@hexclave/shared 1.0.36 → 1.0.38

package/dist/esm/config/schema.d.ts

@@ -84,7 +84,7 @@ declare const branchConfigSchema: yup$1.Schema<Omit<Omit<{
   sourceOfTruth: {
     type: "hosted";
   };
-}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+}, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
   payments?: {
     blockNewPurchases?: boolean | undefined;
     autoPay?: {
@@ -125,6 +125,33 @@ declare const branchConfigSchema: yup$1.Schema<Omit<Omit<{
       }>;
     }>;
   } | undefined;
+  rbac: {
+    permissions: Record<string, {
+      description?: string | undefined;
+      scope?: "team" | "project" | undefined;
+      containedPermissionIds?: Record<string, true | undefined> | undefined;
+    } | undefined>;
+    defaultPermissions: {
+      teamCreator: Record<string, true | undefined>;
+      teamMember: Record<string, true | undefined>;
+      signUp: Record<string, true | undefined>;
+    };
+  };
+  onboarding: {
+    requireEmailVerification?: boolean | undefined;
+  };
+  apiKeys: {
+    enabled: {
+      team?: boolean | undefined;
+      user?: boolean | undefined;
+    };
+  };
+  apps: {
+    installed: Record<"rbac" | "onboarding" | "payments" | "teams" | "authentication" | "fraud-protection" | "analytics" | "api-keys" | "emails" | "support" | "email-api" | "data-vault" | "webhooks" | "tv-mode" | "launch-checklist" | "catalyst" | "neon" | "convex" | "vercel" | "tanstack-start" | "clickmaps" | "session-replays", {
+      enabled?: boolean | undefined;
+    }>;
+  };
+  domains: {};
   auth: {
     allowSignUp?: boolean | undefined;
     signUpRulesDefaultAction?: string | undefined;
@@ -156,24 +183,12 @@ declare const branchConfigSchema: yup$1.Schema<Omit<Omit<{
       };
     }>;
   };
-  onboarding: {
-    requireEmailVerification?: boolean | undefined;
-  };
   teams: {
     createPersonalTeamOnSignUp?: boolean | undefined;
     allowClientTeamCreation?: boolean | undefined;
   };
-  rbac: {
-    permissions: Record<string, {
-      description?: string | undefined;
-      scope?: "team" | "project" | undefined;
-      containedPermissionIds?: Record<string, true | undefined> | undefined;
-    } | undefined>;
-    defaultPermissions: {
-      teamCreator: Record<string, true | undefined>;
-      teamMember: Record<string, true | undefined>;
-      signUp: Record<string, true | undefined>;
-    };
+  users: {
+    allowClientUserDeletion?: boolean | undefined;
   };
   emails: {
     selectedThemeId?: string | undefined;
@@ -187,21 +202,6 @@ declare const branchConfigSchema: yup$1.Schema<Omit<Omit<{
       tsxSource: string;
     }>;
   };
-  users: {
-    allowClientUserDeletion?: boolean | undefined;
-  };
-  apiKeys: {
-    enabled: {
-      team?: boolean | undefined;
-      user?: boolean | undefined;
-    };
-  };
-  apps: {
-    installed: Record<"authentication" | "fraud-protection" | "analytics" | "onboarding" | "teams" | "rbac" | "api-keys" | "payments" | "emails" | "support" | "email-api" | "data-vault" | "webhooks" | "tv-mode" | "launch-checklist" | "catalyst" | "neon" | "convex" | "vercel" | "tanstack-start" | "clickmaps" | "session-replays", {
-      enabled?: boolean | undefined;
-    }>;
-  };
-  domains: {};
   dbSync: {
     externalDatabases: Record<string, {
       connectionString?: string | undefined;
@@ -218,7 +218,7 @@ declare const branchConfigSchema: yup$1.Schema<Omit<Omit<{
   project: {
     requirePublishableClientKey: undefined;
   };
-}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+}, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
   rbac: {
     permissions: undefined;
     defaultPermissions: {
@@ -293,7 +293,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
   sourceOfTruth: {
     type: "hosted";
   };
-}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+}, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
   payments?: {
     blockNewPurchases?: boolean | undefined;
     autoPay?: {
