@tailor-platform/sdk 1.14.1 → 1.15.0

package/CHANGELOG.md

@@ -1,5 +1,51 @@
 # @tailor-platform/sdk
 
+## 1.15.0
+
+### Minor Changes
+
+- [#605](https://github.com/tailor-platform/sdk/pull/605) [`634699c`](https://github.com/tailor-platform/sdk/commit/634699c0519157a18b992df4e98718940fc6d013) Thanks [@toiroakr](https://github.com/toiroakr)! - Add TypeConfig/PluginConfig type parameters to Plugin interface and remove TailorField schema requirements
+
+  - Add `Plugin<TypeConfig, PluginConfig>` type parameters for type-safe arbitrary config
+  - Remove `configSchema`, `pluginConfigSchema`, and `configTypeTemplate` properties from Plugin interface
+  - Merge `PluginWithConfig`/`PluginNamespaceOnly` into a single `Plugin` interface
+  - Wire TypeConfig/PluginConfig through `processType`/`processNamespace` contexts
+  - Remove TailorField-based runtime validation from plugin config processing
+  - Introduce `TypePluginOutput` for processType (extends `PluginOutput` with `extends` field)
+  - Make `PluginOutput` the base type without `extends` (used by processNamespace)
+  - Use `TailorAnyDBField` for `PluginExtends.fields` type
+
+- [#595](https://github.com/tailor-platform/sdk/pull/595) [`4e6e3e6`](https://github.com/tailor-platform/sdk/commit/4e6e3e62e3071060373571e7d9765938c37a9013) Thanks [@toiroakr](https://github.com/toiroakr)! - Use Function Registry service for script storage instead of embedding bundled scripts directly in pipeline/executor/workflow requests. Scripts are now registered in the Function Registry during apply, and services reference them by name via operationSourceRef/scriptRef fields.
+
+### Patch Changes
+
+- [#599](https://github.com/tailor-platform/sdk/pull/599) [`e73e8fe`](https://github.com/tailor-platform/sdk/commit/e73e8fef5daf056a00a3bb402d0c8ab0a58f96ee) Thanks [@dqn](https://github.com/dqn)! - Add typed programmatic CLI APIs for workflow and executor operations while preserving legacy option shapes for backward compatibility.
+
+- [#601](https://github.com/tailor-platform/sdk/pull/601) [`151102b`](https://github.com/tailor-platform/sdk/commit/151102bedca42457f02f6e503025908a40d5d1a4) Thanks [@riku99](https://github.com/riku99)! - Fixes an issue where nested field hooks/validate were dropped when generating TailorDB proto manifests
+
+- [#606](https://github.com/tailor-platform/sdk/pull/606) [`4761d2b`](https://github.com/tailor-platform/sdk/commit/4761d2bab2d8d8fa7c5ce249db28e0a8f28dfc5a) Thanks [@toiroakr](https://github.com/toiroakr)! - Add lefthook post-commit hook to verify commit signatures and update CLAUDE.md with signing rules
+
+## 1.14.2
+
+### Patch Changes
+
+- [#603](https://github.com/tailor-platform/sdk/pull/603) [`b093524`](https://github.com/tailor-platform/sdk/commit/b093524b2535dea2937b63ee62b300a6f0654cf0) Thanks [@k1LoW](https://github.com/k1LoW)! - feat: support allowGoogleOauth field for IdP userAuthPolicy
+
+- [#598](https://github.com/tailor-platform/sdk/pull/598) [`b32223a`](https://github.com/tailor-platform/sdk/commit/b32223ac5735959e39c934bee3b30562c7c2b990) Thanks [@toiroakr](https://github.com/toiroakr)! - Prevent e2e-ws- workspace accumulation by separating SDK e2e tests into a dedicated CI workflow
+
+- [#596](https://github.com/tailor-platform/sdk/pull/596) [`aecbfb7`](https://github.com/tailor-platform/sdk/commit/aecbfb73c184a9e36dfecd12580729783425a10e) Thanks [@dqn](https://github.com/dqn)! - Add `tailor-sdk` agent skill support and the `tailor-sdk-skills` shortcut installer command.
+
+- [#592](https://github.com/tailor-platform/sdk/pull/592) [`ca758ed`](https://github.com/tailor-platform/sdk/commit/ca758ed7870dbb32364840d4b0eca465808bee13) Thanks [@toiroakr](https://github.com/toiroakr)! - Add getGeneratedType helper function for plugin-generated types
+
+  - Add async `getGeneratedType(configPath, pluginId, sourceType, kind)` function to retrieve plugin-generated types
+  - Auto-resolve namespace and pluginConfig from tailor.config.ts
+  - Support both type-attached plugins (with sourceType) and namespace plugins (sourceType is null)
+  - Rename `process` to `processType` and `config` to `typeConfig` in plugin context
+  - Simplify `PluginNamespaceProcessContext` by removing `types` and `generatedTypes` parameters
+  - Results are cached per config path, plugin, namespace, and pluginConfig
+
+- [#578](https://github.com/tailor-platform/sdk/pull/578) [`a2f28c8`](https://github.com/tailor-platform/sdk/commit/a2f28c8b1ec72859271d096ddf1b0299ed83d0ca) Thanks [@riku99](https://github.com/riku99)! - Replace z.unknown() with typed Zod schemas in TailorDB schema
+
 ## 1.14.1
 
