@unkey/api 2.3.0 → 2.3.2

package/src/funcs/ratelimitLimit.ts

@@ -33,7 +33,7 @@ import { Result } from "../types/fp.js";
  *
  * Use this for rate limiting beyond API keys - limit users by ID, IPs by address, or any custom identifier. Supports namespace organization, variable costs, and custom overrides.
  *
- * **Response Codes**: Rate limit checks return HTTP 200 regardless of whether the limit is exceeded - check the `success` field in the response to determine if the request should be allowed. 4xx responses indicate auth, namespace existence/deletion, or validation errors (e.g., 410 Gone for deleted namespaces). 5xx responses indicate server errors.
+ * **Response Codes**: Rate limit checks return HTTP 200 regardless of whether the limit is exceeded — check the `success` field in the response to determine if the request should be allowed. A 429 may be returned if the workspace exceeds its API rate limit. Other 4xx responses indicate auth, namespace existence/deletion, or validation errors (e.g., 410 Gone for deleted namespaces). 5xx responses indicate server errors.
  *
  * **Required Permissions**
  *
@@ -53,6 +53,7 @@ export function ratelimitLimit(
     | errors.ForbiddenErrorResponse
     | errors.NotFoundErrorResponse
     | errors.GoneErrorResponse
+    | errors.TooManyRequestsErrorResponse
     | errors.InternalServerErrorResponse
     | UnkeyError
     | ResponseValidationError
@@ -84,6 +85,7 @@ async function $do(
       | errors.ForbiddenErrorResponse
       | errors.NotFoundErrorResponse
       | errors.GoneErrorResponse
+      | errors.TooManyRequestsErrorResponse
       | errors.InternalServerErrorResponse
       | UnkeyError
       | ResponseValidationError
@@ -162,7 +164,7 @@ async function $do(
 
   const doResult = await client._do(req, {
     context,
-    errorCodes: ["400", "401", "403", "404", "410", "4XX", "500", "5XX"],
+    errorCodes: ["400", "401", "403", "404", "410", "429", "4XX", "500", "5XX"],
     retryConfig: context.retryConfig,
     retryCodes: context.retryCodes,
   });
@@ -182,6 +184,7 @@ async function $do(
     | errors.ForbiddenErrorResponse
     | errors.NotFoundErrorResponse
     | errors.GoneErrorResponse
+    | errors.TooManyRequestsErrorResponse
     | errors.InternalServerErrorResponse
     | UnkeyError
     | ResponseValidationError
@@ -198,6 +201,9 @@ async function $do(
     M.jsonErr(403, errors.ForbiddenErrorResponse$inboundSchema),
     M.jsonErr(404, errors.NotFoundErrorResponse$inboundSchema),
     M.jsonErr(410, errors.GoneErrorResponse$inboundSchema),
+    M.jsonErr(429, errors.TooManyRequestsErrorResponse$inboundSchema, {
+      ctype: "application/problem+json",
+    }),
     M.jsonErr(500, errors.InternalServerErrorResponse$inboundSchema),
     M.fail("4XX"),
     M.fail("5XX"),

package/src/funcs/ratelimitListOverrides.ts

@@ -48,6 +48,7 @@ export function ratelimitListOverrides(
     | errors.UnauthorizedErrorResponse
     | errors.ForbiddenErrorResponse
     | errors.NotFoundErrorResponse
+    | errors.TooManyRequestsErrorResponse
     | errors.InternalServerErrorResponse
     | UnkeyError
     | ResponseValidationError
@@ -78,6 +79,7 @@ async function $do(
       | errors.UnauthorizedErrorResponse
       | errors.ForbiddenErrorResponse
       | errors.NotFoundErrorResponse
+      | errors.TooManyRequestsErrorResponse
       | errors.InternalServerErrorResponse
       | UnkeyError
       | ResponseValidationError
@@ -158,7 +160,7 @@ async function $do(
 
