archil-openapi 0.0.67__tar.gz → 0.0.69__tar.gz

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: archil-openapi
-Version: 0.0.67
+Version: 0.0.69
 Summary: Generated low-level Python client for the Archil control plane API
 Keywords: archil,openapi
 Author: Archil, Inc.

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "archil-openapi"
-version = "0.0.67"
+version = "0.0.69"
 description = "Generated low-level Python client for the Archil control plane API"
 readme = "README.md"
 license = { file = "LICENSE" }

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/api/disk_users/add_disk_user.py

@@ -8,6 +8,7 @@ from ...client import AuthenticatedClient, Client
 from ...models.api_response_authorized_user import ApiResponseAuthorizedUser
 from ...models.aws_sts_user import AwsStsUser
 from ...models.error_response import ErrorResponse
+from ...models.s3_user import S3User
 from ...models.token_user import TokenUser
 from ...types import Response
 
@@ -15,7 +16,7 @@ from ...types import Response
 def _get_kwargs(
     id: str,
     *,
-    body: Union["AwsStsUser", "TokenUser"],
+    body: Union["AwsStsUser", "S3User", "TokenUser"],
 ) -> dict[str, Any]:
     headers: dict[str, Any] = {}
 
@@ -29,6 +30,8 @@ def _get_kwargs(
     _kwargs["json"]: dict[str, Any]
     if isinstance(body, TokenUser):
         _kwargs["json"] = body.to_dict()
+    elif isinstance(body, AwsStsUser):
+        _kwargs["json"] = body.to_dict()
     else:
         _kwargs["json"] = body.to_dict()
 
@@ -82,17 +85,21 @@ def sync_detailed(
     id: str,
     *,
     client: AuthenticatedClient,
-    body: Union["AwsStsUser", "TokenUser"],
+    body: Union["AwsStsUser", "S3User", "TokenUser"],
 ) -> Response[Union[ApiResponseAuthorizedUser, ErrorResponse]]:
     """Add user to disk
 
      Adds an authorized user to a disk. Users can authenticate via:
     - **token**: A shared token with a nickname and 4-character suffix
     - **awssts**: AWS STS role assumption with an IAM principal ARN
+    - **s3**: An S3 access key pair for the disk's S3-compatible endpoint.
+      The server generates both keys; the secret key is returned only in
+      this response. The credential covers the whole disk, so keep it on
+      your server and hand clients presigned URLs instead of the keys.
 
     Args:
         id (str):  Example: dsk-0123456789abcdef.
-        body (Union['AwsStsUser', 'TokenUser']):
+        body (Union['AwsStsUser', 'S3User', 'TokenUser']):
 
     Raises:
         errors.UnexpectedStatus: If the server returns an undocumented status code and Client.raise_on_unexpected_status is True.
@@ -118,17 +125,21 @@ def sync(
     id: str,
     *,
     client: AuthenticatedClient,
-    body: Union["AwsStsUser", "TokenUser"],
+    body: Union["AwsStsUser", "S3User", "TokenUser"],
 ) -> Optional[Union[ApiResponseAuthorizedUser, ErrorResponse]]:
     """Add user to disk
 
      Adds an authorized user to a disk. Users can authenticate via:
     - **token**: A shared token with a nickname and 4-character suffix
     - **awssts**: AWS STS role assumption with an IAM principal ARN
+    - **s3**: An S3 access key pair for the disk's S3-compatible endpoint.
+      The server generates both keys; the secret key is returned only in
+      this response. The credential covers the whole disk, so keep it on
+      your server and hand clients presigned URLs instead of the keys.
 
