hanzoai 2.2.9 → 2.2.11

package/dist/api/sql-api.d.ts

@@ -1,212 +0,0 @@
-/**
- * Hanzo Cloud API
- * Composed from each subsystem\'s own projection of its router, in the fleet\'s mount order — every operation below is a route the subsystem that publishes it registered. Tagged by product: the first path segment after /v1/.
- *
- * The version of the OpenAPI document: v1
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-import type { Configuration } from '../configuration';
-import type { AxiosPromise, AxiosInstance, RawAxiosRequestConfig } from 'axios';
-import globalAxios from 'axios';
-import { type RequestArgs, BaseAPI } from '../base';
-import type { ProvisionRequest } from '../models';
-import type { ProvisionResult } from '../models';
-import type { ProvisionedResource } from '../models';
-import type { ProvisionedSummary } from '../models';
-/**
- * SqlApi - axios parameter creator
- * @export
- */
-export declare const SqlApiAxiosParamCreator: (configuration?: Configuration) => {
-    /**
-     * DropSQL deprovisions one Hanzo SQL database. It reverts any app instance bound to it back to Base BEFORE tearing down the org\'s dedicated Postgres instance — never a live app pointed at a deleted backend — then deletes the sealed credential and removes the metadata row. Answers 204 with no body; a second call is a 404, not a second delete.
-     * @summary DropSQL deprovisions one Hanzo SQL database.
-     * @param {string} name Name is the resource\'s org-unique slug, from the path. Lower-cased and trimmed before lookup, exactly as it was at create.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    deleteSqlByName: (name: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
-    /**
-     * ListSQL lists the caller org\'s Hanzo SQL databases. Each one is a DEDICATED PostgreSQL instance the org alone runs, so the host is that instance\'s own in-cluster Service and the port is 5432.
-     * @summary ListSQL lists the caller org\'s Hanzo SQL databases.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    getSql: (options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
-    /**
-     * GetSQL returns one Hanzo SQL database\'s metadata. It carries the database\'s status, its instance address and the admin user Postgres booted with — never the password, which is returned once at create and otherwise lives only in Hanzo KMS. A still-booting instance reads \"provisioning\", reconciled from the operator\'s live view rather than from the row.
-     * @summary GetSQL returns one Hanzo SQL database\'s metadata.
-     * @param {string} name Name is the resource\&#39;s org-unique slug, from the path. Lower-cased and trimmed before lookup, exactly as it was at create.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    getSqlByName: (name: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
-    /**
-     * Launches your org\'s OWN PostgreSQL instance and answers with its `postgres://` connection string. The instance is yours alone: a deployment in your own tenant namespace, so its admin credential is naturally scoped to you and no other tenant shares the process. Off-cluster, where there is no orchestrator to launch one, this fails closed with 503 rather than handing back a shared one.  `name` is the org-unique slug every physical name derives from, and must match ^[a-z0-9]([a-z0-9-]{0,38}[a-z0-9])?$. `instance` optionally BINDS the add-on to one of your app instances: the DSN is injected into that instance\'s addons secret as <KIND>_URL, switching the app off its built-in store and onto this one. Omit it and the connection string is yours to wire.  THE CREDENTIAL COMES BACK ONCE. The connection string and password are in this response and nowhere else — every read beside it omits the password — so a caller that does not keep them has to provision again. Where KMS is configured the password is sealed there and only a reference is persisted; where it is not, it is returned this once and stored nowhere. It is never held in plaintext.  Scoped to the caller\'s validated org (403 without one), which also namespaces the physical resource under a fixed-width hash, so two tenants can never fold onto one backend resource — a residual collision fails closed with 409 rather than silently sharing. A name already taken in your org is 409; an invalid name or instance slug is 400; a backend that refuses the create is 502. Where a later step fails after the backend resource already exists, it is torn back down rather than left orphaned.  Billing is gated BEFORE anything is created: an unfunded org — or, in the fail-closed default, an unreachable meter — gets the fleet-wide 402/503 and nothing is provisioned. The fee is per-kind and set by the deployment.
-     * @summary Provision a PostgreSQL database for your org
-     * @param {ProvisionRequest} [provisionRequest]
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    postSql: (provisionRequest?: ProvisionRequest, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
-};
-/**
- * SqlApi - functional programming interface
- * @export
- */
-export declare const SqlApiFp: (configuration?: Configuration) => {
-    /**
-     * DropSQL deprovisions one Hanzo SQL database. It reverts any app instance bound to it back to Base BEFORE tearing down the org\'s dedicated Postgres instance — never a live app pointed at a deleted backend — then deletes the sealed credential and removes the metadata row. Answers 204 with no body; a second call is a 404, not a second delete.
