@oore/client 0.0.0 → 0.2.0

package/dist/generated/types.gen.d.ts

@@ -313,17 +313,22 @@ export type CreateNotificationChannelRequest = {
     channel_type: NotificationChannelType;
     enabled?: boolean;
     /**
-     * Terminal build statuses to notify on. Empty or omitted means all terminal events.
+     * Events to notify on. Empty or omitted means all events.
      */
     events?: Array<string>;
     name: string;
     /**
-     * HMAC secret for signing webhook payloads (webhook only, optional).
+     * Scope the channel to one project. Omit for an instance-wide channel.
+     */
+    project_id?: string | null;
+    /**
+     * Webhook: HMAC secret for signing payloads. Slack: bot token with
+     * `users:read.email`, used to mention the triggering user. Optional.
      */
     secret?: string | null;
     smtp_config?: null | SmtpConfig;
     /**
-     * Webhook/Mattermost incoming webhook URL (required for webhook/mattermost).
+     * Incoming webhook URL (required for webhook, mattermost and slack).
      */
     url?: string | null;
 };
@@ -348,6 +353,22 @@ export type CreateProjectRequest = {
 export type CreateProjectResponse = {
     project: Project;
 };
+export type CreateReleaseRequest = {
+    artifact_id?: string | null;
+    build_id: string;
+    package_name?: string | null;
+    policy?: null | ReleasePolicy;
+    reason?: string | null;
+    /**
+     * Initial fraction; defaults to the first policy step.
+     */
+    rollout_fraction?: number | null;
+    state?: null | ReleaseState;
+    store: ReleaseStore;
+    track: string;
+    version_code?: number | null;
+    version_name?: string | null;
+};
 export type CreateScopedDownloadTokenRequest = {
     /**
      * If true, token is consumed after first download.
@@ -366,6 +387,10 @@ export type CreateScopedDownloadTokenResponse = {
     single_use: boolean;
     token: string;
 };
+export type CreateSecretRequest = {
+    name: string;
+    value: string;
+};
 export type DeleteNotificationChannelResponse = {
     deleted: boolean;
 };
@@ -473,6 +498,49 @@ export type GitLabStartRequest = {
     client_secret?: string | null;
     host_url: string;
 };
+/**
+ * Per-pipeline Google Play upload settings. Credentials are referenced by
+ * secret name and never stored here.
+ */
+export type GooglePlayPublishConfig = {
+    /**
+     * Create a draft release instead of rolling out.
+     */
+    draft?: boolean;
+    enabled?: boolean;
+    /**
+     * In-app update priority, 0 to 5.
+     */
+    in_app_update_priority?: number | null;
+    /**
+     * Expected application id. When omitted, the AAB's package is used.
+     */
+    package_name?: string | null;
+    release_notes?: GooglePlayReleaseNotesSource;
+    release_notes_dir?: string | null;
+    release_notes_locale?: string;
+    /**
+     * Initial staged rollout, 0 < percent <= 100. Omitted means 100.
+     */
+    rollout_percent?: number | null;
+    rollout_policy?: null | ReleasePolicy;
+    /**
+     * Name of the secret holding the service account JSON key.
+     */
+    service_account_secret: string;
+    /**
+     * `internal`, `closed`, `open`, `production`, or a custom track name.
+     */
+    track: string;
+    /**
+     * Upload R8/ProGuard `mapping.txt` when the build produced one.
+     */
+    upload_mapping?: boolean;
+};
+/**
+ * Where Google Play release notes come from.
+ */
+export type GooglePlayReleaseNotesSource = 'none' | 'changelog' | 'repo_files';
 export type HealthResponse = {
     channel: string | null;
     github_repo: string | null;
@@ -626,6 +694,13 @@ export type ListProjectsResponse = {
     projects: Array<Project>;
     total: number;
 };
+export type ListReleaseActivityResponse = {
+    events: Array<ReleaseActivityEvent>;
+};
+export type ListReleasesResponse = {
+    releases: Array<Release>;
+    total: number;
+};
 export type ListRepositoriesResponse = {
     repositories: Array<IntegrationRepository>;
     total: number;
@@ -635,6 +710,9 @@ export type ListRunnersResponse = {
     runners: Array<Runner>;
     total: number;
 };
+export type ListSecretsResponse = {
+    secrets: Array<SecretSummary>;
+};
 export type ListSourceRepositoriesResponse = {
     repositories: Array<SourceRepository>;
     total: number;
@@ -677,11 +755,12 @@ export type NotificationChannel = {
     created_by?: string | null;
     enabled: boolean;
     /**
-     * Which terminal build statuses trigger this channel. Empty means all.
+     * Which events trigger this channel. Empty means all.
      */
     events: Array<string>;
     /**
-     * True if the channel has an HMAC secret configured (webhook only).
+     * True if the channel has a secret configured: the HMAC secret for
+     * webhook channels, or the bot token used for mentions on Slack channels.
