@diagonal-hq/cli 0.1.0 → 0.2.0

package/dist/index.d.ts

@@ -1,4 +1,6 @@
 import './globals';
+import type { ResourceCapabilities } from './capabilities.generated';
+import type { DataApiEndpoint, FieldDefinition, FieldType } from './fields.generated';
 
 // The configuration helpers of file-based workspaces. The workspace build
 // reads these calls as static data. index.js implements each define* function
@@ -20,62 +22,19 @@ export type ConfigDefinition = {
 
 export declare function defineConfig<const T extends ConfigDefinition>(config: T): T;
 
-export type FieldType =
-  | 'text'
-  | 'email'
-  | 'number'
-  | 'boolean'
-  | 'date'
-  | 'datetime'
-  | 'phone'
-  | 'url'
-  | 'select'
-  | 'money'
-  | 'markdown'
-  | 'relation';
-
-export type FieldOptions = {
-  label?: string;
-  description?: string | null;
-  required?: boolean;
-  unique?: boolean;
-  index?: boolean;
-  default?: StaticValue;
-  [setting: string]: StaticValue | undefined;
-};
-
-export type SelectOption = { label: string; value: string };
-
-export type SelectFieldOptions = FieldOptions & { options: readonly SelectOption[] };
-
-export type RelationType = 'belongs_to' | 'has_many' | 'belongs_to_many';
-
-export type RelationFieldOptions = FieldOptions & {
-  /** The id or slug of the related resource. */
-  resource: string;
-  type?: RelationType;
-};
-
-export type FieldDefinition<TType extends FieldType = FieldType> = {
-  readonly $field: TType;
-};
-
-export declare const field: {
-  text(options?: FieldOptions): FieldDefinition<'text'>;
-  /** Stored as a `text` field. */
-  longText(options?: FieldOptions): FieldDefinition<'text'>;
-  email(options?: FieldOptions): FieldDefinition<'email'>;
-  number(options?: FieldOptions): FieldDefinition<'number'>;
-  boolean(options?: FieldOptions): FieldDefinition<'boolean'>;
-  date(options?: FieldOptions): FieldDefinition<'date'>;
-  datetime(options?: FieldOptions): FieldDefinition<'datetime'>;
-  phone(options?: FieldOptions): FieldDefinition<'phone'>;
-  url(options?: FieldOptions): FieldDefinition<'url'>;
-  select(options: SelectFieldOptions): FieldDefinition<'select'>;
-  money(options?: FieldOptions): FieldDefinition<'money'>;
-  markdown(options?: FieldOptions): FieldDefinition<'markdown'>;
-  relation(options: RelationFieldOptions): FieldDefinition<'relation'>;
-};
+export { field } from './fields.generated';
+export type {
+  CommonFieldSettings,
+  DataApiEndpoint,
+  FieldDefinition,
+  FieldSchemaDefinition,
+  FieldSchemaSetting,
+  FieldType,
+  RelationFieldOptions,
+  RelationInverse,
+  Resolver
+} from './fields.generated';
+export type { CapabilityType, FieldKeyOf, ResourceCapabilities } from './capabilities.generated';
 
 export type PolicyScope =
   | 'index'
@@ -103,6 +62,17 @@ export type IndexDefinition<TKey extends string = string> = {
   unique?: boolean;
 };
 
