@alienplatform/core 3.3.33 → 3.3.35

package/dist/index.js

@@ -780,6 +780,9 @@ const EcrArtifactRegistryBindingSchema = z$2.object({
 	},
 	get "repositoryPrefix"() {
 		return BindingValueStringSchema.describe("Represents a value that can be either a concrete value, a template expression,\nor a reference to a Kubernetes Secret");
+	},
+	get "sandboxRepositoryPrefix"() {
+		return z$2.union([BindingValueStringSchema, z$2.null()]).optional();
 	}
 }).describe("AWS ECR (Elastic Container Registry) binding configuration");
 //#endregion
@@ -1836,6 +1839,23 @@ const AwsMicrovmSandboxHeartbeatDataSchema = z$2.object({
 	}
 }).describe("AWS: the image a sandbox runs from, and the lifecycle state AWS reports for it.");
 //#endregion
+//#region src/generated/zod/aws-sandbox-network-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Setup network coordinates; the deployment controller verifies actual EC2 routes and CIDRs.
+*/
+const AwsSandboxNetworkSchema = z$2.object({
+	"gatewayCidrs": z$2.array(z$2.string()).describe("Only destinations permitted by the connector security group."),
+	"gatewaySubnetIds": z$2.array(z$2.string()).describe("Dedicated NAT-routed subnets for the gateway's internal load balancer."),
+	"sandboxCidrs": z$2.array(z$2.string()).describe("Source ranges permitted on the gateway proxy port."),
+	"sandboxSubnetIds": z$2.array(z$2.string()).describe("Route-less connector subnet identifiers."),
+	"vpcCidrs": z$2.array(z$2.string()).describe("Every associated VPC IPv4 range, denied by the gateway."),
+	"workloadCidrs": z$2.array(z$2.string()).describe("Source ranges permitted on the gateway admin port.")
+}).describe("Setup network coordinates; the deployment controller verifies actual EC2 routes and CIDRs.");
+//#endregion
 //#region src/generated/zod/aws-network-import-data-schema.ts
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -1847,6 +1867,7 @@ const AwsMicrovmSandboxHeartbeatDataSchema = z$2.object({
 const AwsNetworkImportDataSchema = z$2.object({
 	"availabilityZones": z$2.array(z$2.string()).describe("Availability zone names used by created or BYO subnets."),
 	"cidrBlock": z$2.string().describe("VPC CIDR block when the VPC is created by this stack.").nullish(),
+	"egressPublicIps": z$2.optional(z$2.array(z$2.string()).describe("Public addresses allocated to this deployment's NAT; empty when unknown.")),
 	"eipAllocationId": z$2.string().describe("Elastic IP allocation ID backing the NAT gateway.").nullish(),
 	"internetGatewayId": z$2.string().describe("Internet gateway ID when created by this stack.").nullish(),
 	"isByoVpc": z$2.boolean().describe("True when the VPC is owned outside this stack."),
@@ -1855,6 +1876,9 @@ const AwsNetworkImportDataSchema = z$2.object({
 	"privateSubnetIds": z$2.array(z$2.string()).describe("Private subnet IDs."),
 	"publicRouteTableId": z$2.string().describe("Public route table ID.").nullish(),
 	"publicSubnetIds": z$2.array(z$2.string()).describe("Public subnet IDs."),
+	get "sandboxNetwork"() {
+		return z$2.union([AwsSandboxNetworkSchema, z$2.null()]).optional();
+	},
 	"securityGroupId": z$2.string().describe("Security group ID for private workloads.").nullish(),
 	"subnetsByFailureDomain": z$2.optional(z$2.object({}).catchall(z$2.lazy(() => AwsFailureDomainSubnetsSchema).describe("AWS subnets grouped by their real availability zone.")).describe("Exact subnet membership keyed by real availability zone.")),
 	"vpcId": z$2.string().describe("VPC ID. Absent when default-VPC mode defers lookup to AWS at runtime.").nullish()
@@ -2161,7 +2185,7 @@ const AwsS3StorageHeartbeatDataSchema = z$2.object({
 	"versioningStatus": z$2.string().nullish()
 });
 z$2.object({
-	"allowEgress": z$2.optional(z$2.boolean().describe("Whether the declaration asked for open egress.\n\nThe controller builds the binding from this, and an empty connector list cannot be read\nwithout it: a stripped `deny` import would otherwise look exactly like an open sandbox.")),
+	"allowEgress": z$2.optional(z$2.boolean().describe("Whether sessions use native cloud internet without a deployment gateway.\nIsolated sessions must instead name their setup-owned connector.")),
 	"buildRoleArn": z$2.string().describe("Role the controller passes to `CreateMicrovmImage`. Setup owns it because\n`sandbox/provision` grants the controller `iam:PassRole` and no `iam:CreateRole`.").nullish(),
 	"bundleUri": z$2.string().describe("Bundle the controller builds the image from. Only a runtime-provisioned sandbox carries it.").nullish(),
 	"egressConnectorArns": z$2.optional(z$2.array(z$2.string()).describe("Egress network connectors. Deleting one while MicroVMs still reference it breaks their\nnetworking, so teardown needs them named rather than rediscovered.")),
@@ -4206,6 +4230,16 @@ const ContainerCodeSchema = z$2.union([z$2.object({
 	"type": z$2.enum(["source"])
 })]).describe("Specifies the source of the container's executable code.");
 //#endregion
+//#region src/generated/zod/container-egress-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Outbound network restriction enforced outside the container.\nInternet access also permits this container\'s own replicas on declared TCP ports,\nown-service discovery, and the credential proxy for its own identity.\nAbsence preserves the runtime\'s existing full-network behavior.
