forktex-cloud 0.2.3__py3-none-any.whl

forktex_cloud/client/generated/__init__.py

@@ -0,0 +1,1057 @@
+# Copyright (C) 2026 FORKTEX S.R.L.
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-ForkTex-Commercial
+#
+# This file is part of forktex-cloud.
+#
+# For commercial licensing -- including use in proprietary products, SaaS
+# deployments, or any context where AGPL obligations cannot be met -- you
+# MUST obtain a commercial license from FORKTEX S.R.L. (info@forktex.com).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU Affero General Public License for more details.
+#
+# You should have received a copy of the GNU Affero General Public License
+# along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+"""Auto-generated Pydantic models from the ForkTex Cloud API OpenAPI spec.
+
+DO NOT EDIT — regenerate with: make codegen
+
+Source: GET /api/openapi.json
+API version: 0.6.0
+Spec hash: c9e218a6fef2b1b4
+"""
+from __future__ import annotations
+
+
+SPEC_VERSION = "0.6.0"
+SPEC_HASH = "c9e218a6fef2b1b4"
+
+
+from enum import StrEnum
+from typing import Annotated, Any, Literal
+from uuid import UUID
+
+from pydantic import AwareDatetime, BaseModel, ConfigDict, EmailStr, Field
+
+
+class AccessRequestCreate(BaseModel):
+    company: Annotated[str | None, Field(title="Company")] = None
+    email: Annotated[EmailStr, Field(title="Email")]
+    name: Annotated[str | None, Field(title="Name")] = None
+    use_case: Annotated[str | None, Field(title="Use Case")] = None
+
+
+class AccessRequestRead(BaseModel):
+    company: Annotated[str | None, Field(title="Company")]
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    email: Annotated[str, Field(title="Email")]
+    id: Annotated[UUID, Field(title="Id")]
+    name: Annotated[str | None, Field(title="Name")]
+    status: Annotated[str, Field(title="Status")]
+    use_case: Annotated[str | None, Field(title="Use Case")]
+
+
+class ApiKeyCreate(BaseModel):
+    expires_at: Annotated[AwareDatetime | None, Field(title="Expires At")] = None
+    label: Annotated[str, Field(title="Label")]
+    rate_limit_rpm: Annotated[int | None, Field(title="Rate Limit Rpm")] = None
+    scopes: Annotated[list[str] | None, Field(title="Scopes")] = None
+
+
+class ApiKeyCreated(BaseModel):
+    """
+    Returned only at creation time — includes the raw key.
+    """
+
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    expires_at: Annotated[AwareDatetime | None, Field(title="Expires At")] = None
+    id: Annotated[UUID, Field(title="Id")]
+    is_active: Annotated[bool, Field(title="Is Active")]
+    label: Annotated[str, Field(title="Label")]
+    last_used_at: Annotated[AwareDatetime | None, Field(title="Last Used At")] = None
+    org_id: Annotated[UUID, Field(title="Org Id")]
+    rate_limit_rpm: Annotated[int | None, Field(title="Rate Limit Rpm")] = None
+    raw_key: Annotated[str, Field(title="Raw Key")]
+    scopes: Annotated[list[str] | None, Field(title="Scopes")] = None
+
+
+class ApiKeyRead(BaseModel):
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    expires_at: Annotated[AwareDatetime | None, Field(title="Expires At")] = None
+    id: Annotated[UUID, Field(title="Id")]
+    is_active: Annotated[bool, Field(title="Is Active")]
+    label: Annotated[str, Field(title="Label")]
+    last_used_at: Annotated[AwareDatetime | None, Field(title="Last Used At")] = None
+    org_id: Annotated[UUID, Field(title="Org Id")]
+    rate_limit_rpm: Annotated[int | None, Field(title="Rate Limit Rpm")] = None
+    scopes: Annotated[list[str] | None, Field(title="Scopes")] = None
+
+
+class ArchitectureSnapshot(BaseModel):
+    """
+    A C4 architecture snapshot pushed by the forktex CLI.
+    """
+
+    description: Annotated[str | None, Field(title="Description")] = ""
+    external_systems: Annotated[
+        list[dict[str, Any]] | None, Field(title="External Systems")
+    ] = None
+    generated_at: Annotated[str, Field(title="Generated At")]
+    metadata: Annotated[dict[str, Any] | None, Field(title="Metadata")] = None
+    name: Annotated[str, Field(title="Name")]
+    relationships: Annotated[
+        list[dict[str, Any]] | None, Field(title="Relationships")
+    ] = None
+    systems: Annotated[list[dict[str, Any]] | None, Field(title="Systems")] = None
+
+
+class AuditEventRead(BaseModel):
+    action: Annotated[str, Field(title="Action")]
+    api_key_id: Annotated[UUID | None, Field(title="Api Key Id")] = None
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    details: Annotated[str | None, Field(title="Details")] = None
+    id: Annotated[UUID, Field(title="Id")]
+    ip_address: Annotated[str | None, Field(title="Ip Address")] = None
+    org_id: Annotated[UUID, Field(title="Org Id")]
+    resource_id: Annotated[str | None, Field(title="Resource Id")] = None
+    resource_type: Annotated[str | None, Field(title="Resource Type")] = None
+    user_id: Annotated[UUID | None, Field(title="User Id")] = None
+
+
+class BackupCreate(BaseModel):
+    backup_type: Annotated[str | None, Field(title="Backup Type")] = "full"
+    service_id: Annotated[str | None, Field(title="Service Id")] = None
+
+
+class BackupPolicyDef(BaseModel):
+    """
+    Backup schedule + retention for persistence services.
