@alienplatform/platform-api 1.3.4 → 1.4.0

package/esm/models/syncacquireresponse.d.ts

@@ -54,6 +54,17 @@ export type SyncAcquireResponseCurrentReleaseOverrideAwBinding = {
      */
     stack?: SyncAcquireResponseCurrentReleaseOverrideAwStack | undefined;
 };
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export declare const SyncAcquireResponseCurrentReleaseOverrideEffect: {
+    readonly Allow: "Allow";
+    readonly Deny: "Deny";
+};
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export type SyncAcquireResponseCurrentReleaseOverrideEffect = ClosedEnum<typeof SyncAcquireResponseCurrentReleaseOverrideEffect>;
 /**
  * Grant permissions for a specific cloud platform
  */
@@ -67,9 +78,17 @@ export type SyncAcquireResponseCurrentReleaseOverrideAwGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * AWS-specific platform permission configuration
@@ -79,10 +98,22 @@ export type SyncAcquireResponseCurrentReleaseOverrideAw = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseCurrentReleaseOverrideAwBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
+    /**
+     * IAM effect. Defaults to Allow.
+     */
+    effect?: SyncAcquireResponseCurrentReleaseOverrideEffect | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseCurrentReleaseOverrideAwGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Azure-specific binding specification
@@ -128,9 +159,17 @@ export type SyncAcquireResponseCurrentReleaseOverrideAzureGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * Azure-specific platform permission configuration
@@ -140,10 +179,18 @@ export type SyncAcquireResponseCurrentReleaseOverrideAzure = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseCurrentReleaseOverrideAzureBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseCurrentReleaseOverrideAzureGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * GCP IAM condition
@@ -207,9 +254,17 @@ export type SyncAcquireResponseCurrentReleaseOverrideGcpGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * GCP-specific platform permission configuration
@@ -219,10 +274,18 @@ export type SyncAcquireResponseCurrentReleaseOverrideGcp = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseCurrentReleaseOverrideGcpBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseCurrentReleaseOverrideGcpGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Platform-specific permission configurations
@@ -320,6 +383,17 @@ export type SyncAcquireResponseCurrentReleaseExtendAwBinding = {
      */
     stack?: SyncAcquireResponseCurrentReleaseExtendAwStack | undefined;
 };
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export declare const SyncAcquireResponseCurrentReleaseExtendEffect: {
+    readonly Allow: "Allow";
+    readonly Deny: "Deny";
+};
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export type SyncAcquireResponseCurrentReleaseExtendEffect = ClosedEnum<typeof SyncAcquireResponseCurrentReleaseExtendEffect>;
 /**
  * Grant permissions for a specific cloud platform
  */
@@ -333,9 +407,17 @@ export type SyncAcquireResponseCurrentReleaseExtendAwGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * AWS-specific platform permission configuration
@@ -345,10 +427,22 @@ export type SyncAcquireResponseCurrentReleaseExtendAw = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseCurrentReleaseExtendAwBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
+    /**
+     * IAM effect. Defaults to Allow.
+     */
+    effect?: SyncAcquireResponseCurrentReleaseExtendEffect | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseCurrentReleaseExtendAwGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Azure-specific binding specification
@@ -394,9 +488,17 @@ export type SyncAcquireResponseCurrentReleaseExtendAzureGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * Azure-specific platform permission configuration
@@ -406,10 +508,18 @@ export type SyncAcquireResponseCurrentReleaseExtendAzure = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseCurrentReleaseExtendAzureBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseCurrentReleaseExtendAzureGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * GCP IAM condition
@@ -473,9 +583,17 @@ export type SyncAcquireResponseCurrentReleaseExtendGcpGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * GCP-specific platform permission configuration
@@ -485,10 +603,18 @@ export type SyncAcquireResponseCurrentReleaseExtendGcp = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseCurrentReleaseExtendGcpBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseCurrentReleaseExtendGcpGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Platform-specific permission configurations
@@ -590,6 +716,17 @@ export type SyncAcquireResponseCurrentReleaseProfileAwBinding = {
      */
     stack?: SyncAcquireResponseCurrentReleaseProfileAwStack | undefined;
 };
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export declare const SyncAcquireResponseCurrentReleaseProfileEffect: {
+    readonly Allow: "Allow";
+    readonly Deny: "Deny";
+};
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export type SyncAcquireResponseCurrentReleaseProfileEffect = ClosedEnum<typeof SyncAcquireResponseCurrentReleaseProfileEffect>;
 /**
  * Grant permissions for a specific cloud platform
  */
@@ -603,9 +740,17 @@ export type SyncAcquireResponseCurrentReleaseProfileAwGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * AWS-specific platform permission configuration
@@ -615,10 +760,22 @@ export type SyncAcquireResponseCurrentReleaseProfileAw = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseCurrentReleaseProfileAwBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
+    /**
+     * IAM effect. Defaults to Allow.
+     */
+    effect?: SyncAcquireResponseCurrentReleaseProfileEffect | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseCurrentReleaseProfileAwGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Azure-specific binding specification
@@ -664,9 +821,17 @@ export type SyncAcquireResponseCurrentReleaseProfileAzureGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * Azure-specific platform permission configuration
@@ -676,10 +841,18 @@ export type SyncAcquireResponseCurrentReleaseProfileAzure = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseCurrentReleaseProfileAzureBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseCurrentReleaseProfileAzureGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * GCP IAM condition
@@ -743,9 +916,17 @@ export type SyncAcquireResponseCurrentReleaseProfileGcpGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * GCP-specific platform permission configuration
@@ -755,10 +936,18 @@ export type SyncAcquireResponseCurrentReleaseProfileGcp = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseCurrentReleaseProfileGcpBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseCurrentReleaseProfileGcpGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Platform-specific permission configurations
@@ -853,7 +1042,6 @@ export type SyncAcquireResponseCurrentReleaseDependency = {
 export declare const SyncAcquireResponseCurrentReleaseLifecycle: {
     readonly Frozen: "frozen";
     readonly Live: "live";
-    readonly LiveOnSetup: "live-on-setup";
 };
 /**
  * Describes the lifecycle of a resource within a stack, determining how it's managed and deployed.
@@ -884,6 +1072,21 @@ export type SyncAcquireResponseCurrentReleaseResources = {
      */
     remoteAccess?: boolean | undefined;
 };
+/**
+ * Represents the target cloud platform.
+ */
+export declare const SyncAcquireResponseCurrentReleaseSupportedPlatform: {
+    readonly Aws: "aws";
+    readonly Gcp: "gcp";
+    readonly Azure: "azure";
+    readonly Kubernetes: "kubernetes";
+    readonly Local: "local";
+    readonly Test: "test";
+};
+/**
+ * Represents the target cloud platform.
+ */
+export type SyncAcquireResponseCurrentReleaseSupportedPlatform = ClosedEnum<typeof SyncAcquireResponseCurrentReleaseSupportedPlatform>;
 /**
  * A bag of resources, unaware of any cloud.
  */
@@ -902,6 +1105,10 @@ export type SyncAcquireResponseCurrentReleaseStack = {
     resources: {
         [k: string]: SyncAcquireResponseCurrentReleaseResources;
     };
+    /**
+     * Which platforms this stack supports. When None, all platforms are supported.
+     */
+    supportedPlatforms?: Array<SyncAcquireResponseCurrentReleaseSupportedPlatform> | null | undefined;
 };
 /**
  * Release metadata
@@ -1045,6 +1252,58 @@ export declare const SyncAcquireResponseCurrentPlatform: {
  * Represents the target cloud platform.
  */
 export type SyncAcquireResponseCurrentPlatform = ClosedEnum<typeof SyncAcquireResponseCurrentPlatform>;
+/**
+ * Scope for a delete operation.
+ *
+ * @remarks
+ *
+ * Full deletes are setup/admin owned and may remove both Frozen and Live
+ * resources. Live-only deletes are used by setup handoff resources
+ * (Terraform/CloudFormation) so Alien removes only the resources it owns
+ * before setup tears down Frozen resources.
+ */
+export declare const SyncAcquireResponseDeleteScopeEnum: {
+    readonly Full: "full";
+    readonly LiveOnly: "liveOnly";
+};
+/**
+ * Scope for a delete operation.
+ *
+ * @remarks
+ *
+ * Full deletes are setup/admin owned and may remove both Frozen and Live
+ * resources. Live-only deletes are used by setup handoff resources
+ * (Terraform/CloudFormation) so Alien removes only the resources it owns
+ * before setup tears down Frozen resources.
+ */
+export type SyncAcquireResponseDeleteScopeEnum = ClosedEnum<typeof SyncAcquireResponseDeleteScopeEnum>;
+export type SyncAcquireResponseDeleteScopeUnion = SyncAcquireResponseDeleteScopeEnum | any;
+/**
+ * Scope for a delete operation.
+ *
+ * @remarks
+ *
+ * Full deletes are setup/admin owned and may remove both Frozen and Live
+ * resources. Live-only deletes are used by setup handoff resources
+ * (Terraform/CloudFormation) so Alien removes only the resources it owns
+ * before setup tears down Frozen resources.
+ */
+export declare const SyncAcquireResponsePendingDeleteScopeEnum: {
+    readonly Full: "full";
+    readonly LiveOnly: "liveOnly";
+};
+/**
+ * Scope for a delete operation.
+ *
+ * @remarks
+ *
+ * Full deletes are setup/admin owned and may remove both Frozen and Live
+ * resources. Live-only deletes are used by setup handoff resources
+ * (Terraform/CloudFormation) so Alien removes only the resources it owns
+ * before setup tears down Frozen resources.
+ */
+export type SyncAcquireResponsePendingDeleteScopeEnum = ClosedEnum<typeof SyncAcquireResponsePendingDeleteScopeEnum>;
+export type SyncAcquireResponsePendingDeleteScopeUnion = SyncAcquireResponsePendingDeleteScopeEnum | any;
 export declare const SyncAcquireResponsePreparedStackManagementEnum: {
     readonly Auto: "auto";
 };
@@ -1096,6 +1355,17 @@ export type SyncAcquireResponsePreparedStackOverrideAwBinding = {
      */
     stack?: SyncAcquireResponsePreparedStackOverrideAwStack | undefined;
 };
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export declare const SyncAcquireResponsePreparedStackOverrideEffect: {
+    readonly Allow: "Allow";
+    readonly Deny: "Deny";
+};
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export type SyncAcquireResponsePreparedStackOverrideEffect = ClosedEnum<typeof SyncAcquireResponsePreparedStackOverrideEffect>;
 /**
  * Grant permissions for a specific cloud platform
  */
@@ -1109,9 +1379,17 @@ export type SyncAcquireResponsePreparedStackOverrideAwGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * AWS-specific platform permission configuration
@@ -1121,10 +1399,22 @@ export type SyncAcquireResponsePreparedStackOverrideAw = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponsePreparedStackOverrideAwBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
+    /**
+     * IAM effect. Defaults to Allow.
+     */
+    effect?: SyncAcquireResponsePreparedStackOverrideEffect | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponsePreparedStackOverrideAwGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Azure-specific binding specification
@@ -1170,9 +1460,17 @@ export type SyncAcquireResponsePreparedStackOverrideAzureGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * Azure-specific platform permission configuration
@@ -1182,10 +1480,18 @@ export type SyncAcquireResponsePreparedStackOverrideAzure = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponsePreparedStackOverrideAzureBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponsePreparedStackOverrideAzureGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * GCP IAM condition
@@ -1249,9 +1555,17 @@ export type SyncAcquireResponsePreparedStackOverrideGcpGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * GCP-specific platform permission configuration
@@ -1261,10 +1575,18 @@ export type SyncAcquireResponsePreparedStackOverrideGcp = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponsePreparedStackOverrideGcpBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponsePreparedStackOverrideGcpGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Platform-specific permission configurations
@@ -1362,6 +1684,17 @@ export type SyncAcquireResponsePreparedStackExtendAwBinding = {
      */
     stack?: SyncAcquireResponsePreparedStackExtendAwStack | undefined;
 };
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export declare const SyncAcquireResponsePreparedStackExtendEffect: {
+    readonly Allow: "Allow";
+    readonly Deny: "Deny";
+};
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export type SyncAcquireResponsePreparedStackExtendEffect = ClosedEnum<typeof SyncAcquireResponsePreparedStackExtendEffect>;
 /**
  * Grant permissions for a specific cloud platform
  */
@@ -1375,9 +1708,17 @@ export type SyncAcquireResponsePreparedStackExtendAwGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * AWS-specific platform permission configuration
@@ -1387,10 +1728,22 @@ export type SyncAcquireResponsePreparedStackExtendAw = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponsePreparedStackExtendAwBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
+    /**
+     * IAM effect. Defaults to Allow.
+     */
+    effect?: SyncAcquireResponsePreparedStackExtendEffect | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponsePreparedStackExtendAwGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Azure-specific binding specification
@@ -1436,9 +1789,17 @@ export type SyncAcquireResponsePreparedStackExtendAzureGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * Azure-specific platform permission configuration
@@ -1448,10 +1809,18 @@ export type SyncAcquireResponsePreparedStackExtendAzure = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponsePreparedStackExtendAzureBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponsePreparedStackExtendAzureGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * GCP IAM condition
@@ -1515,9 +1884,17 @@ export type SyncAcquireResponsePreparedStackExtendGcpGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * GCP-specific platform permission configuration
@@ -1527,10 +1904,18 @@ export type SyncAcquireResponsePreparedStackExtendGcp = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponsePreparedStackExtendGcpBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponsePreparedStackExtendGcpGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Platform-specific permission configurations
@@ -1632,6 +2017,17 @@ export type SyncAcquireResponsePreparedStackProfileAwBinding = {
      */
     stack?: SyncAcquireResponsePreparedStackProfileAwStack | undefined;
 };
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export declare const SyncAcquireResponsePreparedStackProfileEffect: {
+    readonly Allow: "Allow";
+    readonly Deny: "Deny";
+};
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export type SyncAcquireResponsePreparedStackProfileEffect = ClosedEnum<typeof SyncAcquireResponsePreparedStackProfileEffect>;
 /**
  * Grant permissions for a specific cloud platform
  */
@@ -1645,9 +2041,17 @@ export type SyncAcquireResponsePreparedStackProfileAwGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * AWS-specific platform permission configuration
@@ -1657,10 +2061,22 @@ export type SyncAcquireResponsePreparedStackProfileAw = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponsePreparedStackProfileAwBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
+    /**
+     * IAM effect. Defaults to Allow.
+     */
+    effect?: SyncAcquireResponsePreparedStackProfileEffect | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponsePreparedStackProfileAwGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Azure-specific binding specification
@@ -1706,9 +2122,17 @@ export type SyncAcquireResponsePreparedStackProfileAzureGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * Azure-specific platform permission configuration
@@ -1718,10 +2142,18 @@ export type SyncAcquireResponsePreparedStackProfileAzure = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponsePreparedStackProfileAzureBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponsePreparedStackProfileAzureGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * GCP IAM condition
@@ -1785,9 +2217,17 @@ export type SyncAcquireResponsePreparedStackProfileGcpGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * GCP-specific platform permission configuration
@@ -1797,10 +2237,18 @@ export type SyncAcquireResponsePreparedStackProfileGcp = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponsePreparedStackProfileGcpBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponsePreparedStackProfileGcpGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Platform-specific permission configurations
@@ -1895,7 +2343,6 @@ export type SyncAcquireResponsePreparedStackDependency = {
 export declare const SyncAcquireResponsePreparedStackLifecycle: {
     readonly Frozen: "frozen";
     readonly Live: "live";
-    readonly LiveOnSetup: "live-on-setup";
 };
 /**
  * Describes the lifecycle of a resource within a stack, determining how it's managed and deployed.
@@ -1926,6 +2373,21 @@ export type SyncAcquireResponsePreparedStackResources = {
      */
     remoteAccess?: boolean | undefined;
 };
+/**
+ * Represents the target cloud platform.
+ */
+export declare const SyncAcquireResponsePreparedStackSupportedPlatform: {
+    readonly Aws: "aws";
+    readonly Gcp: "gcp";
+    readonly Azure: "azure";
+    readonly Kubernetes: "kubernetes";
+    readonly Local: "local";
+    readonly Test: "test";
+};
+/**
+ * Represents the target cloud platform.
+ */
+export type SyncAcquireResponsePreparedStackSupportedPlatform = ClosedEnum<typeof SyncAcquireResponsePreparedStackSupportedPlatform>;
 /**
  * A bag of resources, unaware of any cloud.
  */
@@ -1944,6 +2406,10 @@ export type SyncAcquireResponsePreparedStack = {
     resources: {
         [k: string]: SyncAcquireResponsePreparedStackResources;
     };
+    /**
+     * Which platforms this stack supports. When None, all platforms are supported.
+     */
+    supportedPlatforms?: Array<SyncAcquireResponsePreparedStackSupportedPlatform> | null | undefined;
 };
 export type SyncAcquireResponsePreparedStackUnion = SyncAcquireResponsePreparedStack | any;
 /**
@@ -1954,6 +2420,7 @@ export type SyncAcquireResponsePreparedStackUnion = SyncAcquireResponsePreparedS
  * Stores deployment state that needs to persist across step calls.
  */
 export type SyncAcquireResponseRuntimeMetadata = {
+    deleteScope?: SyncAcquireResponseDeleteScopeEnum | any | null | undefined;
     /**
      * Hash of the environment variables snapshot that was last synced to the vault
      *
@@ -1961,7 +2428,17 @@ export type SyncAcquireResponseRuntimeMetadata = {
      * Used to avoid redundant sync operations during incremental deployment
      */
     lastSyncedEnvVarsHash?: string | null | undefined;
+    pendingDeleteScope?: SyncAcquireResponsePendingDeleteScopeEnum | any | null | undefined;
     preparedStack?: SyncAcquireResponsePreparedStack | any | null | undefined;
+    /**
+     * Whether cross-account registry access has been successfully granted.
