@zlayer/api-client 0.10.86 → 0.10.88

package/src/apis/SecretsApi.ts

@@ -17,6 +17,9 @@ import * as runtime from '../runtime';
 import type {
   BulkImportResponse,
   CreateSecretRequest,
+  RevealAllSecretsResponse,
+  RotateSecretRequest,
+  RotateSecretResponse,
   SecretMetadataResponse,
 } from '../models/index';
 import {
@@ -24,6 +27,12 @@ import {
     BulkImportResponseToJSON,
     CreateSecretRequestFromJSON,
     CreateSecretRequestToJSON,
+    RevealAllSecretsResponseFromJSON,
+    RevealAllSecretsResponseToJSON,
+    RotateSecretRequestFromJSON,
+    RotateSecretRequestToJSON,
+    RotateSecretResponseFromJSON,
+    RotateSecretResponseToJSON,
     SecretMetadataResponseFromJSON,
     SecretMetadataResponseToJSON,
 } from '../models/index';
@@ -57,6 +66,17 @@ export interface ListSecretsRequest {
     scope?: string;
 }
 
+export interface RevealAllSecretsRequest {
+    environment: string;
+}
+
+export interface RotateSecretOperationRequest {
+    name: string;
+    rotateSecretRequest: RotateSecretRequest;
+    environment?: string;
+    scope?: string;
+}
+
 /**
  * 
  */
@@ -379,4 +399,135 @@ export class SecretsApi extends runtime.BaseAPI {
         return await response.value();
     }
 
+    /**
+     * Creates request options for revealAllSecrets without sending the request
+     */
+    async revealAllSecretsRequestOpts(requestParameters: RevealAllSecretsRequest): Promise<runtime.RequestOpts> {
+        if (requestParameters['environment'] == null) {
+            throw new runtime.RequiredError(
+                'environment',
+                'Required parameter "environment" was null or undefined when calling revealAllSecrets().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        if (requestParameters['environment'] != null) {
+            queryParameters['environment'] = requestParameters['environment'];
+        }
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearer_auth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/api/v1/secrets/reveal-all`;
+
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+
+    /**
+     * Used by `zlayer run` to build the child-process env in a single round-trip.  # Errors  Returns `ApiError::Forbidden` if the caller is not admin, `ApiError::NotFound` if the environment is unknown, and `ApiError::Internal` for storage failures.
+     * Reveal every secret in an environment at once (admin only).
+     */
+    async revealAllSecretsRaw(requestParameters: RevealAllSecretsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<RevealAllSecretsResponse>> {
+        const requestOptions = await this.revealAllSecretsRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => RevealAllSecretsResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Used by `zlayer run` to build the child-process env in a single round-trip.  # Errors  Returns `ApiError::Forbidden` if the caller is not admin, `ApiError::NotFound` if the environment is unknown, and `ApiError::Internal` for storage failures.
+     * Reveal every secret in an environment at once (admin only).
+     */
+    async revealAllSecrets(requestParameters: RevealAllSecretsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<RevealAllSecretsResponse> {
+        const response = await this.revealAllSecretsRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Creates request options for rotateSecret without sending the request
+     */
+    async rotateSecretRequestOpts(requestParameters: RotateSecretOperationRequest): Promise<runtime.RequestOpts> {
+        if (requestParameters['name'] == null) {
+            throw new runtime.RequiredError(
+                'name',
+                'Required parameter "name" was null or undefined when calling rotateSecret().'
+            );
+        }
+
+        if (requestParameters['rotateSecretRequest'] == null) {
+            throw new runtime.RequiredError(
+                'rotateSecretRequest',
+                'Required parameter "rotateSecretRequest" was null or undefined when calling rotateSecret().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        if (requestParameters['environment'] != null) {
+            queryParameters['environment'] = requestParameters['environment'];
+        }
+
+        if (requestParameters['scope'] != null) {
+            queryParameters['scope'] = requestParameters['scope'];
+        }
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearer_auth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/api/v1/secrets/{name}/rotate`;
+        urlPath = urlPath.replace(`{${"name"}}`, encodeURIComponent(String(requestParameters['name'])));
+
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: RotateSecretRequestToJSON(requestParameters['rotateSecretRequest']),
+        };
+    }
+
+    /**
+     * Admin-only in v1. Mutually exclusive scope query like the other endpoints.  # Errors  Returns `ApiError::BadRequest` for empty names or conflicting scope params, `ApiError::Forbidden` for non-admin callers, `ApiError::NotFound` when the secret or environment is unknown, and `ApiError::Internal` for storage failures.
+     * Rotate a secret — overwrite with a new value and return the version before+after.
+     */
+    async rotateSecretRaw(requestParameters: RotateSecretOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<RotateSecretResponse>> {
+        const requestOptions = await this.rotateSecretRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => RotateSecretResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Admin-only in v1. Mutually exclusive scope query like the other endpoints.  # Errors  Returns `ApiError::BadRequest` for empty names or conflicting scope params, `ApiError::Forbidden` for non-admin callers, `ApiError::NotFound` when the secret or environment is unknown, and `ApiError::Internal` for storage failures.
+     * Rotate a secret — overwrite with a new value and return the version before+after.
+     */
+    async rotateSecret(requestParameters: RotateSecretOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<RotateSecretResponse> {
+        const response = await this.rotateSecretRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
 }

