chore(api): sync OpenAPI contract

Author: kong[bot]

openapi/openapi.yaml

@@ -92,7 +92,9 @@ def sync_detailed(
     Set `session_mode` to `cookie` to request HttpOnly refresh-token
     storage. Cookie mode is honored only for an exact, credentialed CORS
     origin on the same schemeful site as this API. Otherwise the response
-    retains the refresh token in its body.
+    retains the refresh token in its body. A frontend on its default
+    Volcano URL is cross-site with this API and so always gets the body
+    token.
 
     Args:
         body (AuthSigninBody):
@@ -130,7 +132,9 @@ def sync(
     Set `session_mode` to `cookie` to request HttpOnly refresh-token
     storage. Cookie mode is honored only for an exact, credentialed CORS
     origin on the same schemeful site as this API. Otherwise the response
-    retains the refresh token in its body.
+    retains the refresh token in its body. A frontend on its default
+    Volcano URL is cross-site with this API and so always gets the body
+    token.
 
     Args:
         body (AuthSigninBody):
@@ -163,7 +167,9 @@ async def asyncio_detailed(
     Set `session_mode` to `cookie` to request HttpOnly refresh-token
     storage. Cookie mode is honored only for an exact, credentialed CORS
     origin on the same schemeful site as this API. Otherwise the response
-    retains the refresh token in its body.
+    retains the refresh token in its body. A frontend on its default
+    Volcano URL is cross-site with this API and so always gets the body
+    token.
 
     Args:
         body (AuthSigninBody):
@@ -201,7 +207,9 @@ async def asyncio(
     Set `session_mode` to `cookie` to request HttpOnly refresh-token
     storage. Cookie mode is honored only for an exact, credentialed CORS
     origin on the same schemeful site as this API. Otherwise the response
-    retains the refresh token in its body.
+    retains the refresh token in its body. A frontend on its default
+    Volcano URL is cross-site with this API and so always gets the body
+    token.
 
     Args:
         body (AuthSigninBody):

src/volcano_sdk/_generated/api/authentication/auth_signin.py

@@ -68,6 +68,8 @@ def sync_detailed(
     """ List platform-supported regions for database provisioning
 
      Returns the regions enabled for database provisioning in this platform environment.
+    These are the same regions offered for function deployment, and the only values
+    the `region` field of a database accepts.
     This is a public endpoint that doesn't require authentication.
 
     Raises:
@@ -97,6 +99,8 @@ def sync(
     """ List platform-supported regions for database provisioning
 
      Returns the regions enabled for database provisioning in this platform environment.
+    These are the same regions offered for function deployment, and the only values
+    the `region` field of a database accepts.
     This is a public endpoint that doesn't require authentication.
 
     Raises:
@@ -121,6 +125,8 @@ async def asyncio_detailed(
     """ List platform-supported regions for database provisioning
 
      Returns the regions enabled for database provisioning in this platform environment.
+    These are the same regions offered for function deployment, and the only values
+    the `region` field of a database accepts.
     This is a public endpoint that doesn't require authentication.
 
     Raises:
@@ -150,6 +156,8 @@ async def asyncio(
     """ List platform-supported regions for database provisioning
 
      Returns the regions enabled for database provisioning in this platform environment.
+    These are the same regions offered for function deployment, and the only values
+    the `region` field of a database accepts.
     This is a public endpoint that doesn't require authentication.
 
     Raises:

