@alienplatform/manager-api 3.3.30 → 3.3.32

package/src/models/externalpostgressslmode.ts

@@ -0,0 +1,39 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { ClosedEnum } from "../types/enums.js";
+
+/**
+ * TLS policy for an operator-provided / BYO Postgres database.
+ *
+ * @remarks
+ *
+ * Unlike libpq's ambiguous `prefer` mode, both choices map exactly to the
+ * connection settings exposed by every supported SDK.
+ */
+export const ExternalPostgresSslMode = {
+  VerifyFull: "verify-full",
+  Disable: "disable",
+} as const;
+/**
+ * TLS policy for an operator-provided / BYO Postgres database.
+ *
+ * @remarks
+ *
+ * Unlike libpq's ambiguous `prefer` mode, both choices map exactly to the
+ * connection settings exposed by every supported SDK.
+ */
+export type ExternalPostgresSslMode = ClosedEnum<
+  typeof ExternalPostgresSslMode
+>;
+
+/** @internal */
+export const ExternalPostgresSslMode$inboundSchema: z.ZodEnum<
+  typeof ExternalPostgresSslMode
+> = z.enum(ExternalPostgresSslMode);
+/** @internal */
+export const ExternalPostgresSslMode$outboundSchema: z.ZodEnum<
+  typeof ExternalPostgresSslMode
+> = ExternalPostgresSslMode$inboundSchema;

package/src/models/index.ts

@@ -39,6 +39,11 @@ export * from "./azurestorageaccountendpoints.js";
 export * from "./azurestorageaccountheartbeatdata.js";
 export * from "./baseresource.js";
 export * from "./baseresourceoutputs.js";
+export * from "./bindingvalueoptionstringunion.js";
+export * from "./bindingvaluestringunion.js";
+export * from "./bindingvalueu16union.js";
+export * from "./bindingvalueu8union.js";
+export * from "./bindingvaluevecstringunion.js";
 export * from "./bodyspec.js";
 export * from "./buildheartbeatdata.js";
 export * from "./buildheartbeatstatus.js";
@@ -68,6 +73,7 @@ export * from "./computepoolselection.js";
 export * from "./computesettings.js";
 export * from "./containerheartbeatdata.js";
 export * from "./containerimageidentity.js";
+export * from "./containerresourceselection.js";
 export * from "./creatabletokentype.js";
 export * from "./createcommandrequest.js";
 export * from "./createcommandresponse.js";
@@ -81,10 +87,12 @@ export * from "./createtokenrequest.js";
 export * from "./createtokenresponse.js";
 export * from "./customcertificateconfig.js";
 export * from "./customdomainconfig.js";
+export * from "./custompluginoperationsconfig.js";
 export * from "./daemonheartbeatdata.js";
 export * from "./deletedeploymentaction.js";
 export * from "./deletedeploymentrequest.js";
 export * from "./deletedeploymentresponse.js";
+export * from "./deploymentacquireunavailablereason.js";
 export * from "./deploymentgroupminimal.js";
 export * from "./deploymentgroupresponse.js";
 export * from "./deploymentinforesponse.js";
@@ -101,6 +109,8 @@ export * from "./environmentvariable.js";
 export * from "./environmentvariabletype.js";
 export * from "./executionclaim.js";
 export * from "./exposeprotocol.js";
+export * from "./externalbindingunion.js";
+export * from "./externalpostgressslmode.js";
 export * from "./failuredomainselection.js";
 export * from "./gcpcloudkmskeyheartbeatdata.js";
 export * from "./gcpcredentials.js";
@@ -186,13 +196,18 @@ export * from "./observedcounts.js";
 export * from "./observedhealth.js";
 export * from "./observedinventorybatch.js";
 export * from "./observedresourcesample.js";
+export * from "./operationapprovaldecision.js";
+export * from "./operationapprovalunion.js";
 export * from "./operationsbundledownload.js";
+export * from "./operationsconfig.js";
+export * from "./operationsettingvalueunion.js";
 export * from "./operationsreport.js";
 export * from "./operatorcapabilityreport.js";
 export * from "./operatorcapabilitystate.js";
 export * from "./operatorimagereport.js";
 export * from "./operatorimagesource.js";
 export * from "./platformenum.js";
+export * from "./pluginoperationsconfig.js";
 export * from "./postgresheartbeatdata.js";
 export * from "./postgresheartbeatstatus.js";
 export * from "./presignedoperation.js";
@@ -256,6 +271,7 @@ export * from "./responsehandling.js";
 export * from "./sandboxheartbeatdata.js";
 export * from "./sandboxheartbeatstatus.js";
 export * from "./scopeinfo.js";
+export * from "./secretreference.js";
 export * from "./security.js";
 export * from "./serviceaccountheartbeatdata.js";
 export * from "./serviceaccountheartbeatstatus.js";
@@ -283,6 +299,7 @@ export * from "./telemetrymode.js";
 export * from "./tokenresponse.js";
 export * from "./tooldownload.js";
 export * from "./tracecontext.js";
+export * from "./unacquireddeployment.js";
 export * from "./updatesmode.js";
 export * from "./uploadcompleterequest.js";
 export * from "./uploadcompleteresponse.js";