   const doResult = await client._do(req, {
     context,
-    errorCodes: ["400", "401", "403", "404", "4XX", "500", "5XX"],
+    errorCodes: ["400", "401", "403", "404", "429", "4XX", "500", "5XX"],
     retryConfig: context.retryConfig,
     retryCodes: context.retryCodes,
   });
@@ -177,6 +179,7 @@ async function $do(
     | errors.UnauthorizedErrorResponse
     | errors.ForbiddenErrorResponse
     | errors.NotFoundErrorResponse
+    | errors.TooManyRequestsErrorResponse
     | errors.InternalServerErrorResponse
     | UnkeyError
     | ResponseValidationError
@@ -192,6 +195,9 @@ async function $do(
     M.jsonErr(401, errors.UnauthorizedErrorResponse$inboundSchema),
     M.jsonErr(403, errors.ForbiddenErrorResponse$inboundSchema),
     M.jsonErr(404, errors.NotFoundErrorResponse$inboundSchema),
+    M.jsonErr(429, errors.TooManyRequestsErrorResponse$inboundSchema, {
+      ctype: "application/problem+json",
+    }),
     M.jsonErr(500, errors.InternalServerErrorResponse$inboundSchema),
     M.fail("4XX"),
     M.fail("5XX"),

package/src/funcs/ratelimitMultiLimit.ts

@@ -34,7 +34,7 @@ import { Result } from "../types/fp.js";
  *
  * Use this to efficiently check multiple rate limits at once. Each rate limit check is independent and returns its own result with a top-level `passed` indicator showing if all checks succeeded.
  *
- * **Response Codes**: Rate limit checks return HTTP 200 regardless of whether limits are exceeded - check the `passed` field to see if all limits passed, or the `success` field in each individual result. 4xx responses indicate auth, namespace existence/deletion, or validation errors (e.g., 410 Gone for deleted namespaces). 5xx responses indicate server errors.
+ * **Response Codes**: Rate limit checks return HTTP 200 regardless of whether limits are exceeded — check the `passed` field to see if all limits passed, or the `success` field in each individual result. A 429 may be returned if the workspace exceeds its API rate limit. Other 4xx responses indicate auth, namespace existence/deletion, or validation errors (e.g., 410 Gone for deleted namespaces). 5xx responses indicate server errors.
  *
  * **Required Permissions**
  *
@@ -54,6 +54,7 @@ export function ratelimitMultiLimit(
     | errors.ForbiddenErrorResponse
     | errors.NotFoundErrorResponse
     | errors.GoneErrorResponse
+    | errors.TooManyRequestsErrorResponse
     | errors.InternalServerErrorResponse
     | UnkeyError
     | ResponseValidationError
@@ -85,6 +86,7 @@ async function $do(
       | errors.ForbiddenErrorResponse
       | errors.NotFoundErrorResponse
       | errors.GoneErrorResponse
+      | errors.TooManyRequestsErrorResponse
       | errors.InternalServerErrorResponse
       | UnkeyError
       | ResponseValidationError
@@ -165,7 +167,7 @@ async function $do(
 
   const doResult = await client._do(req, {
     context,
-    errorCodes: ["400", "401", "403", "404", "410", "4XX", "500", "5XX"],
+    errorCodes: ["400", "401", "403", "404", "410", "429", "4XX", "500", "5XX"],
     retryConfig: context.retryConfig,
     retryCodes: context.retryCodes,
   });
@@ -185,6 +187,7 @@ async function $do(
     | errors.ForbiddenErrorResponse
     | errors.NotFoundErrorResponse
     | errors.GoneErrorResponse
+    | errors.TooManyRequestsErrorResponse
     | errors.InternalServerErrorResponse
     | UnkeyError
     | ResponseValidationError
@@ -201,6 +204,9 @@ async function $do(
     M.jsonErr(403, errors.ForbiddenErrorResponse$inboundSchema),
     M.jsonErr(404, errors.NotFoundErrorResponse$inboundSchema),
     M.jsonErr(410, errors.GoneErrorResponse$inboundSchema),
+    M.jsonErr(429, errors.TooManyRequestsErrorResponse$inboundSchema, {
+      ctype: "application/problem+json",
+    }),
     M.jsonErr(500, errors.InternalServerErrorResponse$inboundSchema),
     M.fail("4XX"),
     M.fail("5XX"),

package/src/funcs/ratelimitSetOverride.ts

@@ -48,6 +48,7 @@ export function ratelimitSetOverride(
     | errors.UnauthorizedErrorResponse
     | errors.ForbiddenErrorResponse
     | errors.NotFoundErrorResponse
+    | errors.TooManyRequestsErrorResponse
     | errors.InternalServerErrorResponse
     | UnkeyError
     | ResponseValidationError
@@ -78,6 +79,7 @@ async function $do(
       | errors.UnauthorizedErrorResponse
       | errors.ForbiddenErrorResponse
       | errors.NotFoundErrorResponse
+      | errors.TooManyRequestsErrorResponse
       | errors.InternalServerErrorResponse
       | UnkeyError
       | ResponseValidationError
@@ -156,7 +158,7 @@ async function $do(
 
