pangea-sdk 6.2.0b1__py3-none-any.whl → 6.3.0__py3-none-any.whl

pangea/services/vault/models/common.py

@@ -1,5 +1,9 @@
 # Copyright 2022 Pangea Cyber Corporation
 # Author: Pangea Cyber Corporation
+
+# TODO: Use `list` instead of `List`.
+# ruff: noqa: UP006, UP035
+
 from __future__ import annotations
 
 import enum
@@ -19,8 +23,7 @@ EncodedPrivateKey = NewType("EncodedPrivateKey", str)
 EncodedSymmetricKey = NewType("EncodedSymmetricKey", str)
 
 
-Metadata = NewType("Metadata", Dict[str, str])
-Tags = NewType("Tags", List[str])
+Tags = list[str]
 
 
 class ItemOrder(str, enum.Enum):
@@ -165,7 +168,7 @@ class ItemData(PangeaResponseResult):
     current_version: Optional[ItemVersion] = None
     name: Optional[str] = None
     folder: Optional[str] = None
-    metadata: Optional[Metadata] = None
+    metadata: Optional[dict[str, str]] = None
     tags: Optional[Tags] = None
     rotation_frequency: Optional[str] = None
     rotation_state: Optional[str] = None
@@ -193,7 +196,7 @@ class Key(PangeaResponseResult):
     current_version: Optional[ItemVersion] = None
     name: str
     folder: str
-    metadata: Optional[Metadata] = None
+    metadata: Optional[dict[str, str]] = None
     tags: Optional[Tags] = None
     rotation_frequency: str
     rotation_state: RotationState
@@ -219,7 +222,7 @@ class Secret(PangeaResponseResult):
     enabled: bool
     name: str
     folder: str
-    metadata: Optional[Metadata] = None
+    metadata: Optional[dict[str, str]] = None
     tags: Optional[Tags] = None
     expiration: Optional[str] = None
     created_at: str
@@ -233,7 +236,7 @@ class ClientSecret(PangeaResponseResult):
     enabled: bool
     name: str
     folder: str
-    metadata: Metadata
+    metadata: dict[str, str]
     tags: Tags
     expiration: str
     created_at: str
@@ -250,7 +253,7 @@ class Folder(PangeaResponseResult):
     type: Literal[ItemType.FOLDER] = ItemType.FOLDER
     name: str
     folder: str
-    metadata: Metadata
+    metadata: dict[str, str]
     tags: Tags
     created_at: str
     inherited_settings: InheritedSettings
@@ -263,7 +266,7 @@ class ListItemData(PangeaResponseResult):
     folder: str
     created_at: str
     tags: Optional[Tags] = None
-    metadata: Optional[Metadata] = None
+    metadata: Optional[dict[str, str]] = None
     last_rotated: Optional[str] = None
     next_rotation: Optional[str] = None
     disabled_at: Optional[str] = None
@@ -321,7 +324,7 @@ class UpdateRequest(APIRequestModel):
     id: str
     name: Optional[str] = None
     folder: Optional[str] = None
-    metadata: Optional[Metadata] = None
+    metadata: Optional[Mapping[str, str]] = None
     tags: Optional[Tags] = None
     disabled_at: Optional[str] = None
     enabled: Optional[bool] = None
@@ -406,7 +409,7 @@ class StateChangeResult(PangeaResponseResult):
 class FolderCreateRequest(APIRequestModel):
     name: str
     folder: str
-    metadata: Optional[Metadata] = None
+    metadata: Optional[Mapping[str, str]] = None
     tags: Optional[Tags] = None
     rotation_frequency: Optional[str] = None
     rotation_state: Optional[RequestRotationState] = None
@@ -427,7 +430,7 @@ class FolderCreateResult(PangeaResponseResult):
     folder: str
     """The folder where this item is stored."""
 