+    """
+
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    enabled: Annotated[bool | None, Field(title="Enabled")] = False
+    retentionDays: Annotated[int | None, Field(title="Retentiondays")] = 7
+    schedule: Annotated[str | None, Field(title="Schedule")] = "0 3 * * *"
+
+
+class BackupRead(BaseModel):
+    backup_type: Annotated[str, Field(title="Backup Type")]
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    environment_id: Annotated[UUID, Field(title="Environment Id")]
+    expires_at: Annotated[AwareDatetime | None, Field(title="Expires At")] = None
+    id: Annotated[UUID, Field(title="Id")]
+    server_id: Annotated[UUID | None, Field(title="Server Id")] = None
+    service_id: Annotated[str | None, Field(title="Service Id")] = None
+    size_bytes: Annotated[int | None, Field(title="Size Bytes")] = None
+    status: Annotated[str, Field(title="Status")]
+    storage_path: Annotated[str | None, Field(title="Storage Path")] = None
+
+
+class BackupRestoreRead(BaseModel):
+    backup_id: Annotated[UUID, Field(title="Backup Id")]
+    service_id: Annotated[str, Field(title="Service Id")]
+    status: Annotated[str, Field(title="Status")]
+
+
+class CapacityOrgLimits(BaseModel):
+    max_projects: Annotated[int, Field(title="Max Projects")]
+    max_servers: Annotated[int, Field(title="Max Servers")]
+
+
+class CapacityServers(BaseModel):
+    limit: Annotated[int, Field(title="Limit")]
+    used: Annotated[int, Field(title="Used")]
+
+
+class ContainerStatus(BaseModel):
+    """
+    Container state info from Docker inspect.
+    """
+
+    name: Annotated[str, Field(title="Name")]
+    state: Annotated[str, Field(title="State")]
+    status: Annotated[str, Field(title="Status")]
+
+
+class DeployRead(BaseModel):
+    details: Annotated[str | None, Field(title="Details")] = None
+    environment_id: Annotated[UUID | None, Field(title="Environment Id")] = None
+    finished_at: Annotated[AwareDatetime | None, Field(title="Finished At")] = None
+    id: Annotated[UUID, Field(title="Id")]
+    manifest_version_id: Annotated[UUID | None, Field(title="Manifest Version Id")] = (
+        None
+    )
+    project_id: Annotated[UUID | None, Field(title="Project Id")] = None
+    source: Annotated[str, Field(title="Source")]
+    started_at: Annotated[AwareDatetime, Field(title="Started At")]
+    status: Annotated[str, Field(title="Status")]
+    tags: Annotated[Any, Field(title="Tags")] = None
+
+
+class DeploymentDef(BaseModel):
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    drainDelaySeconds: Annotated[int | None, Field(title="Draindelayseconds")] = 5
+    gracefulStopSeconds: Annotated[int | None, Field(title="Gracefulstopseconds")] = 30
+    healthRetries: Annotated[int | None, Field(title="Healthretries")] = 30
+    imageStrategy: Annotated[str | None, Field(title="Imagestrategy")] = None
+    registry: Annotated[dict[str, Any] | None, Field(title="Registry")] = None
+    strategy: Annotated[Literal["blue-green"], Field(title="Strategy")] = "blue-green"
+
+
+class DeploymentLogRead(BaseModel):
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    deployment_id: Annotated[UUID, Field(title="Deployment Id")]
+    exit_code: Annotated[int | None, Field(title="Exit Code")] = None
+    id: Annotated[UUID, Field(title="Id")]
+    output: Annotated[str | None, Field(title="Output")] = None
+    server_id: Annotated[UUID | None, Field(title="Server Id")] = None
+    stage: Annotated[str, Field(title="Stage")]
+
+
+class EnvironmentCreate(BaseModel):
+    is_production: Annotated[bool | None, Field(title="Is Production")] = False
+    name: Annotated[str, Field(title="Name")]
+
+
+class EnvironmentPromotionRequest(BaseModel):
+    target_name: Annotated[str | None, Field(title="Target Name")] = "production"
+
+
+class EnvironmentRead(BaseModel):
+    controller_instance: Annotated[str | None, Field(title="Controller Instance")] = (
+        None
+    )
+    controller_url: Annotated[str | None, Field(title="Controller Url")] = None
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    handoff_completed_at: Annotated[
+        AwareDatetime | None, Field(title="Handoff Completed At")
+    ] = None
+    handoff_ready_at: Annotated[
+        AwareDatetime | None, Field(title="Handoff Ready At")
+    ] = None
+    id: Annotated[UUID, Field(title="Id")]
