@tailor-platform/sdk 2.0.0-next.2 → 2.0.0-next.4

package/dist/configure/config/index.d.mts

@@ -0,0 +1,21 @@
+import { Plugin } from "../../plugin/types.mjs";
+import { AppConfig } from "./types.mjs";
+
+//#region src/configure/config/index.d.ts
+/**
+ * Define a Tailor SDK application configuration with shallow exactness.
+ * @template Config
+ * @param config - Application configuration
+ * @returns The same configuration object
+ */
+declare function defineConfig<const Config extends AppConfig & Record<Exclude<keyof Config, keyof AppConfig>, never>>(config: Config): Config;
+/**
+ * Define plugins to be used with the Tailor SDK.
+ * Plugins can generate additional types, resolvers, and executors
+ * based on existing TailorDB types.
+ * @param configs - Plugin configurations
+ * @returns Plugin configurations as given
+ */
+declare function definePlugins(...configs: Plugin<any, any>[]): Plugin<any, any>[];
+//#endregion
+export { defineConfig, definePlugins };

package/dist/configure/config/types.d.mts

@@ -0,0 +1,105 @@
+import { TailorDBServiceInput } from "../services/tailordb/types.mjs";
+import { AuthConfig } from "../services/auth/types.mjs";
+import { AIGatewayConfig } from "../services/aigateway/types.mjs";
+import { IdPConfig } from "../services/idp/types.mjs";
+import { SecretsConfig } from "../services/secrets/types.mjs";
+import { StaticWebsiteConfig } from "../services/staticwebsite/types.mjs";
+import { ExecutionPolicyInstance } from "../services/workflow/execution-policy.types.mjs";
+import { LogLevelEnum } from "../../types/app-config.generated.mjs";
+
+//#region src/configure/config/types.d.ts
+type LogLevel = LogLevelEnum;
+type LogLevelInput = LogLevel | (string & {});
+type ExecutorServiceConfig = {
+  files: string[];
+  ignores?: string[];
+};
+type ExecutorServiceInput = ExecutorServiceConfig;
+type HttpAdapterServiceInput = {
+  files: string[];
+  ignores?: string[];
+};
+type ResolverServiceConfig = {
+  files: string[];
+  ignores?: string[];
+};
+type ResolverExternalConfig = {
+  external: true;
+};
+type ResolverServiceInput = {
+  [namespace: string]: ResolverServiceConfig | ResolverExternalConfig;
+};
+type WorkflowServiceConfig = {
+  files: string[];
+  job_files?: string[];
+  ignores?: string[];
+  job_ignores?: string[]; /** Workspace-level execution policies for workflow job functions. */
+  executionPolicies?: Record<string, ExecutionPolicyInstance>;
+};
+type WorkflowServiceInput = WorkflowServiceConfig;
+/**
+ * Application configuration for `defineConfig()`.
+ *
+ * Key fields:
+ * - `name` (required): Application name
+ * - `cors`: Array of allowed origins, e.g. `["https://example.com"]`
+ * - `auth`: Single auth config object (not an array)
+ * - `idp`: Array of IdP configs, e.g. `[myIdp]`
+ * - `staticWebsites`: Array of static website configs, e.g. `[website]`
+ * - `aiGateways`: Array of AI Gateway configs, e.g. `[gateway]`
+ * - `db`, `resolver`, `executor`, `workflow`: Service configs with file globs
+ */
+interface AppConfig<Auth extends AuthConfig = AuthConfig, Idp extends IdPConfig[] = IdPConfig[], StaticWebsites extends StaticWebsiteConfig[] = StaticWebsiteConfig[], AIGateways extends AIGatewayConfig[] = AIGatewayConfig[], Env extends Record<string, string | number | boolean> = Record<string, string | number | boolean>> {
+  /** Application name (required). */
+  name: string;
+  /**
+   * Stable identifier used to track the application across renames.
+   * Managed by the SDK: auto-generated and written into `tailor.config.ts`
+   * on first `deploy`. Delete this field if you want the SDK to assign a
+   * new id on the next `deploy` — typical case: `tailor.config.ts` was
+   * copied from another project and the new application should not share
+   * the original's id. Existing resources are re-tagged with the new id;
+   * data is preserved.
+   */
+  id?: string;
+  /** Environment variables accessible via `context.env` in resolvers and via the second argument `{ env }` in workflow job bodies. */
+  env?: Env;
+  /** Allowed CORS origins. Must be an array of strings, e.g. `["https://example.com"]`. */
+  cors?: string[];
+  /** IP addresses allowed to access the application. */
+  allowedIpAddresses?: string[];
+  /** Disable GraphQL introspection in production. */
+  disableIntrospection?: boolean;
+  /** TailorDB service configuration with type definition files. */
+  db?: TailorDBServiceInput;
+  /** Resolver service configuration with resolver files. */
+  resolver?: ResolverServiceInput;
+  /** Identity Provider configurations. Must be an array, e.g. `[myIdp]`. */
+  idp?: Idp;
+  /** Auth configuration (single object, not an array). */
+  auth?: Auth;
+  /** Executor service configuration with executor files. */
+  executor?: ExecutorServiceInput;
+  /** Workflow service configuration with workflow files. */
+  workflow?: WorkflowServiceInput;
+  /** HTTP adapter service configuration with adapter files. */
+  httpAdapter?: HttpAdapterServiceInput;
+  /** Static website configurations. Must be an array, e.g. `[website]`. */
+  staticWebsites?: StaticWebsites;
+  /** AI Gateway configurations. Must be an array, e.g. `[gateway]`. */
+  aiGateways?: AIGateways;
+  /** Secret Manager vault configurations. Keys are vault names, values are records of secret names to values. */
+  secrets?: SecretsConfig;
+  /**
+   * Enable inline sourcemaps in bundled functions for better error stack traces.
