@tailor-platform/sdk 1.19.0 → 1.20.0

package/dist/plugin/builtin/file-utils/index.d.mts

@@ -1,4 +1,4 @@
 /// <reference path="./../../../user-defined.d.ts" />
-import "../../../types-CblXasFV.mjs";
-import { n as fileUtilsPlugin, t as FileUtilsGeneratorID } from "../../../index-DDqKNFh4.mjs";
+import "../../../types-CNw4p8V7.mjs";
+import { n as fileUtilsPlugin, t as FileUtilsGeneratorID } from "../../../index-i6QUsr5p.mjs";
 export { FileUtilsGeneratorID, fileUtilsPlugin };

package/dist/plugin/builtin/kysely-type/index.d.mts

@@ -1,4 +1,4 @@
 /// <reference path="./../../../user-defined.d.ts" />
-import "../../../types-CblXasFV.mjs";
-import { n as kyselyTypePlugin, t as KyselyGeneratorID } from "../../../index-CPzbMghQ.mjs";
+import "../../../types-CNw4p8V7.mjs";
+import { n as kyselyTypePlugin, t as KyselyGeneratorID } from "../../../index-CIXOwe6g.mjs";
 export { KyselyGeneratorID, kyselyTypePlugin };

package/dist/plugin/builtin/seed/index.d.mts

@@ -1,4 +1,4 @@
 /// <reference path="./../../../user-defined.d.ts" />
-import "../../../types-CblXasFV.mjs";
-import { n as seedPlugin, t as SeedGeneratorID } from "../../../index-B6pvy1MK.mjs";
+import "../../../types-CNw4p8V7.mjs";
+import { n as seedPlugin, t as SeedGeneratorID } from "../../../index-CGjiOz_W.mjs";
 export { SeedGeneratorID, seedPlugin };

package/dist/plugin/index.d.mts

@@ -1,5 +1,5 @@
 /// <reference path="./../user-defined.d.ts" />
-import { Bt as TailorActor, i as TailorAnyDBType, zt as TailorEnv } from "../types-CblXasFV.mjs";
+import { Bt as TailorActor, i as TailorAnyDBType, zt as TailorEnv } from "../types-CNw4p8V7.mjs";
 
 //#region src/plugin/with-context.d.ts
 

package/dist/telemetry-Dhzj9Ncm.mjs

@@ -0,0 +1,3 @@
+import { n as shutdownTelemetry, r as withSpan, t as initTelemetry } from "./telemetry-DuBhnd0X.mjs";
+
+export { initTelemetry, shutdownTelemetry };

package/dist/{telemetry-rFq0QdvJ.mjs → telemetry-DuBhnd0X.mjs}

@@ -34,7 +34,7 @@ async function initTelemetry() {
 		import("@opentelemetry/exporter-trace-otlp-proto"),
 		import("@opentelemetry/resources"),
 		import("@opentelemetry/semantic-conventions"),
-		import("./package-json-Dd1AnA5F.mjs")
+		import("./package-json-DTDAqRRJ.mjs")
 	]);
 	const version = (await readPackageJson()).version ?? "unknown";
 	_provider = new NodeTracerProvider({
@@ -81,4 +81,4 @@ async function withSpan(name, fn) {
 
 //#endregion
 export { shutdownTelemetry as n, withSpan as r, initTelemetry as t };
-//# sourceMappingURL=telemetry-rFq0QdvJ.mjs.map
+//# sourceMappingURL=telemetry-DuBhnd0X.mjs.map

