@alienplatform/platform-api 3.3.31 → 3.3.33

package/esm/react-query/projectsAcceptRemoteOperatorPermissions.js

@@ -10,7 +10,7 @@ import { useAlienContext } from "./_context.js";
  * Record that a Remote Operator installation's setup was re-applied
  *
  * @remarks
- * Records the permissions compiled from the currently enabled operations as the installation's installed permissions. Call it after re-applying the installation's Helm release, manifest, cloud access, or CloudFormation stack.
+ * Records the permissions compiled from every built-in operation plugin as the installation's installed permissions. Call it after re-applying the installation's Helm release, manifest, cloud access, or CloudFormation stack.
  */
 export function useProjectsAcceptRemoteOperatorPermissionsMutation(options) {
     const client = useAlienContext();

package/esm/react-query/projectsConfigureRemoteSandbox.d.ts

@@ -16,7 +16,7 @@ export type ProjectsConfigureRemoteSandboxMutationVariables = {
 export type ProjectsConfigureRemoteSandboxMutationData = models.CapabilityMaterialization;
 export type ProjectsConfigureRemoteSandboxMutationError = errors.APIError | AlienError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError;
 /**
- * Enable a customer-owned sandbox a hosted caller can drive through Remote Bindings. Without a custom image it publishes to every cloud on Alien's default image, which the project then follows. A custom image publishes to AWS; a public one with a linux/amd64 variant also publishes to Azure, and to GCP once Alien has built its GCP image.
+ * Enable a customer-owned sandbox a hosted caller can drive through Remote Bindings. Without a custom image it publishes to every cloud on Alien's default image, which the project then follows. A custom image publishes to AWS; a public one with a linux/amd64 variant also publishes to Azure, and to GCP once Alien has built its GCP image; a private one publishes to Azure from its `azureImage` and to GCP from its `gcpImage`.
  */
 export declare function useProjectsConfigureRemoteSandboxMutation(options?: MutationHookOptions<ProjectsConfigureRemoteSandboxMutationData, ProjectsConfigureRemoteSandboxMutationError, ProjectsConfigureRemoteSandboxMutationVariables>): UseMutationResult<ProjectsConfigureRemoteSandboxMutationData, ProjectsConfigureRemoteSandboxMutationError, ProjectsConfigureRemoteSandboxMutationVariables>;
 export declare function mutationKeyProjectsConfigureRemoteSandbox(): MutationKey;

package/esm/react-query/projectsConfigureRemoteSandbox.js

@@ -7,7 +7,7 @@ import { combineSignals } from "../lib/primitives.js";
 import { unwrapAsync } from "../types/fp.js";
 import { useAlienContext } from "./_context.js";
 /**
- * Enable a customer-owned sandbox a hosted caller can drive through Remote Bindings. Without a custom image it publishes to every cloud on Alien's default image, which the project then follows. A custom image publishes to AWS; a public one with a linux/amd64 variant also publishes to Azure, and to GCP once Alien has built its GCP image.
+ * Enable a customer-owned sandbox a hosted caller can drive through Remote Bindings. Without a custom image it publishes to every cloud on Alien's default image, which the project then follows. A custom image publishes to AWS; a public one with a linux/amd64 variant also publishes to Azure, and to GCP once Alien has built its GCP image; a private one publishes to Azure from its `azureImage` and to GCP from its `gcpImage`.
  */
 export function useProjectsConfigureRemoteSandboxMutation(options) {
     const client = useAlienContext();

package/esm/sdk/deployments.d.ts

@@ -80,7 +80,7 @@ export declare class Deployments extends ClientSDK {
      */
     updateInputs(id: string, updateDeploymentInputsRequest?: models.UpdateDeploymentInputsRequest | undefined, options?: RequestOptions): Promise<models.UpdateDeploymentInputsResponse>;
     /**
-     * Update deployment-time compute pool selections and request reconciliation by the hosted manager.
+     * Update deployment-time compute selections or quota warning overrides and request reconciliation by the hosted manager.
      */
     updateCompute(id: string, updateDeploymentComputeRequest?: models.UpdateDeploymentComputeRequest | undefined, options?: RequestOptions): Promise<operations.UpdateDeploymentComputeResponse>;
     /**

package/esm/sdk/deployments.js

@@ -149,7 +149,7 @@ export class Deployments extends ClientSDK {
         return unwrapAsync(deploymentsUpdateInputs(this, id, updateDeploymentInputsRequest, options));
     }
     /**
-     * Update deployment-time compute pool selections and request reconciliation by the hosted manager.
+     * Update deployment-time compute selections or quota warning overrides and request reconciliation by the hosted manager.
      */
     async updateCompute(id, updateDeploymentComputeRequest, options) {
         return unwrapAsync(deploymentsUpdateCompute(this, id, updateDeploymentComputeRequest, options));