src/volcano_sdk/_generated/api/databases/list_database_regions.py

@@ -153,7 +153,7 @@ def sync_detailed(
     `package.json` `engines.node`; if omitted, Volcano uses Node.js 22.x.
     The selected Node.js family must also satisfy the installed Next.js package's
     `engines.node` constraint. Volcano tests Next 15.5.25 (`^18.18.0 || ^19.8.0 || >=20.0.0`) and Next
-    16.3.4 (`>=20.9.0`).
+    16.3.5 (`>=20.9.0`).
     Source archive size is enforced by the API with `SOURCE_ARCHIVE_SIZE_LIMIT_MB`; the CLI
     does not apply its own source archive size limit. After the final container images are
     built, the publish build enforces `LAMBDA_TARGET_CONTAINER_SIZE_LIMIT_MB` before pushing.
@@ -217,7 +217,7 @@ def sync(
     `package.json` `engines.node`; if omitted, Volcano uses Node.js 22.x.
     The selected Node.js family must also satisfy the installed Next.js package's
     `engines.node` constraint. Volcano tests Next 15.5.25 (`^18.18.0 || ^19.8.0 || >=20.0.0`) and Next
-    16.3.4 (`>=20.9.0`).
+    16.3.5 (`>=20.9.0`).
     Source archive size is enforced by the API with `SOURCE_ARCHIVE_SIZE_LIMIT_MB`; the CLI
     does not apply its own source archive size limit. After the final container images are
     built, the publish build enforces `LAMBDA_TARGET_CONTAINER_SIZE_LIMIT_MB` before pushing.
@@ -276,7 +276,7 @@ async def asyncio_detailed(
     `package.json` `engines.node`; if omitted, Volcano uses Node.js 22.x.
     The selected Node.js family must also satisfy the installed Next.js package's
     `engines.node` constraint. Volcano tests Next 15.5.25 (`^18.18.0 || ^19.8.0 || >=20.0.0`) and Next
-    16.3.4 (`>=20.9.0`).
+    16.3.5 (`>=20.9.0`).
     Source archive size is enforced by the API with `SOURCE_ARCHIVE_SIZE_LIMIT_MB`; the CLI
     does not apply its own source archive size limit. After the final container images are
     built, the publish build enforces `LAMBDA_TARGET_CONTAINER_SIZE_LIMIT_MB` before pushing.
@@ -340,7 +340,7 @@ async def asyncio(
     `package.json` `engines.node`; if omitted, Volcano uses Node.js 22.x.
     The selected Node.js family must also satisfy the installed Next.js package's
     `engines.node` constraint. Volcano tests Next 15.5.25 (`^18.18.0 || ^19.8.0 || >=20.0.0`) and Next
-    16.3.4 (`>=20.9.0`).
+    16.3.5 (`>=20.9.0`).
     Source archive size is enforced by the API with `SOURCE_ARCHIVE_SIZE_LIMIT_MB`; the CLI
     does not apply its own source archive size limit. After the final container images are
     built, the publish build enforces `LAMBDA_TARGET_CONTAINER_SIZE_LIMIT_MB` before pushing.

src/volcano_sdk/_generated/api/frontends/create_frontend.py

@@ -148,7 +148,8 @@ def sync_detailed(
     - This operation is the authenticated direct RPC endpoint and always uses the
       POST `{payload: ...}` contract, including for functions whose DNS ingress is
       configured in HTTP mode.
-    - The geo-routed DNS ingress is `https://{functionId}.functions.<domain>/`.
+    - The geo-routed DNS ingress is the function's `invoke_url`. It is on a
+      different domain from this API, so it cannot be derived from the API host.
     - RPC-mode DNS ingress accepts POST at `/`. HTTP-mode DNS ingress accepts GET,
       HEAD, POST, PUT, PATCH, and DELETE at `/` and nested paths.
     - Direct and RPC-mode CORS preflight advertises `POST, OPTIONS`. HTTP-mode DNS
@@ -219,7 +220,8 @@ def sync(
     - This operation is the authenticated direct RPC endpoint and always uses the
       POST `{payload: ...}` contract, including for functions whose DNS ingress is
       configured in HTTP mode.
-    - The geo-routed DNS ingress is `https://{functionId}.functions.<domain>/`.
+    - The geo-routed DNS ingress is the function's `invoke_url`. It is on a
+      different domain from this API, so it cannot be derived from the API host.
     - RPC-mode DNS ingress accepts POST at `/`. HTTP-mode DNS ingress accepts GET,
       HEAD, POST, PUT, PATCH, and DELETE at `/` and nested paths.
     - Direct and RPC-mode CORS preflight advertises `POST, OPTIONS`. HTTP-mode DNS
@@ -285,7 +287,8 @@ async def asyncio_detailed(
     - This operation is the authenticated direct RPC endpoint and always uses the
       POST `{payload: ...}` contract, including for functions whose DNS ingress is
       configured in HTTP mode.
-    - The geo-routed DNS ingress is `https://{functionId}.functions.<domain>/`.
+    - The geo-routed DNS ingress is the function's `invoke_url`. It is on a
+      different domain from this API, so it cannot be derived from the API host.
     - RPC-mode DNS ingress accepts POST at `/`. HTTP-mode DNS ingress accepts GET,
       HEAD, POST, PUT, PATCH, and DELETE at `/` and nested paths.
     - Direct and RPC-mode CORS preflight advertises `POST, OPTIONS`. HTTP-mode DNS
@@ -356,7 +359,8 @@ async def asyncio(
     - This operation is the authenticated direct RPC endpoint and always uses the
       POST `{payload: ...}` contract, including for functions whose DNS ingress is
       configured in HTTP mode.
-    - The geo-routed DNS ingress is `https://{functionId}.functions.<domain>/`.
+    - The geo-routed DNS ingress is the function's `invoke_url`. It is on a
+      different domain from this API, so it cannot be derived from the API host.
     - RPC-mode DNS ingress accepts POST at `/`. HTTP-mode DNS ingress accepts GET,
       HEAD, POST, PUT, PATCH, and DELETE at `/` and nested paths.
     - Direct and RPC-mode CORS preflight advertises `POST, OPTIONS`. HTTP-mode DNS

src/volcano_sdk/_generated/api/functions/invoke_function.py

@@ -101,9 +101,13 @@ def sync_detailed(
 ) -> Response[Error | ResolveFunctionResponse]:
     """ Resolve function name for invocation
 
