@alienplatform/core 3.3.14 → 3.3.16

package/dist/index.js

@@ -1614,6 +1614,42 @@ const AwsLambdaWorkerHeartbeatDataSchema = z$2.object({
 */
 const AwsManagementConfigSchema = z$2.object({ "managingRoleArn": z$2.string().describe("The managing AWS IAM role ARN that can assume cross-account roles") }).describe("AWS management configuration extracted from stack settings");
 //#endregion
+//#region src/generated/zod/sandbox-heartbeat-status-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+const SandboxHeartbeatStatusSchema = z$2.object({
+	get "collectionIssues"() {
+		return z$2.array(HeartbeatCollectionIssueSchema);
+	},
+	get "health"() {
+		return ObservedHealthSchema;
+	},
+	get "lifecycle"() {
+		return ProviderLifecycleStateSchema;
+	},
+	"message": z$2.string().nullish(),
+	"partial": z$2.boolean(),
+	"stale": z$2.boolean()
+});
+//#endregion
+//#region src/generated/zod/aws-microvm-sandbox-heartbeat-data-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description AWS: the image a sandbox runs from, and the lifecycle state AWS reports for it.
+*/
+const AwsMicrovmSandboxHeartbeatDataSchema = z$2.object({
+	"imageIdentifier": z$2.string().describe("Image the sessions belong to."),
+	"imageState": z$2.string().describe("The image's own lifecycle state, which is where AWS surfaces base-image deprecation.\n\nNo session count sits beside it: counting means `lambda:ListMicrovms`, which authorizes\nagainst no resource type and so cannot be granted without an account-wide reach the\npermission sets refuse. A field only an over-broad grant could fill is a field whose\nimplementer ships AccessDenied into a customer's account.").nullish(),
+	get "status"() {
+		return SandboxHeartbeatStatusSchema;
+	}
+}).describe("AWS: the image a sandbox runs from, and the lifecycle state AWS reports for it.");
+//#endregion
 //#region src/generated/zod/aws-network-import-data-schema.ts
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -1936,6 +1972,14 @@ const AwsS3StorageHeartbeatDataSchema = z$2.object({
 	"versioningEnabled": z$2.boolean().nullish(),
 	"versioningStatus": z$2.string().nullish()
 });
+z$2.object({
+	"allowEgress": z$2.optional(z$2.boolean().describe("Whether the declaration asked for open egress.\n\nThe controller builds the binding from this, and an empty connector list cannot be read\nwithout it: a stripped `deny` import would otherwise look exactly like an open sandbox.")),
+	"egressConnectorArns": z$2.optional(z$2.array(z$2.string()).describe("Egress network connectors. Deleting one while MicroVMs still reference it breaks their\nnetworking, so teardown needs them named rather than rediscovered.")),
+	"imageArn": z$2.string().describe("MicroVM image ARN."),
+	"imageIdentifier": z$2.string().describe("MicroVM image identifier."),
+	"imageVersion": z$2.string().describe("Image version the sessions are scoped to. Re-imported on every image roll."),
+	"previewPorts": z$2.optional(z$2.array(z$2.int().min(0)).describe("Ports a preview capability may be minted for; empty means preview is not offered."))
+}).describe("AWS Sandbox ImportData.\n\nCarries the Frozen parent from the setup emitter to the runtime controller. The image\n**version** is not decoration: `RunMicrovm` has no `tags`, so image plus version is the only\nsession identity there is, and a controller holding a stale version would enumerate the wrong\nset and orphan every session started on the previous one.");
 //#endregion
 //#region src/generated/zod/aws-service-account-import-data-schema.ts
 /**
@@ -2697,6 +2741,27 @@ const AzureResourceProviderActivationHeartbeatDataSchema = z$2.object({
 	}
 });
 //#endregion
+//#region src/generated/zod/azure-sandbox-group-heartbeat-data-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Azure: the sandbox group\'s ARM state. The data plane has no list operation, so a session count\nis not available here.
+*/
+const AzureSandboxGroupHeartbeatDataSchema = z$2.object({
+	"provisioningState": z$2.string().nullish(),
+	"sandboxGroup": z$2.string(),
+	get "status"() {
+		return SandboxHeartbeatStatusSchema;
+	}
+}).describe("Azure: the sandbox group's ARM state. The data plane has no list operation, so a session count\nis not available here.");
+z$2.object({
+	"region": z$2.string().describe("Region the group lives in; selects the ADC endpoint."),
+	"resourceGroup": z$2.string().describe("Resource group containing the sandbox group."),
+	"sandboxGroup": z$2.string().describe("Sandbox group name.")
+}).describe("Azure Sandbox ImportData.\n\nCarries the sandbox group from the setup emitter to the runtime controller. All three fields\nare required to address it: the ADC data plane endpoint is **per-region**, so a group without\nits region cannot be reached at all, and the data plane path is scoped by resource group.");
+//#endregion
 //#region src/generated/zod/azure-service-account-import-data-schema.ts
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -5195,6 +5260,10 @@ const GcpRemoteStackManagementImportDataSchema = z$2.object({
 	"serviceAccountEmail": z$2.string().describe("Service account email the manager impersonates."),
 	"serviceAccountUniqueId": z$2.string().describe("Stable unique id Google assigns to the service account.")
 }).describe("GCP RemoteStackManagement ImportData — cross-project service account\nthe manager impersonates.");
+z$2.object({
+	"allowEgress": z$2.boolean().describe("Whether sessions may reach the network. Taken from the declaration rather than left to the\napplication: the launcher decides egress per sandbox at create time."),
+	"launcherPath": z$2.string().describe("Path to the sandbox CLI Cloud Run injects when the container sets `sandboxLauncher`.")