+     *
+     * @remarks
+     * Set to true after the manager successfully sets the ECR/GAR repo policy
+     * for this deployment's target account. Prevents redundant API calls on
+     * every reconcile tick.
+     */
+    registryAccessGranted?: boolean | undefined;
 };
 export type SyncAcquireResponseRuntimeMetadataUnion = SyncAcquireResponseRuntimeMetadata | any;
 /**
@@ -1995,6 +2472,22 @@ export type SyncAcquireResponseStackStateConfig = {
         [k: string]: any | null;
     } | undefined;
 };
+/**
+ * Represents the target cloud platform.
+ */
+export declare const SyncAcquireResponseControllerPlatformEnum: {
+    readonly Aws: "aws";
+    readonly Gcp: "gcp";
+    readonly Azure: "azure";
+    readonly Kubernetes: "kubernetes";
+    readonly Local: "local";
+    readonly Test: "test";
+};
+/**
+ * Represents the target cloud platform.
+ */
+export type SyncAcquireResponseControllerPlatformEnum = ClosedEnum<typeof SyncAcquireResponseControllerPlatformEnum>;
+export type SyncAcquireResponseControllerPlatformUnion = SyncAcquireResponseControllerPlatformEnum | any;
 /**
  * New ResourceRef that works with any resource type.
  *
@@ -2040,6 +2533,10 @@ export type SyncAcquireResponseError = {
      * caused the issue, or other relevant context information.
      */
     context?: any | null | undefined;
+    /**
+     * Optional human-facing remediation hint.
+     */
+    hint?: string | null | undefined;
     /**
      * HTTP status code for this error.
      *
@@ -2096,7 +2593,6 @@ export type SyncAcquireResponseErrorUnion = SyncAcquireResponseError | any;
 export declare const SyncAcquireResponseStackStateLifecycleEnum: {
     readonly Frozen: "frozen";
     readonly Live: "live";
-    readonly LiveOnSetup: "live-on-setup";
 };
 /**
  * Describes the lifecycle of a resource within a stack, determining how it's managed and deployed.
@@ -2168,6 +2664,7 @@ export type SyncAcquireResponseStackStateResources = {
      * Resource that can hold any resource type in the Alien system. All resources share common 'type' and 'id' fields with additional type-specific properties.
      */
     config: SyncAcquireResponseStackStateConfig;
+    controllerPlatform?: SyncAcquireResponseControllerPlatformEnum | any | null | undefined;
     /**
      * Complete list of dependencies for this resource, including infrastructure dependencies.
      *
@@ -2176,13 +2673,6 @@ export type SyncAcquireResponseStackStateResources = {
      */
     dependencies?: Array<SyncAcquireResponseStackStateDependency> | undefined;
     error?: SyncAcquireResponseError | any | null | undefined;
-    /**
-     * True if the resource was provisioned by an external system (e.g., CloudFormation).
-     *
-     * @remarks
-     * Defaults to false, indicating dynamic provisioning by the executor.
-     */
-    isExternallyProvisioned?: boolean | undefined;
     /**
      * Stores the controller state that failed, used for manual retry operations.
      *
@@ -2212,7 +2702,7 @@ export type SyncAcquireResponseStackStateResources = {
      */
     status: SyncAcquireResponseStackStateStatus;
     /**
-     * The high-level type of the resource (e.g., Function::RESOURCE_TYPE, Storage::RESOURCE_TYPE).
+     * The high-level type of the resource (e.g., Worker::RESOURCE_TYPE, Storage::RESOURCE_TYPE).
      */
     type: string;
 };
@@ -2254,6 +2744,7 @@ export declare const SyncAcquireResponseStatus: {
     readonly Deleting: "deleting";
     readonly DeleteFailed: "delete-failed";
     readonly Deleted: "deleted";
+    readonly Error: "error";
 };
 /**
  * Deployment status in the deployment lifecycle
@@ -2310,6 +2801,17 @@ export type SyncAcquireResponseTargetReleaseOverrideAwBinding = {
      */
     stack?: SyncAcquireResponseTargetReleaseOverrideAwStack | undefined;
 };
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export declare const SyncAcquireResponseTargetReleaseOverrideEffect: {
+    readonly Allow: "Allow";
+    readonly Deny: "Deny";
+};
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export type SyncAcquireResponseTargetReleaseOverrideEffect = ClosedEnum<typeof SyncAcquireResponseTargetReleaseOverrideEffect>;
 /**
  * Grant permissions for a specific cloud platform
  */
@@ -2323,9 +2825,17 @@ export type SyncAcquireResponseTargetReleaseOverrideAwGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * AWS-specific platform permission configuration
@@ -2335,10 +2845,22 @@ export type SyncAcquireResponseTargetReleaseOverrideAw = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseTargetReleaseOverrideAwBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
+    /**
+     * IAM effect. Defaults to Allow.
+     */
+    effect?: SyncAcquireResponseTargetReleaseOverrideEffect | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseTargetReleaseOverrideAwGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Azure-specific binding specification
@@ -2384,9 +2906,17 @@ export type SyncAcquireResponseTargetReleaseOverrideAzureGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * Azure-specific platform permission configuration
@@ -2396,10 +2926,18 @@ export type SyncAcquireResponseTargetReleaseOverrideAzure = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseTargetReleaseOverrideAzureBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseTargetReleaseOverrideAzureGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * GCP IAM condition
@@ -2463,9 +3001,17 @@ export type SyncAcquireResponseTargetReleaseOverrideGcpGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * GCP-specific platform permission configuration
@@ -2475,10 +3021,18 @@ export type SyncAcquireResponseTargetReleaseOverrideGcp = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseTargetReleaseOverrideGcpBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseTargetReleaseOverrideGcpGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Platform-specific permission configurations
@@ -2576,6 +3130,17 @@ export type SyncAcquireResponseTargetReleaseExtendAwBinding = {
      */
     stack?: SyncAcquireResponseTargetReleaseExtendAwStack | undefined;
 };
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export declare const SyncAcquireResponseTargetReleaseExtendEffect: {
+    readonly Allow: "Allow";
+    readonly Deny: "Deny";
+};
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export type SyncAcquireResponseTargetReleaseExtendEffect = ClosedEnum<typeof SyncAcquireResponseTargetReleaseExtendEffect>;
 /**
  * Grant permissions for a specific cloud platform
  */
@@ -2589,9 +3154,17 @@ export type SyncAcquireResponseTargetReleaseExtendAwGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * AWS-specific platform permission configuration
@@ -2601,10 +3174,22 @@ export type SyncAcquireResponseTargetReleaseExtendAw = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseTargetReleaseExtendAwBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
+    /**
+     * IAM effect. Defaults to Allow.
+     */
+    effect?: SyncAcquireResponseTargetReleaseExtendEffect | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseTargetReleaseExtendAwGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Azure-specific binding specification
@@ -2650,9 +3235,17 @@ export type SyncAcquireResponseTargetReleaseExtendAzureGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * Azure-specific platform permission configuration
@@ -2662,10 +3255,18 @@ export type SyncAcquireResponseTargetReleaseExtendAzure = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseTargetReleaseExtendAzureBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseTargetReleaseExtendAzureGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * GCP IAM condition
@@ -2729,9 +3330,17 @@ export type SyncAcquireResponseTargetReleaseExtendGcpGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * GCP-specific platform permission configuration
@@ -2741,10 +3350,18 @@ export type SyncAcquireResponseTargetReleaseExtendGcp = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseTargetReleaseExtendGcpBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseTargetReleaseExtendGcpGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Platform-specific permission configurations
@@ -2846,6 +3463,17 @@ export type SyncAcquireResponseTargetReleaseProfileAwBinding = {
      */
     stack?: SyncAcquireResponseTargetReleaseProfileAwStack | undefined;
 };
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export declare const SyncAcquireResponseTargetReleaseProfileEffect: {
+    readonly Allow: "Allow";
+    readonly Deny: "Deny";
+};
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export type SyncAcquireResponseTargetReleaseProfileEffect = ClosedEnum<typeof SyncAcquireResponseTargetReleaseProfileEffect>;
 /**
  * Grant permissions for a specific cloud platform
  */
@@ -2859,9 +3487,17 @@ export type SyncAcquireResponseTargetReleaseProfileAwGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * AWS-specific platform permission configuration
@@ -2871,10 +3507,22 @@ export type SyncAcquireResponseTargetReleaseProfileAw = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseTargetReleaseProfileAwBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
+    /**
+     * IAM effect. Defaults to Allow.
+     */
+    effect?: SyncAcquireResponseTargetReleaseProfileEffect | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseTargetReleaseProfileAwGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Azure-specific binding specification
@@ -2920,9 +3568,17 @@ export type SyncAcquireResponseTargetReleaseProfileAzureGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * Azure-specific platform permission configuration
@@ -2932,10 +3588,18 @@ export type SyncAcquireResponseTargetReleaseProfileAzure = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseTargetReleaseProfileAzureBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseTargetReleaseProfileAzureGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * GCP IAM condition
@@ -2999,9 +3663,17 @@ export type SyncAcquireResponseTargetReleaseProfileGcpGrant = {
      */
     dataActions?: Array<string> | null | undefined;
     /**
-     * GCP permissions (only for GCP)
+     * GCP permissions that require an exact residual custom role.
      */
     permissions?: Array<string> | null | undefined;
+    /**
+     * Provider predefined roles to bind directly.
+     */
+    predefinedRoles?: Array<string> | null | undefined;
+    /**
+     * GCP residual custom permissions to pair with predefined roles.
+     */
+    residualPermissions?: Array<string> | null | undefined;
 };
 /**
  * GCP-specific platform permission configuration
@@ -3011,10 +3683,18 @@ export type SyncAcquireResponseTargetReleaseProfileGcp = {
      * Generic binding configuration for permissions
      */
     binding: SyncAcquireResponseTargetReleaseProfileGcpBinding;
+    /**
+     * Short admin-facing description of why this entry exists.
+     */
+    description?: string | null | undefined;
     /**
      * Grant permissions for a specific cloud platform
      */
     grant: SyncAcquireResponseTargetReleaseProfileGcpGrant;
+    /**
+     * Stable admin-facing label for this permission entry.
+     */
+    label?: string | null | undefined;
 };
 /**
  * Platform-specific permission configurations
@@ -3109,7 +3789,6 @@ export type SyncAcquireResponseTargetReleaseDependency = {
 export declare const SyncAcquireResponseTargetReleaseLifecycle: {
     readonly Frozen: "frozen";
     readonly Live: "live";
-    readonly LiveOnSetup: "live-on-setup";
 };
 /**
  * Describes the lifecycle of a resource within a stack, determining how it's managed and deployed.
@@ -3140,6 +3819,21 @@ export type SyncAcquireResponseTargetReleaseResources = {
      */
     remoteAccess?: boolean | undefined;
 };
+/**
+ * Represents the target cloud platform.
+ */
+export declare const SyncAcquireResponseTargetReleaseSupportedPlatform: {
+    readonly Aws: "aws";
+    readonly Gcp: "gcp";
+    readonly Azure: "azure";
+    readonly Kubernetes: "kubernetes";
+    readonly Local: "local";
+    readonly Test: "test";
+};
+/**
+ * Represents the target cloud platform.
+ */
+export type SyncAcquireResponseTargetReleaseSupportedPlatform = ClosedEnum<typeof SyncAcquireResponseTargetReleaseSupportedPlatform>;
 /**
  * A bag of resources, unaware of any cloud.
  */
@@ -3158,6 +3852,10 @@ export type SyncAcquireResponseTargetReleaseStack = {
     resources: {
         [k: string]: SyncAcquireResponseTargetReleaseResources;
     };
+    /**
+     * Which platforms this stack supports. When None, all platforms are supported.
+     */
+    supportedPlatforms?: Array<SyncAcquireResponseTargetReleaseSupportedPlatform> | null | undefined;
 };
 /**
  * Release metadata
@@ -3197,6 +3895,15 @@ export type SyncAcquireResponseCurrent = {
      * Represents the target cloud platform.
      */
     platform: SyncAcquireResponseCurrentPlatform;
+    /**
+     * Protocol version for cross-actor compatibility.
+     *
+     * @remarks
+     * All actors (manager, push client, agent) check this before stepping.
+     * Mismatched versions produce a clear error instead of silent corruption.
+     * See docs/02-manager/10-deployment-protocol.md.
+     */
+    protocolVersion: number;
     /**
      * Whether a retry has been requested for a failed deployment
      *
@@ -3213,35 +3920,28 @@ export type SyncAcquireResponseCurrent = {
     targetRelease?: SyncAcquireResponseTargetRelease | any | null | undefined;
 };
 /**
- * Artifact registry configuration for pulling container images.
- *
- * @remarks
- *
- * Used when the deployment needs to pull images from a manager's artifact registry.
- * This is required for Local platform and can optionally be used by cloud platforms
- * instead of native registry mechanisms (ECR/GCR/ACR).
+ * Represents the target cloud platform.
  */
-export type SyncAcquireResponseArtifactRegistry = {
-    /**
-     * Optional authentication token (JWT) for manager API access
-     *
-     * @remarks
-     * When present, must be included in Authorization header as "Bearer {token}"
-     */
-    authToken?: string | null | undefined;
-    /**
-     * Manager base URL for fetching credentials and accessing the registry
-     */
-    managerUrl: string;
+export declare const SyncAcquireResponseBasePlatformEnum: {
+    readonly Aws: "aws";
+    readonly Gcp: "gcp";
+    readonly Azure: "azure";
+    readonly Kubernetes: "kubernetes";
+    readonly Local: "local";
+    readonly Test: "test";
 };
-export type SyncAcquireResponseArtifactRegistryUnion = SyncAcquireResponseArtifactRegistry | any;
 /**
- * Configuration for a single Horizon cluster.
+ * Represents the target cloud platform.
+ */
+export type SyncAcquireResponseBasePlatformEnum = ClosedEnum<typeof SyncAcquireResponseBasePlatformEnum>;
+export type SyncAcquireResponseBasePlatformUnion = SyncAcquireResponseBasePlatformEnum | any;
+/**
+ * Configuration for a single container worker cluster.
  *
  * @remarks
  *
  * Contains the cluster ID and management token needed to interact with
- * the Horizon control plane API for container operations.
+ * the managed container control plane API for container operations.
  */
 export type SyncAcquireResponseClusters = {
     /**
@@ -3256,54 +3956,138 @@ export type SyncAcquireResponseClusters = {
      */
     managementToken: string;
 };
+/**
+ * AWS Horizon machine image catalog.
+ */
+export type SyncAcquireResponseHorizonMachineImageAws = {
+    /**
+     * AMI IDs by architecture, then AWS region.
+     */
+    amis: {
+        [k: string]: {
+            [k: string]: string;
+        };
+    };
+};
+export type SyncAcquireResponseHorizonMachineImageAwsUnion = SyncAcquireResponseHorizonMachineImageAws | any;
+/**
+ * Azure Horizon machine image entry.
+ */
+export type SyncAcquireResponseAzureImages = {
+    /**
+     * Azure Compute Gallery image version ID.
+     */
+    imageVersionId: string;
+};
+/**
+ * Azure Horizon machine image catalog.
+ */
+export type SyncAcquireResponseHorizonMachineImageAzure = {
+    /**
+     * Images by architecture.
+     */
+    images: {
+        [k: string]: SyncAcquireResponseAzureImages;
+    };
+};
+export type SyncAcquireResponseHorizonMachineImageAzureUnion = SyncAcquireResponseHorizonMachineImageAzure | any;
+/**
+ * Base image metadata for the Horizon machine image.
+ */
+export type SyncAcquireResponseBaseImage = {
+    /**
+     * Base OS image name.
+     */
+    name: string;
+    /**
+     * Base OS image version or channel.
+     */
+    version: string;
+};
+/**
+ * GCP Horizon machine image entry.
+ */
+export type SyncAcquireResponseGcpImages = {
+    /**
+     * Source image self link or image-family URL.
+     */
+    sourceImage: string;
+};
+/**
+ * GCP Horizon machine image catalog.
+ */
+export type SyncAcquireResponseHorizonMachineImageGcp = {
+    /**
+     * Images by architecture.
+     */
+    images: {
+        [k: string]: SyncAcquireResponseGcpImages;
+    };
+};
+export type SyncAcquireResponseHorizonMachineImageGcpUnion = SyncAcquireResponseHorizonMachineImageGcp | any;
+/**
+ * Horizon machine image catalog.
+ *
+ * @remarks
+ *
+ * Platform resolves concrete provider images from this catalog during rollout.
+ */
+export type SyncAcquireResponseHorizonMachineImage = {
+    aws?: SyncAcquireResponseHorizonMachineImageAws | any | null | undefined;
+    azure?: SyncAcquireResponseHorizonMachineImageAzure | any | null | undefined;
+    /**
+     * Base image metadata for the Horizon machine image.
+     */
+    baseImage: SyncAcquireResponseBaseImage;
+    /**
+     * Logical image channel, such as prod, staging, or canary.
+     */
+    channel: string;
+    /**
+     * Image manifest creation timestamp.
+     */
+    createdAt: string;
+    gcp?: SyncAcquireResponseHorizonMachineImageGcp | any | null | undefined;
+    /**
+     * Git commit SHA used to build the image.
+     */
+    gitSha: string;
+    /**
+     * horizond daemon version baked into the image.
+     */
+    horizondVersion: string;
+    /**
+     * Published immutable machine image version.
+     */
+    machineImageVersion: string;
+};
+export type SyncAcquireResponseHorizonMachineImageUnion = SyncAcquireResponseHorizonMachineImage | any;
 export declare const SyncAcquireResponseComputeBackendType: {
     readonly Horizon: "horizon";
 };
 export type SyncAcquireResponseComputeBackendType = ClosedEnum<typeof SyncAcquireResponseComputeBackendType>;
 /**
- * Compute backend for Container and Function resources.
+ * Compute backend for Container and Worker resources.
  *
  * @remarks
  *
  * Determines how compute workloads are orchestrated on cloud platforms.
- * When None, the platform default is used (Horizon for cloud platforms).