-     * @summary DropSQL deprovisions one Hanzo SQL database.
-     * @param {string} name Name is the resource\&#39;s org-unique slug, from the path. Lower-cased and trimmed before lookup, exactly as it was at create.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    deleteSqlByName(name: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
-    /**
-     * ListSQL lists the caller org\'s Hanzo SQL databases. Each one is a DEDICATED PostgreSQL instance the org alone runs, so the host is that instance\'s own in-cluster Service and the port is 5432.
-     * @summary ListSQL lists the caller org\'s Hanzo SQL databases.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    getSql(options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ProvisionedSummary>>>;
-    /**
-     * GetSQL returns one Hanzo SQL database\'s metadata. It carries the database\'s status, its instance address and the admin user Postgres booted with — never the password, which is returned once at create and otherwise lives only in Hanzo KMS. A still-booting instance reads \"provisioning\", reconciled from the operator\'s live view rather than from the row.
-     * @summary GetSQL returns one Hanzo SQL database\'s metadata.
-     * @param {string} name Name is the resource\&#39;s org-unique slug, from the path. Lower-cased and trimmed before lookup, exactly as it was at create.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    getSqlByName(name: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ProvisionedResource>>;
-    /**
-     * Launches your org\'s OWN PostgreSQL instance and answers with its `postgres://` connection string. The instance is yours alone: a deployment in your own tenant namespace, so its admin credential is naturally scoped to you and no other tenant shares the process. Off-cluster, where there is no orchestrator to launch one, this fails closed with 503 rather than handing back a shared one.  `name` is the org-unique slug every physical name derives from, and must match ^[a-z0-9]([a-z0-9-]{0,38}[a-z0-9])?$. `instance` optionally BINDS the add-on to one of your app instances: the DSN is injected into that instance\'s addons secret as <KIND>_URL, switching the app off its built-in store and onto this one. Omit it and the connection string is yours to wire.  THE CREDENTIAL COMES BACK ONCE. The connection string and password are in this response and nowhere else — every read beside it omits the password — so a caller that does not keep them has to provision again. Where KMS is configured the password is sealed there and only a reference is persisted; where it is not, it is returned this once and stored nowhere. It is never held in plaintext.  Scoped to the caller\'s validated org (403 without one), which also namespaces the physical resource under a fixed-width hash, so two tenants can never fold onto one backend resource — a residual collision fails closed with 409 rather than silently sharing. A name already taken in your org is 409; an invalid name or instance slug is 400; a backend that refuses the create is 502. Where a later step fails after the backend resource already exists, it is torn back down rather than left orphaned.  Billing is gated BEFORE anything is created: an unfunded org — or, in the fail-closed default, an unreachable meter — gets the fleet-wide 402/503 and nothing is provisioned. The fee is per-kind and set by the deployment.
-     * @summary Provision a PostgreSQL database for your org
-     * @param {ProvisionRequest} [provisionRequest]
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    postSql(provisionRequest?: ProvisionRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ProvisionResult>>;
-};
-/**
- * SqlApi - factory interface
- * @export
- */
-export declare const SqlApiFactory: (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) => {
-    /**
-     * DropSQL deprovisions one Hanzo SQL database. It reverts any app instance bound to it back to Base BEFORE tearing down the org\'s dedicated Postgres instance — never a live app pointed at a deleted backend — then deletes the sealed credential and removes the metadata row. Answers 204 with no body; a second call is a 404, not a second delete.
-     * @summary DropSQL deprovisions one Hanzo SQL database.
-     * @param {SqlApiDeleteSqlByNameRequest} requestParameters Request parameters.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    deleteSqlByName(requestParameters: SqlApiDeleteSqlByNameRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
-    /**
-     * ListSQL lists the caller org\'s Hanzo SQL databases. Each one is a DEDICATED PostgreSQL instance the org alone runs, so the host is that instance\'s own in-cluster Service and the port is 5432.
