@rippling/rippling-sdk 0.2.0-alpha.62 → 0.2.0-alpha.64

package/src/lib/manifest/custom-object-page-layout.ts

@@ -108,8 +108,6 @@ interface SerializedHeaderEdits
 
 export type SectionFieldsLayout = 'one_column' | 'two_column' | 'three_column' | 'responsive';
 export type TabLayout = 'vertical' | 'horizontal';
-export type SectionMovementOption = 'static' | 'tab' | 'free';
-export type FieldMovementOption = 'tab' | 'free';
 export type CustomObjectCustomSectionComponentKey = 'attachments' | 'comments';
 
 /** Default value wrapper used by `SectionField.defaultValue`. */
@@ -131,8 +129,6 @@ export interface SectionFieldOptions {
   height?: number;
   /** Whether the layout manager can remove this field. Optional. */
   canBeDeleted?: boolean;
-  /** Controls how the field can be moved in the UI. Optional. */
-  movementOption?: FieldMovementOption;
 }
 
 /** A typed field entry inside a `fields_section`. */
@@ -153,8 +149,6 @@ export interface PageLayoutSectionOptions {
   canBeDeleted?: boolean;
   /** Whether the layout manager can rename this section. Optional. */
   canBeRenamed?: boolean;
-  /** Controls how the section can be moved. Optional. */
-  movementOption?: SectionMovementOption;
   /** Hide the section title. Optional. */
   hideName?: boolean;
 }
@@ -755,7 +749,6 @@ function toSerializedSectionField(
   if (options.defaultValue != null) normalized.defaultValue = options.defaultValue;
   if (options.height != null) normalized.height = options.height;
   if (options.canBeDeleted != null) normalized.canBeDeleted = options.canBeDeleted;
-  if (options.movementOption != null) normalized.movementOption = options.movementOption;
   return normalized;
 }
 
@@ -765,7 +758,6 @@ function copySectionOptions<T extends PageLayoutSectionOptions>(
 ): T {
   if (input.canBeDeleted != null) target.canBeDeleted = input.canBeDeleted;
   if (input.canBeRenamed != null) target.canBeRenamed = input.canBeRenamed;
-  if (input.movementOption != null) target.movementOption = input.movementOption;
   if (input.hideName != null) target.hideName = input.hideName;
   return target;
 }
@@ -892,6 +884,17 @@ function cloneJson<T>(value: T): T {
   return JSON.parse(JSON.stringify(value)) as T;
 }
 
+function stripMovementOptions(value: unknown): void {
+  if (Array.isArray(value)) {
+    for (const item of value) stripMovementOptions(item);
+    return;
+  }
+  if (value == null || typeof value !== 'object') return;
+  const record = value as Record<string, unknown>;
+  delete record['movementOption'];
+  for (const item of Object.values(record)) stripMovementOptions(item);
+}
+
 const HEADER_EDIT_KEYS = new Set([
   'newTitleField',
   'titleFieldDeleted',
@@ -2275,6 +2278,8 @@ export class CustomObjectPageLayout {
    * @returns A plain object with `type: 'CUSTOM_OBJECT_PAGE_LAYOUT'`.
    */
   toDict(): Record<string, any> {
+    const tabEdits = cloneJson(this._tabEdits);
+    stripMovementOptions(tabEdits);
     const d: Record<string, any> = {
       type: CustomObjectPageLayout.componentType,
       layout_id: this._layoutId,
@@ -2283,7 +2288,7 @@ export class CustomObjectPageLayout {
       name: this._name,
       // Packaged layouts are never system-created (backend invariant).
       system_created: false,
-      tab_edits: this._tabEdits,
+      tab_edits: tabEdits,
       header_edits: this._headerEdits,
       visibility_conditions: this._visibilityConditions,
       blueprint_key: this._blueprintKey ?? this._customObjectApiName,

package/src/lib/manifest/index.ts

@@ -52,7 +52,6 @@ export {
   type CustomObjectPageLayoutProps,
   type CustomSection,
   type CustomTab,
-  type FieldMovementOption,
   type FieldRqlName,
   type FieldsSection,
   type HeaderEdits,
@@ -86,7 +85,6 @@ export {
   type SectionFieldRef,
   type SectionFieldsLayout,
   type SectionKey,
-  type SectionMovementOption,
   type SystemHeaderFieldEdit,
   type SystemSectionEdit,
   type SystemTabEdit,
@@ -176,7 +174,6 @@ export {
 export {
   ManifestFunction,
   ManifestFunction as Function,
-  type FunctionCodeFile,
   type ManifestFunctionProps,
 } from './manifest-function';
 

package/src/lib/manifest/manifest-function.ts

@@ -1,11 +1,7 @@
-import * as fs from 'node:fs';
-
 import { getExistingManifestContext, type ExistingManifestContextOptions } from './existing-manifest-context';
 import type { ManifestComponentDeletion, ManifestScope } from './manifest-builder';
 import { optionalStringComponentField, requireStringComponentField } from './_existing-component-fields';
 