      */
     has_secret: boolean;
     /**
@@ -694,12 +773,18 @@ export type NotificationChannel = {
     has_url: boolean;
     id: string;
     name: string;
+    /**
+     * Project this channel is scoped to. Absent means the channel receives
+     * events from every project, plus instance-wide events such as runner
+     * offline.
+     */
+    project_id?: string | null;
     updated_at: number;
 };
 export type NotificationChannelResponse = {
     channel: NotificationChannel;
 };
-export type NotificationChannelType = 'webhook' | 'mattermost' | 'email';
+export type NotificationChannelType = 'webhook' | 'mattermost' | 'email' | 'slack';
 export type NotificationDelivery = {
     attempt_count: number;
     build_id?: string | null;
@@ -709,6 +794,7 @@ export type NotificationDelivery = {
     event_type: string;
     id: string;
     last_error?: string | null;
+    release_id?: string | null;
     status: NotificationDeliveryStatus;
 };
 export type NotificationDeliveryStatus = 'pending' | 'delivered' | 'failed';
@@ -793,6 +879,15 @@ export type PipelineExecutionConfig = {
     platform_commands?: PlatformBuildCommands;
     platforms: Array<BuildPlatform>;
 };
+export type PipelineGooglePlayPublishResponse = {
+    config?: null | GooglePlayPublishConfig;
+    pipeline_id: string;
+    /**
+     * Whether the referenced service account secret exists in a visible scope.
+     */
+    service_account_secret_present: boolean;
+    updated_at?: number | null;
+};
 export type PipelineIosSigningResponse = {
     api_issuer_id?: string | null;
     api_key_id?: string | null;
@@ -875,6 +970,7 @@ export type ProjectRetentionOverride = {
     updated_at?: number | null;
 };
 export type ProjectRole = 'maintainer' | 'developer' | 'viewer';
+export type PublishStore = 'google_play' | 'app_store';
 export type ReEnableUserResponse = {
     user: User;
 };
@@ -883,6 +979,14 @@ export type ReadinessResponse = {
     encryption: boolean;
     migrations: boolean;
     ok: boolean;
+    /**
+     * Version of the running `oored` binary.
+     */
+    package_version: string;
+    /**
+     * Installed release version from the install root's `VERSION` file.
+     */
+    version: string;
 };
 export type RegisterIosDeviceRequest = {
     name: string;
@@ -914,6 +1018,115 @@ export type RegisteredIosDevice = {
     status: string;
     udid: string;
 };
+export type Release = {
+    /**
+     * Actions the caller may take now, from their project role and the state.
+     */
+    allowed_actions: Array<ReleaseAction>;
+    approved_at?: number | null;
+    approved_by_email?: string | null;
+    artifact_id?: string | null;
+    awaiting_approval: boolean;
+    build_id: string;
+    build_number?: number | null;
+    crash_rate?: number | null;
+    crash_rate_threshold?: number | null;
+    created_at: number;
+    health: ReleaseHealth;
+    id: string;
+    next_fraction?: number | null;
+    next_step_at?: number | null;
+    package_name?: string | null;
+    /**
+     * `android` or `ios`, derived from the store.
+     */
+    platform: string;
+    policy: ReleasePolicy;
+    project_id: string;
+    project_name?: string | null;
+    /**
+     * Fraction of users, 0..1.
+     */
+    rollout_fraction: number;
+    state: ReleaseState;
+    store: ReleaseStore;
+    /**
+     * Play track, or TestFlight group / `app_store`.
+     */
+    track: string;
+    updated_at: number;
+    version_code?: number | null;
+    version_name?: string | null;
+};
+/**
+ * Manual controls on a release.
+ */
+export type ReleaseAction = 'raise' | 'pause' | 'resume' | 'halt' | 'complete' | 'approve';
+export type ReleaseActionRequest = {
+    /**
+     * Raise only: target fraction (0..1]. Defaults to the next policy step.
+     */
+    fraction?: number | null;
+    reason?: string | null;
+};
+/**
+ * A history entry with the release it belongs to, for activity feeds.
+ */
+export type ReleaseActivityEvent = ReleaseHistoryEntry & {
+    build_id: string;
+    project_id: string;
+    project_name?: string | null;
+    release_id: string;
+    store: ReleaseStore;
+    track: string;
+    version_name?: string | null;
+};
+/**
+ * Where a maintainer approval is required, if anywhere.
+ */
+export type ReleaseApprovalGate = 'none' | 'before_upload' | 'before_production';
+export type ReleaseDetailResponse = {
+    history: Array<ReleaseHistoryEntry>;
+    release: Release;
+};
+export type ReleaseHealth = 'unknown' | 'healthy' | 'warning' | 'breached';
+export type ReleaseHistoryEntry = {
+    actor_email?: string | null;
+    /**
+     * Null when the daemon or a store made the change.