package/esm/sdk/operations.d.ts

@@ -7,31 +7,15 @@ export declare class Operations extends ClientSDK {
      */
     listPlugins(request: operations.ListOperationsPluginsRequest, options?: RequestOptions): Promise<models.ListOperationsPluginsResponse>;
     /**
-     * Register a custom operations plugin whose bundle ZIP has already been uploaded to S3 (see POST /plugins/upload-url). Replaces any existing plugin of the same name in that project. New custom plugins are enabled by default. Returns the cloud permission delta versus the previously enabled set.
+     * Register a version of a custom operations plugin whose bundle ZIP has already been uploaded to S3 (see POST /plugins/upload-url). Publishing changes no deployment: a release runs the version it declares in `operations()`.
      */
     publishPlugin(project: string, publishOperationsPluginRequest?: models.PublishOperationsPluginRequest | undefined, options?: RequestOptions): Promise<models.PublishOperationsPluginResponse>;
-    /**
-     * Replace the complete set of enabled built-in operations plugins for a project. Returns the cloud permission delta versus the previously enabled set.
-     */
-    setBuiltinPlugins(project: string, setBuiltinOperationsPluginsRequest?: models.SetBuiltinOperationsPluginsRequest | undefined, options?: RequestOptions): Promise<models.SetBuiltinOperationsPluginsResponse>;
     /**
      * Get a presigned S3 URL to upload a custom operations plugin bundle ZIP. Upload the ZIP with a PUT to the returned url (sending the given Content-Type), then call POST /plugins to register it.
      */
     createBundleUploadUrl(project: string, operationsBundleUploadUrlRequest?: models.OperationsBundleUploadUrlRequest | undefined, options?: RequestOptions): Promise<models.OperationsBundleUploadUrlResponse>;
     /**
-     * Enable or disable an operations plugin (builtin or custom) for a project. Only enabled plugins are distributed to Operators and can be invoked. Returns the cloud permission delta versus the previously enabled set. With `dryRun`, validates the change and returns the delta without saving it.
-     */
-    setPluginEnabled(request: operations.SetOperationsPluginEnabledRequest, options?: RequestOptions): Promise<models.SetOperationsPluginEnabledResponse>;
-    /**
-     * Get a project's per-command approval policy. Mirrors what the operator enforces: `plugin/operation` / `plugin/*` / `*` patterns → auto | manual.
-     */
-    getPolicy(request: operations.GetOperationsPolicyRequest, options?: RequestOptions): Promise<models.OperationsPolicyResponse>;
-    /**
-     * Replace a project's per-command approval policy (full rule set). Patterns are `plugin/operation`, `plugin/*`, or `*`; each maps to auto | manual.
-     */
-    updatePolicy(project: string, updateOperationsPolicyRequest?: models.UpdateOperationsPolicyRequest | undefined, options?: RequestOptions): Promise<models.OperationsPolicyResponse>;
-    /**
-     * Invoke a plugin operation against a deployment. Honors the project's per-command approval policy.
+     * Invoke a plugin operation against a deployment. Honors the approval rules the deployment's release declares in `operations()`.
      */
     invoke(project: string, invokeOperationRequest?: models.InvokeOperationRequest | undefined, options?: RequestOptions): Promise<models.InvokeOperationResponse>;
     /**
@@ -78,5 +62,29 @@ export declare class Operations extends ClientSDK {
      * Get an access request by id.
      */
     getAccessRequest(request: operations.GetAccessRequestRequest, options?: RequestOptions): Promise<operations.GetAccessRequestResponse>;
+    /**
+     * Replace the complete set of enabled built-in operations plugins for a project. Returns the cloud permission delta versus the previously enabled set.
+     *
+     * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
+     */
+    setBuiltinPlugins(request: operations.SetBuiltinOperationsPluginsRequest, options?: RequestOptions): Promise<models.SetBuiltinOperationsPluginsResponse>;
+    /**
+     * Enable or disable an operations plugin (builtin or custom) for a project. Only enabled plugins are distributed to Operators and can be invoked. Returns the cloud permission delta versus the previously enabled set. With `dryRun`, validates the change and returns the delta without saving it.
+     *
+     * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
+     */
+    setPluginEnabled(request: operations.SetOperationsPluginEnabledRequest, options?: RequestOptions): Promise<models.SetOperationsPluginEnabledResponse>;
+    /**
+     * Get a project's per-command approval policy. Mirrors what the operator enforces: `plugin/operation` / `plugin/*` / `*` patterns → auto | manual.
+     *
+     * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
+     */
+    getPolicy(request: operations.GetOperationsPolicyRequest, options?: RequestOptions): Promise<models.OperationsPolicyResponse>;
+    /**
+     * Replace a project's per-command approval policy (full rule set). Patterns are `plugin/operation`, `plugin/*`, or `*`; each maps to auto | manual.
+     *
+     * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
+     */
+    updatePolicy(request: operations.UpdateOperationsPolicyRequest, options?: RequestOptions): Promise<models.OperationsPolicyResponse>;
 }
 //# sourceMappingURL=operations.d.ts.map