-export type FunctionCodeFile = `./${string}.ts` | `/${string}.ts`;
-
 /**
  * Initialization properties for {@link ManifestFunction}.
  */
@@ -23,12 +19,11 @@ export interface ManifestFunctionProps {
    */
   name: string;
   /**
-   * Path to a TypeScript handler source file. The file must export an
-   * `onRipplingEvent` function. Its contents are serialized to `code_draft`.
+   * TypeScript handler source code. Must export an `onRipplingEvent` function.
    *
    * Optional. @default `''`
    */
-  codeFile?: FunctionCodeFile;
+  code?: string;
   /**
    * Human-readable description of what this function does.
    *
@@ -85,7 +80,7 @@ export interface ManifestFunctionProps {
  *   apiName: 'gym_today_schedule_fn',
  *   name: 'Today\'s schedule (SDUI)',
  *   description: 'Searchable grid of class sessions',
- *   codeFile: './functions/gym_today_schedule_fn/code.ts',
+ *   code: handlerSource,
  *   dependencies: {
  *     '@rippling/rippling-sdk': '^0.2.0-alpha.33',
  *   },
@@ -107,8 +102,7 @@ export class ManifestFunction {
 
   private readonly _apiName: string;
   private readonly _name: string;
-  private readonly _codeFile: FunctionCodeFile | undefined;
-  private _codeDraft: string | undefined;
+  private readonly _code: string;
   private readonly _description: string;
   private readonly _dependencies: Record<string, string> | undefined;
   private readonly _deploymentOptions: Record<string, any> | undefined;
@@ -122,7 +116,7 @@ export class ManifestFunction {
   constructor(scope: ManifestScope, props: ManifestFunctionProps) {
     this._apiName = props.apiName;
     this._name = props.name;
-    this._codeFile = props.codeFile;
+    this._code = props.code ?? '';
     this._description = props.description;
     this._dependencies = props.dependencies;
     this._deploymentOptions = props.deploymentOptions;
@@ -145,16 +139,14 @@ export class ManifestFunction {
       name: requireStringComponentField(component, 'name', ManifestFunction.componentType),
       description: optionalStringComponentField(component, 'description'),
     };
-    const codeDraft = optionalStringComponentField(component, 'code_draft');
+    if (component['code_draft'] !== undefined) props.code = component['code_draft'];
     if (component['dependencies'] !== undefined) props.dependencies = component['dependencies'];
     if (component['deployment_options'] !== undefined) {
       props.deploymentOptions = component['deployment_options'];
     }
     if (component['allowed_domains'] !== undefined) props.allowedDomains = component['allowed_domains'];
     if (component['is_async'] !== undefined) props.isAsync = component['is_async'];
-    const manifestFunction = new ManifestFunction(scope, props);
-    manifestFunction._codeDraft = codeDraft;
-    return manifestFunction;
+    return new ManifestFunction(scope, props);
   }
 
   /**
@@ -176,9 +168,7 @@ export class ManifestFunction {
       api_name: this._apiName,
       description: this._description,
     };
-    const codeDraft =
-      this._codeDraft ?? (this._codeFile ? fs.readFileSync(this._codeFile, 'utf-8') : undefined);
-    if (codeDraft) component['code_draft'] = codeDraft;
+    if (this._code) component['code_draft'] = this._code;
     if (this._dependencies != null) component['dependencies'] = this._dependencies;
     if (this._deploymentOptions != null) component['deployment_options'] = this._deploymentOptions;
     if (this._allowedDomains != null) component['allowed_domains'] = this._allowedDomains;

