Every resource method that accepts a body now validates it through
the Pydantic model before sending. Raw dicts are rejected in
_serialize_body to prevent bypassing validation. Dicts can still
be used by passing them through validate_request() first.

Made-with: Cursor

Made-with: Cursor

- Replace all Any return/param types in _http.py with concrete types (END-1078)
- Remove dead unwrap_single function
- Add 31 descriptive enum aliases in types.py (END-1079)
- Re-export all enum aliases from __init__.py for stable public API

Made-with: Cursor

Resolves END-1162.

Resource method signatures previously accepted only the typed Pydantic
model (e.g. CreateMonitorRequest), but the runtime ``validate_request``
helper coerces dicts via ``model_validate`` and the README/client
docstrings show dict-style usage. Under ``mypy --strict`` those examples
were type errors.

Introduce ``RequestBody[T] = T | Mapping[str, Any]`` in ``_validation``
and apply it to every mutating resource method body parameter so dict
literals type-check while typed model instances remain a first-class
option. Re-export ``RequestBody`` and the previously omitted
``AddIncidentUpdateRequest`` from the package root and ``types`` module.

Add ``tests/test_spec_parity.py`` to lock the SDK against logical drift
from ``docs/openapi/monitoring-api.json``:

* every public DTO must exist in the spec (catches removals/renames),
* every request DTO's required fields must be a superset of the spec's,
* every mutating method body annotation must include ``Mapping[str, Any]``
  (catches future regressions to the dict ergonomics fix), and
* every top-level path the SDK calls must exist in the spec.

All 681 tests pass; ``mypy --strict src/`` is clean; manual smoke check
confirms dict-style ``client.monitors.create({...})`` now type-checks.

Made-with: Cursor

- END-1082 Remove dead unwrap_single helper and stop generating the
  unused CursorPage model (the API now returns concrete cursor pages
  per resource so the generic was unreachable). Regenerate _generated.py
  from the refreshed vendored spec.
- _http.py / _pagination.py: tighten typing — explicit dict[str, Any]
  annotations, drop the implicit Any return paths flagged by mypy.
- Mirror the SDK-JS spec-paths test in tests/test_spec_parity.py with
  a (method, path) check for every resource the SDK calls. Same fix
  applied: incidents.delete() (non-existent endpoint) is removed; the
  rest of the table now lines up with the OpenAPI spec.
- Refresh test_negative_validation.py / test_schemas.py to reflect the
  optional/nullable fields the API actually emits (ResolveIncidentRequest,
  CreateNotificationPolicyRequest, etc.) so previously stale assertions
  pass again. Add tests/test_typing.py for shared helpers.
- Refresh docs/openapi/monitoring-api.json to match the new mini spec
  (incl. /api/v1/alert-channels/{id} GET endpoint).

ruff format --check, ruff check, mypy --strict (src + tests), pytest
(681 tests) all green.

Made-with: Cursor

Updates docs/openapi/monitoring-api.json after the upstream API change
that reverted the explicit oneOf annotation on MonitorConfig — the
property-level inlined oneOf preserves subtype validation in the
generated models.

Made-with: Cursor

…details

Picks up the upstream @devhelm/openapi-tools update that inlines
discriminator subtypes and rewrites parents as oneOf+discriminator. The
generated Pydantic models now use:

  type: Literal["bearer"]   (and "basic", "header", "api_key")
  check_type: Literal["http"]   (and "tcp", "icmp", "dns", "mcp_server")

with `Annotated[Union[...], Field(discriminator="type")]` on the parent
union (MonitorAuthConfig and CheckTypeDetailsDto). Pydantic's
discriminator-aware union resolution now picks the right subtype in O(1)
on validation, vs the previous "try every member, keep the first that
parses" fallback that misclassified shape-equivalent subtypes (e.g.
BearerAuthConfig vs BasicAuthConfig — both `{vault_secret_id}` only).

Spec refresh also propagates the regular field-level fixes from the
upstream typing audit. ruff, mypy strict, and pytest (681 tests) pass.

Made-with: Cursor

Surface the typed request model so downstream surfaces (MCP server, tests)
can import it from `devhelm.types` directly instead of reaching into
`devhelm._generated`.

Made-with: Cursor

Regenerate the Pydantic models against the updated OpenAPI spec. The
mono-side preprocessor now inlines nullable references to deduction-
based polymorphic parents, so `UpdateMonitorRequest.config` resolves
to a proper `DnsMonitorConfig | HttpMonitorConfig | ... | None` union
instead of a vacuous reference to the empty `MonitorConfig` base.

No source changes; generated code only.

Made-with: Cursor