@postman/sdk-config 0.12.0 → 0.14.0

package/dist/sdk-config-ir/v1/index.d.cts

@@ -1,5 +1,5 @@
-import { i as JsonObject, S as SdkConfigDiagnostic } from '../../typescript-Byhn4MqL.cjs';
-export { C as CLI_DISTRIBUTION_NON_RELEASE_MODE_CODE, a as CliDistributionConfig, b as CliDistributionGithubAppConfig, c as CliDistributionHomebrewConfig, d as CliDistributionScoopConfig, e as CliGenerationConfig, f as CliProfilesConfig, g as CliProfilesProvisionOperation, h as CsharpGenerationConfig, D as Dependency, G as GoGenerationConfig, J as JavaGenerationConfig, j as JsonValue, K as KotlinGenerationConfig, M as McpAvailabilityStatus, k as McpGenerationConfig, l as McpToolFilter, P as PackageConfig, m as PhpGenerationConfig, n as PlanModifiers, o as PythonGenerationConfig, R as RubyGenerationConfig, p as RustGenerationConfig, q as SwiftGenerationConfig, T as TerraformGenerationConfig, r as TypescriptGenerationConfig, s as cliDistributionConfigSchema, t as cliDistributionGithubAppSchema, u as cliDistributionHomebrewSchema, v as cliDistributionScoopSchema, w as cliGenerationConfigSchema, x as composerPackageNameSchema, y as csharpGenerationConfigSchema, z as dependencySchema, A as exactSemverSchema, B as githubActionsSecretNameSchema, E as goGenerationConfigSchema, F as goModulePathSchema, H as javaGenerationConfigSchema, I as jsonObjectSchema, L as jsonValueSchema, N as kotlinGenerationConfigSchema, O as mcpAvailabilityStatuses, Q as mcpGenerationConfigSchema, U as nonEmptyStringSchema, V as packageConfigSchema, W as phpGenerationConfigSchema, X as pythonGenerationConfigSchema, Y as relativePathSchema, Z as rubyGenerationConfigSchema, _ as rustGenerationConfigSchema, $ as swiftGenerationConfigSchema, a0 as terraformGenerationConfigSchema, a1 as typescriptGenerationConfigSchema } from '../../typescript-Byhn4MqL.cjs';
+import { i as JsonObject, S as SdkConfigDiagnostic } from '../../typescript-BFRxjAah.cjs';
+export { C as CLI_DISTRIBUTION_NON_RELEASE_MODE_CODE, a as CliDistributionConfig, b as CliDistributionGithubAppConfig, c as CliDistributionHomebrewConfig, d as CliDistributionScoopConfig, e as CliGenerationConfig, f as CliProfilesConfig, g as CliProfilesProvisionOperation, h as CsharpGenerationConfig, D as Dependency, G as GoGenerationConfig, J as JavaGenerationConfig, j as JsonValue, K as KotlinGenerationConfig, M as McpAvailabilityStatus, k as McpGenerationConfig, l as McpToolFilter, P as PackageConfig, m as PhpGenerationConfig, n as PlanModifiers, o as PythonGenerationConfig, R as RubyGenerationConfig, p as RustGenerationConfig, q as SwiftGenerationConfig, T as TerraformGenerationConfig, r as TypescriptGenerationConfig, s as cliDistributionConfigSchema, t as cliDistributionGithubAppSchema, u as cliDistributionHomebrewSchema, v as cliDistributionScoopSchema, w as cliGenerationConfigSchema, x as composerPackageNameSchema, y as csharpGenerationConfigSchema, z as dependencySchema, A as exactSemverSchema, B as githubActionsSecretNameSchema, E as goGenerationConfigSchema, F as goModulePathSchema, H as javaGenerationConfigSchema, I as jsonObjectSchema, L as jsonValueSchema, N as kotlinGenerationConfigSchema, O as mcpAvailabilityStatuses, Q as mcpGenerationConfigSchema, U as nonEmptyStringSchema, V as packageConfigSchema, W as phpGenerationConfigSchema, X as pythonGenerationConfigSchema, Y as relativePathSchema, Z as rubyGenerationConfigSchema, _ as rustGenerationConfigSchema, $ as swiftGenerationConfigSchema, a0 as terraformGenerationConfigSchema, a1 as typescriptGenerationConfigSchema } from '../../typescript-BFRxjAah.cjs';
 import { z } from 'zod';
 
 declare const authSchemeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -674,6 +674,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
                 discriminatedUnionV2: z.ZodOptional<z.ZodBoolean>;
                 undiscriminatedUnionsWithLiterals: z.ZodOptional<z.ZodBoolean>;
                 inlineAllOfSchemas: z.ZodOptional<z.ZodBoolean>;
+                inferDiscriminatedUnionBaseProperties: z.ZodOptional<z.ZodBoolean>;
                 resolveSchemaCollisions: z.ZodOptional<z.ZodBoolean>;
                 asyncApiMessageNaming: z.ZodOptional<z.ZodEnum<{
                     v1: "v1";
@@ -710,6 +711,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
             discriminatedUnionV2: z.ZodOptional<z.ZodBoolean>;
             undiscriminatedUnionsWithLiterals: z.ZodOptional<z.ZodBoolean>;
             inlineAllOfSchemas: z.ZodOptional<z.ZodBoolean>;
