vertracloud-api 0.2.2__tar.gz → 0.3.1__tar.gz

{vertracloud_api-0.2.2 → vertracloud_api-0.3.1}/CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## [0.3.1](https://github.com/vertracloud/sdk-api-py/compare/v0.3.0...v0.3.1) (2026-10-22)
+
+
+### Features
+
+* **apps:** Deno, .NET and Elixir and language on create ([c7a7bb3](https://github.com/vertracloud/sdk-api-py/commit/c7a7bb3e4141d8f0c45853807acfd49719841100))
+* **apps:** remove cleanup_old_runtime_language from the restart body ([e8aa75d](https://github.com/vertracloud/sdk-api-py/commit/e8aa75daf69752af8ea16048e84e85857f613ff4))
+
+## [0.3.0](https://github.com/vertracloud/sdk-api-py/compare/v0.2.2...v0.3.0) (2026-10-22)
+
+
+### ⚠ BREAKING CHANGES
+
+* plan names and multiple custom domains per app
+
+### Features
+
+* plan names and multiple custom domains per app ([1df9eab](https://github.com/vertracloud/sdk-api-py/commit/1df9eab6d548a6136409652419afd26dbd6c8b41))
+
+
+### Bug Fixes
+
+* drop the Authorization header when a redirect changes scheme, host or port ([70f5451](https://github.com/vertracloud/sdk-api-py/commit/70f5451d8ee02579344ac2fde46a16ed1b9952eb))
+* reject empty and dot path segments before sending a request ([2964db9](https://github.com/vertracloud/sdk-api-py/commit/2964db9c6da64ce0427ee4b4c2975b012edbad8e))
+* **upload:** escape quotes and reject CR/LF in multipart Content-Disposition ([e56ebb0](https://github.com/vertracloud/sdk-api-py/commit/e56ebb0ef9717cd45d766d94905225ede8c4466e))
+
 ## [0.2.2](https://github.com/vertracloud/sdk-api-py/compare/v0.2.1...v0.2.2) (2026-10-18)
 
 

{vertracloud_api-0.2.2 → vertracloud_api-0.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: vertracloud-api
-Version: 0.2.2
+Version: 0.3.1
 Summary: Official Python SDK for the public API of Vertra Cloud, a Brazilian application hosting platform (PaaS).
 Project-URL: Homepage, https://vertracloud.app
 Project-URL: Documentation, https://docs.vertracloud.app/sdks
@@ -48,7 +48,8 @@ from vertracloud import VertraClient
 client = VertraClient(api_key=os.environ["VERTRA_API_KEY"])
 
 me = client.account.get()
-print(f"Hi {me['name']}! Plan: {me['plan']['name']}")
+plan = me["plan"]
+print(f"Hi {me['name']}! Plan: {plan['name'] if plan else 'none'}")
 
 for app in me["applications"]:
     print(app["id"], app["name"], app["status"])
@@ -99,6 +100,25 @@ metrics = client.apps.metrics(app_id, range="24h")
 logs = client.apps.logs(app_id)
 ```
 
+### Custom domains
+
+An app can have several domains, each with its own port, path prefix or redirect. `add` returns the created
+domain and its automatic `www` (or root) companion; the limit depends on your plan.
+
+```python
+domains = client.apps.domains.add(app_id, {"hostname": "example.com", "port": 8080})
+main = domains[0]
+
+for record in client.apps.domains.dns(app_id, main["id"]):
+    print(record["type"], record["name"], record["value"], record["status"])
+
+client.apps.domains.update(app_id, domains[1]["id"], {"redirect_to": main["id"], "redirect_status": 301})
+client.apps.domains.remove(app_id, main["id"])
+```
+
+`client.apps.domains.connect(app_id, domain_id)` returns a link that configures the DNS records at providers that
+support it, or raises a 404 `DOMAIN_CONNECT_UNAVAILABLE`.
+
 ### Releases and rollback
 