-     * @summary ListSQL lists the caller org\'s Hanzo SQL databases.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    getSql(options?: RawAxiosRequestConfig): AxiosPromise<Array<ProvisionedSummary>>;
-    /**
-     * GetSQL returns one Hanzo SQL database\'s metadata. It carries the database\'s status, its instance address and the admin user Postgres booted with — never the password, which is returned once at create and otherwise lives only in Hanzo KMS. A still-booting instance reads \"provisioning\", reconciled from the operator\'s live view rather than from the row.
-     * @summary GetSQL returns one Hanzo SQL database\'s metadata.
-     * @param {SqlApiGetSqlByNameRequest} requestParameters Request parameters.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    getSqlByName(requestParameters: SqlApiGetSqlByNameRequest, options?: RawAxiosRequestConfig): AxiosPromise<ProvisionedResource>;
-    /**
-     * Launches your org\'s OWN PostgreSQL instance and answers with its `postgres://` connection string. The instance is yours alone: a deployment in your own tenant namespace, so its admin credential is naturally scoped to you and no other tenant shares the process. Off-cluster, where there is no orchestrator to launch one, this fails closed with 503 rather than handing back a shared one.  `name` is the org-unique slug every physical name derives from, and must match ^[a-z0-9]([a-z0-9-]{0,38}[a-z0-9])?$. `instance` optionally BINDS the add-on to one of your app instances: the DSN is injected into that instance\'s addons secret as <KIND>_URL, switching the app off its built-in store and onto this one. Omit it and the connection string is yours to wire.  THE CREDENTIAL COMES BACK ONCE. The connection string and password are in this response and nowhere else — every read beside it omits the password — so a caller that does not keep them has to provision again. Where KMS is configured the password is sealed there and only a reference is persisted; where it is not, it is returned this once and stored nowhere. It is never held in plaintext.  Scoped to the caller\'s validated org (403 without one), which also namespaces the physical resource under a fixed-width hash, so two tenants can never fold onto one backend resource — a residual collision fails closed with 409 rather than silently sharing. A name already taken in your org is 409; an invalid name or instance slug is 400; a backend that refuses the create is 502. Where a later step fails after the backend resource already exists, it is torn back down rather than left orphaned.  Billing is gated BEFORE anything is created: an unfunded org — or, in the fail-closed default, an unreachable meter — gets the fleet-wide 402/503 and nothing is provisioned. The fee is per-kind and set by the deployment.
-     * @summary Provision a PostgreSQL database for your org
-     * @param {SqlApiPostSqlRequest} requestParameters Request parameters.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    postSql(requestParameters?: SqlApiPostSqlRequest, options?: RawAxiosRequestConfig): AxiosPromise<ProvisionResult>;
-};
-/**
- * Request parameters for deleteSqlByName operation in SqlApi.
- * @export
- * @interface SqlApiDeleteSqlByNameRequest
- */
-export interface SqlApiDeleteSqlByNameRequest {
-    /**
-     * Name is the resource\&#39;s org-unique slug, from the path. Lower-cased and trimmed before lookup, exactly as it was at create.
-     * @type {string}
-     * @memberof SqlApiDeleteSqlByName
-     */
-    readonly name: string;
-}
-/**
- * Request parameters for getSqlByName operation in SqlApi.
- * @export
- * @interface SqlApiGetSqlByNameRequest
- */
-export interface SqlApiGetSqlByNameRequest {
-    /**
-     * Name is the resource\&#39;s org-unique slug, from the path. Lower-cased and trimmed before lookup, exactly as it was at create.
-     * @type {string}
-     * @memberof SqlApiGetSqlByName
-     */
-    readonly name: string;
-}
-/**
- * Request parameters for postSql operation in SqlApi.
- * @export
- * @interface SqlApiPostSqlRequest
- */
-export interface SqlApiPostSqlRequest {
-    /**
-     *
-     * @type {ProvisionRequest}
-     * @memberof SqlApiPostSql
-     */
-    readonly provisionRequest?: ProvisionRequest;
-}
-/**
- * SqlApi - object-oriented interface
- * @export
- * @class SqlApi
- * @extends {BaseAPI}
- */
-export declare class SqlApi extends BaseAPI {
-    /**
-     * DropSQL deprovisions one Hanzo SQL database. It reverts any app instance bound to it back to Base BEFORE tearing down the org\'s dedicated Postgres instance — never a live app pointed at a deleted backend — then deletes the sealed credential and removes the metadata row. Answers 204 with no body; a second call is a 404, not a second delete.
-     * @summary DropSQL deprovisions one Hanzo SQL database.