+   * @default true
+   */
+  inlineSourcemap?: boolean;
+  /**
+   * Controls which `console.*` calls remain in bundled functions.
+   * @default "DEBUG"
+   */
+  logLevel?: LogLevelInput;
+}
+//#endregion
+export { AppConfig, ExecutorServiceConfig, ExecutorServiceInput, HttpAdapterServiceInput, LogLevel, LogLevelInput, ResolverExternalConfig, ResolverServiceConfig, ResolverServiceInput, WorkflowServiceConfig, WorkflowServiceInput };

package/dist/configure/index.d.mts

@@ -1,9 +1,124 @@
-import { n as AttributeMap, o as TailorPrincipal, r as Env, t as AttributeList } from "../types-BZ7QKVE8.mjs";
-import { s as PluginAttachment } from "../types-CdcQh4Z2.mjs";
-import { A as SCIMAuthorization, C as IdProvider, D as SAML, E as OIDC, F as AuthConnectionOAuth2Config, M as SCIMResource, N as TenantProvider, O as SCIMAttribute, P as AuthConnectionConfig, S as IDToken, T as OAuth2ClientInput, _ as UserAttributeListKey, a as AuthServiceInput, b as ValueOperand, c as DefinedAuth, d as FederatedIdentityProvider, f as MachineUserName, g as UserAttributeKey, h as SCIMAttributeType, i as AuthOwnConfig, j as SCIMConfig, k as SCIMAttributeMapping, l as FederatedIdentity, m as OAuth2ClientGrantType, n as AuthConnectionTokenResult, o as BeforeLoginClaims, p as MachineUserNameRegistry, r as AuthExternalConfig, s as BeforeLoginHookArgs, t as AuthConfig, u as FederatedIdentityClaims, v as UserAttributeMap, x as BuiltinIdP, y as UsernameFieldKey } from "../types-BX4q6Mo6.mjs";
-import { _ as TailorDBNamespaceData, a as PluginConfigs, b as TypePluginOutput, c as PluginGeneratedExecutor, d as PluginGeneratedType, f as PluginNamespaceProcessContext, g as ResolverReadyContext, h as ResolverNamespaceData, i as Plugin, l as PluginGeneratedExecutorWithFile, m as PluginProcessContext, n as GeneratorResult, o as PluginExecutorContext, p as PluginOutput, r as NamespacePluginOutput, s as PluginExecutorContextBase, t as ExecutorReadyContext, u as PluginGeneratedResolver, v as TailorDBReadyContext, x as Resolver, y as TailorDBTypeForPlugin } from "../types-BDRml5C3.mjs";
-import { a as TailorDBInstance, c as PermissionCondition, d as unsafeAllowAllGqlPermission, f as unsafeAllowAllTypePermission, i as TailorDBField, l as TailorTypeGqlPermission, n as TailorAnyDBField, o as TailorDBType, r as TailorAnyDBType, s as db, u as TailorTypePermission } from "../http-adapter.generated-DFsXDdm5.mjs";
-import { C as AIGatewayConfig, _ as IdPExternalConfig, a as ExecutorServiceInput, b as IdPGqlOperations, c as ResolverServiceInput, d as StaticWebsiteConfig, g as IdPConfig, i as ExecutorServiceConfig, l as WorkflowServiceConfig, m as SecretsConfig, n as RetryPolicy, o as ResolverExternalConfig, s as ResolverServiceConfig, t as ConcurrencyPolicy, u as WorkflowServiceInput, x as IdPGqlOperationsInput, y as IdPEmailConfig } from "../workflow.generated-ClEjBYhm.mjs";
-import { a as WorkflowConfig, c as WorkflowJobContext, i as Workflow, l as createWorkflowJob, n as defineWaitPoint, o as createWorkflow, r as defineWaitPoints, s as WorkflowJob, t as WaitPointInstance } from "../index-lFpcjHPU.mjs";
-import { $ as authAccessTokenTrigger, A as incomingWebhookTrigger, B as IdpUserCreatedArgs, C as Trigger, D as IncomingWebhookResponseConfig, E as IncomingWebhookResponse, F as AuthAccessTokenIssuedArgs, G as RecordDeletedArgs, H as IdpUserTrigger, I as AuthAccessTokenRefreshedArgs, J as ResolverExecutedTrigger, K as RecordUpdatedArgs, L as AuthAccessTokenRevokedArgs, M as ScheduleTrigger, N as scheduleTrigger, O as IncomingWebhookTrigger, P as AuthAccessTokenArgs, Q as authAccessTokenRevokedTrigger, R as AuthAccessTokenTrigger, S as createExecutor, T as IncomingWebhookRequest, U as IdpUserUpdatedArgs, V as IdpUserDeletedArgs, W as RecordCreatedArgs, X as authAccessTokenIssuedTrigger, Y as TailorDBTrigger, Z as authAccessTokenRefreshedTrigger, _ as IdPPermission, _t as IdpName, a as definePlugins, at as recordDeletedTrigger, b as defineAIGateway, c as HttpAdapterGraphQLResponse, ct as resolverExecutedTrigger, d as HttpAdapterOutputFn, dt as Operation, et as idpUserCreatedTrigger, f as HttpAdapterRequest, ft as WebhookOperation, g as defineIdp, gt as defineAuth, h as defineSecretManager, ht as createResolver, i as defineConfig, it as recordCreatedTrigger, j as ScheduleArgs, k as IncomingWebhookTriggerOptions, l as HttpAdapterInput, lt as FunctionOperation, m as createHttpAdapter, mt as QueryType, n as output, nt as idpUserTrigger, o as HttpAdapter, ot as recordTrigger, p as HttpAdapterResponse, pt as WorkflowOperation, q as ResolverExecutedArgs, r as t, rt as idpUserUpdatedTrigger, s as HttpAdapterGraphQLRequest, st as recordUpdatedTrigger, t as __Infer, tt as idpUserDeletedTrigger, u as HttpAdapterInputFn, ut as GqlOperation, v as IdPPermissionCondition, vt as IdpNameRegistry, w as IncomingWebhookArgs, x as defineStaticWebSite, y as unsafeAllowAllIdPPermission, yt as TailorField, z as IdpUserArgs } from "../index-BI-_j9Z3.mjs";