package/esm/sdk/operations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../src/sdk/operations.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,UAAW,SAAQ,SAAS;IACvC;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,UAAU,CAAC,4BAA4B,EAChD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,6BAA6B,CAAC;IAQhD;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,8BAA8B,CAAC,EAC3B,MAAM,CAAC,8BAA8B,GACrC,SAAS,EACb,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,+BAA+B,CAAC;IASlD;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,kCAAkC,CAAC,EAC/B,MAAM,CAAC,kCAAkC,GACzC,SAAS,EACb,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,mCAAmC,CAAC;IAStD;;OAEG;IACG,qBAAqB,CACzB,OAAO,EAAE,MAAM,EACf,gCAAgC,CAAC,EAC7B,MAAM,CAAC,gCAAgC,GACvC,SAAS,EACb,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,iCAAiC,CAAC;IASpD;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,UAAU,CAAC,iCAAiC,EACrD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,kCAAkC,CAAC;IAQrD;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,UAAU,CAAC,0BAA0B,EAC9C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC;IAQ3C;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,MAAM,EACf,6BAA6B,CAAC,EAC1B,MAAM,CAAC,6BAA6B,GACpC,SAAS,EACb,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC;IAS3C;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,MAAM,EACf,sBAAsB,CAAC,EAAE,MAAM,CAAC,sBAAsB,GAAG,SAAS,EAClE,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC;IAS1C;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,EACf,2BAA2B,CAAC,EACxB,MAAM,CAAC,2BAA2B,GAClC,SAAS,EACb,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,4BAA4B,CAAC;IAS/C;;OAEG;IACG,mBAAmB,CACvB,OAAO,CAAC,EAAE,MAAM,CAAC,mBAAmB,GAAG,SAAS,EAChD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,2BAA2B,CAAC;IAQlD;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,UAAU,CAAC,yBAAyB,EAC7C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,0BAA0B,CAAC;IAQjD;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,UAAU,CAAC,yBAAyB,EAC7C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,0BAA0B,CAAC;IAQjD;;OAEG;IACG,oBAAoB,CACxB,EAAE,EAAE,MAAM,EACV,WAAW,CAAC,EAAE,UAAU,CAAC,+BAA+B,GAAG,SAAS,EACpE,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,4BAA4B,CAAC;IASnD;;OAEG;IACG,iBAAiB,CACrB,EAAE,EAAE,MAAM,EACV,WAAW,CAAC,EAAE,UAAU,CAAC,4BAA4B,GAAG,SAAS,EACjE,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC;IAShD;;OAEG;IACG,2BAA2B,CAC/B,OAAO,EAAE,UAAU,CAAC,kCAAkC,EACtD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,mCAAmC,CAAC;IAQ1D;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,UAAU,CAAC,wBAAwB,EAC5C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC;IAQhD;;OAEG;IACG,wBAAwB,CAC5B,OAAO,EAAE,UAAU,CAAC,+BAA+B,EACnD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC;IAQxC;;OAEG;IACG,mBAAmB,CACvB,EAAE,EAAE,MAAM,EACV,mBAAmB,CAAC,EAAE,MAAM,CAAC,mBAAmB,GAAG,SAAS,EAC5D,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,2BAA2B,CAAC;IASlD;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,UAAU,CAAC,uBAAuB,EAC3C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAAC;CAOhD"}
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../src/sdk/operations.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,UAAW,SAAQ,SAAS;IACvC;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,UAAU,CAAC,4BAA4B,EAChD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,6BAA6B,CAAC;IAQhD;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,8BAA8B,CAAC,EAC3B,MAAM,CAAC,8BAA8B,GACrC,SAAS,EACb,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,+BAA+B,CAAC;IASlD;;OAEG;IACG,qBAAqB,CACzB,OAAO,EAAE,MAAM,EACf,gCAAgC,CAAC,EAC7B,MAAM,CAAC,gCAAgC,GACvC,SAAS,EACb,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,iCAAiC,CAAC;IASpD;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,MAAM,EACf,sBAAsB,CAAC,EAAE,MAAM,CAAC,sBAAsB,GAAG,SAAS,EAClE,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC;IAS1C;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,EACf,2BAA2B,CAAC,EACxB,MAAM,CAAC,2BAA2B,GAClC,SAAS,EACb,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,4BAA4B,CAAC;IAS/C;;OAEG;IACG,mBAAmB,CACvB,OAAO,CAAC,EAAE,MAAM,CAAC,mBAAmB,GAAG,SAAS,EAChD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,2BAA2B,CAAC;IAQlD;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,UAAU,CAAC,yBAAyB,EAC7C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,0BAA0B,CAAC;IAQjD;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,UAAU,CAAC,yBAAyB,EAC7C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,0BAA0B,CAAC;IAQjD;;OAEG;IACG,oBAAoB,CACxB,EAAE,EAAE,MAAM,EACV,WAAW,CAAC,EAAE,UAAU,CAAC,+BAA+B,GAAG,SAAS,EACpE,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,4BAA4B,CAAC;IASnD;;OAEG;IACG,iBAAiB,CACrB,EAAE,EAAE,MAAM,EACV,WAAW,CAAC,EAAE,UAAU,CAAC,4BAA4B,GAAG,SAAS,EACjE,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC;IAShD;;OAEG;IACG,2BAA2B,CAC/B,OAAO,EAAE,UAAU,CAAC,kCAAkC,EACtD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,mCAAmC,CAAC;IAQ1D;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,UAAU,CAAC,wBAAwB,EAC5C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC;IAQhD;;OAEG;IACG,wBAAwB,CAC5B,OAAO,EAAE,UAAU,CAAC,+BAA+B,EACnD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC;IAQxC;;OAEG;IACG,mBAAmB,CACvB,EAAE,EAAE,MAAM,EACV,mBAAmB,CAAC,EAAE,MAAM,CAAC,mBAAmB,GAAG,SAAS,EAC5D,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,2BAA2B,CAAC;IASlD;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,UAAU,CAAC,uBAAuB,EAC3C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAAC;IAQ/C;;;;OAIG;IACG,iBAAiB,CACrB,OAAO,EAAE,UAAU,CAAC,kCAAkC,EACtD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,mCAAmC,CAAC;IAQtD;;;;OAIG;IACG,gBAAgB,CACpB,OAAO,EAAE,UAAU,CAAC,iCAAiC,EACrD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,kCAAkC,CAAC;IAQrD;;;;OAIG;IACG,SAAS,CACb,OAAO,EAAE,UAAU,CAAC,0BAA0B,EAC9C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC;IAQ3C;;;;OAIG;IACG,YAAY,CAChB,OAAO,EAAE,UAAU,CAAC,6BAA6B,EACjD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC;CAO5C"}

