AIIntegration represents an integration with an AI/LLM provider

AIIntegrationTokenUsage represents account-level AI budget usage values.

AIModel represents a model available on an AI integration or provider.

AIProvider represents the available AI providers

AWSBedrockConfig is the Bedrock-specific provider configuration.

Metadata for a Ansible resource.

ApiKey represents a user-generated API key.

ApiKeyOIDCSettings represents the OIDC settings for an API key.

A role grant giving an API key access to a space, either directly or via an ancestor space.

This type represents one aspect data point

A collection of data points of some aspect

Percentile calculated for the returned data points.

Summary returned together with data points. Contains metadata generated from the data points.

Total sum of all data points

AuditTrailWebhook represents audit trail webhook configuration for the account.

AutoattachmentTarget is a stack or module that is autoattached to an entity that supports autoattachment.

AutoattachmentTargets is the list of autoattached stacks and modules.

AwsIntegration is an integration with AWS that you can attach to your stack

AwsIntegrationIntentProjectAttachment represents the attachment of an AWS integration to an intent project.

AwsIntegrationStackAttachment is the stack attachment viewed from the integration.

AzureIntegration represents an integration with an Azure AD tenant.

AzureIntegrationStackAttachment is the stack attachment viewed from the integration.

BillingAddon represents an addon that can be bought along with the plan.

BillingInfo represents account billing details stored in Stripe

BillingPlan represents a tier that can be bought.

BitbucketCloudIntegration shows Bitbucket Cloud integration details.

BitbucketDatacenterIntegration shows Bitbucket Datacenter integration details.

BlobStorageIntegration shows Blob Storage integration details.

Validations for a blueprint input field.

V2 template representation of a blueprint.

Limited blueprint version info returned for latest version queries.

Metadata for a CloudFormation output.

Metadata for a CloudFormation resource.

Commit represents a GitHub commit.

ConfigElement is a stack runtime configuration element: environment variable or file mount.

ContextStackAttachment is the stack attachment viewed from the Context.

Delta is the number of resources affected by a Run in various ways.

DriftDetectionIntegration describes a Stack's drift detection configuration.

EffectiveTerragruntVersionResult represents the effective Terragrunt and Terraform versions to be used in a stack.

A Terraform managed entity change description.

A Terraform managed entity change description.

ExternalIdForStackResult contains information needed for creating AWS AssumeRole policies for an integration stack attachment.

The result of evaluating a feature flag.

FlowsInstance represents a configured Flows deployment that accounts can link to.

FlowsIntegration represents a link between a Spacelift account and a Flows organization.

FlowsProject is a project in the linked Flows organization. It is the unit to which Space role bindings are assigned (resource-side authorization), the same way an Stack Role Binding is. The id is the external Flows project UUID.

FlowsProjectRoleBinding grants a Space Role to a Flows project.

GitHubAppManifest represents the data needed by the GitHub app creation form.

GithubEnterpriseIntegration shows GitHub Enterprise integration details.

GithubEnterpriseIntegrationInstallation represents a single GitHub Enterprise custom app installation.

GithubIntegration shows build-in GitHub integration details.

GitlabIntegration shows Gitlab integration details.

Hooks represents a collection of hooks extending the standard run lifecycle.

Identity represents a V2 identity record linked to a user via federation.

IdentityFederation represents the link between an identity and an external identity provider.

IntentChatConversation represents a chat conversation for Intent.

IntentChatMessage represents a single message in a chat conversation.

A page of resources managed by a spacelift/module intent resource.

IntentProject represents the execution context for MCP tool operations.

IntentProjectHclResult contains paginated HCL output for an intent project.

IntentProjectReference is a lightweight pointer to an IntentProject, returned by relations (e.g. WorkerPool.intentProjects) that don't need to expose the full IntentProject surface area.

Intent resource managed by intent projects

Dependency relationship between two intent resources.

Field mapping in a dependency relationship.

Intent resource operation

Metadata for a Kubernetes resource.

Metadata for a Kubernetes infra root.

LogMessage represents a single log line.