+    is_production: Annotated[bool, Field(title="Is Production")]
+    name: Annotated[str, Field(title="Name")]
+    project_id: Annotated[UUID, Field(title="Project Id")]
+    status: Annotated[str, Field(title="Status")]
+    updated_at: Annotated[AwareDatetime, Field(title="Updated At")]
+
+
+class EnvironmentServerCreate(BaseModel):
+    role: Annotated[str | None, Field(title="Role")] = "primary"
+    server_id: Annotated[UUID, Field(title="Server Id")]
+
+
+class EnvironmentServerRead(BaseModel):
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    environment_id: Annotated[UUID, Field(title="Environment Id")]
+    id: Annotated[UUID, Field(title="Id")]
+    role: Annotated[str, Field(title="Role")]
+    server_id: Annotated[UUID, Field(title="Server Id")]
+
+
+class EnvironmentServiceRead(BaseModel):
+    active_slot: Annotated[str | None, Field(title="Active Slot")] = None
+    current_image: Annotated[str | None, Field(title="Current Image")] = None
+    environment_id: Annotated[UUID, Field(title="Environment Id")]
+    id: Annotated[UUID, Field(title="Id")]
+    service_id: Annotated[str, Field(title="Service Id")]
+    service_type: Annotated[str, Field(title="Service Type")]
+    status: Annotated[str | None, Field(title="Status")] = None
+
+
+class EnvironmentStateExportRead(BaseModel):
+    backups: Annotated[list[dict[str, Any]], Field(title="Backups")]
+    environment: Annotated[dict[str, Any], Field(title="Environment")]
+    manifests: Annotated[list[dict[str, Any]], Field(title="Manifests")]
+    services: Annotated[list[dict[str, Any]], Field(title="Services")]
+    vault_entries: Annotated[list[dict[str, Any]], Field(title="Vault Entries")]
+
+
+class EnvironmentStateImportRequest(BaseModel):
+    state: Annotated[dict[str, Any], Field(title="State")]
+
+
+class EventRead(BaseModel):
+    action: Annotated[str, Field(title="Action")]
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    details: Annotated[str | None, Field(title="Details")] = None
+    environment_id: Annotated[UUID | None, Field(title="Environment Id")] = None
+    id: Annotated[int, Field(title="Id")]
+    org_id: Annotated[UUID | None, Field(title="Org Id")] = None
+    project_id: Annotated[UUID | None, Field(title="Project Id")] = None
+    server_id: Annotated[UUID | None, Field(title="Server Id")] = None
+    status: Annotated[str, Field(title="Status")]
+
+
+class ExecBody(BaseModel):
+    command: Annotated[str, Field(title="Command")]
+    service: Annotated[str, Field(title="Service")]
+
+
+class ForgotPasswordRequest(BaseModel):
+    email: Annotated[EmailStr, Field(title="Email")]
+
+
+class GatewayDomain(BaseModel):
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    host: Annotated[str, Field(min_length=1, title="Host")]
+    primary: Annotated[bool | None, Field(title="Primary")] = False
+
+
+class HandoffCriterionRead(BaseModel):
+    detail: Annotated[str, Field(title="Detail")]
+    name: Annotated[str, Field(title="Name")]
+    status: Annotated[bool, Field(title="Status")]
+
+
+class HandoffReadinessRead(BaseModel):
+    controller_instance: Annotated[str | None, Field(title="Controller Instance")] = (
+        None
+    )
+    controller_url: Annotated[str | None, Field(title="Controller Url")] = None
+    criteria: Annotated[list[HandoffCriterionRead], Field(title="Criteria")]
+    handoff_completed_at: Annotated[
+        AwareDatetime | None, Field(title="Handoff Completed At")
+    ] = None
+    handoff_ready_at: Annotated[
+        AwareDatetime | None, Field(title="Handoff Ready At")
+    ] = None
+    ready: Annotated[bool, Field(title="Ready")]
+
+
+class InfrastructureDef(BaseModel):
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    flavour: Annotated[str, Field(min_length=1, title="Flavour")]
+    image: Annotated[str | None, Field(title="Image")] = "ubuntu-24.04"
+    provider: Annotated[str, Field(min_length=1, title="Provider")]
+    region: Annotated[str, Field(min_length=1, title="Region")]
+
+
+class JobResponse(BaseModel):
+    """
+    Response for asynchronous pipeline operations (/up, /down, /deploy).
+    """
+
+    deployment_id: Annotated[str | None, Field(title="Deployment Id")] = None
+    job_id: Annotated[str, Field(title="Job Id")]
+    status: Annotated[str, Field(title="Status")]
+
+
+class LifecycleDef(BaseModel):
+    """
+    Hooks that run at specific deployment phases.
