@tailor-platform/sdk 1.54.0 → 1.54.2

package/CHANGELOG.md

@@ -1,5 +1,48 @@
 # @tailor-platform/sdk
 
+## 1.54.2
+
+### Patch Changes
+
+- [#1303](https://github.com/tailor-platform/sdk/pull/1303) [`0881adf`](https://github.com/tailor-platform/sdk/commit/0881adf42f99ae812bb861d537e33b9b0e7192af) Thanks [@toiroakr](https://github.com/toiroakr)! - fix(deploy): stop reporting persistent TailorDB type diffs on every `deploy`. Fields without a `description` are emitted as an empty string by the platform but omitted by the local manifest; the comparison now treats an empty-string `description` as unset (same handling as empty `expr`), so unchanged types are no longer flagged as updates on repeated applies.
+
+## 1.54.1
+
+### Patch Changes
+
+- [#1292](https://github.com/tailor-platform/sdk/pull/1292) [`0976bac`](https://github.com/tailor-platform/sdk/commit/0976bac530ecf4f7214f6f69796e98a7bedb3e38) Thanks [@dqn](https://github.com/dqn)! - Update generated shell completions so saved completion files can refresh
+  themselves after future SDK upgrades.
+
+  Existing `eval "$(tailor-sdk completion bash)"` and
+  `eval "$(tailor-sdk completion zsh)"` setups do not need to change because they
+  regenerate completions on every shell startup.
+
+  If you saved a static completion file generated by an older SDK version,
+  regenerate that file once:
+
+  ```bash
+  # bash
+  mkdir -p ~/.local/share/bash-completion/completions
+  tailor-sdk completion bash > ~/.local/share/bash-completion/completions/tailor-sdk
+
+  # zsh fpath
+  mkdir -p ~/.zsh/completions
+  tailor-sdk completion zsh > ~/.zsh/completions/_tailor-sdk
+
+  # fish
+  tailor-sdk completion fish --install
+  ```
+
+  After that one-time regeneration, saved completion files can self-refresh when
+  the `tailor-sdk` binary changes. Open a new shell, or reload your shell
+  configuration, after regenerating.
+
+- [#1294](https://github.com/tailor-platform/sdk/pull/1294) [`fd1c5cf`](https://github.com/tailor-platform/sdk/commit/fd1c5cf7f2b1512df4a2798521119658cb6a2088) Thanks [@toiroakr](https://github.com/toiroakr)! - Fix IdP services and OAuth2 clients always being reported as changed on consecutive deployments when a description is omitted
+
+- [#1281](https://github.com/tailor-platform/sdk/pull/1281) [`9711826`](https://github.com/tailor-platform/sdk/commit/971182600b5866cc44194865ae1a308871a8c377) Thanks [@toiroakr](https://github.com/toiroakr)! - fix(cli): `remove` no longer deletes an application matched by name alone. Removal now verifies ownership via `sdk-app-id`/`sdk-name` labels (`isOwnedByApp`), consistent with every other resource type, so a same-named application owned by another user in a shared workspace is left untouched.
+
+- [#1299](https://github.com/tailor-platform/sdk/pull/1299) [`c10681f`](https://github.com/tailor-platform/sdk/commit/c10681fc33211ec7a92a9ea9e61e00ebf0a69862) Thanks [@k1LoW](https://github.com/k1LoW)! - fix(runtime): remove non-existent `updatedAt` field from `idp.User`. The IDP service does not return this field, so the declaration was misleading consumers into expecting an optional timestamp that was always `undefined`.
+
 ## 1.54.0
 