-export { type AIGatewayConfig, type AttributeList, type AttributeMap, AuthAccessTokenArgs, AuthAccessTokenIssuedArgs, AuthAccessTokenRefreshedArgs, AuthAccessTokenRevokedArgs, AuthAccessTokenTrigger, type AuthConfig, type AuthConnectionConfig, type AuthConnectionOAuth2Config, type AuthConnectionTokenResult, type AuthExternalConfig, type AuthOwnConfig, type AuthServiceInput, type BeforeLoginClaims, type BeforeLoginHookArgs, type BuiltinIdP, type ConcurrencyPolicy, type DefinedAuth, type Env, type ExecutorReadyContext, type ExecutorServiceConfig, type ExecutorServiceInput, type FederatedIdentity, type FederatedIdentityClaims, type FederatedIdentityProvider, FunctionOperation, type GeneratorResult, GqlOperation, HttpAdapter, HttpAdapterGraphQLRequest, HttpAdapterGraphQLResponse, HttpAdapterInput, HttpAdapterInputFn, HttpAdapterOutputFn, HttpAdapterRequest, HttpAdapterResponse, type IDToken, type IdPConfig, type IdPEmailConfig, type IdPExternalConfig, type IdPGqlOperations, type IdPGqlOperationsInput as IdPGqlOperationsConfig, type IdPPermission, type IdPPermissionCondition, type IdProvider as IdProviderConfig, type IdpName, type IdpNameRegistry, IdpUserArgs, IdpUserCreatedArgs, IdpUserDeletedArgs, IdpUserTrigger, IdpUserUpdatedArgs, IncomingWebhookArgs, IncomingWebhookRequest, IncomingWebhookResponse, IncomingWebhookResponseConfig, IncomingWebhookTrigger, IncomingWebhookTriggerOptions, type MachineUserName, type MachineUserNameRegistry, type NamespacePluginOutput, type OAuth2ClientInput as OAuth2Client, type OAuth2ClientGrantType, type OIDC, Operation, type PermissionCondition, type Plugin, type PluginAttachment, type PluginConfigs, type PluginExecutorContext, type PluginExecutorContextBase, type PluginGeneratedExecutor, type PluginGeneratedExecutorWithFile, type PluginGeneratedResolver, type PluginGeneratedType, type PluginNamespaceProcessContext, type PluginOutput, type PluginProcessContext, type QueryType, RecordCreatedArgs, RecordDeletedArgs, RecordUpdatedArgs, type Resolver, ResolverExecutedArgs, ResolverExecutedTrigger, type ResolverExternalConfig, type ResolverNamespaceData, type ResolverReadyContext, type ResolverServiceConfig, type ResolverServiceInput, type RetryPolicy, type SAML, type SCIMAttribute, type SCIMAttributeMapping, type SCIMAttributeType, type SCIMAuthorization, type SCIMConfig, type SCIMResource, ScheduleArgs, ScheduleTrigger, type SecretsConfig, type StaticWebsiteConfig, type TailorAnyDBField, type TailorAnyDBType, type TailorDBField, type TailorDBInstance, type TailorDBNamespaceData, type TailorDBReadyContext, TailorDBTrigger, type TailorDBType, type TailorDBTypeForPlugin, type TailorField, type TailorPrincipal, type TailorTypeGqlPermission, type TailorTypePermission, type TenantProvider as TenantProviderConfig, Trigger, type TypePluginOutput, type UserAttributeKey, type UserAttributeListKey, type UserAttributeMap, type UsernameFieldKey, type ValueOperand, WaitPointInstance, WebhookOperation, Workflow, WorkflowConfig, WorkflowJob, WorkflowJobContext, WorkflowOperation, type WorkflowServiceConfig, type WorkflowServiceInput, authAccessTokenIssuedTrigger, authAccessTokenRefreshedTrigger, authAccessTokenRevokedTrigger, authAccessTokenTrigger, createExecutor, createHttpAdapter, createResolver, createWorkflow, createWorkflowJob, db, defineAIGateway, defineAuth, defineConfig, defineIdp, definePlugins, defineSecretManager, defineStaticWebSite, defineWaitPoint, defineWaitPoints, idpUserCreatedTrigger, idpUserDeletedTrigger, idpUserTrigger, idpUserUpdatedTrigger, incomingWebhookTrigger, infer, output, recordCreatedTrigger, recordDeletedTrigger, recordTrigger, recordUpdatedTrigger, resolverExecutedTrigger, scheduleTrigger, t, unsafeAllowAllGqlPermission, unsafeAllowAllIdPPermission, unsafeAllowAllTypePermission };
+import { AttributeList, Attributes, Env, TailorPrincipal } from "../runtime/types.mjs";
+import { InferFieldsOutput, output as output$1 } from "../types/helpers.mjs";
+import { ArrayFieldOutput, FieldMetadata, FieldOptions, FieldOutput, TailorFieldType } from "./types/field.types.mjs";
+import { PluginAttachment } from "./services/tailordb/types.mjs";
+import { AuthConnectionConfig, AuthConnectionOAuth2Config } from "../types/auth-connection.generated.mjs";
+import { BuiltinIdP, IDToken, IdProvider, OAuth2ClientInput, OIDC, SAML, SCIMAttribute, SCIMAttributeMapping, SCIMAuthorization, SCIMConfig, SCIMResource, TenantProvider } from "../types/auth.generated.mjs";
+import { AuthConfig, AuthConnectionTokenResult, AuthExternalConfig, AuthOwnConfig, AuthServiceInput, BeforeLoginClaims, BeforeLoginHookArgs, DefinedAuth, FederatedIdentity, FederatedIdentityClaims, FederatedIdentityProvider, MachineUserName, MachineUserNameRegistry, OAuth2ClientGrantType, SCIMAttributeType, UserAttributeKey, UserAttributeListKey, UserAttributes, UsernameFieldKey, ValueOperand } from "./services/auth/types.mjs";
