@alienplatform/platform-api 3.3.27 → 3.3.29

package/src/models/targetdeployment.ts

@@ -11,179 +11,271 @@ import { ClosedEnum } from "../types/enums.js";
 import { Result as SafeParseResult } from "../types/fp.js";
 import { SDKValidationError } from "./errors/sdkvalidationerror.js";
 import {
-  OverrideReleaseInfoAzure,
-  OverrideReleaseInfoAzure$inboundSchema,
+  ReleaseInfoTypeStringList,
+  ReleaseInfoTypeStringList$inboundSchema,
   TargetDeploymentConfig,
   TargetDeploymentConfig$inboundSchema,
-  TargetDeploymentInput,
-  TargetDeploymentInput$inboundSchema,
-  TargetDeploymentManagementEnum,
-  TargetDeploymentManagementEnum$inboundSchema,
-  TargetDeploymentOverrideAw,
-  TargetDeploymentOverrideAw$inboundSchema,
-  TargetDeploymentOverrideConditionResource,
-  TargetDeploymentOverrideConditionResource$inboundSchema,
-} from "./targetdeploymentoverrideconditionresource.js";
+} from "./releaseinfotypestringlist.js";
 
-export type TargetDeploymentOverrideResourceConditionUnion =
-  | TargetDeploymentOverrideConditionResource
-  | any;
+export type TargetDeploymentDefaultStringList = {
+  type: ReleaseInfoTypeStringList;
+  /**
+   * String list default.
+   */
+  value: Array<string>;
+};
 
-/**
- * GCP-specific binding specification
- */
-export type TargetDeploymentOverrideGcpResource = {
-  condition?:
-    | TargetDeploymentOverrideConditionResource
-    | any
-    | null
-    | undefined;
+export const ReleaseInfoTypeBoolean = {
+  Boolean: "boolean",
+} as const;
+export type ReleaseInfoTypeBoolean = ClosedEnum<typeof ReleaseInfoTypeBoolean>;
+
+export type TargetDeploymentDefaultBoolean = {
+  type: ReleaseInfoTypeBoolean;
   /**
-   * Scope (project/resource level)
+   * Boolean default.
    */
-  scope: string;
+  value: boolean;
+};
+
+export const ReleaseInfoTypeNumber = {
+  Number: "number",
+} as const;
+export type ReleaseInfoTypeNumber = ClosedEnum<typeof ReleaseInfoTypeNumber>;
+
+export type TargetDeploymentDefaultNumber = {
+  type: ReleaseInfoTypeNumber;
+  /**
+   * Number default.
+   */
+  value: string;
+};
+
+export const ReleaseInfoTypeString = {
+  String: "string",
+} as const;
+export type ReleaseInfoTypeString = ClosedEnum<typeof ReleaseInfoTypeString>;
+
+export type TargetDeploymentDefaultString = {
+  type: ReleaseInfoTypeString;
+  /**
+   * String default.
+   */
+  value: string;
 };
 
+export type TargetDeploymentDefaultUnion =
+  | TargetDeploymentDefaultString
+  | TargetDeploymentDefaultNumber
+  | TargetDeploymentDefaultBoolean
+  | TargetDeploymentDefaultStringList
+  | string;
+
 /**
- * GCP IAM condition
+ * Environment variable handling for a stack input mapping.
  */
-export type TargetDeploymentOverrideCondition = {
-  expression: string;
-  title: string;
-};
+export const TypeReleaseInfoEnvEnum = {
+  Plain: "plain",
+  Secret: "secret",
+} as const;
+/**
+ * Environment variable handling for a stack input mapping.
+ */
+export type TypeReleaseInfoEnvEnum = ClosedEnum<typeof TypeReleaseInfoEnvEnum>;
 
-export type TargetDeploymentOverrideConditionUnion =
-  | TargetDeploymentOverrideCondition
-  | any;
+export type ReleaseInfoTypeUnion = TypeReleaseInfoEnvEnum | string;
 
 /**
- * GCP-specific binding specification
+ * How a resolved stack input is injected into runtime environment variables.
  */
-export type TargetDeploymentOverrideGcpStack = {
-  condition?: TargetDeploymentOverrideCondition | any | null | undefined;
+export type TargetDeploymentEnv = {
   /**
-   * Scope (project/resource level)
+   * Environment variable name.
    */
-  scope: string;
+  name: string;
+  /**
+   * Target resource IDs or patterns. None means every env-capable resource.
+   */
+  targetResources?: Array<string> | null | undefined;
+  type?: TypeReleaseInfoEnvEnum | string | null | undefined;
 };
 
 /**
- * Generic binding configuration for permissions
+ * Asks Alien to generate a secret input's value.
+ *
+ * @remarks
+ *
+ * The value is an alphanumeric string (`A-Z`, `a-z`, `0-9`), so it is safe in
+ * connection strings, command lines and environment variables. It is generated
+ * once, when the deployment's input values are first resolved, and then kept
+ * with the deployment's other input values.
  */
-export type TargetDeploymentOverrideGcpBinding = {
+export type TargetDeploymentGenerate = {
   /**
-   * GCP-specific binding specification
-   */
-  resource?: TargetDeploymentOverrideGcpResource | undefined;
-  /**
-   * GCP-specific binding specification
+   * Number of characters to generate.
    */
-  stack?: TargetDeploymentOverrideGcpStack | undefined;
+  length: number;
 };
 
+export type TargetDeploymentGenerateUnion = TargetDeploymentGenerate | string;
+
 /**
- * Grant permissions for a specific cloud platform
+ * Primitive stack input kind.
  */
-export type TargetDeploymentOverrideGcpGrant = {
+export const TargetDeploymentKind = {
+  String: "string",
+  Secret: "secret",
+  Number: "number",
+  Integer: "integer",
+  Boolean: "boolean",
+  Enum: "enum",
+  StringList: "stringList",
+} as const;
+/**
+ * Primitive stack input kind.
+ */
+export type TargetDeploymentKind = ClosedEnum<typeof TargetDeploymentKind>;
+
+/**
+ * Represents the target cloud platform.
+ */
+export const ReleaseInfoPlatform = {
+  Aws: "aws",
+  Gcp: "gcp",
+  Azure: "azure",
+  Kubernetes: "kubernetes",
+  Machines: "machines",
+  Local: "local",
+  Test: "test",
+} as const;
+/**
+ * Represents the target cloud platform.
+ */
+export type ReleaseInfoPlatform = ClosedEnum<typeof ReleaseInfoPlatform>;
+
+/**
+ * Who can provide a stack input value.
+ */
+export const TargetDeploymentProvidedBy = {
+  Developer: "developer",
+  Deployer: "deployer",
+} as const;
+/**
+ * Who can provide a stack input value.
+ */
+export type TargetDeploymentProvidedBy = ClosedEnum<
+  typeof TargetDeploymentProvidedBy
+>;
+
+/**
+ * Portable stack input validation constraints.
+ */
+export type TargetDeploymentValidation = {
   /**
-   * AWS IAM actions (only for AWS)
+   * Semantic format hint such as url.
    */
-  actions?: Array<string> | null | undefined;
+  format?: string | null | undefined;
   /**
-   * Azure actions (only for Azure)
+   * Maximum number.
    */
-  dataActions?: Array<string> | null | undefined;
+  max?: string | null | undefined;
   /**
-   * GCP permissions that require an exact residual custom role.
+   * Maximum string-list items.
    */
-  permissions?: Array<string> | null | undefined;
+  maxItems?: number | null | undefined;
   /**
-   * Provider predefined roles to bind directly.
+   * Maximum string length.
    */
-  predefinedRoles?: Array<string> | null | undefined;
+  maxLength?: number | null | undefined;
   /**
-   * GCP residual custom permissions to pair with predefined roles.
+   * Minimum number.
    */
-  residualPermissions?: Array<string> | null | undefined;
-};
-
-/**
- * GCP-specific platform permission configuration
- */
-export type OverrideReleaseInfoGcp = {
+  min?: string | null | undefined;
   /**
-   * Generic binding configuration for permissions
+   * Minimum string-list items.
    */
-  binding: TargetDeploymentOverrideGcpBinding;
+  minItems?: number | null | undefined;
   /**
-   * Short admin-facing description of why this entry exists.
+   * Minimum string length.
    */
-  description?: string | null | undefined;
+  minLength?: number | null | undefined;
   /**
-   * Grant permissions for a specific cloud platform
+   * Portable whole-value regex pattern.
    */
-  grant: TargetDeploymentOverrideGcpGrant;
+  pattern?: string | null | undefined;
   /**
-   * Stable admin-facing label for this permission entry.
+   * Allowed string enum values.
    */
-  label?: string | null | undefined;
+  values?: Array<string> | null | undefined;
 };
 