 ### Patch Changes

package/README.md

@@ -46,6 +46,25 @@ See [Available Templates](https://github.com/tailor-platform/sdk/tree/main/packa
 
 For more details, see the [Quickstart Guide](./docs/quickstart.md).
 
+## Agent Skill
+
+Install the `tailor-sdk` skill with the open `skills` CLI:
+
+```bash
+npx skills add https://github.com/tailor-platform/sdk/tree/main/packages/sdk/skills --skill tailor-sdk
+```
+
+Use the SDK-provided shorthand command (internally uses `skills add`):
+
+```bash
+npx tailor-sdk-skills
+
+# Example: install to Codex in non-interactive mode
+npx tailor-sdk-skills -a codex -y
+```
+
+`npx tailor-sdk-skills` requires an environment where the `@tailor-platform/sdk` package binary is available.
+
 ## Learn More
 
 ### Configuration

package/dist/{application-DnWZVbDO.mjs → application-DPunZ4lc.mjs}

@@ -1,5 +1,5 @@
-import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "./chunk-C3Kl5s5P.mjs";
-import { t as isPluginGeneratedType } from "./types-r-ZratAg.mjs";
+import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "./chunk-GMkBE123.mjs";
+import { t as isPluginGeneratedType } from "./types-b-ig8nW_.mjs";
 import Module, { createRequire } from "node:module";
 import { z } from "zod";
 import * as fs$15 from "node:fs";
@@ -360,8 +360,6 @@ function isSingleArrayConditionFormat(cond) {
 }
 /**
 * Normalize record-level permissions into a standard structure.
-* @template User
-* @template Type
 * @param permission - Tailor type permission
 * @returns Normalized record permissions
 */
@@ -86252,7 +86250,7 @@ var require_config_loader = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 		* @returns {Promise<{createJiti: Function|undefined, version: string;}>} A promise that fulfills with an object containing the jiti module's createJiti function and version.
 		*/
 		static async loadJiti() {
-			const { createJiti } = await import("./jiti-DuCiUfMj.mjs");
+			const { createJiti } = await import("./jiti-BrELlEYT.mjs");
 			return {
 				createJiti,
 				version: require_package$1().version
@@ -86594,7 +86592,7 @@ var require_eslint_helpers = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 	*/
 	async function globMatch({ basePath, pattern }) {
 		let found = false;
-		const { hfs } = await import("./src-QNTCsO6J.mjs");
+		const { hfs } = await import("./src-DMROgdcL.mjs");
 		const matcher = new Minimatch(normalizeToPosix(path$9.relative(basePath, pattern)), MINIMATCH_OPTIONS);
 		const walkSettings = {
 			directoryFilter(entry) {
@@ -86641,7 +86639,7 @@ var require_eslint_helpers = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 			return new Minimatch(patternToUse, MINIMATCH_OPTIONS);
 		});
 		const unmatchedPatterns = new Set([...relativeToPatterns.keys()]);
-		const { hfs } = await import("./src-QNTCsO6J.mjs");
+		const { hfs } = await import("./src-DMROgdcL.mjs");
 		const walk = hfs.walk(basePath, {
 			async directoryFilter(entry) {
 				if (!matchers.some((matcher) => matcher.match(entry.path, true))) return false;
@@ -97603,7 +97601,7 @@ const DBFieldMetadataSchema = z.object({
 		create: functionSchema.optional(),
 		update: functionSchema.optional()
 	}).optional(),
-	validate: z.array(z.unknown()).optional(),
+	validate: z.array(z.union([functionSchema, z.tuple([functionSchema, z.string()])])).optional(),
 	serial: z.object({
 		start: z.number(),
 		maxValue: z.number().optional(),
@@ -97636,6 +97634,80 @@ const TailorDBTypeSettingsSchema = z.object({
 	bulkUpsert: z.boolean().optional(),
 	gqlOperations: GqlOperationsSchema.optional()
 });
+const GqlPermissionOperandSchema = z.union([
+	z.object({ user: z.string() }),
+	z.string(),
+	z.boolean(),
+	z.array(z.string()),
+	z.array(z.boolean())
+]);
+const RecordPermissionOperandSchema = z.union([
+	GqlPermissionOperandSchema,
+	z.object({ record: z.string() }),
+	z.object({ oldRecord: z.string() }),
+	z.object({ newRecord: z.string() })
+]);
+const PermissionOperatorSchema = z.enum([
+	"=",
+	"!=",
+	"in",
+	"not in"
+]);