+
+    - ``initCommand``       — first deployment only (e.g. ``createdb``)
+    - ``preDeployCommand``  — before each deploy (e.g. ``pg_dump > backup.sql``)
+    - ``postDeployCommand`` — after each deploy (e.g. ``alembic upgrade head``)
+    """
+
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    initCommand: Annotated[str | None, Field(title="Initcommand")] = None
+    postDeployCommand: Annotated[str | None, Field(title="Postdeploycommand")] = None
+    preDeployCommand: Annotated[str | None, Field(title="Predeploycommand")] = None
+
+
+class LoginRequest(BaseModel):
+    email: Annotated[EmailStr, Field(title="Email")]
+    password: Annotated[str, Field(title="Password")]
+
+
+class LokiDef(BaseModel):
+    """
+    Per-project Loki log aggregator config.
+    """
+
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    enabled: Annotated[bool | None, Field(title="Enabled")] = True
+    retentionDays: Annotated[int | None, Field(title="Retentiondays")] = 14
+
+
+class MCPInfo(BaseModel):
+    description: Annotated[str, Field(title="Description")]
+    """
+    Human-readable summary
+    """
+    endpoint: Annotated[str, Field(title="Endpoint")]
+    """
+    HTTP path of the MCP JSON-RPC transport
+    """
+    protocol: Annotated[str, Field(title="Protocol")]
+    """
+    Protocol identifier
+    """
+    spec_url: Annotated[str, Field(title="Spec Url")]
+    """
+    Link to the MCP specification
+    """
+    version: Annotated[str, Field(title="Version")]
+    """
+    MCP protocol version this server targets
+    """
+
+
+class ManifestPush(BaseModel):
+    manifest_json: Annotated[dict[str, Any], Field(title="Manifest Json")]
+
+
+class ManifestVersionRead(BaseModel):
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    deployed_at: Annotated[AwareDatetime | None, Field(title="Deployed At")] = None
+    environment_id: Annotated[UUID, Field(title="Environment Id")]
+    id: Annotated[UUID, Field(title="Id")]
+    manifest_hash: Annotated[str, Field(title="Manifest Hash")]
+    manifest_json: Annotated[dict[str, Any], Field(title="Manifest Json")]
+    version: Annotated[int, Field(title="Version")]
+
+
+class MetadataDef(BaseModel):
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    environment: Annotated[str | None, Field(title="Environment")] = None
+    local: Annotated[dict[str, Any] | None, Field(title="Local")] = None
+    name: Annotated[str, Field(min_length=1, title="Name")]
+    projectId: Annotated[str | None, Field(title="Projectid")] = None
+
+
+class MetricsDef(BaseModel):
+    """
+    Metrics subsystem — Prometheus scrapes /metrics endpoints.
+    """
+
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    enabled: Annotated[bool | None, Field(title="Enabled")] = True
+    retentionDays: Annotated[int | None, Field(title="Retentiondays")] = 7
+
+
+class NativeBuildSpec(BaseModel):
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    command: Annotated[str, Field(min_length=1, title="Command")]
+    outputBinary: Annotated[str, Field(min_length=1, title="Outputbinary")]
+
+
+class OpsResponse(BaseModel):
+    """
+    Response for server operations (restart, exec, switch, update).
+    """
+
+    output: Annotated[str | None, Field(title="Output")] = ""
+    status: Annotated[str, Field(title="Status")]
+
+
+class OrgBrief(BaseModel):
+    id: Annotated[UUID, Field(title="Id")]
+    name: Annotated[str, Field(title="Name")]
+    slug: Annotated[str, Field(title="Slug")]
+
+
+class OrgCreate(BaseModel):
+    name: Annotated[str, Field(title="Name")]
+
+
+class OrgRead(BaseModel):
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    id: Annotated[UUID, Field(title="Id")]
+    name: Annotated[str, Field(title="Name")]
+    slug: Annotated[str, Field(title="Slug")]
+
+
+class ProjectCreate(BaseModel):
+    description: Annotated[str | None, Field(title="Description")] = None
+    name: Annotated[str, Field(title="Name")]
+    project_id: Annotated[str | None, Field(title="Project Id")] = None
+
+
+class ProjectRead(BaseModel):
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    description: Annotated[str | None, Field(title="Description")] = None
+    id: Annotated[UUID, Field(title="Id")]
+    name: Annotated[str, Field(title="Name")]
+    updated_at: Annotated[AwareDatetime, Field(title="Updated At")]
+
+
+class RefreshRequest(BaseModel):
+    refresh_token: Annotated[str, Field(title="Refresh Token")]
+
+
+class RegisterRequest(LoginRequest):
+    pass
+
+
+class ResetPasswordRequest(BaseModel):
+    new_password: Annotated[str, Field(title="New Password")]
+    token: Annotated[str, Field(title="Token")]
+
+
+class RestartBody(BaseModel):
+    service: Annotated[str | None, Field(title="Service")] = None
+
+
+class Challenge(StrEnum):
+    dns_01 = "dns-01"
+    http_01 = "http-01"
+
+
+class Provider(StrEnum):
+    letsencrypt = "letsencrypt"
+    custom = "custom"
+    none = "none"
