@tailor-platform/sdk 2.0.0-next.2 → 2.0.0-next.4

package/dist/types/auth.generated.d.mts

@@ -0,0 +1,145 @@
+//#region src/types/auth.generated.d.ts
+type OIDC = {
+  /** Identity provider name */name: string;
+  kind: "OIDC"; /** OAuth2 client ID */
+  clientID: string; /** OAuth2 client secret */
+  clientSecret: {
+    vaultName: string;
+    secretKey: string;
+  }; /** OIDC provider URL */
+  providerURL: string; /** OIDC issuer URL (defaults to providerURL) */
+  issuerURL?: string | undefined; /** JWT claim to use as username */
+  usernameClaim?: string | undefined;
+};
+type SAML = {
+  /** Identity provider name */name: string;
+  kind: "SAML"; /** Enable signing of SAML requests */
+  enableSignRequest: boolean; /** URL to fetch SAML metadata (mutually exclusive with rawMetadata) */
+  metadataURL?: string | undefined; /** Raw SAML metadata XML (mutually exclusive with metadataURL) */
+  rawMetadata?: string | undefined; /** URL to redirect to when SAML ACS receives a response with an empty RelayState. */
+  defaultRedirectURL?: string | undefined;
+};
+type IDToken = {
+  /** Identity provider name */name: string;
+  kind: "IDToken"; /** ID token provider URL */
+  providerURL: string; /** Client ID for ID token validation */
+  clientID: string; /** ID token issuer URL */
+  issuerURL?: string | undefined; /** JWT claim to use as username */
+  usernameClaim?: string | undefined;
+};
+type BuiltinIdP = {
+  /** Identity provider name */name: string;
+  kind: "BuiltInIdP"; /** IdP namespace */
+  namespace: string; /** OAuth2 client name in the IdP */
+  clientName: string;
+};
+type IdProvider = OIDC | SAML | IDToken | BuiltinIdP;
+type OAuth2ClientInput = {
+  /** Allowed redirect URIs */redirectURIs: (`https://${string}` | `http://${string}` | `${string}:url` | `${string}:url/${string}`)[]; /** Client description */
+  description?: string | undefined; /** Allowed OAuth2 grant types */
+  grantTypes?: ("authorization_code" | "refresh_token")[] | undefined; /** OAuth2 client type */
+  clientType?: "confidential" | "public" | "browser" | undefined; /** Access token lifetime in seconds (60-86400) */
+  accessTokenLifetimeSeconds?: number | undefined; /** Refresh token lifetime in seconds (60-604800) */
+  refreshTokenLifetimeSeconds?: number | undefined; /** Require DPoP (Demonstrating Proof-of-Possession) for token requests */
+  requireDpop?: boolean | undefined;
+};
+type OAuth2Client = {
+  /** Allowed OAuth2 grant types */grantTypes: ("authorization_code" | "refresh_token")[]; /** Allowed redirect URIs */
+  redirectURIs: (`https://${string}` | `http://${string}` | `${string}:url` | `${string}:url/${string}`)[]; /** Access token lifetime in seconds (60-86400) */
+  accessTokenLifetimeSeconds: {
+    seconds: bigint;
+    nanos: number;
+  } | undefined; /** Refresh token lifetime in seconds (60-604800) */
+  refreshTokenLifetimeSeconds: {
+    seconds: bigint;
+    nanos: number;
+  } | undefined; /** Client description */
+  description?: string | undefined; /** OAuth2 client type */
+  clientType?: "confidential" | "public" | "browser" | undefined; /** Require DPoP (Demonstrating Proof-of-Possession) for token requests */
+  requireDpop?: boolean | undefined;
+};
+type SCIMAuthorization = {
+  /** SCIM authorization type */type: "oauth2" | "bearer"; /** Bearer token secret (required for bearer type) */