@@ -334,6 +334,33 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
       }>;
     }>;
   } | undefined;
+  rbac: {
+    permissions: Record<string, {
+      description?: string | undefined;
+      scope?: "team" | "project" | undefined;
+      containedPermissionIds?: Record<string, true | undefined> | undefined;
+    } | undefined>;
+    defaultPermissions: {
+      teamCreator: Record<string, true | undefined>;
+      teamMember: Record<string, true | undefined>;
+      signUp: Record<string, true | undefined>;
+    };
+  };
+  onboarding: {
+    requireEmailVerification?: boolean | undefined;
+  };
+  apiKeys: {
+    enabled: {
+      team?: boolean | undefined;
+      user?: boolean | undefined;
+    };
+  };
+  apps: {
+    installed: Record<"rbac" | "onboarding" | "payments" | "teams" | "authentication" | "fraud-protection" | "analytics" | "api-keys" | "emails" | "support" | "email-api" | "data-vault" | "webhooks" | "tv-mode" | "launch-checklist" | "catalyst" | "neon" | "convex" | "vercel" | "tanstack-start" | "clickmaps" | "session-replays", {
+      enabled?: boolean | undefined;
+    }>;
+  };
+  domains: {};
   auth: {
     allowSignUp?: boolean | undefined;
     signUpRulesDefaultAction?: string | undefined;
@@ -365,24 +392,12 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
       };
     }>;
   };
-  onboarding: {
-    requireEmailVerification?: boolean | undefined;
-  };
   teams: {
     createPersonalTeamOnSignUp?: boolean | undefined;
     allowClientTeamCreation?: boolean | undefined;
   };
-  rbac: {
-    permissions: Record<string, {
-      description?: string | undefined;
-      scope?: "team" | "project" | undefined;
-      containedPermissionIds?: Record<string, true | undefined> | undefined;
-    } | undefined>;
-    defaultPermissions: {
-      teamCreator: Record<string, true | undefined>;
-      teamMember: Record<string, true | undefined>;
-      signUp: Record<string, true | undefined>;
-    };
+  users: {
+    allowClientUserDeletion?: boolean | undefined;
   };
   emails: {
     selectedThemeId?: string | undefined;
@@ -396,21 +411,6 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
       tsxSource: string;
     }>;
   };
-  users: {
-    allowClientUserDeletion?: boolean | undefined;
-  };
-  apiKeys: {
-    enabled: {
-      team?: boolean | undefined;
-      user?: boolean | undefined;
-    };
-  };
-  apps: {
-    installed: Record<"authentication" | "fraud-protection" | "analytics" | "onboarding" | "teams" | "rbac" | "api-keys" | "payments" | "emails" | "support" | "email-api" | "data-vault" | "webhooks" | "tv-mode" | "launch-checklist" | "catalyst" | "neon" | "convex" | "vercel" | "tanstack-start" | "clickmaps" | "session-replays", {
-      enabled?: boolean | undefined;
-    }>;
-  };
-  domains: {};
   dbSync: {
     externalDatabases: Record<string, {
       connectionString?: string | undefined;
@@ -422,7 +422,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
       displayName?: string | undefined;
     }>;
   };
-}>, "auth" | "analytics" | "payments" | "emails" | "domains" | "customDashboards"> & {
+}>, "domains" | "auth" | "payments" | "analytics" | "emails" | "customDashboards"> & {
   payments?: (Omit<{
     blockNewPurchases?: boolean | undefined;
     autoPay?: {
@@ -465,6 +465,13 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
   }, "testMode"> & {
     testMode?: boolean | undefined;
   }) | undefined;
+  domains: Omit<{}, "allowLocalhost" | "trustedDomains"> & {
+    allowLocalhost?: boolean | undefined;
+    trustedDomains: Record<string, {
+      baseUrl?: string | undefined;
+      handlerPath?: string | undefined;
+    }>;
+  };
   auth: Omit<{
     allowSignUp?: boolean | undefined;
     signUpRulesDefaultAction?: string | undefined;
@@ -559,13 +566,6 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
       managedSenderLocalPart?: string | undefined;
     };
   };
-  domains: Omit<{}, "allowLocalhost" | "trustedDomains"> & {