 ### Minor Changes

package/dist/cli/index.mjs

@@ -2,7 +2,7 @@
 
 import { G as PATScope, R as AuthInvokerSchema, c as fetchUserInfo, d as initOperatorClient, h as userAgent, i as fetchAll, j as FunctionExecution_Type, n as closeConnectionPool, o as fetchPaged, s as fetchPlatformMachineUserToken, u as initOAuth2Client } from "../client-CGO7gniI.mjs";
 import { n as logger, r as styles } from "../logger-DpJyJvNz.mjs";
-import { $ as listCommand$10, An as workspaceArgs, At as startCommand, B as logBetaWarning, C as listCommand$13, Cn as configArg, Dn as pagedLogArgs, Dt as jobsCommand, E as resumeCommand, En as isVerbose, F as writeDbTypesFile, Gt as parseMigrationLabelNumber, H as removeCommand$1, Ht as executeScript, I as getConfiguredEditorCommand, K as treeCommand, L as openInConfiguredEditor, Lt as functionExecutionStatusToString, Mt as getCommand$6, N as generateCommand$1, O as listCommand$12, On as paginationArgs, P as generateMigrationScript, Pt as executionsCommand, Rt as formatKeyValueTable, Sn as commonArgs, St as triggerCommand, T as healthCommand, Tn as deploymentArgs, U as updateCommand$3, Vt as deploy, Y as getCommand$5, Yt as INITIAL_SCHEMA_NUMBER, Z as updateCommand$2, _n as prompt, an as getMigrationFiles, at as createCommand$3, b as createCommand$4, bn as assertWritable, c as listCommand$14, cn as loadDiff, f as restoreCommand, ft as tokenCommand, g as getCommand$7, gt as listCommand$7, hn as trnPrefix, ht as generate, i as updateCommand$4, in as getMigrationFilePath, j as truncateCommand, kn as toPageDirection, ln as reconstructSnapshotFromMigrations, lt as getCommand$3, m as listCommand$15, mn as sdkNameLabelKey, o as removeCommand, pn as getNamespacesWithMigrations, pt as listCommand$8, q as listCommand$11, r as queryCommand, rt as deleteCommand$3, sn as isValidMigrationNumber, st as listCommand$9, t as isNativeTypeScriptRuntime, tn as formatMigrationNumber, tt as getCommand$4, u as inviteCommand, v as deleteCommand$4, vn as apiCommand, vt as getCommand$2, wn as confirmationArgs, wt as listCommand$6, xn as defineAppCommand, xt as webhookCommand, z as showCommand, zt as getCommand$1 } from "../runtime-CQRrqhlV.mjs";
+import { $ as listCommand$10, An as workspaceArgs, At as startCommand, B as logBetaWarning, C as listCommand$13, Cn as configArg, Dn as pagedLogArgs, Dt as jobsCommand, E as resumeCommand, En as isVerbose, F as writeDbTypesFile, Gt as parseMigrationLabelNumber, H as removeCommand$1, Ht as executeScript, I as getConfiguredEditorCommand, K as treeCommand, L as openInConfiguredEditor, Lt as functionExecutionStatusToString, Mt as getCommand$6, N as generateCommand$1, O as listCommand$12, On as paginationArgs, P as generateMigrationScript, Pt as executionsCommand, Rt as formatKeyValueTable, Sn as commonArgs, St as triggerCommand, T as healthCommand, Tn as deploymentArgs, U as updateCommand$3, Vt as deploy, Y as getCommand$5, Yt as INITIAL_SCHEMA_NUMBER, Z as updateCommand$2, _n as prompt, an as getMigrationFiles, at as createCommand$3, b as createCommand$4, bn as assertWritable, c as listCommand$14, cn as loadDiff, f as restoreCommand, ft as tokenCommand, g as getCommand$7, gt as listCommand$7, hn as trnPrefix, ht as generate, i as updateCommand$4, in as getMigrationFilePath, j as truncateCommand, kn as toPageDirection, ln as reconstructSnapshotFromMigrations, lt as getCommand$3, m as listCommand$15, mn as sdkNameLabelKey, o as removeCommand, pn as getNamespacesWithMigrations, pt as listCommand$8, q as listCommand$11, r as queryCommand, rt as deleteCommand$3, sn as isValidMigrationNumber, st as listCommand$9, t as isNativeTypeScriptRuntime, tn as formatMigrationNumber, tt as getCommand$4, u as inviteCommand, v as deleteCommand$4, vn as apiCommand, vt as getCommand$2, wn as confirmationArgs, wt as listCommand$6, xn as defineAppCommand, xt as webhookCommand, z as showCommand, zt as getCommand$1 } from "../runtime-DLFzjgEo.mjs";
 import { D as saveUserTokens, E as resolveTokens, O as writePlatformConfig, S as loadAccessToken, T as readPlatformConfig, _ as getDistDir, a as WorkflowJobSchema, b as deleteUserTokens, c as ExecutorSchema, i as resolveInlineSourcemap, l as INVOKER_EXPR, o as ResolverSchema, w as loadWorkspaceId, x as fetchLatestToken, y as loadConfig } from "../application-BfGje3iZ.mjs";
 import { t as multiline } from "../multiline-Cf9ODpr1.mjs";
 import { t as readPackageJson } from "../package-json-DcQApfPQ.mjs";