+ * When None, the platform default is used for cloud platforms.
  */
 export type SyncAcquireResponseComputeBackendHorizon = {
     /**
-     * Cluster configurations (one per ContainerCluster resource)
+     * Cluster configurations (one per ComputeCluster resource)
      *
      * @remarks
-     * Key: ContainerCluster resource ID from stack
+     * Key: ComputeCluster resource ID from stack
      * Value: Cluster ID and management token for that cluster
      */
     clusters: {
         [k: string]: SyncAcquireResponseClusters;
     };
+    horizonMachineImage?: SyncAcquireResponseHorizonMachineImage | any | null | undefined;
     /**
-     * ETag of the horizond binary fetched from the releases server — used as a
-     *
-     * @remarks
-     * change-detection signal only. nginx auto-generates ETags from mtime+size,
-     * so every `cargo zigbuild` changes this value and triggers a rolling update.
-     *
-     * Optional: when absent (releases server unreachable), change detection
-     * falls back to URL-only (sufficient for versioned production releases).
-     */
-    horizondBinaryHash?: string | null | undefined;
-    /**
-     * Base URL for downloading the horizond binary, without arch suffix.
-     *
-     * @remarks
-     *
-     * Each cloud controller appends `/linux-{arch}/horizond` to construct the
-     * final download URL used in VM startup scripts.
-     *
-     * Production example: "https://releases.alien.dev/horizond/v0.3.0"
-     * Dev example (ngrok): "https://abc123.ngrok.io"
-     */
-    horizondDownloadBaseUrl: string;
-    /**
-     * Horizon API base URL (e.g., "https://horizon.alien.dev")
+     * Horizon control-plane API base URL.
      */
     url: string;
     type: SyncAcquireResponseComputeBackendType;
@@ -3460,15 +4244,15 @@ export type SyncAcquireResponseEnvironmentVariables = {
 /**
  * Reference to a Kubernetes Secret
  */
-export type SyncAcquireResponseDataDirSecretRef3 = {
+export type SyncAcquireResponseDefaultDomainSecretRef = {
     key: string;
     name: string;
 };
-export type SyncAcquireResponseDataDir3 = {
+export type SyncAcquireResponseDefaultDomain = {
     /**
      * Reference to a Kubernetes Secret
      */
-    secretRef: SyncAcquireResponseDataDirSecretRef3;
+    secretRef: SyncAcquireResponseDefaultDomainSecretRef;
 };
 /**
  * Represents a value that can be either a concrete value, a template expression,
@@ -3476,26 +4260,164 @@ export type SyncAcquireResponseDataDir3 = {
  * @remarks
  * or a reference to a Kubernetes Secret
  */
-export type SyncAcquireResponseDataDirUnion2 = SyncAcquireResponseDataDir3 | any | string;
-export declare const SyncAcquireResponseTypeVault5: {
-    readonly Vault: "vault";
-};
-export type SyncAcquireResponseTypeVault5 = ClosedEnum<typeof SyncAcquireResponseTypeVault5>;
+export type SyncAcquireResponseDefaultDomainUnion = SyncAcquireResponseDefaultDomain | any | string;
 /**
- * Local development vault binding (for testing/development)
+ * Reference to a Kubernetes Secret
  */
-export type SyncAcquireResponseExternalBindingsLocalVault = {
-    /**
-     * Represents a value that can be either a concrete value, a template expression,
-     *
-     * @remarks
-     * or a reference to a Kubernetes Secret
-     */
-    dataDir?: SyncAcquireResponseDataDir3 | any | string | null | undefined;
+export type SyncAcquireResponseEnvironmentNameSecretRef = {
+    key: string;
+    name: string;
+};
+export type SyncAcquireResponseEnvironmentName = {
     /**
-     * The vault name for local storage
+     * Reference to a Kubernetes Secret
      */
-    vaultName: string;
+    secretRef: SyncAcquireResponseEnvironmentNameSecretRef;
+};
+/**
+ * Represents a value that can be either a concrete value, a template expression,
+ *
+ * @remarks
+ * or a reference to a Kubernetes Secret
+ */
+export type SyncAcquireResponseEnvironmentNameUnion = SyncAcquireResponseEnvironmentName | any | string;
+/**
+ * Reference to a Kubernetes Secret
+ */
+export type SyncAcquireResponseResourceGroupNameSecretRef3 = {
+    key: string;
+    name: string;
+};
+export type SyncAcquireResponseResourceGroupName3 = {
+    /**
+     * Reference to a Kubernetes Secret
+     */
+    secretRef: SyncAcquireResponseResourceGroupNameSecretRef3;
+};
+/**
+ * Represents a value that can be either a concrete value, a template expression,
+ *
+ * @remarks
+ * or a reference to a Kubernetes Secret
+ */
+export type SyncAcquireResponseResourceGroupNameUnion3 = SyncAcquireResponseResourceGroupName3 | any | string;
+/**
+ * Reference to a Kubernetes Secret
+ */
+export type SyncAcquireResponseResourceIdSecretRef = {
+    key: string;
+    name: string;
+};
+export type SyncAcquireResponseResourceId = {
+    /**
+     * Reference to a Kubernetes Secret
+     */
+    secretRef: SyncAcquireResponseResourceIdSecretRef;
+};
+/**
+ * Represents a value that can be either a concrete value, a template expression,
+ *
+ * @remarks
+ * or a reference to a Kubernetes Secret
+ */
+export type SyncAcquireResponseResourceIdUnion = SyncAcquireResponseResourceId | any | string;
+/**
+ * Reference to a Kubernetes Secret
+ */
+export type SyncAcquireResponseStaticIpSecretRef = {
+    key: string;
+    name: string;
+};
+export type SyncAcquireResponseStaticIp = {
+    /**
+     * Reference to a Kubernetes Secret
+     */
+    secretRef: SyncAcquireResponseStaticIpSecretRef;
+};
+export declare const SyncAcquireResponseTypeContainerAppsEnvironment: {
+    readonly ContainerAppsEnvironment: "container_apps_environment";
+};
+export type SyncAcquireResponseTypeContainerAppsEnvironment = ClosedEnum<typeof SyncAcquireResponseTypeContainerAppsEnvironment>;
+/**
+ * Binding configuration for a pre-existing Azure Container Apps Environment.
+ *
+ * @remarks
+ *
+ * Used when deploying to an existing environment instead of having Alien provision one.
+ * This is useful for shared environments (e.g., test infrastructure) or enterprise
+ * setups where environments are managed by a separate team.
+ */
+export type SyncAcquireResponseExternalBindingsContainerAppsEnvironment = {
+    /**
+     * Represents a value that can be either a concrete value, a template expression,
+     *
+     * @remarks
+     * or a reference to a Kubernetes Secret
+     */
+    defaultDomain?: SyncAcquireResponseDefaultDomain | any | string | null | undefined;
+    /**
+     * Represents a value that can be either a concrete value, a template expression,
+     *
+     * @remarks
+     * or a reference to a Kubernetes Secret
+     */
+    environmentName?: SyncAcquireResponseEnvironmentName | any | string | null | undefined;
+    /**
+     * Represents a value that can be either a concrete value, a template expression,
+     *
+     * @remarks
+     * or a reference to a Kubernetes Secret
+     */
+    resourceGroupName?: SyncAcquireResponseResourceGroupName3 | any | string | null | undefined;
+    /**
+     * Represents a value that can be either a concrete value, a template expression,
+     *
+     * @remarks
+     * or a reference to a Kubernetes Secret
+     */
+    resourceId?: SyncAcquireResponseResourceId | any | string | null | undefined;
+    staticIp?: any | null | undefined;
+    type: SyncAcquireResponseTypeContainerAppsEnvironment;
+};
+/**
+ * Reference to a Kubernetes Secret
+ */
+export type SyncAcquireResponseDataDirSecretRef3 = {
+    key: string;
+    name: string;
+};
+export type SyncAcquireResponseDataDir3 = {
+    /**
+     * Reference to a Kubernetes Secret
+     */
+    secretRef: SyncAcquireResponseDataDirSecretRef3;
+};
+/**
+ * Represents a value that can be either a concrete value, a template expression,
+ *
+ * @remarks
+ * or a reference to a Kubernetes Secret
+ */
+export type SyncAcquireResponseDataDirUnion2 = SyncAcquireResponseDataDir3 | any | string;
+export declare const SyncAcquireResponseTypeVault5: {
+    readonly Vault: "vault";
+};
+export type SyncAcquireResponseTypeVault5 = ClosedEnum<typeof SyncAcquireResponseTypeVault5>;
+/**
+ * Local development vault binding (for testing/development)
+ */
+export type SyncAcquireResponseExternalBindingsLocalVault = {
+    /**
+     * Represents a value that can be either a concrete value, a template expression,
+     *
+     * @remarks
+     * or a reference to a Kubernetes Secret
+     */
+    dataDir?: SyncAcquireResponseDataDir3 | any | string | null | undefined;
+    /**
+     * The vault name for local storage
+     */
+    vaultName: string;
     service: "local-vault";
     type: SyncAcquireResponseTypeVault5;
 };
@@ -3720,7 +4642,13 @@ export declare const SyncAcquireResponseTypeArtifactRegistry4: {
 };
 export type SyncAcquireResponseTypeArtifactRegistry4 = ClosedEnum<typeof SyncAcquireResponseTypeArtifactRegistry4>;
 /**
- * Local container registry binding configuration
+ * Local container registry binding configuration.
+ *
+ * @remarks
+ *
+ * The local registry runs on localhost only and does not require authentication.
+ * Security boundary is the OS process isolation on the customer's machine.
+ * External image access is secured by the manager's registry proxy (deployment tokens).
  */
 export type SyncAcquireResponseExternalBindingsLocal = {
     /**
@@ -3766,6 +4694,26 @@ export type SyncAcquireResponsePushServiceAccountEmail = {
      */
     secretRef: SyncAcquireResponsePushServiceAccountEmailSecretRef;
 };
+/**
+ * Reference to a Kubernetes Secret
+ */
+export type SyncAcquireResponseRepositoryNameSecretRef = {
+    key: string;
+    name: string;
+};
+export type SyncAcquireResponseRepositoryName = {
+    /**
+     * Reference to a Kubernetes Secret
+     */
+    secretRef: SyncAcquireResponseRepositoryNameSecretRef;
+};
+/**
+ * Represents a value that can be either a concrete value, a template expression,
+ *
+ * @remarks
+ * or a reference to a Kubernetes Secret
+ */
+export type SyncAcquireResponseRepositoryNameUnion = SyncAcquireResponseRepositoryName | any | string;
 export declare const SyncAcquireResponseTypeArtifactRegistry3: {
     readonly ArtifactRegistry: "artifact_registry";
 };
@@ -3774,20 +4722,15 @@ export type SyncAcquireResponseTypeArtifactRegistry3 = ClosedEnum<typeof SyncAcq
  * Google Artifact Registry binding configuration
  */
 export type SyncAcquireResponseExternalBindingsGar = {
-    /**
-     * Represents a value that can be either a concrete value, a template expression,
-     *
-     * @remarks
-     * or a reference to a Kubernetes Secret
-     */
     pullServiceAccountEmail?: any | null | undefined;
+    pushServiceAccountEmail?: any | null | undefined;
     /**
      * Represents a value that can be either a concrete value, a template expression,
      *
      * @remarks
      * or a reference to a Kubernetes Secret
      */
-    pushServiceAccountEmail?: any | null | undefined;
+    repositoryName?: SyncAcquireResponseRepositoryName | any | string | null | undefined;
     service: "gar";
     type: SyncAcquireResponseTypeArtifactRegistry3;
 };
@@ -3811,6 +4754,19 @@ export type SyncAcquireResponseRegistryName = {
  * or a reference to a Kubernetes Secret
  */
 export type SyncAcquireResponseRegistryNameUnion = SyncAcquireResponseRegistryName | any | string;
+/**
+ * Reference to a Kubernetes Secret
+ */
+export type SyncAcquireResponseRepositoryPrefixSecretRef2 = {
+    key: string;
+    name: string;
+};
+export type SyncAcquireResponseRepositoryPrefix2 = {
+    /**
+     * Reference to a Kubernetes Secret
+     */
+    secretRef: SyncAcquireResponseRepositoryPrefixSecretRef2;
+};
 /**
  * Reference to a Kubernetes Secret
  */
@@ -3846,6 +4802,7 @@ export type SyncAcquireResponseExternalBindingsAcr = {
      * or a reference to a Kubernetes Secret
      */
     registryName?: SyncAcquireResponseRegistryName | any | string | null | undefined;
+    repositoryPrefix?: any | null | undefined;
     /**
      * Represents a value that can be either a concrete value, a template expression,
      *
@@ -3885,15 +4842,15 @@ export type SyncAcquireResponsePushRoleArn = {
 /**
  * Reference to a Kubernetes Secret
  */
-export type SyncAcquireResponseRepositoryPrefixSecretRef = {
+export type SyncAcquireResponseRepositoryPrefixSecretRef1 = {
     key: string;
     name: string;
 };
-export type SyncAcquireResponseRepositoryPrefix = {
+export type SyncAcquireResponseRepositoryPrefix1 = {
     /**
      * Reference to a Kubernetes Secret
      */
-    secretRef: SyncAcquireResponseRepositoryPrefixSecretRef;
+    secretRef: SyncAcquireResponseRepositoryPrefixSecretRef1;
 };
 /**
  * Represents a value that can be either a concrete value, a template expression,
@@ -3901,7 +4858,7 @@ export type SyncAcquireResponseRepositoryPrefix = {
  * @remarks
  * or a reference to a Kubernetes Secret
  */
-export type SyncAcquireResponseRepositoryPrefixUnion = SyncAcquireResponseRepositoryPrefix | any | string;
+export type SyncAcquireResponseRepositoryPrefixUnion = SyncAcquireResponseRepositoryPrefix1 | any | string;
 export declare const SyncAcquireResponseTypeArtifactRegistry1: {
     readonly ArtifactRegistry: "artifact_registry";
 };
@@ -3910,19 +4867,7 @@ export type SyncAcquireResponseTypeArtifactRegistry1 = ClosedEnum<typeof SyncAcq
  * AWS ECR (Elastic Container Registry) binding configuration
  */
 export type SyncAcquireResponseExternalBindingsEcr = {
-    /**
-     * Represents a value that can be either a concrete value, a template expression,
-     *
-     * @remarks
-     * or a reference to a Kubernetes Secret
-     */
     pullRoleArn?: any | null | undefined;
-    /**
-     * Represents a value that can be either a concrete value, a template expression,
-     *
-     * @remarks
-     * or a reference to a Kubernetes Secret
-     */
     pushRoleArn?: any | null | undefined;
     /**
      * Represents a value that can be either a concrete value, a template expression,
@@ -3930,7 +4875,7 @@ export type SyncAcquireResponseExternalBindingsEcr = {
      * @remarks
      * or a reference to a Kubernetes Secret
      */
-    repositoryPrefix?: SyncAcquireResponseRepositoryPrefix | any | string | null | undefined;
+    repositoryPrefix?: SyncAcquireResponseRepositoryPrefix1 | any | string | null | undefined;
     service: "ecr";
     type: SyncAcquireResponseTypeArtifactRegistry1;
 };
@@ -4323,6 +5268,44 @@ export type SyncAcquireResponseExternalBindingsDynamodb = {
  * Represents a KV binding for key-value storage across platforms
  */
 export type SyncAcquireResponseExternalBindingsUnion3 = SyncAcquireResponseExternalBindingsDynamodb | SyncAcquireResponseExternalBindingsFirestore | SyncAcquireResponseExternalBindingsTablestorage | SyncAcquireResponseExternalBindingsRedis | SyncAcquireResponseExternalBindingsLocalKv;
+/**
+ * Reference to a Kubernetes Secret
+ */
+export type SyncAcquireResponseQueuePathSecretRef = {
+    key: string;
+    name: string;
+};
+export type SyncAcquireResponseQueuePath = {
+    /**
+     * Reference to a Kubernetes Secret
+     */
+    secretRef: SyncAcquireResponseQueuePathSecretRef;
+};
+/**
+ * Represents a value that can be either a concrete value, a template expression,
+ *
+ * @remarks
+ * or a reference to a Kubernetes Secret
+ */
+export type SyncAcquireResponseQueuePathUnion = SyncAcquireResponseQueuePath | any | string;
+export declare const SyncAcquireResponseTypeQueue4: {
+    readonly Queue: "queue";
+};
+export type SyncAcquireResponseTypeQueue4 = ClosedEnum<typeof SyncAcquireResponseTypeQueue4>;
+/**
+ * Local queue parameters
+ */
+export type SyncAcquireResponseExternalBindingsLocalQueue = {
+    /**
+     * Represents a value that can be either a concrete value, a template expression,
+     *
+     * @remarks
+     * or a reference to a Kubernetes Secret
+     */
+    queuePath?: SyncAcquireResponseQueuePath | any | string | null | undefined;
+    service: "local-queue";
+    type: SyncAcquireResponseTypeQueue4;
+};
 /**
  * Reference to a Kubernetes Secret
  */
@@ -4494,7 +5477,7 @@ export type SyncAcquireResponseExternalBindingsSqs = {
 /**
  * Binding parameters for Queue at runtime or in templates.
  */
-export type SyncAcquireResponseExternalBindingsUnion2 = SyncAcquireResponseExternalBindingsSqs | SyncAcquireResponseExternalBindingsPubsub | SyncAcquireResponseExternalBindingsServicebus;
+export type SyncAcquireResponseExternalBindingsUnion2 = SyncAcquireResponseExternalBindingsSqs | SyncAcquireResponseExternalBindingsPubsub | SyncAcquireResponseExternalBindingsServicebus | SyncAcquireResponseExternalBindingsLocalQueue;
 /**
  * Reference to a Kubernetes Secret
  */
@@ -4686,21 +5669,7 @@ export type SyncAcquireResponseExternalBindingsUnion1 = SyncAcquireResponseExter
  * The binding type must match the resource type it's applied to.
  * Validated at runtime by the executor.
