@postman/sdk-config 0.11.0 → 0.13.0

package/dist/sdk-config-ir/index.cjs

@@ -446,7 +446,10 @@ var cliDistributionConfigSchema = zod.z.strictObject({
     "A GitHub App used to mint short-lived tokens for every channel without its own tokenSecretName."
   ),
   homebrew: cliDistributionHomebrewSchema.optional().describe("Publishes a Homebrew formula to a tap repository on each tagged release."),
-  scoop: cliDistributionScoopSchema.optional().describe("Publishes a Scoop manifest to a bucket repository on each tagged release.")
+  scoop: cliDistributionScoopSchema.optional().describe("Publishes a Scoop manifest to a bucket repository on each tagged release."),
+  githubAttestations: zod.z.union([zod.z.literal("auto"), zod.z.boolean()], { error: 'must be "auto", true, or false' }).optional().describe(
+    'Whether the generated release workflow attests build provenance. "auto" (the generator default) attests only on public repositories; true always attests, for private repositories on GitHub Enterprise Cloud; false omits the attestation step and its permissions.'
+  )
 }).superRefine((distribution, context) => {
   if (distribution.homebrew !== void 0 || distribution.scoop !== void 0) {
     return;
@@ -459,6 +462,9 @@ var cliDistributionConfigSchema = zod.z.strictObject({
     });
     return;
   }
+  if (distribution.githubAttestations !== void 0) {
+    return;
+  }
   context.addIssue({
     code: "custom",
     message: "distribution must configure at least one channel: homebrew or scoop"
@@ -470,14 +476,17 @@ var CLI_DISTRIBUTION_NON_RELEASE_MODE_CODE = "CLI_DISTRIBUTION_NON_RELEASE_MODE"
 var nonReleaseGithubModes = /* @__PURE__ */ new Set(["pull-request", "push", "commit"]);
 function cliDistributionModeDiagnostic(output, outputPath) {
   const mode = output?.github?.mode;
-  if (output?.distribution === void 0 || mode === void 0 || !nonReleaseGithubModes.has(mode)) {
+  const distribution = output?.distribution;
+  if (distribution === void 0 || mode === void 0 || !nonReleaseGithubModes.has(mode)) {
     return void 0;
   }
+  const hasChannel = distribution.homebrew !== void 0 || distribution.scoop !== void 0;
+  const consequence = hasChannel ? "Homebrew and Scoop publish only after a semantic-version tag is pushed to the repository." : "the release workflow, including its githubAttestations setting, runs only after a semantic-version tag is pushed to the repository.";
   return {
     code: CLI_DISTRIBUTION_NON_RELEASE_MODE_CODE,
     severity: "warning",
     path: [...outputPath, "github", "mode"],
-    reason: `GitHub mode "${mode}" does not create a release tag, so Homebrew and Scoop publish only after a semantic-version tag is pushed to the repository.`,
+    reason: `GitHub mode "${mode}" does not create a release tag, so ${consequence}`,
     suggestedAction: 'Use mode "release" or "commit-and-release", or push a version tag after merging generated changes.'
   };
 }
@@ -702,7 +711,7 @@ var packageScriptSchema = zod.z.strictObject({
   command: nonEmptyStringSchema.describe("The command executed by the package script.")
 });
 var httpClientSchema = zod.z.strictObject({
-  name: zod.z.enum(["axios", "fetch"]).describe("The HTTP client used by generated TypeScript code.")
+  name: zod.z.enum(["axios", "fetch", "node-fetch"]).describe("The HTTP client used by generated TypeScript code.")
 });
 var typescriptGenerationConfigSchema = zod.z.strictObject({
   typescriptVersion: nonEmptyStringSchema.optional().describe("The TypeScript version used by the generated project."),
@@ -718,6 +727,37 @@ var typescriptGenerationConfigSchema = zod.z.strictObject({
   /** Name of the top-level namespace export emitted by Fern-compatible TypeScript SDKs. */
   namespaceExportName: nonEmptyStringSchema.optional().describe("The top-level namespace export name."),
   consolidateTypeFiles: zod.z.boolean().optional().describe("Whether generated types are consolidated into fewer source files."),
+  formDataSupport: zod.z.enum(["Node16", "Node18"]).optional().describe(
+    "The multipart form-data implementation: Node16 uses the form-data packages, Node18 uses the platform FormData."
+  ),
+  allowExtraFields: zod.z.boolean().optional().describe(
+    "Whether response parsing keeps unrecognized object keys and accepts unrecognized union members and enum values."
+  ),
+  generateSubpackageExports: zod.z.boolean().optional().describe(
+    "Whether the package manifest exports each subpackage client as its own entry point."
+  ),
+  exportAllRequestsAtRoot: zod.z.boolean().optional().describe("Whether every request type is also exported from the package root."),
+  generateEndpointMetadata: zod.z.boolean().optional().describe("Whether generated clients expose metadata for each endpoint."),
+  outputEsm: zod.z.boolean().optional().describe(
+    "Whether the package is marked as an ES module while still shipping its CommonJS build."
+  ),
+  neverThrowErrors: zod.z.boolean().optional().describe(
+    "Whether client methods return a wrapped response instead of throwing on a non-2xx status."
+  ),
+  includeOtherInUnionTypes: zod.z.boolean().optional().describe("Whether union types gain a member for variants the SDK does not recognize."),
+  includeUtilsOnUnionMembers: zod.z.boolean().optional().describe("Whether helper utilities are generated on each member of a union type."),
+  omitFernHeaders: zod.z.boolean().optional().describe("Whether requests omit the SDK identification headers and the User-Agent header."),
+  linter: zod.z.enum(["biome", "oxlint", "none"]).optional().describe("The linter configured in the generated project."),
+  formatter: zod.z.enum(["prettier", "biome", "oxfmt", "none"]).optional().describe("The formatter configured in the generated project."),
+  exports: jsonObjectSchema.optional().describe(
+    "package.json exports entries, keyed by subpath, applied over the generated exports. Each subpath replaces the generated one."
