Cloudsmith SDK

Cloudsmith API (v1) client, generated from the OpenAPI spec.

The API to the Cloudsmith Service

Learn more about Cloudsmith API (v1) at cloudsmith.io.

This is an unofficial SDK for the Cloudsmith API (v1) public API, generated by Voxgig with @voxgig/sdkgen. It is not affiliated with, endorsed by, or sponsored by the upstream API provider.

Learn more about Voxgig SDKs at voxgig.com/sdk.

TypeScript, Python, Golang, Ruby SDKs, and an interactive REPL — all generated from one OpenAPI spec by @voxgig/sdkgen.

Entities, not endpoints

This SDK exposes the API as a small set of semantic entities — Abort, Alpine, AuditLog, Basic, Cargo, Cocoapod, Complete, Composer, Conan, Conda, Copy, Cran, Dart, Deb, DenyPolicy, Dependency, Disable, DistributionFull, Distro, Docker, DynamicMapping, Ecdsa, Enable, Entitlement, Evaluation, File, Format, Geoip, Gon, Gon2, Gon3, Gon4, Gon5, Gon6, Gon7, Gon8, Gon9, Gpg, Group, Helm, Hex, History, Huggingface, Info, Invite, LicensePolicy, Limit, Luarock, Maven, Member, Move, Namespace, NamespaceAuditLog, Npm, Nuget, OpenidConnect, Org, OrganizationGroupSync, OrganizationGroupSyncStatus, OrganizationInvite, OrganizationInviteExtend, OrganizationMembership, OrganizationMembershipRoleUpdate, OrganizationMembershipVisibilityUpdate, OrganizationPackageLicensePolicy, OrganizationPackageVulnerabilityPolicy, OrganizationSamlAuth, OrganizationTeam, OrganizationTeamMember, Oss, P2n, P2n2, Package, PackageDenyPolicy, PackageFilePartsUpload, PackageFileUpload, PackageLicensePolicyEvaluation, PackageVersionBadge, PackageVulnerabilityPolicyEvaluation, Privilege, Profile, ProviderSetting, ProviderSettingsWrite, Python, Quarantine, Quota, Raw, Refresh, Regenerate, Repo, RepositoryAuditLog, RepositoryEcdsaKey, RepositoryGeoIpRule, RepositoryGeoIpStatus, RepositoryGeoIpTestAddress, RepositoryGpgKey, RepositoryPrivilegeInput, RepositoryRetentionRule, RepositoryRsaKey, RepositoryToken, RepositoryTokenRefresh, RepositoryTokenSync, RepositoryWebhook, RepositoryX509EcdsaCertificate, RepositoryX509RsaCertificate, Reset, ResourcesRateCheck, Resync, Retention, Rpm, Rsa, Ruby, SamlGroupSync, Scan, Self, Service, Status, StatusBasic, StorageRegion, Swift, Sync, Tag, Team, Terraform, Test, Token, TransferRegion, User, UserAuthToken, UserAuthenticationToken, UserBrief, UserProfile, Vagrant, Validate, Version, Vulnerability, VulnerabilityPolicy, Webhook, X509Ecdsa and X509Rsa — that you call directly, instead of assembling URL paths and query strings. Entities are Capitalised to mark them as the primary surface, each with the operations they support (list, load, create, update, remove, patch):

const client = new CloudsmithSDK()

Thinking in entities keeps the mental model small — for people and AI agents alike — rather than reasoning about raw HTTP routes and query parameters.