+const RecordPermissionConditionSchema = z.tuple([
+	RecordPermissionOperandSchema,
+	PermissionOperatorSchema,
+	RecordPermissionOperandSchema
+]).readonly();
+const GqlPermissionConditionSchema = z.tuple([
+	GqlPermissionOperandSchema,
+	PermissionOperatorSchema,
+	GqlPermissionOperandSchema
+]).readonly();
+const ActionPermissionSchema = z.union([
+	z.object({
+		conditions: z.union([RecordPermissionConditionSchema, z.array(RecordPermissionConditionSchema).readonly()]),
+		description: z.string().optional(),
+		permit: z.boolean().optional()
+	}),
+	z.tuple([
+		RecordPermissionOperandSchema,
+		PermissionOperatorSchema,
+		RecordPermissionOperandSchema
+	]).readonly(),
+	z.tuple([
+		RecordPermissionOperandSchema,
+		PermissionOperatorSchema,
+		RecordPermissionOperandSchema,
+		z.boolean()
+	]).readonly(),
+	z.array(z.union([RecordPermissionConditionSchema, z.boolean()])).refine((arr) => {
+		const boolIndex = arr.findIndex((item) => typeof item === "boolean");
+		return boolIndex === -1 || boolIndex === arr.length - 1;
+	}, { message: "Boolean permit flag must only appear at the end" }).readonly()
+]);
+const GqlPermissionActionSchema = z.enum([
+	"read",
+	"create",
+	"update",
+	"delete",
+	"aggregate",
+	"bulkUpsert"
+]);
+const GqlPermissionPolicySchema = z.object({
+	conditions: z.array(GqlPermissionConditionSchema).readonly(),
+	actions: z.union([z.literal("all"), z.array(GqlPermissionActionSchema).readonly()]),
+	permit: z.boolean().optional(),
+	description: z.string().optional()
+});
+const RawPermissionsSchema = z.object({
+	record: z.object({
+		create: z.array(ActionPermissionSchema).readonly(),
+		read: z.array(ActionPermissionSchema).readonly(),
+		update: z.array(ActionPermissionSchema).readonly(),
+		delete: z.array(ActionPermissionSchema).readonly()
+	}).optional(),
+	gql: z.array(GqlPermissionPolicySchema).readonly().optional()
+});
 const TailorDBTypeSchema = z.object({
 	name: z.string(),
 	fields: z.record(z.string(), TailorDBFieldSchema),
@@ -97643,7 +97715,7 @@ const TailorDBTypeSchema = z.object({
 		name: z.string(),
 		description: z.string().optional(),
 		settings: TailorDBTypeSettingsSchema.optional(),
-		permissions: z.unknown(),
+		permissions: RawPermissionsSchema,
 		files: z.record(z.string(), z.string()),
 		indexes: z.record(z.string(), z.object({
 			fields: z.array(z.string()),
@@ -97697,7 +97769,7 @@ function createTailorDBService(params) {
 		for (const attachment of attachments) {
 			const result = await pluginManager.processAttachment({
 				type: currentType,
-				config: attachment.config,
+				typeConfig: attachment.config,
 				namespace,
 				pluginId: attachment.pluginId
 			});
@@ -97717,6 +97789,7 @@ function createTailorDBService(params) {
 				currentType = extendedType;
 				logger.log(`  Extended: ${styles.success(currentType.name)} with ${styles.highlight(Object.keys(extendFields).length.toString())} fields by plugin ${styles.info(attachment.pluginId)}`);
 			}
+			const plugin = pluginManager.getPlugin(attachment.pluginId);
 			for (const [kind, generatedType] of Object.entries(output.types ?? {})) {
 				rawTypes[sourceFilePath][generatedType.name] = generatedType;
 				typeSourceInfo[generatedType.name] = {
@@ -97726,7 +97799,8 @@ function createTailorDBService(params) {
 					originalFilePath: sourceFilePath,
 					originalExportName: typeSourceInfo[rawType.name]?.exportName || rawType.name,
 					generatedTypeKind: kind,
-					pluginConfig: attachment.config
+					pluginConfig: plugin?.pluginConfig,
+					namespace
 				};
 				logger.log(`  Generated: ${styles.success(generatedType.name)} by plugin ${styles.info(attachment.pluginId)}`);
 			}
@@ -97782,35 +97856,7 @@ function createTailorDBService(params) {
 		},
 		processNamespacePlugins: async () => {
 			if (!pluginManager) return;
-			const typeByName = /* @__PURE__ */ new Map();
-			for (const typeMap of Object.values(rawTypes)) for (const [typeName, typeValue] of Object.entries(typeMap)) if (!typeByName.has(typeName)) typeByName.set(typeName, typeValue);
