@alienplatform/platform-api 3.3.32 → 3.3.34

package/src/models/targetdeploymentvolumerestore.ts

@@ -0,0 +1,4671 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { remap as remap$ } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { ClosedEnum } from "../types/enums.js";
+import { Result as SafeParseResult } from "../types/fp.js";
+import { SDKValidationError } from "./errors/sdkvalidationerror.js";
+import {
+  ExternalBindingUnion,
+  ExternalBindingUnion$inboundSchema,
+} from "./externalbindingunion.js";
+
+/**
+ * Represents the target cloud platform.
+ */
+export const TargetDeploymentBasePlatformEnum = {
+  Aws: "aws",
+  Gcp: "gcp",
+  Azure: "azure",
+  Kubernetes: "kubernetes",
+  Machines: "machines",
+  Local: "local",
+  Test: "test",
+} as const;
+/**
+ * Represents the target cloud platform.
+ */
+export type TargetDeploymentBasePlatformEnum = ClosedEnum<
+  typeof TargetDeploymentBasePlatformEnum
+>;
+
+export type TargetDeploymentBasePlatformUnion =
+  | TargetDeploymentBasePlatformEnum
+  | string;
+
+/**
+ * Configuration for a single container worker cluster.
+ *
+ * @remarks
+ *
+ * Contains the cluster ID and management token needed to interact with
+ * the managed container control plane API for container operations.
+ */
+export type TargetDeploymentClusters = {
+  /**
+   * Cluster ID (deterministic: workspace/project/deployment/resourceid)
+   */
+  clusterId: string;
+  /**
+   * Management token for API access (hm_...)
+   *
+   * @remarks
+   * Used by alien-deployment controllers to create/update containers
+   */
+  managementToken: string;
+};
+
+/**
+ * AWS Horizon machine image catalog.
+ */
+export type TargetDeploymentHorizonMachineImageAws = {
+  /**
+   * AMI IDs by architecture, then AWS region.
+   */
+  amis: { [k: string]: { [k: string]: string } };
+};
+
+export type TargetDeploymentHorizonMachineImageAwsUnion =
+  | TargetDeploymentHorizonMachineImageAws
+  | string;
+
+/**
+ * Azure Horizon machine image entry.
+ */
+export type TargetDeploymentAzureImages = {
+  /**
+   * Azure Compute Gallery image version ID.
+   */
+  imageVersionId: string;
+};
+
+/**
+ * Azure Horizon machine image catalog.
+ */
+export type HorizonMachineImageAzureConfig = {
+  /**
+   * Images by architecture.
+   */
+  images: { [k: string]: TargetDeploymentAzureImages };
+};
+
+export type HorizonMachineImageConfigAzureUnion =
+  | HorizonMachineImageAzureConfig
+  | string;
+
+/**
+ * Base image metadata for the Horizon machine image.
+ */
+export type TargetDeploymentBaseImage = {
+  /**
+   * Base OS image name.
+   */
+  name: string;
+  /**
+   * Base OS image version or channel.
+   */
+  version: string;
+};
+
+/**
+ * GCP Horizon machine image entry.
+ */
+export type TargetDeploymentGcpImages = {
+  /**
+   * Source image self link or image-family URL.
+   */
+  sourceImage: string;
+};
+
+/**
+ * GCP Horizon machine image catalog.
+ */
+export type HorizonMachineImageGcpConfig = {
+  /**
+   * Images by architecture.
+   */
+  images: { [k: string]: TargetDeploymentGcpImages };
+};
+
+export type HorizonMachineImageConfigGcpUnion =
+  | HorizonMachineImageGcpConfig
+  | string;
+
+/**
+ * Download artifact for one horizond release platform.
+ */
+export type TargetDeploymentHorizondArtifacts = {
+  /**
+   * Runtime isolation capability generation of the immutable artifact, not live readiness.
+   */
+  runtimeIsolationGeneration?: number | undefined;
+  /**
+   * SHA-256 digest for the artifact payload.
+   */
+  sha256: string;
+  /**
+   * HTTPS URL for the artifact.
+   */
+  url: string;
+};
+
+/**
+ * Horizon machine image catalog.
+ *
+ * @remarks
+ *
+ * Platform resolves concrete provider images from this catalog during rollout.
+ */
+export type TargetDeploymentHorizonMachineImage = {
+  aws?: TargetDeploymentHorizonMachineImageAws | string | null | undefined;
+  azure?: HorizonMachineImageAzureConfig | string | null | undefined;
+  /**
+   * Base image metadata for the Horizon machine image.
+   */
+  baseImage: TargetDeploymentBaseImage;
+  /**
+   * Logical image channel, such as prod, staging, or canary.
+   */
+  channel: string;
+  /**
+   * Image manifest creation timestamp.
+   */
+  createdAt: string;
+  gcp?: HorizonMachineImageGcpConfig | string | null | undefined;
+  /**
+   * Git commit SHA used to build the image.
+   */
+  gitSha: string;
+  /**
+   * Per-architecture horizond artifacts by release-platform key.
+   */
+  horizondArtifacts: { [k: string]: TargetDeploymentHorizondArtifacts };
+  /**
+   * horizond daemon version baked into the image.
+   */
+  horizondVersion: string;
+  /**
+   * Published immutable machine image version.
+   */
+  machineImageVersion: string;
+  /**
+   * Runtime isolation capability generation of the immutable artifact, not live readiness.
+   */
+  runtimeIsolationGeneration?: number | undefined;
+};
+
+export type TargetDeploymentHorizonMachineImageUnion =
+  | TargetDeploymentHorizonMachineImage
+  | string;
+
+export const TargetDeploymentComputeBackendType = {
+  Horizon: "horizon",
+} as const;
+export type TargetDeploymentComputeBackendType = ClosedEnum<
+  typeof TargetDeploymentComputeBackendType
+>;
+
+/**
+ * Compute backend for Container and Worker resources.
+ *
+ * @remarks
+ *
+ * Determines how compute workloads are orchestrated on cloud platforms.
+ * When None, the platform default is used for cloud platforms.
+ */
+export type TargetDeploymentComputeBackendHorizon = {
+  /**
+   * Cluster configurations (one per ComputeCluster resource)
+   *
+   * @remarks
+   * Key: ComputeCluster resource ID from stack
+   * Value: Cluster ID and management token for that cluster
+   */
+  clusters: { [k: string]: TargetDeploymentClusters };
+  horizonMachineImage?:
+    | TargetDeploymentHorizonMachineImage
+    | string
+    | null
+    | undefined;
+  /**
+   * Horizon control-plane API base URL.
+   */
+  url: string;
+  type: TargetDeploymentComputeBackendType;
+};
+
+export type TargetDeploymentComputeBackendUnion =
+  | TargetDeploymentComputeBackendHorizon
+  | string;
+
+/**
+ * Certificate status in the certificate lifecycle
+ */
+export const TargetDeploymentAliasCertificateStatus = {
+  Pending: "pending",
+  Issued: "issued",
+  Renewing: "renewing",
+  RenewalFailed: "renewal-failed",
+  Failed: "failed",
+  Deleting: "deleting",
+} as const;
+/**
+ * Certificate status in the certificate lifecycle
+ */
+export type TargetDeploymentAliasCertificateStatus = ClosedEnum<
+  typeof TargetDeploymentAliasCertificateStatus
+>;
+
+/**
+ * DNS record status in the DNS lifecycle
+ */
+export const TargetDeploymentAliasDnsStatus = {
+  Pending: "pending",
+  Active: "active",
+  Updating: "updating",
+  Deleting: "deleting",
+  Failed: "failed",
+} as const;
+/**
+ * DNS record status in the DNS lifecycle
+ */
+export type TargetDeploymentAliasDnsStatus = ClosedEnum<
+  typeof TargetDeploymentAliasDnsStatus
+>;
+
+/**
+ * Certificate and DNS metadata for a managed hostname.
+ *
+ * @remarks
+ *
+ * Includes decrypted certificate data for issued certificates.
+ * Private keys are deployment-scoped secrets (like environment variables).
+ */
+export type TargetDeploymentAlias = {
+  /**
+   * Full PEM certificate chain (only present if status is "issued").
+   */
+  certificateChain?: string | null | undefined;
+  /**
+   * Certificate ID (for tracking/logging).
+   */
+  certificateId: string;
+  /**
+   * Certificate status in the certificate lifecycle
+   */
+  certificateStatus: TargetDeploymentAliasCertificateStatus;
+  /**
+   * Last DNS error message. Present when DNS previously failed, even if status
+   *
+   * @remarks
+   * was reset to pending for retry. Used to surface actionable error context
+   * in WaitingForDns failure messages.
+   */
+  dnsError?: string | null | undefined;
+  /**
+   * DNS record status in the DNS lifecycle
+   */
+  dnsStatus: TargetDeploymentAliasDnsStatus;
+  /**
+   * Fully qualified domain name.
+   */
+  fqdn: string;
+  /**
+   * ISO 8601 timestamp when certificate was issued (for renewal detection).
+   */
+  issuedAt?: string | null | undefined;
+  /**
+   * Decrypted private key (only present if status is "issued").
+   */
+  privateKey?: string | null | undefined;
+};
+
+/**
+ * Certificate status in the certificate lifecycle
+ */
+export const TargetDeploymentCertificateStatus = {
+  Pending: "pending",
+  Issued: "issued",
+  Renewing: "renewing",
+  RenewalFailed: "renewal-failed",
+  Failed: "failed",
+  Deleting: "deleting",
+} as const;
+/**
+ * Certificate status in the certificate lifecycle
+ */
+export type TargetDeploymentCertificateStatus = ClosedEnum<
+  typeof TargetDeploymentCertificateStatus
+>;
+
+/**
+ * DNS record status in the DNS lifecycle
+ */
+export const TargetDeploymentDnsStatus = {
+  Pending: "pending",
+  Active: "active",
+  Updating: "updating",
+  Deleting: "deleting",
+  Failed: "failed",
+} as const;
+/**
+ * DNS record status in the DNS lifecycle
+ */
+export type TargetDeploymentDnsStatus = ClosedEnum<
+  typeof TargetDeploymentDnsStatus
+>;
+
+/**
+ * Certificate status in the certificate lifecycle
+ */
+export const TargetDeploymentEndpointsCertificateStatus = {
+  Pending: "pending",
+  Issued: "issued",
+  Renewing: "renewing",
+  RenewalFailed: "renewal-failed",
+  Failed: "failed",
+  Deleting: "deleting",
+} as const;
+/**
+ * Certificate status in the certificate lifecycle
+ */
+export type TargetDeploymentEndpointsCertificateStatus = ClosedEnum<
+  typeof TargetDeploymentEndpointsCertificateStatus
+>;
+
+/**
+ * DNS record status in the DNS lifecycle
+ */
+export const TargetDeploymentEndpointsDnsStatus = {
+  Pending: "pending",
+  Active: "active",
+  Updating: "updating",
+  Deleting: "deleting",
+  Failed: "failed",
+} as const;
+/**
+ * DNS record status in the DNS lifecycle
+ */
+export type TargetDeploymentEndpointsDnsStatus = ClosedEnum<
+  typeof TargetDeploymentEndpointsDnsStatus
+>;
+
+/**
+ * Certificate and DNS metadata for a managed hostname.
+ *
+ * @remarks
+ *
+ * Includes decrypted certificate data for issued certificates.
+ * Private keys are deployment-scoped secrets (like environment variables).
+ */
+export type TargetDeploymentEndpoints = {
+  /**
+   * Full PEM certificate chain (only present if status is "issued").
+   */
+  certificateChain?: string | null | undefined;
+  /**
+   * Certificate ID (for tracking/logging).
+   */
+  certificateId: string;
+  /**
+   * Certificate status in the certificate lifecycle
+   */
+  certificateStatus: TargetDeploymentEndpointsCertificateStatus;
+  /**
+   * Last DNS error message. Present when DNS previously failed, even if status
+   *
+   * @remarks
+   * was reset to pending for retry. Used to surface actionable error context
+   * in WaitingForDns failure messages.
+   */
+  dnsError?: string | null | undefined;
+  /**
+   * DNS record status in the DNS lifecycle
+   */
+  dnsStatus: TargetDeploymentEndpointsDnsStatus;
+  /**
+   * Fully qualified domain name.
+   */
+  fqdn: string;
+  /**
+   * ISO 8601 timestamp when certificate was issued (for renewal detection).
+   */
+  issuedAt?: string | null | undefined;
+  /**
+   * Decrypted private key (only present if status is "issued").
+   */
+  privateKey?: string | null | undefined;
+};
+
+/**
+ * Certificate and DNS metadata for a public resource.
+ *
+ * @remarks
+ *
+ * The direct fields describe the primary endpoint hostname. `endpoints`
+ * contains endpoint-scoped metadata keyed by endpoint name. `aliases` contains
+ * additional managed hostnames that route directly to the primary endpoint.
+ */
+export type ConfigResources = {
+  /**
+   * Additional managed hostnames for the resource.
+   */
+  aliases?: Array<TargetDeploymentAlias> | undefined;
+  /**
+   * Full PEM certificate chain (only present if status is "issued").
+   */
+  certificateChain?: string | null | undefined;
+  /**
+   * Certificate ID (for tracking/logging).
+   */
+  certificateId: string;
+  /**
+   * Certificate status in the certificate lifecycle
+   */
+  certificateStatus: TargetDeploymentCertificateStatus;
+  /**
+   * Last DNS error message.
+   */
+  dnsError?: string | null | undefined;
+  /**
+   * DNS record status in the DNS lifecycle
+   */
+  dnsStatus: TargetDeploymentDnsStatus;
+  /**
+   * Endpoint-scoped metadata keyed by endpoint name.
+   */
+  endpoints?: { [k: string]: TargetDeploymentEndpoints } | undefined;
+  /**
+   * Fully qualified domain name.
+   */
+  fqdn: string;
+  /**
+   * ISO 8601 timestamp when certificate was issued (for renewal detection).
+   */
+  issuedAt?: string | null | undefined;
+  /**
+   * Decrypted private key (only present if status is "issued").
+   */
+  privateKey?: string | null | undefined;
+};
+
+/**
+ * Domain metadata for auto-managed public resources (no private keys).
+ */
+export type TargetDeploymentDomainMetadata = {
+  /**
+   * Base domain for auto-generated domains (e.g., "vpc.direct").
+   */
+  baseDomain: string;
+  /**
+   * Hosted zone ID for DNS records.
+   */
+  hostedZoneId: string;
+  /**
+   * Deployment public subdomain (e.g., "k8f2j3").
+   */
+  publicSubdomain: string;
+  /**
+   * Metadata per resource ID.
