@tailor-platform/sdk 1.44.2 → 1.45.0

package/dist/{index-0Dk-fDWi.d.mts → index-SnYVi8ww.d.mts}

@@ -1,5 +1,5 @@
 /// <reference types="@tailor-platform/function-types" />
-import { o as Plugin } from "./tailor-db-field-D_z185oq.mjs";
+import { o as Plugin } from "./tailor-db-field-CY1D1PtT.mjs";
 
 //#region src/plugin/builtin/kysely-type/index.d.ts
 /** Unique identifier for the Kysely type generator plugin. */
@@ -16,4 +16,4 @@ type KyselyTypePluginOptions = {
 declare function kyselyTypePlugin(options: KyselyTypePluginOptions): Plugin<unknown, KyselyTypePluginOptions>;
 //#endregion
 export { kyselyTypePlugin as n, KyselyGeneratorID as t };
-//# sourceMappingURL=index-0Dk-fDWi.d.mts.map
+//# sourceMappingURL=index-SnYVi8ww.d.mts.map

package/dist/plugin/builtin/enum-constants/index.d.mts

@@ -1,3 +1,3 @@
 /// <reference types="@tailor-platform/function-types" />
-import { n as enumConstantsPlugin, t as EnumConstantsGeneratorID } from "../../../index-ZZYEd_0R.mjs";
+import { n as enumConstantsPlugin, t as EnumConstantsGeneratorID } from "../../../index-C_f357K2.mjs";
 export { EnumConstantsGeneratorID, enumConstantsPlugin };

package/dist/plugin/builtin/file-utils/index.d.mts

@@ -1,3 +1,3 @@
 /// <reference types="@tailor-platform/function-types" />
-import { n as fileUtilsPlugin, t as FileUtilsGeneratorID } from "../../../index-DdsUV-aA.mjs";
+import { n as fileUtilsPlugin, t as FileUtilsGeneratorID } from "../../../index-Bd-0JRjy.mjs";
 export { FileUtilsGeneratorID, fileUtilsPlugin };

package/dist/plugin/builtin/kysely-type/index.d.mts

@@ -1,3 +1,3 @@
 /// <reference types="@tailor-platform/function-types" />
-import { n as kyselyTypePlugin, t as KyselyGeneratorID } from "../../../index-0Dk-fDWi.mjs";
+import { n as kyselyTypePlugin, t as KyselyGeneratorID } from "../../../index-SnYVi8ww.mjs";
 export { KyselyGeneratorID, kyselyTypePlugin };

package/dist/plugin/builtin/seed/index.d.mts

@@ -1,3 +1,3 @@
 /// <reference types="@tailor-platform/function-types" />
-import { n as seedPlugin, t as SeedGeneratorID } from "../../../index-BEEL1-6Z.mjs";
+import { n as seedPlugin, t as SeedGeneratorID } from "../../../index-DIz-15Cx.mjs";
 export { SeedGeneratorID, seedPlugin };

package/dist/plugin/index.d.mts

@@ -1,6 +1,6 @@
 /// <reference types="@tailor-platform/function-types" />
-import { n as TailorAnyDBType } from "../tailor-db-field-D_z185oq.mjs";
-import { r as TailorEnv, t as TailorActor } from "../actor-DzCuoMlP.mjs";
+import { n as TailorAnyDBType } from "../tailor-db-field-CY1D1PtT.mjs";
+import { r as TailorEnv, t as TailorActor } from "../actor-CzX_hVOP.mjs";
 