+}).describe("GCP Sandbox ImportData.\n\nA Cloud Run sandbox has no durable parent: it is a nested gVisor sandbox started by a launcher\nbinary Cloud Run injects into the container, so there is no group, image or endpoint for setup\nto hand over. What the runtime needs is the launcher's path, and it is carried here rather than\nhardcoded in the provider so a change to where Cloud Run mounts it is a data change.");
 //#endregion
 //#region src/generated/zod/gcp-secret-manager-vault-heartbeat-data-schema.ts
 /**
@@ -5775,6 +5844,23 @@ const KubernetesExposureSettingsSchema = z$2.union([
 	})
 ]).describe("Kubernetes public HTTPS exposure mode.");
 //#endregion
+//#region src/generated/zod/kubernetes-sandbox-heartbeat-data-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Kubernetes: pods carrying the sandbox label, in the deployment\'s namespace.
+*/
+const KubernetesSandboxHeartbeatDataSchema = z$2.object({
+	"activeSessions": z$2.int().min(0),
+	"idlePods": z$2.int().min(0).describe("Claimed but unused pods waiting in the pool."),
+	"namespace": z$2.string(),
+	get "status"() {
+		return SandboxHeartbeatStatusSchema;
+	}
+}).describe("Kubernetes: pods carrying the sandbox label, in the deployment's namespace.");
+//#endregion
 //#region src/generated/zod/kubernetes-secret-vault-heartbeat-data-schema.ts
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -5983,6 +6069,22 @@ const LocalQueueHeartbeatDataSchema = z$2.object({
 	}
 });
 //#endregion
+//#region src/generated/zod/local-sandbox-heartbeat-data-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Local: containers Docker still holds for this sandbox.
+*/
+const LocalSandboxHeartbeatDataSchema = z$2.object({
+	"activeSessions": z$2.int().min(0),
+	"routeServing": z$2.boolean().describe("Whether the loopback route is serving in this process. False after a manager restart until\nthe next tick rebinds it."),
+	get "status"() {
+		return SandboxHeartbeatStatusSchema;
+	}
+}).describe("Local: containers Docker still holds for this sandbox.");
+//#endregion
 //#region src/generated/zod/local-service-account-heartbeat-data-schema.ts
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -6508,6 +6610,21 @@ const ResourceEntrySchema = z$2.object({
 	"remoteAccess": z$2.optional(z$2.boolean().describe("Enable remote bindings for this resource (BYOB use case).\nWhen true, binding params are synced to StackState's `remote_binding_params`.\nDefault: false (prevents sensitive data in synced state)."))
 });
 //#endregion
+//#region src/generated/zod/sandbox-heartbeat-data-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Content-free telemetry about a sandbox\'s sessions.\n\nNever anything from inside a session. A controller reaches only the cloud\'s management APIs,\nand the whole point of the resource is that the control plane cannot see what runs in it.
+*/
+const SandboxHeartbeatDataSchema = z$2.union([
+	z$2.lazy(() => AwsMicrovmSandboxHeartbeatDataSchema).and(z$2.object({ "backend": z$2.enum(["awsMicrovm"]) })).describe("AWS: the image a sandbox runs from, and the lifecycle state AWS reports for it."),
+	z$2.lazy(() => AzureSandboxGroupHeartbeatDataSchema).and(z$2.object({ "backend": z$2.enum(["azureSandboxGroup"]) })).describe("Azure: the sandbox group's ARM state. The data plane has no list operation, so a session count\nis not available here."),
+	z$2.lazy(() => KubernetesSandboxHeartbeatDataSchema).and(z$2.object({ "backend": z$2.enum(["kubernetesPods"]) })).describe("Kubernetes: pods carrying the sandbox label, in the deployment's namespace."),
+	z$2.lazy(() => LocalSandboxHeartbeatDataSchema).and(z$2.object({ "backend": z$2.enum(["local"]) })).describe("Local: containers Docker still holds for this sandbox.")
+]).describe("Content-free telemetry about a sandbox's sessions.\n\nNever anything from inside a session. A controller reaches only the cloud's management APIs,\nand the whole point of the resource is that the control plane cannot see what runs in it.");
+//#endregion
 //#region src/generated/zod/service-account-heartbeat-data-schema.ts
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -6702,6 +6819,12 @@ const ResourceHeartbeatDataSchema = z$2.union([
 			return KeyHeartbeatDataSchema;
 		},
 		"resourceType": z$2.enum(["key"])
+	}),
+	z$2.object({
+		get "data"() {
+			return SandboxHeartbeatDataSchema.describe("Content-free telemetry about a sandbox's sessions.\n\nNever anything from inside a session. A controller reaches only the cloud's management APIs,\nand the whole point of the resource is that the control plane cannot see what runs in it.");
+		},
+		"resourceType": z$2.enum(["sandbox"])
 	})
 ]);
 //#endregion
@@ -6730,6 +6853,126 @@ const ResourceHeartbeatSchema = z$2.object({
 		return ResourceTypeSchema.describe("Resource type identifier that determines the specific kind of resource. This field is used for polymorphic deserialization and resource-specific behavior.");
 	}
 });
+z$2.object({
+	"domainEgressRules": z$2.boolean().describe("Egress can be restricted to a hostname allowlist"),
+	"egressDeny": z$2.boolean().describe("Whether a declared `deny` is actually enforced, rather than accepted and dropped"),
+	"enforcedLimits": z$2.boolean().describe("The platform enforces the declared cpu, memory and disk ceilings"),
+	"files": z$2.boolean().describe("Files can be moved in and out of a session\n\nEvery backend but Azure, whose data plane exposes exec and lifecycle and no transfer."),
+	"preview": z$2.boolean().describe("An authenticated, port-scoped capability to reach a service inside the sandbox"),
+	"processLimit": z$2.boolean().describe("The platform can cap how many processes a session runs"),
