@tailor-platform/sdk 1.76.1 → 1.78.0

package/dist/tailor-proto/src/tailor/v1/tailordb_pb.d.mts

@@ -3,7 +3,6 @@ import { TailorDBGQLPermission, TailorDBService, TailorDBType } from "./tailordb
 import { GenMessage } from "@bufbuild/protobuf/codegenv2";
 import { Message } from "@bufbuild/protobuf";
 import { FieldMask } from "@bufbuild/protobuf/wkt";
-
 //#region ../tailor-proto/src/tailor/v1/tailordb_pb.d.ts
 /**
  * @generated from message tailor.v1.ComposeTailorDBSDLRequest

package/dist/tailor-proto/src/tailor/v1/tailordb_resource_pb.d.mts

@@ -2,7 +2,6 @@ import { Namespace, Script } from "./resource_pb.mjs";
 import { GenMessage } from "@bufbuild/protobuf/codegenv2";
 import { Message } from "@bufbuild/protobuf";
 import { Value } from "@bufbuild/protobuf/wkt";
-
 //#region ../tailor-proto/src/tailor/v1/tailordb_resource_pb.d.ts
 /**
  * @generated from message tailor.v1.TailorDBService

package/dist/tailor-proto/src/tailor/v1/telemetryrouter_pb.d.mts

@@ -2,7 +2,6 @@ import { PageDirection } from "./resource_pb.mjs";
 import { OTLPExporter, ResourceAttributesConfig } from "./telemetryrouter_resource_pb.mjs";
 import { GenMessage } from "@bufbuild/protobuf/codegenv2";
 import { Message } from "@bufbuild/protobuf";
-
 //#region ../tailor-proto/src/tailor/v1/telemetryrouter_pb.d.ts
 /**
  * @generated from message tailor.v1.CreateOTLPExporterRequest

package/dist/tailor-proto/src/tailor/v1/telemetryrouter_resource_pb.d.mts

@@ -2,7 +2,6 @@ import { SecretValue } from "./secret_manager_resource_pb.mjs";
 import { GenMessage } from "@bufbuild/protobuf/codegenv2";
 import { Message } from "@bufbuild/protobuf";
 import { Timestamp } from "@bufbuild/protobuf/wkt";
-
 //#region ../tailor-proto/src/tailor/v1/telemetryrouter_resource_pb.d.ts
 /**
  * @generated from message tailor.v1.OTLPExporter

package/dist/tailor-proto/src/tailor/v1/workflow_pb.d.mts

@@ -3,7 +3,6 @@ import { AuthInvoker } from "./auth_resource_pb.mjs";
 import { ConcurrencyPolicy, RetryPolicy, Workflow, WorkflowExecution, WorkflowJobFunction, WorkflowJobFunctionExecutionPolicy, WorkflowJobFunctionSummary } from "./workflow_resource_pb.mjs";
 import { GenMessage } from "@bufbuild/protobuf/codegenv2";
 import { Message } from "@bufbuild/protobuf";
-
 //#region ../tailor-proto/src/tailor/v1/workflow_pb.d.ts
 /**
  * @generated from message tailor.v1.CreateWorkflowRequest

package/dist/tailor-proto/src/tailor/v1/workflow_resource_pb.d.mts

@@ -1,7 +1,6 @@
 import { GenMessage } from "@bufbuild/protobuf/codegenv2";
 import { Message } from "@bufbuild/protobuf";
 import { Duration, Timestamp } from "@bufbuild/protobuf/wkt";
-
 //#region ../tailor-proto/src/tailor/v1/workflow_resource_pb.d.ts
 /**
  * @generated from message tailor.v1.WorkflowJobFunction