 //#region src/plugin/with-context.d.ts
 /**

package/dist/{runtime-CEj_sAfP.mjs → runtime-Bmq4L9pj.mjs}

@@ -2,7 +2,7 @@
 import { $ as FilterSchema, A as FunctionExecution_Status, B as AuthOAuth2Client_GrantType, C as TailorDBType_Permission_Operator, D as IdPLang, E as PipelineResolver_OperationType, F as AuthConnection_Type, H as AuthSCIMAttribute_Type, I as AuthHookPoint, J as GetApplicationSchemaHealthResponse_ApplicationSchemaHealthStatus, K as TenantProviderConfig_TenantProviderType, L as AuthIDPConfig_AuthType, M as ExecutorJobStatus, N as ExecutorTargetType, O as IdPPermissionOperator, P as ExecutorTriggerType, Q as Condition_Operator, R as AuthInvokerSchema, S as TailorDBGQLPermission_Permit, T as TailorDBType_PermitAction, U as AuthSCIMAttribute_Uniqueness, V as AuthSCIMAttribute_Mutability, W as AuthSCIMConfig_AuthorizationType, X as Subgraph_ServiceType, Y as ApplicationSchemaUpdateAttemptStatus, Z as ConditionSchema, _ as WorkspacePlatformUserRole, a as fetchMachineUserToken, b as TailorDBGQLPermission_Action, d as initOperatorClient, et as PageDirection, g as OperatorService, h as userAgent, i as fetchAll, k as IdPPermissionPermit, m as resolveStaticWebsiteUrls, o as fetchPaged, p as platformBaseUrl, q as UserProfileProviderConfig_UserProfileProviderType, v as WorkflowExecution_Status, w as TailorDBType_Permission_Permit, x as TailorDBGQLPermission_Operator, y as WorkflowJobExecution_Status, z as AuthOAuth2Client_ClientType } from "./client-DcuQRqSd.mjs";
 import { t as db } from "./schema-DBq6hr6h.mjs";
 import { a as parseBoolean, i as symbols, n as logger, r as styles, t as CIPromptError } from "./logger-DTNAMYGy.mjs";
-import { C as loadWorkspaceId, D as writePlatformConfig, S as loadAccessToken, _ as getDistDir, d as buildResolverOperationHookExpr, f as OAuth2ClientSchema, g as createBundleCache, h as loadFilesWithIgnores, m as stringifyFunction, n as generatePluginFilesIfNeeded, p as TailorDBTypeSchema, r as loadApplication, s as createExecutorService, t as defineApplication, u as buildExecutorArgsExpr, v as hashFile, w as readPlatformConfig, y as loadConfig } from "./application-7wtQzifE.mjs";
+import { C as loadWorkspaceId, D as writePlatformConfig, S as loadAccessToken, _ as getDistDir, d as buildResolverOperationHookExpr, f as OAuth2ClientSchema, g as createBundleCache, h as loadFilesWithIgnores, m as stringifyFunction, n as generatePluginFilesIfNeeded, p as TailorDBTypeSchema, r as loadApplication, s as createExecutorService, t as defineApplication, u as buildExecutorArgsExpr, v as hashFile, w as readPlatformConfig, y as loadConfig } from "./application-BsSJZRCq.mjs";
 import { t as readPackageJson } from "./package-json-CRzw5eUf.mjs";
 import { n as isCLIError, t as createCLIError } from "./errors-_M2TVoWh.mjs";
 import { r as withSpan } from "./telemetry-B6Le9XT-.mjs";
@@ -787,9 +787,10 @@ function extractAttributesFromConfig(config) {
 * @param attributeList - Attribute list configuration
 * @param env - Environment configuration
 * @param machineUserNames - Registered machine user names (used to narrow `authInvoker` strings)
+* @param idpNames - Registered IdP names (used to narrow `idpUser*Trigger({ idp })` strings)
 * @returns Generated type definition source
 */
-function generateTypeDefinition(attributeMap, attributeList, env, machineUserNames) {
+function generateTypeDefinition(attributeMap, attributeList, env, machineUserNames, idpNames) {
 	const mapFields = attributeMap ? Object.entries(attributeMap).map(([key, value]) => `    ${key}: ${value};`).join("\n") : "";
 	const mapBody = !attributeMap || Object.keys(attributeMap).length === 0 ? "{}" : `{
 ${mapFields}
@@ -805,6 +806,10 @@ ${envFields}
   }`;
 	const isValidIdentifier = (s) => /^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(s);
 	const machineUserFields = machineUserNames?.length ? machineUserNames.map((name) => `    ${isValidIdentifier(name) ? name : JSON.stringify(name)}: true;`).join("\n") : "";
+	const machineUserBody = !machineUserNames || machineUserNames.length === 0 ? "{}" : `{
+${machineUserFields}
+  }`;
+	const idpNameFields = idpNames?.length ? idpNames.map((name) => `    ${isValidIdentifier(name) ? name : JSON.stringify(name)}: true;`).join("\n") : "";
 	return ml`
 // This file is auto-generated by @tailor-platform/sdk
 // Do not edit this file manually
@@ -814,8 +819,9 @@ declare module "@tailor-platform/sdk" {
   interface AttributeMap ${mapBody}
   interface AttributeList ${listBody}
   interface Env ${envBody}
-  interface MachineUserNameRegistry ${!machineUserNames || machineUserNames.length === 0 ? "{}" : `{
-${machineUserFields}
+  interface MachineUserNameRegistry ${machineUserBody}
+  interface IdpNameRegistry ${!idpNames || idpNames.length === 0 ? "{}" : `{
+${idpNameFields}
   }`}
 }
 