 ```python
@@ -157,7 +177,7 @@ except vertracloud.WaitTimeoutError:  # still building after `timeout` seconds
     ...
 ```
 
-`missing_dependencies` on the app is filled only after the build ends. Before it ends, calls that need a stopped or running app can fail with `APP_BUILDING` (409).
+While the build runs, calls that need a stopped or running app can fail with `APP_BUILDING` (409).
 
 ### Realtime logs (SSE)
 
@@ -225,7 +245,7 @@ client = VertraClient(api_key="test", transport=my_fake_transport)
 
 | Domain | Resource | Routes |
 |---|---|---|
-| Apps | `client.apps` (+ `.deploys`, `.releases`, `.network`, `.envs`, `.files`) | 40 |
+| Apps | `client.apps` (+ `.deploys`, `.releases`, `.domains`, `.network`, `.envs`, `.files`) | 42 |
 | Databases | `client.databases` (+ `.credentials`) | 13 |
 | Snapshots | `client.snapshots` | 5 |
 | Account | `client.account` (+ `.sessions`, `.folders`, `.favorites`) | 10 |

{vertracloud_api-0.2.2 → vertracloud_api-0.3.1}/README.md

@@ -29,7 +29,8 @@ from vertracloud import VertraClient
 client = VertraClient(api_key=os.environ["VERTRA_API_KEY"])
 
 me = client.account.get()
-print(f"Hi {me['name']}! Plan: {me['plan']['name']}")
+plan = me["plan"]
+print(f"Hi {me['name']}! Plan: {plan['name'] if plan else 'none'}")
 
 for app in me["applications"]:
     print(app["id"], app["name"], app["status"])
@@ -80,6 +81,25 @@ metrics = client.apps.metrics(app_id, range="24h")
 logs = client.apps.logs(app_id)
 ```
 
+### Custom domains
+
+An app can have several domains, each with its own port, path prefix or redirect. `add` returns the created
+domain and its automatic `www` (or root) companion; the limit depends on your plan.
+
+```python
+domains = client.apps.domains.add(app_id, {"hostname": "example.com", "port": 8080})
+main = domains[0]
+
+for record in client.apps.domains.dns(app_id, main["id"]):
+    print(record["type"], record["name"], record["value"], record["status"])
+
+client.apps.domains.update(app_id, domains[1]["id"], {"redirect_to": main["id"], "redirect_status": 301})
+client.apps.domains.remove(app_id, main["id"])
+```
+
+`client.apps.domains.connect(app_id, domain_id)` returns a link that configures the DNS records at providers that
+support it, or raises a 404 `DOMAIN_CONNECT_UNAVAILABLE`.
+
 ### Releases and rollback
 
 ```python
@@ -138,7 +158,7 @@ except vertracloud.WaitTimeoutError:  # still building after `timeout` seconds
     ...
 ```
 
-`missing_dependencies` on the app is filled only after the build ends. Before it ends, calls that need a stopped or running app can fail with `APP_BUILDING` (409).
+While the build runs, calls that need a stopped or running app can fail with `APP_BUILDING` (409).
 
 ### Realtime logs (SSE)
 
@@ -206,7 +226,7 @@ client = VertraClient(api_key="test", transport=my_fake_transport)
 
 | Domain | Resource | Routes |
 |---|---|---|
-| Apps | `client.apps` (+ `.deploys`, `.releases`, `.network`, `.envs`, `.files`) | 40 |
+| Apps | `client.apps` (+ `.deploys`, `.releases`, `.domains`, `.network`, `.envs`, `.files`) | 42 |
 | Databases | `client.databases` (+ `.credentials`) | 13 |
 | Snapshots | `client.snapshots` | 5 |
 | Account | `client.account` (+ `.sessions`, `.folders`, `.favorites`) | 10 |

{vertracloud_api-0.2.2 → vertracloud_api-0.3.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "vertracloud-api"
-version = "0.2.2"
+version = "0.3.1"
 description = "Official Python SDK for the public API of Vertra Cloud, a Brazilian application hosting platform (PaaS)."
 readme = "README.md"
 license = "MIT"
@@ -21,6 +21,9 @@ Issues = "https://github.com/vertracloud/sdk-api-py/issues"
 [project.optional-dependencies]
 dev = ["pytest>=8", "ruff>=0.6", "mypy>=1.11", "build>=1.2"]
 
+[tool.hatch.build.targets.sdist]
+include = ["src", "README.md", "LICENSE", "CHANGELOG.md", "pyproject.toml"]
+
 [tool.hatch.build.targets.wheel]
 packages = ["src/vertracloud"]
 

{vertracloud_api-0.2.2 → vertracloud_api-0.3.1}/src/vertracloud/client.py

@@ -9,14 +9,14 @@ import mimetypes
 import uuid
 from collections.abc import Iterable
 from typing import Any
-from urllib.parse import quote, urlencode
+from urllib.parse import quote, unquote, urlencode
 
 from .errors import error_from_response
 from .sse import SseStream
 from .transport import Response, Transport, UrllibTransport
 from .types import JsonValue
 
