@alienplatform/sdk 1.8.0 → 1.10.0

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @alienplatform/sdk@1.8.0 build /home/runner/work/alien/alien/packages/sdk
+> @alienplatform/sdk@1.10.0 build /home/runner/work/alien/alien/packages/sdk
 > tsdown && tsc --emitDeclarationOnly
 
 ℹ tsdown v0.13.5 powered by rolldown v1.0.3
@@ -12,8 +12,8 @@
 - For the "define". Invalid key: Expected never but received "define". 
 ℹ dist/index.js           1338.28 kB
 ℹ dist/commands/index.js    12.03 kB │ gzip:  3.11 kB
-ℹ dist/dist.js             333.56 kB │ gzip: 62.38 kB
-ℹ 3 files, total: 1683.87 kB
+ℹ dist/dist.js             350.34 kB │ gzip: 65.66 kB
+ℹ 3 files, total: 1700.65 kB
 ../../node_modules/.pnpm/@protobufjs+inquire@1.1.0/node_modules/@protobufjs/inquire/index.js (12:18) [EVAL] Use of direct `eval` function is strongly discouraged as it poses security risks and may cause issues with minification.
     ╭─[ ../../node_modules/.pnpm/@protobufjs+inquire@1.1.0/node_modules/@protobufjs/inquire/index.js:12:19 ]
     │
@@ -24,4 +24,4 @@
     │ Help: Consider using indirect eval. For more information, check the documentation: https://rolldown.rs/guide/troubleshooting#avoiding-direct-eval
 ────╯
 
-✔ Build complete in 271ms
+✔ Build complete in 304ms

package/dist/dist.js

@@ -4142,6 +4142,14 @@ const AlienEventSchema = union([
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
+/**
+* @description CPU architecture.
+*/
+const ArchitectureSchema = _enum(["arm64", "x86_64"]).describe("CPU architecture.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
 const HeartbeatCollectionIssueReasonSchema = _enum([
 	"forbidden",
 	"not-installed",
@@ -6021,6 +6029,88 @@ _enum([
 * Do not edit manually.
 */
 /**
+* @description Allowed range and default for a count selected by the installer.
+*/
+const ComputeChoiceRangeSchema = object({
+	"default": int().min(0).describe("Default value recommended when no installer override is supplied."),
+	"max": int().min(0).describe("Highest allowed value."),
+	"min": int().min(0).describe("Lowest allowed value.")
+}).describe("Allowed range and default for a count selected by the installer.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Source-declared scale policy for a capacity group.
+*/
+const CapacityGroupScalePolicySchema = union([object({
+	get "machines"() {
+		return ComputeChoiceRangeSchema.describe("Allowed range and default for a count selected by the installer.");
+	},
+	"type": _enum(["fixed"])
+}), object({
+	get "max"() {
+		return ComputeChoiceRangeSchema.describe("Allowed range and default for a count selected by the installer.");
+	},
+	get "min"() {
+		return ComputeChoiceRangeSchema.describe("Allowed range and default for a count selected by the installer.");
+	},
+	"type": _enum(["autoscale"])
+})]).describe("Source-declared scale policy for a capacity group.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description GPU specification for a capacity group.
+*/
+const GpuSpecSchema = object({
+	"count": int().min(0).describe("Number of GPUs per machine"),
+	"type": string().describe("GPU type identifier (e.g., \"nvidia-a100\", \"nvidia-t4\")")
+}).describe("GPU specification for a capacity group.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Machine resource profile for a capacity group.\n\nRepresents the hardware specifications for machines in a capacity group.\nThese are hardware totals (what the instance type advertises), not allocatable\ncapacity. The managed container scheduler internally subtracts system reserves for planning.
+*/
+const MachineProfileSchema = object({
+	get "architecture"() {
+		return union([ArchitectureSchema, _null()]).optional();
+	},
+	"cpu": string().describe("CPU cores per machine (hardware total) - stored as string to preserve precision\n(e.g., \"8.0\", \"4.5\")"),
+	"ephemeralStorageBytes": int().min(0).describe("Ephemeral storage in bytes (hardware total)"),
+	get "gpu"() {
+		return union([GpuSpecSchema, _null()]).optional();
+	},
+	"memoryBytes": int().min(0).describe("Memory in bytes (hardware total)")
+}).describe("Machine resource profile for a capacity group.\n\nRepresents the hardware specifications for machines in a capacity group.\nThese are hardware totals (what the instance type advertises), not allocatable\ncapacity. The managed container scheduler internally subtracts system reserves for planning.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Capacity group definition.\n\nA capacity group represents machines with identical hardware profiles.\nEach group becomes a separate Auto Scaling Group (AWS), Managed Instance Group (GCP),\nor VM Scale Set (Azure).
