@tailor-platform/sdk 2.14.0 → 2.14.1

package/dist/types/resolver.generated.d.mts

@@ -2,8 +2,8 @@
 /**
  * GraphQL operation type
  */
-type QueryType = "query" | "mutation";
-type Resolver = {
+export type QueryType = "query" | "mutation";
+export type Resolver = {
   /** GraphQL operation type (query or mutation) */
   operation: QueryType;
   /** Resolver name */
@@ -79,6 +79,5 @@ type Resolver = {
     description?: string | undefined;
   }[] | undefined;
 };
-type ResolverInput = Resolver;
-//#endregion
-export { QueryType, Resolver, ResolverInput };
+export type ResolverInput = Resolver;
+//#endregion

package/dist/types/secrets.generated.d.mts

@@ -1,5 +1,5 @@
 //#region src/types/secrets.generated.d.ts
-type Secrets = {
+export type Secrets = {
   vaults: {
     [x: string]: {
       [x: string]: string | null | undefined;
@@ -9,6 +9,5 @@ type Secrets = {
     ignoreNullishValues: boolean;
   };
 };
-type SecretsInput = Secrets;
-//#endregion
-export { Secrets, SecretsInput };
+export type SecretsInput = Secrets;
+//#endregion

package/dist/types/staticwebsite.generated.d.mts

@@ -1,5 +1,5 @@
 //#region src/types/staticwebsite.generated.d.ts
-type StaticWebsite = {
+export type StaticWebsite = {
   /** Static website name */
   name: string;
   /** Static website description */
@@ -9,6 +9,5 @@ type StaticWebsite = {
   /** Custom domains for the static website */
   customDomains?: string[] | undefined;
 };
-type StaticWebsiteInput = StaticWebsite;
-//#endregion
-export { StaticWebsite, StaticWebsiteInput };
+export type StaticWebsiteInput = StaticWebsite;
+//#endregion

package/dist/types/tailordb.generated.d.mts

@@ -3,13 +3,13 @@
  * Configuration for GraphQL operations on a TailorDB table.
  * All operations are enabled by default (undefined or true = enabled, false = disabled).
  */
-type GqlOperationsInput = "query" | {
+export type GqlOperationsInput = "query" | {
   create?: boolean | undefined;
   update?: boolean | undefined;
   delete?: boolean | undefined;
   read?: boolean | undefined;
 };
-type GqlOperations = {
+export type GqlOperations = {
   /** Enable create mutation (default: true) */
   create?: boolean | undefined;
   /** Enable update mutation (default: true) */
@@ -19,7 +19,7 @@ type GqlOperations = {
   /** Enable read queries - get, list, aggregation (default: true) */
   read?: boolean | undefined;
 };
-type DBFieldMetadata = {
+export type DBFieldMetadata = {
   /** Whether the field is required */
   required?: boolean | undefined;
   /** Whether the field is an array */
@@ -68,7 +68,7 @@ type DBFieldMetadata = {
   /** Default value for the field on create */
   default?: unknown;
 };
-type TailorDBTypeParsedSettings = {
+export type TailorDBTypeParsedSettings = {
   /** Custom plural form of the table name for GraphQL */
   pluralForm?: string | undefined;
   /** Enable aggregation queries for this table */
@@ -86,7 +86,7 @@ type TailorDBTypeParsedSettings = {
    */
   publishEvents?: boolean | undefined;
 };
-type RawPermissions = {
+export type RawPermissions = {
   record?: {
     create: readonly (readonly [(string | boolean | string[] | boolean[] | {
       user: string;
@@ -440,7 +440,7 @@ type RawPermissions = {
     description?: string | undefined;
   }[] | undefined;
 };
-type TailorDBServiceConfigInput = {
+export type TailorDBServiceConfigInput = {
   /** Glob patterns for TailorDB table definition files */
   files: string[];
   /** Glob patterns to exclude from table discovery */
@@ -464,5 +464,4 @@ type TailorDBServiceConfigInput = {
     read?: boolean | undefined;
   } | undefined;
 };
-//#endregion
-export { DBFieldMetadata, GqlOperations, GqlOperationsInput, RawPermissions, TailorDBServiceConfigInput, TailorDBTypeParsedSettings };
+//#endregion