-    metadata: Optional[Metadata] = None
+    metadata: Optional[dict[str, str]] = None
     """User-provided metadata."""
 
     tags: Optional[Tags] = None
@@ -676,7 +679,7 @@ class PangeaToken(PangeaResponseResult):
 
     item_versions: List[PangeaTokenVersion]
 
-    metadata: Optional[Metadata] = None
+    metadata: Optional[dict[str, str]] = None
     """Metadata provided by the user."""
 
     num_versions: int

pangea/services/vault/models/keys.py

@@ -1,5 +1,6 @@
 from __future__ import annotations
 
+from collections.abc import Mapping
 from typing import Literal, Optional, Union
 
 from pangea.response import APIRequestModel, PangeaDateTime
@@ -10,13 +11,7 @@ from pangea.services.vault.models.asymmetric import (
     AsymmetricKeyPurpose,
     AsymmetricKeySigningAlgorithm,
 )
-from pangea.services.vault.models.common import (
-    ItemType,
-    Metadata,
-    RequestManualRotationState,
-    RequestRotationState,
-    Tags,
-)
+from pangea.services.vault.models.common import ItemType, RequestManualRotationState, RequestRotationState, Tags
 from pangea.services.vault.models.symmetric import (
     SymmetricKeyEncryptionAlgorithm,
     SymmetricKeyFpeAlgorithm,
@@ -39,7 +34,7 @@ class CommonGenerateRequest(APIRequestModel):
     ]
     name: Optional[str] = None
     folder: Optional[str] = None
-    metadata: Optional[Metadata] = None
+    metadata: Optional[Mapping[str, str]] = None
     tags: Optional[Tags] = None
     rotation_frequency: Optional[str] = None
     rotation_state: Optional[RequestRotationState] = RequestRotationState.INHERITED
@@ -71,7 +66,7 @@ class KeyStoreRequest(APIRequestModel):
     # Optional.
     name: Optional[str] = None
     folder: Optional[str] = None
-    metadata: Optional[Metadata] = None
+    metadata: Optional[Mapping[str, str]] = None
     tags: Optional[Tags] = None
     rotation_frequency: Optional[str] = None
     rotation_state: Optional[RequestRotationState] = RequestRotationState.INHERITED

pangea/services/vault/models/secret.py

@@ -1,17 +1,12 @@
 # Copyright 2022 Pangea Cyber Corporation
 # Author: Pangea Cyber Corporation
+from collections.abc import Mapping
 from typing import Optional
 
 from typing_extensions import Literal
 
 from pangea.response import APIRequestModel, PangeaDateTime
-from pangea.services.vault.models.common import (
-    CommonRotateRequest,
-    CommonRotateResult,
-    CommonStoreResult,
-    Metadata,
-    Tags,
-)
+from pangea.services.vault.models.common import CommonRotateRequest, CommonRotateResult, CommonStoreResult, Tags
 
 
 class SecretStoreRequest(APIRequestModel):
@@ -31,7 +26,7 @@ class SecretStoreRequest(APIRequestModel):
     # Optional.
     name: Optional[str] = None
     folder: Optional[str] = None
-    metadata: Optional[Metadata] = None
+    metadata: Optional[Mapping[str, str]] = None
     tags: Optional[Tags] = None
     disabled_at: Optional[PangeaDateTime] = None
 

pangea/services/vault/models/symmetric.py

@@ -1,5 +1,9 @@
 # Copyright 2022 Pangea Cyber Corporation
 # Author: Pangea Cyber Corporation
+
+# TODO: Use `list` instead of `List`.
+# ruff: noqa: UP006, UP035
+
 from __future__ import annotations
 
 from enum import Enum

pangea/services/vault/vault.py

@@ -2,10 +2,9 @@
 # Author: Pangea Cyber Corporation
 from __future__ import annotations
 
-from typing import TYPE_CHECKING, Any, List, Literal, Optional, Union, cast, overload
+from typing import TYPE_CHECKING, Annotated, Any, Literal, Optional, Union, cast, overload
 
 from pydantic import Field, TypeAdapter
-from typing_extensions import Annotated
 
 from pangea.response import PangeaResponse, PangeaResponseResult
 from pangea.services.base import ServiceBase
@@ -34,7 +33,6 @@ from pangea.services.vault.models.common import (
     EncryptTransformRequest,
     EncryptTransformResult,
     ExportEncryptionAlgorithm,
-    ExportEncryptionType,
     ExportRequest,
     ExportResult,
     Folder,
@@ -54,7 +52,6 @@ from pangea.services.vault.models.common import (
     JWTVerifyResult,
     ListRequest,
     ListResult,
-    Metadata,
     PangeaToken,
     PangeaTokenRotateRequest,
     RequestManualRotationState,
@@ -98,7 +95,7 @@ vault_item_adapter: TypeAdapter[VaultItem] = TypeAdapter(VaultItem)
 
 
 class GetBulkResponse(PangeaResponseResult):
-    items: List[VaultItem]
+    items: list[VaultItem]
 
 
 class Vault(ServiceBase):
@@ -164,7 +161,7 @@ class Vault(ServiceBase):
         Returns:
             A PangeaResponse where the id of the deleted secret or key
                 is returned in the response.result field.
-                Available response fields can be found in our [API documentation](https://pangea.cloud/docs/api/vault#delete).
+                Available response fields can be found in our [API documentation](https://pangea.cloud/docs/api/vault/v1-general#/v1/delete-post).
 