LogsResponse is a response to a query for a batch of logs.

Managed infrastructure entity

Managed infrastructure entity V2

This represent a managed state version

ManagedStateVersionConnection represents a single worker pool in a page of results.

MessageQueueStats is a point-in-time snapshot of how many messages a single queue currently holds. Surfaces only the two signals that drive the parallelism decision: messages ready to be picked up and messages already in flight. The UI can sum them for a "current load" display.

Module is a versioned and tested reusable collection of resources

ModuleConnection represents a single module in a page of results.

ModuleInput represents a single module input variable in ModuleMetadata.

ModuleMetadata represents a root module or a submodule within the module repository.

ModuleOutput represents a single module output in ModuleMetadata.

ModuleProviderDependency represents a single module's provider dependency.

ModuleRepositoryMetadata represents the entire module repository metadata.

ModuleResource represents a single resource managed by a module.

ModuleShareSpace is a deliberately restricted projection on a Space. It exposes only non-sensitive fields. A module share is visible to users in the TARGET space, who may have no access to the SOURCE space. Using the full `Space` type here leaked source-space details (description, labels, inheritEntities, access rules) to those principals regardless of their access level, because Space's field resolvers do not gate on access level. Narrowing the type makes the sensitive fields impossible to query. See https://app.clickup.com/t/869dzpd8k

A NamedWebhooksIntegration is a webhooks integration attached to a space with a name that can be referenced via notification policies. Each space can have one or more integration, allowing notification policies to route notifications to different webhook endpoints.

A newly created version of a managed Terraform provider.

Notification represents a single notification.

NotificationConnection represents a single notification in a page of results.

OAuthRedirect is a response to an OAuth redirect query.

OIDCSettings represent account's OIDC settings

Certificate earned by a user

Mission group associated with a user's onboarding progress

Onboarding progress for a single user

Reports whether a specific OpenTofu feature is supported for a given version.

Result of an openTofuMigrate enqueue call.

Result of an openTofuMigrationQueueClean call.

A single row in opentofu_migration_stacks exposed to the API.

Paginated search output for the OpenTofu migration queue.

The outcome of a collection of plan policies for a Run.

Plugin represents a reusable component that can be attached to various entities to extend functionality within Spacelift.

Plugin template represents a reusable plugin configuration that can be used to create plugin instances.

Plugin template parameter configuration

Policy is a rule or collection of rules that allow injecting custom logic into Spacelift's decision points.

PolicyEvaluationRecord is a record of policy evaluation. It contains a key, which can be separately used to retrieve the associated PolicyEvaluationSample.

PolicyEvaluationSample represents a single instance of policy evaluation.

PolicyRuntimeDetails represents the versions of the policy runtime used

PolicyStackAttachment is the policy-stack attachment viewed from the Policy.

PublicWorkerPool contains details of public worker pool for account.

PullRequest is Spacelift's representation of Pull Request on GitHub.

Metadata for a Pulumi output.

Metadata for a Pulumi resource.

Metadata for a Pulumi stack.

Repo represents a Spacelift-native VCS provider that stores files directly in PostgreSQL with encryption support and linear revision history.

RepoFile represents a file at a specific revision, including support for file deletion.

RepoFileContent represents deduplicated file content with optional encryption.

RepoFileHistoryOutput is the output type for repoFileHistory query.

ReposOutput is a paginated list of Repos.

GitHub repository with branches.

Revision represents an immutable commit in the linear history of a Repo.

RevisionsOutput is a paginated list of Revisions.

Run represents the main concept in Spacelift.

RunComment represents a single comment on a Run.

RunConnection represents a single run in a page of searchRuns results.

Experimental: Response to marking a dependency as complete.

Minutes that ran on a worker, split by whether that worker belonged to the public (default) pool. Only executing run states count: a run waiting in the queue has no worker assigned, so its minutes are recorded as private, and counting them would report queue time as private worker time. That filter is why these two numbers sum to less than dailyByRunType / dailyByRunState.

