@tailor-platform/sdk 2.0.0-next.3 → 2.0.0-next.5

package/dist/runtime/file.d.mts

@@ -1,6 +1,4 @@
-declare namespace file_d_exports {
-  export { DownloadMetadata, FileDownloadAsBase64Response, FileDownloadResponse, FileDownloadStreamResponse, FileMetadata, FileUploadOptions, FileUploadResponse, FileUploadStreamOptions, TailorDBFileAPI, TailorDBFileError, TailorDBFileErrorCode, UploadMetadata, deleteFile as delete, deleteFile, download, downloadAsBase64, downloadStream, getMetadata, upload, uploadStream };
-}
+//#region src/runtime/file.d.ts
 /**
  * TailorDB file (BLOB) utilities.
  *
@@ -30,7 +28,7 @@ interface DownloadMetadata {
   sha256sum: string;
   lastUploadedAt: string;
 }
-/** File metadata (for {@link getMetadata}). */
+/** File metadata (for {@link TailorDBFileAPI.getMetadata}). */
 interface FileMetadata {
   contentType: string;
   fileSize: number;
@@ -82,11 +80,6 @@ interface TailorDBFileError extends Error {
 /**
  * Platform API surface for `tailordb.file`. Describes the shape the platform
  * runtime injects on `globalThis.tailordb.file`.
- *
- * Each method below is also re-exported as a top-level named export from this
- * module (e.g. `upload`, `download`, `deleteFile`) so callers can either
- * `import * as file from "@tailor-platform/sdk/runtime/file"` or pick
- * individual methods.
  */
 interface TailorDBFileAPI {
   /**
@@ -125,8 +118,7 @@ interface TailorDBFileAPI {
    */
   downloadAsBase64(namespace: string, typeName: string, fieldName: string, recordId: string): Promise<FileDownloadAsBase64Response>;
   /**
-   * Delete a file from TailorDB. Exported as `deleteFile` (and aliased as
-   * `delete`) so it can be used both with named and namespace imports.
+   * Delete a file from TailorDB.
    * @param namespace - TailorDB namespace
    * @param typeName - TailorDB type name
    * @param fieldName - File field name on the type
@@ -164,47 +156,15 @@ interface TailorDBFileAPI {
    */
   uploadStream(namespace: string, typeName: string, fieldName: string, recordId: string, readableStream: ReadableStream<Uint8Array | ArrayBuffer>, options?: FileUploadStreamOptions): Promise<FileUploadResponse>;
 }
-/**
- * See {@link TailorDBFileAPI.upload}.
- * @param args - Forwarded to {@link TailorDBFileAPI.upload}
- * @returns Upload response containing the file metadata
- */
-declare const upload: TailorDBFileAPI["upload"];
-/**
- * See {@link TailorDBFileAPI.download}.
- * @param args - Forwarded to {@link TailorDBFileAPI.download}
- * @returns Bytes and metadata for the file
- */
-declare const download: TailorDBFileAPI["download"];
-/**
- * See {@link TailorDBFileAPI.downloadAsBase64}.
- * @param args - Forwarded to {@link TailorDBFileAPI.downloadAsBase64}
- * @returns Base64-encoded contents and metadata for the file
- */
-declare const downloadAsBase64: TailorDBFileAPI["downloadAsBase64"];
-/**
- * See {@link TailorDBFileAPI.delete}.
- * @param args - Forwarded to {@link TailorDBFileAPI.delete}
- * @returns Resolves once the file has been deleted
- */
-declare const deleteFile: TailorDBFileAPI["delete"];
-/**
- * See {@link TailorDBFileAPI.getMetadata}.
- * @param args - Forwarded to {@link TailorDBFileAPI.getMetadata}
- * @returns Metadata for the stored file
- */
-declare const getMetadata: TailorDBFileAPI["getMetadata"];
-/**
- * See {@link TailorDBFileAPI.downloadStream}.
- * @param args - Forwarded to {@link TailorDBFileAPI.downloadStream}
- * @returns ReadableStream body and metadata for the file
- */
-declare const downloadStream: TailorDBFileAPI["downloadStream"];
-/**
- * See {@link TailorDBFileAPI.uploadStream}.
- * @param args - Forwarded to {@link TailorDBFileAPI.uploadStream}
- * @returns Upload response containing the file metadata
- */
-declare const uploadStream: TailorDBFileAPI["uploadStream"];
+/** Runtime wrapper namespace for `tailordb.file`. */
+declare const file: {
+  readonly upload: (namespace: string, typeName: string, fieldName: string, recordId: string, data: string | ArrayBuffer | Uint8Array | number[], options?: FileUploadOptions) => Promise<FileUploadResponse>;
+  readonly download: (namespace: string, typeName: string, fieldName: string, recordId: string) => Promise<FileDownloadResponse>;
+  readonly downloadAsBase64: (namespace: string, typeName: string, fieldName: string, recordId: string) => Promise<FileDownloadAsBase64Response>;
+  readonly delete: (namespace: string, typeName: string, fieldName: string, recordId: string) => Promise<void>;
+  readonly getMetadata: (namespace: string, typeName: string, fieldName: string, recordId: string) => Promise<FileMetadata>;
+  readonly downloadStream: (namespace: string, typeName: string, fieldName: string, recordId: string) => Promise<FileDownloadStreamResponse>;
+  readonly uploadStream: (namespace: string, typeName: string, fieldName: string, recordId: string, readableStream: ReadableStream<Uint8Array | ArrayBuffer>, options?: FileUploadStreamOptions) => Promise<FileUploadResponse>;
+};
 //#endregion
-export { DownloadMetadata, FileDownloadAsBase64Response, FileDownloadResponse, FileDownloadStreamResponse, FileMetadata, FileUploadOptions, FileUploadResponse, FileUploadStreamOptions, TailorDBFileAPI, TailorDBFileError, TailorDBFileErrorCode, UploadMetadata, deleteFile as delete, deleteFile, download, downloadAsBase64, downloadStream, file_d_exports, getMetadata, upload, uploadStream };
+export { DownloadMetadata, FileDownloadAsBase64Response, FileDownloadResponse, FileDownloadStreamResponse, FileMetadata, FileUploadOptions, FileUploadResponse, FileUploadStreamOptions, TailorDBFileAPI, TailorDBFileError, TailorDBFileErrorCode, UploadMetadata, file };