+import { AllowedValues, AllowedValuesOutput } from "./types/field.mjs";
+import { Resolver } from "../types/resolver.generated.mjs";
+import { ExecutorReadyContext, GeneratorResult, NamespacePluginOutput, Plugin, PluginConfigs, PluginExecutorContext, PluginExecutorContextBase, PluginGeneratedExecutor, PluginGeneratedExecutorWithFile, PluginGeneratedResolver, PluginGeneratedType, PluginNamespaceProcessContext, PluginOutput, PluginProcessContext, ResolverNamespaceData, ResolverReadyContext, TailorDBNamespaceData, TailorDBReadyContext, TailorDBTypeForPlugin, TypePluginOutput } from "../plugin/types.mjs";
+import { PermissionCondition, TailorTypeGqlPermission, TailorTypePermission, unsafeAllowAllGqlPermission, unsafeAllowAllTypePermission } from "./services/tailordb/permission.mjs";
+import { TailorAnyDBField, TailorAnyDBType, TailorDBField, TailorDBInstance, TailorDBType, db } from "./services/tailordb/schema.mjs";
+import { AIGatewayConfig } from "./services/aigateway/types.mjs";
+import { IdPEmailConfig, IdPGqlOperations, IdPGqlOperationsInput } from "../types/idp.generated.mjs";
+import { IdPConfig, IdPExternalConfig } from "./services/idp/types.mjs";
+import { SecretsConfig } from "./services/secrets/types.mjs";
+import { StaticWebsiteConfig } from "./services/staticwebsite/types.mjs";
+import { ExecutionPolicyConcurrency, ExecutionPolicyDefInput, ExecutionPolicyExactInstance, ExecutionPolicyGroupOptions, ExecutionPolicyInstance, ExecutionPolicyWildcardInstance, ResolvedExecutionPolicyInstance } from "./services/workflow/execution-policy.types.mjs";
+import { ExecutorServiceConfig, ExecutorServiceInput, ResolverExternalConfig, ResolverServiceConfig, ResolverServiceInput, WorkflowServiceConfig, WorkflowServiceInput } from "./config/types.mjs";
+import { ConcurrencyPolicy, RetryPolicy } from "../types/workflow.generated.mjs";
+import { TailorAnyField, TailorField } from "./types/type.mjs";
+import { IdpName, IdpNameRegistry } from "./types/idp-name.mjs";
+import { ConnectionName, ConnectionNameRegistry } from "./types/connection-name.mjs";
+import { AIGatewayName, AIGatewayNameRegistry } from "./types/aigateway-name.mjs";
+import { defineAuth } from "./services/auth/index.mjs";
+import { createResolver } from "./services/resolver/resolver.mjs";
+import { QueryType } from "./services/resolver/types.mjs";
+import { WorkflowJob, WorkflowJobContext, createWorkflowJob } from "./services/workflow/job.mjs";
+import { Workflow, WorkflowConfig, createWorkflow } from "./services/workflow/workflow.mjs";
+import { FunctionOperation, GqlOperation, Operation, WebhookOperation, WorkflowOperation } from "./services/executor/operation.mjs";
+import { AuthAccessTokenArgs, AuthAccessTokenIssuedArgs, AuthAccessTokenRefreshedArgs, AuthAccessTokenRevokedArgs, AuthAccessTokenTrigger, IdpUserArgs, IdpUserCreatedArgs, IdpUserDeletedArgs, IdpUserTrigger, IdpUserUpdatedArgs, RecordCreatedArgs, RecordDeletedArgs, RecordUpdatedArgs, ResolverExecutedArgs, ResolverExecutedTrigger, TailorDBTrigger, authAccessTokenIssuedTrigger, authAccessTokenRefreshedTrigger, authAccessTokenRevokedTrigger, authAccessTokenTrigger, idpUserCreatedTrigger, idpUserDeletedTrigger, idpUserTrigger, idpUserUpdatedTrigger, recordCreatedTrigger, recordDeletedTrigger, recordTrigger, recordUpdatedTrigger, resolverExecutedTrigger } from "./services/executor/trigger/event.mjs";
+import { ScheduleArgs, ScheduleTrigger, scheduleTrigger } from "./services/executor/trigger/schedule.mjs";
+import { IncomingWebhookArgs, IncomingWebhookRequest, IncomingWebhookResponse, IncomingWebhookResponseConfig, IncomingWebhookTrigger, IncomingWebhookTriggerOptions, incomingWebhookTrigger } from "./services/executor/trigger/webhook.mjs";
+import { Trigger } from "./services/executor/trigger/index.mjs";
+import { createExecutor } from "./services/executor/executor.mjs";
+import { defineWorkflowExecutionPolicies, defineWorkflowExecutionPolicy } from "./services/workflow/execution-policy.mjs";
+import { WaitPointInstance, createWaitPoint, createWaitPoints } from "./services/workflow/wait-point.mjs";
+import { defineStaticWebSite } from "./services/staticwebsite/index.mjs";
+import { defineAIGateway } from "./services/aigateway/index.mjs";
+import { IdPPermission, IdPPermissionCondition, unsafeAllowAllIdPPermission } from "./services/idp/permission.mjs";
+import { defineIdp } from "./services/idp/index.mjs";
+import { defineSecretManager } from "./services/secrets/index.mjs";
+import { HttpAdapter, HttpAdapterGraphQLQuery, HttpAdapterGraphQLRequest, HttpAdapterGraphQLResponse, HttpAdapterInput, HttpAdapterInputFn, HttpAdapterOutputFn, HttpAdapterRequest, HttpAdapterResponse, HttpAdapterTypedDocumentNode, createHttpAdapter } from "./services/http-adapter/http-adapter.mjs";
+import { defineConfig, definePlugins } from "./config/index.mjs";
+