package/dist/telemetry-DuBhnd0X.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-DuBhnd0X.mjs","names":[],"sources":["../src/cli/telemetry/config.ts","../src/cli/telemetry/index.ts"],"sourcesContent":["/**\n * Telemetry configuration parsed from standard OpenTelemetry environment variables.\n * Tracing is enabled when OTEL_EXPORTER_OTLP_ENDPOINT is set.\n */\nexport interface TelemetryConfig {\n  readonly enabled: boolean;\n  readonly endpoint: string;\n}\n\n/**\n * Parse telemetry configuration from standard OpenTelemetry environment variables.\n * Tracing is enabled when OTEL_EXPORTER_OTLP_ENDPOINT is set.\n * @returns Telemetry configuration\n */\nexport function parseTelemetryConfig(): TelemetryConfig {\n  const endpoint = process.env.OTEL_EXPORTER_OTLP_ENDPOINT ?? \"\";\n  const enabled = endpoint.length > 0;\n\n  return {\n    enabled,\n    endpoint,\n  };\n}\n","import { trace, SpanStatusCode, type Span } from \"@opentelemetry/api\";\nimport { parseTelemetryConfig, type TelemetryConfig } from \"./config\";\n\nlet _config: TelemetryConfig | undefined;\nlet _initialized = false;\nlet _provider: { register: () => void; shutdown: () => Promise<void> } | undefined;\n\n/**\n * Check whether telemetry is currently enabled.\n * @returns true if telemetry has been initialized and is enabled\n */\nexport function isTelemetryEnabled(): boolean {\n  return _config?.enabled ?? false;\n}\n\n/**\n * Initialize telemetry if OTEL_EXPORTER_OTLP_ENDPOINT is set.\n * When disabled, this is a no-op with zero overhead beyond reading env vars.\n * @returns Promise that resolves when initialization completes\n */\nexport async function initTelemetry(): Promise<void> {\n  if (_initialized) return;\n  _initialized = true;\n\n  _config = parseTelemetryConfig();\n  if (!_config.enabled) return;\n\n  // Dynamic imports - only loaded when tracing is enabled\n  const [\n    { NodeTracerProvider, BatchSpanProcessor },\n    { OTLPTraceExporter },\n    { resourceFromAttributes },\n    { ATTR_SERVICE_NAME, ATTR_SERVICE_VERSION },\n    { readPackageJson },\n  ] = await Promise.all([\n    import(\"@opentelemetry/sdk-trace-node\"),\n    import(\"@opentelemetry/exporter-trace-otlp-proto\"),\n    import(\"@opentelemetry/resources\"),\n    import(\"@opentelemetry/semantic-conventions\"),\n    import(\"@/cli/shared/package-json\"),\n  ]);\n\n  const packageJson = await readPackageJson();\n  const version = packageJson.version ?? \"unknown\";\n\n  const resource = resourceFromAttributes({\n    [ATTR_SERVICE_NAME]: \"tailor-sdk\",\n    [ATTR_SERVICE_VERSION]: version,\n  });\n\n  const exporter = new OTLPTraceExporter({\n    url: `${_config.endpoint}/v1/traces`,\n  });\n\n  _provider = new NodeTracerProvider({\n    resource,\n    spanProcessors: [new BatchSpanProcessor(exporter)],\n  });\n\n  _provider.register();\n}\n\n/**\n * Shutdown the telemetry provider, flushing all pending spans.