+*/
+const ContainerEgressSchema = z$2.enum(["internet"]).describe("Outbound network restriction enforced outside the container.\nInternet access also permits this container's own replicas on declared TCP ports,\nown-service discovery, and the credential proxy for its own identity.\nAbsence preserves the runtime's existing full-network behavior.");
+//#endregion
 //#region src/generated/zod/container-gpu-spec-schema.ts
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -4670,6 +4704,7 @@ const ContainerOutputsSchema = z$2.object({
 	"currentReplicas": z$2.int().min(0).describe("Number of current replicas"),
 	"desiredReplicas": z$2.int().min(0).describe("Desired number of replicas"),
 	"internalDns": z$2.string().describe("Internal DNS name (e.g., \"api.svc\")"),
+	"internalUrls": z$2.optional(z$2.object({}).catchall(z$2.string()).describe("Internal URLs keyed by port for cluster members and linking resources.")),
 	"name": z$2.string().describe("Container name in the managed container backend"),
 	"publicEndpoints": z$2.optional(z$2.object({}).catchall(z$2.lazy(() => PublicEndpointOutputSchema).describe("Runtime-resolved public endpoint metadata.")).describe("Public endpoints resolved for this container.")),
 	get "replicas"() {
@@ -4891,6 +4926,9 @@ const ContainerSchema = z$2.object({
 	get "cpu"() {
 		return ResourceSpecSchema.describe("Resource specification with min/desired values.");
 	},
+	get "egress"() {
+		return z$2.union([ContainerEgressSchema, z$2.null()]).optional();
+	},
 	"environment": z$2.optional(z$2.object({}).catchall(z$2.string()).describe("Environment variables")),
 	"ephemeralStorage": z$2.string().describe("Ephemeral storage requirement (e.g., \"10Gi\")").nullish(),
 	get "gpu"() {
@@ -4921,7 +4959,7 @@ const ContainerSchema = z$2.object({
 	},
 	"pool": z$2.string().describe("Capacity group to run on (must exist in the cluster)\nIf not specified, containers are scheduled to any available group.").nullish(),
 	get "ports"() {
-		return z$2.array(ContainerPortSchema.describe("Container port configuration.")).describe("Internal container ports (at least one required).");
+		return z$2.array(ContainerPortSchema.describe("Container port configuration.")).describe("Ports reachable by compute-cluster members and resources that link to this container.");
 	},
 	get "publicEndpoints"() {
 		return z$2.array(PublicEndpointSchema.describe("Public endpoint configuration for port-backed workload resources.")).describe("Public endpoints exposed by the container.").optional();
@@ -4995,6 +5033,12 @@ const CreateCommandResponseSchema = z$2.object({
 		return z$2.union([StorageUploadSchema, z$2.null()]).optional();
 	}
 }).describe("Response to command creation");
+z$2.object({
+	"startedAt": z$2.iso.datetime().describe("First credential failure in this phase; subsequent attempts keep this timestamp."),
+	get "status"() {
+		return DeploymentStatusSchema.describe("Deployment status in the deployment lifecycle.\n\nFor observe-only deployments with no release or stack state, `Running`\nmeans the Operator is attached. Connectivity comes from `lastHeartbeatAt`;\nresource health comes from inventory and resource heartbeat data.");
+	}
+}).describe("A credential outage's durable retry window, scoped to its deployment phase.");
 //#endregion
 //#region src/generated/zod/gcp-custom-certificate-config-schema.ts
 /**
@@ -5350,6 +5394,38 @@ const DaemonSchema = z$2.object({
 	"stopGracePeriodSeconds": z$2.int().min(1).max(86400).describe("Grace period in seconds for stopping daemon instances during updates, drains, and deletes.\n\nWhen omitted, the runtime backend applies its default. Valid values are\n1 second through 24 hours.").nullish()
 });
 //#endregion
+//#region src/generated/zod/deployer-secret-command-variants-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Commands for a shell family. Values are never sent to the control plane.