package/esm/sdk/operations.js

@@ -30,17 +30,11 @@ export class Operations extends ClientSDK {
         return unwrapAsync(operationsListPlugins(this, request, options));
     }
     /**
-     * Register a custom operations plugin whose bundle ZIP has already been uploaded to S3 (see POST /plugins/upload-url). Replaces any existing plugin of the same name in that project. New custom plugins are enabled by default. Returns the cloud permission delta versus the previously enabled set.
+     * Register a version of a custom operations plugin whose bundle ZIP has already been uploaded to S3 (see POST /plugins/upload-url). Publishing changes no deployment: a release runs the version it declares in `operations()`.
      */
     async publishPlugin(project, publishOperationsPluginRequest, options) {
         return unwrapAsync(operationsPublishPlugin(this, project, publishOperationsPluginRequest, options));
     }
-    /**
-     * Replace the complete set of enabled built-in operations plugins for a project. Returns the cloud permission delta versus the previously enabled set.
-     */
-    async setBuiltinPlugins(project, setBuiltinOperationsPluginsRequest, options) {
-        return unwrapAsync(operationsSetBuiltinPlugins(this, project, setBuiltinOperationsPluginsRequest, options));
-    }
     /**
      * Get a presigned S3 URL to upload a custom operations plugin bundle ZIP. Upload the ZIP with a PUT to the returned url (sending the given Content-Type), then call POST /plugins to register it.
      */
@@ -48,25 +42,7 @@ export class Operations extends ClientSDK {
         return unwrapAsync(operationsCreateBundleUploadUrl(this, project, operationsBundleUploadUrlRequest, options));
     }
     /**
-     * Enable or disable an operations plugin (builtin or custom) for a project. Only enabled plugins are distributed to Operators and can be invoked. Returns the cloud permission delta versus the previously enabled set. With `dryRun`, validates the change and returns the delta without saving it.
-     */
-    async setPluginEnabled(request, options) {
-        return unwrapAsync(operationsSetPluginEnabled(this, request, options));
-    }
-    /**
-     * Get a project's per-command approval policy. Mirrors what the operator enforces: `plugin/operation` / `plugin/*` / `*` patterns → auto | manual.
-     */
-    async getPolicy(request, options) {
-        return unwrapAsync(operationsGetPolicy(this, request, options));
-    }
-    /**
-     * Replace a project's per-command approval policy (full rule set). Patterns are `plugin/operation`, `plugin/*`, or `*`; each maps to auto | manual.
-     */
-    async updatePolicy(project, updateOperationsPolicyRequest, options) {
-        return unwrapAsync(operationsUpdatePolicy(this, project, updateOperationsPolicyRequest, options));
-    }
-    /**
-     * Invoke a plugin operation against a deployment. Honors the project's per-command approval policy.
+     * Invoke a plugin operation against a deployment. Honors the approval rules the deployment's release declares in `operations()`.
      */
     async invoke(project, invokeOperationRequest, options) {
         return unwrapAsync(operationsInvoke(this, project, invokeOperationRequest, options));
@@ -137,5 +113,37 @@ export class Operations extends ClientSDK {
     async getAccessRequest(request, options) {
         return unwrapAsync(operationsGetAccessRequest(this, request, options));
     }
+    /**
+     * Replace the complete set of enabled built-in operations plugins for a project. Returns the cloud permission delta versus the previously enabled set.
+     *
+     * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
+     */
+    async setBuiltinPlugins(request, options) {
+        return unwrapAsync(operationsSetBuiltinPlugins(this, request, options));
+    }
+    /**
+     * Enable or disable an operations plugin (builtin or custom) for a project. Only enabled plugins are distributed to Operators and can be invoked. Returns the cloud permission delta versus the previously enabled set. With `dryRun`, validates the change and returns the delta without saving it.
+     *
+     * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
+     */
+    async setPluginEnabled(request, options) {
+        return unwrapAsync(operationsSetPluginEnabled(this, request, options));
+    }
+    /**
+     * Get a project's per-command approval policy. Mirrors what the operator enforces: `plugin/operation` / `plugin/*` / `*` patterns → auto | manual.
+     *
+     * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
+     */
+    async getPolicy(request, options) {
+        return unwrapAsync(operationsGetPolicy(this, request, options));
+    }
+    /**
+     * Replace a project's per-command approval policy (full rule set). Patterns are `plugin/operation`, `plugin/*`, or `*`; each maps to auto | manual.
+     *
+     * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
+     */
+    async updatePolicy(request, options) {
+        return unwrapAsync(operationsUpdatePolicy(this, request, options));
+    }
 }
 //# sourceMappingURL=operations.js.map

