@alienplatform/manager-api 3.3.22 → 3.3.24

package/src/models/operatorimagereport.ts

@@ -0,0 +1,64 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import {
+  OperatorImageSource,
+  OperatorImageSource$outboundSchema,
+} from "./operatorimagesource.js";
+
+/**
+ * Exact immutable Operator image identity observed by the running process.
+ */
+export type OperatorImageReport = {
+  /**
+   * Exact lowercase OCI digest in `sha256:digest` form.
+   */
+  digest: string;
+  /**
+   * Exact OCI image reference in `repository@sha256:digest` form.
+   */
+  image: string;
+  /**
+   * Package ID when `source` is `package`; otherwise `null`.
+   */
+  packageId?: string | null | undefined;
+  /**
+   * Package version when `source` is `package`; otherwise `null`.
+   */
+  packageVersion?: string | null | undefined;
+  /**
+   * Origin of the exact Operator image running this process.
+   */
+  source: OperatorImageSource;
+};
+
+/** @internal */
+export type OperatorImageReport$Outbound = {
+  digest: string;
+  image: string;
+  packageId?: string | null | undefined;
+  packageVersion?: string | null | undefined;
+  source: string;
+};
+
+/** @internal */
+export const OperatorImageReport$outboundSchema: z.ZodType<
+  OperatorImageReport$Outbound,
+  OperatorImageReport
+> = z.object({
+  digest: z.string(),
+  image: z.string(),
+  packageId: z.nullable(z.string()).optional(),
+  packageVersion: z.nullable(z.string()).optional(),
+  source: OperatorImageSource$outboundSchema,
+});
+
+export function operatorImageReportToJSON(
+  operatorImageReport: OperatorImageReport,
+): string {
+  return JSON.stringify(
+    OperatorImageReport$outboundSchema.parse(operatorImageReport),
+  );
+}

package/src/models/operatorimagesource.ts

@@ -0,0 +1,23 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { ClosedEnum } from "../types/enums.js";
+
+/**
+ * Origin of the exact Operator image running this process.
+ */
+export const OperatorImageSource = {
+  Package: "package",
+  Configured: "configured",
+} as const;
+/**
+ * Origin of the exact Operator image running this process.
+ */
+export type OperatorImageSource = ClosedEnum<typeof OperatorImageSource>;
+
+/** @internal */
+export const OperatorImageSource$outboundSchema: z.ZodEnum<
+  typeof OperatorImageSource
+> = z.enum(OperatorImageSource);

package/src/models/remoteawssandboxbinding.ts

@@ -24,23 +24,23 @@ export type RemoteAwsSandboxBinding = {
    */
   allowEgress: boolean;
   /**
-   * Idle seconds after which a session suspends, where the declaration asked for one.
+   * Idle seconds after which a sandbox pauses, where the declaration asked for one.
    */
-  idleSuspendSeconds?: number | null | undefined;
+  idlePauseSeconds?: number | null | undefined;
   /**
-   * MicroVM image the credential lease authorizes sessions against.
+   * MicroVM image the credential lease authorizes sandboxes against.
    */
   imageArn: string;
   /**
-   * Image version sessions are enumerated by together with the image.
+   * Image version sandboxes are enumerated by together with the image.
    */
   imageVersion: string;
   /**
-   * Wall-clock ceiling on a session, where the declaration asked for one.
+   * Wall-clock ceiling on a sandbox, where the declaration asked for one.
    */
   maxLifetimeSeconds?: number | null | undefined;
   /**
-   * Ports a session capability may be minted for.
+   * Ports a sandbox capability may be minted for.
    */
   previewPorts: Array<number>;
   /**
@@ -55,7 +55,7 @@ export const RemoteAwsSandboxBinding$inboundSchema: z.ZodType<
   unknown
 > = z.object({
   allowEgress: z.boolean(),
-  idleSuspendSeconds: z.nullable(z.int()).optional(),
+  idlePauseSeconds: z.nullable(z.int()).optional(),
   imageArn: z.string(),
   imageVersion: z.string(),
   maxLifetimeSeconds: z.nullable(z.int()).optional(),