+//#region src/configure/index.d.ts
+type TailorOutput<T> = output$1<T>;
+type infer<T> = TailorOutput<T>;
+type output<T> = TailorOutput<T>;
+/** TailorDB field type builders. */
+declare const t: {
+  uuid: <const Opt extends FieldOptions>(options?: Opt) => TailorField<{
+    type: "uuid";
+    array: Opt extends {
+      array: true;
+    } ? true : false;
+  }, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>, FieldMetadata, TailorFieldType>;
+  string: <const Opt extends FieldOptions>(options?: Opt) => TailorField<{
+    type: "string";
+    array: Opt extends {
+      array: true;
+    } ? true : false;
+  }, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>, FieldMetadata, TailorFieldType>;
+  bool: <const Opt extends FieldOptions>(options?: Opt) => TailorField<{
+    type: "boolean";
+    array: Opt extends {
+      array: true;
+    } ? true : false;
+  }, Opt["optional"] extends true ? ArrayFieldOutput<boolean, Opt> | null : ArrayFieldOutput<boolean, Opt>, FieldMetadata, TailorFieldType>;
+  int: <const Opt extends FieldOptions>(options?: Opt) => TailorField<{
+    type: "integer";
+    array: Opt extends {
+      array: true;
+    } ? true : false;
+  }, Opt["optional"] extends true ? ArrayFieldOutput<number, Opt> | null : ArrayFieldOutput<number, Opt>, FieldMetadata, TailorFieldType>;
+  float: <const Opt extends FieldOptions>(options?: Opt) => TailorField<{
+    type: "float";
+    array: Opt extends {
+      array: true;
+    } ? true : false;
+  }, Opt["optional"] extends true ? ArrayFieldOutput<number, Opt> | null : ArrayFieldOutput<number, Opt>, FieldMetadata, TailorFieldType>;
+  decimal: <const Opt extends FieldOptions>(options?: Opt) => TailorField<{
+    type: "decimal";
+    array: Opt extends {
+      array: true;
+    } ? true : false;
+  }, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>, FieldMetadata, TailorFieldType>;
+  date: <const Opt extends FieldOptions>(options?: Opt) => TailorField<{
+    type: "date";
+    array: Opt extends {
+      array: true;
+    } ? true : false;
+  }, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>, FieldMetadata, TailorFieldType>;
+  datetime: <const Opt extends FieldOptions>(options?: Opt) => TailorField<{
+    type: "datetime";
+    array: Opt extends {
+      array: true;
+    } ? true : false;
+  }, Opt["optional"] extends true ? ArrayFieldOutput<string | Date, Opt> | null : ArrayFieldOutput<string | Date, Opt>, FieldMetadata, TailorFieldType>;
+  time: <const Opt extends FieldOptions>(options?: Opt) => TailorField<{
+    type: "time";
+    array: Opt extends {
+      array: true;
+    } ? true : false;
+  }, Opt["optional"] extends true ? ArrayFieldOutput<string, Opt> | null : ArrayFieldOutput<string, Opt>, FieldMetadata, TailorFieldType>;
+  enum: <const V extends AllowedValues, const Opt extends FieldOptions>(values: V, options?: Opt) => TailorField<{
+    type: "enum";
+    array: Opt extends {
+      array: true;
+    } ? true : false;
+  }, FieldOutput<AllowedValuesOutput<V>, Opt>>;
+  object: <const F extends Record<string, TailorAnyField>, const Opt extends FieldOptions>(fields: F, options?: Opt) => TailorField<{
+    type: "nested";
+    array: Opt extends {
+      array: true;
+    } ? true : false;
+  }, FieldOutput<InferFieldsOutput<F>, Opt>, FieldMetadata, TailorFieldType>;
+};
+declare namespace t {
+  type output<T> = TailorOutput<T>;
+  type infer<T> = TailorOutput<T>;
+}
+//#endregion
+export { type AIGatewayConfig, type AIGatewayName, type AIGatewayNameRegistry, type AttributeList, type Attributes, AuthAccessTokenArgs, AuthAccessTokenIssuedArgs, AuthAccessTokenRefreshedArgs, AuthAccessTokenRevokedArgs, AuthAccessTokenTrigger, type AuthConfig, type AuthConnectionConfig, type AuthConnectionOAuth2Config, type AuthConnectionTokenResult, type AuthExternalConfig, type AuthOwnConfig, type AuthServiceInput, type BeforeLoginClaims, type BeforeLoginHookArgs, type BuiltinIdP, type ConcurrencyPolicy, type ConnectionName, type ConnectionNameRegistry, type DefinedAuth, type Env, type ExecutionPolicyConcurrency, type ExecutionPolicyDefInput, type ExecutionPolicyExactInstance, type ExecutionPolicyGroupOptions, type ExecutionPolicyInstance, type ExecutionPolicyWildcardInstance, type ExecutorReadyContext, type ExecutorServiceConfig, type ExecutorServiceInput, type FederatedIdentity, type FederatedIdentityClaims, type FederatedIdentityProvider, FunctionOperation, type GeneratorResult, GqlOperation, HttpAdapter, HttpAdapterGraphQLQuery, HttpAdapterGraphQLRequest, HttpAdapterGraphQLResponse, HttpAdapterInput, HttpAdapterInputFn, HttpAdapterOutputFn, HttpAdapterRequest, HttpAdapterResponse, HttpAdapterTypedDocumentNode, type IDToken, type IdPConfig, type IdPEmailConfig, type IdPExternalConfig, type IdPGqlOperations, type IdPGqlOperationsInput as IdPGqlOperationsConfig, type IdPPermission, type IdPPermissionCondition, type IdProvider as