package/esm/sdk/operations.js.map

@@ -1 +1 @@
-{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../src/sdk/operations.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAC9F,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACpG,OAAO,EAAE,qCAAqC,EAAE,MAAM,mDAAmD,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,OAAO,UAAW,SAAQ,SAAS;IACvC;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAgD,EAChD,OAAwB;QAExB,OAAO,WAAW,CAAC,qBAAqB,CACtC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAe,EACf,8BAEa,EACb,OAAwB;QAExB,OAAO,WAAW,CAAC,uBAAuB,CACxC,IAAI,EACJ,OAAO,EACP,8BAA8B,EAC9B,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAe,EACf,kCAEa,EACb,OAAwB;QAExB,OAAO,WAAW,CAAC,2BAA2B,CAC5C,IAAI,EACJ,OAAO,EACP,kCAAkC,EAClC,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,OAAe,EACf,gCAEa,EACb,OAAwB;QAExB,OAAO,WAAW,CAAC,+BAA+B,CAChD,IAAI,EACJ,OAAO,EACP,gCAAgC,EAChC,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAqD,EACrD,OAAwB;QAExB,OAAO,WAAW,CAAC,0BAA0B,CAC3C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA8C,EAC9C,OAAwB;QAExB,OAAO,WAAW,CAAC,mBAAmB,CACpC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAAe,EACf,6BAEa,EACb,OAAwB;QAExB,OAAO,WAAW,CAAC,sBAAsB,CACvC,IAAI,EACJ,OAAO,EACP,6BAA6B,EAC7B,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAe,EACf,sBAAkE,EAClE,OAAwB;QAExB,OAAO,WAAW,CAAC,gBAAgB,CACjC,IAAI,EACJ,OAAO,EACP,sBAAsB,EACtB,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAe,EACf,2BAEa,EACb,OAAwB;QAExB,OAAO,WAAW,CAAC,qBAAqB,CACtC,IAAI,EACJ,OAAO,EACP,2BAA2B,EAC3B,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAgD,EAChD,OAAwB;QAExB,OAAO,WAAW,CAAC,6BAA6B,CAC9C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAA6C,EAC7C,OAAwB;QAExB,OAAO,WAAW,CAAC,4BAA4B,CAC7C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAA6C,EAC7C,OAAwB;QAExB,OAAO,WAAW,CAAC,4BAA4B,CAC7C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,EAAU,EACV,WAAoE,EACpE,OAAwB;QAExB,OAAO,WAAW,CAAC,8BAA8B,CAC/C,IAAI,EACJ,EAAE,EACF,WAAW,EACX,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,EAAU,EACV,WAAiE,EACjE,OAAwB;QAExB,OAAO,WAAW,CAAC,2BAA2B,CAC5C,IAAI,EACJ,EAAE,EACF,WAAW,EACX,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,2BAA2B,CAC/B,OAAsD,EACtD,OAAwB;QAExB,OAAO,WAAW,CAAC,qCAAqC,CACtD,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAA4C,EAC5C,OAAwB;QAExB,OAAO,WAAW,CAAC,2BAA2B,CAC5C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,OAAmD,EACnD,OAAwB;QAExB,OAAO,WAAW,CAAC,kCAAkC,CACnD,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,EAAU,EACV,mBAA4D,EAC5D,OAAwB;QAExB,OAAO,WAAW,CAAC,6BAA6B,CAC9C,IAAI,EACJ,EAAE,EACF,mBAAmB,EACnB,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAA2C,EAC3C,OAAwB;QAExB,OAAO,WAAW,CAAC,0BAA0B,CAC3C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../src/sdk/operations.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAC9F,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACpG,OAAO,EAAE,qCAAqC,EAAE,MAAM,mDAAmD,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,OAAO,UAAW,SAAQ,SAAS;IACvC;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAgD,EAChD,OAAwB;QAExB,OAAO,WAAW,CAAC,qBAAqB,CACtC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAe,EACf,8BAEa,EACb,OAAwB;QAExB,OAAO,WAAW,CAAC,uBAAuB,CACxC,IAAI,EACJ,OAAO,EACP,8BAA8B,EAC9B,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,OAAe,EACf,gCAEa,EACb,OAAwB;QAExB,OAAO,WAAW,CAAC,+BAA+B,CAChD,IAAI,EACJ,OAAO,EACP,gCAAgC,EAChC,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAe,EACf,sBAAkE,EAClE,OAAwB;QAExB,OAAO,WAAW,CAAC,gBAAgB,CACjC,IAAI,EACJ,OAAO,EACP,sBAAsB,EACtB,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAe,EACf,2BAEa,EACb,OAAwB;QAExB,OAAO,WAAW,CAAC,qBAAqB,CACtC,IAAI,EACJ,OAAO,EACP,2BAA2B,EAC3B,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAgD,EAChD,OAAwB;QAExB,OAAO,WAAW,CAAC,6BAA6B,CAC9C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAA6C,EAC7C,OAAwB;QAExB,OAAO,WAAW,CAAC,4BAA4B,CAC7C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAA6C,EAC7C,OAAwB;QAExB,OAAO,WAAW,CAAC,4BAA4B,CAC7C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,EAAU,EACV,WAAoE,EACpE,OAAwB;QAExB,OAAO,WAAW,CAAC,8BAA8B,CAC/C,IAAI,EACJ,EAAE,EACF,WAAW,EACX,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,EAAU,EACV,WAAiE,EACjE,OAAwB;QAExB,OAAO,WAAW,CAAC,2BAA2B,CAC5C,IAAI,EACJ,EAAE,EACF,WAAW,EACX,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,2BAA2B,CAC/B,OAAsD,EACtD,OAAwB;QAExB,OAAO,WAAW,CAAC,qCAAqC,CACtD,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAA4C,EAC5C,OAAwB;QAExB,OAAO,WAAW,CAAC,2BAA2B,CAC5C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,OAAmD,EACnD,OAAwB;QAExB,OAAO,WAAW,CAAC,kCAAkC,CACnD,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,EAAU,EACV,mBAA4D,EAC5D,OAAwB;QAExB,OAAO,WAAW,CAAC,6BAA6B,CAC9C,IAAI,EACJ,EAAE,EACF,mBAAmB,EACnB,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAA2C,EAC3C,OAAwB;QAExB,OAAO,WAAW,CAAC,0BAA0B,CAC3C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAsD,EACtD,OAAwB;QAExB,OAAO,WAAW,CAAC,2BAA2B,CAC5C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAqD,EACrD,OAAwB;QAExB,OAAO,WAAW,CAAC,0BAA0B,CAC3C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CACb,OAA8C,EAC9C,OAAwB;QAExB,OAAO,WAAW,CAAC,mBAAmB,CACpC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAChB,OAAiD,EACjD,OAAwB;QAExB,OAAO,WAAW,CAAC,sBAAsB,CACvC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;CACF"}

package/esm/sdk/operatormanifests.d.ts

@@ -17,7 +17,7 @@ export declare class OperatorManifests extends ClientSDK {
      * Render a Remote Operator ECS Fargate CloudFormation installer
      *
      * @remarks
-     * Renders a credential-free CloudFormation artifact that reuses a customer-owned ECS cluster and network; creates retained EFS identity storage unless an existing filesystem and access point are supplied; owns a task role compiled from the project's enabled operations; and uses a generated local command to hand one-time setup material directly to same-account, same-Region Secrets Manager. Sensitive S3 and SQS wildcard declarations fail closed unless the request supplies exact resource ceilings.
+     * Renders a credential-free CloudFormation artifact that reuses a customer-owned ECS cluster and network; creates retained EFS identity storage unless an existing filesystem and access point are supplied; owns a task role compiled from every built-in operation plugin; and uses a generated local command to hand one-time setup material directly to same-account, same-Region Secrets Manager. Sensitive S3 and SQS wildcard declarations fail closed unless the request supplies exact resource ceilings.
      */
     renderOperatorEcsCloudFormation(request?: models.RenderOperatorEcsCloudFormationRequest | undefined, options?: RequestOptions): Promise<models.RenderOperatorEcsCloudFormationResponse>;
 }