+     */
+    actor_id?: string | null;
+    at: number;
+    from_fraction?: number | null;
+    from_state?: null | ReleaseState;
+    id: string;
+    reason?: string | null;
+    to_fraction?: number | null;
+    to_state: ReleaseState;
+};
+/**
+ * Staged rollout policy stored with each release.
+ */
+export type ReleasePolicy = {
+    approval?: ReleaseApprovalGate;
+    /**
+     * Crash rate (0..1) at or above which the daemon halts the rollout.
+     */
+    crash_rate_threshold?: number | null;
+    /**
+     * Hours between automatic steps.
+     */
+    interval_hours?: number;
+    /**
+     * Ascending rollout fractions in (0, 1]; the last step must be 1.
+     */
+    steps?: Array<number>;
+};
+export type ReleaseState = 'uploading' | 'processing' | 'in_review' | 'rolling' | 'paused' | 'halted' | 'complete' | 'failed';
+/**
+ * Store a release is published to.
+ */
+export type ReleaseStore = 'google_play' | 'app_store';
 export type RemoteAuthMode = 'oidc' | 'trusted_proxy';
 export type RemoveProjectMemberResponse = {
     ok: boolean;
@@ -977,6 +1190,12 @@ export type RevokeApiTokenResponse = {
 export type RevokeArtifactDownloadTokenResponse = {
     revoked: boolean;
 };
+/**
+ * Replace a secret's value (rotation).
+ */
+export type RotateSecretRequest = {
+    value: string;
+};
 export type Runner = {
     capabilities: {
         [key: string]: unknown;
@@ -1028,7 +1247,46 @@ export type RunnerIosSigningBundle = {
 export type RunnerIosSigningResponse = {
     bundle?: null | RunnerIosSigningBundle;
 };
+/**
+ * A resolved secret delivered to the runner assigned to an active job.
+ */
+export type RunnerJobSecret = {
+    name: string;
+    scope: SecretScope;
+    value: string;
+};
+export type RunnerJobSecretsResponse = {
+    secrets: Array<RunnerJobSecret>;
+};
 export type RunnerPolicyBlockReason = 'instance_paused' | 'repository_unavailable';
+/**
+ * Publish work for the runner, fetched with the job-scoped grant.
+ */
+export type RunnerPublishPlan = {
+    changelog?: string | null;
+    google_play?: null | GooglePlayPublishConfig;
+};
+/**
+ * Outcome of a store upload, reported by the runner.
+ */
+export type RunnerPublishResult = {
+    package_name: string;
+    /**
+     * Staged rollout fraction, 0 < f <= 1. Absent for drafts.
+     */
+    rollout_fraction?: number | null;
+    /**
+     * `completed`, `in_progress` or `draft`.
+     */
+    status: string;
+    store: PublishStore;
+    /**
+     * Store track as sent to the store (for Play: internal, alpha, beta, production or custom).
+     */
+    track: string;
+    version_code: number;
+    version_name?: string | null;
+};
 export type RunnerStatus = 'online' | 'offline' | 'busy' | 'draining';
 export type RuntimeMode = 'local' | 'remote';
 export type RuntimeUpdatePhase = 'idle' | 'updating' | 'restarting' | 'failed';
@@ -1038,6 +1296,25 @@ export type RuntimeUpdateStatus = {
     phase: RuntimeUpdatePhase;
 };
 export type ScmProvider = 'github' | 'gitlab' | 'local_git';
+export type SecretResponse = {
+    secret: SecretSummary;
+};
+/**
+ * Where a secret is defined. A job sees instance, project and pipeline secrets;
+ * on a name clash the narrower scope wins.
+ */
+export type SecretScope = 'instance' | 'project' | 'pipeline';
+/**
+ * Secret metadata. Values are write-only and never returned by the user API.
+ */
+export type SecretSummary = {
+    created_at: number;
+    name: string;
+    pipeline_id?: string | null;
+    project_id?: string | null;
+    scope: SecretScope;
+    updated_at: number;
+};
 export type SetupCompleteResponse = {
     instance_id: string;
     state: SetupState;
@@ -1214,7 +1491,13 @@ export type UpdateNotificationChannelRequest = {
     events?: Array<string> | null;
     name?: string | null;
     /**
-     * New HMAC secret. Omit to keep existing; pass empty string to clear.
+     * New project scope. Omit to keep existing; pass empty string to make
+     * the channel instance-wide.
+     */
+    project_id?: string | null;
+    /**
+     * New HMAC secret (webhook) or bot token (slack). Omit to keep existing;
+     * pass empty string to clear.
