@tailor-platform/sdk 2.0.0-next.0 → 2.0.0-next.10

package/dist/tailor-proto/src/tailor/v1/idp_resource_pb.d.mts

@@ -0,0 +1,429 @@
+import { Namespace } from "./resource_pb.mjs";
+import { GenMessage } from "@bufbuild/protobuf/codegenv2";
+import { Message } from "@bufbuild/protobuf";
+import { Value } from "@bufbuild/protobuf/wkt";
+//#region ../tailor-proto/src/tailor/v1/idp_resource_pb.d.ts
+/**
+ * @generated from message tailor.v1.IdPService
+ */
+declare type IdPService = Message<"tailor.v1.IdPService"> & {
+  /**
+   * @generated from field: tailor.v1.Namespace namespace = 1;
+   */
+  namespace?: Namespace;
+  /**
+   * @generated from field: string authorization = 2;
+   */
+  authorization: string;
+  /**
+   * @generated from field: string provider_url = 3;
+   */
+  providerUrl: string;
+  /**
+   * @generated from field: tailor.v1.IdPUserAuthPolicy user_auth_policy = 4;
+   */
+  userAuthPolicy?: IdPUserAuthPolicy;
+  /**
+   * lang is the IETF BCP 47 language subtag.
+   *
+   * @generated from field: tailor.v1.IdPLang lang = 5;
+   */
+  lang: IdPLang;
+  /**
+   * publish_user_events indicates whether user lifecycle events (created, updated, deleted) are enabled.
+   * When enabled, events are published to the dataplane event topic.
+   *
+   * @generated from field: bool publish_user_events = 6;
+   */
+  publishUserEvents: boolean;
+  /**
+   * @generated from field: tailor.v1.IdPDisableGqlOperations disable_gql_operations = 7;
+   */
+  disableGqlOperations?: IdPDisableGqlOperations;
+  /**
+   * @generated from field: tailor.v1.IdPEmailConfig email_config = 8;
+   */
+  emailConfig?: IdPEmailConfig;
+  /**
+   * @generated from field: tailor.v1.IdPPermission permission = 9;
+   */
+  permission?: IdPPermission;
+};
+/**
+ * IdPPermission defines per-operation permission policies for IDP namespaces.
+ *
+ * @generated from message tailor.v1.IdPPermission
+ */
+declare type IdPPermission = Message<"tailor.v1.IdPPermission"> & {
+  /**
+   * @generated from field: repeated tailor.v1.IdPPermissionPolicy create = 1;
+   */
+  create: IdPPermissionPolicy[];
+  /**
+   * @generated from field: repeated tailor.v1.IdPPermissionPolicy read = 2;
+   */
+  read: IdPPermissionPolicy[];
+  /**
+   * @generated from field: repeated tailor.v1.IdPPermissionPolicy update = 3;
+   */
+  update: IdPPermissionPolicy[];
+  /**
+   * @generated from field: repeated tailor.v1.IdPPermissionPolicy delete = 4;
+   */
+  delete: IdPPermissionPolicy[];
+  /**
+   * @generated from field: repeated tailor.v1.IdPPermissionPolicy send_password_reset_email = 5;
+   */
+  sendPasswordResetEmail: IdPPermissionPolicy[];
+  /**
+   * unenroll_mfa policies guard the dataplane MFA-unenroll mutation, which
+   * removes a single enrolled MFA factor from a user.