@@ -824,8 +830,9 @@ export {};
 `;
 }
 function collectAttributesFromConfig(config) {
+	const idpNames = config.idp?.length ? [...new Set(config.idp.map((idp) => idp.name))] : void 0;
 	const auth = config.auth;
-	if (!auth || typeof auth !== "object") return {};
+	if (!auth || typeof auth !== "object") return idpNames ? { idpNames } : {};
 	const machineUsersObj = auth.machineUsers;
 	const machineUserNames = machineUsersObj && typeof machineUsersObj === "object" ? Object.keys(machineUsersObj) : void 0;
 	const inferAttributeType = (field) => {
@@ -849,21 +856,29 @@ function collectAttributesFromConfig(config) {
 				return acc;
 			}, {}) : void 0,
 			attributeList,
-			machineUserNames
+			machineUserNames,
+			idpNames
 		};
 	}
 	if ("machineUserAttributes" in auth) {
 		const machineUserAttributes = auth.machineUserAttributes;
-		if (!machineUserAttributes) return { machineUserNames };
+		if (!machineUserAttributes) return {
+			machineUserNames,
+			idpNames
+		};
 		return {
 			attributeMap: Object.entries(machineUserAttributes).reduce((acc, [key, field]) => {
 				acc[key] = inferAttributeType(field);
 				return acc;
 			}, {}),
-			machineUserNames
+			machineUserNames,
+			idpNames
 		};
 	}
-	return { machineUserNames };
+	return {
+		machineUserNames,
+		idpNames
+	};
 }
 /**
 * Resolve the output path for the generated type definition file.
@@ -887,14 +902,15 @@ function resolveTypeDefinitionPath(configPath) {
 async function generateUserTypes(options) {
 	const { config, configPath } = options;
 	try {
-		const { attributeMap, attributeList, machineUserNames } = extractAttributesFromConfig(config);
+		const { attributeMap, attributeList, machineUserNames, idpNames } = extractAttributesFromConfig(config);
 		if (!attributeMap && !attributeList) logger.info("No attributes found in configuration", { mode: "plain" });
 		if (attributeMap) logger.debug(`Extracted AttributeMap: ${JSON.stringify(attributeMap)}`);
 		if (attributeList) logger.debug(`Extracted AttributeList: ${JSON.stringify(attributeList)}`);
 		if (machineUserNames?.length) logger.debug(`Extracted MachineUserNames: ${JSON.stringify(machineUserNames)}`);
+		if (idpNames?.length) logger.debug(`Extracted IdpNames: ${JSON.stringify(idpNames)}`);
 		const env = config.env;
 		if (env) logger.debug(`Extracted Env: ${JSON.stringify(env)}`);
-		const typeDefContent = generateTypeDefinition(attributeMap, attributeList, env, machineUserNames);
+		const typeDefContent = generateTypeDefinition(attributeMap, attributeList, env, machineUserNames, idpNames);
 		const outputPath = resolveTypeDefinitionPath(configPath);
 		fs$1.mkdirSync(path.dirname(outputPath), { recursive: true });
 		fs$1.writeFileSync(outputPath, typeDefContent);
@@ -2558,9 +2574,9 @@ async function applyIdP(client, result, phase = "create-update") {
 * @returns Planned changes and metadata
 */
 async function planIdP(context) {
-	const { client, workspaceId, application, forRemoval, forceApplyAll = false, hasIdpUserTrigger = false } = context;
+	const { client, workspaceId, application, forRemoval, forceApplyAll = false, idpUserTriggerTargets } = context;
 	const idps = forRemoval ? [] : application.idpServices;
-	const { changeSet: serviceChangeSet, conflicts, unmanaged, resourceOwners } = await planServices$3(client, workspaceId, application.name, idps, hasIdpUserTrigger);
+	const { changeSet: serviceChangeSet, conflicts, unmanaged, resourceOwners } = await planServices$3(client, workspaceId, application.name, idps, idpUserTriggerTargets ?? /* @__PURE__ */ new Set());