+            inferDiscriminatedUnionBaseProperties: z.ZodOptional<z.ZodBoolean>;
             resolveSchemaCollisions: z.ZodOptional<z.ZodBoolean>;
             asyncApiMessageNaming: z.ZodOptional<z.ZodEnum<{
                 v1: "v1";
@@ -1130,6 +1132,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
                 bucket: z.ZodString;
                 tokenSecretName: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
+            githubAttestations: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>>;
         }, z.core.$strict>>;
         delivery: z.ZodLiteral<"files">;
         path: z.ZodOptional<z.ZodString>;
@@ -1197,6 +1200,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
             releaseBranch: z.ZodOptional<z.ZodString>;
             tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
             shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+            trustedPublishing: z.ZodOptional<z.ZodBoolean>;
             registry: z.ZodLiteral<"rubygems">;
             apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>, z.ZodObject<{
@@ -1292,6 +1296,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
                 bucket: z.ZodString;
                 tokenSecretName: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
+            githubAttestations: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>>;
         }, z.core.$strict>>;
         delivery: z.ZodLiteral<"zip">;
         fileName: z.ZodOptional<z.ZodString>;
@@ -1359,6 +1364,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
             releaseBranch: z.ZodOptional<z.ZodString>;
             tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
             shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+            trustedPublishing: z.ZodOptional<z.ZodBoolean>;
             registry: z.ZodLiteral<"rubygems">;
             apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>, z.ZodObject<{
@@ -1454,6 +1460,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
                 bucket: z.ZodString;
                 tokenSecretName: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
+            githubAttestations: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>>;
         }, z.core.$strict>>;
         delivery: z.ZodLiteral<"github">;
         github: z.ZodObject<{
@@ -1479,6 +1486,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
                 apiKey: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             privateRepository: z.ZodOptional<z.ZodBoolean>;
+            workflows: z.ZodOptional<z.ZodBoolean>;
             license: z.ZodOptional<z.ZodObject<{
                 type: z.ZodOptional<z.ZodString>;
                 customPath: z.ZodOptional<z.ZodString>;
@@ -1554,6 +1562,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
             releaseBranch: z.ZodOptional<z.ZodString>;
             tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
             shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+            trustedPublishing: z.ZodOptional<z.ZodBoolean>;
             registry: z.ZodLiteral<"rubygems">;
             apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>, z.ZodObject<{
@@ -1772,9 +1781,9 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
             exclusions: z.ZodOptional<z.ZodArray<z.ZodString>>;
             fallbackToGeneratedErrorExamples: z.ZodOptional<z.ZodBoolean>;
             fixtureSource: z.ZodOptional<z.ZodEnum<{
+                auto: "auto";
                 synthetic: "synthetic";
                 recorded: "recorded";
-                auto: "auto";
             }>>;
         }, z.core.$strict>>;
         unitTests: z.ZodOptional<z.ZodObject<{
@@ -2685,9 +2694,9 @@ declare const generationConfigSchema: z.ZodObject<{
         exclusions: z.ZodOptional<z.ZodArray<z.ZodString>>;
         fallbackToGeneratedErrorExamples: z.ZodOptional<z.ZodBoolean>;
         fixtureSource: z.ZodOptional<z.ZodEnum<{
+            auto: "auto";
             synthetic: "synthetic";
             recorded: "recorded";
-            auto: "auto";
         }>>;
     }, z.core.$strict>>;
     unitTests: z.ZodOptional<z.ZodObject<{
@@ -3179,6 +3188,8 @@ declare const publishConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
     /** Generate registry publishing workflow files when publishing through GitHub delivery. */
     shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+    /** Use registry trusted publishing / OIDC instead of a static token secret. */
