@alienplatform/sdk 3.3.20 → 3.3.22

package/dist/dist.js

@@ -6714,8 +6714,8 @@ const SandboxHeartbeatStatusSchema = object({
 * @description AWS: the image a sandbox runs from, and the lifecycle state AWS reports for it.
 */
 const AwsMicrovmSandboxHeartbeatDataSchema = object({
-	"imageIdentifier": string().describe("Image the sessions belong to."),
-	"imageState": string().describe("The image's own lifecycle state, which is where AWS surfaces base-image deprecation.\n\nNo session count sits beside it: counting means `lambda:ListMicrovms`, which authorizes\nagainst no resource type and so cannot be granted without an account-wide reach the\npermission sets refuse. A field only an over-broad grant could fill is a field whose\nimplementer ships AccessDenied into a customer's account.").nullish(),
+	"imageIdentifier": string().describe("Image the sandboxes belong to."),
+	"imageState": string().describe("The image's own lifecycle state, which is where AWS surfaces base-image deprecation.\n\nNo sandbox count sits beside it: counting means `lambda:ListMicrovms`, which authorizes\nagainst no resource type and so cannot be granted without an account-wide reach the\npermission sets refuse. A field only an over-broad grant could fill is a field whose\nimplementer ships AccessDenied into a customer's account.").nullish(),
 	get "status"() {
 		return SandboxHeartbeatStatusSchema;
 	}
@@ -6988,9 +6988,9 @@ object({
 	"egressConnectorArns": optional(array(string()).describe("Egress network connectors. Deleting one while MicroVMs still reference it breaks their\nnetworking, so teardown needs them named rather than rediscovered.")),
 	"imageArn": string().describe("MicroVM image ARN. Absent until a runtime-provisioned image has been built.").nullish(),
 	"imageIdentifier": string().describe("MicroVM image identifier. Absent until a runtime-provisioned image has been built.").nullish(),
-	"imageVersion": string().describe("Image version the sessions are scoped to. Re-imported on every image roll, and absent\nuntil a runtime-provisioned image has been built.").nullish(),
+	"imageVersion": string().describe("Image version the sandboxes are scoped to. Re-imported on every image roll, and absent\nuntil a runtime-provisioned image has been built.").nullish(),
 	"previewPorts": optional(array(int().min(0)).describe("Ports a preview capability may be minted for; empty means preview is not offered."))
-}).describe("AWS Sandbox ImportData.\n\nCarries the sandbox's parent from the setup emitter to the runtime controller. The image\n**version** is not decoration: `RunMicrovm` has no `tags`, so image plus version is the only\nsession identity there is, and a controller holding a stale version would enumerate the wrong\nset and orphan every session started on the previous one.\n\nTwo shapes arrive here, and which fields are present says which. A Frozen sandbox is built by\nstack creation and names its image; a Live one is built by the controller after the deployment\nregisters, so it names the build role and bundle instead, leaving the image fields empty.");
+}).describe("AWS Sandbox ImportData.\n\nCarries the sandbox's parent from the setup emitter to the runtime controller. The image\n**version** is not decoration: `RunMicrovm` has no `tags`, so image plus version is the only\nsandbox identity there is, and a controller holding a stale version would enumerate the wrong\nset and orphan every sandbox started on the previous one.\n\nTwo shapes arrive here, and which fields are present says which. A Frozen sandbox is built by\nstack creation and names its image; a Live one is built by the controller after the deployment\nregisters, so it names the build role and bundle instead, leaving the image fields empty.");
 object({
 	"roleArn": string().describe("IAM role ARN."),
 	"roleName": string().describe("IAM role name."),
@@ -7589,7 +7589,7 @@ const AzureResourceProviderActivationHeartbeatDataSchema = object({
 * Do not edit manually.
 */
 /**
-* @description Azure: the sandbox group\'s ARM state. The data plane has no list operation, so a session count\nis not available here.
+* @description Azure: the sandbox group\'s ARM state. The data plane has no list operation, so a sandbox count\nis not available here.
 */
 const AzureSandboxGroupHeartbeatDataSchema = object({
 	"provisioningState": string().nullish(),
@@ -7597,7 +7597,7 @@ const AzureSandboxGroupHeartbeatDataSchema = object({
 	get "status"() {
 		return SandboxHeartbeatStatusSchema;
 	}
-}).describe("Azure: the sandbox group's ARM state. The data plane has no list operation, so a session count\nis not available here.");
+}).describe("Azure: the sandbox group's ARM state. The data plane has no list operation, so a sandbox count\nis not available here.");
 object({
 	"region": string().describe("Region the group lives in; selects the ADC endpoint."),
 	"resourceGroup": string().describe("Resource group containing the sandbox group."),
@@ -7613,9 +7613,9 @@ object({
 }).describe("Azure ServiceAccount ImportData — User-Assigned Managed Identity\n(UAMI) plus optional Federated Identity Credentials trusting Alien's\nOIDC issuer.");
 object({
 	"providerNamespace": string().describe("Resource provider namespace (e.g. `Microsoft.App`)."),
-	"registered": boolean().describe("True once the provider is reported `Registered`."),
+	"registered": boolean().describe("Whether setup established the registration. False from a Terraform package: it registers\nnothing, and the runtime reads the real state on its first refresh."),
 	"subscriptionId": string().describe("Subscription ID the provider was registered on.")
-}).describe("Azure ServiceActivation ImportData — registers an Azure resource\nprovider on the customer's subscription.\n\nAdded by the `AzureServiceActivationMutation` preflight when the\nstack contains resources that depend on a specific Azure RP\n(Microsoft.App, Microsoft.Storage, Microsoft.KeyVault, …).");
+}).describe("Azure ServiceActivation ImportData — names an Azure resource provider the\nsubscription must have registered.\n\nAdded by the `AzureServiceActivationMutation` preflight when the\nstack contains resources that depend on a specific Azure RP\n(Microsoft.App, Microsoft.Storage, Microsoft.KeyVault, …).");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -9381,20 +9381,21 @@ union([
 		"updatedAt": datetime().describe("Timestamp when the state changed")
 	})
 ]).describe("Represents a change to an event");
+object({ "engineId": string().describe("The engine's resource name, or the bare id it ends with.") }).describe("GCP Agent Platform reasoning-engine ImportData.\n\nEmitted only for a Frozen engine, which the setup stack creates. Vertex assigns the id, so it\nis read off the created resource rather than derived: the controller and the template beneath\nit address the engine by exactly this segment.");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
 /**
-* @description GCP: the Agent Platform template sessions are cut from, and the engine it hangs under.\n\nNo session count: that needs `aiplatform.sandboxEnvironments.list`, which only the management\npermission set holds. No template state either — emission is gated on reading it `ACTIVE`,\nwhich is what `status` already says.
+* @description GCP: the Agent Platform template sandboxes are cut from, and the engine it hangs under.\n\nNo sandbox count: that needs `aiplatform.sandboxEnvironments.list`, which only the management\npermission set holds. No template state either — emission is gated on reading it `ACTIVE`,\nwhich is what `status` already says.
 */
 const GcpAgentPlatformSandboxHeartbeatDataSchema = object({
 	"engine": string().describe("Reasoning engine the template hangs under, without which the template id names nothing."),
 	get "status"() {
 		return SandboxHeartbeatStatusSchema;
 	},
-	"templateId": string().describe("The template sessions are currently cut from.")
-}).describe("GCP: the Agent Platform template sessions are cut from, and the engine it hangs under.\n\nNo session count: that needs `aiplatform.sandboxEnvironments.list`, which only the management\npermission set holds. No template state either — emission is gated on reading it `ACTIVE`,\nwhich is what `status` already says.");
+	"templateId": string().describe("The template sandboxes are currently cut from.")
+}).describe("GCP: the Agent Platform template sandboxes are cut from, and the engine it hangs under.\n\nNo sandbox count: that needs `aiplatform.sandboxEnvironments.list`, which only the management\npermission set holds. No template state either — emission is gated on reading it `ACTIVE`,\nwhich is what `status` already says.");
 object({
 	"projectId": string().describe("Project ID hosting the registry."),
 	"pullServiceAccountEmail": string().describe("Service account email with pull-only access."),
@@ -9648,6 +9649,7 @@ object({
 	"serviceAccountEmail": string().describe("Service account email the manager impersonates."),
 	"serviceAccountUniqueId": string().describe("Stable unique id Google assigns to the service account.")
 }).describe("GCP RemoteStackManagement ImportData — cross-project service account\nthe manager impersonates.");
+object({ "region": string().describe("Region the setup stack applied in; selects the regional Agent Platform endpoint.") }).describe("GCP Agent Platform sandbox ImportData.\n\nThe sandbox is the environment template, which is release-owned under either lifecycle: setup\ncreates no template, so this carries only the region the stack applied in. The engine registers\nits own id, and the template controller reads it from that dependency.");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -10582,6 +10584,36 @@ object({
 * Do not edit manually.
 */
 /**
+* @description One bundle the Operator needs to download to reach `targetBundleHash`.\nThe manager mints a short-lived presigned GET URL per bundle — the\nOperator never holds real cloud storage credentials, mirroring the OCI\nregistry proxy\'s credential-injection pattern.
+*/
+const OperationsBundleDownloadSchema = object({
+	"plugin": string().describe("Plugin name this bundle provides."),
+	"pluginVersion": string().describe("Plugin version this bundle provides."),
+	"url": string().describe("Presigned URL to GET the bundle ZIP from. Short-lived.")
+}).describe("One bundle the Operator needs to download to reach `targetBundleHash`.\nThe manager mints a short-lived presigned GET URL per bundle — the\nOperator never holds real cloud storage credentials, mirroring the OCI\nregistry proxy's credential-injection pattern.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description A single operation the Operator currently has loaded. Opaque identifiers\nonly — no tier, description, or other plugin business logic crosses into\nthis public crate.
+*/
+const ReportedOperationSchema = object({
+	"name": string().describe("Name of the operation within the plugin."),
+	"plugin": string().describe("Name of the plugin that owns this operation."),
+	"pluginVersion": string().describe("Version of the plugin that owns this operation.")
+}).describe("A single operation the Operator currently has loaded. Opaque identifiers\nonly — no tier, description, or other plugin business logic crosses into\nthis public crate.");
+object({
+	"loadedBundleHash": string().describe("Hash of the enabled-plugin bundle set the Operator currently has\nloaded. Compared against the platform's target hash to detect drift.").nullish(),
+	get "operations"() {
+		return array(ReportedOperationSchema.describe("A single operation the Operator currently has loaded. Opaque identifiers\nonly — no tier, description, or other plugin business logic crosses into\nthis public crate.")).describe("Operations currently loaded and executable by the Operator.").optional();
+	}
+}).describe("Report-only summary of the operations the Operator has loaded, used to\nconfirm a bundle sync actually took effect.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
 * @description Combined permissions configuration that contains both profiles and management
 */
 const PermissionsConfigSchema = object({
@@ -10719,15 +10751,15 @@ const ResourceEntrySchema = object({
 * Do not edit manually.
 */
 /**
-* @description Content-free telemetry about a sandbox\'s sessions.\n\nNever anything from inside a session. A controller reaches only the cloud\'s management APIs,\nand the whole point of the resource is that the control plane cannot see what runs in it.
+* @description Content-free telemetry about what a sandbox resource is running.\n\nNever anything from inside a sandbox. A controller reaches only the cloud\'s management APIs,\nand the whole point of the resource is that the control plane cannot see what runs in it.
 */
 const SandboxHeartbeatDataSchema = union([
 	lazy(() => AwsMicrovmSandboxHeartbeatDataSchema).and(object({ "backend": _enum(["awsMicrovm"]) })).describe("AWS: the image a sandbox runs from, and the lifecycle state AWS reports for it."),
-	lazy(() => AzureSandboxGroupHeartbeatDataSchema).and(object({ "backend": _enum(["azureSandboxGroup"]) })).describe("Azure: the sandbox group's ARM state. The data plane has no list operation, so a session count\nis not available here."),
-	lazy(() => GcpAgentPlatformSandboxHeartbeatDataSchema).and(object({ "backend": _enum(["gcpAgentPlatform"]) })).describe("GCP: the Agent Platform template sessions are cut from, and the engine it hangs under.\n\nNo session count: that needs `aiplatform.sandboxEnvironments.list`, which only the management\npermission set holds. No template state either — emission is gated on reading it `ACTIVE`,\nwhich is what `status` already says."),
+	lazy(() => AzureSandboxGroupHeartbeatDataSchema).and(object({ "backend": _enum(["azureSandboxGroup"]) })).describe("Azure: the sandbox group's ARM state. The data plane has no list operation, so a sandbox count\nis not available here."),
+	lazy(() => GcpAgentPlatformSandboxHeartbeatDataSchema).and(object({ "backend": _enum(["gcpAgentPlatform"]) })).describe("GCP: the Agent Platform template sandboxes are cut from, and the engine it hangs under.\n\nNo sandbox count: that needs `aiplatform.sandboxEnvironments.list`, which only the management\npermission set holds. No template state either — emission is gated on reading it `ACTIVE`,\nwhich is what `status` already says."),
 	lazy(() => KubernetesSandboxHeartbeatDataSchema).and(object({ "backend": _enum(["kubernetesPods"]) })).describe("Kubernetes: pods carrying the sandbox label, in the deployment's namespace."),
 	lazy(() => LocalSandboxHeartbeatDataSchema).and(object({ "backend": _enum(["local"]) })).describe("Local: containers Docker still holds for this sandbox.")
-]).describe("Content-free telemetry about a sandbox's sessions.\n\nNever anything from inside a session. A controller reaches only the cloud's management APIs,\nand the whole point of the resource is that the control plane cannot see what runs in it.");
+]).describe("Content-free telemetry about what a sandbox resource is running.\n\nNever anything from inside a sandbox. A controller reaches only the cloud's management APIs,\nand the whole point of the resource is that the control plane cannot see what runs in it.");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -10914,7 +10946,7 @@ const ResourceHeartbeatDataSchema = union([
 	}),
 	object({
 		get "data"() {
-			return SandboxHeartbeatDataSchema.describe("Content-free telemetry about a sandbox's sessions.\n\nNever anything from inside a session. A controller reaches only the cloud's management APIs,\nand the whole point of the resource is that the control plane cannot see what runs in it.");
+			return SandboxHeartbeatDataSchema.describe("Content-free telemetry about what a sandbox resource is running.\n\nNever anything from inside a sandbox. A controller reaches only the cloud's management APIs,\nand the whole point of the resource is that the control plane cannot see what runs in it.");
 		},
 		"resourceType": _enum(["sandbox"])
 	})
@@ -10943,27 +10975,29 @@ object({
 	"domainEgressRules": boolean().describe("Egress can be restricted to a hostname allowlist"),
 	"egressDeny": boolean().describe("Whether a declared `deny` is actually enforced, rather than accepted and dropped"),
 	"enforcedLimits": boolean().describe("The platform enforces the declared cpu, memory and disk ceilings"),
-	"files": boolean().describe("Files can be moved in and out of a session"),
+	"files": boolean().describe("Files can be moved in and out of a sandbox"),
+	"jobs": boolean().describe("A command can be started, polled and cancelled across separate calls, so it outlives the\none that started it. False where nothing inside the sandbox owns the process in between."),
+	"pauseResume": boolean().describe("Sandbox state can be paused and resumed"),
 	"preview": boolean().describe("An authenticated, port-scoped capability to reach a service inside the sandbox"),
-	"processLimit": boolean().describe("The platform can cap how many processes a session runs"),
-	"reconnect": boolean().describe("A later call can reach a session created by an earlier one"),
-	"sessionLifetime": boolean().describe("The platform terminates a session at a declared wall-clock deadline"),
-	"snapshot": boolean().describe("A session's full state can be captured and used to create another"),
+	"processLimit": boolean().describe("The platform can cap how many processes a sandbox runs"),
+	"reconnect": boolean().describe("A later call can reach a sandbox created by an earlier one"),
+	"sandboxLifetime": boolean().describe("The platform terminates a sandbox at a declared wall-clock deadline"),
+	"snapshot": boolean().describe("A sandbox's full state can be captured and used to create another"),
 	"supervisorIsolation": boolean().describe("The process supervising a command is a different identity from the command.\n\nFalse where a command runs as the agent's own user: it can then read the supervisor's\nenvironment and signal it. Separate from `supervisorPidNamespace`, which is about\nvisibility rather than identity — a backend can have one without the other."),
-	"supervisorPidNamespace": boolean().describe("A command runs in its own PID namespace and cannot see or signal the agent's processes.\n\nOnly where an agent runs as root. Creating the namespace needs `CAP_SYS_ADMIN`, and the\nKubernetes sandbox pod drops every capability — which is also what denies `ptrace` by\nconstruction, so granting it there would remove a lock to add one."),
-	"suspendResume": boolean().describe("Session state can be suspended and resumed")
+	"supervisorPidNamespace": boolean().describe("A command runs in its own PID namespace and cannot see or signal the agent's processes.\n\nOnly where an agent runs as root. Creating the namespace needs `CAP_SYS_ADMIN`, and the\nKubernetes sandbox pod drops every capability — which is also what denies `ptrace` by\nconstruction, so granting it there would remove a lock to add one.")
 }).describe("What a platform's sandbox backend can actually do.\n\nPublished so portable code can branch before calling rather than discovering a gap through\nan error. Every field here corresponds to a capability that at least one platform lacks;\ncreate, exec and terminate are the guaranteed floor and are therefore not listed.");
 _enum([
 	"files",
 	"reconnect",
+	"jobs",
 	"preview",
-	"suspendResume",
+	"pauseResume",
 	"snapshot",
 	"domainEgressRules",
 	"egressDeny",
 	"enforcedLimits",
 	"processLimit",
-	"sessionLifetime",
+	"sandboxLifetime",
 	"supervisorPidNamespace",
 	"supervisorIsolation"
 ]).describe("Names a single sandbox capability, so an unsupported call can report which one it needed.");
@@ -11004,30 +11038,30 @@ const SandboxEgressSchema = union([
 * Do not edit manually.
 */
 /**
-* @description Hard ceilings enforced on a sandbox session.\n\nThese are limits, not scheduling requests. Untrusted code does not respect a hint, so every\nfield is enforced by the platform and a platform that cannot enforce one is rejected at plan\ntime rather than silently ignoring it.
+* @description How long a sandbox may live and when it is paused.\n\nDeclaration-time ceilings, not per-request values: every sandbox created through this\ndeclaration\'s binding is held to them, whatever a caller asks for at runtime.
+*/
+const SandboxLifecyclePolicySchema = object({
+	"idlePauseSeconds": int().min(0).describe("Idle period after which the sandbox is paused, where the platform supports it").nullish(),
+	"maxLifetimeSeconds": int().min(0).describe("Wall-clock ceiling on a single sandbox, after which the platform terminates it.\n\nOptional because not every backend has the primitive: Kubernetes has\n`activeDeadlineSeconds` and AWS `maximumDurationInSeconds`, while neither Azure nor Local\nexpose one, so declaring a ceiling there is refused at plan time rather than accepted and\nnever applied. AWS caps it at 8 hours.").nullish()
+}).describe("How long a sandbox may live and when it is paused.\n\nDeclaration-time ceilings, not per-request values: every sandbox created through this\ndeclaration's binding is held to them, whatever a caller asks for at runtime.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Hard ceilings enforced on a sandbox.\n\nThese are limits, not scheduling requests. Untrusted code does not respect a hint, so every\nfield is enforced by the platform and a platform that cannot enforce one is rejected at plan\ntime rather than silently ignoring it.
 */
 const SandboxLimitsSchema = object({
 	"cpu": string().describe("CPU ceiling in cores or millicores (e.g. `\"1\"`, `\"500m\"`)"),
 	"disk": string().describe("Disk ceiling (e.g. `\"20Gi\"`)"),
 	"maxProcesses": int().min(0).describe("Maximum number of processes, which bounds fork bombs.\n\nOptional because only a container runtime has the primitive: Kubernetes sets a pid ceiling\nper node, not per pod, and neither AWS MicroVMs nor Azure sandboxes expose one. Declaring\nit on a platform that cannot apply it is refused at plan time.").nullish(),
 	"memory": string().describe("Memory ceiling (e.g. `\"2Gi\"`, `\"512Mi\"`)")
-}).describe("Hard ceilings enforced on a sandbox session.\n\nThese are limits, not scheduling requests. Untrusted code does not respect a hint, so every\nfield is enforced by the platform and a platform that cannot enforce one is rejected at plan\ntime rather than silently ignoring it.");
+}).describe("Hard ceilings enforced on a sandbox.\n\nThese are limits, not scheduling requests. Untrusted code does not respect a hint, so every\nfield is enforced by the platform and a platform that cannot enforce one is rejected at plan\ntime rather than silently ignoring it.");
 object({
-	"endpoint": string().describe("Data-plane endpoint sessions are created through, where the platform has one").nullish(),
+	"endpoint": string().describe("Data-plane endpoint sandboxes are created through, where the platform has one").nullish(),
 	"identifier": string().describe("Platform-specific identifier for the parent (image ARN, sandbox group id, namespace)").nullish(),
-	"parentName": string().describe("Name of the durable parent that sessions are created inside")
+	"parentName": string().describe("Name of the durable parent that sandboxes are created inside")
 }).describe("Outputs generated by a successfully provisioned Sandbox parent.");
-/**
-* Generated by Kubb (https://kubb.dev/).
