[0xcadams]

What

Give Python backend applications the same scoped deployment and publisher management operations as TypeScript, with generated Pydantic inputs/results and native signing. Complete approved Kubernetes provider hints in registered-key service selection.

Why

Python callers need original-key recovery, explicit ETags, typed HTTP problems, and independent project selection without another authentication or HTTP engine. Stock Hey API Python 0.0.24 emits grouped HTTP methods without path/body/header arguments; shipping or patching those methods would create an unusable public API. Native already has the generated operations and error boundary.

Changes

• Generate only the canonical nine-operation models, expose them through tnl.models, and bind async management methods to the existing native Go client. Return SavedDeployment(data, etag) and retain HTTP problem status without retrying stale writes.
• Keep actual response ETags and original JSON for strict generated-model validation, and join native calls through repeated cancellation while retaining racing failures.
• Flatten publisher enrollment/status schemas using references to their existing property authorities, preserving fields and eliminating generated Any aliases. Regenerate Go/TS/Python output.
• Isolate generator dependencies with TypeScript 6 in a private tooling workspace; application checks remain on TypeScript 7. Format Python output with locked Ruff and keep style-only exceptions generated-only.
• Carry approved Kubernetes acquisition hints through transactional run selection and into registered-key connector metadata.
• Add generated input/round-trip, request intent, ETag, pagination, publisher operation, HTTP error, strict response, cancellation, and wheel-import assertions.

task py:check passed formatting, Ruff, strict mypy, and all 244 routine tests. Full generation and the whole control-client routine package passed. Selected API/connector/CLI tests passed before the last control-client-only edits. Packaging, real Python/control traffic, full Go/JS repetition, and complete stack CI remain for the requested backwards qualification pass. Publication authorization, deployment URL ownership, and app-led publishing remain unfinished.

[0xcadams]

Superseded by #728, which includes generated Python management models and native signing alongside the project-bound deployment clients. Keeping this branch intact for reference.