package/esm/sdk/operatormanifests.js

@@ -30,7 +30,7 @@ export class OperatorManifests extends ClientSDK {
      * Render a Remote Operator ECS Fargate CloudFormation installer
      *
      * @remarks
-     * Renders a credential-free CloudFormation artifact that reuses a customer-owned ECS cluster and network; creates retained EFS identity storage unless an existing filesystem and access point are supplied; owns a task role compiled from the project's enabled operations; and uses a generated local command to hand one-time setup material directly to same-account, same-Region Secrets Manager. Sensitive S3 and SQS wildcard declarations fail closed unless the request supplies exact resource ceilings.
+     * Renders a credential-free CloudFormation artifact that reuses a customer-owned ECS cluster and network; creates retained EFS identity storage unless an existing filesystem and access point are supplied; owns a task role compiled from every built-in operation plugin; and uses a generated local command to hand one-time setup material directly to same-account, same-Region Secrets Manager. Sensitive S3 and SQS wildcard declarations fail closed unless the request supplies exact resource ceilings.
      */
     async renderOperatorEcsCloudFormation(request, options) {
         return unwrapAsync(operatorManifestsRenderOperatorEcsCloudFormation(this, request, options));

package/esm/sdk/projects.d.ts

@@ -91,7 +91,7 @@ export declare class Projects extends ClientSDK {
      */
     configureRegistry(idOrName: string, requestBody?: operations.ConfigureProjectRegistryRequestBody | undefined, options?: RequestOptions): Promise<models.CapabilityMaterialization>;
     /**
-     * Enable a customer-owned sandbox a hosted caller can drive through Remote Bindings. Without a custom image it publishes to every cloud on Alien's default image, which the project then follows. A custom image publishes to AWS; a public one with a linux/amd64 variant also publishes to Azure, and to GCP once Alien has built its GCP image.
+     * Enable a customer-owned sandbox a hosted caller can drive through Remote Bindings. Without a custom image it publishes to every cloud on Alien's default image, which the project then follows. A custom image publishes to AWS; a public one with a linux/amd64 variant also publishes to Azure, and to GCP once Alien has built its GCP image; a private one publishes to Azure from its `azureImage` and to GCP from its `gcpImage`.
      */
     configureRemoteSandbox(idOrName: string, configureRemoteSandboxRequest?: models.ConfigureRemoteSandboxRequest | undefined, options?: RequestOptions): Promise<models.CapabilityMaterialization>;
     /**
@@ -114,7 +114,7 @@ export declare class Projects extends ClientSDK {
      * Record that a Remote Operator installation's setup was re-applied
      *
      * @remarks
-     * Records the permissions compiled from the currently enabled operations as the installation's installed permissions. Call it after re-applying the installation's Helm release, manifest, cloud access, or CloudFormation stack.
+     * Records the permissions compiled from every built-in operation plugin as the installation's installed permissions. Call it after re-applying the installation's Helm release, manifest, cloud access, or CloudFormation stack.
      */
     acceptRemoteOperatorPermissions(request: operations.AcceptRemoteOperatorPermissionsRequest, options?: RequestOptions): Promise<operations.AcceptRemoteOperatorPermissionsResponse>;
     getAiUsage(request: operations.GetProjectAiUsageRequest, options?: RequestOptions): Promise<operations.GetProjectAiUsageResponse>;

package/esm/sdk/projects.js

@@ -168,7 +168,7 @@ export class Projects extends ClientSDK {
         return unwrapAsync(projectsConfigureRegistry(this, idOrName, requestBody, options));
     }
     /**
-     * Enable a customer-owned sandbox a hosted caller can drive through Remote Bindings. Without a custom image it publishes to every cloud on Alien's default image, which the project then follows. A custom image publishes to AWS; a public one with a linux/amd64 variant also publishes to Azure, and to GCP once Alien has built its GCP image.
+     * Enable a customer-owned sandbox a hosted caller can drive through Remote Bindings. Without a custom image it publishes to every cloud on Alien's default image, which the project then follows. A custom image publishes to AWS; a public one with a linux/amd64 variant also publishes to Azure, and to GCP once Alien has built its GCP image; a private one publishes to Azure from its `azureImage` and to GCP from its `gcpImage`.
      */
     async configureRemoteSandbox(idOrName, configureRemoteSandboxRequest, options) {
         return unwrapAsync(projectsConfigureRemoteSandbox(this, idOrName, configureRemoteSandboxRequest, options));
@@ -201,7 +201,7 @@ export class Projects extends ClientSDK {
      * Record that a Remote Operator installation's setup was re-applied
      *
      * @remarks
-     * Records the permissions compiled from the currently enabled operations as the installation's installed permissions. Call it after re-applying the installation's Helm release, manifest, cloud access, or CloudFormation stack.
+     * Records the permissions compiled from every built-in operation plugin as the installation's installed permissions. Call it after re-applying the installation's Helm release, manifest, cloud access, or CloudFormation stack.
      */
     async acceptRemoteOperatorPermissions(request, options) {
         return unwrapAsync(projectsAcceptRemoteOperatorPermissions(this, request, options));

package/jsr.json

@@ -2,7 +2,7 @@
 
 {
   "name": "@alienplatform/platform-api",
-  "version": "3.3.31",
+  "version": "3.3.33",
   "exports": {
     ".": "./src/index.ts",    
     "./models/errors": "./src/models/errors/index.ts",    