package/dist/tailor-proto/src/tailor/v1/workspace_pb.d.mts

@@ -3,7 +3,6 @@ import { PageDirection } from "./resource_pb.mjs";
 import { GenMessage } from "@bufbuild/protobuf/codegenv2";
 import { Message } from "@bufbuild/protobuf";
 import { FieldMask, Timestamp } from "@bufbuild/protobuf/wkt";
-
 //#region ../tailor-proto/src/tailor/v1/workspace_pb.d.ts
 /**
  * @generated from message tailor.v1.ListAvailableWorkspaceRegionsRequest

package/dist/tailor-proto/src/tailor/v1/workspace_resource_pb.d.mts

@@ -1,7 +1,6 @@
 import { GenMessage } from "@bufbuild/protobuf/codegenv2";
 import { Message } from "@bufbuild/protobuf";
 import { Timestamp } from "@bufbuild/protobuf/wkt";
-
 //#region ../tailor-proto/src/tailor/v1/workspace_resource_pb.d.ts
 /**
  * @generated from message tailor.v1.Organization

package/dist/test-env-key-DuZycyWM.mjs

@@ -0,0 +1,49 @@
+//#region src/configure/services/workflow/test-env-key.ts
+const SLOT_KEY = "__tailorWorkflowTestEnv";
+/**
+* Read the test-time env slot.
+* @returns Current env, or `undefined` when unset.
+* @internal
+*/
+function readWorkflowTestEnv() {
+	return globalThis[SLOT_KEY];
+}
+/**
+* Write the test-time env slot.
+* @param env - Env value to expose to `.trigger()` bodies.
+* @internal
+*/
+function writeWorkflowTestEnv(env) {
+	globalThis[SLOT_KEY] = env;
+}
+/**
+* Clear the test-time env slot.
+* @internal
+*/
+function clearWorkflowTestEnv() {
+	delete globalThis[SLOT_KEY];
+}
+/**
+* Env-var fallback read by `.trigger()` when `mockWorkflow().setEnv()` is unset.
+* @deprecated Use `mockWorkflow().setEnv()` from `@tailor-platform/sdk/vitest`.
+* @internal
+*/
+const WORKFLOW_TEST_ENV_KEY = "TAILOR_TEST_WORKFLOW_ENV";
+function buildJobContext() {
+	const fromGlobal = readWorkflowTestEnv();
+	if (fromGlobal !== void 0) return { env: { ...fromGlobal } };
+	const raw = process.env[WORKFLOW_TEST_ENV_KEY];
+	if (!raw) return { env: {} };
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch (cause) {
+		throw new Error(`Invalid JSON in ${WORKFLOW_TEST_ENV_KEY}; provide valid JSON or use mockWorkflow().setEnv().`, { cause });
+	}
+	if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error(`${WORKFLOW_TEST_ENV_KEY} must be a JSON object; provide a record or use mockWorkflow().setEnv().`);
+	return { env: { ...parsed } };
+}
+
+//#endregion
+export { writeWorkflowTestEnv as a, readWorkflowTestEnv as i, buildJobContext as n, clearWorkflowTestEnv as r, WORKFLOW_TEST_ENV_KEY as t };
+//# sourceMappingURL=test-env-key-DuZycyWM.mjs.map