-* Do not edit manually.
-*/
-/**
-* @description How long a session may live and when it is suspended.
-*/
-const SandboxSessionPolicySchema = object({
-	"idleSuspendSeconds": int().min(0).describe("Idle period after which the session is suspended, where the platform supports it").nullish(),
-	"maxLifetimeSeconds": int().min(0).describe("Wall-clock ceiling on a single session, after which the platform terminates it.\n\nOptional because not every backend has the primitive: Kubernetes has\n`activeDeadlineSeconds` and AWS `maximumDurationInSeconds`, while neither Azure nor Local\nexpose one, so declaring a ceiling there is refused at plan time rather than accepted and\nnever applied. AWS caps it at 8 hours.").nullish()
-}).describe("How long a session may live and when it is suspended.");
 object({
 	get "code"() {
 		return SandboxCodeSchema.describe("Specifies where the sandbox's root filesystem comes from.");
@@ -11036,14 +11070,14 @@ object({
 		return SandboxEgressSchema.describe("Outbound network policy for a sandbox.");
 	},
 	"id": string().describe("Identifier for the sandbox. Must contain only alphanumeric characters, hyphens, and\nunderscores ([A-Za-z0-9-_]). Maximum 64 characters."),
+	get "lifecycle"() {
+		return SandboxLifecyclePolicySchema.describe("How long a sandbox may live and when it is paused.\n\nDeclaration-time ceilings, not per-request values: every sandbox created through this\ndeclaration's binding is held to them, whatever a caller asks for at runtime.");
+	},
 	get "limits"() {
 		return union([SandboxLimitsSchema, _null()]).optional();
 	},
-	"previewPorts": optional(array(int().min(0)).describe("Ports eligible for a preview capability. An application reaches its sandbox through the\nprovider, so it cannot widen its own ingress at runtime; a holder of a remote binding's\ncredentials is bounded by no port condition, which is why a remote sandbox declares none.")),
-	get "session"() {
-		return SandboxSessionPolicySchema.describe("How long a session may live and when it is suspended.");
-	}
-}).describe("An isolated environment for running untrusted code, created per session at runtime.");
+	"previewPorts": optional(array(int().min(0)).describe("Ports eligible for a preview capability. An application reaches its sandbox through the\nprovider, so it cannot widen its own ingress at runtime; a holder of a remote binding's\ncredentials is bounded by no port condition, which is why a remote sandbox declares none."))
+}).describe("An isolated environment for running untrusted code, created at runtime.");
 object({ "timestamp": datetime().describe("The timestamp when the event was scheduled or triggered.") }).describe("Represents a scheduled event trigger, typically from a cron job or timer.\n\nThis struct aims to provide a common representation for scheduled events\nacross different providers like AWS CloudWatch Events, Google Cloud Scheduler,\nand Azure Timer Triggers.");
 object({
 	"identity": string().describe("The platform-specific identifier of the service account\n- AWS: Role ARN\n- GCP: Service Account email\n- Azure: Managed Identity client ID"),
@@ -11348,6 +11382,12 @@ object({
 	"versioning": optional(boolean().describe("Enables object versioning.\nDefault: `false`"))
 }).describe("Represents an object storage bucket.");
 lazy(() => CommandResponseSchema).describe("Command response from deployment").describe("Request to submit a command response (from deployment)");
+object({
+	get "bundles"() {
+		return array(OperationsBundleDownloadSchema.describe("One bundle the Operator needs to download to reach `targetBundleHash`.\nThe manager mints a short-lived presigned GET URL per bundle — the\nOperator never holds real cloud storage credentials, mirroring the OCI\nregistry proxy's credential-injection pattern.")).describe("Presigned downloads for every bundle in the target set. The Operator\nfetches only the ones it doesn't already have loaded at the right\nversion; already-loaded bundles are harmless to re-download.").optional();
+	},
+	"hash": string().describe("Hash identifying this exact enabled-plugin set. Compare against\n`OperationsReport.loadedBundleHash` to detect drift.")