+export type TargetDeploymentValidationUnion =
+  | TargetDeploymentValidation
+  | string;
+
 /**
- * Platform-specific permission configurations
+ * Stack input definition serialized into a release stack.
  */
-export type TargetDeploymentOverridePlatforms = {
+export type TargetDeploymentInput = {
+  default?:
+    | TargetDeploymentDefaultString
+    | TargetDeploymentDefaultNumber
+    | TargetDeploymentDefaultBoolean
+    | TargetDeploymentDefaultStringList
+    | string
+    | null
+    | undefined;
   /**
-   * AWS permission configurations
+   * Human-facing helper text.
    */
-  aws?: Array<TargetDeploymentOverrideAw> | null | undefined;
+  description: string;
   /**
-   * Azure permission configurations
+   * Runtime env-var mappings for v1 input resolution.
    */
-  azure?: Array<OverrideReleaseInfoAzure> | null | undefined;
+  env?: Array<TargetDeploymentEnv> | undefined;
+  generate?: TargetDeploymentGenerate | string | null | undefined;
   /**
-   * GCP permission configurations
+   * Stable input ID used by CLI/API calls.
    */
-  gcp?: Array<OverrideReleaseInfoGcp> | null | undefined;
-};
-
-/**
- * A permission set that can be applied across different cloud platforms
- */
-export type TargetDeploymentOverride = {
+  id: string;
   /**
-   * Human-readable description of what this permission set allows
+   * Primitive stack input kind.
    */
-  description: string;
+  kind: TargetDeploymentKind;
   /**
-   * Unique identifier for the permission set (e.g., "storage/data-read")
+   * Human-facing field label.
    */
-  id: string;
+  label: string;
   /**
-   * Platform-specific permission configurations
+   * Example placeholder shown in UI.
    */
-  platforms: TargetDeploymentOverridePlatforms;
-};
-
-/**
- * Reference to a permission set - either by name or inline definition
- */
-export type TargetDeploymentOverrideUnion = TargetDeploymentOverride | string;
-
-export type TargetDeploymentManagement2 = {
+  placeholder?: string | null | undefined;
   /**
-   * Permission profile that maps resources to permission sets
-   *
-   * @remarks
-   * Key can be "*" for all resources or resource name for specific resource
+   * Platforms where this input applies.
    */
-  override: { [k: string]: Array<TargetDeploymentOverride | string> };
+  platforms?: Array<ReleaseInfoPlatform> | null | undefined;
+  /**
+   * Who can provide this value.
+   */
+  providedBy: Array<TargetDeploymentProvidedBy>;
+  /**
+   * Whether a resolved value is required before deployment can proceed.
+   */
+  required: boolean;
+  validation?: TargetDeploymentValidation | string | null | undefined;
 };
 
+export const TargetDeploymentManagementEnum = {
+  Auto: "auto",
+} as const;
+export type TargetDeploymentManagementEnum = ClosedEnum<
+  typeof TargetDeploymentManagementEnum
+>;
+
 /**
  * AWS-specific binding specification
  */
-export type TargetDeploymentExtendAwResource = {
+export type TargetDeploymentOverrideAwResource = {
   /**
    * Optional condition for additional filtering (rare)
    */
@@ -205,7 +297,7 @@ export type TargetDeploymentExtendAwResource = {
 /**
  * AWS-specific binding specification
  */
-export type TargetDeploymentExtendAwStack = {
+export type TargetDeploymentOverrideAwStack = {
   /**
    * Optional condition for additional filtering (rare)
    */
@@ -227,35 +319,35 @@ export type TargetDeploymentExtendAwStack = {
 /**
  * Generic binding configuration for permissions
  */
-export type TargetDeploymentExtendAwBinding = {
+export type TargetDeploymentOverrideAwBinding = {
   /**
    * AWS-specific binding specification
    */
-  resource?: TargetDeploymentExtendAwResource | undefined;
+  resource?: TargetDeploymentOverrideAwResource | undefined;
   /**
    * AWS-specific binding specification
    */
-  stack?: TargetDeploymentExtendAwStack | undefined;
+  stack?: TargetDeploymentOverrideAwStack | undefined;
 };
 
 /**
  * IAM effect. Defaults to Allow.
  */
-export const TargetDeploymentExtendEffect = {
+export const TargetDeploymentOverrideEffect = {
   Allow: "Allow",
   Deny: "Deny",
 } as const;
 /**
  * IAM effect. Defaults to Allow.
  */
-export type TargetDeploymentExtendEffect = ClosedEnum<
-  typeof TargetDeploymentExtendEffect
+export type TargetDeploymentOverrideEffect = ClosedEnum<
+  typeof TargetDeploymentOverrideEffect
 >;
 
 /**
  * Grant permissions for a specific cloud platform
  */
-export type TargetDeploymentExtendAwGrant = {
+export type TargetDeploymentOverrideAwGrant = {
   /**
    * AWS IAM actions (only for AWS)
    */
@@ -281,11 +373,11 @@ export type TargetDeploymentExtendAwGrant = {
 /**
  * AWS-specific platform permission configuration
  */
-export type TargetDeploymentExtendAw = {
+export type TargetDeploymentOverrideAw = {
   /**
    * Generic binding configuration for permissions
    */
-  binding: TargetDeploymentExtendAwBinding;
+  binding: TargetDeploymentOverrideAwBinding;
   /**
    * Short admin-facing description of why this entry exists.
    */
@@ -293,11 +385,11 @@ export type TargetDeploymentExtendAw = {
   /**
    * IAM effect. Defaults to Allow.
    */
-  effect?: TargetDeploymentExtendEffect | undefined;
+  effect?: TargetDeploymentOverrideEffect | undefined;
   /**
    * Grant permissions for a specific cloud platform
    */
-  grant: TargetDeploymentExtendAwGrant;
+  grant: TargetDeploymentOverrideAwGrant;
   /**
    * Stable admin-facing label for this permission entry.
    */
@@ -307,7 +399,7 @@ export type TargetDeploymentExtendAw = {
 /**
  * Azure-specific binding specification
  */
-export type TargetDeploymentExtendAzureResource = {
+export type TargetDeploymentOverrideAzureResource = {
   /**
    * Scope (subscription/resource group/resource level)
    */
@@ -317,7 +409,7 @@ export type TargetDeploymentExtendAzureResource = {
 /**
  * Azure-specific binding specification
  */
-export type TargetDeploymentExtendAzureStack = {
+export type TargetDeploymentOverrideAzureStack = {
   /**
    * Scope (subscription/resource group/resource level)
    */
@@ -327,21 +419,21 @@ export type TargetDeploymentExtendAzureStack = {
 /**
  * Generic binding configuration for permissions
  */
-export type TargetDeploymentExtendAzureBinding = {
+export type TargetDeploymentOverrideAzureBinding = {
   /**
    * Azure-specific binding specification
    */
-  resource?: TargetDeploymentExtendAzureResource | undefined;
+  resource?: TargetDeploymentOverrideAzureResource | undefined;
   /**
    * Azure-specific binding specification
    */
-  stack?: TargetDeploymentExtendAzureStack | undefined;
+  stack?: TargetDeploymentOverrideAzureStack | undefined;
 };
 
 /**
  * Grant permissions for a specific cloud platform
  */
-export type TargetDeploymentExtendAzureGrant = {
+export type TargetDeploymentOverrideAzureGrant = {
   /**
    * AWS IAM actions (only for AWS)
    */
@@ -367,11 +459,11 @@ export type TargetDeploymentExtendAzureGrant = {
 /**
  * Azure-specific platform permission configuration
  */
-export type ExtendReleaseInfoAzure = {
+export type OverrideReleaseInfoAzure = {
   /**
    * Generic binding configuration for permissions
    */
-  binding: TargetDeploymentExtendAzureBinding;
+  binding: TargetDeploymentOverrideAzureBinding;
   /**
    * Short admin-facing description of why this entry exists.
    */
@@ -379,7 +471,7 @@ export type ExtendReleaseInfoAzure = {
   /**
    * Grant permissions for a specific cloud platform
    */
-  grant: TargetDeploymentExtendAzureGrant;
+  grant: TargetDeploymentOverrideAzureGrant;
   /**
    * Stable admin-facing label for this permission entry.
    */
@@ -389,20 +481,24 @@ export type ExtendReleaseInfoAzure = {
 /**
  * GCP IAM condition
  */
-export type TargetDeploymentExtendConditionResource = {
+export type TargetDeploymentOverrideConditionResource = {
   expression: string;
   title: string;
 };
 
-export type TargetDeploymentExtendResourceConditionUnion =
-  | TargetDeploymentExtendConditionResource
-  | any;
+export type TargetDeploymentOverrideResourceConditionUnion =
+  | TargetDeploymentOverrideConditionResource
+  | string;
 
 /**
  * GCP-specific binding specification
  */
-export type TargetDeploymentExtendGcpResource = {
-  condition?: TargetDeploymentExtendConditionResource | any | null | undefined;
+export type TargetDeploymentOverrideGcpResource = {
+  condition?:
+    | TargetDeploymentOverrideConditionResource
+    | string
+    | null
+    | undefined;
   /**
    * Scope (project/resource level)
    */
@@ -412,20 +508,20 @@ export type TargetDeploymentExtendGcpResource = {
 /**
  * GCP IAM condition
  */
-export type TargetDeploymentExtendCondition = {
+export type TargetDeploymentOverrideCondition = {
   expression: string;
   title: string;
 };
 
-export type TargetDeploymentExtendConditionUnion =
-  | TargetDeploymentExtendCondition
-  | any;
+export type TargetDeploymentOverrideConditionUnion =
+  | TargetDeploymentOverrideCondition
+  | string;
 
