volumeName` or `create.label`
+ *  must be present — the former attaches an existing managed volume, the
+ *  latter provisions a new one (system-generated name) and immediately
+ *  attaches it. */
+export const createServiceVolumeAttachment = z
+    .object({
+    // Attach an existing managed volume (must start with nd-svc- / nd-db-).
+    volumeName: dockerVolumeName.optional(),
+    // Provision a new named volume on attach. The label is a short
+    // human-friendly suffix (e.g. "uploads"); the server prepends the
+    // service-prefix to produce a unique managed name.
+    create: z.object({ label: z.string().min(1).max(40).regex(/^[a-z0-9][a-z0-9-]*$/i, 'invalid label') }).optional(),
+    containerPath: containerPath,
+    readOnly: z.boolean().optional(),
+})
+    .refine((v) => Boolean(v.volumeName) !== Boolean(v.create?.label), {
+    message: 'Provide exactly one of volumeName or create.label',
+});
+/** PATCH shape — path and readOnly are optional, but at least one must change. */
+export const updateServiceVolumeAttachment = z
+    .object({
+    containerPath: containerPath.optional(),
+    readOnly: z.boolean().optional(),
+})
+    .refine((v) => v.containerPath !== undefined || v.readOnly !== undefined, {
+    message: 'Provide at least one of containerPath or readOnly',
+});
+/** API representation of a service's volume attachment. */
+export const serviceVolumeAttachment = z.object({
+    id: z.number().int(),
+    serviceId: z.number().int(),
+    volumeName: z.string(),
+    containerPath: z.string(),
+    readOnly: z.boolean(),
+    createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime(),
+});
 // ── Resource limits ───────────────────────────────────────────────────────
 export const setLimits = z.object({
     cpuShares: z.number().int().min(0).max(262144).nullable().optional(),
@@ -346,12 +437,21 @@ export const topologyGraph = z.object({
 // ── Backups + storage ──────────────────────────────────────────────────────
 export const backup = z.object({
     id: z.number().int(),
+    // Exactly one of (databaseId, volumeName) is set — encoded by `scope`.
     databaseId: z.number().int().nullable(),
+    volumeName: z.string().nullable(),
+    scope: z.enum(['db', 'volumes']),
     status: z.string(),
     sizeBytes: z.number().int(),
+    hasRemoteCopy: z.boolean().optional(),
     createdAt: z.string().datetime(),
 });
 export const backupWithDb = backup.extend({ databaseName: z.string().nullable() });
+/** Create a new volume backup. The `volumeName` is the route param; the
+ *  body only carries the `label` for human-friendly file naming. */
+export const createVolumeBackup = z.object({
+    label: z.string().min(1).max(80).optional(),
+});
 // ── Template hub ───────────────────────────────────────────────────────────
 export const templateSummary = z.object({
     id: z.string(),
@@ -360,6 +460,8 @@ export const templateSummary = z.object({
     category: z.string(),
     emoji: z.string(),
     featured: z.boolean().optional(),
+    runtimeVerified: z.boolean().optional(),
+    verifiedAt: z.iso.date().optional(),
 });
 export const template = z.object({
     id: z.string(),
@@ -375,11 +477,18 @@ export const template = z.object({
     website: z.string().optional(),
     docs: z.string().optional(),
     featured: z.boolean().optional(),
+    /** Set only after the complete template contract has passed an isolated
+     * container startup and declared-port smoke test. */
+    runtimeVerified: z.boolean().optional(),
+    verifiedAt: z.iso.date().optional(),
     /** Human hint about extra setup this template needs (shown in the Hub). */
     requires: z.string().optional(),
     /** When set, the wizard can auto-provision + attach a managed database of
-     *  this engine (DATABASE_URL/REDIS_URL injected at deploy time). */
+     *  this engine. databaseEnv controls the application-specific injection. */
     dbEngine: z.enum(['postgres', 'mysql', 'mariadb', 'redis', 'valkey', 'mongo', 'clickhouse', 'meilisearch', 'rabbitmq']).optional(),
+    /** Map application-specific environment keys to managed database connection
+     * fields. Without this, attachments expose only their legacy URL alias. */
+    databaseEnv: z.record(envVarName, z.enum(['url', 'host', 'hostPort', 'port', 'username', 'password', 'database'])).optional(),
     /** Container command (argv) appended after the image — needed by images
      *  whose default entrypoint prints help and exits (e.g. minio). */
     cmd: z.array(z.string()).min(1).optional(),
@@ -387,6 +496,35 @@ export const template = z.object({
      *  only settable from the admin-controlled template registry, never via
      *  the create-service API). */
     dockerSocket: z.boolean().optional(),
+}).superRefine((value, ctx) => {
+    if (value.dbEngine && !value.databaseEnv) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['databaseEnv'],
+            message: 'databaseEnv is required when dbEngine is set',
+        });
+    }
+});
+/**
+ * One canonical Hub installation request. Image, internal port, volume,
+ * command, Docker socket and database mapping are intentionally absent: they
+ * are privileged registry-owned fields resolved by the server.
+ */
+export const deployTemplate = z.object({
+    name: z.string().trim().min(1).max(100).optional(),
+    projectId: z.number().int().positive().optional(),
+    serverId: z.number().int().positive().nullable().optional(),
+    publishedPort: z.number().int().min(1).max(65535).nullable().optional(),
+    healthPath: httpPath.optional(),
+    cpuShares: z.number().int().min(0).max(262144).optional(),
+    memLimitMb: z.number().int().min(0).optional(),
+    env: z.array(z.object({
+        key: envVarName,
+        value: z.string().max(32_768),
+        isSecret: z.boolean().optional().default(false),
+    })).max(200).optional(),
+    /** Reconcile an interrupted caller-owned install with the same slug. */
+    reuseExisting: z.boolean().optional().default(true),
 });
 // ── Domain routing index + volumes ─────────────────────────────────────────
 export const domainEntry = z.object({