package/dist/types/workflow.generated.d.mts

@@ -1,5 +1,5 @@
 //#region src/types/workflow.generated.d.ts
-type RetryPolicy = {
+export type RetryPolicy = {
   /** Maximum number of retries (1-10) */
   maxRetries: number;
   /** Initial backoff duration (e.g., '1s', '500ms', '1m', max 1h) */
@@ -9,9 +9,8 @@ type RetryPolicy = {
   /** Backoff multiplier (>= 1) */
   backoffMultiplier: number;
 };
-type ConcurrencyPolicy = {
+export type ConcurrencyPolicy = {
   /** Maximum number of concurrent executions (1-1000) */
   maxConcurrentExecutions: number;
 };
-//#endregion
-export { ConcurrencyPolicy, RetryPolicy };
+//#endregion

package/dist/utils/test/index.d.mts

@@ -15,7 +15,7 @@ import { StandardSchemaV1 } from "@standard-schema/spec";
  * @param type - TailorDB table definition
  * @returns A function that transforms input data according to field hooks
  */
-declare function createTailorDBHook<T extends TailorDBType<any, any>>(type: T): (data: unknown, now?: Date) => Partial<output<T>>;
+export declare function createTailorDBHook<T extends TailorDBType<any, any>>(type: T): (data: unknown, now?: Date) => Partial<output<T>>;
 /**
  * Creates the standard schema definition used to validate seed rows.
  * Runs the hook, then the table's own `validate`, and the field schema only when
@@ -27,7 +27,7 @@ declare function createTailorDBHook<T extends TailorDBType<any, any>>(type: T):
  * @param type - TailorDB table definition, when it carries a table-level `validate`
  * @returns Schema object with ~standard section for defineSchema
  */
-declare function createStandardSchema<T = Record<string, unknown>>(schemaType: TailorField<any, T>, hook: (data: unknown) => Partial<T>, type?: TailorDBType<any, any>): {
+export declare function createStandardSchema<T = Record<string, unknown>>(schemaType: TailorField<any, T>, hook: (data: unknown) => Partial<T>, type?: TailorDBType<any, any>): {
   readonly "~standard": {
     readonly version: 1;
     readonly vendor: "@tailor-platform/sdk";
@@ -36,5 +36,4 @@ declare function createStandardSchema<T = Record<string, unknown>>(schemaType: T
     };
   };
 };
-//#endregion
-export { createStandardSchema, createTailorDBHook };
+//#endregion

package/dist/vitest/index.d.mts

@@ -69,8 +69,8 @@ import { Plugin } from "vitest/config";
  * @param options.config - Path to tailor.config.ts to load SecretManager values into mock
  * @returns Array of Vite plugins
  */
-declare function tailorRuntime(options?: {
+export declare function tailorRuntime(options?: {
   config?: string;
 }): Plugin[];
 //#endregion
-export { type ExecutedPGliteQuery, type ExecutedQuery, type KyselyMock, type MockAigatewayOptions, type MockAuthconnectionOptions, type MockFileOptions, type MockIconvOptions, type MockIdpOptions, type MockLoggerOptions, type MockSecretmanagerOptions, type MockTailordbOptions, type MockTailordbPGliteOptions, type PGliteClient, type PGliteQueryResult, type QueryBehavior, type QueryMatch, type QueryMatcher, type RunWorkflowLocallyOptions, type Unmigrated, createKyselyMock, createKyselyPGlite, mockAigateway, mockAuthconnection, mockFile, mockIconv, mockIdp, mockLogger, mockSecretmanager, mockTailordb, mockTailordbWithPGlite, mockWorkflow, runWorkflowLocally, tailorRuntime };
+export { type ExecutedPGliteQuery, type ExecutedQuery, type KyselyMock, type MockAigatewayOptions, type MockAuthconnectionOptions, type MockFileOptions, type MockIconvOptions, type MockIdpOptions, type MockLoggerOptions, type MockSecretmanagerOptions, type MockTailordbOptions, type MockTailordbPGliteOptions, type PGliteClient, type PGliteQueryResult, type QueryBehavior, type QueryMatch, type QueryMatcher, type RunWorkflowLocallyOptions, type Unmigrated, createKyselyMock, createKyselyPGlite, mockAigateway, mockAuthconnection, mockFile, mockIconv, mockIdp, mockLogger, mockSecretmanager, mockTailordb, mockTailordbWithPGlite, mockWorkflow, runWorkflowLocally };