+  bearerSecret?: {
+    vaultName: string;
+    secretKey: string;
+  } | undefined;
+};
+type SCIMAttribute = {
+  /** Attribute data type */type: "string" | "number" | "boolean" | "datetime" | "complex"; /** Attribute name */
+  name: string; /** Attribute description */
+  description?: string | undefined; /** Attribute mutability */
+  mutability?: "readOnly" | "readWrite" | "writeOnly" | undefined; /** Whether the attribute is required */
+  required?: boolean | undefined; /** Whether the attribute can have multiple values */
+  multiValued?: boolean | undefined; /** Uniqueness constraint */
+  uniqueness?: "none" | "server" | "global" | undefined; /** List of canonical values */
+  canonicalValues?: string[] | null | undefined;
+  subAttributes?: SCIMAttribute[] | null | undefined;
+};
+type SCIMAttributeMapping = {
+  /** TailorDB field name to map to */tailorDBField: string; /** SCIM attribute path */
+  scimPath: string;
+};
+type SCIMResource = {
+  /** SCIM resource name */name: string; /** TailorDB namespace for the resource */
+  tailorDBNamespace: string; /** TailorDB type name for the resource */
+  tailorDBType: string; /** Core SCIM schema definition */
+  coreSchema: {
+    /** SCIM resource name */name: string;
+    attributes: {
+      type: "string" | "number" | "boolean" | "datetime" | "complex"; /** SCIM resource name */
+      name: string;
+      description?: string | undefined;
+      mutability?: "readOnly" | "readWrite" | "writeOnly" | undefined;
+      required?: boolean | undefined;
+      multiValued?: boolean | undefined;
+      uniqueness?: "none" | "server" | "global" | undefined;
+      canonicalValues?: string[] | null | undefined;
+      subAttributes?: any[] | null | undefined;
+    }[];
+  }; /** Attribute mapping configuration */
+  attributeMapping: {
+    tailorDBField: string;
+    scimPath: string;
+  }[];
+};
+type SCIMConfig = {
+  /** Machine user name for SCIM operations */machineUserName: string; /** SCIM authorization configuration */
+  authorization: {
+    type: "oauth2" | "bearer";
+    bearerSecret?: {
+      vaultName: string;
+      secretKey: string;
+    } | undefined;
+  }; /** SCIM resource definitions */
+  resources: {
+    name: string;
+    tailorDBNamespace: string;
+    tailorDBType: string;
+    coreSchema: {
+      name: string;
+      attributes: {
+        type: "string" | "number" | "boolean" | "datetime" | "complex";
+        name: string;
+        description?: string | undefined;
+        mutability?: "readOnly" | "readWrite" | "writeOnly" | undefined;
+        required?: boolean | undefined;
+        multiValued?: boolean | undefined;
+        uniqueness?: "none" | "server" | "global" | undefined;
+        canonicalValues?: string[] | null | undefined;
+        subAttributes?: any[] | null | undefined;
+      }[];
+    };
+    attributeMapping: {
+      tailorDBField: string;
+      scimPath: string;
+    }[];
+  }[];
+};
+type TenantProvider = {
+  /** TailorDB namespace for the tenant type */namespace: string; /** TailorDB type name for tenants */
+  type: string; /** Field used as the tenant signature */
+  signatureField: string;
+};
+//#endregion
+export { BuiltinIdP, IDToken, IdProvider, OAuth2Client, OAuth2ClientInput, OIDC, SAML, SCIMAttribute, SCIMAttributeMapping, SCIMAuthorization, SCIMConfig, SCIMResource, TenantProvider };