package/dist/cli/lib.mjs

@@ -1,6 +1,6 @@
 
 import { d as initOperatorClient } from "../client-CGO7gniI.mjs";
-import { $t as compareSnapshots, A as truncate, Bt as getExecutor, Ct as triggerExecutor, D as resumeWorkflow, Et as getExecutorJob, Ft as getWorkflowExecution, G as organizationTree, Ht as executeScript, It as listWorkflowExecutions, J as listOrganizations, Jt as DIFF_FILE_NAME, Kt as bundleMigrationScript, M as generate$1, Nt as getWorkflow, Ot as listExecutorJobs, Q as updateFolder, Qt as compareLocalTypesWithSnapshot, R as show, S as listApps, Tt as listExecutors, Ut as waitForExecution, V as remove, Vt as deploy, W as updateOrganization, Wt as MIGRATION_LABEL_KEY, X as getOrganization, Xt as MIGRATE_FILE_NAME, Yt as INITIAL_SCHEMA_NUMBER, Zt as SCHEMA_FILE_NAME, _ as getWorkspace, _t as listFunctionRegistries, a as updateUser, an as getMigrationFiles, bt as listWebhookExecutors, ct as listOAuth2Clients, d as inviteUser, dn as formatMigrationDiff, dt as getMachineUserToken, en as createSnapshotFromLocalTypes, et as listFolders, fn as hasChanges, gn as generateUserTypes, h as listWorkspaces, ht as generate, in as getMigrationFilePath, it as deleteFolder, jt as startWorkflow, k as listWorkflows, kt as watchExecutorJob, l as listUsers, ln as reconstructSnapshotFromMigrations, mt as listMachineUsers, n as query, nn as getLatestMigrationNumber, nt as getFolder, on as getNextMigrationNumber, ot as createFolder, p as restoreWorkspace, pn as getNamespacesWithMigrations, qt as DB_TYPES_FILE_NAME, rn as getMigrationDirPath, s as removeUser, t as isNativeTypeScriptRuntime, un as formatDiffSummary, ut as getOAuth2Client, w as getAppHealth, x as createWorkspace, y as deleteWorkspace, yn as apiCall, yt as getFunctionRegistry } from "../runtime-CQRrqhlV.mjs";
+import { $t as compareSnapshots, A as truncate, Bt as getExecutor, Ct as triggerExecutor, D as resumeWorkflow, Et as getExecutorJob, Ft as getWorkflowExecution, G as organizationTree, Ht as executeScript, It as listWorkflowExecutions, J as listOrganizations, Jt as DIFF_FILE_NAME, Kt as bundleMigrationScript, M as generate$1, Nt as getWorkflow, Ot as listExecutorJobs, Q as updateFolder, Qt as compareLocalTypesWithSnapshot, R as show, S as listApps, Tt as listExecutors, Ut as waitForExecution, V as remove, Vt as deploy, W as updateOrganization, Wt as MIGRATION_LABEL_KEY, X as getOrganization, Xt as MIGRATE_FILE_NAME, Yt as INITIAL_SCHEMA_NUMBER, Zt as SCHEMA_FILE_NAME, _ as getWorkspace, _t as listFunctionRegistries, a as updateUser, an as getMigrationFiles, bt as listWebhookExecutors, ct as listOAuth2Clients, d as inviteUser, dn as formatMigrationDiff, dt as getMachineUserToken, en as createSnapshotFromLocalTypes, et as listFolders, fn as hasChanges, gn as generateUserTypes, h as listWorkspaces, ht as generate, in as getMigrationFilePath, it as deleteFolder, jt as startWorkflow, k as listWorkflows, kt as watchExecutorJob, l as listUsers, ln as reconstructSnapshotFromMigrations, mt as listMachineUsers, n as query, nn as getLatestMigrationNumber, nt as getFolder, on as getNextMigrationNumber, ot as createFolder, p as restoreWorkspace, pn as getNamespacesWithMigrations, qt as DB_TYPES_FILE_NAME, rn as getMigrationDirPath, s as removeUser, t as isNativeTypeScriptRuntime, un as formatDiffSummary, ut as getOAuth2Client, w as getAppHealth, x as createWorkspace, y as deleteWorkspace, yn as apiCall, yt as getFunctionRegistry } from "../runtime-DLFzjgEo.mjs";
 import { S as loadAccessToken, _ as getDistDir, w as loadWorkspaceId, y as loadConfig } from "../application-BfGje3iZ.mjs";
 import { n as enumConstantsPlugin } from "../enum-constants-C7DaWeQo.mjs";
 import { t as multiline } from "../multiline-Cf9ODpr1.mjs";