 /**
  * GCP-specific binding specification
  */
-export type TargetDeploymentExtendGcpStack = {
-  condition?: TargetDeploymentExtendCondition | any | null | undefined;
+export type TargetDeploymentOverrideGcpStack = {
+  condition?: TargetDeploymentOverrideCondition | string | null | undefined;
   /**
    * Scope (project/resource level)
    */
@@ -435,21 +531,21 @@ export type TargetDeploymentExtendGcpStack = {
 /**
  * Generic binding configuration for permissions
  */
-export type TargetDeploymentExtendGcpBinding = {
+export type TargetDeploymentOverrideGcpBinding = {
   /**
    * GCP-specific binding specification
    */
-  resource?: TargetDeploymentExtendGcpResource | undefined;
+  resource?: TargetDeploymentOverrideGcpResource | undefined;
   /**
    * GCP-specific binding specification
    */
-  stack?: TargetDeploymentExtendGcpStack | undefined;
+  stack?: TargetDeploymentOverrideGcpStack | undefined;
 };
 
 /**
  * Grant permissions for a specific cloud platform
  */
-export type TargetDeploymentExtendGcpGrant = {
+export type TargetDeploymentOverrideGcpGrant = {
   /**
    * AWS IAM actions (only for AWS)
    */
@@ -475,11 +571,11 @@ export type TargetDeploymentExtendGcpGrant = {
 /**
  * GCP-specific platform permission configuration
  */
-export type ExtendReleaseInfoGcp = {
+export type OverrideReleaseInfoGcp = {
   /**
    * Generic binding configuration for permissions
    */
-  binding: TargetDeploymentExtendGcpBinding;
+  binding: TargetDeploymentOverrideGcpBinding;
   /**
    * Short admin-facing description of why this entry exists.
    */
@@ -487,7 +583,7 @@ export type ExtendReleaseInfoGcp = {
   /**
    * Grant permissions for a specific cloud platform
    */
-  grant: TargetDeploymentExtendGcpGrant;
+  grant: TargetDeploymentOverrideGcpGrant;
   /**
    * Stable admin-facing label for this permission entry.
    */
@@ -497,25 +593,25 @@ export type ExtendReleaseInfoGcp = {
 /**
  * Platform-specific permission configurations
  */
-export type TargetDeploymentExtendPlatforms = {
+export type TargetDeploymentOverridePlatforms = {
   /**
    * AWS permission configurations
    */
-  aws?: Array<TargetDeploymentExtendAw> | null | undefined;
+  aws?: Array<TargetDeploymentOverrideAw> | null | undefined;
   /**
    * Azure permission configurations
    */
-  azure?: Array<ExtendReleaseInfoAzure> | null | undefined;
+  azure?: Array<OverrideReleaseInfoAzure> | null | undefined;
   /**
    * GCP permission configurations
    */
-  gcp?: Array<ExtendReleaseInfoGcp> | null | undefined;
+  gcp?: Array<OverrideReleaseInfoGcp> | null | undefined;
 };
 
 /**
  * A permission set that can be applied across different cloud platforms
  */
-export type TargetDeploymentExtend = {
+export type TargetDeploymentOverride = {
   /**
    * Human-readable description of what this permission set allows
    */
@@ -527,36 +623,28 @@ export type TargetDeploymentExtend = {
   /**
    * Platform-specific permission configurations
    */
-  platforms: TargetDeploymentExtendPlatforms;
+  platforms: TargetDeploymentOverridePlatforms;
 };
 
 /**
  * Reference to a permission set - either by name or inline definition
  */
-export type TargetDeploymentExtendUnion = TargetDeploymentExtend | string;
+export type TargetDeploymentOverrideUnion = TargetDeploymentOverride | string;
 
-export type TargetDeploymentManagement1 = {
+export type TargetDeploymentManagement2 = {
   /**
    * Permission profile that maps resources to permission sets
    *
    * @remarks
    * Key can be "*" for all resources or resource name for specific resource
    */
-  extend: { [k: string]: Array<TargetDeploymentExtend | string> };
+  override: { [k: string]: Array<TargetDeploymentOverride | string> };
 };
 
-/**
- * Management permissions configuration for stack management access
- */
-export type TargetDeploymentManagementUnion =
-  | TargetDeploymentManagement1
-  | TargetDeploymentManagement2
-  | TargetDeploymentManagementEnum;
-
 /**
  * AWS-specific binding specification
  */
-export type TargetDeploymentProfileAwResource = {
+export type TargetDeploymentExtendAwResource = {
   /**
    * Optional condition for additional filtering (rare)
    */
@@ -578,7 +666,7 @@ export type TargetDeploymentProfileAwResource = {
 /**
  * AWS-specific binding specification
  */
-export type TargetDeploymentProfileAwStack = {
+export type TargetDeploymentExtendAwStack = {
   /**
    * Optional condition for additional filtering (rare)
    */
@@ -600,35 +688,35 @@ export type TargetDeploymentProfileAwStack = {
 /**
  * Generic binding configuration for permissions
  */
-export type TargetDeploymentProfileAwBinding = {
+export type TargetDeploymentExtendAwBinding = {
   /**
    * AWS-specific binding specification
    */
-  resource?: TargetDeploymentProfileAwResource | undefined;
+  resource?: TargetDeploymentExtendAwResource | undefined;
   /**
    * AWS-specific binding specification
    */
-  stack?: TargetDeploymentProfileAwStack | undefined;
+  stack?: TargetDeploymentExtendAwStack | undefined;
 };
 
 /**
  * IAM effect. Defaults to Allow.
  */
-export const TargetDeploymentProfileEffect = {
+export const TargetDeploymentExtendEffect = {
   Allow: "Allow",
   Deny: "Deny",
 } as const;
 /**
  * IAM effect. Defaults to Allow.
  */
-export type TargetDeploymentProfileEffect = ClosedEnum<
-  typeof TargetDeploymentProfileEffect
+export type TargetDeploymentExtendEffect = ClosedEnum<
+  typeof TargetDeploymentExtendEffect
 >;
 
 /**
  * Grant permissions for a specific cloud platform
  */
-export type TargetDeploymentProfileAwGrant = {
+export type TargetDeploymentExtendAwGrant = {
   /**
    * AWS IAM actions (only for AWS)
    */
@@ -654,11 +742,11 @@ export type TargetDeploymentProfileAwGrant = {
 /**
  * AWS-specific platform permission configuration
  */
-export type TargetDeploymentProfileAw = {
+export type TargetDeploymentExtendAw = {
   /**
    * Generic binding configuration for permissions
    */
-  binding: TargetDeploymentProfileAwBinding;
+  binding: TargetDeploymentExtendAwBinding;
   /**
    * Short admin-facing description of why this entry exists.
    */
@@ -666,11 +754,11 @@ export type TargetDeploymentProfileAw = {
   /**
    * IAM effect. Defaults to Allow.
    */
-  effect?: TargetDeploymentProfileEffect | undefined;
+  effect?: TargetDeploymentExtendEffect | undefined;
   /**
    * Grant permissions for a specific cloud platform
    */
-  grant: TargetDeploymentProfileAwGrant;
+  grant: TargetDeploymentExtendAwGrant;
   /**
    * Stable admin-facing label for this permission entry.
    */
@@ -680,7 +768,7 @@ export type TargetDeploymentProfileAw = {
 /**
  * Azure-specific binding specification
  */
-export type TargetDeploymentProfileAzureResource = {
+export type TargetDeploymentExtendAzureResource = {
   /**
    * Scope (subscription/resource group/resource level)
    */
@@ -690,7 +778,7 @@ export type TargetDeploymentProfileAzureResource = {
 /**
  * Azure-specific binding specification
  */
-export type TargetDeploymentProfileAzureStack = {
+export type TargetDeploymentExtendAzureStack = {
   /**
    * Scope (subscription/resource group/resource level)
    */
@@ -700,21 +788,21 @@ export type TargetDeploymentProfileAzureStack = {
 /**
  * Generic binding configuration for permissions
  */
-export type TargetDeploymentProfileAzureBinding = {
+export type TargetDeploymentExtendAzureBinding = {
   /**
    * Azure-specific binding specification
    */
-  resource?: TargetDeploymentProfileAzureResource | undefined;
+  resource?: TargetDeploymentExtendAzureResource | undefined;
   /**
    * Azure-specific binding specification
    */
-  stack?: TargetDeploymentProfileAzureStack | undefined;
+  stack?: TargetDeploymentExtendAzureStack | undefined;
 };
 
 /**
  * Grant permissions for a specific cloud platform
  */
-export type TargetDeploymentProfileAzureGrant = {
+export type TargetDeploymentExtendAzureGrant = {
   /**
    * AWS IAM actions (only for AWS)
    */
@@ -740,11 +828,11 @@ export type TargetDeploymentProfileAzureGrant = {
 /**
  * Azure-specific platform permission configuration
  */
-export type ProfileReleaseInfoAzure = {
+export type ExtendReleaseInfoAzure = {
   /**
    * Generic binding configuration for permissions
    */
-  binding: TargetDeploymentProfileAzureBinding;
+  binding: TargetDeploymentExtendAzureBinding;
   /**
    * Short admin-facing description of why this entry exists.
    */
@@ -752,7 +840,7 @@ export type ProfileReleaseInfoAzure = {
   /**
    * Grant permissions for a specific cloud platform
    */
-  grant: TargetDeploymentProfileAzureGrant;
+  grant: TargetDeploymentExtendAzureGrant;
   /**
    * Stable admin-facing label for this permission entry.
    */
@@ -762,20 +850,24 @@ export type ProfileReleaseInfoAzure = {
 /**
  * GCP IAM condition
  */
-export type TargetDeploymentProfileConditionResource = {
+export type TargetDeploymentExtendConditionResource = {
   expression: string;
   title: string;
 };
 