  */
-export type SyncAcquireResponseExternalBindingsUnion6 = SyncAcquireResponseExternalBindingsS3 | SyncAcquireResponseExternalBindingsBlob | SyncAcquireResponseExternalBindingsGcs | SyncAcquireResponseExternalBindingsLocalStorage | SyncAcquireResponseExternalBindingsSqs | SyncAcquireResponseExternalBindingsPubsub | SyncAcquireResponseExternalBindingsServicebus | SyncAcquireResponseExternalBindingsDynamodb | SyncAcquireResponseExternalBindingsFirestore | SyncAcquireResponseExternalBindingsTablestorage | SyncAcquireResponseExternalBindingsRedis | SyncAcquireResponseExternalBindingsLocalKv | SyncAcquireResponseExternalBindingsEcr | SyncAcquireResponseExternalBindingsAcr | SyncAcquireResponseExternalBindingsGar | SyncAcquireResponseExternalBindingsLocal | SyncAcquireResponseExternalBindingsParameterStore | SyncAcquireResponseExternalBindingsSecretManager | SyncAcquireResponseExternalBindingsKeyVault | SyncAcquireResponseExternalBindingsKubernetesSecret | SyncAcquireResponseExternalBindingsLocalVault;
-/**
- * Image pull credentials for container registries
- */
-export type SyncAcquireResponseImagePullCredentials = {
-    /**
-     * Password for the container registry
-     */
-    password: string;
-    /**
-     * Username for the container registry
-     */
-    username: string;
-};
-export type SyncAcquireResponseImagePullCredentialsUnion = SyncAcquireResponseImagePullCredentials | any;
+export type SyncAcquireResponseExternalBindingsUnion6 = SyncAcquireResponseExternalBindingsContainerAppsEnvironment | SyncAcquireResponseExternalBindingsS3 | SyncAcquireResponseExternalBindingsBlob | SyncAcquireResponseExternalBindingsGcs | SyncAcquireResponseExternalBindingsLocalStorage | SyncAcquireResponseExternalBindingsSqs | SyncAcquireResponseExternalBindingsPubsub | SyncAcquireResponseExternalBindingsServicebus | SyncAcquireResponseExternalBindingsLocalQueue | SyncAcquireResponseExternalBindingsDynamodb | SyncAcquireResponseExternalBindingsFirestore | SyncAcquireResponseExternalBindingsTablestorage | SyncAcquireResponseExternalBindingsRedis | SyncAcquireResponseExternalBindingsLocalKv | SyncAcquireResponseExternalBindingsEcr | SyncAcquireResponseExternalBindingsAcr | SyncAcquireResponseExternalBindingsGar | SyncAcquireResponseExternalBindingsLocal | SyncAcquireResponseExternalBindingsParameterStore | SyncAcquireResponseExternalBindingsSecretManager | SyncAcquireResponseExternalBindingsKeyVault | SyncAcquireResponseExternalBindingsKubernetesSecret | SyncAcquireResponseExternalBindingsLocalVault;
 export declare const SyncAcquireResponsePlatformKubernetes: {
     readonly Kubernetes: "kubernetes";
 };
@@ -4716,14 +5685,18 @@ export type SyncAcquireResponseConfigPlatformAzure = ClosedEnum<typeof SyncAcqui
  * Azure management configuration extracted from stack settings
  */
 export type SyncAcquireResponseManagementConfigAzure = {
-    /**
-     * The principal ID of the service principal in the management account
-     */
-    managementPrincipalId: string;
     /**
      * The managing Azure Tenant ID for cross-tenant access
      */
     managingTenantId: string;
+    /**
+     * OIDC issuer URL trusted by the target-side managed identity.
+     */
+    oidcIssuer: string;
+    /**
+     * OIDC subject claim trusted by the target-side managed identity.
+     */
+    oidcSubject: string;
     platform: SyncAcquireResponseConfigPlatformAzure;
 };
 export declare const SyncAcquireResponseConfigPlatformGcp: {
@@ -4760,14 +5733,14 @@ export type SyncAcquireResponseManagementConfigUnion = SyncAcquireResponseManage
  *
  * @remarks
  *
- * When set, all compute workloads (containers and horizond VM workers) export
+ * When set, all compute workloads (containers and worker VMs) export
  * their logs to the given endpoint via OTLP/HTTP.
  *
  * The `logs_auth_header` is stored as plain text in DeploymentConfig because
  * alien-runtime reads `OTEL_EXPORTER_OTLP_HEADERS` at tracing-init time,
- * before vault secrets load. For horizond, the infra controller writes the
- * same value to the cloud vault (same pattern as the machine token) and the
- * startup script fetches it at boot via IAM.
+ * before vault secrets load. For worker VMs, worker-template stamping passes
+ * the monitoring configuration to the provider controller, which stores the
+ * sensitive header in the cloud vault used by the worker image.
  */
 export type SyncAcquireResponseMonitoring = {
     /**
@@ -4779,115 +5752,677 @@ export type SyncAcquireResponseMonitoring = {
      * into all containers. It must be plain (not a vault secret) because alien-runtime
      * reads `OTEL_EXPORTER_OTLP_HEADERS` at tracing-init time, before vault secrets load.
      *
-     * horizond VM workers do NOT use this field directly. The ContainerCluster infra
-     * controller writes the same value to the cloud vault (GCP: Secret Manager,
-     * AWS: Secrets Manager, Azure: Key Vault) and the startup script fetches it at
-     * boot via IAM — the same pattern as the machine token.
+     * Worker VMs do NOT use this field directly. The ComputeCluster infra
+     * controller writes the same value to the cloud vault used by the worker
+     * image (GCP: Secret Manager, AWS: Secrets Manager, Azure: Key Vault).
      *
      * Example: "authorization=Bearer <write-token>"
      */
-    logsAuthHeader: string;
+    logsAuthHeader: string;
+    /**
+     * Full OTLP logs endpoint URL.
+     *
+     * @remarks
+     * Example: "https://<manager-host>/v1/logs"
+     */
+    logsEndpoint: string;
+    /**
+     * Auth header value for the metrics endpoint in "key=value,..." format (optional).
+     *
+     * @remarks
+     *
+     * When absent, `logs_auth_header` is reused for metrics -- suitable when the same
+     * credential covers both signals. When present (e.g. Axiom with separate datasets),
+     * this value is used exclusively for metrics.
+     *
+     * Example: "authorization=Bearer <token>,x-axiom-dataset=<metrics-dataset>"
+     */
+    metricsAuthHeader?: string | null | undefined;
+    /**
+     * Full OTLP metrics endpoint URL (optional).
+     *
+     * @remarks
+     * When set, the worker runtime exports its own VM/container orchestration metrics here.
+     * Example: "https://api.axiom.co/v1/metrics"
+     */
+    metricsEndpoint?: string | null | undefined;
+};
+export type SyncAcquireResponseMonitoringUnion = SyncAcquireResponseMonitoring | any;
+/**
+ * Deployment model: how updates are delivered to the remote environment.
+ */
+export declare const SyncAcquireResponseDeploymentModel: {
+    readonly Push: "push";
+    readonly Pull: "pull";
+};
+/**
+ * Deployment model: how updates are delivered to the remote environment.
+ */
+export type SyncAcquireResponseDeploymentModel = ClosedEnum<typeof SyncAcquireResponseDeploymentModel>;
+export type SyncAcquireResponseAwsStackSettings = {
+    certificateArn: string;
+};
+export type SyncAcquireResponseStackSettingsAwsUnion = SyncAcquireResponseAwsStackSettings | any;
+export type SyncAcquireResponseAzureStackSettings = {
+    keyVaultCertificateId: string;
+};
+export type SyncAcquireResponseStackSettingsAzureUnion = SyncAcquireResponseAzureStackSettings | any;
+export type SyncAcquireResponseGcpStackSettings = {
+    certificateName: string;
+};
+export type SyncAcquireResponseStackSettingsGcpUnion = SyncAcquireResponseGcpStackSettings | any;
+/**
+ * Namespace-scoped Kubernetes TLS Secret reference.
+ */
+export type SyncAcquireResponseTlsSecretRef = {
+    /**
+     * Secret namespace. Defaults to the release namespace when omitted.
+     */
+    namespace?: string | null | undefined;
+    /**
+     * Secret name.
+     */
+    secretName: string;
+};
+export type SyncAcquireResponseDomainsKubernetes = {
+    /**
+     * Namespace-scoped Kubernetes TLS Secret reference.
+     */
+    tlsSecretRef: SyncAcquireResponseTlsSecretRef;
+};
+export type SyncAcquireResponseDomainsKubernetesUnion = SyncAcquireResponseDomainsKubernetes | any;
+/**
+ * Platform-specific certificate references for custom domains.
+ */
+export type SyncAcquireResponseDomainsCertificate = {
+    aws?: SyncAcquireResponseAwsStackSettings | any | null | undefined;
+    azure?: SyncAcquireResponseAzureStackSettings | any | null | undefined;
+    gcp?: SyncAcquireResponseGcpStackSettings | any | null | undefined;
+    kubernetes?: SyncAcquireResponseDomainsKubernetes | any | null | undefined;
+};
+/**
+ * Custom domain configuration for a single resource.
+ */
+export type SyncAcquireResponseCustomDomains = {
+    /**
+     * Platform-specific certificate references for custom domains.
+     */
+    certificate: SyncAcquireResponseDomainsCertificate;
+    /**
+     * Fully qualified domain name to use.
+     */
+    domain: string;
+};
+/**
+ * Domain configuration for the stack.
+ *
+ * @remarks
+ *
+ * When `custom_domains` is set, the specified resources use customer-provided
+ * domains and certificates. Otherwise, Alien auto-generates domains.
+ */
+export type SyncAcquireResponseDomains = {
+    /**
+     * Custom domain configuration per resource ID.
+     */
+    customDomains?: {
+        [k: string]: SyncAcquireResponseCustomDomains;
+    } | null | undefined;
+};
+export type SyncAcquireResponseDomainsUnion = SyncAcquireResponseDomains | any;
+/**
+ * External bindings for pre-existing infrastructure.
+ *
+ * @remarks
+ * Allows using existing resources (MinIO, Redis, shared Container Apps
+ * Environment, etc.) instead of having Alien provision them.
+ * Required for Kubernetes platform, optional for cloud platforms.
+ */
+export type SyncAcquireResponseStackSettingsExternalBindings = {};
+/**
+ * How heartbeat health checks are handled.
+ */
+export declare const SyncAcquireResponseHeartbeats: {
+    readonly Off: "off";
+    readonly On: "on";
+};
+/**
+ * How heartbeat health checks are handled.
+ */
+export type SyncAcquireResponseHeartbeats = ClosedEnum<typeof SyncAcquireResponseHeartbeats>;
+/**
+ * Optional provider-specific identity for a cloud-backed Kubernetes cluster.
+ */
+export type SyncAcquireResponseCloud = {
+    accountId?: string | null | undefined;
+    clusterId?: string | null | undefined;
+    clusterName?: string | null | undefined;
+    projectId?: string | null | undefined;
+    region?: string | null | undefined;
+    resourceGroup?: string | null | undefined;
+    subscriptionId?: string | null | undefined;
+};
+export type SyncAcquireResponseCloudUnion = SyncAcquireResponseCloud | any;
+/**
+ * Ownership model for the Kubernetes cluster.
+ */
+export declare const SyncAcquireResponseOwnership: {
+    readonly Managed: "managed";
+    readonly Existing: "existing";
+    readonly External: "external";
+};
+/**
+ * Ownership model for the Kubernetes cluster.
+ */
+export type SyncAcquireResponseOwnership = ClosedEnum<typeof SyncAcquireResponseOwnership>;
+/**
+ * Kubernetes cluster setup settings.
+ */
+export type SyncAcquireResponseCluster = {
+    cloud?: SyncAcquireResponseCloud | any | null | undefined;
+    /**
+     * Namespace where the Alien chart and application resources run.
+     */
+    namespace?: string | null | undefined;
+    /**
+     * Ownership model for the Kubernetes cluster.
+     */
+    ownership: SyncAcquireResponseOwnership;
+};
+export type SyncAcquireResponseClusterUnion = SyncAcquireResponseCluster | any;
+export type SyncAcquireResponseCertificateNone2 = {
+    mode: "none";
+};
+export type SyncAcquireResponseCertificateManagedTLSSecret2 = {
+    mode: "managedTlsSecret";
+    /**
+     * Secret name template. Runtime may substitute resource/deployment tokens.
+     */
+    secretNameTemplate: string;
+};
+export type SyncAcquireResponseCertificateAwsAcmArn2 = {
+    /**
+     * Existing ACM certificate ARN.
+     */
+    certificateArn: string;
+    mode: "awsAcmArn";
+};
+export type SyncAcquireResponseCertificateManagedAcmImport2 = {
+    mode: "managedAcmImport";
+    /**
+     * ACM region. Defaults to the deployment region when omitted.
+     */
+    region?: string | null | undefined;
+    /**
+     * Tags applied to runtime-imported ACM certificates.
+     */
+    tags?: {
+        [k: string]: string;
+    } | undefined;
+};
+/**
+ * Namespace-scoped Kubernetes TLS Secret reference.
+ */
+export type SyncAcquireResponseCertificateTLSSecretRef2 = {
+    /**
+     * Secret namespace. Defaults to the release namespace when omitted.
+     */
+    namespace?: string | null | undefined;
+    /**
+     * Secret name.
+     */
+    secretName: string;
+    mode: "tlsSecretRef";
+};
+/**
+ * Certificate publication or reference mode for Kubernetes public endpoints.
+ */
+export type SyncAcquireResponseCertificateUnion2 = SyncAcquireResponseCertificateTLSSecretRef2 | SyncAcquireResponseCertificateManagedAcmImport2 | SyncAcquireResponseCertificateAwsAcmArn2 | SyncAcquireResponseCertificateManagedTLSSecret2 | SyncAcquireResponseCertificateNone2;
+export declare const SyncAcquireResponseModeCustom: {
+    readonly Custom: "custom";
+};
+export type SyncAcquireResponseModeCustom = ClosedEnum<typeof SyncAcquireResponseModeCustom>;
+export declare const SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum4: {
+    readonly AzureApplicationGatewayForContainers: "azureApplicationGatewayForContainers";
+};
+export type SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum4 = ClosedEnum<typeof SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum4>;
+export type SyncAcquireResponseProviderAzureApplicationGatewayForContainers4 = {
+    /**
+     * Optional ALB name when using BYO Application Gateway resources.
+     */
+    albName?: string | null | undefined;
+    /**
+     * Optional ALB namespace when using BYO Application Gateway resources.
+     */
+    albNamespace?: string | null | undefined;
+    /**
+     * Public or internal frontend exposure.
+     */
+    frontend: string;
+    provider: SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum4;
+};
+export declare const SyncAcquireResponseProviderGkeGatewayEnum4: {
+    readonly GkeGateway: "gkeGateway";
+};
+export type SyncAcquireResponseProviderGkeGatewayEnum4 = ClosedEnum<typeof SyncAcquireResponseProviderGkeGatewayEnum4>;
+export type SyncAcquireResponseProviderGkeGateway4 = {
+    provider: SyncAcquireResponseProviderGkeGatewayEnum4;
+    /**
+     * Optional static address name for the Gateway frontend.
+     */
+    staticAddressName?: string | null | undefined;
+};
+export declare const SyncAcquireResponseProviderAwsAlbEnum4: {
+    readonly AwsAlb: "awsAlb";
+};
+export type SyncAcquireResponseProviderAwsAlbEnum4 = ClosedEnum<typeof SyncAcquireResponseProviderAwsAlbEnum4>;
+export type SyncAcquireResponseProviderAwsAlb4 = {
+    /**
+     * Optional ALB IP address type, such as `dualstack`.
+     */
+    ipAddressType?: string | null | undefined;
+    provider: SyncAcquireResponseProviderAwsAlbEnum4;
+    /**
+     * Internet-facing or internal ALB scheme.
+     */
+    scheme: string;
+    /**
+     * Explicit subnet IDs when the profile cannot rely on controller discovery.
+     */
+    subnetIds?: Array<string> | undefined;
+    /**
+     * ALB target type, usually `ip`.
+     */
+    targetType: string;
+};
+export type SyncAcquireResponseProviderUnion4 = SyncAcquireResponseProviderAwsAlb4 | SyncAcquireResponseProviderAzureApplicationGatewayForContainers4 | SyncAcquireResponseProviderGkeGateway4 | any;
+/**
+ * Shared Gateway API route profile values.
+ */
+export type SyncAcquireResponseRouteGateway2 = {
+    /**
+     * Annotations applied to route objects.
+     */
+    annotations?: {
+        [k: string]: string;
+    } | undefined;
+    /**
+     * Route controller identifier, for example a cloud Gateway controller.
+     */
+    controller?: string | null | undefined;
+    /**
+     * GatewayClass selected for generated Gateways.
+     */
+    gatewayClassName: string;
+    /**
+     * Labels applied to route objects.
+     */
+    labels?: {
+        [k: string]: string;
+    } | undefined;
+    /**
+     * Listener port, usually 443.
+     */
+    listenerPort: number;
+    provider?: SyncAcquireResponseProviderAwsAlb4 | SyncAcquireResponseProviderAzureApplicationGatewayForContainers4 | SyncAcquireResponseProviderGkeGateway4 | any | null | undefined;
+    routeApi: "gateway";
+};
+export declare const SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum3: {
+    readonly AzureApplicationGatewayForContainers: "azureApplicationGatewayForContainers";
+};
+export type SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum3 = ClosedEnum<typeof SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum3>;
+export type SyncAcquireResponseProviderAzureApplicationGatewayForContainers3 = {
+    /**
+     * Optional ALB name when using BYO Application Gateway resources.
+     */
+    albName?: string | null | undefined;
+    /**
+     * Optional ALB namespace when using BYO Application Gateway resources.
+     */
+    albNamespace?: string | null | undefined;
+    /**
+     * Public or internal frontend exposure.