package/dist/idp-Ch95ag8h.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"idp-Ch95ag8h.mjs","names":["#impl"],"sources":["../src/runtime/idp.ts"],"sourcesContent":["/**\n * IDP (Identity Provider) utilities.\n *\n * Thin typed wrapper around the platform-provided `tailor.idp` runtime API.\n * At runtime this delegates to `globalThis.tailor.idp`. Use `idpMock` from\n * `@tailor-platform/sdk/vitest` to mock these calls in unit tests.\n * @example\n * import { idp } from \"@tailor-platform/sdk/runtime\";\n *\n * const client = new idp.Client({ namespace: \"my-namespace\" });\n * const { users } = await client.users({ first: 10 });\n */\n\n/** Configuration object for {@link Client}. */\nexport interface ClientConfig {\n  namespace: string;\n}\n\n/** User record returned by IDP operations. */\nexport interface User {\n  id: string;\n  name: string;\n  disabled: boolean;\n  createdAt?: string;\n  updatedAt?: string;\n}\n\n/** Filter options for {@link Client.users}. */\nexport interface UserQuery {\n  /** Filter by user IDs */\n  ids?: string[];\n  /** Filter by user names */\n  names?: string[];\n}\n\n/** Pagination/filter options for {@link Client.users}. */\nexport interface ListUsersOptions {\n  /** Maximum number of users to return */\n  first?: number;\n  /** Page token for pagination */\n  after?: string;\n  /** Query filter for users */\n  query?: UserQuery;\n}\n\n/** Response shape for {@link Client.users}. */\nexport interface ListUsersResponse {\n  users: User[];\n  nextPageToken: string | null;\n  totalCount: number;\n}\n\n/** Input for {@link Client.createUser}. */\nexport interface CreateUserInput {\n  /** The user's name (typically email) */\n  name: string;\n  /** The user's password. If omitted, the user is created without a password (cannot log in with any password). */\n  password?: string;\n  /** Whether the user is disabled */\n  disabled?: boolean;\n}\n\n/** Input for {@link Client.updateUser}. */\nexport interface UpdateUserInput {\n  /** The user's ID */\n  id: string;\n  /** New name for the user */\n  name?: string;\n  /** New password for the user. Cannot be used with clearPassword. */\n  password?: string;\n  /** If true, remove the user's password. Cannot be used with password. */\n  clearPassword?: boolean;\n  /** New disabled status for the user */\n  disabled?: boolean;\n}\n\n/** Input for {@link Client.sendPasswordResetEmail}. */\nexport interface SendPasswordResetEmailInput {\n  /** The ID of the user */\n  userId: string;\n  /** The URI to redirect to after password reset */\n  redirectUri: string;\n  /** The sender display name. Defaults to 'Tailor Platform IdP'. */\n  fromName?: string;\n  /** The email subject line. Defaults to the localized default subject. */\n  subject?: string;\n}\n\n/** Instance methods exposed by `tailor.idp.Client`. */\nexport interface IdpClientInstance {\n  users(options?: ListUsersOptions): Promise<ListUsersResponse>;\n  user(userId: string): Promise<User>;\n  userByName(name: string): Promise<User>;\n  createUser(input: CreateUserInput): Promise<User>;\n  updateUser(input: UpdateUserInput): Promise<User>;\n  deleteUser(userId: string): Promise<boolean>;\n  sendPasswordResetEmail(input: SendPasswordResetEmailInput): Promise<boolean>;\n}\n\n/**\n * Constructor shape for `tailor.idp.Client`.\n * @internal\n */\nexport interface IdpClientConstructor {\n  new (config: ClientConfig): IdpClientInstance;\n}\n\n/**\n * Platform API surface for `tailor.idp`. Describes the shape the platform\n * runtime injects on `globalThis.tailor.idp`.\n * @internal\n */\nexport interface TailorIdpAPI {\n  Client: IdpClientConstructor;\n}\n\n/**\n * IDP Client for user management operations.\n *\n * Wraps the platform-provided `tailor.idp.Client` and exposes the same surface.\n */\nexport class Client {\n  #impl: IdpClientInstance;\n\n  constructor(config: ClientConfig) {\n    this.#impl = new (globalThis as { tailor: { idp: TailorIdpAPI } }).tailor.idp.Client(config);\n  }\n\n  /**\n   * List users in the namespace with optional filtering and pagination.\n   * @param options - Pagination and filter options\n   * @returns Page of users with `nextPageToken` and `totalCount`\n   */\n  users(options?: ListUsersOptions): Promise<ListUsersResponse> {\n    return this.#impl.users(options);\n  }\n\n  /**\n   * Get a user by ID.\n   * @param userId - IDP user ID\n   * @returns The matching user\n   */\n  user(userId: string): Promise<User> {\n    return this.#impl.user(userId);\n  }\n\n  /**\n   * Get a user by name.\n   * @param name - IDP user name\n   * @returns The matching user\n   */\n  userByName(name: string): Promise<User> {\n    return this.#impl.userByName(name);\n  }\n\n  /**\n   * Create a new user.\n   * @param input - User attributes\n   * @returns The newly created user\n   */\n  createUser(input: CreateUserInput): Promise<User> {\n    return this.#impl.createUser(input);\n  }\n\n  /**\n   * Update an existing user.\n   * @param input - User ID plus attributes to update\n   * @returns The updated user\n   */\n  updateUser(input: UpdateUserInput): Promise<User> {\n    return this.#impl.updateUser(input);\n  }\n\n  /**\n   * Delete a user by ID.\n   * @param userId - IDP user ID\n   * @returns `true` when the user was deleted\n   */\n  deleteUser(userId: string): Promise<boolean> {\n    return this.#impl.deleteUser(userId);\n  }\n\n  /**\n   * Send a password reset email to a user.\n   * @param input - Target user ID and redirect URI\n   * @returns `true` when the email was queued\n   */\n  sendPasswordResetEmail(input: SendPasswordResetEmailInput): Promise<boolean> {\n    return this.#impl.sendPasswordResetEmail(input);\n  }\n}\n"],"mappings":";;;;;;;;;;AAyHA,IAAa,SAAb,MAAoB;CAClB;CAEA,YAAY,QAAsB;EAChC,KAAKA,QAAQ,IAAK,WAAiD,OAAO,IAAI,OAAO,MAAM;CAC7F;;;;;;CAOA,MAAM,SAAwD;EAC5D,OAAO,KAAKA,MAAM,MAAM,OAAO;CACjC;;;;;;CAOA,KAAK,QAA+B;EAClC,OAAO,KAAKA,MAAM,KAAK,MAAM;CAC/B;;;;;;CAOA,WAAW,MAA6B;EACtC,OAAO,KAAKA,MAAM,WAAW,IAAI;CACnC;;;;;;CAOA,WAAW,OAAuC;EAChD,OAAO,KAAKA,MAAM,WAAW,KAAK;CACpC;;;;;;CAOA,WAAW,OAAuC;EAChD,OAAO,KAAKA,MAAM,WAAW,KAAK;CACpC;;;;;;CAOA,WAAW,QAAkC;EAC3C,OAAO,KAAKA,MAAM,WAAW,MAAM;CACrC;;;;;;CAOA,uBAAuB,OAAsD;EAC3E,OAAO,KAAKA,MAAM,uBAAuB,KAAK;CAChD;AACF"}