+*/
+const DeployerSecretCommandVariantsSchema = z$2.object({
+	"inline": z$2.string().describe("Command with a visible value placeholder; shell history can retain it."),
+	"prompt": z$2.string().describe("Hidden-input command, without the value in shell history or process arguments.")
+}).describe("Commands for a shell family. Values are never sent to the control plane.");
+//#endregion
+//#region src/generated/zod/deployer-secret-commands-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Shell-specific instructions generated beside the secret location.
+*/
+const DeployerSecretCommandsSchema = z$2.object({
+	"checkCommand": z$2.string().describe("Read-only identity check, valid in both shell families.").nullish(),
+	"target": z$2.string().describe("Expected account, project, subscription or Kubernetes namespace.").nullish(),
+	get "unix"() {
+		return DeployerSecretCommandVariantsSchema.describe("Commands for a shell family. Values are never sent to the control plane.");
+	},
+	get "windows"() {
+		return DeployerSecretCommandVariantsSchema.describe("Commands for a shell family. Values are never sent to the control plane.");
+	}
+}).describe("Shell-specific instructions generated beside the secret location.");
+//#endregion
 //#region src/generated/zod/deployer-secret-store-schema.ts
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -5375,7 +5451,10 @@ const DeployerSecretStoreSchema = z$2.enum([
 * @description Where a deployer writes a vault-native secret.
 */
 const DeployerSecretLocationSchema = z$2.object({
-	"cliCommand": z$2.string().describe("Command that writes the value, with `<VALUE>` in place of the secret."),
+	"cliCommand": z$2.string().describe("Command that prompts without echoing and writes the value through stdin."),
+	get "commands"() {
+		return z$2.union([DeployerSecretCommandsSchema, z$2.null()]).optional();
+	},
 	"consoleUrl": z$2.string().describe("Cloud console page where the secret is created, when the store has one.").nullish(),
 	"deleteCommand": z$2.string().describe("Command that deletes the secret. Deleting a deployment keeps the\nsecrets the deployer wrote, since Alien never owned their values.").nullish(),
 	"name": z$2.string().describe("Full name of the secret in that store."),
@@ -5549,6 +5628,16 @@ const DynamodbKvBindingSchema = z$2.object({
 	}
 }).describe("AWS DynamoDB KV binding configuration");
 //#endregion
+//#region src/generated/zod/egress-policy-schema.ts
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Per-sandbox outbound policy. Mail ports 25, 465 and 587 require an explicit allowlist port, such as smtp.example.com:587; internet and portless targets exclude them. This protects the deployment\'s shared outbound IP from mail abuse and blocklisting that could disrupt every tenant.
+*/
+const EgressPolicySchema = z$2.union([z$2.object({ "allow": z$2.array(z$2.string()).min(0).max(4096) }), z$2.enum(["internet"])]).describe("Per-sandbox outbound policy. Mail ports 25, 465 and 587 require an explicit allowlist port, such as smtp.example.com:587; internet and portless targets exclude them. This protects the deployment's shared outbound IP from mail abuse and blocklisting that could disrupt every tenant.");
+//#endregion
 //#region src/generated/zod/email-dkim-token-schema.ts
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -7304,6 +7393,14 @@ const LeaseRequestSchema = z$2.object({
 const LeaseResponseSchema = z$2.object({ get "leases"() {
 	return z$2.array(LeaseInfoSchema.describe("Lease information")).describe("Acquired leases (empty array if none available)");
 } }).describe("Response to lease acquisition");
+z$2.union([
+	z$2.object({ "mode": z$2.enum(["deny"]) }),
+	z$2.object({ "mode": z$2.enum(["allow"]) }),
+	z$2.object({
+		"domains": z$2.array(z$2.string()),
+		"mode": z$2.enum(["allowDomains"])
+	})
+]).describe("Deprecated object declarations preserve their released backend behavior.");
 //#endregion
 //#region src/generated/zod/lifecycle-rule-schema.ts
 /**
@@ -8261,17 +8358,14 @@ const SandboxCodeSchema = z$2.union([z$2.object({
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
-/**
-* @description Outbound network policy for a sandbox.