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@alienplatform/platform-api",
-  "version": "3.3.31",
+  "version": "3.3.33",
   "author": "Alien Software, Inc. <hi@alien.dev>",
   "homepage": "https://alien.dev",
   "license": "FSL-1.1-Apache-2.0",
   "repository": {
+    "url": "https://github.com/alienplatform/alien.git",
     "directory": "client-sdks/platform/typescript",
-    "type": "git",
-    "url": "https://github.com/alienplatform/alien.git"
+    "type": "git"
   },
   "type": "module",
   "main": "./esm/index.js",

package/src/funcs/apiKeysRevoke.ts

@@ -167,7 +167,7 @@ async function $do(
     | SDKValidationError
   >(
     M.nil(204, z.void()),
-    M.jsonErr(404, errors.APIError$inboundSchema),
+    M.jsonErr([403, 404], errors.APIError$inboundSchema),
     M.jsonErr(500, errors.APIError$inboundSchema),
     M.fail("4XX"),
     M.fail("5XX"),

package/src/funcs/deploymentsImport.ts

@@ -164,7 +164,7 @@ async function $do(
     | SDKValidationError
   >(
     M.json([200, 201], models.Deployment$inboundSchema),
-    M.jsonErr(409, errors.APIError$inboundSchema),
+    M.jsonErr([400, 409], errors.APIError$inboundSchema),
     M.jsonErr(500, errors.APIError$inboundSchema),
     M.fail("4XX"),
     M.fail("5XX"),

package/src/funcs/deploymentsUpdateCompute.ts

@@ -28,7 +28,7 @@ import { APICall, APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 
 /**
- * Update deployment-time compute pool selections and request reconciliation by the hosted manager.
+ * Update deployment-time compute selections or quota warning overrides and request reconciliation by the hosted manager.
  */
 export function deploymentsUpdateCompute(
   client: AlienCore,

package/src/funcs/operationsGetPolicy.ts

@@ -29,6 +29,8 @@ import { Result } from "../types/fp.js";
 
 /**
  * Get a project's per-command approval policy. Mirrors what the operator enforces: `plugin/operation` / `plugin/*` / `*` patterns → auto | manual.
+ *
+ * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
  */
 export function operationsGetPolicy(
   client: AlienCore,

package/src/funcs/operationsInvoke.ts

@@ -28,7 +28,7 @@ import { APICall, APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 
 /**
- * Invoke a plugin operation against a deployment. Honors the project's per-command approval policy.
+ * Invoke a plugin operation against a deployment. Honors the approval rules the deployment's release declares in `operations()`.
  */
 export function operationsInvoke(
   client: AlienCore,

package/src/funcs/operationsListPlugins.ts

@@ -91,6 +91,7 @@ async function $do(
   const path = pathToFunc("/v1/operations/plugins")();
 
   const query = encodeFormQuery({
+    "deployment": payload.deployment,
     "project": payload.project,
     "workspace": client._options.workspace,
   });

package/src/funcs/operationsPublishPlugin.ts

@@ -28,7 +28,7 @@ import { APICall, APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 
 /**
- * Register a custom operations plugin whose bundle ZIP has already been uploaded to S3 (see POST /plugins/upload-url). Replaces any existing plugin of the same name in that project. New custom plugins are enabled by default. Returns the cloud permission delta versus the previously enabled set.
+ * Register a version of a custom operations plugin whose bundle ZIP has already been uploaded to S3 (see POST /plugins/upload-url). Publishing changes no deployment: a release runs the version it declares in `operations()`.
  */
 export function operationsPublishPlugin(
   client: AlienCore,

package/src/funcs/operationsQueueAccessRequest.ts

@@ -166,7 +166,7 @@ async function $do(
     | SDKValidationError
   >(
     M.json(200, operations.QueueAccessRequestResponse$inboundSchema),
-    M.jsonErr([400, 404, 409], errors.APIError$inboundSchema),
+    M.jsonErr([400, 403, 404, 409], errors.APIError$inboundSchema),
     M.fail("4XX"),
     M.fail("5XX"),
   )(response, req, { extraFields: responseFields });

package/src/funcs/operationsSetBuiltinPlugins.ts

@@ -29,13 +29,12 @@ import { Result } from "../types/fp.js";
 
 /**
  * Replace the complete set of enabled built-in operations plugins for a project. Returns the cloud permission delta versus the previously enabled set.
+ *
+ * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
  */
 export function operationsSetBuiltinPlugins(
   client: AlienCore,
-  project: string,
-  setBuiltinOperationsPluginsRequest?:
-    | models.SetBuiltinOperationsPluginsRequest
-    | undefined,
+  request: operations.SetBuiltinOperationsPluginsRequest,
   options?: RequestOptions,
 ): APIPromise<
   Result<
@@ -53,18 +52,14 @@ export function operationsSetBuiltinPlugins(
 > {
   return new APIPromise($do(
     client,
-    project,
-    setBuiltinOperationsPluginsRequest,
+    request,
     options,
   ));
 }
 
 async function $do(
   client: AlienCore,
-  project: string,
-  setBuiltinOperationsPluginsRequest?:
-    | models.SetBuiltinOperationsPluginsRequest
-    | undefined,
+  request: operations.SetBuiltinOperationsPluginsRequest,
   options?: RequestOptions,
 ): Promise<
   [
@@ -83,13 +78,8 @@ async function $do(
     APICall,
   ]
 > {
-  const input: operations.SetBuiltinOperationsPluginsRequest = {
-    project: project,
-    setBuiltinOperationsPluginsRequest: setBuiltinOperationsPluginsRequest,
-  };
-
   const parsed = safeParse(
-    input,
+    request,
     (value) =>
       operations.SetBuiltinOperationsPluginsRequest$outboundSchema.parse(value),
     "Input validation failed",

package/src/funcs/operationsSetPluginEnabled.ts

@@ -29,6 +29,8 @@ import { Result } from "../types/fp.js";
 
 /**
  * Enable or disable an operations plugin (builtin or custom) for a project. Only enabled plugins are distributed to Operators and can be invoked. Returns the cloud permission delta versus the previously enabled set. With `dryRun`, validates the change and returns the delta without saving it.
+ *
+ * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
  */
 export function operationsSetPluginEnabled(
   client: AlienCore,

package/src/funcs/operationsUpdatePolicy.ts

@@ -29,13 +29,12 @@ import { Result } from "../types/fp.js";
 