-__version__ = "0.2.2"  # x-release-please-version
+__version__ = "0.3.1"  # x-release-please-version
 
 DEFAULT_BASE_URL = "https://api.vertracloud.app"
 DEFAULT_BLOB_BASE_URL = "https://blob.vertracloud.app/v1"
@@ -25,9 +25,28 @@ DEFAULT_TIMEOUT = 30.0
 LARGE_PAYLOAD_TIMEOUT = 120.0
 
 
+def _is_dot_segment(value: str) -> bool:
+    current = value
+    for _ in range(4):
+        if current in ("", ".", ".."):
+            return True
+        decoded = unquote(current)
+        if decoded == current:
+            return False
+        current = decoded
+    return False
+
+
 def encode_path_param(value: str) -> str:
-    """`quote(safe="")` — a path param never lets `/`, `?`, etc. leak into the URL structure."""
-    return quote(str(value), safe="")
+    """`quote(safe="")` — a path param never lets `/`, `?`, etc. leak into the URL structure.
+
+    Raises `ValueError` (before any request) for an empty value, `.` or `..`, also when percent-encoded:
+    servers and URL parsers collapse dot-segments, so the call would reach a different route.
+    """
+    text = str(value)
+    if _is_dot_segment(text):
+        raise ValueError(f"Invalid path segment: {text!r}")
+    return quote(text, safe="")
 
 
 class MultipartField:
@@ -49,13 +68,24 @@ class MultipartField:
         self.content_type = content_type
 
 
+def _quote_param(value: str, what: str) -> str:
+    """Quote a Content-Disposition parameter like Go's `mime/multipart` (`\\` and `"` escaped).
+
+    CR/LF are rejected instead of rewritten: silently changing a file name would surprise the
+    caller, and a header line break is never a legitimate name.
+    """
+    if "\r" in value or "\n" in value:
+        raise ValueError(f"multipart {what} must not contain CR/LF")
+    return value.replace("\\", "\\\\").replace('"', '\\"')
+
+
 def _build_multipart(fields: Iterable[MultipartField]) -> tuple[bytes, str]:
     boundary = f"----vertracloud-{uuid.uuid4().hex}"
     parts: list[bytes] = []
     for field in fields:
-        disposition = f'form-data; name="{field.name}"'
+        disposition = f'form-data; name="{_quote_param(field.name, "field name")}"'
         if field.filename:
-            disposition += f'; filename="{field.filename}"'
+            disposition += f'; filename="{_quote_param(field.filename, "filename")}"'
         header = f"--{boundary}\r\nContent-Disposition: {disposition}\r\n"
         content_type = field.content_type
         if content_type is None and field.filename:

{vertracloud_api-0.2.2 → vertracloud_api-0.3.1}/src/vertracloud/resources/apps.py

@@ -1,4 +1,4 @@
-"""`apps` domain — 40 routes (scopes `apps:read/write/delete/envs/files`).
+"""`apps` domain — 42 routes (scopes `apps:read/write/delete/envs/files`).
 
 `workspace_id` is accepted as an optional query parameter on almost every method.
 """
@@ -12,9 +12,13 @@ from ..client import LARGE_PAYLOAD_TIMEOUT, MultipartField, encode_path_param
 from ..errors import AppBuildFailedError, WaitTimeoutError
 from ..sse import SseStream
 from ..types import (
+    AddDomainBody,
     APIAppFileUploadResponse,
     APIApplication,
     APIApplicationDeployment,
+    APIApplicationDomain,
+    APIApplicationDomainConnect,
+    APIApplicationDomainDnsRecord,
     APIApplicationEnvironment,
     APIApplicationFileContent,
     APIApplicationFileTree,
@@ -26,14 +30,11 @@ from ..types import (
     APIApplicationStatus,
     APIApplicationStatusShort,
     APIApplicationWebPublish,
-    APICustomDomainResponse,
-    APIDnsRecord,
     APIRuntimesResponse,
     APISubdomainResponse,
     APIWebhookUrl,
     CreateAppBody,
     CreateWebhookBody,
-    CustomDomainBody,
     EnvironmentSetBody,
     JsonValue,
     MoveFileBody,
@@ -43,6 +44,7 @@ from ..types import (
     RollbackAppBody,
     SetSubdomainBody,
     UpdateAppConfigBody,
+    UpdateDomainBody,
 )
 
 if TYPE_CHECKING:
@@ -51,6 +53,8 @@ if TYPE_CHECKING:
 # Aliases so `list[...]` doesn't resolve to the `list` method inside the class itself.
 EnvList = list[APIApplicationEnvironment]
 FileTreeList = list[APIApplicationFileTree]
+DomainList = list[APIApplicationDomain]
+DomainDnsList = list[APIApplicationDomainDnsRecord]
 
 
 class AppDeploysWebhookResource:
@@ -167,45 +171,66 @@ class AppReleasesResource:
         )
 