package/src/apis/VolumesApi.ts

@@ -15,23 +15,91 @@
 
 import * as runtime from '../runtime';
 import type {
-  VolumeSummary,
+  CreateVolumeRequest,
+  VolumeInfo,
 } from '../models/index';
 import {
-    VolumeSummaryFromJSON,
-    VolumeSummaryToJSON,
+    CreateVolumeRequestFromJSON,
+    CreateVolumeRequestToJSON,
+    VolumeInfoFromJSON,
+    VolumeInfoToJSON,
 } from '../models/index';
 
+export interface CreateVolumeOperationRequest {
+    createVolumeRequest: CreateVolumeRequest;
+}
+
 export interface DeleteVolumeRequest {
     name: string;
     force: boolean;
 }
 
+export interface GetVolumeRequest {
+    name: string;
+}
+
 /**
  * 
  */
 export class VolumesApi extends runtime.BaseAPI {
 
+    /**
+     * Creates request options for createVolume without sending the request
+     */
+    async createVolumeRequestOpts(requestParameters: CreateVolumeOperationRequest): Promise<runtime.RequestOpts> {
+        if (requestParameters['createVolumeRequest'] == null) {
+            throw new runtime.RequiredError(
+                'createVolumeRequest',
+                'Required parameter "createVolumeRequest" was null or undefined when calling createVolume().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearer_auth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/api/v1/volumes`;
+
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: CreateVolumeRequestToJSON(requestParameters['createVolumeRequest']),
+        };
+    }
+
+    /**
+     * Creates `state.volume_dir/{name}` on disk and writes a `.metadata.json` sidecar capturing labels, size, tier, and the creation timestamp.  # Errors  - 400 Bad Request — invalid name, size, or tier. - 403 Forbidden — caller lacks the `operator` role. - 409 Conflict — a volume with this name already exists. - 500 Internal — filesystem errors.
+     * Create a new named volume.
+     */
+    async createVolumeRaw(requestParameters: CreateVolumeOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<VolumeInfo>> {
+        const requestOptions = await this.createVolumeRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => VolumeInfoFromJSON(jsonValue));
+    }
+
+    /**
+     * Creates `state.volume_dir/{name}` on disk and writes a `.metadata.json` sidecar capturing labels, size, tier, and the creation timestamp.  # Errors  - 400 Bad Request — invalid name, size, or tier. - 403 Forbidden — caller lacks the `operator` role. - 409 Conflict — a volume with this name already exists. - 500 Internal — filesystem errors.
+     * Create a new named volume.
+     */
+    async createVolume(requestParameters: CreateVolumeOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<VolumeInfo> {
+        const response = await this.createVolumeRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Creates request options for deleteVolume without sending the request
      */
@@ -79,7 +147,7 @@ export class VolumesApi extends runtime.BaseAPI {
     }
 