-export type TargetDeploymentProfileResourceConditionUnion =
-  | TargetDeploymentProfileConditionResource
-  | any;
+export type TargetDeploymentExtendResourceConditionUnion =
+  | TargetDeploymentExtendConditionResource
+  | string;
 
 /**
  * GCP-specific binding specification
  */
-export type TargetDeploymentProfileGcpResource = {
-  condition?: TargetDeploymentProfileConditionResource | any | null | undefined;
+export type TargetDeploymentExtendGcpResource = {
+  condition?:
+    | TargetDeploymentExtendConditionResource
+    | string
+    | null
+    | undefined;
   /**
    * Scope (project/resource level)
    */
@@ -785,20 +877,20 @@ export type TargetDeploymentProfileGcpResource = {
 /**
  * GCP IAM condition
  */
-export type TargetDeploymentProfileCondition = {
+export type TargetDeploymentExtendCondition = {
   expression: string;
   title: string;
 };
 
-export type TargetDeploymentProfileConditionUnion =
-  | TargetDeploymentProfileCondition
-  | any;
+export type TargetDeploymentExtendConditionUnion =
+  | TargetDeploymentExtendCondition
+  | string;
 
 /**
  * GCP-specific binding specification
  */
-export type TargetDeploymentProfileGcpStack = {
-  condition?: TargetDeploymentProfileCondition | any | null | undefined;
+export type TargetDeploymentExtendGcpStack = {
+  condition?: TargetDeploymentExtendCondition | string | null | undefined;
   /**
    * Scope (project/resource level)
    */
@@ -808,21 +900,21 @@ export type TargetDeploymentProfileGcpStack = {
 /**
  * Generic binding configuration for permissions
  */
-export type TargetDeploymentProfileGcpBinding = {
+export type TargetDeploymentExtendGcpBinding = {
   /**
    * GCP-specific binding specification
    */
-  resource?: TargetDeploymentProfileGcpResource | undefined;
+  resource?: TargetDeploymentExtendGcpResource | undefined;
   /**
    * GCP-specific binding specification
    */
-  stack?: TargetDeploymentProfileGcpStack | undefined;
+  stack?: TargetDeploymentExtendGcpStack | undefined;
 };
 
 /**
  * Grant permissions for a specific cloud platform
  */
-export type TargetDeploymentProfileGcpGrant = {
+export type TargetDeploymentExtendGcpGrant = {
   /**
    * AWS IAM actions (only for AWS)
    */
@@ -848,11 +940,11 @@ export type TargetDeploymentProfileGcpGrant = {
 /**
  * GCP-specific platform permission configuration
  */
-export type ProfileReleaseInfoGcp = {
+export type ExtendReleaseInfoGcp = {
   /**
    * Generic binding configuration for permissions
    */
-  binding: TargetDeploymentProfileGcpBinding;
+  binding: TargetDeploymentExtendGcpBinding;
   /**
    * Short admin-facing description of why this entry exists.
    */
@@ -860,7 +952,7 @@ export type ProfileReleaseInfoGcp = {
   /**
    * Grant permissions for a specific cloud platform
    */
-  grant: TargetDeploymentProfileGcpGrant;
+  grant: TargetDeploymentExtendGcpGrant;
   /**
    * Stable admin-facing label for this permission entry.
    */
@@ -870,25 +962,25 @@ export type ProfileReleaseInfoGcp = {
 /**
  * Platform-specific permission configurations
  */
-export type TargetDeploymentProfilePlatforms = {
+export type TargetDeploymentExtendPlatforms = {
   /**
    * AWS permission configurations
    */
-  aws?: Array<TargetDeploymentProfileAw> | null | undefined;
+  aws?: Array<TargetDeploymentExtendAw> | null | undefined;
   /**
    * Azure permission configurations
    */
-  azure?: Array<ProfileReleaseInfoAzure> | null | undefined;
+  azure?: Array<ExtendReleaseInfoAzure> | null | undefined;
   /**
    * GCP permission configurations
    */
-  gcp?: Array<ProfileReleaseInfoGcp> | null | undefined;
+  gcp?: Array<ExtendReleaseInfoGcp> | null | undefined;
 };
 
 /**
  * A permission set that can be applied across different cloud platforms
  */
-export type TargetDeploymentProfile = {
+export type TargetDeploymentExtend = {
   /**
    * Human-readable description of what this permission set allows
    */
@@ -900,237 +992,1153 @@ export type TargetDeploymentProfile = {
   /**
    * Platform-specific permission configurations
    */
-  platforms: TargetDeploymentProfilePlatforms;
+  platforms: TargetDeploymentExtendPlatforms;
 };
 
 /**
  * Reference to a permission set - either by name or inline definition
  */
-export type TargetDeploymentProfileUnion = TargetDeploymentProfile | string;
+export type TargetDeploymentExtendUnion = TargetDeploymentExtend | string;
+
+export type TargetDeploymentManagement1 = {
+  /**
+   * Permission profile that maps resources to permission sets
+   *
+   * @remarks
+   * Key can be "*" for all resources or resource name for specific resource
+   */
+  extend: { [k: string]: Array<TargetDeploymentExtend | string> };
+};
 
 /**
- * Combined permissions configuration that contains both profiles and management
+ * Management permissions configuration for stack management access
  */
-export type TargetDeploymentPermissions = {
+export type TargetDeploymentManagementUnion =
+  | TargetDeploymentManagement1
+  | TargetDeploymentManagement2
+  | TargetDeploymentManagementEnum;
+
+/**
+ * AWS-specific binding specification
+ */
+export type TargetDeploymentProfileAwResource = {
   /**
-   * Management permissions configuration for stack management access
+   * Optional condition for additional filtering (rare)
    */
-  management?:
-    | TargetDeploymentManagement1
-    | TargetDeploymentManagement2
-    | TargetDeploymentManagementEnum
-    | undefined;
+  condition?: { [k: string]: { [k: string]: string } } | null | undefined;
   /**
-   * Permission profiles that define access control for compute services
+   * ARN patterns rendered as IAM `NotResource`, in place of `resources`. Its one use is a
    *
    * @remarks
-   * Key is the profile name, value is the permission configuration
+   * tag-on-create grant whose implied check AWS authorizes against no resource; the build
+   * refuses it anywhere else.
    */
-  profiles: {
-    [k: string]: { [k: string]: Array<TargetDeploymentProfile | string> };
-  };
+  notResources?: Array<string> | undefined;
+  /**
+   * Resource ARNs to bind to
+   */
+  resources: Array<string>;
 };
 
 /**
- * Resource that can hold any resource type in the Alien system. All resources share common 'type' and 'id' fields with additional type-specific properties.
+ * AWS-specific binding specification
  */
-export type ReleaseInfoConfig = {
+export type TargetDeploymentProfileAwStack = {
   /**
-   * The unique identifier for this specific resource instance. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]). Maximum 64 characters.
+   * Optional condition for additional filtering (rare)
    */
-  id: string;
+  condition?: { [k: string]: { [k: string]: string } } | null | undefined;
   /**
-   * Resource type identifier that determines the specific kind of resource. This field is used for polymorphic deserialization and resource-specific behavior.
+   * ARN patterns rendered as IAM `NotResource`, in place of `resources`. Its one use is a
+   *
+   * @remarks
+   * tag-on-create grant whose implied check AWS authorizes against no resource; the build
+   * refuses it anywhere else.
    */
-  type: string;
-  additionalProperties?: { [k: string]: any | null } | undefined;
+  notResources?: Array<string> | undefined;
+  /**
+   * Resource ARNs to bind to
+   */
+  resources: Array<string>;
+};
+
+/**
+ * Generic binding configuration for permissions
+ */
+export type TargetDeploymentProfileAwBinding = {
+  /**
+   * AWS-specific binding specification
+   */
+  resource?: TargetDeploymentProfileAwResource | undefined;
+  /**
+   * AWS-specific binding specification
+   */
+  stack?: TargetDeploymentProfileAwStack | undefined;
+};
+
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export const TargetDeploymentProfileEffect = {
+  Allow: "Allow",
+  Deny: "Deny",
+} as const;
+/**
+ * IAM effect. Defaults to Allow.
+ */
+export type TargetDeploymentProfileEffect = ClosedEnum<
+  typeof TargetDeploymentProfileEffect
+>;
+
+/**
+ * Grant permissions for a specific cloud platform
+ */
+export type TargetDeploymentProfileAwGrant = {
+  /**
+   * AWS IAM actions (only for AWS)
+   */
+  actions?: Array<string> | null | undefined;
+  /**
+   * Azure actions (only for Azure)
+   */
+  dataActions?: Array<string> | null | undefined;
+  /**
+   * GCP permissions that require an exact residual custom role.
+   */
+  permissions?: Array<string> | null | undefined;
+  /**
+   * Provider predefined roles to bind directly.
+   */
+  predefinedRoles?: Array<string> | null | undefined;
+  /**
+   * GCP residual custom permissions to pair with predefined roles.
+   */
+  residualPermissions?: Array<string> | null | undefined;
+};
+
+/**
+ * AWS-specific platform permission configuration
+ */
+export type TargetDeploymentProfileAw = {
+  /**
+   * Generic binding configuration for permissions
+   */
+  binding: TargetDeploymentProfileAwBinding;
+  /**
+   * Short admin-facing description of why this entry exists.
+   */
+  description?: string | null | undefined;
+  /**
+   * IAM effect. Defaults to Allow.
+   */
+  effect?: TargetDeploymentProfileEffect | undefined;
+  /**
+   * Grant permissions for a specific cloud platform
+   */
+  grant: TargetDeploymentProfileAwGrant;
+  /**
+   * Stable admin-facing label for this permission entry.
+   */
+  label?: string | null | undefined;
+};
+
+/**
+ * Azure-specific binding specification
+ */
+export type TargetDeploymentProfileAzureResource = {
+  /**
+   * Scope (subscription/resource group/resource level)
+   */
+  scope: string;
+};
+
+/**
+ * Azure-specific binding specification
+ */
+export type TargetDeploymentProfileAzureStack = {
+  /**
+   * Scope (subscription/resource group/resource level)
+   */
+  scope: string;
+};
+
+/**
+ * Generic binding configuration for permissions
+ */
+export type TargetDeploymentProfileAzureBinding = {
+  /**
+   * Azure-specific binding specification
+   */
+  resource?: TargetDeploymentProfileAzureResource | undefined;
+  /**
+   * Azure-specific binding specification
+   */
+  stack?: TargetDeploymentProfileAzureStack | undefined;
 };
 