+     */
+    frontend: string;
+    provider: SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum3;
+};
+export declare const SyncAcquireResponseProviderGkeGatewayEnum3: {
+    readonly GkeGateway: "gkeGateway";
+};
+export type SyncAcquireResponseProviderGkeGatewayEnum3 = ClosedEnum<typeof SyncAcquireResponseProviderGkeGatewayEnum3>;
+export type SyncAcquireResponseProviderGkeGateway3 = {
+    provider: SyncAcquireResponseProviderGkeGatewayEnum3;
+    /**
+     * Optional static address name for the Gateway frontend.
+     */
+    staticAddressName?: string | null | undefined;
+};
+export declare const SyncAcquireResponseProviderAwsAlbEnum3: {
+    readonly AwsAlb: "awsAlb";
+};
+export type SyncAcquireResponseProviderAwsAlbEnum3 = ClosedEnum<typeof SyncAcquireResponseProviderAwsAlbEnum3>;
+export type SyncAcquireResponseProviderAwsAlb3 = {
+    /**
+     * Optional ALB IP address type, such as `dualstack`.
+     */
+    ipAddressType?: string | null | undefined;
+    provider: SyncAcquireResponseProviderAwsAlbEnum3;
+    /**
+     * Internet-facing or internal ALB scheme.
+     */
+    scheme: string;
+    /**
+     * Explicit subnet IDs when the profile cannot rely on controller discovery.
+     */
+    subnetIds?: Array<string> | undefined;
+    /**
+     * ALB target type, usually `ip`.
+     */
+    targetType: string;
+};
+export type SyncAcquireResponseProviderUnion3 = SyncAcquireResponseProviderAwsAlb3 | SyncAcquireResponseProviderAzureApplicationGatewayForContainers3 | SyncAcquireResponseProviderGkeGateway3 | any;
+/**
+ * Shared Ingress route profile values.
+ */
+export type SyncAcquireResponseRouteIngress2 = {
+    /**
+     * Annotations applied to route objects.
+     */
+    annotations?: {
+        [k: string]: string;
+    } | undefined;
+    /**
+     * Route controller identifier, for example `eks.amazonaws.com/alb`.
+     */
+    controller?: string | null | undefined;
+    /**
+     * `spec.ingressClassName` for generated Ingresses.
+     */
+    ingressClassName: string;
+    /**
+     * Labels applied to route objects.
+     */
+    labels?: {
+        [k: string]: string;
+    } | undefined;
+    provider?: SyncAcquireResponseProviderAwsAlb3 | SyncAcquireResponseProviderAzureApplicationGatewayForContainers3 | SyncAcquireResponseProviderGkeGateway3 | any | null | undefined;
+    routeApi: "ingress";
+};
+/**
+ * Kubernetes route API selected for public endpoints.
+ */
+export type SyncAcquireResponseRouteUnion2 = SyncAcquireResponseRouteIngress2 | SyncAcquireResponseRouteGateway2;
+export type SyncAcquireResponseExposureCustom = {
+    /**
+     * Certificate publication or reference mode for Kubernetes public endpoints.
+     */
+    certificate: SyncAcquireResponseCertificateTLSSecretRef2 | SyncAcquireResponseCertificateManagedAcmImport2 | SyncAcquireResponseCertificateAwsAcmArn2 | SyncAcquireResponseCertificateManagedTLSSecret2 | SyncAcquireResponseCertificateNone2;
+    /**
+     * Hostname routed by the Kubernetes public endpoint.
+     */
+    domain: string;
+    mode: SyncAcquireResponseModeCustom;
+    /**
+     * Kubernetes route API selected for public endpoints.
+     */
+    route: SyncAcquireResponseRouteIngress2 | SyncAcquireResponseRouteGateway2;
+};
+export type SyncAcquireResponseCertificateNone1 = {
+    mode: "none";
+};
+export type SyncAcquireResponseCertificateManagedTLSSecret1 = {
+    mode: "managedTlsSecret";
+    /**
+     * Secret name template. Runtime may substitute resource/deployment tokens.
+     */
+    secretNameTemplate: string;
+};
+export type SyncAcquireResponseCertificateAwsAcmArn1 = {
+    /**
+     * Existing ACM certificate ARN.
+     */
+    certificateArn: string;
+    mode: "awsAcmArn";
+};
+export type SyncAcquireResponseCertificateManagedAcmImport1 = {
+    mode: "managedAcmImport";
+    /**
+     * ACM region. Defaults to the deployment region when omitted.
+     */
+    region?: string | null | undefined;
+    /**
+     * Tags applied to runtime-imported ACM certificates.
+     */
+    tags?: {
+        [k: string]: string;
+    } | undefined;
+};
+/**
+ * Namespace-scoped Kubernetes TLS Secret reference.
+ */
+export type SyncAcquireResponseCertificateTLSSecretRef1 = {
+    /**
+     * Secret namespace. Defaults to the release namespace when omitted.
+     */
+    namespace?: string | null | undefined;
+    /**
+     * Secret name.
+     */
+    secretName: string;
+    mode: "tlsSecretRef";
+};
+/**
+ * Certificate publication or reference mode for Kubernetes public endpoints.
+ */
+export type SyncAcquireResponseCertificateUnion1 = SyncAcquireResponseCertificateTLSSecretRef1 | SyncAcquireResponseCertificateManagedAcmImport1 | SyncAcquireResponseCertificateAwsAcmArn1 | SyncAcquireResponseCertificateManagedTLSSecret1 | SyncAcquireResponseCertificateNone1;
+export declare const SyncAcquireResponseModeGenerated: {
+    readonly Generated: "generated";
+};
+export type SyncAcquireResponseModeGenerated = ClosedEnum<typeof SyncAcquireResponseModeGenerated>;
+export declare const SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum2: {
+    readonly AzureApplicationGatewayForContainers: "azureApplicationGatewayForContainers";
+};
+export type SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum2 = ClosedEnum<typeof SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum2>;
+export type SyncAcquireResponseProviderAzureApplicationGatewayForContainers2 = {
+    /**
+     * Optional ALB name when using BYO Application Gateway resources.
+     */
+    albName?: string | null | undefined;
+    /**
+     * Optional ALB namespace when using BYO Application Gateway resources.
+     */
+    albNamespace?: string | null | undefined;
+    /**
+     * Public or internal frontend exposure.
+     */
+    frontend: string;
+    provider: SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum2;
+};
+export declare const SyncAcquireResponseProviderGkeGatewayEnum2: {
+    readonly GkeGateway: "gkeGateway";
+};
+export type SyncAcquireResponseProviderGkeGatewayEnum2 = ClosedEnum<typeof SyncAcquireResponseProviderGkeGatewayEnum2>;
+export type SyncAcquireResponseProviderGkeGateway2 = {
+    provider: SyncAcquireResponseProviderGkeGatewayEnum2;
+    /**
+     * Optional static address name for the Gateway frontend.
+     */
+    staticAddressName?: string | null | undefined;
+};
+export declare const SyncAcquireResponseProviderAwsAlbEnum2: {
+    readonly AwsAlb: "awsAlb";
+};
+export type SyncAcquireResponseProviderAwsAlbEnum2 = ClosedEnum<typeof SyncAcquireResponseProviderAwsAlbEnum2>;
+export type SyncAcquireResponseProviderAwsAlb2 = {
+    /**
+     * Optional ALB IP address type, such as `dualstack`.
+     */
+    ipAddressType?: string | null | undefined;
+    provider: SyncAcquireResponseProviderAwsAlbEnum2;
     /**
-     * Full OTLP logs endpoint URL.
-     *
-     * @remarks
-     * Example: "https://<manager-host>/v1/logs"
+     * Internet-facing or internal ALB scheme.
      */
-    logsEndpoint: string;
+    scheme: string;
     /**
-     * Auth header value for the metrics endpoint in "key=value,..." format (optional).
-     *
-     * @remarks
-     *
-     * When absent, `logs_auth_header` is reused for metrics — suitable when the same
-     * credential covers both signals. When present (e.g. Axiom with separate datasets),
-     * this value is used exclusively for metrics.
-     *
-     * Example: "authorization=Bearer <token>,x-axiom-dataset=<metrics-dataset>"
+     * Explicit subnet IDs when the profile cannot rely on controller discovery.
      */
-    metricsAuthHeader?: string | null | undefined;
+    subnetIds?: Array<string> | undefined;
     /**
-     * Full OTLP metrics endpoint URL (optional).
-     *
-     * @remarks
-     * When set, horizond exports its own VM/container orchestration metrics here.
-     * Example: "https://api.axiom.co/v1/metrics"
+     * ALB target type, usually `ip`.
      */
-    metricsEndpoint?: string | null | undefined;
+    targetType: string;
 };
-export type SyncAcquireResponseMonitoringUnion = SyncAcquireResponseMonitoring | any;
+export type SyncAcquireResponseProviderUnion2 = SyncAcquireResponseProviderAwsAlb2 | SyncAcquireResponseProviderAzureApplicationGatewayForContainers2 | SyncAcquireResponseProviderGkeGateway2 | any;
 /**
- * Deployment model: how updates are delivered to the remote environment.
+ * Shared Gateway API route profile values.
  */
-export declare const SyncAcquireResponseDeploymentModel: {
-    readonly Push: "push";
-    readonly Pull: "pull";
+export type SyncAcquireResponseRouteGateway1 = {
+    /**
+     * Annotations applied to route objects.
+     */
+    annotations?: {
+        [k: string]: string;
+    } | undefined;
+    /**
+     * Route controller identifier, for example a cloud Gateway controller.
+     */
+    controller?: string | null | undefined;
+    /**
+     * GatewayClass selected for generated Gateways.
+     */
+    gatewayClassName: string;
+    /**
+     * Labels applied to route objects.
+     */
+    labels?: {
+        [k: string]: string;
+    } | undefined;
+    /**
+     * Listener port, usually 443.
+     */
+    listenerPort: number;
+    provider?: SyncAcquireResponseProviderAwsAlb2 | SyncAcquireResponseProviderAzureApplicationGatewayForContainers2 | SyncAcquireResponseProviderGkeGateway2 | any | null | undefined;
+    routeApi: "gateway";
 };
-/**
- * Deployment model: how updates are delivered to the remote environment.
- */
-export type SyncAcquireResponseDeploymentModel = ClosedEnum<typeof SyncAcquireResponseDeploymentModel>;
-export type SyncAcquireResponseAws = {
-    certificateArn: string;
+export declare const SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum1: {
+    readonly AzureApplicationGatewayForContainers: "azureApplicationGatewayForContainers";
 };
-export type SyncAcquireResponseAwsUnion = SyncAcquireResponseAws | any;
-export type SyncAcquireResponseAzureConfig = {
-    keyVaultCertificateId: string;
+export type SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum1 = ClosedEnum<typeof SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum1>;
+export type SyncAcquireResponseProviderAzureApplicationGatewayForContainers1 = {
+    /**
+     * Optional ALB name when using BYO Application Gateway resources.
+     */
+    albName?: string | null | undefined;
+    /**
+     * Optional ALB namespace when using BYO Application Gateway resources.
+     */
+    albNamespace?: string | null | undefined;
+    /**
+     * Public or internal frontend exposure.
+     */
+    frontend: string;
+    provider: SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum1;
 };
-export type SyncAcquireResponseAzureUnion = SyncAcquireResponseAzureConfig | any;
-export type SyncAcquireResponseGcpConfig = {
-    certificateName: string;
+export declare const SyncAcquireResponseProviderGkeGatewayEnum1: {
+    readonly GkeGateway: "gkeGateway";
 };
-export type SyncAcquireResponseGcpUnion = SyncAcquireResponseGcpConfig | any;
-/**
- * Platform-specific certificate references for custom domains.
- */
-export type SyncAcquireResponseCertificate = {
-    aws?: SyncAcquireResponseAws | any | null | undefined;
-    azure?: SyncAcquireResponseAzureConfig | any | null | undefined;
-    gcp?: SyncAcquireResponseGcpConfig | any | null | undefined;
+export type SyncAcquireResponseProviderGkeGatewayEnum1 = ClosedEnum<typeof SyncAcquireResponseProviderGkeGatewayEnum1>;
+export type SyncAcquireResponseProviderGkeGateway1 = {
+    provider: SyncAcquireResponseProviderGkeGatewayEnum1;
+    /**
+     * Optional static address name for the Gateway frontend.
+     */
+    staticAddressName?: string | null | undefined;
 };
-/**
- * Custom domain configuration for a single resource.
- */
-export type SyncAcquireResponseCustomDomains = {
+export declare const SyncAcquireResponseProviderAwsAlbEnum1: {
+    readonly AwsAlb: "awsAlb";
+};
+export type SyncAcquireResponseProviderAwsAlbEnum1 = ClosedEnum<typeof SyncAcquireResponseProviderAwsAlbEnum1>;
+export type SyncAcquireResponseProviderAwsAlb1 = {
     /**
-     * Platform-specific certificate references for custom domains.
+     * Optional ALB IP address type, such as `dualstack`.
      */
-    certificate: SyncAcquireResponseCertificate;
+    ipAddressType?: string | null | undefined;
+    provider: SyncAcquireResponseProviderAwsAlbEnum1;
     /**
-     * Fully qualified domain name to use.
+     * Internet-facing or internal ALB scheme.
      */
-    domain: string;
+    scheme: string;
+    /**
+     * Explicit subnet IDs when the profile cannot rely on controller discovery.
+     */
+    subnetIds?: Array<string> | undefined;
+    /**
+     * ALB target type, usually `ip`.
+     */
+    targetType: string;
 };
+export type SyncAcquireResponseProviderUnion1 = SyncAcquireResponseProviderAwsAlb1 | SyncAcquireResponseProviderAzureApplicationGatewayForContainers1 | SyncAcquireResponseProviderGkeGateway1 | any;
 /**
- * Domain configuration for the stack.
- *
- * @remarks
- *
- * When `custom_domains` is set, the specified resources use customer-provided
- * domains and certificates. Otherwise, Alien auto-generates domains.
+ * Shared Ingress route profile values.
  */
-export type SyncAcquireResponseDomains = {
+export type SyncAcquireResponseRouteIngress1 = {
     /**
-     * Custom domain configuration per resource ID.
+     * Annotations applied to route objects.
      */
-    customDomains?: {
-        [k: string]: SyncAcquireResponseCustomDomains;
-    } | null | undefined;
+    annotations?: {
+        [k: string]: string;
+    } | undefined;
+    /**
+     * Route controller identifier, for example `eks.amazonaws.com/alb`.
+     */
+    controller?: string | null | undefined;
+    /**
+     * `spec.ingressClassName` for generated Ingresses.
+     */
+    ingressClassName: string;
+    /**
+     * Labels applied to route objects.
+     */
+    labels?: {
+        [k: string]: string;
+    } | undefined;
+    provider?: SyncAcquireResponseProviderAwsAlb1 | SyncAcquireResponseProviderAzureApplicationGatewayForContainers1 | SyncAcquireResponseProviderGkeGateway1 | any | null | undefined;
+    routeApi: "ingress";
 };
-export type SyncAcquireResponseDomainsUnion = SyncAcquireResponseDomains | any;
 /**
- * How heartbeat health checks are handled.
+ * Kubernetes route API selected for public endpoints.
  */
-export declare const SyncAcquireResponseHeartbeats: {
-    readonly Off: "off";
-    readonly On: "on";
+export type SyncAcquireResponseRouteUnion1 = SyncAcquireResponseRouteIngress1 | SyncAcquireResponseRouteGateway1;
+export type SyncAcquireResponseExposureGenerated = {
+    /**
+     * Certificate publication or reference mode for Kubernetes public endpoints.
+     */
+    certificate: SyncAcquireResponseCertificateTLSSecretRef1 | SyncAcquireResponseCertificateManagedAcmImport1 | SyncAcquireResponseCertificateAwsAcmArn1 | SyncAcquireResponseCertificateManagedTLSSecret1 | SyncAcquireResponseCertificateNone1;
+    mode: SyncAcquireResponseModeGenerated;
+    /**
+     * Kubernetes route API selected for public endpoints.
+     */
+    route: SyncAcquireResponseRouteIngress1 | SyncAcquireResponseRouteGateway1;
+};
+export declare const SyncAcquireResponseModeDisabled: {
+    readonly Disabled: "disabled";
 };
+export type SyncAcquireResponseModeDisabled = ClosedEnum<typeof SyncAcquireResponseModeDisabled>;
+export type SyncAcquireResponseExposureDisabled = {
+    mode: SyncAcquireResponseModeDisabled;
+};
+export type SyncAcquireResponseExposureUnion = SyncAcquireResponseExposureCustom | SyncAcquireResponseExposureGenerated | SyncAcquireResponseExposureDisabled | any;
 /**
- * How heartbeat health checks are handled.
+ * Kubernetes runtime substrate configuration.
+ *
+ * @remarks
+ *
+ * This controls how setup chooses the cluster backing `Platform::Kubernetes`
+ * deployments. When omitted, cloud-backed Kubernetes deployments default to a
+ * managed cluster and generic/on-prem Kubernetes defaults to an external
+ * cluster.
  */
-export type SyncAcquireResponseHeartbeats = ClosedEnum<typeof SyncAcquireResponseHeartbeats>;
+export type SyncAcquireResponseKubernetes = {
+    cluster?: SyncAcquireResponseCluster | any | null | undefined;
+    exposure?: SyncAcquireResponseExposureCustom | SyncAcquireResponseExposureGenerated | SyncAcquireResponseExposureDisabled | any | null | undefined;
+};
+export type SyncAcquireResponseKubernetesUnion = SyncAcquireResponseKubernetes | any;
 export declare const SyncAcquireResponseTypeByoVnetAzure: {
     readonly ByoVnetAzure: "byo-vnet-azure";
 };
@@ -5016,10 +6551,20 @@ export type SyncAcquireResponseStackSettings = {
      */
     deploymentModel?: SyncAcquireResponseDeploymentModel | undefined;
     domains?: SyncAcquireResponseDomains | any | null | undefined;
+    /**
+     * External bindings for pre-existing infrastructure.