-			const originalTypeBySourceKey = /* @__PURE__ */ new Map();
-			for (const [typeName, source] of Object.entries(typeSourceInfo)) if ("filePath" in source && source.filePath && source.exportName) {
-				const typeValue = typeByName.get(typeName);
-				if (!typeValue) continue;
-				const key = `${source.filePath}:${source.exportName}`;
-				originalTypeBySourceKey.set(key, typeValue);
-			}
-			const namespaceTypes = [];
-			const namespaceGeneratedTypes = [];
-			for (const [typeName, typeValue] of typeByName.entries()) {
-				const source = typeSourceInfo[typeName];
-				if (!source) continue;
-				if (isPluginGeneratedType(source)) {
-					if (!Boolean(source.originalFilePath && source.originalExportName)) continue;
-					const originalType = originalTypeBySourceKey.get(`${source.originalFilePath}:${source.originalExportName}`) ?? null;
-					if (!originalType) continue;
-					namespaceGeneratedTypes.push({
-						type: typeValue,
-						pluginId: source.pluginId,
-						generatedTypeKind: source.generatedTypeKind,
-						originalType
-					});
-					continue;
-				}
-				namespaceTypes.push(typeValue);
-			}
-			const results = await pluginManager.processNamespacePlugins(namespace, namespaceTypes, namespaceGeneratedTypes);
+			const results = await pluginManager.processNamespacePlugins(namespace);
 			const pluginGeneratedKey = "__plugin_generated__";
 			if (!rawTypes[pluginGeneratedKey]) rawTypes[pluginGeneratedKey] = {};
 			let hasGeneratedTypes = false;
@@ -97830,7 +97876,8 @@ function createTailorDBService(params) {
 						originalFilePath: "",
 						originalExportName: "",
 						generatedTypeKind: kind,
-						pluginConfig: config$1
+						pluginConfig: config$1,
+						namespace
 					};
 					logger.log(`  Generated: ${styles.success(generatedType.name)} by namespace plugin ${styles.info(pluginId)}`);
 				}
@@ -98324,13 +98371,17 @@ const IdPUserAuthPolicySchema = z.object({
 	passwordRequireNumeric: z.boolean().optional(),
 	passwordMinLength: z.number().int().refine((val) => val >= 6 && val <= 30, { message: "passwordMinLength must be between 6 and 30" }).optional(),
 	passwordMaxLength: z.number().int().refine((val) => val >= 6 && val <= 4096, { message: "passwordMaxLength must be between 6 and 4096" }).optional(),
-	allowedEmailDomains: z.array(z.string()).optional()
+	allowedEmailDomains: z.array(z.string()).optional(),
+	allowGoogleOauth: z.boolean().optional()
 }).refine((data$1) => data$1.passwordMinLength === void 0 || data$1.passwordMaxLength === void 0 || data$1.passwordMinLength <= data$1.passwordMaxLength, {
 	message: "passwordMinLength must be less than or equal to passwordMaxLength",
 	path: ["passwordMinLength"]
 }).refine((data$1) => !data$1.allowedEmailDomains || data$1.allowedEmailDomains.length === 0 || !data$1.useNonEmailIdentifier, {
 	message: "allowedEmailDomains cannot be set when useNonEmailIdentifier is true",
 	path: ["allowedEmailDomains"]
+}).refine((data$1) => data$1.allowGoogleOauth === void 0 || data$1.allowGoogleOauth === false || !data$1.useNonEmailIdentifier, {
+	message: "allowGoogleOauth cannot be set when useNonEmailIdentifier is true",
+	path: ["allowGoogleOauth"]
 });
 const IdPSchema = z.object({
 	name: z.string(),
@@ -98524,5 +98575,5 @@ function defineApplication(params) {
 }
 
 //#endregion
-export { ExecutorSchema as a, stringifyFunction as c, logger as d, styles as f, createExecutorService as i, tailorUserMap as l, WorkflowJobSchema as n, OAuth2ClientSchema as o, symbols as p, WorkflowSchema as r, ResolverSchema as s, defineApplication as t, loadFilesWithIgnores as u };
-//# sourceMappingURL=application-DnWZVbDO.mjs.map
+export { ExecutorSchema as a, functionSchema as c, loadFilesWithIgnores as d, logger as f, createExecutorService as i, stringifyFunction as l, symbols as m, WorkflowJobSchema as n, OAuth2ClientSchema as o, styles as p, WorkflowSchema as r, ResolverSchema as s, defineApplication as t, tailorUserMap as u };
+//# sourceMappingURL=application-DPunZ4lc.mjs.map