 /**
  * Replace a project's per-command approval policy (full rule set). Patterns are `plugin/operation`, `plugin/*`, or `*`; each maps to auto | manual.
+ *
+ * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
  */
 export function operationsUpdatePolicy(
   client: AlienCore,
-  project: string,
-  updateOperationsPolicyRequest?:
-    | models.UpdateOperationsPolicyRequest
-    | undefined,
+  request: operations.UpdateOperationsPolicyRequest,
   options?: RequestOptions,
 ): APIPromise<
   Result<
@@ -53,18 +52,14 @@ export function operationsUpdatePolicy(
 > {
   return new APIPromise($do(
     client,
-    project,
-    updateOperationsPolicyRequest,
+    request,
     options,
   ));
 }
 
 async function $do(
   client: AlienCore,
-  project: string,
-  updateOperationsPolicyRequest?:
-    | models.UpdateOperationsPolicyRequest
-    | undefined,
+  request: operations.UpdateOperationsPolicyRequest,
   options?: RequestOptions,
 ): Promise<
   [
@@ -83,13 +78,8 @@ async function $do(
     APICall,
   ]
 > {
-  const input: operations.UpdateOperationsPolicyRequest = {
-    project: project,
-    updateOperationsPolicyRequest: updateOperationsPolicyRequest,
-  };
-
   const parsed = safeParse(
-    input,
+    request,
     (value) =>
       operations.UpdateOperationsPolicyRequest$outboundSchema.parse(value),
     "Input validation failed",

package/src/funcs/operatorManifestsRenderOperatorEcsCloudFormation.ts

@@ -30,7 +30,7 @@ import { Result } from "../types/fp.js";
  * Render a Remote Operator ECS Fargate CloudFormation installer
  *
  * @remarks
- * Renders a credential-free CloudFormation artifact that reuses a customer-owned ECS cluster and network; creates retained EFS identity storage unless an existing filesystem and access point are supplied; owns a task role compiled from the project's enabled operations; and uses a generated local command to hand one-time setup material directly to same-account, same-Region Secrets Manager. Sensitive S3 and SQS wildcard declarations fail closed unless the request supplies exact resource ceilings.
+ * Renders a credential-free CloudFormation artifact that reuses a customer-owned ECS cluster and network; creates retained EFS identity storage unless an existing filesystem and access point are supplied; owns a task role compiled from every built-in operation plugin; and uses a generated local command to hand one-time setup material directly to same-account, same-Region Secrets Manager. Sensitive S3 and SQS wildcard declarations fail closed unless the request supplies exact resource ceilings.
  */
 export function operatorManifestsRenderOperatorEcsCloudFormation(
   client: AlienCore,

package/src/funcs/projectsAcceptRemoteOperatorPermissions.ts

@@ -30,7 +30,7 @@ import { Result } from "../types/fp.js";
  * Record that a Remote Operator installation's setup was re-applied
  *
  * @remarks
- * Records the permissions compiled from the currently enabled operations as the installation's installed permissions. Call it after re-applying the installation's Helm release, manifest, cloud access, or CloudFormation stack.
+ * Records the permissions compiled from every built-in operation plugin as the installation's installed permissions. Call it after re-applying the installation's Helm release, manifest, cloud access, or CloudFormation stack.
  */
 export function projectsAcceptRemoteOperatorPermissions(
   client: AlienCore,

package/src/funcs/projectsConfigureRemoteSandbox.ts

@@ -28,7 +28,7 @@ import { APICall, APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 
 /**
- * Enable a customer-owned sandbox a hosted caller can drive through Remote Bindings. Without a custom image it publishes to every cloud on Alien's default image, which the project then follows. A custom image publishes to AWS; a public one with a linux/amd64 variant also publishes to Azure, and to GCP once Alien has built its GCP image.
+ * Enable a customer-owned sandbox a hosted caller can drive through Remote Bindings. Without a custom image it publishes to every cloud on Alien's default image, which the project then follows. A custom image publishes to AWS; a public one with a linux/amd64 variant also publishes to Azure, and to GCP once Alien has built its GCP image; a private one publishes to Azure from its `azureImage` and to GCP from its `gcpImage`.
  */
 export function projectsConfigureRemoteSandbox(
   client: AlienCore,

package/src/lib/config.ts

@@ -66,8 +66,8 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 export const SDK_METADATA = {
   language: "typescript",
   openapiDocVersion: "1.0.0",
-  sdkVersion: "3.3.31",
+  sdkVersion: "3.3.33",
   genVersion: "2.941.0",
   userAgent:
-    "speakeasy-sdk/typescript 3.3.31 2.941.0 1.0.0 @alienplatform/platform-api",
+    "speakeasy-sdk/typescript 3.3.33 2.941.0 1.0.0 @alienplatform/platform-api",
 } as const;

package/src/models/configureremotesandboxrequest.ts

@@ -8,6 +8,8 @@ export type ConfigureRemoteSandboxRequest = {
   customImage?: string | undefined;
   maxLifetimeSeconds?: number | undefined;
   azureIdleSuspendSeconds?: number | undefined;
+  azureImage?: string | undefined;
+  gcpImage?: string | undefined;
 };
 
 /** @internal */
@@ -15,6 +17,8 @@ export type ConfigureRemoteSandboxRequest$Outbound = {
   customImage?: string | undefined;
   maxLifetimeSeconds?: number | undefined;
   azureIdleSuspendSeconds?: number | undefined;
+  azureImage?: string | undefined;
+  gcpImage?: string | undefined;
 };
 
 /** @internal */
@@ -25,6 +29,8 @@ export const ConfigureRemoteSandboxRequest$outboundSchema: z.ZodType<
   customImage: z.string().optional(),
   maxLifetimeSeconds: z.int().optional(),
   azureIdleSuspendSeconds: z.int().optional(),
+  azureImage: z.string().optional(),
+  gcpImage: z.string().optional(),
 });
 
 export function configureRemoteSandboxRequestToJSON(