npm - @alienplatform/core - Versions diffs - 1.3.5 → 1.4.1 - Mend

@alienplatform/core 1.3.5 → 1.4.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (479) hide show

package/src/generated/schemas/permissionProfile.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"type":"object","description":"Permission profile that maps resources to permission sets\nKey can be \"*\" for all resources or resource name for specific resource","additionalProperties":{"type":"array","items":{"oneOf":[{"type":"string","description":"Reference to a built-in permission set by name (e.g., \"storage/data-read\")"},{"description":"Inline permission set definition","type":"object","required":["id","description","platforms"],"properties":{"description":{"type":"string","description":"Human-readable description of what this permission set allows"},"id":{"type":"string","description":"Unique identifier for the permission set (e.g., \"storage/data-read\")"},"platforms":{"description":"Platform-specific permission configurations","type":"object","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions ~~(only~~ ~~for~~ GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions ~~(only~~ ~~for~~ GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions ~~(only~~ ~~for~~ GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}},"additionalProperties":false,"x-readme-ref-name":"PermissionSet"}],"description":"Reference to a permission set - either by name or inline definition","x-readme-ref-name":"PermissionSetReference"}},"propertyNames":{"type":"string"},"x-readme-ref-name":"PermissionProfile"}
1	+ {"type":"object","description":"Permission profile that maps resources to permission sets\nKey can be \"*\" for all resources or resource name for specific resource","additionalProperties":{"type":"array","items":{"oneOf":[{"type":"string","description":"Reference to a built-in permission set by name (e.g., \"storage/data-read\")"},{"description":"Inline permission set definition","type":"object","required":["id","description","platforms"],"properties":{"description":{"type":"string","description":"Human-readable description of what this permission set allows"},"id":{"type":"string","description":"Unique identifier for the permission set (e.g., \"storage/data-read\")"},"platforms":{"description":"Platform-specific permission configurations","type":"object","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"effect":{"description":"IAM effect. Defaults to Allow.","type":"string","enum":["Allow","Deny"],"x-readme-ref-name":"AwsPermissionEffect"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}},"additionalProperties":false,"x-readme-ref-name":"PermissionSet"}],"description":"Reference to a permission set - either by name or inline definition","x-readme-ref-name":"PermissionSetReference"}},"propertyNames":{"type":"string"},"x-readme-ref-name":"PermissionProfile"}

package/src/generated/schemas/permissionSet.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"type":"object","description":"A permission set that can be applied across different cloud platforms","required":["id","description","platforms"],"properties":{"description":{"type":"string","description":"Human-readable description of what this permission set allows"},"id":{"type":"string","description":"Unique identifier for the permission set (e.g., \"storage/data-read\")"},"platforms":{"description":"Platform-specific permission configurations","type":"object","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions ~~(only~~ ~~for~~ GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions ~~(only~~ ~~for~~ GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions ~~(only~~ ~~for~~ GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}},"additionalProperties":false,"x-readme-ref-name":"PermissionSet"}
1	+ {"type":"object","description":"A permission set that can be applied across different cloud platforms","required":["id","description","platforms"],"properties":{"description":{"type":"string","description":"Human-readable description of what this permission set allows"},"id":{"type":"string","description":"Unique identifier for the permission set (e.g., \"storage/data-read\")"},"platforms":{"description":"Platform-specific permission configurations","type":"object","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"effect":{"description":"IAM effect. Defaults to Allow.","type":"string","enum":["Allow","Deny"],"x-readme-ref-name":"AwsPermissionEffect"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}},"additionalProperties":false,"x-readme-ref-name":"PermissionSet"}

package/src/generated/schemas/permissionSetReference.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"oneOf":[{"type":"string","description":"Reference to a built-in permission set by name (e.g., \"storage/data-read\")"},{"description":"Inline permission set definition","type":"object","required":["id","description","platforms"],"properties":{"description":{"type":"string","description":"Human-readable description of what this permission set allows"},"id":{"type":"string","description":"Unique identifier for the permission set (e.g., \"storage/data-read\")"},"platforms":{"description":"Platform-specific permission configurations","type":"object","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions ~~(only~~ ~~for~~ GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions ~~(only~~ ~~for~~ GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions ~~(only~~ ~~for~~ GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}},"additionalProperties":false,"x-readme-ref-name":"PermissionSet"}],"description":"Reference to a permission set - either by name or inline definition","x-readme-ref-name":"PermissionSetReference"}
1	+ {"oneOf":[{"type":"string","description":"Reference to a built-in permission set by name (e.g., \"storage/data-read\")"},{"description":"Inline permission set definition","type":"object","required":["id","description","platforms"],"properties":{"description":{"type":"string","description":"Human-readable description of what this permission set allows"},"id":{"type":"string","description":"Unique identifier for the permission set (e.g., \"storage/data-read\")"},"platforms":{"description":"Platform-specific permission configurations","type":"object","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"effect":{"description":"IAM effect. Defaults to Allow.","type":"string","enum":["Allow","Deny"],"x-readme-ref-name":"AwsPermissionEffect"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}},"additionalProperties":false,"x-readme-ref-name":"PermissionSet"}],"description":"Reference to a permission set - either by name or inline definition","x-readme-ref-name":"PermissionSetReference"}

