@tailor-platform/sdk 2.0.0-next.2 → 2.0.0-next.3

package/dist/{workflow.generated-ClEjBYhm.d.mts → types/idp.generated.d.mts}

@@ -1,22 +1,3 @@
-import { h as TailorDBServiceInput } from "./types-CdcQh4Z2.mjs";
-import { t as AuthConfig, x as BuiltinIdP } from "./types-BX4q6Mo6.mjs";
-
-//#region src/types/aigateway.generated.d.ts
-type AIGateway = {
-  /** AI Gateway name */name: string; /** Auth namespace used to resolve request tokens against the workspace's auth */
-  authNamespace: string; /** Allowed CORS origins for browser-based clients. Each entry is `*`, `http(s)://*`, `http(s)://*.example.com`, or `http(s)://app.example.com`, optionally with `:port`. Empty list disables cross-origin access. */
-  cors?: string[] | undefined;
-};
-type AIGatewayInput = AIGateway;
-//#endregion
-//#region src/configure/services/aigateway/types.d.ts
-declare const aiGatewayDefinitionBrand: unique symbol;
-type AIGatewayDefinitionBrand = {
-  readonly [aiGatewayDefinitionBrand]: true;
-};
-/** Type accepted by `AppConfig.aiGateways`. Only values returned by `defineAIGateway()` satisfy this. */
-type AIGatewayConfig = AIGatewayInput & AIGatewayDefinitionBrand;
-//#endregion
 //#region src/types/idp.generated.d.ts
 /**
  * Configuration for GraphQL operations on IdP users.
@@ -28,6 +9,8 @@ type IdPGqlOperationsInput = "query" | {
   delete?: boolean | undefined;
   read?: boolean | undefined;
   sendPasswordResetEmail?: boolean | undefined;
+  requestMfaSettingsUrl?: boolean | undefined;
+  unenrollMfa?: boolean | undefined;
 };
 type IdPGqlOperations = {
   create?: boolean | undefined;
@@ -35,6 +18,8 @@ type IdPGqlOperations = {
   delete?: boolean | undefined;
   read?: boolean | undefined;
   sendPasswordResetEmail?: boolean | undefined;
+  requestMfaSettingsUrl?: boolean | undefined;
+  unenrollMfa?: boolean | undefined;
 };
 /**
  * Namespace-level email configuration defaults
@@ -63,6 +48,10 @@ type IdPInput = {
     allowGoogleOauth?: boolean | undefined;
     allowMicrosoftOauth?: boolean | undefined;
     disablePasswordAuth?: boolean | undefined;
+    enableMfa?: boolean | undefined;
+    requireMfa?: boolean | undefined;
+    allowedReturnOrigins?: string[] | undefined;
+    mfaIssuer?: string | undefined;
   } | undefined; /** Enable publishing user lifecycle events */
   publishUserEvents?: boolean | undefined; /** Configure which GraphQL operations are enabled */
   gqlOperations?: "query" | {
@@ -71,6 +60,8 @@ type IdPInput = {
     delete?: boolean | undefined;
     read?: boolean | undefined;
     sendPasswordResetEmail?: boolean | undefined;
+    requestMfaSettingsUrl?: boolean | undefined;
+    unenrollMfa?: boolean | undefined;
   } | undefined; /** Namespace-level email configuration defaults */
   emailConfig?: {
     fromName?: string | undefined;
@@ -417,7 +408,7 @@ type IdPInput = {
       description?: string | undefined;
       permit?: boolean | undefined;
     })[];
-    sendPasswordResetEmail: readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
+    sendPasswordResetEmail?: readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
       user: string;
     } | {
       idpUser: "name" | "id" | "disabled";
@@ -501,171 +492,93 @@ type IdPInput = {
       })])[];
       description?: string | undefined;
       permit?: boolean | undefined;
-    })[];
+    })[] | undefined;
+    unenrollMfa?: readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
+      user: string;
+    } | {
+      idpUser: "name" | "id" | "disabled";
+    } | {
+      oldIdpUser: "name" | "id" | "disabled";
+    } | {
+      newIdpUser: "name" | "id" | "disabled";
+    }), "in" | "=" | "!=" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
+      user: string;
+    } | {
+      idpUser: "name" | "id" | "disabled";
+    } | {
+      oldIdpUser: "name" | "id" | "disabled";
+    } | {
+      newIdpUser: "name" | "id" | "disabled";
+    })] | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
+      user: string;
+    } | {
+      idpUser: "name" | "id" | "disabled";
+    } | {
+      oldIdpUser: "name" | "id" | "disabled";
+    } | {
+      newIdpUser: "name" | "id" | "disabled";
+    }), "in" | "=" | "!=" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
+      user: string;
+    } | {
+      idpUser: "name" | "id" | "disabled";
+    } | {
+      oldIdpUser: "name" | "id" | "disabled";
+    } | {
+      newIdpUser: "name" | "id" | "disabled";
+    }), boolean] | readonly (boolean | readonly [(string | boolean | readonly string[] | readonly boolean[] | {
+      user: string;
+    } | {
+      idpUser: "name" | "id" | "disabled";