 	return {
 		changeSet: {
 			service: serviceChangeSet,
@@ -2647,7 +2663,7 @@ function areIdPServicesEqual(existing, desired) {
 		permission: normalizeComparablePermission(existing.permission)
 	}), desired);
 }
-async function planServices$3(client, workspaceId, appName, idps, hasIdpUserTrigger) {
+async function planServices$3(client, workspaceId, appName, idps, idpUserTriggerTargets) {
 	const changeSet = createChangeSet("IdP services");
 	const conflicts = [];
 	const unmanaged = [];
@@ -2696,9 +2712,9 @@ async function planServices$3(client, workspaceId, appName, idps, hasIdpUserTrig
 		}
 		const lang = convertLang(idp.lang);
 		const userAuthPolicy = idp.userAuthPolicy;
-		const publishUserEvents = idp.publishUserEvents ?? hasIdpUserTrigger;
-		if (hasIdpUserTrigger && idp.publishUserEvents === void 0) logger.info(`IdP service "${namespaceName}": automatically enabled "publishUserEvents" because executors with idpUser triggers are defined. Set "publishUserEvents" explicitly to silence this message.`);
-		else if (hasIdpUserTrigger && idp.publishUserEvents === false) logger.warn(`IdP service "${namespaceName}" has "publishUserEvents: false", but executors with idpUser triggers are defined. Those executors will not fire for this IdP. Set "publishUserEvents: true" to enable them.`);
+		const isIdpUserTriggerTarget = idpUserTriggerTargets.has(namespaceName);
+		if (isIdpUserTriggerTarget && idp.publishUserEvents === false) throw new Error(`IdP service "${namespaceName}" has "publishUserEvents: false", but executors with idpUser triggers subscribe to it. Either remove "publishUserEvents: false" or remove the matching executor triggers.`);
+		const publishUserEvents = idp.publishUserEvents ?? isIdpUserTriggerTarget;
 		const emailConfig = idp.emailConfig;
 		if (!idp.permission) logger.warn(`IdP service "${namespaceName}" has no permission configured.`);
 		const parsedPermission = parseIdPPermission(idp.permission);
@@ -4389,9 +4405,20 @@ function resolveResolverNamespace(application, resolverName) {
 	for (const service of application.resolverServices) if (Object.values(service.resolvers).some((r) => r.name === resolverName)) return service.namespace;
 	throw new Error(`Resolver "${resolverName}" not found in any namespace. Available namespaces: ${application.resolverServices.map((s) => s.namespace).join(", ")}`);
 }
-function resolveIdpNamespace(application) {
-	if (application.idpServices.length === 0) throw new Error("No IdP service configured");
-	if (application.idpServices.length > 1) throw new Error("Multiple IdP services found; cannot determine which to use for executor trigger");
+function resolveIdpNamespace(application, executorName, idpName) {
+	if (application.idpServices.length === 0) throw new Error(`Executor "${executorName}" uses an idpUser trigger but no IdP is configured.`);
+	if (idpName !== void 0) {
+		const found = application.idpServices.find((idp) => idp.name === idpName);
+		if (!found) {
+			const available = application.idpServices.map((idp) => idp.name).join(", ");
+			throw new Error(`Executor "${executorName}" specifies IdP "${idpName}" in its idpUser trigger, but no IdP with that name is configured. Available IdPs: ${available}`);
+		}
+		return found.name;
+	}
+	if (application.idpServices.length > 1) {
+		const available = application.idpServices.map((idp) => idp.name).join(", ");
+		throw new Error(`Executor "${executorName}" uses an idpUser trigger but the project defines multiple IdPs (${available}). Specify which IdP to subscribe to via the trigger's "idp" option.`);