package/src/generated/schemas/permissionsConfig.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"type":"object","description":"Combined permissions configuration that contains both profiles and management","required":["profiles"],"properties":{"management":{"description":"Management permissions configuration for stack management access","oneOf":[{"type":"string","description":"Auto-derived permissions only (default)\nUses resource lifecycles to determine management permissions:\n- Frozen resources: `<type>/management`\n- Live resources: `<type>/provision`","enum":["auto"]},{"type":"object","description":"Add permissions to auto-derived baseline","required":["extend"],"properties":{"extend":{"description":"Add permissions to auto-derived baseline","type":"object","additionalProperties":{"type":"array","items":{"oneOf":[{"type":"string","description":"Reference to a built-in permission set by name (e.g., \"storage/data-read\")"},{"description":"Inline permission set definition","type":"object","required":["id","description","platforms"],"properties":{"description":{"type":"string","description":"Human-readable description of what this permission set allows"},"id":{"type":"string","description":"Unique identifier for the permission set (e.g., \"storage/data-read\")"},"platforms":{"description":"Platform-specific permission configurations","type":"object","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions (only for GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions (only for GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions (only for GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}},"additionalProperties":false,"x-readme-ref-name":"PermissionSet"}],"description":"Reference to a permission set - either by name or inline definition","x-readme-ref-name":"PermissionSetReference"}},"propertyNames":{"type":"string"},"x-readme-ref-name":"PermissionProfile"}}},{"type":"object","description":"Replace auto-derived permissions entirely","required":["override"],"properties":{"override":{"description":"Replace auto-derived permissions entirely","type":"object","additionalProperties":{"type":"array","items":{"oneOf":[{"type":"string","description":"Reference to a built-in permission set by name (e.g., \"storage/data-read\")"},{"description":"Inline permission set definition","type":"object","required":["id","description","platforms"],"properties":{"description":{"type":"string","description":"Human-readable description of what this permission set allows"},"id":{"type":"string","description":"Unique identifier for the permission set (e.g., \"storage/data-read\")"},"platforms":{"description":"Platform-specific permission configurations","type":"object","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions (only for GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions (only for GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions (only for GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}},"additionalProperties":false,"x-readme-ref-name":"PermissionSet"}],"description":"Reference to a permission set - either by name or inline definition","x-readme-ref-name":"PermissionSetReference"}},"propertyNames":{"type":"string"},"x-readme-ref-name":"PermissionProfile"}}}],"x-readme-ref-name":"ManagementPermissions"},"profiles":{"type":"object","description":"Permission profiles that define access control for compute services\nKey is the profile name, value is the permission configuration","additionalProperties":{"type":"object","description":"Permission profile that maps resources to permission sets\nKey can be \"*\" for all resources or resource name for specific resource","additionalProperties":{"type":"array","items":{"oneOf":[{"type":"string","description":"Reference to a built-in permission set by name (e.g., \"storage/data-read\")"},{"description":"Inline permission set definition","type":"object","required":["id","description","platforms"],"properties":{"description":{"type":"string","description":"Human-readable description of what this permission set allows"},"id":{"type":"string","description":"Unique identifier for the permission set (e.g., \"storage/data-read\")"},"platforms":{"description":"Platform-specific permission configurations","type":"object","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions (only for GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions (only for GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions (only for GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}},"additionalProperties":false,"x-readme-ref-name":"PermissionSet"}],"description":"Reference to a permission set - either by name or inline definition","x-readme-ref-name":"PermissionSetReference"}},"propertyNames":{"type":"string"},"x-readme-ref-name":"PermissionProfile"},"propertyNames":{"type":"string"}}},"additionalProperties":false,"x-readme-ref-name":"PermissionsConfig"}
1	+ {"type":"object","description":"Combined permissions configuration that contains both profiles and management","required":["profiles"],"properties":{"management":{"description":"Management permissions configuration for stack management access","oneOf":[{"type":"string","description":"Auto-derived permissions only (default)\nUses resource lifecycles to determine management permissions:\n- Frozen resources: `<type>/management`\n- Live resources: `<type>/provision`","enum":["auto"]},{"type":"object","description":"Add permissions to auto-derived baseline","required":["extend"],"properties":{"extend":{"description":"Add permissions to auto-derived baseline","type":"object","additionalProperties":{"type":"array","items":{"oneOf":[{"type":"string","description":"Reference to a built-in permission set by name (e.g., \"storage/data-read\")"},{"description":"Inline permission set definition","type":"object","required":["id","description","platforms"],"properties":{"description":{"type":"string","description":"Human-readable description of what this permission set allows"},"id":{"type":"string","description":"Unique identifier for the permission set (e.g., \"storage/data-read\")"},"platforms":{"description":"Platform-specific permission configurations","type":"object","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"effect":{"description":"IAM effect. Defaults to Allow.","type":"string","enum":["Allow","Deny"],"x-readme-ref-name":"AwsPermissionEffect"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}},"additionalProperties":false,"x-readme-ref-name":"PermissionSet"}],"description":"Reference to a permission set - either by name or inline definition","x-readme-ref-name":"PermissionSetReference"}},"propertyNames":{"type":"string"},"x-readme-ref-name":"PermissionProfile"}}},{"type":"object","description":"Replace auto-derived permissions entirely","required":["override"],"properties":{"override":{"description":"Replace auto-derived permissions entirely","type":"object","additionalProperties":{"type":"array","items":{"oneOf":[{"type":"string","description":"Reference to a built-in permission set by name (e.g., \"storage/data-read\")"},{"description":"Inline permission set definition","type":"object","required":["id","description","platforms"],"properties":{"description":{"type":"string","description":"Human-readable description of what this permission set allows"},"id":{"type":"string","description":"Unique identifier for the permission set (e.g., \"storage/data-read\")"},"platforms":{"description":"Platform-specific permission configurations","type":"object","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"effect":{"description":"IAM effect. Defaults to Allow.","type":"string","enum":["Allow","Deny"],"x-readme-ref-name":"AwsPermissionEffect"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}},"additionalProperties":false,"x-readme-ref-name":"PermissionSet"}],"description":"Reference to a permission set - either by name or inline definition","x-readme-ref-name":"PermissionSetReference"}},"propertyNames":{"type":"string"},"x-readme-ref-name":"PermissionProfile"}}}],"x-readme-ref-name":"ManagementPermissions"},"profiles":{"type":"object","description":"Permission profiles that define access control for compute services\nKey is the profile name, value is the permission configuration","additionalProperties":{"type":"object","description":"Permission profile that maps resources to permission sets\nKey can be \"*\" for all resources or resource name for specific resource","additionalProperties":{"type":"array","items":{"oneOf":[{"type":"string","description":"Reference to a built-in permission set by name (e.g., \"storage/data-read\")"},{"description":"Inline permission set definition","type":"object","required":["id","description","platforms"],"properties":{"description":{"type":"string","description":"Human-readable description of what this permission set allows"},"id":{"type":"string","description":"Unique identifier for the permission set (e.g., \"storage/data-read\")"},"platforms":{"description":"Platform-specific permission configurations","type":"object","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"effect":{"description":"IAM effect. Defaults to Allow.","type":"string","enum":["Allow","Deny"],"x-readme-ref-name":"AwsPermissionEffect"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}},"additionalProperties":false,"x-readme-ref-name":"PermissionSet"}],"description":"Reference to a permission set - either by name or inline definition","x-readme-ref-name":"PermissionSetReference"}},"propertyNames":{"type":"string"},"x-readme-ref-name":"PermissionProfile"},"propertyNames":{"type":"string"}}},"additionalProperties":false,"x-readme-ref-name":"PermissionsConfig"}