package/src/models/operationapprovaldecision.ts

@@ -0,0 +1,25 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { ClosedEnum } from "../types/enums.js";
+
+/**
+ * Whether matching operations run without approval.
+ */
+export const OperationApprovalDecision = {
+  Auto: "auto",
+  Manual: "manual",
+} as const;
+/**
+ * Whether matching operations run without approval.
+ */
+export type OperationApprovalDecision = ClosedEnum<
+  typeof OperationApprovalDecision
+>;
+
+/** @internal */
+export const OperationApprovalDecision$outboundSchema: z.ZodEnum<
+  typeof OperationApprovalDecision
+> = z.enum(OperationApprovalDecision);

package/src/models/operationapprovalunion.ts

@@ -0,0 +1,78 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import {
+  OperationApprovalDecision,
+  OperationApprovalDecision$outboundSchema,
+} from "./operationapprovaldecision.js";
+
+/**
+ * A decision plus the highest risk tier a wildcard access request may cover.
+ */
+export type OperationApproval = {
+  /**
+   * Whether matching operations run without approval.
+   */
+  decision: OperationApprovalDecision;
+  /**
+   * Highest risk tier (`read-only`, `mutating`, `destructive`) a wildcard
+   *
+   * @remarks
+   * access request for these operations may cover.
+   */
+  maxRisk?: string | null | undefined;
+};
+
+/**
+ * Approval rule for the operations a pattern matches.
+ */
+export type OperationApprovalUnion =
+  | OperationApproval
+  | OperationApprovalDecision;
+
+/** @internal */
+export type OperationApproval$Outbound = {
+  decision: string;
+  maxRisk?: string | null | undefined;
+};
+
+/** @internal */
+export const OperationApproval$outboundSchema: z.ZodType<
+  OperationApproval$Outbound,
+  OperationApproval
+> = z.object({
+  decision: OperationApprovalDecision$outboundSchema,
+  maxRisk: z.nullable(z.string()).optional(),
+});
+
+export function operationApprovalToJSON(
+  operationApproval: OperationApproval,
+): string {
+  return JSON.stringify(
+    OperationApproval$outboundSchema.parse(operationApproval),
+  );
+}
+
+/** @internal */
+export type OperationApprovalUnion$Outbound =
+  | OperationApproval$Outbound
+  | string;
+
+/** @internal */
+export const OperationApprovalUnion$outboundSchema: z.ZodType<
+  OperationApprovalUnion$Outbound,
+  OperationApprovalUnion
+> = z.union([
+  z.lazy(() => OperationApproval$outboundSchema),
+  OperationApprovalDecision$outboundSchema,
+]);
+
+export function operationApprovalUnionToJSON(
+  operationApprovalUnion: OperationApprovalUnion,
+): string {
+  return JSON.stringify(
+    OperationApprovalUnion$outboundSchema.parse(operationApprovalUnion),
+  );
+}

package/src/models/operationsbundledownload.ts

@@ -16,6 +16,13 @@ import { SDKValidationError } from "./errors/sdkvalidationerror.js";
  * registry proxy's credential-injection pattern.
  */
 export type OperationsBundleDownload = {
+  /**
+   * Environment the plugin process runs with: its settings, which may hold
+   *
+   * @remarks
+   * secrets. Store only in encrypted state, and never log the values.
+   */
+  env?: { [k: string]: string } | undefined;
   /**
    * Plugin name this bundle provides.
    */
@@ -35,6 +42,7 @@ export const OperationsBundleDownload$inboundSchema: z.ZodType<
   OperationsBundleDownload,
   unknown
 > = z.object({
+  env: z.record(z.string(), z.string()).optional(),
   plugin: z.string(),
   pluginVersion: z.string(),
   url: z.string(),