package/dist/vitest/mock-kysely.d.mts

@@ -1,7 +1,7 @@
 import { Kysely, OperationNode, OperationNodeKind, Transaction } from "kysely";
 //#region src/vitest/mock-kysely.d.ts
 /** A single statement executed against the mock, captured in order. */
-interface ExecutedQuery {
+export interface ExecutedQuery {
   /** The Kysely operation node kind, e.g. `"SelectQueryNode"`. */
   kind: OperationNodeKind;
   /** The compiled SQL string. */
@@ -24,7 +24,7 @@ type MockResult = MockRow[] | {
 };
 type QueryResolver = (query: ExecutedQuery) => MockResult | undefined;
 /** Controls and assertions for a {@link createKyselyMock} instance. */
-interface KyselyMock<DB> {
+export interface KyselyMock<DB> {
   /** The mock Kysely instance to run queries against. */
   db: Kysely<DB>;
   /** Every recorded query, in execution order. */
@@ -56,6 +56,5 @@ interface KyselyMock<DB> {
  * `createKyselyMock<Namespace["main-db"]>()`.
  * @returns A {@link KyselyMock} with the mock `db`, recorded queries, and result staging.
  */
-declare function createKyselyMock<DB = Record<string, never>>(): KyselyMock<DB>;
-//#endregion
-export { ExecutedQuery, KyselyMock, createKyselyMock };
+export declare function createKyselyMock<DB = Record<string, never>>(): KyselyMock<DB>;
+//#endregion

package/dist/vitest/mocks/aigateway.d.mts

@@ -4,7 +4,7 @@ interface AigatewayCall {
   name: AIGatewayName;
 }
 /** Initial fixtures for an AI Gateway mock. */
-interface MockAigatewayOptions {
+export interface MockAigatewayOptions {
   /** AI Gateway URLs available when the mock is acquired. */
   urls?: Partial<Record<AIGatewayName, string>>;
 }
@@ -25,7 +25,7 @@ interface MockAigatewayOptions {
  * });
  * ```
  */
-declare function mockAigateway(options?: MockAigatewayOptions): {
+export declare function mockAigateway(options?: MockAigatewayOptions): {
   /** The `get` `vi.fn`. */
   get: import("vitest").Mock<(name: AIGatewayName) => Promise<{
     url: string;
@@ -36,5 +36,4 @@ declare function mockAigateway(options?: MockAigatewayOptions): {
   clear(): void;
   reset(): void;
 } & Disposable;
-//#endregion
-export { MockAigatewayOptions, mockAigateway };
+//#endregion

package/dist/vitest/mocks/authconnection.d.mts

@@ -4,7 +4,7 @@ interface AuthConnectionCall {
   connectionName: ConnectionName;
 }
 /** Initial fixtures and fallback behavior for an AuthConnection mock. */
-interface MockAuthconnectionOptions {
+export interface MockAuthconnectionOptions {
   /** Tokens available when the mock is acquired. */
   tokens?: Partial<Record<ConnectionName, AuthConnectionTokenResult>>;
   /** Return a placeholder token or throw when a connection has no configured token. */
@@ -25,7 +25,7 @@ interface MockAuthconnectionOptions {
  * });
  * ```
  */
-declare function mockAuthconnection(options?: MockAuthconnectionOptions): {
+export declare function mockAuthconnection(options?: MockAuthconnectionOptions): {
   /** The `getConnectionToken` `vi.fn`. */
   getConnectionToken: import("vitest").Mock<(connectionName: ConnectionName) => Promise<AuthConnectionTokenResult>>;
   setTokens(value: Partial<Record<ConnectionName, AuthConnectionTokenResult>>): void;
@@ -34,5 +34,4 @@ declare function mockAuthconnection(options?: MockAuthconnectionOptions): {
   clear(): void;
   reset(): void;
 } & Disposable;
-//#endregion
-export { MockAuthconnectionOptions, mockAuthconnection };
+//#endregion