+     *
+     * @remarks
+     * Allows using existing resources (MinIO, Redis, shared Container Apps
+     * Environment, etc.) instead of having Alien provision them.
+     * Required for Kubernetes platform, optional for cloud platforms.
+     */
+    externalBindings?: SyncAcquireResponseStackSettingsExternalBindings | null | undefined;
     /**
      * How heartbeat health checks are handled.
      */
     heartbeats?: SyncAcquireResponseHeartbeats | undefined;
+    kubernetes?: SyncAcquireResponseKubernetes | any | null | undefined;
     network?: SyncAcquireResponseNetworkByoVpcAws | SyncAcquireResponseNetworkByoVpcGcp | SyncAcquireResponseNetworkByoVnetAzure | SyncAcquireResponseNetworkUseDefault | SyncAcquireResponseNetworkCreate | any | null | undefined;
     /**
      * How telemetry (logs, metrics, traces) is handled.
@@ -5042,8 +6587,27 @@ export type SyncAcquireResponseConfig = {
      * This requires running with elevated cloud credentials.
      */
     allowFrozenChanges?: boolean | undefined;
-    artifactRegistry?: SyncAcquireResponseArtifactRegistry | any | null | undefined;
+    basePlatform?: SyncAcquireResponseBasePlatformEnum | any | null | undefined;
     computeBackend?: SyncAcquireResponseComputeBackendHorizon | any | null | undefined;
+    /**
+     * Human-readable deployment name for cloud console metadata.
+     *
+     * @remarks
+     *
+     * This is separate from the physical resource prefix in StackState. It is
+     * used only for display text such as IAM role descriptions, service
+     * account descriptions, and custom role titles.
+     */
+    deploymentName?: string | null | undefined;
+    /**
+     * Deployment token for pull authentication with the manager's registry.
+     *
+     * @remarks
+     *
+     * Used by controllers to configure registry credentials so cloud platforms
+     * and K8s can pull images from the manager's `/v2/` endpoint.
+     */
+    deploymentToken?: string | null | undefined;
     domainMetadata?: SyncAcquireResponseDomainMetadata | any | null | undefined;
     /**
      * Snapshot of environment variables at a point in time
@@ -5057,24 +6621,50 @@ export type SyncAcquireResponseConfig = {
      * Validated at runtime: binding type must match resource type.
      */
     externalBindings?: {
-        [k: string]: SyncAcquireResponseExternalBindingsS3 | SyncAcquireResponseExternalBindingsBlob | SyncAcquireResponseExternalBindingsGcs | SyncAcquireResponseExternalBindingsLocalStorage | SyncAcquireResponseExternalBindingsSqs | SyncAcquireResponseExternalBindingsPubsub | SyncAcquireResponseExternalBindingsServicebus | SyncAcquireResponseExternalBindingsDynamodb | SyncAcquireResponseExternalBindingsFirestore | SyncAcquireResponseExternalBindingsTablestorage | SyncAcquireResponseExternalBindingsRedis | SyncAcquireResponseExternalBindingsLocalKv | SyncAcquireResponseExternalBindingsEcr | SyncAcquireResponseExternalBindingsAcr | SyncAcquireResponseExternalBindingsGar | SyncAcquireResponseExternalBindingsLocal | SyncAcquireResponseExternalBindingsParameterStore | SyncAcquireResponseExternalBindingsSecretManager | SyncAcquireResponseExternalBindingsKeyVault | SyncAcquireResponseExternalBindingsKubernetesSecret | SyncAcquireResponseExternalBindingsLocalVault;
+        [k: string]: SyncAcquireResponseExternalBindingsContainerAppsEnvironment | SyncAcquireResponseExternalBindingsS3 | SyncAcquireResponseExternalBindingsBlob | SyncAcquireResponseExternalBindingsGcs | SyncAcquireResponseExternalBindingsLocalStorage | SyncAcquireResponseExternalBindingsSqs | SyncAcquireResponseExternalBindingsPubsub | SyncAcquireResponseExternalBindingsServicebus | SyncAcquireResponseExternalBindingsLocalQueue | SyncAcquireResponseExternalBindingsDynamodb | SyncAcquireResponseExternalBindingsFirestore | SyncAcquireResponseExternalBindingsTablestorage | SyncAcquireResponseExternalBindingsRedis | SyncAcquireResponseExternalBindingsLocalKv | SyncAcquireResponseExternalBindingsEcr | SyncAcquireResponseExternalBindingsAcr | SyncAcquireResponseExternalBindingsGar | SyncAcquireResponseExternalBindingsLocal | SyncAcquireResponseExternalBindingsParameterStore | SyncAcquireResponseExternalBindingsSecretManager | SyncAcquireResponseExternalBindingsKeyVault | SyncAcquireResponseExternalBindingsKubernetesSecret | SyncAcquireResponseExternalBindingsLocalVault;
     } | undefined;
-    imagePullCredentials?: SyncAcquireResponseImagePullCredentials | any | null | undefined;
     managementConfig?: SyncAcquireResponseManagementConfigAzure | SyncAcquireResponseManagementConfigAws | SyncAcquireResponseManagementConfigGcp | SyncAcquireResponseManagementConfigKubernetes | any | null | undefined;
+    /**
+     * Manager base URL (e.g., "https://manager.alien.dev").
+     *
+     * @remarks
+     *
+     * The manager IS the container registry — its `/v2/` endpoint serves as
+     * the OCI Distribution API. Controllers derive the proxy host from this
+     * to configure pull auth (RegistryCredentials, imagePullSecrets).
+     *
+     * When None (e.g., `alien dev`), controllers use image URIs as-is.
+     */
+    managerUrl?: string | null | undefined;
     monitoring?: SyncAcquireResponseMonitoring | any | null | undefined;
     /**
-     * Public URLs for exposed resources (optional override for all platforms).
+     * Native image registry host+prefix for platforms that require it.
+     *
+     * @remarks
+     *
+     * Lambda (ECR) and Cloud Run (GAR) require native registry URIs. Other
+     * runtimes, including Azure Container Apps, pull through the manager's
+     * registry proxy.
+     *
+     * Derived by the manager from the artifact registry binding:
+     * - ECR: `{account_id}.dkr.ecr.{region}.amazonaws.com/{repository_prefix}`
+     * - GAR: `{region}-docker.pkg.dev/{project_id}/{repository_name}`
+     */
+    nativeImageHost?: string | null | undefined;
+    /**
+     * Public URLs for exposed resources (optional override).
      *
      * @remarks
      *
-     * - **Kubernetes**: Pre-computed by Helm from services config (highly recommended)
-     * - **Cloud**: Optional override of domain_metadata or load balancer DNS
-     * - **Local**: Optional override of dynamic localhost URLs
+     * Use this only when a caller already knows the public URL. Managed public
+     * endpoint flows should prefer `domain_metadata` plus controller-reported
+     * load balancer outputs so DNS, certificate renewal, and route readiness
+     * stay tied to the resource state.
      *
      * If not set, platforms determine public URLs from other sources:
-     * - Cloud: domain_metadata FQDN or load balancer DNS
-     * - Local: http://localhost:{allocated_port}
-     * - Kubernetes: None (unless provided by Helm)
+     * - Managed DNS/TLS flows: `domain_metadata` FQDN or load balancer DNS
+     * - Local: `http://localhost:{allocated_port}`
+     * - Custom or disabled exposure: no public URL unless a controller reports one
      *
      * Key: resource ID, Value: public URL (e.g., "https://api.acme.com")
      */
@@ -5101,7 +6691,7 @@ export type SyncAcquireResponseDeployment = {
      */
     deploymentId: string;
     /**
-     * Project ID the agent belongs to
+     * Project ID the deployment belongs to
      */
     projectId: string;
     /**
@@ -5119,7 +6709,7 @@ export type Failure = {
      */
     deploymentId: string;
     /**
-     * Project ID the agent belongs to
+     * Project ID the deployment belongs to
      */
     projectId: string;
     error: APIError;
@@ -5149,6 +6739,8 @@ export declare function syncAcquireResponseCurrentReleaseOverrideAwStackFromJSON
 export declare const SyncAcquireResponseCurrentReleaseOverrideAwBinding$inboundSchema: z.ZodType<SyncAcquireResponseCurrentReleaseOverrideAwBinding, unknown>;
 export declare function syncAcquireResponseCurrentReleaseOverrideAwBindingFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCurrentReleaseOverrideAwBinding, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseCurrentReleaseOverrideEffect$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseCurrentReleaseOverrideEffect>;
+/** @internal */
 export declare const SyncAcquireResponseCurrentReleaseOverrideAwGrant$inboundSchema: z.ZodType<SyncAcquireResponseCurrentReleaseOverrideAwGrant, unknown>;
 export declare function syncAcquireResponseCurrentReleaseOverrideAwGrantFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCurrentReleaseOverrideAwGrant, SDKValidationError>;
 /** @internal */
@@ -5218,6 +6810,8 @@ export declare function syncAcquireResponseCurrentReleaseExtendAwStackFromJSON(j
 export declare const SyncAcquireResponseCurrentReleaseExtendAwBinding$inboundSchema: z.ZodType<SyncAcquireResponseCurrentReleaseExtendAwBinding, unknown>;
 export declare function syncAcquireResponseCurrentReleaseExtendAwBindingFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCurrentReleaseExtendAwBinding, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseCurrentReleaseExtendEffect$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseCurrentReleaseExtendEffect>;
+/** @internal */
 export declare const SyncAcquireResponseCurrentReleaseExtendAwGrant$inboundSchema: z.ZodType<SyncAcquireResponseCurrentReleaseExtendAwGrant, unknown>;
 export declare function syncAcquireResponseCurrentReleaseExtendAwGrantFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCurrentReleaseExtendAwGrant, SDKValidationError>;
 /** @internal */
@@ -5290,6 +6884,8 @@ export declare function syncAcquireResponseCurrentReleaseProfileAwStackFromJSON(
 export declare const SyncAcquireResponseCurrentReleaseProfileAwBinding$inboundSchema: z.ZodType<SyncAcquireResponseCurrentReleaseProfileAwBinding, unknown>;
 export declare function syncAcquireResponseCurrentReleaseProfileAwBindingFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCurrentReleaseProfileAwBinding, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseCurrentReleaseProfileEffect$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseCurrentReleaseProfileEffect>;
+/** @internal */
 export declare const SyncAcquireResponseCurrentReleaseProfileAwGrant$inboundSchema: z.ZodType<SyncAcquireResponseCurrentReleaseProfileAwGrant, unknown>;
 export declare function syncAcquireResponseCurrentReleaseProfileAwGrantFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCurrentReleaseProfileAwGrant, SDKValidationError>;
 /** @internal */
@@ -5361,6 +6957,8 @@ export declare const SyncAcquireResponseCurrentReleaseLifecycle$inboundSchema: z
 export declare const SyncAcquireResponseCurrentReleaseResources$inboundSchema: z.ZodType<SyncAcquireResponseCurrentReleaseResources, unknown>;
 export declare function syncAcquireResponseCurrentReleaseResourcesFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCurrentReleaseResources, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseCurrentReleaseSupportedPlatform$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseCurrentReleaseSupportedPlatform>;
+/** @internal */
 export declare const SyncAcquireResponseCurrentReleaseStack$inboundSchema: z.ZodType<SyncAcquireResponseCurrentReleaseStack, unknown>;
 export declare function syncAcquireResponseCurrentReleaseStackFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCurrentReleaseStack, SDKValidationError>;
 /** @internal */
@@ -5400,6 +6998,16 @@ export declare function syncAcquireResponseEnvironmentInfoUnionFromJSON(jsonStri
 /** @internal */
 export declare const SyncAcquireResponseCurrentPlatform$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseCurrentPlatform>;
 /** @internal */
+export declare const SyncAcquireResponseDeleteScopeEnum$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseDeleteScopeEnum>;
+/** @internal */
+export declare const SyncAcquireResponseDeleteScopeUnion$inboundSchema: z.ZodType<SyncAcquireResponseDeleteScopeUnion, unknown>;
+export declare function syncAcquireResponseDeleteScopeUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseDeleteScopeUnion, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponsePendingDeleteScopeEnum$inboundSchema: z.ZodEnum<typeof SyncAcquireResponsePendingDeleteScopeEnum>;
+/** @internal */
+export declare const SyncAcquireResponsePendingDeleteScopeUnion$inboundSchema: z.ZodType<SyncAcquireResponsePendingDeleteScopeUnion, unknown>;
+export declare function syncAcquireResponsePendingDeleteScopeUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponsePendingDeleteScopeUnion, SDKValidationError>;
+/** @internal */
 export declare const SyncAcquireResponsePreparedStackManagementEnum$inboundSchema: z.ZodEnum<typeof SyncAcquireResponsePreparedStackManagementEnum>;
 /** @internal */
 export declare const SyncAcquireResponsePreparedStackOverrideAwResource$inboundSchema: z.ZodType<SyncAcquireResponsePreparedStackOverrideAwResource, unknown>;
@@ -5411,6 +7019,8 @@ export declare function syncAcquireResponsePreparedStackOverrideAwStackFromJSON(
 export declare const SyncAcquireResponsePreparedStackOverrideAwBinding$inboundSchema: z.ZodType<SyncAcquireResponsePreparedStackOverrideAwBinding, unknown>;
 export declare function syncAcquireResponsePreparedStackOverrideAwBindingFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponsePreparedStackOverrideAwBinding, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponsePreparedStackOverrideEffect$inboundSchema: z.ZodEnum<typeof SyncAcquireResponsePreparedStackOverrideEffect>;
+/** @internal */
 export declare const SyncAcquireResponsePreparedStackOverrideAwGrant$inboundSchema: z.ZodType<SyncAcquireResponsePreparedStackOverrideAwGrant, unknown>;
 export declare function syncAcquireResponsePreparedStackOverrideAwGrantFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponsePreparedStackOverrideAwGrant, SDKValidationError>;
 /** @internal */
@@ -5480,6 +7090,8 @@ export declare function syncAcquireResponsePreparedStackExtendAwStackFromJSON(js
 export declare const SyncAcquireResponsePreparedStackExtendAwBinding$inboundSchema: z.ZodType<SyncAcquireResponsePreparedStackExtendAwBinding, unknown>;
 export declare function syncAcquireResponsePreparedStackExtendAwBindingFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponsePreparedStackExtendAwBinding, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponsePreparedStackExtendEffect$inboundSchema: z.ZodEnum<typeof SyncAcquireResponsePreparedStackExtendEffect>;
+/** @internal */
 export declare const SyncAcquireResponsePreparedStackExtendAwGrant$inboundSchema: z.ZodType<SyncAcquireResponsePreparedStackExtendAwGrant, unknown>;
 export declare function syncAcquireResponsePreparedStackExtendAwGrantFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponsePreparedStackExtendAwGrant, SDKValidationError>;
 /** @internal */
@@ -5552,6 +7164,8 @@ export declare function syncAcquireResponsePreparedStackProfileAwStackFromJSON(j
 export declare const SyncAcquireResponsePreparedStackProfileAwBinding$inboundSchema: z.ZodType<SyncAcquireResponsePreparedStackProfileAwBinding, unknown>;
 export declare function syncAcquireResponsePreparedStackProfileAwBindingFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponsePreparedStackProfileAwBinding, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponsePreparedStackProfileEffect$inboundSchema: z.ZodEnum<typeof SyncAcquireResponsePreparedStackProfileEffect>;
+/** @internal */
 export declare const SyncAcquireResponsePreparedStackProfileAwGrant$inboundSchema: z.ZodType<SyncAcquireResponsePreparedStackProfileAwGrant, unknown>;
 export declare function syncAcquireResponsePreparedStackProfileAwGrantFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponsePreparedStackProfileAwGrant, SDKValidationError>;
 /** @internal */
@@ -5623,6 +7237,8 @@ export declare const SyncAcquireResponsePreparedStackLifecycle$inboundSchema: z.