+
+
+class SSLConfig(BaseModel):
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    certPath: Annotated[str | None, Field(title="Certpath")] = None
+    challenge: Annotated[Challenge | None, Field(title="Challenge")] = "dns-01"
+    dnsProvider: Annotated[str | None, Field(title="Dnsprovider")] = None
+    email: Annotated[str | None, Field(title="Email")] = None
+    enabled: Annotated[bool | None, Field(title="Enabled")] = True
+    keyPath: Annotated[str | None, Field(title="Keypath")] = None
+    provider: Annotated[Provider | None, Field(title="Provider")] = "letsencrypt"
+
+
+class ServerCreate(BaseModel):
+    flavour: Annotated[str | None, Field(title="Flavour")] = None
+    image: Annotated[str | None, Field(title="Image")] = None
+    location: Annotated[str | None, Field(title="Location")] = None
+    name: Annotated[str, Field(title="Name")]
+    provider: Annotated[str | None, Field(title="Provider")] = "hetzner"
+    region: Annotated[str | None, Field(title="Region")] = None
+    server_type: Annotated[str | None, Field(title="Server Type")] = None
+
+
+class ServerDnsRead(BaseModel):
+    provider: Annotated[str, Field(title="Provider")]
+    records: Annotated[Any | None, Field(title="Records")] = None
+    server_id: Annotated[UUID, Field(title="Server Id")]
+    verified: Annotated[bool | None, Field(title="Verified")] = False
+
+
+class ServerImport(BaseModel):
+    host: Annotated[str, Field(title="Host")]
+    name: Annotated[str, Field(title="Name")]
+    user: Annotated[str | None, Field(title="User")] = "root"
+
+
+class ServerServiceRead(BaseModel):
+    active_slot: Annotated[str | None, Field(title="Active Slot")] = None
+    id: Annotated[UUID, Field(title="Id")]
+    image: Annotated[str | None, Field(title="Image")] = None
+    server_id: Annotated[UUID, Field(title="Server Id")]
+    service_id: Annotated[str, Field(title="Service Id")]
+    service_type: Annotated[str, Field(title="Service Type")]
+    status: Annotated[str | None, Field(title="Status")] = None
+
+
+class ServerSslRead(BaseModel):
+    challenge: Annotated[str | None, Field(title="Challenge")] = None
+    domain: Annotated[str | None, Field(title="Domain")] = None
+    provider: Annotated[str, Field(title="Provider")]
+    provisioned: Annotated[bool | None, Field(title="Provisioned")] = False
+    server_id: Annotated[UUID, Field(title="Server Id")]
+
+
+class ServerStatusResponse(BaseModel):
+    """
+    Full server status from SSH inspection.
+    """
+
+    containers: Annotated[
+        list[ContainerStatus] | None, Field(title="Containers", validate_default=True)
+    ] = []
+    health: Annotated[dict[str, str] | None, Field(title="Health")] = {}
+    server_ip: Annotated[str, Field(title="Server Ip")]
+    server_name: Annotated[str, Field(title="Server Name")]
+    system: Annotated[str | None, Field(title="System")] = None
+
+
+class ServerUsageDetail(BaseModel):
+    cost: Annotated[float | None, Field(title="Cost")] = 0.0
+    destroyed_at: Annotated[AwareDatetime | None, Field(title="Destroyed At")] = None
+    hours: Annotated[float, Field(title="Hours")]
+    provider: Annotated[str, Field(title="Provider")]
+    provisioned_at: Annotated[AwareDatetime, Field(title="Provisioned At")]
+    server_id: Annotated[str, Field(title="Server Id")]
+    server_name: Annotated[str, Field(title="Server Name")]
+    server_type: Annotated[str | None, Field(title="Server Type")] = None
+
+
+class LogFormat(StrEnum):
+    """
+    Log format this service writes to stdout. 'json' enables structured field extraction in Loki (level, request_id). 'auto' (default when omitted) infers from the image name.
+    """
+
+    json = "json"
+    plain = "plain"
+    auto = "auto"
+
+
+class Type(StrEnum):
+    compute = "compute"
+    persistence = "persistence"
+    observability = "observability"
+
+
+class ServiceDef(BaseModel):
+    """
+    A single service entry under ``cloud.services[]``.
+
+    The ``type`` field selects required-field rules:
+
+    - ``compute``      → requires ``port`` and ``healthPath``
+    - ``persistence``  → requires ``port``
+    - ``observability``→ image only
+    """
+
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    backupPolicy: BackupPolicyDef | None = None
+    build: Annotated[dict[str, Any] | None, Field(title="Build")] = None
+    command: Annotated[str | None, Field(title="Command")] = None
+    dependsOn: Annotated[list[str] | None, Field(title="Dependson")] = None
+    environment: Annotated[dict[str, str] | None, Field(title="Environment")] = None
+    environments: Annotated[list[str] | None, Field(title="Environments")] = None
+    extraPorts: Annotated[list[str] | None, Field(title="Extraports")] = None
+    """
+    Additional host:container port mappings passed through verbatim to docker-compose. Useful for services with multiple exposed ports (e.g. MailHog: 1025 SMTP + 8025 web UI).