package/dist/test-env-key-DuZycyWM.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-env-key-DuZycyWM.mjs","names":[],"sources":["../src/configure/services/workflow/test-env-key.ts"],"sourcesContent":["/**\n * Typed accessors for the test-time globalThis slot used to pass `env` from\n * `mockWorkflow().setEnv()` (in `@tailor-platform/sdk/vitest`) to\n * `createWorkflowJob().trigger()` bodies. The slot key is private to this\n * module; callers go through the get/set/clear functions below so both sides\n * share the same access path.\n *\n * Lives in its own file (with no `@/` imports) so `vitest/mock.ts` can load\n * it from nested Vitest configs that do not resolve `@/` aliases.\n * @internal\n */\nimport type { TailorEnv, TailorInvoker } from \"../../../runtime/types\";\n\nconst SLOT_KEY = \"__tailorWorkflowTestEnv\";\n\n/**\n * Read the test-time env slot.\n * @returns Current env, or `undefined` when unset.\n * @internal\n */\nexport function readWorkflowTestEnv(): TailorEnv | undefined {\n  return (globalThis as unknown as Record<string, TailorEnv | undefined>)[SLOT_KEY];\n}\n\n/**\n * Write the test-time env slot.\n * @param env - Env value to expose to `.trigger()` bodies.\n * @internal\n */\nexport function writeWorkflowTestEnv(env: TailorEnv): void {\n  (globalThis as unknown as Record<string, TailorEnv>)[SLOT_KEY] = env;\n}\n\n/**\n * Clear the test-time env slot.\n * @internal\n */\nexport function clearWorkflowTestEnv(): void {\n  delete (globalThis as unknown as Record<string, unknown>)[SLOT_KEY];\n}\n\n/**\n * Env-var fallback read by `.trigger()` when `mockWorkflow().setEnv()` is unset.\n * @deprecated Use `mockWorkflow().setEnv()` from `@tailor-platform/sdk/vitest`.\n * @internal\n */\nexport const WORKFLOW_TEST_ENV_KEY = \"TAILOR_TEST_WORKFLOW_ENV\";\n\n// env from `mockWorkflow().setEnv()`, else the deprecated env-var. Shallow-copied\n// to isolate against cross-trigger mutation.\nexport function buildJobContext(): { env: TailorEnv; invoker?: TailorInvoker } {\n  const fromGlobal = readWorkflowTestEnv();\n  if (fromGlobal !== undefined) return { env: { ...fromGlobal } };\n  const raw = process.env[WORKFLOW_TEST_ENV_KEY];\n  if (!raw) return { env: {} as TailorEnv };\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch (cause) {\n    throw new Error(\n      `Invalid JSON in ${WORKFLOW_TEST_ENV_KEY}; provide valid JSON or use mockWorkflow().setEnv().`,\n      { cause },\n    );\n  }\n  if (parsed === null || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    throw new Error(\n      `${WORKFLOW_TEST_ENV_KEY} must be a JSON object; provide a record or use mockWorkflow().setEnv().`,\n    );\n  }\n  return { env: { ...(parsed as TailorEnv) } };\n}\n"],"mappings":";AAaA,MAAM,WAAW;;;;;;AAOjB,SAAgB,sBAA6C;CAC3D,OAAQ,WAAgE;AAC1E;;;;;;AAOA,SAAgB,qBAAqB,KAAsB;CACzD,AAAC,WAAoD,YAAY;AACnE;;;;;AAMA,SAAgB,uBAA6B;CAC3C,OAAQ,WAAkD;AAC5D;;;;;;AAOA,MAAa,wBAAwB;AAIrC,SAAgB,kBAA+D;CAC7E,MAAM,aAAa,oBAAoB;CACvC,IAAI,eAAe,QAAW,OAAO,EAAE,KAAK,EAAE,GAAG,WAAW,EAAE;CAC9D,MAAM,MAAM,QAAQ,IAAI;CACxB,IAAI,CAAC,KAAK,OAAO,EAAE,KAAK,CAAC,EAAe;CACxC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,SAAS,OAAO;EACd,MAAM,IAAI,MACR,mBAAmB,sBAAsB,uDACzC,EAAE,MAAM,CACV;CACF;CACA,IAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GACvE,MAAM,IAAI,MACR,GAAG,sBAAsB,yEAC3B;CAEF,OAAO,EAAE,KAAK,EAAE,GAAI,OAAqB,EAAE;AAC7C"}

package/dist/type-source-DH_LH20p.mjs

@@ -0,0 +1,13 @@
+//#region src/parser/service/tailordb/type-source.ts
+/**
+* Checks if a type source is generated by a plugin.
+* @param source - The type source entry to check.
+* @returns True if the source was generated by a plugin.
+*/
+function isPluginGeneratedType(source) {
+	return source.pluginId !== void 0;
+}
+
+//#endregion
+export { isPluginGeneratedType as t };
+//# sourceMappingURL=type-source-DH_LH20p.mjs.map