+export type ResourceEmbeddings<TKey extends string = string> = {
+  enabled?: boolean;
+  /** Field keys. Relation paths are not allowed. */
+  fields?: readonly TKey[] | null;
+};
+
+export type ResourceDataApi = {
+  /** An omitted endpoint stays enabled. */
+  endpoints?: Partial<Record<DataApiEndpoint, { enabled?: boolean }>>;
+};
+
 export type ResourceDefinition<
   TFields extends Record<string, FieldDefinition> = Record<string, FieldDefinition>
 > = {
@@ -116,9 +86,30 @@ export type ResourceDefinition<
   name: string;
   singularName: string;
   displayField?: Extract<keyof TFields, string>;
+  /**
+   * The field keys and relation paths that record search matches, for example
+   * `['title', 'body', 'author.full_name']`. Without it, search matches the
+   * display field and every text and markdown field.
+   */
+  searchableFields?: readonly (
+    | Extract<keyof TFields, string>
+    | `${Extract<keyof TFields, string>}.${string}`
+  )[];
+  /** Every field key once, in the order that forms and tables show them. Defaults to the order of `fields`. */
+  fieldOrder?: readonly Extract<keyof TFields, string>[];
   fields: TFields;
   indexes?: readonly IndexDefinition<Extract<keyof TFields, string>>[];
+  embeddings?: ResourceEmbeddings<Extract<keyof TFields, string>>;
+  dataApi?: ResourceDataApi;
+  /** A static resource refuses normal record writes. */
+  static?: boolean;
   policies: readonly PolicyDefinition[];
+  /**
+   * The platform capabilities of the resource, keyed by capability. A field
+   * reference names a field of this resource by its key. The deploy validates
+   * each capability against the deployed schema and runs its provisioning.
+   */
+  capabilities?: ResourceCapabilities<TFields>;
 };
 
 export declare function defineResource<const TFields extends Record<string, FieldDefinition>>(
@@ -183,13 +174,6 @@ export declare function definePage<const T extends PageDefinition>(
 
 export type LayoutProps = { children?: React.ReactNode };
 
-export type EmailDefinition = { subject: string };
-
-export declare function defineEmail<const T extends EmailDefinition, P>(
-  email: T,
-  component: (props: P) => unknown
-): T;
-
 export type NavigationItem = { label: string; route: string; icon?: string | null };
 
 export type NavigationDefinition = { id: string; items: readonly NavigationItem[] };
@@ -272,3 +256,113 @@ export type WorkflowConfig =
     })
   | (ConfigBase & { trigger: ManualTrigger; runAs?: Exclude<WorkflowRunAs, 'session'> })
   | (ConfigBase & { trigger: RecordLifecycleTrigger });
+
+/**
+ * Liquid source: inline text, or the path of a `.liquid` file relative to the
+ * definition file, for example `{ file: './standard.email.liquid' }`.
+ */
+export type LiquidSource = string | { readonly file: `./${string}.liquid` };
+
+/** The key of a notification type. */
+export type NotificationTypeReference = string;
+
+/** The key of a template, unique within its notification type. */
+export type NotificationTemplateReference = string;
+
+/** The key of an email layout, or `'default'` for the built-in layout. */
+export type EmailLayoutReference = string;
+
+/** A variable whose value is one record. The sender passes the record id. */
+export type RecordVariableDefinition = {
+  /** The slug of the resource whose record the sender passes. */
+  resource: ResourceReference;
+  label?: string;
+  description?: string | null;
+  required?: boolean;
+};
+
+/**
+ * A value that the sender passes to the notification. The name cannot be
+ * `record` or `ref`: templates read the recipient as `{{ record.* }}` and the
+ * generators as `{{ ref.* }}`.
+ */
+export type NotificationVariableDefinition =
+  | FieldDefinition<Exclude<FieldType, 'relation'>>
+  | RecordVariableDefinition;
+
+/** A `notifications/<key>/type.ts` file. */
+export type NotificationTypeDefinition = {
+  /**
+   * Lowercase letters, digits, and hyphens, for example `'member-welcome'`.
+   * Templates, fixtures, and workflows refer to it. Moving the file keeps it.
+   */
+  key: string;
+  name: string;
+  /**
+   * The resource that receives the notification. The resource maps the email
+   * and phone fields. Leave it out to send to email addresses.
+   */
+  recipient?: { resource: ResourceReference };
+  variables?: { readonly [key: string]: NotificationVariableDefinition };
+  defaultTemplate: NotificationTemplateReference;
+};
+
+export declare function defineNotificationType<const T extends NotificationTypeDefinition>(
+  type: T
+): T;
+
+export type NotificationReference = {
+  label: string;
+  /** The server generator, for example `'page.url'` or `'workspace.login_url'`. */
+  generator: string;
+  settings?: { readonly [setting: string]: StaticValue };
+};
+
+export type NotificationTemplateEmail = {
+  subject: string;
+  /** Defaults to `'default'`, the built-in layout with one field, `content`. */
+  layout?: EmailLayoutReference;
+  /** A value for each field of the layout. */
+  fields: { readonly [field: string]: LiquidSource };
+};
+
+export type NotificationTemplateSms = { body: LiquidSource };
+
+/** A `notifications/<type key>/<key>.template.ts` file. A template has an email, an SMS, or both. */
+export type NotificationTemplateDefinition = {
+  /** Unique within its type, for example `'standard'`. */
+  key: string;
+  type: NotificationTypeReference;
+  name: string;
+  /** Generators that the template reads as `{{ ref.<key> }}`. */
+  references?: { readonly [key: string]: NotificationReference };
+} & (
+  | { email: NotificationTemplateEmail; sms?: NotificationTemplateSms }
+  | { email?: NotificationTemplateEmail; sms: NotificationTemplateSms }
+);
+
+export declare function defineNotificationTemplate<const T extends NotificationTemplateDefinition>(
+  template: T
+): T;
+
+/** A slot in the layout body. A template fills it with Liquid. */
+export type EmailLayoutFieldDefinition = {
+  label: string;
+  description?: string | null;
+  required?: boolean;
+};
+
+/** An `email-layouts/<key>/layout.ts` file. */
+export type EmailLayoutDefinition = {
+  /**
+   * Lowercase letters, digits, and hyphens, for example `'standard'`. Templates
+   * refer to it. `'default'` is the built-in layout.
+   */
+  key: string;
+  name: string;
+  body: LiquidSource;
+  /** The fields that each template fills in. The body reads them as `{{ <field> }}`. */
+  fields?: { readonly [key: string]: EmailLayoutFieldDefinition };
+};
+
+export declare function defineEmailLayout<const T extends EmailLayoutDefinition>(layout: T): T;