package/dist/vitest/mocks/file.d.mts

@@ -10,7 +10,7 @@ interface FileCall {
   recordId: string;
 }
 /** Controls fallback behavior for File calls without a configured result. */
-interface MockFileOptions {
+export interface MockFileOptions {
   /** Return a type-compatible fixture or throw when no behavior is configured. */
   onUnhandled?: "fallback" | "error";
 }
@@ -29,7 +29,7 @@ interface MockFileOptions {
  * });
  * ```
  */
-declare function mockFile(options?: MockFileOptions): {
+export declare function mockFile(options?: MockFileOptions): {
   setResolver(value: FileResolver): void;
   /**
    * Enqueue a single result for the next `tailordb.file` call.
@@ -54,5 +54,4 @@ declare function mockFile(options?: MockFileOptions): {
   downloadStream: Mock<(namespace: string, tableName: string, fieldName: string, recordId: string) => Promise<FileDownloadStreamResponse>>;
   uploadStream: Mock<(namespace: string, tableName: string, fieldName: string, recordId: string, readableStream: ReadableStream<Uint8Array | ArrayBuffer>, options?: FileUploadStreamOptions) => Promise<FileUploadResponse>>;
 } & Disposable;
-//#endregion
-export { MockFileOptions, mockFile };
+//#endregion

package/dist/vitest/mocks/iconv.d.mts

@@ -12,7 +12,7 @@ type ConvertBufferMockProcedure = (input: Uint8Array | ArrayBuffer, fromEncoding
 type EncodeMockProcedure = (input: string, encoding: string) => ConversionResult;
 type TypedOperationMock<RuntimeProcedure, MockProcedure extends (...args: never[]) => unknown> = RuntimeProcedure & MockInstance<MockProcedure>;
 /** Controls how unconfigured Iconv operations are handled. */
-interface MockIconvOptions {
+export interface MockIconvOptions {
   /** Return an empty type-compatible value or throw when no behavior is configured. */
   onUnhandled?: "fallback" | "error";
 }
@@ -31,7 +31,7 @@ interface MockIconvOptions {
  * });
  * ```
  */
-declare function mockIconv(options?: MockIconvOptions): {
+export declare function mockIconv(options?: MockIconvOptions): {
   /** The `convert` `vi.fn`. */
   convert: TypedOperationMock<(<T extends string>(str: string | Uint8Array | ArrayBuffer, fromEncoding: string, toEncoding: T) => T extends "UTF8" | "UTF-8" ? string : Uint8Array), ConvertMockProcedure>;
   /** The `convertBuffer` `vi.fn`. */
@@ -47,5 +47,4 @@ declare function mockIconv(options?: MockIconvOptions): {
   clear: () => void;
   reset(): void;
 } & Disposable;
-//#endregion
-export { MockIconvOptions, mockIconv };
+//#endregion

package/dist/vitest/mocks/idp.d.mts

@@ -9,7 +9,7 @@ interface IdpCall {
   namespace: string;
 }
 /** Controls fallback behavior for IdP calls without a configured result. */
-interface MockIdpOptions {
+export interface MockIdpOptions {
   /** Return a type-compatible fixture or throw when no behavior is configured. */
   onUnhandled?: "fallback" | "error";
 }
@@ -35,7 +35,7 @@ type IdpNamespaceMocks = { [Method in IdpMethod]: Mock<IdpClientInstance[Method]
  * });
  * ```
  */
-declare function mockIdp(options?: MockIdpOptions): {
+export declare function mockIdp(options?: MockIdpOptions): {
   /** The mock IDP `Client` constructor (`vi.fn`). */
   Client: Mock<IdpClientConstructor>;
   namespace: (name: string) => IdpNamespaceMocks;
@@ -56,5 +56,4 @@ declare function mockIdp(options?: MockIdpOptions): {
   clear(): void;
   reset(): void;
 } & Disposable;
-//#endregion
-export { MockIdpOptions, mockIdp };
+//#endregion

package/dist/vitest/mocks/logger.d.mts

@@ -8,7 +8,7 @@ interface LogCall {
   attributes?: LogAttributes;
 }
 /** Initial fixtures for a logger mock. */
-interface MockLoggerOptions {}
+export interface MockLoggerOptions {}
 /**
  * Acquire a disposable mock for `tailor.logger`. Each method is a `vi.fn`, so
  * calls can be asserted directly; `calls` returns the `debug`/`info`/`warn`/
@@ -26,7 +26,7 @@ interface MockLoggerOptions {}
  * });
  * ```
  */
-declare function mockLogger(_options?: MockLoggerOptions): {
+export declare function mockLogger(_options?: MockLoggerOptions): {
   /** The `debug` `vi.fn`. */
   debug: import("vitest").Mock<(_message: string, _attributes?: LogAttributes) => void>;
   /** The `info` `vi.fn`. */
@@ -41,5 +41,4 @@ declare function mockLogger(_options?: MockLoggerOptions): {
   clear(): void;
   reset(): void;
 } & Disposable;
-//#endregion
-export { MockLoggerOptions, mockLogger };
+//#endregion