      */
     secret?: string | null;
     smtp_config?: null | UpdateSmtpConfig;
@@ -3247,6 +3530,188 @@ export type SyncPipelineIosSigningResponses = {
     200: SyncPipelineIosSigningResponse;
 };
 export type SyncPipelineIosSigningResponse2 = SyncPipelineIosSigningResponses[keyof SyncPipelineIosSigningResponses];
+export type GetPipelineGooglePlayPublishData = {
+    body?: never;
+    path: {
+        /**
+         * Pipeline ID
+         */
+        pipeline_id: string;
+    };
+    query?: never;
+    url: '/v1/pipelines/{pipeline_id}/publish/google-play';
+};
+export type GetPipelineGooglePlayPublishErrors = {
+    /**
+     * Pipeline not found
+     */
+    404: ApiError;
+};
+export type GetPipelineGooglePlayPublishError = GetPipelineGooglePlayPublishErrors[keyof GetPipelineGooglePlayPublishErrors];
+export type GetPipelineGooglePlayPublishResponses = {
+    /**
+     * Google Play publish settings
+     */
+    200: PipelineGooglePlayPublishResponse;
+};
+export type GetPipelineGooglePlayPublishResponse = GetPipelineGooglePlayPublishResponses[keyof GetPipelineGooglePlayPublishResponses];
+export type UpdatePipelineGooglePlayPublishData = {
+    body: GooglePlayPublishConfig;
+    path: {
+        /**
+         * Pipeline ID
+         */
+        pipeline_id: string;
+    };
+    query?: never;
+    url: '/v1/pipelines/{pipeline_id}/publish/google-play';
+};
+export type UpdatePipelineGooglePlayPublishErrors = {
+    /**
+     * Invalid settings
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Pipeline not found
+     */
+    404: ApiError;
+};
+export type UpdatePipelineGooglePlayPublishError = UpdatePipelineGooglePlayPublishErrors[keyof UpdatePipelineGooglePlayPublishErrors];
+export type UpdatePipelineGooglePlayPublishResponses = {
+    /**
+     * Saved settings
+     */
+    200: PipelineGooglePlayPublishResponse;
+};
+export type UpdatePipelineGooglePlayPublishResponse = UpdatePipelineGooglePlayPublishResponses[keyof UpdatePipelineGooglePlayPublishResponses];
+export type ListPipelineSecretsData = {
+    body?: never;
+    path: {
+        /**
+         * Pipeline ID
+         */
+        pipeline_id: string;
+    };
+    query?: never;
+    url: '/v1/pipelines/{pipeline_id}/secrets';
+};
+export type ListPipelineSecretsErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+};
+export type ListPipelineSecretsError = ListPipelineSecretsErrors[keyof ListPipelineSecretsErrors];
+export type ListPipelineSecretsResponses = {
+    /**
+     * Secret names
+     */
+    200: ListSecretsResponse;
+};
+export type ListPipelineSecretsResponse = ListPipelineSecretsResponses[keyof ListPipelineSecretsResponses];
+export type CreatePipelineSecretData = {
+    body: CreateSecretRequest;
+    path: {
+        /**
+         * Pipeline ID
+         */
+        pipeline_id: string;
+    };
+    query?: never;
+    url: '/v1/pipelines/{pipeline_id}/secrets';
+};
+export type CreatePipelineSecretErrors = {
+    /**
+     * Invalid name or value
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * A secret with this name already exists in this scope
+     */
+    409: ApiError;
+};
+export type CreatePipelineSecretError = CreatePipelineSecretErrors[keyof CreatePipelineSecretErrors];
+export type CreatePipelineSecretResponses = {
+    /**
+     * Secret created
+     */
+    201: SecretResponse;
+};
+export type CreatePipelineSecretResponse = CreatePipelineSecretResponses[keyof CreatePipelineSecretResponses];
+export type DeletePipelineSecretData = {
+    body?: never;
+    path: {
+        /**
+         * Pipeline ID
+         */
+        pipeline_id: string;
+        /**
+         * Secret name
+         */
+        name: string;
+    };
+    query?: never;
+    url: '/v1/pipelines/{pipeline_id}/secrets/{name}';
+};
+export type DeletePipelineSecretErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Secret not found
+     */
+    404: ApiError;
+};
+export type DeletePipelineSecretError = DeletePipelineSecretErrors[keyof DeletePipelineSecretErrors];
+export type DeletePipelineSecretResponses = {
+    /**
+     * Secret deleted
+     */
+    200: OkResponse;
+};
+export type DeletePipelineSecretResponse = DeletePipelineSecretResponses[keyof DeletePipelineSecretResponses];
+export type RotatePipelineSecretData = {
+    body: RotateSecretRequest;
+    path: {
+        /**
+         * Pipeline ID
+         */
+        pipeline_id: string;
+        /**
+         * Secret name
+         */
+        name: string;
+    };
+    query?: never;
+    url: '/v1/pipelines/{pipeline_id}/secrets/{name}';
+};
+export type RotatePipelineSecretErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Secret not found
+     */
+    404: ApiError;
+};