package/src/models/operationsconfig.ts

@@ -0,0 +1,53 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import {
+  CustomPluginOperationsConfig,
+  CustomPluginOperationsConfig$Outbound,
+  CustomPluginOperationsConfig$outboundSchema,
+} from "./custompluginoperationsconfig.js";
+import {
+  PluginOperationsConfig,
+  PluginOperationsConfig$Outbound,
+  PluginOperationsConfig$outboundSchema,
+} from "./pluginoperationsconfig.js";
+
+/**
+ * Operations declared by a stack, or by an Operator installed on its own.
+ */
+export type OperationsConfig = {
+  /**
+   * Published custom plugins, pinned to exact versions.
+   */
+  custom?: Array<CustomPluginOperationsConfig> | undefined;
+  /**
+   * Built-in plugins, by plugin name.
+   */
+  plugins?: { [k: string]: PluginOperationsConfig } | undefined;
+};
+
+/** @internal */
+export type OperationsConfig$Outbound = {
+  custom?: Array<CustomPluginOperationsConfig$Outbound> | undefined;
+  plugins?: { [k: string]: PluginOperationsConfig$Outbound } | undefined;
+};
+
+/** @internal */
+export const OperationsConfig$outboundSchema: z.ZodType<
+  OperationsConfig$Outbound,
+  OperationsConfig
+> = z.object({
+  custom: z.array(CustomPluginOperationsConfig$outboundSchema).optional(),
+  plugins: z.record(z.string(), PluginOperationsConfig$outboundSchema)
+    .optional(),
+});
+
+export function operationsConfigToJSON(
+  operationsConfig: OperationsConfig,
+): string {
+  return JSON.stringify(
+    OperationsConfig$outboundSchema.parse(operationsConfig),
+  );
+}

package/src/models/operationsettingvalueunion.ts

@@ -0,0 +1,136 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+
+/**
+ * An environment variable of the Operator process. Only for an Operator
+ *
+ * @remarks
+ * installed on its own, so secrets stay in its environment.
+ */
+export type OperationSettingValue3 = {
+  /**
+   * Environment variable name.
+   */
+  env: string;
+};
+
+/**
+ * Stack resources the plugin may act on, such as buckets or queues.
+ */
+export type OperationSettingValue2 = {
+  /**
+   * Resource ids in the same stack.
+   */
+  resources: Array<string>;
+};
+
+/**
+ * The value of a stack input.
+ */
+export type OperationSettingValue1 = {
+  /**
+   * Stack input id.
+   */
+  input: string;
+};
+
+/**
+ * Value of one plugin setting.
+ */
+export type OperationSettingValueUnion =
+  | OperationSettingValue1
+  | OperationSettingValue2
+  | OperationSettingValue3
+  | string;
+
+/** @internal */
+export type OperationSettingValue3$Outbound = {
+  env: string;
+};
+
+/** @internal */
+export const OperationSettingValue3$outboundSchema: z.ZodType<
+  OperationSettingValue3$Outbound,
+  OperationSettingValue3
+> = z.object({
+  env: z.string(),
+});
+
+export function operationSettingValue3ToJSON(
+  operationSettingValue3: OperationSettingValue3,
+): string {
+  return JSON.stringify(
+    OperationSettingValue3$outboundSchema.parse(operationSettingValue3),
+  );
+}
+
+/** @internal */
+export type OperationSettingValue2$Outbound = {
+  resources: Array<string>;
+};
+
+/** @internal */
+export const OperationSettingValue2$outboundSchema: z.ZodType<
+  OperationSettingValue2$Outbound,
+  OperationSettingValue2
+> = z.object({
+  resources: z.array(z.string()),
+});
+
+export function operationSettingValue2ToJSON(
+  operationSettingValue2: OperationSettingValue2,
+): string {
+  return JSON.stringify(
+    OperationSettingValue2$outboundSchema.parse(operationSettingValue2),
+  );
+}
+
+/** @internal */
+export type OperationSettingValue1$Outbound = {
+  input: string;
+};
+
+/** @internal */
+export const OperationSettingValue1$outboundSchema: z.ZodType<
+  OperationSettingValue1$Outbound,
+  OperationSettingValue1
+> = z.object({
+  input: z.string(),
+});
+
+export function operationSettingValue1ToJSON(
+  operationSettingValue1: OperationSettingValue1,
+): string {
+  return JSON.stringify(
+    OperationSettingValue1$outboundSchema.parse(operationSettingValue1),
+  );
+}
+
+/** @internal */
+export type OperationSettingValueUnion$Outbound =
+  | OperationSettingValue1$Outbound
+  | OperationSettingValue2$Outbound
+  | OperationSettingValue3$Outbound
+  | string;
+
+/** @internal */
+export const OperationSettingValueUnion$outboundSchema: z.ZodType<
+  OperationSettingValueUnion$Outbound,
+  OperationSettingValueUnion
+> = z.union([
+  z.lazy(() => OperationSettingValue1$outboundSchema),
+  z.lazy(() => OperationSettingValue2$outboundSchema),
+  z.lazy(() => OperationSettingValue3$outboundSchema),
+  z.string(),
+]);
+
+export function operationSettingValueUnionToJSON(
+  operationSettingValueUnion: OperationSettingValueUnion,
+): string {
+  return JSON.stringify(
+    OperationSettingValueUnion$outboundSchema.parse(operationSettingValueUnion),
+  );
+}