-     * @param {SqlApiDeleteSqlByNameRequest} requestParameters Request parameters.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof SqlApi
-     */
-    deleteSqlByName(requestParameters: SqlApiDeleteSqlByNameRequest, options?: RawAxiosRequestConfig): Promise<globalAxios.AxiosResponse<void, any, {}>>;
-    /**
-     * ListSQL lists the caller org\'s Hanzo SQL databases. Each one is a DEDICATED PostgreSQL instance the org alone runs, so the host is that instance\'s own in-cluster Service and the port is 5432.
-     * @summary ListSQL lists the caller org\'s Hanzo SQL databases.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof SqlApi
-     */
-    getSql(options?: RawAxiosRequestConfig): Promise<globalAxios.AxiosResponse<ProvisionedSummary[], any, {}>>;
-    /**
-     * GetSQL returns one Hanzo SQL database\'s metadata. It carries the database\'s status, its instance address and the admin user Postgres booted with — never the password, which is returned once at create and otherwise lives only in Hanzo KMS. A still-booting instance reads \"provisioning\", reconciled from the operator\'s live view rather than from the row.
-     * @summary GetSQL returns one Hanzo SQL database\'s metadata.
-     * @param {SqlApiGetSqlByNameRequest} requestParameters Request parameters.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof SqlApi
-     */
-    getSqlByName(requestParameters: SqlApiGetSqlByNameRequest, options?: RawAxiosRequestConfig): Promise<globalAxios.AxiosResponse<ProvisionedResource, any, {}>>;
-    /**
-     * Launches your org\'s OWN PostgreSQL instance and answers with its `postgres://` connection string. The instance is yours alone: a deployment in your own tenant namespace, so its admin credential is naturally scoped to you and no other tenant shares the process. Off-cluster, where there is no orchestrator to launch one, this fails closed with 503 rather than handing back a shared one.  `name` is the org-unique slug every physical name derives from, and must match ^[a-z0-9]([a-z0-9-]{0,38}[a-z0-9])?$. `instance` optionally BINDS the add-on to one of your app instances: the DSN is injected into that instance\'s addons secret as <KIND>_URL, switching the app off its built-in store and onto this one. Omit it and the connection string is yours to wire.  THE CREDENTIAL COMES BACK ONCE. The connection string and password are in this response and nowhere else — every read beside it omits the password — so a caller that does not keep them has to provision again. Where KMS is configured the password is sealed there and only a reference is persisted; where it is not, it is returned this once and stored nowhere. It is never held in plaintext.  Scoped to the caller\'s validated org (403 without one), which also namespaces the physical resource under a fixed-width hash, so two tenants can never fold onto one backend resource — a residual collision fails closed with 409 rather than silently sharing. A name already taken in your org is 409; an invalid name or instance slug is 400; a backend that refuses the create is 502. Where a later step fails after the backend resource already exists, it is torn back down rather than left orphaned.  Billing is gated BEFORE anything is created: an unfunded org — or, in the fail-closed default, an unreachable meter — gets the fleet-wide 402/503 and nothing is provisioned. The fee is per-kind and set by the deployment.
-     * @summary Provision a PostgreSQL database for your org
-     * @param {SqlApiPostSqlRequest} requestParameters Request parameters.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof SqlApi
-     */
-    postSql(requestParameters?: SqlApiPostSqlRequest, options?: RawAxiosRequestConfig): Promise<globalAxios.AxiosResponse<ProvisionResult, any, {}>>;
-}

package/dist/api/sql-api.js

@@ -1,307 +0,0 @@
-"use strict";
-/* tslint:disable */
-/* eslint-disable */
-/**
- * Hanzo Cloud API
- * Composed from each subsystem\'s own projection of its router, in the fleet\'s mount order — every operation below is a route the subsystem that publishes it registered. Tagged by product: the first path segment after /v1/.
- *
- * The version of the OpenAPI document: v1
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SqlApi = exports.SqlApiFactory = exports.SqlApiFp = exports.SqlApiAxiosParamCreator = void 0;
-const axios_1 = __importDefault(require("axios"));
-// Some imports not used depending on template conditions
-// @ts-ignore
-const common_1 = require("../common");
-// @ts-ignore
-const base_1 = require("../base");
-/**
- * SqlApi - axios parameter creator
- * @export
- */
-const SqlApiAxiosParamCreator = function (configuration) {
-    return {
-        /**
-         * DropSQL deprovisions one Hanzo SQL database. It reverts any app instance bound to it back to Base BEFORE tearing down the org\'s dedicated Postgres instance — never a live app pointed at a deleted backend — then deletes the sealed credential and removes the metadata row. Answers 204 with no body; a second call is a 404, not a second delete.