+export type RotatePipelineSecretError = RotatePipelineSecretErrors[keyof RotatePipelineSecretErrors];
+export type RotatePipelineSecretResponses = {
+    /**
+     * Secret rotated
+     */
+    200: SecretResponse;
+};
+export type RotatePipelineSecretResponse = RotatePipelineSecretResponses[keyof RotatePipelineSecretResponses];
 export type ListProjectsData = {
     body?: never;
     path?: never;
@@ -3812,11 +4277,135 @@ export type UpdateProjectRetentionResponses = {
     200: EffectiveProjectRetentionResponse;
 };
 export type UpdateProjectRetentionResponse = UpdateProjectRetentionResponses[keyof UpdateProjectRetentionResponses];
-export type GetSetupStatusData = {
+export type ListProjectSecretsData = {
     body?: never;
-    path?: never;
+    path: {
+        /**
+         * Project ID
+         */
+        project_id: string;
+    };
     query?: never;
-    url: '/v1/public/setup-status';
+    url: '/v1/projects/{project_id}/secrets';
+};
+export type ListProjectSecretsErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+};
+export type ListProjectSecretsError = ListProjectSecretsErrors[keyof ListProjectSecretsErrors];
+export type ListProjectSecretsResponses = {
+    /**
+     * Secret names
+     */
+    200: ListSecretsResponse;
+};
+export type ListProjectSecretsResponse = ListProjectSecretsResponses[keyof ListProjectSecretsResponses];
+export type CreateProjectSecretData = {
+    body: CreateSecretRequest;
+    path: {
+        /**
+         * Project ID
+         */
+        project_id: string;
+    };
+    query?: never;
+    url: '/v1/projects/{project_id}/secrets';
+};
+export type CreateProjectSecretErrors = {
+    /**
+     * Invalid name or value
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * A secret with this name already exists in this scope
+     */
+    409: ApiError;
+};
+export type CreateProjectSecretError = CreateProjectSecretErrors[keyof CreateProjectSecretErrors];
+export type CreateProjectSecretResponses = {
+    /**
+     * Secret created
+     */
+    201: SecretResponse;
+};
+export type CreateProjectSecretResponse = CreateProjectSecretResponses[keyof CreateProjectSecretResponses];
+export type DeleteProjectSecretData = {
+    body?: never;
+    path: {
+        /**
+         * Project ID
+         */
+        project_id: string;
+        /**
+         * Secret name
+         */
+        name: string;
+    };
+    query?: never;
+    url: '/v1/projects/{project_id}/secrets/{name}';
+};
+export type DeleteProjectSecretErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Secret not found
+     */
+    404: ApiError;
+};
+export type DeleteProjectSecretError = DeleteProjectSecretErrors[keyof DeleteProjectSecretErrors];
+export type DeleteProjectSecretResponses = {
+    /**
+     * Secret deleted
+     */
+    200: OkResponse;
+};
+export type DeleteProjectSecretResponse = DeleteProjectSecretResponses[keyof DeleteProjectSecretResponses];
+export type RotateProjectSecretData = {
+    body: RotateSecretRequest;
+    path: {
+        /**
+         * Project ID
+         */
+        project_id: string;
+        /**
+         * Secret name
+         */
+        name: string;
+    };
+    query?: never;
+    url: '/v1/projects/{project_id}/secrets/{name}';
+};
+export type RotateProjectSecretErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Secret not found
+     */
+    404: ApiError;
+};
+export type RotateProjectSecretError = RotateProjectSecretErrors[keyof RotateProjectSecretErrors];
+export type RotateProjectSecretResponses = {
+    /**
+     * Secret rotated
+     */
+    200: SecretResponse;
+};
+export type RotateProjectSecretResponse = RotateProjectSecretResponses[keyof RotateProjectSecretResponses];
+export type GetSetupStatusData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/v1/public/setup-status';
 };
 export type GetSetupStatusErrors = {
     /**
@@ -3832,6 +4421,397 @@ export type GetSetupStatusResponses = {
     200: SetupStatus;
 };
 export type GetSetupStatusResponse = GetSetupStatusResponses[keyof GetSetupStatusResponses];
+export type ListReleaseEventsData = {
+    body?: never;
+    path?: never;
+    query?: {
+        /**
+         * Filter by project
+         */
+        project_id?: string;
+        /**
+         * Page size, 1 to 200 (default 50)
+         */
+        limit?: number;
+    };
+    url: '/v1/release-events';
+};
+export type ListReleaseEventsErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+};
+export type ListReleaseEventsError = ListReleaseEventsErrors[keyof ListReleaseEventsErrors];
+export type ListReleaseEventsResponses = {
+    /**
+     * Release activity
+     */
+    200: ListReleaseActivityResponse;
+};