package/dist/index.js

@@ -2,6 +2,9 @@
 // data, so the helpers only return their argument. A Vite build or a Node
 // script that imports a configuration file runs them.
 //
+// The field builders come from fields.generated.js, which
+// `artisan app:generate-custom-typescript` generates from the field types.
+//
 // Each function must not refer to anything outside its own body:
 // scripts/lib/runtime-build/app-modules.mjs copies their source into the
 // workspace modules that a page or a workflow imports.
@@ -12,22 +15,12 @@ export const defineResource = (resource) => resource;
 
 export const definePage = (page, _component) => page;
 
-export const defineEmail = (email, _component) => email;
-
 export const defineNavigation = (navigation) => navigation;
 
-export const field = {
-  text: (options = {}) => ({ $field: 'text', ...options }),
-  longText: (options = {}) => ({ $field: 'text', ...options }),
-  email: (options = {}) => ({ $field: 'email', ...options }),
-  number: (options = {}) => ({ $field: 'number', ...options }),
-  boolean: (options = {}) => ({ $field: 'boolean', ...options }),
-  date: (options = {}) => ({ $field: 'date', ...options }),
-  datetime: (options = {}) => ({ $field: 'datetime', ...options }),
-  phone: (options = {}) => ({ $field: 'phone', ...options }),
-  url: (options = {}) => ({ $field: 'url', ...options }),
-  select: (options) => ({ $field: 'select', ...options }),
-  money: (options = {}) => ({ $field: 'money', ...options }),
-  markdown: (options = {}) => ({ $field: 'markdown', ...options }),
-  relation: (options) => ({ $field: 'relation', ...options })
-};
+export const defineNotificationType = (type) => type;
+
+export const defineNotificationTemplate = (template) => template;
+
+export const defineEmailLayout = (layout) => layout;
+
+export { field } from './fields.generated.js';