+   */
+  resources: { [k: string]: ConfigResources };
+};
+
+export type TargetDeploymentDomainMetadataUnion =
+  | TargetDeploymentDomainMetadata
+  | string;
+
+/**
+ * Type of environment variable
+ */
+export const TargetDeploymentEnvironmentVariablesType = {
+  Plain: "plain",
+  Secret: "secret",
+} as const;
+/**
+ * Type of environment variable
+ */
+export type TargetDeploymentEnvironmentVariablesType = ClosedEnum<
+  typeof TargetDeploymentEnvironmentVariablesType
+>;
+
+/**
+ * Environment variable for deployment
+ */
+export type TargetDeploymentVariable = {
+  /**
+   * Variable name
+   */
+  name: string;
+  /**
+   * Target resource patterns (null = all resources, Some = wildcard patterns)
+   */
+  targetResources?: Array<string> | null | undefined;
+  /**
+   * Type of environment variable
+   */
+  type: TargetDeploymentEnvironmentVariablesType;
+  /**
+   * Variable value (decrypted - deployment has access to decryption keys)
+   */
+  value: string;
+};
+
+/**
+ * Snapshot of environment variables at a point in time
+ */
+export type TargetDeploymentEnvironmentVariables = {
+  /**
+   * ISO 8601 timestamp when snapshot was created
+   */
+  createdAt: string;
+  /**
+   * Deterministic hash of all variables (for change detection)
+   */
+  hash: string;
+  /**
+   * Environment variables in the snapshot
+   */
+  variables: Array<TargetDeploymentVariable>;
+};
+
+export const ConfigPlatformKubernetes = {
+  Kubernetes: "kubernetes",
+} as const;
+export type ConfigPlatformKubernetes = ClosedEnum<
+  typeof ConfigPlatformKubernetes
+>;
+
+export type TargetDeploymentManagementConfigKubernetes = {
+  platform: ConfigPlatformKubernetes;
+};
+
+export const ConfigPlatformAzure = {
+  Azure: "azure",
+} as const;
+export type ConfigPlatformAzure = ClosedEnum<typeof ConfigPlatformAzure>;
+
+/**
+ * Azure management configuration extracted from stack settings
+ */
+export type TargetDeploymentManagementConfigAzure = {
+  /**
+   * The managing Azure Tenant ID for cross-tenant access
+   */
+  managingTenantId: string;
+  /**
+   * OIDC issuer URL trusted by the target-side managed identity.
+   */
+  oidcIssuer: string;
+  /**
+   * OIDC subject claim trusted by the target-side managed identity.
+   */
+  oidcSubject: string;
+  platform: ConfigPlatformAzure;
+};
+
+export const ConfigPlatformGcp = {
+  Gcp: "gcp",
+} as const;
+export type ConfigPlatformGcp = ClosedEnum<typeof ConfigPlatformGcp>;
+
+/**
+ * GCP management configuration extracted from stack settings
+ */
+export type TargetDeploymentManagementConfigGcp = {
+  /**
+   * Service account email for management roles
+   */
+  serviceAccountEmail: string;
+  platform: ConfigPlatformGcp;
+};
+
+export const ConfigPlatformAws = {
+  Aws: "aws",
+} as const;
+export type ConfigPlatformAws = ClosedEnum<typeof ConfigPlatformAws>;
+
+/**
+ * AWS management configuration extracted from stack settings
+ */
+export type TargetDeploymentManagementConfigAws = {
+  /**
+   * The managing AWS IAM role ARN that can assume cross-account roles
+   */
+  managingRoleArn: string;
+  platform: ConfigPlatformAws;
+};
+
+export type TargetDeploymentManagementConfigUnion =
+  | TargetDeploymentManagementConfigAzure
+  | TargetDeploymentManagementConfigAws
+  | TargetDeploymentManagementConfigGcp
+  | TargetDeploymentManagementConfigKubernetes
+  | string;
+
+/**
+ * OTLP log export configuration for a deployment.
+ *
+ * @remarks
+ *
+ * When set, injected compute runtimes export captured application logs
+ * through the given endpoint via OTLP/HTTP; which resources are injected
+ * is platform-dependent. Workers read auth headers from a runtime-only
+ * secret. Runtime-less Containers and Daemons receive standard OTEL auth
+ * variables only at the final hosting boundary: Local passes them directly
+ * to the process and Kubernetes projects them from a per-workload Secret.
+ */
+export type TargetDeploymentMonitoring = {
+  /**
+   * Auth header value in "key=value,..." format.
+   *
+   * @remarks
+   * Example: "authorization=Bearer <write-token>"
+   */
+  logsAuthHeader: string;
+  /**
+   * Full OTLP logs endpoint URL.
+   *
+   * @remarks
+   * Example: "https://<manager-host>/v1/logs"
+   */
+  logsEndpoint: string;
+  /**
+   * Auth header value for the metrics endpoint in "key=value,..." format (optional).
+   *
+   * @remarks
+   *
+   * When absent, `logs_auth_header` is reused for metrics -- suitable when the same
+   * credential covers both signals. When present (e.g. Axiom with separate datasets),
+   * this value is used exclusively for metrics.
+   *
+   * Example: "authorization=Bearer <token>,x-axiom-dataset=<metrics-dataset>"
+   */
+  metricsAuthHeader?: string | null | undefined;
+  /**
+   * Full OTLP metrics endpoint URL (optional).
+   *
+   * @remarks
+   * When set, the worker runtime exports its own VM/container orchestration metrics here.
+   * Example: "https://api.axiom.co/v1/metrics"
+   */
+  metricsEndpoint?: string | null | undefined;
+  /**
+   * Resource attributes attached to every OTLP signal emitted for this deployment.
+   *
+   * @remarks
+   *
+   * Platform managers use this for stable identity such as `alien.workspace_id`,
+   * `alien.project_id`, `alien.deployment_group_id`, and `alien.deployment_id`.
+   * Runtime-specific resource attributes such as `service.name` remain owned by
+   * the runtime/exporter.
+   */
+  resourceAttributes?: { [k: string]: string } | undefined;
+};
+
+export type TargetDeploymentMonitoringUnion =
+  | TargetDeploymentMonitoring
+  | string;
+
+/**
+ * Deployment-time resource allocation for a container. Omitted fields use release defaults.
+ */
+export type TargetDeploymentContainers = {
+  /**
+   * CPU allocation in vCPUs.
+   */
+  cpu?: number | null | undefined;
+  /**
+   * Memory allocation, using binary units such as Mi or Gi.
+   */
+  memory?: string | null | undefined;
+  /**
+   * Persistent volume capacity per replica, in whole GiB. Omitted values
+   *
+   * @remarks
+   * use the release default. Existing volumes can only grow.
+   */
+  volumeSizeGib?: number | null | undefined;
+};
+
+/**
+ * Failure-domain policy selected for a compute pool.
+ */
+export type TargetDeploymentFailureDomains2 = {
+  /**
+   * Concrete provider domains selected during setup.
+   *
+   * @remarks
+   * Empty delegates deterministic selection to the provider setup implementation.
+   */
+  selectedFailureDomains?: Array<string> | undefined;
+  /**
+   * Number of distinct failure domains across which new stateful replicas may be spread.
+   */
+  spread: number;
+};
+
+export type TargetDeploymentFailureDomainsUnion2 =
+  | TargetDeploymentFailureDomains2
+  | string;
+
+export type TargetDeploymentPoolsAutoscale = {
+  failureDomains?: TargetDeploymentFailureDomains2 | string | null | undefined;
+  /**
+   * Provider machine type selected for this deployment.
+   */
+  machine?: string | null | undefined;
+  /**
+   * Maximum machine count.
+   */
+  max: number;
+  /**
+   * Minimum machine count.
+   */
+  min: number;
+  mode: "autoscale";
+};
+
+/**
+ * Failure-domain policy selected for a compute pool.
+ */
+export type TargetDeploymentFailureDomains1 = {
+  /**
+   * Concrete provider domains selected during setup.
+   *
+   * @remarks
+   * Empty delegates deterministic selection to the provider setup implementation.
+   */
+  selectedFailureDomains?: Array<string> | undefined;
+  /**
+   * Number of distinct failure domains across which new stateful replicas may be spread.
+   */
+  spread: number;
+};
+
+export type TargetDeploymentFailureDomainsUnion1 =
+  | TargetDeploymentFailureDomains1
+  | string;
+
+export type TargetDeploymentPoolsFixed = {
+  failureDomains?: TargetDeploymentFailureDomains1 | string | null | undefined;
+  /**
+   * Provider machine type selected for this deployment.
+   */
+  machine?: string | null | undefined;
+  /**
+   * Number of machines to run.
+   */
+  machines: number;
+  mode: "fixed";
+};
+
+/**
+ * User-selected deployment settings for one compute pool.
+ */
+export type TargetDeploymentPoolsUnion =
+  | TargetDeploymentPoolsFixed
+  | TargetDeploymentPoolsAutoscale;
+
+/**
+ * Deployment-time compute choices for Alien-managed compute pools.
+ *
+ * @remarks
+ *
+ * Application source declares portable pool requirements. This settings
+ * object stores the concrete choices made for one deployment, such as the
+ * provider machine type and selected machine counts.
+ */
+export type TargetDeploymentCompute = {
+  /**
+   * Per-replica resources selected within each container's declared ranges.
+   */
+  containers?: { [k: string]: TargetDeploymentContainers } | undefined;
+  /**
+   * Selected compute choices keyed by pool ID.
+   */
+  pools?: {
+    [k: string]: TargetDeploymentPoolsFixed | TargetDeploymentPoolsAutoscale;
+  } | undefined;
+};
+
+export type TargetDeploymentComputeUnion = TargetDeploymentCompute | string;
+
+/**
+ * Deployment model: how updates are delivered to the remote environment.
+ */
+export const TargetDeploymentDeploymentModel = {
+  Push: "push",
+  Pull: "pull",
+} as const;
+/**
+ * Deployment model: how updates are delivered to the remote environment.
+ */
+export type TargetDeploymentDeploymentModel = ClosedEnum<
+  typeof TargetDeploymentDeploymentModel
+>;
+
+export type TargetDeploymentAwsStackSettings = {
+  certificateArn: string;
+};
+
+export type TargetDeploymentStackSettingsAwsUnion =
+  | TargetDeploymentAwsStackSettings
+  | string;
+
+export type AzureConfigStackSettings = {
+  keyVaultCertificateId: string;
+  keyVaultResourceId?: string | null | undefined;
+};
+
+export type ConfigStackSettingsAzureUnion = AzureConfigStackSettings | string;
+
+export type GcpConfigStackSettings = {
+  certificateName: string;
+};
+
+export type ConfigStackSettingsGcpUnion = GcpConfigStackSettings | string;
+
+/**
+ * Namespace-scoped Kubernetes TLS Secret reference.
+ */
+export type TargetDeploymentTlsSecretRef = {
+  /**
+   * Secret namespace. Defaults to the release namespace when omitted.
+   */
+  namespace?: string | null | undefined;
+  /**
+   * Secret name.
+   */
+  secretName: string;
+};
+
+export type TargetDeploymentDomainsKubernetes = {
+  /**
+   * Namespace-scoped Kubernetes TLS Secret reference.
+   */
+  tlsSecretRef: TargetDeploymentTlsSecretRef;
+};
+
+export type TargetDeploymentDomainsKubernetesUnion =
+  | TargetDeploymentDomainsKubernetes
+  | string;
+
+/**
+ * Platform-specific certificate references for custom domains.
+ */
+export type TargetDeploymentDomainsCertificate = {
+  aws?: TargetDeploymentAwsStackSettings | string | null | undefined;
+  azure?: AzureConfigStackSettings | string | null | undefined;
+  gcp?: GcpConfigStackSettings | string | null | undefined;
+  kubernetes?: TargetDeploymentDomainsKubernetes | string | null | undefined;
+};
+
+/**
+ * Custom domain configuration for a single resource.
+ */
+export type TargetDeploymentCustomDomains = {
+  /**
+   * Platform-specific certificate references for custom domains.
+   */
+  certificate: TargetDeploymentDomainsCertificate;
+  /**
+   * Fully qualified domain name to use.
+   */
+  domain: string;
+};
+
+export const TargetDeploymentModeLoadBalancer = {
+  LoadBalancer: "loadBalancer",
+} as const;
+export type TargetDeploymentModeLoadBalancer = ClosedEnum<
+  typeof TargetDeploymentModeLoadBalancer
+>;
+
+export type TargetDeploymentPublicEndpointTargetLoadBalancer = {
+  /**
+   * DNS name or URL for the external load balancer.
+   */
+  cnameTarget: string;
+  mode: TargetDeploymentModeLoadBalancer;
+};
+
+export const TargetDeploymentModeMachineAddresses = {
+  MachineAddresses: "machineAddresses",
+} as const;
+export type TargetDeploymentModeMachineAddresses = ClosedEnum<
+  typeof TargetDeploymentModeMachineAddresses
+>;
+
+export type TargetDeploymentPublicEndpointTargetMachineAddresses = {
+  mode: TargetDeploymentModeMachineAddresses;
+};
+
+export type TargetDeploymentPublicEndpointTargetUnion =
+  | TargetDeploymentPublicEndpointTargetLoadBalancer
+  | TargetDeploymentPublicEndpointTargetMachineAddresses
+  | string;
+
+/**
+ * Domain configuration for the stack.
+ *
+ * @remarks
+ *
+ * When `custom_domains` is set, the specified resources use customer-provided
+ * domains and certificates. Otherwise, Alien auto-generates domains.
+ */
+export type TargetDeploymentDomains = {
+  /**
+   * Custom domain configuration per resource ID.
+   */
+  customDomains?:
+    | { [k: string]: TargetDeploymentCustomDomains }
+    | null
+    | undefined;
+  publicEndpointTarget?:
+    | TargetDeploymentPublicEndpointTargetLoadBalancer
+    | TargetDeploymentPublicEndpointTargetMachineAddresses
+    | string
+    | null
+    | undefined;
+};
+
+export type TargetDeploymentDomainsUnion = TargetDeploymentDomains | string;
+
+/**
+ * Reachability of the deployment's public endpoints, fixed at setup.
+ */
+export const TargetDeploymentEndpointAccess = {
+  Internet: "internet",
+  Private: "private",
+} as const;
+/**
+ * Reachability of the deployment's public endpoints, fixed at setup.
+ */
+export type TargetDeploymentEndpointAccess = ClosedEnum<
+  typeof TargetDeploymentEndpointAccess
+>;
+
+/**
+ * How heartbeat health checks are handled.
+ */
+export const TargetDeploymentHeartbeats = {
+  Off: "off",
+  On: "on",
+} as const;
+/**
+ * How heartbeat health checks are handled.
+ */
+export type TargetDeploymentHeartbeats = ClosedEnum<
+  typeof TargetDeploymentHeartbeats
+>;
+
+/**
+ * Optional provider-specific identity for a cloud-backed Kubernetes cluster.
+ */
+export type TargetDeploymentCloud = {
+  accountId?: string | null | undefined;
+  clusterId?: string | null | undefined;
+  clusterName?: string | null | undefined;
+  projectId?: string | null | undefined;
+  region?: string | null | undefined;
+  resourceGroup?: string | null | undefined;
+  subscriptionId?: string | null | undefined;
+};
+
+export type TargetDeploymentCloudUnion = TargetDeploymentCloud | string;
+
+/**
+ * Ownership model for the Kubernetes cluster.
+ */
+export const TargetDeploymentOwnership = {
+  Managed: "managed",
+  Existing: "existing",
+  External: "external",
+} as const;
+/**
+ * Ownership model for the Kubernetes cluster.
+ */
+export type TargetDeploymentOwnership = ClosedEnum<
+  typeof TargetDeploymentOwnership
+>;
+
+/**
+ * Kubernetes cluster setup settings.
+ */
+export type TargetDeploymentCluster = {
+  cloud?: TargetDeploymentCloud | string | null | undefined;
+  /**
+   * Namespace where the Alien chart and application resources run.
+   */
+  namespace?: string | null | undefined;
+  /**
+   * Ownership model for the Kubernetes cluster.
+   */
+  ownership: TargetDeploymentOwnership;
+};
+
+export type TargetDeploymentClusterUnion = TargetDeploymentCluster | string;
+
+export type TargetDeploymentCertificateNone2 = {
+  mode: "none";
+};
+
+export type TargetDeploymentCertificateManagedTLSSecret2 = {
+  mode: "managedTlsSecret";
+  /**
+   * Secret name template. Runtime may substitute resource/deployment tokens.
+   */
+  secretNameTemplate: string;
+};
+
+export type TargetDeploymentCertificateAwsAcmArn2 = {
+  /**
+   * Existing ACM certificate ARN.