-    allowLocalhost?: boolean | undefined;
-    trustedDomains: Record<string, {
-      baseUrl?: string | undefined;
-      handlerPath?: string | undefined;
-    }>;
-  };
   customDashboards: Record<string, {
     displayName: string;
     tsxSource: string;
@@ -575,7 +575,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
   project: {
     requirePublishableClientKey: undefined;
   };
-}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+}, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
   rbac: {
     permissions: undefined;
     defaultPermissions: {
@@ -642,13 +642,13 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
   dataVault: {
     stores: undefined;
   };
-}>, "auth" | "analytics" | "payments" | "emails" | "domains" | "customDashboards"> & {
+}>, "domains" | "auth" | "payments" | "analytics" | "emails" | "customDashboards"> & {
   auth: Omit<NonNullable<Omit<Omit<{
     sourceOfTruth: undefined;
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -721,7 +721,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
       project: {
         requirePublishableClientKey: undefined;
       };
-    }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+    }, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
       rbac: {
         permissions: undefined;
         defaultPermissions: {
@@ -797,7 +797,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -883,7 +883,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -959,7 +959,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -1041,7 +1041,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
   sourceOfTruth: {
     type: "hosted";
   };
-}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+}, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
   payments?: {
     blockNewPurchases?: boolean | undefined;
     autoPay?: {
@@ -1082,6 +1082,33 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
       }>;
     }>;
   } | undefined;
+  rbac: {
+    permissions: Record<string, {
+      description?: string | undefined;
+      scope?: "team" | "project" | undefined;
+      containedPermissionIds?: Record<string, true | undefined> | undefined;
+    } | undefined>;
+    defaultPermissions: {
+      teamCreator: Record<string, true | undefined>;
+      teamMember: Record<string, true | undefined>;
+      signUp: Record<string, true | undefined>;
+    };
+  };
+  onboarding: {
+    requireEmailVerification?: boolean | undefined;
+  };
+  apiKeys: {
+    enabled: {
+      team?: boolean | undefined;
+      user?: boolean | undefined;
+    };
+  };
+  apps: {
+    installed: Record<"rbac" | "onboarding" | "payments" | "teams" | "authentication" | "fraud-protection" | "analytics" | "api-keys" | "emails" | "support" | "email-api" | "data-vault" | "webhooks" | "tv-mode" | "launch-checklist" | "catalyst" | "neon" | "convex" | "vercel" | "tanstack-start" | "clickmaps" | "session-replays", {
+      enabled?: boolean | undefined;
+    }>;
+  };
+  domains: {};
   auth: {
     allowSignUp?: boolean | undefined;
     signUpRulesDefaultAction?: string | undefined;
@@ -1113,24 +1140,12 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
       };
     }>;
   };
-  onboarding: {
-    requireEmailVerification?: boolean | undefined;
-  };
   teams: {
     createPersonalTeamOnSignUp?: boolean | undefined;
     allowClientTeamCreation?: boolean | undefined;
   };
-  rbac: {
-    permissions: Record<string, {
-      description?: string | undefined;
-      scope?: "team" | "project" | undefined;
-      containedPermissionIds?: Record<string, true | undefined> | undefined;
-    } | undefined>;
-    defaultPermissions: {
-      teamCreator: Record<string, true | undefined>;
-      teamMember: Record<string, true | undefined>;
-      signUp: Record<string, true | undefined>;
-    };
+  users: {
+    allowClientUserDeletion?: boolean | undefined;
   };
   emails: {
     selectedThemeId?: string | undefined;
@@ -1144,21 +1159,6 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