     Args:
         id (str):  Example: dsk-0123456789abcdef.
-        body (Union['AwsStsUser', 'TokenUser']):
+        body (Union['AwsStsUser', 'S3User', 'TokenUser']):
 
     Raises:
         errors.UnexpectedStatus: If the server returns an undocumented status code and Client.raise_on_unexpected_status is True.
@@ -149,17 +160,21 @@ async def asyncio_detailed(
     id: str,
     *,
     client: AuthenticatedClient,
-    body: Union["AwsStsUser", "TokenUser"],
+    body: Union["AwsStsUser", "S3User", "TokenUser"],
 ) -> Response[Union[ApiResponseAuthorizedUser, ErrorResponse]]:
     """Add user to disk
 
      Adds an authorized user to a disk. Users can authenticate via:
     - **token**: A shared token with a nickname and 4-character suffix
     - **awssts**: AWS STS role assumption with an IAM principal ARN
+    - **s3**: An S3 access key pair for the disk's S3-compatible endpoint.
+      The server generates both keys; the secret key is returned only in
+      this response. The credential covers the whole disk, so keep it on
+      your server and hand clients presigned URLs instead of the keys.
 
     Args:
         id (str):  Example: dsk-0123456789abcdef.
-        body (Union['AwsStsUser', 'TokenUser']):
+        body (Union['AwsStsUser', 'S3User', 'TokenUser']):
 
     Raises:
         errors.UnexpectedStatus: If the server returns an undocumented status code and Client.raise_on_unexpected_status is True.
@@ -183,17 +198,21 @@ async def asyncio(
     id: str,
     *,
     client: AuthenticatedClient,
-    body: Union["AwsStsUser", "TokenUser"],
+    body: Union["AwsStsUser", "S3User", "TokenUser"],
 ) -> Optional[Union[ApiResponseAuthorizedUser, ErrorResponse]]:
     """Add user to disk
 
      Adds an authorized user to a disk. Users can authenticate via:
     - **token**: A shared token with a nickname and 4-character suffix
     - **awssts**: AWS STS role assumption with an IAM principal ARN
+    - **s3**: An S3 access key pair for the disk's S3-compatible endpoint.
+      The server generates both keys; the secret key is returned only in
+      this response. The credential covers the whole disk, so keep it on
+      your server and hand clients presigned URLs instead of the keys.
 
     Args:
         id (str):  Example: dsk-0123456789abcdef.
-        body (Union['AwsStsUser', 'TokenUser']):
+        body (Union['AwsStsUser', 'S3User', 'TokenUser']):
 
     Raises:
         errors.UnexpectedStatus: If the server returns an undocumented status code and Client.raise_on_unexpected_status is True.

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/api/disks/exec_.py

@@ -48,6 +48,11 @@ def _parse_response(
 
         return response_401
 
+    if response.status_code == 403:
+        response_403 = ErrorResponse.from_dict(response.json())
+
+        return response_403
+
     if response.status_code == 404:
         response_404 = ErrorResponse.from_dict(response.json())
 

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/api/disks/exec_disk.py

@@ -51,6 +51,11 @@ def _parse_response(
 
         return response_401
 
+    if response.status_code == 403:
+        response_403 = ErrorResponse.from_dict(response.json())
+
+        return response_403
+
     if response.status_code == 404:
         response_404 = ErrorResponse.from_dict(response.json())
 

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/api/disks/grep_disk.py

@@ -105,9 +105,10 @@ def sync_detailed(
     breadth-first and grep workers are dispatched as soon as each level
     finishes listing — listing and matching overlap.
 
-    The matches returned when stopping early on `maxResults` are a sample
-    of whichever workers reported first, not the lexicographically first
-    N. The response surfaces `stoppedReason` so callers can distinguish
+    The matches returned when stopping early on `maxResults`, or on the
+    32 MiB limit on match and context text, are a sample of whichever
+    workers reported first, not the lexicographically first N. The
+    response surfaces `stoppedReason` so callers can distinguish
     completion from early termination.
 
     Args:
@@ -161,9 +162,10 @@ def sync(
     breadth-first and grep workers are dispatched as soon as each level
     finishes listing — listing and matching overlap.
 