-/**
- * Reference to a resource by its stable id and resource type.
- */
-export type TargetDeploymentDependency = {
-  id: string;
-  /**
-   * Resource type identifier that determines the specific kind of resource. This field is used for polymorphic deserialization and resource-specific behavior.
-   */
-  type: string;
-};
+/**
+ * Grant permissions for a specific cloud platform
+ */
+export type TargetDeploymentProfileAzureGrant = {
+  /**
+   * AWS IAM actions (only for AWS)
+   */
+  actions?: Array<string> | null | undefined;
+  /**
+   * Azure actions (only for Azure)
+   */
+  dataActions?: Array<string> | null | undefined;
+  /**
+   * GCP permissions that require an exact residual custom role.
+   */
+  permissions?: Array<string> | null | undefined;
+  /**
+   * Provider predefined roles to bind directly.
+   */
+  predefinedRoles?: Array<string> | null | undefined;
+  /**
+   * GCP residual custom permissions to pair with predefined roles.
+   */
+  residualPermissions?: Array<string> | null | undefined;
+};
+
+/**
+ * Azure-specific platform permission configuration
+ */
+export type ProfileReleaseInfoAzure = {
+  /**
+   * Generic binding configuration for permissions
+   */
+  binding: TargetDeploymentProfileAzureBinding;
+  /**
+   * Short admin-facing description of why this entry exists.
+   */
+  description?: string | null | undefined;
+  /**
+   * Grant permissions for a specific cloud platform
+   */
+  grant: TargetDeploymentProfileAzureGrant;
+  /**
+   * Stable admin-facing label for this permission entry.
+   */
+  label?: string | null | undefined;
+};
+
+/**
+ * GCP IAM condition
+ */
+export type TargetDeploymentProfileConditionResource = {
+  expression: string;
+  title: string;
+};
+
+export type TargetDeploymentProfileResourceConditionUnion =
+  | TargetDeploymentProfileConditionResource
+  | string;
+
+/**
+ * GCP-specific binding specification
+ */
+export type TargetDeploymentProfileGcpResource = {
+  condition?:
+    | TargetDeploymentProfileConditionResource
+    | string
+    | null
+    | undefined;
+  /**
+   * Scope (project/resource level)
+   */
+  scope: string;
+};
+
+/**
+ * GCP IAM condition
+ */
+export type TargetDeploymentProfileCondition = {
+  expression: string;
+  title: string;
+};
+
+export type TargetDeploymentProfileConditionUnion =
+  | TargetDeploymentProfileCondition
+  | string;
+
+/**
+ * GCP-specific binding specification
+ */
+export type TargetDeploymentProfileGcpStack = {
+  condition?: TargetDeploymentProfileCondition | string | null | undefined;
+  /**
+   * Scope (project/resource level)
+   */
+  scope: string;
+};
+
+/**
+ * Generic binding configuration for permissions
+ */
+export type TargetDeploymentProfileGcpBinding = {
+  /**
+   * GCP-specific binding specification
+   */
+  resource?: TargetDeploymentProfileGcpResource | undefined;
+  /**
+   * GCP-specific binding specification
+   */
+  stack?: TargetDeploymentProfileGcpStack | undefined;
+};
+
+/**
+ * Grant permissions for a specific cloud platform
+ */
+export type TargetDeploymentProfileGcpGrant = {
+  /**
+   * AWS IAM actions (only for AWS)
+   */
+  actions?: Array<string> | null | undefined;
+  /**
+   * Azure actions (only for Azure)
+   */
+  dataActions?: Array<string> | null | undefined;
+  /**
+   * GCP permissions that require an exact residual custom role.
+   */
+  permissions?: Array<string> | null | undefined;
+  /**
+   * Provider predefined roles to bind directly.
+   */
+  predefinedRoles?: Array<string> | null | undefined;
+  /**
+   * GCP residual custom permissions to pair with predefined roles.
+   */
+  residualPermissions?: Array<string> | null | undefined;
+};
+
+/**
+ * GCP-specific platform permission configuration
+ */
+export type ProfileReleaseInfoGcp = {
+  /**
+   * Generic binding configuration for permissions
+   */
+  binding: TargetDeploymentProfileGcpBinding;
+  /**
+   * Short admin-facing description of why this entry exists.
+   */
+  description?: string | null | undefined;
+  /**
+   * Grant permissions for a specific cloud platform
+   */
+  grant: TargetDeploymentProfileGcpGrant;
+  /**
+   * Stable admin-facing label for this permission entry.
+   */
+  label?: string | null | undefined;
+};
+
+/**
+ * Platform-specific permission configurations
+ */
+export type TargetDeploymentProfilePlatforms = {
+  /**
+   * AWS permission configurations
+   */
+  aws?: Array<TargetDeploymentProfileAw> | null | undefined;
+  /**
+   * Azure permission configurations
+   */
+  azure?: Array<ProfileReleaseInfoAzure> | null | undefined;
+  /**
+   * GCP permission configurations
+   */
+  gcp?: Array<ProfileReleaseInfoGcp> | null | undefined;
+};
+
+/**
+ * A permission set that can be applied across different cloud platforms
+ */
+export type TargetDeploymentProfile = {
+  /**
+   * Human-readable description of what this permission set allows
+   */
+  description: string;
+  /**
+   * Unique identifier for the permission set (e.g., "storage/data-read")
+   */
+  id: string;
+  /**
+   * Platform-specific permission configurations
+   */
+  platforms: TargetDeploymentProfilePlatforms;
+};
+
+/**
+ * Reference to a permission set - either by name or inline definition
+ */
+export type TargetDeploymentProfileUnion = TargetDeploymentProfile | string;
+
+/**
+ * Combined permissions configuration that contains both profiles and management
+ */
+export type TargetDeploymentPermissions = {
+  /**
+   * Management permissions configuration for stack management access
+   */
+  management?:
+    | TargetDeploymentManagement1
+    | TargetDeploymentManagement2
+    | TargetDeploymentManagementEnum
+    | undefined;
+  /**
+   * Permission profiles that define access control for compute services
+   *
+   * @remarks
+   * Key is the profile name, value is the permission configuration
+   */
+  profiles: {
+    [k: string]: { [k: string]: Array<TargetDeploymentProfile | string> };
+  };
+};
+
+/**
+ * Resource that can hold any resource type in the Alien system. All resources share common 'type' and 'id' fields with additional type-specific properties.
+ */
+export type ReleaseInfoConfig = {
+  /**
+   * The unique identifier for this specific resource instance. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]). Maximum 64 characters.
+   */
+  id: string;
+  /**
+   * Resource type identifier that determines the specific kind of resource. This field is used for polymorphic deserialization and resource-specific behavior.
+   */
+  type: string;
+  additionalProperties?: { [k: string]: any | null } | undefined;
+};
+
+/**
+ * Reference to a resource by its stable id and resource type.
+ */
+export type TargetDeploymentDependency = {
+  id: string;
+  /**
+   * Resource type identifier that determines the specific kind of resource. This field is used for polymorphic deserialization and resource-specific behavior.
+   */
+  type: string;
+};
+
+/**
+ * Describes the lifecycle of a resource within a stack, determining how it's managed and deployed.
+ */
+export const TargetDeploymentLifecycle = {
+  Frozen: "frozen",
+  Live: "live",
+} as const;
+/**
+ * Describes the lifecycle of a resource within a stack, determining how it's managed and deployed.
+ */
+export type TargetDeploymentLifecycle = ClosedEnum<
+  typeof TargetDeploymentLifecycle
+>;
+
+export type ReleaseInfoResources = {
+  /**
+   * Resource that can hold any resource type in the Alien system. All resources share common 'type' and 'id' fields with additional type-specific properties.
+   */
+  config: ReleaseInfoConfig;
+  /**
+   * Additional dependencies for this resource beyond those defined in the resource itself.
+   *
+   * @remarks
+   * The total dependencies are: resource.get_dependencies() + this list
+   */
+  dependencies: Array<TargetDeploymentDependency>;
+  /**
+   * Id of the boolean stack input that decides whether this resource is
+   *
+   * @remarks
+   * created at all. `None` means always create it.
+   *
+   * Set by `.enabled(input)` in the SDK. Setup emitters render the resource
+   * conditionally on the matching template variable, so a deployer who says no
+   * never gets the resource, its outputs, or anything derived from it.
+   */
+  enabledWhen?: string | null | undefined;
+  /**
+   * Describes the lifecycle of a resource within a stack, determining how it's managed and deployed.
+   */
+  lifecycle: TargetDeploymentLifecycle;
+  /**
+   * Enable remote bindings for this resource (BYOB use case).
+   *
+   * @remarks
+   * When true, binding params are synced to StackState's `remote_binding_params`.
+   * Default: false (prevents sensitive data in synced state).
+   */
+  remoteAccess?: boolean | undefined;
+};
+
+/**
+ * Represents the target cloud platform.
+ */
+export const TargetDeploymentSupportedPlatform = {
+  Aws: "aws",
+  Gcp: "gcp",
+  Azure: "azure",
+  Kubernetes: "kubernetes",
+  Machines: "machines",
+  Local: "local",
+  Test: "test",
+} as const;
+/**
+ * Represents the target cloud platform.
+ */
+export type TargetDeploymentSupportedPlatform = ClosedEnum<
+  typeof TargetDeploymentSupportedPlatform
+>;
+
+/**
+ * A bag of resources, unaware of any cloud.
+ */
+export type TargetDeploymentStack = {
+  /**
+   * Released Container resources whose image repositories are approved for
+   *
+   * @remarks
+   * containers created after installation.
+   */
+  dynamicContainerImageResources?: Array<string> | undefined;
+  /**
+   * Exact image repositories approved for containers created after installation.
+   *
+   * @remarks
+   * The runtime API also requires an immutable SHA-256 digest.
+   */
+  dynamicContainerRepositories?: Array<string> | undefined;
+  /**
+   * Unique identifier for the stack
+   */
+  id: string;
+  /**
+   * Input definitions required before setup or deployment can proceed.
+   */
+  inputs?: Array<TargetDeploymentInput> | undefined;
+  /**
+   * Combined permissions configuration that contains both profiles and management
+   */
+  permissions?: TargetDeploymentPermissions | undefined;
+  /**
+   * Map of resource IDs to their configurations and lifecycle settings
+   */
+  resources: { [k: string]: ReleaseInfoResources };
+  /**
+   * Which platforms this stack supports. When None, all platforms are supported.
+   */
+  supportedPlatforms?:
+    | Array<TargetDeploymentSupportedPlatform>
+    | null
+    | undefined;
+};
+
+/**
+ * Release metadata
+ *
+ * @remarks
+ *
+ * Identifies a specific release version and includes the stack definition.
+ * The deployment engine uses this to track which release is currently deployed
+ * and which is the target.
+ */
+export type ReleaseInfo = {
+  /**
+   * Short description of the release
+   */
+  description?: string | null | undefined;
+  /**
+   * Release ID (e.g., rel_xyz). `None` for an observe deployment, which has no
+   *
+   * @remarks
+   * Alien-assigned release — the platform resolves a release from `version`.
+   */
+  releaseId?: string | null | undefined;
+  /**
+   * A bag of resources, unaware of any cloud.
+   */
+  stack: TargetDeploymentStack;
+  /**
+   * Version string (e.g., 2.1.0)
+   */
+  version?: string | null | undefined;
+};
+
+/**
+ * Target deployment if update is needed
+ */
+export type TargetDeployment = {
+  /**
+   * Deployment configuration
+   *
+   * @remarks
+   *
+   * Configuration for how to perform the deployment.
+   * Note: Credentials (ClientConfig) are passed separately to step() function.
+   */
+  config: TargetDeploymentConfig;
+  /**
+   * Release metadata
+   *
+   * @remarks
+   *
+   * Identifies a specific release version and includes the stack definition.
+   * The deployment engine uses this to track which release is currently deployed
+   * and which is the target.
+   */
+  releaseInfo: ReleaseInfo;
+};
+
+/** @internal */
+export const TargetDeploymentDefaultStringList$inboundSchema: z.ZodType<
+  TargetDeploymentDefaultStringList,
+  unknown
+> = z.object({
+  type: ReleaseInfoTypeStringList$inboundSchema,
+  value: z.array(z.string()),
+});
+
+export function targetDeploymentDefaultStringListFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentDefaultStringList, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentDefaultStringList$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentDefaultStringList' from JSON`,
+  );
+}
+
+/** @internal */