+    """
+    healthPath: Annotated[str | None, Field(title="Healthpath")] = None
+    healthcheck: Annotated[dict[str, Any] | None, Field(title="Healthcheck")] = None
+    hostPort: Annotated[int | None, Field(title="Hostport")] = None
+    id: Annotated[str, Field(min_length=1, title="Id")]
+    image: Annotated[str, Field(min_length=1, title="Image")]
+    labels: Annotated[dict[str, str] | None, Field(title="Labels")] = None
+    lifecycle: LifecycleDef | None = None
+    logFormat: Annotated[LogFormat | None, Field(title="Logformat")] = None
+    """
+    Log format this service writes to stdout. 'json' enables structured field extraction in Loki (level, request_id). 'auto' (default when omitted) infers from the image name.
+    """
+    port: Annotated[int | None, Field(title="Port")] = None
+    resources: Annotated[dict[str, Any] | None, Field(title="Resources")] = None
+    routePrefix: Annotated[str | None, Field(title="Routeprefix")] = None
+    server: Annotated[str | None, Field(title="Server")] = None
+    """
+    Server role for multi-server deployments. Services with the same server value are co-located on one VPS. If omitted, all services go to the default (primary) server.
+    """
+    type: Annotated[Type, Field(title="Type")]
+    volumes: Annotated[list[str] | None, Field(title="Volumes")] = None
+
+
+class SingleContainerSpec(BaseModel):
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    healthPath: Annotated[str, Field(min_length=1, title="Healthpath")]
+    image: Annotated[str, Field(min_length=1, title="Image")]
+    port: Annotated[int, Field(gt=0, title="Port")]
+
+
+class SnapshotResponse(BaseModel):
+    id: Annotated[int, Field(title="Id")]
+    received_at: Annotated[str, Field(title="Received At")]
+    snapshot: ArchitectureSnapshot
+
+
+class SnapshotSummary(BaseModel):
+    id: Annotated[int, Field(title="Id")]
+    name: Annotated[str, Field(title="Name")]
+    received_at: Annotated[str, Field(title="Received At")]
+    system_count: Annotated[int, Field(title="System Count")]
+
+
+class StaticBuild(BaseModel):
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    command: Annotated[str, Field(min_length=1, title="Command")]
+    installCommand: Annotated[str | None, Field(title="Installcommand")] = None
+    outputDir: Annotated[str, Field(min_length=1, title="Outputdir")]
+
+
+class Router(StrEnum):
+    spa = "spa"
+    history = "history"
+    hash = "hash"
+
+
+class StaticServe(BaseModel):
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    router: Annotated[Router, Field(title="Router")]
+
+
+class StatusResponse(BaseModel):
+    """
+    Generic status response for operations that don't return data.
+    """
+
+    status: Annotated[str, Field(title="Status")]
+
+
+class SwitchBody(BaseModel):
+    component: Annotated[str, Field(title="Component")]
+    to_color: Annotated[str, Field(title="To Color")]
+
+
+class TokenResponse(BaseModel):
+    access_token: Annotated[str, Field(title="Access Token")]
+    expires_in: Annotated[int | None, Field(title="Expires In")] = None
+    refresh_token: Annotated[str | None, Field(title="Refresh Token")] = None
+    token_type: Annotated[str | None, Field(title="Token Type")] = "bearer"
+
+
+class UpdateBody(BaseModel):
+    component: Annotated[str, Field(title="Component")]
+    new_image: Annotated[str, Field(title="New Image")]
+
+
+class UsageEstimate(BaseModel):
+    activeServers: Annotated[int, Field(title="Activeservers")]
+    currentMonthCost: Annotated[float | None, Field(title="Currentmonthcost")] = 0.0
+    currentMonthHours: Annotated[float, Field(title="Currentmonthhours")]
+    org_id: Annotated[str, Field(title="Org Id")]
+    projectedMonthCost: Annotated[float | None, Field(title="Projectedmonthcost")] = 0.0
+    projectedMonthHours: Annotated[float, Field(title="Projectedmonthhours")]
+
+
+class UsageHistoryItem(BaseModel):
+    cost: Annotated[float | None, Field(title="Cost")] = 0.0
+    period_end: Annotated[AwareDatetime, Field(title="Period End")]
+    period_start: Annotated[AwareDatetime, Field(title="Period Start")]
+    serverCount: Annotated[int, Field(title="Servercount")]
+    vpsHours: Annotated[float, Field(title="Vpshours")]
+
+
+class UsageSummary(BaseModel):
+    activeServerCount: Annotated[int, Field(title="Activeservercount")]
+    org_id: Annotated[str, Field(title="Org Id")]
+    period_end: Annotated[AwareDatetime, Field(title="Period End")]
+    period_start: Annotated[AwareDatetime, Field(title="Period Start")]
+    servers: Annotated[
+        list[ServerUsageDetail] | None, Field(title="Servers", validate_default=True)
+    ] = []
+    totalCost: Annotated[float | None, Field(title="Totalcost")] = 0.0
+    totalVpsHours: Annotated[float, Field(title="Totalvpshours")]
+
+
+class UserRead(BaseModel):
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    email: Annotated[str, Field(title="Email")]
+    email_verified: Annotated[bool | None, Field(title="Email Verified")] = False
+    id: Annotated[UUID, Field(title="Id")]
+    is_active: Annotated[bool, Field(title="Is Active")]
+
+
+class ValidateBody(BaseModel):
+    manifest_path: Annotated[str | None, Field(title="Manifest Path")] = None
+
+
+class ValidateResponse(BaseModel):
+    """
+    Response for manifest validation.