IdProviderConfig, type IdpName, type IdpNameRegistry, IdpUserArgs, IdpUserCreatedArgs, IdpUserDeletedArgs, IdpUserTrigger, IdpUserUpdatedArgs, IncomingWebhookArgs, IncomingWebhookRequest, IncomingWebhookResponse, IncomingWebhookResponseConfig, IncomingWebhookTrigger, IncomingWebhookTriggerOptions, type MachineUserName, type MachineUserNameRegistry, type NamespacePluginOutput, type OAuth2ClientInput as OAuth2Client, type OAuth2ClientGrantType, type OIDC, Operation, type PermissionCondition, type Plugin, type PluginAttachment, type PluginConfigs, type PluginExecutorContext, type PluginExecutorContextBase, type PluginGeneratedExecutor, type PluginGeneratedExecutorWithFile, type PluginGeneratedResolver, type PluginGeneratedType, type PluginNamespaceProcessContext, type PluginOutput, type PluginProcessContext, type QueryType, RecordCreatedArgs, RecordDeletedArgs, RecordUpdatedArgs, type ResolvedExecutionPolicyInstance, type Resolver, ResolverExecutedArgs, ResolverExecutedTrigger, type ResolverExternalConfig, type ResolverNamespaceData, type ResolverReadyContext, type ResolverServiceConfig, type ResolverServiceInput, type RetryPolicy, type SAML, type SCIMAttribute, type SCIMAttributeMapping, type SCIMAttributeType, type SCIMAuthorization, type SCIMConfig, type SCIMResource, ScheduleArgs, ScheduleTrigger, type SecretsConfig, type StaticWebsiteConfig, type TailorAnyDBField, type TailorAnyDBType, type TailorDBField, type TailorDBInstance, type TailorDBNamespaceData, type TailorDBReadyContext, TailorDBTrigger, type TailorDBType, type TailorDBTypeForPlugin, type TailorField, type TailorPrincipal, type TailorTypeGqlPermission, type TailorTypePermission, type TenantProvider as TenantProviderConfig, Trigger, type TypePluginOutput, type UserAttributeKey, type UserAttributeListKey, type UserAttributes, type UsernameFieldKey, type ValueOperand, WaitPointInstance, WebhookOperation, Workflow, WorkflowConfig, WorkflowJob, WorkflowJobContext, WorkflowOperation, type WorkflowServiceConfig, type WorkflowServiceInput, authAccessTokenIssuedTrigger, authAccessTokenRefreshedTrigger, authAccessTokenRevokedTrigger, authAccessTokenTrigger, createExecutor, createHttpAdapter, createResolver, createWaitPoint, createWaitPoints, createWorkflow, createWorkflowJob, db, defineAIGateway, defineAuth, defineConfig, defineIdp, definePlugins, defineSecretManager, defineStaticWebSite, defineWorkflowExecutionPolicies, defineWorkflowExecutionPolicy, idpUserCreatedTrigger, idpUserDeletedTrigger, idpUserTrigger, idpUserUpdatedTrigger, incomingWebhookTrigger, infer, output, recordCreatedTrigger, recordDeletedTrigger, recordTrigger, recordUpdatedTrigger, resolverExecutedTrigger, scheduleTrigger, t, unsafeAllowAllGqlPermission, unsafeAllowAllIdPPermission, unsafeAllowAllTypePermission };

package/dist/configure/index.mjs

@@ -1,7 +1,7 @@
-import { t as t$1 } from "../types-BQijbo4m.mjs";
+import { t as t$1 } from "../types-CXF2OYdR.mjs";
 import { t as brandValue } from "../brand-Eo4pLXPJ.mjs";
-import { t as db } from "../schema-Dtw9Orye.mjs";
-import { a as registerJob, n as dispatchTriggerJob, r as dispatchTriggerWorkflow } from "../registry-DH4m7eYo.mjs";
+import { t as db } from "../schema-C4LYbXVG.mjs";
+import { a as registerJob, n as dispatchTriggerJob, r as dispatchTriggerWorkflow } from "../registry-BSbq6SPo.mjs";
 import { i as withWorkflowTestInvoker } from "../test-env-key-D7UkZp99.mjs";
 
 //#region src/configure/services/auth/index.ts
@@ -9,10 +9,7 @@ import { i as withWorkflowTestInvoker } from "../test-env-key-D7UkZp99.mjs";
 function defineAuth(name, config) {
 	return {
 		...config,
-		name,
-		getConnectionToken(connectionName) {
-			return tailor.authconnection.getConnectionToken(connectionName);
-		}
+		name
 	};
 }
 
@@ -352,6 +349,114 @@ function incomingWebhookTrigger(options) {
 	};
 }
 
+//#endregion
+//#region src/configure/services/workflow/execution-policy.ts
+const EXECUTION_POLICY_EXACT_KEY_REGEX = /^[a-z0-9][a-z0-9_:.-]{0,62}[a-z0-9]$/;
+function createExecutionPolicyInstance(initialName, initialKey, concurrencyPolicy, matchType, separator, allowNameSetter, allowKeySetter) {
+	const isPrefix = matchType === "prefix";
+	const raw = {
+		name: initialName,
+		key: initialKey,
+		matchType,
+		...concurrencyPolicy && { concurrencyPolicy },
+		...isPrefix && { keyFor: (suffix) => {
+			const key = `${raw.key}${separator}${suffix}`;
+			if (!EXECUTION_POLICY_EXACT_KEY_REGEX.test(key)) throw new Error(`Invalid execution policy key "${key}" built by keyFor("${suffix}"): must match [a-z0-9_:.-] (2-64 chars; must start and end with [a-z0-9]).`);
+			return key;
+		} }
+	};
+	return {
+		instance: brandValue(raw, "execution-policy"),
+		setName: allowNameSetter ? (n) => {
+			raw.name = n;
+		} : void 0,
+		setKey: allowKeySetter ? (k) => {
+			raw.key = k;
+		} : void 0
+	};
+}
+/**
+* Define a single workflow job function execution policy.