package/src/models/remoteazuresandboxbinding.ts

@@ -0,0 +1,85 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { safeParse } from "../lib/schemas.js";
+import { Result as SafeParseResult } from "../types/fp.js";
+import { SDKValidationError } from "./errors/sdkvalidationerror.js";
+
+/**
+ * Concrete sandbox-group topology returned to remote clients.
+ *
+ * @remarks
+ *
+ * The ceilings travel because Azure applies them at create and nowhere else, so a remote caller
+ * that does not send them gets the data plane's default rather than the declared size. They are
+ * not a limit — a holder that ignores them gets whatever the data plane accepts.
+ */
+export type RemoteAzureSandboxBinding = {
+  /**
+   * Whether the declaration asked for open egress. Always true here, sent explicitly because
+   *
+   * @remarks
+   * the remote grant lets its holder create sandboxes the declared policy never reaches — a
+   * client must read this rather than assume it from an absent field.
+   */
+  allowEgress: boolean;
+  /**
+   * Declared sandbox ceilings, where the declaration named them.
+   */
+  cpu?: string | null | undefined;
+  /**
+   * Per-region data-plane host, which is separate from the ARM control plane.
+   */
+  dataPlaneEndpoint: string;
+  disk?: string | null | undefined;
+  /**
+   * Catalog disk image every sandbox is created from.
+   */
+  diskImage: string;
+  /**
+   * Idle seconds after which a sandbox pauses, where the declaration asked for one.
+   */
+  idlePauseSeconds?: number | null | undefined;
+  memory?: string | null | undefined;
+  /**
+   * Region the sandbox group lives in.
+   */
+  region: string;
+  /**
+   * Resource group the data-plane path is scoped by.
+   */
+  resourceGroup: string;
+  /**
+   * Sandbox group the credential lease authorizes sandboxes against.
+   */
+  sandboxGroup: string;
+};
+
+/** @internal */
+export const RemoteAzureSandboxBinding$inboundSchema: z.ZodType<
+  RemoteAzureSandboxBinding,
+  unknown
+> = z.object({
+  allowEgress: z.boolean(),
+  cpu: z.nullable(z.string()).optional(),
+  dataPlaneEndpoint: z.string(),
+  disk: z.nullable(z.string()).optional(),
+  diskImage: z.string(),
+  idlePauseSeconds: z.nullable(z.int()).optional(),
+  memory: z.nullable(z.string()).optional(),
+  region: z.string(),
+  resourceGroup: z.string(),
+  sandboxGroup: z.string(),
+});
+
+export function remoteAzureSandboxBindingFromJSON(
+  jsonString: string,
+): SafeParseResult<RemoteAzureSandboxBinding, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => RemoteAzureSandboxBinding$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'RemoteAzureSandboxBinding' from JSON`,
+  );
+}

package/src/models/remotegcpsandboxbinding.ts

@@ -0,0 +1,56 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { safeParse } from "../lib/schemas.js";
+import { Result as SafeParseResult } from "../types/fp.js";
+import { SDKValidationError } from "./errors/sdkvalidationerror.js";
+
+/**
+ * Concrete Agent Platform topology returned to remote clients.
+ *
+ * @remarks
+ *
+ * No egress field, unlike the other two clouds: the policy lives on the environment template
+ * named below, so it travels with the template rather than as a flag the client must read.
+ */
+export type RemoteGcpSandboxBinding = {
+  /**
+   * Reasoning engine the credential lease authorizes sandboxes under.
+   */
+  engine: string;
+  /**
+   * Seconds a sandbox may live, where the declaration asked for one.
+   */
+  maxLifetimeSeconds?: number | null | undefined;
+  /**
+   * Region selecting the regional aiplatform endpoint.
+   */
+  region: string;
+  /**
+   * Environment template every sandbox is created from; it carries the image and the ceilings.
+   */
+  template: string;
+};
+
+/** @internal */
+export const RemoteGcpSandboxBinding$inboundSchema: z.ZodType<
+  RemoteGcpSandboxBinding,
+  unknown
+> = z.object({
+  engine: z.string(),
+  maxLifetimeSeconds: z.nullable(z.int()).optional(),
+  region: z.string(),
+  template: z.string(),
+});
+
+export function remoteGcpSandboxBindingFromJSON(
+  jsonString: string,
+): SafeParseResult<RemoteGcpSandboxBinding, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => RemoteGcpSandboxBinding$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'RemoteGcpSandboxBinding' from JSON`,
+  );
+}