+*/
+const CapacityGroupSchema = object({
+	"groupId": string().describe("Unique identifier for this capacity group (must be lowercase alphanumeric with hyphens)"),
+	"instanceType": string().describe("Provider machine selected at deployment time.\n`alien.ts` should declare portable requirements; preflight materialization\nfills this field from `StackSettings.compute`.").nullish(),
+	"maxSize": int().min(0).describe("Maximum number of machines (must be ≤ 10)"),
+	"minSize": int().min(0).describe("Minimum number of machines (can be 0 for scale-to-zero)"),
+	"nestedVirtualization": boolean().describe("Require instance types that expose nested virtualization (VT-x/EPT)\nto guest VMs. This is needed by workloads that boot nested VMs inside\ncontainers.\nWhen true, the controller's instance-type selector is constrained\nto a vetted nested-virt-capable allowlist.").nullish(),
+	get "profile"() {
+		return union([MachineProfileSchema, _null()]).optional();
+	},
+	get "scalePolicy"() {
+		return union([CapacityGroupScalePolicySchema, _null()]).optional();
+	}
+}).describe("Capacity group definition.\n\nA capacity group represents machines with identical hardware profiles.\nEach group becomes a separate Auto Scaling Group (AWS), Managed Instance Group (GCP),\nor VM Scale Set (Azure).");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
 * @description Command response from deployment
 */
 const CommandResponseSchema = union([object({
@@ -6119,6 +6209,38 @@ const ComputeClusterHeartbeatDataSchema = union([
 	lazy(() => AzureComputeClusterHeartbeatDataSchema).and(object({ "backend": _enum(["azure"]) })),
 	lazy(() => LocalComputeClusterHeartbeatDataSchema).and(object({ "backend": _enum(["local"]) }))
 ]);
+object({
+	get "capacityGroups"() {
+		return array(CapacityGroupSchema.describe("Capacity group definition.\n\nA capacity group represents machines with identical hardware profiles.\nEach group becomes a separate Auto Scaling Group (AWS), Managed Instance Group (GCP),\nor VM Scale Set (Azure).")).describe("Capacity groups defining the machine pools for this cluster.\nEach group becomes a separate ASG/MIG/VMSS.");
+	},
+	"containerCidr": string().describe("Container CIDR block for internal container networking.\nAuto-generated as \"10.244.0.0/16\" if not specified.\nEach machine gets a /24 subnet from this range.").nullish(),
+	"id": string().describe("Unique identifier for the container cluster.\nMust contain only alphanumeric characters, hyphens, and underscores.")
+}).describe("ComputeCluster resource for running long-running container workloads.\n\nA ComputeCluster provides the setup-owned machine boundary for containers.\nAlien may manage the worker fleet inside that boundary when setup grants\n`compute-cluster/management`.\n\n## Architecture\n\n- **Setup** creates cloud resources: ASGs/MIGs/VMSSs, IAM roles, security groups\n- **Alien** manages allowed fleet operations: machine count and runtime\n  machine image rollout\n- A node agent runs on each machine from the selected runtime image channel\n\n## Example\n\n```rust\nuse alien_core::{CapacityGroup, ComputeCluster, MachineProfile};\n\nlet cluster = ComputeCluster::new(\"compute\".to_string())\n    .capacity_group(CapacityGroup {\n        group_id: \"general\".to_string(),\n        instance_type: None,\n        profile: Some(MachineProfile {\n            cpu: \"4.0\".to_string(),\n            memory_bytes: 16 * 1024 * 1024 * 1024,\n            ephemeral_storage_bytes: 20 * 1024 * 1024 * 1024,\n            architecture: None,\n            gpu: None,\n        }),\n        min_size: 1,\n        max_size: 5,\n        scale_policy: None,\n        nested_virtualization: None,\n    })\n    .build();\n```");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description User-selected deployment settings for one compute pool.