package/src/generated/schemas/persistentStorage.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"type":"object","description":"Persistent storage configuration for stateful containers.","required":["size","mountPath"],"properties":{"~~iops":{"type":["integer","null"],"format":"int32","description":"IOPS (for storage types that support it)","minimum":0},"~~mountPath":{"type":"string","description":"Mount path inside the container"},"size":{"type":"string","description":"Storage size (e.g., \"100Gi\", \"500Gi\")"}~~,"storageType":{"type":["string","null"],"description":"Storage type (e.g., \"gp3\", \"io2\" for AWS, \"pd-ssd\" for GCP)"~~},"~~throughput":{"type":["integer","null"],"format":"int32","description":"Throughput in MiB/s (for storage types that support it)","minimum":0}},"~~x-readme-ref-name":"PersistentStorage"}
1	+ {"type":"object","description":"Persistent storage configuration for stateful containers.","required":["size","mountPath"],"properties":{"mountPath":{"type":"string","description":"Mount path inside the container"},"size":{"type":"string","description":"Storage size (e.g., \"100Gi\", \"500Gi\")"}},"x-readme-ref-name":"PersistentStorage"}

package/src/generated/schemas/platformPermissions.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"type":"object","description":"Platform-specific permission configurations","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions ~~(only~~ ~~for~~ GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions ~~(only~~ ~~for~~ GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions ~~(only~~ ~~for~~ GCP)"}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}
1	+ {"type":"object","description":"Platform-specific permission configurations","properties":{"aws":{"type":["array","null"],"items":{"type":"object","description":"AWS-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false},"stack":{"type":"object","description":"AWS-specific binding specification","required":["resources"],"properties":{"condition":{"type":["object","null"],"description":"Optional condition for additional filtering (rare)","additionalProperties":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"propertyNames":{"type":"string"}},"resources":{"type":"array","items":{"type":"string"},"description":"Resource ARNs to bind to"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AwsBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"effect":{"description":"IAM effect. Defaults to Allow.","type":"string","enum":["Allow","Deny"],"x-readme-ref-name":"AwsPermissionEffect"},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AwsPlatformPermission"},"description":"AWS permission configurations"},"azure":{"type":["array","null"],"items":{"type":"object","description":"Azure-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"Azure-specific binding specification","required":["scope"],"properties":{"scope":{"type":"string","description":"Scope (subscription/resource group/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_AzureBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"AzurePlatformPermission"},"description":"Azure permission configurations"},"gcp":{"type":["array","null"],"items":{"type":"object","description":"GCP-specific platform permission configuration","required":["grant","binding"],"properties":{"binding":{"description":"How to bind the permissions (stack vs resource scope)","type":"object","properties":{"resource":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false},"stack":{"type":"object","description":"GCP-specific binding specification","required":["scope"],"properties":{"condition":{"oneOf":[{"type":"null"},{"description":"Optional condition for filtering resources","type":"object","required":["title","expression"],"properties":{"expression":{"type":"string"},"title":{"type":"string"}},"additionalProperties":false,"x-readme-ref-name":"GcpCondition"}]},"scope":{"type":"string","description":"Scope (project/resource level)"}},"additionalProperties":false}},"additionalProperties":false,"x-readme-ref-name":"BindingConfiguration_GcpBindingSpec"},"description":{"type":["string","null"],"description":"Short admin-facing description of why this entry exists."},"grant":{"description":"What permissions to grant","type":"object","properties":{"actions":{"type":["array","null"],"items":{"type":"string"},"description":"AWS IAM actions (only for AWS)"},"dataActions":{"type":["array","null"],"items":{"type":"string"},"description":"Azure actions (only for Azure)"},"permissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP permissions that require an exact residual custom role."},"predefinedRoles":{"type":["array","null"],"items":{"type":"string"},"description":"Provider predefined roles to bind directly."},"residualPermissions":{"type":["array","null"],"items":{"type":"string"},"description":"GCP residual custom permissions to pair with predefined roles."}},"additionalProperties":false,"x-readme-ref-name":"PermissionGrant"},"label":{"type":["string","null"],"description":"Stable admin-facing label for this permission entry."}},"additionalProperties":false,"x-readme-ref-name":"GcpPlatformPermission"},"description":"GCP permission configurations"}},"additionalProperties":false,"x-readme-ref-name":"PlatformPermissions"}

package/src/generated/schemas/providerFleetStatus.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"type":"object","required":["groupId","providerId","currentMachines","desiredMachines"],"properties":{"currentMachines":{"type":"integer","format":"int32","minimum":0},"desiredMachines":{"type":"integer","format":"int32","minimum":0},"groupId":{"type":"string"},"location":{"type":["string","null"]},"providerId":{"type":"string"}},"x-readme-ref-name":"ProviderFleetStatus"}

package/src/generated/schemas/providerLifecycleState.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"type":"string","enum":["unknown","creating","updating","running","scaling","stopping","stopped","deleting","deleted","failed"],"x-readme-ref-name":"ProviderLifecycleState"}