+   */
+  certificateArn: string;
+  mode: "awsAcmArn";
+};
+
+export type TargetDeploymentCertificateManagedAcmImport2 = {
+  mode: "managedAcmImport";
+  /**
+   * ACM region. Defaults to the deployment region when omitted.
+   */
+  region?: string | null | undefined;
+  /**
+   * Tags applied to runtime-imported ACM certificates.
+   */
+  tags?: { [k: string]: string } | undefined;
+};
+
+/**
+ * Namespace-scoped Kubernetes TLS Secret reference.
+ */
+export type TargetDeploymentCertificateTLSSecretRef2 = {
+  /**
+   * Secret namespace. Defaults to the release namespace when omitted.
+   */
+  namespace?: string | null | undefined;
+  /**
+   * Secret name.
+   */
+  secretName: string;
+  mode: "tlsSecretRef";
+};
+
+/**
+ * Certificate publication or reference mode for Kubernetes public endpoints.
+ */
+export type TargetDeploymentCertificateUnion2 =
+  | TargetDeploymentCertificateTLSSecretRef2
+  | TargetDeploymentCertificateManagedAcmImport2
+  | TargetDeploymentCertificateAwsAcmArn2
+  | TargetDeploymentCertificateManagedTLSSecret2
+  | TargetDeploymentCertificateNone2;
+
+export const TargetDeploymentModeCustom = {
+  Custom: "custom",
+} as const;
+export type TargetDeploymentModeCustom = ClosedEnum<
+  typeof TargetDeploymentModeCustom
+>;
+
+export const TargetDeploymentProviderAzureApplicationGatewayForContainersEnum4 =
+  {
+    AzureApplicationGatewayForContainers:
+      "azureApplicationGatewayForContainers",
+  } as const;
+export type TargetDeploymentProviderAzureApplicationGatewayForContainersEnum4 =
+  ClosedEnum<
+    typeof TargetDeploymentProviderAzureApplicationGatewayForContainersEnum4
+  >;
+
+export type TargetDeploymentProviderAzureApplicationGatewayForContainers4 = {
+  /**
+   * Optional ALB name when using BYO Application Gateway resources.
+   */
+  albName?: string | null | undefined;
+  /**
+   * Optional ALB namespace when using BYO Application Gateway resources.
+   */
+  albNamespace?: string | null | undefined;
+  /**
+   * Public or internal frontend exposure.
+   */
+  frontend: string;
+  provider: TargetDeploymentProviderAzureApplicationGatewayForContainersEnum4;
+};
+
+export const TargetDeploymentProviderGkeGatewayEnum4 = {
+  GkeGateway: "gkeGateway",
+} as const;
+export type TargetDeploymentProviderGkeGatewayEnum4 = ClosedEnum<
+  typeof TargetDeploymentProviderGkeGatewayEnum4
+>;
+
+export type TargetDeploymentProviderGkeGateway4 = {
+  provider: TargetDeploymentProviderGkeGatewayEnum4;
+  /**
+   * Optional static address name for the Gateway frontend.
+   */
+  staticAddressName?: string | null | undefined;
+};
+
+export const TargetDeploymentProviderAwsAlbEnum4 = {
+  AwsAlb: "awsAlb",
+} as const;
+export type TargetDeploymentProviderAwsAlbEnum4 = ClosedEnum<
+  typeof TargetDeploymentProviderAwsAlbEnum4
+>;
+
+export type TargetDeploymentProviderAwsAlb4 = {
+  /**
+   * Optional ALB IP address type, such as `dualstack`.
+   */
+  ipAddressType?: string | null | undefined;
+  provider: TargetDeploymentProviderAwsAlbEnum4;
+  /**
+   * Internet-facing or internal ALB scheme.
+   */
+  scheme: string;
+  /**
+   * Explicit subnet IDs when the profile cannot rely on controller discovery.
+   */
+  subnetIds?: Array<string> | undefined;
+  /**
+   * ALB target type, usually `ip`.
+   */
+  targetType: string;
+};
+
+export type TargetDeploymentProviderUnion4 =
+  | TargetDeploymentProviderAwsAlb4
+  | TargetDeploymentProviderAzureApplicationGatewayForContainers4
+  | TargetDeploymentProviderGkeGateway4
+  | string;
+
+/**
+ * Shared Gateway API route profile values.
+ */
+export type TargetDeploymentRouteGateway2 = {
+  /**
+   * Annotations applied to route objects.
+   */
+  annotations?: { [k: string]: string } | undefined;
+  /**
+   * Route controller identifier, for example a cloud Gateway controller.
+   */
+  controller?: string | null | undefined;
+  /**
+   * GatewayClass selected for generated Gateways.
+   */
+  gatewayClassName: string;
+  /**
+   * Labels applied to route objects.
+   */
+  labels?: { [k: string]: string } | undefined;
+  /**
+   * Listener port, usually 443.
+   */
+  listenerPort: number;
+  provider?:
+    | TargetDeploymentProviderAwsAlb4
+    | TargetDeploymentProviderAzureApplicationGatewayForContainers4
+    | TargetDeploymentProviderGkeGateway4
+    | string
+    | null
+    | undefined;
+  routeApi: "gateway";
+};
+
+export const TargetDeploymentProviderAzureApplicationGatewayForContainersEnum3 =
+  {
+    AzureApplicationGatewayForContainers:
+      "azureApplicationGatewayForContainers",
+  } as const;
+export type TargetDeploymentProviderAzureApplicationGatewayForContainersEnum3 =
+  ClosedEnum<
+    typeof TargetDeploymentProviderAzureApplicationGatewayForContainersEnum3
+  >;
+
+export type TargetDeploymentProviderAzureApplicationGatewayForContainers3 = {
+  /**
+   * Optional ALB name when using BYO Application Gateway resources.
+   */
+  albName?: string | null | undefined;
+  /**
+   * Optional ALB namespace when using BYO Application Gateway resources.
+   */
+  albNamespace?: string | null | undefined;
+  /**
+   * Public or internal frontend exposure.
+   */
+  frontend: string;
+  provider: TargetDeploymentProviderAzureApplicationGatewayForContainersEnum3;
+};
+
+export const TargetDeploymentProviderGkeGatewayEnum3 = {
+  GkeGateway: "gkeGateway",
+} as const;
+export type TargetDeploymentProviderGkeGatewayEnum3 = ClosedEnum<
+  typeof TargetDeploymentProviderGkeGatewayEnum3
+>;
+
+export type TargetDeploymentProviderGkeGateway3 = {
+  provider: TargetDeploymentProviderGkeGatewayEnum3;
+  /**
+   * Optional static address name for the Gateway frontend.
+   */
+  staticAddressName?: string | null | undefined;
+};
+
+export const TargetDeploymentProviderAwsAlbEnum3 = {
+  AwsAlb: "awsAlb",
+} as const;
+export type TargetDeploymentProviderAwsAlbEnum3 = ClosedEnum<
+  typeof TargetDeploymentProviderAwsAlbEnum3
+>;
+
+export type TargetDeploymentProviderAwsAlb3 = {
+  /**
+   * Optional ALB IP address type, such as `dualstack`.
+   */
+  ipAddressType?: string | null | undefined;
+  provider: TargetDeploymentProviderAwsAlbEnum3;
+  /**
+   * Internet-facing or internal ALB scheme.
+   */
+  scheme: string;
+  /**
+   * Explicit subnet IDs when the profile cannot rely on controller discovery.
+   */
+  subnetIds?: Array<string> | undefined;
+  /**
+   * ALB target type, usually `ip`.
+   */
+  targetType: string;
+};
+
+export type TargetDeploymentProviderUnion3 =
+  | TargetDeploymentProviderAwsAlb3
+  | TargetDeploymentProviderAzureApplicationGatewayForContainers3
+  | TargetDeploymentProviderGkeGateway3
+  | string;
+
+/**
+ * Shared Ingress route profile values.
+ */
+export type TargetDeploymentRouteIngress2 = {
+  /**
+   * Annotations applied to route objects.
+   */
+  annotations?: { [k: string]: string } | undefined;
+  /**
+   * Route controller identifier, for example `eks.amazonaws.com/alb`.
+   */
+  controller?: string | null | undefined;
+  /**
+   * `spec.ingressClassName` for generated Ingresses.
+   */
+  ingressClassName: string;
+  /**
+   * Labels applied to route objects.
+   */
+  labels?: { [k: string]: string } | undefined;
+  provider?:
+    | TargetDeploymentProviderAwsAlb3
+    | TargetDeploymentProviderAzureApplicationGatewayForContainers3
+    | TargetDeploymentProviderGkeGateway3
+    | string
+    | null
+    | undefined;
+  routeApi: "ingress";
+};
+
+/**
+ * Kubernetes route API selected for public endpoints.
+ */
+export type TargetDeploymentRouteUnion2 =
+  | TargetDeploymentRouteIngress2
+  | TargetDeploymentRouteGateway2;
+
+export type TargetDeploymentExposureCustom = {
+  /**
+   * Certificate publication or reference mode for Kubernetes public endpoints.
+   */
+  certificate:
+    | TargetDeploymentCertificateTLSSecretRef2
+    | TargetDeploymentCertificateManagedAcmImport2
+    | TargetDeploymentCertificateAwsAcmArn2
+    | TargetDeploymentCertificateManagedTLSSecret2
+    | TargetDeploymentCertificateNone2;
+  /**
+   * Hostname routed by the Kubernetes public endpoint.
+   */
+  domain: string;
+  mode: TargetDeploymentModeCustom;
+  /**
+   * Kubernetes route API selected for public endpoints.
+   */
+  route: TargetDeploymentRouteIngress2 | TargetDeploymentRouteGateway2;
+};
+
+export type TargetDeploymentCertificateNone1 = {
+  mode: "none";
+};
+
+export type TargetDeploymentCertificateManagedTLSSecret1 = {
+  mode: "managedTlsSecret";
+  /**
+   * Secret name template. Runtime may substitute resource/deployment tokens.
+   */
+  secretNameTemplate: string;
+};
+
+export type TargetDeploymentCertificateAwsAcmArn1 = {
+  /**
+   * Existing ACM certificate ARN.
+   */
+  certificateArn: string;
+  mode: "awsAcmArn";
+};
+
+export type TargetDeploymentCertificateManagedAcmImport1 = {
+  mode: "managedAcmImport";
+  /**
+   * ACM region. Defaults to the deployment region when omitted.
+   */
+  region?: string | null | undefined;
+  /**
+   * Tags applied to runtime-imported ACM certificates.
+   */
+  tags?: { [k: string]: string } | undefined;
+};
+
+/**
+ * Namespace-scoped Kubernetes TLS Secret reference.
+ */
+export type TargetDeploymentCertificateTLSSecretRef1 = {
+  /**
+   * Secret namespace. Defaults to the release namespace when omitted.
+   */
+  namespace?: string | null | undefined;
+  /**
+   * Secret name.
+   */
+  secretName: string;
+  mode: "tlsSecretRef";
+};
+
+/**
+ * Certificate publication or reference mode for Kubernetes public endpoints.
+ */
+export type TargetDeploymentCertificateUnion1 =
+  | TargetDeploymentCertificateTLSSecretRef1
+  | TargetDeploymentCertificateManagedAcmImport1
+  | TargetDeploymentCertificateAwsAcmArn1
+  | TargetDeploymentCertificateManagedTLSSecret1
+  | TargetDeploymentCertificateNone1;
+
+export const TargetDeploymentModeGenerated = {
+  Generated: "generated",
+} as const;
+export type TargetDeploymentModeGenerated = ClosedEnum<
+  typeof TargetDeploymentModeGenerated
+>;
+
+export const TargetDeploymentProviderAzureApplicationGatewayForContainersEnum2 =
+  {
+    AzureApplicationGatewayForContainers:
+      "azureApplicationGatewayForContainers",
+  } as const;
+export type TargetDeploymentProviderAzureApplicationGatewayForContainersEnum2 =
+  ClosedEnum<
+    typeof TargetDeploymentProviderAzureApplicationGatewayForContainersEnum2
+  >;
+
+export type TargetDeploymentProviderAzureApplicationGatewayForContainers2 = {
+  /**
+   * Optional ALB name when using BYO Application Gateway resources.
+   */
+  albName?: string | null | undefined;
+  /**
+   * Optional ALB namespace when using BYO Application Gateway resources.
+   */
+  albNamespace?: string | null | undefined;
+  /**
+   * Public or internal frontend exposure.
+   */
+  frontend: string;
+  provider: TargetDeploymentProviderAzureApplicationGatewayForContainersEnum2;
+};
+
+export const TargetDeploymentProviderGkeGatewayEnum2 = {
+  GkeGateway: "gkeGateway",
+} as const;
+export type TargetDeploymentProviderGkeGatewayEnum2 = ClosedEnum<
+  typeof TargetDeploymentProviderGkeGatewayEnum2
+>;
+
+export type TargetDeploymentProviderGkeGateway2 = {
+  provider: TargetDeploymentProviderGkeGatewayEnum2;
+  /**
+   * Optional static address name for the Gateway frontend.
+   */
+  staticAddressName?: string | null | undefined;
+};
+
+export const TargetDeploymentProviderAwsAlbEnum2 = {
+  AwsAlb: "awsAlb",
+} as const;
+export type TargetDeploymentProviderAwsAlbEnum2 = ClosedEnum<
+  typeof TargetDeploymentProviderAwsAlbEnum2
+>;
+
+export type TargetDeploymentProviderAwsAlb2 = {
+  /**
+   * Optional ALB IP address type, such as `dualstack`.
+   */
+  ipAddressType?: string | null | undefined;
+  provider: TargetDeploymentProviderAwsAlbEnum2;
+  /**
+   * Internet-facing or internal ALB scheme.
+   */
+  scheme: string;
+  /**
+   * Explicit subnet IDs when the profile cannot rely on controller discovery.
+   */
+  subnetIds?: Array<string> | undefined;
+  /**
+   * ALB target type, usually `ip`.
+   */
+  targetType: string;
+};
+
+export type TargetDeploymentProviderUnion2 =
+  | TargetDeploymentProviderAwsAlb2
+  | TargetDeploymentProviderAzureApplicationGatewayForContainers2
+  | TargetDeploymentProviderGkeGateway2
+  | string;
+
+/**
+ * Shared Gateway API route profile values.
+ */
+export type TargetDeploymentRouteGateway1 = {
+  /**
+   * Annotations applied to route objects.
+   */
+  annotations?: { [k: string]: string } | undefined;
+  /**
+   * Route controller identifier, for example a cloud Gateway controller.
+   */
+  controller?: string | null | undefined;
+  /**
+   * GatewayClass selected for generated Gateways.
+   */
+  gatewayClassName: string;
+  /**
+   * Labels applied to route objects.
+   */
+  labels?: { [k: string]: string } | undefined;
+  /**
+   * Listener port, usually 443.
+   */
+  listenerPort: number;
+  provider?:
+    | TargetDeploymentProviderAwsAlb2
+    | TargetDeploymentProviderAzureApplicationGatewayForContainers2
+    | TargetDeploymentProviderGkeGateway2
+    | string
+    | null
+    | undefined;
+  routeApi: "gateway";
+};
+
+export const TargetDeploymentProviderAzureApplicationGatewayForContainersEnum1 =
+  {
+    AzureApplicationGatewayForContainers:
+      "azureApplicationGatewayForContainers",
+  } as const;
+export type TargetDeploymentProviderAzureApplicationGatewayForContainersEnum1 =
+  ClosedEnum<
+    typeof TargetDeploymentProviderAzureApplicationGatewayForContainersEnum1
+  >;
+
+export type TargetDeploymentProviderAzureApplicationGatewayForContainers1 = {
+  /**
+   * Optional ALB name when using BYO Application Gateway resources.
+   */
+  albName?: string | null | undefined;
+  /**
+   * Optional ALB namespace when using BYO Application Gateway resources.