   const doResult = await client._do(req, {
     context,
-    errorCodes: ["400", "401", "403", "404", "4XX", "500", "5XX"],
+    errorCodes: ["400", "401", "403", "404", "429", "4XX", "500", "5XX"],
     retryConfig: context.retryConfig,
     retryCodes: context.retryCodes,
   });
@@ -175,6 +177,7 @@ async function $do(
     | errors.UnauthorizedErrorResponse
     | errors.ForbiddenErrorResponse
     | errors.NotFoundErrorResponse
+    | errors.TooManyRequestsErrorResponse
     | errors.InternalServerErrorResponse
     | UnkeyError
     | ResponseValidationError
@@ -190,6 +193,9 @@ async function $do(
     M.jsonErr(401, errors.UnauthorizedErrorResponse$inboundSchema),
     M.jsonErr(403, errors.ForbiddenErrorResponse$inboundSchema),
     M.jsonErr(404, errors.NotFoundErrorResponse$inboundSchema),
+    M.jsonErr(429, errors.TooManyRequestsErrorResponse$inboundSchema, {
+      ctype: "application/problem+json",
+    }),
     M.jsonErr(500, errors.InternalServerErrorResponse$inboundSchema),
     M.fail("4XX"),
     M.fail("5XX"),

package/src/lib/config.ts

@@ -58,7 +58,7 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 export const SDK_METADATA = {
   language: "typescript",
   openapiDocVersion: "2.0.0",
-  sdkVersion: "2.3.0",
-  genVersion: "2.816.0",
-  userAgent: "speakeasy-sdk/typescript 2.3.0 2.816.0 2.0.0 @unkey/api",
+  sdkVersion: "2.3.2",
+  genVersion: "2.866.2",
+  userAgent: "speakeasy-sdk/typescript 2.3.2 2.866.2 2.0.0 @unkey/api",
 } as const;

package/src/lib/files.ts

@@ -80,3 +80,25 @@ export function getContentTypeFromFileName(fileName: string): string | null {
 
   return mimeTypes[ext] || null;
 }
+
+/**
+ * Creates a Blob from file content with the given MIME type.
+ *
+ * Node.js Buffers are Uint8Array subclasses that may share a pooled
+ * ArrayBuffer (byteOffset > 0, byteLength < buffer.byteLength). Passing
+ * such a Buffer directly to `new Blob([buf])` can include the entire
+ * underlying pool on some runtimes, producing a Blob with extra bytes
+ * that corrupts multipart uploads.
+ *
+ * Copying into a standalone Uint8Array ensures the Blob receives only the
+ * intended bytes regardless of runtime behaviour.
+ */
+export function bytesToBlob(
+  content: Uint8Array<ArrayBufferLike> | ArrayBuffer | Blob | string,
+  contentType: string,
+): Blob {
+  if (content instanceof Uint8Array) {
+    return new Blob([new Uint8Array(content)], { type: contentType });
+  }
+  return new Blob([content as BlobPart], { type: contentType });
+}

package/src/lib/matchers.ts

@@ -248,8 +248,9 @@ export function match<T, E>(
         raw = body;
         break;
       default:
-        encoding satisfies never;
-        throw new Error(`Unsupported response type: ${encoding}`);
+        throw new Error(
+          `Unsupported response type: ${encoding satisfies never}`,
+        );
     }
 
     if (matcher.enc === "fail") {

package/src/lib/security.ts

@@ -198,8 +198,7 @@ export function resolveSecurity(
         applyBearer(state, spec);
         break;
       default:
-        spec satisfies never;
-        throw SecurityError.unrecognizedType(type);
+        throw SecurityError.unrecognizedType((spec satisfies never, type));
     }
   });
 

package/src/models/components/keyresponsedata.ts

@@ -45,6 +45,10 @@ export type KeyResponseData = {
    * Unix timestamp in milliseconds when key was last updated.
    */
   updatedAt?: number | undefined;
+  /**
+   * Unix timestamp in milliseconds when key was last used for verification. This is an approximated value, accurate to within 5 minutes.
+   */
+  lastUsedAt?: number | undefined;
   /**
    * Unix timestamp in milliseconds when key expires (if set).
    */
@@ -76,6 +80,7 @@ export const KeyResponseData$inboundSchema: z.ZodType<
   meta: z.record(z.any()).optional(),
   createdAt: z.number().int(),
   updatedAt: z.number().int().optional(),
+  lastUsedAt: z.number().int().optional(),
   expires: z.number().int().optional(),
   permissions: z.array(z.string()).optional(),
   roles: z.array(z.string()).optional(),

package/src/models/components/v2deploycreatedeploymentrequestbody.ts

@@ -14,9 +14,13 @@ import {
  */
 export type V2DeployCreateDeploymentRequestBody = {
   /**
-   * Unkey project ID
+   * Project slug
    */
-  projectId: string;
+  project: string;
+  /**
+   * App slug within the project
+   */
+  app: string;
   /**
    * Optional keyspace ID for authentication context
    */
@@ -41,7 +45,8 @@ export type V2DeployCreateDeploymentRequestBody = {
 