+{"version":3,"file":"idp-Ch95ag8h.mjs","names":["#impl"],"sources":["../src/runtime/idp.ts"],"sourcesContent":["/**\n * IDP (Identity Provider) utilities.\n *\n * Thin typed wrapper around the platform-provided `tailor.idp` runtime API.\n * At runtime this delegates to `globalThis.tailor.idp`. Use `idpMock` from\n * `@tailor-platform/sdk/vitest` to mock these calls in unit tests.\n * @example\n * import { idp } from \"@tailor-platform/sdk/runtime\";\n *\n * const client = new idp.Client({ namespace: \"my-namespace\" });\n * const { users } = await client.users({ first: 10 });\n */\n\n/** Configuration object for {@link Client}. */\nexport interface ClientConfig {\n  namespace: string;\n}\n\n/** User record returned by IDP operations. */\nexport interface User {\n  id: string;\n  name: string;\n  disabled: boolean;\n  createdAt?: string;\n}\n\n/** Filter options for {@link Client.users}. */\nexport interface UserQuery {\n  /** Filter by user IDs */\n  ids?: string[];\n  /** Filter by user names */\n  names?: string[];\n}\n\n/** Pagination/filter options for {@link Client.users}. */\nexport interface ListUsersOptions {\n  /** Maximum number of users to return */\n  first?: number;\n  /** Page token for pagination */\n  after?: string;\n  /** Query filter for users */\n  query?: UserQuery;\n}\n\n/** Response shape for {@link Client.users}. */\nexport interface ListUsersResponse {\n  users: User[];\n  nextPageToken: string | null;\n  totalCount: number;\n}\n\n/** Input for {@link Client.createUser}. */\nexport interface CreateUserInput {\n  /** The user's name (typically email) */\n  name: string;\n  /** The user's password. If omitted, the user is created without a password (cannot log in with any password). */\n  password?: string;\n  /** Whether the user is disabled */\n  disabled?: boolean;\n}\n\n/** Input for {@link Client.updateUser}. */\nexport interface UpdateUserInput {\n  /** The user's ID */\n  id: string;\n  /** New name for the user */\n  name?: string;\n  /** New password for the user. Cannot be used with clearPassword. */\n  password?: string;\n  /** If true, remove the user's password. Cannot be used with password. */\n  clearPassword?: boolean;\n  /** New disabled status for the user */\n  disabled?: boolean;\n}\n\n/** Input for {@link Client.sendPasswordResetEmail}. */\nexport interface SendPasswordResetEmailInput {\n  /** The ID of the user */\n  userId: string;\n  /** The URI to redirect to after password reset */\n  redirectUri: string;\n  /** The sender display name. Defaults to 'Tailor Platform IdP'. */\n  fromName?: string;\n  /** The email subject line. Defaults to the localized default subject. */\n  subject?: string;\n}\n\n/** Instance methods exposed by `tailor.idp.Client`. */\nexport interface IdpClientInstance {\n  users(options?: ListUsersOptions): Promise<ListUsersResponse>;\n  user(userId: string): Promise<User>;\n  userByName(name: string): Promise<User>;\n  createUser(input: CreateUserInput): Promise<User>;\n  updateUser(input: UpdateUserInput): Promise<User>;\n  deleteUser(userId: string): Promise<boolean>;\n  sendPasswordResetEmail(input: SendPasswordResetEmailInput): Promise<boolean>;\n}\n\n/**\n * Constructor shape for `tailor.idp.Client`.\n * @internal\n */\nexport interface IdpClientConstructor {\n  new (config: ClientConfig): IdpClientInstance;\n}\n\n/**\n * Platform API surface for `tailor.idp`. Describes the shape the platform\n * runtime injects on `globalThis.tailor.idp`.\n * @internal\n */\nexport interface TailorIdpAPI {\n  Client: IdpClientConstructor;\n}\n\n/**\n * IDP Client for user management operations.\n *\n * Wraps the platform-provided `tailor.idp.Client` and exposes the same surface.\n */\nexport class Client {\n  #impl: IdpClientInstance;\n\n  constructor(config: ClientConfig) {\n    this.#impl = new (globalThis as { tailor: { idp: TailorIdpAPI } }).tailor.idp.Client(config);\n  }\n\n  /**\n   * List users in the namespace with optional filtering and pagination.\n   * @param options - Pagination and filter options\n   * @returns Page of users with `nextPageToken` and `totalCount`\n   */\n  users(options?: ListUsersOptions): Promise<ListUsersResponse> {\n    return this.#impl.users(options);\n  }\n\n  /**\n   * Get a user by ID.\n   * @param userId - IDP user ID\n   * @returns The matching user\n   */\n  user(userId: string): Promise<User> {\n    return this.#impl.user(userId);\n  }\n\n  /**\n   * Get a user by name.\n   * @param name - IDP user name\n   * @returns The matching user\n   */\n  userByName(name: string): Promise<User> {\n    return this.#impl.userByName(name);\n  }\n\n  /**\n   * Create a new user.\n   * @param input - User attributes\n   * @returns The newly created user\n   */\n  createUser(input: CreateUserInput): Promise<User> {\n    return this.#impl.createUser(input);\n  }\n\n  /**\n   * Update an existing user.\n   * @param input - User ID plus attributes to update\n   * @returns The updated user\n   */\n  updateUser(input: UpdateUserInput): Promise<User> {\n    return this.#impl.updateUser(input);\n  }\n\n  /**\n   * Delete a user by ID.\n   * @param userId - IDP user ID\n   * @returns `true` when the user was deleted\n   */\n  deleteUser(userId: string): Promise<boolean> {\n    return this.#impl.deleteUser(userId);\n  }\n\n  /**\n   * Send a password reset email to a user.\n   * @param input - Target user ID and redirect URI\n   * @returns `true` when the email was queued\n   */\n  sendPasswordResetEmail(input: SendPasswordResetEmailInput): Promise<boolean> {\n    return this.#impl.sendPasswordResetEmail(input);\n  }\n}\n"],"mappings":";;;;;;;;;;AAwHA,IAAa,SAAb,MAAoB;CAClB;CAEA,YAAY,QAAsB;EAChC,KAAKA,QAAQ,IAAK,WAAiD,OAAO,IAAI,OAAO,MAAM;CAC7F;;;;;;CAOA,MAAM,SAAwD;EAC5D,OAAO,KAAKA,MAAM,MAAM,OAAO;CACjC;;;;;;CAOA,KAAK,QAA+B;EAClC,OAAO,KAAKA,MAAM,KAAK,MAAM;CAC/B;;;;;;CAOA,WAAW,MAA6B;EACtC,OAAO,KAAKA,MAAM,WAAW,IAAI;CACnC;;;;;;CAOA,WAAW,OAAuC;EAChD,OAAO,KAAKA,MAAM,WAAW,KAAK;CACpC;;;;;;CAOA,WAAW,OAAuC;EAChD,OAAO,KAAKA,MAAM,WAAW,KAAK;CACpC;;;;;;CAOA,WAAW,QAAkC;EAC3C,OAAO,KAAKA,MAAM,WAAW,MAAM;CACrC;;;;;;CAOA,uBAAuB,OAAsD;EAC3E,OAAO,KAAKA,MAAM,uBAAuB,KAAK;CAChD;AACF"}