         Raises:
             PangeaAPIException: If an API Error happens
@@ -197,7 +194,7 @@ class Vault(ServiceBase):
         Returns:
             A PangeaResponse where the secret or key
                 is returned in the response.result field.
-                Available response fields can be found in our [API documentation](https://pangea.cloud/docs/api/vault#retrieve).
+                Available response fields can be found in our [API documentation](https://pangea.cloud/docs/api/vault/v1-general#/v1/get-post).
 
         Raises:
             PangeaAPIException: If an API Error happens
@@ -285,7 +282,7 @@ class Vault(ServiceBase):
         Returns:
             A PangeaResponse where a list of secrets or keys
                 is returned in the response.result field.
-                Available response fields can be found in our [API documentation](https://pangea.cloud/docs/api/vault#list).
+                Available response fields can be found in our [API documentation](https://pangea.cloud/docs/api/vault/v1-general#/v1/list-post).
 
         Examples:
             response = vault.list(
@@ -314,7 +311,7 @@ class Vault(ServiceBase):
         *,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         disabled_at: str | None = None,
         enabled: bool | None = None,
@@ -344,7 +341,7 @@ class Vault(ServiceBase):
         Returns:
             A PangeaResponse where the item ID is returned in the
             response.result field. Available response fields can be found in our
-            [API documentation](https://pangea.cloud/docs/api/vault#update).
+            [API documentation](https://pangea.cloud/docs/api/vault/v1-general#/v1/update-post).
 
         Raises:
             PangeaAPIException: If an API Error happens
@@ -390,7 +387,7 @@ class Vault(ServiceBase):
         result_class: type[TResult] = SecretStoreResult,  # type: ignore[assignment]
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         disabled_at: datetime.datetime | None = None,
         **kwargs: Any,
@@ -415,22 +412,22 @@ class Vault(ServiceBase):
         *,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         disabled_at: datetime.datetime | None = None,
     ) -> PangeaResponse[Secret]:
         """
         Store secret
 
-        Store a secret.
+        Store a secret as a Vault item.
 
         Args:
-            secret: The secret value.
-            name: The name of this item.
-            folder: The folder where this item is stored.
-            metadata: User-provided metadata.
-            tags: A list of user-defined tags.
-            disabled_at: Timestamp indicating when the item will be disabled.
+            secret: Secret value
+            name: Name of the item
+            folder: Folder where the item is stored
+            metadata: Metadata provided by the user
+            tags: List of user-defined tags
+            disabled_at: Timestamp indicating when the item will be disabled
 
         Raises:
             PangeaAPIException: If an API Error happens
@@ -456,25 +453,38 @@ class Vault(ServiceBase):
         *,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         disabled_at: datetime.datetime | None = None,
         rotation_frequency: str | None = None,
-        rotation_state: RotationState | None = None,
+        rotation_state: Literal["deactivated", "destroyed", "inherited"] | None = None,
         rotation_grace_period: str | None = None,
     ) -> PangeaResponse[PangeaToken]:
         """
         Store secret
 
-        Store a Pangea token.
+        Store a Pangea token as a Vault item.
 
         Args:
-            token: The Pangea token value.
-            name: The name of this item.
-            folder: The folder where this item is stored.
-            metadata: User-provided metadata.
-            tags: A list of user-defined tags.
-            disabled_at: Timestamp indicating when the item will be disabled.
+            token: Pangea token value
+            name: Name of the item
+            folder: Folder where the item is stored
+            metadata: Metadata provided by the user
+            tags: List of user-defined tags
+            disabled_at: Timestamp indicating when the item will be disabled
+            rotation_frequency: Time interval between item rotations, provided
+              as a positive number followed by a time unit: `secs`, `mins`, `hrs`,
+              `days`, `weeks`, `months`, or `years`. You can use abbreviations
+              like `1d`. Omit to inherit from the parent folder or default
+              settings. Set to `never` to disable rotation.
+            rotation_state: Target state for the previous version after
+                rotation. Set to `inherited` to inherit from the parent folder
+                or default settings.
+            rotation_grace_period: Grace period for the previous version,
+              provided as a positive number followed by a time unit: `secs`,
+              `mins`, `hrs`, `days`, `weeks`, `months`, or `years`. You can use
+              abbreviations like `1d`. Omit to inherit from the parent folder or
+              default settings.
 