+	"reconnect": z$2.boolean().describe("A later call can reach a session created by an earlier one"),
+	"sessionLifetime": z$2.boolean().describe("The platform terminates a session at a declared wall-clock deadline"),
+	"snapshot": z$2.boolean().describe("A session's full state can be captured and used to create another"),
+	"supervisorPidNamespace": z$2.boolean().describe("A command runs in its own PID namespace and cannot see or signal the agent's processes.\n\nOnly where an agent runs as root. Creating the namespace needs `CAP_SYS_ADMIN`, and the\nKubernetes sandbox pod drops every capability — which is also what denies `ptrace` by\nconstruction, so granting it there would remove a lock to add one."),
+	"suspendResume": z$2.boolean().describe("Session state can be suspended and resumed")
+}).describe("What a platform's sandbox backend can actually do.\n\nPublished so portable code can branch before calling rather than discovering a gap through\nan error. Every field here corresponds to a capability that at least one platform lacks;\ncreate, exec and terminate are the guaranteed floor and are therefore not listed.");
+z$2.enum([
+	"files",
+	"reconnect",
+	"preview",
+	"suspendResume",
+	"snapshot",
+	"domainEgressRules",
+	"egressDeny",
+	"enforcedLimits",
+	"processLimit",
+	"sessionLifetime",
+	"supervisorPidNamespace"
+]).describe("Names a single sandbox capability, so an unsupported call can report which one it needed.");
+//#endregion
+//#region src/generated/zod/sandbox-code-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Specifies where the sandbox\'s root filesystem comes from.
+*/
+const SandboxCodeSchema = z$2.union([z$2.object({
+	"image": z$2.string().describe("Image reference (e.g. `ubuntu:24.04`, `ghcr.io/myorg/sandbox:latest`)"),
+	"type": z$2.enum(["image"])
+}), z$2.object({
+	"src": z$2.string().describe("The source directory to build from"),
+	get "toolchain"() {
+		return ToolchainConfigSchema.describe("Configuration for different programming language toolchains.\nEach toolchain provides type-safe build configuration and auto-detection capabilities.");
+	},
+	"type": z$2.enum(["source"])
+})]).describe("Specifies where the sandbox's root filesystem comes from.");
+//#endregion
+//#region src/generated/zod/sandbox-egress-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Outbound network policy for a sandbox.
+*/
+const SandboxEgressSchema = z$2.union([
+	z$2.object({ "mode": z$2.enum(["deny"]) }),
+	z$2.object({ "mode": z$2.enum(["allow"]) }),
+	z$2.object({
+		"domains": z$2.array(z$2.string()).describe("Hostnames the sandbox may reach"),
+		"mode": z$2.enum(["allowDomains"])
+	})
+]).describe("Outbound network policy for a sandbox.");
+//#endregion
+//#region src/generated/zod/sandbox-limits-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Hard ceilings enforced on a sandbox session.\n\nThese are limits, not scheduling requests. Untrusted code does not respect a hint, so every\nfield is enforced by the platform and a platform that cannot enforce one is rejected at plan\ntime rather than silently ignoring it.
+*/
+const SandboxLimitsSchema = z$2.object({
+	"cpu": z$2.string().describe("CPU ceiling in cores or millicores (e.g. `\"1\"`, `\"500m\"`)"),
+	"disk": z$2.string().describe("Disk ceiling (e.g. `\"20Gi\"`)"),
+	"maxProcesses": z$2.int().min(0).describe("Maximum number of processes, which bounds fork bombs.\n\nOptional because only a container runtime has the primitive: Kubernetes sets a pid ceiling\nper node, not per pod, and neither AWS MicroVMs nor Azure sandboxes expose one. Declaring\nit on a platform that cannot apply it is refused at plan time.").nullish(),
+	"memory": z$2.string().describe("Memory ceiling (e.g. `\"2Gi\"`, `\"512Mi\"`)")
+}).describe("Hard ceilings enforced on a sandbox session.\n\nThese are limits, not scheduling requests. Untrusted code does not respect a hint, so every\nfield is enforced by the platform and a platform that cannot enforce one is rejected at plan\ntime rather than silently ignoring it.");
+z$2.object({
+	"endpoint": z$2.string().describe("Data-plane endpoint sessions are created through, where the platform has one").nullish(),
+	"identifier": z$2.string().describe("Platform-specific identifier for the parent (image ARN, sandbox group id, namespace)").nullish(),
+	"parentName": z$2.string().describe("Name of the durable parent that sessions are created inside")
+}).describe("Outputs generated by a successfully provisioned Sandbox parent.");
+//#endregion
+//#region src/generated/zod/sandbox-session-policy-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description How long a session may live and when it is suspended.
+*/
+const SandboxSessionPolicySchema = z$2.object({
+	"idleSuspendSeconds": z$2.int().min(0).describe("Idle period after which the session is suspended, where the platform supports it").nullish(),
+	"maxLifetimeSeconds": z$2.int().min(0).describe("Wall-clock ceiling on a single session, after which the platform terminates it.\n\nOptional because not every backend has the primitive: Kubernetes has\n`activeDeadlineSeconds` and AWS `maximumDurationInSeconds`, while neither Azure nor Local\nexpose one, so declaring a ceiling there is refused at plan time rather than accepted and\nnever applied. AWS caps it at 8 hours.").nullish()
+}).describe("How long a session may live and when it is suspended.");
+//#endregion
+//#region src/generated/zod/sandbox-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description An isolated environment for running untrusted code, created per session at runtime.