package/src/models/pluginoperationsconfig.ts

@@ -0,0 +1,57 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import {
+  OperationApprovalUnion,
+  OperationApprovalUnion$Outbound,
+  OperationApprovalUnion$outboundSchema,
+} from "./operationapprovalunion.js";
+import {
+  OperationSettingValueUnion,
+  OperationSettingValueUnion$Outbound,
+  OperationSettingValueUnion$outboundSchema,
+} from "./operationsettingvalueunion.js";
+
+/**
+ * Settings and approval rules for one plugin.
+ */
+export type PluginOperationsConfig = {
+  /**
+   * Approval rule per operation: an operation name, or `*` for all of them.
+   *
+   * @remarks
+   * Operations no rule matches need approval.
+   */
+  approval?: { [k: string]: OperationApprovalUnion } | undefined;
+  /**
+   * Values for the settings the plugin's manifest declares.
+   */
+  settings?: { [k: string]: OperationSettingValueUnion } | undefined;
+};
+
+/** @internal */
+export type PluginOperationsConfig$Outbound = {
+  approval?: { [k: string]: OperationApprovalUnion$Outbound } | undefined;
+  settings?: { [k: string]: OperationSettingValueUnion$Outbound } | undefined;
+};
+
+/** @internal */
+export const PluginOperationsConfig$outboundSchema: z.ZodType<
+  PluginOperationsConfig$Outbound,
+  PluginOperationsConfig
+> = z.object({
+  approval: z.record(z.string(), OperationApprovalUnion$outboundSchema)
+    .optional(),
+  settings: z.record(z.string(), OperationSettingValueUnion$outboundSchema)
+    .optional(),
+});
+
+export function pluginOperationsConfigToJSON(
+  pluginOperationsConfig: PluginOperationsConfig,
+): string {
+  return JSON.stringify(
+    PluginOperationsConfig$outboundSchema.parse(pluginOperationsConfig),
+  );
+}

package/src/models/secretreference.ts

@@ -0,0 +1,54 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { safeParse } from "../lib/schemas.js";
+import { Result as SafeParseResult } from "../types/fp.js";
+import { SDKValidationError } from "./errors/sdkvalidationerror.js";
+
+/**
+ * Reference to a Kubernetes Secret
+ */
+export type SecretReference = {
+  key: string;
+  name: string;
+};
+
+/** @internal */
+export const SecretReference$inboundSchema: z.ZodType<
+  SecretReference,
+  unknown
+> = z.object({
+  key: z.string(),
+  name: z.string(),
+});
+/** @internal */
+export type SecretReference$Outbound = {
+  key: string;
+  name: string;
+};
+
+/** @internal */
+export const SecretReference$outboundSchema: z.ZodType<
+  SecretReference$Outbound,
+  SecretReference
+> = z.object({
+  key: z.string(),
+  name: z.string(),
+});
+
+export function secretReferenceToJSON(
+  secretReference: SecretReference,
+): string {
+  return JSON.stringify(SecretReference$outboundSchema.parse(secretReference));
+}
+export function secretReferenceFromJSON(
+  jsonString: string,
+): SafeParseResult<SecretReference, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => SecretReference$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'SecretReference' from JSON`,
+  );
+}

package/src/models/stacksettings.ts

@@ -28,6 +28,12 @@ import {
   EndpointAccess$outboundSchema,
 } from "./endpointaccess.js";
 import { SDKValidationError } from "./errors/sdkvalidationerror.js";
+import {
+  ExternalBindingUnion,
+  ExternalBindingUnion$inboundSchema,
+  ExternalBindingUnion$Outbound,
+  ExternalBindingUnion$outboundSchema,
+} from "./externalbindingunion.js";
 import {
   HeartbeatsMode,
   HeartbeatsMode$inboundSchema,
@@ -56,16 +62,6 @@ import {
   UpdatesMode$outboundSchema,
 } from "./updatesmode.js";
 