-    The matches returned when stopping early on `maxResults` are a sample
-    of whichever workers reported first, not the lexicographically first
-    N. The response surfaces `stoppedReason` so callers can distinguish
+    The matches returned when stopping early on `maxResults`, or on the
+    32 MiB limit on match and context text, are a sample of whichever
+    workers reported first, not the lexicographically first N. The
+    response surfaces `stoppedReason` so callers can distinguish
     completion from early termination.
 
     Args:
@@ -212,9 +214,10 @@ async def asyncio_detailed(
     breadth-first and grep workers are dispatched as soon as each level
     finishes listing — listing and matching overlap.
 
-    The matches returned when stopping early on `maxResults` are a sample
-    of whichever workers reported first, not the lexicographically first
-    N. The response surfaces `stoppedReason` so callers can distinguish
+    The matches returned when stopping early on `maxResults`, or on the
+    32 MiB limit on match and context text, are a sample of whichever
+    workers reported first, not the lexicographically first N. The
+    response surfaces `stoppedReason` so callers can distinguish
     completion from early termination.
 
     Args:
@@ -266,9 +269,10 @@ async def asyncio(
     breadth-first and grep workers are dispatched as soon as each level
     finishes listing — listing and matching overlap.
 
-    The matches returned when stopping early on `maxResults` are a sample
-    of whichever workers reported first, not the lexicographically first
-    N. The response surfaces `stoppedReason` so callers can distinguish
+    The matches returned when stopping early on `maxResults`, or on the
+    32 MiB limit on match and context text, are a sample of whichever
+    workers reported first, not the lexicographically first N. The
+    response surfaces `stoppedReason` so callers can distinguish
     completion from early termination.
 
     Args:

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/api/sandboxes/create_sandbox.py

@@ -56,6 +56,11 @@ def _parse_response(
 
         return response_401
 
+    if response.status_code == 403:
+        response_403 = ErrorResponse.from_dict(response.json())
+
+        return response_403
+
     if response.status_code == 404:
         response_404 = ErrorResponse.from_dict(response.json())
 

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/api/sandboxes/fork_sandbox.py

@@ -60,6 +60,11 @@ def _parse_response(
 
         return response_401
 
+    if response.status_code == 403:
+        response_403 = ErrorResponse.from_dict(response.json())
+
+        return response_403
+
     if response.status_code == 404:
         response_404 = ErrorResponse.from_dict(response.json())
 

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/api/sandboxes/resume_sandbox.py

@@ -56,6 +56,11 @@ def _parse_response(
 
         return response_401
 
+    if response.status_code == 403:
+        response_403 = ErrorResponse.from_dict(response.json())
+
+        return response_403
+
     if response.status_code == 404:
         response_404 = ErrorResponse.from_dict(response.json())
 

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/api/sandboxes/set_sandbox_timeout.py

@@ -52,6 +52,11 @@ def _parse_response(
 
         return response_401
 
+    if response.status_code == 403:
+        response_403 = ErrorResponse.from_dict(response.json())
+
+        return response_403
+
     if response.status_code == 404:
         response_404 = ErrorResponse.from_dict(response.json())
 

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/api/sandboxes/start_sandbox.py

@@ -65,6 +65,11 @@ def _parse_response(
 
         return response_401
 
+    if response.status_code == 403:
+        response_403 = ErrorResponse.from_dict(response.json())
+
+        return response_403
+
     if response.status_code == 404:
         response_404 = ErrorResponse.from_dict(response.json())
 

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/models/__init__.py

@@ -216,6 +216,8 @@ from .s3 import S3
 from .s3_compatible import S3Compatible
 from .s3_compatible_type import S3CompatibleType
 from .s3_type import S3Type
+from .s3_user import S3User
+from .s3_user_type import S3UserType
 from .sandbox import Sandbox
 from .sandbox_connection import SandboxConnection
 from .sandbox_egress_policy import SandboxEgressPolicy
@@ -459,6 +461,8 @@ __all__ = (
     "S3Compatible",
     "S3CompatibleType",
     "S3Type",
+    "S3User",
+    "S3UserType",
     "Sandbox",
     "SandboxConnection",
     "SandboxEgressPolicy",