+    """
+
+    path: Annotated[str, Field(title="Path")]
+    valid: Annotated[bool, Field(title="Valid")]
+
+
+class ValidationError(BaseModel):
+    ctx: Annotated[dict[str, Any] | None, Field(title="Context")] = None
+    input: Annotated[Any | None, Field(title="Input")] = None
+    loc: Annotated[list[str | int], Field(title="Location")]
+    msg: Annotated[str, Field(title="Message")]
+    type: Annotated[str, Field(title="Error Type")]
+
+
+class VaultGetResponse(BaseModel):
+    """
+    Response for vault get operations.
+    """
+
+    key: Annotated[str, Field(title="Key")]
+    value: Annotated[str, Field(title="Value")]
+
+
+class VaultSetRequest(BaseModel):
+    environment_id: Annotated[str | None, Field(title="Environment Id")] = None
+    key: Annotated[str, Field(title="Key")]
+    value: Annotated[str, Field(title="Value")]
+
+
+class VaultSetResponse(BaseModel):
+    """
+    Response for vault set operations.
+    """
+
+    key: Annotated[str, Field(title="Key")]
+    status: Annotated[str, Field(title="Status")]
+
+
+class VerifyEmailRequest(BaseModel):
+    token: Annotated[str, Field(title="Token")]
+
+
+class WorkspaceRead(BaseModel):
+    apiEndpoint: Annotated[str | None, Field(title="Apiendpoint")] = None
+    currentEnvironment: Annotated[str | None, Field(title="Currentenvironment")] = None
+    currentServer: Annotated[str | None, Field(title="Currentserver")] = None
+    hasAccountKey: Annotated[bool | None, Field(title="Hasaccountkey")] = False
+    projectKeyCount: Annotated[int | None, Field(title="Projectkeycount")] = 0
+    version: Annotated[int, Field(title="Version")]
+
+
+class WorkspaceUpdate(BaseModel):
+    current_environment: Annotated[str | None, Field(title="Current Environment")] = (
+        None
+    )
+    current_server: Annotated[str | None, Field(title="Current Server")] = None
+
+
+class CapacityReport(BaseModel):
+    limits_per_org: CapacityOrgLimits
+    region: Annotated[str, Field(title="Region")]
+    servers: CapacityServers
+
+
+class GatewayDef(BaseModel):
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    domains: Annotated[list[GatewayDomain], Field(min_length=1, title="Domains")]
+    ssl: SSLConfig | None = None
+
+
+class HTTPValidationError(BaseModel):
+    detail: Annotated[list[ValidationError] | None, Field(title="Detail")] = None
+
+
+class HealthRead(BaseModel):
+    capacity: CapacityReport | None = None
+    instance: Annotated[str, Field(title="Instance")]
+    region: Annotated[str, Field(title="Region")]
+    region_url: Annotated[str, Field(title="Region Url")]
+    status: Annotated[str, Field(title="Status")]
+    version: Annotated[str, Field(title="Version")]
+
+
+class LoggingDef(BaseModel):
+    """
+    Logging subsystem — Promtail ships container stdout to Loki.
+    """
+
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    enabled: Annotated[bool | None, Field(title="Enabled")] = True
+    loki: LokiDef | None = None
+
+
+class MeResponse(BaseModel):
+    orgs: Annotated[list[OrgBrief], Field(title="Orgs")]
+    user: UserRead
+
+
+class NativeBuild(BaseModel):
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    apiVersion: Annotated[Literal["forktex.cloud/v1beta2"], Field(title="Apiversion")]
+    build: NativeBuildSpec
+    infrastructure: InfrastructureDef | None = None
+    kind: Annotated[Literal["NativeBuild"], Field(title="Kind")]
+    metadata: MetadataDef
+
+
+class ObservabilityDefInput(BaseModel):
+    """
+    Opt-in monitoring stack deployed alongside the application on the VPS.
+
+    When enabled, Loki + Promtail aggregate container logs (queryable via
+    ``forktex cloud logs --query``), and Prometheus scrapes metrics from
+    services that expose ``/metrics``.
+    """
+
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    enabled: Annotated[bool | None, Field(title="Enabled")] = False
+    logging: LoggingDef | None = None
+    metrics: MetricsDef | None = None
+
+
+class ObservabilityDefOutput(ObservabilityDefInput):
+    """
+    Opt-in monitoring stack deployed alongside the application on the VPS.
+
+    When enabled, Loki + Promtail aggregate container logs (queryable via
+    ``forktex cloud logs --query``), and Prometheus scrapes metrics from
+    services that expose ``/metrics``.
+    """
+
+
+class ProjectDeploymentInput(BaseModel):
+    """
+    Multi-service single-server deployment to a single Hetzner VPS.