 
-class AppCustomDomainResource:
+class AppDomainsResource:
     def __init__(self, client: VertraClient) -> None:
         self._c = client
 
-    def get(self, app_id: str, *, workspace_id: str | None = None) -> APICustomDomainResponse:
-        """GET /v1/apps/:id/network/custom — scope `apps:read`."""
+    def list(self, app_id: str, *, workspace_id: str | None = None) -> DomainList:
+        """GET /v1/apps/:id/domains — scope `apps:read`. Automatic companions included."""
         return self._c.request_json(
-            "GET", f"/v1/apps/{encode_path_param(app_id)}/network/custom", query={"workspace_id": workspace_id}
+            "GET", f"/v1/apps/{encode_path_param(app_id)}/domains", query={"workspace_id": workspace_id}
         )
 
-    def set(self, app_id: str, body: CustomDomainBody, *, workspace_id: str | None = None) -> APICustomDomainResponse:
-        """POST /v1/apps/:id/network/custom — scope `apps:write`.
-        Doc: https://docs.vertracloud.app/api-reference/endpoint/apps/network/customdomain
-        """
+    def add(self, app_id: str, body: AddDomainBody, *, workspace_id: str | None = None) -> DomainList:
+        """POST /v1/apps/:id/domains — scope `apps:write`. Returns the created domain and its companion."""
         return self._c.request_json(
             "POST",
-            f"/v1/apps/{encode_path_param(app_id)}/network/custom",
+            f"/v1/apps/{encode_path_param(app_id)}/domains",
             json_body=body,
             query={"workspace_id": workspace_id},
         )
 
-    def remove(self, app_id: str, *, workspace_id: str | None = None) -> None:
-        """DELETE /v1/apps/:id/network/custom — scope `apps:write`."""
+    def update(
+        self, app_id: str, domain_id: str, body: UpdateDomainBody, *, workspace_id: str | None = None
+    ) -> DomainList:
+        """PATCH /v1/apps/:id/domains/:domain_id — scope `apps:write`."""
         return self._c.request_json(
-            "DELETE", f"/v1/apps/{encode_path_param(app_id)}/network/custom", query={"workspace_id": workspace_id}
+            "PATCH",
+            f"/v1/apps/{encode_path_param(app_id)}/domains/{encode_path_param(domain_id)}",
+            json_body=body,
+            query={"workspace_id": workspace_id},
         )
 
+    def remove(self, app_id: str, domain_id: str, *, workspace_id: str | None = None) -> None:
+        """DELETE /v1/apps/:id/domains/:domain_id — scope `apps:write`. Also removes the automatic companion."""
+        return self._c.request_json(
+            "DELETE",
+            f"/v1/apps/{encode_path_param(app_id)}/domains/{encode_path_param(domain_id)}",
+            query={"workspace_id": workspace_id},
+        )
 
-class AppNetworkResource:
-    def __init__(self, client: VertraClient) -> None:
-        self._c = client
-        self.custom_domain = AppCustomDomainResource(client)
+    def dns(self, app_id: str, domain_id: str, *, workspace_id: str | None = None) -> DomainDnsList:
+        """GET /v1/apps/:id/domains/:domain_id/dns — scope `apps:read`."""
+        return self._c.request_json(
+            "GET",
+            f"/v1/apps/{encode_path_param(app_id)}/domains/{encode_path_param(domain_id)}/dns",
+            query={"workspace_id": workspace_id},
+        )
 
-    def dns(self, app_id: str, *, workspace_id: str | None = None) -> list[APIDnsRecord]:
-        """GET /v1/apps/:id/network/dns — scope `apps:read`."""
+    def connect(self, app_id: str, domain_id: str, *, workspace_id: str | None = None) -> APIApplicationDomainConnect:
+        """POST /v1/apps/:id/domains/:domain_id/connect — scope `apps:write`. Raises a 404
+        `DOMAIN_CONNECT_UNAVAILABLE` when the DNS provider does not support it."""
         return self._c.request_json(
-            "GET", f"/v1/apps/{encode_path_param(app_id)}/network/dns", query={"workspace_id": workspace_id}
+            "POST",
+            f"/v1/apps/{encode_path_param(app_id)}/domains/{encode_path_param(domain_id)}/connect",
+            query={"workspace_id": workspace_id},
         )
 