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/models/authorized_user.py

@@ -23,16 +23,20 @@ class AuthorizedUser:
         token_suffix (Union[Unset, str]):
         token (Union[Unset, str]): The generated mount token. Only present in the response when the server generates the
             token (i.e. principal was not provided). This value is shown exactly once and cannot be retrieved again.
+        s_3_access_key_id (Union[Unset, str]): The S3 access key ID. Only present for s3 users.
+        s_3_secret_key (Union[Unset, str]): The generated S3 secret access key. Only present in the creation response
+            for s3 users. This value is shown exactly once and cannot be retrieved again.
         identifier (Union[Unset, str]): Stable identifier for this user, returned in creation and list responses. Use
             this value with DELETE /api/disks/{id}/users/{type}?identifier={identifier} to remove the user. For awssts
-            users, this is the IAM ARN.
+            users, this is the IAM ARN; for s3 users, the access key ID.
         created_at (Union[Unset, datetime.datetime]):
         expires_at (Union[Unset, datetime.datetime]): When the token expires. Absent for tokens without a TTL.
         one_use (Union[Unset, bool]): Whether this token is single-use.
         consumed_at (Union[Unset, datetime.datetime]): When the one-use token was consumed (first successful mount
             auth). Absent if the token has not been consumed or is not one-use.
         read_only (Union[Unset, bool]): Whether this token grants read-only access.
-        status (Union[Unset, AuthorizedUserStatus]): Current lifecycle status of the token.
+        status (Union[Unset, AuthorizedUserStatus]): Current lifecycle status of the token. `in_use` means a one-use
+            token is being consumed by a mount that is still in progress.
     """
 
     type_: Union[Unset, AuthorizedUserType] = UNSET
@@ -40,6 +44,8 @@ class AuthorizedUser:
     nickname: Union[Unset, str] = UNSET
     token_suffix: Union[Unset, str] = UNSET
     token: Union[Unset, str] = UNSET
+    s_3_access_key_id: Union[Unset, str] = UNSET
+    s_3_secret_key: Union[Unset, str] = UNSET
     identifier: Union[Unset, str] = UNSET
     created_at: Union[Unset, datetime.datetime] = UNSET
     expires_at: Union[Unset, datetime.datetime] = UNSET
@@ -62,6 +68,10 @@ class AuthorizedUser:
 
         token = self.token
 
+        s_3_access_key_id = self.s_3_access_key_id
+
+        s_3_secret_key = self.s_3_secret_key
+
         identifier = self.identifier
 
         created_at: Union[Unset, str] = UNSET
@@ -97,6 +107,10 @@ class AuthorizedUser:
             field_dict["tokenSuffix"] = token_suffix
         if token is not UNSET:
             field_dict["token"] = token
+        if s_3_access_key_id is not UNSET:
+            field_dict["s3AccessKeyId"] = s_3_access_key_id
+        if s_3_secret_key is not UNSET:
+            field_dict["s3SecretKey"] = s_3_secret_key
         if identifier is not UNSET:
             field_dict["identifier"] = identifier
         if created_at is not UNSET:
@@ -132,6 +146,10 @@ class AuthorizedUser:
 
         token = d.pop("token", UNSET)
 
+        s_3_access_key_id = d.pop("s3AccessKeyId", UNSET)
+
+        s_3_secret_key = d.pop("s3SecretKey", UNSET)
+
         identifier = d.pop("identifier", UNSET)
 
         _created_at = d.pop("createdAt", UNSET)
@@ -172,6 +190,8 @@ class AuthorizedUser:
             nickname=nickname,
             token_suffix=token_suffix,
             token=token,
+            s_3_access_key_id=s_3_access_key_id,
+            s_3_secret_key=s_3_secret_key,
             identifier=identifier,
             created_at=created_at,
             expires_at=expires_at,