+    trustedPublishing: z.ZodOptional<z.ZodBoolean>;
     registry: z.ZodLiteral<"rubygems">;
     apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>, z.ZodObject<{
@@ -3308,6 +3319,7 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             bucket: z.ZodString;
             tokenSecretName: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        githubAttestations: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>>;
     }, z.core.$strict>>;
     delivery: z.ZodLiteral<"files">;
     path: z.ZodOptional<z.ZodString>;
@@ -3409,6 +3421,8 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
         /** Generate registry publishing workflow files when publishing through GitHub delivery. */
         shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+        /** Use registry trusted publishing / OIDC instead of a static token secret. */
+        trustedPublishing: z.ZodOptional<z.ZodBoolean>;
         registry: z.ZodLiteral<"rubygems">;
         apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
@@ -3537,6 +3551,7 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             bucket: z.ZodString;
             tokenSecretName: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        githubAttestations: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>>;
     }, z.core.$strict>>;
     delivery: z.ZodLiteral<"zip">;
     fileName: z.ZodOptional<z.ZodString>;
@@ -3638,6 +3653,8 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
         /** Generate registry publishing workflow files when publishing through GitHub delivery. */
         shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+        /** Use registry trusted publishing / OIDC instead of a static token secret. */
+        trustedPublishing: z.ZodOptional<z.ZodBoolean>;
         registry: z.ZodLiteral<"rubygems">;
         apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
@@ -3766,6 +3783,7 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             bucket: z.ZodString;
             tokenSecretName: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        githubAttestations: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>>;
     }, z.core.$strict>>;
     delivery: z.ZodLiteral<"github">;
     github: z.ZodObject<{
@@ -3793,6 +3811,8 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             apiKey: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
         privateRepository: z.ZodOptional<z.ZodBoolean>;
+        /** Whether generated `.github/workflows` files are delivered. If omitted, they are (true). */
+        workflows: z.ZodOptional<z.ZodBoolean>;
         /** GitHub license block scoped to repository delivery. */
         license: z.ZodOptional<z.ZodObject<{
             /** SPDX identifier or license key for the repository license (for example, "MIT"). */
@@ -3909,6 +3929,8 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
         /** Generate registry publishing workflow files when publishing through GitHub delivery. */
         shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+        /** Use registry trusted publishing / OIDC instead of a static token secret. */
+        trustedPublishing: z.ZodOptional<z.ZodBoolean>;
         registry: z.ZodLiteral<"rubygems">;
         apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
@@ -4048,6 +4070,7 @@ declare const apiImportSettingsSchema: z.ZodObject<{
     discriminatedUnionV2: z.ZodOptional<z.ZodBoolean>;
     undiscriminatedUnionsWithLiterals: z.ZodOptional<z.ZodBoolean>;
     inlineAllOfSchemas: z.ZodOptional<z.ZodBoolean>;
+    inferDiscriminatedUnionBaseProperties: z.ZodOptional<z.ZodBoolean>;
     resolveSchemaCollisions: z.ZodOptional<z.ZodBoolean>;
     asyncApiMessageNaming: z.ZodOptional<z.ZodEnum<{
         v1: "v1";
@@ -4103,6 +4126,7 @@ declare const sourceSpecConfigSchema: z.ZodObject<{
         discriminatedUnionV2: z.ZodOptional<z.ZodBoolean>;
         undiscriminatedUnionsWithLiterals: z.ZodOptional<z.ZodBoolean>;
         inlineAllOfSchemas: z.ZodOptional<z.ZodBoolean>;
+        inferDiscriminatedUnionBaseProperties: z.ZodOptional<z.ZodBoolean>;
         resolveSchemaCollisions: z.ZodOptional<z.ZodBoolean>;
         asyncApiMessageNaming: z.ZodOptional<z.ZodEnum<{
             v1: "v1";
@@ -4152,6 +4176,7 @@ declare const sourceConfigSchema: z.ZodObject<{
             discriminatedUnionV2: z.ZodOptional<z.ZodBoolean>;
             undiscriminatedUnionsWithLiterals: z.ZodOptional<z.ZodBoolean>;