-         * @summary DropSQL deprovisions one Hanzo SQL database.
-         * @param {string} name Name is the resource\'s org-unique slug, from the path. Lower-cased and trimmed before lookup, exactly as it was at create.
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        deleteSqlByName: async (name, options = {}) => {
-            // verify required parameter 'name' is not null or undefined
-            (0, common_1.assertParamExists)('deleteSqlByName', 'name', name);
-            const localVarPath = `/v1/sql/{name}`
-                .replace(`{${"name"}}`, encodeURIComponent(String(name)));
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
-            }
-            const localVarRequestOptions = { method: 'DELETE', ...baseOptions, ...options };
-            const localVarHeaderParameter = {};
-            const localVarQueryParameter = {};
-            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
-            return {
-                url: (0, common_1.toPathString)(localVarUrlObj),
-                options: localVarRequestOptions,
-            };
-        },
-        /**
-         * ListSQL lists the caller org\'s Hanzo SQL databases. Each one is a DEDICATED PostgreSQL instance the org alone runs, so the host is that instance\'s own in-cluster Service and the port is 5432.
-         * @summary ListSQL lists the caller org\'s Hanzo SQL databases.
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        getSql: async (options = {}) => {
-            const localVarPath = `/v1/sql`;
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
-            }
-            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options };
-            const localVarHeaderParameter = {};
-            const localVarQueryParameter = {};
-            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
-            return {
-                url: (0, common_1.toPathString)(localVarUrlObj),
-                options: localVarRequestOptions,
-            };
-        },
-        /**
-         * GetSQL returns one Hanzo SQL database\'s metadata. It carries the database\'s status, its instance address and the admin user Postgres booted with — never the password, which is returned once at create and otherwise lives only in Hanzo KMS. A still-booting instance reads \"provisioning\", reconciled from the operator\'s live view rather than from the row.
-         * @summary GetSQL returns one Hanzo SQL database\'s metadata.
-         * @param {string} name Name is the resource\'s org-unique slug, from the path. Lower-cased and trimmed before lookup, exactly as it was at create.
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        getSqlByName: async (name, options = {}) => {
-            // verify required parameter 'name' is not null or undefined
-            (0, common_1.assertParamExists)('getSqlByName', 'name', name);
-            const localVarPath = `/v1/sql/{name}`
-                .replace(`{${"name"}}`, encodeURIComponent(String(name)));
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
-            }
-            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options };
-            const localVarHeaderParameter = {};
-            const localVarQueryParameter = {};
-            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
-            return {
-                url: (0, common_1.toPathString)(localVarUrlObj),
-                options: localVarRequestOptions,
-            };
-        },
-        /**
-         * Launches your org\'s OWN PostgreSQL instance and answers with its `postgres://` connection string. The instance is yours alone: a deployment in your own tenant namespace, so its admin credential is naturally scoped to you and no other tenant shares the process. Off-cluster, where there is no orchestrator to launch one, this fails closed with 503 rather than handing back a shared one.  `name` is the org-unique slug every physical name derives from, and must match ^[a-z0-9]([a-z0-9-]{0,38}[a-z0-9])?$. `instance` optionally BINDS the add-on to one of your app instances: the DSN is injected into that instance\'s addons secret as <KIND>_URL, switching the app off its built-in store and onto this one. Omit it and the connection string is yours to wire.  THE CREDENTIAL COMES BACK ONCE. The connection string and password are in this response and nowhere else — every read beside it omits the password — so a caller that does not keep them has to provision again. Where KMS is configured the password is sealed there and only a reference is persisted; where it is not, it is returned this once and stored nowhere. It is never held in plaintext.  Scoped to the caller\'s validated org (403 without one), which also namespaces the physical resource under a fixed-width hash, so two tenants can never fold onto one backend resource — a residual collision fails closed with 409 rather than silently sharing. A name already taken in your org is 409; an invalid name or instance slug is 400; a backend that refuses the create is 502. Where a later step fails after the backend resource already exists, it is torn back down rather than left orphaned.  Billing is gated BEFORE anything is created: an unfunded org — or, in the fail-closed default, an unreachable meter — gets the fleet-wide 402/503 and nothing is provisioned. The fee is per-kind and set by the deployment.