package/src/models/reportedoperation.ts

@@ -0,0 +1,52 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+
+/**
+ * A single operation the Operator currently has loaded. Opaque identifiers
+ *
+ * @remarks
+ * only — no tier, description, or other plugin business logic crosses into
+ * this public crate.
+ */
+export type ReportedOperation = {
+  /**
+   * Name of the operation within the plugin.
+   */
+  name: string;
+  /**
+   * Name of the plugin that owns this operation.
+   */
+  plugin: string;
+  /**
+   * Version of the plugin that owns this operation.
+   */
+  pluginVersion: string;
+};
+
+/** @internal */
+export type ReportedOperation$Outbound = {
+  name: string;
+  plugin: string;
+  pluginVersion: string;
+};
+
+/** @internal */
+export const ReportedOperation$outboundSchema: z.ZodType<
+  ReportedOperation$Outbound,
+  ReportedOperation
+> = z.object({
+  name: z.string(),
+  plugin: z.string(),
+  pluginVersion: z.string(),
+});
+
+export function reportedOperationToJSON(
+  reportedOperation: ReportedOperation,
+): string {
+  return JSON.stringify(
+    ReportedOperation$outboundSchema.parse(reportedOperation),
+  );
+}

package/src/models/resolvebindingresponse.ts

@@ -34,6 +34,10 @@ import {
   RemoteAzureKeyVaultKeyBinding,
   RemoteAzureKeyVaultKeyBinding$inboundSchema,
 } from "./remoteazurekeyvaultkeybinding.js";
+import {
+  RemoteAzureSandboxBinding,
+  RemoteAzureSandboxBinding$inboundSchema,
+} from "./remoteazuresandboxbinding.js";
 import {
   RemoteBlobStorageBinding,
   RemoteBlobStorageBinding$inboundSchema,
@@ -46,6 +50,10 @@ import {
   RemoteGcpCloudKmsKeyBinding,
   RemoteGcpCloudKmsKeyBinding$inboundSchema,
 } from "./remotegcpcloudkmskeybinding.js";
+import {
+  RemoteGcpSandboxBinding,
+  RemoteGcpSandboxBinding$inboundSchema,
+} from "./remotegcpsandboxbinding.js";
 import {
   RemoteGcpVertexAiBinding,
   RemoteGcpVertexAiBinding$inboundSchema,
@@ -59,6 +67,55 @@ import {
   RemoteS3StorageBinding$inboundSchema,
 } from "./remotes3storagebinding.js";
 