+export type ListReleaseEventsResponse = ListReleaseEventsResponses[keyof ListReleaseEventsResponses];
+export type ListReleasesData = {
+    body?: never;
+    path?: never;
+    query?: {
+        /**
+         * Filter by project
+         */
+        project_id?: string;
+        /**
+         * Filter by build
+         */
+        build_id?: string;
+        /**
+         * Filter by one state or comma-separated states
+         */
+        state?: string;
+        /**
+         * Page size, 1 to 200 (default 50)
+         */
+        limit?: number;
+        /**
+         * Page offset (default 0)
+         */
+        offset?: number;
+    };
+    url: '/v1/releases';
+};
+export type ListReleasesErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+};
+export type ListReleasesError = ListReleasesErrors[keyof ListReleasesErrors];
+export type ListReleasesResponses = {
+    /**
+     * Release list
+     */
+    200: ListReleasesResponse;
+};
+export type ListReleasesResponse2 = ListReleasesResponses[keyof ListReleasesResponses];
+export type CreateReleaseData = {
+    body: CreateReleaseRequest;
+    path?: never;
+    query?: never;
+    url: '/v1/releases';
+};
+export type CreateReleaseErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Build not found
+     */
+    404: ApiError;
+    /**
+     * Build has not succeeded
+     */
+    409: ApiError;
+};
+export type CreateReleaseError = CreateReleaseErrors[keyof CreateReleaseErrors];
+export type CreateReleaseResponses = {
+    /**
+     * Created release
+     */
+    200: Release;
+};
+export type CreateReleaseResponse = CreateReleaseResponses[keyof CreateReleaseResponses];
+export type GetReleaseData = {
+    body?: never;
+    path: {
+        /**
+         * Release ID
+         */
+        release_id: string;
+    };
+    query?: never;
+    url: '/v1/releases/{release_id}';
+};
+export type GetReleaseErrors = {
+    /**
+     * Not found
+     */
+    404: ApiError;
+};
+export type GetReleaseError = GetReleaseErrors[keyof GetReleaseErrors];
+export type GetReleaseResponses = {
+    /**
+     * Release detail
+     */
+    200: ReleaseDetailResponse;
+};
+export type GetReleaseResponse = GetReleaseResponses[keyof GetReleaseResponses];
+export type ApproveReleaseData = {
+    /**
+     * Optional reason; `fraction` is accepted by raise only
+     */
+    body?: null | ReleaseActionRequest;
+    path: {
+        /**
+         * Release ID
+         */
+        release_id: string;
+    };
+    query?: never;
+    url: '/v1/releases/{release_id}/approve';
+};
+export type ApproveReleaseErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Not found
+     */
+    404: ApiError;
+    /**
+     * Not allowed in the current state
+     */
+    409: ApiError;
+    /**
+     * The store rejected the change
+     */
+    502: ApiError;
+};
+export type ApproveReleaseError = ApproveReleaseErrors[keyof ApproveReleaseErrors];
+export type ApproveReleaseResponses = {
+    /**
+     * Updated release
+     */
+    200: Release;
+};
+export type ApproveReleaseResponse = ApproveReleaseResponses[keyof ApproveReleaseResponses];
+export type CompleteReleaseData = {
+    /**
+     * Optional reason; `fraction` is accepted by raise only
+     */
+    body?: null | ReleaseActionRequest;
+    path: {
+        /**
+         * Release ID
+         */
+        release_id: string;
+    };
+    query?: never;
+    url: '/v1/releases/{release_id}/complete';
+};
+export type CompleteReleaseErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Not found
+     */
+    404: ApiError;
+    /**
+     * Not allowed in the current state
+     */
+    409: ApiError;
+    /**
+     * The store rejected the change
+     */
+    502: ApiError;
+};
+export type CompleteReleaseError = CompleteReleaseErrors[keyof CompleteReleaseErrors];
+export type CompleteReleaseResponses = {
+    /**
+     * Updated release
+     */
+    200: Release;
+};
+export type CompleteReleaseResponse = CompleteReleaseResponses[keyof CompleteReleaseResponses];
+export type HaltReleaseData = {
+    /**
+     * Optional reason; `fraction` is accepted by raise only
+     */
+    body?: null | ReleaseActionRequest;
+    path: {
+        /**
+         * Release ID
+         */
+        release_id: string;
+    };
+    query?: never;
+    url: '/v1/releases/{release_id}/halt';
+};
+export type HaltReleaseErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Not found
+     */
+    404: ApiError;
+    /**
+     * Not allowed in the current state
+     */
+    409: ApiError;
+    /**
+     * The store rejected the change
+     */
+    502: ApiError;
+};
+export type HaltReleaseError = HaltReleaseErrors[keyof HaltReleaseErrors];
+export type HaltReleaseResponses = {
+    /**
