@alienplatform/platform-api 3.3.36 → 3.3.38

package/src/models/deployment.ts

@@ -12,6 +12,8 @@ import { Result as SafeParseResult } from "../types/fp.js";
 import {
   DeploymentBasePlatform,
   DeploymentBasePlatform$inboundSchema,
+  DeploymentCredentialRetryUnion,
+  DeploymentCredentialRetryUnion$inboundSchema,
   DeploymentDeployerSecret,
   DeploymentDeployerSecret$inboundSchema,
   DeploymentEnvironmentInfoUnion,
@@ -26,17 +28,17 @@ import {
   DeploymentStackState$inboundSchema,
   DeploymentStatus,
   DeploymentStatus$inboundSchema,
-} from "./deploymentpendingpreparedstackdefaultunion.js";
+} from "./deploymentpendingpreparedstackdefaultstringlist.js";
 import {
   DeploymentPendingPreparedStackUnion,
   DeploymentPendingPreparedStackUnion$inboundSchema,
+  DeploymentPreparedStackApprovalPlugins,
+  DeploymentPreparedStackApprovalPlugins$inboundSchema,
   DeploymentPreparedStackCustom,
   DeploymentPreparedStackCustom$inboundSchema,
   DeploymentPreparedStackInput,
   DeploymentPreparedStackInput$inboundSchema,
-  DeploymentPreparedStackPlugins,
-  DeploymentPreparedStackPlugins$inboundSchema,
-} from "./deploymentpreparedstackplugins.js";
+} from "./deploymentpreparedstackapprovalplugins.js";
 import {
   DeploymentPurpose,
   DeploymentPurpose$inboundSchema,
@@ -55,6 +57,84 @@ import {
   ReportedOperation$inboundSchema,
 } from "./reportedoperation.js";
 
+/**
+ * Whether matching operations run without approval.
+ */
+export const DeploymentPreparedStackApprovalPluginsEnum = {
+  Auto: "auto",
+  Manual: "manual",
+} as const;
+/**
+ * Whether matching operations run without approval.
+ */
+export type DeploymentPreparedStackApprovalPluginsEnum = ClosedEnum<
+  typeof DeploymentPreparedStackApprovalPluginsEnum
+>;
+
+/**
+ * Approval rule for the operations a pattern matches.
+ */
+export type DeploymentPreparedStackPluginsApprovalUnion =
+  | DeploymentPreparedStackApprovalPlugins
+  | DeploymentPreparedStackApprovalPluginsEnum;
+
+export type DeploymentPreparedStackSettingsPlugins3 = {
+  /**
+   * Environment variable name.
+   */
+  env: string;
+};
+
+export type DeploymentPreparedStackSettingsPlugins2 = {
+  /**
+   * Resource ids in the same stack.
+   */
+  resources: Array<string>;
+};
+
+export type DeploymentPreparedStackSettingsPlugins1 = {
+  /**
+   * Stack input id.
+   */
+  input: string;
+};
+
+/**
+ * Value of one plugin setting.
+ */
+export type DeploymentPreparedStackPluginsSettingsUnion =
+  | DeploymentPreparedStackSettingsPlugins1
+  | DeploymentPreparedStackSettingsPlugins2
+  | DeploymentPreparedStackSettingsPlugins3
+  | string;
+
+/**
+ * Settings and approval rules for one plugin.
+ */
+export type DeploymentPreparedStackPlugins = {
+  /**
+   * Approval rule per operation: an operation name, or `*` for all of them.
+   *
+   * @remarks
+   * Operations no rule matches need approval.
+   */
+  approval?: {
+    [k: string]:
+      | DeploymentPreparedStackApprovalPlugins
+      | DeploymentPreparedStackApprovalPluginsEnum;
+  } | undefined;
+  /**
+   * Values for the settings the plugin's manifest declares.
+   */
+  settings?: {
+    [k: string]:
+      | DeploymentPreparedStackSettingsPlugins1
+      | DeploymentPreparedStackSettingsPlugins2
+      | DeploymentPreparedStackSettingsPlugins3
+      | string;
+  } | undefined;
+};
+
 /**
  * Operations declared by a stack, or by an Operator installed on its own.
  */
@@ -1500,6 +1580,10 @@ export type DeploymentRuntimeMetadata = {
    * Runtime settings and release contents must never create or change this grant.
    */
   automaticSetup?: boolean | undefined;
+  /**
+   * Bounded credential retry state shared by all deployment drivers.
+   */
+  credentialRetry?: DeploymentCredentialRetryUnion | null | undefined;
   /**
    * Whether each vault-native deployer secret is in the customer's secret
    *
@@ -1857,14 +1941,175 @@ export type Deployment = {
   customerKeyUnavailable?: boolean | undefined;
 };
 