+
+class AppNetworkResource:
+    def __init__(self, client: VertraClient) -> None:
+        self._c = client
+
     def purge_cache(self, app_id: str, body: PurgeCacheBody | None = None, *, workspace_id: str | None = None) -> None:
         """POST /v1/apps/:id/network/purge-cache — scope `apps:write`. An empty `{}` body is valid."""
         return self._c.request_json(
@@ -364,12 +389,13 @@ class AppFilesResource:
 
 class AppsResource:
     """`apps.*` — get/status/statusAll/runtimes/realtime/metrics/logs/download/create/start/
-    stop/restart/updateConfig/delete + `deploys`, `releases`, `network`, `envs`, `files`."""
+    stop/restart/updateConfig/delete + `deploys`, `releases`, `domains`, `network`, `envs`, `files`."""
 
     def __init__(self, client: VertraClient) -> None:
         self._c = client
         self.deploys = AppDeploysResource(client)
         self.releases = AppReleasesResource(client)
+        self.domains = AppDomainsResource(client)
         self.network = AppNetworkResource(client)
         self.envs = AppEnvsResource(client)
         self.files = AppFilesResource(client)
@@ -508,7 +534,7 @@ class AppsResource:
         self, app_id: str, body: RestartAppBody | None = None, *, workspace_id: str | None = None
     ) -> APIApplicationOperationResponse:
         """POST /v1/apps/:id/restart — scope `apps:write`. Flags: `reinstall_dependencies`,
-        `force_build`, `cleanup_old_runtime_language`."""
+        `force_build`."""
         return self._c.request_json(
             "POST",
             f"/v1/apps/{encode_path_param(app_id)}/restart",

{vertracloud_api-0.2.2 → vertracloud_api-0.3.1}/src/vertracloud/transport.py

@@ -9,7 +9,9 @@ import urllib.error
 import urllib.request
 from collections.abc import Iterator
 from dataclasses import dataclass, field
+from email.message import Message
 from typing import Protocol
+from urllib.parse import urlsplit
 
 
 @dataclass
@@ -35,6 +37,39 @@ class Transport(Protocol):
     ) -> Response: ...
 
 
+class _AuthStrippingRedirectHandler(urllib.request.HTTPRedirectHandler):
+    """Follows redirects but never forwards `Authorization` to another origin (scheme, host or port)."""
+
+    def redirect_request(
+        self,
+        req: urllib.request.Request,
+        fp: object,
+        code: int,
+        msg: str,
+        headers: Message | dict[str, str],
+        newurl: str,
+    ) -> urllib.request.Request | None:
+        new = super().redirect_request(req, fp, code, msg, headers, newurl)  # type: ignore[arg-type]
+        if new is not None and _origin(req.full_url) != _origin(new.full_url):
+            for name in [h for h in new.headers if h.lower() == "authorization"]:
+                del new.headers[name]
+            for name in [h for h in new.unredirected_hdrs if h.lower() == "authorization"]:
+                del new.unredirected_hdrs[name]
+        return new
+
+
+def _origin(url: str) -> tuple[str, str, int | None]:
+    parts = urlsplit(url)
+    return (
+        parts.scheme.lower(),
+        (parts.hostname or "").lower(),
+        parts.port or {"http": 80, "https": 443}.get(parts.scheme.lower()),
+    )
+
+
+_opener = urllib.request.build_opener(_AuthStrippingRedirectHandler)
+
+
 @dataclass
 class UrllibTransport:
     """Default implementation, pure stdlib (`urllib`) — zero runtime dependencies."""
@@ -53,7 +88,7 @@ class UrllibTransport:
     ) -> Response:
         req = urllib.request.Request(url, data=body, headers=headers, method=method)
         try:
-            resp = urllib.request.urlopen(req, timeout=timeout)  # noqa: S310 - URL comes from the configured base_url
+            resp = _opener.open(req, timeout=timeout)  # noqa: S310 - URL comes from the configured base_url
         except urllib.error.HTTPError as exc:
             data = exc.read()
             resp_headers = {k.lower(): v for k, v in exc.headers.items()} if exc.headers else {}