+  ),
+  files: zod.z.array(nonEmptyStringSchema).optional().describe("package.json files entries, listed ahead of the generated ones."),
+  engines: zod.z.record(nonEmptyStringSchema, nonEmptyStringSchema).optional().describe("package.json engines version ranges, keyed by engine name such as node."),
+  lintStaged: zod.z.record(nonEmptyStringSchema, zod.z.array(nonEmptyStringSchema).min(1)).optional().describe("lint-staged commands to run, keyed by file glob."),
+  browser: zod.z.record(nonEmptyStringSchema, zod.z.union([zod.z.boolean(), nonEmptyStringSchema])).optional().describe(
+    "package.json browser field: a module or file is excluded (false) or replaced by another path."
+  ),
   allowCustomFetcher: zod.z.boolean().optional().describe("Whether callers can supply a custom fetch implementation."),
   useBrandedStringAliases: zod.z.boolean().optional().describe("Whether string aliases are emitted as distinct branded types."),
   useLegacyExports: zod.z.boolean().optional().describe("Whether the package emits the legacy export layout."),
@@ -791,7 +831,7 @@ var pythonGenerationConfigSchema = zod.z.strictObject({
   additionalInitExports: zod.z.array(additionalInitExportSchema).optional().describe("Additional names re-exported from the package initializer.")
 });
 var rubyGenerationConfigSchema = zod.z.strictObject({
-  requirePaths: zod.z.array(nonEmptyStringSchema).optional().describe("Ruby load paths included in the generated gem specification.")
+  requirePaths: zod.z.array(nonEmptyStringSchema).optional().describe("Files the generated entry file loads with `require`.")
 });
 var rustGenerationConfigSchema = zod.z.strictObject({
   /**
@@ -864,6 +904,12 @@ var dependencySchema = zod.z.strictObject({
 }).refine(({ source, version }) => source !== void 0 || version !== void 0, {
   message: "dependency must define a version or a source"
 });
+var bugsSchema = zod.z.strictObject({
+  url: nonEmptyStringSchema.optional().describe("The issue tracker URL."),
+  email: nonEmptyStringSchema.optional().describe("The address for reporting issues.")
+}).refine(({ url, email }) => url !== void 0 || email !== void 0, {
+  message: "bugs must define a url or an email"
+});
 var projectUrlSchema = zod.z.strictObject({
   label: nonEmptyStringSchema.describe("The label displayed for the project link."),
   url: nonEmptyStringSchema.describe("The project link URL.")
@@ -878,6 +924,7 @@ var packageConfigSchema = zod.z.strictObject({
   description: zod.z.string().optional().describe("The package description used in generated metadata."),
   repository: nonEmptyStringSchema.optional().describe("The source repository for the generated SDK."),
   homepage: nonEmptyStringSchema.optional().describe("The package homepage URL."),
+  bugs: bugsSchema.optional().describe("Where issues with the package are reported."),
   documentationUrl: nonEmptyStringSchema.optional().describe("The package documentation URL."),
   authors: zod.z.array(authorSchema).optional().describe("Authors credited in package metadata."),
   developers: zod.z.array(developerSchema).optional().describe("Developers credited in package metadata."),
@@ -1163,6 +1210,7 @@ var publishConfigSchema = zod.z.discriminatedUnion("registry", [
   zod.z.strictObject({
     registry: zod.z.literal("rubygems").describe("Publishes the package to a RubyGems-compatible registry."),
     apiKeyEnvironmentVariable: nonEmptyStringSchema.optional().describe("The environment variable containing the RubyGems API key."),
+    ...trustedPublishingShape,
     ...commonPublishShape
   }),
   zod.z.strictObject({
@@ -1233,7 +1281,7 @@ var githubOutputSchema = zod.z.strictObject({
 var distributionShape = {
   /** Valid only for `cli` targets with GitHub delivery; secret names only, never values. */
   distribution: cliDistributionConfigSchema.optional().describe(
-    "CLI release channels published by the generated release workflow; credentials are GitHub Actions secret names."
+    "CLI release channels and build attestation settings for the generated release workflow; credentials are GitHub Actions secret names."
   )
 };
 var credentialResolutionShape = {
@@ -1293,6 +1341,9 @@ var apiImportSettingsSchema = zod.z.strictObject({
   discriminatedUnionV2: zod.z.boolean().optional().describe("Whether oneOf and anyOf schemas use the newer discriminator inference rules."),
   undiscriminatedUnionsWithLiterals: zod.z.boolean().optional().describe("Whether literal-bearing unions remain undiscriminated during import."),
   inlineAllOfSchemas: zod.z.boolean().optional().describe("Whether schemas composed with allOf are inlined when possible."),
+  inferDiscriminatedUnionBaseProperties: zod.z.boolean().optional().describe(
+    "Whether properties every discriminated-union variant shares are lifted onto the union."
+  ),
   resolveSchemaCollisions: zod.z.boolean().optional().describe("Whether colliding imported schema names are resolved automatically."),
   asyncApiMessageNaming: zod.z.enum(["v1", "v2"]).optional().describe("The naming strategy used for messages imported from AsyncAPI."),
   defaultIntegerFormat: zod.z.enum(["int32", "int64", "uint32", "uint64"]).optional().describe("The integer format used when a schema does not declare one.")