+/** @internal */
+export const DeploymentPreparedStackApprovalPluginsEnum$inboundSchema:
+  z.ZodEnum<typeof DeploymentPreparedStackApprovalPluginsEnum> = z.enum(
+    DeploymentPreparedStackApprovalPluginsEnum,
+  );
+
+/** @internal */
+export const DeploymentPreparedStackPluginsApprovalUnion$inboundSchema:
+  z.ZodType<DeploymentPreparedStackPluginsApprovalUnion, unknown> = z.union([
+    DeploymentPreparedStackApprovalPlugins$inboundSchema,
+    DeploymentPreparedStackApprovalPluginsEnum$inboundSchema,
+  ]);
+
+export function deploymentPreparedStackPluginsApprovalUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<
+  DeploymentPreparedStackPluginsApprovalUnion,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      DeploymentPreparedStackPluginsApprovalUnion$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'DeploymentPreparedStackPluginsApprovalUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const DeploymentPreparedStackSettingsPlugins3$inboundSchema: z.ZodType<
+  DeploymentPreparedStackSettingsPlugins3,
+  unknown
+> = z.object({
+  env: z.string(),
+});
+
+export function deploymentPreparedStackSettingsPlugins3FromJSON(
+  jsonString: string,
+): SafeParseResult<
+  DeploymentPreparedStackSettingsPlugins3,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      DeploymentPreparedStackSettingsPlugins3$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'DeploymentPreparedStackSettingsPlugins3' from JSON`,
+  );
+}
+
+/** @internal */
+export const DeploymentPreparedStackSettingsPlugins2$inboundSchema: z.ZodType<
+  DeploymentPreparedStackSettingsPlugins2,
+  unknown
+> = z.object({
+  resources: z.array(z.string()),
+});
+
+export function deploymentPreparedStackSettingsPlugins2FromJSON(
+  jsonString: string,
+): SafeParseResult<
+  DeploymentPreparedStackSettingsPlugins2,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      DeploymentPreparedStackSettingsPlugins2$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'DeploymentPreparedStackSettingsPlugins2' from JSON`,
+  );
+}
+
+/** @internal */
+export const DeploymentPreparedStackSettingsPlugins1$inboundSchema: z.ZodType<
+  DeploymentPreparedStackSettingsPlugins1,
+  unknown
+> = z.object({
+  input: z.string(),
+});
+
+export function deploymentPreparedStackSettingsPlugins1FromJSON(
+  jsonString: string,
+): SafeParseResult<
+  DeploymentPreparedStackSettingsPlugins1,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      DeploymentPreparedStackSettingsPlugins1$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'DeploymentPreparedStackSettingsPlugins1' from JSON`,
+  );
+}
+
+/** @internal */
+export const DeploymentPreparedStackPluginsSettingsUnion$inboundSchema:
+  z.ZodType<DeploymentPreparedStackPluginsSettingsUnion, unknown> = z.union([
+    z.lazy(() => DeploymentPreparedStackSettingsPlugins1$inboundSchema),
+    z.lazy(() => DeploymentPreparedStackSettingsPlugins2$inboundSchema),
+    z.lazy(() => DeploymentPreparedStackSettingsPlugins3$inboundSchema),
+    z.string(),
+  ]);
+
+export function deploymentPreparedStackPluginsSettingsUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<
+  DeploymentPreparedStackPluginsSettingsUnion,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      DeploymentPreparedStackPluginsSettingsUnion$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'DeploymentPreparedStackPluginsSettingsUnion' from JSON`,
+  );
+}
+
+/** @internal */
+export const DeploymentPreparedStackPlugins$inboundSchema: z.ZodType<
+  DeploymentPreparedStackPlugins,
+  unknown
+> = z.object({
+  approval: z.record(
+    z.string(),
+    z.union([
+      DeploymentPreparedStackApprovalPlugins$inboundSchema,
+      DeploymentPreparedStackApprovalPluginsEnum$inboundSchema,
+    ]),
+  ).optional(),
+  settings: z.record(
+    z.string(),
+    z.union([
+      z.lazy(() => DeploymentPreparedStackSettingsPlugins1$inboundSchema),
+      z.lazy(() => DeploymentPreparedStackSettingsPlugins2$inboundSchema),
+      z.lazy(() => DeploymentPreparedStackSettingsPlugins3$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
+});
+
+export function deploymentPreparedStackPluginsFromJSON(
+  jsonString: string,
+): SafeParseResult<DeploymentPreparedStackPlugins, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => DeploymentPreparedStackPlugins$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'DeploymentPreparedStackPlugins' from JSON`,
+  );
+}
+
 /** @internal */
 export const DeploymentPreparedStackOperations$inboundSchema: z.ZodType<
   DeploymentPreparedStackOperations,
   unknown
 > = z.object({
   custom: z.array(DeploymentPreparedStackCustom$inboundSchema).optional(),
-  plugins: z.record(z.string(), DeploymentPreparedStackPlugins$inboundSchema)
-    .optional(),
+  plugins: z.record(
+    z.string(),
+    z.lazy(() => DeploymentPreparedStackPlugins$inboundSchema),
+  ).optional(),
 });
 