 export declare const SyncAcquireResponsePreparedStackResources$inboundSchema: z.ZodType<SyncAcquireResponsePreparedStackResources, unknown>;
 export declare function syncAcquireResponsePreparedStackResourcesFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponsePreparedStackResources, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponsePreparedStackSupportedPlatform$inboundSchema: z.ZodEnum<typeof SyncAcquireResponsePreparedStackSupportedPlatform>;
+/** @internal */
 export declare const SyncAcquireResponsePreparedStack$inboundSchema: z.ZodType<SyncAcquireResponsePreparedStack, unknown>;
 export declare function syncAcquireResponsePreparedStackFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponsePreparedStack, SDKValidationError>;
 /** @internal */
@@ -5640,6 +7256,11 @@ export declare const SyncAcquireResponseStackStatePlatform$inboundSchema: z.ZodE
 export declare const SyncAcquireResponseStackStateConfig$inboundSchema: z.ZodType<SyncAcquireResponseStackStateConfig, unknown>;
 export declare function syncAcquireResponseStackStateConfigFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseStackStateConfig, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseControllerPlatformEnum$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseControllerPlatformEnum>;
+/** @internal */
+export declare const SyncAcquireResponseControllerPlatformUnion$inboundSchema: z.ZodType<SyncAcquireResponseControllerPlatformUnion, unknown>;
+export declare function syncAcquireResponseControllerPlatformUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseControllerPlatformUnion, SDKValidationError>;
+/** @internal */
 export declare const SyncAcquireResponseStackStateDependency$inboundSchema: z.ZodType<SyncAcquireResponseStackStateDependency, unknown>;
 export declare function syncAcquireResponseStackStateDependencyFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseStackStateDependency, SDKValidationError>;
 /** @internal */
@@ -5690,6 +7311,8 @@ export declare function syncAcquireResponseTargetReleaseOverrideAwStackFromJSON(
 export declare const SyncAcquireResponseTargetReleaseOverrideAwBinding$inboundSchema: z.ZodType<SyncAcquireResponseTargetReleaseOverrideAwBinding, unknown>;
 export declare function syncAcquireResponseTargetReleaseOverrideAwBindingFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseTargetReleaseOverrideAwBinding, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseTargetReleaseOverrideEffect$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseTargetReleaseOverrideEffect>;
+/** @internal */
 export declare const SyncAcquireResponseTargetReleaseOverrideAwGrant$inboundSchema: z.ZodType<SyncAcquireResponseTargetReleaseOverrideAwGrant, unknown>;
 export declare function syncAcquireResponseTargetReleaseOverrideAwGrantFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseTargetReleaseOverrideAwGrant, SDKValidationError>;
 /** @internal */
@@ -5759,6 +7382,8 @@ export declare function syncAcquireResponseTargetReleaseExtendAwStackFromJSON(js
 export declare const SyncAcquireResponseTargetReleaseExtendAwBinding$inboundSchema: z.ZodType<SyncAcquireResponseTargetReleaseExtendAwBinding, unknown>;
 export declare function syncAcquireResponseTargetReleaseExtendAwBindingFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseTargetReleaseExtendAwBinding, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseTargetReleaseExtendEffect$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseTargetReleaseExtendEffect>;
+/** @internal */
 export declare const SyncAcquireResponseTargetReleaseExtendAwGrant$inboundSchema: z.ZodType<SyncAcquireResponseTargetReleaseExtendAwGrant, unknown>;
 export declare function syncAcquireResponseTargetReleaseExtendAwGrantFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseTargetReleaseExtendAwGrant, SDKValidationError>;
 /** @internal */
@@ -5831,6 +7456,8 @@ export declare function syncAcquireResponseTargetReleaseProfileAwStackFromJSON(j
 export declare const SyncAcquireResponseTargetReleaseProfileAwBinding$inboundSchema: z.ZodType<SyncAcquireResponseTargetReleaseProfileAwBinding, unknown>;
 export declare function syncAcquireResponseTargetReleaseProfileAwBindingFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseTargetReleaseProfileAwBinding, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseTargetReleaseProfileEffect$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseTargetReleaseProfileEffect>;
+/** @internal */
 export declare const SyncAcquireResponseTargetReleaseProfileAwGrant$inboundSchema: z.ZodType<SyncAcquireResponseTargetReleaseProfileAwGrant, unknown>;
 export declare function syncAcquireResponseTargetReleaseProfileAwGrantFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseTargetReleaseProfileAwGrant, SDKValidationError>;
 /** @internal */
@@ -5902,6 +7529,8 @@ export declare const SyncAcquireResponseTargetReleaseLifecycle$inboundSchema: z.
 export declare const SyncAcquireResponseTargetReleaseResources$inboundSchema: z.ZodType<SyncAcquireResponseTargetReleaseResources, unknown>;
 export declare function syncAcquireResponseTargetReleaseResourcesFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseTargetReleaseResources, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseTargetReleaseSupportedPlatform$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseTargetReleaseSupportedPlatform>;
+/** @internal */
 export declare const SyncAcquireResponseTargetReleaseStack$inboundSchema: z.ZodType<SyncAcquireResponseTargetReleaseStack, unknown>;
 export declare function syncAcquireResponseTargetReleaseStackFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseTargetReleaseStack, SDKValidationError>;
 /** @internal */
@@ -5914,15 +7543,47 @@ export declare function syncAcquireResponseTargetReleaseUnionFromJSON(jsonString
 export declare const SyncAcquireResponseCurrent$inboundSchema: z.ZodType<SyncAcquireResponseCurrent, unknown>;
 export declare function syncAcquireResponseCurrentFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCurrent, SDKValidationError>;
 /** @internal */
-export declare const SyncAcquireResponseArtifactRegistry$inboundSchema: z.ZodType<SyncAcquireResponseArtifactRegistry, unknown>;
-export declare function syncAcquireResponseArtifactRegistryFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseArtifactRegistry, SDKValidationError>;
+export declare const SyncAcquireResponseBasePlatformEnum$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseBasePlatformEnum>;
 /** @internal */
-export declare const SyncAcquireResponseArtifactRegistryUnion$inboundSchema: z.ZodType<SyncAcquireResponseArtifactRegistryUnion, unknown>;
-export declare function syncAcquireResponseArtifactRegistryUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseArtifactRegistryUnion, SDKValidationError>;
+export declare const SyncAcquireResponseBasePlatformUnion$inboundSchema: z.ZodType<SyncAcquireResponseBasePlatformUnion, unknown>;
+export declare function syncAcquireResponseBasePlatformUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseBasePlatformUnion, SDKValidationError>;
 /** @internal */
 export declare const SyncAcquireResponseClusters$inboundSchema: z.ZodType<SyncAcquireResponseClusters, unknown>;
 export declare function syncAcquireResponseClustersFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseClusters, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseHorizonMachineImageAws$inboundSchema: z.ZodType<SyncAcquireResponseHorizonMachineImageAws, unknown>;
+export declare function syncAcquireResponseHorizonMachineImageAwsFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseHorizonMachineImageAws, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseHorizonMachineImageAwsUnion$inboundSchema: z.ZodType<SyncAcquireResponseHorizonMachineImageAwsUnion, unknown>;
+export declare function syncAcquireResponseHorizonMachineImageAwsUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseHorizonMachineImageAwsUnion, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseAzureImages$inboundSchema: z.ZodType<SyncAcquireResponseAzureImages, unknown>;
+export declare function syncAcquireResponseAzureImagesFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseAzureImages, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseHorizonMachineImageAzure$inboundSchema: z.ZodType<SyncAcquireResponseHorizonMachineImageAzure, unknown>;
+export declare function syncAcquireResponseHorizonMachineImageAzureFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseHorizonMachineImageAzure, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseHorizonMachineImageAzureUnion$inboundSchema: z.ZodType<SyncAcquireResponseHorizonMachineImageAzureUnion, unknown>;
+export declare function syncAcquireResponseHorizonMachineImageAzureUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseHorizonMachineImageAzureUnion, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseBaseImage$inboundSchema: z.ZodType<SyncAcquireResponseBaseImage, unknown>;
+export declare function syncAcquireResponseBaseImageFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseBaseImage, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseGcpImages$inboundSchema: z.ZodType<SyncAcquireResponseGcpImages, unknown>;
+export declare function syncAcquireResponseGcpImagesFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseGcpImages, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseHorizonMachineImageGcp$inboundSchema: z.ZodType<SyncAcquireResponseHorizonMachineImageGcp, unknown>;
+export declare function syncAcquireResponseHorizonMachineImageGcpFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseHorizonMachineImageGcp, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseHorizonMachineImageGcpUnion$inboundSchema: z.ZodType<SyncAcquireResponseHorizonMachineImageGcpUnion, unknown>;
+export declare function syncAcquireResponseHorizonMachineImageGcpUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseHorizonMachineImageGcpUnion, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseHorizonMachineImage$inboundSchema: z.ZodType<SyncAcquireResponseHorizonMachineImage, unknown>;
+export declare function syncAcquireResponseHorizonMachineImageFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseHorizonMachineImage, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseHorizonMachineImageUnion$inboundSchema: z.ZodType<SyncAcquireResponseHorizonMachineImageUnion, unknown>;
+export declare function syncAcquireResponseHorizonMachineImageUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseHorizonMachineImageUnion, SDKValidationError>;
+/** @internal */
 export declare const SyncAcquireResponseComputeBackendType$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseComputeBackendType>;
 /** @internal */
 export declare const SyncAcquireResponseComputeBackendHorizon$inboundSchema: z.ZodType<SyncAcquireResponseComputeBackendHorizon, unknown>;
@@ -5952,6 +7613,53 @@ export declare function syncAcquireResponseVariableFromJSON(jsonString: string):
 export declare const SyncAcquireResponseEnvironmentVariables$inboundSchema: z.ZodType<SyncAcquireResponseEnvironmentVariables, unknown>;
 export declare function syncAcquireResponseEnvironmentVariablesFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseEnvironmentVariables, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseDefaultDomainSecretRef$inboundSchema: z.ZodType<SyncAcquireResponseDefaultDomainSecretRef, unknown>;
+export declare function syncAcquireResponseDefaultDomainSecretRefFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseDefaultDomainSecretRef, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseDefaultDomain$inboundSchema: z.ZodType<SyncAcquireResponseDefaultDomain, unknown>;
+export declare function syncAcquireResponseDefaultDomainFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseDefaultDomain, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseDefaultDomainUnion$inboundSchema: z.ZodType<SyncAcquireResponseDefaultDomainUnion, unknown>;
+export declare function syncAcquireResponseDefaultDomainUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseDefaultDomainUnion, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseEnvironmentNameSecretRef$inboundSchema: z.ZodType<SyncAcquireResponseEnvironmentNameSecretRef, unknown>;
+export declare function syncAcquireResponseEnvironmentNameSecretRefFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseEnvironmentNameSecretRef, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseEnvironmentName$inboundSchema: z.ZodType<SyncAcquireResponseEnvironmentName, unknown>;
+export declare function syncAcquireResponseEnvironmentNameFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseEnvironmentName, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseEnvironmentNameUnion$inboundSchema: z.ZodType<SyncAcquireResponseEnvironmentNameUnion, unknown>;
+export declare function syncAcquireResponseEnvironmentNameUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseEnvironmentNameUnion, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseResourceGroupNameSecretRef3$inboundSchema: z.ZodType<SyncAcquireResponseResourceGroupNameSecretRef3, unknown>;
+export declare function syncAcquireResponseResourceGroupNameSecretRef3FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseResourceGroupNameSecretRef3, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseResourceGroupName3$inboundSchema: z.ZodType<SyncAcquireResponseResourceGroupName3, unknown>;
+export declare function syncAcquireResponseResourceGroupName3FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseResourceGroupName3, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseResourceGroupNameUnion3$inboundSchema: z.ZodType<SyncAcquireResponseResourceGroupNameUnion3, unknown>;
+export declare function syncAcquireResponseResourceGroupNameUnion3FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseResourceGroupNameUnion3, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseResourceIdSecretRef$inboundSchema: z.ZodType<SyncAcquireResponseResourceIdSecretRef, unknown>;
+export declare function syncAcquireResponseResourceIdSecretRefFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseResourceIdSecretRef, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseResourceId$inboundSchema: z.ZodType<SyncAcquireResponseResourceId, unknown>;
+export declare function syncAcquireResponseResourceIdFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseResourceId, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseResourceIdUnion$inboundSchema: z.ZodType<SyncAcquireResponseResourceIdUnion, unknown>;
+export declare function syncAcquireResponseResourceIdUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseResourceIdUnion, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseStaticIpSecretRef$inboundSchema: z.ZodType<SyncAcquireResponseStaticIpSecretRef, unknown>;
+export declare function syncAcquireResponseStaticIpSecretRefFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseStaticIpSecretRef, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseStaticIp$inboundSchema: z.ZodType<SyncAcquireResponseStaticIp, unknown>;
+export declare function syncAcquireResponseStaticIpFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseStaticIp, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseTypeContainerAppsEnvironment$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseTypeContainerAppsEnvironment>;
+/** @internal */
+export declare const SyncAcquireResponseExternalBindingsContainerAppsEnvironment$inboundSchema: z.ZodType<SyncAcquireResponseExternalBindingsContainerAppsEnvironment, unknown>;
+export declare function syncAcquireResponseExternalBindingsContainerAppsEnvironmentFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseExternalBindingsContainerAppsEnvironment, SDKValidationError>;
+/** @internal */
 export declare const SyncAcquireResponseDataDirSecretRef3$inboundSchema: z.ZodType<SyncAcquireResponseDataDirSecretRef3, unknown>;
 export declare function syncAcquireResponseDataDirSecretRef3FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseDataDirSecretRef3, SDKValidationError>;
 /** @internal */
@@ -6066,6 +7774,15 @@ export declare function syncAcquireResponsePushServiceAccountEmailSecretRefFromJ
 export declare const SyncAcquireResponsePushServiceAccountEmail$inboundSchema: z.ZodType<SyncAcquireResponsePushServiceAccountEmail, unknown>;
 export declare function syncAcquireResponsePushServiceAccountEmailFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponsePushServiceAccountEmail, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseRepositoryNameSecretRef$inboundSchema: z.ZodType<SyncAcquireResponseRepositoryNameSecretRef, unknown>;
+export declare function syncAcquireResponseRepositoryNameSecretRefFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRepositoryNameSecretRef, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseRepositoryName$inboundSchema: z.ZodType<SyncAcquireResponseRepositoryName, unknown>;
+export declare function syncAcquireResponseRepositoryNameFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRepositoryName, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseRepositoryNameUnion$inboundSchema: z.ZodType<SyncAcquireResponseRepositoryNameUnion, unknown>;
+export declare function syncAcquireResponseRepositoryNameUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRepositoryNameUnion, SDKValidationError>;
+/** @internal */
 export declare const SyncAcquireResponseTypeArtifactRegistry3$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseTypeArtifactRegistry3>;
 /** @internal */
 export declare const SyncAcquireResponseExternalBindingsGar$inboundSchema: z.ZodType<SyncAcquireResponseExternalBindingsGar, unknown>;
@@ -6080,6 +7797,12 @@ export declare function syncAcquireResponseRegistryNameFromJSON(jsonString: stri
 export declare const SyncAcquireResponseRegistryNameUnion$inboundSchema: z.ZodType<SyncAcquireResponseRegistryNameUnion, unknown>;
 export declare function syncAcquireResponseRegistryNameUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRegistryNameUnion, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseRepositoryPrefixSecretRef2$inboundSchema: z.ZodType<SyncAcquireResponseRepositoryPrefixSecretRef2, unknown>;
+export declare function syncAcquireResponseRepositoryPrefixSecretRef2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRepositoryPrefixSecretRef2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseRepositoryPrefix2$inboundSchema: z.ZodType<SyncAcquireResponseRepositoryPrefix2, unknown>;
+export declare function syncAcquireResponseRepositoryPrefix2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRepositoryPrefix2, SDKValidationError>;
+/** @internal */
 export declare const SyncAcquireResponseResourceGroupNameSecretRef2$inboundSchema: z.ZodType<SyncAcquireResponseResourceGroupNameSecretRef2, unknown>;
 export declare function syncAcquireResponseResourceGroupNameSecretRef2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseResourceGroupNameSecretRef2, SDKValidationError>;
 /** @internal */
@@ -6106,11 +7829,11 @@ export declare function syncAcquireResponsePushRoleArnSecretRefFromJSON(jsonStri
 export declare const SyncAcquireResponsePushRoleArn$inboundSchema: z.ZodType<SyncAcquireResponsePushRoleArn, unknown>;
 export declare function syncAcquireResponsePushRoleArnFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponsePushRoleArn, SDKValidationError>;
 /** @internal */
-export declare const SyncAcquireResponseRepositoryPrefixSecretRef$inboundSchema: z.ZodType<SyncAcquireResponseRepositoryPrefixSecretRef, unknown>;
-export declare function syncAcquireResponseRepositoryPrefixSecretRefFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRepositoryPrefixSecretRef, SDKValidationError>;
+export declare const SyncAcquireResponseRepositoryPrefixSecretRef1$inboundSchema: z.ZodType<SyncAcquireResponseRepositoryPrefixSecretRef1, unknown>;
+export declare function syncAcquireResponseRepositoryPrefixSecretRef1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRepositoryPrefixSecretRef1, SDKValidationError>;
 /** @internal */
-export declare const SyncAcquireResponseRepositoryPrefix$inboundSchema: z.ZodType<SyncAcquireResponseRepositoryPrefix, unknown>;
-export declare function syncAcquireResponseRepositoryPrefixFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRepositoryPrefix, SDKValidationError>;
+export declare const SyncAcquireResponseRepositoryPrefix1$inboundSchema: z.ZodType<SyncAcquireResponseRepositoryPrefix1, unknown>;
+export declare function syncAcquireResponseRepositoryPrefix1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRepositoryPrefix1, SDKValidationError>;
 /** @internal */
 export declare const SyncAcquireResponseRepositoryPrefixUnion$inboundSchema: z.ZodType<SyncAcquireResponseRepositoryPrefixUnion, unknown>;
 export declare function syncAcquireResponseRepositoryPrefixUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRepositoryPrefixUnion, SDKValidationError>;
@@ -6265,6 +7988,20 @@ export declare function syncAcquireResponseExternalBindingsDynamodbFromJSON(json
 export declare const SyncAcquireResponseExternalBindingsUnion3$inboundSchema: z.ZodType<SyncAcquireResponseExternalBindingsUnion3, unknown>;
 export declare function syncAcquireResponseExternalBindingsUnion3FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseExternalBindingsUnion3, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseQueuePathSecretRef$inboundSchema: z.ZodType<SyncAcquireResponseQueuePathSecretRef, unknown>;
+export declare function syncAcquireResponseQueuePathSecretRefFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseQueuePathSecretRef, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseQueuePath$inboundSchema: z.ZodType<SyncAcquireResponseQueuePath, unknown>;
+export declare function syncAcquireResponseQueuePathFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseQueuePath, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseQueuePathUnion$inboundSchema: z.ZodType<SyncAcquireResponseQueuePathUnion, unknown>;
+export declare function syncAcquireResponseQueuePathUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseQueuePathUnion, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseTypeQueue4$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseTypeQueue4>;
+/** @internal */
+export declare const SyncAcquireResponseExternalBindingsLocalQueue$inboundSchema: z.ZodType<SyncAcquireResponseExternalBindingsLocalQueue, unknown>;
+export declare function syncAcquireResponseExternalBindingsLocalQueueFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseExternalBindingsLocalQueue, SDKValidationError>;
+/** @internal */
 export declare const SyncAcquireResponseNamespaceSecretRef1$inboundSchema: z.ZodType<SyncAcquireResponseNamespaceSecretRef1, unknown>;