-         * @summary Provision a PostgreSQL database for your org
-         * @param {ProvisionRequest} [provisionRequest]
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        postSql: async (provisionRequest, options = {}) => {
-            const localVarPath = `/v1/sql`;
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
-            }
-            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options };
-            const localVarHeaderParameter = {};
-            const localVarQueryParameter = {};
-            localVarHeaderParameter['Content-Type'] = 'application/json';
-            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
-            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(provisionRequest, localVarRequestOptions, configuration);
-            return {
-                url: (0, common_1.toPathString)(localVarUrlObj),
-                options: localVarRequestOptions,
-            };
-        },
-    };
-};
-exports.SqlApiAxiosParamCreator = SqlApiAxiosParamCreator;
-/**
- * SqlApi - functional programming interface
- * @export
- */
-const SqlApiFp = function (configuration) {
-    const localVarAxiosParamCreator = (0, exports.SqlApiAxiosParamCreator)(configuration);
-    return {
-        /**
-         * DropSQL deprovisions one Hanzo SQL database. It reverts any app instance bound to it back to Base BEFORE tearing down the org\'s dedicated Postgres instance — never a live app pointed at a deleted backend — then deletes the sealed credential and removes the metadata row. Answers 204 with no body; a second call is a 404, not a second delete.
-         * @summary DropSQL deprovisions one Hanzo SQL database.
-         * @param {string} name Name is the resource\&#39;s org-unique slug, from the path. Lower-cased and trimmed before lookup, exactly as it was at create.
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        async deleteSqlByName(name, options) {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.deleteSqlByName(name, options);
-            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = base_1.operationServerMap['SqlApi.deleteSqlByName']?.[localVarOperationServerIndex]?.url;
-            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
-        },
-        /**
-         * ListSQL lists the caller org\'s Hanzo SQL databases. Each one is a DEDICATED PostgreSQL instance the org alone runs, so the host is that instance\'s own in-cluster Service and the port is 5432.
-         * @summary ListSQL lists the caller org\'s Hanzo SQL databases.
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        async getSql(options) {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.getSql(options);
-            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = base_1.operationServerMap['SqlApi.getSql']?.[localVarOperationServerIndex]?.url;
-            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
-        },
-        /**
-         * GetSQL returns one Hanzo SQL database\'s metadata. It carries the database\'s status, its instance address and the admin user Postgres booted with — never the password, which is returned once at create and otherwise lives only in Hanzo KMS. A still-booting instance reads \"provisioning\", reconciled from the operator\'s live view rather than from the row.
-         * @summary GetSQL returns one Hanzo SQL database\'s metadata.
-         * @param {string} name Name is the resource\&#39;s org-unique slug, from the path. Lower-cased and trimmed before lookup, exactly as it was at create.
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        async getSqlByName(name, options) {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.getSqlByName(name, options);
-            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = base_1.operationServerMap['SqlApi.getSqlByName']?.[localVarOperationServerIndex]?.url;
-            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
-        },
-        /**
-         * Launches your org\'s OWN PostgreSQL instance and answers with its `postgres://` connection string. The instance is yours alone: a deployment in your own tenant namespace, so its admin credential is naturally scoped to you and no other tenant shares the process. Off-cluster, where there is no orchestrator to launch one, this fails closed with 503 rather than handing back a shared one.  `name` is the org-unique slug every physical name derives from, and must match ^[a-z0-9]([a-z0-9-]{0,38}[a-z0-9])?$. `instance` optionally BINDS the add-on to one of your app instances: the DSN is injected into that instance\'s addons secret as <KIND>_URL, switching the app off its built-in store and onto this one. Omit it and the connection string is yours to wire.  THE CREDENTIAL COMES BACK ONCE. The connection string and password are in this response and nowhere else — every read beside it omits the password — so a caller that does not keep them has to provision again. Where KMS is configured the password is sealed there and only a reference is persisted; where it is not, it is returned this once and stored nowhere. It is never held in plaintext.  Scoped to the caller\'s validated org (403 without one), which also namespaces the physical resource under a fixed-width hash, so two tenants can never fold onto one backend resource — a residual collision fails closed with 409 rather than silently sharing. A name already taken in your org is 409; an invalid name or instance slug is 400; a backend that refuses the create is 502. Where a later step fails after the backend resource already exists, it is torn back down rather than left orphaned.  Billing is gated BEFORE anything is created: an unfunded org — or, in the fail-closed default, an unreachable meter — gets the fleet-wide 402/503 and nothing is provisioned. The fee is per-kind and set by the deployment.