             inlineAllOfSchemas: z.ZodOptional<z.ZodBoolean>;
+            inferDiscriminatedUnionBaseProperties: z.ZodOptional<z.ZodBoolean>;
             resolveSchemaCollisions: z.ZodOptional<z.ZodBoolean>;
             asyncApiMessageNaming: z.ZodOptional<z.ZodEnum<{
                 v1: "v1";
@@ -4188,6 +4213,7 @@ declare const sourceConfigSchema: z.ZodObject<{
         discriminatedUnionV2: z.ZodOptional<z.ZodBoolean>;
         undiscriminatedUnionsWithLiterals: z.ZodOptional<z.ZodBoolean>;
         inlineAllOfSchemas: z.ZodOptional<z.ZodBoolean>;
+        inferDiscriminatedUnionBaseProperties: z.ZodOptional<z.ZodBoolean>;
         resolveSchemaCollisions: z.ZodOptional<z.ZodBoolean>;
         asyncApiMessageNaming: z.ZodOptional<z.ZodEnum<{
             v1: "v1";

package/dist/sdk-config-ir/v1/index.d.ts

@@ -1,5 +1,5 @@
-import { i as JsonObject, S as SdkConfigDiagnostic } from '../../typescript-Byhn4MqL.js';
-export { C as CLI_DISTRIBUTION_NON_RELEASE_MODE_CODE, a as CliDistributionConfig, b as CliDistributionGithubAppConfig, c as CliDistributionHomebrewConfig, d as CliDistributionScoopConfig, e as CliGenerationConfig, f as CliProfilesConfig, g as CliProfilesProvisionOperation, h as CsharpGenerationConfig, D as Dependency, G as GoGenerationConfig, J as JavaGenerationConfig, j as JsonValue, K as KotlinGenerationConfig, M as McpAvailabilityStatus, k as McpGenerationConfig, l as McpToolFilter, P as PackageConfig, m as PhpGenerationConfig, n as PlanModifiers, o as PythonGenerationConfig, R as RubyGenerationConfig, p as RustGenerationConfig, q as SwiftGenerationConfig, T as TerraformGenerationConfig, r as TypescriptGenerationConfig, s as cliDistributionConfigSchema, t as cliDistributionGithubAppSchema, u as cliDistributionHomebrewSchema, v as cliDistributionScoopSchema, w as cliGenerationConfigSchema, x as composerPackageNameSchema, y as csharpGenerationConfigSchema, z as dependencySchema, A as exactSemverSchema, B as githubActionsSecretNameSchema, E as goGenerationConfigSchema, F as goModulePathSchema, H as javaGenerationConfigSchema, I as jsonObjectSchema, L as jsonValueSchema, N as kotlinGenerationConfigSchema, O as mcpAvailabilityStatuses, Q as mcpGenerationConfigSchema, U as nonEmptyStringSchema, V as packageConfigSchema, W as phpGenerationConfigSchema, X as pythonGenerationConfigSchema, Y as relativePathSchema, Z as rubyGenerationConfigSchema, _ as rustGenerationConfigSchema, $ as swiftGenerationConfigSchema, a0 as terraformGenerationConfigSchema, a1 as typescriptGenerationConfigSchema } from '../../typescript-Byhn4MqL.js';
+import { i as JsonObject, S as SdkConfigDiagnostic } from '../../typescript-BFRxjAah.js';
+export { C as CLI_DISTRIBUTION_NON_RELEASE_MODE_CODE, a as CliDistributionConfig, b as CliDistributionGithubAppConfig, c as CliDistributionHomebrewConfig, d as CliDistributionScoopConfig, e as CliGenerationConfig, f as CliProfilesConfig, g as CliProfilesProvisionOperation, h as CsharpGenerationConfig, D as Dependency, G as GoGenerationConfig, J as JavaGenerationConfig, j as JsonValue, K as KotlinGenerationConfig, M as McpAvailabilityStatus, k as McpGenerationConfig, l as McpToolFilter, P as PackageConfig, m as PhpGenerationConfig, n as PlanModifiers, o as PythonGenerationConfig, R as RubyGenerationConfig, p as RustGenerationConfig, q as SwiftGenerationConfig, T as TerraformGenerationConfig, r as TypescriptGenerationConfig, s as cliDistributionConfigSchema, t as cliDistributionGithubAppSchema, u as cliDistributionHomebrewSchema, v as cliDistributionScoopSchema, w as cliGenerationConfigSchema, x as composerPackageNameSchema, y as csharpGenerationConfigSchema, z as dependencySchema, A as exactSemverSchema, B as githubActionsSecretNameSchema, E as goGenerationConfigSchema, F as goModulePathSchema, H as javaGenerationConfigSchema, I as jsonObjectSchema, L as jsonValueSchema, N as kotlinGenerationConfigSchema, O as mcpAvailabilityStatuses, Q as mcpGenerationConfigSchema, U as nonEmptyStringSchema, V as packageConfigSchema, W as phpGenerationConfigSchema, X as pythonGenerationConfigSchema, Y as relativePathSchema, Z as rubyGenerationConfigSchema, _ as rustGenerationConfigSchema, $ as swiftGenerationConfigSchema, a0 as terraformGenerationConfigSchema, a1 as typescriptGenerationConfigSchema } from '../../typescript-BFRxjAah.js';
 import { z } from 'zod';
 
 declare const authSchemeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -674,6 +674,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