+/**
+ * GCP Agent Platform reasoning engine and a GCP access token.
+ */
+export type ResolveBindingResponseSandboxGcpAgentPlatform = {
+  /**
+   * Concrete Agent Platform topology returned to remote clients.
+   *
+   * @remarks
+   *
+   * No egress field, unlike the other two clouds: the policy lives on the environment template
+   * named below, so it travels with the template rather than as a flag the client must read.
+   */
+  binding: RemoteGcpSandboxBinding;
+  /**
+   * Response-safe GCP client configuration. Refreshable source credentials and
+   *
+   * @remarks
+   * service endpoint overrides cannot be represented by this type.
+   */
+  clientConfig: RemoteGcpClientConfig;
+  expiresAt: string;
+  service: "sandbox-gcp-agent-platform";
+};
+
+/**
+ * Azure Container Apps sandbox group and an Azure data-plane token.
+ */
+export type ResolveBindingResponseSandboxAzure = {
+  /**
+   * Concrete sandbox-group topology returned to remote clients.
+   *
+   * @remarks
+   *
+   * The ceilings travel because Azure applies them at create and nowhere else, so a remote caller
+   * that does not send them gets the data plane's default rather than the declared size. They are
+   * not a limit — a holder that ignores them gets whatever the data plane accepts.
+   */
+  binding: RemoteAzureSandboxBinding;
+  /**
+   * Response-safe Azure client configuration containing one storage-audience
+   *
+   * @remarks
+   * access token for the stack's Remote Bindings identity.
+   */
+  clientConfig: RemoteAzureClientConfig;
+  expiresAt: string;
+  service: "sandbox-azure";
+};
+
 /**
  * AWS Lambda MicroVM sandbox and an AWS session.
  */
@@ -255,7 +312,56 @@ export type ResolveBindingResponse =
   | ResolveBindingResponseBedrock
   | ResolveBindingResponseVertex
   | ResolveBindingResponseFoundry
-  | ResolveBindingResponseSandboxAws;
+  | ResolveBindingResponseSandboxAws
+  | ResolveBindingResponseSandboxAzure
+  | ResolveBindingResponseSandboxGcpAgentPlatform;
+
+/** @internal */
+export const ResolveBindingResponseSandboxGcpAgentPlatform$inboundSchema:
+  z.ZodType<ResolveBindingResponseSandboxGcpAgentPlatform, unknown> = z.object({
+    binding: RemoteGcpSandboxBinding$inboundSchema,
+    clientConfig: RemoteGcpClientConfig$inboundSchema,
+    expiresAt: z.string(),
+    service: z.literal("sandbox-gcp-agent-platform"),
+  });
+
+export function resolveBindingResponseSandboxGcpAgentPlatformFromJSON(
+  jsonString: string,
+): SafeParseResult<
+  ResolveBindingResponseSandboxGcpAgentPlatform,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      ResolveBindingResponseSandboxGcpAgentPlatform$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'ResolveBindingResponseSandboxGcpAgentPlatform' from JSON`,
+  );
+}
+
+/** @internal */
+export const ResolveBindingResponseSandboxAzure$inboundSchema: z.ZodType<
+  ResolveBindingResponseSandboxAzure,
+  unknown
+> = z.object({
+  binding: RemoteAzureSandboxBinding$inboundSchema,
+  clientConfig: RemoteAzureClientConfig$inboundSchema,
+  expiresAt: z.string(),
+  service: z.literal("sandbox-azure"),
+});
+
+export function resolveBindingResponseSandboxAzureFromJSON(
+  jsonString: string,
+): SafeParseResult<ResolveBindingResponseSandboxAzure, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      ResolveBindingResponseSandboxAzure$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'ResolveBindingResponseSandboxAzure' from JSON`,
+  );
+}
 
 /** @internal */
 export const ResolveBindingResponseSandboxAws$inboundSchema: z.ZodType<
@@ -485,6 +591,8 @@ export const ResolveBindingResponse$inboundSchema: z.ZodType<
   z.lazy(() => ResolveBindingResponseVertex$inboundSchema),
   z.lazy(() => ResolveBindingResponseFoundry$inboundSchema),
   z.lazy(() => ResolveBindingResponseSandboxAws$inboundSchema),
+  z.lazy(() => ResolveBindingResponseSandboxAzure$inboundSchema),
+  z.lazy(() => ResolveBindingResponseSandboxGcpAgentPlatform$inboundSchema),
 ]);
 
 export function resolveBindingResponseFromJSON(

package/src/models/resourceheartbeatdata.ts

@@ -121,11 +121,11 @@ import {
 
 export type ResourceHeartbeatDataSandbox = {
   /**
-   * Content-free telemetry about a sandbox's sessions.
+   * Content-free telemetry about what a sandbox resource is running.
    *
    * @remarks
    *
-   * Never anything from inside a session. A controller reaches only the cloud's management APIs,
+   * Never anything from inside a sandbox. A controller reaches only the cloud's management APIs,
    * and the whole point of the resource is that the control plane cannot see what runs in it.
    */
   data: SandboxHeartbeatData;

package/src/models/sandboxheartbeatdata.ts

@@ -40,11 +40,11 @@ export type SandboxHeartbeatDataKubernetesPods = {
 };
 