package/dist/runtime/file.mjs

@@ -1,3 +1,3 @@
-import { c as uploadStream, i as downloadStream, n as download, o as getMetadata, r as downloadAsBase64, s as upload, t as deleteFile } from "../file-BbdFGdMV.mjs";
+import { t as file } from "../file-BUcmVIH2.mjs";
 
-export { deleteFile as delete, deleteFile, download, downloadAsBase64, downloadStream, getMetadata, upload, uploadStream };
+export { file };

package/dist/runtime/globals.d.mts

@@ -1,10 +1,9 @@
+import { Invoker, PlatformTriggerWorkflowOptions } from "./workflow.mjs";
 import { ContextInvoker } from "./context.mjs";
 import { TailorDBFileErrorCode } from "./file.mjs";
 import { IconvInstance } from "./iconv.mjs";
 import { ClientConfig, CreateUserInput, IdpClientInstance, ListUsersOptions, ListUsersResponse, SendPasswordResetEmailInput, UnenrollMfaInput, UpdateUserInput, User, UserQuery } from "./idp.mjs";
-import { Invoker, PlatformTriggerWorkflowOptions } from "./workflow.mjs";
 import { TailorRuntime, TailordbClientInstance, TailordbCommandType, TailordbQueryResult, TailordbRuntime } from "./index.mjs";
-
 //#region src/runtime/globals.d.ts
 type TailorIdpClientConfig = ClientConfig;
 type TailorIdpCreateUserInput = CreateUserInput;