package/dist/vitest/mocks/secretmanager.d.mts

@@ -6,7 +6,7 @@ interface SecretCall {
   names?: readonly string[];
 }
 /** Initial fixtures for a Secret Manager mock. */
-interface MockSecretmanagerOptions {
+export interface MockSecretmanagerOptions {
   /** Secrets to merge over fixtures inherited from the currently installed mock. */
   secrets?: Record<string, Record<string, string>>;
 }
@@ -28,7 +28,7 @@ interface MockSecretmanagerOptions {
  * });
  * ```
  */
-declare function mockSecretmanager(options?: MockSecretmanagerOptions): {
+export declare function mockSecretmanager(options?: MockSecretmanagerOptions): {
   /** The `getSecret` `vi.fn`. */
   getSecret: import("vitest").Mock<(vault: string, name: string) => Promise<string | undefined>>;
   /** The `getSecrets` `vi.fn`. */
@@ -40,5 +40,4 @@ declare function mockSecretmanager(options?: MockSecretmanagerOptions): {
   clear(): void;
   reset(): void;
 } & Disposable;
-//#endregion
-export { MockSecretmanagerOptions, mockSecretmanager };
+//#endregion

package/dist/vitest/mocks/tailordb-pglite.d.mts

@@ -1,7 +1,7 @@
 import { PGliteClient } from "../pglite-kysely.mjs";
 //#region src/vitest/mocks/tailordb-pglite.d.ts
 /** A query executed through the PGlite-backed TailorDB client. */
-interface ExecutedPGliteQuery {
+export interface ExecutedPGliteQuery {
   /** Namespace of the `getDB` call that issued the query. */
   namespace: string;
   /** SQL text with positional (`$1`, `$2`, ...) placeholders. */
@@ -10,7 +10,7 @@ interface ExecutedPGliteQuery {
   params: unknown[];
 }
 /** Options for {@link mockTailordbWithPGlite}. */
-interface MockTailordbPGliteOptions {
+export interface MockTailordbPGliteOptions {
   /**
    * PGlite instance per `getDB` namespace. A `getDB` call for a namespace
    * missing here throws instead of falling back to another instance. Pass the
@@ -57,7 +57,7 @@ interface CreatedClient {
  * });
  * ```
  */
-declare function mockTailordbWithPGlite(options: MockTailordbPGliteOptions): {
+export declare function mockTailordbWithPGlite(options: MockTailordbPGliteOptions): {
   /** The mock `tailordb.Client` constructor (`vi.fn`). */
   Client: import("vitest").Mock<(this: any, config?: {
     namespace?: string;
@@ -84,5 +84,4 @@ declare function mockTailordbWithPGlite(options: MockTailordbPGliteOptions): {
    */
   reset(): void;
 } & Disposable;
-//#endregion
-export { ExecutedPGliteQuery, MockTailordbPGliteOptions, mockTailordbWithPGlite };
+//#endregion