 /** @internal */
 export type V2DeployCreateDeploymentRequestBody$Outbound = {
-  projectId: string;
+  project: string;
+  app: string;
   keyspaceId?: string | undefined;
   branch: string;
   environmentSlug: string;
@@ -55,7 +60,8 @@ export const V2DeployCreateDeploymentRequestBody$outboundSchema: z.ZodType<
   z.ZodTypeDef,
   V2DeployCreateDeploymentRequestBody
 > = z.object({
-  projectId: z.string(),
+  project: z.string(),
+  app: z.string(),
   keyspaceId: z.string().optional(),
   branch: z.string(),
   environmentSlug: z.string(),

package/src/models/components/v2deploygetdeploymentresponsedata.ts

@@ -19,11 +19,15 @@ import {
 export const Status = {
   Unspecified: "UNSPECIFIED",
   Pending: "PENDING",
+  Starting: "STARTING",
   Building: "BUILDING",
   Deploying: "DEPLOYING",
   Network: "NETWORK",
+  Finalizing: "FINALIZING",
   Ready: "READY",
   Failed: "FAILED",
+  Skipped: "SKIPPED",
+  AwaitingApproval: "AWAITING_APPROVAL",
 } as const;
 /**
  * Current deployment status

package/src/sdk/keys.ts

@@ -437,7 +437,7 @@ export class Keys extends ClientSDK {
    *
    * Use this endpoint on every incoming request to your protected resources. It checks key validity, permissions, rate limits, and usage quotas in a single call.
    *
-   * **Important**: Always returns HTTP 200. Check the `valid` field in response data to determine if the key is authorized.
+   * **Important**: Returns HTTP 200 for all verification outcomes — check the `valid` field in response data to determine if the key is authorized. A 429 may be returned if the workspace exceeds its API rate limit.
    *
    * **Common use cases:**
    * - Authenticate API requests before processing

package/src/sdk/ratelimit.ts

@@ -67,7 +67,7 @@ export class Ratelimit extends ClientSDK {
    *
    * Use this for rate limiting beyond API keys - limit users by ID, IPs by address, or any custom identifier. Supports namespace organization, variable costs, and custom overrides.
    *
-   * **Response Codes**: Rate limit checks return HTTP 200 regardless of whether the limit is exceeded - check the `success` field in the response to determine if the request should be allowed. 4xx responses indicate auth, namespace existence/deletion, or validation errors (e.g., 410 Gone for deleted namespaces). 5xx responses indicate server errors.
+   * **Response Codes**: Rate limit checks return HTTP 200 regardless of whether the limit is exceeded — check the `success` field in the response to determine if the request should be allowed. A 429 may be returned if the workspace exceeds its API rate limit. Other 4xx responses indicate auth, namespace existence/deletion, or validation errors (e.g., 410 Gone for deleted namespaces). 5xx responses indicate server errors.
    *
    * **Required Permissions**
    *
@@ -117,7 +117,7 @@ export class Ratelimit extends ClientSDK {
    *
    * Use this to efficiently check multiple rate limits at once. Each rate limit check is independent and returns its own result with a top-level `passed` indicator showing if all checks succeeded.
    *
-   * **Response Codes**: Rate limit checks return HTTP 200 regardless of whether limits are exceeded - check the `passed` field to see if all limits passed, or the `success` field in each individual result. 4xx responses indicate auth, namespace existence/deletion, or validation errors (e.g., 410 Gone for deleted namespaces). 5xx responses indicate server errors.
+   * **Response Codes**: Rate limit checks return HTTP 200 regardless of whether limits are exceeded — check the `passed` field to see if all limits passed, or the `success` field in each individual result. A 429 may be returned if the workspace exceeds its API rate limit. Other 4xx responses indicate auth, namespace existence/deletion, or validation errors (e.g., 410 Gone for deleted namespaces). 5xx responses indicate server errors.
    *
    * **Required Permissions**
    *