+	}
 	return application.idpServices[0].name;
 }
 function resolveAuthNamespace(application) {
@@ -4462,7 +4489,7 @@ function protoExecutor(application, executor) {
 				case: "idp",
 				value: {
 					eventTypes: trigger.events,
-					namespaceName: resolveIdpNamespace(application)
+					namespaceName: resolveIdpNamespace(application, executor.name, trigger.idp)
 				}
 			});
 			break;
@@ -8480,6 +8507,25 @@ function tailorDBTrn(workspaceId, name) {
 function vaultTrn(workspaceId, name) {
 	return `trn:v1:workspace:${workspaceId}:vault:${name}`;
 }
+/**
+* Resolve the set of IdP names that have at least one executor subscribed to
+* their user events. When an executor's idpUser trigger omits the `idp` option
+* and exactly one IdP is configured, that IdP is implicitly the target.
+* Executors that omit `idp` while multiple IdPs exist are skipped here; the
+* apply pipeline throws a clearer error for them later.
+* @param application - Loaded application
+* @returns Set of IdP names targeted by idpUser triggers
+*/
+function collectIdpUserTriggerTargets(application) {
+	const targets = /* @__PURE__ */ new Set();
+	const idps = application.idpServices;
+	for (const executor of Object.values(application.executorService?.executors ?? {})) {
+		if (executor.trigger.kind !== "idpUser") continue;
+		if (executor.trigger.idp != null) targets.add(executor.trigger.idp);
+		else if (idps.length === 1) targets.add(idps[0].name);
+	}
+	return targets;
+}
 async function shouldForceApplyAll(client, workspaceId, application, functionEntries) {
 	const desiredLabels = (await buildMetaRequest(applicationTrn(workspaceId, application.name), application.name)).labels;
 	const candidateTrns = /* @__PURE__ */ new Set();
@@ -8687,7 +8733,7 @@ async function apply(options) {
 		const yes = options?.yes ?? false;
 		const forceApplyAll = await withSpan("plan.detectSdkVersionChange", () => shouldForceApplyAll(client, workspaceId, application, functionEntries));
 		const { functionRegistry, tailorDB, staticWebsite, idp, auth, pipeline, app, executor, workflow, secretManager } = await withSpan("plan", async () => {
-			const hasIdpUserTrigger = Object.values(application.executorService?.executors ?? {}).some((executor) => executor.trigger.kind === "idpUser");
+			const idpUserTriggerTargets = collectIdpUserTriggerTargets(application);
 			const ctx = {
 				client,
 				workspaceId,
@@ -8696,7 +8742,7 @@ async function apply(options) {
 				config,
 				noSchemaCheck: options?.noSchemaCheck,
 				forceApplyAll,
-				hasIdpUserTrigger
+				idpUserTriggerTargets
 			};
 			const functionRegistry = await withSpan("plan.functionRegistry", () => planFunctionRegistry(client, workspaceId, application.name, functionEntries));
 			const unchangedWorkflowJobs = new Set(functionRegistry.changeSet.unchanged.filter((entry) => entry.name.startsWith(WORKFLOW_PREFIX)).map((entry) => entry.name.slice(WORKFLOW_PREFIX.length)));
@@ -13085,7 +13131,7 @@ async function generate(options) {
 	if (options.init) await handleInitOption(namespacesWithMigrations, options.yes);
 	let pluginManager;
 	if (plugins.length > 0) pluginManager = new PluginManager(plugins);
-	const { defineApplication } = await import("./application-P55ZFKHG.mjs");
+	const { defineApplication } = await import("./application-C0O80PUX.mjs");
 	const application = defineApplication({
 		config,
 		pluginManager
@@ -15234,4 +15280,4 @@ function isDeno() {
 