+*/
+const ComputePoolSelectionSchema = union([object({
+	"machine": string().describe("Provider machine type selected for this deployment.").nullish(),
+	"machines": int().min(0).describe("Number of machines to run."),
+	"mode": _enum(["fixed"])
+}), object({
+	"machine": string().describe("Provider machine type selected for this deployment.").nullish(),
+	"max": int().min(0).describe("Maximum machine count."),
+	"min": int().min(0).describe("Minimum machine count."),
+	"mode": _enum(["autoscale"])
+})]).describe("User-selected deployment settings for one compute pool.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Deployment-time compute choices for Alien-managed compute pools.\n\nApplication source declares portable pool requirements. This settings\nobject stores the concrete choices made for one deployment, such as the\nprovider machine type and selected machine counts.
+*/
+const ComputeSettingsSchema = object({ "pools": optional(object({}).catchall(lazy(() => ComputePoolSelectionSchema).describe("User-selected deployment settings for one compute pool.")).describe("Selected compute choices keyed by pool ID.")) }).describe("Deployment-time compute choices for Alien-managed compute pools.\n\nApplication source declares portable pool requirements. This settings\nobject stores the concrete choices made for one deployment, such as the\nprovider machine type and selected machine counts.");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -6467,6 +6589,21 @@ const LoadBalancerEndpointSchema = object({
 * Do not edit manually.
 */
 /**
+* @description Runtime-resolved public endpoint metadata.
+*/
+const PublicEndpointOutputSchema = object({
+	"host": string().describe("Hostname for this endpoint."),
+	get "loadBalancerEndpoint"() {
+		return union([LoadBalancerEndpointSchema, _null()]).optional();
+	},
+	"url": string().describe("Base URL for this endpoint."),
+	"wildcardHost": string().describe("Wildcard hostname routed to this endpoint, when configured.").nullish()
+}).describe("Runtime-resolved public endpoint metadata.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
 * @description Status of a single container replica.
 */
 const ReplicaStatusSchema = object({
@@ -6480,39 +6617,23 @@ object({
 	"currentReplicas": int().min(0).describe("Number of current replicas"),
 	"desiredReplicas": int().min(0).describe("Desired number of replicas"),
 	"internalDns": string().describe("Internal DNS name (e.g., \"api.svc\")"),
-	get "loadBalancerEndpoint"() {
-		return union([LoadBalancerEndpointSchema, _null()]).optional();
-	},
 	"name": string().describe("Container name in the managed container backend"),
+	"publicEndpoints": optional(object({}).catchall(lazy(() => PublicEndpointOutputSchema).describe("Runtime-resolved public endpoint metadata.")).describe("Public endpoints resolved for this container.")),
 	get "replicas"() {
 		return array(ReplicaStatusSchema.describe("Status of a single container replica.")).describe("Status of each replica");
 	},
 	get "status"() {
 		return ContainerStatusSchema.describe("Container status in the managed container backend.");
-	},
-	"url": string().describe("Public URL (if exposed publicly)").nullish()
+	}
 }).describe("Outputs generated by a successfully provisioned Container.");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
 /**
-* @description Protocol for exposed ports.
-*/
-const ExposeProtocolSchema = _enum(["http", "tcp"]).describe("Protocol for exposed ports.");
-/**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
-*/
-/**
 * @description Container port configuration.
 */
-const ContainerPortSchema = object({
-	get "expose"() {
-		return union([ExposeProtocolSchema, _null()]).optional();
-	},
-	"port": int().min(0).describe("Port number")
-}).describe("Container port configuration.");
+const ContainerPortSchema = object({ "port": int().min(0).describe("Port number") }).describe("Container port configuration.");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -6543,6 +6664,30 @@ const PersistentStorageSchema = object({
 * Do not edit manually.
 */
 /**
+* @description Protocol for public workload endpoints.
+*/
+const ExposeProtocolSchema = _enum(["http", "tcp"]).describe("Protocol for public workload endpoints.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Public endpoint configuration for port-backed workload resources.
+*/
+const PublicEndpointSchema = object({
+	"hostLabel": string().describe("Optional DNS label override for generated endpoint hostnames.").nullish(),
+	"name": string().describe("Endpoint name within the resource."),
+	"port": int().min(0).describe("Workload port served by the public endpoint."),
+	get "protocol"() {
+		return ExposeProtocolSchema.describe("Protocol for public workload endpoints.");
+	},
+	"wildcardSubdomains": optional(boolean().describe("Whether to route wildcard subdomains to this endpoint."))
