@alienplatform/sdk 3.3.19 → 3.3.21

package/dist/dist.js

@@ -6983,12 +6983,14 @@ const AwsS3StorageHeartbeatDataSchema = object({
 });
 object({
 	"allowEgress": optional(boolean().describe("Whether the declaration asked for open egress.\n\nThe controller builds the binding from this, and an empty connector list cannot be read\nwithout it: a stripped `deny` import would otherwise look exactly like an open sandbox.")),
+	"buildRoleArn": string().describe("Role the controller passes to `CreateMicrovmImage`. Setup owns it because\n`sandbox/provision` grants the controller `iam:PassRole` and no `iam:CreateRole`.").nullish(),
+	"bundleUri": string().describe("Bundle the controller builds the image from. Only a runtime-provisioned sandbox carries it.").nullish(),
 	"egressConnectorArns": optional(array(string()).describe("Egress network connectors. Deleting one while MicroVMs still reference it breaks their\nnetworking, so teardown needs them named rather than rediscovered.")),
-	"imageArn": string().describe("MicroVM image ARN."),
-	"imageIdentifier": string().describe("MicroVM image identifier."),
-	"imageVersion": string().describe("Image version the sessions are scoped to. Re-imported on every image roll."),
+	"imageArn": string().describe("MicroVM image ARN. Absent until a runtime-provisioned image has been built.").nullish(),
+	"imageIdentifier": string().describe("MicroVM image identifier. Absent until a runtime-provisioned image has been built.").nullish(),
+	"imageVersion": string().describe("Image version the sessions are scoped to. Re-imported on every image roll, and absent\nuntil a runtime-provisioned image has been built.").nullish(),
 	"previewPorts": optional(array(int().min(0)).describe("Ports a preview capability may be minted for; empty means preview is not offered."))
-}).describe("AWS Sandbox ImportData.\n\nCarries the Frozen parent from the setup emitter to the runtime controller. The image\n**version** is not decoration: `RunMicrovm` has no `tags`, so image plus version is the only\nsession identity there is, and a controller holding a stale version would enumerate the wrong\nset and orphan every session started on the previous one.");
+}).describe("AWS Sandbox ImportData.\n\nCarries the sandbox's parent from the setup emitter to the runtime controller. The image\n**version** is not decoration: `RunMicrovm` has no `tags`, so image plus version is the only\nsession identity there is, and a controller holding a stale version would enumerate the wrong\nset and orphan every session started on the previous one.\n\nTwo shapes arrive here, and which fields are present says which. A Frozen sandbox is built by\nstack creation and names its image; a Live one is built by the controller after the deployment\nregisters, so it names the build role and bundle instead, leaving the image fields empty.");
 object({
 	"roleArn": string().describe("IAM role ARN."),
 	"roleName": string().describe("IAM role name."),
@@ -7611,9 +7613,9 @@ object({
 }).describe("Azure ServiceAccount ImportData — User-Assigned Managed Identity\n(UAMI) plus optional Federated Identity Credentials trusting Alien's\nOIDC issuer.");
 object({
 	"providerNamespace": string().describe("Resource provider namespace (e.g. `Microsoft.App`)."),
-	"registered": boolean().describe("True once the provider is reported `Registered`."),
+	"registered": boolean().describe("Whether setup established the registration. False from a Terraform package: it registers\nnothing, and the runtime reads the real state on its first refresh."),
 	"subscriptionId": string().describe("Subscription ID the provider was registered on.")
-}).describe("Azure ServiceActivation ImportData — registers an Azure resource\nprovider on the customer's subscription.\n\nAdded by the `AzureServiceActivationMutation` preflight when the\nstack contains resources that depend on a specific Azure RP\n(Microsoft.App, Microsoft.Storage, Microsoft.KeyVault, …).");
+}).describe("Azure ServiceActivation ImportData — names an Azure resource provider the\nsubscription must have registered.\n\nAdded by the `AzureServiceActivationMutation` preflight when the\nstack contains resources that depend on a specific Azure RP\n(Microsoft.App, Microsoft.Storage, Microsoft.KeyVault, …).");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -9379,6 +9381,7 @@ union([
 		"updatedAt": datetime().describe("Timestamp when the state changed")
 	})
 ]).describe("Represents a change to an event");
+object({ "engineId": string().describe("The engine's resource name, or the bare id it ends with.") }).describe("GCP Agent Platform reasoning-engine ImportData.\n\nEmitted only for a Frozen engine, which the setup stack creates. Vertex assigns the id, so it\nis read off the created resource rather than derived: the controller and the template beneath\nit address the engine by exactly this segment.");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -9646,6 +9649,7 @@ object({
 	"serviceAccountEmail": string().describe("Service account email the manager impersonates."),
 	"serviceAccountUniqueId": string().describe("Stable unique id Google assigns to the service account.")
 }).describe("GCP RemoteStackManagement ImportData — cross-project service account\nthe manager impersonates.");
+object({ "region": string().describe("Region the setup stack applied in; selects the regional Agent Platform endpoint.") }).describe("GCP Agent Platform sandbox ImportData.\n\nThe sandbox is the environment template, which is release-owned under either lifecycle: setup\ncreates no template, so this carries only the region the stack applied in. The engine registers\nits own id, and the template controller reads it from that dependency.");
 /**
 * Generated by Kubb (https://kubb.dev/).
 * Do not edit manually.
@@ -10942,6 +10946,7 @@ object({
 	"egressDeny": boolean().describe("Whether a declared `deny` is actually enforced, rather than accepted and dropped"),
 	"enforcedLimits": boolean().describe("The platform enforces the declared cpu, memory and disk ceilings"),
 	"files": boolean().describe("Files can be moved in and out of a session"),
+	"jobs": boolean().describe("A command can be started, polled and cancelled across separate calls, so it outlives the\none that started it. False where nothing inside the session owns the process in between."),
 	"preview": boolean().describe("An authenticated, port-scoped capability to reach a service inside the sandbox"),
 	"processLimit": boolean().describe("The platform can cap how many processes a session runs"),
 	"reconnect": boolean().describe("A later call can reach a session created by an earlier one"),
@@ -10954,6 +10959,7 @@ object({
 _enum([
 	"files",
 	"reconnect",
+	"jobs",
 	"preview",
 	"suspendResume",
 	"snapshot",