\n * Must be called before process exit to ensure traces are exported.\n * @returns Promise that resolves when shutdown completes\n */\nexport async function shutdownTelemetry(): Promise<void> {\n  if (!_provider) return;\n  await _provider.shutdown();\n}\n\n/**\n * Execute a function within a new span. Records exceptions and sets span status.\n * When no TracerProvider is registered, the OTel API automatically provides\n * noop spans with zero overhead.\n * @param name - Span name\n * @param fn - Function to execute within the span\n * @returns Result of fn\n */\nexport async function withSpan<T>(name: string, fn: (span: Span) => Promise<T>): Promise<T> {\n  const tracer = trace.getTracer(\"tailor-sdk\");\n\n  return tracer.startActiveSpan(name, async (span) => {\n    try {\n      const result = await fn(span);\n      span.setStatus({ code: SpanStatusCode.OK });\n      return result;\n    } catch (error) {\n      span.setStatus({ code: SpanStatusCode.ERROR });\n      if (error instanceof Error) {\n        span.recordException(error);\n      }\n      throw error;\n    } finally {\n      span.end();\n    }\n  });\n}\n"],"mappings":";;;;;;;;AAcA,SAAgB,uBAAwC;CACtD,MAAM,WAAW,QAAQ,IAAI,+BAA+B;AAG5D,QAAO;EACL,SAHc,SAAS,SAAS;EAIhC;EACD;;;;;AClBH,IAAI;AACJ,IAAI,eAAe;AACnB,IAAI;;;;;;AAeJ,eAAsB,gBAA+B;AACnD,KAAI,aAAc;AAClB,gBAAe;AAEf,WAAU,sBAAsB;AAChC,KAAI,CAAC,QAAQ,QAAS;CAGtB,MAAM,CACJ,EAAE,oBAAoB,sBACtB,EAAE,qBACF,EAAE,0BACF,EAAE,mBAAmB,wBACrB,EAAE,qBACA,MAAM,QAAQ,IAAI;EACpB,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACR,CAAC;CAGF,MAAM,WADc,MAAM,iBAAiB,EACf,WAAW;AAWvC,aAAY,IAAI,mBAAmB;EACjC,UAVe,uBAAuB;IACrC,oBAAoB;IACpB,uBAAuB;GACzB,CAAC;EAQA,gBAAgB,CAAC,IAAI,mBANN,IAAI,kBAAkB,EACrC,KAAK,GAAG,QAAQ,SAAS,aAC1B,CAAC,CAIiD,CAAC;EACnD,CAAC;AAEF,WAAU,UAAU;;;;;;;AAQtB,eAAsB,oBAAmC;AACvD,KAAI,CAAC,UAAW;AAChB,OAAM,UAAU,UAAU;;;;;;;;;;AAW5B,eAAsB,SAAY,MAAc,IAA4C;AAG1F,QAFe,MAAM,UAAU,aAAa,CAE9B,gBAAgB,MAAM,OAAO,SAAS;AAClD,MAAI;GACF,MAAM,SAAS,MAAM,GAAG,KAAK;AAC7B,QAAK,UAAU,EAAE,MAAM,eAAe,IAAI,CAAC;AAC3C,UAAO;WACA,OAAO;AACd,QAAK,UAAU,EAAE,MAAM,eAAe,OAAO,CAAC;AAC9C,OAAI,iBAAiB,MACnB,MAAK,gBAAgB,MAAM;AAE7B,SAAM;YACE;AACR,QAAK,KAAK;;GAEZ"}