+}).describe("Public endpoint configuration for port-backed workload resources.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
 * @description Resource specification with min/desired values.
 */
 const ResourceSpecSchema = object({
@@ -6582,11 +6727,14 @@ object({
 	},
 	"pool": string().describe("Capacity group to run on (must exist in the cluster)\nIf not specified, containers are scheduled to any available group.").nullish(),
 	get "ports"() {
-		return array(ContainerPortSchema.describe("Container port configuration.")).describe("Container ports to expose (at least one required)");
+		return array(ContainerPortSchema.describe("Container port configuration.")).describe("Internal container ports (at least one required).");
+	},
+	get "publicEndpoints"() {
+		return array(PublicEndpointSchema.describe("Public endpoint configuration for port-backed workload resources.")).describe("Public endpoints exposed by the container.");
 	},
 	"replicas": int().min(0).describe("Fixed replica count (for stateful containers or stateless without autoscaling)").nullish(),
 	"stateful": optional(boolean().describe("Whether container is stateful (gets stable ordinals, optional persistent volumes)"))
-}).describe("Container resource for running long-running container workloads.\n\nA Container defines a deployable unit that runs on a ComputeCluster.\nThe managed container backend handles scheduling replicas across machines,\nautoscaling based on various metrics, and service discovery.\n\n## Example\n\n```rust\nuse alien_core::{Container, ContainerCode, ResourceSpec, ContainerAutoscaling, ContainerPort, ExposeProtocol};\n\nlet container = Container::new(\"api\".to_string())\n    .cluster(\"compute\".to_string())\n    .code(ContainerCode::Image {\n        image: \"myapp:latest\".to_string(),\n    })\n    .cpu(ResourceSpec { min: \"0.5\".to_string(), desired: \"1\".to_string() })\n    .memory(ResourceSpec { min: \"512Mi\".to_string(), desired: \"1Gi\".to_string() })\n    .port(8080)\n    .expose_port(8080, ExposeProtocol::Http)\n    .autoscaling(ContainerAutoscaling {\n        min: 2,\n        desired: 3,\n        max: 10,\n        target_cpu_percent: Some(70.0),\n        target_memory_percent: None,\n        target_http_in_flight_per_replica: Some(100),\n        max_http_p95_latency_ms: None,\n    })\n    .permissions(\"container-execution\".to_string())\n    .build();\n```");
+}).describe("Container resource for running long-running container workloads.\n\nA Container defines a deployable unit that runs on a ComputeCluster.\nThe managed container backend handles scheduling replicas across machines,\nautoscaling based on various metrics, and service discovery.\n\n## Example\n\n```rust\nuse alien_core::{Container, ContainerCode, ResourceSpec, ContainerAutoscaling, PublicEndpoint, ExposeProtocol};\n\nlet container = Container::new(\"api\".to_string())\n    .cluster(\"compute\".to_string())\n    .code(ContainerCode::Image {\n        image: \"myapp:latest\".to_string(),\n    })\n    .cpu(ResourceSpec { min: \"0.5\".to_string(), desired: \"1\".to_string() })\n    .memory(ResourceSpec { min: \"512Mi\".to_string(), desired: \"1Gi\".to_string() })\n    .port(8080)\n    .public_endpoint(PublicEndpoint {\n        name: \"api\".to_string(),\n        port: 8080,\n        protocol: ExposeProtocol::Http,\n        host_label: None,\n        wildcard_subdomains: false,\n    })\n    .autoscaling(ContainerAutoscaling {\n        min: 2,\n        desired: 3,\n        max: 10,\n        target_cpu_percent: Some(70.0),\n        target_memory_percent: None,\n        target_http_in_flight_per_replica: Some(100),\n        max_http_p95_latency_ms: None,\n    })\n    .permissions(\"container-execution\".to_string())\n    .build();\n```");
 object({
 	"command": string().describe("Command name (e.g., \"generate-report\", \"sync-data\")"),
 	"deadline": datetime().describe("Optional deadline for command completion").nullish(),
@@ -6784,10 +6932,33 @@ const DaemonHeartbeatDataSchema = union([
 ]);
 object({
 	"daemonName": string(),
+	"publicEndpoints": optional(object({}).catchall(lazy(() => PublicEndpointOutputSchema).describe("Runtime-resolved public endpoint metadata."))),
 	"running": boolean()
 });
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+const DaemonRuntimeMountSchema = object({
+	"options": string().describe("Optional mount options understood by the backend runtime.").nullish(),
+	"source": string().describe("Absolute host path to mount into the daemon container."),
+	"target": string().describe("Absolute container path where the source is mounted.")