package/src/generated/schemas/queueHeartbeatData.json ADDED Viewed

@@ -0,0 +1 @@

+ {"oneOf":[{"allOf":[{"type":"object","required":["status","name","approximateCounts"],"properties":{"approximateCounts":{"type":"boolean"},"approximateDelayedMessages":{"type":["integer","null"],"format":"int64","minimum":0},"approximateInFlightMessages":{"type":["integer","null"],"format":"int64","minimum":0},"approximateVisibleMessages":{"type":["integer","null"],"format":"int64","minimum":0},"contentBasedDeduplication":{"type":["boolean","null"]},"deduplicationScope":{"type":["string","null"]},"delaySeconds":{"type":["integer","null"],"format":"int32","minimum":0},"fifoQueue":{"type":["boolean","null"]},"fifoThroughputLimit":{"type":["string","null"]},"kmsDataKeyReusePeriodSeconds":{"type":["integer","null"],"format":"int32","minimum":0},"kmsMasterKeyId":{"type":["string","null"]},"maximumMessageSize":{"type":["integer","null"],"format":"int32","minimum":0},"messageRetentionPeriodSeconds":{"type":["integer","null"],"format":"int32","minimum":0},"name":{"type":"string"},"queueArn":{"type":["string","null"]},"queueUrl":{"type":["string","null"]},"receiveMessageWaitTimeSeconds":{"type":["integer","null"],"format":"int32","minimum":0},"redriveAllowPolicy":{"type":["string","null"]},"redrivePolicy":{"type":["string","null"]},"region":{"type":["string","null"]},"sqsManagedSseEnabled":{"type":["boolean","null"]},"sseEnabled":{"type":["boolean","null"]},"status":{"type":"object","required":["health","lifecycle","stale","partial","collectionIssues"],"properties":{"collectionIssues":{"type":"array","items":{"type":"object","required":["source","reason","severity","message"],"properties":{"message":{"type":"string"},"reason":{"type":"string","enum":["forbidden","not-installed","api-unavailable","collection-failed","timed-out"],"x-readme-ref-name":"HeartbeatCollectionIssueReason"},"severity":{"type":"string","enum":["info","warning","error"],"x-readme-ref-name":"HeartbeatIssueSeverity"},"source":{"type":"string"}},"x-readme-ref-name":"HeartbeatCollectionIssue"}},"health":{"type":"string","enum":["unknown","healthy","degraded","unhealthy"],"x-readme-ref-name":"ObservedHealth"},"lifecycle":{"type":"string","enum":["unknown","creating","updating","running","scaling","stopping","stopped","deleting","deleted","failed"],"x-readme-ref-name":"ProviderLifecycleState"},"message":{"type":["string","null"]},"partial":{"type":"boolean"},"stale":{"type":"boolean"}},"x-readme-ref-name":"QueueHeartbeatStatus"},"visibilityTimeoutSeconds":{"type":["integer","null"],"format":"int32","minimum":0}},"x-readme-ref-name":"AwsSqsQueueHeartbeatData"},{"type":"object","required":["backend"],"properties":{"backend":{"type":"string","enum":["awsSqs"]}}}]},{"allOf":[{"type":"object","required":["status","topicName","topicLabels","subscriptionLabels","messageStorageAllowedPersistenceRegions","subscriptionPushAttributes"],"properties":{"endpoint":{"type":["string","null"]},"kmsKeyName":{"type":["string","null"]},"messageStorageAllowedPersistenceRegions":{"type":"array","items":{"type":"string"}},"messageStorageEnforceInTransit":{"type":["boolean","null"]},"projectId":{"type":["string","null"]},"schemaEncoding":{"type":["string","null"]},"schemaFirstRevisionId":{"type":["string","null"]},"schemaLastRevisionId":{"type":["string","null"]},"schemaName":{"type":["string","null"]},"status":{"type":"object","required":["health","lifecycle","stale","partial","collectionIssues"],"properties":{"collectionIssues":{"type":"array","items":{"type":"object","required":["source","reason","severity","message"],"properties":{"message":{"type":"string"},"reason":{"type":"string","enum":["forbidden","not-installed","api-unavailable","collection-failed","timed-out"],"x-readme-ref-name":"HeartbeatCollectionIssueReason"},"severity":{"type":"string","enum":["info","warning","error"],"x-readme-ref-name":"HeartbeatIssueSeverity"},"source":{"type":"string"}},"x-readme-ref-name":"HeartbeatCollectionIssue"}},"health":{"type":"string","enum":["unknown","healthy","degraded","unhealthy"],"x-readme-ref-name":"ObservedHealth"},"lifecycle":{"type":"string","enum":["unknown","creating","updating","running","scaling","stopping","stopped","deleting","deleted","failed"],"x-readme-ref-name":"ProviderLifecycleState"},"message":{"type":["string","null"]},"partial":{"type":"boolean"},"stale":{"type":"boolean"}},"x-readme-ref-name":"QueueHeartbeatStatus"},"subscriptionAckDeadlineSeconds":{"type":["integer","null"],"format":"int32","minimum":0},"subscriptionDeadLetterMaxDeliveryAttempts":{"type":["integer","null"],"format":"int32","minimum":0},"subscriptionDeadLetterTopic":{"type":["string","null"]},"subscriptionDetached":{"type":["boolean","null"]},"subscriptionEnableMessageOrdering":{"type":["boolean","null"]},"subscriptionFilter":{"type":["string","null"]},"subscriptionFullName":{"type":["string","null"]},"subscriptionLabels":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"subscriptionMessageRetentionDuration":{"type":["string","null"]},"subscriptionName":{"type":["string","null"]},"subscriptionPushAttributes":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"subscriptionPushConfigPresent":{"type":["boolean","null"]},"subscriptionPushEndpoint":{"type":["string","null"]},"subscriptionPushNoWrapperWriteMetadata":{"type":["boolean","null"]},"subscriptionPushOidcAudience":{"type":["string","null"]},"subscriptionPushOidcServiceAccountEmail":{"type":["string","null"]},"subscriptionPushPubsubWrapperWriteMetadata":{"type":["boolean","null"]},"subscriptionRetainAckedMessages":{"type":["boolean","null"]},"subscriptionState":{"type":["string","null"]},"topicFullName":{"type":["string","null"]},"topicLabels":{"type":"object","additionalProperties":{"type":"string"},"propertyNames":{"type":"string"}},"topicMessageRetentionDuration":{"type":["string","null"]},"topicName":{"type":"string"},"topicState":{"type":["string","null"]}},"x-readme-ref-name":"GcpPubSubQueueHeartbeatData"},{"type":"object","required":["backend"],"properties":{"backend":{"type":"string","enum":["gcpPubSub"]}}}]},{"allOf":[{"type":"object","required":["status","name","namespaceName"],"properties":{"accessedAt":{"type":["string","null"]},"activeMessageCount":{"type":["integer","null"],"format":"int64","minimum":0},"autoDeleteOnIdle":{"type":["string","null"]},"createdAt":{"type":["string","null"]},"deadLetterMessageCount":{"type":["integer","null"],"format":"int64","minimum":0},"deadLetteringOnMessageExpiration":{"type":["boolean","null"]},"defaultMessageTimeToLive":{"type":["string","null"]},"duplicateDetectionHistoryTimeWindow":{"type":["string","null"]},"enableBatchedOperations":{"type":["boolean","null"]},"enableExpress":{"type":["boolean","null"]},"enablePartitioning":{"type":["boolean","null"]},"endpoint":{"type":["string","null"]},"forwardDeadLetteredMessagesTo":{"type":["string","null"]},"forwardTo":{"type":["string","null"]},"lockDuration":{"type":["string","null"]},"maxDeliveryCount":{"type":["integer","null"],"format":"int32","minimum":0},"maxMessageSizeInKilobytes":{"type":["integer","null"],"format":"int64","minimum":0},"maxSizeInMegabytes":{"type":["integer","null"],"format":"int32","minimum":0},"messageCount":{"type":["integer","null"],"format":"int64","minimum":0},"name":{"type":"string"},"namespaceName":{"type":"string"},"queueStatus":{"type":["string","null"]},"requiresDuplicateDetection":{"type":["boolean","null"]},"requiresSession":{"type":["boolean","null"]},"resourceGroup":{"type":["string","null"]},"resourceId":{"type":["string","null"]},"scheduledMessageCount":{"type":["integer","null"],"format":"int64","minimum":0},"sizeInBytes":{"type":["integer","null"],"format":"int64","minimum":0},"status":{"type":"object","required":["health","lifecycle","stale","partial","collectionIssues"],"properties":{"collectionIssues":{"type":"array","items":{"type":"object","required":["source","reason","severity","message"],"properties":{"message":{"type":"string"},"reason":{"type":"string","enum":["forbidden","not-installed","api-unavailable","collection-failed","timed-out"],"x-readme-ref-name":"HeartbeatCollectionIssueReason"},"severity":{"type":"string","enum":["info","warning","error"],"x-readme-ref-name":"HeartbeatIssueSeverity"},"source":{"type":"string"}},"x-readme-ref-name":"HeartbeatCollectionIssue"}},"health":{"type":"string","enum":["unknown","healthy","degraded","unhealthy"],"x-readme-ref-name":"ObservedHealth"},"lifecycle":{"type":"string","enum":["unknown","creating","updating","running","scaling","stopping","stopped","deleting","deleted","failed"],"x-readme-ref-name":"ProviderLifecycleState"},"message":{"type":["string","null"]},"partial":{"type":"boolean"},"stale":{"type":"boolean"}},"x-readme-ref-name":"QueueHeartbeatStatus"},"transferDeadLetterMessageCount":{"type":["integer","null"],"format":"int64","minimum":0},"transferMessageCount":{"type":["integer","null"],"format":"int64","minimum":0},"updatedAt":{"type":["string","null"]}},"x-readme-ref-name":"AzureServiceBusQueueHeartbeatData"},{"type":"object","required":["backend"],"properties":{"backend":{"type":"string","enum":["azureServiceBus"]}}}]},{"allOf":[{"type":"object","required":["status","name"],"properties":{"name":{"type":"string"},"path":{"type":["string","null"]},"serviceStatus":{"type":["string","null"]},"status":{"type":"object","required":["health","lifecycle","stale","partial","collectionIssues"],"properties":{"collectionIssues":{"type":"array","items":{"type":"object","required":["source","reason","severity","message"],"properties":{"message":{"type":"string"},"reason":{"type":"string","enum":["forbidden","not-installed","api-unavailable","collection-failed","timed-out"],"x-readme-ref-name":"HeartbeatCollectionIssueReason"},"severity":{"type":"string","enum":["info","warning","error"],"x-readme-ref-name":"HeartbeatIssueSeverity"},"source":{"type":"string"}},"x-readme-ref-name":"HeartbeatCollectionIssue"}},"health":{"type":"string","enum":["unknown","healthy","degraded","unhealthy"],"x-readme-ref-name":"ObservedHealth"},"lifecycle":{"type":"string","enum":["unknown","creating","updating","running","scaling","stopping","stopped","deleting","deleted","failed"],"x-readme-ref-name":"ProviderLifecycleState"},"message":{"type":["string","null"]},"partial":{"type":"boolean"},"stale":{"type":"boolean"}},"x-readme-ref-name":"QueueHeartbeatStatus"}},"x-readme-ref-name":"LocalQueueHeartbeatData"},{"type":"object","required":["backend"],"properties":{"backend":{"type":"string","enum":["local"]}}}]}],"x-readme-ref-name":"QueueHeartbeatData"}