+   */
+  albNamespace?: string | null | undefined;
+  /**
+   * Public or internal frontend exposure.
+   */
+  frontend: string;
+  provider: TargetDeploymentProviderAzureApplicationGatewayForContainersEnum1;
+};
+
+export const TargetDeploymentProviderGkeGatewayEnum1 = {
+  GkeGateway: "gkeGateway",
+} as const;
+export type TargetDeploymentProviderGkeGatewayEnum1 = ClosedEnum<
+  typeof TargetDeploymentProviderGkeGatewayEnum1
+>;
+
+export type TargetDeploymentProviderGkeGateway1 = {
+  provider: TargetDeploymentProviderGkeGatewayEnum1;
+  /**
+   * Optional static address name for the Gateway frontend.
+   */
+  staticAddressName?: string | null | undefined;
+};
+
+export const TargetDeploymentProviderAwsAlbEnum1 = {
+  AwsAlb: "awsAlb",
+} as const;
+export type TargetDeploymentProviderAwsAlbEnum1 = ClosedEnum<
+  typeof TargetDeploymentProviderAwsAlbEnum1
+>;
+
+export type TargetDeploymentProviderAwsAlb1 = {
+  /**
+   * Optional ALB IP address type, such as `dualstack`.
+   */
+  ipAddressType?: string | null | undefined;
+  provider: TargetDeploymentProviderAwsAlbEnum1;
+  /**
+   * Internet-facing or internal ALB scheme.
+   */
+  scheme: string;
+  /**
+   * Explicit subnet IDs when the profile cannot rely on controller discovery.
+   */
+  subnetIds?: Array<string> | undefined;
+  /**
+   * ALB target type, usually `ip`.
+   */
+  targetType: string;
+};
+
+export type TargetDeploymentProviderUnion1 =
+  | TargetDeploymentProviderAwsAlb1
+  | TargetDeploymentProviderAzureApplicationGatewayForContainers1
+  | TargetDeploymentProviderGkeGateway1
+  | string;
+
+/**
+ * Shared Ingress route profile values.
+ */
+export type TargetDeploymentRouteIngress1 = {
+  /**
+   * Annotations applied to route objects.
+   */
+  annotations?: { [k: string]: string } | undefined;
+  /**
+   * Route controller identifier, for example `eks.amazonaws.com/alb`.
+   */
+  controller?: string | null | undefined;
+  /**
+   * `spec.ingressClassName` for generated Ingresses.
+   */
+  ingressClassName: string;
+  /**
+   * Labels applied to route objects.
+   */
+  labels?: { [k: string]: string } | undefined;
+  provider?:
+    | TargetDeploymentProviderAwsAlb1
+    | TargetDeploymentProviderAzureApplicationGatewayForContainers1
+    | TargetDeploymentProviderGkeGateway1
+    | string
+    | null
+    | undefined;
+  routeApi: "ingress";
+};
+
+/**
+ * Kubernetes route API selected for public endpoints.
+ */
+export type TargetDeploymentRouteUnion1 =
+  | TargetDeploymentRouteIngress1
+  | TargetDeploymentRouteGateway1;
+
+export type TargetDeploymentExposureGenerated = {
+  /**
+   * Certificate publication or reference mode for Kubernetes public endpoints.
+   */
+  certificate:
+    | TargetDeploymentCertificateTLSSecretRef1
+    | TargetDeploymentCertificateManagedAcmImport1
+    | TargetDeploymentCertificateAwsAcmArn1
+    | TargetDeploymentCertificateManagedTLSSecret1
+    | TargetDeploymentCertificateNone1;
+  mode: TargetDeploymentModeGenerated;
+  /**
+   * Kubernetes route API selected for public endpoints.
+   */
+  route: TargetDeploymentRouteIngress1 | TargetDeploymentRouteGateway1;
+};
+
+export const TargetDeploymentModeDisabled = {
+  Disabled: "disabled",
+} as const;
+export type TargetDeploymentModeDisabled = ClosedEnum<
+  typeof TargetDeploymentModeDisabled
+>;
+
+export type TargetDeploymentExposureDisabled = {
+  mode: TargetDeploymentModeDisabled;
+};
+
+export type TargetDeploymentExposureUnion =
+  | TargetDeploymentExposureCustom
+  | TargetDeploymentExposureGenerated
+  | TargetDeploymentExposureDisabled
+  | string;
+
+/**
+ * Kubernetes runtime substrate configuration.
+ *
+ * @remarks
+ *
+ * This controls how setup chooses the cluster backing `Platform::Kubernetes`
+ * deployments. When omitted, cloud-backed Kubernetes deployments default to a
+ * managed cluster and generic/on-prem Kubernetes defaults to an external
+ * cluster.
+ */
+export type TargetDeploymentKubernetes = {
+  cluster?: TargetDeploymentCluster | string | null | undefined;
+  exposure?:
+    | TargetDeploymentExposureCustom
+    | TargetDeploymentExposureGenerated
+    | TargetDeploymentExposureDisabled
+    | string
+    | null
+    | undefined;
+};
+
+export type TargetDeploymentKubernetesUnion =
+  | TargetDeploymentKubernetes
+  | string;
+
+export const TargetDeploymentTypeByoVnetAzure = {
+  ByoVnetAzure: "byo-vnet-azure",
+} as const;
+export type TargetDeploymentTypeByoVnetAzure = ClosedEnum<
+  typeof TargetDeploymentTypeByoVnetAzure
+>;
+
+export type TargetDeploymentNetworkByoVnetAzure = {
+  /**
+   * Name of the dedicated classic Application Gateway subnet within the VNet.
+   */
+  applicationGatewaySubnetName?: string | null | undefined;
+  /**
+   * Name of the dedicated subnet that hosts Private Endpoints (e.g. for a
+   *
+   * @remarks
+   * Postgres Flexible Server). A Private Endpoint must not share the private
+   * subnet, which is already claimed by the Container Apps environment's
+   * `infrastructure_subnet_id`. Required only when the stack contains a
+   * Postgres resource; otherwise unused.
+   */
+  privateEndpointSubnetName?: string | null | undefined;
+  /**
+   * Name of the private subnet within the VNet
+   */
+  privateSubnetName: string;
+  /**
+   * Name of the public subnet within the VNet
+   */
+  publicSubnetName: string;
+  type: TargetDeploymentTypeByoVnetAzure;
+  /**
+   * The full resource ID of the existing VNet
+   */
+  vnetResourceId: string;
+};
+
+export const TargetDeploymentTypeByoVpcGcp = {
+  ByoVpcGcp: "byo-vpc-gcp",
+} as const;
+export type TargetDeploymentTypeByoVpcGcp = ClosedEnum<
+  typeof TargetDeploymentTypeByoVpcGcp
+>;
+
+export type TargetDeploymentNetworkByoVpcGcp = {
+  /**
+   * The name of the existing VPC network
+   */
+  networkName: string;
+  /**
+   * The region of the subnet
+   */
+  region: string;
+  /**
+   * The name of the subnet to use
+   */
+  subnetName: string;
+  type: TargetDeploymentTypeByoVpcGcp;
+};
+
+export const TargetDeploymentTypeByoVpcAws = {
+  ByoVpcAws: "byo-vpc-aws",
+} as const;
+export type TargetDeploymentTypeByoVpcAws = ClosedEnum<
+  typeof TargetDeploymentTypeByoVpcAws
+>;
+
+export type TargetDeploymentNetworkByoVpcAws = {
+  /**
+   * IDs of private subnets
+   */
+  privateSubnetIds: Array<string>;
+  /**
+   * IDs of public subnets (required for public ingress)
+   */
+  publicSubnetIds: Array<string>;
+  /**
+   * Optional security group IDs to use
+   */
+  securityGroupIds?: Array<string> | undefined;
+  type: TargetDeploymentTypeByoVpcAws;
+  /**
+   * The ID of the existing VPC
+   */
+  vpcId: string;
+};
+
+export const TargetDeploymentTypeCreate = {
+  Create: "create",
+} as const;
+export type TargetDeploymentTypeCreate = ClosedEnum<
+  typeof TargetDeploymentTypeCreate
+>;
+
+export type TargetDeploymentNetworkCreate = {
+  /**
+   * Number of availability zones (default: 2).
+   */
+  availabilityZones?: number | undefined;
+  /**
+   * VPC/VNet CIDR block. If not specified, auto-generated from stack ID
+   *
+   * @remarks
+   * to reduce conflicts (e.g., "10.{hash}.0.0/16").
+   */
+  cidr?: string | null | undefined;
+  type: TargetDeploymentTypeCreate;
+};
+
+export const TargetDeploymentTypeUseDefault = {
+  UseDefault: "use-default",
+} as const;
+export type TargetDeploymentTypeUseDefault = ClosedEnum<
+  typeof TargetDeploymentTypeUseDefault
+>;
+
+export type TargetDeploymentNetworkUseDefault = {
+  type: TargetDeploymentTypeUseDefault;
+};
+
+export type TargetDeploymentNetworkUnion =
+  | TargetDeploymentNetworkByoVpcAws
+  | TargetDeploymentNetworkByoVpcGcp
+  | TargetDeploymentNetworkByoVnetAzure
+  | TargetDeploymentNetworkUseDefault
+  | TargetDeploymentNetworkCreate
+  | string;
+
+/**
+ * Whether setup remains a separate administrator operation.
+ */
+export const TargetDeploymentSetupManagement = {
+  Manual: "manual",
+  Automatic: "automatic",
+} as const;
+/**
+ * Whether setup remains a separate administrator operation.
+ */
+export type TargetDeploymentSetupManagement = ClosedEnum<
+  typeof TargetDeploymentSetupManagement
+>;
+
+/**
+ * How telemetry (logs, metrics, traces) is handled.
+ */
+export const TargetDeploymentTelemetry = {
+  Off: "off",
+  Auto: "auto",
+  ApprovalRequired: "approval-required",
+} as const;
+/**
+ * How telemetry (logs, metrics, traces) is handled.
+ */
+export type TargetDeploymentTelemetry = ClosedEnum<
+  typeof TargetDeploymentTelemetry
+>;
+
+/**
+ * How updates are delivered to the deployment.
+ */
+export const TargetDeploymentUpdates = {
+  Auto: "auto",
+  ApprovalRequired: "approval-required",
+} as const;
+/**
+ * How updates are delivered to the deployment.
+ */
+export type TargetDeploymentUpdates = ClosedEnum<
+  typeof TargetDeploymentUpdates
+>;
+
+/**
+ * User-customizable deployment settings specified at deploy time.
+ *
+ * @remarks
+ *
+ * These settings are provided by the customer via CloudFormation parameters,
+ * Terraform attributes, CLI flags, or Helm values. They customize how the
+ * deployment runs and what capabilities are enabled.
+ *
+ * **Key distinction**: StackSettings is user-customizable, while ManagementConfig
+ * is platform-derived (from the Manager's ServiceAccount).
+ */
+export type TargetDeploymentStackSettings = {
+  compute?: TargetDeploymentCompute | string | null | undefined;
+  /**
+   * Deployment model: how updates are delivered to the remote environment.
+   */
+  deploymentModel?: TargetDeploymentDeploymentModel | undefined;
+  domains?: TargetDeploymentDomains | string | null | undefined;
+  /**
+   * Reachability of the deployment's public endpoints, fixed at setup.
+   */
+  endpointAccess?: TargetDeploymentEndpointAccess | undefined;
+  externalBindings?: { [k: string]: ExternalBindingUnion } | null | undefined;
+  /**
+   * How heartbeat health checks are handled.
+   */
+  heartbeats?: TargetDeploymentHeartbeats | undefined;
+  kubernetes?: TargetDeploymentKubernetes | string | null | undefined;
+  network?:
+    | TargetDeploymentNetworkByoVpcAws
+    | TargetDeploymentNetworkByoVpcGcp
+    | TargetDeploymentNetworkByoVnetAzure
+    | TargetDeploymentNetworkUseDefault
+    | TargetDeploymentNetworkCreate
+    | string
+    | null
+    | undefined;
+  /**
+   * Exact externally managed endpoint URLs, keyed by resource ID and endpoint name.
+   *
+   * @remarks
+   *
+   * This is intended for adopted Machines deployments whose DNS and certificates remain
+   * customer-owned. The platform passes these URLs to the runtime without creating or
+   * replacing DNS records or certificates.
+   */
+  publicEndpoints?: { [k: string]: { [k: string]: string } } | null | undefined;
+  /**
+   * Provider quota identities whose preflight failures become visible warnings
+   *
+   * @remarks
+   * for this deployment. Checks still run; deploy-time provider limits still apply.
+   * Unknown identities are rejected. An empty list restores normal blocking.
+   */
+  quotaWarningOverrides?: Array<string> | undefined;
+  /**
+   * Whether setup remains a separate administrator operation.
+   */
+  setupManagement?: TargetDeploymentSetupManagement | undefined;
+  /**
+   * How telemetry (logs, metrics, traces) is handled.
+   */
+  telemetry?: TargetDeploymentTelemetry | undefined;
+  /**
+   * How updates are delivered to the deployment.
+   */
+  updates?: TargetDeploymentUpdates | undefined;
+};
+
+/**
+ * Replace one replica's persistent volume with a new volume made from a snapshot.
+ *
+ * @remarks
+ *
+ * The controller stops the replica, snapshots the volume it is about to
+ * replace (so the restore can be undone), creates the new volume in the same
+ * zone, starts the replica on it, and deletes the replaced volume.
+ */
+export type TargetDeploymentVolumeRestore = {
+  /**
+   * Replica ordinal whose volume is replaced
+   */
+  ordinal: number;
+  /**
+   * Unique ID of this request. A controller performs each request once.