package/src/resources/app-users.ts

@@ -0,0 +1,270 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../core/resource';
+import * as BusinessPartnersAPI from './business-partners';
+import * as WorkersAPI from './workers';
+import { APIPromise } from '../core/api-promise';
+import { PageCursorURL, PagePromise } from '../core/pagination';
+import { RequestOptions } from '../internal/request-options';
+import { path } from '../internal/utils/path';
+
+/**
+ * Mappings between Rippling workers and their user accounts in third-party apps
+ */
+export class AppUsers extends APIResource {
+  /**
+   * A list of app users.
+   *
+   * - Requires: `API Tier 1`
+   * - Filterable fields: `worker_id`, `spoke_user_identifier`, `app_handle`,
+   *   `created_at`, `updated_at`
+   * - Expandable fields: `worker`
+   * - Sortable fields: `id`, `created_at`, `updated_at`
+   */
+  list(
+    query: AppUserListParams | null | undefined = {},
+    options?: RequestOptions,
+  ): PagePromise<AppUserListResponsesPageCursorURL, AppUserListResponse> {
+    return this._client.getAPIList('/app-users/', PageCursorURL<AppUserListResponse>, { query, ...options });
+  }
+
+  /**
+   * Retrieve a specific app user
+   */
+  retrieve(
+    id: string,
+    query: AppUserRetrieveParams | null | undefined = {},
+    options?: RequestOptions,
+  ): APIPromise<AppUserRetrieveResponse> {
+    return this._client.get(path`/app-users/${id}/`, { query, ...options });
+  }
+}
+
+export type AppUserListResponsesPageCursorURL = PageCursorURL<AppUserListResponse>;
+
+/**
+ * Maps a Rippling worker (if any) to their user account in a third-party
+ *     app (e.g. Slack, Jira, GitHub). Sourced from SpokeUser records.
+ *
+ *     Includes orphan accounts — third-party app accounts with no matching
+ *     Rippling worker (`worker_id=None`, `match_state=NOT_MATCHED`). These are
+ *     the primary signal for IT-admin triage. Uses `BaseResourceDTO` rather
+ *     than `BaseEmployeeResourceDTO` so the platform's role-based auto-filter
+ *     does not silently drop orphans for non-admin tokens. Company scoping is
+ *     enforced explicitly in `AppUsersAPIViewSet.get_queryset`; the `app-users.read`
+ *     scope is the access gate.
+ *
+ *     Resource name aligns with how the product surfaces these in the UI
+ *     ("Slack account", "GitHub account") and matches the equivalent concept
+ *     in Okta's IAM API (AppUser).
+ *
+ *     Designed for point lookups: list endpoint requires at least one filter
+ *     on `worker_id` or `spoke_user_identifier` to prevent bulk enumeration of the
+ *     org's identity graph across connected apps.
+ *
+ *     `spoke_user_identifier` reads `SpokeUser.spokeId` — the user identifier
+ *     stored for the third-party account. Depending on the integration, this may
+ *     be an email, username, account handle, or app-specific user id.
+ */
+export interface AppUserListResponse {
+  /**
+   * Identifier field
+   */
+  id: string;
+
+  /**
+   * Record creation date
+   */
+  created_at: string;
+
+  /**
+   * Record update date
+   */
+  updated_at: string;
+
+  /**
+   * Human-readable display name for the third-party app (e.g. 'Slack', 'GitHub').
+   * Sourced from the customer-configured SpokeOwner.app_display_name; falls back to
+   * a title-cased app handle when the customer hasn't set one.
+   */
+  app_display_name?: string;
+
+  /**
+   * Machine-readable identifier for the third-party app (e.g. 'slack', 'jira',
+   * 'asana'). Stable across the App Shop catalog.
+   */
+  app_handle?: string;
+
+  /**
+   * The user's email address in the third-party app, if known. Null when the app
+   * does not expose an email or Rippling did not capture one.
+   */
+  external_email?: string;
+
+  /**
+   * The user's display name in the third-party app, if known. Null when the app does
+   * not surface a separate username.
+   */
+  external_username?: string;
+
+  /**
+   * Whether this third-party account has been matched to a Rippling worker.
+   */
+  match_state?: 'MATCHED' | 'NOT_MATCHED' | 'IGNORED';
+