     /**
-     * Removes a volume directory from disk. By default, only empty volumes can be deleted. Use `?force=true` to remove non-empty volumes.  # Errors  Returns an error if the volume is not found or cannot be removed.
+     * By default, refuses to remove a volume that is non-empty OR that any container currently reports mounting. `?force=true` overrides both checks.  # Errors  - 404 Not Found — no such volume. - 409 Conflict — non-empty or in-use without `?force=true`. - 403 Forbidden — caller lacks the `operator` role.
      * Delete a volume by name.
      */
     async deleteVolumeRaw(requestParameters: DeleteVolumeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
@@ -90,13 +158,68 @@ export class VolumesApi extends runtime.BaseAPI {
     }
 
     /**
-     * Removes a volume directory from disk. By default, only empty volumes can be deleted. Use `?force=true` to remove non-empty volumes.  # Errors  Returns an error if the volume is not found or cannot be removed.
+     * By default, refuses to remove a volume that is non-empty OR that any container currently reports mounting. `?force=true` overrides both checks.  # Errors  - 404 Not Found — no such volume. - 409 Conflict — non-empty or in-use without `?force=true`. - 403 Forbidden — caller lacks the `operator` role.
      * Delete a volume by name.
      */
     async deleteVolume(requestParameters: DeleteVolumeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
         await this.deleteVolumeRaw(requestParameters, initOverrides);
     }
 
+    /**
+     * Creates request options for getVolume without sending the request
+     */
+    async getVolumeRequestOpts(requestParameters: GetVolumeRequest): Promise<runtime.RequestOpts> {
+        if (requestParameters['name'] == null) {
+            throw new runtime.RequiredError(
+                'name',
+                'Required parameter "name" was null or undefined when calling getVolume().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearer_auth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/api/v1/volumes/{name}`;
+        urlPath = urlPath.replace(`{${"name"}}`, encodeURIComponent(String(requestParameters['name'])));
+
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+
+    /**
+     * Reads the sidecar when present, synthesizes defaults for legacy volumes, and populates `in_use_by` when a [`VolumeUsageSource`] is wired.  # Errors  - 404 Not Found — no such volume. - 500 Internal — filesystem or parse errors.
+     * Inspect a single volume by name.
+     */
+    async getVolumeRaw(requestParameters: GetVolumeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<VolumeInfo>> {
+        const requestOptions = await this.getVolumeRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => VolumeInfoFromJSON(jsonValue));
+    }
+
+    /**
+     * Reads the sidecar when present, synthesizes defaults for legacy volumes, and populates `in_use_by` when a [`VolumeUsageSource`] is wired.  # Errors  - 404 Not Found — no such volume. - 500 Internal — filesystem or parse errors.
+     * Inspect a single volume by name.
+     */
+    async getVolume(requestParameters: GetVolumeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<VolumeInfo> {
+        const response = await this.getVolumeRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Creates request options for listVolumes without sending the request
      */
@@ -125,21 +248,21 @@ export class VolumesApi extends runtime.BaseAPI {
     }
 
     /**
-     * Enumerates subdirectories under the volume base directory and returns metadata for each one.  # Errors  Returns an error if the volume directory cannot be read.
+     * Enumerates subdirectories under the volume base directory, reads each sidecar when present, and returns a [`VolumeInfo`] for each entry (including `in_use_by` when a [`VolumeUsageSource`] is wired).  # Errors  Returns an error if the volume directory cannot be read.
      * List all volumes on disk.
      */
-    async listVolumesRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<VolumeSummary>>> {
+    async listVolumesRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<VolumeInfo>>> {
         const requestOptions = await this.listVolumesRequestOpts();
         const response = await this.request(requestOptions, initOverrides);
 