package/dist/sdk-contract.d.ts

@@ -119,6 +119,8 @@ type SdkResourceField = {
   settings: SdkResourceFieldSettings;
   /** Dotted accessor path; equals `key` at the top level, `parent.key` once nested. */
   path: string;
+  /** A Boolean field's configured default; form checkboxes start from it. */
+  default_value?: boolean | null;
   /** Relation-only decoration, filled lazily by the SDK builder from the flat catalog. */
   display_field_key?: string | null;
   column_label?: string | null;
@@ -2327,7 +2329,7 @@ type SdkScheduledNotificationDetail = Omit<SdkUpcomingNotification, 'status'> &
 
 type SdkScheduledNotificationEdits = {
   recipient?: SdkNotificationRecipient;
-  /** Omit to retain content. Null restores the shared template. Supply raw source, not a resolved composer draft. */
+  /** Omit to retain content. Null restores the shared template. Use raw content from ScheduledNotificationComposer, not resolved NotificationComposer output. */
   content_override?: SdkScheduledNotificationContent | null;
 };
 
@@ -6080,6 +6082,7 @@ type ComponentRegistry = {
   "ResourceTable": <TResource extends ResourceDataTableResource, const TRelations extends readonly SdkResourceRelationPath<NoInfer<TResource>>[] = readonly []>(props: ResourceTableProps<TResource, TRelations>) => any;
   "RestoreResourceRecord": SdkComponent<RestoreResourceRecordProps>;
   "RichText": SdkComponent<RichTextProps>;
+  "ScheduledNotificationComposer": SdkComponent<ScheduledNotificationComposerProps>;
   "SearchBar": SdkComponent<SearchBarProps>;
   "Separator": SdkComponent<SeparatorProps>;
   "SharedFilters": SdkComponent<SharedFiltersProps>;
@@ -6408,8 +6411,9 @@ type SdkHooks = {
 
   /**
    * List the accounting entities of the workspace with their `active` and `is_default`
-   * flags, ordered by name. Inactive entities are included. A branch has no entities and
-   * returns an empty list. A signed-out visitor gets an empty list and no request is made,
+   * flags, ordered by name. Inactive entities are included. A branch returns the copies
+   * of its production workspace's entities. A signed-out visitor gets an empty list and
+   * no request is made,
    * so a public page reads the entity of a record from `record.__meta?.accounting_entity`
    * instead. ShowRecord and IndexRecords add it to each invoice, subscription, and payer
    * balance entry record whose entity field the visitor can read. ShowRecord (`useRecord`)
@@ -7469,7 +7473,7 @@ type SdkHooks = {
   /**
    * Form state for editing workspace field values, for layouts that must escape the
    * managed `Sdk.Components.WorkspaceFieldsForm` shell. Submits to
-   * `PUT /api/data/workspace-fields/values`; requires `update_workspace_fields`, `manage_workspace_fields`, or `access_system_admin`
+   * `PUT /api/data/workspace-fields/values`; requires `update_workspace_fields` or `manage_workspace_fields`
    * permission.
    *
    * @example
@@ -8274,7 +8278,7 @@ type UseWorkspaceFieldsFormResult = {
   form: SdkWorkspaceFieldsForm;
   /** The active field definitions, in render order. */
   fields: SdkWorkspaceField[];
-  /** Whether a save can happen: the identity holds `update_workspace_fields`, `manage_workspace_fields`, or `access_system_admin` and at
+  /** Whether a save can happen: the identity holds `update_workspace_fields` or `manage_workspace_fields` and at
    * least one field or fixed value is active. `submit()` is a no-op otherwise. */
   canSubmit: boolean;
   /** Context-wired input for one workspace field. Must be rendered inside `Form`. */
@@ -12690,6 +12694,24 @@ type RichTextProps = {
   className?: string;
 };
 