+});
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+const DaemonRuntimeSchema = object({
+	get "mounts"() {
+		return array(DaemonRuntimeMountSchema).describe("Host mounts exposed to the daemon container.").optional();
+	},
+	"networkMode": string().describe("Network mode. Supported values are `host` and `appnet`.").nullish(),
+	"pidNamespace": string().describe("Process namespace mode. Supported values are `host` and `private`.").nullish(),
+	"privileged": boolean().describe("Run the daemon container with elevated host capabilities.").nullish(),
+	"user": string().describe("Runtime user, as a numeric uid or uid:gid string.").nullish()
+});
 object({
-	"cluster": string().describe("ComputeCluster resource ID that this daemon runs on for Horizon-backed\ncloud platforms. Kubernetes and Local runtimes ignore this field.").nullish(),
+	"cluster": string().describe("ComputeCluster resource ID that this daemon runs on for managed cloud\ncompute backends. Kubernetes and Local runtimes ignore this field.").nullish(),
 	get "code"() {
 		return DaemonCodeSchema;
 	},
@@ -6797,6 +6968,9 @@ object({
 		return ResourceSpecSchema.describe("Resource specification with min/desired values.").optional();
 	},
 	"environment": optional(object({}).catchall(string())),
+	get "healthCheck"() {
+		return union([HealthCheckSchema, _null()]).optional();
+	},
 	"id": string(),
 	get "links"() {
 		return array(ResourceRefSchema.describe("New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility."));
@@ -6805,7 +6979,13 @@ object({
 		return ResourceSpecSchema.describe("Resource specification with min/desired values.").optional();
 	},
 	"permissions": string(),
-	"pool": string().describe("Capacity group/pool to run on for backends that expose machine pools.").nullish()
+	"pool": string().describe("Capacity group/pool to run on for backends that expose machine pools.").nullish(),
+	get "publicEndpoints"() {
+		return array(PublicEndpointSchema.describe("Public endpoint configuration for port-backed workload resources.")).describe("Public endpoints exposed by the daemon.");
+	},
+	get "runtime"() {
+		return union([DaemonRuntimeSchema, _null()]).optional();
+	}
 });
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -7310,14 +7490,6 @@ const ImportedResourceSchema = object({
 * Do not edit manually.
 */
 /**
-* @description Controls network accessibility of the worker.
-*/
-const IngressSchema = _enum(["public", "private"]).describe("Controls network accessibility of the worker.");
-/**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
-*/
-/**
 * @description Certificate publication or reference mode for Kubernetes public endpoints.
 */
 const KubernetesCertificateModeSchema = union([
@@ -8232,6 +8404,9 @@ const UpdatesModeSchema = _enum(["auto", "approval-required"]).describe("How upd
 * @description User-customizable deployment settings specified at deploy time.\n\nThese settings are provided by the customer via CloudFormation parameters,\nTerraform attributes, CLI flags, or Helm values. They customize how the\ndeployment runs and what capabilities are enabled.\n\n**Key distinction**: StackSettings is user-customizable, while ManagementConfig\nis platform-derived (from the Manager\'s ServiceAccount).
 */
 const StackSettingsSchema = object({
+	get "compute"() {
+		return union([ComputeSettingsSchema, _null()]).optional();
+	},
 	get "deploymentModel"() {
 		return DeploymentModelSchema.describe("Deployment model: how updates are delivered to the remote environment.").optional();
 	},
@@ -8261,6 +8436,7 @@ object({
 	},
 	"deploymentGroupToken": string().describe("Deployment-group token authorizing the import."),
 	"deploymentName": string().describe("User-chosen deployment name. Must be unique within the deployment\ngroup; the manager returns 409 on collision rather than silently\nresolving to an existing deployment. Each setup adapter picks\nthe natural source: CloudFormation defaults to the CFN stack name,\nHelm to `{namespace}/{release}`, Terraform requires an explicit\n`name` attribute on the `alien_deployment` resource."),
+	"inputValues": optional(object({}).catchall(any()).describe("Deployer-provided stack input values collected by generated setup\nsurfaces. Platform-backed managers resolve these into runtime\nenvironment variables before deployment creation; standalone managers\naccept the field for setup package compatibility.")),
 	get "managementConfig"() {
 		return union([ManagementConfigSchema, _null()]).optional();
 	},
@@ -8295,9 +8471,133 @@ object({
 		return StackStateSchema.describe("Represents the collective state of all resources in a stack, including platform and pending actions.");
 	}
 }).describe("Response body returned after a stack import.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Stack input default value.