package/dist/runtime/iconv.d.mts

@@ -1,6 +1,4 @@
-declare namespace iconv_d_exports {
-  export { Iconv, IconvConstructor, IconvInstance, TailorIconvAPI, convert, convertBuffer, decode, encode, encodings };
-}
+//#region src/runtime/iconv.d.ts
 /**
  * Character encoding conversion utilities.
  *
@@ -29,11 +27,6 @@ interface IconvConstructor {
  * Platform API surface for `tailor.iconv`. Describes the shape the platform
  * runtime injects on `globalThis.tailor.iconv` so the wrapper and ambient
  * globals stay in sync.
- *
- * Each method below is also re-exported as a top-level named export from this
- * module (e.g. `convert`, `decode`, `encode`) so callers can either
- * `import * as iconv from "@tailor-platform/sdk/runtime/iconv"` or pick
- * individual methods.
  */
 interface TailorIconvAPI {
   /**
@@ -71,51 +64,10 @@ interface TailorIconvAPI {
    * @returns Array of encoding names supported by the platform iconv runtime
    */
   encodings(): string[];
-  /** Constructor for the stateful {@link Iconv} converter. */
+  /** Constructor for the stateful converter. */
   Iconv: IconvConstructor;
 }
-/**
- * See {@link TailorIconvAPI.convert}.
- * @param args - Forwarded to {@link TailorIconvAPI.convert}
- * @returns `string` when `toEncoding` is `"UTF8"` or `"UTF-8"`, otherwise `Uint8Array`.
- */
-declare const convert: TailorIconvAPI["convert"];
-/**
- * See {@link TailorIconvAPI.convertBuffer}.
- * @param args - Forwarded to {@link TailorIconvAPI.convertBuffer}
- * @returns `string` when `toEncoding` is `"UTF8"` or `"UTF-8"`, otherwise `Uint8Array`.
- */
-declare const convertBuffer: TailorIconvAPI["convertBuffer"];
-/**
- * See {@link TailorIconvAPI.decode}.
- * @param args - Forwarded to {@link TailorIconvAPI.decode}
- * @returns Decoded UTF-8 string
- */
-declare const decode: TailorIconvAPI["decode"];
-/**
- * See {@link TailorIconvAPI.encode}.
- * @param args - Forwarded to {@link TailorIconvAPI.encode}
- * @returns `string` when `encoding` is `"UTF8"` or `"UTF-8"`, otherwise `Uint8Array`.
- */
-declare const encode: TailorIconvAPI["encode"];
-/**
- * See {@link TailorIconvAPI.encodings}.
- * @returns Array of encoding names supported by the platform iconv runtime
- */
-declare const encodings: TailorIconvAPI["encodings"];
-/**
- * Stateful converter for repeated conversions between a fixed encoding pair.
- * Compatible with the `node-iconv` API surface.
- */
-declare class Iconv {
-  private impl;
-  constructor(fromEncoding: string, toEncoding: string);
-  /**
-   * Convert input using this converter's fixed encoding pair.
-   * @param input - Bytes or string to convert
-   * @returns Encoded output (string for UTF-8 targets, otherwise `Uint8Array`).
-   */
-  convert(input: string | Uint8Array | ArrayBuffer): string | Uint8Array;
-}
+/** Runtime API for `tailor.iconv`. */
+declare const iconv: TailorIconvAPI;
 //#endregion
-export { Iconv, IconvConstructor, IconvInstance, TailorIconvAPI, convert, convertBuffer, decode, encode, encodings, iconv_d_exports };
+export { IconvConstructor, IconvInstance, TailorIconvAPI, iconv };

package/dist/runtime/iconv.mjs

@@ -1,3 +1,3 @@
-import { a as encode, i as decode, n as convert, o as encodings, r as convertBuffer, t as Iconv } from "../iconv-D2vi8G36.mjs";
+import { t as iconv } from "../iconv-QWaZh0TT.mjs";
 