+  /**
+   * Provisioning lifecycle state of this account in the third-party app.
+   */
+  push_state?:
+    | 'INIT'
+    | 'EMPLOYEE_CONFIRMATION_PENDING'
+    | 'EMPLOYEE_CONFIRMATION_ACCEPTED'
+    | 'EMPLOYEE_CONFIRMATION_REJECTED'
+    | 'INVITE_PENDING'
+    | 'INVITE_CONFIRMED'
+    | 'INVITE_FAILED'
+    | 'CREATE_PENDING'
+    | 'CREATE_CONFIRMED'
+    | 'CREATE_FAILED'
+    | 'DELETE_PENDING'
+    | 'DELETE_CONFIRMED'
+    | 'DELETE_FAILED'
+    | 'SUSPEND_PENDING'
+    | 'SUSPEND_CONFIRMED'
+    | 'SUSPEND_FAILED';
+
+  /**
+   * Identifier for the user's account in the third-party app workspace. Depending on
+   * the integration, this may be an email, username, account handle, or app-specific
+   * user id.
+   */
+  spoke_user_identifier?: string;
+
+  /**
+   * The Rippling worker associated with this external app account. Expanding this
+   * field requires both `app-users.read` and `workers.read` scopes.
+   *
+   * Expandable field
+   */
+  worker?: WorkersAPI.Worker;
+
+  /**
+   * ID of the Rippling worker associated with this external app account.
+   */
+  worker_id?: string;
+}
+
+/**
+ * Meta information for the response.
+ */
+export interface AppUserRetrieveResponse extends BusinessPartnersAPI.Meta {
+  /**
+   * Identifier field
+   */
+  id: string;
+
+  /**
+   * Record creation date
+   */
+  created_at: string;
+
+  /**
+   * Record update date
+   */
+  updated_at: string;
+
+  /**
+   * Human-readable display name for the third-party app (e.g. 'Slack', 'GitHub').
+   * Sourced from the customer-configured SpokeOwner.app_display_name; falls back to
+   * a title-cased app handle when the customer hasn't set one.
+   */
+  app_display_name?: string;
+
+  /**
+   * Machine-readable identifier for the third-party app (e.g. 'slack', 'jira',
+   * 'asana'). Stable across the App Shop catalog.
+   */
+  app_handle?: string;
+
+  /**
+   * The user's email address in the third-party app, if known. Null when the app
+   * does not expose an email or Rippling did not capture one.
+   */
+  external_email?: string;
+
+  /**
+   * The user's display name in the third-party app, if known. Null when the app does
+   * not surface a separate username.
+   */
+  external_username?: string;
+
+  /**
+   * Whether this third-party account has been matched to a Rippling worker.
+   */
+  match_state?: 'MATCHED' | 'NOT_MATCHED' | 'IGNORED';
+
+  /**
+   * Provisioning lifecycle state of this account in the third-party app.
+   */
+  push_state?:
+    | 'INIT'
+    | 'EMPLOYEE_CONFIRMATION_PENDING'
+    | 'EMPLOYEE_CONFIRMATION_ACCEPTED'
+    | 'EMPLOYEE_CONFIRMATION_REJECTED'
+    | 'INVITE_PENDING'
+    | 'INVITE_CONFIRMED'
+    | 'INVITE_FAILED'
+    | 'CREATE_PENDING'
+    | 'CREATE_CONFIRMED'
+    | 'CREATE_FAILED'
+    | 'DELETE_PENDING'
+    | 'DELETE_CONFIRMED'
+    | 'DELETE_FAILED'
+    | 'SUSPEND_PENDING'
+    | 'SUSPEND_CONFIRMED'
+    | 'SUSPEND_FAILED';
+
+  /**
+   * Identifier for the user's account in the third-party app workspace. Depending on
+   * the integration, this may be an email, username, account handle, or app-specific
+   * user id.
+   */
+  spoke_user_identifier?: string;
+
+  /**
+   * The Rippling worker associated with this external app account. Expanding this
+   * field requires both `app-users.read` and `workers.read` scopes.
+   *
+   * Expandable field
+   */
+  worker?: WorkersAPI.Worker;
+
+  /**
+   * ID of the Rippling worker associated with this external app account.
+   */
+  worker_id?: string;
+}
+
+export interface AppUserListParams {
+  cursor?: string;
+
+  expand?: string;
+
+  filter?: string;
+
+  order_by?: string;
+}
+
+export interface AppUserRetrieveParams {
+  expand?: string;
+}
+
+export declare namespace AppUsers {
+  export {
+    type AppUserListResponse as AppUserListResponse,
+    type AppUserRetrieveResponse as AppUserRetrieveResponse,
+    type AppUserListResponsesPageCursorURL as AppUserListResponsesPageCursorURL,
+    type AppUserListParams as AppUserListParams,
+    type AppUserRetrieveParams as AppUserRetrieveParams,
+  };
+}