+*/
+const SandboxSchema = z$2.object({
+	get "code"() {
+		return SandboxCodeSchema.describe("Specifies where the sandbox's root filesystem comes from.");
+	},
+	get "egress"() {
+		return SandboxEgressSchema.describe("Outbound network policy for a sandbox.");
+	},
+	"id": z$2.string().describe("Identifier for the sandbox. Must contain only alphanumeric characters, hyphens, and\nunderscores ([A-Za-z0-9-_]). Maximum 64 characters."),
+	get "limits"() {
+		return z$2.union([SandboxLimitsSchema, z$2.null()]).optional();
+	},
+	"previewPorts": z$2.optional(z$2.array(z$2.int().min(0)).describe("Ports eligible for a preview capability. A port not listed here can never be exposed,\nso an application cannot widen its own ingress at runtime.")),
+	get "session"() {
+		return SandboxSessionPolicySchema.describe("How long a session may live and when it is suspended.");
+	}
+}).describe("An isolated environment for running untrusted code, created per session at runtime.");
 //#endregion
 //#region src/generated/zod/scheduled-event-schema.ts
 /**
@@ -6821,6 +7064,7 @@ const StackSettingsSchema = z$2.object({
 	get "network"() {
 		return z$2.union([NetworkSettingsSchema, z$2.null()]).optional();
 	},
+	"publicEndpoints": z$2.object({}).catchall(z$2.object({}).catchall(z$2.string())).describe("Exact externally managed endpoint URLs, keyed by resource ID and endpoint name.\n\nThis is intended for adopted Machines deployments whose DNS and certificates remain\ncustomer-owned. The platform passes these URLs to the runtime without creating or\nreplacing DNS records or certificates.").nullish(),
 	get "telemetry"() {
 		return TelemetryModeSchema.describe("How telemetry (logs, metrics, traces) is handled.").optional();
 	},
@@ -7287,6 +7531,7 @@ const WorkerSchema = z$2.object({
 	get "readinessProbe"() {
 		return z$2.union([ReadinessProbeSchema, z$2.null()]).optional();
 	},
+	"sandboxLauncher": z$2.optional(z$2.boolean().describe("Whether this worker hosts sandbox sessions.\n\nSet by preflight, not by an application: on GCP a sandbox is a subprocess of the Cloud Run\ninstance running the app, and the instance can only launch one if its container declares\nit. Declaring it by hand would be a permission the workload does not need.")),
 	"timeoutSeconds": z$2.optional(z$2.int().min(1).max(3600).default(180).describe("Maximum execution time for the worker in seconds.\nConstraints: 1‑3600 seconds (platform-specific limits may apply)\nDefault: 180")),
 	get "triggers"() {
 		return z$2.array(WorkerTriggerSchema.describe("Defines what triggers a worker execution.")).describe("List of triggers that define what events automatically invoke this worker.\nIf empty, the worker is only invokable directly via HTTP calls or platform-specific invocation APIs.\nWhen configured, the worker will be automatically invoked when any of the specified trigger conditions are met.");
@@ -9313,6 +9558,96 @@ var Queue = class extends ResourceBuilder {
 	}
 };
 //#endregion
+//#region src/sandbox.ts
+/**
+* An isolated environment for running untrusted code.
+*
+* The declaration provisions a durable parent; individual sessions are created and destroyed
+* at runtime through the binding. Backends differ:
+* - AWS: Lambda MicroVMs on Firecracker, with an Alien agent inside the image
+* - Azure: Container Apps Sandboxes, whose data plane implements the API natively
+* - GCP: Cloud Run sandboxes launched inside the workload's own instance
+* - Kubernetes: pods under a sandboxed runtime class (gVisor or Kata)
+* - Local: Docker, which shares a kernel and is therefore development-only for untrusted code
+*
+* Capabilities are not uniform. Call `capabilities()` on the binding and branch, or handle the
+* typed error — an unsupported capability never silently succeeds. Notably GCP cannot
+* reconnect to a session (its session id is scoped to one Cloud Run instance), Azure has no
+* file transfer, and no platform supports a hostname egress allowlist.
+*
+* Limits are enforced ceilings, not scheduling hints, and are validated when the stack is
+* planned. A platform that cannot enforce them rejects the sandbox rather than ignoring them.
+*/
+var Sandbox = class extends ResourceBuilder {
+	_config = {};
+	/**
+	* Creates a new Sandbox builder.
+	* @param id Identifier for the sandbox. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]). Maximum 64 characters.
+	*/
+	constructor(id) {
+		super();
+		this._config.id = id;
+	}
+	/**
+	* Sets where the sandbox's root filesystem comes from.
+	*/
+	code(code) {
+		this._config.code = code;
+		return this;
+	}
+	/**
+	* Sets the enforced cpu, memory, disk and process ceilings.
+	*/
+	limits(limits) {
+		this._config.limits = limits;
+		return this;
+	}
+	/**
+	* Sets the outbound network policy.
+	*/
+	egress(egress) {
+		this._config.egress = egress;
+		return this;
+	}
+	/**
+	* Sets session lifetime and idle behaviour.
+	*/
+	session(session) {
+		this._config.session = session;
+		return this;
+	}
+	/**
+	* Declares the ports eligible for a preview capability.
+	*
+	* A port not declared here can never be exposed, so an application cannot widen its own
+	* ingress at runtime.
+	*/
+	previewPorts(ports) {
+		this._config.previewPorts = ports;
+		return this;
+	}
+	/**
+	* Returns a ResourceType representing any Sandbox resource.
+	* Used for creating permission targets that apply to all sandboxes.
+	* @returns The "sandbox" resource type.