+type ScheduledNotificationComposerProps = {
+  /** The occurrence to open, such as an id from useUpcomingNotifications. */
+  scheduledNotificationId: string;
+  /** Edited raw content, ready to save as content_override. Null while nothing changed, and when the occurrence cannot be edited. */
+  onChange: (content: SdkScheduledNotificationContent | null) => void;
+  /** Preview for an unsaved recipient change instead of the saved recipient. */
+  recipient?: SdkNotificationRecipient;
+  /** Omit to allow every text layout field. An empty array locks every layout field. */
+  editableFields?: string[];
+  /** Allow subject edits. Defaults to true. */
+  editableSubject?: boolean;
+  /** Lock all editors while the parent saves. */
+  disabled?: boolean;
+  /** Called when the occurrence cannot be loaded. */
+  onError?: (error: SdkApiError) => void;
+  className?: string;
+};
+
 type SearchBarProps = {
   /**
    * Called with the debounced search value.

package/dist/workflow/data.d.ts

@@ -4,6 +4,16 @@ type Entry = WorkspaceResources[keyof WorkspaceResources];
 export type ResourceKey = [keyof WorkspaceResources] extends [never] ? string : Entry extends {
     id: infer I;
 } ? I : never;
+/** The id of each entry of `E` that has every capability in `C`. */
+type IdWithCapabilities<E, C extends string> = E extends {
+    id: infer I;
+    capabilities: infer Declared;
+} ? [C] extends [Declared] ? I : never : never;
+/**
+ * The ids of the resources that have every capability in `C`. Any string while the workspace
+ * declares no resources.
+ */
+export type ResourceKeyWith<C extends string> = [keyof WorkspaceResources] extends [never] ? string : IdWithCapabilities<Entry, C>;
 type EntryFor<R> = Extract<Entry, {
     id: R;
 }>;