-        return new runtime.JSONApiResponse(response, (jsonValue) => jsonValue.map(VolumeSummaryFromJSON));
+        return new runtime.JSONApiResponse(response, (jsonValue) => jsonValue.map(VolumeInfoFromJSON));
     }
 
     /**
-     * Enumerates subdirectories under the volume base directory and returns metadata for each one.  # Errors  Returns an error if the volume directory cannot be read.
+     * Enumerates subdirectories under the volume base directory, reads each sidecar when present, and returns a [`VolumeInfo`] for each entry (including `in_use_by` when a [`VolumeUsageSource`] is wired).  # Errors  Returns an error if the volume directory cannot be read.
      * List all volumes on disk.
      */
-    async listVolumes(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<VolumeSummary>> {
+    async listVolumes(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<VolumeInfo>> {
         const response = await this.listVolumesRaw(initOverrides);
         return await response.value();
     }

package/src/apis/index.ts

@@ -4,11 +4,13 @@ export * from './AuditApi';
 export * from './AuthenticationApi';
 export * from './BuildApi';
 export * from './ClusterApi';
+export * from './ContainerNetworksApi';
 export * from './ContainersApi';
 export * from './CredentialsApi';
 export * from './CronApi';
 export * from './DeploymentsApi';
 export * from './EnvironmentsApi';
+export * from './EventsApi';
 export * from './GroupsApi';
 export * from './HealthApi';
 export * from './ImagesApi';

package/src/models/BridgeNetwork.ts

@@ -0,0 +1,127 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * ZLayer API
+ * Container orchestration API for ZLayer
+ *
+ * The version of the OpenAPI document: 0.1.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+import type { BridgeNetworkDriver } from './BridgeNetworkDriver';
+import {
+    BridgeNetworkDriverFromJSON,
+    BridgeNetworkDriverFromJSONTyped,
+    BridgeNetworkDriverToJSON,
+    BridgeNetworkDriverToJSONTyped,
+} from './BridgeNetworkDriver';
+
+/**
+ * A user-defined bridge or overlay network that containers can attach to.
+ * @export
+ * @interface BridgeNetwork
+ */
+export interface BridgeNetwork {
+    /**
+     * Creation timestamp (UTC, RFC 3339).
+     * @type {Date}
+     * @memberof BridgeNetwork
+     */
+    createdAt: Date;
+    /**
+     * Driver backing the network (bridge vs. overlay).
+     * @type {BridgeNetworkDriver}
+     * @memberof BridgeNetwork
+     */
+    driver?: BridgeNetworkDriver;
+    /**
+     * Opaque server-generated identifier (UUID v4).
+     * @type {string}
+     * @memberof BridgeNetwork
+     */
+    id: string;
+    /**
+     * If true, containers attached to this network cannot reach the outside
+     * world — only other containers on the same network.
+     * @type {boolean}
+     * @memberof BridgeNetwork
+     */
+    internal?: boolean;
+    /**
+     * Arbitrary key/value labels for filtering and grouping.
+     * @type {{ [key: string]: string; }}
+     * @memberof BridgeNetwork
+     */
+    labels?: { [key: string]: string; };
+    /**
+     * Human-readable, unique name (must match `^[a-z0-9][a-z0-9_-]{0,63}$`).
+     * @type {string}
+     * @memberof BridgeNetwork
+     */
+    name: string;
+    /**
+     * IPv4/IPv6 subnet in CIDR notation (e.g. `"10.240.0.0/24"`).
+     * @type {string}
+     * @memberof BridgeNetwork
+     */
+    subnet?: string | null;
+}
+
+
+
+/**
+ * Check if a given object implements the BridgeNetwork interface.
+ */
+export function instanceOfBridgeNetwork(value: object): value is BridgeNetwork {
+    if (!('createdAt' in value) || value['createdAt'] === undefined) return false;
+    if (!('id' in value) || value['id'] === undefined) return false;
+    if (!('name' in value) || value['name'] === undefined) return false;
+    return true;
+}
+
+export function BridgeNetworkFromJSON(json: any): BridgeNetwork {
+    return BridgeNetworkFromJSONTyped(json, false);
+}
+
+export function BridgeNetworkFromJSONTyped(json: any, ignoreDiscriminator: boolean): BridgeNetwork {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'createdAt': (new Date(json['created_at'])),
+        'driver': json['driver'] == null ? undefined : BridgeNetworkDriverFromJSON(json['driver']),
+        'id': json['id'],
+        'internal': json['internal'] == null ? undefined : json['internal'],
+        'labels': json['labels'] == null ? undefined : json['labels'],
+        'name': json['name'],
+        'subnet': json['subnet'] == null ? undefined : json['subnet'],
+    };
+}
+
+export function BridgeNetworkToJSON(json: any): BridgeNetwork {
+    return BridgeNetworkToJSONTyped(json, false);
+}
+
+export function BridgeNetworkToJSONTyped(value?: BridgeNetwork | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'created_at': value['createdAt'].toISOString(),
+        'driver': BridgeNetworkDriverToJSON(value['driver']),
+        'id': value['id'],
+        'internal': value['internal'],
+        'labels': value['labels'],
+        'name': value['name'],
+        'subnet': value['subnet'],
+    };
+}
+