+	*/
+	static any() {
+		return "sandbox";
+	}
+	/**
+	* Builds and validates the sandbox configuration.
+	* @returns An immutable Resource representing the configured sandbox.
+	* @throws Error if the sandbox configuration is invalid.
+	*/
+	build() {
+		const config = SandboxSchema.parse(this._config);
+		return this.resource({
+			type: "sandbox",
+			...config
+		});
+	}
+};
+//#endregion
 //#region src/service-account.ts
 /**
 * Represents a non-human identity that can be assumed by compute services.
@@ -9907,6 +10242,6 @@ function validateOcu(field, value, allowZero) {
 //#region src/index.ts
 const experimental = { AwsOpenSearch };
 //#endregion
-export { AI, AgentStatusSchema, AiSchema as AiConfigSchema, AlienError, AlienErrorSchema as AlienErrorOptionsSchema, AlienEventSchema, ArtifactRegistry, ArtifactRegistrySchema as ArtifactRegistryConfigSchema, ArtifactRegistryHeartbeatDataSchema, ArtifactRegistryHeartbeatStatusSchema, AwsArtifactRegistryImportDataSchema, AwsBuildImportDataSchema, AwsCodeBuildHeartbeatDataSchema, AwsComputeClusterHeartbeatDataSchema, AwsComputeClusterImportDataSchema, AwsDynamoDbKeySchemaElementSchema, AwsDynamoDbKvHeartbeatDataSchema, AwsEcrArtifactRegistryHeartbeatDataSchema, AwsEcrRepositoryHeartbeatDataSchema, AwsIamRoleServiceAccountHeartbeatDataSchema, AwsKvImportDataSchema, AwsLambdaWorkerHeartbeatDataSchema, AwsNetworkImportDataSchema, AwsParameterStoreVaultHeartbeatDataSchema, AwsQueueImportDataSchema, AwsRemoteStackManagementHeartbeatDataSchema, AwsRemoteStackManagementImportDataSchema, AwsS3StorageHeartbeatDataSchema, AwsServiceAccountImportDataSchema, AwsSqsQueueHeartbeatDataSchema, AwsStorageImportDataSchema, AwsVaultImportDataSchema, AwsVpcNetworkHeartbeatDataSchema, AwsWorkerImportDataSchema, AzureArtifactRegistryImportDataSchema, AzureBlobStorageHeartbeatDataSchema, AzureBuildImportDataSchema, AzureComputeClusterHeartbeatDataSchema, AzureComputeClusterImportDataSchema, AzureContainerAppsBuildHeartbeatDataSchema, AzureContainerAppsEnvironmentHeartbeatDataSchema, AzureContainerAppsEnvironmentHeartbeatStatusSchema, AzureContainerAppsEnvironmentImportDataSchema, AzureContainerAppsEnvironmentWorkloadProfileSchema, AzureContainerAppsWorkerHeartbeatDataSchema, AzureContainerRegistryHeartbeatDataSchema, AzureKeyVaultHeartbeatDataSchema, AzureKvImportDataSchema, AzureManagedIdentityServiceAccountHeartbeatDataSchema, AzureNetworkImportDataSchema, AzureQueueImportDataSchema, AzureRemoteStackManagementHeartbeatDataSchema, AzureRemoteStackManagementImportDataSchema, AzureResourceGroupHeartbeatDataSchema, AzureResourceGroupHeartbeatStatusSchema, AzureResourceGroupImportDataSchema, AzureResourceProviderActivationHeartbeatDataSchema, AzureServiceAccountImportDataSchema, AzureServiceActivationImportDataSchema, AzureServiceBusNamespaceHeartbeatDataSchema, AzureServiceBusNamespaceImportDataSchema, AzureServiceBusQueueHeartbeatDataSchema, AzureStorageAccountEndpointsSchema, AzureStorageAccountHeartbeatDataSchema, AzureStorageAccountImportDataSchema, AzureStorageImportDataSchema, AzureTableKvHeartbeatDataSchema, AzureVaultImportDataSchema, AzureVnetNetworkHeartbeatDataSchema, AzureWorkerImportDataSchema, BindingNotFoundError, BodySpecSchema, Build, BuildConfigSchema, BuildHeartbeatDataSchema, BuildHeartbeatStatusSchema, BuildOutputsSchema, BuildStatusSchema, CapacityGroupScalePolicySchema, CapacityGroupSchema, CommandDeliveryModeSchema, CommandResponseSchema, CommandStateSchema, CommandStatusResponseSchema, CommandTargetSchema, CommandTargetTypeSchema, ComputeCapacityGroupStatusSchema, ComputeCapacityRecommendationSchema, ComputeChoiceRangeSchema, ComputeCluster, ComputeClusterSchema as ComputeClusterConfigSchema, ComputeClusterHeartbeatDataSchema, ComputeClusterHeartbeatStatusSchema, ComputeTypeSchema, Container, ContainerAutoscalingSchema, ContainerCodeSchema, ContainerSchema as ContainerConfigSchema, ContainerHeartbeatDataSchema, ContainerPortSchema, CreateCommandRequestSchema, CreateCommandResponseSchema, Daemon, DaemonCodeSchema, DaemonSchema as DaemonConfigSchema, DaemonHeartbeatDataSchema, DaemonOutputsSchema, DeploymentModelSchema, DevResourceInfoSchema, DevStatusSchema, DevStatusStateSchema, Email, EmailSchema as