-         * @summary Provision a PostgreSQL database for your org
-         * @param {ProvisionRequest} [provisionRequest]
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        async postSql(provisionRequest, options) {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.postSql(provisionRequest, options);
-            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = base_1.operationServerMap['SqlApi.postSql']?.[localVarOperationServerIndex]?.url;
-            return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
-        },
-    };
-};
-exports.SqlApiFp = SqlApiFp;
-/**
- * SqlApi - factory interface
- * @export
- */
-const SqlApiFactory = function (configuration, basePath, axios) {
-    const localVarFp = (0, exports.SqlApiFp)(configuration);
-    return {
-        /**
-         * DropSQL deprovisions one Hanzo SQL database. It reverts any app instance bound to it back to Base BEFORE tearing down the org\'s dedicated Postgres instance — never a live app pointed at a deleted backend — then deletes the sealed credential and removes the metadata row. Answers 204 with no body; a second call is a 404, not a second delete.
-         * @summary DropSQL deprovisions one Hanzo SQL database.
-         * @param {SqlApiDeleteSqlByNameRequest} requestParameters Request parameters.
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        deleteSqlByName(requestParameters, options) {
-            return localVarFp.deleteSqlByName(requestParameters.name, options).then((request) => request(axios, basePath));
-        },
-        /**
-         * ListSQL lists the caller org\'s Hanzo SQL databases. Each one is a DEDICATED PostgreSQL instance the org alone runs, so the host is that instance\'s own in-cluster Service and the port is 5432.
-         * @summary ListSQL lists the caller org\'s Hanzo SQL databases.
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        getSql(options) {
-            return localVarFp.getSql(options).then((request) => request(axios, basePath));
-        },
-        /**
-         * GetSQL returns one Hanzo SQL database\'s metadata. It carries the database\'s status, its instance address and the admin user Postgres booted with — never the password, which is returned once at create and otherwise lives only in Hanzo KMS. A still-booting instance reads \"provisioning\", reconciled from the operator\'s live view rather than from the row.
-         * @summary GetSQL returns one Hanzo SQL database\'s metadata.
-         * @param {SqlApiGetSqlByNameRequest} requestParameters Request parameters.
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        getSqlByName(requestParameters, options) {
-            return localVarFp.getSqlByName(requestParameters.name, options).then((request) => request(axios, basePath));
-        },
-        /**
-         * Launches your org\'s OWN PostgreSQL instance and answers with its `postgres://` connection string. The instance is yours alone: a deployment in your own tenant namespace, so its admin credential is naturally scoped to you and no other tenant shares the process. Off-cluster, where there is no orchestrator to launch one, this fails closed with 503 rather than handing back a shared one.  `name` is the org-unique slug every physical name derives from, and must match ^[a-z0-9]([a-z0-9-]{0,38}[a-z0-9])?$. `instance` optionally BINDS the add-on to one of your app instances: the DSN is injected into that instance\'s addons secret as <KIND>_URL, switching the app off its built-in store and onto this one. Omit it and the connection string is yours to wire.  THE CREDENTIAL COMES BACK ONCE. The connection string and password are in this response and nowhere else — every read beside it omits the password — so a caller that does not keep them has to provision again. Where KMS is configured the password is sealed there and only a reference is persisted; where it is not, it is returned this once and stored nowhere. It is never held in plaintext.  Scoped to the caller\'s validated org (403 without one), which also namespaces the physical resource under a fixed-width hash, so two tenants can never fold onto one backend resource — a residual collision fails closed with 409 rather than silently sharing. A name already taken in your org is 409; an invalid name or instance slug is 400; a backend that refuses the create is 502. Where a later step fails after the backend resource already exists, it is torn back down rather than left orphaned.  Billing is gated BEFORE anything is created: an unfunded org — or, in the fail-closed default, an unreachable meter — gets the fleet-wide 402/503 and nothing is provisioned. The fee is per-kind and set by the deployment.
-         * @summary Provision a PostgreSQL database for your org
-         * @param {SqlApiPostSqlRequest} requestParameters Request parameters.