-export { Iconv, convert, convertBuffer, decode, encode, encodings };
+export { iconv };

package/dist/runtime/idp.d.mts

@@ -1,6 +1,4 @@
-declare namespace idp_d_exports {
-  export { Client, ClientConfig, CreateUserInput, IdpClientConstructor, IdpClientInstance, ListUsersOptions, ListUsersResponse, SendPasswordResetEmailInput, TailorIdpAPI, UnenrollMfaInput, UpdateUserInput, User, UserQuery };
-}
+//#region src/runtime/idp.d.ts
 /**
  * IDP (Identity Provider) utilities.
  *
@@ -13,7 +11,7 @@ declare namespace idp_d_exports {
  * const client = new idp.Client({ namespace: "my-namespace" });
  * const { users } = await client.users({ first: 10 });
  */
-/** Configuration object for {@link Client}. */
+/** Configuration object for `idp.Client`. */
 interface ClientConfig {
   namespace: string;
 }
@@ -30,18 +28,18 @@ interface User {
   mfaEnrolled: boolean;
   /**
    * Enrolled MFA second factor IDs. Pass an entry into
-   * {@link Client.unenrollMfa} to remove that factor.
+   * `idp.Client.unenrollMfa()` to remove that factor.
    */
   mfaFactorIds: string[];
 }
-/** Filter options for {@link Client.users}. */
+/** Filter options for `idp.Client.users()`. */
 interface UserQuery {
   /** Filter by user IDs */
   ids?: string[];
   /** Filter by user names */
   names?: string[];
 }
-/** Pagination/filter options for {@link Client.users}. */
+/** Pagination/filter options for `idp.Client.users()`. */
 interface ListUsersOptions {
   /** Maximum number of users to return */
   first?: number;
@@ -50,13 +48,13 @@ interface ListUsersOptions {
   /** Query filter for users */
   query?: UserQuery;
 }
-/** Response shape for {@link Client.users}. */
+/** Response shape for `idp.Client.users()`. */
 interface ListUsersResponse {
   users: User[];
   nextPageToken: string | null;
   totalCount: number;
 }
-/** Input for {@link Client.createUser}. */
+/** Input for `idp.Client.createUser()`. */
 interface CreateUserInput {
   /** The user's name (typically email) */
   name: string;
@@ -65,7 +63,7 @@ interface CreateUserInput {
   /** Whether the user is disabled */
   disabled?: boolean;
 }
-/** Input for {@link Client.updateUser}. */
+/** Input for `idp.Client.updateUser()`. */
 interface UpdateUserInput {
   /** The user's ID */
   id: string;
@@ -78,7 +76,7 @@ interface UpdateUserInput {
   /** New disabled status for the user */
   disabled?: boolean;
 }
-/** Input for {@link Client.sendPasswordResetEmail}. */
+/** Input for `idp.Client.sendPasswordResetEmail()`. */
 interface SendPasswordResetEmailInput {
   /** The ID of the user */
   userId: string;
@@ -89,7 +87,7 @@ interface SendPasswordResetEmailInput {
   /** The email subject line. Defaults to the localized default subject. */
   subject?: string;
 }
-/** Input for {@link Client.unenrollMfa}. */
+/** Input for `idp.Client.unenrollMfa()`. */
 interface UnenrollMfaInput {
   /** The ID of the user whose factor will be unenrolled. */
   userId: string;
@@ -125,62 +123,7 @@ interface IdpClientConstructor {
 interface TailorIdpAPI {
   Client: IdpClientConstructor;
 }
-/**
- * IDP Client for user management operations.
- *
- * Wraps the platform-provided `tailor.idp.Client` and exposes the same surface.
- */
-declare class Client {
-  #private;
-  constructor(config: ClientConfig);
-  /**
-   * List users in the namespace with optional filtering and pagination.
-   * @param options - Pagination and filter options
-   * @returns Page of users with `nextPageToken` and `totalCount`
-   */
-  users(options?: ListUsersOptions): Promise<ListUsersResponse>;
-  /**
-   * Get a user by ID.
-   * @param userId - IDP user ID
-   * @returns The matching user
-   */
-  user(userId: string): Promise<User>;
-  /**
-   * Get a user by name.
-   * @param name - IDP user name
-   * @returns The matching user
-   */
-  userByName(name: string): Promise<User>;
-  /**
-   * Create a new user.
-   * @param input - User attributes
-   * @returns The newly created user
-   */
-  createUser(input: CreateUserInput): Promise<User>;
-  /**
-   * Update an existing user.
-   * @param input - User ID plus attributes to update
-   * @returns The updated user
-   */
-  updateUser(input: UpdateUserInput): Promise<User>;
-  /**
-   * Delete a user by ID.
-   * @param userId - IDP user ID
-   * @returns `true` when the user was deleted
-   */
-  deleteUser(userId: string): Promise<boolean>;
-  /**
-   * Send a password reset email to a user.
-   * @param input - Target user ID and redirect URI
-   * @returns `true` when the email was queued
-   */
-  sendPasswordResetEmail(input: SendPasswordResetEmailInput): Promise<boolean>;
-  /**
-   * Unenroll an MFA factor from a user.
-   * @param input - Target user ID and factor ID (see {@link User.mfaFactorIds})
-   * @returns `true` when the factor was removed
-   */
-  unenrollMfa(input: UnenrollMfaInput): Promise<boolean>;
-}
+/** Runtime API for `tailor.idp`. */
+declare const idp: TailorIdpAPI;
 //#endregion
-export { Client, ClientConfig, CreateUserInput, IdpClientConstructor, IdpClientInstance, ListUsersOptions, ListUsersResponse, SendPasswordResetEmailInput, TailorIdpAPI, UnenrollMfaInput, UpdateUserInput, User, UserQuery, idp_d_exports };
+export { ClientConfig, CreateUserInput, IdpClientConstructor, IdpClientInstance, ListUsersOptions, ListUsersResponse, SendPasswordResetEmailInput, TailorIdpAPI, UnenrollMfaInput, UpdateUserInput, User, UserQuery, idp };