-     Resolves a DNS-safe function name to its function ID within the caller's project.
+     Resolves a DNS-safe function name to its function ID and invocation URL within the caller's project.
 
     SDKs use this endpoint internally to invoke by function name while routing by function ID.
+    Invoke the returned `invoke_url` as-is. It does not share a domain with the API, so a host
+    built from the API URL will not reach the function. When the deployment serves no public
+    invocation domain, as in local development, `invoke_url` is omitted and callers invoke
+    through `POST /functions/{functionId}/invoke`.
 
     **With Service Key**:
     - Allowed
@@ -146,9 +150,13 @@ def sync(
 ) -> Error | ResolveFunctionResponse | None:
     """ Resolve function name for invocation
 
-     Resolves a DNS-safe function name to its function ID within the caller's project.
+     Resolves a DNS-safe function name to its function ID and invocation URL within the caller's project.
 
     SDKs use this endpoint internally to invoke by function name while routing by function ID.
+    Invoke the returned `invoke_url` as-is. It does not share a domain with the API, so a host
+    built from the API URL will not reach the function. When the deployment serves no public
+    invocation domain, as in local development, `invoke_url` is omitted and callers invoke
+    through `POST /functions/{functionId}/invoke`.
 
     **With Service Key**:
     - Allowed
@@ -186,9 +194,13 @@ async def asyncio_detailed(
 ) -> Response[Error | ResolveFunctionResponse]:
     """ Resolve function name for invocation
 
-     Resolves a DNS-safe function name to its function ID within the caller's project.
+     Resolves a DNS-safe function name to its function ID and invocation URL within the caller's project.
 
     SDKs use this endpoint internally to invoke by function name while routing by function ID.
+    Invoke the returned `invoke_url` as-is. It does not share a domain with the API, so a host
+    built from the API URL will not reach the function. When the deployment serves no public
+    invocation domain, as in local development, `invoke_url` is omitted and callers invoke
+    through `POST /functions/{functionId}/invoke`.
 
     **With Service Key**:
     - Allowed
@@ -231,9 +243,13 @@ async def asyncio(
 ) -> Error | ResolveFunctionResponse | None:
     """ Resolve function name for invocation
 
-     Resolves a DNS-safe function name to its function ID within the caller's project.
+     Resolves a DNS-safe function name to its function ID and invocation URL within the caller's project.
 
     SDKs use this endpoint internally to invoke by function name while routing by function ID.
+    Invoke the returned `invoke_url` as-is. It does not share a domain with the API, so a host
+    built from the API URL will not reach the function. When the deployment serves no public
+    invocation domain, as in local development, `invoke_url` is omitted and callers invoke
+    through `POST /functions/{functionId}/invoke`.
 
     **With Service Key**:
     - Allowed

src/volcano_sdk/_generated/api/functions/resolve_function_for_invocation.py

@@ -129,7 +129,9 @@ def sync_detailed(
     An empty provider body is represented as `data: null`; the envelope
     preserves the provider's HTTP status in `status_code`, including errors.
     Provider response bodies are limited to 8 MiB after decompression.
-    Transport failures, invalid JSON, and oversized bodies return `502`.
+    Transport failures, invalid JSON (including invalid UTF-8), and oversized
+    bodies return `502`. Provider redirects to another origin are blocked and
+    return `400`.
 
     Args:
         provider (CallOAuthProviderAPIProvider):
@@ -183,7 +185,9 @@ def sync(
     An empty provider body is represented as `data: null`; the envelope
     preserves the provider's HTTP status in `status_code`, including errors.
     Provider response bodies are limited to 8 MiB after decompression.
-    Transport failures, invalid JSON, and oversized bodies return `502`.
+    Transport failures, invalid JSON (including invalid UTF-8), and oversized
+    bodies return `502`. Provider redirects to another origin are blocked and
+    return `400`.
 
