@alienplatform/sdk 3.3.1 → 3.3.3

package/dist/dist.js

@@ -5501,6 +5501,10 @@ object({
 	"queueName": string().describe("SQS queue name."),
 	"queueUrl": string().describe("SQS queue URL.")
 }).describe("AWS Queue ImportData.");
+object({
+	"roleArn": string(),
+	"roleName": string()
+});
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -5533,7 +5537,6 @@ const AwsRemoteStackManagementHeartbeatDataSchema = object({
 });
 object({
 	"managementPermissionsApplied": boolean().describe("Whether the management inline policy was attached by the generated stack."),
-	"remoteBindingsRoleArn": string().describe("Setup-owned role used only for opted-in remote binding data access.").nullish(),
 	"roleArn": string().describe("Cross-account management role ARN."),
 	"roleName": string().describe("Cross-account management role name.")
 }).describe("AWS RemoteStackManagement ImportData.");
@@ -6052,6 +6055,12 @@ object({
 	"resourceGroup": string().describe("Resource group containing the namespace."),
 	"subscriptionId": string().describe("Subscription ID containing the namespace.")
 }).describe("Azure Queue ImportData — a Service Bus queue.");
+object({
+	"clientId": string(),
+	"identityId": string(),
+	"principalId": string(),
+	"tenantId": string()
+});
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -6073,8 +6082,6 @@ object({
 	"identityId": string().describe("Management UAMI resource id."),
 	"managementPermissionsApplied": boolean().describe("Whether the management role assignments were applied by the\ngenerated stack."),
 	"principalId": string().describe("Management UAMI principal id."),
-	"remoteBindingsClientId": string().describe("Remote Bindings UAMI client id used for workload identity exchange.").nullish(),
-	"remoteBindingsIdentityId": string().describe("Setup-owned UAMI resource id used only for opted-in remote bindings.").nullish(),
 	"resourceGroup": string().describe("Resource group containing the management identity."),
 	"subscriptionId": string().describe("Subscription ID containing the management identity."),
 	"tenantId": string().describe("Tenant ID containing the management identity.")
@@ -8137,6 +8144,11 @@ object({
 	"topicId": string().describe("Pub/Sub topic ID (short name)."),
 	"topicName": string().describe("Pub/Sub topic full resource name (`projects/<id>/topics/<name>`).")
 }).describe("GCP Queue ImportData — a Pub/Sub topic plus subscription created in\nthe customer's project.");
+object({
+	"projectId": string(),
+	"serviceAccountEmail": string(),
+	"serviceAccountUniqueId": string()
+});
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -8154,7 +8166,6 @@ object({
 	"managementPermissionsApplied": boolean().describe("Whether the management role binding was attached by the\ngenerated stack."),
 	"projectId": string().describe("Project ID containing the management service account."),
 	"projectNumber": string().describe("Numeric project number containing the management service account.").nullish(),
-	"remoteBindingsServiceAccountEmail": string().describe("Setup-owned service account used only for opted-in remote bindings.").nullish(),
 	"serviceAccountEmail": string().describe("Service account email the manager impersonates."),
 	"serviceAccountUniqueId": string().describe("Stable unique id Google assigns to the service account.")
 }).describe("GCP RemoteStackManagement ImportData — cross-project service account\nthe manager impersonates.");
@@ -9095,13 +9106,21 @@ object({ "leaseId": string().describe("Lease identifier to release") }).describe
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
 */
-/**
-* @description Provider-neutral handoff for the stack\'s Remote Bindings identity.
-*/
-const RemoteBindingsAccessOutputsSchema = object({
+const RemoteBindingGrantSchema = object({
+	"permissionSet": string(),
+	"resourceId": string(),
+	"revision": int().min(0)
+});
+object({
 	"accessConfiguration": string().describe("Provider-specific impersonation configuration consumed by the manager."),
-	"resourceId": string().describe("Provider resource identifier (role ARN, service-account email, or UAMI\nresource id) of the setup-owned Remote Bindings identity.")
-}).describe("Provider-neutral handoff for the stack's Remote Bindings identity.");
+	"resourceId": string().describe("Role ARN, service-account email, or managed-identity resource ID.")
+});
+object({
+	get "grants"() {
+		return array(RemoteBindingGrantSchema).describe("Resource-neutral desired grants. Setup generators and direct controllers compile this\nfrom the Remote Bindings registry; users do not author it directly.").optional();
+	},
+	"id": string()
+}).describe("Setup-owned identity used to issue short-lived application credentials for\nexplicitly published resources.");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -9113,10 +9132,7 @@ const RemoteStackManagementHeartbeatDataSchema = union([
 ]);
 object({
 	"accessConfiguration": string().describe("Platform-specific access configuration\nFor AWS: The role ARN to assume\nFor GCP: The service account email to impersonate\nFor Azure: JSON containing the target managed identity client ID and tenant ID"),
-	"managementResourceId": string().describe("Platform-specific management resource identifier\nFor AWS: The ARN of the created cross-account role\nFor GCP: The email of the created service account\nFor Azure: The resource ID of the target user-assigned managed identity"),
-	get "remoteBindingsAccess"() {
-		return union([RemoteBindingsAccessOutputsSchema, _null()]).optional();
-	}
+	"managementResourceId": string().describe("Platform-specific management resource identifier\nFor AWS: The ARN of the created cross-account role\nFor GCP: The email of the created service account\nFor Azure: The resource ID of the target user-assigned managed identity")
 }).describe("Resource outputs for RemoteStackManagement.\nDifferent platforms will provide different outputs based on their implementation.");
 object({ "id": string().describe("Identifier for the remote stack management. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]).\nMaximum 64 characters.") }).describe("Represents cross-account management access configuration for a stack deployed\non AWS, GCP, or Azure platforms. This resource sets up the necessary IAM/RBAC\nconfiguration to allow another cloud account to manage the stack.\n\nMaps to:\n- AWS: Cross-account IAM role with management permissions\n- GCP: Service account with management permissions and impersonation rights\n- Azure: User-assigned managed identity with federated credential and custom RBAC\n\nThis resource is automatically created for AWS, GCP, and Azure platforms\nwhen the stack needs to be managed by another account. The management account\nand identity information comes from the platform configuration.");
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alienplatform/sdk",
-  "version": "3.3.1",
+  "version": "3.3.3",
   "type": "module",
   "files": [
     "dist"
@@ -57,9 +57,9 @@
     "nice-grpc": "^2.1.11",
     "nice-grpc-common": "^2.0.2",
     "zod": "4.3.2",
-    "@alienplatform/ai-gateway": "^3.3.1",
-    "@alienplatform/bindings": "^3.3.1",
-    "@alienplatform/core": "^3.3.1"
+    "@alienplatform/ai-gateway": "^3.3.3",
+    "@alienplatform/bindings": "^3.3.3",
+    "@alienplatform/core": "^3.3.3"
   },
   "scripts": {
     "build": "tsdown && tsc --emitDeclarationOnly",