                 discriminatedUnionV2: z.ZodOptional<z.ZodBoolean>;
                 undiscriminatedUnionsWithLiterals: z.ZodOptional<z.ZodBoolean>;
                 inlineAllOfSchemas: z.ZodOptional<z.ZodBoolean>;
+                inferDiscriminatedUnionBaseProperties: z.ZodOptional<z.ZodBoolean>;
                 resolveSchemaCollisions: z.ZodOptional<z.ZodBoolean>;
                 asyncApiMessageNaming: z.ZodOptional<z.ZodEnum<{
                     v1: "v1";
@@ -710,6 +711,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
             discriminatedUnionV2: z.ZodOptional<z.ZodBoolean>;
             undiscriminatedUnionsWithLiterals: z.ZodOptional<z.ZodBoolean>;
             inlineAllOfSchemas: z.ZodOptional<z.ZodBoolean>;
+            inferDiscriminatedUnionBaseProperties: z.ZodOptional<z.ZodBoolean>;
             resolveSchemaCollisions: z.ZodOptional<z.ZodBoolean>;
             asyncApiMessageNaming: z.ZodOptional<z.ZodEnum<{
                 v1: "v1";
@@ -1130,6 +1132,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
                 bucket: z.ZodString;
                 tokenSecretName: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
+            githubAttestations: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>>;
         }, z.core.$strict>>;
         delivery: z.ZodLiteral<"files">;
         path: z.ZodOptional<z.ZodString>;
@@ -1197,6 +1200,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
             releaseBranch: z.ZodOptional<z.ZodString>;
             tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
             shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+            trustedPublishing: z.ZodOptional<z.ZodBoolean>;
             registry: z.ZodLiteral<"rubygems">;
             apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>, z.ZodObject<{
@@ -1292,6 +1296,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
                 bucket: z.ZodString;
                 tokenSecretName: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
+            githubAttestations: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>>;
         }, z.core.$strict>>;
         delivery: z.ZodLiteral<"zip">;
         fileName: z.ZodOptional<z.ZodString>;
@@ -1359,6 +1364,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
             releaseBranch: z.ZodOptional<z.ZodString>;
             tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
             shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+            trustedPublishing: z.ZodOptional<z.ZodBoolean>;
             registry: z.ZodLiteral<"rubygems">;
             apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>, z.ZodObject<{
@@ -1454,6 +1460,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
                 bucket: z.ZodString;
                 tokenSecretName: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
+            githubAttestations: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>>;
         }, z.core.$strict>>;
         delivery: z.ZodLiteral<"github">;
         github: z.ZodObject<{
@@ -1479,6 +1486,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
                 apiKey: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             privateRepository: z.ZodOptional<z.ZodBoolean>;
+            workflows: z.ZodOptional<z.ZodBoolean>;
             license: z.ZodOptional<z.ZodObject<{
                 type: z.ZodOptional<z.ZodString>;
                 customPath: z.ZodOptional<z.ZodString>;
@@ -1554,6 +1562,7 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
             releaseBranch: z.ZodOptional<z.ZodString>;
             tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
             shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+            trustedPublishing: z.ZodOptional<z.ZodBoolean>;
             registry: z.ZodLiteral<"rubygems">;
             apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>, z.ZodObject<{
@@ -1772,9 +1781,9 @@ declare const sdkConfigIrV1Schema: z.ZodObject<{
             exclusions: z.ZodOptional<z.ZodArray<z.ZodString>>;
             fallbackToGeneratedErrorExamples: z.ZodOptional<z.ZodBoolean>;
             fixtureSource: z.ZodOptional<z.ZodEnum<{
+                auto: "auto";
                 synthetic: "synthetic";
                 recorded: "recorded";
-                auto: "auto";
             }>>;
         }, z.core.$strict>>;
         unitTests: z.ZodOptional<z.ZodObject<{
@@ -2685,9 +2694,9 @@ declare const generationConfigSchema: z.ZodObject<{