EmailConfigSchema, EnvelopeSchema, EventChangeSchema, EventStateSchema, ExposeProtocolSchema, GcpArtifactRegistryHeartbeatDataSchema, GcpArtifactRegistryImportDataSchema, GcpBuildImportDataSchema, GcpCloudBuildHeartbeatDataSchema, GcpCloudRunWorkerHeartbeatDataSchema, GcpCloudStorageHeartbeatDataSchema, GcpComputeClusterHeartbeatDataSchema, GcpComputeClusterImportDataSchema, GcpFirestoreKvHeartbeatDataSchema, GcpKvImportDataSchema, GcpNetworkImportDataSchema, GcpPubSubQueueHeartbeatDataSchema, GcpQueueImportDataSchema, GcpRemoteStackManagementHeartbeatDataSchema, GcpRemoteStackManagementImportDataSchema, GcpSecretManagerVaultHeartbeatDataSchema, GcpServiceAccountHeartbeatDataSchema, GcpServiceAccountImportDataSchema, GcpServiceActivationImportDataSchema, GcpServiceUsageActivationHeartbeatDataSchema, GcpStorageImportDataSchema, GcpVaultImportDataSchema, GcpVpcNetworkHeartbeatDataSchema, GcpWorkerImportDataSchema, HeartbeatBackendSchema, HeartbeatIssueSeveritySchema, HeartbeatsModeSchema, HorizonContainerHeartbeatDataSchema, HttpMethodSchema, InvalidBindingConfigError, Key, KeySchema as KeyConfigSchema, KubernetesBuildHeartbeatDataSchema, KubernetesClusterNodeStatusSchema, KubernetesContainerHeartbeatDataSchema, KubernetesDaemonHeartbeatDataSchema, KubernetesEventInvolvedObjectSchema, KubernetesEventSnapshotSchema, KubernetesEventSourceSchema, KubernetesNodeConditionStatusSchema, KubernetesNodeResourcesSchema, KubernetesNodeUsageSchema, KubernetesPodRuntimeUnitStatusSchema, KubernetesSecretVaultHeartbeatDataSchema, KubernetesWorkerHeartbeatDataSchema, Kv, KvSchema as KvConfigSchema, KvHeartbeatDataSchema, KvHeartbeatStatusSchema, LeaseInfoSchema, LeaseRequestSchema, LeaseResponseSchema, LocalArtifactRegistryHeartbeatDataSchema, LocalComputeClusterHeartbeatDataSchema, LocalContainerHeartbeatDataSchema, LocalDaemonHeartbeatDataSchema, LocalKvHeartbeatDataSchema, LocalQueueHeartbeatDataSchema, LocalRuntimeEventSnapshotSchema, LocalRuntimeEventSubjectSchema, LocalRuntimeUnitKindSchema, LocalRuntimeUnitStatusSchema, LocalServiceAccountHeartbeatDataSchema, LocalStorageHeartbeatDataSchema, LocalVaultHeartbeatDataSchema, LocalWorkerHeartbeatDataSchema, MachineProfileSchema, ManagedRuntimeEventInvolvedObjectSchema, ManagedRuntimeEventSnapshotSchema, ManagedRuntimeEventSourceSchema, ManagedRuntimeUnitStatusSchema, MessagePayloadSchema, MetricSampleSchema, NetworkHeartbeatDataSchema, NetworkHeartbeatStatusSchema, ObservedCountsSchema, ObservedHealthSchema, ObservedInventoryBatchSchema, ObservedResourceSampleSchema, PermissionSetSchema, PlatformSchema, Postgres, PostgresSchema as PostgresConfigSchema, PresignedRequestBackendSchema, PresignedRequestSchema, ProviderFleetStatusSchema, ProviderLifecycleStateSchema, PublicEndpointSchema, Queue, QueueSchema as QueueConfigSchema, QueueHeartbeatDataSchema, QueueHeartbeatStatusSchema, QueueMessageSchema, ReadinessProbeSchema, ReleaseRequestSchema, RemoteStackManagementHeartbeatDataSchema, RemoteStackManagementHeartbeatStatusSchema, Resource, ResourceHeartbeatDataSchema, ResourceHeartbeatSchema, ResourceLifecycleSchema, ResourceNotFoundError, ResourceOutputsParseError, ResourceRefSchema, ResourceSchemaMapping, ResourceStatusSchema, ResourceTypeSchema, ResponseHandlingSchema, ScheduledEventSchema, ServiceAccount, ServiceAccountSchema as ServiceAccountConfigSchema, ServiceAccountHeartbeatDataSchema, ServiceAccountHeartbeatStatusSchema, ServiceAccountOutputsSchema, ServiceActivationHeartbeatDataSchema, ServiceActivationHeartbeatStatusSchema, Stack, StackInputDefaultValueSchema, StackInputDefinitionSchema, StackInputEnvironmentMappingSchema, StackInputEnvironmentVariableTypeSchema, StackInputKindSchema, StackInputProviderSchema, StackInputValidationSchema, StackResourceStateSchema, StackSchema, StackSettingsSchema, StackStateSchema, StackStatusSchema, Storage, StorageSchema as StorageConfigSchema, StorageEventSchema, StorageEventTypeSchema, StorageEventsSchema, StorageHeartbeatDataSchema, StorageHeartbeatStatusSchema, StorageUploadSchema, SubmitResponseRequestSchema, TelemetryModeSchema, TraceContextSchema, UnexpectedResourceTypeError, UpdatesModeSchema, UploadCompleteRequestSchema, UploadCompleteResponseSchema, Vault, VaultSchema as VaultConfigSchema, VaultHeartbeatDataSchema, VaultHeartbeatStatusSchema, Worker, WorkerSchema as WorkerConfigSchema, WorkerHeartbeatDataSchema, WorkerOutputsSchema, WorkerPublicEndpointSchema, WorkerTriggerSchema, WorkloadHeartbeatStatusSchema, WorkloadReplicaStatusSchema, defineBooleanInput as boolean, defineError, defineEnumInput as enum, experimental, getResourceOutputs, getStackInputDefinitions, inputs, defineIntegerInput as integer, defineNumberInput as number, defineSecretInput as secret, defineStringInput as string, defineStringListInput as stringList };