package/dist/workflow/generated/capabilities.d.ts

@@ -1,5 +1,6 @@
+import type { ResourceKeyWith } from '../data';
 import type { ContentDocument } from '../input';
-export declare const SDK_VERSION = 53;
+export declare const SDK_VERSION = 55;
 export interface AiDecideInput {
     state: unknown;
     questions: Array<{
@@ -24,7 +25,7 @@ export interface AiRunPromptInput {
 }
 export type AiRunPromptOutput = string;
 export interface AuthImpersonateInput {
-    resource: string;
+    resource: ResourceKeyWith<"authenticatable">;
     record: string;
 }
 export type AuthImpersonateOutput = {
@@ -34,18 +35,18 @@ export type AuthImpersonateOutput = {
     [key: string]: unknown;
 };
 export interface AuthLoginInput {
-    resource: string;
+    resource: ResourceKeyWith<"authenticatable">;
     record: string;
 }
 export type AuthLoginOutput = boolean;
 export interface CalendarGenerateLinkInput {
     type: "apple" | "google" | "outlook";
-    resource: string;
+    resource: ResourceKeyWith<"eventable">;
     record: string;
 }
 export type CalendarGenerateLinkOutput = unknown;
 export interface CalendarSearchEventsInput {
-    resource: string;
+    resource: ResourceKeyWith<"eventable">;
     from: string;
     to: string;
     filters?: unknown;
@@ -639,7 +640,7 @@ export interface MoneyFormatInput {
 }
 export type MoneyFormatOutput = string;
 export interface NotificationSendInput {
-    resource: string;
+    resource: ResourceKeyWith<"notifiable">;
     relations?: Array<string>;
     record: string;
     subject: string;
@@ -700,7 +701,7 @@ export interface NotificationSendNotificationInput {
 }
 export type NotificationSendNotificationOutput = boolean;
 export interface NotificationSetConsentInput {
-    resource: string;
+    resource: ResourceKeyWith<"notifiable">;
     record: string;
     sms?: boolean | null;
     email?: boolean | null;
@@ -730,7 +731,7 @@ export type PageUrlOutput = unknown;
 export interface PayablesVoidInput {
     reason?: string | null;
     effectiveDate?: string | null;
-    payableResource: string;
+    payableResource: ResourceKeyWith<"payable">;
     payableRecord: string;
 }
 export type PayablesVoidOutput = {
@@ -739,9 +740,9 @@ export type PayablesVoidOutput = {
 };
 export interface PayablesWriteOffInput {
     lineAllocations?: unknown[] | null;
-    payableResource: string;
+    payableResource: ResourceKeyWith<"payable">;
     payableRecord: string;
-    adjustmentResource: string;
+    adjustmentResource: ResourceKeyWith<"payable_adjustment">;
     amount?: {
         amount: number;
         currency: string;
@@ -752,7 +753,7 @@ export interface PayablesWriteOffInput {
 }
 export type PayablesWriteOffOutput = Record<string, unknown>;
 export interface PaymentCreateManualInput {
-    resource: string;
+    resource: ResourceKeyWith<"payment">;
     payableRecord: string;
     amount: {
         amount: number;
@@ -765,7 +766,7 @@ export interface PaymentCreateManualInput {
 }
 export type PaymentCreateManualOutput = Record<string, unknown>;
 export interface PaymentsChargeInput {
-    payableResource: string;
+    payableResource: ResourceKeyWith<"payable">;
     payableRecord: string;
     amount?: {
         amount: number;
@@ -778,7 +779,7 @@ export interface PaymentsChargeInput {
 }
 export type PaymentsChargeOutput = Record<string, unknown>;
 export interface PaymentsCheckoutInput {
-    payableResource: string;
+    payableResource: ResourceKeyWith<"payable">;
     payableRecord: string;
     successUrl: string;
     cancelUrl?: string | null;
@@ -790,7 +791,7 @@ export type PaymentsCheckoutOutput = {
     [key: string]: unknown;
 };
 export interface PaymentsConfirmInput {
-    payableResource: string;
+    payableResource: ResourceKeyWith<"payable">;
     payableRecord: string;
     confirmationTokenId?: string | null;
     paymentMethodId?: string | null;
@@ -816,7 +817,7 @@ export type PaymentsConfirmOutput = {
     [key: string]: unknown;
 };
 export interface PaymentsRefundInput {
-    resource: string;
+    resource: ResourceKeyWith<"payment">;
     record: string;
     amount?: {
         amount: number;
@@ -902,7 +903,7 @@ export interface SmsSendNotificationInput {
 }
 export type SmsSendNotificationOutput = Record<string, unknown>;
 export interface SubscriptionsActivateInput {
-    subscriptionResource: string;
+    subscriptionResource: ResourceKeyWith<"subscription">;
     subscriptionRecord: string;
 }
 export type SubscriptionsActivateOutput = {
@@ -910,7 +911,7 @@ export type SubscriptionsActivateOutput = {
     [key: string]: unknown;
 };
 export interface SubscriptionsCancelInput {
-    subscriptionResource: string;
+    subscriptionResource: ResourceKeyWith<"subscription">;
     subscriptionRecord: string;
     atPeriodEnd?: boolean | null;
 }
@@ -919,7 +920,7 @@ export type SubscriptionsCancelOutput = {
     [key: string]: unknown;
 };
 export interface SubscriptionsChangeItemsInput {
-    subscriptionResource: string;
+    subscriptionResource: ResourceKeyWith<"subscription">;
     subscriptionRecord: string;
     items: Array<{
         price_record_id?: string;
@@ -1100,7 +1101,7 @@ export type SubscriptionsChangeItemsOutput = {
     [key: string]: unknown;
 };
 export interface SubscriptionsCreateInput {
-    subscriptionResource: string;
+    subscriptionResource: ResourceKeyWith<"subscription">;
     accountingEntity?: string | null;
     payerRecord: string;
     priceRecordIds?: Array<string> | null;
@@ -1146,7 +1147,7 @@ export type SubscriptionsCreateOutput = {
     [key: string]: unknown;
 };
 export interface SubscriptionsGenerateInvoiceInput {
-    subscriptionResource: string;
+    subscriptionResource: ResourceKeyWith<"subscription">;
     subscriptionRecord: string;
 }
 export type SubscriptionsGenerateInvoiceOutput = {
@@ -1158,7 +1159,7 @@ export type SubscriptionsGenerateInvoiceOutput = {
     [key: string]: unknown;
 };
 export interface SubscriptionsPauseInput {
-    subscriptionResource: string;
+    subscriptionResource: ResourceKeyWith<"subscription">;
     subscriptionRecord: string;
 }
 export type SubscriptionsPauseOutput = {
@@ -1166,7 +1167,7 @@ export type SubscriptionsPauseOutput = {
     [key: string]: unknown;
 };
 export interface SubscriptionsPreviewInput {
-    subscriptionResource: string;
+    subscriptionResource: ResourceKeyWith<"subscription">;
     priceRecordIds?: Array<string> | null;
     items?: Array<{
         price_record_id?: string;
@@ -1347,7 +1348,7 @@ export type SubscriptionsPreviewOutput = {
     [key: string]: unknown;
 };
 export interface SubscriptionsPreviewChangeInput {
-    subscriptionResource: string;
+    subscriptionResource: ResourceKeyWith<"subscription">;
     subscriptionRecord: string;
     items: Array<{
         price_record_id?: string;
@@ -1521,7 +1522,7 @@ export type SubscriptionsPreviewChangeOutput = {
     [key: string]: unknown;
 };
 export interface SubscriptionsResumeInput {
-    subscriptionResource: string;
+    subscriptionResource: ResourceKeyWith<"subscription">;
     subscriptionRecord: string;
 }
 export type SubscriptionsResumeOutput = {
@@ -1529,7 +1530,7 @@ export type SubscriptionsResumeOutput = {
     [key: string]: unknown;
 };
 export interface SubscriptionsSetUpcomingItemsInput {
-    subscriptionResource: string;
+    subscriptionResource: ResourceKeyWith<"subscription">;
     subscriptionRecord: string;
     desiredPriceRecordIds?: Array<string> | null;
     items?: Array<{
@@ -1804,7 +1805,7 @@ export interface WorkflowRunInput {
         [key: string]: unknown;
     };
     input?: Record<string, unknown> | null;
-    runAsResource?: string | null;
+    runAsResource?: ResourceKeyWith<"authenticatable"> | null;
     runAsRecord?: string | null;
     executionMode?: "async" | "sync" | null;
 }