package/dist/type-source-DH_LH20p.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-source-DH_LH20p.mjs","names":[],"sources":["../src/parser/service/tailordb/type-source.ts"],"sourcesContent":["import type { PluginGeneratedTypeSource, TypeSourceInfoEntry } from \"./types\";\n\n/**\n * Checks if a type source is generated by a plugin.\n * @param source - The type source entry to check.\n * @returns True if the source was generated by a plugin.\n */\nexport function isPluginGeneratedType(\n  source: TypeSourceInfoEntry,\n): source is PluginGeneratedTypeSource {\n  return source.pluginId !== undefined;\n}\n"],"mappings":";;;;;;AAOA,SAAgB,sBACd,QACqC;CACrC,OAAO,OAAO,aAAa;AAC7B"}

package/dist/types/aigateway.generated.d.mts

@@ -1,7 +1,10 @@
 //#region src/types/aigateway.generated.d.ts
 type AIGateway = {
-  /** AI Gateway name */name: string; /** Auth namespace used to resolve request tokens against the workspace's auth */
-  authNamespace: string; /** Allowed CORS origins for browser-based clients. Each entry is `*`, `http(s)://*`, `http(s)://*.example.com`, or `http(s)://app.example.com`, optionally with `:port`. Empty list disables cross-origin access. */
+  /** AI Gateway name */
+  name: string;
+  /** Auth namespace used to resolve request tokens against the workspace's auth */
+  authNamespace: string;
+  /** Allowed CORS origins for browser-based clients. Each entry is `*`, `http(s)://*`, `http(s)://*.example.com`, or `http(s)://app.example.com`, optionally with `:port`. Empty list disables cross-origin access. */
   cors?: string[] | undefined;
 };
 type AIGatewayInput = AIGateway;

package/dist/types/auth-connection.generated.d.mts

@@ -1,10 +1,16 @@
 //#region src/types/auth-connection.generated.d.ts
 type AuthConnectionOAuth2Config = {
-  /** OAuth2 provider URL */providerUrl: string; /** OAuth2 issuer URL */
-  issuerUrl: string; /** OAuth2 client ID */
-  clientId: string; /** OAuth2 client secret */
-  clientSecret: string; /** OAuth2 authorization endpoint override */
-  authUrl?: string | undefined; /** OAuth2 token endpoint override */
+  /** OAuth2 provider URL */
+  providerUrl: string;
+  /** OAuth2 issuer URL */
+  issuerUrl: string;
+  /** OAuth2 client ID */
+  clientId: string;
+  /** OAuth2 client secret */
+  clientSecret: string;
+  /** OAuth2 authorization endpoint override */
+  authUrl?: string | undefined;
+  /** OAuth2 token endpoint override */
   tokenUrl?: string | undefined;
 };
 type AuthConnectionConfig = {