+*/
+const StackInputDefaultValueSchema = union([
+	object({
+		"type": _enum(["string"]),
+		"value": string().describe("String default.")
+	}),
+	object({
+		"type": _enum(["number"]),
+		"value": string().describe("Number default.")
+	}),
+	object({
+		"type": _enum(["boolean"]),
+		"value": boolean().describe("Boolean default.")
+	}),
+	object({
+		"type": _enum(["stringList"]),
+		"value": array(string()).describe("String list default.")
+	})
+]).describe("Stack input default value.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Environment variable handling for a stack input mapping.
+*/
+const StackInputEnvironmentVariableTypeSchema = _enum(["plain", "secret"]).describe("Environment variable handling for a stack input mapping.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description How a resolved stack input is injected into runtime environment variables.
+*/
+const StackInputEnvironmentMappingSchema = object({
+	"name": string().describe("Environment variable name."),
+	"targetResources": array(string()).describe("Target resource IDs or patterns. None means every env-capable resource.").nullish(),
+	get "type"() {
+		return union([StackInputEnvironmentVariableTypeSchema, _null()]).optional();
+	}
+}).describe("How a resolved stack input is injected into runtime environment variables.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Primitive stack input kind.
+*/
+const StackInputKindSchema = _enum([
+	"string",
+	"secret",
+	"number",
+	"integer",
+	"boolean",
+	"enum",
+	"stringList"
+]).describe("Primitive stack input kind.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Who can provide a stack input value.
+*/
+const StackInputProviderSchema = _enum(["developer", "deployer"]).describe("Who can provide a stack input value.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Portable stack input validation constraints.
+*/
+const StackInputValidationSchema = object({
+	"format": string().describe("Semantic format hint such as url.").nullish(),
+	"max": string().describe("Maximum number.").nullish(),
+	"maxItems": int().min(0).describe("Maximum string-list items.").nullish(),
+	"maxLength": int().min(0).describe("Maximum string length.").nullish(),
+	"min": string().describe("Minimum number.").nullish(),
+	"minItems": int().min(0).describe("Minimum string-list items.").nullish(),
+	"minLength": int().min(0).describe("Minimum string length.").nullish(),
+	"pattern": string().describe("Portable whole-value regex pattern.").nullish(),
+	"values": array(string()).describe("Allowed string enum values.").nullish()
+}).describe("Portable stack input validation constraints.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Stack input definition serialized into a release stack.
+*/
+const StackInputDefinitionSchema = object({
+	get "default"() {
+		return union([StackInputDefaultValueSchema, _null()]).optional();
+	},
+	"description": string().describe("Human-facing helper text."),
+	get "env"() {
+		return array(StackInputEnvironmentMappingSchema.describe("How a resolved stack input is injected into runtime environment variables.")).describe("Runtime env-var mappings for v1 input resolution.").optional();
+	},
+	"id": string().describe("Stable input ID used by CLI/API calls."),
+	get "kind"() {
+		return StackInputKindSchema.describe("Primitive stack input kind.");
+	},
+	"label": string().describe("Human-facing field label."),
+	"placeholder": string().describe("Example placeholder shown in UI.").nullish(),
+	get "platforms"() {
+		return array(PlatformSchema.describe("Represents the target cloud platform.")).describe("Platforms where this input applies.").nullish();
+	},
+	get "providedBy"() {
+		return array(StackInputProviderSchema.describe("Who can provide a stack input value.")).describe("Who can provide this value.");
+	},
+	"required": boolean().describe("Whether a resolved value is required before deployment can proceed."),
+	get "validation"() {
+		return union([StackInputValidationSchema, _null()]).optional();
+	}
+}).describe("Stack input definition serialized into a release stack.");
 union([object({ "external": string().describe("Reference to another stack by ID") }), _enum(["current"])]).describe("Reference to a stack for management permissions");
 object({