+   */
+  requestId: string;
+  /**
+   * ID of the container resource that owns the volume
+   */
+  resourceId: string;
+  /**
+   * Cloud ID of the snapshot to restore: an EBS snapshot ID, a Compute
+   *
+   * @remarks
+   * Engine snapshot name, or an Azure snapshot resource ID
+   */
+  snapshotId: string;
+};
+
+/** @internal */
+export const TargetDeploymentBasePlatformEnum$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentBasePlatformEnum
+> = z.enum(TargetDeploymentBasePlatformEnum);
+
+/** @internal */
+export const TargetDeploymentBasePlatformUnion$inboundSchema: z.ZodType<
+  TargetDeploymentBasePlatformUnion,
+  unknown
+> = z.union([TargetDeploymentBasePlatformEnum$inboundSchema, z.string()]);
+
+export function targetDeploymentBasePlatformUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentBasePlatformUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentBasePlatformUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentBasePlatformUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentClusters$inboundSchema: z.ZodType<
+  TargetDeploymentClusters,
+  unknown
+> = z.object({
+  clusterId: z.string(),
+  managementToken: z.string(),
+});
+
+export function targetDeploymentClustersFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentClusters, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentClusters$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentClusters' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentHorizonMachineImageAws$inboundSchema: z.ZodType<
+  TargetDeploymentHorizonMachineImageAws,
+  unknown
+> = z.object({
+  amis: z.record(z.string(), z.record(z.string(), z.string())),
+});
+
+export function targetDeploymentHorizonMachineImageAwsFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentHorizonMachineImageAws, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentHorizonMachineImageAws$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentHorizonMachineImageAws' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentHorizonMachineImageAwsUnion$inboundSchema:
+  z.ZodType<TargetDeploymentHorizonMachineImageAwsUnion, unknown> = z.union([
+    z.lazy(() => TargetDeploymentHorizonMachineImageAws$inboundSchema),
+    z.string(),
+  ]);
+
+export function targetDeploymentHorizonMachineImageAwsUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentHorizonMachineImageAwsUnion,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentHorizonMachineImageAwsUnion$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'TargetDeploymentHorizonMachineImageAwsUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentAzureImages$inboundSchema: z.ZodType<
+  TargetDeploymentAzureImages,
+  unknown
+> = z.object({
+  imageVersionId: z.string(),
+});
+
+export function targetDeploymentAzureImagesFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentAzureImages, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentAzureImages$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentAzureImages' from JSON`,
+  );
+}
+
+/** @internal */
+export const HorizonMachineImageAzureConfig$inboundSchema: z.ZodType<
+  HorizonMachineImageAzureConfig,
+  unknown
+> = z.object({
+  images: z.record(
+    z.string(),
+    z.lazy(() => TargetDeploymentAzureImages$inboundSchema),
+  ),
+});
+
+export function horizonMachineImageAzureConfigFromJSON(
+  jsonString: string,
+): SafeParseResult<HorizonMachineImageAzureConfig, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => HorizonMachineImageAzureConfig$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'HorizonMachineImageAzureConfig' from JSON`,
+  );
+}
+
+/** @internal */
+export const HorizonMachineImageConfigAzureUnion$inboundSchema: z.ZodType<
+  HorizonMachineImageConfigAzureUnion,
+  unknown
+> = z.union([
+  z.lazy(() => HorizonMachineImageAzureConfig$inboundSchema),
+  z.string(),
+]);
+
+export function horizonMachineImageConfigAzureUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<HorizonMachineImageConfigAzureUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      HorizonMachineImageConfigAzureUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'HorizonMachineImageConfigAzureUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentBaseImage$inboundSchema: z.ZodType<
+  TargetDeploymentBaseImage,
+  unknown
+> = z.object({
+  name: z.string(),
+  version: z.string(),
+});
+
+export function targetDeploymentBaseImageFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentBaseImage, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentBaseImage$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentBaseImage' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentGcpImages$inboundSchema: z.ZodType<
+  TargetDeploymentGcpImages,
+  unknown
+> = z.object({
+  sourceImage: z.string(),
+});
+
+export function targetDeploymentGcpImagesFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentGcpImages, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentGcpImages$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentGcpImages' from JSON`,
+  );
+}
+
+/** @internal */
+export const HorizonMachineImageGcpConfig$inboundSchema: z.ZodType<
+  HorizonMachineImageGcpConfig,
+  unknown
+> = z.object({
+  images: z.record(
+    z.string(),
+    z.lazy(() => TargetDeploymentGcpImages$inboundSchema),
+  ),
+});
+
+export function horizonMachineImageGcpConfigFromJSON(
+  jsonString: string,
+): SafeParseResult<HorizonMachineImageGcpConfig, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => HorizonMachineImageGcpConfig$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'HorizonMachineImageGcpConfig' from JSON`,
+  );
+}
+
+/** @internal */
+export const HorizonMachineImageConfigGcpUnion$inboundSchema: z.ZodType<
+  HorizonMachineImageConfigGcpUnion,
+  unknown
+> = z.union([
+  z.lazy(() => HorizonMachineImageGcpConfig$inboundSchema),
+  z.string(),
+]);
+
+export function horizonMachineImageConfigGcpUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<HorizonMachineImageConfigGcpUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => HorizonMachineImageConfigGcpUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'HorizonMachineImageConfigGcpUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentHorizondArtifacts$inboundSchema: z.ZodType<
+  TargetDeploymentHorizondArtifacts,
+  unknown
+> = z.object({
+  runtimeIsolationGeneration: z.int().optional(),
+  sha256: z.string(),
+  url: z.string(),
+});
+
+export function targetDeploymentHorizondArtifactsFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentHorizondArtifacts, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentHorizondArtifacts$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentHorizondArtifacts' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentHorizonMachineImage$inboundSchema: z.ZodType<
+  TargetDeploymentHorizonMachineImage,
+  unknown
+> = z.object({
+  aws: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentHorizonMachineImageAws$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  azure: z.nullable(
+    z.union([
+      z.lazy(() => HorizonMachineImageAzureConfig$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  baseImage: z.lazy(() => TargetDeploymentBaseImage$inboundSchema),
+  channel: z.string(),
+  createdAt: z.string(),
+  gcp: z.nullable(
+    z.union([
+      z.lazy(() => HorizonMachineImageGcpConfig$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  gitSha: z.string(),
+  horizondArtifacts: z.record(
+    z.string(),
+    z.lazy(() => TargetDeploymentHorizondArtifacts$inboundSchema),
+  ),
+  horizondVersion: z.string(),
+  machineImageVersion: z.string(),
+  runtimeIsolationGeneration: z.int().optional(),
+});
+
+export function targetDeploymentHorizonMachineImageFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentHorizonMachineImage, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentHorizonMachineImage$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentHorizonMachineImage' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentHorizonMachineImageUnion$inboundSchema: z.ZodType<
+  TargetDeploymentHorizonMachineImageUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentHorizonMachineImage$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentHorizonMachineImageUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentHorizonMachineImageUnion,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentHorizonMachineImageUnion$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'TargetDeploymentHorizonMachineImageUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentComputeBackendType$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentComputeBackendType
+> = z.enum(TargetDeploymentComputeBackendType);
+
+/** @internal */
+export const TargetDeploymentComputeBackendHorizon$inboundSchema: z.ZodType<
+  TargetDeploymentComputeBackendHorizon,
+  unknown
+> = z.object({
+  clusters: z.record(
+    z.string(),
+    z.lazy(() => TargetDeploymentClusters$inboundSchema),
+  ),
+  horizonMachineImage: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentHorizonMachineImage$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  url: z.string(),
+  type: TargetDeploymentComputeBackendType$inboundSchema,
+});
+
+export function targetDeploymentComputeBackendHorizonFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentComputeBackendHorizon, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentComputeBackendHorizon$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentComputeBackendHorizon' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentComputeBackendUnion$inboundSchema: z.ZodType<
+  TargetDeploymentComputeBackendUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentComputeBackendHorizon$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentComputeBackendUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentComputeBackendUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentComputeBackendUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentComputeBackendUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentAliasCertificateStatus$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentAliasCertificateStatus
+> = z.enum(TargetDeploymentAliasCertificateStatus);
+
+/** @internal */
+export const TargetDeploymentAliasDnsStatus$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentAliasDnsStatus
+> = z.enum(TargetDeploymentAliasDnsStatus);
+
+/** @internal */
+export const TargetDeploymentAlias$inboundSchema: z.ZodType<
+  TargetDeploymentAlias,
+  unknown
+> = z.object({
+  certificateChain: z.nullable(z.string()).optional(),
+  certificateId: z.string(),
+  certificateStatus: TargetDeploymentAliasCertificateStatus$inboundSchema,
+  dnsError: z.nullable(z.string()).optional(),
+  dnsStatus: TargetDeploymentAliasDnsStatus$inboundSchema,
+  fqdn: z.string(),
+  issuedAt: z.nullable(z.string()).optional(),
+  privateKey: z.nullable(z.string()).optional(),
+});
+
+export function targetDeploymentAliasFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentAlias, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentAlias$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentAlias' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCertificateStatus$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentCertificateStatus
+> = z.enum(TargetDeploymentCertificateStatus);
+
+/** @internal */
+export const TargetDeploymentDnsStatus$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentDnsStatus
+> = z.enum(TargetDeploymentDnsStatus);
+
+/** @internal */
+export const TargetDeploymentEndpointsCertificateStatus$inboundSchema:
+  z.ZodEnum<typeof TargetDeploymentEndpointsCertificateStatus> = z.enum(
+    TargetDeploymentEndpointsCertificateStatus,
+  );
+
+/** @internal */
+export const TargetDeploymentEndpointsDnsStatus$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentEndpointsDnsStatus
+> = z.enum(TargetDeploymentEndpointsDnsStatus);
+
+/** @internal */
+export const TargetDeploymentEndpoints$inboundSchema: z.ZodType<
+  TargetDeploymentEndpoints,
+  unknown
+> = z.object({
+  certificateChain: z.nullable(z.string()).optional(),
+  certificateId: z.string(),
+  certificateStatus: TargetDeploymentEndpointsCertificateStatus$inboundSchema,
+  dnsError: z.nullable(z.string()).optional(),
+  dnsStatus: TargetDeploymentEndpointsDnsStatus$inboundSchema,
+  fqdn: z.string(),
+  issuedAt: z.nullable(z.string()).optional(),
+  privateKey: z.nullable(z.string()).optional(),
+});
+
+export function targetDeploymentEndpointsFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentEndpoints, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentEndpoints$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentEndpoints' from JSON`,
+  );
+}
+
+/** @internal */
+export const ConfigResources$inboundSchema: z.ZodType<
+  ConfigResources,
+  unknown
+> = z.object({
+  aliases: z.array(z.lazy(() => TargetDeploymentAlias$inboundSchema))
+    .optional(),
+  certificateChain: z.nullable(z.string()).optional(),
+  certificateId: z.string(),
+  certificateStatus: TargetDeploymentCertificateStatus$inboundSchema,
+  dnsError: z.nullable(z.string()).optional(),
+  dnsStatus: TargetDeploymentDnsStatus$inboundSchema,
+  endpoints: z.record(
+    z.string(),
+    z.lazy(() => TargetDeploymentEndpoints$inboundSchema),
+  ).optional(),
+  fqdn: z.string(),
+  issuedAt: z.nullable(z.string()).optional(),
+  privateKey: z.nullable(z.string()).optional(),
+});
+
+export function configResourcesFromJSON(
+  jsonString: string,
+): SafeParseResult<ConfigResources, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => ConfigResources$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'ConfigResources' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentDomainMetadata$inboundSchema: z.ZodType<
+  TargetDeploymentDomainMetadata,
+  unknown
+> = z.object({
+  baseDomain: z.string(),
+  hostedZoneId: z.string(),
+  publicSubdomain: z.string(),
+  resources: z.record(z.string(), z.lazy(() => ConfigResources$inboundSchema)),
+});
+
+export function targetDeploymentDomainMetadataFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentDomainMetadata, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentDomainMetadata$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentDomainMetadata' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentDomainMetadataUnion$inboundSchema: z.ZodType<
+  TargetDeploymentDomainMetadataUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentDomainMetadata$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentDomainMetadataUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentDomainMetadataUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentDomainMetadataUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentDomainMetadataUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentEnvironmentVariablesType$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentEnvironmentVariablesType
+> = z.enum(TargetDeploymentEnvironmentVariablesType);
+
+/** @internal */
+export const TargetDeploymentVariable$inboundSchema: z.ZodType<
+  TargetDeploymentVariable,
+  unknown
+> = z.object({
+  name: z.string(),
+  targetResources: z.nullable(z.array(z.string())).optional(),
+  type: TargetDeploymentEnvironmentVariablesType$inboundSchema,
+  value: z.string(),
+});
+
+export function targetDeploymentVariableFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentVariable, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentVariable$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentVariable' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentEnvironmentVariables$inboundSchema: z.ZodType<
+  TargetDeploymentEnvironmentVariables,
+  unknown
+> = z.object({
+  createdAt: z.string(),
+  hash: z.string(),
+  variables: z.array(z.lazy(() => TargetDeploymentVariable$inboundSchema)),
+});
+
+export function targetDeploymentEnvironmentVariablesFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentEnvironmentVariables, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentEnvironmentVariables$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentEnvironmentVariables' from JSON`,
+  );
+}
+
+/** @internal */
+export const ConfigPlatformKubernetes$inboundSchema: z.ZodEnum<
+  typeof ConfigPlatformKubernetes
+> = z.enum(ConfigPlatformKubernetes);
+
+/** @internal */
+export const TargetDeploymentManagementConfigKubernetes$inboundSchema:
+  z.ZodType<TargetDeploymentManagementConfigKubernetes, unknown> = z.object({
+    platform: ConfigPlatformKubernetes$inboundSchema,
+  });
+
+export function targetDeploymentManagementConfigKubernetesFromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentManagementConfigKubernetes,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentManagementConfigKubernetes$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'TargetDeploymentManagementConfigKubernetes' from JSON`,
+  );
+}
+
+/** @internal */
+export const ConfigPlatformAzure$inboundSchema: z.ZodEnum<
+  typeof ConfigPlatformAzure
+> = z.enum(ConfigPlatformAzure);
+
+/** @internal */
+export const TargetDeploymentManagementConfigAzure$inboundSchema: z.ZodType<
+  TargetDeploymentManagementConfigAzure,
+  unknown
+> = z.object({
+  managingTenantId: z.string(),
+  oidcIssuer: z.string(),
+  oidcSubject: z.string(),
+  platform: ConfigPlatformAzure$inboundSchema,
+});
+
+export function targetDeploymentManagementConfigAzureFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentManagementConfigAzure, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentManagementConfigAzure$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentManagementConfigAzure' from JSON`,
+  );
+}
+
+/** @internal */
+export const ConfigPlatformGcp$inboundSchema: z.ZodEnum<
+  typeof ConfigPlatformGcp
+> = z.enum(ConfigPlatformGcp);
+
+/** @internal */
+export const TargetDeploymentManagementConfigGcp$inboundSchema: z.ZodType<
+  TargetDeploymentManagementConfigGcp,
+  unknown
+> = z.object({
+  serviceAccountEmail: z.string(),
+  platform: ConfigPlatformGcp$inboundSchema,
+});
+
+export function targetDeploymentManagementConfigGcpFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentManagementConfigGcp, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentManagementConfigGcp$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentManagementConfigGcp' from JSON`,
+  );
+}
+
+/** @internal */
+export const ConfigPlatformAws$inboundSchema: z.ZodEnum<
+  typeof ConfigPlatformAws
+> = z.enum(ConfigPlatformAws);
+
+/** @internal */
+export const TargetDeploymentManagementConfigAws$inboundSchema: z.ZodType<
+  TargetDeploymentManagementConfigAws,
+  unknown
+> = z.object({
+  managingRoleArn: z.string(),
+  platform: ConfigPlatformAws$inboundSchema,
+});
+
+export function targetDeploymentManagementConfigAwsFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentManagementConfigAws, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentManagementConfigAws$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentManagementConfigAws' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentManagementConfigUnion$inboundSchema: z.ZodType<
+  TargetDeploymentManagementConfigUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentManagementConfigAzure$inboundSchema),
+  z.lazy(() => TargetDeploymentManagementConfigAws$inboundSchema),
+  z.lazy(() => TargetDeploymentManagementConfigGcp$inboundSchema),
+  z.lazy(() => TargetDeploymentManagementConfigKubernetes$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentManagementConfigUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentManagementConfigUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentManagementConfigUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentManagementConfigUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentMonitoring$inboundSchema: z.ZodType<