package/dist/runtime/idp.mjs

@@ -1,3 +1,3 @@
-import { t as Client } from "../idp-Bx25ZBdN.mjs";
+import { t as idp } from "../idp-RA_swu-h.mjs";
 
-export { Client };
+export { idp };

package/dist/runtime/index.d.mts

@@ -1,12 +1,11 @@
-import { TailorAigatewayAPI, aigateway_d_exports } from "./aigateway.mjs";
-import { TailorAuthconnectionAPI, authconnection_d_exports } from "./authconnection.mjs";
-import { TailorContextAPI, context_d_exports } from "./context.mjs";
-import { TailorDBFileAPI, file_d_exports } from "./file.mjs";
-import { TailorIconvAPI, iconv_d_exports } from "./iconv.mjs";
-import { TailorIdpAPI, idp_d_exports } from "./idp.mjs";
-import { TailorSecretmanagerAPI, secretmanager_d_exports } from "./secretmanager.mjs";
-import { TailorWorkflowAPI, workflow_d_exports } from "./workflow.mjs";
-
+import { PlatformWorkflowAPI, workflow } from "./workflow.mjs";
+import { TailorAigatewayAPI, aigateway } from "./aigateway.mjs";
+import { TailorAuthconnectionAPI, authconnection } from "./authconnection.mjs";
+import { PlatformContextAPI, context } from "./context.mjs";
+import { TailorDBFileAPI, file } from "./file.mjs";
+import { TailorIconvAPI, iconv } from "./iconv.mjs";
+import { TailorIdpAPI, idp } from "./idp.mjs";
+import { TailorSecretmanagerAPI, secretmanager } from "./secretmanager.mjs";
 //#region src/runtime/index.d.ts
 /** SQL command type recorded on a {@link TailordbQueryResult}. */
 type TailordbCommandType = "INSERT" | "DELETE" | "UPDATE" | "SELECT" | "MOVE" | "FETCH" | "COPY" | "CREATE";
@@ -34,8 +33,8 @@ interface TailorRuntime {
   authconnection: TailorAuthconnectionAPI;
   iconv: TailorIconvAPI;
   idp: TailorIdpAPI;
-  workflow: TailorWorkflowAPI;
-  context: TailorContextAPI;
+  workflow: PlatformWorkflowAPI;
+  context: PlatformContextAPI;
   aigateway: TailorAigatewayAPI;
 }
 /** Top-level `tailordb` runtime object. */
@@ -44,4 +43,4 @@ interface TailordbRuntime {
   file: TailorDBFileAPI;
 }
 //#endregion
-export { TailorRuntime, TailordbClientConstructor, TailordbClientInstance, TailordbCommandType, TailordbQueryResult, TailordbRuntime, aigateway_d_exports as aigateway, authconnection_d_exports as authconnection, context_d_exports as context, file_d_exports as file, iconv_d_exports as iconv, idp_d_exports as idp, secretmanager_d_exports as secretmanager, workflow_d_exports as workflow };
+export { TailorRuntime, TailordbClientConstructor, TailordbClientInstance, TailordbCommandType, TailordbQueryResult, TailordbRuntime, aigateway, authconnection, context, file, iconv, idp, secretmanager, workflow };