-/**
- * External bindings for pre-existing infrastructure.
- *
- * @remarks
- * Allows using existing resources (MinIO, Redis, shared Container Apps
- * Environment, etc.) instead of having Alien provision them.
- * Required for Kubernetes platform, optional for cloud platforms.
- */
-export type ExternalBindings = {};
-
 /**
  * User-customizable deployment settings specified at deploy time.
  *
@@ -89,15 +85,7 @@ export type StackSettings = {
    * Reachability of the deployment's public endpoints, fixed at setup.
    */
   endpointAccess?: EndpointAccess | undefined;
-  /**
-   * External bindings for pre-existing infrastructure.
-   *
-   * @remarks
-   * Allows using existing resources (MinIO, Redis, shared Container Apps
-   * Environment, etc.) instead of having Alien provision them.
-   * Required for Kubernetes platform, optional for cloud platforms.
-   */
-  externalBindings?: ExternalBindings | null | undefined;
+  externalBindings?: { [k: string]: ExternalBindingUnion } | null | undefined;
   /**
    * How heartbeat health checks are handled.
    */
@@ -124,37 +112,6 @@ export type StackSettings = {
   updates?: UpdatesMode | undefined;
 };
 
-/** @internal */
-export const ExternalBindings$inboundSchema: z.ZodType<
-  ExternalBindings,
-  unknown
-> = z.object({});
-/** @internal */
-export type ExternalBindings$Outbound = {};
-
-/** @internal */
-export const ExternalBindings$outboundSchema: z.ZodType<
-  ExternalBindings$Outbound,
-  ExternalBindings
-> = z.object({});
-
-export function externalBindingsToJSON(
-  externalBindings: ExternalBindings,
-): string {
-  return JSON.stringify(
-    ExternalBindings$outboundSchema.parse(externalBindings),
-  );
-}
-export function externalBindingsFromJSON(
-  jsonString: string,
-): SafeParseResult<ExternalBindings, SDKValidationError> {
-  return safeParse(
-    jsonString,
-    (x) => ExternalBindings$inboundSchema.parse(JSON.parse(x)),
-    `Failed to parse 'ExternalBindings' from JSON`,
-  );
-}
-
 /** @internal */
 export const StackSettings$inboundSchema: z.ZodType<StackSettings, unknown> = z
   .object({
@@ -162,8 +119,9 @@ export const StackSettings$inboundSchema: z.ZodType<StackSettings, unknown> = z
     deploymentModel: DeploymentModel$inboundSchema.optional(),
     domains: z.nullable(DomainSettings$inboundSchema).optional(),
     endpointAccess: EndpointAccess$inboundSchema.optional(),
-    externalBindings: z.nullable(z.lazy(() => ExternalBindings$inboundSchema))
-      .optional(),
+    externalBindings: z.nullable(
+      z.record(z.string(), ExternalBindingUnion$inboundSchema),
+    ).optional(),
     heartbeats: HeartbeatsMode$inboundSchema.optional(),
     kubernetes: z.nullable(KubernetesSettings$inboundSchema).optional(),
     network: z.nullable(NetworkSettings$inboundSchema).optional(),
@@ -179,7 +137,10 @@ export type StackSettings$Outbound = {
   deploymentModel?: string | undefined;
   domains?: DomainSettings$Outbound | null | undefined;
   endpointAccess?: string | undefined;
-  externalBindings?: ExternalBindings$Outbound | null | undefined;
+  externalBindings?:
+    | { [k: string]: ExternalBindingUnion$Outbound }
+    | null
+    | undefined;
   heartbeats?: string | undefined;
   kubernetes?: KubernetesSettings$Outbound | null | undefined;
   network?: NetworkSettings$Outbound | null | undefined;
@@ -197,8 +158,9 @@ export const StackSettings$outboundSchema: z.ZodType<
   deploymentModel: DeploymentModel$outboundSchema.optional(),
   domains: z.nullable(DomainSettings$outboundSchema).optional(),
   endpointAccess: EndpointAccess$outboundSchema.optional(),
-  externalBindings: z.nullable(z.lazy(() => ExternalBindings$outboundSchema))
-    .optional(),
+  externalBindings: z.nullable(
+    z.record(z.string(), ExternalBindingUnion$outboundSchema),
+  ).optional(),
   heartbeats: HeartbeatsMode$outboundSchema.optional(),
   kubernetes: z.nullable(KubernetesSettings$outboundSchema).optional(),
   network: z.nullable(NetworkSettings$outboundSchema).optional(),