package/dist/{types-CJF3Y1x8.d.mts → types-C14GuyPI.d.mts}

@@ -1,5 +1,5 @@
 /// <reference path="./user-defined.d.ts" />
-import { P as ExecutorServiceInput, Pt as ResolverServiceInput, W as AuthConfig, Y as BuiltinIdP, qt as TailorDBServiceInput } from "./types-CblXasFV.mjs";
+import { P as ExecutorServiceInput, Pt as ResolverServiceInput, W as AuthConfig, Y as BuiltinIdP, qt as TailorDBServiceInput } from "./types-CNw4p8V7.mjs";
 import { z } from "zod";
 
 //#region src/parser/service/workflow/types.d.ts
@@ -89,8 +89,92 @@ declare const IdPSchema: z.core.$ZodBranded<z.ZodObject<{
     disablePasswordAuth?: boolean | undefined;
   }>>>;
   publishUserEvents: z.ZodOptional<z.ZodBoolean>;
+  gqlOperations: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodLiteral<"query">, z.ZodObject<{
+    create: z.ZodOptional<z.ZodBoolean>;
+    update: z.ZodOptional<z.ZodBoolean>;
+    delete: z.ZodOptional<z.ZodBoolean>;
+    read: z.ZodOptional<z.ZodBoolean>;
+    sendPasswordResetEmail: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$strip>]>, z.ZodTransform<IdPGqlOperations, "query" | {
+    create?: boolean | undefined;
+    update?: boolean | undefined;
+    delete?: boolean | undefined;
+    read?: boolean | undefined;
+    sendPasswordResetEmail?: boolean | undefined;
+  }>>>;
 }, z.core.$strip>, "IdPConfig", "out">;
 //#endregion
+//#region src/configure/services/idp/index.d.ts
+/**
+ * Configuration for GraphQL operations on IdP users.
+ * All operations are enabled by default (undefined or true = enabled, false = disabled).
+ */
+interface IdPGqlOperations {
+  /** Enable _createUser mutation (default: true) */
+  create?: boolean;
+  /** Enable _updateUser mutation (default: true) */
+  update?: boolean;
+  /** Enable _deleteUser mutation (default: true) */
+  delete?: boolean;
+  /** Enable _users and _user queries (default: true) */
+  read?: boolean;
+  /** Enable _sendPasswordResetEmail mutation (default: true) */
+  sendPasswordResetEmail?: boolean;
+}
+/**
+ * Alias for common IdPGqlOperations configurations.
+ * - "query": Read-only mode - disables all mutations (create, update, delete, sendPasswordResetEmail)
+ */
+type IdPGqlOperationsAliasQuery = "query";
+/**
+ * Configuration for GraphQL operations - either an alias string or detailed object.
+ */
+type IdPGqlOperationsConfig = IdPGqlOperationsAliasQuery | IdPGqlOperations;
+/**
+ * Define an IdP service configuration for the Tailor SDK.
+ * @template TClients
+ * @param name - IdP service name
+ * @param config - IdP configuration
+ * @returns Defined IdP service
+ */
+declare function defineIdp<const TClients extends string[]>(name: string, config: Omit<IdPInput, "name" | "clients"> & {
+  clients: TClients;
+}): {
+  readonly name: string;
+  readonly provider: (providerName: string, clientName: TClients[number]) => {
+    readonly name: string;
+    readonly kind: "BuiltInIdP";
+    readonly namespace: string;
+    readonly clientName: TClients[number];
+  };
+  readonly authorization: "insecure" | "loggedIn" | {
+    cel: string;
+  };
+  readonly lang?: "en" | "ja" | undefined;
+  readonly userAuthPolicy?: {
+    useNonEmailIdentifier?: boolean | undefined;
+    allowSelfPasswordReset?: boolean | undefined;
+    passwordRequireUppercase?: boolean | undefined;
+    passwordRequireLowercase?: boolean | undefined;
+    passwordRequireNonAlphanumeric?: boolean | undefined;
+    passwordRequireNumeric?: boolean | undefined;
+    passwordMinLength?: number | undefined;
+    passwordMaxLength?: number | undefined;
+    allowedEmailDomains?: string[] | undefined;
+    allowGoogleOauth?: boolean | undefined;
+    disablePasswordAuth?: boolean | undefined;
+  } | undefined;
+  readonly publishUserEvents?: boolean | undefined;
+  readonly gqlOperations?: "query" | {
+    create?: boolean | undefined;
+    update?: boolean | undefined;
+    delete?: boolean | undefined;
+    read?: boolean | undefined;
+    sendPasswordResetEmail?: boolean | undefined;
+  } | undefined;
+  readonly clients: TClients;
+} & IdpDefinitionBrand;
+//#endregion
 //#region src/parser/service/idp/types.d.ts
 type IdPInput = z.input<typeof IdPSchema>;
 declare const idpDefinitionBrand: unique symbol;
@@ -154,5 +238,5 @@ interface AppConfig<Auth extends AuthConfig = AuthConfig, Idp extends IdPConfig[
   inlineSourcemap?: boolean;
 }
 //#endregion
-export { IdpDefinitionBrand as a, WorkflowServiceConfig as c, IdPInput as i, WorkflowServiceInput as l, IdPConfig as n, StaticWebsiteConfig as o, IdPExternalConfig as r, defineStaticWebSite as s, AppConfig as t };
-//# sourceMappingURL=types-CJF3Y1x8.d.mts.map
+export { IdPGqlOperationsAliasQuery as a, StaticWebsiteConfig as c, WorkflowServiceInput as d, IdPGqlOperations as i, defineStaticWebSite as l, IdPConfig as n, IdPGqlOperationsConfig as o, IdPExternalConfig as r, defineIdp as s, AppConfig as t, WorkflowServiceConfig as u };
+//# sourceMappingURL=types-C14GuyPI.d.mts.map