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/models/authorized_user_status.py

@@ -5,6 +5,7 @@ class AuthorizedUserStatus(str, Enum):
     ACTIVE = "active"
     CONSUMED = "consumed"
     EXPIRED = "expired"
+    IN_USE = "in_use"
 
     def __str__(self) -> str:
         return str(self.value)

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/models/authorized_user_type.py

@@ -3,6 +3,7 @@ from enum import Enum
 
 class AuthorizedUserType(str, Enum):
     AWSSTS = "awssts"
+    S3 = "s3"
     TOKEN = "token"
 
     def __str__(self) -> str:

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/models/create_disk_request.py

@@ -14,6 +14,7 @@ if TYPE_CHECKING:
     from ..models.root_attrs import RootAttrs
     from ..models.s3 import S3
     from ..models.s3_compatible import S3Compatible
+    from ..models.s3_user import S3User
     from ..models.token_user import TokenUser
 
 
@@ -30,8 +31,8 @@ class CreateDiskRequest:
         allowed_ips (Union[Unset, list[str]]): IP allowlist for mount access. When non-empty, only clients connecting
             from these IPs or CIDR ranges can mount the disk. An empty list (default) allows all IPs.
              Example: ['203.0.113.0/24', '198.51.100.42'].
-        auth_methods (Union[Unset, list[Union['AwsStsUser', 'TokenUser']]]): Deprecated. Use AddDiskUser after creation
-            instead. When provided, suppresses the default auto-generated token user.
+        auth_methods (Union[Unset, list[Union['AwsStsUser', 'S3User', 'TokenUser']]]): Deprecated. Use AddDiskUser after
+            creation instead. When provided, suppresses the default auto-generated token user.
         root_attrs (Union[Unset, RootAttrs]): POSIX attributes for the disk's root directory, applied when the disk is
             created. Lets an unprivileged process own the mount root without a post-mount `chown`. Can only be set at
             creation; a later `chown`/`chmod` through a mount changes the live attributes as usual. Defaults to uid 0, gid
@@ -45,12 +46,13 @@ class CreateDiskRequest:
         Unset, list[Union["AzureBlobStorage", "CloudflareR2", "GoogleCloudStorage", "S3", "S3Compatible"]]
     ] = UNSET
     allowed_ips: Union[Unset, list[str]] = UNSET
-    auth_methods: Union[Unset, list[Union["AwsStsUser", "TokenUser"]]] = UNSET
+    auth_methods: Union[Unset, list[Union["AwsStsUser", "S3User", "TokenUser"]]] = UNSET
     root_attrs: Union[Unset, "RootAttrs"] = UNSET
     min_client_version: Union[Unset, str] = UNSET
     additional_properties: dict[str, Any] = _attrs_field(init=False, factory=dict)
 
     def to_dict(self) -> dict[str, Any]:
+        from ..models.aws_sts_user import AwsStsUser
         from ..models.cloudflare_r2 import CloudflareR2
         from ..models.google_cloud_storage import GoogleCloudStorage
         from ..models.s3 import S3
@@ -88,6 +90,8 @@ class CreateDiskRequest:
                 auth_methods_item: dict[str, Any]
                 if isinstance(auth_methods_item_data, TokenUser):
                     auth_methods_item = auth_methods_item_data.to_dict()
+                elif isinstance(auth_methods_item_data, AwsStsUser):
+                    auth_methods_item = auth_methods_item_data.to_dict()
                 else:
                     auth_methods_item = auth_methods_item_data.to_dict()
 
@@ -128,6 +132,7 @@ class CreateDiskRequest:
         from ..models.root_attrs import RootAttrs
         from ..models.s3 import S3
         from ..models.s3_compatible import S3Compatible
+        from ..models.s3_user import S3User
         from ..models.token_user import TokenUser
 
         d = dict(src_dict)
@@ -188,7 +193,7 @@ class CreateDiskRequest:
         _auth_methods = d.pop("authMethods", UNSET)
         for auth_methods_item_data in _auth_methods or []:
 