package/dist/runtime/index.mjs

@@ -1,10 +1,10 @@
-import { s as iconv_exports } from "../iconv-D2vi8G36.mjs";
-import { r as secretmanager_exports } from "../secretmanager-BVxw3ih_.mjs";
-import { t as authconnection_exports } from "../authconnection-BGQM8FZI.mjs";
-import { n as idp_exports } from "../idp-Bx25ZBdN.mjs";
-import { o as workflow_exports } from "../workflow-Bo59B75H.mjs";
-import { t as context_exports } from "../context-Bd266-ru.mjs";
-import { a as file_exports } from "../file-BbdFGdMV.mjs";
-import { t as aigateway_exports } from "../aigateway-B3oZZE6v.mjs";
+import { t as iconv } from "../iconv-QWaZh0TT.mjs";
+import { t as secretmanager } from "../secretmanager-CYlpffsz.mjs";
+import { t as authconnection } from "../authconnection-CZvi9ANm.mjs";
+import { t as idp } from "../idp-RA_swu-h.mjs";
+import { t as workflow } from "../workflow-GNuSnsTx.mjs";
+import { t as context } from "../context-DYQVYWqZ.mjs";
+import { t as file } from "../file-BUcmVIH2.mjs";
+import { t as aigateway } from "../aigateway-DR4Kwuik.mjs";
 
-export { aigateway_exports as aigateway, authconnection_exports as authconnection, context_exports as context, file_exports as file, iconv_exports as iconv, idp_exports as idp, secretmanager_exports as secretmanager, workflow_exports as workflow };
+export { aigateway, authconnection, context, file, iconv, idp, secretmanager, workflow };

package/dist/runtime/secretmanager.d.mts

@@ -1,6 +1,4 @@
-declare namespace secretmanager_d_exports {
-  export { TailorSecretmanagerAPI, getSecret, getSecrets };
-}
+//#region src/runtime/secretmanager.d.ts
 /**
  * Secret manager utilities.
  *
@@ -17,10 +15,6 @@ declare namespace secretmanager_d_exports {
 /**
  * Platform API surface for `tailor.secretmanager`. Describes the shape the
  * platform runtime injects on `globalThis.tailor.secretmanager`.
- *
- * Each method below is also re-exported as a top-level named export from this
- * module so callers can either `import * as secretmanager from
- * "@tailor-platform/sdk/runtime/secretmanager"` or pick individual methods.
  */
 interface TailorSecretmanagerAPI {
   /**
@@ -38,17 +32,10 @@ interface TailorSecretmanagerAPI {
    */
   getSecret(vault: string, name: string): Promise<string | undefined>;
 }
-/**
- * See {@link TailorSecretmanagerAPI.getSecrets}.
- * @param args - Forwarded to {@link TailorSecretmanagerAPI.getSecrets}
- * @returns Partial record keyed by the requested names
- */
-declare const getSecrets: TailorSecretmanagerAPI["getSecrets"];
-/**
- * See {@link TailorSecretmanagerAPI.getSecret}.
- * @param args - Forwarded to {@link TailorSecretmanagerAPI.getSecret}
- * @returns The secret value, or `undefined` if not present
- */
-declare const getSecret: TailorSecretmanagerAPI["getSecret"];
+/** Runtime wrapper namespace for `tailor.secretmanager`. */
+declare const secretmanager: {
+  readonly getSecrets: <const T extends readonly string[]>(vault: string, names: T) => Promise<Partial<Record<T[number], string>>>;
+  readonly getSecret: (vault: string, name: string) => Promise<string | undefined>;
+};
 //#endregion
-export { TailorSecretmanagerAPI, getSecret, getSecrets, secretmanager_d_exports };
+export { TailorSecretmanagerAPI, secretmanager };

package/dist/runtime/secretmanager.mjs

@@ -1,3 +1,3 @@
-import { n as getSecrets, t as getSecret } from "../secretmanager-BVxw3ih_.mjs";
+import { t as secretmanager } from "../secretmanager-CYlpffsz.mjs";
 