Run-minutes are state durations - the time between consecutive run state transitions - so a run contributes minutes to every state it passes through, not just the ones that occupy a worker. A duration counts in full against the day its state *started*; it is never split across day boundaries. A state entered at 23:50 and left 20 minutes later puts all 20 minutes on the earlier day, so a day's minutes can include time that elapsed later. Terminal states never appear: they have no next transition, hence no duration.

RunPolicyReceipt represents a single policy evaluation event that affected a Run.

RunResourceState represents a state of the Run. It's for Terraform-Provider, to allow spacelift run to read the state of another run.

RunReview represents a single Run review event.

Change in the Run state, along with its metadata.

RunWithPosition is a wrapper for run with its position in the queue.

RunWithPositionConnection represents a single queued run in a page of results.

RunWithStack is a run together with the stack (or module) it belongs to, so the account-wide runs view can render stack details without a separate per-stack query.

RuntimeConfig is the runtime configuration pulled from GitHub for each Run separately.

SAMLSettings represent account's SAML settings

SampledPolicyLibrary represents a single policy library captured as part of a policy evaluation sample.

A Scan describes a cloud-resource discovery configuration. Each scan can be executed many times via ScanRuns.

A ScanRun is one execution of a Scan.

ScanScope describes one resource type the worker should list, with optional filters that scope the listing.

SearchModulesOutput is a page of Modules.

SearchNotificationsOutput is a page of Notifications.

SearchRepoFilesOutput is the output type for searchRepoFiles query.

SearchReposOutput is the output type for searchRepos query.

SearchRevisionsOutput is the output type for searchRevisions query.

SearchRunsOutput is a page of account-wide runs returned by searchRuns.

SearchStacksOutput is a page of Stacks.

SearchSuggestionsField describes a field you can use for searching.

SearchSuggestionsOutput describes fields you can use for searching.

SearchSuggestionsPossibleValuesBoolean describes possible boolean values of a field.

SearchSuggestionsPossibleValuesEnum describes possible enum values of a field.

SearchSuggestionsPossibleValuesHierarchy describes possible values of a hierarchical field.

SearchSuggestionsPossibleValuesHierarchyNode describes a single possible value node of a hierarchical field.

SearchSuggestionsPossibleValuesString describes possible string values of a field.

SecurityKey represents hardware device that supports the FIDO2 protocol.

Session represents a single user session with a Spacelift account.

A grant derived from a live session's precomputed space access. There is no space field (always the queried space), no propagated/source field (the snapshot is flattened at login), and no binding (nothing revocable except the sessions themselves).

SharedModule contains information about a module an account has access to that is shared with it by another Spacelift account.

SharedVersion contains information about a module version that has been shared with this account by another Spacelift account.

Returns information about the Slack App used to integrate Spacelift with Slack.

SlackIntegration represents account's Slack integration

A group that a user belongs to, identifying the source of a group-derived grant. Deliberately minimal: the access view only needs to name the group; full group detail (members, counts, status) is available through the group queries.

A person with live sessions in a login-policy account. No ManagedUser row exists for them; this is the grouping of their live sessions, keyed by login.

The narrow stack view returned by stacksWithAccessToSpace: just enough to identify and label a stack in the access list, without pulling in the full Stack type and the associations it depends on.

SpaceActions define which actions are allowed in a space.

Stack represents a single Spacelift project.

StackAwsIntegrationAttachment is the AWS integration attachment viewed from the Stack.

StackAzureIntegrationAttachment is the Azure integration attachment viewed from the Stack.

Configuration specific to Ansible stacks.

Configuration specific to CloudFormation stacks.

Configuration specific to Kubernetes stacks.

Configuration specific to OpenTofu stacks.

Configuration specific to Pulumi stacks.

Configuration specific to Terraform stacks.

Configuration specific to Terragrunt stacks.

StackConnection represents a single stack in a page of results.

StackContextAttachment is the stack attachment viewed from the Stack.

StackDependency represents a dependency between two stacks.

AWS integration - with that set up, a Stack can assume an arbitrary AWS IAM role without setting up static credentials.