+    """
+
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    apiVersion: Annotated[Literal["forktex.cloud/v1beta2"], Field(title="Apiversion")]
+    deployment: DeploymentDef | None = None
+    gateway: GatewayDef | None = None
+    infrastructure: InfrastructureDef
+    kind: Annotated[Literal["ProjectDeployment"], Field(title="Kind")]
+    metadata: MetadataDef
+    observability: ObservabilityDefInput | None = None
+    services: Annotated[list[ServiceDef], Field(min_length=1, title="Services")]
+
+
+class ProjectDeploymentOutput(BaseModel):
+    """
+    Multi-service single-server deployment to a single Hetzner VPS.
+    """
+
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    apiVersion: Annotated[Literal["forktex.cloud/v1beta2"], Field(title="Apiversion")]
+    deployment: DeploymentDef | None = None
+    gateway: GatewayDef | None = None
+    infrastructure: InfrastructureDef
+    kind: Annotated[Literal["ProjectDeployment"], Field(title="Kind")]
+    metadata: MetadataDef
+    observability: ObservabilityDefOutput | None = None
+    services: Annotated[list[ServiceDef], Field(min_length=1, title="Services")]
+
+
+class ServerRead(BaseModel):
+    created_at: Annotated[AwareDatetime, Field(title="Created At")]
+    dns: ServerDnsRead | None = None
+    id: Annotated[UUID, Field(title="Id")]
+    image: Annotated[str | None, Field(title="Image")] = None
+    ipv4: Annotated[str | None, Field(title="Ipv4")] = None
+    location: Annotated[str | None, Field(title="Location")] = None
+    name: Annotated[str, Field(title="Name")]
+    provider: Annotated[str, Field(title="Provider")]
+    provider_id: Annotated[str | None, Field(title="Provider Id")] = None
+    server_type: Annotated[str | None, Field(title="Server Type")] = None
+    services: Annotated[list[ServerServiceRead] | None, Field(title="Services")] = None
+    ssh_key_id: Annotated[str | None, Field(title="Ssh Key Id")] = None
+    ssl: ServerSslRead | None = None
+    status: Annotated[str, Field(title="Status")]
+
+
+class SingleContainerInput(BaseModel):
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    apiVersion: Annotated[Literal["forktex.cloud/v1beta2"], Field(title="Apiversion")]
+    container: SingleContainerSpec
+    gateway: GatewayDef | None = None
+    infrastructure: InfrastructureDef | None = None
+    kind: Annotated[Literal["SingleContainer"], Field(title="Kind")]
+    metadata: MetadataDef
+
+
+class SingleContainerOutput(SingleContainerInput):
+    pass
+
+
+class StaticSiteInput(BaseModel):
+    model_config = ConfigDict(
+        extra="forbid",
+    )
+    apiVersion: Annotated[Literal["forktex.cloud/v1beta2"], Field(title="Apiversion")]
+    build: StaticBuild
+    gateway: GatewayDef | None = None
+    kind: Annotated[Literal["StaticSite"], Field(title="Kind")]
+    metadata: MetadataDef
+    serve: StaticServe
+
+
+class StaticSiteOutput(StaticSiteInput):
+    pass
+
+
+class UpRequest(BaseModel):
+    assets_tarball_b64: Annotated[str | None, Field(title="Assets Tarball B64")] = None
+    env: Annotated[str | None, Field(title="Env")] = None
+    flavour: Annotated[str | None, Field(title="Flavour")] = None
+    manifest_data: Annotated[
+        ProjectDeploymentInput
+        | StaticSiteInput
+        | SingleContainerInput
+        | NativeBuild
+        | None,
+        Field(title="Manifest Data"),
+    ] = None
+    name: Annotated[str | None, Field(title="Name")] = None
+    region: Annotated[str | None, Field(title="Region")] = None
+    skip_dns: Annotated[bool | None, Field(title="Skip Dns")] = False
+    skip_ssl: Annotated[bool | None, Field(title="Skip Ssl")] = False
+
+
+class UsageResponse(BaseModel):
+    current: UsageSummary
+    history: Annotated[
+        list[UsageHistoryItem] | None, Field(title="History", validate_default=True)
+    ] = []
+
+
+class DeployRequest(BaseModel):
+    assets_tarball_b64: Annotated[str | None, Field(title="Assets Tarball B64")] = None
+    environment_id: Annotated[str | None, Field(title="Environment Id")] = None
+    manifest_data: Annotated[
+        ProjectDeploymentInput
+        | StaticSiteInput
+        | SingleContainerInput
+        | NativeBuild
+        | None,
+        Field(title="Manifest Data"),
+    ] = None
+    server_id: Annotated[str, Field(title="Server Id")]
+    service: Annotated[str | None, Field(title="Service")] = None
+    tags: Annotated[list[str] | None, Field(title="Tags")] = None
+
+
+class DownRequest(BaseModel):
+    keep_dns: Annotated[bool | None, Field(title="Keep Dns")] = False
+    manifest_data: Annotated[
+        ProjectDeploymentInput
+        | StaticSiteInput
+        | SingleContainerInput
+        | NativeBuild
+        | None,
+        Field(title="Manifest Data"),
+    ] = None
+    name: Annotated[str | None, Field(title="Name")] = None