       tsxSource: string;
     }>;
   };
-  users: {
-    allowClientUserDeletion?: boolean | undefined;
-  };
-  apiKeys: {
-    enabled: {
-      team?: boolean | undefined;
-      user?: boolean | undefined;
-    };
-  };
-  apps: {
-    installed: Record<"authentication" | "fraud-protection" | "analytics" | "onboarding" | "teams" | "rbac" | "api-keys" | "payments" | "emails" | "support" | "email-api" | "data-vault" | "webhooks" | "tv-mode" | "launch-checklist" | "catalyst" | "neon" | "convex" | "vercel" | "tanstack-start" | "clickmaps" | "session-replays", {
-      enabled?: boolean | undefined;
-    }>;
-  };
-  domains: {};
   dbSync: {
     externalDatabases: Record<string, {
       connectionString?: string | undefined;
@@ -1170,7 +1170,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
       displayName?: string | undefined;
     }>;
   };
-}>, "auth" | "analytics" | "payments" | "emails" | "domains" | "customDashboards"> & {
+}>, "domains" | "auth" | "payments" | "analytics" | "emails" | "customDashboards"> & {
   payments?: (Omit<{
     blockNewPurchases?: boolean | undefined;
     autoPay?: {
@@ -1213,6 +1213,13 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
   }, "testMode"> & {
     testMode?: boolean | undefined;
   }) | undefined;
+  domains: Omit<{}, "allowLocalhost" | "trustedDomains"> & {
+    allowLocalhost?: boolean | undefined;
+    trustedDomains: Record<string, {
+      baseUrl?: string | undefined;
+      handlerPath?: string | undefined;
+    }>;
+  };
   auth: Omit<{
     allowSignUp?: boolean | undefined;
     signUpRulesDefaultAction?: string | undefined;
@@ -1307,13 +1314,6 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
       managedSenderLocalPart?: string | undefined;
     };
   };
-  domains: Omit<{}, "allowLocalhost" | "trustedDomains"> & {
-    allowLocalhost?: boolean | undefined;
-    trustedDomains: Record<string, {
-      baseUrl?: string | undefined;
-      handlerPath?: string | undefined;
-    }>;
-  };
   customDashboards: Record<string, {
     displayName: string;
     tsxSource: string;
@@ -1323,7 +1323,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
   project: {
     requirePublishableClientKey: undefined;
   };
-}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+}, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
   rbac: {
     permissions: undefined;
     defaultPermissions: {
@@ -1390,13 +1390,13 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
   dataVault: {
     stores: undefined;
   };
-}>, "auth" | "analytics" | "payments" | "emails" | "domains" | "customDashboards"> & {
+}>, "domains" | "auth" | "payments" | "analytics" | "emails" | "customDashboards"> & {
   auth: Omit<NonNullable<Omit<Omit<{
     sourceOfTruth: undefined;
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -1469,7 +1469,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
       project: {
         requirePublishableClientKey: undefined;
       };
-    }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+    }, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
       rbac: {
         permissions: undefined;
         defaultPermissions: {
@@ -1545,7 +1545,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -1631,7 +1631,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -1707,7 +1707,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "rbac" | "onboarding" | "apiKeys" | "apps" | "domains" | "auth" | "payments" | "teams" | "users" | "emails" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -2077,8 +2077,8 @@ declare function sanitizeOrganizationConfig(config: OrganizationRenderedConfigBe
       priority: number;
       condition: string | undefined;
       action: {
-        type: "allow" | "reject" | "restrict" | "log";
         message: string | undefined;
+        type: "allow" | "reject" | "restrict" | "log";
       };
     }>;
     allowSignUp: boolean;