package/dist/{types-CblXasFV.d.mts → types-CNw4p8V7.d.mts}

@@ -536,9 +536,9 @@ declare const RawPermissionsSchema: z.ZodObject<{
       create: "create";
       update: "update";
       delete: "delete";
+      read: "read";
       aggregate: "aggregate";
       bulkUpsert: "bulkUpsert";
-      read: "read";
     }>>>]>;
     permit: z.ZodOptional<z.ZodBoolean>;
     description: z.ZodOptional<z.ZodString>;
@@ -2799,4 +2799,4 @@ interface TailorDBType {
 }
 //#endregion
 export { OAuth2ClientGrantType as $, AuthAccessTokenTrigger as A, Resolver as At, ResolverExecutedTrigger as B, TailorActor as Bt, TypePluginOutput as C, FieldMetadata as Ct, ResolverReadyContext as D, TailorAnyField as Dt, ResolverNamespaceData as E, TailorFieldType as Et, FunctionOperation as F, InferFieldsOutput as Ft, AuthExternalConfig as G, AllowedValues as Gt, WebhookOperation as H, AttributeMap as Ht, GqlOperation as I, JsonCompatible as It, AuthServiceInput as J, AuthInvoker as K, AllowedValuesOutput as Kt, IdpUserTrigger as L, output as Lt, ExecutorInput as M, ResolverInput as Mt, ExecutorServiceConfig as N, ResolverServiceConfig as Nt, TailorDBNamespaceData as O, TailorField as Ot, ExecutorServiceInput as P, ResolverServiceInput as Pt, IdProviderConfig as Q, IncomingWebhookTrigger as R, Env as Rt, TailorDBTypeForPlugin as S, DefinedFieldMetadata as St, GeneratorResult as T, FieldOutput$1 as Tt, WorkflowOperation as U, TailorUser as Ut, ScheduleTriggerInput as V, AttributeList as Vt, AuthConfig as W, unauthenticatedTailorUser as Wt, DefinedAuth as X, BuiltinIdP as Y, IDToken as Z, PluginGeneratedResolver as _, TailorTypeGqlPermission as _t, TailorDBField as a, SCIMAttributeType as at, PluginOutput as b, unsafeAllowAllTypePermission as bt, db as c, SCIMResource as ct, PluginAttachment as d, UserAttributeListKey as dt, OAuth2ClientInput as et, PluginConfigs as f, UserAttributeMap as ft, PluginGeneratedExecutorWithFile as g, PermissionCondition as gt, PluginGeneratedExecutor as h, GeneratorConfig as ht, TailorAnyDBType as i, SCIMAttributeMapping as it, Executor as j, ResolverExternalConfig as jt, TailorDBReadyContext as k, QueryType as kt, NamespacePluginOutput as l, TenantProviderConfig as lt, PluginExecutorContextBase as m, ValueOperand as mt, TypeSourceInfoEntry as n, SAML as nt, TailorDBInstance as o, SCIMAuthorization as ot, PluginExecutorContext as p, UsernameFieldKey as pt, AuthOwnConfig as q, TailorDBServiceInput as qt, TailorAnyDBField as r, SCIMAttribute as rt, TailorDBType$1 as s, SCIMConfig as st, TailorDBType as t, OIDC as tt, Plugin as u, UserAttributeKey as ut, PluginGeneratedType as v, TailorTypePermission as vt, ExecutorReadyContext as w, FieldOptions as wt, PluginProcessContext as x, ArrayFieldOutput as xt, PluginNamespaceProcessContext as y, unsafeAllowAllGqlPermission as yt, RecordTrigger as z, TailorEnv as zt };
-//# sourceMappingURL=types-CblXasFV.d.mts.map
+//# sourceMappingURL=types-CNw4p8V7.d.mts.map