GCP integration - with that set up, a Stack gets its dedicated GCP service account and each run and tasks automatically gets its temporary credentials.

Slack integration - with that set up, a Stack or Module can send notifications about various events to a number of Slack channels.

StackIntegrations represents external integrations for an individual Stack.

Result of a bulk vendor migration operation.

StackOutput represents a single stack output field.

StackPolicyAttachment is the stack policy attachment viewed from the Stack.

A role grant giving a stack access to a space, either directly or through the space tree.

StateDownloadUrl represents a pre-signed URL that can be used to download a stack's state file.

StateUploadUrl represents a pre-signed URL that can be used to upload an existing state file.

Limited template version info returned for latest version queries.

Metadata for a Terraform module.

Metadata for a Terraform output.

TerraformProvider represents a Terraform provider managed using Spacelift's Terraform provider registry.

Documentation file metadata

Documentation for a Terraform provider version

Platform supported by Spacelift.

A single version of a managed Terraform provider.

A single artifact associated with a Terraform provider version.

Metadata for a Terraform resource.

Represents a Tofu/Terraform workspace used for local development.

Response type for unlocking all Tofu workspaces in a stack.

Spacelift user.

A role grant giving a group access to a space. Always a direct binding on the group, there is no grantedVia union like UserSpaceAccessRoleGrant.

UserGuide represents a user guide with steps

UserGuideCertification represents a certificate with full details

UserGuideChapter represents a chapter within a user guide group

UserGuideCompletion contains completion information

UserGuideDoc represents a documentation link

UserGuideGroup represents a grouping of user guides

UserGuideMetadata contains guide metadata

UserGuidePrerequisites contains prerequisite completion status

UserGuideProgress tracks user progress through a guide

UserGuideStep represents a single step in a guide

UserLogin represents the last login attempt for a single GitHub user.

A role grant giving a user access to a space, either directly or via a group they belong to.

VCSAgentConnection represents a single connection from a VCS Agent.

Additional options for configuring VCS check behavior.

VCSIntegrationUser represents a user (module or stacks) of the VCS integration.

VCSIntegrationUserConnection represents a single stack/module in a page of results for a VCS integration.

Version represents a single version of the Module.

Contains information about the module that a version was created from.

WebhookDeliveries represents a paginated list of webhook deliveries.

WebhookDelivery represents a single webhook or audit trail delivery.

WebhookDeliveryDetails represents extended details for a single webhook delivery.

WebhookDeliveryHeader represents a single header (request or response) in a webhook delivery.

Webhooks integration info to send webhooks for stack

Worker represents a single worker in the WorkerPool.

WorkerConnection represents a single worker in a page of results.

WorkerPool represents a single WorkerPool.

WorkerPoolConnection represents a single worker pool in a page of results.

WorkerPoolUser represents a user (module or stacks) of the worker pool.

WorkerPoolUserConnection represents a single stack/module in a page of results for a worker pool.

A Directive provides a way to describe alternate runtime execution and type validation behavior in a GraphQL document. In some cases, you need to provide options to alter GraphQL's execution behavior in ways field arguments will not suffice, such as conditionally including or skipping a field. Directives provide this by describing additional information to the executor.

One possible value for a given Enum. Enum values are unique values, not a placeholder for a string or numeric value. However an Enum value is returned in a JSON response as a string.

Object and Interface types are described by a list of Fields, each of which has a name, potentially a list of arguments, and a return type.

Arguments provided to Fields or Directives and the input fields of an InputObject are represented as Input Values which describe their type and optionally a default value.

A GraphQL Schema defines the capabilities of a GraphQL server. It exposes all available types and directives on the server, as well as the entry points for query, mutation, and subscription operations.

The fundamental unit of any GraphQL Schema is the type. There are many kinds of types in GraphQL as represented by the `__TypeKind` enum. Depending on the kind of a type, certain fields describe information about that type. Scalar types provide no information beyond a name and description, while Enum types provide their values. Object and Interface types provide the fields they describe. Abstract types, Union and Interface, provide the Object types possible at runtime. List and NonNull types compose other types.