@@ -2146,8 +2146,8 @@ declare function sanitizeOrganizationConfig(config: OrganizationRenderedConfigBe
       stackable: boolean | undefined;
       includedItems: {
         [x: string]: {
-          repeat: "never" | [number, "day" | "week" | "month" | "year"];
           quantity: number;
+          repeat: "never" | [number, "day" | "week" | "month" | "year"];
           expires: "never" | "when-purchase-expires" | "when-repeated";
         };
       };
@@ -2183,28 +2183,6 @@ declare function sanitizeOrganizationConfig(config: OrganizationRenderedConfigBe
   } & {
     readonly type: "hosted";
   };
-  analytics: {
-    queryFolders: {
-      [x: string]: {
-        displayName: string;
-        sortOrder: number;
-        queries: {
-          [x: string]: {
-            description: string | undefined;
-            displayName: string;
-            sqlQuery: string;
-          };
-        };
-      };
-    };
-  };
-  onboarding: {
-    requireEmailVerification: boolean;
-  };
-  teams: {
-    createPersonalTeamOnSignUp: boolean;
-    allowClientTeamCreation: boolean;
-  };
   rbac: {
     permissions: {
       [x: string]: {
@@ -2227,8 +2205,8 @@ declare function sanitizeOrganizationConfig(config: OrganizationRenderedConfigBe
       };
     };
   };
-  users: {
-    allowClientUserDeletion: boolean;
+  onboarding: {
+    requireEmailVerification: boolean;
   };
   apiKeys: {
     enabled: {
@@ -2245,6 +2223,28 @@ declare function sanitizeOrganizationConfig(config: OrganizationRenderedConfigBe
       };
     };
   };
+  teams: {
+    createPersonalTeamOnSignUp: boolean;
+    allowClientTeamCreation: boolean;
+  };
+  users: {
+    allowClientUserDeletion: boolean;
+  };
+  analytics: {
+    queryFolders: {
+      [x: string]: {
+        displayName: string;
+        sortOrder: number;
+        queries: {
+          [x: string]: {
+            description: string | undefined;
+            displayName: string;
+            sqlQuery: string;
+          };
+        };
+      };
+    };
+  };
   dbSync: {
     externalDatabases: {
       [x: string]: {

package/dist/esm/config-eval.d.ts

@@ -0,0 +1,31 @@
+import { showOnboardingHexclaveConfigValue } from "./config-authoring";
+
+//#region src/config-eval.d.ts
+/**
+ * Thrown when a config file evaluates successfully but its exported `config`
+ * isn't a usable shape (missing, or not an object / "show-onboarding" string).
+ * Distinct from the underlying loader errors jiti throws, so callers can tell a
+ * malformed config apart from a file that simply failed to load.
+ */
+declare class ConfigFileEvalError extends Error {
+  constructor(message: string);
+}
+/**
+ * Walks up from `dir` to find the nearest `package.json` and returns the
+ * best SDK package to use for the `HexclaveConfig` type import.
+ */
+declare function detectImportPackageFromDir(dir: string): string | undefined;
+/** A config object, or the `"show-onboarding"` sentinel that stands in for one. */
+type ParsedConfigValue = Record<string, unknown> | typeof showOnboardingHexclaveConfigValue;
+/**
+ * Evaluates config file content using jiti and returns the exported `config`
+ * value.
+ *
+ * WARNING: This executes arbitrary code via `jiti.evalModule` — only use on
+ * content that is fully operator-controlled (local filesystem). Never call
+ * this on untrusted input (e.g. content fetched from a remote repository).
+ */
+declare function evalConfigFileContent(content: string, filePath: string): ParsedConfigValue;
+//#endregion
+export { ConfigFileEvalError, ParsedConfigValue, detectImportPackageFromDir, evalConfigFileContent };
+//# sourceMappingURL=config-eval.d.ts.map

package/dist/esm/config-eval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-eval.d.ts","names":[],"sources":["../../src/config-eval.ts"],"mappings":";;;;;AAcA;;;;cAAa,mBAAA,SAA4B,KAAA;cAC3B,OAAA;AAAA;;;AAUd;;iBAAgB,0BAAA,CAA2B,GAAA;;KA4B/B,iBAAA,GAAoB,MAAA,2BAAiC,iCAAA;AAAjE;;;;;AAcA;;;AAdA,iBAcgB,qBAAA,CAAsB,OAAA,UAAiB,QAAA,WAAmB,iBAAA"}