+export const ReleaseInfoTypeBoolean$inboundSchema: z.ZodEnum<
+  typeof ReleaseInfoTypeBoolean
+> = z.enum(ReleaseInfoTypeBoolean);
+
+/** @internal */
+export const TargetDeploymentDefaultBoolean$inboundSchema: z.ZodType<
+  TargetDeploymentDefaultBoolean,
+  unknown
+> = z.object({
+  type: ReleaseInfoTypeBoolean$inboundSchema,
+  value: z.boolean(),
+});
+
+export function targetDeploymentDefaultBooleanFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentDefaultBoolean, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentDefaultBoolean$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentDefaultBoolean' from JSON`,
+  );
+}
+
+/** @internal */
+export const ReleaseInfoTypeNumber$inboundSchema: z.ZodEnum<
+  typeof ReleaseInfoTypeNumber
+> = z.enum(ReleaseInfoTypeNumber);
+
+/** @internal */
+export const TargetDeploymentDefaultNumber$inboundSchema: z.ZodType<
+  TargetDeploymentDefaultNumber,
+  unknown
+> = z.object({
+  type: ReleaseInfoTypeNumber$inboundSchema,
+  value: z.string(),
+});
+
+export function targetDeploymentDefaultNumberFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentDefaultNumber, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentDefaultNumber$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentDefaultNumber' from JSON`,
+  );
+}
+
+/** @internal */
+export const ReleaseInfoTypeString$inboundSchema: z.ZodEnum<
+  typeof ReleaseInfoTypeString
+> = z.enum(ReleaseInfoTypeString);
+
+/** @internal */
+export const TargetDeploymentDefaultString$inboundSchema: z.ZodType<
+  TargetDeploymentDefaultString,
+  unknown
+> = z.object({
+  type: ReleaseInfoTypeString$inboundSchema,
+  value: z.string(),
+});
+
+export function targetDeploymentDefaultStringFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentDefaultString, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentDefaultString$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentDefaultString' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentDefaultUnion$inboundSchema: z.ZodType<
+  TargetDeploymentDefaultUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentDefaultString$inboundSchema),
+  z.lazy(() => TargetDeploymentDefaultNumber$inboundSchema),
+  z.lazy(() => TargetDeploymentDefaultBoolean$inboundSchema),
+  z.lazy(() => TargetDeploymentDefaultStringList$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentDefaultUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentDefaultUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentDefaultUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentDefaultUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TypeReleaseInfoEnvEnum$inboundSchema: z.ZodEnum<
+  typeof TypeReleaseInfoEnvEnum
+> = z.enum(TypeReleaseInfoEnvEnum);
+
+/** @internal */
+export const ReleaseInfoTypeUnion$inboundSchema: z.ZodType<
+  ReleaseInfoTypeUnion,
+  unknown
+> = z.union([TypeReleaseInfoEnvEnum$inboundSchema, z.string()]);
+
+export function releaseInfoTypeUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<ReleaseInfoTypeUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => ReleaseInfoTypeUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'ReleaseInfoTypeUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentEnv$inboundSchema: z.ZodType<
+  TargetDeploymentEnv,
+  unknown
+> = z.object({
+  name: z.string(),
+  targetResources: z.nullable(z.array(z.string())).optional(),
+  type: z.nullable(z.union([TypeReleaseInfoEnvEnum$inboundSchema, z.string()]))
+    .optional(),
+});
+
+export function targetDeploymentEnvFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentEnv, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentEnv$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentEnv' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentGenerate$inboundSchema: z.ZodType<
+  TargetDeploymentGenerate,
+  unknown
+> = z.object({
+  length: z.int(),
+});
+
+export function targetDeploymentGenerateFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentGenerate, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentGenerate$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentGenerate' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentGenerateUnion$inboundSchema: z.ZodType<
+  TargetDeploymentGenerateUnion,
+  unknown
+> = z.union([z.lazy(() => TargetDeploymentGenerate$inboundSchema), z.string()]);
+
+export function targetDeploymentGenerateUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentGenerateUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentGenerateUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentGenerateUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentKind$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentKind
+> = z.enum(TargetDeploymentKind);
+
+/** @internal */
+export const ReleaseInfoPlatform$inboundSchema: z.ZodEnum<
+  typeof ReleaseInfoPlatform
+> = z.enum(ReleaseInfoPlatform);
+
+/** @internal */
+export const TargetDeploymentProvidedBy$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentProvidedBy
+> = z.enum(TargetDeploymentProvidedBy);
+
+/** @internal */
+export const TargetDeploymentValidation$inboundSchema: z.ZodType<
+  TargetDeploymentValidation,
+  unknown
+> = z.object({
+  format: z.nullable(z.string()).optional(),
+  max: z.nullable(z.string()).optional(),
+  maxItems: z.nullable(z.int()).optional(),
+  maxLength: z.nullable(z.int()).optional(),
+  min: z.nullable(z.string()).optional(),
+  minItems: z.nullable(z.int()).optional(),
+  minLength: z.nullable(z.int()).optional(),
+  pattern: z.nullable(z.string()).optional(),
+  values: z.nullable(z.array(z.string())).optional(),
+});
+
+export function targetDeploymentValidationFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentValidation, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentValidation$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentValidation' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentValidationUnion$inboundSchema: z.ZodType<
+  TargetDeploymentValidationUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentValidation$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentValidationUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentValidationUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentValidationUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentValidationUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentInput$inboundSchema: z.ZodType<
+  TargetDeploymentInput,
+  unknown
+> = z.object({
+  default: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentDefaultString$inboundSchema),
+      z.lazy(() => TargetDeploymentDefaultNumber$inboundSchema),
+      z.lazy(() => TargetDeploymentDefaultBoolean$inboundSchema),
+      z.lazy(() => TargetDeploymentDefaultStringList$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  description: z.string(),
+  env: z.array(z.lazy(() => TargetDeploymentEnv$inboundSchema)).optional(),
+  generate: z.nullable(
+    z.union([z.lazy(() => TargetDeploymentGenerate$inboundSchema), z.string()]),
+  ).optional(),
+  id: z.string(),
+  kind: TargetDeploymentKind$inboundSchema,
+  label: z.string(),
+  placeholder: z.nullable(z.string()).optional(),
+  platforms: z.nullable(z.array(ReleaseInfoPlatform$inboundSchema)).optional(),
+  providedBy: z.array(TargetDeploymentProvidedBy$inboundSchema),
+  required: z.boolean(),
+  validation: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentValidation$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+});
+
+export function targetDeploymentInputFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentInput, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentInput$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentInput' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentManagementEnum$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentManagementEnum
+> = z.enum(TargetDeploymentManagementEnum);
+
+/** @internal */
+export const TargetDeploymentOverrideAwResource$inboundSchema: z.ZodType<
+  TargetDeploymentOverrideAwResource,
+  unknown
+> = z.object({
+  condition: z.nullable(z.record(z.string(), z.record(z.string(), z.string())))
+    .optional(),
+  notResources: z.array(z.string()).optional(),
+  resources: z.array(z.string()),
+});
+
+export function targetDeploymentOverrideAwResourceFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentOverrideAwResource, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentOverrideAwResource$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentOverrideAwResource' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentOverrideAwStack$inboundSchema: z.ZodType<
+  TargetDeploymentOverrideAwStack,
+  unknown
+> = z.object({
+  condition: z.nullable(z.record(z.string(), z.record(z.string(), z.string())))
+    .optional(),
+  notResources: z.array(z.string()).optional(),
+  resources: z.array(z.string()),
+});
+
+export function targetDeploymentOverrideAwStackFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentOverrideAwStack, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentOverrideAwStack$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentOverrideAwStack' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentOverrideAwBinding$inboundSchema: z.ZodType<
+  TargetDeploymentOverrideAwBinding,
+  unknown
+> = z.object({
+  resource: z.lazy(() => TargetDeploymentOverrideAwResource$inboundSchema)
+    .optional(),
+  stack: z.lazy(() => TargetDeploymentOverrideAwStack$inboundSchema).optional(),
+});
+
+export function targetDeploymentOverrideAwBindingFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentOverrideAwBinding, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentOverrideAwBinding$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentOverrideAwBinding' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentOverrideEffect$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentOverrideEffect
+> = z.enum(TargetDeploymentOverrideEffect);
+
+/** @internal */
+export const TargetDeploymentOverrideAwGrant$inboundSchema: z.ZodType<
+  TargetDeploymentOverrideAwGrant,
+  unknown
+> = z.object({
+  actions: z.nullable(z.array(z.string())).optional(),
+  dataActions: z.nullable(z.array(z.string())).optional(),
+  permissions: z.nullable(z.array(z.string())).optional(),
+  predefinedRoles: z.nullable(z.array(z.string())).optional(),
+  residualPermissions: z.nullable(z.array(z.string())).optional(),
+});
+
+export function targetDeploymentOverrideAwGrantFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentOverrideAwGrant, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentOverrideAwGrant$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentOverrideAwGrant' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentOverrideAw$inboundSchema: z.ZodType<
+  TargetDeploymentOverrideAw,
+  unknown
+> = z.object({
+  binding: z.lazy(() => TargetDeploymentOverrideAwBinding$inboundSchema),
+  description: z.nullable(z.string()).optional(),
+  effect: TargetDeploymentOverrideEffect$inboundSchema.optional(),
+  grant: z.lazy(() => TargetDeploymentOverrideAwGrant$inboundSchema),
+  label: z.nullable(z.string()).optional(),
+});
+
+export function targetDeploymentOverrideAwFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentOverrideAw, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentOverrideAw$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentOverrideAw' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentOverrideAzureResource$inboundSchema: z.ZodType<
+  TargetDeploymentOverrideAzureResource,
+  unknown
+> = z.object({
+  scope: z.string(),
+});
+
+export function targetDeploymentOverrideAzureResourceFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentOverrideAzureResource, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentOverrideAzureResource$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentOverrideAzureResource' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentOverrideAzureStack$inboundSchema: z.ZodType<
+  TargetDeploymentOverrideAzureStack,
+  unknown
+> = z.object({
+  scope: z.string(),
+});
+
+export function targetDeploymentOverrideAzureStackFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentOverrideAzureStack, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentOverrideAzureStack$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentOverrideAzureStack' from JSON`,
+  );
+}
 