+*
+* Use this when declaring a policy outside the
+* {@link defineWorkflowExecutionPolicies} builder — for example, when the
+* runtime key prefix needs to differ from the corresponding workspace-unique
+* name.
+*
+* When `matchType: "prefix"` is set, the returned instance has `keyFor(suffix)`
+* instead of a directly-usable `key` (see {@link ExecutionPolicyWildcardInstance}).
+* @param name - Workspace-unique name. Must match `^[a-z0-9][a-z0-9-]{1,61}[a-z0-9]$`.
+* @param def - Optional overrides for `key` (defaults to `name`), `matchType`, `separator` (the `keyFor` join character, defaults to `.`), and concurrency
+* @returns An execution policy instance
+* @example
+* export const perTenant = defineWorkflowExecutionPolicy("tenant-api", {
+*   matchType: "prefix",
+*   concurrencyPolicy: { maxConcurrentExecutions: 3 },
+* });
+*
+* perTenant.keyFor(tenantId); // "tenant-api.<tenantId>"
+*/
+/* @__NO_SIDE_EFFECTS__ */
+function defineWorkflowExecutionPolicy(name, def) {
+	return createExecutionPolicyInstance(name, def?.key ?? name, def?.concurrencyPolicy, def?.matchType ?? "exact", def?.separator ?? ".", false, false).instance;
+}
+/**
+* Define a group of workflow job function execution policies. Property names
+* become the workspace-unique `name` and default `key` verbatim, matching the
+* mental model of {@link defineWaitPoints}. Provide `name` / `key` explicitly
+* to override the property-name default (for example, when the property name
+* is not valid for the execution policy grammar or when the runtime key
+* prefix needs to differ).
+*
+* When `matchType: "prefix"` is set, the returned instance has `keyFor(suffix)`
+* instead of a directly-usable `key` (see {@link ExecutionPolicyWildcardInstance}).
+* `matchType` can be combined with an explicit `key`, or left to apply to
+* the property-name-derived prefix.
+*
+* The return type mirrors the builder's return type so JSDoc on each property
+* is preserved in IDE autocompletion.
+* @param builder - Callback that receives a `define` factory and returns a record of policies
+* @param options - Group-wide options; `separator` overrides the `.` `keyFor` uses to join the prefix and suffix for every prefix policy in the group
+* @returns The same object returned by the builder (with `name` / `key` resolved on each instance)
+* @example
+* export const executionPolicies = defineWorkflowExecutionPolicies((define) => ({
+*   premium: define({ concurrencyPolicy: { maxConcurrentExecutions: 5 } }),
+*   "tenant-api": define({
+*     matchType: "prefix",
+*     concurrencyPolicy: { maxConcurrentExecutions: 3 },
+*   }),
+* }));
+*
+* // In a workflow job function:
+* await tailor.workflow.triggerJobFunction("worker", args, {
+*   executionPolicyKey: executionPolicies.premium.key,
+* });
+* await tailor.workflow.triggerJobFunction("worker", args, {
+*   executionPolicyKey: executionPolicies["tenant-api"].keyFor(input.tenantId),
+* });
+*/
+/* @__NO_SIDE_EFFECTS__ */
+function defineWorkflowExecutionPolicies(builder, options) {
+	const separator = options?.separator ?? ".";
+	const nameSetters = /* @__PURE__ */ new Map();
+	const keySetters = /* @__PURE__ */ new Map();
+	const define = (def) => {
+		const explicitName = def?.name;
+		const explicitKey = def?.key;
+		const { instance, setName, setKey } = createExecutionPolicyInstance(explicitName ?? "__pending__", explicitKey ?? explicitName ?? "__pending__", def?.concurrencyPolicy, def?.matchType ?? "exact", separator, explicitName === void 0, explicitKey === void 0 && explicitName === void 0);
+		if (setName) nameSetters.set(instance, setName);
+		if (setKey) keySetters.set(instance, setKey);
+		return instance;
+	};
+	const result = builder(define);
+	for (const propName of Object.keys(result)) {
+		const instance = result[propName];
+		nameSetters.get(instance)?.(propName);
+		keySetters.get(instance)?.(propName);
+	}
+	return result;
+}
+
 //#endregion
 //#region src/configure/services/workflow/job.ts
 /**
@@ -389,11 +494,13 @@ function incomingWebhookTrigger(options) {
 */
 function createWorkflowJob(config) {
 	const userBody = config.body;
-	const body = process.env.TAILOR_PLATFORM_BUNDLE ? userBody : (input, context) => withWorkflowTestInvoker(context.invoker, () => userBody(input, context));
-	if (!process.env.TAILOR_PLATFORM_BUNDLE) registerJob(config.name, body);
-	const trigger = process.env.TAILOR_PLATFORM_BUNDLE ? () => {
+	const body = process.env.__TAILOR_PLATFORM_BUNDLE ? userBody : (input, context) => withWorkflowTestInvoker(context.invoker, () => userBody(input, context));
+	if (!process.env.__TAILOR_PLATFORM_BUNDLE) registerJob(config.name, body);
+	const trigger = process.env.__TAILOR_PLATFORM_BUNDLE ? () => {
 		throw new Error("This workflow job's .trigger() is rewritten at build time and is unavailable in the bundle");
-	} : (args) => dispatchTriggerJob(config.name, args);
+	} : function trigger(args, options) {
+		return arguments.length >= 2 ? dispatchTriggerJob(config.name, args, options) : dispatchTriggerJob(config.name, args);
+	};
 	return brandValue({
 		name: config.name,
 		trigger,
@@ -432,7 +539,7 @@ function createWaitPointInstance(initialKey) {
 	};
 }
 /**
-* Define a single typed wait point with an explicit key.