+  TargetDeploymentMonitoring,
+  unknown
+> = z.object({
+  logsAuthHeader: z.string(),
+  logsEndpoint: z.string(),
+  metricsAuthHeader: z.nullable(z.string()).optional(),
+  metricsEndpoint: z.nullable(z.string()).optional(),
+  resourceAttributes: z.record(z.string(), z.string()).optional(),
+});
+
+export function targetDeploymentMonitoringFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentMonitoring, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentMonitoring$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentMonitoring' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentMonitoringUnion$inboundSchema: z.ZodType<
+  TargetDeploymentMonitoringUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentMonitoring$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentMonitoringUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentMonitoringUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentMonitoringUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentMonitoringUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentContainers$inboundSchema: z.ZodType<
+  TargetDeploymentContainers,
+  unknown
+> = z.object({
+  cpu: z.nullable(z.number()).optional(),
+  memory: z.nullable(z.string()).optional(),
+  volumeSizeGib: z.nullable(z.int()).optional(),
+});
+
+export function targetDeploymentContainersFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentContainers, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentContainers$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentContainers' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentFailureDomains2$inboundSchema: z.ZodType<
+  TargetDeploymentFailureDomains2,
+  unknown
+> = z.object({
+  selectedFailureDomains: z.array(z.string()).optional(),
+  spread: z.int(),
+});
+
+export function targetDeploymentFailureDomains2FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentFailureDomains2, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentFailureDomains2$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentFailureDomains2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentFailureDomainsUnion2$inboundSchema: z.ZodType<
+  TargetDeploymentFailureDomainsUnion2,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentFailureDomains2$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentFailureDomainsUnion2FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentFailureDomainsUnion2, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentFailureDomainsUnion2$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentFailureDomainsUnion2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentPoolsAutoscale$inboundSchema: z.ZodType<
+  TargetDeploymentPoolsAutoscale,
+  unknown
+> = z.object({
+  failure_domains: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentFailureDomains2$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  machine: z.nullable(z.string()).optional(),
+  max: z.int(),
+  min: z.int(),
+  mode: z.literal("autoscale"),
+}).transform((v) => {
+  return remap$(v, {
+    "failure_domains": "failureDomains",
+  });
+});
+
+export function targetDeploymentPoolsAutoscaleFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentPoolsAutoscale, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentPoolsAutoscale$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentPoolsAutoscale' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentFailureDomains1$inboundSchema: z.ZodType<
+  TargetDeploymentFailureDomains1,
+  unknown
+> = z.object({
+  selectedFailureDomains: z.array(z.string()).optional(),
+  spread: z.int(),
+});
+
+export function targetDeploymentFailureDomains1FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentFailureDomains1, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentFailureDomains1$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentFailureDomains1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentFailureDomainsUnion1$inboundSchema: z.ZodType<
+  TargetDeploymentFailureDomainsUnion1,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentFailureDomains1$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentFailureDomainsUnion1FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentFailureDomainsUnion1, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentFailureDomainsUnion1$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentFailureDomainsUnion1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentPoolsFixed$inboundSchema: z.ZodType<
+  TargetDeploymentPoolsFixed,
+  unknown
+> = z.object({
+  failure_domains: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentFailureDomains1$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  machine: z.nullable(z.string()).optional(),
+  machines: z.int(),
+  mode: z.literal("fixed"),
+}).transform((v) => {
+  return remap$(v, {
+    "failure_domains": "failureDomains",
+  });
+});
+
+export function targetDeploymentPoolsFixedFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentPoolsFixed, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentPoolsFixed$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentPoolsFixed' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentPoolsUnion$inboundSchema: z.ZodType<
+  TargetDeploymentPoolsUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentPoolsFixed$inboundSchema),
+  z.lazy(() => TargetDeploymentPoolsAutoscale$inboundSchema),
+]);
+
+export function targetDeploymentPoolsUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentPoolsUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentPoolsUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentPoolsUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCompute$inboundSchema: z.ZodType<
+  TargetDeploymentCompute,
+  unknown
+> = z.object({
+  containers: z.record(
+    z.string(),
+    z.lazy(() => TargetDeploymentContainers$inboundSchema),
+  ).optional(),
+  pools: z.record(
+    z.string(),
+    z.union([
+      z.lazy(() => TargetDeploymentPoolsFixed$inboundSchema),
+      z.lazy(() => TargetDeploymentPoolsAutoscale$inboundSchema),
+    ]),
+  ).optional(),
+});
+
+export function targetDeploymentComputeFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentCompute, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentCompute$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentCompute' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentComputeUnion$inboundSchema: z.ZodType<
+  TargetDeploymentComputeUnion,
+  unknown
+> = z.union([z.lazy(() => TargetDeploymentCompute$inboundSchema), z.string()]);
+
+export function targetDeploymentComputeUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentComputeUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentComputeUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentComputeUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentDeploymentModel$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentDeploymentModel
+> = z.enum(TargetDeploymentDeploymentModel);
+
+/** @internal */
+export const TargetDeploymentAwsStackSettings$inboundSchema: z.ZodType<
+  TargetDeploymentAwsStackSettings,
+  unknown
+> = z.object({
+  certificateArn: z.string(),
+});
+
+export function targetDeploymentAwsStackSettingsFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentAwsStackSettings, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentAwsStackSettings$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentAwsStackSettings' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentStackSettingsAwsUnion$inboundSchema: z.ZodType<
+  TargetDeploymentStackSettingsAwsUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentAwsStackSettings$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentStackSettingsAwsUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentStackSettingsAwsUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentStackSettingsAwsUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentStackSettingsAwsUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const AzureConfigStackSettings$inboundSchema: z.ZodType<
+  AzureConfigStackSettings,
+  unknown
+> = z.object({
+  keyVaultCertificateId: z.string(),
+  keyVaultResourceId: z.nullable(z.string()).optional(),
+});
+
+export function azureConfigStackSettingsFromJSON(
+  jsonString: string,
+): SafeParseResult<AzureConfigStackSettings, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => AzureConfigStackSettings$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'AzureConfigStackSettings' from JSON`,
+  );
+}
+
+/** @internal */
+export const ConfigStackSettingsAzureUnion$inboundSchema: z.ZodType<
+  ConfigStackSettingsAzureUnion,
+  unknown
+> = z.union([z.lazy(() => AzureConfigStackSettings$inboundSchema), z.string()]);
+
+export function configStackSettingsAzureUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<ConfigStackSettingsAzureUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => ConfigStackSettingsAzureUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'ConfigStackSettingsAzureUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const GcpConfigStackSettings$inboundSchema: z.ZodType<
+  GcpConfigStackSettings,
+  unknown
+> = z.object({
+  certificateName: z.string(),
+});
+
+export function gcpConfigStackSettingsFromJSON(
+  jsonString: string,
+): SafeParseResult<GcpConfigStackSettings, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => GcpConfigStackSettings$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'GcpConfigStackSettings' from JSON`,
+  );
+}
+
+/** @internal */
+export const ConfigStackSettingsGcpUnion$inboundSchema: z.ZodType<
+  ConfigStackSettingsGcpUnion,
+  unknown
+> = z.union([z.lazy(() => GcpConfigStackSettings$inboundSchema), z.string()]);
+
+export function configStackSettingsGcpUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<ConfigStackSettingsGcpUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => ConfigStackSettingsGcpUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'ConfigStackSettingsGcpUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentTlsSecretRef$inboundSchema: z.ZodType<
+  TargetDeploymentTlsSecretRef,
+  unknown
+> = z.object({
+  namespace: z.nullable(z.string()).optional(),
+  secretName: z.string(),
+});
+
+export function targetDeploymentTlsSecretRefFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentTlsSecretRef, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentTlsSecretRef$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentTlsSecretRef' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentDomainsKubernetes$inboundSchema: z.ZodType<
+  TargetDeploymentDomainsKubernetes,
+  unknown
+> = z.object({
+  tlsSecretRef: z.lazy(() => TargetDeploymentTlsSecretRef$inboundSchema),
+});
+
+export function targetDeploymentDomainsKubernetesFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentDomainsKubernetes, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentDomainsKubernetes$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentDomainsKubernetes' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentDomainsKubernetesUnion$inboundSchema: z.ZodType<
+  TargetDeploymentDomainsKubernetesUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentDomainsKubernetes$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentDomainsKubernetesUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentDomainsKubernetesUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentDomainsKubernetesUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentDomainsKubernetesUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentDomainsCertificate$inboundSchema: z.ZodType<
+  TargetDeploymentDomainsCertificate,
+  unknown
+> = z.object({
+  aws: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentAwsStackSettings$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  azure: z.nullable(
+    z.union([z.lazy(() => AzureConfigStackSettings$inboundSchema), z.string()]),
+  ).optional(),
+  gcp: z.nullable(
+    z.union([z.lazy(() => GcpConfigStackSettings$inboundSchema), z.string()]),
+  ).optional(),
+  kubernetes: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentDomainsKubernetes$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+});
+
+export function targetDeploymentDomainsCertificateFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentDomainsCertificate, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentDomainsCertificate$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentDomainsCertificate' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCustomDomains$inboundSchema: z.ZodType<
+  TargetDeploymentCustomDomains,
+  unknown
+> = z.object({
+  certificate: z.lazy(() => TargetDeploymentDomainsCertificate$inboundSchema),
+  domain: z.string(),
+});
+
+export function targetDeploymentCustomDomainsFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentCustomDomains, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentCustomDomains$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentCustomDomains' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentModeLoadBalancer$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentModeLoadBalancer
+> = z.enum(TargetDeploymentModeLoadBalancer);
+
+/** @internal */
+export const TargetDeploymentPublicEndpointTargetLoadBalancer$inboundSchema:
+  z.ZodType<TargetDeploymentPublicEndpointTargetLoadBalancer, unknown> = z
+    .object({
+      cnameTarget: z.string(),
+      mode: TargetDeploymentModeLoadBalancer$inboundSchema,
+    });
+
+export function targetDeploymentPublicEndpointTargetLoadBalancerFromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentPublicEndpointTargetLoadBalancer,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentPublicEndpointTargetLoadBalancer$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'TargetDeploymentPublicEndpointTargetLoadBalancer' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentModeMachineAddresses$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentModeMachineAddresses
+> = z.enum(TargetDeploymentModeMachineAddresses);
+
+/** @internal */
+export const TargetDeploymentPublicEndpointTargetMachineAddresses$inboundSchema:
+  z.ZodType<TargetDeploymentPublicEndpointTargetMachineAddresses, unknown> = z
+    .object({
+      mode: TargetDeploymentModeMachineAddresses$inboundSchema,
+    });
+
+export function targetDeploymentPublicEndpointTargetMachineAddressesFromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentPublicEndpointTargetMachineAddresses,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentPublicEndpointTargetMachineAddresses$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'TargetDeploymentPublicEndpointTargetMachineAddresses' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentPublicEndpointTargetUnion$inboundSchema: z.ZodType<
+  TargetDeploymentPublicEndpointTargetUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentPublicEndpointTargetLoadBalancer$inboundSchema),
+  z.lazy(() =>
+    TargetDeploymentPublicEndpointTargetMachineAddresses$inboundSchema
+  ),
+  z.string(),
+]);
+
+export function targetDeploymentPublicEndpointTargetUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentPublicEndpointTargetUnion,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentPublicEndpointTargetUnion$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'TargetDeploymentPublicEndpointTargetUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentDomains$inboundSchema: z.ZodType<
+  TargetDeploymentDomains,
+  unknown
+> = z.object({
+  customDomains: z.nullable(
+    z.record(
+      z.string(),
+      z.lazy(() => TargetDeploymentCustomDomains$inboundSchema),
+    ),
+  ).optional(),
+  publicEndpointTarget: z.nullable(
+    z.union([
+      z.lazy(() =>
+        TargetDeploymentPublicEndpointTargetLoadBalancer$inboundSchema
+      ),
+      z.lazy(() =>
+        TargetDeploymentPublicEndpointTargetMachineAddresses$inboundSchema
+      ),
+      z.string(),
+    ]),
+  ).optional(),
+});
+
+export function targetDeploymentDomainsFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentDomains, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentDomains$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentDomains' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentDomainsUnion$inboundSchema: z.ZodType<
+  TargetDeploymentDomainsUnion,
+  unknown
+> = z.union([z.lazy(() => TargetDeploymentDomains$inboundSchema), z.string()]);
+
+export function targetDeploymentDomainsUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentDomainsUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentDomainsUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentDomainsUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentEndpointAccess$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentEndpointAccess
+> = z.enum(TargetDeploymentEndpointAccess);
+
+/** @internal */
+export const TargetDeploymentHeartbeats$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentHeartbeats
+> = z.enum(TargetDeploymentHeartbeats);
+
+/** @internal */
+export const TargetDeploymentCloud$inboundSchema: z.ZodType<
+  TargetDeploymentCloud,
+  unknown
+> = z.object({
+  accountId: z.nullable(z.string()).optional(),
+  clusterId: z.nullable(z.string()).optional(),
+  clusterName: z.nullable(z.string()).optional(),
+  projectId: z.nullable(z.string()).optional(),
+  region: z.nullable(z.string()).optional(),
+  resourceGroup: z.nullable(z.string()).optional(),
+  subscriptionId: z.nullable(z.string()).optional(),
+});
+
+export function targetDeploymentCloudFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentCloud, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentCloud$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentCloud' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCloudUnion$inboundSchema: z.ZodType<
+  TargetDeploymentCloudUnion,
+  unknown
+> = z.union([z.lazy(() => TargetDeploymentCloud$inboundSchema), z.string()]);
+
+export function targetDeploymentCloudUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentCloudUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentCloudUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentCloudUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentOwnership$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentOwnership
+> = z.enum(TargetDeploymentOwnership);
+
+/** @internal */
+export const TargetDeploymentCluster$inboundSchema: z.ZodType<
+  TargetDeploymentCluster,
+  unknown
+> = z.object({
+  cloud: z.nullable(
+    z.union([z.lazy(() => TargetDeploymentCloud$inboundSchema), z.string()]),
+  ).optional(),
+  namespace: z.nullable(z.string()).optional(),
+  ownership: TargetDeploymentOwnership$inboundSchema,
+});
+
+export function targetDeploymentClusterFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentCluster, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentCluster$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentCluster' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentClusterUnion$inboundSchema: z.ZodType<
+  TargetDeploymentClusterUnion,
+  unknown
+> = z.union([z.lazy(() => TargetDeploymentCluster$inboundSchema), z.string()]);
+
+export function targetDeploymentClusterUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentClusterUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentClusterUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentClusterUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCertificateNone2$inboundSchema: z.ZodType<