package/dist/types/auth.generated.d.mts

@@ -1,98 +1,155 @@
 //#region src/types/auth.generated.d.ts
 type AuthInvokerObject = {
-  /** Auth namespace */namespace: string; /** Machine user name for authentication */
+  /** Auth namespace */
+  namespace: string;
+  /** Machine user name for authentication */
   machineUserName: string;
 };
 type AuthInvoker = AuthInvokerObject;
 type OIDC = {
-  /** Identity provider name */name: string;
-  kind: "OIDC"; /** OAuth2 client ID */
-  clientID: string; /** OAuth2 client secret */
+  /** Identity provider name */
+  name: string;
+  kind: "OIDC";
+  /** OAuth2 client ID */
+  clientID: string;
+  /** OAuth2 client secret */
   clientSecret: {
     vaultName: string;
     secretKey: string;
-  }; /** OIDC provider URL */
-  providerURL: string; /** OIDC issuer URL (defaults to providerURL) */
-  issuerURL?: string | undefined; /** JWT claim to use as username */
+  };
+  /** OIDC provider URL */
+  providerURL: string;
+  /** OIDC issuer URL (defaults to providerURL) */
+  issuerURL?: string | undefined;
+  /** JWT claim to use as username */
   usernameClaim?: string | undefined;
 };
 type SAML = {
-  /** Identity provider name */name: string;
-  kind: "SAML"; /** Enable signing of SAML requests */
-  enableSignRequest: boolean; /** URL to fetch SAML metadata (mutually exclusive with rawMetadata) */
-  metadataURL?: string | undefined; /** Raw SAML metadata XML (mutually exclusive with metadataURL) */
-  rawMetadata?: string | undefined; /** URL to redirect to when SAML ACS receives a response with an empty RelayState. */
+  /** Identity provider name */
+  name: string;
+  kind: "SAML";
+  /** Enable signing of SAML requests */
+  enableSignRequest: boolean;
+  /** URL to fetch SAML metadata (mutually exclusive with rawMetadata) */
+  metadataURL?: string | undefined;
+  /** Raw SAML metadata XML (mutually exclusive with metadataURL) */
+  rawMetadata?: string | undefined;
+  /** URL to redirect to when SAML ACS receives a response with an empty RelayState. */
   defaultRedirectURL?: string | undefined;
 };
 type IDToken = {
-  /** Identity provider name */name: string;
-  kind: "IDToken"; /** ID token provider URL */
-  providerURL: string; /** Client ID for ID token validation */
-  clientID: string; /** ID token issuer URL */
-  issuerURL?: string | undefined; /** JWT claim to use as username */
+  /** Identity provider name */
+  name: string;
+  kind: "IDToken";
+  /** ID token provider URL */
+  providerURL: string;
+  /** Client ID for ID token validation */
+  clientID: string;
+  /** ID token issuer URL */
+  issuerURL?: string | undefined;
+  /** JWT claim to use as username */
   usernameClaim?: string | undefined;
 };
 type BuiltinIdP = {
-  /** Identity provider name */name: string;
-  kind: "BuiltInIdP"; /** IdP namespace */
-  namespace: string; /** OAuth2 client name in the IdP */
+  /** Identity provider name */
+  name: string;
+  kind: "BuiltInIdP";
+  /** IdP namespace */
+  namespace: string;
+  /** OAuth2 client name in the IdP */
   clientName: string;
 };
 type IdProvider = OIDC | SAML | IDToken | BuiltinIdP;
 type OAuth2ClientInput = {
-  /** Allowed redirect URIs */redirectURIs: (`https://${string}` | `http://${string}` | `${string}:url` | `${string}:url/${string}`)[]; /** Client description */
-  description?: string | undefined; /** Allowed OAuth2 grant types */
-  grantTypes?: ("authorization_code" | "refresh_token")[] | undefined; /** OAuth2 client type */
-  clientType?: "confidential" | "public" | "browser" | undefined; /** Access token lifetime in seconds (60-86400) */
-  accessTokenLifetimeSeconds?: number | undefined; /** Refresh token lifetime in seconds (60-604800) */
-  refreshTokenLifetimeSeconds?: number | undefined; /** Require DPoP (Demonstrating Proof-of-Possession) for token requests */