package/dist/workflow/notifications.d.ts

@@ -36,7 +36,7 @@ export declare const notification: {
     sendBulkNotifications: <T extends NotificationTypeKey, R extends ResourceKey>(input: Omit<NotificationInput<NotificationSendBulkNotificationsInput, T>, "resource"> & {
         resource: R;
     }) => Promise<NotificationSendBulkNotificationsOutput>;
-    setConsent: <R extends ResourceKey>(input: Omit<NotificationSetConsentInput, "resource"> & {
+    setConsent: <R extends NotificationSetConsentInput["resource"]>(input: Omit<NotificationSetConsentInput, "resource"> & {
         resource: R;
     }) => Promise<NotificationSetConsentOutput>;
     send: (input: import("./index").NotificationSendInput) => Promise<import("./index").NotificationSendOutput>;

package/dist/workflow/workflow.d.ts

@@ -1,8 +1,10 @@
+import type { ResourceKeyWith } from './data';
 import type { ScriptHostContext } from './index';
 import { type InferInput, type InputFieldSpec, type InputSchema, type InputShape } from './input';
 export interface Identity {
     id: string;
-    resourceId: string;
+    /** The identity's resource has the Authenticatable capability. */
+    resourceId: ResourceKeyWith<'authenticatable'>;
     email: string | null;
     name: string | null;
     permissions: string[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diagonal-hq/cli",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "The diagonal CLI and the configuration helpers for file-based Diagonal workspaces.",
   "license": "SEE LICENSE IN LICENSE",
   "repository": {
@@ -30,7 +30,10 @@
     "bin/diagonal.mjs",
     "dist/cli.mjs",
     "dist/index.js",
+    "dist/fields.generated.js",
     "dist/index.d.ts",
+    "dist/fields.generated.d.ts",
+    "dist/capabilities.generated.d.ts",
     "dist/globals.d.ts",
     "dist/sdk-contract.d.ts",
     "dist/workflow",