package/dist/vitest/mocks/tailordb.d.mts

@@ -1,21 +1,21 @@
 //#region src/vitest/mocks/tailordb.d.ts
 type QueryResolver = (query: string, params: unknown[]) => unknown[] | undefined;
 /** Controls how unmatched TailorDB queries are handled. */
-interface MockTailordbOptions {
+export interface MockTailordbOptions {
   /** Return an empty result or throw when no configured query behavior matches. */
   onUnhandled?: "fallback" | "error";
 }
 /** Matches a TailorDB query by SQL text and optionally by parameters. */
-interface QueryMatch {
+export interface QueryMatch {
   /** Exact SQL text or regular expression to match. */
   sql: string | RegExp;
   /** Exact parameters or a predicate for parameter matching. */
   params?: readonly unknown[] | ((params: unknown[]) => boolean);
 }
 /** Selects TailorDB queries that receive a configured response. */
-type QueryMatcher = string | RegExp | QueryMatch | ((query: string, params: unknown[]) => boolean);
+export type QueryMatcher = string | RegExp | QueryMatch | ((query: string, params: unknown[]) => boolean);
 /** Configures persistent and one-time responses for matched queries. */
-interface QueryBehavior<Row> {
+export interface QueryBehavior<Row> {
   /** Return these rows for every matching query after one-time responses are consumed. */
   returnsRows(rows: Row[]): QueryBehavior<Row>;
   /** Return these rows for the next matching query. */
@@ -59,7 +59,7 @@ declare class MockQueryResult {
  * });
  * ```
  */
-declare function mockTailordb(options?: MockTailordbOptions): {
+export declare function mockTailordb(options?: MockTailordbOptions): {
   /** The mock `tailordb.Client` constructor (`vi.fn`). */
   Client: import("vitest").Mock<(this: any, config?: {
     namespace?: string;
@@ -111,5 +111,4 @@ declare function mockTailordb(options?: MockTailordbOptions): {
   /** Reset query responses and recorded calls (keeps the mock installed). */
   reset(): void;
 } & Disposable;
-//#endregion
-export { MockTailordbOptions, QueryBehavior, QueryMatch, QueryMatcher, mockTailordb };
+//#endregion

package/dist/vitest/mocks/workflow.d.mts

@@ -37,7 +37,7 @@ type WaitPayload<Payload> = [Payload] extends [undefined] ? undefined : Payload;
  * });
  * ```
  */
-declare function mockWorkflow(): {
+export declare function mockWorkflow(): {
   /** The `execJobFunction` `vi.fn`. */
   execJobFunction: Mock<(jobName: string, _args?: unknown, _options?: ExecJobFunctionOptions) => unknown>;
   /** The `startWorkflow` `vi.fn`. */
@@ -156,5 +156,4 @@ declare function mockWorkflow(): {
   /** Reset all workflow responses and recorded calls (keeps the mock installed). */
   reset(): void;
 } & Disposable;
-//#endregion
-export { mockWorkflow };
+//#endregion

package/dist/vitest/pglite-kysely.d.mts

@@ -1,7 +1,7 @@
 import { ColumnType, Kysely } from "kysely";
 //#region src/vitest/pglite-kysely.d.ts
 /** Result of a {@link PGliteClient.query} call. */
-interface PGliteQueryResult {
+export interface PGliteQueryResult {
   /** Rows returned by the statement. */
   rows: unknown[];
   /** Number of rows an INSERT/UPDATE/DELETE touched. */
@@ -16,7 +16,7 @@ interface PGliteQueryResult {
  * {@link createKyselyPGlite}. Any client with a compatible `query`/`close`
  * pair works.
  */
-interface PGliteClient {
+export interface PGliteClient {
   /** Run a single SQL statement with positional (`$1`, `$2`, ...) parameters. */
   query(query: string, params?: unknown[]): Promise<PGliteQueryResult>;
   /** Release the underlying database. Called by `db.destroy()`. */
@@ -42,7 +42,7 @@ type UnmigratedColumn<C> = C extends ColumnType<infer S, infer I, infer U> ? Col
  * await db.transaction().execute((trx) => main(trx));
  * ```
  */
-type Unmigrated<DB> = { [T in keyof DB]: { [C in keyof DB[T]]: UnmigratedColumn<DB[T][C]>; }; };
+export type Unmigrated<DB> = { [T in keyof DB]: { [C in keyof DB[T]]: UnmigratedColumn<DB[T][C]>; }; };
 /**
  * Create a Kysely instance backed by a PGlite in-memory Postgres, for
  * executing a migration script's queries against real data in tests.
@@ -68,6 +68,5 @@ type Unmigrated<DB> = { [T in keyof DB]: { [C in keyof DB[T]]: UnmigratedColumn<
  * await db.transaction().execute((trx) => main(trx));
  * ```
  */
-declare function createKyselyPGlite<DB = Record<string, never>>(client: PGliteClient): Kysely<DB>;
-//#endregion
-export { PGliteClient, PGliteQueryResult, Unmigrated, createKyselyPGlite };
+export declare function createKyselyPGlite<DB = Record<string, never>>(client: PGliteClient): Kysely<DB>;
+//#endregion