package/src/generated/schemas/queueHeartbeatStatus.json ADDED Viewed

@@ -0,0 +1 @@

+ {"type":"object","required":["health","lifecycle","stale","partial","collectionIssues"],"properties":{"collectionIssues":{"type":"array","items":{"type":"object","required":["source","reason","severity","message"],"properties":{"message":{"type":"string"},"reason":{"type":"string","enum":["forbidden","not-installed","api-unavailable","collection-failed","timed-out"],"x-readme-ref-name":"HeartbeatCollectionIssueReason"},"severity":{"type":"string","enum":["info","warning","error"],"x-readme-ref-name":"HeartbeatIssueSeverity"},"source":{"type":"string"}},"x-readme-ref-name":"HeartbeatCollectionIssue"}},"health":{"type":"string","enum":["unknown","healthy","degraded","unhealthy"],"x-readme-ref-name":"ObservedHealth"},"lifecycle":{"type":"string","enum":["unknown","creating","updating","running","scaling","stopping","stopped","deleting","deleted","failed"],"x-readme-ref-name":"ProviderLifecycleState"},"message":{"type":["string","null"]},"partial":{"type":"boolean"},"stale":{"type":"boolean"}},"x-readme-ref-name":"QueueHeartbeatStatus"}

package/src/generated/schemas/rawHeartbeatSnippet.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"type":"object","required":["source","format","collectedAt","body","truncated"],"properties":{"body":{"type":"string"},"collectedAt":{"type":"string","format":"date-time"},"format":{"type":"string","enum":["json","yaml","text"],"x-readme-ref-name":"RawHeartbeatSnippetFormat"},"source":{"type":"string"},"truncated":{"type":"boolean"}},"x-readme-ref-name":"RawHeartbeatSnippet"}