 export function deploymentPreparedStackOperationsFromJSON(
@@ -3944,6 +4189,8 @@ export const DeploymentRuntimeMetadata$inboundSchema: z.ZodType<
   unknown
 > = z.object({
   automaticSetup: z.boolean().optional(),
+  credentialRetry: z.nullable(DeploymentCredentialRetryUnion$inboundSchema)
+    .optional(),
   deployerSecrets: z.array(DeploymentDeployerSecret$inboundSchema).optional(),
   directSetupRevision: z.nullable(z.string()).optional(),
   initialSetupAuthority: DeploymentInitialSetupAuthority$inboundSchema

package/src/models/deploymentcheckrequestedevent.ts

@@ -0,0 +1,35 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { safeParse } from "../lib/schemas.js";
+import { Result as SafeParseResult } from "../types/fp.js";
+import { SDKValidationError } from "./errors/sdkvalidationerror.js";
+
+export type DeploymentCheckRequestedEvent = {
+  type: "DeploymentCheckRequested";
+  /**
+   * Unique identifier for the deployment.
+   */
+  deploymentId: string;
+};
+
+/** @internal */
+export const DeploymentCheckRequestedEvent$inboundSchema: z.ZodType<
+  DeploymentCheckRequestedEvent,
+  unknown
+> = z.object({
+  type: z.literal("DeploymentCheckRequested"),
+  deploymentId: z.string(),
+});
+
+export function deploymentCheckRequestedEventFromJSON(
+  jsonString: string,
+): SafeParseResult<DeploymentCheckRequestedEvent, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => DeploymentCheckRequestedEvent$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'DeploymentCheckRequestedEvent' from JSON`,
+  );
+}

package/src/models/deploymentconfig.ts

@@ -572,6 +572,26 @@ export type DeploymentConfigEnvironmentVariables = {
   variables: Array<DeploymentConfigVariable>;
 };
 
+/**
+ * Identity of one installation. The runtime constructs this from its
+ *
+ * @remarks
+ * authenticated deployment record, never names or imported target metadata.
+ */
+export type DeploymentConfigGcpFederationScope = {
+  /**
+   * Immutable ID allocated by the control plane before cloud setup.
+   *
+   * @remarks
+   * Names, display metadata and imported resource identifiers cannot replace it.
+   */
+  deploymentId: string;
+};
+
+export type DeploymentConfigGcpFederationScopeUnion =
+  | DeploymentConfigGcpFederationScope
+  | string;
+
 export const DeploymentConfigPlatformKubernetes = {
   Kubernetes: "kubernetes",
 } as const;
@@ -609,6 +629,24 @@ export type DeploymentConfigManagementConfigAzure = {
   platform: DeploymentConfigPlatformAzure;
 };
 
+/**
+ * The exact manager identity trusted by a deployment-owned identity pool.
+ */
+export type DeploymentConfigFederationTrust = {
+  /**
+   * OIDC issuer; Google or the manager's Kubernetes issuer.
+   */
+  issuer: string;
+  /**
+   * Exact immutable Google account ID or Kubernetes service-account subject.
+   */
+  subject: string;
+};
+
+export type DeploymentConfigFederationTrustUnion =
+  | DeploymentConfigFederationTrust
+  | string;
+
 export const DeploymentConfigPlatformGcp = {
   Gcp: "gcp",
 } as const;
@@ -620,8 +658,9 @@ export type DeploymentConfigPlatformGcp = ClosedEnum<
  * GCP management configuration extracted from stack settings
  */
 export type DeploymentConfigManagementConfigGcp = {
+  federationTrust?: DeploymentConfigFederationTrust | string | null | undefined;
   /**
-   * Service account email for management roles
+   * Linked source account metadata; never a direct target trust grant.
    */
   serviceAccountEmail: string;
   platform: DeploymentConfigPlatformGcp;
@@ -2028,6 +2067,11 @@ export type DeploymentConfig = {
    * Validated at runtime: binding type must match resource type.
    */
   externalBindings?: { [k: string]: ExternalBindingUnion } | undefined;
+  gcpFederationScope?:
+    | DeploymentConfigGcpFederationScope
+    | string
+    | null
+    | undefined;
   /**
    * Deployer-provided stack input values, keyed by input id. A resource
    *
@@ -2733,6 +2777,50 @@ export function deploymentConfigEnvironmentVariablesFromJSON(
   );
 }
 