Offline unit testing

Every SDK ships a built-in test mode that swaps the HTTP transport for an in-memory mock, so your unit tests run fully offline — no server, no network, and no credentials:

TypeScript

const client = CloudsmithSDK.test()
const cargos = await client.Cargo().list()
// cargos is an array of bare Cargo records populated with mock data
console.log(cargos)

Python

client = CloudsmithSDK.test()
cargos = client.Cargo().list()
print(cargos)

Golang

client := sdk.Test()
result, err := client.Cargo(nil).List(
    nil, nil,
)

Ruby

# Seed fixture data so offline calls resolve without a live server.
client = CloudsmithSDK.test({
  "entity" => { "cargo" => { "test01" => { "id" => "test01" } } },
})
cargos = client.Cargo.list()

Packages

Quickstart

TypeScript

import { CloudsmithSDK } from '@voxgig-sdk/cloudsmith'

const client = new CloudsmithSDK({
  apikey: process.env.CLOUDSMITH_APIKEY,
})


// Load a specific cargo (returns a Cargo)
const cargo = await client.Cargo().load({
  identifier: 'example_identifier',
  owner: 'example_owner',
  id: 'example_id',
})
console.log(cargo)

See the TypeScript README for the full guide.

Surfaces

Entities

The API exposes 140 entities:

The operations available across these entities are load, list, create, update, remove — see each entity’s own list above for exactly which it supports.

Quickstart in other languages

Python

import os
from cloudsmith_sdk import CloudsmithSDK

client = CloudsmithSDK({
    "apikey": os.environ.get("CLOUDSMITH_APIKEY"),
})

Golang

import sdk "github.com/voxgig-sdk/cloudsmith-sdk/go"

client := sdk.NewCloudsmithSDK(map[string]any{
    "apikey": os.Getenv("CLOUDSMITH_APIKEY"),
})


// Load a specific cargo
cargo, err := client.Cargo(nil).Load(
    map[string]any{"identifier": "example_identifier", "owner": "example_owner", "id": "example_id"}, nil,
)
if err != nil {
    panic(err)
}
fmt.Println(cargo)

Ruby

require_relative "Cloudsmith_sdk"

client = CloudsmithSDK.new({
  "apikey" => ENV["CLOUDSMITH_APIKEY"],
})

Direct and prepare

For endpoints the entity model doesn’t cover, use the low-level methods:

• direct(fetchargs) — build and send an HTTP request in one step.
• prepare(fetchargs) — build the request without sending it.

Both accept a map with path, method, params, query, headers, and body. See the How-to guides below.

How-to guides

Make a direct API call

When the entity interface does not cover an endpoint, use direct:

TypeScript:

const result = await client.direct({
  path: '/api/resource/{id}',
  method: 'GET',
  params: { id: 'example' },
})
if (result instanceof Error) {
  throw result
}
console.log(result.data)

Python:

result = client.direct({
    "path": "/api/resource/{id}",
    "method": "GET",
    "params": {"id": "example"},
})

Go:

result, err := client.Direct(map[string]any{
    "path":   "/api/resource/{id}",
    "method": "GET",
    "params": map[string]any{"id": "example"},
})
if err != nil {
    panic(err)
}
fmt.Println(result)

Ruby:

result = client.direct({
  "path" => "/api/resource/{id}",
  "method" => "GET",
  "params" => { "id" => "example" },
})

Advanced

Everyday use only needs the sections above. This explains the internals behind every call — relevant when writing custom features.

Every SDK call runs the same five-stage pipeline:

1. Point — resolve the API endpoint from the operation definition.
2. Spec — build the HTTP specification (URL, method, headers, body).
3. Request — send the HTTP request.
4. Response — receive and parse the response.
5. Result — extract the result data for the caller.

A feature hook fires at each stage (e.g. PrePoint, PreSpec, PreRequest), so features can inspect or modify the pipeline without forking the SDK.

Features

Pass custom features via the extend option at construction time.

Per-language documentation

• TypeScript
• Python
• Golang
• Ruby

Upstream API

This SDK is generated from the upstream OpenAPI specification. It is an unofficial client and is not affiliated with the API provider.

• Upstream API: https://help.cloudsmith.io

Security

Please report security issues to security@voxgig.com. See SECURITY.md. Do not open public issues for suspected vulnerabilities.

Generated from the Cloudsmith API (v1) OpenAPI spec by @voxgig/sdkgen.