+   *
+   * @generated from field: repeated tailor.v1.IdPPermissionPolicy unenroll_mfa = 6;
+   */
+  unenrollMfa: IdPPermissionPolicy[];
+};
+/**
+ * @generated from message tailor.v1.IdPPermissionPolicy
+ */
+declare type IdPPermissionPolicy = Message<"tailor.v1.IdPPermissionPolicy"> & {
+  /**
+   * @generated from field: repeated tailor.v1.IdPPermissionCondition conditions = 1;
+   */
+  conditions: IdPPermissionCondition[];
+  /**
+   * @generated from field: tailor.v1.IdPPermissionPermit permit = 2;
+   */
+  permit: IdPPermissionPermit;
+  /**
+   * @generated from field: optional string description = 3;
+   */
+  description?: string;
+};
+/**
+ * @generated from message tailor.v1.IdPPermissionCondition
+ */
+declare type IdPPermissionCondition = Message<"tailor.v1.IdPPermissionCondition"> & {
+  /**
+   * @generated from field: tailor.v1.IdPPermissionOperand left = 1;
+   */
+  left?: IdPPermissionOperand;
+  /**
+   * @generated from field: tailor.v1.IdPPermissionOperator operator = 2;
+   */
+  operator: IdPPermissionOperator;
+  /**
+   * @generated from field: tailor.v1.IdPPermissionOperand right = 3;
+   */
+  right?: IdPPermissionOperand;
+};
+/**
+ * @generated from message tailor.v1.IdPPermissionOperand
+ */
+declare type IdPPermissionOperand = Message<"tailor.v1.IdPPermissionOperand"> & {
+  /**
+   * @generated from oneof tailor.v1.IdPPermissionOperand.kind
+   */
+  kind: {
+    /**
+     * @generated from field: string user_field = 1;
+     */
+    value: string;
+    case: "userField";
+  } | {
+    /**
+     * @generated from field: string idp_user_field = 2;
+     */
+    value: string;
+    case: "idpUserField";
+  } | {
+    /**
+     * @generated from field: string old_idp_user_field = 3;
+     */
+    value: string;
+    case: "oldIdpUserField";
+  } | {
+    /**
+     * @generated from field: string new_idp_user_field = 4;
+     */
+    value: string;
+    case: "newIdpUserField";
+  } | {
+    /**
+     * @generated from field: google.protobuf.Value value = 5;
+     */
+    value: Value;
+    case: "value";
+  } | {
+    case: undefined;
+    value?: undefined;
+  };
+};
+/**
+ * IdPDisableGqlOperations controls which IdP-related GraphQL operations are disabled.
+ *
+ * @generated from message tailor.v1.IdPDisableGqlOperations
+ */
+declare type IdPDisableGqlOperations = Message<"tailor.v1.IdPDisableGqlOperations"> & {
+  /**
+   * create disables the _createUser GraphQL mutation.
+   *
+   * @generated from field: bool create = 1;
+   */
+  create: boolean;
+  /**
+   * update disables the _updateUser GraphQL mutation.
+   *
+   * @generated from field: bool update = 2;
+   */
+  update: boolean;
+  /**
+   * delete disables the _deleteUser GraphQL mutation.
+   *
+   * @generated from field: bool delete = 3;
+   */
+  delete: boolean;
+  /**
+   * read disables the _users and _user GraphQL queries.
+   *
+   * @generated from field: bool read = 4;
+   */
+  read: boolean;
+  /**
+   * send_password_reset_email disables the _sendPasswordResetEmail GraphQL mutation.
+   *
+   * @generated from field: bool send_password_reset_email = 5;
+   */
+  sendPasswordResetEmail: boolean;
+  /**
+   * request_mfa_settings_url disables the _requestMfaSettingsUrl GraphQL query.
+   *
+   * @generated from field: bool request_mfa_settings_url = 6;
+   */
+  requestMfaSettingsUrl: boolean;
+  /**
+   * unenroll_mfa disables the _unenrollMfa GraphQL mutation.
+   *
+   * @generated from field: bool unenroll_mfa = 7;
+   */
+  unenrollMfa: boolean;
+};
+/**
+ * IdPEmailConfig holds namespace-level email configuration defaults.
+ *
+ * @generated from message tailor.v1.IdPEmailConfig
+ */
+declare type IdPEmailConfig = Message<"tailor.v1.IdPEmailConfig"> & {
+  /**
+   * from_name is the default sender display name for emails. Empty means use mailer default.
+   *
+   * @generated from field: string from_name = 1;
+   */
+  fromName: string;
+  /**
+   * password_reset_subject is the default subject for password reset emails. Empty means use localized default.
+   *
+   * @generated from field: string password_reset_subject = 2;
+   */
+  passwordResetSubject: string;
+};
+/**
+ * @generated from message tailor.v1.IdPClient
+ */
+declare type IdPClient = Message<"tailor.v1.IdPClient"> & {
+  /**
+   * @generated from field: string name = 1;
+   */
+  name: string;
+  /**
+   * @generated from field: string client_id = 2;
+   */
+  clientId: string;
+  /**
+   * @generated from field: string client_secret = 3;
+   */
+  clientSecret: string;
+};
+/**
+ * @generated from message tailor.v1.IdPUserAuthPolicy
+ */
+declare type IdPUserAuthPolicy = Message<"tailor.v1.IdPUserAuthPolicy"> & {
+  /**
+   * @generated from field: bool use_non_email_identifier = 1;
+   */
+  useNonEmailIdentifier: boolean;
+  /**
+   * @generated from field: bool allow_self_password_reset = 2;
+   */
+  allowSelfPasswordReset: boolean;
+  /**
+   * Password policy fields (stored in Identity Platform, not in DB)
+   *
+   * @generated from field: bool password_require_uppercase = 3;
+   */
+  passwordRequireUppercase: boolean;
+  /**
+   * @generated from field: bool password_require_lowercase = 4;
+   */
+  passwordRequireLowercase: boolean;
+  /**
+   * @generated from field: bool password_require_non_alphanumeric = 5;
+   */
+  passwordRequireNonAlphanumeric: boolean;
+  /**
+   * @generated from field: bool password_require_numeric = 6;
+   */
+  passwordRequireNumeric: boolean;
+  /**
+   * password_min_length: valid range is 6-30 (default: 6). When 0 (unset), uses default value 6.
+   *
+   * @generated from field: int32 password_min_length = 7;
+   */
+  passwordMinLength: number;
+  /**
+   * password_max_length: valid range is 6-4096 (default: 4096). When 0 (unset), uses default value 4096.
+   *
+   * @generated from field: int32 password_max_length = 8;
+   */
+  passwordMaxLength: number;
+  /**
+   * List of allowed email domains (e.g., ["example.com", "corp.example.com"])
+   * Empty list means all domains are allowed (backward compatible)
+   * Cannot be set when use_non_email_identifier is true
+   *
+   * @generated from field: repeated string allowed_email_domains = 9;
+   */
+  allowedEmailDomains: string[];
+  /**
+   * allow_google_oauth enables "Sign in with Google" for this namespace.
+   * When enabled, users can authenticate using their Google account.
+   * Cannot be enabled when use_non_email_identifier is true.
+   * Requires allowed_email_domains to be set.
+   *
+   * @generated from field: bool allow_google_oauth = 10;
+   */
+  allowGoogleOauth: boolean;
+  /**
+   * disable_password_auth disables password-based authentication for this namespace.
+   * When enabled, users cannot sign in or reset their password using email/password.
+   * Requires allow_google_oauth or allow_microsoft_oauth to be enabled.
+   * Cannot be used with allow_self_password_reset.
+   *
+   * @generated from field: bool disable_password_auth = 11;
+   */
+  disablePasswordAuth: boolean;
+  /**
+   * allow_microsoft_oauth enables "Sign in with Microsoft" for this namespace.
+   * Requires disable_password_auth to be true.
+   * Cannot be enabled when use_non_email_identifier is true.
+   *
+   * @generated from field: bool allow_microsoft_oauth = 12;
+   */
+  allowMicrosoftOauth: boolean;
+  /**
+   * enable_mfa makes TOTP MFA available for users in this namespace. When true the
+   * Identity Platform tenant has mfaConfig.State=ENABLED. When false, MFA cannot
+   * be enrolled or challenged regardless of require_mfa.
+   *
+   * @generated from field: bool enable_mfa = 13;
+   */
+  enableMfa: boolean;
+  /**
+   * require_mfa enforces TOTP MFA enrollment and challenge for password-authenticated
+   * users in this namespace. OAuth (Google/Microsoft) sign-in is not affected.
+   * Requires enable_mfa to be true.
+   *
+   * @generated from field: bool require_mfa = 14;
+   */
+  requireMfa: boolean;
+  /**
+   * allowed_return_origins lists application origins (e.g. "https://app.example.com")
+   * that the IdP is allowed to redirect users back to from self-service pages such
+   * as /mfa/settings. This is intentionally separate from OIDC redirect_uri, and
+   * covers the general case of "send the user back to the app after an action in
+   * the IdP UI". Each entry must be an origin (RFC 6454, scheme + host + optional
+   * port, no path, query, or fragment). The caller's returnTo URL may freely
+   * include a path and query; the matcher extracts its origin and compares against
+   * this list.
+   *
+   * The per-item pattern is stricter than RFC 6454 by design:
+   *   - host must match [a-zA-Z0-9.-]+ (DNS-friendly), so IPv6 literals
+   *     (http://[::1]) and underscores in hostnames are not accepted
+   *   - only http and https schemes are allowed
+   *   - path / query / fragment are rejected, since matching is origin-only
+   *
+   * @generated from field: repeated string allowed_return_origins = 15;
+   */
+  allowedReturnOrigins: string[];
+  /**
+   * mfa_issuer is the label shown next to the user account in authenticator apps
+   * (Google Authenticator, 1Password, etc.) when TOTP is enrolled. When empty the
+   * server falls back to "Tailor Platform IdP".
+   *
+   * @generated from field: string mfa_issuer = 16;
+   */
+  mfaIssuer: string;
+};
+/**
+ * @generated from enum tailor.v1.IdPPermissionOperator
+ */
+declare enum IdPPermissionOperator {
+  /**
+   * @generated from enum value: ID_P_PERMISSION_OPERATOR_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: ID_P_PERMISSION_OPERATOR_EQ = 1;
+   */
+  EQ = 1,
+  /**
+   * @generated from enum value: ID_P_PERMISSION_OPERATOR_NE = 2;
+   */
+  NE = 2,
+  /**
+   * @generated from enum value: ID_P_PERMISSION_OPERATOR_IN = 3;
+   */
+  IN = 3,
+  /**
+   * @generated from enum value: ID_P_PERMISSION_OPERATOR_NIN = 4;
+   */
+  NIN = 4
+}
+/**
+ * @generated from enum tailor.v1.IdPPermissionPermit
+ */
+declare enum IdPPermissionPermit {
+  /**
+   * @generated from enum value: ID_P_PERMISSION_PERMIT_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: ID_P_PERMISSION_PERMIT_ALLOW = 1;
+   */
+  ALLOW = 1,
+  /**
+   * @generated from enum value: ID_P_PERMISSION_PERMIT_DENY = 2;
+   */
+  DENY = 2
+}
+/**
+ * IdPLang represents the IETF BCP 47 language subtag.
+ *
+ * @generated from enum tailor.v1.IdPLang
+ */
+declare enum IdPLang {
+  /**
+   * @generated from enum value: ID_P_LANG_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: ID_P_LANG_EN = 1;
+   */
+  EN = 1,
+  /**
+   * @generated from enum value: ID_P_LANG_JA = 2;
+   */
+  JA = 2
+}
+//#endregion
+export { IdPClient, IdPDisableGqlOperations, IdPEmailConfig, IdPLang, IdPPermission, IdPPermissionCondition, IdPPermissionOperand, IdPPermissionOperator, IdPPermissionPermit, IdPPermissionPolicy, IdPService, IdPUserAuthPolicy };

package/dist/tailor-proto/src/tailor/v1/metadata_pb.d.mts

@@ -0,0 +1,72 @@
+import { Metadata } from "./metadata_resource_pb.mjs";
+import { GenMessage } from "@bufbuild/protobuf/codegenv2";
+import { Message } from "@bufbuild/protobuf";
+//#region ../tailor-proto/src/tailor/v1/metadata_pb.d.ts
+/**
+ * @generated from message tailor.v1.SetMetadataRequest
+ */
+declare type SetMetadataRequest = Message<"tailor.v1.SetMetadataRequest"> & {
+  /**
+   * @generated from field: string trn = 1;
+   */
+  trn: string;
+  /**
+   * @generated from field: map<string, string> labels = 2;
+   */
+  labels: {
+    [key: string]: string;
+  };
+};
+/**
+ * Describes the message tailor.v1.SetMetadataRequest.
+ * Use `create(SetMetadataRequestSchema)` to create a new message.
+ */
+declare const SetMetadataRequestSchema: GenMessage<SetMetadataRequest>;
+/**
+ * @generated from message tailor.v1.SetMetadataResponse
+ */
+declare type SetMetadataResponse = Message<"tailor.v1.SetMetadataResponse"> & {
+  /**
+   * @generated from field: tailor.v1.Metadata metadata = 1;
+   */
+  metadata?: Metadata;
+};
+/**
+ * Describes the message tailor.v1.SetMetadataResponse.
+ * Use `create(SetMetadataResponseSchema)` to create a new message.
+ */
+declare const SetMetadataResponseSchema: GenMessage<SetMetadataResponse>;
+/**
+ * GetMetadataRequest retrieves metadata for a resource.
+ *
+ * @generated from message tailor.v1.GetMetadataRequest
+ */
+declare type GetMetadataRequest = Message<"tailor.v1.GetMetadataRequest"> & {
+  /**
+   * @generated from field: string trn = 1;
+   */
+  trn: string;
+};
+/**
+ * Describes the message tailor.v1.GetMetadataRequest.
+ * Use `create(GetMetadataRequestSchema)` to create a new message.
+ */
+declare const GetMetadataRequestSchema: GenMessage<GetMetadataRequest>;
+/**
+ * GetMetadataResponse returns the metadata for a resource.
+ *
+ * @generated from message tailor.v1.GetMetadataResponse
+ */
+declare type GetMetadataResponse = Message<"tailor.v1.GetMetadataResponse"> & {
+  /**
+   * @generated from field: tailor.v1.Metadata metadata = 1;
+   */
+  metadata?: Metadata;
+};
+/**
+ * Describes the message tailor.v1.GetMetadataResponse.
+ * Use `create(GetMetadataResponseSchema)` to create a new message.
+ */
+declare const GetMetadataResponseSchema: GenMessage<GetMetadataResponse>;
+//#endregion
+export { GetMetadataRequest, GetMetadataRequestSchema, GetMetadataResponse, GetMetadataResponseSchema, SetMetadataRequest, SetMetadataRequestSchema, SetMetadataResponse, SetMetadataResponseSchema };

package/dist/tailor-proto/src/tailor/v1/metadata_resource_pb.d.mts

@@ -0,0 +1,16 @@
+import { GenMessage } from "@bufbuild/protobuf/codegenv2";
+import { Message } from "@bufbuild/protobuf";
+//#region ../tailor-proto/src/tailor/v1/metadata_resource_pb.d.ts
+/**
+ * @generated from message tailor.v1.Metadata
+ */
+declare type Metadata = Message<"tailor.v1.Metadata"> & {
+  /**
+   * @generated from field: map<string, string> labels = 1;
+   */
+  labels: {
+    [key: string]: string;
+  };
+};
+//#endregion
+export { Metadata };