         exclusions: z.ZodOptional<z.ZodArray<z.ZodString>>;
         fallbackToGeneratedErrorExamples: z.ZodOptional<z.ZodBoolean>;
         fixtureSource: z.ZodOptional<z.ZodEnum<{
+            auto: "auto";
             synthetic: "synthetic";
             recorded: "recorded";
-            auto: "auto";
         }>>;
     }, z.core.$strict>>;
     unitTests: z.ZodOptional<z.ZodObject<{
@@ -3179,6 +3188,8 @@ declare const publishConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
     /** Generate registry publishing workflow files when publishing through GitHub delivery. */
     shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+    /** Use registry trusted publishing / OIDC instead of a static token secret. */
+    trustedPublishing: z.ZodOptional<z.ZodBoolean>;
     registry: z.ZodLiteral<"rubygems">;
     apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>, z.ZodObject<{
@@ -3308,6 +3319,7 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             bucket: z.ZodString;
             tokenSecretName: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        githubAttestations: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>>;
     }, z.core.$strict>>;
     delivery: z.ZodLiteral<"files">;
     path: z.ZodOptional<z.ZodString>;
@@ -3409,6 +3421,8 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
         /** Generate registry publishing workflow files when publishing through GitHub delivery. */
         shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+        /** Use registry trusted publishing / OIDC instead of a static token secret. */
+        trustedPublishing: z.ZodOptional<z.ZodBoolean>;
         registry: z.ZodLiteral<"rubygems">;
         apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
@@ -3537,6 +3551,7 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             bucket: z.ZodString;
             tokenSecretName: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        githubAttestations: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>>;
     }, z.core.$strict>>;
     delivery: z.ZodLiteral<"zip">;
     fileName: z.ZodOptional<z.ZodString>;
@@ -3638,6 +3653,8 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
         /** Generate registry publishing workflow files when publishing through GitHub delivery. */
         shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+        /** Use registry trusted publishing / OIDC instead of a static token secret. */
+        trustedPublishing: z.ZodOptional<z.ZodBoolean>;
         registry: z.ZodLiteral<"rubygems">;
         apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
@@ -3766,6 +3783,7 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             bucket: z.ZodString;
             tokenSecretName: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        githubAttestations: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>>;
     }, z.core.$strict>>;
     delivery: z.ZodLiteral<"github">;
     github: z.ZodObject<{
@@ -3793,6 +3811,8 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             apiKey: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
         privateRepository: z.ZodOptional<z.ZodBoolean>;
+        /** Whether generated `.github/workflows` files are delivered. If omitted, they are (true). */
+        workflows: z.ZodOptional<z.ZodBoolean>;
         /** GitHub license block scoped to repository delivery. */
         license: z.ZodOptional<z.ZodObject<{
             /** SPDX identifier or license key for the repository license (for example, "MIT"). */
@@ -3909,6 +3929,8 @@ declare const outputConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         tolerateRepublish: z.ZodOptional<z.ZodBoolean>;
         /** Generate registry publishing workflow files when publishing through GitHub delivery. */
         shouldGeneratePublishWorkflow: z.ZodOptional<z.ZodBoolean>;
+        /** Use registry trusted publishing / OIDC instead of a static token secret. */
+        trustedPublishing: z.ZodOptional<z.ZodBoolean>;
         registry: z.ZodLiteral<"rubygems">;
         apiKeyEnvironmentVariable: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
@@ -4048,6 +4070,7 @@ declare const apiImportSettingsSchema: z.ZodObject<{
     discriminatedUnionV2: z.ZodOptional<z.ZodBoolean>;
     undiscriminatedUnionsWithLiterals: z.ZodOptional<z.ZodBoolean>;
     inlineAllOfSchemas: z.ZodOptional<z.ZodBoolean>;
+    inferDiscriminatedUnionBaseProperties: z.ZodOptional<z.ZodBoolean>;
