@alienplatform/sdk 3.3.32 → 3.3.34

package/dist/dist.js

@@ -6033,7 +6033,8 @@ const AlienEventSchema = union([
 	object({
 		"platform": string().describe("Platform being targeted"),
 		"stack": string().describe("Name of the stack being checked"),
-		"type": _enum(["RunningPreflights"])
+		"type": _enum(["RunningPreflights"]),
+		"warnings": optional(array(string()).describe("Non-blocking diagnostics reported by the completed checks."))
 	}),
 	object({
 		"targetTriple": string().describe("Target triple for the runtime"),
@@ -6982,7 +6983,10 @@ const AwsIamRoleServiceAccountHeartbeatDataSchema = object({
 	},
 	"tagCount": int().min(0)
 });
-object({ "keyArn": string().describe("Immutable KMS key ARN. Alias ARNs are not accepted.") }).describe("AWS KMS key created by the customer-installed setup stack.");
+object({
+	"availabilityProbe": optional(boolean().describe("Setup installed the scoped key availability probe permission.")),
+	"keyArn": string().describe("Immutable KMS key ARN. Alias ARNs are not accepted.")
+}).describe("AWS KMS key created by the customer-installed setup stack.");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -8891,7 +8895,8 @@ const ComputePoolSelectionSchema = union([object({
 */
 const ContainerResourceSelectionSchema = object({
 	"cpu": number().describe("CPU allocation in vCPUs.").nullish(),
-	"memory": string().describe("Memory allocation, using binary units such as Mi or Gi.").nullish()
+	"memory": string().describe("Memory allocation, using binary units such as Mi or Gi.").nullish(),
+	"volumeSizeGib": int().min(0).describe("Persistent volume capacity per replica, in whole GiB. Omitted values\nuse the release default. Existing volumes can only grow.").nullish()
 }).describe("Deployment-time resource allocation for a container. Omitted fields use release defaults.");
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -9534,6 +9539,9 @@ const PersistentStorageSchema = object({
 	get "backups"() {
 		return VolumeBackupsSchema.describe("Scheduled snapshots of a persistent volume.\n\nThe cloud's own scheduler takes the snapshots (AWS Data Lifecycle Manager,\na Compute Engine snapshot schedule, or Azure Disk Backup), so they keep being\ntaken while the deployment is unreachable. Snapshots are crash-consistent:\nthe volume as it would be after a sudden power loss. When a container is\ndeleted, Alien keeps one final snapshot of each volume.\n\nKubernetes deployments leave volume backups to the cluster's own tooling,\nand local deployments don't snapshot volumes. Neither reports volumes in\n`ContainerOutputs.volumes` or a `volumeBackups` status.").optional();
 	},
+	get "encryptionKey"() {
+		return union([ResourceRefSchema, _null()]).optional();
+	},
 	"mountPath": string().describe("Mount path inside the container"),
 	"size": string().describe("Storage size (e.g., \"100Gi\", \"500Gi\")")
 }).describe("Persistent storage configuration for stateful containers.");
@@ -9972,6 +9980,34 @@ object({
 * Do not edit manually.
 */
 /**
+* @description Commands for a shell family. Values are never sent to the control plane.
+*/
+const DeployerSecretCommandVariantsSchema = object({
+	"inline": string().describe("Command with a visible value placeholder; shell history can retain it."),
+	"prompt": string().describe("Hidden-input command, without the value in shell history or process arguments.")
+}).describe("Commands for a shell family. Values are never sent to the control plane.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
+* @description Shell-specific instructions generated beside the secret location.
+*/
+const DeployerSecretCommandsSchema = object({
+	"checkCommand": string().describe("Read-only identity check, valid in both shell families.").nullish(),
+	"target": string().describe("Expected account, project, subscription or Kubernetes namespace.").nullish(),
+	get "unix"() {
+		return DeployerSecretCommandVariantsSchema.describe("Commands for a shell family. Values are never sent to the control plane.");
+	},
+	get "windows"() {
+		return DeployerSecretCommandVariantsSchema.describe("Commands for a shell family. Values are never sent to the control plane.");
+	}
+}).describe("Shell-specific instructions generated beside the secret location.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
 * @description The secret store a deployer writes a vault-native secret into.
 */
 const DeployerSecretStoreSchema = _enum([
@@ -9989,7 +10025,10 @@ const DeployerSecretStoreSchema = _enum([
 * @description Where a deployer writes a vault-native secret.
 */
 const DeployerSecretLocationSchema = object({
-	"cliCommand": string().describe("Command that writes the value, with `<VALUE>` in place of the secret."),
+	"cliCommand": string().describe("Command that prompts without echoing and writes the value through stdin."),
+	get "commands"() {
+		return union([DeployerSecretCommandsSchema, _null()]).optional();
+	},
 	"consoleUrl": string().describe("Cloud console page where the secret is created, when the store has one.").nullish(),
 	"deleteCommand": string().describe("Command that deletes the secret. Deleting a deployment keeps the\nsecrets the deployer wrote, since Alien never owned their values.").nullish(),
 	"name": string().describe("Full name of the secret in that store."),
@@ -11162,6 +11201,7 @@ const KeyHeartbeatDataSchema = union([
 	})
 ]);
 object({
+	"available": boolean().describe("Latest key availability observation. Absent on older imported states.\nA false observation suspends dependent reconciliation without replacing resources.").nullish(),
 	get "fingerprint"() {
 		return KeyFingerprintSchema.describe("Stable identity of a provider key family.\n\nProvider-native version rotation does not change this value. Replacing the\nprovider key does.");
 	},
@@ -11967,6 +12007,9 @@ object({
 		return union([PostgresBackendSchema, _null()]).optional();
 	},
 	"cpu": string().describe("Requested vCPUs (e.g. \"0.5\", \"2\"). None = smallest available tier.").nullish(),
+	get "encryptionKey"() {
+		return union([ResourceRefSchema, _null()]).optional();
+	},
 	"highAvailability": optional(boolean().describe("Multi-AZ / regional / zone-redundant high availability. Default false.")),
 	"id": string(),
 	"memory": string().describe("Requested memory (e.g. \"1Gi\", \"8Gi\"). None = smallest available tier.").nullish(),
@@ -12424,6 +12467,14 @@ object({
 * Do not edit manually.
 */
 /**
+* @description Whether setup remains a separate administrator operation.
+*/
+const SetupManagementSchema = _enum(["manual", "automatic"]).describe("Whether setup remains a separate administrator operation.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
+/**
 * @description How telemetry (logs, metrics, traces) is handled.
 */
 const TelemetryModeSchema = _enum([
@@ -12472,6 +12523,10 @@ const StackSettingsSchema = object({
 		return union([NetworkSettingsSchema, _null()]).optional();
 	},
 	"publicEndpoints": object({}).catchall(object({}).catchall(string())).describe("Exact externally managed endpoint URLs, keyed by resource ID and endpoint name.\n\nThis is intended for adopted Machines deployments whose DNS and certificates remain\ncustomer-owned. The platform passes these URLs to the runtime without creating or\nreplacing DNS records or certificates.").nullish(),
+	"quotaWarningOverrides": optional(array(string()).describe("Provider quota identities whose preflight failures become visible warnings\nfor this deployment. Checks still run; deploy-time provider limits still apply.\nUnknown identities are rejected. An empty list restores normal blocking.")),
+	get "setupManagement"() {
+		return SetupManagementSchema.describe("Whether setup remains a separate administrator operation.").optional();
+	},
 	get "telemetry"() {
 		return TelemetryModeSchema.describe("How telemetry (logs, metrics, traces) is handled.").optional();
 	},
@@ -13433,5 +13488,13 @@ const BindingNotFoundError = defineError({
 	internal: false,
 	httpStatusCode: 404
 });
+defineError({
+	code: "INVALID_ENCRYPTION_KEY",
+	context: object({ resourceType: string() }),
+	message: ({ resourceType }) => `Encryption requires an alien.Key, received '${resourceType}'`,
+	retryable: false,
+	internal: false,
+	httpStatusCode: 400
+});
 //#endregion
 export { logSystemWarn as _, object as a, getCommands as c, onQueueMessage as d, onStorageEvent as f, logSystemError as g, waitUntil as h, defineError as i, getEventHandlers as l, setOnTaskRegistered as m, BindingNotFoundError as n, string as o, runCommand as p, InvalidBindingConfigError as r, command as s, AlienError as t, onCronEvent as u };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alienplatform/sdk",
-  "version": "3.3.32",
+  "version": "3.3.34",
   "type": "module",
   "files": [
     "dist"
@@ -57,9 +57,9 @@
     "nice-grpc": "^2.1.11",
     "nice-grpc-common": "^2.0.2",
     "zod": "^4.5.2",
-    "@alienplatform/ai-gateway": "^3.3.32",
-    "@alienplatform/bindings": "^3.3.32",
-    "@alienplatform/core": "^3.3.32"
+    "@alienplatform/ai-gateway": "^3.3.34",
+    "@alienplatform/bindings": "^3.3.34",
+    "@alienplatform/core": "^3.3.34"
   },
   "scripts": {
     "build": "tsdown && tsc --emitDeclarationOnly",