+}).describe("Target operations-bundle set for the Operator to converge its loaded\nplugin registry toward, independent of any release/config target — a\nplugin can be enabled with no release change, so this is not nested under\n`TargetDeployment`.");
 object({ "size": int().min(0).describe("Size of uploaded data") }).describe("Request to mark upload as complete");
 object({
 	"commandId": string().describe("Command identifier"),

package/dist/index.d.ts

@@ -28,7 +28,7 @@
  */
 export type { CronEvent, QueueMessage, QueueMessageEvent, ScheduledEvent, StandardSchema, StandardSchemaOutput, StorageEvent, StorageEventType, WorkerCommandContext, } from "./worker-runtime/registry.js";
 export { command, onCronEvent, onQueueMessage, onStorageEvent, waitUntil, } from "./worker-runtime/registry.js";
-export type { CommandFrame, Container, Kv, Postgres, PostgresConnection, PostgresSslMode, Queue, RunCommandOptions, Sandbox, SandboxSession, Storage, Vault, } from "@alienplatform/bindings";
+export type { CommandFrame, Container, CreateSandboxOptions, JobError, JobExit, JobPoll, Kv, Postgres, PostgresConnection, PostgresSslMode, Queue, ResolvedSandbox, RunCommandOptions, Sandbox, SandboxInstance, Storage, Vault, } from "@alienplatform/bindings";
 export { container, kv, postgres, queue, sandbox, storage, vault } from "@alienplatform/bindings";
 export type { AiBinding, AiConnection, AiModel, AmbientAiBinding, ChatCompletionCreateParams, ExternalAiBinding, ResponseCreateParams, } from "@alienplatform/ai-gateway";
 export { Ai, ai, getAiConnection, isExternalAiBinding, parseAiBinding, startAiGateway, } from "@alienplatform/ai-gateway";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAOH,YAAY,EACV,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,OAAO,EACP,WAAW,EACX,cAAc,EACd,cAAc,EACd,SAAS,GACV,MAAM,8BAA8B,CAAA;AAMrC,YAAY,EACV,YAAY,EACZ,SAAS,EACT,EAAE,EACF,QAAQ,EACR,kBAAkB,EAClB,eAAe,EACf,KAAK,EACL,iBAAiB,EACjB,OAAO,EACP,cAAc,EACd,OAAO,EACP,KAAK,GACN,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAMjG,YAAY,EACV,SAAS,EACT,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EACL,EAAE,EACF,EAAE,EACF,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,cAAc,GACf,MAAM,2BAA2B,CAAA;AAMlC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACnE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAOH,YAAY,EACV,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,OAAO,EACP,WAAW,EACX,cAAc,EACd,cAAc,EACd,SAAS,GACV,MAAM,8BAA8B,CAAA;AAMrC,YAAY,EACV,YAAY,EACZ,SAAS,EACT,oBAAoB,EACpB,QAAQ,EACR,OAAO,EACP,OAAO,EACP,EAAE,EACF,QAAQ,EACR,kBAAkB,EAClB,eAAe,EACf,KAAK,EACL,eAAe,EACf,iBAAiB,EACjB,OAAO,EACP,eAAe,EACf,OAAO,EACP,KAAK,GACN,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAMjG,YAAY,EACV,SAAS,EACT,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EACL,EAAE,EACF,EAAE,EACF,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,cAAc,GACf,MAAM,2BAA2B,CAAA;AAMlC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACnE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alienplatform/sdk",
-  "version": "3.3.20",
+  "version": "3.3.22",
   "type": "module",
   "files": [
     "dist"
@@ -57,9 +57,9 @@
     "nice-grpc": "^2.1.11",
     "nice-grpc-common": "^2.0.2",
     "zod": "4.5.2",
-    "@alienplatform/ai-gateway": "^3.3.20",
-    "@alienplatform/bindings": "^3.3.20",
-    "@alienplatform/core": "^3.3.20"
+    "@alienplatform/ai-gateway": "^3.3.22",
+    "@alienplatform/bindings": "^3.3.22",
+    "@alienplatform/core": "^3.3.22"
   },
   "scripts": {
     "build": "tsdown && tsc --emitDeclarationOnly",