-export { getSecret, getSecrets };
+export { secretmanager };

package/dist/runtime/types.d.mts

@@ -7,10 +7,15 @@ type InferredAttributes = keyof Attributes extends never ? Record<string, string
 type InferredAttributeList = AttributeList["__tuple"] extends [] ? string[] : AttributeList["__tuple"];
 /** Represents a user or machine user principal in the Tailor Platform. */
 type TailorPrincipal = {
-  /** The ID of the principal. */id: string; /** The type of the principal. */
-  type: "user" | "machine_user"; /** The ID of the workspace the principal belongs to. */
-  workspaceId: string; /** A map of the principal's attributes. */
-  attributes: InferredAttributes; /** A list of the principal's attribute IDs. */
+  /** The ID of the principal. */
+  id: string;
+  /** The type of the principal. */
+  type: "user" | "machine_user";
+  /** The ID of the workspace the principal belongs to. */
+  workspaceId: string;
+  /** A map of the principal's attributes. */
+  attributes: InferredAttributes;
+  /** A list of the principal's attribute IDs. */
   attributeList: InferredAttributeList;
 };
 interface Env {}

package/dist/runtime/workflow.d.mts

@@ -1,6 +1,4 @@
-declare namespace workflow_d_exports {
-  export { Invoker, PlatformTriggerWorkflowOptions, TailorWorkflowAPI, TriggerWorkflowOptions, resolve, resumeWorkflow, triggerJobFunction, triggerWorkflow, wait };
-}
+//#region src/runtime/workflow.d.ts
 /**
  * Workflow utilities.
  *
@@ -30,15 +28,29 @@ interface TriggerWorkflowOptions {
 interface PlatformTriggerWorkflowOptions {
   authInvoker?: Invoker;
 }
+declare const executionPolicyKeyBrand: unique symbol;
+/**
+ * A concrete runtime key produced by an execution policy instance — either an
+ * exact-match policy's `.key`, or a wildcard policy's `.keyFor(suffix)` (see
+ * `defineWorkflowExecutionPolicies`). Branded so an arbitrary string that
+ * wasn't derived from a declared policy can't be passed as `executionPolicyKey`.
+ */
+type ExecutionPolicyKey = string & {
+  readonly [executionPolicyKeyBrand]: never;
+};
+/** Options for {@link triggerJobFunction}. */
+interface TriggerJobFunctionOptions {
+  /**
+   * Execution policy key matched by the platform against the policies
+   * declared with `defineWorkflowExecutionPolicies` in `tailor.config.ts`.
+   */
+  executionPolicyKey?: ExecutionPolicyKey;
+}
 /**
  * Platform API surface for `tailor.workflow`. Describes the shape the platform
  * runtime injects on `globalThis.tailor.workflow`.
- *
- * Each method below is also re-exported as a top-level named export from this
- * module so callers can either `import * as workflow from
- * "@tailor-platform/sdk/runtime/workflow"` or pick individual methods.
  */
-interface TailorWorkflowAPI {
+interface PlatformWorkflowAPI {
   /**
    * Triggers a workflow and returns its execution ID.
    * @param workflowName - Workflow name as defined in tailor.config
@@ -57,9 +69,10 @@ interface TailorWorkflowAPI {
    * Triggers a job function and returns its result.
    * @param jobName - Job name as defined in the workflow
    * @param args - Arguments forwarded to the job
+   * @param options - Optional trigger options (e.g. `executionPolicyKey`)
    * @returns The job's return value
    */
-  triggerJobFunction(jobName: string, args?: any): any;
+  triggerJobFunction(jobName: string, args?: any, options?: TriggerJobFunctionOptions): any;
   /**