-            def _parse_auth_methods_item(data: object) -> Union["AwsStsUser", "TokenUser"]:
+            def _parse_auth_methods_item(data: object) -> Union["AwsStsUser", "S3User", "TokenUser"]:
                 try:
                     if not isinstance(data, dict):
                         raise TypeError()
@@ -197,11 +202,19 @@ class CreateDiskRequest:
                     return componentsschemas_disk_user_type_0
                 except:  # noqa: E722
                     pass
+                try:
+                    if not isinstance(data, dict):
+                        raise TypeError()
+                    componentsschemas_disk_user_type_1 = AwsStsUser.from_dict(data)
+
+                    return componentsschemas_disk_user_type_1
+                except:  # noqa: E722
+                    pass
                 if not isinstance(data, dict):
                     raise TypeError()
-                componentsschemas_disk_user_type_1 = AwsStsUser.from_dict(data)
+                componentsschemas_disk_user_type_2 = S3User.from_dict(data)
 
-                return componentsschemas_disk_user_type_1
+                return componentsschemas_disk_user_type_2
 
             auth_methods_item = _parse_auth_methods_item(auth_methods_item_data)
 

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/models/create_sandbox_request.py

@@ -45,7 +45,10 @@ class CreateSandboxRequest:
             `start` can replace them for later sessions. Inherited by forks. A sandbox with mounts must be stopped before it
             can be forked.
         max_ttl_seconds (Union[Unset, int]): Lifetime budget applied independently to each powered-on session. Expiry
-            pauses the sandbox, preserving memory and processes for resume. Default: 86400.
+            pauses the sandbox, preserving memory and processes for resume. An omitted value is lowered to the longest
+            session the plan allows for the sandbox's size (its session ceiling, then the remaining monthly allowance); an
+            explicit value past that is refused with 403 (`sandbox_ttl_limit_exceeded` or `allowance_insufficient`).
+            Default: 86400.
         idle_ttl_seconds (Union[Unset, int]): Pause after this many seconds without a direct process connection,
             preserving memory and processes for resume. Defaults to 30 minutes; zero disables idle expiry. Default: 1800.
         max_concurrent_execs (Union[Unset, int]): Maximum number of concurrently attached process sessions. Detached

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/models/grep_disk_result.py

@@ -26,7 +26,8 @@ class GrepDiskResult:
               batches errored (invalid regex, unreadable file, runtime issue) or
               exceeded the 4 MiB output limit.
               Results may be partial or wrong; do not rely on completeness.
-            - `max_results`: hit `maxResults` before scanning everything.
+            - `max_results`: hit `maxResults`, or the response size limit
+              (32 MiB of match and context text), before scanning everything.
             - `deadline`: hit `maxDurationSeconds`.
             - `list_failed`: directory listing failed; partial results
               may be present.

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/models/remove_disk_user_user_type.py

@@ -3,6 +3,7 @@ from enum import Enum
 
 class RemoveDiskUserUserType(str, Enum):
     AWSSTS = "awssts"
+    S3 = "s3"
     TOKEN = "token"
 
     def __str__(self) -> str:

archil_openapi-0.0.69/src/archil_openapi/models/s3_user.py

@@ -0,0 +1,114 @@
+import datetime
+from collections.abc import Mapping
+from typing import Any, TypeVar, Union
+
+from attrs import define as _attrs_define
+from attrs import field as _attrs_field
+from dateutil.parser import isoparse
+
+from ..models.s3_user_type import S3UserType
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="S3User")
+
+
+@_attrs_define
+class S3User:
+    """S3 access key pair for the disk's S3-compatible endpoint. Both keys are generated by the server. The credential
+    grants access to every object on the disk; there is no per-prefix scoping, so do not expose the keys to browsers or
+    other untrusted clients. Sign presigned URLs with them server-side instead.
+
+        Attributes:
+            type_ (S3UserType):
+            nickname (Union[Unset, str]):
+            ttl (Union[Unset, str]): Optional time-to-live as a Go duration string (e.g. "1h", "30m"). Maximum 365 days
+                ("8760h"). Requests signed with an expired key, including presigned URLs, are rejected. Mutually exclusive with
+                expiresAt.
+            expires_at (Union[Unset, datetime.datetime]): Optional absolute expiration time as an RFC3339 timestamp. Must be
+                in the future. Mutually exclusive with ttl.
+            read_only (Union[Unset, bool]): When true, the credential may only issue GET and HEAD requests. Writes, deletes,
+                and multipart operations are rejected with AccessDenied.
+    """
+
+    type_: S3UserType
+    nickname: Union[Unset, str] = UNSET
+    ttl: Union[Unset, str] = UNSET
+    expires_at: Union[Unset, datetime.datetime] = UNSET
+    read_only: Union[Unset, bool] = UNSET
+    additional_properties: dict[str, Any] = _attrs_field(init=False, factory=dict)
+
+    def to_dict(self) -> dict[str, Any]:
+        type_ = self.type_.value
+
+        nickname = self.nickname
+
+        ttl = self.ttl
+
+        expires_at: Union[Unset, str] = UNSET
+        if not isinstance(self.expires_at, Unset):
+            expires_at = self.expires_at.isoformat()
+
+        read_only = self.read_only
+
+        field_dict: dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "type": type_,
+            }
+        )
+        if nickname is not UNSET:
+            field_dict["nickname"] = nickname
+        if ttl is not UNSET:
+            field_dict["ttl"] = ttl
+        if expires_at is not UNSET:
+            field_dict["expiresAt"] = expires_at
+        if read_only is not UNSET:
+            field_dict["readOnly"] = read_only
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: type[T], src_dict: Mapping[str, Any]) -> T:
+        d = dict(src_dict)
+        type_ = S3UserType(d.pop("type"))
+
+        nickname = d.pop("nickname", UNSET)
+
+        ttl = d.pop("ttl", UNSET)
+
+        _expires_at = d.pop("expiresAt", UNSET)
+        expires_at: Union[Unset, datetime.datetime]
+        if isinstance(_expires_at, Unset):
+            expires_at = UNSET
+        else:
+            expires_at = isoparse(_expires_at)
+
+        read_only = d.pop("readOnly", UNSET)
+
+        s3_user = cls(
+            type_=type_,
+            nickname=nickname,
+            ttl=ttl,
+            expires_at=expires_at,
+            read_only=read_only,
+        )
+
+        s3_user.additional_properties = d
+        return s3_user
+
+    @property
+    def additional_keys(self) -> list[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties

archil_openapi-0.0.69/src/archil_openapi/models/s3_user_type.py

@@ -0,0 +1,8 @@
+from enum import Enum
+
+
+class S3UserType(str, Enum):
+    S3 = "s3"
+
+    def __str__(self) -> str:
+        return str(self.value)

{archil_openapi-0.0.67 → archil_openapi-0.0.69}/src/archil_openapi/models/sandbox.py

@@ -29,8 +29,9 @@ class Sandbox:
         vcpu_count (int):
         mem_size_mib (int):
         max_ttl_seconds (int): Lifetime budget applied independently to each powered-on session. Expiry pauses the
-            sandbox, preserving memory and processes for resume. Defaults to 24 hours. The timeout endpoint can move the
-            deadline, but no session runs longer than 24 hours.
+            sandbox, preserving memory and processes for resume. Defaults to 24 hours, or to the longest session the plan
+            allows; a start, resume or fork lowers a stored value the plan no longer allows. The timeout endpoint can move
+            the deadline, but no session runs longer than 24 hours.
         idle_ttl_seconds (int): Seconds without a direct process connection before the sandbox pauses, preserving memory
             and processes for resume. Zero disables idle expiry.
         max_concurrent_execs (int): Maximum number of concurrently attached process sessions. Detached processes and