     resolveSchemaCollisions: z.ZodOptional<z.ZodBoolean>;
     asyncApiMessageNaming: z.ZodOptional<z.ZodEnum<{
         v1: "v1";
@@ -4103,6 +4126,7 @@ declare const sourceSpecConfigSchema: z.ZodObject<{
         discriminatedUnionV2: z.ZodOptional<z.ZodBoolean>;
         undiscriminatedUnionsWithLiterals: z.ZodOptional<z.ZodBoolean>;
         inlineAllOfSchemas: z.ZodOptional<z.ZodBoolean>;
+        inferDiscriminatedUnionBaseProperties: z.ZodOptional<z.ZodBoolean>;
         resolveSchemaCollisions: z.ZodOptional<z.ZodBoolean>;
         asyncApiMessageNaming: z.ZodOptional<z.ZodEnum<{
             v1: "v1";
@@ -4152,6 +4176,7 @@ declare const sourceConfigSchema: z.ZodObject<{
             discriminatedUnionV2: z.ZodOptional<z.ZodBoolean>;
             undiscriminatedUnionsWithLiterals: z.ZodOptional<z.ZodBoolean>;
             inlineAllOfSchemas: z.ZodOptional<z.ZodBoolean>;
+            inferDiscriminatedUnionBaseProperties: z.ZodOptional<z.ZodBoolean>;
             resolveSchemaCollisions: z.ZodOptional<z.ZodBoolean>;
             asyncApiMessageNaming: z.ZodOptional<z.ZodEnum<{
                 v1: "v1";
@@ -4188,6 +4213,7 @@ declare const sourceConfigSchema: z.ZodObject<{
         discriminatedUnionV2: z.ZodOptional<z.ZodBoolean>;
         undiscriminatedUnionsWithLiterals: z.ZodOptional<z.ZodBoolean>;
         inlineAllOfSchemas: z.ZodOptional<z.ZodBoolean>;
+        inferDiscriminatedUnionBaseProperties: z.ZodOptional<z.ZodBoolean>;
         resolveSchemaCollisions: z.ZodOptional<z.ZodBoolean>;
         asyncApiMessageNaming: z.ZodOptional<z.ZodEnum<{
             v1: "v1";

package/dist/sdk-config-ir/v1/index.js

@@ -440,7 +440,10 @@ var cliDistributionConfigSchema = z.strictObject({
     "A GitHub App used to mint short-lived tokens for every channel without its own tokenSecretName."
   ),
   homebrew: cliDistributionHomebrewSchema.optional().describe("Publishes a Homebrew formula to a tap repository on each tagged release."),
-  scoop: cliDistributionScoopSchema.optional().describe("Publishes a Scoop manifest to a bucket repository on each tagged release.")
+  scoop: cliDistributionScoopSchema.optional().describe("Publishes a Scoop manifest to a bucket repository on each tagged release."),
+  githubAttestations: z.union([z.literal("auto"), z.boolean()], { error: 'must be "auto", true, or false' }).optional().describe(
+    'Whether the generated release workflow attests build provenance. "auto" (the generator default) attests only on public repositories; true always attests, for private repositories on GitHub Enterprise Cloud; false omits the attestation step and its permissions.'
+  )
 }).superRefine((distribution, context) => {
   if (distribution.homebrew !== void 0 || distribution.scoop !== void 0) {
     return;
@@ -453,6 +456,9 @@ var cliDistributionConfigSchema = z.strictObject({
     });
     return;
   }
+  if (distribution.githubAttestations !== void 0) {
+    return;
+  }
   context.addIssue({
     code: "custom",
     message: "distribution must configure at least one channel: homebrew or scoop"
@@ -464,14 +470,17 @@ var CLI_DISTRIBUTION_NON_RELEASE_MODE_CODE = "CLI_DISTRIBUTION_NON_RELEASE_MODE"
 var nonReleaseGithubModes = /* @__PURE__ */ new Set(["pull-request", "push", "commit"]);
 function cliDistributionModeDiagnostic(output, outputPath) {
   const mode = output?.github?.mode;
-  if (output?.distribution === void 0 || mode === void 0 || !nonReleaseGithubModes.has(mode)) {
+  const distribution = output?.distribution;
+  if (distribution === void 0 || mode === void 0 || !nonReleaseGithubModes.has(mode)) {
     return void 0;
   }
+  const hasChannel = distribution.homebrew !== void 0 || distribution.scoop !== void 0;
+  const consequence = hasChannel ? "Homebrew and Scoop publish only after a semantic-version tag is pushed to the repository." : "the release workflow, including its githubAttestations setting, runs only after a semantic-version tag is pushed to the repository.";
   return {
     code: CLI_DISTRIBUTION_NON_RELEASE_MODE_CODE,
     severity: "warning",
     path: [...outputPath, "github", "mode"],
-    reason: `GitHub mode "${mode}" does not create a release tag, so Homebrew and Scoop publish only after a semantic-version tag is pushed to the repository.`,
+    reason: `GitHub mode "${mode}" does not create a release tag, so ${consequence}`,
     suggestedAction: 'Use mode "release" or "commit-and-release", or push a version tag after merging generated changes.'