-*/
-const SandboxEgressSchema = z$2.union([
+const SandboxEgressSchema = z$2.union([z$2.union([
 	z$2.object({ "mode": z$2.enum(["deny"]) }),
 	z$2.object({ "mode": z$2.enum(["allow"]) }),
 	z$2.object({
-		"domains": z$2.array(z$2.string()).describe("Hostnames the sandbox may reach"),
+		"domains": z$2.array(z$2.string()),
 		"mode": z$2.enum(["allowDomains"])
 	})
-]).describe("Outbound network policy for a sandbox.");
+]), z$2.enum(["none", "internet"])]);
 //#endregion
 //#region src/generated/zod/sandbox-lifecycle-policy-schema.ts
 /**
@@ -8328,8 +8422,11 @@ const SandboxSchema = z$2.object({
 	get "code"() {
 		return SandboxCodeSchema.describe("Specifies where the sandbox's root filesystem comes from.");
 	},
+	get "defaultPolicy"() {
+		return z$2.union([EgressPolicySchema, z$2.null()]).optional();
+	},
 	get "egress"() {
-		return SandboxEgressSchema.describe("Outbound network policy for a sandbox.");
+		return SandboxEgressSchema.describe("Outbound network policy");
 	},
 	"id": z$2.string().describe("Identifier for the sandbox. Must contain only alphanumeric characters, hyphens, and\nunderscores ([A-Za-z0-9-_]). Maximum 64 characters."),
 	get "lifecycle"() {
@@ -10143,7 +10240,8 @@ var Container = class extends ResourceBuilder {
 	}
 	/**
 	* Adds an internal-only port to the container.
-	* Automatically creates DNS records for service discovery.
+	* Reachable by this compute cluster and every resource that links to this container.
+	* A link grants access to all declared ports; users need a publicEndpoint.
 	* @param port Port number (e.g., 3000, 8080, 5432).
 	* @returns The Container builder instance.
 	*/
@@ -10192,6 +10290,17 @@ var Container = class extends ResourceBuilder {
 		return this;
 	}
 	/**
+	* Allows public addresses and DNS, this container's own replicas on declared
+	* TCP ports, and the platform credential proxy for its own identity.
+	* Service discovery resolves only this container's own service.
+	* Requires security.profile = "restricted"; unsupported backends refuse the
+	* plan. Without this setting, existing full network access is unchanged.
+	*/
+	egress(policy) {
+		this._config.egress = policy;
+		return this;
+	}
+	/**
 	* Makes an HTTP port reachable from your control plane through the manager.
 	*
 	* Requests to `https://<manager>/v1/deployments/<deployment>/tunnels/<container>/...`
@@ -11184,19 +11293,8 @@ var Queue = class extends ResourceBuilder {
 * An isolated environment for running untrusted code.
 *
 * The declaration provisions a durable parent; individual sandboxes are created and destroyed
-* at runtime through the binding. Backends differ:
-* - AWS: Lambda MicroVMs on Firecracker, with an Alien agent inside the image
-* - Azure: Container Apps Sandboxes, whose data plane implements the API natively
-* - GCP: Cloud Run sandboxes launched inside the workload's own instance
-* - Kubernetes: pods under a sandboxed runtime class (gVisor or Kata)
-* - Local: Docker, which shares a kernel and is therefore development-only for untrusted code
-*
-* Capabilities are not uniform. Call `capabilities()` on the binding and branch, or handle the
-* typed error — an unsupported capability never silently succeeds. Notably GCP cannot
-* reconnect to a sandbox (its id is scoped to one Cloud Run instance), Azure matches egress hostnames and AWS can pin their IPv4 addresses with privilegedSupervisor, no platform can snapshot a sandbox, and only AWS
-* and Local run a command under a different identity than the process supervising it. Elsewhere the
-* command shares the supervisor's user, so it can read the supervisor's environment and
-* signal it, and the container is the isolation boundary.
+* at runtime through the binding. Runtime policies control each sandbox independently.
+* Unsupported policies are refused when planning the stack.
 *
 * Limits are enforced ceilings, not scheduling hints, and are validated when the stack is
 * planned. A platform that cannot enforce them rejects the sandbox rather than ignoring them.
@@ -11234,15 +11332,27 @@ var Sandbox = class extends ResourceBuilder {
 		return this;
 	}
 	/**
-	* Sets the outbound network policy.
+	* "none" disables outbound networking. "internet" opts into the deployment
+	* gateway, public addresses only, a fixed outbound IP, connection logs and
+	* per-sandbox runtime policies. Opting in requires updating deployment setup.
+	* Legacy object values retain their released backend behavior and do not
+	* opt into the gateway. They are deprecated in favor of the new values.
 	*/
 	egress(egress) {
 		this._config.egress = egress;
 		return this;
 	}
-	/** Fixes the unprivileged command identity and lets Alien's supervisor enforce egress. */
-	privilegedSupervisor(supervisor) {
-		this._config.privilegedSupervisor = supervisor;
+	/**
+	* @deprecated Existing supervisor enforcement is preserved. The new
+	* egress("internet") enables gateway enforcement and the supervisor automatically.
+	*/
+	privilegedSupervisor(settings) {
+		this._config.privilegedSupervisor = settings;
+		return this;
+	}
+	/** Sets the runtime policy used when create omits one; requires egress("internet"). */
+	defaultPolicy(policy) {
+		this._config.defaultPolicy = policy;
 		return this;
 	}
 	/**