@alienplatform/core 3.3.18 → 3.3.20

package/dist/index.js

@@ -1974,12 +1974,14 @@ const AwsS3StorageHeartbeatDataSchema = z$2.object({
 });
 z$2.object({
 	"allowEgress": z$2.optional(z$2.boolean().describe("Whether the declaration asked for open egress.\n\nThe controller builds the binding from this, and an empty connector list cannot be read\nwithout it: a stripped `deny` import would otherwise look exactly like an open sandbox.")),
+	"buildRoleArn": z$2.string().describe("Role the controller passes to `CreateMicrovmImage`. Setup owns it because\n`sandbox/provision` grants the controller `iam:PassRole` and no `iam:CreateRole`.").nullish(),
+	"bundleUri": z$2.string().describe("Bundle the controller builds the image from. Only a runtime-provisioned sandbox carries it.").nullish(),
 	"egressConnectorArns": z$2.optional(z$2.array(z$2.string()).describe("Egress network connectors. Deleting one while MicroVMs still reference it breaks their\nnetworking, so teardown needs them named rather than rediscovered.")),
-	"imageArn": z$2.string().describe("MicroVM image ARN."),
-	"imageIdentifier": z$2.string().describe("MicroVM image identifier."),
-	"imageVersion": z$2.string().describe("Image version the sessions are scoped to. Re-imported on every image roll."),
+	"imageArn": z$2.string().describe("MicroVM image ARN. Absent until a runtime-provisioned image has been built.").nullish(),
+	"imageIdentifier": z$2.string().describe("MicroVM image identifier. Absent until a runtime-provisioned image has been built.").nullish(),
+	"imageVersion": z$2.string().describe("Image version the sessions are scoped to. Re-imported on every image roll, and absent\nuntil a runtime-provisioned image has been built.").nullish(),
 	"previewPorts": z$2.optional(z$2.array(z$2.int().min(0)).describe("Ports a preview capability may be minted for; empty means preview is not offered."))
-}).describe("AWS Sandbox ImportData.\n\nCarries the Frozen parent from the setup emitter to the runtime controller. The image\n**version** is not decoration: `RunMicrovm` has no `tags`, so image plus version is the only\nsession identity there is, and a controller holding a stale version would enumerate the wrong\nset and orphan every session started on the previous one.");
+}).describe("AWS Sandbox ImportData.\n\nCarries the sandbox's parent from the setup emitter to the runtime controller. The image\n**version** is not decoration: `RunMicrovm` has no `tags`, so image plus version is the only\nsession identity there is, and a controller holding a stale version would enumerate the wrong\nset and orphan every session started on the previous one.\n\nTwo shapes arrive here, and which fields are present says which. A Frozen sandbox is built by\nstack creation and names its image; a Live one is built by the controller after the deployment\nregisters, so it names the build role and bundle instead, leaving the image fields empty.");
 //#endregion
 //#region src/generated/zod/aws-service-account-import-data-schema.ts
 /**
@@ -4927,6 +4929,22 @@ const EventChangeSchema = z$2.union([
 	})
 ]).describe("Represents a change to an event");
 //#endregion
+//#region src/generated/zod/gcp-agent-platform-sandbox-heartbeat-data-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description GCP: the Agent Platform template sessions are cut from, and the engine it hangs under.\n\nNo session count: that needs `aiplatform.sandboxEnvironments.list`, which only the management\npermission set holds. No template state either — emission is gated on reading it `ACTIVE`,\nwhich is what `status` already says.
+*/
+const GcpAgentPlatformSandboxHeartbeatDataSchema = z$2.object({
+	"engine": z$2.string().describe("Reasoning engine the template hangs under, without which the template id names nothing."),
+	get "status"() {
+		return SandboxHeartbeatStatusSchema;
+	},
+	"templateId": z$2.string().describe("The template sessions are currently cut from.")
+}).describe("GCP: the Agent Platform template sessions are cut from, and the engine it hangs under.\n\nNo session count: that needs `aiplatform.sandboxEnvironments.list`, which only the management\npermission set holds. No template state either — emission is gated on reading it `ACTIVE`,\nwhich is what `status` already says.");
+//#endregion
 //#region src/generated/zod/gcp-artifact-registry-import-data-schema.ts
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -6617,6 +6635,7 @@ const ResourceEntrySchema = z$2.object({
 const SandboxHeartbeatDataSchema = z$2.union([
 	z$2.lazy(() => AwsMicrovmSandboxHeartbeatDataSchema).and(z$2.object({ "backend": z$2.enum(["awsMicrovm"]) })).describe("AWS: the image a sandbox runs from, and the lifecycle state AWS reports for it."),
 	z$2.lazy(() => AzureSandboxGroupHeartbeatDataSchema).and(z$2.object({ "backend": z$2.enum(["azureSandboxGroup"]) })).describe("Azure: the sandbox group's ARM state. The data plane has no list operation, so a session count\nis not available here."),
+	z$2.lazy(() => GcpAgentPlatformSandboxHeartbeatDataSchema).and(z$2.object({ "backend": z$2.enum(["gcpAgentPlatform"]) })).describe("GCP: the Agent Platform template sessions are cut from, and the engine it hangs under.\n\nNo session count: that needs `aiplatform.sandboxEnvironments.list`, which only the management\npermission set holds. No template state either — emission is gated on reading it `ACTIVE`,\nwhich is what `status` already says."),
 	z$2.lazy(() => KubernetesSandboxHeartbeatDataSchema).and(z$2.object({ "backend": z$2.enum(["kubernetesPods"]) })).describe("Kubernetes: pods carrying the sandbox label, in the deployment's namespace."),
 	z$2.lazy(() => LocalSandboxHeartbeatDataSchema).and(z$2.object({ "backend": z$2.enum(["local"]) })).describe("Local: containers Docker still holds for this sandbox.")
 ]).describe("Content-free telemetry about a sandbox's sessions.\n\nNever anything from inside a session. A controller reaches only the cloud's management APIs,\nand the whole point of the resource is that the control plane cannot see what runs in it.");
@@ -6966,7 +6985,7 @@ const SandboxSchema = z$2.object({
 	get "limits"() {
 		return z$2.union([SandboxLimitsSchema, z$2.null()]).optional();
 	},
-	"previewPorts": z$2.optional(z$2.array(z$2.int().min(0)).describe("Ports eligible for a preview capability. A port not listed here can never be exposed,\nso an application cannot widen its own ingress at runtime.")),
+	"previewPorts": z$2.optional(z$2.array(z$2.int().min(0)).describe("Ports eligible for a preview capability. An application reaches its sandbox through the\nprovider, so it cannot widen its own ingress at runtime; a holder of a remote binding's\ncredentials is bounded by no port condition, which is why a remote sandbox declares none.")),
 	get "session"() {
 		return SandboxSessionPolicySchema.describe("How long a session may live and when it is suspended.");
 	}