    * Suspends the current workflow execution and waits for an external signal to resume.
    * @param key - Wait point key
@@ -76,37 +89,25 @@ interface TailorWorkflowAPI {
    */
   resolve(executionId: string, key: string, callback: (waitPayload: any) => any): Promise<void>;
 }
-/**
- * See {@link TailorWorkflowAPI.triggerWorkflow}.
- * @param workflowName - Workflow name as defined in tailor.config
- * @param args - Arguments forwarded to the workflow's main job
- * @param options - Optional trigger options
- * @returns The execution ID of the triggered workflow
- */
+/** Runtime wrapper API for workflow and job control. */
+interface TailorWorkflowAPI extends Omit<PlatformWorkflowAPI, "triggerWorkflow"> {
+  /**
+   * Triggers a workflow and returns its execution ID.
+   * @param workflowName - Workflow name as defined in tailor.config
+   * @param args - Arguments forwarded to the workflow's main job
+   * @param options - Optional SDK trigger options
+   * @returns The execution ID of the triggered workflow
+   */
+  triggerWorkflow(workflowName: string, args?: any, options?: TriggerWorkflowOptions): Promise<string>;
+}
 declare function triggerWorkflow(workflowName: string, args?: any, options?: TriggerWorkflowOptions): Promise<string>;
-/**
- * See {@link TailorWorkflowAPI.resumeWorkflow}.
- * @param args - Forwarded to {@link TailorWorkflowAPI.resumeWorkflow}
- * @returns The execution ID of the resumed workflow
- */
-declare const resumeWorkflow: TailorWorkflowAPI["resumeWorkflow"];
-/**
- * See {@link TailorWorkflowAPI.triggerJobFunction}.
- * @param args - Forwarded to {@link TailorWorkflowAPI.triggerJobFunction}
- * @returns The job's return value
- */
-declare const triggerJobFunction: TailorWorkflowAPI["triggerJobFunction"];
-/**
- * See {@link TailorWorkflowAPI.wait}.
- * @param args - Forwarded to {@link TailorWorkflowAPI.wait}
- * @returns The payload supplied by the corresponding `resolve` call
- */
-declare const wait: TailorWorkflowAPI["wait"];
-/**
- * See {@link TailorWorkflowAPI.resolve}.
- * @param args - Forwarded to {@link TailorWorkflowAPI.resolve}
- * @returns A promise that resolves once the resolve has been recorded
- */
-declare const resolve: TailorWorkflowAPI["resolve"];
+/** Runtime wrapper namespace for `tailor.workflow`. */
+declare const workflow: {
+  readonly triggerWorkflow: typeof triggerWorkflow;
+  readonly resumeWorkflow: (executionId: string) => Promise<string>;
+  readonly triggerJobFunction: (jobName: string, args?: any, options?: TriggerJobFunctionOptions) => any;
+  readonly wait: (key: string, payload?: any) => any;
+  readonly resolve: (executionId: string, key: string, callback: (waitPayload: any) => any) => Promise<void>;
+};
 //#endregion
-export { Invoker, PlatformTriggerWorkflowOptions, TailorWorkflowAPI, TriggerWorkflowOptions, resolve, resumeWorkflow, triggerJobFunction, triggerWorkflow, wait, workflow_d_exports };
+export { ExecutionPolicyKey, Invoker, PlatformTriggerWorkflowOptions, PlatformWorkflowAPI, TailorWorkflowAPI, TriggerJobFunctionOptions, TriggerWorkflowOptions, workflow };

package/dist/runtime/workflow.mjs

@@ -1,3 +1,3 @@
-import { a as wait, i as triggerWorkflow, n as resumeWorkflow, r as triggerJobFunction, t as resolve } from "../workflow-Bo59B75H.mjs";
+import { t as workflow } from "../workflow-GNuSnsTx.mjs";
 
-export { resolve, resumeWorkflow, triggerJobFunction, triggerWorkflow, wait };
+export { workflow };