+/** @internal */
+export const DeploymentConfigGcpFederationScope$inboundSchema: z.ZodType<
+  DeploymentConfigGcpFederationScope,
+  unknown
+> = z.object({
+  deploymentId: z.string(),
+});
+
+export function deploymentConfigGcpFederationScopeFromJSON(
+  jsonString: string,
+): SafeParseResult<DeploymentConfigGcpFederationScope, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      DeploymentConfigGcpFederationScope$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'DeploymentConfigGcpFederationScope' from JSON`,
+  );
+}
+
+/** @internal */
+export const DeploymentConfigGcpFederationScopeUnion$inboundSchema: z.ZodType<
+  DeploymentConfigGcpFederationScopeUnion,
+  unknown
+> = z.union([
+  z.lazy(() => DeploymentConfigGcpFederationScope$inboundSchema),
+  z.string(),
+]);
+
+export function deploymentConfigGcpFederationScopeUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<
+  DeploymentConfigGcpFederationScopeUnion,
+  SDKValidationError
+> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      DeploymentConfigGcpFederationScopeUnion$inboundSchema.parse(
+        JSON.parse(x),
+      ),
+    `Failed to parse 'DeploymentConfigGcpFederationScopeUnion' from JSON`,
+  );
+}
+
 /** @internal */
 export const DeploymentConfigPlatformKubernetes$inboundSchema: z.ZodEnum<
   typeof DeploymentConfigPlatformKubernetes
@@ -2787,6 +2875,45 @@ export function deploymentConfigManagementConfigAzureFromJSON(
   );
 }
 
+/** @internal */
+export const DeploymentConfigFederationTrust$inboundSchema: z.ZodType<
+  DeploymentConfigFederationTrust,
+  unknown
+> = z.object({
+  issuer: z.string(),
+  subject: z.string(),
+});
+
+export function deploymentConfigFederationTrustFromJSON(
+  jsonString: string,
+): SafeParseResult<DeploymentConfigFederationTrust, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => DeploymentConfigFederationTrust$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'DeploymentConfigFederationTrust' from JSON`,
+  );
+}
+
+/** @internal */
+export const DeploymentConfigFederationTrustUnion$inboundSchema: z.ZodType<
+  DeploymentConfigFederationTrustUnion,
+  unknown
+> = z.union([
+  z.lazy(() => DeploymentConfigFederationTrust$inboundSchema),
+  z.string(),
+]);
+
+export function deploymentConfigFederationTrustUnionFromJSON(
+  jsonString: string,
+): SafeParseResult<DeploymentConfigFederationTrustUnion, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      DeploymentConfigFederationTrustUnion$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'DeploymentConfigFederationTrustUnion' from JSON`,
+  );
+}
+
 /** @internal */
 export const DeploymentConfigPlatformGcp$inboundSchema: z.ZodEnum<
   typeof DeploymentConfigPlatformGcp
@@ -2797,6 +2924,12 @@ export const DeploymentConfigManagementConfigGcp$inboundSchema: z.ZodType<
   DeploymentConfigManagementConfigGcp,
   unknown
 > = z.object({
+  federationTrust: z.nullable(
+    z.union([
+      z.lazy(() => DeploymentConfigFederationTrust$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
   serviceAccountEmail: z.string(),
   platform: DeploymentConfigPlatformGcp$inboundSchema,
 });
@@ -4918,6 +5051,12 @@ export const DeploymentConfig$inboundSchema: z.ZodType<
   ),
   externalBindings: z.record(z.string(), ExternalBindingUnion$inboundSchema)
     .optional(),
+  gcpFederationScope: z.nullable(
+    z.union([
+      z.lazy(() => DeploymentConfigGcpFederationScope$inboundSchema),
+      z.string(),
+    ]),
+  ).optional(),
   inputValues: z.record(z.string(), z.nullable(z.any())).optional(),
   labelDomain: z.nullable(z.string()).optional(),
   managementConfig: z.nullable(