 export declare function syncAcquireResponseNamespaceSecretRef1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseNamespaceSecretRef1, SDKValidationError>;
 /** @internal */
@@ -6399,12 +8136,6 @@ export declare function syncAcquireResponseExternalBindingsUnion1FromJSON(jsonSt
 export declare const SyncAcquireResponseExternalBindingsUnion6$inboundSchema: z.ZodType<SyncAcquireResponseExternalBindingsUnion6, unknown>;
 export declare function syncAcquireResponseExternalBindingsUnion6FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseExternalBindingsUnion6, SDKValidationError>;
 /** @internal */
-export declare const SyncAcquireResponseImagePullCredentials$inboundSchema: z.ZodType<SyncAcquireResponseImagePullCredentials, unknown>;
-export declare function syncAcquireResponseImagePullCredentialsFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseImagePullCredentials, SDKValidationError>;
-/** @internal */
-export declare const SyncAcquireResponseImagePullCredentialsUnion$inboundSchema: z.ZodType<SyncAcquireResponseImagePullCredentialsUnion, unknown>;
-export declare function syncAcquireResponseImagePullCredentialsUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseImagePullCredentialsUnion, SDKValidationError>;
-/** @internal */
 export declare const SyncAcquireResponsePlatformKubernetes$inboundSchema: z.ZodEnum<typeof SyncAcquireResponsePlatformKubernetes>;
 /** @internal */
 export declare const SyncAcquireResponseManagementConfigKubernetes$inboundSchema: z.ZodType<SyncAcquireResponseManagementConfigKubernetes, unknown>;
@@ -6436,26 +8167,35 @@ export declare function syncAcquireResponseMonitoringUnionFromJSON(jsonString: s
 /** @internal */
 export declare const SyncAcquireResponseDeploymentModel$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseDeploymentModel>;
 /** @internal */
-export declare const SyncAcquireResponseAws$inboundSchema: z.ZodType<SyncAcquireResponseAws, unknown>;
-export declare function syncAcquireResponseAwsFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseAws, SDKValidationError>;
+export declare const SyncAcquireResponseAwsStackSettings$inboundSchema: z.ZodType<SyncAcquireResponseAwsStackSettings, unknown>;
+export declare function syncAcquireResponseAwsStackSettingsFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseAwsStackSettings, SDKValidationError>;
 /** @internal */
-export declare const SyncAcquireResponseAwsUnion$inboundSchema: z.ZodType<SyncAcquireResponseAwsUnion, unknown>;
-export declare function syncAcquireResponseAwsUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseAwsUnion, SDKValidationError>;
+export declare const SyncAcquireResponseStackSettingsAwsUnion$inboundSchema: z.ZodType<SyncAcquireResponseStackSettingsAwsUnion, unknown>;
+export declare function syncAcquireResponseStackSettingsAwsUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseStackSettingsAwsUnion, SDKValidationError>;
 /** @internal */
-export declare const SyncAcquireResponseAzureConfig$inboundSchema: z.ZodType<SyncAcquireResponseAzureConfig, unknown>;
-export declare function syncAcquireResponseAzureConfigFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseAzureConfig, SDKValidationError>;
+export declare const SyncAcquireResponseAzureStackSettings$inboundSchema: z.ZodType<SyncAcquireResponseAzureStackSettings, unknown>;
+export declare function syncAcquireResponseAzureStackSettingsFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseAzureStackSettings, SDKValidationError>;
 /** @internal */
-export declare const SyncAcquireResponseAzureUnion$inboundSchema: z.ZodType<SyncAcquireResponseAzureUnion, unknown>;
-export declare function syncAcquireResponseAzureUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseAzureUnion, SDKValidationError>;
+export declare const SyncAcquireResponseStackSettingsAzureUnion$inboundSchema: z.ZodType<SyncAcquireResponseStackSettingsAzureUnion, unknown>;
+export declare function syncAcquireResponseStackSettingsAzureUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseStackSettingsAzureUnion, SDKValidationError>;
 /** @internal */
-export declare const SyncAcquireResponseGcpConfig$inboundSchema: z.ZodType<SyncAcquireResponseGcpConfig, unknown>;
-export declare function syncAcquireResponseGcpConfigFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseGcpConfig, SDKValidationError>;
+export declare const SyncAcquireResponseGcpStackSettings$inboundSchema: z.ZodType<SyncAcquireResponseGcpStackSettings, unknown>;
+export declare function syncAcquireResponseGcpStackSettingsFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseGcpStackSettings, SDKValidationError>;
 /** @internal */
-export declare const SyncAcquireResponseGcpUnion$inboundSchema: z.ZodType<SyncAcquireResponseGcpUnion, unknown>;
-export declare function syncAcquireResponseGcpUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseGcpUnion, SDKValidationError>;
+export declare const SyncAcquireResponseStackSettingsGcpUnion$inboundSchema: z.ZodType<SyncAcquireResponseStackSettingsGcpUnion, unknown>;
+export declare function syncAcquireResponseStackSettingsGcpUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseStackSettingsGcpUnion, SDKValidationError>;
 /** @internal */
-export declare const SyncAcquireResponseCertificate$inboundSchema: z.ZodType<SyncAcquireResponseCertificate, unknown>;
-export declare function syncAcquireResponseCertificateFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCertificate, SDKValidationError>;
+export declare const SyncAcquireResponseTlsSecretRef$inboundSchema: z.ZodType<SyncAcquireResponseTlsSecretRef, unknown>;
+export declare function syncAcquireResponseTlsSecretRefFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseTlsSecretRef, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseDomainsKubernetes$inboundSchema: z.ZodType<SyncAcquireResponseDomainsKubernetes, unknown>;
+export declare function syncAcquireResponseDomainsKubernetesFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseDomainsKubernetes, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseDomainsKubernetesUnion$inboundSchema: z.ZodType<SyncAcquireResponseDomainsKubernetesUnion, unknown>;
+export declare function syncAcquireResponseDomainsKubernetesUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseDomainsKubernetesUnion, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseDomainsCertificate$inboundSchema: z.ZodType<SyncAcquireResponseDomainsCertificate, unknown>;
+export declare function syncAcquireResponseDomainsCertificateFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseDomainsCertificate, SDKValidationError>;
 /** @internal */
 export declare const SyncAcquireResponseCustomDomains$inboundSchema: z.ZodType<SyncAcquireResponseCustomDomains, unknown>;
 export declare function syncAcquireResponseCustomDomainsFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCustomDomains, SDKValidationError>;
@@ -6466,8 +8206,175 @@ export declare function syncAcquireResponseDomainsFromJSON(jsonString: string):
 export declare const SyncAcquireResponseDomainsUnion$inboundSchema: z.ZodType<SyncAcquireResponseDomainsUnion, unknown>;
 export declare function syncAcquireResponseDomainsUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseDomainsUnion, SDKValidationError>;
 /** @internal */
+export declare const SyncAcquireResponseStackSettingsExternalBindings$inboundSchema: z.ZodType<SyncAcquireResponseStackSettingsExternalBindings, unknown>;
+export declare function syncAcquireResponseStackSettingsExternalBindingsFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseStackSettingsExternalBindings, SDKValidationError>;
+/** @internal */
 export declare const SyncAcquireResponseHeartbeats$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseHeartbeats>;
 /** @internal */
+export declare const SyncAcquireResponseCloud$inboundSchema: z.ZodType<SyncAcquireResponseCloud, unknown>;
+export declare function syncAcquireResponseCloudFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCloud, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseCloudUnion$inboundSchema: z.ZodType<SyncAcquireResponseCloudUnion, unknown>;
+export declare function syncAcquireResponseCloudUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCloudUnion, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseOwnership$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseOwnership>;
+/** @internal */
+export declare const SyncAcquireResponseCluster$inboundSchema: z.ZodType<SyncAcquireResponseCluster, unknown>;
+export declare function syncAcquireResponseClusterFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCluster, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseClusterUnion$inboundSchema: z.ZodType<SyncAcquireResponseClusterUnion, unknown>;
+export declare function syncAcquireResponseClusterUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseClusterUnion, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseCertificateNone2$inboundSchema: z.ZodType<SyncAcquireResponseCertificateNone2, unknown>;
+export declare function syncAcquireResponseCertificateNone2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCertificateNone2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseCertificateManagedTLSSecret2$inboundSchema: z.ZodType<SyncAcquireResponseCertificateManagedTLSSecret2, unknown>;
+export declare function syncAcquireResponseCertificateManagedTLSSecret2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCertificateManagedTLSSecret2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseCertificateAwsAcmArn2$inboundSchema: z.ZodType<SyncAcquireResponseCertificateAwsAcmArn2, unknown>;
+export declare function syncAcquireResponseCertificateAwsAcmArn2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCertificateAwsAcmArn2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseCertificateManagedAcmImport2$inboundSchema: z.ZodType<SyncAcquireResponseCertificateManagedAcmImport2, unknown>;
+export declare function syncAcquireResponseCertificateManagedAcmImport2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCertificateManagedAcmImport2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseCertificateTLSSecretRef2$inboundSchema: z.ZodType<SyncAcquireResponseCertificateTLSSecretRef2, unknown>;
+export declare function syncAcquireResponseCertificateTLSSecretRef2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCertificateTLSSecretRef2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseCertificateUnion2$inboundSchema: z.ZodType<SyncAcquireResponseCertificateUnion2, unknown>;
+export declare function syncAcquireResponseCertificateUnion2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCertificateUnion2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseModeCustom$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseModeCustom>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum4$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum4>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAzureApplicationGatewayForContainers4$inboundSchema: z.ZodType<SyncAcquireResponseProviderAzureApplicationGatewayForContainers4, unknown>;
+export declare function syncAcquireResponseProviderAzureApplicationGatewayForContainers4FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderAzureApplicationGatewayForContainers4, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderGkeGatewayEnum4$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseProviderGkeGatewayEnum4>;
+/** @internal */
+export declare const SyncAcquireResponseProviderGkeGateway4$inboundSchema: z.ZodType<SyncAcquireResponseProviderGkeGateway4, unknown>;
+export declare function syncAcquireResponseProviderGkeGateway4FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderGkeGateway4, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAwsAlbEnum4$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseProviderAwsAlbEnum4>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAwsAlb4$inboundSchema: z.ZodType<SyncAcquireResponseProviderAwsAlb4, unknown>;
+export declare function syncAcquireResponseProviderAwsAlb4FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderAwsAlb4, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderUnion4$inboundSchema: z.ZodType<SyncAcquireResponseProviderUnion4, unknown>;
+export declare function syncAcquireResponseProviderUnion4FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderUnion4, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseRouteGateway2$inboundSchema: z.ZodType<SyncAcquireResponseRouteGateway2, unknown>;
+export declare function syncAcquireResponseRouteGateway2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRouteGateway2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum3$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum3>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAzureApplicationGatewayForContainers3$inboundSchema: z.ZodType<SyncAcquireResponseProviderAzureApplicationGatewayForContainers3, unknown>;
+export declare function syncAcquireResponseProviderAzureApplicationGatewayForContainers3FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderAzureApplicationGatewayForContainers3, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderGkeGatewayEnum3$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseProviderGkeGatewayEnum3>;
+/** @internal */
+export declare const SyncAcquireResponseProviderGkeGateway3$inboundSchema: z.ZodType<SyncAcquireResponseProviderGkeGateway3, unknown>;
+export declare function syncAcquireResponseProviderGkeGateway3FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderGkeGateway3, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAwsAlbEnum3$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseProviderAwsAlbEnum3>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAwsAlb3$inboundSchema: z.ZodType<SyncAcquireResponseProviderAwsAlb3, unknown>;
+export declare function syncAcquireResponseProviderAwsAlb3FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderAwsAlb3, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderUnion3$inboundSchema: z.ZodType<SyncAcquireResponseProviderUnion3, unknown>;
+export declare function syncAcquireResponseProviderUnion3FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderUnion3, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseRouteIngress2$inboundSchema: z.ZodType<SyncAcquireResponseRouteIngress2, unknown>;
+export declare function syncAcquireResponseRouteIngress2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRouteIngress2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseRouteUnion2$inboundSchema: z.ZodType<SyncAcquireResponseRouteUnion2, unknown>;
+export declare function syncAcquireResponseRouteUnion2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRouteUnion2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseExposureCustom$inboundSchema: z.ZodType<SyncAcquireResponseExposureCustom, unknown>;
+export declare function syncAcquireResponseExposureCustomFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseExposureCustom, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseCertificateNone1$inboundSchema: z.ZodType<SyncAcquireResponseCertificateNone1, unknown>;
+export declare function syncAcquireResponseCertificateNone1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCertificateNone1, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseCertificateManagedTLSSecret1$inboundSchema: z.ZodType<SyncAcquireResponseCertificateManagedTLSSecret1, unknown>;
+export declare function syncAcquireResponseCertificateManagedTLSSecret1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCertificateManagedTLSSecret1, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseCertificateAwsAcmArn1$inboundSchema: z.ZodType<SyncAcquireResponseCertificateAwsAcmArn1, unknown>;
+export declare function syncAcquireResponseCertificateAwsAcmArn1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCertificateAwsAcmArn1, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseCertificateManagedAcmImport1$inboundSchema: z.ZodType<SyncAcquireResponseCertificateManagedAcmImport1, unknown>;
+export declare function syncAcquireResponseCertificateManagedAcmImport1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCertificateManagedAcmImport1, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseCertificateTLSSecretRef1$inboundSchema: z.ZodType<SyncAcquireResponseCertificateTLSSecretRef1, unknown>;
+export declare function syncAcquireResponseCertificateTLSSecretRef1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCertificateTLSSecretRef1, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseCertificateUnion1$inboundSchema: z.ZodType<SyncAcquireResponseCertificateUnion1, unknown>;
+export declare function syncAcquireResponseCertificateUnion1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseCertificateUnion1, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseModeGenerated$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseModeGenerated>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum2$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum2>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAzureApplicationGatewayForContainers2$inboundSchema: z.ZodType<SyncAcquireResponseProviderAzureApplicationGatewayForContainers2, unknown>;
+export declare function syncAcquireResponseProviderAzureApplicationGatewayForContainers2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderAzureApplicationGatewayForContainers2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderGkeGatewayEnum2$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseProviderGkeGatewayEnum2>;
+/** @internal */
+export declare const SyncAcquireResponseProviderGkeGateway2$inboundSchema: z.ZodType<SyncAcquireResponseProviderGkeGateway2, unknown>;
+export declare function syncAcquireResponseProviderGkeGateway2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderGkeGateway2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAwsAlbEnum2$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseProviderAwsAlbEnum2>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAwsAlb2$inboundSchema: z.ZodType<SyncAcquireResponseProviderAwsAlb2, unknown>;
+export declare function syncAcquireResponseProviderAwsAlb2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderAwsAlb2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderUnion2$inboundSchema: z.ZodType<SyncAcquireResponseProviderUnion2, unknown>;
+export declare function syncAcquireResponseProviderUnion2FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderUnion2, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseRouteGateway1$inboundSchema: z.ZodType<SyncAcquireResponseRouteGateway1, unknown>;
+export declare function syncAcquireResponseRouteGateway1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRouteGateway1, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum1$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseProviderAzureApplicationGatewayForContainersEnum1>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAzureApplicationGatewayForContainers1$inboundSchema: z.ZodType<SyncAcquireResponseProviderAzureApplicationGatewayForContainers1, unknown>;
+export declare function syncAcquireResponseProviderAzureApplicationGatewayForContainers1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderAzureApplicationGatewayForContainers1, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderGkeGatewayEnum1$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseProviderGkeGatewayEnum1>;
+/** @internal */
+export declare const SyncAcquireResponseProviderGkeGateway1$inboundSchema: z.ZodType<SyncAcquireResponseProviderGkeGateway1, unknown>;
+export declare function syncAcquireResponseProviderGkeGateway1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderGkeGateway1, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAwsAlbEnum1$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseProviderAwsAlbEnum1>;
+/** @internal */
+export declare const SyncAcquireResponseProviderAwsAlb1$inboundSchema: z.ZodType<SyncAcquireResponseProviderAwsAlb1, unknown>;
+export declare function syncAcquireResponseProviderAwsAlb1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderAwsAlb1, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseProviderUnion1$inboundSchema: z.ZodType<SyncAcquireResponseProviderUnion1, unknown>;
+export declare function syncAcquireResponseProviderUnion1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseProviderUnion1, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseRouteIngress1$inboundSchema: z.ZodType<SyncAcquireResponseRouteIngress1, unknown>;
+export declare function syncAcquireResponseRouteIngress1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRouteIngress1, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseRouteUnion1$inboundSchema: z.ZodType<SyncAcquireResponseRouteUnion1, unknown>;
+export declare function syncAcquireResponseRouteUnion1FromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseRouteUnion1, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseExposureGenerated$inboundSchema: z.ZodType<SyncAcquireResponseExposureGenerated, unknown>;
+export declare function syncAcquireResponseExposureGeneratedFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseExposureGenerated, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseModeDisabled$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseModeDisabled>;
+/** @internal */
+export declare const SyncAcquireResponseExposureDisabled$inboundSchema: z.ZodType<SyncAcquireResponseExposureDisabled, unknown>;
+export declare function syncAcquireResponseExposureDisabledFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseExposureDisabled, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseExposureUnion$inboundSchema: z.ZodType<SyncAcquireResponseExposureUnion, unknown>;
+export declare function syncAcquireResponseExposureUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseExposureUnion, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseKubernetes$inboundSchema: z.ZodType<SyncAcquireResponseKubernetes, unknown>;
+export declare function syncAcquireResponseKubernetesFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseKubernetes, SDKValidationError>;
+/** @internal */
+export declare const SyncAcquireResponseKubernetesUnion$inboundSchema: z.ZodType<SyncAcquireResponseKubernetesUnion, unknown>;
+export declare function syncAcquireResponseKubernetesUnionFromJSON(jsonString: string): SafeParseResult<SyncAcquireResponseKubernetesUnion, SDKValidationError>;
+/** @internal */
 export declare const SyncAcquireResponseTypeByoVnetAzure$inboundSchema: z.ZodEnum<typeof SyncAcquireResponseTypeByoVnetAzure>;
 /** @internal */
 export declare const SyncAcquireResponseNetworkByoVnetAzure$inboundSchema: z.ZodType<SyncAcquireResponseNetworkByoVnetAzure, unknown>;