package/dist/vitest/setup.d.mts

@@ -11,7 +11,7 @@ type SavedGlobals = Record<string, PropertyDescriptor | undefined>;
  * and restored only when the last test exits.
  * @returns Lifecycle hooks
  */
-declare function createBlockedGlobalsLifecycle(): {
+export declare function createBlockedGlobalsLifecycle(): {
   enter: (globalObj: Record<string, unknown>, keys: readonly string[]) => void;
   exit: (globalObj: Record<string, unknown>) => void;
   readonly active: number;
@@ -26,7 +26,7 @@ declare function createBlockedGlobalsLifecycle(): {
  * @param secrets - Value from `appConfig.secrets` or `config.secrets`
  * @returns Vault store, or null if the value is unusable
  */
-declare function extractVaultStore(secrets: unknown): Record<string, Record<string, string>> | null;
+export declare function extractVaultStore(secrets: unknown): Record<string, Record<string, string>> | null;
 /**
  * Load and parse secrets from a tailor.config.ts file.
  *
@@ -37,7 +37,7 @@ declare function extractVaultStore(secrets: unknown): Record<string, Record<stri
  * @param configPath - Absolute path to tailor.config.ts
  * @returns Vault store keyed by vault name, or null if unavailable
  */
-declare function loadSecretsFromConfig(configPath: string): Promise<Record<string, Record<string, string>> | null>;
+export declare function loadSecretsFromConfig(configPath: string): Promise<Record<string, Record<string, string>> | null>;
 /**
  * Remove the given globals from `globalObj`, returning the descriptors that
  * were actually deleted so `restoreBlockedGlobals` can put them back.
@@ -50,13 +50,12 @@ declare function loadSecretsFromConfig(configPath: string): Promise<Record<strin
  * @param keys - Property names to remove
  * @returns Map of removed descriptors keyed by property name
  */
-declare function removeBlockedGlobals(globalObj: Record<string, unknown>, keys: readonly string[]): SavedGlobals;
+export declare function removeBlockedGlobals(globalObj: Record<string, unknown>, keys: readonly string[]): SavedGlobals;
 /**
  * Restore previously-removed globals onto `globalObj` from a `SavedGlobals`
  * map produced by `removeBlockedGlobals`.
  * @param globalObj - Target object (typically `globalThis`)
  * @param saved - Descriptors to re-define
  */
-declare function restoreBlockedGlobals(globalObj: Record<string, unknown>, saved: SavedGlobals): void;
-//#endregion
-export { createBlockedGlobalsLifecycle, extractVaultStore, loadSecretsFromConfig, removeBlockedGlobals, restoreBlockedGlobals };
+export declare function restoreBlockedGlobals(globalObj: Record<string, unknown>, saved: SavedGlobals): void;
+//#endregion