+  TargetDeploymentCertificateNone2,
+  unknown
+> = z.object({
+  mode: z.literal("none"),
+});
+
+export function targetDeploymentCertificateNone2FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentCertificateNone2, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentCertificateNone2$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentCertificateNone2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCertificateManagedTLSSecret2$inboundSchema:
+  z.ZodType<TargetDeploymentCertificateManagedTLSSecret2, unknown> = z.object({
+    mode: z.literal("managedTlsSecret"),
+    secretNameTemplate: z.string(),
+  });
+
+export function targetDeploymentCertificateManagedTLSSecret2FromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentCertificateManagedTLSSecret2,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentCertificateManagedTLSSecret2$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'TargetDeploymentCertificateManagedTLSSecret2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCertificateAwsAcmArn2$inboundSchema: z.ZodType<
+  TargetDeploymentCertificateAwsAcmArn2,
+  unknown
+> = z.object({
+  certificateArn: z.string(),
+  mode: z.literal("awsAcmArn"),
+});
+
+export function targetDeploymentCertificateAwsAcmArn2FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentCertificateAwsAcmArn2, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentCertificateAwsAcmArn2$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentCertificateAwsAcmArn2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCertificateManagedAcmImport2$inboundSchema:
+  z.ZodType<TargetDeploymentCertificateManagedAcmImport2, unknown> = z.object({
+    mode: z.literal("managedAcmImport"),
+    region: z.nullable(z.string()).optional(),
+    tags: z.record(z.string(), z.string()).optional(),
+  });
+
+export function targetDeploymentCertificateManagedAcmImport2FromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentCertificateManagedAcmImport2,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentCertificateManagedAcmImport2$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'TargetDeploymentCertificateManagedAcmImport2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCertificateTLSSecretRef2$inboundSchema: z.ZodType<
+  TargetDeploymentCertificateTLSSecretRef2,
+  unknown
+> = z.object({
+  namespace: z.nullable(z.string()).optional(),
+  secretName: z.string(),
+  mode: z.literal("tlsSecretRef"),
+});
+
+export function targetDeploymentCertificateTLSSecretRef2FromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentCertificateTLSSecretRef2,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentCertificateTLSSecretRef2$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'TargetDeploymentCertificateTLSSecretRef2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCertificateUnion2$inboundSchema: z.ZodType<
+  TargetDeploymentCertificateUnion2,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentCertificateTLSSecretRef2$inboundSchema),
+  z.lazy(() => TargetDeploymentCertificateManagedAcmImport2$inboundSchema),
+  z.lazy(() => TargetDeploymentCertificateAwsAcmArn2$inboundSchema),
+  z.lazy(() => TargetDeploymentCertificateManagedTLSSecret2$inboundSchema),
+  z.lazy(() => TargetDeploymentCertificateNone2$inboundSchema),
+]);
+
+export function targetDeploymentCertificateUnion2FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentCertificateUnion2, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentCertificateUnion2$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentCertificateUnion2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentModeCustom$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentModeCustom
+> = z.enum(TargetDeploymentModeCustom);
+
+/** @internal */
+export const TargetDeploymentProviderAzureApplicationGatewayForContainersEnum4$inboundSchema:
+  z.ZodEnum<
+    typeof TargetDeploymentProviderAzureApplicationGatewayForContainersEnum4
+  > = z.enum(TargetDeploymentProviderAzureApplicationGatewayForContainersEnum4);
+
+/** @internal */
+export const TargetDeploymentProviderAzureApplicationGatewayForContainers4$inboundSchema:
+  z.ZodType<
+    TargetDeploymentProviderAzureApplicationGatewayForContainers4,
+    unknown
+  > = z.object({
+    albName: z.nullable(z.string()).optional(),
+    albNamespace: z.nullable(z.string()).optional(),
+    frontend: z.string(),
+    provider:
+      TargetDeploymentProviderAzureApplicationGatewayForContainersEnum4$inboundSchema,
+  });
+
+export function targetDeploymentProviderAzureApplicationGatewayForContainers4FromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentProviderAzureApplicationGatewayForContainers4,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentProviderAzureApplicationGatewayForContainers4$inboundSchema
+        .parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderAzureApplicationGatewayForContainers4' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderGkeGatewayEnum4$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentProviderGkeGatewayEnum4
+> = z.enum(TargetDeploymentProviderGkeGatewayEnum4);
+
+/** @internal */
+export const TargetDeploymentProviderGkeGateway4$inboundSchema: z.ZodType<
+  TargetDeploymentProviderGkeGateway4,
+  unknown
+> = z.object({
+  provider: TargetDeploymentProviderGkeGatewayEnum4$inboundSchema,
+  staticAddressName: z.nullable(z.string()).optional(),
+});
+
+export function targetDeploymentProviderGkeGateway4FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentProviderGkeGateway4, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentProviderGkeGateway4$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderGkeGateway4' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderAwsAlbEnum4$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentProviderAwsAlbEnum4
+> = z.enum(TargetDeploymentProviderAwsAlbEnum4);
+
+/** @internal */
+export const TargetDeploymentProviderAwsAlb4$inboundSchema: z.ZodType<
+  TargetDeploymentProviderAwsAlb4,
+  unknown
+> = z.object({
+  ipAddressType: z.nullable(z.string()).optional(),
+  provider: TargetDeploymentProviderAwsAlbEnum4$inboundSchema,
+  scheme: z.string(),
+  subnetIds: z.array(z.string()).optional(),
+  targetType: z.string(),
+});
+
+export function targetDeploymentProviderAwsAlb4FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentProviderAwsAlb4, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentProviderAwsAlb4$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderAwsAlb4' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderUnion4$inboundSchema: z.ZodType<
+  TargetDeploymentProviderUnion4,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentProviderAwsAlb4$inboundSchema),
+  z.lazy(() =>
+    TargetDeploymentProviderAzureApplicationGatewayForContainers4$inboundSchema
+  ),
+  z.lazy(() => TargetDeploymentProviderGkeGateway4$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentProviderUnion4FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentProviderUnion4, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentProviderUnion4$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderUnion4' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentRouteGateway2$inboundSchema: z.ZodType<
+  TargetDeploymentRouteGateway2,
+  unknown
+> = z.object({
+  annotations: z.record(z.string(), z.string()).optional(),
+  controller: z.nullable(z.string()).optional(),
+  gatewayClassName: z.string(),
+  labels: z.record(z.string(), z.string()).optional(),
+  listenerPort: z.int(),
+  provider: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentProviderAwsAlb4$inboundSchema),
+      z.lazy(() =>
+        TargetDeploymentProviderAzureApplicationGatewayForContainers4$inboundSchema
+      ),
+      z.lazy(() => TargetDeploymentProviderGkeGateway4$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  routeApi: z.literal("gateway"),
+});
+
+export function targetDeploymentRouteGateway2FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentRouteGateway2, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentRouteGateway2$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentRouteGateway2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderAzureApplicationGatewayForContainersEnum3$inboundSchema:
+  z.ZodEnum<
+    typeof TargetDeploymentProviderAzureApplicationGatewayForContainersEnum3
+  > = z.enum(TargetDeploymentProviderAzureApplicationGatewayForContainersEnum3);
+
+/** @internal */
+export const TargetDeploymentProviderAzureApplicationGatewayForContainers3$inboundSchema:
+  z.ZodType<
+    TargetDeploymentProviderAzureApplicationGatewayForContainers3,
+    unknown
+  > = z.object({
+    albName: z.nullable(z.string()).optional(),
+    albNamespace: z.nullable(z.string()).optional(),
+    frontend: z.string(),
+    provider:
+      TargetDeploymentProviderAzureApplicationGatewayForContainersEnum3$inboundSchema,
+  });
+
+export function targetDeploymentProviderAzureApplicationGatewayForContainers3FromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentProviderAzureApplicationGatewayForContainers3,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentProviderAzureApplicationGatewayForContainers3$inboundSchema
+        .parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderAzureApplicationGatewayForContainers3' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderGkeGatewayEnum3$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentProviderGkeGatewayEnum3
+> = z.enum(TargetDeploymentProviderGkeGatewayEnum3);
+
+/** @internal */
+export const TargetDeploymentProviderGkeGateway3$inboundSchema: z.ZodType<
+  TargetDeploymentProviderGkeGateway3,
+  unknown
+> = z.object({
+  provider: TargetDeploymentProviderGkeGatewayEnum3$inboundSchema,
+  staticAddressName: z.nullable(z.string()).optional(),
+});
+
+export function targetDeploymentProviderGkeGateway3FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentProviderGkeGateway3, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentProviderGkeGateway3$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderGkeGateway3' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderAwsAlbEnum3$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentProviderAwsAlbEnum3
+> = z.enum(TargetDeploymentProviderAwsAlbEnum3);
+
+/** @internal */
+export const TargetDeploymentProviderAwsAlb3$inboundSchema: z.ZodType<
+  TargetDeploymentProviderAwsAlb3,
+  unknown
+> = z.object({
+  ipAddressType: z.nullable(z.string()).optional(),
+  provider: TargetDeploymentProviderAwsAlbEnum3$inboundSchema,
+  scheme: z.string(),
+  subnetIds: z.array(z.string()).optional(),
+  targetType: z.string(),
+});
+
+export function targetDeploymentProviderAwsAlb3FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentProviderAwsAlb3, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentProviderAwsAlb3$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderAwsAlb3' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderUnion3$inboundSchema: z.ZodType<
+  TargetDeploymentProviderUnion3,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentProviderAwsAlb3$inboundSchema),
+  z.lazy(() =>
+    TargetDeploymentProviderAzureApplicationGatewayForContainers3$inboundSchema
+  ),
+  z.lazy(() => TargetDeploymentProviderGkeGateway3$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentProviderUnion3FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentProviderUnion3, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentProviderUnion3$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderUnion3' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentRouteIngress2$inboundSchema: z.ZodType<
+  TargetDeploymentRouteIngress2,
+  unknown
+> = z.object({
+  annotations: z.record(z.string(), z.string()).optional(),
+  controller: z.nullable(z.string()).optional(),
+  ingressClassName: z.string(),
+  labels: z.record(z.string(), z.string()).optional(),
+  provider: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentProviderAwsAlb3$inboundSchema),
+      z.lazy(() =>
+        TargetDeploymentProviderAzureApplicationGatewayForContainers3$inboundSchema
+      ),
+      z.lazy(() => TargetDeploymentProviderGkeGateway3$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  routeApi: z.literal("ingress"),
+});
+
+export function targetDeploymentRouteIngress2FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentRouteIngress2, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentRouteIngress2$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentRouteIngress2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentRouteUnion2$inboundSchema: z.ZodType<
+  TargetDeploymentRouteUnion2,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentRouteIngress2$inboundSchema),
+  z.lazy(() => TargetDeploymentRouteGateway2$inboundSchema),
+]);
+
+export function targetDeploymentRouteUnion2FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentRouteUnion2, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentRouteUnion2$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentRouteUnion2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentExposureCustom$inboundSchema: z.ZodType<
+  TargetDeploymentExposureCustom,
+  unknown
+> = z.object({
+  certificate: z.union([
+    z.lazy(() => TargetDeploymentCertificateTLSSecretRef2$inboundSchema),
+    z.lazy(() => TargetDeploymentCertificateManagedAcmImport2$inboundSchema),
+    z.lazy(() => TargetDeploymentCertificateAwsAcmArn2$inboundSchema),
+    z.lazy(() => TargetDeploymentCertificateManagedTLSSecret2$inboundSchema),
+    z.lazy(() => TargetDeploymentCertificateNone2$inboundSchema),
+  ]),
+  domain: z.string(),
+  mode: TargetDeploymentModeCustom$inboundSchema,
+  route: z.union([
+    z.lazy(() => TargetDeploymentRouteIngress2$inboundSchema),
+    z.lazy(() => TargetDeploymentRouteGateway2$inboundSchema),
+  ]),
+});
+
+export function targetDeploymentExposureCustomFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentExposureCustom, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentExposureCustom$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentExposureCustom' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCertificateNone1$inboundSchema: z.ZodType<
+  TargetDeploymentCertificateNone1,
+  unknown
+> = z.object({
+  mode: z.literal("none"),
+});
+
+export function targetDeploymentCertificateNone1FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentCertificateNone1, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentCertificateNone1$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentCertificateNone1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCertificateManagedTLSSecret1$inboundSchema:
+  z.ZodType<TargetDeploymentCertificateManagedTLSSecret1, unknown> = z.object({
+    mode: z.literal("managedTlsSecret"),
+    secretNameTemplate: z.string(),
+  });
+
+export function targetDeploymentCertificateManagedTLSSecret1FromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentCertificateManagedTLSSecret1,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentCertificateManagedTLSSecret1$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'TargetDeploymentCertificateManagedTLSSecret1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCertificateAwsAcmArn1$inboundSchema: z.ZodType<
+  TargetDeploymentCertificateAwsAcmArn1,
+  unknown
+> = z.object({
+  certificateArn: z.string(),
+  mode: z.literal("awsAcmArn"),
+});
+
+export function targetDeploymentCertificateAwsAcmArn1FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentCertificateAwsAcmArn1, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentCertificateAwsAcmArn1$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentCertificateAwsAcmArn1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCertificateManagedAcmImport1$inboundSchema:
+  z.ZodType<TargetDeploymentCertificateManagedAcmImport1, unknown> = z.object({
+    mode: z.literal("managedAcmImport"),
+    region: z.nullable(z.string()).optional(),
+    tags: z.record(z.string(), z.string()).optional(),
+  });
+
+export function targetDeploymentCertificateManagedAcmImport1FromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentCertificateManagedAcmImport1,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentCertificateManagedAcmImport1$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'TargetDeploymentCertificateManagedAcmImport1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCertificateTLSSecretRef1$inboundSchema: z.ZodType<
+  TargetDeploymentCertificateTLSSecretRef1,
+  unknown
+> = z.object({
+  namespace: z.nullable(z.string()).optional(),
+  secretName: z.string(),
+  mode: z.literal("tlsSecretRef"),
+});
+
+export function targetDeploymentCertificateTLSSecretRef1FromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentCertificateTLSSecretRef1,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentCertificateTLSSecretRef1$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'TargetDeploymentCertificateTLSSecretRef1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentCertificateUnion1$inboundSchema: z.ZodType<
+  TargetDeploymentCertificateUnion1,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentCertificateTLSSecretRef1$inboundSchema),
+  z.lazy(() => TargetDeploymentCertificateManagedAcmImport1$inboundSchema),
+  z.lazy(() => TargetDeploymentCertificateAwsAcmArn1$inboundSchema),
+  z.lazy(() => TargetDeploymentCertificateManagedTLSSecret1$inboundSchema),
+  z.lazy(() => TargetDeploymentCertificateNone1$inboundSchema),
+]);
+
+export function targetDeploymentCertificateUnion1FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentCertificateUnion1, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentCertificateUnion1$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentCertificateUnion1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentModeGenerated$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentModeGenerated
+> = z.enum(TargetDeploymentModeGenerated);
+
+/** @internal */
+export const TargetDeploymentProviderAzureApplicationGatewayForContainersEnum2$inboundSchema:
+  z.ZodEnum<
+    typeof TargetDeploymentProviderAzureApplicationGatewayForContainersEnum2
+  > = z.enum(TargetDeploymentProviderAzureApplicationGatewayForContainersEnum2);
+
+/** @internal */
+export const TargetDeploymentProviderAzureApplicationGatewayForContainers2$inboundSchema:
+  z.ZodType<
+    TargetDeploymentProviderAzureApplicationGatewayForContainers2,
+    unknown
+  > = z.object({
+    albName: z.nullable(z.string()).optional(),
+    albNamespace: z.nullable(z.string()).optional(),
+    frontend: z.string(),
+    provider:
+      TargetDeploymentProviderAzureApplicationGatewayForContainersEnum2$inboundSchema,
+  });
+
+export function targetDeploymentProviderAzureApplicationGatewayForContainers2FromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentProviderAzureApplicationGatewayForContainers2,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentProviderAzureApplicationGatewayForContainers2$inboundSchema
+        .parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderAzureApplicationGatewayForContainers2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderGkeGatewayEnum2$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentProviderGkeGatewayEnum2
+> = z.enum(TargetDeploymentProviderGkeGatewayEnum2);
+
+/** @internal */
+export const TargetDeploymentProviderGkeGateway2$inboundSchema: z.ZodType<
+  TargetDeploymentProviderGkeGateway2,
+  unknown
+> = z.object({
+  provider: TargetDeploymentProviderGkeGatewayEnum2$inboundSchema,
+  staticAddressName: z.nullable(z.string()).optional(),
+});
+