   };
 }
@@ -816,7 +825,7 @@ var pythonGenerationConfigSchema = z.strictObject({
   additionalInitExports: z.array(additionalInitExportSchema).optional().describe("Additional names re-exported from the package initializer.")
 });
 var rubyGenerationConfigSchema = z.strictObject({
-  requirePaths: z.array(nonEmptyStringSchema).optional().describe("Ruby load paths included in the generated gem specification.")
+  requirePaths: z.array(nonEmptyStringSchema).optional().describe("Files the generated entry file loads with `require`.")
 });
 var rustGenerationConfigSchema = z.strictObject({
   /**
@@ -1195,6 +1204,7 @@ var publishConfigSchema = z.discriminatedUnion("registry", [
   z.strictObject({
     registry: z.literal("rubygems").describe("Publishes the package to a RubyGems-compatible registry."),
     apiKeyEnvironmentVariable: nonEmptyStringSchema.optional().describe("The environment variable containing the RubyGems API key."),
+    ...trustedPublishingShape,
     ...commonPublishShape
   }),
   z.strictObject({
@@ -1251,6 +1261,10 @@ var githubOutputSchema = z.strictObject({
   /** Raw GitHub credentials. These values can be sensitive and must be handled as secrets. */
   credentials: registryCredentialsSchema.optional().describe("Resolved GitHub credentials."),
   privateRepository: z.boolean().optional().describe("Whether the destination repository is private."),
+  /** Whether generated `.github/workflows` files are delivered. If omitted, they are (true). */
+  workflows: z.boolean().optional().describe(
+    "Whether generated .github/workflows files are delivered. Defaults to true. When false, newly generated workflow files are skipped and existing ones in the repository are left untouched."
+  ),
   /** GitHub license block scoped to repository delivery. */
   license: githubLicenseSchema.optional().describe("License configuration for the destination repository."),
   /** GitHub replay control. If omitted, the external publisher applies its default behavior. */
@@ -1265,7 +1279,7 @@ var githubOutputSchema = z.strictObject({
 var distributionShape = {
   /** Valid only for `cli` targets with GitHub delivery; secret names only, never values. */
   distribution: cliDistributionConfigSchema.optional().describe(
-    "CLI release channels published by the generated release workflow; credentials are GitHub Actions secret names."
+    "CLI release channels and build attestation settings for the generated release workflow; credentials are GitHub Actions secret names."
   )
 };
 var credentialResolutionShape = {
@@ -1325,6 +1339,9 @@ var apiImportSettingsSchema = z.strictObject({
   discriminatedUnionV2: z.boolean().optional().describe("Whether oneOf and anyOf schemas use the newer discriminator inference rules."),
   undiscriminatedUnionsWithLiterals: z.boolean().optional().describe("Whether literal-bearing unions remain undiscriminated during import."),
   inlineAllOfSchemas: z.boolean().optional().describe("Whether schemas composed with allOf are inlined when possible."),
+  inferDiscriminatedUnionBaseProperties: z.boolean().optional().describe(
+    "Whether properties every discriminated-union variant shares are lifted onto the union."
+  ),
   resolveSchemaCollisions: z.boolean().optional().describe("Whether colliding imported schema names are resolved automatically."),
   asyncApiMessageNaming: z.enum(["v1", "v2"]).optional().describe("The naming strategy used for messages imported from AsyncAPI."),
   defaultIntegerFormat: z.enum(["int32", "int64", "uint32", "uint64"]).optional().describe("The integer format used when a schema does not declare one.")