 /**
- * GCP: the Agent Platform template sessions are cut from, and the engine it hangs under.
+ * GCP: the Agent Platform template sandboxes are cut from, and the engine it hangs under.
  *
  * @remarks
  *
- * No session count: that needs `aiplatform.sandboxEnvironments.list`, which only the management
+ * No sandbox count: that needs `aiplatform.sandboxEnvironments.list`, which only the management
  * permission set holds. No template state either — emission is gated on reading it `ACTIVE`,
  * which is what `status` already says.
  */
@@ -55,14 +55,14 @@ export type SandboxHeartbeatDataGcpAgentPlatform = {
   engine: string;
   status: SandboxHeartbeatStatus;
   /**
-   * The template sessions are currently cut from.
+   * The template sandboxes are currently cut from.
    */
   templateId: string;
   backend: "gcpAgentPlatform";
 };
 
 /**
- * Azure: the sandbox group's ARM state. The data plane has no list operation, so a session count
+ * Azure: the sandbox group's ARM state. The data plane has no list operation, so a sandbox count
  *
  * @remarks
  * is not available here.
@@ -79,7 +79,7 @@ export type SandboxHeartbeatDataAzureSandboxGroup = {
  */
 export type SandboxHeartbeatDataAwsMicrovm = {
   /**
-   * Image the sessions belong to.
+   * Image the sandboxes belong to.
    */
   imageIdentifier: string;
   /**
@@ -87,7 +87,7 @@ export type SandboxHeartbeatDataAwsMicrovm = {
    *
    * @remarks
    *
-   * No session count sits beside it: counting means `lambda:ListMicrovms`, which authorizes
+   * No sandbox count sits beside it: counting means `lambda:ListMicrovms`, which authorizes
    * against no resource type and so cannot be granted without an account-wide reach the
    * permission sets refuse. A field only an over-broad grant could fill is a field whose
    * implementer ships AccessDenied into a customer's account.
@@ -98,11 +98,11 @@ export type SandboxHeartbeatDataAwsMicrovm = {
 };
 
 /**
- * Content-free telemetry about a sandbox's sessions.
+ * Content-free telemetry about what a sandbox resource is running.
  *
  * @remarks
  *
- * Never anything from inside a session. A controller reaches only the cloud's management APIs,
+ * Never anything from inside a sandbox. A controller reaches only the cloud's management APIs,
  * and the whole point of the resource is that the control plane cannot see what runs in it.
  */
 export type SandboxHeartbeatData =

package/src/models/targetoperationsbundleset.ts

@@ -0,0 +1,57 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { safeParse } from "../lib/schemas.js";
+import { Result as SafeParseResult } from "../types/fp.js";
+import { SDKValidationError } from "./errors/sdkvalidationerror.js";
+import {
+  OperationsBundleDownload,
+  OperationsBundleDownload$inboundSchema,
+} from "./operationsbundledownload.js";
+
+/**
+ * Target operations-bundle set for the Operator to converge its loaded
+ *
+ * @remarks
+ * plugin registry toward, independent of any release/config target — a
+ * plugin can be enabled with no release change, so this is not nested under
+ * `TargetDeployment`.
+ */
+export type TargetOperationsBundleSet = {
+  /**
+   * Presigned downloads for every bundle in the target set. The Operator
+   *
+   * @remarks
+   * fetches only the ones it doesn't already have loaded at the right
+   * version; already-loaded bundles are harmless to re-download.
+   */
+  bundles?: Array<OperationsBundleDownload> | undefined;
+  /**
+   * Hash identifying this exact enabled-plugin set. Compare against
+   *
+   * @remarks
+   * `OperationsReport.loadedBundleHash` to detect drift.
+   */
+  hash: string;
+};
+
+/** @internal */
+export const TargetOperationsBundleSet$inboundSchema: z.ZodType<
+  TargetOperationsBundleSet,
+  unknown
+> = z.object({
+  bundles: z.array(OperationsBundleDownload$inboundSchema).optional(),
+  hash: z.string(),
+});
+
+export function targetOperationsBundleSetFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetOperationsBundleSet, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetOperationsBundleSet$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetOperationsBundleSet' from JSON`,
+  );
+}

package/src/sdk/deployments.ts

@@ -62,7 +62,7 @@ export class Deployments extends ClientSDK {
   async deleteDeployment(
     request: operations.DeleteDeploymentRequest,
     options?: RequestOptions,
-  ): Promise<void> {
+  ): Promise<models.DeleteDeploymentResponse> {
     return unwrapAsync(deploymentsDeleteDeployment(
       this,
       request,