package/dist/index.d.ts

@@ -28,7 +28,7 @@
  */
 export type { CronEvent, QueueMessage, QueueMessageEvent, ScheduledEvent, StandardSchema, StandardSchemaOutput, StorageEvent, StorageEventType, WorkerCommandContext, } from "./worker-runtime/registry.js";
 export { command, onCronEvent, onQueueMessage, onStorageEvent, waitUntil, } from "./worker-runtime/registry.js";
-export type { CommandFrame, Container, Kv, Postgres, PostgresConnection, PostgresSslMode, Queue, RunCommandOptions, Sandbox, SandboxSession, Storage, Vault, } from "@alienplatform/bindings";
+export type { CommandFrame, Container, JobError, JobExit, JobPoll, Kv, Postgres, PostgresConnection, PostgresSslMode, Queue, RunCommandOptions, Sandbox, SandboxSession, Storage, Vault, } from "@alienplatform/bindings";
 export { container, kv, postgres, queue, sandbox, storage, vault } from "@alienplatform/bindings";
 export type { AiBinding, AiConnection, AiModel, AmbientAiBinding, ChatCompletionCreateParams, ExternalAiBinding, ResponseCreateParams, } from "@alienplatform/ai-gateway";
 export { Ai, ai, getAiConnection, isExternalAiBinding, parseAiBinding, startAiGateway, } from "@alienplatform/ai-gateway";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAOH,YAAY,EACV,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,OAAO,EACP,WAAW,EACX,cAAc,EACd,cAAc,EACd,SAAS,GACV,MAAM,8BAA8B,CAAA;AAMrC,YAAY,EACV,YAAY,EACZ,SAAS,EACT,EAAE,EACF,QAAQ,EACR,kBAAkB,EAClB,eAAe,EACf,KAAK,EACL,iBAAiB,EACjB,OAAO,EACP,cAAc,EACd,OAAO,EACP,KAAK,GACN,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAMjG,YAAY,EACV,SAAS,EACT,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EACL,EAAE,EACF,EAAE,EACF,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,cAAc,GACf,MAAM,2BAA2B,CAAA;AAMlC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACnE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAOH,YAAY,EACV,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,OAAO,EACP,WAAW,EACX,cAAc,EACd,cAAc,EACd,SAAS,GACV,MAAM,8BAA8B,CAAA;AAMrC,YAAY,EACV,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,OAAO,EACP,OAAO,EACP,EAAE,EACF,QAAQ,EACR,kBAAkB,EAClB,eAAe,EACf,KAAK,EACL,iBAAiB,EACjB,OAAO,EACP,cAAc,EACd,OAAO,EACP,KAAK,GACN,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAMjG,YAAY,EACV,SAAS,EACT,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EACL,EAAE,EACF,EAAE,EACF,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,cAAc,GACf,MAAM,2BAA2B,CAAA;AAMlC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACnE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/worker-runtime/index.js

@@ -16109,8 +16109,8 @@ var require_descriptor = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	* @param {string} [edition="proto2"] The syntax or edition to use
 	*/
 	Type.prototype.toDescriptor = function toDescriptor(edition) {
-		var descriptor = exports.DescriptorProto.create({ name: this.name }), i;
-		for (i = 0; i < this.fieldsArray.length; ++i) {
+		var descriptor = exports.DescriptorProto.create({ name: this.name }), i = 0;
+		for (; i < this.fieldsArray.length; ++i) {
 			var fieldDescriptor;
 			descriptor.field.push(fieldDescriptor = this._fieldsArray[i].toDescriptor(edition));
 			if (this._fieldsArray[i] instanceof MapField) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alienplatform/sdk",
-  "version": "3.3.19",
+  "version": "3.3.21",
   "type": "module",
   "files": [
     "dist"
@@ -57,9 +57,9 @@
     "nice-grpc": "^2.1.11",
     "nice-grpc-common": "^2.0.2",
     "zod": "4.5.2",
-    "@alienplatform/ai-gateway": "^3.3.19",
-    "@alienplatform/bindings": "^3.3.19",
-    "@alienplatform/core": "^3.3.19"
+    "@alienplatform/ai-gateway": "^3.3.21",
+    "@alienplatform/bindings": "^3.3.21",
+    "@alienplatform/core": "^3.3.21"
   },
   "scripts": {
     "build": "tsdown && tsc --emitDeclarationOnly",