 //#endregion
 export { deleteCommand$1 as $, getMigrationDirPath as $t, truncate as A, executionsCommand as At, updateOrganization as B, MIGRATION_LABEL_KEY as Bt, listCommand$2 as C, toPageDirection as Cn, jobsCommand as Ct, resumeWorkflow as D, startWorkflow as Dt, resumeCommand as E, startCommand as Et, showCommand as F, getCommand$6 as Ft, getCommand$1 as G, INITIAL_SCHEMA_NUMBER as Gt, treeCommand as H, bundleMigrationScript as Ht, logBetaWarning as I, getExecutor as It, updateFolder as J, compareLocalTypesWithSnapshot as Jt, getOrganization as K, MIGRATE_FILE_NAME as Kt, remove as L, apply as Lt, generate as M, listWorkflowExecutions as Mt, generateCommand as N, functionExecutionStatusToString as Nt, listCommand$3 as O, getCommand$5 as Ot, show as P, formatKeyValueTable as Pt, getFolder as Q, getLatestMigrationNumber as Qt, removeCommand$1 as R, executeScript as Rt, listApps as S, paginationArgs as Sn, getExecutorJob as St, healthCommand as T, watchExecutorJob as Tt, listCommand$4 as U, DB_TYPES_FILE_NAME as Ut, organizationTree as V, parseMigrationLabelNumber as Vt, listOrganizations as W, DIFF_FILE_NAME as Wt, listFolders as X, createSnapshotFromLocalTypes as Xt, listCommand$5 as Y, compareSnapshots as Yt, getCommand$2 as Z, formatMigrationNumber as Zt, getWorkspace as _, commonArgs as _n, webhookCommand as _t, updateUser as a, reconstructSnapshotFromMigrations as an, getCommand$3 as at, createCommand as b, isVerbose as bn, listCommand$9 as bt, listCommand as c, hasChanges as cn, tokenCommand as ct, inviteUser as d, sdkNameLabelKey as dn, generate$1 as dt, getMigrationFilePath as en, deleteFolder as et, restoreCommand as f, trnPrefix as fn, listCommand$8 as ft, getCommand as g, defineAppCommand as gn, listWebhookExecutors as gt, listWorkspaces as h, apiCall as hn, getFunctionRegistry as ht, updateCommand as i, loadDiff as in, listOAuth2Clients as it, truncateCommand as j, getWorkflowExecution as jt, listWorkflows as k, getWorkflow as kt, listUsers as l, getNamespacesWithMigrations as ln, listCommand$7 as lt, listCommand$1 as m, apiCommand as mn, getCommand$4 as mt, query as n, getNextMigrationNumber as nn, createFolder as nt, removeCommand as o, formatDiffSummary as on, getOAuth2Client as ot, restoreWorkspace as p, generateUserTypes as pn, listFunctionRegistries as pt, updateCommand$2 as q, SCHEMA_FILE_NAME as qt, queryCommand as r, isValidMigrationNumber as rn, listCommand$6 as rt, removeUser as s, formatMigrationDiff as sn, getMachineUserToken as st, isNativeTypeScriptRuntime as t, getMigrationFiles as tn, createCommand$1 as tt, inviteCommand as u, prompt as un, listMachineUsers as ut, deleteCommand as v, confirmationArgs as vn, triggerCommand as vt, getAppHealth as w, workspaceArgs as wn, listExecutorJobs as wt, createWorkspace as x, pagedLogArgs as xn, listExecutors as xt, deleteWorkspace as y, deploymentArgs as yn, triggerExecutor as yt, updateCommand$1 as z, waitForExecution$1 as zt };
-//# sourceMappingURL=runtime-CEj_sAfP.mjs.map
+//# sourceMappingURL=runtime-Bmq4L9pj.mjs.map