package/dist/types/executor.generated.d.mts

@@ -0,0 +1,177 @@
+//#region src/types/executor.generated.d.ts
+type TailorDBTrigger = {
+  /** TailorDB record event trigger */kind: "tailordb"; /** TailorDB event types to trigger on */
+  events: ("tailordb.type_record.created" | "tailordb.type_record.updated" | "tailordb.type_record.deleted")[]; /** TailorDB type name to watch for events */
+  typeName: string; /** Condition function to filter events */
+  condition?: Function | undefined;
+};
+type ResolverExecutedTrigger = {
+  kind: "resolverExecuted"; /** Name of the resolver to trigger on */
+  resolverName: string; /** Condition function to filter events */
+  condition?: Function | undefined;
+};
+type ScheduleTriggerInput = {
+  kind: "schedule"; /** CRON expression for the schedule */
+  cron: string; /** Timezone for the CRON schedule (default: UTC) */
+  timezone?: string | undefined;
+};
+type IncomingWebhookTrigger = {
+  kind: "incomingWebhook"; /** Response configuration */
+  response?: {
+    body?: Function | undefined;
+    statusCode?: number | undefined;
+  } | undefined;
+};
+type IdpUserTrigger = {
+  /** IdP user event trigger */kind: "idpUser"; /** IdP user event types to trigger on */
+  events: ("idp.user.created" | "idp.user.updated" | "idp.user.deleted")[]; /** IdP namespace name to subscribe to. If omitted, the project's only IdP is used; throws when multiple IdPs exist. */
+  idp?: string | undefined;
+};
+type AuthAccessTokenTrigger = {
+  /** Auth access token event trigger */kind: "authAccessToken"; /** Auth access token event types to trigger on */
+  events: ("auth.access_token.issued" | "auth.access_token.refreshed" | "auth.access_token.revoked")[];
+};
+type FunctionOperation = {
+  kind: "function" | "jobFunction"; /** Function implementation */
+  body: Function; /** Invoker for the function execution */
+  invoker?: string | {
+    namespace: string;
+    machineUserName: string;
+  } | undefined;
+};
+type GqlOperation = {
+  kind: "graphql";
+  query: string; /** Target application name for the GraphQL query */
+  appName?: string | undefined; /** Function to compute GraphQL variables */
+  variables?: Function | undefined; /** Invoker for the GraphQL execution */
+  invoker?: string | {
+    namespace: string;
+    machineUserName: string;
+  } | undefined;
+};
+type WebhookOperation = {
+  kind: "webhook"; /** Function returning the webhook URL */
+  url: Function; /** Function to compute the request body */
+  requestBody?: Function | undefined; /** HTTP headers for the webhook request */
+  headers?: {
+    [x: string]: string | {
+      vault: string;
+      key: string;
+    };
+  } | undefined;
+};
+type WorkflowOperation = {
+  kind: "workflow";
+  workflowName: string;
+  args?: Function | {
+    [x: string]: unknown;
+  } | undefined;
+  invoker?: string | {
+    namespace: string;
+    machineUserName: string;
+  } | undefined;
+};
+type ExecutorInput = {
+  /** Executor name */name: string; /** Event trigger configuration */
+  trigger: {
+    kind: "tailordb";
+    events: ("tailordb.type_record.created" | "tailordb.type_record.updated" | "tailordb.type_record.deleted")[];
+    typeName: string;
+    condition?: Function | undefined;
+  } | {
+    kind: "resolverExecuted";
+    resolverName: string;
+    condition?: Function | undefined;
+  } | {
+    kind: "schedule";
+    cron: string;
+    timezone?: string | undefined;
+  } | {
+    kind: "incomingWebhook";
+    response?: {
+      body?: Function | undefined;
+      statusCode?: number | undefined;
+    } | undefined;
+  } | {
+    kind: "idpUser";
+    events: ("idp.user.created" | "idp.user.updated" | "idp.user.deleted")[];
+    idp?: string | undefined;
+  } | {
+    kind: "authAccessToken";
+    events: ("auth.access_token.issued" | "auth.access_token.refreshed" | "auth.access_token.revoked")[];
+  }; /** Operation to execute when triggered */
+  operation: unknown; /** Executor description */
+  description?: string | undefined; /** Whether the executor is disabled */
+  disabled?: boolean | undefined;
+};
+type Executor = {
+  /** Executor name */name: string; /** Whether the executor is disabled */
+  disabled: boolean; /** Event trigger configuration */
+  trigger: {
+    kind: "tailordb";
+    events: ("tailordb.type_record.created" | "tailordb.type_record.updated" | "tailordb.type_record.deleted")[];
+    typeName: string;
+    condition?: Function | undefined;
+  } | {
+    kind: "resolverExecuted";
+    resolverName: string;
+    condition?: Function | undefined;
+  } | {
+    kind: "schedule";
+    cron: string;
+    timezone: string;
+  } | {
+    kind: "incomingWebhook";
+    response?: {
+      body?: Function | undefined;
+      statusCode?: number | undefined;
+    } | undefined;
+  } | {
+    kind: "idpUser";
+    events: ("idp.user.created" | "idp.user.updated" | "idp.user.deleted")[];
+    idp?: string | undefined;
+  } | {
+    kind: "authAccessToken";
+    events: ("auth.access_token.issued" | "auth.access_token.refreshed" | "auth.access_token.revoked")[];
+  }; /** Operation to execute when triggered */
+  operation: {
+    kind: "workflow";
+    workflowName: string;
+    args?: Function | {
+      [x: string]: unknown;
+    } | undefined;
+    invoker?: string | {
+      namespace: string;
+      machineUserName: string;
+    } | undefined;
+  } | {
+    kind: "function" | "jobFunction";
+    body: Function;
+    invoker?: string | {
+      namespace: string;
+      machineUserName: string;
+    } | undefined;
+  } | {
+    kind: "graphql";
+    query: string;
+    appName?: string | undefined;
+    variables?: Function | undefined;
+    invoker?: string | {
+      namespace: string;
+      machineUserName: string;
+    } | undefined;
+  } | {
+    kind: "webhook";
+    url: Function;
+    requestBody?: Function | undefined;
+    headers?: {
+      [x: string]: string | {
+        vault: string;
+        key: string;
+      };
+    } | undefined;
+  }; /** Executor description */
+  description?: string | undefined;
+};
+//#endregion
+export { AuthAccessTokenTrigger, Executor, ExecutorInput, FunctionOperation, GqlOperation, IdpUserTrigger, IncomingWebhookTrigger, ResolverExecutedTrigger, ScheduleTriggerInput, TailorDBTrigger, WebhookOperation, WorkflowOperation };