package/src/models/BridgeNetworkAttachment.ts

@@ -0,0 +1,90 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * ZLayer API
+ * Container orchestration API for ZLayer
+ *
+ * The version of the OpenAPI document: 0.1.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+/**
+ * A container attached to a [`BridgeNetwork`].
+ * @export
+ * @interface BridgeNetworkAttachment
+ */
+export interface BridgeNetworkAttachment {
+    /**
+     * DNS aliases the container can be reached by on this network.
+     * @type {Array<string>}
+     * @memberof BridgeNetworkAttachment
+     */
+    aliases?: Array<string>;
+    /**
+     * Runtime-provided container id.
+     * @type {string}
+     * @memberof BridgeNetworkAttachment
+     */
+    containerId: string;
+    /**
+     * Container name, if known.
+     * @type {string}
+     * @memberof BridgeNetworkAttachment
+     */
+    containerName?: string | null;
+    /**
+     * Assigned IPv4 address on the network (if any).
+     * @type {string}
+     * @memberof BridgeNetworkAttachment
+     */
+    ipv4?: string | null;
+}
+
+/**
+ * Check if a given object implements the BridgeNetworkAttachment interface.
+ */
+export function instanceOfBridgeNetworkAttachment(value: object): value is BridgeNetworkAttachment {
+    if (!('containerId' in value) || value['containerId'] === undefined) return false;
+    return true;
+}
+
+export function BridgeNetworkAttachmentFromJSON(json: any): BridgeNetworkAttachment {
+    return BridgeNetworkAttachmentFromJSONTyped(json, false);
+}
+
+export function BridgeNetworkAttachmentFromJSONTyped(json: any, ignoreDiscriminator: boolean): BridgeNetworkAttachment {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'aliases': json['aliases'] == null ? undefined : json['aliases'],
+        'containerId': json['container_id'],
+        'containerName': json['container_name'] == null ? undefined : json['container_name'],
+        'ipv4': json['ipv4'] == null ? undefined : json['ipv4'],
+    };
+}
+
+export function BridgeNetworkAttachmentToJSON(json: any): BridgeNetworkAttachment {
+    return BridgeNetworkAttachmentToJSONTyped(json, false);
+}
+
+export function BridgeNetworkAttachmentToJSONTyped(value?: BridgeNetworkAttachment | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'aliases': value['aliases'],
+        'container_id': value['containerId'],
+        'container_name': value['containerName'],
+        'ipv4': value['ipv4'],
+    };
+}
+