 	"id": string().describe("Unique identifier for the stack"),
+	get "inputs"() {
+		return array(StackInputDefinitionSchema.describe("Stack input definition serialized into a release stack.")).describe("Input definitions required before setup or deployment can proceed.").optional();
+	},
 	get "permissions"() {
 		return PermissionsConfigSchema.describe("Combined permissions configuration that contains both profiles and management").optional();
 	},
@@ -8393,10 +8693,7 @@ const WorkerCodeSchema = union([object({
 object({
 	"commandsPushTarget": string().describe("Push target for commands delivery. Platform-specific:\n- AWS: Lambda function name or ARN\n- GCP: Full Pub/Sub topic path (projects/{project}/topics/{topic})\n- Azure: Service Bus \"{namespace}/{queue}\"").nullish(),
 	"identifier": string().describe("The ARN or platform-specific identifier.").nullish(),
-	get "loadBalancerEndpoint"() {
-		return union([LoadBalancerEndpointSchema, _null()]).optional();
-	},
-	"url": string().describe("The invocation URL (if applicable, e.g., for public ingress or specific platforms).").nullish(),
+	"publicEndpoints": optional(object({}).catchall(lazy(() => PublicEndpointOutputSchema).describe("Runtime-resolved public endpoint metadata.")).describe("Public endpoints resolved for this worker.")),
 	"workerName": string().describe("The platform-specific worker name.")
 }).describe("Outputs generated by a successfully provisioned Worker.");
 /**
@@ -8404,6 +8701,18 @@ object({
 * Do not edit manually.
 */
 /**
+* @description Public endpoint configuration for Worker resources.
+*/
+const WorkerPublicEndpointSchema = object({
+	"hostLabel": string().describe("Optional DNS label override for generated endpoint hostnames.").nullish(),
+	"name": string().describe("Endpoint name within the resource."),
+	"wildcardSubdomains": optional(boolean().describe("Whether to route wildcard subdomains to this endpoint."))
+}).describe("Public endpoint configuration for Worker resources.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
 * @description Defines what triggers a worker execution.
 */
 const WorkerTriggerSchema = union([
@@ -8433,14 +8742,14 @@ object({
 	"concurrencyLimit": int().min(0).describe("Maximum number of concurrent executions allowed for the worker.\nNone means platform default applies.").nullish(),
 	"environment": optional(object({}).catchall(string()).describe("Key-value pairs to set as environment variables for the worker.")),
 	"id": string().describe("Identifier for the worker. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]).\nMaximum 64 characters."),
-	get "ingress"() {
-		return IngressSchema.default("private").optional();
-	},
 	get "links"() {
 		return array(ResourceRefSchema.describe("New ResourceRef that works with any resource type.\nThis can eventually replace the enum-based ResourceRef for full extensibility.")).describe("List of resource references this worker depends on.");
 	},
 	"memoryMb": optional(int().min(0).default(256).describe("Memory allocated to the worker in megabytes (MB).\nDefault: 256\n\nPlatform-specific constraints:\n- **AWS Lambda**: 128–10240 MB in 1 MB increments\n- **GCP Cloud Run**: 128–32768 MB\n- **Azure Container Apps**: fixed CPU/memory pairs — 512, 1024, 1536, 2048, 2560,\n  3072, 3584, 4096 MB. Values below 512 are automatically rounded up at deploy time.")),
 	"permissions": string().describe("Permission profile name that defines the permissions granted to this worker.\nThis references a profile defined in the stack's permission definitions."),
+	get "publicEndpoints"() {
+		return array(WorkerPublicEndpointSchema.describe("Public endpoint configuration for Worker resources.")).describe("Public endpoints exposed by this worker.");
+	},
 	get "readinessProbe"() {
 		return union([ReadinessProbeSchema, _null()]).optional();
 	},

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alienplatform/sdk",
-  "version": "1.8.0",
+  "version": "1.10.0",
   "type": "module",
   "exports": {
     ".": {
@@ -50,7 +50,7 @@
     "protobufjs": "^7.5.3",
     "ts-pattern": "^5.7.1",
     "zod": "4.3.2",
-    "@alienplatform/core": "^1.8.0"
+    "@alienplatform/core": "^1.10.0"
   },
   "scripts": {
     "build": "tsdown && tsc --emitDeclarationOnly",