+  /** Allowed redirect URIs */
+  redirectURIs: (`https://${string}` | `http://${string}` | `${string}:url` | `${string}:url/${string}`)[];
+  /** Client description */
+  description?: string | undefined;
+  /** Allowed OAuth2 grant types */
+  grantTypes?: ("authorization_code" | "refresh_token")[] | undefined;
+  /** OAuth2 client type */
+  clientType?: "confidential" | "public" | "browser" | undefined;
+  /** Access token lifetime in seconds (60-86400) */
+  accessTokenLifetimeSeconds?: number | undefined;
+  /** Refresh token lifetime in seconds (60-604800) */
+  refreshTokenLifetimeSeconds?: number | undefined;
+  /** Require DPoP (Demonstrating Proof-of-Possession) for token requests */
   requireDpop?: boolean | undefined;
 };
 type OAuth2Client = {
-  /** Allowed OAuth2 grant types */grantTypes: ("authorization_code" | "refresh_token")[]; /** Allowed redirect URIs */
-  redirectURIs: (`https://${string}` | `http://${string}` | `${string}:url` | `${string}:url/${string}`)[]; /** Access token lifetime in seconds (60-86400) */
+  /** Allowed OAuth2 grant types */
+  grantTypes: ("authorization_code" | "refresh_token")[];
+  /** Allowed redirect URIs */
+  redirectURIs: (`https://${string}` | `http://${string}` | `${string}:url` | `${string}:url/${string}`)[];
+  /** Access token lifetime in seconds (60-86400) */
   accessTokenLifetimeSeconds: {
     seconds: bigint;
     nanos: number;
-  } | undefined; /** Refresh token lifetime in seconds (60-604800) */
+  } | undefined;
+  /** Refresh token lifetime in seconds (60-604800) */
   refreshTokenLifetimeSeconds: {
     seconds: bigint;
     nanos: number;
-  } | undefined; /** Client description */
-  description?: string | undefined; /** OAuth2 client type */
-  clientType?: "confidential" | "public" | "browser" | undefined; /** Require DPoP (Demonstrating Proof-of-Possession) for token requests */
+  } | undefined;
+  /** Client description */
+  description?: string | undefined;
+  /** OAuth2 client type */
+  clientType?: "confidential" | "public" | "browser" | undefined;
+  /** Require DPoP (Demonstrating Proof-of-Possession) for token requests */
   requireDpop?: boolean | undefined;
 };
 type SCIMAuthorization = {
-  /** SCIM authorization type */type: "oauth2" | "bearer"; /** Bearer token secret (required for bearer type) */
+  /** SCIM authorization type */
+  type: "oauth2" | "bearer";
+  /** Bearer token secret (required for bearer type) */
   bearerSecret?: {
     vaultName: string;
     secretKey: string;
   } | undefined;
 };
+/**
+ * SCIM attribute data type
+ */
+type SCIMAttributeType = "string" | "number" | "boolean" | "datetime" | "complex";
 type SCIMAttribute = {
-  /** Attribute data type */type: "string" | "number" | "boolean" | "datetime" | "complex"; /** Attribute name */
-  name: string; /** Attribute description */
-  description?: string | undefined; /** Attribute mutability */
-  mutability?: "readOnly" | "readWrite" | "writeOnly" | undefined; /** Whether the attribute is required */
-  required?: boolean | undefined; /** Whether the attribute can have multiple values */
-  multiValued?: boolean | undefined; /** Uniqueness constraint */
-  uniqueness?: "none" | "server" | "global" | undefined; /** List of canonical values */
+  /** Attribute data type */
+  type: SCIMAttributeType;
+  /** Attribute name */
+  name: string;
+  /** Attribute description */
+  description?: string | undefined;
+  /** Attribute mutability */
+  mutability?: "readOnly" | "readWrite" | "writeOnly" | undefined;
+  /** Whether the attribute is required */
+  required?: boolean | undefined;
+  /** Whether the attribute can have multiple values */
+  multiValued?: boolean | undefined;
+  /** Uniqueness constraint */
+  uniqueness?: "none" | "server" | "global" | undefined;
+  /** List of canonical values */
   canonicalValues?: string[] | null | undefined;
   subAttributes?: SCIMAttribute[] | null | undefined;
 };
 type SCIMAttributeMapping = {
-  /** TailorDB field name to map to */tailorDBField: string; /** SCIM attribute path */
+  /** TailorDB field name to map to */
+  tailorDBField: string;
+  /** SCIM attribute path */
   scimPath: string;
 };
 type SCIMResource = {
-  /** SCIM resource name */name: string; /** TailorDB namespace for the resource */
-  tailorDBNamespace: string; /** TailorDB type name for the resource */
-  tailorDBType: string; /** Core SCIM schema definition */
+  /** SCIM resource name */
+  name: string;
+  /** TailorDB namespace for the resource */
+  tailorDBNamespace: string;
+  /** TailorDB type name for the resource */
+  tailorDBType: string;
+  /** Core SCIM schema definition */
   coreSchema: {
-    /** SCIM resource name */name: string;
+    /** SCIM resource name */
+    name: string;
     attributes: {
-      type: "string" | "number" | "boolean" | "datetime" | "complex"; /** SCIM resource name */
+      type: "string" | "number" | "boolean" | "datetime" | "complex";
+      /** SCIM resource name */
       name: string;
       description?: string | undefined;
       mutability?: "readOnly" | "readWrite" | "writeOnly" | undefined;
@@ -102,49 +159,25 @@ type SCIMResource = {
       canonicalValues?: string[] | null | undefined;
       subAttributes?: any[] | null | undefined;
     }[];
-  }; /** Attribute mapping configuration */
-  attributeMapping: {
-    tailorDBField: string;
-    scimPath: string;
-  }[];
+  };
+  /** Attribute mapping configuration */
+  attributeMapping: SCIMAttributeMapping[];
 };
 type SCIMConfig = {
-  /** Machine user name for SCIM operations */machineUserName: string; /** SCIM authorization configuration */
-  authorization: {
-    type: "oauth2" | "bearer";
-    bearerSecret?: {
-      vaultName: string;
-      secretKey: string;
-    } | undefined;
-  }; /** SCIM resource definitions */
-  resources: {
-    name: string;
-    tailorDBNamespace: string;
-    tailorDBType: string;
-    coreSchema: {
-      name: string;
-      attributes: {
-        type: "string" | "number" | "boolean" | "datetime" | "complex";
-        name: string;
-        description?: string | undefined;
-        mutability?: "readOnly" | "readWrite" | "writeOnly" | undefined;
-        required?: boolean | undefined;
-        multiValued?: boolean | undefined;
-        uniqueness?: "none" | "server" | "global" | undefined;
-        canonicalValues?: string[] | null | undefined;
-        subAttributes?: any[] | null | undefined;
-      }[];
-    };
-    attributeMapping: {
-      tailorDBField: string;
-      scimPath: string;
-    }[];
-  }[];
+  /** Machine user name for SCIM operations */
+  machineUserName: string;
+  /** SCIM authorization configuration */
+  authorization: SCIMAuthorization;
+  /** SCIM resource definitions */
+  resources: SCIMResource[];
 };
 type TenantProvider = {
-  /** TailorDB namespace for the tenant type */namespace: string; /** TailorDB type name for tenants */
-  type: string; /** Field used as the tenant signature */
+  /** TailorDB namespace for the tenant type */
+  namespace: string;
+  /** TailorDB type name for tenants */
+  type: string;
+  /** Field used as the tenant signature */
   signatureField: string;
 };
 //#endregion
-export { AuthInvoker, AuthInvokerObject, BuiltinIdP, IDToken, IdProvider, OAuth2Client, OAuth2ClientInput, OIDC, SAML, SCIMAttribute, SCIMAttributeMapping, SCIMAuthorization, SCIMConfig, SCIMResource, TenantProvider };
+export { AuthInvoker, AuthInvokerObject, BuiltinIdP, IDToken, IdProvider, OAuth2Client, OAuth2ClientInput, OIDC, SAML, SCIMAttribute, SCIMAttributeMapping, SCIMAttributeType, SCIMAuthorization, SCIMConfig, SCIMResource, TenantProvider };