@alienplatform/sdk 3.3.0 → 3.3.1

package/dist/dist.js

@@ -5533,6 +5533,7 @@ const AwsRemoteStackManagementHeartbeatDataSchema = object({
 });
 object({
 	"managementPermissionsApplied": boolean().describe("Whether the management inline policy was attached by the generated stack."),
+	"remoteBindingsRoleArn": string().describe("Setup-owned role used only for opted-in remote binding data access.").nullish(),
 	"roleArn": string().describe("Cross-account management role ARN."),
 	"roleName": string().describe("Cross-account management role name.")
 }).describe("AWS RemoteStackManagement ImportData.");
@@ -5689,6 +5690,8 @@ object({
 	"functionArn": string().describe("Lambda function ARN."),
 	"functionName": string().describe("Lambda function name."),
 	"integrationId": string().describe("API Gateway integration ID, when public ingress is enabled.").nullish(),
+	"restApiId": string().describe("API Gateway REST (V1) API ID, when public ingress is enabled for a\nstreaming worker. Mutually exclusive with `api_id`: a worker is exposed\nthrough REST V1 xor the V2 HTTP API, so only one set is ever populated.").nullish(),
+	"restStageName": string().describe("API Gateway REST (V1) stage name, when public ingress is enabled for a\nstreaming worker. Mutually exclusive with `stage_name` (V1 xor V2).").nullish(),
 	"routeId": string().describe("API Gateway route ID, when public ingress is enabled.").nullish(),
 	"s3PermissionStatementIds": array(string()).describe("Lambda permission statement IDs granted for S3 storage triggers."),
 	"stageName": string().describe("API Gateway stage name, when public ingress is enabled.").nullish(),
@@ -6070,6 +6073,8 @@ object({
 	"identityId": string().describe("Management UAMI resource id."),
 	"managementPermissionsApplied": boolean().describe("Whether the management role assignments were applied by the\ngenerated stack."),
 	"principalId": string().describe("Management UAMI principal id."),
+	"remoteBindingsClientId": string().describe("Remote Bindings UAMI client id used for workload identity exchange.").nullish(),
+	"remoteBindingsIdentityId": string().describe("Setup-owned UAMI resource id used only for opted-in remote bindings.").nullish(),
 	"resourceGroup": string().describe("Resource group containing the management identity."),
 	"subscriptionId": string().describe("Subscription ID containing the management identity."),
 	"tenantId": string().describe("Tenant ID containing the management identity.")
@@ -8149,6 +8154,7 @@ object({
 	"managementPermissionsApplied": boolean().describe("Whether the management role binding was attached by the\ngenerated stack."),
 	"projectId": string().describe("Project ID containing the management service account."),
 	"projectNumber": string().describe("Numeric project number containing the management service account.").nullish(),
+	"remoteBindingsServiceAccountEmail": string().describe("Setup-owned service account used only for opted-in remote bindings.").nullish(),
 	"serviceAccountEmail": string().describe("Service account email the manager impersonates."),
 	"serviceAccountUniqueId": string().describe("Stable unique id Google assigns to the service account.")
 }).describe("GCP RemoteStackManagement ImportData — cross-project service account\nthe manager impersonates.");
@@ -9089,6 +9095,17 @@ object({ "leaseId": string().describe("Lease identifier to release") }).describe
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
+/**
+* @description Provider-neutral handoff for the stack\'s Remote Bindings identity.
+*/
+const RemoteBindingsAccessOutputsSchema = object({
+	"accessConfiguration": string().describe("Provider-specific impersonation configuration consumed by the manager."),
+	"resourceId": string().describe("Provider resource identifier (role ARN, service-account email, or UAMI\nresource id) of the setup-owned Remote Bindings identity.")
+}).describe("Provider-neutral handoff for the stack's Remote Bindings identity.");
+/**
+* Generated by Kubb (https://kubb.dev/).
+* Do not edit manually.
+*/
 const RemoteStackManagementHeartbeatDataSchema = union([
 	lazy(() => AwsRemoteStackManagementHeartbeatDataSchema).and(object({ "backend": _enum(["awsIamRole"]) })),
 	lazy(() => GcpRemoteStackManagementHeartbeatDataSchema).and(object({ "backend": _enum(["gcpServiceAccount"]) })),
@@ -9096,7 +9113,10 @@ const RemoteStackManagementHeartbeatDataSchema = union([
 ]);
 object({
 	"accessConfiguration": string().describe("Platform-specific access configuration\nFor AWS: The role ARN to assume\nFor GCP: The service account email to impersonate\nFor Azure: JSON containing the target managed identity client ID and tenant ID"),
-	"managementResourceId": string().describe("Platform-specific management resource identifier\nFor AWS: The ARN of the created cross-account role\nFor GCP: The email of the created service account\nFor Azure: The resource ID of the target user-assigned managed identity")
+	"managementResourceId": string().describe("Platform-specific management resource identifier\nFor AWS: The ARN of the created cross-account role\nFor GCP: The email of the created service account\nFor Azure: The resource ID of the target user-assigned managed identity"),
+	get "remoteBindingsAccess"() {
+		return union([RemoteBindingsAccessOutputsSchema, _null()]).optional();
+	}
 }).describe("Resource outputs for RemoteStackManagement.\nDifferent platforms will provide different outputs based on their implementation.");
 object({ "id": string().describe("Identifier for the remote stack management. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]).\nMaximum 64 characters.") }).describe("Represents cross-account management access configuration for a stack deployed\non AWS, GCP, or Azure platforms. This resource sets up the necessary IAM/RBAC\nconfiguration to allow another cloud account to manage the stack.\n\nMaps to:\n- AWS: Cross-account IAM role with management permissions\n- GCP: Service account with management permissions and impersonation rights\n- Azure: User-assigned managed identity with federated credential and custom RBAC\n\nThis resource is automatically created for AWS, GCP, and Azure platforms\nwhen the stack needs to be managed by another account. The management account\nand identity information comes from the platform configuration.");
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alienplatform/sdk",
-  "version": "3.3.0",
+  "version": "3.3.1",
   "type": "module",
   "files": [
     "dist"
@@ -57,9 +57,9 @@
     "nice-grpc": "^2.1.11",
     "nice-grpc-common": "^2.0.2",
     "zod": "4.3.2",
-    "@alienplatform/ai-gateway": "^3.3.0",
-    "@alienplatform/bindings": "^3.3.0",
-    "@alienplatform/core": "^3.3.0"
+    "@alienplatform/ai-gateway": "^3.3.1",
+    "@alienplatform/bindings": "^3.3.1",
+    "@alienplatform/core": "^3.3.1"
   },
   "scripts": {
     "build": "tsdown && tsc --emitDeclarationOnly",