+     * Updated release
+     */
+    200: Release;
+};
+export type HaltReleaseResponse = HaltReleaseResponses[keyof HaltReleaseResponses];
+export type PauseReleaseData = {
+    /**
+     * Optional reason; `fraction` is accepted by raise only
+     */
+    body?: null | ReleaseActionRequest;
+    path: {
+        /**
+         * Release ID
+         */
+        release_id: string;
+    };
+    query?: never;
+    url: '/v1/releases/{release_id}/pause';
+};
+export type PauseReleaseErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Not found
+     */
+    404: ApiError;
+    /**
+     * Not allowed in the current state
+     */
+    409: ApiError;
+    /**
+     * The store rejected the change
+     */
+    502: ApiError;
+};
+export type PauseReleaseError = PauseReleaseErrors[keyof PauseReleaseErrors];
+export type PauseReleaseResponses = {
+    /**
+     * Updated release
+     */
+    200: Release;
+};
+export type PauseReleaseResponse = PauseReleaseResponses[keyof PauseReleaseResponses];
+export type RaiseReleaseData = {
+    /**
+     * Optional reason; `fraction` is accepted by raise only
+     */
+    body?: null | ReleaseActionRequest;
+    path: {
+        /**
+         * Release ID
+         */
+        release_id: string;
+    };
+    query?: never;
+    url: '/v1/releases/{release_id}/raise';
+};
+export type RaiseReleaseErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Not found
+     */
+    404: ApiError;
+    /**
+     * Not allowed in the current state
+     */
+    409: ApiError;
+    /**
+     * The store rejected the change
+     */
+    502: ApiError;
+};
+export type RaiseReleaseError = RaiseReleaseErrors[keyof RaiseReleaseErrors];
+export type RaiseReleaseResponses = {
+    /**
+     * Updated release
+     */
+    200: Release;
+};
+export type RaiseReleaseResponse = RaiseReleaseResponses[keyof RaiseReleaseResponses];
+export type ResumeReleaseData = {
+    /**
+     * Optional reason; `fraction` is accepted by raise only
+     */
+    body?: null | ReleaseActionRequest;
+    path: {
+        /**
+         * Release ID
+         */
+        release_id: string;
+    };
+    query?: never;
+    url: '/v1/releases/{release_id}/resume';
+};
+export type ResumeReleaseErrors = {
+    /**
+     * Invalid input
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Not found
+     */
+    404: ApiError;
+    /**
+     * Not allowed in the current state
+     */
+    409: ApiError;
+    /**
+     * The store rejected the change
+     */
+    502: ApiError;
+};
+export type ResumeReleaseError = ResumeReleaseErrors[keyof ResumeReleaseErrors];
+export type ResumeReleaseResponses = {
+    /**
+     * Updated release
+     */
+    200: Release;
+};
+export type ResumeReleaseResponse = ResumeReleaseResponses[keyof ResumeReleaseResponses];
 export type ListRunnersData = {
     body?: never;
     path?: never;
@@ -4261,6 +5241,143 @@ export type AppendBuildLogsResponses = {
     200: AppendBuildLogsResponse;
 };
 export type AppendBuildLogsResponse2 = AppendBuildLogsResponses[keyof AppendBuildLogsResponses];
+export type GetJobPublishPlanData = {
+    body?: never;
+    headers: {
+        /**
+         * Job-scoped signing grant
+         */
+        'x-oore-signing-token': string;
+    };
+    path: {
+        /**
+         * Runner ID
+         */
+        runner_id: string;
+        /**
+         * Build/Job ID
+         */
+        job_id: string;
+    };
+    query?: never;
+    url: '/v1/runners/{runner_id}/jobs/{job_id}/publish';
+};
+export type GetJobPublishPlanErrors = {
+    /**
+     * Runner authentication or signing grant is missing or invalid
+     */
+    401: ApiError;
+    /**
+     * Runner does not match the active assignment
+     */
+    403: ApiError;
+    /**
+     * Job is not active
+     */
+    409: ApiError;
+};
+export type GetJobPublishPlanError = GetJobPublishPlanErrors[keyof GetJobPublishPlanErrors];
+export type GetJobPublishPlanResponses = {
+    /**
+     * Publish plan
+     */
+    200: RunnerPublishPlan;
+};
+export type GetJobPublishPlanResponse = GetJobPublishPlanResponses[keyof GetJobPublishPlanResponses];
+export type ReportJobPublishResultData = {
+    body: RunnerPublishResult;
+    headers: {
+        /**
+         * Job-scoped signing grant
+         */
+        'x-oore-signing-token': string;
+    };
+    path: {
+        /**
+         * Runner ID
+         */
+        runner_id: string;
+        /**
+         * Build/Job ID
+         */
+        job_id: string;
+    };
+    query?: never;
+    url: '/v1/runners/{runner_id}/jobs/{job_id}/publish-results';
+};
+export type ReportJobPublishResultErrors = {
+    /**
+     * Runner authentication or signing grant is missing or invalid