package/dist/{idp-CbxR6A_0.d.mts → idp-Di9N4FSJ.d.mts}

@@ -23,7 +23,6 @@ interface User {
   name: string;
   disabled: boolean;
   createdAt?: string;
-  updatedAt?: string;
 }
 /** Filter options for {@link Client.users}. */
 interface UserQuery {
@@ -158,4 +157,4 @@ declare class Client {
 }
 //#endregion
 export { IdpClientInstance as a, SendPasswordResetEmailInput as c, User as d, UserQuery as f, IdpClientConstructor as i, TailorIdpAPI as l, ClientConfig as n, ListUsersOptions as o, idp_d_exports as p, CreateUserInput as r, ListUsersResponse as s, Client as t, UpdateUserInput as u };
-//# sourceMappingURL=idp-CbxR6A_0.d.mts.map
+//# sourceMappingURL=idp-Di9N4FSJ.d.mts.map

package/dist/{index-ECerapTN.d.mts → index-DTSQthwF.d.mts}

@@ -2,7 +2,7 @@ import { t as TailorAuthconnectionAPI } from "./authconnection-TsdLYaLs.mjs";
 import { r as TailorContextAPI } from "./context-CUBwSBq4.mjs";
 import { f as TailorDBFileAPI } from "./file-VTJbbOL3.mjs";
 import { i as TailorIconvAPI } from "./iconv-Chu6Hit2.mjs";
-import { l as TailorIdpAPI } from "./idp-CbxR6A_0.mjs";
+import { l as TailorIdpAPI } from "./idp-Di9N4FSJ.mjs";
 import { t as TailorSecretmanagerAPI } from "./secretmanager-BhpDmxwT.mjs";
 import { n as TailorWorkflowAPI } from "./workflow-dYYH7QFa.mjs";
 
@@ -43,4 +43,4 @@ interface TailordbRuntime {
 }
 //#endregion
 export { TailordbQueryResult as a, TailordbCommandType as i, TailordbClientConstructor as n, TailordbRuntime as o, TailordbClientInstance as r, TailorRuntime as t };
-//# sourceMappingURL=index-ECerapTN.d.mts.map
+//# sourceMappingURL=index-DTSQthwF.d.mts.map