         Raises:
             PangeaAPIException: If an API Error happens
@@ -505,7 +515,7 @@ class Vault(ServiceBase):
         *,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         disabled_at: datetime.datetime | None = None,
         rotation_frequency: str | None = None,
@@ -667,7 +677,7 @@ class Vault(ServiceBase):
         algorithm: AsymmetricKeySigningAlgorithm,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -713,7 +723,7 @@ class Vault(ServiceBase):
         algorithm: AsymmetricKeyEncryptionAlgorithm,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -759,7 +769,7 @@ class Vault(ServiceBase):
         algorithm: AsymmetricKeyJwtAlgorithm,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -805,7 +815,7 @@ class Vault(ServiceBase):
         algorithm: AsymmetricKeyPkiAlgorithm,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -851,7 +861,7 @@ class Vault(ServiceBase):
         algorithm: AsymmetricKeyAlgorithm,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -897,7 +907,7 @@ class Vault(ServiceBase):
         algorithm: SymmetricKeyEncryptionAlgorithm,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -943,7 +953,7 @@ class Vault(ServiceBase):
         algorithm: SymmetricKeyJwtAlgorithm,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -989,7 +999,7 @@ class Vault(ServiceBase):
         algorithm: SymmetricKeyFpeAlgorithm,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -1035,7 +1045,7 @@ class Vault(ServiceBase):
         algorithm: SymmetricKeyAlgorithm,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -1080,7 +1090,7 @@ class Vault(ServiceBase):
         algorithm: AsymmetricKeyAlgorithm | SymmetricKeyAlgorithm,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -1146,7 +1156,7 @@ class Vault(ServiceBase):
         private_key: str,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -1196,7 +1206,7 @@ class Vault(ServiceBase):
         private_key: str,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -1246,7 +1256,7 @@ class Vault(ServiceBase):
         private_key: str,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -1296,7 +1306,7 @@ class Vault(ServiceBase):
         private_key: str,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -1345,7 +1355,7 @@ class Vault(ServiceBase):
         key: str,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -1393,7 +1403,7 @@ class Vault(ServiceBase):
         key: str,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -1441,7 +1451,7 @@ class Vault(ServiceBase):
         key: str,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -1498,7 +1508,7 @@ class Vault(ServiceBase):
         key: str | None = None,
         name: str | None = None,
         folder: str | None = None,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState | None = RequestRotationState.INHERITED,
@@ -1679,7 +1689,7 @@ class Vault(ServiceBase):
         Returns:
             A PangeaResponse where the encrypted message in base64 is returned
             in the response.result field. Available response fields can be found
-            in our [API documentation](https://pangea.cloud/docs/api/vault#encrypt).
+            in our [API documentation](https://pangea.cloud/docs/api/vault/v1-keys#/v1/key/encrypt-post).
 
         Raises:
             PangeaAPIException: If an API Error happens
@@ -1715,7 +1725,7 @@ class Vault(ServiceBase):
 
         Returns:
             A PangeaResponse where the decrypted message in base64 is returned
-            in the response.result field. Available response fields can be found in our [API documentation](https://pangea.cloud/docs/api/vault#decrypt).
+            in the response.result field. Available response fields can be found in our [API documentation](https://pangea.cloud/docs/api/vault/v1-keys#/v1/key/decrypt-post).
 
         Raises:
             PangeaAPIException: If an API Error happens
@@ -1749,7 +1759,7 @@ class Vault(ServiceBase):
         Returns:
             A PangeaResponse where the signature of the message in base64 is
             returned in the response.result field. Available response fields can
-            be found in our [API documentation](https://pangea.cloud/docs/api/vault#sign).
+            be found in our [API documentation](https://pangea.cloud/docs/api/vault/v1-keys#/v1/key/sign-post).
 