+     */
+    401: ApiError;
+    /**
+     * Runner does not match the active assignment
+     */
+    403: ApiError;
+    /**
+     * Job is not active
+     */
+    409: ApiError;
+};
+export type ReportJobPublishResultError = ReportJobPublishResultErrors[keyof ReportJobPublishResultErrors];
+export type ReportJobPublishResultResponses = {
+    /**
+     * Recorded
+     */
+    200: OkResponse;
+};
+export type ReportJobPublishResultResponse = ReportJobPublishResultResponses[keyof ReportJobPublishResultResponses];
+export type GetJobSecretsData = {
+    body?: never;
+    headers: {
+        /**
+         * Job-scoped signing grant
+         */
+        'x-oore-signing-token': string;
+    };
+    path: {
+        /**
+         * Runner ID
+         */
+        runner_id: string;
+        /**
+         * Build/Job ID
+         */
+        job_id: string;
+    };
+    query?: never;
+    url: '/v1/runners/{runner_id}/jobs/{job_id}/secrets';
+};
+export type GetJobSecretsErrors = {
+    /**
+     * Runner authentication or signing grant is missing or invalid
+     */
+    401: ApiError;
+    /**
+     * Runner does not match the active assignment
+     */
+    403: ApiError;
+    /**
+     * Build not found
+     */
+    404: ApiError;
+    /**
+     * Job is not active
+     */
+    409: ApiError;
+    /**
+     * Secrets could not be loaded
+     */
+    500: ApiError;
+};
+export type GetJobSecretsError = GetJobSecretsErrors[keyof GetJobSecretsErrors];
+export type GetJobSecretsResponses = {
+    /**
+     * Resolved secrets
+     */
+    200: RunnerJobSecretsResponse;
+};
+export type GetJobSecretsResponse = GetJobSecretsResponses[keyof GetJobSecretsResponses];
 export type UpdateJobStatusData = {
     body: UpdateJobStatusRequest;
     path: {
@@ -4290,6 +5407,112 @@ export type UpdateJobStatusResponses = {
     200: BuildDetailResponse;
 };
 export type UpdateJobStatusResponse = UpdateJobStatusResponses[keyof UpdateJobStatusResponses];
+export type ListInstanceSecretsData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/v1/secrets';
+};
+export type ListInstanceSecretsErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+};
+export type ListInstanceSecretsError = ListInstanceSecretsErrors[keyof ListInstanceSecretsErrors];
+export type ListInstanceSecretsResponses = {
+    /**
+     * Secret names
+     */
+    200: ListSecretsResponse;
+};
+export type ListInstanceSecretsResponse = ListInstanceSecretsResponses[keyof ListInstanceSecretsResponses];
+export type CreateInstanceSecretData = {
+    body: CreateSecretRequest;
+    path?: never;
+    query?: never;
+    url: '/v1/secrets';
+};
+export type CreateInstanceSecretErrors = {
+    /**
+     * Invalid name or value
+     */
+    400: ApiError;
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * A secret with this name already exists in this scope
+     */
+    409: ApiError;
+};
+export type CreateInstanceSecretError = CreateInstanceSecretErrors[keyof CreateInstanceSecretErrors];
+export type CreateInstanceSecretResponses = {
+    /**
+     * Secret created
+     */
+    201: SecretResponse;
+};
+export type CreateInstanceSecretResponse = CreateInstanceSecretResponses[keyof CreateInstanceSecretResponses];
+export type DeleteInstanceSecretData = {
+    body?: never;
+    path: {
+        /**
+         * Secret name
+         */
+        name: string;
+    };
+    query?: never;
+    url: '/v1/secrets/{name}';
+};
+export type DeleteInstanceSecretErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Secret not found
+     */
+    404: ApiError;
+};
+export type DeleteInstanceSecretError = DeleteInstanceSecretErrors[keyof DeleteInstanceSecretErrors];
+export type DeleteInstanceSecretResponses = {
+    /**
+     * Secret deleted
+     */
+    200: OkResponse;
+};
+export type DeleteInstanceSecretResponse = DeleteInstanceSecretResponses[keyof DeleteInstanceSecretResponses];
+export type RotateInstanceSecretData = {
+    body: RotateSecretRequest;
+    path: {
+        /**
+         * Secret name
+         */
+        name: string;
+    };
+    query?: never;
+    url: '/v1/secrets/{name}';
+};
+export type RotateInstanceSecretErrors = {
+    /**
+     * Permission denied
+     */
+    403: ApiError;
+    /**
+     * Secret not found
+     */
+    404: ApiError;
+};
+export type RotateInstanceSecretError = RotateInstanceSecretErrors[keyof RotateInstanceSecretErrors];
+export type RotateInstanceSecretResponses = {
+    /**
+     * Secret rotated
+     */
+    200: SecretResponse;
+};
+export type RotateInstanceSecretResponse = RotateInstanceSecretResponses[keyof RotateInstanceSecretResponses];
 export type GetArtifactStorageSettingsData = {
     body?: never;
     path?: never;