package/src/generated/schemas/rawHeartbeatSnippetFormat.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"type":"string","enum":["json","yaml","text"],"x-readme-ref-name":"RawHeartbeatSnippetFormat"}

package/src/generated/schemas/readinessProbe.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"type":"object","description":"Configuration for HTTP-based readiness probe.\nThis probe is executed after ~~function~~ provisioning/update to verify the ~~function~~ is ready to serve traffic.\nOnly works with ~~functions~~ that have Public ingress.","properties":{"method":{"description":"HTTP method to use for the probe request.\nDefault: GET","type":"string","enum":["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],"x-readme-ref-name":"HttpMethod"},"path":{"type":"string","description":"Path to request for the probe (e.g., \"/health\", \"/ready\").\nDefault: \"/\""}},"x-readme-ref-name":"ReadinessProbe"}
1	+ {"type":"object","description":"Configuration for HTTP-based readiness probe.\nThis probe is executed after worker provisioning/update to verify the worker is ready to serve traffic.\nOnly works with workers that have Public ingress.","properties":{"method":{"description":"HTTP method to use for the probe request.\nDefault: GET","type":"string","enum":["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],"x-readme-ref-name":"HttpMethod"},"path":{"type":"string","description":"Path to request for the probe (e.g., \"/health\", \"/ready\").\nDefault: \"/\""}},"x-readme-ref-name":"ReadinessProbe"}

package/src/generated/schemas/remoteStackManagementHeartbeatData.json ADDED Viewed

@@ -0,0 +1 @@

+ {"oneOf":[{"allOf":[{"type":"object","required":["status","managementPermissionsApplied"],"properties":{"managementPermissionsApplied":{"type":"boolean"},"roleArn":{"type":["string","null"]},"roleName":{"type":["string","null"]},"status":{"type":"object","required":["health","lifecycle","stale","partial","collectionIssues"],"properties":{"collectionIssues":{"type":"array","items":{"type":"object","required":["source","reason","severity","message"],"properties":{"message":{"type":"string"},"reason":{"type":"string","enum":["forbidden","not-installed","api-unavailable","collection-failed","timed-out"],"x-readme-ref-name":"HeartbeatCollectionIssueReason"},"severity":{"type":"string","enum":["info","warning","error"],"x-readme-ref-name":"HeartbeatIssueSeverity"},"source":{"type":"string"}},"x-readme-ref-name":"HeartbeatCollectionIssue"}},"health":{"type":"string","enum":["unknown","healthy","degraded","unhealthy"],"x-readme-ref-name":"ObservedHealth"},"lifecycle":{"type":"string","enum":["unknown","creating","updating","running","scaling","stopping","stopped","deleting","deleted","failed"],"x-readme-ref-name":"ProviderLifecycleState"},"message":{"type":["string","null"]},"partial":{"type":"boolean"},"stale":{"type":"boolean"}},"x-readme-ref-name":"RemoteStackManagementHeartbeatStatus"}},"x-readme-ref-name":"AwsRemoteStackManagementHeartbeatData"},{"type":"object","required":["backend"],"properties":{"backend":{"type":"string","enum":["awsIamRole"]}}}]},{"allOf":[{"type":"object","required":["status","roleBound","impersonationGranted"],"properties":{"impersonationGranted":{"type":"boolean"},"roleBound":{"type":"boolean"},"serviceAccountEmail":{"type":["string","null"]},"serviceAccountUniqueId":{"type":["string","null"]},"status":{"type":"object","required":["health","lifecycle","stale","partial","collectionIssues"],"properties":{"collectionIssues":{"type":"array","items":{"type":"object","required":["source","reason","severity","message"],"properties":{"message":{"type":"string"},"reason":{"type":"string","enum":["forbidden","not-installed","api-unavailable","collection-failed","timed-out"],"x-readme-ref-name":"HeartbeatCollectionIssueReason"},"severity":{"type":"string","enum":["info","warning","error"],"x-readme-ref-name":"HeartbeatIssueSeverity"},"source":{"type":"string"}},"x-readme-ref-name":"HeartbeatCollectionIssue"}},"health":{"type":"string","enum":["unknown","healthy","degraded","unhealthy"],"x-readme-ref-name":"ObservedHealth"},"lifecycle":{"type":"string","enum":["unknown","creating","updating","running","scaling","stopping","stopped","deleting","deleted","failed"],"x-readme-ref-name":"ProviderLifecycleState"},"message":{"type":["string","null"]},"partial":{"type":"boolean"},"stale":{"type":"boolean"}},"x-readme-ref-name":"RemoteStackManagementHeartbeatStatus"}},"x-readme-ref-name":"GcpRemoteStackManagementHeartbeatData"},{"type":"object","required":["backend"],"properties":{"backend":{"type":"string","enum":["gcpServiceAccount"]}}}]},{"allOf":[{"type":"object","required":["status","roleAssignmentIds"],"properties":{"ficName":{"type":["string","null"]},"roleAssignmentIds":{"type":"array","items":{"type":"string"}},"roleDefinitionId":{"type":["string","null"]},"status":{"type":"object","required":["health","lifecycle","stale","partial","collectionIssues"],"properties":{"collectionIssues":{"type":"array","items":{"type":"object","required":["source","reason","severity","message"],"properties":{"message":{"type":"string"},"reason":{"type":"string","enum":["forbidden","not-installed","api-unavailable","collection-failed","timed-out"],"x-readme-ref-name":"HeartbeatCollectionIssueReason"},"severity":{"type":"string","enum":["info","warning","error"],"x-readme-ref-name":"HeartbeatIssueSeverity"},"source":{"type":"string"}},"x-readme-ref-name":"HeartbeatCollectionIssue"}},"health":{"type":"string","enum":["unknown","healthy","degraded","unhealthy"],"x-readme-ref-name":"ObservedHealth"},"lifecycle":{"type":"string","enum":["unknown","creating","updating","running","scaling","stopping","stopped","deleting","deleted","failed"],"x-readme-ref-name":"ProviderLifecycleState"},"message":{"type":["string","null"]},"partial":{"type":"boolean"},"stale":{"type":"boolean"}},"x-readme-ref-name":"RemoteStackManagementHeartbeatStatus"},"tenantId":{"type":["string","null"]},"uamiClientId":{"type":["string","null"]},"uamiPrincipalId":{"type":["string","null"]},"uamiResourceId":{"type":["string","null"]}},"x-readme-ref-name":"AzureRemoteStackManagementHeartbeatData"},{"type":"object","required":["backend"],"properties":{"backend":{"type":"string","enum":["azureManagedIdentity"]}}}]}],"x-readme-ref-name":"RemoteStackManagementHeartbeatData"}