+* Create a single typed wait point with an explicit key.
 *
 * `Payload` and `Result` must be JsonValue-compatible.
 * Functions and objects with a `toJSON` method are rejected at the type level;
@@ -440,16 +547,16 @@ function createWaitPointInstance(initialKey) {
 * @param key - The wait point key used to match wait and resolve calls
 * @returns A WaitPointInstance with typed `.wait()` and `.resolve()` methods
 * @example
-* export const approval = defineWaitPoint<{ message: string }, { approved: boolean }>("approval");
+* export const approval = createWaitPoint<{ message: string }, { approved: boolean }>("approval");
 *
 * await approval.wait({ message: "Please approve" });
 */
 /* @__NO_SIDE_EFFECTS__ */
-function defineWaitPoint(key) {
+function createWaitPoint(key) {
 	return createWaitPointInstance(key).instance;
 }
 /**
-* Define a group of typed wait points for human-in-the-loop workflows.
+* Create a group of typed wait points for human-in-the-loop workflows.
 * Property names become the wait point keys.
 *
 * The return type is the same as the builder's return type, so JSDoc on each
@@ -461,7 +568,7 @@ function defineWaitPoint(key) {
 * @param builder - Callback that receives a `define` factory and returns an object of wait points
 * @returns The same object returned by the builder (with correct keys set on each instance)
 * @example
-* export const waitPoints = defineWaitPoints(define => ({
+* export const waitPoints = createWaitPoints(define => ({
 *   // Preceding JSDoc on this property is shown in IDE autocompletion
 *   approval: define<{ message: string }, { approved: boolean }>(),
 * }));
@@ -472,7 +579,7 @@ function defineWaitPoint(key) {
 * // For 2-level access, use destructured export with JSDoc attached to the export itself.
 */
 /* @__NO_SIDE_EFFECTS__ */
-function defineWaitPoints(builder) {
+function createWaitPoints(builder) {
 	const setters = /* @__PURE__ */ new Map();
 	const define = (() => {
 		const { instance, setKey } = createWaitPointInstance("__pending__");
@@ -514,7 +621,7 @@ function defineWaitPoints(builder) {
 function createWorkflow(config) {
 	return brandValue({
 		...config,
-		trigger: process.env.TAILOR_PLATFORM_BUNDLE ? async () => {
+		trigger: process.env.__TAILOR_PLATFORM_BUNDLE ? async () => {
 			throw new Error("workflow.trigger() is rewritten at build time and unavailable in the bundle");
 		} : async (args, options) => await dispatchTriggerWorkflow(config.name, args, options)
 	}, "workflow");
@@ -584,6 +691,10 @@ const unsafeAllowAllIdPPermission = {
 	sendPasswordResetEmail: [{
 		conditions: [],
 		permit: true
+	}],
+	unenrollMfa: [{
+		conditions: [],
+		permit: true
 	}]
 };
 
@@ -646,12 +757,14 @@ function defineSecretManager(config, options) {
 * Files are discovered via the `httpAdapter.files` glob in `defineConfig()`.
 *
 * `input` is an object keyed by lowercase HTTP method (`get`, `post`, `put`,
-* `patch`, `delete`). At least one method must be declared; the methods the
+* `patch`, `delete`). Each handler can return a GraphQL query string or a
+* typed document node. At least one method must be declared; the methods the
 * adapter serves are derived from these keys.
 *
-* `output` is optional and shared across all methods. If you need different
-* response shapes per method, discriminate inside `output` based on the
-* GraphQL response shape.
+* `output` is optional and shared across all methods. If `input` returns typed
+* document nodes, `output` receives the corresponding result type as
+* `resp.data`. If you need different response shapes per method, discriminate
+* inside `output` based on the GraphQL response shape.
 *
 * Each handler runs server-side and must be synchronous: Node APIs, `fetch`,
 * `async`/`await`, Promises, and top-level `await` are not available.
@@ -712,5 +825,5 @@ function definePlugins(...configs) {
 const t = t$1;
 
 //#endregion
-export { authAccessTokenIssuedTrigger, authAccessTokenRefreshedTrigger, authAccessTokenRevokedTrigger, authAccessTokenTrigger, createExecutor, createHttpAdapter, createResolver, createWorkflow, createWorkflowJob, db, defineAIGateway, defineAuth, defineConfig, defineIdp, definePlugins, defineSecretManager, defineStaticWebSite, defineWaitPoint, defineWaitPoints, idpUserCreatedTrigger, idpUserDeletedTrigger, idpUserTrigger, idpUserUpdatedTrigger, incomingWebhookTrigger, recordCreatedTrigger, recordDeletedTrigger, recordTrigger, recordUpdatedTrigger, resolverExecutedTrigger, scheduleTrigger, t, unsafeAllowAllGqlPermission, unsafeAllowAllIdPPermission, unsafeAllowAllTypePermission };
+export { authAccessTokenIssuedTrigger, authAccessTokenRefreshedTrigger, authAccessTokenRevokedTrigger, authAccessTokenTrigger, createExecutor, createHttpAdapter, createResolver, createWaitPoint, createWaitPoints, createWorkflow, createWorkflowJob, db, defineAIGateway, defineAuth, defineConfig, defineIdp, definePlugins, defineSecretManager, defineStaticWebSite, defineWorkflowExecutionPolicies, defineWorkflowExecutionPolicy, idpUserCreatedTrigger, idpUserDeletedTrigger, idpUserTrigger, idpUserUpdatedTrigger, incomingWebhookTrigger, recordCreatedTrigger, recordDeletedTrigger, recordTrigger, recordUpdatedTrigger, resolverExecutedTrigger, scheduleTrigger, t, unsafeAllowAllGqlPermission, unsafeAllowAllIdPPermission, unsafeAllowAllTypePermission };
 //# sourceMappingURL=index.mjs.map