+    } | {
+      oldIdpUser: "name" | "id" | "disabled";
+    } | {
+      newIdpUser: "name" | "id" | "disabled";
+    }), "in" | "=" | "!=" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
+      user: string;
+    } | {
+      idpUser: "name" | "id" | "disabled";
+    } | {
+      oldIdpUser: "name" | "id" | "disabled";
+    } | {
+      newIdpUser: "name" | "id" | "disabled";
+    })])[] | {
+      conditions: readonly [(string | boolean | readonly string[] | readonly boolean[] | {
+        user: string;
+      } | {
+        idpUser: "name" | "id" | "disabled";
+      } | {
+        oldIdpUser: "name" | "id" | "disabled";
+      } | {
+        newIdpUser: "name" | "id" | "disabled";
+      }), "in" | "=" | "!=" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
+        user: string;
+      } | {
+        idpUser: "name" | "id" | "disabled";
+      } | {
+        oldIdpUser: "name" | "id" | "disabled";
+      } | {
+        newIdpUser: "name" | "id" | "disabled";
+      })] | readonly (readonly [(string | boolean | readonly string[] | readonly boolean[] | {
+        user: string;
+      } | {
+        idpUser: "name" | "id" | "disabled";
+      } | {
+        oldIdpUser: "name" | "id" | "disabled";
+      } | {
+        newIdpUser: "name" | "id" | "disabled";
+      }), "in" | "=" | "!=" | "not in", (string | boolean | readonly string[] | readonly boolean[] | {
+        user: string;
+      } | {
+        idpUser: "name" | "id" | "disabled";
+      } | {
+        oldIdpUser: "name" | "id" | "disabled";
+      } | {
+        newIdpUser: "name" | "id" | "disabled";
+      })])[];
+      description?: string | undefined;
+      permit?: boolean | undefined;
+    })[] | undefined;
   } | undefined;
 };
 //#endregion
-//#region src/configure/services/idp/types.d.ts
-declare const idpDefinitionBrand: unique symbol;
-type IdpDefinitionBrand = {
-  readonly [idpDefinitionBrand]: true;
-};
-type DefinedIdp<Name extends string, Config, ClientNames extends string> = Config & {
-  name: Name;
-  provider(providerName: string, clientName: ClientNames): BuiltinIdP;
-} & IdpDefinitionBrand;
-type IdPExternalConfig = {
-  name: string;
-  external: true;
-};
-type IdPOwnConfig = Omit<DefinedIdp<string, IdPInput, string>, "provider">;
-type IdPConfig = IdPOwnConfig | IdPExternalConfig;
-//#endregion
-//#region src/types/secrets.generated.d.ts
-type Secrets = {
-  vaults: {
-    [x: string]: {
-      [x: string]: string | null | undefined;
-    };
-  };
-  options: {
-    ignoreNullishValues: boolean;
-  };
-};
-type SecretsInput = Secrets;
-//#endregion
-//#region src/configure/services/secrets/types.d.ts
-declare const secretsDefinitionBrand: unique symbol;
-type SecretsDefinitionBrand = {
-  readonly [secretsDefinitionBrand]: true;
-};
-/** Type accepted by `AppConfig.secrets`. Only values returned by `defineSecretManager()` satisfy this. */
-type SecretsConfig = SecretsInput & SecretsDefinitionBrand;
-//#endregion
-//#region src/types/staticwebsite.generated.d.ts
-type StaticWebsite = {
-  /** Static website name */name: string; /** Static website description */
-  description?: string | undefined; /** IP addresses allowed to access the website */
-  allowedIpAddresses?: string[] | undefined; /** Custom domains for the static website */
-  customDomains?: string[] | undefined;
-};
-type StaticWebsiteInput = StaticWebsite;
-//#endregion
-//#region src/configure/services/staticwebsite/types.d.ts
-declare const staticWebsiteDefinitionBrand: unique symbol;
-type StaticWebsiteDefinitionBrand = {
-  readonly [staticWebsiteDefinitionBrand]: true;
-};
-/** Type accepted by `AppConfig.staticWebsites`. Only values returned by `defineStaticWebSite()` satisfy this. */
-type StaticWebsiteConfig = StaticWebsiteInput & StaticWebsiteDefinitionBrand;
-//#endregion
-//#region src/types/app-config.generated.d.ts
-type LogLevelEnum = "DEBUG" | "INFO" | "WARN" | "ERROR" | "SILENT";
-//#endregion
-//#region src/configure/config/types.d.ts
-type LogLevel = LogLevelEnum;
-type LogLevelInput = LogLevel | (string & {});
-type ExecutorServiceConfig = {
-  files: string[];
-  ignores?: string[];
-};
-type ExecutorServiceInput = ExecutorServiceConfig;
-type HttpAdapterServiceInput = {
-  files: string[];
-  ignores?: string[];
-};
-type ResolverServiceConfig = {
-  files: string[];
-  ignores?: string[];
-};
-type ResolverExternalConfig = {
-  external: true;
-};
-type ResolverServiceInput = {
-  [namespace: string]: ResolverServiceConfig | ResolverExternalConfig;
-};
-type WorkflowServiceConfig = {
-  files: string[];
-  job_files?: string[];
-  ignores?: string[];
-  job_ignores?: string[];
-};
-type WorkflowServiceInput = WorkflowServiceConfig;
-/**
- * Application configuration for `defineConfig()`.
- *
- * Key fields:
- * - `name` (required): Application name
- * - `cors`: Array of allowed origins, e.g. `["https://example.com"]`
- * - `auth`: Single auth config object (not an array)
- * - `idp`: Array of IdP configs, e.g. `[myIdp]`
- * - `staticWebsites`: Array of static website configs, e.g. `[website]`
- * - `aiGateways`: Array of AI Gateway configs, e.g. `[gateway]`
- * - `db`, `resolver`, `executor`, `workflow`: Service configs with file globs
- */
-interface AppConfig<Auth extends AuthConfig = AuthConfig, Idp extends IdPConfig[] = IdPConfig[], StaticWebsites extends StaticWebsiteConfig[] = StaticWebsiteConfig[], AIGateways extends AIGatewayConfig[] = AIGatewayConfig[], Env extends Record<string, string | number | boolean> = Record<string, string | number | boolean>> {
-  /** Application name (required). */
-  name: string;
-  /**
-   * Stable identifier used to track the application across renames.
-   * Managed by the SDK: auto-generated and written into `tailor.config.ts`
-   * on first `deploy`. Delete this field if you want the SDK to assign a
-   * new id on the next `deploy` — typical case: `tailor.config.ts` was
-   * copied from another project and the new application should not share
-   * the original's id. Existing resources are re-tagged with the new id;
-   * data is preserved.
-   */
-  id?: string;
-  /** Environment variables accessible via `context.env` in resolvers and via the second argument `{ env }` in workflow job bodies. */
-  env?: Env;
-  /** Allowed CORS origins. Must be an array of strings, e.g. `["https://example.com"]`. */
-  cors?: string[];
-  /** IP addresses allowed to access the application. */
-  allowedIpAddresses?: string[];
-  /** Disable GraphQL introspection in production. */
-  disableIntrospection?: boolean;
-  /** TailorDB service configuration with type definition files. */
-  db?: TailorDBServiceInput;
-  /** Resolver service configuration with resolver files. */
-  resolver?: ResolverServiceInput;
-  /** Identity Provider configurations. Must be an array, e.g. `[myIdp]`. */
-  idp?: Idp;
-  /** Auth configuration (single object, not an array). */
-  auth?: Auth;
-  /** Executor service configuration with executor files. */
-  executor?: ExecutorServiceInput;
-  /** Workflow service configuration with workflow files. */
-  workflow?: WorkflowServiceInput;
-  /** HTTP adapter service configuration with adapter files. */
-  httpAdapter?: HttpAdapterServiceInput;
-  /** Static website configurations. Must be an array, e.g. `[website]`. */
-  staticWebsites?: StaticWebsites;
-  /** AI Gateway configurations. Must be an array, e.g. `[gateway]`. */
-  aiGateways?: AIGateways;
-  /** Secret Manager vault configurations. Keys are vault names, values are records of secret names to values. */
-  secrets?: SecretsConfig;
-  /**
-   * Enable inline sourcemaps in bundled functions for better error stack traces.
-   * @default true
-   */
-  inlineSourcemap?: boolean;
-  /**
-   * Controls which `console.*` calls remain in bundled functions.
-   * @default "DEBUG"
-   */
-  logLevel?: LogLevelInput;
-}
-//#endregion
-//#region src/types/workflow.generated.d.ts
-type RetryPolicy = {
-  /** Maximum number of retries (1-10) */maxRetries: number; /** Initial backoff duration (e.g., '1s', '500ms', '1m', max 1h) */
-  initialBackoff: `${number}ms` | `${number}s` | `${number}m`; /** Maximum backoff duration (e.g., '30s', '5m', max 24h) */
-  maxBackoff: `${number}ms` | `${number}s` | `${number}m`; /** Backoff multiplier (>= 1) */
-  backoffMultiplier: number;
-};
-type ConcurrencyPolicy = {
-  /** Maximum number of concurrent executions (1-1000) */maxConcurrentExecutions: number;
-};
-//#endregion
-export { AIGatewayConfig as C, IdPInput as S, AIGatewayInput as T, IdPExternalConfig as _, ExecutorServiceInput as a, IdPGqlOperations as b, ResolverServiceInput as c, StaticWebsiteConfig as d, StaticWebsiteDefinitionBrand as f, IdPConfig as g, SecretsDefinitionBrand as h, ExecutorServiceConfig as i, WorkflowServiceConfig as l, SecretsConfig as m, RetryPolicy as n, ResolverExternalConfig as o, StaticWebsiteInput as p, AppConfig as r, ResolverServiceConfig as s, ConcurrencyPolicy as t, WorkflowServiceInput as u, IdpDefinitionBrand as v, AIGatewayDefinitionBrand as w, IdPGqlOperationsInput as x, IdPEmailConfig as y };
-//# sourceMappingURL=workflow.generated-ClEjBYhm.d.mts.map
+export { IdPEmailConfig, IdPGqlOperations, IdPGqlOperationsInput, IdPInput };

package/dist/types/resolver.generated.d.mts

@@ -0,0 +1,39 @@
+//#region src/types/resolver.generated.d.ts
+type Resolver = {
+  /** GraphQL operation type (query or mutation) */operation: "query" | "mutation"; /** Resolver name */
+  name: string; /** Resolver implementation function */
+  body: Function; /** Output field definition */
+  output: {
+    type: "string" | "boolean" | "date" | "enum" | "uuid" | "integer" | "float" | "decimal" | "datetime" | "time" | "nested";
+    metadata: {
+      required?: boolean | undefined;
+      array?: boolean | undefined; /** Resolver description */
+      description?: string | undefined;
+      allowedValues?: {
+        value: string; /** Resolver description */
+        description?: string | undefined;
+      }[] | undefined;
+      hooks?: {
+        create?: Function | undefined;
+        update?: Function | undefined;
+      } | undefined;
+      validate?: (Function | [Function, string])[] | undefined;
+      typeName?: string | undefined;
+    };
+    fields: {
+      [x: string]: any;
+    };
+  }; /** Resolver description */
+  description?: string | undefined; /** Input field definitions */
+  input?: {
+    [x: string]: any;
+  } | undefined; /** Enable publishing events from this resolver */
+  publishEvents?: boolean | undefined; /** Machine user to execute this resolver as */
+  invoker?: string | {
+    namespace: string;
+    machineUserName: string;
+  } | undefined;
+};
+type ResolverInput = Resolver;
+//#endregion
+export { Resolver, ResolverInput };

package/dist/types/secrets.generated.d.mts

@@ -0,0 +1,14 @@
+//#region src/types/secrets.generated.d.ts
+type Secrets = {
+  vaults: {
+    [x: string]: {
+      [x: string]: string | null | undefined;
+    };
+  };
+  options: {
+    ignoreNullishValues: boolean;
+  };
+};
+type SecretsInput = Secrets;
+//#endregion
+export { Secrets, SecretsInput };

package/dist/types/staticwebsite.generated.d.mts

@@ -0,0 +1,10 @@
+//#region src/types/staticwebsite.generated.d.ts
+type StaticWebsite = {
+  /** Static website name */name: string; /** Static website description */
+  description?: string | undefined; /** IP addresses allowed to access the website */
+  allowedIpAddresses?: string[] | undefined; /** Custom domains for the static website */
+  customDomains?: string[] | undefined;
+};
+type StaticWebsiteInput = StaticWebsite;
+//#endregion
+export { StaticWebsite, StaticWebsiteInput };