package/dist/runtime/globals.d.mts

@@ -1,9 +1,9 @@
 import { t as ContextInvoker } from "../context-CUBwSBq4.mjs";
 import { m as TailorDBFileErrorCode } from "../file-VTJbbOL3.mjs";
 import { r as IconvInstance } from "../iconv-Chu6Hit2.mjs";
-import { a as IdpClientInstance, c as SendPasswordResetEmailInput, d as User, f as UserQuery, n as ClientConfig, o as ListUsersOptions, r as CreateUserInput, s as ListUsersResponse, u as UpdateUserInput } from "../idp-CbxR6A_0.mjs";
+import { a as IdpClientInstance, c as SendPasswordResetEmailInput, d as User, f as UserQuery, n as ClientConfig, o as ListUsersOptions, r as CreateUserInput, s as ListUsersResponse, u as UpdateUserInput } from "../idp-Di9N4FSJ.mjs";
 import { r as TriggerWorkflowOptions, t as AuthInvoker } from "../workflow-dYYH7QFa.mjs";
-import { a as TailordbQueryResult, i as TailordbCommandType, o as TailordbRuntime, r as TailordbClientInstance, t as TailorRuntime } from "../index-ECerapTN.mjs";
+import { a as TailordbQueryResult, i as TailordbCommandType, o as TailordbRuntime, r as TailordbClientInstance, t as TailorRuntime } from "../index-DTSQthwF.mjs";
 
 //#region src/runtime/globals.d.ts
 declare global {

package/dist/runtime/idp.d.mts

@@ -1,2 +1,2 @@
-import { a as IdpClientInstance, c as SendPasswordResetEmailInput, d as User, f as UserQuery, i as IdpClientConstructor, l as TailorIdpAPI, n as ClientConfig, o as ListUsersOptions, r as CreateUserInput, s as ListUsersResponse, t as Client, u as UpdateUserInput } from "../idp-CbxR6A_0.mjs";
+import { a as IdpClientInstance, c as SendPasswordResetEmailInput, d as User, f as UserQuery, i as IdpClientConstructor, l as TailorIdpAPI, n as ClientConfig, o as ListUsersOptions, r as CreateUserInput, s as ListUsersResponse, t as Client, u as UpdateUserInput } from "../idp-Di9N4FSJ.mjs";
 export { Client, ClientConfig, CreateUserInput, IdpClientConstructor, IdpClientInstance, ListUsersOptions, ListUsersResponse, SendPasswordResetEmailInput, TailorIdpAPI, UpdateUserInput, User, UserQuery };

package/dist/runtime/index.d.mts

@@ -2,8 +2,8 @@ import { n as authconnection_d_exports } from "../authconnection-TsdLYaLs.mjs";
 import { i as context_d_exports } from "../context-CUBwSBq4.mjs";
 import { b as file_d_exports } from "../file-VTJbbOL3.mjs";
 import { u as iconv_d_exports } from "../iconv-Chu6Hit2.mjs";
-import { p as idp_d_exports } from "../idp-CbxR6A_0.mjs";
+import { p as idp_d_exports } from "../idp-Di9N4FSJ.mjs";
 import { i as secretmanager_d_exports } from "../secretmanager-BhpDmxwT.mjs";
 import { c as workflow_d_exports } from "../workflow-dYYH7QFa.mjs";
-import { a as TailordbQueryResult, i as TailordbCommandType, n as TailordbClientConstructor, o as TailordbRuntime, r as TailordbClientInstance, t as TailorRuntime } from "../index-ECerapTN.mjs";
+import { a as TailordbQueryResult, i as TailordbCommandType, n as TailordbClientConstructor, o as TailordbRuntime, r as TailordbClientInstance, t as TailorRuntime } from "../index-DTSQthwF.mjs";
 export { TailorRuntime, TailordbClientConstructor, TailordbClientInstance, TailordbCommandType, TailordbQueryResult, TailordbRuntime, authconnection_d_exports as authconnection, context_d_exports as context, file_d_exports as file, iconv_d_exports as iconv, idp_d_exports as idp, secretmanager_d_exports as secretmanager, workflow_d_exports as workflow };

package/dist/{runtime-CQRrqhlV.mjs → runtime-DLFzjgEo.mjs}

@@ -1857,16 +1857,11 @@ async function planApplication(context) {
 		}
 	});
 	if (forRemoval) {
-		const ownedAppNames = /* @__PURE__ */ new Set();
-		if (existingApplications.some((app) => app.name === application.name)) ownedAppNames.add(application.name);
-		if (application.id) {
-			const others = existingApplications.filter((app) => !ownedAppNames.has(app.name));
-			const owned = await Promise.all(others.map(async (app) => {
-				return isOwnedByApp(await fetchAppLabels(client, workspaceId, app.name), application.name, application.id) ? app.name : null;
-			}));
-			for (const name of owned) if (name) ownedAppNames.add(name);
-		}
-		for (const name of ownedAppNames) changeSet.deletes.push({
+		const candidates = application.id ? existingApplications : existingApplications.filter((app) => app.name === application.name);
+		const owned = await Promise.all(candidates.map(async (app) => {
+			return isOwnedByApp(await fetchAppLabels(client, workspaceId, app.name), application.name, application.id) ? app.name : null;
+		}));
+		for (const name of owned) if (name) changeSet.deletes.push({
 			name,
 			request: {
 				workspaceId,
@@ -3065,7 +3060,7 @@ function normalizeComparablePermission(permission) {
 			right: c.right ? { kind: c.right.kind } : void 0
 		})),
 		permit: policy.permit,
-		description: policy.description
+		description: policy.description || void 0
 	});
 	return {
 		create: permission.create.map(normalizePolicy),
@@ -4054,6 +4049,7 @@ function normalizeComparableOAuth2Client(client) {
 	const refreshTokenLifetime = oauth2LifetimeToSeconds(client.refreshTokenLifetime);
 	return normalizeProtoConfig({
 		...client,
+		description: client.description || void 0,
 		redirectUris: normalizeStringArray(client.redirectUris),
 		grantTypes: [...client.grantTypes ?? []].sort((left, right) => left - right),
 		accessTokenLifetime: accessTokenLifetime ?? 86400,
@@ -8752,7 +8748,7 @@ function normalizeTailorDBCompareValue(value, path) {
 	if (value === void 0 || value === null) return value;
 	if (typeof value === "number" || typeof value === "bigint" || typeof value === "string") {
 		if (matchesNumericStringPath(path) && isNumericLikeValue(value)) return String(value);
-		if (path.at(-1) === "expr" && value === tailordbCompareKnownDefaults.emptyExpression) return;
+		if ((path.at(-1) === "expr" || path.at(-1) === "description") && value === tailordbCompareKnownDefaults.emptyExpression) return;
 		return value;
 	}
 	if (Array.isArray(value)) return value.map((item, index) => normalizeTailorDBCompareValue(item, [...path, index])).filter((item) => item !== void 0);
@@ -16449,4 +16445,4 @@ function isDeno() {
 