     Args:
         provider (CallOAuthProviderAPIProvider):
@@ -232,7 +236,9 @@ async def asyncio_detailed(
     An empty provider body is represented as `data: null`; the envelope
     preserves the provider's HTTP status in `status_code`, including errors.
     Provider response bodies are limited to 8 MiB after decompression.
-    Transport failures, invalid JSON, and oversized bodies return `502`.
+    Transport failures, invalid JSON (including invalid UTF-8), and oversized
+    bodies return `502`. Provider redirects to another origin are blocked and
+    return `400`.
 
     Args:
         provider (CallOAuthProviderAPIProvider):
@@ -286,7 +292,9 @@ async def asyncio(
     An empty provider body is represented as `data: null`; the envelope
     preserves the provider's HTTP status in `status_code`, including errors.
     Provider response bodies are limited to 8 MiB after decompression.
-    Transport failures, invalid JSON, and oversized bodies return `502`.
+    Transport failures, invalid JSON (including invalid UTF-8), and oversized
+    bodies return `502`. Provider redirects to another origin are blocked and
+    return `400`.
 
     Args:
         provider (CallOAuthProviderAPIProvider):

src/volcano_sdk/_generated/api/o_auth_authentication/call_o_auth_provider_api.py

@@ -96,6 +96,13 @@ def _parse_response(*, client: AuthenticatedClient | Client, response: httpx.Res
 
         return response_422
 
+    if response.status_code == 503:
+        response_503 = Error.from_dict(response.json())
+
+
+
+        return response_503
+
     if client.raise_on_unexpected_status:
         raise errors.UnexpectedStatus(response.status_code, response.content)
     else:

src/volcano_sdk/_generated/api/projects/apply_project_config.py

@@ -73,6 +73,13 @@ def _parse_response(*, client: AuthenticatedClient | Client, response: httpx.Res
 
         return response_404
 
+    if response.status_code == 413:
+        response_413 = Error.from_dict(response.json())
+
+
+
+        return response_413
+
     if client.raise_on_unexpected_status:
         raise errors.UnexpectedStatus(response.status_code, response.content)
     else:
@@ -102,8 +109,9 @@ def sync_detailed(
     volcano-config.yaml rendering with `Accept: application/yaml` or
     `?format=yaml`; the YAML is returned verbatim as the raw response body
     (`Content-Type: application/yaml`) and is meant to be saved as-is.
-    Write-only secrets (SMTP password, OAuth client secrets, TLS material)
-    are omitted from the export; the YAML rendering adds a header comment
+    Variable values and write-only secrets (SMTP password, OAuth client secrets, TLS material)
+    are omitted from the export; shared_variables contains names only; the YAML rendering adds a header
+    comment
     describing how to set them via CLI environment interpolation.
 
     Args:
@@ -145,8 +153,9 @@ def sync(
     volcano-config.yaml rendering with `Accept: application/yaml` or
     `?format=yaml`; the YAML is returned verbatim as the raw response body
     (`Content-Type: application/yaml`) and is meant to be saved as-is.
-    Write-only secrets (SMTP password, OAuth client secrets, TLS material)
-    are omitted from the export; the YAML rendering adds a header comment
+    Variable values and write-only secrets (SMTP password, OAuth client secrets, TLS material)
+    are omitted from the export; shared_variables contains names only; the YAML rendering adds a header
+    comment
     describing how to set them via CLI environment interpolation.
 
     Args:
@@ -183,8 +192,9 @@ async def asyncio_detailed(
     volcano-config.yaml rendering with `Accept: application/yaml` or
     `?format=yaml`; the YAML is returned verbatim as the raw response body
     (`Content-Type: application/yaml`) and is meant to be saved as-is.
-    Write-only secrets (SMTP password, OAuth client secrets, TLS material)
-    are omitted from the export; the YAML rendering adds a header comment
+    Variable values and write-only secrets (SMTP password, OAuth client secrets, TLS material)
+    are omitted from the export; shared_variables contains names only; the YAML rendering adds a header
+    comment
     describing how to set them via CLI environment interpolation.
 
     Args:
@@ -226,8 +236,9 @@ async def asyncio(
     volcano-config.yaml rendering with `Accept: application/yaml` or
     `?format=yaml`; the YAML is returned verbatim as the raw response body
     (`Content-Type: application/yaml`) and is meant to be saved as-is.
-    Write-only secrets (SMTP password, OAuth client secrets, TLS material)
-    are omitted from the export; the YAML rendering adds a header comment
+    Variable values and write-only secrets (SMTP password, OAuth client secrets, TLS material)
+    are omitted from the export; shared_variables contains names only; the YAML rendering adds a header
+    comment
     describing how to set them via CLI environment interpolation.
 
     Args: