@alienplatform/platform-api 3.3.40 → 3.3.42-dev.6e3a661b219b3886d55014b3cef8af0ecdcc65fe

package/src/models/managerdeployment.ts

@@ -30,6 +30,8 @@ export const ManagerDeploymentStatus = {
   DeleteFailed: "delete-failed",
   TeardownRequired: "teardown-required",
   TeardownFailed: "teardown-failed",
+  RetentionRequired: "retention-required",
+  Retained: "retained",
   Deleted: "deleted",
   Error: "error",
 } as const;

package/src/models/managerretryresponsepublicendpointtargetunion2.ts

@@ -171,6 +171,14 @@ export type ManagerRetryResponseEnvironmentVariable = {
 };
 
 export type ManagerRetryResponseSetupConfig = {
+  /**
+   * Vendor destination when leaving or completing setup. Must be an absolute HTTPS URL without userinfo (embedded credentials), at most 2048 characters. Null clears the destination; omit to keep it unchanged.
+   */
+  returnUrl?: string | null | undefined;
+  /**
+   * Vendor destination for expired, revoked or disabled setup links. This URL remains available for unusable links; the endpoint must authenticate the user before minting a new link. Must be an absolute HTTPS URL without userinfo (embedded credentials), at most 2048 characters. Null clears the destination; omit to keep it unchanged.
+   */
+  refreshUrl?: string | null | undefined;
   metadata: { [k: string]: any | null };
   policy: DeploymentSetupPolicy;
   inputValues?: { [k: string]: EncryptedStackInputValue } | undefined;
@@ -1958,6 +1966,8 @@ export const ManagerRetryResponseSetupConfig$inboundSchema: z.ZodType<
   ManagerRetryResponseSetupConfig,
   unknown
 > = z.object({
+  returnUrl: z.nullable(z.string()).optional(),
+  refreshUrl: z.nullable(z.string()).optional(),
   metadata: z.record(z.string(), z.nullable(z.any())),
   policy: DeploymentSetupPolicy$inboundSchema,
   inputValues: z.record(z.string(), EncryptedStackInputValue$inboundSchema)

package/src/models/newdeploymentrequest.ts

@@ -5,6 +5,11 @@
 import * as z from "zod/v4";
 import { remap as remap$ } from "../lib/primitives.js";
 import { ClosedEnum } from "../types/enums.js";
+import {
+  DeploymentInstallationOptions,
+  DeploymentInstallationOptions$Outbound,
+  DeploymentInstallationOptions$outboundSchema,
+} from "./deploymentinstallationoptions.js";
 import {
   DeploymentSetupMethod,
   DeploymentSetupMethod$outboundSchema,
@@ -1463,14 +1468,14 @@ export type NewDeploymentRequestSetupItem = ClosedEnum<
 >;
 
 /**
- * Use await-registration when CloudFormation will create the infrastructure and register this deployment.
+ * Use await-registration to reserve a pending deployment before installing and registering its infrastructure.
  */
 export const SetupHandoff = {
   Immediate: "immediate",
   AwaitRegistration: "await-registration",
 } as const;
 /**
- * Use await-registration when CloudFormation will create the infrastructure and register this deployment.
+ * Use await-registration to reserve a pending deployment before installing and registering its infrastructure.
  */
 export type SetupHandoff = ClosedEnum<typeof SetupHandoff>;
 
@@ -1515,6 +1520,10 @@ export type NewDeploymentRequest = {
    * Project ID or name
    */
   project: string;
+  /**
+   * External ID of a deployment group in the selected project. Supply this or deploymentGroupId, not both.
+   */
+  deploymentGroupExternalId?: string | undefined;
   /**
    * Base environment for a Kubernetes installation.
    */
@@ -1558,7 +1567,11 @@ export type NewDeploymentRequest = {
    */
   setupItem?: NewDeploymentRequestSetupItem | undefined;
   /**
-   * Use await-registration when CloudFormation will create the infrastructure and register this deployment.
+   * Build and save installation instructions on the server. Requires setupHandoff=await-registration.
+   */
+  installation?: DeploymentInstallationOptions | undefined;
+  /**
+   * Use await-registration to reserve a pending deployment before installing and registering its infrastructure.
    */
   setupHandoff?: SetupHandoff | undefined;
 };
@@ -4377,6 +4390,7 @@ export type NewDeploymentRequest$Outbound = {
     | null
     | undefined;
   project: string;
+  deploymentGroupExternalId?: string | undefined;
   basePlatform?: string | undefined;
   stackSettings?: NewDeploymentRequestStackSettings$Outbound | undefined;
   resourcePrefix?: string | undefined;
@@ -4389,6 +4403,7 @@ export type NewDeploymentRequest$Outbound = {
   initialDesiredRelease: string;
   releaseChannel: string;
   setupItem?: string | undefined;
+  installation?: DeploymentInstallationOptions$Outbound | undefined;
   setupHandoff: string;
 };
 
@@ -4416,6 +4431,7 @@ export const NewDeploymentRequest$outboundSchema: z.ZodType<
     ]),
   ).optional(),
   project: z.string(),
+  deploymentGroupExternalId: z.string().optional(),
   basePlatform: NewDeploymentRequestBasePlatform$outboundSchema.optional(),
   stackSettings: z.lazy(() => NewDeploymentRequestStackSettings$outboundSchema)
     .optional(),
@@ -4430,6 +4446,7 @@ export const NewDeploymentRequest$outboundSchema: z.ZodType<
   initialDesiredRelease: InitialDesiredRelease$outboundSchema.default("active"),
   releaseChannel: z.string().default("production"),
   setupItem: NewDeploymentRequestSetupItem$outboundSchema.optional(),
+  installation: DeploymentInstallationOptions$outboundSchema.optional(),
   setupHandoff: SetupHandoff$outboundSchema.default("immediate"),
 });
 

package/src/models/operations/acceptawskeysetup.ts

@@ -0,0 +1,133 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { safeParse } from "../../lib/schemas.js";
+import { ClosedEnum } from "../../types/enums.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+
+export const Action = {
+  Create: "create",
+  Update: "update",
+  Delete: "delete",
+} as const;
+export type Action = ClosedEnum<typeof Action>;
+
+export type AcceptAwsKeySetupCloudFormation = {
+  stackId: string;
+  requestId: string;
+  logicalResourceId: string;
+  physicalResourceId: string | null;
+  responseUrl: string;
+};
+
+export type AcceptAwsKeySetupRequest = {
+  action: Action;
+  /**
+   * Unique identifier for the deployment.
+   */
+  connectedKeyDeploymentId: string | null;
+  nativeKeyLogicalId: string;
+  setupRoleArn: string | null;
+  deletionWindowDays: number;
+  cloudFormation: AcceptAwsKeySetupCloudFormation;
+};
+
+/**
+ * Key setup callback accepted
+ */
+export type AcceptAwsKeySetupResponse = {
+  operationId: string;
+  physicalResourceId: string;
+};
+
+/** @internal */
+export const Action$outboundSchema: z.ZodEnum<typeof Action> = z.enum(Action);
+
+/** @internal */
+export type AcceptAwsKeySetupCloudFormation$Outbound = {
+  stackId: string;
+  requestId: string;
+  logicalResourceId: string;
+  physicalResourceId: string | null;
+  responseUrl: string;
+};
+
+/** @internal */
+export const AcceptAwsKeySetupCloudFormation$outboundSchema: z.ZodType<
+  AcceptAwsKeySetupCloudFormation$Outbound,
+  AcceptAwsKeySetupCloudFormation
+> = z.object({
+  stackId: z.string(),
+  requestId: z.string(),
+  logicalResourceId: z.string(),
+  physicalResourceId: z.nullable(z.string()),
+  responseUrl: z.string(),
+});
+
+export function acceptAwsKeySetupCloudFormationToJSON(
+  acceptAwsKeySetupCloudFormation: AcceptAwsKeySetupCloudFormation,
+): string {
+  return JSON.stringify(
+    AcceptAwsKeySetupCloudFormation$outboundSchema.parse(
+      acceptAwsKeySetupCloudFormation,
+    ),
+  );
+}
+
+/** @internal */
+export type AcceptAwsKeySetupRequest$Outbound = {
+  action: string;
+  connectedKeyDeploymentId: string | null;
+  nativeKeyLogicalId: string;
+  setupRoleArn: string | null;
+  deletionWindowDays: number;
+  cloudFormation: AcceptAwsKeySetupCloudFormation$Outbound;
+};
+
+/** @internal */
+export const AcceptAwsKeySetupRequest$outboundSchema: z.ZodType<
+  AcceptAwsKeySetupRequest$Outbound,
+  AcceptAwsKeySetupRequest
+> = z.object({
+  action: Action$outboundSchema,
+  connectedKeyDeploymentId: z.nullable(z.string()),
+  nativeKeyLogicalId: z.string(),
+  setupRoleArn: z.nullable(z.string()),
+  deletionWindowDays: z.int(),
+  cloudFormation: z.lazy(() => AcceptAwsKeySetupCloudFormation$outboundSchema),
+});
+
+export function acceptAwsKeySetupRequestToJSON(
+  acceptAwsKeySetupRequest: AcceptAwsKeySetupRequest,
+): string {
+  return JSON.stringify(
+    AcceptAwsKeySetupRequest$outboundSchema.parse(acceptAwsKeySetupRequest),
+  );
+}
+
+/** @internal */
+export const AcceptAwsKeySetupResponse$inboundSchema: z.ZodType<
+  AcceptAwsKeySetupResponse,
+  unknown
+> = z.object({
+  operationId: z.string(),
+  physicalResourceId: z.string(),
+});
+
+export function acceptAwsKeySetupResponseFromJSON(
+  jsonString: string,
+): SafeParseResult<AcceptAwsKeySetupResponse, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => AcceptAwsKeySetupResponse$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'AcceptAwsKeySetupResponse' from JSON`,
+  );
+}
+
+// Published CloudFormation key callback action exports.
+export const AcceptAwsKeySetupAction = Action;
+export type AcceptAwsKeySetupAction = Action;
+export const AcceptAwsKeySetupAction$outboundSchema = Action$outboundSchema;

package/src/models/operations/acceptterraformkeysetup.ts

@@ -0,0 +1,35 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { safeParse } from "../../lib/schemas.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+
+/**
+ * Key setup accepted
+ */
+export type AcceptTerraformKeySetupResponse = {
+  setupId: string;
+  operationId: string;
+};
+
+/** @internal */
+export const AcceptTerraformKeySetupResponse$inboundSchema: z.ZodType<
+  AcceptTerraformKeySetupResponse,
+  unknown
+> = z.object({
+  setupId: z.string(),
+  operationId: z.string(),
+});
+
+export function acceptTerraformKeySetupResponseFromJSON(
+  jsonString: string,
+): SafeParseResult<AcceptTerraformKeySetupResponse, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => AcceptTerraformKeySetupResponse$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'AcceptTerraformKeySetupResponse' from JSON`,
+  );
+}

package/src/models/operations/claimawsxksstoreretirement.ts

@@ -0,0 +1,84 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { safeParse } from "../../lib/schemas.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+
+export type ClaimAwsXksStoreRetirementRequest = {
+  /**
+   * Unique identifier for the aws virtual key.
+   */
+  id: string;
+};
+
+export type Retirement = {
+  customKeyStoreId: string;
+};
+
+/**
+ * Resumable cleanup claim, or null while the store still has keys
+ */
+export type ClaimAwsXksStoreRetirementResponse = {
+  retirement: Retirement | null;
+};
+
+/** @internal */
+export type ClaimAwsXksStoreRetirementRequest$Outbound = {
+  id: string;
+};
+
+/** @internal */
+export const ClaimAwsXksStoreRetirementRequest$outboundSchema: z.ZodType<
+  ClaimAwsXksStoreRetirementRequest$Outbound,
+  ClaimAwsXksStoreRetirementRequest
+> = z.object({
+  id: z.string(),
+});
+
+export function claimAwsXksStoreRetirementRequestToJSON(
+  claimAwsXksStoreRetirementRequest: ClaimAwsXksStoreRetirementRequest,
+): string {
+  return JSON.stringify(
+    ClaimAwsXksStoreRetirementRequest$outboundSchema.parse(
+      claimAwsXksStoreRetirementRequest,
+    ),
+  );
+}
+
+/** @internal */
+export const Retirement$inboundSchema: z.ZodType<Retirement, unknown> = z
+  .object({
+    customKeyStoreId: z.string(),
+  });
+
+export function retirementFromJSON(
+  jsonString: string,
+): SafeParseResult<Retirement, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => Retirement$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'Retirement' from JSON`,
+  );
+}
+
+/** @internal */
+export const ClaimAwsXksStoreRetirementResponse$inboundSchema: z.ZodType<
+  ClaimAwsXksStoreRetirementResponse,
+  unknown
+> = z.object({
+  retirement: z.nullable(z.lazy(() => Retirement$inboundSchema)),
+});
+
+export function claimAwsXksStoreRetirementResponseFromJSON(
+  jsonString: string,
+): SafeParseResult<ClaimAwsXksStoreRetirementResponse, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      ClaimAwsXksStoreRetirementResponse$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'ClaimAwsXksStoreRetirementResponse' from JSON`,
+  );
+}

package/src/models/operations/completeawsxksstoreretirement.ts

@@ -0,0 +1,102 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { remap as remap$ } from "../../lib/primitives.js";
+import { safeParse } from "../../lib/schemas.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+
+export type CompleteAwsXksStoreRetirementRequestBody = {
+  customKeyStoreId: string;
+};
+
+export type CompleteAwsXksStoreRetirementRequest = {
+  /**
+   * Unique identifier for the aws virtual key.
+   */
+  id: string;
+  requestBody?: CompleteAwsXksStoreRetirementRequestBody | undefined;
+};
+
+/**
+ * Cleared the deleted store registration
+ */
+export type CompleteAwsXksStoreRetirementResponse = {
+  completed: true;
+};
+
+/** @internal */
+export type CompleteAwsXksStoreRetirementRequestBody$Outbound = {
+  customKeyStoreId: string;
+};
+
+/** @internal */
+export const CompleteAwsXksStoreRetirementRequestBody$outboundSchema: z.ZodType<
+  CompleteAwsXksStoreRetirementRequestBody$Outbound,
+  CompleteAwsXksStoreRetirementRequestBody
+> = z.object({
+  customKeyStoreId: z.string(),
+});
+
+export function completeAwsXksStoreRetirementRequestBodyToJSON(
+  completeAwsXksStoreRetirementRequestBody:
+    CompleteAwsXksStoreRetirementRequestBody,
+): string {
+  return JSON.stringify(
+    CompleteAwsXksStoreRetirementRequestBody$outboundSchema.parse(
+      completeAwsXksStoreRetirementRequestBody,
+    ),
+  );
+}
+
+/** @internal */
+export type CompleteAwsXksStoreRetirementRequest$Outbound = {
+  id: string;
+  RequestBody?: CompleteAwsXksStoreRetirementRequestBody$Outbound | undefined;
+};
+
+/** @internal */
+export const CompleteAwsXksStoreRetirementRequest$outboundSchema: z.ZodType<
+  CompleteAwsXksStoreRetirementRequest$Outbound,
+  CompleteAwsXksStoreRetirementRequest
+> = z.object({
+  id: z.string(),
+  requestBody: z.lazy(() =>
+    CompleteAwsXksStoreRetirementRequestBody$outboundSchema
+  ).optional(),
+}).transform((v) => {
+  return remap$(v, {
+    requestBody: "RequestBody",
+  });
+});
+
+export function completeAwsXksStoreRetirementRequestToJSON(
+  completeAwsXksStoreRetirementRequest: CompleteAwsXksStoreRetirementRequest,
+): string {
+  return JSON.stringify(
+    CompleteAwsXksStoreRetirementRequest$outboundSchema.parse(
+      completeAwsXksStoreRetirementRequest,
+    ),
+  );
+}
+
+/** @internal */
+export const CompleteAwsXksStoreRetirementResponse$inboundSchema: z.ZodType<
+  CompleteAwsXksStoreRetirementResponse,
+  unknown
+> = z.object({
+  completed: z.literal(true),
+});
+
+export function completeAwsXksStoreRetirementResponseFromJSON(
+  jsonString: string,
+): SafeParseResult<CompleteAwsXksStoreRetirementResponse, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) =>
+      CompleteAwsXksStoreRetirementResponse$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'CompleteAwsXksStoreRetirementResponse' from JSON`,
+  );
+}

package/src/models/operations/configureprojectsource.ts

@@ -125,9 +125,13 @@ export type ConfigureProjectSourceGitRepositoryResponse = {
  */
 export type ConfigureProjectSourceDeploymentPortalAppearance = {
   /**
-   * Optional project-specific avatar override for the deployment portal.
+   * Optional project-specific avatar override. Must be an absolute HTTPS URL without embedded credentials.
    */
   avatarUrl?: string | null | undefined;
+  /**
+   * Optional browser icon override. Must be an absolute HTTPS URL without embedded credentials.
+   */
+  faviconUrl?: string | null | undefined;
   /**
    * Curated visual style for the deployment portal.
    */
@@ -145,11 +149,11 @@ export type ConfigureProjectSourceDeploymentPortalAppearance = {
    */
   subtitle?: string | null | undefined;
   /**
-   * Optional support or contact URL.
+   * Optional support or contact URL. Must be an absolute HTTPS URL without embedded credentials.
    */
   supportUrl?: string | null | undefined;
   /**
-   * Optional documentation URL.
+   * Optional documentation URL. Must be an absolute HTTPS URL without embedded credentials.
    */
   docsUrl?: string | null | undefined;
   /**
@@ -223,6 +227,10 @@ export type ConfigureProjectSourceCloudformation = {
    * Human-friendly application name shown in generated install artifacts
    */
   displayName?: string | null | undefined;
+  /**
+   * Require AWS External ID. When true, AWS setup templates require the ManagementExternalId parameter (every install and update must enter the deployment group's ExternalId) and, on a hosted manager, accept only its management roles as ManagingRoleArn. Applies to packages built after the change. Missing means false; new projects are created with true.
+   */
+  requireManagementExternalId?: boolean | undefined;
 };
 
 /**
@@ -817,6 +825,7 @@ export const ConfigureProjectSourceDeploymentPortalAppearance$inboundSchema:
   z.ZodType<ConfigureProjectSourceDeploymentPortalAppearance, unknown> = z
     .object({
       avatarUrl: z.nullable(z.string()).optional(),
+      faviconUrl: z.nullable(z.string()).optional(),
       preset: models.DeploymentPortalAppearancePreset$inboundSchema.default(
         "clean",
       ),
@@ -882,6 +891,7 @@ export const ConfigureProjectSourceCloudformation$inboundSchema: z.ZodType<
 > = z.object({
   enabled: z.boolean(),
   displayName: z.nullable(z.string()).optional(),
+  requireManagementExternalId: z.boolean().optional(),
 });
 
 export function configureProjectSourceCloudformationFromJSON(

package/src/models/operations/createproject.ts

@@ -108,6 +108,10 @@ export type CreateProjectCloudformationRequest = {
    * Human-friendly application name shown in generated install artifacts
    */
   displayName?: string | null | undefined;
+  /**
+   * Require AWS External ID. When true, AWS setup templates require the ManagementExternalId parameter (every install and update must enter the deployment group's ExternalId) and, on a hosted manager, accept only its management roles as ManagingRoleArn. Applies to packages built after the change. Missing means false; new projects are created with true.
+   */
+  requireManagementExternalId?: boolean | undefined;
 };
 
 /**
@@ -328,9 +332,13 @@ export type CreateProjectGitRepositoryResponse = {
  */
 export type CreateProjectDeploymentPortalAppearance = {
   /**
-   * Optional project-specific avatar override for the deployment portal.
+   * Optional project-specific avatar override. Must be an absolute HTTPS URL without embedded credentials.
    */
   avatarUrl?: string | null | undefined;
+  /**
+   * Optional browser icon override. Must be an absolute HTTPS URL without embedded credentials.
+   */
+  faviconUrl?: string | null | undefined;
   /**
    * Curated visual style for the deployment portal.
    */
@@ -348,11 +356,11 @@ export type CreateProjectDeploymentPortalAppearance = {
    */
   subtitle?: string | null | undefined;
   /**
-   * Optional support or contact URL.
+   * Optional support or contact URL. Must be an absolute HTTPS URL without embedded credentials.
    */
   supportUrl?: string | null | undefined;
   /**
-   * Optional documentation URL.
+   * Optional documentation URL. Must be an absolute HTTPS URL without embedded credentials.
    */
   docsUrl?: string | null | undefined;
   /**
@@ -426,6 +434,10 @@ export type CreateProjectCloudformationResponse = {
    * Human-friendly application name shown in generated install artifacts
    */
   displayName?: string | null | undefined;
+  /**
+   * Require AWS External ID. When true, AWS setup templates require the ManagementExternalId parameter (every install and update must enter the deployment group's ExternalId) and, on a hosted manager, accept only its management roles as ManagingRoleArn. Applies to packages built after the change. Missing means false; new projects are created with true.
+   */
+  requireManagementExternalId?: boolean | undefined;
 };
 
 /**
@@ -852,6 +864,7 @@ export function createProjectCliRequestToJSON(
 export type CreateProjectCloudformationRequest$Outbound = {
   enabled: boolean;
   displayName?: string | null | undefined;
+  requireManagementExternalId?: boolean | undefined;
 };
 
 /** @internal */
@@ -861,6 +874,7 @@ export const CreateProjectCloudformationRequest$outboundSchema: z.ZodType<
 > = z.object({
   enabled: z.boolean(),
   displayName: z.nullable(z.string()).optional(),
+  requireManagementExternalId: z.boolean().optional(),
 });
 
 export function createProjectCloudformationRequestToJSON(
@@ -1248,6 +1262,7 @@ export const CreateProjectDeploymentPortalAppearance$inboundSchema: z.ZodType<
   unknown
 > = z.object({
   avatarUrl: z.nullable(z.string()).optional(),
+  faviconUrl: z.nullable(z.string()).optional(),
   preset: models.DeploymentPortalAppearancePreset$inboundSchema.default(
     "clean",
   ),
@@ -1309,6 +1324,7 @@ export const CreateProjectCloudformationResponse$inboundSchema: z.ZodType<
 > = z.object({
   enabled: z.boolean(),
   displayName: z.nullable(z.string()).optional(),
+  requireManagementExternalId: z.boolean().optional(),
 });
 