package/src/generated/schemas/remoteStackManagementHeartbeatStatus.json ADDED Viewed

@@ -0,0 +1 @@

package/src/generated/schemas/resourceEntry.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"type":"object","required":["config","lifecycle","dependencies"],"properties":{"config":{"description":"Resource configuration (can be any type of resource)","type":"object","required":["type","id"],"properties":{"id":{"type":"string","description":"The unique identifier for this specific resource instance. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]). Maximum 64 characters."},"type":{"type":"string","description":"Resource type identifier that determines the specific kind of resource. This field is used for polymorphic deserialization and resource-specific behavior.","examples":["~~function~~","storage","queue","redis","postgres"],"x-readme-ref-name":"ResourceType"}},"additionalProperties":true,"x-readme-ref-name":"BaseResource"},"dependencies":{"type":"array","items":{"type":"object","description":"New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility.","required":["type","id"],"properties":{"id":{"type":"string"},"type":{"type":"string","description":"Resource type identifier that determines the specific kind of resource. This field is used for polymorphic deserialization and resource-specific behavior.","examples":["~~function~~","storage","queue","redis","postgres"],"x-readme-ref-name":"ResourceType"}},"x-readme-ref-name":"ResourceRef"},"description":"Additional dependencies for this resource beyond those defined in the resource itself.\nThe total dependencies are: resource.get_dependencies() + this list"},"lifecycle":{"description":"Lifecycle management configuration for this resource","type":"string","enum":["frozen","live"],"x-readme-ref-name":"ResourceLifecycle"},"remoteAccess":{"type":"boolean","description":"Enable remote bindings for this resource (BYOB use case).\nWhen true, binding params are synced to StackState's `remote_binding_params`.\nDefault: false (prevents sensitive data in synced state)."}},"~~additionalProperties":false,"~~x-readme-ref-name":"ResourceEntry"}
1	+ {"type":"object","required":["config","lifecycle","dependencies"],"properties":{"config":{"description":"Resource configuration (can be any type of resource)","type":"object","required":["type","id"],"properties":{"id":{"type":"string","description":"The unique identifier for this specific resource instance. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]). Maximum 64 characters."},"type":{"type":"string","description":"Resource type identifier that determines the specific kind of resource. This field is used for polymorphic deserialization and resource-specific behavior.","examples":["worker","storage","queue","redis","postgres"],"x-readme-ref-name":"ResourceType"}},"additionalProperties":true,"x-readme-ref-name":"BaseResource"},"dependencies":{"type":"array","items":{"type":"object","description":"New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility.","required":["type","id"],"properties":{"id":{"type":"string"},"type":{"type":"string","description":"Resource type identifier that determines the specific kind of resource. This field is used for polymorphic deserialization and resource-specific behavior.","examples":["worker","storage","queue","redis","postgres"],"x-readme-ref-name":"ResourceType"}},"x-readme-ref-name":"ResourceRef"},"description":"Additional dependencies for this resource beyond those defined in the resource itself.\nThe total dependencies are: resource.get_dependencies() + this list"},"lifecycle":{"description":"Lifecycle management configuration for this resource","type":"string","enum":["frozen","live"],"x-readme-ref-name":"ResourceLifecycle"},"remoteAccess":{"type":"boolean","description":"Enable remote bindings for this resource (BYOB use case).\nWhen true, binding params are synced to StackState's `remote_binding_params`.\nDefault: false (prevents sensitive data in synced state)."}},"x-readme-ref-name":"ResourceEntry"}