+export { AI, AgentStatusSchema, AiSchema as AiConfigSchema, AlienError, AlienErrorSchema as AlienErrorOptionsSchema, AlienEventSchema, ArtifactRegistry, ArtifactRegistrySchema as ArtifactRegistryConfigSchema, ArtifactRegistryHeartbeatDataSchema, ArtifactRegistryHeartbeatStatusSchema, AwsArtifactRegistryImportDataSchema, AwsBuildImportDataSchema, AwsCodeBuildHeartbeatDataSchema, AwsComputeClusterHeartbeatDataSchema, AwsComputeClusterImportDataSchema, AwsDynamoDbKeySchemaElementSchema, AwsDynamoDbKvHeartbeatDataSchema, AwsEcrArtifactRegistryHeartbeatDataSchema, AwsEcrRepositoryHeartbeatDataSchema, AwsIamRoleServiceAccountHeartbeatDataSchema, AwsKvImportDataSchema, AwsLambdaWorkerHeartbeatDataSchema, AwsNetworkImportDataSchema, AwsParameterStoreVaultHeartbeatDataSchema, AwsQueueImportDataSchema, AwsRemoteStackManagementHeartbeatDataSchema, AwsRemoteStackManagementImportDataSchema, AwsS3StorageHeartbeatDataSchema, AwsServiceAccountImportDataSchema, AwsSqsQueueHeartbeatDataSchema, AwsStorageImportDataSchema, AwsVaultImportDataSchema, AwsVpcNetworkHeartbeatDataSchema, AwsWorkerImportDataSchema, AzureArtifactRegistryImportDataSchema, AzureBlobStorageHeartbeatDataSchema, AzureBuildImportDataSchema, AzureComputeClusterHeartbeatDataSchema, AzureComputeClusterImportDataSchema, AzureContainerAppsBuildHeartbeatDataSchema, AzureContainerAppsEnvironmentHeartbeatDataSchema, AzureContainerAppsEnvironmentHeartbeatStatusSchema, AzureContainerAppsEnvironmentImportDataSchema, AzureContainerAppsEnvironmentWorkloadProfileSchema, AzureContainerAppsWorkerHeartbeatDataSchema, AzureContainerRegistryHeartbeatDataSchema, AzureKeyVaultHeartbeatDataSchema, AzureKvImportDataSchema, AzureManagedIdentityServiceAccountHeartbeatDataSchema, AzureNetworkImportDataSchema, AzureQueueImportDataSchema, AzureRemoteStackManagementHeartbeatDataSchema, AzureRemoteStackManagementImportDataSchema, AzureResourceGroupHeartbeatDataSchema, AzureResourceGroupHeartbeatStatusSchema, AzureResourceGroupImportDataSchema, AzureResourceProviderActivationHeartbeatDataSchema, AzureServiceAccountImportDataSchema, AzureServiceActivationImportDataSchema, AzureServiceBusNamespaceHeartbeatDataSchema, AzureServiceBusNamespaceImportDataSchema, AzureServiceBusQueueHeartbeatDataSchema, AzureStorageAccountEndpointsSchema, AzureStorageAccountHeartbeatDataSchema, AzureStorageAccountImportDataSchema, AzureStorageImportDataSchema, AzureTableKvHeartbeatDataSchema, AzureVaultImportDataSchema, AzureVnetNetworkHeartbeatDataSchema, AzureWorkerImportDataSchema, BindingNotFoundError, BodySpecSchema, Build, BuildConfigSchema, BuildHeartbeatDataSchema, BuildHeartbeatStatusSchema, BuildOutputsSchema, BuildStatusSchema, CapacityGroupScalePolicySchema, CapacityGroupSchema, CommandDeliveryModeSchema, CommandResponseSchema, CommandStateSchema, CommandStatusResponseSchema, CommandTargetSchema, CommandTargetTypeSchema, ComputeCapacityGroupStatusSchema, ComputeCapacityRecommendationSchema, ComputeChoiceRangeSchema, ComputeCluster, ComputeClusterSchema as ComputeClusterConfigSchema, ComputeClusterHeartbeatDataSchema, ComputeClusterHeartbeatStatusSchema, ComputeTypeSchema, Container, ContainerAutoscalingSchema, ContainerCodeSchema, ContainerSchema as ContainerConfigSchema, ContainerHeartbeatDataSchema, ContainerPortSchema, CreateCommandRequestSchema, CreateCommandResponseSchema, Daemon, DaemonCodeSchema, DaemonSchema as DaemonConfigSchema, DaemonHeartbeatDataSchema, DaemonOutputsSchema, DeploymentModelSchema, DevResourceInfoSchema, DevStatusSchema, DevStatusStateSchema, Email, EmailSchema as