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        postSql(requestParameters = {}, options) {
-            return localVarFp.postSql(requestParameters.provisionRequest, options).then((request) => request(axios, basePath));
-        },
-    };
-};
-exports.SqlApiFactory = SqlApiFactory;
-/**
- * SqlApi - object-oriented interface
- * @export
- * @class SqlApi
- * @extends {BaseAPI}
- */
-class SqlApi extends base_1.BaseAPI {
-    /**
-     * DropSQL deprovisions one Hanzo SQL database. It reverts any app instance bound to it back to Base BEFORE tearing down the org\'s dedicated Postgres instance — never a live app pointed at a deleted backend — then deletes the sealed credential and removes the metadata row. Answers 204 with no body; a second call is a 404, not a second delete.
-     * @summary DropSQL deprovisions one Hanzo SQL database.
-     * @param {SqlApiDeleteSqlByNameRequest} requestParameters Request parameters.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof SqlApi
-     */
-    deleteSqlByName(requestParameters, options) {
-        return (0, exports.SqlApiFp)(this.configuration).deleteSqlByName(requestParameters.name, options).then((request) => request(this.axios, this.basePath));
-    }
-    /**
-     * ListSQL lists the caller org\'s Hanzo SQL databases. Each one is a DEDICATED PostgreSQL instance the org alone runs, so the host is that instance\'s own in-cluster Service and the port is 5432.
-     * @summary ListSQL lists the caller org\'s Hanzo SQL databases.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof SqlApi
-     */
-    getSql(options) {
-        return (0, exports.SqlApiFp)(this.configuration).getSql(options).then((request) => request(this.axios, this.basePath));
-    }
-    /**
-     * GetSQL returns one Hanzo SQL database\'s metadata. It carries the database\'s status, its instance address and the admin user Postgres booted with — never the password, which is returned once at create and otherwise lives only in Hanzo KMS. A still-booting instance reads \"provisioning\", reconciled from the operator\'s live view rather than from the row.
-     * @summary GetSQL returns one Hanzo SQL database\'s metadata.
-     * @param {SqlApiGetSqlByNameRequest} requestParameters Request parameters.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof SqlApi
-     */
-    getSqlByName(requestParameters, options) {
-        return (0, exports.SqlApiFp)(this.configuration).getSqlByName(requestParameters.name, options).then((request) => request(this.axios, this.basePath));
-    }
-    /**
-     * Launches your org\'s OWN PostgreSQL instance and answers with its `postgres://` connection string. The instance is yours alone: a deployment in your own tenant namespace, so its admin credential is naturally scoped to you and no other tenant shares the process. Off-cluster, where there is no orchestrator to launch one, this fails closed with 503 rather than handing back a shared one.  `name` is the org-unique slug every physical name derives from, and must match ^[a-z0-9]([a-z0-9-]{0,38}[a-z0-9])?$. `instance` optionally BINDS the add-on to one of your app instances: the DSN is injected into that instance\'s addons secret as <KIND>_URL, switching the app off its built-in store and onto this one. Omit it and the connection string is yours to wire.  THE CREDENTIAL COMES BACK ONCE. The connection string and password are in this response and nowhere else — every read beside it omits the password — so a caller that does not keep them has to provision again. Where KMS is configured the password is sealed there and only a reference is persisted; where it is not, it is returned this once and stored nowhere. It is never held in plaintext.  Scoped to the caller\'s validated org (403 without one), which also namespaces the physical resource under a fixed-width hash, so two tenants can never fold onto one backend resource — a residual collision fails closed with 409 rather than silently sharing. A name already taken in your org is 409; an invalid name or instance slug is 400; a backend that refuses the create is 502. Where a later step fails after the backend resource already exists, it is torn back down rather than left orphaned.  Billing is gated BEFORE anything is created: an unfunded org — or, in the fail-closed default, an unreachable meter — gets the fleet-wide 402/503 and nothing is provisioned. The fee is per-kind and set by the deployment.
-     * @summary Provision a PostgreSQL database for your org
-     * @param {SqlApiPostSqlRequest} requestParameters Request parameters.
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof SqlApi
-     */
-    postSql(requestParameters = {}, options) {
-        return (0, exports.SqlApiFp)(this.configuration).postSql(requestParameters.provisionRequest, options).then((request) => request(this.axios, this.basePath));
-    }
-}
-exports.SqlApi = SqlApi;