-/**
- * Describes the lifecycle of a resource within a stack, determining how it's managed and deployed.
- */
-export const TargetDeploymentLifecycle = {
-  Frozen: "frozen",
-  Live: "live",
-} as const;
-/**
- * Describes the lifecycle of a resource within a stack, determining how it's managed and deployed.
- */
-export type TargetDeploymentLifecycle = ClosedEnum<
-  typeof TargetDeploymentLifecycle
->;
+/** @internal */
+export const TargetDeploymentOverrideAzureBinding$inboundSchema: z.ZodType<
+  TargetDeploymentOverrideAzureBinding,
+  unknown
+> = z.object({
+  resource: z.lazy(() => TargetDeploymentOverrideAzureResource$inboundSchema)
+    .optional(),
+  stack: z.lazy(() => TargetDeploymentOverrideAzureStack$inboundSchema)
+    .optional(),
+});
 
-export type ReleaseInfoResources = {
-  /**
-   * Resource that can hold any resource type in the Alien system. All resources share common 'type' and 'id' fields with additional type-specific properties.
-   */
-  config: ReleaseInfoConfig;
-  /**
-   * Additional dependencies for this resource beyond those defined in the resource itself.
-   *
-   * @remarks
-   * The total dependencies are: resource.get_dependencies() + this list
-   */
-  dependencies: Array<TargetDeploymentDependency>;
-  /**
-   * Id of the boolean stack input that decides whether this resource is
-   *
-   * @remarks
-   * created at all. `None` means always create it.
-   *
-   * Set by `.enabled(input)` in the SDK. Setup emitters render the resource
-   * conditionally on the matching template variable, so a deployer who says no
-   * never gets the resource, its outputs, or anything derived from it.
-   */
-  enabledWhen?: string | null | undefined;
-  /**
-   * Describes the lifecycle of a resource within a stack, determining how it's managed and deployed.
-   */
-  lifecycle: TargetDeploymentLifecycle;
-  /**
-   * Enable remote bindings for this resource (BYOB use case).
-   *
-   * @remarks
-   * When true, binding params are synced to StackState's `remote_binding_params`.
-   * Default: false (prevents sensitive data in synced state).
-   */
-  remoteAccess?: boolean | undefined;
-};
+export function targetDeploymentOverrideAzureBindingFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentOverrideAzureBinding, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentOverrideAzureBinding$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentOverrideAzureBinding' from JSON`,
+  );
+}
 
-/**
- * Represents the target cloud platform.
- */
-export const TargetDeploymentSupportedPlatform = {
-  Aws: "aws",
-  Gcp: "gcp",
-  Azure: "azure",
-  Kubernetes: "kubernetes",
-  Machines: "machines",
-  Local: "local",
-  Test: "test",
-} as const;
-/**
- * Represents the target cloud platform.
- */
-export type TargetDeploymentSupportedPlatform = ClosedEnum<
-  typeof TargetDeploymentSupportedPlatform
->;
+/** @internal */
+export const TargetDeploymentOverrideAzureGrant$inboundSchema: z.ZodType<
+  TargetDeploymentOverrideAzureGrant,
+  unknown
+> = z.object({
+  actions: z.nullable(z.array(z.string())).optional(),
+  dataActions: z.nullable(z.array(z.string())).optional(),
+  permissions: z.nullable(z.array(z.string())).optional(),
+  predefinedRoles: z.nullable(z.array(z.string())).optional(),
+  residualPermissions: z.nullable(z.array(z.string())).optional(),
+});
 
-/**
- * A bag of resources, unaware of any cloud.
- */
-export type TargetDeploymentStack = {
-  /**
-   * Released Container resources whose image repositories are approved for
-   *
-   * @remarks
-   * containers created after installation.
-   */
-  dynamicContainerImageResources?: Array<string> | undefined;
-  /**
-   * Exact image repositories approved for containers created after installation.
-   *
-   * @remarks
-   * The runtime API also requires an immutable SHA-256 digest.
-   */
-  dynamicContainerRepositories?: Array<string> | undefined;
-  /**
-   * Unique identifier for the stack
-   */
-  id: string;
-  /**
-   * Input definitions required before setup or deployment can proceed.
-   */
-  inputs?: Array<TargetDeploymentInput> | undefined;
-  /**
-   * Combined permissions configuration that contains both profiles and management
-   */
-  permissions?: TargetDeploymentPermissions | undefined;
-  /**
-   * Map of resource IDs to their configurations and lifecycle settings
-   */
-  resources: { [k: string]: ReleaseInfoResources };
-  /**
-   * Which platforms this stack supports. When None, all platforms are supported.
-   */
-  supportedPlatforms?:
-    | Array<TargetDeploymentSupportedPlatform>
-    | null
-    | undefined;
-};
+export function targetDeploymentOverrideAzureGrantFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentOverrideAzureGrant, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentOverrideAzureGrant$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentOverrideAzureGrant' from JSON`,
+  );
+}
 