 //#endregion
 export { listCommand$5 as $, compareSnapshots as $t, truncate as A, workspaceArgs as An, startCommand as At, logBetaWarning as B, getExecutor as Bt, listCommand$2 as C, configArg as Cn, triggerExecutor as Ct, resumeWorkflow as D, pagedLogArgs as Dn, jobsCommand as Dt, resumeCommand as E, isVerbose as En, getExecutorJob as Et, writeDbTypesFile as F, getWorkflowExecution as Ft, organizationTree as G, parseMigrationLabelNumber as Gt, removeCommand$1 as H, executeScript as Ht, getConfiguredEditorCommand as I, listWorkflowExecutions as It, listOrganizations as J, DIFF_FILE_NAME as Jt, treeCommand as K, bundleMigrationScript as Kt, openInConfiguredEditor as L, functionExecutionStatusToString as Lt, generate as M, getCommand$5 as Mt, generateCommand as N, getWorkflow as Nt, listCommand$3 as O, paginationArgs as On, listExecutorJobs as Ot, generateMigrationScript as P, executionsCommand as Pt, updateFolder as Q, compareLocalTypesWithSnapshot as Qt, show as R, formatKeyValueTable as Rt, listApps as S, commonArgs as Sn, triggerCommand as St, healthCommand as T, deploymentArgs as Tn, listExecutors as Tt, updateCommand$1 as U, waitForExecution$1 as Ut, remove as V, deploy as Vt, updateOrganization as W, MIGRATION_LABEL_KEY as Wt, getOrganization as X, MIGRATE_FILE_NAME as Xt, getCommand$1 as Y, INITIAL_SCHEMA_NUMBER as Yt, updateCommand$2 as Z, SCHEMA_FILE_NAME as Zt, getWorkspace as _, prompt as _n, listFunctionRegistries as _t, updateUser as a, getMigrationFiles as an, createCommand$1 as at, createCommand as b, assertWritable as bn, listWebhookExecutors as bt, listCommand as c, loadDiff as cn, listOAuth2Clients as ct, inviteUser as d, formatMigrationDiff as dn, getMachineUserToken as dt, createSnapshotFromLocalTypes as en, listFolders as et, restoreCommand as f, hasChanges as fn, tokenCommand as ft, getCommand as g, generateUserTypes as gn, listCommand$8 as gt, listWorkspaces as h, trnPrefix as hn, generate$1 as ht, updateCommand as i, getMigrationFilePath as in, deleteFolder as it, truncateCommand as j, startWorkflow as jt, listWorkflows as k, toPageDirection as kn, watchExecutorJob as kt, listUsers as l, reconstructSnapshotFromMigrations as ln, getCommand$3 as lt, listCommand$1 as m, sdkNameLabelKey as mn, listMachineUsers as mt, query as n, getLatestMigrationNumber as nn, getFolder as nt, removeCommand as o, getNextMigrationNumber as on, createFolder as ot, restoreWorkspace as p, getNamespacesWithMigrations as pn, listCommand$7 as pt, listCommand$4 as q, DB_TYPES_FILE_NAME as qt, queryCommand as r, getMigrationDirPath as rn, deleteCommand$1 as rt, removeUser as s, isValidMigrationNumber as sn, listCommand$6 as st, isNativeTypeScriptRuntime as t, formatMigrationNumber as tn, getCommand$2 as tt, inviteCommand as u, formatDiffSummary as un, getOAuth2Client as ut, deleteCommand as v, apiCommand as vn, getCommand$4 as vt, getAppHealth as w, confirmationArgs as wn, listCommand$9 as wt, createWorkspace as x, defineAppCommand as xn, webhookCommand as xt, deleteWorkspace as y, apiCall as yn, getFunctionRegistry as yt, showCommand as z, getCommand$6 as zt };
-//# sourceMappingURL=runtime-CQRrqhlV.mjs.map
+//# sourceMappingURL=runtime-DLFzjgEo.mjs.map