package/dist/types/helpers.d.mts

@@ -0,0 +1,39 @@
+//#region src/types/helpers.d.ts
+type Prettify<T> = { [K in keyof T as string extends K ? never : K]: T[K] } & {};
+type TypeLevelError<Message extends string> = {
+  readonly $error: Message;
+};
+type DeepWritable<T> = T extends Date | RegExp | Function ? T : T extends object ? { -readonly [P in keyof T]: DeepWritable<T[P]> } & {} : T;
+type output<T> = T extends {
+  _output: infer U;
+} ? DeepWritable<U> : never;
+type NullableToOptional<T> = { [K in keyof T as null extends T[K] ? never : K]: T[K] } & { [K in keyof T as null extends T[K] ? K : never]?: T[K] };
+type InferFieldsOutput<F extends Record<string, {
+  _output: any;
+  [key: string]: any;
+}>> = DeepWritable<Prettify<NullableToOptional<{ [K in keyof F]: output<F[K]> }>>>;
+type JsonValue = string | number | boolean | null | JsonValue[] | {
+  [key: string]: JsonValue;
+};
+/**
+ * A looser version of JsonValue that accepts interfaces.
+ * TypeScript interfaces don't have index signatures by default, so they can't
+ * be assigned to JsonValue's `{ [key: string]: JsonValue }`. This type uses a
+ * recursive structural check instead.
+ *
+ * Rejection rules:
+ * - Functions are rejected (top-level or as property values).
+ * - Objects with a `toJSON` method are rejected (can't faithfully round-trip).
+ * - Class instances that expose methods are rejected via the property walk
+ *   (methods are function-typed properties, which resolve to `never`).
+ *
+ * Limitation: class instances whose declared type has only data properties
+ * (for example `Error`, or user-defined DTO classes) are structurally
+ * indistinguishable from plain objects and cannot be rejected here. The
+ * platform performs the authoritative check at runtime.
+ */
+type JsonCompatible<T> = T extends string | number | boolean | null | undefined ? T : T extends readonly (infer U)[] ? JsonCompatible<U>[] : T extends Function ? never : T extends object ? T extends {
+  toJSON: () => unknown;
+} ? never : { [K in keyof T]: JsonCompatible<T[K]> } : never;
+//#endregion
+export { DeepWritable, InferFieldsOutput, JsonCompatible, JsonValue, NullableToOptional, Prettify, TypeLevelError, output };

package/dist/types/http-adapter.generated.d.mts

@@ -0,0 +1,17 @@
+//#region src/types/http-adapter.generated.d.ts
+type HttpAdapterConfigInput = {
+  /** Unique adapter name within the domain */name: string; /** Path pattern with segment wildcards (trailing or single-segment) */
+  pathPattern: string; /** Per-method functions that transform HTTP requests to GraphQL requests */
+  input: {
+    get?: Function | undefined;
+    post?: Function | undefined;
+    put?: Function | undefined;
+    patch?: Function | undefined;
+    delete?: Function | undefined;
+  }; /** Whether the adapter is active */
+  enabled?: boolean | undefined; /** Matching priority; the lowest value wins when multiple adapters match */
+  priority?: number | undefined; /** Function that transforms GraphQL response to HTTP response */
+  output?: Function | undefined;
+};
+//#endregion
+export { HttpAdapterConfigInput };