@alienplatform/core 3.3.17 → 3.3.18

package/dist/index.d.ts

@@ -3358,10 +3358,10 @@ type BuildOutputs = z$2.infer<typeof BuildOutputsSchema>;
  * @description Status of a build execution.
  */
 declare const BuildStatusSchema: z$2.ZodEnum<{
-  SUCCEEDED: "SUCCEEDED";
-  FAILED: "FAILED";
   QUEUED: "QUEUED";
   RUNNING: "RUNNING";
+  SUCCEEDED: "SUCCEEDED";
+  FAILED: "FAILED";
   CANCELLED: "CANCELLED";
   TIMED_OUT: "TIMED_OUT";
 }>;
@@ -3519,11 +3519,11 @@ type CommandResponse = z$2.infer<typeof CommandResponseSchema>;
  * @description Command states in the Commands protocol lifecycle
  */
 declare const CommandStateSchema: z$2.ZodEnum<{
+  SUCCEEDED: "SUCCEEDED";
+  FAILED: "FAILED";
   PENDING_UPLOAD: "PENDING_UPLOAD";
   PENDING: "PENDING";
   DISPATCHED: "DISPATCHED";
-  SUCCEEDED: "SUCCEEDED";
-  FAILED: "FAILED";
   EXPIRED: "EXPIRED";
 }>;
 type CommandState = z$2.infer<typeof CommandStateSchema>;
@@ -3587,11 +3587,11 @@ declare const CommandStatusResponseSchema: z$2.ZodObject<{
     }>;
   }, z$2.core.$strip>]>, z$2.ZodNull]>>;
   state: z$2.ZodEnum<{
+    SUCCEEDED: "SUCCEEDED";
+    FAILED: "FAILED";
     PENDING_UPLOAD: "PENDING_UPLOAD";
     PENDING: "PENDING";
     DISPATCHED: "DISPATCHED";
-    SUCCEEDED: "SUCCEEDED";
-    FAILED: "FAILED";
     EXPIRED: "EXPIRED";
   }>;
   target: z$2.ZodObject<{
@@ -5180,11 +5180,11 @@ declare const CreateCommandResponseSchema: z$2.ZodObject<{
   inlineAllowedUpTo: z$2.ZodInt;
   next: z$2.ZodString;
   state: z$2.ZodEnum<{
+    SUCCEEDED: "SUCCEEDED";
+    FAILED: "FAILED";
     PENDING_UPLOAD: "PENDING_UPLOAD";
     PENDING: "PENDING";
     DISPATCHED: "DISPATCHED";
-    SUCCEEDED: "SUCCEEDED";
-    FAILED: "FAILED";
     EXPIRED: "EXPIRED";
   }>;
   storageUpload: z$2.ZodOptional<z$2.ZodUnion<readonly [z$2.ZodObject<{
@@ -23737,6 +23737,7 @@ declare const SandboxCapabilitiesSchema: z$2.ZodObject<{
   reconnect: z$2.ZodBoolean;
   sessionLifetime: z$2.ZodBoolean;
   snapshot: z$2.ZodBoolean;
+  supervisorIsolation: z$2.ZodBoolean;
   supervisorPidNamespace: z$2.ZodBoolean;
   suspendResume: z$2.ZodBoolean;
 }, z$2.core.$strip>;
@@ -25941,11 +25942,11 @@ type UploadCompleteRequest = z$2.infer<typeof UploadCompleteRequestSchema>;
 declare const UploadCompleteResponseSchema: z$2.ZodObject<{
   commandId: z$2.ZodString;
   state: z$2.ZodEnum<{
+    SUCCEEDED: "SUCCEEDED";
+    FAILED: "FAILED";
     PENDING_UPLOAD: "PENDING_UPLOAD";
     PENDING: "PENDING";
     DISPATCHED: "DISPATCHED";
-    SUCCEEDED: "SUCCEEDED";
-    FAILED: "FAILED";
     EXPIRED: "EXPIRED";
   }>;
 }, z$2.core.$strip>;
@@ -26872,7 +26873,6 @@ declare const WorkerSchema: z$2.ZodObject<{
     }>>;
     path: z$2.ZodOptional<z$2.ZodString>;
   }, z$2.core.$strip>, z$2.ZodNull]>>;
-  sandboxLauncher: z$2.ZodOptional<z$2.ZodBoolean>;
   timeoutSeconds: z$2.ZodOptional<z$2.ZodDefault<z$2.ZodInt>>;
   triggers: z$2.ZodArray<z$2.ZodUnion<readonly [z$2.ZodObject<{
     queue: z$2.ZodObject<{
@@ -28272,7 +28272,6 @@ declare const ResourceSchemaMapping: {
         }>>;
         path: z$1.ZodOptional<z$1.ZodString>;
       }, z$1.core.$strip>, z$1.ZodNull]>>;
-      sandboxLauncher: z$1.ZodOptional<z$1.ZodBoolean>;
       timeoutSeconds: z$1.ZodOptional<z$1.ZodDefault<z$1.ZodInt>>;
       triggers: z$1.ZodArray<z$1.ZodUnion<readonly [z$1.ZodObject<{
         queue: z$1.ZodObject<{
@@ -28790,8 +28789,11 @@ declare class Queue extends ResourceBuilder {
  *
  * Capabilities are not uniform. Call `capabilities()` on the binding and branch, or handle the
  * typed error — an unsupported capability never silently succeeds. Notably GCP cannot
- * reconnect to a session (its session id is scoped to one Cloud Run instance), the Azure
- * binding implements no file transfer, and no binding renders a hostname egress allowlist.
+ * reconnect to a session (its session id is scoped to one Cloud Run instance), only Azure
+ * restricts egress to a hostname allowlist, no platform can snapshot a session, and only AWS
+ * and Local run a command under a different identity than the process supervising it. Elsewhere the
+ * command shares the supervisor's user, so it can read the supervisor's environment and
+ * signal it, and the container is the isolation boundary.
  *
  * Limits are enforced ceilings, not scheduling hints, and are validated when the stack is
  * planned. A platform that cannot enforce them rejects the sandbox rather than ignoring them.