-/**
- * Release metadata
- *
- * @remarks
- *
- * Identifies a specific release version and includes the stack definition.
- * The deployment engine uses this to track which release is currently deployed
- * and which is the target.
- */
-export type ReleaseInfo = {
-  /**
-   * Short description of the release
-   */
-  description?: string | null | undefined;
-  /**
-   * Release ID (e.g., rel_xyz). `None` for an observe deployment, which has no
-   *
-   * @remarks
-   * Alien-assigned release — the platform resolves a release from `version`.
-   */
-  releaseId?: string | null | undefined;
-  /**
-   * A bag of resources, unaware of any cloud.
-   */
-  stack: TargetDeploymentStack;
-  /**
-   * Version string (e.g., 2.1.0)
-   */
-  version?: string | null | undefined;
-};
+/** @internal */
+export const OverrideReleaseInfoAzure$inboundSchema: z.ZodType<
+  OverrideReleaseInfoAzure,
+  unknown
+> = z.object({
+  binding: z.lazy(() => TargetDeploymentOverrideAzureBinding$inboundSchema),
+  description: z.nullable(z.string()).optional(),
+  grant: z.lazy(() => TargetDeploymentOverrideAzureGrant$inboundSchema),
+  label: z.nullable(z.string()).optional(),
+});
 
-/**
- * Target deployment if update is needed
- */
-export type TargetDeployment = {
-  /**
-   * Deployment configuration
-   *
-   * @remarks
-   *
-   * Configuration for how to perform the deployment.
-   * Note: Credentials (ClientConfig) are passed separately to step() function.
-   */
-  config: TargetDeploymentConfig;
-  /**
-   * Release metadata
-   *
-   * @remarks
-   *
-   * Identifies a specific release version and includes the stack definition.
-   * The deployment engine uses this to track which release is currently deployed
-   * and which is the target.
-   */
-  releaseInfo: ReleaseInfo;
-};
+export function overrideReleaseInfoAzureFromJSON(
+  jsonString: string,
+): SafeParseResult<OverrideReleaseInfoAzure, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => OverrideReleaseInfoAzure$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'OverrideReleaseInfoAzure' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentOverrideConditionResource$inboundSchema: z.ZodType<
+  TargetDeploymentOverrideConditionResource,
+  unknown
+> = z.object({
+  expression: z.string(),
+  title: z.string(),
+});
+
+export function targetDeploymentOverrideConditionResourceFromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentOverrideConditionResource,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentOverrideConditionResource$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'TargetDeploymentOverrideConditionResource' from JSON`,
+  );
+}
 
 /** @internal */
 export const TargetDeploymentOverrideResourceConditionUnion$inboundSchema:
   z.ZodType<TargetDeploymentOverrideResourceConditionUnion, unknown> = z.union([
-    TargetDeploymentOverrideConditionResource$inboundSchema,
-    z.any(),
+    z.lazy(() => TargetDeploymentOverrideConditionResource$inboundSchema),
+    z.string(),
   ]);
 
 export function targetDeploymentOverrideResourceConditionUnionFromJSON(
@@ -1155,7 +2163,10 @@ export const TargetDeploymentOverrideGcpResource$inboundSchema: z.ZodType<
   unknown
 > = z.object({
   condition: z.nullable(
-    z.union([TargetDeploymentOverrideConditionResource$inboundSchema, z.any()]),
+    z.union([
+      z.lazy(() => TargetDeploymentOverrideConditionResource$inboundSchema),
+      z.string(),
+    ]),
   ).optional(),
   scope: z.string(),
 });
@@ -1196,7 +2207,7 @@ export const TargetDeploymentOverrideConditionUnion$inboundSchema: z.ZodType<
   unknown
 > = z.union([
   z.lazy(() => TargetDeploymentOverrideCondition$inboundSchema),
-  z.any(),
+  z.string(),
 ]);
 
 export function targetDeploymentOverrideConditionUnionFromJSON(
@@ -1218,7 +2229,7 @@ export const TargetDeploymentOverrideGcpStack$inboundSchema: z.ZodType<
   condition: z.nullable(
     z.union([
       z.lazy(() => TargetDeploymentOverrideCondition$inboundSchema),
-      z.any(),
+      z.string(),
     ]),
   ).optional(),
   scope: z.string(),
@@ -1304,8 +2315,12 @@ export const TargetDeploymentOverridePlatforms$inboundSchema: z.ZodType<
   TargetDeploymentOverridePlatforms,
   unknown
 > = z.object({
-  aws: z.nullable(z.array(TargetDeploymentOverrideAw$inboundSchema)).optional(),
-  azure: z.nullable(z.array(OverrideReleaseInfoAzure$inboundSchema)).optional(),
+  aws: z.nullable(
+    z.array(z.lazy(() => TargetDeploymentOverrideAw$inboundSchema)),
+  ).optional(),
+  azure: z.nullable(
+    z.array(z.lazy(() => OverrideReleaseInfoAzure$inboundSchema)),
+  ).optional(),
   gcp: z.nullable(z.array(z.lazy(() => OverrideReleaseInfoGcp$inboundSchema)))
     .optional(),
 });
@@ -1622,7 +2637,7 @@ export function targetDeploymentExtendConditionResourceFromJSON(
 export const TargetDeploymentExtendResourceConditionUnion$inboundSchema:
   z.ZodType<TargetDeploymentExtendResourceConditionUnion, unknown> = z.union([
     z.lazy(() => TargetDeploymentExtendConditionResource$inboundSchema),
-    z.any(),
+    z.string(),
   ]);
 
 export function targetDeploymentExtendResourceConditionUnionFromJSON(
@@ -1649,7 +2664,7 @@ export const TargetDeploymentExtendGcpResource$inboundSchema: z.ZodType<
   condition: z.nullable(
     z.union([
       z.lazy(() => TargetDeploymentExtendConditionResource$inboundSchema),
-      z.any(),
+      z.string(),
     ]),
   ).optional(),
   scope: z.string(),
@@ -1690,7 +2705,7 @@ export const TargetDeploymentExtendConditionUnion$inboundSchema: z.ZodType<
   unknown
 > = z.union([
   z.lazy(() => TargetDeploymentExtendCondition$inboundSchema),
-  z.any(),
+  z.string(),
 ]);
 
 export function targetDeploymentExtendConditionUnionFromJSON(
@@ -1712,7 +2727,7 @@ export const TargetDeploymentExtendGcpStack$inboundSchema: z.ZodType<
   condition: z.nullable(
     z.union([
       z.lazy(() => TargetDeploymentExtendCondition$inboundSchema),
-      z.any(),
+      z.string(),
     ]),
   ).optional(),
   scope: z.string(),
@@ -2135,7 +3150,7 @@ export function targetDeploymentProfileConditionResourceFromJSON(
 export const TargetDeploymentProfileResourceConditionUnion$inboundSchema:
   z.ZodType<TargetDeploymentProfileResourceConditionUnion, unknown> = z.union([
     z.lazy(() => TargetDeploymentProfileConditionResource$inboundSchema),
-    z.any(),
+    z.string(),
   ]);
 
 export function targetDeploymentProfileResourceConditionUnionFromJSON(
@@ -2162,7 +3177,7 @@ export const TargetDeploymentProfileGcpResource$inboundSchema: z.ZodType<
   condition: z.nullable(
     z.union([
       z.lazy(() => TargetDeploymentProfileConditionResource$inboundSchema),
-      z.any(),
+      z.string(),
     ]),
   ).optional(),
   scope: z.string(),
@@ -2204,7 +3219,7 @@ export const TargetDeploymentProfileConditionUnion$inboundSchema: z.ZodType<
   unknown
 > = z.union([
   z.lazy(() => TargetDeploymentProfileCondition$inboundSchema),
-  z.any(),
+  z.string(),
 ]);
 
 export function targetDeploymentProfileConditionUnionFromJSON(
@@ -2226,7 +3241,7 @@ export const TargetDeploymentProfileGcpStack$inboundSchema: z.ZodType<
   condition: z.nullable(
     z.union([
       z.lazy(() => TargetDeploymentProfileCondition$inboundSchema),
-      z.any(),
+      z.string(),
     ]),
   ).optional(),
   scope: z.string(),
@@ -2482,7 +3497,7 @@ export const TargetDeploymentStack$inboundSchema: z.ZodType<
   dynamicContainerImageResources: z.array(z.string()).optional(),
   dynamicContainerRepositories: z.array(z.string()).optional(),
   id: z.string(),
-  inputs: z.array(TargetDeploymentInput$inboundSchema).optional(),
+  inputs: z.array(z.lazy(() => TargetDeploymentInput$inboundSchema)).optional(),
   permissions: z.lazy(() => TargetDeploymentPermissions$inboundSchema)
     .optional(),
   resources: z.record(