EmailConfigSchema, EnvelopeSchema, EventChangeSchema, EventStateSchema, ExposeProtocolSchema, GcpArtifactRegistryHeartbeatDataSchema, GcpArtifactRegistryImportDataSchema, GcpBuildImportDataSchema, GcpCloudBuildHeartbeatDataSchema, GcpCloudRunWorkerHeartbeatDataSchema, GcpCloudStorageHeartbeatDataSchema, GcpComputeClusterHeartbeatDataSchema, GcpComputeClusterImportDataSchema, GcpFirestoreKvHeartbeatDataSchema, GcpKvImportDataSchema, GcpNetworkImportDataSchema, GcpPubSubQueueHeartbeatDataSchema, GcpQueueImportDataSchema, GcpRemoteStackManagementHeartbeatDataSchema, GcpRemoteStackManagementImportDataSchema, GcpSecretManagerVaultHeartbeatDataSchema, GcpServiceAccountHeartbeatDataSchema, GcpServiceAccountImportDataSchema, GcpServiceActivationImportDataSchema, GcpServiceUsageActivationHeartbeatDataSchema, GcpStorageImportDataSchema, GcpVaultImportDataSchema, GcpVpcNetworkHeartbeatDataSchema, GcpWorkerImportDataSchema, HeartbeatBackendSchema, HeartbeatIssueSeveritySchema, HeartbeatsModeSchema, HorizonContainerHeartbeatDataSchema, HttpMethodSchema, InvalidBindingConfigError, Key, KeySchema as KeyConfigSchema, KubernetesBuildHeartbeatDataSchema, KubernetesClusterNodeStatusSchema, KubernetesContainerHeartbeatDataSchema, KubernetesDaemonHeartbeatDataSchema, KubernetesEventInvolvedObjectSchema, KubernetesEventSnapshotSchema, KubernetesEventSourceSchema, KubernetesNodeConditionStatusSchema, KubernetesNodeResourcesSchema, KubernetesNodeUsageSchema, KubernetesPodRuntimeUnitStatusSchema, KubernetesSecretVaultHeartbeatDataSchema, KubernetesWorkerHeartbeatDataSchema, Kv, KvSchema as KvConfigSchema, KvHeartbeatDataSchema, KvHeartbeatStatusSchema, LeaseInfoSchema, LeaseRequestSchema, LeaseResponseSchema, LocalArtifactRegistryHeartbeatDataSchema, LocalComputeClusterHeartbeatDataSchema, LocalContainerHeartbeatDataSchema, LocalDaemonHeartbeatDataSchema, LocalKvHeartbeatDataSchema, LocalQueueHeartbeatDataSchema, LocalRuntimeEventSnapshotSchema, LocalRuntimeEventSubjectSchema, LocalRuntimeUnitKindSchema, LocalRuntimeUnitStatusSchema, LocalServiceAccountHeartbeatDataSchema, LocalStorageHeartbeatDataSchema, LocalVaultHeartbeatDataSchema, LocalWorkerHeartbeatDataSchema, MachineProfileSchema, ManagedRuntimeEventInvolvedObjectSchema, ManagedRuntimeEventSnapshotSchema, ManagedRuntimeEventSourceSchema, ManagedRuntimeUnitStatusSchema, MessagePayloadSchema, MetricSampleSchema, NetworkHeartbeatDataSchema, NetworkHeartbeatStatusSchema, ObservedCountsSchema, ObservedHealthSchema, ObservedInventoryBatchSchema, ObservedResourceSampleSchema, PermissionSetSchema, PlatformSchema, Postgres, PostgresSchema as PostgresConfigSchema, PresignedRequestBackendSchema, PresignedRequestSchema, ProviderFleetStatusSchema, ProviderLifecycleStateSchema, PublicEndpointSchema, Queue, QueueSchema as QueueConfigSchema, QueueHeartbeatDataSchema, QueueHeartbeatStatusSchema, QueueMessageSchema, ReadinessProbeSchema, ReleaseRequestSchema, RemoteStackManagementHeartbeatDataSchema, RemoteStackManagementHeartbeatStatusSchema, Resource, ResourceHeartbeatDataSchema, ResourceHeartbeatSchema, ResourceLifecycleSchema, ResourceNotFoundError, ResourceOutputsParseError, ResourceRefSchema, ResourceSchemaMapping, ResourceStatusSchema, ResourceTypeSchema, ResponseHandlingSchema, Sandbox, SandboxSchema as SandboxConfigSchema, ScheduledEventSchema, ServiceAccount, ServiceAccountSchema as ServiceAccountConfigSchema, ServiceAccountHeartbeatDataSchema, ServiceAccountHeartbeatStatusSchema, ServiceAccountOutputsSchema, ServiceActivationHeartbeatDataSchema, ServiceActivationHeartbeatStatusSchema, Stack, StackInputDefaultValueSchema, StackInputDefinitionSchema, StackInputEnvironmentMappingSchema, StackInputEnvironmentVariableTypeSchema, StackInputKindSchema, StackInputProviderSchema, StackInputValidationSchema, StackResourceStateSchema, StackSchema, StackSettingsSchema, StackStateSchema, StackStatusSchema, Storage, StorageSchema as StorageConfigSchema, StorageEventSchema, StorageEventTypeSchema, StorageEventsSchema, StorageHeartbeatDataSchema, StorageHeartbeatStatusSchema, StorageUploadSchema, SubmitResponseRequestSchema, TelemetryModeSchema, TraceContextSchema, UnexpectedResourceTypeError, UpdatesModeSchema, UploadCompleteRequestSchema, UploadCompleteResponseSchema, Vault, VaultSchema as VaultConfigSchema, VaultHeartbeatDataSchema, VaultHeartbeatStatusSchema, Worker, WorkerSchema as WorkerConfigSchema, WorkerHeartbeatDataSchema, WorkerOutputsSchema, WorkerPublicEndpointSchema, WorkerTriggerSchema, WorkloadHeartbeatStatusSchema, WorkloadReplicaStatusSchema, defineBooleanInput as boolean, defineError, defineEnumInput as enum, experimental, getResourceOutputs, getStackInputDefinitions, inputs, defineIntegerInput as integer, defineNumberInput as number, defineSecretInput as secret, defineStringInput as string, defineStringListInput as stringList };
 
 //# sourceMappingURL=index.js.map