package/dist/vitest/workflow-local.d.mts

@@ -7,7 +7,7 @@ type AnyWorkflowJob = WorkflowJob<string, any, any>;
 type AnyWorkflow = Workflow<AnyWorkflowJob>;
 type WorkflowInput<W extends AnyWorkflow> = W["mainJob"] extends WorkflowJob<string, infer I, any> ? I : never;
 type WorkflowOutput<W extends AnyWorkflow> = W["mainJob"] extends WorkflowJob<string, any, infer O> ? Awaited<O> : never;
-interface RunWorkflowLocallyOptions {
+export interface RunWorkflowLocallyOptions {
   /** Env passed to workflow job bodies during this local run. */
   env?: TailorEnv;
 }
@@ -20,7 +20,7 @@ interface RunWorkflowLocallyOptions {
  * @param workflow - Workflow definition to run
  * @returns The main job output
  */
-declare function runWorkflowLocally<W extends Workflow<WorkflowJob<string, undefined, any>>>(workflow: W): Promise<WorkflowOutput<W>>;
+export declare function runWorkflowLocally<W extends Workflow<WorkflowJob<string, undefined, any>>>(workflow: W): Promise<WorkflowOutput<W>>;
 /**
  * Run a no-input workflow locally with optional runner settings.
  * @param workflow - Workflow definition to run
@@ -28,7 +28,7 @@ declare function runWorkflowLocally<W extends Workflow<WorkflowJob<string, undef
  * @param options - Local runner options
  * @returns The main job output
  */
-declare function runWorkflowLocally<W extends Workflow<WorkflowJob<string, undefined, any>>>(workflow: W, args: undefined, options?: RunWorkflowLocallyOptions): Promise<WorkflowOutput<W>>;
+export declare function runWorkflowLocally<W extends Workflow<WorkflowJob<string, undefined, any>>>(workflow: W, args: undefined, options?: RunWorkflowLocallyOptions): Promise<WorkflowOutput<W>>;
 /**
  * Run a workflow locally with real job bodies.
  * @param workflow - Workflow definition to run
@@ -36,6 +36,5 @@ declare function runWorkflowLocally<W extends Workflow<WorkflowJob<string, undef
  * @param options - Local runner options
  * @returns The main job output
  */
-declare function runWorkflowLocally<W extends AnyWorkflow>(workflow: W, args: WorkflowInput<W>, options?: RunWorkflowLocallyOptions): Promise<WorkflowOutput<W>>;
-//#endregion
-export { RunWorkflowLocallyOptions, runWorkflowLocally };
+export declare function runWorkflowLocally<W extends AnyWorkflow>(workflow: W, args: WorkflowInput<W>, options?: RunWorkflowLocallyOptions): Promise<WorkflowOutput<W>>;
+//#endregion

package/docs/services/idp.md

@@ -163,7 +163,9 @@ defineIdp("my-idp", {
 
 **Email domains and social login:**
 
-- `allowedEmailDomains` - Restrict registration to these email domains. An empty list (the default) allows all domains, but a non-empty list is required when `allowGoogleOauth` or `allowMicrosoftOauth` is enabled.
+- `allowedEmailDomains` - Restrict registration to these email domains. Each entry is a hostname (`example.com`), matched exactly and case-insensitively, so `example.com` does not cover `sub.example.com`. Up to 100 entries.
+  - A lone `"*"` entry allows every email domain. It cannot be combined with any other entry, and it is the only way to enable `allowGoogleOauth` or `allowMicrosoftOauth` without enumerating domains.
+  - An empty list (the default) also allows every domain today, but that meaning is going away: a future release requires the all-domains state to be spelled out. `tailor deploy` warns while both forms still work, so set `["*"]` to keep allowing every domain, or list the domains you accept.
 - `allowGoogleOauth` - Enable the "Sign in with Google" button. Default `false`.
 - `allowMicrosoftOauth` - Enable the "Sign in with Microsoft" button. Default `false`.
 
@@ -202,8 +204,9 @@ defineIdp("my-idp", {
 
 - `passwordMinLength` must be less than or equal to `passwordMaxLength`.
 - A non-empty `allowedEmailDomains` cannot be combined with `useNonEmailIdentifier: true` (an empty list is allowed). Enabling `allowGoogleOauth` or `allowMicrosoftOauth` is likewise rejected with `useNonEmailIdentifier: true` (leaving them `false` or unset is fine).
-- `allowGoogleOauth` requires a non-empty `allowedEmailDomains`.
-- `allowMicrosoftOauth` requires both a non-empty `allowedEmailDomains` and `disablePasswordAuth: true`.
+- `allowGoogleOauth` requires a non-empty `allowedEmailDomains` (`["*"]` to allow every domain).
+- `allowMicrosoftOauth` requires both a non-empty `allowedEmailDomains` (`["*"]` to allow every domain) and `disablePasswordAuth: true`.
+- `allowedEmailDomains` entries must each be a hostname or `"*"`, must be unique when compared case-insensitively, and number at most 100. `"*"` cannot appear alongside another entry.
 - `disablePasswordAuth` requires `allowGoogleOauth` or `allowMicrosoftOauth`, and cannot be combined with `allowSelfPasswordReset`.
 - `requireMfa: true` requires `enableMfa: true`.
 - `enableMfa: true` requires at least one entry in `allowedReturnOrigins`.