+export function targetDeploymentProviderGkeGateway2FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentProviderGkeGateway2, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentProviderGkeGateway2$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderGkeGateway2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderAwsAlbEnum2$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentProviderAwsAlbEnum2
+> = z.enum(TargetDeploymentProviderAwsAlbEnum2);
+
+/** @internal */
+export const TargetDeploymentProviderAwsAlb2$inboundSchema: z.ZodType<
+  TargetDeploymentProviderAwsAlb2,
+  unknown
+> = z.object({
+  ipAddressType: z.nullable(z.string()).optional(),
+  provider: TargetDeploymentProviderAwsAlbEnum2$inboundSchema,
+  scheme: z.string(),
+  subnetIds: z.array(z.string()).optional(),
+  targetType: z.string(),
+});
+
+export function targetDeploymentProviderAwsAlb2FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentProviderAwsAlb2, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentProviderAwsAlb2$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderAwsAlb2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderUnion2$inboundSchema: z.ZodType<
+  TargetDeploymentProviderUnion2,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentProviderAwsAlb2$inboundSchema),
+  z.lazy(() =>
+    TargetDeploymentProviderAzureApplicationGatewayForContainers2$inboundSchema
+  ),
+  z.lazy(() => TargetDeploymentProviderGkeGateway2$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentProviderUnion2FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentProviderUnion2, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentProviderUnion2$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderUnion2' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentRouteGateway1$inboundSchema: z.ZodType<
+  TargetDeploymentRouteGateway1,
+  unknown
+> = z.object({
+  annotations: z.record(z.string(), z.string()).optional(),
+  controller: z.nullable(z.string()).optional(),
+  gatewayClassName: z.string(),
+  labels: z.record(z.string(), z.string()).optional(),
+  listenerPort: z.int(),
+  provider: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentProviderAwsAlb2$inboundSchema),
+      z.lazy(() =>
+        TargetDeploymentProviderAzureApplicationGatewayForContainers2$inboundSchema
+      ),
+      z.lazy(() => TargetDeploymentProviderGkeGateway2$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  routeApi: z.literal("gateway"),
+});
+
+export function targetDeploymentRouteGateway1FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentRouteGateway1, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentRouteGateway1$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentRouteGateway1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderAzureApplicationGatewayForContainersEnum1$inboundSchema:
+  z.ZodEnum<
+    typeof TargetDeploymentProviderAzureApplicationGatewayForContainersEnum1
+  > = z.enum(TargetDeploymentProviderAzureApplicationGatewayForContainersEnum1);
+
+/** @internal */
+export const TargetDeploymentProviderAzureApplicationGatewayForContainers1$inboundSchema:
+  z.ZodType<
+    TargetDeploymentProviderAzureApplicationGatewayForContainers1,
+    unknown
+  > = z.object({
+    albName: z.nullable(z.string()).optional(),
+    albNamespace: z.nullable(z.string()).optional(),
+    frontend: z.string(),
+    provider:
+      TargetDeploymentProviderAzureApplicationGatewayForContainersEnum1$inboundSchema,
+  });
+
+export function targetDeploymentProviderAzureApplicationGatewayForContainers1FromJSON(
+  jsonString: string,
+): SafeParseResult<
+  TargetDeploymentProviderAzureApplicationGatewayForContainers1,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentProviderAzureApplicationGatewayForContainers1$inboundSchema
+        .parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderAzureApplicationGatewayForContainers1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderGkeGatewayEnum1$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentProviderGkeGatewayEnum1
+> = z.enum(TargetDeploymentProviderGkeGatewayEnum1);
+
+/** @internal */
+export const TargetDeploymentProviderGkeGateway1$inboundSchema: z.ZodType<
+  TargetDeploymentProviderGkeGateway1,
+  unknown
+> = z.object({
+  provider: TargetDeploymentProviderGkeGatewayEnum1$inboundSchema,
+  staticAddressName: z.nullable(z.string()).optional(),
+});
+
+export function targetDeploymentProviderGkeGateway1FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentProviderGkeGateway1, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentProviderGkeGateway1$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderGkeGateway1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderAwsAlbEnum1$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentProviderAwsAlbEnum1
+> = z.enum(TargetDeploymentProviderAwsAlbEnum1);
+
+/** @internal */
+export const TargetDeploymentProviderAwsAlb1$inboundSchema: z.ZodType<
+  TargetDeploymentProviderAwsAlb1,
+  unknown
+> = z.object({
+  ipAddressType: z.nullable(z.string()).optional(),
+  provider: TargetDeploymentProviderAwsAlbEnum1$inboundSchema,
+  scheme: z.string(),
+  subnetIds: z.array(z.string()).optional(),
+  targetType: z.string(),
+});
+
+export function targetDeploymentProviderAwsAlb1FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentProviderAwsAlb1, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentProviderAwsAlb1$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderAwsAlb1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentProviderUnion1$inboundSchema: z.ZodType<
+  TargetDeploymentProviderUnion1,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentProviderAwsAlb1$inboundSchema),
+  z.lazy(() =>
+    TargetDeploymentProviderAzureApplicationGatewayForContainers1$inboundSchema
+  ),
+  z.lazy(() => TargetDeploymentProviderGkeGateway1$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentProviderUnion1FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentProviderUnion1, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentProviderUnion1$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentProviderUnion1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentRouteIngress1$inboundSchema: z.ZodType<
+  TargetDeploymentRouteIngress1,
+  unknown
+> = z.object({
+  annotations: z.record(z.string(), z.string()).optional(),
+  controller: z.nullable(z.string()).optional(),
+  ingressClassName: z.string(),
+  labels: z.record(z.string(), z.string()).optional(),
+  provider: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentProviderAwsAlb1$inboundSchema),
+      z.lazy(() =>
+        TargetDeploymentProviderAzureApplicationGatewayForContainers1$inboundSchema
+      ),
+      z.lazy(() => TargetDeploymentProviderGkeGateway1$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  routeApi: z.literal("ingress"),
+});
+
+export function targetDeploymentRouteIngress1FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentRouteIngress1, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentRouteIngress1$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentRouteIngress1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentRouteUnion1$inboundSchema: z.ZodType<
+  TargetDeploymentRouteUnion1,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentRouteIngress1$inboundSchema),
+  z.lazy(() => TargetDeploymentRouteGateway1$inboundSchema),
+]);
+
+export function targetDeploymentRouteUnion1FromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentRouteUnion1, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentRouteUnion1$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentRouteUnion1' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentExposureGenerated$inboundSchema: z.ZodType<
+  TargetDeploymentExposureGenerated,
+  unknown
+> = z.object({
+  certificate: z.union([
+    z.lazy(() => TargetDeploymentCertificateTLSSecretRef1$inboundSchema),
+    z.lazy(() => TargetDeploymentCertificateManagedAcmImport1$inboundSchema),
+    z.lazy(() => TargetDeploymentCertificateAwsAcmArn1$inboundSchema),
+    z.lazy(() => TargetDeploymentCertificateManagedTLSSecret1$inboundSchema),
+    z.lazy(() => TargetDeploymentCertificateNone1$inboundSchema),
+  ]),
+  mode: TargetDeploymentModeGenerated$inboundSchema,
+  route: z.union([
+    z.lazy(() => TargetDeploymentRouteIngress1$inboundSchema),
+    z.lazy(() => TargetDeploymentRouteGateway1$inboundSchema),
+  ]),
+});
+
+export function targetDeploymentExposureGeneratedFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentExposureGenerated, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentExposureGenerated$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentExposureGenerated' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentModeDisabled$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentModeDisabled
+> = z.enum(TargetDeploymentModeDisabled);
+
+/** @internal */
+export const TargetDeploymentExposureDisabled$inboundSchema: z.ZodType<
+  TargetDeploymentExposureDisabled,
+  unknown
+> = z.object({
+  mode: TargetDeploymentModeDisabled$inboundSchema,
+});
+
+export function targetDeploymentExposureDisabledFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentExposureDisabled, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentExposureDisabled$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentExposureDisabled' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentExposureUnion$inboundSchema: z.ZodType<
+  TargetDeploymentExposureUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentExposureCustom$inboundSchema),
+  z.lazy(() => TargetDeploymentExposureGenerated$inboundSchema),
+  z.lazy(() => TargetDeploymentExposureDisabled$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentExposureUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentExposureUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentExposureUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentExposureUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentKubernetes$inboundSchema: z.ZodType<
+  TargetDeploymentKubernetes,
+  unknown
+> = z.object({
+  cluster: z.nullable(
+    z.union([z.lazy(() => TargetDeploymentCluster$inboundSchema), z.string()]),
+  ).optional(),
+  exposure: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentExposureCustom$inboundSchema),
+      z.lazy(() => TargetDeploymentExposureGenerated$inboundSchema),
+      z.lazy(() => TargetDeploymentExposureDisabled$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+});
+
+export function targetDeploymentKubernetesFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentKubernetes, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentKubernetes$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentKubernetes' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentKubernetesUnion$inboundSchema: z.ZodType<
+  TargetDeploymentKubernetesUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentKubernetes$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentKubernetesUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentKubernetesUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentKubernetesUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentKubernetesUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentTypeByoVnetAzure$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentTypeByoVnetAzure
+> = z.enum(TargetDeploymentTypeByoVnetAzure);
+
+/** @internal */
+export const TargetDeploymentNetworkByoVnetAzure$inboundSchema: z.ZodType<
+  TargetDeploymentNetworkByoVnetAzure,
+  unknown
+> = z.object({
+  application_gateway_subnet_name: z.nullable(z.string()).optional(),
+  private_endpoint_subnet_name: z.nullable(z.string()).optional(),
+  private_subnet_name: z.string(),
+  public_subnet_name: z.string(),
+  type: TargetDeploymentTypeByoVnetAzure$inboundSchema,
+  vnet_resource_id: z.string(),
+}).transform((v) => {
+  return remap$(v, {
+    "application_gateway_subnet_name": "applicationGatewaySubnetName",
+    "private_endpoint_subnet_name": "privateEndpointSubnetName",
+    "private_subnet_name": "privateSubnetName",
+    "public_subnet_name": "publicSubnetName",
+    "vnet_resource_id": "vnetResourceId",
+  });
+});
+
+export function targetDeploymentNetworkByoVnetAzureFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentNetworkByoVnetAzure, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      TargetDeploymentNetworkByoVnetAzure$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentNetworkByoVnetAzure' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentTypeByoVpcGcp$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentTypeByoVpcGcp
+> = z.enum(TargetDeploymentTypeByoVpcGcp);
+
+/** @internal */
+export const TargetDeploymentNetworkByoVpcGcp$inboundSchema: z.ZodType<
+  TargetDeploymentNetworkByoVpcGcp,
+  unknown
+> = z.object({
+  network_name: z.string(),
+  region: z.string(),
+  subnet_name: z.string(),
+  type: TargetDeploymentTypeByoVpcGcp$inboundSchema,
+}).transform((v) => {
+  return remap$(v, {
+    "network_name": "networkName",
+    "subnet_name": "subnetName",
+  });
+});
+
+export function targetDeploymentNetworkByoVpcGcpFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentNetworkByoVpcGcp, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentNetworkByoVpcGcp$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentNetworkByoVpcGcp' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentTypeByoVpcAws$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentTypeByoVpcAws
+> = z.enum(TargetDeploymentTypeByoVpcAws);
+
+/** @internal */
+export const TargetDeploymentNetworkByoVpcAws$inboundSchema: z.ZodType<
+  TargetDeploymentNetworkByoVpcAws,
+  unknown
+> = z.object({
+  private_subnet_ids: z.array(z.string()),
+  public_subnet_ids: z.array(z.string()),
+  security_group_ids: z.array(z.string()).optional(),
+  type: TargetDeploymentTypeByoVpcAws$inboundSchema,
+  vpc_id: z.string(),
+}).transform((v) => {
+  return remap$(v, {
+    "private_subnet_ids": "privateSubnetIds",
+    "public_subnet_ids": "publicSubnetIds",
+    "security_group_ids": "securityGroupIds",
+    "vpc_id": "vpcId",
+  });
+});
+
+export function targetDeploymentNetworkByoVpcAwsFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentNetworkByoVpcAws, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentNetworkByoVpcAws$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentNetworkByoVpcAws' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentTypeCreate$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentTypeCreate
+> = z.enum(TargetDeploymentTypeCreate);
+
+/** @internal */
+export const TargetDeploymentNetworkCreate$inboundSchema: z.ZodType<
+  TargetDeploymentNetworkCreate,
+  unknown
+> = z.object({
+  availability_zones: z.int().optional(),
+  cidr: z.nullable(z.string()).optional(),
+  type: TargetDeploymentTypeCreate$inboundSchema,
+}).transform((v) => {
+  return remap$(v, {
+    "availability_zones": "availabilityZones",
+  });
+});
+
+export function targetDeploymentNetworkCreateFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentNetworkCreate, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentNetworkCreate$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentNetworkCreate' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentTypeUseDefault$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentTypeUseDefault
+> = z.enum(TargetDeploymentTypeUseDefault);
+
+/** @internal */
+export const TargetDeploymentNetworkUseDefault$inboundSchema: z.ZodType<
+  TargetDeploymentNetworkUseDefault,
+  unknown
+> = z.object({
+  type: TargetDeploymentTypeUseDefault$inboundSchema,
+});
+
+export function targetDeploymentNetworkUseDefaultFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentNetworkUseDefault, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentNetworkUseDefault$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentNetworkUseDefault' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentNetworkUnion$inboundSchema: z.ZodType<
+  TargetDeploymentNetworkUnion,
+  unknown
+> = z.union([
+  z.lazy(() => TargetDeploymentNetworkByoVpcAws$inboundSchema),
+  z.lazy(() => TargetDeploymentNetworkByoVpcGcp$inboundSchema),
+  z.lazy(() => TargetDeploymentNetworkByoVnetAzure$inboundSchema),
+  z.lazy(() => TargetDeploymentNetworkUseDefault$inboundSchema),
+  z.lazy(() => TargetDeploymentNetworkCreate$inboundSchema),
+  z.string(),
+]);
+
+export function targetDeploymentNetworkUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentNetworkUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentNetworkUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentNetworkUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentSetupManagement$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentSetupManagement
+> = z.enum(TargetDeploymentSetupManagement);
+
+/** @internal */
+export const TargetDeploymentTelemetry$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentTelemetry
+> = z.enum(TargetDeploymentTelemetry);
+
+/** @internal */
+export const TargetDeploymentUpdates$inboundSchema: z.ZodEnum<
+  typeof TargetDeploymentUpdates
+> = z.enum(TargetDeploymentUpdates);
+
+/** @internal */
+export const TargetDeploymentStackSettings$inboundSchema: z.ZodType<
+  TargetDeploymentStackSettings,
+  unknown
+> = z.object({
+  compute: z.nullable(
+    z.union([z.lazy(() => TargetDeploymentCompute$inboundSchema), z.string()]),
+  ).optional(),
+  deploymentModel: TargetDeploymentDeploymentModel$inboundSchema.optional(),
+  domains: z.nullable(
+    z.union([z.lazy(() => TargetDeploymentDomains$inboundSchema), z.string()]),
+  ).optional(),
+  endpointAccess: TargetDeploymentEndpointAccess$inboundSchema.optional(),
+  externalBindings: z.nullable(
+    z.record(z.string(), ExternalBindingUnion$inboundSchema),
+  ).optional(),
+  heartbeats: TargetDeploymentHeartbeats$inboundSchema.optional(),
+  kubernetes: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentKubernetes$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  network: z.nullable(
+    z.union([
+      z.lazy(() => TargetDeploymentNetworkByoVpcAws$inboundSchema),
+      z.lazy(() => TargetDeploymentNetworkByoVpcGcp$inboundSchema),
+      z.lazy(() => TargetDeploymentNetworkByoVnetAzure$inboundSchema),
+      z.lazy(() => TargetDeploymentNetworkUseDefault$inboundSchema),
+      z.lazy(() => TargetDeploymentNetworkCreate$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+  publicEndpoints: z.nullable(
+    z.record(z.string(), z.record(z.string(), z.string())),
+  ).optional(),
+  quotaWarningOverrides: z.array(z.string()).optional(),
+  setupManagement: TargetDeploymentSetupManagement$inboundSchema.optional(),
+  telemetry: TargetDeploymentTelemetry$inboundSchema.optional(),
+  updates: TargetDeploymentUpdates$inboundSchema.optional(),
+});
+
+export function targetDeploymentStackSettingsFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentStackSettings, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentStackSettings$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentStackSettings' from JSON`,
+  );
+}
+
+/** @internal */
+export const TargetDeploymentVolumeRestore$inboundSchema: z.ZodType<
+  TargetDeploymentVolumeRestore,
+  unknown
+> = z.object({
+  ordinal: z.int(),
+  requestId: z.string(),
+  resourceId: z.string(),
+  snapshotId: z.string(),
+});
+
+export function targetDeploymentVolumeRestoreFromJSON(
+  jsonString: string,
+): SafeParseResult<TargetDeploymentVolumeRestore, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => TargetDeploymentVolumeRestore$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'TargetDeploymentVolumeRestore' from JSON`,
+  );
+}