 export function createProjectCloudformationResponseFromJSON(

package/src/models/operations/createprojectfromtemplate.ts

@@ -101,6 +101,10 @@ export type CreateProjectFromTemplateCloudformationRequest = {
    * Human-friendly application name shown in generated install artifacts
    */
   displayName?: string | null | undefined;
+  /**
+   * Require AWS External ID. When true, AWS setup templates require the ManagementExternalId parameter (every install and update must enter the deployment group's ExternalId) and, on a hosted manager, accept only its management roles as ManagingRoleArn. Applies to packages built after the change. Missing means false; new projects are created with true.
+   */
+  requireManagementExternalId?: boolean | undefined;
 };
 
 /**
@@ -326,9 +330,13 @@ export type CreateProjectFromTemplateGitRepository = {
  */
 export type CreateProjectFromTemplateDeploymentPortalAppearance = {
   /**
-   * Optional project-specific avatar override for the deployment portal.
+   * Optional project-specific avatar override. Must be an absolute HTTPS URL without embedded credentials.
    */
   avatarUrl?: string | null | undefined;
+  /**
+   * Optional browser icon override. Must be an absolute HTTPS URL without embedded credentials.
+   */
+  faviconUrl?: string | null | undefined;
   /**
    * Curated visual style for the deployment portal.
    */
@@ -346,11 +354,11 @@ export type CreateProjectFromTemplateDeploymentPortalAppearance = {
    */
   subtitle?: string | null | undefined;
   /**
-   * Optional support or contact URL.
+   * Optional support or contact URL. Must be an absolute HTTPS URL without embedded credentials.
    */
   supportUrl?: string | null | undefined;
   /**
-   * Optional documentation URL.
+   * Optional documentation URL. Must be an absolute HTTPS URL without embedded credentials.
    */
   docsUrl?: string | null | undefined;
   /**
@@ -426,6 +434,10 @@ export type CreateProjectFromTemplateCloudformationResponse = {
    * Human-friendly application name shown in generated install artifacts
    */
   displayName?: string | null | undefined;
+  /**
+   * Require AWS External ID. When true, AWS setup templates require the ManagementExternalId parameter (every install and update must enter the deployment group's ExternalId) and, on a hosted manager, accept only its management roles as ManagingRoleArn. Applies to packages built after the change. Missing means false; new projects are created with true.
+   */
+  requireManagementExternalId?: boolean | undefined;
 };
 
 /**
@@ -891,6 +903,7 @@ export function createProjectFromTemplateCliRequestToJSON(
 export type CreateProjectFromTemplateCloudformationRequest$Outbound = {
   enabled: boolean;
   displayName?: string | null | undefined;
+  requireManagementExternalId?: boolean | undefined;
 };
 
 /** @internal */
@@ -901,6 +914,7 @@ export const CreateProjectFromTemplateCloudformationRequest$outboundSchema:
   > = z.object({
     enabled: z.boolean(),
     displayName: z.nullable(z.string()).optional(),
+    requireManagementExternalId: z.boolean().optional(),
   });
 
 export function createProjectFromTemplateCloudformationRequestToJSON(
@@ -1323,6 +1337,7 @@ export const CreateProjectFromTemplateDeploymentPortalAppearance$inboundSchema:
   z.ZodType<CreateProjectFromTemplateDeploymentPortalAppearance, unknown> = z
     .object({
       avatarUrl: z.nullable(z.string()).optional(),
+      faviconUrl: z.nullable(z.string()).optional(),
       preset: models.DeploymentPortalAppearancePreset$inboundSchema.default(
         "clean",
       ),
@@ -1390,6 +1405,7 @@ export const CreateProjectFromTemplateCloudformationResponse$inboundSchema:
     .object({
       enabled: z.boolean(),
       displayName: z.nullable(z.string()).optional(),
+      requireManagementExternalId: z.boolean().optional(),
     });
 
 export function createProjectFromTemplateCloudformationResponseFromJSON(