         Raises:
             PangeaAPIException: If an API Error happens
@@ -1785,7 +1795,7 @@ class Vault(ServiceBase):
         Returns:
             A PangeaResponse where the signature is valid
                 is returned in the response.result field.
-                Available response fields can be found in our [API documentation](https://pangea.cloud/docs/api/vault#verify).
+                Available response fields can be found in our [API documentation](https://pangea.cloud/docs/api/vault/v1-keys#/v1/key/verify-post).
 
         Examples:
             response = vault.verify(
@@ -1823,7 +1833,7 @@ class Vault(ServiceBase):
         Returns:
             A PangeaResponse where the signature is valid
                 is returned in the response.result field.
-                Available response fields can be found in our [API documentation](https://pangea.cloud/docs/api/vault#verify-jwt).
+                Available response fields can be found in our [API documentation](https://pangea.cloud/docs/api/vault/v1-jwt#/v1/key/verify/jwt-post).
 
         Examples:
             response = vault.jwt_verify(jws="ewogICJhbGciO...")
@@ -1848,7 +1858,7 @@ class Vault(ServiceBase):
         Returns:
             A PangeaResponse where the signed JSON Web Token (JWS) is returned
             in the response.result field. Available response fields can be found
-            in our [API documentation](https://pangea.cloud/docs/api/vault#sign-a-jwt).
+            in our [API documentation](https://pangea.cloud/docs/api/vault/v1-jwt#/v1/key/sign/jwt-post).
 
         Examples:
             response = vault.jwt_sign(
@@ -1878,7 +1888,7 @@ class Vault(ServiceBase):
         Returns:
             A PangeaResponse where the JSON Web Key Set (JWKS) object is
             returned in the response.result field. Available response fields can
-            be found in our [API documentation](https://pangea.cloud/docs/api/vault#retrieve-jwk).
+            be found in our [API documentation](https://pangea.cloud/docs/api/vault/v1-jwt#/v1/get/jwk-post).
 
         Examples:
             response = vault.jwk_get("pvi_p6g5i3gtbvqvc3u6zugab6qs6r63tqf5")
@@ -1910,7 +1920,7 @@ class Vault(ServiceBase):
         Returns:
             A PangeaResponse where the state change object is returned in the
             response.result field. Available response fields can be found in our
-            [API documentation](https://pangea.cloud/docs/api/vault#change-state).
+            [API documentation](https://pangea.cloud/docs/api/vault/v1-general#/v1/state/change-post).
 
         Raises:
             PangeaAPIException: If an API Error happens
@@ -1934,7 +1944,7 @@ class Vault(ServiceBase):
         name: str,
         folder: str,
         *,
-        metadata: Metadata | None = None,
+        metadata: Mapping[str, str] | None = None,
         tags: Tags | None = None,
         rotation_frequency: str | None = None,
         rotation_state: RequestRotationState = RequestRotationState.INHERITED,
@@ -2011,7 +2021,7 @@ class Vault(ServiceBase):
         Returns:
             A `PangeaResponse` where the encrypted object is returned in the
             `response.result` field. Available response fields can be found in
-            our [API documentation](https://pangea.cloud/docs/api/vault#encrypt-structured).
+            our [API documentation](https://pangea.cloud/docs/api/vault/v1-keys#/v1/key/encrypt/structured-post).
 
         Raises:
             PangeaAPIException: If an API error happens.
@@ -2067,7 +2077,7 @@ class Vault(ServiceBase):
         Returns:
             A `PangeaResponse` where the decrypted object is returned in the
             `response.result` field. Available response fields can be found in
-            our [API documentation](https://pangea.cloud/docs/api/vault#decrypt-structured).
+            our [API documentation](https://pangea.cloud/docs/api/vault/v1-keys#/v1/key/decrypt/structured-post).
 
         Examples:
             data = {"field1": [1, 2, "kxcbC9E9IlgVaSCChPWUMgUC3ko=", "6FfI/LCzatLRLNAc8SuBK/TDnGxp"], "field2": "data2"}
@@ -2211,7 +2221,7 @@ class Vault(ServiceBase):
         Returns:
             A `PangeaResponse` where the exported key is returned in the
             `response.result` field. Available response fields can be found in
-            our [API documentation](https://pangea.cloud/docs/api/vault#export).
+            our [API documentation](https://pangea.cloud/docs/api/vault/v1-general#/v1/export-post).
 
         Raises:
             PangeaAPIException: If an API error happens.